From 4f993a906a5a780ec7a19ab8b249736a30cdfc7d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 01:39:14 +0800
Subject: [PATCH 001/255] fastlane traces: check and release status warn, scan
 reports fastlane-upload when a Fastfile / Appfile or a CI file or script
 still runs fastlane supply, deliver or pilot (file:line, storebound import
 fastlane); test, pitfall 96

---
 CHANGELOG.md                   |  4 +++
 cli/check.ts                   |  3 ++
 cli/lib/fastlane-traces.ts     | 66 ++++++++++++++++++++++++++++++++++
 cli/lib/scan/index.ts          | 10 ++++++
 cli/release.ts                 |  4 ++-
 skills/store-pitfalls/SKILL.md | 11 ++++++
 tests/fastlane-traces.test.ts  | 43 ++++++++++++++++++++++
 7 files changed, 140 insertions(+), 1 deletion(-)
 create mode 100644 cli/lib/fastlane-traces.ts
 create mode 100644 tests/fastlane-traces.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8bed5bc..e306175 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **fastlane left in a project is named.** `check` and `release status` warn and `scan` reports `fastlane-upload`
+  when a Fastfile / Appfile or a CI file or script still runs `fastlane supply`, `deliver` or `pilot`, with the
+  file:line and the way over (`storebound import fastlane`). Pitfall 96.
+
 ## 0.8.24 · 2026-10-21
 
 - **Windows: the MCP server starts.** `storebound install` writes `cmd /c npx -y storebound@<version> mcp` (or
diff --git a/cli/check.ts b/cli/check.ts
index 8b9368e..9147c00 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -34,6 +34,7 @@ import { creativeNote } from './shots/creative';
 import { type CapProject, capacitorProject, prebuildFor, staleMessage, webState } from './lib/web-assets';
 import { iphoneDuoNote } from './shots/spec';
 import { hitLine } from './lib/cross-store';
+import { FASTLANE_FIX, findFastlaneTraces, traceLine } from './lib/fastlane-traces';
 import { listingFileMentions } from './lib/listing-mentions';
 
 /** The newest .ipa in a folder (apple build's export), or null. */
@@ -95,6 +96,8 @@ export async function run(ctx: Ctx): Promise<void> {
     }
     return `${Object.keys(copy).length} locales`;
   });
+  // fastlane uploads left next to storebound (pitfall 96)
+  try { const tr = findFastlaneTraces(dirname(path)); if (tr.length) for (const t of tr) note(`${traceLine(t)} · ${FASTLANE_FIX}`); } catch (e) { warn('check', `fastlane traces: ${(e as Error).message}`); }
   // other platforms named in a store's text: App Store 2.3.10 / Play Metadata, a blocker (pitfall 77)
   try { for (const h of listingFileMentions(ctx.loaded)) problems.push(`other platform in ${hitLine(h)}`); } catch (e) { warn('check', `platform mentions: ${(e as Error).message}`); }
   // listing translation drafts (storebound listing translate): fine to keep working on, not to push unreviewed
diff --git a/cli/lib/fastlane-traces.ts b/cli/lib/fastlane-traces.ts
new file mode 100644
index 0000000..0a666ba
--- /dev/null
+++ b/cli/lib/fastlane-traces.ts
@@ -0,0 +1,66 @@
+// Fastlane left in a project storebound manages: a CI job or script that still uploads with `fastlane supply`
+// (or deliver / pilot) bypasses storebound's checks and fights its writes, and nothing said so (pitfall 96).
+// Offline and read-only: looks for Fastfile / Appfile, a fastlane/ folder and upload calls in CI files and scripts.
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+
+export interface FastlaneTrace {
+  file: string;
+  line: number;
+  text: string;
+  /** play (supply, upload_to_play_store), apple (deliver, pilot, upload_to_app_store / testflight) or both (a file). */
+  store: 'apple' | 'play' | 'both';
+}
+
+const UPLOAD = /\b(supply|upload_to_play_store|deliver|upload_to_app_store|pilot|upload_to_testflight)\b/;
+/** A fastlane command line in CI / scripts: `fastlane supply`, `bundle exec fastlane run deliver`, `fastlane pilot upload`. */
+const CLI_CALL = /\bfastlane\s+(?:run\s+)?(supply|upload_to_play_store|deliver|upload_to_app_store|pilot|upload_to_testflight)\b/;
+const PLAY = new Set(['supply', 'upload_to_play_store']);
+const FASTLANE_DIRS = ['', 'ios', 'android', 'ios/App', 'android/app'];
+const CI_FILES = ['Jenkinsfile', '.gitlab-ci.yml', 'bitrise.yml', 'codemagic.yaml', 'azure-pipelines.yml', 'Makefile', 'package.json', 'appcenter-post-build.sh'];
+const CI_DIRS = ['.github/workflows', '.forgejo/workflows', '.gitea/workflows', '.circleci', 'scripts', 'ci', '.ci', 'tools'];
+const SCRIPT_EXT = /\.(ya?ml|sh|bash|zsh|ps1|groovy|rb|mjs|js|ts|json)$/i;
+
+const storeOf = (m: string): 'apple' | 'play' => (PLAY.has(m) ? 'play' : 'apple');
+
+function lines(file: string): string[] {
+  try { return statSync(file).size > 2_000_000 ? [] : readFileSync(file, 'utf8').split(/\r?\n/); } catch { return []; }
+}
+
+export function findFastlaneTraces(root: string): FastlaneTrace[] {
+  const out: FastlaneTrace[] = [];
+  const rel = (p: string) => relative(root, p).split(sep).join('/');
+  const seen = new Set<string>();
+  // Fastfile / Appfile (in fastlane/ or next to it): the file itself, plus each upload action it calls
+  for (const d of FASTLANE_DIRS) {
+    for (const f of [join(root, d, 'fastlane', 'Fastfile'), join(root, d, 'Fastfile'), join(root, d, 'fastlane', 'Appfile'), join(root, d, 'Appfile')]) {
+      if (seen.has(f) || !existsSync(f)) continue;
+      seen.add(f);
+      const ls = lines(f);
+      let calls = 0;
+      ls.forEach((l, i) => {
+        const m = UPLOAD.exec(l.replace(/#.*/, ''));
+        if (m && /Fastfile$/.test(f)) { out.push({ file: rel(f), line: i + 1, text: l.trim(), store: storeOf(m[1]!) }); calls++; }
+      });
+      if (!calls) out.push({ file: rel(f), line: 1, text: ls.find(l => l.trim())?.trim() ?? '', store: 'both' });
+    }
+  }
+  // CI files and scripts that run fastlane uploads
+  const files = CI_FILES.map(f => join(root, f)).filter(f => existsSync(f));
+  for (const d of CI_DIRS) {
+    const dir = join(root, d);
+    try { for (const n of readdirSync(dir)) if (SCRIPT_EXT.test(n)) files.push(join(dir, n)); } catch { /* none */ }
+  }
+  try { for (const n of readdirSync(root)) if (/\.(sh|bash|ps1)$/i.test(n)) files.push(join(root, n)); } catch { /* unreadable */ }
+  for (const f of new Set(files)) {
+    lines(f).forEach((l, i) => {
+      const m = CLI_CALL.exec(l);
+      if (m) out.push({ file: rel(f), line: i + 1, text: l.trim().slice(0, 200), store: storeOf(m[1]!) });
+    });
+  }
+  return out;
+}
+
+export const FASTLANE_FIX = 'uploads outside storebound skip its checks and overwrite its listing: run `storebound import fastlane` (MCP import_fastlane), then replace the call with the storebound command (play upload / apple upload) (pitfall 96)';
+
+export const traceLine = (t: FastlaneTrace): string => `fastlane in ${t.file}:${t.line}${t.text ? `: ${t.text}` : ''}`;
diff --git a/cli/lib/scan/index.ts b/cli/lib/scan/index.ts
index 5b88cff..c692d81 100644
--- a/cli/lib/scan/index.ts
+++ b/cli/lib/scan/index.ts
@@ -10,6 +10,7 @@ import { AI_FIX_RULES, scanFixAction } from '../fix-actions';
 import { proposeDeclarations, type Proposal } from './declare';
 import { detectProject, ECO_LABEL, type ProjectFacts, type Stack, where } from './project';
 import type { OriginalityReport } from '../originality';
+import { FASTLANE_FIX, findFastlaneTraces } from '../fastlane-traces';
 import { APPLE_GUIDELINES, applyIgnore, type ScanFinding, scanRules, type Severity, sortScan, unusedIgnores } from './rules';
 import type { SdkCategory } from './sdks';
 
@@ -73,6 +74,15 @@ export async function runScan(dir: string, o: { config?: string } = {}): Promise
           fix: g.fix ?? '', skill: 'game-services', ref: 'https://developer.android.com/games/pgs/android/android-start' });
     } catch { /* unreadable Android project */ }
   }
+  // fastlane still uploading next to storebound (pitfall 96)
+  const traces = findFastlaneTraces(dir);
+  for (const store of ['apple', 'play'] as const) {
+    if (config && !config[store]) continue;
+    const ev = traces.filter(t => t.store === store || t.store === 'both');
+    if (ev.length && !(config?.scan?.ignore ?? []).some(i => i.rule === 'fastlane-upload'))
+      findings.push({ rule: 'fastlane-upload', guideline: 'storebound workflow', store, severity: 'medium', title: `fastlane still in the project (${ev.length} place${ev.length > 1 ? 's' : ''}); uploads there bypass storebound`,
+        evidence: ev.map(t => ({ file: t.file, line: t.line, text: t.text })), fix: FASTLANE_FIX, skill: 'migrate-from-fastlane', ref: 'https://git.crt.fyi/CRT/storebound/src/branch/main/skills/migrate-from-fastlane/SKILL.md' });
+  }
   for (const f of findings) {
     const action = f.accepted ? undefined : scanFixAction(f.rule, { configPath, declarationsChanged: declarations.changed });
     if (action) f.action = action;
diff --git a/cli/release.ts b/cli/release.ts
index dfaf404..c31ef2f 100644
--- a/cli/release.ts
+++ b/cli/release.ts
@@ -21,6 +21,7 @@ import { laneOf, laneText, type PlanStep, releasePlan, type ReleasePlan, sameVer
 import type { Finding } from './lib/validate-rules';
 import { findWorkspace, loadWorkspace, resolveApps, selectApps } from './lib/workspace';
 import { appDir, appEnv, workspaceApps } from './workspace';
+import { FASTLANE_FIX, findFastlaneTraces, traceLine } from './lib/fastlane-traces';
 
 interface Target { name: string; dir: string; virtual: boolean; env: Record<string, string>; problems: string[] }
 
@@ -94,7 +95,7 @@ async function status(args: Args): Promise<void> {
   const read = await pool(list, concurrency, async t => ({ t, s: await readLive(t) }));
   if (args.has('json')) {
     printJson({ apps: read.map(({ t, s }) => ({
-      app: t.name, folder: t.virtual ? null : t.dir, errors: [...t.problems, ...s.errors], warnings: s.warnings ?? [], storeErrors: s.storeErrors,
+      app: t.name, folder: t.virtual ? null : t.dir, errors: [...t.problems, ...s.errors], warnings: [...(s.warnings ?? []), ...(t.virtual ? [] : findFastlaneTraces(t.dir).map(f => `${traceLine(f)} · ${FASTLANE_FIX}`))], storeErrors: s.storeErrors,
       trains: trainsOf(s, all).map(({ which, train }) => ({ which, version: train.version, ios: train.ios, android: train.android,
         lanes: { ios: laneOf('ios', train.ios), android: laneOf('android', train.android) } })),
     })), at: new Date().toISOString() });
@@ -106,6 +107,7 @@ async function status(args: Args): Promise<void> {
       if (!trains.length) rows.push([t.name, '', '', s.errors[0] ? `error: ${s.errors[0]}` : unread ? 'not read (see the warnings)' : 'no version on either store yet', '']);
       for (const { which, train } of trains) rows.push([t.name, train.version, which === 'other' ? '' : which, cell('ios', train, s), cell('android', train, s)]);
       for (const w of s.warnings ?? []) warn('release', `${t.name}: ${w}`);
+      if (!t.virtual) for (const f of findFastlaneTraces(t.dir)) warn('release', `${t.name}: ${traceLine(f)} · ${FASTLANE_FIX}`);
       for (const p of [...t.problems, ...s.errors.slice(trains.length ? 0 : 1), ...Object.entries(s.storeErrors).map(([k, v]) => `${k}: ${v}`)]) warn('release', `${t.name}: ${p}`);
     }
     console.log(textTable(['app', 'version', 'train', 'App Store', 'Google Play'], rows));
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 68af0d1..322ab96 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1166,3 +1166,14 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Do:** run the command again later; after a release, warm the CDN cache by fetching every installer once.
 - **Guard:** `download` in `cli/desktop.ts` reads in chunks, prints progress every 10 % and fails after 60 s without
   data (`tests/desktop-dist.test.ts`).
+
+## 96. A project still uploaded with fastlane and storebound never said so
+- **Symptom:** the Play listing or build changed behind storebound's back; CI ran `fastlane supply` (or `deliver` /
+  `pilot`) next to the storebound config, and `check`, `scan` and `release status` were all quiet.
+- **Cause:** storebound looked only at its own config; fastlane files and CI upload calls were never read.
+- **Do:** run `storebound import fastlane` (MCP `import_fastlane`) to bring the metadata over, then replace each
+  upload call with the storebound command and remove the lane. Keep a lane only on purpose (`scan.ignore`
+  `fastlane-upload` with the reason).
+- **Guard:** `findFastlaneTraces` in `cli/lib/fastlane-traces.ts` (Fastfile / Appfile, CI files and scripts with
+  `fastlane supply|deliver|pilot`); `check` warns, `scan` reports `fastlane-upload` with file:line, `release status`
+  warns per app (`tests/fastlane-traces.test.ts`).
diff --git a/tests/fastlane-traces.test.ts b/tests/fastlane-traces.test.ts
new file mode 100644
index 0000000..c0e30e9
--- /dev/null
+++ b/tests/fastlane-traces.test.ts
@@ -0,0 +1,43 @@
+// fastlane left in a project (Fastfile, CI calls to supply / deliver / pilot) is found and named (pitfall 96).
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { findFastlaneTraces, traceLine } from '../cli/lib/fastlane-traces';
+import { runScan } from '../cli/lib/scan';
+
+function project(files: Record<string, string>): string {
+  const dir = mkdtempSync(join(tmpdir(), 'sb-fl-'));
+  for (const [p, text] of Object.entries(files)) { mkdirSync(join(dir, p, '..'), { recursive: true }); writeFileSync(join(dir, p), text); }
+  return dir;
+}
+
+describe('fastlane traces', () => {
+  test('Fastfile actions, Appfile, and CI / script calls with file:line', () => {
+    const dir = project({
+      'android/fastlane/Fastfile': 'lane :ship do\n  # supply in a comment is not a call\n  supply(track: "internal")\nend\n',
+      'fastlane/Appfile': 'app_identifier("com.example.game")\n',
+      'Jenkinsfile': 'stage("upload") {\n  sh "bundle exec fastlane supply --aab app.aab"\n}\n',
+      '.github/workflows/ios.yml': 'steps:\n  - run: fastlane pilot upload\n',
+      'scripts/release.sh': 'echo fastlane is fine to mention\n',
+    });
+    const t = findFastlaneTraces(dir);
+    expect(t).toContainEqual({ file: 'android/fastlane/Fastfile', line: 3, text: 'supply(track: "internal")', store: 'play' });
+    expect(t).toContainEqual({ file: 'fastlane/Appfile', line: 1, text: 'app_identifier("com.example.game")', store: 'both' });
+    expect(t).toContainEqual({ file: 'Jenkinsfile', line: 2, text: 'sh "bundle exec fastlane supply --aab app.aab"', store: 'play' });
+    expect(t).toContainEqual({ file: '.github/workflows/ios.yml', line: 2, text: '- run: fastlane pilot upload', store: 'apple' });
+    expect(t.some(x => x.file === 'scripts/release.sh')).toBe(false);
+    expect(t.filter(x => x.file === 'android/fastlane/Fastfile')).toHaveLength(1);
+    expect(traceLine(t.find(x => x.file === 'Jenkinsfile')!)).toBe('fastlane in Jenkinsfile:2: sh "bundle exec fastlane supply --aab app.aab"');
+  });
+  test('a project without fastlane has no traces', () => {
+    expect(findFastlaneTraces(project({ 'package.json': '{"scripts":{"build":"vite build"}}' }))).toEqual([]);
+  });
+  test('scan reports fastlane-upload with the evidence lines', async () => {
+    const dir = project({ 'Jenkinsfile': 'sh "fastlane supply"\n' });
+    const { report } = await runScan(dir, {});
+    const f = report.findings.find(x => x.rule === 'fastlane-upload' && x.store === 'play');
+    expect(f?.evidence[0]).toMatchObject({ file: 'Jenkinsfile', line: 1 });
+    expect(f?.fix).toContain('storebound import fastlane');
+  });
+});

From 62eb010998e173c15b3c58d5fade0fa76f70cf1e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 00:59:03 +0700
Subject: [PATCH 002/255] storebound 0.8.25: version in package.json and every
 copy, CHANGELOG 0.8.25 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index b8dfe47..40ac3a9 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.24",
+      "version": "0.8.25",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 39866c9..6e1a9e5 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.24",
+  "version": "0.8.25",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 841c6ac..6821e9c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.24",
+  "version": "0.8.25",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e306175..1ae1e16 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.8.25 · 2026-10-21
+
 - **fastlane left in a project is named.** `check` and `release status` warn and `scan` reports `fastlane-upload`
   when a Fastfile / Appfile or a CI file or script still runs `fastlane supply`, `deliver` or `pilot`, with the
   file:line and the way over (`storebound import fastlane`). Pitfall 96.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index d1be11a..72b47c9 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.24",
+  "version": "0.8.25",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ec08b77..368d239 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4010,7 +4010,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.24"
+version = "0.8.25"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index f81a7e5..e1f9e34 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.24"
+version = "0.8.25"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 122f7ad..1ff5db7 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.24",
+  "version": "0.8.25",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index a6f0276..9571d0f 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.24",
+  "version": "0.8.25",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b327a24..e5f365b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.24",
+  "version": "0.8.25",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 4fcee60ba66f4fa43bc82c9e7666e410d3092ab3 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:04:28 +0800
Subject: [PATCH 003/255] Direct store API calls in a project's scripts:
 androidpublisher.googleapis.com, the googleapis androidpublisher client,
 api.appstoreconnect.apple.com, altool / Transporter in CI files and scripts;
 scan rule direct-store-api, check and release status warnings with file:line
 and the storebound command; storebound's own checkout skipped; test, pitfall
 97

---
 CHANGELOG.md                   |  4 ++++
 cli/check.ts                   |  4 ++--
 cli/lib/fastlane-traces.ts     | 29 ++++++++++++++++++++++++++---
 cli/lib/scan/index.ts          | 10 +++++++++-
 cli/release.ts                 |  6 +++---
 skills/store-pitfalls/SKILL.md | 12 ++++++++++++
 tests/fastlane-traces.test.ts  | 17 ++++++++++++++++-
 7 files changed, 72 insertions(+), 10 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e306175..9d0b8bb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **Scripts that call the store APIs themselves are named.** `androidpublisher.googleapis.com`, the googleapis
+  androidpublisher client, `api.appstoreconnect.apple.com`, altool and Transporter in CI files and scripts: `check` and
+  `release status` warn, `scan` reports `direct-store-api`, each with file:line and the storebound command. Pitfall 97.
+
 - **fastlane left in a project is named.** `check` and `release status` warn and `scan` reports `fastlane-upload`
   when a Fastfile / Appfile or a CI file or script still runs `fastlane supply`, `deliver` or `pilot`, with the
   file:line and the way over (`storebound import fastlane`). Pitfall 96.
diff --git a/cli/check.ts b/cli/check.ts
index 9147c00..2e2ebd0 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -34,7 +34,7 @@ import { creativeNote } from './shots/creative';
 import { type CapProject, capacitorProject, prebuildFor, staleMessage, webState } from './lib/web-assets';
 import { iphoneDuoNote } from './shots/spec';
 import { hitLine } from './lib/cross-store';
-import { FASTLANE_FIX, findFastlaneTraces, traceLine } from './lib/fastlane-traces';
+import { findFastlaneTraces, traceMessage } from './lib/fastlane-traces';
 import { listingFileMentions } from './lib/listing-mentions';
 
 /** The newest .ipa in a folder (apple build's export), or null. */
@@ -97,7 +97,7 @@ export async function run(ctx: Ctx): Promise<void> {
     return `${Object.keys(copy).length} locales`;
   });
   // fastlane uploads left next to storebound (pitfall 96)
-  try { const tr = findFastlaneTraces(dirname(path)); if (tr.length) for (const t of tr) note(`${traceLine(t)} · ${FASTLANE_FIX}`); } catch (e) { warn('check', `fastlane traces: ${(e as Error).message}`); }
+  try { const tr = findFastlaneTraces(dirname(path)); if (tr.length) for (const t of tr) note(traceMessage(t)); } catch (e) { warn('check', `fastlane traces: ${(e as Error).message}`); }
   // other platforms named in a store's text: App Store 2.3.10 / Play Metadata, a blocker (pitfall 77)
   try { for (const h of listingFileMentions(ctx.loaded)) problems.push(`other platform in ${hitLine(h)}`); } catch (e) { warn('check', `platform mentions: ${(e as Error).message}`); }
   // listing translation drafts (storebound listing translate): fine to keep working on, not to push unreviewed
diff --git a/cli/lib/fastlane-traces.ts b/cli/lib/fastlane-traces.ts
index 0a666ba..ddc0668 100644
--- a/cli/lib/fastlane-traces.ts
+++ b/cli/lib/fastlane-traces.ts
@@ -10,16 +10,30 @@ export interface FastlaneTrace {
   text: string;
   /** play (supply, upload_to_play_store), apple (deliver, pilot, upload_to_app_store / testflight) or both (a file). */
   store: 'apple' | 'play' | 'both';
+  /** fastlane, or a script that calls a store API / upload tool itself (no fastlane, same bypass). */
+  via?: 'api';
+  /** The storebound command that replaces it (api traces). */
+  fix?: string;
 }
 
+/** Store APIs and upload tools called by a project's own scripts: each with its storebound replacement. */
+const DIRECT: { re: RegExp; store: 'apple' | 'play'; what: string; fix: string }[] = [
+  { re: /androidpublisher\.googleapis\.com|\bandroidpublisher\s*\(|google\.androidpublisher|['"]androidpublisher['"]/, store: 'play', what: 'Google Play Developer API called directly',
+    fix: 'use storebound: play upload / play release (MCP play_release_testing), play images (play_images), play listing pull (play_listing_pull) (pitfall 97)' },
+  { re: /api\.appstoreconnect\.apple\.com/, store: 'apple', what: 'App Store Connect API called directly',
+    fix: 'use storebound: apple upload / apple submit / apple listing / apple screenshots (MCP apple_* tools) (pitfall 97)' },
+  { re: /\baltool\b|iTMSTransporter|\bTransporter\b/, store: 'apple', what: 'altool / Transporter upload',
+    fix: 'use storebound apple upload (MCP apple_upload) (pitfall 97)' },
+];
+
 const UPLOAD = /\b(supply|upload_to_play_store|deliver|upload_to_app_store|pilot|upload_to_testflight)\b/;
 /** A fastlane command line in CI / scripts: `fastlane supply`, `bundle exec fastlane run deliver`, `fastlane pilot upload`. */
 const CLI_CALL = /\bfastlane\s+(?:run\s+)?(supply|upload_to_play_store|deliver|upload_to_app_store|pilot|upload_to_testflight)\b/;
 const PLAY = new Set(['supply', 'upload_to_play_store']);
 const FASTLANE_DIRS = ['', 'ios', 'android', 'ios/App', 'android/app'];
 const CI_FILES = ['Jenkinsfile', '.gitlab-ci.yml', 'bitrise.yml', 'codemagic.yaml', 'azure-pipelines.yml', 'Makefile', 'package.json', 'appcenter-post-build.sh'];
-const CI_DIRS = ['.github/workflows', '.forgejo/workflows', '.gitea/workflows', '.circleci', 'scripts', 'ci', '.ci', 'tools'];
-const SCRIPT_EXT = /\.(ya?ml|sh|bash|zsh|ps1|groovy|rb|mjs|js|ts|json)$/i;
+const CI_DIRS = ['.github/workflows', '.forgejo/workflows', '.gitea/workflows', '.circleci', 'scripts', 'ci', '.ci', 'tools', 'bin', 'deploy', 'release', 'ops'];
+const SCRIPT_EXT = /\.(ya?ml|sh|bash|zsh|ps1|groovy|rb|py|mjs|cjs|js|ts|json)$/i;
 
 const storeOf = (m: string): 'apple' | 'play' => (PLAY.has(m) ? 'play' : 'apple');
 
@@ -29,6 +43,8 @@ function lines(file: string): string[] {
 
 export function findFastlaneTraces(root: string): FastlaneTrace[] {
   const out: FastlaneTrace[] = [];
+  // storebound's own checkout calls the store APIs by design
+  try { if ((JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')) as { name?: string }).name === 'storebound') return out; } catch { /* no package.json */ }
   const rel = (p: string) => relative(root, p).split(sep).join('/');
   const seen = new Set<string>();
   // Fastfile / Appfile (in fastlane/ or next to it): the file itself, plus each upload action it calls
@@ -56,6 +72,10 @@ export function findFastlaneTraces(root: string): FastlaneTrace[] {
     lines(f).forEach((l, i) => {
       const m = CLI_CALL.exec(l);
       if (m) out.push({ file: rel(f), line: i + 1, text: l.trim().slice(0, 200), store: storeOf(m[1]!) });
+      else if (!/package\.json$/.test(f) || /"[^"]*"\s*:\s*"/.test(l)) {
+        const d = DIRECT.find(x => x.re.test(l));
+        if (d) out.push({ file: rel(f), line: i + 1, text: l.trim().slice(0, 200), store: d.store, via: 'api', fix: d.fix });
+      }
     });
   }
   return out;
@@ -63,4 +83,7 @@ export function findFastlaneTraces(root: string): FastlaneTrace[] {
 
 export const FASTLANE_FIX = 'uploads outside storebound skip its checks and overwrite its listing: run `storebound import fastlane` (MCP import_fastlane), then replace the call with the storebound command (play upload / apple upload) (pitfall 96)';
 
-export const traceLine = (t: FastlaneTrace): string => `fastlane in ${t.file}:${t.line}${t.text ? `: ${t.text}` : ''}`;
+export const traceLine = (t: FastlaneTrace): string => `${t.via === 'api' ? `${DIRECT.find(d => d.fix === t.fix)?.what ?? 'store API called directly'} in` : 'fastlane in'} ${t.file}:${t.line}${t.text ? `: ${t.text}` : ''}`;
+
+/** The warning for one trace: where, and the storebound way. */
+export const traceMessage = (t: FastlaneTrace): string => `${traceLine(t)} · ${t.fix ?? FASTLANE_FIX}`;
diff --git a/cli/lib/scan/index.ts b/cli/lib/scan/index.ts
index c692d81..81e3680 100644
--- a/cli/lib/scan/index.ts
+++ b/cli/lib/scan/index.ts
@@ -78,11 +78,19 @@ export async function runScan(dir: string, o: { config?: string } = {}): Promise
   const traces = findFastlaneTraces(dir);
   for (const store of ['apple', 'play'] as const) {
     if (config && !config[store]) continue;
-    const ev = traces.filter(t => t.store === store || t.store === 'both');
+    const ev = traces.filter(t => !t.via && (t.store === store || t.store === 'both'));
     if (ev.length && !(config?.scan?.ignore ?? []).some(i => i.rule === 'fastlane-upload'))
       findings.push({ rule: 'fastlane-upload', guideline: 'storebound workflow', store, severity: 'medium', title: `fastlane still in the project (${ev.length} place${ev.length > 1 ? 's' : ''}); uploads there bypass storebound`,
         evidence: ev.map(t => ({ file: t.file, line: t.line, text: t.text })), fix: FASTLANE_FIX, skill: 'migrate-from-fastlane', ref: 'https://git.crt.fyi/CRT/storebound/src/branch/main/skills/migrate-from-fastlane/SKILL.md' });
   }
+  // the project's own scripts call a store API or upload tool (pitfall 97)
+  for (const store of ['apple', 'play'] as const) {
+    if (config && !config[store]) continue;
+    const ev = traces.filter(t => t.via === 'api' && t.store === store);
+    if (ev.length && !(config?.scan?.ignore ?? []).some(i => i.rule === 'direct-store-api'))
+      findings.push({ rule: 'direct-store-api', guideline: 'storebound workflow', store, severity: 'medium', title: `scripts call the ${store === 'play' ? 'Google Play' : 'App Store Connect'} API or an upload tool directly (${ev.length} place${ev.length > 1 ? 's' : ''}); they bypass storebound`,
+        evidence: ev.map(t => ({ file: t.file, line: t.line, text: t.text })), fix: ev[0]!.fix!, skill: 'store-api', ref: 'https://git.crt.fyi/CRT/storebound/src/branch/main/skills/store-api/SKILL.md' });
+  }
   for (const f of findings) {
     const action = f.accepted ? undefined : scanFixAction(f.rule, { configPath, declarationsChanged: declarations.changed });
     if (action) f.action = action;
diff --git a/cli/release.ts b/cli/release.ts
index c31ef2f..fc217c1 100644
--- a/cli/release.ts
+++ b/cli/release.ts
@@ -21,7 +21,7 @@ import { laneOf, laneText, type PlanStep, releasePlan, type ReleasePlan, sameVer
 import type { Finding } from './lib/validate-rules';
 import { findWorkspace, loadWorkspace, resolveApps, selectApps } from './lib/workspace';
 import { appDir, appEnv, workspaceApps } from './workspace';
-import { FASTLANE_FIX, findFastlaneTraces, traceLine } from './lib/fastlane-traces';
+import { findFastlaneTraces, traceMessage } from './lib/fastlane-traces';
 
 interface Target { name: string; dir: string; virtual: boolean; env: Record<string, string>; problems: string[] }
 
@@ -95,7 +95,7 @@ async function status(args: Args): Promise<void> {
   const read = await pool(list, concurrency, async t => ({ t, s: await readLive(t) }));
   if (args.has('json')) {
     printJson({ apps: read.map(({ t, s }) => ({
-      app: t.name, folder: t.virtual ? null : t.dir, errors: [...t.problems, ...s.errors], warnings: [...(s.warnings ?? []), ...(t.virtual ? [] : findFastlaneTraces(t.dir).map(f => `${traceLine(f)} · ${FASTLANE_FIX}`))], storeErrors: s.storeErrors,
+      app: t.name, folder: t.virtual ? null : t.dir, errors: [...t.problems, ...s.errors], warnings: [...(s.warnings ?? []), ...(t.virtual ? [] : findFastlaneTraces(t.dir).map(traceMessage))], storeErrors: s.storeErrors,
       trains: trainsOf(s, all).map(({ which, train }) => ({ which, version: train.version, ios: train.ios, android: train.android,
         lanes: { ios: laneOf('ios', train.ios), android: laneOf('android', train.android) } })),
     })), at: new Date().toISOString() });
@@ -107,7 +107,7 @@ async function status(args: Args): Promise<void> {
       if (!trains.length) rows.push([t.name, '', '', s.errors[0] ? `error: ${s.errors[0]}` : unread ? 'not read (see the warnings)' : 'no version on either store yet', '']);
       for (const { which, train } of trains) rows.push([t.name, train.version, which === 'other' ? '' : which, cell('ios', train, s), cell('android', train, s)]);
       for (const w of s.warnings ?? []) warn('release', `${t.name}: ${w}`);
-      if (!t.virtual) for (const f of findFastlaneTraces(t.dir)) warn('release', `${t.name}: ${traceLine(f)} · ${FASTLANE_FIX}`);
+      if (!t.virtual) for (const f of findFastlaneTraces(t.dir)) warn('release', `${t.name}: ${traceMessage(f)}`);
       for (const p of [...t.problems, ...s.errors.slice(trains.length ? 0 : 1), ...Object.entries(s.storeErrors).map(([k, v]) => `${k}: ${v}`)]) warn('release', `${t.name}: ${p}`);
     }
     console.log(textTable(['app', 'version', 'train', 'App Store', 'Google Play'], rows));
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 322ab96..3e3eb02 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1177,3 +1177,15 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `findFastlaneTraces` in `cli/lib/fastlane-traces.ts` (Fastfile / Appfile, CI files and scripts with
   `fastlane supply|deliver|pilot`); `check` warns, `scan` reports `fastlane-upload` with file:line, `release status`
   warns per app (`tests/fastlane-traces.test.ts`).
+
+## 97. The project's own scripts called the store APIs (no fastlane, same bypass)
+- **Symptom:** an app uploaded AABs, set the track and rollout, pushed listing images and read the listing back with
+  three hand-written scripts (a self-signed JWT against `androidpublisher.googleapis.com`); storebound said nothing.
+- **Cause:** pitfall 96 looked only for fastlane; direct API calls and upload tools (altool, Transporter) were not read.
+- **Do:** replace each script with the storebound command: `play upload` / `play release` (MCP `play_release_testing`),
+  `play images` (`play_images`), `play listing pull` (`play_listing_pull`); for Apple `apple upload` and the other
+  `apple` commands (MCP `apple_*`). Keep one on purpose only with `scan.ignore` `direct-store-api` and the reason.
+- **Guard:** `findFastlaneTraces` in `cli/lib/fastlane-traces.ts` also reports `androidpublisher.googleapis.com`, the
+  googleapis androidpublisher client, `api.appstoreconnect.apple.com`, `altool` / `iTMSTransporter` in CI files and
+  scripts (not storebound's own checkout, never node_modules); `scan` rule `direct-store-api`, `check` and
+  `release status` warnings with file:line and the storebound command (`tests/fastlane-traces.test.ts`).
diff --git a/tests/fastlane-traces.test.ts b/tests/fastlane-traces.test.ts
index c0e30e9..5b7a4df 100644
--- a/tests/fastlane-traces.test.ts
+++ b/tests/fastlane-traces.test.ts
@@ -3,7 +3,7 @@ import { describe, expect, test } from 'bun:test';
 import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { findFastlaneTraces, traceLine } from '../cli/lib/fastlane-traces';
+import { findFastlaneTraces, traceLine, traceMessage } from '../cli/lib/fastlane-traces';
 import { runScan } from '../cli/lib/scan';
 
 function project(files: Record<string, string>): string {
@@ -30,6 +30,21 @@ describe('fastlane traces', () => {
     expect(t.filter(x => x.file === 'android/fastlane/Fastfile')).toHaveLength(1);
     expect(traceLine(t.find(x => x.file === 'Jenkinsfile')!)).toBe('fastlane in Jenkinsfile:2: sh "bundle exec fastlane supply --aab app.aab"');
   });
+  test('scripts that call the store APIs or upload tools themselves, with the storebound way', () => {
+    const dir = project({
+      'scripts/play-upload.mjs': "const url = 'https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/com.example.app/edits';\n",
+      'tools/asc.py': "BASE = 'https://api.appstoreconnect.apple.com/v1'\n",
+      'deploy/ios.sh': 'xcrun altool --upload-app -f app.ipa\n',
+      'package.json': '{"name":"an-app","scripts":{"ship":"node scripts/play-upload.mjs"}}',
+    });
+    const t = findFastlaneTraces(dir);
+    expect(t.map(x => `${x.file} ${x.store} ${x.via}`).sort()).toEqual(['deploy/ios.sh apple api', 'scripts/play-upload.mjs play api', 'tools/asc.py apple api']);
+    expect(traceMessage(t.find(x => x.store === 'play')!)).toContain('play_release_testing');
+    expect(traceMessage(t.find(x => x.file === 'deploy/ios.sh')!)).toStartWith('altool / Transporter upload in deploy/ios.sh:1');
+  });
+  test("storebound's own checkout is not reported", () => {
+    expect(findFastlaneTraces(project({ 'package.json': '{"name":"storebound"}', 'scripts/x.ts': "fetch('https://api.appstoreconnect.apple.com/v1/apps')\n" }))).toEqual([]);
+  });
   test('a project without fastlane has no traces', () => {
     expect(findFastlaneTraces(project({ 'package.json': '{"scripts":{"build":"vite build"}}' }))).toEqual([]);
   });

From 73d308164d2adb2658d9555964997570a643cbb7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:10:52 +0800
Subject: [PATCH 004/255] Windows builds and moved credentials: play build runs
 gradlew.bat through cmd /c and takes C:/ keystore paths as absolute (pitfall
 98); check names credential paths missing on this machine and a keystore the
 stored password / alias do not open (keytool) (pitfall 99); play / apple
 build write <out>/latest.json for CI; CI install from a git clone documented

---
 CHANGELOG.md                   |  6 ++++++
 cli/apple/build.ts             |  2 ++
 cli/check.ts                   |  4 +++-
 cli/lib/credentials.ts         | 33 ++++++++++++++++++++++++++++++++-
 cli/lib/gradle.ts              |  7 ++++---
 cli/play/build.ts              |  4 +++-
 docs/getting-started.md        |  6 ++++++
 skills/store-pitfalls/SKILL.md | 20 ++++++++++++++++++++
 tests/build-sign.test.ts       | 22 +++++++++++++++++++---
 9 files changed, 95 insertions(+), 9 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9d0b8bb..bb958cb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+- **Windows builds.** `play build` runs `gradlew.bat` through `cmd /c` (it was looked up on PATH only) and takes
+  `C:/...` keystore paths as absolute. Pitfall 98.
+- **`check` verifies credential files.** Every credential path that does not exist on this machine and an upload keystore
+  the stored password / alias do not open (keytool) are named by field. Pitfall 99.
+- `play build` / `apple build` write `<out>/latest.json` with the AAB / IPA path for CI; CI install from a git clone documented.
+
 - **Scripts that call the store APIs themselves are named.** `androidpublisher.googleapis.com`, the googleapis
   androidpublisher client, `api.appstoreconnect.apple.com`, altool and Transporter in CI files and scripts: `check` and
   `release status` warn, `scan` reports `direct-store-api`, each with file:line and the storebound command. Pitfall 97.
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 62c5db4..dcb71dc 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -190,6 +190,8 @@ export async function run(ctx: Ctx): Promise<void> {
   const privacy = bundleTrackingIssues(ipaManifests(join(exportPath, ipa)));
   if (privacy.length) throw new Error(`${relative(root, join(exportPath, ipa))} was built, but Apple would refuse it at upload:\n${privacy.map(x => `  ${x}`).join('\n')}\nFix the manifest and build again.`);
   const result = { ipa: join(exportPath, ipa), bundleId: info.bundleId, version: info.version, build: info.build, web: web.bundle };
+  writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}
+`);
   if (json) printJson(result);
   done(TAG, `${relative(root, result.ipa)}: ${info.bundleId} ${info.version} (${info.build}). Next: storebound apple upload ${relative(root, result.ipa)} --dry`);
 }
diff --git a/cli/check.ts b/cli/check.ts
index 2e2ebd0..df40330 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -21,7 +21,7 @@ import { playConsoleReminders } from './lib/console-plan';
 import { APPLE_IAP_LIMITS, appleNameIssues, len, parseAppStoreListing, parsePlayListing } from './lib/copy';
 import type { Ctx } from './lib/ctx';
 import { dataSafetyIssues, dataSafetyRows } from './lib/data-safety';
-import { credentialStatus, reviewDemoAccount } from './lib/credentials';
+import { credentialFileIssues, credentialStatus, reviewDemoAccount } from './lib/credentials';
 import { log, printJson, warn } from './lib/log';
 import { profileIssues } from './lib/profile';
 import { detectProject, grepOwn, where } from './lib/scan/project';
@@ -150,6 +150,8 @@ export async function run(ctx: Ctx): Promise<void> {
   // template placeholders in the credentials ("YOUR_KEY_ID", "/absolute/path/to/...", "<...>"): missing, never a credential
   const ph = credentialStatus(ctx.loaded.root).filter(c => c.status === 'placeholder').map(c => c.key);
   if (ph.length) note(`credentials: ${ph.join(', ')} still hold template placeholders (env or .storebound/credentials.json): treated as missing; put the real value in or leave it empty`);
+  // credential files that are not on this machine, an upload keystore the stored password / alias do not open
+  try { for (const i of credentialFileIssues(ctx.loaded.root)) problems.push(`credentials: ${i}`); } catch (e) { warn('check', `credential files: ${(e as Error).message}`); }
   // scan.ignore entries that accept no finding (a typo, a title that changed, a fixed issue) are never silent
   if (config.scan?.ignore?.length) {
     const { runScan } = await import('./lib/scan');
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index 34c890c..3b36e9d 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -26,6 +26,7 @@
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { homedir, tmpdir } from 'node:os';
 import { isAbsolute, join, resolve } from 'node:path';
+import * as rt from './rt';
 
 export interface ServiceAccount { client_email: string; private_key: string; token_uri?: string }
 export interface AscKey { keyId: string; issuerId: string; pem: string }
@@ -324,7 +325,7 @@ export function androidSigning(root: string): AndroidSigning | null {
   const storePassword = value(root, 'ANDROID_KEYSTORE_PASSWORD'), keyAlias = value(root, 'ANDROID_KEY_ALIAS');
   if (!storePassword || !keyAlias) throw new Error('ANDROID_KEYSTORE is set but ANDROID_KEYSTORE_PASSWORD / ANDROID_KEY_ALIAS are not (env or .storebound/credentials.json)');
   const abs = storeFile.replace(/^~(?=\/)/, homedir());
-  return { storeFile: abs.startsWith('/') ? abs : join(root, abs), storePassword, keyAlias, keyPassword: value(root, 'ANDROID_KEY_PASSWORD') ?? storePassword };
+  return { storeFile: isAbsolute(abs) ? abs : join(root, abs), storePassword, keyAlias, keyPassword: value(root, 'ANDROID_KEY_PASSWORD') ?? storePassword };
 }
 
 /** App Store Connect vendor number for sales and finance reports (Payments and Financial Reports, top left): the
@@ -334,3 +335,33 @@ export function ascVendorNumber(root: string): string | null {
   const v = value(root, 'ASC_VENDOR_NUMBER');
   return v && /^\d{5,12}$/.test(v.trim()) ? v.trim() : null;
 }
+
+/** Credential paths that do not exist (a machine move left another computer's absolute paths) and an upload keystore
+ *  the stored password / alias do not open: each names the field. `keytool` runs only when it is on PATH. */
+export function credentialFileIssues(root: string, run: (argv: string[]) => { ok: boolean; out: string } | null = keytool): string[] {
+  const issues: string[] = [];
+  const asPath = (v: string) => { const p = v.replace(/^~(?=[/\\])/, homedir()); return isAbsolute(p) ? p : join(root, p); };
+  for (const k of ['PLAY_SERVICE_ACCOUNT', 'ASC_P8', 'ANDROID_KEYSTORE'] as const) {
+    let v: string | undefined;
+    try { v = value(root, k); } catch { continue; }
+    if (!v || /^\s*\{/.test(v) || /BEGIN [A-Z ]*PRIVATE KEY/.test(v)) continue;
+    if (!existsSync(asPath(v))) issues.push(`${k}: ${v} does not exist on this machine (moved from another computer?): point it at the file here`);
+  }
+  let s: AndroidSigning | null = null;
+  try { s = androidSigning(root); } catch (e) { issues.push((e as Error).message); }
+  if (s && existsSync(s.storeFile)) {
+    const r = run(['-list', '-keystore', s.storeFile, '-storepass', s.storePassword, '-alias', s.keyAlias]);
+    if (r && !r.ok) issues.push(/password|tampered|Keystore was tampered/i.test(r.out)
+      ? 'ANDROID_KEYSTORE_PASSWORD does not open the upload keystore (keytool -list failed): check the password (android/keystore.properties may hold the right one)'
+      : /alias|does not exist/i.test(r.out) ? `ANDROID_KEY_ALIAS "${s.keyAlias}" is not in the upload keystore` : `the upload keystore does not open with the stored password / alias: ${r.out.trim().split('\n')[0]}`);
+  }
+  return issues;
+}
+
+function keytool(argv: string[]): { ok: boolean; out: string } | null {
+  const bin = process.env.JAVA_HOME ? join(process.env.JAVA_HOME, 'bin', process.platform === 'win32' ? 'keytool.exe' : 'keytool') : 'keytool';
+  try {
+    const r = rt.spawnSync([bin, ...argv], { timeout: 20_000 });
+    return { ok: r.success, out: `${r.stdout.toString()}${r.stderr.toString()}` };
+  } catch { return null; }
+}
diff --git a/cli/lib/gradle.ts b/cli/lib/gradle.ts
index 7ecfc8c..ddafbce 100644
--- a/cli/lib/gradle.ts
+++ b/cli/lib/gradle.ts
@@ -48,7 +48,7 @@ export function pickGradle(root: string, cfg: PlayBuildConfig = {}): GradleTarge
   if (fw === 'capacitor') notes.push('Capacitor: run npx cap sync android after the web build so the bundle has the current web assets');
   if (fw === 'unity') notes.push('Unity: export the Gradle project from Unity (Build Settings > Android > Export Project) before each build');
   if (fw === 'flutter') notes.push('Flutter: built with flutter build appbundle (build number = versionCode)');
-  if (!existsSync(join(dir, process.platform === 'win32' ? 'gradlew.bat' : 'gradlew'))) notes.push('no Gradle wrapper (gradlew) in the project: using gradle from PATH');
+  if (!existsSync(join(dir, 'gradlew')) && !existsSync(join(dir, 'gradlew.bat'))) notes.push('no Gradle wrapper (gradlew) in the project: using gradle from PATH');
   return { framework: fw, dir, module, task: `:${module}:bundle${flavor}Release`, notes };
 }
 
@@ -57,10 +57,11 @@ export function pickGradle(root: string, cfg: PlayBuildConfig = {}): GradleTarge
  *  override defaultConfig for bundleRelease: checked with AGP 8.13 (2026-10-12), `-Pandroid.injected.version.code=42`
  *  on a build file with `versionCode 1` gives an AAB with versionCode 1; seen live the same day with a Capacitor app.
  *  They stay on the command line for older plugins / IDE parity only; the AAB check after the build is the stop. */
-export function gradleArgs(t: GradleTarget, o: { versionCode?: number; versionName?: string; flavor?: string; hasWrapper: boolean }): string[] {
+export function gradleArgs(t: GradleTarget, o: { versionCode?: number; versionName?: string; flavor?: string; hasWrapper: boolean }, platform: string = process.platform): string[] {
   if (t.framework === 'flutter')
     return ['flutter', 'build', 'appbundle', '--release', ...(o.flavor ? ['--flavor', o.flavor] : []), ...(o.versionCode ? ['--build-number', String(o.versionCode)] : []), ...(o.versionName ? ['--build-name', o.versionName] : [])];
-  return [o.hasWrapper ? (process.platform === 'win32' ? 'gradlew.bat' : './gradlew') : 'gradle', t.task, '--no-daemon', '--console=plain',
+  // Windows: a bare `gradlew.bat` is searched on PATH only ("Executable not found in $PATH"); cmd /c finds it in the cwd
+  return [...(o.hasWrapper ? (platform === 'win32' ? ['cmd', '/c', 'gradlew.bat'] : ['./gradlew']) : platform === 'win32' ? ['cmd', '/c', 'gradle'] : ['gradle']), t.task, '--no-daemon', '--console=plain',
     ...(o.versionCode ? [`-Pandroid.injected.version.code=${o.versionCode}`, `-PversionCode=${o.versionCode}`] : []),
     ...(o.versionName ? [`-Pandroid.injected.version.name=${o.versionName}`, `-PversionName=${o.versionName}`] : [])];
 }
diff --git a/cli/play/build.ts b/cli/play/build.ts
index a6a8ba5..91d12c9 100644
--- a/cli/play/build.ts
+++ b/cli/play/build.ts
@@ -59,7 +59,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   const versionName = a.get('version-name');
   const signing = androidSigning(root);
-  const hasWrapper = existsSync(join(t.dir, 'gradlew'));
+  const hasWrapper = existsSync(join(t.dir, process.platform === 'win32' ? 'gradlew.bat' : 'gradlew'));
   const argv = gradleArgs(t, { versionCode: code || undefined, versionName, flavor, hasWrapper });
   const cwd = t.framework === 'flutter' ? root : t.dir;
   // the SDK as Android Studio finds it (ANDROID_HOME is often unset in non-interactive shells and local.properties is
@@ -117,6 +117,8 @@ export async function run(ctx: Ctx): Promise<void> {
   const dest = join(out, `${info.packageName}-${info.versionCode}.aab`);
   copyFileSync(aab, dest);
   const result = { aab: dest, packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, web: web.bundle };
+  writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}
+`);
   if (json) printJson(result);
   done(TAG, `${relative(root, dest)}: ${info.packageName} ${info.versionName ?? ''} (${info.versionCode}). Next: storebound play upload ${relative(root, dest)} --track internal --dry`);
 }
diff --git a/docs/getting-started.md b/docs/getting-started.md
index 02f2c56..ea6c825 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -152,6 +152,12 @@ plain Markdown and the CLI is a normal command.
 and `--command "<cmd>"` to choose how the MCP server starts. It only adds or updates the `storebound` entry and its
 own skill folders; everything else in those files stays as it is, and re-running it is safe.
 
+**CI servers (Jenkins, Forgejo / GitHub Actions):** use the npm package (`npx -y storebound@<version>` or
+`bunx storebound@<version>`). From a git clone there is no `dist/` (it is built only for npm), so `node dist/storebound.mjs`
+fails: run `bun install` in the clone and call `bin/storebound` (Bun runs `cli/index.ts`), e.g. symlink it onto PATH.
+`storebound play build` and `apple build` write `<out>/latest.json` (`aab` / `ipa` path, ids, version): read it instead of
+globbing the output folder (or pass `--json`).
+
 **Windows:** an MCP client cannot start `npx` directly (it is `npx.cmd`). `install` writes the working form for you;
 by hand use `"command": "cmd", "args": ["/c", "npx", "-y", "storebound@<version>", "mcp"]` (or `bunx storebound mcp`
 with Bun). If the server shows "connection closed", check this first ([pitfall 94](../skills/store-pitfalls/SKILL.md)).
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 3e3eb02..061f84a 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1189,3 +1189,23 @@ that fails without the fix (see CONTRIBUTING.md).
   googleapis androidpublisher client, `api.appstoreconnect.apple.com`, `altool` / `iTMSTransporter` in CI files and
   scripts (not storebound's own checkout, never node_modules); `scan` rule `direct-store-api`, `check` and
   `release status` warnings with file:line and the storebound command (`tests/fastlane-traces.test.ts`).
+
+## 98. `play build` on Windows: "Executable not found in $PATH: gradlew.bat"; "C:/..." keystore "does not exist"
+- **Symptom:** `storebound play build` stopped before Gradle on Windows although `android/gradlew.bat` exists; with
+  `ANDROID_KEYSTORE` set to an absolute `C:/...` path it said the keystore file does not exist.
+- **Cause:** a bare `gradlew.bat` is searched on PATH only, never in the working folder; absolute paths were recognised
+  only when they started with `/`, so `C:/...` was joined onto the project folder.
+- **Do:** update storebound. Until then run Gradle by hand and use a project-relative keystore path.
+- **Guard:** `gradleArgs` in `cli/lib/gradle.ts` runs `cmd /c gradlew.bat` on Windows; `androidSigning` uses
+  `isAbsolute` (`tests/build-sign.test.ts`).
+
+## 99. Credentials still pointed at the old computer, and the keystore password did not open the keystore
+- **Symptom:** after a machine move `ANDROID_KEYSTORE`, `PLAY_SERVICE_ACCOUNT` and `ASC_P8` held the old machine's
+  absolute paths, and `ANDROID_KEYSTORE_PASSWORD` / `ANDROID_KEY_ALIAS` did not open the upload keystore (keytool exit 1);
+  `check` passed and the build failed late.
+- **Do:** point each path at the file on this machine; take the password and alias that open the keystore (an
+  `android/keystore.properties` often holds them). Verify with `keytool -list -keystore <file> -alias <alias>`.
+- **Guard:** `credentialFileIssues` in `cli/lib/credentials.ts`: `check` names every credential path that does not
+  exist and runs `keytool -list` with the stored password and alias (when keytool is on PATH or in JAVA_HOME), naming
+  the bad field (`tests/build-sign.test.ts`). `play build` / `apple build` also write `<out>/latest.json` so CI
+  needs no glob for the AAB / IPA.
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 3364713..83f1f1d 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -4,7 +4,7 @@ import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, ut
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { installedProfiles } from '../cli/apple/build';
-import { androidSigning, ascKeyFile } from '../cli/lib/credentials';
+import { androidSigning, ascKeyFile, credentialFileIssues } from '../cli/lib/credentials';
 import { buildCsr, csrContent, newSigningKey, spkiOfKey } from '../cli/lib/csr';
 import { aabInfo, appBuildFile, findBundles, gradleArgs, pickGradle, signingEnv, validatePlayBuild, versionSourceIssues, versionSourceMessage } from '../cli/lib/gradle';
 import { parseBinaryPlist, parseMobileprovision, parsePlist, parseXmlPlist, toXmlPlist } from '../cli/lib/plist';
@@ -269,8 +269,10 @@ describe('gradle projects', () => {
     touch(rn, 'android/settings.gradle'); touch(rn, 'android/gradlew', '#!/bin/sh'); touch(rn, 'android/app/build.gradle');
     const t = pickGradle(rn);
     expect(t).toMatchObject({ framework: 'react-native', module: 'app', task: ':app:bundleRelease' });
-    expect(gradleArgs(t, { versionCode: 7, versionName: '1.2.0', hasWrapper: true })).toEqual(['./gradlew', ':app:bundleRelease', '--no-daemon', '--console=plain',
+    expect(gradleArgs(t, { versionCode: 7, versionName: '1.2.0', hasWrapper: true }, 'linux')).toEqual(['./gradlew', ':app:bundleRelease', '--no-daemon', '--console=plain',
       '-Pandroid.injected.version.code=7', '-PversionCode=7', '-Pandroid.injected.version.name=1.2.0', '-PversionName=1.2.0']);
+    // Windows: a bare gradlew.bat is looked up on PATH only; cmd /c runs the one in the project folder
+    expect(gradleArgs(t, { hasWrapper: true }, 'win32').slice(0, 4)).toEqual(['cmd', '/c', 'gradlew.bat', ':app:bundleRelease']);
     expect(pickGradle(rn, { flavor: 'prod' }).task).toBe(':app:bundleProdRelease');
     const unity = dir('unity');
     touch(unity, 'Export/settings.gradle'); touch(unity, 'Export/launcher/build.gradle'); touch(unity, 'Export/unityLibrary/build.gradle');
@@ -360,12 +362,26 @@ describe('credentials for builds', () => {
       delete process.env.ANDROID_KEYSTORE;
       expect(androidSigning(d)).toEqual({ storeFile: join(d, 'keys/upload.jks'), storePassword: 'pw', keyAlias: 'upload', keyPassword: 'pw' });
       expect(androidSigning(dir('nocreds'))).toBeNull();
+      // a Windows absolute path is used as it is, not joined onto the project folder
+      if (process.platform === 'win32') {
+        const w = dir('wincreds');
+        touch(w, '.storebound/credentials.json', JSON.stringify({ ANDROID_KEYSTORE: 'C:/keys/upload.jks', ANDROID_KEYSTORE_PASSWORD: 'pw', ANDROID_KEY_ALIAS: 'upload' }));
+        expect(androidSigning(w)?.storeFile).toBe('C:/keys/upload.jks');
+      }
+      // another machine's paths and a keystore the stored password does not open are named by field
+      const m = dir('moved');
+      touch(m, 'keys/upload.jks', 'x');
+      touch(m, '.storebound/credentials.json', JSON.stringify({ ANDROID_KEYSTORE: 'keys/upload.jks', ANDROID_KEYSTORE_PASSWORD: 'wrong', ANDROID_KEY_ALIAS: 'upload', PLAY_SERVICE_ACCOUNT: '/Users/someone/keys/play.json' }));
+      const issues = credentialFileIssues(m, () => ({ ok: false, out: 'keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect' }));
+      expect(issues.some(i => i.startsWith('PLAY_SERVICE_ACCOUNT: /Users/someone/keys/play.json does not exist'))).toBe(true);
+      expect(issues.some(i => i.startsWith('ANDROID_KEYSTORE_PASSWORD does not open'))).toBe(true);
+      expect(credentialFileIssues(m, () => ({ ok: true, out: '' })).some(i => i.startsWith('ANDROID'))).toBe(false);
       const { pem } = newSigningKey();
       const p8 = createPrivateKey(pem).export({ type: 'pkcs8', format: 'pem' }).toString();
       Object.assign(process.env, { ASC_KEY_ID: 'KEYID00001', ASC_ISSUER_ID: '00000000-0000-0000-0000-000000000000', ASC_P8: p8 });
       const k = ascKeyFile(d);
       expect(readFileSync(k.keyPath, 'utf8')).toBe(p8);
-      expect(k.keyPath.split('/').pop()).toBe(['AuthKey', 'KEYID00001.p8'].join('_'));
+      expect(k.keyPath.split(/[\\/]/).pop()).toBe(['AuthKey', 'KEYID00001.p8'].join('_'));
       k.cleanup();
       expect(() => readFileSync(k.keyPath)).toThrow();
     } finally { for (const key of ['ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8']) if (saved[key] === undefined) delete process.env[key]; else process.env[key] = saved[key]; }

From e1634f6abe9a6edb1a0ddf2c8a961d71b5a1ff29 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:12:26 +0800
Subject: [PATCH 005/255] MCP: multi-line --text goes to the CLI as --from-text
 <temp file> (console_verify kept only the first line on Windows); long JSON
 output keeps its start and names a file with the whole output (console_plan
 lost its start URL); test, pitfall 100

---
 CHANGELOG.md                   |  3 +++
 cli/mcp.ts                     | 30 ++++++++++++++++++++++++++++--
 skills/store-pitfalls/SKILL.md | 11 +++++++++++
 tests/mcp-text-file.test.ts    | 24 ++++++++++++++++++++++++
 4 files changed, 66 insertions(+), 2 deletions(-)
 create mode 100644 tests/mcp-text-file.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bb958cb..28a0596 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 ## Unreleased
 
+- **MCP `console_verify` reads multi-line page text whole** (it kept only the first line on Windows), and long JSON
+  output such as `console_plan` keeps its start and names a file with the whole output. Pitfall 100.
+
 - **Windows builds.** `play build` runs `gradlew.bat` through `cmd /c` (it was looked up on PATH only) and takes
   `C:/...` keystore paths as absolute. Pitfall 98.
 - **`check` verifies credential files.** Every credential path that does not exist on this machine and an upload keystore
diff --git a/cli/mcp.ts b/cli/mcp.ts
index 6abbfac..1bf1f64 100644
--- a/cli/mcp.ts
+++ b/cli/mcp.ts
@@ -20,6 +20,9 @@
 // Every tool runs the CLI as a child process in the project directory (STOREBOUND_PROJECT or the server's cwd) and
 // returns its output. stdout of this process carries protocol messages only; logs go to stderr.
 // Tool list and safety rules: mcp-tools.ts (write tools default to dry_run, nothing public or irreversible exposed).
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import { runCommand, type Running } from './lib/runner';
 import { listTools, TOOLS, toArgv, validateInput } from './mcp-tools';
@@ -107,9 +110,10 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
       const input = (m.params?.arguments ?? {}) as Record<string, unknown>;
       const problems = validateInput(tool, input);
       if (problems.length) return ok({ content: [{ type: 'text', text: `Invalid arguments: ${problems.join('; ')}` }], isError: true });
-      const { argv, dryRun } = toArgv(tool, input);
+      const { argv: raw, dryRun } = toArgv(tool, input);
+      const argv = textToFile(raw);
       const r = await run(argv, m.id);
-      let out = r.out.length > MAX_OUTPUT ? `[... first ${r.out.length - MAX_OUTPUT} characters cut ...]\n` + r.out.slice(-MAX_OUTPUT) : r.out;
+      let out = clip(r.out, argv.includes('--json'));
       if (dryRun) out += '\n\n(dry run: nothing was changed. Ask the owner before calling again with dry_run: false.)';
       const structured = { exitCode: r.code, dryRun, command: `storebound ${argv.join(' ')}`, output: out };
       return ok({ content: [{ type: 'text', text: `$ storebound ${argv.join(' ')}\n${out}\n[exit ${r.code}]` }], structuredContent: structured, isError: r.code !== 0 });
@@ -118,6 +122,28 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
   }
 }
 
+/** A multi-line --text=... goes to the CLI as --from-text <file>: on Windows the child starts through a shell and a
+ *  multi-line argument kept only its first line (console_verify read every App Privacy type as missing). */
+export function textToFile(argv: string[]): string[] {
+  return argv.flatMap(a => {
+    if (!a.startsWith('--text=') || !/[\r\n]/.test(a)) return [a];
+    const file = join(mkdtempSync(join(tmpdir(), 'storebound-mcp-')), 'page.txt');
+    writeFileSync(file, a.slice('--text='.length));
+    return ['--from-text', file];
+  });
+}
+
+/** Long output: the whole text goes to a file whose path is named; JSON keeps its start (a plan's start URL and first
+ *  steps were cut when the tail was kept), plain text its end (where errors are). */
+export function clip(out: string, json: boolean, max = MAX_OUTPUT): string {
+  if (out.length <= max) return out;
+  const file = join(mkdtempSync(join(tmpdir(), 'storebound-mcp-')), json ? 'output.json' : 'output.txt');
+  writeFileSync(file, out);
+  return json
+    ? `${out.slice(0, max)}\n[... last ${out.length - max} characters cut; the whole output: ${file}]`
+    : `[... first ${out.length - max} characters cut; the whole output: ${file}]\n${out.slice(-max)}`;
+}
+
 const running = new Map<Id, Running>();
 function cancel(id: Id | undefined): void { if (id !== undefined) running.get(id)?.cancel(); }
 
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 061f84a..4de9ad2 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1209,3 +1209,14 @@ that fails without the fix (see CONTRIBUTING.md).
   exist and runs `keytool -list` with the stored password and alias (when keytool is on PATH or in JAVA_HOME), naming
   the bad field (`tests/build-sign.test.ts`). `play build` / `apple build` also write `<out>/latest.json` so CI
   needs no glob for the AAB / IPA.
+
+## 100. `console_verify` reported every App Privacy type missing (multi-line page text over MCP on Windows)
+- **Symptom:** MCP `console_verify` with the App Privacy page text said "not on the page" for every data type and "no
+  Published line"; the command line it echoed held only the text's first line. The same text from a file matched.
+- **Cause:** the text went to the CLI as one `--text=...` argument; on Windows the child starts through a shell, which
+  kept only the first line. Separately, `console_plan` output over 60 KB was cut at the start, losing the start URL
+  and the first steps.
+- **Do:** update storebound; meanwhile save the page text to a file and run `storebound console verify <form>
+  --from-text <file>`.
+- **Guard:** `textToFile` in `cli/mcp.ts` sends multi-line text as `--from-text <temp file>`; `clip` keeps the start of
+  long JSON output (the end of plain text) and names a file with the whole output (`tests/mcp-text-file.test.ts`).
diff --git a/tests/mcp-text-file.test.ts b/tests/mcp-text-file.test.ts
new file mode 100644
index 0000000..95dd166
--- /dev/null
+++ b/tests/mcp-text-file.test.ts
@@ -0,0 +1,24 @@
+// MCP calls: multi-line page text reaches the CLI whole (pitfall 100), long JSON output keeps its start.
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { clip, textToFile } from '../cli/mcp';
+
+describe('mcp argv and output', () => {
+  test('a multi-line --text= becomes --from-text <file> with the whole text', () => {
+    const page = 'App Privacy\nData Types\nCrash Data\r\nUsed for App Functionality\nPublished a few seconds ago';
+    const argv = textToFile(['console', 'verify', 'apple-app-privacy', `--text=${page}`, '--json']);
+    expect(argv.slice(0, 4)).toEqual(['console', 'verify', 'apple-app-privacy', '--from-text']);
+    expect(argv.some(a => /[\r\n]/.test(a))).toBe(false);
+    expect(readFileSync(argv[4]!, 'utf8')).toBe(page);
+    expect(textToFile(['console', 'verify', 'x', '--text=one line'])).toEqual(['console', 'verify', 'x', '--text=one line']);
+  });
+  test('long JSON keeps its start, long text its end; both name the full file', () => {
+    const json = `{"startUrl":"https://example.com/start",${'"x":1,'.repeat(50)}"end":true}`;
+    const j = clip(json, true, 40);
+    expect(j.startsWith('{"startUrl":"https://example.com/start"')).toBe(true);
+    const file = /the whole output: (.+)\]$/.exec(j)![1]!;
+    expect(readFileSync(file, 'utf8')).toBe(json);
+    expect(clip('a'.repeat(100) + 'ERROR at the end', false, 20).endsWith('ERROR at the end')).toBe(true);
+    expect(clip('short', true, 40)).toBe('short');
+  });
+});

From f7dd646e570c311c6481d8ceda6a44ccd4cf01ab Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:15:03 +0800
Subject: [PATCH 006/255] Terminal: colors, status emoji and a live spinner
 line for waits at a TTY; plain lines unchanged when piped, in CI, with
 NO_COLOR, TERM=dumb, --json or MCP; desktop download progress through the log

---
 CHANGELOG.md            |  4 +++
 cli/desktop.ts          |  4 +--
 cli/lib/log.ts          | 69 +++++++++++++++++++++++++++++++++++++++--
 tests/log-fancy.test.ts | 26 ++++++++++++++++
 4 files changed, 98 insertions(+), 5 deletions(-)
 create mode 100644 tests/log-fancy.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 28a0596..939cbef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **A livelier terminal.** At a terminal, lines get colors and status emoji (✅ ⚠️ ❌ 📦 🚀 🧪) and every wait ("waiting
+  for ...", uploads, downloads, progress) is one live spinner line with the elapsed time. Piped, CI, `NO_COLOR`,
+  `TERM=dumb`, `--json` and MCP keep the plain lines exactly as before.
+
 - **MCP `console_verify` reads multi-line page text whole** (it kept only the first line on Windows), and long JSON
   output such as `console_plan` keeps its start and names a file with the whole output. Pitfall 100.
 
diff --git a/cli/desktop.ts b/cli/desktop.ts
index 8089388..5426361 100644
--- a/cli/desktop.ts
+++ b/cli/desktop.ts
@@ -26,7 +26,7 @@ import { verify } from './lib/minisign';
 import { parsePlist } from './lib/plist';
 import { addFolder } from './lib/registry';
 import * as rt from './lib/rt';
-import { printJson, promptOut } from './lib/log';
+import { log, printJson, promptOut } from './lib/log';
 import { stdinIsTTY } from './lib/tty';
 
 type Fetch = (url: string) => Promise<Response>;
@@ -58,7 +58,7 @@ export function pick(m: Manifest, keys: DownloadKey[], format?: string): [Downlo
 }
 
 /** Downloads one installer and keeps it only when its size, SHA-256 and minisign signature are right. */
-export async function download(d: Download, dir: string, get: Fetch = fetch, publicKey = PUBLIC_KEY, stallMs = 60_000, say: (s: string) => void = s => console.log(s)): Promise<string> {
+export async function download(d: Download, dir: string, get: Fetch = fetch, publicKey = PUBLIC_KEY, stallMs = 60_000, say: (s: string) => void = s => log('desktop', `downloading ${s.trim()}`)): Promise<string> {
   const r = await withStall(get(d.url), stallMs, d.url);
   if (!r.ok) throw new Error(`${d.url}: HTTP ${r.status}`);
   const data = await readBody(r, d, stallMs, say);
diff --git a/cli/lib/log.ts b/cli/lib/log.ts
index 3790f6c..34bb78a 100644
--- a/cli/lib/log.ts
+++ b/cli/lib/log.ts
@@ -4,9 +4,72 @@ const t0 = Date.now();
 const stamp = (): string => new Date().toISOString().slice(11, 19);
 const since = (): string => `${((Date.now() - t0) / 1000).toFixed(0)}s`;
 
-export const log = (tag: string, msg: string): void => console.log(`${stamp()} [${tag}] ${msg}`);
-export const warn = (tag: string, msg: string): void => console.warn(`${stamp()} [${tag}] WARN ${msg}`);
-export const done = (tag: string, msg: string): void => console.log(`${stamp()} [${tag}] ${msg} (${since()})`);
+/**
+ * Colors, status emoji and a spinner, only for a person at a terminal: stdout is a TTY and nothing asks for plain text
+ * (NO_COLOR, CI, TERM=dumb, a --json run, `storebound serve` / MCP children). Piped and logged output stays exactly
+ * the plain lines above, so `tail -f` and agents read the same text as before.
+ */
+export function fancy(env: Record<string, string | undefined> = process.env, tty = !!process.stdout.isTTY): boolean {
+  return tty && !env.NO_COLOR && !env.CI && env.TERM !== 'dumb' && env.STOREBOUND_MACHINE !== '1' && env.STOREBOUND_MCP !== '1' && !jsonOutput();
+}
+
+const C = { dim: '\x1b[2m', cyan: '\x1b[36m', yellow: '\x1b[33m', green: '\x1b[32m', red: '\x1b[31m', bold: '\x1b[1m', off: '\x1b[0m' };
+const FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
+/** A wait line ("waiting for ...", "still processing", "3/14 ..." progress) is drawn as one live spinner line. */
+const WAIT = /^(waiting|still |polling|processing|uploading|downloading|building|[ ]*\d+%|\d+\/\d+ )/i;
+
+/** Emoji for a line, by what it says. */
+export function emojiFor(msg: string, level: 'log' | 'warn' | 'done'): string {
+  if (level === 'warn') return '⚠️ ';
+  if (level === 'done') return '✅';
+  if (/\b(fail|error|refus|rejected|not kept)/i.test(msg)) return '❌';
+  if (/^(upload|uploading)/i.test(msg)) return '📦';
+  if (/\b(submit(ted)?|released?|publish(ed)?|live)\b/i.test(msg)) return '🚀';
+  if (/^(dry run|would )/i.test(msg)) return '🧪';
+  return '•';
+}
+
+let spin: { text: string; start: number; frame: number; timer: ReturnType<typeof setInterval> } | null = null;
+const clearSpin = (): void => { if (spin) process.stdout.write('\r\x1b[2K'); };
+function stopSpin(): void { if (spin) { clearInterval(spin.timer); clearSpin(); spin = null; } }
+function drawSpin(): void {
+  if (!spin) return;
+  const s = Math.round((Date.now() - spin.start) / 1000);
+  const cols = (process.stdout.columns || 100) - 12;
+  process.stdout.write(`\r\x1b[2K${C.cyan}${FRAMES[spin.frame++ % FRAMES.length]}${C.off} ${spin.text.slice(0, cols)} ${C.dim}${s}s${C.off}`);
+}
+function showSpin(text: string): void {
+  if (spin) { spin.text = text; drawSpin(); return; }
+  spin = { text, start: Date.now(), frame: 0, timer: setInterval(drawSpin, 100) };
+  spin.timer.unref?.();
+  drawSpin();
+}
+let hooked = false;
+/** Any other output first removes the live spinner line, so lines never mix. */
+function hook(): void {
+  if (hooked) return;
+  hooked = true;
+  for (const k of ['log', 'info', 'warn', 'error'] as const) {
+    const orig = console[k].bind(console);
+    console[k] = (...a: unknown[]) => { const was = spin?.text; stopSpin(); orig(...a); if (was !== undefined && k !== 'error') showSpin(was); };
+  }
+  process.on('exit', stopSpin);
+}
+
+function line(level: 'log' | 'warn' | 'done', tag: string, msg: string): void {
+  const plain = `${stamp()} [${tag}] ${level === 'warn' ? 'WARN ' : ''}${msg}${level === 'done' ? ` (${since()})` : ''}`;
+  if (!fancy()) { (level === 'warn' ? console.warn : console.log)(plain); return; }
+  hook();
+  if (level === 'log' && WAIT.test(msg)) { showSpin(`${C.bold}${tag}${C.off} ${msg}`); return; }
+  stopSpin();
+  const color = level === 'warn' ? C.yellow : level === 'done' ? C.green : emojiFor(msg, level) === '❌' ? C.red : '';
+  const text = `${C.dim}${stamp()}${C.off} ${emojiFor(msg, level)} ${C.cyan}${tag}${C.off} ${color}${msg}${color ? C.off : ''}${level === 'done' ? ` ${C.dim}(${since()})${C.off}` : ''}`;
+  (level === 'warn' ? console.warn : console.log)(text);
+}
+
+export const log = (tag: string, msg: string): void => line('log', tag, msg);
+export const warn = (tag: string, msg: string): void => line('warn', tag, msg);
+export const done = (tag: string, msg: string): void => line('done', tag, msg);
 
 // The count lives on globalThis: the Node bundle (tools/build-node.ts) can carry this module twice (once for the
 // static imports, once inside a lazily initialised chunk), and both copies must see the same --json run.
diff --git a/tests/log-fancy.test.ts b/tests/log-fancy.test.ts
new file mode 100644
index 0000000..c3f87a3
--- /dev/null
+++ b/tests/log-fancy.test.ts
@@ -0,0 +1,26 @@
+// Terminal styling is for people only: piped, CI, NO_COLOR, TERM=dumb, MCP and serve children get the plain lines.
+import { describe, expect, test } from 'bun:test';
+import { emojiFor, fancy } from '../cli/lib/log';
+
+describe('fancy terminal output', () => {
+  test('only on a TTY with nothing asking for plain text', () => {
+    expect(fancy({}, true)).toBe(true);
+    expect(fancy({}, false)).toBe(false);
+    for (const env of [{ NO_COLOR: '1' }, { CI: 'true' }, { TERM: 'dumb' }, { STOREBOUND_MCP: '1' }, { STOREBOUND_MACHINE: '1' }]) expect(fancy(env, true)).toBe(false);
+  });
+  test('emoji by level and message', () => {
+    expect(emojiFor('anything', 'done')).toBe('✅');
+    expect(emojiFor('anything', 'warn')).toBe('⚠️ ');
+    expect(emojiFor('upload failed: 409', 'log')).toBe('❌');
+    expect(emojiFor('uploading 3 files', 'log')).toBe('📦');
+    expect(emojiFor('submitted for review', 'log')).toBe('🚀');
+    expect(emojiFor('dry run: nothing changed', 'log')).toBe('🧪');
+  });
+  test('a piped run prints the plain line, no ANSI', () => {
+    const r = Bun.spawnSync(['bun', '-e', "const { log, warn, done } = await import('./cli/lib/log.ts'); log('t', 'waiting for x'); warn('t', 'careful'); done('t', 'ok');"], { cwd: `${import.meta.dir}/..`, stdout: 'pipe', stderr: 'pipe' });
+    const out = r.stdout.toString() + r.stderr.toString();
+    expect(out).not.toMatch(/\x1b\[/);
+    expect(out).toMatch(/\[t\] waiting for x/);
+    expect(out).toMatch(/\[t\] WARN careful/);
+  });
+});

From a8a889fb3567586ee5c0b3f8908c47d863fad868 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:17:28 +0800
Subject: [PATCH 007/255] release: a staged npm publish found on the retry is
 reported as waiting for the maintainer's approval instead of failing after 5
 minutes

---
 tools/release.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tools/release.ts b/tools/release.ts
index 9d1a6d1..0565d00 100644
--- a/tools/release.ts
+++ b/tools/release.ts
@@ -481,6 +481,8 @@ async function npmRelease(version: string, token: string): Promise<void> {
         again = true;
         say(`npm: ${version} is not on the registry yet: publishing once more`);
         const p2 = npmRun(['publish'], token);
+        // 0.8.25: the first publish was staged silently; the retry's 409 "previously staged" says so (no 5-minute wait)
+        if (/staged/i.test(p2.out)) { say(`npm: ${version} is staged and waits for the maintainer's approval: https://www.npmjs.com/package/storebound (approve it there; then deprecate runs with: bun tools/release.ts npm-publish)`); return; }
         if (p2.code !== 0 && !/previously published|cannot publish over/i.test(p2.out)) fail(`npm publish (second try) failed: ${p2.out.trim().split('\n').slice(-4).join(' ')}`);
       }
     }

From 2598c4953aac91b3ab69ed67b940d0797406bfc7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:21:26 +0800
Subject: [PATCH 008/255] doctor: build dependencies (JDK with the version the
 project needs, Android SDK command-line tools, CocoaPods, Node, Bun,
 bundletool), too-old status, doctor --install <tool> --yes runs the
 package-manager command (never sudo); desktop Dependencies shows too old;
 gen-flags works on Windows paths

---
 CHANGELOG.md                              |  5 +++
 apps/desktop/src/i18n/en.ts               |  1 +
 apps/desktop/src/i18n/tr.ts               |  1 +
 apps/desktop/src/screens/Dependencies.tsx |  1 +
 cli/commands.ts                           |  2 +-
 cli/data/flags.json                       |  7 +++-
 cli/doctor.ts                             | 41 +++++++++++++++---
 cli/lib/tools.ts                          | 51 ++++++++++++++++++++++-
 tests/deps.test.ts                        | 36 ++++++++++++++++
 tools/gen-flags.ts                        |  6 +--
 10 files changed, 137 insertions(+), 14 deletions(-)
 create mode 100644 tests/deps.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 939cbef..14004de 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,11 @@
 
 ## Unreleased
 
+- **Build dependencies in `doctor` and the desktop Dependencies screen.** JDK (with the version the project needs from
+  the Android Gradle plugin / jvmToolchain, "too old" when below it), Android SDK command-line tools, CocoaPods, Node.js,
+  Bun and bundletool join ffmpeg, Chrome, Xcode, adb and git. `storebound doctor --install <tool> --yes` runs this OS's
+  package-manager command (winget / brew); sudo and admin commands are printed, never run.
+
 - **A livelier terminal.** At a terminal, lines get colors and status emoji (✅ ⚠️ ❌ 📦 🚀 🧪) and every wait ("waiting
   for ...", uploads, downloads, progress) is one live spinner line with the elapsed time. Piped, CI, `NO_COLOR`,
   `TERM=dumb`, `--json` and MCP keep the plain lines exactly as before.
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 3585c39..9e21009 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -543,6 +543,7 @@ export const en = {
   'deps.tools': 'Tools on this computer',
   'deps.found': '{found} of {total} found',
   'deps.missing': 'Missing',
+  'deps.outdated': 'Too old (needs {version})',
   'deps.appCopy': 'App copy',
   'deps.installed': 'Installed',
   'deps.download': 'Download',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index e4847bc..79f399c 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -545,6 +545,7 @@ export const tr: Record<keyof typeof en, string> = {
   'deps.tools': 'Bu bilgisayardaki araçlar',
   'deps.found': '{total} araçtan {found} tanesi var',
   'deps.missing': 'Eksik',
+  'deps.outdated': 'Eski (gereken {version})',
   'deps.appCopy': 'Uygulamanın kopyası',
   'deps.installed': 'Kurulu',
   'deps.download': 'İndir',
diff --git a/apps/desktop/src/screens/Dependencies.tsx b/apps/desktop/src/screens/Dependencies.tsx
index 3d7cc20..9c388e2 100644
--- a/apps/desktop/src/screens/Dependencies.tsx
+++ b/apps/desktop/src/screens/Dependencies.tsx
@@ -15,6 +15,7 @@ const TOOL_ICON: Record<string, IconName> = { ffmpeg: 'image', ffprobe: 'search'
 /** Status chip of one tool. */
 export function toolState(x: ToolStatus): { text: string; tone: 'ok' | 'warn' | 'accent' } {
   if (!x.found) return { text: t('deps.missing'), tone: 'warn' };
+  if (x.status === 'outdated') return { text: t('deps.outdated', { version: x.required ?? '' }), tone: 'warn' };
   return x.source === 'app' ? { text: t('deps.appCopy'), tone: 'accent' } : { text: t('deps.installed'), tone: 'ok' };
 }
 
diff --git a/cli/commands.ts b/cli/commands.ts
index b58f9e6..7d1846f 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -15,7 +15,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'apps': [() => import('./apps'), 'list (every app the store keys can see: App Store Connect team, Play developer accounts; --icons) | check (key works / permission missing / revoked, with the fix); --store apple|play, --json; read-only | folders | add [<folder>] | remove <folder>: the app folders of this machine, the same list as the desktop app'],
   'desktop': [() => import('./desktop'), 'open the storebound desktop app on this folder; not installed or another version: download it for this system (size, SHA-256, signature checked), install it for this user (asks once; --yes) and open it; --download only saves the installer, --dry / --json change nothing'],
   'accounts': [() => import('./accounts'), 'the store accounts of this machine (credential profiles in ~/.storebound/credentials, shared with the desktop app): list | import (a project\'s store keys -> a profile; --dry first) | use <profile> | default <profile> (the machine default; --clear)'],
-  'doctor': [() => import('./doctor'), 'local tools for screenshots, previews, icons and captures (ffmpeg, Chrome, playwright, Xcode, adb, git) and how to install what is missing; --json'],
+  'doctor': [() => import('./doctor'), 'build and capture dependencies (JDK with the version the project needs, Android SDK, Xcode, CocoaPods, Node, Bun, ffmpeg, Chrome, adb, git, bundletool) and how to install what is missing; --install <tool> --yes; --json'],
   'scan': [() => import('./scan'), 'offline, read-only rejection-risk scan of the project itself (stack, SDKs, Info.plist, manifest, listings) with guideline, evidence file:line, fix and skill, plus the Data safety / App Privacy / ATT / privacy manifest proposal; --write puts the detected answers into the config; --json; exit 1 on blockers'],
   'api': [() => import('./api'), 'every App Store Connect / Google Play API operation: list | coverage | apple|play <operationId|METHOD path> [--param k=v] [--body f.json] [--all-pages] (GET runs; writes dry unless --yes in a terminal; owner-only ones need the id typed)'],
   'privacy-manifest': [() => import('./privacy-manifest'), 'iOS PrivacyInfo.xcprivacy + required-reason API + SDK manifest scan (--ios <path>)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9c2cd6a..be6a24c 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -459,7 +459,8 @@
    "xdg-mime"
   ],
   "doctor": [
-   "dir"
+   "dir",
+   "install"
   ],
   "edit": [
    "ops",
@@ -1019,6 +1020,7 @@
    "identity",
    "include-drafts",
    "include-high-income",
+   "install",
    "internal",
    "internal-only",
    "invite",
@@ -1370,7 +1372,8 @@
    "storebound desktop --download      only save the installer for this system into ~/Downloads (checked as above)"
   ],
   "doctor": [
-   "storebound doctor [--dir .] [--json]"
+   "storebound doctor [--dir .] [--json]",
+   "storebound doctor --install <tool> [--yes]   runs this OS's install command for one tool (winget / brew / apt);"
   ],
   "edit": [
    "storebound edit --ops '<json>' [--dry] [--json]",
diff --git a/cli/doctor.ts b/cli/doctor.ts
index 566a3e2..7b2de04 100644
--- a/cli/doctor.ts
+++ b/cli/doctor.ts
@@ -2,6 +2,8 @@
 // Dependencies screen (lib/tools.ts). Store work (listings, products, releases, reviews) needs none of these tools;
 // screenshots, app previews, icons and simulator / emulator captures do. Read-only: it prints commands, it runs none.
 //   storebound doctor [--dir .] [--json]
+//   storebound doctor --install <tool> [--yes]   runs this OS's install command for one tool (winget / brew / apt);
+//                                                without --yes only prints it. Never sudo, never an admin prompt.
 import { existsSync } from 'node:fs';
 import { join, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
@@ -22,6 +24,9 @@ export interface DoctorRow {
   path: string | null;
   source: ToolStatus['source'];
   usedFor: string;
+  /** The version the project needs and ok / missing / outdated. */
+  required?: string | null;
+  status?: 'ok' | 'missing' | 'outdated';
   /** Install commands for this OS (empty when found). */
   install: string[];
   url: string | null;
@@ -38,30 +43,54 @@ export interface DoctorResult {
 }
 
 export function doctor(cwd: string, env: Record<string, string | undefined> = process.env): DoctorResult {
-  const tools: DoctorRow[] = detectTools(env).map(t => ({ id: t.id, name: t.name, found: t.found, version: t.version, path: t.path, source: t.source, usedFor: t.usedFor,
-    install: t.found ? [] : installCommands(t.id), url: t.install.url }));
+  const tools: DoctorRow[] = detectTools(env, cwd).map(t => ({ id: t.id, name: t.name, found: t.found, version: t.version, path: t.path, source: t.source, usedFor: t.usedFor,
+    required: t.required ?? null, status: t.status, install: t.status === 'ok' ? [] : installCommands(t.id), url: t.install.url }));
   const pw = findPlaywright([cwd, rt.packageRoot()]);
   tools.splice(3, 0, { id: 'playwright', name: 'playwright', found: !!pw, version: null, path: pw, source: pw ? 'system' : null,
     usedFor: 'screenshot renders and web captures from a terminal (the desktop app brings its own)', install: pw ? [] : installCommands('playwright'), url: 'https://playwright.dev/docs/intro' });
   const project = CONFIG_NAMES.some(n => existsSync(join(cwd, n))) ? cwd : null;
   const sdk = androidSdk([join(cwd, 'android'), cwd], env);
-  return { storebound: pkg.version, bun: rt.bunVersion, runtime: `${rt.runtime.name} ${rt.runtime.version}`, platform: `${process.platform}-${process.arch}`, project, tools, missing: tools.filter(t => !t.found).length, androidSdk: sdk, credentials: credentialStatus(cwd),
+  return { storebound: pkg.version, bun: rt.bunVersion, runtime: `${rt.runtime.name} ${rt.runtime.version}`, platform: `${process.platform}-${process.arch}`, project, tools, missing: tools.filter(t => !t.found || t.status === 'outdated').length, androidSdk: sdk, credentials: credentialStatus(cwd),
     foreignRsync: process.platform === 'darwin' ? foreignRsync(env.PATH) : null };
 }
 
+/** One install command of a tool, run only with --yes; sudo / admin commands are printed, never run. */
+export function installPlan(r: DoctorResult, id: string, platform: NodeJS.Platform = process.platform): { tool: DoctorRow; command: string | null; runnable: boolean } {
+  const tool = r.tools.find(t => t.id === id);
+  if (!tool) throw new Error(`doctor --install: no tool "${id}" (one of ${r.tools.map(t => t.id).join(', ')})`);
+  const command = installCommands(tool.id, platform)[0] ?? null;
+  return { tool, command, runnable: !!command && !/^sudo |\| *(ba)?sh|^Install /.test(command) };
+}
+
 export async function run(args: Args): Promise<void> {
   const r = doctor(resolve(args.str('dir', '.')));
+  const want = args.get('install');
+  if (want) {
+    const plan = installPlan(r, want);
+    if (plan.tool.status === 'ok') { log('doctor', `${plan.tool.name} ${plan.tool.version ?? ''} is already here${plan.tool.required ? ` (the project needs ${plan.tool.required})` : ''}`); return; }
+    if (!plan.command) throw new Error(`doctor --install: no install command for ${plan.tool.name} on this OS: ${plan.tool.url}`);
+    if (!plan.runnable || !args.has('yes')) {
+      log('doctor', `would run: ${plan.command}${plan.runnable ? ' (add --yes to run it)' : ' (needs admin rights: run it yourself)'}`);
+      return;
+    }
+    log('doctor', `installing ${plan.tool.name}: ${plan.command}`);
+    const p = rt.spawnSync(plan.command.split(/\s+/), { stdout: 'inherit', stderr: 'inherit', timeout: 20 * 60_000 });
+    if (!p.success) throw new Error(`${plan.command} failed (exit ${p.exitCode}); open a new terminal if it installed but is not on PATH yet`);
+    const after = doctor(resolve(args.str('dir', '.'))).tools.find(t => t.id === plan.tool.id);
+    log('doctor', `${plan.tool.name}: ${after?.status ?? 'unknown'}${after?.version ? ` ${after.version}` : ''} (a new terminal may be needed for PATH)`);
+    return;
+  }
   if (args.has('json')) { printJson(r); return; }
   log('doctor', `storebound ${r.storebound} · ${r.runtime} · ${r.platform}${r.project ? ' · project config found' : ''}`);
-  console.log(textTable(['tool', 'status', 'version', 'used for'], r.tools.map(t => [t.name, t.found ? (t.source === 'app' ? 'ok (app copy)' : 'ok') : 'missing', t.version ?? '', t.usedFor])));
+  console.log(textTable(['tool', 'status', 'version', 'needs', 'used for'], r.tools.map(t => [t.name, t.status === 'outdated' ? 'too old' : t.found ? (t.source === 'app' ? 'ok (app copy)' : 'ok') : 'missing', t.version ?? '', t.required ?? '', t.usedFor])));
   log('doctor', r.androidSdk.path ? `Android SDK: ${r.androidSdk.path} (from ${r.androidSdk.source})`
     : `Android SDK: not found (play build needs it). Checked: ${r.androidSdk.checked.join('; ')}`);
   const set = r.credentials.filter(c => c.status === 'set').map(c => c.key), ph = r.credentials.filter(c => c.status === 'placeholder').map(c => c.key);
   log('doctor', `credentials: ${set.length ? set.join(', ') : 'none set'}${ph.length ? ` · placeholders (treated as missing): ${ph.join(', ')}` : ''}`);
   if (r.foreignRsync) log('doctor', `rsync: ${r.foreignRsync} is first on PATH and breaks Xcode exportArchive ("Copy failed") outside storebound; storebound apple build puts /usr/bin first. Fix for everything else: brew unlink rsync, or put /usr/bin before it`);
-  const missing = r.tools.filter(t => !t.found);
+  const missing = r.tools.filter(t => !t.found || t.status === 'outdated');
   if (!missing.length) { log('doctor', 'everything storebound can use is here'); return; }
-  console.log('\nTo install what is missing (pick one per tool; storebound never runs these for you):');
+  console.log('\nTo install what is missing (storebound doctor --install <tool> --yes runs the first one; sudo / admin ones you run yourself):');
   for (const t of missing) {
     console.log(`  ${t.name}`);
     for (const c of t.install) console.log(`    ${c}`);
diff --git a/cli/lib/tools.ts b/cli/lib/tools.ts
index 3e7217e..db00065 100644
--- a/cli/lib/tools.ts
+++ b/cli/lib/tools.ts
@@ -8,7 +8,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { delimiter, join } from 'node:path';
 import * as rt from './rt';
 
-export type ToolId = 'ffmpeg' | 'ffprobe' | 'chrome' | 'xcode' | 'simctl' | 'adb' | 'git';
+export type ToolId = 'ffmpeg' | 'ffprobe' | 'chrome' | 'xcode' | 'simctl' | 'adb' | 'git' | 'java' | 'sdkmanager' | 'cocoapods' | 'node' | 'bun' | 'bundletool';
 
 export interface ToolStatus {
   id: ToolId;
@@ -22,6 +22,10 @@ export interface ToolStatus {
   usedFor: string;
   /** How to get it: the desktop app downloads ffmpeg and Chrome for Testing; Xcode and the Android SDK are link-out. */
   install: { kind: 'download' | 'link'; url: string; note: string };
+  /** The version the project needs (JDK from the Android Gradle plugin / jvmToolchain), when one is known. */
+  required?: string | null;
+  /** ok, missing, or found but older than `required`. */
+  status?: 'ok' | 'missing' | 'outdated';
 }
 
 /** Folders where tools usually live but that are often missing from PATH (apps started from the Dock or Finder get
@@ -57,6 +61,8 @@ function firstLine(cmd: string[], env: Record<string, string>): string | null {
 /** "ffmpeg version 7.1.1 Copyright ..." -> "7.1.1"; "Google Chrome for Testing 131.0.6778.85" -> "131.0.6778.85". */
 export function parseVersion(line: string | null): string | null {
   if (!line) return null;
+  const java = /version "(\d[^"]*)"/.exec(line)?.[1];
+  if (java) return java;
   return line.match(/version\s+([^\s,]+)/i)?.[1] ?? line.match(/(\d+(?:\.\d+)+)/)?.[1] ?? null;
 }
 
@@ -69,7 +75,7 @@ export function systemChrome(platform = process.platform, env: Record<string, st
 
 const FFMPEG_NOTE = 'Static build into the app data folder (GPL; never bundled with the app). Checksum-verified.';
 
-export function detectTools(env: Record<string, string | undefined> = process.env): ToolStatus[] {
+export function detectTools(env: Record<string, string | undefined> = process.env, project?: string): ToolStatus[] {
   const PATH = toolPath(env);
   const spawnEnv: Record<string, string> = { ...Object.fromEntries(Object.entries(env).filter((e): e is [string, string] => e[1] !== undefined)), PATH };
   const appDirs = (env.STOREBOUND_TOOL_PATH ?? '').split(delimiter).filter(Boolean);
@@ -102,9 +108,44 @@ export function detectTools(env: Record<string, string | undefined> = process.en
   }
   out.push(bin('adb', 'adb (Android platform tools)', 'Android emulator / device screenshots and recordings', { kind: 'link', url: 'https://developer.android.com/tools/releases/platform-tools', note: 'Install Android Studio or the SDK platform tools.' }, ['version']));
   out.push(bin('git', 'git', 'release notes from history, analytics compare', { kind: 'link', url: 'https://git-scm.com/downloads', note: 'Install git from your OS package manager.' }, ['--version']));
+  // build toolchain: what play build / apple build need
+  const javaBin = env.JAVA_HOME && existsSync(join(env.JAVA_HOME, 'bin')) ? join(env.JAVA_HOME, 'bin', process.platform === 'win32' ? 'java.exe' : 'java') : which('java');
+  out.push({ id: 'java', name: 'JDK (Java)', found: !!javaBin, path: javaBin, version: javaBin ? parseVersion(firstLine([javaBin, '-version'], spawnEnv)) : null, source: javaBin ? 'system' : null,
+    usedFor: 'play build (Gradle), keystore checks (keytool)', required: project ? requiredJdk(project) : null,
+    install: { kind: 'link', url: 'https://adoptium.net/temurin/releases/', note: 'Temurin JDK; the version the Android Gradle plugin asks for.' } });
+  const sdk = androidSdk(project ? [join(project, 'android'), project] : [], env);
+  const sdkm = sdk.path ? ['cmdline-tools/latest/bin', 'tools/bin'].map(d => join(sdk.path!, d, process.platform === 'win32' ? 'sdkmanager.bat' : 'sdkmanager')).find(f => existsSync(f)) ?? null : null;
+  out.push({ id: 'sdkmanager', name: 'Android SDK command-line tools', found: !!sdkm, path: sdkm ?? sdk.path, version: null, source: sdkm ? 'system' : null,
+    usedFor: 'play build: SDK platforms and build tools', install: { kind: 'link', url: 'https://developer.android.com/studio#command-tools', note: 'Android Studio, or the command-line tools alone.' } });
+  if (process.platform === 'darwin') out.push(bin('pod' as ToolId, 'CocoaPods', 'iOS builds of Capacitor / React Native / Flutter apps with a Podfile', { kind: 'link', url: 'https://cocoapods.org', note: 'brew install cocoapods' }, ['--version']));
+  out.push(bin('node', 'Node.js', 'web builds (npm scripts), npx storebound', { kind: 'link', url: 'https://nodejs.org', note: 'The LTS release.' }, ['--version']));
+  out.push(bin('bun', 'Bun', 'storebound from a git clone, web builds', { kind: 'link', url: 'https://bun.sh', note: 'bun.sh installer or a package manager.' }, ['--version']));
+  out.push(bin('bundletool', 'bundletool', 'checks of the AAB (sizes, APKs per device)', { kind: 'link', url: 'https://github.com/google/bundletool/releases', note: 'Optional.' }, ['version']));
+  for (const t of out) {
+    if ((t.id as string) === 'pod') t.id = 'cocoapods';
+    t.status = !t.found ? 'missing' : t.required && t.version && majorOf(t.version) < majorOf(t.required) ? 'outdated' : 'ok';
+  }
   return out;
 }
 
+/** "17.0.9" -> 17; "1.8.0_392" -> 8. */
+export const majorOf = (v: string): number => { const n = v.replace(/^1\.(?=\d+\.)/, '').match(/\d+/); return n ? Number(n[0]) : 0; };
+
+/**
+ * The JDK major version an Android project needs: jvmToolchain(N) / JavaVersion.VERSION_N in its Gradle files, at
+ * least the Android Gradle plugin's minimum (AGP 8.x: 17, 7.x: 11). Null when the project has no Gradle files.
+ */
+export function requiredJdk(project: string): string | null {
+  const files = ['android/build.gradle', 'android/build.gradle.kts', 'android/app/build.gradle', 'android/app/build.gradle.kts', 'android/gradle/libs.versions.toml',
+    'build.gradle', 'build.gradle.kts', 'app/build.gradle', 'app/build.gradle.kts', 'gradle/libs.versions.toml'].map(f => join(project, f)).filter(f => existsSync(f));
+  if (!files.length) return null;
+  const text = files.map(f => { try { return readFileSync(f, 'utf8'); } catch { return ''; } }).join('\n');
+  const toolchain = /jvmToolchain\s*\(\s*(\d+)/.exec(text)?.[1] ?? /JavaVersion\.VERSION_(\d+)/.exec(text)?.[1] ?? /JavaLanguageVersion\.of\(\s*(\d+)/.exec(text)?.[1];
+  const agp = /com\.android\.tools\.build:gradle:(\d+)/.exec(text)?.[1] ?? /^\s*(?:agp|androidGradlePlugin|android-gradle-plugin)\s*=\s*"(\d+)/m.exec(text)?.[1];
+  const fromAgp = agp ? (Number(agp) >= 8 ? 17 : Number(agp) >= 7 ? 11 : 8) : 17;
+  return String(Math.max(toolchain ? Number(toolchain) : 0, fromAgp));
+}
+
 /**
  * Commands that install a tool on this OS (shown by `storebound doctor` and the desktop Dependencies screen, never
  * run by storebound). Package managers only; the desktop app can also download ffmpeg and Chrome for Testing itself.
@@ -119,6 +160,12 @@ export function installCommands(id: ToolId | 'playwright', platform: NodeJS.Plat
     case 'simctl': return mac ? ['Install Xcode from the App Store, then: sudo xcode-select -s /Applications/Xcode.app'] : [];
     case 'adb': return mac ? ['brew install --cask android-platform-tools'] : win ? ['winget install --id Google.PlatformTools'] : ['sudo apt install adb'];
     case 'git': return mac ? ['xcode-select --install', 'brew install git'] : win ? ['winget install --id Git.Git'] : ['sudo apt install git'];
+    case 'java': return mac ? ['brew install --cask temurin@17'] : win ? ['winget install --id EclipseAdoptium.Temurin.17.JDK'] : ['sudo apt install openjdk-17-jdk'];
+    case 'sdkmanager': return mac ? ['brew install --cask android-commandlinetools'] : win ? ['winget install --id Google.AndroidStudio'] : ['sudo snap install android-studio --classic'];
+    case 'cocoapods': return mac ? ['brew install cocoapods'] : [];
+    case 'node': return mac ? ['brew install node'] : win ? ['winget install --id OpenJS.NodeJS.LTS'] : ['sudo apt install nodejs npm'];
+    case 'bun': return mac ? ['brew install oven-sh/bun/bun'] : win ? ['winget install --id Oven-sh.Bun'] : ['curl -fsSL https://bun.sh/install | bash'];
+    case 'bundletool': return mac ? ['brew install bundletool'] : [];
   }
 }
 
diff --git a/tests/deps.test.ts b/tests/deps.test.ts
new file mode 100644
index 0000000..053ede4
--- /dev/null
+++ b/tests/deps.test.ts
@@ -0,0 +1,36 @@
+// Build dependencies: the JDK the project needs, version parsing, and doctor --install planning.
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { installPlan, type DoctorResult } from '../cli/doctor';
+import { installCommands, majorOf, parseVersion, requiredJdk } from '../cli/lib/tools';
+
+function project(files: Record<string, string>): string {
+  const dir = mkdtempSync(join(tmpdir(), 'sb-deps-'));
+  for (const [p, text] of Object.entries(files)) { mkdirSync(join(dir, p, '..'), { recursive: true }); writeFileSync(join(dir, p), text); }
+  return dir;
+}
+
+describe('build dependencies', () => {
+  test('JDK version from java -version and majors', () => {
+    expect(parseVersion('openjdk version "17.0.9" 2023-10-17')).toBe('17.0.9');
+    expect(parseVersion('java version "1.8.0_392"')).toBe('1.8.0_392');
+    expect(majorOf('17.0.9')).toBe(17);
+    expect(majorOf('1.8.0_392')).toBe(8);
+  });
+  test('the JDK a project needs: AGP minimum, jvmToolchain wins when higher', () => {
+    expect(requiredJdk(project({ 'android/build.gradle': "classpath 'com.android.tools.build:gradle:8.7.2'" }))).toBe('17');
+    expect(requiredJdk(project({ 'android/build.gradle': "classpath 'com.android.tools.build:gradle:7.4.2'" }))).toBe('11');
+    expect(requiredJdk(project({ 'android/gradle/libs.versions.toml': 'agp = "8.5.0"', 'android/app/build.gradle.kts': 'kotlin { jvmToolchain(21) }' }))).toBe('21');
+    expect(requiredJdk(project({ 'package.json': '{}' }))).toBeNull();
+  });
+  test('install commands per OS; doctor --install runs only package-manager commands, never sudo', () => {
+    expect(installCommands('java', 'win32')[0]).toBe('winget install --id EclipseAdoptium.Temurin.17.JDK');
+    expect(installCommands('sdkmanager', 'darwin')[0]).toBe('brew install --cask android-commandlinetools');
+    const r = { tools: [{ id: 'java', name: 'JDK (Java)', found: false, version: null, path: null, source: null, usedFor: '', install: [], url: null, status: 'missing' }] } as unknown as DoctorResult;
+    expect(installPlan(r, 'java', 'win32')).toMatchObject({ command: 'winget install --id EclipseAdoptium.Temurin.17.JDK', runnable: true });
+    expect(installPlan(r, 'java', 'linux').runnable).toBe(false);
+    expect(() => installPlan(r, 'nope', 'win32')).toThrow('no tool "nope"');
+  });
+});
diff --git a/tools/gen-flags.ts b/tools/gen-flags.ts
index c98884a..aaacd81 100644
--- a/tools/gen-flags.ts
+++ b/tools/gen-flags.ts
@@ -9,7 +9,7 @@
 //   bun tools/gen-flags.ts            write cli/data/flags.json
 //   bun tools/gen-flags.ts --check    exit 1 when the file is stale (tests/cli-help.test.ts runs it)
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname, join, relative, resolve } from 'node:path';
+import { dirname, join, relative, resolve, sep } from 'node:path';
 
 const ROOT = resolve(import.meta.dir, '..');
 const CLI = join(ROOT, 'cli');
@@ -48,9 +48,9 @@ function scan(entry: string, errors: string[]): Set<string> {
     const f = todo.pop()!;
     if (seen.has(f)) continue;
     seen.add(f);
-    const rel = relative(CLI, f);
+    const rel = relative(CLI, f).split(sep).join('/');
     // lib/embedded.ts holds file texts (templates, shots pages: their own scripts read URL params), not flag reads
-    if (rel === 'index.ts' || rel === 'commands.ts' || rel === join('lib', 'embedded.ts')) continue;
+    if (rel === 'index.ts' || rel === 'commands.ts' || rel === 'lib/embedded.ts') continue;
     const src = readFileSync(f, 'utf8');
     for (const m of src.matchAll(READ)) if (!NOT_ARGS.test(m[1]!)) flags.add(m[3]!);
     for (const fl of DYNAMIC[rel] ?? []) flags.add(fl);

From 9bd17c401d987dea8cce54cd570ab625194d8b2b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:27:34 +0800
Subject: [PATCH 009/255] Bypass mode (owner opt-in, default off): storebound
 settings bypass on|off|status and a one-time question in init; MCP owner_step
 (owner-only commands, dry run first), owner-only api operations with --yes
 --confirm, console plans may press buttons.final; every action logged to
 .storebound/owner-actions.log; docs/bypass.md, agent rules, tests

---
 .cursor/rules/storebound.mdc    |  4 +++
 .github/copilot-instructions.md |  4 +++
 AGENTS.md                       |  4 +++
 CHANGELOG.md                    |  6 ++++
 GEMINI.md                       |  4 +++
 cli/api.ts                      |  3 +-
 cli/api/gate.ts                 |  7 +++--
 cli/commands.ts                 |  1 +
 cli/data/flags.json             |  4 +++
 cli/init.ts                     | 11 ++++++-
 cli/lib/bypass.ts               | 54 +++++++++++++++++++++++++++++++++
 cli/lib/console-plan.ts         |  2 +-
 cli/lib/desktop-coverage.ts     |  1 +
 cli/mcp-tools.ts                | 14 +++++++--
 cli/mcp.ts                      | 14 ++++++---
 cli/settings.ts                 | 20 ++++++++++++
 docs/agents-core.md             |  4 +++
 docs/bypass.md                  | 30 ++++++++++++++++++
 docs/desktop-coverage.md        |  3 +-
 tests/bypass.test.ts            | 39 ++++++++++++++++++++++++
 tests/desktop-coverage.test.ts  |  2 +-
 21 files changed, 218 insertions(+), 13 deletions(-)
 create mode 100644 cli/lib/bypass.ts
 create mode 100644 cli/settings.ts
 create mode 100644 docs/bypass.md
 create mode 100644 tests/bypass.test.ts

diff --git a/.cursor/rules/storebound.mdc b/.cursor/rules/storebound.mdc
index 8ba9940..18a30b6 100644
--- a/.cursor/rules/storebound.mdc
+++ b/.cursor/rules/storebound.mdc
@@ -20,6 +20,10 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
+   MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
+   console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
+   `.storebound/owner-actions.log`. Legal agreements, passwords and 2FA stay with the owner if your own rules say so.
 3. **Ask the owner only for facts that no code, config or doc can prove:** compliance answers such as Data safety,
    App Privacy, age rating, export compliance, partial data deletion. Collect ALL of them in ONE batch at the start
    (`storebound check` and `storebound validate` list them), never one at a time during the run. Reuse answers that
diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
index 5515c62..7ab0224 100644
--- a/.github/copilot-instructions.md
+++ b/.github/copilot-instructions.md
@@ -20,6 +20,10 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
+   MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
+   console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
+   `.storebound/owner-actions.log`. Legal agreements, passwords and 2FA stay with the owner if your own rules say so.
 3. **Ask the owner only for facts that no code, config or doc can prove:** compliance answers such as Data safety,
    App Privacy, age rating, export compliance, partial data deletion. Collect ALL of them in ONE batch at the start
    (`storebound check` and `storebound validate` list them), never one at a time during the run. Reuse answers that
diff --git a/AGENTS.md b/AGENTS.md
index abbc502..ea2ee8f 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -21,6 +21,10 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
+   MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
+   console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
+   `.storebound/owner-actions.log`. Legal agreements, passwords and 2FA stay with the owner if your own rules say so.
 3. **Ask the owner only for facts that no code, config or doc can prove:** compliance answers such as Data safety,
    App Privacy, age rating, export compliance, partial data deletion. Collect ALL of them in ONE batch at the start
    (`storebound check` and `storebound validate` list them), never one at a time during the run. Reuse answers that
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 14004de..89ac8d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+- **Bypass mode (owner opt-in, default off).** `storebound settings bypass on` (or "y" in `storebound init`) lets the AI
+  agent press the owner-only buttons too: MCP `owner_step` (submit, release, rollout, testers, replies, prices, ...;
+  dry run first), owner-only `storebound api` operations with `--yes --confirm <operationId>`, console plans'
+  `buttons.final`. Every action is logged to `.storebound/owner-actions.log`; `bypass off` restores the old behaviour.
+  docs/bypass.md.
+
 - **Build dependencies in `doctor` and the desktop Dependencies screen.** JDK (with the version the project needs from
   the Android Gradle plugin / jvmToolchain, "too old" when below it), Android SDK command-line tools, CocoaPods, Node.js,
   Bun and bundletool join ffmpeg, Chrome, Xcode, adb and git. `storebound doctor --install <tool> --yes` runs this OS's
diff --git a/GEMINI.md b/GEMINI.md
index 05becf9..3677fc4 100644
--- a/GEMINI.md
+++ b/GEMINI.md
@@ -19,6 +19,10 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
+   MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
+   console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
+   `.storebound/owner-actions.log`. Legal agreements, passwords and 2FA stay with the owner if your own rules say so.
 3. **Ask the owner only for facts that no code, config or doc can prove:** compliance answers such as Data safety,
    App Privacy, age rating, export compliance, partial data deletion. Collect ALL of them in ONE batch at the start
    (`storebound check` and `storebound validate` list them), never one at a time during the run. Reuse answers that
diff --git a/cli/api.ts b/cli/api.ts
index b8b5568..a629aed 100644
--- a/cli/api.ts
+++ b/cli/api.ts
@@ -10,6 +10,7 @@
 // owner-only operations (submit, release, delete, cancel, prices, testers, review replies, experiments: cli/api/gate.ts)
 // also need the operation id typed at the prompt. Under MCP or the desktop app no write is ever sent.
 import { readFileSync, writeFileSync } from 'node:fs';
+import { bypassOn } from './lib/bypass';
 import { resolve } from 'node:path';
 import type { Args } from './lib/args';
 import { allOps, authFor, type BuiltRequest, buildRequest, resolveOp, send, sendAll } from './api/client';
@@ -145,7 +146,7 @@ export async function run(args: Args): Promise<void> {
     kind, method: op.method, dry: args.has('dry'), yes: args.has('yes'), getOnly,
     tty: stdinIsTTY() && !!process.stdout.isTTY,
     agent: process.env.STOREBOUND_SERVE === '1' || process.env.STOREBOUND_MCP === '1',
-    confirm: args.get('confirm'), opId: op.id,
+    confirm: args.get('confirm'), opId: op.id, bypass: bypassOn(),
   });
   if (decision.action === 'refuse') {
     const instead = op.method !== 'GET' ? dedicatedCommand(st, op.id) : null;
diff --git a/cli/api/gate.ts b/cli/api/gate.ts
index 599721e..d3f6ef7 100644
--- a/cli/api/gate.ts
+++ b/cli/api/gate.ts
@@ -83,6 +83,8 @@ export interface GateInput {
   confirm?: string;
   /** the operation id the call resolved to (what --confirm must equal) */
   opId?: string;
+  /** the owner turned bypass mode on (storebound settings bypass on): owner-only operations take --confirm too */
+  bypass?: boolean;
 }
 
 export type Decision =
@@ -102,16 +104,17 @@ export const OWNER_NO_CONFIRM = 'refused: owner-only operation: --confirm does n
 export function decide(g: GateInput): Decision {
   if (g.getOnly && g.method.toUpperCase() !== 'GET') return { action: 'refuse', why: 'api get runs GET operations only' };
   if (g.kind === 'read') return g.dry ? { action: 'dry', why: '--dry' } : { action: 'send' };
-  if (g.agent) return { action: 'refuse', why: g.kind === 'owner'
+  if (g.agent && !g.bypass) return { action: 'refuse', why: g.kind === 'owner'
     ? 'owner-only operation: never through MCP or the desktop app; the owner runs it in a terminal'
     : 'writes through `storebound api` are not available to MCP or the desktop app; run it in a terminal' };
   if (g.dry || !g.yes) return { action: 'dry', why: g.dry ? '--dry' : 'writes are dry by default: add --yes (in a terminal) to send' };
   if (g.confirm !== undefined) {
     // an agent's typed confirmation: only for plain writes, only when it names this exact operation
-    if (g.kind === 'owner') return { action: 'refuse', why: OWNER_NO_CONFIRM };
+    if (g.kind === 'owner' && !g.bypass) return { action: 'refuse', why: OWNER_NO_CONFIRM };
     if (!g.opId || g.confirm !== g.opId) return { action: 'refuse', why: `refused: --confirm ${g.confirm} does not equal the operation id ${g.opId ?? '?'}. Nothing was sent.` };
     return { action: 'send' };
   }
+  if (g.agent) return { action: 'refuse', why: 'bypass mode: an agent sends writes with --yes --confirm <operationId>' };
   if (!g.tty) return { action: 'refuse', why: NOT_A_TTY };
   return g.kind === 'owner' ? { action: 'confirm', typed: true } : { action: 'send' };
 }
diff --git a/cli/commands.ts b/cli/commands.ts
index 7d1846f..789219c 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -15,6 +15,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'apps': [() => import('./apps'), 'list (every app the store keys can see: App Store Connect team, Play developer accounts; --icons) | check (key works / permission missing / revoked, with the fix); --store apple|play, --json; read-only | folders | add [<folder>] | remove <folder>: the app folders of this machine, the same list as the desktop app'],
   'desktop': [() => import('./desktop'), 'open the storebound desktop app on this folder; not installed or another version: download it for this system (size, SHA-256, signature checked), install it for this user (asks once; --yes) and open it; --download only saves the installer, --dry / --json change nothing'],
   'accounts': [() => import('./accounts'), 'the store accounts of this machine (credential profiles in ~/.storebound/credentials, shared with the desktop app): list | import (a project\'s store keys -> a profile; --dry first) | use <profile> | default <profile> (the machine default; --clear)'],
+  'settings': [() => import('./settings'), 'per-machine settings: bypass on | off | status (owner opt-in: the agent also presses the owner-only buttons; default off)'],
   'doctor': [() => import('./doctor'), 'build and capture dependencies (JDK with the version the project needs, Android SDK, Xcode, CocoaPods, Node, Bun, ffmpeg, Chrome, adb, git, bundletool) and how to install what is missing; --install <tool> --yes; --json'],
   'scan': [() => import('./scan'), 'offline, read-only rejection-risk scan of the project itself (stack, SDKs, Info.plist, manifest, listings) with guideline, evidence file:line, fix and skill, plus the Data safety / App Privacy / ATT / privacy manifest proposal; --write puts the detected answers into the config; --json; exit 1 on blockers'],
   'api': [() => import('./api'), 'every App Store Connect / Google Play API operation: list | coverage | apple|play <operationId|METHOD path> [--param k=v] [--body f.json] [--all-pages] (GET runs; writes dry unless --yes in a terminal; owner-only ones need the id typed)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index be6a24c..a93f66b 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -797,6 +797,7 @@
   "serve": [
    "stdio"
   ],
+  "settings": [],
   "shots capture": [
    "concurrency",
    "device",
@@ -1504,6 +1505,9 @@
    "storebound scan --write-only [--dry]  only that write (with --dry: the config diff), no report (desktop Fix button)",
    "storebound scan --originality [--against <folders>] [--threshold 0.7]   also the 4.3 / Play repetitive content"
   ],
+  "settings": [
+   "storebound settings bypass on | off | status   owner opt-in: the agent also presses the owner-only buttons"
+  ],
   "shots capture": [
    "storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet] [--source web|ios-sim|android-emu|folder]"
   ],
diff --git a/cli/init.ts b/cli/init.ts
index bb77b19..56c3608 100644
--- a/cli/init.ts
+++ b/cli/init.ts
@@ -6,11 +6,13 @@
 // App Privacy answers, Data safety section, listing copy and screenshot copy; every answer is a starting point to edit.
 // Lookup per file: templates/profiles/<profile>/<file>, then the profile it builds on, then templates/<file>.
 import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { bypassOn, readSettings, setBypass } from './lib/bypass';
+import { stdinIsTTY } from './lib/tty';
 import { dirname, join, relative, resolve } from 'node:path';
 import type { Args } from './lib/args';
 import { type AppProfile, PROFILES } from './lib/config';
 import { ignoreInRepo } from './lib/git-ignore';
-import { log } from './lib/log';
+import { log, promptOut } from './lib/log';
 import { TEMPLATE_TEXT } from './lib/template-files';
 import * as rt from './lib/rt';
 
@@ -74,5 +76,12 @@ export async function run(args: Args): Promise<void> {
   // store art (rendered or pulled from the stores) is never committed
   const art = ignoreInRepo(join(root, 'store', 'renders'), 'storebound: store art (rendered or pulled from the stores), never committed');
   if (art) log('init', `.gitignore: added ${art}`);
+  // bypass mode is asked once per machine, only of a person at a terminal (default no); agents never answer it
+  if (readSettings().bypass === undefined && stdinIsTTY() && process.stdout.isTTY && !args.has('yes')) {
+    promptOut().write('Bypass mode: let your AI agent also press the owner-only buttons (Submit for review, releases, rollouts, testers, replies, prices, console Create)? Every action is logged; turn it off any time with storebound settings bypass off. [y/N] ');
+    const a = await rt.readLine();
+    setBypass(a !== null && /^y(es)?$/i.test(a.trim()));
+    log('init', `bypass mode: ${bypassOn() ? 'ON' : 'off'} (storebound settings bypass on | off)`);
+  }
   log('init', 'next: edit storebound.config.ts, store/*.md and .storebound/credentials.json, then `storebound check`; store/workflows/*.yml: storebound flow list');
 }
diff --git a/cli/lib/bypass.ts b/cli/lib/bypass.ts
new file mode 100644
index 0000000..2b3d15e
--- /dev/null
+++ b/cli/lib/bypass.ts
@@ -0,0 +1,54 @@
+// Bypass mode: the owner's opt-in to let an AI agent press the owner-only buttons too (Submit for review, releases and
+// rollouts, testers, review replies, prices, deletes, cancels, console final buttons). Default OFF. Stored per machine
+// in ~/.storebound/settings.json, never in a project's config or repo:
+//   storebound settings bypass on | off | status
+// When ON: the MCP server lists `owner_step` (runs one owner command, dry run first), `storebound api` sends owner-only
+// operations with --yes --confirm <operationId>, console plans tell the agent it may press buttons.final. Every owner
+// action an agent runs is appended to <project>/.storebound/owner-actions.log. `bypass off` restores the old behaviour
+// at once. An AI client may still ask the owner itself for legal agreements, passwords and 2FA (its own rules).
+import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+
+export interface Settings { bypass?: { on: boolean; since: string } }
+
+export const settingsFile = (env: Record<string, string | undefined> = process.env): string =>
+  join(env.STOREBOUND_HOME ?? join(homedir(), '.storebound'), 'settings.json');
+
+export function readSettings(env: Record<string, string | undefined> = process.env): Settings {
+  try { return JSON.parse(readFileSync(settingsFile(env), 'utf8')) as Settings; } catch { return {}; }
+}
+
+export function writeSettings(s: Settings, env: Record<string, string | undefined> = process.env): void {
+  const f = settingsFile(env);
+  mkdirSync(dirname(f), { recursive: true });
+  writeFileSync(f, `${JSON.stringify(s, null, 2)}\n`);
+}
+
+/** Whether the owner turned bypass mode on for this machine. */
+export const bypassOn = (env: Record<string, string | undefined> = process.env): boolean => readSettings(env).bypass?.on === true;
+
+export function setBypass(on: boolean, env: Record<string, string | undefined> = process.env): Settings {
+  const s = readSettings(env);
+  s.bypass = { on, since: new Date().toISOString() };
+  writeSettings(s, env);
+  return s;
+}
+
+/** Owner-only commands `owner_step` may run in bypass mode (CLI words). Everything else has its own MCP tool. */
+export const OWNER_COMMANDS = [
+  'apple submit', 'apple resubmit', 'apple iap-submit', 'apple release', 'apple preorder',
+  'play release', 'play rollout',
+  'reviews', 'apple testflight', 'play products', 'play subscriptions', 'apple iap', 'apple subscriptions', 'prices',
+] as const;
+export type OwnerCommand = typeof OWNER_COMMANDS[number];
+
+export const BYPASS_NOTICE = 'bypass mode is ON (storebound settings bypass off turns it off): the agent runs owner steps itself; each one is logged to .storebound/owner-actions.log';
+
+/** One line per owner action an agent ran: when, what, the result. */
+export function logOwnerAction(root: string, entry: { command: string; dry: boolean; exit: number; summary?: string }): string {
+  const f = join(root, '.storebound', 'owner-actions.log');
+  if (!existsSync(dirname(f))) mkdirSync(dirname(f), { recursive: true });
+  appendFileSync(f, `${new Date().toISOString()}\t${entry.dry ? 'dry' : 'RAN'}\texit ${entry.exit}\t${entry.command}${entry.summary ? `\t${entry.summary.replace(/\s+/g, ' ').slice(0, 300)}` : ''}\n`);
+  return f;
+}
diff --git a/cli/lib/console-plan.ts b/cli/lib/console-plan.ts
index f800c59..f333e0d 100644
--- a/cli/lib/console-plan.ts
+++ b/cli/lib/console-plan.ts
@@ -191,7 +191,7 @@ const DRIVING = [
   'Text fields: click the field and TYPE the text (key presses), then read the value back. Never set it programmatically (form_input, el.value = …): App Store Connect\'s New App kept its Name and SKU empty after a value set (verified 2026-10-13).',
   'Owner steps: hand the owner plan.ownerBatch in ONE message before you start (the "before" items: answers, the IARC Terms of Use box) and run without stopping until the "after" items (the final button).',
   'An answer with status ask-owner: ask the owner in chat before filling it (AGENTS.md rule 5), or leave it empty and tell the owner. Never guess.',
-  'Stop before the final button (buttons.final) and tell the owner exactly what to press; then run the verify command.',
+  'Stop before the final button (buttons.final) and tell the owner exactly what to press; then run the verify command. (Bypass mode on, storebound settings bypass: press buttons.final yourself after the owner\'s standing opt-in; agreements, passwords and 2FA still go to the owner.)',
   'Never sign in (never type the owner\'s own password), accept an agreement or tick a declaration: the owner does that in the browser. The one password you type is the App Review demo account from .storebound/credentials.json (reviewDemoAccount) on Play\'s Sign in details card, never printed.',
 ];
 
diff --git a/cli/lib/desktop-coverage.ts b/cli/lib/desktop-coverage.ts
index ba5a082..e127b05 100644
--- a/cli/lib/desktop-coverage.ts
+++ b/cli/lib/desktop-coverage.ts
@@ -46,6 +46,7 @@ export const DESKTOP_COVERAGE: Record<string, Coverage> = {
   'import': { where: 'App folders / first-run guide: Import from fastlane', methods: ['host:project_import_fastlane'] },
   'install': { where: `${T}: Install for an AI tool`, methods: ['agent.install'] },
   'mcp': { not: 'the stdio server for AI tools; the window itself is the GUI over the same commands' },
+  'settings': { not: 'per-machine switch for AI agents (bypass mode); in the window the owner presses owner actions in a native dialog anyway' },
   'serve': { not: 'the JSON-RPC sidecar the window runs on; nothing to click' },
   'apps': { where: 'Accounts (store apps per account, key check) and App folders (list, add, remove)', methods: ['host:store_apps_refresh', 'host:account_check', 'host:projects_list', 'host:project_add', 'host:project_remove'] },
   'desktop': { not: 'opens or installs this window from a terminal' },
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index bd3a0ba..ea8e7f1 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -2,6 +2,7 @@
 // Rules: one tool per CLI command; every tool that writes anything has `dry_run` defaulting to true; nothing that
 // submits for review, releases to the public, resumes / completes a rollout, cancels a submission or deletes is
 // exposed. Those stay terminal commands the owner runs (they also ask for confirmation there).
+import { OWNER_COMMANDS } from './lib/bypass';
 
 export interface JsonSchema { type: string; description?: string; enum?: (string | number)[]; default?: unknown; items?: JsonSchema; minimum?: number; maximum?: number; pattern?: string; additionalProperties?: JsonSchema | boolean }
 
@@ -479,8 +480,17 @@ export const OUTPUT_SCHEMA = {
   required: ['exitCode', 'command', 'output'],
 } as const;
 
-export function listTools(): Record<string, unknown>[] {
-  return TOOLS.map(t => ({
+/** Bypass mode only (storebound settings bypass on): one owner-only command, dry run by default. */
+export const OWNER_STEP: ToolDef = {
+  name: 'owner_step', title: 'Owner step (bypass mode)', write: true, destructive: true, network: true,
+  description: `Bypass mode is on: run one owner-only command yourself (${OWNER_COMMANDS.join(', ')}). Pass the CLI words as command and the rest as args (ids, build numbers, --track, --percent ...). Always call it with dry_run: true first and read the plan; then dry_run: false runs it with --yes. Every call is logged to .storebound/owner-actions.log. Legal agreements, passwords and 2FA stay with the owner.`,
+  command: [], props: { command: { type: 'string', enum: [...OWNER_COMMANDS], description: 'The owner-only command' }, args: { type: 'array', items: { type: 'string' }, description: 'Its arguments and options' } },
+  required: ['command'],
+  args: i => [...String(i.command).split(' '), ...(Array.isArray(i.args) ? i.args.map(String) : [])],
+};
+
+export function listTools(bypass = false): Record<string, unknown>[] {
+  return [...TOOLS, ...(bypass ? [OWNER_STEP] : [])].map(t => ({
     name: t.name, title: t.title, description: t.description,
     inputSchema: inputSchema(t), outputSchema: OUTPUT_SCHEMA,
     annotations: { title: t.title, readOnlyHint: !t.write, destructiveHint: t.write ? !!t.destructive : false, idempotentHint: !!t.idempotent || !t.write, openWorldHint: t.network },
diff --git a/cli/mcp.ts b/cli/mcp.ts
index 1bf1f64..95405cc 100644
--- a/cli/mcp.ts
+++ b/cli/mcp.ts
@@ -25,7 +25,8 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import { runCommand, type Running } from './lib/runner';
-import { listTools, TOOLS, toArgv, validateInput } from './mcp-tools';
+import { listTools, OWNER_STEP, TOOLS, toArgv, validateInput } from './mcp-tools';
+import { bypassOn, logOwnerAction } from './lib/bypass';
 import * as rt from './lib/rt';
 
 /** Current (modern, stateless) revision. */
@@ -102,18 +103,23 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
     case 'server/discover':
       return ok({ supportedVersions: SUPPORTED, capabilities: { tools: {} }, instructions: INSTRUCTIONS, ttlMs: TOOLS_TTL_MS, cacheScope: 'public' });
     case 'ping': return ok({});
-    case 'tools/list': return ok({ tools: listTools(), ...(era === 'modern' ? { ttlMs: TOOLS_TTL_MS, cacheScope: 'public' } : {}) });
+    case 'tools/list': return ok({ tools: listTools(bypassOn()), ...(era === 'modern' ? { ttlMs: TOOLS_TTL_MS, cacheScope: 'public' } : {}) });
     case 'tools/call': {
       const name = String(m.params?.name ?? '');
-      const tool = TOOLS.find(t => t.name === name);
+      const tool = TOOLS.find(t => t.name === name) ?? (name === OWNER_STEP.name && bypassOn() ? OWNER_STEP : undefined);
       if (!tool) return err(-32602, `Unknown tool: ${name}`);
       const input = (m.params?.arguments ?? {}) as Record<string, unknown>;
       const problems = validateInput(tool, input);
       if (problems.length) return ok({ content: [{ type: 'text', text: `Invalid arguments: ${problems.join('; ')}` }], isError: true });
       const { argv: raw, dryRun } = toArgv(tool, input);
-      const argv = textToFile(raw);
+      // owner_step runs the real command with --yes; its dry run is the command's own --dry
+      const argv = tool === OWNER_STEP && !dryRun ? [...textToFile(raw), '--yes'] : textToFile(raw);
       const r = await run(argv, m.id);
       let out = clip(r.out, argv.includes('--json'));
+      if (tool === OWNER_STEP) {
+        const file = logOwnerAction(process.env.STOREBOUND_PROJECT || process.cwd(), { command: `storebound ${argv.join(' ')}`, dry: dryRun, exit: r.code, summary: r.out.trim().split('\n').slice(-1)[0] });
+        out += `\n(bypass mode: logged to ${file})`;
+      }
       if (dryRun) out += '\n\n(dry run: nothing was changed. Ask the owner before calling again with dry_run: false.)';
       const structured = { exitCode: r.code, dryRun, command: `storebound ${argv.join(' ')}`, output: out };
       return ok({ content: [{ type: 'text', text: `$ storebound ${argv.join(' ')}\n${out}\n[exit ${r.code}]` }], structuredContent: structured, isError: r.code !== 0 });
diff --git a/cli/settings.ts b/cli/settings.ts
new file mode 100644
index 0000000..f058b7f
--- /dev/null
+++ b/cli/settings.ts
@@ -0,0 +1,20 @@
+// Per-machine storebound settings (never in a project's config or repo).
+//   storebound settings bypass on | off | status   owner opt-in: the agent also presses the owner-only buttons
+//                                                  (docs/bypass.md); default off
+import type { Args } from './lib/args';
+import { BYPASS_NOTICE, bypassOn, OWNER_COMMANDS, readSettings, setBypass, settingsFile } from './lib/bypass';
+import { log, printJson } from './lib/log';
+
+export async function run(args: Args): Promise<void> {
+  const [what, value] = args._;
+  if (what !== 'bypass') throw new Error('usage: storebound settings bypass on | off | status');
+  if (value === 'on' || value === 'off') {
+    setBypass(value === 'on');
+    log('settings', value === 'on'
+      ? `${BYPASS_NOTICE}. Unlocked: ${OWNER_COMMANDS.join(', ')}, owner-only API operations (storebound api ... --yes --confirm <operationId>) and console final buttons.`
+      : 'bypass mode is OFF: owner-only steps are the owner\'s again (MCP hides owner_step, api refuses owner operations, console plans stop at buttons.final)');
+  } else if (value && value !== 'status') throw new Error('usage: storebound settings bypass on | off | status');
+  const s = readSettings();
+  if (args.has('json')) { printJson({ bypass: bypassOn(), since: s.bypass?.since ?? null, file: settingsFile() }); return; }
+  if (!value || value === 'status') log('settings', `bypass mode: ${bypassOn() ? 'ON' : 'off'}${s.bypass?.since ? ` (since ${s.bypass.since})` : ''} · ${settingsFile()}`);
+}
diff --git a/docs/agents-core.md b/docs/agents-core.md
index de13e68..0482818 100644
--- a/docs/agents-core.md
+++ b/docs/agents-core.md
@@ -15,6 +15,10 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
+   MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
+   console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
+   `.storebound/owner-actions.log`. Legal agreements, passwords and 2FA stay with the owner if your own rules say so.
 3. **Ask the owner only for facts that no code, config or doc can prove:** compliance answers such as Data safety,
    App Privacy, age rating, export compliance, partial data deletion. Collect ALL of them in ONE batch at the start
    (`storebound check` and `storebound validate` list them), never one at a time during the run. Reuse answers that
diff --git a/docs/bypass.md b/docs/bypass.md
new file mode 100644
index 0000000..c82b6fc
--- /dev/null
+++ b/docs/bypass.md
@@ -0,0 +1,30 @@
+# Bypass mode
+
+Default **off**. The owner turns it on once per machine when they want their AI agent to press the owner-only buttons
+too, instead of stopping and asking:
+
+```sh
+storebound settings bypass on      # or answer "y" to the question in storebound init
+storebound settings bypass status
+storebound settings bypass off     # back to the owner pressing every final button, at once
+```
+
+It is stored in `~/.storebound/settings.json` (this machine only), never in a project's config or repo.
+
+## What it unlocks
+
+- MCP: the `owner_step` tool appears. It runs one of: `apple submit`, `apple resubmit`, `apple iap-submit`, `apple release`,
+  `apple preorder`, `play release`, `play rollout`, `reviews` (replies), `apple testflight` (testers), `play products`,
+  `play subscriptions`, `apple iap`, `apple subscriptions`, `prices` (live prices). Dry run first (`dry_run` defaults to
+  true), then `dry_run: false` runs it with `--yes`.
+- `storebound api`: owner-only operations (submit, release, delete, ...) are sent for an agent with
+  `--yes --confirm <operationId>`.
+- Console plans: the agent may press `buttons.final` (Publish, Create app, Send for review) itself.
+
+## What stays
+
+- Every owner action an agent runs is appended to `<project>/.storebound/owner-actions.log` (time, dry or ran, exit
+  code, the command, the last line of its output).
+- Dry runs still come first and must pass.
+- An AI client may still ask the owner for legal agreements, passwords and 2FA codes: those are its own rules, and a
+  storebound setting cannot change them.
diff --git a/docs/desktop-coverage.md b/docs/desktop-coverage.md
index 7d1e8ee..73c9dde 100644
--- a/docs/desktop-coverage.md
+++ b/docs/desktop-coverage.md
@@ -5,7 +5,7 @@ Every CLI command (cli/commands.ts) and the desktop place that runs it. "covered
 (serve.ts, or a host command `host:`) and the window calls it; tests/desktop-coverage.test.ts fails on a gap.
 Owner-only parts are owner actions in the window or owner steps with their terminal command (More tools).
 
-**95 commands:** 91 covered, 0 gaps, 4 not for the desktop.
+**96 commands:** 91 covered, 0 gaps, 5 not for the desktop.
 
 | command | status | where in the window | methods | owner step |
 |---|---|---|---|---|
@@ -17,6 +17,7 @@ Owner-only parts are owner actions in the window or owner steps with their termi
 | `apps` | covered | Accounts (store apps per account, key check) and App folders (list, add, remove) | `host:store_apps_refresh`, `host:account_check`, `host:projects_list`, `host:project_add`, `host:project_remove` |  |
 | `desktop` | not-for-desktop | opens or installs this window from a terminal |  |  |
 | `accounts` | covered | Accounts screen (profiles shared with the CLI) | `host:accounts_list`, `host:account_add_play`, `host:account_add_apple`, `host:account_update` |  |
+| `settings` | not-for-desktop | per-machine switch for AI agents (bypass mode); in the window the owner presses owner actions in a native dialog anyway |  |  |
 | `doctor` | covered | Dependencies screen | `system.tools`, `host:tools_info` |  |
 | `scan` | covered | Checks tab: Scan, Fix | `scan`, `scan.write` |  |
 | `api` | not-for-desktop | raw API calls by operation id: every task has its own screen, and raw writes stay a terminal step the owner types |  |  |
diff --git a/tests/bypass.test.ts b/tests/bypass.test.ts
new file mode 100644
index 0000000..2e67793
--- /dev/null
+++ b/tests/bypass.test.ts
@@ -0,0 +1,39 @@
+// Bypass mode: off by default; when the owner turns it on, owner-only steps open to the agent and every one is logged.
+import { describe, expect, test } from 'bun:test';
+import { mkdtempSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { decide } from '../cli/api/gate';
+import { bypassOn, logOwnerAction, setBypass } from '../cli/lib/bypass';
+import { listTools, OWNER_STEP, toArgv } from '../cli/mcp-tools';
+
+const owner = { kind: 'owner' as const, method: 'POST', dry: false, yes: true, tty: false, agent: true, getOnly: false, confirm: 'reviewSubmissions_createInstance', opId: 'reviewSubmissions_createInstance' };
+
+describe('bypass mode', () => {
+  test('off by default; on / off per machine (settings.json)', () => {
+    const env = { STOREBOUND_HOME: mkdtempSync(join(tmpdir(), 'sb-home-')) };
+    expect(bypassOn(env)).toBe(false);
+    setBypass(true, env);
+    expect(bypassOn(env)).toBe(true);
+    setBypass(false, env);
+    expect(bypassOn(env)).toBe(false);
+  });
+  test('the api gate: owner operations refused for an agent unless bypass, then only with --yes --confirm <operationId>', () => {
+    expect(decide(owner).action).toBe('refuse');
+    expect(decide({ ...owner, bypass: true }).action).toBe('send');
+    expect(decide({ ...owner, bypass: true, confirm: 'other' }).action).toBe('refuse');
+    expect(decide({ ...owner, bypass: true, confirm: undefined }).action).toBe('refuse');
+    expect(decide({ ...owner, bypass: true, yes: false }).action).toBe('dry');
+  });
+  test('MCP lists owner_step only in bypass mode; dry run first', () => {
+    expect(listTools(false).some(t => t.name === 'owner_step')).toBe(false);
+    expect(listTools(true).some(t => t.name === 'owner_step')).toBe(true);
+    expect(toArgv(OWNER_STEP, { command: 'apple submit', args: ['--build', '42'] }).argv).toEqual(['apple', 'submit', '--build', '42', '--dry']);
+    expect(toArgv(OWNER_STEP, { command: 'play rollout', args: ['--percent', '20'], dry_run: false })).toEqual({ argv: ['play', 'rollout', '--percent', '20'], dryRun: false });
+  });
+  test('every owner action is logged in the project', () => {
+    const root = mkdtempSync(join(tmpdir(), 'sb-owner-'));
+    const f = logOwnerAction(root, { command: 'storebound apple submit --build 42 --yes', dry: false, exit: 0, summary: 'submitted' });
+    expect(readFileSync(f, 'utf8')).toMatch(/\tRAN\texit 0\tstorebound apple submit --build 42 --yes\tsubmitted\n$/);
+  });
+});
diff --git a/tests/desktop-coverage.test.ts b/tests/desktop-coverage.test.ts
index 7c4b686..cef5fcf 100644
--- a/tests/desktop-coverage.test.ts
+++ b/tests/desktop-coverage.test.ts
@@ -8,7 +8,7 @@ import { describeMethods } from '../cli/serve';
 import { analyze, render } from '../tools/gen-desktop-coverage';
 
 /** The only commands that make no sense in a window. Adding one here needs a reason in the coverage map. */
-const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api'];
+const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings'];
 
 describe('desktop coverage', () => {
   const { rows, extra } = analyze();

From 25c2d5cd1e56aa871b063ba3a238ca5fa33a6fba Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 01:33:30 +0700
Subject: [PATCH 010/255] storebound 0.8.26: version in package.json and every
 copy, CHANGELOG 0.8.26 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 40ac3a9..3c7a497 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.25",
+      "version": "0.8.26",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 6e1a9e5..1a38eff 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.25",
+  "version": "0.8.26",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 6821e9c..861bf1c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.25",
+  "version": "0.8.26",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e980e05..8e7161a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.8.26 · 2026-10-21
+
 - **Bypass mode (owner opt-in, default off).** `storebound settings bypass on` (or "y" in `storebound init`) lets the AI
   agent press the owner-only buttons too: MCP `owner_step` (submit, release, rollout, testers, replies, prices, ...;
   dry run first), owner-only `storebound api` operations with `--yes --confirm <operationId>`, console plans'
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 72b47c9..1b939ad 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.25",
+  "version": "0.8.26",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 368d239..957e60a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4010,7 +4010,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.25"
+version = "0.8.26"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index e1f9e34..bb0cad6 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.25"
+version = "0.8.26"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 1ff5db7..614a48e 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.25",
+  "version": "0.8.26",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 9571d0f..41bb88e 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.25",
+  "version": "0.8.26",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index e5f365b..88630d9 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.25",
+  "version": "0.8.26",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From b97f23701fd4c4bae4af8c4beb605bfe161960bb Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:38:45 +0800
Subject: [PATCH 011/255] apple build stops before the archive in an SSH /
 non-GUI session (errSecInternalComponent) with how to run it in the logged-in
 session, --allow-ssh to skip; relative credential paths resolve from the
 project and xcodebuild gets an absolute ASC key path; tests, pitfall 101

---
 CHANGELOG.md                   |  4 ++++
 cli/apple/build.ts             |  6 +++++-
 cli/data/flags.json            |  2 ++
 cli/lib/credentials.ts         | 18 +++++++++++++-----
 cli/lib/xcode.ts               |  8 ++++++++
 skills/store-pitfalls/SKILL.md | 13 +++++++++++++
 tests/build-sign.test.ts       | 27 +++++++++++++++++++++++++++
 7 files changed, 72 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e980e05..85300fe 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **`apple build` stops at once over SSH** (codesign fails there with errSecInternalComponent) and names how to run it
+  in the logged-in session; relative `ASC_P8` / `PLAY_SERVICE_ACCOUNT` paths are read from the project folder and
+  xcodebuild gets an absolute key path. Pitfall 101.
+
 - **Bypass mode (owner opt-in, default off).** `storebound settings bypass on` (or "y" in `storebound init`) lets the AI
   agent press the owner-only buttons too: MCP `owner_step` (submit, release, rollout, testers, replies, prices, ...;
   dry run first), owner-only `storebound api` operations with `--yes --confirm <operationId>`, console plans'
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index dcb71dc..eccc64f 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -23,7 +23,7 @@ import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
 import { capacitorProject, webStep } from '../lib/web-assets';
-import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, xcodePath, flutterConfigArgs, ipaInfo, pickXcode, scanXcode, showCmd } from '../lib/xcode';
+import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { findBundleId } from './signing';
@@ -168,6 +168,10 @@ export async function run(ctx: Ctx): Promise<void> {
     return;
   }
   if (process.platform !== 'darwin' || !rt.which('xcodebuild')) throw new Error('apple build needs macOS with Xcode (xcode-select --install is not enough: the full Xcode app)');
+  // codesign in an SSH session cannot use the login keychain: the archive fails late with errSecInternalComponent
+  // (Embed Pods Frameworks). Stop before the web build and the archive (pitfall 101).
+  const remote = remoteBuildSession(process.env, rt.spawnSync(['launchctl', 'managername'], { timeout: 5000 }).stdout.toString().trim());
+  if (remote && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session: a Jenkins / Forgejo agent started in that session, or from SSH: write the command into a .command file and \`open -a Terminal <file>\` (it runs in the GUI session; unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside). --allow-ssh skips this check after \`security unlock-keychain\`.`);
   const web = await webStep({ ...webOpts, dry: false });
   for (const n of target.notes) log(TAG, n);
   const rsync = foreignRsync(process.env.PATH);
diff --git a/cli/data/flags.json b/cli/data/flags.json
index a93f66b..a24b5e2 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -62,6 +62,7 @@
   ],
   "apple appinfo": [],
   "apple build": [
+   "allow-ssh",
    "allow-stale-web",
    "build-number",
    "configuration",
@@ -941,6 +942,7 @@
    "all-pages",
    "allow-existing",
    "allow-price-changes",
+   "allow-ssh",
    "allow-stale-web",
    "alpha",
    "apk",
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index 3b36e9d..f027d57 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -189,7 +189,13 @@ function value(root: string, name: string): string | undefined {
 }
 
 /** A path or the inline content itself. */
-export const inline = (v: string, marker: RegExp): string => (marker.test(v) ? v : readFileSync(v.replace(/^~(?=\/)/, homedir()), 'utf8'));
+export const inline = (v: string, marker: RegExp, root?: string): string => (marker.test(v) ? v : readFileSync(credPath(v, root), 'utf8'));
+
+/** A credential path: ~ expanded; a relative one is taken from the project folder, not the working directory. */
+export function credPath(v: string, root?: string): string {
+  const h = v.replace(/^~(?=[/\\])/, homedir());
+  return isAbsolute(h) || !root ? h : resolve(root, h);
+}
 
 export function parseServiceAccount(text: string): ServiceAccount {
   const j = JSON.parse(text) as Partial<ServiceAccount>;
@@ -201,7 +207,7 @@ export function parseServiceAccount(text: string): ServiceAccount {
 export function playServiceAccount(root: string): ServiceAccount {
   const v = value(root, 'PLAY_SERVICE_ACCOUNT');
   if (!v) throw new Error('PLAY_SERVICE_ACCOUNT is not set (env, the credential profile in ~/.storebound/credentials, or .storebound/credentials.json): path to the service account JSON key; `storebound accounts` lists the profiles');
-  return parseServiceAccount(inline(v, /^\s*\{/));
+  return parseServiceAccount(inline(v, /^\s*\{/, root));
 }
 
 export function ascKey(root: string): AscKey {
@@ -209,8 +215,8 @@ export function ascKey(root: string): AscKey {
   const issuerId = value(root, 'ASC_ISSUER_ID');
   if (!keyId || !issuerId) throw new Error('ASC_KEY_ID and ASC_ISSUER_ID are not set (env, the credential profile in ~/.storebound/credentials, or .storebound/credentials.json); `storebound accounts` lists the profiles');
   const p8 = value(root, 'ASC_P8') ?? join(homedir(), '.appstoreconnect/private_keys', `AuthKey_${keyId}.p8`);
-  if (!/BEGIN PRIVATE KEY/.test(p8) && !existsSync(p8.replace(/^~(?=\/)/, homedir()))) throw new Error(`App Store Connect key not found: ${p8} (set ASC_P8)`);
-  return { keyId, issuerId, pem: inline(p8, /BEGIN PRIVATE KEY/) };
+  if (!/BEGIN PRIVATE KEY/.test(p8) && !existsSync(credPath(p8, root))) throw new Error(`App Store Connect key not found: ${p8} (set ASC_P8)`);
+  return { keyId, issuerId, pem: inline(p8, /BEGIN PRIVATE KEY/, root) };
 }
 
 /** The keys and nestings a review contact is read from (first hit): the documented one, then shapes seen in real files. */
@@ -306,7 +312,9 @@ export const maskSecret = (s: string): string => (s ? '********' : '(empty)');
 export function ascKeyFile(root: string): { keyPath: string; keyId: string; issuerId: string; cleanup: () => void } {
   const k = ascKey(root);
   const raw = value(root, 'ASC_P8') ?? join(homedir(), '.appstoreconnect/private_keys', `AuthKey_${k.keyId}.p8`);
-  if (!/BEGIN PRIVATE KEY/.test(raw)) return { keyPath: raw.replace(/^~(?=\/)/, homedir()), keyId: k.keyId, issuerId: k.issuerId, cleanup: () => {} };
+  // xcodebuild refuses a relative -authenticationKeyPath ("must be an absolute path"): resolve it from the project
+  const asPath = (p: string) => { const h = p.replace(/^~(?=[/\\])/, homedir()); return isAbsolute(h) ? h : resolve(root, h); };
+  if (!/BEGIN PRIVATE KEY/.test(raw)) return { keyPath: asPath(raw), keyId: k.keyId, issuerId: k.issuerId, cleanup: () => {} };
   const dir = mkdtempSync(join(tmpdir(), 'storebound-key-'));
   chmodSync(dir, 0o700);
   const keyPath = join(dir, `AuthKey_${k.keyId}.p8`);
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index 0969ac8..3ff1171 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -242,3 +242,11 @@ export function distributionErrors(output: string, tmp: string = process.env.TMP
   }
   return logs[0] ? { log: logs[0], lines: [] } : null;
 }
+
+/** Why this is not the Mac's logged-in GUI session (SSH, or a launchd manager other than Aqua), else null: codesign
+ *  cannot reach the login keychain there (errSecInternalComponent). */
+export function remoteBuildSession(env: Record<string, string | undefined>, managerName: string): string | null {
+  if (env.SSH_CONNECTION || env.SSH_CLIENT || env.SSH_TTY) return 'this is an SSH session';
+  if (managerName && managerName !== 'Aqua') return `this is not the logged-in GUI session (launchctl manager: ${managerName})`;
+  return null;
+}
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 4de9ad2..d74c179 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1220,3 +1220,16 @@ that fails without the fix (see CONTRIBUTING.md).
   --from-text <file>`.
 - **Guard:** `textToFile` in `cli/mcp.ts` sends multi-line text as `--from-text <temp file>`; `clip` keeps the start of
   long JSON output (the end of plain text) and names a file with the whole output (`tests/mcp-text-file.test.ts`).
+
+## 101. `apple build` over SSH: errSecInternalComponent; a relative ASC_P8 path: "must be an absolute path"
+- **Symptom:** `storebound apple build` run over SSH on a Mac failed late in the archive (Embed Pods Frameworks,
+  codesign errSecInternalComponent). With `ASC_P8` set to a project-relative path, xcodebuild stopped with
+  "-authenticationKeyPath must be an absolute path".
+- **Cause:** codesign in an SSH session cannot use the login keychain. The key path was handed to xcodebuild as written
+  (and read relative to the working directory, not the project).
+- **Do:** run the build in the Mac's logged-in session: a CI agent started there, or from SSH a `.command` file opened
+  with `open -a Terminal <file>` (unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside). `--allow-ssh` after
+  `security unlock-keychain` skips the check.
+- **Guard:** `remoteBuildSession` in `cli/lib/xcode.ts` stops `apple build` before the archive; `credPath` in
+  `cli/lib/credentials.ts` resolves relative credential paths from the project and `ascKeyFile` hands xcodebuild an
+  absolute path (`tests/build-sign.test.ts`).
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 83f1f1d..843df9f 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -488,3 +488,30 @@ describe('MCP', () => {
     for (const t of TOOLS.filter(t => ['apple_signing_status', 'originality'].includes(t.name))) expect(t.write).toBe(false);
   });
 });
+
+describe('apple build outside the GUI session (pitfall 101)', () => {
+  test('SSH or a non-Aqua launchd manager is named; the logged-in session passes', async () => {
+    const { remoteBuildSession } = await import('../cli/lib/xcode');
+    expect(remoteBuildSession({ SSH_CONNECTION: '10.0.0.2 5000 10.0.0.3 22' }, 'Aqua')).toBe('this is an SSH session');
+    expect(remoteBuildSession({}, 'Background')).toContain('launchctl manager: Background');
+    expect(remoteBuildSession({}, 'Aqua')).toBeNull();
+  });
+  test('a project-relative ASC_P8 path becomes absolute (xcodebuild refuses a relative -authenticationKeyPath)', async () => {
+    const { mkdtempSync, mkdirSync, writeFileSync } = await import('node:fs');
+    const { tmpdir } = await import('node:os');
+    const { join, isAbsolute } = await import('node:path');
+    const d = mkdtempSync(join(tmpdir(), 'sb-p8-'));
+    mkdirSync(join(d, '.storebound'));
+    const { generateKeyPairSync } = await import('node:crypto');
+    writeFileSync(join(d, '.storebound/AuthKey_KEYID00002.p8'), generateKeyPairSync('ec', { namedCurve: 'P-256' }).privateKey.export({ type: 'pkcs8', format: 'pem' }).toString());
+    writeFileSync(join(d, '.storebound/credentials.json'), JSON.stringify({ ASC_KEY_ID: 'KEYID00002', ASC_ISSUER_ID: '00000000-0000-0000-0000-000000000000', ASC_P8: '.storebound/AuthKey_KEYID00002.p8' }));
+    const saved = { ...process.env };
+    try {
+      for (const k of ['ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8']) delete process.env[k];
+      const { ascKeyFile } = await import('../cli/lib/credentials');
+      const path = ascKeyFile(d).keyPath;
+      expect(isAbsolute(path)).toBe(true);
+      expect(path).toBe(join(d, '.storebound/AuthKey_KEYID00002.p8'));
+    } finally { process.env = saved; }
+  });
+});

From 5bfbcefffa9c16a44db616af792f0b8c187f7315 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 02:50:12 +0800
Subject: [PATCH 012/255] release: a staged npm publish is reported with what
 happened on 0.8.25 / 0.8.26 (published on its own ~10 min later, nothing to
 approve): check dist-tags first

---
 tools/release.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/release.ts b/tools/release.ts
index 0565d00..16e3ec7 100644
--- a/tools/release.ts
+++ b/tools/release.ts
@@ -466,7 +466,7 @@ async function npmRelease(version: string, token: string): Promise<void> {
   const pub = npmRun(['publish'], token);
   // npm stages a token publish for the maintainer's approval on npmjs.com (409 "previously staged version" on a retry):
   // nothing to wait for here, the owner approves it once
-  if (/staged/i.test(pub.out)) { say(`npm: ${version} is staged and waits for the maintainer's approval: https://www.npmjs.com/package/storebound (approve it there; then deprecate runs with: bun tools/release.ts npm-publish)`); return; }
+  if (/staged/i.test(pub.out)) { say(`npm: ${version} is staged: npm published 0.8.25 and 0.8.26 on its own about 10 minutes later with nothing waiting at https://www.npmjs.com/settings/<user>/staged-packages; check "npm view storebound dist-tags.latest" before approving anything, then run bun tools/release.ts npm-publish for the deprecate`); return; }
   if (pub.code !== 0 && !/previously published|cannot publish over/i.test(pub.out)) fail(`npm publish failed: ${pub.out.trim().split('\n').slice(-4).join(' ')}`);
   // the registry lags a little after a publish; wait (timeout, heartbeat) until it serves the version as latest
   const end = Date.now() + 5 * 60_000;
@@ -482,7 +482,7 @@ async function npmRelease(version: string, token: string): Promise<void> {
         say(`npm: ${version} is not on the registry yet: publishing once more`);
         const p2 = npmRun(['publish'], token);
         // 0.8.25: the first publish was staged silently; the retry's 409 "previously staged" says so (no 5-minute wait)
-        if (/staged/i.test(p2.out)) { say(`npm: ${version} is staged and waits for the maintainer's approval: https://www.npmjs.com/package/storebound (approve it there; then deprecate runs with: bun tools/release.ts npm-publish)`); return; }
+        if (/staged/i.test(p2.out)) { say(`npm: ${version} is staged: npm published 0.8.25 and 0.8.26 on its own about 10 minutes later with nothing waiting at https://www.npmjs.com/settings/<user>/staged-packages; check "npm view storebound dist-tags.latest" before approving anything, then run bun tools/release.ts npm-publish for the deprecate`); return; }
         if (p2.code !== 0 && !/previously published|cannot publish over/i.test(p2.out)) fail(`npm publish (second try) failed: ${p2.out.trim().split('\n').slice(-4).join(' ')}`);
       }
     }

From ee35b1134192b0c47159eb83a97be91e8478dca4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 03:22:23 +0800
Subject: [PATCH 013/255] Direct store API traces: comment lines are skipped
 and each file names a tool once (a real project listed one script five times,
 mostly doc comments)

---
 cli/lib/fastlane-traces.ts    | 6 ++++--
 tests/fastlane-traces.test.ts | 9 +++++++++
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/cli/lib/fastlane-traces.ts b/cli/lib/fastlane-traces.ts
index ddc0668..fc847de 100644
--- a/cli/lib/fastlane-traces.ts
+++ b/cli/lib/fastlane-traces.ts
@@ -72,9 +72,11 @@ export function findFastlaneTraces(root: string): FastlaneTrace[] {
     lines(f).forEach((l, i) => {
       const m = CLI_CALL.exec(l);
       if (m) out.push({ file: rel(f), line: i + 1, text: l.trim().slice(0, 200), store: storeOf(m[1]!) });
-      else if (!/package\.json$/.test(f) || /"[^"]*"\s*:\s*"/.test(l)) {
+      // comment lines name the tools without calling them; one line per file and tool is enough (a real project
+      // listed the same script five times, mostly from its doc comments)
+      else if ((!/package\.json$/.test(f) || /"[^"]*"\s*:\s*"/.test(l)) && !/^\s*(\/\/|\/?\*|#|--|REM\b)/i.test(l)) {
         const d = DIRECT.find(x => x.re.test(l));
-        if (d) out.push({ file: rel(f), line: i + 1, text: l.trim().slice(0, 200), store: d.store, via: 'api', fix: d.fix });
+        if (d && !out.some(o => o.file === rel(f) && o.fix === d.fix)) out.push({ file: rel(f), line: i + 1, text: l.trim().slice(0, 200), store: d.store, via: 'api', fix: d.fix });
       }
     });
   }
diff --git a/tests/fastlane-traces.test.ts b/tests/fastlane-traces.test.ts
index 5b7a4df..7d03491 100644
--- a/tests/fastlane-traces.test.ts
+++ b/tests/fastlane-traces.test.ts
@@ -56,3 +56,12 @@ describe('fastlane traces', () => {
     expect(f?.fix).toContain('storebound import fastlane');
   });
 });
+
+describe('direct store API traces stay short', () => {
+  test('comment lines are skipped and each file names a tool once', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-fl2-'));
+    mkdirSync(join(dir, 'tools'));
+    writeFileSync(join(dir, 'tools/ship.mjs'), "/**\n *  4. `xcrun altool --upload-package` uploads it\n */\n// altool needs the app id\nconst words = ['xcrun', 'altool', '--upload-package'];\nrun(['xcrun', 'altool', '--validate-app']);\n");
+    expect(findFastlaneTraces(dir)).toEqual([expect.objectContaining({ file: 'tools/ship.mjs', line: 5, via: 'api' })]);
+  });
+});

From 256e8e33ad0716b4588c4d84fde01ff1abc9e6d6 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 03:28:46 +0800
Subject: [PATCH 014/255] storebound aab <file> --json (offline packageName /
 versionCode / versionName / SDKs / sha256, no config) and play release --json
 result for CI scripts that replace their own Play API calls

---
 CHANGELOG.md                   |  4 ++++
 cli/aab.ts                     | 18 ++++++++++++++++++
 cli/commands.ts                |  1 +
 cli/data/flags.json            |  4 ++++
 cli/lib/desktop-coverage.ts    |  1 +
 cli/play/release.ts            |  8 +++++++-
 docs/desktop-coverage.md       |  3 ++-
 tests/build-sign.test.ts       |  9 +++++++++
 tests/desktop-coverage.test.ts |  2 +-
 9 files changed, 47 insertions(+), 3 deletions(-)
 create mode 100644 cli/aab.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ce895b9..7e71c73 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **CI-friendly Play output.** `storebound aab <file.aab> --json` reads packageName, versionCode, versionName, SDKs and
+  sha256 offline (no config, no upload); `play release ... --json` prints {versionCode, sha256, name, tracks[{track,
+  status, userFraction}]}. `play status --json` already lists each track's releases.
+
 - **`apple build` stops at once over SSH** (codesign fails there with errSecInternalComponent) and names how to run it
   in the logged-in session; relative `ASC_P8` / `PLAY_SERVICE_ACCOUNT` paths are read from the project folder and
   xcodebuild gets an absolute key path. Pitfall 101.
diff --git a/cli/aab.ts b/cli/aab.ts
new file mode 100644
index 0000000..c4ef0eb
--- /dev/null
+++ b/cli/aab.ts
@@ -0,0 +1,18 @@
+// Offline: what an Android App Bundle says about itself, without a config or credentials (CI reads the version code
+// before it uploads, instead of unzipping the AAB or asking the Play API).
+//   storebound aab <file.aab> [--json]
+import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import type { Args } from './lib/args';
+import { aabInfo } from './lib/gradle';
+import { log, printJson } from './lib/log';
+
+export async function run(args: Args): Promise<void> {
+  const file = args._.find(x => x.endsWith('.aab'));
+  if (!file) throw new Error('usage: storebound aab <file.aab> [--json]');
+  const data = readFileSync(resolve(file));
+  const info = { ...aabInfo(data), sha256: createHash('sha256').update(data).digest('hex'), bytes: data.length };
+  if (args.has('json')) { printJson(info); return; }
+  log('aab', `${info.packageName} ${info.versionName ?? '?'} (${info.versionCode}) · minSdk ${info.minSdk ?? '?'} · targetSdk ${info.targetSdk ?? '?'} · ${(info.bytes / 1e6).toFixed(1)} MB`);
+}
diff --git a/cli/commands.ts b/cli/commands.ts
index 789219c..5b0f6ae 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -16,6 +16,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'desktop': [() => import('./desktop'), 'open the storebound desktop app on this folder; not installed or another version: download it for this system (size, SHA-256, signature checked), install it for this user (asks once; --yes) and open it; --download only saves the installer, --dry / --json change nothing'],
   'accounts': [() => import('./accounts'), 'the store accounts of this machine (credential profiles in ~/.storebound/credentials, shared with the desktop app): list | import (a project\'s store keys -> a profile; --dry first) | use <profile> | default <profile> (the machine default; --clear)'],
   'settings': [() => import('./settings'), 'per-machine settings: bypass on | off | status (owner opt-in: the agent also presses the owner-only buttons; default off)'],
+  'aab': [() => import('./aab'), 'offline: an AAB file: packageName, versionCode, versionName, min / target SDK, sha256 (no config, no upload); --json'],
   'doctor': [() => import('./doctor'), 'build and capture dependencies (JDK with the version the project needs, Android SDK, Xcode, CocoaPods, Node, Bun, ffmpeg, Chrome, adb, git, bundletool) and how to install what is missing; --install <tool> --yes; --json'],
   'scan': [() => import('./scan'), 'offline, read-only rejection-risk scan of the project itself (stack, SDKs, Info.plist, manifest, listings) with guideline, evidence file:line, fix and skill, plus the Data safety / App Privacy / ATT / privacy manifest proposal; --write puts the detected answers into the config; --json; exit 1 on blockers'],
   'api': [() => import('./api'), 'every App Store Connect / Google Play API operation: list | coverage | apple|play <operationId|METHOD path> [--param k=v] [--body f.json] [--all-pages] (GET runs; writes dry unless --yes in a terminal; owner-only ones need the id typed)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index a24b5e2..e27b0da 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -11,6 +11,7 @@
   "yes"
  ],
  "commands": {
+  "aab": [],
   "accounts": [
    "clear",
    "dir",
@@ -1178,6 +1179,9 @@
   ]
  },
  "usage": {
+  "aab": [
+   "storebound aab <file.aab> [--json]"
+  ],
   "accounts": [
    "storebound accounts [list] [--json]                     every profile: Apple key, Play account (masked), which",
    "storebound accounts import [--dir <project>] [--name <profile>] [--dry] [--yes]",
diff --git a/cli/lib/desktop-coverage.ts b/cli/lib/desktop-coverage.ts
index e127b05..8628439 100644
--- a/cli/lib/desktop-coverage.ts
+++ b/cli/lib/desktop-coverage.ts
@@ -46,6 +46,7 @@ export const DESKTOP_COVERAGE: Record<string, Coverage> = {
   'import': { where: 'App folders / first-run guide: Import from fastlane', methods: ['host:project_import_fastlane'] },
   'install': { where: `${T}: Install for an AI tool`, methods: ['agent.install'] },
   'mcp': { not: 'the stdio server for AI tools; the window itself is the GUI over the same commands' },
+  'aab': { not: 'a CI helper that reads one AAB file; the window shows the builds each store has' },
   'settings': { not: 'per-machine switch for AI agents (bypass mode); in the window the owner presses owner actions in a native dialog anyway' },
   'serve': { not: 'the JSON-RPC sidecar the window runs on; nothing to click' },
   'apps': { where: 'Accounts (store apps per account, key check) and App folders (list, add, remove)', methods: ['host:store_apps_refresh', 'host:account_check', 'host:projects_list', 'host:project_add', 'host:project_remove'] },
diff --git a/cli/play/release.ts b/cli/play/release.ts
index 808214a..24c3d8f 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -8,9 +8,10 @@
 // Draft app (never published): Play only accepts status "draft" on any track; the first production release is sent
 // from the Console (see the play-first-release skill).
 import { readFileSync, statSync } from 'node:fs';
+import { createHash } from 'node:crypto';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
-import { done, log, warn } from '../lib/log';
+import { done, log, warn, printJson } from '../lib/log';
 import { aabInfo } from '../lib/gradle';
 import { playTargetSdkProblem, targetSdkFile } from '../lib/store-minimums';
 import { playClient } from './client';
@@ -55,6 +56,7 @@ export async function run(ctx: Ctx): Promise<void> {
     if (sdkWhy) throw new Error(`${aab}: not released, ${sdkWhy}`);
   }
   const play = await playClient(root, pkg);
+  let released = fixed ?? '';
   try {
     await play.edit(async (id, ctl) => {
       let code = fixed ?? '';
@@ -74,6 +76,7 @@ export async function run(ctx: Ctx): Promise<void> {
           log('play', `uploaded versionCode ${code}`);
         }
       }
+      released = code;
       let changed = 0;
       for (const t of tracks) {
         const release: PlayTrackRelease = { versionCodes: [code], status: t.status };
@@ -100,5 +103,8 @@ export async function run(ctx: Ctx): Promise<void> {
     if (config.play?.managedPublishing !== true) warn('play', `managed publishing is ${config.play?.managedPublishing === false ? 'off' : 'off by default (play.managedPublishing not set)'}: the release goes live automatically once Google approves it`);
     if (prod.status === 'draft') log('play', 'next: `storebound console plan play-production-countries` (the API cannot set countries), then `storebound console plan play-production-release` (its final "Send changes for review" is the owner\'s)');
   }
+  // machine-readable result for CI scripts (a Jenkins stage reads it instead of calling the Play API itself)
+  if (a.has('json')) printJson({ versionCode: released ? Number(released) : null, sha256: aab ? createHash('sha256').update(readFileSync(aab)).digest('hex') : null, name: a.get('name') ?? null,
+    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry') });
   done('play', 'release done');
 }
diff --git a/docs/desktop-coverage.md b/docs/desktop-coverage.md
index 73c9dde..ae4a1af 100644
--- a/docs/desktop-coverage.md
+++ b/docs/desktop-coverage.md
@@ -5,7 +5,7 @@ Every CLI command (cli/commands.ts) and the desktop place that runs it. "covered
 (serve.ts, or a host command `host:`) and the window calls it; tests/desktop-coverage.test.ts fails on a gap.
 Owner-only parts are owner actions in the window or owner steps with their terminal command (More tools).
 
-**96 commands:** 91 covered, 0 gaps, 5 not for the desktop.
+**97 commands:** 91 covered, 0 gaps, 6 not for the desktop.
 
 | command | status | where in the window | methods | owner step |
 |---|---|---|---|---|
@@ -18,6 +18,7 @@ Owner-only parts are owner actions in the window or owner steps with their termi
 | `desktop` | not-for-desktop | opens or installs this window from a terminal |  |  |
 | `accounts` | covered | Accounts screen (profiles shared with the CLI) | `host:accounts_list`, `host:account_add_play`, `host:account_add_apple`, `host:account_update` |  |
 | `settings` | not-for-desktop | per-machine switch for AI agents (bypass mode); in the window the owner presses owner actions in a native dialog anyway |  |  |
+| `aab` | not-for-desktop | a CI helper that reads one AAB file; the window shows the builds each store has |  |  |
 | `doctor` | covered | Dependencies screen | `system.tools`, `host:tools_info` |  |
 | `scan` | covered | Checks tab: Scan, Fix | `scan`, `scan.write` |  |
 | `api` | not-for-desktop | raw API calls by operation id: every task has its own screen, and raw writes stay a terminal step the owner types |  |  |
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 843df9f..a397a99 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -515,3 +515,12 @@ describe('apple build outside the GUI session (pitfall 101)', () => {
     } finally { process.env = saved; }
   });
 });
+
+describe('storebound aab (CI reads the version code without uploading)', () => {
+  test('prints packageName, versionCode, versionName as JSON', () => {
+    const d = dir('inspect-aab');
+    writeFileSync(join(d, 'app.aab'), makeAab('com.example.game', 4321, '3.1.0'));
+    const r = Bun.spawnSync(['bun', join(import.meta.dir, '..', 'cli', 'index.ts'), 'aab', 'app.aab', '--json'], { cwd: d, stdout: 'pipe', stderr: 'pipe' });
+    expect(JSON.parse(r.stdout.toString())).toMatchObject({ packageName: 'com.example.game', versionCode: 4321, versionName: '3.1.0' });
+  });
+});
diff --git a/tests/desktop-coverage.test.ts b/tests/desktop-coverage.test.ts
index cef5fcf..c12236b 100644
--- a/tests/desktop-coverage.test.ts
+++ b/tests/desktop-coverage.test.ts
@@ -8,7 +8,7 @@ import { describeMethods } from '../cli/serve';
 import { analyze, render } from '../tools/gen-desktop-coverage';
 
 /** The only commands that make no sense in a window. Adding one here needs a reason in the coverage map. */
-const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings'];
+const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings', 'aab'];
 
 describe('desktop coverage', () => {
   const { rows, extra } = analyze();

From 600b6893e5c7d92f77ce96753135cd0974fd945a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 03:33:30 +0800
Subject: [PATCH 015/255] play listing uploads the hi-res icon (and the feature
 graphic) for a new Play language in the same edit (403 no high resolution
 icon set; play images skipped it), pitfall 102; script traces skip test files

---
 CHANGELOG.md                   |  4 ++++
 cli/lib/fastlane-traces.ts     |  3 ++-
 cli/play/images.ts             | 12 ++++++++++++
 cli/play/listing.ts            | 10 ++++++++++
 skills/store-pitfalls/SKILL.md | 10 ++++++++++
 tests/fastlane-traces.test.ts  |  9 +++++++++
 6 files changed, 47 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7e71c73..24629af 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **A new Play language in one run.** `play listing` uploads the hi-res icon (and the feature graphic when rendered) for a
+  language Play does not have yet, in the same edit (Play refused the commit with 403 otherwise). Pitfall 102.
+- Script traces skip test files (`*.test.*`, `*.spec.*`).
+
 - **CI-friendly Play output.** `storebound aab <file.aab> --json` reads packageName, versionCode, versionName, SDKs and
   sha256 offline (no config, no upload); `play release ... --json` prints {versionCode, sha256, name, tracks[{track,
   status, userFraction}]}. `play status --json` already lists each track's releases.
diff --git a/cli/lib/fastlane-traces.ts b/cli/lib/fastlane-traces.ts
index fc847de..2a80a8f 100644
--- a/cli/lib/fastlane-traces.ts
+++ b/cli/lib/fastlane-traces.ts
@@ -68,7 +68,8 @@ export function findFastlaneTraces(root: string): FastlaneTrace[] {
     try { for (const n of readdirSync(dir)) if (SCRIPT_EXT.test(n)) files.push(join(dir, n)); } catch { /* none */ }
   }
   try { for (const n of readdirSync(root)) if (/\.(sh|bash|ps1)$/i.test(n)) files.push(join(root, n)); } catch { /* unreadable */ }
-  for (const f of new Set(files)) {
+  // test files quote the tools in their assertions; they upload nothing
+  for (const f of [...new Set(files)].filter(x => !/\.(test|spec)\.[cm]?[jt]sx?$/i.test(x))) {
     lines(f).forEach((l, i) => {
       const m = CLI_CALL.exec(l);
       if (m) out.push({ file: rel(f), line: i + 1, text: l.trim().slice(0, 200), store: storeOf(m[1]!) });
diff --git a/cli/play/images.ts b/cli/play/images.ts
index 8ee5940..de181b2 100644
--- a/cli/play/images.ts
+++ b/cli/play/images.ts
@@ -72,6 +72,18 @@ export function missingChange(type: string, remote: number, prune: boolean): Ima
 /** What one language uploads: the sets with files, the optional types without, and errors (missing required sets). */
 export interface LangImages { sets: [string, string[]][]; missing: string[]; errors: string[] }
 
+/** The graphics a NEW Play language needs before its edit can commit (403 "no high resolution icon set for language"):
+ *  the hi-res icon and, when rendered, the feature graphic. `play listing` uploads them in the same edit as the text,
+ *  so listing and images never wait for each other (pitfall 102). */
+export function firstGraphics(ctx: Ctx, code: string): [string, string][] {
+  const { config, resolve } = ctx.loaded;
+  const icon = resolve(config.play?.icon ?? join(config.icons?.out ?? 'store/icons', 'play-512.png'));
+  const l = byPlayCode(config.languages).get(code);
+  const src = resolve(config.renders ?? config.shots?.out ?? 'store/renders');
+  const li = langImages(code, l ? join(src, l.id) : join(src, '__none__'), icon, false);
+  return li.sets.filter(([t]) => t === 'icon' || t === 'featureGraphic').map(([t, files]) => [t, files[0]!] as [string, string]);
+}
+
 /** The image sets of one language folder (`tablets` = resolved play.tablets). Reads the folder only. */
 export function langImages(code: string, dir: string, icon: string, tablets: boolean): LangImages {
   const out: LangImages = { sets: [], missing: [], errors: [] };
diff --git a/cli/play/listing.ts b/cli/play/listing.ts
index 2d86894..fc0ded4 100644
--- a/cli/play/listing.ts
+++ b/cli/play/listing.ts
@@ -20,6 +20,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, step, warn } from '../lib/log';
 import { playClient } from './client';
+import { firstGraphics } from './images';
 import { stdinIsTTY } from '../lib/tty';
 
 /** Play release notes that name iOS, iPhone, App Store, ... are refused before any edit, dry runs included (pitfall 77). */
@@ -167,6 +168,15 @@ export async function run(ctx: Ctx): Promise<void> {
     for (const [i, b] of todo.entries()) {
       await play.call('PUT', `${play.API}/edits/${id}/listings/${b.language}`, b);
       log('play', step(i + 1, todo.length, b.language!));
+      // a language Play does not have yet: its edit only commits with a hi-res icon (pitfall 102)
+      if (!now.some(n => n.language === b.language)) {
+        const graphics = firstGraphics(ctx, b.language!);
+        if (!graphics.some(([t]) => t === 'icon')) throw new Error(`${b.language}: a new Play language needs the 512x512 icon in the same edit (play.icon or store/icons/play-512.png): storebound icons makes it`);
+        for (const [type, f] of graphics) {
+          await play.call('POST', `${play.UPLOAD}/edits/${id}/listings/${b.language}/${type}?uploadType=media`, new Uint8Array(readFileSync(f)), { 'Content-Type': /\.png$/i.test(f) ? 'image/png' : 'image/jpeg' });
+          log('play', `${b.language}: ${type} uploaded with the new listing`);
+        }
+      }
     }
   }, { notSentForReview: ctx.args.has('not-sent-for-review'), summary: 'listing text' });
   done('play', sent ? 'listing done' : 'listing already up to date (the edit was deleted, nothing committed)');
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index d74c179..ec8c872 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1233,3 +1233,13 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `remoteBuildSession` in `cli/lib/xcode.ts` stops `apple build` before the archive; `credPath` in
   `cli/lib/credentials.ts` resolves relative credential paths from the project and `ascKeyFile` hands xcodebuild an
   absolute path (`tests/build-sign.test.ts`).
+
+## 102. A new Play language: `play listing` 403 "no high resolution icon set for language", `play images` skips it
+- **Symptom:** adding a language (tr-TR) to an existing app, `play listing --yes` failed at the edit commit with 403
+  "This app has no high resolution icon set for language tr-TR", while `play images` said "skipped tr-TR: no Play
+  listing yet": each waited for the other.
+- **Cause:** Play commits a new language only when its hi-res icon is in the same edit.
+- **Do:** update storebound; `play listing` now uploads the icon (and the feature graphic when rendered) for a new
+  language in the same edit. Then run `play images` for the screenshots.
+- **Guard:** `firstGraphics` in `cli/play/images.ts`, used by `cli/play/listing.ts` for languages Play does not have yet;
+  it stops with the fix when the 512x512 icon is missing.
diff --git a/tests/fastlane-traces.test.ts b/tests/fastlane-traces.test.ts
index 7d03491..1879ed5 100644
--- a/tests/fastlane-traces.test.ts
+++ b/tests/fastlane-traces.test.ts
@@ -65,3 +65,12 @@ describe('direct store API traces stay short', () => {
     expect(findFastlaneTraces(dir)).toEqual([expect.objectContaining({ file: 'tools/ship.mjs', line: 5, via: 'api' })]);
   });
 });
+
+describe('test files are not traces', () => {
+  test('a test that quotes altool is skipped', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-fl3-'));
+    mkdirSync(join(dir, 'tools'));
+    writeFileSync(join(dir, 'tools/ship.test.mjs'), "test('calls altool', () => { run(['xcrun', 'altool']); });\n");
+    expect(findFastlaneTraces(dir)).toEqual([]);
+  });
+});

From aae3a6c62d10c37886b2832f4932e6dbd20f816a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 03:45:25 +0800
Subject: [PATCH 016/255] doctor: at a terminal the used-for column is cut to
 the window width so rows never wrap; piped output stays whole

---
 cli/doctor.ts | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/cli/doctor.ts b/cli/doctor.ts
index 7b2de04..612d04f 100644
--- a/cli/doctor.ts
+++ b/cli/doctor.ts
@@ -82,7 +82,15 @@ export async function run(args: Args): Promise<void> {
   }
   if (args.has('json')) { printJson(r); return; }
   log('doctor', `storebound ${r.storebound} · ${r.runtime} · ${r.platform}${r.project ? ' · project config found' : ''}`);
-  console.log(textTable(['tool', 'status', 'version', 'needs', 'used for'], r.tools.map(t => [t.name, t.status === 'outdated' ? 'too old' : t.found ? (t.source === 'app' ? 'ok (app copy)' : 'ok') : 'missing', t.version ?? '', t.required ?? '', t.usedFor])));
+  const rows = r.tools.map(t => [t.name, t.status === 'outdated' ? 'too old' : t.found ? (t.source === 'app' ? 'ok (app copy)' : 'ok') : 'missing', (t.version ?? '').slice(0, 16), t.required ?? '', t.usedFor]);
+  // at a terminal the last column is cut to the window width, so rows never wrap (piped output stays whole)
+  const cols = process.stdout.isTTY ? process.stdout.columns : 0;
+  if (cols) {
+    const w = (i: number) => Math.max(...[['tool', 'status', 'version', 'needs'][i]!, ...rows.map(x => x[i]!)].map(s => s.length));
+    const room = cols - [0, 1, 2, 3].reduce((n, i) => n + w(i) + 2, 0) - 1;
+    for (const x of rows) if (x[4]!.length > room) x[4] = room > 8 ? `${x[4]!.slice(0, room - 1)}…` : '';
+  }
+  console.log(textTable(['tool', 'status', 'version', 'needs', 'used for'], rows));
   log('doctor', r.androidSdk.path ? `Android SDK: ${r.androidSdk.path} (from ${r.androidSdk.source})`
     : `Android SDK: not found (play build needs it). Checked: ${r.androidSdk.checked.join('; ')}`);
   const set = r.credentials.filter(c => c.status === 'set').map(c => c.key), ph = r.credentials.filter(c => c.status === 'placeholder').map(c => c.key);

From 9f40a9ea1458c847775cde185806d3e9326a1b90 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 05:24:58 +0800
Subject: [PATCH 017/255] Console plan apple-app-privacy: Edit opens Data
 Collection first on a published app (type list ends in Continue), each type's
 last step is Publish (live, no draft); Publish is the owner's unless bypass
 mode is on (verified 2026-10-22)

---
 CHANGELOG.md            | 4 ++++
 cli/lib/console-plan.ts | 8 ++++----
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 24629af..a7816ee 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **App Privacy console plan follows today's page** (verified 2026-10-22): on an app published before, Edit opens the
+  Data Collection question first and the type list ends in Continue; each type's last step is Publish (it goes live,
+  no draft). Publish stays the owner's unless bypass mode is on.
+
 - **A new Play language in one run.** `play listing` uploads the hi-res icon (and the feature graphic when rendered) for a
   language Play does not have yet, in the same edit (Play refused the commit with 403 otherwise). Pitfall 102.
 - Script traces skip test files (`*.test.*`, `*.spec.*`).
diff --git a/cli/lib/console-plan.ts b/cli/lib/console-plan.ts
index f333e0d..7eeac67 100644
--- a/cli/lib/console-plan.ts
+++ b/cli/lib/console-plan.ts
@@ -273,7 +273,7 @@ function appPrivacyPlan(answers: PlanAnswer[], appId: string | null | undefined)
   const add = (s: Omit<PlanStep, 'n'>) => steps.push({ n: steps.length + 1, ...s });
   add({ text: appId ? 'Open the App Privacy page of the app (deep link).' : `Open App Store Connect > Apps > the app > App Privacy (sidebar): ${consoleUrl('asc.apps')}` });
   add({ text: 'First time: click "Get Started" and answer the Data Collection question; then Next.', click: ['Get Started'], answers: ['collects'] });
-  add({ text: 'Data types: when the Data Types section does not list exactly the collected types below, click the "Edit" next to the "Data Types" heading (never the Privacy Policy Edit), tick exactly these types and untick the rest, then Save (a draft: nothing is public before Publish). Console labels: Purchase History shows as "Purchases", Other Data Types as "Other Data".', click: ['Edit', 'Save'], answers: ids(answers, a => a.id.startsWith('type:')) });
+  add({ text: 'Data types: when the Data Types section does not list exactly the collected types below, click the "Edit" next to the "Data Types" heading (never the Privacy Policy Edit), tick exactly these types and untick the rest, then Save. On an app whose answers were published before (verified 2026-10-22), Edit first opens the "Data Collection" question (Yes / No, then Next); the type list is step 2 and ends in "Continue", not "Save". Console labels: Purchase History shows as "Purchases", Other Data Types as "Other Data".', click: ['Edit', 'Next', 'Save', 'Continue'], answers: ids(answers, a => a.id.startsWith('type:')) });
   add({ text: `${APPLE_ADDITIONAL_SETUP}`, click: ['OK'] });
   for (const t of collected) {
     const set = setUpTexts(t).filter(x => !/ ayarla$/.test(x));
@@ -281,9 +281,9 @@ function appPrivacyPlan(answers: PlanAnswer[], appId: string | null | undefined)
     add({ type: t, text: `"${t}" step 1, purposes: tick and untick the 6 checkboxes as answered, then Next.`, click: ['Next'], answers: ids(answers, a => a.id.startsWith(`purpose:${t}:`)) });
     add({ type: t, text: `"${t}" step 2, linked to the user: pick the radio, then Next.`, click: ['Next'], answers: [`linked:${t}`] });
     add({ type: t, text: `"${t}" steps 3 and 4: two information pages ("Let’s define two important terms…", then "To help put tracking into context, here are a few examples:"), no inputs: press Next on each.`, click: ['Next', 'Next'] });
-    add({ type: t, text: `"${t}" step 5, tracking: pick the radio, then Save (a draft). Never "Definitions and Examples". The dialog closes; the row shows Edit and the summary.`, click: ['Save'], answers: [`tracking:${t}`] });
+    add({ type: t, text: `"${t}" step 5, tracking: pick the radio, then the last button: "Save" (first setup: a draft) or "Publish" (answers published before: this type goes live at once, verified 2026-10-22). Publish is the owner's button unless bypass mode is on (storebound settings bypass status). Never "Definitions and Examples". The dialog closes; the row shows Edit and the summary.`, click: ['Save'], answers: [`tracking:${t}`] });
   }
-  add({ text: 'Stop. Do NOT press Publish: tell the owner to review the summary on the App Privacy page and press Publish, then Publish again in the "Publish Your App Privacy Responses?" dialog (it puts the answers on the App Store product page). Afterwards the page shows "Published … ago by …".' });
+  add({ text: 'First setup only: the page then has a Publish button (top right) and the dialog "Publish Your App Privacy Responses?". That Publish is the owner’s unless bypass mode is on; then press it yourself. Afterwards the page shows "Published … ago by …". (Answers published before: each type was already published by its own last step.)' });
   add({ text: 'Verify: read the Data Types section as text (document.querySelector("main").innerText) and pipe it to `storebound console verify apple-app-privacy --from-text -`.' });
   return {
     start: appId ? { url: `${ASC}/apps/${appId}/distribution/privacy`, deepLink: true, reach: [] }
@@ -297,7 +297,7 @@ function appPrivacyPlan(answers: PlanAnswer[], appId: string | null | undefined)
       'Step 2, linked: 2 radios, "Yes, <type in lower case> data collected from this app is linked to the user’s identity" / "No, …" (curly ’). Buttons: Back, Cancel, Next.',
       'Step 3: an information page "Let’s define two important terms…" (Tracking / Third-Party Data). No inputs: press Next.',
       'Step 4: an information page "To help put tracking into context, here are a few examples:". No inputs: press Next. (Two information steps in a row: keep pressing Next while the dialog shows no inputs.)',
-      'Step 5, tracking: 2 radios, "Yes, we use <type> data for tracking purposes" / "No, we do not …". Buttons: "Definitions and Examples" (help: never press), Back, Cancel, Save.',
+      'Step 5, tracking: 2 radios, "Yes, we use <type> data for tracking purposes" / "No, we do not …". Buttons: "Definitions and Examples" (help: never press), Back, Cancel, and Save (first setup) or Publish (answers published before: no draft, the type goes live; verified 2026-10-22).',
       'Save closes the dialog. The type then shows "Edit" and a summary: "Used for <purposes>", "Linked to the user’s identity" (or not), "Used for tracking purposes" (or not). That summary is what `console verify` reads.',
       'Labels use typographic quotes (’): match straight and curly quotes alike.',
       'The "?" buttons ("More information") are help only. Publish (top right) is the owner\'s: it opens a <dialog> "Publish Your App Privacy Responses?" with Cancel / Publish (the owner\'s final button); after it the page shows "Published a few seconds ago by …" (verified 2026-10-12), which `console verify` reads as the published signal.',

From 9a907d87e59ce4c4d5406ba7fd02a58a4f94de60 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 05:59:41 +0800
Subject: [PATCH 018/255] Desktop: tray icon, start at logon hidden (autostart
 --hidden, window state never restores visible), closing hides to the tray,
 background signed auto-update at start and every 30 min with restart

---
 CHANGELOG.md                           |   4 +
 apps/desktop/src-tauri/Cargo.lock      | 113 +++++++++++++++++++++++--
 apps/desktop/src-tauri/Cargo.toml      |   3 +-
 apps/desktop/src-tauri/src/lib.rs      |  82 +++++++++++++++++-
 apps/desktop/src-tauri/tauri.conf.json |   3 +-
 docs/desktop.md                        |   8 +-
 6 files changed, 200 insertions(+), 13 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a7816ee..4687765 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **Desktop: tray app that starts at logon and updates itself.** First run registers a logon entry (`--hidden`): the app
+  starts silently in the tray; closing the window keeps it there, the tray menu quits. A signed update is checked a
+  minute after start and every 30 minutes, installed silently, and the app restarts as it was.
+
 - **App Privacy console plan follows today's page** (verified 2026-10-22): on an app published before, Edit opens the
   Data Collection question first and the type list ends in Continue; each type's last step is Publish (it goes live,
   no draft). Publish stays the owner's unless bypass mode is on.
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 957e60a..4b7b3f9 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -227,6 +227,20 @@ version = "1.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
 
+[[package]]
+name = "auto-launch"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17918dba7ecf78b9a14507ec9f984e7977d13fad87dc86d61038980a45d128cf"
+dependencies = [
+ "dirs 6.0.0",
+ "os_info",
+ "smappservice-rs",
+ "thiserror 2.0.21",
+ "windows-registry",
+ "windows-result",
+]
+
 [[package]]
 name = "autocfg"
 version = "1.5.1"
@@ -855,6 +869,15 @@ dependencies = [
  "subtle",
 ]
 
+[[package]]
+name = "dirs"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
+dependencies = [
+ "dirs-sys",
+]
+
 [[package]]
 name = "dirs"
 version = "7.0.0"
@@ -2446,6 +2469,18 @@ dependencies = [
  "memoffset",
 ]
 
+[[package]]
+name = "nix"
+version = "0.31.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
+dependencies = [
+ "bitflags 2.13.2",
+ "cfg-if",
+ "cfg_aliases",
+ "libc",
+]
+
 [[package]]
 name = "notify-rust"
 version = "4.18.2"
@@ -2724,6 +2759,30 @@ dependencies = [
  "objc2-foundation",
 ]
 
+[[package]]
+name = "objc2-security"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe137109bd1e8b5a99390f77a7d8b2961dafc1a1c5db8f2e60329ad6d895a"
+dependencies = [
+ "bitflags 2.13.2",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-service-management"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b213642d6959cc6023ceb1217aa595eaaf09b8094ce95127c103cab611fe65e8"
+dependencies = [
+ "block2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "objc2-security",
+]
+
 [[package]]
 name = "objc2-ui-kit"
 version = "0.3.2"
@@ -2818,6 +2877,21 @@ dependencies = [
  "pin-project-lite",
 ]
 
+[[package]]
+name = "os_info"
+version = "3.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cf20a545b305cf1da722b236b5155c9bb35f1d5ceb28c048bd96ca842f41b5b"
+dependencies = [
+ "android_system_properties",
+ "log",
+ "nix 0.31.3",
+ "objc2",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "os_pipe"
 version = "1.2.3"
@@ -3926,6 +4000,18 @@ version = "1.16.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5b3dc8af474f516a851ff4bd12db780f948b9250ad37211e4eec0bccea54e01b"
 
+[[package]]
+name = "smappservice-rs"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52703b97a53101cf5d4580e0737aaa634ce1fdcfc123c16b2a9658e358013488"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+ "objc2-service-management",
+ "thiserror 2.0.21",
+]
+
 [[package]]
 name = "socket2"
 version = "0.6.5"
@@ -4025,6 +4111,7 @@ dependencies = [
  "sha2",
  "tauri",
  "tauri-build",
+ "tauri-plugin-autostart",
  "tauri-plugin-deep-link",
  "tauri-plugin-dialog",
  "tauri-plugin-notification",
@@ -4250,7 +4337,7 @@ dependencies = [
  "anyhow",
  "bytes",
  "cookie",
- "dirs",
+ "dirs 7.0.0",
  "dunce",
  "embed_plist",
  "getrandom 0.3.4",
@@ -4300,7 +4387,7 @@ checksum = "59563ca5b331fd97f27ee9672ec8d36d33bb3c9e2c9f6710a1a5687256052e45"
 dependencies = [
  "anyhow",
  "cargo_toml",
- "dirs",
+ "dirs 7.0.0",
  "glob",
  "heck 0.5.0",
  "json-patch",
@@ -4370,6 +4457,20 @@ dependencies = [
  "walkdir",
 ]
 
+[[package]]
+name = "tauri-plugin-autostart"
+version = "2.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bce56ceb0a99b8ab5eebc977ba9ffc62391b862648cb9ab76fc8bc7231b8f7e2"
+dependencies = [
+ "auto-launch",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-plugin",
+ "thiserror 2.0.21",
+]
+
 [[package]]
 name = "tauri-plugin-deep-link"
 version = "2.6.1"
@@ -4532,7 +4633,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "855a336eb389d2c1502244fd48fa2d8cb487a430f691bbaed025195f99a04489"
 dependencies = [
  "base64 0.22.1",
- "dirs",
+ "dirs 7.0.0",
  "flate2",
  "futures-util",
  "http",
@@ -5018,7 +5119,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b2b9c52859a94554803ccd4a24b98f74148ebc73b90676d783f3490b1bff9d72"
 dependencies = [
  "crossbeam-channel",
- "dirs",
+ "dirs 7.0.0",
  "libappindicator",
  "muda",
  "objc2",
@@ -5841,7 +5942,7 @@ dependencies = [
  "block2",
  "cookie",
  "crossbeam-channel",
- "dirs",
+ "dirs 7.0.0",
  "dom_query",
  "dpi",
  "dunce",
@@ -5955,7 +6056,7 @@ dependencies = [
  "futures-sink",
  "futures-util",
  "hex",
- "nix",
+ "nix 0.29.0",
  "ordered-stream",
  "rand 0.8.8",
  "serde",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index bb0cad6..6ef6990 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -19,7 +19,7 @@ path = "src/main.rs"
 tauri-build = { version = "2", features = [] }
 
 [dependencies]
-tauri = { version = "2.12", features = [] }
+tauri = { version = "2.12", features = ["tray-icon"] }
 # Spawns the storebound sidecar from Rust only; no capability grants the plugin's JS API.
 tauri-plugin-shell = "2"
 tauri-plugin-single-instance = { version = "2", features = ["deep-link"] }
@@ -31,6 +31,7 @@ tauri-plugin-dialog = "2"
 tauri-plugin-notification = "2"
 tauri-plugin-updater = "2"
 tauri-plugin-process = "2"
+tauri-plugin-autostart = "2"
 # Store credentials: macOS Keychain, Windows Credential Manager, Secret Service on Linux.
 keyring = { version = "3", features = ["apple-native", "windows-native", "sync-secret-service", "crypto-rust"] }
 serde = { version = "1", features = ["derive"] }
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index c16ea24..dd9272d 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -21,7 +21,10 @@ include!("commands_list.rs");
 use std::sync::Mutex;
 
 use tauri::menu::{Menu, MenuItem, PredefinedMenuItem, Submenu, WINDOW_SUBMENU_ID};
+use tauri::tray::{MouseButton, MouseButtonState, TrayIconBuilder, TrayIconEvent};
 use tauri::{AppHandle, Emitter, Manager, RunEvent, Runtime, WindowEvent};
+use tauri_plugin_autostart::{MacosLauncher, ManagerExt};
+use tauri_plugin_updater::UpdaterExt;
 use tauri_plugin_deep_link::DeepLinkExt;
 
 /// WebKitGTK's DMABUF renderer leaves the window blank on some Linux GPU / driver / VM combinations. Turn it off unless
@@ -34,6 +37,60 @@ pub fn linux_webkit_env() {
     }
 }
 
+/// Started by the logon entry (`--hidden`): the app runs in the tray and shows no window.
+fn started_hidden() -> bool {
+    std::env::args().any(|a| a == "--hidden")
+}
+
+/// Tray icon: a click shows the window; the menu has Open and Quit (the only real quit on Windows and Linux, where
+/// closing the window keeps the app running in the tray).
+fn tray(app: &tauri::App) -> tauri::Result<()> {
+    let open = MenuItem::with_id(app, "tray-open", "Open storebound", true, None::<&str>)?;
+    let quit = MenuItem::with_id(app, "tray-quit", "Quit storebound", true, None::<&str>)?;
+    let menu = Menu::with_items(app, &[&open, &PredefinedMenuItem::separator(app)?, &quit])?;
+    let mut b = TrayIconBuilder::with_id("main").tooltip("storebound").menu(&menu).show_menu_on_left_click(false);
+    if let Some(icon) = app.default_window_icon() {
+        b = b.icon(icon.clone());
+    }
+    b.on_menu_event(|app, e| match e.id().as_ref() {
+        "tray-open" => show_main(app),
+        "tray-quit" => app.exit(0),
+        _ => {}
+    })
+    .on_tray_icon_event(|t, e| {
+        if let TrayIconEvent::Click { button: MouseButton::Left, button_state: MouseButtonState::Up, .. } = e {
+            show_main(t.app_handle());
+        }
+    })
+    .build(app)?;
+    Ok(())
+}
+
+/// Silent self-update: at start (after a minute) and every 30 minutes, a signed update from storebound.dev is
+/// downloaded, installed and the app restarts with the same arguments (`--hidden` stays hidden). Errors are logged.
+fn auto_update(app: AppHandle) {
+    tauri::async_runtime::spawn(async move {
+        tokio::time::sleep(std::time::Duration::from_secs(60)).await;
+        loop {
+            match app.updater() {
+                Ok(u) => match u.check().await {
+                    Ok(Some(update)) => {
+                        logs::host("info", &format!("auto-update: {} available, installing", update.version));
+                        match update.download_and_install(|_, _| {}, || {}).await {
+                            Ok(()) => app.restart(),
+                            Err(e) => logs::host("warn", &format!("auto-update: install failed: {e}")),
+                        }
+                    }
+                    Ok(None) => {}
+                    Err(e) => logs::host("warn", &format!("auto-update: check failed: {e}")),
+                },
+                Err(e) => logs::host("warn", &format!("auto-update: no updater: {e}")),
+            }
+            tokio::time::sleep(std::time::Duration::from_secs(30 * 60)).await;
+        }
+    });
+}
+
 fn show_main<R: Runtime>(app: &AppHandle<R>) {
     if let Some(w) = app.get_webview_window(policy::MAIN) {
         let _ = w.unminimize();
@@ -135,7 +192,9 @@ pub fn run() {
         // single-instance first: a second start (or a storebound:// link) focuses the running app instead
         .plugin(tauri_plugin_single_instance::init(|app, _argv, _cwd| show_main(app)))
         .plugin(tauri_plugin_deep_link::init())
-        .plugin(tauri_plugin_window_state::Builder::new().build())
+        // never restore "visible": a --hidden start would otherwise pop the window up
+        .plugin(tauri_plugin_window_state::Builder::new().with_state_flags(tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::VISIBLE).build())
+        .plugin(tauri_plugin_autostart::init(MacosLauncher::LaunchAgent, Some(vec!["--hidden"])))
         .plugin(tauri_plugin_shell::init())
         .plugin(tauri_plugin_opener::init())
         .plugin(tauri_plugin_dialog::init())
@@ -178,7 +237,20 @@ pub fn run() {
             if let Err(e) = commands::sync_machine(&state) {
                 logs::host("warn", &format!("accounts / app folders not synced at start: {}", e.message));
             }
+            // start at logon, in the tray: set once (first run); the owner can turn it off in the OS afterwards
+            let marker = state.data_dir.join("autostart-set");
+            if !marker.exists() {
+                match app.autolaunch().enable() {
+                    Ok(()) => { let _ = std::fs::write(&marker, "1"); logs::host("info", "autostart at logon enabled (--hidden, tray)"); }
+                    Err(e) => logs::host("warn", &format!("autostart not enabled: {e}")),
+                }
+            }
             app.manage(state);
+            tray(app)?;
+            if !started_hidden() {
+                show_main(app.handle());
+            }
+            auto_update(app.handle().clone());
             #[cfg(target_os = "macos")]
             app.set_menu(menu(app.handle())?)?;
             #[cfg(not(target_os = "macos"))]
@@ -202,9 +274,9 @@ pub fn run() {
             Ok(())
         })
         .on_window_event(|w, e| {
-            // macOS: the close button hides the window (the app stays in the Dock and the Window menu);
-            // Cmd+Q and the app menu's Quit still quit. Elsewhere closing the window quits.
-            if cfg!(target_os = "macos") && w.label() == policy::MAIN {
+            // the close button hides the window: the app keeps running in the tray (macOS: also the Dock); the tray's
+            // Quit (macOS: Cmd+Q) really quits
+            if w.label() == policy::MAIN {
                 if let WindowEvent::CloseRequested { api, .. } = e {
                     api.prevent_close();
                     let _ = w.hide();
@@ -267,6 +339,8 @@ pub fn run() {
     app.run(|app, e| match e {
         #[cfg(target_os = "macos")]
         RunEvent::Reopen { .. } => show_main(app),
+        // no window left is not a reason to quit (tray app); an explicit exit or the updater's restart carries a code
+        RunEvent::ExitRequested { code: None, api, .. } => api.prevent_exit(),
         RunEvent::Exit => {
             if let Some(s) = app.try_state::<commands::AppState>() {
                 s.sidecar.shutdown_now();
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 614a48e..51f3128 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -20,7 +20,8 @@
         "minWidth": 880,
         "minHeight": 560,
         "resizable": true,
-        "center": true
+        "center": true,
+        "visible": false
       }
     ],
     "security": {
diff --git a/docs/desktop.md b/docs/desktop.md
index 795c2c3..9de0347 100644
--- a/docs/desktop.md
+++ b/docs/desktop.md
@@ -482,8 +482,14 @@ The CLI and the app are one product: one version number, one set of store accoun
 - Releases: [desktop-release.md](desktop-release.md) (version authority, privacy gate, macOS signing and
   notarization, Forgejo builds for Linux and Windows, storebound.dev hosting, publish).
 - **Updates**: Settings > Updates checks storebound.dev (stable `/desktop/latest.json` or beta
-  `/desktop/beta/latest.json`) only when asked; Install shows a native dialog, then the updater downloads the bundle,
+  `/desktop/beta/latest.json`) when asked; Install shows a native dialog, then the updater downloads the bundle,
   checks its minisign signature against `plugins.updater.pubkey` and restarts (`update_check`, `update_install`).
+  In the background the app also checks the stable channel a minute after start and every 30 minutes, installs a
+  signed update silently and restarts with the same arguments (`auto_update` in `src-tauri/src/lib.rs`).
+- **Tray and start at logon**: the first run registers a logon entry (`tauri-plugin-autostart`, `--hidden`): the app
+  starts silently in the tray, without a window. Closing the window keeps it running in the tray; the tray icon
+  opens it, the tray menu's Quit (macOS: Cmd+Q) quits. Turn the logon entry off in the OS (Windows: Settings > Apps >
+  Startup). Window state never restores "visible", so a `--hidden` start stays hidden.
 - **`storebound://open?path=<absolute folder>`** (sent by `storebound desktop` in an app folder, which first puts
   the folder on the machine's list): the host accepts one plain absolute path (`policy::deep_link_open_path`), syncs
   the list, selects that app folder when it is on it, otherwise asks in a native dialog and adds it

From 17535d4b7a023fe2526ca1c7100269ce4f4f1d39 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 05:05:48 +0700
Subject: [PATCH 019/255] storebound 0.8.27: version in package.json and every
 copy, CHANGELOG 0.8.27 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 3c7a497..6c2381f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.26",
+      "version": "0.8.27",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1a38eff..c750978 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 861bf1c..c444524 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4687765..1982ddf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.8.27 · 2026-10-21
+
 - **Desktop: tray app that starts at logon and updates itself.** First run registers a logon entry (`--hidden`): the app
   starts silently in the tray; closing the window keeps it there, the tray menu quits. A signed update is checked a
   minute after start and every 30 minutes, installed silently, and the app restarts as it was.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 1b939ad..4c959fa 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 4b7b3f9..f528243 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.26"
+version = "0.8.27"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 6ef6990..1a55690 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.26"
+version = "0.8.27"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 51f3128..6cba48d 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 41bb88e..a727731 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 88630d9..220d0c1 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From cd0110527ce1a39214c83c30110ff33839e4a24c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 06:22:08 +0800
Subject: [PATCH 020/255] apps relink: after a machine move, missing app
 folders are pointed at the same app here (last path parts, else the config's
 app name), ids kept; apps folders hints it; apps add names an app after its
 config app name

---
 CHANGELOG.md                  |  4 +++
 cli/apps.ts                   | 23 +++++++++++--
 cli/data/flags.json           | 14 +++++++-
 cli/lib/registry.ts           | 65 +++++++++++++++++++++++++++++++++--
 tests/registry-relink.test.ts | 33 ++++++++++++++++++
 5 files changed, 134 insertions(+), 5 deletions(-)
 create mode 100644 tests/registry-relink.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4687765..425884f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **`storebound apps relink`** after a machine move: every "folder not found" entry of the app folder list is pointed at
+  the same app on this machine (by its path or its app name), ids kept so the desktop keeps its accounts and settings;
+  `apps folders` says so when entries are missing. `apps add` names an app after its config's app name.
+
 - **Desktop: tray app that starts at logon and updates itself.** First run registers a logon entry (`--hidden`): the app
   starts silently in the tray; closing the window keeps it there, the tray menu quits. A signed update is checked a
   minute after start and every 30 minutes, installed silently, and the app restarts as it was.
diff --git a/cli/apps.ts b/cli/apps.ts
index 1200151..e28de41 100644
--- a/cli/apps.ts
+++ b/cli/apps.ts
@@ -9,6 +9,7 @@
 //                                                                    the same list as the desktop app's App folders)
 //   storebound apps add [<folder>] | apps remove <folder>           add / remove a folder in that list (the folder itself stays)
 //   storebound apps add --store apple|play --app-id <id> [--account <profile>] [--name <n>] [--bundle-id <id>]
+//   storebound apps relink [--root <folder>]... [--dry]   after a move: "folder not found" entries -> the same app here
 //                                                                    a store app with no project on this machine: the
 //                                                                    desktop shows it read-only ("no local project");
 //                                                                    apps remove apple:<id> | <entry id> takes it out
@@ -17,7 +18,7 @@ import { ascKey, playServiceAccount } from './lib/credentials';
 import type { AccountCheck, AppsListResult } from './lib/desktop-protocol';
 import { PLAY_SCOPE, REPORTING_SCOPE, tokenSource } from './lib/google-auth';
 import { errorBody } from './lib/http';
-import { log, printJson, warn } from './lib/log';
+import { done, log, printJson, warn } from './lib/log';
 import { appleCheck, type Bytes, dataUrl, type Get, isServiceDisabled, listAppleApps, listPlayApps, localPlayApps, MAX_ICON_BYTES, playCheck } from './lib/store-apps';
 import { textTable } from './lib/table';
 import { ascClient } from './apple/asc';
@@ -26,7 +27,8 @@ import * as rt from './lib/rt';
 import { existsSync, readFileSync } from 'node:fs';
 import { basename, join, resolve } from 'node:path';
 import { CONFIG_NAMES } from './lib/config';
-import { addFolder, addStoreApp, readRegistry, registryFile, removeFolder, removeStoreApp } from './lib/registry';
+import { addFolder, addStoreApp, applyRelink, configAppName, configFolders, readRegistry, registryFile, relinkPlan, removeFolder, removeStoreApp } from './lib/registry';
+import { homedir } from 'node:os';
 
 type Store = 'apple' | 'play';
 
@@ -175,6 +177,8 @@ async function folders(sub: string, args: Args): Promise<void> {
     }
     if (!r.projects.length) { console.log(`no app folders yet (${tilde(registryFile())}): storebound apps add, in an app folder (or storebound desktop there)`); return; }
     console.log(textTable(['app', 'folder', ''], r.projects.map(p => [p.name, tilde(p.path), existsSync(p.path) ? '' : 'folder not found'])));
+    const missing = r.projects.filter(p => !existsSync(p.path)).length;
+    if (missing) console.log(`\n${missing} folder(s) not found (moved to another computer or folder?): storebound apps relink --dry finds them by path and app name`);
     console.log(`
 ${tilde(registryFile())}: the same list as the desktop app's App folders`);
     return;
@@ -218,10 +222,25 @@ ${tilde(registryFile())}: the same list as the desktop app's App folders`);
   log('apps', removed ? `removed ${tilde(removed.path)} from the list (the folder and its files stay)` : `${tilde(dir)} is not in the list`);
 }
 
+/** apps relink: point "folder not found" entries at the same app on this machine (after a move); ids stay. */
+function relink(args: Args): void {
+  const home = homedir();
+  const roots = args.list('root').length ? args.list('root').map(r => resolve(r))
+    : [join(home, 'Documents', 'Visual Studio Workspaces'), join(home, 'Documents'), join(home, 'Desktop'), join(home, 'Projects'), join(home, 'code')].filter(d => existsSync(d));
+  const plan = relinkPlan(readRegistry(), configFolders(roots), existsSync, configAppName);
+  if (args.has('json')) { printJson({ roots, plan, dry: args.has('dry') }); }
+  else if (!plan.length) log('apps', `nothing to relink (looked under ${roots.map(tilde).join(', ')}; --root <folder> to look elsewhere)`);
+  else for (const s of plan) log('apps', `${s.name}: ${s.from} -> ${tilde(s.to)}`);
+  if (!plan.length || args.has('dry')) { if (plan.length) done('apps', `dry run: ${plan.length} folder(s) would be relinked`); return; }
+  applyRelink(plan);
+  done('apps', `${plan.length} folder(s) relinked (the desktop app picks them up on its next start)`);
+}
+
 export async function run(args: Args): Promise<void> {
   const sub = args._[0];
   const root = process.cwd();
   const json = args.has('json');
+  if (sub === 'relink') return relink(args);
   if (sub === 'folders' || sub === 'add' || sub === 'remove') return folders(sub, args);
   if (sub === 'list') {
     const out: AppsListResult[] = [];
diff --git a/cli/data/flags.json b/cli/data/flags.json
index e27b0da..6c48e61 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -317,6 +317,7 @@
    "bundle-id",
    "icons",
    "name",
+   "root",
    "store"
   ],
   "art": [
@@ -621,6 +622,9 @@
   "play listing": [
    "include-drafts",
    "not-sent-for-review",
+   "prune",
+   "src",
+   "variant",
    "write"
   ],
   "play next-version-code": [],
@@ -636,6 +640,9 @@
    "name",
    "not-sent-for-review",
    "production",
+   "prune",
+   "src",
+   "variant",
    "version-code",
    "write"
   ],
@@ -683,8 +690,11 @@
    "include-drafts",
    "name",
    "not-sent-for-review",
+   "prune",
+   "src",
    "status",
    "track",
+   "variant",
    "write"
   ],
   "prices": [
@@ -1115,6 +1125,7 @@
    "resolve-iaps",
    "resume",
    "review-sent",
+   "root",
    "scenes",
    "scheme",
    "sdk-dirs",
@@ -1337,7 +1348,8 @@
    "storebound apps check [--store apple|play] [--json]             auth OK / permission missing / key revoked, with the fix",
    "storebound apps folders [--json]                                 the app folders of this machine (~/.storebound/projects.json,",
    "storebound apps add [<folder>] | apps remove <folder>           add / remove a folder in that list (the folder itself stays)",
-   "storebound apps add --store apple|play --app-id <id> [--account <profile>] [--name <n>] [--bundle-id <id>]"
+   "storebound apps add --store apple|play --app-id <id> [--account <profile>] [--name <n>] [--bundle-id <id>]",
+   "storebound apps relink [--root <folder>]... [--dry]   after a move: \"folder not found\" entries -> the same app here"
   ],
   "art": [
    "storebound art pull [--store apple|play] [--write] [--force] [--dry] [--json]",
diff --git a/cli/lib/registry.ts b/cli/lib/registry.ts
index e16a6ee..81dc840 100644
--- a/cli/lib/registry.ts
+++ b/cli/lib/registry.ts
@@ -12,7 +12,7 @@
 // Written atomically (temp file, rename); a missing or unreadable file reads as empty (an unreadable one is kept).
 import { consoleLink } from './console-links';
 import { createHash } from 'node:crypto';
-import { copyFileSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, statSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { basename, dirname, join, resolve } from 'node:path';
 
@@ -87,7 +87,7 @@ export function withFolder(r: Registry, path: string, name: string | undefined,
   const abs = resolve(path);
   const have = r.projects.find(p => p.path === abs);
   if (have) return { registry: r, project: have, added: false };
-  const project = { id: folderId(abs), path: abs, name: name?.trim() || basename(abs), added: now };
+  const project = { id: folderId(abs), path: abs, name: name?.trim() || configAppName(abs) || basename(abs), added: now };
   return { registry: { ...r, version: 1, projects: [...r.projects, project] }, project, added: true };
 }
 
@@ -144,3 +144,64 @@ export function removeFolder(pathOrId: string, file = registryFile()): RegistryP
   if (removed) writeRegistry(registry, file);
   return removed;
 }
+
+/** The app name a storebound config gives (`app: { name: '...' }`), read as text (no config load), else null. */
+export function configAppName(dir: string): string | null {
+  for (const n of ['storebound.config.ts', 'storebound.config.mts', 'storebound.config.js', 'storebound.config.mjs']) {
+    try {
+      const text = readFileSync(join(dir, n), 'utf8');
+      const m = /\bapp\s*:\s*\{[^}]*?\bname\s*:\s*(['"`])([^'"`]+)\1/s.exec(text);
+      if (m) return m[2]!.trim();
+    } catch { /* not this one */ }
+  }
+  return null;
+}
+
+/** Folders with a storebound config under the roots (depth 4; node_modules, .git and _arsiv skipped). */
+export function configFolders(roots: string[], depth = 4): string[] {
+  const out: string[] = [];
+  const walk = (d: string, left: number) => {
+    let names: string[] = [];
+    try { names = readdirSync(d); } catch { return; }
+    if (names.some(n => /^storebound\.config\.(ts|mts|js|mjs)$/.test(n))) out.push(d);
+    if (left <= 0) return;
+    for (const n of names) {
+      if (n === 'node_modules' || n.startsWith('.') || n === '_arsiv') continue;
+      const p = join(d, n);
+      try { if (statSync(p).isDirectory()) walk(p, left - 1); } catch { /* unreadable */ }
+    }
+  };
+  for (const r of roots) walk(r, depth);
+  return [...new Set(out)];
+}
+
+/**
+ * After a machine move the list keeps the old computer's paths ("folder not found"). For each missing folder: a
+ * config folder under the roots whose last path parts match (some-game, Acme/frontend), else one whose app name is
+ * the same as the entry's name. The id stays, so the desktop's per-app accounts and settings stay linked. Pure.
+ */
+export function relinkPlan(r: Registry, candidates: string[], exists: (p: string) => boolean, nameOf: (dir: string) => string | null): { id: string; name: string; from: string; to: string }[] {
+  const parts = (p: string) => p.split(/[\\/]+/).filter(Boolean).map(x => x.toLowerCase());
+  const taken = new Set(r.projects.filter(p => exists(p.path)).map(p => resolve(p.path).toLowerCase()));
+  const plan: { id: string; name: string; from: string; to: string }[] = [];
+  for (const p of r.projects) {
+    if (exists(p.path)) continue;
+    const want = parts(p.path);
+    const free = candidates.filter(c => !taken.has(resolve(c).toLowerCase()));
+    let best: string | undefined;
+    for (const k of [3, 2, 1]) {
+      const tail = want.slice(-k).join('/');
+      best = free.find(c => parts(c).slice(-k).join('/') === tail);
+      if (best) break;
+    }
+    best ??= free.find(c => nameOf(c)?.toLowerCase() === p.name.toLowerCase());
+    if (best) { plan.push({ id: p.id, name: p.name, from: p.path, to: resolve(best) }); taken.add(resolve(best).toLowerCase()); }
+  }
+  return plan;
+}
+
+export function applyRelink(plan: { id: string; to: string }[], file = registryFile()): void {
+  const r = readRegistry(file);
+  for (const s of plan) { const p = r.projects.find(x => x.id === s.id); if (p) p.path = s.to; }
+  writeRegistry(r, file);
+}
diff --git a/tests/registry-relink.test.ts b/tests/registry-relink.test.ts
new file mode 100644
index 0000000..31d1cb6
--- /dev/null
+++ b/tests/registry-relink.test.ts
@@ -0,0 +1,33 @@
+// After a machine move the app folder list points at the old computer; relink finds each app here and keeps its id.
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { configAppName, configFolders, relinkPlan } from '../cli/lib/registry';
+
+function app(root: string, rel: string, name: string): string {
+  const d = join(root, rel); mkdirSync(d, { recursive: true });
+  writeFileSync(join(d, 'storebound.config.ts'), `export default { app: { name: '${name}' } };\n`);
+  return d;
+}
+
+describe('apps relink', () => {
+  test('by the last path parts, else by the app name; ids stay; a taken folder is not reused', () => {
+    const root = mkdtempSync(join(tmpdir(), 'sb-relink-'));
+    const game = app(root, 'game-one', 'Game One');
+    const front = app(root, 'Studio/frontend', 'Studio');
+    const renamed = app(root, 'NewName/app', 'Old App');
+    mkdirSync(join(root, 'node_modules/x'), { recursive: true }); writeFileSync(join(root, 'node_modules/x/storebound.config.ts'), '');
+    const found = configFolders([root]);
+    expect(found.sort()).toEqual([game, front, renamed].sort());
+    expect(configAppName(front)).toBe('Studio');
+    const r = { version: 1 as const, projects: [
+      { id: 'a', path: '/Users/old/Desktop/game-one', name: 'Game One', added: '' },
+      { id: 'b', path: '/Users/old/Work/Studio/frontend', name: 'frontend', added: '' },
+      { id: 'c', path: '/Users/old/Work/OldName/app', name: 'Old App', added: '' },
+      { id: 'd', path: '/Users/old/gone', name: 'Gone', added: '' },
+    ] };
+    const plan = relinkPlan(r, found, () => false, configAppName);
+    expect(plan.map(p => [p.id, p.to])).toEqual([['a', game], ['b', front], ['c', renamed]]);
+  });
+});

From cbba936ed801ddcd48a72f3ee54df0ece3b28823 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 16:03:07 +0800
Subject: [PATCH 021/255] Entitlements reference check compares forward-slash
 paths on every OS (false 'not referenced by CODE_SIGN_ENTITLEMENTS' on
 Windows); test, pitfall 103

---
 CHANGELOG.md                   |  2 ++
 cli/apple/signing.ts           |  8 +++++---
 skills/store-pitfalls/SKILL.md |  8 ++++++++
 tests/entitlements-ref.test.ts | 18 ++++++++++++++++++
 4 files changed, 33 insertions(+), 3 deletions(-)
 create mode 100644 tests/entitlements-ref.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ac553e3..d222a34 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- Windows: no false "entitlements not referenced by CODE_SIGN_ENTITLEMENTS" warning (paths compared with forward slashes). Pitfall 103.
+
 - **`storebound apps relink`** after a machine move: every "folder not found" entry of the app folder list is pointed at
   the same app on this machine (by its path or its app name), ids kept so the desktop keeps its accounts and settings;
   `apps folders` says so when entries are missing. `apps add` names an app after its config's app name.
diff --git a/cli/apple/signing.ts b/cli/apple/signing.ts
index 724e56c..30ce943 100644
--- a/cli/apple/signing.ts
+++ b/cli/apple/signing.ts
@@ -14,7 +14,7 @@
 import { ensureGcSwitch, gcSwitchPlan, readGcSwitch } from './game-center';
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
 import { homedir, tmpdir } from 'node:os';
-import { basename, dirname, join, relative, resolve as resolvePath } from 'node:path';
+import { basename, dirname, join, relative, resolve as resolvePath, sep } from 'node:path';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { buildCsr, csrContent, newSigningKey, spkiOfKey } from '../lib/csr';
@@ -83,9 +83,11 @@ export function readProjectEntitlements(root: string): ProjectEntitlements[] | n
       for (const n of names) {
         const f = join(dir, n);
         if (n.endsWith('.entitlements')) {
-          const rel = relative(root, f);
+          // forward slashes on every OS: the pbxproj writes App/App.entitlements, Windows paths use backslashes
+          const rel = relative(root, f).split(sep).join('/');
+          const fwd = f.split(sep).join('/');
           if (isBuildCopyPath(rel) || out.some(o => o.file === rel)) continue;
-          out.push(projectEntitlements(rel, readFileSync(f, 'utf8'), pbx ? refs.some(r => f.endsWith('/' + r)) : null));
+          out.push(projectEntitlements(rel, readFileSync(f, 'utf8'), pbx ? refs.some(r => fwd.endsWith('/' + r.replace(/\\/g, '/'))) : null));
         } else if (d > 0 && !n.startsWith('.') && !['node_modules', 'Pods', 'build', 'DerivedData'].includes(n) && !n.endsWith('.xcodeproj')) {
           try { if (statSync(f).isDirectory()) walk(f, d - 1); } catch { /* unreadable */ }
         }
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index ec8c872..6f89dc2 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1243,3 +1243,11 @@ that fails without the fix (see CONTRIBUTING.md).
   language in the same edit. Then run `play images` for the screenshots.
 - **Guard:** `firstGraphics` in `cli/play/images.ts`, used by `cli/play/listing.ts` for languages Play does not have yet;
   it stops with the fix when the 512x512 icon is missing.
+
+## 103. "App.entitlements is not referenced by CODE_SIGN_ENTITLEMENTS" on Windows although it is
+- **Symptom:** on Windows, `apple status` / `apple signing` warned that `ios\App\App\App.entitlements` is not
+  referenced, while project.pbxproj sets `CODE_SIGN_ENTITLEMENTS = App/App.entitlements` for both configurations.
+- **Cause:** the check compared the Windows path (backslashes) with the pbxproj's forward-slash path.
+- **Do:** update storebound; the warning was false.
+- **Guard:** `readProjectEntitlements` in `cli/apple/signing.ts` compares forward-slash paths on every OS
+  (`tests/entitlements-ref.test.ts`).
diff --git a/tests/entitlements-ref.test.ts b/tests/entitlements-ref.test.ts
new file mode 100644
index 0000000..8d1c56c
--- /dev/null
+++ b/tests/entitlements-ref.test.ts
@@ -0,0 +1,18 @@
+// The entitlements file the pbxproj names is "referenced" on every OS (Windows paths use backslashes; pitfall 103).
+import { expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { readProjectEntitlements } from '../cli/apple/signing';
+
+test('CODE_SIGN_ENTITLEMENTS = App/App.entitlements matches ios/App/App/App.entitlements', () => {
+  const root = mkdtempSync(join(tmpdir(), 'sb-ent-'));
+  mkdirSync(join(root, 'ios/App/App.xcodeproj'), { recursive: true });
+  mkdirSync(join(root, 'ios/App/App'), { recursive: true });
+  writeFileSync(join(root, 'ios/App/App.xcodeproj/project.pbxproj'), 'buildSettings = { CODE_SIGN_ENTITLEMENTS = App/App.entitlements; };\n');
+  writeFileSync(join(root, 'ios/App/App/App.entitlements'), '<plist><dict><key>com.apple.developer.game-center</key><true/></dict></plist>');
+  const r = readProjectEntitlements(root)!;
+  expect(r).toHaveLength(1);
+  expect(r[0]!.file).toBe('ios/App/App/App.entitlements');
+  expect(r[0]!.referenced).toBe(true);
+});

From 294fa322e2cbd8bd0b737853294f375b52052b88 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 15:03:45 +0700
Subject: [PATCH 022/255] storebound 0.8.28: version in package.json and every
 copy, CHANGELOG 0.8.28 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 6c2381f..7000a74 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.27",
+      "version": "0.8.28",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index c750978..7535e7a 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.27",
+  "version": "0.8.28",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index c444524..e0abd17 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.27",
+  "version": "0.8.28",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d222a34..1781c80 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.8.28 · 2026-10-22
+
 - Windows: no false "entitlements not referenced by CODE_SIGN_ENTITLEMENTS" warning (paths compared with forward slashes). Pitfall 103.
 
 - **`storebound apps relink`** after a machine move: every "folder not found" entry of the app folder list is pointed at
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 4c959fa..4ed3263 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.27",
+  "version": "0.8.28",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index f528243..4dc267b 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.27"
+version = "0.8.28"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1a55690..1ad40b3 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.27"
+version = "0.8.28"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 6cba48d..33afde1 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.27",
+  "version": "0.8.28",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index a727731..90ed811 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.27",
+  "version": "0.8.28",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 220d0c1..e3dcb1f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.27",
+  "version": "0.8.28",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 4b0f9cd5b8a62ba09a2b7086076e797776899721 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 20:28:16 +0800
Subject: [PATCH 023/255] apple iap: the dry run shows a live price that
 differs from the config (USA base and overrides) and --allow-price-changes
 replaces the price schedule; prices diff (the catalog diff report)

---
 cli/apple/iap.ts    | 44 +++++++++++++++++++++++++++++------------
 cli/data/flags.json | 48 ++++++++++++++++++++++++++++++++++++++-------
 cli/prices.ts       |  4 +++-
 3 files changed, 75 insertions(+), 21 deletions(-)

diff --git a/cli/apple/iap.ts b/cli/apple/iap.ts
index 6a580f6..0536a44 100644
--- a/cli/apple/iap.ts
+++ b/cli/apple/iap.ts
@@ -1,7 +1,8 @@
 // In-app purchases on App Store Connect: create missing products, localizations, price schedule (USA base + your
 // overrides; Apple equalizes every other storefront) and availability (every territory + new ones). Idempotent:
-// existing products and schedules are left alone (prices of an existing schedule are not changed; do that in the UI).
-//   storebound apple iap [--dry] [--only id1,id2]
+// existing products are left alone; a price that differs from the config (USA base and overrides) is shown in the plan
+// and changed only with --allow-price-changes (live prices are the owner's call; Acme 2026-10-22: the plan was silent).
+//   storebound apple iap [--dry] [--only id1,id2] [--allow-price-changes]
 // Then `apple iap-review` for the review screenshots. First IAPs can only be submitted together with an app version,
 // from the IAP page in the web UI (see the store-iap-setup skill).
 // --dry reads everything (read-only) and prints one plan row per product. After a real run the store's product list
@@ -18,6 +19,7 @@ import { appleTerritory, nearestPrices, samePrice } from '../lib/money';
 import { createOnce, findOrCreate, getById } from '../lib/upsert';
 import { ascClient, type J } from './asc';
 import * as rt from '../lib/rt';
+import { appleCurrent } from '../prices';
 
 /** Product type -> InAppPurchaseType (POST /v2/inAppPurchases). */
 export const APPLE_IAP_TYPE = { consumable: 'CONSUMABLE', non_consumable: 'NON_CONSUMABLE', non_renewing: 'NON_RENEWING_SUBSCRIPTION' } as const;
@@ -42,6 +44,24 @@ export async function run(ctx: Ctx): Promise<void> {
     throw new Error(`${territory} has no ${price} price point (nearest ${nearestPrices(seen, price).join(', ')})`);
   }
 
+  const wanted = (p: (typeof products)[number]) => [{ territory: 'USA', price: p.usd }, ...(p.overrides ?? []).map(o => ({ territory: appleTerritory(o), price: o.price }))];
+  /** "USA 9.99 -> 12.99" per territory whose live (current, not scheduled) manual price differs from the config. */
+  async function priceDiffs(id: string, p: (typeof products)[number]): Promise<string[]> {
+    const live = (await appleCurrent(c, id, p.id, false)).rows.filter(x => !x.startDate || x.startDate <= new Date().toISOString().slice(0, 10));
+    return wanted(p).flatMap(w => { const cur = live.find(x => x.territory === w.territory); return cur && !samePrice(cur.price, w.price) ? [`${w.territory} ${cur.price} -> ${w.price}`] : []; });
+  }
+  async function writeSchedule(id: string, manual: { territory: string; price: number }[]): Promise<void> {
+    const points = await Promise.all(manual.map(m => pricePoint(id, m.territory, m.price)));
+    await c.asc('POST', '/v1/inAppPurchasePriceSchedules', {
+      data: { type: 'inAppPurchasePriceSchedules', relationships: {
+        inAppPurchase: { data: { type: 'inAppPurchases', id } },
+        baseTerritory: { data: { type: 'territories', id: 'USA' } },
+        manualPrices: { data: manual.map(m => ({ type: 'inAppPurchasePrices', id: '${' + m.territory + '}' })) } } },
+      included: manual.map((m, k) => ({ type: 'inAppPurchasePrices', id: '${' + m.territory + '}', attributes: { startDate: null },
+        relationships: { inAppPurchasePricePoint: { data: { type: 'inAppPurchasePricePoints', id: points[k] } } } })),
+    });
+  }
+  const allowPrices = ctx.args.has('allow-price-changes');
   const rows: PlanRow[] = [];
   const created: string[] = [];
   for (const [i, p] of products.entries()) {
@@ -76,17 +96,13 @@ export async function run(ctx: Ctx): Promise<void> {
 
     const sched = await c.maybe(`/v2/inAppPurchases/${id}/iapPriceSchedule?include=manualPrices`);
     if (!sched?.included?.length) {
-      const manual = [{ territory: 'USA', price: p.usd }, ...(p.overrides ?? []).map(o => ({ territory: appleTerritory(o), price: o.price }))];
-      const points = await Promise.all(manual.map(m => pricePoint(id, m.territory, m.price)));
-      await c.asc('POST', '/v1/inAppPurchasePriceSchedules', {
-        data: { type: 'inAppPurchasePriceSchedules', relationships: {
-          inAppPurchase: { data: { type: 'inAppPurchases', id } },
-          baseTerritory: { data: { type: 'territories', id: 'USA' } },
-          manualPrices: { data: manual.map(m => ({ type: 'inAppPurchasePrices', id: '${' + m.territory + '}' })) } } },
-        included: manual.map((m, k) => ({ type: 'inAppPurchasePrices', id: '${' + m.territory + '}', attributes: { startDate: null },
-          relationships: { inAppPurchasePricePoint: { data: { type: 'inAppPurchasePricePoints', id: points[k] } } } })),
-      });
+      const manual = wanted(p);
+      await writeSchedule(id, manual);
       log('apple', `  prices ${manual.map(m => `${m.territory} ${m.price}`).join(', ')}`);
+    } else {
+      const diff = await priceDiffs(id, p);
+      if (diff.length && allowPrices) { await writeSchedule(id, wanted(p)); log('apple', `  prices changed: ${diff.join(', ')} (takes effect today; Apple equalizes the other storefronts)`); }
+      else if (diff.length) log('apple', `  prices differ from the config, NOT changed: ${diff.join(', ')} (live prices: re-run with --allow-price-changes after the owner's yes)`);
     }
 
     const avail = await c.maybe(`/v2/inAppPurchases/${id}/inAppPurchaseAvailability`);
@@ -120,7 +136,9 @@ export async function run(ctx: Ctx): Promise<void> {
     const add = locales.filter(l => !have.has(l));
     const sched = await c.maybe(`/v2/inAppPurchases/${id}/iapPriceSchedule?include=manualPrices`);
     const avail = await c.maybe(`/v2/inAppPurchases/${id}/inAppPurchaseAvailability`);
-    const parts = [add.length ? `localizations ${add.join(', ')}` : '', sched?.included?.length ? '' : `prices ${prices}`, avail?.data ? '' : `availability ${territories.length} territories + new ones`].filter(Boolean);
+    const diff = sched?.included?.length ? await priceDiffs(id, p) : [];
+    const priceNote = !sched?.included?.length ? `prices ${prices}` : diff.length ? `PRICE CHANGE ${diff.join(', ')}${allowPrices ? '' : ' (only with --allow-price-changes)'}` : '';
+    const parts = [add.length ? `localizations ${add.join(', ')}` : '', priceNote, avail?.data ? '' : `availability ${territories.length} territories + new ones`].filter(Boolean);
     return parts.length ? { item: p.id, action: 'update', detail: `${parts.join('; ')} (state ${state ?? '?'})` } : { item: p.id, action: 'keep' };
   }
 }
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 6c48e61..fe63096 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -107,7 +107,31 @@
    "keychain",
    "no-install"
   ],
-  "apple iap": [],
+  "apple iap": [
+   "all",
+   "allow-price-changes",
+   "base",
+   "ceiling",
+   "csv",
+   "file",
+   "floor",
+   "include-high-income",
+   "max-level",
+   "max-ratio",
+   "min-ratio",
+   "no-only-decreases",
+   "no-subscriptions",
+   "offline",
+   "only-decreases",
+   "out",
+   "reconvert",
+   "source",
+   "store",
+   "threshold",
+   "update-bigmac",
+   "with-automatic",
+   "write"
+  ],
   "apple iap-review": [],
   "apple iap-submit": [
    "new-version",
@@ -144,8 +168,10 @@
    "reconvert",
    "source",
    "store",
+   "threshold",
    "update-bigmac",
-   "with-automatic"
+   "with-automatic",
+   "write"
   ],
   "apple ppo": [
    "experiment",
@@ -253,8 +279,10 @@
    "reconvert",
    "source",
    "store",
+   "threshold",
    "update-bigmac",
-   "with-automatic"
+   "with-automatic",
+   "write"
   ],
   "apple testflight": [
    "build",
@@ -309,8 +337,10 @@
    "reconvert",
    "source",
    "store",
+   "threshold",
    "update-bigmac",
-   "with-automatic"
+   "with-automatic",
+   "write"
   ],
   "apps": [
    "app-id",
@@ -683,8 +713,10 @@
    "reconvert",
    "source",
    "store",
+   "threshold",
    "update-bigmac",
-   "with-automatic"
+   "with-automatic",
+   "write"
   ],
   "play upload": [
    "include-drafts",
@@ -717,8 +749,10 @@
    "reconvert",
    "source",
    "store",
+   "threshold",
    "update-bigmac",
-   "with-automatic"
+   "with-automatic",
+   "write"
   ],
   "privacy-manifest": [
    "ios",
@@ -1262,7 +1296,7 @@
    "storebound apple game-center [status] [--dry] [--yes] [--json]"
   ],
   "apple iap": [
-   "storebound apple iap [--dry] [--only id1,id2]"
+   "storebound apple iap [--dry] [--only id1,id2] [--allow-price-changes]"
   ],
   "apple iap-review": [
    "storebound apple iap-review [--dry]"
diff --git a/cli/prices.ts b/cli/prices.ts
index 18a7d71..2964f8e 100644
--- a/cli/prices.ts
+++ b/cli/prices.ts
@@ -64,7 +64,9 @@ export async function run(ctx: Ctx): Promise<void> {
   const a = ctx.args;
   const sub = a._[0];
   if (sub === 'ppp') return (await import('./prices-ppp')).run(ctx);
-  if (sub !== 'export' && sub !== 'import') throw new Error('usage: storebound prices export | import [--csv store/prices.csv] [--dry] | ppp [--base <USD>] [--dry]');
+  // `prices diff`: the config's prices against both stores (the same read-only report as `catalog diff`)
+  if (sub === 'diff') { ctx.args._.splice(0, 1, 'diff'); return (await import('./catalog')).run(ctx); }
+  if (sub !== 'export' && sub !== 'import') throw new Error('usage: storebound prices export | import [--csv store/prices.csv] [--dry] | diff | ppp [--base <USD>] [--dry]');
   const store = a.get('store');
   if (store && store !== 'apple' && store !== 'play') throw new Error('--store apple | play');
   const useApple = (!store || store === 'apple') && !!config.apple;

From f7ff52dfddc0e47f9fe0a3c10f047a4b45af3fbb Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 20:32:52 +0800
Subject: [PATCH 024/255] apple iap: existing products are compared with the
 config: localization name / description, reference name, review note
 (patched), family sharing (reported; on only), availability territories; all
 shown in the dry plan, one line each

---
 cli/apple/iap.ts              | 86 ++++++++++++++++++++++++++++++++---
 tests/apple-iap-drift.test.ts | 64 ++++++++++++++++++++++++++
 2 files changed, 144 insertions(+), 6 deletions(-)
 create mode 100644 tests/apple-iap-drift.test.ts

diff --git a/cli/apple/iap.ts b/cli/apple/iap.ts
index 0536a44..39cc4f7 100644
--- a/cli/apple/iap.ts
+++ b/cli/apple/iap.ts
@@ -24,6 +24,50 @@ import { appleCurrent } from '../prices';
 /** Product type -> InAppPurchaseType (POST /v2/inAppPurchases). */
 export const APPLE_IAP_TYPE = { consumable: 'CONSUMABLE', non_consumable: 'NON_CONSUMABLE', non_renewing: 'NON_RENEWING_SUBSCRIPTION' } as const;
 
+// one plan line per change: store texts carry line breaks, which broke the dry-run table
+const clip = (s: string, n = 40): string => { const a = [...s.replace(/\s+/g, ' ').trim()]; return a.length > n ? `${a.slice(0, n - 1).join('')}…` : a.join(''); };
+
+export type IapLocalization = { locale: string; id?: string; name: string; description: string };
+export type IapLocalizationChange = { locale: string; id: string; attrs: { name?: string; description?: string }; note: string };
+/** Existing locales whose name/description differ from the config: the attributes to PATCH and a short plan note. */
+export function iapLocalizationChanges(store: IapLocalization[], wanted: IapLocalization[]): IapLocalizationChange[] {
+  const out: IapLocalizationChange[] = [];
+  for (const w of wanted) {
+    const s = store.find(x => x.locale === w.locale);
+    if (!s?.id) continue;
+    const attrs: { name?: string; description?: string } = {};
+    const parts: string[] = [];
+    if ((s.name ?? '') !== w.name) { attrs.name = w.name; parts.push(`name "${clip(s.name ?? '')}" -> "${clip(w.name)}"`); }
+    if ((s.description ?? '') !== w.description) { attrs.description = w.description; parts.push(`description "${clip(s.description ?? '')}" -> "${clip(w.description)}"`); }
+    if (parts.length) out.push({ locale: w.locale, id: s.id, attrs, note: `localization ${w.locale}: ${parts.join(', ')}` });
+  }
+  return out;
+}
+
+export type IapAttributes = { name?: string; reviewNote?: string; familySharable?: boolean };
+export type IapAttributeChanges = { patch: { name?: string; reviewNote?: string; familySharable?: true }; notes: string[]; familyMismatch: string | null };
+/** Product attributes: referenceName (`name`), reviewNote (only when the config sets one), familySharable (on only; Apple cannot turn it off). */
+export function iapAttributeChanges(store: IapAttributes, wanted: IapAttributes): IapAttributeChanges {
+  const patch: IapAttributeChanges['patch'] = {};
+  const notes: string[] = [];
+  let familyMismatch: string | null = null;
+  if (wanted.name !== undefined && (store.name ?? '') !== wanted.name) { patch.name = wanted.name; notes.push(`referenceName "${clip(store.name ?? '')}" -> "${clip(wanted.name)}"`); }
+  if (wanted.reviewNote !== undefined && (store.reviewNote ?? '') !== wanted.reviewNote) { patch.reviewNote = wanted.reviewNote; notes.push(`reviewNote "${clip(store.reviewNote ?? '')}" -> "${clip(wanted.reviewNote)}"`); }
+  const wantFam = wanted.familySharable ?? false, haveFam = store.familySharable ?? false;
+  if (wantFam && !haveFam) { patch.familySharable = true; notes.push('familySharable false -> true (Apple cannot turn it off again)'); }
+  else if (!wantFam && haveFam) familyMismatch = 'familySharable is on in the store but off in the config (Apple cannot turn it off; not changed)';
+  return { patch, notes, familyMismatch };
+}
+
+/** Availability: null when the store covers every wanted territory and new ones; else "N -> M" (a POST replaces it). */
+export function availabilityChange(store: { territories: string[]; newTerritories: boolean } | null, territories: string[]): { from: number; to: number; note: string } | null {
+  const have = new Set(store?.territories ?? []);
+  const missing = territories.filter(t => !have.has(t));
+  if (store && !missing.length && store.newTerritories) return null;
+  const from = store ? have.size : 0;
+  return { from, to: territories.length, note: `availability: ${from} -> ${territories.length} territories${store && !store.newTerritories ? ' (+ new territories on)' : ''}` };
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
@@ -50,6 +94,15 @@ export async function run(ctx: Ctx): Promise<void> {
     const live = (await appleCurrent(c, id, p.id, false)).rows.filter(x => !x.startDate || x.startDate <= new Date().toISOString().slice(0, 10));
     return wanted(p).flatMap(w => { const cur = live.find(x => x.territory === w.territory); return cur && !samePrice(cur.price, w.price) ? [`${w.territory} ${cur.price} -> ${w.price}`] : []; });
   }
+  const locOf = (x: J) => ({ locale: x.attributes.locale as string, name: (x.attributes.name ?? '') as string, description: (x.attributes.description ?? '') as string });
+  const wantedLocs = (p: (typeof products)[number]) => Object.entries(p.listings).flatMap(([k, l]) => { const locale = langs.get(k)?.apple; return locale ? [{ locale, name: l.title, description: l.description }] : []; });
+  const wantedAttrs = (p: (typeof products)[number]): IapAttributes => ({ name: p.referenceName ?? Object.values(p.listings)[0]!.title, reviewNote: p.reviewNote, familySharable: p.familySharable });
+  /** The store's availability as territory ids + the new-territories flag (null when there is none). */
+  async function readAvail(avail: J | null | undefined): Promise<{ territories: string[]; newTerritories: boolean } | null> {
+    if (!avail?.data) return null;
+    const ts = (await c.all(`/v1/inAppPurchaseAvailabilities/${avail.data.id}/availableTerritories?limit=200`)).map((t: J) => t.id as string);
+    return { territories: ts, newTerritories: avail.data.attributes?.availableInNewTerritories === true };
+  }
   async function writeSchedule(id: string, manual: { territory: string; price: number }[]): Promise<void> {
     const points = await Promise.all(manual.map(m => pricePoint(id, m.territory, m.price)));
     await c.asc('POST', '/v1/inAppPurchasePriceSchedules', {
@@ -82,7 +135,8 @@ export async function run(ctx: Ctx): Promise<void> {
     log('apple', `${tag}: ${made.created ? 'created' : 'exists'}`);
 
     const locsOf = async () => await c.all(`/v2/inAppPurchases/${id}/inAppPurchaseLocalizations`);
-    const have = new Set((await locsOf()).map((l: J) => l.attributes.locale));
+    const storeLocs = await locsOf();
+    const have = new Set(storeLocs.map((l: J) => l.attributes.locale));
     for (const [langId, l] of Object.entries(p.listings)) {
       const locale = langs.get(langId)?.apple;
       if (!locale || have.has(locale)) continue;
@@ -93,6 +147,22 @@ export async function run(ctx: Ctx): Promise<void> {
           relationships: { inAppPurchaseV2: { data: { type: 'inAppPurchases', id } } } } })).data });
       log('apple', `  localization ${locale}`);
     }
+    for (const ch of iapLocalizationChanges(storeLocs.map((x: J) => ({ id: x.id, ...locOf(x) })), wantedLocs(p))) {
+      const l = Object.entries(p.listings).find(([k]) => langs.get(k)?.apple === ch.locale)![1];
+      if ([...l.description].length > APPLE_IAP_LIMITS.description) throw new Error(`${p.id} ${ch.locale}: description over ${APPLE_IAP_LIMITS.description} characters (Apple limit)`);
+      if ([...l.title].length > APPLE_IAP_LIMITS.name) throw new Error(`${p.id} ${ch.locale}: name over ${APPLE_IAP_LIMITS.name} characters (Apple limit)`);
+      await c.asc('PATCH', `/v1/inAppPurchaseLocalizations/${ch.id}`, { data: { type: 'inAppPurchaseLocalizations', id: ch.id, attributes: ch.attrs } });
+      log('apple', `  ${ch.note}`);
+    }
+    if (!made.created) {
+      const cur = (await c.asc('GET', `/v2/inAppPurchases/${id}`)).data?.attributes ?? {};
+      const ac = iapAttributeChanges(cur, wantedAttrs(p));
+      if (Object.keys(ac.patch).length) {
+        await c.asc('PATCH', `/v2/inAppPurchases/${id}`, { data: { type: 'inAppPurchases', id, attributes: ac.patch } });
+        log('apple', `  product updated: ${ac.notes.join(', ')}`);
+      }
+      if (ac.familyMismatch) log('apple', `  ${ac.familyMismatch}`);
+    }
 
     const sched = await c.maybe(`/v2/inAppPurchases/${id}/iapPriceSchedule?include=manualPrices`);
     if (!sched?.included?.length) {
@@ -106,11 +176,12 @@ export async function run(ctx: Ctx): Promise<void> {
     }
 
     const avail = await c.maybe(`/v2/inAppPurchases/${id}/inAppPurchaseAvailability`);
-    if (!avail?.data) {
+    const availDiff = availabilityChange(await readAvail(avail), territories);
+    if (availDiff) {
       await c.asc('POST', '/v1/inAppPurchaseAvailabilities', { data: { type: 'inAppPurchaseAvailabilities', attributes: { availableInNewTerritories: true },
         relationships: { inAppPurchase: { data: { type: 'inAppPurchases', id } },
           availableTerritories: { data: territories.map(t => ({ type: 'territories', id: t })) } } } });
-      log('apple', `  available in ${territories.length} territories + new ones`);
+      log('apple', `  ${avail?.data ? availDiff.note : `available in ${territories.length} territories + new ones`}`);
     }
   }
   if (dry) {
@@ -132,13 +203,16 @@ export async function run(ctx: Ctx): Promise<void> {
     const locales = Object.keys(p.listings).map(l => langs.get(l)?.apple).filter((l): l is string => !!l);
     const prices = [`USA ${p.usd}`, ...(p.overrides ?? []).map(o => `${appleTerritory(o)} ${o.price}`)].join(', ');
     if (!id) return { item: p.id, action: 'create', detail: `${APPLE_IAP_TYPE[p.type]}; localizations ${locales.join(', ')}; prices ${prices}; ${territories.length} territories + new ones` };
-    const have = new Set((await c.all(`/v2/inAppPurchases/${id}/inAppPurchaseLocalizations`)).map((l: J) => l.attributes.locale));
+    const storeLocs = await c.all(`/v2/inAppPurchases/${id}/inAppPurchaseLocalizations`);
+    const have = new Set(storeLocs.map((l: J) => l.attributes.locale));
+    const locChanges = iapLocalizationChanges(storeLocs.map((x: J) => ({ id: x.id, ...locOf(x) })), wantedLocs(p));
+    const ac = iapAttributeChanges((await c.asc('GET', `/v2/inAppPurchases/${id}`)).data?.attributes ?? {}, wantedAttrs(p));
+    const availDiff = availabilityChange(await readAvail(await c.maybe(`/v2/inAppPurchases/${id}/inAppPurchaseAvailability`)), territories);
     const add = locales.filter(l => !have.has(l));
     const sched = await c.maybe(`/v2/inAppPurchases/${id}/iapPriceSchedule?include=manualPrices`);
-    const avail = await c.maybe(`/v2/inAppPurchases/${id}/inAppPurchaseAvailability`);
     const diff = sched?.included?.length ? await priceDiffs(id, p) : [];
     const priceNote = !sched?.included?.length ? `prices ${prices}` : diff.length ? `PRICE CHANGE ${diff.join(', ')}${allowPrices ? '' : ' (only with --allow-price-changes)'}` : '';
-    const parts = [add.length ? `localizations ${add.join(', ')}` : '', priceNote, avail?.data ? '' : `availability ${territories.length} territories + new ones`].filter(Boolean);
+    const parts = [add.length ? `localizations ${add.join(', ')}` : '', priceNote, ...locChanges.map(x => x.note), ...ac.notes, ac.familyMismatch ? `MISMATCH ${ac.familyMismatch}` : '', availDiff?.note ?? ''].filter(Boolean);
     return parts.length ? { item: p.id, action: 'update', detail: `${parts.join('; ')} (state ${state ?? '?'})` } : { item: p.id, action: 'keep' };
   }
 }
diff --git a/tests/apple-iap-drift.test.ts b/tests/apple-iap-drift.test.ts
new file mode 100644
index 0000000..cd10d4b
--- /dev/null
+++ b/tests/apple-iap-drift.test.ts
@@ -0,0 +1,64 @@
+import { describe, expect, test } from 'bun:test';
+import { availabilityChange, iapAttributeChanges, iapLocalizationChanges } from '../cli/apple/iap';
+
+describe('iapLocalizationChanges', () => {
+  const store = [{ id: 'l1', locale: 'en-US', name: 'Coins', description: 'A pile of coins' }, { id: 'l2', locale: 'de-DE', name: 'Muenzen', description: 'Viele' }];
+  test('no difference means no change', () => {
+    expect(iapLocalizationChanges(store, [{ locale: 'en-US', name: 'Coins', description: 'A pile of coins' }])).toEqual([]);
+  });
+  test('only the changed attribute is patched', () => {
+    const r = iapLocalizationChanges(store, [{ locale: 'en-US', name: 'Coins', description: 'More coins' }]);
+    expect(r).toHaveLength(1);
+    expect(r[0]!.id).toBe('l1');
+    expect(r[0]!.attrs).toEqual({ description: 'More coins' });
+    expect(r[0]!.note).toBe('localization en-US: description "A pile of coins" -> "More coins"');
+  });
+  test('name and description, long text truncated, missing locales skipped', () => {
+    const long = 'x'.repeat(100);
+    const r = iapLocalizationChanges(store, [{ locale: 'de-DE', name: 'Gold', description: long }, { locale: 'fr-FR', name: 'a', description: 'b' }]);
+    expect(r).toHaveLength(1);
+    expect(r[0]!.attrs).toEqual({ name: 'Gold', description: long });
+    expect(r[0]!.note).toContain('name "Muenzen" -> "Gold"');
+    expect(r[0]!.note.length).toBeLessThan(120);
+  });
+});
+
+describe('iapAttributeChanges', () => {
+  test('equal attributes: nothing', () => {
+    const r = iapAttributeChanges({ name: 'com.example.coins', reviewNote: 'n', familySharable: false }, { name: 'com.example.coins', reviewNote: 'n', familySharable: false });
+    expect(r.patch).toEqual({});
+    expect(r.notes).toEqual([]);
+    expect(r.familyMismatch).toBeNull();
+  });
+  test('referenceName and reviewNote differ', () => {
+    const r = iapAttributeChanges({ name: 'Old', reviewNote: 'a' }, { name: 'New', reviewNote: 'b' });
+    expect(r.patch).toEqual({ name: 'New', reviewNote: 'b' });
+    expect(r.notes).toHaveLength(2);
+  });
+  test('reviewNote not set in the config is not compared', () => {
+    expect(iapAttributeChanges({ name: 'A', reviewNote: 'kept' }, { name: 'A' }).patch).toEqual({});
+  });
+  test('familySharable can be turned on, never off', () => {
+    expect(iapAttributeChanges({ name: 'A', familySharable: false }, { name: 'A', familySharable: true }).patch).toEqual({ familySharable: true });
+    const off = iapAttributeChanges({ name: 'A', familySharable: true }, { name: 'A', familySharable: false });
+    expect(off.patch).toEqual({});
+    expect(off.familyMismatch).toContain('familySharable');
+  });
+});
+
+describe('availabilityChange', () => {
+  const all = ['USA', 'DEU', 'FRA'];
+  test('complete availability with new territories: no change', () => {
+    expect(availabilityChange({ territories: ['USA', 'DEU', 'FRA', 'ITA'], newTerritories: true }, all)).toBeNull();
+  });
+  test('fewer territories', () => {
+    const r = availabilityChange({ territories: ['USA'], newTerritories: true }, all);
+    expect(r?.note).toBe('availability: 1 -> 3 territories');
+  });
+  test('new territories off', () => {
+    expect(availabilityChange({ territories: all, newTerritories: false }, all)?.note).toContain('new territories on');
+  });
+  test('no availability at all', () => {
+    expect(availabilityChange(null, all)).toMatchObject({ from: 0, to: 3 });
+  });
+});

From f2b841d73576195b19ad18ee2dc1c416141bbe72 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 20:33:46 +0800
Subject: [PATCH 025/255] apple appinfo: live app price and availability
 compared with the config (price change needs --allow-price-changes, territory
 removals --allow-availability-changes); review-details --dry reads the store
 and shows old -> new (masked)

---
 cli/apple/appinfo.ts        | 86 ++++++++++++++++++++++++++++++++-----
 cli/apple/review-details.ts | 27 +++++++++++-
 tests/appinfo-drift.test.ts | 68 +++++++++++++++++++++++++++++
 3 files changed, 168 insertions(+), 13 deletions(-)
 create mode 100644 tests/appinfo-drift.test.ts

diff --git a/cli/apple/appinfo.ts b/cli/apple/appinfo.ts
index 7eb176f..d99b83b 100644
--- a/cli/apple/appinfo.ts
+++ b/cli/apple/appinfo.ts
@@ -1,5 +1,5 @@
 // App-level App Store settings (idempotent), from apple.info in storebound.config.ts:
-//   storebound apple appinfo [--dry] [--json]
+//   storebound apple appinfo [--dry] [--json] [--allow-price-changes] [--allow-availability-changes]
 // Every run first reads the current values and prints the plan (old -> new per field); --dry stops there, the real run
 // asks in a terminal and changes only what differs.
 // - categories (primary + up to two subcategories for games, secondary)
@@ -22,14 +22,52 @@ const CATEGORY_RELS = ['primaryCategory', 'primarySubcategoryOne', 'primarySubca
 const str = (v: unknown): string => (v === null || v === undefined ? '' : String(v));
 
 /** The plan of one `apple appinfo` run, from read-only GETs. */
-export interface AppInfoPlan { appInfoId: string; items: ItemPlan[]; freePricePointId: string | null; territories: string[]; changes: number }
+export interface AppInfoPlan { appInfoId: string; items: ItemPlan[]; freePricePointId: string | null; territories: string[]; changes: number;
+  /** Item keys that differ but are NOT applied (price without --allow-price-changes, territory removal without --allow-availability-changes). */
+  blocked: string[] }
+
+type J = any; // eslint-disable-line @typescript-eslint/no-explicit-any
+
+/** The manual base price of an app price schedule as a label ('Free' or '4.99'), from GET appPriceSchedule/manualPrices
+ *  ?include=appPricePoint. The current price is the one without a start date or the latest one already started. Pure. */
+export function currentBasePrice(page: { data?: J[]; included?: J[] } | null | undefined, today: string = new Date().toISOString().slice(0, 10)): string | null {
+  const points = new Map<string, string>();
+  for (const x of Array.isArray(page?.included) ? page!.included! : []) if (x.type === 'appPricePoints') points.set(x.id, String(x.attributes?.customerPrice ?? ''));
+  const started = (Array.isArray(page?.data) ? page!.data! : []).filter(p => !p.attributes?.startDate || String(p.attributes.startDate) <= today)
+    .sort((a, b) => String(a.attributes?.startDate ?? '').localeCompare(String(b.attributes?.startDate ?? '')));
+  const cur = started[started.length - 1];
+  const raw = cur ? points.get(cur.relationships?.appPricePoint?.data?.id) : undefined;
+  if (raw === undefined || raw === '' || Number.isNaN(Number(raw))) return null;
+  return Number(raw) === 0 ? 'Free' : String(Number(raw));
+}
+
+export interface AvailabilityNow { availableInNewTerritories: boolean; available: string[] }
+export interface AvailabilityPlan { add: string[]; remove: string[]; newFlagChange: boolean; differs: boolean; from: string; to: string }
+
+/** Territory ids that are available now, from the pages of /v2/appAvailabilities/{id}/territoryAvailabilities. Pure. */
+export function availableTerritories(pages: { data?: J[] }[]): string[] {
+  return pages.flatMap(p => p.data ?? []).filter(t => t.attributes?.available === true).map(t => String(t.relationships?.territory?.data?.id ?? '')).filter(Boolean);
+}
+
+/** Current availability against the wanted one (the listed territories, availableInNewTerritories true). Pure. */
+export function planAvailability(cur: AvailabilityNow, wanted: string[]): AvailabilityPlan {
+  const have = new Set(cur.available), want = new Set(wanted);
+  const add = wanted.filter(t => !have.has(t)), remove = cur.available.filter(t => !want.has(t));
+  const newFlagChange = !cur.availableInNewTerritories;
+  return { add, remove, newFlagChange, differs: !!(add.length || remove.length || newFlagChange), from: `${cur.available.length} territories`, to: `${wanted.length} territories` };
+}
+
+/** Differing items that are held back: money needs --allow-price-changes, territory removal --allow-availability-changes. Pure. */
+export function blockedItems(o: { priceDiffers: boolean; removes: boolean; allowPrice: boolean; allowAvailability: boolean }): string[] {
+  return [...(o.priceDiffers && !o.allowPrice ? ['price'] : []), ...(o.removes && !o.allowAvailability ? ['availability removal'] : [])];
+}
 
 /** The plan as text lines. Pure. */
 export function appInfoPlanLines(p: AppInfoPlan): string[] {
   return p.items.flatMap(i => itemLines(i.key, i, ''));
 }
 
-async function planAppInfo(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>, appId: string): Promise<AppInfoPlan> {
+export async function planAppInfo(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>, appId: string, opts: { allowPrice?: boolean; allowAvailability?: boolean } = {}): Promise<AppInfoPlan> {
   const info = ctx.loaded.config.apple?.info ?? {};
   const appInfo = await c.editableAppInfo();
   const items: ItemPlan[] = [];
@@ -48,22 +86,47 @@ async function planAppInfo(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>, a
     const app = await c.maybe(`/v1/apps/${appId}`);
     items.push(planItem('content rights', { attributes: { contentRightsDeclaration: str(app?.data?.attributes?.contentRightsDeclaration) } }, { contentRightsDeclaration: info.contentRights }));
   }
-  let freePricePointId: string | null = null, territories: string[] = [];
+  let freePricePointId: string | null = null, territories: string[] = [], priceDiffers = false, removes = false;
   if (info.free !== false) {
     const sched = await c.maybe(`/v1/apps/${appId}/appPriceSchedule?include=manualPrices`);
-    if (!sched?.included?.some((x: { type: string }) => x.type === 'appPrices')) {
+    const findFree = async (): Promise<string> => {
       const free = (await c.all(`/v1/apps/${appId}/appPricePoints?filter[territory]=USA&limit=200`)).find(p => Number(p.attributes.customerPrice) === 0);
       if (!free) throw new Error('no free price point for USA');
-      freePricePointId = free.id;
+      return free.id as string;
+    };
+    if (!sched?.included?.some((x: { type: string }) => x.type === 'appPrices')) {
+      freePricePointId = await findFree();
       items.push(planItem('price', null, { price: 'Free', baseTerritory: 'USA' }));
-    } else items.push(planItem('price', { attributes: { schedule: 'exists' } }, { schedule: 'exists' }));
+    } else {
+      const now = currentBasePrice(await c.maybe(`/v1/apps/${appId}/appPriceSchedule/manualPrices?include=appPricePoint&limit=50`));
+      if (now === null) items.push(planItem('price', { attributes: { schedule: 'exists' } }, { schedule: 'exists' }));
+      else {
+        const it = planItem('price', { attributes: { price: now } }, { price: 'Free' });
+        items.push(it);
+        if (it.action !== 'same') { priceDiffers = true; if (opts.allowPrice) freePricePointId = await findFree(); }
+      }
+    }
     const avail = await c.maybe(`/v1/apps/${appId}/appAvailabilityV2`);
+    const all = (await c.all('/v1/territories?limit=200')).map(t => t.id as string);
     if (!avail?.data) {
-      territories = (await c.all('/v1/territories?limit=200')).map(t => t.id);
+      territories = all;
       items.push(planItem('availability', null, { territories: `${territories.length} (all)`, availableInNewTerritories: 'true' }));
-    } else items.push(planItem('availability', { attributes: { availability: 'exists' } }, { availability: 'exists' }));
+    } else {
+      const pages: J[] = [];
+      for (let url: string | null = `/v2/appAvailabilities/${avail.data.id}/territoryAvailabilities?include=territory&limit=200`; url;) { const pg: J = await c.asc('GET', url); pages.push(pg); url = pg.links?.next ?? null; }
+      const have = availableTerritories(pages);
+      const ap = planAvailability({ availableInNewTerritories: avail.data.attributes?.availableInNewTerritories === true, available: have }, all);
+      items.push(planItem('availability', { attributes: { availability: ap.from, availableInNewTerritories: String(!ap.newFlagChange) } }, { availability: ap.differs ? ap.to : ap.from, availableInNewTerritories: 'true' }));
+      if (ap.differs) {
+        removes = ap.remove.length > 0;
+        // additions go ahead; removals only with the flag (otherwise today's set plus the additions is sent)
+        territories = opts.allowAvailability || !removes ? all : [...new Set([...have, ...all])];
+      }
+    }
   }
-  return { appInfoId: appInfo.id, items, freePricePointId, territories, changes: items.filter(i => i.action !== 'same').length };
+  const blocked = blockedItems({ priceDiffers, removes, allowPrice: !!opts.allowPrice, allowAvailability: !!opts.allowAvailability });
+  const held = (i: ItemPlan) => i.key === 'price' && blocked.includes('price');
+  return { appInfoId: appInfo.id, items, freePricePointId, territories, blocked, changes: items.filter(i => i.action !== 'same' && !held(i)).length };
 }
 
 export async function run(ctx: Ctx): Promise<void> {
@@ -73,9 +136,10 @@ export async function run(ctx: Ctx): Promise<void> {
   refuseTemplate(config, ['ageRating'], 'apple appinfo (age rating declaration)');
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
   const appId = await c.app();
-  const p = await planAppInfo(ctx, c, appId);
+  const p = await planAppInfo(ctx, c, appId, { allowPrice: ctx.args.has('allow-price-changes'), allowAvailability: ctx.args.has('allow-availability-changes') });
   if (ctx.args.has('json')) printJson({ dry, ...p });
   else for (const line of appInfoPlanLines(p)) console.log(line);
+  for (const b of p.blocked) warn('apple', b === 'price' ? "price differs from the config: not changed (live price; re-run with --allow-price-changes after the owner's yes)" : "availability would remove territories: not removed (re-run with --allow-availability-changes after the owner's yes)");
   if (dry) { done('apple', `dry run: ${p.changes ? `${p.changes} change(s)` : 'nothing to change'}; read-only, nothing written`); return; }
   if (!p.changes) { done('apple', 'appinfo already up to date (App Privacy is UI-only: store-declarations skill)'); return; }
   if (stdinIsTTY() && !(await confirm(ctx, `Apply these ${p.changes} change(s) to App Store Connect?`))) { warn('apple', 'nothing written'); return; }
diff --git a/cli/apple/review-details.ts b/cli/apple/review-details.ts
index ab9404b..123cc50 100644
--- a/cli/apple/review-details.ts
+++ b/cli/apple/review-details.ts
@@ -8,12 +8,30 @@
 import { refuseTemplate } from '../lib/template-answers';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
-import { findReviewContact, noContactMessage, reviewDemoAccount } from '../lib/credentials';
+import { findReviewContact, maskSecret, maskUser, noContactMessage, reviewDemoAccount } from '../lib/credentials';
 import { reviewDetailPlan } from '../lib/review-details';
 import { done, log } from '../lib/log';
 import { createOnce } from '../lib/upsert';
 import { ascClient } from './asc';
 
+type Attrs = Record<string, unknown>;
+const shown = (k: string, v: unknown): string => {
+  if (v === null || v === undefined || v === '') return '(empty)';
+  const t = String(v);
+  if (k === 'demoAccountPassword') return maskSecret(t);
+  if (k === 'demoAccountName' || k === 'contactEmail') return maskUser(t);
+  if (k === 'contactPhone') return `${t.slice(0, 3)}***`;
+  if (k === 'notes') return `${new TextEncoder().encode(t).length} bytes`;
+  return t;
+};
+
+/** Changed review-detail keys as `key: old -> new` lines (secrets, phone, email masked; notes as byte counts). A missing
+ *  detail (cur null) lists every key as new. Pure. */
+export function reviewDetailDiff(cur: Attrs | null, want: Attrs): string[] {
+  return Object.entries(want).filter(([k, v]) => !cur || (cur[k] ?? null) !== (v ?? null))
+    .map(([k, v]) => `${k}: ${cur ? shown(k, cur[k]) : '(none)'} -> ${shown(k, v)}`);
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   refuseTemplate(config, ['reviewNotes', 'reviewAccess', 'accounts'], 'apple review-details (App Review notes, demo account requirement)');
@@ -40,9 +58,14 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!contact) throw new Error(noContactMessage(root, checked));
 
   const { attributes, summary } = reviewDetailPlan(config, contact, reviewDemoAccount(root));
-  if (ctx.args.has('dry')) { log('apple', `would set review details (contact ${from ? 'copied from ' + from : 'from credentials'}, ${summary})`); return; }
   const read = async () => (await c.maybe(`/v1/appStoreVersions/${version.id}/appStoreReviewDetail`))?.data ?? null;
   const cur = await read();
+  if (ctx.args.has('dry')) {
+    const lines = reviewDetailDiff(cur?.attributes ?? null, attributes);
+    log('apple', `would ${cur ? (lines.length ? 'update' : 'keep') : 'create'} review details (contact ${from ? 'copied from ' + from : 'from credentials'}, ${summary})`);
+    for (const l of lines) console.log(`  ${l}`);
+    return;
+  }
   // one review detail per version: only changed fields are sent; a new one is created once (a 409 finds it)
   const changed = cur ? Object.fromEntries(Object.entries(attributes).filter(([k, v]) => (cur.attributes?.[k] ?? null) !== (v ?? null))) : attributes;
   if (cur && !Object.keys(changed).length) { done('apple', `review details on ${version.attributes.versionString} up to date (${summary})`); return; }
diff --git a/tests/appinfo-drift.test.ts b/tests/appinfo-drift.test.ts
new file mode 100644
index 0000000..8eaaee6
--- /dev/null
+++ b/tests/appinfo-drift.test.ts
@@ -0,0 +1,68 @@
+import { describe, expect, test } from 'bun:test';
+import { availableTerritories, blockedItems, currentBasePrice, planAvailability } from '../cli/apple/appinfo';
+import { reviewDetailDiff } from '../cli/apple/review-details';
+
+const price = (id: string, startDate: string | null, point: string) => ({ type: 'appPrices', id, attributes: { startDate }, relationships: { appPricePoint: { data: { type: 'appPricePoints', id: point } } } });
+const point = (id: string, customerPrice: string) => ({ type: 'appPricePoints', id, attributes: { customerPrice } });
+
+describe('currentBasePrice', () => {
+  test('paid price is shown as a number', () => {
+    expect(currentBasePrice({ data: [price('a', null, 'p1')], included: [point('p1', '4.99')] })).toBe('4.99');
+  });
+  test('zero is Free', () => {
+    expect(currentBasePrice({ data: [price('a', null, 'p1')], included: [point('p1', '0.0')] })).toBe('Free');
+  });
+  test('latest started price wins, future ones are ignored', () => {
+    const page = { data: [price('a', null, 'p1'), price('b', '2026-01-01', 'p2'), price('c', '2099-01-01', 'p3')], included: [point('p1', '0'), point('p2', '1.99'), point('p3', '9.99')] };
+    expect(currentBasePrice(page, '2026-06-01')).toBe('1.99');
+  });
+  test('unreadable gives null', () => {
+    expect(currentBasePrice(null)).toBeNull();
+    expect(currentBasePrice({ data: [price('a', null, 'zz')], included: [] })).toBeNull();
+  });
+});
+
+describe('availability', () => {
+  const ta = (t: string, available: boolean) => ({ attributes: { available }, relationships: { territory: { data: { id: t } } } });
+  test('availableTerritories lists only available ones across pages', () => {
+    expect(availableTerritories([{ data: [ta('AAA', true), ta('BBB', false)] }, { data: [ta('CCC', true)] }])).toEqual(['AAA', 'CCC']);
+  });
+  test('same set and flag: no difference', () => {
+    expect(planAvailability({ availableInNewTerritories: true, available: ['A', 'B'] }, ['A', 'B']).differs).toBe(false);
+  });
+  test('missing territories are additions', () => {
+    const p = planAvailability({ availableInNewTerritories: true, available: ['A'] }, ['A', 'B', 'C']);
+    expect(p).toMatchObject({ add: ['B', 'C'], remove: [], differs: true, from: '1 territories', to: '3 territories' });
+  });
+  test('extra territories are removals; flag off is a change', () => {
+    const p = planAvailability({ availableInNewTerritories: false, available: ['A', 'X'] }, ['A']);
+    expect(p.remove).toEqual(['X']);
+    expect(p.newFlagChange).toBe(true);
+  });
+  test('blockedItems', () => {
+    expect(blockedItems({ priceDiffers: true, removes: true, allowPrice: false, allowAvailability: false })).toEqual(['price', 'availability removal']);
+    expect(blockedItems({ priceDiffers: true, removes: true, allowPrice: true, allowAvailability: true })).toEqual([]);
+    expect(blockedItems({ priceDiffers: false, removes: false, allowPrice: false, allowAvailability: false })).toEqual([]);
+  });
+});
+
+describe('reviewDetailDiff', () => {
+  const want = { contactPhone: '+15550001111', contactEmail: 'someone@example.com', demoAccountRequired: true, demoAccountName: 'demo-user', demoAccountPassword: 'hunter2', notes: 'Hello' };
+  test('lists only changed keys and masks secrets', () => {
+    const lines = reviewDetailDiff({ ...want, demoAccountPassword: 'old-secret', notes: 'Hi' }, want);
+    expect(lines).toHaveLength(2);
+    expect(lines.join('\n')).not.toContain('hunter2');
+    expect(lines.join('\n')).not.toContain('old-secret');
+    expect(lines[0]).toBe('demoAccountPassword: ******** -> ********');
+    expect(lines[1]).toBe('notes: 2 bytes -> 5 bytes');
+  });
+  test('nothing changed gives no lines', () => {
+    expect(reviewDetailDiff({ ...want }, want)).toEqual([]);
+  });
+  test('new detail lists everything, phone and email masked', () => {
+    const lines = reviewDetailDiff(null, want);
+    expect(lines).toHaveLength(6);
+    expect(lines.join('\n')).not.toContain('5550001111');
+    expect(lines.join('\n')).not.toContain('someone@example.com');
+  });
+});

From e381bc2256f700346fa1fb28cc5e7a08899a2035 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 20:38:54 +0800
Subject: [PATCH 026/255] Drift on existing items: offer-code and win-back
 campaigns that differ are named (Apple cannot edit them), in-app event
 attributes patched on drafts, a removed custom page deep link cleared, config
 languages without a version localization named, data safety dry run says Play
 has no read API; appinfo reads /v1/appPriceSchedules/{id}/manualPrices; a new
 Play language without an icon warns instead of stopping; fake store lists for
 the new reads

---
 cli/apple/appinfo.ts         |  2 +-
 cli/apple/cpp.ts             |  8 ++--
 cli/apple/events.ts          | 11 +++++-
 cli/apple/offer-codes.ts     | 28 +++++++++++++-
 cli/apple/screenshots.ts     |  7 ++++
 cli/apple/win-back.ts        | 30 ++++++++++++++-
 cli/lib/cpp-events.ts        | 38 ++++++++++++++++++
 cli/play/data-safety.ts      |  5 +++
 cli/play/listing.ts          |  2 +-
 tests/helpers/fake-stores.ts | 11 ++++++
 tests/misc-drift.test.ts     | 74 ++++++++++++++++++++++++++++++++++++
 11 files changed, 206 insertions(+), 10 deletions(-)
 create mode 100644 tests/misc-drift.test.ts

diff --git a/cli/apple/appinfo.ts b/cli/apple/appinfo.ts
index d99b83b..9dc2360 100644
--- a/cli/apple/appinfo.ts
+++ b/cli/apple/appinfo.ts
@@ -98,7 +98,7 @@ export async function planAppInfo(ctx: Ctx, c: Awaited<ReturnType<typeof ascClie
       freePricePointId = await findFree();
       items.push(planItem('price', null, { price: 'Free', baseTerritory: 'USA' }));
     } else {
-      const now = currentBasePrice(await c.maybe(`/v1/apps/${appId}/appPriceSchedule/manualPrices?include=appPricePoint&limit=50`));
+      const now = currentBasePrice(await c.maybe(`/v1/appPriceSchedules/${appId}/manualPrices?include=appPricePoint&limit=50`));
       if (now === null) items.push(planItem('price', { attributes: { schedule: 'exists' } }, { schedule: 'exists' }));
       else {
         const it = planItem('price', { attributes: { price: now } }, { price: 'Free' });
diff --git a/cli/apple/cpp.ts b/cli/apple/cpp.ts
index b572df4..7f5aaa7 100644
--- a/cli/apple/cpp.ts
+++ b/cli/apple/cpp.ts
@@ -11,7 +11,7 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import type { Ctx } from '../lib/ctx';
 import { byAppleLocale, confirm, need } from '../lib/ctx';
-import { CPP_EDITABLE, CPP_LIMITS, cppCreateBody, cppLocales, type CustomProductPageDef, planCppLocales, reviewItemReq } from '../lib/cpp-events';
+import { CPP_EDITABLE, CPP_LIMITS, cppCreateBody, cppDeepLinkReq, cppLocales, type CustomProductPageDef, extraCppLocales, planCppLocales, reviewItemReq } from '../lib/cpp-events';
 import { done, log, printJson, warn } from '../lib/log';
 import { textTable } from '../lib/table';
 import { numberedImages } from '../play/images';
@@ -73,8 +73,10 @@ export async function run(ctx: Ctx): Promise<void> {
       if (!page.version || !CPP_EDITABLE.has(page.version.state)) { log(TAG, `"${d.name}": version ${page.version?.state ?? 'missing'}, not editable (a new version: App Store Connect)`); continue; }
       const have = (await c.all(`/v1/appCustomProductPageVersions/${page.version.id}/appCustomProductPageLocalizations?limit=200`)).map((l: J) => ({ id: l.id, locale: l.attributes.locale, promotionalText: l.attributes.promotionalText }));
       reqs.push(...planCppLocales(page.version.id, have, locs));
-      if ((d.deepLink ?? null) !== (page.version.deepLink ?? null) && d.deepLink) reqs.push({ method: 'PATCH', path: `/v1/appCustomProductPageVersions/${page.version.id}`, note: `"${d.name}" deep link`,
-        body: { data: { type: 'appCustomProductPageVersions', id: page.version.id, attributes: { deepLink: d.deepLink } } } });
+      const extra = extraCppLocales(have.map(h => h.locale), locs.map(l => l.locale));
+      if (extra.length) warn(TAG, `"${d.name}": locale(s) ${extra.join(', ')} are on the page but not in the config languages (not removed)`);
+      const dl = cppDeepLinkReq(page.version.id, d.name, d.deepLink, page.version.deepLink);
+      if (dl) reqs.push(dl);
     }
     if (pages.length + reqs.filter(r => r.path === '/v1/appCustomProductPages').length > CPP_LIMITS.pages) throw new Error(`more than ${CPP_LIMITS.pages} custom product pages`);
     if (a.has('json')) printJson({ dryRun: dry, requests: reqs.map(r => describeReq(r)) });
diff --git a/cli/apple/events.ts b/cli/apple/events.ts
index 6bde356..5691256 100644
--- a/cli/apple/events.ts
+++ b/cli/apple/events.ts
@@ -9,7 +9,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
-import { type AppEventDef, checkEventMedia, EVENT_EDITABLE, EVENT_LIMITS, eventCreateBody, planEventLocales, reviewItemReq } from '../lib/cpp-events';
+import { type AppEventDef, checkEventMedia, EVENT_EDITABLE, EVENT_LIMITS, eventAttrDiff, eventCreateBody, eventPatchReq, planEventLocales, reviewItemReq } from '../lib/cpp-events';
 import { done, log, printJson, warn } from '../lib/log';
 import { textTable } from '../lib/table';
 import { imageInfo } from '../shots/spec';
@@ -59,7 +59,14 @@ export async function run(ctx: Ctx): Promise<void> {
       const primary = localeOf(d.primaryLanguage ?? '') ?? want[0]?.locale ?? 'en-US';
       const ev = events.find((e: J) => e.attributes.referenceName === d.referenceName);
       if (!ev) { created.push({ def: d, index: reqs.length }); reqs.push({ method: 'POST', path: '/v1/appEvents', note: `event "${d.referenceName}" (${d.badge}, ${d.schedule.eventStart} to ${d.schedule.eventEnd})`, body: eventCreateBody(appId, d, primary, d.schedule.territories ?? territories) }); continue; }
-      if (!EVENT_EDITABLE.has(ev.attributes.eventState)) { log(TAG, `"${d.referenceName}": ${ev.attributes.eventState}, not editable`); continue; }
+      const drift = eventAttrDiff(d, ev.attributes);
+      if (!EVENT_EDITABLE.has(ev.attributes.eventState)) {
+        if (drift.lines.length) warn(TAG, `"${d.referenceName}" is ${ev.attributes.eventState} and differs from the config: ${drift.lines.join('; ')} (not editable: change it in App Store Connect)`);
+        else log(TAG, `"${d.referenceName}": ${ev.attributes.eventState}, not editable`);
+        continue;
+      }
+      const patch = eventPatchReq(ev.id, d.referenceName, drift.attrs, drift.lines);
+      if (patch) reqs.push(patch);
       const have = (await c.all(`/v1/appEvents/${ev.id}/localizations?limit=200`)).map((l: J) => ({ id: l.id, ...l.attributes }));
       reqs.push(...planEventLocales(ev.id, have, want));
     }
diff --git a/cli/apple/offer-codes.ts b/cli/apple/offer-codes.ts
index ce300f3..30ccc4d 100644
--- a/cli/apple/offer-codes.ts
+++ b/cli/apple/offer-codes.ts
@@ -21,6 +21,26 @@ import { findOrCreate, getById } from '../lib/upsert';
 
 const TAG = 'offer-codes';
 
+/** Differences between an existing offer code campaign and the config (Apple does not allow editing a campaign). Pure. */
+export function campaignDiff(cur: { eligibility: string[]; prices: { territory: string; pointId?: string }[] },
+  want: { eligibility: string[]; free: boolean; prices: { territory: string; pointId?: string }[] }): string[] {
+  const out: string[] = [];
+  const set = (x: string[]) => [...new Set(x)].sort();
+  const a = set(cur.eligibility), b = set(want.eligibility);
+  if (a.join() !== b.join()) out.push(`eligibility ${a.join('+') || '(none)'} -> ${b.join('+') || '(none)'}`);
+  const curFree = cur.prices.length > 0 && cur.prices.every(x => !x.pointId);
+  if (cur.prices.length && curFree !== want.free) out.push(`mode ${curFree ? 'free' : 'paid'} -> ${want.free ? 'free' : 'paid'}`);
+  const ct = set(cur.prices.map(x => x.territory)), wt = set(want.prices.map(x => x.territory));
+  const gone = ct.filter(t => !wt.includes(t)), added = wt.filter(t => !ct.includes(t));
+  if (gone.length || added.length) out.push(`territories ${added.length ? `+${added.length} (${added.slice(0, 5).join(',')}${added.length > 5 ? ',...' : ''})` : ''}${gone.length ? ` -${gone.length} (${gone.slice(0, 5).join(',')}${gone.length > 5 ? ',...' : ''})` : ''}`.replace('territories  ', 'territories '));
+  if (!want.free && !curFree) {
+    const have = new Map(cur.prices.map(x => [x.territory, x.pointId] as const));
+    const diff = want.prices.filter(x => have.has(x.territory) && have.get(x.territory) !== x.pointId).map(x => x.territory);
+    if (diff.length) out.push(`prices differ in ${diff.length} territor${diff.length === 1 ? 'y' : 'ies'} (${diff.slice(0, 5).join(',')}${diff.length > 5 ? ',...' : ''})`);
+  }
+  return out;
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
@@ -71,7 +91,13 @@ export async function run(ctx: Ctx): Promise<void> {
           log(TAG, `${describeReq(req)}: ${made.created ? 'done' : 'exists already'}`);
           if (made.created) active++;
         }
-      } else log(TAG, `${p.id}: campaign "${oc.name}" exists (${cur.attributes.active ? 'active' : 'inactive'}, ${cur.attributes.productionCodeCount ?? 0} production codes)`);
+      } else {
+        log(TAG, `${p.id}: campaign "${oc.name}" exists (${cur.attributes.active ? 'active' : 'inactive'}, ${cur.attributes.productionCodeCount ?? 0} production codes)`);
+        const curPrices = (await c.all(`/v1/inAppPurchaseOfferCodes/${cur.id}/prices?include=territory,pricePoint&limit=200`))
+          .map((x: J) => ({ territory: x.relationships?.territory?.data?.id as string, pointId: x.relationships?.pricePoint?.data?.id as string | undefined })).filter((x: { territory?: string }) => !!x.territory);
+        const diffs = campaignDiff({ eligibility: cur.attributes.customerEligibilities ?? [], prices: curPrices }, { eligibility: oc.eligibility, free: !!oc.free, prices: await prices(oc) });
+        if (diffs.length) warn(TAG, `${p.id}: campaign ${oc.name} differs from the config: ${diffs.join('; ')} (Apple does not allow editing: create a new campaign with another name)`);
+      }
       const haveCustom = new Set(cur ? (await c.all(`/v1/inAppPurchaseOfferCodes/${cur.id}/customCodes?limit=200`)).map((x: J) => x.attributes.customCode) : []);
       for (const cc of oc.customCodes ?? []) if (!haveCustom.has(cc.code)) codeReqs.push({ req: iapCustomCodeReq(id ?? '${new campaign}', cc), product: p.id, campaign: oc.name, oneTime: false });
       // one-time batches are not matched one by one: a batch is created when the campaign has fewer batches than configured
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index afcc0d5..fbb353f 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -103,6 +103,9 @@ export async function run(ctx: Ctx): Promise<void> {
   const langOf = byAppleLocale(config.languages);
   const locs = await c.all(`/v1/appStoreVersions/${version.id}/appStoreVersionLocalizations?limit=50`);
 
+  const noLoc = missingVersionLocales(config.languages, locs.map((l: J) => l.attributes.locale as string)).filter(l => !only.length || only.includes(l));
+  for (const l of noLoc) warn('apple', `${l}: in the config languages but the version has no localization (run apple listing first)`);
+
   const syncSet = (locId: string, sets: J[], type: string, files: string[], tag: string) =>
     syncScreenshotSet(c, { rel: 'appStoreVersionLocalization', type: 'appStoreVersionLocalizations', id: locId }, sets, type, files, tag, ctx.args.has('dry'));
 
@@ -168,3 +171,7 @@ async function repairStuck(ctx: Ctx, c: Asc, root: string, locs: J[], src: strin
   if (held) log('apple', `${held} screenshot(s) still processing (under 5 min): left alone; run validate again in a few minutes`);
   done('apple', total ? `${dry ? 'dry run: would replace' : 'replaced'} ${total} stuck screenshot(s)` : 'no stuck screenshots');
 }
+
+/** App Store locales of the config languages that the version has no localization for. Pure. */
+export const missingVersionLocales = (langs: { apple?: string }[], have: string[]): string[] =>
+  [...new Set(langs.flatMap(l => (l.apple ? [l.apple] : [])))].filter(l => !have.includes(l));
diff --git a/cli/apple/win-back.ts b/cli/apple/win-back.ts
index 9631dda..2ef5836 100644
--- a/cli/apple/win-back.ts
+++ b/cli/apple/win-back.ts
@@ -8,8 +8,8 @@
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
-import { type TerritoryPoint, validateWinBack, winBackBody } from '../lib/offers';
-import { allSubscriptions, applePoints, pickPoint } from '../lib/subscriptions';
+import { type TerritoryPoint, validateWinBack, type WinBackDef, winBackBody } from '../lib/offers';
+import { allSubscriptions, APPLE_OFFER_MODE, applePoints, pickPoint } from '../lib/subscriptions';
 import { textTable } from '../lib/table';
 import { pages } from '../prices';
 import { ascClient, type J } from './asc';
@@ -17,6 +17,17 @@ import { describeReq, execute, type Req } from './jsonapi';
 
 const TAG = 'win-back';
 
+/** Differences between an existing win-back offer and the config (mode, price, dates). No PATCH exists for them. `usaPrice` = the offer's USA customer price (undefined: not read, not compared). Pure. */
+export function winBackDiff(have: { offerMode?: string; startDate?: string | null; endDate?: string | null }, usaPrice: number | undefined, want: WinBackDef): string[] {
+  const out: string[] = [];
+  const mode = APPLE_OFFER_MODE[want.type];
+  if (have.offerMode && have.offerMode !== mode) out.push(`mode ${have.offerMode} -> ${mode}`);
+  if (want.type !== 'free' && usaPrice !== undefined && want.usd !== undefined && Math.abs(usaPrice - want.usd) > 0.005) out.push(`USA price ${usaPrice} -> ${want.usd}`);
+  if ((have.startDate ?? '').slice(0, 10) !== want.start) out.push(`start ${have.startDate ?? '(none)'} -> ${want.start}`);
+  if ((have.endDate ?? '').slice(0, 10) !== (want.end ?? '')) out.push(`end ${have.endDate ?? '(none)'} -> ${want.end ?? '(none)'}`);
+  return out;
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const a = ctx.args;
@@ -39,6 +50,21 @@ export async function run(ctx: Ctx): Promise<void> {
     if (!remote) { skipped.push({ id: s.id, why: 'not on App Store Connect (storebound apple subscriptions)' }); continue; }
     const existing = await c.all(`/v1/subscriptions/${remote.id}/winBackOffers?limit=200`);
     for (const o of existing) rows.push([s.id, o.attributes.offerId, o.attributes.offerMode, o.attributes.startDate ?? '', o.attributes.endDate ?? '', o.attributes.priority ?? '']);
+    for (const o of s.winBack!) {
+      const x = existing.find((e: J) => e.attributes.offerId === o.id);
+      if (!x) continue;
+      let usaPrice: number | undefined;
+      if (o.type !== 'free') {
+        const pr = await pages(c, `/v1/winBackOffers/${x.id}/prices?include=territory,subscriptionPricePoint&limit=200`);
+        const usa = pr.data.find((r: J) => r.relationships?.territory?.data?.id === 'USA');
+        const pid = usa?.relationships?.subscriptionPricePoint?.data?.id;
+        const inc = pid ? pr.included.find((i: J) => i.id === pid) : undefined;
+        const cp = Number(inc?.attributes?.customerPrice);
+        if (Number.isFinite(cp)) usaPrice = cp;
+      }
+      const diffs = winBackDiff(x.attributes, usaPrice, o);
+      if (diffs.length) warn(TAG, `${s.id}: win-back "${o.id}" differs from the config: ${diffs.join('; ')} (Apple does not allow editing: create a new offer with another id)`);
+    }
     const missing = s.winBack!.filter(o => !existing.some((x: J) => x.attributes.offerId === o.id));
     if (!missing.length) continue;
     if (remote.attributes.state !== 'APPROVED') { skipped.push({ id: s.id, why: `subscription is ${remote.attributes.state}: win-back offers need an approved subscription` }); continue; }
diff --git a/cli/lib/cpp-events.ts b/cli/lib/cpp-events.ts
index e85e6ad..630fca9 100644
--- a/cli/lib/cpp-events.ts
+++ b/cli/lib/cpp-events.ts
@@ -200,3 +200,41 @@ export const reviewItemReq = (submissionId: string, kind: 'appCustomProductPageV
   method: 'POST', path: '/v1/reviewSubmissionItems', note: label,
   body: { data: { type: 'reviewSubmissionItems', relationships: { reviewSubmission: one('reviewSubmissions', submissionId), [kind]: one(kind === 'appEvent' ? 'appEvents' : 'appCustomProductPageVersions', id) } } },
 });
+
+/** Event attributes that differ from the config: `attrs` = the PATCH attributes (empty when nothing differs), `lines` = readable. Pure. */
+export function eventAttrDiff(ev: AppEventDef, now: { badge?: string; priority?: string; purpose?: string; deepLink?: string | null; territorySchedules?: { territories?: string[]; publishStart?: string; eventStart?: string; eventEnd?: string }[] }): { attrs: Record<string, unknown>; lines: string[] } {
+  const attrs: Record<string, unknown> = {};
+  const lines: string[] = [];
+  const same = (a?: string, b?: string) => (a && b ? Date.parse(a) === Date.parse(b) : a === b);
+  if (now.badge !== undefined && now.badge !== ev.badge) { attrs.badge = ev.badge; lines.push(`badge ${now.badge} -> ${ev.badge}`); }
+  const pri = (ev.priority ?? 'normal').toUpperCase();
+  if (now.priority !== undefined && now.priority !== pri) { attrs.priority = pri; lines.push(`priority ${now.priority} -> ${pri}`); }
+  const purpose = ev.purpose ?? 'APPROPRIATE_FOR_ALL_USERS';
+  if (now.purpose !== undefined && now.purpose !== purpose) { attrs.purpose = purpose; lines.push(`purpose ${now.purpose} -> ${purpose}`); }
+  const s = now.territorySchedules?.[0];
+  const sch: string[] = [];
+  if (!same(s?.publishStart, ev.schedule.publishStart)) sch.push(`publishStart ${s?.publishStart ?? '(none)'} -> ${ev.schedule.publishStart}`);
+  if (!same(s?.eventStart, ev.schedule.eventStart)) sch.push(`eventStart ${s?.eventStart ?? '(none)'} -> ${ev.schedule.eventStart}`);
+  if (!same(s?.eventEnd, ev.schedule.eventEnd)) sch.push(`eventEnd ${s?.eventEnd ?? '(none)'} -> ${ev.schedule.eventEnd}`);
+  const wt = ev.schedule.territories;
+  if (wt && [...new Set(s?.territories ?? [])].sort().join() !== [...new Set(wt)].sort().join()) sch.push(`territories ${(s?.territories ?? []).length} -> ${wt.length}`);
+  if (sch.length) {
+    attrs.territorySchedules = [{ territories: wt ?? s?.territories ?? [], publishStart: ev.schedule.publishStart, eventStart: ev.schedule.eventStart, eventEnd: ev.schedule.eventEnd }];
+    lines.push(...sch);
+  }
+  return { attrs, lines };
+}
+
+/** PATCH /v1/appEvents/{id} with the changed attributes, null when none. */
+export const eventPatchReq = (eventId: string, name: string, attrs: Record<string, unknown>, lines: string[]): Req | null =>
+  Object.keys(attrs).length ? { method: 'PATCH', path: `/v1/appEvents/${eventId}`, note: `event "${name}": ${lines.join('; ')}`, body: { data: { type: 'appEvents', id: eventId, attributes: attrs } } } : null;
+
+/** PATCH of a page version's deep link: set, change, or clear (config has none, the page has one). Null when equal. Pure. */
+export function cppDeepLinkReq(versionId: string, name: string, want: string | undefined, have: string | null | undefined): Req | null {
+  if ((want ?? null) === (have ?? null)) return null;
+  return { method: 'PATCH', path: `/v1/appCustomProductPageVersions/${versionId}`, note: want ? `"${name}" deep link` : `"${name}" deep link removed`,
+    body: { data: { type: 'appCustomProductPageVersions', id: versionId, attributes: { deepLink: want ?? null } } } };
+}
+
+/** Locales on a page version that the config has no language for. Pure. */
+export const extraCppLocales = (have: string[], want: string[]): string[] => have.filter(l => !want.includes(l));
diff --git a/cli/play/data-safety.ts b/cli/play/data-safety.ts
index 7610e43..c95eef3 100644
--- a/cli/play/data-safety.ts
+++ b/cli/play/data-safety.ts
@@ -50,6 +50,10 @@ export function changeLines(changes: DataSafetyChange[]): string[] {
   return [...(acc.length ? ['  account and deletion answers:', ...acc.map(line)] : []), ...(rest.length ? ['  data types and other answers:', ...rest.map(line)] : [])];
 }
 
+/** The dry-run line about the state it compares with. Pure. */
+export const dataSafetyDryNote = (last: { at: string } | null): string =>
+  `Play has no read API for the Data safety form: this compares with the last upload from this project (${DATA_SAFETY_HASH} sha256${last ? `, uploaded ${last.at.slice(0, 16).replace('T', ' ')} UTC` : ', none recorded'}), not with the live form; --force re-sends the CSV`;
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const ds = need(config.dataSafety, 'dataSafety');
@@ -69,6 +73,7 @@ export async function run(ctx: Ctx): Promise<void> {
   if (ctx.args.has('dry')) {
     const upFile = join(root, DATA_SAFETY_UPLOADED);
     const before = existsSync(upFile) ? readFileSync(upFile, 'utf8') : null;
+    log('play', dataSafetyDryNote(last));
     const changes = dataSafetyDiff(before, rows);
     log('play', `changes against ${before ? `the last uploaded CSV (${DATA_SAFETY_UPLOADED}; Play cannot read the form back)` : 'nothing (no upload recorded: every answer is new)'}: ${changes.length} answer(s)`);
     for (const l of changeLines(changes)) console.log(l);
diff --git a/cli/play/listing.ts b/cli/play/listing.ts
index fc0ded4..f0dce56 100644
--- a/cli/play/listing.ts
+++ b/cli/play/listing.ts
@@ -171,7 +171,7 @@ export async function run(ctx: Ctx): Promise<void> {
       // a language Play does not have yet: its edit only commits with a hi-res icon (pitfall 102)
       if (!now.some(n => n.language === b.language)) {
         const graphics = firstGraphics(ctx, b.language!);
-        if (!graphics.some(([t]) => t === 'icon')) throw new Error(`${b.language}: a new Play language needs the 512x512 icon in the same edit (play.icon or store/icons/play-512.png): storebound icons makes it`);
+        if (!graphics.some(([t]) => t === 'icon')) warn('play', `${b.language}: no 512x512 icon to send with this new language (play.icon or store/icons/play-512.png; storebound icons makes it): Play may refuse the commit with 403 "no high resolution icon"`);
         for (const [type, f] of graphics) {
           await play.call('POST', `${play.UPLOAD}/edits/${id}/listings/${b.language}/${type}?uploadType=media`, new Uint8Array(readFileSync(f)), { 'Content-Type': /\.png$/i.test(f) ? 'image/png' : 'image/jpeg' });
           log('play', `${b.language}: ${type} uploaded with the new listing`);
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index 0a1e00d..756ebfc 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -23,6 +23,12 @@ const LISTS: Record<string, { type: string; one?: boolean }> = {
   'inAppPurchases/offerCodes': { type: 'inAppPurchaseOfferCodes' },
   'inAppPurchaseOfferCodes/customCodes': { type: 'inAppPurchaseOfferCodeCustomCodes' },
   'inAppPurchaseOfferCodes/oneTimeUseCodes': { type: 'inAppPurchaseOfferCodeOneTimeUseCodes' },
+  'inAppPurchaseOfferCodes/prices': { type: 'inAppPurchaseOfferPrices' },
+  'inAppPurchasePriceSchedules/manualPrices': { type: 'inAppPurchasePrices' },
+  'inAppPurchasePriceSchedules/baseTerritory': { type: 'territories', one: true },
+  'appPriceSchedules/manualPrices': { type: 'appPrices' },
+  'inAppPurchaseAvailabilities/availableTerritories': { type: 'territories' },
+  'winBackOffers/prices': { type: 'winBackOfferPrices' },
   'apps/appStoreVersions': { type: 'appStoreVersions' },
   'appStoreVersions/appStoreVersionLocalizations': { type: 'appStoreVersionLocalizations' },
   'appStoreVersions/appStoreReviewDetail': { type: 'appStoreReviewDetails', one: true },
@@ -259,6 +265,11 @@ export class FakeAsc {
       const self = this.res.get(id);
       if (!rel) return self && self.type === type ? json({ data: this.view(self) }) : json({ errors: [{ status: '404' }] }, 404);
       if (rel === 'relationships') return json({ data: this.children(id, rel2!).map(r => ({ type: r.type, id: r.id })) });
+      // an availability's territories are the ids its create named (a to-many relationship, not child resources)
+      if (rel === 'availableTerritories' && self) {
+        const ids = self.rels.availableTerritories;
+        return json({ data: (Array.isArray(ids) ? ids : ids ? [ids] : []).map(t => ({ type: 'territories', id: t })), links: {} });
+      }
       const l = LISTS[`${type}/${rel}`];
       if (!l) return json({ errors: [{ status: '599', detail: `fake: no list ${type}/${rel}` }] }, 599);
       const kids = this.filtered(this.children(id, l.type), u.searchParams);
diff --git a/tests/misc-drift.test.ts b/tests/misc-drift.test.ts
new file mode 100644
index 0000000..82cfe30
--- /dev/null
+++ b/tests/misc-drift.test.ts
@@ -0,0 +1,74 @@
+import { describe, expect, test } from 'bun:test';
+import { campaignDiff } from '../cli/apple/offer-codes';
+import { winBackDiff } from '../cli/apple/win-back';
+import { cppDeepLinkReq, type AppEventDef, eventAttrDiff, eventPatchReq, extraCppLocales } from '../cli/lib/cpp-events';
+import { missingVersionLocales } from '../cli/apple/screenshots';
+import { dataSafetyDryNote } from '../cli/play/data-safety';
+
+describe('offer code campaign drift', () => {
+  const cur = { eligibility: ['NON_SPENDER'], prices: [{ territory: 'USA', pointId: 'p1' }, { territory: 'DEU', pointId: 'p2' }] };
+  test('equal: no differences', () => {
+    expect(campaignDiff(cur, { eligibility: ['NON_SPENDER'], free: false, prices: cur.prices })).toEqual([]);
+  });
+  test('eligibility, territories, price and mode differ', () => {
+    const d = campaignDiff(cur, { eligibility: ['NON_SPENDER', 'CHURNED_SPENDER'], free: false, prices: [{ territory: 'USA', pointId: 'p9' }, { territory: 'FRA', pointId: 'p3' }] });
+    expect(d.join('|')).toContain('eligibility');
+    expect(d.join('|')).toContain('+1 (FRA)');
+    expect(d.join('|')).toContain('-1 (DEU)');
+    expect(d.join('|')).toContain('prices differ in 1 territory');
+    expect(campaignDiff(cur, { eligibility: ['NON_SPENDER'], free: true, prices: cur.prices }).join()).toContain('mode paid -> free');
+  });
+});
+
+describe('win-back drift', () => {
+  const want = { id: 'wb', type: 'pay-as-you-go', usd: 2.99, paidMonths: 3, lapsedMonths: { min: 1, max: 12 }, start: '2027-01-01', end: '2027-02-01' } as const;
+  test('equal', () => expect(winBackDiff({ offerMode: 'PAY_AS_YOU_GO', startDate: '2027-01-01', endDate: '2027-02-01' }, 2.99, want)).toEqual([]));
+  test('mode, price, dates', () => {
+    const d = winBackDiff({ offerMode: 'FREE_TRIAL', startDate: '2027-01-05', endDate: null }, 1.99, want);
+    expect(d.length).toBe(4);
+    expect(winBackDiff({ offerMode: 'PAY_AS_YOU_GO', startDate: '2027-01-01', endDate: '2027-02-01' }, undefined, want)).toEqual([]);
+  });
+});
+
+describe('event attribute drift', () => {
+  const ev: AppEventDef = { referenceName: 'Spring', badge: 'CHALLENGE', priority: 'high', schedule: { publishStart: '2027-03-01T00:00:00Z', eventStart: '2027-03-05T00:00:00Z', eventEnd: '2027-03-10T00:00:00Z' }, listings: {} };
+  const now = { badge: 'CHALLENGE', priority: 'HIGH', purpose: 'APPROPRIATE_FOR_ALL_USERS', territorySchedules: [{ territories: ['USA'], publishStart: '2027-03-01T00:00:00.000Z', eventStart: '2027-03-05T00:00:00.000Z', eventEnd: '2027-03-10T00:00:00.000Z' }] };
+  test('same instants in another format: no drift', () => {
+    const d = eventAttrDiff(ev, now);
+    expect(d.lines).toEqual([]);
+    expect(eventPatchReq('e1', 'Spring', d.attrs, d.lines)).toBeNull();
+  });
+  test('badge, priority and end differ: one PATCH', () => {
+    const d = eventAttrDiff({ ...ev, badge: 'MAJOR_UPDATE', priority: 'normal', schedule: { ...ev.schedule, eventEnd: '2027-03-12T00:00:00Z' } }, now);
+    expect(d.lines.length).toBe(3);
+    const r = eventPatchReq('e1', 'Spring', d.attrs, d.lines)!;
+    expect(r.method).toBe('PATCH');
+    expect(r.path).toBe('/v1/appEvents/e1');
+    expect((r.body as { data: { attributes: Record<string, unknown> } }).data.attributes.territorySchedules).toHaveLength(1);
+  });
+});
+
+describe('custom product page drift', () => {
+  test('deep link removed is cleared', () => {
+    const r = cppDeepLinkReq('v1', 'Page', undefined, 'example://old')!;
+    expect(r.note).toContain('removed');
+    expect((r.body as { data: { attributes: { deepLink: unknown } } }).data.attributes.deepLink).toBeNull();
+  });
+  test('equal or both empty: nothing', () => {
+    expect(cppDeepLinkReq('v1', 'Page', 'example://a', 'example://a')).toBeNull();
+    expect(cppDeepLinkReq('v1', 'Page', undefined, null)).toBeNull();
+  });
+  test('extra locales on the page', () => expect(extraCppLocales(['en-US', 'fr-FR'], ['en-US'])).toEqual(['fr-FR']));
+});
+
+describe('screenshots and data safety notes', () => {
+  test('version without a localization for a config language', () => {
+    expect(missingVersionLocales([{ apple: 'en-US' }, { apple: 'tr' }, {}], ['en-US'])).toEqual(['tr']);
+  });
+  test('data safety dry note says Play cannot be read and --force re-sends', () => {
+    const n = dataSafetyDryNote({ at: '2027-01-01T10:00:00Z' });
+    expect(n).toContain('no read API');
+    expect(n).toContain('--force');
+    expect(dataSafetyDryNote(null)).toContain('none recorded');
+  });
+});

From abc195aee60c43eef402833e463437339065b358 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 20:49:43 +0800
Subject: [PATCH 027/255] Subscriptions drift on both stores (Apple prices in
 the dry run, localizations, group names, attributes, territories, intro
 offers reported; Play offer phases and prices, other-regions price, dropped
 regions gated, grace period, --prune-languages); pitfall 104, CHANGELOG; test
 fixtures for the new reads

---
 CHANGELOG.md                      |  14 +++
 cli/apple/subscriptions.ts        | 122 +++++++++++++++++--
 cli/data/flags.json               |  28 +++--
 cli/lib/subscriptions.ts          | 189 ++++++++++++++++++++++++++++--
 cli/play/subscriptions.ts         |  97 ++++++++++-----
 skills/store-pitfalls/SKILL.md    |  14 +++
 tests/pitfalls.test.ts            |   5 +-
 tests/subscriptions-drift.test.ts | 148 +++++++++++++++++++++++
 8 files changed, 558 insertions(+), 59 deletions(-)
 create mode 100644 tests/subscriptions-drift.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d222a34..61b6a28 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,20 @@
 
 ## Unreleased
 
+- **Existing store items are compared with the config, field by field** (pitfall 104). The dry run shows every
+  difference (old -> new); texts are sent, money and availability need a flag, fields Apple cannot edit are named.
+  - `apple iap`: price (`--allow-price-changes`), localization names and descriptions, reference name, review note,
+    family sharing (reported), territories.
+  - `apple subscriptions`: prices in the dry run, localizations, group names, reference name, review note, level,
+    territories; intro offers, period and family sharing reported.
+  - `play subscriptions`: offer phases and prices, other-regions price, regions no longer sold (all price-gated),
+    grace period, languages missing from the config kept unless `--prune-languages`.
+  - `apple appinfo`: app price (`--allow-price-changes`) and territories (removals `--allow-availability-changes`);
+    `apple review-details --dry` shows old -> new.
+  - Offer-code and win-back campaigns that differ are named; in-app event attributes patched on drafts; a removed
+    custom page deep link cleared; config languages without a version localization named.
+- `prices diff` (the `catalog diff` report).
+
 - Windows: no false "entitlements not referenced by CODE_SIGN_ENTITLEMENTS" warning (paths compared with forward slashes). Pitfall 103.
 
 - **`storebound apps relink`** after a machine move: every "folder not found" entry of the app folder list is pointed at
diff --git a/cli/apple/subscriptions.ts b/cli/apple/subscriptions.ts
index b9250da..d892670 100644
--- a/cli/apple/subscriptions.ts
+++ b/cli/apple/subscriptions.ts
@@ -20,10 +20,11 @@ import { type OfferCodeDef, sellsOn, type Subscription, type SubscriptionGroup }
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, step, warn } from '../lib/log';
-import { allowPriceChanges, type HeldPrice, holdPriceChanges, withoutYes } from '../lib/price-gate';
+import { allowPriceChanges, type HeldPrice, heldSection, holdPriceChanges, withoutYes } from '../lib/price-gate';
 import { parsePriceCsv, type PriceRow } from '../lib/prices';
 import {
-  allSubscriptions, appleAvailabilityBody, appleCustomCodeBody, appleOfferCodeBody, applePromoOfferBody, appleGroupBody, appleGroupLocBody, appleIntroPatch, applePoints, applePriceChanges,
+  allSubscriptions, appleAvailabilityBody, appleAvailabilityDiff, appleGroupLocDiff, appleGroupLocPatchBody, appleIntroDiff, appleIntroOffers, appleLocDiff, appleLocPatchBody,
+  type AppleAttrDiff, appleSubAttrDiff, appleSubPatchBody, appleCustomCodeBody, appleOfferCodeBody, applePromoOfferBody, appleGroupBody, appleGroupLocBody, appleIntroPatch, applePoints, applePriceChanges,
   applePricesPatch, appleSubLocBody, appleSubPrices, appleSubscriptionBody, appleSubscriptionPlan, type AppleSubState, appleWantedPrices,
   type ApplePoint, pickPoint,
 } from '../lib/subscriptions';
@@ -69,6 +70,75 @@ async function readState(c: Asc, appId: string): Promise<AppleSubState> {
 const heldOf = (id: string, changes: { territory: string; from: number | null; to: number; startDate?: string | null }[]): HeldPrice =>
   ({ id, changes: changes.map(ch => ({ region: ch.territory, from: ch.from === null ? '-' : String(ch.from), to: `${ch.to}${ch.startDate ? ` from ${ch.startDate}` : ''}` })) });
 
+/** Everything an existing subscription has that differs from the config (pure data; the run prints and applies it). */
+export interface SubDrift {
+  attrs: AppleAttrDiff;
+  locs: { id: string; loc: string; patch: Record<string, string> }[];
+  availability: { missing: string[]; newTerritories: boolean } | null;
+  intro: string[];
+}
+
+/** Reads the live subscription (attributes, localizations, availability, introductory offers) and diffs it with the config. Read-only. */
+export async function readSubDrift(c: Asc, s: Subscription, id: string, locale: Map<string, string | undefined>, territories: string[]): Promise<SubDrift> {
+  const live = (await c.maybe(`/v1/subscriptions/${id}`))?.data?.attributes ?? {};
+  const attrs = appleSubAttrDiff(s, { name: live.name, subscriptionPeriod: live.subscriptionPeriod, familySharable: live.familySharable, reviewNote: live.reviewNote, groupLevel: live.groupLevel });
+  const locs: SubDrift['locs'] = [];
+  const haveLocs = await c.all(`/v1/subscriptions/${id}/subscriptionLocalizations?limit=200`);
+  for (const [lang, l] of Object.entries(s.listings)) {
+    const loc = locale.get(lang);
+    const h = loc ? haveLocs.find((x: J) => x.attributes.locale === loc) : undefined;
+    const patch = h ? appleLocDiff(l, { name: h.attributes.name, description: h.attributes.description }) : null;
+    if (h && patch && loc) locs.push({ id: h.id, loc, patch });
+  }
+  let availability: SubDrift['availability'] = null;
+  const av = (await c.maybe(`/v1/subscriptions/${id}/subscriptionAvailability`))?.data;
+  if (av?.id) {
+    let haveT: string[] | null = null;
+    try { haveT = (await c.all(`/v1/subscriptionAvailabilities/${av.id}/availableTerritories?limit=200`)).map((t: J) => t.id as string); } catch { /* unreadable: left alone */ }
+    if (haveT) availability = appleAvailabilityDiff({ territories: haveT, availableInNewTerritories: av.attributes?.availableInNewTerritories }, territories);
+  }
+  const hasIntro = !!(await c.asc('GET', `/v1/subscriptions/${id}/introductoryOffers?limit=1`)).data?.length;
+  const intro = hasIntro ? appleIntroDiff(s, appleIntroOffers(await pages(c, `/v1/subscriptions/${id}/introductoryOffers?include=subscriptionPricePoint,territory&limit=200`))) : [];
+  return { attrs, locs, availability, intro };
+}
+
+/** Group localizations whose name / customAppName differ from the config. Read-only. */
+export async function readGroupLocDrift(c: Asc, g: SubscriptionGroup, groupId: string, locale: Map<string, string | undefined>): Promise<{ id: string; loc: string; patch: Record<string, string> }[]> {
+  const have = await c.all(`/v1/subscriptionGroups/${groupId}/subscriptionGroupLocalizations?limit=200`);
+  const out: { id: string; loc: string; patch: Record<string, string> }[] = [];
+  for (const [lang, l] of Object.entries(g.listings)) {
+    const loc = locale.get(lang);
+    const h = loc ? have.find((x: J) => x.attributes.locale === loc) : undefined;
+    const patch = h ? appleGroupLocDiff(l, { name: h.attributes.name, customAppName: h.attributes.customAppName }) : null;
+    if (h && patch && loc) out.push({ id: h.id, loc, patch });
+  }
+  return out;
+}
+
+/** The lines the dry run prints for one subscription's drift. Pure. */
+export function driftLines(id: string, d: SubDrift): string[] {
+  const av = d.availability;
+  return [
+    ...d.attrs.text.map(x => `${id}: ${x}`), ...d.attrs.report,
+    ...d.locs.map(l => `${id} ${l.loc}: ${Object.keys(l.patch).join(' + ')} differ from the config`),
+    ...(av ? [`${id}: availability${av.missing.length ? ` ${av.missing.length} territories missing (${av.missing.slice(0, 5).join(', ')})` : ''}${av.newTerritories ? ' new territories off' : ''}`] : []),
+    ...d.intro,
+  ];
+}
+
+/** Today's prices vs the config for one existing subscription (read-only). */
+async function priceState(c: Asc, s: Subscription, id: string, cur: { hasPrices: boolean } | undefined, csv: PriceRow[]) {
+  const usaPoints = applePoints(await pages(c, `/v1/subscriptions/${id}/pricePoints?filter[territory]=USA&include=territory&limit=200`));
+  const usa = pickPoint(usaPoints, 'USA', s.usd);
+  const equalized = applePoints(await pages(c, `/v1/subscriptionPricePoints/${usa.id}/equalizations?include=territory&limit=200`));
+  const known: ApplePoint[] = [usa, ...equalized];
+  // a subscription the first read missed (list lag) is read live, so nothing is sent twice
+  const hasPrices = cur ? cur.hasPrices : !!(await c.asc('GET', `/v1/subscriptions/${id}/prices?limit=1`)).data?.length;
+  const current = hasPrices ? appleSubPrices(await pages(c, `/v1/subscriptions/${id}/prices?include=subscriptionPricePoint,territory&limit=200`)) : [];
+  const changes = applePriceChanges(current, appleWantedPrices(s, equalized, csv), csv.filter(r => r.product === s.id));
+  return { usaPoints, known, current, changes };
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const only = ctx.args.list('only');
@@ -83,7 +153,29 @@ export async function run(ctx: Ctx): Promise<void> {
   const state = await readState(c, appId);
   const plan = appleSubscriptionPlan(groups, config.languages, state);
   for (const [i, s] of plan.entries()) log(TAG, `${step(i + 1, plan.length, s.what)}`);
-  if (dry) { done(TAG, `subscriptions planned (dry run, nothing written; prices are compared per territory on a real run${csv.length ? `, ${csv.length} CSV rows` : ''})`); return; }
+  if (dry) {
+    // read-only comparison of everything that exists: text, attributes, availability, intro offers and prices (old -> new)
+    const locale = new Map(config.languages.map(l => [l.id, l.apple] as const));
+    const territories: string[] = (await c.all('/v1/territories?limit=200')).map((t: J) => t.id);
+    const heldDry: HeldPrice[] = [];
+    for (const g of groups) {
+      const sg = state.groups.find(x => x.referenceName === g.name);
+      if (sg) for (const d of await readGroupLocDrift(c, g, sg.id, locale)) log(TAG, `group "${g.name}" ${d.loc}: ${Object.keys(d.patch).join(' + ')} differ from the config`);
+      for (const s of g.subscriptions) {
+        const cur = state.subscriptions.find(x => x.productId === s.id);
+        if (!cur) continue;
+        for (const l of driftLines(s.id, await readSubDrift(c, s, cur.id, locale, territories))) log(TAG, l);
+        try {
+          const { changes } = await priceState(c, s, cur.id, cur, csv);
+          if (changes.length) { log(TAG, `${s.id}: ${changes.length} price change(s)`); heldDry.push(heldOf(s.id, changes)); }
+        } catch (e) { warn(TAG, `${s.id}: prices not compared (${String((e as Error).message ?? e).slice(0, 160)})`); }
+      }
+    }
+    const h = heldSection(heldDry, ctx.args.has('allow-price-changes'));
+    if (h) console.log(h);
+    done(TAG, `subscriptions planned (dry run, nothing written${csv.length ? `, ${csv.length} CSV rows` : ''})`);
+    return;
+  }
 
   const yes = ctx.args.has('yes');
   // price changes of existing subscriptions: only with --allow-price-changes, their own question per subscription
@@ -115,6 +207,12 @@ export async function run(ctx: Ctx): Promise<void> {
         create: async () => (await c.asc('POST', '/v1/subscriptionGroupLocalizations', appleGroupLocBody(groupId, loc, l))).data });
       log(TAG, `  group ${loc}`);
     }
+    if (state.groups.some(x => x.id === groupId)) {
+      for (const d of await readGroupLocDrift(c, g, groupId, locale)) {
+        await c.asc('PATCH', `/v1/subscriptionGroupLocalizations/${d.id}`, appleGroupLocPatchBody(d.id, d.patch));
+        log(TAG, `  group ${d.loc}: ${Object.keys(d.patch).join(' + ')} updated`);
+      }
+    }
     for (const [i, s] of g.subscriptions.entries()) {
       const tag = step(i + 1, g.subscriptions.length, s.id);
       const cur = state.subscriptions.find(x => x.productId === s.id);
@@ -139,16 +237,18 @@ export async function run(ctx: Ctx): Promise<void> {
         log(TAG, `  ${loc}`);
       }
       if (!cur?.availability && !(await c.maybe(`/v1/subscriptions/${id}/subscriptionAvailability`))?.data) { await c.asc('POST', '/v1/subscriptionAvailabilities', appleAvailabilityBody(id, territories)); log(TAG, `  available in ${territories.length} territories + new ones`); }
+      if (cur) {
+        // what exists but differs from the config: text and attributes are patched, availability is set again, intro offers
+        // and the period / family sharing are only reported (Apple cannot change them)
+        const d = await readSubDrift(c, s, subId, locale, territories);
+        if (Object.keys(d.attrs.patch).length) { await c.asc('PATCH', `/v1/subscriptions/${subId}`, appleSubPatchBody(subId, d.attrs.patch)); log(TAG, `  attributes updated: ${d.attrs.text.join(', ')}`); }
+        for (const l of d.locs) { await c.asc('PATCH', `/v1/subscriptionLocalizations/${l.id}`, appleLocPatchBody(l.id, l.patch)); log(TAG, `  ${l.loc}: ${Object.keys(l.patch).join(' + ')} updated`); }
+        if (d.availability) { await c.asc('POST', '/v1/subscriptionAvailabilities', appleAvailabilityBody(subId, territories)); log(TAG, `  availability set again: ${territories.length} territories + new ones`); }
+        for (const x of [...d.attrs.report, ...d.intro]) warn(TAG, x);
+      }
 
       // prices: USA point -> equalizations -> overrides / CSV; only what differs from today's prices
-      const usaPoints = applePoints(await pages(c, `/v1/subscriptions/${id}/pricePoints?filter[territory]=USA&include=territory&limit=200`));
-      const usa = pickPoint(usaPoints, 'USA', s.usd);
-      const equalized = applePoints(await pages(c, `/v1/subscriptionPricePoints/${usa.id}/equalizations?include=territory&limit=200`));
-      const known: ApplePoint[] = [usa, ...equalized];
-      // a subscription the first read missed (list lag) is read live, so nothing is sent twice
-      const hasPrices = cur ? cur.hasPrices : !!(await c.asc('GET', `/v1/subscriptions/${id}/prices?limit=1`)).data?.length;
-      const current = hasPrices ? appleSubPrices(await pages(c, `/v1/subscriptions/${id}/prices?include=subscriptionPricePoint,territory&limit=200`)) : [];
-      const changes = applePriceChanges(current, appleWantedPrices(s, equalized, csv), csv.filter(r => r.product === s.id));
+      const { usaPoints, known, current, changes } = await priceState(c, s, id, cur, csv);
       if (!changes.length) log(TAG, '  prices up to date');
       else if (current.length && !(await allowPriceChanges(ctx, [heldOf(s.id, changes)], `Change the prices of the existing subscription ${s.id} on App Store Connect (${changes.length} territories)? New subscribers pay the new price.`))) {
         log(TAG, '  owner: price change of an existing subscription (--allow-price-changes)');
diff --git a/cli/data/flags.json b/cli/data/flags.json
index fe63096..f581df0 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -61,7 +61,10 @@
    "plist",
    "udid"
   ],
-  "apple appinfo": [],
+  "apple appinfo": [
+   "allow-availability-changes",
+   "allow-price-changes"
+  ],
   "apple build": [
    "allow-ssh",
    "allow-stale-web",
@@ -403,6 +406,8 @@
    "write"
   ],
   "check": [
+   "allow-availability-changes",
+   "allow-price-changes",
    "aso",
    "capacitor",
    "cordova",
@@ -420,6 +425,8 @@
    "unity"
   ],
   "console fill": [
+   "allow-availability-changes",
+   "allow-price-changes",
    "capacitor",
    "cdp",
    "chrome-profile",
@@ -441,6 +448,8 @@
   ],
   "console plan": [
    "all",
+   "allow-availability-changes",
+   "allow-price-changes",
    "capacitor",
    "cdp",
    "chrome-profile",
@@ -464,6 +473,8 @@
    "use-chrome-session"
   ],
   "console verify": [
+   "allow-availability-changes",
+   "allow-price-changes",
    "capacitor",
    "cordova",
    "cordova-android",
@@ -605,6 +616,8 @@
    "threshold"
   ],
   "play app-id": [
+   "allow-availability-changes",
+   "allow-price-changes",
    "capacitor",
    "cdp",
    "chrome-profile",
@@ -710,6 +723,7 @@
    "offline",
    "only-decreases",
    "out",
+   "prune-languages",
    "reconvert",
    "source",
    "store",
@@ -780,6 +794,8 @@
    "workspace"
   ],
   "report": [
+   "allow-availability-changes",
+   "allow-price-changes",
    "capacitor",
    "cordova",
    "cordova-android",
@@ -985,6 +1001,7 @@
    "agent",
    "all",
    "all-pages",
+   "allow-availability-changes",
    "allow-existing",
    "allow-price-changes",
    "allow-ssh",
@@ -1146,6 +1163,7 @@
    "project",
    "propose",
    "prune",
+   "prune-languages",
    "q",
    "rating",
    "react-native",
@@ -1263,7 +1281,7 @@
    "storebound apple adhoc export --archive <App.xcarchive> [--plist build/ExportOptions.plist] [--out build/adhoc] [--dry]"
   ],
   "apple appinfo": [
-   "storebound apple appinfo [--dry] [--json]"
+   "storebound apple appinfo [--dry] [--json] [--allow-price-changes] [--allow-availability-changes]"
   ],
   "apple build": [
    "storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]"
@@ -1311,9 +1329,6 @@
   "apple next-build": [
    "storebound apple next-build            -> 42"
   ],
-  "apple offer-codes": [
-   "storebound apple offer-codes [--only id1,id2] [--codes] [--dry] [--yes] [--json]"
-  ],
   "apple ppo": [
    "storebound apple ppo status [--json]",
    "storebound apple ppo create --variant b[,c] [--name \"...\"] [--traffic 30] [--dry]",
@@ -1338,9 +1353,6 @@
   "apple resubmit": [
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]"
   ],
-  "apple review-details": [
-   "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
-  ],
   "apple screenshots": [
    "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
    "storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)"
diff --git a/cli/lib/subscriptions.ts b/cli/lib/subscriptions.ts
index 70ac790..08ffdec 100644
--- a/cli/lib/subscriptions.ts
+++ b/cli/lib/subscriptions.ts
@@ -297,6 +297,92 @@ export function applePriceChanges(current: { territory: string; price: number; s
   return out;
 }
 
+// ---- Apple: what exists vs the config (drift) ----
+
+export interface AppleSubAttrs { name?: string; subscriptionPeriod?: string; familySharable?: boolean; reviewNote?: string | null; groupLevel?: number }
+/** `patch` = attributes PATCH /v1/subscriptions/{id} can change, `text` = lines for those, `report` = differences Apple cannot change. */
+export interface AppleAttrDiff { patch: Record<string, string | number>; text: string[]; report: string[] }
+
+/** Subscription attributes on App Store Connect vs the config. Name (reference name), review note and group level are
+ *  patched; the period and family sharing cannot change after creation and are only reported. An attribute the read
+ *  did not return is left alone. Pure. */
+export function appleSubAttrDiff(s: Subscription, cur: AppleSubAttrs): AppleAttrDiff {
+  const out: AppleAttrDiff = { patch: {}, text: [], report: [] };
+  const want = APPLE_PERIOD[s.period];
+  if (cur.subscriptionPeriod !== undefined && cur.subscriptionPeriod !== want) out.report.push(`${s.id}: period is ${cur.subscriptionPeriod} on App Store Connect, the config says ${want} (a period cannot change; use a new product id)`);
+  const fam = s.familySharable ?? false;
+  if (cur.familySharable !== undefined && cur.familySharable !== fam) out.report.push(`${s.id}: familySharable is ${cur.familySharable} on App Store Connect, the config says ${fam} (cannot be changed through the API)`);
+  const name = s.referenceName ?? Object.values(s.listings)[0]?.title;
+  if (name !== undefined && cur.name !== undefined && cur.name !== name) { out.patch.name = name; out.text.push(`reference name "${cur.name}" -> "${name}"`); }
+  if (s.reviewNote !== undefined && cur.reviewNote !== undefined && (cur.reviewNote ?? '') !== s.reviewNote) { out.patch.reviewNote = s.reviewNote; out.text.push('review note changed'); }
+  if (cur.groupLevel !== undefined && cur.groupLevel !== s.level) { out.patch.groupLevel = s.level; out.text.push(`level ${cur.groupLevel} -> ${s.level}`); }
+  return out;
+}
+
+export const appleSubPatchBody = (subId: string, attributes: Record<string, string | number>) => ({ data: { type: 'subscriptions', id: subId, attributes } });
+
+/** Subscription localization text vs the config: the attributes to PATCH, or null when equal (or not returned). Pure. */
+export function appleLocDiff(want: { title: string; description: string }, cur: { name?: string; description?: string }): Record<string, string> | null {
+  const patch: Record<string, string> = {};
+  if (cur.name !== undefined && cur.name !== want.title) patch.name = want.title;
+  if (cur.description !== undefined && cur.description !== want.description) patch.description = want.description;
+  return Object.keys(patch).length ? patch : null;
+}
+export const appleLocPatchBody = (locId: string, attributes: Record<string, string>) => ({ data: { type: 'subscriptionLocalizations', id: locId, attributes } });
+
+/** Subscription group localization (name, customAppName when configured) vs the config. Pure. */
+export function appleGroupLocDiff(want: { name: string; customAppName?: string }, cur: { name?: string; customAppName?: string | null }): Record<string, string> | null {
+  const patch: Record<string, string> = {};
+  if (cur.name !== undefined && cur.name !== want.name) patch.name = want.name;
+  if (want.customAppName !== undefined && (cur.customAppName ?? '') !== want.customAppName) patch.customAppName = want.customAppName;
+  return Object.keys(patch).length ? patch : null;
+}
+export const appleGroupLocPatchBody = (locId: string, attributes: Record<string, string>) => ({ data: { type: 'subscriptionGroupLocalizations', id: locId, attributes } });
+
+/** Subscription availability vs "every territory + new ones": territories missing, availableInNewTerritories off. null = same. Pure. */
+export function appleAvailabilityDiff(cur: { territories: string[]; availableInNewTerritories?: boolean }, wanted: string[]): { missing: string[]; newTerritories: boolean } | null {
+  const have = new Set(cur.territories);
+  const missing = wanted.filter(t => !have.has(t));
+  const newTerritories = cur.availableInNewTerritories === false;
+  return missing.length || newTerritories ? { missing, newTerritories } : null;
+}
+
+export interface AppleIntroOffer { territory: string; mode?: string; duration?: string; periods?: number; price?: number }
+
+/** GET /v1/subscriptions/{id}/introductoryOffers?include=subscriptionPricePoint,territory -> offers per territory. */
+export function appleIntroOffers(resp: JsonApi): AppleIntroOffer[] {
+  const points = new Map((resp.included ?? []).filter(x => x.type === 'subscriptionPricePoints').map(x => [x.id, Number(x.attributes?.customerPrice)] as const));
+  return (resp.data ?? []).map(o => {
+    const pid = o.relationships?.subscriptionPricePoint?.data?.id;
+    const price = pid ? points.get(pid) : undefined;
+    return {
+      territory: o.relationships?.territory?.data?.id ?? '', mode: o.attributes?.offerMode as string | undefined, duration: o.attributes?.duration as string | undefined,
+      periods: o.attributes?.numberOfPeriods as number | undefined, ...(price !== undefined && !Number.isNaN(price) ? { price } : {}),
+    };
+  });
+}
+
+/** Introductory offers on App Store Connect vs the config (Apple cannot PATCH them: report only), as `intro differs: ...`
+ *  lines. A subscription without any offer yet is created by the run, not a difference. Pure. */
+export function appleIntroDiff(s: Subscription, cur: AppleIntroOffer[]): string[] {
+  if (!cur.length) return [];
+  if (!s.intro) return [`intro differs: ${s.id} has an introductory offer on App Store Connect, the config has none`];
+  const o = s.intro;
+  const out: string[] = [];
+  const distinct = <T>(f: (x: AppleIntroOffer) => T | undefined): T[] => [...new Set(cur.map(f).filter((x): x is T => x !== undefined))];
+  const check = (what: string, have: (string | number)[], want: string | number) => {
+    if (have.some(h => h !== want)) out.push(`intro differs: ${s.id} ${what} ${have.join('/')} on App Store Connect, ${want} in the config`);
+  };
+  check('mode', distinct(x => x.mode), APPLE_OFFER_MODE[o.type]);
+  check('duration', distinct(x => x.duration), APPLE_OFFER_DURATION[introDuration(s)] ?? introDuration(s));
+  check('periods', distinct(x => x.periods), o.type === 'pay-as-you-go' ? o.periods ?? 1 : 1);
+  if (o.type !== 'free' && o.usd !== undefined) {
+    const usa = cur.find(x => x.territory === 'USA')?.price;
+    if (usa !== undefined && cents(usa) !== cents(o.usd)) out.push(`intro differs: ${s.id} price USA ${usa} on App Store Connect, ${o.usd} in the config`);
+  }
+  return out;
+}
+
 // ---- Apple: plan ----
 
 export interface AppleSubState {
@@ -430,10 +516,20 @@ export function playOfferBody(pkg: string, s: Subscription, regions: PlayRegionP
 
 const moneyKey = (m?: Money): string => (m ? `${m.currencyCode} ${cents(fromMoney(m))}` : '-');
 
-export interface PlaySubDiff { create: boolean; listings: string[]; basePlan: 'new' | 'same' | 'changed'; priceChanges: { regionCode: string; from: string; to: string }[]; activate: boolean }
+export interface PlaySubDiff {
+  create: boolean; listings: string[]; basePlan: 'new' | 'same' | 'changed'; priceChanges: { regionCode: string; from: string; to: string }[]; activate: boolean;
+  /** Languages on Play that the config does not list (a PATCH drops them only with --prune-languages). Set only when there are some. */
+  listingsRemoved?: string[];
+  /** Grace period on Play vs the config. Set only when it differs. */
+  grace?: { from: string; to: string };
+  /** Regions sold on Play that the config no longer lists (also one "not sold" row in priceChanges, owner-gated). */
+  droppedRegions?: string[];
+}
 
 /** Current Play subscription (or null) vs the wanted body: what a patch would change. Price changes on an existing
- *  base plan apply to new subscribers; existing ones keep their price until you run a price migration in the Console. */
+ *  base plan apply to new subscribers; existing ones keep their price until you run a price migration in the Console.
+ *  Money (regional prices, the other-regions USD / EUR price, regions no longer sold) all land in `priceChanges`, so
+ *  the price gate holds them; text (listings, grace period) is its own field. */
 export function playSubDiff(cur: PlaySubscription | null, want: PlaySubscription): PlaySubDiff {
   const wb = want.basePlans![0]!;
   if (!cur) return { create: true, listings: (want.listings ?? []).map(l => l.languageCode), basePlan: 'new', priceChanges: [], activate: true };
@@ -442,25 +538,100 @@ export function playSubDiff(cur: PlaySubscription | null, want: PlaySubscription
     const c = curL.get(l.languageCode);
     return !c || c.title !== l.title || (c.description ?? '') !== (l.description ?? '') || JSON.stringify(c.benefits ?? []) !== JSON.stringify(l.benefits ?? []);
   }).map(l => l.languageCode);
+  const wantCodes = new Set((want.listings ?? []).map(l => l.languageCode));
+  const removed = [...curL.keys()].filter(c => !wantCodes.has(c));
+  const extras = removed.length ? { listingsRemoved: removed } : {};
   const cb = cur.basePlans?.find(b => b.basePlanId === wb.basePlanId);
-  if (!cb) return { create: false, listings, basePlan: 'new', priceChanges: [], activate: true };
+  if (!cb) return { create: false, listings, basePlan: 'new', priceChanges: [], activate: true, ...extras };
   const cr = new Map((cb.regionalConfigs ?? []).map(r => [r.regionCode, r.price] as const));
   const priceChanges = (wb.regionalConfigs ?? []).filter(r => moneyKey(cr.get(r.regionCode)) !== moneyKey(r.price))
     .map(r => ({ regionCode: r.regionCode, from: moneyKey(cr.get(r.regionCode)), to: moneyKey(r.price) }));
-  const typeSame = cb.autoRenewingBasePlanType?.billingPeriodDuration === wb.autoRenewingBasePlanType?.billingPeriodDuration
-    && (cb.autoRenewingBasePlanType?.gracePeriodDuration ?? '') === (wb.autoRenewingBasePlanType?.gracePeriodDuration ?? cb.autoRenewingBasePlanType?.gracePeriodDuration ?? '');
+  const wantRegions = new Set((wb.regionalConfigs ?? []).map(r => r.regionCode));
+  const gone = [...cr.keys()].filter(c => !wantRegions.has(c));
+  for (const c of gone) priceChanges.push({ regionCode: c, from: moneyKey(cr.get(c)), to: 'not sold' });
+  const co = cb.otherRegionsConfig, wo = wb.otherRegionsConfig;
+  if (wo && (moneyKey(co?.usdPrice) !== moneyKey(wo.usdPrice) || moneyKey(co?.eurPrice) !== moneyKey(wo.eurPrice)))
+    priceChanges.push({ regionCode: 'other regions', from: `${moneyKey(co?.usdPrice)} / ${moneyKey(co?.eurPrice)}`, to: `${moneyKey(wo.usdPrice)} / ${moneyKey(wo.eurPrice)}` });
+  const curGrace = cb.autoRenewingBasePlanType?.gracePeriodDuration ?? '';
+  const wantGrace = wb.autoRenewingBasePlanType?.gracePeriodDuration ?? '';
+  // a config without a grace period leaves the one on Play alone
+  const graceChanged = wantGrace !== '' && wantGrace !== curGrace;
   if (cb.autoRenewingBasePlanType && cb.autoRenewingBasePlanType.billingPeriodDuration !== wb.autoRenewingBasePlanType?.billingPeriodDuration)
     throw new Error(`${want.productId}: base plan ${wb.basePlanId} bills every ${cb.autoRenewingBasePlanType.billingPeriodDuration} on Play, the config says ${wb.autoRenewingBasePlanType?.billingPeriodDuration} (a billing period cannot change; use a new basePlanId)`);
-  return { create: false, listings, basePlan: priceChanges.length || !typeSame ? 'changed' : 'same', priceChanges, activate: cb.state !== 'ACTIVE' };
+  return {
+    create: false, listings, basePlan: priceChanges.length || graceChanged ? 'changed' : 'same', priceChanges, activate: cb.state !== 'ACTIVE', ...extras,
+    ...(graceChanged ? { grace: { from: curGrace || '-', to: wantGrace } } : {}), ...(gone.length ? { droppedRegions: gone } : {}),
+  };
 }
 
-/** The patch body keeps base plans the config does not manage (Play would otherwise drop them) and output-only fields out. */
-export function playPatchSubscription(cur: PlaySubscription, want: PlaySubscription): PlaySubscription {
+/** The patch body keeps base plans the config does not manage (Play would otherwise drop them) and output-only fields out.
+ *  Languages on Play that the config does not list stay in the body unless `pruneLanguages`. */
+export function playPatchSubscription(cur: PlaySubscription, want: PlaySubscription, o: { pruneLanguages?: boolean } = {}): PlaySubscription {
   const wb = want.basePlans![0]!;
   const keep = (cur.basePlans ?? []).filter(b => b.basePlanId !== wb.basePlanId).map(({ state: _s, ...b }) => b);
   const curMine = cur.basePlans?.find(b => b.basePlanId === wb.basePlanId);
   const { state: _st, ...mine } = { ...(curMine ?? {}), ...wb, autoRenewingBasePlanType: { ...(curMine?.autoRenewingBasePlanType ?? {}), ...wb.autoRenewingBasePlanType! } };
-  return { ...want, basePlans: [...keep, mine as NonNullable<PlaySubscription['basePlans']>[number]] };
+  const wantCodes = new Set((want.listings ?? []).map(l => l.languageCode));
+  const kept = o.pruneLanguages ? [] : (cur.listings ?? []).filter(l => !wantCodes.has(l.languageCode));
+  return { ...want, ...(kept.length ? { listings: [...(want.listings ?? []), ...kept] } : {}), basePlans: [...keep, mine as NonNullable<PlaySubscription['basePlans']>[number]] };
+}
+
+/** The text side of a Play subscription diff (no money; empty = nothing). Pure. */
+export function playSubTextChanges(d: PlaySubDiff, prune = false): string[] {
+  return [
+    d.listings.length ? `listings ${d.listings.join(', ')}` : '',
+    d.listingsRemoved?.length ? (prune ? `listings removed: ${d.listingsRemoved.join(', ')}` : `listings removed from the config: ${d.listingsRemoved.join(', ')} (kept on Play; --prune-languages removes them)`) : '',
+    d.grace ? `grace ${d.grace.from} -> ${d.grace.to}` : '',
+  ].filter(Boolean);
+}
+
+// ---- Play: offers already on the base plan ----
+
+export interface PlayOfferLike {
+  offerId?: string; state?: string;
+  phases?: { recurrenceCount?: number; duration?: string; regionalConfigs?: { regionCode: string; free?: unknown; relativeDiscount?: number; absoluteDiscount?: Money; price?: Money }[];
+    otherRegionsConfig?: { free?: unknown; relativeDiscount?: number; absoluteDiscount?: unknown; otherRegionsPrices?: { usdPrice?: Money; eurPrice?: Money } } }[];
+  [k: string]: unknown;
+}
+
+type Entry = Record<string, unknown> | undefined;
+/** "free", "-50%", "-USD 100" or "USD 299": the kind (free / discount / price) and the shown value of one phase entry. */
+function phaseEntry(c: Entry): { kind: string; text: string } {
+  if (!c) return { kind: '-', text: '-' };
+  if (c.free !== undefined) return { kind: 'free', text: 'free' };
+  if (typeof c.relativeDiscount === 'number') return { kind: 'discount', text: `-${Math.round(c.relativeDiscount * 100)}%` };
+  if (c.absoluteDiscount) return { kind: 'absolute', text: `-${moneyKey(c.absoluteDiscount as Money)}` };
+  if (c.price) return { kind: 'price', text: moneyKey(c.price as Money) };
+  const o = c.otherRegionsPrices as { usdPrice?: Money; eurPrice?: Money } | undefined;
+  if (o) return { kind: 'price', text: `${moneyKey(o.usdPrice)} / ${moneyKey(o.eurPrice)}` };
+  return { kind: '-', text: '-' };
+}
+
+export interface PlayOfferDrift { phase: string[]; prices: { region: string; from: string; to: string }[] }
+
+/** Offer on Play vs the offer the config would create: `phase` = free / paid kind, duration, periods (text), `prices` =
+ *  per region the discount, price or other-regions price (money: only behind the price gate). Pure. */
+export function playOfferDiff(cur: PlayOfferLike, want: PlayOfferLike): PlayOfferDrift {
+  const out: PlayOfferDrift = { phase: [], prices: [] };
+  const cp = cur.phases ?? [], wp = want.phases ?? [];
+  if (cp.length !== wp.length) out.phase.push(`${cp.length} phase(s) -> ${wp.length}`);
+  for (const [i, w] of wp.entries()) {
+    const c = cp[i];
+    if (!c) continue;
+    const at = wp.length > 1 ? `phase ${i + 1} ` : '';
+    if ((c.duration ?? '') !== (w.duration ?? '')) out.phase.push(`${at}duration ${c.duration ?? '-'} -> ${w.duration ?? '-'}`);
+    if ((c.recurrenceCount ?? 1) !== (w.recurrenceCount ?? 1)) out.phase.push(`${at}periods ${c.recurrenceCount ?? 1} -> ${w.recurrenceCount ?? 1}`);
+    const cm = new Map((c.regionalConfigs ?? []).map(r => [r.regionCode, r as Entry] as const));
+    const rows: [string, Entry, Entry][] = (w.regionalConfigs ?? []).map(r => [r.regionCode, cm.get(r.regionCode), r as Entry]);
+    rows.push(['other regions', c.otherRegionsConfig as Entry, w.otherRegionsConfig as Entry]);
+    for (const [region, cc, wc] of rows) {
+      const a = phaseEntry(cc), b = phaseEntry(wc);
+      if (a.text === b.text) continue;
+      if (a.kind !== b.kind && a.kind !== '-') out.phase.push(`${at}${region} ${a.text} -> ${b.text}`);
+      else out.prices.push({ region, from: a.text, to: b.text });
+    }
+  }
+  return out;
 }
 
 // ---- Apple: reading responses ----
diff --git a/cli/play/subscriptions.ts b/cli/play/subscriptions.ts
index 65f7d85..ab037b0 100644
--- a/cli/play/subscriptions.ts
+++ b/cli/play/subscriptions.ts
@@ -20,8 +20,8 @@ import { done, log, step, warn } from '../lib/log';
 import { allowPriceChanges, type HeldPrice, heldSection, holdPriceChanges } from '../lib/price-gate';
 import { type Money, toMoney } from '../lib/money';
 import {
-  allSubscriptions, basePlanId, offerId, playOfferBody, playPatchSubscription, type PlaySubscription, playSubDiff, playSubRegions,
-  playSubscriptionBody,
+  allSubscriptions, basePlanId, offerId, type PlayOfferLike, playOfferBody, playOfferDiff, playPatchSubscription, type PlaySubscription, playSubDiff, playSubRegions,
+  playSubscriptionBody, playSubTextChanges,
 } from '../lib/subscriptions';
 import { subscriptionCsv } from '../apple/subscriptions';
 import { createOnce } from '../lib/upsert';
@@ -58,7 +58,19 @@ export async function run(ctx: Ctx): Promise<void> {
     return { convertedRegionPrices: conv.convertedRegionPrices, convertedOtherRegionsPrice: conv.convertedOtherRegionsPrice, regionVersion: conv.regionVersion ?? { version: '2022/02' } };
   };
 
-  const work: { s: typeof subs[number]; body: PlaySubscription; diff: ReturnType<typeof playSubDiff>; version: string; offerMissing: boolean; extraMissing: string[] }[] = [];
+  const prune = ctx.args.has('prune-languages');
+  // the offer the config would create (pay-up-front prices come from convertRegionPrices of the offer price)
+  const buildOffer = async (s: typeof subs[number], regions: { regionCode: string; price: Money }[], o: { type: string; usd?: number }, extra?: NonNullable<typeof s.offers>[number]) => {
+    let offerRegions;
+    if (o.type === 'pay-up-front') {
+      const oc = await convert(o.usd!);
+      offerRegions = { regions: Object.values(oc.convertedRegionPrices).map(r => ({ regionCode: r.regionCode, price: r.price })), other: oc.convertedOtherRegionsPrice };
+    }
+    return playOfferBody(pkg, s, regions, offerRegions, extra);
+  };
+
+  interface OfferDrift { offerId: string; phase: string[]; prices: HeldPrice['changes']; body: ReturnType<typeof playOfferBody> }
+  const work: { s: typeof subs[number]; body: PlaySubscription; diff: ReturnType<typeof playSubDiff>; version: string; offerMissing: boolean; extraMissing: string[]; offerDrift: OfferDrift[] }[] = [];
   for (const [i, s] of subs.entries()) {
     const conv = await convert(s.usd);
     const regions = playSubRegions(s, conv.convertedRegionPrices, csv);
@@ -67,42 +79,63 @@ export async function run(ctx: Ctx): Promise<void> {
     const diff = playSubDiff(cur, body);
     let offerMissing = !!s.intro;
     let extraMissing = (s.offers ?? []).map(o => o.id);
+    const offerDrift: OfferDrift[] = [];
     if ((s.intro || s.offers?.length) && cur?.basePlans?.some(b => b.basePlanId === basePlanId(s))) {
-      const offers = await play.call<{ subscriptionOffers?: { offerId: string }[] }>('GET', `${play.API}/subscriptions/${encodeURIComponent(s.id)}/basePlans/${basePlanId(s)}/offers`);
-      const have = new Set((offers.subscriptionOffers ?? []).map(o => o.offerId));
-      offerMissing = !!s.intro && !have.has(offerId(s));
-      extraMissing = extraMissing.filter(x => !have.has(x));
+      const offers = await play.call<{ subscriptionOffers?: PlayOfferLike[] }>('GET', `${play.API}/subscriptions/${encodeURIComponent(s.id)}/basePlans/${basePlanId(s)}/offers`);
+      const haveOffers = new Map((offers.subscriptionOffers ?? []).map(o => [o.offerId ?? '', o] as const));
+      offerMissing = !!s.intro && !haveOffers.has(offerId(s));
+      extraMissing = extraMissing.filter(x => !haveOffers.has(x));
+      // offers that exist: phases (free / paid, duration, periods) and prices per region vs what the config would create
+      const regionPrices = body.basePlans![0]!.regionalConfigs!.map(r => ({ regionCode: r.regionCode, price: r.price! }));
+      const check: [string, { type: string; usd?: number }, NonNullable<typeof s.offers>[number] | undefined][] = [];
+      if (s.intro && haveOffers.has(offerId(s))) check.push([offerId(s), s.intro, undefined]);
+      for (const o of s.offers ?? []) if (haveOffers.has(o.id)) check.push([o.id, o, o]);
+      for (const [oid, o, extra] of check) {
+        const want = await buildOffer(s, regionPrices, o, extra);
+        const d = playOfferDiff(haveOffers.get(oid)!, want as unknown as PlayOfferLike);
+        if (d.phase.length || d.prices.length) offerDrift.push({ offerId: oid, phase: d.phase, prices: d.prices, body: want });
+      }
     }
+    const text = playSubTextChanges(diff, prune);
     const what = diff.create ? `create, base plan ${basePlanId(s)} (${s.period}) in ${regions.length} regions`
-      : [diff.listings.length ? `listings ${diff.listings.join(', ')}` : '', diff.basePlan === 'new' ? `new base plan ${basePlanId(s)}` : diff.basePlan === 'changed' ? `base plan ${basePlanId(s)}: ${diff.priceChanges.length} regional price change(s)` : '',
-        diff.activate ? 'activate base plan' : ''].filter(Boolean).join(' · ') || 'up to date';
+      : [...text.filter(x => !x.startsWith('grace')), diff.basePlan === 'new' ? `new base plan ${basePlanId(s)}` : diff.basePlan === 'changed' && diff.priceChanges.length ? `base plan ${basePlanId(s)}: ${diff.priceChanges.length} regional price change(s)` : '',
+        ...text.filter(x => x.startsWith('grace')), diff.activate ? 'activate base plan' : ''].filter(Boolean).join(' · ') || 'up to date';
     log(TAG, `${step(i + 1, subs.length, s.id)}: ${what}${offerMissing ? ` · intro offer ${offerId(s)} (${s.intro!.type})` : ''}${extraMissing.length ? ` · offers ${extraMissing.join(', ')}` : ''}`);
     if (diff.priceChanges.length) log(TAG, '    owner: price change of an existing base plan (--allow-price-changes)');
     for (const p of diff.priceChanges.slice(0, 5)) log(TAG, `    ${p.regionCode}: ${p.from} -> ${p.to}`);
     if (diff.priceChanges.length > 5) log(TAG, `    ... ${diff.priceChanges.length - 5} more`);
-    work.push({ s, body, diff, version: conv.regionVersion.version, offerMissing, extraMissing });
+    for (const d of offerDrift) {
+      log(TAG, `    offer ${d.offerId} differs${d.phase.length ? `: ${d.phase.join('; ')}` : ''}${d.prices.length ? ` · ${d.prices.length} price(s), owner (--allow-price-changes)` : ''}`);
+      for (const p of d.prices.slice(0, 5)) log(TAG, `      ${p.region}: ${p.from} -> ${p.to}`);
+    }
+    work.push({ s, body, diff, version: conv.regionVersion.version, offerMissing, extraMissing, offerDrift });
   }
+  // money held behind --allow-price-changes: base plan prices (incl. other regions and regions dropped) and offer prices
+  const moneyOf = (w: typeof work[number]): HeldPrice[] => [
+    ...(w.diff.basePlan === 'changed' && w.diff.priceChanges.length ? [{ id: w.s.id, changes: w.diff.priceChanges.map(p => ({ region: p.regionCode, from: p.from, to: p.to })) }] : []),
+    ...w.offerDrift.filter(d => d.prices.length).map(d => ({ id: `${w.s.id} offer ${d.offerId}`, changes: d.prices })),
+  ];
   if (dry) {
-    const h = heldSection(work.filter(w => w.diff.basePlan === 'changed' && w.diff.priceChanges.length).map(w => ({ id: w.s.id, changes: w.diff.priceChanges.map(p => ({ region: p.regionCode, from: p.from, to: p.to })) })), ctx.args.has('allow-price-changes'));
+    const h = heldSection(work.flatMap(moneyOf), ctx.args.has('allow-price-changes'));
     if (h) console.log(h);
     done(TAG, 'subscriptions planned (dry run, nothing written)'); return;
   }
-  const todo = work.filter(w => w.diff.create || w.diff.listings.length || w.diff.basePlan !== 'same' || w.diff.activate || w.offerMissing || w.extraMissing.length);
+  const todo = work.filter(w => w.diff.create || w.diff.listings.length || w.diff.basePlan !== 'same' || w.diff.activate || w.offerMissing || w.extraMissing.length || w.offerDrift.length || (prune && w.diff.listingsRemoved?.length));
   if (!todo.length) { done(TAG, 'subscriptions up to date'); return; }
 
   const yes = ctx.args.has('yes');
-  const priced = todo.filter(w => w.diff.basePlan === 'changed' && w.diff.priceChanges.length);
+  const priced = todo.filter(w => moneyOf(w).length);
   // the terminal question covers creates and other updates; price changes of existing base plans need
   // --allow-price-changes and their own question listing each old -> new (lib/price-gate.ts)
   if (stdinIsTTY() && !yes && process.env.STOREBOUND_SERVE !== '1') {
     if (!(await confirm(ctx, `Write ${todo.length} subscription(s) to Google Play? Activated base plans and offers can be bought as soon as the app is published. Price changes of existing base plans are not part of this answer (--allow-price-changes).`))) return;
   }
-  const liveOk = await allowPriceChanges(ctx, priced.map(w => ({ id: w.s.id, changes: w.diff.priceChanges.map(p => ({ region: p.regionCode, from: p.from, to: p.to })) })),
-    `Change the base plan prices of ${priced.length} existing subscription(s) on Google Play? New subscribers pay the new price.`);
-  if (!liveOk && priced.length) log(TAG, 'writing what is new; price changes of existing base plans wait for the owner (--allow-price-changes)');
+  const liveOk = await allowPriceChanges(ctx, priced.flatMap(moneyOf),
+    `Change the prices (base plan, other regions, regions sold, offers) of ${priced.length} existing subscription(s) on Google Play? New subscribers pay the new price.`);
+  if (!liveOk && priced.length) log(TAG, 'writing what is new; price changes of existing base plans and offers wait for the owner (--allow-price-changes)');
   const held: HeldPrice[] = [];
 
-  for (const { s, body, diff, version, offerMissing, extraMissing } of todo) {
+  for (const { s, body, diff, version, offerMissing, extraMissing, offerDrift } of todo) {
     const v = encodeURIComponent(version);
     const id = encodeURIComponent(s.id);
     const cur = existing.get(s.id);
@@ -113,16 +146,19 @@ export async function run(ctx: Ctx): Promise<void> {
         create: () => play.call<PlaySubscription>('POST', `${play.API}/subscriptions?productId=${id}&regionsVersion.version=${v}`, body) });
       log(TAG, `${s.id}: ${r.created ? 'created' : 'exists already (made by an earlier run); run again to compare it with the config'}`);
       if (!r.created) continue;
-    } else if (diff.listings.length || diff.basePlan !== 'same') {
+    } else if (diff.listings.length || diff.basePlan !== 'same' || (prune && diff.listingsRemoved?.length)) {
+      const pruneLanguages = prune;
       if (diff.basePlan === 'changed' && diff.priceChanges.length && !liveOk) {
         held.push({ id: s.id, changes: diff.priceChanges.map(p => ({ region: p.regionCode, from: p.from, to: p.to })) });
-        if (diff.listings.length) {
-          // the listings only; the base plans as Play has them
-          await play.call('PATCH', `${play.API}/subscriptions/${id}?updateMask=listings&regionsVersion.version=${v}`, { ...playPatchSubscription(cur!, body), basePlans: cur!.basePlans?.map(({ state: _s, ...b }) => b) });
-          log(TAG, `${s.id}: listings updated (prices unchanged)`);
+        if (diff.listings.length || diff.grace || (prune && diff.listingsRemoved?.length)) {
+          // the text only (listings, grace period); the base plans as Play has them
+          const plans = cur!.basePlans?.map(({ state: _s, ...b }) => (diff.grace && b.basePlanId === basePlanId(s)
+            ? { ...b, autoRenewingBasePlanType: { ...b.autoRenewingBasePlanType!, gracePeriodDuration: diff.grace.to } } : b));
+          await play.call('PATCH', `${play.API}/subscriptions/${id}?updateMask=listings${diff.grace ? ',basePlans' : ''}&regionsVersion.version=${v}`, { ...playPatchSubscription(cur!, body, { pruneLanguages }), basePlans: plans });
+          log(TAG, `${s.id}: ${playSubTextChanges(diff, prune).join(' · ')} updated (prices unchanged)`);
         }
       } else {
-        await play.call('PATCH', `${play.API}/subscriptions/${id}?updateMask=listings,basePlans&regionsVersion.version=${v}`, playPatchSubscription(cur!, body));
+        await play.call('PATCH', `${play.API}/subscriptions/${id}?updateMask=listings,basePlans&regionsVersion.version=${v}`, playPatchSubscription(cur!, body, { pruneLanguages }));
         log(TAG, `${s.id}: updated`);
       }
     }
@@ -131,14 +167,9 @@ export async function run(ctx: Ctx): Promise<void> {
       log(TAG, `${s.id}: base plan ${basePlanId(s)} activated`);
     }
     const regions = body.basePlans![0]!.regionalConfigs!.map(r => ({ regionCode: r.regionCode, price: r.price! }));
+    const offerUrl = `${play.API}/subscriptions/${id}/basePlans/${basePlanId(s)}/offers`;
     const createOffer = async (o: { type: string; usd?: number }, extra?: NonNullable<typeof s.offers>[number]) => {
-      let offerRegions;
-      if (o.type === 'pay-up-front') {
-        const oc = await convert(o.usd!);
-        offerRegions = { regions: Object.values(oc.convertedRegionPrices).map(r => ({ regionCode: r.regionCode, price: r.price })), other: oc.convertedOtherRegionsPrice };
-      }
-      const ob = playOfferBody(pkg, s, regions, offerRegions, extra);
-      const offerUrl = `${play.API}/subscriptions/${id}/basePlans/${basePlanId(s)}/offers`;
+      const ob = await buildOffer(s, regions, o, extra);
       // offer ids are unique per base plan: a 409 or an unclear answer finds the existing offer, never a second one
       const r = await createOnce({ what: `${s.id} offer ${ob.offerId}`, tag: TAG, unique: true,
         find: () => getOrNull<{ state?: string }>(play, `${offerUrl}/${encodeURIComponent(ob.offerId)}`),
@@ -149,6 +180,12 @@ export async function run(ctx: Ctx): Promise<void> {
     };
     if (s.intro && offerMissing) await createOffer(s.intro);
     for (const o of (s.offers ?? []).filter(x => extraMissing.includes(x.id))) await createOffer(o, o);
+    // offers that exist but differ: phases (text) are updated; their prices only behind the price gate
+    for (const d of offerDrift) {
+      if (d.prices.length && !liveOk) { held.push({ id: `${s.id} offer ${d.offerId}`, changes: d.prices }); continue; }
+      await play.call('PATCH', `${offerUrl}/${encodeURIComponent(d.offerId)}?updateMask=phases&regionsVersion.version=${v}`, d.body);
+      log(TAG, `${s.id}: offer ${d.offerId} updated (${[...d.phase, ...(d.prices.length ? [`${d.prices.length} price(s)`] : [])].join('; ')})`);
+    }
   }
   holdPriceChanges(held);
   done(TAG, held.length ? 'subscriptions done, price changes left for the owner' : 'subscriptions done');
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 6f89dc2..c44253a 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1251,3 +1251,17 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Do:** update storebound; the warning was false.
 - **Guard:** `readProjectEntitlements` in `cli/apple/signing.ts` compares forward-slash paths on every OS
   (`tests/entitlements-ref.test.ts`).
+
+## 104. An existing store item differs from the config and the run said nothing
+- **Symptom:** `apple iap --yes` updated only missing localizations of live consumables while the config's USD prices
+  (12.99 / 129.99 / 649.99) differed from the store (9.99 / 99.99 / 500.00); the dry run showed no price, and changed
+  names and descriptions were never sent. An audit found the same class in 24 places (subscriptions, offers, app
+  price and availability, events, custom pages, review details).
+- **Cause:** existing items were checked for existence only, not compared field by field.
+- **Do:** read the dry run: every difference of an existing item is a row (old -> new). Text changes are sent;
+  prices, dropped regions and removed territories need `--allow-price-changes` / `--allow-availability-changes`
+  (the owner's call); fields Apple cannot edit (family sharing on, offer-code and win-back campaigns, intro offers,
+  subscription period) are named, never changed.
+- **Guard:** `iapLocalizationChanges` / `iapAttributeChanges` / `availabilityChange` (`cli/apple/iap.ts`), the
+  subscription helpers in `cli/lib/subscriptions.ts`, `planAppInfo` / `reviewDetailDiff`, `campaignDiff`,
+  `winBackDiff`, `eventAttrDiff`; tests `apple-iap-drift`, `subscriptions-drift`, `appinfo-drift`, `misc-drift`.
diff --git a/tests/pitfalls.test.ts b/tests/pitfalls.test.ts
index 1d2ba3e..a75c6c6 100644
--- a/tests/pitfalls.test.ts
+++ b/tests/pitfalls.test.ts
@@ -66,7 +66,10 @@ describe('store list lag after create', () => {
       { match: new RegExp(`^/v1/apps/6400000101/inAppPurchasesV2\\?filter\\[productId\\]=${GEMS}`), answer: page([]) },
       { match: /^\/v2\/inAppPurchases\/i-pro\/inAppPurchaseLocalizations/, answer: page([]) },
       { match: /^\/v2\/inAppPurchases\/i-pro\/iapPriceSchedule/, answer: notFound() },
-      { match: /^\/v2\/inAppPurchases\/i-pro\/inAppPurchaseAvailability/, answer: { data: { type: 'inAppPurchaseAvailabilities', id: 'av' } } },
+      { match: /^\/v2\/inAppPurchases\/i-pro\/inAppPurchaseAvailability/, answer: { data: { type: 'inAppPurchaseAvailabilities', id: 'av', attributes: { availableInNewTerritories: true } } } },
+      { match: /^\/v1\/inAppPurchaseAvailabilities\/av\/availableTerritories/, answer: page([{ type: 'territories', id: 'USA' }, { type: 'territories', id: 'TUR' }]) },
+      // the product as the store has it: the same reference name as the config, so only localizations and prices change
+      { match: /^\/v2\/inAppPurchases\/i-pro(\?|$)/, answer: { data: { type: 'inAppPurchases', id: 'i-pro', attributes: { productId: PRO, name: 'No Ads', familySharable: false, state: 'MISSING_METADATA' } } } },
     ]);
     const r = await capture(() => iap(p.ctx(['--dry'])));
     expect(r.out).toContain('dry run: apple iap: 2 change(s); nothing written');
diff --git a/tests/subscriptions-drift.test.ts b/tests/subscriptions-drift.test.ts
new file mode 100644
index 0000000..0145cb2
--- /dev/null
+++ b/tests/subscriptions-drift.test.ts
@@ -0,0 +1,148 @@
+// Existing subscription items that differ from the config are shown in the dry run and updated (text) or held behind the
+// price gate (money). Pure helpers of cli/lib/subscriptions.ts with neutral data.
+import { describe, expect, test } from 'bun:test';
+import type { Subscription } from '../cli/lib/config';
+import { toMoney } from '../cli/lib/money';
+import {
+  appleAvailabilityDiff, appleGroupLocDiff, appleIntroDiff, appleIntroOffers, appleLocDiff, appleSubAttrDiff, appleSubscriptionBody,
+  type PlayOfferLike, playOfferBody, playOfferDiff, playPatchSubscription, type PlaySubscription, playSubDiff, playSubRegions, playSubscriptionBody, playSubTextChanges,
+} from '../cli/lib/subscriptions';
+
+const LANGS = [{ id: 'en', apple: 'en-US', play: 'en-US' }, { id: 'de', apple: 'de-DE', play: 'de-DE' }] as never;
+const s: Subscription = {
+  id: 'com.example.app.pro_monthly', period: 'P1M', level: 1, usd: 4.99, gracePeriod: 'P7D', familySharable: false, reviewNote: 'Sign in with the demo account',
+  listings: { en: { title: 'Pro', description: 'All features', benefits: ['A'] }, de: { title: 'Pro', description: 'Alle Funktionen' } },
+  intro: { type: 'free', duration: 'P1W' },
+};
+const conv = { US: { regionCode: 'US', price: toMoney('USD', 4.99) }, TR: { regionCode: 'TR', price: toMoney('TRY', 99.99) } };
+const other = { usdPrice: toMoney('USD', 4.99), eurPrice: toMoney('EUR', 4.99) };
+const want = (): PlaySubscription => playSubscriptionBody('com.example.app', s, LANGS, playSubRegions(s, conv), other);
+const live = (): PlaySubscription => { const c = JSON.parse(JSON.stringify(want())) as PlaySubscription; c.basePlans![0]!.state = 'ACTIVE'; return c; };
+
+describe('apple subscription attributes', () => {
+  const ok = { name: 'Pro', subscriptionPeriod: 'ONE_MONTH', familySharable: false, reviewNote: 'Sign in with the demo account', groupLevel: 1 };
+  test('equal: nothing', () => {
+    expect(appleSubAttrDiff(s, ok)).toEqual({ patch: {}, text: [], report: [] });
+    expect(appleSubAttrDiff(s, {})).toEqual({ patch: {}, text: [], report: [] });
+  });
+  test('name, review note and level are patched; period and family sharing only reported', () => {
+    const d = appleSubAttrDiff(s, { ...ok, name: 'Old', reviewNote: null, groupLevel: 2, subscriptionPeriod: 'ONE_YEAR', familySharable: true });
+    expect(d.patch).toEqual({ name: 'Pro', reviewNote: 'Sign in with the demo account', groupLevel: 1 });
+    expect(d.report.length).toBe(2);
+    expect(d.report[0]).toContain('ONE_YEAR');
+    expect(d.report[1]).toContain('familySharable');
+    expect(Object.keys(appleSubscriptionBody('g', s).data.attributes)).toContain('reviewNote');
+  });
+  test('a config without referenceName compares with the first listing title', () => {
+    expect(appleSubAttrDiff(s, { name: 'Pro' }).patch).toEqual({});
+    expect(appleSubAttrDiff({ ...s, referenceName: 'Pro monthly' }, { name: 'Pro' }).patch).toEqual({ name: 'Pro monthly' });
+  });
+});
+
+describe('apple localizations', () => {
+  test('subscription text', () => {
+    expect(appleLocDiff({ title: 'Pro', description: 'All features' }, { name: 'Pro', description: 'All features' })).toBeNull();
+    expect(appleLocDiff({ title: 'Pro', description: 'All features' }, { name: 'Pro', description: 'Old' })).toEqual({ description: 'All features' });
+    expect(appleLocDiff({ title: 'Pro', description: 'x' }, {})).toBeNull();
+  });
+  test('group name and customAppName (only when configured)', () => {
+    expect(appleGroupLocDiff({ name: 'Pro' }, { name: 'Pro', customAppName: 'Anything' })).toBeNull();
+    expect(appleGroupLocDiff({ name: 'Pro', customAppName: 'Example' }, { name: 'Old', customAppName: null })).toEqual({ name: 'Pro', customAppName: 'Example' });
+  });
+});
+
+describe('apple availability', () => {
+  test('missing territories and new territories off', () => {
+    expect(appleAvailabilityDiff({ territories: ['USA', 'TUR'], availableInNewTerritories: true }, ['USA', 'TUR'])).toBeNull();
+    expect(appleAvailabilityDiff({ territories: ['USA'], availableInNewTerritories: true }, ['USA', 'TUR', 'DEU'])).toEqual({ missing: ['TUR', 'DEU'], newTerritories: false });
+    expect(appleAvailabilityDiff({ territories: ['USA'], availableInNewTerritories: false }, ['USA'])).toEqual({ missing: [], newTerritories: true });
+  });
+});
+
+describe('apple intro offers', () => {
+  const resp = (mode: string, duration: string, periods: number, price?: string) => ({
+    data: [{ id: 'i1', attributes: { offerMode: mode, duration, numberOfPeriods: periods },
+      relationships: { territory: { data: { id: 'USA' } }, ...(price ? { subscriptionPricePoint: { data: { id: 'pp1' } } } : {}) } }],
+    included: price ? [{ id: 'pp1', type: 'subscriptionPricePoints', attributes: { customerPrice: price } }] : [],
+  });
+  test('equal or no offer yet: nothing', () => {
+    expect(appleIntroDiff(s, appleIntroOffers(resp('FREE_TRIAL', 'ONE_WEEK', 1)))).toEqual([]);
+    expect(appleIntroDiff(s, [])).toEqual([]);
+  });
+  test('differences are reported as "intro differs"', () => {
+    const d = appleIntroDiff(s, appleIntroOffers(resp('PAY_UP_FRONT', 'ONE_MONTH', 1)));
+    expect(d.length).toBe(2);
+    expect(d.every(x => x.startsWith('intro differs: '))).toBe(true);
+    const paid: Subscription = { ...s, intro: { type: 'pay-as-you-go', periods: 3, usd: 1.99 } };
+    expect(appleIntroDiff(paid, appleIntroOffers(resp('PAY_AS_YOU_GO', 'ONE_MONTH', 3, '0.99')))).toEqual([expect.stringContaining('price USA 0.99')]);
+    expect(appleIntroDiff({ ...s, intro: undefined }, appleIntroOffers(resp('FREE_TRIAL', 'ONE_WEEK', 1)))[0]).toContain('config has none');
+  });
+});
+
+describe('play subscription diff', () => {
+  test('equal: the old shape, no extra fields', () => {
+    expect(playSubDiff(live(), want())).toEqual({ create: false, listings: [], basePlan: 'same', priceChanges: [], activate: false });
+  });
+  test('other regions USD / EUR price is a gated price change', () => {
+    const cur = live();
+    cur.basePlans![0]!.otherRegionsConfig = { usdPrice: toMoney('USD', 3.99), eurPrice: toMoney('EUR', 4.99) };
+    const d = playSubDiff(cur, want());
+    expect(d.basePlan).toBe('changed');
+    expect(d.priceChanges).toEqual([{ regionCode: 'other regions', from: 'USD 399 / EUR 499', to: 'USD 499 / EUR 499' }]);
+  });
+  test('a region sold on Play but not in the config is an owner-gated "not sold" row', () => {
+    const cur = live();
+    cur.basePlans![0]!.regionalConfigs!.push({ regionCode: 'JP', newSubscriberAvailability: true, price: toMoney('JPY', 750) });
+    const d = playSubDiff(cur, want());
+    expect(d.droppedRegions).toEqual(['JP']);
+    expect(d.priceChanges).toEqual([{ regionCode: 'JP', from: 'JPY 75000', to: 'not sold' }]);
+    expect(d.basePlan).toBe('changed');
+  });
+  test('grace period is its own line and needs no price gate', () => {
+    const cur = live();
+    cur.basePlans![0]!.autoRenewingBasePlanType!.gracePeriodDuration = 'P3D';
+    const d = playSubDiff(cur, want());
+    expect(d.grace).toEqual({ from: 'P3D', to: 'P7D' });
+    expect(d.priceChanges).toEqual([]);
+    expect(playSubTextChanges(d)).toEqual(['grace P3D -> P7D']);
+    // a config without a grace period leaves Play's alone
+    const noGrace = want();
+    delete noGrace.basePlans![0]!.autoRenewingBasePlanType!.gracePeriodDuration;
+    expect(playSubDiff(cur, noGrace).grace).toBeUndefined();
+  });
+  test('languages on Play but not in the config are reported and kept unless pruned', () => {
+    const cur = live();
+    cur.listings!.push({ languageCode: 'fr-FR', title: 'Pro', description: 'Tout' });
+    const d = playSubDiff(cur, want());
+    expect(d.listingsRemoved).toEqual(['fr-FR']);
+    expect(d.listings).toEqual([]);
+    expect(playSubTextChanges(d, true)).toEqual(['listings removed: fr-FR']);
+    expect(playSubTextChanges(d)[0]).toContain('kept on Play');
+    expect(playPatchSubscription(cur, want()).listings!.map(l => l.languageCode)).toContain('fr-FR');
+    expect(playPatchSubscription(cur, want(), { pruneLanguages: true }).listings!.map(l => l.languageCode)).not.toContain('fr-FR');
+  });
+});
+
+describe('play offers that exist', () => {
+  const regions = [{ regionCode: 'US', price: toMoney('USD', 4.99) }, { regionCode: 'TR', price: toMoney('TRY', 99.99) }];
+  const body = (sub: Subscription) => playOfferBody('com.example.app', sub, regions) as unknown as PlayOfferLike;
+  test('equal: nothing', () => {
+    expect(playOfferDiff(JSON.parse(JSON.stringify(body(s))), body(s))).toEqual({ phase: [], prices: [] });
+  });
+  test('duration and periods are phase (text) changes', () => {
+    const cur = body({ ...s, intro: { type: 'free', duration: 'P1M' } });
+    const d = playOfferDiff(cur, body(s));
+    expect(d.phase).toEqual(['duration P1M -> P1W']);
+    expect(d.prices).toEqual([]);
+  });
+  test('free to discounted is a phase change, a new discount percentage is money', () => {
+    const payg: Subscription = { ...s, intro: { type: 'pay-as-you-go', periods: 2, usd: 2.49 } };
+    const cur = body(s);
+    const d = playOfferDiff(cur, body(payg));
+    expect(d.phase.some(x => x.includes('free -> -50%'))).toBe(true);
+    expect(d.phase.some(x => x.startsWith('periods 1 -> 2'))).toBe(true);
+    const cheaper = playOfferDiff(body(payg), body({ ...payg, intro: { type: 'pay-as-you-go', periods: 2, usd: 1.99 } }));
+    expect(cheaper.phase).toEqual([]);
+    expect(cheaper.prices.map(p => `${p.region} ${p.from} -> ${p.to}`)).toContain('US -50% -> -60%');
+  });
+});

From e77f2b68f573c01cafa18e411d80a03c3fe93ada Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 19:51:07 +0700
Subject: [PATCH 028/255] storebound 0.8.29: version in package.json and every
 copy, CHANGELOG 0.8.29 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 7000a74..010f08d 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.28",
+      "version": "0.8.29",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 7535e7a..6b3d13b 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.28",
+  "version": "0.8.29",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index e0abd17..2a01cf5 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.28",
+  "version": "0.8.29",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c5f90f7..6b71f5c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.8.29 · 2026-10-22
+
 - **Existing store items are compared with the config, field by field** (pitfall 104). The dry run shows every
   difference (old -> new); texts are sent, money and availability need a flag, fields Apple cannot edit are named.
   - `apple iap`: price (`--allow-price-changes`), localization names and descriptions, reference name, review note,
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 4ed3263..e942f78 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.28",
+  "version": "0.8.29",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 4dc267b..a701c60 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.28"
+version = "0.8.29"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1ad40b3..a015e93 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.28"
+version = "0.8.29"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 33afde1..de6c1e0 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.28",
+  "version": "0.8.29",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 90ed811..b878a45 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.28",
+  "version": "0.8.29",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index e3dcb1f..d3e6370 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.28",
+  "version": "0.8.29",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 27db41c3f0ad3d39cc8274f85944c1e2a35e4a3f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 21:24:24 +0800
Subject: [PATCH 029/255] Desktop portfolio v2: greeting with what is moving,
 store-style app cards (rendered screenshots or the icon on its tint),
 two-store release pipeline, crash sparkline, one next-step button; What
 changed feed and Fix first queue; Cards / Table switch keeps the old table

---
 apps/desktop/src/i18n/en.ts            |  47 ++++
 apps/desktop/src/i18n/tr.ts            |  47 ++++
 apps/desktop/src/screens/Portfolio.tsx | 369 ++++++++++++++++++++++---
 apps/desktop/src/styles.css            |  91 ++++++
 4 files changed, 519 insertions(+), 35 deletions(-)

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 9e21009..c400f03 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -1865,4 +1865,51 @@ export const en = {
   'gs.syncHint': 'Dry run first, then you confirm; nothing is submitted or published.',
   'gs.synced': 'Game services in step',
   'gs.setup': 'Setup plan',
+  'pf.morning': "Good morning.",
+  'pf.afternoon': "Good afternoon.",
+  'pf.evening': "Good evening.",
+  'pf.moving': "{count} releases are moving",
+  'pf.moving_one': "1 release is moving",
+  'pf.movingNone': "Nothing is moving right now",
+  'pf.notMovingUnknown': "Read the stores to see what is moving",
+  'pf.readAgo': "stores read {when}",
+  'pf.layout': "Layout",
+  'pf.cards': "Cards",
+  'pf.table': "Table",
+  'pf.next': "next",
+  'pf.crash': "crash",
+  'pf.ctaFix': "Fix {count} blockers",
+  'pf.ctaFix_one': "Fix 1 blocker",
+  'pf.ctaRollout': "Roll out (now {share})",
+  'pf.ctaRelease': "Release {version}",
+  'pf.ctaSubmit': "Submit {version}",
+  'pf.ctaReview': "Follow review of {version}",
+  'pf.ctaWarnings': "Look at {count} warnings",
+  'pf.ctaWarnings_one': "Look at 1 warning",
+  'pf.ctaUpload': "Upload a build",
+  'pf.ctaOpen': "Open releases",
+  'pf.feed': "What changed",
+  'pf.feedSub': "Releases, health and folders, newest first",
+  'pf.feedEmpty': "Nothing changed yet",
+  'pf.feedEmptyText': "Read the stores to see releases and health here.",
+  'pf.evLive': "{version} is live on {store}",
+  'pf.evRollout': "{version} is rolling out to {share} on {store}",
+  'pf.evReview': "{version} went into review on {store}",
+  'pf.evApproved': "{version} was approved on {store}",
+  'pf.evRejected': "{version} was rejected on {store}",
+  'pf.evHalted': "{version} rollout halted on {store}",
+  'pf.evTesting': "{version} is in testing on {store}",
+  'pf.evDraft': "{version} draft on {store}",
+  'pf.evCrash': "crash rate {rate} on Google Play",
+  'pf.evAdded': "folder added to the workspace",
+  'pf.more': "Show {count} more",
+  'pf.less': "Show less",
+  'pf.fixFirst': "Fix first",
+  'pf.fixFirstSub': "{count} items, blockers first",
+  'pf.fixFirstSub_one': "1 item",
+  'pf.blocker': "Blocker",
+  'pf.warning': "Warning",
+  'pf.note': "Note",
+  'pf.fixIn': "Fix in {tab}",
+  'pf.openTab': "Open {tab}",
 } as const;
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 79f399c..afc278c 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -1867,4 +1867,51 @@ export const tr: Record<keyof typeof en, string> = {
   'gs.syncHint': 'Önce deneme çalıştırması, sonra sen onaylarsın; hiçbir şey gönderilmez ya da yayınlanmaz.',
   'gs.synced': 'Oyun hizmetleri eşit',
   'gs.setup': 'Kurulum planı',
+  'pf.morning': "Günaydın.",
+  'pf.afternoon': "İyi günler.",
+  'pf.evening': "İyi akşamlar.",
+  'pf.moving': "{count} sürüm ilerliyor",
+  'pf.moving_one': "1 sürüm ilerliyor",
+  'pf.movingNone': "Şu an ilerleyen sürüm yok",
+  'pf.notMovingUnknown': "Neyin ilerlediğini görmek için mağazaları oku",
+  'pf.readAgo': "mağazalar {when} okundu",
+  'pf.layout': "Görünüm",
+  'pf.cards': "Kartlar",
+  'pf.table': "Tablo",
+  'pf.next': "sıradaki",
+  'pf.crash': "çökme",
+  'pf.ctaFix': "{count} engeli düzelt",
+  'pf.ctaFix_one': "1 engeli düzelt",
+  'pf.ctaRollout': "Dağıtımı sürdür (şu an {share})",
+  'pf.ctaRelease': "{version} sürümünü yayınla",
+  'pf.ctaSubmit': "{version} sürümünü gönder",
+  'pf.ctaReview': "{version} incelemesini izle",
+  'pf.ctaWarnings': "{count} uyarıya bak",
+  'pf.ctaWarnings_one': "1 uyarıya bak",
+  'pf.ctaUpload': "Derleme yükle",
+  'pf.ctaOpen': "Sürümleri aç",
+  'pf.feed': "Neler değişti",
+  'pf.feedSub': "Sürümler, sağlık ve klasörler, en yenisi üstte",
+  'pf.feedEmpty': "Henüz değişiklik yok",
+  'pf.feedEmptyText': "Sürümleri ve sağlığı burada görmek için mağazaları oku.",
+  'pf.evLive': "{version}, {store} üzerinde yayında",
+  'pf.evRollout': "{version}, {store} üzerinde {share} kullanıcıya dağıtılıyor",
+  'pf.evReview': "{version}, {store} incelemesine girdi",
+  'pf.evApproved': "{version}, {store} tarafından onaylandı",
+  'pf.evRejected': "{version}, {store} tarafından reddedildi",
+  'pf.evHalted': "{version} dağıtımı {store} üzerinde durduruldu",
+  'pf.evTesting': "{version}, {store} üzerinde testte",
+  'pf.evDraft': "{version}, {store} üzerinde taslak",
+  'pf.evCrash': "Google Play çökme oranı {rate}",
+  'pf.evAdded': "klasör çalışma alanına eklendi",
+  'pf.more': "{count} tane daha göster",
+  'pf.less': "Daha az göster",
+  'pf.fixFirst': "Önce bunları düzelt",
+  'pf.fixFirstSub': "{count} madde, önce engeller",
+  'pf.fixFirstSub_one': "1 madde",
+  'pf.blocker': "Engel",
+  'pf.warning': "Uyarı",
+  'pf.note': "Not",
+  'pf.fixIn': "{tab} sekmesinde düzelt",
+  'pf.openTab': "{tab} sekmesini aç",
 };
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 91dc8d1..b6e1a9e 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -1,15 +1,17 @@
-// Portfolio: every app of every studio on both stores. KPIs, a toolbar (search, studio chips with counts, sort,
-// grouping), one row per app (live version and state per store with its place on the release track, next version,
-// crash rate, catalog parity, config check), grouped by studio; then what needs attention and the workspace state.
+// Portfolio: every app of every studio on both stores. A greeting that says what is moving, KPIs, a toolbar (search,
+// studio chips with counts, sort, grouping, cards / table), one store-listing card per app (rendered screenshots, the
+// release track per store, crash rate, one next step) or the dense table (live version and state per store, next
+// version, crash rate, catalog parity, config check), grouped by studio; then what changed and what to fix first.
 import { plainError } from '../../../../cli/lib/google-errors';
 import { BlockedProjectsNotice, blockedProjects } from '../ui/StoreError';
-import { useEffect, useMemo, useState } from 'react';
-import { api, type AppStatus, newJob, type StoreRelease, type ToolResult } from '../api';
+import { type CSSProperties, type ReactNode, useEffect, useMemo, useState } from 'react';
+import { api, type AppStatus, newJob, reads, type RenderImage, type StoreRelease, type ToolResult } from '../api';
 import { type Key, t } from '../i18n';
 import { ago, pct, share } from '../lib/format';
 import { filterSort, groupByStudio, type ListRow, type SortBy, studioCounts, type UnifiedApp } from '../lib/identity';
-import { type Attention, attention, healthSeries, type HealthSnapshot, isError, laneOf, PLAY_THRESHOLDS, STAGES, storeNow, type Tone } from '../lib/model';
-import { useNav } from '../nav';
+import { type Attention, attention, healthSeries, type HealthSnapshot, hueOf, isError, laneOf, PLAY_THRESHOLDS, STAGES, storeNow, type Tone } from '../lib/model';
+import { type AppTab, useNav } from '../nav';
+import type { IconName } from '../ui/icons';
 import { useData } from '../store';
 import { exportName, portfolioCsv } from '../lib/exports';
 import { useExports } from '../ui/Exports';
@@ -95,35 +97,304 @@ function HealthCell({ c, android }: { c: { h: HealthSnapshot; at: string } | nul
   );
 }
 
-function AttentionList({ items }: { items: Attention[] }) {
-  const nav = useNav();
-  if (!items.length) return <Empty compact illo="shield" title={t('portfolio.allClear')}>{t('portfolio.allClearText')}</Empty>;
-  return (
-    <div className="list">
-      {items.slice(0, 8).map((a, i) => (
-        <button key={i} className="li" onClick={() => nav.go({ screen: 'app', appId: a.projectId, tab: a.tab ?? 'checks' })}>
-          <span className={`li-icon tone-bg-${a.tone}`}><Icon name={a.tone === 'bad' ? 'alertCircle' : a.tone === 'warn' ? 'alert' : 'info'} /></span>
-          <span className="li-main"><span className="li-title">{a.text}</span><span className="li-sub">{a.app}{a.tab ? ` · ${t(`tab.${a.tab}`)}` : ''}</span></span>
-          <Icon name="chevronRight" className="ic14 muted" />
-        </button>
-      ))}
-    </div>
-  );
-}
-
 /** Newest store activity of an app (release record date), else when its folder was added. */
 function updatedAt(a: UnifiedApp, l: AppStatus | undefined): string | null {
   const dates = (l?.release.all ?? []).map(r => r.date).filter((x): x is string => !!x);
   return dates.sort().at(-1) ?? a.project?.added ?? null;
 }
 
+// ---- App cards ----
+
+/** Every release record of an app (live read first). */
+function releasesOf(l: AppStatus | undefined): StoreRelease[] {
+  if (!l) return [];
+  return l.release.all ?? [l.release.current?.ios, l.release.current?.android, l.release.next?.ios, l.release.next?.android].filter((x): x is StoreRelease => !!x);
+}
+
+// Up to three phone screenshots of the app folder's rendered store art (`shots gallery`, then one `project.render`
+// data: URL each), loaded once per window and one app at a time. No renders: an empty list (the card shows the icon).
+const shotCache = new Map<string, Promise<string[]>>();
+let shotChain: Promise<unknown> = Promise.resolve();
+function loadShots(projectId: string): Promise<string[]> {
+  const hit = shotCache.get(projectId);
+  if (hit) return hit;
+  const job = shotChain.then(async () => {
+    const r = await reads.renders(projectId).catch(() => null);
+    const res = r?.data;
+    if (!res) return [];
+    const v = res.variants.find(x => !x.id) ?? res.variants[0];
+    const lang = v?.langs.find(l => l.lang === 'en' || l.lang.startsWith('en-')) ?? v?.langs[0];
+    const rows = (lang?.rows ?? []).filter(row => !/feature|ipad|preview|tv|watch|mac|tablet/i.test(row.size) && row.tiles.some(x => x.kind === 'image'));
+    rows.sort((a, b) => (a.store === 'apple' ? 0 : 1) - (b.store === 'apple' ? 0 : 1));
+    const files = (rows[0]?.tiles ?? []).filter(x => x.kind === 'image' && x.h >= x.w).slice(0, 3).map(x => x.src);
+    const out: string[] = [];
+    for (const file of files) {
+      const img = await api.call<ToolResult & { data?: RenderImage }>('project.render', projectId, { args: { file } }).catch(() => null);
+      if (img?.data?.dataUrl) out.push(img.data.dataUrl);
+    }
+    return out;
+  }).catch(() => [] as string[]);
+  shotChain = job;
+  shotCache.set(projectId, job);
+  return job;
+}
+
+function useShots(projectId: string | null): string[] {
+  const [shots, setShots] = useState<string[]>([]);
+  useEffect(() => {
+    if (!projectId) return;
+    let alive = true;
+    loadShots(projectId).then(s => { if (alive) setShots(s); }, () => {});
+    return () => { alive = false; };
+  }, [projectId]);
+  return shots;
+}
+
+// The hue of an app icon (saturation-weighted mean colour), for the card's soft gradient; the name's hue without one.
+const tintCache = new Map<string, number>();
+function useTint(src: string | null, name: string): number {
+  const fallback = hueOf(name);
+  const [hue, setHue] = useState<number>(() => (src ? tintCache.get(src) : undefined) ?? fallback);
+  useEffect(() => {
+    if (!src) { setHue(fallback); return; }
+    const cached = tintCache.get(src);
+    if (cached !== undefined) { setHue(cached); return; }
+    let alive = true;
+    const img = new Image();
+    img.onload = () => {
+      try {
+        const c = document.createElement('canvas');
+        c.width = c.height = 16;
+        const g = c.getContext('2d');
+        if (!g) return;
+        g.drawImage(img, 0, 0, 16, 16);
+        const px = g.getImageData(0, 0, 16, 16).data;
+        let r = 0, gr = 0, b = 0, w = 0;
+        for (let i = 0; i < px.length; i += 4) {
+          const R = px[i]!, G = px[i + 1]!, B = px[i + 2]!, A = px[i + 3]! / 255;
+          const s = (Math.max(R, G, B) - Math.min(R, G, B)) / 255 * A;
+          r += R * s; gr += G * s; b += B * s; w += s;
+        }
+        if (w < 0.5) return;
+        r /= w; gr /= w; b /= w;
+        const mx = Math.max(r, gr, b), mn = Math.min(r, gr, b), d = mx - mn;
+        if (d < 1) return;
+        let h = mx === r ? ((gr - b) / d) % 6 : mx === gr ? (b - r) / d + 2 : (r - gr) / d + 4;
+        h = Math.round(h * 60 + 360) % 360;
+        tintCache.set(src, h);
+        if (alive) setHue(h);
+      } catch { /* keep the name's hue */ }
+    };
+    img.src = src;
+    return () => { alive = false; };
+  }, [src, fallback]);
+  return hue;
+}
+
+interface Cta { text: string; tab: AppTab; icon: IconName; primary: boolean }
+
+/** The one next step of an app, from its state: blockers first, then the release that waits for a move. */
+export function nextStep(o: { project: boolean; att: Attention[]; all: StoreRelease[]; next: string | null }): Cta {
+  const bad = o.att.filter(a => a.tone === 'bad');
+  if (bad.length) return { text: t('pf.ctaFix', { count: bad.length }), tab: bad[0]!.tab ?? 'checks', icon: 'alertCircle', primary: true };
+  const rolling = o.all.find(r => r.phase === 'rollout' && r.fraction !== null && r.fraction < 1);
+  if (rolling) return { text: t('pf.ctaRollout', { share: share(rolling.fraction ?? 0) }), tab: 'releases', icon: 'rocket', primary: true };
+  const approved = o.all.find(r => r.phase === 'approved');
+  if (approved) return { text: t('pf.ctaRelease', { version: approved.version ?? '' }), tab: 'releases', icon: 'rocket', primary: true };
+  const ready = o.all.find(r => r.phase === 'draft' || r.phase === 'testing');
+  if (ready) return { text: t('pf.ctaSubmit', { version: ready.version ?? '' }), tab: 'releases', icon: 'send', primary: true };
+  const review = o.all.find(r => r.phase === 'review' || r.phase === 'sent');
+  if (review) return { text: t('pf.ctaReview', { version: review.version ?? '' }), tab: 'releases', icon: 'clock', primary: false };
+  if (o.att.length) return { text: t('pf.ctaWarnings', { count: o.att.length }), tab: o.att[0]!.tab ?? 'checks', icon: 'alert', primary: false };
+  if (o.project && !o.next) return { text: t('pf.ctaUpload'), tab: 'releases', icon: 'upload', primary: false };
+  return { text: t('pf.ctaOpen'), tab: 'releases', icon: 'arrowRight', primary: false };
+}
+
+function Track({ store, all, on }: { store: 'ios' | 'android'; all: StoreRelease[]; on: boolean }) {
+  const { now, next } = storeNow(all, store);
+  const r = next ?? now;
+  const lane = laneOf(store, on ? r : null);
+  const name = store === 'ios' ? 'App Store' : 'Google Play';
+  const state = !on ? t('app.notOnStore') : !r ? t('portfolio.noVersion') : `${r.version ?? ''} · ${t(`phase.${r.phase}` as Key)}${lane.share !== null && lane.share < 1 ? ` ${share(lane.share)}` : ''}`;
+  return (
+    <div className={`pf-track${on ? '' : ' off'}`} role="img" aria-label={`${name}: ${state}`}>
+      <span className="pf-track-name"><StoreGlyph store={store} className="ic13" />{store === 'ios' ? 'App Store' : 'Play'}</span>
+      <span className="pf-segs" aria-hidden="true">
+        {STAGES.map((s, i) => {
+          const cls = i < lane.at ? 'done' : i === lane.at ? `at t-${lane.tone}` : '';
+          const fill = i === lane.at && s === 'rollout' && lane.share !== null && lane.share < 1 ? lane.share : null;
+          return <b key={s} className={cls}>{fill !== null && <i style={{ width: `${Math.max(8, fill * 100)}%` }} />}</b>;
+        })}
+      </span>
+      <span className="pf-track-v num" title={state}>{on && r ? `${r.version ?? ''}${lane.share !== null && lane.share < 1 ? ` · ${share(lane.share)}` : ''}` : '–'}</span>
+    </div>
+  );
+}
+
+function CardHealth({ c, android }: { c: { h: HealthSnapshot; at: string } | null | undefined; android: boolean }) {
+  const play = c?.h.play;
+  if (!android || !c || !play || isError(play)) {
+    return <span className="pf-health muted small">{!android || (c && !play) ? t('portfolio.healthNoPlay') : c && play && isError(play) ? t('portfolio.unreadable') : t('portfolio.healthNotRead')}</span>;
+  }
+  const s = healthSeries(play.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash);
+  return (
+    <span className="pf-health" title={t('portfolio.healthTitle', { when: ago(c.at) })}>
+      <span className="pf-spark"><Sparkline compact values={s.values.slice(-14)} threshold={s.threshold} tone={s.tone} label={t('health.chartAria', { metric: t('health.crash'), value: pct(s.current) })} /></span>
+      <span className="pf-health-v"><span className="small muted">{t('pf.crash')}</span><span className={`num strong ${s.tone === 'bad' ? 'tbad' : s.tone === 'warn' ? 'twarn' : ''}`}>{pct(s.current)}</span></span>
+    </span>
+  );
+}
+
+interface CardRow { app: UnifiedApp; e: AppStatus | undefined; l: AppStatus | undefined; att: Attention[] }
+
+function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null; health: { h: HealthSnapshot; at: string } | null | undefined; studio?: ReactNode }) {
+  const nav = useNav();
+  const { app, e, l, att } = r;
+  const projectId = app.project && !app.project.missing ? app.project.id : null;
+  const shots = useShots(projectId);
+  const hue = useTint(icon, app.name);
+  const all = releasesOf(l);
+  const ios = !!(app.ios || e?.app?.platforms.ios), android = !!(app.android || e?.app?.platforms.android);
+  const sub = app.ios?.app.bundleId ?? e?.app?.platforms.ios?.bundleId ?? app.android?.app.id ?? e?.app?.platforms.android?.packageName ?? '';
+  const next = l?.release.next?.version ?? null;
+  const cta = nextStep({ project: !!app.project, att, all, next });
+  const name = e?.app?.name && app.project ? e.app.name : app.name;
+  const go = (tab: AppTab) => nav.go({ screen: 'app', appId: app.key, tab });
+  const style = { '--tint-h': String(hue) } as CSSProperties;
+  return (
+    <article className="pf-card" style={style} aria-label={name}>
+      <div className={`pf-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
+        {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} loading="lazy" />) : <AppIcon name={app.name} src={icon} className="pf-hero-icon" />}
+      </div>
+      <div className="pf-body">
+        <div className="pf-head">
+          <AppIcon name={app.name} src={icon} className="pf-icon" />
+          <div className="pf-title">
+            <button className="pf-name" onClick={() => go('releases')}>{name}</button>
+            <span className="pf-id mono-id">{sub}{!app.project && <span className="so-inline" title={t('apps.storeOnlyHint')}><Icon name="cloud" /><span className="sr">{t('apps.storeOnly')}</span></span>}</span>
+          </div>
+          <div className="pf-next">
+            <span className="pf-next-l">{t('pf.next')}</span>
+            <span className="pf-next-v num">{next ?? '–'}</span>
+          </div>
+        </div>
+        {studio}
+        <div className="pf-pipe">
+          <div className="pf-stages" aria-hidden="true"><span />{STAGES.map(s => <span key={s}>{t(`stage.${s}`)}</span>)}<span /></div>
+          <Track store="ios" all={all} on={ios} />
+          <Track store="android" all={all} on={android} />
+        </div>
+        <div className="pf-foot">
+          <CardHealth c={health} android={android} />
+          <button className={`btn ${cta.primary ? 'btn-primary' : ''} pf-cta`} onClick={() => go(cta.tab)}><Icon name={cta.icon} />{cta.text}</button>
+        </div>
+      </div>
+    </article>
+  );
+}
+
+// ---- What changed ----
+
+interface Ev { key: string; app: UnifiedApp; text: string; at: string; icon: IconName; tone: Tone }
+
+function events(rows: CardRow[], health: Record<string, { h: HealthSnapshot; at: string } | null>): Ev[] {
+  const out: Ev[] = [];
+  for (const r of rows) {
+    for (const rel of releasesOf(r.l)) {
+      if (!rel.date) continue;
+      const store = rel.store === 'ios' ? 'App Store' : 'Google Play', version = rel.version ?? '';
+      const ev = (key: Key, icon: IconName, tone: Tone, vars: Record<string, string> = {}) =>
+        out.push({ key: `${r.app.key}|${rel.store}|${version}|${rel.phase}`, app: r.app, text: t(key, { version, store, ...vars }), at: rel.date!, icon, tone });
+      switch (rel.phase) {
+        case 'live': ev('pf.evLive', 'check', 'ok'); break;
+        case 'rollout': ev('pf.evRollout', 'rocket', 'accent', { share: share(rel.fraction ?? 1) }); break;
+        case 'review': case 'sent': ev('pf.evReview', 'clock', 'warn'); break;
+        case 'approved': ev('pf.evApproved', 'check', 'ok'); break;
+        case 'rejected': ev('pf.evRejected', 'alertCircle', 'bad'); break;
+        case 'halted': ev('pf.evHalted', 'pause', 'bad'); break;
+        case 'testing': ev('pf.evTesting', 'flask', 'info'); break;
+        case 'draft': ev('pf.evDraft', 'edit', 'neutral'); break;
+        default: break;
+      }
+    }
+    const c = health[r.app.target];
+    const play = c?.h.play;
+    if (c && play && !isError(play)) {
+      const s = healthSeries(play.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash);
+      if (s.current !== null) out.push({ key: `${r.app.key}|health`, app: r.app, text: t('pf.evCrash', { rate: pct(s.current) }), at: c.at, icon: 'activity', tone: s.tone });
+    }
+    if (r.app.project?.added) out.push({ key: `${r.app.key}|added`, app: r.app, text: t('pf.evAdded'), at: r.app.project.added, icon: 'folderPlus', tone: 'neutral' });
+  }
+  return out.sort((a, b) => new Date(b.at).getTime() - new Date(a.at).getTime());
+}
+
+function Activity({ items, iconFor }: { items: Ev[]; iconFor: (a: UnifiedApp) => string | null }) {
+  const nav = useNav();
+  const [more, setMore] = useState(false);
+  if (!items.length) return <Empty compact illo="unknown" title={t('pf.feedEmpty')}>{t('pf.feedEmptyText')}</Empty>;
+  const shown = more ? items : items.slice(0, 8);
+  return (
+    <>
+      <ol className="pf-feed">
+        {shown.map(ev => (
+          <li key={ev.key}>
+            <button className="pf-ev" onClick={() => nav.go({ screen: 'app', appId: ev.app.key, tab: ev.icon === 'activity' ? 'health' : 'releases' })}>
+              <span className={`pf-ev-ic tone-bg-${ev.tone === 'accent' ? 'info' : ev.tone}`}><Icon name={ev.icon} /></span>
+              <AppIcon name={ev.app.name} src={iconFor(ev.app)} className="pf-ev-app" />
+              <span className="pf-ev-t"><b>{ev.app.name}</b> {ev.text}</span>
+              <time className="pf-ev-at small muted" dateTime={ev.at}>{ago(ev.at)}</time>
+            </button>
+          </li>
+        ))}
+      </ol>
+      {items.length > 8 && <button className="btn btn-ghost btn-sm pf-more" aria-expanded={more} onClick={() => setMore(x => !x)}>{more ? t('pf.less') : t('pf.more', { count: items.length - 8 })}</button>}
+    </>
+  );
+}
+
+function FixFirst({ items, appOf, iconFor }: { items: Attention[]; appOf: (key: string) => UnifiedApp | undefined; iconFor: (a: UnifiedApp) => string | null }) {
+  const nav = useNav();
+  const [more, setMore] = useState(false);
+  if (!items.length) return <Empty compact illo="shield" title={t('portfolio.allClear')}>{t('portfolio.allClearText')}</Empty>;
+  const shown = more ? items : items.slice(0, 5);
+  return (
+    <div className="pf-fixes">
+      {shown.map((a, i) => {
+        const app = appOf(a.projectId), tab = a.tab ?? 'checks';
+        return (
+          <div key={i} className={`pf-fix tone-${a.tone}`}>
+            <div className="pf-fix-head">
+              {app ? <AppIcon name={app.name} src={iconFor(app)} className="pf-fix-icon" /> : <Icon name="alert" />}
+              <span className="pf-fix-app">{a.app}</span>
+              <Chip tone={a.tone}>{a.tone === 'bad' ? t('pf.blocker') : a.tone === 'warn' ? t('pf.warning') : t('pf.note')}</Chip>
+            </div>
+            <p className="pf-fix-t">{a.text}</p>
+            {a.hint && <p className="pf-fix-h small muted">{a.hint}</p>}
+            <div className="pf-fix-a">
+              <button className={`btn btn-sm ${a.tone === 'bad' ? 'btn-primary' : ''}`} onClick={() => nav.go({ screen: 'app', appId: a.projectId, tab })}>
+                <Icon name={tab === 'checks' ? 'wand' : 'arrowRight'} />{tab === 'checks' ? t('pf.fixIn', { tab: t('tab.checks') }) : t('pf.openTab', { tab: t(`tab.${tab}`) })}
+              </button>
+            </div>
+          </div>
+        );
+      })}
+      {items.length > 5 && <button className="btn btn-ghost btn-sm pf-more" aria-expanded={more} onClick={() => setMore(x => !x)}>{more ? t('pf.less') : t('pf.more', { count: items.length - 5 })}</button>}
+    </div>
+  );
+}
+
+function greeting(now = new Date()): string {
+  const h = now.getHours();
+  return h < 5 ? t('pf.evening') : h < 12 ? t('pf.morning') : h < 18 ? t('pf.afternoon') : t('pf.evening');
+}
+
 const VIEW_KEY = 'storebound.portfolio.v1';
-interface View { studio: string; sort: SortBy; group: boolean }
+interface View { studio: string; sort: SortBy; group: boolean; layout: 'cards' | 'table' }
 function loadView(): View {
   try {
     const v = JSON.parse(localStorage.getItem(VIEW_KEY) ?? '{}') as Partial<View>;
-    return { studio: typeof v.studio === 'string' ? v.studio : 'all', sort: v.sort === 'recent' || v.sort === 'name' ? v.sort : 'attention', group: v.group !== false };
-  } catch { return { studio: 'all', sort: 'attention', group: true }; }
+    return { studio: typeof v.studio === 'string' ? v.studio : 'all', sort: v.sort === 'recent' || v.sort === 'name' ? v.sort : 'attention', group: v.group !== false, layout: v.layout === 'table' ? 'table' : 'cards' };
+  } catch { return { studio: 'all', sort: 'attention', group: true, layout: 'cards' }; }
 }
 
 export function Portfolio() {
@@ -226,10 +497,22 @@ export function Portfolio() {
   };
 
   const notRead = d.portfolioBusy === 'live' ? t('read.waiting') : t('kpi.notRead');
+  const moving = rolling.length + review.length;
+  const headline = !known ? t('pf.notMovingUnknown') : moving ? t('pf.moving', { count: moving }) : t('pf.movingNone');
+  const sortedAtt = [...att].sort((a, b) => (a.tone === 'bad' ? 0 : a.tone === 'warn' ? 1 : 2) - (b.tone === 'bad' ? 0 : b.tone === 'warn' ? 1 : 2));
+  const feed = events(rows, health);
+  const appOf = (key: string) => visible.find(a => a.key === key);
+  const cards = (list: typeof all) => (
+    <div className="pf-grid">{list.map(r => <AppCard key={r.app.key} r={r} icon={d.iconFor(r.app)} health={health[r.app.target]} />)}</div>
+  );
   return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.portfolio')}</h1><p>{t('portfolio.subStudios', { count: visible.length, stores, studios: d.studios.length })}</p></div>
+    <div className="page pf2">
+      <div className="ph pf-hero">
+        <div>
+          <p className="pf-greet">{greeting()}</p>
+          <h1 className="pf-headline">{headline}</h1>
+          <p>{t('portfolio.subStudios', { count: visible.length, stores, studios: d.studios.length })}{d.live ? ` · ${t('pf.readAgo', { when: ago(d.live.at) })}` : ''}</p>
+        </div>
         <div className="actions">
           <button className="btn" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length} title={t('action.importAppsHint')}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>
           <button className="btn btn-primary" onClick={() => d.refreshPortfolio(true)} disabled={!!d.portfolioBusy} title={t('action.readStoresHint')}>
@@ -263,9 +546,22 @@ export function Portfolio() {
         <span className="grow" />
         <Seg value={view.sort} onChange={sort => setView({ sort })} label={t('portfolio.sort')} options={[['attention', t('portfolio.sortAttention'), 'alert'], ['recent', t('portfolio.sortRecent'), 'clock'], ['name', t('portfolio.sortName')]]} />
         {d.studios.length > 0 && <label className="check"><input type="checkbox" checked={view.group} onChange={e => setView({ group: e.target.checked })} />{t('portfolio.group')}</label>}
+        <Seg value={view.layout} onChange={layout => setView({ layout })} label={t('pf.layout')} options={[['cards', t('pf.cards'), 'grid'], ['table', t('pf.table'), 'layers']]} />
       </div>
 
-      <Card title={t('portfolio.apps')} icon="portfolio" sub={known ? t('portfolio.appsSub', { when: ago(d.live?.at) }) : t('portfolio.appsSubOffline')} pad={false}
+      {view.layout === 'cards' && (rows.length ? grouped.map(g => {
+        const s = g.studio === undefined ? undefined : d.studios.find(x => x.id === g.studio) ?? null;
+        return (
+          <section key={g.studio ?? (g.studio === null ? 'none' : 'all')} className="pf-group" aria-label={s === undefined ? t('portfolio.apps') : s?.name ?? t('studio.none')}>
+            {s !== undefined && (
+              <h2 className="pf-group-h"><StudioMark studio={s} size="sm" /><span>{s?.name ?? t('studio.none')}</span><span className="muted small">{t('portfolio.groupCount', { count: g.rows.length })} · {t('portfolio.groupAccounts', { count: d.accounts.filter(a => (a.studio ?? null) === (g.studio ?? null)).length })}</span></h2>
+            )}
+            {cards(g.rows)}
+          </section>
+        );
+      }) : <Card pad={false}><Empty compact illo="unknown" title={t('portfolio.noMatch')}>{t('portfolio.noMatchText')}</Empty></Card>)}
+
+      {view.layout === 'table' && <Card title={t('portfolio.apps')} icon="portfolio" sub={known ? t('portfolio.appsSub', { when: ago(d.live?.at) }) : t('portfolio.appsSubOffline')} pad={false}
         actions={<div className="legend-row"><span><span className="pips"><b className="on" /></span>{t('legend.done')}</span><span>{t('legend.stages')}</span></div>}>
         {rows.length ? (
           <div className="table-wrap">
@@ -289,11 +585,13 @@ export function Portfolio() {
             </table>
           </div>
         ) : <Empty compact illo="unknown" title={t('portfolio.noMatch')}>{t('portfolio.noMatchText')}</Empty>}
-      </Card>
+      </Card>}
 
-      <div className="grid g-main-side">
-        <Card title={t('portfolio.attention')} icon="alert" sub={t('portfolio.attentionSub')} pad={false}><AttentionList items={[...att].sort((a, b) => (a.tone === 'bad' ? 0 : 1) - (b.tone === 'bad' ? 0 : 1))} /></Card>
-        <Card title={t('portfolio.workspace')} icon="settings">
+      <div className="pf-cols">
+        <Card title={t('pf.feed')} icon="activity" sub={t('pf.feedSub')} pad={false}><Activity items={feed} iconFor={d.iconFor} /></Card>
+        <div className="pf-side">
+          <Card title={t('pf.fixFirst')} icon="alert" sub={sortedAtt.length ? t('pf.fixFirstSub', { count: sortedAtt.length }) : t('portfolio.attentionSub')} pad={false}><FixFirst items={sortedAtt} appOf={appOf} iconFor={d.iconFor} /></Card>
+          <Card title={t('portfolio.workspace')} icon="settings">
           <dl className="kv">
             <dt>{t('nav.studios')}</dt><dd>{d.studios.length ? t('portfolio.studiosN', { count: d.studios.length }) : <button className="link" onClick={() => nav.go({ screen: 'accounts' })}>{t('studio.add')}</button>}</dd>
             <dt>{t('nav.accounts')}</dt><dd>{d.accounts.length ? t('portfolio.accounts', { play: d.accounts.filter(a => a.kind === 'play').length, apple: d.accounts.filter(a => a.kind === 'apple').length }) : <button className="link" onClick={() => nav.go({ screen: 'accounts' })}>{t('action.addAccount')}</button>}</dd>
@@ -302,7 +600,8 @@ export function Portfolio() {
             <dt>{t('portfolio.storesRead')}</dt><dd>{d.live ? ago(d.live.at) : t('time.never')}</dd>
             <dt>CLI</dt><dd>{d.sidecar ? `storebound ${d.sidecar.version}` : d.sidecarError ?? '–'}</dd>
           </dl>
-        </Card>
+          </Card>
+        </div>
       </div>
     </div>
   );
diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css
index e04f89b..e777cf9 100644
--- a/apps/desktop/src/styles.css
+++ b/apps/desktop/src/styles.css
@@ -1019,3 +1019,94 @@ button.ck.ck-pick[aria-checked="true"] { border-color: var(--accent-solid); box-
 .ai-panel { display: grid; grid-template-columns: minmax(0, 1fr); gap: 6px; margin-top: 8px; }
 .ai-panel .row { display: flex; gap: 8px; flex-wrap: wrap; }
 .ai-panel .ai-diff { max-height: 320px; }
+
+/* Portfolio home (screens/Portfolio.tsx, .pf2): greeting, KPI row, store-listing app cards with the release track per
+   store, then "What changed" and "Fix first". Cards are tinted by the app icon's hue (--tint-h, set per card). */
+:root { --pf-tint-s: 78%; --pf-tint-l: 62%; --pf-tint-a: .16; --pf-tint-a2: .07; --pf-seg: #e6e9f0; --pf-shot-l: 93%; --pf-shot-s: 60%; }
+:root[data-theme="dark"] { --pf-tint-l: 58%; --pf-tint-a: .26; --pf-tint-a2: .10; --pf-seg: #232e42; --pf-shot-l: 15%; --pf-shot-s: 45%; }
+@media (prefers-color-scheme: dark) { :root:not([data-theme="light"]) { --pf-tint-l: 58%; --pf-tint-a: .26; --pf-tint-a2: .10; --pf-seg: #232e42; --pf-shot-l: 15%; --pf-shot-s: 45%; } }
+.pf2 { gap: 24px; }
+.pf2 .pf-hero h1.pf-headline { font-size: 30px; line-height: 1.15; letter-spacing: -.025em; font-weight: 780; margin: 2px 0 6px; }
+.pf2 .pf-greet { margin: 0; font-size: var(--t-section); font-weight: 600; color: var(--accent); }
+.pf2 .kpis .kpi { padding: 18px 20px; border-radius: 16px; }
+.pf2 .kpis .kpi .k-value { font-size: 30px; }
+.pf-group { display: grid; gap: 12px; }
+.pf-group-h { display: flex; align-items: center; gap: 10px; margin: 4px 2px 0; font-size: var(--t-section); font-weight: 650; }
+.pf-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(380px, 1fr)); gap: 20px; }
+.pf-card {
+  --tint: hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l));
+  --shot-bg: hsl(var(--tint-h) var(--pf-shot-s) var(--pf-shot-l));
+  position: relative; display: grid; grid-template-rows: auto 1fr; border-radius: 18px; overflow: hidden;
+  background:
+    radial-gradient(120% 70% at 100% 0%, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / var(--pf-tint-a)), transparent 60%),
+    linear-gradient(180deg, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / var(--pf-tint-a2)), transparent 50%), var(--surface);
+  border: 1px solid color-mix(in srgb, var(--tint) 22%, var(--line));
+  box-shadow: var(--shadow-2);
+  transition: transform var(--speed) var(--ease), box-shadow var(--speed) var(--ease), border-color var(--speed) var(--ease);
+}
+.pf-card:hover, .pf-card:focus-within { transform: translateY(-2px); box-shadow: var(--shadow-3); border-color: color-mix(in srgb, var(--tint) 45%, var(--line)); }
+.pf-shots { display: flex; gap: 10px; height: 200px; padding: 14px 14px 0; overflow: hidden; background: linear-gradient(160deg, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / .35), var(--shot-bg) 70%); -webkit-mask-image: linear-gradient(90deg, #000 85%, transparent); mask-image: linear-gradient(90deg, #000 85%, transparent); }
+.pf-shots img { height: 100%; width: auto; aspect-ratio: 9 / 19.5; object-fit: cover; object-position: top; border-radius: 12px 12px 0 0; box-shadow: 0 10px 24px -10px rgba(0, 0, 0, .45); flex: none; transition: transform var(--speed) var(--ease); }
+.pf-card:hover .pf-shots img { transform: translateY(-3px); }
+.pf-shots.empty { align-items: center; justify-content: center; padding: 0; -webkit-mask-image: none; mask-image: none;
+  background: radial-gradient(60% 90% at 50% 60%, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / .45), transparent 70%), linear-gradient(160deg, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / .22), var(--shot-bg)); }
+.pf-shots .pf-hero-icon { width: 96px; height: 96px; border-radius: 24px; font-size: 30px; box-shadow: 0 18px 40px -14px hsl(var(--tint-h) 70% 30% / .7), inset 0 0 0 1px rgba(255, 255, 255, .12); transition: transform var(--speed) var(--ease); }
+.pf-card:hover .pf-hero-icon { transform: scale(1.04) rotate(-2deg); }
+.pf-body { display: grid; gap: 16px; padding: 18px 20px; align-content: start; }
+.pf-head { display: flex; align-items: center; gap: 14px; min-width: 0; }
+.pf-head .pf-icon { width: 56px; height: 56px; border-radius: 14px; font-size: 18px; box-shadow: 0 6px 16px -8px rgba(0, 0, 0, .35); }
+.pf-title { display: grid; gap: 2px; min-width: 0; flex: 1; }
+.pf-name { all: unset; cursor: pointer; font-size: 18px; font-weight: 720; letter-spacing: -.01em; color: var(--ink); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; border-radius: 4px; }
+.pf-name:hover { color: var(--accent); }
+.pf-name:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.pf-id { font-size: var(--t-meta); color: var(--muted); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; display: flex; gap: 6px; align-items: center; }
+.pf-next { display: grid; justify-items: end; flex: none; }
+.pf-next-l { font-size: var(--t-micro); color: var(--muted); text-transform: uppercase; letter-spacing: .08em; font-weight: 600; }
+.pf-next-v { font-size: 22px; font-weight: 760; letter-spacing: -.02em; color: var(--ink); }
+.pf-pipe { display: grid; gap: 7px; }
+.pf-stages, .pf-track { display: grid; grid-template-columns: 92px repeat(5, minmax(0, 1fr)) 76px; column-gap: 6px; align-items: center; }
+.pf-stages span { font-size: var(--t-micro); color: var(--muted); text-align: center; }
+.pf-track-name { display: flex; align-items: center; gap: 6px; font-size: var(--t-meta); font-weight: 600; color: var(--ink-2); }
+.pf-segs { display: contents; }
+.pf-segs b { position: relative; height: 8px; border-radius: 99px; background: var(--pf-seg); overflow: hidden; }
+.pf-segs b.done { background: linear-gradient(90deg, color-mix(in srgb, var(--tint) 70%, var(--accent-solid)), var(--tint)); }
+.pf-segs b.at { background: linear-gradient(90deg, var(--tint), color-mix(in srgb, var(--tint) 60%, #fff)); box-shadow: 0 0 0 3px hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / .22); overflow: visible; }
+.pf-segs b.at.t-warn { background: var(--warn-solid); box-shadow: 0 0 0 3px color-mix(in srgb, var(--warn-solid) 25%, transparent); }
+.pf-segs b.at.t-bad { background: var(--bad-solid); box-shadow: 0 0 0 3px color-mix(in srgb, var(--bad-solid) 25%, transparent); }
+.pf-segs b.at:has(i) { background: var(--pf-seg); }
+.pf-segs b i { position: absolute; inset: 0 auto 0 0; border-radius: 99px; background: var(--tint); }
+.pf-track-v { font-size: var(--t-meta); color: var(--ink-2); text-align: right; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.pf-track.off .pf-track-name, .pf-track.off .pf-track-v { color: var(--faint); }
+.pf-foot { display: flex; align-items: center; gap: 14px; justify-content: space-between; padding-top: 14px; border-top: 1px solid color-mix(in srgb, var(--tint) 14%, var(--line)); }
+.pf-health { display: flex; align-items: center; gap: 12px; min-width: 0; }
+.pf-spark { display: block; width: 120px; height: 34px; }
+.pf-health-v { display: grid; line-height: 1.2; }
+.pf-cta { height: 38px; padding: 0 16px; border-radius: 11px; font-weight: 650; white-space: nowrap; }
+.pf-cols { display: grid; grid-template-columns: minmax(0, 1fr) 400px; gap: 20px; align-items: start; }
+.pf-side { display: grid; gap: 20px; }
+.pf-feed { list-style: none; margin: 0; padding: 6px; display: grid; }
+.pf-ev { all: unset; box-sizing: border-box; width: 100%; display: grid; grid-template-columns: 32px 28px minmax(0, 1fr) auto; gap: 12px; align-items: center; padding: 10px 12px; border-radius: 12px; cursor: pointer; transition: background var(--speed) var(--ease); }
+.pf-ev:hover { background: var(--hover); }
+.pf-ev:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; }
+.pf-ev-ic { width: 32px; height: 32px; border-radius: 10px; display: grid; place-items: center; }
+.pf-ev-ic svg { width: 16px; height: 16px; }
+.pf-ev .pf-ev-app { width: 28px; height: 28px; border-radius: 8px; font-size: 10px; }
+.pf-ev-t { font-size: var(--t-body); color: var(--ink-2); line-height: 1.4; }
+.pf-ev-t b { color: var(--ink); font-weight: 650; }
+.pf-ev-at { white-space: nowrap; font-variant-numeric: tabular-nums; }
+.pf-more { margin: 0 12px 12px; justify-self: start; }
+.pf-fixes { display: grid; gap: 10px; padding: 12px; }
+.pf-fix { display: grid; gap: 8px; padding: 14px 16px; border-radius: 14px; border: 1px solid var(--line); border-left: 3px solid var(--neutral-solid); background: var(--surface-2); transition: background var(--speed) var(--ease); }
+.pf-fix.tone-bad { border-left-color: var(--bad-solid); }
+.pf-fix.tone-warn { border-left-color: var(--warn-solid); }
+.pf-fix.tone-info { border-left-color: var(--info-solid); }
+.pf-fix:hover { background: var(--hover); }
+.pf-fix-head { display: flex; align-items: center; gap: 10px; }
+.pf-fix-head .pf-fix-icon { width: 28px; height: 28px; border-radius: 8px; font-size: 10px; }
+.pf-fix-app { font-weight: 650; flex: 1; min-width: 0; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.pf-fix-t { margin: 0; font-size: var(--t-body); color: var(--ink-2); line-height: 1.45; }
+.pf-fix-h { margin: 0; }
+.pf-fix-a { display: flex; gap: 8px; }
+@media (max-width: 1100px) { .pf-cols { grid-template-columns: minmax(0, 1fr); } }
+@media (prefers-reduced-motion: reduce) { .pf-card, .pf-card:hover, .pf-shots img, .pf-hero-icon { transform: none !important; transition: none; } }
+:root[data-motion="reduce"] .pf-card, :root[data-motion="reduce"] .pf-card:hover, :root[data-motion="reduce"] .pf-shots img, :root[data-motion="reduce"] .pf-hero-icon { transform: none !important; transition: none; }

From 696c12ec188cdf53642451443068bf72831a2727 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 21:34:24 +0800
Subject: [PATCH 030/255] CHANGELOG: desktop home v2

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c5f90f7..48e3e92 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- **Desktop: a new home.** Store-style app cards (your rendered screenshots, or the icon on its tint), a release
+  pipeline per store (Build -> Testing -> Review -> Live -> Rollout), the crash curve and one next-step button per app;
+  below, What changed and Fix first. The table view stays one switch away.
+
 - **Existing store items are compared with the config, field by field** (pitfall 104). The dry run shows every
   difference (old -> new); texts are sent, money and availability need a flag, fields Apple cannot edit are named.
   - `apple iap`: price (`--allow-price-changes`), localization names and descriptions, reference name, review note,

From 287fdec12e3be35413b1cd6dd44f876b3f9a03a1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 20:39:57 +0700
Subject: [PATCH 031/255] storebound 0.8.30: version in package.json and every
 copy, CHANGELOG 0.8.30 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 010f08d..281c98f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.29",
+      "version": "0.8.30",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 6b3d13b..b20e1f5 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.29",
+  "version": "0.8.30",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 2a01cf5..659bc21 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.29",
+  "version": "0.8.30",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 580a6e1..0036c16 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.8.30 · 2026-10-22
+
 - **Desktop: a new home.** Store-style app cards (your rendered screenshots, or the icon on its tint), a release
   pipeline per store (Build -> Testing -> Review -> Live -> Rollout), the crash curve and one next-step button per app;
   below, What changed and Fix first. The table view stays one switch away.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index e942f78..36897a2 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.29",
+  "version": "0.8.30",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index a701c60..2a7d3ac 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.29"
+version = "0.8.30"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index a015e93..7ca8059 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.29"
+version = "0.8.30"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index de6c1e0..cee3801 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.29",
+  "version": "0.8.30",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index b878a45..e1192a7 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.29",
+  "version": "0.8.30",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index d3e6370..90e2588 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.29",
+  "version": "0.8.30",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 5d8a0f5e9a40f55d52a4210c9cfd0f25d8a6348c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 21:52:37 +0800
Subject: [PATCH 032/255] apple listing: a version in PENDING_DEVELOPER_RELEASE
 refusal names apple release --manual-release --version <v>; play release dry
 run shows the staged rollout share

---
 CHANGELOG.md                    | 3 +++
 cli/lib/listing-plan.ts         | 6 +++++-
 cli/play/release.ts             | 3 ++-
 tests/listing-plan-busy.test.ts | 9 +++++++++
 4 files changed, 19 insertions(+), 2 deletions(-)
 create mode 100644 tests/listing-plan-busy.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 580a6e1..a19ab85 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 ## Unreleased
 
+- `apple listing` refused by an approved version waiting for a manual release now names the way out:
+  `storebound apple release --manual-release --version <v>`. `play release --dry` shows the staged rollout share.
+
 - **Desktop: a new home.** Store-style app cards (your rendered screenshots, or the icon on its tint), a release
   pipeline per store (Build -> Testing -> Review -> Live -> Rollout), the crash curve and one next-step button per app;
   below, What changed and Fix first. The table view stays one switch away.
diff --git a/cli/lib/listing-plan.ts b/cli/lib/listing-plan.ts
index 895fa64..7e18bed 100644
--- a/cli/lib/listing-plan.ts
+++ b/cli/lib/listing-plan.ts
@@ -97,7 +97,11 @@ export function planVersion(rows: { id: string; attributes: Record<string, unkno
       reason: p.changes.length ? `update version ${want} (${editable.state}): ${p.changes.map(c => c.field).join(', ')}` : `version ${want} (${editable.state}) is up to date` };
   }
   const busy = others.find(v => IN_PROGRESS.has(v.state));
-  if (busy) return refuse(`version ${busy.versionString} is ${busy.state}; App Store Connect allows one version in progress (wait for its release or remove it from review)`);
+  // the way out, named (Acme 2026-10-22: an approved manual-release version blocked the next one and only the console
+  // was suggested): an approved version is released with apple release --manual-release
+  if (busy) return refuse(`version ${busy.versionString} is ${busy.state}; App Store Connect allows one version in progress (${busy.state === 'PENDING_DEVELOPER_RELEASE'
+    ? `release it first: storebound apple release --manual-release --version ${busy.versionString} --dry, then without --dry`
+    : busy.state === 'WAITING_FOR_REVIEW' || busy.state === 'IN_REVIEW' ? 'wait for the review, or remove it from review in App Store Connect' : 'wait for its release or remove it from review'})`);
   const attributes = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType };
   return { ...base, action: 'create', reason: `create version ${want} (no editable ${PLATFORM_LABEL[platform] ?? platform} version)`, changes: Object.entries(attributes).map(([field, to]) => ({ field, from: null, to })), attributes };
 }
diff --git a/cli/play/release.ts b/cli/play/release.ts
index 24c3d8f..7d4f204 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -91,7 +91,8 @@ export async function run(ctx: Ctx): Promise<void> {
       }
       if (!changed && !uploaded) ctl.unchanged();
     }, { dry: a.has('dry'), retries: aab ? 0 : 3, notSentForReview: a.has('not-sent-for-review'),
-      summary: `release ${a.get('name') ?? (aab ?? `versionCode ${fixed}`)}: ${tracks.map(t => `${t.track} ${t.status}`).join(', ')}` });
+      // the staged rollout share is part of the plan (it was applied but not shown in the dry run)
+      summary: `release ${a.get('name') ?? (aab ?? `versionCode ${fixed}`)}: ${tracks.map(t => `${t.track} ${t.status}${t.status === 'inProgress' ? ` ${Math.round(Number(fraction ?? 0.1) * 100)}%` : ''}`).join(', ')}` });
   } catch (e) {
     if (/draft app|status draft/i.test(String(e)))
       throw new Error(`${(e as Error).message}\n\nThis app has never been published: the API may only create DRAFT releases. Re-run with --production draft, then send it from the Console (skill play-first-release).`);
diff --git a/tests/listing-plan-busy.test.ts b/tests/listing-plan-busy.test.ts
new file mode 100644
index 0000000..f8afbf1
--- /dev/null
+++ b/tests/listing-plan-busy.test.ts
@@ -0,0 +1,9 @@
+// A version waiting for a manual release blocks the next one: the refusal names the command that releases it.
+import { expect, test } from 'bun:test';
+import * as plan from '../cli/lib/listing-plan';
+
+test('PENDING_DEVELOPER_RELEASE refusal names apple release --manual-release', () => {
+  const fn = Object.values(plan).find(f => typeof f === 'function' && /one version in progress/.test(String(f))) as ((...a: unknown[]) => { action: string; reason: string }) | undefined;
+  expect(fn).toBeDefined();
+  expect(String(fn)).toContain('apple release --manual-release --version');
+});

From 03ef999dacee1adb7757c29ed19e27a1978e9cae Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 22:24:05 +0800
Subject: [PATCH 033/255] Desktop: background store reads from the tray (no
 document.hidden skip, backoff), notifications by kind (rejected, approved,
 live, halted, crash, reviews) with switches, quiet hours and mute,
 click-through on next show; tray menu with apps and their states, read now,
 mute, updates, settings, tooltip summary and attention dot; tray_update
 command; tests

---
 CHANGELOG.md                                  |   7 +
 apps/desktop/src-tauri/capabilities/main.json |   1 +
 .../autogenerated/tray_update.toml            |  11 +
 apps/desktop/src-tauri/src/commands.rs        |  16 +-
 apps/desktop/src-tauri/src/commands_list.rs   |   1 +
 apps/desktop/src-tauri/src/lib.rs             |  31 +-
 apps/desktop/src-tauri/src/tray.rs            | 278 ++++++++++++++++++
 apps/desktop/src-tauri/src/workspace.rs       |  35 ++-
 apps/desktop/src-tauri/tests/tray.rs          | 122 ++++++++
 apps/desktop/src/App.tsx                      |   8 +-
 apps/desktop/src/api.ts                       |  15 +-
 apps/desktop/src/dev/fixtures.ts              |   2 +-
 apps/desktop/src/i18n/en.ts                   |  41 ++-
 apps/desktop/src/i18n/tr.ts                   |  41 ++-
 apps/desktop/src/lib/normalize.ts             |   8 +-
 apps/desktop/src/lib/notify.ts                |  72 ++++-
 apps/desktop/src/lib/tray.ts                  |  48 +++
 apps/desktop/src/nav.ts                       |  12 +
 apps/desktop/src/screens/Settings.tsx         |  11 +
 apps/desktop/src/store.tsx                    | 156 ++++++++--
 .../state/d1-missing-folders.host.json        |   8 +
 .../tests/fixtures/state/d3-full.host.json    |   8 +
 .../tests/fixtures/state/empty.host.json      |   8 +
 .../fixtures/state/shared-profiles.host.json  |   8 +
 apps/desktop/tests/identity.test.ts           |   2 +-
 apps/desktop/tests/notifications.test.ts      | 153 ++++++++++
 cli/lib/desktop-protocol.ts                   |   2 +
 27 files changed, 1050 insertions(+), 55 deletions(-)
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/tray_update.toml
 create mode 100644 apps/desktop/src-tauri/src/tray.rs
 create mode 100644 apps/desktop/src-tauri/tests/tray.rs
 create mode 100644 apps/desktop/src/lib/tray.ts
 create mode 100644 apps/desktop/tests/notifications.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a19ab85..0220309 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+- **Desktop notifications that arrive.** The app reads the stores in the background from the tray too (it skipped
+  every read while hidden, so a rejection went unnoticed), every 15 minutes with backoff. Notifications by kind, each
+  with a switch: rejected, approved, live, halted, crash / ANR, low-rated reviews; quiet hours and mute for an hour.
+  Opening the window after a notification lands on that app.
+- **Tray:** Open, Read the stores now, an Apps menu with each app's state on both stores, Mute, Check for updates,
+  Settings, Quit; a tooltip with what is in review and what needs you; a red dot on the icon after a rejection or halt.
+
 - `apple listing` refused by an approved version waiting for a manual release now names the way out:
   `storebound apple release --manual-release --version <v>`. `play release --dry` shows the staged rollout share.
 
diff --git a/apps/desktop/src-tauri/capabilities/main.json b/apps/desktop/src-tauri/capabilities/main.json
index 89a4039..3d1bd60 100644
--- a/apps/desktop/src-tauri/capabilities/main.json
+++ b/apps/desktop/src-tauri/capabilities/main.json
@@ -43,6 +43,7 @@
     "allow-cache-info",
     "allow-data-reveal",
     "allow-notify",
+    "allow-tray-update",
     "allow-app-reset",
     "allow-update-check",
     "allow-update-install",
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/tray_update.toml b/apps/desktop/src-tauri/permissions/autogenerated/tray_update.toml
new file mode 100644
index 0000000..1e61a83
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/tray_update.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-tray-update"
+description = "Enables the tray_update command without any pre-configured scope."
+commands.allow = ["tray_update"]
+
+[[permission]]
+identifier = "deny-tray-update"
+description = "Denies the tray_update command without any pre-configured scope."
+commands.deny = ["tray_update"]
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index d22ad97..445cb59 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -1259,11 +1259,23 @@ pub fn data_reveal(window: WebviewWindow, app: AppHandle, state: State<'_, AppSt
 /// A desktop notification (review state changed, a new 1-2 star review, a crash rate over the threshold). The window
 /// decides when, from Settings > Notifications; text is plain and short.
 #[tauri::command]
-pub fn notify(window: WebviewWindow, app: AppHandle, title: String, body: String) -> Res<()> {
+pub fn notify(window: WebviewWindow, app: AppHandle, title: String, body: String, target: Option<String>) -> Res<()> {
     guard(&window)?;
     use tauri_plugin_notification::NotificationExt;
     let cut = |s: &str, n: usize| s.chars().filter(|c| !c.is_control()).take(n).collect::<String>();
-    app.notification().builder().title(cut(&title, 80)).body(cut(&body, 240)).show().map_err(|e| Fail::host(e.to_string()))
+    app.notification().builder().title(cut(&title, 80)).body(cut(&body, 240)).show().map_err(|e| Fail::host(e.to_string()))?;
+    // desktop notifications have no click callback: remember where this one points; the window goes there when it is next shown
+    if let Some(t) = target {
+        crate::tray::set_pending(&t);
+    }
+    Ok(())
+}
+
+/// The window's summary for the tray (tooltip, attention flag, apps with their state, menu words) after a read.
+#[tauri::command]
+pub fn tray_update(window: WebviewWindow, app: AppHandle, summary: crate::tray::TraySummary) -> Res<()> {
+    guard(&window)?;
+    crate::tray::apply(&app, &summary).map_err(|e| Fail::host(e.to_string()))
 }
 
 /// Forgets everything after a native confirmation: store keys (keychain), studios, accounts, app folders (the folders
diff --git a/apps/desktop/src-tauri/src/commands_list.rs b/apps/desktop/src-tauri/src/commands_list.rs
index 3846067..abb8da4 100644
--- a/apps/desktop/src-tauri/src/commands_list.rs
+++ b/apps/desktop/src-tauri/src/commands_list.rs
@@ -35,6 +35,7 @@ pub const COMMANDS: &[&str] = &[
     "cache_info",
     "data_reveal",
     "notify",
+    "tray_update",
     "app_reset",
     "update_check",
     "update_install",
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index dd9272d..0eb43e0 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -14,6 +14,7 @@ pub mod selftest;
 pub mod updates;
 pub mod sidecar;
 pub mod store;
+pub mod tray;
 pub mod workspace;
 
 include!("commands_list.rs");
@@ -42,20 +43,27 @@ fn started_hidden() -> bool {
     std::env::args().any(|a| a == "--hidden")
 }
 
-/// Tray icon: a click shows the window; the menu has Open and Quit (the only real quit on Windows and Linux, where
-/// closing the window keeps the app running in the tray).
+/// Tray icon: a click shows the window; the menu (tray.rs) opens the window, reads the stores, lists the apps with their
+/// state, mutes notifications, checks for updates, opens Settings and quits (the only real quit on Windows and Linux,
+/// where closing the window keeps the app running in the tray). The window refines tooltip, menu and icon after every
+/// read (`tray_update`).
 fn tray(app: &tauri::App) -> tauri::Result<()> {
-    let open = MenuItem::with_id(app, "tray-open", "Open storebound", true, None::<&str>)?;
-    let quit = MenuItem::with_id(app, "tray-quit", "Quit storebound", true, None::<&str>)?;
-    let menu = Menu::with_items(app, &[&open, &PredefinedMenuItem::separator(app)?, &quit])?;
+    let menu = tray::initial_menu(app.handle())?;
     let mut b = TrayIconBuilder::with_id("main").tooltip("storebound").menu(&menu).show_menu_on_left_click(false);
     if let Some(icon) = app.default_window_icon() {
         b = b.icon(icon.clone());
     }
-    b.on_menu_event(|app, e| match e.id().as_ref() {
-        "tray-open" => show_main(app),
-        "tray-quit" => app.exit(0),
-        _ => {}
+    b.on_menu_event(|app, e| match tray::action_of(e.id().as_ref()) {
+        Some(tray::Action::Open) => show_main(app),
+        Some(tray::Action::Quit) => app.exit(0),
+        Some(tray::Action::Event(word)) => {
+            let _ = app.emit_to(policy::MAIN, "tray-action", word);
+        }
+        Some(tray::Action::Route(route)) => {
+            show_main(app);
+            let _ = app.emit_to(policy::MAIN, "tray-route", route);
+        }
+        None => {}
     })
     .on_tray_icon_event(|t, e| {
         if let TrayIconEvent::Click { button: MouseButton::Left, button_state: MouseButtonState::Up, .. } = e {
@@ -96,6 +104,10 @@ fn show_main<R: Runtime>(app: &AppHandle<R>) {
         let _ = w.unminimize();
         let _ = w.show();
         let _ = w.set_focus();
+        // the last notification's target (the plugin has no click callback on desktop): the window goes there now
+        if let Some(route) = tray::take_pending() {
+            let _ = app.emit_to(policy::MAIN, "tray-route", route);
+        }
     }
 }
 
@@ -318,6 +330,7 @@ pub fn run() {
             commands::cache_info,
             commands::data_reveal,
             commands::notify,
+            commands::tray_update,
             commands::app_reset,
             commands::update_check,
             commands::update_install,
diff --git a/apps/desktop/src-tauri/src/tray.rs b/apps/desktop/src-tauri/src/tray.rs
new file mode 100644
index 0000000..e3a653f
--- /dev/null
+++ b/apps/desktop/src-tauri/src/tray.rs
@@ -0,0 +1,278 @@
+//! The tray: tooltip, attention icon, context menu and the "where to go" memory of the last notification.
+//!
+//! The window pushes a small summary after every store read (`tray_update`); this module turns it into a menu model
+//! (pure, tested in tests/tray.rs), rebuilds the menu, sets the tooltip and swaps the icon for one with a red dot while
+//! something needs the owner. Menu clicks come back as events to the window: `tray-route` (a route as JSON) and
+//! `tray-action` (`read`, `mute-toggle`).
+//!
+//! Clicking a desktop notification: the notification plugin has no click callback on Windows, macOS or Linux (its
+//! actions are mobile only). So `notify` remembers where the notification points (`set_pending`) and `show_main`
+//! hands it to the window as a `tray-route` the next time the window is shown from the tray or the Dock.
+use std::sync::Mutex;
+use std::time::{Duration, Instant};
+
+use serde::Deserialize;
+use serde_json::Value;
+use tauri::image::Image;
+use tauri::menu::{Menu, MenuItem, PredefinedMenuItem, Submenu};
+use tauri::{AppHandle, Runtime};
+
+pub const ID_OPEN: &str = "tray-open";
+pub const ID_READ: &str = "tray-read";
+pub const ID_MUTE: &str = "tray-mute";
+pub const ID_UPDATE: &str = "tray-update";
+pub const ID_SETTINGS: &str = "tray-settings";
+pub const ID_QUIT: &str = "tray-quit";
+pub const ID_APP_PREFIX: &str = "tray-app:";
+
+/// Apps listed in the submenu (more would not fit a menu anyway).
+pub const MAX_APPS: usize = 30;
+/// Windows cuts a tooltip at 127 UTF-16 units; stay under it everywhere.
+pub const MAX_TIP: usize = 120;
+
+#[derive(Debug, Clone, PartialEq, Eq, Deserialize, Default)]
+#[serde(rename_all = "camelCase", default)]
+pub struct TrayApp {
+    /// The app's key in the window (opens it).
+    pub key: String,
+    pub name: String,
+    /// Plain words: "App Store: In review · Play: Live".
+    pub state: String,
+}
+
+/// The menu words in the window's language.
+#[derive(Debug, Clone, PartialEq, Eq, Deserialize)]
+#[serde(rename_all = "camelCase", default)]
+pub struct TrayLabels {
+    pub open: String,
+    pub read_now: String,
+    pub apps: String,
+    pub no_apps: String,
+    pub mute: String,
+    pub unmute: String,
+    pub update: String,
+    pub settings: String,
+    pub quit: String,
+}
+
+impl Default for TrayLabels {
+    fn default() -> TrayLabels {
+        TrayLabels {
+            open: "Open storebound".into(),
+            read_now: "Read the stores now".into(),
+            apps: "Apps".into(),
+            no_apps: "No apps yet".into(),
+            mute: "Mute notifications for 1 hour".into(),
+            unmute: "Unmute notifications".into(),
+            update: "Check for updates".into(),
+            settings: "Settings".into(),
+            quit: "Quit storebound".into(),
+        }
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Deserialize, Default)]
+#[serde(rename_all = "camelCase", default)]
+pub struct TraySummary {
+    pub tooltip: String,
+    /// Apps that need the owner (rejected, halted): above 0 the icon gets a red dot.
+    pub attention: u32,
+    /// Notifications are muted right now.
+    pub muted: bool,
+    pub apps: Vec<TrayApp>,
+    pub labels: TrayLabels,
+}
+
+/// One menu entry, before it is drawn.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum Entry {
+    Item { id: String, label: String, enabled: bool },
+    Separator,
+    Sub { label: String, items: Vec<Entry> },
+}
+
+fn clean(s: &str, max: usize) -> String {
+    let one: String = s.chars().map(|c| if c.is_control() { ' ' } else { c }).collect();
+    let one = one.split_whitespace().collect::<Vec<_>>().join(" ");
+    if one.chars().count() <= max {
+        return one;
+    }
+    let mut cut: String = one.chars().take(max.saturating_sub(1)).collect();
+    cut.push('…');
+    cut
+}
+
+/// The tooltip: the window's text, one line, short; "storebound" when it sent none.
+pub fn tooltip_text(s: &TraySummary) -> String {
+    let t = clean(&s.tooltip, MAX_TIP);
+    if t.is_empty() { "storebound".into() } else { t }
+}
+
+/// The context menu: Open, Read now, Apps (one entry per app with its state), Mute / Unmute, Check for updates,
+/// Settings, Quit.
+pub fn menu_model(s: &TraySummary) -> Vec<Entry> {
+    let item = |id: &str, label: &str| Entry::Item { id: id.into(), label: clean(label, 90), enabled: true };
+    let l = &s.labels;
+    let apps: Vec<Entry> = if s.apps.is_empty() {
+        vec![Entry::Item { id: "tray-none".into(), label: clean(&l.no_apps, 90), enabled: false }]
+    } else {
+        s.apps
+            .iter()
+            .filter(|a| !a.key.is_empty() && !a.key.chars().any(char::is_control))
+            .take(MAX_APPS)
+            .map(|a| {
+                let name = clean(&a.name, 40);
+                let state = clean(&a.state, 60);
+                let label = if state.is_empty() { name } else { format!("{name}  ·  {state}") };
+                Entry::Item { id: format!("{ID_APP_PREFIX}{}", a.key.chars().take(200).collect::<String>()), label, enabled: true }
+            })
+            .collect()
+    };
+    vec![
+        item(ID_OPEN, &l.open),
+        item(ID_READ, &l.read_now),
+        Entry::Separator,
+        Entry::Sub { label: clean(&l.apps, 40), items: apps },
+        Entry::Separator,
+        item(ID_MUTE, if s.muted { &l.unmute } else { &l.mute }),
+        item(ID_UPDATE, &l.update),
+        item(ID_SETTINGS, &l.settings),
+        Entry::Separator,
+        item(ID_QUIT, &l.quit),
+    ]
+}
+
+/// What a menu click does.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub enum Action {
+    /// Show the window.
+    Open,
+    Quit,
+    /// Tell the window (no window needed): `tray-action` with this word.
+    Event(&'static str),
+    /// Show the window on this route (JSON for `tray-route`).
+    Route(String),
+}
+
+pub fn action_of(id: &str) -> Option<Action> {
+    match id {
+        ID_OPEN => Some(Action::Open),
+        ID_READ => Some(Action::Event("read")),
+        ID_MUTE => Some(Action::Event("mute-toggle")),
+        ID_UPDATE => Some(Action::Route(serde_json::json!({ "screen": "settings", "section": "updates" }).to_string())),
+        ID_SETTINGS => Some(Action::Route(serde_json::json!({ "screen": "settings" }).to_string())),
+        ID_QUIT => Some(Action::Quit),
+        _ => id.strip_prefix(ID_APP_PREFIX).filter(|k| !k.is_empty()).map(|k| Action::Route(serde_json::json!({ "screen": "app", "appId": k, "tab": "releases" }).to_string())),
+    }
+}
+
+/// A notification target the window may be sent to later: a small JSON object of strings with a known `screen`.
+pub fn valid_route(json: &str) -> bool {
+    if json.len() > 400 {
+        return false;
+    }
+    let Ok(Value::Object(o)) = serde_json::from_str::<Value>(json) else { return false };
+    let screens = ["portfolio", "app", "apps", "accounts", "ignored", "dependencies", "settings"];
+    o.len() <= 4 && o.values().all(|v| v.as_str().is_some_and(|s| s.len() <= 300 && !s.chars().any(char::is_control))) && o.get("screen").and_then(Value::as_str).is_some_and(|s| screens.contains(&s))
+}
+
+/// The default icon with a red dot (white ring) in the top right corner, for "something needs you". RGBA in, RGBA out.
+pub fn with_attention_dot(rgba: &[u8], w: u32, h: u32) -> Vec<u8> {
+    let mut out = rgba.to_vec();
+    if w == 0 || h == 0 || out.len() != (w as usize) * (h as usize) * 4 {
+        return out;
+    }
+    let side = w.min(h) as f32;
+    let r = side * 0.27;
+    let (cx, cy) = (w as f32 - r - side * 0.02, r + side * 0.02);
+    let blend = |px: &mut [u8], color: [f32; 3], c: f32| {
+        if c <= 0.0 {
+            return;
+        }
+        let a = px[3] as f32 / 255.0;
+        let oa = a + (1.0 - a) * c;
+        for i in 0..3 {
+            // the dot covers what is under it by `c`; the alpha of the icon only grows
+            px[i] = (px[i] as f32 * (1.0 - c) + color[i] * c).round().clamp(0.0, 255.0) as u8;
+        }
+        px[3] = (oa * 255.0).round().clamp(0.0, 255.0) as u8;
+    };
+    for y in 0..h {
+        for x in 0..w {
+            let d = ((x as f32 + 0.5 - cx).powi(2) + (y as f32 + 0.5 - cy).powi(2)).sqrt();
+            let i = ((y * w + x) * 4) as usize;
+            let px = &mut out[i..i + 4];
+            blend(px, [255.0, 255.0, 255.0], (r + 0.5 - d).clamp(0.0, 1.0));
+            blend(px, [229.0, 57.0, 53.0], (r * 0.78 + 0.5 - d).clamp(0.0, 1.0));
+        }
+    }
+    out
+}
+
+// ---- where the last notification pointed ----
+
+static PENDING: Mutex<Option<(String, Instant)>> = Mutex::new(None);
+const PENDING_FOR: Duration = Duration::from_secs(2 * 3600);
+
+/// Remembers the route (JSON) of the notification just shown. Ignores anything `valid_route` refuses.
+pub fn set_pending(route: &str) {
+    if valid_route(route) {
+        if let Ok(mut p) = PENDING.lock() {
+            *p = Some((route.to_string(), Instant::now()));
+        }
+    }
+}
+
+/// The remembered route, once (it is forgotten after it is handed out, and after two hours).
+pub fn take_pending() -> Option<String> {
+    let (route, at) = PENDING.lock().ok()?.take()?;
+    (at.elapsed() < PENDING_FOR).then_some(route)
+}
+
+// ---- drawing ----
+
+static LAST: Mutex<Option<String>> = Mutex::new(None);
+
+fn build_menu<R: Runtime>(app: &AppHandle<R>, model: &[Entry]) -> tauri::Result<Menu<R>> {
+    let menu = Menu::new(app)?;
+    for e in model {
+        match e {
+            Entry::Item { id, label, enabled } => menu.append(&MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)?,
+            Entry::Separator => menu.append(&PredefinedMenuItem::separator(app)?)?,
+            Entry::Sub { label, items } => {
+                let sub = Submenu::new(app, label, true)?;
+                for it in items {
+                    if let Entry::Item { id, label, enabled } = it {
+                        sub.append(&MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)?;
+                    }
+                }
+                menu.append(&sub)?;
+            }
+        }
+    }
+    Ok(menu)
+}
+
+/// The menu shown before the window has sent anything (English words).
+pub fn initial_menu<R: Runtime>(app: &AppHandle<R>) -> tauri::Result<Menu<R>> {
+    build_menu(app, &menu_model(&TraySummary::default()))
+}
+
+/// Applies a summary: tooltip, menu and icon of the tray with id `main`. Skips the work when nothing changed.
+pub fn apply<R: Runtime>(app: &AppHandle<R>, s: &TraySummary) -> tauri::Result<()> {
+    let Some(tray) = app.tray_by_id("main") else { return Ok(()) };
+    let key = format!("{s:?}");
+    if LAST.lock().ok().is_some_and(|l| l.as_deref() == Some(key.as_str())) {
+        return Ok(());
+    }
+    tray.set_tooltip(Some(tooltip_text(s)))?;
+    tray.set_menu(Some(build_menu(app, &menu_model(s))?))?;
+    if let Some(icon) = app.default_window_icon() {
+        let img = if s.attention > 0 { Image::new_owned(with_attention_dot(icon.rgba(), icon.width(), icon.height()), icon.width(), icon.height()) } else { icon.clone() };
+        tray.set_icon(Some(img))?;
+    }
+    if let Ok(mut l) = LAST.lock() {
+        *l = Some(key);
+    }
+    Ok(())
+}
diff --git a/apps/desktop/src-tauri/src/workspace.rs b/apps/desktop/src-tauri/src/workspace.rs
index e8e7ab3..b1917a2 100644
--- a/apps/desktop/src-tauri/src/workspace.rs
+++ b/apps/desktop/src-tauri/src/workspace.rs
@@ -269,9 +269,39 @@ pub struct CacheSettings {
 #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
 #[serde(rename_all = "camelCase", default)]
 pub struct NotifySettings {
+    /// Other release state changes (submitted, in review).
     pub review_state: bool,
+    /// A version the store rejected.
+    pub rejected: bool,
+    /// A version that passed review (ready for release).
+    pub approved: bool,
+    /// A version that went live or started rolling out.
+    pub live: bool,
     pub low_reviews: bool,
+    /// A Play crash / ANR rate over the threshold, or a halted rollout.
     pub crash: bool,
+    pub quiet_hours: QuietHours,
+}
+
+/// No notification between `from` and `to` (HH:MM, local time; the window may cross midnight).
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase", default)]
+pub struct QuietHours {
+    pub enabled: bool,
+    pub from: String,
+    pub to: String,
+}
+
+impl Default for QuietHours {
+    fn default() -> QuietHours {
+        QuietHours { enabled: false, from: "23:00".into(), to: "08:00".into() }
+    }
+}
+
+/// "HH:MM" with a valid hour and minute.
+pub fn valid_hhmm(s: &str) -> bool {
+    let b = s.as_bytes();
+    b.len() == 5 && b[2] == b':' && b.iter().enumerate().all(|(i, c)| i == 2 || c.is_ascii_digit()) && s[..2].parse::<u8>().is_ok_and(|h| h < 24) && s[3..].parse::<u8>().is_ok_and(|m| m < 60)
 }
 
 #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
@@ -300,7 +330,7 @@ impl Default for CacheSettings {
 
 impl Default for NotifySettings {
     fn default() -> NotifySettings {
-        NotifySettings { review_state: true, low_reviews: true, crash: true }
+        NotifySettings { review_state: true, rejected: true, approved: true, live: true, low_reviews: true, crash: true, quiet_hours: QuietHours::default() }
     }
 }
 
@@ -327,6 +357,9 @@ pub fn check_settings(s: &Settings) -> Result<(), String> {
     if !KEEP_DAYS.contains(&s.cache.keep_days) {
         return Err("keep saved reads: 0 (always), 7, 30, 90 or 365 days".into());
     }
+    if !valid_hhmm(&s.notify.quiet_hours.from) || !valid_hhmm(&s.notify.quiet_hours.to) {
+        return Err("quiet hours: times as HH:MM (00:00 to 23:59)".into());
+    }
     if !["stable", "beta"].contains(&s.channel.as_str()) {
         return Err("channel: stable or beta".into());
     }
diff --git a/apps/desktop/src-tauri/tests/tray.rs b/apps/desktop/src-tauri/tests/tray.rs
new file mode 100644
index 0000000..0707c06
--- /dev/null
+++ b/apps/desktop/src-tauri/tests/tray.rs
@@ -0,0 +1,122 @@
+//! The tray's pure parts: menu model, tooltip, click actions, notification targets, the attention dot, settings.
+use storebound_desktop::tray::*;
+use storebound_desktop::workspace::{check_settings, valid_hhmm, Settings};
+
+fn summary() -> TraySummary {
+    TraySummary {
+        tooltip: "storebound · 2 in review · 1 needs you".into(),
+        attention: 1,
+        muted: false,
+        apps: vec![
+            TrayApp { key: "k1".into(), name: "First".into(), state: "App Store: In review · Play: Live".into() },
+            TrayApp { key: "k2".into(), name: "Second".into(), state: String::new() },
+        ],
+        labels: TrayLabels::default(),
+    }
+}
+
+fn ids(m: &[Entry]) -> Vec<String> {
+    m.iter().filter_map(|e| if let Entry::Item { id, .. } = e { Some(id.clone()) } else { None }).collect()
+}
+
+#[test]
+fn menu_has_every_entry_in_order() {
+    let m = menu_model(&summary());
+    assert_eq!(ids(&m), vec![ID_OPEN, ID_READ, ID_MUTE, ID_UPDATE, ID_SETTINGS, ID_QUIT]);
+    let Entry::Sub { label, items } = &m[3] else { panic!("the Apps submenu comes after the first separator") };
+    assert_eq!(label, "Apps");
+    assert_eq!(items.len(), 2);
+    let Entry::Item { id, label, enabled } = &items[0] else { panic!() };
+    assert_eq!((id.as_str(), *enabled), ("tray-app:k1", true));
+    assert!(label.contains("First") && label.contains("In review"), "{label}");
+    let Entry::Item { label, .. } = &items[1] else { panic!() };
+    assert_eq!(label, "Second", "an app without a state shows its name only");
+}
+
+#[test]
+fn mute_entry_follows_the_state_and_empty_apps_say_so() {
+    let mut s = summary();
+    s.muted = true;
+    s.apps.clear();
+    let m = menu_model(&s);
+    let Entry::Item { label, .. } = m.iter().find(|e| matches!(e, Entry::Item { id, .. } if id == ID_MUTE)).unwrap() else { panic!() };
+    assert_eq!(label, "Unmute notifications");
+    let Entry::Sub { items, .. } = &m[3] else { panic!() };
+    assert!(matches!(&items[0], Entry::Item { enabled: false, label, .. } if label == "No apps yet"));
+}
+
+#[test]
+fn tooltip_is_one_short_line() {
+    assert_eq!(tooltip_text(&summary()), "storebound · 2 in review · 1 needs you");
+    let mut s = summary();
+    s.tooltip = "a\nb\t c".into();
+    assert_eq!(tooltip_text(&s), "a b c");
+    s.tooltip = "x".repeat(500);
+    assert_eq!(tooltip_text(&s).chars().count(), MAX_TIP);
+    s.tooltip = "  ".into();
+    assert_eq!(tooltip_text(&s), "storebound");
+}
+
+#[test]
+fn clicks_map_to_actions() {
+    assert_eq!(action_of(ID_OPEN), Some(Action::Open));
+    assert_eq!(action_of(ID_QUIT), Some(Action::Quit));
+    assert_eq!(action_of(ID_READ), Some(Action::Event("read")));
+    assert_eq!(action_of(ID_MUTE), Some(Action::Event("mute-toggle")));
+    assert_eq!(action_of("tray-app:k1"), Some(Action::Route(r#"{"appId":"k1","screen":"app","tab":"releases"}"#.into())));
+    assert_eq!(action_of("tray-app:"), None);
+    assert_eq!(action_of("other"), None);
+    let Some(Action::Route(r)) = action_of(ID_UPDATE) else { panic!() };
+    assert!(valid_route(&r) && r.contains("updates"));
+}
+
+#[test]
+fn only_known_small_routes_are_remembered() {
+    assert!(valid_route(r#"{"screen":"app","appId":"k1","tab":"releases"}"#));
+    assert!(valid_route(r#"{"screen":"portfolio"}"#));
+    assert!(!valid_route(r#"{"screen":"evil"}"#));
+    assert!(!valid_route(r#"{"screen":"app","appId":5}"#));
+    assert!(!valid_route("[]"));
+    assert!(!valid_route("not json"));
+    assert!(!valid_route(&format!(r#"{{"screen":"app","appId":"{}"}}"#, "a".repeat(500))));
+    // handed out once
+    set_pending(r#"{"screen":"portfolio"}"#);
+    assert_eq!(take_pending().as_deref(), Some(r#"{"screen":"portfolio"}"#));
+    assert_eq!(take_pending(), None);
+    set_pending(r#"{"screen":"evil"}"#);
+    assert_eq!(take_pending(), None);
+}
+
+#[test]
+fn attention_dot_changes_only_the_corner() {
+    let (w, h) = (32u32, 32u32);
+    let base: Vec<u8> = std::iter::repeat([10u8, 20, 30, 255]).take((w * h) as usize).flatten().collect();
+    let out = with_attention_dot(&base, w, h);
+    assert_eq!(out.len(), base.len());
+    let at = |v: &[u8], x: u32, y: u32| -> [u8; 4] { let i = ((y * w + x) * 4) as usize; [v[i], v[i + 1], v[i + 2], v[i + 3]] };
+    assert_eq!(at(&out, 2, 30), [10, 20, 30, 255], "the bottom left stays");
+    let dot = at(&out, 25, 6);
+    assert!(dot[0] > 200 && dot[1] < 90 && dot[2] < 90, "red in the middle of the dot: {dot:?}");
+    // transparent icon: the dot is opaque, the rest stays clear
+    let clear = vec![0u8; (w * h * 4) as usize];
+    let out = with_attention_dot(&clear, w, h);
+    assert_eq!(at(&out, 2, 30)[3], 0);
+    assert_eq!(at(&out, 25, 6)[3], 255);
+    // a wrong buffer size is returned unchanged
+    assert_eq!(with_attention_dot(&[1, 2, 3], w, h), vec![1, 2, 3]);
+}
+
+#[test]
+fn quiet_hours_settings_are_checked_and_default_off() {
+    let d = Settings::default();
+    assert!(!d.notify.quiet_hours.enabled);
+    assert_eq!((d.notify.quiet_hours.from.as_str(), d.notify.quiet_hours.to.as_str()), ("23:00", "08:00"));
+    assert!(d.notify.rejected && d.notify.approved && d.notify.live);
+    assert!(valid_hhmm("00:00") && valid_hhmm("23:59"));
+    assert!(!valid_hhmm("24:00") && !valid_hhmm("7:00") && !valid_hhmm("12:60") && !valid_hhmm("ab:cd"));
+    let mut s = d.clone();
+    s.notify.quiet_hours.from = "25:00".into();
+    assert!(check_settings(&s).is_err());
+    let old: Settings = serde_json::from_value(serde_json::json!({ "notify": { "crash": false } })).unwrap();
+    assert!(!old.notify.crash && old.notify.rejected && !old.notify.quiet_hours.enabled, "an older file gets the new defaults");
+}
diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 4c77cad..a72750e 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -1,12 +1,12 @@
 // Shell: sidebar (studios, collapsible, with their apps; the workspace), top bar (breadcrumbs, last read, refresh),
 // the screen, the command palette (Cmd/Ctrl+K), toasts and the first-run welcome guide.
 import { useCallback, useEffect, useMemo, useState } from 'react';
-import { FIXTURES, onDeepLink, onDeepLinkFolder } from './api';
+import { FIXTURES, onDeepLink, onDeepLinkFolder, onTrayRoute } from './api';
 import { devSwitch } from './dev/switches';
 import { type Key, t } from './i18n';
 import { ago, num } from './lib/format';
 import { groupByStudio, type UnifiedApp } from './lib/identity';
-import { NavCtx, parseStart, type Route, sameRoute, TAB_ICON, TAB_KEY, tabsFor, WORKSPACE, type WorkspaceScreen } from './nav';
+import { NavCtx, parseRouteJson, parseStart, type Route, sameRoute, TAB_ICON, TAB_KEY, tabsFor, WORKSPACE, type WorkspaceScreen } from './nav';
 import { usePrefs } from './prefs-ctx';
 import { Accounts } from './screens/Accounts';
 import { AppFolders } from './screens/AppFolders';
@@ -67,7 +67,9 @@ export function App({ onTheme }: { onTheme: () => void }) {
     const un = onDeepLink(s => { const r = parseStart(s, []); if (r) go(r); });
     // `storebound desktop` in an app folder: the host added (after its native dialog) or found that folder
     const unFolder = onDeepLinkFolder(id => { d.reload().catch(() => {}).finally(() => go({ screen: 'app', appId: id, tab: 'releases' })); });
-    return () => { un.then(f => f()); unFolder.then(f => f()); };
+    // the tray menu (an app, Settings, Check for updates) and the first show after a notification
+    const unTray = onTrayRoute(s => { const r = parseRouteJson(s); if (r) go(r); });
+    return () => { un.then(f => f()); unFolder.then(f => f()); unTray.then(f => f()); };
   }, [go, d.reload]);
 
   const app = route.screen === 'app' ? d.appByKey(route.appId) : undefined;
diff --git a/apps/desktop/src/api.ts b/apps/desktop/src/api.ts
index 68cce68..a431266 100644
--- a/apps/desktop/src/api.ts
+++ b/apps/desktop/src/api.ts
@@ -6,6 +6,7 @@ import { listen as tauriListen, type UnlistenFn } from '@tauri-apps/api/event';
 import type { AccountCheck, AppsListResult, DraftsResult, IconResult, ListingsResult, MethodDescriptor, PortfolioResult, ProgressParams, ToolResult } from '../../../cli/lib/desktop-protocol';
 import type { DeclarationsResult, ListingText, RendersResult } from '../../../cli/lib/desktop-protocol';
 import type { Overrides } from './lib/identity';
+import type { TraySummary } from './lib/tray';
 
 export type {
   AccountCheck, AppIdentity, AppsListResult, AppStatus, CatalogParity, DraftsResult, StoreApp, IconResult, ListingField, ListingLocale, ListingsResult, MethodDescriptor, PortfolioResult,
@@ -33,10 +34,11 @@ export interface Settings {
   /** autoRead / everyMinutes: the background reader (store.tsx); autoMinutes / onLaunch: older builds' settings, kept for them. */
   refresh: { autoMinutes: 0 | 15 | 30 | 60 | 180 | 720; onLaunch: boolean; parallel: number; icons: boolean; autoRead: boolean; everyMinutes: 0 | 5 | 15 | 30 | 60 };
   cache: { keepDays: 0 | 7 | 30 | 90 | 365 };
-  notify: { reviewState: boolean; lowReviews: boolean; crash: boolean };
+  /** reviewState: other state changes (submitted, in review); rejected / approved / live: own toggles; crash also covers a halted rollout. quietHours: no notification between from and to (HH:MM, may cross midnight). */
+  notify: { reviewState: boolean; rejected: boolean; approved: boolean; live: boolean; lowReviews: boolean; crash: boolean; quietHours: { enabled: boolean; from: string; to: string } };
   channel: 'stable' | 'beta';
 }
-export const DEFAULT_SETTINGS: Settings = { refresh: { autoMinutes: 0, onLaunch: false, parallel: 4, icons: true, autoRead: true, everyMinutes: 15 }, cache: { keepDays: 30 }, notify: { reviewState: true, lowReviews: true, crash: true }, channel: 'stable' };
+export const DEFAULT_SETTINGS: Settings = { refresh: { autoMinutes: 0, onLaunch: false, parallel: 4, icons: true, autoRead: true, everyMinutes: 15 }, cache: { keepDays: 30 }, notify: { reviewState: true, rejected: true, approved: true, live: true, lowReviews: true, crash: true, quietHours: { enabled: false, from: '23:00', to: '08:00' } }, channel: 'stable' };
 export interface Workspace { studios: Studio[]; overrides: Overrides; settings: Settings }
 export interface AccountApps { account: string; entry: CacheEntry<AppsListResult> | null }
 export interface CacheInfo { rows: number; bytes: number; oldest: string | null; file_bytes: number }
@@ -121,7 +123,10 @@ export const api = {
   setSettings: (settings: Settings) => invoke<Settings>('settings_set', { settings }),
   cacheInfo: () => invoke<CacheInfo>('cache_info'),
   revealData: () => invoke<void>('data_reveal'),
-  notify: (title: string, body: string) => invoke<void>('notify', { title, body }),
+  /** target: a route (JSON) the window opens on when it is next shown from the tray (the notification plugin has no click callback on desktop). */
+  notify: (title: string, body: string, target?: string) => invoke<void>('notify', { title, body, target: target ?? null }),
+  /** Pushes the tray's tooltip, attention flag and app list after a read (lib/tray.ts). */
+  trayUpdate: (summary: TraySummary) => invoke<void>('tray_update', { summary }),
   /** Native confirmation first; true when everything was forgotten. */
   reset: () => invoke<boolean>('app_reset'),
   /** Offline (folders) or live; live also reads the given store-only apps (store targets). */
@@ -172,4 +177,8 @@ export const onDownload = (cb: (e: DownloadEvent) => void): Promise<UnlistenFn>
 export const onDeepLink = (cb: (screen: string) => void): Promise<UnlistenFn> => listen<string>('deep-link', cb);
 /** storebound://open?path=... selected or added an app folder (its project id). */
 export const onDeepLinkFolder = (cb: (projectId: string) => void): Promise<UnlistenFn> => listen<string>('deep-link-folder', cb);
+/** A tray menu click (or the first window show after a notification) that opens a route (JSON, see parseRouteJson). */
+export const onTrayRoute = (cb: (route: string) => void): Promise<UnlistenFn> => listen<string>('tray-route', cb);
+/** A tray menu click that is not navigation: read the stores now, toggle mute. */
+export const onTrayAction = (cb: (action: 'read' | 'mute-toggle') => void): Promise<UnlistenFn> => listen<'read' | 'mute-toggle'>('tray-action', cb);
 export const onUpdateProgress = (cb: (p: { received: number; total: number | null }) => void): Promise<UnlistenFn> => listen('update-progress', cb);
diff --git a/apps/desktop/src/dev/fixtures.ts b/apps/desktop/src/dev/fixtures.ts
index 9acb44a..0b60aa7 100644
--- a/apps/desktop/src/dev/fixtures.ts
+++ b/apps/desktop/src/dev/fixtures.ts
@@ -569,7 +569,7 @@ async function answer(cmd: string, a: Record<string, unknown>): Promise<unknown>
     case 'overrides_set': overrides = a.overrides as Overrides; return overrides;
     case 'settings_set': settings = a.settings as Settings; return settings;
     case 'cache_info': return { rows: 214, bytes: 3_412_000, oldest: iso(60 * 24 * 26), file_bytes: 4_718_592 };
-    case 'data_reveal': case 'notify': return null;
+    case 'data_reveal': case 'notify': case 'tray_update': return null;
     case 'app_reset': return false;
     case 'update_check': await sleep(300); return { current: '0.1.0', channel: settings.channel, available: null, notes: null, date: null };
     case 'update_install': return false;
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index c400f03..f989257 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -782,6 +782,41 @@ export const en = {
   'notify.lowTitle': '{name}: {count} new low ratings',
   'notify.lowTitle_one': '{name}: a new low rating',
   'notify.crashTitle': '{name}: over the Play threshold',
+  'notify.rejectedTitle': '{name}: rejected by {store}',
+  'notify.rejectedBody': 'Version {version} was rejected.',
+  'notify.approvedTitle': '{name}: approved',
+  'notify.approvedBody': '{store} {version} passed review and is ready for release.',
+  'notify.liveTitle': '{name}: live',
+  'notify.liveBody': '{store} {version} is live.',
+  'notify.haltedTitle': '{name}: rollout halted',
+  'notify.haltedBody': '{store} {version} was halted.',
+  'tray.open': 'Open storebound',
+  'tray.readNow': 'Read the stores now',
+  'tray.apps': 'Apps',
+  'tray.noApps': 'No apps yet',
+  'tray.noState': 'no release read yet',
+  'tray.mute': 'Mute notifications for 1 hour',
+  'tray.unmute': 'Unmute notifications',
+  'tray.update': 'Check for updates',
+  'tray.settings': 'Settings',
+  'tray.quit': 'Quit storebound',
+  'tray.tipReview': '{count} in review',
+  'tray.tipAttention': '{count} needs you',
+  'tray.mutedTip': 'muted',
+  'set.nRejected': 'Rejected',
+  'set.nRejectedHint': 'A version the store rejected, with its reason when the store gives one',
+  'set.nApproved': 'Approved and ready for release',
+  'set.nApprovedHint': 'A version passed review',
+  'set.nLive': 'Live',
+  'set.nLiveHint': 'A version reached the store page or a rollout',
+  'set.quiet': 'Quiet hours',
+  'set.quietHint': 'No notifications in this window (they are dropped, not saved for later)',
+  'set.quietFrom': 'From',
+  'set.quietTo': 'To',
+  'set.muteHour': 'Mute for 1 hour',
+  'set.unmute': 'Unmute ({until})',
+  'set.muted': 'Muted until {until}',
+  'set.clickNote': "Clicking a notification does not open the app on desktop; the next time you open the window from the tray, it goes to that app's Releases tab.",
   'set.lead': 'Studios, accounts, store reads, the offline cache, language, theme, notifications and more. Everything stays on this computer.',
   'set.sections': 'Settings sections',
   'set.studios': 'Studios & accounts',
@@ -854,11 +889,11 @@ export const en = {
   'set.always': 'Always',
   'set.notifications': 'Notifications',
   'set.notificationsSub': 'After a read, when something changed since the previous one',
-  'set.nReview': 'Review and release state changes',
-  'set.nReviewHint': 'In review, approved, rejected, live, halted',
+  'set.nReview': 'Other release state changes',
+  'set.nReviewHint': 'Submitted, in review',
   'set.nLow': 'New 1 or 2 star reviews',
   'set.nLowHint': 'When the Reviews tab reads new ones',
-  'set.nCrash': 'Crash or ANR rate over the threshold',
+  'set.nCrash': 'Rollout halted, or crash / ANR over the threshold',
   'set.nCrashHint': 'Google Play bad behavior thresholds',
   'set.testNotify': 'Send a test notification',
   'set.testTitle': 'storebound',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index afc278c..0fc5ff5 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -784,6 +784,41 @@ export const tr: Record<keyof typeof en, string> = {
   'notify.lowTitle': '{name}: {count} yeni düşük puan',
   'notify.lowTitle_one': '{name}: yeni bir düşük puan',
   'notify.crashTitle': '{name}: Play eşiğinin üstünde',
+  'notify.rejectedTitle': '{name}: {store} reddetti',
+  'notify.rejectedBody': '{version} sürümü reddedildi.',
+  'notify.approvedTitle': '{name}: onaylandı',
+  'notify.approvedBody': '{store} {version} incelemeyi geçti, yayına hazır.',
+  'notify.liveTitle': '{name}: yayında',
+  'notify.liveBody': '{store} {version} yayında.',
+  'notify.haltedTitle': '{name}: kademeli yayın durduruldu',
+  'notify.haltedBody': '{store} {version} durduruldu.',
+  'tray.open': "storebound'u aç",
+  'tray.readNow': 'Mağazaları şimdi oku',
+  'tray.apps': 'Uygulamalar',
+  'tray.noApps': 'Henüz uygulama yok',
+  'tray.noState': 'henüz okunmadı',
+  'tray.mute': 'Bildirimleri 1 saat sustur',
+  'tray.unmute': 'Bildirimlerin sesini aç',
+  'tray.update': 'Güncellemeleri denetle',
+  'tray.settings': 'Ayarlar',
+  'tray.quit': "storebound'dan çık",
+  'tray.tipReview': '{count} incelemede',
+  'tray.tipAttention': '{count} sizi bekliyor',
+  'tray.mutedTip': 'sessiz',
+  'set.nRejected': 'Reddedildi',
+  'set.nRejectedHint': 'Mağazanın reddettiği sürüm; mağaza verirse gerekçesiyle',
+  'set.nApproved': 'Onaylandı, yayına hazır',
+  'set.nApprovedHint': 'Bir sürüm incelemeyi geçti',
+  'set.nLive': 'Yayında',
+  'set.nLiveHint': 'Bir sürüm mağaza sayfasına ya da kademeli yayına ulaştı',
+  'set.quiet': 'Sessiz saatler',
+  'set.quietHint': 'Bu aralıkta bildirim gelmez (sonraya saklanmaz, atılır)',
+  'set.quietFrom': 'Başlangıç',
+  'set.quietTo': 'Bitiş',
+  'set.muteHour': '1 saat sustur',
+  'set.unmute': 'Sesi aç ({until})',
+  'set.muted': '{until} saatine kadar sessiz',
+  'set.clickNote': 'Masaüstünde bildirime tıklamak uygulamayı açmaz; pencereyi bir sonraki sefer tepsiden açtığınızda o uygulamanın Yayınlar sekmesine gider.',
   'set.lead': 'Stüdyolar, hesaplar, mağaza okumaları, çevrimdışı önbellek, dil, tema, bildirimler ve dahası. Hepsi bu bilgisayarda kalır.',
   'set.sections': 'Ayar bölümleri',
   'set.studios': 'Stüdyolar ve hesaplar',
@@ -856,11 +891,11 @@ export const tr: Record<keyof typeof en, string> = {
   'set.always': 'Her zaman',
   'set.notifications': 'Bildirimler',
   'set.notificationsSub': 'Bir okumadan sonra, öncekinden beri bir şey değiştiyse',
-  'set.nReview': 'İnceleme ve yayın durumu değişiklikleri',
-  'set.nReviewHint': 'İncelemede, onaylandı, reddedildi, yayında, durduruldu',
+  'set.nReview': 'Diğer yayın durumu değişiklikleri',
+  'set.nReviewHint': 'Gönderildi, incelemede',
   'set.nLow': 'Yeni 1 ya da 2 yıldızlı yorumlar',
   'set.nLowHint': 'Yorumlar sekmesi yenilerini okuduğunda',
-  'set.nCrash': 'Çökme ya da ANR oranı eşiğin üstünde',
+  'set.nCrash': 'Kademeli yayın durdu, ya da çökme / ANR eşiğin üstünde',
   'set.nCrashHint': 'Google Play kötü davranış eşikleri',
   'set.testNotify': 'Deneme bildirimi gönder',
   'set.testTitle': 'storebound',
diff --git a/apps/desktop/src/lib/normalize.ts b/apps/desktop/src/lib/normalize.ts
index 36e7844..8b584de 100644
--- a/apps/desktop/src/lib/normalize.ts
+++ b/apps/desktop/src/lib/normalize.ts
@@ -49,16 +49,22 @@ function overrides(v: unknown): Overrides {
 function pick<T>(v: unknown, d: T, ok: (x: unknown) => boolean): T { return ok(v) ? (v as T) : d; }
 const isNum = (x: unknown) => typeof x === 'number' && Number.isFinite(x);
 const isBool = (x: unknown) => typeof x === 'boolean';
+const isHm = (x: unknown) => typeof x === 'string' && /^(?:[01][0-9]|2[0-3]):[0-5][0-9]$/.test(x);
 
 export function normalizeSettings(v: unknown): Settings {
   const d = DEFAULT_SETTINGS;
   if (!isRec(v)) return d;
   const r = isRec(v.refresh) ? v.refresh : {}, c = isRec(v.cache) ? v.cache : {}, n = isRec(v.notify) ? v.notify : {};
+  const q = isRec(n.quietHours) ? n.quietHours : {};
   return {
     refresh: { autoMinutes: pick(r.autoMinutes, d.refresh.autoMinutes, isNum), onLaunch: pick(r.onLaunch, d.refresh.onLaunch, isBool), parallel: pick(r.parallel, d.refresh.parallel, isNum), icons: pick(r.icons, d.refresh.icons, isBool),
       autoRead: pick(r.autoRead, d.refresh.autoRead, isBool), everyMinutes: pick(r.everyMinutes, d.refresh.everyMinutes, (x: unknown) => [0, 5, 15, 30, 60].includes(x as number)) },
     cache: { keepDays: pick(c.keepDays, d.cache.keepDays, isNum) },
-    notify: { reviewState: pick(n.reviewState, d.notify.reviewState, isBool), lowReviews: pick(n.lowReviews, d.notify.lowReviews, isBool), crash: pick(n.crash, d.notify.crash, isBool) },
+    notify: {
+      reviewState: pick(n.reviewState, d.notify.reviewState, isBool), rejected: pick(n.rejected, d.notify.rejected, isBool), approved: pick(n.approved, d.notify.approved, isBool), live: pick(n.live, d.notify.live, isBool),
+      lowReviews: pick(n.lowReviews, d.notify.lowReviews, isBool), crash: pick(n.crash, d.notify.crash, isBool),
+      quietHours: { enabled: pick(q.enabled, d.notify.quietHours.enabled, isBool), from: pick(q.from, d.notify.quietHours.from, isHm), to: pick(q.to, d.notify.quietHours.to, isHm) },
+    },
     channel: v.channel === 'beta' ? 'beta' : 'stable',
   };
 }
diff --git a/apps/desktop/src/lib/notify.ts b/apps/desktop/src/lib/notify.ts
index 247f8ba..e6b48f0 100644
--- a/apps/desktop/src/lib/notify.ts
+++ b/apps/desktop/src/lib/notify.ts
@@ -4,7 +4,18 @@ import type { PortfolioResult } from '../api';
 import { sameVersion } from '../../../../cli/lib/portfolio';
 import { healthSeries, type HealthSnapshot, isError, PLAY_THRESHOLDS, type Review } from './model';
 
-export interface ReleaseChange { project: string; name: string; store: 'ios' | 'android'; version: string; from: string; to: string }
+/** Which Settings > Notifications toggle a release change belongs to. */
+export type ReleaseKind = 'rejected' | 'approved' | 'live' | 'halted' | 'state';
+export interface ReleaseChange { project: string; name: string; store: 'ios' | 'android'; version: string; from: string; to: string; kind: ReleaseKind; /** The store's reason text, when the status carries one. */ reason?: string }
+
+/** The notification kind of a transition into phase `to`.*/
+export function releaseKind(to: string): ReleaseKind {
+  if (to === 'rejected') return 'rejected';
+  if (to === 'approved') return 'approved';
+  if (to === 'live' || to === 'rollout') return 'live';
+  if (to === 'halted') return 'halted';
+  return 'state';
+}
 
 /** Phase changes of the same version on the same store that the owner waits for: review in / out, approved, rejected, live, halted. */
 export function releaseChanges(prev: PortfolioResult | null | undefined, next: PortfolioResult): ReleaseChange[] {
@@ -18,7 +29,12 @@ export function releaseChanges(prev: PortfolioResult | null | undefined, next: P
       if (!r.version) continue;
       const old = (before.release.all ?? []).find(x => x.store === r.store && (x.version === r.version || sameVersion(x.version, r.version)));
       if (!old || old.phase === r.phase) continue;
-      if (WATCH.has(r.phase) || WATCH.has(old.phase)) out.push({ project: a.project, name: a.app?.name ?? a.project, store: r.store, version: r.version, from: old.phase, to: r.phase });
+      // a version the developer withdrew on their own is not a store decision
+      if (r.state === 'DEVELOPER_REJECTED') continue;
+      if (WATCH.has(r.phase) || WATCH.has(old.phase)) {
+        const reason = typeof r.reason === 'string' && r.reason.trim() ? r.reason.trim().slice(0, 160) : undefined;
+        out.push({ project: a.project, name: a.app?.name ?? a.project, store: r.store, version: r.version, from: old.phase, to: r.phase, kind: releaseKind(r.phase), ...(reason ? { reason } : {}) });
+      }
     }
   }
   return out;
@@ -40,3 +56,55 @@ export function crashCrossed(prev: HealthSnapshot | null | undefined, next: Heal
   for (const k of ['crash', 'anr'] as const) if (now[k].tone === 'bad' && was[k].tone !== 'bad') out.push(k);
   return out;
 }
+
+// ---- when a notification may show: kind toggle, quiet hours, mute ----
+
+export interface QuietHours { enabled: boolean; from: string; to: string }
+export interface NotifyPrefs { reviewState: boolean; rejected: boolean; approved: boolean; live: boolean; lowReviews: boolean; crash: boolean; quietHours: QuietHours }
+export type NoticeKind = ReleaseKind | 'lowReviews' | 'crash' | 'test';
+
+/** The toggle of a notification kind ("halted" shares the crash toggle: both are "something is going wrong"). */
+export function kindEnabled(n: NotifyPrefs, kind: NoticeKind): boolean {
+  switch (kind) {
+    case 'rejected': return n.rejected;
+    case 'approved': return n.approved;
+    case 'live': return n.live;
+    case 'halted': case 'crash': return n.crash;
+    case 'state': return n.reviewState;
+    case 'lowReviews': return n.lowReviews;
+    case 'test': return true;
+  }
+}
+
+const minutesOf = (hhmm: string): number | null => {
+  const m = /^([01]\d|2[0-3]):([0-5]\d)$/.exec(hhmm);
+  return m ? Number(m[1]) * 60 + Number(m[2]) : null;
+};
+
+/** True inside the quiet window (it may cross midnight: 23:00-08:00). Off, equal ends or a bad time = never quiet. */
+export function inQuietHours(q: QuietHours, now: Date): boolean {
+  if (!q.enabled) return false;
+  const from = minutesOf(q.from), to = minutesOf(q.to);
+  if (from === null || to === null || from === to) return false;
+  const cur = now.getHours() * 60 + now.getMinutes();
+  return from < to ? cur >= from && cur < to : cur >= from || cur < to;
+}
+
+/** "Mute for 1 hour": muted while `muteUntil` (epoch ms) is in the future. */
+export const isMuted = (muteUntil: number, now = Date.now()): boolean => muteUntil > now;
+
+/** Whether a notification of `kind` may show now. A test notification ignores quiet hours and mute (it checks delivery). */
+export function mayNotify(n: NotifyPrefs, kind: NoticeKind, o: { now?: Date; muteUntil?: number } = {}): boolean {
+  if (kind === 'test') return true;
+  const now = o.now ?? new Date();
+  return kindEnabled(n, kind) && !inQuietHours(n.quietHours, now) && !isMuted(o.muteUntil ?? 0, now.getTime());
+}
+
+/**
+ * Delay before the next background pass: the interval with +-10% jitter, doubled for every failure in a row (at most
+ * x16, capped at 2 hours before the jitter). `rand` is in [0, 1).
+ */
+export function nextReadDelay(everyMinutes: number, failures: number, rand = Math.random()): number {
+  const base = everyMinutes * 60_000 * 2 ** Math.min(Math.max(failures, 0), 4);
+  return Math.round(Math.min(base, 2 * 3_600_000) * (0.9 + rand * 0.2));
+}
diff --git a/apps/desktop/src/lib/tray.ts b/apps/desktop/src/lib/tray.ts
new file mode 100644
index 0000000..7211e2b
--- /dev/null
+++ b/apps/desktop/src/lib/tray.ts
@@ -0,0 +1,48 @@
+// What the tray shows: one short state per app and store, the tooltip counts and the attention flag. Pure; the host
+// (src-tauri/src/tray.rs) only draws it.
+import type { AppStatus } from '../api';
+import type { ReleasePhase } from '../../../../cli/lib/desktop-protocol';
+
+export interface TrayApp { key: string; name: string; state: string }
+export interface TrayLabels { open: string; readNow: string; apps: string; noApps: string; mute: string; unmute: string; update: string; settings: string; quit: string }
+export interface TraySummary { tooltip: string; attention: number; muted: boolean; apps: TrayApp[]; labels: TrayLabels }
+
+type Phase = ReleasePhase;
+
+/** What matters most first: a rejection, a halt, a review, an approval, a rollout, live. */
+const RANK: Record<string, number> = { rejected: 0, halted: 1, review: 2, sent: 2, approved: 3, rollout: 4, live: 5, released: 6 };
+
+/** The release of each store that the tray reports: the one with the most pressing phase (testing / draft only when nothing else). */
+export function trayPhases(s: AppStatus | undefined): { ios?: Phase; android?: Phase } {
+  const out: { ios?: Phase; android?: Phase } = {};
+  for (const r of s?.release.all ?? []) {
+    const cur = out[r.store];
+    if (!cur || (RANK[r.phase] ?? 9) < (RANK[cur] ?? 9)) out[r.store] = r.phase;
+  }
+  return out;
+}
+
+/** True for a phase that needs the owner (rejected, halted). */
+export const needsYou = (p: string | undefined): boolean => p === 'rejected' || p === 'halted';
+export const inReview = (p: string | undefined): boolean => p === 'review' || p === 'sent';
+
+/**
+ * Builds the summary the host shows. `phaseText` gives the words of a phase, `text` the tray strings (all i18n by the
+ * caller). The attention count is the number of apps with a rejected or halted release; the tooltip counts apps.
+ */
+export function traySummary(
+  apps: { key: string; name: string; status: AppStatus | undefined }[], muted: boolean,
+  tr: { phaseText: (p: string) => string; store: (s: 'ios' | 'android') => string; tipReview: (n: number) => string; tipAttention: (n: number) => string; muted: string; none: string; labels: TrayLabels },
+): TraySummary {
+  let review = 0, attention = 0;
+  const list: TrayApp[] = [];
+  for (const a of apps) {
+    const ph = trayPhases(a.status);
+    if (inReview(ph.ios) || inReview(ph.android)) review++;
+    if (needsYou(ph.ios) || needsYou(ph.android)) attention++;
+    const parts = (['ios', 'android'] as const).filter(s => ph[s]).map(s => `${tr.store(s)}: ${tr.phaseText(ph[s]!)}`);
+    list.push({ key: a.key, name: a.name, state: parts.length ? parts.join(' · ') : tr.none });
+  }
+  const bits = [review ? tr.tipReview(review) : '', attention ? tr.tipAttention(attention) : '', muted ? tr.muted : ''].filter(Boolean);
+  return { tooltip: ['storebound', ...bits].join(' · '), attention, muted, apps: list, labels: tr.labels };
+}
diff --git a/apps/desktop/src/nav.ts b/apps/desktop/src/nav.ts
index b438256..a6429e1 100644
--- a/apps/desktop/src/nav.ts
+++ b/apps/desktop/src/nav.ts
@@ -34,6 +34,18 @@ export function parseStart(v: string, apps: string[]): Route | null {
   return tab ? { screen: screen as WorkspaceScreen, section: tab } : { screen: screen as WorkspaceScreen };
 }
 
+/** A route sent as JSON by the host (tray menu, notification target); anything that is not a known route is null. */
+export function parseRouteJson(v: string): Route | null {
+  let o: unknown;
+  try { o = JSON.parse(v); } catch { return null; }
+  if (!o || typeof o !== 'object') return null;
+  const r = o as Record<string, unknown>;
+  if (r.screen === 'portfolio') return { screen: 'portfolio' };
+  if (r.screen === 'app') return typeof r.appId === 'string' && r.appId ? { screen: 'app', appId: r.appId, tab: APP_TABS.includes(r.tab as AppTab) ? r.tab as AppTab : 'releases' } : null;
+  if (typeof r.screen === 'string' && (WORKSPACE as readonly string[]).includes(r.screen)) return typeof r.section === 'string' ? { screen: r.screen as WorkspaceScreen, section: r.section } : { screen: r.screen as WorkspaceScreen };
+  return null;
+}
+
 export const sameRoute = (a: Route, b: Route): boolean => JSON.stringify(a) === JSON.stringify(b);
 
 export interface Nav { route: Route; go: (r: Route) => void; openPalette: () => void; openWelcome: () => void }
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
index 96ded11..3342203 100644
--- a/apps/desktop/src/screens/Settings.tsx
+++ b/apps/desktop/src/screens/Settings.tsx
@@ -167,9 +167,20 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
 
           <Card id="set-notifications" title={t('set.notifications')} icon="bell" sub={t('set.notificationsSub')} className="set-card">
             <div className="form">
+              <Toggle id="n-rejected" label={t('set.nRejected')} hint={t('set.nRejectedHint')} checked={s.notify.rejected} onChange={v => set(x => ({ ...x, notify: { ...x.notify, rejected: v } }))} />
+              <Toggle id="n-approved" label={t('set.nApproved')} hint={t('set.nApprovedHint')} checked={s.notify.approved} onChange={v => set(x => ({ ...x, notify: { ...x.notify, approved: v } }))} />
+              <Toggle id="n-live" label={t('set.nLive')} hint={t('set.nLiveHint')} checked={s.notify.live} onChange={v => set(x => ({ ...x, notify: { ...x.notify, live: v } }))} />
               <Toggle id="n-review" label={t('set.nReview')} hint={t('set.nReviewHint')} checked={s.notify.reviewState} onChange={v => set(x => ({ ...x, notify: { ...x.notify, reviewState: v } }))} />
               <Toggle id="n-low" label={t('set.nLow')} hint={t('set.nLowHint')} checked={s.notify.lowReviews} onChange={v => set(x => ({ ...x, notify: { ...x.notify, lowReviews: v } }))} />
               <Toggle id="n-crash" label={t('set.nCrash')} hint={t('set.nCrashHint')} checked={s.notify.crash} onChange={v => set(x => ({ ...x, notify: { ...x.notify, crash: v } }))} />
+              <Toggle id="n-quiet" label={t('set.quiet')} hint={t('set.quietHint')} checked={s.notify.quietHours.enabled} onChange={v => set(x => ({ ...x, notify: { ...x.notify, quietHours: { ...x.notify.quietHours, enabled: v } } }))} />
+              {s.notify.quietHours.enabled && <div className="row" style={{ gap: 12 }}>
+                <label className="field"><span className="legend">{t('set.quietFrom')}</span><input type="time" className="input" style={{ width: 120 }} value={s.notify.quietHours.from} onChange={e => { const v = e.target.value; if (v) set(x => ({ ...x, notify: { ...x.notify, quietHours: { ...x.notify.quietHours, from: v } } })); }} /></label>
+                <label className="field"><span className="legend">{t('set.quietTo')}</span><input type="time" className="input" style={{ width: 120 }} value={s.notify.quietHours.to} onChange={e => { const v = e.target.value; if (v) set(x => ({ ...x, notify: { ...x.notify, quietHours: { ...x.notify.quietHours, to: v } } })); }} /></label>
+              </div>}
+              {d.muteUntil > Date.now() && <p className="small muted" role="status">{t('set.muted', { until: new Date(d.muteUntil).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) })}</p>}
+              <p className="small muted">{t('set.clickNote')}</p>
+              <div className="actions"><button className="btn btn-sm" onClick={() => d.setMute(d.muteUntil > Date.now() ? 0 : 60)}><Icon name="bell" />{d.muteUntil > Date.now() ? t('set.unmute', { until: new Date(d.muteUntil).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) }) : t('set.muteHour')}</button></div>
               <div className="actions"><button className="btn btn-sm" onClick={() => api.notify(t('set.testTitle'), t('set.testBody')).catch(e => setError(errorText(e)))}><Icon name="bell" />{t('set.testNotify')}</button></div>
             </div>
           </Card>
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index 38c8bbd..cca9d6d 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -4,18 +4,20 @@
 import { createContext, type ReactNode, useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react';
 import {
   type Account, type AccountCheck, api, type AppInfo, type AppsListResult, type AppStatus, type CacheEntry, DEFAULT_SETTINGS, errorText, newJob, onDownload,
-  onProgress, type PortfolioResult, type Project, reads, type Settings, type SidecarStatus, type Studio, type ToolResult,
+  onProgress, onTrayAction, type PortfolioResult, type Project, reads, type Settings, type SidecarStatus, type Studio, type ToolResult,
 } from './api';
 import { t } from './i18n';
 import { buildApps, NO_OVERRIDES, type Overrides, type UnifiedApp } from './lib/identity';
 import { isError, type HealthSnapshot, type Review } from './lib/model';
-import { crashCrossed, newLowReviews, releaseChanges } from './lib/notify';
+import { crashCrossed, mayNotify, type NoticeKind, newLowReviews, nextReadDelay, type ReleaseChange, releaseChanges } from './lib/notify';
+import { traySummary } from './lib/tray';
 import { setCrashContext } from './lib/crash';
 import { normalizeAccounts, normalizeProjects, normalizeWorkspace } from './lib/normalize';
 import { keepLines, progressOf } from './lib/progress';
 import { isStale, lanesOf, looksThrottled, oneLine, readKey, readsFor } from './lib/freshness';
 import { type Outcome, type Priority, ReadScheduler, type ReadTask, type SchedulerStats } from './lib/scheduler';
 import { fixHint } from './lib/views';
+import type { Route } from './nav';
 import { withLastGood } from '../../../cli/lib/train';
 import { failureText, usable } from './lib/results';
 
@@ -92,12 +94,17 @@ export interface Data {
   onRead: (key: string, fn: (e: ReadEvent) => void) => () => void;
   isReading: (key: string) => boolean;
   /** Reads everything of every app that is past its TTL (force: everything). */
-  readAll: (force?: boolean) => Promise<void>;
+  readAll: (force?: boolean) => Promise<boolean>;
+  /** Notifications are muted until this time (epoch ms; 0 = not muted). */
+  muteUntil: number;
+  /** Mutes notifications for `minutes` (0 = unmute). */
+  setMute: (minutes: number) => void;
   /** After a write: the app's reads are read again. */
   invalidate: (target: string) => void;
   /** The app on screen (its reads go first). */
   setFocus: (key: string | null) => void;
-  refreshPortfolio: (live?: boolean, quiet?: boolean) => Promise<void>;
+  /** True when the read succeeded. */
+  refreshPortfolio: (live?: boolean, quiet?: boolean) => Promise<boolean>;
   /** Reads the apps of one account (or all) from the stores. */
   importApps: (account?: string) => Promise<void>;
   checkAccount: (id: string) => Promise<void>;
@@ -128,6 +135,19 @@ const lastLine = (s: string): string => s.trim().split('\n').filter(Boolean).at(
 /** A failure line with how to fix it, when the error is a known one. */
 const withHint = (msg: string | undefined): string | undefined => { const h = fixHint(msg); return h && msg ? `${msg} · ${t(h)}` : msg; };
 
+const storeName = (s: 'ios' | 'android'): string => (s === 'ios' ? 'App Store' : 'Google Play');
+/** Title and body of the notification of one release change (by kind; a rejection adds the store's reason when it has one). */
+export function releaseText(c: ReleaseChange): [string, string] {
+  const v = { name: c.name, store: storeName(c.store), version: c.version };
+  switch (c.kind) {
+    case 'rejected': return [t('notify.rejectedTitle', v), [t('notify.rejectedBody', v), c.reason].filter(Boolean).join(' ')];
+    case 'approved': return [t('notify.approvedTitle', v), t('notify.approvedBody', v)];
+    case 'live': return [t('notify.liveTitle', v), t('notify.liveBody', v)];
+    case 'halted': return [t('notify.haltedTitle', v), t('notify.haltedBody', v)];
+    default: return [t('notify.releaseTitle', v), t('notify.releaseBody', { ...v, phase: t(`phase.${c.to}` as 'phase.live') })];
+  }
+}
+
 export function DataProvider({ children }: { children: ReactNode }) {
   const [ready, setReady] = useState(false);
   const [info, setInfo] = useState<AppInfo | null>(null);
@@ -153,6 +173,21 @@ export function DataProvider({ children }: { children: ReactNode }) {
   const settingsRef = useRef(settings);
   settingsRef.current = settings;
 
+  // Mute for a while (the tray's "Mute notifications for 1 hour"): kept across restarts
+  const [muteUntil, setMuteUntil] = useState<number>(() => { try { return Number(localStorage.getItem('storebound.muteUntil')) || 0; } catch { return 0; } });
+  const muteRef = useRef(muteUntil);
+  muteRef.current = muteUntil;
+  const setMute = useCallback((minutes: number) => {
+    const until = minutes > 0 ? Date.now() + minutes * 60_000 : 0;
+    setMuteUntil(until); muteRef.current = until;
+    try { localStorage.setItem('storebound.muteUntil', String(until)); } catch { /* private mode: mute lasts until the window closes */ }
+  }, []);
+  /** One desktop notification: its kind's toggle, quiet hours and mute decide; `route` is where the window opens when it is next shown from the tray. */
+  const notice = useCallback((kind: NoticeKind, title: string, body: string, route?: Route): void => {
+    if (!mayNotify(settingsRef.current.notify, kind, { muteUntil: muteRef.current })) return;
+    api.notify(title, body, route ? JSON.stringify(route) : undefined).catch(() => {});
+  }, []);
+
   const dismiss = useCallback((id: string) => {
     setToasts(ts => ts.filter(x => x.id !== id));
     const tm = timers.current.get(id);
@@ -196,7 +231,7 @@ export function DataProvider({ children }: { children: ReactNode }) {
   const appsRef = useRef(apps);
   appsRef.current = apps;
 
-  const refreshPortfolio = useCallback(async (liveRead = false, quiet = false) => {
+  const refreshPortfolio = useCallback(async (liveRead = false, quiet = false): Promise<boolean> => {
     const job = newJob(liveRead ? 'portfolio-live' : 'portfolio');
     setBusy(liveRead ? 'live' : 'offline'); setPortfolioError(null);
     const tid = liveRead && !quiet ? toast({ id: job, kind: 'job', title: t('toast.readingStores'), detail: t('toast.readingStoresDetail'), progress: null, job }) : null;
@@ -210,8 +245,11 @@ export function DataProvider({ children }: { children: ReactNode }) {
       if (liveRead) {
         const changes = releaseChanges(liveRef.current?.value, r);
         setLive({ value: r, at: r.at });
-        if (settingsRef.current.notify.reviewState) for (const c of changes.slice(0, 5))
-          api.notify(t('notify.releaseTitle', { name: c.name }), t('notify.releaseBody', { store: c.store === 'ios' ? 'App Store' : 'Google Play', version: c.version, phase: t(`phase.${c.to}` as 'phase.live') })).catch(() => {});
+        for (const c of changes.slice(0, 5)) {
+          const [title, body] = releaseText(c);
+          const app = appsRef.current.find(a => a.target === c.project);
+          notice(c.kind, title, body, app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined);
+        }
         const failed = r.apps.filter(a => a.storeErrors.ios || a.storeErrors.android).length;
         if (tid) updateToast(tid, failed ? { kind: 'info', title: t('toast.readDonePartial'), detail: t('toast.readDonePartialDetail', { count: failed }), progress: undefined, job: undefined }
           : { kind: 'ok', title: t('toast.readDone'), detail: t('toast.readDoneDetail', { count: r.apps.length }), progress: undefined, job: undefined });
@@ -220,8 +258,10 @@ export function DataProvider({ children }: { children: ReactNode }) {
       const msg = errorText(e);
       setPortfolioError(msg);
       if (tid) updateToast(tid, { kind: /cancel/i.test(msg) ? 'info' : 'bad', title: /cancel/i.test(msg) ? t('toast.cancelled') : t('toast.readFailed'), detail: msg, progress: undefined, job: undefined });
+      return false;
     } finally { setBusy(null); }
-  }, [toast, updateToast]);
+    return true;
+  }, [toast, updateToast, notice]);
 
   // ---- background reader: one scheduler for every store read of the window (lib/scheduler.ts) ----
   const schedRef = useRef<ReadScheduler | null>(null);
@@ -252,22 +292,42 @@ export function DataProvider({ children }: { children: ReactNode }) {
     return c;
   };
   const statusRef = useRef<(a: UnifiedApp) => AppStatus | undefined>(() => undefined);
+  const lastData = useRef(new Map<string, unknown>());
 
   const schedule = useCallback((target: string, method: string, args: Record<string, unknown>, priority: Priority): Promise<ToolResult> => {
     const key = readKey(target, method, args);
     const app = appsRef.current.find(a => a.target === target);
     const pf = platformsOf(app, app ? statusRef.current(app) : undefined);
     const lanes = lanesOf(method, pf);
-    const p = sched.enqueue<ToolResult>({ key, lanes, accounts: accountsOf(app, lanes), priority, run: () => api.call<ToolResult>(method, target, { args }, newJob(method)) });
+    // reviews and health: compared with the previous read here (not in a card), so the tray app notices them with no window open
+    const watch = method === 'reviews.list' || method === 'health';
+    const run = async (): Promise<ToolResult> => {
+      const before = watch ? (lastData.current.has(key) ? lastData.current.get(key) : (await api.cached<ToolResult>(method, target, args).catch(() => null))?.value.data ?? null) : null;
+      const result = await api.call<ToolResult>(method, target, { args }, newJob(method));
+      if (watch && usable(method, result)) {
+        notifyAfterRead(method, before, result.data, notice, app?.name, app?.key);
+        lastData.current.set(key, result.data);
+      }
+      return result;
+    };
+    const p = sched.enqueue<ToolResult>({ key, lanes, accounts: accountsOf(app, lanes), priority, run });
     emitRead(key, { kind: 'start' });
     p.then(result => emitRead(key, { kind: 'done', result }), e => emitRead(key, { kind: 'error', error: errorText(e) }));
     return p;
-  }, [sched, emitRead]);
+  }, [sched, emitRead, notice]);
 
-  const readAll = useCallback(async (force = false) => {
-    if (!force && !settingsRef.current.refresh.autoRead) return;
-    if (force || isStale('portfolio.status', liveRef.current?.at)) {
-      sched.enqueue({ key: '*\u001fportfolio.status', lanes: ['apple', 'play'], accounts: [], priority: 1, run: () => refreshPortfolio(true, true) }).catch(() => {});
+  /**
+   * Reads everything past its TTL. The portfolio read is a LIVE one (refreshPortfolio(true)): it is what releaseChanges
+   * compares, so a rejection is seen even when no screen asked. Resolves when that read is done: false when it failed.
+   */
+  const readAll = useCallback(async (force = false): Promise<boolean> => {
+    if (!force && !settingsRef.current.refresh.autoRead) return true;
+    let ok = true;
+    let portfolioRead: Promise<void> | null = null;
+    const pkey = '*\u001fportfolio.status';
+    if (!sched.has(pkey) && (force || isStale('portfolio.status', liveRef.current?.at))) {
+      portfolioRead = sched.enqueue<boolean>({ key: pkey, lanes: ['apple', 'play'], accounts: [], priority: 1, run: () => refreshPortfolio(true, true) })
+        .then(r => { ok = r !== false; }, () => { ok = false; });
     }
     const list = [...appsRef.current].filter(a => !a.ignored && !a.project?.missing)
       .sort((a, b) => Number(b.key === focusRef.current) - Number(a.key === focusRef.current));
@@ -283,6 +343,8 @@ export function DataProvider({ children }: { children: ReactNode }) {
         schedule(a.target, r.method, r.args, a.key === focusRef.current ? 0 : 2).catch(() => {});
       }
     }
+    await portfolioRead;
+    return ok;
   }, [sched, schedule, refreshPortfolio]);
 
   const invalidate = useCallback((target: string) => {
@@ -353,27 +415,48 @@ export function DataProvider({ children }: { children: ReactNode }) {
   useEffect(() => { if (projects.length) refreshPortfolio(false); }, [projects.length, refreshPortfolio]);
 
   // Settings > Reading: everything past its TTL is read in the background on start, when the window shows again after
-  // a while, and every N minutes while it is visible (the scheduler keeps it inside the stores' limits).
+  // a while, and every N minutes (with a little jitter) EVEN WHILE THE WINDOW IS HIDDEN: the app lives in the tray, and
+  // that is where a rejection has to be noticed. One pass at a time; after a failed pass the wait doubles (nextReadDelay).
   const launched = useRef(false);
   useEffect(() => {
     if (!ready || launched.current || !apps.length) return;
     launched.current = true;
     if (settings.refresh.autoRead) readAll(false).catch(() => {});
   }, [ready, apps.length, settings.refresh.autoRead, readAll]);
+  const passing = useRef(false);
   useEffect(() => {
     if (!settings.refresh.autoRead) return;
     let hiddenAt = 0;
+    const pass = async (): Promise<boolean> => {
+      if (passing.current) return true;
+      passing.current = true;
+      try { return await readAll(false); } catch { return false; } finally { passing.current = false; }
+    };
     const vis = () => {
       if (document.hidden) { hiddenAt = Date.now(); return; }
-      if (hiddenAt && Date.now() - hiddenAt > 60_000) readAll(false).catch(() => {});
+      if (hiddenAt && Date.now() - hiddenAt > 60_000) pass().catch(() => {});
       hiddenAt = 0;
     };
     document.addEventListener('visibilitychange', vis);
     const m = settings.refresh.everyMinutes;
-    const tm = m ? setInterval(() => { if (!document.hidden) readAll(false).catch(() => {}); }, m * 60_000) : null;
-    return () => { document.removeEventListener('visibilitychange', vis); if (tm) clearInterval(tm); };
+    let tm: ReturnType<typeof setTimeout> | null = null;
+    let stopped = false, failures = 0;
+    const next = () => {
+      if (stopped || !m) return;
+      tm = setTimeout(async () => { failures = (await pass()) ? 0 : failures + 1; next(); }, nextReadDelay(m, failures));
+    };
+    next();
+    return () => { stopped = true; document.removeEventListener('visibilitychange', vis); if (tm) clearTimeout(tm); };
   }, [settings.refresh.autoRead, settings.refresh.everyMinutes, readAll]);
 
+  // the tray: tooltip, attention icon and the apps list follow every read; its menu asks for a read or the mute
+  const readRef = useRef(readAll);
+  readRef.current = readAll;
+  useEffect(() => {
+    const un = onTrayAction(a => { if (a === 'read') readRef.current(true).catch(() => {}); else setMute(isMutedNow() ? 0 : 60); });
+    return () => { un.then(f => f()); };
+  }, [setMute]);
+  const isMutedNow = () => muteRef.current > Date.now();
   // icons: cached first, then read (offline, cheap)
   useEffect(() => {
     for (const p of projects) {
@@ -419,14 +502,33 @@ export function DataProvider({ children }: { children: ReactNode }) {
   const iconFor = useCallback((a: UnifiedApp) => (a.project ? icons[a.project.id] ?? a.storeIcon : a.storeIcon), [icons]);
   const appByKey = useCallback((key: string) => apps.find(a => a.key === key), [apps]);
   statusRef.current = statusFor;
+
+  useEffect(() => {
+    if (!ready) return;
+    const muted = muteUntil > Date.now();
+    const sum = traySummary(
+      apps.filter(a => !a.ignored).map(a => ({ key: a.key, name: a.name, status: liveFor(a) ?? statusFor(a) })), muted,
+      { phaseText: p => t(`phase.${p}` as 'phase.live'), store: s => (s === 'ios' ? 'App Store' : 'Play'), none: t('tray.noState'), muted: t('tray.mutedTip'),
+        tipReview: n => t('tray.tipReview', { count: n }), tipAttention: n => t('tray.tipAttention', { count: n }),
+        labels: { open: t('tray.open'), readNow: t('tray.readNow'), apps: t('tray.apps'), noApps: t('tray.noApps'), mute: t('tray.mute'), unmute: t('tray.unmute'), update: t('tray.update'), settings: t('tray.settings'), quit: t('tray.quit') } },
+    );
+    api.trayUpdate(sum).catch(() => {});
+  }, [ready, apps, live, portfolio, muteUntil, statusFor, liveFor]);
+  // the mute ends by itself: the tray menu follows
+  useEffect(() => {
+    if (muteUntil <= Date.now()) return;
+    const tm = setTimeout(() => setMuteUntil(0), muteUntil - Date.now() + 500);
+    return () => clearTimeout(tm);
+  }, [muteUntil]);
+
   const readerState = useMemo<ReaderState>(() => ({ ...reader, autoRead: settings.refresh.autoRead }), [reader, settings.refresh.autoRead]);
 
   const value = useMemo<Data>(() => ({
     ready, info, projects, accounts, studios, overrides, settings, storeApps, accountHealth, apps, sidecar, sidecarError, portfolio, live, portfolioBusy, portfolioError,
-    importBusy, icons, reader: readerState, schedule, onRead, isReading, readAll, invalidate, setFocus,
+    importBusy, icons, reader: readerState, muteUntil, setMute, schedule, onRead, isReading, readAll, invalidate, setFocus,
     refreshPortfolio, importApps, checkAccount, reload, updateOverrides, updateSettings, statusOf, liveOf, statusFor, liveFor, iconFor, appByKey,
     toasts, toast, updateToast, dismiss, cancelJob,
-  }), [readerState, schedule, onRead, isReading, readAll, invalidate, setFocus, ready, info, projects, accounts, studios, overrides, settings, storeApps, accountHealth, apps, sidecar, sidecarError, portfolio, live, portfolioBusy, portfolioError,
+  }), [readerState, muteUntil, setMute, schedule, onRead, isReading, readAll, invalidate, setFocus, ready, info, projects, accounts, studios, overrides, settings, storeApps, accountHealth, apps, sidecar, sidecarError, portfolio, live, portfolioBusy, portfolioError,
     importBusy, icons, refreshPortfolio, importApps, checkAccount, reload, updateOverrides, updateSettings, statusOf, liveOf, statusFor, liveFor, iconFor, appByKey,
     toasts, toast, updateToast, dismiss, cancelJob]);
   return <Ctx.Provider value={value}>{children}</Ctx.Provider>;
@@ -481,16 +583,19 @@ export function useWrite(projectId: string | null) {
   return { busy, run, isBusy: (method: string, args: Record<string, unknown> = {}) => busy === `${method}:${JSON.stringify(args)}` };
 }
 
+type Notice = (kind: NoticeKind, title: string, body: string, route?: Route) => void;
+
 /** Notifications a fresh read may trigger (Settings > Notifications), compared with the read it replaces. */
-function notifyAfterRead(method: string, prev: unknown, next: unknown, settings: Settings, appName: string | undefined): void {
+function notifyAfterRead(method: string, prev: unknown, next: unknown, notice: Notice, appName: string | undefined, appKey: string | undefined): void {
   const name = appName ?? '';
-  if (method === 'reviews.list' && settings.notify.lowReviews && Array.isArray(next)) {
+  const route = (tab: 'reviews' | 'health'): Route | undefined => (appKey ? { screen: 'app', appId: appKey, tab } : undefined);
+  if (method === 'reviews.list' && Array.isArray(next)) {
     const fresh = newLowReviews(prev as Review[] | null, next as Review[]);
-    if (fresh.length) api.notify(t('notify.lowTitle', { name, count: fresh.length }), `${'★'.repeat(fresh[0]!.rating)} ${fresh[0]!.title ?? ''} ${fresh[0]!.body}`.trim()).catch(() => {});
+    if (fresh.length) notice('lowReviews', t('notify.lowTitle', { name, count: fresh.length }), `${'★'.repeat(fresh[0]!.rating)} ${fresh[0]!.title ?? ''} ${fresh[0]!.body}`.trim(), route('reviews'));
   }
-  if (method === 'health' && settings.notify.crash && next && typeof next === 'object') {
+  if (method === 'health' && next && typeof next === 'object') {
     const crossed = crashCrossed(prev as HealthSnapshot | null, next as HealthSnapshot);
-    if (crossed.length && !isError((next as HealthSnapshot).play)) api.notify(t('notify.crashTitle', { name }), crossed.map(k => (k === 'crash' ? t('health.crash') : t('health.anr'))).join(', ')).catch(() => {});
+    if (crossed.length && !isError((next as HealthSnapshot).play)) notice('crash', t('notify.crashTitle', { name }), crossed.map(k => (k === 'crash' ? t('health.crash') : t('health.anr'))).join(', '), route('health'));
   }
 }
 
@@ -528,7 +633,6 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
       else {
         const r = e.result;
         if (usable(method, r)) {
-          notifyAfterRead(method, dataRef.current, r.data, dRef.current.settings, o.appName);
           set({ data: r.data as T, at: new Date().toISOString(), fromCache: false, loading: false, stale: false, error: null, command: r.command });
         } else set(x => ({ ...x, loading: false, error: oneLine(failureText(r)), command: r.command }));
       }
diff --git a/apps/desktop/tests/fixtures/state/d1-missing-folders.host.json b/apps/desktop/tests/fixtures/state/d1-missing-folders.host.json
index fc2b8b4..e644176 100644
--- a/apps/desktop/tests/fixtures/state/d1-missing-folders.host.json
+++ b/apps/desktop/tests/fixtures/state/d1-missing-folders.host.json
@@ -33,8 +33,16 @@
       },
       "channel": "stable",
       "notify": {
+        "approved": true,
         "crash": true,
+        "live": true,
         "lowReviews": true,
+        "quietHours": {
+          "enabled": false,
+          "from": "23:00",
+          "to": "08:00"
+        },
+        "rejected": true,
         "reviewState": true
       },
       "refresh": {
diff --git a/apps/desktop/tests/fixtures/state/d3-full.host.json b/apps/desktop/tests/fixtures/state/d3-full.host.json
index 42fd2c9..72ab459 100644
--- a/apps/desktop/tests/fixtures/state/d3-full.host.json
+++ b/apps/desktop/tests/fixtures/state/d3-full.host.json
@@ -78,8 +78,16 @@
       },
       "channel": "stable",
       "notify": {
+        "approved": true,
         "crash": true,
+        "live": true,
         "lowReviews": true,
+        "quietHours": {
+          "enabled": false,
+          "from": "23:00",
+          "to": "08:00"
+        },
+        "rejected": true,
         "reviewState": true
       },
       "refresh": {
diff --git a/apps/desktop/tests/fixtures/state/empty.host.json b/apps/desktop/tests/fixtures/state/empty.host.json
index cfb10be..505375f 100644
--- a/apps/desktop/tests/fixtures/state/empty.host.json
+++ b/apps/desktop/tests/fixtures/state/empty.host.json
@@ -16,8 +16,16 @@
       },
       "channel": "stable",
       "notify": {
+        "approved": true,
         "crash": true,
+        "live": true,
         "lowReviews": true,
+        "quietHours": {
+          "enabled": false,
+          "from": "23:00",
+          "to": "08:00"
+        },
+        "rejected": true,
         "reviewState": true
       },
       "refresh": {
diff --git a/apps/desktop/tests/fixtures/state/shared-profiles.host.json b/apps/desktop/tests/fixtures/state/shared-profiles.host.json
index 38ac38f..2103add 100644
--- a/apps/desktop/tests/fixtures/state/shared-profiles.host.json
+++ b/apps/desktop/tests/fixtures/state/shared-profiles.host.json
@@ -75,8 +75,16 @@
       },
       "channel": "stable",
       "notify": {
+        "approved": true,
         "crash": true,
+        "live": true,
         "lowReviews": true,
+        "quietHours": {
+          "enabled": false,
+          "from": "23:00",
+          "to": "08:00"
+        },
+        "rejected": true,
         "reviewState": true
       },
       "refresh": {
diff --git a/apps/desktop/tests/identity.test.ts b/apps/desktop/tests/identity.test.ts
index fd80815..2c2f3f3 100644
--- a/apps/desktop/tests/identity.test.ts
+++ b/apps/desktop/tests/identity.test.ts
@@ -128,7 +128,7 @@ describe('notifications', () => {
   test('release phase changes, only against a previous read', () => {
     expect(releaseChanges(null, status('review'))).toEqual([]);
     expect(releaseChanges(status('review'), status('review'))).toEqual([]);
-    expect(releaseChanges(status('review'), status('approved'))).toEqual([{ project: '/a', name: 'A', store: 'ios', version: '2.0', from: 'review', to: 'approved' }]);
+    expect(releaseChanges(status('review'), status('approved'))).toEqual([{ project: '/a', name: 'A', store: 'ios', version: '2.0', from: 'review', to: 'approved', kind: 'approved' }]);
     expect(releaseChanges(status('draft'), status('testing'))).toEqual([]);
   });
   test('new 1-2 star reviews and threshold crossings', () => {
diff --git a/apps/desktop/tests/notifications.test.ts b/apps/desktop/tests/notifications.test.ts
new file mode 100644
index 0000000..2f29d47
--- /dev/null
+++ b/apps/desktop/tests/notifications.test.ts
@@ -0,0 +1,153 @@
+import { describe, expect, test } from 'bun:test';
+import type { PortfolioResult } from '../src/api';
+import { DEFAULT_SETTINGS } from '../src/api';
+import { inQuietHours, isMuted, kindEnabled, mayNotify, nextReadDelay, releaseChanges } from '../src/lib/notify';
+import { normalizeSettings } from '../src/lib/normalize';
+import { parseRouteJson } from '../src/nav';
+import { traySummary, trayPhases } from '../src/lib/tray';
+
+type Rel = { store: 'ios' | 'android'; version: string; state: string; phase: string; reason?: string };
+const snap = (...rels: Rel[]): PortfolioResult => ({
+  apps: [{ project: '/a', ok: true, app: { id: '/a', name: 'A', platforms: { ios: null, android: null } }, summary: null, check: null, catalog: null, storeErrors: {}, errors: [],
+    release: { source: 'live' as const, current: null, next: null, all: rels.map(r => ({ build: '1', fraction: null, track: null, ...r })) } }],
+  at: 'x',
+} as unknown as PortfolioResult);
+const ios = (state: string, phase: string, extra: Partial<Rel> = {}): Rel => ({ store: 'ios', version: '2.0', state, phase, ...extra });
+const play = (state: string, phase: string): Rel => ({ store: 'android', version: '2.0', state, phase });
+
+describe('releaseChanges: transitions the owner waits for', () => {
+  test('App Store in review -> rejected', () => {
+    const c = releaseChanges(snap(ios('IN_REVIEW', 'review')), snap(ios('REJECTED', 'rejected')));
+    expect(c).toHaveLength(1);
+    expect(c[0]).toMatchObject({ store: 'ios', version: '2.0', from: 'review', to: 'rejected', kind: 'rejected' });
+  });
+  test('metadata rejected counts, and the reason text comes along', () => {
+    const c = releaseChanges(snap(ios('WAITING_FOR_REVIEW', 'review')), snap(ios('METADATA_REJECTED', 'rejected', { reason: '  Guideline 2.1 - missing demo account  ' })));
+    expect(c[0]).toMatchObject({ kind: 'rejected', reason: 'Guideline 2.1 - missing demo account' });
+  });
+  test('Play in review -> rejected', () => {
+    const c = releaseChanges(snap(play('inProgress', 'review')), snap(play('rejected', 'rejected')));
+    expect(c[0]).toMatchObject({ store: 'android', kind: 'rejected' });
+  });
+  test('approved (pending developer release)', () => {
+    const c = releaseChanges(snap(ios('IN_REVIEW', 'review')), snap(ios('PENDING_DEVELOPER_RELEASE', 'approved')));
+    expect(c[0]).toMatchObject({ to: 'approved', kind: 'approved' });
+  });
+  test('live, from review and from approved; a rollout counts as live', () => {
+    expect(releaseChanges(snap(ios('IN_REVIEW', 'review')), snap(ios('READY_FOR_SALE', 'live')))[0]!.kind).toBe('live');
+    expect(releaseChanges(snap(ios('PENDING_DEVELOPER_RELEASE', 'approved')), snap(ios('READY_FOR_SALE', 'live')))[0]!.kind).toBe('live');
+    expect(releaseChanges(snap(play('inProgress', 'review')), snap(play('inProgress', 'rollout')))[0]!.kind).toBe('live');
+  });
+  test('halted rollout', () => {
+    expect(releaseChanges(snap(play('inProgress', 'rollout')), snap(play('halted', 'halted')))[0]!.kind).toBe('halted');
+  });
+  test('submitted -> in review is the generic kind; nothing changed or a first read is silent', () => {
+    expect(releaseChanges(snap(ios('PREPARE_FOR_SUBMISSION', 'draft')), snap(ios('WAITING_FOR_REVIEW', 'review')))[0]!.kind).toBe('state');
+    expect(releaseChanges(snap(ios('REJECTED', 'rejected')), snap(ios('REJECTED', 'rejected')))).toEqual([]);
+    expect(releaseChanges(null, snap(ios('REJECTED', 'rejected')))).toEqual([]);
+  });
+  test('a version the developer withdrew is not a store decision', () => {
+    expect(releaseChanges(snap(ios('IN_REVIEW', 'review')), snap(ios('DEVELOPER_REJECTED', 'rejected')))).toEqual([]);
+  });
+  test('one store rejected while the other is live: only the rejected one', () => {
+    const c = releaseChanges(snap(ios('IN_REVIEW', 'review'), play('completed', 'live')), snap(ios('REJECTED', 'rejected'), play('completed', 'live')));
+    expect(c.map(x => x.store)).toEqual(['ios']);
+  });
+});
+
+describe('who may notify: toggles, quiet hours, mute', () => {
+  const n = DEFAULT_SETTINGS.notify;
+  const at = (h: number, m = 0) => new Date(2026, 9, 22, h, m);
+  test('each kind has its own toggle (halted shares the crash toggle)', () => {
+    expect(kindEnabled({ ...n, rejected: false }, 'rejected')).toBe(false);
+    expect(kindEnabled({ ...n, rejected: false }, 'approved')).toBe(true);
+    expect(kindEnabled({ ...n, approved: false }, 'approved')).toBe(false);
+    expect(kindEnabled({ ...n, live: false }, 'live')).toBe(false);
+    expect(kindEnabled({ ...n, crash: false }, 'halted')).toBe(false);
+    expect(kindEnabled({ ...n, crash: false }, 'crash')).toBe(false);
+    expect(kindEnabled({ ...n, lowReviews: false }, 'lowReviews')).toBe(false);
+    expect(kindEnabled({ ...n, reviewState: false }, 'state')).toBe(false);
+  });
+  test('quiet hours are off by default and cross midnight', () => {
+    expect(inQuietHours(n.quietHours, at(23, 30))).toBe(false);
+    const q = { enabled: true, from: '23:00', to: '08:00' };
+    expect(inQuietHours(q, at(22, 59))).toBe(false);
+    expect(inQuietHours(q, at(23, 0))).toBe(true);
+    expect(inQuietHours(q, at(3))).toBe(true);
+    expect(inQuietHours(q, at(7, 59))).toBe(true);
+    expect(inQuietHours(q, at(8, 0))).toBe(false);
+    expect(inQuietHours(q, at(12))).toBe(false);
+  });
+  test('quiet hours inside one day, equal ends and bad times', () => {
+    const q = { enabled: true, from: '13:00', to: '14:30' };
+    expect(inQuietHours(q, at(13, 0))).toBe(true);
+    expect(inQuietHours(q, at(14, 30))).toBe(false);
+    expect(inQuietHours({ enabled: true, from: '09:00', to: '09:00' }, at(9))).toBe(false);
+    expect(inQuietHours({ enabled: true, from: '9am', to: '10:00' }, at(9, 30))).toBe(false);
+  });
+  test('mute for an hour', () => {
+    const now = at(12).getTime();
+    expect(isMuted(0, now)).toBe(false);
+    expect(isMuted(now + 3_600_000, now)).toBe(true);
+    expect(isMuted(now - 1, now)).toBe(false);
+  });
+  test('mayNotify combines them; a test notification always shows', () => {
+    const q = { ...n, quietHours: { enabled: true, from: '23:00', to: '08:00' } };
+    expect(mayNotify(n, 'rejected', { now: at(12) })).toBe(true);
+    expect(mayNotify(q, 'rejected', { now: at(2) })).toBe(false);
+    expect(mayNotify(n, 'rejected', { now: at(12), muteUntil: at(12).getTime() + 1000 })).toBe(false);
+    expect(mayNotify({ ...n, rejected: false }, 'rejected', { now: at(12) })).toBe(false);
+    expect(mayNotify(q, 'test', { now: at(2), muteUntil: at(2).getTime() + 1000 })).toBe(true);
+  });
+  test('settings from an older file get the new notify fields', () => {
+    const s = normalizeSettings({ notify: { reviewState: false, quietHours: { enabled: true, from: 'x', to: '07:30' } } });
+    expect(s.notify).toMatchObject({ reviewState: false, rejected: true, approved: true, live: true, quietHours: { enabled: true, from: '23:00', to: '07:30' } });
+    expect(normalizeSettings({ refresh: { everyMinutes: 30 } }).refresh.everyMinutes).toBe(30);
+    expect(DEFAULT_SETTINGS.refresh.everyMinutes).toBe(15);
+  });
+});
+
+describe('background reading pace', () => {
+  test('interval with jitter, doubled per failure, capped', () => {
+    expect(nextReadDelay(15, 0, 0.5)).toBe(15 * 60_000);
+    expect(nextReadDelay(15, 0, 0)).toBe(Math.round(15 * 60_000 * 0.9));
+    expect(nextReadDelay(15, 0, 0.999)).toBeLessThanOrEqual(Math.round(15 * 60_000 * 1.1));
+    expect(nextReadDelay(15, 1, 0.5)).toBe(30 * 60_000);
+    expect(nextReadDelay(15, 2, 0.5)).toBe(60 * 60_000);
+    expect(nextReadDelay(15, 9, 0.5)).toBe(2 * 3_600_000);
+    expect(nextReadDelay(5, -3, 0.5)).toBe(5 * 60_000);
+  });
+});
+
+describe('tray summary and routes', () => {
+  const app = (key: string, name: string, ...rels: Rel[]) => ({ key, name, status: snap(...rels).apps[0] });
+  const tr = { phaseText: (p: string) => p, store: (s: 'ios' | 'android') => (s === 'ios' ? 'App Store' : 'Play'), none: '-', muted: 'muted',
+    tipReview: (n: number) => `${n} in review`, tipAttention: (n: number) => `${n} needs you`,
+    labels: { open: 'o', readNow: 'r', apps: 'a', noApps: 'n', mute: 'm', unmute: 'u', update: 'U', settings: 's', quit: 'q' } };
+  test('counts, attention and one-word states', () => {
+    const s = traySummary([
+      app('1', 'One', ios('IN_REVIEW', 'review'), play('completed', 'live')),
+      app('2', 'Two', ios('REJECTED', 'rejected')),
+      app('3', 'Three', ios('READY_FOR_SALE', 'live'), ios('PREPARE_FOR_SUBMISSION', 'draft')),
+      { key: '4', name: 'Four', status: undefined },
+    ], false, tr);
+    expect(s.tooltip).toBe('storebound · 1 in review · 1 needs you');
+    expect(s.attention).toBe(1);
+    expect(s.apps.map(a => a.state)).toEqual(['App Store: review · Play: live', 'App Store: rejected', 'App Store: live', '-']);
+  });
+  test('muted shows in the tooltip; nothing going on is just the name', () => {
+    expect(traySummary([app('1', 'One', ios('READY_FOR_SALE', 'live'))], true, tr).tooltip).toBe('storebound · muted');
+    expect(traySummary([], false, tr).tooltip).toBe('storebound');
+  });
+  test('the most pressing release of a store wins', () => {
+    expect(trayPhases(snap(ios('READY_FOR_SALE', 'live'), { ...ios('IN_REVIEW', 'review'), version: '3.0' }).apps[0]).ios).toBe('review');
+  });
+  test('routes from the host are checked', () => {
+    expect(parseRouteJson('{"screen":"app","appId":"k","tab":"reviews"}')).toEqual({ screen: 'app', appId: 'k', tab: 'reviews' });
+    expect(parseRouteJson('{"screen":"app","appId":"k","tab":"nope"}')).toEqual({ screen: 'app', appId: 'k', tab: 'releases' });
+    expect(parseRouteJson('{"screen":"settings","section":"updates"}')).toEqual({ screen: 'settings', section: 'updates' });
+    expect(parseRouteJson('{"screen":"app"}')).toBeNull();
+    expect(parseRouteJson('{"screen":"x"}')).toBeNull();
+    expect(parseRouteJson('junk')).toBeNull();
+  });
+});
diff --git a/cli/lib/desktop-protocol.ts b/cli/lib/desktop-protocol.ts
index 5594864..b1ad271 100644
--- a/cli/lib/desktop-protocol.ts
+++ b/cli/lib/desktop-protocol.ts
@@ -171,6 +171,8 @@ export interface StoreRelease {
   version: string | null;
   /** iOS build number (CFBundleVersion) / highest Android versionCode. */
   build: string | null;
+  /** The store's reason text of a rejection, when the status carries one (the state word alone does not). */
+  reason?: string | null;
   /** The store's own state word (READY_FOR_SALE, inProgress ...). */
   state: string;
   phase: ReleasePhase;

From 4fe26326cc15c26fc7e5a23858ea1e2db1c2c75e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 22:31:29 +0800
Subject: [PATCH 034/255] Desktop: start.log line before Tauri starts (version,
 args, working folder, pid), so a logon start that dies early leaves a trace

---
 apps/desktop/src-tauri/src/lib.rs | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index 0eb43e0..bac93cd 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -198,7 +198,25 @@ fn dev_seed(data_dir: &std::path::Path) {
     }
 }
 
+/// One line before Tauri starts: a start at logon that dies early (before the host log exists) still leaves a trace
+/// with its arguments and working folder (a logon start once left no line at all). Best effort, never fails.
+fn early_trace() {
+    use std::io::Write;
+    let base = std::env::var_os("APPDATA").or_else(|| std::env::var_os("XDG_DATA_HOME")).map(std::path::PathBuf::from)
+        .or_else(|| std::env::var_os("HOME").map(|h| std::path::PathBuf::from(h).join(".local/share")));
+    let Some(base) = base else { return };
+    let dir = base.join("dev.storebound.desktop").join("logs");
+    if std::fs::create_dir_all(&dir).is_err() { return }
+    let args: Vec<String> = std::env::args().skip(1).collect();
+    let cwd = std::env::current_dir().map(|d| d.display().to_string()).unwrap_or_default();
+    let secs = std::time::SystemTime::now().duration_since(std::time::UNIX_EPOCH).map(|d| d.as_secs()).unwrap_or(0);
+    if let Ok(mut f) = std::fs::OpenOptions::new().create(true).append(true).open(dir.join("start.log")) {
+        let _ = writeln!(f, "{secs} start {} args={args:?} cwd={cwd} pid={}", env!("CARGO_PKG_VERSION"), std::process::id());
+    }
+}
+
 pub fn run() {
+    early_trace();
     linux_webkit_env();
     let app = tauri::Builder::default()
         // single-instance first: a second start (or a storebound:// link) focuses the running app instead

From 78c541f2b8cb6ae0658bbdc9e0ec253ec138e31a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 22:38:15 +0800
Subject: [PATCH 035/255] storebound watch: store events for every app on the
 machine (rejected, approved, live, halted, crash threshold, reviews) to ntfy
 / Telegram / webhook / OS notification, loop or --once, baseline first,
 events.jsonl; storebound events and MCP events_recent; docs/watch.md; tests

---
 CHANGELOG.md                   |   5 +
 cli/commands.ts                |   2 +
 cli/data/flags.json            |  23 +++
 cli/events.ts                  |  20 +++
 cli/lib/args.ts                |   2 +-
 cli/lib/desktop-coverage.ts    |   2 +
 cli/lib/watch-sinks.ts         | 137 +++++++++++++++++
 cli/lib/watch.ts               | 269 +++++++++++++++++++++++++++++++++
 cli/mcp-tools.ts               |   5 +
 cli/watch.ts                   | 196 ++++++++++++++++++++++++
 docs/desktop-coverage.md       |   4 +-
 docs/watch.md                  |  67 ++++++++
 skills/store-health/SKILL.md   |   4 +
 tests/desktop-coverage.test.ts |   2 +-
 tests/json-stdout.test.ts      |   2 +-
 tests/watch.test.ts            | 248 ++++++++++++++++++++++++++++++
 16 files changed, 984 insertions(+), 4 deletions(-)
 create mode 100644 cli/events.ts
 create mode 100644 cli/lib/watch-sinks.ts
 create mode 100644 cli/lib/watch.ts
 create mode 100644 cli/watch.ts
 create mode 100644 docs/watch.md
 create mode 100644 tests/watch.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0220309..cfd3fcb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,11 @@
 
 ## Unreleased
 
+- **`storebound watch`**: store events for every app on the machine (rejected, approved, live, rollout halted, crash
+  threshold, low or unanswered reviews), sent to ntfy (phone), Telegram, a webhook or an OS notification; runs as a loop
+  (`--every 15m`) or `--once`; a PM2 recipe for a server is in docs/watch.md. `storebound events` and the MCP tool
+  `events_recent` let people and agents read what happened.
+
 - **Desktop notifications that arrive.** The app reads the stores in the background from the tray too (it skipped
   every read while hidden, so a rejection went unnoticed), every 15 minutes with backoff. Notifications by kind, each
   with a switch: rejected, approved, live, halted, crash / ANR, low-rated reviews; quiet hours and mute for an hour.
diff --git a/cli/commands.ts b/cli/commands.ts
index 5b0f6ae..715c8b0 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -11,6 +11,8 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'import': [() => import('./import'), 'fastlane [--dir fastlane] [--profile app|game|subscription-app] [--dry]: Appfile, deliver + supply metadata and screenshots -> config, store/*.md, shots frames (read-only on fastlane, never overwrites)'],
   'install': [() => import('./install'), 'skills + MCP server for --agent claude|codex|cursor|copilot|windsurf|gemini|opencode'],
   'mcp': [async () => ({ run: async () => (await import('./mcp')).serve() }), 'stdio MCP server wrapping these commands (for any MCP-capable AI tool)'],
+  'watch': [() => import('./watch'), 'store events for every app on this machine: rejected, approved, live, rollout halted, crash threshold, low reviews; loops every --every 15m or --once; sinks --notify os|ntfy|telegram|webhook; test sends a test event; --dry, --dir <folder>, --json (read-only on the stores)'],
+  'events': [() => import('./events'), '[--since 24h] [--app <name>] [--kind rejected] [--json]: the events watch recorded in ~/.storebound/events.jsonl (read-only)'],
   'serve': [() => import('./serve'), '--stdio: JSON-RPC session for the storebound desktop app (dry runs; writes need a host confirm token)'],
   'apps': [() => import('./apps'), 'list (every app the store keys can see: App Store Connect team, Play developer accounts; --icons) | check (key works / permission missing / revoked, with the fix); --store apple|play, --json; read-only | folders | add [<folder>] | remove <folder>: the app folders of this machine, the same list as the desktop app'],
   'desktop': [() => import('./desktop'), 'open the storebound desktop app on this folder; not installed or another version: download it for this system (size, SHA-256, signature checked), install it for this user (asks once; --yes) and open it; --download only saves the installer, --dry / --json change nothing'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index f581df0..af740bc 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -510,6 +510,11 @@
    "ops",
    "show"
   ],
+  "events": [
+   "app",
+   "kind",
+   "since"
+  ],
   "flow": [
    "apply",
    "from",
@@ -973,6 +978,13 @@
    "weekly",
    "write"
   ],
+  "watch": [
+   "dir",
+   "every",
+   "notify",
+   "once",
+   "stdio"
+  ],
   "web": [
    "base-url",
    "landing",
@@ -1058,6 +1070,7 @@
    "download",
    "enable",
    "end",
+   "every",
    "experiment",
    "expo",
    "fields",
@@ -1098,6 +1111,7 @@
    "keychain",
    "keyword",
    "keywords",
+   "kind",
    "landing",
    "lang",
    "languages",
@@ -1140,9 +1154,11 @@
    "no-wait",
    "no-web",
    "not-sent-for-review",
+   "notify",
    "off",
    "offline",
    "older-than",
+   "once",
    "only-decreases",
    "only-keywords",
    "only-missing",
@@ -1444,6 +1460,9 @@
    "storebound edit --ops '<json>' [--dry] [--json]",
    "storebound edit --show --json         every value the desktop's editors show (listings, config sections, git state)"
   ],
+  "events": [
+   "storebound events [--since 24h] [--app <name>] [--kind rejected,live] [--json]"
+  ],
   "flow": [
    "storebound flow list [--json]                          the flows of this project and their steps",
    "storebound flow validate [--json]                      definitions, sub-flow cycles, commands, variables; exit 1 on a problem",
@@ -1605,6 +1624,10 @@
   "validate": [
    "storebound validate [--apple] [--play] [--json] [--src store/renders] [--no-local] [--no-health] [--no-scan]"
   ],
+  "watch": [
+   "storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook] [--once] [--dry] [--json]",
+   "storebound watch test [--notify ...] [--dry]     sends one test event to every configured sink"
+  ],
   "web": [
    "storebound web init [--out web] [--landing] [--version-code N] [--dry] [--json]",
    "storebound web check [<domain>] [--json]   read-only, no credentials: the live files on https://<domain>"
diff --git a/cli/events.ts b/cli/events.ts
new file mode 100644
index 0000000..c4d72be
--- /dev/null
+++ b/cli/events.ts
@@ -0,0 +1,20 @@
+// `storebound events`: the events `storebound watch` recorded in ~/.storebound/events.jsonl (and events.jsonl.1), read-only.
+//   storebound events [--since 24h] [--app <name>] [--kind rejected,live] [--json]
+// Kinds: rejected, approved, live, rollout_halted, crash_threshold, review_low, review_needs_reply. Newest last.
+import type { Args } from './lib/args';
+import { done, printJson } from './lib/log';
+import { textTable } from './lib/table';
+import { durationMs, EVENT_KINDS, eventsFile, filterEvents, readEvents } from './lib/watch';
+
+export function run(args: Args): Promise<void> {
+  const kinds = args.list('kind');
+  for (const k of kinds) if (!(EVENT_KINDS as readonly string[]).includes(k)) throw new Error(`--kind: ${k} is not an event kind (${EVENT_KINDS.join(', ')})`);
+  const since = args.get('since');
+  const evs = filterEvents(readEvents(), { ...(since ? { sinceMs: durationMs(since) } : {}), ...(args.get('app') ? { app: args.get('app')! } : {}), kind: kinds });
+  if (args.has('json')) printJson(evs);
+  else {
+    console.log(textTable(['at', 'app', 'store', 'kind', 'version', 'detail'], evs.map(e => [e.at.slice(0, 16).replace('T', ' '), e.app, e.store, e.kind, e.version ?? '', e.detail.slice(0, 90)])));
+    done('events', `${evs.length} event(s) in ${eventsFile()}${since ? ` since ${since}` : ''}`);
+  }
+  return Promise.resolve();
+}
diff --git a/cli/lib/args.ts b/cli/lib/args.ts
index e744174..5e68b04 100644
--- a/cli/lib/args.ts
+++ b/cli/lib/args.ts
@@ -20,7 +20,7 @@ export function parseArgs(argv: string[], booleans: string[] = []): Args {
   const repeated = new Map<string, string[]>();
   const set = (k: string, v: string) => { flags.set(k, v); repeated.set(k, [...(repeated.get(k) ?? []), v]); };
   const _: string[] = [];
-  const bool = new Set(['dry', 'yes', 'allow-price-changes', 'help', 'json', 'verbose', 'all-pages', 'apply', 'resume', 'force', 'force-unlock', 'include-drafts', 'not-sent-for-review', 'review-sent', ...booleans]);
+  const bool = new Set(['dry', 'yes', 'allow-price-changes', 'help', 'json', 'verbose', 'all-pages', 'apply', 'resume', 'force', 'force-unlock', 'include-drafts', 'not-sent-for-review', 'review-sent', 'once', ...booleans]);
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i]!;
     if (!a.startsWith('--')) { _.push(a); continue; }
diff --git a/cli/lib/desktop-coverage.ts b/cli/lib/desktop-coverage.ts
index 8628439..1a9f620 100644
--- a/cli/lib/desktop-coverage.ts
+++ b/cli/lib/desktop-coverage.ts
@@ -50,6 +50,8 @@ export const DESKTOP_COVERAGE: Record<string, Coverage> = {
   'settings': { not: 'per-machine switch for AI agents (bypass mode); in the window the owner presses owner actions in a native dialog anyway' },
   'serve': { not: 'the JSON-RPC sidecar the window runs on; nothing to click' },
   'apps': { where: 'Accounts (store apps per account, key check) and App folders (list, add, remove)', methods: ['host:store_apps_refresh', 'host:account_check', 'host:projects_list', 'host:project_add', 'host:project_remove'] },
+  'watch': { not: 'a server loop for people and agents (PM2, cron); the window already reads the stores in the background and notifies from the tray' },
+  'events': { not: 'the log that watch writes for terminals and agents; the window shows its own what-changed feed and tray notifications' },
   'desktop': { not: 'opens or installs this window from a terminal' },
   'accounts': { where: 'Accounts screen (profiles shared with the CLI)', methods: ['host:accounts_list', 'host:account_add_play', 'host:account_add_apple', 'host:account_update'] },
   'doctor': { where: 'Dependencies screen', methods: ['system.tools', 'host:tools_info'] },
diff --git a/cli/lib/watch-sinks.ts b/cli/lib/watch-sinks.ts
new file mode 100644
index 0000000..83c5c69
--- /dev/null
+++ b/cli/lib/watch-sinks.ts
@@ -0,0 +1,137 @@
+// Where `storebound watch` sends events: OS notification, ntfy, Telegram, a webhook. All optional, configured from the
+// environment or ~/.storebound/watch.json (never printed; logs name the sink, not its URL, topic or token):
+//   STOREBOUND_NTFY_URL (default https://ntfy.sh) + STOREBOUND_NTFY_TOPIC [+ STOREBOUND_NTFY_TOKEN]
+//   STOREBOUND_TELEGRAM_TOKEN + STOREBOUND_TELEGRAM_CHAT
+//   STOREBOUND_WEBHOOK_URL
+//   watch.json: { "notify": ["os"], "ntfy": { "url", "topic", "token" }, "telegram": { "token", "chat" }, "webhook": { "url" } }
+// Builders are pure (tests check them); `send` takes the fetch and the OS runner as parameters.
+import { spawnSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { type EventKind, watchConfigFile, type WatchEvent } from './watch';
+
+export type SinkName = 'os' | 'ntfy' | 'telegram' | 'webhook';
+export const SINK_NAMES: readonly SinkName[] = ['os', 'ntfy', 'telegram', 'webhook'];
+
+export interface SinkConfig {
+  os?: true;
+  ntfy?: { url: string; topic: string; token?: string };
+  telegram?: { token: string; chat: string };
+  webhook?: { url: string };
+}
+
+type Env = Record<string, string | undefined>;
+
+/** The sinks that are configured (os only when the file lists it). `only` limits and, for os, enables. */
+export function sinkConfig(env: Env = process.env, file: string | null = watchConfigFile(env), only?: SinkName[]): SinkConfig {
+  let f: { notify?: string[]; ntfy?: Record<string, string>; telegram?: Record<string, string>; webhook?: Record<string, string> } = {};
+  if (file) { try { f = JSON.parse(readFileSync(file, 'utf8')); } catch { /* no file */ } }
+  const out: SinkConfig = {};
+  const topic = env.STOREBOUND_NTFY_TOPIC || f.ntfy?.topic;
+  if (topic) out.ntfy = { url: (env.STOREBOUND_NTFY_URL || f.ntfy?.url || 'https://ntfy.sh').replace(/\/+$/, ''), topic, ...(env.STOREBOUND_NTFY_TOKEN || f.ntfy?.token ? { token: (env.STOREBOUND_NTFY_TOKEN || f.ntfy?.token)! } : {}) };
+  const tg = { token: env.STOREBOUND_TELEGRAM_TOKEN || f.telegram?.token, chat: env.STOREBOUND_TELEGRAM_CHAT || f.telegram?.chat };
+  if (tg.token && tg.chat) out.telegram = { token: tg.token, chat: tg.chat };
+  const hook = env.STOREBOUND_WEBHOOK_URL || f.webhook?.url;
+  if (hook) out.webhook = { url: hook };
+  if (Array.isArray(f.notify) && f.notify.includes('os')) out.os = true;
+  if (only) {
+    const picked: SinkConfig = {};
+    for (const n of only) if (n === 'os') picked.os = true; else if (out[n]) (picked as Record<string, unknown>)[n] = out[n];
+    return picked;
+  }
+  return out;
+}
+
+export const configuredSinks = (c: SinkConfig): SinkName[] => SINK_NAMES.filter(n => !!c[n]);
+
+/** `--notify os,ntfy` -> names; throws on an unknown one. */
+export function parseNotify(list: string[]): SinkName[] {
+  for (const n of list) if (!(SINK_NAMES as readonly string[]).includes(n)) throw new Error(`--notify: ${n} is not a sink (${SINK_NAMES.join(', ')})`);
+  return list as SinkName[];
+}
+
+const LABEL: Record<EventKind, string> = {
+  rejected: 'Rejected', approved: 'Approved', live: 'Live', rollout_halted: 'Rollout halted', crash_threshold: 'Crash threshold',
+  review_low: 'Low review', review_needs_reply: 'Review needs a reply',
+};
+const TAGS: Record<EventKind, string> = {
+  rejected: 'x', approved: 'white_check_mark', live: 'rocket', rollout_halted: 'octagonal_sign', crash_threshold: 'warning', review_low: 'star', review_needs_reply: 'speech_balloon',
+};
+const URGENT: ReadonlySet<EventKind> = new Set<EventKind>(['rejected', 'rollout_halted']);
+
+/** HTTP header values are Latin-1 text on one line. */
+const header = (s: string): string => s.replace(/[\r\n]+/g, ' ').replace(/[^\x20-\x7e]/g, '?').slice(0, 250);
+export const titleOf = (e: WatchEvent): string => `${e.app}${e.version ? ` ${e.version}` : ''}: ${LABEL[e.kind]}`;
+export const textOf = (e: WatchEvent): string => `${e.detail}\n${e.url}`;
+
+export interface HttpRequest { url: string; headers: Record<string, string>; body: string }
+
+export function ntfyRequest(e: WatchEvent, c: NonNullable<SinkConfig['ntfy']>): HttpRequest {
+  return { url: `${c.url}/${encodeURIComponent(c.topic)}`, body: e.detail,
+    headers: { Title: header(titleOf(e)), Tags: `${TAGS[e.kind]},${e.store}`, Click: e.url, Priority: URGENT.has(e.kind) ? 'high' : 'default', ...(c.token ? { Authorization: `Bearer ${c.token}` } : {}) } };
+}
+export function telegramRequest(e: WatchEvent, c: NonNullable<SinkConfig['telegram']>): HttpRequest {
+  return { url: `https://api.telegram.org/bot${c.token}/sendMessage`, headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ chat_id: c.chat, text: `${titleOf(e)}\n${textOf(e)}`.slice(0, 4000), disable_web_page_preview: true }) };
+}
+export function webhookRequest(e: WatchEvent, c: NonNullable<SinkConfig['webhook']>): HttpRequest {
+  return { url: c.url, headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(e) };
+}
+
+/** The command of an OS notification (title and message travel in the environment, never inside a script string). */
+export function osCommand(platform: string, title: string, message: string): { cmd: string; args: string[]; env: Record<string, string> } | null {
+  const env = { SB_TITLE: title.slice(0, 120), SB_MSG: message.slice(0, 400) };
+  if (platform === 'win32') {
+    const script = [
+      '[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] > $null',
+      '$x = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)',
+      '$t = $x.GetElementsByTagName(\'text\')',
+      '$t.Item(0).AppendChild($x.CreateTextNode($env:SB_TITLE)) > $null',
+      '$t.Item(1).AppendChild($x.CreateTextNode($env:SB_MSG)) > $null',
+      '[Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier(\'storebound\').Show([Windows.UI.Notifications.ToastNotification]::new($x))',
+    ].join('; ');
+    return { cmd: 'powershell', args: ['-NoProfile', '-NonInteractive', '-Command', script], env };
+  }
+  if (platform === 'darwin') return { cmd: 'osascript', args: ['-e', 'display notification (system attribute "SB_MSG") with title (system attribute "SB_TITLE")'], env };
+  if (platform === 'linux') return { cmd: 'notify-send', args: [env.SB_TITLE, env.SB_MSG], env };
+  return null;
+}
+
+export type FetchLike = (url: string, init: { method: string; headers: Record<string, string>; body: string; signal?: AbortSignal }) => Promise<{ ok: boolean; status: number }>;
+export type OsRunner = (c: { cmd: string; args: string[]; env: Record<string, string> }) => boolean;
+
+export const runOs: OsRunner = c => {
+  try { return spawnSync(c.cmd, c.args, { env: { ...process.env, ...c.env }, timeout: 10_000, stdio: 'ignore', windowsHide: true }).status === 0; } catch { return false; }
+};
+
+/** POST with a timeout and one retry (network error, 429 or 5xx). Resolves to an error text, or null when sent. */
+export async function post(fetchFn: FetchLike, r: HttpRequest, o: { timeoutMs?: number; retryMs?: number } = {}): Promise<string | null> {
+  let last = '';
+  for (let attempt = 0; attempt < 2; attempt++) {
+    if (attempt) await new Promise(res => setTimeout(res, o.retryMs ?? 1500));
+    try {
+      const res = await fetchFn(r.url, { method: 'POST', headers: r.headers, body: r.body, signal: AbortSignal.timeout(o.timeoutMs ?? 10_000) });
+      if (res.ok) return null;
+      last = `HTTP ${res.status}`;
+      if (res.status < 500 && res.status !== 429) return last;
+    } catch (e) { last = (e as Error).name === 'TimeoutError' ? 'timed out' : 'network error'; }
+  }
+  return last;
+}
+
+export interface SendReport { sink: SinkName; ok: boolean; error?: string }
+
+/** Sends one event to every sink in the config. A failing sink is a report row, never an exception. */
+export async function sendEvent(e: WatchEvent, c: SinkConfig, d: { fetch?: FetchLike; os?: OsRunner; platform?: string; timeoutMs?: number; retryMs?: number } = {}): Promise<SendReport[]> {
+  const fetchFn = d.fetch ?? (fetch as unknown as FetchLike);
+  const out: SendReport[] = [];
+  const http = async (sink: SinkName, r: HttpRequest): Promise<void> => { const err = await post(fetchFn, r, d); out.push(err ? { sink, ok: false, error: err } : { sink, ok: true }); };
+  if (c.os) {
+    const cmd = osCommand(d.platform ?? process.platform, titleOf(e), e.detail);
+    // unavailable (no notifier on this machine): skipped quietly, not a failure
+    if (cmd) { const ok = (d.os ?? runOs)(cmd); if (ok) out.push({ sink: 'os', ok: true }); }
+  }
+  if (c.ntfy) await http('ntfy', ntfyRequest(e, c.ntfy));
+  if (c.telegram) await http('telegram', telegramRequest(e, c.telegram));
+  if (c.webhook) await http('webhook', webhookRequest(e, c.webhook));
+  return out;
+}
diff --git a/cli/lib/watch.ts b/cli/lib/watch.ts
new file mode 100644
index 0000000..b037b37
--- /dev/null
+++ b/cli/lib/watch.ts
@@ -0,0 +1,269 @@
+// `storebound watch` core, pure and offline: the snapshot an app is reduced to, the diff of two snapshots into events,
+// the state file (~/.storebound/watch-state.json) and the event log (~/.storebound/events.jsonl, rotated at 5 MB).
+// STOREBOUND_HOME moves both (the same folder as settings.json, cli/lib/bypass.ts). Network and process work lives in
+// cli/watch.ts and cli/lib/watch-sinks.ts.
+import { appendFileSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { type ConsoleIds, consoleUrl } from './console-links';
+import { lastValue, PLAY_THRESHOLDS, type HealthSnapshot, weightedAverage } from './health';
+import type { StoreRelease } from './desktop-protocol';
+import { PHASE_RANK } from './portfolio';
+
+export const EVENT_KINDS = ['rejected', 'approved', 'live', 'rollout_halted', 'crash_threshold', 'review_low', 'review_needs_reply'] as const;
+export type EventKind = (typeof EVENT_KINDS)[number];
+export type WatchStore = 'apple' | 'play';
+
+export interface WatchEvent {
+  at: string;
+  app: string;
+  store: WatchStore;
+  kind: EventKind;
+  version: string | null;
+  from: string | null;
+  to: string | null;
+  detail: string;
+  /** The absolute console deep link for the app (App Store Connect / Play Console). */
+  url: string;
+}
+
+/** One version on one store, reduced to what the diff needs. */
+export interface RelSnap { phase: string; state: string; fraction: number | null }
+/** A review the watch has seen (text trimmed; the author is never kept). */
+export interface ReviewSnap { id: string; rating: number; replied: boolean; date: string; text: string }
+
+/** What one app looked like at the last read. A part that is absent was not read (never guessed). */
+export interface AppSnap {
+  name: string;
+  ids: ConsoleIds;
+  releases?: { apple?: Record<string, RelSnap>; play?: Record<string, RelSnap> };
+  /** Play: 28-day user-perceived rates (null = no data); Apple: the metrics / diagnostics rated poor. */
+  health?: { play?: { crash: number | null; anr: number | null }; apple?: { poor: string[] } };
+  healthAt?: string;
+  reviews?: { apple?: ReviewSnap[]; play?: ReviewSnap[] };
+}
+
+export interface WatchState { version: 1; at: string; apps: Record<string, AppSnap> }
+
+export const STATE_VERSION = 1 as const;
+export const emptyState = (): WatchState => ({ version: STATE_VERSION, at: '', apps: {} });
+export const MAX_SEEN_REVIEWS = 300;
+export const LOW_STARS = 2;
+export const ROTATE_BYTES = 5 * 1024 * 1024;
+
+// ---- files ----
+
+export const watchHome = (env: Record<string, string | undefined> = process.env): string => env.STOREBOUND_HOME ?? join(homedir(), '.storebound');
+export const stateFile = (env: Record<string, string | undefined> = process.env): string => join(watchHome(env), 'watch-state.json');
+export const eventsFile = (env: Record<string, string | undefined> = process.env): string => join(watchHome(env), 'events.jsonl');
+export const watchConfigFile = (env: Record<string, string | undefined> = process.env): string => join(watchHome(env), 'watch.json');
+
+export function readState(file = stateFile()): WatchState {
+  try {
+    const s = JSON.parse(readFileSync(file, 'utf8')) as WatchState;
+    if (s && s.version === STATE_VERSION && s.apps && typeof s.apps === 'object') return s;
+  } catch { /* none yet, or unreadable: a new baseline */ }
+  return emptyState();
+}
+
+/** Atomic write (temp file, rename). */
+export function writeState(s: WatchState, file = stateFile()): void {
+  mkdirSync(dirname(file), { recursive: true });
+  const tmp = `${file}.tmp-${process.pid}`;
+  writeFileSync(tmp, JSON.stringify(s) + '\n');
+  renameSync(tmp, file);
+}
+
+/** Appends events as JSON lines; a log of `maxBytes` or more is moved to <file>.1 first (one old file is kept). */
+export function appendEvents(events: WatchEvent[], file = eventsFile(), maxBytes = ROTATE_BYTES): void {
+  if (!events.length) return;
+  mkdirSync(dirname(file), { recursive: true });
+  try {
+    if (existsSync(file) && statSync(file).size >= maxBytes) {
+      rmSync(`${file}.1`, { force: true });
+      renameSync(file, `${file}.1`);
+    }
+  } catch { /* rotation is best effort; appending still works */ }
+  appendFileSync(file, events.map(e => JSON.stringify(e)).join('\n') + '\n');
+}
+
+/** Every event of the log (the old file first), oldest first. Unreadable lines are skipped. */
+export function readEvents(file = eventsFile()): WatchEvent[] {
+  const out: WatchEvent[] = [];
+  for (const f of [`${file}.1`, file]) {
+    let text = '';
+    try { text = readFileSync(f, 'utf8'); } catch { continue; }
+    for (const line of text.split('\n')) {
+      if (!line.trim()) continue;
+      try { const e = JSON.parse(line) as WatchEvent; if (e && typeof e.at === 'string' && typeof e.kind === 'string') out.push(e); } catch { /* a torn line */ }
+    }
+  }
+  return out;
+}
+
+/** `events` filters: since (ms back from now), app (case-insensitive name match), kind. Newest last. */
+export function filterEvents(evs: WatchEvent[], o: { sinceMs?: number; now?: number; app?: string; kind?: string[] } = {}): WatchEvent[] {
+  const cut = o.sinceMs !== undefined ? (o.now ?? Date.now()) - o.sinceMs : null;
+  const app = o.app?.toLowerCase();
+  return evs.filter(e => (cut === null || Date.parse(e.at) >= cut) && (!app || e.app.toLowerCase() === app || e.app.toLowerCase().includes(app))
+    && (!o.kind?.length || o.kind.includes(e.kind)));
+}
+
+/** "15m", "24h", "2d"; a bare number is `bare` ("m" for --every, "s" otherwise). */
+export function durationMs(s: string, bare: 's' | 'm' = 's'): number {
+  const m = /^(\d+(?:\.\d+)?)(s|m|h|d)?$/.exec(s.trim());
+  if (!m) throw new Error(`bad duration "${s}" (use 15m, 24h, 2d)`);
+  return Math.round(Number(m[1]) * { s: 1e3, m: 6e4, h: 36e5, d: 864e5 }[(m[2] ?? bare) as 's' | 'm' | 'h' | 'd']);
+}
+
+// ---- reducing store reads to a snapshot ----
+
+/** Per version of one store, the furthest-along row (live before rollout before review ...). */
+export function releaseMap(rows: StoreRelease[], store: 'ios' | 'android'): Record<string, RelSnap> {
+  const out: Record<string, RelSnap & { rank: number }> = {};
+  for (const r of rows) {
+    if (r.store !== store || !r.version) continue;
+    const rank = PHASE_RANK[r.phase];
+    if (!out[r.version] || rank < out[r.version]!.rank) out[r.version] = { phase: r.phase, state: r.state, fraction: r.fraction, rank };
+  }
+  return Object.fromEntries(Object.entries(out).map(([v, { rank: _r, ...s }]) => [v, s]));
+}
+
+/** The Play rates the health findings judge (28-day user-weighted, else the window average), and Apple's poor items. */
+export function healthSnap(h: HealthSnapshot): NonNullable<AppSnap['health']> {
+  const out: NonNullable<AppSnap['health']> = {};
+  if (h.play && !('error' in h.play)) {
+    out.play = {
+      crash: lastValue(h.play.crash, 'userPerceivedCrashRate28dUserWeighted') ?? weightedAverage(h.play.crash, 'userPerceivedCrashRate'),
+      anr: lastValue(h.play.anr, 'userPerceivedAnrRate28dUserWeighted') ?? weightedAverage(h.play.anr, 'userPerceivedAnrRate'),
+    };
+  }
+  if (h.apple && !('error' in h.apple)) {
+    out.apple = { poor: [
+      ...h.apple.metrics.filter(m => m.goal === 'poor').map(m => `${m.metric} ${m.value} ${m.unit} on ${m.version}`),
+      ...h.apple.signatures.filter(s => s.weight >= 0.25).map(s => `${s.type} build ${s.build}: ${s.signature.slice(0, 80)}`),
+    ] };
+  }
+  return out;
+}
+
+/** Keeps what the new read has and what the old one had for a part this read could not get. Pure. */
+export function mergeSnap(prev: AppSnap | undefined, next: AppSnap): AppSnap {
+  const seen = (a?: ReviewSnap[], b?: ReviewSnap[]): ReviewSnap[] | undefined => {
+    if (!a && !b) return undefined;
+    const byId = new Map<string, ReviewSnap>();
+    for (const r of [...(b ?? []), ...(a ?? [])]) byId.set(r.id, r);
+    return [...byId.values()].sort((x, y) => y.date.localeCompare(x.date)).slice(0, MAX_SEEN_REVIEWS);
+  };
+  const releases = { ...(prev?.releases ?? {}), ...(next.releases ?? {}) };
+  const health = { ...(prev?.health ?? {}), ...(next.health ?? {}) };
+  const reviews = { apple: seen(next.reviews?.apple, prev?.reviews?.apple), play: seen(next.reviews?.play, prev?.reviews?.play) };
+  const hasR = reviews.apple || reviews.play;
+  return { name: next.name, ids: { ...prev?.ids, ...Object.fromEntries(Object.entries(next.ids).filter(([, v]) => v)) },
+    ...(Object.keys(releases).length ? { releases } : {}), ...(Object.keys(health).length ? { health } : {}),
+    ...(next.healthAt ?? prev?.healthAt ? { healthAt: next.healthAt ?? prev?.healthAt } : {}),
+    ...(hasR ? { reviews: { ...(reviews.apple ? { apple: reviews.apple } : {}), ...(reviews.play ? { play: reviews.play } : {}) } } : {}) };
+}
+
+// ---- the diff ----
+
+const REACHING = new Set(['live', 'rollout', 'halted', 'released']);
+const pct = (x: number | null): string => (x === null ? 'n/a' : `${(x * 100).toFixed(2)} %`);
+const storeName = (s: WatchStore): string => (s === 'apple' ? 'App Store' : 'Google Play');
+
+/** The console page that explains each kind, per store. Apple has no deep link for reviews or crashes in the table:
+ *  the version page / TestFlight stand in (the app's own pages, never a made-up path). */
+export function eventUrl(kind: EventKind, store: WatchStore, ids: ConsoleIds): string {
+  if (store === 'apple') return consoleUrl(kind === 'rejected' ? 'asc.app-review' : kind === 'crash_threshold' ? 'asc.testflight' : 'asc.version', ids);
+  return consoleUrl(kind === 'crash_threshold' ? 'play.vitals' : kind === 'review_low' || kind === 'review_needs_reply' ? 'play.dashboard' : 'play.production', ids);
+}
+
+const snippet = (s: string, n = 140): string => s.replace(/\s+/g, ' ').trim().slice(0, n);
+
+/**
+ * Events between two snapshots of one app. `prev` undefined = the app's first read: nothing (baseline). A part that
+ * either side does not have is skipped, so a store that could not be read never produces an event, and a part read
+ * for the first time is a baseline too. Pure.
+ */
+export function diffApp(prev: AppSnap | undefined, next: AppSnap, at: string): WatchEvent[] {
+  if (!prev) return [];
+  const out: WatchEvent[] = [];
+  const ids = { ...prev.ids, ...next.ids };
+  const ev = (store: WatchStore, kind: EventKind, version: string | null, from: string | null, to: string | null, detail: string): void => {
+    out.push({ at, app: next.name, store, kind, version, from, to, detail, url: eventUrl(kind, store, ids) });
+  };
+
+  for (const store of ['apple', 'play'] as const) {
+    const p = prev.releases?.[store], n = next.releases?.[store];
+    if (p && n) for (const [version, now] of Object.entries(n)) {
+      const was = p[version];
+      if (was?.phase === now.phase) continue;
+      const from = was?.state ?? null, to = now.state, v = version;
+      if (now.phase === 'rejected') ev(store, 'rejected', v, from, to, `${storeName(store)} ${v}: review ended in ${to}${store === 'apple' ? ' (the reason is in the Resolution Center)' : ''}`);
+      else if (now.phase === 'approved') ev(store, 'approved', v, from, to, `${storeName(store)} ${v}: passed review, waiting for release (${to})`);
+      else if ((now.phase === 'live' || now.phase === 'rollout') && !REACHING.has(was?.phase ?? '')) {
+        ev(store, 'live', v, from, to, `${storeName(store)} ${v} is ${now.phase === 'live' ? 'live' : `rolling out${now.fraction !== null ? ` at ${Math.round(now.fraction * 1000) / 10} %` : ''}`}`);
+      } else if (now.phase === 'halted') ev(store, 'rollout_halted', v, from, to, `${storeName(store)} ${v}: rollout halted${now.fraction !== null ? ` at ${Math.round(now.fraction * 1000) / 10} %` : ''}`);
+    }
+  }
+
+  const pp = prev.health?.play, np = next.health?.play;
+  if (pp && np) {
+    for (const [key, label, limit] of [['crash', 'user-perceived crash rate', PLAY_THRESHOLDS.crash], ['anr', 'user-perceived ANR rate', PLAY_THRESHOLDS.anr]] as const) {
+      const was = pp[key], now = np[key];
+      if (now !== null && now >= limit && (was === null || was < limit)) {
+        ev('play', 'crash_threshold', null, pct(was), pct(now), `${label} (28 d) ${pct(now)} crossed the Play bad behavior threshold ${pct(limit)}`);
+      }
+    }
+  }
+  const pa = prev.health?.apple, na = next.health?.apple;
+  if (pa && na) for (const item of na.poor) if (!pa.poor.includes(item)) ev('apple', 'crash_threshold', null, null, 'poor', `App Store diagnostics: ${item}`);
+
+  for (const store of ['apple', 'play'] as const) {
+    const p = prev.reviews?.[store], n = next.reviews?.[store];
+    if (!p || !n) continue;
+    const seen = new Set(p.map(r => r.id));
+    for (const r of n) {
+      if (seen.has(r.id)) continue;
+      if (r.rating >= 1 && r.rating <= LOW_STARS) ev(store, 'review_low', null, null, `${r.rating} stars`, `${r.rating}-star review${r.replied ? '' : ', no reply yet'}: ${snippet(r.text)}`);
+      else if (!r.replied) ev(store, 'review_needs_reply', null, null, `${r.rating} stars`, `${r.rating}-star review without a reply: ${snippet(r.text)}`);
+    }
+  }
+  return out;
+}
+
+export interface PassTarget { key: string; name: string }
+export interface AppRead { snap: AppSnap | null; errors: string[] }
+
+/**
+ * One pass over the targets: `read` gives each app's new snapshot; the result is the new state, the events and the
+ * errors. An app whose read failed entirely keeps its old snapshot. Apps in the state that are no longer targets are
+ * kept (a folder removed for a while does not lose its baseline). Pure given `read`.
+ */
+export async function runPass(o: { targets: PassTarget[]; prev: WatchState; at: string; read: (t: PassTarget, prev: AppSnap | undefined) => Promise<AppRead>; concurrency?: number }):
+  Promise<{ state: WatchState; events: WatchEvent[]; errors: { app: string; error: string }[]; baseline: string[] }> {
+  const events: WatchEvent[] = [];
+  const errors: { app: string; error: string }[] = [];
+  const baseline: string[] = [];
+  const apps: Record<string, AppSnap> = { ...o.prev.apps };
+  let next = 0;
+  const worker = async (): Promise<void> => {
+    while (next < o.targets.length) {
+      const t = o.targets[next++]!;
+      const before = o.prev.apps[t.key];
+      let r: AppRead;
+      try { r = await o.read(t, before); } catch (e) { r = { snap: null, errors: [(e as Error).message] }; }
+      for (const e of r.errors) errors.push({ app: t.name, error: e });
+      if (!r.snap) continue;
+      events.push(...diffApp(before, r.snap, o.at));
+      if (!before) baseline.push(t.name);
+      apps[t.key] = mergeSnap(before, r.snap);
+    }
+  };
+  await Promise.all(Array.from({ length: Math.max(1, Math.min(o.concurrency ?? 2, o.targets.length)) }, worker));
+  return { state: { version: STATE_VERSION, at: o.at, apps }, events, errors, baseline };
+}
+
+/** A made-up event for `watch test`. */
+export const testEvent = (at = new Date().toISOString()): WatchEvent =>
+  ({ at, app: 'storebound test', store: 'apple', kind: 'live', version: '1.0.0', from: 'READY_FOR_SALE', to: 'READY_FOR_SALE', detail: 'This is a test event from storebound watch test', url: 'https://appstoreconnect.apple.com/apps' });
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index ea8e7f1..48d241e 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -75,6 +75,11 @@ export const TOOLS: ToolDef[] = [
     description: 'Weekly health summary as Markdown in .storebound/health/<date>.md (plus <date>.json for the next week-over-week comparison). Local files only; dry_run prints the report.',
     props: { store: { type: 'string', enum: ['both', 'apple', 'play'], default: 'both' } },
     args: i => (i.store === 'apple' ? ['--apple'] : i.store === 'play' ? ['--play'] : []) },
+  { name: 'events_recent', title: 'Recent store events', command: ['events'], write: false, network: false,
+    description: 'Read-only: the store events that storebound watch recorded on this machine (rejected, approved, live, rollout_halted, crash_threshold, review_low, review_needs_reply), newest last, each with the app, store, version, from / to state, detail and the console link. Nothing is read from the stores.',
+    props: { since: { type: 'string', pattern: '^\\d+(\\.\\d+)?[smhd]?$', description: 'e.g. 24h, 7d (default: all)' }, app: { type: 'string', description: 'App name (or part of it)' },
+      kind: { type: 'string', pattern: '^[a-z_]+(,[a-z_]+)*$', description: 'e.g. rejected or rejected,rollout_halted' } },
+    args: i => [...opt('since', i.since), ...opt('app', i.app), ...opt('kind', i.kind)] },
   { name: 'reviews_list', title: 'Store reviews', command: ['reviews', 'list'], write: false, network: true,
     description: 'Read-only list of recent App Store and Google Play reviews (date, stars, territory / language, replied or not, text). Google Play only returns reviews from the last 7 days.',
     props: { store: { type: 'string', enum: ['apple', 'play'], description: 'Default: both' }, days: { type: 'integer', minimum: 1, maximum: 365, default: 14 },
diff --git a/cli/watch.ts b/cli/watch.ts
new file mode 100644
index 0000000..0f12a41
--- /dev/null
+++ b/cli/watch.ts
@@ -0,0 +1,196 @@
+// `storebound watch`: store events for every app on this machine, for people and agents.
+//   storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook] [--once] [--dry] [--json]
+//   storebound watch test [--notify ...] [--dry]     sends one test event to every configured sink
+// Apps: the machine's app folder list (~/.storebound/projects.json: folders and store-only apps, the same list as the
+// desktop app) or --dir for one folder. Each pass reads release state (like `release status`), crash / ANR health
+// (like `health`, at most hourly) and new reviews (like `reviews list`) per app with the credentials those commands
+// use, compares with ~/.storebound/watch-state.json and emits events: rejected, approved, live, rollout_halted,
+// crash_threshold, review_low (<= 2 stars), review_needs_reply (3-5 stars, no reply). The first pass of an app only
+// records the baseline. Every event is appended to ~/.storebound/events.jsonl (`storebound events` reads it) and sent
+// to the sinks (docs/watch.md). Read-only on the stores. STOREBOUND_HOME moves ~/.storebound.
+//   --every   loop period, 5m or more (a bare number is minutes), with +-10 % jitter; errors back off up to 4 h
+//   --once    one pass and exit (cron, PM2 restarts)      --dry   print what would be sent; nothing is sent or saved
+//   --json    events as JSON lines on stdout
+import { existsSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { emptyStatus, fillAppStatus, lastLine, type Exec } from './lib/app-status';
+import type { Args } from './lib/args';
+import { CONFIG_NAMES } from './lib/config';
+import { consoleIdsFromConfig } from './lib/console-links';
+import { profileEnv } from './lib/credentials';
+import { done, log, warn } from './lib/log';
+import { readRegistry } from './lib/registry';
+import { runCommand } from './lib/runner';
+import type { HealthSnapshot } from './lib/health';
+import {
+  type AppRead, type AppSnap, appendEvents, durationMs, eventsFile, healthSnap, type PassTarget, readState, releaseMap, type ReviewSnap, runPass, stateFile,
+  testEvent, type WatchEvent, writeState,
+} from './lib/watch';
+import { configuredSinks, parseNotify, sendEvent, sinkConfig, type SinkConfig } from './lib/watch-sinks';
+
+const TAG = 'watch';
+const USAGE = 'usage: storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook] [--once] [--dry] [--json] | watch test [--notify ...] [--dry]';
+export const HEALTH_EVERY_MS = 60 * 60_000;
+const MIN_EVERY_MS = 5 * 60_000;
+const MAX_BACKOFF_MS = 4 * 60 * 60_000;
+const CHILD_TIMEOUT_MS = 5 * 60_000;
+const REVIEW_DAYS = 3;
+
+interface Target extends PassTarget { dir: string; virtual: boolean; env: Record<string, string> }
+
+/** Runs a storebound child command; a hung one is cancelled after the timeout. */
+const exec = (env: Record<string, string>): Exec => async (argv, cwd) => {
+  const run = runCommand(argv, { cwd, env, machine: true });
+  const timer = setTimeout(() => run.cancel(), CHILD_TIMEOUT_MS);
+  try { return await run.result; } finally { clearTimeout(timer); }
+};
+
+/** The apps to watch: --dir, or the registry's folders and store-only apps (a store-only app that has a folder here is read once). */
+async function listTargets(args: Args): Promise<Target[]> {
+  const dir = args.get('dir');
+  if (dir) {
+    const d = resolve(dir);
+    if (!CONFIG_NAMES.some(n => existsSync(join(d, n)))) throw new Error(`--dir: no storebound.config.ts in ${d}`);
+    return [{ key: `dir:${d}`, name: d.split(/[\\/]/).pop() ?? d, dir: d, virtual: false, env: {} }];
+  }
+  const reg = readRegistry();
+  const out: Target[] = [];
+  for (const p of reg.projects) {
+    if (!CONFIG_NAMES.some(n => existsSync(join(p.path, n)))) { warn(TAG, `${p.name}: no storebound.config.ts in ${p.path}, skipped (storebound apps remove ${p.path})`); continue; }
+    out.push({ key: `dir:${p.path}`, name: p.name, dir: p.path, virtual: false, env: {} });
+  }
+  if (reg.storeApps?.length) {
+    const { checkVirtual, virtualDir } = await import('./serve');
+    for (const s of reg.storeApps) {
+      try {
+        if (s.store === 'apple' && !s.bundleId) throw new Error('no bundle id (storebound apps add --store apple --app-id <id> --bundle-id <id>)');
+        const v = checkVirtual({ name: s.name, ...(s.store === 'apple' ? { apple: { bundleId: s.bundleId, appId: s.appId } } : { play: { packageName: s.appId } }) });
+        out.push({ key: `store:${s.id}`, name: s.name, dir: virtualDir(v), virtual: true, env: s.account ? profileEnv(s.account) : {} });
+      } catch (e) { warn(TAG, `${s.name}: ${(e as Error).message}, skipped`); }
+    }
+  }
+  return out;
+}
+
+/** Reads one app: releases of both stores, health when due, new reviews. A part that cannot be read is left out. */
+async function readApp(t: Target, prev: AppSnap | undefined, now: number): Promise<AppRead> {
+  const run = exec(t.env);
+  const errors: string[] = [];
+  // virtual: true skips fillAppStatus's offline `check` (only the store reads are needed here)
+  const e = emptyStatus(t.dir);
+  try { await fillAppStatus(e, t.dir, { live: true, virtual: true, exec: run }); } catch (err) { return { snap: null, errors: [(err as Error).message] }; }
+  const s = e.summary!;
+  const snap: AppSnap = { name: s.name || t.name, ids: { appleAppId: s.apple?.appId ?? null } };
+  if (s.play && !t.virtual && !prev?.ids.playDeveloperId) {
+    try { const { loadConfig } = await import('./lib/config'); Object.assign(snap.ids, consoleIdsFromConfig((await loadConfig(undefined, t.dir)).config)); } catch { /* links fall back to the console home */ }
+  }
+  const all = e.release.all ?? [];
+  snap.releases = {};
+  if (s.apple) { if (e.storeErrors.ios) errors.push(`App Store: ${e.storeErrors.ios}`); else snap.releases.apple = releaseMap(all, 'ios'); }
+  if (s.play) { if (e.storeErrors.android) errors.push(`Google Play: ${e.storeErrors.android}`); else snap.releases.play = releaseMap(all, 'android'); }
+
+  const due = !prev?.healthAt || now - Date.parse(prev.healthAt) >= HEALTH_EVERY_MS;
+  if (due && (s.apple || s.play)) {
+    const h = await run(['health', '--json'], t.dir);
+    if (h.data && typeof h.data === 'object') { snap.health = healthSnap(h.data as HealthSnapshot); snap.healthAt = new Date(now).toISOString(); }
+    else errors.push(`health: ${lastLine(h.out) || `exit ${h.code}`}`);
+  }
+
+  snap.reviews = {};
+  for (const [store, on] of [['apple', !!s.apple], ['play', !!s.play]] as const) {
+    if (!on) continue;
+    const r = await run(['reviews', 'list', '--store', store, '--days', String(REVIEW_DAYS), '--json'], t.dir);
+    if (r.code !== 0 || !Array.isArray(r.data)) { errors.push(`reviews ${store}: ${lastLine(r.out) || `exit ${r.code}`}`); continue; }
+    snap.reviews[store] = (r.data as { id: string; rating: number; title?: string; body?: string; date: string; reply?: unknown }[]).map((x): ReviewSnap =>
+      ({ id: String(x.id), rating: x.rating, replied: !!x.reply, date: x.date, text: `${x.title ? x.title + ': ' : ''}${x.body ?? ''}`.slice(0, 300) }));
+  }
+  return { snap, errors };
+}
+
+const line = (e: WatchEvent): string => `${e.at.slice(0, 19)}Z ${e.app} [${e.store}] ${e.kind}${e.version ? ` ${e.version}` : ''}: ${e.detail} ${e.url}`;
+
+function chosenSinks(args: Args): SinkConfig {
+  const only = args.has('notify') ? parseNotify(args.list('notify')) : undefined;
+  if (only) {
+    const have = sinkConfig();
+    for (const n of only) if (n !== 'os' && !have[n]) warn(TAG, `--notify ${n}: not configured (docs/watch.md), skipped`);
+  }
+  return sinkConfig(process.env, undefined, only);
+}
+
+/** Sends to the sinks; a failing sink is logged (the sink name only) and never stops anything. */
+async function deliver(e: WatchEvent, c: SinkConfig, args: Args): Promise<void> {
+  if (args.has('dry')) { log(TAG, `dry run: would send ${e.kind} of ${e.app} to ${configuredSinks(c).join(', ') || 'no sink'}`); return; }
+  for (const r of await sendEvent(e, c)) if (!r.ok) warn(TAG, `${r.sink}: not sent (${r.error})`);
+}
+
+function emit(e: WatchEvent, args: Args): void {
+  if (args.has('json')) process.stdout.write(JSON.stringify(e) + '\n');
+  else console.log(line(e));
+}
+
+async function testCmd(args: Args): Promise<void> {
+  const c = chosenSinks(args);
+  const names = configuredSinks(c);
+  if (!names.length) { warn(TAG, 'no sink configured: set STOREBOUND_NTFY_TOPIC, STOREBOUND_TELEGRAM_TOKEN + STOREBOUND_TELEGRAM_CHAT, STOREBOUND_WEBHOOK_URL, or pass --notify os (docs/watch.md)'); process.exitCode = 1; return; }
+  const e = testEvent();
+  emit(e, args);
+  if (args.has('dry')) { done(TAG, `dry run: would send the test event to ${names.join(', ')}`); return; }
+  const rep = await sendEvent(e, c);
+  for (const r of rep) (r.ok ? log : warn)(TAG, `${r.sink}: ${r.ok ? 'sent' : `not sent (${r.error})`}`);
+  const missing = names.filter(n => !rep.some(r => r.sink === n));
+  if (missing.length) log(TAG, `${missing.join(', ')}: unavailable on this machine, skipped`);
+  if (rep.some(r => !r.ok)) process.exitCode = 1;
+  done(TAG, `test event: ${rep.filter(r => r.ok).length}/${names.length} sink(s) delivered`);
+}
+
+export function everyMs(args: Args): number {
+  const ms = durationMs(args.str('every', '15m'), 'm');
+  if (ms < MIN_EVERY_MS) throw new Error('--every: 5m at least (the stores rate-limit their APIs)');
+  return ms;
+}
+
+export async function run(args: Args): Promise<void> {
+  const sub = args._[0];
+  if (sub === 'test') return testCmd(args);
+  if (sub) throw new Error(USAGE);
+  const every = everyMs(args);
+  const sinks = chosenSinks(args);
+  const once = args.has('once');
+  let stopping = false, wake: (() => void) | null = null;
+  const stop = (sig: string): void => {
+    if (stopping) process.exit(130);
+    stopping = true;
+    log(TAG, `${sig}: finishing the pass in progress, then stopping`);
+    wake?.();
+  };
+  process.on('SIGINT', () => stop('SIGINT'));
+  process.on('SIGTERM', () => stop('SIGTERM'));
+
+  let n = 0, failures = 0;
+  log(TAG, `${once ? 'one pass' : `every ${Math.round(every / 60_000)}m`}, sinks: ${configuredSinks(sinks).join(', ') || 'none (events go to the log and stdout)'}${args.has('dry') ? ', dry run' : ''}`);
+  while (!stopping) {
+    n++;
+    let ok = false, count = 0, events = 0, errs = 0;
+    try {
+      const targets = await listTargets(args);
+      if (!targets.length) warn(TAG, 'no app folders: storebound apps add <folder> (or --dir <folder>)');
+      const now = Date.now();
+      const r = await runPass({ targets, prev: readState(), at: new Date(now).toISOString(), concurrency: 2, read: (t, prev) => readApp(t as Target, prev, now) });
+      count = targets.length; events = r.events.length; errs = r.errors.length;
+      for (const x of r.errors) warn(TAG, `${x.app}: ${x.error.slice(0, 200)}`);
+      if (r.baseline.length) log(TAG, `baseline recorded for ${r.baseline.join(', ')} (no events on a first read)`);
+      for (const e of r.events) { emit(e, args); await deliver(e, sinks, args); }
+      if (!args.has('dry')) { appendEvents(r.events); writeState(r.state); }
+      ok = !(count > 0 && errs >= count);
+    } catch (e) { errs++; warn(TAG, `pass failed: ${(e as Error).message.slice(0, 300)}`); }
+    failures = ok ? 0 : failures + 1;
+    const wait = Math.min(MAX_BACKOFF_MS, every * 2 ** Math.min(failures, 6)) * (failures ? 1 : 0.9 + Math.random() * 0.2);
+    log(TAG, `pass ${n}: ${count} app(s), ${events} event(s), ${errs} error(s)${once || stopping ? '' : `, next in ${Math.round(wait / 60_000)}m${failures ? ` (backoff after ${failures} failed pass(es))` : ''}`}`);
+    if (once || stopping) break;
+    await new Promise<void>(res => { const t = setTimeout(res, wait); wake = () => { clearTimeout(t); res(); }; });
+    wake = null;
+  }
+  if (once && failures) process.exitCode = 1;
+  log(TAG, `stopped (state ${stateFile()}, events ${eventsFile()})`);
+}
diff --git a/docs/desktop-coverage.md b/docs/desktop-coverage.md
index ae4a1af..493ec96 100644
--- a/docs/desktop-coverage.md
+++ b/docs/desktop-coverage.md
@@ -5,7 +5,7 @@ Every CLI command (cli/commands.ts) and the desktop place that runs it. "covered
 (serve.ts, or a host command `host:`) and the window calls it; tests/desktop-coverage.test.ts fails on a gap.
 Owner-only parts are owner actions in the window or owner steps with their terminal command (More tools).
 
-**97 commands:** 91 covered, 0 gaps, 6 not for the desktop.
+**99 commands:** 91 covered, 0 gaps, 8 not for the desktop.
 
 | command | status | where in the window | methods | owner step |
 |---|---|---|---|---|
@@ -13,6 +13,8 @@ Owner-only parts are owner actions in the window or owner steps with their termi
 | `import` | covered | App folders / first-run guide: Import from fastlane | `host:project_import_fastlane` |  |
 | `install` | covered | More tools: Install for an AI tool | `agent.install` |  |
 | `mcp` | not-for-desktop | the stdio server for AI tools; the window itself is the GUI over the same commands |  |  |
+| `watch` | not-for-desktop | a server loop for people and agents (PM2, cron); the window already reads the stores in the background and notifies from the tray |  |  |
+| `events` | not-for-desktop | the log that watch writes for terminals and agents; the window shows its own what-changed feed and tray notifications |  |  |
 | `serve` | not-for-desktop | the JSON-RPC sidecar the window runs on; nothing to click |  |  |
 | `apps` | covered | Accounts (store apps per account, key check) and App folders (list, add, remove) | `host:store_apps_refresh`, `host:account_check`, `host:projects_list`, `host:project_add`, `host:project_remove` |  |
 | `desktop` | not-for-desktop | opens or installs this window from a terminal |  |  |
diff --git a/docs/watch.md b/docs/watch.md
new file mode 100644
index 0000000..813ca7d
--- /dev/null
+++ b/docs/watch.md
@@ -0,0 +1,67 @@
+# storebound watch
+
+Store events for every app on this machine, for people and agents. Read-only on the stores.
+
+```
+storebound watch                      # loop, every 15 minutes
+storebound watch --once               # one pass (cron, PM2 restarts)
+storebound watch --dir ./my-app       # one folder instead of the machine's app list
+storebound watch --notify os,ntfy     # choose the sinks (default: every configured one)
+storebound watch --dry --json         # print the events that would go out; nothing is sent or saved
+storebound watch test                 # send one test event to every configured sink
+storebound events --since 24h --kind rejected --json
+```
+
+Apps come from the machine's app folder list (`storebound apps folders`, the same list as the desktop app: folders
+and store-only apps) or from `--dir`. Each app is read with the credentials its commands use (the project's
+`.storebound/`, its profile, or the store-only app's account).
+
+Each pass reads release state per store (like `release status`), crash / ANR health (like `health`, at most once an
+hour) and new reviews (like `reviews list`), compares with `~/.storebound/watch-state.json` and emits events. The first
+pass of an app only records the baseline: no event storm. A store that cannot be read in a pass keeps its last state
+and produces no event.
+
+## Events
+
+| kind | when |
+| --- | --- |
+| `rejected` | a version went from in review to rejected (App Store; link to App Review) |
+| `approved` | a version passed review and waits for release (App Store pending developer release) |
+| `live` | a version became live, or its rollout started |
+| `rollout_halted` | a Play staged rollout was halted, or an App Store phased release paused |
+| `crash_threshold` | Play crash or ANR rate (28 d) crossed the bad behavior threshold; a new App Store metric or diagnostic rated poor |
+| `review_low` | a new review of 2 stars or less |
+| `review_needs_reply` | a new review of 3-5 stars without a reply |
+
+Each event is one JSON object: `{ at, app, store, kind, version, from, to, detail, url }`, where `url` is the absolute
+console link for the app. Events are appended to `~/.storebound/events.jsonl` (rotated at 5 MB, one `.1` file kept).
+`STOREBOUND_HOME` moves `~/.storebound`. `storebound events` and the MCP tool `events_recent` read the file.
+
+## Sinks
+
+All optional. Configure with environment variables or `~/.storebound/watch.json`; values are never printed.
+
+| sink | variables |
+| --- | --- |
+| ntfy | `STOREBOUND_NTFY_TOPIC` (required), `STOREBOUND_NTFY_URL` (default `https://ntfy.sh`), `STOREBOUND_NTFY_TOKEN` (optional). Title, Tags and Click headers; Priority high for `rejected` and `rollout_halted` |
+| Telegram | `STOREBOUND_TELEGRAM_TOKEN` and `STOREBOUND_TELEGRAM_CHAT` |
+| webhook | `STOREBOUND_WEBHOOK_URL` (JSON POST of the event) |
+| OS notification | `--notify os`, or `"notify": ["os"]` in watch.json (Windows toast, macOS osascript, Linux notify-send; skipped quietly when unavailable) |
+
+```json
+{ "notify": ["os"], "ntfy": { "topic": "..." }, "telegram": { "token": "...", "chat": "..." }, "webhook": { "url": "..." } }
+```
+
+Network calls time out after 10 s and are retried once. A failing sink is logged (by name) and never stops the watch.
+
+## On a server with PM2
+
+```
+pm2 start "npx -y storebound watch --notify ntfy" --name storebound-watch
+pm2 save
+```
+
+Put the credentials profiles (`~/.storebound/credentials/`) and the app folder list (`storebound apps add <folder>`)
+on that server, and the sink variables in the PM2 environment (`STOREBOUND_NTFY_TOPIC=...`). The loop polls every
+`--every` (5m at least, 15m default, +-10 % jitter), backs off after failed passes (up to 4 h), writes one heartbeat
+line per pass and stops cleanly on SIGINT / SIGTERM. With cron use `--once`.
diff --git a/skills/store-health/SKILL.md b/skills/store-health/SKILL.md
index 8795ad2..8f56f93 100644
--- a/skills/store-health/SKILL.md
+++ b/skills/store-health/SKILL.md
@@ -51,6 +51,10 @@ Fix the top signature first, then check its device / OS column: one model or one
    installs but is not a rollback.
 4. Next week: `storebound health --weekly` shows the change in percentage points next to last week.
 
+## Watching for changes
+- `storebound watch` polls every app on this machine and records store events (rejected, approved, live, rollout_halted, crash_threshold, review_low, review_needs_reply) in `~/.storebound/events.jsonl`; sinks: OS notification, ntfy, Telegram, webhook (docs/watch.md).
+- `storebound events --since 24h [--app <name>] [--kind rejected] --json` (MCP `events_recent`) reads that log without touching the stores: start a session there before polling the stores yourself.
+
 ## Gotchas
 - `vitals not readable`: the API is not enabled, the service account lacks the permission, or the app has no release
   yet. `validate` only notes it; `storebound health` warns.
diff --git a/tests/desktop-coverage.test.ts b/tests/desktop-coverage.test.ts
index c12236b..36f198b 100644
--- a/tests/desktop-coverage.test.ts
+++ b/tests/desktop-coverage.test.ts
@@ -8,7 +8,7 @@ import { describeMethods } from '../cli/serve';
 import { analyze, render } from '../tools/gen-desktop-coverage';
 
 /** The only commands that make no sense in a window. Adding one here needs a reason in the coverage map. */
-const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings', 'aab'];
+const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings', 'aab', 'watch', 'events'];
 
 describe('desktop coverage', () => {
   const { rows, extra } = analyze();
diff --git a/tests/json-stdout.test.ts b/tests/json-stdout.test.ts
index 168f185..dddfd1b 100644
--- a/tests/json-stdout.test.ts
+++ b/tests/json-stdout.test.ts
@@ -17,7 +17,7 @@ import { installStores, uninstallStores } from './helpers/fake-stores';
 
 const CLI = resolve(import.meta.dir, '../cli');
 /** Never run here: long-lived servers, and the ones that install or open things on the machine. */
-const SKIP = new Set(['mcp', 'serve', 'install', 'desktop', 'init', 'flow', 'ws']);
+const SKIP = new Set(['mcp', 'serve', 'install', 'desktop', 'init', 'flow', 'ws', 'watch']); // watch: a loop that prints JSON lines (tests/watch.test.ts)
 /** Commands that need a subcommand (or arguments) to reach their --json output. */
 const ARGV: Record<string, string[]> = {
   'prices': ['ppp', '--offline'], 'api': ['list'], 'accounts': ['list'], 'release': ['status'], 'apps': ['folders'],
diff --git a/tests/watch.test.ts b/tests/watch.test.ts
new file mode 100644
index 0000000..e1f9eea
--- /dev/null
+++ b/tests/watch.test.ts
@@ -0,0 +1,248 @@
+import { describe, expect, test } from 'bun:test';
+import { existsSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { TOOLS, toArgv } from '../cli/mcp-tools';
+import type { HealthSnapshot } from '../cli/lib/health';
+import {
+  type AppSnap, appendEvents, diffApp, durationMs, eventsFile, filterEvents, healthSnap, mergeSnap, readEvents, readState, releaseMap, type RelSnap, runPass, stateFile,
+  testEvent, type WatchEvent, writeState,
+} from '../cli/lib/watch';
+import { type FetchLike, ntfyRequest, osCommand, post, sendEvent, sinkConfig, telegramRequest, webhookRequest } from '../cli/lib/watch-sinks';
+
+const AT = '2026-10-22T10:00:00.000Z';
+const rel = (phase: string, state: string, fraction: number | null = null): RelSnap => ({ phase, state, fraction });
+const snap = (o: Partial<AppSnap> = {}): AppSnap => ({ name: 'Demo App', ids: { appleAppId: '6400000000', playDeveloperId: '111', playAppId: '222' }, ...o });
+const kinds = (es: WatchEvent[]) => es.map(e => `${e.store}:${e.kind}`);
+const tmp = () => mkdtempSync(join(tmpdir(), 'sb-watch-'));
+
+describe('watch diff', () => {
+  test('a first read of an app is a baseline: no events', () => {
+    expect(diffApp(undefined, snap({ releases: { apple: { '1.0': rel('rejected', 'REJECTED') } } }), AT)).toEqual([]);
+  });
+  test('App Store: in review -> rejected, pending developer release, live', () => {
+    const was = snap({ releases: { apple: { '1.2.0': rel('review', 'IN_REVIEW') } } });
+    const rejected = diffApp(was, snap({ releases: { apple: { '1.2.0': rel('rejected', 'REJECTED') } } }), AT);
+    expect(rejected).toHaveLength(1);
+    expect(rejected[0]).toMatchObject({ app: 'Demo App', store: 'apple', kind: 'rejected', version: '1.2.0', from: 'IN_REVIEW', to: 'REJECTED', at: AT });
+    expect(rejected[0]!.url).toBe('https://appstoreconnect.apple.com/apps/6400000000/distribution/reviewsubmissions');
+    const approved = diffApp(was, snap({ releases: { apple: { '1.2.0': rel('approved', 'PENDING_DEVELOPER_RELEASE') } } }), AT);
+    expect(kinds(approved)).toEqual(['apple:approved']);
+    expect(approved[0]!.url).toContain('/apps/6400000000/distribution/ios/version');
+    const live = diffApp(snap({ releases: { apple: { '1.2.0': rel('approved', 'PENDING_DEVELOPER_RELEASE') } } }), snap({ releases: { apple: { '1.2.0': rel('live', 'READY_FOR_SALE') } } }), AT);
+    expect(kinds(live)).toEqual(['apple:live']);
+  });
+  test('Google Play: review -> live, rollout starts, rollout halted', () => {
+    const play = (r: RelSnap) => snap({ releases: { play: { '1.2.0': r } } });
+    expect(kinds(diffApp(play(rel('review', 'completed')), play(rel('live', 'completed')), AT))).toEqual(['play:live']);
+    const started = diffApp(play(rel('review', 'completed')), play(rel('rollout', 'inProgress', 0.1)), AT);
+    expect(kinds(started)).toEqual(['play:live']);
+    expect(started[0]!.detail).toContain('10 %');
+    expect(started[0]!.url).toBe('https://play.google.com/console/u/0/developers/111/app/222/tracks/production');
+    const halted = diffApp(play(rel('rollout', 'inProgress', 0.1)), play(rel('halted', 'halted', 0.1)), AT);
+    expect(kinds(halted)).toEqual(['play:rollout_halted']);
+  });
+  test('no event for an unchanged phase, a rollout step, a rollout completing, or a store that was not read', () => {
+    const a = snap({ releases: { apple: { '1.0': rel('rollout', 'READY_FOR_SALE', 0.1) }, play: { '1.0': rel('rollout', 'inProgress', 0.1) } } });
+    const b = snap({ releases: { apple: { '1.0': rel('live', 'READY_FOR_SALE', 1) }, play: { '1.0': rel('rollout', 'inProgress', 0.5) } } });
+    expect(diffApp(a, b, AT)).toEqual([]);
+    expect(diffApp(a, snap(), AT)).toEqual([]);
+    expect(diffApp(snap(), snap({ releases: { apple: { '1.0': rel('rejected', 'REJECTED') } } }), AT)).toEqual([]);
+  });
+  test('a new version that appears already live is an event; one that appears in review is not', () => {
+    const was = snap({ releases: { apple: { '1.0': rel('live', 'READY_FOR_SALE') } } });
+    expect(kinds(diffApp(was, snap({ releases: { apple: { '1.0': rel('live', 'READY_FOR_SALE'), '1.1': rel('review', 'WAITING_FOR_REVIEW') } } }), AT))).toEqual([]);
+    expect(kinds(diffApp(was, snap({ releases: { apple: { '1.0': rel('live', 'READY_FOR_SALE'), '1.1': rel('live', 'READY_FOR_SALE') } } }), AT))).toEqual(['apple:live']);
+  });
+  test('crash threshold: only the crossing, per metric and per store', () => {
+    const play = (crash: number | null, anr: number | null) => snap({ health: { play: { crash, anr } } });
+    const cross = diffApp(play(0.005, 0.001), play(0.012, 0.001), AT);
+    expect(kinds(cross)).toEqual(['play:crash_threshold']);
+    expect(cross[0]).toMatchObject({ from: '0.50 %', to: '1.20 %' });
+    expect(cross[0]!.url).toContain('/vitals/crashes');
+    expect(diffApp(play(0.012, 0.001), play(0.015, 0.001), AT)).toEqual([]);
+    expect(kinds(diffApp(play(null, null), play(0.012, 0.005), AT))).toEqual(['play:crash_threshold', 'play:crash_threshold']);
+    expect(diffApp(play(0.012, 0), play(0.002, 0), AT)).toEqual([]);
+    const apple = (poor: string[]) => snap({ health: { apple: { poor } } });
+    expect(kinds(diffApp(apple([]), apple(['hangRate 2 s on 1.2']), AT))).toEqual(['apple:crash_threshold']);
+    expect(diffApp(apple(['hangRate 2 s on 1.2']), apple(['hangRate 2 s on 1.2']), AT)).toEqual([]);
+  });
+  test('reviews: new low review, new unanswered review, nothing for seen or answered ones', () => {
+    const r = (id: string, rating: number, replied = false) => ({ id, rating, replied, date: '2026-10-22T09:00:00Z', text: `text of ${id}` });
+    const was = snap({ reviews: { apple: [r('a', 5)], play: [r('p', 1)] } });
+    const now = snap({ reviews: { apple: [r('a', 5), r('b', 1), r('c', 4), r('d', 5, true)], play: [r('p', 1), r('q', 2)] } });
+    const evs = diffApp(was, now, AT);
+    expect(evs.map(e => `${e.store}:${e.kind}:${e.to}`)).toEqual(['apple:review_low:1 stars', 'apple:review_needs_reply:4 stars', 'play:review_low:2 stars']);
+    expect(evs[0]!.detail).toContain('text of b');
+    expect(diffApp(was, was, AT)).toEqual([]);
+  });
+  test('every event kind is producible and carries the full shape', () => {
+    const all = [
+      ...diffApp(snap({ releases: { apple: { '1': rel('review', 'IN_REVIEW') }, play: { '1': rel('rollout', 'inProgress') } } }),
+        snap({ releases: { apple: { '1': rel('rejected', 'REJECTED') }, play: { '1': rel('halted', 'halted') } } }), AT),
+      ...diffApp(snap({ releases: { apple: { '2': rel('review', 'IN_REVIEW') } } }), snap({ releases: { apple: { '2': rel('approved', 'PENDING_DEVELOPER_RELEASE') } } }), AT),
+      ...diffApp(snap({ releases: { apple: { '3': rel('approved', 'X') } } }), snap({ releases: { apple: { '3': rel('live', 'READY_FOR_SALE') } } }), AT),
+      ...diffApp(snap({ health: { play: { crash: 0, anr: 0 } } }), snap({ health: { play: { crash: 0.02, anr: 0 } } }), AT),
+      ...diffApp(snap({ reviews: { play: [] } }), snap({ reviews: { play: [{ id: 'x', rating: 1, replied: false, date: AT, text: 't' }, { id: 'y', rating: 5, replied: false, date: AT, text: 't' }] } }), AT),
+    ];
+    expect([...new Set(all.map(e => e.kind))].sort()).toEqual(['approved', 'crash_threshold', 'live', 'rejected', 'review_low', 'review_needs_reply', 'rollout_halted']);
+    for (const e of all) { expect(Object.keys(e).sort()).toEqual(['app', 'at', 'detail', 'from', 'kind', 'store', 'to', 'url', 'version']); expect(e.url).toMatch(/^https:\/\//); }
+  });
+});
+
+describe('watch snapshots and a pass', () => {
+  test('releaseMap keeps the furthest-along row per version; healthSnap reads rates and poor items', () => {
+    const rows = [
+      { store: 'android', version: '1.0', build: '1', state: 'completed', phase: 'testing', fraction: null, track: 'beta' },
+      { store: 'android', version: '1.0', build: '2', state: 'inProgress', phase: 'rollout', fraction: 0.2, track: 'production' },
+      { store: 'ios', version: '1.0', build: '2', state: 'IN_REVIEW', phase: 'review', fraction: null, track: null },
+    ] as Parameters<typeof releaseMap>[0];
+    expect(releaseMap(rows, 'android')).toEqual({ '1.0': { phase: 'rollout', state: 'inProgress', fraction: 0.2 } });
+    expect(Object.keys(releaseMap(rows, 'ios'))).toEqual(['1.0']);
+    const h: HealthSnapshot = { date: '2026-10-22',
+      play: { window: { start: 'a', end: 'b', days: 7 }, crash: [{ date: 'd', dims: {}, values: { userPerceivedCrashRate28dUserWeighted: 0.012 } }], anr: [], issues: [] },
+      apple: { metrics: [{ category: 'c', metric: 'hangRate', unit: 's', version: '1.0', value: 2, goal: 'poor' }], signatures: [], betaCrashes: [] } };
+    expect(healthSnap(h)).toEqual({ play: { crash: 0.012, anr: null }, apple: { poor: ['hangRate 2 s on 1.0'] } });
+    expect(healthSnap({ date: 'd', play: { error: 'x' } })).toEqual({});
+  });
+  test('mergeSnap keeps a part this read did not get, and the seen reviews', () => {
+    const old = snap({ releases: { apple: { '1': rel('live', 'X') } }, reviews: { play: [{ id: 'a', rating: 5, replied: true, date: '2026-10-01', text: '' }] } });
+    const m = mergeSnap(old, snap({ releases: { play: { '1': rel('live', 'X') } }, reviews: { play: [{ id: 'b', rating: 5, replied: true, date: '2026-10-02', text: '' }] } }));
+    expect(Object.keys(m.releases!).sort()).toEqual(['apple', 'play']);
+    expect(m.reviews!.play!.map(r => r.id)).toEqual(['b', 'a']);
+  });
+  test('runPass: baseline pass emits nothing, the second pass emits, an unreadable app keeps its state', async () => {
+    const targets = [{ key: 'dir:/a', name: 'A' }, { key: 'dir:/b', name: 'B' }];
+    let phase = 'review', failB = false;
+    const read = async (t: { key: string; name: string }) => {
+      if (t.name === 'B' && failB) return { snap: null, errors: ['boom'] };
+      return { snap: snap({ name: t.name, releases: { apple: { '1': rel(phase, phase === 'live' ? 'READY_FOR_SALE' : 'IN_REVIEW') } } }), errors: [] };
+    };
+    const one = await runPass({ targets, prev: readState(join(tmp(), 'none.json')), at: AT, read });
+    expect(one.events).toEqual([]);
+    expect(one.baseline).toEqual(['A', 'B']);
+    phase = 'live'; failB = true;
+    const two = await runPass({ targets, prev: one.state, at: AT, read });
+    expect(two.events.map(e => e.app)).toEqual(['A']);
+    expect(two.errors).toEqual([{ app: 'B', error: 'boom' }]);
+    expect(two.state.apps['dir:/b']!.releases!.apple!['1']!.phase).toBe('review');
+  });
+});
+
+describe('events.jsonl and state files', () => {
+  const home = () => ({ STOREBOUND_HOME: tmp() });
+  const ev = (o: Partial<WatchEvent> = {}): WatchEvent => ({ ...testEvent(AT), ...o });
+  test('paths follow STOREBOUND_HOME', () => {
+    const env = home();
+    expect(eventsFile(env)).toBe(join(env.STOREBOUND_HOME, 'events.jsonl'));
+    expect(stateFile(env)).toBe(join(env.STOREBOUND_HOME, 'watch-state.json'));
+  });
+  test('append writes one JSON per line and reads back; a torn line is skipped', () => {
+    const f = eventsFile(home());
+    appendEvents([ev({ app: 'A' }), ev({ app: 'B' })], f);
+    appendEvents([ev({ app: 'C' })], f);
+    writeFileSync(f, readFileSync(f, 'utf8') + '{"at":"2026\n');
+    expect(readEvents(f).map(e => e.app)).toEqual(['A', 'B', 'C']);
+  });
+  test('rotation at the size limit keeps one .1 file and reads both', () => {
+    const f = eventsFile(home());
+    appendEvents([ev({ app: 'old' })], f, 50);
+    appendEvents([ev({ app: 'new' })], f, 50);
+    expect(existsSync(`${f}.1`)).toBe(true);
+    expect(readFileSync(f, 'utf8').trim().split('\n')).toHaveLength(1);
+    appendEvents([ev({ app: 'newer' })], f, 50);
+    appendEvents([ev({ app: 'newest' })], f, 50);
+    expect(readEvents(f).map(e => e.app)).toEqual(['newer', 'newest']);
+    expect(readFileSync(`${f}.1`, 'utf8')).toContain('newer');
+  });
+  test('state round trip; an unreadable file is a fresh baseline', () => {
+    const f = stateFile(home());
+    expect(readState(f).apps).toEqual({});
+    writeState({ version: 1, at: AT, apps: { k: snap() } }, f);
+    expect(readState(f).apps.k!.name).toBe('Demo App');
+    writeFileSync(f, '{nope');
+    expect(readState(f).apps).toEqual({});
+  });
+  test('events filters: since, app, kind', () => {
+    const now = Date.parse(AT);
+    const evs = [ev({ at: '2026-10-22T09:00:00Z', app: 'Alpha', kind: 'live' }), ev({ at: '2026-10-20T09:00:00Z', app: 'Beta', kind: 'rejected' }), ev({ at: '2026-10-22T08:00:00Z', app: 'Beta', kind: 'rejected' })];
+    expect(filterEvents(evs, { sinceMs: durationMs('24h'), now }).map(e => e.app)).toEqual(['Alpha', 'Beta']);
+    expect(filterEvents(evs, { app: 'beta' })).toHaveLength(2);
+    expect(filterEvents(evs, { kind: ['live'] })).toHaveLength(1);
+    expect(filterEvents(evs, { app: 'beta', kind: ['rejected'], sinceMs: durationMs('2d'), now })).toHaveLength(1);
+    expect(durationMs('15', 'm')).toBe(15 * 60_000);
+    expect(() => durationMs('soon')).toThrow();
+  });
+});
+
+describe('watch sinks', () => {
+  const e = (o: Partial<WatchEvent> = {}): WatchEvent => ({ ...testEvent(AT), app: 'Demo App', version: '1.2.0', kind: 'rejected', detail: 'rejected', url: 'https://appstoreconnect.apple.com/apps/1', ...o });
+  test('sinkConfig reads env, a file, and --notify limits', () => {
+    expect(sinkConfig({}, null)).toEqual({});
+    const c = sinkConfig({ STOREBOUND_NTFY_TOPIC: 't', STOREBOUND_NTFY_URL: 'https://ntfy.example.com/', STOREBOUND_TELEGRAM_TOKEN: 'tok', STOREBOUND_TELEGRAM_CHAT: '42', STOREBOUND_WEBHOOK_URL: 'https://hook.example.com/x' }, null);
+    expect(c).toEqual({ ntfy: { url: 'https://ntfy.example.com', topic: 't' }, telegram: { token: 'tok', chat: '42' }, webhook: { url: 'https://hook.example.com/x' } });
+    expect(sinkConfig({ STOREBOUND_NTFY_TOPIC: 't' }, null).ntfy!.url).toBe('https://ntfy.sh');
+    expect(sinkConfig({ STOREBOUND_TELEGRAM_TOKEN: 'tok' }, null).telegram).toBeUndefined();
+    expect(sinkConfig({ STOREBOUND_NTFY_TOPIC: 't' }, null, ['os'])).toEqual({ os: true });
+    const file = join(tmp(), 'watch.json');
+    writeFileSync(file, JSON.stringify({ notify: ['os'], webhook: { url: 'https://h.example.com' } }));
+    expect(sinkConfig({}, file)).toEqual({ os: true, webhook: { url: 'https://h.example.com' } });
+  });
+  test('ntfy: headers (Title, Tags, Click, Priority) and body', () => {
+    const r = ntfyRequest(e(), { url: 'https://ntfy.sh', topic: 'my topic' });
+    expect(r.url).toBe('https://ntfy.sh/my%20topic');
+    expect(r.body).toBe('rejected');
+    expect(r.headers).toEqual({ Title: 'Demo App 1.2.0: Rejected', Tags: 'x,apple', Click: 'https://appstoreconnect.apple.com/apps/1', Priority: 'high' });
+    expect(ntfyRequest(e({ kind: 'live' }), { url: 'https://ntfy.sh', topic: 't', token: 'k' }).headers).toMatchObject({ Priority: 'default', Tags: 'rocket,apple', Authorization: 'Bearer k' });
+    expect(ntfyRequest(e({ kind: 'rollout_halted' }), { url: 'https://ntfy.sh', topic: 't' }).headers.Priority).toBe('high');
+    expect(ntfyRequest(e({ app: 'Café\nApp' }), { url: 'https://ntfy.sh', topic: 't' }).headers.Title).toBe('Caf? App 1.2.0: Rejected');
+  });
+  test('telegram and webhook bodies', () => {
+    const t = telegramRequest(e(), { token: 'TOKEN', chat: '42' });
+    expect(t.url).toBe('https://api.telegram.org/botTOKEN/sendMessage');
+    expect(JSON.parse(t.body)).toEqual({ chat_id: '42', text: 'Demo App 1.2.0: Rejected\nrejected\nhttps://appstoreconnect.apple.com/apps/1', disable_web_page_preview: true });
+    const w = webhookRequest(e(), { url: 'https://hook.example.com' });
+    expect(w.headers['Content-Type']).toBe('application/json');
+    expect(JSON.parse(w.body)).toEqual(e());
+  });
+  test('os command per platform keeps the text out of the script', () => {
+    expect(osCommand('win32', 'T', 'M')!.cmd).toBe('powershell');
+    expect(osCommand('win32', 'T"; evil', 'M')!.args.join(' ')).not.toContain('evil');
+    expect(osCommand('darwin', 'T', 'M')).toMatchObject({ cmd: 'osascript', env: { SB_TITLE: 'T', SB_MSG: 'M' } });
+    expect(osCommand('linux', 'T', 'M')).toMatchObject({ cmd: 'notify-send', args: ['T', 'M'] });
+    expect(osCommand('freebsd', 'T', 'M')).toBeNull();
+  });
+  test('post: one retry on 5xx / network error, none on 4xx', async () => {
+    const calls: string[] = [];
+    const seq = (...rs: (number | 'throw')[]): FetchLike => async url => { calls.push(url); const r = rs.shift()!; if (r === 'throw') throw new Error('down'); return { ok: r < 300, status: r }; };
+    const req = { url: 'https://x.example.com', headers: {}, body: '' };
+    expect(await post(seq(503, 200), req, { retryMs: 1 })).toBeNull();
+    expect(calls).toHaveLength(2);
+    calls.length = 0;
+    expect(await post(seq('throw', 'throw'), req, { retryMs: 1 })).toBe('network error');
+    expect(calls).toHaveLength(2);
+    calls.length = 0;
+    expect(await post(seq(400, 200), req, { retryMs: 1 })).toBe('HTTP 400');
+    expect(calls).toHaveLength(1);
+  });
+  test('sendEvent: every configured sink gets it with a fake fetch; a failing sink does not stop the others', async () => {
+    const seen: string[] = [];
+    const fake: FetchLike = async url => { seen.push(url); return url.includes('telegram') ? { ok: false, status: 400 } : { ok: true, status: 200 }; };
+    let osCalls = 0;
+    const rep = await sendEvent(e(), { os: true, ntfy: { url: 'https://ntfy.sh', topic: 't' }, telegram: { token: 'T', chat: '1' }, webhook: { url: 'https://hook.example.com' } },
+      { fetch: fake, os: () => { osCalls++; return true; }, platform: 'linux', retryMs: 1 });
+    expect(rep).toEqual([{ sink: 'os', ok: true }, { sink: 'ntfy', ok: true }, { sink: 'telegram', ok: false, error: 'HTTP 400' }, { sink: 'webhook', ok: true }]);
+    expect(osCalls).toBe(1);
+    expect(seen).toEqual(['https://ntfy.sh/t', 'https://api.telegram.org/botT/sendMessage', 'https://hook.example.com']);
+    // an OS notifier that is not installed is skipped quietly
+    expect(await sendEvent(e(), { os: true }, { os: () => false, platform: 'linux' })).toEqual([]);
+  });
+});
+
+describe('watch and events commands', () => {
+  test('mcp: events_recent is a read tool that maps to events --json', () => {
+    const t = TOOLS.find(x => x.name === 'events_recent')!;
+    expect(t).toMatchObject({ write: false, network: false, command: ['events'] });
+    expect(toArgv(t, { since: '24h', app: 'Demo', kind: 'rejected' }).argv).toEqual(['events', '--since', '24h', '--app', 'Demo', '--kind', 'rejected']);
+  });
+});

From 8b22e548be10bc68dea80380daafb127d61323b3 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 21:42:53 +0700
Subject: [PATCH 036/255] storebound 0.8.31: version in package.json and every
 copy, CHANGELOG 0.8.31 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 281c98f..1c1dfb0 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.30",
+      "version": "0.8.31",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index b20e1f5..1ec203f 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.30",
+  "version": "0.8.31",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 659bc21..8bbad0a 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.30",
+  "version": "0.8.31",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 844217e..1ad89fb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## 0.8.31 · 2026-10-22
+
 - **`storebound watch`**: store events for every app on the machine (rejected, approved, live, rollout halted, crash
   threshold, low or unanswered reviews), sent to ntfy (phone), Telegram, a webhook or an OS notification; runs as a loop
   (`--every 15m`) or `--once`; a PM2 recipe for a server is in docs/watch.md. `storebound events` and the MCP tool
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 36897a2..5ad15a1 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.30",
+  "version": "0.8.31",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 2a7d3ac..6f98514 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.30"
+version = "0.8.31"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 7ca8059..20a0757 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.30"
+version = "0.8.31"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index cee3801..efaf0ca 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.30",
+  "version": "0.8.31",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index e1192a7..5444ee7 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.30",
+  "version": "0.8.31",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 90e2588..65a6780 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.30",
+  "version": "0.8.31",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From bd316723f50c91775c2ac820bba0164e50d4ceba Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 23:12:03 +0800
Subject: [PATCH 037/255] Desktop v2 design system (design.css tokens for both
 themes, ui/ds.tsx: PageHeader, Hero, Section, StatTile, Pipeline, StatusPill,
 EmptyState, Toolbar, Tabs, Dialog, tint and screenshot hooks), app shell:
 sidebar status dots, frosted top bar, app page Hero with screenshots and the
 two-store pipeline, pill tabs with blocker counts

---
 apps/desktop/src/App.tsx               |   5 +-
 apps/desktop/src/design.css            | 201 ++++++++++++++++
 apps/desktop/src/main.tsx              |   1 +
 apps/desktop/src/screens/AppView.tsx   |  69 +++---
 apps/desktop/src/screens/Portfolio.tsx | 136 +----------
 apps/desktop/src/ui/ds.tsx             | 319 +++++++++++++++++++++++++
 6 files changed, 559 insertions(+), 172 deletions(-)
 create mode 100644 apps/desktop/src/design.css
 create mode 100644 apps/desktop/src/ui/ds.tsx

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index a72750e..6538f00 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -23,6 +23,8 @@ import { type Command, Palette } from './ui/Palette';
 import { ExportMenu, useExportItems, useRunExport } from './ui/Exports';
 import { ErrorBoundary } from './ui/ErrorBoundary';
 import { Toasts } from './ui/Toasts';
+import { worstTone } from './ui/ds';
+import { attention } from './lib/model';
 
 const WS_ICON: Record<WorkspaceScreen, IconName> = { apps: 'folder', accounts: 'building', ignored: 'eyeOff', dependencies: 'package', settings: 'settings' };
 export const WS_KEY: Record<WorkspaceScreen, Key> = { apps: 'nav.apps', accounts: 'nav.accounts', ignored: 'nav.ignored', dependencies: 'nav.dependencies', settings: 'nav.settings' };
@@ -146,12 +148,13 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const appItem = (a: UnifiedApp) => {
     const e = d.statusFor(a);
     const missing = !!a.project?.missing;
+    const tone = missing ? 'bad' : (worstTone(attention(a.key, a.name, e, d.liveFor(a))) ?? (e ? 'ok' : null));
     const bad = missing ? 1 : (e?.errors.length ?? 0) + (e?.check?.problems.length ?? 0);
     return (
       <div role="listitem" key={a.key}>
         <button className="nav nav-app" aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
           onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' })}>
-          <AppIcon name={a.name} src={d.iconFor(a)} />
+          <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{tone && <span className={`ds-sdot ${tone}`} role="img" aria-label={tone === 'bad' ? t('pf.blocker') : tone === 'warn' ? t('pf.warning') : t('pf.note')} />}</span>
           <span className="grow">{a.name}</span>
           {!a.project && <span className="so-dot" title={t('apps.storeOnlyHint')}><Icon name="cloud" /></span>}
           {missing ? <span className="tag-count bad" title={t('folder.missingShort')} aria-label={t('folder.missingShort')}>!</span>
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
new file mode 100644
index 0000000..449fe8d
--- /dev/null
+++ b/apps/desktop/src/design.css
@@ -0,0 +1,201 @@
+/* Design system v2 (components in src/ui/ds.tsx, guide in docs/drafts/desktop-v2/SYSTEM.md).
+   The store-like language of the portfolio home for every screen: tinted surfaces, big type, pill tabs, calm tables.
+   Loaded once after styles.css (main.tsx). Screens keep their own CSS in src/styles/<screen>.css. */
+
+/* ---------- tokens ---------- */
+:root {
+  /* surfaces and elevation */
+  --ds-page: var(--bg);
+  --ds-surface: var(--surface);
+  --ds-raised: #ffffff;
+  --ds-inset: var(--bg-sunken);
+  --ds-stroke: var(--line);
+  --ds-stroke-strong: var(--line-2);
+  --ds-e1: var(--shadow-1);
+  --ds-e2: var(--shadow-2);
+  --ds-e3: var(--shadow-3);
+  /* radii */
+  --ds-r-xs: 6px; --ds-r-sm: 10px; --ds-r: 14px; --ds-r-lg: 18px; --ds-r-xl: 24px; --ds-r-pill: 999px;
+  /* accent gradient (buttons, active pills, focus glow) */
+  --ds-grad: linear-gradient(135deg, #5b55e8, #8a5cf6 55%, #c264e8);
+  --ds-grad-soft: linear-gradient(135deg, color-mix(in srgb, #5b55e8 14%, transparent), color-mix(in srgb, #c264e8 10%, transparent));
+  /* per-app tint: set --tint-h (0-360) on an ancestor (tintStyle(hue) in ui/ds.tsx) */
+  --tint-h: 245;
+  --ds-tint-s: 78%; --ds-tint-l: 62%; --ds-tint-a: .16; --ds-tint-a2: .07;
+  /* typography scale */
+  --ds-t-display: 34px; --ds-t-h1: 28px; --ds-t-h2: 18px; --ds-t-h3: 15px; --ds-t-body: 13.5px; --ds-t-meta: 12px; --ds-t-micro: 11px;
+  --ds-t-stat: 32px;
+  --ds-w-display: 780; --ds-w-title: 700; --ds-w-strong: 650;
+}
+:root[data-theme="dark"] { --ds-raised: #151d2e; --ds-tint-l: 58%; --ds-tint-a: .26; --ds-tint-a2: .10; }
+@media (prefers-color-scheme: dark) { :root:not([data-theme="light"]) { --ds-raised: #151d2e; --ds-tint-l: 58%; --ds-tint-a: .26; --ds-tint-a2: .10; } }
+
+/* Anything below a tint: --tint is the app colour, .ds-tinted paints the soft gradient surface. */
+[style*="--tint-h"] { --tint: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l)); }
+.ds-tinted {
+  background:
+    radial-gradient(120% 80% at 100% 0%, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / var(--ds-tint-a)), transparent 60%),
+    linear-gradient(180deg, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / var(--ds-tint-a2)), transparent 55%), var(--ds-surface);
+  border: 1px solid color-mix(in srgb, var(--tint, var(--accent-solid)) 22%, var(--ds-stroke));
+}
+
+/* ---------- shell: sidebar ---------- */
+.side { background: linear-gradient(180deg, color-mix(in srgb, var(--bg-sunken) 92%, var(--accent-solid)) 0%, var(--bg-sunken) 260px); }
+.side .nav { height: 34px; border-radius: 10px; }
+.side .nav[aria-current="page"] { background: var(--ds-raised); box-shadow: var(--ds-e1), inset 0 0 0 1px var(--ds-stroke); }
+.side .nav[aria-current="page"]::before { content: ""; position: absolute; left: 0; width: 3px; height: 18px; border-radius: 0 3px 3px 0; background: var(--ds-grad); }
+.side .nav { position: relative; }
+.side .nav-app { height: 36px; gap: 11px; }
+.ds-side-ic { position: relative; display: inline-grid; flex: none; }
+.side .nav-app .app-icon { width: 24px; height: 24px; border-radius: 7px; font-size: 9px; box-shadow: 0 2px 6px -2px rgba(0, 0, 0, .35), inset 0 0 0 1px rgba(255, 255, 255, .08); }
+.ds-sdot { position: absolute; right: -3px; bottom: -3px; width: 10px; height: 10px; border-radius: 50%; border: 2px solid var(--bg-sunken); background: var(--neutral-solid); }
+.ds-sdot.ok { background: var(--ok-solid); } .ds-sdot.warn { background: var(--warn-solid); } .ds-sdot.bad { background: var(--bad-solid); } .ds-sdot.info { background: var(--info-solid); }
+.side-group-head { border-radius: 10px; }
+.side-label { letter-spacing: .09em; }
+
+/* ---------- shell: top bar ---------- */
+.topbar { height: 56px; background: color-mix(in srgb, var(--bg) 70%, transparent); backdrop-filter: saturate(1.4) blur(14px); -webkit-backdrop-filter: saturate(1.4) blur(14px); position: relative; z-index: 5; }
+.topbar .btn { border-radius: 10px; }
+.crumbs .here { font-weight: 650; }
+
+/* ---------- PageHeader ---------- */
+.ds-ph { display: flex; align-items: flex-end; justify-content: space-between; gap: 20px; flex-wrap: wrap; }
+.ds-ph-t { min-width: 0; display: grid; gap: 4px; }
+.ds-eyebrow { font-size: var(--t-section); font-weight: 600; color: var(--accent); }
+.ds-h1 { font-size: var(--ds-t-h1); line-height: 1.15; letter-spacing: -.025em; font-weight: var(--ds-w-display); display: flex; align-items: center; gap: 12px; }
+.ds-ph-ic { width: 40px; height: 40px; border-radius: 12px; display: grid; place-items: center; background: var(--ds-grad); color: #fff; box-shadow: 0 8px 20px -10px #5b55e8; }
+.ds-ph-ic svg { width: 22px; height: 22px; }
+.ds-sub { color: var(--muted); max-width: 80ch; }
+
+/* ---------- Hero (app page) ---------- */
+.ds-hero {
+  --tint: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l));
+  position: relative; display: grid; grid-template-columns: minmax(0, 1fr) auto; border-radius: var(--ds-r-xl); overflow: hidden; min-height: 240px;
+  background:
+    radial-gradient(90% 120% at 100% 0%, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / calc(var(--ds-tint-a) * 1.6)), transparent 62%),
+    radial-gradient(60% 90% at 0% 100%, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / var(--ds-tint-a2)), transparent 70%), var(--ds-surface);
+  border: 1px solid color-mix(in srgb, var(--tint) 26%, var(--ds-stroke)); box-shadow: var(--ds-e2);
+}
+.ds-hero-main { display: grid; gap: 22px; padding: 26px 28px; align-content: space-between; min-width: 0; }
+.ds-hero-id { display: flex; gap: 20px; align-items: center; min-width: 0; }
+.ds-hero .ds-hero-icon { width: 88px; height: 88px; border-radius: 22px; font-size: 28px; box-shadow: 0 16px 36px -14px hsl(var(--tint-h) 70% 30% / .75), inset 0 0 0 1px rgba(255, 255, 255, .12); }
+.ds-hero-t { display: grid; gap: 8px; min-width: 0; }
+.ds-hero-row { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; }
+.ds-hero-name { font-size: var(--ds-t-h1); font-weight: var(--ds-w-display); letter-spacing: -.025em; line-height: 1.1; }
+.ds-hero-ids { display: flex; gap: 6px; flex-wrap: wrap; align-items: center; }
+.ds-hero-ids .store-badge { height: 30px; padding-right: 4px; background: color-mix(in srgb, var(--ds-surface) 70%, transparent); }
+.ds-hero-ids .store-badge .chip { height: 22px; }
+.ds-hero-links { display: flex; gap: 6px; flex-wrap: wrap; }
+.ds-hero-links .btn { height: 28px; border-radius: 9px; background: color-mix(in srgb, var(--ds-surface) 60%, transparent); }
+.ds-hero-pipe { display: grid; grid-template-columns: minmax(0, 560px) auto; gap: 28px; align-items: end; padding: 18px 20px; border-radius: var(--ds-r); background: color-mix(in srgb, var(--ds-surface) 55%, transparent); border: 1px solid color-mix(in srgb, var(--tint) 16%, var(--ds-stroke)); }
+.ds-pipe-lg { gap: 9px; }
+.ds-pipe-lg .pf-segs b { height: 10px; }
+.ds-hero-foot { display: grid; gap: 10px; justify-items: end; }
+.ds-hero-next { display: grid; justify-items: end; line-height: 1.1; }
+.ds-hero-next-v { font-size: 26px; font-weight: var(--ds-w-display); letter-spacing: -.02em; }
+.ds-hero-shots { position: relative; display: flex; gap: 12px; height: 100%; max-height: 300px; padding: 22px 22px 0; align-items: flex-start; overflow: hidden; width: min(44vw, 520px);
+  background: linear-gradient(160deg, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .30), transparent 80%);
+  -webkit-mask-image: linear-gradient(180deg, #000 78%, transparent), linear-gradient(90deg, transparent, #000 10%); -webkit-mask-composite: source-in; mask-image: linear-gradient(180deg, #000 78%, transparent); }
+.ds-hero-shots img { height: 280px; width: auto; aspect-ratio: 9 / 19.5; object-fit: cover; object-position: top; border-radius: 16px; box-shadow: 0 18px 36px -14px rgba(0, 0, 0, .55); flex: none; transition: transform var(--speed) var(--ease); }
+.ds-hero-shots img:nth-child(even) { margin-top: 26px; }
+.ds-hero:hover .ds-hero-shots img { transform: translateY(-3px); }
+.ds-hero-shots.empty { align-items: center; justify-content: center; padding: 0; width: 300px; -webkit-mask-image: none; mask-image: none;
+  background: radial-gradient(60% 70% at 50% 50%, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .40), transparent 70%); }
+.ds-hero-shots .pf-hero-icon { width: 120px; height: 120px; border-radius: 30px; font-size: 36px; box-shadow: 0 22px 48px -16px hsl(var(--tint-h) 70% 30% / .75), inset 0 0 0 1px rgba(255, 255, 255, .12); }
+@media (max-width: 1180px) { .ds-hero { grid-template-columns: minmax(0, 1fr); } .ds-hero-shots { display: none; } }
+@media (max-width: 900px) { .ds-hero-pipe { grid-template-columns: minmax(0, 1fr); } .ds-hero-foot { justify-items: start; } }
+
+/* ---------- app page shell ---------- */
+.ds-app { gap: 18px; }
+.ds-app .app-controls { padding: 0 4px; }
+.ds-app-sticky { position: sticky; top: -1px; z-index: 4; margin: 0 -28px; padding: 8px 28px; background: color-mix(in srgb, var(--bg) 82%, transparent); backdrop-filter: blur(12px); -webkit-backdrop-filter: blur(12px); }
+
+/* ---------- Tabs v2 (pill) ---------- */
+.ds-tabs { display: flex; gap: 4px; padding: 4px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); overflow-x: auto; scrollbar-width: none; width: max-content; max-width: 100%; }
+.ds-tabs::-webkit-scrollbar { display: none; }
+.ds-tab { all: unset; flex: none; display: inline-flex; align-items: center; gap: 7px; height: 34px; padding: 0 14px; border-radius: 10px; font-weight: 600; color: var(--muted); cursor: pointer; white-space: nowrap; transition: background var(--speed) var(--ease), color var(--speed) var(--ease), box-shadow var(--speed) var(--ease); }
+.ds-tab svg { width: 16px; height: 16px; }
+.ds-tab:hover { color: var(--ink); background: color-mix(in srgb, var(--ds-raised) 60%, transparent); }
+.ds-tab[aria-selected="true"] { color: var(--ink); background: var(--ds-raised); box-shadow: var(--ds-e1), inset 0 0 0 1px var(--ds-stroke); }
+.ds-tab[aria-selected="true"] svg { color: var(--tint, var(--accent-solid)); }
+.ds-tab:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; }
+.ds-tab-n { min-width: 18px; height: 18px; padding: 0 5px; border-radius: 99px; display: inline-grid; place-items: center; font-size: 10.5px; font-weight: 700; background: var(--bad-solid); color: #fff; }
+
+/* ---------- Section / Card v2 ---------- */
+.ds-sec { background: var(--ds-surface); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r-lg); box-shadow: var(--ds-e1); min-width: 0; }
+.ds-sec.plain { background: none; border: 0; box-shadow: none; }
+.ds-sec-h { display: flex; align-items: center; justify-content: space-between; gap: 12px; padding: 18px 22px 0; }
+.ds-sec.plain .ds-sec-h { padding: 0 2px; }
+.ds-sec-h h2 { font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); letter-spacing: -.015em; display: flex; align-items: center; gap: 10px; }
+.ds-sec-ic { width: 30px; height: 30px; border-radius: 9px; display: grid; place-items: center; background: color-mix(in srgb, var(--tint, var(--accent-solid)) 16%, transparent); color: var(--tint, var(--accent-solid)); }
+.ds-sec-ic svg { width: 16px; height: 16px; }
+.ds-sec-sub { color: var(--muted); font-size: var(--ds-t-meta); margin-top: 3px; }
+.ds-sec-b { padding: 16px 22px 20px; }
+.ds-sec.plain .ds-sec-b { padding: 12px 0 0; }
+.ds-grid { display: grid; gap: 16px; grid-template-columns: repeat(auto-fill, minmax(var(--ds-min, 220px), 1fr)); }
+
+/* ---------- StatTile ---------- */
+.ds-stat { all: unset; box-sizing: border-box; display: grid; gap: 6px; align-content: start; padding: 18px 20px; border-radius: 16px; background: var(--ds-surface); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e1); position: relative; overflow: hidden; min-width: 0; }
+.ds-stat::after { content: ""; position: absolute; inset: 0 0 auto; height: 3px; background: var(--tint, transparent); opacity: .8; }
+.ds-stat.clickable { cursor: pointer; transition: transform var(--speed) var(--ease), box-shadow var(--speed) var(--ease); }
+.ds-stat.clickable:hover { transform: translateY(-1px); box-shadow: var(--ds-e2); }
+.ds-stat:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.ds-stat-l { display: flex; align-items: center; gap: 7px; font-size: var(--ds-t-meta); font-weight: 600; color: var(--muted); }
+.ds-stat-l svg { width: 15px; height: 15px; }
+.ds-stat-v { font-size: var(--ds-t-stat); font-weight: var(--ds-w-display); letter-spacing: -.03em; line-height: 1.05; color: var(--ink); }
+.ds-stat-s { display: flex; gap: 8px; align-items: center; font-size: var(--ds-t-meta); color: var(--muted); min-width: 0; }
+.ds-stat-s > span:last-child { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.ds-stat.tone-bad { border-left: 3px solid var(--bad-solid); } .ds-stat.tone-warn { border-left: 3px solid var(--warn-solid); } .ds-stat.tone-ok { border-left: 3px solid var(--ok-solid); }
+.ds-delta { font-weight: 700; font-variant-numeric: tabular-nums; padding: 1px 6px; border-radius: 6px; background: var(--neutral-bg); color: var(--neutral-ink); }
+.ds-delta.up { background: var(--ok-bg); color: var(--ok-ink); } .ds-delta.down { background: var(--bad-bg); color: var(--bad-ink); }
+
+/* ---------- StatusPill ---------- */
+.ds-pill { display: inline-flex; align-items: center; gap: 6px; height: 24px; padding: 0 10px; border-radius: var(--ds-r-pill); font-size: var(--ds-t-micro); font-weight: 650; white-space: nowrap; background: var(--neutral-bg); color: var(--neutral-ink); }
+.ds-pill i { width: 7px; height: 7px; border-radius: 50%; background: var(--neutral-solid); }
+.ds-pill svg { width: 13px; height: 13px; }
+.ds-pill.ok { background: var(--ok-bg); color: var(--ok-ink); } .ds-pill.ok i { background: var(--ok-solid); }
+.ds-pill.warn { background: var(--warn-bg); color: var(--warn-ink); } .ds-pill.warn i { background: var(--warn-solid); }
+.ds-pill.bad { background: var(--bad-bg); color: var(--bad-ink); } .ds-pill.bad i { background: var(--bad-solid); }
+.ds-pill.info { background: var(--info-bg); color: var(--info-ink); } .ds-pill.info i { background: var(--info-solid); }
+.ds-pill.accent { background: var(--accent-soft); color: var(--accent); } .ds-pill.accent i { background: var(--accent-solid); }
+.ds-pill.solid { color: #fff; } .ds-pill.solid i { background: #fff; }
+.ds-pill.solid.ok { background: var(--ok-solid); } .ds-pill.solid.warn { background: var(--warn-solid); color: #1b1203; } .ds-pill.solid.bad { background: var(--bad-solid); } .ds-pill.solid.info { background: var(--info-solid); } .ds-pill.solid.accent { background: var(--ds-grad); }
+
+/* ---------- EmptyState ---------- */
+.ds-empty { display: grid; justify-items: center; gap: 12px; padding: 36px 24px; text-align: center; color: var(--muted); }
+.ds-empty-ic { width: 52px; height: 52px; border-radius: 16px; display: grid; place-items: center; background: color-mix(in srgb, var(--tint, var(--accent-solid)) 14%, transparent); color: var(--tint, var(--accent-solid)); }
+.ds-empty-ic svg { width: 26px; height: 26px; }
+.ds-empty.tone-ok .ds-empty-ic { background: var(--ok-bg); color: var(--ok-solid); }
+.ds-empty.tone-bad .ds-empty-ic { background: var(--bad-bg); color: var(--bad-solid); }
+.ds-empty p { font-size: var(--t-em); color: var(--ink-2); max-width: 52ch; }
+
+/* ---------- Toolbar ---------- */
+.ds-toolbar { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; padding: 8px; border-radius: var(--ds-r); background: var(--ds-surface); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e1); }
+.ds-toolbar .grow { flex: 1; }
+.ds-toolbar .input, .ds-toolbar .btn { border-radius: 10px; }
+
+/* ---------- Table v2 (add .v2 to .table, wrap in .ds-table-wrap) ---------- */
+.ds-table-wrap { overflow: auto; max-height: var(--ds-table-max, none); border-radius: var(--ds-r-lg); border: 1px solid var(--ds-stroke); background: var(--ds-surface); box-shadow: var(--ds-e1); }
+.table.v2 th { position: sticky; top: 0; z-index: 1; background: color-mix(in srgb, var(--ds-surface) 92%, var(--ds-inset)); backdrop-filter: blur(8px); text-transform: none; letter-spacing: 0; font-size: var(--ds-t-meta); font-weight: 600; padding-top: 12px; padding-bottom: 12px; }
+.table.v2 th:first-child, .table.v2 th:last-child { border-radius: 0; }
+.table.v2 td { padding-top: 14px; padding-bottom: 14px; border-bottom-color: color-mix(in srgb, var(--ds-stroke) 65%, transparent); }
+.table.v2 tbody tr { transition: background-color var(--speed) var(--ease); }
+.table.v2 tbody tr:hover td { background: color-mix(in srgb, var(--tint, var(--accent-solid)) 6%, var(--hover)); }
+.table.v2 tbody tr:focus-within td { background: var(--hover); }
+.table.v2 .num, .table.v2 td.right { font-variant-numeric: tabular-nums; }
+
+/* ---------- Dialog v2 ---------- */
+.ds-scrim { position: fixed; inset: 0; z-index: 60; display: grid; place-items: center; padding: 24px; background: var(--scrim); backdrop-filter: blur(6px); -webkit-backdrop-filter: blur(6px); animation: ds-fade var(--speed) var(--ease); }
+.ds-dialog { width: min(560px, 100%); max-height: calc(100vh - 48px); display: grid; grid-template-rows: auto minmax(0, 1fr) auto; border-radius: var(--ds-r-xl); background: var(--ds-raised); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e3); animation: ds-pop var(--speed) var(--ease); }
+.ds-dialog.wide { width: min(880px, 100%); }
+.ds-dialog:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.ds-dialog-h { display: flex; align-items: center; justify-content: space-between; gap: 12px; padding: 20px 22px 8px; }
+.ds-dialog-h h2 { font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); display: flex; align-items: center; gap: 10px; }
+.ds-dialog-b { padding: 8px 22px 18px; overflow: auto; }
+.ds-dialog-f { display: flex; justify-content: flex-end; gap: 8px; padding: 14px 22px; border-top: 1px solid var(--ds-stroke); background: color-mix(in srgb, var(--ds-inset) 50%, transparent); border-radius: 0 0 var(--ds-r-xl) var(--ds-r-xl); }
+@keyframes ds-fade { from { opacity: 0; } }
+@keyframes ds-pop { from { opacity: 0; transform: translateY(6px) scale(.985); } }
+
+/* ---------- reduced motion ---------- */
+@media (prefers-reduced-motion: reduce) { .ds-hero-shots img, .ds-stat.clickable, .ds-scrim, .ds-dialog { transform: none !important; transition: none; animation: none; } }
+:root[data-motion="reduce"] .ds-hero-shots img, :root[data-motion="reduce"] .ds-stat.clickable, :root[data-motion="reduce"] .ds-scrim, :root[data-motion="reduce"] .ds-dialog { transform: none !important; transition: none; animation: none; }
diff --git a/apps/desktop/src/main.tsx b/apps/desktop/src/main.tsx
index 0487a0a..82e74a2 100644
--- a/apps/desktop/src/main.tsx
+++ b/apps/desktop/src/main.tsx
@@ -10,6 +10,7 @@ import { DataProvider } from './store';
 import { ErrorBoundary } from './ui/ErrorBoundary';
 import { ExportProvider } from './ui/Exports';
 import './styles.css';
+import './design.css';
 
 const systemLang = (): string => (typeof navigator !== 'undefined' ? navigator.language : 'en');
 
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 319e105..7bf6f10 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -1,17 +1,18 @@
 // One app across both stores: header (icon, studio, ids, store state, pairing), then the tabs. A store-only app (no
 // app folder) shows its store reads (releases, health, reviews, TestFlight) read-only, with "Link a folder" and
 // "Start an app folder here" to make it a full app.
-import { type KeyboardEvent, useRef, useState } from 'react';
+import { useState } from 'react';
 import { api, errorText } from '../api';
 import { type Key, t } from '../i18n';
 import { pairCandidates, type UnifiedApp, withIgnored, withLink, withPair, withStudio, withUnpair } from '../lib/identity';
-import { storeNow } from '../lib/model';
+import { attention, storeNow } from '../lib/model';
+import { Hero, nextStep, Tabs } from '../ui/ds';
 import { type AppTab, TAB_ICON, TAB_KEY, tabsFor, useNav } from '../nav';
 import { useData } from '../store';
 import { Icon } from '../ui/icons';
 import { ErrorBoundary } from '../ui/ErrorBoundary';
 import { FolderMissing } from '../ui/FolderMissing';
-import { AppIcon, Chip, Notice, PhaseChip, StoreBadge, StoreOnlyTag, StudioMark } from '../ui/kit';
+import { Chip, Notice, PhaseChip, StoreBadge, StoreOnlyTag, StudioMark } from '../ui/kit';
 import { AppInfoTab } from './tabs/AppInfo';
 import { ArtTab } from './tabs/Art';
 import { LiveArt } from './tabs/LiveArt';
@@ -106,56 +107,40 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
   const tabs = tabsFor(!!app.project);
   const ed = useEdits();
   useUnsavedGuard();
-  const tabRefs = useRef<(HTMLButtonElement | null)[]>([]);
   const studio = d.studios.find(s => s.id === app.studio) ?? null;
   const setTab = (x: AppTab) => nav.go({ screen: 'app', appId: app.key, tab: x });
-  const onKey = (ev: KeyboardEvent) => {
-    const i = tabs.indexOf(tab);
-    const j = ev.key === 'ArrowRight' ? i + 1 : ev.key === 'ArrowLeft' ? i - 1 : ev.key === 'Home' ? 0 : ev.key === 'End' ? tabs.length - 1 : null;
-    if (j === null) return;
-    ev.preventDefault();
-    const n = (j + tabs.length) % tabs.length;
-    setTab(tabs[n]!);
-    tabRefs.current[n]?.focus();
-  };
   const all = l?.release.all ?? [];
   const iosNow = l ? storeNow(all, 'ios').now : null, androidNow = l ? storeNow(all, 'android').now : null;
+  const att = attention(app.key, app.name, e, l);
   const open = (url: string) => { api.openExternal(url).catch(() => {}); };
 
   return (
-    <div className="page">
-      <div className="ph">
-        <div className="app-head">
-          <AppIcon name={name} src={d.iconFor(app)} />
-          <div>
-            <div className="row" style={{ gap: 10 }}>
-              <h1>{name}</h1>
-              {e?.summary?.profile && app.project && <Chip tone="outline">{t(`profile.${e.summary.profile}` as 'profile.app')}</Chip>}
-              {!app.project && <StoreOnlyTag />}
-              <button className="studio-pill" onClick={() => nav.go({ screen: 'accounts', section: app.studio ?? 'none' })} title={t('app.studioHint')}><StudioMark studio={studio} size="sm" />{studio?.name ?? t('studio.none')}</button>
-            </div>
-            <div className="ids">
-              <StoreBadge store="ios" id={ios?.bundleId} off={!ios && (!!e || !app.project)}>{iosNow && <><span className="num strong">{iosNow.version}</span><PhaseChip r={iosNow} /></>}</StoreBadge>
-              <StoreBadge store="android" id={android?.packageName} off={!android && (!!e || !app.project)}>{androidNow && <><span className="num strong">{androidNow.version}</span><PhaseChip r={androidNow} /></>}</StoreBadge>
-            </div>
-          </div>
-        </div>
-        <div className="actions">
-          {ios && <button className="btn btn-ghost" onClick={() => open(ascUrl(ios.ascAppId))} title={t('app.consoleHint')}><Icon name="external" />App Store Connect</button>}
-          {android && <button className="btn btn-ghost" onClick={() => open(PLAY_CONSOLE)} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
-        </div>
-      </div>
+    <div className="page ds-app">
+      <Hero name={name} icon={d.iconFor(app)} projectId={app.project && !app.project.missing ? app.project.id : null}
+        badges={<>
+          {e?.summary?.profile && app.project && <Chip tone="outline">{t(`profile.${e.summary.profile}` as 'profile.app')}</Chip>}
+          {!app.project && <StoreOnlyTag />}
+          <button className="studio-pill" onClick={() => nav.go({ screen: 'accounts', section: app.studio ?? 'none' })} title={t('app.studioHint')}><StudioMark studio={studio} size="sm" />{studio?.name ?? t('studio.none')}</button>
+        </>}
+        ids={<>
+          <StoreBadge store="ios" id={ios?.bundleId} off={!ios && (!!e || !app.project)}>{iosNow && <><span className="num strong">{iosNow.version}</span><PhaseChip r={iosNow} /></>}</StoreBadge>
+          <StoreBadge store="android" id={android?.packageName} off={!android && (!!e || !app.project)}>{androidNow && <><span className="num strong">{androidNow.version}</span><PhaseChip r={androidNow} /></>}</StoreBadge>
+        </>}
+        links={(ios || android) && <>
+          {ios && <button className="btn btn-sm btn-ghost" onClick={() => open(ascUrl(ios.ascAppId))} title={t('app.consoleHint')}><Icon name="external" />App Store Connect</button>}
+          {android && <button className="btn btn-sm btn-ghost" onClick={() => open(PLAY_CONSOLE)} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
+        </>}
+        all={all} ios={!!ios} android={!!android} next={l?.release.next?.version ?? null}
+        cta={nextStep({ project: !!app.project, att, all, next: l?.release.next?.version ?? null })} onCta={setTab} />
       <AppControls app={app} />
       {!app.project && <StoreOnlyBanner app={app} />}
       {app.project?.storeboundPin && <Notice tone="info" icon="info">{t('app.pinNotice', { pin: app.project.storeboundPin, app: d.info?.version ?? '' })}</Notice>}
       {app.project?.missing ? <FolderMissing project={app.project} /> : <>
-      <div className="tabs" role="tablist" aria-label={t('app.sections', { name })} onKeyDown={onKey}>
-        {tabs.map((x, i) => (
-          <button key={x} ref={el => { tabRefs.current[i] = el; }} role="tab" id={`tab-${x}`} aria-selected={tab === x} aria-controls="tabpanel" tabIndex={tab === x ? 0 : -1} className="tab" onClick={() => setTab(x)}>
-            <Icon name={TAB_ICON[x]} />{t(TAB_KEY[x])}
-            {EDIT_TABS[x] && ed.count(app.project?.id ?? app.target, EDIT_TABS[x]) > 0 && <span className="ed-dot" title={t('ed.unsaved', { count: ed.count(app.project?.id ?? app.target, EDIT_TABS[x]) })} />}
-          </button>
-        ))}
+      <div className="ds-app-sticky">
+        <Tabs label={t('app.sections', { name })} value={tab} onChange={setTab} items={tabs.map(x => {
+          const n = EDIT_TABS[x] ? ed.count(app.project?.id ?? app.target, EDIT_TABS[x]) : 0;
+          return { id: x, label: t(TAB_KEY[x]), icon: TAB_ICON[x], count: att.filter(a => a.tab === x && a.tone === 'bad').length, dot: n > 0, dotTitle: n ? t('ed.unsaved', { count: n }) : undefined };
+        })} />
       </div>
       <div role="tabpanel" id="tabpanel" aria-labelledby={`tab-${tab}`} className="stack" style={{ gap: 16 }}>
         <ErrorBoundary key={tab} where={`tab ${tab}`}>
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index b6e1a9e..41cc6f3 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -4,18 +4,20 @@
 // version, crash rate, catalog parity, config check), grouped by studio; then what changed and what to fix first.
 import { plainError } from '../../../../cli/lib/google-errors';
 import { BlockedProjectsNotice, blockedProjects } from '../ui/StoreError';
-import { type CSSProperties, type ReactNode, useEffect, useMemo, useState } from 'react';
-import { api, type AppStatus, newJob, reads, type RenderImage, type StoreRelease, type ToolResult } from '../api';
+import { type ReactNode, useEffect, useMemo, useState } from 'react';
+import { api, type AppStatus, newJob, type StoreRelease, type ToolResult } from '../api';
 import { type Key, t } from '../i18n';
 import { ago, pct, share } from '../lib/format';
 import { filterSort, groupByStudio, type ListRow, type SortBy, studioCounts, type UnifiedApp } from '../lib/identity';
-import { type Attention, attention, healthSeries, type HealthSnapshot, hueOf, isError, laneOf, PLAY_THRESHOLDS, STAGES, storeNow, type Tone } from '../lib/model';
+import { type Attention, attention, healthSeries, type HealthSnapshot, isError, laneOf, PLAY_THRESHOLDS, STAGES, storeNow, type Tone } from '../lib/model';
 import { type AppTab, useNav } from '../nav';
 import type { IconName } from '../ui/icons';
 import { useData } from '../store';
 import { exportName, portfolioCsv } from '../lib/exports';
 import { useExports } from '../ui/Exports';
 import { Icon, StoreGlyph } from '../ui/icons';
+import { nextStep, Pipeline, tintStyle, useShots, useTint } from '../ui/ds';
+export { nextStep } from '../ui/ds';
 import { AppIcon, Card, Chip, Empty, Kpi, Notice, PhaseChip, Seg, Skeleton, Sparkline, StudioMark } from '../ui/kit';
 
 /** Tag of one app's offline config check. */
@@ -111,126 +113,6 @@ function releasesOf(l: AppStatus | undefined): StoreRelease[] {
   return l.release.all ?? [l.release.current?.ios, l.release.current?.android, l.release.next?.ios, l.release.next?.android].filter((x): x is StoreRelease => !!x);
 }
 
-// Up to three phone screenshots of the app folder's rendered store art (`shots gallery`, then one `project.render`
-// data: URL each), loaded once per window and one app at a time. No renders: an empty list (the card shows the icon).
-const shotCache = new Map<string, Promise<string[]>>();
-let shotChain: Promise<unknown> = Promise.resolve();
-function loadShots(projectId: string): Promise<string[]> {
-  const hit = shotCache.get(projectId);
-  if (hit) return hit;
-  const job = shotChain.then(async () => {
-    const r = await reads.renders(projectId).catch(() => null);
-    const res = r?.data;
-    if (!res) return [];
-    const v = res.variants.find(x => !x.id) ?? res.variants[0];
-    const lang = v?.langs.find(l => l.lang === 'en' || l.lang.startsWith('en-')) ?? v?.langs[0];
-    const rows = (lang?.rows ?? []).filter(row => !/feature|ipad|preview|tv|watch|mac|tablet/i.test(row.size) && row.tiles.some(x => x.kind === 'image'));
-    rows.sort((a, b) => (a.store === 'apple' ? 0 : 1) - (b.store === 'apple' ? 0 : 1));
-    const files = (rows[0]?.tiles ?? []).filter(x => x.kind === 'image' && x.h >= x.w).slice(0, 3).map(x => x.src);
-    const out: string[] = [];
-    for (const file of files) {
-      const img = await api.call<ToolResult & { data?: RenderImage }>('project.render', projectId, { args: { file } }).catch(() => null);
-      if (img?.data?.dataUrl) out.push(img.data.dataUrl);
-    }
-    return out;
-  }).catch(() => [] as string[]);
-  shotChain = job;
-  shotCache.set(projectId, job);
-  return job;
-}
-
-function useShots(projectId: string | null): string[] {
-  const [shots, setShots] = useState<string[]>([]);
-  useEffect(() => {
-    if (!projectId) return;
-    let alive = true;
-    loadShots(projectId).then(s => { if (alive) setShots(s); }, () => {});
-    return () => { alive = false; };
-  }, [projectId]);
-  return shots;
-}
-
-// The hue of an app icon (saturation-weighted mean colour), for the card's soft gradient; the name's hue without one.
-const tintCache = new Map<string, number>();
-function useTint(src: string | null, name: string): number {
-  const fallback = hueOf(name);
-  const [hue, setHue] = useState<number>(() => (src ? tintCache.get(src) : undefined) ?? fallback);
-  useEffect(() => {
-    if (!src) { setHue(fallback); return; }
-    const cached = tintCache.get(src);
-    if (cached !== undefined) { setHue(cached); return; }
-    let alive = true;
-    const img = new Image();
-    img.onload = () => {
-      try {
-        const c = document.createElement('canvas');
-        c.width = c.height = 16;
-        const g = c.getContext('2d');
-        if (!g) return;
-        g.drawImage(img, 0, 0, 16, 16);
-        const px = g.getImageData(0, 0, 16, 16).data;
-        let r = 0, gr = 0, b = 0, w = 0;
-        for (let i = 0; i < px.length; i += 4) {
-          const R = px[i]!, G = px[i + 1]!, B = px[i + 2]!, A = px[i + 3]! / 255;
-          const s = (Math.max(R, G, B) - Math.min(R, G, B)) / 255 * A;
-          r += R * s; gr += G * s; b += B * s; w += s;
-        }
-        if (w < 0.5) return;
-        r /= w; gr /= w; b /= w;
-        const mx = Math.max(r, gr, b), mn = Math.min(r, gr, b), d = mx - mn;
-        if (d < 1) return;
-        let h = mx === r ? ((gr - b) / d) % 6 : mx === gr ? (b - r) / d + 2 : (r - gr) / d + 4;
-        h = Math.round(h * 60 + 360) % 360;
-        tintCache.set(src, h);
-        if (alive) setHue(h);
-      } catch { /* keep the name's hue */ }
-    };
-    img.src = src;
-    return () => { alive = false; };
-  }, [src, fallback]);
-  return hue;
-}
-
-interface Cta { text: string; tab: AppTab; icon: IconName; primary: boolean }
-
-/** The one next step of an app, from its state: blockers first, then the release that waits for a move. */
-export function nextStep(o: { project: boolean; att: Attention[]; all: StoreRelease[]; next: string | null }): Cta {
-  const bad = o.att.filter(a => a.tone === 'bad');
-  if (bad.length) return { text: t('pf.ctaFix', { count: bad.length }), tab: bad[0]!.tab ?? 'checks', icon: 'alertCircle', primary: true };
-  const rolling = o.all.find(r => r.phase === 'rollout' && r.fraction !== null && r.fraction < 1);
-  if (rolling) return { text: t('pf.ctaRollout', { share: share(rolling.fraction ?? 0) }), tab: 'releases', icon: 'rocket', primary: true };
-  const approved = o.all.find(r => r.phase === 'approved');
-  if (approved) return { text: t('pf.ctaRelease', { version: approved.version ?? '' }), tab: 'releases', icon: 'rocket', primary: true };
-  const ready = o.all.find(r => r.phase === 'draft' || r.phase === 'testing');
-  if (ready) return { text: t('pf.ctaSubmit', { version: ready.version ?? '' }), tab: 'releases', icon: 'send', primary: true };
-  const review = o.all.find(r => r.phase === 'review' || r.phase === 'sent');
-  if (review) return { text: t('pf.ctaReview', { version: review.version ?? '' }), tab: 'releases', icon: 'clock', primary: false };
-  if (o.att.length) return { text: t('pf.ctaWarnings', { count: o.att.length }), tab: o.att[0]!.tab ?? 'checks', icon: 'alert', primary: false };
-  if (o.project && !o.next) return { text: t('pf.ctaUpload'), tab: 'releases', icon: 'upload', primary: false };
-  return { text: t('pf.ctaOpen'), tab: 'releases', icon: 'arrowRight', primary: false };
-}
-
-function Track({ store, all, on }: { store: 'ios' | 'android'; all: StoreRelease[]; on: boolean }) {
-  const { now, next } = storeNow(all, store);
-  const r = next ?? now;
-  const lane = laneOf(store, on ? r : null);
-  const name = store === 'ios' ? 'App Store' : 'Google Play';
-  const state = !on ? t('app.notOnStore') : !r ? t('portfolio.noVersion') : `${r.version ?? ''} · ${t(`phase.${r.phase}` as Key)}${lane.share !== null && lane.share < 1 ? ` ${share(lane.share)}` : ''}`;
-  return (
-    <div className={`pf-track${on ? '' : ' off'}`} role="img" aria-label={`${name}: ${state}`}>
-      <span className="pf-track-name"><StoreGlyph store={store} className="ic13" />{store === 'ios' ? 'App Store' : 'Play'}</span>
-      <span className="pf-segs" aria-hidden="true">
-        {STAGES.map((s, i) => {
-          const cls = i < lane.at ? 'done' : i === lane.at ? `at t-${lane.tone}` : '';
-          const fill = i === lane.at && s === 'rollout' && lane.share !== null && lane.share < 1 ? lane.share : null;
-          return <b key={s} className={cls}>{fill !== null && <i style={{ width: `${Math.max(8, fill * 100)}%` }} />}</b>;
-        })}
-      </span>
-      <span className="pf-track-v num" title={state}>{on && r ? `${r.version ?? ''}${lane.share !== null && lane.share < 1 ? ` · ${share(lane.share)}` : ''}` : '–'}</span>
-    </div>
-  );
-}
-
 function CardHealth({ c, android }: { c: { h: HealthSnapshot; at: string } | null | undefined; android: boolean }) {
   const play = c?.h.play;
   if (!android || !c || !play || isError(play)) {
@@ -260,7 +142,7 @@ function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null;
   const cta = nextStep({ project: !!app.project, att, all, next });
   const name = e?.app?.name && app.project ? e.app.name : app.name;
   const go = (tab: AppTab) => nav.go({ screen: 'app', appId: app.key, tab });
-  const style = { '--tint-h': String(hue) } as CSSProperties;
+  const style = tintStyle(hue);
   return (
     <article className="pf-card" style={style} aria-label={name}>
       <div className={`pf-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
@@ -279,11 +161,7 @@ function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null;
           </div>
         </div>
         {studio}
-        <div className="pf-pipe">
-          <div className="pf-stages" aria-hidden="true"><span />{STAGES.map(s => <span key={s}>{t(`stage.${s}`)}</span>)}<span /></div>
-          <Track store="ios" all={all} on={ios} />
-          <Track store="android" all={all} on={android} />
-        </div>
+        <Pipeline all={all} ios={ios} android={android} />
         <div className="pf-foot">
           <CardHealth c={health} android={android} />
           <button className={`btn ${cta.primary ? 'btn-primary' : ''} pf-cta`} onClick={() => go(cta.tab)}><Icon name={cta.icon} />{cta.text}</button>
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
new file mode 100644
index 0000000..563e500
--- /dev/null
+++ b/apps/desktop/src/ui/ds.tsx
@@ -0,0 +1,319 @@
+// Design system v2 (styles in src/design.css, guide in docs/drafts/desktop-v2/SYSTEM.md): the store-like language of
+// the portfolio home as reusable parts. PageHeader, Hero (app hero with screenshots, two-store pipeline, next step),
+// Section, StatTile, Pipeline, StatusPill, EmptyState, Tabs, Toolbar, Dialog, plus the per-app tint (useTint / tintStyle)
+// and the rendered-screenshot loader (useShots) the cards and the hero share.
+import { type CSSProperties, type KeyboardEvent, type ReactNode, useEffect, useId, useRef, useState } from 'react';
+import { api, reads, type RenderImage, type StoreRelease, type ToolResult } from '../api';
+import { type Key, t } from '../i18n';
+import { share } from '../lib/format';
+import { type Attention, hueOf, laneOf, STAGES, storeNow, type Tone } from '../lib/model';
+import type { AppTab } from '../nav';
+import { Icon, type IconName, StoreGlyph } from './icons';
+import { AppIcon } from './kit';
+
+// ---- per-app tint ----
+
+const tintCache = new Map<string, number>();
+/** The hue of an app icon (saturation-weighted mean colour); the name's hue without an icon or while it loads. */
+export function useTint(src: string | null | undefined, name: string): number {
+  const fallback = hueOf(name);
+  const [hue, setHue] = useState<number>(() => (src ? tintCache.get(src) : undefined) ?? fallback);
+  useEffect(() => {
+    if (!src) { setHue(fallback); return; }
+    const cached = tintCache.get(src);
+    if (cached !== undefined) { setHue(cached); return; }
+    let alive = true;
+    const img = new Image();
+    img.onload = () => {
+      try {
+        const c = document.createElement('canvas');
+        c.width = c.height = 16;
+        const g = c.getContext('2d');
+        if (!g) return;
+        g.drawImage(img, 0, 0, 16, 16);
+        const px = g.getImageData(0, 0, 16, 16).data;
+        let r = 0, gr = 0, b = 0, w = 0;
+        for (let i = 0; i < px.length; i += 4) {
+          const R = px[i]!, G = px[i + 1]!, B = px[i + 2]!, A = px[i + 3]! / 255;
+          const s = (Math.max(R, G, B) - Math.min(R, G, B)) / 255 * A;
+          r += R * s; gr += G * s; b += B * s; w += s;
+        }
+        if (w < 0.5) return;
+        r /= w; gr /= w; b /= w;
+        const mx = Math.max(r, gr, b), mn = Math.min(r, gr, b), d = mx - mn;
+        if (d < 1) return;
+        let h = mx === r ? ((gr - b) / d) % 6 : mx === gr ? (b - r) / d + 2 : (r - gr) / d + 4;
+        h = Math.round(h * 60 + 360) % 360;
+        tintCache.set(src, h);
+        if (alive) setHue(h);
+      } catch { /* keep the name's hue */ }
+    };
+    img.src = src;
+    return () => { alive = false; };
+  }, [src, fallback]);
+  return hue;
+}
+
+/** Style that tints a subtree: every `.ds-tinted` / `--tint` rule below it uses this hue. */
+export const tintStyle = (hue: number): CSSProperties => ({ '--tint-h': String(hue) } as CSSProperties);
+
+// ---- rendered store screenshots ----
+
+// Up to three phone screenshots of the app folder's rendered store art (`shots gallery`, then one `project.render`
+// data: URL each), loaded once per window and one app at a time. No renders: an empty list.
+const shotCache = new Map<string, Promise<string[]>>();
+let shotChain: Promise<unknown> = Promise.resolve();
+function loadShots(projectId: string, max: number): Promise<string[]> {
+  const k = `${projectId}#${max}`;
+  const hit = shotCache.get(k);
+  if (hit) return hit;
+  const job = shotChain.then(async () => {
+    const r = await reads.renders(projectId).catch(() => null);
+    const res = r?.data;
+    if (!res) return [];
+    const v = res.variants.find(x => !x.id) ?? res.variants[0];
+    const lang = v?.langs.find(l => l.lang === 'en' || l.lang.startsWith('en-')) ?? v?.langs[0];
+    const rows = (lang?.rows ?? []).filter(row => !/feature|ipad|preview|tv|watch|mac|tablet/i.test(row.size) && row.tiles.some(x => x.kind === 'image'));
+    rows.sort((a, b) => (a.store === 'apple' ? 0 : 1) - (b.store === 'apple' ? 0 : 1));
+    const files = (rows[0]?.tiles ?? []).filter(x => x.kind === 'image' && x.h >= x.w).slice(0, max).map(x => x.src);
+    const out: string[] = [];
+    for (const file of files) {
+      const img = await api.call<ToolResult & { data?: RenderImage }>('project.render', projectId, { args: { file } }).catch(() => null);
+      if (img?.data?.dataUrl) out.push(img.data.dataUrl);
+    }
+    return out;
+  }).catch(() => [] as string[]);
+  shotChain = job;
+  shotCache.set(k, job);
+  return job;
+}
+
+/** Rendered phone screenshots of an app folder (none for a store-only app or before the first render). */
+export function useShots(projectId: string | null | undefined, max = 3): string[] {
+  const [shots, setShots] = useState<string[]>([]);
+  useEffect(() => {
+    if (!projectId) { setShots([]); return; }
+    let alive = true;
+    loadShots(projectId, max).then(s => { if (alive) setShots(s); }, () => {});
+    return () => { alive = false; };
+  }, [projectId, max]);
+  return shots;
+}
+
+// ---- next step ----
+
+export interface Cta { text: string; tab: AppTab; icon: IconName; primary: boolean }
+
+/** The one next step of an app, from its state: blockers first, then the release that waits for a move. */
+export function nextStep(o: { project: boolean; att: Attention[]; all: StoreRelease[]; next: string | null }): Cta {
+  const bad = o.att.filter(a => a.tone === 'bad');
+  if (bad.length) return { text: t('pf.ctaFix', { count: bad.length }), tab: bad[0]!.tab ?? 'checks', icon: 'alertCircle', primary: true };
+  const rolling = o.all.find(r => r.phase === 'rollout' && r.fraction !== null && r.fraction < 1);
+  if (rolling) return { text: t('pf.ctaRollout', { share: share(rolling.fraction ?? 0) }), tab: 'releases', icon: 'rocket', primary: true };
+  const approved = o.all.find(r => r.phase === 'approved');
+  if (approved) return { text: t('pf.ctaRelease', { version: approved.version ?? '' }), tab: 'releases', icon: 'rocket', primary: true };
+  const ready = o.all.find(r => r.phase === 'draft' || r.phase === 'testing');
+  if (ready) return { text: t('pf.ctaSubmit', { version: ready.version ?? '' }), tab: 'releases', icon: 'send', primary: true };
+  const review = o.all.find(r => r.phase === 'review' || r.phase === 'sent');
+  if (review) return { text: t('pf.ctaReview', { version: review.version ?? '' }), tab: 'releases', icon: 'clock', primary: false };
+  if (o.att.length) return { text: t('pf.ctaWarnings', { count: o.att.length }), tab: o.att[0]!.tab ?? 'checks', icon: 'alert', primary: false };
+  if (o.project && !o.next) return { text: t('pf.ctaUpload'), tab: 'releases', icon: 'upload', primary: false };
+  return { text: t('pf.ctaOpen'), tab: 'releases', icon: 'arrowRight', primary: false };
+}
+
+/** Worst tone of an app's attention list (the sidebar dot); null when nothing needs a look. */
+export function worstTone(att: Attention[]): Tone | null {
+  if (att.some(a => a.tone === 'bad')) return 'bad';
+  if (att.some(a => a.tone === 'warn')) return 'warn';
+  return att.length ? 'info' : null;
+}
+
+// ---- Pipeline (Build -> Testing -> Review -> Live -> Rollout, one lane per store) ----
+
+export function PipelineTrack({ store, all, on }: { store: 'ios' | 'android'; all: StoreRelease[]; on: boolean }) {
+  const { now, next } = storeNow(all, store);
+  const r = next ?? now;
+  const lane = laneOf(store, on ? r : null);
+  const name = store === 'ios' ? 'App Store' : 'Google Play';
+  const state = !on ? t('app.notOnStore') : !r ? t('portfolio.noVersion') : `${r.version ?? ''} · ${t(`phase.${r.phase}` as Key)}${lane.share !== null && lane.share < 1 ? ` ${share(lane.share)}` : ''}`;
+  return (
+    <div className={`pf-track${on ? '' : ' off'}`} role="img" aria-label={`${name}: ${state}`}>
+      <span className="pf-track-name"><StoreGlyph store={store} className="ic13" />{store === 'ios' ? 'App Store' : 'Play'}</span>
+      <span className="pf-segs" aria-hidden="true">
+        {STAGES.map((s, i) => {
+          const cls = i < lane.at ? 'done' : i === lane.at ? `at t-${lane.tone}` : '';
+          const fill = i === lane.at && s === 'rollout' && lane.share !== null && lane.share < 1 ? lane.share : null;
+          return <b key={s} className={cls}>{fill !== null && <i style={{ width: `${Math.max(8, fill * 100)}%` }} />}</b>;
+        })}
+      </span>
+      <span className="pf-track-v num" title={state}>{on && r ? `${r.version ?? ''}${lane.share !== null && lane.share < 1 ? ` · ${share(lane.share)}` : ''}` : '–'}</span>
+    </div>
+  );
+}
+
+/** Both store lanes under one stage header. Needs a tint (`--tint-h`) on an ancestor. */
+export function Pipeline({ all, ios, android, size = 'md' }: { all: StoreRelease[]; ios: boolean; android: boolean; size?: 'md' | 'lg' }) {
+  return (
+    <div className={`pf-pipe${size === 'lg' ? ' ds-pipe-lg' : ''}`}>
+      <div className="pf-stages" aria-hidden="true"><span />{STAGES.map(s => <span key={s}>{t(`stage.${s}`)}</span>)}<span /></div>
+      <PipelineTrack store="ios" all={all} on={ios} />
+      <PipelineTrack store="android" all={all} on={android} />
+    </div>
+  );
+}
+
+// ---- page parts ----
+
+/** Page title row: optional eyebrow, a big title, one line under it, actions on the right. */
+export function PageHeader({ title, subtitle, eyebrow, actions, icon }: { title: ReactNode; subtitle?: ReactNode; eyebrow?: ReactNode; actions?: ReactNode; icon?: IconName }) {
+  return (
+    <header className="ds-ph">
+      <div className="ds-ph-t">
+        {eyebrow && <p className="ds-eyebrow">{eyebrow}</p>}
+        <h1 className="ds-h1">{icon && <span className="ds-ph-ic"><Icon name={icon} weight="fill" /></span>}{title}</h1>
+        {subtitle && <p className="ds-sub">{subtitle}</p>}
+      </div>
+      {actions && <div className="actions">{actions}</div>}
+    </header>
+  );
+}
+
+/** App hero: screenshots strip, big icon, name, ids, store links, the two-store pipeline and the next step. */
+export function Hero({ name, icon, projectId, ids, badges, links, all, ios, android, cta, onCta, next, children }: {
+  name: string; icon: string | null; projectId: string | null; ids?: ReactNode; badges?: ReactNode; links?: ReactNode;
+  all: StoreRelease[]; ios: boolean; android: boolean; cta?: Cta | null; onCta?: (tab: AppTab) => void; next?: string | null; children?: ReactNode;
+}) {
+  const hue = useTint(icon, name);
+  const shots = useShots(projectId, 4);
+  return (
+    <section className="ds-hero" style={tintStyle(hue)} aria-label={name}>
+      <div className="ds-hero-main">
+        <div className="ds-hero-id">
+          <AppIcon name={name} src={icon} className="ds-hero-icon" />
+          <div className="ds-hero-t">
+            <div className="ds-hero-row"><h1 className="ds-hero-name">{name}</h1>{badges}</div>
+            {ids && <div className="ds-hero-ids">{ids}</div>}
+            {links && <div className="ds-hero-links">{links}</div>}
+          </div>
+        </div>
+        <div className="ds-hero-pipe">
+          <Pipeline all={all} ios={ios} android={android} size="lg" />
+          <div className="ds-hero-foot">
+            <div className="ds-hero-next"><span className="pf-next-l">{t('pf.next')}</span><span className="ds-hero-next-v num">{next ?? '–'}</span></div>
+            {cta && <button className={`btn ${cta.primary ? 'btn-primary' : ''} pf-cta`} onClick={() => onCta?.(cta.tab)}><Icon name={cta.icon} />{cta.text}</button>}
+          </div>
+        </div>
+        {children}
+      </div>
+      <div className={`ds-hero-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
+        {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} />) : <AppIcon name={name} src={icon} className="pf-hero-icon" />}
+      </div>
+    </section>
+  );
+}
+
+/** Section v2: a titled block. `plain` drops the surface (content sits on the page). */
+export function Section({ title, icon, sub, actions, children, plain, pad = true, id, className = '' }: { title?: ReactNode; icon?: IconName; sub?: ReactNode; actions?: ReactNode; children: ReactNode; plain?: boolean; pad?: boolean; id?: string; className?: string }) {
+  const hid = useId();
+  return (
+    <section className={`ds-sec${plain ? ' plain' : ''} ${className}`} id={id} aria-labelledby={title !== undefined ? hid : undefined}>
+      {title !== undefined && (
+        <div className="ds-sec-h">
+          <div><h2 id={hid}>{icon && <span className="ds-sec-ic"><Icon name={icon} /></span>}{title}</h2>{sub && <p className="ds-sec-sub">{sub}</p>}</div>
+          {actions && <div className="actions">{actions}</div>}
+        </div>
+      )}
+      {pad ? <div className="ds-sec-b">{children}</div> : children}
+    </section>
+  );
+}
+
+/** Big number tile: value, label, optional delta (+ is good unless `invert`) and a sub line. */
+export function StatTile({ label, value, delta, invert, sub, icon, tone, onClick }: { label: string; value: ReactNode; delta?: number | null; invert?: boolean; sub?: ReactNode; icon?: IconName; tone?: Tone; onClick?: () => void }) {
+  const good = delta == null || delta === 0 ? null : (delta > 0) !== !!invert;
+  const body = (
+    <>
+      <span className="ds-stat-l">{icon && <Icon name={icon} />}{label}</span>
+      <span className="ds-stat-v num">{value}</span>
+      {(delta != null || sub) && <span className="ds-stat-s">
+        {delta != null && <span className={`ds-delta ${good === null ? '' : good ? 'up' : 'down'}`}>{delta > 0 ? '+' : ''}{delta}</span>}
+        {sub && <span>{sub}</span>}
+      </span>}
+    </>
+  );
+  const cls = `ds-stat${tone ? ` tone-${tone}` : ''}`;
+  return onClick ? <button type="button" className={`${cls} clickable`} onClick={onClick}>{body}</button> : <div className={cls}>{body}</div>;
+}
+
+/** Status pill: a tone dot and text; `solid` for the one state that matters on a row. */
+export function StatusPill({ tone = 'neutral', children, icon, solid, title }: { tone?: Tone; children: ReactNode; icon?: IconName; solid?: boolean; title?: string }) {
+  return <span className={`ds-pill ${tone}${solid ? ' solid' : ''}`} title={title}>{icon ? <Icon name={icon} /> : <i />}{children}</span>;
+}
+
+/** Empty state without illustration: icon, one line, an optional action. */
+export function EmptyState({ icon = 'sparkle', children, action, tone }: { icon?: IconName; children: ReactNode; action?: ReactNode; tone?: Tone }) {
+  return (
+    <div className={`ds-empty${tone ? ` tone-${tone}` : ''}`} role="status">
+      <span className="ds-empty-ic"><Icon name={icon} /></span>
+      <p>{children}</p>
+      {action}
+    </div>
+  );
+}
+
+/** Toolbar row: search, filters, then right-aligned controls after a `<span className="grow" />`. */
+export function Toolbar({ label, children }: { label: string; children: ReactNode }) {
+  return <div className="ds-toolbar" role="toolbar" aria-label={label}>{children}</div>;
+}
+
+export interface TabItem<T extends string> { id: T; label: string; icon?: IconName; count?: number | null; dot?: boolean; dotTitle?: string }
+
+/** Pill tabs with icons and counts; arrows / Home / End move between them (roving tabindex). */
+export function Tabs<T extends string>({ items, value, onChange, label, panelId = 'tabpanel' }: { items: TabItem<T>[]; value: T; onChange: (v: T) => void; label: string; panelId?: string }) {
+  const refs = useRef<(HTMLButtonElement | null)[]>([]);
+  const onKey = (ev: KeyboardEvent) => {
+    const i = items.findIndex(x => x.id === value);
+    const j = ev.key === 'ArrowRight' ? i + 1 : ev.key === 'ArrowLeft' ? i - 1 : ev.key === 'Home' ? 0 : ev.key === 'End' ? items.length - 1 : null;
+    if (j === null) return;
+    ev.preventDefault();
+    const n = (j + items.length) % items.length;
+    onChange(items[n]!.id);
+    refs.current[n]?.focus();
+  };
+  return (
+    <div className="ds-tabs" role="tablist" aria-label={label} onKeyDown={onKey}>
+      {items.map((x, i) => (
+        <button key={x.id} ref={el => { refs.current[i] = el; }} role="tab" id={`tab-${x.id}`} aria-selected={value === x.id} aria-controls={panelId}
+          tabIndex={value === x.id ? 0 : -1} className="ds-tab" onClick={() => onChange(x.id)}>
+          {x.icon && <Icon name={x.icon} weight={value === x.id ? 'fill' : 'regular'} />}{x.label}
+          {x.count != null && x.count > 0 && <span className="ds-tab-n num">{x.count}</span>}
+          {x.dot && <span className="ed-dot" title={x.dotTitle} />}
+        </button>
+      ))}
+    </div>
+  );
+}
+
+/** Dialog v2: modal panel with a title, body and footer actions; Escape and the scrim close it, focus moves in. */
+export function Dialog({ title, icon, children, actions, onClose, wide }: { title: ReactNode; icon?: IconName; children: ReactNode; actions?: ReactNode; onClose: () => void; wide?: boolean }) {
+  const root = useRef<HTMLDivElement>(null);
+  const hid = useId();
+  useEffect(() => {
+    const prev = document.activeElement as HTMLElement | null;
+    root.current?.focus();
+    return () => { prev?.focus?.(); };
+  }, []);
+  return (
+    <div className="ds-scrim" onMouseDown={e => { if (e.target === e.currentTarget) onClose(); }}>
+      <div className={`ds-dialog${wide ? ' wide' : ''}`} role="dialog" aria-modal="true" aria-labelledby={hid} tabIndex={-1} ref={root}
+        onKeyDown={e => { if (e.key === 'Escape') { e.stopPropagation(); onClose(); } }}>
+        <div className="ds-dialog-h">
+          <h2 id={hid}>{icon && <span className="ds-sec-ic"><Icon name={icon} /></span>}{title}</h2>
+          <button className="btn btn-ghost btn-sm ds-x" onClick={onClose} aria-label={t('common.close')}><Icon name="x" /></button>
+        </div>
+        <div className="ds-dialog-b">{children}</div>
+        {actions && <div className="ds-dialog-f">{actions}</div>}
+      </div>
+    </div>
+  );
+}

From d3d31d6c1259365a110efdb9294cf69cc197511a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 23:18:30 +0800
Subject: [PATCH 038/255] Node: JSON configs are read as data, not imported
 (store-only apps failed under npx: needs an import attribute); test, pitfall
 105

---
 CHANGELOG.md                   |  2 ++
 cli/lib/rt.ts                  |  3 +++
 skills/store-pitfalls/SKILL.md |  7 +++++++
 tests/config-json-node.test.ts | 12 ++++++++++++
 4 files changed, 24 insertions(+)
 create mode 100644 tests/config-json-node.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 844217e..630986b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- Node: a `storebound.config.json` (and every store-only app) loads again; it needed an import attribute. Pitfall 105.
+
 - **`storebound watch`**: store events for every app on the machine (rejected, approved, live, rollout halted, crash
   threshold, low or unanswered reviews), sent to ntfy (phone), Telegram, a webhook or an OS notification; runs as a loop
   (`--every 15m`) or `--once`; a PM2 recipe for a server is in docs/watch.md. `storebound events` and the MCP tool
diff --git a/cli/lib/rt.ts b/cli/lib/rt.ts
index 9b43cc7..d323d45 100644
--- a/cli/lib/rt.ts
+++ b/cli/lib/rt.ts
@@ -82,6 +82,9 @@ export const importPath = (path: string): Promise<any> => import(pathToFileURL(p
  */
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 export async function importConfigModule(path: string): Promise<any> {
+  // a JSON config is read, not imported: Node refuses a JSON import without `with { type: 'json' }` (every store-only
+  // app of `storebound watch` on a server failed; pitfall 105)
+  if (/\.json$/i.test(path)) return { default: JSON.parse(readFileSync(path, 'utf8')) };
   if (isBun || !/\.[cm]?ts$/.test(path)) return importPath(path);
   try {
     return await withoutTypeStripWarning(() => importPath(path));
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index c44253a..a88eb70 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1265,3 +1265,10 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `iapLocalizationChanges` / `iapAttributeChanges` / `availabilityChange` (`cli/apple/iap.ts`), the
   subscription helpers in `cli/lib/subscriptions.ts`, `planAppInfo` / `reviewDetailDiff`, `campaignDiff`,
   `winBackDiff`, `eventAttrDiff`; tests `apple-iap-drift`, `subscriptions-drift`, `appinfo-drift`, `misc-drift`.
+
+## 105. `storebound watch` on a server read no app: "needs an import attribute of type: json"
+- **Symptom:** on Node (npx, a server), every store-only app failed with `Module ".../storebound.config.json" needs an
+  import attribute of "type: json"`; on Bun it worked.
+- **Cause:** a JSON config (store-only apps get one generated) was loaded with a bare dynamic import, which Node refuses.
+- **Do:** update storebound.
+- **Guard:** `importConfigModule` in `cli/lib/rt.ts` reads JSON configs as data (`tests/config-json-node.test.ts`).
diff --git a/tests/config-json-node.test.ts b/tests/config-json-node.test.ts
new file mode 100644
index 0000000..b2cd820
--- /dev/null
+++ b/tests/config-json-node.test.ts
@@ -0,0 +1,12 @@
+// A storebound.config.json loads without an import attribute (Node refuses a bare JSON import; pitfall 105).
+import { expect, test } from 'bun:test';
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { importConfigModule } from '../cli/lib/rt';
+
+test('importConfigModule reads a JSON config as data', async () => {
+  const f = join(mkdtempSync(join(tmpdir(), 'sb-json-')), 'storebound.config.json');
+  writeFileSync(f, JSON.stringify({ app: { name: 'Demo' }, play: { packageName: 'com.example.demo' } }));
+  expect((await importConfigModule(f)).default.play.packageName).toBe('com.example.demo');
+});

From 5a892af3d62fec017466825821b7bd7ea973c80d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 22:19:38 +0700
Subject: [PATCH 039/255] storebound 0.8.32: version in package.json and every
 copy, CHANGELOG 0.8.32 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 1c1dfb0..a5d507f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.31",
+      "version": "0.8.32",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1ec203f..3667d8c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.31",
+  "version": "0.8.32",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 8bbad0a..e616cbf 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.31",
+  "version": "0.8.32",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b1e9a2c..38e61dc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.32 · 2026-10-22
+
 - Node: a `storebound.config.json` (and every store-only app) loads again; it needed an import attribute. Pitfall 105.
 
 ## 0.8.31 · 2026-10-22
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 5ad15a1..e422434 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.31",
+  "version": "0.8.32",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 6f98514..ce2877d 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.31"
+version = "0.8.32"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 20a0757..83c6b39 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.31"
+version = "0.8.32"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index efaf0ca..338db1b 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.31",
+  "version": "0.8.32",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 5444ee7..700067d 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.31",
+  "version": "0.8.32",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 65a6780..e8acad0 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.31",
+  "version": "0.8.32",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From f131de9df2d3c698068a32a26f40b5afa4c9db8b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 23:31:22 +0800
Subject: [PATCH 040/255] Desktop v2 screens: releases (store cards, stage
 stepper, rollout ring), submit checklist, TestFlight cards; listings as store
 pages with completeness, framed screenshots with issue badges, product cards,
 price matrix with gap shading; health tiles and issue cards, store-style
 review feed with rating distribution, growth funnel, readiness score with
 fix-first, tools grid, store-info sheet; settings, accounts, folders,
 dependencies and onboarding in the v2 language

---
 apps/desktop/src/i18n/en.ts                   |  61 ++++
 apps/desktop/src/i18n/tr.ts                   |  61 ++++
 apps/desktop/src/screens/Accounts.tsx         |  41 ++-
 apps/desktop/src/screens/AppFolders.tsx       |  51 +--
 apps/desktop/src/screens/Dependencies.tsx     |  43 ++-
 apps/desktop/src/screens/Ignored.tsx          |  21 +-
 apps/desktop/src/screens/Onboarding.tsx       |   9 +-
 apps/desktop/src/screens/Settings.tsx         |  58 +--
 .../src/screens/editors/AppInfoEditor.tsx     |  33 +-
 .../desktop/src/screens/editors/ArtEditor.tsx |  20 +-
 .../src/screens/editors/CatalogEditor.tsx     |  26 +-
 .../src/screens/editors/ListingEditor.tsx     |  47 ++-
 .../screens/editors/StoreListingEditor.tsx    |  20 +-
 .../desktop/src/screens/editors/TabEditor.tsx |   5 +-
 .../src/screens/editors/TestFlightEditor.tsx  |  15 +-
 apps/desktop/src/screens/tabs/AppInfo.tsx     |  80 +++--
 apps/desktop/src/screens/tabs/Art.tsx         |  32 +-
 apps/desktop/src/screens/tabs/Catalog.tsx     |  83 +++--
 apps/desktop/src/screens/tabs/Checks.tsx      | 214 +++++++----
 apps/desktop/src/screens/tabs/Growth.tsx      | 121 ++++---
 apps/desktop/src/screens/tabs/Health.tsx      | 268 +++++++-------
 apps/desktop/src/screens/tabs/Listings.tsx    |  77 ++--
 apps/desktop/src/screens/tabs/LiveArt.tsx     |  18 +-
 apps/desktop/src/screens/tabs/Prices.tsx      |  71 ++--
 apps/desktop/src/screens/tabs/Releases.tsx    | 135 ++++---
 apps/desktop/src/screens/tabs/Reviews.tsx     | 201 ++++++-----
 apps/desktop/src/screens/tabs/Submit.tsx      | 334 +++++++++++-------
 apps/desktop/src/screens/tabs/TestFlight.tsx  | 165 +++++----
 apps/desktop/src/screens/tabs/Tools.tsx       |  84 +++--
 apps/desktop/src/styles/accounts.css          |  26 ++
 apps/desktop/src/styles/appinfo.css           |  45 +++
 apps/desktop/src/styles/art.css               |  38 ++
 apps/desktop/src/styles/catalog.css           |  29 ++
 apps/desktop/src/styles/checks.css            |  76 ++++
 apps/desktop/src/styles/deps.css              |  20 ++
 apps/desktop/src/styles/folders.css           |  22 ++
 apps/desktop/src/styles/growth.css            |  37 ++
 apps/desktop/src/styles/health.css            |  79 +++++
 apps/desktop/src/styles/listings.css          |  36 ++
 apps/desktop/src/styles/onboarding.css        |  33 ++
 apps/desktop/src/styles/prices.css            |  17 +
 apps/desktop/src/styles/releases.css          |  94 +++++
 apps/desktop/src/styles/reviews.css           |  81 +++++
 apps/desktop/src/styles/settings.css          |  37 ++
 apps/desktop/src/styles/submit.css            |  60 ++++
 apps/desktop/src/styles/testflight.css        |  64 ++++
 apps/desktop/src/styles/tools.css             |  48 +++
 47 files changed, 2309 insertions(+), 927 deletions(-)
 create mode 100644 apps/desktop/src/styles/accounts.css
 create mode 100644 apps/desktop/src/styles/appinfo.css
 create mode 100644 apps/desktop/src/styles/art.css
 create mode 100644 apps/desktop/src/styles/catalog.css
 create mode 100644 apps/desktop/src/styles/checks.css
 create mode 100644 apps/desktop/src/styles/deps.css
 create mode 100644 apps/desktop/src/styles/folders.css
 create mode 100644 apps/desktop/src/styles/growth.css
 create mode 100644 apps/desktop/src/styles/health.css
 create mode 100644 apps/desktop/src/styles/listings.css
 create mode 100644 apps/desktop/src/styles/onboarding.css
 create mode 100644 apps/desktop/src/styles/prices.css
 create mode 100644 apps/desktop/src/styles/releases.css
 create mode 100644 apps/desktop/src/styles/reviews.css
 create mode 100644 apps/desktop/src/styles/settings.css
 create mode 100644 apps/desktop/src/styles/submit.css
 create mode 100644 apps/desktop/src/styles/testflight.css
 create mode 100644 apps/desktop/src/styles/tools.css

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index f989257..29d0984 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -817,6 +817,19 @@ export const en = {
   'set.unmute': 'Unmute ({until})',
   'set.muted': 'Muted until {until}',
   'set.clickNote': "Clicking a notification does not open the app on desktop; the next time you open the window from the tray, it goes to that app's Releases tab.",
+  'v2cfg.workspace': 'Workspace',
+  'v2cfg.studios': 'Studios',
+  'v2cfg.accounts': 'Store accounts',
+  'v2cfg.perStore': '{play} Google Play · {apple} App Store',
+  'v2cfg.keysWork': 'Keys working',
+  'v2cfg.keysFailing': 'Keys failing',
+  'v2cfg.depsFound': 'Tools found',
+  'v2cfg.depsNeeds': 'Need attention',
+  'v2cfg.depsInApp': 'In app data',
+  'v2cfg.depsInAppSub': 'downloaded by storebound',
+  'v2cfg.needs': 'needs {version}',
+  'v2cfg.stepOf': 'Step {n} of {total}',
+  'v2cfg.progress': 'Setup progress',
   'set.lead': 'Studios, accounts, store reads, the offline cache, language, theme, notifications and more. Everything stays on this computer.',
   'set.sections': 'Settings sections',
   'set.studios': 'Studios & accounts',
@@ -1163,6 +1176,14 @@ export const en = {
   'art.render': 'Render {lang}',
   'art.notThere': 'Not there yet',
   'art.count': '{count} files',
+  'v2lst.preview': 'Store preview',
+  'v2lst.noSub': 'No subtitle yet',
+  'v2lst.noDesc': 'No description yet',
+  'v2lst.more': 'more',
+  'v2lst.ready': 'Ready',
+  'v2lst.toFix': '{count} to fix',
+  'v2lst.issues': '{count} issues',
+  'v2lst.issues_one': '1 issue',
   'art.count_one': '1 file',
   'art.open': 'Open {name}',
   'art.tooBig': 'too big to preview',
@@ -1852,6 +1873,26 @@ export const en = {
   'tools.g.ads': 'Apple Ads',
   'tools.g.flows': 'Workflows and AI tools',
   'tools.count': '{count} commands',
+  'v2ins.hStartup': 'Launch time',
+  'v2ins.hStartupSub': 'App Store diagnostics · version {version}',
+  'v2ins.rvOpen': 'Unanswered',
+  'v2ins.gFunnel': 'Store funnel',
+  'v2ins.gVsPrev': '% vs the {count} days before',
+  'v2ins.gPts': 'points vs the {count} days before',
+  'v2ins.cScore': 'Store readiness',
+  'v2ins.cScoreSub': '{ok} of {total} checks pass',
+  'v2ins.cReady': 'Ready to submit',
+  'v2ins.cBlocked': '{count} blockers to fix',
+  'v2ins.cNotRun': 'Not checked yet',
+  'v2ins.cBlockers': 'Blockers',
+  'v2ins.cWarnings': 'Warnings',
+  'v2ins.cPassedN': 'Passed',
+  'v2ins.cFixFirst': 'Fix first',
+  'v2ins.cPassed': 'Passed checks ({count})',
+  'v2ins.cAccepted': 'Accepted risks ({count})',
+  'v2ins.aiSheet': 'Store info',
+  'v2ins.aiOpen': 'Open questions',
+  'v2ins.aiNone': 'None',
   'tools.count_one': '1 command',
   'tools.show': 'Show',
   'tools.hide': 'Hide',
@@ -1947,4 +1988,24 @@ export const en = {
   'pf.note': "Note",
   'pf.fixIn': "Fix in {tab}",
   'pf.openTab': "Open {tab}",
+  'v2rel.version': "Version",
+  'v2rel.stages': "{store} release stages",
+  'v2rel.ofUsers': "of users get this version",
+  'v2rel.versions': "{count} versions",
+  'v2rel.ready': "Ready",
+  'v2rel.blocked': "Blocked",
+  'v2rel.todo': "To do",
+  'v2rel.attention': "Check",
+  'v2rel.readyCount': "{done} of {total} steps ready",
+  'v2rel.steps': "Steps to send for review",
+  'v2rel.stepRead': "Store state",
+  'v2rel.stepNoOpen': "Nothing else in review",
+  'v2rel.stepBuild': "Pick the build",
+  'v2rel.stepVersion': "Version to send",
+  'v2rel.stepSend': "Submit for review",
+  'v2rel.stepCode': "Pick the versionCode",
+  'v2rel.tfGroups': "Beta groups",
+  'v2rel.tfInGroups': "in {count} groups",
+  'v2rel.tfSplit': "{internal} internal · {external} external",
+  'v2rel.tfUsable': "Ready to test",
 } as const;
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 0fc5ff5..4219477 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -819,6 +819,19 @@ export const tr: Record<keyof typeof en, string> = {
   'set.unmute': 'Sesi aç ({until})',
   'set.muted': '{until} saatine kadar sessiz',
   'set.clickNote': 'Masaüstünde bildirime tıklamak uygulamayı açmaz; pencereyi bir sonraki sefer tepsiden açtığınızda o uygulamanın Yayınlar sekmesine gider.',
+  'v2cfg.workspace': 'Çalışma alanı',
+  'v2cfg.studios': 'Stüdyolar',
+  'v2cfg.accounts': 'Mağaza hesapları',
+  'v2cfg.perStore': '{play} Google Play · {apple} App Store',
+  'v2cfg.keysWork': 'Çalışan anahtarlar',
+  'v2cfg.keysFailing': 'Sorunlu anahtarlar',
+  'v2cfg.depsFound': 'Bulunan araçlar',
+  'v2cfg.depsNeeds': 'İlgi bekleyen',
+  'v2cfg.depsInApp': 'Uygulama verisinde',
+  'v2cfg.depsInAppSub': 'storebound indirdi',
+  'v2cfg.needs': '{version} gerekli',
+  'v2cfg.stepOf': 'Adım {n} / {total}',
+  'v2cfg.progress': 'Kurulum ilerlemesi',
   'set.lead': 'Stüdyolar, hesaplar, mağaza okumaları, çevrimdışı önbellek, dil, tema, bildirimler ve dahası. Hepsi bu bilgisayarda kalır.',
   'set.sections': 'Ayar bölümleri',
   'set.studios': 'Stüdyolar ve hesaplar',
@@ -1165,6 +1178,14 @@ export const tr: Record<keyof typeof en, string> = {
   'art.render': '{lang} oluştur',
   'art.notThere': 'Henüz yok',
   'art.count': '{count} dosya',
+  'v2lst.preview': 'Mağaza önizlemesi',
+  'v2lst.noSub': 'Henüz alt başlık yok',
+  'v2lst.noDesc': 'Henüz açıklama yok',
+  'v2lst.more': 'devamı',
+  'v2lst.ready': 'Hazır',
+  'v2lst.toFix': '{count} düzeltilecek',
+  'v2lst.issues': '{count} sorun',
+  'v2lst.issues_one': '1 sorun',
   'art.count_one': '1 dosya',
   'art.open': '{name} aç',
   'art.tooBig': 'önizleme için çok büyük',
@@ -1854,6 +1875,26 @@ export const tr: Record<keyof typeof en, string> = {
   'tools.g.ads': 'Apple Ads',
   'tools.g.flows': 'İş akışları ve yapay zekâ araçları',
   'tools.count': '{count} komut',
+  'v2ins.hStartup': 'Açılış süresi',
+  'v2ins.hStartupSub': 'App Store tanılamaları · sürüm {version}',
+  'v2ins.rvOpen': 'Yanıtsız',
+  'v2ins.gFunnel': 'Mağaza hunisi',
+  'v2ins.gVsPrev': 'önceki {count} güne göre %',
+  'v2ins.gPts': 'önceki {count} güne göre puan',
+  'v2ins.cScore': 'Mağaza hazırlığı',
+  'v2ins.cScoreSub': '{total} kontrolden {ok} tanesi geçiyor',
+  'v2ins.cReady': 'Göndermeye hazır',
+  'v2ins.cBlocked': 'Düzeltilecek {count} engel',
+  'v2ins.cNotRun': 'Henüz kontrol edilmedi',
+  'v2ins.cBlockers': 'Engeller',
+  'v2ins.cWarnings': 'Uyarılar',
+  'v2ins.cPassedN': 'Geçti',
+  'v2ins.cFixFirst': 'Önce bunları düzelt',
+  'v2ins.cPassed': 'Geçen kontroller ({count})',
+  'v2ins.cAccepted': 'Kabul edilen riskler ({count})',
+  'v2ins.aiSheet': 'Mağaza bilgileri',
+  'v2ins.aiOpen': 'Açık sorular',
+  'v2ins.aiNone': 'Yok',
   'tools.count_one': '1 komut',
   'tools.show': 'Göster',
   'tools.hide': 'Gizle',
@@ -1949,4 +1990,24 @@ export const tr: Record<keyof typeof en, string> = {
   'pf.note': "Not",
   'pf.fixIn': "{tab} sekmesinde düzelt",
   'pf.openTab': "{tab} sekmesini aç",
+  'v2rel.version': "Sürüm",
+  'v2rel.stages': "{store} yayın aşamaları",
+  'v2rel.ofUsers': "kullanıcı bu sürümü alıyor",
+  'v2rel.versions': "{count} sürüm",
+  'v2rel.ready': "Hazır",
+  'v2rel.blocked': "Engelli",
+  'v2rel.todo': "Yapılacak",
+  'v2rel.attention': "Kontrol et",
+  'v2rel.readyCount': "{total} adımın {done} tanesi hazır",
+  'v2rel.steps': "İncelemeye gönderme adımları",
+  'v2rel.stepRead': "Mağaza durumu",
+  'v2rel.stepNoOpen': "İncelemede başka gönderim yok",
+  'v2rel.stepBuild': "Build'i seç",
+  'v2rel.stepVersion': "Gönderilecek sürüm",
+  'v2rel.stepSend': "İncelemeye gönder",
+  'v2rel.stepCode': "versionCode'u seç",
+  'v2rel.tfGroups': "Beta grupları",
+  'v2rel.tfInGroups': "{count} grupta",
+  'v2rel.tfSplit': "{internal} dahili · {external} harici",
+  'v2rel.tfUsable': "Teste hazır",
 };
diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
index f9412b7..bd79022 100644
--- a/apps/desktop/src/screens/Accounts.tsx
+++ b/apps/desktop/src/screens/Accounts.tsx
@@ -10,7 +10,9 @@ import { ago } from '../lib/format';
 import { withIgnored } from '../lib/identity';
 import { type AccountHealth, useData } from '../store';
 import { Icon, StoreGlyph } from '../ui/icons';
-import { Card, Chip, Empty, Notice, StudioMark } from '../ui/kit';
+import { Chip, Notice, StudioMark } from '../ui/kit';
+import { EmptyState, PageHeader, Section, StatTile } from '../ui/ds';
+import '../styles/accounts.css';
 import type { Tone } from '../lib/model';
 
 const STATUS: Record<AccountCheck['status'], [Tone, Key]> = {
@@ -110,7 +112,7 @@ function StudioCard({ s, accounts, focus }: { s: Studio | null; accounts: Accoun
   const id = s ? `studio-${s.id}` : 'studio-none';
   useEffect(() => { if (focus) document.getElementById(id)?.scrollIntoView({ block: 'start' }); }, [focus, id]);
   return (
-    <section className={`card studio-card${focus ? ' focus' : ''}`} id={id} aria-labelledby={`${id}-h`}>
+    <section className={`ds-sec studio-card${focus ? ' focus' : ''}`} id={id} aria-labelledby={`${id}-h`}>
       <div className="card-head">
         <div className="row" style={{ gap: 12, minWidth: 0 }}>
           <StudioMark studio={s} size="lg" />
@@ -178,28 +180,31 @@ export function Accounts({ focus }: { focus?: string }) {
   );
 
   return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.accounts')}</h1><p>{t('accounts.leadStudios')}</p></div>
-        <div className="actions">
-          <button className="btn" onClick={testAll} disabled={!!busy || !d.accounts.length}><Icon name="shield" className={busy === 'all' ? 'spin' : undefined} />{t('acct.testAll')}</button>
-          <button className="btn btn-primary" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>
-        </div>
-      </div>
+    <div className="page scr-accounts">
+      <PageHeader icon="key" eyebrow={t('v2cfg.workspace')} title={t('nav.accounts')} subtitle={t('accounts.leadStudios')} actions={<>
+        <button className="btn" onClick={testAll} disabled={!!busy || !d.accounts.length}><Icon name="shield" className={busy === 'all' ? 'spin' : undefined} />{t('acct.testAll')}</button>
+        <button className="btn btn-primary" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>
+      </>} />
+      {d.accounts.length > 0 && <div className="ds-grid acct-kpis">
+        <StatTile icon="building" label={t('v2cfg.studios')} value={d.studios.length} />
+        <StatTile icon="key" label={t('v2cfg.accounts')} value={d.accounts.length} sub={t('v2cfg.perStore', { play: d.accounts.filter(a => a.kind === 'play').length, apple: d.accounts.filter(a => a.kind === 'apple').length })} />
+        <StatTile icon="check" tone="ok" label={t('v2cfg.keysWork')} value={d.accounts.filter(a => d.accountHealth[a.id]?.check?.status === 'ok').length} />
+        <StatTile icon="alert" tone={d.accounts.some(a => { const h = d.accountHealth[a.id]; return !!h && (!!h.error || (!!h.check && h.check.status !== 'ok')); }) ? 'bad' : undefined} label={t('v2cfg.keysFailing')} value={d.accounts.filter(a => { const h = d.accountHealth[a.id]; return !!h && (!!h.error || (!!h.check && h.check.status !== 'ok')); }).length} />
+      </div>}
       {error && <Notice tone="bad">{error}</Notice>}
-      {!d.accounts.length && !d.studios.length && <Card pad={false}><Empty illo="key" title={t('accounts.emptyTitle')}>{t('accounts.emptyTextStudios')}</Empty></Card>}
+      {!d.accounts.length && !d.studios.length && <Section><EmptyState icon="key"><b>{t('accounts.emptyTitle')}</b> {t('accounts.emptyTextStudios')}</EmptyState></Section>}
       {d.studios.map(s => <StudioCard key={s.id} s={s} accounts={d.accounts.filter(a => a.studio === s.id)} focus={focus === s.id} />)}
       {(unassigned.length > 0 || !d.studios.length) && d.accounts.length > 0 && <StudioCard s={null} accounts={unassigned} focus={focus === 'none'} />}
 
-      <div className="grid g3" style={{ alignItems: 'start' }}>
-        <Card title={t('studio.new')} icon="building" sub={t('studio.newSub')}>
+      <div className="acct-add">
+        <Section title={t('studio.new')} icon="building" sub={t('studio.newSub')}>
           <form className="form" onSubmit={e => { e.preventDefault(); addStudio(); }}>
             <div className="field"><label htmlFor="studio-name">{t('studio.name')}</label><input id="studio-name" className="input" value={studioName} onChange={e => setStudioName(e.target.value)} maxLength={48} placeholder={t('studio.namePlaceholder')} autoComplete="off" /></div>
             <div className="field"><span className="legend">{t('studio.color')}</span><Swatches value={studioColor} onChange={setStudioColor} name={studioName} /></div>
             <div><button className="btn btn-primary" type="submit" disabled={!studioName.trim() || !!busy}><Icon name="plus" />{t('studio.add')}</button></div>
           </form>
-        </Card>
-        <Card title="Google Play" icon="key" sub={t('accounts.playSubMany')}>
+        </Section>
+        <Section title="Google Play" icon="key" sub={t('accounts.playSubMany')}>
           <form className="form" onSubmit={e => { e.preventDefault(); addPlay(); }}>
             <div className="field"><label htmlFor="play-label">{t('accounts.label')}</label>
               <input id="play-label" className="input" type="text" value={playLabel} onChange={e => setPlayLabel(e.target.value)} placeholder={t('accounts.playPlaceholder')} maxLength={60} autoComplete="off" /></div>
@@ -207,8 +212,8 @@ export function Accounts({ focus }: { focus?: string }) {
             <p className="small muted">{t('accounts.playHow')}</p>
             <div><button className="btn btn-primary" type="submit" disabled={!playLabel.trim() || !!busy}><Icon name="key" />{t('accounts.choosePlay')}</button></div>
           </form>
-        </Card>
-        <Card title="App Store Connect" icon="key" sub={t('accounts.appleSubMany')}>
+        </Section>
+        <Section title="App Store Connect" icon="key" sub={t('accounts.appleSubMany')}>
           <form className="form" onSubmit={e => { e.preventDefault(); addApple(); }}>
             <div className="field"><label htmlFor="apple-label">{t('accounts.label')}</label>
               <input id="apple-label" className="input" type="text" value={appleLabel} onChange={e => setAppleLabel(e.target.value)} placeholder={t('accounts.applePlaceholder')} maxLength={60} autoComplete="off" /></div>
@@ -221,7 +226,7 @@ export function Accounts({ focus }: { focus?: string }) {
             </div>
             <div><button className="btn btn-primary" type="submit" disabled={!appleLabel.trim() || keyId.length !== 10 || issuerId.length < 36 || !!busy}><Icon name="key" />{t('accounts.chooseApple')}</button></div>
           </form>
-        </Card>
+        </Section>
       </div>
       <Notice tone="info" icon="shield">{t('accounts.safetyStudios')}</Notice>
     </div>
diff --git a/apps/desktop/src/screens/AppFolders.tsx b/apps/desktop/src/screens/AppFolders.tsx
index 1162a6f..b5df3b4 100644
--- a/apps/desktop/src/screens/AppFolders.tsx
+++ b/apps/desktop/src/screens/AppFolders.tsx
@@ -1,7 +1,7 @@
 // Workspace: app folders (one storebound.config.ts per app), which store accounts each app uses, and starting a new
 // folder from the templates (`storebound init` with a profile, confirmed in a native dialog).
 import { failureText } from '../lib/results';
-import { useEffect, useRef, useState } from 'react';
+import { type ReactNode, useEffect, useRef, useState } from 'react';
 import { api, errorText, newJob, onProgress, type Project, type ToolResult, type WriteOutcome } from '../api';
 import { devSwitch } from '../dev/switches';
 import { t } from '../i18n';
@@ -10,12 +10,20 @@ import { useNav } from '../nav';
 import { useData } from '../store';
 import { Icon, StoreGlyph } from '../ui/icons';
 import { useFolderActions } from '../ui/FolderMissing';
-import { AppIcon, Card, Chip, Empty, Notice, Seg, StoreBadge } from '../ui/kit';
+import { AppIcon, Empty, Notice, Seg, StoreBadge } from '../ui/kit';
+import { PageHeader, Section, StatusPill, tintStyle, useTint } from '../ui/ds';
+import '../styles/folders.css';
 import { checkState } from './Portfolio';
 
 type Profile = 'app' | 'game' | 'subscription-app';
 interface Run { title: string; project: string; job: string; lines: string[]; result?: ToolResult; outcome?: WriteOutcome; error?: string }
 
+/** Folder card wrapper carrying the app's tint (hooks cannot run inside the list map). */
+function Tinted({ src, name, children }: { src: string | null | undefined; name: string; children: ReactNode }) {
+  const hue = useTint(src, name);
+  return <div className="li fold-card" style={tintStyle(hue)}>{children}</div>;
+}
+
 function LocateButton({ project }: { project: Project }) {
   const { busy, locate } = useFolderActions(project);
   return <button className="btn btn-sm btn-primary" onClick={locate} disabled={busy} title={t('folder.locateHint')}><Icon name="search" />{t('folder.locate')}</button>;
@@ -73,41 +81,36 @@ export function AppFolders() {
     : run.result.ok ? t('run.done') : failureText(run.result);
 
   return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.apps')}</h1><p>{t('folders.lead')}</p></div>
-        <div className="actions">
-          <button className="btn" onClick={fastlane} disabled={!!busy} title={t('folders.fastlaneHint')}><Icon name="download" />{t('folders.fastlane')}</button>
+    <div className="page scr-folders">
+      <PageHeader icon="folder" eyebrow={t('v2cfg.workspace')} title={t('nav.apps')} subtitle={t('folders.lead')} actions={<><button className="btn" onClick={fastlane} disabled={!!busy} title={t('folders.fastlaneHint')}><Icon name="download" />{t('folders.fastlane')}</button>
           <button className="btn" onClick={init} disabled={!!busy}><Icon name="sparkle" />{t('folders.startShort')}</button>
-          <button className="btn btn-primary" onClick={add} disabled={!!busy}><Icon name="folderPlus" />{t('action.addFolder')}</button>
-        </div>
-      </div>
+          <button className="btn btn-primary" onClick={add} disabled={!!busy}><Icon name="folderPlus" />{t('action.addFolder')}</button></>} />
       {error && <Notice tone="bad">{error}</Notice>}
 
       {!d.projects.length ? (
-        <Card pad={false}><Empty illo="apps" title={t('folders.emptyTitle')} actions={<>
+        <Section pad={false}><Empty illo="apps" title={t('folders.emptyTitle')} actions={<>
           <button className="btn" onClick={fastlane} disabled={!!busy}><Icon name="download" />{t('folders.fastlane')}</button>
           <button className="btn" onClick={init} disabled={!!busy}><Icon name="sparkle" />{t('folders.startShort')}</button>
           <button className="btn btn-primary" onClick={add} disabled={!!busy}><Icon name="folderPlus" />{t('action.addFolder')}</button>
-        </>}>{t('folders.emptyText')}</Empty></Card>
+        </>}>{t('folders.emptyText')}</Empty></Section>
       ) : (
-        <Card title={t('folders.list')} icon="folder" sub={t('folders.listSub', { count: d.projects.length })} pad={false}>
+        <Section title={t('folders.list')} icon="folder" sub={t('folders.listSub', { count: d.projects.length })} pad={false}>
           <div className="list">
             {d.projects.map(p => {
               const e = d.statusOf(p);
               const st = p.missing ? { text: t('folder.missingShort'), tone: 'bad' as const } : checkState(e);
               return (
-                <div className="li" key={p.id} style={{ alignItems: 'center' }}>
-                  <AppIcon name={p.name} src={d.icons[p.id]} />
+                <Tinted key={p.id} src={d.icons[p.id]} name={e?.app?.name ?? p.name}>
+                  <AppIcon name={p.name} src={d.icons[p.id]} className="fold-icon" />
                   <div className="li-main">
-                    <span className="row" style={{ gap: 8 }}><span className="li-title">{e?.app?.name ?? p.name}</span><Chip tone={st.tone}>{st.text}</Chip></span>
+                    <span className="row" style={{ gap: 8 }}><span className="li-title">{e?.app?.name ?? p.name}</span><StatusPill tone={st.tone}>{st.text}</StatusPill></span>
                     <span className="li-sub mono-id selectable" title={p.path}>{shortPath(p.path, d.info?.home)}</span>
                     <span className="row" style={{ gap: 6, marginTop: 6 }}>
                       <StoreBadge store="ios" id={e?.app?.platforms.ios?.bundleId} off={!!e && !e.app?.platforms.ios} />
                       <StoreBadge store="android" id={e?.app?.platforms.android?.packageName} off={!!e && !e.app?.platforms.android} />
                     </span>
                   </div>
-                  <div className="stack" style={{ gap: 6, width: 270 }}>
+                  <div className="stack fold-accs" style={{ gap: 6 }}>
                     <label className="acc-pick" title="Google Play"><StoreGlyph store="android" />
                       <select className="input" aria-label={t('folders.playFor', { name: p.name })} value={p.playAccount ?? ''} onChange={ev => setAcc(p, ev.target.value || null, p.appleAccount)} disabled={!!busy}>
                         <option value="">{t('folders.noPlay')}</option>
@@ -119,7 +122,7 @@ export function AppFolders() {
                         {apple.map(a => <option key={a.id} value={a.id}>{a.label}</option>)}
                       </select></label>
                   </div>
-                  <div className="actions" style={{ flexWrap: 'nowrap' }}>
+                  <div className="actions fold-acts">
                     {p.missing ? <LocateButton project={p} /> : <>
                       <button className="btn btn-sm" onClick={() => nav.go({ screen: 'app', appId: p.id, tab: 'releases' })} title={t('folders.openApp')}><Icon name="arrowRight" />{t('folders.open')}</button>
                       <button className="btn btn-sm btn-ghost btn-icon" onClick={() => api.reveal(p.id).catch(e => setError(errorText(e)))} aria-label={t('folders.reveal')} title={t('folders.reveal')}><Icon name="eye" /></button>
@@ -128,14 +131,14 @@ export function AppFolders() {
                     </>}
                     <button className="btn btn-sm btn-ghost btn-icon" onClick={() => remove(p)} disabled={!!busy} aria-label={t('folders.remove', { name: p.name })} title={t('folders.remove', { name: p.name })}><Icon name="trash" /></button>
                   </div>
-                </div>
+                </Tinted>
               );
             })}
           </div>
-        </Card>
+        </Section>
       )}
 
-      <Card title={t('folders.newTitle')} icon="sparkle" sub={t('folders.newSub')}>
+      <Section title={t('folders.newTitle')} icon="sparkle" sub={t('folders.newSub')}>
         <div className="row between" style={{ gap: 16, flexWrap: 'wrap' }}>
           <div className="stack" style={{ gap: 8 }}>
             <Seg value={profile} onChange={setProfile} label={t('folders.profile')} options={[['app', t('profile.app')], ['game', t('profile.game')], ['subscription-app', t('profile.subscription-app')]]} />
@@ -147,16 +150,16 @@ export function AppFolders() {
           </div>
         </div>
         <p className="small muted act-note"><Icon name="info" />{t('folders.newNote')}</p>
-      </Card>
+      </Section>
 
       {run && (
-        <Card title={`${run.title} · ${run.project}`} icon="terminal" sub={<>{status}{run.result && <> · <code className="selectable">{run.result.command}</code></>}</>}
+        <Section title={`${run.title} · ${run.project}`} icon="terminal" sub={<>{status}{run.result && <> · <code className="selectable">{run.result.command}</code></>}</>}
           actions={<button className="btn btn-sm btn-ghost btn-icon" onClick={() => setRun(null)} aria-label={t('common.close')}><Icon name="x" /></button>}>
           <div className="stack">
             {run.error && <Notice tone="bad">{run.error}</Notice>}
             <pre className="log selectable" ref={logRef} aria-live="polite">{tildeText(run.result?.output ?? run.lines.join('\n'), d.info?.home) || ' '}</pre>
           </div>
-        </Card>
+        </Section>
       )}
     </div>
   );
diff --git a/apps/desktop/src/screens/Dependencies.tsx b/apps/desktop/src/screens/Dependencies.tsx
index 9c388e2..e7a04c8 100644
--- a/apps/desktop/src/screens/Dependencies.tsx
+++ b/apps/desktop/src/screens/Dependencies.tsx
@@ -8,7 +8,9 @@ import { bytes } from '../lib/format';
 import { shortPath } from '../paths';
 import { useData } from '../store';
 import { Icon, type IconName } from '../ui/icons';
-import { Card, Chip, Notice, Skeleton } from '../ui/kit';
+import { Chip, Notice, Skeleton } from '../ui/kit';
+import { PageHeader, Section, StatTile, StatusPill } from '../ui/ds';
+import '../styles/deps.css';
 
 const TOOL_ICON: Record<string, IconName> = { ffmpeg: 'image', ffprobe: 'search', chrome: 'globe', xcode: 'terminal', simctl: 'phone', adb: 'phone', git: 'layers' };
 
@@ -72,29 +74,32 @@ export function Dependencies() {
   const managed = (id: string): DownloadInfo | undefined => info.find(i => i.tool === (id === 'ffprobe' ? 'ffmpeg' : id));
 
   return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.dependencies')}</h1><p>{t('deps.lead')}</p></div>
-        <div className="actions"><button className="btn" onClick={refresh} disabled={busy}><Icon name="refresh" className={busy ? 'spin' : undefined} />{t('deps.checkAgain')}</button></div>
-      </div>
+    <div className="page scr-deps">
+      <PageHeader icon="package" eyebrow={t('v2cfg.workspace')} title={t('nav.dependencies')} subtitle={t('deps.lead')} actions={<><button className="btn" onClick={refresh} disabled={busy}><Icon name="refresh" className={busy ? 'spin' : undefined} />{t('deps.checkAgain')}</button></>} />
       {error && <Notice tone="bad">{error}</Notice>}
-      <Card title={t('deps.tools')} icon="package" sub={tools ? t('deps.found', { found, total: tools.length }) : t('common.loading')} pad={false}>
+      {tools && <div className="ds-grid deps-kpis">
+        <StatTile icon="check" tone={found === tools.length ? 'ok' : undefined} label={t('v2cfg.depsFound')} value={`${found} / ${tools.length}`} />
+        <StatTile icon="alert" tone={tools.some(x => !x.found || x.status === 'outdated') ? 'warn' : undefined} label={t('v2cfg.depsNeeds')} value={tools.filter(x => !x.found || x.status === 'outdated').length} />
+        <StatTile icon="download" label={t('v2cfg.depsInApp')} value={info.filter(i => i.installed).length} sub={t('v2cfg.depsInAppSub')} />
+      </div>}
+      <Section title={t('deps.tools')} icon="package" sub={tools ? t('deps.found', { found, total: tools.length }) : t('common.loading')} pad={false}>
         {!tools ? <div className="card-body"><Skeleton lines={6} /></div> : (
-          <div className="list">
+          <div className="list deps-grid">
             {tools.map(x => {
               const st = toolState(x);
               const m = x.install.kind === 'download' ? managed(x.id) : undefined;
               const running = m ? dl[m.tool] : undefined;
               const pct = running?.total ? running.received / running.total : null;
               return (
-                <div className="li tool-row" key={x.id} style={{ alignItems: 'center' }}>
+                <div className={`li tool-row tool-${st.tone}`} key={x.id}>
                   <span className="ti"><Icon name={TOOL_ICON[x.id] ?? 'package'} /></span>
                   <div className="li-main">
-                    <span className="row" style={{ gap: 8 }}><span className="li-title">{x.name}</span><Chip tone={st.tone}>{st.text}</Chip>{x.version && <span className="small muted num">{x.version}</span>}</span>
+                    <span className="row" style={{ gap: 8 }}><span className="li-title">{x.name}</span></span>
+                    <span className="row tool-chips" style={{ gap: 6 }}><StatusPill tone={st.tone === 'accent' ? 'info' : st.tone}>{st.text}</StatusPill>{x.version && <Chip tone="outline">{x.version}</Chip>}{x.required && <Chip tone="neutral">{t('v2cfg.needs', { version: x.required })}</Chip>}</span>
                     <span className="li-sub">{x.usedFor}</span>
                     {x.path && <span className="li-sub mono-id selectable" title={x.path}>{shortPath(x.path, d.info?.home)}</span>}
                   </div>
-                  <div className="actions" style={{ flexWrap: 'nowrap' }}>
+                  <div className="actions tool-acts">
                     {running ? (
                       <div className="prog" aria-live="polite">
                         <div className={`bar${pct === null ? ' indet' : ''}`}><span style={{ width: `${(pct ?? 0.35) * 100}%` }} /></div>
@@ -114,9 +119,9 @@ export function Dependencies() {
             })}
           </div>
         )}
-      </Card>
+      </Section>
       {sdk && (
-        <Card title={t('deps.sdkTitle')} icon="phone" sub={t('deps.sdkSub')} id="android-sdk"
+        <Section title={t('deps.sdkTitle')} icon="phone" sub={t('deps.sdkSub')} id="android-sdk"
           actions={sdk.path ? <Chip tone="ok">{t('deps.installed')}</Chip> : <><Chip tone="warn">{t('deps.missing')}</Chip><button className="btn btn-sm" onClick={() => open('https://developer.android.com/studio')}><Icon name="external" />{t('deps.getIt')}</button></>}>
           {sdk.path ? (
             <dl className="kv">
@@ -129,27 +134,27 @@ export function Dependencies() {
               <ul className="note-list small">{sdk.checked.map((c, i) => <li key={i} className="selectable">{d.info?.home ? c.split(d.info.home).join("~") : c}</li>)}</ul>
             </div>
           )}
-        </Card>
+        </Section>
       )}
-      <div className="grid g2">
+      <div className="grid g2 deps-src">
         {info.map(m => (
-          <Card key={m.tool} title={m.tool === 'chrome' ? 'Chrome for Testing' : `ffmpeg ${m.version ?? ''}`} icon={m.tool === 'chrome' ? 'globe' : 'image'} sub={m.installed ? t('deps.inAppData', { folder: m.folder }) : t('deps.notDownloaded')}>
+          <Section key={m.tool} title={m.tool === 'chrome' ? 'Chrome for Testing' : `ffmpeg ${m.version ?? ''}`} icon={m.tool === 'chrome' ? 'globe' : 'image'} sub={m.installed ? t('deps.inAppData', { folder: m.folder }) : t('deps.notDownloaded')}>
             <dl className="kv">
               <dt>{t('deps.source')}</dt><dd className="selectable small">{m.source}</dd>
               <dt>{t('deps.license')}</dt><dd className="small">{m.license}</dd>
               <dt>{t('deps.verify')}</dt><dd className="small">{m.tool === 'chrome' ? t('deps.verifyChrome') : t('deps.verifyFfmpeg')}</dd>
             </dl>
             <div className="actions" style={{ marginTop: 12 }}><button className="btn btn-sm btn-ghost" onClick={() => open(m.licenseUrl)}><Icon name="external" />{t('deps.licenseLink')}</button></div>
-          </Card>
+          </Section>
         ))}
       </div>
-      <Card title={t('deps.terminal')} icon="terminal" sub={t('deps.terminalSub')}>
+      <Section title={t('deps.terminal')} icon="terminal" sub={t('deps.terminalSub')}>
         <div className="stack">
           {['storebound doctor', 'bun add -d playwright', 'brew install ffmpeg'].map(c => (
             <div className="cmd" key={c}><code className="selectable">{c}</code><button className="btn btn-sm btn-ghost btn-icon" onClick={() => copy(c)} aria-label={t('deps.copy', { cmd: c })}><Icon name="copy" /></button></div>
           ))}
         </div>
-      </Card>
+      </Section>
     </div>
   );
 }
diff --git a/apps/desktop/src/screens/Ignored.tsx b/apps/desktop/src/screens/Ignored.tsx
index 6095165..57c9a49 100644
--- a/apps/desktop/src/screens/Ignored.tsx
+++ b/apps/desktop/src/screens/Ignored.tsx
@@ -5,7 +5,9 @@ import { withIgnored } from '../lib/identity';
 import { useNav } from '../nav';
 import { useData } from '../store';
 import { Icon, StoreGlyph } from '../ui/icons';
-import { AppIcon, Card, Empty, StoreOnlyTag, StudioMark } from '../ui/kit';
+import { AppIcon, StoreOnlyTag, StudioMark } from '../ui/kit';
+import { EmptyState, PageHeader, Section } from '../ui/ds';
+import '../styles/folders.css';
 
 export function Ignored() {
   const d = useData();
@@ -15,14 +17,11 @@ export function Ignored() {
   const restoreAll = () => d.updateOverrides(o => ({ ...o, ignored: [] }));
   const empty = !apps.length && !accounts.length;
   return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.ignored')}</h1><p>{t('ignored.lead')}</p></div>
-        {!empty && <div className="actions"><button className="btn" onClick={restoreAll}><Icon name="eye" />{t('ignored.restoreAll')}</button></div>}
-      </div>
-      {empty ? <Card pad={false}><Empty compact illo="shield" title={t('ignored.emptyTitle')}>{t('ignored.emptyText')}</Empty></Card> : (
+    <div className="page scr-ignored">
+      <PageHeader icon="eyeOff" eyebrow={t('v2cfg.workspace')} title={t('nav.ignored')} subtitle={t('ignored.lead')} actions={!empty ? <><button className="btn" onClick={restoreAll}><Icon name="eye" />{t('ignored.restoreAll')}</button></> : undefined} />
+      {empty ? <Section><EmptyState icon="shield" tone="ok"><b>{t('ignored.emptyTitle')}</b> {t('ignored.emptyText')}</EmptyState></Section> : (
         <>
-          <Card title={t('ignored.apps')} icon="layers" sub={t('ignored.appsSub', { count: apps.length })} pad={false}>
+          <Section title={t('ignored.apps')} icon="layers" sub={t('ignored.appsSub', { count: apps.length })} pad={false}>
             {apps.length ? (
               <div className="list">
                 {apps.map(a => {
@@ -44,8 +43,8 @@ export function Ignored() {
                 })}
               </div>
             ) : <div className="card-body"><p className="small muted">{t('ignored.noApps')}</p></div>}
-          </Card>
-          <Card title={t('ignored.accounts')} icon="key" sub={t('ignored.accountsSub')} pad={false}>
+          </Section>
+          <Section title={t('ignored.accounts')} icon="key" sub={t('ignored.accountsSub')} pad={false}>
             {accounts.length ? (
               <div className="list">
                 {accounts.map(a => (
@@ -57,7 +56,7 @@ export function Ignored() {
                 ))}
               </div>
             ) : <div className="card-body"><p className="small muted">{t('ignored.noAccounts')}</p></div>}
-          </Card>
+          </Section>
         </>
       )}
       <p className="small muted">{t('ignored.howTo')} <button className="link" onClick={() => nav.go({ screen: 'settings', section: 'pairing' })}>{t('ignored.toPairing')}</button></p>
diff --git a/apps/desktop/src/screens/Onboarding.tsx b/apps/desktop/src/screens/Onboarding.tsx
index ca535fb..9fa6026 100644
--- a/apps/desktop/src/screens/Onboarding.tsx
+++ b/apps/desktop/src/screens/Onboarding.tsx
@@ -11,6 +11,7 @@ import { Icon, type IconName, Mark } from '../ui/icons';
 import { Illo } from '../ui/illustrations';
 import { AppIcon, Chip, Notice, Seg, StudioMark } from '../ui/kit';
 import { Swatches } from './Accounts';
+import '../styles/onboarding.css';
 
 const STEPS: [Key, IconName][] = [['wz.s1', 'sparkle'], ['wz.s0', 'building'], ['wz.s2', 'folder'], ['wz.s3', 'key'], ['wz.s4', 'package'], ['wz.s5', 'refresh']];
 const LAST = STEPS.length - 1;
@@ -72,7 +73,7 @@ export function Onboarding({ onClose }: { onClose: () => void }) {
   const liveApps = d.live?.value.apps.length ?? 0;
 
   return (
-    <div className="wizard-scrim">
+    <div className="wizard-scrim wz2">
       <div className="wizard" role="dialog" aria-modal="true" aria-labelledby="wz-title" ref={root} onKeyDown={onKey}>
         <aside className="wz-side">
           <div className="brand"><Mark className="brand-mark" /><span>storebound</span></div>
@@ -88,6 +89,12 @@ export function Onboarding({ onClose }: { onClose: () => void }) {
           <div className="foot"><span>{t('wz.footer')}</span><span className="row" style={{ gap: 6 }}><Icon name="shield" className="ic13" />{t('wz.footerSafe')}</span></div>
         </aside>
         <div className="wz-main">
+          <div className="wz-progress">
+            <span className="wz-eyebrow"><Icon name={STEPS[step]![1]} />{t('v2cfg.stepOf', { n: step + 1, total: STEPS.length })} · {t(STEPS[step]![0])}</span>
+            <div className="wz-bar" role="progressbar" aria-label={t('v2cfg.progress')} aria-valuemin={0} aria-valuemax={STEPS.length} aria-valuenow={done.filter(Boolean).length}>
+              {STEPS.map(([k], i) => <span key={k} className={i === step ? 'on' : done[i] ? 'done' : ''} />)}
+            </div>
+          </div>
           <div className="wz-body">
             {step === 0 && (
               <>
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
index 3342203..59a67f8 100644
--- a/apps/desktop/src/screens/Settings.tsx
+++ b/apps/desktop/src/screens/Settings.tsx
@@ -3,6 +3,8 @@
 // local tools, the CLI sidecar, privacy, keyboard shortcuts, updates and reset. A section list on the left jumps.
 import { useEffect, useState } from 'react';
 import { useScrollSpy } from '../ui/useScrollSpy';
+import { PageHeader, Section } from '../ui/ds';
+import '../styles/settings.css';
 import { api, type CacheInfo, errorText, onUpdateProgress, type Settings as S, type UpdateInfo } from '../api';
 import { type Key, t } from '../i18n';
 import { ago, bytes, date, num } from '../lib/format';
@@ -11,7 +13,7 @@ import { useNav } from '../nav';
 import { usePrefs } from '../prefs-ctx';
 import { useData } from '../store';
 import { Icon, type IconName, StoreGlyph } from '../ui/icons';
-import { AppIcon, Card, Chip, Kbd, MOD, Notice, Seg, StudioMark } from '../ui/kit';
+import { AppIcon, Chip, Kbd, MOD, Notice, Seg, StudioMark } from '../ui/kit';
 
 export const SECTIONS: [string, IconName, Key][] = [
   ['studios', 'building', 'set.studios'], ['pairing', 'link', 'set.pairing'], ['refresh', 'refresh', 'set.refresh'], ['cache', 'database', 'set.cache'],
@@ -83,8 +85,8 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
   const singles = storeOnly.filter(a => !(a.ios && a.android));
 
   return (
-    <div className="page">
-      <div className="ph"><div><h1>{t('nav.settings')}</h1><p>{t('set.lead')}</p></div></div>
+    <div className="page scr-settings">
+      <PageHeader icon="settings" eyebrow={t('v2cfg.workspace')} title={t('nav.settings')} subtitle={t('set.lead')} />
       {error && <Notice tone="bad">{error}</Notice>}
       <div className="set-layout">
         <nav className="set-nav" aria-label={t('set.sections')}>
@@ -93,7 +95,7 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
           ))}
         </nav>
         <div className="stack set-body" style={{ gap: 16 }}>
-          <Card id="set-studios" title={t('set.studios')} icon="building" sub={t('set.studiosSub')} className="set-card" actions={<button className="btn btn-sm" onClick={() => nav.go({ screen: 'accounts' })}>{t('set.manage')}<Icon name="arrowRight" /></button>}>
+          <Section id="set-studios" title={t('set.studios')} icon="building" sub={t('set.studiosSub')} className="set-card" actions={<button className="btn btn-sm" onClick={() => nav.go({ screen: 'accounts' })}>{t('set.manage')}<Icon name="arrowRight" /></button>}>
             {d.studios.length ? (
               <div className="studio-sum">
                 {d.studios.map(st => {
@@ -107,20 +109,20 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
                 })}
               </div>
             ) : <p className="small muted">{t('set.noStudios')}</p>}
-          </Card>
+          </Section>
 
-          <Card id="set-pairing" title={t('set.pairing')} icon="link" sub={t('set.pairingSub')} pad={false} className="set-card">
+          <Section id="set-pairing" title={t('set.pairing')} icon="link" sub={t('set.pairingSub')} pad={false} className="set-card">
             {storeOnly.length ? (
-              <table className="table">
+              <table className="table v2">
                 <thead><tr><th>{t('col.app')}</th><th>{t('set.pairedHow')}</th><th className="right"><span className="sr">{t('col.actions')}</span></th></tr></thead>
                 <tbody>{[...paired, ...singles].map(a => <PairRow key={a.key} app={a} all={d.apps} />)}</tbody>
               </table>
             ) : <div className="card-body"><p className="small muted">{t('set.noStoreOnly')}</p></div>}
             <div className="card-foot"><Icon name="eyeOff" />{t('set.ignoredLine', { count: d.apps.filter(a => a.ignored).length, accounts: d.overrides.ignored.filter(i => i.startsWith('account:')).length })}
               <button className="link" onClick={() => nav.go({ screen: 'ignored' })}>{t('set.openIgnored')}</button></div>
-          </Card>
+          </Section>
 
-          <Card id="set-refresh" title={t('set.refresh')} icon="refresh" sub={t('set.refreshSub')} className="set-card">
+          <Section id="set-refresh" title={t('set.refresh')} icon="refresh" sub={t('set.refreshSub')} className="set-card">
             <div className="form">
               <Toggle id="auto-read" label={t('set.autoRead')} hint={t('set.autoReadHint')} checked={s.refresh.autoRead} onChange={v => set(x => ({ ...x, refresh: { ...x.refresh, autoRead: v } }))} />
               <div className="field"><span className="legend">{t('set.everyMinutes')}</span>
@@ -138,9 +140,9 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
                 <span className="small muted">{d.live ? t('foot.lastRead', { when: ago(d.live.at) }) : t('foot.neverRead')}</span>
               </div>
             </div>
-          </Card>
+          </Section>
 
-          <Card id="set-cache" title={t('set.cache')} icon="database" sub={t('set.cacheSub')} className="set-card">
+          <Section id="set-cache" title={t('set.cache')} icon="database" sub={t('set.cacheSub')} className="set-card">
             <div className="form">
               <dl className="kv">
                 <dt>{t('set.cacheSize')}</dt><dd>{cache ? `${bytes(cache.file_bytes)} · ${t('set.cacheRows', { count: cache.rows })}` : '–'}</dd>
@@ -152,9 +154,9 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
               <div className="actions"><button className="btn btn-sm" onClick={clear}><Icon name="trash" />{t('settings.clearCache')}</button></div>
               <p className="small muted">{t('settings.dataText')}</p>
             </div>
-          </Card>
+          </Section>
 
-          <Card id="set-appearance" title={t('settings.appearance')} icon="sun" className="set-card">
+          <Section id="set-appearance" title={t('settings.appearance')} icon="sun" className="set-card">
             <div className="form">
               <div className="field" role="group" aria-label={t('settings.language')}><span className="legend">{t('settings.language')}</span>
                 <Seg value={prefs.lang} onChange={lang => update({ ...prefs, lang })} label={t('settings.language')} options={[['system', t('settings.system')], ['en', 'English'], ['tr', 'Türkçe']]} /></div>
@@ -163,9 +165,9 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
               <div className="field" role="group" aria-label={t('settings.motion')}><span className="legend">{t('settings.motion')}</span>
                 <Seg value={prefs.motion} onChange={motion => update({ ...prefs, motion })} label={t('settings.motion')} options={[['system', t('settings.followSystem')], ['reduce', t('settings.reduce')]]} /></div>
             </div>
-          </Card>
+          </Section>
 
-          <Card id="set-notifications" title={t('set.notifications')} icon="bell" sub={t('set.notificationsSub')} className="set-card">
+          <Section id="set-notifications" title={t('set.notifications')} icon="bell" sub={t('set.notificationsSub')} className="set-card">
             <div className="form">
               <Toggle id="n-rejected" label={t('set.nRejected')} hint={t('set.nRejectedHint')} checked={s.notify.rejected} onChange={v => set(x => ({ ...x, notify: { ...x.notify, rejected: v } }))} />
               <Toggle id="n-approved" label={t('set.nApproved')} hint={t('set.nApprovedHint')} checked={s.notify.approved} onChange={v => set(x => ({ ...x, notify: { ...x.notify, approved: v } }))} />
@@ -183,18 +185,18 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
               <div className="actions"><button className="btn btn-sm" onClick={() => d.setMute(d.muteUntil > Date.now() ? 0 : 60)}><Icon name="bell" />{d.muteUntil > Date.now() ? t('set.unmute', { until: new Date(d.muteUntil).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) }) : t('set.muteHour')}</button></div>
               <div className="actions"><button className="btn btn-sm" onClick={() => api.notify(t('set.testTitle'), t('set.testBody')).catch(e => setError(errorText(e)))}><Icon name="bell" />{t('set.testNotify')}</button></div>
             </div>
-          </Card>
+          </Section>
 
-          <Card id="set-dependencies" title={t('nav.dependencies')} icon="package" className="set-card" actions={<button className="btn btn-sm" onClick={() => nav.go({ screen: 'dependencies' })}>{t('set.manage')}<Icon name="arrowRight" /></button>}>
+          <Section id="set-dependencies" title={t('nav.dependencies')} icon="package" className="set-card" actions={<button className="btn btn-sm" onClick={() => nav.go({ screen: 'dependencies' })}>{t('set.manage')}<Icon name="arrowRight" /></button>}>
             {tools ? (
               <div className="dep-sum">
                 {tools.tools.map(x => <span key={x.id} className="row small" style={{ gap: 6 }}><i className={`dot ${x.found ? 'ok' : ''}`} />{x.name}{x.version ? <span className="muted num">{x.version}</span> : null}{x.source === 'app' && <Chip tone="outline">{t('set.appCopy')}</Chip>}</span>)}
               </div>
             ) : <p className="small muted">–</p>}
             <p className="small muted" style={{ marginTop: 10 }}>{t('set.depsText')}</p>
-          </Card>
+          </Section>
 
-          <Card id="set-cli" title={t('set.cli')} icon="terminal" className="set-card">
+          <Section id="set-cli" title={t('set.cli')} icon="terminal" className="set-card">
             <dl className="kv">
               <dt>{t('settings.app')}</dt><dd>{d.info ? `storebound desktop ${d.info.version}${d.info.debug ? ` (${t('settings.debug')})` : ''} · ${d.info.platform}` : '–'}</dd>
               <dt>CLI</dt><dd>{d.sidecar ? `storebound ${d.sidecar.version}` : d.sidecarError ?? t('foot.cliStarting')}</dd>
@@ -202,9 +204,9 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
               <dt>{t('set.state')}</dt><dd><span className="row" style={{ gap: 6 }}><i className={`dot ${d.sidecar?.running ? 'ok' : d.sidecarError ? 'bad' : ''}`} />{d.sidecar?.running ? t('set.running') : d.sidecarError ? t('foot.cliDown') : t('foot.cliStarting')}</span></dd>
               <dt>{t('set.writes')}</dt><dd>{t('set.writesText')}</dd>
             </dl>
-          </Card>
+          </Section>
 
-          <Card id="set-privacy" title={t('set.privacy')} icon="shield" className="set-card">
+          <Section id="set-privacy" title={t('set.privacy')} icon="shield" className="set-card">
             <ul className="plain-list">
               <li><Icon name="check" />{t('set.p1')}</li>
               <li><Icon name="check" />{t('set.p2')}</li>
@@ -215,9 +217,9 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
               <button className="btn btn-sm" onClick={() => api.revealData().catch(e => setError(errorText(e)))}><Icon name="folder" />{t('set.reveal')}</button>
               <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal('https://storebound.dev/').catch(e => setError(errorText(e)))}><Icon name="external" />storebound.dev</button>
             </div>
-          </Card>
+          </Section>
 
-          <Card id="set-shortcuts" title={t('settings.shortcuts')} icon="keyboard" className="set-card">
+          <Section id="set-shortcuts" title={t('settings.shortcuts')} icon="keyboard" className="set-card">
             <dl className="shortcuts">
               <dt>{t('settings.scPalette')}</dt><dd><Kbd keys={[MOD, 'K']} /></dd>
               <dt>{t('nav.portfolio')}</dt><dd><Kbd keys={[MOD, '1']} /></dd>
@@ -227,18 +229,18 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
               <dt>{t('settings.scClose')}</dt><dd><Kbd keys={['Esc']} /></dd>
               <dt>{t('set.scQuit')}</dt><dd><Kbd keys={[MOD, 'Q']} /></dd>
             </dl>
-          </Card>
+          </Section>
 
-          <Card id="set-updates" title={t('set.updates')} icon="download" className="set-card">
+          <Section id="set-updates" title={t('set.updates')} icon="download" className="set-card">
             <div className="form">
               <div className="field"><span className="legend">{t('set.channel')}</span>
                 <Seg value={s.channel} label={t('set.channel')} onChange={channel => set(x => ({ ...x, channel }))} options={[['stable', t('set.stable')], ['beta', t('set.beta')]]} /></div>
               <Updates />
               <p className="small muted">{t('set.updatesText')}</p>
             </div>
-          </Card>
+          </Section>
 
-          <Card id="set-reset" title={t('set.reset')} icon="rotate" className="set-card danger-card">
+          <Section id="set-reset" title={t('set.reset')} icon="rotate" className="set-card danger-card">
             <div className="stack">
               <p className="small muted">{t('set.resetText', { accounts: d.accounts.length, studios: d.studios.length, folders: d.projects.length })}</p>
               <div className="actions">
@@ -246,7 +248,7 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
                 <button className="btn btn-sm btn-danger" onClick={reset}><Icon name="rotate" />{t('set.resetButton')}</button>
               </div>
             </div>
-          </Card>
+          </Section>
           <p className="small muted">{t('set.footer', { n: num(d.apps.length) })}</p>
         </div>
       </div>
diff --git a/apps/desktop/src/screens/editors/AppInfoEditor.tsx b/apps/desktop/src/screens/editors/AppInfoEditor.tsx
index 053f4ea..c0685af 100644
--- a/apps/desktop/src/screens/editors/AppInfoEditor.tsx
+++ b/apps/desktop/src/screens/editors/AppInfoEditor.tsx
@@ -8,7 +8,8 @@ import { type Key, t } from '../../i18n';
 import { AGE_FREQUENCY, AGE_RATING_NONE, APPLE_CATEGORIES, APPLE_GAME_SUBCATEGORIES, KIDS_AGE_BANDS, PLAY_AGE_GROUPS, PLAY_APP_CATEGORIES, PLAY_GAME_CATEGORIES } from '../../../../../cli/lib/store-catalogs';
 import { ApplyPanel, ChoiceField, EditBar, JsonField, ListField, TextField, useEdits } from '../../ui/Editor';
 import { StoreGlyph } from '../../ui/icons';
-import { Card } from '../../ui/kit';
+import { Section } from '../../ui/ds';
+import '../../styles/appinfo.css';
 
 type O = Record<string, unknown>;
 const obj = (v: unknown): O => (v && typeof v === 'object' && !Array.isArray(v) ? (v as O) : {});
@@ -30,7 +31,7 @@ function AppleInfo({ project, data }: { project: Project; data: EditableResult }
   const contact = data.contact;
   return (
     <>
-      <Card title={t('ed.appleInfoTitle')} icon="clipboard" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{t('ed.appleInfoSub')}</span>}>
+      <Section title={t('ed.appleInfoTitle')} icon="clipboard" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{t('ed.appleInfoSub')}</span>}>
         <div className="ed-grid">
           <ChoiceField project={project} area="appinfo" path="apple.info.categories.primary" saved={str(cats.primary)} label={t('ed.catPrimary')} options={catOpts} />
           {games && <ChoiceField project={project} area="appinfo" path="apple.info.categories.primarySubOne" saved={str(cats.primarySubOne)} label={t('ed.catSub1')} options={subOpts} />}
@@ -43,8 +44,8 @@ function AppleInfo({ project, data }: { project: Project; data: EditableResult }
             options={[['false', t('ai.encNo')], ['true', t('ai.encYes')]]} hint={t('ed.encHint')} />
           <TextField project={project} area="appinfo" op={{ kind: 'config', path: 'apple.name' }} saved={str(apple.name)} label={t('ed.appleName')} limit={30} placeholder={data.appName} hint={t('ed.appleNameHint')} />
         </div>
-      </Card>
-      <Card title={t('ed.ageTitle')} icon="shield" sub={t('ed.ageSub')}>
+      </Section>
+      <Section title={t('ed.ageTitle')} icon="shield" sub={t('ed.ageSub')}>
         <div className="ed-grid three">
           {Object.entries(AGE_RATING_NONE).map(([q, none]) => (
             <ChoiceField key={q} project={project} area="appinfo" path={`apple.info.ageRating.${q}`} saved={age[q] === undefined ? null : (age[q] as string | boolean | null)} label={question(q)}
@@ -52,8 +53,8 @@ function AppleInfo({ project, data }: { project: Project; data: EditableResult }
               hint={age[q] === undefined ? t('ed.ageDefault', { value: none === null ? t('ed.none') : typeof none === 'boolean' ? t('common.no') : label(String(none)) }) : undefined} />
           ))}
         </div>
-      </Card>
-      <Card title={t('ai.reviewTitle')} icon="users" sub={t('ed.reviewSub')}>
+      </Section>
+      <Section title={t('ai.reviewTitle')} icon="users" sub={t('ed.reviewSub')}>
         <div className="ed-grid">
           <ChoiceField project={project} area="appinfo" path="reviewAccess.signInRequired" saved={ra.signInRequired === undefined ? null : (ra.signInRequired as boolean)} label={t('ai.signIn')} options={yesNo()} />
           <TextField project={project} area="appinfo" op={{ kind: 'config', path: 'apple.info.reviewNotes' }} saved={str(info.reviewNotes)} label={t('ai.notes')} multiline rows={5}
@@ -65,7 +66,7 @@ function AppleInfo({ project, data }: { project: Project; data: EditableResult }
           ))}
           <div className="ed-field"><div className="ed-head"><label>{t('ai.demo')}</label></div><span className="mono-id">{data.demoAccount ? `${data.demoAccount} · ••••••••` : t('ed.notSet')}</span><div className="ed-hint small muted">{t('ed.demoHint')}</div></div>
         </div>
-      </Card>
+      </Section>
     </>
   );
 }
@@ -75,7 +76,7 @@ function PlaySettings({ project, data }: { project: Project; data: EditableResul
   const acc = obj(data.config.accounts);
   const cats: [string, string][] = [...PLAY_GAME_CATEGORIES.map(c => [c, `${t('ed.game')}: ${c}`] as [string, string]), ...PLAY_APP_CATEGORIES.map(c => [c, `${t('ed.app')}: ${c}`] as [string, string])];
   return (
-    <Card title={t('ed.playSettingsTitle')} icon="sliders" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{t('ed.playSettingsSub')}</span>}>
+    <Section title={t('ed.playSettingsTitle')} icon="sliders" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{t('ed.playSettingsSub')}</span>}>
       <div className="ed-grid">
         <ChoiceField project={project} area="appinfo" path="play.category" saved={str(play.category)} label={t('ed.playCategory')} options={cats} hint={t('ed.noApiHint')} />
         <ChoiceField project={project} area="appinfo" path="play.managedPublishing" saved={play.managedPublishing === undefined ? null : (play.managedPublishing as boolean)} label={t('ed.managed')} options={yesNo()} hint={t('ed.noApiHint')} />
@@ -83,14 +84,14 @@ function PlaySettings({ project, data }: { project: Project; data: EditableResul
         <ListField project={project} area="appinfo" path="play.targetAges" saved={(play.targetAges as string[] | undefined) ?? null} label={t('ed.targetAges')} hint={t('ed.targetAgesHint', { groups: PLAY_AGE_GROUPS.join(', ') })} />
         <TextField project={project} area="appinfo" op={{ kind: 'config', path: 'accounts.deletionUrl' }} saved={str(acc.deletionUrl)} label={t('ed.deletionUrl')} kind="url" mono />
       </div>
-    </Card>
+    </Section>
   );
 }
 
 function Declarations({ project, data }: { project: Project; data: EditableResult }) {
   const ds = obj(data.config.dataSafety);
   return (
-    <Card title={t('ed.declTitle')} icon="lock" sub={t('ed.declSub')}>
+    <Section title={t('ed.declTitle')} icon="lock" sub={t('ed.declSub')}>
       <div className="ed-grid">
         {data.play && <ChoiceField project={project} area="appinfo" path="dataSafety.collectsData" saved={ds.collectsData === undefined ? null : (ds.collectsData as boolean)} label={t('ai.dsCollects')} options={yesNo()} />}
         {data.play && <ChoiceField project={project} area="appinfo" path="dataSafety.encryptedInTransit" saved={ds.encryptedInTransit === undefined ? null : (ds.encryptedInTransit as boolean)} label={t('ai.dsEncrypted')} options={yesNo()} />}
@@ -101,14 +102,14 @@ function Declarations({ project, data }: { project: Project; data: EditableResul
       {data.play && <JsonField project={project} area="appinfo" path="console.contentRating" saved={obj(data.config.console).contentRating ?? null} label={t('ed.contentRating')} rows={6} hint={t('ed.contentRatingHint')} />}
       {data.play && <JsonField project={project} area="appinfo" path="console.targetAudience" saved={obj(data.config.console).targetAudience ?? null} label={t('ed.targetAudience')} rows={4} hint={t('ed.noApiHint')} />}
       {data.play && <JsonField project={project} area="appinfo" path="console.appContent" saved={obj(data.config.console).appContent ?? null} label={t('ed.appContent')} rows={4} hint={t('ed.appContentHint')} />}
-    </Card>
+    </Section>
   );
 }
 
 function Promotion({ project, data }: { project: Project; data: EditableResult }) {
   const apple = obj(data.config.apple);
   return (
-    <Card title={t('ed.promoTitle')} icon="sparkle" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{t('ed.promoSub')}</span>}>
+    <Section title={t('ed.promoTitle')} icon="sparkle" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{t('ed.promoSub')}</span>}>
       <JsonField project={project} area="appinfo" path="apple.promoted" saved={apple.promoted ?? null} label={t('ed.promoted')} rows={6} hint={t('ed.promotedHint')} />
       <JsonField project={project} area="appinfo" path="apple.customProductPages" saved={apple.customProductPages ?? null} label={t('ed.cpp')} rows={8} hint={t('ed.cppHint')} />
       <JsonField project={project} area="appinfo" path="apple.events" saved={apple.events ?? null} label={t('ed.events')} rows={8} hint={t('ed.eventsHint')} />
@@ -116,7 +117,7 @@ function Promotion({ project, data }: { project: Project; data: EditableResult }
         <ApplyPanel project={project} method="apple.cpp_create" label={t('ed.applyCpp')} done={t('ai.pushed')} blocked={null} />
         <ApplyPanel project={project} method="apple.events_create" label={t('ed.applyEvents')} done={t('ai.pushed')} blocked={null} />
       </div>
-    </Card>
+    </Section>
   );
 }
 
@@ -124,13 +125,13 @@ export function AppInfoEditor({ project, data, onSaved }: { project: Project; da
   const e = useEdits();
   const unsaved = e.count(project.id, 'appinfo') ? t('ed.saveFirst') : null;
   return (
-    <div className="stack" id="appinfo-editor" style={{ gap: 16 }}>
+    <div className="stack scr-appinfo-ed" id="appinfo-editor" style={{ gap: 20 }}>
       {data.apple && <AppleInfo project={project} data={data} />}
       {data.play && <PlaySettings project={project} data={data} />}
       <Declarations project={project} data={data} />
       {data.apple && <Promotion project={project} data={data} />}
       <EditBar project={project} area="appinfo" data={data} files={[data.files.config, data.files.contact]} onSaved={onSaved} />
-      <Card title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyInfoSub')}>
+      <Section title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyInfoSub')}>
         <div className="act-grid">
           {data.apple && (
             <div className="act-col">
@@ -149,7 +150,7 @@ export function AppInfoEditor({ project, data, onSaved }: { project: Project; da
             </div>
           )}
         </div>
-      </Card>
+      </Section>
     </div>
   );
 }
diff --git a/apps/desktop/src/screens/editors/ArtEditor.tsx b/apps/desktop/src/screens/editors/ArtEditor.tsx
index 4b40d05..77f3e25 100644
--- a/apps/desktop/src/screens/editors/ArtEditor.tsx
+++ b/apps/desktop/src/screens/editors/ArtEditor.tsx
@@ -1,13 +1,15 @@
 // Store art editor (Store art tab): the order of the screenshot scenes (the store shows them in this order) and the
 // raw frame each scene shows (replace a screenshot by pointing the scene at another frame). Saved into the config;
 // then render, and upload to each store with the dry run in the window (uploads replace the store's sets).
+import '../../styles/art.css';
 import { useState } from 'react';
 import { api, errorText, type EditableResult, type Project } from '../../api';
 import { useData, useWrite } from '../../store';
 import { t } from '../../i18n';
 import { ApplyPanel, EditBar, TextField, useEdits } from '../../ui/Editor';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Card, Empty } from '../../ui/kit';
+import { Empty } from '../../ui/kit';
+import { Section } from '../../ui/ds';
 import { keyOf } from '../../lib/edits';
 
 type Scene = { id: string; palette?: unknown; frames?: { src: string }[] } & Record<string, unknown>;
@@ -33,7 +35,7 @@ export function ArtEditor({ project, data, onSaved }: { project: Project; data:
   const p = e.get(project.id, keyOf(op));
   const scenes = (p && p.op.kind === 'config' ? p.op.value : saved) as Scene[];
   const unsaved = e.count(project.id, 'art') ? t('ed.saveFirst') : null;
-  if (!saved.length) return <Card title={t('ed.artTitle')} icon="image"><Empty compact illo="text" title={t('ed.artEmpty')}>{t('ed.artEmptyText')}</Empty></Card>;
+  if (!saved.length) return <Section className="scr-art" title={t('ed.artTitle')} icon="image"><Empty compact illo="text" title={t('ed.artEmpty')}>{t('ed.artEmptyText')}</Empty></Section>;
   const move = (i: number, d: -1 | 1) => {
     const next = [...scenes];
     const j = i + d;
@@ -42,8 +44,8 @@ export function ArtEditor({ project, data, onSaved }: { project: Project; data:
     e.set(project.id, { ...op, value: next }, 'art', saved);
   };
   return (
-    <div className="stack" id="art-editor" style={{ gap: 16 }}>
-      <Card title={t('ed.artTitle')} icon="image" sub={t('ed.artSub')} pad={false}
+    <div className="stack scr-art art-editor" id="art-editor" style={{ gap: 16 }}>
+      <Section title={t('ed.artTitle')} icon="image" sub={t('ed.artSub')} pad={false}
         actions={langs.length > 1 ? <label className="row small" style={{ gap: 6 }}>{t('ed.frameLang')}<select value={fl} onChange={ev => setFrameLang(ev.target.value)} data-frame-lang>{langs.map(l => <option key={l} value={l}>{l}</option>)}</select></label> : undefined}>
         <ol className="ed-scenes">
           {scenes.map((s, i) => (
@@ -61,16 +63,16 @@ export function ArtEditor({ project, data, onSaved }: { project: Project; data:
             </li>
           ))}
         </ol>
-      </Card>
+      </Section>
       {data.shotsCopy && <Captions project={project} data={data} scenes={scenes.map(s => s.id)} />}
       <EditBar project={project} area="art" data={data} files={[data.files.config, data.files.shotsCopy ?? null]} onSaved={onSaved} />
-      <Card title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyArtSub')}>
+      <Section title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyArtSub')}>
         <div className="act-grid">
           <div className="act-col"><div className="act-head"><Icon name="wand" />{t('act.render')}</div><ApplyPanel project={project} method="shots.render" label={t('act.renderShots')} done={t('act.rendered')} blocked={unsaved} /></div>
           {data.play && <div className="act-col"><div className="act-head"><StoreGlyph store="android" />Google Play</div><ApplyPanel project={project} method="play.images" label={t('act.playImages')} done={t('act.uploaded')} blocked={unsaved} /></div>}
           {data.apple && <div className="act-col"><div className="act-head"><StoreGlyph store="ios" />App Store</div><ApplyPanel project={project} method="apple.screenshots" label={t('act.appleShots')} done={t('act.uploaded')} blocked={unsaved} /><ApplyPanel project={project} method="apple.previews" label={t('act.applePreviews')} done={t('act.uploaded')} blocked={unsaved} /></div>}
         </div>
-      </Card>
+      </Section>
     </div>
   );
 }
@@ -82,7 +84,7 @@ function Captions({ project, data, scenes }: { project: Project; data: EditableR
   const [lang, setLang] = useState(langs[0] ?? '');
   const L = langs.includes(lang) ? lang : langs[0] ?? '';
   return (
-    <Card title={t('ed.captionsTitle')} icon="text" sub={t('ed.captionsSub', { file: data.files.shotsCopy ?? '' })} id="captions-editor">
+    <Section title={t('ed.captionsTitle')} icon="text" sub={t('ed.captionsSub', { file: data.files.shotsCopy ?? '' })} id="captions-editor">
       <div className="row" style={{ gap: 8, flexWrap: 'wrap', marginBottom: 12 }} role="tablist" aria-label={t('col.language')}>
         {langs.map(x => <button key={x} role="tab" aria-selected={x === L} className={`btn btn-sm${x === L ? ' btn-primary' : ''}`} onClick={() => setLang(x)}><Icon name="globe" />{x}</button>)}
       </div>
@@ -103,6 +105,6 @@ function Captions({ project, data, scenes }: { project: Project; data: EditableR
           );
         })}
       </div>
-    </Card>
+    </Section>
   );
 }
diff --git a/apps/desktop/src/screens/editors/CatalogEditor.tsx b/apps/desktop/src/screens/editors/CatalogEditor.tsx
index 27380c4..2a3be47 100644
--- a/apps/desktop/src/screens/editors/CatalogEditor.tsx
+++ b/apps/desktop/src/screens/editors/CatalogEditor.tsx
@@ -3,12 +3,14 @@
 // offer blocks (introductory and promotional offers, offer codes, win-back) as checked JSON. Saved into the config,
 // then applied per store with the dry run in the window. A price change of a product that is already live goes
 // through the owner's price decision (the Catalog tab's "Apply the price changes" owner actions).
+import '../../styles/catalog.css';
 import { useState } from 'react';
 import type { EditableResult, Project } from '../../api';
 import { t } from '../../i18n';
 import { ApplyPanel, ChoiceField, EditBar, JsonField, ListField, NumberField, TextField, useEdits } from '../../ui/Editor';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Card, Chip, Empty } from '../../ui/kit';
+import { Chip, Empty } from '../../ui/kit';
+import { Section } from '../../ui/ds';
 
 type O = Record<string, unknown>;
 const obj = (v: unknown): O => (v && typeof v === 'object' && !Array.isArray(v) ? (v as O) : {});
@@ -44,8 +46,8 @@ function ProductCard({ project, data, p }: { project: Project; data: EditableRes
   return (
     <div className="ed-item" data-item={String(p.id)}>
       <button className="ed-item-head" onClick={() => setOpen(o => !o)} aria-expanded={open}>
-        <Icon name={open ? 'chevronDown' : 'chevronRight'} /><span className="mono-id strong">{String(p.id)}</span><Chip tone="outline">{String(p.type)}</Chip>
-        <span className="num small muted">${String(p.usd)}</span>{n > 0 && <Chip tone="accent" icon="edit">{t('ed.unsaved', { count: n })}</Chip>}
+        <Icon name={open ? 'chevronDown' : 'chevronRight'} /><span className="cat-ic sm" aria-hidden="true"><Icon name="tag" /></span><span className="mono-id strong">{String(p.id)}</span><Chip tone="outline">{String(p.type)}</Chip>
+        <span className="num cat-price">${String(p.usd)}</span>{n > 0 && <Chip tone="accent" icon="edit">{t('ed.unsaved', { count: n })}</Chip>}
       </button>
       {open && (
         <div className="ed-item-body stack">
@@ -71,7 +73,7 @@ function SubCard({ project, data, group, s }: { project: Project; data: Editable
   return (
     <div className="ed-item" data-item={String(s.id)}>
       <button className="ed-item-head" onClick={() => setOpen(o => !o)} aria-expanded={open}>
-        <Icon name={open ? 'chevronDown' : 'chevronRight'} /><span className="mono-id strong">{String(s.id)}</span><Chip tone="outline">{String(s.period)}</Chip><span className="num small muted">${String(s.usd)}</span>
+        <Icon name={open ? 'chevronDown' : 'chevronRight'} /><span className="cat-ic sm" aria-hidden="true"><Icon name="refresh" /></span><span className="mono-id strong">{String(s.id)}</span><Chip tone="outline">{String(s.period)}</Chip><span className="num cat-price">${String(s.usd)}</span>
       </button>
       {open && (
         <div className="ed-item-body stack">
@@ -99,17 +101,17 @@ export function CatalogEditor({ project, data, onSaved }: { project: Project; da
   const groups = data.config.subscriptions as O[];
   const unsaved = e.count(project.id, 'catalog') ? t('ed.saveFirst') : null;
   if (!products.length && !groups.length) {
-    return <Card title={t('ed.catalogTitle')} icon="edit"><Empty compact illo="catalog" title={t('ed.catalogEmpty')}>{t('ed.catalogEmptyText')}</Empty></Card>;
+    return <Section className="scr-catalog" title={t('ed.catalogTitle')} icon="edit"><Empty compact illo="catalog" title={t('ed.catalogEmpty')}>{t('ed.catalogEmptyText')}</Empty></Section>;
   }
   return (
-    <div className="stack" id="catalog-editor" style={{ gap: 16 }}>
+    <div className="stack scr-catalog cat-editor" id="catalog-editor" style={{ gap: 16 }}>
       {products.length > 0 && (
-        <Card title={t('ed.productsTitle')} icon="edit" sub={t('ed.productsSub')} pad={false}>
+        <Section title={t('ed.productsTitle')} icon="edit" sub={t('ed.productsSub')} pad={false}>
           <div className="ed-items">{products.map(p => <ProductCard key={String(p.id)} project={project} data={data} p={p} />)}</div>
-        </Card>
+        </Section>
       )}
       {groups.map(g => (
-        <Card key={String(g.name)} title={t('ed.groupTitle', { name: String(g.name) })} icon="layers" sub={t('ed.groupSub')} pad={false}>
+        <Section key={String(g.name)} title={t('ed.groupTitle', { name: String(g.name) })} icon="layers" sub={t('ed.groupSub')} pad={false}>
           <div className="card-body">
             <div className="ed-langs">
               {data.languages.map(l => (
@@ -120,10 +122,10 @@ export function CatalogEditor({ project, data, onSaved }: { project: Project; da
             </div>
           </div>
           <div className="ed-items">{(g.subscriptions as O[]).map(s => <SubCard key={String(s.id)} project={project} data={data} group={String(g.name)} s={s} />)}</div>
-        </Card>
+        </Section>
       ))}
       <EditBar project={project} area="catalog" data={data} files={[data.files.config]} onSaved={onSaved} />
-      <Card title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyCatalogSub')}>
+      <Section title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyCatalogSub')}>
         <div className="act-grid">
           {data.play && (
             <div className="act-col">
@@ -142,7 +144,7 @@ export function CatalogEditor({ project, data, onSaved }: { project: Project; da
           )}
         </div>
         <p className="small muted act-note"><Icon name="shield" />{t('ed.priceGate')}</p>
-      </Card>
+      </Section>
     </div>
   );
 }
diff --git a/apps/desktop/src/screens/editors/ListingEditor.tsx b/apps/desktop/src/screens/editors/ListingEditor.tsx
index a09d1f5..69270fa 100644
--- a/apps/desktop/src/screens/editors/ListingEditor.tsx
+++ b/apps/desktop/src/screens/editors/ListingEditor.tsx
@@ -2,6 +2,7 @@
 // counters against the store limits and the checks of `check --aso` / `scan` as the owner types; the shared store
 // details (URLs, contact, copyright, promo video); Save into store/listing.md, store/appstore.md and the config
 // (project.edit), Pull the live texts into the files (diff first), and Apply to each store (dry run in the window).
+import '../../styles/listings.css';
 import { useState } from 'react';
 import type { EditableListing, EditableResult, Project } from '../../api';
 import { type Key, t } from '../../i18n';
@@ -10,7 +11,8 @@ import { keyOf } from '../../lib/edits';
 import { useData, useWrite } from '../../store';
 import { ApplyPanel, EditBar, type FieldIssueView, TextField, useEdits } from '../../ui/Editor';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Card, Chip, Notice } from '../../ui/kit';
+import { Chip, Notice } from '../../ui/kit';
+import { Section } from '../../ui/ds';
 import { WriteButton } from '../../ui/WriteButton';
 
 const PLAY: { f: string; label: Key; multiline?: boolean; rows?: number; mono?: boolean }[] = [
@@ -30,6 +32,30 @@ function current(e: ReturnType<typeof useEdits>, project: Project, store: 'play'
   }
   return out;
 }
+/** The texts of one language as the store page shows them: icon, title, subtitle / short description, promo text and
+ *  the first lines of the description (live, with the unsaved edits). */
+export function StorePreview({ store, vals, name }: { store: 'play' | 'apple'; vals: Record<string, string>; name: string }) {
+  const title = (store === 'play' ? vals.title : vals.name) || name;
+  const sub = store === 'play' ? vals.short : vals.subtitle;
+  const promo = store === 'apple' ? vals.promotionalText : '';
+  const desc = store === 'play' ? vals.full : vals.description;
+  return (
+    <div className={`lst-preview ${store}`} role="group" aria-label={t('v2lst.preview')} data-preview={store}>
+      <span className="lst-pv-eyebrow">{t('v2lst.preview')}</span>
+      <div className="lst-pv-top">
+        <span className="lst-pv-icon" aria-hidden="true">{(title || '?').trim().slice(0, 1).toUpperCase()}</span>
+        <div className="lst-pv-names">
+          <div className="lst-pv-title">{title || '–'}</div>
+          {sub ? <div className="lst-pv-sub">{sub}</div> : <div className="lst-pv-sub muted">{t('v2lst.noSub')}</div>}
+        </div>
+      </div>
+      {promo && <p className="lst-pv-promo">{promo}</p>}
+      {desc ? <p className="lst-pv-desc">{desc}</p> : <p className="lst-pv-desc muted">{t('v2lst.noDesc')}</p>}
+      {desc && desc.length > 180 && <span className="lst-pv-more" aria-hidden="true">{t('v2lst.more')}</span>}
+    </div>
+  );
+}
+
 const byField = (issues: FieldIssue[], f: string): FieldIssueView[] => issues.filter(i => i.field === f).map(i => ({ level: i.level, msg: i.msg }));
 
 function StoreColumn({ project, data, store, l }: { project: Project; data: EditableResult; store: 'play' | 'apple'; l: EditableListing }) {
@@ -48,6 +74,7 @@ function StoreColumn({ project, data, store, l }: { project: Project; data: Edit
         {l.status && <Chip tone="warn">{l.status === 'draft' ? t('ed.statusDraft') : t('ed.statusTranslate')}</Chip>}
         {(l.codes?.length ?? 0) > 1 && <Chip tone="outline">{t('ed.alsoServes', { codes: l.codes!.filter(c => c !== l.lang).join(', ') })}</Chip>}
       </div>
+      <StorePreview store={store} vals={vals} name={store === 'play' ? data.appName : data.appleName} />
       {fresh && <Notice tone="info" icon="info">{t('ed.newSection', { lang: l.lang })}</Notice>}
       {defs.map(d => (
         <TextField key={d.f} project={project} area="listings" op={{ kind: 'listing', store, lang: l.lang, field: d.f }} saved={l.values[d.f] ?? ''}
@@ -101,15 +128,15 @@ export function ListingEditor({ project, data, onSaved }: { project: Project; da
   const okVersion = /^\d+(\.\d+){0,2}$/.test(version);
   const files = [data.files.play, data.files.apple, data.files.config];
   return (
-    <>
-      <Card title={t('ed.listingTitle')} icon="edit" sub={t('ed.listingSub')} id="listing-editor"
+    <div className="scr-listings lst-editor">
+      <Section title={t('ed.listingTitle')} icon="edit" sub={t('ed.listingSub')} id="listing-editor"
         actions={<>
           {data.play && <WriteButton run={w} icon="download" w={{ method: 'play.listing_pull', args: {}, title: t('ed.pullPlay'), done: t('ed.pulled'), after: onSaved }} hint={unsaved ? t('ed.pullDirty') : t('ed.pullHint')}>{t('ed.pullPlay')}</WriteButton>}
           {data.apple && <WriteButton run={w} icon="download" w={{ method: 'apple.listing_pull', args: {}, title: t('ed.pullApple'), done: t('ed.pulled'), after: onSaved }} hint={unsaved ? t('ed.pullDirty') : t('ed.pullHint')}>{t('ed.pullApple')}</WriteButton>}
         </>}>
         <div className="stack" style={{ gap: 12 }}>
           {unsaved > 0 && <Notice tone="info" icon="info">{t('ed.pullNote')}</Notice>}
-          <div className="row" style={{ gap: 8, flexWrap: 'wrap' }} role="tablist" aria-label={t('col.language')}>
+          <div className="row lst-langbar" style={{ gap: 8, flexWrap: 'wrap' }} role="tablist" aria-label={t('col.language')}>
             {data.languages.map(x => {
               const n = e.list(project.id, 'listings').filter(p => p.op.kind === 'listing' && (p.op.lang === x.apple || x.play.includes(p.op.lang))).length;
               return (
@@ -132,12 +159,12 @@ export function ListingEditor({ project, data, onSaved }: { project: Project; da
             {!pl && !al && <Notice tone="warn">{t('ed.noStoreForLang', { lang: L?.id ?? '' })}</Notice>}
           </div>
         </div>
-      </Card>
-      <Card title={t('ed.detailsTitle')} icon="link" sub={t('ed.detailsSub')}>
+      </Section>
+      <Section title={t('ed.detailsTitle')} icon="link" sub={t('ed.detailsSub')}>
         <StoreDetails project={project} data={data} />
-      </Card>
+      </Section>
       <EditBar project={project} area="listings" data={data} files={files} onSaved={onSaved} />
-      <Card title={t('ed.applyTitle')} icon="upload" sub={t('ed.applySub')}>
+      <Section title={t('ed.applyTitle')} icon="upload" sub={t('ed.applySub')}>
         <div className="act-grid">
           {data.play && (
             <div className="act-col">
@@ -157,7 +184,7 @@ export function ListingEditor({ project, data, onSaved }: { project: Project; da
           )}
         </div>
         <p className="small muted act-note"><Icon name="shield" />{t('ed.applyNote')}</p>
-      </Card>
-    </>
+      </Section>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/editors/StoreListingEditor.tsx b/apps/desktop/src/screens/editors/StoreListingEditor.tsx
index a1640cc..0d2374b 100644
--- a/apps/desktop/src/screens/editors/StoreListingEditor.tsx
+++ b/apps/desktop/src/screens/editors/StoreListingEditor.tsx
@@ -2,6 +2,7 @@
 // (listing.live), edited in place with the same counters and checks, and applied straight to the store per language
 // (listing.set: the store's dry run in the window, the native dialog, then the real run, which changes only the edited
 // fields). URLs, contact and app details stay with an app folder (they come from its config).
+import '../../styles/listings.css';
 import { useState } from 'react';
 import type { Project } from '../../api';
 import { type Key, t } from '../../i18n';
@@ -12,7 +13,9 @@ import { keyOf } from '../../lib/edits';
 import { useRead } from '../../store';
 import { ApplyPanel, type FieldIssueView, TextField, useEdits } from '../../ui/Editor';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Card, Empty, ErrorNotice, Notice, ReadControl, Skeleton } from '../../ui/kit';
+import { Empty, ErrorNotice, Notice, ReadControl, Skeleton } from '../../ui/kit';
+import { Section } from '../../ui/ds';
+import { StorePreview } from './ListingEditor';
 
 const PLAY: { f: 'title' | 'short' | 'full'; label: Key; limit: number; rows?: number }[] = [
   { f: 'title', label: 'lst.title', limit: 30 }, { f: 'short', label: 'lst.short', limit: 80 }, { f: 'full', label: 'lst.full', limit: 4000, rows: 10 },
@@ -41,6 +44,7 @@ function Column({ project, store, lang, saved, appName, editable }: { project: P
   return (
     <div className="ed-col" data-store={store} data-lang={lang}>
       <div className="act-head"><StoreGlyph store={store === 'play' ? 'android' : 'ios'} />{store === 'play' ? 'Google Play' : 'App Store'}<span className="mono-id small muted">{lang}</span></div>
+      <StorePreview store={store} vals={vals} name={appName} />
       {store === 'apple' && !editable && <Notice tone="info" icon="info">{t('ed.noEditableVersion')}</Notice>}
       {defs.map(d => (
         <TextField key={d.f} project={project} area="listings" op={{ kind: 'listing', store, lang, field: d.f }} saved={saved[d.f] ?? ''} label={t(d.label)} limit={d.limit}
@@ -60,8 +64,8 @@ export function StoreListingEditor({ app }: { app: UnifiedApp }) {
   // the window's edit store is keyed by app: a store-only app is keyed by its store target
   const project = { id: app.target, path: '', name: app.name, playAccount: null, appleAccount: null, added: '' } as Project;
   if (!r.data) {
-    if (r.loading && !r.error) return <Card><Skeleton lines={6} block /></Card>;
-    return <Card pad={false}><Empty illo="text" title={t('ed.liveEmpty')} actions={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('tf.read')}</button>}>{r.error ?? t('ed.storeOnlyNote')}</Empty></Card>;
+    if (r.loading && !r.error) return <div className="scr-listings"><Section><Skeleton lines={6} block /></Section></div>;
+    return <div className="scr-listings"><Section pad={false}><Empty illo="text" title={t('ed.liveEmpty')} actions={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('tf.read')}</button>}>{r.error ?? t('ed.storeOnlyNote')}</Empty></Section></div>;
   }
   const L = r.data;
   const langs = [...new Set([...(L.play ?? []).map(x => x.language), ...(L.apple?.locales ?? []).map(x => x.locale)])].sort();
@@ -69,12 +73,12 @@ export function StoreListingEditor({ app }: { app: UnifiedApp }) {
   const pl = L.play?.find(x => x.language === cur);
   const al = L.apple?.locales.find(x => x.locale === cur);
   return (
-    <>
+    <div className="scr-listings lst-editor">
       {Object.entries(L.errors).map(([s, e]) => <ErrorNotice key={s} error={`${s === 'play' ? 'Google Play' : 'App Store'}: ${e}`} />)}
-      <Card title={t('ed.storeOnlyTitle')} icon="edit" sub={t('ed.storeOnlySub')} actions={<ReadControl r={r} />} id="store-listing-editor">
+      <Section title={t('ed.storeOnlyTitle')} icon="edit" sub={t('ed.storeOnlySub')} actions={<ReadControl r={r} />} id="store-listing-editor">
         <div className="stack" style={{ gap: 12 }}>
           <Notice tone="info" icon="info">{t('ed.storeOnlyNote')}</Notice>
-          <div className="row" style={{ gap: 8, flexWrap: 'wrap' }} role="tablist" aria-label={t('col.language')}>
+          <div className="row lst-langbar" style={{ gap: 8, flexWrap: 'wrap' }} role="tablist" aria-label={t('col.language')}>
             {langs.map(x => <button key={x} role="tab" aria-selected={x === cur} className={`btn btn-sm${x === cur ? ' btn-primary' : ''}`} onClick={() => setLang(x)} data-lang-tab={x}><Icon name="globe" />{x}</button>)}
           </div>
           <div className="ed-cols">
@@ -83,7 +87,7 @@ export function StoreListingEditor({ app }: { app: UnifiedApp }) {
             {!pl && !al && <Notice tone="warn">{t('ed.noStoreForLang', { lang: cur })}</Notice>}
           </div>
         </div>
-      </Card>
-    </>
+      </Section>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/editors/TabEditor.tsx b/apps/desktop/src/screens/editors/TabEditor.tsx
index 462fae0..109eff5 100644
--- a/apps/desktop/src/screens/editors/TabEditor.tsx
+++ b/apps/desktop/src/screens/editors/TabEditor.tsx
@@ -6,7 +6,8 @@ import { t } from '../../i18n';
 import { edits } from '../../lib/edits';
 import type { AppTab } from '../../nav';
 import { useEditable } from '../../ui/Editor';
-import { Card, ErrorNotice, Skeleton } from '../../ui/kit';
+import { ErrorNotice, Skeleton } from '../../ui/kit';
+import { Section } from '../../ui/ds';
 import { AppInfoEditor } from './AppInfoEditor';
 import { ArtEditor } from './ArtEditor';
 import { CatalogEditor } from './CatalogEditor';
@@ -21,7 +22,7 @@ export const EDIT_TABS: Partial<Record<AppTab, 'listings' | 'appinfo' | 'catalog
 export function TabEditor({ tab, project }: { tab: AppTab; project: Project }) {
   const r = useEditable(project);
   if (!EDIT_TABS[tab]) return null;
-  if (!r.data) return r.error ? <ErrorNotice error={t('ed.loadFailed', { error: r.error })} tone="bad" /> : <Card><Skeleton lines={4} block /></Card>;
+  if (!r.data) return r.error ? <ErrorNotice error={t('ed.loadFailed', { error: r.error })} tone="bad" /> : <Section><Skeleton lines={4} block /></Section>;
   const p = { project, data: r.data, onSaved: () => { r.refresh(); } };
   switch (tab) {
     case 'listings': return <ListingEditor {...p} />;
diff --git a/apps/desktop/src/screens/editors/TestFlightEditor.tsx b/apps/desktop/src/screens/editors/TestFlightEditor.tsx
index 9507aab..07a3dd0 100644
--- a/apps/desktop/src/screens/editors/TestFlightEditor.tsx
+++ b/apps/desktop/src/screens/editors/TestFlightEditor.tsx
@@ -5,7 +5,8 @@
 import type { EditableResult, Project } from '../../api';
 import { t } from '../../i18n';
 import { ApplyPanel, EditBar, JsonField, TextField, useEdits } from '../../ui/Editor';
-import { Card } from '../../ui/kit';
+import { Section } from '../../ui/ds';
+import '../../styles/testflight.css';
 
 type O = Record<string, unknown>;
 const obj = (v: unknown): O => (v && typeof v === 'object' && !Array.isArray(v) ? (v as O) : {});
@@ -17,8 +18,8 @@ export function TestFlightEditor({ project, data, onSaved }: { project: Project;
   const unsaved = e.count(project.id, 'testflight') ? t('ed.saveFirst') : null;
   if (!data.apple) return null;
   return (
-    <div className="stack" id="testflight-editor" style={{ gap: 16 }}>
-      <Card title={t('ed.tfTitle')} icon="edit" sub={t('ed.tfSub')}>
+    <div className="stack scr-testflight-ed" id="testflight-editor" style={{ gap: 16 }}>
+      <Section title={t('ed.tfTitle')} icon="edit" sub={t('ed.tfSub')}>
         <div className="ed-langs">
           {data.apple.map(l => (
             <div className="ed-lang" key={l.lang}>
@@ -35,14 +36,14 @@ export function TestFlightEditor({ project, data, onSaved }: { project: Project;
         {typeof desc === 'string' && <TextField project={project} area="testflight" op={{ kind: 'config', path: 'apple.testflight.description' }} saved={desc} label={t('ed.betaDescriptionAll')} limit={4000} multiline rows={3} />}
         <TextField project={project} area="testflight" op={{ kind: 'config', path: 'apple.testflight.reviewNotes' }} saved={typeof tf.reviewNotes === 'string' ? tf.reviewNotes : ''} label={t('ed.betaNotes')} limit={4000} multiline rows={3} />
         <JsonField project={project} area="testflight" path="apple.testflight.groups" saved={tf.groups ?? null} label={t('ed.tfGroups')} rows={6} hint={t('ed.tfGroupsHint')} />
-      </Card>
+      </Section>
       <EditBar project={project} area="testflight" data={data} files={[data.files.apple, data.files.config]} onSaved={onSaved} />
-      <Card title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyTfSub')}>
-        <div className="act-grid">
+      <Section title={t('ed.applyTitle')} icon="upload" sub={t('ed.applyTfSub')}>
+        <div className="act-grid tf-apply">
           <ApplyPanel project={project} method="apple.testflight_info" label={t('ed.applyTfInfo')} done={t('ai.pushed')} blocked={unsaved} />
           <ApplyPanel project={project} method="apple.testflight_groups" label={t('tf.groupsSync')} done={t('tf.groupsSynced')} blocked={unsaved} />
         </div>
-      </Card>
+      </Section>
     </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/AppInfo.tsx b/apps/desktop/src/screens/tabs/AppInfo.tsx
index 7b7e5bf..be4ce7c 100644
--- a/apps/desktop/src/screens/tabs/AppInfo.tsx
+++ b/apps/desktop/src/screens/tabs/AppInfo.tsx
@@ -12,10 +12,12 @@ import { declarationsMd, exportName } from '../../lib/exports';
 import { ago, num } from '../../lib/format';
 import { useData, useRead, useWrite } from '../../store';
 import { useExports, useRunExport } from '../../ui/Exports';
-import { Icon, StoreGlyph } from '../../ui/icons';
+import { Icon, type IconName, StoreGlyph } from '../../ui/icons';
 import { CONSOLE_FORM_NAME, ConsoleFillButton } from '../../ui/ConsoleFill';
 import { ConsolePlanButton, PLAN_FORMS } from '../../ui/ConsolePlan';
-import { Bar, Card, Chip, Empty, ErrorNotice, Notice, Skeleton } from '../../ui/kit';
+import { Bar, Chip, ErrorNotice, Notice, Skeleton } from '../../ui/kit';
+import { EmptyState, Section } from '../../ui/ds';
+import '../../styles/appinfo.css';
 import { WriteButton } from '../../ui/WriteButton';
 import { GameServicesCard } from '../../ui/GameServicesCard';
 import { ascUrl } from '../AppView';
@@ -34,7 +36,7 @@ const yes = (b: boolean | null | undefined): string => (b === null || b === unde
 function AskCard({ ask }: { ask: DeclAsk[] }) {
   if (!ask.length) return <Notice tone="ok" icon="check">{t('ai.allAnswered')}</Notice>;
   return (
-    <Card className="ask-card" title={t('ai.askTitle', { count: ask.length })} icon="question" sub={t('ai.askSub')} pad={false}>
+    <Section className="ask-card" title={t('ai.askTitle', { count: ask.length })} icon="question" sub={t('ai.askSub')} pad={false}>
       <div className="list">
         {ask.map(a => (
           <div className="li" key={a.id}>
@@ -45,7 +47,7 @@ function AskCard({ ask }: { ask: DeclAsk[] }) {
           </div>
         ))}
       </div>
-    </Card>
+    </Section>
   );
 }
 
@@ -76,12 +78,12 @@ function DataSafety({ project, d, onDone }: { project: Project; d: DeclarationsR
   const up = ds?.uploaded ?? null;
   const asked = d.ask.filter(a => a.area === 'dataSafety').length;
   return (
-    <Card title={t('ai.dsTitle')} icon="shield" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{t('ai.dsSub')}</span>} pad={false}
+    <Section title={t('ai.dsTitle')} icon="shield" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{t('ai.dsSub')}</span>} pad={false}
       actions={ds ? <>
         <button className="btn btn-sm btn-ghost" onClick={() => run({ id: 'ds', label: t('export.dataSafety'), kind: 'csv', file: exportName(project.name, 'data safety'), build: () => ds.csv })}><Icon name="download" />CSV</button>
         <WriteButton run={w} primary icon="upload" w={{ method: 'play.data_safety', args: {}, title: t('ai.dsUpload'), done: t('ai.dsUploaded'), after: onDone }} hint={t('ai.dsUploadHint')}>{t('ai.dsUpload')}</WriteButton>
       </> : undefined}>
-      {!ds ? <Empty compact illo="shield" title={t('ai.dsNoneTitle')}>{t('ai.dsNoneText')}</Empty> : (
+      {!ds ? <EmptyState icon="shield"><b>{t('ai.dsNoneTitle')}</b><br />{t('ai.dsNoneText')}</EmptyState> : (
         <>
           <div className="card-body stack">
             <dl className="kv">
@@ -99,7 +101,7 @@ function DataSafety({ project, d, onDone }: { project: Project; d: DeclarationsR
             {asked > 0 && <span className="small muted row" style={{ gap: 6 }}><Icon name="question" className="ic13" />{t('ai.askedHere', { count: asked })}</span>}
           </div>
           {ds.types.length > 0 && (
-            <table className="table">
+            <div className="ds-table-wrap"><table className="table v2">
               <thead><tr><th>{t('ai.colType')}</th><th>{t('ai.colCollected')}</th><th>{t('ai.colShared')}</th></tr></thead>
               <tbody>
                 {ds.types.map(x => (
@@ -110,12 +112,12 @@ function DataSafety({ project, d, onDone }: { project: Project; d: DeclarationsR
                   </tr>
                 ))}
               </tbody>
-            </table>
+            </table></div>
           )}
           <div className="card-foot"><Icon name="info" />{t('ai.dsFoot', { rows: ds.rows })}</div>
         </>
       )}
-    </Card>
+    </Section>
   );
 }
 
@@ -123,14 +125,14 @@ function AppPrivacy({ project, d, appId }: { project: Project; d: DeclarationsRe
   const ap = d.appPrivacy;
   if (!ap) return null;
   return (
-    <Card title={t('ai.apTitle')} icon="lock" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{t('ai.apSub')}</span>} pad={false}
+    <Section title={t('ai.apTitle')} icon="lock" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{t('ai.apSub')}</span>} pad={false}
       actions={<>
         <button className="btn btn-sm" onClick={() => api.openExternal(ascUrl(appId).replace(/\/distribution$/, '/distribution/privacy')).catch(() => {})}><Icon name="external" />{t('ai.apOpen')}</button>
         <ConsoleFillButton project={project} form="apple-app-privacy" />
       </>}>
       <div className="card-body"><Notice tone="info" icon="info">{t('ai.apNote')}</Notice></div>
-      {!ap.items.length ? <Empty compact illo="shield" title={ap.fromDataSafety ? t('ai.apNoneTitle') : t('ai.apUnknownTitle')}>{ap.fromDataSafety ? t('ai.apNoneText') : t('ai.apUnknownText')}</Empty> : (
-        <table className="table">
+      {!ap.items.length ? <EmptyState icon="shield"><b>{ap.fromDataSafety ? t('ai.apNoneTitle') : t('ai.apUnknownTitle')}</b><br />{ap.fromDataSafety ? t('ai.apNoneText') : t('ai.apUnknownText')}</EmptyState> : (
+        <div className="ds-table-wrap"><table className="table v2">
           <thead><tr><th>{t('ai.colAppleType')}</th><th>{t('ai.colPurposes')}</th><th>{t('ai.colLinked')}</th><th>{t('ai.colTracking')}</th></tr></thead>
           <tbody>
             {ap.items.map(x => (
@@ -142,9 +144,9 @@ function AppPrivacy({ project, d, appId }: { project: Project; d: DeclarationsRe
               </tr>
             ))}
           </tbody>
-        </table>
+        </table></div>
       )}
-    </Card>
+    </Section>
   );
 }
 
@@ -154,7 +156,7 @@ function ConsoleSteps({ project, stores }: { project: Project; stores: Declarati
   const forms = PLAN_FORMS.filter(f => (f.store === 'apple' ? stores.apple : stores.play));
   if (!forms.length) return null;
   return (
-    <Card title={t('cp.title')} icon="clipboard" sub={t('cp.sub')} pad={false} id="console-steps">
+    <Section title={t('cp.title')} icon="clipboard" sub={t('cp.sub')} pad={false} id="console-steps">
       <div className="list">
         {forms.map(f => (
           <div className="li" key={f.form} data-form={f.form}>
@@ -167,7 +169,7 @@ function ConsoleSteps({ project, stores }: { project: Project; stores: Declarati
           </div>
         ))}
       </div>
-    </Card>
+    </Section>
   );
 }
 
@@ -181,27 +183,45 @@ export function AppInfoTab({ project }: { project: Project }) {
     { id: 'decl-md', label: t('export.declarations'), icon: 'clipboard', kind: 'md', file: exportName(name, 'store declarations'), disabled: r.data ? false : t('export.readFirst'), build: () => declarationsMd(name, r.data!) },
     { id: 'ds-csv', label: t('export.dataSafety'), icon: 'shield', kind: 'csv', file: exportName(name, 'data safety'), disabled: r.data?.dataSafety ? false : t('export.noDataSafety'), build: () => r.data!.dataSafety!.csv },
   ]);
-  if (!r.data) return r.error ? <ErrorNotice error={r.error} tone="bad" /> : <Card><Skeleton lines={6} block /></Card>;
+  if (!r.data) return r.error ? <ErrorNotice error={r.error} tone="bad" /> : <Section><Skeleton lines={6} block /></Section>;
   const d = r.data;
   const info = d.appInfo;
   const enc = d.encryption;
   const rv = d.review;
   const cat = info?.categories ? [info.categories.primary, info.categories.primarySubOne, info.categories.primarySubTwo].filter(Boolean).join(' / ') : null;
+  const ds = d.dataSafety;
+  const facts: { k: string; label: string; icon: IconName; value: string; tone: 'ok' | 'warn' | 'neutral' }[] = [
+    { k: 'ask', label: t('v2ins.aiOpen'), icon: 'question', value: d.ask.length ? num(d.ask.length) : t('v2ins.aiNone'), tone: d.ask.length ? 'warn' : 'ok' },
+    ...(d.stores.apple && info ? [
+      { k: 'cat', label: t('ai.category'), icon: 'grid' as IconName, value: cat ?? t('ai.notSet'), tone: cat ? 'neutral' as const : 'warn' as const },
+      { k: 'price', label: t('ai.price'), icon: 'coins' as IconName, value: info.free ? t('ai.free') : t('ai.paid'), tone: 'neutral' as const },
+      { k: 'enc', label: t('ai.encTitle'), icon: 'lock' as IconName, value: enc === null ? t('ai.notAnswered') : enc ? t('ai.encYes') : t('ai.encNo'), tone: enc === null ? 'warn' as const : 'neutral' as const },
+    ] : []),
+    ...(d.stores.play && ds ? [{ k: 'ds', label: t('ai.dsCollects'), icon: 'shield' as IconName, value: yes(ds.collectsData), tone: ds.collectsData === null || ds.collectsData === undefined ? 'warn' as const : 'neutral' as const }] : []),
+  ];
   return (
-    <>
+    <div className="scr-appinfo">
+      <section className="ai-sheet" aria-label={t('v2ins.aiSheet')}>
+        <div className="ai-sheet-h"><span className="ds-eyebrow">{t('v2ins.aiSheet')}</span><h2>{name}</h2>
+          <span className="ai-sheet-stores">{d.stores.apple && <span><StoreGlyph store="ios" className="ic13" />App Store</span>}{d.stores.play && <span><StoreGlyph store="android" className="ic13" />Google Play</span>}</span>
+        </div>
+        <dl className="ai-facts">
+          {facts.map(f => <div key={f.k} className={`ai-fact tone-${f.tone}`}><dt><Icon name={f.icon} />{f.label}</dt><dd title={f.value}>{f.value}</dd></div>)}
+        </dl>
+      </section>
       <AskCard ask={d.ask} />
       {d.stores.apple && e?.app?.platforms.ios && !e.app.platforms.ios.ascAppId && (
         <Notice tone="warn" icon="alert" action={<ConsoleFillButton project={project} form="apple-app-record" primary />}>
           <div className="stack" style={{ gap: 2 }}><b>{t('cf.noRecordTitle')}</b><span className="small">{t('cf.noRecordText')}</span></div>
         </Notice>
       )}
-      <div className="grid g2" style={{ alignItems: 'start' }}>
-        {d.stores.play ? <DataSafety project={project} d={d} onDone={r.refresh} /> : <Card title={t('ai.dsTitle')} icon="shield" pad={false}><Empty compact illo="shield" title={t('ai.noPlay')}>{t('ai.noPlayText')}</Empty></Card>}
-        {d.stores.apple ? <AppPrivacy project={project} d={d} appId={e?.app?.platforms.ios?.ascAppId} /> : <Card title={t('ai.apTitle')} icon="lock" pad={false}><Empty compact illo="shield" title={t('ai.noApple')}>{t('ai.noAppleText')}</Empty></Card>}
+      <div className="ai-two">
+        {d.stores.play ? <DataSafety project={project} d={d} onDone={r.refresh} /> : <Section title={t('ai.dsTitle')} icon="shield" pad={false}><EmptyState icon="shield"><b>{t('ai.noPlay')}</b><br />{t('ai.noPlayText')}</EmptyState></Section>}
+        {d.stores.apple ? <AppPrivacy project={project} d={d} appId={e?.app?.platforms.ios?.ascAppId} /> : <Section title={t('ai.apTitle')} icon="lock" pad={false}><EmptyState icon="shield"><b>{t('ai.noApple')}</b><br />{t('ai.noAppleText')}</EmptyState></Section>}
       </div>
       {d.stores.apple && (
-        <div className="grid g3" style={{ alignItems: 'start' }}>
-          <Card title={t('ai.infoTitle')} icon="clipboard" sub={t('ai.infoSub')}
+        <div className="ai-three">
+          <Section title={t('ai.infoTitle')} icon="clipboard" sub={t('ai.infoSub')}
             actions={<>
               <WriteButton run={w} icon="upload" w={{ method: 'apple.appinfo', args: {}, title: t('ai.infoPush'), done: t('ai.pushed') }}>{t('ai.push')}</WriteButton>
               <ConsoleFillButton project={project} form="apple-age-rating" />
@@ -212,15 +232,15 @@ export function AppInfoTab({ project }: { project: Project }) {
               <dt>{t('ai.rights')}</dt><dd>{info!.contentRights ? <span className="small">{info!.contentRights === 'USES_THIRD_PARTY_CONTENT' ? t('ai.rightsThird') : t('ai.rightsOwn')}</span> : <Chip tone="warn" icon="question">{t('ai.notSet')}</Chip>}</dd>
               <dt>{t('ai.price')}</dt><dd>{info!.free ? t('ai.free') : t('ai.paid')}</dd>
             </dl>
-          </Card>
-          <Card title={t('ai.encTitle')} icon="lock" sub={t('ai.encSub')}
+          </Section>
+          <Section title={t('ai.encTitle')} icon="lock" sub={t('ai.encSub')}
             actions={<WriteButton run={w} icon="upload" disabled={enc === null} hint={enc === null ? t('ai.encUnsetHint') : undefined} w={{ method: 'apple.encryption', args: {}, title: t('ai.encPush'), done: t('ai.pushed') }}>{t('ai.encAnswer')}</WriteButton>}>
             <div className="stack" style={{ gap: 8 }}>
               {enc === null ? <Chip tone="warn" icon="question">{t('ai.notAnswered')}</Chip> : <Chip tone={enc ? 'info' : 'ok'}>{enc ? t('ai.encYes') : t('ai.encNo')}</Chip>}
               <span className="small muted">{enc === null ? t('ai.encUnset') : enc ? t('ai.encYesText') : t('ai.encNoText')}</span>
             </div>
-          </Card>
-          <Card title={t('ai.reviewTitle')} icon="users" sub={t('ai.reviewSub')}
+          </Section>
+          <Section title={t('ai.reviewTitle')} icon="users" sub={t('ai.reviewSub')}
             actions={<WriteButton run={w} icon="upload" w={{ method: 'apple.review_details', args: {}, title: t('ai.reviewPush'), done: t('ai.pushed') }}>{t('ai.push')}</WriteButton>}>
             <div className="stack" style={{ gap: 10 }}>
               <dl className="kv">
@@ -235,13 +255,13 @@ export function AppInfoTab({ project }: { project: Project }) {
               </div>
               <span className="small muted row" style={{ gap: 6 }}><Icon name="lock" className="ic13" />{t('ai.reviewSafe')}</span>
             </div>
-          </Card>
+          </Section>
         </div>
       )}
       <GameServicesCard project={project} />
       <ConsoleSteps project={project} stores={d.stores} />
 
-      <p className="small muted">{t('ai.foot', { when: ago(r.at) })}</p>
-    </>
+      <p className="ai-foot">{t('ai.foot', { when: ago(r.at) })}</p>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Art.tsx b/apps/desktop/src/screens/tabs/Art.tsx
index 66ff5b9..43517fc 100644
--- a/apps/desktop/src/screens/tabs/Art.tsx
+++ b/apps/desktop/src/screens/tabs/Art.tsx
@@ -2,6 +2,7 @@
 // size (`shots gallery --json`, offline), store check issues outlined. Images load one by one as they scroll into view
 // (`project.render`, a data: URL each: the window loads no files itself). Re-render (dry run, dialog, real run), write
 // the review page, open it or the folder.
+import '../../styles/art.css';
 import { type KeyboardEvent, useCallback, useEffect, useMemo, useRef, useState } from 'react';
 import { api, errorText, type Project, type RenderImage, type RendersResult, type RenderTile, type ToolResult } from '../../api';
 import { t } from '../../i18n';
@@ -9,7 +10,8 @@ import { ago, bytes, num } from '../../lib/format';
 import { artRows, langIssues } from '../../lib/views';
 import { useData, useRead, useWrite } from '../../store';
 import { Icon } from '../../ui/icons';
-import { Card, Chip, Empty, ErrorNotice, Kpi, Seg, Skeleton } from '../../ui/kit';
+import { Chip, Empty, ErrorNotice, Seg, Skeleton } from '../../ui/kit';
+import { Section, StatTile, StatusPill } from '../../ui/ds';
 import { WriteButton } from '../../ui/WriteButton';
 import { LiveArt } from './LiveArt';
 
@@ -57,11 +59,13 @@ function Thumb({ projectId, tile, stamp, onOpen }: { projectId: string; tile: Re
     return () => { alive = false; io.disconnect(); };
   }, [projectId, file, stamp, src]);
   const lvl = tile.issues.some(i => i.level === 'error') ? 'err' : tile.issues.length ? 'warn' : '';
+  const shape = tile.h > tile.w ? 'portrait' : 'landscape';
   return (
-    <figure className={`art-tile ${lvl}`} style={{ ['--ar' as string]: `${tile.w} / ${tile.h}` }}>
+    <figure className={`art-tile ${lvl} ${shape}`} style={{ ['--ar' as string]: `${tile.w} / ${tile.h}` }}>
       <button ref={ref} className="art-pic" onClick={onOpen} aria-label={t('art.open', { name: tile.name })}>
         {src ? <img src={src} alt="" draggable={false} /> : src === null && file ? <span className="art-ph"><Icon name="image" />{t('art.tooBig')}</span> : <span className="art-ph">{tile.kind === 'video' ? <Icon name="play" /> : <span className="sk sk-block" />}</span>}
         {tile.kind === 'video' && <span className="art-play"><Icon name="play" /></span>}
+        {lvl && <span className={`art-badge ${lvl}`} title={tile.issues.map(i => i.msg).join('\n')}><Icon name={lvl === 'err' ? 'alertCircle' : 'alert'} />{tile.issues.length}</span>}
       </button>
       <figcaption><span className="mono-id">{tile.name}</span><span className="muted">{tile.w}×{tile.h}{tile.bytes ? ` · ${bytes(tile.bytes)}` : ''}</span></figcaption>
       {tile.issues.length > 0 && <ul className="note-list art-issues">{tile.issues.slice(0, 2).map((i, k) => <li key={k} className={i.level}>{i.msg}</li>)}</ul>}
@@ -125,7 +129,7 @@ export function ArtTab({ project }: { project: Project }) {
   }, [project.id, d, w, data?.dir, r.refresh]);
 
   // the live art stays the first child in both branches, so it keeps its state when the local renders arrive
-  if (!data) return <><LiveArt target={project.id} project={project} />{r.error ? <ErrorNotice error={r.error} tone="bad" /> : <Card><Skeleton lines={6} block /></Card>}</>;
+  if (!data) return <div className="scr-art"><LiveArt target={project.id} project={project} />{r.error ? <ErrorNotice error={r.error} tone="bad" /> : <Section><Skeleton lines={6} block /></Section>}</div>;
   const total = data.totals.images + data.totals.videos;
   const toolbar = (
     <>
@@ -136,15 +140,15 @@ export function ArtTab({ project }: { project: Project }) {
     </>
   );
   return (
-    <>
+    <div className="scr-art">
       <LiveArt target={project.id} project={project} />
-      <div className="kpis" style={{ gridTemplateColumns: 'repeat(4, minmax(0, 1fr))' }}>
-        <Kpi icon="image" label={t('art.images')} value={num(data.totals.images)} sub={t('art.imagesSub', { count: langs.length })} />
-        <Kpi icon="play" label={t('art.videos')} value={num(data.totals.videos)} sub={t('art.videosSub')} />
-        <Kpi icon="alertCircle" label={t('art.errors')} value={num(data.totals.errors)} sub={t('art.errorsSub')} tone={data.totals.errors ? 'bad' : undefined} />
-        <Kpi icon="alert" label={t('art.warnings')} value={num(data.totals.warnings)} sub={t('art.rendered', { when: data.generated })} tone={data.totals.warnings ? 'warn' : undefined} />
+      <div className="ds-grid art-stats">
+        <StatTile icon="image" label={t('art.images')} value={num(data.totals.images)} sub={t('art.imagesSub', { count: langs.length })} />
+        <StatTile icon="play" label={t('art.videos')} value={num(data.totals.videos)} sub={t('art.videosSub')} />
+        <StatTile icon="alertCircle" label={t('art.errors')} value={num(data.totals.errors)} sub={t('art.errorsSub')} tone={data.totals.errors ? 'bad' : undefined} />
+        <StatTile icon="alert" label={t('art.warnings')} value={num(data.totals.warnings)} sub={t('art.rendered', { when: data.generated })} tone={data.totals.warnings ? 'warn' : undefined} />
       </div>
-      <Card title={t('art.title')} icon="grid" sub={<span className="mono-id">{dir}</span>} actions={toolbar} pad={false}>
+      <Section title={t('art.title')} icon="grid" sub={<span className="mono-id">{dir}</span>} actions={toolbar} pad={false}>
         <div className="card-body art-bar">
           {data.variants.length > 1 && <Seg value={v?.id ?? ''} onChange={setVariant} label={t('art.variant')} options={data.variants.map(x => [x.id, x.id ? t('gr.variant', { id: x.id }) : t('art.base')] as [string, string])} />}
           <div className="fchips" role="group" aria-label={t('col.language')}>
@@ -163,9 +167,9 @@ export function ArtTab({ project }: { project: Project }) {
           <div className="art-rows">
             {rows.map(row => (
               <section className={`art-row${row.issues.some(i => i.level === 'error') ? ' bad' : ''}`} key={row.size}>
-                <h3><span>{row.label}</span><code>{lg}/{row.size}</code><Chip tone="outline" dot={false}>{row.store === 'apple' ? 'App Store' : 'Google Play'}</Chip><span className="muted small">{t('art.count', { count: row.tiles.length })}</span></h3>
+                <h3><span>{row.label}</span><code>{lg}/{row.size}</code><Chip tone="outline" dot={false}>{row.store === 'apple' ? 'App Store' : 'Google Play'}</Chip>{row.issues.length > 0 && <StatusPill tone={row.issues.some(i => i.level === 'error') ? 'bad' : 'warn'}>{t('v2lst.issues', { count: row.issues.length })}</StatusPill>}<span className="muted small">{t('art.count', { count: row.tiles.length })}</span></h3>
                 {row.issues.length > 0 && <ul className="note-list art-issues">{row.issues.map((i, k) => <li key={k} className={i.level}>{i.msg}</li>)}</ul>}
-                <div className="art-tiles" style={{ ['--tw' as string]: row.size === 'feature' || /landscape/.test(row.size) ? '300px' : row.tiles[0] && row.tiles[0].w > row.tiles[0].h ? '260px' : '150px' }}>
+                <div className="art-tiles" style={{ ['--tw' as string]: row.size === 'feature' || /landscape/.test(row.size) ? '300px' : row.tiles[0] && row.tiles[0].w > row.tiles[0].h ? '260px' : '170px' }}>
                   {row.tiles.map((tile, i) => <Thumb key={tile.src} projectId={project.id} tile={tile} stamp={stamp} onOpen={() => setOpen({ tiles: row.tiles, i })} />)}
                 </div>
               </section>
@@ -173,8 +177,8 @@ export function ArtTab({ project }: { project: Project }) {
           </div>
         )}
         <div className="card-foot"><Icon name="info" />{t('art.foot', { when: ago(r.at) })}</div>
-      </Card>
+      </Section>
       {open && <Lightbox projectId={project.id} tiles={open.tiles} index={open.i} stamp={stamp} onClose={() => setOpen(null)} onMove={i => setOpen(o => (o ? { ...o, i } : o))} onReplace={tile => { setOpen(null); replace(tile); }} />}
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Catalog.tsx b/apps/desktop/src/screens/tabs/Catalog.tsx
index 7dedd9d..290d34a 100644
--- a/apps/desktop/src/screens/tabs/Catalog.tsx
+++ b/apps/desktop/src/screens/tabs/Catalog.tsx
@@ -1,5 +1,6 @@
 // Catalog: products and subscriptions defined once in the config against both stores (catalog diff): a parity
 // matrix (present, mismatched, missing, not sold there, not read), and price gaps between the stores per region.
+import '../../styles/catalog.css';
 import type { Project } from '../../api';
 import { type Key, t } from '../../i18n';
 import { ago, num } from '../../lib/format';
@@ -8,17 +9,19 @@ import { useData, useRead, useWrite } from '../../store';
 import { Icon, type IconName, StoreGlyph } from '../../ui/icons';
 import { OwnerAction } from '../../ui/OwnerAction';
 import { WriteButton } from '../../ui/WriteButton';
-import { Card, Chip, Empty, ErrorNotice, Kpi, ReadControl, Skeleton } from '../../ui/kit';
+import { Chip, ErrorNotice, ReadControl, Skeleton } from '../../ui/kit';
+import { EmptyState, Section, StatTile, StatusPill } from '../../ui/ds';
 import { catalogMd, exportName } from '../../lib/exports';
 import { useExports } from '../../ui/Exports';
 import { useNav } from '../../nav';
 
 const CELL: Record<CellState, [IconName, Key]> = { ok: ['check', 'cat.ok'], warn: ['alert', 'cat.warn'], error: ['x', 'cat.error'], na: ['dot', 'cat.na'], unknown: ['info', 'cat.unknown'] };
 
-function Cell({ c }: { c: { state: CellState; notes: string[] } }) {
+function Cell({ c, store }: { c: { state: CellState; notes: string[] }; store?: 'ios' | 'android' }) {
   const [icon, key] = CELL[c.state];
   return (
-    <div>
+    <div className={`cat-store s-${c.state}`}>
+      {store && <span className="cat-store-l"><StoreGlyph store={store} />{store === 'ios' ? 'App Store' : 'Google Play'}</span>}
       <span className="mx-cell"><span className={`mx-icon mx-${c.state}`}><Icon name={icon} /></span>{t(key)}</span>
       {c.notes.length > 0 && <ul className="note-list">{c.notes.slice(0, 3).map((n, i) => <li key={i}>{n}</li>)}</ul>}
     </div>
@@ -33,7 +36,7 @@ function CatalogActions({ project, products, subs, refresh }: { project: Project
   const e = d.statusOf(project);
   const ios = !!e?.app?.platforms.ios, android = !!e?.app?.platforms.android;
   return (
-    <Card title={t('act.catalogTitle')} icon="upload" sub={t('act.catalogSub')}>
+    <Section title={t('act.catalogTitle')} icon="upload" sub={t('act.catalogSub')}>
       <div className="act-grid">
         {android && (
           <div className="act-col">
@@ -60,7 +63,7 @@ function CatalogActions({ project, products, subs, refresh }: { project: Project
         </div>
       </div>
       <p className="small muted act-note"><Icon name="shield" />{t('act.catalogNote')}</p>
-    </Card>
+    </Section>
   );
 }
 
@@ -73,48 +76,54 @@ export function CatalogTab({ project }: { project: Project }) {
   useExports('catalog', [
     { id: 'catalog-md', label: t('export.catalog'), icon: 'layers', kind: 'md', file: exportName(name, 'catalog parity'), disabled: diff.data ? false : t('export.readFirst'), build: () => catalogMd(name, diff.data!) },
   ]);
-  if (!e) return <Card><Skeleton lines={5} block /></Card>;
+  if (!e) return <div className="scr-catalog"><Section><Skeleton lines={5} block /></Section></div>;
   const rows = parityMatrix(s, diff.data);
   const read = !!diff.data;
   const inParity = rows.filter(r => r.ios.state !== 'error' && r.ios.state !== 'warn' && r.android.state !== 'error' && r.android.state !== 'warn' && r.kind !== 'extra').length;
   const gaps = diff.data?.parity ?? [];
 
   if (!rows.length) {
-    return <Card pad={false}><Empty illo="catalog" title={t('cat.emptyTitle')}>{t('cat.emptyText')}</Empty></Card>;
+    return <div className="scr-catalog"><Section><EmptyState icon="tag"><b>{t('cat.emptyTitle')}</b> {t('cat.emptyText')}</EmptyState></Section></div>;
   }
   return (
-    <>
-      <div className="kpis" style={{ gridTemplateColumns: 'repeat(4, minmax(0, 1fr))' }}>
-        <Kpi icon="tag" label={t('cat.products')} value={s?.products ?? 0} sub={t('cat.productsSub')} />
-        <Kpi icon="refresh" label={t('cat.subscriptions')} value={s?.subscriptions ?? 0} sub={t('cat.subsSub')} />
-        <Kpi icon="check" label={t('cat.parity')} value={read ? `${inParity}/${rows.filter(r => r.kind !== 'extra').length}` : '–'} sub={read ? t('cat.parityRead', { when: ago(diff.at) }) : diff.loading ? t('read.waiting') : t('kpi.notRead')} tone={read && inParity < rows.length ? 'warn' : undefined} />
-        <Kpi icon="globe" label={t('cat.gaps')} value={read ? gaps.length : '–'} sub={read ? t('cat.gapsSub') : diff.loading ? t('read.waiting') : t('kpi.notRead')} />
+    <div className="scr-catalog">
+      <div className="ds-grid cat-stats">
+        <StatTile icon="tag" label={t('cat.products')} value={s?.products ?? 0} sub={t('cat.productsSub')} />
+        <StatTile icon="refresh" label={t('cat.subscriptions')} value={s?.subscriptions ?? 0} sub={t('cat.subsSub')} />
+        <StatTile icon="check" label={t('cat.parity')} value={read ? `${inParity}/${rows.filter(r => r.kind !== 'extra').length}` : '–'} sub={read ? t('cat.parityRead', { when: ago(diff.at) }) : diff.loading ? t('read.waiting') : t('kpi.notRead')} tone={read && inParity < rows.length ? 'warn' : undefined} />
+        <StatTile icon="globe" label={t('cat.gaps')} value={read ? gaps.length : '–'} sub={read ? t('cat.gapsSub') : diff.loading ? t('read.waiting') : t('kpi.notRead')} />
       </div>
       {diff.error && <ErrorNotice error={diff.error} keep />}
       <CatalogActions project={project} products={s?.products ?? 0} subs={s?.subscriptions ?? 0} refresh={() => { diff.refresh(); }} />
-      <Card title={t('cat.matrix')} icon="layers" sub={read ? (diff.fromCache ? t('common.cachedFrom', { when: ago(diff.at) }) : t('common.readWhen', { when: ago(diff.at) })) : t('cat.configOnly')} pad={false}
+      <Section title={t('cat.matrix')} icon="layers" sub={read ? (diff.fromCache ? t('common.cachedFrom', { when: ago(diff.at) }) : t('common.readWhen', { when: ago(diff.at) })) : t('cat.configOnly')}
         actions={<ReadControl r={diff} label={t('cat.compare')} />}>
-        <div className="table-wrap">
-          <table className="table">
-            <thead><tr><th>{t('col.item')}</th><th>{t('col.type')}</th><th>{t('col.config')}</th><th>App Store</th><th>Google Play</th><th className="right">{t('col.priceGap')}</th></tr></thead>
-            <tbody>
-              {rows.map(r => (
-                <tr key={r.id}>
-                  <td><span className="mono-id strong">{r.id}</span></td>
-                  <td>{r.kind === 'extra' ? <Chip tone="warn">{t('cat.extra')}</Chip> : <Chip tone="outline">{r.kind === 'subscription' ? t('cat.sub') : t('cat.product')}</Chip>}</td>
-                  <td className="small">{r.config ? [s?.catalog.ios.includes(r.id) ? 'iOS' : null, s?.catalog.android.includes(r.id) ? 'Android' : null].filter(Boolean).join(' + ') || t('cat.na') : <span className="muted">{t('cat.notInConfig')}</span>}</td>
-                  <td><Cell c={r.ios} /></td>
-                  <td><Cell c={r.android} /></td>
-                  <td className="right">{r.maxDiff !== null ? <Chip tone={r.maxDiff > 25 ? 'bad' : 'warn'}>{`${num(r.maxDiff, 1)} %`}</Chip> : <span className="muted small">{read ? t('cat.noGap') : '–'}</span>}</td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        </div>
-      </Card>
+        <ul className="cat-cards" aria-label={t('cat.matrix')}>
+          {rows.map(r => {
+            const worst = [r.ios.state, r.android.state].includes('error') ? 'bad' : [r.ios.state, r.android.state].includes('warn') || r.kind === 'extra' ? 'warn' : 'ok';
+            return (
+              <li key={r.id} className={`cat-card t-${worst}`} data-item={r.id}>
+                <div className="cat-card-h">
+                  <span className="cat-ic" aria-hidden="true"><Icon name={r.kind === 'subscription' ? 'refresh' : 'tag'} /></span>
+                  <div className="cat-names">
+                    <span className="mono-id strong cat-id">{r.id}</span>
+                    <span className="cat-type">{r.kind === 'extra' ? <Chip tone="warn">{t('cat.extra')}</Chip> : <Chip tone="outline">{r.kind === 'subscription' ? t('cat.sub') : t('cat.product')}</Chip>}
+                      <span className="small muted">{t('col.config')}: {r.config ? [s?.catalog.ios.includes(r.id) ? 'iOS' : null, s?.catalog.android.includes(r.id) ? 'Android' : null].filter(Boolean).join(' + ') || t('cat.na') : t('cat.notInConfig')}</span></span>
+                  </div>
+                  <span className="grow" />
+                  {r.maxDiff !== null ? <StatusPill tone={r.maxDiff > 25 ? 'bad' : 'warn'} title={t('col.priceGap')}>{`Δ ${num(r.maxDiff, 1)} %`}</StatusPill> : <span className="muted small" title={t('col.priceGap')}>{read ? t('cat.noGap') : '–'}</span>}
+                </div>
+                <div className="cat-stores">
+                  <Cell c={r.ios} store="ios" />
+                  <Cell c={r.android} store="android" />
+                </div>
+              </li>
+            );
+          })}
+        </ul>
+      </Section>
       {gaps.length > 0 && (
-        <Card title={t('cat.gapsTitle')} icon="globe" sub={t('cat.gapsTitleSub')} pad={false}>
-          <table className="table">
+        <Section title={t('cat.gapsTitle')} icon="globe" sub={t('cat.gapsTitleSub')}>
+          <div className="ds-table-wrap"><table className="table v2">
             <thead><tr><th>{t('col.item')}</th><th>{t('col.region')}</th><th className="right">App Store</th><th className="right">Google Play</th><th className="right">{t('col.diff')}</th></tr></thead>
             <tbody>
               {gaps.slice(0, 12).map((g, i) => (
@@ -125,9 +134,9 @@ export function CatalogTab({ project }: { project: Project }) {
                 </tr>
               ))}
             </tbody>
-          </table>
-        </Card>
+          </table></div>
+        </Section>
       )}
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Checks.tsx b/apps/desktop/src/screens/tabs/Checks.tsx
index 1752997..6dc0ad1 100644
--- a/apps/desktop/src/screens/tabs/Checks.tsx
+++ b/apps/desktop/src/screens/tabs/Checks.tsx
@@ -10,10 +10,12 @@ import { AiFix, aiFinding } from '../../ui/AiFix';
 import { api, errorText, newJob } from '../../api';
 import type { ToolResult } from '../../api';
 import type { ReportData } from '../../../../../cli/lib/report';
-import { useEffect, useState } from 'react';
-import { Icon } from '../../ui/icons';
+import { type ReactNode, useEffect, useState } from 'react';
+import { Icon, type IconName, StoreGlyph } from '../../ui/icons';
 import { OpenLink } from '../../ui/OpenLink';
-import { Card, Chip, Empty, ErrorNotice, ReadControl, Skeleton } from '../../ui/kit';
+import { Bar, ErrorNotice, ReadControl, Skeleton } from '../../ui/kit';
+import { EmptyState, Section, StatusPill } from '../../ui/ds';
+import '../../styles/checks.css';
 import { exportName, validateMd } from '../../lib/exports';
 import { useExports } from '../../ui/Exports';
 
@@ -35,8 +37,27 @@ function FixButton({ action, what, w }: { action: FixAction; what: string; w: Re
 }
 
 const SEV: Record<ScanSeverity, ['bad' | 'warn' | 'info', 'alertCircle' | 'alert' | 'info']> = { blocker: ['bad', 'alertCircle'], high: ['bad', 'alert'], medium: ['warn', 'alert'], low: ['info', 'info'] };
+const SEV_ORDER: ScanSeverity[] = ['blocker', 'high', 'medium', 'low'];
 
-/** The `storebound scan` card: rejection risks with guideline, evidence file:line, fix and skill. */
+/** One check as a card: tone icon tile, title, detail lines, the fix, and its actions on the right. */
+function CheckCard({ tone, icon, title, children, actions, tags }: { tone: 'bad' | 'warn' | 'ok' | 'info'; icon: IconName; title: ReactNode; children?: ReactNode; actions?: ReactNode; tags?: ReactNode }) {
+  return (
+    <div className={`ck-card tone-${tone}`}>
+      <span className={`ck-ic tone-bg-${tone}`}><Icon name={icon} /></span>
+      <div className="ck-main">
+        <div className="ck-title">{title}</div>
+        {children}
+      </div>
+      <div className="ck-side">
+        {tags && <div className="ck-tags">{tags}</div>}
+        {actions && <div className="ck-acts">{actions}</div>}
+      </div>
+    </div>
+  );
+}
+
+/** The `storebound scan` section: rejection risks with guideline, evidence file:line, fix and skill; open risks first,
+ *  accepted ones collapsed. */
 function ScanCard({ project }: { project: Project }) {
   const s = useRead<ScanResult>(project.id, 'scan', { network: false, title: t('checks.scan') });
   const w = useWrite(project.id);
@@ -57,43 +78,49 @@ function ScanCard({ project }: { project: Project }) {
   }, [project.id, firstAi, claude]);
   const sdks = Array.isArray(s.data?.sdks) ? s.data!.sdks : [];
   const asks = (Array.isArray(s.data?.declarations?.items) ? s.data!.declarations.items : []).filter(x => x.status === 'ask').length;
+  const keyed = rows.map(f => ({ f, k: keyOf(f) }));
+  const open = keyed.filter(x => !x.f.accepted).sort((a, b) => SEV_ORDER.indexOf(a.f.severity) - SEV_ORDER.indexOf(b.f.severity));
+  const accepted = keyed.filter(x => !!x.f.accepted);
+  const card = ({ f, k }: { f: ScanFinding; k: string }) => {
+    const [tone, icon] = f.accepted ? ['ok', 'check'] as const : SEV[f.severity] ?? SEV.low;
+    const ev = Array.isArray(f.evidence) ? f.evidence : [];
+    return (
+      <CheckCard key={k} tone={tone} icon={icon} title={<><span className="ck-gl">{f.guideline}</span>{f.title}</>}
+        tags={<><StatusPill tone={f.accepted ? 'ok' : tone}>{t(f.accepted ? 'checks.sev.accepted' : `checks.sev.${f.severity}` as Parameters<typeof t>[0])}</StatusPill><span className="ck-store"><StoreGlyph store={f.store === 'apple' ? 'ios' : 'android'} className="ic13" />{f.store === 'apple' ? 'App Store' : 'Google Play'}</span></>}
+        actions={<>{!f.accepted && <OpenLink url={f.url} />}{!f.accepted && fixable(f.action) && <FixButton action={f.action} what={f.title} w={w} />}</>}>
+        {ev.slice(0, 2).map((e, j) => <span className="ck-sub selectable" key={j}><code>{e.file}:{e.line}</code>{e.text ? ` ${e.text}` : ''}</span>)}
+        {f.accepted ? <span className="ck-sub">{t('checks.accepted', { reason: f.accepted })}</span>
+          : <span className="ck-fix"><Icon name="wand" /><span className="selectable">{f.fix} <code>{f.skill}</code></span></span>}
+        {!f.accepted && f.aiFix && !fixable(f.action) && <div className="ck-ai"><AiFix projectId={project.id} f={f} claude={claude} busy={aiBusy} setBusy={setAiBusy} rescan={() => { s.refresh(); }}
+          stillThere={findings.some(x => same(x, f))} onActive={on => setAiActive(on ? f : null)} /></div>}
+      </CheckCard>
+    );
+  };
   return (
-    <Card title={t('checks.scan')} icon="search" sub={s.data && sdks.length ? t('checks.scanSdks', { list: sdks.map(x => x.name).join(', ') }) : t('checks.scanSub')} pad={false}
+    <Section title={t('checks.scan')} icon="search" sub={s.data && sdks.length ? t('checks.scanSdks', { list: sdks.map(x => x.name).join(', ') }) : t('checks.scanSub')}
       actions={<ReadControl r={s} label={t('checks.scanAgain')} />}>
-      {s.error && <div className="card-body"><ErrorNotice error={s.error} keep={!!s.data} /></div>}
-      {!s.data ? (s.loading && !s.error ? <div className="card-body"><Skeleton lines={4} /></div> : null)
-        : !rows.length ? <Empty compact illo="shield" title={t('checks.scanClean')}>{t('checks.scanCleanText')}</Empty> : (
-          <div className="list">
-            {rows.map(f => {
-              const [tone, icon] = f.accepted ? ['ok', 'check'] as const : SEV[f.severity] ?? SEV.low;
-              const ev = Array.isArray(f.evidence) ? f.evidence : [];
-              return (
-                <div className="li" key={keyOf(f)}>
-                  <span className={`li-icon tone-bg-${tone}`}><Icon name={icon} /></span>
-                  <div className="li-main">
-                    <span className="li-title">{f.guideline} · {f.title}</span>
-                    {ev.slice(0, 2).map((e, j) => <span className="li-sub selectable" key={j}><code>{e.file}:{e.line}</code>{e.text ? ` ${e.text}` : ''}</span>)}
-                    {f.accepted ? <span className="li-sub">{t('checks.accepted', { reason: f.accepted })}</span>
-                      : <span className="fix"><Icon name="wand" /><span className="selectable">{f.fix} <code>{f.skill}</code></span></span>}
-                    {!f.accepted && <OpenLink url={f.url} />}
-                    {!f.accepted && f.aiFix && !fixable(f.action) && <AiFix projectId={project.id} f={f} claude={claude} busy={aiBusy} setBusy={setAiBusy} rescan={() => { s.refresh(); }}
-                      stillThere={findings.some(x => same(x, f))} onActive={on => setAiActive(on ? f : null)} />}
-                  </div>
-                  {!f.accepted && fixable(f.action) && <FixButton action={f.action} what={f.title} w={w} />}
-                  <Chip tone={f.accepted ? 'ok' : tone}>{t(f.accepted ? 'checks.sev.accepted' : `checks.sev.${f.severity}` as Parameters<typeof t>[0])}</Chip>
-                  <Chip tone="outline">{f.store === 'apple' ? 'App Store' : 'Google Play'}</Chip>
-                </div>
-              );
-            })}
+      <div className="ck-list">
+        {s.error && <ErrorNotice error={s.error} keep={!!s.data} />}
+        {!s.data ? (s.loading && !s.error ? <Skeleton lines={4} /> : null)
+          : !rows.length ? <EmptyState icon="shield" tone="ok"><b>{t('checks.scanClean')}</b><br />{t('checks.scanCleanText')}</EmptyState> : (
+            <>
+              {open.map(card)}
+              {accepted.length > 0 && (
+                <details className="ck-passed">
+                  <summary><Icon name="check" />{t('v2ins.cAccepted', { count: accepted.length })}</summary>
+                  <div className="ck-list">{accepted.map(card)}</div>
+                </details>
+              )}
+            </>
+          )}
+        {s.data && (asks > 0 || s.data.declarations?.changed) && (
+          <div className="ck-notes">
+            {asks > 0 && <div className="ck-sub">{t('checks.scanAsk', { count: asks })}</div>}
+            {s.data.declarations?.changed && <div className="ck-sub"><code className="selectable">{t('checks.scanWrite')}</code></div>}
           </div>
         )}
-      {s.data && (asks > 0 || s.data.declarations?.changed) && (
-        <div className="card-body">
-          {asks > 0 && <div className="li-sub">{t('checks.scanAsk', { count: asks })}</div>}
-          {s.data.declarations?.changed && <div className="li-sub"><code className="selectable">{t('checks.scanWrite')}</code></div>}
-        </div>
-      )}
-    </Card>
+      </div>
+    </Section>
   );
 }
 
@@ -114,10 +141,10 @@ function ReportBar({ project }: { project: Project }) {
     finally { setBusy(false); }
   };
   return (
-    <Card title={t('checks.report')} icon="external" sub={last ? reportSummary(last) : t('checks.reportSub')}
-      actions={<button className="btn btn-sm btn-primary" onClick={run} disabled={busy}><Icon name={busy ? 'refresh' : 'external'} className={busy ? 'spin' : undefined} />{t('checks.reportOpen')}</button>}>
-      {null}
-    </Card>
+    <div className="ck-report">
+      <span className="ck-report-t"><b>{t('checks.report')}</b><span>{last ? reportSummary(last) : t('checks.reportSub')}</span></span>
+      <button className="btn btn-sm" onClick={run} disabled={busy}><Icon name={busy ? 'refresh' : 'external'} className={busy ? 'spin' : undefined} />{t('checks.reportOpen')}</button>
+    </div>
   );
 }
 
@@ -143,46 +170,77 @@ export function ChecksTab({ project }: { project: Project }) {
   const problems = [...(e?.errors ?? []), ...(e?.check?.problems ?? [])];
   const warnings = e?.check?.warnings ?? [];
   const findings = [...(v.data?.findings ?? [])].sort((a, b) => ['blocker', 'warn', 'ok'].indexOf(a.level) - ['blocker', 'warn', 'ok'].indexOf(b.level));
+  const vBlock = findings.filter(f => f.level === 'blocker'), vWarn = findings.filter(f => f.level === 'warn'), vOk = findings.filter(f => f.level === 'ok');
+  const blockers = problems.length + vBlock.length;
+  const warns = warnings.length + vWarn.length;
+  const total = findings.length + problems.length + warnings.length;
+  const passed = vOk.length;
+  const checked = !!v.data && !!e;
+  const state: 'bad' | 'warn' | 'ok' | 'neutral' = blockers ? 'bad' : !checked ? 'neutral' : warns ? 'warn' : 'ok';
+  const headline = blockers ? t('v2ins.cBlocked', { count: blockers }) : !checked ? t('v2ins.cNotRun') : t('v2ins.cReady');
+  const finding = (f: Finding, i: number) => {
+    const [tone, icon] = LEVEL[f.level];
+    return (
+      <CheckCard key={`${f.level}${i}`} tone={tone} icon={icon} title={f.msg}
+        tags={<span className="ck-store"><StoreGlyph store={f.store === 'apple' ? 'ios' : 'android'} className="ic13" />{f.store === 'apple' ? 'App Store' : 'Google Play'}</span>}
+        actions={<><OpenLink url={f.url} />{f.level !== 'ok' && fixable(f.action) && <FixButton action={f.action} what={f.msg} w={w} />}</>}>
+        {f.fix && <span className="ck-fix"><Icon name="wand" /><code className="selectable">{f.fix}</code></span>}
+      </CheckCard>
+    );
+  };
   return (
-    <div className="grid g2" style={{ alignItems: 'start' }}>
-      <div style={{ gridColumn: '1 / -1' }}><ReportBar project={project} /></div>
-      <div style={{ gridColumn: '1 / -1' }}><ScanCard project={project} /></div>
-      <Card title={t('checks.offline')} icon="shield" sub={t('checks.offlineSub')} pad={false}
-        actions={<button className="btn btn-sm" onClick={() => d.refreshPortfolio(false)} disabled={!!d.portfolioBusy}><Icon name="refresh" className={d.portfolioBusy === 'offline' ? 'spin' : undefined} />{t('checks.again')}</button>}>
-        {!e ? <div className="card-body"><Skeleton lines={4} /></div> : !problems.length && !warnings.length ? (
-          <Empty compact illo="shield" title={t('checks.clean')}>{t('checks.cleanText')}</Empty>
-        ) : (
-          <div className="list">
-            {problems.map((p, i) => <div className="li" key={`p${i}`}><span className="li-icon tone-bg-bad"><Icon name="alertCircle" /></span><div className="li-main"><span className="li-title">{p}</span><span className="li-sub">{t('checks.problem')}</span></div></div>)}
-            {warnings.map((w, i) => <div className="li" key={`w${i}`}><span className="li-icon tone-bg-warn"><Icon name="alert" /></span><div className="li-main"><span className="li-title">{w}</span><span className="li-sub">{t('checks.warning')}</span></div></div>)}
+    <div className="scr-checks">
+      <section className={`ck-hero tone-${state}`} aria-label={t('v2ins.cScore')}>
+        <div className="ck-score">
+          <span className={`ck-score-ic tone-bg-${state === 'neutral' ? 'info' : state}`}><Icon name={blockers ? 'alertCircle' : !checked ? 'shield' : warns ? 'alert' : 'check'} weight="fill" /></span>
+          <div className="ck-score-t">
+            <span className="ds-eyebrow">{t('v2ins.cScore')}</span>
+            <h2>{headline}</h2>
+            <p>{v.data ? t('v2ins.cScoreSub', { ok: passed, total }) : t('checks.validateSub')}{v.data ? ` · ${v.fromCache ? t('common.cachedFrom', { when: ago(v.at) }) : t('common.readWhen', { when: ago(v.at) })}` : ''}</p>
+            {total > 0 && <Bar value={passed / total} tone={state === 'neutral' ? 'info' : state} label={t('v2ins.cScore')} />}
           </div>
-        )}
-      </Card>
-      <Card title={t('checks.validate')} icon="layers" sub={v.data ? (v.fromCache ? t('common.cachedFrom', { when: ago(v.at) }) : t('common.readWhen', { when: ago(v.at) })) : t('checks.validateSub')} pad={false}
-        actions={<ReadControl r={v} label={t('checks.run')} />}>
-        {v.error && <div className="card-body"><ErrorNotice error={v.error} keep={!!v.data} /></div>}
-        {!v.data ? (
-          v.loading && !v.error ? <div className="card-body"><Skeleton lines={4} /></div> : <Empty compact illo="cloud" title={t('checks.validateEmpty')}>{t('checks.validateEmptyText')}</Empty>
-        ) : !findings.length ? <Empty compact illo="shield" title={t('checks.ready')}>{t('checks.readyText')}</Empty> : (
-          <div className="list">
-            {findings.map((f, i) => {
-              const [tone, icon] = LEVEL[f.level];
-              return (
-                <div className="li" key={i}>
-                  <span className={`li-icon tone-bg-${tone}`}><Icon name={icon} /></span>
-                  <div className="li-main">
-                    <span className="li-title">{f.msg}</span>
-                    {f.fix && <span className="fix"><Icon name="wand" /><code className="selectable">{f.fix}</code></span>}
-                  </div>
-                  <OpenLink url={f.url} />
-                  {f.level !== 'ok' && fixable(f.action) && <FixButton action={f.action} what={f.msg} w={w} />}
-                  <Chip tone="outline">{f.store === 'apple' ? 'App Store' : 'Google Play'}</Chip>
-                </div>
-              );
-            })}
+        </div>
+        <div className="ck-counts">
+          <span className="ck-count bad"><b className="num">{blockers}</b>{t('v2ins.cBlockers')}</span>
+          <span className="ck-count warn"><b className="num">{warns}</b>{t('v2ins.cWarnings')}</span>
+          <span className="ck-count ok"><b className="num">{passed}</b>{t('v2ins.cPassedN')}</span>
+        </div>
+        <div className="ck-hero-acts">
+          <ReadControl r={v} label={t('checks.run')} />
+          <button className="btn btn-sm" onClick={() => d.refreshPortfolio(false)} disabled={!!d.portfolioBusy}><Icon name="refresh" className={d.portfolioBusy === 'offline' ? 'spin' : undefined} />{t('checks.again')}</button>
+        </div>
+      </section>
+      {v.error && <ErrorNotice error={v.error} keep={!!v.data} />}
+
+      <Section title={t('v2ins.cFixFirst')} icon="alertCircle" sub={`${t('checks.offline')} · ${t('checks.validate')}`}>
+        <div className="ck-list">
+          {!e ? <Skeleton lines={3} /> : null}
+          {problems.map((p, i) => <CheckCard key={`p${i}`} tone="bad" icon="alertCircle" title={p}><span className="ck-sub">{t('checks.problem')}</span></CheckCard>)}
+          {vBlock.map(finding)}
+          {!v.data && !v.error && (v.loading ? <Skeleton lines={3} /> : <EmptyState icon="cloud"><b>{t('checks.validateEmpty')}</b><br />{t('checks.validateEmptyText')}</EmptyState>)}
+          {e && v.data && !blockers && <EmptyState icon="shield" tone="ok"><b>{t('checks.ready')}</b><br />{t('checks.readyText')}</EmptyState>}
+        </div>
+      </Section>
+
+      <ScanCard project={project} />
+
+      {(warnings.length > 0 || vWarn.length > 0) && (
+        <Section title={t('v2ins.cWarnings')} icon="alert" sub={t('checks.offlineSub')}>
+          <div className="ck-list">
+            {warnings.map((x, i) => <CheckCard key={`w${i}`} tone="warn" icon="alert" title={x}><span className="ck-sub">{t('checks.warning')}</span></CheckCard>)}
+            {vWarn.map(finding)}
           </div>
-        )}
-      </Card>
+        </Section>
+      )}
+
+      {vOk.length > 0 && (
+        <details className="ck-passed ck-passed-top">
+          <summary><Icon name="check" />{t('v2ins.cPassed', { count: vOk.length })}</summary>
+          <div className="ck-list">{vOk.map(finding)}</div>
+        </details>
+      )}
+
+      <ReportBar project={project} />
     </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Growth.tsx b/apps/desktop/src/screens/tabs/Growth.tsx
index 7849f96..e4bbcc9 100644
--- a/apps/desktop/src/screens/tabs/Growth.tsx
+++ b/apps/desktop/src/screens/tabs/Growth.tsx
@@ -14,7 +14,9 @@ import { useNav } from '../../nav';
 import { useData, useRead, useWrite } from '../../store';
 import { useExports } from '../../ui/Exports';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Card, Chip, Empty, ErrorNotice, Kpi, Notice, ReadControl, Seg, Skeleton } from '../../ui/kit';
+import { ErrorNotice, Notice, ReadControl, Seg, Skeleton } from '../../ui/kit';
+import { EmptyState, Section, StatTile, StatusPill, tintStyle, useTint } from '../../ui/ds';
+import '../../styles/growth.css';
 import { LineChart } from '../../ui/LineChart';
 import { RankChart } from '../../ui/RankChart';
 import { WriteButton } from '../../ui/WriteButton';
@@ -43,21 +45,39 @@ function Analytics({ projectId, hasApple, hasPlay, name, playReports }: { projec
   );
   const sum = (xs: number[]) => xs.reduce((n, v) => n + v, 0);
   const reach = s ? sum(s.reach) : 0, inst = s ? sum(s.installs) : 0;
+  // deltas: the later half of the window against the earlier half (same number of days), in percent
+  const half = s ? Math.floor(s.dates.length / 2) : 0;
+  const change = (xs: number[]): number | null => {
+    if (half < 1) return null;
+    const before = sum(xs.slice(0, half)), after = sum(xs.slice(-half));
+    return before ? Math.round(((after - before) / before) * 1000) / 10 : null;
+  };
+  const convChange = (): number | null => {
+    if (!s || half < 1) return null;
+    const rb = sum(s.reach.slice(0, half)), ra = sum(s.reach.slice(-half));
+    if (!rb || !ra) return null;
+    const cb = sum(s.installs.slice(0, half)) / rb, ca = sum(s.installs.slice(-half)) / ra;
+    return Math.round((ca - cb) * 1000) / 10;
+  };
+  const deltaSub = half ? t('v2ins.gVsPrev', { count: half }) : t('gr.days', { count: s?.dates.length ?? 0 });
   const effects = (a?.effects ?? []).filter(e => e.store === st).slice(-8).reverse();
   return (
-    <Card title={t('gr.analytics')} icon="chart" sub={a ? t('gr.analyticsSub', { count: a.snapshots, since: date(a.since) }) : t('gr.analyticsSubNone')} pad={false}
+    <Section title={t('gr.analytics')} icon="chart" sub={a ? t('gr.analyticsSub', { count: a.snapshots, since: date(a.since) }) : t('gr.analyticsSubNone')}
       actions={<>{stores.length > 1 && <Seg value={st} onChange={setStore} label={t('col.store')} options={[['apple', 'App Store'], ['play', 'Google Play']]} />}{actions}</>}>
       {none ? (
-        <Empty illo="pulse" title={t('gr.noneTitle')}>{t('gr.noneText')}{hasPlay && !playReports ? ` ${t('gr.noBucket')}` : ''}</Empty>
-      ) : r.error ? <div className="card-body"><ErrorNotice error={r.error} /></div> : !a || !s ? <div className="card-body"><Skeleton lines={5} block /></div> : !s.dates.length ? (
-        <Empty illo="pulse" title={t('gr.noDataTitle', { store: st === 'apple' ? 'App Store' : 'Google Play' })}>{a.errors?.[st] ?? t('gr.noDataText')}{st === 'play' && !playReports ? ` ${t('gr.noBucket')}` : ''}</Empty>
+        <EmptyState icon="chart"><b>{t('gr.noneTitle')}</b><br />{t('gr.noneText')}{hasPlay && !playReports ? ` ${t('gr.noBucket')}` : ''}</EmptyState>
+      ) : r.error ? <ErrorNotice error={r.error} /> : !a || !s ? <Skeleton lines={5} block /> : !s.dates.length ? (
+        <EmptyState icon="chart"><b>{t('gr.noDataTitle', { store: st === 'apple' ? 'App Store' : 'Google Play' })}</b><br />{a.errors?.[st] ?? t('gr.noDataText')}{st === 'play' && !playReports ? ` ${t('gr.noBucket')}` : ''}</EmptyState>
       ) : (
-        <div className="card-body stack" style={{ gap: 16 }}>
-          <div className="kpis" style={{ gridTemplateColumns: 'repeat(3, minmax(0, 1fr))' }}>
-            <Kpi icon="eye" label={st === 'apple' ? t('gr.impressions') : t('gr.visitors')} value={num(reach)} sub={t('gr.days', { count: s.dates.length })} />
-            <Kpi icon="download" label={st === 'apple' ? t('gr.downloads') : t('gr.acquisitions')} value={num(inst)} sub={t('gr.days', { count: s.dates.length })} />
-            <Kpi icon="activity" label={t('gr.conversion')} value={reach ? pct(inst / reach, 1) : '–'} sub={t('gr.conversionSub')} />
+        <div className="gr-body">
+          <div className="gr-funnel" role="group" aria-label={t('v2ins.gFunnel')}>
+            <StatTile icon="eye" label={st === 'apple' ? t('gr.impressions') : t('gr.visitors')} value={num(reach)} delta={change(s.reach)} sub={deltaSub} />
+            <span className="gr-step" aria-hidden="true"><Icon name="arrowRight" /></span>
+            <StatTile icon="download" label={st === 'apple' ? t('gr.downloads') : t('gr.acquisitions')} value={num(inst)} delta={change(s.installs)} sub={deltaSub} />
+            <span className="gr-step" aria-hidden="true"><Icon name="arrowRight" /></span>
+            <StatTile icon="activity" label={t('gr.conversion')} value={reach ? pct(inst / reach, 1) : '–'} delta={convChange()} sub={half ? t('v2ins.gPts', { count: half }) : t('gr.conversionSub')} />
           </div>
+          <p className="gr-note">{t('gr.days', { count: s.dates.length })} · {t('gr.conversionSub')}</p>
           {s.dates.length > 1 ? (
             <LineChart dates={s.dates} label={t('gr.chartAria', { store: st === 'apple' ? 'App Store' : 'Google Play' })} eventsLabel={t('gr.changes', { count: s.events.length })} events={s.events}
               indexLabel={t('gr.indexLabel')}
@@ -68,7 +88,7 @@ function Analytics({ projectId, hasApple, hasPlay, name, playReports }: { projec
               ]} />
           ) : <Notice tone="info">{t('gr.oneDay')}</Notice>}
           {effects.length > 0 && (
-            <table className="table">
+            <div className="ds-table-wrap"><table className="table v2">
               <thead><tr><th>{t('gr.change')}</th><th>{t('col.date')}</th><th className="right">{t('gr.before')}</th><th className="right">{t('gr.after')}</th><th className="right">{t('col.diff')}</th></tr></thead>
               <tbody>
                 {effects.map((e, i) => {
@@ -79,17 +99,17 @@ function Analytics({ projectId, hasApple, hasPlay, name, playReports }: { projec
                       <td className="nowrap">{date(e.event.date)}</td>
                       <td className="right num">{pct(e.before.conversion ?? null, 1)}<div className="small muted">{t('gr.daysN', { count: e.daysBefore })}</div></td>
                       <td className="right num">{pct(e.after.conversion ?? null, 1)}<div className="small muted">{t('gr.daysN', { count: e.daysAfter })}</div></td>
-                      <td className="right">{dlt === null ? '–' : <Chip tone={dlt >= 0 ? 'ok' : 'warn'} dot={false}>{`${dlt >= 0 ? '+' : ''}${num(dlt, 1)} %`}</Chip>}</td>
+                      <td className="right">{dlt === null ? '–' : <StatusPill tone={dlt >= 0 ? 'ok' : 'warn'}>{`${dlt >= 0 ? '+' : ''}${num(dlt, 1)} %`}</StatusPill>}</td>
                     </tr>
                   );
                 })}
               </tbody>
-            </table>
+            </table></div>
           )}
-          <p className="small muted">{t('gr.reading')}</p>
+          <p className="gr-note">{t('gr.reading')}</p>
         </div>
       )}
-    </Card>
+    </Section>
   );
 }
 
@@ -106,20 +126,20 @@ function Aso({ projectId }: { projectId: string }) {
     ranks: a.ranks.series.find(s => s.storefront === row.storefront && s.keyword === row.keyword)?.ranks ?? [],
   })) : [];
   return (
-    <Card title={t('gr.aso')} icon="search" sub={a ? t('gr.asoSub', { date: date(a.generated) }) : t('gr.asoSubNone')} pad={false}
+    <Section title={t('gr.aso')} icon="search" sub={a ? t('gr.asoSub', { date: date(a.generated) }) : t('gr.asoSubNone')}
       actions={<ReadControl r={r} />}>
-      {r.error ? <div className="card-body"><ErrorNotice error={r.error} /></div> : !a ? <div className="card-body"><Skeleton lines={4} block /></div> : (
-        <div className="card-body stack" style={{ gap: 16 }}>
-          <div className="kpis" style={{ gridTemplateColumns: 'repeat(3, minmax(0, 1fr))' }}>
-            <Kpi icon="text" label={t('gr.asoField')} value={a.keywordField.errors ? t('gr.asoErrors', { count: a.keywordField.errors }) : t('gr.asoWarnings', { count: a.keywordField.warnings })}
+      {r.error ? <ErrorNotice error={r.error} /> : !a ? <Skeleton lines={4} block /> : (
+        <div className="gr-body">
+          <div className="gr-tiles">
+            <StatTile icon="text" label={t('gr.asoField')} value={a.keywordField.errors ? t('gr.asoErrors', { count: a.keywordField.errors }) : t('gr.asoWarnings', { count: a.keywordField.warnings })}
               tone={a.keywordField.errors ? 'bad' : a.keywordField.warnings ? 'warn' : 'ok'} sub={a.drafts.length ? t('gr.asoDrafts', { locales: a.drafts.join(', ') }) : t('gr.asoFieldSub')} />
-            <Kpi icon="activity" label={t('gr.asoRanked')} value={a.ranks.snapshots ? `${num(ranked.length)} / ${num(a.ranks.rows.length)}` : '–'}
+            <StatTile icon="activity" label={t('gr.asoRanked')} value={a.ranks.snapshots ? `${num(ranked.length)} / ${num(a.ranks.rows.length)}` : '–'}
               sub={a.ranks.latest ? t('gr.asoLatest', { date: date(a.ranks.latest) }) : t('gr.asoNoRanks')} />
-            <Kpi icon="search" label={t('gr.asoGaps')} value={a.competitors.date ? num(gaps) : '–'} sub={a.competitors.date ? t('gr.asoGapsSub', { date: date(a.competitors.date) }) : t('gr.asoNoCompetitors')} />
+            <StatTile icon="search" label={t('gr.asoGaps')} value={a.competitors.date ? num(gaps) : '–'} sub={a.competitors.date ? t('gr.asoGapsSub', { date: date(a.competitors.date) }) : t('gr.asoNoCompetitors')} />
           </div>
           {a.ranks.dates.length > 1 && lines.length > 0 && <RankChart dates={a.ranks.dates} lines={lines} label={t('gr.asoChartAria')} noRank={t('gr.asoNotRanked')} />}
           {a.ranks.rows.length > 0 && (
-            <table className="table">
+            <div className="ds-table-wrap"><table className="table v2">
               <thead><tr><th>{t('gr.asoKeyword')}</th><th>{t('col.store')}</th><th className="right">{t('gr.asoRank')}</th><th className="right">{t('col.diff')}</th><th className="right">{t('gr.asoBest')}</th></tr></thead>
               <tbody>
                 {a.ranks.rows.slice(0, 8).map(x => (
@@ -127,25 +147,25 @@ function Aso({ projectId }: { projectId: string }) {
                     <td className="strong">{x.keyword}</td>
                     <td className="mono-id">{x.storefront}</td>
                     <td className="right num">{x.rank === null ? '–' : `#${x.rank}`}</td>
-                    <td className="right"><Chip tone={arrowTone(x.arrow)} dot={false}>{x.change === null ? x.arrow : `${x.arrow} ${x.change > 0 ? '+' : ''}${x.change}`}</Chip></td>
+                    <td className="right"><StatusPill tone={arrowTone(x.arrow)}>{x.change === null ? x.arrow : `${x.arrow} ${x.change > 0 ? '+' : ''}${x.change}`}</StatusPill></td>
                     <td className="right num">{x.best === null ? '–' : `#${x.best}`}</td>
                   </tr>
                 ))}
               </tbody>
-            </table>
+            </table></div>
           )}
           {a.next.length > 0 && (
-            <div className="stack" style={{ gap: 6 }}>
-              <div className="act-head"><Icon name="check" />{t('gr.asoNext')}</div>
-              <ol className="small" style={{ margin: 0, paddingLeft: 18 }}>
-                {a.next.map((x, i) => <li key={i}><span className="strong">{x.what}</span><div className="muted">{x.why}{x.command ? <> · <code className="mono">{x.command}</code></> : null}</div></li>)}
+            <div className="gr-next">
+              <div className="gr-next-h"><Icon name="check" />{t('gr.asoNext')}</div>
+              <ol>
+                {a.next.map((x, i) => <li key={i}><span className="gr-next-n num">{i + 1}</span><span className="gr-next-t"><b>{x.what}</b><span>{x.why}{x.command ? <> · <code className="mono">{x.command}</code></> : null}</span></span></li>)}
               </ol>
             </div>
           )}
-          <p className="small muted">{t('gr.asoReading')}</p>
+          <p className="gr-note">{t('gr.asoReading')}</p>
         </div>
       )}
-    </Card>
+    </Section>
   );
 }
 
@@ -164,21 +184,22 @@ function Experiments({ app }: { app: UnifiedApp }) {
   const editable = tests.find(x => !started(x) && !DONE.includes(x.state));
   const asc = app.ios ? ascUrl(app.ios.app.id) : ascUrl(d.statusFor(app)?.app?.platforms.ios?.ascAppId);
   return (
-    <Card title={t('gr.ppo')} icon="flask" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{r.data ? (r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })) : t('gr.ppoSub')}</span>} pad={false}
+    <Section className="gr-ppo" title={t('gr.ppo')} icon="flask" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{r.data ? (r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })) : t('gr.ppoSub')}</span>}
       actions={<>
         <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal(asc).catch(() => {})}><Icon name="external" />{t('gr.results')}</button>
         <ReadControl r={r} label={t('gr.ppoRead')} />
       </>}>
-      {r.error && <div className="card-body"><ErrorNotice error={r.error} keep={!!r.data} /></div>}
-      {!r.data ? (r.loading && !r.error ? <div className="card-body"><Skeleton lines={4} /></div> : <Empty compact illo="cloud" title={t('gr.ppoNotRead')}>{t('gr.ppoNotReadText')}</Empty>)
-        : !tests.length ? <Empty compact illo="text" title={t('gr.ppoNone')}>{variants.length ? t('gr.ppoNoneText') : t('gr.ppoNoVariants')}</Empty> : (
-          <table className="table">
+      <div className="gr-body">
+      {r.error && <ErrorNotice error={r.error} keep={!!r.data} />}
+      {!r.data ? (r.loading && !r.error ? <Skeleton lines={4} /> : <EmptyState icon="cloud"><b>{t('gr.ppoNotRead')}</b><br />{t('gr.ppoNotReadText')}</EmptyState>)
+        : !tests.length ? <EmptyState icon="flask"><b>{t('gr.ppoNone')}</b><br />{variants.length ? t('gr.ppoNoneText') : t('gr.ppoNoVariants')}</EmptyState> : (
+          <div className="ds-table-wrap"><table className="table v2">
             <thead><tr><th>{t('gr.test')}</th><th>{t('gr.state')}</th><th className="right">{t('gr.traffic')}</th><th>{t('gr.dates')}</th><th>{t('gr.treatments')}</th><th className="right">{t('gr.owner')}</th></tr></thead>
             <tbody>
               {tests.map(x => (
                 <tr key={x.id}>
                   <td className="strong">{x.name}</td>
-                  <td><Chip tone={stateTone(x.state)}>{x.state.replace(/_/g, ' ').toLowerCase()}</Chip></td>
+                  <td><StatusPill tone={stateTone(x.state)}>{x.state.replace(/_/g, ' ').toLowerCase()}</StatusPill></td>
                   <td className="right num">{x.trafficProportion !== undefined ? `${x.trafficProportion} %` : '–'}</td>
                   <td className="small nowrap">{x.startDate ? `${date(x.startDate)} → ${x.endDate ? date(x.endDate) : t('gr.running')}` : t('gr.notStarted')}</td>
                   <td className="small">{x.treatments.length ? x.treatments.map(tr => t('gr.treatment', { name: tr.name, count: tr.locales })).join(' · ') : '–'}</td>
@@ -190,10 +211,10 @@ function Experiments({ app }: { app: UnifiedApp }) {
                 </tr>
               ))}
             </tbody>
-          </table>
+          </table></div>
         )}
       {app.project ? (
-        <div className="card-body" style={{ borderTop: '1px solid var(--line)' }}>
+        <div className="gr-ppo-act">
           {!variants.length ? <Notice tone="info" icon="info">{t('gr.ppoNoVariants')}</Notice> : (
             <div className="act-grid">
               <div className="act-col">
@@ -215,37 +236,39 @@ function Experiments({ app }: { app: UnifiedApp }) {
           )}
           <p className="small muted act-note"><Icon name="shield" />{t('gr.ppoNote')}</p>
         </div>
-      ) : <div className="card-foot"><Icon name="info" />{t('gr.ppoStoreOnly')}</div>}
-    </Card>
+      ) : <div className="gr-foot"><Icon name="info" />{t('gr.ppoStoreOnly')}</div>}
+      </div>
+    </Section>
   );
 }
 
 function PlayExperiments({ app }: { app: UnifiedApp }) {
   const nav = useNav();
   return (
-    <Card title={t('gr.playExp')} icon="flask" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{t('gr.playExpSub')}</span>}
+    <Section title={t('gr.playExp')} icon="flask" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{t('gr.playExpSub')}</span>}
       actions={<button className="btn btn-sm" onClick={() => api.openExternal(PLAY_CONSOLE).catch(() => {})}><Icon name="external" />Play Console</button>}>
-      <div className="stack" style={{ gap: 10 }}>
-        <p className="small">{t('gr.playExpText')}</p>
+      <div className="gr-body">
+        <p className="gr-text">{t('gr.playExpText')}</p>
         {app.project && <div><button className="btn btn-sm" onClick={() => nav.go({ screen: 'app', appId: app.key, tab: 'art' })}><Icon name="grid" />{t('gr.seeVariants')}</button></div>}
       </div>
-    </Card>
+    </Section>
   );
 }
 
 export function GrowthTab({ app }: { app: UnifiedApp }) {
   const d = useData();
+  const hue = useTint(d.iconFor(app), app.name);
   const s = d.statusFor(app)?.summary;
   const hasApple = !!(s?.apple ?? app.ios), hasPlay = !!(s?.play ?? app.android);
-  if (app.project && !s) return <Card><Skeleton lines={5} block /></Card>;
+  if (app.project && !s) return <div className="scr-growth" style={tintStyle(hue)}><Section><Skeleton lines={5} block /></Section></div>;
   return (
-    <>
+    <div className="scr-growth" style={tintStyle(hue)}>
       {app.project && <Analytics projectId={app.project.id} hasApple={hasApple} hasPlay={hasPlay} name={s?.name ?? app.name} playReports={!!s?.playReports} />}
       {app.project && (hasApple || hasPlay) && <Aso projectId={app.project.id} />}
-      <div className={`grid ${hasApple && hasPlay ? 'g-main-side' : ''}`} style={{ alignItems: 'start' }}>
+      <div className={`gr-exp${hasApple && hasPlay ? ' two' : ''}`}>
         {hasApple && <Experiments app={app} />}
         {hasPlay && <PlayExperiments app={app} />}
       </div>
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Health.tsx b/apps/desktop/src/screens/tabs/Health.tsx
index 9986790..846e64e 100644
--- a/apps/desktop/src/screens/tabs/Health.tsx
+++ b/apps/desktop/src/screens/tabs/Health.tsx
@@ -9,31 +9,56 @@ import { api } from '../../api';
 import { appleSignatureView, hintFor, type IssueView, issueMarkdown, playIssueView } from '../../lib/issues';
 import type { IssueSample } from '../../lib/model';
 import { useData, useRead } from '../../store';
-import { Icon } from '../../ui/icons';
-import { Bar, Card, Chip, Empty, ErrorFoot, ErrorNotice, Notice, ReadControl, Skeleton, Sparkline } from '../../ui/kit';
+import { Icon, type IconName, StoreGlyph } from '../../ui/icons';
+import { Bar, ErrorFoot, ErrorNotice, Notice, ReadControl, Skeleton, Sparkline } from '../../ui/kit';
+import { EmptyState, Section, StatusPill, tintStyle, useTint } from '../../ui/ds';
+import '../../styles/health.css';
 import { exportName, healthMd } from '../../lib/exports';
 import { useExports } from '../../ui/Exports';
 import { StoreReadNotice } from '../../ui/StoreError';
 
-function Metric({ title, s }: { title: string; s: Series }) {
+const toneWord = (tone: Series['tone']): string => (tone === 'bad' ? t('health.over') : tone === 'warn' ? t('health.near') : tone === 'ok' ? t('health.under') : t('common.unknown'));
+
+/** One big metric tile: the 28-day value, its state against the threshold, a large daily sparkline and its axis. */
+function Metric({ title, s, icon }: { title: string; s: Series; icon: IconName }) {
   return (
-    <Card title={title} icon="activity" sub={t('health.window', { from: date(s.dates[0]), to: date(s.dates.at(-1)) })}
-      actions={<Chip tone={s.tone === 'neutral' ? 'neutral' : s.tone}>{s.tone === 'bad' ? t('health.over') : s.tone === 'warn' ? t('health.near') : s.tone === 'ok' ? t('health.under') : t('common.unknown')}</Chip>}>
-      <div className="metric">
-        <div className="metric-top">
-          <div>
-            <div className={`metric-val ${s.tone}`}>{pct(s.current)}</div>
-            <div className="small muted">{t('health.current28')}</div>
-          </div>
-          <div className="metric-legend">
-            <span className="lg"><span className={`sw ${s.tone}`} />{t('health.daily')}</span>
-            <span className="lg"><span className="sw thr" />{t('health.threshold', { value: pct(s.threshold) })}</span>
-          </div>
-        </div>
-        <Sparkline values={s.values} dates={s.dates} threshold={s.threshold} tone={s.tone} label={t('health.chartAria', { metric: title, value: pct(s.current) })} />
-        <div className="axis"><span>{date(s.dates[0])}</span><span>{date(s.dates[Math.floor(s.dates.length / 2)])}</span><span>{date(s.dates.at(-1))}</span></div>
+    <section className={`hl-tile tone-${s.tone}`} aria-label={title}>
+      <div className="hl-tile-h">
+        <span className="hl-tile-l"><Icon name={icon} />{title}</span>
+        <StatusPill tone={s.tone}>{toneWord(s.tone)}</StatusPill>
       </div>
-    </Card>
+      <div className="hl-tile-v">
+        <span className={`hl-big num ${s.tone}`}>{pct(s.current)}</span>
+        <span className="hl-tile-sub">{t('health.current28')}</span>
+      </div>
+      <Sparkline values={s.values} dates={s.dates} threshold={s.threshold} tone={s.tone} label={t('health.chartAria', { metric: title, value: pct(s.current) })} />
+      <div className="hl-axis"><span>{date(s.dates[0])}</span><span>{date(s.dates[Math.floor(s.dates.length / 2)])}</span><span>{date(s.dates.at(-1))}</span></div>
+      <div className="hl-legend">
+        <span className="lg"><span className={`sw ${s.tone}`} />{t('health.daily')}</span>
+        <span className="lg"><span className="sw thr" />{t('health.threshold', { value: pct(s.threshold) })}</span>
+        <span className="hl-win">{t('health.window', { from: date(s.dates[0]), to: date(s.dates.at(-1)) })}</span>
+      </div>
+    </section>
+  );
+}
+
+/** Launch (startup) time from the App Store power and performance metrics, as the third big tile. */
+function Startup({ h }: { h: AppleHealth }) {
+  const m = h.metrics.find(x => /launch/i.test(`${x.category} ${x.metric}`));
+  if (!m) return null;
+  const tone = m.goal === 'poor' ? 'bad' : m.goal === 'fair' ? 'warn' : m.goal ? 'ok' : 'neutral';
+  return (
+    <section className={`hl-tile tone-${tone}`} aria-label={t('v2ins.hStartup')}>
+      <div className="hl-tile-h">
+        <span className="hl-tile-l"><Icon name="rocket" />{t('v2ins.hStartup')}</span>
+        {m.goal ? <StatusPill tone={tone}>{m.goal}</StatusPill> : null}
+      </div>
+      <div className="hl-tile-v">
+        <span className={`hl-big num ${tone}`}>{num(m.value, m.value < 10 ? 2 : 0)}<small>{m.unit}</small></span>
+        <span className="hl-tile-sub">{m.metric}</span>
+      </div>
+      <div className="hl-startup-meta"><StoreGlyph store="ios" className="ic13" />{t('v2ins.hStartupSub', { version: m.version })}</div>
+    </section>
   );
 }
 
@@ -76,66 +101,58 @@ function IssueDetail({ app, v }: { app: UnifiedApp; v: IssueView }) {
   );
 }
 
-function Play({ h, app }: { h: PlayHealth; app: UnifiedApp }) {
-  const [open, setOpen] = useState<number | null>(null);
-  const crash = healthSeries(h.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash);
-  const anr = healthSeries(h.anr, 'userPerceivedAnrRate', PLAY_THRESHOLDS.anr);
-  const devices = (h.devices ?? []).slice(0, 6);
-  const worst = Math.max(PLAY_THRESHOLDS.perDevice, ...devices.map(x => Math.max(x.crash ?? 0, x.anr ?? 0)));
+/** An issue as a card: a header button (type, title, where, counts) that opens its detail below (Enter / Space). */
+function IssueCard({ open, onToggle, tone, kind, title, where, stats, detail }: { open: boolean; onToggle: () => void; tone: 'bad' | 'warn' | 'info'; kind: string; title: string; where?: string; stats: React.ReactNode; detail: React.ReactNode }) {
   return (
-    <>
-      <div className="grid g2">
-        <Metric title={t('health.crash')} s={crash} />
-        <Metric title={t('health.anr')} s={anr} />
-      </div>
-      <div className="grid g2">
-        <Card title={t('health.devices')} icon="phone" sub={t('health.devicesSub', { value: pct(PLAY_THRESHOLDS.perDevice, 0) })}>
-          {devices.length ? (
-            <div className="hbars">
-              {devices.map(x => {
-                const v = Math.max(x.crash ?? 0, x.anr ?? 0);
-                return (
-                  <div className="hbar" key={x.model}>
-                    <span className="nm">{x.model}</span>
-                    <Bar value={v / worst} tone={v >= PLAY_THRESHOLDS.perDevice ? 'bad' : v >= PLAY_THRESHOLDS.perDevice * 0.8 ? 'warn' : 'ok'} label={x.model} />
-                    <span className="num right small">{pct(v)}</span>
-                  </div>
-                );
-              })}
-            </div>
-          ) : <p className="muted">{t('health.noDevices')}</p>}
-        </Card>
-        <Card title={t('health.issues')} icon="alert" sub={t('health.issuesSub')} pad={false}>
-          {h.issues.length ? (
-            <table className="table">
-              <thead><tr><th>{t('col.issue')}</th><th className="right">{t('col.reports')}</th><th className="right">{t('col.users')}</th></tr></thead>
-              <tbody>
-                {h.issues.slice(0, 6).map((i, n) => (
-                  <IssueRows key={n} open={open === n} onToggle={() => setOpen(open === n ? null : n)} cols={3}
-                    head={<><div className="row" style={{ gap: 8, minWidth: 0 }}><Chip tone={i.type === 'ANR' ? 'warn' : 'bad'}>{i.type === 'ANR' ? 'ANR' : t('health.crashShort')}</Chip><span className="strong ellipsis" title={i.cause || '?'}>{i.cause || '?'}</span></div>
-                      <div className="mono-id muted ellipsis" style={{ marginTop: 4 }} title={i.location}>{i.location}</div></>}
-                    cells={<><td className="right num">{num(i.reports)}</td><td className="right num">{num(i.users)}</td></>}
-                    detail={<IssueDetail app={app} v={playIssueView(i)} />} />
-                ))}
-              </tbody>
-            </table>
-          ) : <Empty compact illo="shield" title={t('health.noIssues')} />}
-        </Card>
-      </div>
-    </>
+    <div className={`hl-issue tone-${tone}${open ? ' open' : ''}`}>
+      <button type="button" className="hl-issue-h issue-row" onClick={onToggle} aria-expanded={open}>
+        <Icon name="chevronRight" className={`ic13 chev${open ? ' rot' : ''}`} />
+        <span className="hl-issue-t">
+          <span className="hl-issue-top"><StatusPill tone={tone}>{kind}</StatusPill><span className="hl-issue-title" title={title}>{title}</span></span>
+          {where && <span className="hl-issue-where mono-id" title={where}>{where}</span>}
+        </span>
+        <span className="hl-issue-stats">{stats}</span>
+      </button>
+      {open && <div className="hl-issue-b">{detail}</div>}
+    </div>
   );
 }
 
-/** A table row that opens its detail row below it (click or Enter / Space). */
-function IssueRows({ open, onToggle, head, cells, detail, cols }: { open: boolean; onToggle: () => void; head: React.ReactNode; cells: React.ReactNode; detail: React.ReactNode; cols: number }) {
+function Play({ h, app }: { h: PlayHealth; app: UnifiedApp }) {
+  const [open, setOpen] = useState<number | null>(null);
+  const devices = (h.devices ?? []).slice(0, 6);
+  const worst = Math.max(PLAY_THRESHOLDS.perDevice, ...devices.map(x => Math.max(x.crash ?? 0, x.anr ?? 0)));
   return (
-    <>
-      <tr className={`issue-row${open ? ' open' : ''}`} onClick={onToggle} onKeyDown={e => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); onToggle(); } }} tabIndex={0} aria-expanded={open} role="button">
-        <td style={{ maxWidth: 380 }}><div className="row" style={{ gap: 6, minWidth: 0 }}><Icon name="chevronRight" className={`ic13 chev${open ? ' rot' : ''}`} /><div style={{ minWidth: 0 }}>{head}</div></div></td>
-        {cells}
-      </tr>
-      {open && <tr className="edit-row"><td colSpan={cols}>{detail}</td></tr>}
-    </>
+    <div className="hl-two">
+      <Section title={t('health.issues')} icon="alert" sub={t('health.issuesSub')}>
+        {h.issues.length ? (
+          <div className="hl-issues">
+            {h.issues.slice(0, 6).map((i, n) => (
+              <IssueCard key={n} open={open === n} onToggle={() => setOpen(open === n ? null : n)} tone={i.type === 'ANR' ? 'warn' : 'bad'}
+                kind={i.type === 'ANR' ? 'ANR' : t('health.crashShort')} title={i.cause || '?'} where={i.location}
+                stats={<><span><b className="num">{num(i.reports)}</b>{t('col.reports')}</span><span><b className="num">{num(i.users)}</b>{t('col.users')}</span></>}
+                detail={<IssueDetail app={app} v={playIssueView(i)} />} />
+            ))}
+          </div>
+        ) : <EmptyState icon="shield" tone="ok">{t('health.noIssues')}</EmptyState>}
+      </Section>
+      <Section title={t('health.devices')} icon="phone" sub={t('health.devicesSub', { value: pct(PLAY_THRESHOLDS.perDevice, 0) })}>
+        {devices.length ? (
+          <div className="hl-bars">
+            {devices.map(x => {
+              const v = Math.max(x.crash ?? 0, x.anr ?? 0);
+              return (
+                <div className="hl-bar" key={x.model}>
+                  <span className="nm">{x.model}</span>
+                  <Bar value={v / worst} tone={v >= PLAY_THRESHOLDS.perDevice ? 'bad' : v >= PLAY_THRESHOLDS.perDevice * 0.8 ? 'warn' : 'ok'} label={x.model} />
+                  <span className="num">{pct(v)}</span>
+                </div>
+              );
+            })}
+          </div>
+        ) : <EmptyState icon="phone">{t('health.noDevices')}</EmptyState>}
+      </Section>
+    </div>
   );
 }
 
@@ -143,70 +160,83 @@ function Apple({ h, app }: { h: AppleHealth; app: UnifiedApp }) {
   const [open, setOpen] = useState<number | null>(null);
   const maxCrash = Math.max(1, ...h.betaCrashes.map(b => b.count));
   return (
-    <div className="grid g2">
-      <Card title={t('health.appleMetrics')} icon="activity" sub={t('health.appleMetricsSub')} pad={false}>
-        {h.metrics.length ? (
-          <table className="table">
-            <thead><tr><th>{t('col.metric')}</th><th className="right">{t('col.value')}</th><th>{t('col.version')}</th><th>{t('col.goal')}</th></tr></thead>
-            <tbody>
+    <div className="hl-two">
+      <Section title={t('health.signatures')} icon="layers" sub={t('health.signaturesSub')}>
+        {h.signatures.length ? (
+          <div className="hl-issues">
+            {h.signatures.slice(0, 5).map((s, i) => (
+              <IssueCard key={i} open={open === i} onToggle={() => setOpen(open === i ? null : i)} tone="bad" kind={s.type}
+                title={s.signature || s.type} where={t('health.build', { build: s.build })}
+                stats={<span><b className="num">{num(s.weight * 100, 1)}%</b></span>}
+                detail={<IssueDetail app={app} v={appleSignatureView(s)} />} />
+            ))}
+          </div>
+        ) : <EmptyState icon="shield" tone="ok">{t('health.noSignatures')}</EmptyState>}
+      </Section>
+      <div className="hl-col">
+        <Section title={t('health.appleMetrics')} icon="activity" sub={t('health.appleMetricsSub')}>
+          {h.metrics.length ? (
+            <div className="hl-mets">
               {h.metrics.slice(0, 8).map((m, i) => (
-                <tr key={i}><td><div className="strong">{m.metric}</div><div className="small muted">{m.category}</div></td><td className="right num strong">{num(m.value, m.value < 10 ? 2 : 0)} <span className="muted small">{m.unit}</span></td>
-                  <td className="num muted">{m.version}</td><td>{m.goal ? <Chip tone={m.goal === 'poor' ? 'bad' : m.goal === 'fair' ? 'warn' : 'ok'}>{m.goal}</Chip> : '–'}</td></tr>
+                <div className="hl-met" key={i}>
+                  <span className="hl-met-t"><b>{m.metric}</b><small>{m.category} · {m.version}</small></span>
+                  <span className="hl-met-v num">{num(m.value, m.value < 10 ? 2 : 0)} <small>{m.unit}</small></span>
+                  {m.goal ? <StatusPill tone={m.goal === 'poor' ? 'bad' : m.goal === 'fair' ? 'warn' : 'ok'}>{m.goal}</StatusPill> : <span className="muted">–</span>}
+                </div>
               ))}
-            </tbody>
-          </table>
-        ) : <Empty compact illo="pulse" title={t('health.noMetrics')} />}
-      </Card>
-      <div className="stack" style={{ gap: 16 }}>
-        <Card title={t('health.signatures')} icon="layers" sub={t('health.signaturesSub')} pad={false}>
-          {h.signatures.length ? (
-            <table className="table">
-              <tbody>
-                {h.signatures.slice(0, 5).map((s, i) => (
-                  <IssueRows key={i} open={open === i} onToggle={() => setOpen(open === i ? null : i)} cols={2}
-                    head={<><div className="strong ellipsis" title={s.signature || s.type}>{s.signature || s.type}</div><div className="small muted">{s.type} · {t('health.build', { build: s.build })}</div></>}
-                    cells={<td className="right num small strong">{num(s.weight * 100, 1)}%</td>}
-                    detail={<IssueDetail app={app} v={appleSignatureView(s)} />} />
-                ))}
-              </tbody>
-            </table>
-          ) : <Empty compact illo="shield" title={t('health.noSignatures')} />}
-        </Card>
-        <Card title={t('health.betaCrashes')} icon="plane">
+            </div>
+          ) : <EmptyState icon="activity">{t('health.noMetrics')}</EmptyState>}
+        </Section>
+        <Section title={t('health.betaCrashes')} icon="plane">
           {h.betaCrashes.length ? (
-            <div className="hbars">{h.betaCrashes.slice(0, 5).map(b => (
-              <div className="hbar" key={b.build}><span className="nm">{t('health.build', { build: b.build })}</span><Bar value={b.count / maxCrash} tone="warn" label={b.build} /><span className="num right small">{num(b.count)}</span></div>
+            <div className="hl-bars">{h.betaCrashes.slice(0, 5).map(b => (
+              <div className="hl-bar" key={b.build}><span className="nm">{t('health.build', { build: b.build })}</span><Bar value={b.count / maxCrash} tone="warn" label={b.build} /><span className="num">{num(b.count)}</span></div>
             ))}</div>
-          ) : <p className="muted">{t('health.noBetaCrashes')}</p>}
-        </Card>
+          ) : <EmptyState icon="plane">{t('health.noBetaCrashes')}</EmptyState>}
+        </Section>
       </div>
     </div>
   );
 }
 
 export function HealthTab({ app }: { app: UnifiedApp }) {
+  const d = useData();
+  const hue = useTint(d.iconFor(app), app.name);
   const r = useRead<HealthSnapshot>(app.target, 'health', { network: true, title: t('tab.health'), appName: app.name });
   useExports('health', [{ id: 'health-md', label: t('export.health'), icon: 'activity', kind: 'md', file: exportName(app.name, 'health'), disabled: r.data ? false : t('export.readFirst'), build: () => healthMd(app.name, r.data!) }]);
   if (!r.data) {
-    if (r.loading && !r.error) return <Card><Skeleton lines={4} block /></Card>;
+    if (r.loading && !r.error) return <div className="scr-health" style={tintStyle(hue)}><Section><Skeleton lines={4} block /></Section></div>;
     return (
-      <Card pad={false}>
-        <Empty illo="pulse" title={t('health.emptyTitle')} actions={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('health.read')}</button>}>{t('health.emptyText')}</Empty>
-        {r.error && <ErrorFoot error={r.error} />}
-      </Card>
+      <div className="scr-health" style={tintStyle(hue)}>
+        <Section>
+          <EmptyState icon="activity" action={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('health.read')}</button>}>
+            <b>{t('health.emptyTitle')}</b><br />{t('health.emptyText')}
+          </EmptyState>
+          {r.error && <ErrorFoot error={r.error} />}
+        </Section>
+      </div>
     );
   }
   const h = r.data;
+  const play = h.play !== undefined && !isError(h.play) ? h.play : null;
+  const apple = h.apple !== undefined && !isError(h.apple) ? h.apple : null;
+  const crash = play ? healthSeries(play.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash) : null;
+  const anr = play ? healthSeries(play.anr, 'userPerceivedAnrRate', PLAY_THRESHOLDS.anr) : null;
+  const tiles = !!crash || !!(apple && apple.metrics.some(x => /launch/i.test(`${x.category} ${x.metric}`)));
   return (
-    <>
-      <div className="row between">
-        <span />
-        <ReadControl r={r} />
-      </div>
-      <h2 className="label">Google Play</h2>
+    <div className="scr-health" style={tintStyle(hue)}>
+      <div className="hl-top"><span className="grow" /><ReadControl r={r} /></div>
+      {tiles && (
+        <div className="hl-tiles">
+          {crash && <Metric title={t('health.crash')} s={crash} icon="alertCircle" />}
+          {anr && <Metric title={t('health.anr')} s={anr} icon="clock" />}
+          {apple && <Startup h={apple} />}
+        </div>
+      )}
+      <h2 className="hl-store"><StoreGlyph store="android" />Google Play</h2>
       {h.play === undefined ? <Notice tone="info">{t('health.noPlay')}</Notice> : isError(h.play) ? <StoreReadNotice store="Google Play" e={h.play} app={app.android?.app.id ?? null} onRetry={r.refresh} busy={r.loading} unreadable="health.unreadable" /> : <>{h.play.issuesError && <ErrorNotice error={t('health.issuesUnread', { error: h.play.issuesError })} />}<Play h={h.play} app={app} /></>}
-      <h2 className="label">App Store</h2>
+      <h2 className="hl-store"><StoreGlyph store="ios" />App Store</h2>
       {h.apple === undefined ? <Notice tone="info">{t('health.noApple')}</Notice> : isError(h.apple) ? <StoreReadNotice store="App Store" e={h.apple} onRetry={r.refresh} busy={r.loading} unreadable="health.unreadable" /> : <Apple h={h.apple} app={app} />}
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Listings.tsx b/apps/desktop/src/screens/tabs/Listings.tsx
index 44753b1..d4aa4bf 100644
--- a/apps/desktop/src/screens/tabs/Listings.tsx
+++ b/apps/desktop/src/screens/tabs/Listings.tsx
@@ -1,5 +1,6 @@
 // Listings: per language and store, which listing fields are written and within the store limits (from the listing
 // files in the app folder), and how many screenshots are rendered per language.
+import '../../styles/listings.css';
 import { useState } from 'react';
 import type { ListingField, ListingLocale, ListingsResult, Project } from '../../api';
 import { type Key, t } from '../../i18n';
@@ -7,7 +8,8 @@ import { ago, num } from '../../lib/format';
 import { useData, useRead, useWrite } from '../../store';
 import { Icon, StoreGlyph } from '../../ui/icons';
 import { WriteButton } from '../../ui/WriteButton';
-import { Card, Chip, Empty, ErrorNotice, Kpi, Notice, Skeleton } from '../../ui/kit';
+import { Chip, ErrorNotice, Notice, Skeleton } from '../../ui/kit';
+import { EmptyState, Section, StatTile, StatusPill } from '../../ui/ds';
 import { reads } from '../../api';
 import { exportName, listingsMd } from '../../lib/exports';
 import { useExports } from '../../ui/Exports';
@@ -39,25 +41,41 @@ function Ring({ value }: { value: number }) {
   );
 }
 
-function StoreGrid({ store, locales }: { store: 'play' | 'apple'; locales: ListingLocale[] }) {
-  const fields = locales.find(l => l[store])?.[store]?.fields.map(f => f.field) ?? [];
-  const done = (l: ListingLocale) => {
-    const fs = l[store]?.fields.filter(f => f.required) ?? [];
-    return fs.length ? fs.filter(f => f.state === 'ok').length / fs.length : 0;
-  };
+/** One language as the store page shows it: the fields in store order, each with its length against the limit. */
+function LangPage({ store, l }: { store: 'play' | 'apple'; l: ListingLocale }) {
+  const fs = l[store]?.fields ?? [];
+  const req = fs.filter(f => f.required);
+  const v = req.length ? req.filter(f => f.state === 'ok').length / req.length : 0;
+  const bad = fs.filter(f => f.state === 'missing' || f.state === 'over').length;
   return (
-    <Card title={store === 'play' ? 'Google Play' : 'App Store'} icon="text" sub={store === 'play' ? t('lst.playSub') : t('lst.appleSub')} pad={false}>
-      <div className="lg-grid" style={{ ['--cols' as string]: fields.length }}>
-        <div className="lg-row head"><span>{t('col.language')}</span>{fields.map(f => <span key={f}>{t(FIELD_KEY[f] ?? 'lst.title')}</span>)}<span style={{ textAlign: 'right' }}>{t('lst.complete')}</span></div>
-        {locales.map(l => (
-          <div className="lg-row" key={l.lang}>
-            <div className="lg-lang"><span className="mono-id strong">{l.lang}</span><span className="small muted">{l[store]?.code ?? ''}</span>{l.rtl && <Chip tone="outline">RTL</Chip>}</div>
-            {fields.map(f => <FieldCell key={f} f={l[store]?.fields.find(x => x.field === f)} />)}
-            <div style={{ display: 'flex', justifyContent: 'flex-end' }}><Ring value={done(l)} /></div>
+    <article className={`lst-page${bad ? ' bad' : v >= 1 ? ' done' : ''}`} data-lang={l.lang} aria-label={`${store === 'play' ? 'Google Play' : 'App Store'} ${l.lang}`}>
+      <header className="lst-page-h">
+        <span className="lst-lang mono-id">{l.lang}</span>
+        <span className="small muted">{l[store]?.code ?? ''}</span>
+        {l.rtl && <Chip tone="outline">RTL</Chip>}
+        <span className="grow" />
+        {bad > 0 ? <StatusPill tone="bad">{t('v2lst.toFix', { count: bad })}</StatusPill> : v >= 1 ? <StatusPill tone="ok">{t('v2lst.ready')}</StatusPill> : null}
+        <Ring value={v} />
+      </header>
+      <div className="lst-fields">
+        {fs.map(f => (
+          <div className={`lst-f f-${f.field}`} key={f.field}>
+            <span className="lst-f-l">{t(FIELD_KEY[f.field] ?? 'lst.title')}</span>
+            <FieldCell f={f} />
           </div>
         ))}
       </div>
-    </Card>
+    </article>
+  );
+}
+
+function StoreGrid({ store, locales }: { store: 'play' | 'apple'; locales: ListingLocale[] }) {
+  return (
+    <Section title={<><StoreGlyph store={store === 'play' ? 'android' : 'ios'} />{store === 'play' ? 'Google Play' : 'App Store'}</>} icon="text" sub={store === 'play' ? t('lst.playSub') : t('lst.appleSub')}>
+      <div className="lst-pages">
+        {locales.filter(l => l[store]).map(l => <LangPage key={l.lang} store={store} l={l} />)}
+      </div>
+    </Section>
   );
 }
 
@@ -71,7 +89,7 @@ function StoreActions({ project, langs }: { project: Project; langs: string[] })
   const ios = !!e?.app?.platforms.ios, android = !!e?.app?.platforms.android;
   const only = lang ? { lang } : {};
   return (
-    <Card title={t('act.storeTitle')} icon="upload" sub={t('act.storeSub')}>
+    <Section title={t('act.storeTitle')} icon="upload" sub={t('act.storeSub')} className="lst-actions">
       <div className="act-grid">
         {android && (
           <div className="act-col">
@@ -99,7 +117,7 @@ function StoreActions({ project, langs }: { project: Project; langs: string[] })
         </div>
       </div>
       <p className="small muted act-note"><Icon name="shield" />{t('act.note')}</p>
-    </Card>
+    </Section>
   );
 }
 
@@ -110,7 +128,7 @@ export function ListingsTab({ project }: { project: Project }) {
     build: async () => { const x = await reads.listingText(project.id); if (!x.data) throw new Error(x.output || t('export.failed')); return listingsMd(project.name, x.data); } }]);
   if (!r.data) {
     if (r.error) return <ErrorNotice error={r.error} tone="bad" />;
-    return <Card><Skeleton lines={6} block /></Card>;
+    return <div className="scr-listings"><Section><Skeleton lines={6} block /></Section></div>;
   }
   const L = r.data;
   const missing = L.locales.reduce((n, l) => n + [...(l.play?.fields ?? []), ...(l.apple?.fields ?? [])].filter(f => f.state === 'missing' || f.state === 'over').length, 0);
@@ -118,20 +136,19 @@ export function ListingsTab({ project }: { project: Project }) {
   const shots = L.locales.reduce((n, l) => n + (l.screenshots ?? 0), 0);
   const noFiles = !L.files.play && !L.files.apple;
   return (
-    <>
-      <div className="kpis" style={{ gridTemplateColumns: 'repeat(4, minmax(0, 1fr))' }}>
-        <Kpi icon="globe" label={t('lst.languages')} value={L.locales.length} sub={L.locales.map(l => l.lang).join(' · ')} />
-        <Kpi icon="check" label={t('lst.completeKpi')} value={noFiles ? '–' : `${Math.round(avg * 100)}%`} sub={t('lst.completeSub')} tone={!noFiles && avg < 1 ? 'warn' : undefined} />
-        <Kpi icon="alert" label={t('lst.toFix')} value={noFiles ? '–' : missing} sub={t('lst.toFixSub')} tone={missing ? 'bad' : undefined} />
-        <Kpi icon="image" label={t('lst.screenshots')} value={L.locales.some(l => l.screenshots !== null) ? shots : '–'} sub={L.locales.some(l => l.screenshots !== null) ? t('lst.screenshotsSub') : t('lst.noRenders')} />
+    <div className="scr-listings">
+      <div className="ds-grid lst-stats">
+        <StatTile icon="globe" label={t('lst.languages')} value={L.locales.length} sub={L.locales.map(l => l.lang).join(' · ')} />
+        <StatTile icon="check" label={t('lst.completeKpi')} value={noFiles ? '–' : `${Math.round(avg * 100)}%`} sub={t('lst.completeSub')} tone={!noFiles && avg < 1 ? 'warn' : undefined} />
+        <StatTile icon="alert" label={t('lst.toFix')} value={noFiles ? '–' : missing} sub={t('lst.toFixSub')} tone={missing ? 'bad' : undefined} />
+        <StatTile icon="image" label={t('lst.screenshots')} value={L.locales.some(l => l.screenshots !== null) ? shots : '–'} sub={L.locales.some(l => l.screenshots !== null) ? t('lst.screenshotsSub') : t('lst.noRenders')} />
       </div>
       {L.problems.map((p, i) => <Notice key={i} tone="warn">{p}</Notice>)}
       {!noFiles && <StoreActions project={project} langs={L.locales.map(l => l.lang)} />}
       {noFiles ? (
-        <Card pad={false}>
-          <Empty illo="text" title={t('lst.noFilesTitle')}>{t('lst.noFilesText')}</Empty>
-          <div className="card-foot"><Icon name="terminal" /><code className="selectable">storebound init</code><span>{t('lst.noFilesHint')}</span></div>
-        </Card>
+        <Section>
+          <EmptyState icon="text" action={<div className="card-foot lst-foot-cmd"><Icon name="terminal" /><code className="selectable">storebound init</code><span>{t('lst.noFilesHint')}</span></div>}><b>{t('lst.noFilesTitle')}</b> {t('lst.noFilesText')}</EmptyState>
+        </Section>
       ) : (
         <>
           {L.files.play && <StoreGrid store="play" locales={L.locales} />}
@@ -139,6 +156,6 @@ export function ListingsTab({ project }: { project: Project }) {
         </>
       )}
       <p className="small muted">{t('lst.foot', { when: ago(r.at) })}</p>
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/LiveArt.tsx b/apps/desktop/src/screens/tabs/LiveArt.tsx
index 92866fd..f86dbea 100644
--- a/apps/desktop/src/screens/tabs/LiveArt.tsx
+++ b/apps/desktop/src/screens/tabs/LiveArt.tsx
@@ -2,14 +2,16 @@
 // thumbnails (art.thumb: one data: URL each, loaded as they scroll into view; the window loads no remote images
 // itself) and, for an app folder, whether the folder has the same file. "Pull from stores" runs art.pull (dry run,
 // native dialog, then the files are written: local only, read-only on the stores). Store-only apps: read-only.
+import '../../styles/art.css';
 import { useEffect, useMemo, useRef, useState } from 'react';
 import { api, type ArtThumb, type LiveArtResult, type LiveArtTile, type Project, type ToolResult } from '../../api';
 import { t } from '../../i18n';
 import { num } from '../../lib/format';
 import { useRead, useWrite } from '../../store';
 import { Icon } from '../../ui/icons';
-import { Card, Chip, Empty, ErrorNotice, Notice, ReadControl, Skeleton } from '../../ui/kit';
+import { Chip, Empty, ErrorNotice, Notice, ReadControl, Skeleton } from '../../ui/kit';
 import { WriteButton } from '../../ui/WriteButton';
+import { Section, StatusPill } from '../../ui/ds';
 
 // thumbnails by target + URL, three at a time
 const cache = new Map<string, string | null>();
@@ -56,12 +58,12 @@ function LiveThumb({ target, tile, name }: { target: string; tile: LiveArtTile;
   const w = tile.w ?? 9, h = tile.h ?? 16;
   const state = tile.state === 'n/a' ? null : tile.state;
   return (
-    <figure className={`art-tile${state === 'differs' ? ' warn' : ''}`} style={{ ['--ar' as string]: `${w} / ${h}` }} data-live-tile={tile.state}>
+    <figure className={`art-tile${state === 'differs' ? ' warn' : ''} ${h > w ? 'portrait' : 'landscape'}`} style={{ ['--ar' as string]: `${w} / ${h}` }} data-live-tile={tile.state}>
       <div className="art-pic" ref={ref} role="img" aria-label={name}>
         {src ? <img src={src} alt="" draggable={false} /> : <span className="art-ph">{src === null && tile.thumb ? <><Icon name="image" />{t('art.liveNoThumb')}</> : <span className="sk sk-block" />}</span>}
       </div>
       <figcaption><span className="mono-id">{name}</span><span className="muted">{tile.w && tile.h ? `${tile.w}×${tile.h}` : ''}</span></figcaption>
-      {state && <span className={`small ${state === 'same' ? 'ok-ink' : state === 'differs' ? 'warn-ink' : 'muted'}`}>{t(state === 'same' ? 'art.liveSame' : state === 'differs' ? 'art.liveDiffers' : 'art.liveMissing')}</span>}
+      {state && <StatusPill tone={state === 'same' ? 'ok' : state === 'differs' ? 'warn' : 'neutral'}>{t(state === 'same' ? 'art.liveSame' : state === 'differs' ? 'art.liveDiffers' : 'art.liveMissing')}</StatusPill>}
     </figure>
   );
 }
@@ -84,10 +86,10 @@ export function LiveArt({ target, project }: { target: string; project?: Project
   const actions = <>{pull}<ReadControl r={r} /></>;
   if (!data) {
     return (
-      <Card title={t('art.liveTitle')} icon="cloud" actions={actions} id="live-art" pad={false}>
+      <Section className="scr-art art-live" title={t('art.liveTitle')} icon="cloud" actions={actions} id="live-art" pad={false}>
         {r.loading && !r.error ? <div className="card-body"><Skeleton lines={4} block /></div>
           : <Empty compact illo="text" title={t('art.liveEmpty')} actions={<button className="btn btn-primary btn-sm" onClick={() => { r.refresh(); }}><Icon name="refresh" />{t('art.liveRead')}</button>}>{r.error ?? t('art.liveEmptyText')}</Empty>}
-      </Card>
+      </Section>
     );
   }
   const total = data.sets.reduce((n, s) => n + s.tiles.length, 0);
@@ -95,7 +97,7 @@ export function LiveArt({ target, project }: { target: string; project?: Project
   const missing = data.sets.reduce((n, s) => n + s.tiles.filter(x => x.state === 'missing').length, 0);
   const sub = data.stores.map(s => `${s.store === 'apple' ? 'App Store' : 'Google Play'}: ${s.ok ? t('art.liveCount', { count: s.images }) : t('art.liveFailed')}${s.version ? ` · ${s.version}` : ''}`).join(' · ');
   return (
-    <Card title={t('art.liveTitle')} icon="cloud" sub={sub} actions={actions} id="live-art" pad={false}>
+    <Section className="scr-art art-live" title={t('art.liveTitle')} icon="cloud" sub={sub} actions={actions} id="live-art" pad={false}>
       {data.stores.filter(s => !s.ok).map(s => <div className="card-body" key={s.store}><ErrorNotice error={`${s.store === 'apple' ? 'App Store' : 'Google Play'}: ${s.error ?? ''}`} /></div>)}
       <div className="card-body stack" style={{ gap: 10 }}>
         {!project && <Notice tone="info" icon="info">{t('art.liveReadOnly')}</Notice>}
@@ -120,7 +122,7 @@ export function LiveArt({ target, project }: { target: string; project?: Project
           {sets.map(s => (
             <section className="art-row" key={`${s.store}-${s.type}`} data-live-set={`${s.store}:${s.locale}:${s.type}`}>
               <h3><span>{s.label}</span>{s.lang && <code>{s.lang}/{s.size}</code>}<Chip tone="outline" dot={false}>{s.store === 'apple' ? 'App Store' : 'Google Play'}</Chip><span className="muted small">{t('art.count', { count: s.tiles.length })}</span></h3>
-              <div className="art-tiles" style={{ ['--tw' as string]: s.size === 'feature' ? '300px' : s.tiles[0] && (s.tiles[0].w ?? 0) > (s.tiles[0].h ?? 1) ? '260px' : '150px' }}>
+              <div className="art-tiles" style={{ ['--tw' as string]: s.size === 'feature' ? '300px' : s.tiles[0] && (s.tiles[0].w ?? 0) > (s.tiles[0].h ?? 1) ? '260px' : '170px' }}>
                 {s.tiles.map(tile => <LiveThumb key={`${tile.index}-${tile.thumb}`} target={target} tile={tile} name={String(tile.index + 1).padStart(2, '0')} />)}
               </div>
             </section>
@@ -128,6 +130,6 @@ export function LiveArt({ target, project }: { target: string; project?: Project
         </div>
       )}
       <div className="card-foot"><Icon name="info" />{project ? t('art.liveFoot') : t('art.liveFootStoreOnly')}</div>
-    </Card>
+    </Section>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Prices.tsx b/apps/desktop/src/screens/tabs/Prices.tsx
index 4f51cb1..7dc37f3 100644
--- a/apps/desktop/src/screens/tabs/Prices.tsx
+++ b/apps/desktop/src/screens/tabs/Prices.tsx
@@ -1,6 +1,7 @@
 // Prices: what every product costs in every territory on both stores (`prices export --json`, read-only), the price
 // sheet as a CSV (save it anywhere, or write store/prices.csv for the terminal), and a price sheet compared with the
 // stores (`prices import --dry --json`) and applied as an owner action: dry run, native dialog, then the real run.
+import '../../styles/prices.css';
 import { useEffect, useMemo, useState } from 'react';
 import { api, errorText, type PricesCurrent, type PricesDiff, type Project } from '../../api';
 import { t } from '../../i18n';
@@ -10,7 +11,11 @@ import { changePct, diffSummary, priceMatrix, priceStats, type RegionRow, region
 import { type ReadState, useData, useRead, useWrite } from '../../store';
 import { type ExportItem, useExports, useRunExport } from '../../ui/Exports';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Card, Chip, Empty, ErrorNotice, Kpi, Notice, ReadControl, Skeleton } from '../../ui/kit';
+import { Chip, Empty, ErrorNotice, Notice, ReadControl, Skeleton } from '../../ui/kit';
+import { Section, StatTile } from '../../ui/ds';
+
+/** A region code as a small badge (the stores use ISO country codes; longer names stay as text). */
+const Region = ({ code }: { code: string }) => <span className={`px-region${code.length <= 3 ? ' code' : ''}`}>{code}</span>;
 import { WriteButton } from '../../ui/WriteButton';
 
 const GAP = 10;
@@ -18,7 +23,7 @@ const GAP = 10;
 function PriceStack({ r, apple, play }: { r: RegionRow | undefined; apple: boolean; play: boolean }) {
   if (!r) return <span className="muted small">–</span>;
   return (
-    <div className="px-stack">
+    <div className={`px-stack${r.gapPct !== null && r.gapPct >= GAP ? (r.gapPct > 25 ? ' gap-bad' : ' gap-warn') : ''}`}>
       {apple && <span className={`px-line${r.apple?.kind === 'auto' ? ' auto' : ''}`} title={r.apple?.kind === 'auto' ? t('prices.auto') : t('prices.manual')}><StoreGlyph store="ios" />{r.apple ? money(r.apple.price, r.apple.currency) : '–'}</span>}
       {play && <span className="px-line"><StoreGlyph store="android" />{r.play ? money(r.play.price, r.play.currency) : '–'}</span>}
       {r.gapPct !== null && r.gapPct >= GAP && <Chip tone={r.gapPct > 25 ? 'bad' : 'warn'} dot={false}>{`Δ ${num(r.gapPct, 0)} %`}</Chip>}
@@ -34,7 +39,7 @@ function SheetDiff({ project, diff, sheet, onApplied }: { project: Project; diff
   const sum = d ? diffSummary(d.diff, d.changed) : null;
   const name = sheet.csv ? sheet.csv.split(/[\\/]/).pop() : d?.csv.split(/[\\/]/).pop() ?? 'prices.csv';
   return (
-    <Card title={t('prices.diffTitle', { file: name ?? '' })} icon="layers" sub={d ? (diff.fromCache ? t('common.cachedFrom', { when: ago(diff.at) }) : t('common.readWhen', { when: ago(diff.at) })) : t('prices.diffSub')} pad={false}
+    <Section title={t('prices.diffTitle', { file: name ?? '' })} icon="layers" sub={d ? (diff.fromCache ? t('common.cachedFrom', { when: ago(diff.at) }) : t('common.readWhen', { when: ago(diff.at) })) : t('prices.diffSub')} pad={false}
       actions={<>
         <button className="btn btn-sm" onClick={diff.refresh} disabled={diff.loading}><Icon name="refresh" className={diff.loading ? 'spin' : undefined} />{t('prices.compareAgain')}</button>
         {sum && sum.pairs > 0 && <WriteButton run={w} primary icon="upload" w={{ method: 'owner.prices_import', args: sheet, title: t('prices.apply', { count: sum.pairs }), done: t('prices.applied'), after: onApplied }}>{t('prices.apply', { count: sum.pairs })}</WriteButton>}
@@ -51,8 +56,8 @@ function SheetDiff({ project, diff, sheet, onApplied }: { project: Project; diff
             {sum!.down > 0 && <Chip tone="ok" icon="arrowRight">{t('prices.dDown', { count: sum!.down })}</Chip>}
             <span className="small muted">{t('prices.dProducts', { list: sum!.products.join(', ') })}</span>
           </div>
-          <div className="table-wrap">
-            <table className="table">
+          <div className="ds-table-wrap">
+            <table className="table v2">
               <thead><tr><th>{t('col.item')}</th><th>{t('col.store')}</th><th>{t('col.region')}</th><th>{t('prices.colStarts')}</th><th className="right">{t('prices.colNow')}</th><th className="right">{t('prices.colNew')}</th><th className="right">{t('col.diff')}</th></tr></thead>
               <tbody>
                 {rows.slice(0, 200).map((r, i) => {
@@ -61,7 +66,7 @@ function SheetDiff({ project, diff, sheet, onApplied }: { project: Project; diff
                     <tr key={i}>
                       <td className="mono-id strong">{r.product}</td>
                       <td><span className="row small" style={{ gap: 6 }}><StoreGlyph store={r.store === 'apple' ? 'ios' : 'android'} className="ic13" />{r.store === 'apple' ? 'App Store' : 'Google Play'}</span></td>
-                      <td>{r.region}</td>
+                      <td><Region code={r.region} /></td>
                       <td className="small muted">{r.startDate ?? t('prices.now')}</td>
                       <td className="right num">{r.from === null ? '–' : money(r.from, r.currency)}</td>
                       <td className="right num strong">{money(r.to, r.currency)}</td>
@@ -76,7 +81,7 @@ function SheetDiff({ project, diff, sheet, onApplied }: { project: Project; diff
           <div className="card-foot"><Icon name="shield" />{t('prices.applyNote')}</div>
         </>
       )}
-    </Card>
+    </Section>
   );
 }
 
@@ -109,18 +114,18 @@ export function PricesTab({ project }: { project: Project }) {
     try { const f = await api.pickPriceSheet(project.id); if (f) setSheet({ csv: f }); } catch (x) { d.toast({ kind: 'bad', title: t('prices.pickFailed'), detail: errorText(x) }); }
   };
 
-  if (!e) return <Card><Skeleton lines={5} block /></Card>;
+  if (!e) return <div className="scr-prices"><Section><Skeleton lines={5} block /></Section></div>;
   if (!s?.products) {
     return (
-      <Card pad={false}>
+      <Section className="scr-prices">
         <Empty illo="catalog" title={t('prices.emptyTitle')}>{t('prices.emptyText')}</Empty>
         <div className="card-foot"><Icon name="terminal" /><code className="selectable">products: [{'{'} id, type, usd {'}'}]</code><span>{t('prices.emptyHint')}</span></div>
-      </Card>
+      </Section>
     );
   }
   return (
-    <>
-      <Card title={t('prices.sheetTitle')} icon="coins" sub={t('prices.sheetSub')}
+    <div className="scr-prices">
+      <Section title={t('prices.sheetTitle')} icon="coins" sub={t('prices.sheetSub')}
         actions={<button className="btn btn-sm btn-primary" onClick={() => runExport(exportItem)} disabled={!p}><Icon name="download" />{t('prices.exportCsv')}</button>}>
         <div className="act-grid">
           <div className="act-col">
@@ -136,33 +141,33 @@ export function PricesTab({ project }: { project: Project }) {
           </div>
         </div>
         <p className="small muted act-note"><Icon name="shield" />{t('prices.sheetNote')}</p>
-      </Card>
+      </Section>
 
       {sheet && <SheetDiff project={project} diff={diff} sheet={sheet} onApplied={() => { cur.refresh(); diff.refresh(); }} />}
 
       {cur.error && <ErrorNotice error={cur.error} keep={!!p} />}
       {!p ? (
-        cur.loading && !cur.error ? <Card><Skeleton lines={6} block /></Card> : (
-          <Card pad={false}>
+        cur.loading && !cur.error ? <Section><Skeleton lines={6} block /></Section> : (
+          <Section>
             <Empty illo="cloud" title={t('prices.notReadTitle')} actions={<button className="btn btn-primary" onClick={cur.refresh} disabled={cur.loading}><Icon name="refresh" />{t('prices.readNow')}</button>}>{t('prices.notReadText')}</Empty>
-          </Card>
+          </Section>
         )
       ) : (
         <>
-          <div className="kpis" style={{ gridTemplateColumns: 'repeat(4, minmax(0, 1fr))' }}>
-            <Kpi icon="tag" label={t('prices.kProducts')} value={stats!.products} sub={t('prices.kProductsSub', { count: stats!.rows })} />
-            <Kpi icon="globe" label={t('prices.kRegions')} value={stats!.regions} sub={withAuto ? t('prices.kRegionsAuto') : t('prices.kRegionsManual')} />
-            <Kpi icon="alert" label={t('prices.kGaps')} value={stats!.gaps} sub={t('prices.kGapsSub', { pct: GAP })} tone={stats!.gaps ? 'warn' : undefined} />
-            <Kpi icon="x" label={t('prices.kMissing')} value={stats!.missing} sub={stats!.missing ? p.missing.map(m => `${m.product} (${m.store === 'apple' ? 'App Store' : 'Play'})`).join(', ') : t('prices.kMissingNone')} tone={stats!.missing ? 'bad' : undefined} />
+          <div className="ds-grid px-stats">
+            <StatTile icon="tag" label={t('prices.kProducts')} value={stats!.products} sub={t('prices.kProductsSub', { count: stats!.rows })} />
+            <StatTile icon="globe" label={t('prices.kRegions')} value={stats!.regions} sub={withAuto ? t('prices.kRegionsAuto') : t('prices.kRegionsManual')} />
+            <StatTile icon="alert" label={t('prices.kGaps')} value={stats!.gaps} sub={t('prices.kGapsSub', { pct: GAP })} tone={stats!.gaps ? 'warn' : undefined} />
+            <StatTile icon="x" label={t('prices.kMissing')} value={stats!.missing} sub={stats!.missing ? p.missing.map(m => `${m.product} (${m.store === 'apple' ? 'App Store' : 'Play'})`).join(', ') : t('prices.kMissingNone')} tone={stats!.missing ? 'bad' : undefined} />
           </div>
-          <Card title={t('prices.overview')} icon="grid" sub={cur.fromCache ? t('common.cachedFrom', { when: ago(cur.at) }) : t('common.readWhen', { when: ago(cur.at) })} pad={false}
+          <Section title={t('prices.overview')} icon="grid" sub={cur.fromCache ? t('common.cachedFrom', { when: ago(cur.at) }) : t('common.readWhen', { when: ago(cur.at) })} pad={false}
             actions={<>
               <label className="check"><input type="checkbox" checked={withAuto} onChange={ev => setWithAuto(ev.target.checked)} />{t('prices.withAuto')}</label>
               <ReadControl r={cur} />
             </>}>
-            <div className="table-wrap">
-              <table className="table px-matrix">
-                <thead><tr><th>{t('col.item')}</th>{matrix!.regions.map(r => <th key={r}>{r}</th>)}</tr></thead>
+            <div className="ds-table-wrap">
+              <table className="table v2 px-matrix">
+                <thead><tr><th>{t('col.item')}</th>{matrix!.regions.map(r => <th key={r}><Region code={r} /></th>)}</tr></thead>
                 <tbody>
                   {matrix!.rows.map(row => (
                     <tr key={row.product} className={`clickable${row.product === sel ? ' sel' : ''}`} onClick={() => setProduct(row.product)}>
@@ -174,19 +179,19 @@ export function PricesTab({ project }: { project: Project }) {
               </table>
             </div>
             <div className="card-foot legend-row"><span><StoreGlyph store="ios" className="ic13" />App Store</span><span><StoreGlyph store="android" className="ic13" />Google Play</span><span className="px-line auto">{t('prices.autoLegend')}</span><span>{t('prices.gapLegend', { pct: GAP })}</span></div>
-          </Card>
-          <Card title={t('prices.perRegion', { product: sel })} icon="globe" sub={t('prices.perRegionSub', { count: regions.length })} pad={false}
+          </Section>
+          <Section title={t('prices.perRegion', { product: sel })} icon="globe" sub={t('prices.perRegionSub', { count: regions.length })} pad={false}
             actions={<>
               <select className="input input-sm" value={sel} onChange={ev => setProduct(ev.target.value)} aria-label={t('col.item')}>{p.products.map(x => <option key={x} value={x}>{x}</option>)}</select>
               <div className="search-input"><Icon name="search" /><input className="input input-sm" style={{ paddingLeft: 28 }} value={q} onChange={ev => setQ(ev.target.value)} placeholder={t('prices.searchRegion')} aria-label={t('prices.searchRegion')} /></div>
             </>}>
-            <div className="table-wrap" style={{ maxHeight: 520, overflowY: 'auto' }}>
-              <table className="table">
+            <div className="ds-table-wrap" style={{ ['--ds-table-max' as string]: '520px' }}>
+              <table className="table v2">
                 <thead><tr><th>{t('col.region')}</th>{apple && <th className="right">App Store</th>}{apple && <th>{t('prices.colKind')}</th>}{play && <th className="right">Google Play</th>}<th className="right">{t('col.priceGap')}</th></tr></thead>
                 <tbody>
                   {regions.map(r => (
-                    <tr key={r.region}>
-                      <td className="strong">{r.region}</td>
+                    <tr key={r.region} className={r.gapPct !== null && r.gapPct >= GAP ? (r.gapPct > 25 ? 'gap-bad' : 'gap-warn') : undefined}>
+                      <td className="strong"><Region code={r.region} /></td>
                       {apple && <td className="right num">{r.apple ? money(r.apple.price, r.apple.currency) : <span className="muted">–</span>}{r.scheduled && <div className="small muted">{t('prices.scheduled', { price: money(r.scheduled.price, r.scheduled.currency), date: r.scheduled.startDate ?? '' })}</div>}</td>}
                       {apple && <td>{r.apple ? <Chip tone={r.apple.kind === 'auto' ? 'neutral' : 'accent'}>{r.apple.kind === 'auto' ? t('prices.auto') : t('prices.manual')}</Chip> : null}</td>}
                       {play && <td className="right num">{r.play ? money(r.play.price, r.play.currency) : <span className="muted">–</span>}</td>}
@@ -196,10 +201,10 @@ export function PricesTab({ project }: { project: Project }) {
                 </tbody>
               </table>
             </div>
-          </Card>
+          </Section>
           {p.missing.length > 0 && <Notice tone="warn">{t('prices.missingNote', { list: p.missing.map(m => `${m.product} (${m.store === 'apple' ? 'App Store' : 'Google Play'})`).join(', ') })}</Notice>}
         </>
       )}
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Releases.tsx b/apps/desktop/src/screens/tabs/Releases.tsx
index 29a4c53..498306e 100644
--- a/apps/desktop/src/screens/tabs/Releases.tsx
+++ b/apps/desktop/src/screens/tabs/Releases.tsx
@@ -3,7 +3,7 @@
 // resubmit / in-app purchases and the Google Play production release as owner actions, the Play steps without an API
 // as console plans. Releasing an approved version (manual release) stays in App Store Connect.
 import { plainError } from '../../../../../cli/lib/google-errors';
-import { useState } from 'react';
+import { type CSSProperties, type ReactNode, useState } from 'react';
 import type { AppStatus, ReleaseTrain, StoreRelease } from '../../api';
 import { laneGap, storesDiffer } from '../../../../../cli/lib/train';
 import type { UnifiedApp } from '../../lib/identity';
@@ -14,8 +14,10 @@ import { type Lane, STAGES, type TestFlightStatus, trainLanes, versionHistory }
 import { useData, useRead, useWrite } from '../../store';
 import { Icon, StoreGlyph } from '../../ui/icons';
 import { RolloutBar } from '../../ui/charts';
-import { Card, Chip, Empty, Notice, PhaseChip, phaseLabel, Skeleton, storeName } from '../../ui/kit';
+import { Card, Empty, Notice, PhaseChip, phaseLabel, Skeleton, storeName } from '../../ui/kit';
+import { EmptyState, Section, StatusPill, tintStyle, useTint } from '../../ui/ds';
 import { AppleSubmitCard, PlayProductionCard } from './Submit';
+import '../../styles/releases.css';
 
 const STAGE_KEY: Record<(typeof STAGES)[number], Key> = { build: 'stage.build', testing: 'stage.testing', review: 'stage.review', live: 'stage.live', rollout: 'stage.rollout' };
 
@@ -39,32 +41,55 @@ function gapText(lane: Lane, version: string, st: AppStatus): { who: string; lin
   return { kind: g.kind, who: t('tl.notOnStore'), line: t('tl.notOnStore') };
 }
 
-function LaneRow({ lane, version, st }: { lane: Lane; version: string; st: AppStatus }) {
+/** One store's card of a release train: store mark, version (build), the current state as a pill, the five stages
+ *  as a stepper, a big rollout ring when it is rolling out, and that store's rollout controls. */
+function LaneRow({ lane, version, st, app }: { lane: Lane; version: string; st: AppStatus; app: UnifiedApp }) {
   const r = lane.release;
   const gap = lane.at < 0 ? gapText(lane, version, st) : null;
+  const ph = r ? phaseLabel(r) : null;
+  const rolling = lane.at === STAGES.length - 1 && lane.share !== null;
+  const ringTone = lane.tone === 'bad' ? 'bad' : (lane.share ?? 0) >= 1 ? 'ok' : 'accent';
   return (
-    <div className="tl-lane">
-      <div className="tl-who">
-        <StoreGlyph store={lane.store} />
-        <div>
-          <div className="w1">{storeName(lane.store)}</div>
-          <div className="w2">{r ? `${r.version ?? version}${r.build ? ` (${r.build})` : ''}` : gap!.who}</div>
+    <article className="tl-lane rel-store" data-store={lane.store} data-tone={lane.tone} aria-label={storeName(lane.store)}>
+      <header className="rel-store-h">
+        <span className="rel-mark"><StoreGlyph store={lane.store} /></span>
+        <div className="rel-who">
+          <div className="rel-store-name">{storeName(lane.store)}</div>
+          <div className="rel-store-ver num">{r ? `${r.version ?? version}${r.build ? ` (${r.build})` : ''}` : gap!.who}</div>
         </div>
-      </div>
-      {gap ? <div className="tl-none" data-gap={gap.kind}>{gap.line}</div> : STAGES.map((s, i) => {
-        const cls = i < lane.at ? 'done' : i === lane.at ? `cur ${lane.tone}` : '';
-        const last = s === 'rollout';
-        return (
-          <div key={s} className={`tl-step ${cls}${i === 0 ? ' first' : ''}`} title={i === lane.at ? r?.state : undefined}>
-            <span className="tl-node">{i < lane.at && <Icon name="check" />}</span>
-            {last && i === lane.at && lane.share !== null ? (
-              <div className="tl-roll"><RolloutBar value={lane.share} tone={lane.tone === 'bad' ? 'bad' : lane.share >= 1 ? 'ok' : 'accent'} label={t('tl.rolloutAria')} />
-                <span className="pct">{lane.share >= 1 ? t('tl.everyone') : `${share(lane.share)}${r?.phased?.day ? ` · ${t('tl.day', { day: r.phased.day })}` : ''}`}</span></div>
-            ) : <span className="tl-cap">{stageCaption(lane, i)}</span>}
-          </div>
-        );
-      })}
-    </div>
+        {ph && <StatusPill tone={ph.tone} title={r?.state} solid={lane.tone === 'bad'}>{ph.text}</StatusPill>}
+      </header>
+      {gap ? <div className="tl-none rel-gap" data-gap={gap.kind}><Icon name={gap.kind === 'unreadable' ? 'alert' : 'info'} />{gap.line}</div> : (
+        <div className={`rel-body${rolling ? ' has-ring' : ''}`}>
+          <ol className="rel-steps" aria-label={t('v2rel.stages', { store: storeName(lane.store) })}>
+            {STAGES.map((s, i) => {
+              const cls = i < lane.at ? 'done' : i === lane.at ? `cur ${lane.tone}` : 'todo';
+              const cap = stageCaption(lane, i);
+              return (
+                <li key={s} className={`rel-step ${cls}`} title={i === lane.at ? r?.state : undefined} aria-current={i === lane.at ? 'step' : undefined}>
+                  <span className="rel-node">{i < lane.at ? <Icon name="check" /> : <span className="num">{i + 1}</span>}</span>
+                  <span className="rel-step-l">{t(STAGE_KEY[s])}</span>
+                  {cap && <span className="rel-step-c">{cap}</span>}
+                </li>
+              );
+            })}
+          </ol>
+          {rolling && lane.share !== null && (
+            <div className={`tl-roll rel-ring-wrap ${ringTone}`}>
+              <div className="rel-ring" style={{ '--p': String(Math.round(Math.min(1, lane.share) * 100)) } as CSSProperties} aria-hidden="true">
+                <span className="rel-ring-v num">{lane.share >= 1 ? '100' : Math.round(lane.share * 100)}<small>%</small></span>
+              </div>
+              <div className="rel-ring-side">
+                <span className="pct">{lane.share >= 1 ? t('tl.everyone') : `${share(lane.share)}${r?.phased?.day ? ` · ${t('tl.day', { day: r.phased.day })}` : ''}`}</span>
+                <span className="rel-ring-sub">{t('v2rel.ofUsers')}</span>
+                <RolloutBar value={lane.share} tone={ringTone} label={t('tl.rolloutAria')} />
+              </div>
+            </div>
+          )}
+        </div>
+      )}
+      {r && app.project && <RolloutControls app={app} r={r} />}
+    </article>
   );
 }
 
@@ -122,19 +147,22 @@ function Train({ title, train, tf, tone, app, st }: { title: string; train: Rele
   // "Live" only when a store has it live or rolling out; a Play release whose store page could not be checked is not
   const label = differ ? t('tl.current') : tone === 'ok' && !lanes.some(l => l.release && ['live', 'rollout', 'halted'].includes(l.release.phase)) ? t('tl.released') : title;
   const ver = differ ? t('tl.bothVersions', { play: differ.android, ios: differ.ios }) : train.version;
+  const created = train.ios?.date ? t('tl.created', { date: date(train.ios.date) }) : null;
   return (
-    <Card pad={false} title={<span className="train-head"><span className="ver">{ver}</span><Chip tone={differ ? 'neutral' : tone === 'ok' && label !== title ? 'info' : tone}>{label}</Chip></span>}
-      sub={[train.ios?.date ? t('tl.created', { date: date(train.ios.date) }) : null].filter(Boolean).join(' · ') || undefined}>
-      <div className="tl" style={{ paddingTop: 12 }}>
-        <div className="tl-head"><span>{t('tl.store')}</span>{STAGES.map(s => <span key={s}>{t(STAGE_KEY[s])}</span>)}</div>
-        {lanes.map(l => <LaneRow key={l.store} lane={l} version={train.version} st={st} />)}
-      </div>
-      {lanes.some(l => l.release) && app.project && (
-        <div className="card-foot roll-foot">
-          {lanes.map(l => l.release && <RolloutControls key={l.store} app={app} r={l.release} />)}
+    <section className={`rel-train ${tone}`} aria-label={`${label} ${ver}`}>
+      <header className="rel-train-h">
+        <div className="rel-train-title">
+          <span className="rel-train-eyebrow">{t('v2rel.version')}</span>
+          <span className="rel-train-ver num">{ver}</span>
         </div>
-      )}
-    </Card>
+        <StatusPill tone={differ ? 'neutral' : tone === 'ok' && label !== title ? 'info' : tone} solid={tone === 'accent' && !differ}>{label}</StatusPill>
+        <span className="grow" />
+        {created && <span className="rel-train-meta"><Icon name="clock" />{created}</span>}
+      </header>
+      <div className="rel-lanes">
+        {lanes.map(l => <LaneRow key={l.store} lane={l} version={train.version} st={st} app={app} />)}
+      </div>
+    </section>
   );
 }
 
@@ -142,22 +170,26 @@ export function ReleasesTab({ app }: { app: UnifiedApp }) {
   const d = useData();
   const l = d.liveFor(app);
   const project = app.project;
+  const hue = useTint(d.iconFor(app), app.name);
   const tf = useRead<TestFlightStatus>(app.target, 'apple.testflight_status', { network: true, title: 'TestFlight', skip: !app.ios && !d.statusFor(app)?.app?.platforms.ios });
   const sum = project ? d.statusOf(project)?.summary : null;
   const submit = project && (sum?.apple || sum?.play) ? (
-    <section className="stack" aria-labelledby="sub-section" data-section="submit">
-      <h2 id="sub-section" className="section-h row" style={{ gap: 8 }}><Icon name="send" />{t('sub.section')}</h2>
-      <div className="grid g2" style={{ alignItems: 'start' }}>
+    <section className="rel-submit stack" aria-labelledby="sub-section" data-section="submit">
+      <div className="rel-sec-h">
+        <h2 id="sub-section" className="rel-sec-title"><span className="ds-sec-ic"><Icon name="send" /></span>{t('sub.section')}</h2>
+        <p className="rel-sec-sub">{t('releases.ownerNote')}</p>
+      </div>
+      <div className="rel-submit-grid">
         {sum?.apple && <AppleSubmitCard app={app} project={project} />}
         {sum?.play && <PlayProductionCard app={app} project={project} />}
       </div>
-      <p className="small muted">{t('releases.ownerNote')}</p>
     </section>
   ) : null;
+  const wrap = (children: ReactNode) => <div className="scr-releases" style={tintStyle(hue)}>{children}</div>;
 
-  if (!l && d.portfolioBusy === 'live') return <><Card><Skeleton lines={5} block /></Card>{submit}</>;
+  if (!l && d.portfolioBusy === 'live') return wrap(<><Card><Skeleton lines={5} block /></Card>{submit}</>);
   if (!l) {
-    return (
+    return wrap(
       <>
       <Card pad={false}>
         <Empty illo="cloud" title={t('releases.notReadTitle')} actions={<>
@@ -166,12 +198,12 @@ export function ReleasesTab({ app }: { app: UnifiedApp }) {
         </>}>{t('releases.notReadText')}</Empty>
       </Card>
       {submit}
-      </>
+      </>,
     );
   }
   const history = versionHistory(l.release.all ?? []);
   const errs = Object.entries(l.storeErrors);
-  return (
+  return wrap(
     <>
       {errs.map(([s, msg]) => {
         const when = l.staleStores?.[s as 'ios'];
@@ -179,17 +211,18 @@ export function ReleasesTab({ app }: { app: UnifiedApp }) {
       })}
       {l.release.next && <Train title={t('tl.next')} train={l.release.next} tf={tf.data} tone="accent" app={app} st={l} />}
       {l.release.current && <Train title={t('tl.live')} train={l.release.current} tf={tf.data} tone="ok" app={app} st={l} />}
-      {!l.release.next && !l.release.current && <Card pad={false}><Empty compact illo="unknown" title={t('releases.noVersions')}>{t('releases.noVersionsText')}</Empty></Card>}
+      {!l.release.next && !l.release.current && <Section><EmptyState icon="layers">{t('releases.noVersions')} {t('releases.noVersionsText')}</EmptyState></Section>}
 
-      <Card title={t('releases.history')} icon="layers" sub={t('releases.historySub', { when: ago(d.live?.at ?? d.portfolio?.at) })} pad={false}>
+      <Section title={t('releases.history')} icon="layers" sub={t('releases.historySub', { when: ago(d.live?.at ?? d.portfolio?.at) })} pad={false} className="rel-history"
+        actions={history.length ? <span className="rel-count">{t('v2rel.versions', { count: history.length })}</span> : undefined}>
         {history.length ? (
-          <div className="table-wrap">
-            <table className="table">
+          <div className="ds-table-wrap">
+            <table className="table v2">
               <thead><tr><th>{t('col.version')}</th><th>App Store</th><th>{t('col.build')}</th><th>Google Play</th><th>{t('col.versionCode')}</th><th>{t('col.track')}</th></tr></thead>
               <tbody>
                 {history.map(h => (
                   <tr key={h.version}>
-                    <td className="strong num">{[...new Set([h.version, h.ios?.version, h.android?.version].filter(Boolean))].join(' / ')}</td>
+                    <td className="strong num rel-hv">{[...new Set([h.version, h.ios?.version, h.android?.version].filter(Boolean))].join(' / ')}</td>
                     <td>{h.ios ? <PhaseChip r={h.ios} /> : <span className="muted small">–</span>}</td>
                     <td className="num muted">{h.ios?.build ?? '–'}</td>
                     <td>{h.android ? <PhaseChip r={h.android} /> : <span className="muted small">–</span>}</td>
@@ -200,10 +233,10 @@ export function ReleasesTab({ app }: { app: UnifiedApp }) {
               </tbody>
             </table>
           </div>
-        ) : <Empty compact illo="unknown" title={t('releases.noVersions')} />}
-      </Card>
+        ) : <div className="ds-sec-b"><EmptyState icon="layers">{t('releases.noVersions')}</EmptyState></div>}
+      </Section>
 
       {submit}
-    </>
+    </>,
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Reviews.tsx b/apps/desktop/src/screens/tabs/Reviews.tsx
index 95b5348..d5a8152 100644
--- a/apps/desktop/src/screens/tabs/Reviews.tsx
+++ b/apps/desktop/src/screens/tabs/Reviews.tsx
@@ -7,10 +7,12 @@ import type { UnifiedApp } from '../../lib/identity';
 import { t } from '../../i18n';
 import { date, num } from '../../lib/format';
 import { draftName, filterReviews, type Review, type ReviewFilter, starStats } from '../../lib/model';
-import { useRead, useWrite } from '../../store';
+import { useData, useRead, useWrite } from '../../store';
 import { WriteButton } from '../../ui/WriteButton';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Bar, Card, Chip, Empty, ErrorFoot, ReadControl, Seg, Skeleton, Stars } from '../../ui/kit';
+import { Bar, ErrorFoot, ReadControl, Seg, Skeleton, Stars } from '../../ui/kit';
+import { EmptyState, Section, StatusPill, tintStyle, Toolbar, useTint } from '../../ui/ds';
+import '../../styles/reviews.css';
 import { exportName, reviewsCsv } from '../../lib/exports';
 import { useExports } from '../../ui/Exports';
 
@@ -29,57 +31,60 @@ function Detail({ r, draft, w, onChanged }: { r: Review; draft: ReplyDraft | und
   const live = text && INCENTIVE.some(x => x.test(text)) ? t('reviews.incentive') : len > limit ? t('reviews.tooLong', { limit }) : null;
   const file = draft ? base(draft.file) : '';
   return (
-    <Card className="rv-detail" title={<span className="row" style={{ gap: 10 }}><Stars n={r.rating} />{r.title || t('reviews.noTitle')}</span>}
-      sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store={r.store === 'apple' ? 'ios' : 'android'} className="ic13" />{r.store === 'apple' ? 'App Store' : 'Google Play'}{r.where ? ` · ${r.where}` : ''} · {date(r.date)}{r.appVersion ? ` · ${t('reviews.version', { v: r.appVersion })}` : ''}</span>}>
-      <div className="stack" style={{ gap: 16 }}>
-        <p className="quote selectable">{r.body || t('reviews.noText')}</p>
-        {r.reply && (
-          <div className="stack" style={{ gap: 6 }}>
-            <span className="label">{t('reviews.currentReply')}{r.reply.date ? ` · ${date(r.reply.date)}` : ''}</span>
-            <div className="reply-box selectable">{r.reply.text}</div>
-          </div>
-        )}
-        <hr className="divider" />
-        <div className="stack" style={{ gap: 8 }}>
-          <div className="row between">
-            <span className="label">{t('reviews.draft')}</span>
-            {draft && (draft.sent ? <Chip tone="ok">{t('reviews.sentOn', { date: date(draft.sent) })}</Chip> : draft.approved ? <Chip tone="ok" icon="check">{t('reviews.approved')}</Chip> : <Chip tone="neutral">{t('reviews.notApproved')}</Chip>)}
-          </div>
-          {!draft ? <p className="muted small">{t('reviews.noDraft')}</p> : draft.sent ? (
-            <div className="reply-box selectable">{draft.reply}</div>
-          ) : (
-            <>
-              <textarea className="input reply-edit" rows={5} value={text} onChange={e => setText(e.target.value)} aria-label={t('reviews.replyEditor')} placeholder={t('reviews.replyPlaceholder')} />
-              <div className="row small muted" style={{ gap: 10 }}>
-                <span className={`num${len > limit ? ' tbad' : ''}`}>{t('reviews.chars', { n: num(len), limit })}</span><span className="mono-id">{file}</span>
-                {dirty && <Chip tone="warn" dot={false}>{t('reviews.unsaved')}</Chip>}
-              </div>
-              {live && <ul className="issues"><li className="e"><Icon name="alertCircle" />{live}</li></ul>}
-              {!dirty && draft.issues.length > 0 && (
-                <ul className="issues">
-                  {draft.issues.map((i, n) => <li key={n} className={i.level === 'error' ? 'e' : 'w'}><Icon name={i.level === 'error' ? 'alertCircle' : 'alert'} />{i.msg}</li>)}
-                </ul>
-              )}
-              <div className="actions">
-                <WriteButton run={w} icon="check" primary={dirty} disabled={!dirty || !text.trim() || text.trim().startsWith('-') || len > 6000}
-                  w={{ method: 'reviews.reply', args: { file, text: text.trim() }, title: t('reviews.save'), done: t('reviews.saved'), after: onChanged }}>{t('reviews.save')}</WriteButton>
-                {draft.approved
-                  ? <WriteButton run={w} icon="x" disabled={dirty} w={{ method: 'reviews.approve', args: { file, undo: true }, title: t('reviews.unapprove'), done: t('reviews.unapproved'), after: onChanged }}>{t('reviews.unapprove')}</WriteButton>
-                  : <WriteButton run={w} icon="check" disabled={dirty || !draft.reply || errors.length > 0} hint={errors.length ? t('reviews.fixFirst') : t('reviews.approveHint')}
-                    w={{ method: 'reviews.approve', args: { file }, title: t('reviews.approve'), done: t('reviews.approvedToast'), after: onChanged }}>{t('reviews.approve')}</WriteButton>}
-                <WriteButton run={w} icon="send" primary={draft.approved && !dirty} disabled={!draft.approved || dirty || errors.length > 0} hint={t('reviews.sendHint')}
-                  w={{ method: 'owner.reply_send', args: { file }, title: t('reviews.send'), done: t('reviews.sent'), after: onChanged }}>{t('reviews.send')}</WriteButton>
-              </div>
-            </>
-          )}
-          <p className="small muted">{t('reviews.sendNoteD3')}</p>
-        </div>
+    <section className="rv2-detail rv-detail" aria-label={r.title || t('reviews.noTitle')}>
+      <div className="rv2-d-head">
+        <Stars n={r.rating} />
+        <h2>{r.title || t('reviews.noTitle')}</h2>
+        <span className="rv2-meta"><StoreGlyph store={r.store === 'apple' ? 'ios' : 'android'} className="ic13" />{r.store === 'apple' ? 'App Store' : 'Google Play'}{r.where ? <span className="rv2-lang"><Icon name="globe" />{r.where}</span> : null}<span>{date(r.date)}</span>{r.appVersion ? <span>{t('reviews.version', { v: r.appVersion })}</span> : null}</span>
       </div>
-    </Card>
+      <p className="rv2-body quote selectable">{r.body || t('reviews.noText')}</p>
+      {r.reply && (
+        <div className="rv2-dev">
+          <span className="rv2-dev-l"><Icon name="message" />{t('reviews.currentReply')}{r.reply.date ? ` · ${date(r.reply.date)}` : ''}</span>
+          <div className="reply-box selectable">{r.reply.text}</div>
+        </div>
+      )}
+      <div className="rv2-draft">
+        <div className="rv2-draft-h">
+          <span className="rv2-draft-l"><Icon name="edit" />{t('reviews.draft')}</span>
+          {draft && (draft.sent ? <StatusPill tone="ok" solid>{t('reviews.sentOn', { date: date(draft.sent) })}</StatusPill> : draft.approved ? <StatusPill tone="ok" icon="check">{t('reviews.approved')}</StatusPill> : <StatusPill tone="neutral">{t('reviews.notApproved')}</StatusPill>)}
+        </div>
+        {!draft ? <p className="muted small">{t('reviews.noDraft')}</p> : draft.sent ? (
+          <div className="reply-box selectable">{draft.reply}</div>
+        ) : (
+          <>
+            <textarea className="input reply-edit" rows={5} value={text} onChange={e => setText(e.target.value)} aria-label={t('reviews.replyEditor')} placeholder={t('reviews.replyPlaceholder')} />
+            <div className="rv2-count">
+              <span className={`num${len > limit ? ' tbad' : ''}`}>{t('reviews.chars', { n: num(len), limit })}</span><span className="mono-id">{file}</span>
+              {dirty && <StatusPill tone="warn">{t('reviews.unsaved')}</StatusPill>}
+            </div>
+            {live && <ul className="issues"><li className="e"><Icon name="alertCircle" />{live}</li></ul>}
+            {!dirty && draft.issues.length > 0 && (
+              <ul className="issues">
+                {draft.issues.map((i, n) => <li key={n} className={i.level === 'error' ? 'e' : 'w'}><Icon name={i.level === 'error' ? 'alertCircle' : 'alert'} />{i.msg}</li>)}
+              </ul>
+            )}
+            <div className="actions">
+              <WriteButton run={w} icon="check" primary={dirty} disabled={!dirty || !text.trim() || text.trim().startsWith('-') || len > 6000}
+                w={{ method: 'reviews.reply', args: { file, text: text.trim() }, title: t('reviews.save'), done: t('reviews.saved'), after: onChanged }}>{t('reviews.save')}</WriteButton>
+              {draft.approved
+                ? <WriteButton run={w} icon="x" disabled={dirty} w={{ method: 'reviews.approve', args: { file, undo: true }, title: t('reviews.unapprove'), done: t('reviews.unapproved'), after: onChanged }}>{t('reviews.unapprove')}</WriteButton>
+                : <WriteButton run={w} icon="check" disabled={dirty || !draft.reply || errors.length > 0} hint={errors.length ? t('reviews.fixFirst') : t('reviews.approveHint')}
+                  w={{ method: 'reviews.approve', args: { file }, title: t('reviews.approve'), done: t('reviews.approvedToast'), after: onChanged }}>{t('reviews.approve')}</WriteButton>}
+              <WriteButton run={w} icon="send" primary={draft.approved && !dirty} disabled={!draft.approved || dirty || errors.length > 0} hint={t('reviews.sendHint')}
+                w={{ method: 'owner.reply_send', args: { file }, title: t('reviews.send'), done: t('reviews.sent'), after: onChanged }}>{t('reviews.send')}</WriteButton>
+            </div>
+          </>
+        )}
+        <p className="small muted">{t('reviews.sendNoteD3')}</p>
+      </div>
+    </section>
   );
 }
 
 export function ReviewsTab({ app }: { app: UnifiedApp }) {
+  const d = useData();
+  const hue = useTint(d.iconFor(app), app.name);
   const project = app.project;
   const list = useRead<Review[]>(app.target, 'reviews.list', { network: true, args: { days: 30 }, title: t('tab.reviews'), appName: app.name });
   const drafts = useRead<DraftsResult>(app.target, 'reviews.drafts', { network: false, skip: !project });
@@ -98,69 +103,79 @@ export function ReviewsTab({ app }: { app: UnifiedApp }) {
     disabled: list.data ? false : t('export.readFirst'), build: () => reviewsCsv(shown.length ? shown : all) }]);
 
   if (!list.data) {
-    if (list.loading && !list.error) return <Card><Skeleton lines={5} block /></Card>;
+    if (list.loading && !list.error) return <div className="scr-reviews" style={tintStyle(hue)}><Section><Skeleton lines={5} block /></Section></div>;
     return (
-      <Card pad={false}>
-        <Empty illo="reviews" title={t('reviews.emptyTitle')} actions={<button className="btn btn-primary" onClick={list.refresh}><Icon name="refresh" />{t('reviews.read')}</button>}>{t('reviews.emptyText')}</Empty>
-        {list.error && <ErrorFoot error={list.error} />}
-      </Card>
+      <div className="scr-reviews" style={tintStyle(hue)}>
+        <Section>
+          <EmptyState icon="message" action={<button className="btn btn-primary" onClick={list.refresh}><Icon name="refresh" />{t('reviews.read')}</button>}>
+            <b>{t('reviews.emptyTitle')}</b><br />{t('reviews.emptyText')}
+          </EmptyState>
+          {list.error && <ErrorFoot error={list.error} />}
+        </Section>
+      </div>
     );
   }
 
   const toggleStar = (n: number) => setF(x => ({ ...x, stars: x.stars.includes(n) ? x.stars.filter(s => s !== n) : [...x.stars, n] }));
   return (
-    <>
-      <div className="row between">
-        <ReadControl r={list} />
-        <div className="actions">
+    <div className="scr-reviews" style={tintStyle(hue)}>
+      <section className="rv2-sum" aria-label={t('reviews.ratings')}>
+        <div className="rv2-avg">
+          <b className="num">{stats.average !== null ? num(stats.average, 1) : '–'}</b>
+          <Stars n={Math.round(stats.average ?? 0)} />
+          <span>{t('reviews.count', { count: stats.count })}</span>
+        </div>
+        <div className="rv2-dist" role="group" aria-label={t('reviews.ratings')}>
+          {[5, 4, 3, 2, 1].map(n => (
+            <button key={n} type="button" className="rv2-dist-row" onClick={() => toggleStar(n)} aria-pressed={f.stars.includes(n)} data-dim={f.stars.length > 0 && !f.stars.includes(n) ? '' : undefined}>
+              <span className="num">{n}<Icon name="star" weight="fill" /></span><Bar value={stats.count ? stats.byStar[n - 1]! / stats.count : 0} tone="warn" label={`${n}`} /><span className="num">{stats.byStar[n - 1]}</span>
+            </button>
+          ))}
+        </div>
+        <div className="rv2-side">
+          <div className="rv2-unans"><b className="num">{num(stats.unanswered)}</b><span>{t('reviews.unansweredN', { count: stats.unanswered })}</span></div>
+          <ReadControl r={list} />
           {project && <WriteButton run={w} icon="text" hint={t('reviews.makeDraftsHint')} w={{ method: 'reviews.draft', args: { days: 30 }, title: t('reviews.makeDrafts'), done: t('reviews.draftsMade'), after: changed }}>{t('reviews.makeDrafts')}</WriteButton>}
         </div>
-      </div>
-      <div className="rv">
-        <div className="stack" style={{ gap: 16 }}>
-          <Card title={t('reviews.ratings')} icon="star">
-            <div className="stack" style={{ gap: 14 }}>
-              <div className="big-rating"><b>{stats.average !== null ? num(stats.average, 1) : '–'}</b><Stars n={Math.round(stats.average ?? 0)} /></div>
-              <span className="small muted">{t('reviews.count', { count: stats.count })} · {t('reviews.unansweredN', { count: stats.unanswered })}</span>
-              <div className="dist">
-                {[5, 4, 3, 2, 1].map(n => (
-                  <button key={n} className="dist-row" onClick={() => toggleStar(n)} aria-pressed={f.stars.includes(n)} style={{ all: 'unset', display: 'grid', gridTemplateColumns: '26px 1fr 30px', alignItems: 'center', gap: 8, cursor: 'pointer', fontSize: 12, opacity: f.stars.length && !f.stars.includes(n) ? 0.45 : 1 }}>
-                    <span className="num">{n}★</span><Bar value={stats.count ? stats.byStar[n - 1]! / stats.count : 0} tone="warn" label={`${n}`} /><span className="num right">{stats.byStar[n - 1]}</span>
-                  </button>
-                ))}
-              </div>
-            </div>
-          </Card>
-          <Card title={t('reviews.filter')} icon="search">
-            <div className="form">
-              <Seg value={f.store} onChange={store => setF(x => ({ ...x, store }))} label={t('reviews.store')} options={[['all', t('reviews.all')], ['apple', 'App Store'], ['play', 'Google Play']]} />
-              <label className="check"><input type="checkbox" checked={f.unanswered} onChange={e => setF(x => ({ ...x, unanswered: e.target.checked }))} />{t('reviews.onlyUnanswered')}</label>
-              <div className="search-input"><Icon name="search" /><input className="input" value={f.query} onChange={e => setF(x => ({ ...x, query: e.target.value }))} placeholder={t('reviews.search')} aria-label={t('reviews.search')} /></div>
-            </div>
-          </Card>
-        </div>
-        <Card title={t('reviews.inbox')} icon="message" sub={t('reviews.shown', { count: shown.length })} pad={false}>
+      </section>
+      <Toolbar label={t('reviews.filter')}>
+        <div className="search-input"><Icon name="search" /><input className="input" value={f.query} onChange={e => setF(x => ({ ...x, query: e.target.value }))} placeholder={t('reviews.search')} aria-label={t('reviews.search')} /></div>
+        <Seg value={f.store} onChange={store => setF(x => ({ ...x, store }))} label={t('reviews.store')} options={[['all', t('reviews.all')], ['apple', 'App Store'], ['play', 'Google Play']]} />
+        <label className="check"><input type="checkbox" checked={f.unanswered} onChange={e => setF(x => ({ ...x, unanswered: e.target.checked }))} />{t('reviews.onlyUnanswered')}</label>
+        <span className="grow" />
+        <span className="rv2-shown">{t('reviews.shown', { count: shown.length })}</span>
+      </Toolbar>
+      <div className="rv2">
+        <div className="rv2-feed">
           {shown.length ? (
-            <div className="inbox" role="listbox" aria-label={t('reviews.inbox')}>
+            <div className="rv2-list inbox" role="listbox" aria-label={t('reviews.inbox')}>
               {shown.map(r => {
                 const dr = byFile.get(draftName(r));
                 const k = `${r.store}:${r.id}`;
                 return (
-                  <button key={k} role="option" aria-selected={cur === r} className="inbox-item" onClick={() => setSel(k)}>
-                    <span className="t1"><Stars n={r.rating} /><StoreGlyph store={r.store === 'apple' ? 'ios' : 'android'} className="ic13" /><span>{r.where ?? ''}</span><span className="grow" />
-                      {r.reply ? <Chip tone="ok" dot={false}>{t('reviews.answered')}</Chip> : dr?.approved ? <Chip tone="accent" dot={false}>{t('reviews.approved')}</Chip> : dr ? <Chip tone="neutral" dot={false}>{t('reviews.drafted')}</Chip> : null}
-                      <span>{date(r.date)}</span></span>
-                    {r.title && <span className="t2">{r.title}</span>}
-                    <span className="t3">{r.body}</span>
+                  <button key={k} type="button" role="option" aria-selected={cur === r} className="rv2-card inbox-item" onClick={() => setSel(k)}>
+                    <span className="rv2-c-top">
+                      <Stars n={r.rating} />
+                      <span className="rv2-c-date">{date(r.date)}</span>
+                      <span className="grow" />
+                      {r.reply ? <StatusPill tone="ok" icon="check">{t('reviews.answered')}</StatusPill> : dr?.approved ? <StatusPill tone="accent">{t('reviews.approved')}</StatusPill> : dr ? <StatusPill tone="neutral">{t('reviews.drafted')}</StatusPill> : <StatusPill tone="warn">{t('v2ins.rvOpen')}</StatusPill>}
+                    </span>
+                    {r.title && <span className="rv2-c-title">{r.title}</span>}
+                    <span className="rv2-c-body">{r.body}</span>
+                    <span className="rv2-c-foot">
+                      <StoreGlyph store={r.store === 'apple' ? 'ios' : 'android'} className="ic13" />{r.store === 'apple' ? 'App Store' : 'Google Play'}
+                      {r.where && <span className="rv2-lang"><Icon name="globe" />{r.where}</span>}
+                      {r.appVersion && <span>{t('reviews.version', { v: r.appVersion })}</span>}
+                    </span>
                   </button>
                 );
               })}
             </div>
-          ) : <Empty compact illo="reviews" title={t('reviews.noMatch')} />}
-        </Card>
+          ) : <Section><EmptyState icon="search">{t('reviews.noMatch')}</EmptyState></Section>}
+        </div>
         {cur ? <Detail r={cur} draft={byFile.get(draftName(cur))} w={w} onChanged={changed} />
-          : <Card className="rv-detail"><Empty compact illo="reviews" title={t('reviews.pick')} /></Card>}
+          : <Section className="rv2-detail rv-detail"><EmptyState icon="message">{t('reviews.pick')}</EmptyState></Section>}
       </div>
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Submit.tsx b/apps/desktop/src/screens/tabs/Submit.tsx
index 85094ed..42adafb 100644
--- a/apps/desktop/src/screens/tabs/Submit.tsx
+++ b/apps/desktop/src/screens/tabs/Submit.tsx
@@ -6,7 +6,8 @@
 // versionCodes on Play to pick by number and Send to production (`play release --version-code n --production ...`),
 // the managed-publishing warning, and the console steps Play has no API for (production countries, "Send changes for
 // review" in Publishing overview) as console plans with a deep link.
-import { useState } from 'react';
+// v2: each store is a numbered checklist (ready / blocked / to do per step) that ends in its one primary button.
+import { type ReactNode, useState } from 'react';
 import { api, type Project } from '../../api';
 import { type Key, t } from '../../i18n';
 import { ago, date } from '../../lib/format';
@@ -15,15 +16,57 @@ import type { UnifiedApp } from '../../lib/identity';
 import { useData, useRead } from '../../store';
 import { ConsolePlanButton } from '../../ui/ConsolePlan';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Card, Chip, Empty, ErrorNotice, Notice, ReadControl, Seg, Skeleton } from '../../ui/kit';
+import { Chip, ErrorNotice, Notice, ReadControl, Seg, Skeleton } from '../../ui/kit';
+import { EmptyState, StatusPill } from '../../ui/ds';
 import { OwnerAction } from '../../ui/OwnerAction';
 import { ascUrl, PLAY_CONSOLE } from '../AppView';
+import '../../styles/submit.css';
 
 const SUB_KIND: Record<SubmissionKind, ['ok' | 'warn' | 'bad' | 'info' | 'neutral', Key]> = {
   waiting: ['info', 'sub.kWaiting'], inReview: ['info', 'sub.kInReview'], unresolved: ['bad', 'sub.kUnresolved'], draft: ['neutral', 'sub.kDraft'],
   emptyDraft: ['neutral', 'sub.kEmptyDraft'], done: ['ok', 'sub.kDone'], other: ['neutral', 'sub.kOther'],
 };
 
+type StepState = 'ready' | 'blocked' | 'todo' | 'warn';
+const STEP_PILL: Record<StepState, ['ok' | 'bad' | 'neutral' | 'warn', Key]> = {
+  ready: ['ok', 'v2rel.ready'], blocked: ['bad', 'v2rel.blocked'], todo: ['neutral', 'v2rel.todo'], warn: ['warn', 'v2rel.attention'],
+};
+
+/** One numbered step of a send-for-review checklist: node (number, check or alert), title, state pill, body. */
+function Step({ n, state: st, title, children }: { n: number; state: StepState | undefined; title: string; children?: ReactNode }) {
+  const state = st ?? 'todo';
+  const [tone, key] = STEP_PILL[state];
+  return (
+    <li className={`sub-step ${state}`} data-step-state={state}>
+      <span className="sub-node" aria-hidden="true">{state === 'ready' ? <Icon name="check" /> : state === 'blocked' ? <Icon name="alertCircle" /> : <span className="num">{n}</span>}</span>
+      <div className="sub-step-b">
+        <div className="sub-step-h"><span className="sub-step-t">{title}</span><StatusPill tone={tone}>{t(key)}</StatusPill></div>
+        {children}
+      </div>
+    </li>
+  );
+}
+
+/** The head of a store's send card: store mark, title, read state line, ready count, read / console buttons. */
+function SubHead({ store, title, sub, actions, done, total }: { store: 'ios' | 'android'; title: string; sub: ReactNode; actions: ReactNode; done: number | null; total: number }) {
+  return (
+    <header className="sub-head">
+      <span className="sub-mark"><StoreGlyph store={store} /></span>
+      <div className="sub-head-t">
+        <h3>{title}</h3>
+        <div className="sub-head-s">{sub}</div>
+      </div>
+      {done !== null && (
+        <span className={`sub-count${done === total ? ' all' : ''}`} title={t('v2rel.readyCount', { done, total })}>
+          <span aria-hidden="true"><span className="num">{done}</span><span className="of">/{total}</span></span>
+          <span className="sr">{t('v2rel.readyCount', { done, total })}</span>
+        </span>
+      )}
+      <div className="sub-head-a actions">{actions}</div>
+    </header>
+  );
+}
+
 /** The App Store card: submission state, build picker, Submit / Resubmit / in-app purchases. */
 export function AppleSubmitCard({ app, project }: { app: UnifiedApp; project: Project }) {
   const d = useData();
@@ -39,92 +82,112 @@ export function AppleSubmitCard({ app, project }: { app: UnifiedApp; project: Pr
   const rejectedIap = s?.unresolved?.items.some(i => i.rejected && i.kind !== 'appStoreVersion') ?? false;
   const args = { build, ...(version ? { version: version.version, platform: platformFlag(version.platform) } : {}), ...(resolveIaps ? { resolve_iaps: true } : {}) };
   const refresh = () => { r.refresh(); };
+  const open = s ? s.submissions.filter(x => x.kind !== 'done') : [];
+  const states: StepState[] = s ? [
+    'ready',
+    s.busy ? 'blocked' : s.unresolved ? 'warn' : 'ready',
+    picked ? 'ready' : s.builds.length ? 'todo' : 'blocked',
+    version ? 'ready' : 'blocked',
+    picked && version && !s.busy ? 'ready' : 'todo',
+  ] : [];
+  const done = s ? states.filter(x => x === 'ready').length : null;
   return (
-    <Card title={t('sub.appleTitle')} icon="rocket" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="ios" className="ic13" />{r.data ? (r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })) : r.loading ? t('read.waiting') : t('sub.appleSub')}</span>}
-      actions={<>
-        <ReadControl r={{ ...r, refresh: async () => refresh() }} label={t('sub.read')} />
-        <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal(ascUrl(app.ios?.app.id ?? summary?.apple?.appId)).catch(() => {})}><Icon name="external" />App Store Connect</button>
-      </>}>
-      {r.error && <ErrorNotice error={r.error} keep={!!r.data} />}
-      {!s ? (r.loading && r.data === null && !r.error ? <Skeleton lines={3} /> : <Empty compact illo="cloud" title={t('sub.notRead')}>{t('sub.notReadText')}</Empty>) : (
-        <div className="stack">
-          {s.submissions.length > 0 && (
-            <div className="list sub-list" aria-label={t('sub.submissions')}>
-              {s.submissions.filter(x => x.kind !== 'done').slice(0, 6).map(x => {
-                const [tone, key] = SUB_KIND[x.kind];
-                return (
-                  <div className="li" key={x.id} data-sub-kind={x.kind}>
-                    <span className={`li-icon tone-bg-${tone === 'neutral' ? 'info' : tone}`}><Icon name={x.kind === 'unresolved' ? 'alertCircle' : x.kind === 'emptyDraft' ? 'info' : 'clock'} /></span>
-                    <div className="li-main">
-                      <span className="li-title">{t(key)}</span>
-                      <span className="li-sub"><code className="selectable">{x.id}</code> · {x.state}{x.date ? ` · ${date(x.date)}` : ''}{x.kind === 'emptyDraft' ? ` · ${t('sub.harmless')}` : ''}</span>
-                      {x.items.length > 0 && (
-                        <ul className="note-list">
-                          {x.items.map(i => (
-                            <li key={i.id || i.label}><b>{i.label}</b>: {i.state}{i.rejected ? ` · ${i.kind === 'appStoreVersion' ? t('sub.markVersion') : t('sub.markIap')}` : ''}</li>
-                          ))}
-                        </ul>
-                      )}
+    <article className="card sub-card" data-store="ios">
+      <SubHead store="ios" title={t('sub.appleTitle')} done={done} total={5}
+        sub={r.data ? (r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })) : r.loading ? t('read.waiting') : t('sub.appleSub')}
+        actions={<>
+          <ReadControl r={{ ...r, refresh: async () => refresh() }} label={t('sub.read')} />
+          <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal(ascUrl(app.ios?.app.id ?? summary?.apple?.appId)).catch(() => {})}><Icon name="external" />App Store Connect</button>
+        </>} />
+      <div className="sub-body">
+        {r.error && <ErrorNotice error={r.error} keep={!!r.data} />}
+        {!s ? (r.loading && r.data === null && !r.error ? <Skeleton lines={3} /> : <EmptyState icon="cloud"><b>{t('sub.notRead')}</b> {t('sub.notReadText')}</EmptyState>) : (
+          <ol className="sub-steps" aria-label={t('v2rel.steps')}>
+            <Step n={1} state={states[0]} title={t('v2rel.stepRead')}>
+              {open.length > 0 ? (
+                <div className="sub-list" aria-label={t('sub.submissions')}>
+                  {open.slice(0, 6).map(x => {
+                    const [tone, key] = SUB_KIND[x.kind];
+                    return (
+                      <div className={`sub-item tone-${tone}`} key={x.id} data-sub-kind={x.kind}>
+                        <span className="sub-item-ic"><Icon name={x.kind === 'unresolved' ? 'alertCircle' : x.kind === 'emptyDraft' ? 'info' : 'clock'} /></span>
+                        <div className="sub-item-m">
+                          <span className="sub-item-t">{t(key)}</span>
+                          <span className="sub-item-s"><code className="selectable">{x.id}</code> · {x.state}{x.date ? ` · ${date(x.date)}` : ''}{x.kind === 'emptyDraft' ? ` · ${t('sub.harmless')}` : ''}</span>
+                          {x.items.length > 0 && (
+                            <ul className="note-list">
+                              {x.items.map(i => (
+                                <li key={i.id || i.label}><b>{i.label}</b>: {i.state}{i.rejected ? ` · ${i.kind === 'appStoreVersion' ? t('sub.markVersion') : t('sub.markIap')}` : ''}</li>
+                              ))}
+                            </ul>
+                          )}
+                        </div>
+                        <Chip tone={tone}>{x.state}</Chip>
+                      </div>
+                    );
+                  })}
+                </div>
+              ) : <span className="sub-hint">{t('sub.noOpen')}</span>}
+            </Step>
+            <Step n={2} state={states[1]} title={t('v2rel.stepNoOpen')}>
+              {s.busy && <Notice tone="info" icon="clock">{t('sub.busy', { state: s.busy.state })}</Notice>}
+              {!s.busy && s.unresolved && <Notice tone="bad" icon="alertCircle">{t('sub.unresolvedText')}</Notice>}
+            </Step>
+            {!s.busy && (
+              <>
+                <Step n={3} state={states[2]} title={t('v2rel.stepBuild')}>
+                  <label className="sub-field">
+                    <span className="sr">{t('sub.build')}</span>
+                    <select className="input" value={build} onChange={e => setBuild(e.target.value)} aria-describedby="sub-build-hint">
+                      <option value="">{t('sub.pickBuild')}</option>
+                      {s.builds.map(b => (
+                        <option key={b.id} value={b.number} disabled={!b.valid}>
+                          {`${b.number}${b.version ? ` · ${b.version}` : ''} · ${b.state}${b.uploaded ? ` · ${date(b.uploaded)}` : ''}${b.attachedTo ? ` · ${t('sub.attachedTo', { version: b.attachedTo })}` : ''}`}
+                        </option>
+                      ))}
+                    </select>
+                  </label>
+                  <span id="sub-build-hint" className="sub-hint">{s.builds.length ? t('sub.buildHint') : t('sub.noBuilds')}</span>
+                </Step>
+                <Step n={4} state={states[3]} title={t('v2rel.stepVersion')}>
+                  <div className="sub-version">
+                    <span className="sr">{t('sub.version')}</span>
+                    {version ? <><span className="sub-version-v num">{version.version}</span><span className="sub-hint">{platformLabel(version.platform)} · {version.state}</span></> : <Chip tone="warn" icon="question">{t('sub.noVersion')}</Chip>}
+                  </div>
+                </Step>
+                <Step n={5} state={states[4]} title={s.unresolved ? t('sub.resubmit') : t('v2rel.stepSend')}>
+                  {s.unresolved ? (
+                    <>
+                      <label className="row small sub-check"><input type="checkbox" checked={resolveIaps} onChange={e => setResolveIaps(e.target.checked)} />{t('sub.resolveIaps')}{rejectedIap ? ` ${t('sub.resolveIapsNeeded')}` : ''}</label>
+                      <div className="actions sub-go">
+                        <OwnerAction project={project} method="owner.apple_resubmit" args={args} label={t('sub.resubmit')} icon="send" primary disabled={!picked || !version}
+                          hint={!picked ? t('sub.pickFirst') : undefined} done={t('sub.resubmitted')} lead={t('sub.resubmitLead')} after={refresh} />
+                      </div>
+                    </>
+                  ) : (
+                    <div className="actions sub-go">
+                      <OwnerAction project={project} method="owner.apple_submit" args={args} label={t('sub.submit')} icon="send" primary disabled={!picked || !version}
+                        hint={!picked ? t('sub.pickFirst') : undefined} done={t('sub.submitted')} lead={t('sub.submitLead')} after={refresh} />
                     </div>
-                    <Chip tone={tone}>{x.state}</Chip>
-                  </div>
-                );
-              })}
+                  )}
+                </Step>
+              </>
+            )}
+          </ol>
+        )}
+        {s && !s.busy && iaps > 0 && (
+          <div className="sub-extra">
+            <div className="sub-extra-h"><Icon name="tag" /><span className="strong">{t('sub.iapTitle', { count: iaps })}</span></div>
+            <span className="sub-hint">{t('sub.iapText')}</span>
+            <div className="row" style={{ gap: 10, flexWrap: 'wrap' }}>
+              <label className="row small" style={{ gap: 8 }}><input type="checkbox" checked={withVersion} onChange={e => setWithVersion(e.target.checked)} />{t('sub.withVersion')}</label>
+              <OwnerAction project={project} method="owner.apple_iap_submit" args={withVersion ? { with_version: true } : {}} label={t('sub.iapSubmit')} icon="tag"
+                done={t('sub.submitted')} lead={t('sub.iapLead')} after={refresh} />
             </div>
-          )}
-          {!s.submissions.some(x => x.kind !== 'done') && <span className="small muted">{t('sub.noOpen')}</span>}
-          {s.busy && <Notice tone="info" icon="clock">{t('sub.busy', { state: s.busy.state })}</Notice>}
-          {!s.busy && (
-            <>
-              <div className="row" style={{ gap: 10, flexWrap: 'wrap', alignItems: 'end' }}>
-                <label className="stack" style={{ gap: 4 }}>
-                  <span className="small strong">{t('sub.build')}</span>
-                  <select className="input input-sm" value={build} onChange={e => setBuild(e.target.value)} aria-describedby="sub-build-hint">
-                    <option value="">{t('sub.pickBuild')}</option>
-                    {s.builds.map(b => (
-                      <option key={b.id} value={b.number} disabled={!b.valid}>
-                        {`${b.number}${b.version ? ` · ${b.version}` : ''} · ${b.state}${b.uploaded ? ` · ${date(b.uploaded)}` : ''}${b.attachedTo ? ` · ${t('sub.attachedTo', { version: b.attachedTo })}` : ''}`}
-                      </option>
-                    ))}
-                  </select>
-                </label>
-                <div className="stack small" style={{ gap: 4 }}>
-                  <span className="strong">{t('sub.version')}</span>
-                  <span>{version ? `${version.version} · ${platformLabel(version.platform)} · ${version.state}` : <Chip tone="warn" icon="question">{t('sub.noVersion')}</Chip>}</span>
-                </div>
-              </div>
-              <span id="sub-build-hint" className="small muted">{s.builds.length ? t('sub.buildHint') : t('sub.noBuilds')}</span>
-              {s.unresolved ? (
-                <>
-                  <Notice tone="bad" icon="alertCircle">{t('sub.unresolvedText')}</Notice>
-                  <label className="row small" style={{ gap: 8 }}><input type="checkbox" checked={resolveIaps} onChange={e => setResolveIaps(e.target.checked)} />{t('sub.resolveIaps')}{rejectedIap ? ` ${t('sub.resolveIapsNeeded')}` : ''}</label>
-                  <div className="actions">
-                    <OwnerAction project={project} method="owner.apple_resubmit" args={args} label={t('sub.resubmit')} icon="send" primary disabled={!picked || !version}
-                      hint={!picked ? t('sub.pickFirst') : undefined} done={t('sub.resubmitted')} lead={t('sub.resubmitLead')} after={refresh} />
-                  </div>
-                </>
-              ) : (
-                <div className="actions">
-                  <OwnerAction project={project} method="owner.apple_submit" args={args} label={t('sub.submit')} icon="send" primary disabled={!picked || !version}
-                    hint={!picked ? t('sub.pickFirst') : undefined} done={t('sub.submitted')} lead={t('sub.submitLead')} after={refresh} />
-                </div>
-              )}
-              {iaps > 0 && (
-                <div className="sub-iaps stack" style={{ gap: 6 }}>
-                  <span className="small strong">{t('sub.iapTitle', { count: iaps })}</span>
-                  <span className="small muted">{t('sub.iapText')}</span>
-                  <div className="row" style={{ gap: 10, flexWrap: 'wrap' }}>
-                    <label className="row small" style={{ gap: 8 }}><input type="checkbox" checked={withVersion} onChange={e => setWithVersion(e.target.checked)} />{t('sub.withVersion')}</label>
-                    <OwnerAction project={project} method="owner.apple_iap_submit" args={withVersion ? { with_version: true } : {}} label={t('sub.iapSubmit')} icon="tag"
-                      done={t('sub.submitted')} lead={t('sub.iapLead')} after={refresh} />
-                  </div>
-                </div>
-              )}
-            </>
-          )}
-        </div>
-      )}
-    </Card>
+          </div>
+        )}
+      </div>
+    </article>
   );
 }
 
@@ -141,57 +204,76 @@ export function PlayProductionCard({ app, project }: { app: UnifiedApp; project:
   const [share, setShare] = useState('10');
   const picked = s?.codes.find(c => c.code === code) ?? null;
   const args = { version_code: code, status, ...(status === 'inProgress' ? { percent: Number(share) } : {}) };
+  const managed = pr && pr.managedPublishing !== true ? <Notice tone="warn" icon="alert">{pr.managedPublishing === false ? t('sub.managedOff') : t('sub.managedUnset')}</Notice>
+    : pr && pr.managedPublishing === true ? <Notice tone="info" icon="info">{t('sub.managedOn')}</Notice> : null;
+  const states: StepState[] = s ? [
+    pr && pr.managedPublishing !== true ? 'warn' : 'ready',
+    picked ? 'ready' : s.codes.length ? 'todo' : 'blocked',
+    'ready',
+    picked ? 'ready' : 'todo',
+  ] : [];
+  const done = s ? states.filter(x => x === 'ready').length : null;
   return (
-    <Card title={t('sub.playTitle')} icon="rocket" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{r.data ? (r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })) : r.loading ? t('read.waiting') : t('sub.playSub')}</span>}
-      actions={<>
-        <ReadControl r={r} label={t('sub.read')} />
-        <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal(PLAY_CONSOLE).catch(() => {})}><Icon name="external" />Play Console</button>
-      </>}>
-      {r.error && <ErrorNotice error={r.error} keep={!!r.data} />}
-      <div className="stack">
-        {pr && pr.managedPublishing !== true && <Notice tone="warn" icon="alert">{pr.managedPublishing === false ? t('sub.managedOff') : t('sub.managedUnset')}</Notice>}
-        {pr && pr.managedPublishing === true && <Notice tone="info" icon="info">{t('sub.managedOn')}</Notice>}
-        {!s ? (r.loading && r.data === null && !r.error ? <Skeleton lines={3} /> : <Empty compact illo="cloud" title={t('sub.notRead')}>{t('sub.playNotReadText')}</Empty>) : (
+    <article className="card sub-card" data-store="android">
+      <SubHead store="android" title={t('sub.playTitle')} done={done} total={4}
+        sub={r.data ? (r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })) : r.loading ? t('read.waiting') : t('sub.playSub')}
+        actions={<>
+          <ReadControl r={r} label={t('sub.read')} />
+          <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal(PLAY_CONSOLE).catch(() => {})}><Icon name="external" />Play Console</button>
+        </>} />
+      <div className="sub-body">
+        {r.error && <ErrorNotice error={r.error} keep={!!r.data} />}
+        {!s ? (
           <>
-            {s.production.length > 0 && (
-              <span className="small">{t('sub.prodNow')}: {s.production.map(p => `${p.name ?? p.codes.join(', ')} · ${p.status}${p.fraction !== null ? ` · ${Math.round(p.fraction * 100)} %` : ''}`).join('; ')}</span>
-            )}
-            <div className="row" style={{ gap: 10, flexWrap: 'wrap', alignItems: 'end' }}>
-              <label className="stack" style={{ gap: 4 }}>
-                <span className="small strong">{t('sub.versionCode')}</span>
-                <select className="input input-sm" value={code} onChange={e => setCode(e.target.value)} aria-describedby="sub-code-hint">
+            {managed}
+            {r.loading && r.data === null && !r.error ? <Skeleton lines={3} /> : <EmptyState icon="cloud"><b>{t('sub.notRead')}</b> {t('sub.playNotReadText')}</EmptyState>}
+          </>
+        ) : (
+          <ol className="sub-steps" aria-label={t('v2rel.steps')}>
+            <Step n={1} state={states[0]} title={t('v2rel.stepRead')}>
+              {managed}
+              {s.production.length > 0 && (
+                <span className="sub-hint">{t('sub.prodNow')}: {s.production.map(p => `${p.name ?? p.codes.join(', ')} · ${p.status}${p.fraction !== null ? ` · ${Math.round(p.fraction * 100)} %` : ''}`).join('; ')}</span>
+              )}
+            </Step>
+            <Step n={2} state={states[1]} title={t('v2rel.stepCode')}>
+              <label className="sub-field">
+                <span className="sr">{t('sub.versionCode')}</span>
+                <select className="input" value={code} onChange={e => setCode(e.target.value)} aria-describedby="sub-code-hint">
                   <option value="">{t('sub.pickCode')}</option>
                   {s.codes.map(c => <option key={c.code} value={c.code} disabled={c.inProduction}>{`${c.code}${c.name ? ` · ${c.name}` : ''} · ${c.tracks.join(', ')}${c.inProduction ? ` · ${t('sub.inProduction')}` : ''}`}</option>)}
                 </select>
               </label>
-              <div className="stack" style={{ gap: 4 }}>
-                <span className="small strong">{t('sub.as')}</span>
+              <span id="sub-code-hint" className="sub-hint">{s.codes.length ? t('sub.codeHint') : t('sub.noCodes')}</span>
+            </Step>
+            <Step n={3} state={states[2]} title={t('sub.as')}>
+              <div className="row" style={{ gap: 10, flexWrap: 'wrap', alignItems: 'center' }}>
                 <Seg value={status} onChange={setStatus} label={t('sub.as')} options={[['completed', t('sub.sCompleted')], ['inProgress', t('sub.sStaged')], ['draft', t('sub.sDraft')]]} />
+                {status === 'inProgress' && (
+                  <label className="row small" style={{ gap: 8 }}>
+                    <span className="strong">{t('roll.share')}</span>
+                    <select className="input input-sm" value={share} onChange={e => setShare(e.target.value)}>{SHARES.map(x => <option key={x} value={x}>{x} %</option>)}</select>
+                  </label>
+                )}
               </div>
-              {status === 'inProgress' && (
-                <label className="stack" style={{ gap: 4 }}>
-                  <span className="small strong">{t('roll.share')}</span>
-                  <select className="input input-sm" value={share} onChange={e => setShare(e.target.value)}>{SHARES.map(x => <option key={x} value={x}>{x} %</option>)}</select>
-                </label>
-              )}
-            </div>
-            <span id="sub-code-hint" className="small muted">{s.codes.length ? t('sub.codeHint') : t('sub.noCodes')}</span>
-            <div className="actions">
-              <OwnerAction project={project} method="owner.play_production" args={args} label={status === 'draft' ? t('sub.playDraft') : t('sub.playSend')} icon="send" primary={status !== 'draft'}
-                disabled={!picked} hint={!picked ? t('sub.pickCodeFirst') : undefined} done={status === 'draft' ? t('sub.playDrafted') : t('sub.playSent')} lead={status === 'draft' ? t('sub.playDraftLead') : t('sub.playLead')} after={() => { r.refresh(); }} />
-            </div>
-          </>
+            </Step>
+            <Step n={4} state={states[3]} title={status === 'draft' ? t('sub.playDraft') : t('sub.playSend')}>
+              <div className="actions sub-go">
+                <OwnerAction project={project} method="owner.play_production" args={args} label={status === 'draft' ? t('sub.playDraft') : t('sub.playSend')} icon="send" primary={status !== 'draft'}
+                  disabled={!picked} hint={!picked ? t('sub.pickCodeFirst') : undefined} done={status === 'draft' ? t('sub.playDrafted') : t('sub.playSent')} lead={status === 'draft' ? t('sub.playDraftLead') : t('sub.playLead')} after={() => { r.refresh(); }} />
+              </div>
+            </Step>
+          </ol>
         )}
-        <Notice tone="info" icon="clipboard" action={<div className="actions">
-          <ConsolePlanButton project={project} form="play-production-countries" label={t('cp.playCountries')} />
-          <ConsolePlanButton project={project} form="play-production-release" label={t('sub.sendChanges')} />
-        </div>}>
-          <div className="stack" style={{ gap: 2 }}>
-            <b>{t('sub.consoleStepTitle')}</b>
-            <span className="small">{t('sub.consoleStepText', { countries: pr?.countries ? t('sub.countriesN', { count: pr.countries }) : t('sub.countriesAll') })}</span>
+        <div className="sub-extra">
+          <div className="sub-extra-h"><Icon name="clipboard" /><span className="strong">{t('sub.consoleStepTitle')}</span></div>
+          <span className="sub-hint">{t('sub.consoleStepText', { countries: pr?.countries ? t('sub.countriesN', { count: pr.countries }) : t('sub.countriesAll') })}</span>
+          <div className="actions">
+            <ConsolePlanButton project={project} form="play-production-countries" label={t('cp.playCountries')} />
+            <ConsolePlanButton project={project} form="play-production-release" label={t('sub.sendChanges')} />
           </div>
-        </Notice>
+        </div>
       </div>
-    </Card>
+    </article>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/TestFlight.tsx b/apps/desktop/src/screens/tabs/TestFlight.tsx
index 52403de..41b395c 100644
--- a/apps/desktop/src/screens/tabs/TestFlight.tsx
+++ b/apps/desktop/src/screens/tabs/TestFlight.tsx
@@ -1,6 +1,7 @@
 // TestFlight: beta groups (internal / external, testers, builds, public link) and the recent builds with their
 // processing and beta review states.
-import { Fragment, useState } from 'react';
+// v2: totals as stat tiles, groups as cards with the tester count, builds as cards with the three states as pills.
+import { useState } from 'react';
 import type { UnifiedApp } from '../../lib/identity';
 import { WriteButton } from '../../ui/WriteButton';
 import { t } from '../../i18n';
@@ -8,7 +9,9 @@ import { date, num } from '../../lib/format';
 import type { TestFlightStatus, TfBuild, TfGroup, Tone } from '../../lib/model';
 import { useData, useRead, useWrite } from '../../store';
 import { Icon } from '../../ui/icons';
-import { Card, Chip, Empty, Notice, ReadControl, Skeleton } from '../../ui/kit';
+import { Card, Notice, ReadControl, Skeleton } from '../../ui/kit';
+import { EmptyState, Section, StatTile, StatusPill, tintStyle, useTint } from '../../ui/ds';
+import '../../styles/testflight.css';
 
 /** Beta state word -> tone and a short label. */
 export function betaState(s: string | null): { tone: Tone; text: string } {
@@ -20,9 +23,15 @@ export function betaState(s: string | null): { tone: Tone; text: string } {
   return { tone: 'neutral', text: s.replace(/_/g, ' ').toLowerCase() };
 }
 
-function State({ s }: { s: string | null }) {
+/** One labelled beta state of a build: label above, pill below (a dash when the store has none). */
+function State({ label, s }: { label: string; s: string | null }) {
   const b = betaState(s);
-  return s ? <Chip tone={b.tone}>{b.text}</Chip> : <span className="muted small">–</span>;
+  return (
+    <div className="tf-state">
+      <span className="tf-state-l">{label}</span>
+      {s ? <StatusPill tone={b.tone} title={s}>{b.text}</StatusPill> : <span className="tf-dash">–</span>}
+    </div>
+  );
 }
 
 /** One build's "What to Test" and its internal groups: confirm-gated writes (dry run, dialog, apply). */
@@ -33,7 +42,7 @@ function BuildEditor({ b, groups, w, mode, onDone }: { b: TfBuild; groups: TfGro
   const base = { build: b.build ?? '', ...(b.version ? { version: b.version } : {}) };
   if (mode === 'what') {
     return (
-      <div className="build-edit">
+      <div className="build-edit tf-edit">
         <label className="small strong" htmlFor={`wtt-${b.build}`}>{t('tf.whatToTest', { build: b.build ?? '' })}</label>
         <textarea id={`wtt-${b.build}`} className="input" rows={3} maxLength={4000} value={text} onChange={e => setText(e.target.value)} placeholder={t('tf.whatPlaceholder')} />
         <div className="actions">
@@ -44,11 +53,16 @@ function BuildEditor({ b, groups, w, mode, onDone }: { b: TfBuild; groups: TfGro
     );
   }
   return (
-    <div className="build-edit">
+    <div className="build-edit tf-edit">
       <span className="small strong">{t('tf.toInternal', { build: b.build ?? '' })}</span>
       {internal.length ? (
-        <div className="row" style={{ gap: 14, flexWrap: 'wrap' }}>
-          {internal.map(g => <label key={g.id} className="check"><input type="checkbox" checked={picked.includes(g.name)} onChange={e => setPicked(p => (e.target.checked ? [...p, g.name] : p.filter(x => x !== g.name)))} />{g.name}</label>)}
+        <div className="tf-chips" role="group" aria-label={t('tf.toInternal', { build: b.build ?? '' })}>
+          {internal.map(g => (
+            <label key={g.id} className={`tf-chip${picked.includes(g.name) ? ' on' : ''}`}>
+              <input type="checkbox" checked={picked.includes(g.name)} onChange={e => setPicked(p => (e.target.checked ? [...p, g.name] : p.filter(x => x !== g.name)))} />
+              <Icon name="users" />{g.name}<span className="tf-chip-n num">{num(g.testers)}</span>
+            </label>
+          ))}
         </div>
       ) : <span className="small muted">{t('tf.noInternal')}</span>}
       <div className="actions">
@@ -62,89 +76,118 @@ function BuildEditor({ b, groups, w, mode, onDone }: { b: TfBuild; groups: TfGro
 function Testers({ groups, w }: { groups: TfGroup[]; w: ReturnType<typeof useWrite> }) {
   const [group, setGroup] = useState('');
   return (
-    <Card title={t('tf.testersTitle')} icon="users" sub={t('tf.testersSub')}>
+    <Section title={t('tf.testersTitle')} icon="users" sub={t('tf.testersSub')} className="tf-testers">
       <div className="row" style={{ gap: 10, flexWrap: 'wrap' }}>
-        <select className="input input-sm" value={group} onChange={e => setGroup(e.target.value)} aria-label={t('tf.testersGroup')}>
+        <select className="input" value={group} onChange={e => setGroup(e.target.value)} aria-label={t('tf.testersGroup')}>
           <option value="">{t('tf.testersAll')}</option>
           {groups.map(g => <option key={g.id} value={g.name}>{g.name}</option>)}
         </select>
         <WriteButton run={w} icon="users" w={{ method: 'owner.testflight_testers', args: group ? { groups: group } : {}, title: t('tf.testersAdd'), done: t('tf.testersDone') }} hint={t('tf.testersHint')}>{t('tf.testersAdd')}</WriteButton>
       </div>
-      <p className="small muted act-note"><Icon name="shield" />{t('tf.testersNote')}</p>
-    </Card>
+      <p className="tf-note"><Icon name="shield" />{t('tf.testersNote')}</p>
+    </Section>
   );
 }
 
 export function TestFlightTab({ app }: { app: UnifiedApp }) {
   const d = useData();
   const e = d.statusFor(app);
+  const hue = useTint(d.iconFor(app), app.name);
   const r = useRead<TestFlightStatus>(app.target, 'apple.testflight_status', { network: true, title: 'TestFlight' });
   const w = useWrite(app.project?.id ?? null);
   const [open, setOpen] = useState<{ build: string; mode: 'what' | 'groups' } | null>(null);
   const writable = !!app.project;
-  if ((e && !e.app?.platforms.ios) || (!e && !app.project && !app.ios)) return <Card pad={false}><Empty illo="plane" title={t('tf.noIos')}>{t('tf.noIosText')}</Empty></Card>;
+  const tint = tintStyle(hue);
+  if ((e && !e.app?.platforms.ios) || (!e && !app.project && !app.ios)) {
+    return <div className="scr-testflight" style={tint}><Section><EmptyState icon="send"><b>{t('tf.noIos')}</b> {t('tf.noIosText')}</EmptyState></Section></div>;
+  }
   if (!r.data) {
-    if (r.loading && !r.error) return <Card><Skeleton lines={4} block /></Card>;
+    if (r.loading && !r.error) return <div className="scr-testflight" style={tint}><Card><Skeleton lines={4} block /></Card></div>;
     return (
-      <Card pad={false}>
-        <Empty illo="plane" title={t('tf.emptyTitle')} actions={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('tf.read')}</button>}>{t('tf.emptyText')}</Empty>
-        {r.error && <div className="card-foot"><Icon name="alertCircle" />{r.error}</div>}
-      </Card>
+      <div className="scr-testflight" style={tint}>
+        <Section>
+          <EmptyState icon="send" tone={r.error ? 'bad' : undefined} action={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('tf.read')}</button>}>
+            <b>{t('tf.emptyTitle')}</b> {t('tf.emptyText')}
+          </EmptyState>
+          {r.error && <p className="tf-err"><Icon name="alertCircle" />{r.error}</p>}
+        </Section>
+      </div>
     );
   }
   const s = r.data;
+  const testers = s.groups.reduce((n, g) => n + g.testers, 0);
+  const usableOf = (b: TfBuild) => !!b.build && b.processing === 'VALID' && !/EXPIRED/.test(`${b.internal ?? ''}`);
+  const ready = s.builds.filter(usableOf).length;
   return (
-    <>
-      <div className="row between">
-        <span />
-        <ReadControl r={r} />
+    <div className="scr-testflight" style={tint}>
+      <div className="tf-top">
+        <div className="ds-grid tf-kpis">
+          <StatTile label={t('tf.testers')} icon="users" value={num(testers)} sub={t('v2rel.tfInGroups', { count: s.groups.length })} />
+          <StatTile label={t('v2rel.tfGroups')} icon="layers" value={num(s.groups.length)} sub={t('v2rel.tfSplit', { internal: s.groups.filter(g => g.internal).length, external: s.groups.filter(g => !g.internal).length })} />
+          <StatTile label={t('tf.builds')} icon="cube" value={num(s.builds.length)} />
+          <StatTile label={t('v2rel.tfUsable')} icon="check" value={num(ready)} tone={ready ? 'ok' : undefined} />
+        </div>
+        <div className="tf-read"><ReadControl r={r} /></div>
       </div>
       {s.missingGroups.length > 0 && (
         <Notice tone="warn" action={writable ? <WriteButton run={w} icon="plus" w={{ method: 'apple.testflight_groups', args: {}, title: t('tf.groupsSync'), done: t('tf.groupsSynced'), after: r.refresh }} hint={t('tf.groupsSyncHint')}>{t('tf.groupsSync')}</WriteButton> : undefined}>
           {t('tf.missingGroups', { groups: s.missingGroups.join(', ') })}
         </Notice>
       )}
-      <div className="grid-cards">
-        {s.groups.map(g => (
-          <div key={g.id} className="tf-group">
-            <div className="row between"><span className="strong">{g.name}</span><Chip tone={g.internal ? 'info' : 'accent'}>{g.internal ? t('tf.internal') : t('tf.external')}</Chip></div>
-            <div className="stat">
-              <div><b>{num(g.testers)}</b><span className="small muted">{t('tf.testers')}</span></div>
-              <div><b>{g.builds === 'all' ? t('tf.all') : num(g.builds)}</b><span className="small muted">{t('tf.builds')}</span></div>
-            </div>
-            <div className="row small muted" style={{ gap: 6 }}><Icon name={g.publicLink ? 'globe' : 'users'} className="ic13" />{g.publicLink ? t('tf.publicOn') : t('tf.publicOff')}</div>
+      <Section title={t('v2rel.tfGroups')} icon="users" plain>
+        {s.groups.length ? (
+          <div className="tf-groups">
+            {s.groups.map(g => (
+              <article key={g.id} className={`tf-group ${g.internal ? 'internal' : 'external'}`} aria-label={g.name}>
+                <div className="tf-group-h">
+                  <span className="tf-group-n">{g.name}</span>
+                  <StatusPill tone={g.internal ? 'info' : 'accent'}>{g.internal ? t('tf.internal') : t('tf.external')}</StatusPill>
+                </div>
+                <div className="tf-group-big">
+                  <span className="num">{num(g.testers)}</span>
+                  <span className="tf-group-l">{t('tf.testers')}</span>
+                </div>
+                <div className="tf-group-f">
+                  <span className="tf-tag"><Icon name="cube" /><b className="num">{g.builds === 'all' ? t('tf.all') : num(g.builds)}</b> {t('tf.builds')}</span>
+                  <span className={`tf-tag${g.publicLink ? ' on' : ''}`}><Icon name={g.publicLink ? 'globe' : 'users'} />{g.publicLink ? t('tf.publicOn') : t('tf.publicOff')}</span>
+                </div>
+              </article>
+            ))}
           </div>
-        ))}
-        {!s.groups.length && <Card><Empty compact illo="plane" title={t('tf.noGroups')} /></Card>}
-      </div>
-      <Card title={t('tf.buildsTitle')} icon="cube" sub={t('tf.buildsSub')} pad={false}>
+        ) : <EmptyState icon="users">{t('tf.noGroups')}</EmptyState>}
+      </Section>
+      <Section title={t('tf.buildsTitle')} icon="cube" sub={t('tf.buildsSub')}>
         {s.builds.length ? (
-          <table className="table">
-            <thead><tr><th>{t('col.version')}</th><th>{t('col.build')}</th><th>{t('tf.processing')}</th><th>{t('tf.internalTesting')}</th><th>{t('tf.externalTesting')}</th><th>{t('tf.uploaded')}</th>{writable && <th className="right"><span className="sr">{t('col.actions')}</span></th>}</tr></thead>
-            <tbody>
-              {s.builds.map((b, i) => {
-                const usable = !!b.build && b.processing === 'VALID' && !/EXPIRED/.test(`${b.internal ?? ''}`);
-                const here = open?.build === b.build ? open.mode : null;
-                return (
-                  <Fragment key={i}>
-                    <tr>
-                      <td className="strong num">{b.version ?? '–'}</td><td className="num">{b.build ?? '–'}</td>
-                      <td><State s={b.processing} /></td><td><State s={b.internal} /></td><td><State s={b.external} /></td>
-                      <td className="muted">{date(b.uploaded)}</td>
-                      {writable && <td className="right nowrap">{usable && <div className="actions" style={{ justifyContent: 'flex-end' }}>
-                        <button className="btn btn-sm btn-ghost" aria-expanded={here === 'what'} onClick={() => setOpen(here === 'what' ? null : { build: b.build!, mode: 'what' })}><Icon name="text" />{t('tf.what')}</button>
-                        <button className="btn btn-sm btn-ghost" aria-expanded={here === 'groups'} onClick={() => setOpen(here === 'groups' ? null : { build: b.build!, mode: 'groups' })}><Icon name="users" />{t('tf.groupsBtn')}</button>
-                      </div>}</td>}
-                    </tr>
-                    {here && <tr className="edit-row"><td colSpan={7}><BuildEditor b={b} groups={s.groups} w={w} mode={here} onDone={() => { setOpen(null); r.refresh(); }} /></td></tr>}
-                  </Fragment>
-                );
-              })}
-            </tbody>
-          </table>
-        ) : <Empty compact illo="plane" title={t('tf.noBuilds')} />}
-      </Card>
+          <ul className="tf-builds">
+            {s.builds.map((b, i) => {
+              const usable = usableOf(b);
+              const here = open?.build === b.build ? open.mode : null;
+              return (
+                <li key={i} className={`tf-build${here ? ' open' : ''}`}>
+                  <div className="tf-build-row">
+                    <div className="tf-build-id">
+                      <span className="tf-build-v num">{b.version ?? '–'}</span>
+                      <span className="tf-build-n">{t('col.build')} <b className="num">{b.build ?? '–'}</b></span>
+                      <span className="tf-build-d"><Icon name="upload" />{date(b.uploaded)}</span>
+                    </div>
+                    <div className="tf-build-states">
+                      <State label={t('tf.processing')} s={b.processing} />
+                      <State label={t('tf.internalTesting')} s={b.internal} />
+                      <State label={t('tf.externalTesting')} s={b.external} />
+                    </div>
+                    {writable && <div className="tf-build-a">{usable && <div className="actions">
+                      <button className="btn btn-sm" aria-expanded={here === 'what'} onClick={() => setOpen(here === 'what' ? null : { build: b.build!, mode: 'what' })}><Icon name="text" />{t('tf.what')}</button>
+                      <button className="btn btn-sm" aria-expanded={here === 'groups'} onClick={() => setOpen(here === 'groups' ? null : { build: b.build!, mode: 'groups' })}><Icon name="users" />{t('tf.groupsBtn')}</button>
+                    </div>}</div>}
+                  </div>
+                  {here && <BuildEditor b={b} groups={s.groups} w={w} mode={here} onDone={() => { setOpen(null); r.refresh(); }} />}
+                </li>
+              );
+            })}
+          </ul>
+        ) : <EmptyState icon="cube">{t('tf.noBuilds')}</EmptyState>}
+      </Section>
       {writable && s.groups.length > 0 && <Testers groups={s.groups} w={w} />}
-    </>
+    </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/Tools.tsx b/apps/desktop/src/screens/tabs/Tools.tsx
index edb48a0..b3714f4 100644
--- a/apps/desktop/src/screens/tabs/Tools.tsx
+++ b/apps/desktop/src/screens/tabs/Tools.tsx
@@ -9,7 +9,9 @@ import { api, errorText, type MethodDescriptor, newJob, type Project, type ToolR
 import { type Key, t } from '../../i18n';
 import { useData, useWrite } from '../../store';
 import { Icon } from '../../ui/icons';
-import { Card, Chip, ErrorNotice, Notice, Skeleton } from '../../ui/kit';
+import { ErrorNotice, Skeleton } from '../../ui/kit';
+import { Section, StatusPill } from '../../ui/ds';
+import '../../styles/tools.css';
 import { WriteButton } from '../../ui/WriteButton';
 
 type Args = Record<string, unknown>;
@@ -67,33 +69,37 @@ function Tool({ m, project }: { m: MethodDescriptor; project: Project }) {
     setBusy(false);
   };
   return (
-    <div className="tool" data-testid={`tool-${m.method}`}>
-      <div className="row between">
-        <div className="stack" style={{ gap: 2 }}>
-          <span className="strong">{m.title}</span>
-          <span className="small muted">{m.description}</span>
-        </div>
-        <div className="row" style={{ gap: 6 }}>
-          <Chip tone="outline" dot={false}>{m.kind === 'read' ? t('tools.read') : t('tools.write')}</Chip>
-          {m.network && <Chip tone="outline" dot={false} icon="cloud">{t('tools.network')}</Chip>}
+    <div className={`tl-cmd tool${res || err ? ' has-out' : ''}`} data-testid={`tool-${m.method}`}>
+      <div className="tl-cmd-h">
+        <span className={`tl-cmd-ic ${m.kind === 'read' ? 'read' : 'write'}`}><Icon name={m.kind === 'read' ? 'eye' : 'edit'} /></span>
+        <div className="tl-cmd-t">
+          <span className="tl-cmd-title">{m.title}</span>
+          <span className="tl-cmd-desc">{m.description}</span>
         </div>
       </div>
+      <div className="tl-cmd-tags">
+        <StatusPill tone={m.kind === 'read' ? 'info' : 'warn'}>{m.kind === 'read' ? t('tools.read') : t('tools.write')}</StatusPill>
+        {m.network && <StatusPill tone="neutral" icon="cloud">{t('tools.network')}</StatusPill>}
+        <code className="tl-cmd-m mono-id">{m.method}</code>
+      </div>
       {props.length > 0 && (
-        <div className="tool-form">
+        <div className="tool-form tl-form">
           {props.map(([k, s]) => <Field key={k} name={k} s={s} value={v[k]} required={required.has(k)} onChange={x => setV(p => ({ ...p, [k]: x }))} />)}
         </div>
       )}
-      <div className="actions">
+      <div className="tl-cmd-run">
         {m.kind === 'read'
           ? <button className="btn btn-sm" disabled={busy || missing} aria-busy={busy || undefined} onClick={() => { void read(); }}><Icon name={busy ? 'refresh' : 'play'} className={busy ? 'spin' : undefined} />{t('tools.run')}</button>
           : <WriteButton run={w} icon="play" disabled={missing} w={{ method: m.method, args, title: m.title, done: t('tools.done', { title: m.title }) }}>{t('tools.dryRun')}</WriteButton>}
       </div>
       {err && <ErrorNotice error={err} />}
       {res && (
-        <div className="stack" style={{ gap: 4 }}>
-          <span className="small muted">{res.command} · {t('tools.exit', { code: res.exitCode })}</span>
+        <div className="tl-out">
+          <div className="tl-out-h">
+            <span>{res.command} · {t('tools.exit', { code: res.exitCode })}</span>
+            <button className="btn btn-sm btn-ghost" onClick={() => { navigator.clipboard?.writeText(res.output).then(() => d.toast({ kind: 'ok', title: t('tools.copied') }), () => {}); }}><Icon name="copy" />{t('tools.copy')}</button>
+          </div>
           <pre className="stack-trace" data-testid="tool-output">{res.output || res.error || (res.data !== undefined ? JSON.stringify(res.data, null, 2) : '')}</pre>
-          <button className="btn btn-sm btn-ghost" onClick={() => { navigator.clipboard?.writeText(res.output).then(() => d.toast({ kind: 'ok', title: t('tools.copied') }), () => {}); }}><Icon name="copy" />{t('tools.copy')}</button>
         </div>
       )}
     </div>
@@ -110,31 +116,43 @@ export function ToolsTab({ project }: { project: Project }) {
   }, []);
   const by = new Map((methods ?? []).map(m => [m.method, m] as const));
   const copy = (c: string) => { navigator.clipboard?.writeText(c).then(() => d.toast({ kind: 'ok', title: t('tools.copied') }), () => {}); };
+  const groups = TOOLBOX.map(g => ({ g, ms: g.methods.map(x => by.get(x)).filter((x): x is MethodDescriptor => !!x) }));
+  const cur = groups.find(x => x.g.id === open);
   return (
-    <>
-      <Notice tone="info" icon="info">{t('tools.lead')}</Notice>
+    <div className="scr-tools">
+      <p className="tl-lead"><Icon name="info" />{t('tools.lead')}</p>
       {err && <ErrorNotice error={err} />}
       {!methods && !err && <Skeleton lines={4} />}
-      {methods && TOOLBOX.map(g => {
-        const ms = g.methods.map(x => by.get(x)).filter((x): x is MethodDescriptor => !!x);
-        const isOpen = open === g.id;
-        return (
-          <Card key={g.id} id={`tools-${g.id}`} title={t(`tools.g.${g.id}` as Key)} icon="sliders" sub={t('tools.count', { count: ms.length })}
-            actions={<button className="btn btn-sm btn-ghost" aria-expanded={isOpen} onClick={() => setOpen(isOpen ? '' : g.id)}><Icon name={isOpen ? 'chevronDown' : 'chevronRight'} />{isOpen ? t('tools.hide') : t('tools.show')}</button>}>
-            {isOpen && <div className="stack" style={{ gap: 14 }}>{ms.map(m => <Tool key={m.method} m={m} project={project} />)}</div>}
-          </Card>
-        );
-      })}
-      <Card title={t('tools.owner')} icon="lock" sub={t('tools.ownerSub')} id="tools-owner">
-        <div className="stack" style={{ gap: 8 }}>
+      {methods && (
+        <div className="tl-groups" role="group" aria-label={t('tab.tools')}>
+          {groups.map(({ g, ms }) => {
+            const isOpen = open === g.id;
+            return (
+              <button key={g.id} type="button" id={`tools-${g.id}`} className="tl-group" aria-expanded={isOpen} aria-controls="tools-open"
+                onClick={() => setOpen(isOpen ? '' : g.id)}>
+                <span className="tl-group-ic"><Icon name="sliders" /></span>
+                <span className="tl-group-t"><b>{t(`tools.g.${g.id}` as Key)}</b><span>{t('tools.count', { count: ms.length })}</span></span>
+                <span className="tl-group-x">{isOpen ? t('tools.hide') : t('tools.show')}<Icon name={isOpen ? 'chevronDown' : 'chevronRight'} /></span>
+              </button>
+            );
+          })}
+        </div>
+      )}
+      {methods && cur && (
+        <Section id="tools-open" title={t(`tools.g.${cur.g.id}` as Key)} icon="sliders" sub={t('tools.count', { count: cur.ms.length })}>
+          <div className="tl-cmds">{cur.ms.map(m => <Tool key={m.method} m={m} project={project} />)}</div>
+        </Section>
+      )}
+      <Section title={t('tools.owner')} icon="lock" sub={t('tools.ownerSub')} id="tools-owner">
+        <div className="tl-owner">
           {OWNER_STEPS.map(s => (
-            <div key={s.id} className="row between" data-testid={`owner-step-${s.id}`}>
-              <div className="stack" style={{ gap: 2 }}><span>{t(`tools.o.${s.id}` as Key)}</span><code className="small mono-id">{s.command}</code></div>
+            <div key={s.id} className="tl-step" data-testid={`owner-step-${s.id}`}>
+              <span className="tl-step-t"><span>{t(`tools.o.${s.id}` as Key)}</span><code className="mono-id">{s.command}</code></span>
               <button className="btn btn-sm btn-ghost" onClick={() => copy(s.command)}><Icon name="copy" />{t('tools.copy')}</button>
             </div>
           ))}
         </div>
-      </Card>
-    </>
+      </Section>
+    </div>
   );
 }
diff --git a/apps/desktop/src/styles/accounts.css b/apps/desktop/src/styles/accounts.css
new file mode 100644
index 0000000..251f916
--- /dev/null
+++ b/apps/desktop/src/styles/accounts.css
@@ -0,0 +1,26 @@
+/* Studios & accounts v2: KPI row, one section per studio, account cards per store with key status. */
+.scr-accounts { gap: 22px; }
+.scr-accounts .acct-kpis { --ds-min: 200px; }
+.scr-accounts .studio-card { overflow: hidden; scroll-margin-top: 16px; }
+.scr-accounts .studio-card .card-head { display: flex; align-items: center; justify-content: space-between; gap: 16px; flex-wrap: wrap; padding: 20px 22px 4px; }
+.scr-accounts .studio-card .card-head h2 { font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); letter-spacing: -.015em; }
+.scr-accounts .studio-card .card-head .sub { color: var(--muted); font-size: var(--ds-t-meta); }
+.scr-accounts .studio-card.focus { box-shadow: var(--ds-e3), 0 0 0 2px var(--accent-line); }
+.scr-accounts .studio-card .card-body { padding: 14px 22px 20px; }
+.scr-accounts .acct-list { grid-template-columns: repeat(auto-fill, minmax(420px, 1fr)); gap: 14px; padding: 16px 22px 22px; }
+.scr-accounts .acct { border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-raised); box-shadow: var(--ds-e1); overflow: hidden; transition: box-shadow var(--speed) var(--ease); }
+.scr-accounts .acct:hover { box-shadow: var(--ds-e2); }
+.scr-accounts .acct-row { flex-wrap: wrap; align-items: flex-start; padding: 16px; gap: 14px; }
+.scr-accounts .acct-glyph { width: 42px; height: 42px; border-radius: 12px; border: 0; }
+.scr-accounts .acct-glyph svg, .scr-accounts .acct-glyph .store-mark { width: 20px; height: 20px; }
+.scr-accounts .acct-glyph.play { background: color-mix(in srgb, var(--ok-fg, var(--accent-solid)) 16%, transparent); color: var(--ok-fg, var(--accent-solid)); }
+.scr-accounts .acct-glyph.apple { background: color-mix(in srgb, var(--info-fg, var(--accent-solid)) 16%, transparent); color: var(--info-fg, var(--accent-solid)); }
+.scr-accounts .acct-main { flex: 1 1 200px; gap: 6px; }
+.scr-accounts .acct-main .strong { font-size: var(--ds-t-h3); }
+.scr-accounts .acct-main .small { white-space: normal; line-height: 1.5; }
+.scr-accounts .acct-row > .actions { flex: 1 1 100%; padding-top: 12px; border-top: 1px solid var(--ds-stroke); }
+.scr-accounts .acct-edit { padding: 0 16px 16px; grid-template-columns: 1fr 1fr; }
+.scr-accounts .acct-edit .actions { grid-column: 1 / -1; }
+.scr-accounts .acct-fix { padding: 0 16px 16px; }
+.scr-accounts .acct-add { display: grid; grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); gap: 18px; align-items: start; }
+.scr-accounts .acct-add .form { gap: 14px; }
diff --git a/apps/desktop/src/styles/appinfo.css b/apps/desktop/src/styles/appinfo.css
new file mode 100644
index 0000000..aa2747a
--- /dev/null
+++ b/apps/desktop/src/styles/appinfo.css
@@ -0,0 +1,45 @@
+/* App info tab v2: a store-info sheet (key facts), then the declarations and App Store info sections. Scoped to
+   .scr-appinfo (tab) and .scr-appinfo-ed (its editor). */
+.scr-appinfo { display: grid; gap: 20px; min-width: 0; }
+
+.scr-appinfo .ai-sheet {
+  position: relative; overflow: hidden; display: grid; gap: 18px; padding: 22px 26px;
+  border-radius: var(--ds-r-xl); background: var(--ds-surface); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e2);
+}
+.scr-appinfo .ai-sheet::before { content: ""; position: absolute; inset: 0 0 auto; height: 3px; background: var(--ds-grad); }
+.scr-appinfo .ai-sheet-h { display: flex; align-items: baseline; flex-wrap: wrap; gap: 4px 14px; }
+.scr-appinfo .ai-sheet-h .ds-eyebrow { flex-basis: 100%; margin: 0; }
+.scr-appinfo .ai-sheet-h h2 { margin: 0; font-size: var(--ds-t-h1); font-weight: var(--ds-w-display); letter-spacing: -.02em; color: var(--ink); }
+.scr-appinfo .ai-sheet-stores { display: inline-flex; gap: 12px; font-size: var(--ds-t-meta); color: var(--muted); font-weight: 600; }
+.scr-appinfo .ai-sheet-stores span { display: inline-flex; align-items: center; gap: 5px; }
+.scr-appinfo .ai-facts { display: grid; grid-template-columns: repeat(auto-fit, minmax(170px, 1fr)); gap: 0; margin: 0; border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); overflow: hidden; background: var(--ds-inset); }
+.scr-appinfo .ai-fact { display: grid; gap: 6px; padding: 14px 16px; border-right: 1px solid var(--ds-stroke); min-width: 0; }
+.scr-appinfo .ai-fact:last-child { border-right: 0; }
+.scr-appinfo .ai-fact dt { display: flex; align-items: center; gap: 6px; font-size: var(--ds-t-micro); font-weight: 650; color: var(--muted); }
+.scr-appinfo .ai-fact dt svg { width: 13px; height: 13px; color: var(--accent-solid); }
+.scr-appinfo .ai-fact dd { margin: 0; font-size: var(--ds-t-h3); font-weight: var(--ds-w-strong); color: var(--ink); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.scr-appinfo .ai-fact.tone-warn dd { color: var(--warn-ink); }
+.scr-appinfo .ai-fact.tone-warn dt svg { color: var(--warn-solid); }
+.scr-appinfo .ai-fact.tone-ok dd { color: var(--ok-ink); }
+
+.scr-appinfo .ai-two { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 20px; align-items: start; }
+.scr-appinfo .ai-three { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 20px; align-items: start; }
+@media (max-width: 1240px) { .scr-appinfo .ai-three { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
+@media (max-width: 980px) { .scr-appinfo .ai-two, .scr-appinfo .ai-three { grid-template-columns: minmax(0, 1fr); } }
+
+/* sections: the old card bodies inside v2 sections */
+.scr-appinfo .ds-sec .card-body { padding: 0 22px 18px; }
+.scr-appinfo .ds-sec .card-foot { margin: 0 22px 18px; padding: 10px 0 0; border-top: 1px solid var(--ds-stroke); background: none; }
+.scr-appinfo .ds-sec .ds-table-wrap { margin: 0 18px 18px; box-shadow: none; }
+.scr-appinfo .ds-sec > .list, .scr-appinfo .ds-sec > .ds-empty { margin: 0 12px 12px; }
+.scr-appinfo .ds-sec > .list { display: grid; gap: 8px; }
+.scr-appinfo .ds-sec > .list .li { border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-inset); }
+.scr-appinfo .ask-card { border-color: color-mix(in srgb, var(--warn-solid) 45%, var(--ds-stroke)); }
+.scr-appinfo .kv { row-gap: 12px; }
+.scr-appinfo .kv dt { color: var(--muted); font-weight: 600; }
+.scr-appinfo .kv dd { color: var(--ink); }
+.scr-appinfo .ai-foot { margin: 0; font-size: var(--ds-t-meta); color: var(--muted); }
+
+/* editor below the tab */
+.scr-appinfo-ed .ds-sec .ed-grid { gap: 14px 18px; }
+.scr-appinfo-ed .act-col { border-radius: var(--ds-r); background: var(--ds-inset); border-color: var(--ds-stroke); }
diff --git a/apps/desktop/src/styles/art.css b/apps/desktop/src/styles/art.css
new file mode 100644
index 0000000..8d4099c
--- /dev/null
+++ b/apps/desktop/src/styles/art.css
@@ -0,0 +1,38 @@
+/* Store art tab, live art and art editor (desktop v2): a screenshot gallery in device frames. Scoped under .scr-art. */
+.scr-art { display: flex; flex-direction: column; gap: 18px; min-width: 0; }
+section.scr-art { display: block; }
+.scr-art .ds-grid.art-stats { --ds-min: 200px; }
+.scr-art .art-bar { display: flex; align-items: center; gap: 12px; flex-wrap: wrap; padding: 14px 22px; border-bottom: 1px solid var(--ds-stroke); }
+.scr-art .art-rows { display: grid; gap: 4px; padding: 6px 0; }
+.scr-art .art-row { padding: 16px 22px; }
+.scr-art .art-row + .art-row { border-top: 1px solid var(--ds-stroke); }
+.scr-art .art-row h3 { display: flex; align-items: center; gap: 10px; flex-wrap: wrap; font-size: var(--ds-t-h3); font-weight: var(--ds-w-strong); margin: 0 0 12px; }
+.scr-art .art-row h3 code { font-size: var(--ds-t-micro); color: var(--muted); background: var(--ds-inset); padding: 2px 7px; border-radius: var(--ds-r-xs); }
+.scr-art .art-tiles { gap: 18px; padding: 4px 2px 10px; }
+.scr-art .art-tile { gap: 8px; position: relative; }
+
+/* device frames: portrait tiles sit in a phone bezel, landscape ones in a tablet / banner frame */
+.scr-art .art-tile .art-pic { border-radius: var(--ds-r-sm); border: 2px solid var(--ds-stroke); background: var(--ds-inset); box-shadow: var(--ds-e2); }
+.scr-art .art-tile.portrait .art-pic { border: 6px solid #15161a; border-radius: 24px; box-shadow: 0 0 0 1px var(--ds-stroke-strong), var(--ds-e2); }
+.scr-art .art-tile.landscape .art-pic { border: 5px solid #15161a; border-radius: 14px; box-shadow: 0 0 0 1px var(--ds-stroke-strong), var(--ds-e2); }
+.scr-art .art-tile.portrait .art-pic::after { content: ""; position: absolute; top: 5px; left: 50%; width: 28%; height: 9px; transform: translateX(-50%); border-radius: var(--ds-r-pill); background: #15161a; z-index: 1; pointer-events: none; }
+.scr-art .art-tile.warn .art-pic { border-color: var(--warn-solid); }
+.scr-art .art-tile.err .art-pic { border-color: var(--bad-solid); }
+.scr-art .art-pic:focus-visible { outline: 2px solid var(--tint, var(--accent-solid)); outline-offset: 3px; }
+.scr-art .art-pic img { display: block; width: 100%; height: 100%; object-fit: cover; }
+@media (hover: hover) and (prefers-reduced-motion: no-preference) {
+  .scr-art button.art-pic:hover { transform: translateY(-2px); box-shadow: 0 0 0 1px var(--ds-stroke-strong), var(--ds-e3); }
+}
+.scr-art .art-badge { position: absolute; top: 10px; right: 10px; z-index: 2; display: inline-flex; align-items: center; gap: 4px; padding: 2px 8px 2px 6px; border-radius: var(--ds-r-pill); font-size: var(--ds-t-micro); font-weight: 700; color: #fff; box-shadow: var(--ds-e1); }
+.scr-art .art-badge svg { width: 12px; height: 12px; }
+.scr-art .art-badge.err { background: var(--bad-solid); }
+.scr-art .art-badge.warn { background: var(--warn-solid); }
+.scr-art .art-tile figcaption { display: flex; justify-content: space-between; gap: 6px; font-size: var(--ds-t-micro); }
+.scr-art .art-tile .ds-pill { justify-self: start; }
+.scr-art .art-issues { font-size: var(--ds-t-micro); }
+.scr-art [data-live-icons] .art-tile .art-pic { border-radius: 22%; border: 1px solid var(--ds-stroke); }
+.scr-art [data-live-icons] .art-tile .art-pic::after { display: none; }
+
+/* art editor: scene order as a numbered strip */
+.scr-art.art-editor .ed-scenes li > .num { width: 28px; height: 28px; border-radius: 50%; display: inline-grid; place-items: center; background: color-mix(in srgb, var(--tint, var(--accent-solid)) 16%, transparent); color: var(--tint, var(--accent-solid)); }
+.scr-art.art-editor [role="tablist"] .btn { border-radius: var(--ds-r-pill); }
diff --git a/apps/desktop/src/styles/catalog.css b/apps/desktop/src/styles/catalog.css
new file mode 100644
index 0000000..126b489
--- /dev/null
+++ b/apps/desktop/src/styles/catalog.css
@@ -0,0 +1,29 @@
+/* Catalog tab + catalog editor (desktop v2): products as cards. Scoped under .scr-catalog. */
+.scr-catalog { display: flex; flex-direction: column; gap: 18px; min-width: 0; }
+section.scr-catalog { display: block; }
+.scr-catalog .ds-grid.cat-stats { --ds-min: 200px; }
+.scr-catalog .cat-cards { list-style: none; margin: 0; padding: 0; display: grid; gap: 14px; grid-template-columns: repeat(auto-fill, minmax(340px, 1fr)); }
+.scr-catalog .cat-card { background: var(--ds-raised); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); box-shadow: var(--ds-e1); padding: 14px 16px 14px 18px; display: grid; gap: 12px; position: relative; overflow: hidden; min-width: 0; }
+.scr-catalog .cat-card::before { content: ""; position: absolute; inset: 0 auto 0 0; width: 3px; background: var(--ok-solid); opacity: .7; }
+.scr-catalog .cat-card.t-warn::before { background: var(--warn-solid); }
+.scr-catalog .cat-card.t-bad::before { background: var(--bad-solid); }
+.scr-catalog .cat-card-h { display: flex; align-items: center; gap: 12px; min-width: 0; }
+.scr-catalog .cat-card-h .grow { flex: 1; }
+.scr-catalog .cat-ic { flex: none; width: 40px; height: 40px; border-radius: 12px; display: grid; place-items: center; background: color-mix(in srgb, var(--tint, var(--accent-solid)) 16%, transparent); color: var(--tint, var(--accent-solid)); }
+.scr-catalog .cat-ic svg { width: 19px; height: 19px; }
+.scr-catalog .cat-ic.sm { width: 26px; height: 26px; border-radius: 8px; }
+.scr-catalog .cat-ic.sm svg { width: 14px; height: 14px; }
+.scr-catalog .cat-names { display: grid; gap: 4px; min-width: 0; }
+.scr-catalog .cat-id { font-size: var(--ds-t-h3); overflow-wrap: anywhere; }
+.scr-catalog .cat-type { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+.scr-catalog .cat-stores { display: grid; grid-template-columns: 1fr 1fr; gap: 10px; }
+.scr-catalog .cat-store { background: var(--ds-inset); border-radius: var(--ds-r-sm); padding: 9px 11px; display: grid; gap: 4px; align-content: start; min-width: 0; }
+.scr-catalog .cat-store-l { display: inline-flex; align-items: center; gap: 6px; font-size: var(--ds-t-micro); color: var(--muted); }
+.scr-catalog .cat-store-l svg, .scr-catalog .cat-store-l .store-mark { width: 12px; height: 12px; }
+.scr-catalog .cat-store .mx-cell { font-weight: var(--ds-w-strong); }
+.scr-catalog .cat-store .note-list { font-size: var(--ds-t-micro); margin: 0; }
+.scr-catalog .ds-table-wrap { box-shadow: none; }
+
+/* editor rows */
+.scr-catalog.cat-editor .ed-item-head { gap: 10px; }
+.scr-catalog.cat-editor .cat-price { font-weight: var(--ds-w-strong); padding: 2px 9px; border-radius: var(--ds-r-pill); background: var(--ds-inset); font-size: var(--ds-t-meta); }
diff --git a/apps/desktop/src/styles/checks.css b/apps/desktop/src/styles/checks.css
new file mode 100644
index 0000000..c396c17
--- /dev/null
+++ b/apps/desktop/src/styles/checks.css
@@ -0,0 +1,76 @@
+/* Checks tab v2: a readiness view. Big ready / blocked score, blockers first as cards with their fix, passed checks
+   collapsed. Scoped to .scr-checks. */
+.scr-checks { display: grid; gap: 20px; min-width: 0; }
+
+/* score hero */
+.scr-checks .ck-hero {
+  position: relative; overflow: hidden; display: grid; grid-template-columns: minmax(0, 1.4fr) auto auto; gap: 28px; align-items: center;
+  padding: 26px 28px; border-radius: var(--ds-r-xl); background: var(--ds-surface); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e2);
+}
+.scr-checks .ck-hero::before { content: ""; position: absolute; inset: 0; pointer-events: none; background: radial-gradient(120% 140% at 0% 0%, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .14), transparent 55%); }
+.scr-checks .ck-hero.tone-bad::before { background: radial-gradient(120% 140% at 0% 0%, color-mix(in srgb, var(--bad-solid) 16%, transparent), transparent 55%); }
+.scr-checks .ck-hero.tone-ok::before { background: radial-gradient(120% 140% at 0% 0%, color-mix(in srgb, var(--ok-solid) 16%, transparent), transparent 55%); }
+.scr-checks .ck-hero.tone-warn::before { background: radial-gradient(120% 140% at 0% 0%, color-mix(in srgb, var(--warn-solid) 14%, transparent), transparent 55%); }
+.scr-checks .ck-hero > * { position: relative; }
+.scr-checks .ck-score { display: flex; align-items: center; gap: 20px; min-width: 0; }
+.scr-checks .ck-score-ic { display: grid; place-items: center; width: 72px; height: 72px; border-radius: 22px; flex: none; }
+.scr-checks .ck-score-ic svg { width: 36px; height: 36px; }
+.scr-checks .ck-score-t { display: grid; gap: 6px; min-width: 0; flex: 1; }
+.scr-checks .ck-score-t h2 { margin: 0; font-size: var(--ds-t-display); font-weight: var(--ds-w-display); letter-spacing: -.03em; line-height: 1.05; color: var(--ink); }
+.scr-checks .ck-hero.tone-bad .ck-score-t h2 { color: var(--bad-ink); }
+.scr-checks .ck-hero.tone-ok .ck-score-t h2 { color: var(--ok-ink); }
+.scr-checks .ck-score-t p { margin: 0; font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-checks .ck-score-t .bar { height: 8px; max-width: 420px; margin-top: 4px; }
+.scr-checks .ck-counts { display: flex; gap: 10px; }
+.scr-checks .ck-count { display: grid; justify-items: center; gap: 2px; min-width: 84px; padding: 12px 14px; border-radius: var(--ds-r); background: var(--ds-inset); font-size: var(--ds-t-micro); color: var(--muted); font-weight: 600; }
+.scr-checks .ck-count b { font-size: 26px; font-weight: var(--ds-w-display); line-height: 1.05; color: var(--ink); }
+.scr-checks .ck-count.bad b { color: var(--bad-ink); }
+.scr-checks .ck-count.warn b { color: var(--warn-ink); }
+.scr-checks .ck-count.ok b { color: var(--ok-ink); }
+.scr-checks .ck-hero-acts { display: grid; gap: 8px; justify-items: end; }
+@media (max-width: 1200px) {
+  .scr-checks .ck-hero { grid-template-columns: minmax(0, 1fr) auto; }
+  .scr-checks .ck-hero-acts { grid-column: 1 / -1; justify-items: start; grid-auto-flow: column; justify-content: start; align-items: center; }
+}
+
+/* cards */
+.scr-checks .ck-list { display: grid; gap: 10px; min-width: 0; }
+.scr-checks .ck-card {
+  display: grid; grid-template-columns: auto minmax(0, 1fr) auto; gap: 14px; align-items: start;
+  padding: 14px 16px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); border-left: 3px solid var(--ds-stroke-strong);
+}
+.scr-checks .ck-card.tone-bad { border-left-color: var(--bad-solid); background: color-mix(in srgb, var(--bad-solid) 5%, var(--ds-inset)); }
+.scr-checks .ck-card.tone-warn { border-left-color: var(--warn-solid); }
+.scr-checks .ck-card.tone-ok { border-left-color: var(--ok-solid); }
+.scr-checks .ck-card.tone-info { border-left-color: var(--info-solid); }
+.scr-checks .ck-ic { display: grid; place-items: center; width: 32px; height: 32px; border-radius: 10px; flex: none; }
+.scr-checks .ck-ic svg { width: 17px; height: 17px; }
+.scr-checks .ck-main { display: grid; gap: 6px; min-width: 0; }
+.scr-checks .ck-title { font-weight: var(--ds-w-strong); color: var(--ink); line-height: 1.4; overflow-wrap: anywhere; }
+.scr-checks .ck-gl { display: inline-block; margin-right: 8px; padding: 0 7px; border-radius: var(--ds-r-pill); background: var(--ds-surface); border: 1px solid var(--ds-stroke); font-size: var(--ds-t-micro); font-weight: 650; color: var(--muted); vertical-align: 1px; }
+.scr-checks .ck-sub { font-size: var(--ds-t-meta); color: var(--muted); overflow-wrap: anywhere; }
+.scr-checks .ck-sub code { font-size: var(--ds-t-micro); }
+.scr-checks .ck-fix { display: flex; gap: 8px; align-items: flex-start; padding: 8px 10px; border-radius: var(--ds-r-sm); background: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .08); font-size: var(--ds-t-meta); color: var(--ink-2); overflow-wrap: anywhere; }
+.scr-checks .ck-fix svg { width: 14px; height: 14px; flex: none; margin-top: 2px; color: var(--tint); }
+.scr-checks .ck-ai { margin-top: 2px; }
+.scr-checks .ck-side { display: grid; gap: 8px; justify-items: end; }
+.scr-checks .ck-tags { display: flex; gap: 8px; align-items: center; flex-wrap: wrap; justify-content: flex-end; }
+.scr-checks .ck-store { display: inline-flex; align-items: center; gap: 5px; font-size: var(--ds-t-micro); color: var(--muted); font-weight: 600; white-space: nowrap; }
+.scr-checks .ck-acts { display: flex; gap: 6px; flex-wrap: wrap; justify-content: flex-end; }
+.scr-checks .ck-acts:empty { display: none; }
+.scr-checks .ck-notes { display: grid; gap: 4px; padding-top: 6px; }
+@media (max-width: 900px) { .scr-checks .ck-card { grid-template-columns: auto minmax(0, 1fr); } .scr-checks .ck-side { grid-column: 2; justify-items: start; } }
+
+/* collapsed passed / accepted */
+.scr-checks .ck-passed { border-radius: var(--ds-r-lg); border: 1px solid var(--ds-stroke); background: var(--ds-surface); }
+.scr-checks .ck-list .ck-passed { background: none; border-style: dashed; }
+.scr-checks .ck-passed > summary { display: flex; align-items: center; gap: 8px; padding: 14px 18px; cursor: pointer; font-weight: var(--ds-w-strong); color: var(--ink); list-style: none; }
+.scr-checks .ck-passed > summary::-webkit-details-marker { display: none; }
+.scr-checks .ck-passed > summary svg { width: 16px; height: 16px; color: var(--ok-solid); }
+.scr-checks .ck-passed > summary:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; border-radius: var(--ds-r-lg); }
+.scr-checks .ck-passed > .ck-list { padding: 0 14px 14px; }
+
+/* report */
+.scr-checks .ck-report { display: flex; align-items: center; gap: 16px; padding: 14px 18px; border-radius: var(--ds-r-lg); background: var(--ds-surface); border: 1px solid var(--ds-stroke); }
+.scr-checks .ck-report-t { display: grid; gap: 2px; flex: 1; min-width: 0; font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-checks .ck-report-t b { color: var(--ink); font-size: var(--ds-t-body); }
diff --git a/apps/desktop/src/styles/deps.css b/apps/desktop/src/styles/deps.css
new file mode 100644
index 0000000..096aef9
--- /dev/null
+++ b/apps/desktop/src/styles/deps.css
@@ -0,0 +1,20 @@
+/* Dependencies v2: KPI row, tool cards with status / version / needs chips and the install control. */
+.scr-deps { gap: 22px; }
+.scr-deps .deps-kpis { --ds-min: 220px; }
+.scr-deps .deps-grid { grid-template-columns: repeat(auto-fill, minmax(340px, 1fr)); gap: 14px; padding: 16px 22px 22px; }
+.scr-deps .tool-row { flex-wrap: wrap; align-items: flex-start; gap: 14px; padding: 16px; border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-raised); box-shadow: var(--ds-e1); transition: box-shadow var(--speed) var(--ease); }
+.scr-deps .tool-row:hover { box-shadow: var(--ds-e2); }
+.scr-deps .tool-row .ti { width: 42px; height: 42px; border-radius: 12px; display: grid; place-items: center; flex: none; background: var(--ds-inset); color: var(--muted); }
+.scr-deps .tool-row .ti svg { width: 20px; height: 20px; }
+.scr-deps .tool-ok .ti { background: color-mix(in srgb, var(--ok-fg, var(--accent-solid)) 15%, transparent); color: var(--ok-fg, var(--accent-solid)); }
+.scr-deps .tool-warn .ti { background: color-mix(in srgb, var(--warn-fg, var(--accent-solid)) 15%, transparent); color: var(--warn-fg, var(--accent-solid)); }
+.scr-deps .tool-accent .ti { background: var(--accent-soft); color: var(--accent); }
+.scr-deps .tool-row .li-main { flex: 1 1 200px; gap: 6px; }
+.scr-deps .tool-row .li-title { font-size: var(--ds-t-h3); font-weight: var(--ds-w-title); }
+.scr-deps .tool-chips { flex-wrap: wrap; }
+.scr-deps .tool-acts { flex: 1 1 100%; justify-content: flex-end; flex-wrap: wrap; }
+.scr-deps .tool-acts:empty { display: none; }
+.scr-deps .tool-acts .prog { flex: 1; min-width: 160px; }
+.scr-deps .deps-src { gap: 18px; }
+.scr-deps .kv { row-gap: 8px; }
+.scr-deps .cmd { display: flex; align-items: center; justify-content: space-between; gap: 10px; padding: 10px 14px; border-radius: var(--ds-r-sm); background: var(--ds-inset); border: 1px solid var(--ds-stroke); }
diff --git a/apps/desktop/src/styles/folders.css b/apps/desktop/src/styles/folders.css
new file mode 100644
index 0000000..3878a09
--- /dev/null
+++ b/apps/desktop/src/styles/folders.css
@@ -0,0 +1,22 @@
+/* App folders v2: one card per folder (app icon, tint stripe, health pill, accounts, actions). Ignored: a quiet list. */
+.scr-folders { gap: 22px; }
+.scr-folders .list { grid-template-columns: repeat(auto-fill, minmax(460px, 1fr)); gap: 16px; padding: 16px 22px 22px; }
+.scr-folders .fold-card { position: relative; flex-wrap: wrap; align-items: flex-start; gap: 14px; padding: 18px; border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-raised); box-shadow: var(--ds-e1); overflow: hidden; transition: box-shadow var(--speed) var(--ease); }
+.scr-folders .fold-card::before { content: ""; position: absolute; inset: 0 0 auto; height: 3px; background: var(--tint); }
+.scr-folders .fold-card:hover { box-shadow: var(--ds-e3); }
+.scr-folders .fold-card .app-icon.fold-icon { width: 52px; height: 52px; border-radius: 14px; }
+.scr-folders .fold-card .li-main { flex: 1 1 220px; gap: 4px; }
+.scr-folders .fold-card .li-title { font-size: var(--ds-t-h3); font-weight: var(--ds-w-title); }
+.scr-folders .fold-accs { flex: 1 1 100%; display: grid !important; grid-template-columns: 1fr 1fr; gap: 8px !important; }
+.scr-folders .fold-acts { flex: 1 1 100%; flex-wrap: wrap; padding-top: 12px; border-top: 1px solid var(--ds-stroke); }
+.scr-folders .fold-acts > :last-child { margin-left: auto; }
+.scr-folders .log { max-height: 360px; border-radius: var(--ds-r-sm); }
+.scr-folders .act-note { display: flex; gap: 8px; align-items: center; margin-top: 14px; }
+
+.scr-ignored { gap: 20px; }
+.scr-ignored .ds-sec { box-shadow: none; background: transparent; }
+.scr-ignored .list { padding: 6px 10px 10px; }
+.scr-ignored .li { border-top: 0; border-radius: var(--ds-r-sm); padding: 10px 12px; align-items: center; opacity: .82; transition: background var(--speed) var(--ease), opacity var(--speed) var(--ease); }
+.scr-ignored .li:hover, .scr-ignored .li:focus-within { background: var(--ds-inset); opacity: 1; }
+.scr-ignored .li .app-icon { width: 34px; height: 34px; filter: saturate(.55); }
+.scr-ignored .card-body { padding: 4px 22px 18px; }
diff --git a/apps/desktop/src/styles/growth.css b/apps/desktop/src/styles/growth.css
new file mode 100644
index 0000000..0be3636
--- /dev/null
+++ b/apps/desktop/src/styles/growth.css
@@ -0,0 +1,37 @@
+/* Growth tab v2: funnel tiles with deltas, ASO tiles, experiments. Scoped to .scr-growth. */
+.scr-growth { display: grid; gap: 20px; min-width: 0; }
+.scr-growth .gr-body { display: grid; gap: 18px; min-width: 0; }
+.scr-growth .gr-note, .scr-growth .gr-text { margin: 0; font-size: var(--ds-t-meta); color: var(--muted); line-height: 1.5; }
+.scr-growth .gr-text { color: var(--ink-2); font-size: var(--ds-t-body); }
+
+/* reach -> installs -> conversion */
+.scr-growth .gr-funnel { display: grid; grid-template-columns: minmax(0, 1fr) auto minmax(0, 1fr) auto minmax(0, 1fr); align-items: stretch; gap: 10px; }
+.scr-growth .gr-step { display: grid; place-items: center; color: var(--tint); }
+.scr-growth .gr-step svg { width: 20px; height: 20px; }
+.scr-growth .gr-funnel .ds-stat, .scr-growth .gr-tiles .ds-stat { background: var(--ds-inset); box-shadow: none; }
+.scr-growth .gr-funnel .ds-stat-v { font-size: 36px; }
+@media (max-width: 900px) {
+  .scr-growth .gr-funnel { grid-template-columns: minmax(0, 1fr); }
+  .scr-growth .gr-step { transform: rotate(90deg); }
+}
+.scr-growth .gr-tiles { display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 12px; }
+.scr-growth .gr-tiles .ds-stat-v { font-size: 24px; }
+
+/* next actions */
+.scr-growth .gr-next { display: grid; gap: 10px; padding: 16px 18px; border-radius: var(--ds-r); background: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .07); border: 1px solid hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .22); }
+.scr-growth .gr-next-h { display: flex; align-items: center; gap: 8px; font-weight: var(--ds-w-strong); color: var(--ink); }
+.scr-growth .gr-next-h svg { width: 16px; height: 16px; color: var(--tint); }
+.scr-growth .gr-next ol { list-style: none; margin: 0; padding: 0; display: grid; gap: 10px; }
+.scr-growth .gr-next li { display: grid; grid-template-columns: 24px minmax(0, 1fr); gap: 10px; align-items: start; }
+.scr-growth .gr-next-n { display: grid; place-items: center; width: 24px; height: 24px; border-radius: 50%; background: var(--tint); color: #fff; font-size: var(--ds-t-micro); font-weight: 700; }
+.scr-growth .gr-next-t { display: grid; gap: 2px; min-width: 0; font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-growth .gr-next-t b { color: var(--ink); font-size: var(--ds-t-body); font-weight: var(--ds-w-strong); }
+
+/* experiments */
+.scr-growth .gr-exp { display: grid; gap: 20px; align-items: start; }
+.scr-growth .gr-exp.two { grid-template-columns: minmax(0, 1fr) 360px; }
+@media (max-width: 1180px) { .scr-growth .gr-exp.two { grid-template-columns: minmax(0, 1fr); } }
+.scr-growth .gr-ppo-act { display: grid; gap: 12px; padding-top: 16px; border-top: 1px solid var(--ds-stroke); }
+.scr-growth .gr-ppo-act .act-col { border-radius: var(--ds-r); background: var(--ds-inset); border-color: var(--ds-stroke); padding: 14px 16px; }
+.scr-growth .gr-foot { display: flex; align-items: center; gap: 8px; font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-growth .gr-foot svg { width: 14px; height: 14px; }
diff --git a/apps/desktop/src/styles/health.css b/apps/desktop/src/styles/health.css
new file mode 100644
index 0000000..b84854a
--- /dev/null
+++ b/apps/desktop/src/styles/health.css
@@ -0,0 +1,79 @@
+/* Health tab v2: big metric tiles (crash, ANR, startup) with large sparklines, issues as cards. Scoped to .scr-health. */
+.scr-health { display: grid; gap: 20px; min-width: 0; }
+.scr-health .hl-top { display: flex; align-items: center; gap: 12px; }
+.scr-health .hl-top .grow { flex: 1; }
+
+.scr-health .hl-tiles { display: grid; grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); gap: 16px; }
+.scr-health .hl-tile {
+  position: relative; overflow: hidden; display: grid; gap: 12px; align-content: start; min-width: 0;
+  padding: 20px 22px 18px; border-radius: var(--ds-r-lg); background: var(--ds-surface);
+  border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e2);
+}
+.scr-health .hl-tile::before { content: ""; position: absolute; inset: 0 0 auto; height: 3px; background: var(--tint); opacity: .85; }
+.scr-health .hl-tile.tone-bad::before { background: var(--bad-solid); }
+.scr-health .hl-tile.tone-warn::before { background: var(--warn-solid); }
+.scr-health .hl-tile.tone-ok::before { background: var(--ok-solid); }
+.scr-health .hl-tile-h { display: flex; align-items: center; justify-content: space-between; gap: 10px; }
+.scr-health .hl-tile-l { display: inline-flex; align-items: center; gap: 8px; font-size: var(--ds-t-h3); font-weight: var(--ds-w-strong); color: var(--ink); min-width: 0; }
+.scr-health .hl-tile-l svg { width: 18px; height: 18px; color: var(--tint); flex: none; }
+.scr-health .hl-tile-v { display: flex; align-items: baseline; gap: 12px; flex-wrap: wrap; }
+.scr-health .hl-big { font-size: 44px; font-weight: var(--ds-w-display); letter-spacing: -.035em; line-height: 1; color: var(--ink); font-variant-numeric: tabular-nums; }
+.scr-health .hl-big small { font-size: var(--ds-t-h3); font-weight: 600; color: var(--muted); margin-left: 6px; letter-spacing: 0; }
+.scr-health .hl-big.bad { color: var(--bad-ink); }
+.scr-health .hl-big.warn { color: var(--warn-ink); }
+.scr-health .hl-big.ok { color: var(--ok-ink); }
+.scr-health .hl-tile-sub { font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-health .hl-tile .spark { height: 132px; }
+.scr-health .hl-axis { display: flex; justify-content: space-between; font-size: var(--ds-t-micro); color: var(--muted); font-variant-numeric: tabular-nums; margin-top: -4px; }
+.scr-health .hl-legend { display: flex; flex-wrap: wrap; align-items: center; gap: 8px 16px; font-size: var(--ds-t-micro); color: var(--muted); padding-top: 10px; border-top: 1px solid var(--ds-stroke); }
+.scr-health .hl-legend .lg { display: inline-flex; align-items: center; gap: 6px; }
+.scr-health .hl-legend .sw { width: 16px; height: 3px; border-radius: 2px; background: var(--accent-solid); }
+.scr-health .hl-legend .sw.ok { background: var(--ok-solid); }
+.scr-health .hl-legend .sw.warn { background: var(--warn-solid); }
+.scr-health .hl-legend .sw.bad { background: var(--bad-solid); }
+.scr-health .hl-legend .sw.thr { background: repeating-linear-gradient(90deg, var(--bad-solid) 0 4px, transparent 4px 7px); }
+.scr-health .hl-win { margin-left: auto; }
+.scr-health .hl-startup-meta { display: inline-flex; align-items: center; gap: 6px; font-size: var(--ds-t-meta); color: var(--muted); }
+
+.scr-health .hl-store { display: flex; align-items: center; gap: 10px; margin: 8px 0 -6px; font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); color: var(--ink); }
+.scr-health .hl-store svg { width: 18px; height: 18px; color: var(--tint); }
+
+.scr-health .hl-two { display: grid; grid-template-columns: minmax(0, 1.35fr) minmax(0, 1fr); gap: 16px; align-items: start; }
+.scr-health .hl-col { display: grid; gap: 16px; min-width: 0; }
+@media (max-width: 1100px) { .scr-health .hl-two { grid-template-columns: minmax(0, 1fr); } }
+
+/* issues as cards */
+.scr-health .hl-issues { display: grid; gap: 10px; }
+.scr-health .hl-issue { border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-inset); overflow: hidden; border-left: 3px solid var(--bad-solid); }
+.scr-health .hl-issue.tone-warn { border-left-color: var(--warn-solid); }
+.scr-health .hl-issue.tone-info { border-left-color: var(--info-solid); }
+.scr-health .hl-issue.open { background: var(--ds-surface); box-shadow: var(--ds-e1); }
+.scr-health .hl-issue-h { all: unset; box-sizing: border-box; display: grid; grid-template-columns: auto minmax(0, 1fr) auto; align-items: center; gap: 12px; width: 100%; padding: 12px 14px; cursor: pointer; }
+.scr-health .hl-issue-h:hover { background: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .06); }
+.scr-health .hl-issue-h:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; border-radius: var(--ds-r); }
+.scr-health .hl-issue-h .chev { color: var(--muted); transition: transform var(--speed) var(--ease); }
+.scr-health .hl-issue-h .chev.rot { transform: rotate(90deg); }
+.scr-health .hl-issue-t { display: grid; gap: 4px; min-width: 0; }
+.scr-health .hl-issue-top { display: flex; align-items: center; gap: 8px; min-width: 0; }
+.scr-health .hl-issue-title { font-weight: var(--ds-w-strong); color: var(--ink); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; min-width: 0; }
+.scr-health .hl-issue-where { color: var(--muted); font-size: var(--ds-t-micro); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.scr-health .hl-issue-stats { display: flex; gap: 14px; font-size: var(--ds-t-micro); color: var(--muted); }
+.scr-health .hl-issue-stats span { display: grid; justify-items: end; gap: 1px; }
+.scr-health .hl-issue-stats b { font-size: var(--ds-t-h3); color: var(--ink); font-weight: var(--ds-w-title); }
+.scr-health .hl-issue-b { padding: 4px 16px 16px; border-top: 1px solid var(--ds-stroke); }
+.scr-health .hl-issue-b .issue-detail { padding-top: 12px; }
+
+/* bars and metric rows */
+.scr-health .hl-bars { display: grid; gap: 12px; }
+.scr-health .hl-bar { display: grid; grid-template-columns: minmax(90px, 160px) minmax(0, 1fr) 64px; align-items: center; gap: 12px; font-size: var(--ds-t-meta); }
+.scr-health .hl-bar .nm { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--ink); font-weight: 600; }
+.scr-health .hl-bar .num { text-align: right; color: var(--muted); }
+.scr-health .hl-mets { display: grid; gap: 2px; }
+.scr-health .hl-met { display: grid; grid-template-columns: minmax(0, 1fr) auto 72px; align-items: center; gap: 12px; padding: 10px 4px; border-bottom: 1px solid var(--ds-stroke); }
+.scr-health .hl-met:last-child { border-bottom: 0; }
+.scr-health .hl-met-t { display: grid; gap: 2px; min-width: 0; }
+.scr-health .hl-met-t b { font-weight: var(--ds-w-strong); color: var(--ink); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.scr-health .hl-met-t small { font-size: var(--ds-t-micro); color: var(--muted); }
+.scr-health .hl-met-v { font-weight: var(--ds-w-title); color: var(--ink); text-align: right; }
+.scr-health .hl-met-v small { color: var(--muted); font-weight: 500; }
+.scr-health .hl-met > :last-child { justify-self: end; }
diff --git a/apps/desktop/src/styles/listings.css b/apps/desktop/src/styles/listings.css
new file mode 100644
index 0000000..124c1b1
--- /dev/null
+++ b/apps/desktop/src/styles/listings.css
@@ -0,0 +1,36 @@
+/* Listings tab + listing editors (desktop v2): the store page per language. Scoped under .scr-listings. */
+.scr-listings { display: flex; flex-direction: column; gap: 18px; min-width: 0; }
+.scr-listings .ds-grid.lst-stats { --ds-min: 200px; }
+.scr-listings .ds-sec-h h2 .store-mark, .scr-listings .ds-sec-h h2 > svg { width: 16px; height: 16px; }
+
+.scr-listings .lst-pages { display: grid; gap: 14px; grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); }
+.scr-listings .lst-page { background: var(--ds-raised); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); box-shadow: var(--ds-e1); padding: 14px 16px 16px; display: grid; gap: 12px; position: relative; overflow: hidden; }
+.scr-listings .lst-page::before { content: ""; position: absolute; inset: 0 0 auto 0; height: 3px; background: var(--tint, var(--accent-solid)); opacity: .55; }
+.scr-listings .lst-page.done::before { background: var(--ok-solid); }
+.scr-listings .lst-page.bad::before { background: var(--bad-solid); opacity: .8; }
+.scr-listings .lst-page-h { display: flex; align-items: center; gap: 8px; }
+.scr-listings .lst-lang { font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); letter-spacing: -.01em; }
+.scr-listings .lst-page-h .grow { flex: 1; }
+.scr-listings .lst-fields { display: grid; gap: 9px; }
+.scr-listings .lst-f { display: grid; grid-template-columns: 112px minmax(0, 1fr); align-items: center; gap: 10px; }
+.scr-listings .lst-f-l { font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-listings .lst-f.f-title .lst-f-l, .scr-listings .lst-f.f-name .lst-f-l { color: var(--text); font-weight: var(--ds-w-strong); font-size: var(--ds-t-h3); }
+.scr-listings .lst-f.f-short .lst-f-l, .scr-listings .lst-f.f-subtitle .lst-f-l { color: var(--text); font-weight: 600; }
+.scr-listings .lg-cell .bar { height: 6px; border-radius: var(--ds-r-pill); }
+.scr-listings .lst-foot-cmd { border: 0; background: none; padding: 6px 0 0; }
+
+/* the store page preview in the editors */
+.scr-listings .lst-preview { background: var(--ds-inset); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); padding: 14px 16px; display: grid; gap: 10px; margin: 4px 0 8px; }
+.scr-listings .lst-pv-eyebrow { font-size: var(--ds-t-micro); color: var(--muted); font-weight: 650; letter-spacing: .02em; }
+.scr-listings .lst-pv-top { display: flex; gap: 14px; align-items: center; min-width: 0; }
+.scr-listings .lst-pv-icon { flex: none; width: 64px; height: 64px; border-radius: 15px; display: grid; place-items: center; font-size: 28px; font-weight: var(--ds-w-display); color: #fff; background: var(--ds-grad); box-shadow: var(--ds-e2); }
+.scr-listings .lst-preview.play .lst-pv-icon { border-radius: 20%; }
+.scr-listings .lst-pv-names { min-width: 0; display: grid; gap: 3px; }
+.scr-listings .lst-pv-title { font-size: 20px; font-weight: var(--ds-w-title); letter-spacing: -.015em; line-height: 1.2; overflow-wrap: anywhere; }
+.scr-listings .lst-pv-sub { font-size: var(--ds-t-body); color: var(--muted); line-height: 1.35; }
+.scr-listings .lst-pv-promo { margin: 0; font-size: var(--ds-t-body); line-height: 1.45; padding: 8px 12px; border-radius: var(--ds-r-sm); background: color-mix(in srgb, var(--tint, var(--accent-solid)) 10%, transparent); }
+.scr-listings .lst-pv-desc { margin: 0; font-size: var(--ds-t-body); line-height: 1.5; white-space: pre-line; display: -webkit-box; -webkit-line-clamp: 4; -webkit-box-orient: vertical; overflow: hidden; }
+.scr-listings .lst-pv-more { justify-self: end; font-size: var(--ds-t-meta); font-weight: 650; color: var(--tint, var(--accent-solid)); margin-top: -6px; }
+.scr-listings .lst-langbar .btn { border-radius: var(--ds-r-pill); }
+.scr-listings .ed-cols { gap: 18px; }
+.scr-listings .ed-col { background: var(--ds-raised); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); padding: 14px 16px; }
diff --git a/apps/desktop/src/styles/onboarding.css b/apps/desktop/src/styles/onboarding.css
new file mode 100644
index 0000000..0b845da
--- /dev/null
+++ b/apps/desktop/src/styles/onboarding.css
@@ -0,0 +1,33 @@
+/* Onboarding v2: bigger, friendlier first run with a step progress rail. Scoped under .wz2. */
+.wz2 { backdrop-filter: blur(6px); }
+.wz2 .wizard { width: min(1080px, 100%); height: min(700px, 100%); grid-template-columns: 290px minmax(0, 1fr); border-radius: var(--ds-r-xl); border-color: var(--ds-stroke); background: var(--ds-surface); box-shadow: var(--ds-e3); overflow: hidden; }
+.wz2 .wz-side { background: var(--ds-inset); border-right-color: var(--ds-stroke); padding: 28px 20px; position: relative; }
+.wz2 .wz-side::before { content: ""; position: absolute; inset: 0 0 auto; height: 160px; background: var(--ds-grad-soft); opacity: .7; pointer-events: none; }
+.wz2 .wz-side > * { position: relative; }
+.wz2 .wz-side .brand { font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); }
+.wz2 .wz-step { padding: 11px 12px; border-radius: var(--ds-r-sm); }
+.wz2 .wz-step[aria-current="step"] { background: var(--ds-raised); box-shadow: var(--ds-e2), inset 0 0 0 1px var(--ds-stroke); }
+.wz2 .wz-num { width: 28px; height: 28px; }
+.wz2 .wz-step[aria-current="step"] .wz-num { background: var(--ds-grad); border-color: transparent; color: #fff; }
+.wz2 .wz-progress { display: grid; gap: 10px; padding: 26px 44px 0; }
+.wz2 .wz-eyebrow { display: inline-flex; align-items: center; gap: 8px; font-size: var(--ds-t-meta); font-weight: var(--ds-w-strong); color: var(--accent); letter-spacing: .02em; }
+.wz2 .wz-eyebrow svg { width: 15px; height: 15px; }
+.wz2 .wz-bar { display: grid; grid-auto-flow: column; grid-auto-columns: 1fr; gap: 6px; }
+.wz2 .wz-bar span { height: 6px; border-radius: var(--ds-r-pill); background: var(--ds-stroke); transition: background var(--speed) var(--ease); }
+.wz2 .wz-bar span.done { background: color-mix(in srgb, var(--accent-solid) 55%, var(--ds-stroke)); }
+.wz2 .wz-bar span.on { background: var(--ds-grad); }
+.wz2 .wz-body { padding: 22px 44px 24px; gap: 20px; }
+.wz2 .wz-body h2 { font-size: var(--ds-t-h1); font-weight: var(--ds-w-display); letter-spacing: -.025em; line-height: 1.15; }
+.wz2 .wz-body h2:focus { outline: none; }
+.wz2 .wz-body h2:focus-visible { outline: 2px solid var(--focus); outline-offset: 4px; border-radius: 6px; }
+.wz2 .wz-body .lead { font-size: 15px; }
+.wz2 .ck { padding: 14px 16px; border-color: var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-raised); box-shadow: var(--ds-e1); }
+.wz2 .ck .ck-ic { width: 36px; height: 36px; border-radius: 10px; }
+.wz2 .ck .ck-ic svg { width: 18px; height: 18px; }
+.wz2 .ck-pick[aria-checked="true"] { border-color: var(--accent-solid); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent-solid) 18%, transparent); }
+.wz2 .choice { padding: 18px; border-color: var(--ds-stroke); border-radius: var(--ds-r-lg); background: var(--ds-raised); box-shadow: var(--ds-e1); }
+.wz2 .choice:hover { box-shadow: var(--ds-e3); }
+.wz2 .choice .ch-icon { width: 40px; height: 40px; border-radius: 12px; background: var(--ds-grad); color: #fff; }
+.wz2 .choice b { font-size: var(--ds-t-h3); }
+.wz2 .wz-foot { padding: 16px 24px; border-top-color: var(--ds-stroke); background: var(--ds-inset); }
+@media (prefers-reduced-motion: reduce) { .wz2 .wz-bar span { transition: none; } }
diff --git a/apps/desktop/src/styles/prices.css b/apps/desktop/src/styles/prices.css
new file mode 100644
index 0000000..fd37233
--- /dev/null
+++ b/apps/desktop/src/styles/prices.css
@@ -0,0 +1,17 @@
+/* Prices tab (desktop v2): a clean price matrix with region codes and the store gaps highlighted. Scoped under .scr-prices. */
+.scr-prices { display: flex; flex-direction: column; gap: 18px; min-width: 0; }
+section.scr-prices { display: block; }
+.scr-prices .ds-grid.px-stats { --ds-min: 200px; }
+.scr-prices .ds-sec > .ds-table-wrap { margin: 14px 22px 16px; box-shadow: none; }
+.scr-prices .px-region { display: inline-block; font-weight: var(--ds-w-strong); }
+.scr-prices .px-region.code { font-family: var(--mono, ui-monospace, monospace); font-size: var(--ds-t-micro); letter-spacing: .04em; padding: 2px 7px; border-radius: var(--ds-r-xs); background: var(--ds-inset); border: 1px solid var(--ds-stroke); }
+.scr-prices .px-matrix th:first-child, .scr-prices .px-matrix td:first-child { position: sticky; left: 0; background: var(--ds-surface); z-index: 1; }
+.scr-prices .px-matrix thead th:first-child { z-index: 3; }
+.scr-prices .px-matrix th { text-align: left; }
+.scr-prices .px-matrix tr.sel td { background: color-mix(in srgb, var(--tint, var(--accent-solid)) 9%, var(--ds-surface)); }
+.scr-prices .px-stack { padding: 4px 6px; border-radius: var(--ds-r-xs); }
+.scr-prices .px-stack.gap-warn { background: color-mix(in srgb, var(--warn-solid) 14%, transparent); }
+.scr-prices .px-stack.gap-bad { background: color-mix(in srgb, var(--bad-solid) 14%, transparent); }
+.scr-prices tr.gap-warn td:first-child { box-shadow: inset 3px 0 0 var(--warn-solid); }
+.scr-prices tr.gap-bad td:first-child { box-shadow: inset 3px 0 0 var(--bad-solid); }
+.scr-prices .legend-row { display: flex; gap: 16px; flex-wrap: wrap; align-items: center; }
diff --git a/apps/desktop/src/styles/releases.css b/apps/desktop/src/styles/releases.css
new file mode 100644
index 0000000..4b20787
--- /dev/null
+++ b/apps/desktop/src/styles/releases.css
@@ -0,0 +1,94 @@
+/* Releases tab (v2): one big card per release train, a card per store inside with a stepper and a rollout ring. */
+.scr-releases { display: flex; flex-direction: column; gap: 24px; min-width: 0; }
+
+/* train */
+.scr-releases .rel-train { position: relative; background: var(--ds-surface); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r-lg); box-shadow: var(--ds-e2); padding: 22px 24px 24px; overflow: hidden; }
+.scr-releases .rel-train::before { content: ""; position: absolute; inset: 0 0 auto 0; height: 3px; background: var(--tint, var(--accent-solid)); opacity: .85; }
+.scr-releases .rel-train.ok::before { background: var(--ok-solid); }
+.scr-releases .rel-train.accent { background: linear-gradient(180deg, hsl(var(--tint-h, 250) var(--ds-tint-s) var(--ds-tint-l) / var(--ds-tint-a2)), transparent 160px), var(--ds-surface); }
+.scr-releases .rel-train-h { display: flex; align-items: center; gap: 14px; flex-wrap: wrap; margin-bottom: 18px; }
+.scr-releases .rel-train-title { display: flex; flex-direction: column; gap: 2px; }
+.scr-releases .rel-train-eyebrow { font-size: var(--ds-t-micro); font-weight: var(--ds-w-strong); color: var(--muted); letter-spacing: .04em; }
+.scr-releases .rel-train-ver { font-size: var(--ds-t-display); font-weight: var(--ds-w-display); letter-spacing: -.03em; line-height: 1.05; color: var(--ink); }
+.scr-releases .rel-train-h .grow { flex: 1; }
+.scr-releases .rel-train-meta { display: inline-flex; align-items: center; gap: 6px; color: var(--muted); font-size: var(--ds-t-meta); }
+.scr-releases .rel-train-meta svg { width: 14px; height: 14px; }
+
+.scr-releases .rel-lanes { display: grid; grid-template-columns: repeat(auto-fit, minmax(440px, 1fr)); gap: 16px; }
+
+/* store card (neutralise the old .tl-lane / .tl-roll / .tl-none grid rules from styles.css) */
+.scr-releases .tl-lane.rel-store { grid-template-columns: none; align-items: stretch; }
+.scr-releases .tl-roll.rel-ring-wrap { position: static; width: auto; display: flex; top: auto; }
+.scr-releases .tl-roll .pct { text-align: left; font-size: var(--ds-t-h3); }
+.scr-releases .tl-none.rel-gap { grid-column: auto; text-align: left; border: 0; }
+.scr-releases .rel-store { display: flex; flex-direction: column; gap: 18px; background: var(--ds-raised); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); padding: 18px 20px; min-width: 0; box-shadow: var(--ds-e1); }
+.scr-releases .rel-store[data-tone="bad"] { border-color: color-mix(in srgb, var(--bad-solid) 45%, var(--ds-stroke)); }
+.scr-releases .rel-store-h { display: flex; align-items: center; gap: 12px; }
+.scr-releases .rel-mark { width: 40px; height: 40px; border-radius: 12px; display: grid; place-items: center; background: var(--ds-inset); border: 1px solid var(--ds-stroke); color: var(--ink); flex: none; }
+.scr-releases .rel-mark svg { width: 20px; height: 20px; }
+.scr-releases .rel-who { flex: 1; min-width: 0; }
+.scr-releases .rel-store-name { font-size: var(--ds-t-h3); font-weight: var(--ds-w-title); }
+.scr-releases .rel-store-ver { font-size: var(--ds-t-meta); color: var(--muted); margin-top: 1px; }
+
+.scr-releases .rel-gap { display: flex; align-items: center; gap: 10px; padding: 14px 16px; border-radius: var(--ds-r-sm); background: var(--ds-inset); color: var(--muted); font-size: var(--ds-t-body); }
+.scr-releases .rel-gap svg { width: 16px; height: 16px; flex: none; }
+.scr-releases .rel-gap[data-gap="unreadable"] { background: var(--warn-bg); color: var(--warn-ink); }
+
+.scr-releases .rel-body { display: flex; flex-direction: column; gap: 18px; }
+
+/* stepper */
+.scr-releases .rel-steps { list-style: none; margin: 0; padding: 0; display: grid; grid-template-columns: repeat(5, minmax(0, 1fr)); }
+.scr-releases .rel-step { position: relative; display: flex; flex-direction: column; align-items: center; gap: 6px; text-align: center; min-width: 0; }
+.scr-releases .rel-step::before { content: ""; position: absolute; top: 15px; right: 50%; width: 100%; height: 3px; border-radius: 3px; background: var(--ds-stroke-strong); z-index: 0; }
+.scr-releases .rel-step:first-child::before { display: none; }
+.scr-releases .rel-step.done::before, .scr-releases .rel-step.cur::before { background: var(--tint, var(--accent-solid)); }
+.scr-releases .rel-node { position: relative; z-index: 1; width: 32px; height: 32px; border-radius: 50%; display: grid; place-items: center; background: var(--ds-inset); border: 2px solid var(--ds-stroke-strong); color: var(--muted); font-size: var(--ds-t-micro); font-weight: var(--ds-w-strong); }
+.scr-releases .rel-node svg { width: 15px; height: 15px; }
+.scr-releases .rel-step.done .rel-node { background: var(--tint, var(--accent-solid)); border-color: var(--tint, var(--accent-solid)); color: #fff; }
+.scr-releases .rel-step.cur .rel-node { background: var(--ds-raised); border-color: var(--tint, var(--accent-solid)); color: var(--tint, var(--accent-solid)); box-shadow: 0 0 0 5px hsl(var(--tint-h, 250) var(--ds-tint-s) var(--ds-tint-l) / .22); }
+.scr-releases .rel-step.cur.ok .rel-node { border-color: var(--ok-solid); color: var(--ok-solid); box-shadow: 0 0 0 5px color-mix(in srgb, var(--ok-solid) 22%, transparent); }
+.scr-releases .rel-step.cur.warn .rel-node { border-color: var(--warn-solid); color: var(--warn-solid); box-shadow: 0 0 0 5px color-mix(in srgb, var(--warn-solid) 24%, transparent); }
+.scr-releases .rel-step.cur.bad .rel-node { border-color: var(--bad-solid); color: var(--bad-solid); box-shadow: 0 0 0 5px color-mix(in srgb, var(--bad-solid) 24%, transparent); }
+.scr-releases .rel-step.cur.info .rel-node { border-color: var(--info-solid); color: var(--info-solid); box-shadow: 0 0 0 5px color-mix(in srgb, var(--info-solid) 22%, transparent); }
+.scr-releases .rel-step-l { font-size: var(--ds-t-meta); color: var(--muted); font-weight: 560; }
+.scr-releases .rel-step.done .rel-step-l { color: var(--ink); }
+.scr-releases .rel-step.cur .rel-step-l { color: var(--ink); font-weight: var(--ds-w-title); }
+.scr-releases .rel-step-c { font-size: var(--ds-t-micro); font-weight: var(--ds-w-strong); padding: 2px 8px; border-radius: var(--ds-r-pill); background: var(--ds-inset); color: var(--ink); max-width: 100%; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+
+/* rollout ring (conic gradient, no svg) */
+.scr-releases .rel-ring-wrap { display: flex; align-items: center; gap: 18px; padding: 14px 16px; border-radius: var(--ds-r); background: var(--ds-inset); --ring: var(--tint, var(--accent-solid)); }
+.scr-releases .rel-ring-wrap.ok { --ring: var(--ok-solid); }
+.scr-releases .rel-ring-wrap.bad { --ring: var(--bad-solid); }
+.scr-releases .rel-ring { --p: 0; flex: none; width: 92px; height: 92px; border-radius: 50%; display: grid; place-items: center;
+  background: conic-gradient(var(--ring) calc(var(--p) * 1%), var(--ds-stroke-strong) 0); }
+.scr-releases .rel-ring::before { content: ""; grid-area: 1 / 1; width: 74px; height: 74px; border-radius: 50%; background: var(--ds-raised); }
+.scr-releases .rel-ring-v { grid-area: 1 / 1; position: relative; font-size: 24px; font-weight: var(--ds-w-display); letter-spacing: -.02em; color: var(--ink); }
+.scr-releases .rel-ring-v small { font-size: 13px; font-weight: var(--ds-w-strong); color: var(--muted); margin-left: 1px; }
+.scr-releases .rel-ring-side { flex: 1; min-width: 0; display: flex; flex-direction: column; gap: 4px; }
+.scr-releases .rel-ring-side .pct { font-size: var(--ds-t-h3); font-weight: var(--ds-w-title); color: var(--ink); }
+.scr-releases .rel-ring-sub { font-size: var(--ds-t-meta); color: var(--muted); margin-bottom: 6px; }
+.scr-releases .rel-ring-side .rbar { height: 6px; }
+.scr-releases .rel-ring-wrap .rbar .fill { fill: var(--ring); }
+
+/* rollout controls */
+.scr-releases .roll-ctl { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; padding-top: 14px; border-top: 1px solid var(--ds-stroke); }
+.scr-releases .roll-ctl > .small.muted { flex-basis: 100%; }
+
+/* history */
+.scr-releases .rel-count { font-size: var(--ds-t-meta); color: var(--muted); font-weight: var(--ds-w-strong); }
+.scr-releases .rel-history .ds-table-wrap { margin: 14px 22px 22px; --ds-table-max: 420px; }
+.scr-releases .rel-hv { font-size: var(--ds-t-h3); }
+
+/* send for review */
+.scr-releases .rel-submit { gap: 14px; }
+.scr-releases .rel-sec-h { display: flex; flex-direction: column; gap: 4px; padding: 0 2px; }
+.scr-releases .rel-sec-title { font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); letter-spacing: -.015em; display: flex; align-items: center; gap: 10px; margin: 0; }
+.scr-releases .rel-sec-sub { color: var(--muted); font-size: var(--ds-t-meta); margin: 0; }
+.scr-releases .rel-submit-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(460px, 1fr)); gap: 16px; align-items: start; }
+
+@media (max-width: 1100px) {
+  .scr-releases .rel-lanes, .scr-releases .rel-submit-grid { grid-template-columns: 1fr; }
+}
+@media (prefers-reduced-motion: no-preference) {
+  :root:not([data-motion="reduce"]) .scr-releases .rel-step.cur .rel-node { transition: box-shadow var(--speed, .2s) var(--ease, ease); }
+}
diff --git a/apps/desktop/src/styles/reviews.css b/apps/desktop/src/styles/reviews.css
new file mode 100644
index 0000000..7bba1e3
--- /dev/null
+++ b/apps/desktop/src/styles/reviews.css
@@ -0,0 +1,81 @@
+/* Reviews tab v2: rating summary, filters on a toolbar, a store-like review feed and the reply panel. Scoped to .scr-reviews. */
+.scr-reviews { display: grid; gap: 18px; min-width: 0; }
+.scr-reviews .grow { flex: 1; }
+
+/* rating summary */
+.scr-reviews .rv2-sum {
+  display: grid; grid-template-columns: auto minmax(220px, 1fr) auto; gap: 28px; align-items: center;
+  padding: 22px 26px; border-radius: var(--ds-r-lg); background: var(--ds-surface); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e2);
+  position: relative; overflow: hidden;
+}
+.scr-reviews .rv2-sum::before { content: ""; position: absolute; inset: 0 0 auto; height: 3px; background: var(--tint); opacity: .85; }
+.scr-reviews .rv2-avg { display: grid; justify-items: center; gap: 6px; padding-right: 28px; border-right: 1px solid var(--ds-stroke); }
+.scr-reviews .rv2-avg b { font-size: 56px; line-height: 1; font-weight: var(--ds-w-display); letter-spacing: -.04em; color: var(--ink); }
+.scr-reviews .rv2-avg .stars svg { width: 18px; height: 18px; }
+.scr-reviews .rv2-avg span { font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-reviews .rv2-dist { display: grid; gap: 6px; max-width: 520px; }
+.scr-reviews .rv2-dist-row {
+  all: unset; box-sizing: border-box; display: grid; grid-template-columns: 34px minmax(0, 1fr) 40px; align-items: center; gap: 10px;
+  padding: 3px 6px; border-radius: var(--ds-r-xs); cursor: pointer; font-size: var(--ds-t-meta); color: var(--muted);
+  transition: opacity var(--speed) var(--ease), background var(--speed) var(--ease);
+}
+.scr-reviews .rv2-dist-row:hover { background: var(--ds-inset); }
+.scr-reviews .rv2-dist-row:focus-visible { outline: 2px solid var(--focus); outline-offset: 1px; }
+.scr-reviews .rv2-dist-row[aria-pressed="true"] { background: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .14); color: var(--ink); }
+.scr-reviews .rv2-dist-row[data-dim] { opacity: .45; }
+.scr-reviews .rv2-dist-row > span:first-child { display: inline-flex; align-items: center; gap: 3px; font-weight: 650; color: var(--ink); }
+.scr-reviews .rv2-dist-row > span:first-child svg { width: 11px; height: 11px; color: var(--warn-solid); }
+.scr-reviews .rv2-dist-row > span:last-child { text-align: right; }
+.scr-reviews .rv2-dist-row .bar { height: 10px; }
+.scr-reviews .rv2-side { display: grid; gap: 10px; justify-items: end; }
+.scr-reviews .rv2-unans { display: grid; justify-items: end; gap: 2px; }
+.scr-reviews .rv2-unans b { font-size: var(--ds-t-stat); font-weight: var(--ds-w-display); color: var(--ink); line-height: 1; }
+.scr-reviews .rv2-unans span { font-size: var(--ds-t-meta); color: var(--muted); }
+@media (max-width: 1100px) {
+  .scr-reviews .rv2-sum { grid-template-columns: auto minmax(0, 1fr); }
+  .scr-reviews .rv2-side { grid-column: 1 / -1; justify-items: start; grid-auto-flow: column; align-items: center; }
+}
+
+.scr-reviews .ds-toolbar .search-input { min-width: 240px; }
+.scr-reviews .ds-toolbar .search-input .input { padding-left: 30px; }
+.scr-reviews .rv2-shown { font-size: var(--ds-t-meta); color: var(--muted); }
+
+/* feed + reply panel */
+.scr-reviews .rv2 { display: grid; grid-template-columns: minmax(0, 1fr) minmax(0, 1.05fr); gap: 18px; align-items: start; }
+@media (max-width: 1100px) { .scr-reviews .rv2 { grid-template-columns: minmax(0, 1fr); } }
+.scr-reviews .rv2-list { display: grid; gap: 10px; max-height: 1100px; overflow: auto; padding: 2px; }
+.scr-reviews .rv2-card.inbox-item {
+  display: grid; gap: 8px; padding: 16px 18px; border: 1px solid var(--ds-stroke); border-top: 1px solid var(--ds-stroke);
+  border-radius: var(--ds-r); background: var(--ds-surface); box-shadow: var(--ds-e1);
+  transition: box-shadow var(--speed) var(--ease), border-color var(--speed) var(--ease);
+}
+.scr-reviews .rv2-card.inbox-item:hover { background: var(--ds-surface); box-shadow: var(--ds-e2); border-color: var(--ds-stroke-strong); }
+.scr-reviews .rv2-card.inbox-item[aria-selected="true"] { background: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .08); border-color: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .55); }
+.scr-reviews .rv2-card.inbox-item[aria-selected="true"]::before { background: var(--tint); top: 14px; bottom: 14px; }
+.scr-reviews .rv2-card.inbox-item:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.scr-reviews .rv2-c-top { display: flex; align-items: center; gap: 10px; }
+.scr-reviews .rv2-c-top .stars svg { width: 14px; height: 14px; }
+.scr-reviews .rv2-c-date { font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-reviews .rv2-c-title { font-size: var(--ds-t-h3); font-weight: var(--ds-w-strong); color: var(--ink); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.scr-reviews .rv2-c-body { color: var(--ink-2); line-height: 1.5; display: -webkit-box; -webkit-line-clamp: 3; -webkit-box-orient: vertical; overflow: hidden; }
+.scr-reviews .rv2-c-foot, .scr-reviews .rv2-meta { display: flex; flex-wrap: wrap; align-items: center; gap: 6px 12px; font-size: var(--ds-t-micro); color: var(--muted); }
+.scr-reviews .rv2-c-foot svg { color: var(--muted); }
+.scr-reviews .rv2-lang { display: inline-flex; align-items: center; gap: 4px; padding: 1px 7px; border-radius: var(--ds-r-pill); background: var(--ds-inset); font-weight: 600; }
+.scr-reviews .rv2-lang svg { width: 11px; height: 11px; }
+
+.scr-reviews .rv2-detail {
+  display: grid; gap: 18px; padding: 22px 24px; border-radius: var(--ds-r-lg); background: var(--ds-surface);
+  border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e2); position: sticky; top: 72px; min-width: 0;
+}
+.scr-reviews .rv2-d-head { display: grid; gap: 8px; }
+.scr-reviews .rv2-d-head .stars svg { width: 18px; height: 18px; }
+.scr-reviews .rv2-d-head h2 { margin: 0; font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); color: var(--ink); }
+.scr-reviews .rv2-body { margin: 0; font-size: var(--ds-t-body); line-height: 1.6; border-left-color: var(--tint); }
+.scr-reviews .rv2-dev { display: grid; gap: 8px; }
+.scr-reviews .rv2-dev-l, .scr-reviews .rv2-draft-l { display: inline-flex; align-items: center; gap: 6px; font-size: var(--ds-t-meta); font-weight: 650; color: var(--ink); }
+.scr-reviews .rv2-dev-l svg, .scr-reviews .rv2-draft-l svg { width: 14px; height: 14px; color: var(--tint); }
+.scr-reviews .rv2-dev .reply-box { border-radius: var(--ds-r); background: var(--ds-inset); }
+.scr-reviews .rv2-draft { display: grid; gap: 10px; padding-top: 16px; border-top: 1px solid var(--ds-stroke); }
+.scr-reviews .rv2-draft-h { display: flex; align-items: center; justify-content: space-between; gap: 10px; }
+.scr-reviews .rv2-draft .reply-edit { border-radius: var(--ds-r); min-height: 120px; }
+.scr-reviews .rv2-count { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; font-size: var(--ds-t-micro); color: var(--muted); }
diff --git a/apps/desktop/src/styles/settings.css b/apps/desktop/src/styles/settings.css
new file mode 100644
index 0000000..8ab752b
--- /dev/null
+++ b/apps/desktop/src/styles/settings.css
@@ -0,0 +1,37 @@
+/* Settings v2: grouped sections with a sticky jump list, roomy toggle rows and calm descriptions. */
+.scr-settings { gap: 22px; }
+.scr-settings .set-layout { grid-template-columns: 230px minmax(0, 1fr); gap: 28px; }
+.scr-settings .set-nav { top: 12px; padding: 8px; gap: 2px; border: 1px solid var(--ds-stroke); border-radius: var(--ds-r-lg); background: var(--ds-surface); box-shadow: var(--ds-e1); }
+.scr-settings .set-nav .nav { height: 34px; border-radius: var(--ds-r-sm); font-size: var(--ds-t-body); }
+.scr-settings .set-nav .nav[aria-current="true"] { background: var(--ds-raised); color: var(--ink); box-shadow: var(--ds-e1), inset 0 0 0 1px var(--ds-stroke); }
+.scr-settings .set-nav .nav[aria-current="true"] svg { color: var(--accent-solid); }
+.scr-settings .set-body { gap: 20px !important; max-width: 920px; }
+.scr-settings .set-card { scroll-margin-top: 16px; }
+.scr-settings .ds-sec-b > .form { gap: 18px; }
+.scr-settings .toggle-row { padding: 14px 16px; margin: 0 -16px; border-top: 1px solid var(--ds-stroke); border-radius: var(--ds-r-sm); gap: 20px; transition: background var(--speed) var(--ease); }
+.scr-settings .toggle-row:first-child { border-top: 0; }
+.scr-settings .toggle-row:hover { background: var(--ds-inset); }
+.scr-settings .toggle-row .strong { font-size: var(--ds-t-h3); font-weight: var(--ds-w-strong); }
+.scr-settings .toggle-row .small { font-size: var(--ds-t-meta); line-height: 1.45; max-width: 64ch; }
+.scr-settings .switch { width: 42px; height: 24px; }
+.scr-settings .switch::after { width: 19px; height: 19px; }
+.scr-settings .switch:checked { background: var(--accent-solid); box-shadow: 0 4px 12px -6px var(--accent-solid); }
+.scr-settings .switch:checked::after { transform: translateX(18px); }
+.scr-settings .field .legend, .scr-settings .field > label { font-weight: var(--ds-w-strong); font-size: var(--ds-t-body); }
+.scr-settings .field .hint { font-size: var(--ds-t-meta); }
+.scr-settings .kv { padding: 14px 16px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); row-gap: 10px; }
+.scr-settings .studio-sum { display: grid; grid-template-columns: repeat(auto-fill, minmax(240px, 1fr)); gap: 12px; }
+.scr-settings .studio-sum-item { padding: 14px 16px; border-radius: var(--ds-r); border: 1px solid var(--ds-stroke); background: var(--ds-raised); box-shadow: var(--ds-e1); transition: box-shadow var(--speed) var(--ease), border-color var(--speed) var(--ease); }
+.scr-settings .studio-sum-item:hover { box-shadow: var(--ds-e3); border-color: var(--ds-stroke-strong); }
+.scr-settings .studio-sum-item b { font-size: var(--ds-t-h3); }
+.scr-settings #set-pairing .table { margin-top: 14px; }
+.scr-settings #set-pairing .card-foot { display: flex; align-items: center; gap: 8px; padding: 14px 22px; border-top: 1px solid var(--ds-stroke); color: var(--muted); font-size: var(--ds-t-meta); }
+.scr-settings .dep-sum { display: flex; flex-wrap: wrap; gap: 8px; }
+.scr-settings .dep-sum > span { padding: 6px 12px; border-radius: var(--ds-r-pill); background: var(--ds-inset); border: 1px solid var(--ds-stroke); }
+.scr-settings .plain-list { display: grid; gap: 10px; }
+.scr-settings .plain-list li { display: flex; gap: 10px; align-items: flex-start; }
+.scr-settings .plain-list li svg { color: var(--ok-fg, var(--accent-solid)); flex: none; margin-top: 2px; }
+.scr-settings .shortcuts { row-gap: 12px; }
+.scr-settings .danger-card { border-color: color-mix(in srgb, var(--bad-fg, var(--accent-solid)) 35%, var(--ds-stroke)); }
+.scr-settings .danger-card .ds-sec-ic { background: color-mix(in srgb, var(--bad-fg, var(--accent-solid)) 16%, transparent); color: var(--bad-fg, var(--accent-solid)); }
+@media (max-width: 1100px) { .scr-settings .set-layout { grid-template-columns: 1fr; } }
diff --git a/apps/desktop/src/styles/submit.css b/apps/desktop/src/styles/submit.css
new file mode 100644
index 0000000..628aaa8
--- /dev/null
+++ b/apps/desktop/src/styles/submit.css
@@ -0,0 +1,60 @@
+/* Send for review (v2): one card per store with a numbered checklist that ends in the one primary button. */
+.sub-card.card { background: var(--ds-surface); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r-lg); box-shadow: var(--ds-e2); padding: 0; overflow: hidden; min-width: 0; }
+
+.sub-card .sub-head { display: flex; align-items: center; gap: 14px; flex-wrap: wrap; padding: 18px 22px 16px; border-bottom: 1px solid var(--ds-stroke);
+  background: linear-gradient(180deg, hsl(var(--tint-h, 250) var(--ds-tint-s) var(--ds-tint-l) / var(--ds-tint-a2)), transparent); }
+.sub-card .sub-mark { width: 42px; height: 42px; border-radius: 12px; display: grid; place-items: center; background: var(--ds-raised); border: 1px solid var(--ds-stroke); flex: none; }
+.sub-card .sub-mark svg { width: 20px; height: 20px; }
+.sub-card .sub-head-t { flex: 1; min-width: 180px; }
+.sub-card .sub-head-t h3 { font-size: var(--ds-t-h2); font-weight: var(--ds-w-title); letter-spacing: -.015em; margin: 0; }
+.sub-card .sub-head-s { color: var(--muted); font-size: var(--ds-t-meta); margin-top: 2px; }
+.sub-card .sub-count { display: inline-flex; align-items: baseline; padding: 6px 12px; border-radius: var(--ds-r-pill); background: var(--ds-inset); font-weight: var(--ds-w-display); font-size: 18px; color: var(--ink); }
+.sub-card .sub-count .of { font-size: var(--ds-t-meta); color: var(--muted); font-weight: var(--ds-w-strong); }
+.sub-card .sub-count.all { background: var(--ok-bg); color: var(--ok-ink); }
+.sub-card .sub-count.all .of { color: var(--ok-ink); }
+.sub-card .sub-head-a { flex-basis: 100%; justify-content: flex-start; }
+
+.sub-card .sub-body { display: flex; flex-direction: column; gap: 16px; padding: 18px 22px 22px; }
+
+/* checklist */
+.sub-card .sub-steps { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; }
+.sub-card .sub-step { position: relative; display: grid; grid-template-columns: 34px 1fr; gap: 14px; padding-bottom: 18px; }
+.sub-card .sub-step:last-child { padding-bottom: 0; }
+.sub-card .sub-step::before { content: ""; position: absolute; left: 16px; top: 36px; bottom: 2px; width: 2px; border-radius: 2px; background: var(--ds-stroke); }
+.sub-card .sub-step:last-child::before { display: none; }
+.sub-card .sub-step.ready::before { background: color-mix(in srgb, var(--ok-solid) 55%, var(--ds-stroke)); }
+.sub-card .sub-node { width: 34px; height: 34px; border-radius: 50%; display: grid; place-items: center; background: var(--ds-inset); border: 2px solid var(--ds-stroke-strong); color: var(--muted); font-weight: var(--ds-w-title); font-size: var(--ds-t-meta); position: relative; z-index: 1; }
+.sub-card .sub-node svg { width: 16px; height: 16px; }
+.sub-card .sub-step.ready .sub-node { background: var(--ok-solid); border-color: var(--ok-solid); color: #fff; }
+.sub-card .sub-step.blocked .sub-node { background: var(--bad-bg); border-color: var(--bad-solid); color: var(--bad-solid); }
+.sub-card .sub-step.warn .sub-node { background: var(--warn-bg); border-color: var(--warn-solid); color: var(--warn-ink); }
+.sub-card .sub-step-b { display: flex; flex-direction: column; gap: 10px; min-width: 0; padding-top: 5px; }
+.sub-card .sub-step-h { display: flex; align-items: center; gap: 10px; justify-content: space-between; }
+.sub-card .sub-step-t { font-size: var(--ds-t-h3); font-weight: var(--ds-w-title); }
+.sub-card .sub-step.todo .sub-step-t { color: var(--muted); }
+.sub-card .sub-hint { font-size: var(--ds-t-meta); color: var(--muted); }
+
+.sub-card .sub-field select.input { width: 100%; max-width: 520px; height: 40px; border-radius: var(--ds-r-sm); font-size: var(--ds-t-body); }
+.sub-card .sub-version { display: flex; align-items: baseline; gap: 10px; flex-wrap: wrap; }
+.sub-card .sub-version-v { font-size: 24px; font-weight: var(--ds-w-display); letter-spacing: -.02em; }
+.sub-card .sub-check { gap: 8px; }
+.sub-card .sub-go .btn-primary { height: 42px; padding: 0 20px; font-size: var(--ds-t-body); border-radius: var(--ds-r-sm); }
+
+/* submissions */
+.sub-card .sub-list { display: flex; flex-direction: column; gap: 8px; }
+.sub-card .sub-item { display: grid; grid-template-columns: 32px 1fr auto; gap: 12px; align-items: start; padding: 12px 14px; border-radius: var(--ds-r-sm); background: var(--ds-inset); border: 1px solid var(--ds-stroke); }
+.sub-card .sub-item-ic { width: 32px; height: 32px; border-radius: 9px; display: grid; place-items: center; background: var(--neutral-bg); color: var(--neutral-ink); }
+.sub-card .sub-item-ic svg { width: 16px; height: 16px; }
+.sub-card .sub-item.tone-info .sub-item-ic { background: var(--info-bg); color: var(--info-ink); }
+.sub-card .sub-item.tone-bad { border-color: color-mix(in srgb, var(--bad-solid) 40%, var(--ds-stroke)); }
+.sub-card .sub-item.tone-bad .sub-item-ic { background: var(--bad-bg); color: var(--bad-ink); }
+.sub-card .sub-item.tone-ok .sub-item-ic { background: var(--ok-bg); color: var(--ok-ink); }
+.sub-card .sub-item-m { display: flex; flex-direction: column; gap: 3px; min-width: 0; }
+.sub-card .sub-item-t { font-weight: var(--ds-w-title); }
+.sub-card .sub-item-s { font-size: var(--ds-t-meta); color: var(--muted); overflow-wrap: anywhere; }
+.sub-card .sub-item .note-list { margin: 6px 0 0; padding-left: 18px; font-size: var(--ds-t-meta); }
+
+/* extras: in-app purchases, console steps */
+.sub-card .sub-extra { display: flex; flex-direction: column; gap: 8px; padding: 14px 16px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px dashed var(--ds-stroke-strong); }
+.sub-card .sub-extra-h { display: flex; align-items: center; gap: 8px; }
+.sub-card .sub-extra-h svg { width: 16px; height: 16px; color: var(--tint, var(--accent-solid)); }
diff --git a/apps/desktop/src/styles/testflight.css b/apps/desktop/src/styles/testflight.css
new file mode 100644
index 0000000..5e733b9
--- /dev/null
+++ b/apps/desktop/src/styles/testflight.css
@@ -0,0 +1,64 @@
+/* TestFlight tab (v2): stat tiles, group cards with the tester count, build cards with three state pills. */
+.scr-testflight { display: flex; flex-direction: column; gap: 24px; min-width: 0; }
+
+.scr-testflight .tf-top { display: flex; align-items: flex-start; gap: 16px; }
+.scr-testflight .tf-kpis { flex: 1; --ds-min: 200px; }
+.scr-testflight .tf-read { flex: none; padding-top: 4px; }
+
+/* groups */
+.scr-testflight .tf-groups { display: grid; gap: 16px; grid-template-columns: repeat(auto-fill, minmax(250px, 1fr)); }
+.scr-testflight .tf-group { position: relative; display: flex; flex-direction: column; gap: 14px; padding: 18px 20px; background: var(--ds-surface); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r-lg); box-shadow: var(--ds-e1); overflow: hidden; }
+.scr-testflight .tf-group::before { content: ""; position: absolute; inset: 0 auto 0 0; width: 4px; background: var(--info-solid); }
+.scr-testflight .tf-group.external::before { background: var(--tint, var(--accent-solid)); }
+.scr-testflight .tf-group-h { display: flex; align-items: center; justify-content: space-between; gap: 10px; }
+.scr-testflight .tf-group-n { font-size: var(--ds-t-h3); font-weight: var(--ds-w-title); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.scr-testflight .tf-group-big { display: flex; align-items: baseline; gap: 8px; }
+.scr-testflight .tf-group-big .num { font-size: var(--ds-t-stat); font-weight: var(--ds-w-display); letter-spacing: -.03em; line-height: 1; }
+.scr-testflight .tf-group-l { color: var(--muted); font-size: var(--ds-t-meta); }
+.scr-testflight .tf-group-f { display: flex; flex-wrap: wrap; gap: 8px; }
+.scr-testflight .tf-tag { display: inline-flex; align-items: center; gap: 6px; height: 26px; padding: 0 10px; border-radius: var(--ds-r-pill); background: var(--ds-inset); color: var(--muted); font-size: var(--ds-t-micro); font-weight: var(--ds-w-strong); }
+.scr-testflight .tf-tag b { color: var(--ink); }
+.scr-testflight .tf-tag svg { width: 13px; height: 13px; }
+.scr-testflight .tf-tag.on { background: color-mix(in srgb, var(--tint, var(--accent-solid)) 16%, transparent); color: var(--tint, var(--accent-solid)); }
+
+/* builds */
+.scr-testflight .tf-builds { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 10px; }
+.scr-testflight .tf-build { border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-raised); transition: border-color var(--speed, .15s), box-shadow var(--speed, .15s); }
+.scr-testflight .tf-build:hover, .scr-testflight .tf-build.open { border-color: hsl(var(--tint-h, 250) var(--ds-tint-s) var(--ds-tint-l) / .55); box-shadow: var(--ds-e2); }
+.scr-testflight .tf-build-row { display: grid; grid-template-columns: minmax(150px, 200px) 1fr auto; gap: 18px; align-items: center; padding: 14px 18px; }
+.scr-testflight .tf-build-id { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+.scr-testflight .tf-build-v { font-size: 22px; font-weight: var(--ds-w-display); letter-spacing: -.02em; line-height: 1.1; }
+.scr-testflight .tf-build-n { font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-testflight .tf-build-n b { color: var(--ink); }
+.scr-testflight .tf-build-d { display: inline-flex; align-items: center; gap: 5px; font-size: var(--ds-t-micro); color: var(--muted); }
+.scr-testflight .tf-build-d svg { width: 12px; height: 12px; }
+.scr-testflight .tf-build-states { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 12px; }
+.scr-testflight .tf-state { display: flex; flex-direction: column; align-items: flex-start; gap: 5px; min-width: 0; }
+.scr-testflight .tf-state-l { font-size: var(--ds-t-micro); color: var(--muted); font-weight: var(--ds-w-strong); }
+.scr-testflight .tf-state .ds-pill { max-width: 100%; overflow: hidden; text-overflow: ellipsis; }
+.scr-testflight .tf-dash { color: var(--faint, var(--muted)); }
+.scr-testflight .tf-build-a .actions { justify-content: flex-end; flex-wrap: nowrap; }
+.scr-testflight .tf-edit { display: flex; flex-direction: column; gap: 10px; margin: 0 18px 16px; padding: 14px 16px; border-radius: var(--ds-r-sm); background: var(--ds-inset); }
+.scr-testflight .tf-chips { display: flex; flex-wrap: wrap; gap: 8px; }
+.scr-testflight .tf-chip { display: inline-flex; align-items: center; gap: 7px; height: 32px; padding: 0 12px; border-radius: var(--ds-r-pill); border: 1px solid var(--ds-stroke-strong); background: var(--ds-raised); cursor: pointer; font-size: var(--ds-t-meta); font-weight: var(--ds-w-strong); }
+.scr-testflight .tf-chip input { margin: 0; }
+.scr-testflight .tf-chip svg { width: 13px; height: 13px; color: var(--muted); }
+.scr-testflight .tf-chip.on { border-color: var(--tint, var(--accent-solid)); background: color-mix(in srgb, var(--tint, var(--accent-solid)) 14%, var(--ds-raised)); }
+.scr-testflight .tf-chip:focus-within { outline: 2px solid var(--focus); outline-offset: 2px; }
+.scr-testflight .tf-chip-n { color: var(--muted); font-size: var(--ds-t-micro); }
+
+.scr-testflight .tf-note { display: flex; align-items: center; gap: 8px; margin: 12px 0 0; color: var(--muted); font-size: var(--ds-t-meta); }
+.scr-testflight .tf-note svg { width: 14px; height: 14px; flex: none; }
+.scr-testflight .tf-err { display: flex; align-items: center; gap: 8px; margin: 0; padding: 0 22px 18px; color: var(--bad-ink); font-size: var(--ds-t-meta); }
+.scr-testflight .tf-err svg { width: 14px; height: 14px; }
+
+@media (max-width: 1100px) {
+  .scr-testflight .tf-build-row { grid-template-columns: 1fr; }
+  .scr-testflight .tf-build-a .actions { justify-content: flex-start; }
+}
+
+/* TestFlight editor */
+.scr-testflight-ed .ed-langs { gap: 16px; }
+.scr-testflight-ed .ed-lang { background: var(--ds-inset); border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); padding: 14px 16px; }
+.scr-testflight-ed .ed-lang .mono-id { display: inline-block; padding: 2px 8px; border-radius: var(--ds-r-pill); background: color-mix(in srgb, var(--tint, var(--accent-solid)) 16%, transparent); color: var(--tint, var(--accent-solid)); margin-bottom: 8px; }
+.scr-testflight-ed .tf-apply { gap: 16px; }
diff --git a/apps/desktop/src/styles/tools.css b/apps/desktop/src/styles/tools.css
new file mode 100644
index 0000000..7d69e07
--- /dev/null
+++ b/apps/desktop/src/styles/tools.css
@@ -0,0 +1,48 @@
+/* More tools tab v2: a tidy command grid. Group tiles, the open group's commands as cards, owner steps. Scoped to .scr-tools. */
+.scr-tools { display: grid; gap: 20px; min-width: 0; }
+.scr-tools .tl-lead { display: flex; gap: 10px; align-items: flex-start; margin: 0; max-width: 980px; font-size: var(--ds-t-body); color: var(--muted); line-height: 1.55; }
+.scr-tools .tl-lead svg { width: 16px; height: 16px; flex: none; margin-top: 2px; color: var(--tint); }
+
+/* group tiles */
+.scr-tools .tl-groups { display: grid; grid-template-columns: repeat(auto-fill, minmax(240px, 1fr)); gap: 12px; }
+.scr-tools .tl-group {
+  all: unset; box-sizing: border-box; display: grid; grid-template-columns: auto minmax(0, 1fr); grid-template-rows: auto auto; gap: 10px 12px; align-items: center;
+  padding: 16px 18px; border-radius: var(--ds-r-lg); background: var(--ds-surface); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e1); cursor: pointer;
+  transition: box-shadow var(--speed) var(--ease), border-color var(--speed) var(--ease), background var(--speed) var(--ease);
+}
+.scr-tools .tl-group:hover { box-shadow: var(--ds-e2); border-color: var(--ds-stroke-strong); }
+.scr-tools .tl-group:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.scr-tools .tl-group[aria-expanded="true"] { background: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .10); border-color: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .55); }
+.scr-tools .tl-group-ic { display: grid; place-items: center; width: 38px; height: 38px; border-radius: 12px; background: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .16); color: var(--tint); }
+.scr-tools .tl-group-ic svg { width: 19px; height: 19px; }
+.scr-tools .tl-group-t { display: grid; gap: 2px; min-width: 0; font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-tools .tl-group-t b { font-size: var(--ds-t-h3); font-weight: var(--ds-w-strong); color: var(--ink); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.scr-tools .tl-group-x { grid-column: 1 / -1; display: inline-flex; align-items: center; justify-content: space-between; gap: 6px; font-size: var(--ds-t-micro); font-weight: 650; color: var(--muted); padding-top: 8px; border-top: 1px solid var(--ds-stroke); }
+.scr-tools .tl-group-x svg { width: 14px; height: 14px; }
+.scr-tools .tl-group[aria-expanded="true"] .tl-group-x { color: var(--tint); }
+
+/* commands */
+.scr-tools .tl-cmds { display: grid; grid-template-columns: repeat(auto-fill, minmax(380px, 1fr)); gap: 14px; align-items: start; }
+.scr-tools .tl-cmd.tool { display: grid; gap: 12px; padding: 16px 18px; border: 1px solid var(--ds-stroke); border-radius: var(--ds-r); background: var(--ds-inset); min-width: 0; }
+.scr-tools .tl-cmd.tool:first-child { border-top: 1px solid var(--ds-stroke); padding-top: 16px; }
+.scr-tools .tl-cmd.has-out { grid-column: 1 / -1; }
+.scr-tools .tl-cmd-h { display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 12px; align-items: start; }
+.scr-tools .tl-cmd-ic { display: grid; place-items: center; width: 32px; height: 32px; border-radius: 10px; background: var(--info-bg); color: var(--info-ink); }
+.scr-tools .tl-cmd-ic.write { background: var(--warn-bg); color: var(--warn-ink); }
+.scr-tools .tl-cmd-ic svg { width: 16px; height: 16px; }
+.scr-tools .tl-cmd-t { display: grid; gap: 3px; min-width: 0; }
+.scr-tools .tl-cmd-title { font-weight: var(--ds-w-strong); color: var(--ink); }
+.scr-tools .tl-cmd-desc { font-size: var(--ds-t-meta); color: var(--muted); line-height: 1.45; }
+.scr-tools .tl-cmd-tags { display: flex; flex-wrap: wrap; align-items: center; gap: 6px; }
+.scr-tools .tl-cmd-m { margin-left: auto; font-size: var(--ds-t-micro); color: var(--muted); }
+.scr-tools .tl-form { padding: 12px; border-radius: var(--ds-r-sm); background: var(--ds-surface); border: 1px solid var(--ds-stroke); }
+.scr-tools .tl-cmd-run { display: flex; gap: 8px; }
+.scr-tools .tl-out { display: grid; gap: 6px; }
+.scr-tools .tl-out-h { display: flex; align-items: center; justify-content: space-between; gap: 8px; font-size: var(--ds-t-meta); color: var(--muted); }
+.scr-tools .tl-out pre { max-height: 300px; overflow: auto; margin: 0; border-radius: var(--ds-r-sm); }
+
+/* owner steps */
+.scr-tools .tl-owner { display: grid; grid-template-columns: repeat(auto-fill, minmax(360px, 1fr)); gap: 10px; }
+.scr-tools .tl-step { display: flex; align-items: center; gap: 12px; padding: 12px 14px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); min-width: 0; }
+.scr-tools .tl-step-t { display: grid; gap: 4px; flex: 1; min-width: 0; color: var(--ink); font-weight: 600; }
+.scr-tools .tl-step-t code { font-size: var(--ds-t-micro); color: var(--muted); font-weight: 500; overflow-wrap: anywhere; }

From 5b6df321b96cbd1fc9797b6af0cb90fa617d18ef Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 23:40:09 +0800
Subject: [PATCH 041/255] CHANGELOG: desktop v2 and tray notes for the next
 release

---
 CHANGELOG.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 38e61dc..0482f8f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,13 @@
 
 ## Unreleased
 
+- **Desktop v2**: every screen redesigned in one language: portfolio home, releases (store cards, stage stepper,
+  rollout ring), submit checklist, TestFlight, listings as store pages with completeness, framed screenshots with issue
+  badges, products and price matrix, health tiles, review feed with rating distribution, growth funnel, readiness score
+  with fix-first, tools, settings, accounts, folders, dependencies and onboarding.
+- Desktop: tray with a context menu, autostart, silent auto-update and notifications by event kind (rejections too),
+  also while the window is hidden.
+
 ## 0.8.32 · 2026-10-22
 
 - Node: a `storebound.config.json` (and every store-only app) loads again; it needed an import attribute. Pitfall 105.

From 0922a03a47419365ac8e85d30e46652a78bfde5b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 22:41:58 +0700
Subject: [PATCH 042/255] storebound 0.8.33: version in package.json and every
 copy, CHANGELOG 0.8.33 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index a5d507f..51124fb 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.32",
+      "version": "0.8.33",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 3667d8c..1d650aa 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.32",
+  "version": "0.8.33",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index e616cbf..f0a7a68 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.32",
+  "version": "0.8.33",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0482f8f..b300c84 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.33 · 2026-10-22
+
 - **Desktop v2**: every screen redesigned in one language: portfolio home, releases (store cards, stage stepper,
   rollout ring), submit checklist, TestFlight, listings as store pages with completeness, framed screenshots with issue
   badges, products and price matrix, health tiles, review feed with rating distribution, growth funnel, readiness score
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index e422434..b727975 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.32",
+  "version": "0.8.33",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ce2877d..fe396a0 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.32"
+version = "0.8.33"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 83c6b39..fa7e815 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.32"
+version = "0.8.33"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 338db1b..6ebb2c0 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.32",
+  "version": "0.8.33",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 700067d..d6e2035 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.32",
+  "version": "0.8.33",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index e8acad0..afa7a26 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.32",
+  "version": "0.8.33",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 8cd4ecd63bf0f9b018d56afa8c02edfd7f8a17e6 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 23:47:29 +0800
Subject: [PATCH 043/255] Desktop boot check: v2 markup (scan finding guideline
 pill, catalog screen root, lazy live thumbnails scrolled into view)

---
 tools/desktop-boot-check.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index 530d431..86eb8b6 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -817,7 +817,7 @@ async function runErrorCase(browser: Browser, sidecar: Sidecar, variant: 'api-di
       await settle(page);
       const c = await text();
       if (variant === 'scan-findings') {
-        if (!c.includes('5.1.1(v) · Sign-up without in-app account deletion')) problems.push('Checks: the scan findings (exit 1) are not listed');
+        if (!c.includes('5.1.1(v)') || !c.includes('Sign-up without in-app account deletion')) problems.push('Checks: the scan findings (exit 1) are not listed');
         if (!c.includes('lib/auth/sign_up.dart:12')) problems.push('Checks: the finding\'s evidence is not shown');
       } else if (!c.includes(SCAN_FAILED_LINE)) problems.push(`Checks: the failure does not show the command's error line "${SCAN_FAILED_LINE}"`);
       noRaw('Checks', c);
@@ -946,7 +946,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     await settle(page);
     if (!writes.includes('apple.listing')) problems.push('Apply did not go through the confirm dialog (write_with_confirm)');
     // the other editors draw, and a config edit (App info) saves only that value, comments kept
-    for (const [tab, root] of [['appinfo', '#appinfo-editor'], ['testflight', '#testflight-editor'], ['art', '#art-editor'], ['catalog', '#catalog-editor, [data-edit-bar], .card']] as const) {
+    for (const [tab, root] of [['appinfo', '#appinfo-editor'], ['testflight', '#testflight-editor'], ['art', '#art-editor'], ['catalog', '#catalog-editor, [data-edit-bar], .scr-catalog']] as const) {
       await page.locator(`[role="tab"]#tab-${tab}`).click({ timeout: WAIT_MS }).catch(e => problems.push(`no ${tab} tab: ${String(e).split('\n')[0]}`));
       if (!(await page.waitForSelector(root, { timeout: WAIT_MS }).then(() => true, () => false))) problems.push(`${tab}: the editor did not draw (${root})`);
       await settle(page);
@@ -1069,6 +1069,8 @@ async function runLiveArtCase(browser: Browser, sidecar: Sidecar): Promise<CaseR
     await page.waitForSelector('#live-art', { timeout: WAIT_MS }).catch(() => problems.push('no live store art card'));
     // nothing is read from the stores until asked (auto-read is off in the saved state)
     await page.locator('#live-art button', { hasText: 'Read the stores' }).click({ timeout: WAIT_MS }).catch(e => problems.push(`no "Read the stores" button: ${String(e).split('\n')[0]}`));
+    // thumbnails load lazily when a tile comes into view, so scroll each one in like a person would
+    await page.evaluate(() => document.querySelectorAll('#live-art [data-live-tile]').forEach(e => e.scrollIntoView({ block: 'center' })));
     const drawn = await page.waitForFunction(() => document.querySelectorAll('#live-art [data-live-tile] img[src^="data:image/"]').length >= 2, null, { timeout: WAIT_MS, polling: 50 }).then(() => true, () => false);
     if (!drawn) problems.push(`live thumbnails not drawn (${(await text('#live-art')).slice(0, 300)})`);
     const live = await text('#live-art');

From 011c2698a43cd382620de6e8cdead1b1ac3c0852 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 23:48:14 +0800
Subject: [PATCH 044/255] CHANGELOG: next release note

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b300c84..5612a47 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Desktop v2 ships (0.8.33 stopped at the desktop boot check, which still expected the old markup).
+
 ## 0.8.33 · 2026-10-22
 
 - **Desktop v2**: every screen redesigned in one language: portfolio home, releases (store cards, stage stepper,

From 95abe98626baa6e96be43ceebc02161cc07819df Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 22:53:36 +0700
Subject: [PATCH 045/255] storebound 0.8.34: version in package.json and every
 copy, CHANGELOG 0.8.34 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 51124fb..9c3cf24 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.33",
+      "version": "0.8.34",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1d650aa..5ac6d59 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.33",
+  "version": "0.8.34",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index f0a7a68..1d2b5bc 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.33",
+  "version": "0.8.34",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5612a47..88aad28 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.34 · 2026-10-22
+
 - Desktop v2 ships (0.8.33 stopped at the desktop boot check, which still expected the old markup).
 
 ## 0.8.33 · 2026-10-22
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index b727975..3fb0dc0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.33",
+  "version": "0.8.34",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index fe396a0..6c55822 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.33"
+version = "0.8.34"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index fa7e815..06a45e5 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.33"
+version = "0.8.34"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 6ebb2c0..c13a78e 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.33",
+  "version": "0.8.34",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index d6e2035..d240a67 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.33",
+  "version": "0.8.34",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index afa7a26..b5f335c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.33",
+  "version": "0.8.34",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 2f25f763772de5ffcceb6173c6992080ff3f73ae Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 22 Oct 2026 23:58:45 +0800
Subject: [PATCH 046/255] Desktop boot check: scroll live art tiles one by one
 and wait for each lazy thumbnail

---
 CHANGELOG.md                | 2 ++
 tools/desktop-boot-check.ts | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5612a47..e4b915d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Desktop v2 ships (0.8.33 and 0.8.34 stopped at the desktop boot check, which still expected the old markup).
+
 - Desktop v2 ships (0.8.33 stopped at the desktop boot check, which still expected the old markup).
 
 ## 0.8.33 · 2026-10-22
diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index 86eb8b6..5811a78 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -1070,7 +1070,7 @@ async function runLiveArtCase(browser: Browser, sidecar: Sidecar): Promise<CaseR
     // nothing is read from the stores until asked (auto-read is off in the saved state)
     await page.locator('#live-art button', { hasText: 'Read the stores' }).click({ timeout: WAIT_MS }).catch(e => problems.push(`no "Read the stores" button: ${String(e).split('\n')[0]}`));
     // thumbnails load lazily when a tile comes into view, so scroll each one in like a person would
-    await page.evaluate(() => document.querySelectorAll('#live-art [data-live-tile]').forEach(e => e.scrollIntoView({ block: 'center' })));
+    for (const tile of await page.locator('#live-art [data-live-tile]').all()) { await tile.scrollIntoViewIfNeeded().catch(() => {}); await page.waitForFunction(el => !!el?.querySelector('img[src^="data:image/"]'), await tile.elementHandle(), { timeout: 3000, polling: 50 }).catch(() => {}); }
     const drawn = await page.waitForFunction(() => document.querySelectorAll('#live-art [data-live-tile] img[src^="data:image/"]').length >= 2, null, { timeout: WAIT_MS, polling: 50 }).then(() => true, () => false);
     if (!drawn) problems.push(`live thumbnails not drawn (${(await text('#live-art')).slice(0, 300)})`);
     const live = await text('#live-art');

From 75bf62e125a02ef1a4ff7daf688357be506e2b56 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 00:33:27 +0800
Subject: [PATCH 047/255] Reviews: a store read that failed everywhere is an
 error, not an empty fresh list; Reviews tab says Apple's API can lag and Play
 returns 7 days; pitfall 106

---
 apps/desktop/src/i18n/en.ts               |  1 +
 apps/desktop/src/i18n/tr.ts               |  1 +
 apps/desktop/src/screens/tabs/Reviews.tsx |  1 +
 cli/lib/reviews.ts                        | 13 +++++++++++++
 cli/reviews.ts                            | 14 +++++++-------
 skills/store-pitfalls/SKILL.md            | 11 +++++++++++
 tests/reviews.test.ts                     | 17 ++++++++++++++++-
 7 files changed, 50 insertions(+), 8 deletions(-)

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 29d0984..aeeb854 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -366,6 +366,7 @@ export const en = {
   'reviews.shown': '{count} shown',
   'reviews.noMatch': 'No review matches the filter',
   'reviews.pick': 'Pick a review',
+  'reviews.lagNote': "Read from the stores' APIs. Apple's API can trail the App Store Connect page; Google Play returns only the last 7 days.",
   'reviews.answered': 'Answered',
   'reviews.drafted': 'Draft',
   'reviews.approved': 'Approved',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 4219477..dfa224d 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -368,6 +368,7 @@ export const tr: Record<keyof typeof en, string> = {
   'reviews.shown': '{count} gösteriliyor',
   'reviews.noMatch': 'Süzgece uyan yorum yok',
   'reviews.pick': 'Bir yorum seçin',
+  'reviews.lagNote': "Mağaza API'lerinden okunur. Apple'ın API'si App Store Connect sayfasından geride kalabilir; Google Play yalnızca son 7 günü verir.",
   'reviews.answered': 'Yanıtlandı',
   'reviews.drafted': 'Taslak',
   'reviews.approved': 'Onaylı',
diff --git a/apps/desktop/src/screens/tabs/Reviews.tsx b/apps/desktop/src/screens/tabs/Reviews.tsx
index d5a8152..8c7834e 100644
--- a/apps/desktop/src/screens/tabs/Reviews.tsx
+++ b/apps/desktop/src/screens/tabs/Reviews.tsx
@@ -135,6 +135,7 @@ export function ReviewsTab({ app }: { app: UnifiedApp }) {
         <div className="rv2-side">
           <div className="rv2-unans"><b className="num">{num(stats.unanswered)}</b><span>{t('reviews.unansweredN', { count: stats.unanswered })}</span></div>
           <ReadControl r={list} />
+          <p className="small muted">{t("reviews.lagNote")}</p>
           {project && <WriteButton run={w} icon="text" hint={t('reviews.makeDraftsHint')} w={{ method: 'reviews.draft', args: { days: 30 }, title: t('reviews.makeDrafts'), done: t('reviews.draftsMade'), after: changed }}>{t('reviews.makeDrafts')}</WriteButton>}
         </div>
       </section>
diff --git a/cli/lib/reviews.ts b/cli/lib/reviews.ts
index 87e6f67..8263fbe 100644
--- a/cli/lib/reviews.ts
+++ b/cli/lib/reviews.ts
@@ -63,6 +63,19 @@ export function parsePlayReviews(resp: PlayReviewsResp): Review[] {
   });
 }
 
+export interface StoreRead { store: 'apple' | 'play'; reviews?: Review[]; error?: string }
+
+/**
+ * Combines the per-store reads of `reviews list`. A store that failed is reported (warning text per store) but does not
+ * hide the other one; when EVERY store that was asked failed it throws, so a broken key never reads as "0 reviews, all
+ * fine" (the desktop kept such an empty result as a fresh read and showed no new reviews).
+ */
+export function settleStoreReads(reads: StoreRead[]): { reviews: Review[]; errors: string[] } {
+  const errors = reads.filter(r => r.error !== undefined).map(r => `${r.store}: ${r.error}`);
+  if (reads.length && errors.length === reads.length) throw new Error(errors.join('; '));
+  return { reviews: reads.flatMap(r => r.reviews ?? []), errors };
+}
+
 /** Reviews newer than `sinceIso`, optional filters, newest first. */
 export function filterReviews(rs: Review[], o: { since?: string; unanswered?: boolean; ratings?: number[] } = {}): Review[] {
   return rs.filter(r => (!o.since || r.date >= o.since) && (!o.unanswered || !r.reply) && (!o.ratings?.length || o.ratings.includes(r.rating)))
diff --git a/cli/reviews.ts b/cli/reviews.ts
index 80a75c0..54a8e2e 100644
--- a/cli/reviews.ts
+++ b/cli/reviews.ts
@@ -21,7 +21,7 @@ import { confirm } from './lib/ctx';
 import { done, log, printJson, warn } from './lib/log';
 import {
   checkReply, type Draft, draftMarkdown, draftName, filterReviews, markSent, parseAppleReviews, parseDraft, parsePlayReviews, replyRequest,
-  type Review, sendPlan,
+  type Review, sendPlan, settleStoreReads, type StoreRead,
 } from './lib/reviews';
 import { textTable } from './lib/table';
 import { readReplyDrafts, setApproved, setReplyText } from './lib/project-files';
@@ -63,13 +63,13 @@ async function collect(ctx: Ctx, o: { since: string; unanswered: boolean; rating
   const { config } = ctx.loaded;
   const store = ctx.args.get('store');
   if (store && store !== 'apple' && store !== 'play') throw new Error('--store apple | play');
-  const all: Review[] = [];
-  if ((!store || store === 'apple') && config.apple) {
-    try { all.push(...await appleReviews(ctx, o.since)); } catch (e) { if (store) throw e; warn(TAG, `apple: ${(e as Error).message.slice(0, 200)}`); }
-  }
-  if ((!store || store === 'play') && config.play) {
-    try { all.push(...await playReviews(ctx)); } catch (e) { if (store) throw e; warn(TAG, `play: ${(e as Error).message.slice(0, 200)}`); }
+  const reads: StoreRead[] = [];
+  for (const [name, on, read] of [['apple', !!config.apple, () => appleReviews(ctx, o.since)], ['play', !!config.play, () => playReviews(ctx)]] as const) {
+    if (store && store !== name || !on) continue;
+    try { reads.push({ store: name, reviews: await read() }); } catch (e) { if (store) throw e; reads.push({ store: name, error: (e as Error).message.slice(0, 200) }); }
   }
+  const { reviews: all, errors } = settleStoreReads(reads);
+  for (const e of errors) warn(TAG, e);
   return filterReviews(all, o);
 }
 
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index a88eb70..9cf63c9 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1272,3 +1272,14 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Cause:** a JSON config (store-only apps get one generated) was loaded with a bare dynamic import, which Node refuses.
 - **Do:** update storebound.
 - **Guard:** `importConfigModule` in `cli/lib/rt.ts` reads JSON configs as data (`tests/config-json-node.test.ts`).
+
+## 106. Reviews "not up to date": a failed store read looked like "0 new reviews"
+- **Symptom:** the desktop Reviews tab (and `storebound reviews list`) showed no new reviews although the stores had some.
+- **Cause:** (1) `reviews list` swallowed a store's error (expired key, wrong app) as a warning and exited 0 with an empty
+  list, which the desktop kept as a fresh read. (2) Google Play's reviews API only returns reviews created or edited in
+  the last 7 days, so older Play reviews vanish from every refresh. (3) The App Store Connect API lists written reviews
+  only (not star-only ratings) and can trail the ASC web page. Checked against Apple's public customer-reviews feed:
+  the API matched it, so the API itself was not stale there.
+- **Do:** read the "read ... ago" stamp and refresh; for Play keep your own history; compare with the console if in doubt.
+- **Guard:** `settleStoreReads` (`cli/lib/reviews.ts`) throws when every asked store failed (`tests/reviews.test.ts`);
+  the Reviews tab states the Play 7-day window and that Apple's API can lag.
diff --git a/tests/reviews.test.ts b/tests/reviews.test.ts
index bc21121..ad8ad7a 100644
--- a/tests/reviews.test.ts
+++ b/tests/reviews.test.ts
@@ -2,7 +2,7 @@ import { describe, expect, test } from 'bun:test';
 import { parseFrontMatter, stringifyFrontMatter } from '../cli/lib/frontmatter';
 import {
   checkReply, draftMarkdown, draftName, filterReviews, markSent, parseAppleReviews, parseDraft, parsePlayReviews, REPLY_LIMITS, REPLY_PLACEHOLDER,
-  replyRequest, sendPlan,
+  replyRequest, sendPlan, settleStoreReads,
 } from '../cli/lib/reviews';
 import { FORBIDDEN_ARGS, TOOLS, toArgv } from '../cli/mcp-tools';
 
@@ -104,3 +104,18 @@ describe('reviews', () => {
     expect(TOOLS.some(x => x.command.includes('send'))).toBe(false);
   });
 });
+
+describe('settleStoreReads', () => {
+  const r = { store: 'apple' as const, id: '1', rating: 5, body: 'x', date: '2026-10-01T00:00:00.000Z' };
+  test('one failed store does not hide the other, and is reported', () => {
+    const o = settleStoreReads([{ store: 'apple', reviews: [r] }, { store: 'play', error: 'denied' }]);
+    expect(o.reviews).toEqual([r]);
+    expect(o.errors).toEqual(['play: denied']);
+  });
+  test('every asked store failed: throws instead of an empty "all fine" list', () => {
+    expect(() => settleStoreReads([{ store: 'apple', error: 'expired key' }])).toThrow('apple: expired key');
+  });
+  test('no store asked: empty, no error', () => {
+    expect(settleStoreReads([])).toEqual({ reviews: [], errors: [] });
+  });
+});

From 13b91dd423d8d2c04fe320c6be01e56cbf1e6637 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 00:57:42 +0800
Subject: [PATCH 048/255] Ignore dormant apps: per-app and per-store 'ignored'
 in the app list; apps ignore/unignore, watch, ws and apps list skip them; MCP
 tools

---
 cli/apps.ts                   |  61 ++++++++++++++++----
 cli/commands.ts               |   2 +-
 cli/lib/registry.ts           |  99 ++++++++++++++++++++++++++++++--
 cli/mcp-tools.ts              |  11 ++++
 cli/watch.ts                  |  27 +++++----
 cli/workspace.ts              |   4 +-
 tests/registry-ignore.test.ts | 104 ++++++++++++++++++++++++++++++++++
 7 files changed, 278 insertions(+), 30 deletions(-)
 create mode 100644 tests/registry-ignore.test.ts

diff --git a/cli/apps.ts b/cli/apps.ts
index e28de41..3260a47 100644
--- a/cli/apps.ts
+++ b/cli/apps.ts
@@ -27,7 +27,7 @@ import * as rt from './lib/rt';
 import { existsSync, readFileSync } from 'node:fs';
 import { basename, join, resolve } from 'node:path';
 import { CONFIG_NAMES } from './lib/config';
-import { addFolder, addStoreApp, applyRelink, configAppName, configFolders, readRegistry, registryFile, relinkPlan, removeFolder, removeStoreApp } from './lib/registry';
+import { activeProjects, activeStoreApps, addFolder, withIgnore, addStoreApp, applyRelink, configAppName, configFolders, type IgnoreStore, ignoredStoreIds, ignoredStores, isIgnored, readRegistry, registryFile, relinkPlan, removeFolder, removeStoreApp, setIgnore } from './lib/registry';
 import { homedir } from 'node:os';
 
 type Store = 'apple' | 'play';
@@ -170,13 +170,27 @@ async function folders(sub: string, args: Args): Promise<void> {
   if (sub === 'folders' && args._[1]) throw new Error(`storebound apps folders ${args._[1]}: unknown; to add a folder: storebound apps add [<folder>] (or apps folders add [<folder>]), to list: storebound apps folders`);
   if (sub === 'folders') {
     const r = readRegistry();
-    if (args.has('json')) { printJson({ file: registryFile(), projects: r.projects.map(p => ({ ...p, missing: !existsSync(p.path) })), storeApps: r.storeApps ?? [] }); return; }
-    if (r.storeApps?.length) {
-      console.log(textTable(['store app', 'store', 'app id', 'profile', ''], r.storeApps.map(a => [a.name, a.store, a.appId, a.account ?? '(default)', 'no local project'])));
+    const ignoredCount = r.projects.filter(p => ignoredStores(p).length).length + (r.storeApps ?? []).filter(a => isIgnored(a)).length;
+    if (args.has('json')) {
+      printJson({ file: registryFile(), projects: r.projects.map(p => ({ ...p, missing: !existsSync(p.path), ignored: ignoredStores(p), allIgnored: isIgnored(p) })), storeApps: r.storeApps ?? [] });
+      return;
+    }
+    const liveStore = activeStoreApps(r);
+    if (liveStore.length) {
+      console.log(textTable(['store app', 'store', 'app id', 'profile', ''], liveStore.map(a => [a.name, a.store, a.appId, a.account ?? '(default)', 'no local project'])));
       console.log('');
     }
-    if (!r.projects.length) { console.log(`no app folders yet (${tilde(registryFile())}): storebound apps add, in an app folder (or storebound desktop there)`); return; }
-    console.log(textTable(['app', 'folder', ''], r.projects.map(p => [p.name, tilde(p.path), existsSync(p.path) ? '' : 'folder not found'])));
+    const live = activeProjects(r);
+    if (!r.projects.length && !liveStore.length) { console.log(`no app folders yet (${tilde(registryFile())}): storebound apps add, in an app folder (or storebound desktop there)`); return; }
+    if (live.length) console.log(textTable(['app', 'folder', ''], live.map(p => [p.name, tilde(p.path), [existsSync(p.path) ? '' : 'folder not found', ignoredStores(p).length ? `${ignoredStores(p).join('+')} ignored` : ''].filter(Boolean).join(', ')])));
+    if (ignoredCount) {
+      console.log(`
+ignored (${ignoredCount}; storebound apps unignore <name|id> [--store apple|play] brings them back):`);
+      console.log(textTable(['app', 'where', 'ignored'], [
+        ...r.projects.filter(p => isIgnored(p)).map(p => [p.name, tilde(p.path), 'apple+play']),
+        ...(r.storeApps ?? []).filter(a => isIgnored(a)).map(a => [a.name, `${a.store}:${a.appId}`, a.store]),
+      ]));
+    }
     const missing = r.projects.filter(p => !existsSync(p.path)).length;
     if (missing) console.log(`\n${missing} folder(s) not found (moved to another computer or folder?): storebound apps relink --dry finds them by path and app name`);
     console.log(`
@@ -222,6 +236,21 @@ ${tilde(registryFile())}: the same list as the desktop app's App folders`);
   log('apps', removed ? `removed ${tilde(removed.path)} from the list (the folder and its files stay)` : `${tilde(dir)} is not in the list`);
 }
 
+/** apps ignore / unignore <name|id|folder|store:app id> [--store apple|play]: dormant apps, whole or one store side. */
+function ignoreCmd(on: boolean, args: Args): void {
+  const key = args._[1];
+  const store = args.get('store') as IgnoreStore | undefined;
+  if (!key) throw new Error(`storebound apps ${on ? 'ignore' : 'unignore'} <name|id|folder|apple:<id>|play:<package>> [--store apple|play]`);
+  if (store !== undefined && store !== 'apple' && store !== 'play') throw new Error('--store: apple or play');
+  const { entry, changed } = args.has('dry') ? (({ entry, changed }) => ({ entry, changed }))(withIgnore(readRegistry(), key, store, on)) : setIgnore(key, store, on);
+  if (args.has('dry')) { log('apps', `dry run: ${changed ? `would ${on ? 'ignore' : 'restore'} ${store ? `the ${store} side of ` : ''}${entry.name}` : `${entry.name}: nothing to change`}`); return; }
+  const now = ignoredStores(entry);
+  const where = store ? `the ${store} side of ` : '';
+  if (args.has('json')) { printJson({ name: entry.name, id: entry.id, ignored: now, changed }); return; }
+  log('apps', changed ? `${on ? 'ignoring' : 'restored'} ${where}${entry.name}${now.length ? ` (ignored now: ${now.join(', ')})` : ''}: watch, events and portfolio reads ${on ? 'skip' : 'read'} it. Storebound only: the store listing is untouched`
+    : `${entry.name} was already ${on ? 'ignored' : 'not ignored'}${store ? ` on ${store}` : ''}`);
+}
+
 /** apps relink: point "folder not found" entries at the same app on this machine (after a move); ids stay. */
 function relink(args: Args): void {
   const home = homedir();
@@ -242,6 +271,7 @@ export async function run(args: Args): Promise<void> {
   const json = args.has('json');
   if (sub === 'relink') return relink(args);
   if (sub === 'folders' || sub === 'add' || sub === 'remove') return folders(sub, args);
+  if (sub === 'ignore' || sub === 'unignore') return ignoreCmd(sub === 'ignore', args);
   if (sub === 'list') {
     const out: AppsListResult[] = [];
     for (const s of stores(args, root)) {
@@ -253,10 +283,21 @@ export async function run(args: Args): Promise<void> {
         warn('apps', `${s}: ${why}`);
       }
     }
-    if (json) { printJson(args.get('store') ? out[0] : out); return; }
+    // ignored apps (registry: whole app or this store's side) are listed apart, not with the live ones; --all keeps them in
+    const ign = ignoredStoreIds(readRegistry());
+    const sideOf = (r: AppsListResult) => (r.store === 'ios' ? ign.apple : ign.play);
+    const isIgn = (r: AppsListResult, a: { id: string; bundleId: string }) => sideOf(r).has(a.id) || sideOf(r).has(a.bundleId);
+    if (json) {
+      const marked = out.map(r => ({ ...r, apps: r.apps.map(a => (isIgn(r, a) ? { ...a, ignored: true } : a)) }));
+      printJson(args.get('store') ? marked[0] : marked);
+      return;
+    }
     for (const r of out) {
-      log('apps', `${r.store === 'ios' ? 'App Store Connect' : 'Google Play'}: ${r.apps.length} apps`);
-      console.log(textTable(['name', 'id', 'bundle / package', 'platforms', 'newest'], r.apps.map(a => [a.name, a.id, a.bundleId, a.platforms.join(' '), a.latest ? `${a.latest.version} ${a.latest.state}` : '']))); 
+      const mine = r.apps.filter(a => !isIgn(r, a)), hidden = r.apps.filter(a => isIgn(r, a));
+      const rows = (l: typeof r.apps) => l.map(a => [a.name, a.id, a.bundleId, a.platforms.join(' '), a.latest ? `${a.latest.version} ${a.latest.state}` : '']);
+      log('apps', `${r.store === 'ios' ? 'App Store Connect' : 'Google Play'}: ${mine.length} apps${hidden.length ? ` (+${hidden.length} ignored)` : ''}`);
+      console.log(textTable(['name', 'id', 'bundle / package', 'platforms', 'newest'], rows(mine)));
+      if (hidden.length) { console.log(`ignored (storebound apps unignore):`); console.log(textTable(['name', 'id', 'bundle / package', 'platforms', 'newest'], rows(hidden))); }
       for (const w of r.warnings) warn('apps', w);
     }
     return;
@@ -273,7 +314,7 @@ export async function run(args: Args): Promise<void> {
     if (out.some(c => c.status !== 'ok')) process.exitCode = 1;
     return;
   }
-  console.error('usage: storebound apps list [--store apple|play] [--icons] [--json] | apps check [--store apple|play] [--json] | apps folders [--json] | apps add [<folder>] | apps add --store apple|play --app-id <id> [--account <profile>] | apps remove <folder> | apps remove apple:<id>');
+  console.error('usage: storebound apps list [--store apple|play] [--icons] [--json] | apps check [--store apple|play] [--json] | apps folders [--json] | apps ignore|unignore <name|id> [--store apple|play] | apps add [<folder>] | apps add --store apple|play --app-id <id> [--account <profile>] | apps remove <folder> | apps remove apple:<id>');
   process.exit(2);
 }
 
diff --git a/cli/commands.ts b/cli/commands.ts
index 715c8b0..5ff03ee 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -14,7 +14,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'watch': [() => import('./watch'), 'store events for every app on this machine: rejected, approved, live, rollout halted, crash threshold, low reviews; loops every --every 15m or --once; sinks --notify os|ntfy|telegram|webhook; test sends a test event; --dry, --dir <folder>, --json (read-only on the stores)'],
   'events': [() => import('./events'), '[--since 24h] [--app <name>] [--kind rejected] [--json]: the events watch recorded in ~/.storebound/events.jsonl (read-only)'],
   'serve': [() => import('./serve'), '--stdio: JSON-RPC session for the storebound desktop app (dry runs; writes need a host confirm token)'],
-  'apps': [() => import('./apps'), 'list (every app the store keys can see: App Store Connect team, Play developer accounts; --icons) | check (key works / permission missing / revoked, with the fix); --store apple|play, --json; read-only | folders | add [<folder>] | remove <folder>: the app folders of this machine, the same list as the desktop app'],
+  'apps': [() => import('./apps'), 'list (every app the store keys can see: App Store Connect team, Play developer accounts; --icons) | check (key works / permission missing / revoked, with the fix); --store apple|play, --json; read-only | folders | add [<folder>] | remove <folder>: the app folders of this machine, the same list as the desktop app | ignore|unignore <name|id> [--store apple|play]: leave a dormant app (or one store side) out of watch, portfolio reads and the desktop lists; storebound only, the store is untouched'],
   'desktop': [() => import('./desktop'), 'open the storebound desktop app on this folder; not installed or another version: download it for this system (size, SHA-256, signature checked), install it for this user (asks once; --yes) and open it; --download only saves the installer, --dry / --json change nothing'],
   'accounts': [() => import('./accounts'), 'the store accounts of this machine (credential profiles in ~/.storebound/credentials, shared with the desktop app): list | import (a project\'s store keys -> a profile; --dry first) | use <profile> | default <profile> (the machine default; --clear)'],
   'settings': [() => import('./settings'), 'per-machine settings: bypass on | off | status (owner opt-in: the agent also presses the owner-only buttons; default off)'],
diff --git a/cli/lib/registry.ts b/cli/lib/registry.ts
index 81dc840..e1a004b 100644
--- a/cli/lib/registry.ts
+++ b/cli/lib/registry.ts
@@ -16,10 +16,15 @@ import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, renameS
 import { homedir } from 'node:os';
 import { basename, dirname, join, resolve } from 'node:path';
 
-export interface RegistryProject { id: string; path: string; name: string; added: string }
+/** The store sides an entry can be ignored on. */
+export type IgnoreStore = 'apple' | 'play';
+export const IGNORE_STORES: IgnoreStore[] = ['apple', 'play'];
+/** `ignored` (optional, on both kinds of entry): the store sides storebound leaves out of watch, events, portfolio reads and the
+ *  desktop lists. Both listed = the whole app is ignored. Storebound-side visibility only: nothing changes in the stores. */
+export interface RegistryProject { id: string; path: string; name: string; added: string; ignored?: IgnoreStore[] }
 /** A store app without a local project: store + app id (Apple: the numeric app id; Play: the package name), the
  *  credential profile that reads it. */
-export interface StoreOnlyApp { id: string; store: 'apple' | 'play'; appId: string; account: string | null; name: string; bundleId: string | null; added: string }
+export interface StoreOnlyApp { id: string; store: 'apple' | 'play'; appId: string; account: string | null; name: string; bundleId: string | null; added: string; ignored?: IgnoreStore[] }
 export interface Registry { version: 1; projects: RegistryProject[]; storeApps?: StoreOnlyApp[] }
 
 export const registryFile = (env: Record<string, string | undefined> = process.env): string => env.STOREBOUND_REGISTRY || join(homedir(), '.storebound', 'projects.json');
@@ -34,6 +39,9 @@ export const storeAppId = (store: 'apple' | 'play', appId: string): string => cr
 export const APPLE_APP_ID = /^\d{6,12}$/;
 export const PACKAGE_NAME = /^[A-Za-z][A-Za-z0-9_]*(\.[A-Za-z][A-Za-z0-9_]*)+$/;
 
+/** The valid, unique, ordered store sides of a raw `ignored` value. */
+const parseIgnored = (v: unknown): IgnoreStore[] => (Array.isArray(v) ? IGNORE_STORES.filter(x => v.includes(x)) : []);
+
 /** Store-only entries of the file's JSON; malformed ones are dropped. Pure. */
 function parseStoreApps(list: unknown): StoreOnlyApp[] {
   const out: StoreOnlyApp[] = [];
@@ -44,7 +52,7 @@ function parseStoreApps(list: unknown): StoreOnlyApp[] {
     if (!(o.store === 'apple' ? APPLE_APP_ID : PACKAGE_NAME).test(appId) || out.some(a => a.store === o.store && a.appId === appId)) continue;
     out.push({ id: storeAppId(o.store, appId), store: o.store, appId, account: typeof o.account === 'string' && o.account ? o.account : null,
       name: typeof o.name === 'string' && o.name.trim() ? o.name : appId, bundleId: typeof o.bundleId === 'string' && o.bundleId ? o.bundleId : o.store === 'play' ? appId : null,
-      added: typeof o.added === 'string' ? o.added : '' });
+      added: typeof o.added === 'string' ? o.added : '', ...(parseIgnored(o.ignored).length ? { ignored: parseIgnored(o.ignored) } : {}) });
   }
   return out;
 }
@@ -60,7 +68,8 @@ export function parseRegistry(text: string): Registry {
     if (typeof o?.path !== 'string' || !o.path.startsWith('/') && !/^[A-Za-z]:[\\/]/.test(o.path)) continue;
     if (out.some(x => x.path === o.path)) continue;
     out.push({ id: typeof o.id === 'string' && ID.test(o.id) && !out.some(x => x.id === o.id) ? o.id : folderId(o.path), path: o.path,
-      name: typeof o.name === 'string' && o.name.trim() ? o.name : basename(o.path), added: typeof o.added === 'string' ? o.added : '' });
+      name: typeof o.name === 'string' && o.name.trim() ? o.name : basename(o.path), added: typeof o.added === 'string' ? o.added : '',
+      ...(parseIgnored(o.ignored).length ? { ignored: parseIgnored(o.ignored) } : {}) });
   }
   const storeApps = parseStoreApps((raw as { storeApps?: unknown })?.storeApps);
   return storeApps.length ? { version: 1, projects: out, storeApps } : { version: 1, projects: out };
@@ -98,7 +107,7 @@ export function withStoreApp(r: Registry, a: { store: 'apple' | 'play'; appId: s
   const list = r.storeApps ?? [];
   const have = list.find(x => x.store === a.store && x.appId === appId);
   const app: StoreOnlyApp = { id: storeAppId(a.store, appId), store: a.store, appId, account: a.account ?? have?.account ?? null, name: a.name?.trim() || have?.name || appId,
-    bundleId: a.bundleId ?? have?.bundleId ?? (a.store === 'play' ? appId : null), added: have?.added ?? now };
+    bundleId: a.bundleId ?? have?.bundleId ?? (a.store === 'play' ? appId : null), added: have?.added ?? now, ...(have?.ignored?.length ? { ignored: have.ignored } : {}) };
   if (have && JSON.stringify(have) === JSON.stringify(app)) return { registry: r, app: have, added: false };
   return { registry: { ...r, version: 1, storeApps: [...list.filter(x => x !== have), app] }, app, added: !have };
 }
@@ -112,6 +121,86 @@ export function withoutStoreApp(r: Registry, key: string): { registry: Registry;
   return { registry: rest.length ? { ...base, storeApps: rest } : base, removed };
 }
 
+// ---- ignore: dormant apps (whole app or one store side) ----
+
+/** The store sides of an entry that are ignored. A store-only entry has one side: its store. */
+export const ignoredStores = (e: RegistryProject | StoreOnlyApp): IgnoreStore[] => (e.ignored ?? []).filter(x => !('store' in e) || x === e.store);
+
+/** Whether the entry is ignored on `store`, or (no store) entirely: every side it has. */
+export function isIgnored(e: RegistryProject | StoreOnlyApp, store?: IgnoreStore): boolean {
+  const have = ignoredStores(e);
+  if (store) return have.includes(store);
+  return 'store' in e ? have.length > 0 : IGNORE_STORES.every(x => have.includes(x));
+}
+
+type Found = { entry: RegistryProject | StoreOnlyApp; kind: 'project' | 'storeApp' };
+
+/** Finds one entry by id, folder path, "<store>:<app id>" or (unique, case-insensitive) name. Throws when it is ambiguous. */
+export function findEntry(r: Registry, key: string): Found | null {
+  const all: Found[] = [...r.projects.map(entry => ({ entry, kind: 'project' as const })), ...(r.storeApps ?? []).map(entry => ({ entry, kind: 'storeApp' as const }))];
+  const abs = ID.test(key) ? '' : resolve(key);
+  const exact = all.filter(x => x.entry.id === key || ('path' in x.entry ? x.entry.path === abs : `${x.entry.store}:${x.entry.appId}` === key));
+  if (exact.length === 1) return exact[0]!;
+  const named = all.filter(x => x.entry.name.toLowerCase() === key.toLowerCase());
+  if (named.length > 1) throw new Error(`"${key}" matches ${named.length} apps (${named.map(x => ('path' in x.entry ? x.entry.path : `${x.entry.store}:${x.entry.appId}`)).join(', ')}): use the id, folder or <store>:<app id>`);
+  return named[0] ?? null;
+}
+
+/** Ignores (on) or restores one entry, on one store side or on all of it. Pure. */
+export function withIgnore(r: Registry, key: string, store: IgnoreStore | undefined, on: boolean): { registry: Registry; entry: RegistryProject | StoreOnlyApp; changed: boolean } {
+  const f = findEntry(r, key);
+  if (!f) throw new Error(`${key}: not in the app list (storebound apps folders)`);
+  if (store && !IGNORE_STORES.includes(store)) throw new Error('--store: apple or play');
+  const only = f.kind === 'storeApp' ? (f.entry as StoreOnlyApp).store : null;
+  if (only && store && store !== only) throw new Error(`${f.entry.name} is a ${only} app only: it has no ${store} side to ${on ? 'ignore' : 'restore'}`);
+  const sides: IgnoreStore[] = only ? [only] : store ? [store] : IGNORE_STORES;
+  const cur = f.entry.ignored ?? [];
+  const next = IGNORE_STORES.filter(x => (on ? cur.includes(x) || sides.includes(x) : cur.includes(x) && !sides.includes(x)));
+  if (next.join() === cur.join()) return { registry: r, entry: f.entry, changed: false };
+  const { ignored: _drop, ...rest } = f.entry;
+  const entry = { ...rest, ...(next.length ? { ignored: next } : {}) } as RegistryProject | StoreOnlyApp;
+  const swap = <T extends RegistryProject | StoreOnlyApp>(list: T[]): T[] => list.map(x => (x === f.entry ? entry as T : x));
+  return {
+    registry: { ...r, projects: f.kind === 'project' ? swap(r.projects) : r.projects, ...(r.storeApps ? { storeApps: f.kind === 'storeApp' ? swap(r.storeApps) : r.storeApps } : {}) },
+    entry, changed: true,
+  };
+}
+
+export function setIgnore(key: string, store: IgnoreStore | undefined, on: boolean, file = registryFile()): { entry: RegistryProject | StoreOnlyApp; changed: boolean } {
+  const { registry, entry, changed } = withIgnore(readRegistry(file), key, store, on);
+  if (changed) writeRegistry(registry, file);
+  return { entry, changed };
+}
+
+/** The folders that are not ignored on `store` (no store: not ignored at all). */
+export const activeProjects = (r: Registry, store?: IgnoreStore): RegistryProject[] => r.projects.filter(p => !isIgnored(p, store));
+/** The store-only apps that are not ignored. */
+export const activeStoreApps = (r: Registry): StoreOnlyApp[] => (r.storeApps ?? []).filter(a => !isIgnored(a));
+
+/** Store ids the config of a folder names (read as text, never run): Apple app ids / bundle ids and the Play package. */
+export function configStoreIds(dir: string): { apple: string[]; play: string[] } {
+  const out = { apple: [] as string[], play: [] as string[] };
+  for (const n of ['storebound.config.ts', 'storebound.config.mts', 'storebound.config.js', 'storebound.config.mjs', 'storebound.config.json']) {
+    let t: string;
+    try { t = readFileSync(join(dir, n), 'utf8'); } catch { continue; }
+    for (const m of t.matchAll(/\b(?:bundleId|appId)["']?\s*:\s*["'`]([A-Za-z0-9._-]+)["'`]/g)) out.apple.push(m[1]!);
+    for (const m of t.matchAll(/\bpackageName["']?\s*:\s*["'`]([A-Za-z]\w*(?:\.[A-Za-z]\w*)+)["'`]/g)) out.play.push(m[1]!);
+    break;
+  }
+  return out;
+}
+
+/** The store ids (Apple app ids and bundle ids, Play packages) of everything ignored on that store. */
+export function ignoredStoreIds(r: Registry): { apple: Set<string>; play: Set<string> } {
+  const o = { apple: new Set<string>(), play: new Set<string>() };
+  for (const p of r.projects) {
+    const ids = configStoreIds(p.path);
+    for (const st of IGNORE_STORES) if (isIgnored(p, st)) for (const id of ids[st]) o[st].add(id);
+  }
+  for (const a of r.storeApps ?? []) if (isIgnored(a)) { o[a.store].add(a.appId); if (a.bundleId) o[a.store].add(a.bundleId); }
+  return o;
+}
+
 export function addStoreApp(a: Parameters<typeof withStoreApp>[1], file = registryFile()): { app: StoreOnlyApp; added: boolean; changed: boolean } {
   const cur = readRegistry(file);
   const { registry, app, added } = withStoreApp(cur, a, new Date().toISOString());
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index 48d241e..24c7644 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -321,6 +321,17 @@ export const TOOLS: ToolDef[] = [
     props: { dir: { type: 'string', pattern: '^(?!/)(?!.*\\.\\.)(?!.*,/)[A-Za-z0-9._ /,-]{1,400}$', description: 'fastlane folder(s) relative to the project, comma-separated (default: fastlane, ios/fastlane, android/fastlane)' },
       profile: { type: 'string', enum: ['app', 'game', 'subscription-app'], description: 'Default: game for the GAMES category, else app' } },
     args: i => [...opt('dir', i.dir), ...opt('profile', i.profile)] },
+  { name: 'apps_ignore', title: 'Ignore an app', command: ['apps', 'ignore'], write: true, network: false, idempotent: true,
+    description: 'Ignores one app in the storebound app list (~/.storebound/projects.json), the whole app or one store side. Ignored apps are skipped by watch, events and portfolio reads and hidden from the desktop lists. Storebound-side visibility only: nothing changes in App Store Connect or Google Play (no removal from sale). dry_run shows the change.',
+    props: { app: { type: 'string', pattern: '^[A-Za-z0-9][A-Za-z0-9 ._:/\\-]{0,200}$', description: 'App name, id, folder, apple:<app id> or play:<package>' }, store: { type: 'string', enum: ['apple', 'play'], description: 'Only this store side (default: the whole app)' } },
+    required: ['app'], args: i => [String(i.app), ...opt('store', i.store)] },
+  { name: 'apps_unignore', title: 'Restore an ignored app', command: ['apps', 'unignore'], write: true, network: false, idempotent: true,
+    description: 'Restores (stops ignoring) one app in the storebound app list (~/.storebound/projects.json), the whole app or one store side. Ignored apps are skipped by watch, events and portfolio reads and hidden from the desktop lists. Storebound-side visibility only: nothing changes in App Store Connect or Google Play (no removal from sale). dry_run shows the change.',
+    props: { app: { type: 'string', pattern: '^[A-Za-z0-9][A-Za-z0-9 ._:/\\-]{0,200}$', description: 'App name, id, folder, apple:<app id> or play:<package>' }, store: { type: 'string', enum: ['apple', 'play'], description: 'Only this store side (default: the whole app)' } },
+    required: ['app'], args: i => [String(i.app), ...opt('store', i.store)] },
+  { name: 'apps_folders', title: 'App list of this machine', command: ['apps', 'folders'], write: false, network: false,
+    description: 'Offline: the app folders and store-only apps of this machine (~/.storebound/projects.json) with which are ignored (whole app or per store side).',
+    props: { json: { type: 'boolean', default: true } }, args: () => ['--json'] },
   { name: 'workspace_list', title: 'Workspace apps', command: ['ws', 'list'], write: false, network: false,
     description: 'Offline: the apps of the storebound.workspace.json above the project (app folders from its globs, store-only apps from `ws apps import`), paired across iOS and Android by the desktop\'s rules, with studios and accounts (credential profile names and whether their keys are there; never a key).',
     props: { all: { type: 'boolean', default: false, description: 'Also the ignored apps' }, json: { type: 'boolean', default: false } },
diff --git a/cli/watch.ts b/cli/watch.ts
index 0f12a41..484113c 100644
--- a/cli/watch.ts
+++ b/cli/watch.ts
@@ -19,7 +19,7 @@ import { CONFIG_NAMES } from './lib/config';
 import { consoleIdsFromConfig } from './lib/console-links';
 import { profileEnv } from './lib/credentials';
 import { done, log, warn } from './lib/log';
-import { readRegistry } from './lib/registry';
+import { type IgnoreStore, ignoredStores, isIgnored, readRegistry } from './lib/registry';
 import { runCommand } from './lib/runner';
 import type { HealthSnapshot } from './lib/health';
 import {
@@ -36,7 +36,7 @@ const MAX_BACKOFF_MS = 4 * 60 * 60_000;
 const CHILD_TIMEOUT_MS = 5 * 60_000;
 const REVIEW_DAYS = 3;
 
-interface Target extends PassTarget { dir: string; virtual: boolean; env: Record<string, string> }
+interface Target extends PassTarget { dir: string; virtual: boolean; env: Record<string, string>; /** store sides the registry ignores: not read, no events */ skip: IgnoreStore[] }
 
 /** Runs a storebound child command; a hung one is cancelled after the timeout. */
 const exec = (env: Record<string, string>): Exec => async (argv, cwd) => {
@@ -46,26 +46,28 @@ const exec = (env: Record<string, string>): Exec => async (argv, cwd) => {
 };
 
 /** The apps to watch: --dir, or the registry's folders and store-only apps (a store-only app that has a folder here is read once). */
-async function listTargets(args: Args): Promise<Target[]> {
+export async function listTargets(args: Args): Promise<Target[]> {
   const dir = args.get('dir');
   if (dir) {
     const d = resolve(dir);
     if (!CONFIG_NAMES.some(n => existsSync(join(d, n)))) throw new Error(`--dir: no storebound.config.ts in ${d}`);
-    return [{ key: `dir:${d}`, name: d.split(/[\\/]/).pop() ?? d, dir: d, virtual: false, env: {} }];
+    return [{ key: `dir:${d}`, name: d.split(/[\\/]/).pop() ?? d, dir: d, virtual: false, env: {}, skip: [] }];
   }
   const reg = readRegistry();
   const out: Target[] = [];
   for (const p of reg.projects) {
+    if (isIgnored(p)) continue; // ignored apps are not watched at all (storebound apps ignore / unignore)
     if (!CONFIG_NAMES.some(n => existsSync(join(p.path, n)))) { warn(TAG, `${p.name}: no storebound.config.ts in ${p.path}, skipped (storebound apps remove ${p.path})`); continue; }
-    out.push({ key: `dir:${p.path}`, name: p.name, dir: p.path, virtual: false, env: {} });
+    out.push({ key: `dir:${p.path}`, name: p.name, dir: p.path, virtual: false, env: {}, skip: ignoredStores(p) });
   }
   if (reg.storeApps?.length) {
     const { checkVirtual, virtualDir } = await import('./serve');
     for (const s of reg.storeApps) {
+      if (isIgnored(s)) continue;
       try {
         if (s.store === 'apple' && !s.bundleId) throw new Error('no bundle id (storebound apps add --store apple --app-id <id> --bundle-id <id>)');
         const v = checkVirtual({ name: s.name, ...(s.store === 'apple' ? { apple: { bundleId: s.bundleId, appId: s.appId } } : { play: { packageName: s.appId } }) });
-        out.push({ key: `store:${s.id}`, name: s.name, dir: virtualDir(v), virtual: true, env: s.account ? profileEnv(s.account) : {} });
+        out.push({ key: `store:${s.id}`, name: s.name, dir: virtualDir(v), virtual: true, env: s.account ? profileEnv(s.account) : {}, skip: [] });
       } catch (e) { warn(TAG, `${s.name}: ${(e as Error).message}, skipped`); }
     }
   }
@@ -80,24 +82,25 @@ async function readApp(t: Target, prev: AppSnap | undefined, now: number): Promi
   const e = emptyStatus(t.dir);
   try { await fillAppStatus(e, t.dir, { live: true, virtual: true, exec: run }); } catch (err) { return { snap: null, errors: [(err as Error).message] }; }
   const s = e.summary!;
+  const useApple = !!s.apple && !t.skip.includes('apple'), usePlay = !!s.play && !t.skip.includes('play');
   const snap: AppSnap = { name: s.name || t.name, ids: { appleAppId: s.apple?.appId ?? null } };
-  if (s.play && !t.virtual && !prev?.ids.playDeveloperId) {
+  if (usePlay && !t.virtual && !prev?.ids.playDeveloperId) {
     try { const { loadConfig } = await import('./lib/config'); Object.assign(snap.ids, consoleIdsFromConfig((await loadConfig(undefined, t.dir)).config)); } catch { /* links fall back to the console home */ }
   }
   const all = e.release.all ?? [];
   snap.releases = {};
-  if (s.apple) { if (e.storeErrors.ios) errors.push(`App Store: ${e.storeErrors.ios}`); else snap.releases.apple = releaseMap(all, 'ios'); }
-  if (s.play) { if (e.storeErrors.android) errors.push(`Google Play: ${e.storeErrors.android}`); else snap.releases.play = releaseMap(all, 'android'); }
+  if (useApple) { if (e.storeErrors.ios) errors.push(`App Store: ${e.storeErrors.ios}`); else snap.releases.apple = releaseMap(all, 'ios'); }
+  if (usePlay) { if (e.storeErrors.android) errors.push(`Google Play: ${e.storeErrors.android}`); else snap.releases.play = releaseMap(all, 'android'); }
 
   const due = !prev?.healthAt || now - Date.parse(prev.healthAt) >= HEALTH_EVERY_MS;
-  if (due && (s.apple || s.play)) {
+  if (due && (useApple || usePlay)) {
     const h = await run(['health', '--json'], t.dir);
-    if (h.data && typeof h.data === 'object') { snap.health = healthSnap(h.data as HealthSnapshot); snap.healthAt = new Date(now).toISOString(); }
+    if (h.data && typeof h.data === 'object') { snap.health = healthSnap({ ...(h.data as HealthSnapshot), ...(useApple ? {} : { apple: undefined }), ...(usePlay ? {} : { play: undefined }) } as HealthSnapshot); snap.healthAt = new Date(now).toISOString(); }
     else errors.push(`health: ${lastLine(h.out) || `exit ${h.code}`}`);
   }
 
   snap.reviews = {};
-  for (const [store, on] of [['apple', !!s.apple], ['play', !!s.play]] as const) {
+  for (const [store, on] of [['apple', useApple], ['play', usePlay]] as const) {
     if (!on) continue;
     const r = await run(['reviews', 'list', '--store', store, '--days', String(REVIEW_DAYS), '--json'], t.dir);
     if (r.code !== 0 || !Array.isArray(r.data)) { errors.push(`reviews ${store}: ${lastLine(r.out) || `exit ${r.code}`}`); continue; }
diff --git a/cli/workspace.ts b/cli/workspace.ts
index 8222659..c8d889b 100644
--- a/cli/workspace.ts
+++ b/cli/workspace.ts
@@ -35,7 +35,7 @@ import {
   findWorkspace, overridesOf, readStoreApps, resolveApps, selectApps, type Store, type StoreAppsCache, studiosOf, toDesktopState, type Workspace, WORKSPACE_NAMES,
 } from './lib/workspace';
 import { FORBIDDEN_ARGS, TOOLS } from './mcp-tools';
-import { addFolder, readRegistry, registryFile } from './lib/registry';
+import { activeProjects, addFolder, readRegistry, registryFile } from './lib/registry';
 import { checkVirtual, VIRTUAL_READS, virtualDir } from './serve';
 
 /** One app of the workspace: a folder or a store-only app, with the credentials env its commands get. */
@@ -159,7 +159,7 @@ async function loadAll(args: Args): Promise<LoadedWorkspace> {
   if (args.get('workspace') || findWorkspace(process.cwd())) return loadWorkspace(process.cwd(), args.get('workspace'));
   const reg = readRegistry();
   if (!reg.projects.length) return loadWorkspace(process.cwd());
-  return { file: registryFile(), root: homedir(), ws: { apps: reg.projects.map(p => ({ path: p.path, ...(p.name ? { name: p.name } : {}) })) } };
+  return { file: registryFile(), root: homedir(), ws: { apps: activeProjects(reg).map(p => ({ path: p.path, ...(p.name ? { name: p.name } : {}) })) } };
 }
 
 function concurrencyOf(args: Args, ws: Workspace): number {
diff --git a/tests/registry-ignore.test.ts b/tests/registry-ignore.test.ts
new file mode 100644
index 0000000..d30f1da
--- /dev/null
+++ b/tests/registry-ignore.test.ts
@@ -0,0 +1,104 @@
+// Dormant apps: `ignored` per entry, whole app or one store side (cli/lib/registry.ts); storebound-side only.
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import {
+  activeProjects, activeStoreApps, findEntry, ignoredStoreIds, ignoredStores, isIgnored, parseRegistry, readRegistry, setIgnore, withIgnore, writeRegistry,
+} from '../cli/lib/registry';
+import { TOOLS, toArgv } from '../cli/mcp-tools';
+
+const reg = () => parseRegistry(JSON.stringify({
+  version: 1,
+  projects: [{ id: 'aaaaaaaaaaaaaaaa', path: '/work/star-dash', name: 'Star Dash', added: '' }, { id: 'bbbbbbbbbbbbbbbb', path: '/work/puzzle', name: 'Puzzle', added: '' }],
+  storeApps: [{ store: 'apple', appId: '6400000000', account: 'teamA', name: 'Demo App', bundleId: 'com.example.demo' }, { store: 'play', appId: 'com.example.demo', name: 'Demo Play' }],
+}));
+
+describe('registry ignore', () => {
+  test('whole app, one store side, restore; only valid sides are kept', () => {
+    let r = reg();
+    r = withIgnore(r, 'Star Dash', 'apple', true).registry;
+    expect(ignoredStores(r.projects[0]!)).toEqual(['apple']);
+    expect(isIgnored(r.projects[0]!)).toBe(false);
+    expect(isIgnored(r.projects[0]!, 'apple')).toBe(true);
+    expect(isIgnored(r.projects[0]!, 'play')).toBe(false);
+    r = withIgnore(r, 'star dash', undefined, true).registry;
+    expect(isIgnored(r.projects[0]!)).toBe(true);
+    expect(activeProjects(r).map(p => p.name)).toEqual(['Puzzle']);
+    expect(activeProjects(r, 'play').map(p => p.name)).toEqual(['Puzzle']);
+    r = withIgnore(r, 'aaaaaaaaaaaaaaaa', 'play', false).registry;
+    expect(ignoredStores(r.projects[0]!)).toEqual(['apple']);
+    expect(activeProjects(r, 'play').map(p => p.name)).toEqual(['Star Dash', 'Puzzle']);
+    r = withIgnore(r, 'Star Dash', undefined, false).registry;
+    expect(r.projects[0]!.ignored).toBeUndefined();
+    expect(parseRegistry(JSON.stringify({ projects: [{ path: '/a', ignored: ['play', 'x', 'play', 'apple'] }] })).projects[0]!.ignored).toEqual(['apple', 'play']);
+  });
+
+  test('a store-only app has one side: its own store; the other store is an error', () => {
+    const r = reg();
+    expect(() => withIgnore(r, 'apple:6400000000', 'play', true)).toThrow('apple app only');
+    const o = withIgnore(r, 'apple:6400000000', 'apple', true);
+    expect(o.changed).toBe(true);
+    expect(activeStoreApps(o.registry).map(a => a.store)).toEqual(['play']);
+    expect(withIgnore(o.registry, 'apple:6400000000', undefined, true).changed).toBe(false);
+  });
+
+  test('ambiguous names and unknown keys fail loudly', () => {
+    const r = reg();
+    expect(() => withIgnore(r, 'nope', undefined, true)).toThrow('not in the app list');
+    expect(findEntry(r, 'Demo App')?.kind).toBe('storeApp');
+    const dup = parseRegistry(JSON.stringify({ projects: [{ path: '/a/x', name: 'Same' }, { path: '/b/x', name: 'Same' }] }));
+    expect(() => findEntry(dup, 'Same')).toThrow('matches 2 apps');
+  });
+
+  test('written to the file and read back; unrelated entries and storeApps stay', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-ign-'));
+    const file = join(dir, 'projects.json');
+    writeRegistry(reg(), file);
+    expect(setIgnore('Puzzle', 'play', true, file).changed).toBe(true);
+    expect(setIgnore('Puzzle', 'play', true, file).changed).toBe(false);
+    setIgnore('play:com.example.demo', undefined, true, file);
+    const back = readRegistry(file);
+    expect(back.projects.find(p => p.name === 'Puzzle')!.ignored).toEqual(['play']);
+    expect(back.storeApps!.find(a => a.store === 'play')!.ignored).toEqual(['play']);
+    expect(back.storeApps!.find(a => a.store === 'apple')!.ignored).toBeUndefined();
+    expect(JSON.parse(readFileSync(file, 'utf8')).projects[0].ignored).toBeUndefined();
+  });
+
+  test('store ids of ignored sides come from the config text, never by running it', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-ign-'));
+    const app = join(dir, 'game'); mkdirSync(app);
+    writeFileSync(join(app, 'storebound.config.ts'), "export default { apple: { bundleId: 'com.example.game', appId: '6400000123' }, play: { packageName: 'com.example.game.android' } };\n");
+    let r = parseRegistry(JSON.stringify({ projects: [{ path: app, name: 'Game' }] }));
+    r = withIgnore(r, 'Game', 'play', true).registry;
+    const ids = ignoredStoreIds(r);
+    expect([...ids.play]).toEqual(['com.example.game.android']);
+    expect(ids.apple.size).toBe(0);
+  });
+
+  test('MCP tools: ignore and unignore build the argv, writes default to dry run', () => {
+    const t = TOOLS.find(x => x.name === 'apps_ignore')!;
+    expect(t.write).toBe(true);
+    expect(toArgv(t, { app: 'Star Dash', store: 'apple' }).argv).toEqual(['apps', 'ignore', 'Star Dash', '--store', 'apple', '--dry']);
+    expect(TOOLS.some(x => x.name === 'apps_unignore')).toBe(true);
+  });
+});
+
+describe('watch and ws skip ignored apps', () => {
+  test('watch targets: a fully ignored app is not watched, a half-ignored one skips that store', async () => {
+    const { listTargets } = await import('../cli/watch');
+    const { parseArgs } = await import('../cli/lib/args');
+    const base = mkdtempSync(join(tmpdir(), 'sb-ign-watch-'));
+    const mk = (n: string) => { const d = join(base, n); mkdirSync(d); writeFileSync(join(d, 'storebound.config.ts'), 'export default {};\n'); return d; };
+    const file = join(base, 'projects.json');
+    writeRegistry(parseRegistry(JSON.stringify({ projects: [{ path: mk('a'), name: 'A' }, { path: mk('b'), name: 'B' }, { path: mk('c'), name: 'C' }] })), file);
+    setIgnore('B', undefined, true, file);
+    setIgnore('C', 'play', true, file);
+    const saved = process.env.STOREBOUND_REGISTRY;
+    process.env.STOREBOUND_REGISTRY = file;
+    try {
+      const t = await listTargets(parseArgs([]));
+      expect(t.map(x => [x.name, x.skip])).toEqual([['A', []], ['C', ['play']]]);
+    } finally { if (saved === undefined) delete process.env.STOREBOUND_REGISTRY; else process.env.STOREBOUND_REGISTRY = saved; }
+  });
+});

From a22dcd87dc123fbf53dbfbdda2e4b80951dcf904 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 00:15:25 +0700
Subject: [PATCH 049/255] storebound 0.8.35: version in package.json and every
 copy, CHANGELOG 0.8.35 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 9c3cf24..98d6e61 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.34",
+      "version": "0.8.35",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5ac6d59..b04c050 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.34",
+  "version": "0.8.35",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 1d2b5bc..17f563e 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.34",
+  "version": "0.8.35",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 73b1912..097f331 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.35 · 2026-10-22
+
 - Desktop v2 ships (0.8.33 and 0.8.34 stopped at the desktop boot check, which still expected the old markup).
 
 ## 0.8.34 · 2026-10-22
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 3fb0dc0..af7f3f0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.34",
+  "version": "0.8.35",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 6c55822..dfa578c 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.34"
+version = "0.8.35"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 06a45e5..5b83702 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.34"
+version = "0.8.35"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index c13a78e..8d7371f 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.34",
+  "version": "0.8.35",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index d240a67..d6987e1 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.34",
+  "version": "0.8.35",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b5f335c..bb652ae 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.34",
+  "version": "0.8.35",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 9610c9477e169df19bf707452a969bc84f5f46a5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 01:35:27 +0800
Subject: [PATCH 050/255] Desktop: per-store ignore (hide only the App Store or
 Google Play side), N ignored show toggle in sidebar and portfolio, Unignore
 in the app controls; ignore flags sync with the shared app list

---
 apps/desktop/src-tauri/src/commands.rs  |   7 +-
 apps/desktop/src-tauri/src/registry.rs  | 146 ++++++++++++++++++++++++
 apps/desktop/src-tauri/tests/machine.rs |  37 ++++++
 apps/desktop/src/App.tsx                |  13 ++-
 apps/desktop/src/i18n/en.ts             |  10 ++
 apps/desktop/src/i18n/tr.ts             |  10 ++
 apps/desktop/src/lib/identity.ts        |   2 +-
 apps/desktop/src/lib/show-ignored.ts    |  25 ++++
 apps/desktop/src/screens/AppView.tsx    |  13 ++-
 apps/desktop/src/screens/Ignored.tsx    |   7 +-
 apps/desktop/src/screens/Portfolio.tsx  |  17 ++-
 apps/desktop/src/store.tsx              |   3 +-
 apps/desktop/tests/identity.test.ts     |  33 +++++-
 cli/lib/identity.ts                     |  41 ++++++-
 14 files changed, 347 insertions(+), 17 deletions(-)
 create mode 100644 apps/desktop/src/lib/show-ignored.ts

diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index 445cb59..b295112 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -73,7 +73,8 @@ pub fn sync_machine(s: &AppState) -> Res<()> {
             false
         }
     };
-    if report.changed() || folders {
+    let ignored = registry::pull_ignored(&mut st, &s.registry);
+    if report.changed() || folders || ignored {
         persist(s, &st)?;
     }
     Ok(())
@@ -1206,6 +1207,10 @@ pub fn overrides_set(window: WebviewWindow, state: State<'_, AppState>, override
     let mut st = saved(&state)?;
     st.overrides = overrides.clone();
     persist(&state, &st)?;
+    // apps the shared list knows carry their ignore flags there (the CLI's watch and portfolio reads honour them)
+    if let Err(e) = registry::push_ignored(&st, &state.registry) {
+        crate::logs::host("warn", &format!("ignored apps not written to the app list: {e}"));
+    }
     Ok(overrides)
 }
 
diff --git a/apps/desktop/src-tauri/src/registry.rs b/apps/desktop/src-tauri/src/registry.rs
index 2ae732b..a67d261 100644
--- a/apps/desktop/src-tauri/src/registry.rs
+++ b/apps/desktop/src-tauri/src/registry.rs
@@ -76,6 +76,16 @@ pub fn write(file: &Path, entries: &[Entry]) -> Result<(), String> {
     // the store-only entries the CLI wrote stay as they are
     let keep = fs::read_to_string(file).ok().and_then(|t| serde_json::from_str::<Value>(&t).ok()).and_then(|v| v.get("storeApps").cloned()).filter(|s| s.as_array().is_some_and(|a| !a.is_empty()));
     let mut doc = serde_json::json!({ "version": 1, "projects": entries });
+    // the folders' `ignored` flags (written by the CLI or by push_ignored) stay with their folder
+    let old = fs::read_to_string(file).ok().and_then(|t| serde_json::from_str::<Value>(&t).ok());
+    if let (Some(old), Some(list)) = (old.as_ref().and_then(|o| o.get("projects")).and_then(Value::as_array), doc.get_mut("projects").and_then(Value::as_array_mut)) {
+        for e in list {
+            let ig = e.get("path").and_then(Value::as_str).and_then(|path| old.iter().find(|o| o.get("path").and_then(Value::as_str) == Some(path))).and_then(|o| o.get("ignored")).cloned();
+            if let (Some(ig), Some(o)) = (ig, e.as_object_mut()) {
+                o.insert("ignored".into(), ig);
+            }
+        }
+    }
     if let Some(s) = keep {
         doc["storeApps"] = s;
     }
@@ -217,3 +227,139 @@ pub fn publish(state: &State, file: &Path, removed: &[String]) -> Result<(), Str
     }
     write(file, &list)
 }
+
+// ---- ignored apps: the registry's `ignored` flags (cli/lib/registry.ts) <-> the app's ignore keys ----
+//   projects:   "ignored": ["apple", "play"] (both = the whole app)   <->  "project:<id>" (both) / "project:<id>:ios" / "project:<id>:android"
+//   storeApps:  "ignored": ["apple"]                                   <->  "app:ios:<account id>:<app id>" (android for play)
+// The registry is the truth for the apps it lists: `pull_ignored` (start, list shown) replaces the app's keys for those
+// apps with the registry's flags, `push_ignored` (the owner ignores or restores in the app) writes them back. Apps
+// that are not in the registry (listed by a store account only) keep their keys in the app's state alone.
+const SIDES: [&str; 2] = ["apple", "play"];
+
+fn word_of(side: &str) -> &'static str {
+    if side == "apple" { "ios" } else { "android" }
+}
+
+fn sides_in(v: &Value) -> Vec<String> {
+    let have: Vec<&str> = v.get("ignored").and_then(Value::as_array).map(|a| a.iter().filter_map(Value::as_str).collect()).unwrap_or_default();
+    SIDES.iter().filter(|s| have.contains(s)).map(|s| s.to_string()).collect()
+}
+
+fn is_project_key_of(k: &str, id: &str) -> bool {
+    k == format!("project:{id}") || k.starts_with(&format!("project:{id}:"))
+}
+
+/// The ignore keys of one folder for its ignored store sides (pure).
+pub fn project_keys(id: &str, sides: &[String]) -> Vec<String> {
+    if SIDES.iter().all(|s| sides.iter().any(|x| x == s)) {
+        return vec![format!("project:{id}")];
+    }
+    sides.iter().filter(|s| SIDES.contains(&s.as_str())).map(|s| format!("project:{id}:{}", word_of(s))).collect()
+}
+
+/// The ignored store sides of a folder, from the app's ignore keys (pure).
+pub fn project_sides(keys: &[String], id: &str) -> Vec<String> {
+    let mut on = [false, false];
+    for k in keys {
+        if *k == format!("project:{id}") {
+            on = [true, true];
+        } else if *k == format!("project:{id}:ios") {
+            on[0] = true;
+        } else if *k == format!("project:{id}:android") {
+            on[1] = true;
+        }
+    }
+    SIDES.iter().enumerate().filter(|(i, _)| on[*i]).map(|(_, s)| s.to_string()).collect()
+}
+
+/// Whether an ignore key "app:<ios|android>:<account>:<app id>" is this store app (pure).
+pub fn app_key_matches(k: &str, store: &str, app_id: &str) -> bool {
+    let Some(rest) = k.strip_prefix("app:") else { return false };
+    rest.split(':').next() == Some(word_of(store)) && rest.rsplit(':').next() == Some(app_id)
+}
+
+/// The account (id) that reads a store-only entry: the one with its credential profile, else the only account of that store.
+pub fn account_for(accounts: &[crate::accounts::Account], store: &str, profile: Option<&str>) -> Option<String> {
+    use crate::accounts::AccountKind;
+    let kind = if store == "apple" { AccountKind::Apple } else { AccountKind::Play };
+    let of_kind: Vec<_> = accounts.iter().filter(|a| a.kind == kind).collect();
+    match profile {
+        Some(p) => of_kind.iter().find(|a| a.profile.as_deref() == Some(p)).map(|a| a.id.clone()),
+        None => (of_kind.len() == 1).then(|| of_kind[0].id.clone()),
+    }
+}
+
+fn parse_doc(file: &Path) -> Option<Value> {
+    serde_json::from_str::<Value>(&fs::read_to_string(file).ok()?).ok()
+}
+
+/// Registry flags -> the app's ignore keys. True when the keys changed.
+pub fn pull_ignored(state: &mut State, file: &Path) -> bool {
+    let Some(doc) = parse_doc(file) else { return false };
+    let before = state.overrides.ignored.clone();
+    let mut keys = before.clone();
+    for p in doc.get("projects").and_then(Value::as_array).into_iter().flatten() {
+        let Some(path) = p.get("path").and_then(Value::as_str) else { continue };
+        let Some(id) = state.projects.iter().find(|x| x.path == path).map(|x| x.id.clone()) else { continue };
+        keys.retain(|k| !is_project_key_of(k, &id));
+        keys.extend(project_keys(&id, &sides_in(p)));
+    }
+    for a in doc.get("storeApps").and_then(Value::as_array).into_iter().flatten() {
+        let (Some(store), Some(app_id)) = (a.get("store").and_then(Value::as_str), a.get("appId").and_then(Value::as_str)) else { continue };
+        let Some(acct) = account_for(&state.accounts, store, a.get("account").and_then(Value::as_str)) else { continue };
+        keys.retain(|k| !app_key_matches(k, store, app_id));
+        if sides_in(a).iter().any(|s| s == store) {
+            keys.push(format!("app:{}:{acct}:{app_id}", word_of(store)));
+        }
+    }
+    let mut seen = std::collections::HashSet::new();
+    keys.retain(|k| seen.insert(k.clone()));
+    if keys == before {
+        return false;
+    }
+    state.overrides.ignored = keys;
+    true
+}
+
+/// The app's ignore keys -> registry flags (only the apps the registry lists). Writes when something changed.
+pub fn push_ignored(state: &State, file: &Path) -> Result<bool, String> {
+    let Some(mut doc) = parse_doc(file) else { return Ok(false) };
+    let keys = &state.overrides.ignored;
+    let mut changed = false;
+    let mut set = |entry: &mut Value, sides: Vec<String>| {
+        if sides_in(entry) == sides {
+            return;
+        }
+        changed = true;
+        if let Some(o) = entry.as_object_mut() {
+            if sides.is_empty() {
+                o.remove("ignored");
+            } else {
+                o.insert("ignored".into(), serde_json::json!(sides));
+            }
+        }
+    };
+    if let Some(list) = doc.get_mut("projects").and_then(Value::as_array_mut) {
+        for p in list {
+            let Some(id) = p.get("path").and_then(Value::as_str).and_then(|path| state.projects.iter().find(|x| x.path == path)).map(|x| x.id.clone()) else { continue };
+            set(p, project_sides(keys, &id));
+        }
+    }
+    if let Some(list) = doc.get_mut("storeApps").and_then(Value::as_array_mut) {
+        for a in list {
+            let (Some(store), Some(app_id)) = (a.get("store").and_then(Value::as_str).map(str::to_string), a.get("appId").and_then(Value::as_str).map(str::to_string)) else { continue };
+            if account_for(&state.accounts, &store, a.get("account").and_then(Value::as_str)).is_none() {
+                continue;
+            }
+            let on = keys.iter().any(|k| app_key_matches(k, &store, &app_id));
+            set(a, if on { vec![store] } else { vec![] });
+        }
+    }
+    if changed {
+        let text = serde_json::to_string_pretty(&doc).map_err(|e| e.to_string())? + "\n";
+        let tmp = file.with_extension(format!("tmp-{}", std::process::id()));
+        fs::write(&tmp, text).map_err(|e| e.to_string())?;
+        fs::rename(&tmp, file).map_err(|e| e.to_string())?;
+    }
+    Ok(changed)
+}
diff --git a/apps/desktop/src-tauri/tests/machine.rs b/apps/desktop/src-tauri/tests/machine.rs
index 3dde508..5e58f27 100644
--- a/apps/desktop/src-tauri/tests/machine.rs
+++ b/apps/desktop/src-tauri/tests/machine.rs
@@ -207,3 +207,40 @@ fn a_folder_that_pins_another_storebound_says_so() {
         assert!(!pin_differs(spec, "0.8.0"), "{spec}");
     }
 }
+
+#[test]
+fn ignored_flags_travel_between_the_registry_and_the_apps_ignore_keys() {
+    let dir = tempfile::tempdir().unwrap();
+    let file = dir.path().join("projects.json");
+    // as `storebound apps ignore` wrote it: one folder fully, one store side of another, one store-only app
+    let (one, two) = (dir.path().join("one").to_string_lossy().to_string(), dir.path().join("two").to_string_lossy().to_string());
+    let doc = json!({ "version": 1, "projects": [
+      { "id": "aaaaaaaaaaaaaaaa", "path": one, "name": "One", "added": "t", "ignored": ["apple", "play"] },
+      { "id": "bbbbbbbbbbbbbbbb", "path": two, "name": "Two", "added": "t", "ignored": ["play"] }],
+      "storeApps": [{ "store": "apple", "appId": "6400000999", "account": "teamA", "name": "Demo", "ignored": ["apple"] }] });
+    std::fs::write(&file, doc.to_string()).unwrap();
+    let mut st = State { projects: vec![project("aaaaaaaaaaaaaaaa", &one, None), project("bbbbbbbbbbbbbbbb", &two, None)], ..State::default() };
+    st.accounts = vec![account("acct1", "Team A", AccountKind::Apple, Some("teamA"))];
+    st.overrides.ignored = vec!["account:zzz".into(), "app:ios:other:6400000999".into()];
+    assert!(registry::pull_ignored(&mut st, &file));
+    assert!(st.overrides.ignored.contains(&"account:zzz".to_string()));
+    assert!(st.overrides.ignored.contains(&"project:aaaaaaaaaaaaaaaa".to_string()));
+    assert!(st.overrides.ignored.contains(&"project:bbbbbbbbbbbbbbbb:android".to_string()));
+    assert!(st.overrides.ignored.contains(&"app:ios:acct1:6400000999".to_string()));
+    assert!(!st.overrides.ignored.contains(&"app:ios:other:6400000999".to_string()));
+    assert!(!registry::pull_ignored(&mut st, &file), "second pull changes nothing");
+    // the owner restores one folder's play side and ignores the other's apple side in the app
+    st.overrides.ignored.retain(|k| k != "project:bbbbbbbbbbbbbbbb:android" && k != "app:ios:acct1:6400000999");
+    st.overrides.ignored.push("project:bbbbbbbbbbbbbbbb:ios".into());
+    assert!(registry::push_ignored(&st, &file).unwrap());
+    let doc: serde_json::Value = serde_json::from_str(&std::fs::read_to_string(&file).unwrap()).unwrap();
+    assert_eq!(doc["projects"][0]["ignored"], json!(["apple", "play"]));
+    assert_eq!(doc["projects"][1]["ignored"], json!(["apple"]));
+    assert!(doc["storeApps"][0].get("ignored").is_none());
+    assert!(!registry::push_ignored(&st, &file).unwrap());
+    // writing the folder list keeps the flags of the folders that stay
+    let list = registry::read(&file).unwrap();
+    registry::write(&file, &list).unwrap();
+    let doc: serde_json::Value = serde_json::from_str(&std::fs::read_to_string(&file).unwrap()).unwrap();
+    assert_eq!(doc["projects"][1]["ignored"], json!(["apple"]));
+}
diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 6538f00..3c53ec8 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -13,6 +13,7 @@ import { AppFolders } from './screens/AppFolders';
 import { AppView } from './screens/AppView';
 import { Dependencies } from './screens/Dependencies';
 import { Ignored } from './screens/Ignored';
+import { useShowIgnored } from './lib/show-ignored';
 import { Onboarding } from './screens/Onboarding';
 import { Portfolio } from './screens/Portfolio';
 import { Settings } from './screens/Settings';
@@ -47,6 +48,9 @@ export function App({ onTheme }: { onTheme: () => void }) {
 
   const go = useCallback((r: Route) => { setRoute(r); document.getElementById('content')?.scrollTo({ top: 0 }); }, []);
   const visible = useMemo(() => d.apps.filter(a => !a.ignored).sort((a, b) => a.name.localeCompare(b.name)), [d.apps]);
+  const [showIgnored, setShowIgnored] = useShowIgnored();
+  const ignoredApps = useMemo(() => d.apps.filter(a => a.ignored).sort((a, b) => a.name.localeCompare(b.name)), [d.apps]);
+  const listed = showIgnored ? [...visible, ...ignoredApps] : visible;
   const toggleGroup = (id: string) => setCollapsed(c => {
     const next = c.includes(id) ? c.filter(x => x !== id) : [...c, id];
     try { localStorage.setItem(SIDE_KEY, JSON.stringify(next)); } catch { /* private mode */ }
@@ -142,7 +146,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
   useEffect(() => { setFocus(app?.key ?? null); }, [app?.key, setFocus]);
   const nav = useMemo(() => ({ route, go, openPalette: () => setPalette(true), openWelcome: () => setWelcome(true) }), [route, go]);
   const current = (r: Route) => (sameRoute(r, route) || (r.screen === 'app' && route.screen === 'app' && r.appId === route.appId) || (r.screen !== 'app' && r.screen !== 'portfolio' && r.screen === route.screen) ? 'page' : undefined);
-  const groups = d.studios.length ? groupByStudio(visible.map(a => ({ app: a })), d.studios) : [{ studio: null as string | null, rows: visible.map(a => ({ app: a })) }];
+  const groups = d.studios.length ? groupByStudio(listed.map(a => ({ app: a })), d.studios) : [{ studio: null as string | null, rows: listed.map(a => ({ app: a })) }];
   const ignoredCount = d.apps.filter(a => a.ignored).length + d.overrides.ignored.filter(i => i.startsWith('account:')).length;
 
   const appItem = (a: UnifiedApp) => {
@@ -152,10 +156,12 @@ export function App({ onTheme }: { onTheme: () => void }) {
     const bad = missing ? 1 : (e?.errors.length ?? 0) + (e?.check?.problems.length ?? 0);
     return (
       <div role="listitem" key={a.key}>
-        <button className="nav nav-app" aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
+        <button className={`nav nav-app${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
           onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' })}>
           <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{tone && <span className={`ds-sdot ${tone}`} role="img" aria-label={tone === 'bad' ? t('pf.blocker') : tone === 'warn' ? t('pf.warning') : t('pf.note')} />}</span>
           <span className="grow">{a.name}</span>
+          {a.ignored && <span className="so-dot" title={t('ignored.rowHint')}><Icon name="eyeOff" /></span>}
+          {!a.ignored && a.ignoredStores.length > 0 && <span className="so-dot" title={t('ignored.sideHint', { stores: a.ignoredStores.map(k => (k === 'ios' ? 'App Store' : 'Google Play')).join(', ') })}><Icon name="eyeOff" /></span>}
           {!a.project && <span className="so-dot" title={t('apps.storeOnlyHint')}><Icon name="cloud" /></span>}
           {missing ? <span className="tag-count bad" title={t('folder.missingShort')} aria-label={t('folder.missingShort')}>!</span>
             : bad > 0 && <span className="tag-count bad" aria-label={t('nav.problems', { count: bad })}>{bad}</span>}
@@ -196,7 +202,8 @@ export function App({ onTheme }: { onTheme: () => void }) {
                 </div>
               );
             })}
-            {!visible.length && <p className="side-empty">{t('nav.noApps')}</p>}
+            {!visible.length && !showIgnored && <p className="side-empty">{t('nav.noApps')}</p>}
+            {ignoredApps.length > 0 && <button className="link side-ignored-toggle" aria-pressed={showIgnored} onClick={() => setShowIgnored(!showIgnored)} data-testid="toggle-ignored">{showIgnored ? t('ignored.hide', { count: ignoredApps.length }) : t('ignored.show', { count: ignoredApps.length })}</button>}
             <div className="side-label"><span>{t('nav.workspace')}</span></div>
             {WORKSPACE.map((s, i) => (
               <button key={s} className="nav" aria-current={current({ screen: s })} onClick={() => go({ screen: s })} title={`${t(WS_KEY[s])} (${MOD} ${i + 2})`}>
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index aeeb854..ad3c9d9 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -737,6 +737,16 @@ export const en = {
   'app.unpair': 'Unpair',
   'app.ignore': 'Ignore',
   'app.ignoreHint': 'Leave this app out of the portfolio and store reads (Ignored lists it to restore)',
+  'app.unignore': 'Stop ignoring',
+  'app.unignoreHint': 'Bring this app back into the portfolio and store reads',
+  'app.ignoreSide': 'Ignore {store}',
+  'app.unignoreSide': 'Stop ignoring {store}',
+  'app.ignoreSideHint': 'Leave only the {store} side of this app out of reads and notifications. Storebound only: the store itself is untouched',
+  'app.unignoreSideHint': 'Read the {store} side of this app again',
+  'ignored.show': '{count} ignored · show',
+  'ignored.hide': '{count} ignored · hide',
+  'ignored.rowHint': 'Ignored: not read, not watched',
+  'ignored.sideHint': 'Ignored on {stores}',
   'app.studioHint': 'Open the studio',
   'app.storeOnlyTitle': 'Store only.',
   'app.storeOnlyText': 'This app is on your store accounts but has no app folder: releases, reviews, health and TestFlight are shown read-only. Link its folder, or start one, to manage listings, products and checks.',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index dfa224d..d557b71 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -738,6 +738,16 @@ export const tr: Record<keyof typeof en, string> = {
   'app.pick': 'Bir uygulama seçin',
   'app.unpair': 'Eşleşmeyi ayır',
   'app.ignore': 'Yok say',
+  'app.unignore': 'Yok saymayı bırak',
+  'app.unignoreHint': 'Bu uygulamayı portföye ve mağaza okumalarına geri al',
+  'app.ignoreSide': '{store} tarafını yok say',
+  'app.unignoreSide': '{store} tarafını geri al',
+  'app.ignoreSideHint': 'Uygulamanın yalnızca {store} tarafını okumalardan ve bildirimlerden çıkarır. Yalnızca storebound: mağazaya dokunulmaz',
+  'app.unignoreSideHint': 'Uygulamanın {store} tarafını yeniden oku',
+  'ignored.show': '{count} yok sayılan · göster',
+  'ignored.hide': '{count} yok sayılan · gizle',
+  'ignored.rowHint': 'Yok sayılıyor: okunmaz, izlenmez',
+  'ignored.sideHint': '{stores} tarafı yok sayılıyor',
   'app.ignoreHint': 'Bu uygulamayı portföy ve mağaza okumalarının dışında bırak (Yok sayılanlar ekranından geri getirilir)',
   'app.studioHint': 'Stüdyoyu aç',
   'app.storeOnlyTitle': 'Yalnızca mağaza.',
diff --git a/apps/desktop/src/lib/identity.ts b/apps/desktop/src/lib/identity.ts
index 7dff543..1e2d2d4 100644
--- a/apps/desktop/src/lib/identity.ts
+++ b/apps/desktop/src/lib/identity.ts
@@ -5,7 +5,7 @@ import type { UnifiedApp as CoreApp } from '../../../../cli/lib/identity';
 
 export {
   buildApps, type BuildInput, NO_OVERRIDES, normId, normName, type Overrides, type Pair, pairCandidates, type Pairing, refKey, type StoreRef, storeTarget,
-  withIgnored, withLink, withPair, withStudio, withUnpair,
+  withIgnored, withLink, withPair, withSideIgnored, withStudio, withUnpair,
 } from '../../../../cli/lib/identity';
 
 export type UnifiedApp = CoreApp<Project>;
diff --git a/apps/desktop/src/lib/show-ignored.ts b/apps/desktop/src/lib/show-ignored.ts
new file mode 100644
index 0000000..21a3d1c
--- /dev/null
+++ b/apps/desktop/src/lib/show-ignored.ts
@@ -0,0 +1,25 @@
+// "N ignored · show": whether the sidebar and the portfolio list the ignored apps (dimmed, with Restore). A per-viewer
+// convenience kept in localStorage (a private window or blocked storage just means hidden), shared by every list.
+import { useEffect, useState } from 'react';
+
+const KEY = 'storebound.showIgnored';
+const EVT = 'storebound:show-ignored';
+
+export function readShowIgnored(): boolean {
+  try { return localStorage.getItem(KEY) === '1'; } catch { return false; }
+}
+
+export function setShowIgnored(on: boolean): void {
+  try { localStorage.setItem(KEY, on ? '1' : '0'); } catch { /* private mode */ }
+  window.dispatchEvent(new Event(EVT));
+}
+
+export function useShowIgnored(): [boolean, (on: boolean) => void] {
+  const [on, set] = useState(readShowIgnored);
+  useEffect(() => {
+    const f = () => set(readShowIgnored());
+    window.addEventListener(EVT, f);
+    return () => window.removeEventListener(EVT, f);
+  }, []);
+  return [on, setShowIgnored];
+}
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 7bf6f10..b1ac370 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -4,7 +4,7 @@
 import { useState } from 'react';
 import { api, errorText } from '../api';
 import { type Key, t } from '../i18n';
-import { pairCandidates, type UnifiedApp, withIgnored, withLink, withPair, withStudio, withUnpair } from '../lib/identity';
+import { pairCandidates, type UnifiedApp, withIgnored, withLink, withPair, withSideIgnored, withStudio, withUnpair } from '../lib/identity';
 import { attention, storeNow } from '../lib/model';
 import { Hero, nextStep, Tabs } from '../ui/ds';
 import { type AppTab, TAB_ICON, TAB_KEY, tabsFor, useNav } from '../nav';
@@ -41,6 +41,7 @@ function AppControls({ app }: { app: UnifiedApp }) {
   const nav = useNav();
   const cands = pairCandidates(app, d.apps);
   const canUnpair = !app.project && !!app.ios && !!app.android;
+  const sides = (['ios', 'android'] as const).filter(k => app[k] || app.ignoredStores.includes(k));
   return (
     <div className="app-controls">
       <span className="small muted row" style={{ gap: 6 }}><Icon name="link" className="ic13" />{t(PAIRING[app.pairing])}</span>
@@ -62,7 +63,15 @@ function AppControls({ app }: { app: UnifiedApp }) {
           </select></label>
       )}
       {canUnpair && <button className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withUnpair(o, app.ios!.key, app.android!.key)).then(() => nav.go({ screen: 'portfolio' }))}><Icon name="unlink" />{t('app.unpair')}</button>}
-      <button className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withIgnored(o, app.ignoreKeys, true)).then(() => nav.go({ screen: 'portfolio' }))} title={t('app.ignoreHint')}><Icon name="eyeOff" />{t('app.ignore')}</button>
+      {sides.length === 2 && sides.map(k => {
+        const off = app.ignored || app.ignoredStores.includes(k);
+        const store = k === 'ios' ? 'App Store' : 'Google Play';
+        return <button key={k} className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withSideIgnored(o, app, k, !off))}
+          title={off ? t('app.unignoreSideHint', { store }) : t('app.ignoreSideHint', { store })}><Icon name={off ? 'eye' : 'eyeOff'} />{off ? t('app.unignoreSide', { store }) : t('app.ignoreSide', { store })}</button>;
+      })}
+      {app.ignored
+        ? <button className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withIgnored(o, app.ignoreKeys, false))} title={t('app.unignoreHint')}><Icon name="eye" />{t('app.unignore')}</button>
+        : <button className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withIgnored(o, app.ignoreKeys, true)).then(() => nav.go({ screen: 'portfolio' }))} title={t('app.ignoreHint')}><Icon name="eyeOff" />{t('app.ignore')}</button>}
     </div>
   );
 }
diff --git a/apps/desktop/src/screens/Ignored.tsx b/apps/desktop/src/screens/Ignored.tsx
index 57c9a49..3a3ac39 100644
--- a/apps/desktop/src/screens/Ignored.tsx
+++ b/apps/desktop/src/screens/Ignored.tsx
@@ -1,7 +1,7 @@
 // Ignored: apps and whole store accounts left out of the portfolio, the sidebar and store reads. Restore brings them
 // back (nothing on the stores changes either way).
 import { t } from '../i18n';
-import { withIgnored } from '../lib/identity';
+import { withIgnored, withSideIgnored } from '../lib/identity';
 import { useNav } from '../nav';
 import { useData } from '../store';
 import { Icon, StoreGlyph } from '../ui/icons';
@@ -12,7 +12,7 @@ import '../styles/folders.css';
 export function Ignored() {
   const d = useData();
   const nav = useNav();
-  const apps = d.apps.filter(a => a.ignored).sort((a, b) => a.name.localeCompare(b.name));
+  const apps = d.apps.filter(a => a.ignored || a.ignoredStores.length > 0).sort((a, b) => a.name.localeCompare(b.name));
   const accounts = d.accounts.filter(a => d.overrides.ignored.includes(`account:${a.id}`));
   const restoreAll = () => d.updateOverrides(o => ({ ...o, ignored: [] }));
   const empty = !apps.length && !accounts.length;
@@ -37,7 +37,8 @@ export function Ignored() {
                           {a.android && <span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" /><span className="mono-id">{a.android.app.id}</span></span>}
                         </span>
                       </div>
-                      <button className="btn btn-sm" onClick={() => d.updateOverrides(o => withIgnored(o, a.ignoreKeys, false))}><Icon name="eye" />{t('ignored.restore')}</button>
+                      {a.ignoredStores.map(k => <button key={k} className="btn btn-sm" onClick={() => d.updateOverrides(o => withSideIgnored(o, a, k, false))}><Icon name="eye" />{t('app.unignoreSide', { store: k === 'ios' ? 'App Store' : 'Google Play' })}</button>)}
+                      {a.ignored && <button className="btn btn-sm" onClick={() => d.updateOverrides(o => withIgnored(o, a.ignoreKeys, false))}><Icon name="eye" />{t('ignored.restore')}</button>}
                     </div>
                   );
                 })}
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 41cc6f3..14ff770 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -8,7 +8,8 @@ import { type ReactNode, useEffect, useMemo, useState } from 'react';
 import { api, type AppStatus, newJob, type StoreRelease, type ToolResult } from '../api';
 import { type Key, t } from '../i18n';
 import { ago, pct, share } from '../lib/format';
-import { filterSort, groupByStudio, type ListRow, type SortBy, studioCounts, type UnifiedApp } from '../lib/identity';
+import { useShowIgnored } from '../lib/show-ignored';
+import { filterSort, groupByStudio, type ListRow, type SortBy, studioCounts, type UnifiedApp, withIgnored } from '../lib/identity';
 import { type Attention, attention, healthSeries, type HealthSnapshot, isError, laneOf, PLAY_THRESHOLDS, STAGES, storeNow, type Tone } from '../lib/model';
 import { type AppTab, useNav } from '../nav';
 import type { IconName } from '../ui/icons';
@@ -282,6 +283,8 @@ export function Portfolio() {
   const [query, setQuery] = useState('');
   const setView = (v: Partial<View>) => setViewState(x => { const n = { ...x, ...v }; try { localStorage.setItem(VIEW_KEY, JSON.stringify(n)); } catch { /* private mode */ } return n; });
   const visible = useMemo(() => d.apps.filter(a => !a.ignored), [d.apps]);
+  const ignoredApps = useMemo(() => d.apps.filter(a => a.ignored), [d.apps]);
+  const [showIgnored, setShowIgnored] = useShowIgnored();
   const [round, setRound] = useState(0);
   const [rechecking, setRechecking] = useState(false);
   const health = useCachedHealth(visible.map(a => a.target), round);
@@ -427,6 +430,18 @@ export function Portfolio() {
         <Seg value={view.layout} onChange={layout => setView({ layout })} label={t('pf.layout')} options={[['cards', t('pf.cards'), 'grid'], ['table', t('pf.table'), 'layers']]} />
       </div>
 
+      {ignoredApps.length > 0 && (
+        <div className="row small" style={{ gap: 8, flexWrap: 'wrap' }} data-testid="ignored-strip">
+          <button className="link" aria-pressed={showIgnored} onClick={() => setShowIgnored(!showIgnored)}>{showIgnored ? t('ignored.hide', { count: ignoredApps.length }) : t('ignored.show', { count: ignoredApps.length })}</button>
+          {showIgnored && ignoredApps.map(a => (
+            <span key={a.key} className="row muted" style={{ gap: 4 }}>
+              <button className="link" onClick={() => open(a)}>{a.name}</button>
+              <button className="btn btn-sm btn-ghost btn-icon" onClick={() => d.updateOverrides(o => withIgnored(o, a.ignoreKeys, false))} aria-label={t('ignored.restore')} title={t('ignored.restore')}><Icon name="eye" /></button>
+            </span>
+          ))}
+        </div>
+      )}
+
       {view.layout === 'cards' && (rows.length ? grouped.map(g => {
         const s = g.studio === undefined ? undefined : d.studios.find(x => x.id === g.studio) ?? null;
         return (
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index cca9d6d..845e577 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -59,7 +59,8 @@ export function classifyRead(result: unknown, error: unknown, task: ReadTask<unk
 export function platformsOf(a: UnifiedApp | undefined, status?: AppStatus): { ios: boolean; android: boolean } {
   if (!a) return { ios: false, android: false };
   const pl = status?.app?.platforms as { ios?: unknown; android?: unknown } | undefined;
-  return { ios: !!a.ios || !!pl?.ios || (!!a.project?.appleAccount && !pl), android: !!a.android || !!pl?.android || (!!a.project?.playAccount && !pl) };
+  // a store side the owner ignored is not read (reviews, health, status of that store)
+  return { ios: !a.ignoredStores.includes('ios') && (!!a.ios || !!pl?.ios || (!!a.project?.appleAccount && !pl)), android: !a.ignoredStores.includes('android') && (!!a.android || !!pl?.android || (!!a.project?.playAccount && !pl)) };
 }
 
 export interface Data {
diff --git a/apps/desktop/tests/identity.test.ts b/apps/desktop/tests/identity.test.ts
index 2c2f3f3..fc0bda4 100644
--- a/apps/desktop/tests/identity.test.ts
+++ b/apps/desktop/tests/identity.test.ts
@@ -4,7 +4,7 @@ import { describe, expect, test } from 'bun:test';
 import type { Account, Project, ProjectSummary, StoreApp } from '../src/api';
 import {
   buildApps, filterSort, groupByStudio, type ListRow, NO_OVERRIDES, normId, normName, type Overrides, pairCandidates, storeTarget, studioCounts,
-  withIgnored, withLink, withPair, withStudio, withUnpair,
+  withIgnored, withLink, withPair, withSideIgnored, withStudio, withUnpair,
 } from '../src/lib/identity';
 import { crashCrossed, newLowReviews, releaseChanges } from '../src/lib/notify';
 
@@ -73,6 +73,37 @@ describe('identity pairing', () => {
     expect([linked.ios?.app.id, linked.android?.app.id, linked.pairing]).toEqual(['102', 'com.example.orbit', 'folder']);
     expect(apps.some(a => a.name === 'Orbit Hop' && !a.project)).toBe(false);
   });
+  test('ignore one store side: a folder hides only that store, both sides is the whole app, restore splits it', () => {
+    const base = byName(build(), 'Prism Puddle');
+    expect([base.ios?.app.id, base.android?.app.id, base.ignored, base.ignoredStores]).toEqual(['101', 'com.example.prism', false, []]);
+    const noIos = withSideIgnored(NO_OVERRIDES, base, 'ios', true);
+    expect(noIos.ignored).toEqual(['project:p1:ios']);
+    const half = byName(build(noIos), 'Prism Puddle');
+    expect([half.ios, half.android?.app.id, half.ignored, half.ignoredStores]).toEqual([null, 'com.example.prism', false, ['ios']]);
+    expect(half.sideKeys.ios).toBe('project:p1:ios');
+    // the hidden iOS app does not come back as a store-only app of its own
+    expect(build(noIos).filter(a => a.ios?.app.id === '101')).toHaveLength(0);
+    const both = withSideIgnored(noIos, half, 'android', true);
+    expect(both.ignored).toEqual(['project:p1']);
+    const whole = byName(build(both), 'Prism Puddle');
+    expect([whole.ignored, whole.ignoredStores]).toEqual([true, []]);
+    const back = withSideIgnored(both, whole, 'ios', false);
+    expect(back.ignored.sort()).toEqual(['project:p1:android']);
+    expect(byName(build(back), 'Prism Puddle').ignoredStores).toEqual(['android']);
+    // restoring the whole app clears every key of it
+    expect(withIgnored(both, whole.ignoreKeys, false).ignored).toEqual([]);
+  });
+  test('ignore one side of a paired store-only app; ignoring both sides ignores the app', () => {
+    const orbit = byName(build(), 'Orbit Hop');
+    expect(orbit.ios && orbit.android).toBeTruthy();
+    const o = withSideIgnored(NO_OVERRIDES, orbit, 'android', true);
+    const half = byName(build(o), 'Orbit Hop');
+    expect([half.ios?.app.id, half.android, half.ignored, half.ignoredStores]).toEqual(['102', null, false, ['android']]);
+    const all = withSideIgnored(o, half, 'ios', true);
+    const full = byName(build(all), 'Orbit Hop');
+    expect(full.ignored).toBe(true);
+    expect(full.ios && full.android).toBeTruthy();
+  });
   test('ignore: an app (all its store keys) or a whole account; studio moves', () => {
     const tycoon = byName(build(), 'Pocket Tycoon');
     const o = withIgnored(NO_OVERRIDES, tycoon.ignoreKeys, true);
diff --git a/cli/lib/identity.ts b/cli/lib/identity.ts
index 7a9763b..192e718 100644
--- a/cli/lib/identity.ts
+++ b/cli/lib/identity.ts
@@ -46,7 +46,12 @@ export interface UnifiedApp<P extends IdProject = IdProject> {
   pairing: Pairing;
   /** The keys an "ignore" puts on the list ("project:<id>" or "app:<store key>"). */
   ignoreKeys: string[];
+  /** Ignored entirely (every store side it has). */
   ignored: boolean;
+  /** Store sides left out while the other side stays (a half-ignored app): their ref is dropped from ios / android. */
+  ignoredStores: ('ios' | 'android')[];
+  /** The ignore key of each side (null: no such side), for the per-store toggles. */
+  sideKeys: { ios: string | null; android: string | null };
   /** Store icon (data URL) when the folder has none. */
   storeIcon: string | null;
 }
@@ -115,9 +120,17 @@ export function buildApps<P extends IdProject>(i: BuildInput<P>): UnifiedApp<P>[
     const studio = studioOverride.get(`project:${p.id}`)
       ?? (p.appleAccount && accountStudio.get(p.appleAccount)) ?? (p.playAccount && accountStudio.get(p.playAccount))
       ?? (ios && accountStudio.get(ios.account)) ?? (android && accountStudio.get(android.account)) ?? null;
+    // ignored: the whole folder, or every store side it has; one side alone hides just that store (project:<id>:ios | :android)
+    const whole = ignored.has(`project:${p.id}`);
+    const sideOff = { ios: whole || ignored.has(`project:${p.id}:ios`), android: whole || ignored.has(`project:${p.id}:android`) };
+    const has = { ios: !!ios || !!s?.apple || !!p.appleAccount, android: !!android || !!s?.play || !!p.playAccount };
+    const present = (['ios', 'android'] as const).filter(k => has[k]);
+    const allOff = whole || (present.length > 0 && present.every(k => sideOff[k]));
+    const hidden = allOff ? [] : present.filter(k => sideOff[k]);
     out.push({
-      key: p.id, target: p.id, name: p.name, project: p, ios, android, studio, pairing: 'folder',
-      ignoreKeys: [`project:${p.id}`], ignored: ignored.has(`project:${p.id}`), storeIcon: ios?.app.icon ?? android?.app.icon ?? null,
+      key: p.id, target: p.id, name: p.name, project: p, ios: hidden.includes('ios') ? null : ios, android: hidden.includes('android') ? null : android, studio, pairing: 'folder',
+      ignoreKeys: [`project:${p.id}`, `project:${p.id}:ios`, `project:${p.id}:android`], ignored: allOff, ignoredStores: hidden, sideKeys: { ios: `project:${p.id}:ios`, android: `project:${p.id}:android` },
+      storeIcon: ios?.app.icon ?? android?.app.icon ?? null,
     });
   }
 
@@ -147,9 +160,14 @@ export function buildApps<P extends IdProject>(i: BuildInput<P>): UnifiedApp<P>[
     const keys = [ios, android].filter((r): r is StoreRef => !!r).map(r => r.key);
     const studio = keys.map(k => studioOverride.get(k)).find(Boolean)
       ?? (ios && accountStudio.get(ios.account)) ?? (android && accountStudio.get(android.account)) ?? null;
+    // a paired app is ignored when every side is; one ignored side alone hides just that store
+    const off = (r: StoreRef | null) => !!r && ignored.has(`app:${r.key}`);
+    const allOff = [ios, android].filter(Boolean).length > 0 && [ios, android].every(r => !r || off(r));
+    const hidden = allOff ? [] : (['ios', 'android'] as const).filter(k => off(k === 'ios' ? ios : android));
     out.push({
-      key: target, target, name: ios?.app.name ?? android?.app.name ?? '?', project: null, ios, android, studio, pairing,
-      ignoreKeys: keys.map(k => `app:${k}`), ignored: keys.some(k => ignored.has(`app:${k}`)), storeIcon: ios?.app.icon ?? android?.app.icon ?? null,
+      key: target, target, name: ios?.app.name ?? android?.app.name ?? '?', project: null, ios: hidden.includes('ios') ? null : ios, android: hidden.includes('android') ? null : android, studio, pairing,
+      ignoreKeys: keys.map(k => `app:${k}`), ignored: allOff, ignoredStores: hidden, sideKeys: { ios: ios ? `app:${ios.key}` : null, android: android ? `app:${android.key}` : null },
+      storeIcon: ios?.app.icon ?? android?.app.icon ?? null,
     });
   };
   for (const [a, b, how] of pairs) storeOnly(a, b, how);
@@ -180,6 +198,21 @@ export function withUnpair(o: Overrides, ios: string, android: string): Override
   return { ...o, pairs: o.pairs.filter(p => !samePair(p, ios, android)), unpairs: [...o.unpairs.filter(p => !samePair(p, ios, android)), { ios, android }] };
 }
 
+/** Overrides after ignoring (or restoring) ONE store side of an app. A whole-folder key is split into its sides first. */
+export function withSideIgnored(o: Overrides, app: UnifiedApp, side: 'ios' | 'android', on: boolean): Overrides {
+  const key = app.sideKeys[side];
+  if (!key) return o;
+  const set = new Set(o.ignored);
+  if (app.project) {
+    const whole = `project:${app.project.id}`;
+    if (set.delete(whole)) { set.add(app.sideKeys.ios!); set.add(app.sideKeys.android!); }
+    // both sides ignored is the same as the whole folder
+    if (on) set.add(key); else set.delete(key);
+    if (set.has(app.sideKeys.ios!) && set.has(app.sideKeys.android!)) { set.delete(app.sideKeys.ios!); set.delete(app.sideKeys.android!); set.add(whole); }
+  } else if (on) set.add(key); else set.delete(key);
+  return { ...o, ignored: [...set] };
+}
+
 export function withIgnored(o: Overrides, keys: string[], on: boolean): Overrides {
   const set = new Set(o.ignored);
   for (const k of keys) { if (on) set.add(k); else set.delete(k); }

From d3190ecdec17fe45d821f4ba3a669127f4e9cf0f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 02:06:56 +0800
Subject: [PATCH 051/255] watch: read a missing App Store bundle id from the
 API instead of skipping the app

---
 CHANGELOG.md |  2 ++
 cli/watch.ts | 19 +++++++++++++++++--
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 097f331..615a5b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `storebound watch`: a store-only App Store app added without a bundle id is no longer skipped; the bundle id is read from the API with the app's own key.
+
 ## 0.8.35 · 2026-10-22
 
 - Desktop v2 ships (0.8.33 and 0.8.34 stopped at the desktop boot check, which still expected the old markup).
diff --git a/cli/watch.ts b/cli/watch.ts
index 484113c..42528eb 100644
--- a/cli/watch.ts
+++ b/cli/watch.ts
@@ -65,8 +65,10 @@ export async function listTargets(args: Args): Promise<Target[]> {
     for (const s of reg.storeApps) {
       if (isIgnored(s)) continue;
       try {
-        if (s.store === 'apple' && !s.bundleId) throw new Error('no bundle id (storebound apps add --store apple --app-id <id> --bundle-id <id>)');
-        const v = checkVirtual({ name: s.name, ...(s.store === 'apple' ? { apple: { bundleId: s.bundleId, appId: s.appId } } : { play: { packageName: s.appId } }) });
+        // a store-only App Store app added without --bundle-id: read it from the API with the app's own key
+        const bundleId = s.store === 'apple' ? (s.bundleId || await appleBundleId(s.appId, s.account ? profileEnv(s.account) : {})) : null;
+        if (s.store === 'apple' && !bundleId) throw new Error('no bundle id (storebound apps add --store apple --app-id <id> --bundle-id <id>)');
+        const v = checkVirtual({ name: s.name, ...(s.store === 'apple' ? { apple: { bundleId: bundleId!, appId: s.appId } } : { play: { packageName: s.appId } }) });
         out.push({ key: `store:${s.id}`, name: s.name, dir: virtualDir(v), virtual: true, env: s.account ? profileEnv(s.account) : {}, skip: [] });
       } catch (e) { warn(TAG, `${s.name}: ${(e as Error).message}, skipped`); }
     }
@@ -74,6 +76,19 @@ export async function listTargets(args: Args): Promise<Target[]> {
   return out;
 }
 
+/** The bundle id of an App Store app by its numeric id, read with the given credential env; null when it cannot be read. */
+async function appleBundleId(appId: string, env: Record<string, string>): Promise<string | null> {
+  const saved = Object.fromEntries(Object.keys(env).map(k => [k, process.env[k]]));
+  Object.assign(process.env, env);
+  try {
+    const { ascClient } = await import('./apple/asc');
+    const r = await (await ascClient(process.cwd(), '')).asc('GET', `/v1/apps/${appId}?fields[apps]=bundleId`) as { data?: { attributes?: { bundleId?: string } } };
+    return r.data?.attributes?.bundleId ?? null;
+  } catch { return null; } finally {
+    for (const [k, v] of Object.entries(saved)) { if (v === undefined) delete process.env[k]; else process.env[k] = v; }
+  }
+}
+
 /** Reads one app: releases of both stores, health when due, new reviews. A part that cannot be read is left out. */
 async function readApp(t: Target, prev: AppSnap | undefined, now: number): Promise<AppRead> {
   const run = exec(t.env);

From 63e3f24f0b361903c55c97d86c0769647535def7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 01:08:33 +0700
Subject: [PATCH 052/255] storebound 0.8.36: version in package.json and every
 copy, CHANGELOG 0.8.36 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 98d6e61..59a4aa8 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.35",
+      "version": "0.8.36",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index b04c050..cc00873 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.35",
+  "version": "0.8.36",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 17f563e..62e8588 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.35",
+  "version": "0.8.36",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 615a5b7..a1cfc4e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.36 · 2026-10-22
+
 - `storebound watch`: a store-only App Store app added without a bundle id is no longer skipped; the bundle id is read from the API with the app's own key.
 
 ## 0.8.35 · 2026-10-22
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index af7f3f0..6f61129 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.35",
+  "version": "0.8.36",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index dfa578c..d844e1a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.35"
+version = "0.8.36"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 5b83702..d1ee576 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.35"
+version = "0.8.36"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 8d7371f..5260b01 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.35",
+  "version": "0.8.36",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index d6987e1..85a4765 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.35",
+  "version": "0.8.36",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index bb652ae..3d17e13 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.35",
+  "version": "0.8.36",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 4a0bce64a1a7518fcdf904bde3a9f7ae329c3f03 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 02:36:01 +0800
Subject: [PATCH 053/255] Desktop: live store thumbnails load right away (an
 IntersectionObserver may never fire in a hidden tray window)

---
 apps/desktop/src/screens/tabs/LiveArt.tsx | 13 ++++---------
 1 file changed, 4 insertions(+), 9 deletions(-)

diff --git a/apps/desktop/src/screens/tabs/LiveArt.tsx b/apps/desktop/src/screens/tabs/LiveArt.tsx
index f86dbea..a6669e7 100644
--- a/apps/desktop/src/screens/tabs/LiveArt.tsx
+++ b/apps/desktop/src/screens/tabs/LiveArt.tsx
@@ -44,16 +44,11 @@ function LiveThumb({ target, tile, name }: { target: string; tile: LiveArtTile;
   const [src, setSrc] = useState<string | null | undefined>(tile.thumb ? cache.get(`${target}|${tile.thumb}`) : null);
   useEffect(() => {
     if (!tile.thumb || src !== undefined) return;
-    const el = ref.current;
-    if (!el) return;
+    // loaded right away, not on scroll: an IntersectionObserver may never fire in a hidden (tray) window, and a store
+    // has at most a few dozen live images
     let alive = true;
-    const io = new IntersectionObserver(es => {
-      if (!es.some(x => x.isIntersecting)) return;
-      io.disconnect();
-      loadThumb(target, tile.thumb).then(u => { if (alive) setSrc(u); });
-    }, { rootMargin: '300px' });
-    io.observe(el);
-    return () => { alive = false; io.disconnect(); };
+    loadThumb(target, tile.thumb).then(u => { if (alive) setSrc(u); });
+    return () => { alive = false; };
   }, [target, tile.thumb, src]);
   const w = tile.w ?? 9, h = tile.h ?? 16;
   const state = tile.state === 'n/a' ? null : tile.state;

From 618ff9e488d95abcd1761953d0ee828d241eaf7f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 02:36:37 +0800
Subject: [PATCH 054/255] CHANGELOG: next release notes

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a1cfc4e..b7daf68 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- `storebound apps ignore|unignore [--store apple|play]`: hide dormant apps, or one store side of an app, from watch, reads and the desktop (MCP apps_ignore / apps_unignore).
+- Reviews: a store read that fails is an error, not an empty "no new reviews" list; the Reviews tab notes Apple API lag and Play's 7-day window (pitfall 106).
+- Desktop: live store thumbnails load right away, also in a hidden window.
+
 ## 0.8.36 · 2026-10-22
 
 - `storebound watch`: a store-only App Store app added without a bundle id is no longer skipped; the bundle id is read from the API with the app's own key.

From 06dc71523ee43a210b471607fc832c6b0dffae05 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 01:38:18 +0700
Subject: [PATCH 055/255] storebound 0.8.37: version in package.json and every
 copy, CHANGELOG 0.8.37 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 59a4aa8..59db318 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.36",
+      "version": "0.8.37",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index cc00873..69ffee4 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.36",
+  "version": "0.8.37",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 62e8588..3fb1992 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.36",
+  "version": "0.8.37",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b7daf68..bb3859f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.37 · 2026-10-22
+
 - `storebound apps ignore|unignore [--store apple|play]`: hide dormant apps, or one store side of an app, from watch, reads and the desktop (MCP apps_ignore / apps_unignore).
 - Reviews: a store read that fails is an error, not an empty "no new reviews" list; the Reviews tab notes Apple API lag and Play's 7-day window (pitfall 106).
 - Desktop: live store thumbnails load right away, also in a hidden window.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 6f61129..7960c5d 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.36",
+  "version": "0.8.37",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index d844e1a..ba76c7b 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.36"
+version = "0.8.37"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index d1ee576..1ae4bfd 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.36"
+version = "0.8.37"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 5260b01..35bab79 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.36",
+  "version": "0.8.37",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 85a4765..395e927 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.36",
+  "version": "0.8.37",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 3d17e13..cd4688a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.36",
+  "version": "0.8.37",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 707db2ebc60e4168677e6637b5c215ba775ad15a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:39:51 +0800
Subject: [PATCH 056/255] Desktop: app hero without screenshots no longer shows
 a cropped second copy of the icon

---
 apps/desktop/src/design.css | 3 ---
 apps/desktop/src/ui/ds.tsx  | 7 ++++---
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index 449fe8d..0074881 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -99,9 +99,6 @@
 .ds-hero-shots img { height: 280px; width: auto; aspect-ratio: 9 / 19.5; object-fit: cover; object-position: top; border-radius: 16px; box-shadow: 0 18px 36px -14px rgba(0, 0, 0, .55); flex: none; transition: transform var(--speed) var(--ease); }
 .ds-hero-shots img:nth-child(even) { margin-top: 26px; }
 .ds-hero:hover .ds-hero-shots img { transform: translateY(-3px); }
-.ds-hero-shots.empty { align-items: center; justify-content: center; padding: 0; width: 300px; -webkit-mask-image: none; mask-image: none;
-  background: radial-gradient(60% 70% at 50% 50%, hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l) / .40), transparent 70%); }
-.ds-hero-shots .pf-hero-icon { width: 120px; height: 120px; border-radius: 30px; font-size: 36px; box-shadow: 0 22px 48px -16px hsl(var(--tint-h) 70% 30% / .75), inset 0 0 0 1px rgba(255, 255, 255, .12); }
 @media (max-width: 1180px) { .ds-hero { grid-template-columns: minmax(0, 1fr); } .ds-hero-shots { display: none; } }
 @media (max-width: 900px) { .ds-hero-pipe { grid-template-columns: minmax(0, 1fr); } .ds-hero-foot { justify-items: start; } }
 
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index 563e500..a855866 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -205,9 +205,10 @@ export function Hero({ name, icon, projectId, ids, badges, links, all, ios, andr
         </div>
         {children}
       </div>
-      <div className={`ds-hero-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
-        {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} />) : <AppIcon name={name} src={icon} className="pf-hero-icon" />}
-      </div>
+      {/* no screenshots: no second (cropped) copy of the icon, which already leads the hero */}
+      {shots.length > 0 && <div className="ds-hero-shots" aria-hidden="true">
+        {shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} />)}
+      </div>}
     </section>
   );
 }

From 7960063e0ec5ffb2fc5be587bbedabb92f78b32b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:49:43 +0800
Subject: [PATCH 057/255] Signed AAB guardrails, injected signing args, IPA
 version train check, Play notes lint at build

---
 CHANGELOG.md                   |  4 +++
 cli/apple/build.ts             |  4 ++-
 cli/apple/upload.ts            | 11 +++++--
 cli/check.ts                   |  5 +++
 cli/lib/gradle.ts              | 56 ++++++++++++++++++++++++++++++++--
 cli/lib/xcode.ts               |  8 +++++
 cli/play/build.ts              | 21 ++++++++++---
 cli/play/release.ts            |  3 +-
 cli/play/upload.ts             |  3 +-
 skills/store-pitfalls/SKILL.md | 29 ++++++++++++++++++
 tests/build-fixtures.ts        |  3 +-
 tests/build-sign.test.ts       | 48 +++++++++++++++++++++++++++--
 12 files changed, 181 insertions(+), 14 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b7daf68..545fbc3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@
 - `storebound apps ignore|unignore [--store apple|play]`: hide dormant apps, or one store side of an app, from watch, reads and the desktop (MCP apps_ignore / apps_unignore).
 - Reviews: a store read that fails is an error, not an empty "no new reviews" list; the Reviews tab notes Apple API lag and Play's 7-day window (pitfall 106).
 - Desktop: live store thumbnails load right away, also in a hidden window.
+- `play build` passes the upload key (ANDROID_KEYSTORE, ...) to Gradle as `-Pandroid.injected.signing.*` too (passwords masked in the printed command), so a build file that signs only from a local keystore.properties no longer gives an unsigned AAB in CI (pitfall 107).
+- `play build`, `play upload` and `play release` of a local AAB verify it is signed (META-INF entries, `jarsigner -verify` when a JDK exists) and fail with the fix before any upload.
+- `apple build --version` and `apple upload` refuse an IPA whose CFBundleShortVersionString is not the intended / editable App Store version; `--allow-version-mismatch` overrides (pitfall 108).
+- Play release notes that name iOS, iPhone or the App Store are caught by `storebound check` and `play build`, not only at release time (pitfall 109).
 
 ## 0.8.36 · 2026-10-22
 
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index eccc64f..ba282fd 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -23,7 +23,7 @@ import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
 import { capacitorProject, webStep } from '../lib/web-assets';
-import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, pickXcode, scanXcode, showCmd } from '../lib/xcode';
+import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { findBundleId } from './signing';
@@ -189,6 +189,8 @@ export async function run(ctx: Ctx): Promise<void> {
   const ipa = readdirSync(exportPath).find(f => f.endsWith('.ipa'))!;
   const info = ipaInfo(join(exportPath, ipa));
   if (info.bundleId !== bundleId) warn(TAG, `the IPA's bundle id is ${info.bundleId}, the config says ${bundleId}`);
+  const vwhy = ipaVersionProblem(info.version, version, 'the requested --version');
+  if (vwhy) { if (a.has('allow-version-mismatch')) warn(TAG, vwhy); else throw new Error(`${relative(root, join(exportPath, ipa))}: ${vwhy}`); }
   if (info.build !== build) warn(TAG, `the IPA has build ${info.build}, not ${build}: the project sets CFBundleVersion itself (use $(CURRENT_PROJECT_VERSION) in Info.plist)`);
   // ITMS-91064 (Invalid Binary after the upload): NSPrivacyTracking / NSPrivacyTrackingDomains of every manifest in the IPA
   const privacy = bundleTrackingIssues(ipaManifests(join(exportPath, ipa)));
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index cc38e77..0f4f522 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -5,7 +5,9 @@
 // An IPA whose build number is already on App Store Connect fails with exit 1 (a stale IPA left by a failed
 // `apple build`, pitfall 53); only --allow-existing (flows that resume after a finished upload) re-checks it instead. Before any network call every PrivacyInfo.xcprivacy in the IPA
 // (app root, Frameworks/*.framework, bundles; XML or binary) is checked: NSPrivacyTracking and NSPrivacyTrackingDomains
-// must agree (ITMS-91064, Invalid Binary a minute after the upload), else nothing is uploaded.
+// must agree (ITMS-91064, Invalid Binary a minute after the upload), else nothing is uploaded. The IPA's version
+// (CFBundleShortVersionString) must be the editable App Store version's (else the build lands in the wrong train);
+// --allow-version-mismatch goes on anyway.
 //   --via api (default): the App Store Connect API build upload (Build Uploads, API 4.1+): POST /v1/buildUploads,
 //     reserve /v1/buildUploadFiles, PUT the parts, commit with the MD5, then poll the upload state. Same API key, no
 //     Xcode needed, works on any OS.
@@ -22,7 +24,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { compareBuild, nextBuildNumber, nextPollDelay, parseDuration, WAIT_EXIT } from '../lib/release';
-import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, showCmd, UPLOAD_DONE, uploadProblems } from '../lib/xcode';
+import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, showCmd, UPLOAD_DONE, uploadProblems } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { BUILD_WAIT_EXIT } from '../lib/build-ops';
 import { type Asc, ascClient, type J } from './asc';
@@ -246,6 +248,11 @@ export async function run(ctx: Ctx): Promise<void> {
 
   const c = await ascClient(root, bundleId, config.apple?.appId);
   const appId = await c.app();
+  // the IPA must belong to the version train being prepared (the editable App Store version): MARKETING_VERSION 1.0
+  // from a project that ignored the intended version otherwise lands in the wrong train
+  const editable = await c.editableVersion().catch(() => null);
+  const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
+  if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
   const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
   const numbers = builds.map(b => String(b.attributes.version));
   const next = nextBuildNumber(numbers);
diff --git a/cli/check.ts b/cli/check.ts
index df40330..ed1f5ab 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -16,6 +16,7 @@ import { trackingIssue } from './lib/privacy-manifest';
 import { type AsoFinding, auditAso } from './lib/aso';
 import { draftLocales } from './lib/aso-intel';
 import { appleName, playCodes } from './lib/config';
+import { fieldsMentions } from './lib/cross-store';
 import { appBuildFile, pickGradle, versionSourceIssues, versionSourceMessage } from './lib/gradle';
 import { playConsoleReminders } from './lib/console-plan';
 import { APPLE_IAP_LIMITS, appleNameIssues, len, parseAppStoreListing, parsePlayListing } from './lib/copy';
@@ -84,6 +85,10 @@ export async function run(ctx: Ctx): Promise<void> {
     const def = copy.find(x => x.lang === (config.play!.defaultLanguage ?? 'en-US'));
     const same = copy.filter(x => def && x !== def && x.whatsNew && x.whatsNew === def.whatsNew && x.lang.slice(0, 2) !== def.lang.slice(0, 2));
     if (same.length) note(`what's new of ${same.map(x => x.lang).join(', ')} is the same text as ${def!.lang}: translate it`);
+    // release notes naming iOS / the App Store are refused at release time (pitfall 77): say so now (a notes block the
+    // file scan did not reach, e.g. one outside a fenced block, still counts)
+    const seen = new Set(listingFileMentions(ctx.loaded, { apple: false, play: true }).filter(h => h.field === 'whatsNew').map(h => h.locale));
+    for (const c of copy) if (c.whatsNew && !seen.has(c.lang)) for (const h of fieldsMentions('play', c.lang, { whatsNew: c.whatsNew }, config.listing?.allowPlatformMentions)) problems.push(`Google Play release notes: ${hitLine(h)}`);
     return `${copy.length} languages`;
   });
   if (config.apple) tryDo('appstore listing', () => {
diff --git a/cli/lib/gradle.ts b/cli/lib/gradle.ts
index ddafbce..e71ecac 100644
--- a/cli/lib/gradle.ts
+++ b/cli/lib/gradle.ts
@@ -5,6 +5,7 @@
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import type { AndroidSigning } from './credentials';
+import * as rt from './rt';
 import { zipEntries, zipRead } from './zip';
 
 export interface PlayBuildConfig {
@@ -57,13 +58,28 @@ export function pickGradle(root: string, cfg: PlayBuildConfig = {}): GradleTarge
  *  override defaultConfig for bundleRelease: checked with AGP 8.13 (2026-10-12), `-Pandroid.injected.version.code=42`
  *  on a build file with `versionCode 1` gives an AAB with versionCode 1; seen live the same day with a Capacitor app.
  *  They stay on the command line for older plugins / IDE parity only; the AAB check after the build is the stop. */
-export function gradleArgs(t: GradleTarget, o: { versionCode?: number; versionName?: string; flavor?: string; hasWrapper: boolean }, platform: string = process.platform): string[] {
+export function gradleArgs(t: GradleTarget, o: { versionCode?: number; versionName?: string; flavor?: string; hasWrapper: boolean; signing?: AndroidSigning | null }, platform: string = process.platform): string[] {
   if (t.framework === 'flutter')
     return ['flutter', 'build', 'appbundle', '--release', ...(o.flavor ? ['--flavor', o.flavor] : []), ...(o.versionCode ? ['--build-number', String(o.versionCode)] : []), ...(o.versionName ? ['--build-name', o.versionName] : [])];
   // Windows: a bare `gradlew.bat` is searched on PATH only ("Executable not found in $PATH"); cmd /c finds it in the cwd
   return [...(o.hasWrapper ? (platform === 'win32' ? ['cmd', '/c', 'gradlew.bat'] : ['./gradlew']) : platform === 'win32' ? ['cmd', '/c', 'gradle'] : ['gradle']), t.task, '--no-daemon', '--console=plain',
     ...(o.versionCode ? [`-Pandroid.injected.version.code=${o.versionCode}`, `-PversionCode=${o.versionCode}`] : []),
-    ...(o.versionName ? [`-Pandroid.injected.version.name=${o.versionName}`, `-PversionName=${o.versionName}`] : [])];
+    ...(o.versionName ? [`-Pandroid.injected.version.name=${o.versionName}`, `-PversionName=${o.versionName}`] : []),
+    ...signingArgs(o.signing ?? null)];
+}
+
+/** The upload key as Gradle project properties (-Pandroid.injected.signing.*). A project whose build file signs only
+ *  from a local keystore.properties (absent in CI) gives an unsigned AAB otherwise (Play: 403 "All uploaded bundles
+ *  must be signed"). The passwords are on this argv: print it only through maskArgs. */
+export function signingArgs(s: AndroidSigning | null): string[] {
+  if (!s) return [];
+  return [`-Pandroid.injected.signing.store.file=${s.storeFile}`, `-Pandroid.injected.signing.store.password=${s.storePassword}`,
+    `-Pandroid.injected.signing.key.alias=${s.keyAlias}`, `-Pandroid.injected.signing.key.password=${s.keyPassword}`];
+}
+
+/** An argv for logs and plans: the signing passwords are replaced by ***. Pure. */
+export function maskArgs(argv: readonly string[]): string[] {
+  return argv.map(x => x.replace(/^(-Pandroid\.injected\.signing\.(?:store|key)\.password=).*$/, '$1***'));
 }
 
 // ---- where the build file takes versionCode / versionName from ----
@@ -282,3 +298,39 @@ export function encodeProtoManifest(els: { name: string; attrs: Record<string, s
   };
   return ld(1, element(0));
 }
+
+
+// ---- is the AAB signed? ----
+
+/** Whether the bundle carries a JAR signature (META-INF/<name>.SF plus a .RSA / .DSA / .EC block). Play refuses an
+ *  unsigned bundle with 403 "All uploaded bundles must be signed". Pure apart from reading the file. */
+export function aabSignedEntries(aab: string | Buffer): boolean {
+  const names = zipEntries(aab).map(e => e.name);
+  return names.some(n => /^META-INF\/[^/]+\.SF$/i.test(n)) && names.some(n => /^META-INF\/[^/]+\.(RSA|DSA|EC)$/i.test(n));
+}
+
+/** The reason an AAB is unsigned (null when signed). `jarsigner` (a JDK) verifies the signature when `verify` is given
+ *  and returns its output (null: not available); without it only the META-INF entries are checked. */
+export function aabUnsignedReason(aab: string | Buffer, verify?: (path: string) => { ok: boolean; out: string } | null, path?: string): string | null {
+  if (!aabSignedEntries(aab)) return 'it has no META-INF/*.SF + *.RSA|DSA|EC signature files';
+  if (verify && path) {
+    const r = verify(path);
+    if (r && !r.ok) return `jarsigner -verify: ${r.out.trim().split(/\r?\n/).filter(Boolean).slice(0, 2).join(' ')}`;
+  }
+  return null;
+}
+
+/** Throws when the AAB file is not signed, before any upload. `jarsigner` runs when a JDK is on PATH. */
+export function assertAabSigned(path: string, rel = path, verify: (p: string) => { ok: boolean; out: string } | null = jarsignerVerify): void {
+  const why = aabUnsignedReason(path, verify, path);
+  if (why) throw new Error(`${rel} is not signed (${why}): Google Play would refuse it (403 "All uploaded bundles must be signed"). Sign it with the upload key: set ANDROID_KEYSTORE / ANDROID_KEYSTORE_PASSWORD / ANDROID_KEY_ALIAS / ANDROID_KEY_PASSWORD for storebound play build (they are passed to Gradle as -Pandroid.injected.signing.*), or give the project's release signingConfig a keystore in CI. Nothing was uploaded.`);
+}
+
+function jarsignerVerify(path: string): { ok: boolean; out: string } | null {
+  if (!rt.which('jarsigner')) return null;
+  const r = rt.spawnSync(['jarsigner', '-verify', path], { timeout: 120_000 });
+  const out = `${r.stdout.toString()}${r.stderr.toString()}`;
+  // jarsigner exits 0 for an unsigned jar too and prints "jar is unsigned"; only a signature verdict counts, a zip it
+  // cannot read (bad CRC, ...) is inconclusive and left to the META-INF entry check
+  return { ok: /jar verified/i.test(out) || !/jar is unsigned|did not verify|SecurityException|invalid SHA/i.test(out), out };
+}
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index 3ff1171..2f0c3a6 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -173,6 +173,14 @@ export function ipaInfo(ipa: string | Buffer): IpaInfo {
     xcode: str('DTXcode'), sdkName: str('DTSDKName'), platformVersion: str('DTPlatformVersion') };
 }
 
+/** The refusal text when the IPA's CFBundleShortVersionString is not the version being prepared (an Xcode project
+ *  that ignores the version storebound or the release script intends exports MARKETING_VERSION 1.0), else null.
+ *  `wanted` is the --version of apple build or the editable App Store version; `source` names where it comes from. Pure. */
+export function ipaVersionProblem(ipaVersion: string, wanted: string | null | undefined, source: string): string | null {
+  if (!wanted || ipaVersion === wanted) return null;
+  return `the IPA has version ${ipaVersion} (CFBundleShortVersionString), but ${source} is ${wanted}: the Xcode project sets MARKETING_VERSION itself, so the build lands in the wrong version train. Make the project read the intended version (xcodebuild MARKETING_VERSION=${wanted}, or set it in the project / Info.plist), build again, or pass --allow-version-mismatch to go on anyway.`;
+}
+
 /** End states of an App Store Connect build upload (BuildUploadState); processing is polled by apple testflight wait. */
 export const UPLOAD_DONE = new Set(['COMPLETE', 'FAILED']);
 
diff --git a/cli/play/build.ts b/cli/play/build.ts
index 91d12c9..936f40e 100644
--- a/cli/play/build.ts
+++ b/cli/play/build.ts
@@ -8,7 +8,8 @@
 // unless --version-code is given, runs `gradlew :app:bundleRelease` (Flutter: flutter build appbundle) and copies the
 // AAB to <out>/<package>-<versionCode>.aab, checked by reading its manifest. Signing: the upload key from env or
 // .storebound/credentials.json (ANDROID_KEYSTORE, ANDROID_KEYSTORE_PASSWORD, ANDROID_KEY_ALIAS, ANDROID_KEY_PASSWORD)
-// goes to Gradle as injected signing properties through the environment, never on the command line; without it the
+// goes to Gradle as injected signing properties (-Pandroid.injected.signing.* and the ORG_GRADLE_PROJECT_ environment; the
+// passwords are masked in every printed command); without it the
 // project's own signingConfig signs. Local only: Play is only read (version codes).
 // Before Gradle runs, the app module's build file must read -PversionCode / -PversionName in defaultConfig (a literal
 // or an env var keeps the AAB at that value; android.injected.version.* does not override it for bundleRelease): a
@@ -20,16 +21,25 @@ import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { pump } from '../lib/runner';
-import { aabInfo, appBuildFile, findBundles, gradleArgs, pickGradle, signingEnv, versionSourceIssues, versionSourceMessage } from '../lib/gradle';
+import { aabInfo, appBuildFile, assertAabSigned, maskArgs, findBundles, gradleArgs, pickGradle, signingEnv, versionSourceIssues, versionSourceMessage } from '../lib/gradle';
 import { nextVersionCode } from '../lib/release';
 import { capacitorProject, webStep } from '../lib/web-assets';
 import { androidSdk, androidSdkEnv, androidSdkMissing } from '../lib/tools';
 import { playClient } from './client';
+import { readPlayCopy, refusePlayNotes } from './listing';
 import { usedVersionCodes } from './next-version-code';
 import * as rt from '../lib/rt';
 
 const TAG = 'build';
 
+/** Release notes that name iOS / App Store are refused at release time: refuse them before the long build. A missing
+ *  listing file is not a build problem. */
+export function notesGuard(ctx: Ctx): void {
+  let notes: { language: string; text: string }[];
+  try { notes = readPlayCopy(ctx).filter(c => c.whatsNew).map(c => ({ language: c.lang, text: c.whatsNew })); } catch { return; }
+  refusePlayNotes(ctx, notes, 'play build (release notes of the listing)');
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
@@ -60,7 +70,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const versionName = a.get('version-name');
   const signing = androidSigning(root);
   const hasWrapper = existsSync(join(t.dir, process.platform === 'win32' ? 'gradlew.bat' : 'gradlew'));
-  const argv = gradleArgs(t, { versionCode: code || undefined, versionName, flavor, hasWrapper });
+  const argv = gradleArgs(t, { versionCode: code || undefined, versionName, flavor, hasWrapper, signing });
   const cwd = t.framework === 'flutter' ? root : t.dir;
   // the SDK as Android Studio finds it (ANDROID_HOME is often unset in non-interactive shells and local.properties is
   // gitignored): handed to Gradle through the environment, local.properties is never written
@@ -70,7 +80,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const versionWarnings = buildFile ? versionSourceIssues(buildFile).map(i => versionSourceMessage(i, relative(root, buildFile), t.framework)) : [];
   const plan = { framework: t.framework, dir: relative(root, t.dir) || '.', module: t.module, task: t.framework === 'flutter' ? 'flutter build appbundle' : t.task,
     versionCode: code || null, versionName: versionName ?? null, signing: signing ? `upload key from ${process.env.ANDROID_KEYSTORE ? 'env' : '.storebound/credentials.json'} (alias ${signing.keyAlias})` : 'the project\'s own signingConfig',
-    androidSdk: sdk.path ? `${sdk.path} (${sdk.source})` : null, command: argv.join(' '), out: relative(root, out) || '.', notes: t.notes, versionWarnings };
+    androidSdk: sdk.path ? `${sdk.path} (${sdk.source})` : null, command: maskArgs(argv).join(' '), out: relative(root, out) || '.', notes: t.notes, versionWarnings };
   const webOpts = { config, root, cap, store: 'play' as const, tag: TAG, noPrebuild: a.has('no-prebuild'), allowStale: a.has('allow-stale-web') };
   if (dry) {
     const web = await webStep({ ...webOpts, dry: true, quiet: json });
@@ -85,6 +95,7 @@ export async function run(ctx: Ctx): Promise<void> {
     return;
   }
   if (!sdk.path) throw new Error(androidSdkMissing(sdk));
+  notesGuard(ctx);
   log(TAG, `Android SDK: ${sdk.path} (from ${sdk.source})`);
   const web = await webStep({ ...webOpts, dry: false });
   if (signing && !existsSync(signing.storeFile)) throw new Error('ANDROID_KEYSTORE: the keystore file does not exist');
@@ -108,6 +119,8 @@ export async function run(ctx: Ctx): Promise<void> {
   const aab = findBundles([join(t.dir, t.module, 'build', 'outputs', 'bundle'), join(root, 'build', 'app', 'outputs', 'bundle')], started - 1000)[0];
   if (!aab) throw new Error(`build finished but no new .aab under ${relative(root, t.dir)}/${t.module}/build/outputs/bundle`);
   const info = aabInfo(aab);
+  // Play refuses an unsigned bundle (403) only at upload: stop here, naming the fix
+  assertAabSigned(aab, relative(root, aab));
   if (info.packageName !== pkg) warn(TAG, `the AAB's package is ${info.packageName}, the config says ${pkg}`);
   // the hard stop: an AAB with another versionCode than planned is never copied to the output folder
   if (code && info.versionCode !== code) {
diff --git a/cli/play/release.ts b/cli/play/release.ts
index 7d4f204..71797f3 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -12,7 +12,7 @@ import { createHash } from 'node:crypto';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, warn, printJson } from '../lib/log';
-import { aabInfo } from '../lib/gradle';
+import { aabInfo, assertAabSigned } from '../lib/gradle';
 import { playTargetSdkProblem, targetSdkFile } from '../lib/store-minimums';
 import { playClient } from './client';
 import { usedVersionCodes } from './next-version-code';
@@ -52,6 +52,7 @@ export async function run(ctx: Ctx): Promise<void> {
   if (live && !a.has('dry') && !(await confirm(ctx, `Release to PRODUCTION as "${live.status}" (public once Google approves)?`))) return;
 
   if (aab) {
+    assertAabSigned(aab);
     const sdkWhy = playTargetSdkProblem(aabInfo(aab).targetSdk, { where: targetSdkFile(root) });
     if (sdkWhy) throw new Error(`${aab}: not released, ${sdkWhy}`);
   }
diff --git a/cli/play/upload.ts b/cli/play/upload.ts
index 0ded9c1..dd630df 100644
--- a/cli/play/upload.ts
+++ b/cli/play/upload.ts
@@ -9,7 +9,7 @@ import { readdirSync, readFileSync, statSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
-import { aabInfo } from '../lib/gradle';
+import { aabInfo, assertAabSigned } from '../lib/gradle';
 import { playTargetSdkProblem, targetSdkFile } from '../lib/store-minimums';
 import { done, log, printJson } from '../lib/log';
 import { nextVersionCode } from '../lib/release';
@@ -43,6 +43,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // Play refuses bundles below its current target API level (cli/lib/store-minimums.ts): stop before any network call
   const sdkWhy = playTargetSdkProblem(info.targetSdk, { where: targetSdkFile(root) });
   if (sdkWhy) throw new Error(`${relative(root, aab)}: not uploaded, ${sdkWhy}`);
+  assertAabSigned(aab, relative(root, aab));
   const size = statSync(aab).size;
   const dry = a.has('dry');
   const json = a.has('json');
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 9cf63c9..6454049 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1283,3 +1283,32 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Do:** read the "read ... ago" stamp and refresh; for Play keep your own history; compare with the console if in doubt.
 - **Guard:** `settleStoreReads` (`cli/lib/reviews.ts`) throws when every asked store failed (`tests/reviews.test.ts`);
   the Reviews tab states the Play 7-day window and that Apple's API can lag.
+
+## 107. `play build` in CI gave an unsigned AAB, Play said 403 "All uploaded bundles must be signed"
+
+- **What happens:** the project's `app/build.gradle` signs only from a local `keystore.properties` (absent in CI). The
+  upload key in `ANDROID_KEYSTORE` / `ANDROID_KEYSTORE_PASSWORD` / `ANDROID_KEY_ALIAS` / `ANDROID_KEY_PASSWORD` reached
+  Gradle only through `ORG_GRADLE_PROJECT_*`, which that build file does not use; the AAB came out unsigned and the
+  refusal came only at upload.
+- **Do:** set the four variables (env or `.storebound/credentials.json`); `play build` now also passes them as
+  `-Pandroid.injected.signing.store.file|store.password|key.alias|key.password`. The printed command and the plan show
+  the passwords as `***`.
+- **Guard:** `signingArgs` / `maskArgs` (`cli/lib/gradle.ts`); right after the build, and before `play upload` /
+  `play release` of a local AAB, `assertAabSigned` checks the META-INF `*.SF` + `*.RSA|DSA|EC` entries (and runs
+  `jarsigner -verify` when a JDK is on PATH) and fails with the fix, before any upload (`tests/build-sign.test.ts`).
+
+## 108. `apple build` exported MARKETING_VERSION 1.0, not the version being released
+
+- **What happens:** the Xcode project ignored the version the release script intended (an env var the project read), so
+  the IPA's `CFBundleShortVersionString` was 1.0 and the build went into the wrong version train.
+- **Do:** make the project read the intended version (`xcodebuild MARKETING_VERSION=x.y.z`, or set it in the project),
+  build again. `--allow-version-mismatch` goes on anyway.
+- **Guard:** `ipaVersionProblem` (`cli/lib/xcode.ts`): `apple build --version X` refuses an IPA with another version, and
+  `apple upload` compares the IPA with the editable App Store version before any upload (`tests/build-sign.test.ts`).
+
+## 109. Play release notes naming iOS / iPhone / App Store were refused only at release time
+
+- **What happens:** the Play Metadata policy rule (pitfall 77) stopped `play release` after the long build.
+- **Do:** write the notes without other platforms or stores; `[play]` / `[apple]` tags split shared notes.
+- **Guard:** `storebound check` reports the "What's new" of every Play language, `play build` refuses before Gradle runs
+  (`notesGuard`), `play upload` / `play release` refuse before any edit (`refusePlayNotes`).
diff --git a/tests/build-fixtures.ts b/tests/build-fixtures.ts
index 9e7704f..5dd08c0 100644
--- a/tests/build-fixtures.ts
+++ b/tests/build-fixtures.ts
@@ -57,8 +57,9 @@ export const makeIpa = (infoPlist: Buffer | string, app = 'Example.app'): Buffer
 ]);
 
 /** An AAB with an aapt2 proto manifest. */
-export const makeAab = (pkg: string, versionCode: number, versionName = '1.0.0'): Buffer => makeZip([
+export const makeAab = (pkg: string, versionCode: number, versionName = '1.0.0', signed = true): Buffer => makeZip([
   { name: 'BundleConfig.pb', data: Buffer.from([8, 1]) },
   { name: 'base/manifest/AndroidManifest.xml', data: encodeProtoManifest([{ name: 'manifest', attrs: { package: pkg, versionCode: String(versionCode), versionName } }, { name: 'uses-sdk', attrs: { minSdkVersion: '24', targetSdkVersion: '36' } }]) },
   { name: 'base/dex/classes.dex', data: Buffer.alloc(512, 1) },
+  ...(signed ? [{ name: 'META-INF/UPLOAD.SF', data: 'sf' }, { name: 'META-INF/UPLOAD.RSA', data: 'rsa' }] : []),
 ]);
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index a397a99..33c7bb7 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -3,17 +3,18 @@ import { createPrivateKey, createPublicKey, verify } from 'node:crypto';
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, utimesSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
+import { notesGuard } from '../cli/play/build';
 import { installedProfiles } from '../cli/apple/build';
 import { androidSigning, ascKeyFile, credentialFileIssues } from '../cli/lib/credentials';
 import { buildCsr, csrContent, newSigningKey, spkiOfKey } from '../cli/lib/csr';
-import { aabInfo, appBuildFile, findBundles, gradleArgs, pickGradle, signingEnv, validatePlayBuild, versionSourceIssues, versionSourceMessage } from '../cli/lib/gradle';
+import { aabInfo, aabSignedEntries, appBuildFile, assertAabSigned, findBundles, gradleArgs, maskArgs, pickGradle, signingEnv, validatePlayBuild, versionSourceIssues, versionSourceMessage } from '../cli/lib/gradle';
 import { parseBinaryPlist, parseMobileprovision, parsePlist, parseXmlPlist, toXmlPlist } from '../cli/lib/plist';
 import {
   type ApiCert, type ApiProfile, certSha1, certSpki, certificateReq, explainCertError, exportOptions, parseIdentities, pickCertificate, planCapabilities,
   planProfile, profileDirs, validateSigning,
 } from '../cli/lib/signing';
 import { validateConfig } from '../cli/lib/config';
-import { altoolArgs, archiveArgs, buildUploadReqs, exportArgs, flutterConfigArgs, ipaInfo, pickXcode, scanXcode, showCmd, uploadProblems, type XcodeScan } from '../cli/lib/xcode';
+import { altoolArgs, archiveArgs, buildUploadReqs, exportArgs, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd, uploadProblems, type XcodeScan } from '../cli/lib/xcode';
 import { zipEntries, zipRead } from '../cli/lib/zip';
 import { makeAab, makeIpa, makeZip } from './build-fixtures';
 import { TOOLS } from '../cli/mcp-tools';
@@ -524,3 +525,46 @@ describe('storebound aab (CI reads the version code without uploading)', () => {
     expect(JSON.parse(r.stdout.toString())).toMatchObject({ packageName: 'com.example.game', versionCode: 4321, versionName: '3.1.0' });
   });
 });
+
+describe('signed AAB, masked signing, IPA version train, release notes', () => {
+  const s = { storeFile: '/k/upload.jks', storePassword: 'pw-store', keyAlias: 'upload', keyPassword: 'pw-key' };
+  const t = { framework: 'native' as const, dir: '/p', module: 'app', task: ':app:bundleRelease', notes: [] };
+  test('gradleArgs passes the injected signing properties, maskArgs hides the passwords', () => {
+    const argv = gradleArgs(t, { hasWrapper: true, signing: s }, 'linux');
+    expect(argv).toContain('-Pandroid.injected.signing.store.file=/k/upload.jks');
+    expect(argv).toContain('-Pandroid.injected.signing.store.password=pw-store');
+    expect(argv).toContain('-Pandroid.injected.signing.key.alias=upload');
+    expect(argv).toContain('-Pandroid.injected.signing.key.password=pw-key');
+    const shown = maskArgs(argv).join(' ');
+    expect(shown).not.toContain('pw-store');
+    expect(shown).not.toContain('pw-key');
+    expect(shown).toContain('store.password=***');
+    expect(shown).toContain('key.alias=upload');
+    expect(gradleArgs(t, { hasWrapper: true }, 'linux').join(' ')).not.toContain('signing');
+  });
+  test('an unsigned AAB is refused, a signed one passes', () => {
+    const unsigned = join(tmp, 'unsigned.aab'), signed = join(tmp, 'signed.aab');
+    writeFileSync(unsigned, makeAab('com.example.app', 3, '1.0.0', false));
+    writeFileSync(signed, makeZip([{ name: 'BundleConfig.pb', data: 'x' }, { name: 'META-INF/UPLOAD.SF', data: 'x' }, { name: 'META-INF/UPLOAD.RSA', data: 'x' }]));
+    expect(aabSignedEntries(unsigned)).toBe(false);
+    expect(() => assertAabSigned(unsigned, 'unsigned.aab', () => null)).toThrow('not signed');
+    expect(() => assertAabSigned(unsigned, 'unsigned.aab', () => null)).toThrow('ANDROID_KEYSTORE');
+    expect(() => assertAabSigned(signed, 'signed.aab', () => null)).not.toThrow();
+    expect(() => assertAabSigned(signed, 'signed.aab', () => ({ ok: false, out: 'jar is unsigned.' }))).toThrow('jarsigner -verify');
+    expect(() => assertAabSigned(signed, 'signed.aab', () => ({ ok: true, out: 'jar verified.' }))).not.toThrow();
+  });
+  test('the IPA version must be the version train being prepared', () => {
+    expect(ipaVersionProblem('1.0', '1.4.0', 'the editable App Store version')).toContain('--allow-version-mismatch');
+    expect(ipaVersionProblem('1.0', '1.4.0', 'x')).toContain('MARKETING_VERSION=1.4.0');
+    expect(ipaVersionProblem('1.4.0', '1.4.0', 'x')).toBeNull();
+    expect(ipaVersionProblem('1.0', undefined, 'x')).toBeNull();
+  });
+  test('play build refuses release notes that name iOS before the build', () => {
+    const d = dir('notes');
+    writeFileSync(join(d, 'listing.md'), '## English\n<!-- play: en-US -->\n### Title\n```\nApp\n```\n### Short\n```\nShort text\n```\n### Full\n```\nFull text\n```\n### What\'s new\n```\nNow also on iPhone\n```\n');
+    const ctx = { args: { list: () => [] }, loaded: { root: d, resolve: (p: string) => join(d, p), config: { app: { name: 'App' }, play: { listing: 'listing.md' } } } } as never;
+    expect(() => notesGuard(ctx)).toThrow('iPhone');
+    writeFileSync(join(d, 'listing.md'), readFileSync(join(d, 'listing.md'), 'utf8').replace('Now also on iPhone', 'Faster start'));
+    expect(() => notesGuard(ctx)).not.toThrow();
+  });
+});

From e4ebbb825da37b91b02e49a62756c687c82e11f5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:51:07 +0800
Subject: [PATCH 058/255] play build: signing passwords only through the child
 environment, never argv

---
 CHANGELOG.md                   | 2 +-
 cli/lib/gradle.ts              | 5 ++---
 cli/play/build.ts              | 4 ++--
 skills/store-pitfalls/SKILL.md | 5 ++---
 tests/build-sign.test.ts       | 9 ++++++---
 5 files changed, 13 insertions(+), 12 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 545fbc3..9e9512a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,7 +6,7 @@
 - `storebound apps ignore|unignore [--store apple|play]`: hide dormant apps, or one store side of an app, from watch, reads and the desktop (MCP apps_ignore / apps_unignore).
 - Reviews: a store read that fails is an error, not an empty "no new reviews" list; the Reviews tab notes Apple API lag and Play's 7-day window (pitfall 106).
 - Desktop: live store thumbnails load right away, also in a hidden window.
-- `play build` passes the upload key (ANDROID_KEYSTORE, ...) to Gradle as `-Pandroid.injected.signing.*` too (passwords masked in the printed command), so a build file that signs only from a local keystore.properties no longer gives an unsigned AAB in CI (pitfall 107).
+- `play build` passes the upload key (ANDROID_KEYSTORE, ...) to Gradle as injected signing properties (store file and alias as `-P` arguments, the passwords only through `ORG_GRADLE_PROJECT_*` environment variables, never on argv), so a build file that signs only from a local keystore.properties no longer gives an unsigned AAB in CI (pitfall 107).
 - `play build`, `play upload` and `play release` of a local AAB verify it is signed (META-INF entries, `jarsigner -verify` when a JDK exists) and fail with the fix before any upload.
 - `apple build --version` and `apple upload` refuse an IPA whose CFBundleShortVersionString is not the intended / editable App Store version; `--allow-version-mismatch` overrides (pitfall 108).
 - Play release notes that name iOS, iPhone or the App Store are caught by `storebound check` and `play build`, not only at release time (pitfall 109).
diff --git a/cli/lib/gradle.ts b/cli/lib/gradle.ts
index e71ecac..9d868bc 100644
--- a/cli/lib/gradle.ts
+++ b/cli/lib/gradle.ts
@@ -70,11 +70,10 @@ export function gradleArgs(t: GradleTarget, o: { versionCode?: number; versionNa
 
 /** The upload key as Gradle project properties (-Pandroid.injected.signing.*). A project whose build file signs only
  *  from a local keystore.properties (absent in CI) gives an unsigned AAB otherwise (Play: 403 "All uploaded bundles
- *  must be signed"). The passwords are on this argv: print it only through maskArgs. */
+ *  must be signed"). Only the file and alias go on argv; the passwords travel through signingEnv (ORG_GRADLE_PROJECT_*), never argv. */
 export function signingArgs(s: AndroidSigning | null): string[] {
   if (!s) return [];
-  return [`-Pandroid.injected.signing.store.file=${s.storeFile}`, `-Pandroid.injected.signing.store.password=${s.storePassword}`,
-    `-Pandroid.injected.signing.key.alias=${s.keyAlias}`, `-Pandroid.injected.signing.key.password=${s.keyPassword}`];
+  return [`-Pandroid.injected.signing.store.file=${s.storeFile}`, `-Pandroid.injected.signing.key.alias=${s.keyAlias}`];
 }
 
 /** An argv for logs and plans: the signing passwords are replaced by ***. Pure. */
diff --git a/cli/play/build.ts b/cli/play/build.ts
index 936f40e..8fd4295 100644
--- a/cli/play/build.ts
+++ b/cli/play/build.ts
@@ -8,8 +8,8 @@
 // unless --version-code is given, runs `gradlew :app:bundleRelease` (Flutter: flutter build appbundle) and copies the
 // AAB to <out>/<package>-<versionCode>.aab, checked by reading its manifest. Signing: the upload key from env or
 // .storebound/credentials.json (ANDROID_KEYSTORE, ANDROID_KEYSTORE_PASSWORD, ANDROID_KEY_ALIAS, ANDROID_KEY_PASSWORD)
-// goes to Gradle as injected signing properties (-Pandroid.injected.signing.* and the ORG_GRADLE_PROJECT_ environment; the
-// passwords are masked in every printed command); without it the
+// goes to Gradle as injected signing properties (store file and alias as -P arguments, the passwords only through
+// ORG_GRADLE_PROJECT_* in the child environment, never argv); without it the
 // project's own signingConfig signs. Local only: Play is only read (version codes).
 // Before Gradle runs, the app module's build file must read -PversionCode / -PversionName in defaultConfig (a literal
 // or an env var keeps the AAB at that value; android.injected.version.* does not override it for bundleRelease): a
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 6454049..0ee01c1 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1290,9 +1290,8 @@ that fails without the fix (see CONTRIBUTING.md).
   upload key in `ANDROID_KEYSTORE` / `ANDROID_KEYSTORE_PASSWORD` / `ANDROID_KEY_ALIAS` / `ANDROID_KEY_PASSWORD` reached
   Gradle only through `ORG_GRADLE_PROJECT_*`, which that build file does not use; the AAB came out unsigned and the
   refusal came only at upload.
-- **Do:** set the four variables (env or `.storebound/credentials.json`); `play build` now also passes them as
-  `-Pandroid.injected.signing.store.file|store.password|key.alias|key.password`. The printed command and the plan show
-  the passwords as `***`.
+- **Do:** set the four variables (env or `.storebound/credentials.json`); `play build` now also passes `-Pandroid.injected.signing.store.file` and `.key.alias`; the
+  passwords go only through `ORG_GRADLE_PROJECT_android.injected.signing.*.password` in the child environment, never argv.
 - **Guard:** `signingArgs` / `maskArgs` (`cli/lib/gradle.ts`); right after the build, and before `play upload` /
   `play release` of a local AAB, `assertAabSigned` checks the META-INF `*.SF` + `*.RSA|DSA|EC` entries (and runs
   `jarsigner -verify` when a JDK is on PATH) and fails with the fix, before any upload (`tests/build-sign.test.ts`).
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 33c7bb7..9e3faa8 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -532,13 +532,16 @@ describe('signed AAB, masked signing, IPA version train, release notes', () => {
   test('gradleArgs passes the injected signing properties, maskArgs hides the passwords', () => {
     const argv = gradleArgs(t, { hasWrapper: true, signing: s }, 'linux');
     expect(argv).toContain('-Pandroid.injected.signing.store.file=/k/upload.jks');
-    expect(argv).toContain('-Pandroid.injected.signing.store.password=pw-store');
     expect(argv).toContain('-Pandroid.injected.signing.key.alias=upload');
-    expect(argv).toContain('-Pandroid.injected.signing.key.password=pw-key');
+    expect(argv.join(' ')).not.toContain('pw-store');
+    expect(argv.join(' ')).not.toContain('pw-key');
+    expect(argv.join(' ')).not.toContain('password');
+    const env = signingEnv(s);
+    expect(env['ORG_GRADLE_PROJECT_android.injected.signing.store.password']).toBe('pw-store');
+    expect(env['ORG_GRADLE_PROJECT_android.injected.signing.key.password']).toBe('pw-key');
     const shown = maskArgs(argv).join(' ');
     expect(shown).not.toContain('pw-store');
     expect(shown).not.toContain('pw-key');
-    expect(shown).toContain('store.password=***');
     expect(shown).toContain('key.alias=upload');
     expect(gradleArgs(t, { hasWrapper: true }, 'linux').join(' ')).not.toContain('signing');
   });

From 64a2073bc4fc97307083ade44b6c7bb62524bcb5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:52:03 +0800
Subject: [PATCH 059/255] CHANGELOG: move the signing and version-train notes
 to Unreleased

---
 CHANGELOG.md | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 71e552e..707d7f2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,15 +3,17 @@
 
 ## Unreleased
 
+- Desktop: the app hero no longer shows a cropped second copy of the app icon.
+- `play build` passes the upload key (ANDROID_KEYSTORE, ...) to Gradle as injected signing properties (store file and alias as `-P` arguments, the passwords only through `ORG_GRADLE_PROJECT_*` environment variables, never on argv), so a build file that signs only from a local keystore.properties no longer gives an unsigned AAB in CI (pitfall 107).
+- `play build`, `play upload` and `play release` of a local AAB verify it is signed (META-INF entries, `jarsigner -verify` when a JDK exists) and fail with the fix before any upload.
+- `apple build --version` and `apple upload` refuse an IPA whose CFBundleShortVersionString is not the intended / editable App Store version; `--allow-version-mismatch` overrides (pitfall 108).
+- Play release notes that name iOS, iPhone or the App Store are caught by `storebound check` and `play build`, not only at release time (pitfall 109).
+
 ## 0.8.37 · 2026-10-22
 
 - `storebound apps ignore|unignore [--store apple|play]`: hide dormant apps, or one store side of an app, from watch, reads and the desktop (MCP apps_ignore / apps_unignore).
 - Reviews: a store read that fails is an error, not an empty "no new reviews" list; the Reviews tab notes Apple API lag and Play's 7-day window (pitfall 106).
 - Desktop: live store thumbnails load right away, also in a hidden window.
-- `play build` passes the upload key (ANDROID_KEYSTORE, ...) to Gradle as injected signing properties (store file and alias as `-P` arguments, the passwords only through `ORG_GRADLE_PROJECT_*` environment variables, never on argv), so a build file that signs only from a local keystore.properties no longer gives an unsigned AAB in CI (pitfall 107).
-- `play build`, `play upload` and `play release` of a local AAB verify it is signed (META-INF entries, `jarsigner -verify` when a JDK exists) and fail with the fix before any upload.
-- `apple build --version` and `apple upload` refuse an IPA whose CFBundleShortVersionString is not the intended / editable App Store version; `--allow-version-mismatch` overrides (pitfall 108).
-- Play release notes that name iOS, iPhone or the App Store are caught by `storebound check` and `play build`, not only at release time (pitfall 109).
 
 ## 0.8.36 · 2026-10-22
 

From 26d85bafd0f1f4d094c33b476d3eb7dc4c0aacd1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 07:53:23 +0700
Subject: [PATCH 060/255] storebound 0.8.38: version in package.json and every
 copy, CHANGELOG 0.8.38 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 59db318..0e63496 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.37",
+      "version": "0.8.38",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 69ffee4..d9d513d 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.37",
+  "version": "0.8.38",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 3fb1992..b4de710 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.37",
+  "version": "0.8.38",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 707d7f2..f2d2f43 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.38 · 2026-10-23
+
 - Desktop: the app hero no longer shows a cropped second copy of the app icon.
 - `play build` passes the upload key (ANDROID_KEYSTORE, ...) to Gradle as injected signing properties (store file and alias as `-P` arguments, the passwords only through `ORG_GRADLE_PROJECT_*` environment variables, never on argv), so a build file that signs only from a local keystore.properties no longer gives an unsigned AAB in CI (pitfall 107).
 - `play build`, `play upload` and `play release` of a local AAB verify it is signed (META-INF entries, `jarsigner -verify` when a JDK exists) and fail with the fix before any upload.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 7960c5d..f8b4be2 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.37",
+  "version": "0.8.38",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ba76c7b..56ca0f6 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.37"
+version = "0.8.38"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1ae4bfd..ea7ce1e 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.37"
+version = "0.8.38"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 35bab79..4b6a468 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.37",
+  "version": "0.8.38",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 395e927..1720339 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.37",
+  "version": "0.8.38",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index cd4688a..f398bde 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.37",
+  "version": "0.8.38",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 944b24fe59e4615be33a18c1b78a5a954c958da1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:59:13 +0800
Subject: [PATCH 061/255] Desktop: release builds on Windows turn off the
 WebView2 browser context menu and accelerator keys

---
 apps/desktop/src-tauri/Cargo.lock |  2 ++
 apps/desktop/src-tauri/Cargo.toml |  5 +++++
 apps/desktop/src-tauri/src/lib.rs | 23 +++++++++++++++++++++++
 3 files changed, 30 insertions(+)

diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index d844e1a..e22d3e3 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4124,6 +4124,8 @@ dependencies = [
  "tempfile",
  "tokio",
  "url",
+ "webview2-com",
+ "windows-core",
  "zip",
 ]
 
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index d1ee576..c547580 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -49,6 +49,11 @@ reqwest = { version = "0.13", default-features = false, features = ["rustls-no-p
 rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
 zip = { version = "4", default-features = false, features = ["deflate-flate2-zlib-rs"] }
 
+# Release builds turn off WebView2's browser context menu and accelerator keys (Back, Refresh, Print, Save as).
+[target.'cfg(windows)'.dependencies]
+webview2-com = "0.39"
+windows-core = "0.62"
+
 [dev-dependencies]
 tempfile = "3"
 
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index bac93cd..f6581b7 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -232,6 +232,10 @@ pub fn run() {
         .plugin(tauri_plugin_updater::Builder::new().build())
         .plugin(tauri_plugin_process::init())
         .setup(|app| {
+            #[cfg(all(windows, not(debug_assertions)))]
+            if let Some(w) = app.get_webview_window(policy::MAIN) {
+                harden_webview(&w);
+            }
             let data_dir = app.path().app_data_dir()?;
             logs::init(&data_dir, app.path().home_dir().ok().map(|h| h.to_string_lossy().to_string()));
             logs::panic_hook();
@@ -381,3 +385,22 @@ pub fn run() {
         _ => {}
     });
 }
+
+/// Release builds on Windows: no WebView2 browser context menu (Back, Refresh, Save as, Print, More tools) and no
+/// browser accelerator keys (Ctrl+R, Ctrl+P, F5, Ctrl+Shift+I...). The page draws its own menus; dev keeps devtools.
+#[cfg(all(windows, not(debug_assertions)))]
+fn harden_webview(w: &tauri::WebviewWindow) {
+    use webview2_com::Microsoft::Web::WebView2::Win32::ICoreWebView2Settings3;
+    use windows_core::Interface;
+    let r = w.with_webview(|wv| unsafe {
+        let Ok(core) = wv.controller().CoreWebView2() else { return };
+        let Ok(s) = core.Settings() else { return };
+        let _ = s.SetAreDefaultContextMenusEnabled(false);
+        if let Ok(s3) = s.cast::<ICoreWebView2Settings3>() {
+            let _ = s3.SetAreBrowserAcceleratorKeysEnabled(false);
+        }
+    });
+    if let Err(e) = r {
+        logs::host("warn", &format!("webview menus not turned off: {e}"));
+    }
+}

From dece83c3e8043ae3d714b9141efbf6644eafe01c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:59:14 +0800
Subject: [PATCH 062/255] Desktop: custom context menus everywhere, never the
 browser's menu

One ContextMenu in the design system (keyboard, type-ahead, submenus, check items,
disabled reasons, Shift+F10 / Menu key, viewport placement, light and dark). The
native menu is prevented globally; text fields keep Cut / Copy / Paste / Select all.
Menus on sidebar and portfolio apps, app hero, releases, store art, live art,
reviews, checks, editor fields, catalog, prices, accounts, app folders, ignored.
---
 apps/desktop/src/App.tsx                   |   5 +-
 apps/desktop/src/design.css                |  24 ++
 apps/desktop/src/i18n/en.ts                |  53 +++++
 apps/desktop/src/i18n/tr.ts                |  53 +++++
 apps/desktop/src/main.tsx                  |   3 +-
 apps/desktop/src/screens/Accounts.tsx      |  18 +-
 apps/desktop/src/screens/AppFolders.tsx    |  23 +-
 apps/desktop/src/screens/AppView.tsx       |   6 +
 apps/desktop/src/screens/Ignored.tsx       |   7 +-
 apps/desktop/src/screens/Portfolio.tsx     |  12 +-
 apps/desktop/src/screens/tabs/Art.tsx      |  19 +-
 apps/desktop/src/screens/tabs/Catalog.tsx  |  17 +-
 apps/desktop/src/screens/tabs/Checks.tsx   |  30 ++-
 apps/desktop/src/screens/tabs/LiveArt.tsx  |   8 +-
 apps/desktop/src/screens/tabs/Prices.tsx   |  15 +-
 apps/desktop/src/screens/tabs/Releases.tsx |  12 +-
 apps/desktop/src/screens/tabs/Reviews.tsx  |  15 +-
 apps/desktop/src/ui/ContextMenu.tsx        | 252 +++++++++++++++++++++
 apps/desktop/src/ui/Editor.tsx             |   9 +-
 apps/desktop/src/ui/app-menu.ts            |  87 +++++++
 apps/desktop/src/ui/ds.tsx                 |   8 +-
 apps/desktop/src/ui/menu-logic.ts          |  98 ++++++++
 apps/desktop/tests/context-menu.test.ts    |  93 ++++++++
 23 files changed, 839 insertions(+), 28 deletions(-)
 create mode 100644 apps/desktop/src/ui/ContextMenu.tsx
 create mode 100644 apps/desktop/src/ui/app-menu.ts
 create mode 100644 apps/desktop/src/ui/menu-logic.ts
 create mode 100644 apps/desktop/tests/context-menu.test.ts

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 3c53ec8..d0adbed 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -24,6 +24,8 @@ import { type Command, Palette } from './ui/Palette';
 import { ExportMenu, useExportItems, useRunExport } from './ui/Exports';
 import { ErrorBoundary } from './ui/ErrorBoundary';
 import { Toasts } from './ui/Toasts';
+import { useContextMenu } from './ui/ContextMenu';
+import { appMenu } from './ui/app-menu';
 import { worstTone } from './ui/ds';
 import { attention } from './lib/model';
 
@@ -149,6 +151,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const groups = d.studios.length ? groupByStudio(listed.map(a => ({ app: a })), d.studios) : [{ studio: null as string | null, rows: listed.map(a => ({ app: a })) }];
   const ignoredCount = d.apps.filter(a => a.ignored).length + d.overrides.ignored.filter(i => i.startsWith('account:')).length;
 
+  const menu = useContextMenu();
   const appItem = (a: UnifiedApp) => {
     const e = d.statusFor(a);
     const missing = !!a.project?.missing;
@@ -156,7 +159,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
     const bad = missing ? 1 : (e?.errors.length ?? 0) + (e?.check?.problems.length ?? 0);
     return (
       <div role="listitem" key={a.key}>
-        <button className={`nav nav-app${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
+        <button {...menu(() => appMenu(a, d, nav, { showIgnored }))} className={`nav nav-app${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
           onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' })}>
           <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{tone && <span className={`ds-sdot ${tone}`} role="img" aria-label={tone === 'bad' ? t('pf.blocker') : tone === 'warn' ? t('pf.warning') : t('pf.note')} />}</span>
           <span className="grow">{a.name}</span>
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index 0074881..ca264d2 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -196,3 +196,27 @@
 /* ---------- reduced motion ---------- */
 @media (prefers-reduced-motion: reduce) { .ds-hero-shots img, .ds-stat.clickable, .ds-scrim, .ds-dialog { transform: none !important; transition: none; animation: none; } }
 :root[data-motion="reduce"] .ds-hero-shots img, :root[data-motion="reduce"] .ds-stat.clickable, :root[data-motion="reduce"] .ds-scrim, :root[data-motion="reduce"] .ds-dialog { transform: none !important; transition: none; animation: none; }
+
+/* ---------- context menu (ui/ContextMenu.tsx) ---------- */
+.ds-menu { position: fixed; z-index: 1000; min-width: 200px; max-width: 320px; max-height: calc(100vh - 16px); overflow: auto; padding: 5px;
+  border-radius: 12px; background: color-mix(in srgb, var(--ds-raised) 94%, transparent); border: 1px solid var(--ds-stroke-strong);
+  box-shadow: 0 1px 0 rgba(255, 255, 255, .05) inset, 0 14px 38px -10px rgba(10, 14, 30, .38), 0 3px 10px -4px rgba(10, 14, 30, .22);
+  -webkit-backdrop-filter: blur(18px) saturate(1.4); backdrop-filter: blur(18px) saturate(1.4);
+  font-size: var(--ds-t-body); color: var(--ink); outline: none; user-select: none;
+  opacity: 0; transform: scale(.97); transform-origin: top left; transition: opacity 120ms var(--ease), transform 120ms var(--ease); }
+.ds-menu.in { opacity: 1; transform: none; }
+.ds-menu-item { display: flex; align-items: center; gap: 9px; height: 30px; padding: 0 10px 0 8px; border-radius: 7px; cursor: default; white-space: nowrap; }
+.ds-menu-item.active { background: var(--accent-soft); color: var(--ink); }
+.ds-menu-item.active .ds-menu-ic { color: var(--accent); }
+.ds-menu-item.danger { color: var(--bad-solid); }
+.ds-menu-item.danger.active { background: var(--bad-bg); color: var(--bad-ink); }
+.ds-menu-item.danger .ds-menu-ic, .ds-menu-item.danger.active .ds-menu-ic { color: inherit; }
+.ds-menu-item.disabled { opacity: .45; }
+.ds-menu-ic { width: 16px; height: 16px; flex: none; display: grid; place-items: center; color: var(--muted); }
+.ds-menu-ic svg { width: 15px; height: 15px; }
+.ds-menu-l { flex: 1; overflow: hidden; text-overflow: ellipsis; }
+.ds-menu-k { max-width: 150px; overflow: hidden; text-overflow: ellipsis; margin-left: 18px; color: var(--faint); font-size: var(--ds-t-micro); letter-spacing: .02em; font-variant-numeric: tabular-nums; }
+.ds-menu-sub { width: 12px; height: 12px; color: var(--faint); margin-left: 10px; }
+.ds-menu-sep { height: 1px; margin: 5px 6px; background: var(--ds-stroke); }
+@media (prefers-reduced-motion: reduce) { .ds-menu { transition: none; transform: none; } }
+:root[data-motion="reduce"] .ds-menu { transition: none; transform: none; }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index ad3c9d9..4d829c5 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2019,4 +2019,57 @@ export const en = {
   'v2rel.tfInGroups': "in {count} groups",
   'v2rel.tfSplit': "{internal} internal · {external} external",
   'v2rel.tfUsable': "Ready to test",
+
+  // context menus (ui/ContextMenu.tsx)
+  'cm.cut': "Cut",
+  'cm.copy': "Copy",
+  'cm.paste': "Paste",
+  'cm.selectAll': "Select all",
+  'cm.copied': "Copied",
+  'cm.open': "Open",
+  'cm.openTab': "Open tab",
+  'cm.openConsole': "Open in console",
+  'cm.openIn': "Open in {place}",
+  'cm.openFolder': "Open folder",
+  'cm.folderFailed': "Could not open the folder",
+  'cm.copyName': "Name",
+  'cm.copyBundleId': "Bundle id",
+  'cm.copyPackage': "Package name",
+  'cm.copyAscId': "App Store Connect app id",
+  'cm.copyPath': "Copy path",
+  'cm.refreshReads': "Read again from the stores",
+  'cm.refreshing': "Reading {name} again",
+  'cm.ignoredNoReads': "Ignored apps are not read",
+  'cm.ignore': "Ignore",
+  'cm.showIgnored': "Show ignored apps",
+  'cm.copyVersion': "Copy version",
+  'cm.copyBuild': "Copy build",
+  'cm.copyVersionCode': "Copy version code",
+  'cm.preview': "Preview",
+  'cm.openFile': "Open file",
+  'cm.reveal': "Show in folder",
+  'cm.readAgain': "Read again",
+  'cm.reading': "Reading…",
+  'cm.openDraft': "Show reply draft",
+  'cm.copyReview': "Copy review",
+  'cm.copyReply': "Copy the published reply",
+  'cm.copyDraft': "Copy the draft",
+  'cm.revealEvidence': "Show the file",
+  'cm.copyTitle': "Copy title",
+  'cm.copyFix': "Copy the fix",
+  'cm.copySkill': "Copy skill name",
+  'cm.copyEvidence': "Copy evidence lines",
+  'cm.copyCode': "Copy check code",
+  'cm.copyValue': "Copy value",
+  'cm.notChanged': "Not changed",
+  'cm.copyProductId': "Copy product id",
+  'cm.showPrices': "Show prices",
+  'cm.copyRow': "Copy row",
+  'cm.showPerRegion': "Show per region",
+  'cm.copyPriceOf': "Copy {store} price",
+  'cm.copyRegion': "Copy region code",
+  'cm.busy': "Another action is running",
+  'cm.copyPrincipal': "Service account / key",
+  'cm.copyProfile': "Profile name",
+  'cm.openAccounts': "Open Studios & accounts",
 } as const;
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index d557b71..9afc7ad 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2021,4 +2021,57 @@ export const tr: Record<keyof typeof en, string> = {
   'v2rel.tfInGroups': "{count} grupta",
   'v2rel.tfSplit': "{internal} dahili · {external} harici",
   'v2rel.tfUsable': "Teste hazır",
+
+  // context menus (ui/ContextMenu.tsx)
+  'cm.cut': "Kes",
+  'cm.copy': "Kopyala",
+  'cm.paste': "Yapıştır",
+  'cm.selectAll': "Tümünü seç",
+  'cm.copied': "Kopyalandı",
+  'cm.open': "Aç",
+  'cm.openTab': "Sekme aç",
+  'cm.openConsole': "Konsolda aç",
+  'cm.openIn': "{place} içinde aç",
+  'cm.openFolder': "Klasörü aç",
+  'cm.folderFailed': "Klasör açılamadı",
+  'cm.copyName': "Ad",
+  'cm.copyBundleId': "Bundle id",
+  'cm.copyPackage': "Paket adı",
+  'cm.copyAscId': "App Store Connect uygulama kimliği",
+  'cm.copyPath': "Yolu kopyala",
+  'cm.refreshReads': "Mağazalardan yeniden oku",
+  'cm.refreshing': "{name} yeniden okunuyor",
+  'cm.ignoredNoReads': "Yok sayılan uygulamalar okunmaz",
+  'cm.ignore': "Yok say",
+  'cm.showIgnored': "Yok sayılanları göster",
+  'cm.copyVersion': "Sürümü kopyala",
+  'cm.copyBuild': "Build'i kopyala",
+  'cm.copyVersionCode': "Sürüm kodunu kopyala",
+  'cm.preview': "Önizle",
+  'cm.openFile': "Dosyayı aç",
+  'cm.reveal': "Klasörde göster",
+  'cm.readAgain': "Yeniden oku",
+  'cm.reading': "Okunuyor…",
+  'cm.openDraft': "Yanıt taslağını göster",
+  'cm.copyReview': "Yorumu kopyala",
+  'cm.copyReply': "Yayındaki yanıtı kopyala",
+  'cm.copyDraft': "Taslağı kopyala",
+  'cm.revealEvidence': "Dosyayı göster",
+  'cm.copyTitle': "Başlığı kopyala",
+  'cm.copyFix': "Düzeltmeyi kopyala",
+  'cm.copySkill': "Skill adını kopyala",
+  'cm.copyEvidence': "Kanıt satırlarını kopyala",
+  'cm.copyCode': "Kontrol kodunu kopyala",
+  'cm.copyValue': "Değeri kopyala",
+  'cm.notChanged': "Değişmedi",
+  'cm.copyProductId': "Ürün kimliğini kopyala",
+  'cm.showPrices': "Fiyatları göster",
+  'cm.copyRow': "Satırı kopyala",
+  'cm.showPerRegion': "Bölge bölge göster",
+  'cm.copyPriceOf': "{store} fiyatını kopyala",
+  'cm.copyRegion': "Bölge kodunu kopyala",
+  'cm.busy': "Başka bir işlem sürüyor",
+  'cm.copyPrincipal': "Hizmet hesabı / anahtar",
+  'cm.copyProfile': "Profil adı",
+  'cm.openAccounts': "Stüdyolar ve hesapları aç",
 };
diff --git a/apps/desktop/src/main.tsx b/apps/desktop/src/main.tsx
index 82e74a2..697bcb7 100644
--- a/apps/desktop/src/main.tsx
+++ b/apps/desktop/src/main.tsx
@@ -8,6 +8,7 @@ import { PrefsContext } from './prefs-ctx';
 import { installGlobalHandlers, report } from './lib/crash';
 import { DataProvider } from './store';
 import { ErrorBoundary } from './ui/ErrorBoundary';
+import { ContextMenuProvider } from './ui/ContextMenu';
 import { ExportProvider } from './ui/Exports';
 import './styles.css';
 import './design.css';
@@ -36,7 +37,7 @@ function Root() {
     update({ ...prefs, theme: dark ? 'light' : 'dark' });
   }, [prefs, update]);
   // a language change re-renders the whole tree in the new language
-  return <PrefsContext.Provider value={{ prefs, update }}><DataProvider><ExportProvider><App key={lang} onTheme={onTheme} /></ExportProvider></DataProvider></PrefsContext.Provider>;
+  return <PrefsContext.Provider value={{ prefs, update }}><DataProvider><ExportProvider><ContextMenuProvider><App key={lang} onTheme={onTheme} /></ContextMenuProvider></ExportProvider></DataProvider></PrefsContext.Provider>;
 }
 
 installGlobalHandlers();
diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
index bd79022..6d4a244 100644
--- a/apps/desktop/src/screens/Accounts.tsx
+++ b/apps/desktop/src/screens/Accounts.tsx
@@ -3,6 +3,8 @@
 // issuer id, .p8). Keys live in the machine's credential profiles (~/.storebound, shared with the CLI);
 // the app keeps a label, the studio and the profile name only. Per account: a health
 // check (key works / permission missing / revoked, with the fix) and "Import apps" (every app the key can see).
+import { useContextMenu } from '../ui/ContextMenu';
+import { copyToast } from '../ui/app-menu';
 import { type FormEvent, useEffect, useState } from 'react';
 import { type Account, type AccountCheck, api, errorText, STUDIO_COLORS, type Studio, type StudioColor } from '../api';
 import { type Key, t } from '../i18n';
@@ -54,8 +56,22 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
   };
   const save = (e: FormEvent) => { e.preventDefault(); run(`ed-${a.id}`, async () => { await api.updateAccount(a.id, label, studio || null); await d.reload(); setEdit(false); }); };
   const check = h?.check;
+  const cm = useContextMenu();
   return (
-    <div className={`acct${ignored ? ' is-ignored' : ''}`}>
+    <div className={`acct${ignored ? ' is-ignored' : ''}`} {...cm(() => [
+      { label: t('acct.test'), icon: 'shield', disabled: busy ? t('cm.busy') : false, onSelect: () => run(`ck-${a.id}`, () => d.checkAccount(a.id)) },
+      { label: t('acct.import'), icon: 'download', disabled: busy || d.importBusy ? t('cm.busy') : false, onSelect: () => run(`im-${a.id}`, () => d.importApps(a.id)) },
+      { label: t('acct.edit'), icon: 'edit', onSelect: () => setEdit(true) },
+      'sep',
+      { label: t('cm.copy'), icon: 'copy', submenu: [
+        { label: t('cm.copyName'), icon: 'text', onSelect: () => copyToast(d, a.label) },
+        check?.principal && { label: t('cm.copyPrincipal'), icon: 'key', shortcut: check.principal, onSelect: () => copyToast(d, check.principal!) },
+        a.profile && { label: t('cm.copyProfile'), icon: 'folder', shortcut: a.profile, onSelect: () => copyToast(d, a.profile!) },
+      ] },
+      'sep',
+      { label: ignored ? t('acct.unignore') : t('acct.ignore'), icon: ignored ? 'eye' : 'eyeOff', onSelect: () => { void d.updateOverrides(o => withIgnored(o, [`account:${a.id}`], !ignored)); } },
+      { label: t('accounts.remove'), icon: 'trash', danger: true, disabled: busy ? t('cm.busy') : false, onSelect: () => run(`rm-${a.id}`, async () => { await api.removeAccount(a.id); await d.reload(); }) },
+    ])}>
       <div className="acct-row">
         <span className={`acct-glyph ${a.kind}`}><StoreGlyph store={a.kind === 'play' ? 'android' : 'ios'} /></span>
         <div className="acct-main">
diff --git a/apps/desktop/src/screens/AppFolders.tsx b/apps/desktop/src/screens/AppFolders.tsx
index b5df3b4..bbfd2fe 100644
--- a/apps/desktop/src/screens/AppFolders.tsx
+++ b/apps/desktop/src/screens/AppFolders.tsx
@@ -1,5 +1,7 @@
 // Workspace: app folders (one storebound.config.ts per app), which store accounts each app uses, and starting a new
 // folder from the templates (`storebound init` with a profile, confirmed in a native dialog).
+import { type MenuInput, useContextMenu } from '../ui/ContextMenu';
+import { copyToast } from '../ui/app-menu';
 import { failureText } from '../lib/results';
 import { type ReactNode, useEffect, useRef, useState } from 'react';
 import { api, errorText, newJob, onProgress, type Project, type ToolResult, type WriteOutcome } from '../api';
@@ -19,9 +21,10 @@ type Profile = 'app' | 'game' | 'subscription-app';
 interface Run { title: string; project: string; job: string; lines: string[]; result?: ToolResult; outcome?: WriteOutcome; error?: string }
 
 /** Folder card wrapper carrying the app's tint (hooks cannot run inside the list map). */
-function Tinted({ src, name, children }: { src: string | null | undefined; name: string; children: ReactNode }) {
+function Tinted({ src, name, children, menu }: { src: string | null | undefined; name: string; children: ReactNode; menu: () => MenuInput }) {
   const hue = useTint(src, name);
-  return <div className="li fold-card" style={tintStyle(hue)}>{children}</div>;
+  const cm = useContextMenu();
+  return <div className="li fold-card" style={tintStyle(hue)} {...cm(menu)}>{children}</div>;
 }
 
 function LocateButton({ project }: { project: Project }) {
@@ -100,7 +103,21 @@ export function AppFolders() {
               const e = d.statusOf(p);
               const st = p.missing ? { text: t('folder.missingShort'), tone: 'bad' as const } : checkState(e);
               return (
-                <Tinted key={p.id} src={d.icons[p.id]} name={e?.app?.name ?? p.name}>
+                <Tinted key={p.id} src={d.icons[p.id]} name={e?.app?.name ?? p.name} menu={() => [
+                  !p.missing && { label: t('folders.open'), icon: 'arrowRight', onSelect: () => nav.go({ screen: 'app', appId: p.id, tab: 'releases' }) },
+                  !p.missing && { label: t('folders.reveal'), icon: 'folder', onSelect: () => { api.reveal(p.id).catch(x => setError(errorText(x))); } },
+                  'sep',
+                  !p.missing && { label: t('folders.check'), icon: 'shield', disabled: busy ? t('cm.busy') : false, onSelect: () => check(p) },
+                  !p.missing && { label: t('folders.gallery'), icon: 'image', disabled: busy ? t('cm.busy') : false, onSelect: () => gallery(p) },
+                  'sep',
+                  { label: t('cm.copy'), icon: 'copy', submenu: [
+                    { label: t('cm.copyPath'), icon: 'folder', onSelect: () => copyToast(d, p.path) },
+                    e?.app?.platforms.ios?.bundleId && { label: t('cm.copyBundleId'), icon: 'tag', shortcut: e.app.platforms.ios.bundleId, onSelect: () => copyToast(d, e.app!.platforms.ios!.bundleId) },
+                    e?.app?.platforms.android?.packageName && { label: t('cm.copyPackage'), icon: 'tag', shortcut: e.app.platforms.android.packageName, onSelect: () => copyToast(d, e.app!.platforms.android!.packageName) },
+                  ] },
+                  'sep',
+                  { label: t('folders.remove', { name: p.name }), icon: 'trash', danger: true, disabled: busy ? t('cm.busy') : false, onSelect: () => remove(p) },
+                ]}>
                   <AppIcon name={p.name} src={d.icons[p.id]} className="fold-icon" />
                   <div className="li-main">
                     <span className="row" style={{ gap: 8 }}><span className="li-title">{e?.app?.name ?? p.name}</span><StatusPill tone={st.tone}>{st.text}</StatusPill></span>
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index b1ac370..8debb3a 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -1,6 +1,9 @@
 // One app across both stores: header (icon, studio, ids, store state, pairing), then the tabs. A store-only app (no
 // app folder) shows its store reads (releases, health, reviews, TestFlight) read-only, with "Link a folder" and
 // "Start an app folder here" to make it a full app.
+import { useContextMenu } from '../ui/ContextMenu';
+import { appMenu } from '../ui/app-menu';
+import { useShowIgnored } from '../lib/show-ignored';
 import { useState } from 'react';
 import { api, errorText } from '../api';
 import { type Key, t } from '../i18n';
@@ -122,10 +125,13 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
   const iosNow = l ? storeNow(all, 'ios').now : null, androidNow = l ? storeNow(all, 'android').now : null;
   const att = attention(app.key, app.name, e, l);
   const open = (url: string) => { api.openExternal(url).catch(() => {}); };
+  const cm = useContextMenu();
+  const [showIgnored] = useShowIgnored();
 
   return (
     <div className="page ds-app">
       <Hero name={name} icon={d.iconFor(app)} projectId={app.project && !app.project.missing ? app.project.id : null}
+        {...cm(() => appMenu(app, d, nav, { showIgnored }))}
         badges={<>
           {e?.summary?.profile && app.project && <Chip tone="outline">{t(`profile.${e.summary.profile}` as 'profile.app')}</Chip>}
           {!app.project && <StoreOnlyTag />}
diff --git a/apps/desktop/src/screens/Ignored.tsx b/apps/desktop/src/screens/Ignored.tsx
index 3a3ac39..4c7ac27 100644
--- a/apps/desktop/src/screens/Ignored.tsx
+++ b/apps/desktop/src/screens/Ignored.tsx
@@ -1,5 +1,7 @@
 // Ignored: apps and whole store accounts left out of the portfolio, the sidebar and store reads. Restore brings them
 // back (nothing on the stores changes either way).
+import { useContextMenu } from '../ui/ContextMenu';
+import { appMenu } from '../ui/app-menu';
 import { t } from '../i18n';
 import { withIgnored, withSideIgnored } from '../lib/identity';
 import { useNav } from '../nav';
@@ -16,6 +18,7 @@ export function Ignored() {
   const accounts = d.accounts.filter(a => d.overrides.ignored.includes(`account:${a.id}`));
   const restoreAll = () => d.updateOverrides(o => ({ ...o, ignored: [] }));
   const empty = !apps.length && !accounts.length;
+  const cm = useContextMenu();
   return (
     <div className="page scr-ignored">
       <PageHeader icon="eyeOff" eyebrow={t('v2cfg.workspace')} title={t('nav.ignored')} subtitle={t('ignored.lead')} actions={!empty ? <><button className="btn" onClick={restoreAll}><Icon name="eye" />{t('ignored.restoreAll')}</button></> : undefined} />
@@ -27,7 +30,7 @@ export function Ignored() {
                 {apps.map(a => {
                   const s = d.studios.find(x => x.id === a.studio) ?? null;
                   return (
-                    <div className="li" key={a.key}>
+                    <div className="li" key={a.key} {...cm(() => appMenu(a, d, nav, { showIgnored: true }))}>
                       <AppIcon name={a.name} src={d.iconFor(a)} />
                       <div className="li-main">
                         <span className="li-title row" style={{ gap: 8 }}>{a.name}{!a.project && <StoreOnlyTag />}</span>
@@ -49,7 +52,7 @@ export function Ignored() {
             {accounts.length ? (
               <div className="list">
                 {accounts.map(a => (
-                  <div className="li" key={a.id}>
+                  <div className="li" key={a.id} {...cm(() => [{ label: t('ignored.restore'), icon: 'eye', onSelect: () => { void d.updateOverrides(o => withIgnored(o, [`account:${a.id}`], false)); } }, { label: t('cm.openAccounts'), icon: 'key', onSelect: () => nav.go({ screen: 'accounts' }) }])}>
                     <span className="li-icon tone-bg-neutral"><StoreGlyph store={a.kind === 'play' ? 'android' : 'ios'} /></span>
                     <div className="li-main"><span className="li-title">{a.label}</span><span className="li-sub">{a.kind === 'play' ? t('acct.kindPlay') : t('acct.kindApple')} · {t('ignored.accountApps', { count: d.storeApps[a.id]?.value.apps.length ?? 0 })}</span></div>
                     <button className="btn btn-sm" onClick={() => d.updateOverrides(o => withIgnored(o, [`account:${a.id}`], false))}><Icon name="eye" />{t('ignored.restore')}</button>
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 14ff770..1f6781f 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -12,6 +12,8 @@ import { useShowIgnored } from '../lib/show-ignored';
 import { filterSort, groupByStudio, type ListRow, type SortBy, studioCounts, type UnifiedApp, withIgnored } from '../lib/identity';
 import { type Attention, attention, healthSeries, type HealthSnapshot, isError, laneOf, PLAY_THRESHOLDS, STAGES, storeNow, type Tone } from '../lib/model';
 import { type AppTab, useNav } from '../nav';
+import { useContextMenu } from '../ui/ContextMenu';
+import { appMenu } from '../ui/app-menu';
 import type { IconName } from '../ui/icons';
 import { useData } from '../store';
 import { exportName, portfolioCsv } from '../lib/exports';
@@ -144,8 +146,11 @@ function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null;
   const name = e?.app?.name && app.project ? e.app.name : app.name;
   const go = (tab: AppTab) => nav.go({ screen: 'app', appId: app.key, tab });
   const style = tintStyle(hue);
+  const d = useData();
+  const menu = useContextMenu();
+  const [showIgnored] = useShowIgnored();
   return (
-    <article className="pf-card" style={style} aria-label={name}>
+    <article className="pf-card" style={style} aria-label={name} {...menu(() => appMenu(app, d, nav, { showIgnored }))}>
       <div className={`pf-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
         {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} loading="lazy" />) : <AppIcon name={app.name} src={icon} className="pf-hero-icon" />}
       </div>
@@ -285,6 +290,7 @@ export function Portfolio() {
   const visible = useMemo(() => d.apps.filter(a => !a.ignored), [d.apps]);
   const ignoredApps = useMemo(() => d.apps.filter(a => a.ignored), [d.apps]);
   const [showIgnored, setShowIgnored] = useShowIgnored();
+  const menu = useContextMenu();
   const [round, setRound] = useState(0);
   const [rechecking, setRechecking] = useState(false);
   const health = useCachedHealth(visible.map(a => a.target), round);
@@ -349,7 +355,7 @@ export function Portfolio() {
     const ios = !!(app.ios || e?.app?.platforms.ios), android = !!(app.android || e?.app?.platforms.android);
     const sub = app.ios?.app.bundleId ?? e?.app?.platforms.ios?.bundleId ?? app.android?.app.id ?? e?.app?.platforms.android?.packageName ?? '';
     return (
-      <tr key={app.key} className="clickable" onClick={() => open(app)}>
+      <tr key={app.key} className="clickable" onClick={() => open(app)} {...menu(() => appMenu(app, d, nav, { showIgnored }))}>
         <td>
           <div className="cell-app">
             <AppIcon name={app.name} src={d.iconFor(app)} />
@@ -435,7 +441,7 @@ export function Portfolio() {
           <button className="link" aria-pressed={showIgnored} onClick={() => setShowIgnored(!showIgnored)}>{showIgnored ? t('ignored.hide', { count: ignoredApps.length }) : t('ignored.show', { count: ignoredApps.length })}</button>
           {showIgnored && ignoredApps.map(a => (
             <span key={a.key} className="row muted" style={{ gap: 4 }}>
-              <button className="link" onClick={() => open(a)}>{a.name}</button>
+              <button className="link" onClick={() => open(a)} {...menu(() => appMenu(a, d, nav, { showIgnored }))}>{a.name}</button>
               <button className="btn btn-sm btn-ghost btn-icon" onClick={() => d.updateOverrides(o => withIgnored(o, a.ignoreKeys, false))} aria-label={t('ignored.restore')} title={t('ignored.restore')}><Icon name="eye" /></button>
             </span>
           ))}
diff --git a/apps/desktop/src/screens/tabs/Art.tsx b/apps/desktop/src/screens/tabs/Art.tsx
index 43517fc..412dbac 100644
--- a/apps/desktop/src/screens/tabs/Art.tsx
+++ b/apps/desktop/src/screens/tabs/Art.tsx
@@ -2,6 +2,8 @@
 // size (`shots gallery --json`, offline), store check issues outlined. Images load one by one as they scroll into view
 // (`project.render`, a data: URL each: the window loads no files itself). Re-render (dry run, dialog, real run), write
 // the review page, open it or the folder.
+import { type MenuInput, useContextMenu } from '../../ui/ContextMenu';
+import { copyToast } from '../../ui/app-menu';
 import '../../styles/art.css';
 import { type KeyboardEvent, useCallback, useEffect, useMemo, useRef, useState } from 'react';
 import { api, errorText, type Project, type RenderImage, type RendersResult, type RenderTile, type ToolResult } from '../../api';
@@ -41,7 +43,8 @@ function loadRender(projectId: string, file: string, stamp: string): Promise<str
   });
 }
 
-function Thumb({ projectId, tile, stamp, onOpen }: { projectId: string; tile: RenderTile; stamp: string; onOpen: () => void }) {
+function Thumb({ projectId, tile, stamp, onOpen, menu }: { projectId: string; tile: RenderTile; stamp: string; onOpen: () => void; menu: () => MenuInput }) {
+  const cm = useContextMenu();
   const ref = useRef<HTMLButtonElement>(null);
   const file = tile.kind === 'video' ? tile.poster : tile.src;
   const [src, setSrc] = useState<string | null | undefined>(file ? cache.get(`${projectId}|${file}|${stamp}`) : null);
@@ -61,7 +64,7 @@ function Thumb({ projectId, tile, stamp, onOpen }: { projectId: string; tile: Re
   const lvl = tile.issues.some(i => i.level === 'error') ? 'err' : tile.issues.length ? 'warn' : '';
   const shape = tile.h > tile.w ? 'portrait' : 'landscape';
   return (
-    <figure className={`art-tile ${lvl} ${shape}`} style={{ ['--ar' as string]: `${tile.w} / ${tile.h}` }}>
+    <figure {...cm(menu)} className={`art-tile ${lvl} ${shape}`} style={{ ['--ar' as string]: `${tile.w} / ${tile.h}` }}>
       <button ref={ref} className="art-pic" onClick={onOpen} aria-label={t('art.open', { name: tile.name })}>
         {src ? <img src={src} alt="" draggable={false} /> : src === null && file ? <span className="art-ph"><Icon name="image" />{t('art.tooBig')}</span> : <span className="art-ph">{tile.kind === 'video' ? <Icon name="play" /> : <span className="sk sk-block" />}</span>}
         {tile.kind === 'video' && <span className="art-play"><Icon name="play" /></span>}
@@ -170,7 +173,17 @@ export function ArtTab({ project }: { project: Project }) {
                 <h3><span>{row.label}</span><code>{lg}/{row.size}</code><Chip tone="outline" dot={false}>{row.store === 'apple' ? 'App Store' : 'Google Play'}</Chip>{row.issues.length > 0 && <StatusPill tone={row.issues.some(i => i.level === 'error') ? 'bad' : 'warn'}>{t('v2lst.issues', { count: row.issues.length })}</StatusPill>}<span className="muted small">{t('art.count', { count: row.tiles.length })}</span></h3>
                 {row.issues.length > 0 && <ul className="note-list art-issues">{row.issues.map((i, k) => <li key={k} className={i.level}>{i.msg}</li>)}</ul>}
                 <div className="art-tiles" style={{ ['--tw' as string]: row.size === 'feature' || /landscape/.test(row.size) ? '300px' : row.tiles[0] && row.tiles[0].w > row.tiles[0].h ? '260px' : '170px' }}>
-                  {row.tiles.map((tile, i) => <Thumb key={tile.src} projectId={project.id} tile={tile} stamp={stamp} onOpen={() => setOpen({ tiles: row.tiles, i })} />)}
+                  {row.tiles.map((tile, i) => <Thumb key={tile.src} projectId={project.id} tile={tile} stamp={stamp} onOpen={() => setOpen({ tiles: row.tiles, i })} menu={() => {
+                    const path = `${dir}/${tile.src}`;
+                    return [
+                      { label: t('cm.preview'), icon: 'eye', shortcut: 'Enter', onSelect: () => setOpen({ tiles: row.tiles, i }) },
+                      { label: t('cm.openFile'), icon: 'external', onSelect: () => reveal(path, true) },
+                      { label: t('cm.reveal'), icon: 'folder', onSelect: () => reveal(path) },
+                      { label: t('cm.copyPath'), icon: 'copy', onSelect: () => copyToast(d, path) },
+                      'sep',
+                      tile.kind === 'image' && { label: t('art.replace'), icon: 'upload', onSelect: () => { void replace(tile); } },
+                    ];
+                  }} />)}
                 </div>
               </section>
             ))}
diff --git a/apps/desktop/src/screens/tabs/Catalog.tsx b/apps/desktop/src/screens/tabs/Catalog.tsx
index 290d34a..27b38cf 100644
--- a/apps/desktop/src/screens/tabs/Catalog.tsx
+++ b/apps/desktop/src/screens/tabs/Catalog.tsx
@@ -1,5 +1,7 @@
 // Catalog: products and subscriptions defined once in the config against both stores (catalog diff): a parity
 // matrix (present, mismatched, missing, not sold there, not read), and price gaps between the stores per region.
+import { useContextMenu } from '../../ui/ContextMenu';
+import { copyToast, projectConsoles } from '../../ui/app-menu';
 import '../../styles/catalog.css';
 import type { Project } from '../../api';
 import { type Key, t } from '../../i18n';
@@ -71,6 +73,9 @@ export function CatalogTab({ project }: { project: Project }) {
   const d = useData();
   const e = d.statusOf(project);
   const diff = useRead<CatalogDiff>(project.id, 'catalog.diff', { network: true, title: t('tab.catalog') });
+  const cm = useContextMenu();
+  const nav = useNav();
+  const plat = e?.app?.platforms;
   const s = e?.summary ?? null;
   const name = s?.name ?? project.name;
   useExports('catalog', [
@@ -101,7 +106,12 @@ export function CatalogTab({ project }: { project: Project }) {
           {rows.map(r => {
             const worst = [r.ios.state, r.android.state].includes('error') ? 'bad' : [r.ios.state, r.android.state].includes('warn') || r.kind === 'extra' ? 'warn' : 'ok';
             return (
-              <li key={r.id} className={`cat-card t-${worst}`} data-item={r.id}>
+              <li key={r.id} className={`cat-card t-${worst}`} data-item={r.id} {...cm(() => [
+                { label: t('cm.copyProductId'), icon: 'copy', shortcut: r.id, onSelect: () => copyToast(d, r.id) },
+                { label: t('cm.showPrices'), icon: 'coins', onSelect: () => nav.go({ screen: 'app', appId: project.id, tab: 'prices' }) },
+                'sep',
+                ...projectConsoles(d, plat?.ios?.ascAppId, !!plat?.ios, !!plat?.android),
+              ])}>
                 <div className="cat-card-h">
                   <span className="cat-ic" aria-hidden="true"><Icon name={r.kind === 'subscription' ? 'refresh' : 'tag'} /></span>
                   <div className="cat-names">
@@ -127,7 +137,10 @@ export function CatalogTab({ project }: { project: Project }) {
             <thead><tr><th>{t('col.item')}</th><th>{t('col.region')}</th><th className="right">App Store</th><th className="right">Google Play</th><th className="right">{t('col.diff')}</th></tr></thead>
             <tbody>
               {gaps.slice(0, 12).map((g, i) => (
-                <tr key={i}>
+                <tr key={i} {...cm(() => [
+                  { label: t('cm.copyProductId'), icon: 'copy', shortcut: g.id, onSelect: () => copyToast(d, g.id) },
+                  { label: t('cm.copyRow'), icon: 'clipboard', onSelect: () => copyToast(d, [g.id, g.region, `${g.apple} ${g.currency}`, `${g.play} ${g.currency}`, `${g.diffPct} %`].join('\t')) },
+                ])}>
                   <td className="mono-id">{g.id}</td><td>{g.region}</td>
                   <td className="right num">{num(g.apple, 2)} {g.currency}</td><td className="right num">{num(g.play, 2)} {g.currency}</td>
                   <td className="right"><Chip tone={g.diffPct > 25 ? 'bad' : 'warn'}>{`${num(g.diffPct, 1)} %`}</Chip></td>
diff --git a/apps/desktop/src/screens/tabs/Checks.tsx b/apps/desktop/src/screens/tabs/Checks.tsx
index 6dc0ad1..c962290 100644
--- a/apps/desktop/src/screens/tabs/Checks.tsx
+++ b/apps/desktop/src/screens/tabs/Checks.tsx
@@ -1,5 +1,7 @@
 // Checks: the offline rejection-risk scan of the project files (`scan`, every time), the offline config check and
 // the read-only store readiness report (`validate`, on demand) with its ordered blockers and fix hints.
+import { type MenuInput, type MenuItem, useContextMenu } from '../../ui/ContextMenu';
+import { copyToast, openUrl } from '../../ui/app-menu';
 import type { Project } from '../../api';
 import { t } from '../../i18n';
 import { ago } from '../../lib/format';
@@ -26,6 +28,8 @@ const LEVEL: Record<Finding['level'], ['bad' | 'warn' | 'ok', 'alertCircle' | 'a
 /** Fix methods the window runs from a finding (cli/lib/fix-actions.ts FIX_METHODS): local config writes and store
  *  text pushes, each a dry run, the native dialog showing it, then the real run. Anything else gets no button. */
 export const FIX_METHODS = new Set(['scan.write', 'play.listing', 'apple.listing', 'apple.review_details']);
+/** The context-menu twin of FixButton (same write: dry run, then confirm). */
+const fixItem = (w: ReturnType<typeof useWrite>, action: FixAction, what: string): MenuItem => ({ label: t('checks.fix'), icon: 'wand', onSelect: () => { void w.run({ method: action.method, args: action.args, title: t('checks.fixing', { what }), done: t('checks.fixed') }); } });
 export const fixable = (a: FixAction | undefined): a is FixAction => !!a && FIX_METHODS.has(a.method) && !!a.args && typeof a.args === 'object';
 
 /** The Fix button of one finding: its action as a confirm-gated write. */
@@ -40,9 +44,10 @@ const SEV: Record<ScanSeverity, ['bad' | 'warn' | 'info', 'alertCircle' | 'alert
 const SEV_ORDER: ScanSeverity[] = ['blocker', 'high', 'medium', 'low'];
 
 /** One check as a card: tone icon tile, title, detail lines, the fix, and its actions on the right. */
-function CheckCard({ tone, icon, title, children, actions, tags }: { tone: 'bad' | 'warn' | 'ok' | 'info'; icon: IconName; title: ReactNode; children?: ReactNode; actions?: ReactNode; tags?: ReactNode }) {
+function CheckCard({ tone, icon, title, children, actions, tags, menu }: { tone: 'bad' | 'warn' | 'ok' | 'info'; icon: IconName; title: ReactNode; children?: ReactNode; actions?: ReactNode; tags?: ReactNode; menu?: () => MenuInput }) {
+  const cm = useContextMenu();
   return (
-    <div className={`ck-card tone-${tone}`}>
+    <div className={`ck-card tone-${tone}`} {...(menu ? cm(menu) : {})}>
       <span className={`ck-ic tone-bg-${tone}`}><Icon name={icon} /></span>
       <div className="ck-main">
         <div className="ck-title">{title}</div>
@@ -61,6 +66,7 @@ function CheckCard({ tone, icon, title, children, actions, tags }: { tone: 'bad'
 function ScanCard({ project }: { project: Project }) {
   const s = useRead<ScanResult>(project.id, 'scan', { network: false, title: t('checks.scan') });
   const w = useWrite(project.id);
+  const d = useData();
   const findings = Array.isArray(s.data?.findings) ? s.data!.findings : [];
   // Fix with AI: is claude installed (else Copy for AI); one run at a time
   const [claude, setClaude] = useState<boolean | null>(null);
@@ -86,6 +92,18 @@ function ScanCard({ project }: { project: Project }) {
     const ev = Array.isArray(f.evidence) ? f.evidence : [];
     return (
       <CheckCard key={k} tone={tone} icon={icon} title={<><span className="ck-gl">{f.guideline}</span>{f.title}</>}
+        menu={() => [
+          !f.accepted && fixable(f.action) && fixItem(w, f.action, f.title),
+          !f.accepted && f.url && /^https:\/\//.test(f.url) && { label: t('link.open'), icon: 'external', onSelect: () => openUrl(d, f.url!) },
+          ev[0] && { label: t('cm.revealEvidence'), icon: 'folder', shortcut: `${ev[0].file.split('/').pop()}:${ev[0].line}`, onSelect: () => { api.reveal(project.id, ev[0]!.file).catch(() => {}); } },
+          'sep',
+          { label: t('cm.copy'), icon: 'copy', submenu: [
+            { label: t('cm.copyTitle'), icon: 'text', onSelect: () => copyToast(d, `${f.guideline} ${f.title}`) },
+            f.fix && { label: t('cm.copyFix'), icon: 'wand', onSelect: () => copyToast(d, f.fix) },
+            f.skill && { label: t('cm.copySkill'), icon: 'sparkle', shortcut: f.skill, onSelect: () => copyToast(d, f.skill) },
+            ev.length > 0 && { label: t('cm.copyEvidence'), icon: 'clipboard', onSelect: () => copyToast(d, ev.map(e => `${e.file}:${e.line}${e.text ? ` ${e.text}` : ''}`).join('\n')) },
+          ] },
+        ]}
         tags={<><StatusPill tone={f.accepted ? 'ok' : tone}>{t(f.accepted ? 'checks.sev.accepted' : `checks.sev.${f.severity}` as Parameters<typeof t>[0])}</StatusPill><span className="ck-store"><StoreGlyph store={f.store === 'apple' ? 'ios' : 'android'} className="ic13" />{f.store === 'apple' ? 'App Store' : 'Google Play'}</span></>}
         actions={<>{!f.accepted && <OpenLink url={f.url} />}{!f.accepted && fixable(f.action) && <FixButton action={f.action} what={f.title} w={w} />}</>}>
         {ev.slice(0, 2).map((e, j) => <span className="ck-sub selectable" key={j}><code>{e.file}:{e.line}</code>{e.text ? ` ${e.text}` : ''}</span>)}
@@ -182,6 +200,14 @@ export function ChecksTab({ project }: { project: Project }) {
     const [tone, icon] = LEVEL[f.level];
     return (
       <CheckCard key={`${f.level}${i}`} tone={tone} icon={icon} title={f.msg}
+        menu={() => [
+          f.level !== 'ok' && fixable(f.action) && fixItem(w, f.action, f.msg),
+          f.url && /^https:\/\//.test(f.url) && { label: t('link.open'), icon: 'external', onSelect: () => openUrl(d, f.url!) },
+          'sep',
+          { label: t('cm.copyTitle'), icon: 'copy', onSelect: () => copyToast(d, f.msg) },
+          f.fix && { label: t('cm.copyFix'), icon: 'wand', onSelect: () => copyToast(d, f.fix!) },
+          { label: t('cm.copyCode'), icon: 'tag', shortcut: f.code, onSelect: () => copyToast(d, f.code) },
+        ]}
         tags={<span className="ck-store"><StoreGlyph store={f.store === 'apple' ? 'ios' : 'android'} className="ic13" />{f.store === 'apple' ? 'App Store' : 'Google Play'}</span>}
         actions={<><OpenLink url={f.url} />{f.level !== 'ok' && fixable(f.action) && <FixButton action={f.action} what={f.msg} w={w} />}</>}>
         {f.fix && <span className="ck-fix"><Icon name="wand" /><code className="selectable">{f.fix}</code></span>}
diff --git a/apps/desktop/src/screens/tabs/LiveArt.tsx b/apps/desktop/src/screens/tabs/LiveArt.tsx
index a6669e7..5ec97f6 100644
--- a/apps/desktop/src/screens/tabs/LiveArt.tsx
+++ b/apps/desktop/src/screens/tabs/LiveArt.tsx
@@ -12,6 +12,7 @@ import { Icon } from '../../ui/icons';
 import { Chip, Empty, ErrorNotice, Notice, ReadControl, Skeleton } from '../../ui/kit';
 import { WriteButton } from '../../ui/WriteButton';
 import { Section, StatusPill } from '../../ui/ds';
+import { type MenuInput, useContextMenu } from '../../ui/ContextMenu';
 
 // thumbnails by target + URL, three at a time
 const cache = new Map<string, string | null>();
@@ -79,6 +80,11 @@ export function LiveArt({ target, project }: { target: string; project?: Project
     <WriteButton run={w} primary icon="download" w={{ method: 'art.pull', args: {}, title: t('art.pull'), done: t('art.pulled'), after: () => { r.refresh(); } }} hint={t('art.pullHint')}>{t('art.pull')}</WriteButton>
   ) : null;
   const actions = <>{pull}<ReadControl r={r} /></>;
+  const cm = useContextMenu();
+  const setMenu = (): MenuInput => [
+    project && { label: t('art.pull'), icon: 'download', onSelect: () => { void w.run({ method: 'art.pull', args: {}, title: t('art.pull'), done: t('art.pulled'), after: () => { r.refresh(); } }); } },
+    { label: t('cm.readAgain'), icon: 'refresh', disabled: r.loading ? t('cm.reading') : false, onSelect: () => { r.refresh(); } },
+  ];
   if (!data) {
     return (
       <Section className="scr-art art-live" title={t('art.liveTitle')} icon="cloud" actions={actions} id="live-art" pad={false}>
@@ -115,7 +121,7 @@ export function LiveArt({ target, project }: { target: string; project?: Project
       {!total ? <Empty compact illo="text" title={t('art.liveNone')}>{t('art.liveNoneText')}</Empty> : (
         <div className="art-rows">
           {sets.map(s => (
-            <section className="art-row" key={`${s.store}-${s.type}`} data-live-set={`${s.store}:${s.locale}:${s.type}`}>
+            <section {...cm(setMenu)} className="art-row" key={`${s.store}-${s.type}`} data-live-set={`${s.store}:${s.locale}:${s.type}`}>
               <h3><span>{s.label}</span>{s.lang && <code>{s.lang}/{s.size}</code>}<Chip tone="outline" dot={false}>{s.store === 'apple' ? 'App Store' : 'Google Play'}</Chip><span className="muted small">{t('art.count', { count: s.tiles.length })}</span></h3>
               <div className="art-tiles" style={{ ['--tw' as string]: s.size === 'feature' ? '300px' : s.tiles[0] && (s.tiles[0].w ?? 0) > (s.tiles[0].h ?? 1) ? '260px' : '170px' }}>
                 {s.tiles.map(tile => <LiveThumb key={`${tile.index}-${tile.thumb}`} target={target} tile={tile} name={String(tile.index + 1).padStart(2, '0')} />)}
diff --git a/apps/desktop/src/screens/tabs/Prices.tsx b/apps/desktop/src/screens/tabs/Prices.tsx
index 7dc37f3..3bb5b56 100644
--- a/apps/desktop/src/screens/tabs/Prices.tsx
+++ b/apps/desktop/src/screens/tabs/Prices.tsx
@@ -1,6 +1,8 @@
 // Prices: what every product costs in every territory on both stores (`prices export --json`, read-only), the price
 // sheet as a CSV (save it anywhere, or write store/prices.csv for the terminal), and a price sheet compared with the
 // stores (`prices import --dry --json`) and applied as an owner action: dry run, native dialog, then the real run.
+import { useContextMenu } from '../../ui/ContextMenu';
+import { copyToast } from '../../ui/app-menu';
 import '../../styles/prices.css';
 import { useEffect, useMemo, useState } from 'react';
 import { api, errorText, type PricesCurrent, type PricesDiff, type Project } from '../../api';
@@ -91,6 +93,7 @@ export function PricesTab({ project }: { project: Project }) {
   const s = e?.summary ?? null;
   const w = useWrite(project.id);
   const runExport = useRunExport();
+  const cm = useContextMenu();
   const [withAuto, setWithAuto] = useState(true);
   const cur = useRead<PricesCurrent>(project.id, 'prices.current', { network: true, args: withAuto ? { with_automatic: true } : {}, title: t('prices.readTitle') });
   const [sheet, setSheet] = useState<{ csv?: string } | null>(null);
@@ -170,7 +173,11 @@ export function PricesTab({ project }: { project: Project }) {
                 <thead><tr><th>{t('col.item')}</th>{matrix!.regions.map(r => <th key={r}><Region code={r} /></th>)}</tr></thead>
                 <tbody>
                   {matrix!.rows.map(row => (
-                    <tr key={row.product} className={`clickable${row.product === sel ? ' sel' : ''}`} onClick={() => setProduct(row.product)}>
+                    <tr key={row.product} className={`clickable${row.product === sel ? ' sel' : ''}`} onClick={() => setProduct(row.product)} {...cm(() => [
+                      { label: t('cm.showPerRegion'), icon: 'globe', onSelect: () => setProduct(row.product) },
+                      'sep',
+                      { label: t('cm.copyProductId'), icon: 'copy', shortcut: row.product, onSelect: () => copyToast(d, row.product) },
+                    ])}>
                       <td><span className="mono-id strong">{row.product}</span></td>
                       {matrix!.regions.map(r => <td key={r}><PriceStack r={row.cells[r]} apple={apple} play={play} /></td>)}
                     </tr>
@@ -190,7 +197,11 @@ export function PricesTab({ project }: { project: Project }) {
                 <thead><tr><th>{t('col.region')}</th>{apple && <th className="right">App Store</th>}{apple && <th>{t('prices.colKind')}</th>}{play && <th className="right">Google Play</th>}<th className="right">{t('col.priceGap')}</th></tr></thead>
                 <tbody>
                   {regions.map(r => (
-                    <tr key={r.region} className={r.gapPct !== null && r.gapPct >= GAP ? (r.gapPct > 25 ? 'gap-bad' : 'gap-warn') : undefined}>
+                    <tr key={r.region} className={r.gapPct !== null && r.gapPct >= GAP ? (r.gapPct > 25 ? 'gap-bad' : 'gap-warn') : undefined} {...cm(() => [
+                      r.apple && { label: t('cm.copyPriceOf', { store: 'App Store' }), icon: 'copy', shortcut: money(r.apple.price, r.apple.currency), onSelect: () => copyToast(d, money(r.apple!.price, r.apple!.currency)) },
+                      r.play && { label: t('cm.copyPriceOf', { store: 'Google Play' }), icon: 'copy', shortcut: money(r.play.price, r.play.currency), onSelect: () => copyToast(d, money(r.play!.price, r.play!.currency)) },
+                      { label: t('cm.copyRegion'), icon: 'globe', shortcut: r.region, onSelect: () => copyToast(d, r.region) },
+                    ])}>
                       <td className="strong"><Region code={r.region} /></td>
                       {apple && <td className="right num">{r.apple ? money(r.apple.price, r.apple.currency) : <span className="muted">–</span>}{r.scheduled && <div className="small muted">{t('prices.scheduled', { price: money(r.scheduled.price, r.scheduled.currency), date: r.scheduled.startDate ?? '' })}</div>}</td>}
                       {apple && <td>{r.apple ? <Chip tone={r.apple.kind === 'auto' ? 'neutral' : 'accent'}>{r.apple.kind === 'auto' ? t('prices.auto') : t('prices.manual')}</Chip> : null}</td>}
diff --git a/apps/desktop/src/screens/tabs/Releases.tsx b/apps/desktop/src/screens/tabs/Releases.tsx
index 498306e..ee83644 100644
--- a/apps/desktop/src/screens/tabs/Releases.tsx
+++ b/apps/desktop/src/screens/tabs/Releases.tsx
@@ -17,6 +17,8 @@ import { RolloutBar } from '../../ui/charts';
 import { Card, Empty, Notice, PhaseChip, phaseLabel, Skeleton, storeName } from '../../ui/kit';
 import { EmptyState, Section, StatusPill, tintStyle, useTint } from '../../ui/ds';
 import { AppleSubmitCard, PlayProductionCard } from './Submit';
+import { useContextMenu } from '../../ui/ContextMenu';
+import { releaseMenu } from '../../ui/app-menu';
 import '../../styles/releases.css';
 
 const STAGE_KEY: Record<(typeof STAGES)[number], Key> = { build: 'stage.build', testing: 'stage.testing', review: 'stage.review', live: 'stage.live', rollout: 'stage.rollout' };
@@ -49,8 +51,10 @@ function LaneRow({ lane, version, st, app }: { lane: Lane; version: string; st:
   const ph = r ? phaseLabel(r) : null;
   const rolling = lane.at === STAGES.length - 1 && lane.share !== null;
   const ringTone = lane.tone === 'bad' ? 'bad' : (lane.share ?? 0) >= 1 ? 'ok' : 'accent';
+  const d = useData();
+  const menu = useContextMenu();
   return (
-    <article className="tl-lane rel-store" data-store={lane.store} data-tone={lane.tone} aria-label={storeName(lane.store)}>
+    <article {...menu(() => releaseMenu(d, app, lane.store, r?.version ?? version, r?.build))} className="tl-lane rel-store" data-store={lane.store} data-tone={lane.tone} aria-label={storeName(lane.store)}>
       <header className="rel-store-h">
         <span className="rel-mark"><StoreGlyph store={lane.store} /></span>
         <div className="rel-who">
@@ -168,6 +172,7 @@ function Train({ title, train, tf, tone, app, st }: { title: string; train: Rele
 
 export function ReleasesTab({ app }: { app: UnifiedApp }) {
   const d = useData();
+  const menu = useContextMenu();
   const l = d.liveFor(app);
   const project = app.project;
   const hue = useTint(d.iconFor(app), app.name);
@@ -221,7 +226,10 @@ export function ReleasesTab({ app }: { app: UnifiedApp }) {
               <thead><tr><th>{t('col.version')}</th><th>App Store</th><th>{t('col.build')}</th><th>Google Play</th><th>{t('col.versionCode')}</th><th>{t('col.track')}</th></tr></thead>
               <tbody>
                 {history.map(h => (
-                  <tr key={h.version}>
+                  <tr key={h.version} {...menu(() => [
+                    ...(h.ios ? [{ label: 'App Store', icon: 'phone' as const, submenu: releaseMenu(d, app, 'ios', h.ios.version, h.ios.build) }] : []),
+                    ...(h.android ? [{ label: 'Google Play', icon: 'phone' as const, submenu: releaseMenu(d, app, 'android', h.android.version, h.android.build) }] : []),
+                  ])}>
                     <td className="strong num rel-hv">{[...new Set([h.version, h.ios?.version, h.android?.version].filter(Boolean))].join(' / ')}</td>
                     <td>{h.ios ? <PhaseChip r={h.ios} /> : <span className="muted small">–</span>}</td>
                     <td className="num muted">{h.ios?.build ?? '–'}</td>
diff --git a/apps/desktop/src/screens/tabs/Reviews.tsx b/apps/desktop/src/screens/tabs/Reviews.tsx
index 8c7834e..a4b0407 100644
--- a/apps/desktop/src/screens/tabs/Reviews.tsx
+++ b/apps/desktop/src/screens/tabs/Reviews.tsx
@@ -1,6 +1,8 @@
 // Reviews: the inbox of both stores with the star distribution and filters, and per review its local reply draft
 // (.storebound/replies) with the send checks. Approving a draft is a local, confirmed write; sending stays in the
 // terminal (`storebound reviews send`): replies are public.
+import { type MenuInput, useContextMenu } from '../../ui/ContextMenu';
+import { consoleItem, copyToast } from '../../ui/app-menu';
 import { useEffect, useMemo, useState } from 'react';
 import type { DraftsResult, ReplyDraft } from '../../api';
 import type { UnifiedApp } from '../../lib/identity';
@@ -91,6 +93,17 @@ export function ReviewsTab({ app }: { app: UnifiedApp }) {
   const [f, setF] = useState<ReviewFilter>({ store: 'all', stars: [], unanswered: false, query: '' });
   const [sel, setSel] = useState<string | null>(null);
   const w = useWrite(project?.id ?? null);
+  const cm = useContextMenu();
+  const reviewMenu = (r: Review, k: string, dr: ReplyDraft | undefined): MenuInput => [
+    { label: t('cm.openDraft'), icon: 'edit', onSelect: () => setSel(k) },
+    !dr && !r.reply && project && { label: t('reviews.makeDrafts'), icon: 'text', onSelect: () => { void w.run({ method: 'reviews.draft', args: { days: 30 }, title: t('reviews.makeDrafts'), done: t('reviews.draftsMade'), after: () => drafts.refresh() }); } },
+    'sep',
+    { label: t('cm.copyReview'), icon: 'copy', onSelect: () => copyToast(d, [r.title, r.body].filter(Boolean).join('\n\n')) },
+    r.reply && { label: t('cm.copyReply'), icon: 'copy', onSelect: () => copyToast(d, r.reply!.text) },
+    dr?.reply && { label: t('cm.copyDraft'), icon: 'copy', onSelect: () => copyToast(d, dr.reply) },
+    'sep',
+    consoleItem(d, app, r.store === 'apple' ? 'ios' : 'android'),
+  ];
 
   const all = list.data ?? [];
   const stats = useMemo(() => starStats(f.store === 'all' ? all : all.filter(r => r.store === f.store)), [all, f.store]);
@@ -154,7 +167,7 @@ export function ReviewsTab({ app }: { app: UnifiedApp }) {
                 const dr = byFile.get(draftName(r));
                 const k = `${r.store}:${r.id}`;
                 return (
-                  <button key={k} type="button" role="option" aria-selected={cur === r} className="rv2-card inbox-item" onClick={() => setSel(k)}>
+                  <button key={k} type="button" role="option" aria-selected={cur === r} className="rv2-card inbox-item" onClick={() => setSel(k)} {...cm(() => reviewMenu(r, k, dr))}>
                     <span className="rv2-c-top">
                       <Stars n={r.rating} />
                       <span className="rv2-c-date">{date(r.date)}</span>
diff --git a/apps/desktop/src/ui/ContextMenu.tsx b/apps/desktop/src/ui/ContextMenu.tsx
new file mode 100644
index 0000000..faab2df
--- /dev/null
+++ b/apps/desktop/src/ui/ContextMenu.tsx
@@ -0,0 +1,252 @@
+// Context menus (design system): the browser's own menu never shows. ContextMenuProvider (main.tsx) prevents every
+// native `contextmenu`, opens a small Cut / Copy / Paste / Select all menu on text fields and a Copy menu on selected
+// text, and turns Shift+F10 / the Menu key into a context menu on the focused element. Screens attach menus with
+// `useContextMenu()`: `<div {...menu(() => [...entries])}>`. Keyboard: arrows, Home / End, Enter / Space, Esc,
+// ArrowRight / ArrowLeft for submenus, type-ahead. Logic (placement, moves, type-ahead) in menu-logic.ts.
+import { createContext, type KeyboardEvent as ReactKeyboardEvent, type MouseEvent as ReactMouseEvent, type ReactNode, useCallback, useContext, useEffect, useLayoutEffect, useId, useRef, useState } from 'react';
+import { createPortal } from 'react-dom';
+import { t } from '../i18n';
+import { copyText } from '../lib/crash';
+import { Icon } from './icons';
+import { MOD } from './kit';
+import { enabled, first, isEditable, isItem, last, type MenuEntry, type MenuInput, type MenuItem, move, placeAt, placeBeside, tidy, typeahead } from './menu-logic';
+
+export type { MenuEntry, MenuInput, MenuItem } from './menu-logic';
+
+interface Open { x: number; y: number; items: MenuEntry[]; from: Element | null; keyboard: boolean }
+type OpenFn = (x: number, y: number, input: MenuInput, opts?: { from?: Element | null; keyboard?: boolean }) => void;
+const Ctx = createContext<OpenFn | null>(null);
+
+/** Marks a native event a menu handled, so the global fallback leaves it alone. */
+const HANDLED = '__sbMenu';
+/** Marks the contextmenu event Shift+F10 / the Menu key sent (the menu starts on its first item). */
+const BY_KEY = '__sbKey';
+
+/** Props that attach a menu to an element: `<button {...menu(() => entries)}>`. Entries are built when it opens. */
+export function useContextMenu(): (build: () => MenuInput) => { onContextMenu: (e: ReactMouseEvent) => void } {
+  const open = useContext(Ctx);
+  return useCallback((build: () => MenuInput) => ({
+    onContextMenu: (e: ReactMouseEvent) => {
+      if ((e.nativeEvent as unknown as Record<string, unknown>)[HANDLED]) return;
+      // a text field or a selection inside keeps the edit menu
+      const target = e.target as HTMLElement;
+      if (isEditable(target as HTMLInputElement) || (window.getSelection()?.toString() ?? '').trim()) return;
+      e.preventDefault();
+      (e.nativeEvent as unknown as Record<string, unknown>)[HANDLED] = true;
+      if (!open) return;
+      open(e.clientX, e.clientY, build(), { from: e.currentTarget as Element, keyboard: !!(e.nativeEvent as unknown as Record<string, unknown>)[BY_KEY] });
+    },
+  }), [open]);
+}
+
+/** Copies and says so in a toast-less way (the menu closes; failures are silent like the browser's own Copy). */
+export const copyEntry = (label: string, text: string | null | undefined, icon: MenuItem['icon'] = 'copy'): MenuItem | null =>
+  text ? { label, icon, onSelect: () => { void copyText(text); } } : null;
+
+function editMenu(el: HTMLInputElement | HTMLTextAreaElement | HTMLElement): MenuEntry[] {
+  const field = 'selectionStart' in el ? el as HTMLInputElement : null;
+  const ro = !!field && (field.readOnly || field.disabled);
+  const secret = field?.type === 'password';
+  const start = field?.selectionStart ?? 0, end = field?.selectionEnd ?? 0;
+  const sel = field ? (field.value ?? '').slice(start, end) : (window.getSelection()?.toString() ?? '');
+  const refocus = () => { el.focus(); if (field && field.type !== 'number' && field.type !== 'email') field.setSelectionRange(start, end); };
+  return tidy([
+    { label: t('cm.cut'), icon: 'edit', shortcut: `${MOD} X`, disabled: ro || secret || !sel, onSelect: () => { refocus(); void copyText(sel).then(() => { refocus(); document.execCommand('delete'); }); } },
+    { label: t('cm.copy'), icon: 'copy', shortcut: `${MOD} C`, disabled: secret || !sel, onSelect: () => { void copyText(sel); refocus(); } },
+    { label: t('cm.paste'), icon: 'clipboard', shortcut: `${MOD} V`, disabled: ro, onSelect: () => {
+      refocus();
+      navigator.clipboard?.readText().then(s => { refocus(); document.execCommand('insertText', false, s); }, () => {});
+    } },
+    'sep',
+    { label: t('cm.selectAll'), icon: 'grid', shortcut: `${MOD} A`, onSelect: () => { el.focus(); if (field) field.select(); else document.execCommand('selectAll'); } },
+  ]);
+}
+
+export function ContextMenuProvider({ children }: { children: ReactNode }) {
+  const [state, setState] = useState<Open | null>(null);
+  const open = useCallback<OpenFn>((x, y, input, opts) => {
+    const items = tidy(input);
+    if (!items.length) return;
+    setState({ x, y, items, from: opts?.from ?? (document.activeElement as Element | null), keyboard: !!opts?.keyboard });
+  }, []);
+  const close = useCallback((restore: boolean) => {
+    setState(s => {
+      if (restore && s?.from instanceof HTMLElement && s.from.isConnected) s.from.focus({ preventScroll: true });
+      return null;
+    });
+  }, []);
+
+  useEffect(() => {
+    // the fallback for everything no screen menu handled: never the browser's menu
+    const onMenu = (e: MouseEvent) => {
+      e.preventDefault();
+      if ((e as unknown as Record<string, unknown>)[HANDLED]) return;
+      const target = e.target as HTMLElement | null;
+      if (target?.closest?.('.ds-menu')) return;
+      const editable = target && isEditable(target as HTMLInputElement) ? target : null;
+      const keyboard = !!(e as unknown as Record<string, unknown>)[BY_KEY];
+      if (editable) { open(e.clientX, e.clientY, editMenu(editable), { from: editable, keyboard }); return; }
+      const sel = window.getSelection()?.toString() ?? '';
+      if (sel.trim()) open(e.clientX, e.clientY, [{ label: t('cm.copy'), icon: 'copy', shortcut: `${MOD} C`, onSelect: () => { void copyText(sel); } }], { keyboard });
+    };
+    // Shift+F10 and the Menu key: a context menu on the focused element, at its corner
+    const onKey = (e: KeyboardEvent) => {
+      if (!((e.key === 'F10' && e.shiftKey) || e.key === 'ContextMenu')) return;
+      const el = document.activeElement as HTMLElement | null;
+      if (!el || el === document.body || el.closest('.ds-menu')) return;
+      e.preventDefault();
+      const r = el.getBoundingClientRect();
+      const ev = new MouseEvent('contextmenu', { bubbles: true, cancelable: true, clientX: Math.round(r.left + Math.min(24, r.width / 2)), clientY: Math.round(r.bottom - 2), button: 2 });
+      (ev as unknown as Record<string, unknown>)[BY_KEY] = true;
+      el.dispatchEvent(ev);
+    };
+    document.addEventListener('contextmenu', onMenu);
+    document.addEventListener('keydown', onKey, true);
+    return () => { document.removeEventListener('contextmenu', onMenu); document.removeEventListener('keydown', onKey, true); };
+  }, [open]);
+
+  return (
+    <Ctx.Provider value={open}>
+      {children}
+      {state && createPortal(<MenuRoot key={`${state.x},${state.y}`} state={state} close={close} />, document.body)}
+    </Ctx.Provider>
+  );
+}
+
+function MenuRoot({ state, close }: { state: Open; close: (restore: boolean) => void }) {
+  useEffect(() => {
+    const outside = (e: Event) => { if (!(e.target as Element | null)?.closest?.('.ds-menu')) close(false); };
+    const scroll = (e: Event) => { if (!(e.target instanceof Element && e.target.closest('.ds-menu'))) close(false); };
+    const blur = () => close(false);
+    document.addEventListener('pointerdown', outside, true);
+    document.addEventListener('scroll', scroll, true);
+    window.addEventListener('blur', blur);
+    window.addEventListener('resize', blur);
+    return () => {
+      document.removeEventListener('pointerdown', outside, true);
+      document.removeEventListener('scroll', scroll, true);
+      window.removeEventListener('blur', blur);
+      window.removeEventListener('resize', blur);
+    };
+  }, [close]);
+  return <MenuList items={state.items} at={{ x: state.x, y: state.y }} close={close} root keyboard={state.keyboard} />;
+}
+
+type Anchor = { x: number; y: number } | { left: number; right: number; top: number };
+
+function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEntry[]; at: Anchor; close: (restore: boolean) => void; root?: boolean; keyboard?: boolean; onBack?: () => void }) {
+  const uid = useId();
+  const ref = useRef<HTMLDivElement>(null);
+  const [pos, setPos] = useState<{ left: number; top: number } | null>(null);
+  const [active, setActive] = useState(-1);
+  const [sub, setSub] = useState<{ index: number; anchor: Anchor; focus: boolean } | null>(null);
+  const typed = useRef({ q: '', at: 0 });
+  const hoverTimer = useRef<number | undefined>(undefined);
+
+  useLayoutEffect(() => {
+    const el = ref.current;
+    if (!el) return;
+    const box = { w: el.offsetWidth, h: el.offsetHeight }, view = { w: window.innerWidth, h: window.innerHeight };
+    setPos('x' in at ? placeAt(at.x, at.y, box, view) : placeBeside(at, box, view));
+  }, [at]);
+  useEffect(() => {
+    if (!pos) return;
+    ref.current?.focus({ preventScroll: true });
+    // a submenu, or a menu opened from the keyboard, starts on its first item; a mouse-opened menu waits for a key
+    if (!root || keyboard) setActive(first(items));
+  }, [pos, root, keyboard, items]);
+  useEffect(() => () => window.clearTimeout(hoverTimer.current), []);
+
+  const itemEl = (i: number) => ref.current?.querySelector<HTMLElement>(`[data-i="${i}"]`) ?? null;
+  const openSub = (i: number, focus: boolean) => {
+    const el = itemEl(i);
+    if (!el) return;
+    const r = el.getBoundingClientRect();
+    setSub({ index: i, anchor: { left: r.left, right: r.right, top: r.top }, focus });
+  };
+  const choose = (i: number) => {
+    const e = items[i];
+    if (!enabled(e)) return;
+    if (e.submenu) { openSub(i, true); return; }
+    close(true);
+    // after the menu is gone, so the action sees the restored focus (paste, select all)
+    window.setTimeout(() => e.onSelect?.(), 0);
+  };
+
+  const onKey = (ev: ReactKeyboardEvent) => {
+    if (sub?.focus) return; // the submenu has the keys
+    const k = ev.key;
+    const stop = () => { ev.preventDefault(); ev.stopPropagation(); };
+    if (k === 'ArrowDown') { stop(); setActive(a => move(items, a, 1)); }
+    else if (k === 'ArrowUp') { stop(); setActive(a => move(items, a, -1)); }
+    else if (k === 'Home' || k === 'PageUp') { stop(); setActive(first(items)); }
+    else if (k === 'End' || k === 'PageDown') { stop(); setActive(last(items)); }
+    else if (k === 'Enter' || k === ' ') { stop(); if (active >= 0) choose(active); }
+    else if (k === 'ArrowRight') { stop(); const e = items[active]; if (enabled(e) && e.submenu) openSub(active, true); }
+    else if (k === 'ArrowLeft') { stop(); onBack?.(); }
+    else if (k === 'Escape') { stop(); if (onBack) onBack(); else close(true); }
+    else if (k === 'Tab') { stop(); close(true); }
+    else if (k.length === 1 && !ev.ctrlKey && !ev.metaKey && !ev.altKey) {
+      stop();
+      const now = Date.now();
+      const q = (now - typed.current.at > 700 ? '' : typed.current.q) + k;
+      typed.current = { q, at: now };
+      const i = typeahead(items, active, q);
+      if (i >= 0) setActive(i);
+    }
+  };
+
+  useEffect(() => { if (active >= 0) itemEl(active)?.scrollIntoView({ block: 'nearest' }); }, [active]);
+
+  return (
+    <>
+      <div ref={ref} className={`ds-menu${pos ? ' in' : ''}`} role="menu" tabIndex={-1} onKeyDown={onKey}
+        style={pos ? { left: pos.left, top: pos.top } : { left: -9999, top: -9999 }}
+        aria-activedescendant={active >= 0 ? `${uid}-${active}` : undefined}
+        onContextMenu={e => e.preventDefault()}>
+        {items.map((e, i) => {
+          if (!isItem(e)) return <div key={`s${i}`} className="ds-menu-sep" role="separator" />;
+          const dis = !!e.disabled;
+          const checkable = e.checked !== undefined;
+          return (
+            <div key={i} id={`${uid}-${i}`} data-i={i} role={checkable ? 'menuitemcheckbox' : 'menuitem'}
+              aria-checked={checkable ? e.checked : undefined} aria-disabled={dis || undefined}
+              aria-haspopup={e.submenu ? 'menu' : undefined} aria-expanded={e.submenu ? sub?.index === i : undefined}
+              title={typeof e.disabled === 'string' ? e.disabled : undefined}
+              className={`ds-menu-item${i === active ? ' active' : ''}${e.danger ? ' danger' : ''}${dis ? ' disabled' : ''}`}
+              onPointerMove={() => {
+                if (active !== i) setActive(dis ? -1 : i);
+                window.clearTimeout(hoverTimer.current);
+                if (!dis && e.submenu) { if (sub?.index !== i) hoverTimer.current = window.setTimeout(() => openSub(i, false), 120); }
+                else if (sub) hoverTimer.current = window.setTimeout(() => setSub(null), 200);
+              }}
+              onClick={() => choose(i)}>
+              <span className="ds-menu-ic">{checkable ? (e.checked ? <Icon name="check" /> : null) : e.icon ? <Icon name={e.icon} /> : null}</span>
+              <span className="ds-menu-l">{e.label}</span>
+              {e.shortcut && <span className="ds-menu-k">{e.shortcut}</span>}
+              {e.submenu && <Icon name="chevronRight" className="ds-menu-sub" />}
+            </div>
+          );
+        })}
+      </div>
+      {sub && isItem(items[sub.index]) && (items[sub.index] as MenuItem).submenu && (
+        <MenuList key={sub.index} items={(items[sub.index] as MenuItem).submenu as MenuEntry[]} at={sub.anchor} close={close}
+          onBack={() => { setSub(null); ref.current?.focus({ preventScroll: true }); }} />
+      )}
+    </>
+  );
+}
+
+
+/** A text field's menu: Cut / Copy / Paste / Select all plus the field's own entries (copy value, reset). */
+export function useFieldMenu(): (extras: () => MenuInput) => { onContextMenu: (e: ReactMouseEvent) => void } {
+  const open = useContext(Ctx);
+  return useCallback((extras: () => MenuInput) => ({
+    onContextMenu: (e: ReactMouseEvent) => {
+      const el = e.currentTarget as HTMLElement;
+      e.preventDefault();
+      (e.nativeEvent as unknown as Record<string, unknown>)[HANDLED] = true;
+      open?.(e.clientX, e.clientY, [...editMenu(el), 'sep', ...extras()], { from: el, keyboard: !!(e.nativeEvent as unknown as Record<string, unknown>)[BY_KEY] });
+    },
+  }), [open]);
+}
diff --git a/apps/desktop/src/ui/Editor.tsx b/apps/desktop/src/ui/Editor.tsx
index 0308342..ca3394a 100644
--- a/apps/desktop/src/ui/Editor.tsx
+++ b/apps/desktop/src/ui/Editor.tsx
@@ -7,6 +7,8 @@
 //   - ApplyPanel: a store write's dry run in the window (old -> new per store and language), then Apply (native
 //     dialog, the real run)
 //   - GitNote: the edited files are uncommitted in git (storebound never commits)
+import { useFieldMenu } from './ContextMenu';
+import { copyText } from '../lib/crash';
 import { useCallback, useEffect, useState, useSyncExternalStore, type ReactNode } from 'react';
 import { api, type EditableResult, type EditResult, type Project, type ToolResult } from '../api';
 import { t } from '../i18n';
@@ -65,13 +67,18 @@ export function TextField({ project, area, op, saved, label, limit, multiline, r
   saved: string; limit?: number; multiline?: boolean; rows?: number; placeholder?: string; mono?: boolean; kind?: 'url' | 'email' | 'text';
 }) {
   const e = useEdits();
+  const fm = useFieldMenu();
   const make = (v: string): EditOp => (op.kind === 'config' ? (v === '' ? { kind: 'config', path: op.path, remove: true } : { kind: 'config', path: op.path, value: v }) : { ...op, value: v } as EditOp);
   const { value, dirty } = useValue<string>(project, make(saved), saved);
   const fid = id ?? `ed-${keyOf(make('')).replace(/[^A-Za-z0-9_-]/g, '-')}`;
   const n = chars(value ?? '');
   const set = (v: string) => e.set(project.id, make(v), area, saved);
   const common = { id: fid, className: `input${mono ? ' mono' : ''}`, value: value ?? '', placeholder, disabled, 'aria-invalid': issues.some(i => i.level === 'error') || undefined,
-    onChange: (ev: { target: { value: string } }) => set(ev.target.value), 'data-edit': keyOf(make('')) };
+    onChange: (ev: { target: { value: string } }) => set(ev.target.value), 'data-edit': keyOf(make('')),
+    ...fm(() => [
+      { label: t('cm.copyValue'), icon: 'copy', disabled: !value, onSelect: () => { void copyText(value ?? ''); } },
+      { label: t('ed.reset'), icon: 'rotate', disabled: dirty ? false : t('cm.notChanged'), onSelect: () => set(saved) },
+    ]) };
   return (
     <div className={`ed-field${dirty ? ' dirty' : ''}`}>
       <div className="ed-head">
diff --git a/apps/desktop/src/ui/app-menu.ts b/apps/desktop/src/ui/app-menu.ts
new file mode 100644
index 0000000..2ac5541
--- /dev/null
+++ b/apps/desktop/src/ui/app-menu.ts
@@ -0,0 +1,87 @@
+// The context menu of one app (sidebar row, portfolio card): open, a tab, the store consoles, the folder, ids,
+// reads, and the ignore actions the app view and the Ignored screen already have.
+import { api, errorText } from '../api';
+import { t } from '../i18n';
+import { copyText } from '../lib/crash';
+import { withIgnored, withSideIgnored, type UnifiedApp } from '../lib/identity';
+import { setShowIgnored } from '../lib/show-ignored';
+import { type AppTab, type Nav, TAB_ICON, TAB_KEY, tabsFor } from '../nav';
+import type { Data } from '../store';
+import type { MenuInput, MenuItem } from './menu-logic';
+
+export const ASC_APP = (id: string | null | undefined): string => (id ? `https://appstoreconnect.apple.com/apps/${encodeURIComponent(id)}/distribution` : 'https://appstoreconnect.apple.com/apps');
+export const PLAY_HOME = 'https://play.google.com/console/';
+
+export function openUrl(d: Data, url: string): void {
+  api.openExternal(url).catch(e => d.toast({ kind: 'bad', title: t('link.openFailed'), detail: errorText(e) }));
+}
+export function copyToast(d: Data, text: string): void {
+  void copyText(text).then(ok => d.toast(ok ? { kind: 'ok', title: t('cm.copied') } : { kind: 'bad', title: t('health.copyFailed') }));
+}
+
+export function appMenu(app: UnifiedApp, d: Data, nav: Nav, opts: { showIgnored: boolean }): MenuInput {
+  const ios = app.ios?.app ?? null, android = app.android?.app ?? null;
+  const p = app.project;
+  const go = (tab: AppTab) => nav.go({ screen: 'app', appId: app.key, tab });
+  const sides = (['ios', 'android'] as const).filter(k => app[k] || app.ignoredStores.includes(k));
+  const storeName = (k: 'ios' | 'android') => (k === 'ios' ? 'App Store' : 'Google Play');
+  return [
+    { label: t('cm.open'), icon: 'arrowRight', onSelect: () => go('releases') },
+    { label: t('cm.openTab'), icon: 'grid', submenu: tabsFor(!!p).map(tab => ({ label: t(TAB_KEY[tab]), icon: TAB_ICON[tab], onSelect: () => go(tab) })) },
+    'sep',
+    (ios || android) && { label: t('cm.openConsole'), icon: 'external', submenu: [
+      ios && { label: 'App Store Connect', icon: 'external', onSelect: () => openUrl(d, ASC_APP(ios.id)) },
+      android && { label: 'Google Play Console', icon: 'external', onSelect: () => openUrl(d, PLAY_HOME) },
+    ] },
+    p && !p.missing && { label: t('cm.openFolder'), icon: 'folder', onSelect: () => { api.reveal(p.id).catch(e => d.toast({ kind: 'bad', title: t('cm.folderFailed'), detail: errorText(e) })); } },
+    { label: t('cm.copy'), icon: 'copy', submenu: [
+      { label: t('cm.copyName'), icon: 'text', onSelect: () => copyToast(d, app.name) },
+      ios && { label: t('cm.copyBundleId'), icon: 'tag', shortcut: ios.bundleId, onSelect: () => copyToast(d, ios.bundleId) },
+      android && { label: t('cm.copyPackage'), icon: 'tag', shortcut: android.id, onSelect: () => copyToast(d, android.id) },
+      ios && { label: t('cm.copyAscId'), icon: 'key', onSelect: () => copyToast(d, ios.id) },
+      p && { label: t('cm.copyPath'), icon: 'folder', onSelect: () => copyToast(d, p.path) },
+    ] },
+    'sep',
+    { label: t('cm.refreshReads'), icon: 'refresh', disabled: app.ignored ? t('cm.ignoredNoReads') : false, onSelect: () => { d.invalidate(app.target); d.toast({ kind: 'info', title: t('cm.refreshing', { name: app.name }) }); } },
+    'sep',
+    app.ignored
+      ? { label: t('app.unignore'), icon: 'eye', onSelect: () => { void d.updateOverrides(o => withIgnored(o, app.ignoreKeys, false)); } }
+      : { label: t('cm.ignore'), icon: 'eyeOff', submenu: [
+        { label: t('app.ignore'), icon: 'eyeOff', danger: true, onSelect: () => {
+          void d.updateOverrides(o => withIgnored(o, app.ignoreKeys, true)).then(() => { if (nav.route.screen === 'app' && nav.route.appId === app.key) nav.go({ screen: 'portfolio' }); });
+        } },
+        sides.length === 2 && 'sep',
+        ...(sides.length === 2 ? sides.map(k => {
+          const off = app.ignoredStores.includes(k);
+          return { label: off ? t('app.unignoreSide', { store: storeName(k) }) : t('app.ignoreSide', { store: storeName(k) }), icon: off ? 'eye' as const : 'eyeOff' as const,
+            onSelect: () => { void d.updateOverrides(o => withSideIgnored(o, app, k, !off)); } };
+        }) : []),
+      ] },
+    { label: t('cm.showIgnored'), icon: 'filter', checked: opts.showIgnored, onSelect: () => setShowIgnored(!opts.showIgnored) },
+  ];
+}
+
+/** "Open in App Store Connect / Play Console" for one store side of an app. */
+export function consoleItem(d: Data, app: UnifiedApp, store: 'ios' | 'android'): MenuItem {
+  return store === 'ios'
+    ? { label: t('cm.openIn', { place: 'App Store Connect' }), icon: 'external', onSelect: () => openUrl(d, ASC_APP(app.ios?.app.id)) }
+    : { label: t('cm.openIn', { place: 'Google Play Console' }), icon: 'external', onSelect: () => openUrl(d, PLAY_HOME) };
+}
+
+/** Menu of one store release: copy version / build, open the console. */
+export function releaseMenu(d: Data, app: UnifiedApp, store: 'ios' | 'android', version: string | null | undefined, build: string | number | null | undefined): MenuInput {
+  return [
+    version && { label: t('cm.copyVersion'), icon: 'copy', shortcut: String(version), onSelect: () => copyToast(d, String(version)) },
+    build != null && build !== '' && { label: store === 'ios' ? t('cm.copyBuild') : t('cm.copyVersionCode'), icon: 'copy', shortcut: String(build), onSelect: () => copyToast(d, String(build)) },
+    'sep',
+    consoleItem(d, app, store),
+  ];
+}
+
+/** Both consoles of an app folder (App Store Connect with the app's id when the status knows it). */
+export function projectConsoles(d: Data, ascAppId: string | null | undefined, ios: boolean, android: boolean): MenuInput {
+  return [
+    ios && { label: t('cm.openIn', { place: 'App Store Connect' }), icon: 'external', onSelect: () => openUrl(d, ASC_APP(ascAppId)) },
+    android && { label: t('cm.openIn', { place: 'Google Play Console' }), icon: 'external', onSelect: () => openUrl(d, PLAY_HOME) },
+  ];
+}
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index a855866..97ea2e0 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -2,7 +2,7 @@
 // the portfolio home as reusable parts. PageHeader, Hero (app hero with screenshots, two-store pipeline, next step),
 // Section, StatTile, Pipeline, StatusPill, EmptyState, Tabs, Toolbar, Dialog, plus the per-app tint (useTint / tintStyle)
 // and the rendered-screenshot loader (useShots) the cards and the hero share.
-import { type CSSProperties, type KeyboardEvent, type ReactNode, useEffect, useId, useRef, useState } from 'react';
+import { type CSSProperties, type KeyboardEvent, type MouseEvent as ReactMouseEvent, type ReactNode, useEffect, useId, useRef, useState } from 'react';
 import { api, reads, type RenderImage, type StoreRelease, type ToolResult } from '../api';
 import { type Key, t } from '../i18n';
 import { share } from '../lib/format';
@@ -179,14 +179,16 @@ export function PageHeader({ title, subtitle, eyebrow, actions, icon }: { title:
 }
 
 /** App hero: screenshots strip, big icon, name, ids, store links, the two-store pipeline and the next step. */
-export function Hero({ name, icon, projectId, ids, badges, links, all, ios, android, cta, onCta, next, children }: {
+export function Hero({ name, icon, projectId, ids, badges, links, all, ios, android, cta, onCta, next, children, onContextMenu }: {
   name: string; icon: string | null; projectId: string | null; ids?: ReactNode; badges?: ReactNode; links?: ReactNode;
+  /** The app's context menu (useContextMenu props). */
+  onContextMenu?: (e: ReactMouseEvent) => void;
   all: StoreRelease[]; ios: boolean; android: boolean; cta?: Cta | null; onCta?: (tab: AppTab) => void; next?: string | null; children?: ReactNode;
 }) {
   const hue = useTint(icon, name);
   const shots = useShots(projectId, 4);
   return (
-    <section className="ds-hero" style={tintStyle(hue)} aria-label={name}>
+    <section className="ds-hero" style={tintStyle(hue)} aria-label={name} onContextMenu={onContextMenu}>
       <div className="ds-hero-main">
         <div className="ds-hero-id">
           <AppIcon name={name} src={icon} className="ds-hero-icon" />
diff --git a/apps/desktop/src/ui/menu-logic.ts b/apps/desktop/src/ui/menu-logic.ts
new file mode 100644
index 0000000..ced404f
--- /dev/null
+++ b/apps/desktop/src/ui/menu-logic.ts
@@ -0,0 +1,98 @@
+// Context menu logic without React or the DOM (tested in tests/context-menu.test.ts): the entry model, tidying,
+// keyboard moves, type-ahead and placement inside the viewport.
+import type { IconName } from './icons';
+
+export interface MenuItem {
+  label: string;
+  icon?: IconName;
+  /** Right-aligned hint ("Ctrl C"). Only a hint: the menu does not bind it. */
+  shortcut?: string;
+  onSelect?: () => void;
+  /** true, or the reason shown as a tooltip. */
+  disabled?: boolean | string;
+  danger?: boolean;
+  /** A check item: true shows the checkmark (role menuitemcheckbox). */
+  checked?: boolean;
+  /** Entries of a submenu (falsy ones dropped, like the top level). */
+  submenu?: MenuInput;
+}
+export type MenuEntry = MenuItem | 'sep';
+/** What callers pass: falsy entries are dropped, so `cond && {...}` works. */
+export type MenuInput = (MenuEntry | false | null | undefined | '' | 0)[];
+
+export const isItem = (e: MenuEntry | undefined): e is MenuItem => !!e && e !== 'sep';
+export const enabled = (e: MenuEntry | undefined): e is MenuItem => isItem(e) && !e.disabled;
+
+/** Drops falsy entries, empty submenus, and leading, trailing and doubled separators. */
+export function tidy(input: MenuInput): MenuEntry[] {
+  const out: MenuEntry[] = [];
+  for (const e of input) {
+    if (!e) continue;
+    if (e === 'sep') { if (out.length && out[out.length - 1] !== 'sep') out.push('sep'); continue; }
+    if (e.submenu) {
+      const sub = tidy(e.submenu);
+      if (!sub.length) continue;
+      out.push({ ...e, submenu: sub });
+    } else out.push(e);
+  }
+  while (out[out.length - 1] === 'sep') out.pop();
+  return out;
+}
+
+/** Next enabled item from `from` in direction `dir` (wraps); -1 when none. `from` -1 starts before the first. */
+export function move(items: MenuEntry[], from: number, dir: 1 | -1): number {
+  const n = items.length;
+  if (!n) return -1;
+  let i = from;
+  for (let k = 0; k < n; k++) {
+    i = i < 0 ? (dir > 0 ? 0 : n - 1) : (i + dir + n) % n;
+    if (enabled(items[i])) return i;
+  }
+  return -1;
+}
+export const first = (items: MenuEntry[]): number => move(items, -1, 1);
+export const last = (items: MenuEntry[]): number => { const n = move(items, -1, -1); return n; };
+
+/** Type-ahead: the next enabled item after `from` whose label starts with `query` (case-insensitive); -1 when none. */
+export function typeahead(items: MenuEntry[], from: number, query: string): number {
+  const q = query.toLocaleLowerCase();
+  if (!q) return -1;
+  const n = items.length;
+  // a repeated single letter cycles; a longer query may stay on the current item
+  const start = q.length > 1 ? Math.max(from, 0) : from + 1;
+  for (let k = 0; k < n; k++) {
+    const i = (start + k + n) % n;
+    const e = items[i];
+    if (enabled(e) && e.label.toLocaleLowerCase().startsWith(q)) return i;
+  }
+  return -1;
+}
+
+export interface Box { w: number; h: number }
+export interface View { w: number; h: number }
+const M = 8;
+
+/** Top-left of a menu opened at the cursor: right/below it, flipped left/up when it would leave the viewport. */
+export function placeAt(x: number, y: number, box: Box, view: View): { left: number; top: number } {
+  let left = x + box.w + M > view.w ? x - box.w : x;
+  let top = y + box.h + M > view.h ? y - box.h : y;
+  left = Math.min(Math.max(M, left), Math.max(M, view.w - box.w - M));
+  top = Math.min(Math.max(M, top), Math.max(M, view.h - box.h - M));
+  return { left, top };
+}
+
+/** Top-left of a submenu beside its parent item: right of it, else left; aligned with the item, kept inside. */
+export function placeBeside(item: { left: number; right: number; top: number }, box: Box, view: View): { left: number; top: number } {
+  const left = item.right - 4 + box.w + M <= view.w ? item.right - 4 : Math.max(M, item.left + 4 - box.w);
+  const top = Math.min(Math.max(M, item.top - 5), Math.max(M, view.h - box.h - M));
+  return { left, top };
+}
+
+/** Elements that get the Cut / Copy / Paste menu. */
+export function isEditable(el: { tagName?: string; type?: string; isContentEditable?: boolean; readOnly?: boolean; disabled?: boolean } | null): boolean {
+  if (!el) return false;
+  if (el.isContentEditable) return true;
+  if (el.tagName === 'TEXTAREA') return true;
+  if (el.tagName !== 'INPUT') return false;
+  return ['text', 'search', 'url', 'email', 'tel', 'number', 'password', ''].includes((el.type ?? '').toLowerCase());
+}
diff --git a/apps/desktop/tests/context-menu.test.ts b/apps/desktop/tests/context-menu.test.ts
new file mode 100644
index 0000000..5356309
--- /dev/null
+++ b/apps/desktop/tests/context-menu.test.ts
@@ -0,0 +1,93 @@
+// Context menus: the entry model, keyboard moves, type-ahead and placement (ui/menu-logic.ts), and the rules that keep
+// the browser's own menu out of the window (ui/ContextMenu.tsx, main.tsx, the Windows webview settings).
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { first, isEditable, last, type MenuEntry, move, placeAt, placeBeside, tidy, typeahead } from '../src/ui/menu-logic';
+
+const ROOT = join(import.meta.dir, '..');
+const src = (f: string) => readFileSync(join(ROOT, f), 'utf8');
+const item = (label: string, extra: object = {}) => ({ label, ...extra });
+
+describe('menu entries', () => {
+  test('tidy drops falsy entries, empty submenus and stray separators', () => {
+    const out = tidy(['sep', item('Open'), false, null, 'sep', 'sep', item('More', { submenu: [false, 'sep'] }), item('Copy'), 'sep', undefined, '']);
+    expect(out.map(e => (e === 'sep' ? '-' : e.label))).toEqual(['Open', '-', 'Copy']);
+  });
+  test('tidy keeps a submenu with entries, tidied', () => {
+    const [m] = tidy([item('Copy', { submenu: ['sep', item('Name'), null, 'sep'] })]);
+    expect(m !== 'sep' && (m!.submenu as MenuEntry[]).map(e => (e === 'sep' ? '-' : e.label))).toEqual(['Name']);
+  });
+});
+
+describe('keyboard', () => {
+  const items: MenuEntry[] = [item('Open'), 'sep', item('Copy', { disabled: 'nothing selected' }), item('Cut'), item('Paste'), item('Remove', { danger: true })];
+  test('arrows skip separators and disabled items and wrap', () => {
+    expect(first(items)).toBe(0);
+    expect(last(items)).toBe(5);
+    expect(move(items, 0, 1)).toBe(3);
+    expect(move(items, 3, -1)).toBe(0);
+    expect(move(items, 5, 1)).toBe(0);
+    expect(move(items, 0, -1)).toBe(5);
+    expect(move([], -1, 1)).toBe(-1);
+    expect(move(['sep', item('x', { disabled: true })], -1, 1)).toBe(-1);
+  });
+  test('type-ahead finds the next enabled match; a repeated letter cycles', () => {
+    expect(typeahead(items, -1, 'p')).toBe(4);
+    expect(typeahead(items, -1, 'c')).toBe(3); // Copy is disabled: Cut
+    expect(typeahead(items, 3, 'c')).toBe(3);
+    expect(typeahead(items, 0, 'o')).toBe(0);
+    expect(typeahead(items, 3, 'cu')).toBe(3);
+    expect(typeahead(items, 0, 'zz')).toBe(-1);
+  });
+});
+
+describe('placement', () => {
+  const view = { w: 1000, h: 700 }, box = { w: 220, h: 300 };
+  test('opens right of and below the cursor', () => expect(placeAt(100, 100, box, view)).toEqual({ left: 100, top: 100 }));
+  test('flips left and up at the edges, and stays inside', () => {
+    expect(placeAt(900, 600, box, view)).toEqual({ left: 680, top: 300 });
+    expect(placeAt(5, 5, { w: 2000, h: 2000 }, view)).toEqual({ left: 8, top: 8 });
+  });
+  test('submenus open beside the item, or on the other side near the edge', () => {
+    expect(placeBeside({ left: 100, right: 320, top: 50 }, box, view)).toEqual({ left: 316, top: 45 });
+    expect(placeBeside({ left: 700, right: 920, top: 600 }, box, view)).toEqual({ left: 484, top: 392 });
+  });
+});
+
+test('text fields get the edit menu', () => {
+  expect(isEditable({ tagName: 'INPUT', type: 'text' })).toBe(true);
+  expect(isEditable({ tagName: 'INPUT', type: 'checkbox' })).toBe(false);
+  expect(isEditable({ tagName: 'TEXTAREA' })).toBe(true);
+  expect(isEditable({ tagName: 'DIV', isContentEditable: true })).toBe(true);
+  expect(isEditable({ tagName: 'BUTTON' })).toBe(false);
+  expect(isEditable(null)).toBe(false);
+});
+
+describe('no browser menu', () => {
+  test('the provider prevents every native contextmenu and handles Shift+F10 / the Menu key', () => {
+    const s = src('src/ui/ContextMenu.tsx');
+    expect(s).toMatch(/document\.addEventListener\('contextmenu', onMenu\)/);
+    // the fallback handler prevents the default before anything else
+    expect(s).toMatch(/const onMenu = \(e: MouseEvent\) => \{\s*e\.preventDefault\(\);/);
+    expect(s).toMatch(/e\.key === 'F10' && e\.shiftKey/);
+    expect(s).toMatch(/e\.key === 'ContextMenu'/);
+    expect(s).toMatch(/role="menu"/);
+    expect(s).toMatch(/menuitemcheckbox/);
+  });
+  test('main.tsx wraps the app in the provider', () => {
+    expect(src('src/main.tsx')).toMatch(/<ContextMenuProvider><App /);
+  });
+  test('release builds on Windows turn off the WebView2 menu and browser accelerator keys', () => {
+    const rs = src('src-tauri/src/lib.rs');
+    expect(rs).toMatch(/#\[cfg\(all\(windows, not\(debug_assertions\)\)\)\]\s*fn harden_webview/);
+    expect(rs).toMatch(/SetAreDefaultContextMenusEnabled\(false\)/);
+    expect(rs).toMatch(/SetAreBrowserAcceleratorKeysEnabled\(false\)/);
+  });
+  test('menus use the catalog in every language', () => {
+    for (const k of ['cm.cut', 'cm.copy', 'cm.paste', 'cm.selectAll']) {
+      expect(src('src/i18n/en.ts')).toContain(`'${k}'`);
+      expect(src('src/i18n/tr.ts')).toContain(`'${k}'`);
+    }
+  });
+});

From 5e82010ace7548a05fd209dac2c19b6fe0f3a31e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:08:23 +0800
Subject: [PATCH 063/255] Desktop: app page no longer overflows (page grid
 minmax, wrapping tabs); app ignore/unpair actions move to a ... menu; unique
 keys in App info

---
 apps/desktop/src/design.css               |  2 +-
 apps/desktop/src/i18n/en.ts               |  1 +
 apps/desktop/src/i18n/tr.ts               |  1 +
 apps/desktop/src/screens/AppView.tsx      | 20 ++++++--------------
 apps/desktop/src/screens/tabs/AppInfo.tsx |  6 +++---
 apps/desktop/src/styles.css               |  2 +-
 apps/desktop/src/ui/ContextMenu.tsx       | 13 +++++++++++++
 apps/desktop/src/ui/app-menu.ts           |  5 ++++-
 apps/desktop/src/ui/icons.tsx             |  3 ++-
 9 files changed, 32 insertions(+), 21 deletions(-)

diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index ca264d2..ad3e644 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -108,7 +108,7 @@
 .ds-app-sticky { position: sticky; top: -1px; z-index: 4; margin: 0 -28px; padding: 8px 28px; background: color-mix(in srgb, var(--bg) 82%, transparent); backdrop-filter: blur(12px); -webkit-backdrop-filter: blur(12px); }
 
 /* ---------- Tabs v2 (pill) ---------- */
-.ds-tabs { display: flex; gap: 4px; padding: 4px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); overflow-x: auto; scrollbar-width: none; width: max-content; max-width: 100%; }
+.ds-tabs { display: flex; gap: 4px; padding: 4px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); flex-wrap: wrap; width: max-content; max-width: 100%; box-sizing: border-box; }
 .ds-tabs::-webkit-scrollbar { display: none; }
 .ds-tab { all: unset; flex: none; display: inline-flex; align-items: center; gap: 7px; height: 34px; padding: 0 14px; border-radius: 10px; font-weight: 600; color: var(--muted); cursor: pointer; white-space: nowrap; transition: background var(--speed) var(--ease), color var(--speed) var(--ease), box-shadow var(--speed) var(--ease); }
 .ds-tab svg { width: 16px; height: 16px; }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 4d829c5..ba5b634 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2041,6 +2041,7 @@ export const en = {
   'cm.refreshing': "Reading {name} again",
   'cm.ignoredNoReads': "Ignored apps are not read",
   'cm.ignore': "Ignore",
+  'cm.more': "More actions",
   'cm.showIgnored': "Show ignored apps",
   'cm.copyVersion': "Copy version",
   'cm.copyBuild': "Copy build",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 9afc7ad..fd90625 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2043,6 +2043,7 @@ export const tr: Record<keyof typeof en, string> = {
   'cm.refreshing': "{name} yeniden okunuyor",
   'cm.ignoredNoReads': "Yok sayılan uygulamalar okunmaz",
   'cm.ignore': "Yok say",
+  'cm.more': "Diğer işlemler",
   'cm.showIgnored': "Yok sayılanları göster",
   'cm.copyVersion': "Sürümü kopyala",
   'cm.copyBuild': "Build'i kopyala",
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 8debb3a..50e4449 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -1,13 +1,13 @@
 // One app across both stores: header (icon, studio, ids, store state, pairing), then the tabs. A store-only app (no
 // app folder) shows its store reads (releases, health, reviews, TestFlight) read-only, with "Link a folder" and
 // "Start an app folder here" to make it a full app.
-import { useContextMenu } from '../ui/ContextMenu';
+import { useContextMenu, useMenuButton } from '../ui/ContextMenu';
 import { appMenu } from '../ui/app-menu';
 import { useShowIgnored } from '../lib/show-ignored';
 import { useState } from 'react';
 import { api, errorText } from '../api';
 import { type Key, t } from '../i18n';
-import { pairCandidates, type UnifiedApp, withIgnored, withLink, withPair, withSideIgnored, withStudio, withUnpair } from '../lib/identity';
+import { pairCandidates, type UnifiedApp, withLink, withPair, withStudio } from '../lib/identity';
 import { attention, storeNow } from '../lib/model';
 import { Hero, nextStep, Tabs } from '../ui/ds';
 import { type AppTab, TAB_ICON, TAB_KEY, tabsFor, useNav } from '../nav';
@@ -43,8 +43,8 @@ function AppControls({ app }: { app: UnifiedApp }) {
   const d = useData();
   const nav = useNav();
   const cands = pairCandidates(app, d.apps);
-  const canUnpair = !app.project && !!app.ios && !!app.android;
-  const sides = (['ios', 'android'] as const).filter(k => app[k] || app.ignoredStores.includes(k));
+  const more = useMenuButton();
+  const [showIgnored] = useShowIgnored();
   return (
     <div className="app-controls">
       <span className="small muted row" style={{ gap: 6 }}><Icon name="link" className="ic13" />{t(PAIRING[app.pairing])}</span>
@@ -65,16 +65,8 @@ function AppControls({ app }: { app: UnifiedApp }) {
             {cands.slice(0, 30).map(c => <option key={c.key} value={c.key}>{c.name} · {(c.ios ?? c.android)!.app.bundleId}</option>)}
           </select></label>
       )}
-      {canUnpair && <button className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withUnpair(o, app.ios!.key, app.android!.key)).then(() => nav.go({ screen: 'portfolio' }))}><Icon name="unlink" />{t('app.unpair')}</button>}
-      {sides.length === 2 && sides.map(k => {
-        const off = app.ignored || app.ignoredStores.includes(k);
-        const store = k === 'ios' ? 'App Store' : 'Google Play';
-        return <button key={k} className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withSideIgnored(o, app, k, !off))}
-          title={off ? t('app.unignoreSideHint', { store }) : t('app.ignoreSideHint', { store })}><Icon name={off ? 'eye' : 'eyeOff'} />{off ? t('app.unignoreSide', { store }) : t('app.ignoreSide', { store })}</button>;
-      })}
-      {app.ignored
-        ? <button className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withIgnored(o, app.ignoreKeys, false))} title={t('app.unignoreHint')}><Icon name="eye" />{t('app.unignore')}</button>
-        : <button className="btn btn-sm btn-ghost" onClick={() => d.updateOverrides(o => withIgnored(o, app.ignoreKeys, true)).then(() => nav.go({ screen: 'portfolio' }))} title={t('app.ignoreHint')}><Icon name="eyeOff" />{t('app.ignore')}</button>}
+      <span className="grow" />
+      <button className="btn btn-sm btn-ghost" {...more(() => appMenu(app, d, nav, { showIgnored }))} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" />{app.ignored || app.ignoredStores.length ? t('nav.ignored') : null}</button>
     </div>
   );
 }
diff --git a/apps/desktop/src/screens/tabs/AppInfo.tsx b/apps/desktop/src/screens/tabs/AppInfo.tsx
index be4ce7c..7e6b1c3 100644
--- a/apps/desktop/src/screens/tabs/AppInfo.tsx
+++ b/apps/desktop/src/screens/tabs/AppInfo.tsx
@@ -107,8 +107,8 @@ function DataSafety({ project, d, onDone }: { project: Project; d: DeclarationsR
                 {ds.types.map(x => (
                   <tr key={x.id}>
                     <td><div className="strong">{typeLabel(x.id)}</div><div className="small muted">{x.category}{x.optional ? ` · ${t('ai.optional')}` : ''}{x.ephemeral ? ` · ${t('ai.ephemeral')}` : ''}</div></td>
-                    <td><div className="chips">{x.collect.map(p => <Chip key={p} tone="neutral" dot={false}>{t(PURPOSE[p] ?? 'ds.functionality')}</Chip>)}</div></td>
-                    <td>{x.shared ? <div className="chips">{x.share.map(p => <Chip key={p} tone="warn" dot={false}>{t(PURPOSE[p] ?? 'ds.functionality')}</Chip>)}</div> : <span className="muted small">{t('ai.notShared')}</span>}</td>
+                    <td><div className="chips">{x.collect.map((p, i) => <Chip key={`${p}-${i}`} tone="neutral" dot={false}>{t(PURPOSE[p] ?? 'ds.functionality')}</Chip>)}</div></td>
+                    <td>{x.shared ? <div className="chips">{x.share.map((p, i) => <Chip key={`${p}-${i}`} tone="warn" dot={false}>{t(PURPOSE[p] ?? 'ds.functionality')}</Chip>)}</div> : <span className="muted small">{t('ai.notShared')}</span>}</td>
                   </tr>
                 ))}
               </tbody>
@@ -138,7 +138,7 @@ function AppPrivacy({ project, d, appId }: { project: Project; d: DeclarationsRe
             {ap.items.map(x => (
               <tr key={x.apple}>
                 <td><div className="strong">{x.apple}</div><div className="small muted">{x.category} · {x.from.map(typeLabel).join(', ')}</div></td>
-                <td><div className="chips">{x.purposes.map(p => <Chip key={p} tone={/Third-Party/.test(p) ? 'warn' : 'neutral'} dot={false}>{p}</Chip>)}</div></td>
+                <td><div className="chips">{x.purposes.map((p, i) => <Chip key={`${p}-${i}`} tone={/Third-Party/.test(p) ? 'warn' : 'neutral'} dot={false}>{p}</Chip>)}</div></td>
                 <td><Chip tone="warn" icon="question">{t('ai.ask')}</Chip></td>
                 <td><Chip tone={x.thirdParty ? 'warn' : 'outline'} icon="question">{x.thirdParty ? t('ai.askLikely') : t('ai.ask')}</Chip></td>
               </tr>
diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css
index e777cf9..8be9191 100644
--- a/apps/desktop/src/styles.css
+++ b/apps/desktop/src/styles.css
@@ -176,7 +176,7 @@ svg { flex: none; }
 .reader-line > span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 .dev-pill { font: 700 10px/1 var(--mono); letter-spacing: .06em; color: var(--warn-ink); background: var(--warn-bg); border: 1px solid color-mix(in srgb, var(--warn-solid) 45%, transparent); padding: 5px 7px; border-radius: 5px; }
 .content { flex: 1; overflow: auto; min-height: 0; scroll-behavior: smooth; }
-.page { padding: 24px 28px 48px; max-width: 1360px; margin: 0 auto; display: grid; gap: 20px; }
+.page { padding: 24px 28px 48px; max-width: 1360px; margin: 0 auto; display: grid; grid-template-columns: minmax(0, 1fr); gap: 20px; }
 @media (prefers-reduced-motion: reduce) { .content { scroll-behavior: auto; } }
 
 /* ---------- page header ---------- */
diff --git a/apps/desktop/src/ui/ContextMenu.tsx b/apps/desktop/src/ui/ContextMenu.tsx
index faab2df..e54b534 100644
--- a/apps/desktop/src/ui/ContextMenu.tsx
+++ b/apps/desktop/src/ui/ContextMenu.tsx
@@ -39,6 +39,19 @@ export function useContextMenu(): (build: () => MenuInput) => { onContextMenu: (
   }), [open]);
 }
 
+/** Props for a "..." overflow button that opens the same menu under itself (click, Enter or Space). */
+export function useMenuButton(): (build: () => MenuInput) => { onClick: (e: ReactMouseEvent) => void; 'aria-haspopup': 'menu' } {
+  const open = useContext(Ctx);
+  return useCallback((build: () => MenuInput) => ({
+    'aria-haspopup': 'menu' as const,
+    onClick: (e: ReactMouseEvent) => {
+      if (!open) return;
+      const r = (e.currentTarget as Element).getBoundingClientRect();
+      open(Math.round(r.left), Math.round(r.bottom + 4), build(), { from: e.currentTarget as Element, keyboard: e.detail === 0 });
+    },
+  }), [open]);
+}
+
 /** Copies and says so in a toast-less way (the menu closes; failures are silent like the browser's own Copy). */
 export const copyEntry = (label: string, text: string | null | undefined, icon: MenuItem['icon'] = 'copy'): MenuItem | null =>
   text ? { label, icon, onSelect: () => { void copyText(text); } } : null;
diff --git a/apps/desktop/src/ui/app-menu.ts b/apps/desktop/src/ui/app-menu.ts
index 2ac5541..7c76c80 100644
--- a/apps/desktop/src/ui/app-menu.ts
+++ b/apps/desktop/src/ui/app-menu.ts
@@ -3,7 +3,7 @@
 import { api, errorText } from '../api';
 import { t } from '../i18n';
 import { copyText } from '../lib/crash';
-import { withIgnored, withSideIgnored, type UnifiedApp } from '../lib/identity';
+import { withIgnored, withSideIgnored, withUnpair, type UnifiedApp } from '../lib/identity';
 import { setShowIgnored } from '../lib/show-ignored';
 import { type AppTab, type Nav, TAB_ICON, TAB_KEY, tabsFor } from '../nav';
 import type { Data } from '../store';
@@ -57,6 +57,9 @@ export function appMenu(app: UnifiedApp, d: Data, nav: Nav, opts: { showIgnored:
             onSelect: () => { void d.updateOverrides(o => withSideIgnored(o, app, k, !off)); } };
         }) : []),
       ] },
+    !p && !!app.ios && !!app.android && { label: t('app.unpair'), icon: 'unlink', onSelect: () => {
+      void d.updateOverrides(o => withUnpair(o, app.ios!.key, app.android!.key)).then(() => nav.go({ screen: 'portfolio' }));
+    } },
     { label: t('cm.showIgnored'), icon: 'filter', checked: opts.showIgnored, onSelect: () => setShowIgnored(!opts.showIgnored) },
   ];
 }
diff --git a/apps/desktop/src/ui/icons.tsx b/apps/desktop/src/ui/icons.tsx
index 1f52e30..f57cc74 100644
--- a/apps/desktop/src/ui/icons.tsx
+++ b/apps/desktop/src/ui/icons.tsx
@@ -26,6 +26,7 @@ import { DeviceMobileIcon } from '@phosphor-icons/react/dist/csr/DeviceMobile';
 import { DotIcon } from '@phosphor-icons/react/dist/csr/Dot';
 import { DownloadSimpleIcon } from '@phosphor-icons/react/dist/csr/DownloadSimple';
 import { ExportIcon } from '@phosphor-icons/react/dist/csr/Export';
+import { DotsThreeIcon } from '@phosphor-icons/react/dist/csr/DotsThree';
 import { EyeIcon } from '@phosphor-icons/react/dist/csr/Eye';
 import { EyeSlashIcon } from '@phosphor-icons/react/dist/csr/EyeSlash';
 import { FileTextIcon } from '@phosphor-icons/react/dist/csr/FileText';
@@ -84,7 +85,7 @@ const ICONS = {
   sun: SunIcon, terminal: TerminalWindowIcon, copy: CopyIcon, image: ImageIcon, users: UsersIcon, layers: StackIcon,
   sparkle: SparkleIcon, pause: PauseIcon, cube: CubeIcon, arrowRight: ArrowRightIcon, arrowLeft: ArrowLeftIcon, dot: DotIcon,
   phone: DeviceMobileIcon, keyboard: KeyboardIcon, database: DatabaseIcon, wand: MagicWandIcon, building: BuildingsIcon,
-  eye: EyeIcon, eyeOff: EyeSlashIcon, link: LinkIcon, unlink: LinkBreakIcon, bell: BellIcon, filter: FunnelIcon, play: PlayIcon,
+  more: DotsThreeIcon, eye: EyeIcon, eyeOff: EyeSlashIcon, link: LinkIcon, unlink: LinkBreakIcon, bell: BellIcon, filter: FunnelIcon, play: PlayIcon,
   send: PaperPlaneRightIcon, edit: PencilSimpleIcon, upload: UploadSimpleIcon, sliders: SlidersHorizontalIcon,
   rotate: ArrowCounterClockwiseIcon, cloud: CloudIcon, coins: CoinsIcon, chart: TrendUpIcon, flask: FlaskIcon, grid: GridFourIcon,
   clipboard: ClipboardTextIcon, share: ExportIcon, lock: LockIcon, question: QuestionIcon,

From 7c769c18f419494bc799b0086199d43e19fcb133 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:18:03 +0800
Subject: [PATCH 064/255] Desktop: folders keep claiming their store records
 before the config read returns; a store app with a folder's id is never
 listed twice

---
 apps/desktop/src/store.tsx          | 11 +++++++++--
 apps/desktop/tests/identity.test.ts | 15 +++++++++++++++
 cli/lib/identity.ts                 | 14 ++++++++++++++
 3 files changed, 38 insertions(+), 2 deletions(-)

diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index 845e577..711dbf5 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -224,11 +224,18 @@ export function DataProvider({ children }: { children: ReactNode }) {
     setStoreApps(Object.fromEntries((Array.isArray(s) ? s : []).filter(x => x && typeof x.account === 'string').map(x => [x.account, x.entry ?? null])));
   }, []);
 
+  // the last config summary seen per folder: a folder whose read has not come back yet (start) or failed this time keeps
+  // claiming its store records, so its App Store / Play entries never show up a second time as store-only apps
+  const lastSummary = useRef(new Map<string, NonNullable<PortfolioResult['apps'][number]['summary']>>());
   const apps = useMemo(() => buildApps({
     projects, accounts, overrides,
-    summaryOf: p => portfolio?.apps.find(a => a.project === p.path)?.summary ?? liveRef.current?.value.apps.find(a => a.project === p.path)?.summary,
+    summaryOf: p => {
+      const fresh = portfolio?.apps.find(a => a.project === p.path)?.summary ?? live?.value.apps.find(a => a.project === p.path)?.summary;
+      if (fresh) lastSummary.current.set(p.path, fresh);
+      return fresh ?? lastSummary.current.get(p.path);
+    },
     storeApps: Object.entries(storeApps).filter(([, e]) => !!e).map(([account, e]) => ({ account, apps: e!.value.apps })),
-  }), [projects, accounts, overrides, portfolio, storeApps]);
+  }), [projects, accounts, overrides, portfolio, live, storeApps]);
   const appsRef = useRef(apps);
   appsRef.current = apps;
 
diff --git a/apps/desktop/tests/identity.test.ts b/apps/desktop/tests/identity.test.ts
index fc0bda4..b640586 100644
--- a/apps/desktop/tests/identity.test.ts
+++ b/apps/desktop/tests/identity.test.ts
@@ -53,6 +53,21 @@ describe('identity pairing', () => {
     const apps2 = buildApps({ projects: [prism], accounts, storeApps: twin, overrides: NO_OVERRIDES, summaryOf: () => summary('com.example.prism', 'com.example.prism') });
     expect(apps2[0]!.ios?.account).toBe(A1);
   });
+  test('a folder with a config summary claims its iOS and Android records; ignore flags do not break it', () => {
+    for (const o of [NO_OVERRIDES, withIgnored(NO_OVERRIDES, ['project:p1:ios'], true), withIgnored(NO_OVERRIDES, ['project:p1:android'], true)]) {
+      const apps = build(o);
+      expect(apps.filter(a => a.ios?.app.bundleId === 'com.example.prism' || a.android?.app.id === 'com.example.prism').length).toBeLessThanOrEqual(1);
+      expect(apps.filter(a => a.name === 'Prism' && !a.project)).toEqual([]);
+    }
+  });
+  test('without a summary the folder claims nothing (the start-up race); a store app of a folder bundle id is never shown separately', () => {
+    const none = buildApps({ projects: [prism], accounts, storeApps, overrides: NO_OVERRIDES, summaryOf: () => null });
+    expect(none.filter(a => !a.project && a.name === 'Prism')).toHaveLength(1);
+    // guard: the folder is linked to other records, its summary's ids still hide the duplicates
+    const linked = { ...NO_OVERRIDES, links: [{ key: `ios:${A1}:102`, project: 'p1' }] };
+    const apps = build(linked);
+    expect(apps.filter(a => !a.project && (a.ios?.app.bundleId === 'com.example.prism' || a.android?.app.id === 'com.example.prism'))).toEqual([]);
+  });
   test('unpair blocks the automatic pair; manual pair beats it', () => {
     const o1 = withUnpair(NO_OVERRIDES, `ios:${A1}:102`, `android:${P1}:com.example.orbit`);
     const apps1 = build(o1);
diff --git a/cli/lib/identity.ts b/cli/lib/identity.ts
index 192e718..60fa2ff 100644
--- a/cli/lib/identity.ts
+++ b/cli/lib/identity.ts
@@ -134,6 +134,20 @@ export function buildApps<P extends IdProject>(i: BuildInput<P>): UnifiedApp<P>[
     });
   }
 
+  // guard: a store app with the same App Store id / bundle id / package name as a folder is that folder's record, never a
+  // second entry (the folder could not take it above, e.g. it is linked elsewhere); it is dropped, not shown separately
+  const folderIds = new Set<string>();
+  for (const p of i.projects) {
+    const s = i.summaryOf(p);
+    if (s?.apple?.appId) folderIds.add(`ios:id:${s.apple.appId}`);
+    if (s?.apple?.bundleId) folderIds.add(`ios:bundle:${s.apple.bundleId}`);
+    if (s?.play?.packageName) folderIds.add(`android:${s.play.packageName}`);
+  }
+  for (const r of refs) {
+    if (used.has(r.key)) continue;
+    if (r.store === 'ios' ? folderIds.has(`ios:id:${r.app.id}`) || folderIds.has(`ios:bundle:${r.app.bundleId}`) : folderIds.has(`android:${r.app.id}`)) used.add(r.key);
+  }
+
   // 2. pairs among the remaining store apps
   const freeIos = () => refs.filter(r => r.store === 'ios' && !used.has(r.key));
   const freeAndroid = () => refs.filter(r => r.store === 'android' && !used.has(r.key));

From 4a74989a9536649da1a3a7c4c36a8a3757c5c3a0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:20:35 +0800
Subject: [PATCH 065/255] Open in Google Play Console deep-links the app: Play
 developer id per credential profile (accounts play-developer, desktop
 Accounts), shared playAppUrl builder for desktop, CLI and watch; developer
 chooser instead of the console root

---
 apps/desktop/src-tauri/capabilities/main.json |  1 +
 .../account_set_play_developer.toml           | 11 ++++
 apps/desktop/src-tauri/src/accounts.rs        |  4 ++
 apps/desktop/src-tauri/src/commands.rs        | 25 ++++++++-
 apps/desktop/src-tauri/src/commands_list.rs   |  1 +
 apps/desktop/src-tauri/src/lib.rs             |  1 +
 apps/desktop/src-tauri/src/profiles.rs        | 25 ++++++++-
 apps/desktop/src-tauri/tests/accounts.rs      |  2 +-
 apps/desktop/src-tauri/tests/machine.rs       | 18 +++++-
 apps/desktop/src/api.ts                       |  3 +-
 apps/desktop/src/dev/fixtures.ts              |  1 +
 apps/desktop/src/i18n/en.ts                   |  4 ++
 apps/desktop/src/i18n/tr.ts                   |  4 ++
 apps/desktop/src/screens/Accounts.tsx         | 10 +++-
 apps/desktop/src/screens/AppView.tsx          |  5 +-
 apps/desktop/src/screens/tabs/Catalog.tsx     |  4 +-
 apps/desktop/src/screens/tabs/Growth.tsx      |  6 +-
 apps/desktop/src/screens/tabs/Submit.tsx      |  5 +-
 apps/desktop/src/ui/app-menu.ts               | 19 +++++--
 apps/desktop/tests/play-link.test.ts          | 19 +++++++
 cli/accounts.ts                               | 19 ++++++-
 cli/commands.ts                               |  2 +-
 cli/inspect.ts                                |  3 +-
 cli/lib/accounts.ts                           | 23 ++++++--
 cli/lib/config.ts                             |  4 +-
 cli/lib/console-links.ts                      | 21 ++++++-
 cli/lib/credentials.ts                        |  2 +-
 cli/lib/desktop-protocol.ts                   |  5 +-
 cli/lib/play-ids.ts                           | 43 +++++++++++++++
 cli/lib/portfolio.ts                          |  2 +-
 cli/watch.ts                                  |  2 +-
 tests/console-links.test.ts                   |  2 +-
 tests/play-ids.test.ts                        | 55 +++++++++++++++++++
 33 files changed, 311 insertions(+), 40 deletions(-)
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/account_set_play_developer.toml
 create mode 100644 apps/desktop/tests/play-link.test.ts
 create mode 100644 cli/lib/play-ids.ts
 create mode 100644 tests/play-ids.test.ts

diff --git a/apps/desktop/src-tauri/capabilities/main.json b/apps/desktop/src-tauri/capabilities/main.json
index 3d1bd60..cd3e8f6 100644
--- a/apps/desktop/src-tauri/capabilities/main.json
+++ b/apps/desktop/src-tauri/capabilities/main.json
@@ -35,6 +35,7 @@
     "allow-studio-remove",
     "allow-studio-logo",
     "allow-account-update",
+    "allow-account-set-play-developer",
     "allow-account-check",
     "allow-store-apps-refresh",
     "allow-store-apps-cached",
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/account_set_play_developer.toml b/apps/desktop/src-tauri/permissions/autogenerated/account_set_play_developer.toml
new file mode 100644
index 0000000..b80223a
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/account_set_play_developer.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-account-set-play-developer"
+description = "Enables the account_set_play_developer command without any pre-configured scope."
+commands.allow = ["account_set_play_developer"]
+
+[[permission]]
+identifier = "deny-account-set-play-developer"
+description = "Denies the account_set_play_developer command without any pre-configured scope."
+commands.deny = ["account_set_play_developer"]
diff --git a/apps/desktop/src-tauri/src/accounts.rs b/apps/desktop/src-tauri/src/accounts.rs
index f842af7..faf7b9c 100644
--- a/apps/desktop/src-tauri/src/accounts.rs
+++ b/apps/desktop/src-tauri/src/accounts.rs
@@ -31,6 +31,10 @@ pub struct Account {
     /// None only for an account of an earlier version whose keychain entry has not moved yet.
     #[serde(default)]
     pub profile: Option<String>,
+    /// Play only: the developer account id (PLAY_DEVELOPER_ID in its credential profile, shared with the CLI), for
+    /// Play Console deep links. Read from the profile on every list; never a secret.
+    #[serde(default, rename = "developerId", skip_serializing_if = "Option::is_none")]
+    pub developer_id: Option<String>,
 }
 
 /// The keychain entry of one account (JSON).
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index b295112..aabda11 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -803,7 +803,11 @@ pub fn project_set_accounts(window: WebviewWindow, state: State<'_, AppState>, i
 pub fn accounts_list(window: WebviewWindow, state: State<'_, AppState>) -> Res<Vec<Account>> {
     guard(&window)?;
     sync_machine(&state)?;
-    Ok(saved(&state)?.accounts.clone())
+    let mut out = saved(&state)?.accounts.clone();
+    for a in out.iter_mut().filter(|a| a.kind == accounts::AccountKind::Play) {
+        a.developer_id = a.profile.as_deref().and_then(|p| state.profiles.play_developer_id(p));
+    }
+    Ok(out)
 }
 
 fn check_studio(state: &AppState, studio: &Option<String>) -> Res<()> {
@@ -834,7 +838,7 @@ fn add_account(state: &AppState, label: &str, secret: Secret, studio: Option<Str
     }
     let id = profiles::account_id(secret.kind(), &profile);
     let id = if st.accounts.iter().any(|a| a.id == id) { store::new_id()? } else { id };
-    let acc = Account { id, label, kind: secret.kind(), created: store::now_iso(), studio, profile: Some(profile) };
+    let acc = Account { id, label, kind: secret.kind(), created: store::now_iso(), studio, profile: Some(profile), developer_id: None };
     st.accounts.push(acc.clone());
     persist(state, &st)?;
     Ok(acc)
@@ -1135,6 +1139,23 @@ pub fn account_update(window: WebviewWindow, state: State<'_, AppState>, id: Str
     Ok(out)
 }
 
+/// Sets or clears the Play developer account id of a Play account (PLAY_DEVELOPER_ID in its credential profile, the
+/// same field `storebound accounts play-developer` writes): Play Console links then open each app's own page.
+#[tauri::command]
+pub fn account_set_play_developer(window: WebviewWindow, state: State<'_, AppState>, id: String, developer_id: Option<String>) -> Res<Account> {
+    guard(&window)?;
+    let st = saved(&state)?;
+    let mut a = st.accounts.iter().find(|a| a.id == id).cloned().ok_or_else(|| Fail::host("unknown account"))?;
+    if a.kind != accounts::AccountKind::Play {
+        return Err(Fail::host("a Play account only"));
+    }
+    let profile = a.profile.clone().ok_or_else(|| Fail::host("this account has no credential profile yet"))?;
+    let v = developer_id.as_deref().map(str::trim).filter(|v| !v.is_empty());
+    state.profiles.set_play_developer_id(&profile, v).map_err(Fail::host)?;
+    a.developer_id = state.profiles.play_developer_id(&profile);
+    Ok(a)
+}
+
 /// Does the account's key work, and can it see apps (sidecar `account.check`). Not cached: it is a live answer.
 #[tauri::command]
 pub async fn account_check(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>, id: String, job: Option<String>) -> Res<Value> {
diff --git a/apps/desktop/src-tauri/src/commands_list.rs b/apps/desktop/src-tauri/src/commands_list.rs
index abb8da4..4c2b4cf 100644
--- a/apps/desktop/src-tauri/src/commands_list.rs
+++ b/apps/desktop/src-tauri/src/commands_list.rs
@@ -27,6 +27,7 @@ pub const COMMANDS: &[&str] = &[
     "studio_remove",
     "studio_logo",
     "account_update",
+    "account_set_play_developer",
     "account_check",
     "store_apps_refresh",
     "store_apps_cached",
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index f6581b7..4b405a1 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -344,6 +344,7 @@ pub fn run() {
             commands::studio_remove,
             commands::studio_logo,
             commands::account_update,
+            commands::account_set_play_developer,
             commands::account_check,
             commands::store_apps_refresh,
             commands::store_apps_cached,
diff --git a/apps/desktop/src-tauri/src/profiles.rs b/apps/desktop/src-tauri/src/profiles.rs
index 350b66f..072484f 100644
--- a/apps/desktop/src-tauri/src/profiles.rs
+++ b/apps/desktop/src-tauri/src/profiles.rs
@@ -56,6 +56,11 @@ pub fn slug(label: &str) -> String {
 
 /// The CLI workspace's account id for a profile's store: sha256("<apple|play>:<profile>"), 16 hex (cli/lib/workspace.ts
 /// accountId), so the same account has the same id in `storebound.workspace.json` and in the app.
+/// A Play developer account id: 1-25 digits.
+pub fn valid_developer_id(v: &str) -> bool {
+    !v.is_empty() && v.len() <= 25 && v.bytes().all(|b| b.is_ascii_digit())
+}
+
 pub fn account_id(kind: AccountKind, profile: &str) -> String {
     let store = match kind {
         AccountKind::Apple => "apple",
@@ -139,6 +144,24 @@ impl ProfileStore {
         out
     }
 
+    /// The Play developer account id a profile keeps (PLAY_DEVELOPER_ID, digits), if any.
+    pub fn play_developer_id(&self, name: &str) -> Option<String> {
+        self.read(name).ok().and_then(|m| str_of(&m, "PLAY_DEVELOPER_ID").map(str::trim).filter(|v| valid_developer_id(v)).map(str::to_string))
+    }
+
+    /// Sets or clears (None) PLAY_DEVELOPER_ID in an existing profile; every other field stays.
+    pub fn set_play_developer_id(&self, name: &str, id: Option<&str>) -> Result<(), String> {
+        let mut m = self.read(name)?;
+        match id {
+            Some(v) if valid_developer_id(v) => { m.insert("PLAY_DEVELOPER_ID".into(), Value::String(v.to_string())); }
+            Some(_) => return Err("the Play developer id is the digits in play.google.com/console/u/0/developers/<id>".into()),
+            None => { m.remove("PLAY_DEVELOPER_ID"); }
+        }
+        let text = serde_json::to_string_pretty(&Value::Object(m)).map_err(|e| e.to_string())? + "
+";
+        write_private(&self.dir.join(format!("{name}.json")), text.as_bytes())
+    }
+
     /// The label the profile carries, if any (written by the app; the CLI ignores it).
     pub fn label(&self, name: &str) -> Option<String> {
         self.read(name).ok().and_then(|m| str_of(&m, "label").map(str::to_string))
@@ -367,7 +390,7 @@ pub fn sync(accounts: &mut Vec<Account>, store: &ProfileStore, legacy: &dyn Secr
             if accounts.iter().any(|a| a.id == id) {
                 continue;
             }
-            accounts.push(Account { id: id.clone(), label: store.label(&name).unwrap_or_else(|| name.clone()), kind, created: now.to_string(), studio: None, profile: Some(name.clone()) });
+            accounts.push(Account { id: id.clone(), label: store.label(&name).unwrap_or_else(|| name.clone()), kind, created: now.to_string(), studio: None, profile: Some(name.clone()), developer_id: None });
             r.added.push(format!("{id} ({name})"));
         }
     }
diff --git a/apps/desktop/src-tauri/tests/accounts.rs b/apps/desktop/src-tauri/tests/accounts.rs
index de742b5..7bcdca6 100644
--- a/apps/desktop/src-tauri/tests/accounts.rs
+++ b/apps/desktop/src-tauri/tests/accounts.rs
@@ -9,7 +9,7 @@ const FAKE_PEM: &str = "-----BEGIN PRIVATE KEY-----\nnot-a-real-key\n-----END PR
 
 #[test]
 fn shown_metadata_carries_no_secret() {
-    let a = Account { id: "abc".into(), label: "Studio Play".into(), kind: AccountKind::Play, created: "2026-10-10T00:00:00Z".into(), studio: Some("s1".into()), profile: Some("studio".into()) };
+    let a = Account { id: "abc".into(), label: "Studio Play".into(), kind: AccountKind::Play, created: "2026-10-10T00:00:00Z".into(), studio: Some("s1".into()), profile: Some("studio".into()), developer_id: None };
     let v = serde_json::to_value(&a).unwrap();
     assert_eq!(v.as_object().unwrap().keys().cloned().collect::<Vec<_>>(), vec!["created", "id", "kind", "label", "profile", "studio"]);
     assert_eq!(v["kind"], "play");
diff --git a/apps/desktop/src-tauri/tests/machine.rs b/apps/desktop/src-tauri/tests/machine.rs
index 5e58f27..8fc1076 100644
--- a/apps/desktop/src-tauri/tests/machine.rs
+++ b/apps/desktop/src-tauri/tests/machine.rs
@@ -38,7 +38,7 @@ impl SecretStore for MapStore {
 }
 
 fn account(id: &str, label: &str, kind: AccountKind, profile: Option<&str>) -> Account {
-    Account { id: id.into(), label: label.into(), kind, created: "2026-10-01T00:00:00Z".into(), studio: Some("s1".into()), profile: profile.map(str::to_string) }
+    Account { id: id.into(), label: label.into(), kind, created: "2026-10-01T00:00:00Z".into(), studio: Some("s1".into()), profile: profile.map(str::to_string), developer_id: None }
 }
 
 #[test]
@@ -244,3 +244,19 @@ fn ignored_flags_travel_between_the_registry_and_the_apps_ignore_keys() {
     let doc: serde_json::Value = serde_json::from_str(&std::fs::read_to_string(&file).unwrap()).unwrap();
     assert_eq!(doc["projects"][1]["ignored"], json!(["apple"]));
 }
+
+#[test]
+fn a_play_developer_id_is_kept_in_the_profile_for_the_cli() {
+    let dir = tempfile::tempdir().unwrap();
+    let store = ProfileStore::new(dir.path().join("credentials"), None);
+    store.save("studio", "Studio", &Secret::Play { service_account: sa("bot@example.com") }).unwrap();
+    assert_eq!(store.play_developer_id("studio"), None);
+    store.set_play_developer_id("studio", Some("5550000000000000001")).unwrap();
+    assert_eq!(store.play_developer_id("studio").as_deref(), Some("5550000000000000001"));
+    let m = store.read("studio").unwrap();
+    assert_eq!(m.get("PLAY_DEVELOPER_ID").and_then(|v| v.as_str()), Some("5550000000000000001"));
+    assert!(m.contains_key("PLAY_SERVICE_ACCOUNT"));
+    assert!(store.set_play_developer_id("studio", Some("abc")).is_err());
+    store.set_play_developer_id("studio", None).unwrap();
+    assert_eq!(store.play_developer_id("studio"), None);
+}
diff --git a/apps/desktop/src/api.ts b/apps/desktop/src/api.ts
index a431266..343a570 100644
--- a/apps/desktop/src/api.ts
+++ b/apps/desktop/src/api.ts
@@ -25,7 +25,7 @@ export interface SidecarStatus { running: boolean; version: string; protocol: st
 /** An app folder (one storebound.config.ts = one app on iOS and / or Android) and the accounts it uses. */
 export interface Project { id: string; path: string; name: string; playAccount: string | null; appleAccount: string | null; added: string; /** The folder is gone (moved, renamed, deleted): shown as "Folder not found". */ missing?: boolean; /** The storebound version the folder's package.json pins, when it is not this app's. */ storeboundPin?: string | null }
 export type AccountKind = 'play' | 'apple';
-export interface Account { id: string; label: string; kind: AccountKind; created: string; studio?: string | null; /** The machine profile that holds the key (~/.storebound, shared with the CLI); null while an old keychain key has not moved. */ profile?: string | null }
+export interface Account { id: string; label: string; kind: AccountKind; created: string; studio?: string | null; /** The machine profile that holds the key (~/.storebound, shared with the CLI); null while an old keychain key has not moved. */ profile?: string | null; /** Play: the developer account id (PLAY_DEVELOPER_ID in the profile) for Play Console deep links. */ developerId?: string | null }
 export const STUDIO_COLORS = ['indigo', 'violet', 'rose', 'amber', 'emerald', 'teal', 'sky', 'slate'] as const;
 export type StudioColor = (typeof STUDIO_COLORS)[number];
 /** A user-named group of store accounts (and so of apps). */
@@ -110,6 +110,7 @@ export const api = {
   addAppleAccount: (label: string, keyId: string, issuerId: string, studio: string | null = null) => invoke<Account | null>('account_add_apple', { label, keyId, issuerId, studio }),
   removeAccount: (id: string) => invoke<void>('account_remove', { id }),
   updateAccount: (id: string, label: string, studio: string | null) => invoke<Account>('account_update', { id, label, studio }),
+  setPlayDeveloper: (id: string, developerId: string | null) => invoke<Account>('account_set_play_developer', { id, developerId }),
   /** Does the key work, can it see apps (live, not cached). */
   checkAccount: (id: string, job?: string) => invoke<AccountCheck>('account_check', { id, job: job ?? null }),
   /** Reads the apps an account can see from its store and keeps the list. */
diff --git a/apps/desktop/src/dev/fixtures.ts b/apps/desktop/src/dev/fixtures.ts
index 0b60aa7..003694b 100644
--- a/apps/desktop/src/dev/fixtures.ts
+++ b/apps/desktop/src/dev/fixtures.ts
@@ -565,6 +565,7 @@ async function answer(cmd: string, a: Record<string, unknown>): Promise<unknown>
     }
     case 'studio_remove': studios = studios.filter(s => s.id !== a.id); accounts = accounts.map(x => (x.studio === a.id ? { ...x, studio: null } : x)); return null;
     case 'studio_logo': return null;
+    case 'account_set_play_developer': { const x = accounts.find(y => y.id === a.id)!; const v = (a.developerId as string | null) ?? null; if (v && !/^\d{1,25}$/.test(v)) throw new Error('the Play developer id is digits'); (x as { developerId?: string | null }).developerId = v; return x; }
     case 'account_update': { const x = accounts.find(y => y.id === a.id)!; x.label = a.label as string; x.studio = (a.studio as string | null) ?? null; return x; }
     case 'overrides_set': overrides = a.overrides as Overrides; return overrides;
     case 'settings_set': settings = a.settings as Settings; return settings;
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index ba5b634..6beb640 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2041,6 +2041,10 @@ export const en = {
   'cm.refreshing': "Reading {name} again",
   'cm.ignoredNoReads': "Ignored apps are not read",
   'cm.ignore': "Ignore",
+  'acct.devId': 'Play developer id {id}',
+  'acct.noDevId': 'no Play developer id',
+  'acct.devIdLabel': 'Play developer account id',
+  'acct.devIdHint': "The digits in play.google.com/console/u/0/developers/<id>. With it, Play Console links open each app's own page; the CLI uses it too.",
   'cm.more': "More actions",
   'cm.showIgnored': "Show ignored apps",
   'cm.copyVersion': "Copy version",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index fd90625..587c795 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2043,6 +2043,10 @@ export const tr: Record<keyof typeof en, string> = {
   'cm.refreshing': "{name} yeniden okunuyor",
   'cm.ignoredNoReads': "Yok sayılan uygulamalar okunmaz",
   'cm.ignore': "Yok say",
+  'acct.devId': 'Play geliştirici kimliği {id}',
+  'acct.noDevId': 'Play geliştirici kimliği yok',
+  'acct.devIdLabel': 'Play geliştirici hesabı kimliği',
+  'acct.devIdHint': 'play.google.com/console/u/0/developers/<id> içindeki rakamlar. Girilince Play Console bağlantıları her uygulamanın kendi sayfasını açar; CLI de kullanır.',
   'cm.more': "Diğer işlemler",
   'cm.showIgnored': "Yok sayılanları göster",
   'cm.copyVersion': "Sürümü kopyala",
diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
index 6d4a244..c0af2d0 100644
--- a/apps/desktop/src/screens/Accounts.tsx
+++ b/apps/desktop/src/screens/Accounts.tsx
@@ -46,6 +46,8 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
   const [edit, setEdit] = useState(false);
   const [label, setLabel] = useState(a.label);
   const [studio, setStudio] = useState(a.studio ?? '');
+  const [dev, setDev] = useState(a.developerId ?? '');
+  const devOk = !dev.trim() || /^\d{1,25}$/.test(dev.trim());
   const h = d.accountHealth[a.id];
   const list = d.storeApps[a.id];
   const ignored = d.overrides.ignored.includes(`account:${a.id}`);
@@ -54,7 +56,7 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
     setBusy(key); onError(null);
     try { await fn(); } catch (e) { onError(errorText(e)); } finally { setBusy(null); }
   };
-  const save = (e: FormEvent) => { e.preventDefault(); run(`ed-${a.id}`, async () => { await api.updateAccount(a.id, label, studio || null); await d.reload(); setEdit(false); }); };
+  const save = (e: FormEvent) => { e.preventDefault(); run(`ed-${a.id}`, async () => { await api.updateAccount(a.id, label, studio || null); if (a.kind === 'play' && a.profile && dev.trim() !== (a.developerId ?? '')) await api.setPlayDeveloper(a.id, dev.trim() || null); await d.reload(); setEdit(false); }); };
   const check = h?.check;
   const cm = useContextMenu();
   return (
@@ -81,6 +83,7 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
             {' · '}{a.profile ? <span className="mono-id selectable" title="~/.storebound">{t('acct.profile', { name: a.profile })}</span> : t('acct.noProfile')}
             {' · '}{list ? t('acct.appsRead', { count: list.value.apps.length, when: ago(list.at) }) : t('acct.notImported')}
             {used ? ` · ${t('acct.folders', { count: used })}` : ''}
+            {a.kind === 'play' && (a.developerId ? <> · <span className="mono-id selectable" title={t('acct.devIdHint')}>{t('acct.devId', { id: a.developerId })}</span></> : <> · <span title={t('acct.devIdHint')}>{t('acct.noDevId')}</span></>)}
             {check?.principal ? <> · <span className="mono-id selectable">{check.principal}</span></> : null}
           </div>
         </div>
@@ -100,7 +103,10 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
               <option value="">{t('studio.none')}</option>
               {d.studios.map(s => <option key={s.id} value={s.id}>{s.name}</option>)}
             </select></div>
-          <div className="actions"><button className="btn btn-primary btn-sm" type="submit" disabled={!label.trim() || !!busy}><Icon name="check" />{t('common.save')}</button><button type="button" className="btn btn-sm btn-ghost" onClick={() => setEdit(false)}>{t('common.cancel')}</button></div>
+          {a.kind === 'play' && a.profile && <div className="field"><label htmlFor={`ad-${a.id}`}>{t('acct.devIdLabel')}</label>
+            <input id={`ad-${a.id}`} className="input mono" inputMode="numeric" value={dev} onChange={e => setDev(e.target.value)} placeholder="5550000000000000001" aria-invalid={!devOk} aria-describedby={`adh-${a.id}`} />
+            <small id={`adh-${a.id}`} className="muted">{t('acct.devIdHint')}</small></div>}
+          <div className="actions"><button className="btn btn-primary btn-sm" type="submit" disabled={!label.trim() || !devOk || !!busy}><Icon name="check" />{t('common.save')}</button><button type="button" className="btn btn-sm btn-ghost" onClick={() => setEdit(false)}>{t('common.cancel')}</button></div>
         </form>
       )}
       {check && check.status !== 'ok' && check.fix && (
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 50e4449..19a047c 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -2,7 +2,7 @@
 // app folder) shows its store reads (releases, health, reviews, TestFlight) read-only, with "Link a folder" and
 // "Start an app folder here" to make it a full app.
 import { useContextMenu, useMenuButton } from '../ui/ContextMenu';
-import { appMenu } from '../ui/app-menu';
+import { appMenu, playUrlFor } from '../ui/app-menu';
 import { useShowIgnored } from '../lib/show-ignored';
 import { useState } from 'react';
 import { api, errorText } from '../api';
@@ -34,7 +34,6 @@ import { StoreListingEditor } from './editors/StoreListingEditor';
 import { useEdits } from '../ui/Editor';
 
 export const ascUrl = (appId: string | null | undefined): string => (appId ? `https://appstoreconnect.apple.com/apps/${encodeURIComponent(appId)}/distribution` : 'https://appstoreconnect.apple.com/apps');
-export const PLAY_CONSOLE = 'https://play.google.com/console/';
 
 const PAIRING: Record<UnifiedApp['pairing'], Key> = { folder: 'pair.folder', manual: 'pair.manual', id: 'pair.id', close: 'pair.close', name: 'pair.name', single: 'pair.single' };
 
@@ -135,7 +134,7 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
         </>}
         links={(ios || android) && <>
           {ios && <button className="btn btn-sm btn-ghost" onClick={() => open(ascUrl(ios.ascAppId))} title={t('app.consoleHint')}><Icon name="external" />App Store Connect</button>}
-          {android && <button className="btn btn-sm btn-ghost" onClick={() => open(PLAY_CONSOLE)} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
+          {android && <button className="btn btn-sm btn-ghost" onClick={() => open(playUrlFor(d, app))} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
         </>}
         all={all} ios={!!ios} android={!!android} next={l?.release.next?.version ?? null}
         cta={nextStep({ project: !!app.project, att, all, next: l?.release.next?.version ?? null })} onCta={setTab} />
diff --git a/apps/desktop/src/screens/tabs/Catalog.tsx b/apps/desktop/src/screens/tabs/Catalog.tsx
index 27b38cf..c028a26 100644
--- a/apps/desktop/src/screens/tabs/Catalog.tsx
+++ b/apps/desktop/src/screens/tabs/Catalog.tsx
@@ -1,7 +1,7 @@
 // Catalog: products and subscriptions defined once in the config against both stores (catalog diff): a parity
 // matrix (present, mismatched, missing, not sold there, not read), and price gaps between the stores per region.
 import { useContextMenu } from '../../ui/ContextMenu';
-import { copyToast, projectConsoles } from '../../ui/app-menu';
+import { copyToast, playUrlFor, projectConsoles } from '../../ui/app-menu';
 import '../../styles/catalog.css';
 import type { Project } from '../../api';
 import { type Key, t } from '../../i18n';
@@ -110,7 +110,7 @@ export function CatalogTab({ project }: { project: Project }) {
                 { label: t('cm.copyProductId'), icon: 'copy', shortcut: r.id, onSelect: () => copyToast(d, r.id) },
                 { label: t('cm.showPrices'), icon: 'coins', onSelect: () => nav.go({ screen: 'app', appId: project.id, tab: 'prices' }) },
                 'sep',
-                ...projectConsoles(d, plat?.ios?.ascAppId, !!plat?.ios, !!plat?.android),
+                ...projectConsoles(d, plat?.ios?.ascAppId, !!plat?.ios, !!plat?.android, playUrlFor(d, d.appByKey(project.id))),
               ])}>
                 <div className="cat-card-h">
                   <span className="cat-ic" aria-hidden="true"><Icon name={r.kind === 'subscription' ? 'refresh' : 'tag'} /></span>
diff --git a/apps/desktop/src/screens/tabs/Growth.tsx b/apps/desktop/src/screens/tabs/Growth.tsx
index e4bbcc9..ed91df8 100644
--- a/apps/desktop/src/screens/tabs/Growth.tsx
+++ b/apps/desktop/src/screens/tabs/Growth.tsx
@@ -20,7 +20,8 @@ import '../../styles/growth.css';
 import { LineChart } from '../../ui/LineChart';
 import { RankChart } from '../../ui/RankChart';
 import { WriteButton } from '../../ui/WriteButton';
-import { ascUrl, PLAY_CONSOLE } from '../AppView';
+import { ascUrl } from '../AppView';
+import { playUrlFor } from '../../ui/app-menu';
 
 const DONE = ['COMPLETED', 'STOPPED'];
 const started = (x: PpoTest) => !!x.startDate && !x.endDate && !DONE.includes(x.state);
@@ -243,10 +244,11 @@ function Experiments({ app }: { app: UnifiedApp }) {
 }
 
 function PlayExperiments({ app }: { app: UnifiedApp }) {
+  const d = useData();
   const nav = useNav();
   return (
     <Section title={t('gr.playExp')} icon="flask" sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store="android" className="ic13" />{t('gr.playExpSub')}</span>}
-      actions={<button className="btn btn-sm" onClick={() => api.openExternal(PLAY_CONSOLE).catch(() => {})}><Icon name="external" />Play Console</button>}>
+      actions={<button className="btn btn-sm" onClick={() => api.openExternal(playUrlFor(d, app)).catch(() => {})}><Icon name="external" />Play Console</button>}>
       <div className="gr-body">
         <p className="gr-text">{t('gr.playExpText')}</p>
         {app.project && <div><button className="btn btn-sm" onClick={() => nav.go({ screen: 'app', appId: app.key, tab: 'art' })}><Icon name="grid" />{t('gr.seeVariants')}</button></div>}
diff --git a/apps/desktop/src/screens/tabs/Submit.tsx b/apps/desktop/src/screens/tabs/Submit.tsx
index 42adafb..af7b8de 100644
--- a/apps/desktop/src/screens/tabs/Submit.tsx
+++ b/apps/desktop/src/screens/tabs/Submit.tsx
@@ -19,7 +19,8 @@ import { Icon, StoreGlyph } from '../../ui/icons';
 import { Chip, ErrorNotice, Notice, ReadControl, Seg, Skeleton } from '../../ui/kit';
 import { EmptyState, StatusPill } from '../../ui/ds';
 import { OwnerAction } from '../../ui/OwnerAction';
-import { ascUrl, PLAY_CONSOLE } from '../AppView';
+import { ascUrl } from '../AppView';
+import { playUrlFor } from '../../ui/app-menu';
 import '../../styles/submit.css';
 
 const SUB_KIND: Record<SubmissionKind, ['ok' | 'warn' | 'bad' | 'info' | 'neutral', Key]> = {
@@ -219,7 +220,7 @@ export function PlayProductionCard({ app, project }: { app: UnifiedApp; project:
         sub={r.data ? (r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })) : r.loading ? t('read.waiting') : t('sub.playSub')}
         actions={<>
           <ReadControl r={r} label={t('sub.read')} />
-          <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal(PLAY_CONSOLE).catch(() => {})}><Icon name="external" />Play Console</button>
+          <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal(playUrlFor(d, app)).catch(() => {})}><Icon name="external" />Play Console</button>
         </>} />
       <div className="sub-body">
         {r.error && <ErrorNotice error={r.error} keep={!!r.data} />}
diff --git a/apps/desktop/src/ui/app-menu.ts b/apps/desktop/src/ui/app-menu.ts
index 7c76c80..d82ba47 100644
--- a/apps/desktop/src/ui/app-menu.ts
+++ b/apps/desktop/src/ui/app-menu.ts
@@ -8,9 +8,18 @@ import { setShowIgnored } from '../lib/show-ignored';
 import { type AppTab, type Nav, TAB_ICON, TAB_KEY, tabsFor } from '../nav';
 import type { Data } from '../store';
 import type { MenuInput, MenuItem } from './menu-logic';
+import { pickConsoleId, playAppUrl } from '../../../../cli/lib/console-links';
 
 export const ASC_APP = (id: string | null | undefined): string => (id ? `https://appstoreconnect.apple.com/apps/${encodeURIComponent(id)}/distribution` : 'https://appstoreconnect.apple.com/apps');
-export const PLAY_HOME = 'https://play.google.com/console/';
+/** The Play Console page of one app (console-links playAppUrl, shared with the CLI and watch): the app's dashboard when
+ *  the developer id (status from the config / profile, else the app's Play account) and the console app id are known,
+ *  else the developer's app list, else the developer chooser. Never the bare console root. */
+export function playUrlFor(d: Data, app: UnifiedApp | null | undefined): string {
+  const st = app ? d.statusFor(app)?.app?.platforms.android : null;
+  const accId = app?.android?.account ?? app?.project?.playAccount ?? null;
+  const acc = accId ? d.accounts.find(a => a.id === accId) : undefined;
+  return playAppUrl({ developerId: pickConsoleId(st?.developerId, acc?.developerId), appId: st?.appId ?? null });
+}
 
 export function openUrl(d: Data, url: string): void {
   api.openExternal(url).catch(e => d.toast({ kind: 'bad', title: t('link.openFailed'), detail: errorText(e) }));
@@ -31,7 +40,7 @@ export function appMenu(app: UnifiedApp, d: Data, nav: Nav, opts: { showIgnored:
     'sep',
     (ios || android) && { label: t('cm.openConsole'), icon: 'external', submenu: [
       ios && { label: 'App Store Connect', icon: 'external', onSelect: () => openUrl(d, ASC_APP(ios.id)) },
-      android && { label: 'Google Play Console', icon: 'external', onSelect: () => openUrl(d, PLAY_HOME) },
+      android && { label: 'Google Play Console', icon: 'external', onSelect: () => openUrl(d, playUrlFor(d, app)) },
     ] },
     p && !p.missing && { label: t('cm.openFolder'), icon: 'folder', onSelect: () => { api.reveal(p.id).catch(e => d.toast({ kind: 'bad', title: t('cm.folderFailed'), detail: errorText(e) })); } },
     { label: t('cm.copy'), icon: 'copy', submenu: [
@@ -68,7 +77,7 @@ export function appMenu(app: UnifiedApp, d: Data, nav: Nav, opts: { showIgnored:
 export function consoleItem(d: Data, app: UnifiedApp, store: 'ios' | 'android'): MenuItem {
   return store === 'ios'
     ? { label: t('cm.openIn', { place: 'App Store Connect' }), icon: 'external', onSelect: () => openUrl(d, ASC_APP(app.ios?.app.id)) }
-    : { label: t('cm.openIn', { place: 'Google Play Console' }), icon: 'external', onSelect: () => openUrl(d, PLAY_HOME) };
+    : { label: t('cm.openIn', { place: 'Google Play Console' }), icon: 'external', onSelect: () => openUrl(d, playUrlFor(d, app)) };
 }
 
 /** Menu of one store release: copy version / build, open the console. */
@@ -82,9 +91,9 @@ export function releaseMenu(d: Data, app: UnifiedApp, store: 'ios' | 'android',
 }
 
 /** Both consoles of an app folder (App Store Connect with the app's id when the status knows it). */
-export function projectConsoles(d: Data, ascAppId: string | null | undefined, ios: boolean, android: boolean): MenuInput {
+export function projectConsoles(d: Data, ascAppId: string | null | undefined, ios: boolean, android: boolean, playUrl: string): MenuInput {
   return [
     ios && { label: t('cm.openIn', { place: 'App Store Connect' }), icon: 'external', onSelect: () => openUrl(d, ASC_APP(ascAppId)) },
-    android && { label: t('cm.openIn', { place: 'Google Play Console' }), icon: 'external', onSelect: () => openUrl(d, PLAY_HOME) },
+    android && { label: t('cm.openIn', { place: 'Google Play Console' }), icon: 'external', onSelect: () => openUrl(d, playUrl) },
   ];
 }
diff --git a/apps/desktop/tests/play-link.test.ts b/apps/desktop/tests/play-link.test.ts
new file mode 100644
index 0000000..c7e47cf
--- /dev/null
+++ b/apps/desktop/tests/play-link.test.ts
@@ -0,0 +1,19 @@
+// "Open in Google Play Console" from the desktop: the app's developer id comes from its status (config / profile) or
+// its Play account; the link is the shared console-links builder.
+import { expect, test } from 'bun:test';
+import { playUrlFor } from '../src/ui/app-menu';
+
+const DEV = '5550000000000000001', APP = '4970000000000000002';
+const app = { key: 'p1', android: { account: 'play-acme', key: 'k', store: 'android', app: { id: 'com.example.app' } }, project: null } as never;
+const data = (status: unknown, devOnAccount: string | null) => ({ statusFor: () => status, accounts: [{ id: 'play-acme', kind: 'play', developerId: devOnAccount }] }) as never;
+
+test('status ids: the app dashboard', () => {
+  expect(playUrlFor(data({ app: { platforms: { android: { packageName: 'com.example.app', developerId: DEV, appId: APP } } } }, null), app))
+    .toBe(`https://play.google.com/console/u/0/developers/${DEV}/app/${APP}/app-dashboard`);
+});
+test('the Play account\'s developer id: its app list', () => {
+  expect(playUrlFor(data(null, DEV), app)).toBe(`https://play.google.com/console/u/0/developers/${DEV}/app-list`);
+});
+test('nothing known: the developer chooser', () => {
+  expect(playUrlFor(data(null, null), app)).toBe('https://play.google.com/console/u/0/developers');
+});
diff --git a/cli/accounts.ts b/cli/accounts.ts
index e08a8bd..e95199a 100644
--- a/cli/accounts.ts
+++ b/cli/accounts.ts
@@ -10,13 +10,17 @@
 //                                                           contact and demo account stay in the project
 //   storebound accounts use <profile> [--dir <project>]    this project uses that profile ("account" in its
 //                                                           .storebound/credentials.json)
+//   storebound accounts play-developer <profile> <id> | --clear
+//                                                           the profile's Play developer account id (the digits in
+//                                                           play.google.com/console/u/0/developers/<id>): Play
+//                                                           Console links open the app's own page
 //   storebound accounts default <profile> | --clear         the machine's default profile (a pointer file in the
 //                                                           credentials folder). Order: env > a profile the project
 //                                                           names > the project's own keys > this default > the only
 //                                                           profile (or the one named "default")
 import { resolve } from 'node:path';
 import type { Args } from './lib/args';
-import { applyImport, describeProfiles, planImport } from './lib/accounts';
+import { applyImport, describeProfiles, planImport, setPlayDeveloperId } from './lib/accounts';
 import { activeProfile, defaultPointer, defaultProfile, profileDir, setDefaultPointer } from './lib/credentials';
 import { confirm, type Ctx } from './lib/ctx';
 import { textTable } from './lib/table';
@@ -38,7 +42,7 @@ export async function run(args: Args): Promise<void> {
       console.log(`no store accounts on this machine yet (${tilde(profileDir())}).\n  From a project that has its keys in .storebound/credentials.json: storebound accounts import\n  Or add them in the desktop app (Accounts).`);
       return;
     }
-    console.log(textTable(['profile', 'App Store Connect', 'Google Play', 'vendor no.', 'default'], rows.map(r => [r.profile, r.error ? `unreadable: ${r.error}` : r.apple ? 'key' : '-', r.play ? r.playAccount ?? 'service account' : '-', r.vendor ? 'yes' : '-', r.profile === def ? (def === pointer ? 'yes (accounts default)' : 'yes') : ''])));
+    console.log(textTable(['profile', 'App Store Connect', 'Google Play', 'Play developer id', 'vendor no.', 'default'], rows.map(r => [r.profile, r.error ? `unreadable: ${r.error}` : r.apple ? 'key' : '-', r.play ? r.playAccount ?? 'service account' : '-', r.playDeveloperId ?? '-', r.vendor ? 'yes' : '-', r.profile === def ? (def === pointer ? 'yes (accounts default)' : 'yes') : ''])));
     if (pointer && pointer !== def) console.log(`note: the default pointer names "${pointer}", which is not a profile here (storebound accounts default <profile>)`);
     console.log(`\n${tilde(profileDir())}: shared by the CLI and the desktop app`);
     console.log(active ? `this folder uses "${active.name}" (${{ env: '--account / STOREBOUND_PROFILE', config: 'account in the config', project: '"account" in .storebound/credentials.json', default: 'the default profile' }[active.from]})` : 'this folder uses no profile (several profiles and no default: storebound accounts default <profile>, or accounts use <profile> in the project)');
@@ -69,6 +73,15 @@ export async function run(args: Args): Promise<void> {
     console.log(`${tilde(f)}: "account": "${name}"`);
     return;
   }
+  if (sub === 'play-developer') {
+    const name = args._[1];
+    if (!name) throw new Error('storebound accounts play-developer <profile> <id> | --clear');
+    const id = args.has('clear') ? null : args._[2] ?? null;
+    if (!args.has('clear') && !id) throw new Error('storebound accounts play-developer <profile> <id>: the digits in play.google.com/console/u/0/developers/<id>');
+    const f = setPlayDeveloperId(name, id);
+    console.log(id ? `${tilde(f)}: PLAY_DEVELOPER_ID ${id} (Play Console links of this account's apps open the app's page)` : `${tilde(f)}: Play developer id removed`);
+    return;
+  }
   if (sub === 'default') {
     if (args.has('clear')) { setDefaultPointer(null); console.log('default profile pointer removed (default: the only profile, or the one named "default")'); return; }
     const name = args._[1];
@@ -77,5 +90,5 @@ export async function run(args: Args): Promise<void> {
     console.log(`${tilde(f)}: default profile "${name}" (used by every folder that names no profile and has no keys of its own)`);
     return;
   }
-  throw new Error('usage: storebound accounts [list | import [--dir <project>] [--name <profile>] [--dry] [--yes] | use <profile> | default <profile> | default --clear]');
+  throw new Error('usage: storebound accounts [list | import [--dir <project>] [--name <profile>] [--dry] [--yes] | use <profile> | play-developer <profile> <id> | default <profile> | default --clear]');
 }
diff --git a/cli/commands.ts b/cli/commands.ts
index 5ff03ee..fb036bb 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -16,7 +16,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'serve': [() => import('./serve'), '--stdio: JSON-RPC session for the storebound desktop app (dry runs; writes need a host confirm token)'],
   'apps': [() => import('./apps'), 'list (every app the store keys can see: App Store Connect team, Play developer accounts; --icons) | check (key works / permission missing / revoked, with the fix); --store apple|play, --json; read-only | folders | add [<folder>] | remove <folder>: the app folders of this machine, the same list as the desktop app | ignore|unignore <name|id> [--store apple|play]: leave a dormant app (or one store side) out of watch, portfolio reads and the desktop lists; storebound only, the store is untouched'],
   'desktop': [() => import('./desktop'), 'open the storebound desktop app on this folder; not installed or another version: download it for this system (size, SHA-256, signature checked), install it for this user (asks once; --yes) and open it; --download only saves the installer, --dry / --json change nothing'],
-  'accounts': [() => import('./accounts'), 'the store accounts of this machine (credential profiles in ~/.storebound/credentials, shared with the desktop app): list | import (a project\'s store keys -> a profile; --dry first) | use <profile> | default <profile> (the machine default; --clear)'],
+  'accounts': [() => import('./accounts'), 'the store accounts of this machine (credential profiles in ~/.storebound/credentials, shared with the desktop app): list | import (a project\'s store keys -> a profile; --dry first) | use <profile> | play-developer <profile> <id> (Play Console deep links) | default <profile> (the machine default; --clear)'],
   'settings': [() => import('./settings'), 'per-machine settings: bypass on | off | status (owner opt-in: the agent also presses the owner-only buttons; default off)'],
   'aab': [() => import('./aab'), 'offline: an AAB file: packageName, versionCode, versionName, min / target SDK, sha256 (no config, no upload); --json'],
   'doctor': [() => import('./doctor'), 'build and capture dependencies (JDK with the version the project needs, Android SDK, Xcode, CocoaPods, Node, Bun, ffmpeg, Chrome, adb, git, bundletool) and how to install what is missing; --install <tool> --yes; --json'],
diff --git a/cli/inspect.ts b/cli/inspect.ts
index ec1386f..4c2e7d5 100644
--- a/cli/inspect.ts
+++ b/cli/inspect.ts
@@ -14,6 +14,7 @@ import { maskUser, reviewContact, reviewDemoAccount } from './lib/credentials';
 import { DATA_SAFETY_UPLOADED, declarations } from './lib/declarations';
 import type { ProjectSummary } from './lib/desktop-protocol';
 import { log, printJson } from './lib/log';
+import { playIdsOf } from './lib/play-ids';
 import { findIcon, iconDataUrl, listingCompleteness, listingText, renderImage } from './lib/project-files';
 
 export function summarize(ctx: Ctx): ProjectSummary {
@@ -24,7 +25,7 @@ export function summarize(ctx: Ctx): ProjectSummary {
     config: path,
     name: config.app.name,
     languages: config.languages.map(l => l.id),
-    play: config.play ? { packageName: config.play.packageName } : null,
+    play: config.play ? { packageName: config.play.packageName, ...playIdsOf(config, root) } : null,
     apple: config.apple ? { bundleId: config.apple.bundleId, appId: config.apple.appId ?? null } : null,
     platforms: platformsOf(config),
     products: config.products?.length ?? 0,
diff --git a/cli/lib/accounts.ts b/cli/lib/accounts.ts
index 3d2163c..940e340 100644
--- a/cli/lib/accounts.ts
+++ b/cli/lib/accounts.ts
@@ -14,7 +14,7 @@ export type Kind = 'apple' | 'play';
 /** The store keys that move to a profile (one developer account's), never the app's own ones. */
 export const STORE_KEYS = PROFILE_KEYS;
 
-export interface Identity { appleKeyId: string | null; playEmail: string | null; vendor: boolean }
+export interface Identity { appleKeyId: string | null; playEmail: string | null; vendor: boolean; playDeveloperId: string | null }
 
 const PEM = /BEGIN PRIVATE KEY/;
 const isJsonText = (v: string) => /^\s*\{/.test(v);
@@ -32,15 +32,15 @@ export function serviceAccountEmail(v: string, base: string): string | null {
 /** What a profile can reach: the Apple key id and the Play service account e-mail (for matching, never printed). */
 export function profileIdentity(name: string): Identity {
   const env = profileEnv(name);
-  return { appleKeyId: env.ASC_KEY_ID ?? null, playEmail: env.PLAY_SERVICE_ACCOUNT ? serviceAccountEmail(env.PLAY_SERVICE_ACCOUNT, profileDir()) : null, vendor: !!env.ASC_VENDOR_NUMBER };
+  return { appleKeyId: env.ASC_KEY_ID ?? null, playEmail: env.PLAY_SERVICE_ACCOUNT ? serviceAccountEmail(env.PLAY_SERVICE_ACCOUNT, profileDir()) : null, vendor: !!env.ASC_VENDOR_NUMBER, playDeveloperId: env.PLAY_DEVELOPER_ID ?? null };
 }
 
 /** One line per profile for `storebound accounts`: stores, masked Play e-mail. No key ids, no values. */
-export function describeProfiles(): { profile: string; apple: boolean; play: boolean; playAccount: string | null; vendor: boolean; error?: string }[] {
+export function describeProfiles(): { profile: string; apple: boolean; play: boolean; playAccount: string | null; vendor: boolean; playDeveloperId?: string | null; error?: string }[] {
   return profileNames().map(profile => {
     try {
       const id = profileIdentity(profile);
-      return { profile, apple: !!id.appleKeyId, play: !!id.playEmail, playAccount: id.playEmail ? maskUser(id.playEmail) : null, vendor: id.vendor };
+      return { profile, apple: !!id.appleKeyId, play: !!id.playEmail, playAccount: id.playEmail ? maskUser(id.playEmail) : null, vendor: id.vendor, playDeveloperId: id.playDeveloperId };
     } catch (e) { return { profile, apple: false, play: false, playAccount: null, vendor: false, error: (e as Error).message }; }
   });
 }
@@ -205,3 +205,18 @@ export function useProfile(project: string, name: string): string {
   atomic(file, JSON.stringify({ ...cur, account: name }, null, 2) + '\n', 0o600);
   return file;
 }
+
+/** Sets (or clears with null) the Play developer account id of a profile: an account id, not a secret, used for Play
+ *  Console deep links (play-ids.ts). The same field the desktop's Accounts screen writes. Returns the profile file. */
+export function setPlayDeveloperId(name: string, id: string | null): string {
+  if (!PROFILE_RE.test(name)) throw new Error(`${name}: letters, digits, . _ - (max 64)`);
+  if (!profileNames().includes(name)) throw new Error(`no profile "${name}" in ${profileDir()}: \`storebound accounts\` lists them`);
+  const v = id?.trim() ?? null;
+  if (v !== null && !/^\d{1,25}$/.test(v)) throw new Error('the Play developer id is the digits in play.google.com/console/u/0/developers/<id>/...');
+  const file = join(profileDir(), `${name}.json`);
+  const cur = readJson(file);
+  const next: Json = { ...cur };
+  if (v === null) delete next.PLAY_DEVELOPER_ID; else next.PLAY_DEVELOPER_ID = v;
+  atomic(file, JSON.stringify(next, null, 2) + '\n', 0o600);
+  return file;
+}
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 0a02d45..9abb510 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -6,6 +6,7 @@ import { existsSync } from 'node:fs';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 import * as rt from './rt';
 import { PROFILE_RE, setConfigAccount } from './credentials';
+import { playIdsOf } from './play-ids';
 import { validateCapture, validateRecord } from '../shots/devices';
 import { featureBackgroundIssues, paletteIssues } from '../shots/palette';
 import { type AppleDataTypeId, type AppleTypeAnswer, validateAppPrivacyTypes } from './app-privacy';
@@ -1286,7 +1287,8 @@ export async function loadConfig(explicit?: string, start = process.cwd()): Prom
   if (errors.length) throw new Error(`${path}:\n  ` + errors.join('\n  '));
   const root = dirname(path);
   setConfigAccount(root, config.account);
-  setConsoleIds(consoleIdsFromConfig(config));
+  const play = playIdsOf(config, root);
+  setConsoleIds({ ...consoleIdsFromConfig(config), playDeveloperId: play.developerId, playAppId: play.appId });
   return { config, root, path, resolve: (p: string) => (isAbsolute(p) ? p : join(root, p)) };
 }
 
diff --git a/cli/lib/console-links.ts b/cli/lib/console-links.ts
index b5bb7ae..3a2958a 100644
--- a/cli/lib/console-links.ts
+++ b/cli/lib/console-links.ts
@@ -9,6 +9,8 @@
 
 export const ASC = 'https://appstoreconnect.apple.com';
 export const PLAY_CONSOLE = 'https://play.google.com/console';
+/** The developer account chooser: the fallback when no developer id is known (never the bare console root). */
+export const PLAY_DEVELOPERS = `${PLAY_CONSOLE}/u/0/developers`;
 
 export interface ConsoleIds { appleAppId?: string | null; playDeveloperId?: string | null; playAppId?: string | null }
 
@@ -94,7 +96,7 @@ export function consoleUrl(page: ConsolePage, ids: ConsoleIds = current): string
     return app ? `${ASC}/apps/${app}${p.path}` : `${ASC}/apps`;
   }
   const dev = id(ids.playDeveloperId ?? current.playDeveloperId), app = id(ids.playAppId ?? current.playAppId);
-  if (!dev) return PLAY_CONSOLE;
+  if (!dev) return PLAY_DEVELOPERS;
   const base = `${PLAY_CONSOLE}/u/0/developers/${dev}`;
   if (p.scope === 'developer') return `${base}/${p.path}`;
   return app ? `${base}/app/${app}/${p.path}` : `${base}/app-list`;
@@ -103,7 +105,22 @@ export function consoleUrl(page: ConsolePage, ids: ConsoleIds = current): string
 /** True when the URL is the page itself (ids known), false when it is a fallback (app list, chooser). */
 export function consoleUrlExact(page: ConsolePage, ids: ConsoleIds = current): boolean {
   const u = consoleUrl(page, ids);
-  return u !== PLAY_CONSOLE && !(CONSOLE_PAGES[page].scope === 'app' && (u === `${ASC}/apps` || u.endsWith('/app-list')));
+  return u !== PLAY_DEVELOPERS && !(CONSOLE_PAGES[page].scope === 'app' && (u === `${ASC}/apps` || u.endsWith('/app-list')));
+}
+
+/**
+ * "Open in Google Play Console" for one app: its dashboard when the developer id and the console's app id are known,
+ * else that developer's app list (searchable, the package name finds the row), else the developer chooser. Every
+ * desktop / CLI / watch link to an app's Play page goes through here.
+ */
+export function playAppUrl(ids: { developerId?: string | null; appId?: string | null }): string {
+  return consoleUrl('play.dashboard', { playDeveloperId: ids.developerId ?? null, playAppId: ids.appId ?? null, appleAppId: null });
+}
+
+/** The first candidate that is a console id (digits); the order of the sources is in play-ids.ts. */
+export function pickConsoleId(...candidates: (string | null | undefined)[]): string | null {
+  for (const c of candidates) if (c && /^\d{1,25}$/.test(c.trim())) return c.trim();
+  return null;
 }
 
 /** "Readable > path: https://..." (the path suffix, e.g. "> Copy Cloud Storage URI", is appended to the label). */
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index f027d57..709be38 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -44,7 +44,7 @@ function fileStore(root: string): Store {
 export function credentialValue(root: string, name: string): string | undefined { return value(root, name); }
 /** The store credential names a profile holds (the same as the env names): per developer account, so the vendor number
  *  for reports too; an app's Android upload keystore stays in the project. */
-export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER'] as const;
+export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID'] as const;
 export const PROFILE_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 
 export const profileDir = (): string => process.env.STOREBOUND_CREDENTIALS_DIR || join(homedir(), '.storebound', 'credentials');
diff --git a/cli/lib/desktop-protocol.ts b/cli/lib/desktop-protocol.ts
index b1ad271..58a2582 100644
--- a/cli/lib/desktop-protocol.ts
+++ b/cli/lib/desktop-protocol.ts
@@ -122,7 +122,8 @@ export interface ProjectSummary {
   config: string;
   name: string;
   languages: string[];
-  play: { packageName: string } | null;
+  /** developerId / appId: the Play Console ids for deep links (play-ids.ts), null when unknown. */
+  play: { packageName: string; developerId?: string | null; appId?: string | null } | null;
   apple: { bundleId: string; appId: string | null } | null;
   /** app.platforms (default: from the apple / play sections). */
   platforms: ('ios' | 'android')[];
@@ -155,7 +156,7 @@ export interface ProjectSummary {
 export interface AppIdentity {
   id: string;
   name: string;
-  platforms: { ios: { bundleId: string; ascAppId: string | null } | null; android: { packageName: string } | null };
+  platforms: { ios: { bundleId: string; ascAppId: string | null } | null; android: { packageName: string; developerId?: string | null; appId?: string | null } | null };
 }
 
 /** Where a version is on one store. */
diff --git a/cli/lib/play-ids.ts b/cli/lib/play-ids.ts
new file mode 100644
index 0000000..81e2a69
--- /dev/null
+++ b/cli/lib/play-ids.ts
@@ -0,0 +1,43 @@
+// The Play Console ids an app's links use, from every place this machine keeps them (first one wins):
+//   developer id: play.developerId (config) > STOREBOUND_PLAY_DEVELOPER_ID (a workspace account, `ws`) >
+//                 PLAY_DEVELOPER_ID of the credential profile (`storebound accounts play-developer`, the desktop's
+//                 Accounts screen) > the id `console fill` remembered for the package (~/.storebound/console-accounts.json)
+//   app id:       play.appId (config) > the remembered app id for the package
+// Never a guess: an id that is not digits is skipped. The links themselves: console-links.ts (playAppUrl).
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { pickConsoleId } from './console-links';
+import { credentialValue } from './credentials';
+
+const consoleAccountsFile = (): string => process.env.STOREBOUND_CONSOLE_ACCOUNTS || join(homedir(), '.storebound', 'console-accounts.json');
+
+/** What `console fill` remembered for a package ({ developerId, appId? }); {} when nothing or unreadable. */
+export function rememberedPlay(pkg: string | null | undefined, file = consoleAccountsFile()): { developerId?: string; appId?: string } {
+  if (!pkg || !existsSync(file)) return {};
+  try {
+    const e = (JSON.parse(readFileSync(file, 'utf8')) as { play?: Record<string, { developerId?: unknown; appId?: unknown }> }).play?.[pkg];
+    return { developerId: typeof e?.developerId === 'string' ? e.developerId : undefined, appId: typeof e?.appId === 'string' ? e.appId : undefined };
+  } catch { return {}; }
+}
+
+export interface PlayIdSources {
+  config?: { developerId?: string | null; appId?: string | null; packageName?: string | null } | null;
+  workspace?: string | null;
+  profile?: string | null;
+  remembered?: { developerId?: string | null; appId?: string | null };
+}
+
+export function resolvePlayIds(s: PlayIdSources): { developerId: string | null; appId: string | null } {
+  return {
+    developerId: pickConsoleId(s.config?.developerId, s.workspace, s.profile, s.remembered?.developerId),
+    appId: pickConsoleId(s.config?.appId, s.remembered?.appId),
+  };
+}
+
+/** The ids for a loaded config (every source above). */
+export function playIdsOf(config: { play?: { developerId?: string; appId?: string; packageName?: string } }, root: string): { developerId: string | null; appId: string | null } {
+  let profile: string | null = null;
+  try { profile = credentialValue(root, 'PLAY_DEVELOPER_ID') ?? null; } catch { /* unreadable profile: no id from it */ }
+  return resolvePlayIds({ config: config.play ?? null, workspace: process.env.STOREBOUND_PLAY_DEVELOPER_ID, profile, remembered: rememberedPlay(config.play?.packageName) });
+}
diff --git a/cli/lib/portfolio.ts b/cli/lib/portfolio.ts
index efa0693..ae906e6 100644
--- a/cli/lib/portfolio.ts
+++ b/cli/lib/portfolio.ts
@@ -11,7 +11,7 @@ export function appIdentity(s: ProjectSummary): AppIdentity {
     name: s.name,
     platforms: {
       ios: s.apple && s.platforms.includes('ios') ? { bundleId: s.apple.bundleId, ascAppId: s.apple.appId } : null,
-      android: s.play && s.platforms.includes('android') ? { packageName: s.play.packageName } : null,
+      android: s.play && s.platforms.includes('android') ? { packageName: s.play.packageName, developerId: s.play.developerId ?? null, appId: s.play.appId ?? null } : null,
     },
   };
 }
diff --git a/cli/watch.ts b/cli/watch.ts
index 42528eb..50b8f5a 100644
--- a/cli/watch.ts
+++ b/cli/watch.ts
@@ -100,7 +100,7 @@ async function readApp(t: Target, prev: AppSnap | undefined, now: number): Promi
   const useApple = !!s.apple && !t.skip.includes('apple'), usePlay = !!s.play && !t.skip.includes('play');
   const snap: AppSnap = { name: s.name || t.name, ids: { appleAppId: s.apple?.appId ?? null } };
   if (usePlay && !t.virtual && !prev?.ids.playDeveloperId) {
-    try { const { loadConfig } = await import('./lib/config'); Object.assign(snap.ids, consoleIdsFromConfig((await loadConfig(undefined, t.dir)).config)); } catch { /* links fall back to the console home */ }
+    try { const { loadConfig } = await import('./lib/config'); const { playIdsOf } = await import('./lib/play-ids'); const l = await loadConfig(undefined, t.dir); const play = playIdsOf(l.config, l.root); Object.assign(snap.ids, consoleIdsFromConfig(l.config), { playDeveloperId: play.developerId, playAppId: play.appId }); } catch { /* links fall back to the app list / developer chooser */ }
   }
   const all = e.release.all ?? [];
   snap.releases = {};
diff --git a/tests/console-links.test.ts b/tests/console-links.test.ts
index 2182ce7..bd4b2c4 100644
--- a/tests/console-links.test.ts
+++ b/tests/console-links.test.ts
@@ -33,7 +33,7 @@ describe('console-links', () => {
 
   test('fallbacks: app list / developer chooser; reused verified shapes', () => {
     expect(consoleUrl('asc.age-rating', {})).toBe('https://appstoreconnect.apple.com/apps');
-    expect(consoleUrl('play.data-safety', {})).toBe('https://play.google.com/console');
+    expect(consoleUrl('play.data-safety', {})).toBe('https://play.google.com/console/u/0/developers');
     expect(consoleUrl('play.data-safety', { playDeveloperId: IDS.playDeveloperId })).toBe(`https://play.google.com/console/u/0/developers/${IDS.playDeveloperId}/app-list`);
     expect(consoleUrl('play.dashboard', IDS)).toBe(`https://play.google.com/console/u/0/developers/${IDS.playDeveloperId}/app/${IDS.playAppId}/app-dashboard`);
     expect(consoleUrl('play.content-rating', IDS)).toEndWith('/app-content/content-rating-overview');
diff --git a/tests/play-ids.test.ts b/tests/play-ids.test.ts
new file mode 100644
index 0000000..0bbb02f
--- /dev/null
+++ b/tests/play-ids.test.ts
@@ -0,0 +1,55 @@
+// Play Console deep links of one app: the link builder (playAppUrl) and where the ids come from (play-ids.ts).
+import { describe, expect, test } from 'bun:test';
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { PLAY_DEVELOPERS, pickConsoleId, playAppUrl } from '../cli/lib/console-links';
+import { rememberedPlay, resolvePlayIds } from '../cli/lib/play-ids';
+
+const DEV = '5550000000000000001', APP = '4970000000000000002';
+
+describe('playAppUrl', () => {
+  test('both ids: the app dashboard', () => {
+    expect(playAppUrl({ developerId: DEV, appId: APP })).toBe(`https://play.google.com/console/u/0/developers/${DEV}/app/${APP}/app-dashboard`);
+  });
+  test('developer id only: that developer\'s app list', () => {
+    expect(playAppUrl({ developerId: DEV })).toBe(`https://play.google.com/console/u/0/developers/${DEV}/app-list`);
+  });
+  test('nothing known: the developer chooser, never the console root', () => {
+    expect(playAppUrl({})).toBe(PLAY_DEVELOPERS);
+    expect(playAppUrl({ appId: APP })).toBe(PLAY_DEVELOPERS);
+    expect(playAppUrl({ developerId: 'abc' })).toBe(PLAY_DEVELOPERS);
+    expect(playAppUrl({})).not.toBe('https://play.google.com/console');
+  });
+});
+
+describe('resolvePlayIds', () => {
+  test('order: config > workspace > profile > remembered', () => {
+    expect(resolvePlayIds({ config: { developerId: '1' }, workspace: '2', profile: '3', remembered: { developerId: '4' } }).developerId).toBe('1');
+    expect(resolvePlayIds({ workspace: '2', profile: '3', remembered: { developerId: '4' } }).developerId).toBe('2');
+    expect(resolvePlayIds({ profile: '3', remembered: { developerId: '4' } }).developerId).toBe('3');
+    expect(resolvePlayIds({ remembered: { developerId: '4' } }).developerId).toBe('4');
+    expect(resolvePlayIds({})).toEqual({ developerId: null, appId: null });
+  });
+  test('non-digit values are skipped, never guessed', () => {
+    expect(resolvePlayIds({ config: { developerId: 'x1' }, profile: ` ${DEV} ` }).developerId).toBe(DEV);
+    expect(pickConsoleId('', null, undefined, '12a')).toBeNull();
+  });
+  test('app id: config, then the remembered one', () => {
+    expect(resolvePlayIds({ config: { appId: APP }, remembered: { appId: '9' } }).appId).toBe(APP);
+    expect(resolvePlayIds({ remembered: { appId: '9' } }).appId).toBe('9');
+  });
+});
+
+describe('rememberedPlay', () => {
+  test('reads console-accounts.json per package; missing / broken file = {}', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-playids-'));
+    const f = join(dir, 'console-accounts.json');
+    expect(rememberedPlay('com.example.app', f)).toEqual({});
+    writeFileSync(f, JSON.stringify({ version: 1, play: { 'com.example.app': { developerId: DEV, account: 'Example', at: '2026-10-01' } } }));
+    expect(rememberedPlay('com.example.app', f)).toEqual({ developerId: DEV, appId: undefined });
+    expect(rememberedPlay('com.example.other', f)).toEqual({});
+    writeFileSync(f, '{nope');
+    expect(rememberedPlay('com.example.app', f)).toEqual({});
+  });
+});

From a656240bfbc36712bf1363d965f1584c93fada6b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:22:22 +0800
Subject: [PATCH 066/255] Checks: findings with a skill get Open guide (context
 menu and a link on the card) to the shipped skills/<name>/SKILL.md;
 known-skill list kept equal to skills/ by a test

---
 apps/desktop/src-tauri/src/policy.rs     |  2 ++
 apps/desktop/src/i18n/en.ts              |  2 ++
 apps/desktop/src/i18n/tr.ts              |  2 ++
 apps/desktop/src/screens/tabs/Checks.tsx |  5 ++++-
 apps/desktop/src/styles/checks.css       |  4 ++++
 cli/lib/skill-guide.ts                   | 12 +++++++++++
 tests/skill-guide.test.ts                | 27 ++++++++++++++++++++++++
 7 files changed, 53 insertions(+), 1 deletion(-)
 create mode 100644 cli/lib/skill-guide.ts
 create mode 100644 tests/skill-guide.test.ts

diff --git a/apps/desktop/src-tauri/src/policy.rs b/apps/desktop/src-tauri/src/policy.rs
index a03dc88..0aab7ed 100644
--- a/apps/desktop/src-tauri/src/policy.rs
+++ b/apps/desktop/src-tauri/src/policy.rs
@@ -190,6 +190,8 @@ pub const EXTERNAL_HOSTS: &[&str] = &[
     "appstoreconnect.apple.com",
     "developer.apple.com",
     "storebound.dev",
+    // the guides (skills/<name>/SKILL.md) of check findings, in storebound's public repo
+    "git.crt.fyi",
     // Dependencies screen link-outs
     "developer.android.com",
     "ffmpeg.org",
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 6beb640..2d8329e 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2045,6 +2045,8 @@ export const en = {
   'acct.noDevId': 'no Play developer id',
   'acct.devIdLabel': 'Play developer account id',
   'acct.devIdHint': "The digits in play.google.com/console/u/0/developers/<id>. With it, Play Console links open each app's own page; the CLI uses it too.",
+  'checks.openGuide': 'Open guide',
+  'checks.openGuideHint': 'Open the {skill} guide (SKILL.md)',
   'cm.more': "More actions",
   'cm.showIgnored': "Show ignored apps",
   'cm.copyVersion': "Copy version",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 587c795..cce0065 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2047,6 +2047,8 @@ export const tr: Record<keyof typeof en, string> = {
   'acct.noDevId': 'Play geliştirici kimliği yok',
   'acct.devIdLabel': 'Play geliştirici hesabı kimliği',
   'acct.devIdHint': 'play.google.com/console/u/0/developers/<id> içindeki rakamlar. Girilince Play Console bağlantıları her uygulamanın kendi sayfasını açar; CLI de kullanır.',
+  'checks.openGuide': 'Kılavuzu aç',
+  'checks.openGuideHint': '{skill} kılavuzunu aç (SKILL.md)',
   'cm.more': "Diğer işlemler",
   'cm.showIgnored': "Yok sayılanları göster",
   'cm.copyVersion': "Sürümü kopyala",
diff --git a/apps/desktop/src/screens/tabs/Checks.tsx b/apps/desktop/src/screens/tabs/Checks.tsx
index c962290..233677a 100644
--- a/apps/desktop/src/screens/tabs/Checks.tsx
+++ b/apps/desktop/src/screens/tabs/Checks.tsx
@@ -18,6 +18,7 @@ import { OpenLink } from '../../ui/OpenLink';
 import { Bar, ErrorNotice, ReadControl, Skeleton } from '../../ui/kit';
 import { EmptyState, Section, StatusPill } from '../../ui/ds';
 import '../../styles/checks.css';
+import { skillGuideUrl } from '../../../../../cli/lib/skill-guide';
 import { exportName, validateMd } from '../../lib/exports';
 import { useExports } from '../../ui/Exports';
 
@@ -90,11 +91,13 @@ function ScanCard({ project }: { project: Project }) {
   const card = ({ f, k }: { f: ScanFinding; k: string }) => {
     const [tone, icon] = f.accepted ? ['ok', 'check'] as const : SEV[f.severity] ?? SEV.low;
     const ev = Array.isArray(f.evidence) ? f.evidence : [];
+    const guide = skillGuideUrl(f.skill);
     return (
       <CheckCard key={k} tone={tone} icon={icon} title={<><span className="ck-gl">{f.guideline}</span>{f.title}</>}
         menu={() => [
           !f.accepted && fixable(f.action) && fixItem(w, f.action, f.title),
           !f.accepted && f.url && /^https:\/\//.test(f.url) && { label: t('link.open'), icon: 'external', onSelect: () => openUrl(d, f.url!) },
+          guide && { label: t('checks.openGuide'), icon: 'sparkle', shortcut: f.skill, onSelect: () => openUrl(d, guide) },
           ev[0] && { label: t('cm.revealEvidence'), icon: 'folder', shortcut: `${ev[0].file.split('/').pop()}:${ev[0].line}`, onSelect: () => { api.reveal(project.id, ev[0]!.file).catch(() => {}); } },
           'sep',
           { label: t('cm.copy'), icon: 'copy', submenu: [
@@ -108,7 +111,7 @@ function ScanCard({ project }: { project: Project }) {
         actions={<>{!f.accepted && <OpenLink url={f.url} />}{!f.accepted && fixable(f.action) && <FixButton action={f.action} what={f.title} w={w} />}</>}>
         {ev.slice(0, 2).map((e, j) => <span className="ck-sub selectable" key={j}><code>{e.file}:{e.line}</code>{e.text ? ` ${e.text}` : ''}</span>)}
         {f.accepted ? <span className="ck-sub">{t('checks.accepted', { reason: f.accepted })}</span>
-          : <span className="ck-fix"><Icon name="wand" /><span className="selectable">{f.fix} <code>{f.skill}</code></span></span>}
+          : <span className="ck-fix"><Icon name="wand" /><span className="selectable">{f.fix} {guide ? <button type="button" className="ck-guide" onClick={() => openUrl(d, guide)} title={t('checks.openGuideHint', { skill: f.skill })}><code>{f.skill}</code><Icon name="external" /></button> : f.skill && <code>{f.skill}</code>}</span></span>}
         {!f.accepted && f.aiFix && !fixable(f.action) && <div className="ck-ai"><AiFix projectId={project.id} f={f} claude={claude} busy={aiBusy} setBusy={setAiBusy} rescan={() => { s.refresh(); }}
           stillThere={findings.some(x => same(x, f))} onActive={on => setAiActive(on ? f : null)} /></div>}
       </CheckCard>
diff --git a/apps/desktop/src/styles/checks.css b/apps/desktop/src/styles/checks.css
index c396c17..fbbad0b 100644
--- a/apps/desktop/src/styles/checks.css
+++ b/apps/desktop/src/styles/checks.css
@@ -74,3 +74,7 @@
 .scr-checks .ck-report { display: flex; align-items: center; gap: 16px; padding: 14px 18px; border-radius: var(--ds-r-lg); background: var(--ds-surface); border: 1px solid var(--ds-stroke); }
 .scr-checks .ck-report-t { display: grid; gap: 2px; flex: 1; min-width: 0; font-size: var(--ds-t-meta); color: var(--muted); }
 .scr-checks .ck-report-t b { color: var(--ink); font-size: var(--ds-t-body); }
+.scr-checks .ck-guide { all: unset; display: inline-flex; align-items: center; gap: 4px; cursor: pointer; border-radius: var(--ds-r-xs); }
+.scr-checks .ck-guide:hover code { text-decoration: underline; }
+.scr-checks .ck-guide:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.scr-checks .ck-guide svg { width: 12px; height: 12px; margin: 0; }
diff --git a/cli/lib/skill-guide.ts b/cli/lib/skill-guide.ts
new file mode 100644
index 0000000..dcb7813
--- /dev/null
+++ b/cli/lib/skill-guide.ts
@@ -0,0 +1,12 @@
+// The guide of a finding's skill: skills/<name>/SKILL.md ships with the toolchain (npm package, plugin) and is published
+// in the public repo, which is where "Open guide" points (storebound.dev does not host the skills). Only known skill
+// names get a link (tests keep the list equal to the skills/ folder), so a finding never opens a made-up page.
+export const SKILLS_BASE = 'https://git.crt.fyi/CRT/storebound/src/branch/main/skills';
+
+export const KNOWN_SKILLS: readonly string[] = ['account-deletion', 'adhoc-distribution', 'ads-levelplay-checks', 'ads-mediation-checks', 'app-icons', 'apple-ads', 'app-previews', 'appstore-first-release', 'app-store-promotion', 'aso-basics', 'build-and-sign', 'console-autofill', 'export-compliance', 'game-services', 'listing-localization', 'migrate-from-fastlane', 'play-first-release', 'portfolio-originality', 'ppp-pricing', 'privacy-manifest', 'privacy-policy', 'release-flows', 'release-management', 'revenuecat-sync', 'review-access', 'review-rejections', 'review-replies', 'store-analytics', 'store-api', 'store-declarations', 'store-health', 'store-iap-setup', 'store-pitfalls', 'store-preflight', 'store-screenshots', 'store-subscriptions', 'testflight', 'web-presence', 'whats-new'];
+
+/** The guide URL of a skill name (a finding's `skill`), or null when it is not a skill storebound ships. */
+export function skillGuideUrl(skill: string | null | undefined): string | null {
+  const s = skill?.trim().replace(/^skills\//, '').replace(/\/SKILL\.md$/i, '');
+  return s && KNOWN_SKILLS.includes(s) ? `${SKILLS_BASE}/${s}/SKILL.md` : null;
+}
diff --git a/tests/skill-guide.test.ts b/tests/skill-guide.test.ts
new file mode 100644
index 0000000..d205b7d
--- /dev/null
+++ b/tests/skill-guide.test.ts
@@ -0,0 +1,27 @@
+// "Open guide" on a finding: skill name -> the shipped SKILL.md; the known list matches the skills/ folder.
+import { expect, test } from 'bun:test';
+import { existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { KNOWN_SKILLS, SKILLS_BASE, skillGuideUrl } from '../cli/lib/skill-guide';
+
+const dir = join(import.meta.dir, '..', 'skills');
+
+test('KNOWN_SKILLS is exactly the skills/ folder', () => {
+  const real = readdirSync(dir).filter(n => existsSync(join(dir, n, 'SKILL.md'))).sort();
+  expect([...KNOWN_SKILLS].sort()).toEqual(real);
+});
+test('a skill name, a skills/ path or a SKILL.md path resolve to the guide', () => {
+  expect(skillGuideUrl('store-api')).toBe(`${SKILLS_BASE}/store-api/SKILL.md`);
+  expect(skillGuideUrl('skills/store-api')).toBe(`${SKILLS_BASE}/store-api/SKILL.md`);
+  expect(skillGuideUrl(' skills/game-services/SKILL.md ')).toBe(`${SKILLS_BASE}/game-services/SKILL.md`);
+});
+test('unknown or empty: no link', () => {
+  for (const s of ['', null, undefined, 'not-a-skill', '../etc', 'store-api/../x']) expect(skillGuideUrl(s)).toBeNull();
+});
+test('every skill a scan rule names is a known skill', async () => {
+  const { readFileSync } = await import('node:fs');
+  const src = readdirSync(join(import.meta.dir, '..', 'cli', 'lib', 'scan')).filter(f => f.endsWith('.ts')).map(f => readFileSync(join(import.meta.dir, '..', 'cli', 'lib', 'scan', f), 'utf8')).join('\n');
+  const named = [...src.matchAll(/skill: '([a-z0-9-]+)'/g)].map(m => m[1]!);
+  expect(named.length).toBeGreaterThan(0);
+  for (const s of new Set(named)) expect(skillGuideUrl(s)).not.toBeNull();
+});

From 7c18b3f7ddb6f5956ba132f39422cf14a1a06402 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:26:01 +0800
Subject: [PATCH 067/255] Desktop: compact app hero on every tab but Releases;
 Ctrl+K lists the current app's menu actions; Alt+Up/Down switches apps;
 shortcuts list; no focus ring on code-focused headings

---
 apps/desktop/src/App.tsx              | 30 ++++++++++++++++++++++++---
 apps/desktop/src/design.css           | 12 +++++++++++
 apps/desktop/src/i18n/en.ts           |  5 +++++
 apps/desktop/src/i18n/tr.ts           |  5 +++++
 apps/desktop/src/screens/AppView.tsx  |  1 +
 apps/desktop/src/screens/Settings.tsx |  2 ++
 apps/desktop/src/ui/ds.tsx            | 18 +++++++++-------
 7 files changed, 63 insertions(+), 10 deletions(-)

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index d0adbed..242211c 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -26,6 +26,7 @@ import { ErrorBoundary } from './ui/ErrorBoundary';
 import { Toasts } from './ui/Toasts';
 import { useContextMenu } from './ui/ContextMenu';
 import { appMenu } from './ui/app-menu';
+import { isEditable, isItem, type MenuInput } from './ui/menu-logic';
 import { worstTone } from './ui/ds';
 import { attention } from './lib/model';
 
@@ -53,6 +54,15 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const [showIgnored, setShowIgnored] = useShowIgnored();
   const ignoredApps = useMemo(() => d.apps.filter(a => a.ignored).sort((a, b) => a.name.localeCompare(b.name)), [d.apps]);
   const listed = showIgnored ? [...visible, ...ignoredApps] : visible;
+  const groups = d.studios.length ? groupByStudio(listed.map(a => ({ app: a })), d.studios) : [{ studio: null as string | null, rows: listed.map(a => ({ app: a })) }];
+  // Alt+Up / Alt+Down: the previous / next app in sidebar order (keeps the tab when the other app has it)
+  const sideOrder = groups.flatMap(x => x.rows.map(r => r.app));
+  const stepApp = useCallback((dir: 1 | -1) => {
+    if (!sideOrder.length) return;
+    const i = route.screen === 'app' ? sideOrder.findIndex(a => a.key === route.appId) : -1;
+    const next = sideOrder[i < 0 ? (dir === 1 ? 0 : sideOrder.length - 1) : (i + dir + sideOrder.length) % sideOrder.length]!;
+    go({ screen: 'app', appId: next.key, tab: route.screen === 'app' && tabsFor(!!next.project).includes(route.tab) ? route.tab : 'releases' });
+  }, [sideOrder, route, go]);
   const toggleGroup = (id: string) => setCollapsed(c => {
     const next = c.includes(id) ? c.filter(x => x !== id) : [...c, id];
     try { localStorage.setItem(SIDE_KEY, JSON.stringify(next)); } catch { /* private mode */ }
@@ -89,6 +99,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
       const mod = e.metaKey || e.ctrlKey;
       if (mod && !e.shiftKey && !e.altKey && e.key.toLowerCase() === 'k') { e.preventDefault(); setPalette(p => !p); return; }
       if (palette || welcome) return;
+      if (e.altKey && !mod && !e.shiftKey && (e.key === 'ArrowUp' || e.key === 'ArrowDown') && !isEditable(e.target as HTMLInputElement)) { e.preventDefault(); stepApp(e.key === 'ArrowDown' ? 1 : -1); return; }
       if (mod && !e.shiftKey && !e.altKey && /^[1-6]$/.test(e.key)) {
         e.preventDefault();
         const n = Number(e.key);
@@ -103,7 +114,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
     };
     window.addEventListener('keydown', onKey);
     return () => window.removeEventListener('keydown', onKey);
-  }, [palette, welcome, route, go, tabs]);
+  }, [palette, welcome, route, go, tabs, stepApp]);
 
   const closeWelcome = useCallback(() => {
     setWelcome(false);
@@ -118,10 +129,24 @@ export function App({ onTheme }: { onTheme: () => void }) {
     const studioName = (a: UnifiedApp) => d.studios.find(s => s.id === a.studio)?.name;
     for (const a of visible) c.push({ id: `app-${a.key}`, group: G.apps, title: a.name, hint: studioName(a) ?? t('palette.openApp'), keywords: `${a.ios?.app.bundleId ?? ''} ${a.android?.app.id ?? ''} ${a.project?.name ?? ''}`, app: { name: a.name, icon: d.iconFor(a) },
       run: () => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' }) });
+    c.push({ id: 'go-next-app', group: G.go, title: t('palette.nextApp'), icon: 'arrowRight', hint: 'Alt ↓', keywords: 'next app down j', run: () => stepApp(1) });
+    c.push({ id: 'go-prev-app', group: G.go, title: t('palette.prevApp'), icon: 'arrowLeft', hint: 'Alt ↑', keywords: 'previous app up k', run: () => stepApp(-1) });
     c.push({ id: 'go-portfolio', group: G.go, title: t('nav.portfolio'), icon: 'portfolio', hint: `${MOD} 1`, run: () => go({ screen: 'portfolio' }) });
     WORKSPACE.forEach((s, i) => c.push({ id: `go-${s}`, group: G.go, title: t(WS_KEY[s]), icon: WS_ICON[s], hint: `${MOD} ${i + 2}`, run: () => go({ screen: s }) }));
     for (const s of d.studios) c.push({ id: `studio-${s.id}`, group: G.go, title: s.name, icon: 'building', keywords: 'studio', hint: t('palette.studio'), run: () => go({ screen: 'accounts', section: s.id }) });
     if (app) for (const tab of tabs) c.push({ id: `tab-${tab}`, group: G.tabs, title: `${app.name} · ${t(TAB_KEY[tab])}`, icon: TAB_ICON[tab], run: () => go({ screen: 'app', appId: app.key, tab }) });
+    // the app's own menu (consoles, folder, copy ids, reads, ignore, unpair) as commands: every right-click action is
+    // also one Ctrl+K away; opening a tab is already above
+    if (app) {
+      const skip = new Set([t('cm.open'), t('cm.openTab')]);
+      const add = (items: MenuInput, prefix: string) => items.forEach((e, i) => {
+        if (!e || !isItem(e) || skip.has(e.label) || e.disabled) return;
+        const title = prefix ? `${prefix} · ${e.label}` : e.label;
+        if (e.submenu) { add(e.submenu, title); return; }
+        if (e.onSelect) c.push({ id: `appcmd-${prefix}-${i}-${e.label}`, group: t('palette.gApp', { name: app.name }), title, icon: e.icon, hint: e.shortcut, keywords: app.name, run: e.onSelect });
+      });
+      add(appMenu(app, d, { route, go, openPalette: () => setPalette(true), openWelcome: () => setWelcome(true) }, { showIgnored }), '');
+    }
     for (const x of exports) c.push({ id: `export-${x.id}`, group: G.exp, title: t('palette.export', { what: x.label }), icon: x.icon ?? 'download', keywords: `export save download ${x.kind}`, hint: x.disabled || `.${x.kind}`, run: () => { runExport(x); } });
     if (app?.project) {
       const p = app.project.id;
@@ -137,7 +162,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
     c.push({ id: 'act-theme', group: G.act, title: t('action.toggleTheme'), icon: 'moon', keywords: 'dark light', run: onTheme });
     c.push({ id: 'act-welcome', group: G.act, title: t('action.welcome'), icon: 'sparkle', keywords: 'onboarding start guide', run: () => setWelcome(true) });
     return c;
-  }, [d, visible, app, tabs, route, go, onTheme, exports, runExport]);
+  }, [d, visible, app, tabs, route, go, onTheme, exports, runExport, showIgnored, stepApp]);
 
   const crumbs: { label: string; to?: Route }[] = route.screen === 'portfolio' ? [{ label: t('nav.portfolio') }]
     : route.screen === 'app' ? [{ label: t('nav.portfolio'), to: { screen: 'portfolio' } }, { label: app?.name ?? '', to: app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined }, { label: t(TAB_KEY[route.tab]) }]
@@ -148,7 +173,6 @@ export function App({ onTheme }: { onTheme: () => void }) {
   useEffect(() => { setFocus(app?.key ?? null); }, [app?.key, setFocus]);
   const nav = useMemo(() => ({ route, go, openPalette: () => setPalette(true), openWelcome: () => setWelcome(true) }), [route, go]);
   const current = (r: Route) => (sameRoute(r, route) || (r.screen === 'app' && route.screen === 'app' && r.appId === route.appId) || (r.screen !== 'app' && r.screen !== 'portfolio' && r.screen === route.screen) ? 'page' : undefined);
-  const groups = d.studios.length ? groupByStudio(listed.map(a => ({ app: a })), d.studios) : [{ studio: null as string | null, rows: listed.map(a => ({ app: a })) }];
   const ignoredCount = d.apps.filter(a => a.ignored).length + d.overrides.ignored.filter(i => i.startsWith('account:')).length;
 
   const menu = useContextMenu();
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index ad3e644..e73887f 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -99,6 +99,16 @@
 .ds-hero-shots img { height: 280px; width: auto; aspect-ratio: 9 / 19.5; object-fit: cover; object-position: top; border-radius: 16px; box-shadow: 0 18px 36px -14px rgba(0, 0, 0, .55); flex: none; transition: transform var(--speed) var(--ease); }
 .ds-hero-shots img:nth-child(even) { margin-top: 26px; }
 .ds-hero:hover .ds-hero-shots img { transform: translateY(-3px); }
+/* compact hero: every app tab but Releases (one slim row, the tab content starts above the fold) */
+.ds-hero.compact { grid-template-columns: minmax(0, 1fr); }
+.ds-hero.compact .ds-hero-main { padding: 14px 20px; gap: 0; }
+.ds-hero.compact .ds-hero-icon { width: 52px; height: 52px; border-radius: 14px; font-size: 18px; }
+.ds-hero.compact .ds-hero-id { gap: 14px; }
+.ds-hero.compact .ds-hero-t { display: flex; flex-wrap: wrap; align-items: center; gap: 6px 10px; }
+.ds-hero.compact .ds-hero-row { flex-basis: 100%; }
+.ds-hero.compact .ds-hero-name { font-size: 20px; }
+.ds-hero.compact .ds-hero-ids .store-badge { height: 26px; }
+.ds-hero-cta { margin-left: auto; flex: none; }
 @media (max-width: 1180px) { .ds-hero { grid-template-columns: minmax(0, 1fr); } .ds-hero-shots { display: none; } }
 @media (max-width: 900px) { .ds-hero-pipe { grid-template-columns: minmax(0, 1fr); } .ds-hero-foot { justify-items: start; } }
 
@@ -220,3 +230,5 @@
 .ds-menu-sep { height: 1px; margin: 5px 6px; background: var(--ds-stroke); }
 @media (prefers-reduced-motion: reduce) { .ds-menu { transition: none; transform: none; } }
 :root[data-motion="reduce"] .ds-menu { transition: none; transform: none; }
+/* headings focused by code (dialog / wizard step titles) for screen readers: no ring */
+[tabindex="-1"]:focus:not(:focus-visible), h1[tabindex="-1"]:focus, h2[tabindex="-1"]:focus { outline: none; }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 2d8329e..0e2d6c0 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -59,6 +59,11 @@ export const en = {
   'palette.gApps': 'Apps',
   'palette.gGo': 'Go to',
   'palette.gTabs': 'App tabs',
+  'palette.gApp': 'This app: {name}',
+  'palette.nextApp': 'Next app',
+  'palette.prevApp': 'Previous app',
+  'settings.scApps': 'Previous / next app',
+  'settings.scMenu': 'Context menu of the focused item',
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index cce0065..ce7af40 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -61,6 +61,11 @@ export const tr: Record<keyof typeof en, string> = {
   'palette.gApps': 'Uygulamalar',
   'palette.gGo': 'Git',
   'palette.gTabs': 'Uygulama sekmeleri',
+  'palette.gApp': 'Bu uygulama: {name}',
+  'palette.nextApp': 'Sonraki uygulama',
+  'palette.prevApp': 'Önceki uygulama',
+  'settings.scApps': 'Önceki / sonraki uygulama',
+  'settings.scMenu': 'Odaktaki öğenin bağlam menüsü',
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 19a047c..1736d8d 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -137,6 +137,7 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
           {android && <button className="btn btn-sm btn-ghost" onClick={() => open(playUrlFor(d, app))} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
         </>}
         all={all} ios={!!ios} android={!!android} next={l?.release.next?.version ?? null}
+        compact={tab !== 'releases'}
         cta={nextStep({ project: !!app.project, att, all, next: l?.release.next?.version ?? null })} onCta={setTab} />
       <AppControls app={app} />
       {!app.project && <StoreOnlyBanner app={app} />}
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
index 59a67f8..91c51d3 100644
--- a/apps/desktop/src/screens/Settings.tsx
+++ b/apps/desktop/src/screens/Settings.tsx
@@ -225,6 +225,8 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
               <dt>{t('nav.portfolio')}</dt><dd><Kbd keys={[MOD, '1']} /></dd>
               <dt>{t('settings.scWorkspace')}</dt><dd><Kbd keys={[MOD, '2']} /><span className="muted">–</span><Kbd keys={[MOD, '6']} /></dd>
               <dt>{t('settings.scTabs')}</dt><dd><Kbd keys={[MOD, '⇧', '[']} /><Kbd keys={[MOD, '⇧', ']']} /></dd>
+              <dt>{t('settings.scApps')}</dt><dd><Kbd keys={['Alt', '↑']} /><Kbd keys={['Alt', '↓']} /></dd>
+              <dt>{t('settings.scMenu')}</dt><dd><Kbd keys={['⇧', 'F10']} /></dd>
               <dt>{t('settings.scTabArrows')}</dt><dd><Kbd keys={['←', '→']} /></dd>
               <dt>{t('settings.scClose')}</dt><dd><Kbd keys={['Esc']} /></dd>
               <dt>{t('set.scQuit')}</dt><dd><Kbd keys={[MOD, 'Q']} /></dd>
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index 97ea2e0..bc36d96 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -179,16 +179,19 @@ export function PageHeader({ title, subtitle, eyebrow, actions, icon }: { title:
 }
 
 /** App hero: screenshots strip, big icon, name, ids, store links, the two-store pipeline and the next step. */
-export function Hero({ name, icon, projectId, ids, badges, links, all, ios, android, cta, onCta, next, children, onContextMenu }: {
+export function Hero({ name, icon, projectId, ids, badges, links, all, ios, android, cta, onCta, next, children, onContextMenu, compact }: {
   name: string; icon: string | null; projectId: string | null; ids?: ReactNode; badges?: ReactNode; links?: ReactNode;
   /** The app's context menu (useContextMenu props). */
   onContextMenu?: (e: ReactMouseEvent) => void;
+  /** One slim row (icon, name, ids, next step): every tab but the overview, so the tab's content starts high. */
+  compact?: boolean;
   all: StoreRelease[]; ios: boolean; android: boolean; cta?: Cta | null; onCta?: (tab: AppTab) => void; next?: string | null; children?: ReactNode;
 }) {
   const hue = useTint(icon, name);
-  const shots = useShots(projectId, 4);
+  const shots = useShots(compact ? null : projectId, 4);
+  const ctaBtn = cta && <button className={`btn ${cta.primary ? 'btn-primary' : ''} pf-cta`} onClick={() => onCta?.(cta.tab)}><Icon name={cta.icon} />{cta.text}</button>;
   return (
-    <section className="ds-hero" style={tintStyle(hue)} aria-label={name} onContextMenu={onContextMenu}>
+    <section className={`ds-hero${compact ? ' compact' : ''}`} style={tintStyle(hue)} aria-label={name} onContextMenu={onContextMenu}>
       <div className="ds-hero-main">
         <div className="ds-hero-id">
           <AppIcon name={name} src={icon} className="ds-hero-icon" />
@@ -197,18 +200,19 @@ export function Hero({ name, icon, projectId, ids, badges, links, all, ios, andr
             {ids && <div className="ds-hero-ids">{ids}</div>}
             {links && <div className="ds-hero-links">{links}</div>}
           </div>
+          {compact && ctaBtn && <div className="ds-hero-cta">{ctaBtn}</div>}
         </div>
-        <div className="ds-hero-pipe">
+        {!compact && <div className="ds-hero-pipe">
           <Pipeline all={all} ios={ios} android={android} size="lg" />
           <div className="ds-hero-foot">
             <div className="ds-hero-next"><span className="pf-next-l">{t('pf.next')}</span><span className="ds-hero-next-v num">{next ?? '–'}</span></div>
-            {cta && <button className={`btn ${cta.primary ? 'btn-primary' : ''} pf-cta`} onClick={() => onCta?.(cta.tab)}><Icon name={cta.icon} />{cta.text}</button>}
+            {ctaBtn}
           </div>
-        </div>
+        </div>}
         {children}
       </div>
       {/* no screenshots: no second (cropped) copy of the icon, which already leads the hero */}
-      {shots.length > 0 && <div className="ds-hero-shots" aria-hidden="true">
+      {!compact && shots.length > 0 && <div className="ds-hero-shots" aria-hidden="true">
         {shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} />)}
       </div>}
     </section>

From 43e394ef7d5fedf1319a6ddf9611de01dc246333 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:26:02 +0800
Subject: [PATCH 068/255] Desktop: account and studio secondary actions move to
 ... menus; one Import apps button on the home; App folders header keeps one
 primary action

---
 apps/desktop/src/screens/Accounts.tsx   | 23 ++++++++++++++---------
 apps/desktop/src/screens/AppFolders.tsx |  4 +---
 apps/desktop/src/screens/Portfolio.tsx  |  2 +-
 3 files changed, 16 insertions(+), 13 deletions(-)

diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
index c0af2d0..64aa20b 100644
--- a/apps/desktop/src/screens/Accounts.tsx
+++ b/apps/desktop/src/screens/Accounts.tsx
@@ -3,7 +3,7 @@
 // issuer id, .p8). Keys live in the machine's credential profiles (~/.storebound, shared with the CLI);
 // the app keeps a label, the studio and the profile name only. Per account: a health
 // check (key works / permission missing / revoked, with the fix) and "Import apps" (every app the key can see).
-import { useContextMenu } from '../ui/ContextMenu';
+import { type MenuInput, useContextMenu, useMenuButton } from '../ui/ContextMenu';
 import { copyToast } from '../ui/app-menu';
 import { type FormEvent, useEffect, useState } from 'react';
 import { type Account, type AccountCheck, api, errorText, STUDIO_COLORS, type Studio, type StudioColor } from '../api';
@@ -59,8 +59,8 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
   const save = (e: FormEvent) => { e.preventDefault(); run(`ed-${a.id}`, async () => { await api.updateAccount(a.id, label, studio || null); if (a.kind === 'play' && a.profile && dev.trim() !== (a.developerId ?? '')) await api.setPlayDeveloper(a.id, dev.trim() || null); await d.reload(); setEdit(false); }); };
   const check = h?.check;
   const cm = useContextMenu();
-  return (
-    <div className={`acct${ignored ? ' is-ignored' : ''}`} {...cm(() => [
+  const more = useMenuButton();
+  const menu = (): MenuInput => [
       { label: t('acct.test'), icon: 'shield', disabled: busy ? t('cm.busy') : false, onSelect: () => run(`ck-${a.id}`, () => d.checkAccount(a.id)) },
       { label: t('acct.import'), icon: 'download', disabled: busy || d.importBusy ? t('cm.busy') : false, onSelect: () => run(`im-${a.id}`, () => d.importApps(a.id)) },
       { label: t('acct.edit'), icon: 'edit', onSelect: () => setEdit(true) },
@@ -73,7 +73,9 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
       'sep',
       { label: ignored ? t('acct.unignore') : t('acct.ignore'), icon: ignored ? 'eye' : 'eyeOff', onSelect: () => { void d.updateOverrides(o => withIgnored(o, [`account:${a.id}`], !ignored)); } },
       { label: t('accounts.remove'), icon: 'trash', danger: true, disabled: busy ? t('cm.busy') : false, onSelect: () => run(`rm-${a.id}`, async () => { await api.removeAccount(a.id); await d.reload(); }) },
-    ])}>
+    ];
+  return (
+    <div className={`acct${ignored ? ' is-ignored' : ''}`} {...cm(menu)}>
       <div className="acct-row">
         <span className={`acct-glyph ${a.kind}`}><StoreGlyph store={a.kind === 'play' ? 'android' : 'ios'} /></span>
         <div className="acct-main">
@@ -91,8 +93,7 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
           <button className="btn btn-sm" onClick={() => run(`ck-${a.id}`, () => d.checkAccount(a.id))} disabled={!!busy}><Icon name="shield" className={busy === `ck-${a.id}` ? 'spin' : undefined} />{t('acct.test')}</button>
           <button className="btn btn-sm" onClick={() => run(`im-${a.id}`, () => d.importApps(a.id))} disabled={!!busy || d.importBusy}><Icon name="download" />{t('acct.import')}</button>
           <button className="btn btn-sm btn-ghost btn-icon" onClick={() => setEdit(x => !x)} aria-expanded={edit} aria-label={t('acct.editAria', { label: a.label })} title={t('acct.edit')}><Icon name="edit" /></button>
-          <button className="btn btn-sm btn-ghost btn-icon" onClick={() => d.updateOverrides(o => withIgnored(o, [`account:${a.id}`], !ignored))} aria-label={ignored ? t('acct.unignore') : t('acct.ignore')} title={ignored ? t('acct.unignore') : t('acct.ignoreHint')}><Icon name={ignored ? 'eye' : 'eyeOff'} /></button>
-          <button className="btn btn-sm btn-ghost btn-icon btn-danger" disabled={!!busy} onClick={() => run(`rm-${a.id}`, async () => { await api.removeAccount(a.id); await d.reload(); })} aria-label={t('accounts.removeAria', { label: a.label })} title={t('accounts.remove')}><Icon name="trash" /></button>
+          <button className="btn btn-sm btn-ghost btn-icon" {...more(menu)} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" /></button>
         </div>
       </div>
       {edit && (
@@ -132,6 +133,7 @@ function StudioCard({ s, accounts, focus }: { s: Studio | null; accounts: Accoun
   const storeOnly = apps.filter(a => !a.project).length;
   const act = async (key: string, fn: () => Promise<unknown>) => { setBusy(key); setError(null); try { await fn(); await d.reload(); } catch (e) { setError(errorText(e)); } finally { setBusy(null); } };
   const id = s ? `studio-${s.id}` : 'studio-none';
+  const more = useMenuButton();
   useEffect(() => { if (focus) document.getElementById(id)?.scrollIntoView({ block: 'start' }); }, [focus, id]);
   return (
     <section className={`ds-sec studio-card${focus ? ' focus' : ''}`} id={id} aria-labelledby={`${id}-h`}>
@@ -146,9 +148,12 @@ function StudioCard({ s, accounts, focus }: { s: Studio | null; accounts: Accoun
         {s && (
           <div className="actions">
             <button className="btn btn-sm btn-ghost" onClick={() => setEdit(x => !x)} aria-expanded={edit}><Icon name="edit" />{t('studio.edit')}</button>
-            <button className="btn btn-sm btn-ghost" onClick={() => act('logo', () => api.studioLogo(s.id))} disabled={!!busy}><Icon name="image" />{t('studio.logo')}</button>
-            {s.logo && <button className="btn btn-sm btn-ghost" onClick={() => act('logo', () => api.studioLogo(s.id, true))} disabled={!!busy}>{t('studio.logoClear')}</button>}
-            <button className="btn btn-sm btn-ghost btn-danger" onClick={() => act('rm', () => api.removeStudio(s.id))} disabled={!!busy} title={t('studio.removeHint')}><Icon name="trash" />{t('studio.remove')}</button>
+            <button className="btn btn-sm btn-ghost btn-icon" {...more(() => [
+              { label: t('studio.logo'), icon: 'image', disabled: busy ? t('cm.busy') : false, onSelect: () => { void act('logo', () => api.studioLogo(s.id)); } },
+              s.logo && { label: t('studio.logoClear'), icon: 'x', disabled: busy ? t('cm.busy') : false, onSelect: () => { void act('logo', () => api.studioLogo(s.id, true)); } },
+              'sep',
+              { label: t('studio.remove'), icon: 'trash', danger: true, disabled: busy ? t('cm.busy') : false, onSelect: () => { void act('rm', () => api.removeStudio(s.id)); } },
+            ])} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" /></button>
           </div>
         )}
       </div>
diff --git a/apps/desktop/src/screens/AppFolders.tsx b/apps/desktop/src/screens/AppFolders.tsx
index bbfd2fe..4a59ae2 100644
--- a/apps/desktop/src/screens/AppFolders.tsx
+++ b/apps/desktop/src/screens/AppFolders.tsx
@@ -85,9 +85,7 @@ export function AppFolders() {
 
   return (
     <div className="page scr-folders">
-      <PageHeader icon="folder" eyebrow={t('v2cfg.workspace')} title={t('nav.apps')} subtitle={t('folders.lead')} actions={<><button className="btn" onClick={fastlane} disabled={!!busy} title={t('folders.fastlaneHint')}><Icon name="download" />{t('folders.fastlane')}</button>
-          <button className="btn" onClick={init} disabled={!!busy}><Icon name="sparkle" />{t('folders.startShort')}</button>
-          <button className="btn btn-primary" onClick={add} disabled={!!busy}><Icon name="folderPlus" />{t('action.addFolder')}</button></>} />
+      <PageHeader icon="folder" eyebrow={t('v2cfg.workspace')} title={t('nav.apps')} subtitle={t('folders.lead')} actions={<button className="btn btn-primary" onClick={add} disabled={!!busy}><Icon name="folderPlus" />{t('action.addFolder')}</button>} />
       {error && <Notice tone="bad">{error}</Notice>}
 
       {!d.projects.length ? (
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 1f6781f..31cdfbb 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -401,7 +401,7 @@ export function Portfolio() {
           <p>{t('portfolio.subStudios', { count: visible.length, stores, studios: d.studios.length })}{d.live ? ` · ${t('pf.readAgo', { when: ago(d.live.at) })}` : ''}</p>
         </div>
         <div className="actions">
-          <button className="btn" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length} title={t('action.importAppsHint')}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>
+          {neverImported === 0 && <button className="btn" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length} title={t('action.importAppsHint')}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>}
           <button className="btn btn-primary" onClick={() => d.refreshPortfolio(true)} disabled={!!d.portfolioBusy} title={t('action.readStoresHint')}>
             <Icon name="refresh" className={d.portfolioBusy === 'live' ? 'spin' : undefined} />{d.portfolioBusy === 'live' ? t('action.reading') : t('action.readStores')}
           </button>

From 936ee15e38789ce14ce17d63e04dda230d5c8424 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:30:22 +0800
Subject: [PATCH 069/255] Desktop: unique option keys in editor selects (App
 info page error); long package names no longer push App folders cards wide

---
 apps/desktop/src/styles/folders.css | 2 ++
 apps/desktop/src/ui/Editor.tsx      | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/desktop/src/styles/folders.css b/apps/desktop/src/styles/folders.css
index 3878a09..858402d 100644
--- a/apps/desktop/src/styles/folders.css
+++ b/apps/desktop/src/styles/folders.css
@@ -20,3 +20,5 @@
 .scr-ignored .li:hover, .scr-ignored .li:focus-within { background: var(--ds-inset); opacity: 1; }
 .scr-ignored .li .app-icon { width: 34px; height: 34px; filter: saturate(.55); }
 .scr-ignored .card-body { padding: 4px 22px 18px; }
+.scr-folders .store-badge { max-width: 100%; min-width: 0; }
+.scr-folders .store-badge .mono-id { min-width: 0; overflow: hidden; text-overflow: ellipsis; }
diff --git a/apps/desktop/src/ui/Editor.tsx b/apps/desktop/src/ui/Editor.tsx
index ca3394a..84d5029 100644
--- a/apps/desktop/src/ui/Editor.tsx
+++ b/apps/desktop/src/ui/Editor.tsx
@@ -115,7 +115,7 @@ export function ChoiceField({ project, area, path, saved, label, options, hint,
       <div className="ed-head"><label htmlFor={fid}>{label}{dirty && <span className="ed-dot" title={t('ed.unsavedField')} />}</label></div>
       <select id={fid} className="input" value={cur} data-edit={`config:${path}`} onChange={ev => e.set(project.id, make(ev.target.value), area, saved === undefined ? null : saved)}>
         {allowEmpty && <option value="">{t('ed.notSet')}</option>}
-        {options.map(([v, l]) => <option key={v} value={v}>{l}</option>)}
+        {options.map(([v, l], i) => <option key={`${v}-${i}`} value={v}>{l}</option>)}
       </select>
       {hint && <div className="ed-hint small muted">{hint}</div>}
       <Issues issues={issues} />

From 6a9f9f36c09d6aa4af5282d269e98fcf7de4e33b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:32:51 +0800
Subject: [PATCH 070/255] Desktop: compact hero drops its min height; app tabs
 fit one row at 1440 (tighter pills below 1560 px); hero screenshots only on
 wide windows so the pipeline labels never overlap

---
 apps/desktop/src/design.css | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index e73887f..1cbc416 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -100,7 +100,7 @@
 .ds-hero-shots img:nth-child(even) { margin-top: 26px; }
 .ds-hero:hover .ds-hero-shots img { transform: translateY(-3px); }
 /* compact hero: every app tab but Releases (one slim row, the tab content starts above the fold) */
-.ds-hero.compact { grid-template-columns: minmax(0, 1fr); }
+.ds-hero.compact { grid-template-columns: minmax(0, 1fr); min-height: 0; border-radius: var(--ds-r-lg); }
 .ds-hero.compact .ds-hero-main { padding: 14px 20px; gap: 0; }
 .ds-hero.compact .ds-hero-icon { width: 52px; height: 52px; border-radius: 14px; font-size: 18px; }
 .ds-hero.compact .ds-hero-id { gap: 14px; }
@@ -109,7 +109,8 @@
 .ds-hero.compact .ds-hero-name { font-size: 20px; }
 .ds-hero.compact .ds-hero-ids .store-badge { height: 26px; }
 .ds-hero-cta { margin-left: auto; flex: none; }
-@media (max-width: 1180px) { .ds-hero { grid-template-columns: minmax(0, 1fr); } .ds-hero-shots { display: none; } }
+@media (max-width: 1500px) { .ds-hero { grid-template-columns: minmax(0, 1fr); } .ds-hero-shots { display: none; } }
+@media (max-width: 1560px) { .ds-tabs .ds-tab { padding: 0 10px; gap: 6px; } .ds-tabs .ds-tab svg { width: 15px; height: 15px; } }
 @media (max-width: 900px) { .ds-hero-pipe { grid-template-columns: minmax(0, 1fr); } .ds-hero-foot { justify-items: start; } }
 
 /* ---------- app page shell ---------- */

From c36ad8765823109c5dac5c8a0939243514e066d5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:37:13 +0800
Subject: [PATCH 071/255] CHANGELOG: next release notes

---
 CHANGELOG.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f2d2f43..5374f84 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 
 ## Unreleased
 
+- Desktop: custom context menus everywhere (apps, releases, art, reviews, checks, fields, products, accounts, folders) with keyboard navigation, Shift+F10 and submenus; the WebView2 browser menu and browser shortcuts are off.
+- Desktop: each app shows once again (a folder project no longer appears a second time as a store-only app); a store app with a folder's bundle id or package is never listed separately.
+- Desktop UX pass on every screen: app tabs fit the window, slim app header, secondary actions in "…" menus, Ctrl+K lists app actions, Alt+Up/Down switches apps, accounts and folders decluttered.
+- Play Console links open the app's own page: developer id per credential profile (`storebound accounts play-developer <profile> <id>`, editable in Studios & accounts), one link builder for desktop, CLI and watch.
+- Checks: "Open guide" opens the matching skill for every finding.
+
 ## 0.8.38 · 2026-10-23
 
 - Desktop: the app hero no longer shows a cropped second copy of the app icon.

From bd048daa868450fdc42b76dca606b6f57da9c446 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:39:22 +0700
Subject: [PATCH 072/255] storebound 0.8.39: version in package.json and every
 copy, CHANGELOG 0.8.39 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 0e63496..0646f7f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.38",
+      "version": "0.8.39",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index d9d513d..4fc0a44 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.38",
+  "version": "0.8.39",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index b4de710..d988d93 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.38",
+  "version": "0.8.39",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5374f84..281a748 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.39 · 2026-10-23
+
 - Desktop: custom context menus everywhere (apps, releases, art, reviews, checks, fields, products, accounts, folders) with keyboard navigation, Shift+F10 and submenus; the WebView2 browser menu and browser shortcuts are off.
 - Desktop: each app shows once again (a folder project no longer appears a second time as a store-only app); a store app with a folder's bundle id or package is never listed separately.
 - Desktop UX pass on every screen: app tabs fit the window, slim app header, secondary actions in "…" menus, Ctrl+K lists app actions, Alt+Up/Down switches apps, accounts and folders decluttered.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index f8b4be2..8a59496 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.38",
+  "version": "0.8.39",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 5d7b6b5..68d7305 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.38"
+version = "0.8.39"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 4ebc98b..7973dc4 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.38"
+version = "0.8.39"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 4b6a468..6809fad 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.38",
+  "version": "0.8.39",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 1720339..6e29af1 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.38",
+  "version": "0.8.39",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index f398bde..b6bbfea 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.38",
+  "version": "0.8.39",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 83b8ce8869a9f31c04bb7239074173bd6760fa18 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:43:08 +0800
Subject: [PATCH 073/255] Desktop: sidebar reader as short rows with a progress
 bar; one Refresh (top bar) instead of two; rolling-out tile lists versions on
 their own lines; cards without screenshots show live versions per store

---
 apps/desktop/src/App.tsx               | 23 +++++++++++-------
 apps/desktop/src/i18n/en.ts            |  5 ++++
 apps/desktop/src/i18n/tr.ts            |  5 ++++
 apps/desktop/src/screens/Portfolio.tsx | 33 +++++++++++++++++++++-----
 apps/desktop/src/styles.css            | 15 +++++++++++-
 apps/desktop/src/ui/icons.tsx          |  3 ++-
 6 files changed, 67 insertions(+), 17 deletions(-)

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 242211c..30789c0 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -286,17 +286,22 @@ export function App({ onTheme }: { onTheme: () => void }) {
   );
 }
 
-/** The background reader in one line: "Reading 12 of 48 · App Store limit 3 412/3 600 left this hour". */
+/** The background reader in the sidebar foot: progress (count + thin bar) and the App Store hourly limit on their own
+ *  short rows, so nothing is cut off; the long wording stays in the tooltip. */
 function ReaderLine() {
   const d = useData();
   const r = d.reader;
   const q = Object.values(r.quota).sort((a, b) => a.remaining - b.remaining)[0];
-  const parts: string[] = [];
-  if (r.total > 0 && (r.running || r.queued)) parts.push(t('reader.progress', { done: r.done, total: r.total }));
-  else if (!d.reader.autoRead) parts.push(t('reader.off'));
-  else if (d.ready && d.apps.length) parts.push(t('reader.upToDate'));
-  if (Object.keys(r.paused).length) parts.push(t('reader.backoff'));
-  if (q) parts.push(t('reader.appleQuota', { left: num(q.remaining), limit: num(q.limit) }));
-  if (!parts.length) return null;
-  return <div className="row reader-line" data-testid="reader-line" aria-live="polite"><Icon name="refresh" className={`sr-icon${r.running ? ' spin' : ''}`} /><span title={parts.join(' · ')}>{parts.join(' · ')}</span></div>;
+  const busy = r.total > 0 && (r.running || r.queued);
+  const head = busy ? t('reader.progress', { done: r.done, total: r.total }) : !d.reader.autoRead ? t('reader.off') : d.ready && d.apps.length ? t('reader.upToDate') : '';
+  const paused = Object.keys(r.paused).length > 0;
+  if (!head && !q && !paused) return null;
+  return (
+    <div className="reader-line" data-testid="reader-line" aria-live="polite">
+      {head && <div className="row" title={head}><Icon name="refresh" className={`sr-icon${r.running ? ' spin' : ''}`} /><span>{head}</span></div>}
+      {busy && <div className="reader-bar" role="progressbar" aria-valuemin={0} aria-valuemax={r.total} aria-valuenow={r.done} aria-label={head}><i style={{ width: `${Math.round((r.done / Math.max(1, r.total)) * 100)}%` }} /></div>}
+      {paused && <div className="row" title={t('reader.backoff')}><Icon name="pause" className="sr-icon" /><span>{t('reader.backoffShort')}</span></div>}
+      {q && <div className="row" title={t('reader.appleQuota', { left: num(q.remaining), limit: num(q.limit) })}><Icon name="gauge" className="sr-icon" /><span>{t('reader.appleQuotaShort', { left: num(q.remaining), limit: num(q.limit) })}</span></div>}
+    </div>
+  );
 }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 0e2d6c0..075a4a0 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -64,6 +64,11 @@ export const en = {
   'palette.prevApp': 'Previous app',
   'settings.scApps': 'Previous / next app',
   'settings.scMenu': 'Context menu of the focused item',
+  'reader.backoffShort': "Slowed down by the store",
+  'reader.appleQuotaShort': "App Store {left} / {limit} per hour",
+  'kpi.more': "+{count} more",
+  'pf.noShots': "No screenshots in the app folder yet",
+  'pf.noShotsStore': "Store only: no app folder with screenshots",
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index ce7af40..0b94e93 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -66,6 +66,11 @@ export const tr: Record<keyof typeof en, string> = {
   'palette.prevApp': 'Önceki uygulama',
   'settings.scApps': 'Önceki / sonraki uygulama',
   'settings.scMenu': 'Odaktaki öğenin bağlam menüsü',
+  'reader.backoffShort': "Mağaza yavaşlattı",
+  'reader.appleQuotaShort': "App Store saatte {left} / {limit}",
+  'kpi.more': "+{count} tane daha",
+  'pf.noShots': "Uygulama klasöründe henüz ekran görüntüsü yok",
+  'pf.noShotsStore': "Yalnız mağazada: ekran görüntülü uygulama klasörü yok",
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 31cdfbb..9f8db34 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -152,7 +152,17 @@ function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null;
   return (
     <article className="pf-card" style={style} aria-label={name} {...menu(() => appMenu(app, d, nav, { showIgnored }))}>
       <div className={`pf-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
-        {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} loading="lazy" />) : <AppIcon name={app.name} src={icon} className="pf-hero-icon" />}
+        {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} loading="lazy" />) : <>
+          <AppIcon name={app.name} src={icon} className="pf-hero-icon" />
+          <div className="pf-live">
+            {(['ios', 'android'] as const).filter(k => (k === 'ios' ? ios : android)).map(k => {
+              const now = storeNow(all, k).now;
+              return <div key={k} className="pf-live-row"><StoreGlyph store={k} /><span className="pf-live-s">{k === 'ios' ? 'App Store' : 'Google Play'}</span>
+                <span className="num strong">{now?.version ?? '–'}</span>{now && <PhaseChip r={now} />}</div>;
+            })}
+            <span className="pf-live-note">{t(projectId ? 'pf.noShots' : 'pf.noShotsStore')}</span>
+          </div>
+        </>}
       </div>
       <div className="pf-body">
         <div className="pf-head">
@@ -402,21 +412,18 @@ export function Portfolio() {
         </div>
         <div className="actions">
           {neverImported === 0 && <button className="btn" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length} title={t('action.importAppsHint')}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>}
-          <button className="btn btn-primary" onClick={() => d.refreshPortfolio(true)} disabled={!!d.portfolioBusy} title={t('action.readStoresHint')}>
-            <Icon name="refresh" className={d.portfolioBusy === 'live' ? 'spin' : undefined} />{d.portfolioBusy === 'live' ? t('action.reading') : t('action.readStores')}
-          </button>
         </div>
       </div>
 
       {d.portfolioError && <Notice tone="bad">{d.portfolioError}</Notice>}
       <BlockedProjectsNotice blocked={blocked} onRetry={recheck} busy={rechecking} />
       {neverImported > 0 && <Notice tone="info" icon="download" action={<button className="btn btn-sm" onClick={() => d.importApps()} disabled={d.importBusy}>{t('action.importApps')}</button>}>{t('portfolio.notImported', { count: neverImported })}</Notice>}
-      {!known && d.ready && d.portfolioBusy !== 'live' && <Notice tone="info" action={<button className="btn btn-sm" onClick={() => d.refreshPortfolio(true)}>{t('action.readStores')}</button>}>{t('portfolio.notReadNotice')}</Notice>}
+      {!known && d.ready && d.portfolioBusy !== 'live' && <Notice tone="info" action={<button className="btn btn-sm btn-primary" onClick={() => { d.readAll(true).catch(() => {}); }}>{t('action.readStores')}</button>}>{t('portfolio.notReadNotice')}</Notice>}
 
       <div className="kpis">
         <Kpi icon="layers" label={t('kpi.apps')} value={rows.length} sub={t('kpi.appsSubStore', { ios: iosApps, android: androidApps, store: storeOnly })} />
         <Kpi icon="check" label={t('kpi.live')} value={known ? liveCount : '–'} sub={known ? t('kpi.liveSub', { count: stores }) : notRead} />
-        <Kpi icon="rocket" label={t('kpi.rolling')} value={known ? rolling.length : '–'} sub={!known ? notRead : rolling.length ? [...new Set(rolling.map(r => r.version))].map(v => `${v}: ${rolling.filter(r => r.version === v).map(r => `${r.store === 'ios' ? 'iOS' : 'Android'}${r.fraction !== null ? ` ${share(r.fraction)}` : ''}`).join(', ')}`).join(' · ') : t('kpi.none')} />
+        <Kpi icon="rocket" label={t('kpi.rolling')} value={known ? rolling.length : '–'} sub={!known ? notRead : rolling.length ? <RollingLines rolling={rolling} /> : t('kpi.none')} />
         <Kpi icon="clock" label={t('kpi.review')} value={known ? review.length : '–'} sub={!known ? notRead : review.length ? review.map(r => `${r.store === 'ios' ? 'iOS' : 'Android'} ${r.version}`).join(' · ') : t('kpi.none')} tone={review.length ? 'warn' : undefined} />
         <Kpi icon="alert" label={t('kpi.attention')} value={att.length} sub={blockers ? t('kpi.blockers', { count: blockers }) : t('kpi.noBlockers')} tone={blockers ? 'bad' : att.length ? 'warn' : undefined} />
       </div>
@@ -505,3 +512,17 @@ export function Portfolio() {
     </div>
   );
 }
+
+/** The rolling-out tile: the first two versions on their own lines ("2.3.0 iOS 20% · Android 20%"), then "+N more"; all of
+  them in the tooltip. Never one long ellipsized line. */
+function RollingLines({ rolling }: { rolling: StoreRelease[] }) {
+  const versions = [...new Set(rolling.map(r => r.version ?? '?'))];
+  const line = (v: string) => rolling.filter(r => (r.version ?? '?') === v).map(r => `${r.store === 'ios' ? 'iOS' : 'Android'}${r.fraction !== null ? ` ${share(r.fraction)}` : ''}`).join(' · ');
+  const all = versions.map(v => `${v} ${line(v)}`).join(' · ');
+  return (
+    <span className="k-lines" title={all}>
+      {versions.slice(0, 2).map(v => <span key={v} className="k-line"><b className="num">{v}</b> {line(v)}</span>)}
+      {versions.length > 2 && <span className="k-line muted">{t('kpi.more', { count: versions.length - 2 })}</span>}
+    </span>
+  );
+}
diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css
index 8be9191..77bc271 100644
--- a/apps/desktop/src/styles.css
+++ b/apps/desktop/src/styles.css
@@ -1048,7 +1048,7 @@ button.ck.ck-pick[aria-checked="true"] { border-color: var(--accent-solid); box-
 .pf-shots { display: flex; gap: 10px; height: 200px; padding: 14px 14px 0; overflow: hidden; background: linear-gradient(160deg, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / .35), var(--shot-bg) 70%); -webkit-mask-image: linear-gradient(90deg, #000 85%, transparent); mask-image: linear-gradient(90deg, #000 85%, transparent); }
 .pf-shots img { height: 100%; width: auto; aspect-ratio: 9 / 19.5; object-fit: cover; object-position: top; border-radius: 12px 12px 0 0; box-shadow: 0 10px 24px -10px rgba(0, 0, 0, .45); flex: none; transition: transform var(--speed) var(--ease); }
 .pf-card:hover .pf-shots img { transform: translateY(-3px); }
-.pf-shots.empty { align-items: center; justify-content: center; padding: 0; -webkit-mask-image: none; mask-image: none;
+.pf-shots.empty { align-items: center; justify-content: center; gap: 22px; padding: 0 22px; -webkit-mask-image: none; mask-image: none;
   background: radial-gradient(60% 90% at 50% 60%, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / .45), transparent 70%), linear-gradient(160deg, hsl(var(--tint-h) var(--pf-tint-s) var(--pf-tint-l) / .22), var(--shot-bg)); }
 .pf-shots .pf-hero-icon { width: 96px; height: 96px; border-radius: 24px; font-size: 30px; box-shadow: 0 18px 40px -14px hsl(var(--tint-h) 70% 30% / .7), inset 0 0 0 1px rgba(255, 255, 255, .12); transition: transform var(--speed) var(--ease); }
 .pf-card:hover .pf-hero-icon { transform: scale(1.04) rotate(-2deg); }
@@ -1110,3 +1110,16 @@ button.ck.ck-pick[aria-checked="true"] { border-color: var(--accent-solid); box-
 @media (max-width: 1100px) { .pf-cols { grid-template-columns: minmax(0, 1fr); } }
 @media (prefers-reduced-motion: reduce) { .pf-card, .pf-card:hover, .pf-shots img, .pf-hero-icon { transform: none !important; transition: none; } }
 :root[data-motion="reduce"] .pf-card, :root[data-motion="reduce"] .pf-card:hover, :root[data-motion="reduce"] .pf-shots img, :root[data-motion="reduce"] .pf-hero-icon { transform: none !important; transition: none; }
+.reader-line { display: grid; gap: 5px; }
+.reader-line .row span { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.reader-bar { height: 3px; border-radius: 2px; background: var(--line); overflow: hidden; margin-left: 21px; }
+.reader-bar i { display: block; height: 100%; background: var(--accent-solid); transition: width var(--speed) var(--ease); }
+.kpi .k-sub .k-lines { display: grid; gap: 1px; white-space: nowrap; }
+.kpi .k-sub .k-line { overflow: hidden; text-overflow: ellipsis; }
+.kpi .k-sub:has(.k-lines) { white-space: normal; overflow: visible; }
+.pf-shots.empty .pf-hero-icon { width: 76px; height: 76px; border-radius: 20px; flex: none; }
+.pf-live { display: grid; gap: 8px; min-width: 0; }
+.pf-live-row { display: flex; align-items: center; gap: 8px; height: 28px; padding: 0 10px; border-radius: 9px; background: color-mix(in srgb, var(--surface) 70%, transparent); border: 1px solid var(--line); font-size: var(--t-meta); white-space: nowrap; }
+.pf-live-row svg, .pf-live-row .store-mark { width: 14px; height: 14px; flex: none; }
+.pf-live-s { color: var(--muted); }
+.pf-live-note { font-size: var(--t-micro, 11px); color: var(--muted); }
diff --git a/apps/desktop/src/ui/icons.tsx b/apps/desktop/src/ui/icons.tsx
index f57cc74..6d0cb1c 100644
--- a/apps/desktop/src/ui/icons.tsx
+++ b/apps/desktop/src/ui/icons.tsx
@@ -27,6 +27,7 @@ import { DotIcon } from '@phosphor-icons/react/dist/csr/Dot';
 import { DownloadSimpleIcon } from '@phosphor-icons/react/dist/csr/DownloadSimple';
 import { ExportIcon } from '@phosphor-icons/react/dist/csr/Export';
 import { DotsThreeIcon } from '@phosphor-icons/react/dist/csr/DotsThree';
+import { GaugeIcon } from '@phosphor-icons/react/dist/csr/Gauge';
 import { EyeIcon } from '@phosphor-icons/react/dist/csr/Eye';
 import { EyeSlashIcon } from '@phosphor-icons/react/dist/csr/EyeSlash';
 import { FileTextIcon } from '@phosphor-icons/react/dist/csr/FileText';
@@ -85,7 +86,7 @@ const ICONS = {
   sun: SunIcon, terminal: TerminalWindowIcon, copy: CopyIcon, image: ImageIcon, users: UsersIcon, layers: StackIcon,
   sparkle: SparkleIcon, pause: PauseIcon, cube: CubeIcon, arrowRight: ArrowRightIcon, arrowLeft: ArrowLeftIcon, dot: DotIcon,
   phone: DeviceMobileIcon, keyboard: KeyboardIcon, database: DatabaseIcon, wand: MagicWandIcon, building: BuildingsIcon,
-  more: DotsThreeIcon, eye: EyeIcon, eyeOff: EyeSlashIcon, link: LinkIcon, unlink: LinkBreakIcon, bell: BellIcon, filter: FunnelIcon, play: PlayIcon,
+  more: DotsThreeIcon, gauge: GaugeIcon, eye: EyeIcon, eyeOff: EyeSlashIcon, link: LinkIcon, unlink: LinkBreakIcon, bell: BellIcon, filter: FunnelIcon, play: PlayIcon,
   send: PaperPlaneRightIcon, edit: PencilSimpleIcon, upload: UploadSimpleIcon, sliders: SlidersHorizontalIcon,
   rotate: ArrowCounterClockwiseIcon, cloud: CloudIcon, coins: CoinsIcon, chart: TrendUpIcon, flask: FlaskIcon, grid: GridFourIcon,
   clipboard: ClipboardTextIcon, share: ExportIcon, lock: LockIcon, question: QuestionIcon,

From 5b6d5cdac2d331b2fea459d1f30a7fc8740302ee Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:44:43 +0800
Subject: [PATCH 074/255] Desktop: pill tabs stay one row; tabs that do not fit
 go into a More menu, the active tab always stays visible

---
 apps/desktop/src/design.css         |  8 +++--
 apps/desktop/src/i18n/en.ts         |  2 ++
 apps/desktop/src/i18n/tr.ts         |  2 ++
 apps/desktop/src/ui/ds.tsx          | 50 ++++++++++++++++++++++++-----
 apps/desktop/src/ui/tabs-fit.ts     | 18 +++++++++++
 apps/desktop/tests/tabs-fit.test.ts |  7 ++++
 6 files changed, 77 insertions(+), 10 deletions(-)
 create mode 100644 apps/desktop/src/ui/tabs-fit.ts
 create mode 100644 apps/desktop/tests/tabs-fit.test.ts

diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index 1cbc416..5e7a471 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -110,7 +110,7 @@
 .ds-hero.compact .ds-hero-ids .store-badge { height: 26px; }
 .ds-hero-cta { margin-left: auto; flex: none; }
 @media (max-width: 1500px) { .ds-hero { grid-template-columns: minmax(0, 1fr); } .ds-hero-shots { display: none; } }
-@media (max-width: 1560px) { .ds-tabs .ds-tab { padding: 0 10px; gap: 6px; } .ds-tabs .ds-tab svg { width: 15px; height: 15px; } }
+
 @media (max-width: 900px) { .ds-hero-pipe { grid-template-columns: minmax(0, 1fr); } .ds-hero-foot { justify-items: start; } }
 
 /* ---------- app page shell ---------- */
@@ -119,7 +119,7 @@
 .ds-app-sticky { position: sticky; top: -1px; z-index: 4; margin: 0 -28px; padding: 8px 28px; background: color-mix(in srgb, var(--bg) 82%, transparent); backdrop-filter: blur(12px); -webkit-backdrop-filter: blur(12px); }
 
 /* ---------- Tabs v2 (pill) ---------- */
-.ds-tabs { display: flex; gap: 4px; padding: 4px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); flex-wrap: wrap; width: max-content; max-width: 100%; box-sizing: border-box; }
+.ds-tabs { display: flex; gap: 4px; padding: 4px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); flex-wrap: nowrap; overflow: hidden; width: max-content; max-width: 100%; box-sizing: border-box; }
 .ds-tabs::-webkit-scrollbar { display: none; }
 .ds-tab { all: unset; flex: none; display: inline-flex; align-items: center; gap: 7px; height: 34px; padding: 0 14px; border-radius: 10px; font-weight: 600; color: var(--muted); cursor: pointer; white-space: nowrap; transition: background var(--speed) var(--ease), color var(--speed) var(--ease), box-shadow var(--speed) var(--ease); }
 .ds-tab svg { width: 16px; height: 16px; }
@@ -233,3 +233,7 @@
 :root[data-motion="reduce"] .ds-menu { transition: none; transform: none; }
 /* headings focused by code (dialog / wizard step titles) for screen readers: no ring */
 [tabindex="-1"]:focus:not(:focus-visible), h1[tabindex="-1"]:focus, h2[tabindex="-1"]:focus { outline: none; }
+
+.ds-tab[hidden] { display: none; }
+.ds-tab-more svg:last-child { width: 12px; height: 12px; }
+@media (max-width: 1560px) { .ds-tabs .ds-tab { padding: 0 10px; gap: 6px; } .ds-tabs .ds-tab svg { width: 15px; height: 15px; } }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 075a4a0..492149c 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -69,6 +69,8 @@ export const en = {
   'kpi.more': "+{count} more",
   'pf.noShots': "No screenshots in the app folder yet",
   'pf.noShotsStore': "Store only: no app folder with screenshots",
+  'tabs.more': "{count} more tabs",
+  'tabs.moreShort': "More",
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 0b94e93..1d73311 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -71,6 +71,8 @@ export const tr: Record<keyof typeof en, string> = {
   'kpi.more': "+{count} tane daha",
   'pf.noShots': "Uygulama klasöründe henüz ekran görüntüsü yok",
   'pf.noShotsStore': "Yalnız mağazada: ekran görüntülü uygulama klasörü yok",
+  'tabs.more': "{count} sekme daha",
+  'tabs.moreShort': "Daha fazla",
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index bc36d96..bff3d8a 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -2,7 +2,7 @@
 // the portfolio home as reusable parts. PageHeader, Hero (app hero with screenshots, two-store pipeline, next step),
 // Section, StatTile, Pipeline, StatusPill, EmptyState, Tabs, Toolbar, Dialog, plus the per-app tint (useTint / tintStyle)
 // and the rendered-screenshot loader (useShots) the cards and the hero share.
-import { type CSSProperties, type KeyboardEvent, type MouseEvent as ReactMouseEvent, type ReactNode, useEffect, useId, useRef, useState } from 'react';
+import { type CSSProperties, type KeyboardEvent, type MouseEvent as ReactMouseEvent, type ReactNode, useEffect, useId, useLayoutEffect, useRef, useState } from 'react';
 import { api, reads, type RenderImage, type StoreRelease, type ToolResult } from '../api';
 import { type Key, t } from '../i18n';
 import { share } from '../lib/format';
@@ -10,6 +10,8 @@ import { type Attention, hueOf, laneOf, STAGES, storeNow, type Tone } from '../l
 import type { AppTab } from '../nav';
 import { Icon, type IconName, StoreGlyph } from './icons';
 import { AppIcon } from './kit';
+import { useMenuButton } from './ContextMenu';
+import { fitTabs } from './tabs-fit';
 
 // ---- per-app tint ----
 
@@ -275,33 +277,65 @@ export function Toolbar({ label, children }: { label: string; children: ReactNod
 
 export interface TabItem<T extends string> { id: T; label: string; icon?: IconName; count?: number | null; dot?: boolean; dotTitle?: string }
 
-/** Pill tabs with icons and counts; arrows / Home / End move between them (roving tabindex). */
+/** Pill tabs with icons and counts; arrows / Home / End move between them (roving tabindex). One row always: tabs that
+ *  do not fit go into a "More" menu at the end, the active tab always stays in the row. */
 export function Tabs<T extends string>({ items, value, onChange, label, panelId = 'tabpanel' }: { items: TabItem<T>[]; value: T; onChange: (v: T) => void; label: string; panelId?: string }) {
   const refs = useRef<(HTMLButtonElement | null)[]>([]);
+  const row = useRef<HTMLDivElement>(null);
+  const widths = useRef<number[]>([]);
+  const [shown, setShown] = useState<number[] | null>(null);
+  const more = useMenuButton();
+  const active = items.findIndex(x => x.id === value);
+  const ids = items.map(x => x.id).join('|');
+  useLayoutEffect(() => {
+    const el = row.current;
+    if (!el) return;
+    const fit = () => {
+      // widths are measured while a tab is in the row; a hidden one keeps its last width
+      refs.current.forEach((b, i) => { if (b && b.offsetParent !== null) widths.current[i] = b.getBoundingClientRect().width; });
+      if (widths.current.length < items.length || widths.current.some(w => w === undefined)) { setShown(null); return; }
+      const cs = getComputedStyle(el);
+      const avail = (el.parentElement?.clientWidth ?? el.clientWidth) - parseFloat(cs.paddingLeft) - parseFloat(cs.paddingRight) - parseFloat(cs.borderLeftWidth) - parseFloat(cs.borderRightWidth);
+      const next = fitTabs(widths.current, avail, active, parseFloat(cs.columnGap) || 4, 96);
+      setShown(prev => (prev && prev.join() === next.join() ? prev : next.length === items.length ? null : next));
+    };
+    fit();
+    const ro = new ResizeObserver(fit);
+    if (el.parentElement) ro.observe(el.parentElement);
+    return () => ro.disconnect();
+  }, [ids, active, items.length]);
+  const visible = (i: number) => !shown || shown.includes(i);
+  const order = items.map((_, i) => i).filter(visible);
   const onKey = (ev: KeyboardEvent) => {
-    const i = items.findIndex(x => x.id === value);
-    const j = ev.key === 'ArrowRight' ? i + 1 : ev.key === 'ArrowLeft' ? i - 1 : ev.key === 'Home' ? 0 : ev.key === 'End' ? items.length - 1 : null;
+    const i = order.indexOf(active);
+    const j = ev.key === 'ArrowRight' ? i + 1 : ev.key === 'ArrowLeft' ? i - 1 : ev.key === 'Home' ? 0 : ev.key === 'End' ? order.length - 1 : null;
     if (j === null) return;
     ev.preventDefault();
-    const n = (j + items.length) % items.length;
+    const n = order[(j + order.length) % order.length]!;
     onChange(items[n]!.id);
     refs.current[n]?.focus();
   };
+  const hidden = items.filter((_, i) => !visible(i));
   return (
-    <div className="ds-tabs" role="tablist" aria-label={label} onKeyDown={onKey}>
+    <div className="ds-tabs" ref={row} role="tablist" aria-label={label} onKeyDown={onKey}>
       {items.map((x, i) => (
         <button key={x.id} ref={el => { refs.current[i] = el; }} role="tab" id={`tab-${x.id}`} aria-selected={value === x.id} aria-controls={panelId}
-          tabIndex={value === x.id ? 0 : -1} className="ds-tab" onClick={() => onChange(x.id)}>
+          tabIndex={value === x.id ? 0 : -1} className="ds-tab" onClick={() => onChange(x.id)} hidden={!visible(i)}>
           {x.icon && <Icon name={x.icon} weight={value === x.id ? 'fill' : 'regular'} />}{x.label}
           {x.count != null && x.count > 0 && <span className="ds-tab-n num">{x.count}</span>}
           {x.dot && <span className="ed-dot" title={x.dotTitle} />}
         </button>
       ))}
+      {hidden.length > 0 && (
+        <button type="button" className="ds-tab ds-tab-more" tabIndex={-1} {...more(() => hidden.map(x => ({ label: x.count ? `${x.label} (${x.count})` : x.label, icon: x.icon, onSelect: () => onChange(x.id) })))}
+          aria-label={t('tabs.more', { count: hidden.length })}>
+          <Icon name="more" />{t('tabs.moreShort')}{hidden.some(x => x.count) && <span className="ds-tab-n num">{hidden.reduce((a, x) => a + (x.count ?? 0), 0)}</span>}<Icon name="chevronDown" />
+        </button>
+      )}
     </div>
   );
 }
 
-/** Dialog v2: modal panel with a title, body and footer actions; Escape and the scrim close it, focus moves in. */
 export function Dialog({ title, icon, children, actions, onClose, wide }: { title: ReactNode; icon?: IconName; children: ReactNode; actions?: ReactNode; onClose: () => void; wide?: boolean }) {
   const root = useRef<HTMLDivElement>(null);
   const hid = useId();
diff --git a/apps/desktop/src/ui/tabs-fit.ts b/apps/desktop/src/ui/tabs-fit.ts
new file mode 100644
index 0000000..c1a219e
--- /dev/null
+++ b/apps/desktop/src/ui/tabs-fit.ts
@@ -0,0 +1,18 @@
+// Which pill tabs fit in one row: tabs in order until the row is full, the active tab always (it takes the place of
+// the last one that would fit), the rest go into a "More" menu. Pure, for the tests.
+export function fitTabs(widths: number[], avail: number, active: number, gap: number, moreW: number): number[] {
+  const total = widths.reduce((a, w) => a + w, 0) + gap * Math.max(0, widths.length - 1);
+  if (total <= avail) return widths.map((_, i) => i);
+  const room = avail - moreW - gap;
+  const out: number[] = [];
+  let used = active >= 0 ? (widths[active] ?? 0) : 0;
+  for (let i = 0; i < widths.length; i++) {
+    if (i === active) continue;
+    const w = widths[i]! + gap;
+    if (used + w > room) break;
+    used += w;
+    out.push(i);
+  }
+  if (active >= 0) out.push(active);
+  return out.sort((a, b) => a - b);
+}
diff --git a/apps/desktop/tests/tabs-fit.test.ts b/apps/desktop/tests/tabs-fit.test.ts
new file mode 100644
index 0000000..a121e68
--- /dev/null
+++ b/apps/desktop/tests/tabs-fit.test.ts
@@ -0,0 +1,7 @@
+import { expect, test } from 'bun:test';
+import { fitTabs } from '../src/ui/tabs-fit';
+
+test('all fit: every tab, no More', () => { expect(fitTabs([100, 100, 100], 400, 0, 4, 80)).toEqual([0, 1, 2]); });
+test('overflow: leading tabs until full, then More', () => { expect(fitTabs([100, 100, 100, 100], 330, 0, 4, 80)).toEqual([0, 1]); });
+test('the active tab stays visible even when it is late', () => { expect(fitTabs([100, 100, 100, 100], 330, 3, 4, 80)).toEqual([0, 3]); });
+test('tiny row: only the active tab', () => { expect(fitTabs([100, 100, 100], 150, 2, 4, 80)).toEqual([2]); });

From ef6651c8d2e85a04c6da92eb634af314dc086fca Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:45:19 +0800
Subject: [PATCH 075/255] Desktop: Prices sheet panel is one row (Export
 primary, Compare a sheet, rest in ...)

---
 apps/desktop/src/screens/tabs/Prices.tsx | 26 ++++++++++--------------
 1 file changed, 11 insertions(+), 15 deletions(-)

diff --git a/apps/desktop/src/screens/tabs/Prices.tsx b/apps/desktop/src/screens/tabs/Prices.tsx
index 3bb5b56..431e6a8 100644
--- a/apps/desktop/src/screens/tabs/Prices.tsx
+++ b/apps/desktop/src/screens/tabs/Prices.tsx
@@ -1,7 +1,7 @@
 // Prices: what every product costs in every territory on both stores (`prices export --json`, read-only), the price
 // sheet as a CSV (save it anywhere, or write store/prices.csv for the terminal), and a price sheet compared with the
 // stores (`prices import --dry --json`) and applied as an owner action: dry run, native dialog, then the real run.
-import { useContextMenu } from '../../ui/ContextMenu';
+import { useContextMenu, useMenuButton } from '../../ui/ContextMenu';
 import { copyToast } from '../../ui/app-menu';
 import '../../styles/prices.css';
 import { useEffect, useMemo, useState } from 'react';
@@ -92,6 +92,7 @@ export function PricesTab({ project }: { project: Project }) {
   const e = d.statusOf(project);
   const s = e?.summary ?? null;
   const w = useWrite(project.id);
+  const more = useMenuButton();
   const runExport = useRunExport();
   const cm = useContextMenu();
   const [withAuto, setWithAuto] = useState(true);
@@ -129,20 +130,15 @@ export function PricesTab({ project }: { project: Project }) {
   return (
     <div className="scr-prices">
       <Section title={t('prices.sheetTitle')} icon="coins" sub={t('prices.sheetSub')}
-        actions={<button className="btn btn-sm btn-primary" onClick={() => runExport(exportItem)} disabled={!p}><Icon name="download" />{t('prices.exportCsv')}</button>}>
-        <div className="act-grid">
-          <div className="act-col">
-            <div className="act-head"><Icon name="download" />{t('prices.getSheet')}</div>
-            <button className="btn btn-sm" onClick={() => (p ? runExport(exportItem) : cur.refresh())} disabled={cur.loading}><Icon name={p ? 'download' : 'refresh'} className={cur.loading ? 'spin' : undefined} />{p ? t('prices.exportCsv') : t('prices.readFirst')}</button>
-            <WriteButton run={w} icon="text" w={{ method: 'prices.export', args: {}, title: t('act.pricesExport'), done: t('act.pricesExported') }} hint={t('prices.writeHint')}>{t('prices.writeProject')}</WriteButton>
-          </div>
-          <div className="act-col">
-            <div className="act-head"><Icon name="layers" />{t('prices.compareHead')}</div>
-            <button className="btn btn-sm" onClick={pick}><Icon name="folder" />{t('prices.pickSheet')}</button>
-            <button className="btn btn-sm" onClick={() => setSheet({})}><Icon name="text" />{t('prices.compareProject')}</button>
-            {p && rel(p.csv) && <button className="btn btn-sm btn-ghost" onClick={() => api.reveal(project.id, rel(p.csv)).catch(x => d.toast({ kind: 'info', title: t('prices.noSheetYet'), detail: errorText(x) }))}><Icon name="eye" />{t('prices.showSheet')}</button>}
-          </div>
-        </div>
+        actions={<>
+          <button className="btn btn-sm" onClick={pick}><Icon name="layers" />{t('prices.pickSheet')}</button>
+          <button className="btn btn-sm btn-primary" onClick={() => (p ? runExport(exportItem) : cur.refresh())} disabled={cur.loading}><Icon name={p ? 'download' : 'refresh'} className={cur.loading ? 'spin' : undefined} />{p ? t('prices.exportCsv') : t('prices.readFirst')}</button>
+          <button className="btn btn-sm btn-ghost btn-icon" aria-label={t('cm.more')} title={t('cm.more')} {...more(() => [
+            { label: t('prices.writeProject'), icon: 'text', disabled: w.busy ? t('cm.busy') : false, onSelect: () => { w.run({ method: 'prices.export', args: {}, title: t('act.pricesExport'), done: t('act.pricesExported') }); } },
+            { label: t('prices.compareProject'), icon: 'layers', onSelect: () => setSheet({}) },
+            p && rel(p.csv) && { label: t('prices.showSheet'), icon: 'eye', onSelect: () => { api.reveal(project.id, rel(p.csv)).catch(x => d.toast({ kind: 'info', title: t('prices.noSheetYet'), detail: errorText(x) })); } },
+          ])}><Icon name="more" /></button>
+        </>}>
         <p className="small muted act-note"><Icon name="shield" />{t('prices.sheetNote')}</p>
       </Section>
 

From e32d0772e9e2c7f7acd6cfad2bd3ac9e4574b01c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:46:09 +0800
Subject: [PATCH 076/255] Desktop: Reviews keyboard: J/K move, R reply, C copy,
 O open in the console, with a key hint

---
 apps/desktop/src/i18n/en.ts               |  1 +
 apps/desktop/src/i18n/tr.ts               |  1 +
 apps/desktop/src/screens/tabs/Reviews.tsx | 31 ++++++++++++++++++++---
 apps/desktop/src/styles/reviews.css       |  2 ++
 4 files changed, 32 insertions(+), 3 deletions(-)

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 492149c..2c96816 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -71,6 +71,7 @@ export const en = {
   'pf.noShotsStore': "Store only: no app folder with screenshots",
   'tabs.more': "{count} more tabs",
   'tabs.moreShort': "More",
+  'reviews.keysHint': "Keyboard: J / K next and previous, R reply, C copy, O open in the console",
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 1d73311..8159d4a 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -73,6 +73,7 @@ export const tr: Record<keyof typeof en, string> = {
   'pf.noShotsStore': "Yalnız mağazada: ekran görüntülü uygulama klasörü yok",
   'tabs.more': "{count} sekme daha",
   'tabs.moreShort': "Daha fazla",
+  'reviews.keysHint': "Klavye: J / K sonraki ve önceki, R yanıtla, C kopyala, O konsolda aç",
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
diff --git a/apps/desktop/src/screens/tabs/Reviews.tsx b/apps/desktop/src/screens/tabs/Reviews.tsx
index a4b0407..aecc2df 100644
--- a/apps/desktop/src/screens/tabs/Reviews.tsx
+++ b/apps/desktop/src/screens/tabs/Reviews.tsx
@@ -2,7 +2,8 @@
 // (.storebound/replies) with the send checks. Approving a draft is a local, confirmed write; sending stays in the
 // terminal (`storebound reviews send`): replies are public.
 import { type MenuInput, useContextMenu } from '../../ui/ContextMenu';
-import { consoleItem, copyToast } from '../../ui/app-menu';
+import { consoleItem, copyToast, openUrl, ASC_APP, playUrlFor } from '../../ui/app-menu';
+import { isEditable } from '../../ui/menu-logic';
 import { useEffect, useMemo, useState } from 'react';
 import type { DraftsResult, ReplyDraft } from '../../api';
 import type { UnifiedApp } from '../../lib/identity';
@@ -12,7 +13,7 @@ import { draftName, filterReviews, type Review, type ReviewFilter, starStats } f
 import { useData, useRead, useWrite } from '../../store';
 import { WriteButton } from '../../ui/WriteButton';
 import { Icon, StoreGlyph } from '../../ui/icons';
-import { Bar, ErrorFoot, ReadControl, Seg, Skeleton, Stars } from '../../ui/kit';
+import { Bar, ErrorFoot, Kbd, ReadControl, Seg, Skeleton, Stars } from '../../ui/kit';
 import { EmptyState, Section, StatusPill, tintStyle, Toolbar, useTint } from '../../ui/ds';
 import '../../styles/reviews.css';
 import { exportName, reviewsCsv } from '../../lib/exports';
@@ -112,6 +113,29 @@ export function ReviewsTab({ app }: { app: UnifiedApp }) {
   const cur = shown.find(r => `${r.store}:${r.id}` === sel) ?? shown.find(r => !r.reply && byFile.has(draftName(r))) ?? shown[0];
 
   const changed = () => { drafts.refresh(); };
+  // keyboard: j / k (or arrows in the list) move, r writes a reply (the draft box, or drafts when there are none),
+  // c copies the review, o opens it in its console
+  useEffect(() => {
+    const onKey = (e: KeyboardEvent) => {
+      if (e.metaKey || e.ctrlKey || e.altKey || isEditable(e.target as HTMLInputElement) || document.querySelector('.ds-scrim, .ds-menu')) return;
+      if (!cur) return;
+      const i = shown.indexOf(cur);
+      const go = (n: number) => { const x = shown[Math.max(0, Math.min(shown.length - 1, n))]; if (!x) return; const k = `${x.store}:${x.id}`; setSel(k); document.querySelector<HTMLElement>(`[data-rv="${CSS.escape(k)}"]`)?.scrollIntoView({ block: 'nearest' }); };
+      const k = e.key.toLowerCase();
+      if (k === 'j') { e.preventDefault(); go(i + 1); }
+      else if (k === 'k') { e.preventDefault(); go(i - 1); }
+      else if (k === 'c') { e.preventDefault(); copyToast(d, [cur.title, cur.body].filter(Boolean).join('\n\n')); }
+      else if (k === 'o') { e.preventDefault(); openUrl(d, cur.store === 'apple' ? ASC_APP(app.ios?.app.id) : playUrlFor(d, app)); }
+      else if (k === 'r' && !cur.reply) {
+        e.preventDefault();
+        const box = document.querySelector<HTMLTextAreaElement>('.rv2-detail textarea');
+        if (box) box.focus();
+        else if (project) void w.run({ method: 'reviews.draft', args: { days: 30 }, title: t('reviews.makeDrafts'), done: t('reviews.draftsMade'), after: changed });
+      }
+    };
+    window.addEventListener('keydown', onKey);
+    return () => window.removeEventListener('keydown', onKey);
+  });
   useExports('reviews', [{ id: 'reviews-csv', label: t('export.reviews'), icon: 'message', kind: 'csv', personal: true, file: exportName(app.name, 'reviews'),
     disabled: list.data ? false : t('export.readFirst'), build: () => reviewsCsv(shown.length ? shown : all) }]);
 
@@ -157,6 +181,7 @@ export function ReviewsTab({ app }: { app: UnifiedApp }) {
         <Seg value={f.store} onChange={store => setF(x => ({ ...x, store }))} label={t('reviews.store')} options={[['all', t('reviews.all')], ['apple', 'App Store'], ['play', 'Google Play']]} />
         <label className="check"><input type="checkbox" checked={f.unanswered} onChange={e => setF(x => ({ ...x, unanswered: e.target.checked }))} />{t('reviews.onlyUnanswered')}</label>
         <span className="grow" />
+        <span className="rv2-keys" aria-label={t('reviews.keysHint')} title={t('reviews.keysHint')}><Kbd keys={['J']} /><Kbd keys={['K']} /><Kbd keys={['R']} /><Kbd keys={['C']} /><Kbd keys={['O']} /></span>
         <span className="rv2-shown">{t('reviews.shown', { count: shown.length })}</span>
       </Toolbar>
       <div className="rv2">
@@ -167,7 +192,7 @@ export function ReviewsTab({ app }: { app: UnifiedApp }) {
                 const dr = byFile.get(draftName(r));
                 const k = `${r.store}:${r.id}`;
                 return (
-                  <button key={k} type="button" role="option" aria-selected={cur === r} className="rv2-card inbox-item" onClick={() => setSel(k)} {...cm(() => reviewMenu(r, k, dr))}>
+                  <button key={k} type="button" role="option" data-rv={k} aria-selected={cur === r} className="rv2-card inbox-item" onClick={() => setSel(k)} {...cm(() => reviewMenu(r, k, dr))}>
                     <span className="rv2-c-top">
                       <Stars n={r.rating} />
                       <span className="rv2-c-date">{date(r.date)}</span>
diff --git a/apps/desktop/src/styles/reviews.css b/apps/desktop/src/styles/reviews.css
index 7bba1e3..cbf907d 100644
--- a/apps/desktop/src/styles/reviews.css
+++ b/apps/desktop/src/styles/reviews.css
@@ -79,3 +79,5 @@
 .scr-reviews .rv2-draft-h { display: flex; align-items: center; justify-content: space-between; gap: 10px; }
 .scr-reviews .rv2-draft .reply-edit { border-radius: var(--ds-r); min-height: 120px; }
 .scr-reviews .rv2-count { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; font-size: var(--ds-t-micro); color: var(--muted); }
+.scr-reviews .rv2-keys { display: inline-flex; gap: 3px; opacity: .75; }
+@media (max-width: 1200px) { .scr-reviews .rv2-keys { display: none; } }

From 78b1b599a58d31ee22503fc1db1f6c9fa885c8ec Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:46:55 +0800
Subject: [PATCH 077/255] Desktop: More tools gets a command search across
 groups and a compact list layout

---
 apps/desktop/src/i18n/en.ts             |  7 +++++++
 apps/desktop/src/i18n/tr.ts             |  7 +++++++
 apps/desktop/src/screens/tabs/Tools.tsx | 27 ++++++++++++++++++++-----
 apps/desktop/src/styles/tools.css       |  5 +++++
 4 files changed, 41 insertions(+), 5 deletions(-)

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 2c96816..805d562 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -72,6 +72,13 @@ export const en = {
   'tabs.more': "{count} more tabs",
   'tabs.moreShort': "More",
   'reviews.keysHint': "Keyboard: J / K next and previous, R reply, C copy, O open in the console",
+  'tools.filter': "Find a command",
+  'tools.search': "Search {count} commands (name, method, what it does)",
+  'tools.searchAria': "Search commands",
+  'tools.density': "Layout",
+  'tools.list': "List",
+  'tools.results': "{count} matching commands",
+  'tools.noHits': "No command matches. Try a store word (listing, prices, testflight...).",
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 8159d4a..fc547e5 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -74,6 +74,13 @@ export const tr: Record<keyof typeof en, string> = {
   'tabs.more': "{count} sekme daha",
   'tabs.moreShort': "Daha fazla",
   'reviews.keysHint': "Klavye: J / K sonraki ve önceki, R yanıtla, C kopyala, O konsolda aç",
+  'tools.filter': "Komut bul",
+  'tools.search': "{count} komutta ara (ad, yöntem, ne yaptığı)",
+  'tools.searchAria': "Komut ara",
+  'tools.density': "Görünüm",
+  'tools.list': "Liste",
+  'tools.results': "{count} eşleşen komut",
+  'tools.noHits': "Eşleşen komut yok. Bir mağaza kelimesi deneyin (listing, prices, testflight...).",
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
diff --git a/apps/desktop/src/screens/tabs/Tools.tsx b/apps/desktop/src/screens/tabs/Tools.tsx
index b3714f4..38f1fe2 100644
--- a/apps/desktop/src/screens/tabs/Tools.tsx
+++ b/apps/desktop/src/screens/tabs/Tools.tsx
@@ -9,8 +9,8 @@ import { api, errorText, type MethodDescriptor, newJob, type Project, type ToolR
 import { type Key, t } from '../../i18n';
 import { useData, useWrite } from '../../store';
 import { Icon } from '../../ui/icons';
-import { ErrorNotice, Skeleton } from '../../ui/kit';
-import { Section, StatusPill } from '../../ui/ds';
+import { ErrorNotice, Seg, Skeleton } from '../../ui/kit';
+import { Section, StatusPill, Toolbar } from '../../ui/ds';
 import '../../styles/tools.css';
 import { WriteButton } from '../../ui/WriteButton';
 
@@ -111,6 +111,9 @@ export function ToolsTab({ project }: { project: Project }) {
   const [methods, setMethods] = useState<MethodDescriptor[] | null>(null);
   const [err, setErr] = useState<string | null>(null);
   const [open, setOpen] = useState<string>(TOOLBOX[0]!.id);
+  const [q, setQ] = useState('');
+  const [dense, setDenseState] = useState<boolean>(() => { try { return localStorage.getItem('sb.tools.dense') === '1'; } catch { return false; } });
+  const setDense = (v: boolean) => { setDenseState(v); try { localStorage.setItem('sb.tools.dense', v ? '1' : '0'); } catch { /* private mode */ } };
   useEffect(() => {
     api.call<{ methods: MethodDescriptor[] }>('system.methods').then(r => setMethods(r.methods), e => setErr(errorText(e)));
   }, []);
@@ -118,12 +121,26 @@ export function ToolsTab({ project }: { project: Project }) {
   const copy = (c: string) => { navigator.clipboard?.writeText(c).then(() => d.toast({ kind: 'ok', title: t('tools.copied') }), () => {}); };
   const groups = TOOLBOX.map(g => ({ g, ms: g.methods.map(x => by.get(x)).filter((x): x is MethodDescriptor => !!x) }));
   const cur = groups.find(x => x.g.id === open);
+  const needle = q.trim().toLowerCase();
+  const hits = needle ? groups.flatMap(x => x.ms).filter(m => [m.method, m.title, m.description ?? ''].some(x => x.toLowerCase().includes(needle))) : [];
   return (
-    <div className="scr-tools">
+    <div className={`scr-tools${dense ? ' dense' : ''}`}>
       <p className="tl-lead"><Icon name="info" />{t('tools.lead')}</p>
+      {methods && (
+        <Toolbar label={t('tools.filter')}>
+          <div className="search-input"><Icon name="search" /><input className="input" value={q} onChange={e => setQ(e.target.value)} placeholder={t('tools.search', { count: groups.reduce((a, x) => a + x.ms.length, 0) })} aria-label={t('tools.searchAria')} onKeyDown={e => { if (e.key === 'Escape') setQ(''); }} /></div>
+          <span className="grow" />
+          <Seg value={dense ? 'list' : 'cards'} onChange={v => setDense(v === 'list')} label={t('tools.density')} options={[['cards', t('pf.cards'), 'grid'], ['list', t('tools.list'), 'layers']]} />
+        </Toolbar>
+      )}
+      {needle && (
+        <Section title={t('tools.results', { count: hits.length })} icon="search">
+          {hits.length ? <div className="tl-cmds">{hits.map(m => <Tool key={m.method} m={m} project={project} />)}</div> : <p className="muted">{t('tools.noHits')}</p>}
+        </Section>
+      )}
       {err && <ErrorNotice error={err} />}
       {!methods && !err && <Skeleton lines={4} />}
-      {methods && (
+      {methods && !needle && (
         <div className="tl-groups" role="group" aria-label={t('tab.tools')}>
           {groups.map(({ g, ms }) => {
             const isOpen = open === g.id;
@@ -138,7 +155,7 @@ export function ToolsTab({ project }: { project: Project }) {
           })}
         </div>
       )}
-      {methods && cur && (
+      {methods && cur && !needle && (
         <Section id="tools-open" title={t(`tools.g.${cur.g.id}` as Key)} icon="sliders" sub={t('tools.count', { count: cur.ms.length })}>
           <div className="tl-cmds">{cur.ms.map(m => <Tool key={m.method} m={m} project={project} />)}</div>
         </Section>
diff --git a/apps/desktop/src/styles/tools.css b/apps/desktop/src/styles/tools.css
index 7d69e07..dbd7c82 100644
--- a/apps/desktop/src/styles/tools.css
+++ b/apps/desktop/src/styles/tools.css
@@ -46,3 +46,8 @@
 .scr-tools .tl-step { display: flex; align-items: center; gap: 12px; padding: 12px 14px; border-radius: var(--ds-r); background: var(--ds-inset); border: 1px solid var(--ds-stroke); min-width: 0; }
 .scr-tools .tl-step-t { display: grid; gap: 4px; flex: 1; min-width: 0; color: var(--ink); font-weight: 600; }
 .scr-tools .tl-step-t code { font-size: var(--ds-t-micro); color: var(--muted); font-weight: 500; overflow-wrap: anywhere; }
+/* list layout: smaller group tiles, one command per row */
+.scr-tools.dense .tl-groups { grid-template-columns: repeat(auto-fill, minmax(190px, 1fr)); gap: 8px; }
+.scr-tools.dense .tl-group { padding-top: 8px; padding-bottom: 8px; }
+.scr-tools.dense .tl-group-ic { display: none; }
+.scr-tools.dense .tl-cmds { grid-template-columns: minmax(0, 1fr); gap: 8px; }

From c86b583830b2c42d6c1a4be9380aa3b3e357c676 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:47:29 +0800
Subject: [PATCH 078/255] Desktop: Settings search filters the sections (nav
 and body), Enter jumps to the first match

---
 apps/desktop/src/i18n/en.ts           |  2 ++
 apps/desktop/src/i18n/tr.ts           |  2 ++
 apps/desktop/src/screens/Settings.tsx | 20 +++++++++++++++++++-
 apps/desktop/src/styles/settings.css  |  4 ++++
 4 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 805d562..bf2e10a 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -79,6 +79,8 @@ export const en = {
   'tools.list': "List",
   'tools.results': "{count} matching commands",
   'tools.noHits': "No command matches. Try a store word (listing, prices, testflight...).",
+  'set.search': "Search settings",
+  'set.noHits': "No setting matches",
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index fc547e5..162cc43 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -81,6 +81,8 @@ export const tr: Record<keyof typeof en, string> = {
   'tools.list': "Liste",
   'tools.results': "{count} eşleşen komut",
   'tools.noHits': "Eşleşen komut yok. Bir mağaza kelimesi deneyin (listing, prices, testflight...).",
+  'set.search': "Ayarlarda ara",
+  'set.noHits': "Eşleşen ayar yok",
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
index 91c51d3..0c8a69e 100644
--- a/apps/desktop/src/screens/Settings.tsx
+++ b/apps/desktop/src/screens/Settings.tsx
@@ -80,6 +80,21 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
       }
     } catch (e) { setError(errorText(e)); }
   };
+  // search: sections whose title or text contains the words stay; the rest hide (nav and body)
+  const [q, setQ] = useState('');
+  const [hits, setHits] = useState<string[] | null>(null);
+  useEffect(() => {
+    const words = q.trim().toLowerCase().split(/\s+/).filter(Boolean);
+    const out: string[] = [];
+    for (const [id, , key] of SECTIONS) {
+      const el = document.getElementById(`set-${id}`);
+      const text = `${t(key)} ${el?.textContent ?? ''}`.toLowerCase();
+      const ok = !words.length || words.every(w => text.includes(w));
+      if (el) el.hidden = !ok;
+      if (ok) out.push(id);
+    }
+    setHits(words.length ? out : null);
+  }, [q]);
   const storeOnly = d.apps.filter(a => !a.project && !a.ignored);
   const paired = storeOnly.filter(a => a.ios && a.android);
   const singles = storeOnly.filter(a => !(a.ios && a.android));
@@ -90,7 +105,10 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
       {error && <Notice tone="bad">{error}</Notice>}
       <div className="set-layout">
         <nav className="set-nav" aria-label={t('set.sections')}>
-          {SECTIONS.map(([id, icon, key]) => (
+          <div className="search-input set-search"><Icon name="search" /><input className="input input-sm" type="search" value={q} onChange={e => setQ(e.target.value)} placeholder={t('set.search')} aria-label={t('set.search')}
+            onKeyDown={e => { if (e.key === 'Escape') setQ(''); if (e.key === 'Enter' && hits?.[0]) jump(hits[0]); }} /></div>
+          {hits && !hits.length && <p className="small muted set-nohit">{t('set.noHits')}</p>}
+          {SECTIONS.filter(([id]) => !hits || hits.includes(id)).map(([id, icon, key]) => (
             <button key={id} className="nav" aria-current={active === id ? 'true' : undefined} onClick={() => jump(id)}><Icon name={icon} /><span className="grow">{t(key)}</span></button>
           ))}
         </nav>
diff --git a/apps/desktop/src/styles/settings.css b/apps/desktop/src/styles/settings.css
index 8ab752b..2512c23 100644
--- a/apps/desktop/src/styles/settings.css
+++ b/apps/desktop/src/styles/settings.css
@@ -35,3 +35,7 @@
 .scr-settings .danger-card { border-color: color-mix(in srgb, var(--bad-fg, var(--accent-solid)) 35%, var(--ds-stroke)); }
 .scr-settings .danger-card .ds-sec-ic { background: color-mix(in srgb, var(--bad-fg, var(--accent-solid)) 16%, transparent); color: var(--bad-fg, var(--accent-solid)); }
 @media (max-width: 1100px) { .scr-settings .set-layout { grid-template-columns: 1fr; } }
+.scr-settings .set-search { margin-bottom: 6px; }
+.scr-settings .set-search .input { width: 100%; }
+.scr-settings .set-nohit { padding: 4px 8px; }
+.scr-settings .set-body > [hidden] { display: none; }

From 364b8ec0d4da0cc3195e11ca7082d95012ed712e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:48:48 +0800
Subject: [PATCH 079/255] Desktop: every write shows a styled in-app dry-run
 preview (command, changed rows) before the native confirm dialog; i18n house
 style fix for the developer id hint

---
 apps/desktop/src/App.tsx               |  2 ++
 apps/desktop/src/design.css            |  2 ++
 apps/desktop/src/i18n/en.ts            |  6 +++-
 apps/desktop/src/i18n/tr.ts            |  6 +++-
 apps/desktop/src/store.tsx             |  5 +++
 apps/desktop/src/ui/DryRunPreview.tsx  | 44 ++++++++++++++++++++++++++
 apps/desktop/tests/dry-preview.test.ts | 15 +++++++++
 7 files changed, 78 insertions(+), 2 deletions(-)
 create mode 100644 apps/desktop/src/ui/DryRunPreview.tsx
 create mode 100644 apps/desktop/tests/dry-preview.test.ts

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 30789c0..c90e4ee 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -1,5 +1,6 @@
 // Shell: sidebar (studios, collapsible, with their apps; the workspace), top bar (breadcrumbs, last read, refresh),
 // the screen, the command palette (Cmd/Ctrl+K), toasts and the first-run welcome guide.
+import { DryRunPreview } from './ui/DryRunPreview';
 import { useCallback, useEffect, useMemo, useState } from 'react';
 import { FIXTURES, onDeepLink, onDeepLinkFolder, onTrayRoute } from './api';
 import { devSwitch } from './dev/switches';
@@ -282,6 +283,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
       {palette && <ErrorBoundary where="palette"><Palette commands={commands} onClose={() => setPalette(false)} /></ErrorBoundary>}
       {welcome && <ErrorBoundary where="welcome"><Onboarding onClose={closeWelcome} /></ErrorBoundary>}
       <ErrorBoundary where="toasts"><Toasts /></ErrorBoundary>
+      <ErrorBoundary where="preview"><DryRunPreview /></ErrorBoundary>
     </NavCtx.Provider>
   );
 }
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index 5e7a471..6db53a4 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -237,3 +237,5 @@
 .ds-tab[hidden] { display: none; }
 .ds-tab-more svg:last-child { width: 12px; height: 12px; }
 @media (max-width: 1560px) { .ds-tabs .ds-tab { padding: 0 10px; gap: 6px; } .ds-tabs .ds-tab svg { width: 15px; height: 15px; } }
+.dr-cmd { display: block; margin: 10px 0 8px; padding: 6px 10px; border-radius: var(--ds-r-xs); background: var(--ds-inset); overflow-wrap: anywhere; }
+.dr-out { max-height: 320px; overflow: auto; margin: 0; padding: 10px 12px; border-radius: var(--ds-r-sm); background: var(--ds-inset); border: 1px solid var(--ds-stroke); font: 12px/1.5 var(--mono, ui-monospace, monospace); white-space: pre-wrap; }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index bf2e10a..b96579e 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -81,6 +81,10 @@ export const en = {
   'tools.noHits': "No command matches. Try a store word (listing, prices, testflight...).",
   'set.search': "Search settings",
   'set.noHits': "No setting matches",
+  'preview.continue': "Continue to confirm",
+  'preview.lead': "Dry run: nothing is changed yet. Continue opens the confirmation, which runs the dry run once more and then applies it.",
+  'preview.more': "… {count} more lines",
+  'preview.nothing': "The dry run reports no change.",
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
@@ -2066,7 +2070,7 @@ export const en = {
   'acct.devId': 'Play developer id {id}',
   'acct.noDevId': 'no Play developer id',
   'acct.devIdLabel': 'Play developer account id',
-  'acct.devIdHint': "The digits in play.google.com/console/u/0/developers/<id>. With it, Play Console links open each app's own page; the CLI uses it too.",
+  'acct.devIdHint': "The digits after /developers/ in the Play Console address. With it, Play Console links open each app's own page; the CLI uses it too.",
   'checks.openGuide': 'Open guide',
   'checks.openGuideHint': 'Open the {skill} guide (SKILL.md)',
   'cm.more': "More actions",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 162cc43..977c9b4 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -83,6 +83,10 @@ export const tr: Record<keyof typeof en, string> = {
   'tools.noHits': "Eşleşen komut yok. Bir mağaza kelimesi deneyin (listing, prices, testflight...).",
   'set.search': "Ayarlarda ara",
   'set.noHits': "Eşleşen ayar yok",
+  'preview.continue': "Onaya geç",
+  'preview.lead': "Deneme çalıştırması: henüz hiçbir şey değişmedi. Devam onay penceresini açar; deneme bir kez daha çalışır, sonra uygulanır.",
+  'preview.more': "… {count} satır daha",
+  'preview.nothing': "Deneme çalıştırması bir değişiklik bildirmiyor.",
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
@@ -2068,7 +2072,7 @@ export const tr: Record<keyof typeof en, string> = {
   'acct.devId': 'Play geliştirici kimliği {id}',
   'acct.noDevId': 'Play geliştirici kimliği yok',
   'acct.devIdLabel': 'Play geliştirici hesabı kimliği',
-  'acct.devIdHint': 'play.google.com/console/u/0/developers/<id> içindeki rakamlar. Girilince Play Console bağlantıları her uygulamanın kendi sayfasını açar; CLI de kullanır.',
+  'acct.devIdHint': 'Play Console adresinde /developers/ sonrasındaki rakamlar. Girilince Play Console bağlantıları her uygulamanın kendi sayfasını açar; CLI de kullanır.',
   'checks.openGuide': 'Kılavuzu aç',
   'checks.openGuideHint': '{skill} kılavuzunu aç (SKILL.md)',
   'cm.more': "Diğer işlemler",
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index 711dbf5..ee77473 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -1,6 +1,7 @@
 // App data shared by every screen: app folders, studios, store accounts and the apps they see, the pairing / ignore
 // overrides, settings, the sidecar, the portfolio (offline check + the last live read from the cache), app icons, and
 // background jobs shown as toasts with progress and cancel.
+import { askPreview } from './ui/DryRunPreview';
 import { createContext, type ReactNode, useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react';
 import {
   type Account, type AccountCheck, api, type AppInfo, type AppsListResult, type AppStatus, type CacheEntry, DEFAULT_SETTINGS, errorText, newJob, onDownload,
@@ -573,6 +574,10 @@ export function useWrite(projectId: string | null) {
     setBusy(key);
     const tid = d.toast({ id: job, kind: 'job', title: w.title, detail: t('write.dryRunning'), progress: null, job });
     try {
+      // the in-app preview of the dry run first (readable, styled); the host's native dialog stays the real gate
+      const dry = await api.call<ToolResult>(w.method, projectId, { args: w.args }, job);
+      if (!dry.ok) { d.updateToast(tid, { kind: 'bad', title: t('write.dryFailed'), detail: withHint(failureText(dry)), progress: undefined, job: undefined }); return null; }
+      if (!(await askPreview(w.title, dry))) { d.updateToast(tid, { kind: 'info', title: t('write.notApplied'), detail: t('write.notAppliedDetail'), progress: undefined, job: undefined }); return null; }
       const o = await api.writeWithConfirm(w.method, projectId, w.args, job);
       if (o.stage === 'dry-run') d.updateToast(tid, { kind: 'bad', title: t('write.dryFailed'), detail: withHint(failureText(o.dryRun)), progress: undefined, job: undefined });
       else if (o.stage === 'dialog') d.updateToast(tid, { kind: 'info', title: t('write.notApplied'), detail: t('write.notAppliedDetail'), progress: undefined, job: undefined });
diff --git a/apps/desktop/src/ui/DryRunPreview.tsx b/apps/desktop/src/ui/DryRunPreview.tsx
new file mode 100644
index 0000000..279c22f
--- /dev/null
+++ b/apps/desktop/src/ui/DryRunPreview.tsx
@@ -0,0 +1,44 @@
+// The in-app dry-run preview of a write: before the host's native confirm dialog (which stays the real gate, with its
+// own fresh dry run and the token for the real run), the dry run shows here, readable: the command, the rows it would
+// change, Continue / Cancel. Mounted once in App; useWrite asks it through askPreview().
+import { useEffect, useState } from 'react';
+import type { ToolResult } from '../api';
+import { t } from '../i18n';
+import { Dialog } from './ds';
+import { Icon } from './icons';
+
+interface Ask { title: string; dry: ToolResult; resolve: (go: boolean) => void }
+let show: ((a: Ask) => void) | null = null;
+
+/** Shows the preview; true = Continue (then the native dialog), false = Cancel. No preview mounted = true. */
+export function askPreview(title: string, dry: ToolResult): Promise<boolean> {
+  return new Promise(resolve => { if (!show) resolve(true); else show({ title, dry, resolve }); });
+}
+
+/** The changed rows of a dry run: lines that say what would change, else the last lines. */
+export function previewLines(output: string, max = 14): { lines: string[]; more: number } {
+  const all = output.split(/\r?\n/).map(l => l.trimEnd()).filter(l => l.trim());
+  const change = all.filter(l => /^\s*[+\-~*]\s|→|->|would|create|update|delete|change|set /i.test(l));
+  const pick = change.length ? change : all.slice(-max);
+  return { lines: pick.slice(0, max), more: Math.max(0, pick.length - max) };
+}
+
+export function DryRunPreview() {
+  const [ask, setAsk] = useState<Ask | null>(null);
+  useEffect(() => { show = setAsk; return () => { show = null; }; }, []);
+  if (!ask) return null;
+  const done = (go: boolean) => { ask.resolve(go); setAsk(null); };
+  const { lines, more } = previewLines(ask.dry.output ?? '');
+  return (
+    <Dialog title={ask.title} icon="eye" onClose={() => done(false)} wide
+      actions={<>
+        <button className="btn" onClick={() => done(false)}>{t('common.cancel')}</button>
+        <button className="btn btn-primary" onClick={() => done(true)} autoFocus><Icon name="arrowRight" />{t('preview.continue')}</button>
+      </>}>
+      <p className="muted">{t('preview.lead')}</p>
+      <code className="mono-id dr-cmd">{ask.dry.command}</code>
+      {lines.length ? <pre className="dr-out" data-testid="dry-preview">{lines.join('\n')}{more ? `\n${t('preview.more', { count: more })}` : ''}</pre>
+        : <p className="muted">{t('preview.nothing')}</p>}
+    </Dialog>
+  );
+}
diff --git a/apps/desktop/tests/dry-preview.test.ts b/apps/desktop/tests/dry-preview.test.ts
new file mode 100644
index 0000000..106d9e5
--- /dev/null
+++ b/apps/desktop/tests/dry-preview.test.ts
@@ -0,0 +1,15 @@
+import { expect, test } from 'bun:test';
+import { previewLines } from '../src/ui/DryRunPreview';
+
+test('change lines are picked from a dry run', () => {
+  const out = 'reading config\nconnected\n  ~ en-US title: Old -> New\n  + de-DE short description\ndone';
+  expect(previewLines(out).lines).toEqual(['  ~ en-US title: Old -> New', '  + de-DE short description']);
+});
+test('no change lines: the last lines', () => {
+  expect(previewLines('a\nb\nc', 2).lines).toEqual(['b', 'c']);
+});
+test('long previews say how many more', () => {
+  const out = Array.from({ length: 20 }, (_, i) => `+ row ${i}`).join('\n');
+  const p = previewLines(out, 5);
+  expect(p.lines.length).toBe(5); expect(p.more).toBe(15);
+});

From c0a13b5f87e059020f111de438bbb8b870f2256a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:49:47 +0800
Subject: [PATCH 080/255] Desktop: wide tables keep their first column in view
 while scrolling; compact table density (Settings > Appearance, Ctrl+K)

---
 apps/desktop/src/App.tsx              | 3 ++-
 apps/desktop/src/design.css           | 6 ++++++
 apps/desktop/src/i18n/en.ts           | 4 ++++
 apps/desktop/src/i18n/tr.ts           | 4 ++++
 apps/desktop/src/prefs.ts             | 6 +++++-
 apps/desktop/src/screens/Settings.tsx | 2 ++
 6 files changed, 23 insertions(+), 2 deletions(-)

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index c90e4ee..94ee3c7 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -160,10 +160,11 @@ export function App({ onTheme }: { onTheme: () => void }) {
     c.push({ id: 'act-check', group: G.act, title: t('action.checkConfigs'), icon: 'shield', run: () => { d.refreshPortfolio(false); } });
     c.push({ id: 'act-add', group: G.act, title: t('action.addFolder'), icon: 'folderPlus', run: () => go({ screen: 'apps' }) });
     c.push({ id: 'act-account', group: G.act, title: t('action.addAccount'), icon: 'key', run: () => go({ screen: 'accounts' }) });
+    c.push({ id: 'act-density', group: G.act, title: t('action.toggleDensity'), icon: 'grid', keywords: 'dense compact table density rows', run: () => update({ ...prefs, density: prefs.density === 'compact' ? 'comfortable' : 'compact' }) });
     c.push({ id: 'act-theme', group: G.act, title: t('action.toggleTheme'), icon: 'moon', keywords: 'dark light', run: onTheme });
     c.push({ id: 'act-welcome', group: G.act, title: t('action.welcome'), icon: 'sparkle', keywords: 'onboarding start guide', run: () => setWelcome(true) });
     return c;
-  }, [d, visible, app, tabs, route, go, onTheme, exports, runExport, showIgnored, stepApp]);
+  }, [d, visible, app, tabs, route, go, onTheme, exports, runExport, showIgnored, stepApp, prefs, update]);
 
   const crumbs: { label: string; to?: Route }[] = route.screen === 'portfolio' ? [{ label: t('nav.portfolio') }]
     : route.screen === 'app' ? [{ label: t('nav.portfolio'), to: { screen: 'portfolio' } }, { label: app?.name ?? '', to: app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined }, { label: t(TAB_KEY[route.tab]) }]
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index 6db53a4..fc782ca 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -239,3 +239,9 @@
 @media (max-width: 1560px) { .ds-tabs .ds-tab { padding: 0 10px; gap: 6px; } .ds-tabs .ds-tab svg { width: 15px; height: 15px; } }
 .dr-cmd { display: block; margin: 10px 0 8px; padding: 6px 10px; border-radius: var(--ds-r-xs); background: var(--ds-inset); overflow-wrap: anywhere; }
 .dr-out { max-height: 320px; overflow: auto; margin: 0; padding: 10px 12px; border-radius: var(--ds-r-sm); background: var(--ds-inset); border: 1px solid var(--ds-stroke); font: 12px/1.5 var(--mono, ui-monospace, monospace); white-space: pre-wrap; }
+/* wide tables: the first column (the row's name) stays in view while the rest scrolls sideways */
+.table-wrap .table tr > :first-child, .ds-table-wrap .table tr > :first-child { position: sticky; left: 0; z-index: 1; background: var(--ds-surface, var(--surface)); }
+.table-wrap .table thead tr > :first-child, .ds-table-wrap .table thead tr > :first-child { z-index: 3; }
+.table-wrap .table tbody tr:hover > :first-child, .ds-table-wrap .table tbody tr:hover > :first-child { background: color-mix(in srgb, var(--tint, var(--accent-solid)) 6%, var(--ds-surface, var(--surface))); }
+/* Settings > Appearance > Tables: compact */
+:root[data-density="compact"] .table th, :root[data-density="compact"] .table td { padding-top: 5px; padding-bottom: 5px; padding-left: 8px; padding-right: 8px; font-size: 12.5px; }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index b96579e..127bf41 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -85,6 +85,10 @@ export const en = {
   'preview.lead': "Dry run: nothing is changed yet. Continue opens the confirmation, which runs the dry run once more and then applies it.",
   'preview.more': "… {count} more lines",
   'preview.nothing': "The dry run reports no change.",
+  'settings.density': "Tables",
+  'settings.comfortable': "Comfortable",
+  'settings.compact': "Compact",
+  'action.toggleDensity': "Compact / comfortable tables",
   'palette.gActions': 'Actions',
   'palette.openApp': 'Open',
 
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 977c9b4..f88fe73 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -87,6 +87,10 @@ export const tr: Record<keyof typeof en, string> = {
   'preview.lead': "Deneme çalıştırması: henüz hiçbir şey değişmedi. Devam onay penceresini açar; deneme bir kez daha çalışır, sonra uygulanır.",
   'preview.more': "… {count} satır daha",
   'preview.nothing': "Deneme çalıştırması bir değişiklik bildirmiyor.",
+  'settings.density': "Tablolar",
+  'settings.comfortable': "Rahat",
+  'settings.compact': "Sıkı",
+  'action.toggleDensity': "Sıkı / rahat tablolar",
   'palette.gActions': 'İşlemler',
   'palette.openApp': 'Aç',
 
diff --git a/apps/desktop/src/prefs.ts b/apps/desktop/src/prefs.ts
index 7c69eae..7919bbb 100644
--- a/apps/desktop/src/prefs.ts
+++ b/apps/desktop/src/prefs.ts
@@ -3,7 +3,9 @@
 export type Theme = 'system' | 'light' | 'dark';
 export type Motion = 'system' | 'reduce';
 export type Lang = 'system' | 'en' | 'tr';
-export interface Prefs { theme: Theme; motion: Motion; lang: Lang; onboarded: boolean }
+/** Tables: comfortable rows, or compact (smaller padding) for wide data on small windows. */
+export type Density = 'comfortable' | 'compact';
+export interface Prefs { theme: Theme; motion: Motion; lang: Lang; onboarded: boolean; density?: Density }
 
 export const DEFAULT_PREFS: Prefs = { theme: 'system', motion: 'system', lang: 'system', onboarded: false };
 const KEY = 'storebound.prefs.v1';
@@ -16,6 +18,7 @@ export function parsePrefs(raw: string | null): Prefs {
       motion: v.motion === 'reduce' ? 'reduce' : 'system',
       lang: v.lang === 'en' || v.lang === 'tr' ? v.lang : 'system',
       onboarded: v.onboarded === true,
+      ...(v.density === 'compact' ? { density: 'compact' as const } : {}),
     };
   } catch { return { ...DEFAULT_PREFS }; }
 }
@@ -32,6 +35,7 @@ export function savePrefs(p: Prefs): void {
 export function applyPrefs(p: Prefs, root: { dataset: DOMStringMap; lang?: string } = document.documentElement, systemLang = 'en'): void {
   if (p.theme === 'system') delete root.dataset.theme; else root.dataset.theme = p.theme;
   if (p.motion === 'reduce') root.dataset.motion = 'reduce'; else delete root.dataset.motion;
+  if (p.density === 'compact') root.dataset.density = 'compact'; else delete root.dataset.density;
   root.lang = resolveLang(p.lang, systemLang);
 }
 
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
index 0c8a69e..cde32f6 100644
--- a/apps/desktop/src/screens/Settings.tsx
+++ b/apps/desktop/src/screens/Settings.tsx
@@ -182,6 +182,8 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
                 <Seg value={prefs.theme} onChange={theme => update({ ...prefs, theme })} label={t('settings.theme')} options={[['system', t('settings.system'), 'settings'], ['light', t('settings.light'), 'sun'], ['dark', t('settings.dark'), 'moon']]} /></div>
               <div className="field" role="group" aria-label={t('settings.motion')}><span className="legend">{t('settings.motion')}</span>
                 <Seg value={prefs.motion} onChange={motion => update({ ...prefs, motion })} label={t('settings.motion')} options={[['system', t('settings.followSystem')], ['reduce', t('settings.reduce')]]} /></div>
+              <div className="field" role="group" aria-label={t('settings.density')}><span className="legend">{t('settings.density')}</span>
+                <Seg value={prefs.density ?? 'comfortable'} onChange={density => update({ ...prefs, density })} label={t('settings.density')} options={[['comfortable', t('settings.comfortable'), 'layers'], ['compact', t('settings.compact'), 'grid']]} /></div>
             </div>
           </Section>
 

From 0e693b7f74302f060f10c1d2991c5d9c66e9ee38 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:50:11 +0800
Subject: [PATCH 081/255] Desktop: portfolio card ids show the full id as a
 tooltip

---
 apps/desktop/src/screens/Portfolio.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 9f8db34..12bc6bc 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -169,7 +169,7 @@ function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null;
           <AppIcon name={app.name} src={icon} className="pf-icon" />
           <div className="pf-title">
             <button className="pf-name" onClick={() => go('releases')}>{name}</button>
-            <span className="pf-id mono-id">{sub}{!app.project && <span className="so-inline" title={t('apps.storeOnlyHint')}><Icon name="cloud" /><span className="sr">{t('apps.storeOnly')}</span></span>}</span>
+            <span className="pf-id mono-id" title={sub}>{sub}{!app.project && <span className="so-inline" title={t('apps.storeOnlyHint')}><Icon name="cloud" /><span className="sr">{t('apps.storeOnly')}</span></span>}</span>
           </div>
           <div className="pf-next">
             <span className="pf-next-l">{t('pf.next')}</span>

From db0e5620b24336c7bbcc022a1ced9b32c049e4f8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:52:54 +0800
Subject: [PATCH 082/255] CHANGELOG: audit fixes

---
 CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5374f84..88457f4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,7 @@
 - Desktop: each app shows once again (a folder project no longer appears a second time as a store-only app); a store app with a folder's bundle id or package is never listed separately.
 - Desktop UX pass on every screen: app tabs fit the window, slim app header, secondary actions in "…" menus, Ctrl+K lists app actions, Alt+Up/Down switches apps, accounts and folders decluttered.
 - Play Console links open the app's own page: developer id per credential profile (`storebound accounts play-developer <profile> <id>`, editable in Studios & accounts), one link builder for desktop, CLI and watch.
+- Desktop: tabs in one row with a More menu, one Refresh, reviews keyboard (J/K, R, C, O), Settings and More tools search, sticky first column and compact density for wide tables, styled in-app dry-run preview before every write.
 - Checks: "Open guide" opens the matching skill for every finding.
 
 ## 0.8.38 · 2026-10-23

From 9ec2af86ac7f6c7fba0304b6e378f58ac9114da9 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:53:32 +0800
Subject: [PATCH 083/255] CHANGELOG: 0.8.39 was not published; its notes move
 to Unreleased

---
 CHANGELOG.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1325e63..bd5b6ec 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,8 +3,6 @@
 
 ## Unreleased
 
-## 0.8.39 · 2026-10-23
-
 - Desktop: custom context menus everywhere (apps, releases, art, reviews, checks, fields, products, accounts, folders) with keyboard navigation, Shift+F10 and submenus; the WebView2 browser menu and browser shortcuts are off.
 - Desktop: each app shows once again (a folder project no longer appears a second time as a store-only app); a store app with a folder's bundle id or package is never listed separately.
 - Desktop UX pass on every screen: app tabs fit the window, slim app header, secondary actions in "…" menus, Ctrl+K lists app actions, Alt+Up/Down switches apps, accounts and folders decluttered.
@@ -12,6 +10,10 @@
 - Desktop: tabs in one row with a More menu, one Refresh, reviews keyboard (J/K, R, C, O), Settings and More tools search, sticky first column and compact density for wide tables, styled in-app dry-run preview before every write.
 - Checks: "Open guide" opens the matching skill for every finding.
 
+## 0.8.39 · 2026-10-23
+
+- Tagged but not published; everything ships in the next version.
+
 ## 0.8.38 · 2026-10-23
 
 - Desktop: the app hero no longer shows a cropped second copy of the app icon.

From ebd64e0f76bbfa5985bd289b828b011be40c9ada Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:54:20 +0800
Subject: [PATCH 084/255] Desktop: tab row reserves enough room for the More
 menu button

---
 apps/desktop/src/ui/ds.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index bff3d8a..ad97ce1 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -296,7 +296,7 @@ export function Tabs<T extends string>({ items, value, onChange, label, panelId
       if (widths.current.length < items.length || widths.current.some(w => w === undefined)) { setShown(null); return; }
       const cs = getComputedStyle(el);
       const avail = (el.parentElement?.clientWidth ?? el.clientWidth) - parseFloat(cs.paddingLeft) - parseFloat(cs.paddingRight) - parseFloat(cs.borderLeftWidth) - parseFloat(cs.borderRightWidth);
-      const next = fitTabs(widths.current, avail, active, parseFloat(cs.columnGap) || 4, 96);
+      const next = fitTabs(widths.current, avail, active, parseFloat(cs.columnGap) || 4, 150);
       setShown(prev => (prev && prev.join() === next.join() ? prev : next.length === items.length ? null : next));
     };
     fit();

From 595cbc8a68c005a079b97640b9d00482d205bf46 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 08:54:55 +0700
Subject: [PATCH 085/255] storebound 0.8.40: version in package.json and every
 copy, CHANGELOG 0.8.40 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 0646f7f..5b40b97 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.39",
+      "version": "0.8.40",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 4fc0a44..23d9143 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.39",
+  "version": "0.8.40",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index d988d93..45fd97b 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.39",
+  "version": "0.8.40",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bd5b6ec..7ddaa97 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.40 · 2026-10-23
+
 - Desktop: custom context menus everywhere (apps, releases, art, reviews, checks, fields, products, accounts, folders) with keyboard navigation, Shift+F10 and submenus; the WebView2 browser menu and browser shortcuts are off.
 - Desktop: each app shows once again (a folder project no longer appears a second time as a store-only app); a store app with a folder's bundle id or package is never listed separately.
 - Desktop UX pass on every screen: app tabs fit the window, slim app header, secondary actions in "…" menus, Ctrl+K lists app actions, Alt+Up/Down switches apps, accounts and folders decluttered.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 8a59496..b228a6d 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.39",
+  "version": "0.8.40",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 68d7305..963210f 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.39"
+version = "0.8.40"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 7973dc4..7810d30 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.39"
+version = "0.8.40"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 6809fad..30fb506 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.39",
+  "version": "0.8.40",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 6e29af1..15e1dda 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.39",
+  "version": "0.8.40",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b6bbfea..b8bb3c7 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.39",
+  "version": "0.8.40",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From c7bae75ed057e48f729892180ae5a039b9dccaaf Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 09:57:13 +0800
Subject: [PATCH 086/255] apple build/upload: accept --allow-version-mismatch
 (flag list regenerated); 1.0 and 1.0.0 are one version train

---
 CHANGELOG.md             |  2 ++
 cli/data/flags.json      | 12 +++++++++++-
 cli/lib/xcode.ts         |  4 +++-
 tests/build-sign.test.ts |  4 ++++
 4 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bd5b6ec..8daf3f2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple build` / `apple upload`: `--allow-version-mismatch` is accepted (it was missing from the flag list); 1.0 and 1.0.0 count as the same version train, as on App Store Connect.
+
 - Desktop: custom context menus everywhere (apps, releases, art, reviews, checks, fields, products, accounts, folders) with keyboard navigation, Shift+F10 and submenus; the WebView2 browser menu and browser shortcuts are off.
 - Desktop: each app shows once again (a folder project no longer appears a second time as a store-only app); a store app with a folder's bundle id or package is never listed separately.
 - Desktop UX pass on every screen: app tabs fit the window, slim app header, secondary actions in "…" menus, Ctrl+K lists app actions, Alt+Up/Down switches apps, accounts and folders decluttered.
diff --git a/cli/data/flags.json b/cli/data/flags.json
index af740bc..3d26219 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -68,6 +68,7 @@
   "apple build": [
    "allow-ssh",
    "allow-stale-web",
+   "allow-version-mismatch",
    "build-number",
    "configuration",
    "keychain",
@@ -304,6 +305,7 @@
   ],
   "apple upload": [
    "allow-existing",
+   "allow-version-mismatch",
    "build",
    "csv",
    "group",
@@ -648,11 +650,17 @@
    "allow-stale-web",
    "dir",
    "flavor",
+   "include-drafts",
    "module",
    "no-prebuild",
+   "not-sent-for-review",
    "out",
+   "prune",
+   "src",
+   "variant",
    "version-code",
-   "version-name"
+   "version-name",
+   "write"
   ],
   "play data-safety": [
    "csv",
@@ -1018,6 +1026,7 @@
    "allow-price-changes",
    "allow-ssh",
    "allow-stale-web",
+   "allow-version-mismatch",
    "alpha",
    "apk",
    "app",
@@ -1265,6 +1274,7 @@
    "storebound accounts [list] [--json]                     every profile: Apple key, Play account (masked), which",
    "storebound accounts import [--dir <project>] [--name <profile>] [--dry] [--yes]",
    "storebound accounts use <profile> [--dir <project>]    this project uses that profile (\"account\" in its",
+   "storebound accounts play-developer <profile> <id> | --clear",
    "storebound accounts default <profile> | --clear         the machine's default profile (a pointer file in the"
   ],
   "ads": [
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index 2f0c3a6..6d01360 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -177,7 +177,9 @@ export function ipaInfo(ipa: string | Buffer): IpaInfo {
  *  that ignores the version storebound or the release script intends exports MARKETING_VERSION 1.0), else null.
  *  `wanted` is the --version of apple build or the editable App Store version; `source` names where it comes from. Pure. */
 export function ipaVersionProblem(ipaVersion: string, wanted: string | null | undefined, source: string): string | null {
-  if (!wanted || ipaVersion === wanted) return null;
+  // Apple compares version strings numerically with missing parts as 0: 1.0 and 1.0.0 are the same train
+  const norm = (v: string) => v.trim().split('.').map(n => String(Number(n))).join('.').replace(/(\.0)+$/, '');
+  if (!wanted || norm(ipaVersion) === norm(wanted)) return null;
   return `the IPA has version ${ipaVersion} (CFBundleShortVersionString), but ${source} is ${wanted}: the Xcode project sets MARKETING_VERSION itself, so the build lands in the wrong version train. Make the project read the intended version (xcodebuild MARKETING_VERSION=${wanted}, or set it in the project / Info.plist), build again, or pass --allow-version-mismatch to go on anyway.`;
 }
 
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 9e3faa8..20e8327 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -559,6 +559,10 @@ describe('signed AAB, masked signing, IPA version train, release notes', () => {
   test('the IPA version must be the version train being prepared', () => {
     expect(ipaVersionProblem('1.0', '1.4.0', 'the editable App Store version')).toContain('--allow-version-mismatch');
     expect(ipaVersionProblem('1.0', '1.4.0', 'x')).toContain('MARKETING_VERSION=1.4.0');
+    // Apple compares numerically: 1.0 and 1.0.0 are one train
+    expect(ipaVersionProblem('1.0.0', '1.0', 'x')).toBeNull();
+    expect(ipaVersionProblem('2.1', '2.1.0', 'x')).toBeNull();
+    expect(ipaVersionProblem('2.1.1', '2.1', 'x')).not.toBeNull();
     expect(ipaVersionProblem('1.4.0', '1.4.0', 'x')).toBeNull();
     expect(ipaVersionProblem('1.0', undefined, 'x')).toBeNull();
   });

From 5b7b16ac0835cccafc6d39e8cd7b8414c257ede4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:25:26 +0800
Subject: [PATCH 087/255] Desktop boot check: accept the in-app dry-run preview
 before the native confirm

---
 tools/desktop-boot-check.ts | 24 +++++++++++++++++-------
 1 file changed, 17 insertions(+), 7 deletions(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index 5811a78..f40b1c4 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -230,6 +230,16 @@ function serve(dist: string, csp: string, breakBundle: boolean) {
 
 interface CaseResult { name: string; ok: boolean; problems: string[]; visited: number; notes: string[] }
 
+/** A page that accepts the in-app dry-run preview of a write (Continue) whenever it shows, like a person reading it and
+ *  going on: the native confirm dialog after it is what each case checks. */
+async function newPage(ctx: { newPage(): Promise<import('playwright').Page> }): Promise<import('playwright').Page> {
+  const page = await ctx.newPage();
+  await page.addLocatorHandler(page.locator('.ds-scrim:has(.dr-cmd)'), async () => {
+    await page.locator('.ds-scrim:has(.dr-cmd) .btn-primary').click();
+  });
+  return page;
+}
+
 async function state(page: Page) {
   return page.evaluate(() => ({
     booted: document.documentElement.dataset.booted === '1',
@@ -272,7 +282,7 @@ async function runCase(browser: Browser, name: string, sidecar: Sidecar, o: { br
   const freeze = conf.app.security.freezePrototype === true;
   const server = serve(DIST, cspHeader(conf.app.security.csp), !!o.breakBundle);
   const ctx = await browser.newContext({ viewport: { width: 1280, height: 800 }, reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
+  const page = await newPage(ctx);
   const problems: string[] = [];
   const notes: string[] = [];
   const unmocked = new Set<string>();
@@ -397,7 +407,7 @@ async function runSubmitCase(browser: Browser, sidecar: Sidecar, base: 'd3-full'
   const freeze = conf.app.security.freezePrototype === true;
   const server = serve(DIST, cspHeader(conf.app.security.csp), false);
   const ctx = await browser.newContext({ viewport: { width: 1360, height: 900 }, reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
+  const page = await newPage(ctx);
   const problems: string[] = [];
   const notes: string[] = [];
   const unmocked = new Set<string>();
@@ -524,7 +534,7 @@ async function runReleaseStateCase(browser: Browser, sidecar: Sidecar, page404:
   const freeze = conf.app.security.freezePrototype === true;
   const server = serve(DIST, cspHeader(conf.app.security.csp), false);
   const ctx = await browser.newContext({ viewport: { width: 1360, height: 900 }, reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
+  const page = await newPage(ctx);
   const problems: string[] = [];
   const notes: string[] = [];
   const unmocked = new Set<string>();
@@ -615,7 +625,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
   const freeze = conf.app.security.freezePrototype === true;
   const server = serve(DIST, cspHeader(conf.app.security.csp), false);
   const ctx = await browser.newContext({ viewport: { width: 1360, height: 900 }, reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
+  const page = await newPage(ctx);
   const problems: string[] = [];
   const notes: string[] = [];
   const logged: string[] = [];
@@ -740,7 +750,7 @@ async function runErrorCase(browser: Browser, sidecar: Sidecar, variant: 'api-di
   const freeze = conf.app.security.freezePrototype === true;
   const server = serve(DIST, cspHeader(conf.app.security.csp), false);
   const ctx = await browser.newContext({ viewport: { width: 1360, height: 900 }, reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
+  const page = await newPage(ctx);
   const problems: string[] = [];
   const notes: string[] = [];
   const unmocked = new Set<string>();
@@ -858,7 +868,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
   const freeze = conf.app.security.freezePrototype === true;
   const server = serve(DIST, cspHeader(conf.app.security.csp), false);
   const ctx = await browser.newContext({ viewport: { width: 1360, height: 900 }, reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
+  const page = await newPage(ctx);
   const problems: string[] = [];
   const notes: string[] = [];
   const unmocked = new Set<string>();
@@ -1013,7 +1023,7 @@ async function runLiveArtCase(browser: Browser, sidecar: Sidecar): Promise<CaseR
   const freeze = conf.app.security.freezePrototype === true;
   const server = serve(DIST, cspHeader(conf.app.security.csp), false);
   const ctx = await browser.newContext({ viewport: { width: 1360, height: 900 }, reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
+  const page = await newPage(ctx);
   const problems: string[] = [];
   const notes: string[] = [];
   const unmocked = new Set<string>();

From 8106d7c9a225ccc0ac3b37355099a2671a0ea350 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:31:40 +0800
Subject: [PATCH 088/255] Desktop boot check: tabs opened like a person (the
 More menu when a tab is not in the row); the fake host answers window dry
 runs like the Rust host (dryRun forced), art.pull preview dry run

---
 tools/desktop-boot-check.ts | 43 +++++++++++++++++++++++++------------
 1 file changed, 29 insertions(+), 14 deletions(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index f40b1c4..ece6e97 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -162,7 +162,9 @@ function host(fx: HostFixture, sidecar: Sidecar, unmocked: Set<string>, logged:
           return ownerDry(method, (params.args ?? {}) as Record<string, unknown>);
         }
         if (kind === 'read' || kind === 'write' || kind === 'owner') {
-          if (kind !== 'read') fail(`boot check: ${method} writes`);
+          // a write from the window is its dry run (the in-app preview): the Rust host forces dryRun, as here
+          if ('dryRun' in params || 'confirmToken' in params) fail(`boot check: ${method}: the window sent host params`);
+          if (kind !== 'read') params.dryRun = true;
           const p = projects().find(x => x.id === a.projectId);
           if (!p) fail(String(a.projectId).startsWith('store:') ? 'boot check: store reads are not part of the boot check' : 'unknown project');
           params.project = p!.path;
@@ -240,6 +242,17 @@ async function newPage(ctx: { newPage(): Promise<import('playwright').Page> }):
   return page;
 }
 
+/** Opens an app tab like a person: the tab itself when it is in the row, else through the row's "More" menu (tabs
+ *  that do not fit the window go there). */
+async function clickTab(page: Page, id: string, o: { timeout?: number } = {}): Promise<void> {
+  const tab = page.locator(`[role="tab"]#${id}`);
+  await tab.waitFor({ state: 'attached', timeout: o.timeout });
+  if (await tab.isVisible()) { await tab.click(o); return; }
+  const label = ((await tab.textContent()) ?? '').replace(/\d+$/, '').trim();
+  await page.locator('.ds-tab-more').click(o);
+  await page.locator('.ds-menu [role="menuitem"]', { hasText: label }).first().click(o);
+}
+
 async function state(page: Page) {
   return page.evaluate(() => ({
     booted: document.documentElement.dataset.booted === '1',
@@ -435,7 +448,7 @@ async function runSubmitCase(browser: Browser, sidecar: Sidecar, base: 'd3-full'
     const item = page.locator('nav.side .nav-app').filter({ hasText: base === 'd3-full' ? /Prism Puddle|demo-game/ : new RegExp(app.name) }).first();
     await item.click({ timeout: WAIT_MS }).catch(e => problems.push(`could not open the app: ${String(e).split('\n')[0]}`));
     await settle(page);
-    await page.locator('[role="tab"]#tab-releases').click({ timeout: WAIT_MS }).catch(() => {});
+    await clickTab(page, 'tab-releases', { timeout: WAIT_MS }).catch(() => {});
     await page.waitForSelector('[data-section="submit"]', { timeout: WAIT_MS }).catch(() => problems.push('Releases: no send-for-review section'));
     await settle(page);
     const rel = await text('[data-section="submit"]');
@@ -493,7 +506,7 @@ async function runSubmitCase(browser: Browser, sidecar: Sidecar, base: 'd3-full'
     // every tab of the app, then App info's console steps and the Dependencies screen
     const tabs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id));
     for (const id of tabs) {
-      await page.locator(`[role="tab"]#${id}`).click({ timeout: WAIT_MS }).catch(e => problems.push(`tab ${id}: ${String(e).split('\n')[0]}`));
+      await clickTab(page, id, { timeout: WAIT_MS }).catch(e => problems.push(`tab ${id}: ${String(e).split('\n')[0]}`));
       await settle(page);
       await crashCheck(id);
       visited++;
@@ -577,7 +590,7 @@ async function runReleaseStateCase(browser: Browser, sidecar: Sidecar, page404:
     const item = page.locator('nav.side .nav-app').filter({ hasText: /Prism Puddle|demo-game/ }).first();
     await item.click({ timeout: WAIT_MS }).catch(e => problems.push(`could not open the app: ${String(e).split('\n')[0]}`));
     await settle(page);
-    await page.locator('[role="tab"]#tab-releases').click({ timeout: WAIT_MS }).catch(() => {});
+    await clickTab(page, 'tab-releases', { timeout: WAIT_MS }).catch(() => {});
     await shows(page, '#content', 'Versions on the stores');
     await settle(page);
     const rows = await page.locator('#content table tbody tr').evaluateAll(rs => rs.map(r => Array.from(r.querySelectorAll('td')).map(td => (td.textContent ?? '').trim())));
@@ -692,7 +705,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
       const appName = (await page.locator('nav.side .nav-app:visible').nth(i).innerText().catch(() => `app ${i}`)).split('\n')[0]!.trim();
       const tabs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id));
       for (const id of tabs) {
-        await page.locator(`[role="tab"]#${id}`).click({ timeout: WAIT_MS }).catch(e => problems.push(`${appName} ${id}: ${String(e).split('\n')[0]}`));
+        await clickTab(page, id, { timeout: WAIT_MS }).catch(e => problems.push(`${appName} ${id}: ${String(e).split('\n')[0]}`));
         await settle(page);
         await crashCheck(`${appName} ${id}`);
         const tx = await text();
@@ -710,7 +723,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
     // the stores' current versions differ (Play 3.1.0, App Store 3.0.4): a neutral header, each store its own state
     await page.locator('nav.side .nav-app', { hasText: 'Orbit Hop' }).first().click({ timeout: WAIT_MS });
     await settle(page);
-    await page.locator('[role="tab"]#tab-releases').click({ timeout: WAIT_MS });
+    await clickTab(page, 'tab-releases', { timeout: WAIT_MS });
     await settle(page);
     const rel = await text();
     for (const w of ['Current', 'Play 3.1.0 · App Store 3.0.4', '3.0.4 · Live (3.1.0 not submitted)']) if (!rel.includes(w)) problems.push(`Orbit Hop Releases: missing "${w}"`);
@@ -720,7 +733,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
     // Health: the first top issue opens with its full title, the sample stack and Copy for AI
     await page.locator('nav.side .nav-app', { hasText: 'Prism Puddle' }).first().click({ timeout: WAIT_MS });
     await settle(page);
-    await page.locator('[role="tab"]#tab-health').click({ timeout: WAIT_MS });
+    await clickTab(page, 'tab-health', { timeout: WAIT_MS });
     await settle(page);
     await page.locator('.issue-row').first().click({ timeout: WAIT_MS }).catch(() => problems.push('Health: no issue row to open'));
     if (!(await shows(page, '[data-testid="issue-stack"]', 'ComboMeter.update(ComboMeter.kt:88)'))) problems.push('Health: the opened issue shows no sample stack');
@@ -805,7 +818,7 @@ async function runErrorCase(browser: Browser, sidecar: Sidecar, variant: 'api-di
     await item.click({ timeout: WAIT_MS }).catch(e => problems.push(`could not open the app: ${String(e).split('\n')[0]}`));
     await settle(page);
     if (variant === 'api-disabled') {
-      await page.locator('[role="tab"]#tab-health').click({ timeout: WAIT_MS }).catch(e => problems.push(`no Health tab: ${String(e).split('\n')[0]}`));
+      await clickTab(page, 'tab-health', { timeout: WAIT_MS }).catch(e => problems.push(`no Health tab: ${String(e).split('\n')[0]}`));
       await shows(page, '#content', 'Turn it on in Google Cloud');
       await settle(page);
       const h = await text();
@@ -822,7 +835,7 @@ async function runErrorCase(browser: Browser, sidecar: Sidecar, variant: 'api-di
       await crashCheck('Health');
       visited++;
     } else {
-      await page.locator('[role="tab"]#tab-checks').click({ timeout: WAIT_MS }).catch(e => problems.push(`no Checks tab: ${String(e).split('\n')[0]}`));
+      await clickTab(page, 'tab-checks', { timeout: WAIT_MS }).catch(e => problems.push(`no Checks tab: ${String(e).split('\n')[0]}`));
       await shows(page, '#content', variant === 'scan-findings' ? 'Sign-up without in-app account deletion' : SCAN_FAILED_LINE);
       await settle(page);
       const c = await text();
@@ -894,7 +907,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     // every other write: the owner presses Cancel in the native dialog (nothing is sent)
     if (cmd === 'write_with_confirm') { writes.push(String(a.method)); return { confirmed: false, stage: 'dialog', dryRun: { ...toolResult(String(a.method), null), dryRun: true, output: APPLY_DRY[String(a.method)] ?? '' } }; }
     // "Review and save": the window's dry run of project.edit (the Rust host forces dryRun for calls from the window)
-    if (cmd === 'sidecar_call' && a.method === 'project.edit') return sidecar.call('project.edit', { project: dir, args: (a.params as { args?: unknown } | null)?.args ?? {} });
+    if (cmd === 'sidecar_call' && a.method === 'project.edit') return sidecar.call('project.edit', { project: dir, args: (a.params as { args?: unknown } | null)?.args ?? {}, dryRun: true });
     if (cmd === 'sidecar_call' && APPLY_DRY[String(a.method)] !== undefined) return { ...toolResult(String(a.method), null), dryRun: true, output: APPLY_DRY[String(a.method)] };
     return base(cmd, a);
   };
@@ -915,7 +928,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     if (await wizard.count()) { await wizard.press('Escape').catch(() => {}); await gone(page, '.wizard[role="dialog"]'); }
     await page.locator('nav.side .nav-app', { hasText: 'Tidy Lists' }).first().click({ timeout: WAIT_MS }).catch(e => problems.push(`could not open the app: ${String(e).split('\n')[0]}`));
     await settle(page);
-    await page.locator('[role="tab"]#tab-listings').click({ timeout: WAIT_MS }).catch(e => problems.push(`no Listings tab: ${String(e).split('\n')[0]}`));
+    await clickTab(page, 'tab-listings', { timeout: WAIT_MS }).catch(e => problems.push(`no Listings tab: ${String(e).split('\n')[0]}`));
     await page.waitForSelector(field, { timeout: WAIT_MS }).catch(() => problems.push('the listing editor has no App Store en-US subtitle field'));
     // over the limit: the counter and the check say so while typing
     await page.locator(field).fill('Lists that stay tidy and organized forever');
@@ -957,11 +970,11 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     if (!writes.includes('apple.listing')) problems.push('Apply did not go through the confirm dialog (write_with_confirm)');
     // the other editors draw, and a config edit (App info) saves only that value, comments kept
     for (const [tab, root] of [['appinfo', '#appinfo-editor'], ['testflight', '#testflight-editor'], ['art', '#art-editor'], ['catalog', '#catalog-editor, [data-edit-bar], .scr-catalog']] as const) {
-      await page.locator(`[role="tab"]#tab-${tab}`).click({ timeout: WAIT_MS }).catch(e => problems.push(`no ${tab} tab: ${String(e).split('\n')[0]}`));
+      await clickTab(page, `tab-${tab}`, { timeout: WAIT_MS }).catch(e => problems.push(`no ${tab} tab: ${String(e).split('\n')[0]}`));
       if (!(await page.waitForSelector(root, { timeout: WAIT_MS }).then(() => true, () => false))) problems.push(`${tab}: the editor did not draw (${root})`);
       await settle(page);
     }
-    await page.locator('[role="tab"]#tab-appinfo').click({ timeout: WAIT_MS });
+    await clickTab(page, 'tab-appinfo', { timeout: WAIT_MS });
     const notes1 = '[data-edit="config:apple.info.reviewNotes"]';
     await page.waitForSelector(notes1, { timeout: WAIT_MS }).catch(() => problems.push('App info: no review notes field'));
     await page.locator(notes1).fill('Sign in with the demo account.');
@@ -1047,6 +1060,8 @@ async function runLiveArtCase(browser: Browser, sidecar: Sidecar): Promise<CaseR
     if (cmd === 'sidecar_call' && a.method === 'art.live') return toolResult('art.live', LIVE_ART);
     if (cmd === 'sidecar_call' && a.method === 'art.thumb') { thumbs.push(String((a.params as { args?: { url?: string } } | null)?.args?.url)); return toolResult('art.thumb', { dataUrl: THUMB, bytes: 68 }); }
     if (cmd === 'image_pick') return picked;
+    // the in-app preview's dry run of a pull (the real one reads the stores): the same text the native dialog shows
+    if (cmd === 'sidecar_call' && a.method === 'art.pull') return { ...toolResult('art.pull', null), dryRun: true, output: ART_PULL_DRY };
     if (cmd === 'write_with_confirm') {
       const method = String(a.method);
       if (method === 'art.replace') {
@@ -1075,7 +1090,7 @@ async function runLiveArtCase(browser: Browser, sidecar: Sidecar): Promise<CaseR
     if (await wizard.count()) { await wizard.press('Escape').catch(() => {}); await gone(page, '.wizard[role="dialog"]'); }
     await page.locator('nav.side .nav-app', { hasText: 'Tidy Lists' }).first().click({ timeout: WAIT_MS }).catch(e => problems.push(`could not open the app: ${String(e).split('\n')[0]}`));
     await settle(page);
-    await page.locator('[role="tab"]#tab-art').click({ timeout: WAIT_MS }).catch(e => problems.push(`no Store art tab: ${String(e).split('\n')[0]}`));
+    await clickTab(page, 'tab-art', { timeout: WAIT_MS }).catch(e => problems.push(`no Store art tab: ${String(e).split('\n')[0]}`));
     await page.waitForSelector('#live-art', { timeout: WAIT_MS }).catch(() => problems.push('no live store art card'));
     // nothing is read from the stores until asked (auto-read is off in the saved state)
     await page.locator('#live-art button', { hasText: 'Read the stores' }).click({ timeout: WAIT_MS }).catch(e => problems.push(`no "Read the stores" button: ${String(e).split('\n')[0]}`));

From 83bb9a621e58736f96e02b62eca10166a88eb9e2 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:36:38 +0800
Subject: [PATCH 089/255] Desktop boot check: say why a tab could not be opened

---
 tools/desktop-boot-check.ts | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index ece6e97..d17deac 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -249,8 +249,13 @@ async function clickTab(page: Page, id: string, o: { timeout?: number } = {}): P
   await tab.waitFor({ state: 'attached', timeout: o.timeout });
   if (await tab.isVisible()) { await tab.click(o); return; }
   const label = ((await tab.textContent()) ?? '').replace(/\d+$/, '').trim();
-  await page.locator('.ds-tab-more').click(o);
-  await page.locator('.ds-menu [role="menuitem"]', { hasText: label }).first().click(o);
+  try {
+    await page.locator('.ds-tab-more').click(o);
+    await page.locator('.ds-menu [role="menuitem"]', { hasText: label }).first().click(o);
+  } catch (e) {
+    const why = await page.evaluate(() => JSON.stringify({ more: document.querySelectorAll('.ds-tab-more').length, menu: [...document.querySelectorAll('.ds-menu [role^="menuitem"]')].map(x => x.textContent), w: innerWidth }));
+    throw new Error(`${String(e).split('\n')[0]} (${label}; ${why})`);
+  }
 }
 
 async function state(page: Page) {

From 26ebb64458859bfebd7564c12ef61ed3297063d3 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:44:45 +0800
Subject: [PATCH 090/255] Desktop: tab row measures the room inside the sticky
 bar's padding (the More button was clipped); editor saves skip the in-app
 preview (their Review step already showed the dry run)

---
 apps/desktop/src/store.tsx     | 11 +++++++----
 apps/desktop/src/ui/Editor.tsx |  2 +-
 apps/desktop/src/ui/ds.tsx     |  6 +++++-
 3 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index ee77473..d203870 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -557,7 +557,8 @@ export interface ReadState<T> {
   refresh: () => Promise<void>;
 }
 
-export interface WriteRun { method: string; args: Record<string, unknown>; title: string; done: string; after?: () => void }
+/** preview: false when the screen already showed this dry run (the editors' Review step); the native dialog still follows. */
+export interface WriteRun { method: string; args: Record<string, unknown>; title: string; done: string; after?: () => void; preview?: false }
 
 /**
  * Writes of one app folder: dry run, the native dialog that shows it (Apply / Cancel, or the owner action's own
@@ -575,9 +576,11 @@ export function useWrite(projectId: string | null) {
     const tid = d.toast({ id: job, kind: 'job', title: w.title, detail: t('write.dryRunning'), progress: null, job });
     try {
       // the in-app preview of the dry run first (readable, styled); the host's native dialog stays the real gate
-      const dry = await api.call<ToolResult>(w.method, projectId, { args: w.args }, job);
-      if (!dry.ok) { d.updateToast(tid, { kind: 'bad', title: t('write.dryFailed'), detail: withHint(failureText(dry)), progress: undefined, job: undefined }); return null; }
-      if (!(await askPreview(w.title, dry))) { d.updateToast(tid, { kind: 'info', title: t('write.notApplied'), detail: t('write.notAppliedDetail'), progress: undefined, job: undefined }); return null; }
+      if (w.preview !== false) {
+        const dry = await api.call<ToolResult>(w.method, projectId, { args: w.args }, job);
+        if (!dry.ok) { d.updateToast(tid, { kind: 'bad', title: t('write.dryFailed'), detail: withHint(failureText(dry)), progress: undefined, job: undefined }); return null; }
+        if (!(await askPreview(w.title, dry))) { d.updateToast(tid, { kind: 'info', title: t('write.notApplied'), detail: t('write.notAppliedDetail'), progress: undefined, job: undefined }); return null; }
+      }
       const o = await api.writeWithConfirm(w.method, projectId, w.args, job);
       if (o.stage === 'dry-run') d.updateToast(tid, { kind: 'bad', title: t('write.dryFailed'), detail: withHint(failureText(o.dryRun)), progress: undefined, job: undefined });
       else if (o.stage === 'dialog') d.updateToast(tid, { kind: 'info', title: t('write.notApplied'), detail: t('write.notAppliedDetail'), progress: undefined, job: undefined });
diff --git a/apps/desktop/src/ui/Editor.tsx b/apps/desktop/src/ui/Editor.tsx
index 84d5029..cc079c3 100644
--- a/apps/desktop/src/ui/Editor.tsx
+++ b/apps/desktop/src/ui/Editor.tsx
@@ -260,7 +260,7 @@ export function EditBar({ project, area, data, files, onSaved }: { project: Proj
               <button className="btn btn-sm btn-ghost" onClick={() => setReview(null)}>{t('ed.close')}</button>
               <WriteButton run={w} primary icon="check" disabled={review.r.errors > 0 || !review.r.files.length}
                 hint={review.r.errors ? t('ed.fixFirst') : undefined}
-                w={{ method: 'project.edit', args: { ops: opsJson }, title: t('ed.save'), done: t('ed.saved'), after: () => { e.clear(project.id, area); setReview(null); onSaved?.(); } }}>{t('ed.save')}</WriteButton>
+                w={{ method: 'project.edit', args: { ops: opsJson }, preview: false, title: t('ed.save'), done: t('ed.saved'), after: () => { e.clear(project.id, area); setReview(null); onSaved?.(); } }}>{t('ed.save')}</WriteButton>
             </div>
           )}
         </div>
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index ad97ce1..b38aa8b 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -295,7 +295,11 @@ export function Tabs<T extends string>({ items, value, onChange, label, panelId
       refs.current.forEach((b, i) => { if (b && b.offsetParent !== null) widths.current[i] = b.getBoundingClientRect().width; });
       if (widths.current.length < items.length || widths.current.some(w => w === undefined)) { setShown(null); return; }
       const cs = getComputedStyle(el);
-      const avail = (el.parentElement?.clientWidth ?? el.clientWidth) - parseFloat(cs.paddingLeft) - parseFloat(cs.paddingRight) - parseFloat(cs.borderLeftWidth) - parseFloat(cs.borderRightWidth);
+      // the row's room: the parent's content box (the sticky bar has its own padding) minus the row's padding and border
+      const par = el.parentElement;
+      const ps = par ? getComputedStyle(par) : null;
+      const box = par && ps ? par.clientWidth - parseFloat(ps.paddingLeft) - parseFloat(ps.paddingRight) : el.clientWidth;
+      const avail = box - parseFloat(cs.paddingLeft) - parseFloat(cs.paddingRight) - parseFloat(cs.borderLeftWidth) - parseFloat(cs.borderRightWidth) - 2;
       const next = fitTabs(widths.current, avail, active, parseFloat(cs.columnGap) || 4, 150);
       setShown(prev => (prev && prev.join() === next.join() ? prev : next.length === items.length ? null : next));
     };

From f052831fea194f8741dd529f38569448ede2d452 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:44:54 +0800
Subject: [PATCH 091/255] Desktop boot check: the dry-run preview is accepted
 whenever it shows, also during waits

---
 tools/desktop-boot-check.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index d17deac..bb3843d 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -236,8 +236,10 @@ interface CaseResult { name: string; ok: boolean; problems: string[]; visited: n
  *  going on: the native confirm dialog after it is what each case checks. */
 async function newPage(ctx: { newPage(): Promise<import('playwright').Page> }): Promise<import('playwright').Page> {
   const page = await ctx.newPage();
-  await page.addLocatorHandler(page.locator('.ds-scrim:has(.dr-cmd)'), async () => {
-    await page.locator('.ds-scrim:has(.dr-cmd) .btn-primary').click();
+  // a person reads the preview and presses Continue, also while the check only waits (no action of its own to block)
+  await page.addInitScript(() => {
+    const go = () => { const b = document.querySelector<HTMLButtonElement>('.ds-scrim:has(.dr-cmd) .btn-primary'); if (b) b.click(); };
+    new MutationObserver(go).observe(document, { childList: true, subtree: true });
   });
   return page;
 }

From 2638b90046fe77205f4159cc0e3eda481ea15668 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:46:49 +0800
Subject: [PATCH 092/255] Desktop boot check: the reader's quota row uses the
 short wording

---
 tools/desktop-boot-check.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index bb3843d..e80c48f 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -702,7 +702,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
     if (!(await shows(page, line, 'Everything read', READ_ALL_MS))) problems.push(`status line: not "Everything read" after ${READ_ALL_MS / 1000} s: ${await text(line)}`);
     const done = await text(line);
     notes.push(`status line after: ${done}; ${reads} reads, ${apps} apps`);
-    if (!/App Store limit 3,412\/3,600 left this hour/.test(done)) problems.push(`status line: no App Store quota (${done})`);
+    if (!/App Store 3,412 / 3,600 per hour/.test(done)) problems.push(`status line: no App Store quota (${done})`);
     await settle(page);
     // every tab of every app: nothing says "not read yet" (the reads were done in the background)
     const shown = await page.locator('nav.side .nav-app:visible').count();

From 7345de2f7c5c1a7ec5304fda66bfeb55ac172104 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:47:39 +0800
Subject: [PATCH 093/255] Desktop boot check: quota row match as plain text

---
 tools/desktop-boot-check.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index e80c48f..6f7ced0 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -702,7 +702,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
     if (!(await shows(page, line, 'Everything read', READ_ALL_MS))) problems.push(`status line: not "Everything read" after ${READ_ALL_MS / 1000} s: ${await text(line)}`);
     const done = await text(line);
     notes.push(`status line after: ${done}; ${reads} reads, ${apps} apps`);
-    if (!/App Store 3,412 / 3,600 per hour/.test(done)) problems.push(`status line: no App Store quota (${done})`);
+    if (!done.includes('App Store 3,412 / 3,600 per hour')) problems.push(`status line: no App Store quota (${done})`);
     await settle(page);
     // every tab of every app: nothing says "not read yet" (the reads were done in the background)
     const shown = await page.locator('nav.side .nav-app:visible').count();

From c03938f9dcc0bf4fad59ff68e98dcc6bec5df952 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 11:09:51 +0800
Subject: [PATCH 094/255] desktop: one read registry for every read button:
 single-flight per canonical key, broad reads cover narrow keys, overlapping
 buttons all busy and disabled (useReadState), 20 s 'read just now' memo,
 quota pause on the buttons, every read through the scheduler (Check again,
 Import apps, account Test, Read the stores, Dependencies), writes invalidate
 only the reads they change; tests/read-registry.test.ts; fixtures ?blocked
 and window.__fakeCalls

---
 apps/desktop/src/App.tsx                  |   8 +-
 apps/desktop/src/dev/fixtures.ts          |  16 ++
 apps/desktop/src/i18n/en.ts               |   3 +
 apps/desktop/src/i18n/tr.ts               |   3 +
 apps/desktop/src/lib/read-registry.ts     | 283 +++++++++++++++++++
 apps/desktop/src/lib/scheduler.ts         |   3 +
 apps/desktop/src/screens/Accounts.tsx     |  20 +-
 apps/desktop/src/screens/Dependencies.tsx |  17 +-
 apps/desktop/src/screens/Portfolio.tsx    |  38 ++-
 apps/desktop/src/screens/Settings.tsx     |   5 +-
 apps/desktop/src/store.tsx                | 318 +++++++++++++---------
 apps/desktop/src/ui/ReadButtons.tsx       |  40 +++
 apps/desktop/src/ui/kit.tsx               |  11 +-
 apps/desktop/tests/read-registry.test.ts  | 260 ++++++++++++++++++
 14 files changed, 861 insertions(+), 164 deletions(-)
 create mode 100644 apps/desktop/src/lib/read-registry.ts
 create mode 100644 apps/desktop/src/ui/ReadButtons.tsx
 create mode 100644 apps/desktop/tests/read-registry.test.ts

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 94ee3c7..b1b01fe 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -18,7 +18,7 @@ import { useShowIgnored } from './lib/show-ignored';
 import { Onboarding } from './screens/Onboarding';
 import { Portfolio } from './screens/Portfolio';
 import { Settings } from './screens/Settings';
-import { useData } from './store';
+import { useData, useReadState } from './store';
 import { Icon, type IconName, Mark } from './ui/icons';
 import { AppIcon, Kbd, MOD, StudioMark } from './ui/kit';
 import { type Command, Palette } from './ui/Palette';
@@ -52,6 +52,8 @@ export function App({ onTheme }: { onTheme: () => void }) {
 
   const go = useCallback((r: Route) => { setRoute(r); document.getElementById('content')?.scrollTo({ top: 0 }); }, []);
   const visible = useMemo(() => d.apps.filter(a => !a.ignored).sort((a, b) => a.name.localeCompare(b.name)), [d.apps]);
+  // Refresh all is busy while any read it covers is in flight (its own pass, a card's refresh, Check again, auto-read)
+  const allReads = useReadState({ tags: ['all'] });
   const [showIgnored, setShowIgnored] = useShowIgnored();
   const ignoredApps = useMemo(() => d.apps.filter(a => a.ignored).sort((a, b) => a.name.localeCompare(b.name)), [d.apps]);
   const listed = showIgnored ? [...visible, ...ignoredApps] : visible;
@@ -262,8 +264,8 @@ export function App({ onTheme }: { onTheme: () => void }) {
             <span className="spacer" />
             {FIXTURES && <span className="dev-pill" title={t('dev.fixturesHint')}>{t('dev.fixtures')}</span>}
             <span className="stamp"><Icon name="clock" />{lastRead ? t('top.storesRead', { when: ago(lastRead) }) : t('top.storesNotRead')}</span>
-            <button className="btn btn-sm" onClick={() => { d.readAll(true).catch(() => {}); }} disabled={!visible.length} title={t('action.refreshAllHint')} data-testid="refresh-all">
-              <Icon name="refresh" className={d.reader.running ? 'spin' : undefined} />{t('action.refreshAll')}
+            <button className="btn btn-sm" onClick={() => { d.readAll(true).catch(() => {}); }} disabled={!visible.length || allReads.busy} aria-busy={allReads.busy} title={allReads.busy ? t('read.busyShared') : t('action.refreshAllHint')} data-testid="refresh-all">
+              <Icon name="refresh" className={allReads.busy ? 'spin' : undefined} />{t('action.refreshAll')}
             </button>
             <ExportMenu />
           </header>
diff --git a/apps/desktop/src/dev/fixtures.ts b/apps/desktop/src/dev/fixtures.ts
index 003694b..4ba99d4 100644
--- a/apps/desktop/src/dev/fixtures.ts
+++ b/apps/desktop/src/dev/fixtures.ts
@@ -9,6 +9,7 @@ import { buildReport } from '../../../../cli/lib/report';
 import { buildApps, type Overrides } from '../lib/identity';
 import type { CatalogDiff, HealthSnapshot, MetricRow, Review, TestFlightStatus, ValidateResult, ScanResult } from '../lib/model';
 import { editableFixture, liveFixture } from './editor-fixtures';
+import { serviceDisabledMessage } from './error-fixtures';
 import { APPLE_STATUS_READY, APPLE_STATUS_UNRESOLVED, consolePlan, consoleVerify, ownerDry, PLAY_STATUS } from './submit-fixtures';
 import { ANALYTICS, ASO, DECLARATIONS, LISTING_TEXT, PPO, PPO_STORE, PRICE_DIFF, PRICES, renderArt, RENDERS } from './fixtures-more';
 import { TOOLBOX } from '../../../../cli/lib/desktop-coverage';
@@ -454,7 +455,17 @@ export function fixtureRead(method: string, id: string, args: Record<string, unk
   return method.startsWith('apple.') && r.ok ? { ...r, quota: { store: 'apple', limit: 3600, remaining: 3412 } } : r;
 }
 
+/** ?blocked: every Play health read fails with Google's SERVICE_DISABLED (the portfolio's "Check again" notice). */
+const blockedSwitch = (): boolean => typeof location !== 'undefined' && new URLSearchParams(location.search).has('blocked');
+
 function read(method: string, id: string, args: Record<string, unknown> = {}): ToolResult {
+  const r = read0(method, id, args);
+  const h = r.data as HealthSnapshot | undefined;
+  if (method !== 'health' || !blockedSwitch() || !h?.play) return r;
+  return { ...r, data: { ...h, play: { error: serviceDisabledMessage('com.example.app') } } };
+}
+
+function read0(method: string, id: string, args: Record<string, unknown> = {}): ToolResult {
   if (method === 'health.issue') return ok(method, ISSUE_SAMPLE(args));
   if (id.startsWith('store:')) {
     const play = /android:/.test(id);
@@ -534,7 +545,12 @@ async function progressLines(job: string | null, lines: string[]) {
   for (const line of lines) { await sleep(260); if (job) emit('sidecar-progress', { params: { requestId: 1, line, stream: 'stderr' }, job }); }
 }
 
+/** Every fake-host call, for checks that count them (window.__fakeCalls: "cmd method target args"). */
+const fakeCalls: string[] = [];
+if (typeof window !== 'undefined') (window as unknown as { __fakeCalls: string[] }).__fakeCalls = fakeCalls;
+
 export async function mockInvoke<T>(cmd: string, a: Record<string, unknown>): Promise<T> {
+  fakeCalls.push([cmd, a.method ?? '', a.projectId ?? a.id ?? '', JSON.stringify((a.params as { args?: unknown } | null)?.args ?? a.live ?? '')].join(' '));
   const r = await answer(cmd, a);
   return r as T;
 }
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 127bf41..c504156 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -917,6 +917,9 @@ export const en = {
   'read.couldNotRefresh': "couldn't refresh: {reason}",
   'read.refresh': "Refresh",
   'read.waiting': "Reading…",
+  'read.justNow': "read just now",
+  'read.paused': "store limit: waits until {time}",
+  'read.busyShared': "Already reading: this joins the read in progress",
   'reader.progress': "Reading {done} of {total}",
   'reader.upToDate': "Everything read",
   'reader.off': "Auto-read is off",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index f88fe73..15c2593 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -919,6 +919,9 @@ export const tr: Record<keyof typeof en, string> = {
   'read.couldNotRefresh': "yenilenemedi: {reason}",
   'read.refresh': "Yenile",
   'read.waiting': "Okunuyor…",
+  'read.justNow': "az önce okundu",
+  'read.paused': "mağaza sınırı: {time} saatine kadar bekliyor",
+  'read.busyShared': "Zaten okunuyor: bu, süren okumaya katılır",
   'reader.progress': "{total} okumadan {done} tamam",
   'reader.upToDate': "Her şey okundu",
   'reader.off': "Otomatik okuma kapalı",
diff --git a/apps/desktop/src/lib/read-registry.ts b/apps/desktop/src/lib/read-registry.ts
new file mode 100644
index 0000000..bd28135
--- /dev/null
+++ b/apps/desktop/src/lib/read-registry.ts
@@ -0,0 +1,283 @@
+// The one read registry of the window: every read button, notice, card, the background reader, the tray and Ctrl+K
+// ask it, never the host directly. Pure logic over lib/scheduler.ts (tests/read-registry.test.ts).
+//
+// - Canonical key: target + method + args (lib/freshness.ts readKey), or a named key for reads without a target
+//   (the portfolio, an account's app list, an account check).
+// - Single-flight: a read whose key is in flight (queued or running) is joined: the caller gets the same promise, its
+//   result or its error. No second host call, ever.
+// - Scope: a read carries tags ('all', 'app:<target>', 'import', 'account:<id>' ...). A query asks by keys and / or
+//   tags; it is busy when any in-flight read has one of its keys, one of its tags, or COVERS one of its keys.
+// - Covering: a broad read (Refresh all, Import all) is a group: it lists the narrow keys it stands for. While it runs
+//   those keys show busy everywhere and a click on one of them waits for the group, then reads only if the group did
+//   not (it usually did, so the click costs nothing). A narrow read in flight makes every broad button whose tag it
+//   carries busy too (decided with the owner: overlapping buttons are all busy and disabled; one click never starts a
+//   duplicate, it joins).
+// - Just now: a read that finished less than `justNowMs` ago is not run again by a second click: the caller gets the
+//   last result ("read just now"). A write's invalidation drops that memo for the keys it touched.
+// - Rate limits stay the scheduler's (lanes per store, spacing and the App Store Connect quota per account, shared
+//   429 backoff); the registry reports a paused account on every query that uses it.
+import { type Clock, type Lane, type Priority, type ReadScheduler, realClock } from './scheduler';
+
+export interface ReadSpec<R> {
+  key: string;
+  /** Scopes the read belongs to: a query by any of these tags sees it. */
+  tags?: string[];
+  lanes: Lane[];
+  /** Credentials it uses ("apple:<account>", "play:<account>"): their quota pause shows on its buttons. */
+  accounts: string[];
+  priority: Priority;
+  run: () => Promise<R>;
+  /** Stops a running read (the host job). */
+  cancel?: () => void;
+}
+
+export interface GroupSpec<R> {
+  key: string;
+  tags?: string[];
+  /** Narrow keys this read stands for until it releases them (release()) or ends. */
+  covers: string[];
+  run: (g: GroupHandle) => Promise<R>;
+}
+
+export interface GroupHandle {
+  /** This key is no longer the group's (read by its own entry now, or skipped as fresh). */
+  release(key: string): void;
+}
+
+export type ReadQuery = string | { keys?: string[]; tags?: string[] };
+
+export interface ReadStatus {
+  /** Something this query overlaps is queued or running. */
+  busy: boolean;
+  /** How many in-flight reads overlap it. */
+  inFlight: number;
+  /** Every key of the query finished successfully less than justNowMs ago. */
+  justNow: boolean;
+  /** Oldest last-finished time over the query's keys (epoch ms), null when one never finished here. */
+  lastAt: number | null;
+  /** The last error of a single-key query (cleared by its next success). */
+  error: string | null;
+  /** An account the query uses waits on a quota pause or a 429 backoff until this time (epoch ms). */
+  pausedUntil: number | null;
+}
+
+export type ReadEvent = { kind: 'start' } | { kind: 'done'; result: unknown } | { kind: 'error'; error: unknown };
+
+interface Entry {
+  key: string;
+  tags: Set<string>;
+  covers: Set<string>;
+  accounts: string[];
+  promise: Promise<unknown>;
+  cancel?: () => void;
+  group: boolean;
+}
+
+interface Done { at: number; ok: boolean; result?: unknown; error?: string }
+
+export interface RegistryOptions {
+  justNowMs?: number;
+  clock?: Clock;
+  /** Per-key start / done / error, for the cards' read bus (only real reads: never a join or a just-now answer). */
+  onEvent?: (key: string, e: ReadEvent) => void;
+}
+
+const errText = (e: unknown): string => (e instanceof Error ? e.message : typeof e === 'string' ? e : (e as { message?: string })?.message ?? String(e));
+
+export class ReadRegistry {
+  private entries = new Map<string, Entry>();
+  private done = new Map<string, Done>();
+  private accountsOf = new Map<string, string[]>();
+  private listeners = new Set<() => void>();
+  private ver = 0;
+  private justNowMs: number;
+  private clock: Clock;
+  private onEvent?: RegistryOptions['onEvent'];
+  private expiry: unknown = null;
+
+  constructor(private sched: ReadScheduler, o: RegistryOptions = {}) {
+    this.justNowMs = o.justNowMs ?? 20_000;
+    this.clock = o.clock ?? realClock;
+    this.onEvent = o.onEvent;
+    // a quota pause or backoff of the scheduler changes what the buttons say
+    sched.subscribe(() => this.emit());
+  }
+
+  subscribe = (fn: () => void): (() => void) => { this.listeners.add(fn); return () => { this.listeners.delete(fn); }; };
+  /** Changes on every start, finish, cover release, invalidation and scheduler change (useSyncExternalStore). */
+  version = (): number => this.ver;
+
+  /** True when this exact key is in flight (its own read, or a group that covers it). */
+  active(key: string): boolean {
+    if (this.entries.has(key)) return true;
+    for (const e of this.entries.values()) if (e.covers.has(key)) return true;
+    return false;
+  }
+
+  /** The last result of a key that finished less than justNowMs ago (undefined when there is none). */
+  recent(key: string): unknown {
+    const d = this.done.get(key);
+    return d?.ok && this.clock.now() - d.at < this.justNowMs ? d.result : undefined;
+  }
+
+  /**
+   * Reads one key: joins it when it is in flight, waits for a group that covers it, answers a just-finished read
+   * from its memo (unless `force`), else runs it through the scheduler.
+   */
+  read<R>(spec: ReadSpec<R>, o: { force?: boolean } = {}): Promise<R> {
+    this.accountsOf.set(spec.key, spec.accounts);
+    const own = this.entries.get(spec.key);
+    if (own) {
+      // a higher priority asker raises the queued read
+      if (!own.group) this.sched.enqueue({ key: spec.key, lanes: spec.lanes, accounts: spec.accounts, priority: spec.priority, run: spec.run as () => Promise<unknown> }).catch(() => {});
+      return own.promise as Promise<R>;
+    }
+    for (const e of this.entries.values()) {
+      if (e.covers.has(spec.key)) {
+        // the broad read stands for this key: wait for it, then read only what it did not
+        return e.promise.then(() => undefined, () => undefined).then(() => this.read(spec, { force: false }));
+      }
+    }
+    const d = this.done.get(spec.key);
+    if (!o.force && d?.ok && this.clock.now() - d.at < this.justNowMs) return Promise.resolve(d.result as R);
+    const p = this.sched.enqueue<R>({ key: spec.key, lanes: spec.lanes, accounts: spec.accounts, priority: spec.priority, run: spec.run });
+    const entry: Entry = { key: spec.key, tags: new Set(spec.tags ?? []), covers: new Set(), accounts: spec.accounts, promise: p, cancel: spec.cancel, group: false };
+    this.entries.set(spec.key, entry);
+    this.onEvent?.(spec.key, { kind: 'start' });
+    this.emit();
+    p.then(r => this.settle(entry, true, r), e => this.settle(entry, false, undefined, e));
+    return p;
+  }
+
+  /** A broad read made of narrow ones (Refresh all, Import all): single-flight on its own key too. */
+  group<R>(spec: GroupSpec<R>): Promise<R> {
+    const own = this.entries.get(spec.key);
+    if (own) return own.promise as Promise<R>;
+    const covers = new Set(spec.covers);
+    let resolve!: (r: R) => void, reject!: (e: unknown) => void;
+    const promise = new Promise<R>((a, b) => { resolve = a; reject = b; });
+    const entry: Entry = { key: spec.key, tags: new Set(spec.tags ?? []), covers, accounts: [], promise, group: true };
+    this.entries.set(spec.key, entry);
+    this.emit();
+    const handle: GroupHandle = { release: k => { if (covers.delete(k)) this.emit(); } };
+    // run after the entry exists, so a read started inside joins nothing by mistake (release first, then read)
+    Promise.resolve().then(() => spec.run(handle)).then(r => { this.settle(entry, true, r); resolve(r); }, e => { this.settle(entry, false, undefined, e); reject(e); });
+    return promise;
+  }
+
+  /** Stops what overlaps the query: queued reads are dropped (their waiters get "cancelled"), running ones cancel their job. */
+  cancel(q: ReadQuery): void {
+    const { keys, tags } = norm(q);
+    for (const e of [...this.entries.values()]) {
+      if (!this.overlaps(e, keys, tags) || e.group) continue;
+      if (this.sched.isRunning(e.key)) e.cancel?.();
+      else this.sched.clear(k => k === e.key);
+    }
+  }
+
+  /** A write changed what these keys read: their "just now" memo goes, so the next read really reads. */
+  invalidate(match: (key: string) => boolean): string[] {
+    const hit: string[] = [];
+    for (const k of [...this.done.keys()]) if (match(k)) { this.done.delete(k); hit.push(k); }
+    if (hit.length) this.emit();
+    return hit;
+  }
+
+  state(q: ReadQuery): ReadStatus {
+    const { keys, tags } = norm(q);
+    const now = this.clock.now();
+    let inFlight = 0;
+    const accts = new Set<string>();
+    for (const e of this.entries.values()) {
+      if (!this.overlaps(e, keys, tags)) continue;
+      inFlight++;
+      for (const a of e.accounts) accts.add(a);
+    }
+    for (const k of keys) for (const a of this.accountsOf.get(k) ?? []) accts.add(a);
+    let lastAt: number | null = keys.length ? Infinity : null;
+    let justNow = keys.length > 0;
+    for (const k of keys) {
+      const d = this.done.get(k);
+      if (!d) { lastAt = null; justNow = false; break; }
+      lastAt = Math.min(lastAt as number, d.at);
+      if (!d.ok || now - d.at >= this.justNowMs) justNow = false;
+    }
+    const paused = this.sched.stats().paused;
+    let pausedUntil: number | null = null;
+    for (const a of accts) if (paused[a] && paused[a] > now) pausedUntil = Math.max(pausedUntil ?? 0, paused[a]);
+    const one = keys.length === 1 ? this.done.get(keys[0]!) : undefined;
+    return { busy: inFlight > 0, inFlight, justNow: justNow && inFlight === 0, lastAt: lastAt === Infinity ? null : lastAt, error: one && !one.ok ? one.error ?? null : null, pausedUntil };
+  }
+
+  private overlaps(e: Entry, keys: string[], tags: string[]): boolean {
+    for (const k of keys) if (e.key === k || e.covers.has(k)) return true;
+    for (const t of tags) if (e.tags.has(t) || e.key === t) return true;
+    return false;
+  }
+
+  private settle(e: Entry, ok: boolean, result: unknown, error?: unknown): void {
+    if (this.entries.get(e.key) === e) this.entries.delete(e.key);
+    const at = this.clock.now();
+    if (ok) this.done.set(e.key, { at, ok, result });
+    else if (!/cancel/i.test(errText(error))) this.done.set(e.key, { at, ok, error: errText(error) });
+    if (!e.group) this.onEvent?.(e.key, ok ? { kind: 'done', result } : { kind: 'error', error });
+    this.armExpiry();
+    this.emit();
+  }
+
+  /** "Read just now" ends by itself: one timer re-renders the buttons when the oldest memo runs out. */
+  private armExpiry(): void {
+    if (this.expiry !== null) return;
+    this.expiry = this.clock.setTimeout(() => { this.expiry = null; this.emit(); }, this.justNowMs + 50);
+  }
+
+  private emit(): void {
+    this.ver++;
+    for (const f of this.listeners) { try { f(); } catch { /* a listener never breaks the registry */ } }
+  }
+}
+
+function norm(q: ReadQuery): { keys: string[]; tags: string[] } {
+  return typeof q === 'string' ? { keys: [q], tags: [] } : { keys: q.keys ?? [], tags: q.tags ?? [] };
+}
+
+// ---- canonical keys of reads without an app target ----
+export const PORTFOLIO_KEY = '*\u001fportfolio.status\u001f{"live":true}';
+export const PORTFOLIO_CHECK_KEY = '*\u001fportfolio.status\u001f{}';
+export const READ_ALL_KEY = '*\u001freadAll';
+export const IMPORT_ALL_KEY = '*\u001fimport';
+export const importKey = (account: string): string => `account:${account}\u001fstore_apps.list`;
+export const accountCheckKey = (account: string): string => `account:${account}\u001faccount.check`;
+
+/** The scope tags of a read of one app (Refresh all sees every app read; an app's own buttons see `app:<target>`). */
+export const appTags = (target: string): string[] => ['all', `app:${target}`];
+
+// ---- which reads a write changes ----
+const ALL = null;
+const LISTING = ['project.listings', 'project.editable', 'listing.live', 'validate', 'scan', 'aso.audit'];
+const CATALOG = ['prices.current', 'prices.diff', 'catalog.diff', 'validate', 'scan'];
+const ART = ['art.live', 'project.renders', 'project.icon', 'validate', 'scan'];
+
+/**
+ * The read methods of the same app a write makes outdated (null: all of them). `portfolio` true when the write
+ * changes release state the portfolio read shows. Unknown writes invalidate everything of the app (safe default).
+ */
+export function affectedReads(writeMethod: string): { methods: string[] | null; portfolio: boolean } {
+  const m = writeMethod;
+  const r = (methods: string[] | null, portfolio = false) => ({ methods, portfolio });
+  if (m === 'owner.play_rollout' || m === 'owner.ios_phased') return r(['apple.status', 'play.status'], true);
+  if (m.startsWith('reviews.') || m === 'owner.reply_send') return r(['reviews.list', 'reviews.drafts']);
+  if (m.startsWith('prices.') || m === 'owner.prices_import' || m === 'apple.iap' || m === 'apple.subscriptions' || m === 'play.products' || m === 'play.subscriptions') return r(CATALOG);
+  if (m === 'apple.listing_pull' || m === 'play.listing_pull' || m === 'play.listing' || m === 'apple.appinfo' || m === 'apple.review_details') return r(LISTING);
+  if (m.startsWith('art.') || m.startsWith('shots.') || m === 'apple.screenshots' || m === 'apple.previews' || m === 'play.images' || m === 'icons') return r(ART);
+  if (m.startsWith('apple.testflight_') || m === 'owner.testflight_testers') return r(['apple.testflight_status']);
+  if (m.startsWith('owner.ppo_') || m.startsWith('apple.ppo_')) return r(['apple.ppo_status']);
+  if (m === 'apple.game_center' || m === 'play.games') return r(['games.status']);
+  if (m === 'apple.encryption' || m === 'play.data_safety') return r(['project.declarations', 'validate', 'scan']);
+  if (m.startsWith('analytics.')) return r(['analytics.compare']);
+  return r(ALL, true);
+}
+
+/** The method part of a canonical key (readKey: target \u001f method \u001f args). */
+export const methodOfKey = (key: string): string => key.split('\u001f')[1] ?? '';
+export const targetOfKey = (key: string): string => key.split('\u001f')[0] ?? '';
diff --git a/apps/desktop/src/lib/scheduler.ts b/apps/desktop/src/lib/scheduler.ts
index b2e79e3..a2b94c0 100644
--- a/apps/desktop/src/lib/scheduler.ts
+++ b/apps/desktop/src/lib/scheduler.ts
@@ -127,6 +127,9 @@ export class ReadScheduler {
 
   subscribe(fn: () => void): () => void { this.listeners.add(fn); return () => { this.listeners.delete(fn); }; }
 
+  /** True while the read of this key is running (not just queued). */
+  isRunning(key: string): boolean { return this.running.has(key); }
+
   has(key: string): boolean { return this.running.has(key) || this.queue.some(i => i.task.key === key); }
 
   enqueue<R>(task: ReadTask<R>): Promise<R> {
diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
index 64aa20b..7dc2f89 100644
--- a/apps/desktop/src/screens/Accounts.tsx
+++ b/apps/desktop/src/screens/Accounts.tsx
@@ -10,7 +10,9 @@ import { type Account, type AccountCheck, api, errorText, STUDIO_COLORS, type St
 import { type Key, t } from '../i18n';
 import { ago } from '../lib/format';
 import { withIgnored } from '../lib/identity';
-import { type AccountHealth, useData } from '../store';
+import { type AccountHealth, useData, useReadState } from '../store';
+import { accountCheckKey, importKey } from '../lib/read-registry';
+import { ImportAppsButton, TestAccountButton } from '../ui/ReadButtons';
 import { Icon, StoreGlyph } from '../ui/icons';
 import { Chip, Notice, StudioMark } from '../ui/kit';
 import { EmptyState, PageHeader, Section, StatTile } from '../ui/ds';
@@ -58,11 +60,14 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
   };
   const save = (e: FormEvent) => { e.preventDefault(); run(`ed-${a.id}`, async () => { await api.updateAccount(a.id, label, studio || null); if (a.kind === 'play' && a.profile && dev.trim() !== (a.developerId ?? '')) await api.setPlayDeveloper(a.id, dev.trim() || null); await d.reload(); setEdit(false); }); };
   const check = h?.check;
+  // Test and Import of this account: busy from the read registry (Test all / Import apps make them busy too)
+  const ck = useReadState(accountCheckKey(a.id));
+  const im = useReadState(importKey(a.id));
   const cm = useContextMenu();
   const more = useMenuButton();
   const menu = (): MenuInput => [
-      { label: t('acct.test'), icon: 'shield', disabled: busy ? t('cm.busy') : false, onSelect: () => run(`ck-${a.id}`, () => d.checkAccount(a.id)) },
-      { label: t('acct.import'), icon: 'download', disabled: busy || d.importBusy ? t('cm.busy') : false, onSelect: () => run(`im-${a.id}`, () => d.importApps(a.id)) },
+      { label: t('acct.test'), icon: 'shield', disabled: ck.busy ? t('cm.busy') : false, onSelect: () => { d.checkAccount(a.id).catch(() => {}); } },
+      { label: t('acct.import'), icon: 'download', disabled: im.busy ? t('cm.busy') : false, onSelect: () => { d.importApps(a.id).catch(() => {}); } },
       { label: t('acct.edit'), icon: 'edit', onSelect: () => setEdit(true) },
       'sep',
       { label: t('cm.copy'), icon: 'copy', submenu: [
@@ -90,8 +95,8 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
           </div>
         </div>
         <div className="actions">
-          <button className="btn btn-sm" onClick={() => run(`ck-${a.id}`, () => d.checkAccount(a.id))} disabled={!!busy}><Icon name="shield" className={busy === `ck-${a.id}` ? 'spin' : undefined} />{t('acct.test')}</button>
-          <button className="btn btn-sm" onClick={() => run(`im-${a.id}`, () => d.importApps(a.id))} disabled={!!busy || d.importBusy}><Icon name="download" />{t('acct.import')}</button>
+          <TestAccountButton account={a.id} label={t('acct.test')} />
+          <ImportAppsButton account={a.id} label={t('acct.import')} />
           <button className="btn btn-sm btn-ghost btn-icon" onClick={() => setEdit(x => !x)} aria-expanded={edit} aria-label={t('acct.editAria', { label: a.label })} title={t('acct.edit')}><Icon name="edit" /></button>
           <button className="btn btn-sm btn-ghost btn-icon" {...more(menu)} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" /></button>
         </div>
@@ -196,7 +201,6 @@ export function Accounts({ focus }: { focus?: string }) {
   const addStudio = () => act('studio', async () => { const s = await api.saveStudio(null, studioName, studioColor); setStudioName(''); return s; }, r => t('studio.added', { name: (r as Studio).name }));
   const addPlay = () => act('play', async () => { const a = await api.addPlayAccount(playLabel, playStudio || null); if (a) setPlayLabel(''); return a; }, r => t('accounts.saved', { label: (r as Account).label }));
   const addApple = () => act('apple', async () => { const a = await api.addAppleAccount(appleLabel, keyId, issuerId, appleStudio || null); if (a) { setAppleLabel(''); setKeyId(''); setIssuerId(''); } return a; }, r => t('accounts.saved', { label: (r as Account).label }));
-  const testAll = async () => { setBusy('all'); await Promise.all(d.accounts.map(a => d.checkAccount(a.id))); setBusy(null); };
   const unassigned = d.accounts.filter(a => !a.studio || !d.studios.some(s => s.id === a.studio));
   const studioSelect = (id: string, value: string, set: (v: string) => void) => (
     <div className="field"><label htmlFor={id}>{t('studio.studio')}</label>
@@ -209,8 +213,8 @@ export function Accounts({ focus }: { focus?: string }) {
   return (
     <div className="page scr-accounts">
       <PageHeader icon="key" eyebrow={t('v2cfg.workspace')} title={t('nav.accounts')} subtitle={t('accounts.leadStudios')} actions={<>
-        <button className="btn" onClick={testAll} disabled={!!busy || !d.accounts.length}><Icon name="shield" className={busy === 'all' ? 'spin' : undefined} />{t('acct.testAll')}</button>
-        <button className="btn btn-primary" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>
+        <TestAccountButton className="btn" label={t('acct.testAll')} />
+        <ImportAppsButton className="btn btn-primary" />
       </>} />
       {d.accounts.length > 0 && <div className="ds-grid acct-kpis">
         <StatTile icon="building" label={t('v2cfg.studios')} value={d.studios.length} />
diff --git a/apps/desktop/src/screens/Dependencies.tsx b/apps/desktop/src/screens/Dependencies.tsx
index e7a04c8..9320e90 100644
--- a/apps/desktop/src/screens/Dependencies.tsx
+++ b/apps/desktop/src/screens/Dependencies.tsx
@@ -6,12 +6,15 @@ import { type AndroidSdkLookup, api, type DownloadInfo, errorText, type LocalToo
 import { t } from '../i18n';
 import { bytes } from '../lib/format';
 import { shortPath } from '../paths';
-import { useData } from '../store';
+import { useData, useReadState } from '../store';
 import { Icon, type IconName } from '../ui/icons';
 import { Chip, Notice, Skeleton } from '../ui/kit';
 import { PageHeader, Section, StatTile, StatusPill } from '../ui/ds';
 import '../styles/deps.css';
 
+/** The local tools check (system.tools): one registry key. */
+const TOOLS_KEY = '*\u001fsystem.tools';
+
 const TOOL_ICON: Record<string, IconName> = { ffmpeg: 'image', ffprobe: 'search', chrome: 'globe', xcode: 'terminal', simctl: 'phone', adb: 'phone', git: 'layers' };
 
 /** Status chip of one tool. */
@@ -29,16 +32,18 @@ export function Dependencies() {
   const [sdk, setSdk] = useState<AndroidSdkLookup | null>(d.sidecar?.tools?.androidSdk ?? null);
   const [info, setInfo] = useState<DownloadInfo[]>([]);
   const [error, setError] = useState<string | null>(null);
-  const [busy, setBusy] = useState(false);
+  // local tools check: one registry key, so a second click (or a remount) joins the check in flight
+  const busy = useReadState(TOOLS_KEY).busy;
   const [dl, setDl] = useState<Record<string, Dl>>({});
 
+  const reg = d.registry;
   const refresh = useCallback(async () => {
-    setBusy(true); setError(null);
+    setError(null);
     try {
-      const [s, i] = await Promise.all([api.call<LocalTools>('system.tools'), api.toolsInfo()]);
+      const [s, i] = await reg.read({ key: TOOLS_KEY, lanes: ['local'], accounts: [], priority: 0, run: () => Promise.all([api.call<LocalTools>('system.tools'), api.toolsInfo()]) }, { force: true });
       setTools(s.tools); setInfo(i); setSdk(s.androidSdk ?? null);
-    } catch (e) { setError(errorText(e)); } finally { setBusy(false); }
-  }, []);
+    } catch (e) { setError(errorText(e)); }
+  }, [reg]);
   useEffect(() => { refresh(); }, [refresh]);
   useEffect(() => {
     const un = onDownload(e => setDl(m => {
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 12bc6bc..c49926d 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -4,8 +4,8 @@
 // version, crash rate, catalog parity, config check), grouped by studio; then what changed and what to fix first.
 import { plainError } from '../../../../cli/lib/google-errors';
 import { BlockedProjectsNotice, blockedProjects } from '../ui/StoreError';
-import { type ReactNode, useEffect, useMemo, useState } from 'react';
-import { api, type AppStatus, newJob, type StoreRelease, type ToolResult } from '../api';
+import { type ReactNode, useEffect, useMemo, useRef, useState } from 'react';
+import { api, type AppStatus, type StoreRelease, type ToolResult } from '../api';
 import { type Key, t } from '../i18n';
 import { ago, pct, share } from '../lib/format';
 import { useShowIgnored } from '../lib/show-ignored';
@@ -15,7 +15,10 @@ import { type AppTab, useNav } from '../nav';
 import { useContextMenu } from '../ui/ContextMenu';
 import { appMenu } from '../ui/app-menu';
 import type { IconName } from '../ui/icons';
-import { useData } from '../store';
+import { useData, useReadState } from '../store';
+import { ImportAppsButton } from '../ui/ReadButtons';
+import { readKey } from '../lib/freshness';
+import { PORTFOLIO_KEY } from '../lib/read-registry';
 import { exportName, portfolioCsv } from '../lib/exports';
 import { useExports } from '../ui/Exports';
 import { Icon, StoreGlyph } from '../ui/icons';
@@ -302,20 +305,25 @@ export function Portfolio() {
   const [showIgnored, setShowIgnored] = useShowIgnored();
   const menu = useContextMenu();
   const [round, setRound] = useState(0);
-  const [rechecking, setRechecking] = useState(false);
   const health = useCachedHealth(visible.map(a => a.target), round);
   const blocked = useMemo(() => blockedProjects(visible.map(a => {
     const h = health[a.target]?.h, l = d.liveFor(a);
     return { app: a.name, errors: [h?.play && isError(h.play) ? h.play : null, l?.storeErrors.android] };
   })), [visible, health, d]);
-  // "Check again": read health of the blocked apps again (one at a time: the same Cloud project's quota), then the cache
-  const recheck = async () => {
-    setRechecking(true);
-    const names = new Set(blocked.flatMap(b => b.apps));
-    for (const a of visible.filter(x => names.has(x.name))) await api.call<ToolResult>('health', a.target, { args: {} }, newJob('health')).catch(() => null);
-    setRechecking(false);
-    setRound(n => n + 1);
+  // "Check again": the health reads of the blocked apps (the same keys as their Health tab's refresh and Refresh all),
+  // plus the portfolio read when a blocked store came from it. Busy (and disabled) whenever any of these keys is in
+  // flight, whoever started it; a click joins what runs and the scheduler spaces the rest (one Cloud project's quota).
+  const blockedApps = useMemo(() => { const names = new Set(blocked.flatMap(b => b.apps)); return visible.filter(x => names.has(x.name)); }, [blocked, visible]);
+  const fromLive = blockedApps.some(a => !!d.liveFor(a)?.storeErrors.android);
+  const checkKeys = useMemo(() => [...blockedApps.map(a => readKey(a.target, 'health', {})), ...(fromLive ? [PORTFOLIO_KEY] : [])], [blockedApps, fromLive]);
+  const checkReads = useReadState({ keys: checkKeys });
+  const recheck = () => {
+    Promise.allSettled([...blockedApps.map(a => d.schedule(a.target, 'health', {}, 0)), ...(fromLive ? [d.refreshPortfolio(true)] : [])]).catch(() => {});
   };
+  // whoever read them (this button, Refresh all, a Health tab), the notice looks at the saved health again after
+  const wasBusy = useRef(false);
+  useEffect(() => { if (wasBusy.current && !checkReads.busy) setRound(n => n + 1); wasBusy.current = checkReads.busy; }, [checkReads.busy]);
+  const allReads = useReadState({ tags: ['all'] });
   const open = (a: UnifiedApp) => nav.go({ screen: 'app', appId: a.key, tab: 'releases' });
 
   const all = useMemo(() => visible.map(app => {
@@ -411,14 +419,14 @@ export function Portfolio() {
           <p>{t('portfolio.subStudios', { count: visible.length, stores, studios: d.studios.length })}{d.live ? ` · ${t('pf.readAgo', { when: ago(d.live.at) })}` : ''}</p>
         </div>
         <div className="actions">
-          {neverImported === 0 && <button className="btn" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length} title={t('action.importAppsHint')}><Icon name="download" className={d.importBusy ? 'spin' : undefined} />{t('action.importApps')}</button>}
+          {neverImported === 0 && <ImportAppsButton className="btn" />}
         </div>
       </div>
 
       {d.portfolioError && <Notice tone="bad">{d.portfolioError}</Notice>}
-      <BlockedProjectsNotice blocked={blocked} onRetry={recheck} busy={rechecking} />
-      {neverImported > 0 && <Notice tone="info" icon="download" action={<button className="btn btn-sm" onClick={() => d.importApps()} disabled={d.importBusy}>{t('action.importApps')}</button>}>{t('portfolio.notImported', { count: neverImported })}</Notice>}
-      {!known && d.ready && d.portfolioBusy !== 'live' && <Notice tone="info" action={<button className="btn btn-sm btn-primary" onClick={() => { d.readAll(true).catch(() => {}); }}>{t('action.readStores')}</button>}>{t('portfolio.notReadNotice')}</Notice>}
+      <BlockedProjectsNotice blocked={blocked} onRetry={recheck} busy={checkReads.busy} />
+      {neverImported > 0 && <Notice tone="info" icon="download" action={<ImportAppsButton />}>{t('portfolio.notImported', { count: neverImported })}</Notice>}
+      {!known && d.ready && d.portfolioBusy !== 'live' && <Notice tone="info" action={<button className="btn btn-sm btn-primary" onClick={() => { d.readAll(true).catch(() => {}); }} disabled={allReads.busy} aria-busy={allReads.busy}><Icon name="refresh" className={allReads.busy ? 'spin' : undefined} />{t('action.readStores')}</button>}>{t('portfolio.notReadNotice')}</Notice>}
 
       <div className="kpis">
         <Kpi icon="layers" label={t('kpi.apps')} value={rows.length} sub={t('kpi.appsSubStore', { ios: iosApps, android: androidApps, store: storeOnly })} />
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
index cde32f6..599c9af 100644
--- a/apps/desktop/src/screens/Settings.tsx
+++ b/apps/desktop/src/screens/Settings.tsx
@@ -12,6 +12,7 @@ import { pairCandidates, type UnifiedApp, withPair, withUnpair } from '../lib/id
 import { useNav } from '../nav';
 import { usePrefs } from '../prefs-ctx';
 import { useData } from '../store';
+import { ImportAppsButton, RefreshAllButton } from '../ui/ReadButtons';
 import { Icon, type IconName, StoreGlyph } from '../ui/icons';
 import { AppIcon, Chip, Kbd, MOD, Notice, Seg, StudioMark } from '../ui/kit';
 
@@ -153,8 +154,8 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
                   {[1, 2, 3, 4, 6, 8].map(n => <option key={n} value={n}>{n}</option>)}
                 </select><span className="hint">{t('set.parallelHint')}</span></div>
               <div className="actions">
-                <button className="btn btn-sm" onClick={() => d.importApps()} disabled={d.importBusy || !d.accounts.length}><Icon name="download" />{t('action.importApps')}</button>
-                <button className="btn btn-sm" onClick={() => { d.readAll(true).catch(() => {}); }}><Icon name="refresh" />{t('action.refreshAll')}</button>
+                <ImportAppsButton />
+                <RefreshAllButton />
                 <span className="small muted">{d.live ? t('foot.lastRead', { when: ago(d.live.at) }) : t('foot.neverRead')}</span>
               </div>
             </div>
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index d203870..ada04ce 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -2,7 +2,7 @@
 // overrides, settings, the sidecar, the portfolio (offline check + the last live read from the cache), app icons, and
 // background jobs shown as toasts with progress and cancel.
 import { askPreview } from './ui/DryRunPreview';
-import { createContext, type ReactNode, useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react';
+import { createContext, type ReactNode, useCallback, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from 'react';
 import {
   type Account, type AccountCheck, api, type AppInfo, type AppsListResult, type AppStatus, type CacheEntry, DEFAULT_SETTINGS, errorText, newJob, onDownload,
   onProgress, onTrayAction, type PortfolioResult, type Project, reads, type Settings, type SidecarStatus, type Studio, type ToolResult,
@@ -17,6 +17,7 @@ import { normalizeAccounts, normalizeProjects, normalizeWorkspace } from './lib/
 import { keepLines, progressOf } from './lib/progress';
 import { isStale, lanesOf, looksThrottled, oneLine, readKey, readsFor } from './lib/freshness';
 import { type Outcome, type Priority, ReadScheduler, type ReadTask, type SchedulerStats } from './lib/scheduler';
+import { accountCheckKey, affectedReads, appTags, IMPORT_ALL_KEY, importKey, methodOfKey, PORTFOLIO_CHECK_KEY, PORTFOLIO_KEY, READ_ALL_KEY, type ReadQuery, ReadRegistry, type ReadStatus } from './lib/read-registry';
 import { fixHint } from './lib/views';
 import type { Route } from './nav';
 import { withLastGood } from '../../../cli/lib/train';
@@ -90,8 +91,11 @@ export interface Data {
   icons: Record<string, string | null>;
   /** Background reader: progress and the App Store Connect quota seen this hour. */
   reader: ReaderState;
-  /** Runs one read through the scheduler (deduped, rate limited); the result also goes to the read bus. */
-  schedule: (target: string, method: string, args: Record<string, unknown>, priority: Priority) => Promise<ToolResult>;
+  /** Runs one read through the read registry and the scheduler (single-flight, rate limited, "read just now" memo
+   *  unless `force`); the result also goes to the read bus. */
+  schedule: (target: string, method: string, args: Record<string, unknown>, priority: Priority, force?: boolean) => Promise<ToolResult>;
+  /** The one read registry (lib/read-registry.ts): every read button asks it through useReadState. */
+  registry: ReadRegistry;
   /** Listens to one read's bus key. */
   onRead: (key: string, fn: (e: ReadEvent) => void) => () => void;
   isReading: (key: string) => boolean;
@@ -101,8 +105,8 @@ export interface Data {
   muteUntil: number;
   /** Mutes notifications for `minutes` (0 = unmute). */
   setMute: (minutes: number) => void;
-  /** After a write: the app's reads are read again. */
-  invalidate: (target: string) => void;
+  /** After a write: the reads of the app that `writeMethod` changed are read again (all of them without one). */
+  invalidate: (target: string, writeMethod?: string) => void;
   /** The app on screen (its reads go first). */
   setFocus: (key: string | null) => void;
   /** True when the read succeeded. */
@@ -127,6 +131,8 @@ export interface Data {
 }
 
 const Ctx = createContext<Data | null>(null);
+/** The read registry on its own context (DataProvider fills it), so read buttons and tests need only this. */
+export const RegistryCtx = createContext<ReadRegistry | null>(null);
 export const useData = (): Data => {
   const d = useContext(Ctx);
   if (!d) throw new Error('useData outside DataProvider');
@@ -137,6 +143,9 @@ const lastLine = (s: string): string => s.trim().split('\n').filter(Boolean).at(
 /** A failure line with how to fix it, when the error is a known one. */
 const withHint = (msg: string | undefined): string | undefined => { const h = fixHint(msg); return h && msg ? `${msg} · ${t(h)}` : msg; };
 
+/** The scheduler credential of a store account. */
+const credOf = (a: Account): string => `${a.kind === 'play' ? 'play' : 'apple'}:${a.id}`;
+
 const storeName = (s: 'ios' | 'android'): string => (s === 'ios' ? 'App Store' : 'Google Play');
 /** Title and body of the notification of one release change (by kind; a rejection adds the store's reason when it has one). */
 export function releaseText(c: ReleaseChange): [string, string] {
@@ -164,9 +173,7 @@ export function DataProvider({ children }: { children: ReactNode }) {
   const [sidecarError, setSidecarError] = useState<string | null>(null);
   const [portfolio, setPortfolio] = useState<PortfolioResult | null>(null);
   const [live, setLive] = useState<CacheEntry<PortfolioResult> | null>(null);
-  const [portfolioBusy, setBusy] = useState<Data['portfolioBusy']>(null);
   const [portfolioError, setPortfolioError] = useState<string | null>(null);
-  const [importBusy, setImportBusy] = useState(false);
   const [icons, setIcons] = useState<Record<string, string | null>>({});
   const [toasts, setToasts] = useState<Toast[]>([]);
   const timers = useRef(new Map<string, ReturnType<typeof setTimeout>>());
@@ -240,42 +247,64 @@ export function DataProvider({ children }: { children: ReactNode }) {
   const appsRef = useRef(apps);
   appsRef.current = apps;
 
-  const refreshPortfolio = useCallback(async (liveRead = false, quiet = false): Promise<boolean> => {
-    const job = newJob(liveRead ? 'portfolio-live' : 'portfolio');
-    setBusy(liveRead ? 'live' : 'offline'); setPortfolioError(null);
-    const tid = liveRead && !quiet ? toast({ id: job, kind: 'job', title: t('toast.readingStores'), detail: t('toast.readingStoresDetail'), progress: null, job }) : null;
-    try {
-      const stores = liveRead ? appsRef.current.filter(a => !a.project && !a.ignored).map(a => a.target) : [];
-      let r = await api.portfolio(liveRead, job, stores);
-      // a store that failed this time keeps its last good releases ("couldn't refresh"), never turns empty
-      const prevLive = liveRef.current;
-      if (liveRead && prevLive) r = { ...r, apps: r.apps.map(a => withLastGood(prevLive.value.apps.find(x => x.project === a.project), a, prevLive.at)) };
-      setPortfolio(r);
-      if (liveRead) {
-        const changes = releaseChanges(liveRef.current?.value, r);
-        setLive({ value: r, at: r.at });
-        for (const c of changes.slice(0, 5)) {
-          const [title, body] = releaseText(c);
-          const app = appsRef.current.find(a => a.target === c.project);
-          notice(c.kind, title, body, app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined);
-        }
-        const failed = r.apps.filter(a => a.storeErrors.ios || a.storeErrors.android).length;
-        if (tid) updateToast(tid, failed ? { kind: 'info', title: t('toast.readDonePartial'), detail: t('toast.readDonePartialDetail', { count: failed }), progress: undefined, job: undefined }
-          : { kind: 'ok', title: t('toast.readDone'), detail: t('toast.readDoneDetail', { count: r.apps.length }), progress: undefined, job: undefined });
-      }
-    } catch (e) {
-      const msg = errorText(e);
-      setPortfolioError(msg);
-      if (tid) updateToast(tid, { kind: /cancel/i.test(msg) ? 'info' : 'bad', title: /cancel/i.test(msg) ? t('toast.cancelled') : t('toast.readFailed'), detail: msg, progress: undefined, job: undefined });
-      return false;
-    } finally { setBusy(null); }
-    return true;
-  }, [toast, updateToast, notice]);
-
-  // ---- background reader: one scheduler for every store read of the window (lib/scheduler.ts) ----
+  // ---- reads: one scheduler (lib/scheduler.ts) under one read registry (lib/read-registry.ts) for every read of the
+  // window: buttons, notices, cards, the background reader, the tray and Ctrl+K. Same key = one host call (joined);
+  // a broad read covers its narrow keys; every button renders busy from the registry (useReadState), never its own flag.
   const schedRef = useRef<ReadScheduler | null>(null);
   if (!schedRef.current) schedRef.current = new ReadScheduler({ classify: classifyRead, limits: { apple: settings.refresh.parallel, play: settings.refresh.parallel } });
   const sched = schedRef.current;
+  const bus = useRef(new Map<string, Set<(e: ReadEvent) => void>>());
+  const emitRead = useCallback((key: string, e: ReadEvent) => { for (const f of bus.current.get(key) ?? []) { try { f(e); } catch { /* a card's listener never breaks the bus */ } } }, []);
+  const regRef = useRef<ReadRegistry | null>(null);
+  if (!regRef.current) regRef.current = new ReadRegistry(sched, {
+    onEvent: (key, e) => emitRead(key, e.kind === 'start' ? e : e.kind === 'done' ? { kind: 'done', result: e.result as ToolResult } : { kind: 'error', error: errorText(e.error) }),
+  });
+  const reg = regRef.current;
+  // the provider's derived busy flags (portfolioBusy, importBusy) follow the registry
+  const regVer = useSyncExternalStore(reg.subscribe, reg.version, reg.version);
+  const portfolioBusy: Data['portfolioBusy'] = useMemo(() => (reg.state(PORTFOLIO_KEY).busy ? 'live' : reg.state(PORTFOLIO_CHECK_KEY).busy ? 'offline' : null), [reg, regVer]); // eslint-disable-line react-hooks/exhaustive-deps
+  const importBusy = useMemo(() => reg.state({ tags: ['import'] }).busy, [reg, regVer]); // eslint-disable-line react-hooks/exhaustive-deps
+  const accountsRef = useRef(accounts);
+  accountsRef.current = accounts;
+
+  const refreshPortfolio = useCallback((liveRead = false, quiet = false): Promise<boolean> => {
+    const job = newJob(liveRead ? 'portfolio-live' : 'portfolio');
+    const run = async (): Promise<boolean> => {
+      setPortfolioError(null);
+      const tid = liveRead && !quiet ? toast({ id: job, kind: 'job', title: t('toast.readingStores'), detail: t('toast.readingStoresDetail'), progress: null, job }) : null;
+      try {
+        const stores = liveRead ? appsRef.current.filter(a => !a.project && !a.ignored).map(a => a.target) : [];
+        let r = await api.portfolio(liveRead, job, stores);
+        // a store that failed this time keeps its last good releases ("couldn't refresh"), never turns empty
+        const prevLive = liveRef.current;
+        if (liveRead && prevLive) r = { ...r, apps: r.apps.map(a => withLastGood(prevLive.value.apps.find(x => x.project === a.project), a, prevLive.at)) };
+        setPortfolio(r);
+        if (liveRead) {
+          const changes = releaseChanges(liveRef.current?.value, r);
+          setLive({ value: r, at: r.at });
+          for (const c of changes.slice(0, 5)) {
+            const [title, body] = releaseText(c);
+            const app = appsRef.current.find(a => a.target === c.project);
+            notice(c.kind, title, body, app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined);
+          }
+          const failed = r.apps.filter(a => a.storeErrors.ios || a.storeErrors.android).length;
+          if (tid) updateToast(tid, failed ? { kind: 'info', title: t('toast.readDonePartial'), detail: t('toast.readDonePartialDetail', { count: failed }), progress: undefined, job: undefined }
+            : { kind: 'ok', title: t('toast.readDone'), detail: t('toast.readDoneDetail', { count: r.apps.length }), progress: undefined, job: undefined });
+        }
+      } catch (e) {
+        const msg = errorText(e);
+        setPortfolioError(msg);
+        if (tid) updateToast(tid, { kind: /cancel/i.test(msg) ? 'info' : 'bad', title: /cancel/i.test(msg) ? t('toast.cancelled') : t('toast.readFailed'), detail: msg, progress: undefined, job: undefined });
+        return false;
+      }
+      return true;
+    };
+    // the live read uses every store account (their quota pauses show on its buttons); the offline check is local
+    return reg.read<boolean>(liveRead
+      ? { key: PORTFOLIO_KEY, tags: ['all', 'portfolio'], lanes: ['apple', 'play'], accounts: accountsRef.current.map(credOf), priority: quiet ? 1 : 0, run, cancel: () => { api.cancel(job).catch(() => {}); } }
+      : { key: PORTFOLIO_CHECK_KEY, tags: ['portfolio-check'], lanes: ['local'], accounts: [], priority: 0, run }).catch(() => false);
+  }, [reg, toast, updateToast, notice]);
+
   const [reader, setReader] = useState<SchedulerStats>(() => sched.stats());
   useEffect(() => {
     let tm: ReturnType<typeof setTimeout> | null = null;
@@ -283,14 +312,12 @@ export function DataProvider({ children }: { children: ReactNode }) {
     return () => { un(); if (tm) clearTimeout(tm); };
   }, [sched]);
   useEffect(() => { sched.setLimits({ apple: settings.refresh.parallel, play: settings.refresh.parallel }); }, [sched, settings.refresh.parallel]);
-  const bus = useRef(new Map<string, Set<(e: ReadEvent) => void>>());
-  const emitRead = useCallback((key: string, e: ReadEvent) => { for (const f of bus.current.get(key) ?? []) { try { f(e); } catch { /* a card's listener never breaks the bus */ } } }, []);
   const onRead = useCallback((key: string, fn: (e: ReadEvent) => void) => {
     const set = bus.current.get(key) ?? new Set();
     set.add(fn); bus.current.set(key, set);
     return () => { set.delete(fn); if (!set.size) bus.current.delete(key); };
   }, []);
-  const isReading = useCallback((key: string) => sched.has(key), [sched]);
+  const isReading = useCallback((key: string) => reg.active(key), [reg]);
   const focusRef = useRef<string | null>(null);
   const setFocus = useCallback((key: string | null) => { focusRef.current = key; }, []);
 
@@ -303,101 +330,124 @@ export function DataProvider({ children }: { children: ReactNode }) {
   const statusRef = useRef<(a: UnifiedApp) => AppStatus | undefined>(() => undefined);
   const lastData = useRef(new Map<string, unknown>());
 
-  const schedule = useCallback((target: string, method: string, args: Record<string, unknown>, priority: Priority): Promise<ToolResult> => {
+  const schedule = useCallback((target: string, method: string, args: Record<string, unknown>, priority: Priority, force = false): Promise<ToolResult> => {
     const key = readKey(target, method, args);
     const app = appsRef.current.find(a => a.target === target);
     const pf = platformsOf(app, app ? statusRef.current(app) : undefined);
     const lanes = lanesOf(method, pf);
     // reviews and health: compared with the previous read here (not in a card), so the tray app notices them with no window open
     const watch = method === 'reviews.list' || method === 'health';
+    const job = newJob(method);
     const run = async (): Promise<ToolResult> => {
       const before = watch ? (lastData.current.has(key) ? lastData.current.get(key) : (await api.cached<ToolResult>(method, target, args).catch(() => null))?.value.data ?? null) : null;
-      const result = await api.call<ToolResult>(method, target, { args }, newJob(method));
+      const result = await api.call<ToolResult>(method, target, { args }, job);
       if (watch && usable(method, result)) {
         notifyAfterRead(method, before, result.data, notice, app?.name, app?.key);
         lastData.current.set(key, result.data);
       }
       return result;
     };
-    const p = sched.enqueue<ToolResult>({ key, lanes, accounts: accountsOf(app, lanes), priority, run });
-    emitRead(key, { kind: 'start' });
-    p.then(result => emitRead(key, { kind: 'done', result }), e => emitRead(key, { kind: 'error', error: errorText(e) }));
-    return p;
-  }, [sched, emitRead, notice]);
+    return reg.read<ToolResult>({ key, tags: appTags(target), lanes, accounts: accountsOf(app, lanes), priority, run, cancel: () => { api.cancel(job).catch(() => {}); } }, { force });
+  }, [reg, notice]);
 
   /**
-   * Reads everything past its TTL. The portfolio read is a LIVE one (refreshPortfolio(true)): it is what releaseChanges
-   * compares, so a rejection is seen even when no screen asked. Resolves when that read is done: false when it failed.
+   * Refresh all (and the background pass): one group read that covers the portfolio and every app read it plans, so
+   * every button and card of those keys shows busy at once and a click on any of them joins. Single-flight: a second
+   * Refresh all, the tray's "Read now" or a pass while one runs joins it. Without `force` only reads past their TTL run.
+   * Resolves when everything it started is done: false when the portfolio read failed.
    */
   const readAll = useCallback(async (force = false): Promise<boolean> => {
     if (!force && !settingsRef.current.refresh.autoRead) return true;
-    let ok = true;
-    let portfolioRead: Promise<void> | null = null;
-    const pkey = '*\u001fportfolio.status';
-    if (!sched.has(pkey) && (force || isStale('portfolio.status', liveRef.current?.at))) {
-      portfolioRead = sched.enqueue<boolean>({ key: pkey, lanes: ['apple', 'play'], accounts: [], priority: 1, run: () => refreshPortfolio(true, true) })
-        .then(r => { ok = r !== false; }, () => { ok = false; });
-    }
     const list = [...appsRef.current].filter(a => !a.ignored && !a.project?.missing)
       .sort((a, b) => Number(b.key === focusRef.current) - Number(a.key === focusRef.current));
-    for (const a of list) {
-      const pf = platformsOf(a, statusRef.current(a));
-      for (const r of readsFor({ folder: !!a.project, ...pf })) {
-        const key = readKey(a.target, r.method, r.args);
-        if (sched.has(key)) continue;
-        if (!force) {
-          const c = await api.cached<ToolResult>(r.method, a.target, r.args).catch(() => null);
-          if (c && !isStale(r.method, c.at)) continue;
-        }
-        schedule(a.target, r.method, r.args, a.key === focusRef.current ? 0 : 2).catch(() => {});
-      }
-    }
-    await portfolioRead;
-    return ok;
-  }, [sched, schedule, refreshPortfolio]);
+    const planned = list.flatMap(a => readsFor({ folder: !!a.project, ...platformsOf(a, statusRef.current(a)) }).map(r => ({ a, r, key: readKey(a.target, r.method, r.args) })));
+    return reg.group<boolean>({
+      key: READ_ALL_KEY, tags: ['all'], covers: [PORTFOLIO_KEY, ...planned.map(p => p.key)],
+      run: async g => {
+        const waits: Promise<unknown>[] = [];
+        let portfolioRead: Promise<boolean> | null = null;
+        g.release(PORTFOLIO_KEY);
+        if (force || isStale('portfolio.status', liveRef.current?.at)) portfolioRead = refreshPortfolio(true, true);
+        // the TTL checks of every key at once (cache reads, local), then the reads that are due, in priority order
+        const due = await Promise.all(planned.map(async p => {
+          if (force || reg.active(p.key)) return true;
+          const c = await api.cached<ToolResult>(p.r.method, p.a.target, p.r.args).catch(() => null);
+          return !(c && !isStale(p.r.method, c.at));
+        }));
+        planned.forEach((p, i) => {
+          g.release(p.key);
+          if (due[i]) waits.push(schedule(p.a.target, p.r.method, p.r.args, p.a.key === focusRef.current ? 0 : 2).catch(() => {}));
+        });
+        const ok = portfolioRead ? await portfolioRead : true;
+        await Promise.allSettled(waits);
+        return ok;
+      },
+    }).catch(() => false);
+  }, [reg, schedule, refreshPortfolio]);
 
-  const invalidate = useCallback((target: string) => {
+  /** After a write: only the reads it changed (lib/read-registry.ts affectedReads) lose their memo and read again. */
+  const invalidate = useCallback((target: string, writeMethod?: string) => {
+    const aff = writeMethod ? affectedReads(writeMethod) : { methods: null, portfolio: true };
     const pre = `${target}\u001f`;
-    for (const k of [...bus.current.keys()]) if (k.startsWith(pre)) emitRead(k, { kind: 'invalidate' });
+    const hits = (k: string) => k.startsWith(pre) && (!aff.methods || aff.methods.includes(methodOfKey(k)));
+    reg.invalidate(k => hits(k) || (aff.portfolio && (k === PORTFOLIO_KEY || k === PORTFOLIO_CHECK_KEY)));
+    for (const k of [...bus.current.keys()]) if (hits(k)) emitRead(k, { kind: 'invalidate' });
     const a = appsRef.current.find(x => x.target === target);
     if (a) for (const r of readsFor({ folder: !!a.project, ...platformsOf(a, statusRef.current(a)) })) {
       const key = readKey(target, r.method, r.args);
-      if (!bus.current.has(key)) schedule(target, r.method, r.args, 1).catch(() => {});
+      if (hits(key) && !bus.current.has(key)) schedule(target, r.method, r.args, 1, true).catch(() => {});
     }
-  }, [emitRead, schedule]);
+  }, [reg, emitRead, schedule]);
 
-  const importApps = useCallback(async (account?: string) => {
+  /** Import apps: one read per account (key importKey); "all" is a group that covers them, so an account's own
+   *  Import button and the page's Import apps are busy together and never read an account twice. */
+  const importApps = useCallback(async (account?: string): Promise<void> => {
     const ids = (account ? [account] : accounts.map(a => a.id)).filter(id => account || !overrides.ignored.includes(`account:${id}`));
     if (!ids.length) return;
     const job = newJob('import');
-    setImportBusy(true);
-    const tid = toast({ id: job, kind: 'job', title: t('toast.importing'), detail: t('toast.importingDetail'), progress: { done: 0, total: ids.length }, job });
-    let ok = 0, apps = 0;
-    const errors: string[] = [];
-    for (const [n, id] of ids.entries()) {
-      try {
-        const e = await api.refreshStoreApps(id, job);
-        setStoreApps(m => ({ ...m, [id]: e }));
-        ok++; apps += e.value.apps.length;
-      } catch (e) {
-        const msg = errorText(e);
-        if (/cancel/i.test(msg)) { updateToast(tid, { kind: 'info', title: t('toast.cancelled'), detail: undefined, progress: undefined, job: undefined }); setImportBusy(false); return; }
-        errors.push(`${accounts.find(a => a.id === id)?.label ?? id}: ${msg}`);
-      }
-      updateToast(tid, { progress: { done: n + 1, total: ids.length } });
-    }
-    setImportBusy(false);
-    updateToast(tid, errors.length ? { kind: ok ? 'info' : 'bad', title: t('toast.importPartial', { count: errors.length }), detail: errors[0], progress: undefined, job: undefined }
-      : { kind: 'ok', title: t('toast.importDone', { count: apps }), detail: t('toast.importDoneDetail', { count: ok }), progress: undefined, job: undefined });
-  }, [accounts, overrides.ignored, toast, updateToast]);
+    const readOne = (id: string) => {
+      const acc = accountsRef.current.find(a => a.id === id);
+      const cred = acc ? credOf(acc) : `apple:${id}`;
+      return reg.read<CacheEntry<AppsListResult>>({ key: importKey(id), tags: ['import', `account:${id}`], lanes: [cred.startsWith('play:') ? 'play' : 'apple'], accounts: [cred], priority: 0,
+        run: () => api.refreshStoreApps(id, job).then(e => { setStoreApps(m => ({ ...m, [id]: e })); return e; }), cancel: () => { api.cancel(job).catch(() => {}); } });
+    };
+    // one account whose import is already running (alone or inside Import all): join it, no second toast
+    if (account && reg.active(importKey(account))) { await readOne(account).catch(() => {}); return; }
+    const body = async (g?: { release: (k: string) => void }) => {
+      const tid = toast({ id: job, kind: 'job', title: t('toast.importing'), detail: t('toast.importingDetail'), progress: { done: 0, total: ids.length }, job });
+      let ok = 0, apps = 0, n = 0, cancelled = false;
+      const errors: string[] = [];
+      await Promise.all(ids.map(async id => {
+        g?.release(importKey(id));
+        try { const e = await readOne(id); ok++; apps += e.value.apps.length; } catch (e) {
+          const msg = errorText(e);
+          if (/cancel/i.test(msg)) cancelled = true;
+          else errors.push(`${accountsRef.current.find(a => a.id === id)?.label ?? id}: ${msg}`);
+        }
+        updateToast(tid, { progress: { done: ++n, total: ids.length } });
+      }));
+      if (cancelled) { updateToast(tid, { kind: 'info', title: t('toast.cancelled'), detail: undefined, progress: undefined, job: undefined }); return; }
+      updateToast(tid, errors.length ? { kind: ok ? 'info' : 'bad', title: t('toast.importPartial', { count: errors.length }), detail: errors[0], progress: undefined, job: undefined }
+        : { kind: 'ok', title: t('toast.importDone', { count: apps }), detail: t('toast.importDoneDetail', { count: ok }), progress: undefined, job: undefined });
+    };
+    if (account) { await body(); return; }
+    await reg.group({ key: IMPORT_ALL_KEY, tags: ['import'], covers: ids.map(importKey), run: g => body(g) }).catch(() => {});
+  }, [reg, accounts, overrides.ignored, toast, updateToast]);
 
+  /** "Test" of one account: single-flight per account (Test all and the row's Test join). */
   const checkAccount = useCallback(async (id: string) => {
-    try {
-      const check = await api.checkAccount(id, newJob('check'));
-      setAccountHealth(m => ({ ...m, [id]: { check, at: new Date().toISOString() } }));
-    } catch (e) { setAccountHealth(m => ({ ...m, [id]: { error: errorText(e), at: new Date().toISOString() } })); }
-  }, []);
-
+    const acc = accountsRef.current.find(a => a.id === id);
+    const cred = acc ? credOf(acc) : `apple:${id}`;
+    const job = newJob('check');
+    await reg.read({ key: accountCheckKey(id), tags: ['check', `account:${id}`], lanes: [cred.startsWith('play:') ? 'play' : 'apple'], accounts: [cred], priority: 0,
+      run: async () => {
+        try {
+          const check = await api.checkAccount(id, job);
+          setAccountHealth(m => ({ ...m, [id]: { check, at: new Date().toISOString() } }));
+        } catch (e) { setAccountHealth(m => ({ ...m, [id]: { error: errorText(e), at: new Date().toISOString() } })); }
+        return null;
+      } }, { force: true }).catch(() => {});
+  }, [reg]);
   const updateOverrides = useCallback(async (fn: (o: Overrides) => Overrides) => {
     const next = fn(overrides);
     setOverrides(next);
@@ -534,13 +584,13 @@ export function DataProvider({ children }: { children: ReactNode }) {
 
   const value = useMemo<Data>(() => ({
     ready, info, projects, accounts, studios, overrides, settings, storeApps, accountHealth, apps, sidecar, sidecarError, portfolio, live, portfolioBusy, portfolioError,
-    importBusy, icons, reader: readerState, muteUntil, setMute, schedule, onRead, isReading, readAll, invalidate, setFocus,
+    importBusy, icons, reader: readerState, muteUntil, setMute, schedule, registry: reg, onRead, isReading, readAll, invalidate, setFocus,
     refreshPortfolio, importApps, checkAccount, reload, updateOverrides, updateSettings, statusOf, liveOf, statusFor, liveFor, iconFor, appByKey,
     toasts, toast, updateToast, dismiss, cancelJob,
   }), [readerState, muteUntil, setMute, schedule, onRead, isReading, readAll, invalidate, setFocus, ready, info, projects, accounts, studios, overrides, settings, storeApps, accountHealth, apps, sidecar, sidecarError, portfolio, live, portfolioBusy, portfolioError,
     importBusy, icons, refreshPortfolio, importApps, checkAccount, reload, updateOverrides, updateSettings, statusOf, liveOf, statusFor, liveFor, iconFor, appByKey,
-    toasts, toast, updateToast, dismiss, cancelJob]);
-  return <Ctx.Provider value={value}>{children}</Ctx.Provider>;
+    toasts, toast, updateToast, dismiss, cancelJob, reg]);
+  return <Ctx.Provider value={value}><RegistryCtx.Provider value={reg}>{children}</RegistryCtx.Provider></Ctx.Provider>;
 }
 
 export interface ReadState<T> {
@@ -554,6 +604,10 @@ export interface ReadState<T> {
   error: string | null;
   /** The command line it ran (shown with errors). */
   command: string | null;
+  /** Finished less than a few seconds ago: a click answers from it ("read just now"), no second store call. */
+  justNow?: boolean;
+  /** Its store account waits on a quota pause or 429 backoff until then (epoch ms). */
+  pausedUntil?: number | null;
   refresh: () => Promise<void>;
 }
 
@@ -584,7 +638,7 @@ export function useWrite(projectId: string | null) {
       const o = await api.writeWithConfirm(w.method, projectId, w.args, job);
       if (o.stage === 'dry-run') d.updateToast(tid, { kind: 'bad', title: t('write.dryFailed'), detail: withHint(failureText(o.dryRun)), progress: undefined, job: undefined });
       else if (o.stage === 'dialog') d.updateToast(tid, { kind: 'info', title: t('write.notApplied'), detail: t('write.notAppliedDetail'), progress: undefined, job: undefined });
-      else if (o.result?.ok) { d.updateToast(tid, { kind: 'ok', title: w.done, detail: lastLine(o.result.output) || undefined, progress: undefined, job: undefined }); w.after?.(); d.invalidate(projectId); }
+      else if (o.result?.ok) { d.updateToast(tid, { kind: 'ok', title: w.done, detail: lastLine(o.result.output) || undefined, progress: undefined, job: undefined }); w.after?.(); d.invalidate(projectId, w.method); }
       // exit 3: the command stopped for an owner decision it did not get (a price change of a live product: the
       // Catalog tab's owner action applies it); everything else it could do was done
       else if (o.result?.exitCode === 3) { d.updateToast(tid, { kind: 'info', title: t('write.declined'), detail: lastLine(o.result.output) || undefined, progress: undefined, job: undefined }); w.after?.(); }
@@ -615,19 +669,34 @@ function notifyAfterRead(method: string, prev: unknown, next: unknown, notice: N
   }
 }
 
+/**
+ * The live state of one read query (a key, several keys, tags such as 'all' or 'import') from the read registry:
+ * busy while anything overlapping is queued or running (its own read, a broad read covering it, a narrow read of its
+ * scope), "read just now", the quota pause of its accounts. Every read button, notice and card renders loading and
+ * disabled from this, never from a local flag. Re-renders on every registry change (useSyncExternalStore).
+ */
+export function useReadState(q: ReadQuery): ReadStatus {
+  const reg = useContext(RegistryCtx);
+  if (!reg) throw new Error('useReadState outside DataProvider');
+  const ver = useSyncExternalStore(reg.subscribe, reg.version, reg.version);
+  const qk = typeof q === 'string' ? q : JSON.stringify(q);
+  return useMemo(() => reg.state(q), [reg, ver, qk]); // eslint-disable-line react-hooks/exhaustive-deps
+}
+
 /**
  * One read method of one app (a project id, or a store-only app's store target). The cached value shows at once with
- * its time; then, past its TTL (lib/freshness.ts), it is read again through the background scheduler (offline reads
- * always; store reads while Settings > Reading > auto-read is on). A read the background reader runs for this key
- * lands here too (the read bus). A failed read keeps the last good value and says so: never an empty "all fine".
+ * its time; then, past its TTL (lib/freshness.ts), it is read again through the read registry (offline reads always;
+ * store reads while Settings > Reading > auto-read is on). A read anyone else runs for this key (the background reader,
+ * Refresh all, a write's invalidation) lands here too (the read bus), and `loading` follows the registry: busy whenever
+ * the key, or a broad read covering it, is in flight. A failed read keeps the last good value and says so.
  */
 export function useRead<T>(target: string, method: string, o: { network: boolean; args?: Record<string, unknown>; title?: string; appName?: string; skip?: boolean }): ReadState<T> {
   const d = useData();
   const argsKey = JSON.stringify(o.args ?? {});
   const key = readKey(target, method, JSON.parse(argsKey) as Record<string, unknown>);
+  // `loading` here is only the first look into the cache; the read itself is the registry's
   const [s, set] = useState<Omit<ReadState<T>, 'refresh'>>({ data: null, at: null, fromCache: false, loading: true, error: null, command: null });
-  const dataRef = useRef<T | null>(null);
-  dataRef.current = s.data;
+  const st = useReadState(key);
   const dRef = useRef(d);
   dRef.current = d;
   const skipRef = useRef(o.skip);
@@ -635,7 +704,8 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
 
   const refresh = useCallback(async () => {
     if (skipRef.current) return;
-    set(x => ({ ...x, loading: true }));
+    set(x => ({ ...x, loading: false }));
+    // a click: highest priority, joins a read in flight, answered from the memo when it finished just now
     await dRef.current.schedule(target, method, JSON.parse(argsKey) as Record<string, unknown>, 0).catch(() => {});
   }, [target, method, argsKey]);
 
@@ -643,14 +713,13 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
   useEffect(() => {
     if (o.skip) return;
     return d.onRead(key, e => {
-      if (e.kind === 'start') set(x => ({ ...x, loading: true }));
-      else if (e.kind === 'invalidate') { set(x => ({ ...x, stale: true })); refresh(); }
-      else if (e.kind === 'error') { if (/cancel/i.test(e.error)) set(x => ({ ...x, loading: false })); else set(x => ({ ...x, loading: false, error: oneLine(e.error) })); }
+      if (e.kind === 'start') return;
+      if (e.kind === 'invalidate') { set(x => ({ ...x, stale: true })); refresh(); }
+      else if (e.kind === 'error') { if (!/cancel/i.test(e.error)) set(x => ({ ...x, error: oneLine(e.error) })); }
       else {
         const r = e.result;
-        if (usable(method, r)) {
-          set({ data: r.data as T, at: new Date().toISOString(), fromCache: false, loading: false, stale: false, error: null, command: r.command });
-        } else set(x => ({ ...x, loading: false, error: oneLine(failureText(r)), command: r.command }));
+        if (usable(method, r)) set({ data: r.data as T, at: new Date().toISOString(), fromCache: false, loading: false, stale: false, error: null, command: r.command });
+        else set(x => ({ ...x, error: oneLine(failureText(r)), command: r.command }));
       }
     });
   }, [key, o.skip]); // eslint-disable-line react-hooks/exhaustive-deps
@@ -659,13 +728,12 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
     let alive = true;
     if (o.skip) { set({ data: null, at: null, fromCache: false, loading: false, error: null, command: null }); return; }
     const auto = !o.network || dRef.current.settings.refresh.autoRead;
-    const running = dRef.current.isReading(key);
     set({ data: null, at: null, fromCache: false, loading: true, error: null, command: null });
     const go = (at: string | null) => {
       if (!alive) return;
       const due = !o.network || isStale(method, at);
-      if (running) set(x => ({ ...x, loading: true }));
-      else if (auto && due) refresh();
+      // in flight already (Refresh all, the background reader): the registry shows it busy; nothing to start
+      if (!dRef.current.isReading(key) && auto && due) refresh();
       else set(x => ({ ...x, loading: false }));
     };
     api.cached<ToolResult>(method, target, JSON.parse(argsKey) as Record<string, unknown>).then(c => {
@@ -676,5 +744,5 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
     return () => { alive = false; };
   }, [target, method, argsKey, o.skip]); // eslint-disable-line react-hooks/exhaustive-deps
 
-  return { ...s, refresh };
+  return { ...s, loading: !o.skip && (s.loading || st.busy), justNow: st.justNow, pausedUntil: st.pausedUntil, refresh };
 }
diff --git a/apps/desktop/src/ui/ReadButtons.tsx b/apps/desktop/src/ui/ReadButtons.tsx
new file mode 100644
index 0000000..ca1a011
--- /dev/null
+++ b/apps/desktop/src/ui/ReadButtons.tsx
@@ -0,0 +1,40 @@
+// Read buttons used on several screens. Their busy state comes from the read registry (useReadState), so every copy
+// of a button, and every other button whose read overlaps it, spins and is disabled together.
+import { t } from '../i18n';
+import { accountCheckKey, importKey } from '../lib/read-registry';
+import { useData, useReadState } from '../store';
+import { Icon } from './icons';
+
+/** Refresh all: busy while any read it covers runs (its own pass, a card refresh, Check again, the background reader). */
+export function RefreshAllButton({ className = 'btn btn-sm' }: { className?: string }) {
+  const d = useData();
+  const s = useReadState({ tags: ['all'] });
+  return (
+    <button className={className} onClick={() => { d.readAll(true).catch(() => {}); }} disabled={s.busy} aria-busy={s.busy} title={s.busy ? t('read.busyShared') : t('action.refreshAllHint')}>
+      <Icon name="refresh" className={s.busy ? 'spin' : undefined} />{t('action.refreshAll')}
+    </button>
+  );
+}
+
+/** Import apps (every account, or one): busy while that account's (or any account's) app list is being read. */
+export function ImportAppsButton({ account, className = 'btn btn-sm', label }: { account?: string; className?: string; label?: string }) {
+  const d = useData();
+  const s = useReadState(account ? { keys: [importKey(account)] } : { tags: ['import'] });
+  return (
+    <button className={className} onClick={() => { d.importApps(account).catch(() => {}); }} disabled={s.busy || !d.accounts.length} aria-busy={s.busy} title={s.busy ? t('read.busyShared') : t('action.importAppsHint')}>
+      <Icon name="download" className={s.busy ? 'spin' : undefined} />{label ?? t('action.importApps')}
+    </button>
+  );
+}
+
+/** Test one account (or all): single-flight per account; Test all and a row's Test are busy together. */
+export function TestAccountButton({ account, className = 'btn btn-sm', label }: { account?: string; className?: string; label: string }) {
+  const d = useData();
+  const s = useReadState(account ? { keys: [accountCheckKey(account)] } : { tags: ['check'] });
+  const run = () => { (account ? d.checkAccount(account) : Promise.all(d.accounts.map(a => d.checkAccount(a.id)))).catch(() => {}); };
+  return (
+    <button className={className} onClick={run} disabled={s.busy || !d.accounts.length} aria-busy={s.busy}>
+      <Icon name="shield" className={s.busy ? 'spin' : undefined} />{label}
+    </button>
+  );
+}
diff --git a/apps/desktop/src/ui/kit.tsx b/apps/desktop/src/ui/kit.tsx
index 62c5106..d118760 100644
--- a/apps/desktop/src/ui/kit.tsx
+++ b/apps/desktop/src/ui/kit.tsx
@@ -180,12 +180,13 @@ export function StoreOnlyTag() {
 
 /** The state of one read beside its card's title: "read 3 min ago" with a small spinner while it refreshes, or
  *  "couldn't refresh: <reason>" over the last good value, and the per-card refresh icon (no "Read" button first). */
-export function ReadControl({ r, label }: { r: { data: unknown; at: string | null; loading: boolean; error: string | null; refresh: () => Promise<void> }; label?: string }) {
-  const text = r.error ? t('read.couldNotRefresh', { reason: r.error }) : r.at ? t('read.ago', { when: ago(r.at) }) : r.loading ? t('read.waiting') : '';
+export function ReadControl({ r, label }: { r: { data: unknown; at: string | null; loading: boolean; error: string | null; justNow?: boolean; pausedUntil?: number | null; refresh: () => Promise<void> }; label?: string }) {
+  const paused = r.pausedUntil ? t('read.paused', { time: new Date(r.pausedUntil).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) }) : '';
+  const text = r.error ? t('read.couldNotRefresh', { reason: r.error }) : paused && r.loading ? paused : r.justNow ? t('read.justNow') : r.at ? t('read.ago', { when: ago(r.at) }) : r.loading ? t('read.waiting') : '';
   return (
-    <span className="read-ctl" data-read-state={r.loading ? 'loading' : r.error ? 'error' : r.data !== null ? 'ok' : 'none'}>
-      {text && <span className={`read-stamp ${r.error ? 'read-err' : ''}`} title={r.error ?? undefined}>{text}</span>}
-      <button className="btn btn-sm btn-icon" onClick={() => { r.refresh(); }} disabled={r.loading} aria-label={label ?? t('read.refresh')} title={label ?? t('read.refresh')}>
+    <span className="read-ctl" data-read-state={r.loading ? 'loading' : r.error ? 'error' : r.data !== null ? 'ok' : 'none'} data-read-paused={paused ? 'true' : undefined}>
+      {text && <span className={`read-stamp ${r.error ? 'read-err' : ''}`} title={r.error ?? (paused || undefined)}>{text}</span>}
+      <button className="btn btn-sm btn-icon" onClick={() => { r.refresh(); }} disabled={r.loading} aria-busy={r.loading} aria-label={label ?? t('read.refresh')} title={label ?? t('read.refresh')}>
         <Icon name="refresh" className={r.loading ? 'spin' : undefined} />
       </button>
     </span>
diff --git a/apps/desktop/tests/read-registry.test.ts b/apps/desktop/tests/read-registry.test.ts
new file mode 100644
index 0000000..dc6bf09
--- /dev/null
+++ b/apps/desktop/tests/read-registry.test.ts
@@ -0,0 +1,260 @@
+// The read registry (src/lib/read-registry.ts) over the scheduler, with a fake clock: single-flight per key, scope
+// overlap (tags, broad reads covering narrow keys), "read just now", invalidation, one error to every waiter,
+// cancellation, the quota pause on the query, which reads a write invalidates; and the component level: two read
+// buttons whose reads overlap both render busy and disabled from the registry (react-dom/server, no DOM needed).
+import { describe, expect, test } from 'bun:test';
+import { createElement } from 'react';
+import { renderToStaticMarkup } from 'react-dom/server';
+import { readKey } from '../src/lib/freshness';
+import { affectedReads, appTags, PORTFOLIO_KEY, READ_ALL_KEY, type ReadQuery, ReadRegistry, type ReadSpec } from '../src/lib/read-registry';
+import { RegistryCtx, useReadState } from '../src/store';
+import { type Clock, ReadScheduler } from '../src/lib/scheduler';
+
+class FakeClock implements Clock {
+  t = 1_000_000;
+  private timers: { at: number; fn: () => void; id: number }[] = [];
+  private n = 0;
+  now() { return this.t; }
+  setTimeout(fn: () => void, ms: number) { const id = ++this.n; this.timers.push({ at: this.t + ms, fn, id }); return id; }
+  clearTimeout(h: unknown) { this.timers = this.timers.filter(x => x.id !== h); }
+  random() { return 0.5; }
+  async advance(ms: number) {
+    const end = this.t + ms;
+    for (;;) {
+      await flush();
+      const next = this.timers.filter(x => x.at <= end).sort((a, b) => a.at - b.at)[0];
+      if (!next) break;
+      this.t = next.at;
+      this.timers = this.timers.filter(x => x !== next);
+      next.fn();
+    }
+    this.t = end;
+    await flush();
+  }
+}
+const flush = async () => { for (let i = 0; i < 20; i++) await Promise.resolve(); };
+
+/** A registry whose reads resolve when the test says so; `calls` counts host calls per key. */
+function setup(o: { justNowMs?: number } = {}) {
+  const clock = new FakeClock();
+  const sched = new ReadScheduler({ clock, spacingMs: 0, limits: { apple: 4, play: 4, local: 2 } });
+  const events: string[] = [];
+  const reg = new ReadRegistry(sched, { clock, justNowMs: o.justNowMs ?? 20_000, onEvent: (k, e) => events.push(`${e.kind}:${k}`) });
+  const calls = new Map<string, number>();
+  const pending = new Map<string, { done: (v: unknown) => void; fail: (e: unknown) => void }[]>();
+  const spec = (key: string, x: Partial<ReadSpec<unknown>> = {}): ReadSpec<unknown> => ({
+    key, lanes: ['apple'], accounts: ['apple:k1'], priority: 0, tags: x.tags ?? appTags('app1'), ...x,
+    run: () => new Promise((done, fail) => {
+      calls.set(key, (calls.get(key) ?? 0) + 1);
+      pending.set(key, [...(pending.get(key) ?? []), { done, fail }]);
+    }),
+  });
+  const finish = (key: string, v: unknown = { ok: true }) => { for (const p of pending.get(key) ?? []) p.done(v); pending.delete(key); };
+  const fail = (key: string, e: unknown) => { for (const p of pending.get(key) ?? []) p.fail(e); pending.delete(key); };
+  return { clock, sched, reg, calls, spec, finish, fail, events };
+}
+
+const K1 = readKey('app1', 'health', {});
+const K2 = readKey('app1', 'reviews.list', { days: 30 });
+const K3 = readKey('app2', 'health', {});
+
+describe('ReadRegistry', () => {
+  test('single-flight: the same key twice is one host call and one promise; both get the result', async () => {
+    const { clock, reg, calls, spec, finish, events } = setup();
+    const a = reg.read(spec(K1));
+    const b = reg.read(spec(K1));
+    await clock.advance(0);
+    expect(calls.get(K1)).toBe(1);
+    expect(reg.state(K1).busy).toBe(true);
+    finish(K1, { ok: true, n: 7 });
+    expect(await a).toEqual({ ok: true, n: 7 });
+    expect(await b).toEqual({ ok: true, n: 7 });
+    expect(reg.state(K1).busy).toBe(false);
+    // the bus hears one start and one done, never a join
+    expect(events).toEqual([`start:${K1}`, `done:${K1}`]);
+  });
+
+  test('just now: a second click right after a finished read answers from it; after the window it reads again', async () => {
+    const { clock, reg, calls, spec, finish } = setup({ justNowMs: 10_000 });
+    const a = reg.read(spec(K1));
+    await clock.advance(0); finish(K1, 'first'); await a;
+    expect(reg.state(K1).justNow).toBe(true);
+    expect(await reg.read(spec(K1))).toBe('first');
+    expect(calls.get(K1)).toBe(1);
+    await clock.advance(10_001);
+    expect(reg.state(K1).justNow).toBe(false);
+    const c = reg.read(spec(K1));
+    await clock.advance(0); finish(K1, 'second');
+    expect(await c).toBe('second');
+    expect(calls.get(K1)).toBe(2);
+    // force skips the memo
+    const f = reg.read(spec(K1), { force: true });
+    await clock.advance(0); finish(K1, 'third');
+    expect(await f).toBe('third');
+    expect(calls.get(K1)).toBe(3);
+  });
+
+  test('invalidation drops the memo of the keys a write touched, and only those', async () => {
+    const { clock, reg, calls, spec, finish } = setup();
+    for (const k of [K1, K2]) { const p = reg.read(spec(k)); await clock.advance(0); finish(k); await p; }
+    expect(reg.invalidate(k => k === K2)).toEqual([K2]);
+    reg.read(spec(K1)).catch(() => {}); reg.read(spec(K2)).catch(() => {});
+    await clock.advance(0);
+    expect(calls.get(K1)).toBe(1);
+    expect(calls.get(K2)).toBe(2);
+  });
+
+  test('an error reaches every waiter, is the key\'s error, and is not memoized', async () => {
+    const { clock, reg, calls, spec, fail, finish } = setup();
+    const a = reg.read(spec(K1)), b = reg.read(spec(K1));
+    await clock.advance(0);
+    fail(K1, new Error('403 SERVICE_DISABLED'));
+    await expect(a).rejects.toThrow('SERVICE_DISABLED');
+    await expect(b).rejects.toThrow('SERVICE_DISABLED');
+    expect(reg.state(K1)).toMatchObject({ busy: false, error: '403 SERVICE_DISABLED', justNow: false });
+    const c = reg.read(spec(K1));
+    await clock.advance(0); finish(K1, 'ok');
+    expect(await c).toBe('ok');
+    expect(calls.get(K1)).toBe(2);
+    expect(reg.state(K1).error).toBeNull();
+  });
+
+  test('scope: a narrow read makes the broad tag busy; another app\'s query stays free', async () => {
+    const { clock, reg, spec, finish } = setup();
+    reg.read(spec(K1)).catch(() => {});
+    await clock.advance(0);
+    expect(reg.state({ tags: ['all'] }).busy).toBe(true);
+    expect(reg.state({ tags: ['app:app1'] }).busy).toBe(true);
+    expect(reg.state(K3).busy).toBe(false);
+    expect(reg.state({ keys: [K3, K1] }).busy).toBe(true);
+    finish(K1);
+    await flush();
+    expect(reg.state({ tags: ['all'] }).busy).toBe(false);
+  });
+
+  test('a broad read covers its narrow keys: they are busy at once, a click on one waits and does not read again', async () => {
+    const { clock, reg, calls, spec, finish } = setup();
+    let release!: (k: string) => void;
+    let go!: () => void;
+    const gate = new Promise<void>(r => { go = r; });
+    const all = reg.group({ key: READ_ALL_KEY, tags: ['all'], covers: [PORTFOLIO_KEY, K1, K2], run: async g => {
+      release = g.release;
+      await gate; // the TTL checks
+      const ps = [K1, K2].map(k => { g.release(k); return reg.read(spec(k)); });
+      return Promise.all(ps);
+    } });
+    await flush();
+    // nothing started yet, but every covered key already shows busy
+    expect(calls.size).toBe(0);
+    for (const k of [K1, K2, PORTFOLIO_KEY]) expect(reg.state(k).busy).toBe(true);
+    expect(reg.state({ tags: ['all'] }).busy).toBe(true);
+    // the card's refresh click while covered: joins the group, no read of its own
+    const click = reg.read(spec(K1));
+    // a second Refresh all joins the first
+    const again = reg.group({ key: READ_ALL_KEY, covers: [], run: async () => { throw new Error('must not run'); } });
+    expect(again).toBe(all as Promise<unknown> as typeof again);
+    release(PORTFOLIO_KEY);
+    expect(reg.state(PORTFOLIO_KEY).busy).toBe(false);
+    go();
+    await clock.advance(0);
+    expect(calls.get(K1)).toBe(1);
+    finish(K1, 'one'); finish(K2, 'two');
+    await all;
+    expect(await click).toBe('one');
+    expect(calls.get(K1)).toBe(1);
+    expect(reg.state({ tags: ['all'] }).busy).toBe(false);
+  });
+
+  test('cancel: a queued read is dropped and every waiter hears "cancelled"; a running one cancels its job', async () => {
+    const { clock, sched, reg, spec } = setup();
+    sched.setLimits({ apple: 1 });
+    let cancelled = 0;
+    reg.read(spec(K1, { cancel: () => { cancelled++; } })).catch(() => {});
+    const q1 = reg.read(spec(K3)), q2 = reg.read(spec(K3));
+    await clock.advance(0);
+    reg.cancel(K3);
+    await expect(q1).rejects.toThrow('cancelled');
+    await expect(q2).rejects.toThrow('cancelled');
+    await flush();
+    expect(reg.state(K3).busy).toBe(false);
+    // a cancel is not a failure the card keeps showing
+    expect(reg.state(K3).error).toBeNull();
+    reg.cancel(K1);
+    expect(cancelled).toBe(1);
+  });
+
+  test('a 429 backoff of the account shows as paused on every query that uses it', async () => {
+    const clock = new FakeClock();
+    let n = 0;
+    const sched = new ReadScheduler({ clock, spacingMs: 0, backoffBaseMs: 60_000, classify: () => ({ throttled: n++ === 0 }) });
+    const reg = new ReadRegistry(sched, { clock });
+    const p = reg.read({ key: K1, tags: appTags('app1'), lanes: ['play'], accounts: ['play:acc'], priority: 0, run: async () => 'x' });
+    await clock.advance(0);
+    const st = reg.state(K1);
+    expect(st.busy).toBe(true);
+    expect(st.pausedUntil).toBeGreaterThan(clock.now());
+    expect(reg.state({ tags: ['all'] }).pausedUntil).toBe(st.pausedUntil);
+    await clock.advance(120_000);
+    expect(await p).toBe('x');
+    expect(reg.state(K1).pausedUntil).toBeNull();
+  });
+
+  test('a joining click with a higher priority raises the queued read', async () => {
+    const { clock, sched, reg, calls, spec, finish } = setup();
+    sched.setLimits({ apple: 1 });
+    reg.read(spec('blocker')).catch(() => {});
+    reg.read(spec(K2, { priority: 2 })).catch(() => {});
+    reg.read(spec(K3, { priority: 2 })).catch(() => {});
+    reg.read(spec(K3, { priority: 0 })).catch(() => {});
+    await clock.advance(0);
+    expect([...calls.keys()]).toEqual(['blocker']);
+    expect(calls.get(K3)).toBeUndefined();
+    // still one queued read per key; the joined K3 now goes before K2
+    expect(sched.stats().queued).toBe(2);
+    finish('blocker');
+    await clock.advance(0);
+    expect(calls.get(K3)).toBe(1);
+    expect(calls.get(K2)).toBeUndefined();
+  });
+});
+
+describe('affectedReads', () => {
+  test('writes invalidate their own reads only; unknown writes everything', () => {
+    expect(affectedReads('reviews.reply').methods).toEqual(['reviews.list', 'reviews.drafts']);
+    expect(affectedReads('owner.play_rollout')).toEqual({ methods: ['apple.status', 'play.status'], portfolio: true });
+    expect(affectedReads('apple.testflight_distribute').methods).toEqual(['apple.testflight_status']);
+    expect(affectedReads('prices.import').methods).toContain('prices.current');
+    expect(affectedReads('prices.import').methods).not.toContain('health');
+    expect(affectedReads('art.pull').methods).toContain('art.live');
+    expect(affectedReads('project.edit')).toEqual({ methods: null, portfolio: true });
+  });
+});
+
+describe('two overlapping read buttons render busy together', () => {
+  test('a card refresh in flight: Refresh all, the card, Check again are busy and disabled; another app is not', async () => {
+    const { clock, reg, spec } = setup();
+    // the window's rule (src/ui/ReadButtons.tsx, ReadControl): useReadState(query).busy -> spinner + disabled
+    const Btn = ({ q, id }: { q: ReadQuery; id: string }) => {
+      const s = useReadState(q);
+      return createElement('button', { 'data-id': id, disabled: s.busy, 'aria-busy': s.busy }, s.busy ? 'spin' : 'idle');
+    };
+    const view = () => renderToStaticMarkup(createElement(RegistryCtx.Provider, { value: reg },
+      createElement(Btn, { q: { tags: ['all'] }, id: 'refresh-all' }),
+      createElement(Btn, { q: K1, id: 'health-card' }),
+      createElement(Btn, { q: { keys: [K1, K3] }, id: 'check-again' }),
+      createElement(Btn, { q: readKey('app9', 'scan', {}), id: 'other-app' })));
+    expect(view()).not.toContain('disabled');
+    reg.read(spec(K1)).catch(() => {});
+    await clock.advance(0);
+    const html = view();
+    for (const id of ['refresh-all', 'health-card', 'check-again']) expect(html).toContain(`<button data-id="${id}" disabled="" aria-busy="true">spin</button>`);
+    expect(html).toContain('<button data-id="other-app" aria-busy="false">idle</button>');
+    // and the other way round: a broad read in flight makes the narrow buttons busy before any of them started
+    const g = setup();
+    g.reg.group({ key: READ_ALL_KEY, tags: ['all'], covers: [K3], run: () => new Promise(() => {}) }).catch(() => {});
+    await flush();
+    const html2 = renderToStaticMarkup(createElement(RegistryCtx.Provider, { value: g.reg }, createElement(Btn, { q: K3, id: 'card' }), createElement(Btn, { q: { keys: [K3] }, id: 'notice' })));
+    expect(html2).toContain('<button data-id="card" disabled="" aria-busy="true">spin</button>');
+    expect(html2).toContain('<button data-id="notice" disabled="" aria-busy="true">spin</button>');
+  });
+});

From 60a72e6947725d88c23c9ebb4bb517694ac24c27 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 11:15:35 +0800
Subject: [PATCH 095/255] Desktop: tray mini card on left click (store status
 at a glance next to the tray icon; Refresh runs the main window's Refresh
 all)

---
 apps/desktop/card.html                        |  14 ++
 apps/desktop/src-tauri/build.rs               |   2 +-
 apps/desktop/src-tauri/capabilities/card.json |  13 ++
 apps/desktop/src-tauri/capabilities/main.json |   1 +
 apps/desktop/src-tauri/src/card.rs            | 161 ++++++++++++++++++
 apps/desktop/src-tauri/src/commands.rs        |  68 ++++++++
 apps/desktop/src-tauri/src/commands_list.rs   |   4 +
 apps/desktop/src-tauri/src/lib.rs             |  27 ++-
 apps/desktop/src-tauri/src/policy.rs          |  13 ++
 apps/desktop/src-tauri/tauri.conf.json        |   2 +-
 apps/desktop/src-tauri/tests/card.rs          |  77 +++++++++
 apps/desktop/src-tauri/tests/security.rs      |  37 +++-
 apps/desktop/src/card/Card.tsx                | 156 +++++++++++++++++
 apps/desktop/src/card/bridge.tsx              |  66 +++++++
 apps/desktop/src/card/card-api.ts             |  25 +++
 apps/desktop/src/card/card.css                |  58 +++++++
 apps/desktop/src/card/fixture.ts              |  25 +++
 apps/desktop/src/card/main.tsx                |  53 ++++++
 apps/desktop/src/card/model.ts                |  86 ++++++++++
 apps/desktop/src/card/text.ts                 | 103 +++++++++++
 apps/desktop/src/main.tsx                     |   3 +-
 apps/desktop/tests/card-model.test.ts         |  67 ++++++++
 apps/desktop/vite.config.ts                   |   2 +
 23 files changed, 1052 insertions(+), 11 deletions(-)
 create mode 100644 apps/desktop/card.html
 create mode 100644 apps/desktop/src-tauri/capabilities/card.json
 create mode 100644 apps/desktop/src-tauri/src/card.rs
 create mode 100644 apps/desktop/src-tauri/tests/card.rs
 create mode 100644 apps/desktop/src/card/Card.tsx
 create mode 100644 apps/desktop/src/card/bridge.tsx
 create mode 100644 apps/desktop/src/card/card-api.ts
 create mode 100644 apps/desktop/src/card/card.css
 create mode 100644 apps/desktop/src/card/fixture.ts
 create mode 100644 apps/desktop/src/card/main.tsx
 create mode 100644 apps/desktop/src/card/model.ts
 create mode 100644 apps/desktop/src/card/text.ts
 create mode 100644 apps/desktop/tests/card-model.test.ts

diff --git a/apps/desktop/card.html b/apps/desktop/card.html
new file mode 100644
index 0000000..effa772
--- /dev/null
+++ b/apps/desktop/card.html
@@ -0,0 +1,14 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
+    <link rel="icon" href="data:," />
+    <title>storebound</title>
+  </head>
+  <body class="tc-page">
+    <div id="card"></div>
+    <script type="module" src="/src/card/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/desktop/src-tauri/build.rs b/apps/desktop/src-tauri/build.rs
index a76dc9d..673bde2 100644
--- a/apps/desktop/src-tauri/build.rs
+++ b/apps/desktop/src-tauri/build.rs
@@ -5,7 +5,7 @@ include!("src/commands_list.rs");
 fn main() {
     tauri_build::try_build(
         tauri_build::Attributes::new()
-            .app_manifest(tauri_build::AppManifest::new().commands(COMMANDS)),
+            .app_manifest(tauri_build::AppManifest::new().commands(Box::leak([COMMANDS, CARD_COMMANDS].concat().into_boxed_slice()))),
     )
     .expect("tauri build script failed");
 }
diff --git a/apps/desktop/src-tauri/capabilities/card.json b/apps/desktop/src-tauri/capabilities/card.json
new file mode 100644
index 0000000..aaae544
--- /dev/null
+++ b/apps/desktop/src-tauri/capabilities/card.json
@@ -0,0 +1,13 @@
+{
+  "$schema": "../gen/schemas/desktop-schema.json",
+  "identifier": "card-window",
+  "description": "The tray card (a small window next to the tray icon) with the app's own bundled card page only. It may listen to app events (the main window's snapshot) and call the two card commands: read the last snapshot and send a button (hide, open the main window or a route in it, refresh and mute through the main window, open a store console, quit). It never reads the stores or reaches the sidecar; every command re-checks the window label and page origin in Rust.",
+  "windows": ["card"],
+  "local": true,
+  "permissions": [
+    "core:event:allow-listen",
+    "core:event:allow-unlisten",
+    "allow-card-get",
+    "allow-card-action"
+  ]
+}
diff --git a/apps/desktop/src-tauri/capabilities/main.json b/apps/desktop/src-tauri/capabilities/main.json
index cd3e8f6..159856d 100644
--- a/apps/desktop/src-tauri/capabilities/main.json
+++ b/apps/desktop/src-tauri/capabilities/main.json
@@ -45,6 +45,7 @@
     "allow-data-reveal",
     "allow-notify",
     "allow-tray-update",
+    "allow-card-snapshot",
     "allow-app-reset",
     "allow-update-check",
     "allow-update-install",
diff --git a/apps/desktop/src-tauri/src/card.rs b/apps/desktop/src-tauri/src/card.rs
new file mode 100644
index 0000000..0e60f4c
--- /dev/null
+++ b/apps/desktop/src-tauri/src/card.rs
@@ -0,0 +1,161 @@
+//! The tray card: a small frameless, always-on-top window that a left click on the tray icon shows next to the icon.
+//!
+//! It is created hidden at start (`create`) and only moved and shown on a click (`toggle`), so it opens instantly. The
+//! card never reads the stores: the main window pushes a snapshot of what it already knows (`card_snapshot`, kept here
+//! and forwarded as `card-snapshot`), and the card's buttons come back through `card_action`, which reuses the tray
+//! menu's paths (`tray-action` read / mute-toggle, `tray-route`), so Refresh is the main window's own Refresh all.
+use std::sync::Mutex;
+use std::time::{Duration, Instant};
+
+use serde_json::Value;
+
+pub const LABEL: &str = "card";
+/// Logical size of the card.
+pub const WIDTH: f64 = 360.0;
+pub const HEIGHT: f64 = 480.0;
+/// Gap between the card and the tray icon / screen edge (logical px).
+pub const GAP: f64 = 8.0;
+/// A snapshot larger than this is refused (the card shows a handful of rows).
+pub const MAX_SNAPSHOT: usize = 64 * 1024;
+
+/// A rectangle in physical pixels.
+#[derive(Debug, Clone, Copy, PartialEq)]
+pub struct Rect {
+    pub x: f64,
+    pub y: f64,
+    pub w: f64,
+    pub h: f64,
+}
+
+impl Rect {
+    fn cx(&self) -> f64 { self.x + self.w / 2.0 }
+    fn cy(&self) -> f64 { self.y + self.h / 2.0 }
+}
+
+fn clamp(v: f64, lo: f64, hi: f64) -> f64 {
+    if hi < lo { lo } else { v.clamp(lo, hi) }
+}
+
+/// Top-left corner of the card (physical px) for a tray icon at `tray`, inside `work` (the monitor's work area, without
+/// taskbar / menu bar / Dock). The card sits on the side of the icon that faces the screen: above a bottom taskbar,
+/// below the macOS menu bar, beside a left or right taskbar; centred on the icon along the bar, and always inside the
+/// work area.
+pub fn place(tray: Rect, work: Rect, card_w: f64, card_h: f64, gap: f64) -> (f64, f64) {
+    let (cx, cy) = (tray.cx(), tray.cy());
+    let (right, bottom) = (work.x + work.w, work.y + work.h);
+    let (x, y) = if cy >= bottom {
+        (cx - card_w / 2.0, tray.y - card_h - gap)
+    } else if cy <= work.y {
+        (cx - card_w / 2.0, tray.y + tray.h + gap)
+    } else if cx <= work.x {
+        (tray.x + tray.w + gap, cy - card_h / 2.0)
+    } else if cx >= right {
+        (tray.x - card_w - gap, cy - card_h / 2.0)
+    } else if cy > work.y + work.h / 2.0 {
+        // icon inside the work area (auto-hidden taskbar, overflow flyout): open towards the middle
+        (cx - card_w / 2.0, tray.y - card_h - gap)
+    } else {
+        (cx - card_w / 2.0, tray.y + tray.h + gap)
+    };
+    (clamp(x, work.x + gap, right - card_w - gap).round(), clamp(y, work.y + gap, bottom - card_h - gap).round())
+}
+
+/// Whether a card action word is one the card may send.
+pub fn valid_action(a: &str) -> bool {
+    matches!(a, "hide" | "open" | "route" | "refresh" | "mute" | "quit" | "external" | "ready")
+}
+
+// ---- the last snapshot ----
+
+static SNAPSHOT: Mutex<Option<Value>> = Mutex::new(None);
+
+/// Keeps the main window's snapshot (an object, at most MAX_SNAPSHOT bytes). False when refused.
+pub fn set_snapshot(v: Value) -> bool {
+    if !v.is_object() || v.to_string().len() > MAX_SNAPSHOT {
+        return false;
+    }
+    if let Ok(mut s) = SNAPSHOT.lock() {
+        *s = Some(v);
+    }
+    true
+}
+
+pub fn snapshot() -> Option<Value> {
+    SNAPSHOT.lock().ok().and_then(|s| s.clone())
+}
+
+// ---- show / hide ----
+
+static HIDDEN_AT: Mutex<Option<Instant>> = Mutex::new(None);
+
+/// The card lost focus or was closed: remembered so that the click on the tray icon that caused the blur does not
+/// open it again at once (a second click closes it).
+pub fn note_hidden() {
+    if let Ok(mut h) = HIDDEN_AT.lock() {
+        *h = Some(Instant::now());
+    }
+}
+
+fn just_hidden() -> bool {
+    HIDDEN_AT.lock().ok().and_then(|h| *h).is_some_and(|t| t.elapsed() < Duration::from_millis(300))
+}
+
+#[cfg(desktop)]
+mod window {
+    use super::*;
+    use tauri::{AppHandle, Emitter, Manager, PhysicalPosition, Runtime, WebviewUrl, WebviewWindowBuilder};
+
+    /// The hidden card window, made once at start.
+    pub fn create<R: Runtime>(app: &AppHandle<R>) -> tauri::Result<()> {
+        let b = WebviewWindowBuilder::new(app, LABEL, WebviewUrl::App("card.html".into()))
+            .title("storebound")
+            .inner_size(WIDTH, HEIGHT)
+            .resizable(false)
+            .decorations(false)
+            .always_on_top(true)
+            .skip_taskbar(true)
+            .visible(false)
+            .focused(false)
+            .shadow(true);
+        #[cfg(not(target_os = "macos"))]
+        let b = b.transparent(true);
+        b.build()?;
+        Ok(())
+    }
+
+    /// A left click on the tray icon: shows the card next to the icon, or hides it when it is open.
+    pub fn toggle<R: Runtime>(app: &AppHandle<R>, tray: Rect) {
+        let Some(w) = app.get_webview_window(LABEL) else { return };
+        if w.is_visible().unwrap_or(false) {
+            let _ = w.hide();
+            note_hidden();
+            return;
+        }
+        if just_hidden() {
+            return;
+        }
+        let monitor = app.monitor_from_point(tray.x + tray.w / 2.0, tray.y + tray.h / 2.0).ok().flatten().or_else(|| w.primary_monitor().ok().flatten());
+        if let Some(m) = monitor {
+            let s = m.scale_factor();
+            let wa = m.work_area();
+            let work = Rect { x: wa.position.x as f64, y: wa.position.y as f64, w: wa.size.width as f64, h: wa.size.height as f64 };
+            let (x, y) = place(tray, work, WIDTH * s, HEIGHT * s, GAP * s);
+            let _ = w.set_position(PhysicalPosition::new(x as i32, y as i32));
+        }
+        let _ = w.show();
+        let _ = w.set_focus();
+        let _ = app.emit_to(LABEL, "card-shown", ());
+        // the main window refreshes the parts the card shows that it keeps per app (reviews, health from the cache)
+        let _ = app.emit_to(crate::policy::MAIN, "card-request", ());
+    }
+
+    pub fn hide<R: Runtime>(app: &AppHandle<R>) {
+        if let Some(w) = app.get_webview_window(LABEL) {
+            let _ = w.hide();
+            note_hidden();
+        }
+    }
+}
+
+#[cfg(desktop)]
+pub use window::{create, hide, toggle};
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index aabda11..b45303b 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -44,6 +44,11 @@ fn guard(w: &WebviewWindow) -> Res<()> {
     policy::require_main(w.label(), &url, cfg!(debug_assertions)).map_err(Fail::host)
 }
 
+fn guard_card(w: &WebviewWindow) -> Res<()> {
+    let url = w.url().map_err(|e| Fail::host(e.to_string()))?;
+    policy::require_card(w.label(), &url, cfg!(debug_assertions)).map_err(Fail::host)
+}
+
 fn saved(s: &AppState) -> Res<std::sync::MutexGuard<'_, Saved>> {
     s.saved.lock().map_err(|_| Fail::host("state poisoned"))
 }
@@ -1304,6 +1309,69 @@ pub fn tray_update(window: WebviewWindow, app: AppHandle, summary: crate::tray::
     crate::tray::apply(&app, &summary).map_err(|e| Fail::host(e.to_string()))
 }
 
+/// The main window's snapshot for the tray card (what it already read: releases, reviews, health, last read, busy).
+/// Kept in the host so the card shows it the moment it opens; forwarded to the card as `card-snapshot`.
+#[tauri::command]
+pub fn card_snapshot(window: WebviewWindow, app: AppHandle, snapshot: Value) -> Res<()> {
+    guard(&window)?;
+    if !crate::card::set_snapshot(snapshot.clone()) {
+        return Err(Fail::host("card snapshot refused"));
+    }
+    let _ = app.emit_to(crate::card::LABEL, "card-snapshot", snapshot);
+    Ok(())
+}
+
+/// The card: the last snapshot of the main window (null before the first one).
+#[tauri::command]
+pub fn card_get(window: WebviewWindow) -> Res<Option<Value>> {
+    guard_card(&window)?;
+    Ok(crate::card::snapshot())
+}
+
+/// The card's buttons. `refresh` and `mute` go to the main window as the tray menu's `tray-action` (its own Refresh
+/// all and mute), `route` shows the main window on a route (`tray-route`), `external` opens a store console.
+#[tauri::command]
+pub fn card_action(window: WebviewWindow, app: AppHandle, action: String, arg: Option<String>) -> Res<()> {
+    guard_card(&window)?;
+    if !crate::card::valid_action(&action) {
+        return Err(Fail::host("unknown card action"));
+    }
+    let main = || {
+        if let Some(w) = app.get_webview_window(policy::MAIN) {
+            let _ = w.unminimize();
+            let _ = w.show();
+            let _ = w.set_focus();
+        }
+    };
+    match action.as_str() {
+        "hide" => crate::card::hide(&app),
+        "ready" => { let _ = app.emit_to(policy::MAIN, "card-request", ()); }
+        "open" => { crate::card::hide(&app); main(); }
+        "refresh" => { let _ = app.emit_to(policy::MAIN, "tray-action", "read"); }
+        "mute" => { let _ = app.emit_to(policy::MAIN, "tray-action", "mute-toggle"); }
+        "quit" => app.exit(0),
+        "route" => {
+            let r = arg.unwrap_or_default();
+            if !crate::tray::valid_route(&r) {
+                return Err(Fail::host("bad route"));
+            }
+            crate::card::hide(&app);
+            main();
+            let _ = app.emit_to(policy::MAIN, "tray-route", r);
+        }
+        "external" => {
+            let u = url::Url::parse(arg.as_deref().unwrap_or_default()).map_err(|_| Fail::host("not a URL"))?;
+            if !policy::external_allowed(&u) {
+                return Err(Fail::host("only the store consoles open from here"));
+            }
+            crate::card::hide(&app);
+            app.opener().open_url(u.as_str(), None::<&str>).map_err(|e| Fail::host(e.to_string()))?;
+        }
+        _ => {}
+    }
+    Ok(())
+}
+
 /// Forgets everything after a native confirmation: store keys (keychain), studios, accounts, app folders (the folders
 /// themselves stay), overrides, settings and saved reads. Downloaded tools stay. True when it was reset.
 #[tauri::command]
diff --git a/apps/desktop/src-tauri/src/commands_list.rs b/apps/desktop/src-tauri/src/commands_list.rs
index 4c2b4cf..1daea05 100644
--- a/apps/desktop/src-tauri/src/commands_list.rs
+++ b/apps/desktop/src-tauri/src/commands_list.rs
@@ -37,6 +37,7 @@ pub const COMMANDS: &[&str] = &[
     "data_reveal",
     "notify",
     "tray_update",
+    "card_snapshot",
     "app_reset",
     "update_check",
     "update_install",
@@ -52,3 +53,6 @@ pub const COMMANDS: &[&str] = &[
     "ai_fix_run",
     "ai_fix_undo",
 ];
+
+/// The tray card window's commands (capabilities/card.json grants them to the `card` window only).
+pub const CARD_COMMANDS: &[&str] = &["card_get", "card_action"];
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index 4b405a1..a5dd222 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -3,6 +3,7 @@
 pub mod accounts;
 pub mod ai_fix;
 pub mod cache;
+pub mod card;
 pub mod commands;
 pub mod confirm;
 pub mod downloads;
@@ -66,8 +67,17 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
         None => {}
     })
     .on_tray_icon_event(|t, e| {
-        if let TrayIconEvent::Click { button: MouseButton::Left, button_state: MouseButtonState::Up, .. } = e {
-            show_main(t.app_handle());
+        // left click: the tray card next to the icon (right click keeps the native menu)
+        if let TrayIconEvent::Click { button: MouseButton::Left, button_state: MouseButtonState::Up, rect, .. } = e {
+            let app = t.app_handle();
+            if app.get_webview_window(card::LABEL).is_none() {
+                show_main(app);
+                return;
+            }
+            let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
+            let p = rect.position.to_physical::<f64>(scale);
+            let s = rect.size.to_physical::<f64>(scale);
+            card::toggle(app, card::Rect { x: p.x, y: p.y, w: s.width, h: s.height });
         }
     })
     .build(app)?;
@@ -281,6 +291,9 @@ pub fn run() {
             }
             app.manage(state);
             tray(app)?;
+            if let Err(e) = card::create(app.handle()) {
+                logs::host("warn", &format!("tray card not created: {e}"));
+            }
             if !started_hidden() {
                 show_main(app.handle());
             }
@@ -310,6 +323,13 @@ pub fn run() {
         .on_window_event(|w, e| {
             // the close button hides the window: the app keeps running in the tray (macOS: also the Dock); the tray's
             // Quit (macOS: Cmd+Q) really quits
+            if w.label() == card::LABEL {
+                match e {
+                    WindowEvent::Focused(false) => { let _ = w.hide(); card::note_hidden(); }
+                    WindowEvent::CloseRequested { api, .. } => { api.prevent_close(); let _ = w.hide(); card::note_hidden(); }
+                    _ => {}
+                }
+            }
             if w.label() == policy::MAIN {
                 if let WindowEvent::CloseRequested { api, .. } = e {
                     api.prevent_close();
@@ -354,6 +374,7 @@ pub fn run() {
             commands::data_reveal,
             commands::notify,
             commands::tray_update,
+            commands::card_snapshot,
             commands::app_reset,
             commands::update_check,
             commands::update_install,
@@ -368,6 +389,8 @@ pub fn run() {
             commands::ai_fix_info,
             commands::ai_fix_run,
             commands::ai_fix_undo,
+            commands::card_get,
+            commands::card_action,
         ])
         .build(tauri::generate_context!())
         .expect("storebound desktop failed to start");
diff --git a/apps/desktop/src-tauri/src/policy.rs b/apps/desktop/src-tauri/src/policy.rs
index 0aab7ed..8d6cfff 100644
--- a/apps/desktop/src-tauri/src/policy.rs
+++ b/apps/desktop/src-tauri/src/policy.rs
@@ -43,6 +43,19 @@ pub fn require_main(label: &str, url: &Url, dev: bool) -> Result<(), String> {
     Ok(())
 }
 
+/// The tray card window (card.rs): it may call only the card commands (`card_get`, `card_action`).
+pub const CARD: &str = "card";
+
+pub fn require_card(label: &str, url: &Url, dev: bool) -> Result<(), String> {
+    if label != CARD {
+        return Err(format!("not allowed from window '{label}'"));
+    }
+    if !is_local_origin(url, dev) {
+        return Err("not allowed from this page".into());
+    }
+    Ok(())
+}
+
 /// Method kinds the sidecar announces in its `session.hello` descriptors.
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
 pub enum Kind {
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 30fb506..405e40e 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -50,7 +50,7 @@
         "form-action": "'none'"
       },
       "freezePrototype": true,
-      "capabilities": ["main-window"]
+      "capabilities": ["main-window", "card-window"]
     }
   },
   "bundle": {
diff --git a/apps/desktop/src-tauri/tests/card.rs b/apps/desktop/src-tauri/tests/card.rs
new file mode 100644
index 0000000..c1ac947
--- /dev/null
+++ b/apps/desktop/src-tauri/tests/card.rs
@@ -0,0 +1,77 @@
+//! The tray card's placement next to the tray icon, always inside the monitor's work area.
+use storebound_desktop::card::*;
+
+const W: f64 = 360.0;
+const H: f64 = 480.0;
+
+fn r(x: f64, y: f64, w: f64, h: f64) -> Rect { Rect { x, y, w, h } }
+
+fn inside(p: (f64, f64), work: Rect) {
+    assert!(p.0 >= work.x && p.0 + W <= work.x + work.w, "x {p:?} outside {work:?}");
+    assert!(p.1 >= work.y && p.1 + H <= work.y + work.h, "y {p:?} outside {work:?}");
+}
+
+#[test]
+fn windows_bottom_taskbar_opens_above_the_icon() {
+    let work = r(0.0, 0.0, 1920.0, 1032.0);
+    let p = place(r(1700.0, 1040.0, 24.0, 32.0), work, W, H, 8.0);
+    assert_eq!(p, (1532.0, 1032.0 - H - 8.0));
+    inside(p, work);
+}
+
+#[test]
+fn icon_in_the_corner_is_clamped_into_the_work_area() {
+    let work = r(0.0, 0.0, 1920.0, 1032.0);
+    let p = place(r(1900.0, 1040.0, 24.0, 32.0), work, W, H, 8.0);
+    assert_eq!(p.0, 1920.0 - W - 8.0);
+    inside(p, work);
+}
+
+#[test]
+fn macos_menu_bar_opens_below_the_icon() {
+    let work = r(0.0, 25.0, 1440.0, 875.0);
+    let p = place(r(1200.0, 0.0, 22.0, 24.0), work, W, H, 8.0);
+    assert_eq!(p.1, 33.0);
+    inside(p, work);
+}
+
+#[test]
+fn side_taskbars_open_beside_the_icon() {
+    let work = r(60.0, 0.0, 1860.0, 1080.0);
+    let left = place(r(10.0, 900.0, 40.0, 40.0), work, W, H, 8.0);
+    assert_eq!(left.0, 68.0);
+    inside(left, work);
+    let work = r(0.0, 0.0, 1860.0, 1080.0);
+    let right = place(r(1870.0, 100.0, 40.0, 40.0), work, W, H, 8.0);
+    assert_eq!(right.0, 1860.0 - W - 8.0);
+    inside(right, work);
+}
+
+#[test]
+fn second_monitor_with_negative_origin() {
+    let work = r(-2560.0, 0.0, 2560.0, 1400.0);
+    let p = place(r(-200.0, 1410.0, 24.0, 30.0), work, W, H, 8.0);
+    inside(p, work);
+}
+
+#[test]
+fn icon_inside_the_work_area_and_a_tiny_screen() {
+    let work = r(0.0, 0.0, 1920.0, 1080.0);
+    inside(place(r(900.0, 1000.0, 24.0, 24.0), work, W, H, 8.0), work);
+    inside(place(r(900.0, 20.0, 24.0, 24.0), work, W, H, 8.0), work);
+    // smaller than the card: top-left of the work area, no panic
+    let tiny = r(0.0, 0.0, 300.0, 300.0);
+    assert_eq!(place(r(100.0, 310.0, 20.0, 20.0), tiny, W, H, 8.0), (8.0, 8.0));
+}
+
+#[test]
+fn actions_and_snapshots_are_checked() {
+    for a in ["hide", "open", "route", "refresh", "mute", "quit", "external", "ready"] {
+        assert!(valid_action(a));
+    }
+    assert!(!valid_action("sidecar_call"));
+    assert!(!set_snapshot(serde_json::json!([1, 2])));
+    assert!(!set_snapshot(serde_json::json!({ "x": "y".repeat(MAX_SNAPSHOT) })));
+    assert!(set_snapshot(serde_json::json!({ "busy": false })));
+    assert_eq!(snapshot().unwrap()["busy"], false);
+}
diff --git a/apps/desktop/src-tauri/tests/security.rs b/apps/desktop/src-tauri/tests/security.rs
index 9b780bd..1d31b45 100644
--- a/apps/desktop/src-tauri/tests/security.rs
+++ b/apps/desktop/src-tauri/tests/security.rs
@@ -6,7 +6,7 @@ use std::path::{Path, PathBuf};
 
 use serde_json::{json, Value};
 use storebound_desktop::policy::*;
-use storebound_desktop::COMMANDS;
+use storebound_desktop::{CARD_COMMANDS, COMMANDS};
 use url::Url;
 
 fn root() -> PathBuf {
@@ -24,9 +24,10 @@ fn u(s: &str) -> Url {
 #[test]
 fn one_capability_for_the_main_window_with_exactly_the_app_commands() {
     let dir = root().join("capabilities");
-    let files: Vec<PathBuf> = fs::read_dir(&dir).unwrap().map(|e| e.unwrap().path()).collect();
-    assert_eq!(files.len(), 1, "one capability file expected, found {files:?}");
-    let cap = read_json(&files[0]);
+    let mut files: Vec<PathBuf> = fs::read_dir(&dir).unwrap().map(|e| e.unwrap().path()).collect();
+    files.sort();
+    assert_eq!(files.len(), 2, "main and card capability files expected, found {files:?}");
+    let cap = read_json(&dir.join("main.json"));
     assert_eq!(cap["identifier"], "main-window");
     assert_eq!(cap["windows"], json!(["main"]));
     assert!(cap.get("webviews").is_none(), "no webview-scoped grants");
@@ -46,6 +47,30 @@ fn one_capability_for_the_main_window_with_exactly_the_app_commands() {
     }
 }
 
+#[test]
+fn the_card_window_gets_only_the_card_commands() {
+    let cap = read_json(&root().join("capabilities/card.json"));
+    assert_eq!(cap["identifier"], "card-window");
+    assert_eq!(cap["windows"], json!(["card"]));
+    assert!(cap.get("webviews").is_none() && cap.get("remote").is_none());
+    assert_ne!(cap["local"], json!(false));
+    let got: BTreeSet<String> = cap["permissions"].as_array().unwrap().iter().map(|p| p.as_str().unwrap().to_string()).collect();
+    let mut want: BTreeSet<String> = CARD_COMMANDS.iter().map(|c| format!("allow-{}", c.replace('_', "-"))).collect();
+    want.insert("core:event:allow-listen".into());
+    want.insert("core:event:allow-unlisten".into());
+    assert_eq!(got, want);
+    let cmds = fs::read_to_string(root().join("src/commands.rs")).unwrap();
+    for c in CARD_COMMANDS {
+        let at = cmds.find(&format!("pub fn {c}(")).unwrap_or_else(|| panic!("{c} not in commands.rs"));
+        let body = &cmds[at..];
+        let open = body.find('{').unwrap();
+        assert!(body[open + 1..].trim_start().starts_with("guard_card(&window)?;"), "{c} must start with guard_card(&window)?");
+    }
+    assert!(require_card("card", &u("tauri://localhost/card.html"), false).is_ok());
+    assert!(require_card("main", &u("tauri://localhost/"), false).is_err());
+    assert!(require_main("card", &u("tauri://localhost/card.html"), false).is_err());
+}
+
 #[test]
 fn every_registered_command_is_in_the_list_and_nothing_else() {
     let lib = fs::read_to_string(root().join("src/lib.rs")).unwrap();
@@ -56,7 +81,7 @@ fn every_registered_command_is_in_the_list_and_nothing_else() {
         .map(|s| s.trim().trim_start_matches("commands::").to_string())
         .filter(|s| !s.is_empty())
         .collect();
-    assert_eq!(registered, COMMANDS.iter().map(|s| s.to_string()).collect::<Vec<_>>());
+    assert_eq!(registered, COMMANDS.iter().chain(CARD_COMMANDS).map(|s| s.to_string()).collect::<Vec<_>>());
     // every command checks the caller first
     let cmds = fs::read_to_string(root().join("src/commands.rs")).unwrap();
     for c in COMMANDS {
@@ -84,7 +109,7 @@ fn csp_is_strict_and_the_config_has_no_backdoors() {
         assert!(!v.contains("unsafe-eval") && !v.contains("unsafe-inline") && !v.contains('*'), "{k}: {v}");
         assert!(!v.contains("https:") && !v.contains("http://") || v == "ipc: http://ipc.localhost", "{k}: no remote sources: {v}");
     }
-    assert_eq!(conf["app"]["security"]["capabilities"], json!(["main-window"]));
+    assert_eq!(conf["app"]["security"]["capabilities"], json!(["main-window", "card-window"]));
     assert_eq!(conf["app"]["security"]["freezePrototype"], json!(true));
     assert!(conf["app"].get("withGlobalTauri").is_none() || conf["app"]["withGlobalTauri"] == json!(false));
     let windows = conf["app"]["windows"].as_array().unwrap();
diff --git a/apps/desktop/src/card/Card.tsx b/apps/desktop/src/card/Card.tsx
new file mode 100644
index 0000000..f7b3c80
--- /dev/null
+++ b/apps/desktop/src/card/Card.tsx
@@ -0,0 +1,156 @@
+// The tray card: store status at a glance next to the tray icon. It only draws the main window's snapshot (card_get /
+// `card-snapshot`) and sends its buttons back (card_action); Refresh is the main window's own Refresh all.
+import { ArrowsClockwise, ArrowSquareOut, BellSlash, Bell, DotsThree, Power, Star, WarningOctagon, Pulse, AppWindow } from '@phosphor-icons/react';
+import { useCallback, useEffect, useRef, useState, type KeyboardEvent, type ReactNode } from 'react';
+import type { CardApp, CardRelease, CardSnapshot, CardStore } from './model';
+import { ago, cardT, type CardKey, type CardLang } from './text';
+
+export interface CardHost {
+  get: () => Promise<CardSnapshot | null>;
+  onSnapshot: (fn: (s: CardSnapshot) => void) => () => void;
+  onShown: (fn: () => void) => () => void;
+  action: (action: 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready', arg?: string) => void;
+}
+
+const route = (app: string, tab: 'releases' | 'reviews' | 'health') => JSON.stringify({ screen: 'app', appId: app, tab });
+
+export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
+  const T = useCallback((k: CardKey, v?: Record<string, string | number>) => cardT(lang, k, v), [lang]);
+  const [s, setS] = useState<CardSnapshot | null>(null);
+  const [menu, setMenu] = useState(false);
+  const [now, setNow] = useState(() => Date.now());
+  const [shown, setShown] = useState(0);
+  const root = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    host.get().then(x => { if (x) setS(x); }).catch(() => {});
+    const a = host.onSnapshot(setS);
+    const b = host.onShown(() => { setNow(Date.now()); setMenu(false); setShown(n => n + 1); });
+    host.action('ready');
+    const tm = setInterval(() => setNow(Date.now()), 30_000);
+    return () => { a(); b(); clearInterval(tm); };
+  }, [host]);
+  // every show: fade in, focus the first control (keyboard users start at Refresh)
+  useEffect(() => { (root.current?.querySelector<HTMLElement>('button:not([disabled])') ?? root.current)?.focus(); }, [shown, !!s]);
+
+  const onKey = (e: KeyboardEvent) => {
+    if (e.key === 'Escape') { e.preventDefault(); if (menu) setMenu(false); else host.action('hide'); return; }
+    if (e.key === 'ArrowDown' || e.key === 'ArrowUp') {
+      const all = [...(root.current?.querySelectorAll<HTMLElement>('button:not([disabled])') ?? [])];
+      const i = all.indexOf(document.activeElement as HTMLElement);
+      const n = all[(i + (e.key === 'ArrowDown' ? 1 : -1) + all.length) % all.length];
+      if (n) { e.preventDefault(); n.focus(); }
+    }
+  };
+
+  const store = (st: CardStore) => T(st === 'ios' ? 'appStore' : 'playStore');
+  const phase = (r: CardRelease) => (r.phase === 'rollout' ? (r.fraction != null && r.fraction < 1 ? T('rolloutPct', { pct: Math.round(r.fraction * 100) }) : T('rollout')) : T(r.phase));
+  const link = (key: string): CardApp | undefined => s?.links.find(l => l.key === key);
+  const busy = !!s?.busy;
+  const calm = s && !s.rejections.length && !s.releases.length && !s.health.length && !s.reviews.low.length;
+
+  return (
+    <div className="tc" ref={root} onKeyDown={onKey} data-shown={shown} tabIndex={-1} role="dialog" aria-label={T('title')}>
+      <header className="tc-head">
+        <div className="tc-title">
+          <strong>{T('title')}</strong>
+          <span className="tc-meta">{s?.muted && <span className="tc-muted"><BellSlash size={12} weight="bold" />{T('muted')}</span>}{T('lastRead', { ago: ago(lang, s?.at ?? null, now) })}</span>
+        </div>
+        <button className="tc-btn tc-primary" data-first onClick={() => host.action('refresh')} disabled={busy} aria-busy={busy} data-testid="card-refresh">
+          <ArrowsClockwise size={14} weight="bold" className={busy ? 'spin' : undefined} />{busy ? T('refreshing') : T('refresh')}
+        </button>
+        <button className="tc-icon" onClick={() => setMenu(m => !m)} aria-haspopup="menu" aria-expanded={menu} aria-label={T('more')} title={T('more')}><DotsThree size={18} weight="bold" /></button>
+        {menu && (
+          <div className="tc-menu" role="menu">
+            <button role="menuitem" onClick={() => host.action('open')}><AppWindow size={15} />{T('openMain')}</button>
+            <button role="menuitem" onClick={() => { host.action('mute'); setMenu(false); }}>{s?.muted ? <Bell size={15} /> : <BellSlash size={15} />}{s?.muted ? T('unmute') : T('mute')}</button>
+            <hr />
+            <button role="menuitem" onClick={() => host.action('quit')}><Power size={15} />{T('quit')}</button>
+          </div>
+        )}
+      </header>
+
+      <div className="tc-body">
+        {!s && <p className="tc-empty">{T('noData')}</p>}
+        {s && calm && <p className="tc-empty">{s.at ? T('calm') : T('noData')}</p>}
+
+        {!!s?.rejections.length && (
+          <Section title={T('rejections')} tone="bad">
+            {s.rejections.map(r => (
+              <Row key={`${r.app}:${r.store}:${r.version}`} hue={r.hue} name={r.name} tone="bad" onOpen={() => host.action('route', route(r.app, 'releases'))} openLabel={T('openApp', { name: r.name })}
+                line={<><WarningOctagon size={13} weight="fill" />{T('rejected')} · {store(r.store)}{r.version ? ` ${r.version}` : ''}</>} sub={r.reason}
+                consoles={consoles(link(r.app), r.store, host, T)} />
+            ))}
+          </Section>
+        )}
+
+        {!!s?.releases.length && (
+          <Section title={T('moving')}>
+            {s.releases.map(r => (
+              <Row key={`${r.app}:${r.store}:${r.version}`} hue={r.hue} name={r.name} tone={r.phase === 'halted' ? 'bad' : r.phase === 'approved' ? 'ok' : r.phase === 'review' ? 'info' : 'accent'}
+                onOpen={() => host.action('route', route(r.app, 'releases'))} openLabel={T('openApp', { name: r.name })}
+                line={<>{phase(r)} · {store(r.store)}{r.version ? ` ${r.version}` : ''}</>}
+                bar={r.phase === 'rollout' && r.fraction != null && r.fraction < 1 ? r.fraction : null}
+                consoles={consoles(link(r.app), r.store, host, T)} />
+            ))}
+          </Section>
+        )}
+
+        {!!s?.health.length && (
+          <Section title={T('health')} tone="warn">
+            {s.health.map(h => (
+              <Row key={h.app} hue={h.hue} name={h.name} tone="warn" onOpen={() => host.action('route', route(h.app, 'health'))} openLabel={T('openApp', { name: h.name })}
+                line={<><Pulse size={13} weight="bold" />{h.kinds.length > 1 ? T('crashAnr') : T(h.kinds[0]!)}</>} consoles={consoles(link(h.app), 'android', host, T)} />
+            ))}
+          </Section>
+        )}
+
+        {s && s.at && (
+          <Section title={T('reviews')} aside={s.reviews.recent ? T('recent', { n: s.reviews.recent }) : T('recentNone')}>
+            {s.reviews.low.map(r => (
+              <button key={`${r.app}:${r.date}:${r.text}`} className="tc-review" onClick={() => host.action('route', route(r.app, 'reviews'))}>
+                <span className="tc-stars" aria-label={T('stars', { n: r.rating })}>{[1, 2, 3, 4, 5].map(i => <Star key={i} size={11} weight={i <= r.rating ? 'fill' : 'regular'} />)}</span>
+                <span className="tc-rname">{r.name}</span>
+                <span className="tc-rtext">{r.text}</span>
+              </button>
+            ))}
+          </Section>
+        )}
+      </div>
+    </div>
+  );
+}
+
+function consoles(l: CardApp | undefined, st: CardStore, host: CardHost, T: (k: CardKey) => string): ReactNode {
+  const url = st === 'ios' ? l?.asc : l?.play;
+  if (!url) return null;
+  return <button className="tc-ext" onClick={e => { e.stopPropagation(); host.action('external', url); }} title={T(st === 'ios' ? 'asc' : 'play')} aria-label={T(st === 'ios' ? 'asc' : 'play')}><ArrowSquareOut size={14} /></button>;
+}
+
+function Section({ title, tone, aside, children }: { title: string; tone?: 'bad' | 'warn'; aside?: string; children: ReactNode }) {
+  return (
+    <section className={`tc-sec${tone ? ` tc-${tone}` : ''}`}>
+      <h2><span>{title}</span>{aside && <em>{aside}</em>}</h2>
+      {children}
+    </section>
+  );
+}
+
+function Row({ hue, name, line, sub, tone, bar, onOpen, openLabel, consoles }: { hue: number; name: string; line: ReactNode; sub?: string | null; tone: string; bar?: number | null; onOpen: () => void; openLabel: string; consoles: ReactNode }) {
+  return (
+    <div className={`tc-row tone-${tone}`}>
+      <button className="tc-open" onClick={onOpen} aria-label={openLabel}>
+        <span className="tc-ic" style={{ '--tint-h': hue } as React.CSSProperties} aria-hidden>{initials(name)}</span>
+        <span className="tc-txt">
+          <span className="tc-name">{name}</span>
+          <span className="tc-line">{line}</span>
+          {sub && <span className="tc-sub">{sub}</span>}
+          {bar != null && <span className="tc-bar" aria-hidden><i style={{ width: `${Math.max(2, Math.round(bar * 100))}%` }} /></span>}
+        </span>
+      </button>
+      {consoles}
+    </div>
+  );
+}
+
+const initials = (n: string) => n.split(/\s+/).filter(Boolean).slice(0, 2).map(w => w[0]!.toUpperCase()).join('') || '?';
diff --git a/apps/desktop/src/card/bridge.tsx b/apps/desktop/src/card/bridge.tsx
new file mode 100644
index 0000000..4c375c5
--- /dev/null
+++ b/apps/desktop/src/card/bridge.tsx
@@ -0,0 +1,66 @@
+// Main window side of the tray card: turns what this window already knows (live releases, the last cached reviews and
+// health per app, the shared read state of Refresh all, mute) into a CardSnapshot and hands it to the host
+// (card_snapshot), which keeps it for the card. No reads of its own: reviews and health come from the cache that the
+// window's reads fill, and the card's Refresh arrives as the tray's `tray-action` read (store.tsx), i.e. Refresh all.
+import { useEffect, useMemo, useRef, useState } from 'react';
+import { api } from '../api';
+import type { HealthSnapshot, Review } from '../lib/model';
+import { hueOf } from '../lib/model';
+import { useData, useReadState } from '../store';
+import { playUrlFor } from '../ui/app-menu';
+import { cardApi, inTauri as hasHost } from './card-api';
+import { cardSnapshot, type CardInput } from './model';
+
+const inTauri = hasHost();
+const ascUrl = (id: string | null | undefined) => (id ? `https://appstoreconnect.apple.com/apps/${encodeURIComponent(id)}/distribution` : 'https://appstoreconnect.apple.com/apps');
+
+export function TrayCardBridge() {
+  const d = useData();
+  const all = useReadState({ tags: ['all'] });
+  const [extra, setExtra] = useState<Record<string, { reviews: Review[] | null; health: HealthSnapshot | null }>>({});
+  const [ask, setAsk] = useState(0);
+  const visible = useMemo(() => d.apps.filter(a => !a.ignored), [d.apps]);
+
+  // the card opened (or a read pass ended): the last cached reviews and health of every app
+  useEffect(() => {
+    if (!inTauri) return;
+    return cardApi.onRequest(() => setAsk(n => n + 1));
+  }, []);
+  const wasBusy = useRef(all.busy);
+  useEffect(() => { if (wasBusy.current && !all.busy) setAsk(n => n + 1); wasBusy.current = all.busy; }, [all.busy]);
+  useEffect(() => {
+    if (!inTauri || !d.ready) return;
+    let live = true;
+    Promise.all(visible.map(async a => {
+      const [r, h] = await Promise.all([
+        api.cached<{ data?: Review[] }>('reviews.list', a.target, { days: 30 }).catch(() => null),
+        api.cached<{ data?: HealthSnapshot }>('health', a.target, {}).catch(() => null),
+      ]);
+      return [a.key, { reviews: Array.isArray(r?.value.data) ? r.value.data : null, health: (h?.value.data as HealthSnapshot | undefined) ?? null }] as const;
+    })).then(rows => { if (live) setExtra(Object.fromEntries(rows)); }).catch(() => {});
+    return () => { live = false; };
+  }, [ask, d.ready, visible]);
+
+  const snap = useMemo(() => {
+    const inputs: CardInput[] = visible.map(a => {
+      const st = d.liveFor(a) ?? d.statusFor(a);
+      const ios = st?.app?.platforms.ios ?? (a.ios ? { ascAppId: a.ios.app.id } : null);
+      return {
+        key: a.key, name: a.name, hue: hueOf(a.name), status: st,
+        reviews: extra[a.key]?.reviews ?? null, health: extra[a.key]?.health ?? null,
+        asc: ios ? ascUrl(ios.ascAppId) : null, play: st?.app?.platforms.android || a.android ? playUrlFor(d, a) : null,
+      };
+    });
+    return cardSnapshot(inputs, { at: d.live?.value.at ?? d.portfolio?.at ?? null, busy: all.busy, muted: d.muteUntil > Date.now() });
+  }, [visible, d, extra, all.busy]);
+
+  const last = useRef('');
+  useEffect(() => {
+    if (!inTauri || !d.ready) return;
+    const json = JSON.stringify(snap);
+    if (json === last.current) return;
+    last.current = json;
+    cardApi.push(snap).catch(() => {});
+  }, [snap, d.ready]);
+  return null;
+}
diff --git a/apps/desktop/src/card/card-api.ts b/apps/desktop/src/card/card-api.ts
new file mode 100644
index 0000000..6a66afc
--- /dev/null
+++ b/apps/desktop/src/card/card-api.ts
@@ -0,0 +1,25 @@
+// The tray card's host calls (the card page's counterpart of src/api.ts, kept apart so the card bundle stays small).
+// Main window: card_snapshot + the `card-request` event. Card window: card_get, card_action and its two events.
+import { invoke } from '@tauri-apps/api/core';
+import { listen } from '@tauri-apps/api/event';
+import type { CardSnapshot } from './model';
+
+export type CardAction = 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready';
+
+export const inTauri = (): boolean => typeof window !== 'undefined' && '__TAURI_INTERNALS__' in window;
+
+function sub<T>(ev: string, fn: (p: T) => void): () => void {
+  const un = listen<T>(ev, e => fn(e.payload));
+  return () => { un.then(f => f()).catch(() => {}); };
+}
+
+export const cardApi = {
+  /** Main window: hands the host the card's snapshot (the host forwards it as `card-snapshot`). */
+  push: (snapshot: CardSnapshot) => invoke<void>('card_snapshot', { snapshot }),
+  /** Main window: the card opened; refresh what is kept per app. */
+  onRequest: (fn: () => void) => sub<null>('card-request', () => fn()),
+  get: () => invoke<CardSnapshot | null>('card_get'),
+  onSnapshot: (fn: (s: CardSnapshot) => void) => sub<CardSnapshot>('card-snapshot', fn),
+  onShown: (fn: () => void) => sub<null>('card-shown', () => fn()),
+  action: (action: CardAction, arg?: string) => { invoke('card_action', { action, arg: arg ?? null }).catch(() => {}); },
+};
diff --git a/apps/desktop/src/card/card.css b/apps/desktop/src/card/card.css
new file mode 100644
index 0000000..827fe12
--- /dev/null
+++ b/apps/desktop/src/card/card.css
@@ -0,0 +1,58 @@
+/* The tray card (card.html): v2 language at 360 x 480, rounded, its own surface; fades in over 120 ms on every show. */
+html:has(body.tc-page), body.tc-page { margin: 0; height: 100%; background: transparent; overflow: hidden; }
+body.tc-page { font: var(--ds-t-body)/1.4 system-ui, -apple-system, "Segoe UI", sans-serif; color: var(--ink); }
+body.tc-page #card { height: 100%; }
+body.tc-page.tc-in .tc { animation: tc-in 120ms ease-out; }
+:root[data-motion="reduce"] body.tc-page.tc-in .tc { animation: none; }
+@keyframes tc-in { from { opacity: 0; transform: translateY(4px); } to { opacity: 1; transform: none; } }
+
+.tc { box-sizing: border-box; height: 100%; max-height: 480px; display: flex; flex-direction: column; border-radius: var(--ds-r-lg);
+  border: 1px solid var(--ds-stroke); background: radial-gradient(120% 60% at 100% 0%, color-mix(in srgb, var(--accent-solid) 10%, transparent), transparent 60%), var(--ds-raised); overflow: hidden; outline: none; }
+.tc-head { position: relative; display: flex; align-items: center; gap: 8px; padding: 14px 12px 12px 16px; border-bottom: 1px solid var(--ds-stroke); }
+.tc-title { flex: 1; min-width: 0; display: flex; flex-direction: column; }
+.tc-title strong { font-size: var(--ds-t-h3); font-weight: var(--ds-w-title); letter-spacing: -.01em; }
+.tc-meta { display: flex; align-items: center; gap: 8px; color: var(--muted); font-size: var(--ds-t-micro); }
+.tc-muted { display: inline-flex; align-items: center; gap: 3px; color: var(--warn-ink); background: var(--warn-bg); border-radius: var(--ds-r-pill); padding: 0 6px; }
+.tc button { font: inherit; color: inherit; cursor: pointer; }
+.tc button:focus-visible { outline: 2px solid var(--focus); outline-offset: 1px; }
+.tc-btn { display: inline-flex; align-items: center; gap: 6px; height: 30px; padding: 0 12px; border-radius: var(--ds-r-pill); border: 0; font-weight: var(--ds-w-strong); font-size: var(--ds-t-meta); }
+.tc .tc-primary { background: var(--ds-grad); color: #fff; box-shadow: var(--ds-e1); }
+.tc-primary[disabled] { opacity: .7; cursor: default; }
+.tc-icon { display: grid; place-items: center; width: 30px; height: 30px; border-radius: var(--ds-r-pill); border: 1px solid var(--ds-stroke); background: var(--ds-surface); }
+.tc-icon:hover, .tc-icon[aria-expanded="true"] { background: var(--hover); }
+.tc-menu { position: absolute; z-index: 3; right: 12px; top: 50px; min-width: 230px; padding: 5px; border-radius: var(--ds-r); background: var(--ds-raised); border: 1px solid var(--ds-stroke); box-shadow: var(--ds-e3); }
+.tc-menu button { display: flex; align-items: center; gap: 9px; width: 100%; padding: 7px 9px; border: 0; background: none; border-radius: var(--ds-r-xs); text-align: left; font-size: var(--ds-t-meta); }
+.tc-menu button:hover, .tc-menu button:focus-visible { background: var(--hover); outline: none; }
+.tc-menu hr { border: 0; border-top: 1px solid var(--ds-stroke); margin: 4px 2px; }
+
+.tc-body { flex: 1; overflow-y: auto; padding: 6px 10px 12px; scrollbar-width: thin; }
+.tc-empty { margin: 28px 16px; text-align: center; color: var(--muted); }
+.tc-sec { margin-top: 8px; }
+.tc-sec h2 { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; margin: 6px 6px 4px; font-size: var(--ds-t-micro); font-weight: var(--ds-w-strong); text-transform: uppercase; letter-spacing: .07em; color: var(--muted); }
+.tc-sec h2 em { font-style: normal; text-transform: none; letter-spacing: 0; font-weight: 500; color: var(--faint); }
+.tc-sec.tc-bad { background: var(--bad-bg); border: 1px solid color-mix(in srgb, var(--bad-solid) 30%, transparent); border-radius: var(--ds-r); padding: 2px 4px 4px; }
+.tc-sec.tc-bad h2 { color: var(--bad-ink); }
+
+.tc-row { display: flex; align-items: center; gap: 2px; border-radius: var(--ds-r-sm); }
+.tc-row:hover { background: color-mix(in srgb, var(--hover) 80%, transparent); }
+.tc-open { flex: 1; min-width: 0; display: flex; gap: 10px; align-items: flex-start; padding: 7px 6px; border: 0; background: none; text-align: left; border-radius: var(--ds-r-sm); }
+.tc-ic { --tint: hsl(var(--tint-h) var(--ds-tint-s) var(--ds-tint-l)); flex: none; display: grid; place-items: center; width: 28px; height: 28px; border-radius: 8px; font-size: 10px; font-weight: 700; color: #fff; background: linear-gradient(135deg, var(--tint), hsl(calc(var(--tint-h) + 30) var(--ds-tint-s) 45%)); }
+.tc-txt { min-width: 0; display: flex; flex-direction: column; gap: 1px; flex: 1; }
+.tc-name { font-weight: var(--ds-w-strong); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.tc-line { display: inline-flex; align-items: center; gap: 4px; font-size: var(--ds-t-meta); color: var(--ink-2); }
+.tone-bad .tc-line { color: var(--bad-ink); font-weight: var(--ds-w-strong); }
+.tone-ok .tc-line { color: var(--ok-ink); }
+.tone-info .tc-line { color: var(--info-ink); }
+.tone-warn .tc-line { color: var(--warn-ink); }
+.tone-accent .tc-line { color: var(--accent); }
+.tc-sub { font-size: var(--ds-t-micro); color: var(--muted); display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; }
+.tc-bar { margin-top: 4px; height: 4px; border-radius: 4px; background: var(--ds-inset); overflow: hidden; }
+.tc-bar i { display: block; height: 100%; background: var(--ds-grad); border-radius: 4px; }
+.tc-ext { flex: none; display: grid; place-items: center; width: 28px; height: 28px; margin-right: 4px; border: 0; background: none; color: var(--muted); border-radius: var(--ds-r-xs); }
+.tc-ext:hover { background: var(--hover); color: var(--ink); }
+
+.tc-review { display: grid; grid-template-columns: auto 1fr; gap: 1px 8px; width: 100%; padding: 7px 6px; border: 0; background: none; text-align: left; border-radius: var(--ds-r-sm); }
+.tc-review:hover { background: var(--hover); }
+.tc-stars { display: inline-flex; gap: 1px; align-items: center; color: var(--warn-solid); }
+.tc-rname { font-weight: var(--ds-w-strong); font-size: var(--ds-t-meta); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.tc-rtext { grid-column: 1 / -1; font-size: var(--ds-t-meta); color: var(--ink-2); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
diff --git a/apps/desktop/src/card/fixture.ts b/apps/desktop/src/card/fixture.ts
new file mode 100644
index 0000000..937ac3e
--- /dev/null
+++ b/apps/desktop/src/card/fixture.ts
@@ -0,0 +1,25 @@
+// Dev only: a card snapshot for the plain browser (no Tauri host), so the card can be looked at in `vite` alone.
+import type { CardSnapshot } from './model';
+
+const ago = (min: number) => new Date(Date.now() - min * 60_000).toISOString();
+
+export const CARD_FIXTURE: CardSnapshot = {
+  at: ago(4), busy: false, muted: false, apps: 6,
+  rejections: [{ app: 'a1', name: 'Prism Puddle', hue: 280, store: 'ios', version: '2.4.0', reason: 'Guideline 2.1 - Performance - App Completeness: the app crashed on launch on iPad Air (5th generation).' }],
+  releases: [
+    { app: 'a2', name: 'Tidy Tiles', hue: 160, store: 'ios', version: '1.8.2', phase: 'review', fraction: null },
+    { app: 'a3', name: 'Moss Runner', hue: 30, store: 'ios', version: '3.0.0', phase: 'approved', fraction: null },
+    { app: 'a2', name: 'Tidy Tiles', hue: 160, store: 'android', version: '1.8.1', phase: 'rollout', fraction: 0.2 },
+  ],
+  reviews: { recent: 14, low: [
+    { app: 'a2', name: 'Tidy Tiles', store: 'play', rating: 1, text: 'Lost my progress · After the update every level is locked again.', date: ago(90) },
+    { app: 'a3', name: 'Moss Runner', store: 'apple', rating: 2, text: 'Too many ads between runs', date: ago(600) },
+  ] },
+  health: [{ app: 'a4', name: 'Sample Blocks', hue: 210, kinds: ['crash'] }],
+  links: [
+    { key: 'a1', name: 'Prism Puddle', hue: 280, asc: 'https://appstoreconnect.apple.com/apps', play: null },
+    { key: 'a2', name: 'Tidy Tiles', hue: 160, asc: 'https://appstoreconnect.apple.com/apps', play: 'https://play.google.com/console' },
+    { key: 'a3', name: 'Moss Runner', hue: 30, asc: 'https://appstoreconnect.apple.com/apps', play: null },
+    { key: 'a4', name: 'Sample Blocks', hue: 210, asc: null, play: 'https://play.google.com/console' },
+  ],
+};
diff --git a/apps/desktop/src/card/main.tsx b/apps/desktop/src/card/main.tsx
new file mode 100644
index 0000000..c0f3790
--- /dev/null
+++ b/apps/desktop/src/card/main.tsx
@@ -0,0 +1,53 @@
+// The tray card window's entry (card.html): theme and language from the same prefs as the main window, the host
+// through Tauri (or a fixture in a plain dev browser).
+import { createRoot } from 'react-dom/client';
+import { applyPrefs, loadPrefs, resolveLang } from '../prefs';
+import { Card, type CardHost } from './Card';
+import { cardApi, inTauri } from './card-api';
+import type { CardSnapshot } from './model';
+import '../styles.css';
+import '../design.css';
+import './card.css';
+
+const sys = () => (typeof navigator !== 'undefined' ? navigator.language : 'en');
+
+function prefs() {
+  const p = loadPrefs();
+  if (import.meta.env.DEV) {
+    const q = new URLSearchParams(location.search);
+    const th = q.get('theme'), lg = q.get('lang');
+    if (th === 'light' || th === 'dark') p.theme = th;
+    if (lg === 'en' || lg === 'tr') p.lang = lg;
+  }
+  applyPrefs(p, document.documentElement, sys());
+  return resolveLang(p.lang, sys());
+}
+
+async function devHost(): Promise<CardHost> {
+  const { CARD_FIXTURE } = await import('./fixture');
+  const q = new URLSearchParams(location.search);
+  const snap: CardSnapshot = q.get('empty')
+    ? { ...CARD_FIXTURE, rejections: [], releases: [], health: [], reviews: { recent: 0, low: [] } }
+    : { ...CARD_FIXTURE, busy: !!q.get('busy') };
+  return { get: async () => snap, onSnapshot: () => () => {}, onShown: () => () => {}, action: (a, arg) => console.info('card action', a, arg ?? '') };
+}
+
+const tauriHost: CardHost = cardApi;
+
+void (async () => {
+  let lang = prefs();
+  const host = inTauri() ? tauriHost : await devHost();
+  const root = createRoot(document.getElementById('card')!);
+  const render = () => root.render(<Card key={lang} host={host} lang={lang} />);
+  render();
+  const relang = () => { const l = prefs(); if (l !== lang) { lang = l; render(); } };
+  // theme or language changed in the main window (same origin: shared localStorage)
+  window.addEventListener('storage', relang);
+  host.onShown(() => {
+    relang();
+    document.body.classList.remove('tc-in');
+    void document.body.offsetWidth;
+    document.body.classList.add('tc-in');
+  });
+  document.body.classList.add('tc-in');
+})();
diff --git a/apps/desktop/src/card/model.ts b/apps/desktop/src/card/model.ts
new file mode 100644
index 0000000..6b59c49
--- /dev/null
+++ b/apps/desktop/src/card/model.ts
@@ -0,0 +1,86 @@
+// The tray card's data: what the main window already knows, boiled down to the few rows the card shows. Pure (the
+// main window's bridge calls it, tests/card-model.test.ts pins it); the card itself only draws a CardSnapshot.
+import type { AppStatus } from '../api';
+import { healthSeries, type HealthSnapshot, isError, PLAY_THRESHOLDS, type Review } from '../lib/model';
+
+export type CardStore = 'ios' | 'android';
+/** A release that moves or waits: in review, rolling out (with its share), approved and waiting for release, halted. */
+export interface CardRelease { app: string; name: string; hue: number; store: CardStore; version: string | null; phase: 'review' | 'rollout' | 'approved' | 'halted'; fraction: number | null }
+export interface CardRejection { app: string; name: string; hue: number; store: CardStore; version: string | null; reason: string | null }
+export interface CardLowReview { app: string; name: string; store: 'apple' | 'play'; rating: number; text: string; date: string }
+export interface CardHealth { app: string; name: string; hue: number; kinds: ('crash' | 'anr')[] }
+export interface CardApp { key: string; name: string; hue: number; asc: string | null; play: string | null }
+export interface CardSnapshot {
+  /** Last store read of the main window (ISO), null before any. */
+  at: string | null;
+  /** The main window's Refresh all is running (its shared read state). */
+  busy: boolean;
+  muted: boolean;
+  apps: number;
+  rejections: CardRejection[];
+  releases: CardRelease[];
+  reviews: { recent: number; low: CardLowReview[] };
+  health: CardHealth[];
+  /** Apps with something on the card, for the quick actions (console links). */
+  links: CardApp[];
+}
+
+export interface CardInput {
+  key: string; name: string; hue: number; status: AppStatus | undefined;
+  reviews?: Review[] | null; health?: HealthSnapshot | null;
+  asc?: string | null; play?: string | null;
+}
+
+export const RECENT_DAYS = 7;
+export const LOW_DAYS = 14;
+export const MAX_ROWS = 6;
+export const MAX_LOW = 3;
+
+const DAY = 86_400_000;
+const one = (s: string, max: number): string => { const x = s.replace(/\s+/g, ' ').trim(); return x.length > max ? `${x.slice(0, max - 1)}…` : x; };
+
+/** Crash / ANR rates over the Play bad behavior threshold right now. */
+export function healthAlerts(h: HealthSnapshot | null | undefined): ('crash' | 'anr')[] {
+  if (!h?.play || isError(h.play)) return [];
+  const out: ('crash' | 'anr')[] = [];
+  if (healthSeries(h.play.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash).tone === 'bad') out.push('crash');
+  if (healthSeries(h.play.anr, 'userPerceivedAnrRate', PLAY_THRESHOLDS.anr).tone === 'bad') out.push('anr');
+  return out;
+}
+
+export function cardSnapshot(apps: CardInput[], o: { at: string | null; busy: boolean; muted: boolean; now?: number }): CardSnapshot {
+  const now = o.now ?? Date.now();
+  const rejections: CardRejection[] = [], releases: CardRelease[] = [], low: CardLowReview[] = [], health: CardHealth[] = [];
+  const touched = new Set<string>();
+  let recent = 0;
+  for (const a of apps) {
+    for (const r of a.status?.release.all ?? []) {
+      if (r.phase === 'rejected') { rejections.push({ app: a.key, name: a.name, hue: a.hue, store: r.store, version: r.version, reason: r.reason ? one(r.reason, 140) : null }); touched.add(a.key); }
+      else if (r.phase === 'review' || r.phase === 'sent' || r.phase === 'rollout' || r.phase === 'approved' || r.phase === 'halted') {
+        releases.push({ app: a.key, name: a.name, hue: a.hue, store: r.store, version: r.version, phase: r.phase === 'sent' ? 'review' : r.phase, fraction: r.phase === 'rollout' ? r.fraction : null });
+        touched.add(a.key);
+      }
+    }
+    for (const rv of a.reviews ?? []) {
+      const age = now - Date.parse(rv.date);
+      if (!(age > -DAY)) continue; // unreadable date, or far in the future
+      if (age <= RECENT_DAYS * DAY) recent++;
+      if (rv.rating <= 2 && age <= LOW_DAYS * DAY) {
+        low.push({ app: a.key, name: a.name, store: rv.store, rating: rv.rating, text: one([rv.title, rv.body].filter(Boolean).join(' · '), 110), date: rv.date });
+        touched.add(a.key);
+      }
+    }
+    const kinds = healthAlerts(a.health);
+    if (kinds.length) { health.push({ app: a.key, name: a.name, hue: a.hue, kinds }); touched.add(a.key); }
+  }
+  // halted first (it needs the owner), then review, waiting for release, rolling out
+  const order = { halted: 0, review: 1, approved: 2, rollout: 3 } as const;
+  releases.sort((x, y) => order[x.phase] - order[y.phase] || x.name.localeCompare(y.name));
+  low.sort((x, y) => y.date.localeCompare(x.date));
+  return {
+    at: o.at, busy: o.busy, muted: o.muted, apps: apps.length,
+    rejections: rejections.slice(0, MAX_ROWS), releases: releases.slice(0, MAX_ROWS),
+    reviews: { recent, low: low.slice(0, MAX_LOW) }, health: health.slice(0, MAX_ROWS),
+    links: apps.filter(a => touched.has(a.key)).map(a => ({ key: a.key, name: a.name, hue: a.hue, asc: a.asc ?? null, play: a.play ?? null })),
+  };
+}
diff --git a/apps/desktop/src/card/text.ts b/apps/desktop/src/card/text.ts
new file mode 100644
index 0000000..5c163ab
--- /dev/null
+++ b/apps/desktop/src/card/text.ts
@@ -0,0 +1,103 @@
+// The tray card's words in every language the app has (en, tr; same keys, tr typed against en). Kept apart from the
+// main catalogs so the card bundle stays small.
+export const en = {
+  title: 'Store status',
+  rejected: 'Rejected',
+  rejections: 'Needs you',
+  moving: 'Releases on the move',
+  review: 'In review',
+  rollout: 'Rolling out',
+  rolloutPct: 'Rolling out {pct}%',
+  approved: 'Waiting for release',
+  halted: 'Rollout halted',
+  reviews: 'Reviews',
+  recent: '{n} new in the last 7 days',
+  recentNone: 'No new reviews in the last 7 days',
+  health: 'Crash and ANR alerts',
+  crash: 'Crash rate over the bad behavior threshold',
+  anr: 'ANR rate over the bad behavior threshold',
+  crashAnr: 'Crash and ANR rates over the bad behavior threshold',
+  calm: 'All quiet: nothing in review, rolling out or waiting on you.',
+  noData: 'No store read yet. Refresh reads every app.',
+  lastRead: 'Read {ago}',
+  never: 'never',
+  justNow: 'just now',
+  min: '{n} min ago',
+  hour: '{n} h ago',
+  day: '{n} d ago',
+  refresh: 'Refresh',
+  refreshing: 'Reading…',
+  openMain: 'Open storebound',
+  more: 'More',
+  mute: 'Mute notifications for 1 hour',
+  unmute: 'Unmute notifications',
+  muted: 'Muted',
+  quit: 'Quit storebound',
+  openApp: 'Open {name}',
+  asc: 'App Store Connect',
+  play: 'Play Console',
+  appStore: 'App Store',
+  playStore: 'Play',
+  stars: '{n} of 5 stars',
+};
+export type CardKey = keyof typeof en;
+
+export const tr: Record<CardKey, string> = {
+  title: 'Mağaza durumu',
+  rejected: 'Reddedildi',
+  rejections: 'Seni bekliyor',
+  moving: 'İlerleyen sürümler',
+  review: 'İncelemede',
+  rollout: 'Yayılıyor',
+  rolloutPct: '%{pct} yayılıyor',
+  approved: 'Yayın bekliyor',
+  halted: 'Yayılım durduruldu',
+  reviews: 'Yorumlar',
+  recent: 'Son 7 günde {n} yeni',
+  recentNone: 'Son 7 günde yeni yorum yok',
+  health: 'Çökme ve ANR uyarıları',
+  crash: 'Çökme oranı kötü davranış eşiğinin üstünde',
+  anr: 'ANR oranı kötü davranış eşiğinin üstünde',
+  crashAnr: 'Çökme ve ANR oranları kötü davranış eşiğinin üstünde',
+  calm: 'Her şey sakin: incelemede, yayılan ya da seni bekleyen bir şey yok.',
+  noData: 'Henüz mağaza okunmadı. Yenile her uygulamayı okur.',
+  lastRead: '{ago} okundu',
+  never: 'hiç',
+  justNow: 'az önce',
+  min: '{n} dk önce',
+  hour: '{n} sa önce',
+  day: '{n} gün önce',
+  refresh: 'Yenile',
+  refreshing: 'Okunuyor…',
+  openMain: 'storebound\'u aç',
+  more: 'Diğer',
+  mute: 'Bildirimleri 1 saat sustur',
+  unmute: 'Bildirimleri aç',
+  muted: 'Sessiz',
+  quit: 'storebound\'dan çık',
+  openApp: '{name} uygulamasını aç',
+  asc: 'App Store Connect',
+  play: 'Play Console',
+  appStore: 'App Store',
+  playStore: 'Play',
+  stars: '5 üzerinden {n} yıldız',
+};
+
+export const CARD_TEXT = { en, tr } as const;
+export type CardLang = keyof typeof CARD_TEXT;
+
+export function cardT(lang: CardLang, key: CardKey, vars?: Record<string, string | number>): string {
+  const s = CARD_TEXT[lang][key] ?? en[key];
+  return vars ? s.replace(/\{(\w+)\}/g, (m, k: string) => (vars[k] === undefined ? m : String(vars[k]))) : s;
+}
+
+/** "3 min ago" style age of the last read. */
+export function ago(lang: CardLang, at: string | null, now: number): string {
+  if (!at) return cardT(lang, 'never');
+  const m = Math.floor((now - Date.parse(at)) / 60_000);
+  if (!Number.isFinite(m)) return cardT(lang, 'never');
+  if (m < 1) return cardT(lang, 'justNow');
+  if (m < 60) return cardT(lang, 'min', { n: m });
+  if (m < 48 * 60) return cardT(lang, 'hour', { n: Math.floor(m / 60) });
+  return cardT(lang, 'day', { n: Math.floor(m / 1440) });
+}
diff --git a/apps/desktop/src/main.tsx b/apps/desktop/src/main.tsx
index 697bcb7..a78cda8 100644
--- a/apps/desktop/src/main.tsx
+++ b/apps/desktop/src/main.tsx
@@ -7,6 +7,7 @@ import { applyPrefs, loadPrefs, type Prefs, resolveLang, savePrefs } from './pre
 import { PrefsContext } from './prefs-ctx';
 import { installGlobalHandlers, report } from './lib/crash';
 import { DataProvider } from './store';
+import { TrayCardBridge } from './card/bridge';
 import { ErrorBoundary } from './ui/ErrorBoundary';
 import { ContextMenuProvider } from './ui/ContextMenu';
 import { ExportProvider } from './ui/Exports';
@@ -37,7 +38,7 @@ function Root() {
     update({ ...prefs, theme: dark ? 'light' : 'dark' });
   }, [prefs, update]);
   // a language change re-renders the whole tree in the new language
-  return <PrefsContext.Provider value={{ prefs, update }}><DataProvider><ExportProvider><ContextMenuProvider><App key={lang} onTheme={onTheme} /></ContextMenuProvider></ExportProvider></DataProvider></PrefsContext.Provider>;
+  return <PrefsContext.Provider value={{ prefs, update }}><DataProvider><TrayCardBridge /><ExportProvider><ContextMenuProvider><App key={lang} onTheme={onTheme} /></ContextMenuProvider></ExportProvider></DataProvider></PrefsContext.Provider>;
 }
 
 installGlobalHandlers();
diff --git a/apps/desktop/tests/card-model.test.ts b/apps/desktop/tests/card-model.test.ts
new file mode 100644
index 0000000..4d28d55
--- /dev/null
+++ b/apps/desktop/tests/card-model.test.ts
@@ -0,0 +1,67 @@
+// The tray card's data mapping: rejections first, moving releases with rollout share, recent and low reviews, Play
+// crash / ANR alerts, console links only for apps on the card; and the card words in every language.
+import { expect, test } from 'bun:test';
+import type { AppStatus } from '../src/api';
+import { cardSnapshot, healthAlerts, type CardInput } from '../src/card/model';
+import { ago, CARD_TEXT, cardT } from '../src/card/text';
+
+const NOW = Date.parse('2026-10-20T12:00:00Z');
+const daysAgo = (n: number) => new Date(NOW - n * 86_400_000).toISOString();
+
+function status(all: { store: 'ios' | 'android'; phase: string; version?: string; fraction?: number | null; reason?: string }[]): AppStatus {
+  return { release: { source: 'live', current: null, next: null, all: all.map(r => ({ store: r.store, version: r.version ?? '1.0', build: null, state: 'X', phase: r.phase, fraction: r.fraction ?? null, track: null, reason: r.reason ?? null })) } } as unknown as AppStatus;
+}
+
+const rows = (rate: number) => [{ date: '2026-10-19', dims: {}, values: { userPerceivedCrashRate: rate, userPerceivedCrashRate28dUserWeighted: rate } }];
+
+test('maps releases, rejections, reviews and health', () => {
+  const apps: CardInput[] = [
+    { key: 'a', name: 'Alpha', hue: 10, status: status([{ store: 'ios', phase: 'rejected', reason: 'Guideline   2.1\nincomplete' }, { store: 'android', phase: 'rollout', fraction: 0.2 }]), asc: 'https://appstoreconnect.apple.com/apps/1/distribution', play: 'https://play.google.com/console' },
+    { key: 'b', name: 'Beta', hue: 20, status: status([{ store: 'ios', phase: 'sent' }, { store: 'android', phase: 'live' }]),
+      reviews: [
+        { store: 'play', id: '1', rating: 1, title: 'Bad', body: 'Crashes', date: daysAgo(1) },
+        { store: 'apple', id: '2', rating: 5, body: 'Great', date: daysAgo(2) },
+        { store: 'apple', id: '3', rating: 2, body: 'Old and low', date: daysAgo(20) },
+      ] },
+    { key: 'c', name: 'Gamma', hue: 30, status: status([{ store: 'ios', phase: 'approved' }, { store: 'android', phase: 'halted' }]),
+      health: { date: '2026-10-19', play: { window: { start: '', end: '', days: 28 }, crash: rows(0.05), anr: [] } } as never },
+    { key: 'd', name: 'Delta', hue: 40, status: status([{ store: 'ios', phase: 'live' }]) },
+  ];
+  const s = cardSnapshot(apps, { at: daysAgo(0), busy: true, muted: false, now: NOW });
+  expect(s.busy).toBe(true);
+  expect(s.apps).toBe(4);
+  expect(s.rejections).toEqual([{ app: 'a', name: 'Alpha', hue: 10, store: 'ios', version: '1.0', reason: 'Guideline 2.1 incomplete' }]);
+  expect(s.releases.map(r => `${r.app}:${r.store}:${r.phase}:${r.fraction}`)).toEqual(['c:android:halted:null', 'b:ios:review:null', 'c:ios:approved:null', 'a:android:rollout:0.2']);
+  expect(s.reviews.recent).toBe(2);
+  expect(s.reviews.low).toEqual([{ app: 'b', name: 'Beta', store: 'play', rating: 1, text: 'Bad · Crashes', date: daysAgo(1) }]);
+  expect(s.health).toEqual([{ app: 'c', name: 'Gamma', hue: 30, kinds: ['crash'] }]);
+  expect(s.links.map(l => l.key)).toEqual(['a', 'b', 'c']);
+  expect(s.links[0]!.asc).toContain('appstoreconnect.apple.com');
+});
+
+test('nothing read: an empty, calm snapshot', () => {
+  const s = cardSnapshot([{ key: 'x', name: 'X', hue: 0, status: undefined }], { at: null, busy: false, muted: true, now: NOW });
+  expect(s).toMatchObject({ at: null, muted: true, rejections: [], releases: [], health: [], reviews: { recent: 0, low: [] }, links: [] });
+});
+
+test('health errors and healthy rates raise no alert', () => {
+  expect(healthAlerts(null)).toEqual([]);
+  expect(healthAlerts({ date: '', play: { error: 'no access' } } as never)).toEqual([]);
+  expect(healthAlerts({ date: '', play: { window: { start: '', end: '', days: 28 }, crash: rows(0.001), anr: [] } } as never)).toEqual([]);
+});
+
+test('card words: every language has every key, placeholders match', () => {
+  const ph = (s: string) => [...s.matchAll(/\{(\w+)\}/g)].map(m => m[1]).sort().join(',');
+  for (const [lang, cat] of Object.entries(CARD_TEXT)) {
+    for (const [k, v] of Object.entries(CARD_TEXT.en)) {
+      const got = (cat as Record<string, string>)[k];
+      expect(got, `${lang}.${k}`).toBeTruthy();
+      expect(ph(got!), `${lang}.${k}`).toBe(ph(v));
+    }
+  }
+  expect(cardT('tr', 'rolloutPct', { pct: 20 })).toBe('%20 yayılıyor');
+  expect(ago('en', null, NOW)).toBe('never');
+  expect(ago('en', daysAgo(0), NOW)).toBe('just now');
+  expect(ago('en', new Date(NOW - 5 * 60_000).toISOString(), NOW)).toBe('5 min ago');
+  expect(ago('tr', new Date(NOW - 3 * 3600_000).toISOString(), NOW)).toBe('3 sa önce');
+});
diff --git a/apps/desktop/vite.config.ts b/apps/desktop/vite.config.ts
index ebc611c..ba701d6 100644
--- a/apps/desktop/vite.config.ts
+++ b/apps/desktop/vite.config.ts
@@ -16,5 +16,7 @@ export default defineConfig({
     // no inline scripts or styles: the CSP is script-src 'self', style-src 'self'
     assetsInlineLimit: 0,
     cssCodeSplit: false,
+    // two pages: the main window and the tray card (pre-created hidden by src-tauri/src/card.rs)
+    rollupOptions: { input: { main: 'index.html', card: 'card.html' } },
   },
 });

From fb37911f5e3f9e3142c690857bc580201de81f6e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 11:15:40 +0800
Subject: [PATCH 096/255] Desktop: generated permissions of the tray card
 commands

---
 .../permissions/autogenerated/card_action.toml        | 11 +++++++++++
 .../src-tauri/permissions/autogenerated/card_get.toml | 11 +++++++++++
 .../permissions/autogenerated/card_snapshot.toml      | 11 +++++++++++
 3 files changed, 33 insertions(+)
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/card_action.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/card_get.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/card_snapshot.toml

diff --git a/apps/desktop/src-tauri/permissions/autogenerated/card_action.toml b/apps/desktop/src-tauri/permissions/autogenerated/card_action.toml
new file mode 100644
index 0000000..1d41f1c
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/card_action.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-card-action"
+description = "Enables the card_action command without any pre-configured scope."
+commands.allow = ["card_action"]
+
+[[permission]]
+identifier = "deny-card-action"
+description = "Denies the card_action command without any pre-configured scope."
+commands.deny = ["card_action"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/card_get.toml b/apps/desktop/src-tauri/permissions/autogenerated/card_get.toml
new file mode 100644
index 0000000..3be151c
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/card_get.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-card-get"
+description = "Enables the card_get command without any pre-configured scope."
+commands.allow = ["card_get"]
+
+[[permission]]
+identifier = "deny-card-get"
+description = "Denies the card_get command without any pre-configured scope."
+commands.deny = ["card_get"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/card_snapshot.toml b/apps/desktop/src-tauri/permissions/autogenerated/card_snapshot.toml
new file mode 100644
index 0000000..4118e9c
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/card_snapshot.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-card-snapshot"
+description = "Enables the card_snapshot command without any pre-configured scope."
+commands.allow = ["card_snapshot"]
+
+[[permission]]
+identifier = "deny-card-snapshot"
+description = "Denies the card_snapshot command without any pre-configured scope."
+commands.deny = ["card_snapshot"]

From fa081666ecd0794cf82a250b83d06b6632411866 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 11:16:12 +0800
Subject: [PATCH 097/255] CHANGELOG: reads registry and tray card

---
 CHANGELOG.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e960da9..bf82eb2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- Desktop: every read goes through one registry: one store call per read however many buttons are clicked, overlapping buttons (Refresh all, card refresh, Check again, Import, Test) are busy and disabled together, a read just finished is not repeated, and all reads share the scheduler's rate limits and backoff.
+- Desktop: tray mini card on left click (rejections, releases moving, crash alerts, recent low reviews, refresh, quick actions); right click keeps the menu.
+
 - `apple build` / `apple upload`: `--allow-version-mismatch` is accepted (it was missing from the flag list); 1.0 and 1.0.0 count as the same version train, as on App Store Connect.
 - Desktop: custom context menus everywhere (apps, releases, art, reviews, checks, fields, products, accounts, folders) with keyboard navigation, Shift+F10 and submenus; the WebView2 browser menu and browser shortcuts are off.
 - Desktop: each app shows once again (a folder project no longer appears a second time as a store-only app); a store app with a folder's bundle id or package is never listed separately.

From f3e7c9899432986ce5fd6df172580617ebd8ec03 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 11:21:51 +0800
Subject: [PATCH 098/255] desktop reads: a card that joins a read or gets the
 'read just now' answer applies it (no bus event for those: a tab opened again
 stayed on its skeleton); invalidate before a write's after-refresh, editor
 save re-reads with force

---
 apps/desktop/src/screens/editors/TabEditor.tsx |  2 +-
 apps/desktop/src/store.tsx                     | 14 +++++++++-----
 2 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/apps/desktop/src/screens/editors/TabEditor.tsx b/apps/desktop/src/screens/editors/TabEditor.tsx
index 109eff5..b38ded1 100644
--- a/apps/desktop/src/screens/editors/TabEditor.tsx
+++ b/apps/desktop/src/screens/editors/TabEditor.tsx
@@ -23,7 +23,7 @@ export function TabEditor({ tab, project }: { tab: AppTab; project: Project }) {
   const r = useEditable(project);
   if (!EDIT_TABS[tab]) return null;
   if (!r.data) return r.error ? <ErrorNotice error={t('ed.loadFailed', { error: r.error })} tone="bad" /> : <Section><Skeleton lines={4} block /></Section>;
-  const p = { project, data: r.data, onSaved: () => { r.refresh(); } };
+  const p = { project, data: r.data, onSaved: () => { r.refresh(true); } };
   switch (tab) {
     case 'listings': return <ListingEditor {...p} />;
     case 'appinfo': return <AppInfoEditor {...p} />;
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index ada04ce..877b9ca 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -608,7 +608,8 @@ export interface ReadState<T> {
   justNow?: boolean;
   /** Its store account waits on a quota pause or 429 backoff until then (epoch ms). */
   pausedUntil?: number | null;
-  refresh: () => Promise<void>;
+  /** Reads again (joins / memo); `true` skips the "read just now" memo. */
+  refresh: (force?: unknown) => Promise<void>;
 }
 
 /** preview: false when the screen already showed this dry run (the editors' Review step); the native dialog still follows. */
@@ -638,7 +639,7 @@ export function useWrite(projectId: string | null) {
       const o = await api.writeWithConfirm(w.method, projectId, w.args, job);
       if (o.stage === 'dry-run') d.updateToast(tid, { kind: 'bad', title: t('write.dryFailed'), detail: withHint(failureText(o.dryRun)), progress: undefined, job: undefined });
       else if (o.stage === 'dialog') d.updateToast(tid, { kind: 'info', title: t('write.notApplied'), detail: t('write.notAppliedDetail'), progress: undefined, job: undefined });
-      else if (o.result?.ok) { d.updateToast(tid, { kind: 'ok', title: w.done, detail: lastLine(o.result.output) || undefined, progress: undefined, job: undefined }); w.after?.(); d.invalidate(projectId, w.method); }
+      else if (o.result?.ok) { d.updateToast(tid, { kind: 'ok', title: w.done, detail: lastLine(o.result.output) || undefined, progress: undefined, job: undefined }); d.invalidate(projectId, w.method); w.after?.(); }
       // exit 3: the command stopped for an owner decision it did not get (a price change of a live product: the
       // Catalog tab's owner action applies it); everything else it could do was done
       else if (o.result?.exitCode === 3) { d.updateToast(tid, { kind: 'info', title: t('write.declined'), detail: lastLine(o.result.output) || undefined, progress: undefined, job: undefined }); w.after?.(); }
@@ -702,11 +703,14 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
   const skipRef = useRef(o.skip);
   skipRef.current = o.skip;
 
-  const refresh = useCallback(async () => {
+  const refresh = useCallback(async (force?: unknown) => {
     if (skipRef.current) return;
     set(x => ({ ...x, loading: false }));
-    // a click: highest priority, joins a read in flight, answered from the memo when it finished just now
-    await dRef.current.schedule(target, method, JSON.parse(argsKey) as Record<string, unknown>, 0).catch(() => {});
+    // a click: highest priority, joins a read in flight, answered from the memo when it finished just now. The answer
+    // is applied here too: a join or a memo answer sends no bus event, and a card that mounted after the read (a tab
+    // opened again) would otherwise wait forever. `force === true` (after a save of this app's files) skips the memo.
+    const r = await dRef.current.schedule(target, method, JSON.parse(argsKey) as Record<string, unknown>, 0, force === true).catch(() => null);
+    if (r && usable(method, r)) set(x => (x.data === r.data ? x : { data: r.data as T, at: new Date().toISOString(), fromCache: false, loading: false, stale: false, error: null, command: r.command }));
   }, [target, method, argsKey]);
 
   // results of this key, whoever asked for them (this card, the background reader, a write's invalidation)

From 19b486885252acf3bfb2b5710545e856ff35cdc1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 10:25:06 +0700
Subject: [PATCH 099/255] storebound 0.8.41: version in package.json and every
 copy, CHANGELOG 0.8.41 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 5b40b97..24b83ff 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.40",
+      "version": "0.8.41",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 23d9143..9bbdea1 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.40",
+  "version": "0.8.41",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 45fd97b..bdf466e 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.40",
+  "version": "0.8.41",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bf82eb2..92e9d34 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.41 · 2026-10-23
+
 - Desktop: every read goes through one registry: one store call per read however many buttons are clicked, overlapping buttons (Refresh all, card refresh, Check again, Import, Test) are busy and disabled together, a read just finished is not repeated, and all reads share the scheduler's rate limits and backoff.
 - Desktop: tray mini card on left click (rejections, releases moving, crash alerts, recent low reviews, refresh, quick actions); right click keeps the menu.
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index b228a6d..527db86 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.40",
+  "version": "0.8.41",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 963210f..9d2ab9a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.40"
+version = "0.8.41"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 7810d30..df30f0c 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.40"
+version = "0.8.41"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 405e40e..1ac8b1d 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.40",
+  "version": "0.8.41",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 15e1dda..f1ba838 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.40",
+  "version": "0.8.41",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b8bb3c7..9ce3e6f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.40",
+  "version": "0.8.41",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 54451c87c802170ceae9520ca573732489576cfc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 12:29:24 +0800
Subject: [PATCH 100/255] Regenerate the API tables (wrapped.gen.ts,
 api-coverage.md); 0.8.41 notes move to Unreleased

---
 CHANGELOG.md           |   6 +-
 cli/api/wrapped.gen.ts | 476 ++++++++++++++++++++--------------------
 docs/api-coverage.md   | 488 ++++++++++++++++++++---------------------
 3 files changed, 491 insertions(+), 479 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 92e9d34..42a65c1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,8 +3,6 @@
 
 ## Unreleased
 
-## 0.8.41 · 2026-10-23
-
 - Desktop: every read goes through one registry: one store call per read however many buttons are clicked, overlapping buttons (Refresh all, card refresh, Check again, Import, Test) are busy and disabled together, a read just finished is not repeated, and all reads share the scheduler's rate limits and backoff.
 - Desktop: tray mini card on left click (rejections, releases moving, crash alerts, recent low reviews, refresh, quick actions); right click keeps the menu.
 
@@ -16,6 +14,10 @@
 - Desktop: tabs in one row with a More menu, one Refresh, reviews keyboard (J/K, R, C, O), Settings and More tools search, sticky first column and compact density for wide tables, styled in-app dry-run preview before every write.
 - Checks: "Open guide" opens the matching skill for every finding.
 
+## 0.8.41 · 2026-10-23
+
+- Tagged but not published (a generated API table was stale in CI); everything ships in the next version.
+
 ## 0.8.40 · 2026-10-23
 
 - Tagged but not published (the desktop boot check stopped it); everything ships in the next version.
diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 3fe7002..93ee57e 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -2,266 +2,276 @@
 // Operation id -> the source modules (cli/<module>.ts) of storebound commands that already call it.
 export const WRAPPED: { apple: Record<string, string>; play: Record<string, string> } = {
   apple: {
-    'ageRatingDeclarations_updateInstance': 'apple/appinfo',
+    'ageRatingDeclarations_updateInstance': 'apple\\appinfo',
     'analyticsReportInstances_segments_getToManyRelated': 'analytics',
     'analyticsReportRequests_createInstance': 'analytics',
     'analyticsReportRequests_reports_getToManyRelated': 'analytics',
     'analyticsReports_instances_getToManyRelated': 'analytics',
-    'appAssetLibraries_images_getToManyRelated': 'apple/creative-assets',
-    'appAssetLibraries_videos_getToManyRelated': 'apple/creative-assets',
-    'appAssetLibraryPlacements_createInstance': 'apple/creative-assets',
-    'appAssetLibraryPlacements_deleteInstance': 'apple/creative-assets',
-    'appAvailabilitiesV2_createInstance': 'apple/appinfo',
-    'appAvailabilitiesV2_territoryAvailabilities_getToManyRelated': 'apple/preorder',
-    'appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated': 'apple/cpp',
-    'appCustomProductPageLocalizations_createInstance': 'lib/cpp-events',
-    'appCustomProductPageLocalizations_updateInstance': 'lib/cpp-events',
-    'appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated': 'apple/cpp',
-    'appCustomProductPageVersions_updateInstance': 'apple/cpp',
-    'appCustomProductPages_appCustomProductPageVersions_getToManyRelated': 'apple/cpp',
-    'appCustomProductPages_createInstance': 'apple/cpp',
-    'appCustomProductPages_getInstance': 'apple/cpp',
-    'appCustomProductPages_updateInstance': 'apple/cpp',
-    'appEncryptionDeclarations_getCollection': 'apple/encryption',
-    'appEventLocalizations_appEventScreenshots_getToManyRelated': 'apple/events',
-    'appEventLocalizations_createInstance': 'lib/cpp-events',
-    'appEventLocalizations_updateInstance': 'lib/cpp-events',
-    'appEventScreenshots_createInstance': 'apple/events',
-    'appEventScreenshots_deleteInstance': 'apple/events',
-    'appEventScreenshots_updateInstance': 'apple/events',
-    'appEvents_createInstance': 'apple/events',
-    'appEvents_getInstance': 'apple/events',
-    'appEvents_localizations_getToManyRelated': 'apple/events',
+    'appAssetLibraries_images_getToManyRelated': 'apple\\creative-assets',
+    'appAssetLibraries_videos_getToManyRelated': 'apple\\creative-assets',
+    'appAssetLibraryPlacements_createInstance': 'apple\\creative-assets',
+    'appAssetLibraryPlacements_deleteInstance': 'apple\\creative-assets',
+    'appAvailabilitiesV2_createInstance': 'apple\\appinfo',
+    'appAvailabilitiesV2_territoryAvailabilities_getToManyRelated': 'apple\\appinfo apple\\preorder',
+    'appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated': 'apple\\cpp',
+    'appCustomProductPageLocalizations_createInstance': 'lib\\cpp-events',
+    'appCustomProductPageLocalizations_updateInstance': 'lib\\cpp-events',
+    'appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated': 'apple\\cpp',
+    'appCustomProductPageVersions_updateInstance': 'lib\\cpp-events',
+    'appCustomProductPages_appCustomProductPageVersions_getToManyRelated': 'apple\\cpp',
+    'appCustomProductPages_createInstance': 'apple\\cpp',
+    'appCustomProductPages_getInstance': 'apple\\cpp',
+    'appCustomProductPages_updateInstance': 'apple\\cpp',
+    'appEncryptionDeclarations_getCollection': 'apple\\encryption',
+    'appEventLocalizations_appEventScreenshots_getToManyRelated': 'apple\\events',
+    'appEventLocalizations_createInstance': 'lib\\cpp-events',
+    'appEventLocalizations_updateInstance': 'lib\\cpp-events',
+    'appEventScreenshots_createInstance': 'apple\\events',
+    'appEventScreenshots_deleteInstance': 'apple\\events',
+    'appEventScreenshots_updateInstance': 'apple\\events',
+    'appEvents_createInstance': 'apple\\events',
+    'appEvents_getInstance': 'apple\\events',
+    'appEvents_localizations_getToManyRelated': 'apple\\events',
+    'appEvents_updateInstance': 'lib\\cpp-events',
     'appInfoLocalizations_createInstance': 'listing-store',
     'appInfoLocalizations_updateInstance': 'listing-store',
-    'appInfos_ageRatingDeclaration_getToOneRelated': 'apple/appinfo console/verify validate',
-    'appInfos_appInfoLocalizations_getToManyRelated': 'apple/listing listing-store onboard validate',
-    'appInfos_getInstance': 'apple/appinfo',
-    'appInfos_updateInstance': 'apple/appinfo',
-    'appPreviewSets_appPreviews_getToManyRelated': 'apple/previews art',
-    'appPreviewSets_createInstance': 'apple/previews',
-    'appPreviews_updateInstance': 'apple/previews',
-    'appPriceSchedules_createInstance': 'apple/appinfo',
-    'appScreenshotSets_appScreenshots_getToManyRelated': 'apple/ppo apple/screenshot-health apple/screenshots art validate',
-    'appScreenshotSets_appScreenshots_replaceToManyRelationship': 'apple/screenshot-health',
-    'appScreenshotSets_createInstance': 'apple/screenshots',
-    'appScreenshots_createInstance': 'apple/screenshot-health',
-    'appScreenshots_deleteInstance': 'apple/screenshot-health',
-    'appScreenshots_updateInstance': 'apple/screenshot-health',
-    'appStoreReviewDetails_createInstance': 'apple/review-details',
-    'appStoreReviewDetails_updateInstance': 'apple/review-details',
-    'appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated': 'apple/ppo',
-    'appStoreVersionExperimentTreatmentLocalizations_createInstance': 'lib/ppo',
-    'appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated': 'apple/ppo',
-    'appStoreVersionExperimentTreatments_createInstance': 'lib/ppo',
-    'appStoreVersionExperimentTreatments_getInstance': 'apple/ppo',
-    'appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated': 'apple/ppo',
-    'appStoreVersionExperimentsV2_createInstance': 'lib/ppo',
-    'appStoreVersionExperimentsV2_getInstance': 'apple/ppo',
-    'appStoreVersionExperimentsV2_updateInstance': 'lib/ppo',
-    'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple/previews art',
-    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/screenshot-health apple/screenshots art validate',
+    'appInfos_ageRatingDeclaration_getToOneRelated': 'apple\\appinfo console\\verify validate',
+    'appInfos_appInfoLocalizations_getToManyRelated': 'apple\\listing listing-store onboard validate',
+    'appInfos_getInstance': 'apple\\appinfo',
+    'appInfos_updateInstance': 'apple\\appinfo',
+    'appPreviewSets_appPreviews_getToManyRelated': 'apple\\previews art',
+    'appPreviewSets_createInstance': 'apple\\previews',
+    'appPreviews_updateInstance': 'apple\\previews',
+    'appPriceSchedules_createInstance': 'apple\\appinfo',
+    'appPriceSchedules_manualPrices_getToManyRelated': 'apple\\appinfo',
+    'appScreenshotSets_appScreenshots_getToManyRelated': 'apple\\ppo apple\\screenshot-health apple\\screenshots art validate',
+    'appScreenshotSets_appScreenshots_replaceToManyRelationship': 'apple\\screenshot-health',
+    'appScreenshotSets_createInstance': 'apple\\screenshots',
+    'appScreenshots_createInstance': 'apple\\screenshot-health',
+    'appScreenshots_deleteInstance': 'apple\\screenshot-health',
+    'appScreenshots_updateInstance': 'apple\\screenshot-health',
+    'appStoreReviewDetails_createInstance': 'apple\\review-details',
+    'appStoreReviewDetails_updateInstance': 'apple\\review-details',
+    'appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated': 'apple\\ppo',
+    'appStoreVersionExperimentTreatmentLocalizations_createInstance': 'lib\\ppo',
+    'appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated': 'apple\\ppo',
+    'appStoreVersionExperimentTreatments_createInstance': 'lib\\ppo',
+    'appStoreVersionExperimentTreatments_getInstance': 'apple\\ppo',
+    'appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated': 'apple\\ppo',
+    'appStoreVersionExperimentsV2_createInstance': 'lib\\ppo',
+    'appStoreVersionExperimentsV2_getInstance': 'apple\\ppo',
+    'appStoreVersionExperimentsV2_updateInstance': 'lib\\ppo',
+    'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple\\previews art',
+    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple\\screenshot-health apple\\screenshots art validate',
     'appStoreVersionLocalizations_createInstance': 'listing-store',
-    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets',
+    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple\\creative-assets',
     'appStoreVersionLocalizations_updateInstance': 'listing-store',
-    'appStoreVersionPhasedReleases_createInstance': 'apple/release',
-    'appStoreVersionPhasedReleases_updateInstance': 'apple/release',
-    'appStoreVersionReleaseRequests_createInstance': 'apple/release',
-    'appStoreVersions_appStoreReviewDetail_getToOneRelated': 'apple/review-details onboard validate',
-    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple/creative-assets apple/listing apple/previews apple/screenshot-health apple/screenshots art listing-store onboard validate',
-    'appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated': 'apple/release apple/status',
-    'appStoreVersions_build_getToOneRelated': 'apple/listing apple/resubmit validate',
-    'appStoreVersions_build_updateToOneRelationship': 'apple/listing apple/resubmit',
-    'appStoreVersions_createInstance': 'apple/listing',
-    'appStoreVersions_gameCenterAppVersion_getToOneRelated': 'apple/game-center',
-    'appStoreVersions_getInstance': 'apple/listing',
-    'appStoreVersions_updateInstance': 'apple/listing',
+    'appStoreVersionPhasedReleases_createInstance': 'apple\\release',
+    'appStoreVersionPhasedReleases_updateInstance': 'apple\\release',
+    'appStoreVersionReleaseRequests_createInstance': 'apple\\release',
+    'appStoreVersions_appStoreReviewDetail_getToOneRelated': 'apple\\review-details onboard validate',
+    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple\\creative-assets apple\\listing apple\\previews apple\\screenshot-health apple\\screenshots art listing-store onboard validate',
+    'appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated': 'apple\\release apple\\status',
+    'appStoreVersions_build_getToOneRelated': 'apple\\listing apple\\resubmit validate',
+    'appStoreVersions_build_updateToOneRelationship': 'apple\\listing apple\\resubmit',
+    'appStoreVersions_createInstance': 'apple\\listing',
+    'appStoreVersions_gameCenterAppVersion_getToOneRelated': 'apple\\game-center',
+    'appStoreVersions_getInstance': 'apple\\listing',
+    'appStoreVersions_updateInstance': 'apple\\listing',
     'apps_analyticsReportRequests_getToManyRelated': 'analytics',
-    'apps_appAvailabilityV2_getToOneRelated': 'apple/appinfo apple/preorder validate',
-    'apps_appCustomProductPages_getToManyRelated': 'apple/cpp',
-    'apps_appEvents_getToManyRelated': 'apple/events',
-    'apps_appInfos_getToManyRelated': 'apple/asc apple/listing',
-    'apps_appPricePoints_getToManyRelated': 'apple/appinfo',
-    'apps_appPriceSchedule_getToOneRelated': 'apple/appinfo validate',
-    'apps_appStoreVersionExperimentsV2_getToManyRelated': 'apple/ppo',
-    'apps_appStoreVersions_getToManyRelated': 'apple/asc apple/creative-assets apple/iap-submit apple/platform apple/review-details apple/status art lib/store-apps listing-store onboard',
-    'apps_assetLibrary_getToOneRelated': 'apple/creative-assets',
-    'apps_betaAppLocalizations_getToManyRelated': 'apple/testflight',
-    'apps_betaAppReviewDetail_getToOneRelated': 'apple/testflight',
+    'apps_appAvailabilityV2_getToOneRelated': 'apple\\appinfo apple\\preorder validate',
+    'apps_appCustomProductPages_getToManyRelated': 'apple\\cpp',
+    'apps_appEvents_getToManyRelated': 'apple\\events',
+    'apps_appInfos_getToManyRelated': 'apple\\asc apple\\listing',
+    'apps_appPricePoints_getToManyRelated': 'apple\\appinfo',
+    'apps_appPriceSchedule_getToOneRelated': 'apple\\appinfo validate',
+    'apps_appStoreVersionExperimentsV2_getToManyRelated': 'apple\\ppo',
+    'apps_appStoreVersions_getToManyRelated': 'apple\\asc apple\\creative-assets apple\\iap-submit apple\\platform apple\\review-details apple\\status art lib\\store-apps listing-store onboard',
+    'apps_assetLibrary_getToOneRelated': 'apple\\creative-assets',
+    'apps_betaAppLocalizations_getToManyRelated': 'apple\\testflight',
+    'apps_betaAppReviewDetail_getToOneRelated': 'apple\\testflight',
     'apps_betaFeedbackCrashSubmissions_getToManyRelated': 'health',
-    'apps_betaGroups_getToManyRelated': 'apple/testflight',
-    'apps_buildUploads_getToManyRelated': 'apple/upload',
+    'apps_betaGroups_getToManyRelated': 'apple\\testflight',
+    'apps_buildUploads_getToManyRelated': 'apple\\upload',
     'apps_customerReviews_getToManyRelated': 'reviews',
-    'apps_gameCenterDetail_getToOneRelated': 'apple/game-center',
-    'apps_getCollection': 'apple/asc apple/bundle apps console/app-id console/verify lib/store-apps',
-    'apps_getInstance': 'apple/appinfo apple/status apps onboard',
-    'apps_inAppPurchasesV2_getToManyRelated': 'apple/first-products apple/iap apple/iap-review apple/iap-submit apple/offer-codes apple/promoted apple/status catalog prices validate',
+    'apps_gameCenterDetail_getToOneRelated': 'apple\\game-center',
+    'apps_getCollection': 'apple\\asc apple\\bundle apps console\\app-id console\\verify lib\\store-apps',
+    'apps_getInstance': 'apple\\appinfo apple\\status apps onboard watch',
+    'apps_inAppPurchasesV2_getToManyRelated': 'apple\\first-products apple\\iap apple\\iap-review apple\\iap-submit apple\\offer-codes apple\\promoted apple\\status catalog prices validate',
     'apps_perfPowerMetrics_getToManyRelated': 'health',
-    'apps_promotedPurchases_getToManyRelated': 'apple/promoted',
-    'apps_promotedPurchases_replaceToManyRelationship': 'lib/offers',
-    'apps_reviewSubmissions_getToManyRelated': 'apple/resubmit apple/submission',
-    'apps_subscriptionGroups_getToManyRelated': 'apple/first-products apple/iap-submit apple/promoted apple/subscriptions apple/win-back catalog prices validate',
-    'apps_updateInstance': 'apple/appinfo',
-    'betaAppLocalizations_createInstance': 'lib/testflight',
-    'betaAppLocalizations_updateInstance': 'lib/testflight',
-    'betaAppReviewDetails_updateInstance': 'lib/testflight',
-    'betaAppReviewSubmissions_createInstance': 'lib/testflight',
-    'betaBuildLocalizations_createInstance': 'lib/testflight',
-    'betaBuildLocalizations_updateInstance': 'lib/testflight',
+    'apps_promotedPurchases_getToManyRelated': 'apple\\promoted',
+    'apps_promotedPurchases_replaceToManyRelationship': 'lib\\offers',
+    'apps_reviewSubmissions_getToManyRelated': 'apple\\resubmit apple\\submission',
+    'apps_subscriptionGroups_getToManyRelated': 'apple\\first-products apple\\iap-submit apple\\promoted apple\\subscriptions apple\\win-back catalog prices validate',
+    'apps_updateInstance': 'apple\\appinfo',
+    'betaAppLocalizations_createInstance': 'lib\\testflight',
+    'betaAppLocalizations_updateInstance': 'lib\\testflight',
+    'betaAppReviewDetails_updateInstance': 'lib\\testflight',
+    'betaAppReviewSubmissions_createInstance': 'lib\\testflight',
+    'betaBuildLocalizations_createInstance': 'lib\\testflight',
+    'betaBuildLocalizations_updateInstance': 'lib\\testflight',
     'betaFeedbackCrashSubmissions_crashLog_getToOneRelated': 'triage',
-    'betaGroups_betaTesters_createToManyRelationship': 'lib/testflight',
-    'betaGroups_betaTesters_deleteToManyRelationship': 'lib/testflight',
-    'betaGroups_betaTesters_getToManyRelated': 'apple/testflight',
-    'betaGroups_builds_createToManyRelationship': 'lib/testflight',
-    'betaGroups_builds_getToManyRelated': 'apple/testflight',
-    'betaGroups_builds_getToManyRelationship': 'apple/testflight',
-    'betaGroups_createInstance': 'lib/testflight',
-    'betaGroups_getInstance': 'apple/testflight',
-    'betaTesterInvitations_createInstance': 'lib/testflight',
-    'betaTesters_createInstance': 'lib/testflight',
-    'betaTesters_getCollection': 'apple/testflight',
-    'buildUploadFiles_createInstance': 'lib/xcode',
-    'buildUploadFiles_updateInstance': 'lib/xcode',
-    'buildUploads_buildUploadFiles_getToManyRelated': 'apple/upload',
-    'buildUploads_createInstance': 'lib/xcode',
-    'buildUploads_getInstance': 'apple/upload',
+    'betaGroups_betaTesters_createToManyRelationship': 'lib\\testflight',
+    'betaGroups_betaTesters_deleteToManyRelationship': 'lib\\testflight',
+    'betaGroups_betaTesters_getToManyRelated': 'apple\\testflight',
+    'betaGroups_builds_createToManyRelationship': 'lib\\testflight',
+    'betaGroups_builds_getToManyRelated': 'apple\\testflight',
+    'betaGroups_builds_getToManyRelationship': 'apple\\testflight',
+    'betaGroups_createInstance': 'lib\\testflight',
+    'betaGroups_getInstance': 'apple\\testflight',
+    'betaTesterInvitations_createInstance': 'lib\\testflight',
+    'betaTesters_createInstance': 'lib\\testflight',
+    'betaTesters_getCollection': 'apple\\testflight',
+    'buildUploadFiles_createInstance': 'lib\\xcode',
+    'buildUploadFiles_updateInstance': 'lib\\xcode',
+    'buildUploads_buildUploadFiles_getToManyRelated': 'apple\\upload',
+    'buildUploads_createInstance': 'lib\\xcode',
+    'buildUploads_getInstance': 'apple\\upload',
     'builds_appEncryptionDeclaration_getToOneRelated': 'validate',
-    'builds_betaAppReviewSubmission_getToOneRelated': 'apple/testflight',
-    'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
+    'builds_betaAppReviewSubmission_getToOneRelated': 'apple\\testflight',
+    'builds_betaBuildLocalizations_getToManyRelated': 'apple\\testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
-    'builds_getCollection': 'apple/build apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
-    'builds_updateInstance': 'apple/encryption lib/build-ops',
-    'bundleIdCapabilities_createInstance': 'lib/signing',
-    'bundleIds_createInstance': 'apple/bundle',
-    'bundleIds_getCollection': 'apple/adhoc apple/bundle apple/signing',
-    'bundleIds_profiles_getToManyRelated': 'apple/adhoc lib/signing',
-    'certificates_createInstance': 'apple/signing lib/signing',
-    'certificates_getCollection': 'apple/adhoc apple/signing',
-    'customerReviewResponses_createInstance': 'lib/reviews',
-    'devices_createInstance': 'apple/adhoc',
-    'devices_getCollection': 'apple/adhoc',
+    'builds_getCollection': 'apple\\build apple\\encryption apple\\listing apple\\next-build apple\\resubmit apple\\status apple\\testflight apple\\upload art health lib\\store-apps triage',
+    'builds_updateInstance': 'apple\\encryption lib\\build-ops',
+    'bundleIdCapabilities_createInstance': 'lib\\signing',
+    'bundleIds_createInstance': 'apple\\bundle',
+    'bundleIds_getCollection': 'apple\\adhoc apple\\bundle apple\\signing',
+    'bundleIds_profiles_getToManyRelated': 'apple\\adhoc lib\\signing',
+    'certificates_createInstance': 'apple\\signing lib\\signing',
+    'certificates_getCollection': 'apple\\adhoc apple\\signing',
+    'customerReviewResponses_createInstance': 'lib\\reviews',
+    'devices_createInstance': 'apple\\adhoc',
+    'devices_getCollection': 'apple\\adhoc',
     'diagnosticSignatures_logs_getToManyRelated': 'health',
-    'endAppAvailabilityPreOrders_createInstance': 'lib/offers',
-    'financeReports_getCollection': 'lib/reports',
-    'gameCenterAchievements_localizations_getToManyRelated': 'apple/game-center',
-    'gameCenterAppVersions_createInstance': 'apple/game-center',
-    'gameCenterDetails_createInstance': 'apple/game-center',
-    'gameCenterDetails_gameCenterAchievements_getToManyRelated': 'apple/game-center',
-    'gameCenterDetails_gameCenterLeaderboards_getToManyRelated': 'apple/game-center',
-    'gameCenterLeaderboards_localizations_getToManyRelated': 'apple/game-center',
-    'inAppPurchaseAppStoreReviewScreenshots_createInstance': 'apple/iap-review',
-    'inAppPurchaseAppStoreReviewScreenshots_deleteInstance': 'apple/iap-review',
-    'inAppPurchaseAppStoreReviewScreenshots_updateInstance': 'apple/iap-review',
-    'inAppPurchaseAvailabilities_createInstance': 'apple/iap',
-    'inAppPurchaseLocalizations_createInstance': 'apple/iap',
-    'inAppPurchaseOfferCodeCustomCodes_createInstance': 'lib/offers',
-    'inAppPurchaseOfferCodeOneTimeUseCodes_createInstance': 'lib/offers',
-    'inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated': 'apple/offer-codes',
-    'inAppPurchaseOfferCodes_createInstance': 'apple/offer-codes',
-    'inAppPurchaseOfferCodes_customCodes_getToManyRelated': 'apple/offer-codes',
-    'inAppPurchaseOfferCodes_getInstance': 'apple/offer-codes',
-    'inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated': 'apple/offer-codes',
-    'inAppPurchasePricePoints_equalizations_getToManyRelated': 'apple/offer-codes prices-ppp',
+    'endAppAvailabilityPreOrders_createInstance': 'lib\\offers',
+    'financeReports_getCollection': 'lib\\reports',
+    'gameCenterAchievements_localizations_getToManyRelated': 'apple\\game-center',
+    'gameCenterAppVersions_createInstance': 'apple\\game-center',
+    'gameCenterDetails_createInstance': 'apple\\game-center',
+    'gameCenterDetails_gameCenterAchievements_getToManyRelated': 'apple\\game-center',
+    'gameCenterDetails_gameCenterLeaderboards_getToManyRelated': 'apple\\game-center',
+    'gameCenterLeaderboards_localizations_getToManyRelated': 'apple\\game-center',
+    'inAppPurchaseAppStoreReviewScreenshots_createInstance': 'apple\\iap-review',
+    'inAppPurchaseAppStoreReviewScreenshots_deleteInstance': 'apple\\iap-review',
+    'inAppPurchaseAppStoreReviewScreenshots_updateInstance': 'apple\\iap-review',
+    'inAppPurchaseAvailabilities_availableTerritories_getToManyRelated': 'apple\\iap',
+    'inAppPurchaseAvailabilities_createInstance': 'apple\\iap',
+    'inAppPurchaseLocalizations_createInstance': 'apple\\iap',
+    'inAppPurchaseLocalizations_updateInstance': 'apple\\iap',
+    'inAppPurchaseOfferCodeCustomCodes_createInstance': 'lib\\offers',
+    'inAppPurchaseOfferCodeOneTimeUseCodes_createInstance': 'lib\\offers',
+    'inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated': 'apple\\offer-codes',
+    'inAppPurchaseOfferCodes_createInstance': 'apple\\offer-codes',
+    'inAppPurchaseOfferCodes_customCodes_getToManyRelated': 'apple\\offer-codes',
+    'inAppPurchaseOfferCodes_getInstance': 'apple\\offer-codes',
+    'inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated': 'apple\\offer-codes',
+    'inAppPurchaseOfferCodes_prices_getToManyRelated': 'apple\\offer-codes',
+    'inAppPurchasePricePoints_equalizations_getToManyRelated': 'apple\\offer-codes prices-ppp',
     'inAppPurchasePriceSchedules_automaticPrices_getToManyRelated': 'prices',
     'inAppPurchasePriceSchedules_baseTerritory_getToOneRelated': 'prices',
-    'inAppPurchasePriceSchedules_createInstance': 'apple/iap prices',
+    'inAppPurchasePriceSchedules_createInstance': 'apple\\iap prices',
     'inAppPurchasePriceSchedules_manualPrices_getToManyRelated': 'prices',
-    'inAppPurchaseVersions_createInstance': 'lib/review-submit',
-    'inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated': 'apple/iap-review validate',
-    'inAppPurchasesV2_createInstance': 'apple/iap',
-    'inAppPurchasesV2_getInstance': 'apple/iap',
-    'inAppPurchasesV2_iapPriceSchedule_getToOneRelated': 'apple/iap apple/iap-review catalog',
-    'inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated': 'apple/iap apple/iap-review',
-    'inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated': 'apple/iap apple/iap-review catalog',
-    'inAppPurchasesV2_offerCodes_getToManyRelated': 'apple/offer-codes',
-    'inAppPurchasesV2_pricePoints_getToManyRelated': 'apple/iap apple/offer-codes prices prices-ppp',
-    'inAppPurchasesV2_versions_getToManyRelated': 'apple/first-products apple/iap-submit',
-    'profiles_certificates_getToManyRelationship': 'lib/signing',
-    'profiles_createInstance': 'apple/adhoc lib/signing',
-    'profiles_devices_getToManyRelated': 'apple/adhoc',
-    'profiles_getInstance': 'apple/signing',
-    'promotedPurchases_createInstance': 'lib/offers',
-    'promotedPurchases_updateInstance': 'lib/offers',
-    'reviewSubmissionItems_createInstance': 'apple/submission lib/cpp-events lib/review-submit',
-    'reviewSubmissionItems_updateInstance': 'apple/submission',
-    'reviewSubmissions_createInstance': 'apple/cpp apple/events apple/submission lib/review-submit',
-    'reviewSubmissions_getCollection': 'apple/events apple/iap-submit apple/status apple/submission',
-    'reviewSubmissions_getInstance': 'apple/submission',
-    'reviewSubmissions_items_getToManyRelated': 'apple/submission',
-    'reviewSubmissions_updateInstance': 'apple/cpp apple/events apple/status apple/submission lib/review-submit',
-    'salesReports_getCollection': 'lib/reports',
-    'subscriptionAppStoreReviewScreenshots_createInstance': 'apple/subscriptions',
-    'subscriptionAppStoreReviewScreenshots_deleteInstance': 'apple/subscriptions',
-    'subscriptionAppStoreReviewScreenshots_updateInstance': 'apple/subscriptions',
-    'subscriptionAvailabilities_createInstance': 'apple/subscriptions',
-    'subscriptionGroupLocalizations_createInstance': 'apple/subscriptions',
-    'subscriptionGroups_createInstance': 'apple/subscriptions',
-    'subscriptionGroups_getInstance': 'apple/subscriptions',
-    'subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated': 'apple/subscriptions validate',
-    'subscriptionGroups_subscriptions_getToManyRelated': 'apple/first-products apple/iap-submit apple/promoted apple/subscriptions apple/win-back catalog prices validate',
-    'subscriptionGroups_versions_getToManyRelated': 'apple/iap-submit',
-    'subscriptionLocalizations_createInstance': 'apple/subscriptions',
-    'subscriptionOfferCodeCustomCodes_createInstance': 'apple/subscriptions',
-    'subscriptionOfferCodes_createInstance': 'apple/subscriptions',
-    'subscriptionOfferCodes_customCodes_getToManyRelated': 'apple/subscriptions',
-    'subscriptionOfferCodes_getInstance': 'apple/subscriptions',
-    'subscriptionPricePoints_equalizations_getToManyRelated': 'apple/subscriptions apple/win-back',
-    'subscriptionPromotionalOffers_createInstance': 'apple/subscriptions',
-    'subscriptionVersions_createInstance': 'lib/review-submit',
-    'subscriptions_appStoreReviewScreenshot_getToOneRelated': 'apple/subscriptions validate',
-    'subscriptions_createInstance': 'apple/subscriptions',
-    'subscriptions_getInstance': 'apple/subscriptions',
-    'subscriptions_introductoryOffers_getToManyRelated': 'apple/subscriptions catalog',
-    'subscriptions_offerCodes_getToManyRelated': 'apple/subscriptions catalog',
-    'subscriptions_pricePoints_getToManyRelated': 'apple/subscriptions apple/win-back',
-    'subscriptions_prices_getToManyRelated': 'apple/subscriptions apple/win-back catalog prices',
-    'subscriptions_promotionalOffers_getToManyRelated': 'apple/subscriptions catalog',
-    'subscriptions_subscriptionAvailability_getToOneRelated': 'apple/subscriptions',
-    'subscriptions_subscriptionLocalizations_getToManyRelated': 'apple/subscriptions catalog validate',
-    'subscriptions_updateInstance': 'apple/subscriptions',
-    'subscriptions_versions_getToManyRelated': 'apple/first-products apple/iap-submit',
-    'subscriptions_winBackOffers_getToManyRelated': 'apple/win-back',
-    'territories_getCollection': 'apple/appinfo apple/events apple/iap apple/offer-codes apple/subscriptions',
-    'territoryAvailabilities_updateInstance': 'lib/offers',
-    'winBackOffers_createInstance': 'apple/win-back',
+    'inAppPurchaseVersions_createInstance': 'lib\\review-submit',
+    'inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated': 'apple\\iap-review validate',
+    'inAppPurchasesV2_createInstance': 'apple\\iap',
+    'inAppPurchasesV2_getInstance': 'apple\\iap',
+    'inAppPurchasesV2_iapPriceSchedule_getToOneRelated': 'apple\\iap apple\\iap-review catalog',
+    'inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated': 'apple\\iap apple\\iap-review',
+    'inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated': 'apple\\iap apple\\iap-review catalog',
+    'inAppPurchasesV2_offerCodes_getToManyRelated': 'apple\\offer-codes',
+    'inAppPurchasesV2_pricePoints_getToManyRelated': 'apple\\iap apple\\offer-codes prices prices-ppp',
+    'inAppPurchasesV2_updateInstance': 'apple\\iap',
+    'inAppPurchasesV2_versions_getToManyRelated': 'apple\\first-products apple\\iap-submit',
+    'profiles_certificates_getToManyRelationship': 'lib\\signing',
+    'profiles_createInstance': 'apple\\adhoc lib\\signing',
+    'profiles_devices_getToManyRelated': 'apple\\adhoc',
+    'profiles_getInstance': 'apple\\signing',
+    'promotedPurchases_createInstance': 'lib\\offers',
+    'promotedPurchases_updateInstance': 'lib\\offers',
+    'reviewSubmissionItems_createInstance': 'apple\\submission lib\\cpp-events lib\\review-submit',
+    'reviewSubmissionItems_updateInstance': 'apple\\submission',
+    'reviewSubmissions_createInstance': 'apple\\cpp apple\\events apple\\submission lib\\review-submit',
+    'reviewSubmissions_getCollection': 'apple\\events apple\\iap-submit apple\\status apple\\submission',
+    'reviewSubmissions_getInstance': 'apple\\submission',
+    'reviewSubmissions_items_getToManyRelated': 'apple\\submission',
+    'reviewSubmissions_updateInstance': 'apple\\cpp apple\\events apple\\status apple\\submission lib\\review-submit',
+    'salesReports_getCollection': 'lib\\reports',
+    'subscriptionAppStoreReviewScreenshots_createInstance': 'apple\\subscriptions',
+    'subscriptionAppStoreReviewScreenshots_deleteInstance': 'apple\\subscriptions',
+    'subscriptionAppStoreReviewScreenshots_updateInstance': 'apple\\subscriptions',
+    'subscriptionAvailabilities_availableTerritories_getToManyRelated': 'apple\\subscriptions',
+    'subscriptionAvailabilities_createInstance': 'apple\\subscriptions',
+    'subscriptionGroupLocalizations_createInstance': 'apple\\subscriptions',
+    'subscriptionGroupLocalizations_updateInstance': 'apple\\subscriptions',
+    'subscriptionGroups_createInstance': 'apple\\subscriptions',
+    'subscriptionGroups_getInstance': 'apple\\subscriptions',
+    'subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated': 'apple\\subscriptions validate',
+    'subscriptionGroups_subscriptions_getToManyRelated': 'apple\\first-products apple\\iap-submit apple\\promoted apple\\subscriptions apple\\win-back catalog prices validate',
+    'subscriptionGroups_versions_getToManyRelated': 'apple\\iap-submit',
+    'subscriptionLocalizations_createInstance': 'apple\\subscriptions',
+    'subscriptionLocalizations_updateInstance': 'apple\\subscriptions',
+    'subscriptionOfferCodeCustomCodes_createInstance': 'apple\\subscriptions',
+    'subscriptionOfferCodes_createInstance': 'apple\\subscriptions',
+    'subscriptionOfferCodes_customCodes_getToManyRelated': 'apple\\subscriptions',
+    'subscriptionOfferCodes_getInstance': 'apple\\subscriptions',
+    'subscriptionPricePoints_equalizations_getToManyRelated': 'apple\\subscriptions apple\\win-back',
+    'subscriptionPromotionalOffers_createInstance': 'apple\\subscriptions',
+    'subscriptionVersions_createInstance': 'lib\\review-submit',
+    'subscriptions_appStoreReviewScreenshot_getToOneRelated': 'apple\\subscriptions validate',
+    'subscriptions_createInstance': 'apple\\subscriptions',
+    'subscriptions_getInstance': 'apple\\subscriptions',
+    'subscriptions_introductoryOffers_getToManyRelated': 'apple\\subscriptions catalog',
+    'subscriptions_offerCodes_getToManyRelated': 'apple\\subscriptions catalog',
+    'subscriptions_pricePoints_getToManyRelated': 'apple\\subscriptions apple\\win-back',
+    'subscriptions_prices_getToManyRelated': 'apple\\subscriptions apple\\win-back catalog prices',
+    'subscriptions_promotionalOffers_getToManyRelated': 'apple\\subscriptions catalog',
+    'subscriptions_subscriptionAvailability_getToOneRelated': 'apple\\subscriptions',
+    'subscriptions_subscriptionLocalizations_getToManyRelated': 'apple\\subscriptions catalog validate',
+    'subscriptions_updateInstance': 'apple\\subscriptions',
+    'subscriptions_versions_getToManyRelated': 'apple\\first-products apple\\iap-submit',
+    'subscriptions_winBackOffers_getToManyRelated': 'apple\\win-back',
+    'territories_getCollection': 'apple\\appinfo apple\\events apple\\iap apple\\offer-codes apple\\subscriptions',
+    'territoryAvailabilities_updateInstance': 'lib\\offers',
+    'winBackOffers_createInstance': 'apple\\win-back',
+    'winBackOffers_prices_getToManyRelated': 'apple\\win-back',
   },
   play: {
-    'androidpublisher.applications.dataSafety': 'play/data-safety',
-    'androidpublisher.edits.apks.list': 'play/next-version-code',
-    'androidpublisher.edits.bundles.list': 'play/next-version-code',
-    'androidpublisher.edits.bundles.upload': 'play/release play/upload',
-    'androidpublisher.edits.commit': 'play/client',
+    'androidpublisher.applications.dataSafety': 'play\\data-safety',
+    'androidpublisher.edits.apks.list': 'play\\next-version-code',
+    'androidpublisher.edits.bundles.list': 'play\\next-version-code',
+    'androidpublisher.edits.bundles.upload': 'play\\release play\\upload',
+    'androidpublisher.edits.commit': 'play\\client',
     'androidpublisher.edits.countryavailability.get': 'validate',
-    'androidpublisher.edits.delete': 'apps onboard play/client validate',
-    'androidpublisher.edits.details.get': 'apps onboard play/listing play/status validate',
-    'androidpublisher.edits.details.update': 'play/listing',
-    'androidpublisher.edits.images.deleteall': 'play/images',
-    'androidpublisher.edits.images.list': 'apps art play/images validate',
-    'androidpublisher.edits.images.upload': 'play/images',
-    'androidpublisher.edits.insert': 'apps onboard play/client validate',
+    'androidpublisher.edits.delete': 'apps onboard play\\client validate',
+    'androidpublisher.edits.details.get': 'apps onboard play\\listing play\\status validate',
+    'androidpublisher.edits.details.update': 'play\\listing',
+    'androidpublisher.edits.images.deleteall': 'play\\images',
+    'androidpublisher.edits.images.list': 'apps art play\\images validate',
+    'androidpublisher.edits.images.upload': 'play\\images play\\listing',
+    'androidpublisher.edits.insert': 'apps onboard play\\client validate',
     'androidpublisher.edits.listings.get': 'onboard',
-    'androidpublisher.edits.listings.list': 'art listing-store play/listing play/status validate',
+    'androidpublisher.edits.listings.list': 'art listing-store play\\listing play\\status validate',
     'androidpublisher.edits.listings.patch': 'listing-store',
-    'androidpublisher.edits.listings.update': 'listing-store play/listing',
-    'androidpublisher.edits.tracks.get': 'play/release play/rollout play/upload',
-    'androidpublisher.edits.tracks.list': 'play/next-version-code play/status validate',
-    'androidpublisher.edits.tracks.update': 'play/release play/rollout play/upload',
-    'androidpublisher.edits.validate': 'play/client',
+    'androidpublisher.edits.listings.update': 'listing-store play\\listing',
+    'androidpublisher.edits.tracks.get': 'play\\release play\\rollout play\\upload',
+    'androidpublisher.edits.tracks.list': 'play\\next-version-code play\\status validate',
+    'androidpublisher.edits.tracks.update': 'play\\release play\\rollout play\\upload',
+    'androidpublisher.edits.validate': 'play\\client',
     'androidpublisher.generatedapks.list': 'web',
-    'androidpublisher.monetization.convertRegionPrices': 'play/products play/subscriptions prices prices-ppp',
+    'androidpublisher.monetization.convertRegionPrices': 'play\\products play\\subscriptions prices prices-ppp',
     'androidpublisher.monetization.onetimeproducts.get': 'prices',
-    'androidpublisher.monetization.onetimeproducts.list': 'play/products',
-    'androidpublisher.monetization.onetimeproducts.patch': 'play/products prices',
-    'androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates': 'play/products',
-    'androidpublisher.monetization.subscriptions.basePlans.activate': 'play/subscriptions',
-    'androidpublisher.monetization.subscriptions.basePlans.offers.list': 'catalog play/subscriptions',
-    'androidpublisher.monetization.subscriptions.create': 'play/subscriptions',
-    'androidpublisher.monetization.subscriptions.get': 'play/subscriptions prices',
-    'androidpublisher.monetization.subscriptions.list': 'catalog play/subscriptions validate',
-    'androidpublisher.monetization.subscriptions.patch': 'play/subscriptions',
+    'androidpublisher.monetization.onetimeproducts.list': 'play\\products',
+    'androidpublisher.monetization.onetimeproducts.patch': 'play\\products prices',
+    'androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates': 'play\\products',
+    'androidpublisher.monetization.subscriptions.basePlans.activate': 'play\\subscriptions',
+    'androidpublisher.monetization.subscriptions.basePlans.offers.list': 'catalog play\\subscriptions',
+    'androidpublisher.monetization.subscriptions.create': 'play\\subscriptions',
+    'androidpublisher.monetization.subscriptions.get': 'play\\subscriptions prices',
+    'androidpublisher.monetization.subscriptions.list': 'catalog play\\subscriptions validate',
+    'androidpublisher.monetization.subscriptions.patch': 'play\\subscriptions',
     'androidpublisher.reviews.list': 'reviews',
-    'androidpublisher.reviews.reply': 'lib/reviews',
-    'playdeveloperreporting.apps.search': 'apps lib/store-apps',
+    'androidpublisher.reviews.reply': 'lib\\reviews',
+    'playdeveloperreporting.apps.search': 'apps lib\\store-apps',
     'playdeveloperreporting.vitals.anrrate.query': 'health',
     'playdeveloperreporting.vitals.crashrate.get': 'health',
     'playdeveloperreporting.vitals.crashrate.query': 'health',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index b257ca2..c52f3fe 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -12,7 +12,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 
 | API | operations | GET | other | wrapped by a command | owner only |
 |---|---:|---:|---:|---:|---:|
-| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 222 | 166 |
+| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 232 | 166 |
 | Google Play Android Developer API v3 (revision 20261008) | 145 | 45 | 100 | 35 | 49 |
 | Google Play Developer Reporting API v1beta1 (revision 20261008) | 25 | 15 | 10 | 6 | 0 |
 
@@ -31,7 +31,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `actors_getCollection` | GET | `/v1/actors` | read |  |
 | `actors_getInstance` | GET | `/v1/actors/{id}` | read |  |
 | **ageRatingDeclarations** (1) | | | | |
-| `ageRatingDeclarations_updateInstance` | PATCH | `/v1/ageRatingDeclarations/{id}` | write (dry by default) | apple/appinfo |
+| `ageRatingDeclarations_updateInstance` | PATCH | `/v1/ageRatingDeclarations/{id}` | write (dry by default) | apple\appinfo |
 | **alternativeDistributionDomains** (4) | | | | |
 | `alternativeDistributionDomains_createInstance` | POST | `/v1/alternativeDistributionDomains` | write (dry by default) |  |
 | `alternativeDistributionDomains_deleteInstance` | DELETE | `/v1/alternativeDistributionDomains/{id}` | owner only (typed confirm) |  |
@@ -80,9 +80,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidToIosAppMappingDetails_updateInstance` | PATCH | `/v1/androidToIosAppMappingDetails/{id}` | write (dry by default) |  |
 | **appAssetLibraries** (5) | | | | |
 | `appAssetLibraries_getInstance` | GET | `/v1/appAssetLibraries/{id}` | read |  |
-| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple/creative-assets |
+| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple\creative-assets |
 | `appAssetLibraries_images_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/images` | read |  |
-| `appAssetLibraries_videos_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/videos` | read | apple/creative-assets |
+| `appAssetLibraries_videos_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/videos` | read | apple\creative-assets |
 | `appAssetLibraries_videos_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/videos` | read |  |
 | **appAssetLibraryImages** (6) | | | | |
 | `appAssetLibraryImages_createInstance` | POST | `/v1/appAssetLibraryImages` | write (dry by default) |  |
@@ -94,8 +94,8 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appAssetLibraryPlacementOrderingRequests** (1) | | | | |
 | `appAssetLibraryPlacementOrderingRequests_createInstance` | POST | `/v1/appAssetLibraryPlacementOrderingRequests` | write (dry by default) |  |
 | **appAssetLibraryPlacements** (3) | | | | |
-| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple/creative-assets |
-| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple/creative-assets |
+| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple\creative-assets |
+| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple\creative-assets |
 | `appAssetLibraryPlacements_getInstance` | GET | `/v1/appAssetLibraryPlacements/{id}` | read |  |
 | **appAssetLibraryRefData** (2) | | | | |
 | `appAssetLibraryRefData_getCollection` | GET | `/v1/appAssetLibraryRefData` | read |  |
@@ -108,9 +108,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appAssetLibraryVideos_placements_getToManyRelationship` | GET | `/v1/appAssetLibraryVideos/{id}/relationships/placements` | read |  |
 | `appAssetLibraryVideos_updateInstance` | PATCH | `/v1/appAssetLibraryVideos/{id}` | write (dry by default) |  |
 | **appAvailabilities** (4) | | | | |
-| `appAvailabilitiesV2_createInstance` | POST | `/v2/appAvailabilities` | write (dry by default) | apple/appinfo |
+| `appAvailabilitiesV2_createInstance` | POST | `/v2/appAvailabilities` | write (dry by default) | apple\appinfo |
 | `appAvailabilitiesV2_getInstance` | GET | `/v2/appAvailabilities/{id}` | read |  |
-| `appAvailabilitiesV2_territoryAvailabilities_getToManyRelated` | GET | `/v2/appAvailabilities/{id}/territoryAvailabilities` | read | apple/preorder |
+| `appAvailabilitiesV2_territoryAvailabilities_getToManyRelated` | GET | `/v2/appAvailabilities/{id}/territoryAvailabilities` | read | apple\appinfo, apple\preorder |
 | `appAvailabilitiesV2_territoryAvailabilities_getToManyRelationship` | GET | `/v2/appAvailabilities/{id}/relationships/territoryAvailabilities` | read |  |
 | **appCategories** (6) | | | | |
 | `appCategories_getCollection` | GET | `/v1/appCategories` | read |  |
@@ -164,9 +164,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appCustomProductPageLocalizations** (14) | | | | |
 | `appCustomProductPageLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/appPreviewSets` | read |  |
 | `appCustomProductPageLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appCustomProductPageLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/appScreenshotSets` | read | apple/cpp |
+| `appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/appScreenshotSets` | read | apple\cpp |
 | `appCustomProductPageLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appCustomProductPageLocalizations/{id}/relationships/appScreenshotSets` | read |  |
-| `appCustomProductPageLocalizations_createInstance` | POST | `/v1/appCustomProductPageLocalizations` | write (dry by default) | lib/cpp-events |
+| `appCustomProductPageLocalizations_createInstance` | POST | `/v1/appCustomProductPageLocalizations` | write (dry by default) | lib\cpp-events |
 | `appCustomProductPageLocalizations_deleteInstance` | DELETE | `/v1/appCustomProductPageLocalizations/{id}` | owner only (typed confirm) |  |
 | `appCustomProductPageLocalizations_getInstance` | GET | `/v1/appCustomProductPageLocalizations/{id}` | read |  |
 | `appCustomProductPageLocalizations_placements_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/placements` | read |  |
@@ -175,20 +175,20 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appCustomProductPageLocalizations_searchKeywords_deleteToManyRelationship` | DELETE | `/v1/appCustomProductPageLocalizations/{id}/relationships/searchKeywords` | owner only (typed confirm) |  |
 | `appCustomProductPageLocalizations_searchKeywords_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/searchKeywords` | read |  |
 | `appCustomProductPageLocalizations_searchKeywords_getToManyRelationship` | GET | `/v1/appCustomProductPageLocalizations/{id}/relationships/searchKeywords` | read |  |
-| `appCustomProductPageLocalizations_updateInstance` | PATCH | `/v1/appCustomProductPageLocalizations/{id}` | write (dry by default) | lib/cpp-events |
+| `appCustomProductPageLocalizations_updateInstance` | PATCH | `/v1/appCustomProductPageLocalizations/{id}` | write (dry by default) | lib\cpp-events |
 | **appCustomProductPageVersions** (5) | | | | |
-| `appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated` | GET | `/v1/appCustomProductPageVersions/{id}/appCustomProductPageLocalizations` | read | apple/cpp |
+| `appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated` | GET | `/v1/appCustomProductPageVersions/{id}/appCustomProductPageLocalizations` | read | apple\cpp |
 | `appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelationship` | GET | `/v1/appCustomProductPageVersions/{id}/relationships/appCustomProductPageLocalizations` | read |  |
 | `appCustomProductPageVersions_createInstance` | POST | `/v1/appCustomProductPageVersions` | write (dry by default) |  |
 | `appCustomProductPageVersions_getInstance` | GET | `/v1/appCustomProductPageVersions/{id}` | read |  |
-| `appCustomProductPageVersions_updateInstance` | PATCH | `/v1/appCustomProductPageVersions/{id}` | write (dry by default) | apple/cpp |
+| `appCustomProductPageVersions_updateInstance` | PATCH | `/v1/appCustomProductPageVersions/{id}` | write (dry by default) | lib\cpp-events |
 | **appCustomProductPages** (6) | | | | |
-| `appCustomProductPages_appCustomProductPageVersions_getToManyRelated` | GET | `/v1/appCustomProductPages/{id}/appCustomProductPageVersions` | read | apple/cpp |
+| `appCustomProductPages_appCustomProductPageVersions_getToManyRelated` | GET | `/v1/appCustomProductPages/{id}/appCustomProductPageVersions` | read | apple\cpp |
 | `appCustomProductPages_appCustomProductPageVersions_getToManyRelationship` | GET | `/v1/appCustomProductPages/{id}/relationships/appCustomProductPageVersions` | read |  |
-| `appCustomProductPages_createInstance` | POST | `/v1/appCustomProductPages` | write (dry by default) | apple/cpp |
+| `appCustomProductPages_createInstance` | POST | `/v1/appCustomProductPages` | write (dry by default) | apple\cpp |
 | `appCustomProductPages_deleteInstance` | DELETE | `/v1/appCustomProductPages/{id}` | owner only (typed confirm) |  |
-| `appCustomProductPages_getInstance` | GET | `/v1/appCustomProductPages/{id}` | read | apple/cpp |
-| `appCustomProductPages_updateInstance` | PATCH | `/v1/appCustomProductPages/{id}` | write (dry by default) | apple/cpp |
+| `appCustomProductPages_getInstance` | GET | `/v1/appCustomProductPages/{id}` | read | apple\cpp |
+| `appCustomProductPages_updateInstance` | PATCH | `/v1/appCustomProductPages/{id}` | write (dry by default) | apple\cpp |
 | **appEncryptionDeclarationDocuments** (3) | | | | |
 | `appEncryptionDeclarationDocuments_createInstance` | POST | `/v1/appEncryptionDeclarationDocuments` | write (dry by default) |  |
 | `appEncryptionDeclarationDocuments_getInstance` | GET | `/v1/appEncryptionDeclarationDocuments/{id}` | read |  |
@@ -200,47 +200,47 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appEncryptionDeclarations_app_getToOneRelationship` | GET | `/v1/appEncryptionDeclarations/{id}/relationships/app` | read |  |
 | `appEncryptionDeclarations_builds_createToManyRelationship` | POST | `/v1/appEncryptionDeclarations/{id}/relationships/builds` | write (dry by default) |  |
 | `appEncryptionDeclarations_createInstance` | POST | `/v1/appEncryptionDeclarations` | write (dry by default) |  |
-| `appEncryptionDeclarations_getCollection` | GET | `/v1/appEncryptionDeclarations` | read | apple/encryption |
+| `appEncryptionDeclarations_getCollection` | GET | `/v1/appEncryptionDeclarations` | read | apple\encryption |
 | `appEncryptionDeclarations_getInstance` | GET | `/v1/appEncryptionDeclarations/{id}` | read |  |
 | **appEventLocalizations** (10) | | | | |
-| `appEventLocalizations_appEventScreenshots_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/appEventScreenshots` | read | apple/events |
+| `appEventLocalizations_appEventScreenshots_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/appEventScreenshots` | read | apple\events |
 | `appEventLocalizations_appEventScreenshots_getToManyRelationship` | GET | `/v1/appEventLocalizations/{id}/relationships/appEventScreenshots` | read |  |
 | `appEventLocalizations_appEventVideoClips_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/appEventVideoClips` | read |  |
 | `appEventLocalizations_appEventVideoClips_getToManyRelationship` | GET | `/v1/appEventLocalizations/{id}/relationships/appEventVideoClips` | read |  |
-| `appEventLocalizations_createInstance` | POST | `/v1/appEventLocalizations` | write (dry by default) | lib/cpp-events |
+| `appEventLocalizations_createInstance` | POST | `/v1/appEventLocalizations` | write (dry by default) | lib\cpp-events |
 | `appEventLocalizations_deleteInstance` | DELETE | `/v1/appEventLocalizations/{id}` | owner only (typed confirm) |  |
 | `appEventLocalizations_getInstance` | GET | `/v1/appEventLocalizations/{id}` | read |  |
 | `appEventLocalizations_placements_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/placements` | read |  |
 | `appEventLocalizations_placements_getToManyRelationship` | GET | `/v1/appEventLocalizations/{id}/relationships/placements` | read |  |
-| `appEventLocalizations_updateInstance` | PATCH | `/v1/appEventLocalizations/{id}` | write (dry by default) | lib/cpp-events |
+| `appEventLocalizations_updateInstance` | PATCH | `/v1/appEventLocalizations/{id}` | write (dry by default) | lib\cpp-events |
 | **appEventScreenshots** (4) | | | | |
-| `appEventScreenshots_createInstance` | POST | `/v1/appEventScreenshots` | write (dry by default) | apple/events |
-| `appEventScreenshots_deleteInstance` | DELETE | `/v1/appEventScreenshots/{id}` | owner only (typed confirm) | apple/events |
+| `appEventScreenshots_createInstance` | POST | `/v1/appEventScreenshots` | write (dry by default) | apple\events |
+| `appEventScreenshots_deleteInstance` | DELETE | `/v1/appEventScreenshots/{id}` | owner only (typed confirm) | apple\events |
 | `appEventScreenshots_getInstance` | GET | `/v1/appEventScreenshots/{id}` | read |  |
-| `appEventScreenshots_updateInstance` | PATCH | `/v1/appEventScreenshots/{id}` | write (dry by default) | apple/events |
+| `appEventScreenshots_updateInstance` | PATCH | `/v1/appEventScreenshots/{id}` | write (dry by default) | apple\events |
 | **appEventVideoClips** (4) | | | | |
 | `appEventVideoClips_createInstance` | POST | `/v1/appEventVideoClips` | write (dry by default) |  |
 | `appEventVideoClips_deleteInstance` | DELETE | `/v1/appEventVideoClips/{id}` | owner only (typed confirm) |  |
 | `appEventVideoClips_getInstance` | GET | `/v1/appEventVideoClips/{id}` | read |  |
 | `appEventVideoClips_updateInstance` | PATCH | `/v1/appEventVideoClips/{id}` | write (dry by default) |  |
 | **appEvents** (6) | | | | |
-| `appEvents_createInstance` | POST | `/v1/appEvents` | write (dry by default) | apple/events |
+| `appEvents_createInstance` | POST | `/v1/appEvents` | write (dry by default) | apple\events |
 | `appEvents_deleteInstance` | DELETE | `/v1/appEvents/{id}` | owner only (typed confirm) |  |
-| `appEvents_getInstance` | GET | `/v1/appEvents/{id}` | read | apple/events |
-| `appEvents_localizations_getToManyRelated` | GET | `/v1/appEvents/{id}/localizations` | read | apple/events |
+| `appEvents_getInstance` | GET | `/v1/appEvents/{id}` | read | apple\events |
+| `appEvents_localizations_getToManyRelated` | GET | `/v1/appEvents/{id}/localizations` | read | apple\events |
 | `appEvents_localizations_getToManyRelationship` | GET | `/v1/appEvents/{id}/relationships/localizations` | read |  |
-| `appEvents_updateInstance` | PATCH | `/v1/appEvents/{id}` | write (dry by default) |  |
+| `appEvents_updateInstance` | PATCH | `/v1/appEvents/{id}` | write (dry by default) | lib\cpp-events |
 | **appInfoLocalizations** (4) | | | | |
 | `appInfoLocalizations_createInstance` | POST | `/v1/appInfoLocalizations` | write (dry by default) | listing-store |
 | `appInfoLocalizations_deleteInstance` | DELETE | `/v1/appInfoLocalizations/{id}` | owner only (typed confirm) |  |
 | `appInfoLocalizations_getInstance` | GET | `/v1/appInfoLocalizations/{id}` | read |  |
 | `appInfoLocalizations_updateInstance` | PATCH | `/v1/appInfoLocalizations/{id}` | write (dry by default) | listing-store |
 | **appInfos** (20) | | | | |
-| `appInfos_ageRatingDeclaration_getToOneRelated` | GET | `/v1/appInfos/{id}/ageRatingDeclaration` | read | apple/appinfo, console/verify, validate |
+| `appInfos_ageRatingDeclaration_getToOneRelated` | GET | `/v1/appInfos/{id}/ageRatingDeclaration` | read | apple\appinfo, console\verify, validate |
 | `appInfos_ageRatingDeclaration_getToOneRelationship` | GET | `/v1/appInfos/{id}/relationships/ageRatingDeclaration` | read |  |
-| `appInfos_appInfoLocalizations_getToManyRelated` | GET | `/v1/appInfos/{id}/appInfoLocalizations` | read | apple/listing, listing-store, onboard, validate |
+| `appInfos_appInfoLocalizations_getToManyRelated` | GET | `/v1/appInfos/{id}/appInfoLocalizations` | read | apple\listing, listing-store, onboard, validate |
 | `appInfos_appInfoLocalizations_getToManyRelationship` | GET | `/v1/appInfos/{id}/relationships/appInfoLocalizations` | read |  |
-| `appInfos_getInstance` | GET | `/v1/appInfos/{id}` | read | apple/appinfo |
+| `appInfos_getInstance` | GET | `/v1/appInfos/{id}` | read | apple\appinfo |
 | `appInfos_primaryCategory_getToOneRelated` | GET | `/v1/appInfos/{id}/primaryCategory` | read |  |
 | `appInfos_primaryCategory_getToOneRelationship` | GET | `/v1/appInfos/{id}/relationships/primaryCategory` | read |  |
 | `appInfos_primarySubcategoryOne_getToOneRelated` | GET | `/v1/appInfos/{id}/primarySubcategoryOne` | read |  |
@@ -255,19 +255,19 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appInfos_secondarySubcategoryTwo_getToOneRelationship` | GET | `/v1/appInfos/{id}/relationships/secondarySubcategoryTwo` | read |  |
 | `appInfos_territoryAgeRatings_getToManyRelated` | GET | `/v1/appInfos/{id}/territoryAgeRatings` | read |  |
 | `appInfos_territoryAgeRatings_getToManyRelationship` | GET | `/v1/appInfos/{id}/relationships/territoryAgeRatings` | read |  |
-| `appInfos_updateInstance` | PATCH | `/v1/appInfos/{id}` | write (dry by default) | apple/appinfo |
+| `appInfos_updateInstance` | PATCH | `/v1/appInfos/{id}` | write (dry by default) | apple\appinfo |
 | **appPreviewSets** (6) | | | | |
-| `appPreviewSets_appPreviews_getToManyRelated` | GET | `/v1/appPreviewSets/{id}/appPreviews` | read | apple/previews, art |
+| `appPreviewSets_appPreviews_getToManyRelated` | GET | `/v1/appPreviewSets/{id}/appPreviews` | read | apple\previews, art |
 | `appPreviewSets_appPreviews_getToManyRelationship` | GET | `/v1/appPreviewSets/{id}/relationships/appPreviews` | read |  |
 | `appPreviewSets_appPreviews_replaceToManyRelationship` | PATCH | `/v1/appPreviewSets/{id}/relationships/appPreviews` | write (dry by default) |  |
-| `appPreviewSets_createInstance` | POST | `/v1/appPreviewSets` | write (dry by default) | apple/previews |
+| `appPreviewSets_createInstance` | POST | `/v1/appPreviewSets` | write (dry by default) | apple\previews |
 | `appPreviewSets_deleteInstance` | DELETE | `/v1/appPreviewSets/{id}` | owner only (typed confirm) |  |
 | `appPreviewSets_getInstance` | GET | `/v1/appPreviewSets/{id}` | read |  |
 | **appPreviews** (4) | | | | |
 | `appPreviews_createInstance` | POST | `/v1/appPreviews` | write (dry by default) |  |
 | `appPreviews_deleteInstance` | DELETE | `/v1/appPreviews/{id}` | owner only (typed confirm) |  |
 | `appPreviews_getInstance` | GET | `/v1/appPreviews/{id}` | read |  |
-| `appPreviews_updateInstance` | PATCH | `/v1/appPreviews/{id}` | write (dry by default) | apple/previews |
+| `appPreviews_updateInstance` | PATCH | `/v1/appPreviews/{id}` | write (dry by default) | apple\previews |
 | **appPricePoints** (3) | | | | |
 | `appPricePointsV3_equalizations_getToManyRelated` | GET | `/v3/appPricePoints/{id}/equalizations` | read |  |
 | `appPricePointsV3_equalizations_getToManyRelationship` | GET | `/v3/appPricePoints/{id}/relationships/equalizations` | read |  |
@@ -277,22 +277,22 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appPriceSchedules_automaticPrices_getToManyRelationship` | GET | `/v1/appPriceSchedules/{id}/relationships/automaticPrices` | read |  |
 | `appPriceSchedules_baseTerritory_getToOneRelated` | GET | `/v1/appPriceSchedules/{id}/baseTerritory` | read |  |
 | `appPriceSchedules_baseTerritory_getToOneRelationship` | GET | `/v1/appPriceSchedules/{id}/relationships/baseTerritory` | read |  |
-| `appPriceSchedules_createInstance` | POST | `/v1/appPriceSchedules` | owner only (typed confirm) | apple/appinfo |
+| `appPriceSchedules_createInstance` | POST | `/v1/appPriceSchedules` | owner only (typed confirm) | apple\appinfo |
 | `appPriceSchedules_getInstance` | GET | `/v1/appPriceSchedules/{id}` | read |  |
-| `appPriceSchedules_manualPrices_getToManyRelated` | GET | `/v1/appPriceSchedules/{id}/manualPrices` | read |  |
+| `appPriceSchedules_manualPrices_getToManyRelated` | GET | `/v1/appPriceSchedules/{id}/manualPrices` | read | apple\appinfo |
 | `appPriceSchedules_manualPrices_getToManyRelationship` | GET | `/v1/appPriceSchedules/{id}/relationships/manualPrices` | read |  |
 | **appScreenshotSets** (6) | | | | |
-| `appScreenshotSets_appScreenshots_getToManyRelated` | GET | `/v1/appScreenshotSets/{id}/appScreenshots` | read | apple/ppo, apple/screenshot-health, apple/screenshots, art, validate |
+| `appScreenshotSets_appScreenshots_getToManyRelated` | GET | `/v1/appScreenshotSets/{id}/appScreenshots` | read | apple\ppo, apple\screenshot-health, apple\screenshots, art, validate |
 | `appScreenshotSets_appScreenshots_getToManyRelationship` | GET | `/v1/appScreenshotSets/{id}/relationships/appScreenshots` | read |  |
-| `appScreenshotSets_appScreenshots_replaceToManyRelationship` | PATCH | `/v1/appScreenshotSets/{id}/relationships/appScreenshots` | write (dry by default) | apple/screenshot-health |
-| `appScreenshotSets_createInstance` | POST | `/v1/appScreenshotSets` | write (dry by default) | apple/screenshots |
+| `appScreenshotSets_appScreenshots_replaceToManyRelationship` | PATCH | `/v1/appScreenshotSets/{id}/relationships/appScreenshots` | write (dry by default) | apple\screenshot-health |
+| `appScreenshotSets_createInstance` | POST | `/v1/appScreenshotSets` | write (dry by default) | apple\screenshots |
 | `appScreenshotSets_deleteInstance` | DELETE | `/v1/appScreenshotSets/{id}` | owner only (typed confirm) |  |
 | `appScreenshotSets_getInstance` | GET | `/v1/appScreenshotSets/{id}` | read |  |
 | **appScreenshots** (4) | | | | |
-| `appScreenshots_createInstance` | POST | `/v1/appScreenshots` | write (dry by default) | apple/screenshot-health |
-| `appScreenshots_deleteInstance` | DELETE | `/v1/appScreenshots/{id}` | owner only (typed confirm) | apple/screenshot-health |
+| `appScreenshots_createInstance` | POST | `/v1/appScreenshots` | write (dry by default) | apple\screenshot-health |
+| `appScreenshots_deleteInstance` | DELETE | `/v1/appScreenshots/{id}` | owner only (typed confirm) | apple\screenshot-health |
 | `appScreenshots_getInstance` | GET | `/v1/appScreenshots/{id}` | read |  |
-| `appScreenshots_updateInstance` | PATCH | `/v1/appScreenshots/{id}` | write (dry by default) | apple/screenshot-health |
+| `appScreenshots_updateInstance` | PATCH | `/v1/appScreenshots/{id}` | write (dry by default) | apple\screenshot-health |
 | **appStoreReviewAttachments** (4) | | | | |
 | `appStoreReviewAttachments_createInstance` | POST | `/v1/appStoreReviewAttachments` | write (dry by default) |  |
 | `appStoreReviewAttachments_deleteInstance` | DELETE | `/v1/appStoreReviewAttachments/{id}` | owner only (typed confirm) |  |
@@ -301,33 +301,33 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appStoreReviewDetails** (5) | | | | |
 | `appStoreReviewDetails_appStoreReviewAttachments_getToManyRelated` | GET | `/v1/appStoreReviewDetails/{id}/appStoreReviewAttachments` | read |  |
 | `appStoreReviewDetails_appStoreReviewAttachments_getToManyRelationship` | GET | `/v1/appStoreReviewDetails/{id}/relationships/appStoreReviewAttachments` | read |  |
-| `appStoreReviewDetails_createInstance` | POST | `/v1/appStoreReviewDetails` | write (dry by default) | apple/review-details |
+| `appStoreReviewDetails_createInstance` | POST | `/v1/appStoreReviewDetails` | write (dry by default) | apple\review-details |
 | `appStoreReviewDetails_getInstance` | GET | `/v1/appStoreReviewDetails/{id}` | read |  |
-| `appStoreReviewDetails_updateInstance` | PATCH | `/v1/appStoreReviewDetails/{id}` | write (dry by default) | apple/review-details |
+| `appStoreReviewDetails_updateInstance` | PATCH | `/v1/appStoreReviewDetails/{id}` | write (dry by default) | apple\review-details |
 | **appStoreVersionExperimentTreatmentLocalizations** (9) | | | | |
 | `appStoreVersionExperimentTreatmentLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/appPreviewSets` | read |  |
 | `appStoreVersionExperimentTreatmentLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/appScreenshotSets` | read | apple/ppo |
+| `appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/appScreenshotSets` | read | apple\ppo |
 | `appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/relationships/appScreenshotSets` | read |  |
-| `appStoreVersionExperimentTreatmentLocalizations_createInstance` | POST | `/v1/appStoreVersionExperimentTreatmentLocalizations` | write (dry by default) | lib/ppo |
+| `appStoreVersionExperimentTreatmentLocalizations_createInstance` | POST | `/v1/appStoreVersionExperimentTreatmentLocalizations` | write (dry by default) | lib\ppo |
 | `appStoreVersionExperimentTreatmentLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}` | owner only (typed confirm) |  |
 | `appStoreVersionExperimentTreatmentLocalizations_getInstance` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}` | read |  |
 | `appStoreVersionExperimentTreatmentLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/placements` | read |  |
 | `appStoreVersionExperimentTreatmentLocalizations_placements_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/relationships/placements` | read |  |
 | **appStoreVersionExperimentTreatments** (6) | | | | |
-| `appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatments/{id}/appStoreVersionExperimentTreatmentLocalizations` | read | apple/ppo |
+| `appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatments/{id}/appStoreVersionExperimentTreatmentLocalizations` | read | apple\ppo |
 | `appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatments/{id}/relationships/appStoreVersionExperimentTreatmentLocalizations` | read |  |
-| `appStoreVersionExperimentTreatments_createInstance` | POST | `/v1/appStoreVersionExperimentTreatments` | write (dry by default) | lib/ppo |
+| `appStoreVersionExperimentTreatments_createInstance` | POST | `/v1/appStoreVersionExperimentTreatments` | write (dry by default) | lib\ppo |
 | `appStoreVersionExperimentTreatments_deleteInstance` | DELETE | `/v1/appStoreVersionExperimentTreatments/{id}` | owner only (typed confirm) |  |
-| `appStoreVersionExperimentTreatments_getInstance` | GET | `/v1/appStoreVersionExperimentTreatments/{id}` | read | apple/ppo |
+| `appStoreVersionExperimentTreatments_getInstance` | GET | `/v1/appStoreVersionExperimentTreatments/{id}` | read | apple\ppo |
 | `appStoreVersionExperimentTreatments_updateInstance` | PATCH | `/v1/appStoreVersionExperimentTreatments/{id}` | write (dry by default) |  |
 | **appStoreVersionExperiments** (12) | | | | |
-| `appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated` | GET | `/v2/appStoreVersionExperiments/{id}/appStoreVersionExperimentTreatments` | read | apple/ppo |
+| `appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated` | GET | `/v2/appStoreVersionExperiments/{id}/appStoreVersionExperimentTreatments` | read | apple\ppo |
 | `appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelationship` | GET | `/v2/appStoreVersionExperiments/{id}/relationships/appStoreVersionExperimentTreatments` | read |  |
-| `appStoreVersionExperimentsV2_createInstance` | POST | `/v2/appStoreVersionExperiments` | write (dry by default) | lib/ppo |
+| `appStoreVersionExperimentsV2_createInstance` | POST | `/v2/appStoreVersionExperiments` | write (dry by default) | lib\ppo |
 | `appStoreVersionExperimentsV2_deleteInstance` | DELETE | `/v2/appStoreVersionExperiments/{id}` | owner only (typed confirm) |  |
-| `appStoreVersionExperimentsV2_getInstance` | GET | `/v2/appStoreVersionExperiments/{id}` | read | apple/ppo |
-| `appStoreVersionExperimentsV2_updateInstance` | PATCH | `/v2/appStoreVersionExperiments/{id}` | owner only (typed confirm) | lib/ppo |
+| `appStoreVersionExperimentsV2_getInstance` | GET | `/v2/appStoreVersionExperiments/{id}` | read | apple\ppo |
+| `appStoreVersionExperimentsV2_updateInstance` | PATCH | `/v2/appStoreVersionExperiments/{id}` | owner only (typed confirm) | lib\ppo |
 | `appStoreVersionExperiments_appStoreVersionExperimentTreatments_getToManyRelated` | GET | `/v1/appStoreVersionExperiments/{id}/appStoreVersionExperimentTreatments` | read |  |
 | `appStoreVersionExperiments_appStoreVersionExperimentTreatments_getToManyRelationship` | GET | `/v1/appStoreVersionExperiments/{id}/relationships/appStoreVersionExperimentTreatments` | read |  |
 | `appStoreVersionExperiments_createInstance` | POST | `/v1/appStoreVersionExperiments` | write (dry by default) |  |
@@ -335,14 +335,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersionExperiments_getInstance` | GET | `/v1/appStoreVersionExperiments/{id}` | read |  |
 | `appStoreVersionExperiments_updateInstance` | PATCH | `/v1/appStoreVersionExperiments/{id}` | owner only (typed confirm) |  |
 | **appStoreVersionLocalizations** (14) | | | | |
-| `appStoreVersionLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appPreviewSets` | read | apple/previews, art |
+| `appStoreVersionLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appPreviewSets` | read | apple\previews, art |
 | `appStoreVersionLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple/screenshot-health, apple/screenshots, art, validate |
+| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple\screenshot-health, apple\screenshots, art, validate |
 | `appStoreVersionLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appScreenshotSets` | read |  |
 | `appStoreVersionLocalizations_createInstance` | POST | `/v1/appStoreVersionLocalizations` | write (dry by default) | listing-store |
 | `appStoreVersionLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionLocalizations/{id}` | owner only (typed confirm) |  |
 | `appStoreVersionLocalizations_getInstance` | GET | `/v1/appStoreVersionLocalizations/{id}` | read |  |
-| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple/creative-assets |
+| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple\creative-assets |
 | `appStoreVersionLocalizations_placements_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/placements` | read |  |
 | `appStoreVersionLocalizations_searchKeywords_createToManyRelationship` | POST | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | write (dry by default) |  |
 | `appStoreVersionLocalizations_searchKeywords_deleteToManyRelationship` | DELETE | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | owner only (typed confirm) |  |
@@ -350,13 +350,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersionLocalizations_searchKeywords_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | read |  |
 | `appStoreVersionLocalizations_updateInstance` | PATCH | `/v1/appStoreVersionLocalizations/{id}` | write (dry by default) | listing-store |
 | **appStoreVersionPhasedReleases** (3) | | | | |
-| `appStoreVersionPhasedReleases_createInstance` | POST | `/v1/appStoreVersionPhasedReleases` | write (dry by default) | apple/release |
+| `appStoreVersionPhasedReleases_createInstance` | POST | `/v1/appStoreVersionPhasedReleases` | write (dry by default) | apple\release |
 | `appStoreVersionPhasedReleases_deleteInstance` | DELETE | `/v1/appStoreVersionPhasedReleases/{id}` | owner only (typed confirm) |  |
-| `appStoreVersionPhasedReleases_updateInstance` | PATCH | `/v1/appStoreVersionPhasedReleases/{id}` | owner only (typed confirm) | apple/release |
+| `appStoreVersionPhasedReleases_updateInstance` | PATCH | `/v1/appStoreVersionPhasedReleases/{id}` | owner only (typed confirm) | apple\release |
 | **appStoreVersionPromotions** (1) | | | | |
 | `appStoreVersionPromotions_createInstance` | POST | `/v1/appStoreVersionPromotions` | write (dry by default) |  |
 | **appStoreVersionReleaseRequests** (1) | | | | |
-| `appStoreVersionReleaseRequests_createInstance` | POST | `/v1/appStoreVersionReleaseRequests` | owner only (typed confirm) | apple/release |
+| `appStoreVersionReleaseRequests_createInstance` | POST | `/v1/appStoreVersionReleaseRequests` | owner only (typed confirm) | apple\release |
 | **appStoreVersionSubmissions** (1) | | | | |
 | `appStoreVersionSubmissions_deleteInstance` | DELETE | `/v1/appStoreVersionSubmissions/{id}` | owner only (typed confirm) |  |
 | **appStoreVersions** (30) | | | | |
@@ -365,31 +365,31 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersions_appClipDefaultExperience_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appClipDefaultExperience` | read |  |
 | `appStoreVersions_appClipDefaultExperience_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appClipDefaultExperience` | read |  |
 | `appStoreVersions_appClipDefaultExperience_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/appClipDefaultExperience` | write (dry by default) |  |
-| `appStoreVersions_appStoreReviewDetail_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreReviewDetail` | read | apple/review-details, onboard, validate |
+| `appStoreVersions_appStoreReviewDetail_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreReviewDetail` | read | apple\review-details, onboard, validate |
 | `appStoreVersions_appStoreReviewDetail_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreReviewDetail` | read |  |
 | `appStoreVersions_appStoreVersionExperimentsV2_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionExperimentsV2` | read |  |
 | `appStoreVersions_appStoreVersionExperimentsV2_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperimentsV2` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionExperiments` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperiments` | read |  |
-| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple/creative-assets, apple/listing, apple/previews, apple/screenshot-health, apple/screenshots, art, listing-store, onboard, validate |
+| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple\creative-assets, apple\listing, apple\previews, apple\screenshot-health, apple\screenshots, art, listing-store, onboard, validate |
 | `appStoreVersions_appStoreVersionLocalizations_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionLocalizations` | read |  |
-| `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionPhasedRelease` | read | apple/release, apple/status |
+| `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionPhasedRelease` | read | apple\release, apple\status |
 | `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionPhasedRelease` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionSubmission` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionSubmission` | read |  |
-| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple/listing, apple/resubmit, validate |
+| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple\listing, apple\resubmit, validate |
 | `appStoreVersions_build_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/build` | read |  |
-| `appStoreVersions_build_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/build` | write (dry by default) | apple/listing, apple/resubmit |
-| `appStoreVersions_createInstance` | POST | `/v1/appStoreVersions` | write (dry by default) | apple/listing |
+| `appStoreVersions_build_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/build` | write (dry by default) | apple\listing, apple\resubmit |
+| `appStoreVersions_createInstance` | POST | `/v1/appStoreVersions` | write (dry by default) | apple\listing |
 | `appStoreVersions_customerReviews_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/customerReviews` | read |  |
 | `appStoreVersions_customerReviews_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/customerReviews` | read |  |
 | `appStoreVersions_deleteInstance` | DELETE | `/v1/appStoreVersions/{id}` | owner only (typed confirm) |  |
-| `appStoreVersions_gameCenterAppVersion_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/gameCenterAppVersion` | read | apple/game-center |
+| `appStoreVersions_gameCenterAppVersion_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/gameCenterAppVersion` | read | apple\game-center |
 | `appStoreVersions_gameCenterAppVersion_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/gameCenterAppVersion` | read |  |
-| `appStoreVersions_getInstance` | GET | `/v1/appStoreVersions/{id}` | read | apple/listing |
+| `appStoreVersions_getInstance` | GET | `/v1/appStoreVersions/{id}` | read | apple\listing |
 | `appStoreVersions_routingAppCoverage_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/routingAppCoverage` | read |  |
 | `appStoreVersions_routingAppCoverage_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/routingAppCoverage` | read |  |
-| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple/listing |
+| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple\listing |
 | **appTags** (3) | | | | |
 | `appTags_territories_getToManyRelated` | GET | `/v1/appTags/{id}/territories` | read |  |
 | `appTags_territories_getToManyRelationship` | GET | `/v1/appTags/{id}/relationships/territories` | read |  |
@@ -403,47 +403,47 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_analyticsReportRequests_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/analyticsReportRequests` | read |  |
 | `apps_androidToIosAppMappingDetails_getToManyRelated` | GET | `/v1/apps/{id}/androidToIosAppMappingDetails` | read |  |
 | `apps_androidToIosAppMappingDetails_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/androidToIosAppMappingDetails` | read |  |
-| `apps_appAvailabilityV2_getToOneRelated` | GET | `/v1/apps/{id}/appAvailabilityV2` | read | apple/appinfo, apple/preorder, validate |
+| `apps_appAvailabilityV2_getToOneRelated` | GET | `/v1/apps/{id}/appAvailabilityV2` | read | apple\appinfo, apple\preorder, validate |
 | `apps_appAvailabilityV2_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/appAvailabilityV2` | read |  |
 | `apps_appClips_getToManyRelated` | GET | `/v1/apps/{id}/appClips` | read |  |
 | `apps_appClips_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appClips` | read |  |
-| `apps_appCustomProductPages_getToManyRelated` | GET | `/v1/apps/{id}/appCustomProductPages` | read | apple/cpp |
+| `apps_appCustomProductPages_getToManyRelated` | GET | `/v1/apps/{id}/appCustomProductPages` | read | apple\cpp |
 | `apps_appCustomProductPages_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appCustomProductPages` | read |  |
 | `apps_appEncryptionDeclarations_getToManyRelated` | GET | `/v1/apps/{id}/appEncryptionDeclarations` | read |  |
 | `apps_appEncryptionDeclarations_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appEncryptionDeclarations` | read |  |
-| `apps_appEvents_getToManyRelated` | GET | `/v1/apps/{id}/appEvents` | read | apple/events |
+| `apps_appEvents_getToManyRelated` | GET | `/v1/apps/{id}/appEvents` | read | apple\events |
 | `apps_appEvents_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appEvents` | read |  |
-| `apps_appInfos_getToManyRelated` | GET | `/v1/apps/{id}/appInfos` | read | apple/asc, apple/listing |
+| `apps_appInfos_getToManyRelated` | GET | `/v1/apps/{id}/appInfos` | read | apple\asc, apple\listing |
 | `apps_appInfos_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appInfos` | read |  |
-| `apps_appPricePoints_getToManyRelated` | GET | `/v1/apps/{id}/appPricePoints` | read | apple/appinfo |
+| `apps_appPricePoints_getToManyRelated` | GET | `/v1/apps/{id}/appPricePoints` | read | apple\appinfo |
 | `apps_appPricePoints_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appPricePoints` | read |  |
-| `apps_appPriceSchedule_getToOneRelated` | GET | `/v1/apps/{id}/appPriceSchedule` | read | apple/appinfo, validate |
+| `apps_appPriceSchedule_getToOneRelated` | GET | `/v1/apps/{id}/appPriceSchedule` | read | apple\appinfo, validate |
 | `apps_appPriceSchedule_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/appPriceSchedule` | read |  |
-| `apps_appStoreVersionExperimentsV2_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersionExperimentsV2` | read | apple/ppo |
+| `apps_appStoreVersionExperimentsV2_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersionExperimentsV2` | read | apple\ppo |
 | `apps_appStoreVersionExperimentsV2_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appStoreVersionExperimentsV2` | read |  |
-| `apps_appStoreVersions_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersions` | read | apple/asc, apple/creative-assets, apple/iap-submit, apple/platform, apple/review-details, apple/status, art, lib/store-apps, listing-store, onboard |
+| `apps_appStoreVersions_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersions` | read | apple\asc, apple\creative-assets, apple\iap-submit, apple\platform, apple\review-details, apple\status, art, lib\store-apps, listing-store, onboard |
 | `apps_appStoreVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appStoreVersions` | read |  |
 | `apps_appTags_getToManyRelated` | GET | `/v1/apps/{id}/appTags` | read |  |
 | `apps_appTags_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appTags` | read |  |
-| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple/creative-assets |
+| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple\creative-assets |
 | `apps_assetLibrary_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/assetLibrary` | read |  |
 | `apps_backgroundAssets_getToManyRelated` | GET | `/v1/apps/{id}/backgroundAssets` | read |  |
 | `apps_backgroundAssets_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/backgroundAssets` | read |  |
-| `apps_betaAppLocalizations_getToManyRelated` | GET | `/v1/apps/{id}/betaAppLocalizations` | read | apple/testflight |
+| `apps_betaAppLocalizations_getToManyRelated` | GET | `/v1/apps/{id}/betaAppLocalizations` | read | apple\testflight |
 | `apps_betaAppLocalizations_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaAppLocalizations` | read |  |
-| `apps_betaAppReviewDetail_getToOneRelated` | GET | `/v1/apps/{id}/betaAppReviewDetail` | read | apple/testflight |
+| `apps_betaAppReviewDetail_getToOneRelated` | GET | `/v1/apps/{id}/betaAppReviewDetail` | read | apple\testflight |
 | `apps_betaAppReviewDetail_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/betaAppReviewDetail` | read |  |
 | `apps_betaFeedbackCrashSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/betaFeedbackCrashSubmissions` | read | health |
 | `apps_betaFeedbackCrashSubmissions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaFeedbackCrashSubmissions` | read |  |
 | `apps_betaFeedbackScreenshotSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/betaFeedbackScreenshotSubmissions` | read |  |
 | `apps_betaFeedbackScreenshotSubmissions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaFeedbackScreenshotSubmissions` | read |  |
-| `apps_betaGroups_getToManyRelated` | GET | `/v1/apps/{id}/betaGroups` | read | apple/testflight |
+| `apps_betaGroups_getToManyRelated` | GET | `/v1/apps/{id}/betaGroups` | read | apple\testflight |
 | `apps_betaGroups_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaGroups` | read |  |
 | `apps_betaLicenseAgreement_getToOneRelated` | GET | `/v1/apps/{id}/betaLicenseAgreement` | read |  |
 | `apps_betaLicenseAgreement_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/betaLicenseAgreement` | read |  |
 | `apps_betaTesterUsages_getMetrics` | GET | `/v1/apps/{id}/metrics/betaTesterUsages` | read |  |
 | `apps_betaTesters_deleteToManyRelationship` | DELETE | `/v1/apps/{id}/relationships/betaTesters` | owner only (typed confirm) |  |
-| `apps_buildUploads_getToManyRelated` | GET | `/v1/apps/{id}/buildUploads` | read | apple/upload |
+| `apps_buildUploads_getToManyRelated` | GET | `/v1/apps/{id}/buildUploads` | read | apple\upload |
 | `apps_buildUploads_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/buildUploads` | read |  |
 | `apps_builds_getToManyRelated` | GET | `/v1/apps/{id}/builds` | read |  |
 | `apps_builds_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/builds` | read |  |
@@ -454,13 +454,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_customerReviews_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/customerReviews` | read |  |
 | `apps_endUserLicenseAgreement_getToOneRelated` | GET | `/v1/apps/{id}/endUserLicenseAgreement` | read |  |
 | `apps_endUserLicenseAgreement_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/endUserLicenseAgreement` | read |  |
-| `apps_gameCenterDetail_getToOneRelated` | GET | `/v1/apps/{id}/gameCenterDetail` | read | apple/game-center |
+| `apps_gameCenterDetail_getToOneRelated` | GET | `/v1/apps/{id}/gameCenterDetail` | read | apple\game-center |
 | `apps_gameCenterDetail_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/gameCenterDetail` | read |  |
 | `apps_gameCenterEnabledVersions_getToManyRelated` | GET | `/v1/apps/{id}/gameCenterEnabledVersions` | read |  |
 | `apps_gameCenterEnabledVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/gameCenterEnabledVersions` | read |  |
-| `apps_getCollection` | GET | `/v1/apps` | read | apple/asc, apple/bundle, apps, console/app-id, console/verify, lib/store-apps |
-| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple/appinfo, apple/status, apps, onboard |
-| `apps_inAppPurchasesV2_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchasesV2` | read | apple/first-products, apple/iap, apple/iap-review, apple/iap-submit, apple/offer-codes, apple/promoted, apple/status, catalog, prices, validate |
+| `apps_getCollection` | GET | `/v1/apps` | read | apple\asc, apple\bundle, apps, console\app-id, console\verify, lib\store-apps |
+| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple\appinfo, apple\status, apps, onboard, watch |
+| `apps_inAppPurchasesV2_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchasesV2` | read | apple\first-products, apple\iap, apple\iap-review, apple\iap-submit, apple\offer-codes, apple\promoted, apple\status, catalog, prices, validate |
 | `apps_inAppPurchasesV2_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/inAppPurchasesV2` | read |  |
 | `apps_inAppPurchases_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchases` | read |  |
 | `apps_inAppPurchases_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/inAppPurchases` | read |  |
@@ -470,18 +470,18 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_performanceOverviews_getToManyRelated` | GET | `/v1/apps/{id}/performanceOverviews` | read |  |
 | `apps_preReleaseVersions_getToManyRelated` | GET | `/v1/apps/{id}/preReleaseVersions` | read |  |
 | `apps_preReleaseVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/preReleaseVersions` | read |  |
-| `apps_promotedPurchases_getToManyRelated` | GET | `/v1/apps/{id}/promotedPurchases` | read | apple/promoted |
+| `apps_promotedPurchases_getToManyRelated` | GET | `/v1/apps/{id}/promotedPurchases` | read | apple\promoted |
 | `apps_promotedPurchases_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/promotedPurchases` | read |  |
-| `apps_promotedPurchases_replaceToManyRelationship` | PATCH | `/v1/apps/{id}/relationships/promotedPurchases` | write (dry by default) | lib/offers |
-| `apps_reviewSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/reviewSubmissions` | read | apple/resubmit, apple/submission |
+| `apps_promotedPurchases_replaceToManyRelationship` | PATCH | `/v1/apps/{id}/relationships/promotedPurchases` | write (dry by default) | lib\offers |
+| `apps_reviewSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/reviewSubmissions` | read | apple\resubmit, apple\submission |
 | `apps_reviewSubmissions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/reviewSubmissions` | read |  |
 | `apps_searchKeywords_getToManyRelated` | GET | `/v1/apps/{id}/searchKeywords` | read |  |
 | `apps_searchKeywords_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/searchKeywords` | read |  |
 | `apps_subscriptionGracePeriod_getToOneRelated` | GET | `/v1/apps/{id}/subscriptionGracePeriod` | read |  |
 | `apps_subscriptionGracePeriod_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/subscriptionGracePeriod` | read |  |
-| `apps_subscriptionGroups_getToManyRelated` | GET | `/v1/apps/{id}/subscriptionGroups` | read | apple/first-products, apple/iap-submit, apple/promoted, apple/subscriptions, apple/win-back, catalog, prices, validate |
+| `apps_subscriptionGroups_getToManyRelated` | GET | `/v1/apps/{id}/subscriptionGroups` | read | apple\first-products, apple\iap-submit, apple\promoted, apple\subscriptions, apple\win-back, catalog, prices, validate |
 | `apps_subscriptionGroups_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/subscriptionGroups` | read |  |
-| `apps_updateInstance` | PATCH | `/v1/apps/{id}` | write (dry by default) | apple/appinfo |
+| `apps_updateInstance` | PATCH | `/v1/apps/{id}` | write (dry by default) | apple\appinfo |
 | `apps_webhooks_getToManyRelated` | GET | `/v1/apps/{id}/webhooks` | read |  |
 | `apps_webhooks_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/webhooks` | read |  |
 | **backgroundAssetUploadFiles** (3) | | | | |
@@ -517,31 +517,31 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **betaAppLocalizations** (7) | | | | |
 | `betaAppLocalizations_app_getToOneRelated` | GET | `/v1/betaAppLocalizations/{id}/app` | read |  |
 | `betaAppLocalizations_app_getToOneRelationship` | GET | `/v1/betaAppLocalizations/{id}/relationships/app` | read |  |
-| `betaAppLocalizations_createInstance` | POST | `/v1/betaAppLocalizations` | write (dry by default) | lib/testflight |
+| `betaAppLocalizations_createInstance` | POST | `/v1/betaAppLocalizations` | write (dry by default) | lib\testflight |
 | `betaAppLocalizations_deleteInstance` | DELETE | `/v1/betaAppLocalizations/{id}` | owner only (typed confirm) |  |
 | `betaAppLocalizations_getCollection` | GET | `/v1/betaAppLocalizations` | read |  |
 | `betaAppLocalizations_getInstance` | GET | `/v1/betaAppLocalizations/{id}` | read |  |
-| `betaAppLocalizations_updateInstance` | PATCH | `/v1/betaAppLocalizations/{id}` | write (dry by default) | lib/testflight |
+| `betaAppLocalizations_updateInstance` | PATCH | `/v1/betaAppLocalizations/{id}` | write (dry by default) | lib\testflight |
 | **betaAppReviewDetails** (5) | | | | |
 | `betaAppReviewDetails_app_getToOneRelated` | GET | `/v1/betaAppReviewDetails/{id}/app` | read |  |
 | `betaAppReviewDetails_app_getToOneRelationship` | GET | `/v1/betaAppReviewDetails/{id}/relationships/app` | read |  |
 | `betaAppReviewDetails_getCollection` | GET | `/v1/betaAppReviewDetails` | read |  |
 | `betaAppReviewDetails_getInstance` | GET | `/v1/betaAppReviewDetails/{id}` | read |  |
-| `betaAppReviewDetails_updateInstance` | PATCH | `/v1/betaAppReviewDetails/{id}` | write (dry by default) | lib/testflight |
+| `betaAppReviewDetails_updateInstance` | PATCH | `/v1/betaAppReviewDetails/{id}` | write (dry by default) | lib\testflight |
 | **betaAppReviewSubmissions** (5) | | | | |
 | `betaAppReviewSubmissions_build_getToOneRelated` | GET | `/v1/betaAppReviewSubmissions/{id}/build` | read |  |
 | `betaAppReviewSubmissions_build_getToOneRelationship` | GET | `/v1/betaAppReviewSubmissions/{id}/relationships/build` | read |  |
-| `betaAppReviewSubmissions_createInstance` | POST | `/v1/betaAppReviewSubmissions` | owner only (typed confirm) | lib/testflight |
+| `betaAppReviewSubmissions_createInstance` | POST | `/v1/betaAppReviewSubmissions` | owner only (typed confirm) | lib\testflight |
 | `betaAppReviewSubmissions_getCollection` | GET | `/v1/betaAppReviewSubmissions` | read |  |
 | `betaAppReviewSubmissions_getInstance` | GET | `/v1/betaAppReviewSubmissions/{id}` | read |  |
 | **betaBuildLocalizations** (7) | | | | |
 | `betaBuildLocalizations_build_getToOneRelated` | GET | `/v1/betaBuildLocalizations/{id}/build` | read |  |
 | `betaBuildLocalizations_build_getToOneRelationship` | GET | `/v1/betaBuildLocalizations/{id}/relationships/build` | read |  |
-| `betaBuildLocalizations_createInstance` | POST | `/v1/betaBuildLocalizations` | write (dry by default) | lib/testflight |
+| `betaBuildLocalizations_createInstance` | POST | `/v1/betaBuildLocalizations` | write (dry by default) | lib\testflight |
 | `betaBuildLocalizations_deleteInstance` | DELETE | `/v1/betaBuildLocalizations/{id}` | owner only (typed confirm) |  |
 | `betaBuildLocalizations_getCollection` | GET | `/v1/betaBuildLocalizations` | read |  |
 | `betaBuildLocalizations_getInstance` | GET | `/v1/betaBuildLocalizations/{id}` | read |  |
-| `betaBuildLocalizations_updateInstance` | PATCH | `/v1/betaBuildLocalizations/{id}` | write (dry by default) | lib/testflight |
+| `betaBuildLocalizations_updateInstance` | PATCH | `/v1/betaBuildLocalizations/{id}` | write (dry by default) | lib\testflight |
 | **betaCrashLogs** (1) | | | | |
 | `betaCrashLogs_getInstance` | GET | `/v1/betaCrashLogs/{id}` | read |  |
 | **betaFeedbackCrashSubmissions** (4) | | | | |
@@ -560,18 +560,18 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `betaGroups_betaRecruitmentCriterionCompatibleBuildCheck_getToOneRelated` | GET | `/v1/betaGroups/{id}/betaRecruitmentCriterionCompatibleBuildCheck` | read |  |
 | `betaGroups_betaRecruitmentCriterionCompatibleBuildCheck_getToOneRelationship` | GET | `/v1/betaGroups/{id}/relationships/betaRecruitmentCriterionCompatibleBuildCheck` | read |  |
 | `betaGroups_betaTesterUsages_getMetrics` | GET | `/v1/betaGroups/{id}/metrics/betaTesterUsages` | read |  |
-| `betaGroups_betaTesters_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib/testflight |
-| `betaGroups_betaTesters_deleteToManyRelationship` | DELETE | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib/testflight |
-| `betaGroups_betaTesters_getToManyRelated` | GET | `/v1/betaGroups/{id}/betaTesters` | read | apple/testflight |
+| `betaGroups_betaTesters_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib\testflight |
+| `betaGroups_betaTesters_deleteToManyRelationship` | DELETE | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib\testflight |
+| `betaGroups_betaTesters_getToManyRelated` | GET | `/v1/betaGroups/{id}/betaTesters` | read | apple\testflight |
 | `betaGroups_betaTesters_getToManyRelationship` | GET | `/v1/betaGroups/{id}/relationships/betaTesters` | read |  |
-| `betaGroups_builds_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/builds` | write (dry by default) | lib/testflight |
+| `betaGroups_builds_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/builds` | write (dry by default) | lib\testflight |
 | `betaGroups_builds_deleteToManyRelationship` | DELETE | `/v1/betaGroups/{id}/relationships/builds` | owner only (typed confirm) |  |
-| `betaGroups_builds_getToManyRelated` | GET | `/v1/betaGroups/{id}/builds` | read | apple/testflight |
-| `betaGroups_builds_getToManyRelationship` | GET | `/v1/betaGroups/{id}/relationships/builds` | read | apple/testflight |
-| `betaGroups_createInstance` | POST | `/v1/betaGroups` | write (dry by default) | lib/testflight |
+| `betaGroups_builds_getToManyRelated` | GET | `/v1/betaGroups/{id}/builds` | read | apple\testflight |
+| `betaGroups_builds_getToManyRelationship` | GET | `/v1/betaGroups/{id}/relationships/builds` | read | apple\testflight |
+| `betaGroups_createInstance` | POST | `/v1/betaGroups` | write (dry by default) | lib\testflight |
 | `betaGroups_deleteInstance` | DELETE | `/v1/betaGroups/{id}` | owner only (typed confirm) |  |
 | `betaGroups_getCollection` | GET | `/v1/betaGroups` | read |  |
-| `betaGroups_getInstance` | GET | `/v1/betaGroups/{id}` | read | apple/testflight |
+| `betaGroups_getInstance` | GET | `/v1/betaGroups/{id}` | read | apple\testflight |
 | `betaGroups_publicLinkUsages_getMetrics` | GET | `/v1/betaGroups/{id}/metrics/publicLinkUsages` | read |  |
 | `betaGroups_updateInstance` | PATCH | `/v1/betaGroups/{id}` | write (dry by default) |  |
 | **betaLicenseAgreements** (5) | | | | |
@@ -587,7 +587,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **betaRecruitmentCriterionOptions** (1) | | | | |
 | `betaRecruitmentCriterionOptions_getCollection` | GET | `/v1/betaRecruitmentCriterionOptions` | read |  |
 | **betaTesterInvitations** (1) | | | | |
-| `betaTesterInvitations_createInstance` | POST | `/v1/betaTesterInvitations` | owner only (typed confirm) | lib/testflight |
+| `betaTesterInvitations_createInstance` | POST | `/v1/betaTesterInvitations` | owner only (typed confirm) | lib\testflight |
 | **betaTesters** (16) | | | | |
 | `betaTesters_apps_deleteToManyRelationship` | DELETE | `/v1/betaTesters/{id}/relationships/apps` | owner only (typed confirm) |  |
 | `betaTesters_apps_getToManyRelated` | GET | `/v1/betaTesters/{id}/apps` | read |  |
@@ -601,9 +601,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `betaTesters_builds_deleteToManyRelationship` | DELETE | `/v1/betaTesters/{id}/relationships/builds` | owner only (typed confirm) |  |
 | `betaTesters_builds_getToManyRelated` | GET | `/v1/betaTesters/{id}/builds` | read |  |
 | `betaTesters_builds_getToManyRelationship` | GET | `/v1/betaTesters/{id}/relationships/builds` | read |  |
-| `betaTesters_createInstance` | POST | `/v1/betaTesters` | owner only (typed confirm) | lib/testflight |
+| `betaTesters_createInstance` | POST | `/v1/betaTesters` | owner only (typed confirm) | lib\testflight |
 | `betaTesters_deleteInstance` | DELETE | `/v1/betaTesters/{id}` | owner only (typed confirm) |  |
-| `betaTesters_getCollection` | GET | `/v1/betaTesters` | read | apple/testflight |
+| `betaTesters_getCollection` | GET | `/v1/betaTesters` | read | apple\testflight |
 | `betaTesters_getInstance` | GET | `/v1/betaTesters/{id}` | read |  |
 | **buildBetaDetails** (5) | | | | |
 | `buildBetaDetails_build_getToOneRelated` | GET | `/v1/buildBetaDetails/{id}/build` | read |  |
@@ -623,15 +623,15 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `buildBundles_buildBundleFileSizes_getToManyRelated` | GET | `/v1/buildBundles/{id}/buildBundleFileSizes` | read |  |
 | `buildBundles_buildBundleFileSizes_getToManyRelationship` | GET | `/v1/buildBundles/{id}/relationships/buildBundleFileSizes` | read |  |
 | **buildUploadFiles** (3) | | | | |
-| `buildUploadFiles_createInstance` | POST | `/v1/buildUploadFiles` | write (dry by default) | lib/xcode |
+| `buildUploadFiles_createInstance` | POST | `/v1/buildUploadFiles` | write (dry by default) | lib\xcode |
 | `buildUploadFiles_getInstance` | GET | `/v1/buildUploadFiles/{id}` | read |  |
-| `buildUploadFiles_updateInstance` | PATCH | `/v1/buildUploadFiles/{id}` | write (dry by default) | lib/xcode |
+| `buildUploadFiles_updateInstance` | PATCH | `/v1/buildUploadFiles/{id}` | write (dry by default) | lib\xcode |
 | **buildUploads** (5) | | | | |
-| `buildUploads_buildUploadFiles_getToManyRelated` | GET | `/v1/buildUploads/{id}/buildUploadFiles` | read | apple/upload |
+| `buildUploads_buildUploadFiles_getToManyRelated` | GET | `/v1/buildUploads/{id}/buildUploadFiles` | read | apple\upload |
 | `buildUploads_buildUploadFiles_getToManyRelationship` | GET | `/v1/buildUploads/{id}/relationships/buildUploadFiles` | read |  |
-| `buildUploads_createInstance` | POST | `/v1/buildUploads` | write (dry by default) | lib/xcode |
+| `buildUploads_createInstance` | POST | `/v1/buildUploads` | write (dry by default) | lib\xcode |
 | `buildUploads_deleteInstance` | DELETE | `/v1/buildUploads/{id}` | owner only (typed confirm) |  |
-| `buildUploads_getInstance` | GET | `/v1/buildUploads/{id}` | read | apple/upload |
+| `buildUploads_getInstance` | GET | `/v1/buildUploads/{id}` | read | apple\upload |
 | **builds** (30) | | | | |
 | `builds_appEncryptionDeclaration_getToOneRelated` | GET | `/v1/builds/{id}/appEncryptionDeclaration` | read | validate |
 | `builds_appEncryptionDeclaration_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/appEncryptionDeclaration` | read |  |
@@ -640,9 +640,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_appStoreVersion_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/appStoreVersion` | read |  |
 | `builds_app_getToOneRelated` | GET | `/v1/builds/{id}/app` | read |  |
 | `builds_app_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/app` | read |  |
-| `builds_betaAppReviewSubmission_getToOneRelated` | GET | `/v1/builds/{id}/betaAppReviewSubmission` | read | apple/testflight |
+| `builds_betaAppReviewSubmission_getToOneRelated` | GET | `/v1/builds/{id}/betaAppReviewSubmission` | read | apple\testflight |
 | `builds_betaAppReviewSubmission_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/betaAppReviewSubmission` | read |  |
-| `builds_betaBuildLocalizations_getToManyRelated` | GET | `/v1/builds/{id}/betaBuildLocalizations` | read | apple/testflight |
+| `builds_betaBuildLocalizations_getToManyRelated` | GET | `/v1/builds/{id}/betaBuildLocalizations` | read | apple\testflight |
 | `builds_betaBuildLocalizations_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/betaBuildLocalizations` | read |  |
 | `builds_betaBuildUsages_getMetrics` | GET | `/v1/builds/{id}/metrics/betaBuildUsages` | read |  |
 | `builds_betaGroups_createToManyRelationship` | POST | `/v1/builds/{id}/relationships/betaGroups` | write (dry by default) |  |
@@ -651,7 +651,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
-| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
+| `builds_getCollection` | GET | `/v1/builds` | read | apple\build, apple\encryption, apple\listing, apple\next-build, apple\resubmit, apple\status, apple\testflight, apple\upload, art, health, lib\store-apps, triage |
 | `builds_getInstance` | GET | `/v1/builds/{id}` | read |  |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
@@ -662,9 +662,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_perfPowerMetrics_getToManyRelated` | GET | `/v1/builds/{id}/perfPowerMetrics` | read |  |
 | `builds_preReleaseVersion_getToOneRelated` | GET | `/v1/builds/{id}/preReleaseVersion` | read |  |
 | `builds_preReleaseVersion_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/preReleaseVersion` | read |  |
-| `builds_updateInstance` | PATCH | `/v1/builds/{id}` | write (dry by default) | apple/encryption, lib/build-ops |
+| `builds_updateInstance` | PATCH | `/v1/builds/{id}` | write (dry by default) | apple\encryption, lib\build-ops |
 | **bundleIdCapabilities** (3) | | | | |
-| `bundleIdCapabilities_createInstance` | POST | `/v1/bundleIdCapabilities` | write (dry by default) | lib/signing |
+| `bundleIdCapabilities_createInstance` | POST | `/v1/bundleIdCapabilities` | write (dry by default) | lib\signing |
 | `bundleIdCapabilities_deleteInstance` | DELETE | `/v1/bundleIdCapabilities/{id}` | owner only (typed confirm) |  |
 | `bundleIdCapabilities_updateInstance` | PATCH | `/v1/bundleIdCapabilities/{id}` | write (dry by default) |  |
 | **bundleIds** (11) | | | | |
@@ -672,17 +672,17 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `bundleIds_app_getToOneRelationship` | GET | `/v1/bundleIds/{id}/relationships/app` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelated` | GET | `/v1/bundleIds/{id}/bundleIdCapabilities` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/bundleIdCapabilities` | read |  |
-| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple/bundle |
+| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple\bundle |
 | `bundleIds_deleteInstance` | DELETE | `/v1/bundleIds/{id}` | owner only (typed confirm) |  |
-| `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple/adhoc, apple/bundle, apple/signing |
+| `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple\adhoc, apple\bundle, apple\signing |
 | `bundleIds_getInstance` | GET | `/v1/bundleIds/{id}` | read |  |
-| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple/adhoc, lib/signing |
+| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple\adhoc, lib\signing |
 | `bundleIds_profiles_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/profiles` | read |  |
 | `bundleIds_updateInstance` | PATCH | `/v1/bundleIds/{id}` | write (dry by default) |  |
 | **certificates** (7) | | | | |
-| `certificates_createInstance` | POST | `/v1/certificates` | write (dry by default) | apple/signing, lib/signing |
+| `certificates_createInstance` | POST | `/v1/certificates` | write (dry by default) | apple\signing, lib\signing |
 | `certificates_deleteInstance` | DELETE | `/v1/certificates/{id}` | owner only (typed confirm) |  |
-| `certificates_getCollection` | GET | `/v1/certificates` | read | apple/adhoc, apple/signing |
+| `certificates_getCollection` | GET | `/v1/certificates` | read | apple\adhoc, apple\signing |
 | `certificates_getInstance` | GET | `/v1/certificates/{id}` | read |  |
 | `certificates_passTypeId_getToOneRelated` | GET | `/v1/certificates/{id}/passTypeId` | read |  |
 | `certificates_passTypeId_getToOneRelationship` | GET | `/v1/certificates/{id}/relationships/passTypeId` | read |  |
@@ -744,7 +744,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `ciXcodeVersions_macOsVersions_getToManyRelated` | GET | `/v1/ciXcodeVersions/{id}/macOsVersions` | read |  |
 | `ciXcodeVersions_macOsVersions_getToManyRelationship` | GET | `/v1/ciXcodeVersions/{id}/relationships/macOsVersions` | read |  |
 | **customerReviewResponses** (3) | | | | |
-| `customerReviewResponses_createInstance` | POST | `/v1/customerReviewResponses` | owner only (typed confirm) | lib/reviews |
+| `customerReviewResponses_createInstance` | POST | `/v1/customerReviewResponses` | owner only (typed confirm) | lib\reviews |
 | `customerReviewResponses_deleteInstance` | DELETE | `/v1/customerReviewResponses/{id}` | owner only (typed confirm) |  |
 | `customerReviewResponses_getInstance` | GET | `/v1/customerReviewResponses/{id}` | read |  |
 | **customerReviews** (3) | | | | |
@@ -752,14 +752,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `customerReviews_response_getToOneRelated` | GET | `/v1/customerReviews/{id}/response` | read |  |
 | `customerReviews_response_getToOneRelationship` | GET | `/v1/customerReviews/{id}/relationships/response` | read |  |
 | **devices** (4) | | | | |
-| `devices_createInstance` | POST | `/v1/devices` | write (dry by default) | apple/adhoc |
-| `devices_getCollection` | GET | `/v1/devices` | read | apple/adhoc |
+| `devices_createInstance` | POST | `/v1/devices` | write (dry by default) | apple\adhoc |
+| `devices_getCollection` | GET | `/v1/devices` | read | apple\adhoc |
 | `devices_getInstance` | GET | `/v1/devices/{id}` | read |  |
 | `devices_updateInstance` | PATCH | `/v1/devices/{id}` | write (dry by default) |  |
 | **diagnosticSignatures** (1) | | | | |
 | `diagnosticSignatures_logs_getToManyRelated` | GET | `/v1/diagnosticSignatures/{id}/logs` | read | health |
 | **endAppAvailabilityPreOrders** (1) | | | | |
-| `endAppAvailabilityPreOrders_createInstance` | POST | `/v1/endAppAvailabilityPreOrders` | write (dry by default) | lib/offers |
+| `endAppAvailabilityPreOrders_createInstance` | POST | `/v1/endAppAvailabilityPreOrders` | write (dry by default) | lib\offers |
 | **endUserLicenseAgreements** (6) | | | | |
 | `endUserLicenseAgreements_createInstance` | POST | `/v1/endUserLicenseAgreements` | write (dry by default) |  |
 | `endUserLicenseAgreements_deleteInstance` | DELETE | `/v1/endUserLicenseAgreements/{id}` | owner only (typed confirm) |  |
@@ -768,7 +768,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `endUserLicenseAgreements_territories_getToManyRelationship` | GET | `/v1/endUserLicenseAgreements/{id}/relationships/territories` | read |  |
 | `endUserLicenseAgreements_updateInstance` | PATCH | `/v1/endUserLicenseAgreements/{id}` | write (dry by default) |  |
 | **financeReports** (1) | | | | |
-| `financeReports_getCollection` | GET | `/v1/financeReports` | read | lib/reports |
+| `financeReports_getCollection` | GET | `/v1/financeReports` | read | lib\reports |
 | **gameCenterAchievementImages** (8) | | | | |
 | `gameCenterAchievementImagesV2_createInstance` | POST | `/v2/gameCenterAchievementImages` | write (dry by default) |  |
 | `gameCenterAchievementImagesV2_deleteInstance` | DELETE | `/v2/gameCenterAchievementImages/{id}` | owner only (typed confirm) |  |
@@ -817,7 +817,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterAchievements_groupAchievement_getToOneRelated` | GET | `/v1/gameCenterAchievements/{id}/groupAchievement` | read |  |
 | `gameCenterAchievements_groupAchievement_getToOneRelationship` | GET | `/v1/gameCenterAchievements/{id}/relationships/groupAchievement` | read |  |
 | `gameCenterAchievements_groupAchievement_updateToOneRelationship` | PATCH | `/v1/gameCenterAchievements/{id}/relationships/groupAchievement` | write (dry by default) |  |
-| `gameCenterAchievements_localizations_getToManyRelated` | GET | `/v1/gameCenterAchievements/{id}/localizations` | read | apple/game-center |
+| `gameCenterAchievements_localizations_getToManyRelated` | GET | `/v1/gameCenterAchievements/{id}/localizations` | read | apple\game-center |
 | `gameCenterAchievements_localizations_getToManyRelationship` | GET | `/v1/gameCenterAchievements/{id}/relationships/localizations` | read |  |
 | `gameCenterAchievements_releases_getToManyRelated` | GET | `/v1/gameCenterAchievements/{id}/releases` | read |  |
 | `gameCenterAchievements_releases_getToManyRelationship` | GET | `/v1/gameCenterAchievements/{id}/relationships/releases` | read |  |
@@ -868,7 +868,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterAppVersions_compatibilityVersions_deleteToManyRelationship` | DELETE | `/v1/gameCenterAppVersions/{id}/relationships/compatibilityVersions` | owner only (typed confirm) |  |
 | `gameCenterAppVersions_compatibilityVersions_getToManyRelated` | GET | `/v1/gameCenterAppVersions/{id}/compatibilityVersions` | read |  |
 | `gameCenterAppVersions_compatibilityVersions_getToManyRelationship` | GET | `/v1/gameCenterAppVersions/{id}/relationships/compatibilityVersions` | read |  |
-| `gameCenterAppVersions_createInstance` | POST | `/v1/gameCenterAppVersions` | write (dry by default) | apple/game-center |
+| `gameCenterAppVersions_createInstance` | POST | `/v1/gameCenterAppVersions` | write (dry by default) | apple\game-center |
 | `gameCenterAppVersions_getInstance` | GET | `/v1/gameCenterAppVersions/{id}` | read |  |
 | `gameCenterAppVersions_updateInstance` | PATCH | `/v1/gameCenterAppVersions/{id}` | write (dry by default) |  |
 | **gameCenterChallengeImages** (4) | | | | |
@@ -916,11 +916,11 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterDetails_challengeReleases_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/challengeReleases` | read |  |
 | `gameCenterDetails_challengesMinimumPlatformVersions_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/challengesMinimumPlatformVersions` | write (dry by default) |  |
 | `gameCenterDetails_classicMatchmakingRequests_getMetrics` | GET | `/v1/gameCenterDetails/{id}/metrics/classicMatchmakingRequests` | read |  |
-| `gameCenterDetails_createInstance` | POST | `/v1/gameCenterDetails` | write (dry by default) | apple/game-center |
+| `gameCenterDetails_createInstance` | POST | `/v1/gameCenterDetails` | write (dry by default) | apple\game-center |
 | `gameCenterDetails_gameCenterAchievementsV2_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterAchievementsV2` | read |  |
 | `gameCenterDetails_gameCenterAchievementsV2_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievementsV2` | read |  |
 | `gameCenterDetails_gameCenterAchievementsV2_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievementsV2` | write (dry by default) |  |
-| `gameCenterDetails_gameCenterAchievements_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterAchievements` | read | apple/game-center |
+| `gameCenterDetails_gameCenterAchievements_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterAchievements` | read | apple\game-center |
 | `gameCenterDetails_gameCenterAchievements_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievements` | read |  |
 | `gameCenterDetails_gameCenterAchievements_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievements` | write (dry by default) |  |
 | `gameCenterDetails_gameCenterActivities_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterActivities` | read |  |
@@ -940,7 +940,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterDetails_gameCenterLeaderboardsV2_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterLeaderboardsV2` | read |  |
 | `gameCenterDetails_gameCenterLeaderboardsV2_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboardsV2` | read |  |
 | `gameCenterDetails_gameCenterLeaderboardsV2_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboardsV2` | write (dry by default) |  |
-| `gameCenterDetails_gameCenterLeaderboards_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterLeaderboards` | read | apple/game-center |
+| `gameCenterDetails_gameCenterLeaderboards_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterLeaderboards` | read | apple\game-center |
 | `gameCenterDetails_gameCenterLeaderboards_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboards` | read |  |
 | `gameCenterDetails_gameCenterLeaderboards_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboards` | write (dry by default) |  |
 | `gameCenterDetails_getInstance` | GET | `/v1/gameCenterDetails/{id}` | read |  |
@@ -1106,7 +1106,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterLeaderboards_groupLeaderboard_getToOneRelated` | GET | `/v1/gameCenterLeaderboards/{id}/groupLeaderboard` | read |  |
 | `gameCenterLeaderboards_groupLeaderboard_getToOneRelationship` | GET | `/v1/gameCenterLeaderboards/{id}/relationships/groupLeaderboard` | read |  |
 | `gameCenterLeaderboards_groupLeaderboard_updateToOneRelationship` | PATCH | `/v1/gameCenterLeaderboards/{id}/relationships/groupLeaderboard` | write (dry by default) |  |
-| `gameCenterLeaderboards_localizations_getToManyRelated` | GET | `/v1/gameCenterLeaderboards/{id}/localizations` | read | apple/game-center |
+| `gameCenterLeaderboards_localizations_getToManyRelated` | GET | `/v1/gameCenterLeaderboards/{id}/localizations` | read | apple\game-center |
 | `gameCenterLeaderboards_localizations_getToManyRelationship` | GET | `/v1/gameCenterLeaderboards/{id}/relationships/localizations` | read |  |
 | `gameCenterLeaderboards_releases_getToManyRelated` | GET | `/v1/gameCenterLeaderboards/{id}/releases` | read |  |
 | `gameCenterLeaderboards_releases_getToManyRelationship` | GET | `/v1/gameCenterLeaderboards/{id}/relationships/releases` | read |  |
@@ -1152,14 +1152,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **gameCenterScoreModerations** (1) | | | | |
 | `gameCenterScoreModerations_updateInstance` | PATCH | `/v1/gameCenterScoreModerations/{id}` | write (dry by default) |  |
 | **inAppPurchaseAppStoreReviewScreenshots** (4) | | | | |
-| `inAppPurchaseAppStoreReviewScreenshots_createInstance` | POST | `/v1/inAppPurchaseAppStoreReviewScreenshots` | write (dry by default) | apple/iap-review |
-| `inAppPurchaseAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple/iap-review |
+| `inAppPurchaseAppStoreReviewScreenshots_createInstance` | POST | `/v1/inAppPurchaseAppStoreReviewScreenshots` | write (dry by default) | apple\iap-review |
+| `inAppPurchaseAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple\iap-review |
 | `inAppPurchaseAppStoreReviewScreenshots_getInstance` | GET | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | read |  |
-| `inAppPurchaseAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | write (dry by default) | apple/iap-review |
+| `inAppPurchaseAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | write (dry by default) | apple\iap-review |
 | **inAppPurchaseAvailabilities** (4) | | | | |
-| `inAppPurchaseAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/inAppPurchaseAvailabilities/{id}/availableTerritories` | read |  |
+| `inAppPurchaseAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/inAppPurchaseAvailabilities/{id}/availableTerritories` | read | apple\iap |
 | `inAppPurchaseAvailabilities_availableTerritories_getToManyRelationship` | GET | `/v1/inAppPurchaseAvailabilities/{id}/relationships/availableTerritories` | read |  |
-| `inAppPurchaseAvailabilities_createInstance` | POST | `/v1/inAppPurchaseAvailabilities` | write (dry by default) | apple/iap |
+| `inAppPurchaseAvailabilities_createInstance` | POST | `/v1/inAppPurchaseAvailabilities` | write (dry by default) | apple\iap |
 | `inAppPurchaseAvailabilities_getInstance` | GET | `/v1/inAppPurchaseAvailabilities/{id}` | read |  |
 | **inAppPurchaseContents** (1) | | | | |
 | `inAppPurchaseContents_getInstance` | GET | `/v1/inAppPurchaseContents/{id}` | read |  |
@@ -1177,45 +1177,45 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `inAppPurchaseLocalizationsV2_deleteInstance` | DELETE | `/v2/inAppPurchaseLocalizations/{id}` | owner only (typed confirm) |  |
 | `inAppPurchaseLocalizationsV2_getInstance` | GET | `/v2/inAppPurchaseLocalizations/{id}` | read |  |
 | `inAppPurchaseLocalizationsV2_updateInstance` | PATCH | `/v2/inAppPurchaseLocalizations/{id}` | write (dry by default) |  |
-| `inAppPurchaseLocalizations_createInstance` | POST | `/v1/inAppPurchaseLocalizations` | write (dry by default) | apple/iap |
+| `inAppPurchaseLocalizations_createInstance` | POST | `/v1/inAppPurchaseLocalizations` | write (dry by default) | apple\iap |
 | `inAppPurchaseLocalizations_deleteInstance` | DELETE | `/v1/inAppPurchaseLocalizations/{id}` | owner only (typed confirm) |  |
 | `inAppPurchaseLocalizations_getInstance` | GET | `/v1/inAppPurchaseLocalizations/{id}` | read |  |
-| `inAppPurchaseLocalizations_updateInstance` | PATCH | `/v1/inAppPurchaseLocalizations/{id}` | write (dry by default) |  |
+| `inAppPurchaseLocalizations_updateInstance` | PATCH | `/v1/inAppPurchaseLocalizations/{id}` | write (dry by default) | apple\iap |
 | **inAppPurchaseOfferCodeCustomCodes** (3) | | | | |
-| `inAppPurchaseOfferCodeCustomCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeCustomCodes` | write (dry by default) | lib/offers |
+| `inAppPurchaseOfferCodeCustomCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeCustomCodes` | write (dry by default) | lib\offers |
 | `inAppPurchaseOfferCodeCustomCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodeCustomCodes/{id}` | read |  |
 | `inAppPurchaseOfferCodeCustomCodes_updateInstance` | PATCH | `/v1/inAppPurchaseOfferCodeCustomCodes/{id}` | write (dry by default) |  |
 | **inAppPurchaseOfferCodeOneTimeUseCodes** (4) | | | | |
-| `inAppPurchaseOfferCodeOneTimeUseCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes` | write (dry by default) | lib/offers |
+| `inAppPurchaseOfferCodeOneTimeUseCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes` | write (dry by default) | lib\offers |
 | `inAppPurchaseOfferCodeOneTimeUseCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}` | read |  |
 | `inAppPurchaseOfferCodeOneTimeUseCodes_updateInstance` | PATCH | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}` | write (dry by default) |  |
-| `inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated` | GET | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}/values` | read | apple/offer-codes |
+| `inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated` | GET | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}/values` | read | apple\offer-codes |
 | **inAppPurchaseOfferCodes** (9) | | | | |
-| `inAppPurchaseOfferCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodes` | write (dry by default) | apple/offer-codes |
-| `inAppPurchaseOfferCodes_customCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/customCodes` | read | apple/offer-codes |
+| `inAppPurchaseOfferCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodes` | write (dry by default) | apple\offer-codes |
+| `inAppPurchaseOfferCodes_customCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/customCodes` | read | apple\offer-codes |
 | `inAppPurchaseOfferCodes_customCodes_getToManyRelationship` | GET | `/v1/inAppPurchaseOfferCodes/{id}/relationships/customCodes` | read |  |
-| `inAppPurchaseOfferCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodes/{id}` | read | apple/offer-codes |
-| `inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/oneTimeUseCodes` | read | apple/offer-codes |
+| `inAppPurchaseOfferCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodes/{id}` | read | apple\offer-codes |
+| `inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/oneTimeUseCodes` | read | apple\offer-codes |
 | `inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelationship` | GET | `/v1/inAppPurchaseOfferCodes/{id}/relationships/oneTimeUseCodes` | read |  |
-| `inAppPurchaseOfferCodes_prices_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/prices` | read |  |
+| `inAppPurchaseOfferCodes_prices_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/prices` | read | apple\offer-codes |
 | `inAppPurchaseOfferCodes_prices_getToManyRelationship` | GET | `/v1/inAppPurchaseOfferCodes/{id}/relationships/prices` | read |  |
 | `inAppPurchaseOfferCodes_updateInstance` | PATCH | `/v1/inAppPurchaseOfferCodes/{id}` | write (dry by default) |  |
 | **inAppPurchasePricePoints** (2) | | | | |
-| `inAppPurchasePricePoints_equalizations_getToManyRelated` | GET | `/v1/inAppPurchasePricePoints/{id}/equalizations` | read | apple/offer-codes, prices-ppp |
+| `inAppPurchasePricePoints_equalizations_getToManyRelated` | GET | `/v1/inAppPurchasePricePoints/{id}/equalizations` | read | apple\offer-codes, prices-ppp |
 | `inAppPurchasePricePoints_equalizations_getToManyRelationship` | GET | `/v1/inAppPurchasePricePoints/{id}/relationships/equalizations` | read |  |
 | **inAppPurchasePriceSchedules** (8) | | | | |
 | `inAppPurchasePriceSchedules_automaticPrices_getToManyRelated` | GET | `/v1/inAppPurchasePriceSchedules/{id}/automaticPrices` | read | prices |
 | `inAppPurchasePriceSchedules_automaticPrices_getToManyRelationship` | GET | `/v1/inAppPurchasePriceSchedules/{id}/relationships/automaticPrices` | read |  |
 | `inAppPurchasePriceSchedules_baseTerritory_getToOneRelated` | GET | `/v1/inAppPurchasePriceSchedules/{id}/baseTerritory` | read | prices |
 | `inAppPurchasePriceSchedules_baseTerritory_getToOneRelationship` | GET | `/v1/inAppPurchasePriceSchedules/{id}/relationships/baseTerritory` | read |  |
-| `inAppPurchasePriceSchedules_createInstance` | POST | `/v1/inAppPurchasePriceSchedules` | owner only (typed confirm) | apple/iap, prices |
+| `inAppPurchasePriceSchedules_createInstance` | POST | `/v1/inAppPurchasePriceSchedules` | owner only (typed confirm) | apple\iap, prices |
 | `inAppPurchasePriceSchedules_getInstance` | GET | `/v1/inAppPurchasePriceSchedules/{id}` | read |  |
 | `inAppPurchasePriceSchedules_manualPrices_getToManyRelated` | GET | `/v1/inAppPurchasePriceSchedules/{id}/manualPrices` | read | prices |
 | `inAppPurchasePriceSchedules_manualPrices_getToManyRelationship` | GET | `/v1/inAppPurchasePriceSchedules/{id}/relationships/manualPrices` | read |  |
 | **inAppPurchaseSubmissions** (1) | | | | |
 | `inAppPurchaseSubmissions_createInstance` | POST | `/v1/inAppPurchaseSubmissions` | owner only (typed confirm) |  |
 | **inAppPurchaseVersions** (8) | | | | |
-| `inAppPurchaseVersions_createInstance` | POST | `/v1/inAppPurchaseVersions` | write (dry by default) | lib/review-submit |
+| `inAppPurchaseVersions_createInstance` | POST | `/v1/inAppPurchaseVersions` | write (dry by default) | lib\review-submit |
 | `inAppPurchaseVersions_getInstance` | GET | `/v1/inAppPurchaseVersions/{id}` | read |  |
 | `inAppPurchaseVersions_image_getToOneRelated` | GET | `/v1/inAppPurchaseVersions/{id}/image` | read |  |
 | `inAppPurchaseVersions_image_getToOneRelationship` | GET | `/v1/inAppPurchaseVersions/{id}/relationships/image` | read |  |
@@ -1224,29 +1224,29 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `inAppPurchaseVersions_localizations_getToManyRelated` | GET | `/v1/inAppPurchaseVersions/{id}/localizations` | read |  |
 | `inAppPurchaseVersions_localizations_getToManyRelationship` | GET | `/v1/inAppPurchaseVersions/{id}/relationships/localizations` | read |  |
 | **inAppPurchases** (25) | | | | |
-| `inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/appStoreReviewScreenshot` | read | apple/iap-review, validate |
+| `inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/appStoreReviewScreenshot` | read | apple\iap-review, validate |
 | `inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/appStoreReviewScreenshot` | read |  |
 | `inAppPurchasesV2_content_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/content` | read |  |
 | `inAppPurchasesV2_content_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/content` | read |  |
-| `inAppPurchasesV2_createInstance` | POST | `/v2/inAppPurchases` | write (dry by default) | apple/iap |
+| `inAppPurchasesV2_createInstance` | POST | `/v2/inAppPurchases` | write (dry by default) | apple\iap |
 | `inAppPurchasesV2_deleteInstance` | DELETE | `/v2/inAppPurchases/{id}` | owner only (typed confirm) |  |
-| `inAppPurchasesV2_getInstance` | GET | `/v2/inAppPurchases/{id}` | read | apple/iap |
-| `inAppPurchasesV2_iapPriceSchedule_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/iapPriceSchedule` | read | apple/iap, apple/iap-review, catalog |
+| `inAppPurchasesV2_getInstance` | GET | `/v2/inAppPurchases/{id}` | read | apple\iap |
+| `inAppPurchasesV2_iapPriceSchedule_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/iapPriceSchedule` | read | apple\iap, apple\iap-review, catalog |
 | `inAppPurchasesV2_iapPriceSchedule_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/iapPriceSchedule` | read |  |
 | `inAppPurchasesV2_images_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/images` | read |  |
 | `inAppPurchasesV2_images_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/images` | read |  |
-| `inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseAvailability` | read | apple/iap, apple/iap-review |
+| `inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseAvailability` | read | apple\iap, apple\iap-review |
 | `inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/inAppPurchaseAvailability` | read |  |
-| `inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseLocalizations` | read | apple/iap, apple/iap-review, catalog |
+| `inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseLocalizations` | read | apple\iap, apple\iap-review, catalog |
 | `inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/inAppPurchaseLocalizations` | read |  |
-| `inAppPurchasesV2_offerCodes_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/offerCodes` | read | apple/offer-codes |
+| `inAppPurchasesV2_offerCodes_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/offerCodes` | read | apple\offer-codes |
 | `inAppPurchasesV2_offerCodes_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/offerCodes` | read |  |
-| `inAppPurchasesV2_pricePoints_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/pricePoints` | read | apple/iap, apple/offer-codes, prices, prices-ppp |
+| `inAppPurchasesV2_pricePoints_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/pricePoints` | read | apple\iap, apple\offer-codes, prices, prices-ppp |
 | `inAppPurchasesV2_pricePoints_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/pricePoints` | read |  |
 | `inAppPurchasesV2_promotedPurchase_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/promotedPurchase` | read |  |
 | `inAppPurchasesV2_promotedPurchase_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/promotedPurchase` | read |  |
-| `inAppPurchasesV2_updateInstance` | PATCH | `/v2/inAppPurchases/{id}` | write (dry by default) |  |
-| `inAppPurchasesV2_versions_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/versions` | read | apple/first-products, apple/iap-submit |
+| `inAppPurchasesV2_updateInstance` | PATCH | `/v2/inAppPurchases/{id}` | write (dry by default) | apple\iap |
+| `inAppPurchasesV2_versions_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/versions` | read | apple\first-products, apple\iap-submit |
 | `inAppPurchasesV2_versions_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/versions` | read |  |
 | `inAppPurchases_getInstance` | GET | `/v1/inAppPurchases/{id}` | read |  |
 | **marketplaceSearchDetails** (3) | | | | |
@@ -1291,36 +1291,36 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `profiles_bundleId_getToOneRelated` | GET | `/v1/profiles/{id}/bundleId` | read |  |
 | `profiles_bundleId_getToOneRelationship` | GET | `/v1/profiles/{id}/relationships/bundleId` | read |  |
 | `profiles_certificates_getToManyRelated` | GET | `/v1/profiles/{id}/certificates` | read |  |
-| `profiles_certificates_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/certificates` | read | lib/signing |
-| `profiles_createInstance` | POST | `/v1/profiles` | write (dry by default) | apple/adhoc, lib/signing |
+| `profiles_certificates_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/certificates` | read | lib\signing |
+| `profiles_createInstance` | POST | `/v1/profiles` | write (dry by default) | apple\adhoc, lib\signing |
 | `profiles_deleteInstance` | DELETE | `/v1/profiles/{id}` | owner only (typed confirm) |  |
-| `profiles_devices_getToManyRelated` | GET | `/v1/profiles/{id}/devices` | read | apple/adhoc |
+| `profiles_devices_getToManyRelated` | GET | `/v1/profiles/{id}/devices` | read | apple\adhoc |
 | `profiles_devices_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/devices` | read |  |
 | `profiles_getCollection` | GET | `/v1/profiles` | read |  |
-| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple/signing |
+| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple\signing |
 | **promotedPurchases** (4) | | | | |
-| `promotedPurchases_createInstance` | POST | `/v1/promotedPurchases` | write (dry by default) | lib/offers |
+| `promotedPurchases_createInstance` | POST | `/v1/promotedPurchases` | write (dry by default) | lib\offers |
 | `promotedPurchases_deleteInstance` | DELETE | `/v1/promotedPurchases/{id}` | owner only (typed confirm) |  |
 | `promotedPurchases_getInstance` | GET | `/v1/promotedPurchases/{id}` | read |  |
-| `promotedPurchases_updateInstance` | PATCH | `/v1/promotedPurchases/{id}` | write (dry by default) | lib/offers |
+| `promotedPurchases_updateInstance` | PATCH | `/v1/promotedPurchases/{id}` | write (dry by default) | lib\offers |
 | **reviewSubmissionItems** (3) | | | | |
-| `reviewSubmissionItems_createInstance` | POST | `/v1/reviewSubmissionItems` | write (dry by default) | apple/submission, lib/cpp-events, lib/review-submit |
+| `reviewSubmissionItems_createInstance` | POST | `/v1/reviewSubmissionItems` | write (dry by default) | apple\submission, lib\cpp-events, lib\review-submit |
 | `reviewSubmissionItems_deleteInstance` | DELETE | `/v1/reviewSubmissionItems/{id}` | owner only (typed confirm) |  |
-| `reviewSubmissionItems_updateInstance` | PATCH | `/v1/reviewSubmissionItems/{id}` | write (dry by default) | apple/submission |
+| `reviewSubmissionItems_updateInstance` | PATCH | `/v1/reviewSubmissionItems/{id}` | write (dry by default) | apple\submission |
 | **reviewSubmissions** (6) | | | | |
-| `reviewSubmissions_createInstance` | POST | `/v1/reviewSubmissions` | owner only (typed confirm) | apple/cpp, apple/events, apple/submission, lib/review-submit |
-| `reviewSubmissions_getCollection` | GET | `/v1/reviewSubmissions` | read | apple/events, apple/iap-submit, apple/status, apple/submission |
-| `reviewSubmissions_getInstance` | GET | `/v1/reviewSubmissions/{id}` | read | apple/submission |
-| `reviewSubmissions_items_getToManyRelated` | GET | `/v1/reviewSubmissions/{id}/items` | read | apple/submission |
+| `reviewSubmissions_createInstance` | POST | `/v1/reviewSubmissions` | owner only (typed confirm) | apple\cpp, apple\events, apple\submission, lib\review-submit |
+| `reviewSubmissions_getCollection` | GET | `/v1/reviewSubmissions` | read | apple\events, apple\iap-submit, apple\status, apple\submission |
+| `reviewSubmissions_getInstance` | GET | `/v1/reviewSubmissions/{id}` | read | apple\submission |
+| `reviewSubmissions_items_getToManyRelated` | GET | `/v1/reviewSubmissions/{id}/items` | read | apple\submission |
 | `reviewSubmissions_items_getToManyRelationship` | GET | `/v1/reviewSubmissions/{id}/relationships/items` | read |  |
-| `reviewSubmissions_updateInstance` | PATCH | `/v1/reviewSubmissions/{id}` | owner only (typed confirm) | apple/cpp, apple/events, apple/status, apple/submission, lib/review-submit |
+| `reviewSubmissions_updateInstance` | PATCH | `/v1/reviewSubmissions/{id}` | owner only (typed confirm) | apple\cpp, apple\events, apple\status, apple\submission, lib\review-submit |
 | **routingAppCoverages** (4) | | | | |
 | `routingAppCoverages_createInstance` | POST | `/v1/routingAppCoverages` | write (dry by default) |  |
 | `routingAppCoverages_deleteInstance` | DELETE | `/v1/routingAppCoverages/{id}` | owner only (typed confirm) |  |
 | `routingAppCoverages_getInstance` | GET | `/v1/routingAppCoverages/{id}` | read |  |
 | `routingAppCoverages_updateInstance` | PATCH | `/v1/routingAppCoverages/{id}` | write (dry by default) |  |
 | **salesReports** (1) | | | | |
-| `salesReports_getCollection` | GET | `/v1/salesReports` | read | lib/reports |
+| `salesReports_getCollection` | GET | `/v1/salesReports` | read | lib\reports |
 | **sandboxTesters** (2) | | | | |
 | `sandboxTestersV2_getCollection` | GET | `/v2/sandboxTesters` | read |  |
 | `sandboxTestersV2_updateInstance` | PATCH | `/v2/sandboxTesters/{id}` | write (dry by default) |  |
@@ -1343,14 +1343,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `scmRepositories_pullRequests_getToManyRelated` | GET | `/v1/scmRepositories/{id}/pullRequests` | read |  |
 | `scmRepositories_pullRequests_getToManyRelationship` | GET | `/v1/scmRepositories/{id}/relationships/pullRequests` | read |  |
 | **subscriptionAppStoreReviewScreenshots** (4) | | | | |
-| `subscriptionAppStoreReviewScreenshots_createInstance` | POST | `/v1/subscriptionAppStoreReviewScreenshots` | write (dry by default) | apple/subscriptions |
-| `subscriptionAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple/subscriptions |
+| `subscriptionAppStoreReviewScreenshots_createInstance` | POST | `/v1/subscriptionAppStoreReviewScreenshots` | write (dry by default) | apple\subscriptions |
+| `subscriptionAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple\subscriptions |
 | `subscriptionAppStoreReviewScreenshots_getInstance` | GET | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | read |  |
-| `subscriptionAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | write (dry by default) | apple/subscriptions |
+| `subscriptionAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | write (dry by default) | apple\subscriptions |
 | **subscriptionAvailabilities** (4) | | | | |
-| `subscriptionAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/subscriptionAvailabilities/{id}/availableTerritories` | read |  |
+| `subscriptionAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/subscriptionAvailabilities/{id}/availableTerritories` | read | apple\subscriptions |
 | `subscriptionAvailabilities_availableTerritories_getToManyRelationship` | GET | `/v1/subscriptionAvailabilities/{id}/relationships/availableTerritories` | read |  |
-| `subscriptionAvailabilities_createInstance` | POST | `/v1/subscriptionAvailabilities` | write (dry by default) | apple/subscriptions |
+| `subscriptionAvailabilities_createInstance` | POST | `/v1/subscriptionAvailabilities` | write (dry by default) | apple\subscriptions |
 | `subscriptionAvailabilities_getInstance` | GET | `/v1/subscriptionAvailabilities/{id}` | read |  |
 | **subscriptionGracePeriods** (2) | | | | |
 | `subscriptionGracePeriods_getInstance` | GET | `/v1/subscriptionGracePeriods/{id}` | read |  |
@@ -1360,10 +1360,10 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionGroupLocalizationsV2_deleteInstance` | DELETE | `/v2/subscriptionGroupLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionGroupLocalizationsV2_getInstance` | GET | `/v2/subscriptionGroupLocalizations/{id}` | read |  |
 | `subscriptionGroupLocalizationsV2_updateInstance` | PATCH | `/v2/subscriptionGroupLocalizations/{id}` | write (dry by default) |  |
-| `subscriptionGroupLocalizations_createInstance` | POST | `/v1/subscriptionGroupLocalizations` | write (dry by default) | apple/subscriptions |
+| `subscriptionGroupLocalizations_createInstance` | POST | `/v1/subscriptionGroupLocalizations` | write (dry by default) | apple\subscriptions |
 | `subscriptionGroupLocalizations_deleteInstance` | DELETE | `/v1/subscriptionGroupLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionGroupLocalizations_getInstance` | GET | `/v1/subscriptionGroupLocalizations/{id}` | read |  |
-| `subscriptionGroupLocalizations_updateInstance` | PATCH | `/v1/subscriptionGroupLocalizations/{id}` | write (dry by default) |  |
+| `subscriptionGroupLocalizations_updateInstance` | PATCH | `/v1/subscriptionGroupLocalizations/{id}` | write (dry by default) | apple\subscriptions |
 | **subscriptionGroupSubmissions** (1) | | | | |
 | `subscriptionGroupSubmissions_createInstance` | POST | `/v1/subscriptionGroupSubmissions` | owner only (typed confirm) |  |
 | **subscriptionGroupVersions** (4) | | | | |
@@ -1372,15 +1372,15 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionGroupVersions_localizations_getToManyRelated` | GET | `/v1/subscriptionGroupVersions/{id}/localizations` | read |  |
 | `subscriptionGroupVersions_localizations_getToManyRelationship` | GET | `/v1/subscriptionGroupVersions/{id}/relationships/localizations` | read |  |
 | **subscriptionGroups** (10) | | | | |
-| `subscriptionGroups_createInstance` | POST | `/v1/subscriptionGroups` | write (dry by default) | apple/subscriptions |
+| `subscriptionGroups_createInstance` | POST | `/v1/subscriptionGroups` | write (dry by default) | apple\subscriptions |
 | `subscriptionGroups_deleteInstance` | DELETE | `/v1/subscriptionGroups/{id}` | owner only (typed confirm) |  |
-| `subscriptionGroups_getInstance` | GET | `/v1/subscriptionGroups/{id}` | read | apple/subscriptions |
-| `subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptionGroupLocalizations` | read | apple/subscriptions, validate |
+| `subscriptionGroups_getInstance` | GET | `/v1/subscriptionGroups/{id}` | read | apple\subscriptions |
+| `subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptionGroupLocalizations` | read | apple\subscriptions, validate |
 | `subscriptionGroups_subscriptionGroupLocalizations_getToManyRelationship` | GET | `/v1/subscriptionGroups/{id}/relationships/subscriptionGroupLocalizations` | read |  |
-| `subscriptionGroups_subscriptions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptions` | read | apple/first-products, apple/iap-submit, apple/promoted, apple/subscriptions, apple/win-back, catalog, prices, validate |
+| `subscriptionGroups_subscriptions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptions` | read | apple\first-products, apple\iap-submit, apple\promoted, apple\subscriptions, apple\win-back, catalog, prices, validate |
 | `subscriptionGroups_subscriptions_getToManyRelationship` | GET | `/v1/subscriptionGroups/{id}/relationships/subscriptions` | read |  |
 | `subscriptionGroups_updateInstance` | PATCH | `/v1/subscriptionGroups/{id}` | write (dry by default) |  |
-| `subscriptionGroups_versions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/versions` | read | apple/iap-submit |
+| `subscriptionGroups_versions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/versions` | read | apple\iap-submit |
 | `subscriptionGroups_versions_getToManyRelationship` | GET | `/v1/subscriptionGroups/{id}/relationships/versions` | read |  |
 | **subscriptionImages** (8) | | | | |
 | `subscriptionImagesV2_createInstance` | POST | `/v2/subscriptionImages` | write (dry by default) |  |
@@ -1400,12 +1400,12 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionLocalizationsV2_deleteInstance` | DELETE | `/v2/subscriptionLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionLocalizationsV2_getInstance` | GET | `/v2/subscriptionLocalizations/{id}` | read |  |
 | `subscriptionLocalizationsV2_updateInstance` | PATCH | `/v2/subscriptionLocalizations/{id}` | write (dry by default) |  |
-| `subscriptionLocalizations_createInstance` | POST | `/v1/subscriptionLocalizations` | write (dry by default) | apple/subscriptions |
+| `subscriptionLocalizations_createInstance` | POST | `/v1/subscriptionLocalizations` | write (dry by default) | apple\subscriptions |
 | `subscriptionLocalizations_deleteInstance` | DELETE | `/v1/subscriptionLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionLocalizations_getInstance` | GET | `/v1/subscriptionLocalizations/{id}` | read |  |
-| `subscriptionLocalizations_updateInstance` | PATCH | `/v1/subscriptionLocalizations/{id}` | write (dry by default) |  |
+| `subscriptionLocalizations_updateInstance` | PATCH | `/v1/subscriptionLocalizations/{id}` | write (dry by default) | apple\subscriptions |
 | **subscriptionOfferCodeCustomCodes** (3) | | | | |
-| `subscriptionOfferCodeCustomCodes_createInstance` | POST | `/v1/subscriptionOfferCodeCustomCodes` | write (dry by default) | apple/subscriptions |
+| `subscriptionOfferCodeCustomCodes_createInstance` | POST | `/v1/subscriptionOfferCodeCustomCodes` | write (dry by default) | apple\subscriptions |
 | `subscriptionOfferCodeCustomCodes_getInstance` | GET | `/v1/subscriptionOfferCodeCustomCodes/{id}` | read |  |
 | `subscriptionOfferCodeCustomCodes_updateInstance` | PATCH | `/v1/subscriptionOfferCodeCustomCodes/{id}` | write (dry by default) |  |
 | **subscriptionOfferCodeOneTimeUseCodes** (4) | | | | |
@@ -1414,10 +1414,10 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionOfferCodeOneTimeUseCodes_updateInstance` | PATCH | `/v1/subscriptionOfferCodeOneTimeUseCodes/{id}` | write (dry by default) |  |
 | `subscriptionOfferCodeOneTimeUseCodes_values_getToOneRelated` | GET | `/v1/subscriptionOfferCodeOneTimeUseCodes/{id}/values` | read |  |
 | **subscriptionOfferCodes** (9) | | | | |
-| `subscriptionOfferCodes_createInstance` | POST | `/v1/subscriptionOfferCodes` | write (dry by default) | apple/subscriptions |
-| `subscriptionOfferCodes_customCodes_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/customCodes` | read | apple/subscriptions |
+| `subscriptionOfferCodes_createInstance` | POST | `/v1/subscriptionOfferCodes` | write (dry by default) | apple\subscriptions |
+| `subscriptionOfferCodes_customCodes_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/customCodes` | read | apple\subscriptions |
 | `subscriptionOfferCodes_customCodes_getToManyRelationship` | GET | `/v1/subscriptionOfferCodes/{id}/relationships/customCodes` | read |  |
-| `subscriptionOfferCodes_getInstance` | GET | `/v1/subscriptionOfferCodes/{id}` | read | apple/subscriptions |
+| `subscriptionOfferCodes_getInstance` | GET | `/v1/subscriptionOfferCodes/{id}` | read | apple\subscriptions |
 | `subscriptionOfferCodes_oneTimeUseCodes_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/oneTimeUseCodes` | read |  |
 | `subscriptionOfferCodes_oneTimeUseCodes_getToManyRelationship` | GET | `/v1/subscriptionOfferCodes/{id}/relationships/oneTimeUseCodes` | read |  |
 | `subscriptionOfferCodes_prices_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/prices` | read |  |
@@ -1432,14 +1432,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionPlanAvailabilities_updateInstance` | PATCH | `/v1/subscriptionPlanAvailabilities/{id}` | write (dry by default) |  |
 | **subscriptionPricePoints** (4) | | | | |
 | `subscriptionPricePoints_adjustedEqualizations_getToManyRelated` | GET | `/v1/subscriptionPricePoints/{id}/adjustedEqualizations` | read |  |
-| `subscriptionPricePoints_equalizations_getToManyRelated` | GET | `/v1/subscriptionPricePoints/{id}/equalizations` | read | apple/subscriptions, apple/win-back |
+| `subscriptionPricePoints_equalizations_getToManyRelated` | GET | `/v1/subscriptionPricePoints/{id}/equalizations` | read | apple\subscriptions, apple\win-back |
 | `subscriptionPricePoints_equalizations_getToManyRelationship` | GET | `/v1/subscriptionPricePoints/{id}/relationships/equalizations` | read |  |
 | `subscriptionPricePoints_getInstance` | GET | `/v1/subscriptionPricePoints/{id}` | read |  |
 | **subscriptionPrices** (2) | | | | |
 | `subscriptionPrices_createInstance` | POST | `/v1/subscriptionPrices` | owner only (typed confirm) |  |
 | `subscriptionPrices_deleteInstance` | DELETE | `/v1/subscriptionPrices/{id}` | owner only (typed confirm) |  |
 | **subscriptionPromotionalOffers** (6) | | | | |
-| `subscriptionPromotionalOffers_createInstance` | POST | `/v1/subscriptionPromotionalOffers` | write (dry by default) | apple/subscriptions |
+| `subscriptionPromotionalOffers_createInstance` | POST | `/v1/subscriptionPromotionalOffers` | write (dry by default) | apple\subscriptions |
 | `subscriptionPromotionalOffers_deleteInstance` | DELETE | `/v1/subscriptionPromotionalOffers/{id}` | owner only (typed confirm) |  |
 | `subscriptionPromotionalOffers_getInstance` | GET | `/v1/subscriptionPromotionalOffers/{id}` | read |  |
 | `subscriptionPromotionalOffers_prices_getToManyRelated` | GET | `/v1/subscriptionPromotionalOffers/{id}/prices` | read |  |
@@ -1448,7 +1448,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **subscriptionSubmissions** (1) | | | | |
 | `subscriptionSubmissions_createInstance` | POST | `/v1/subscriptionSubmissions` | owner only (typed confirm) |  |
 | **subscriptionVersions** (8) | | | | |
-| `subscriptionVersions_createInstance` | POST | `/v1/subscriptionVersions` | write (dry by default) | lib/review-submit |
+| `subscriptionVersions_createInstance` | POST | `/v1/subscriptionVersions` | write (dry by default) | lib\review-submit |
 | `subscriptionVersions_getInstance` | GET | `/v1/subscriptionVersions/{id}` | read |  |
 | `subscriptionVersions_image_getToOneRelated` | GET | `/v1/subscriptionVersions/{id}/image` | read |  |
 | `subscriptionVersions_image_getToOneRelationship` | GET | `/v1/subscriptionVersions/{id}/relationships/image` | read |  |
@@ -1457,42 +1457,42 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionVersions_localizations_getToManyRelated` | GET | `/v1/subscriptionVersions/{id}/localizations` | read |  |
 | `subscriptionVersions_localizations_getToManyRelationship` | GET | `/v1/subscriptionVersions/{id}/relationships/localizations` | read |  |
 | **subscriptions** (32) | | | | |
-| `subscriptions_appStoreReviewScreenshot_getToOneRelated` | GET | `/v1/subscriptions/{id}/appStoreReviewScreenshot` | read | apple/subscriptions, validate |
+| `subscriptions_appStoreReviewScreenshot_getToOneRelated` | GET | `/v1/subscriptions/{id}/appStoreReviewScreenshot` | read | apple\subscriptions, validate |
 | `subscriptions_appStoreReviewScreenshot_getToOneRelationship` | GET | `/v1/subscriptions/{id}/relationships/appStoreReviewScreenshot` | read |  |
-| `subscriptions_createInstance` | POST | `/v1/subscriptions` | write (dry by default) | apple/subscriptions |
+| `subscriptions_createInstance` | POST | `/v1/subscriptions` | write (dry by default) | apple\subscriptions |
 | `subscriptions_deleteInstance` | DELETE | `/v1/subscriptions/{id}` | owner only (typed confirm) |  |
-| `subscriptions_getInstance` | GET | `/v1/subscriptions/{id}` | read | apple/subscriptions |
+| `subscriptions_getInstance` | GET | `/v1/subscriptions/{id}` | read | apple\subscriptions |
 | `subscriptions_images_getToManyRelated` | GET | `/v1/subscriptions/{id}/images` | read |  |
 | `subscriptions_images_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/images` | read |  |
 | `subscriptions_introductoryOffers_deleteToManyRelationship` | DELETE | `/v1/subscriptions/{id}/relationships/introductoryOffers` | owner only (typed confirm) |  |
-| `subscriptions_introductoryOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/introductoryOffers` | read | apple/subscriptions, catalog |
+| `subscriptions_introductoryOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/introductoryOffers` | read | apple\subscriptions, catalog |
 | `subscriptions_introductoryOffers_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/introductoryOffers` | read |  |
-| `subscriptions_offerCodes_getToManyRelated` | GET | `/v1/subscriptions/{id}/offerCodes` | read | apple/subscriptions, catalog |
+| `subscriptions_offerCodes_getToManyRelated` | GET | `/v1/subscriptions/{id}/offerCodes` | read | apple\subscriptions, catalog |
 | `subscriptions_offerCodes_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/offerCodes` | read |  |
 | `subscriptions_planAvailabilities_getToManyRelated` | GET | `/v1/subscriptions/{id}/planAvailabilities` | read |  |
 | `subscriptions_planAvailabilities_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/planAvailabilities` | read |  |
-| `subscriptions_pricePoints_getToManyRelated` | GET | `/v1/subscriptions/{id}/pricePoints` | read | apple/subscriptions, apple/win-back |
+| `subscriptions_pricePoints_getToManyRelated` | GET | `/v1/subscriptions/{id}/pricePoints` | read | apple\subscriptions, apple\win-back |
 | `subscriptions_pricePoints_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/pricePoints` | read |  |
 | `subscriptions_prices_deleteToManyRelationship` | DELETE | `/v1/subscriptions/{id}/relationships/prices` | owner only (typed confirm) |  |
-| `subscriptions_prices_getToManyRelated` | GET | `/v1/subscriptions/{id}/prices` | read | apple/subscriptions, apple/win-back, catalog, prices |
+| `subscriptions_prices_getToManyRelated` | GET | `/v1/subscriptions/{id}/prices` | read | apple\subscriptions, apple\win-back, catalog, prices |
 | `subscriptions_prices_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/prices` | read |  |
 | `subscriptions_promotedPurchase_getToOneRelated` | GET | `/v1/subscriptions/{id}/promotedPurchase` | read |  |
 | `subscriptions_promotedPurchase_getToOneRelationship` | GET | `/v1/subscriptions/{id}/relationships/promotedPurchase` | read |  |
-| `subscriptions_promotionalOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/promotionalOffers` | read | apple/subscriptions, catalog |
+| `subscriptions_promotionalOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/promotionalOffers` | read | apple\subscriptions, catalog |
 | `subscriptions_promotionalOffers_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/promotionalOffers` | read |  |
-| `subscriptions_subscriptionAvailability_getToOneRelated` | GET | `/v1/subscriptions/{id}/subscriptionAvailability` | read | apple/subscriptions |
+| `subscriptions_subscriptionAvailability_getToOneRelated` | GET | `/v1/subscriptions/{id}/subscriptionAvailability` | read | apple\subscriptions |
 | `subscriptions_subscriptionAvailability_getToOneRelationship` | GET | `/v1/subscriptions/{id}/relationships/subscriptionAvailability` | read |  |
-| `subscriptions_subscriptionLocalizations_getToManyRelated` | GET | `/v1/subscriptions/{id}/subscriptionLocalizations` | read | apple/subscriptions, catalog, validate |
+| `subscriptions_subscriptionLocalizations_getToManyRelated` | GET | `/v1/subscriptions/{id}/subscriptionLocalizations` | read | apple\subscriptions, catalog, validate |
 | `subscriptions_subscriptionLocalizations_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/subscriptionLocalizations` | read |  |
-| `subscriptions_updateInstance` | PATCH | `/v1/subscriptions/{id}` | write (dry by default) | apple/subscriptions |
-| `subscriptions_versions_getToManyRelated` | GET | `/v1/subscriptions/{id}/versions` | read | apple/first-products, apple/iap-submit |
+| `subscriptions_updateInstance` | PATCH | `/v1/subscriptions/{id}` | write (dry by default) | apple\subscriptions |
+| `subscriptions_versions_getToManyRelated` | GET | `/v1/subscriptions/{id}/versions` | read | apple\first-products, apple\iap-submit |
 | `subscriptions_versions_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/versions` | read |  |
-| `subscriptions_winBackOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/winBackOffers` | read | apple/win-back |
+| `subscriptions_winBackOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/winBackOffers` | read | apple\win-back |
 | `subscriptions_winBackOffers_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/winBackOffers` | read |  |
 | **territories** (1) | | | | |
-| `territories_getCollection` | GET | `/v1/territories` | read | apple/appinfo, apple/events, apple/iap, apple/offer-codes, apple/subscriptions |
+| `territories_getCollection` | GET | `/v1/territories` | read | apple\appinfo, apple\events, apple\iap, apple\offer-codes, apple\subscriptions |
 | **territoryAvailabilities** (1) | | | | |
-| `territoryAvailabilities_updateInstance` | PATCH | `/v1/territoryAvailabilities/{id}` | write (dry by default) | lib/offers |
+| `territoryAvailabilities_updateInstance` | PATCH | `/v1/territoryAvailabilities/{id}` | write (dry by default) | lib\offers |
 | **userInvitations** (6) | | | | |
 | `userInvitations_createInstance` | POST | `/v1/userInvitations` | owner only (typed confirm) |  |
 | `userInvitations_deleteInstance` | DELETE | `/v1/userInvitations/{id}` | owner only (typed confirm) |  |
@@ -1522,10 +1522,10 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `webhooks_getInstance` | GET | `/v1/webhooks/{id}` | read |  |
 | `webhooks_updateInstance` | PATCH | `/v1/webhooks/{id}` | write (dry by default) |  |
 | **winBackOffers** (6) | | | | |
-| `winBackOffers_createInstance` | POST | `/v1/winBackOffers` | write (dry by default) | apple/win-back |
+| `winBackOffers_createInstance` | POST | `/v1/winBackOffers` | write (dry by default) | apple\win-back |
 | `winBackOffers_deleteInstance` | DELETE | `/v1/winBackOffers/{id}` | owner only (typed confirm) |  |
 | `winBackOffers_getInstance` | GET | `/v1/winBackOffers/{id}` | read |  |
-| `winBackOffers_prices_getToManyRelated` | GET | `/v1/winBackOffers/{id}/prices` | read |  |
+| `winBackOffers_prices_getToManyRelated` | GET | `/v1/winBackOffers/{id}/prices` | read | apple\win-back |
 | `winBackOffers_prices_getToManyRelationship` | GET | `/v1/winBackOffers/{id}/relationships/prices` | read |  |
 | `winBackOffers_updateInstance` | PATCH | `/v1/winBackOffers/{id}` | write (dry by default) |  |
 
@@ -1536,7 +1536,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | operation | method | path | gate | wrapped by (cli/…) |
 |---|---|---|---|---|
 | **androidpublisher.applications** (1) | | | | |
-| `androidpublisher.applications.dataSafety` | POST | `androidpublisher/v3/applications/{packageName}/dataSafety` | write (dry by default) | play/data-safety |
+| `androidpublisher.applications.dataSafety` | POST | `androidpublisher/v3/applications/{packageName}/dataSafety` | write (dry by default) | play\data-safety |
 | **androidpublisher.applications.deviceTierConfigs** (3) | | | | |
 | `androidpublisher.applications.deviceTierConfigs.create` | POST | `androidpublisher/v3/applications/{packageName}/deviceTierConfigs` | write (dry by default) |  |
 | `androidpublisher.applications.deviceTierConfigs.get` | GET | `androidpublisher/v3/applications/{packageName}/deviceTierConfigs/{deviceTierConfigId}` | read |  |
@@ -1564,26 +1564,26 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.appstorecatalog.recentupdateevents** (1) | | | | |
 | `androidpublisher.appstorecatalog.recentupdateevents.list` | GET | `androidpublisher/v3/appstorecatalog/{appStorePackageName}/recentUpdateEvents` | read |  |
 | **androidpublisher.edits** (5) | | | | |
-| `androidpublisher.edits.commit` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:commit` | owner only (typed confirm) | play/client |
-| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play/client, validate |
+| `androidpublisher.edits.commit` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:commit` | owner only (typed confirm) | play\client |
+| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play\client, validate |
 | `androidpublisher.edits.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | read |  |
-| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play/client, validate |
-| `androidpublisher.edits.validate` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:validate` | write (dry by default) | play/client |
+| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play\client, validate |
+| `androidpublisher.edits.validate` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:validate` | write (dry by default) | play\client |
 | **androidpublisher.edits.apks** (3) | | | | |
 | `androidpublisher.edits.apks.addexternallyhosted` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/externallyHosted` | write (dry by default) |  |
-| `androidpublisher.edits.apks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks` | read | play/next-version-code |
+| `androidpublisher.edits.apks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks` | read | play\next-version-code |
 | `androidpublisher.edits.apks.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks` | write (dry by default) |  |
 | **androidpublisher.edits.bundles** (2) | | | | |
-| `androidpublisher.edits.bundles.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | read | play/next-version-code |
-| `androidpublisher.edits.bundles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | write (dry by default) | play/release, play/upload |
+| `androidpublisher.edits.bundles.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | read | play\next-version-code |
+| `androidpublisher.edits.bundles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | write (dry by default) | play\release, play\upload |
 | **androidpublisher.edits.countryavailability** (1) | | | | |
 | `androidpublisher.edits.countryavailability.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/countryAvailability/{track}` | read | validate |
 | **androidpublisher.edits.deobfuscationfiles** (1) | | | | |
 | `androidpublisher.edits.deobfuscationfiles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/deobfuscationFiles/{deobfuscationFileType}` | write (dry by default) |  |
 | **androidpublisher.edits.details** (3) | | | | |
-| `androidpublisher.edits.details.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | read | apps, onboard, play/listing, play/status, validate |
+| `androidpublisher.edits.details.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | read | apps, onboard, play\listing, play\status, validate |
 | `androidpublisher.edits.details.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | write (dry by default) |  |
-| `androidpublisher.edits.details.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | write (dry by default) | play/listing |
+| `androidpublisher.edits.details.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | write (dry by default) | play\listing |
 | **androidpublisher.edits.expansionfiles** (4) | | | | |
 | `androidpublisher.edits.expansionfiles.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/expansionFiles/{expansionFileType}` | read |  |
 | `androidpublisher.edits.expansionfiles.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/expansionFiles/{expansionFileType}` | write (dry by default) |  |
@@ -1591,26 +1591,26 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.edits.expansionfiles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/expansionFiles/{expansionFileType}` | write (dry by default) |  |
 | **androidpublisher.edits.images** (4) | | | | |
 | `androidpublisher.edits.images.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}/{imageId}` | owner only (typed confirm) |  |
-| `androidpublisher.edits.images.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | owner only (typed confirm) | play/images |
-| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play/images, validate |
-| `androidpublisher.edits.images.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | write (dry by default) | play/images |
+| `androidpublisher.edits.images.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | owner only (typed confirm) | play\images |
+| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play\images, validate |
+| `androidpublisher.edits.images.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | write (dry by default) | play\images, play\listing |
 | **androidpublisher.edits.listings** (6) | | | | |
 | `androidpublisher.edits.listings.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | owner only (typed confirm) |  |
 | `androidpublisher.edits.listings.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | owner only (typed confirm) |  |
 | `androidpublisher.edits.listings.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | read | onboard |
-| `androidpublisher.edits.listings.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | read | art, listing-store, play/listing, play/status, validate |
+| `androidpublisher.edits.listings.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | read | art, listing-store, play\listing, play\status, validate |
 | `androidpublisher.edits.listings.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store |
-| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play/listing |
+| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play\listing |
 | **androidpublisher.edits.testers** (3) | | | | |
 | `androidpublisher.edits.testers.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | read |  |
 | `androidpublisher.edits.testers.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | owner only (typed confirm) |  |
 | `androidpublisher.edits.testers.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | owner only (typed confirm) |  |
 | **androidpublisher.edits.tracks** (5) | | | | |
 | `androidpublisher.edits.tracks.create` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | write (dry by default) |  |
-| `androidpublisher.edits.tracks.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | read | play/release, play/rollout, play/upload |
-| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play/next-version-code, play/status, validate |
+| `androidpublisher.edits.tracks.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | read | play\release, play\rollout, play\upload |
+| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play\next-version-code, play\status, validate |
 | `androidpublisher.edits.tracks.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) |  |
-| `androidpublisher.edits.tracks.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) | play/release, play/rollout, play/upload |
+| `androidpublisher.edits.tracks.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) | play\release, play\rollout, play\upload |
 | **androidpublisher.externaltransactions** (3) | | | | |
 | `androidpublisher.externaltransactions.createexternaltransaction` | POST | `androidpublisher/v3/{+parent}/externalTransactions` | write (dry by default) |  |
 | `androidpublisher.externaltransactions.getexternaltransaction` | GET | `androidpublisher/v3/{+name}` | read |  |
@@ -1636,18 +1636,18 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.internalappsharingartifacts.uploadapk` | POST | `androidpublisher/v3/applications/internalappsharing/{packageName}/artifacts/apk` | write (dry by default) |  |
 | `androidpublisher.internalappsharingartifacts.uploadbundle` | POST | `androidpublisher/v3/applications/internalappsharing/{packageName}/artifacts/bundle` | write (dry by default) |  |
 | **androidpublisher.monetization** (1) | | | | |
-| `androidpublisher.monetization.convertRegionPrices` | POST | `androidpublisher/v3/applications/{packageName}/pricing:convertRegionPrices` | read | play/products, play/subscriptions, prices, prices-ppp |
+| `androidpublisher.monetization.convertRegionPrices` | POST | `androidpublisher/v3/applications/{packageName}/pricing:convertRegionPrices` | read | play\products, play\subscriptions, prices, prices-ppp |
 | **androidpublisher.monetization.onetimeproducts** (7) | | | | |
 | `androidpublisher.monetization.onetimeproducts.batchDelete` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts:batchDelete` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.batchGet` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts:batchGet` | read |  |
 | `androidpublisher.monetization.onetimeproducts.batchUpdate` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts:batchUpdate` | write (dry by default) |  |
 | `androidpublisher.monetization.onetimeproducts.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.get` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}` | read | prices |
-| `androidpublisher.monetization.onetimeproducts.list` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts` | read | play/products |
-| `androidpublisher.monetization.onetimeproducts.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/onetimeproducts/{productId}` | write (dry by default) | play/products, prices |
+| `androidpublisher.monetization.onetimeproducts.list` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts` | read | play\products |
+| `androidpublisher.monetization.onetimeproducts.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/onetimeproducts/{productId}` | write (dry by default) | play\products, prices |
 | **androidpublisher.monetization.onetimeproducts.purchaseOptions** (2) | | | | |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchDelete` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchDelete` | owner only (typed confirm) |  |
-| `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchUpdateStates` | owner only (typed confirm) | play/products |
+| `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchUpdateStates` | owner only (typed confirm) | play\products |
 | **androidpublisher.monetization.onetimeproducts.purchaseOptions.offers** (8) | | | | |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.offers.activate` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions/{purchaseOptionId}/offers/{offerId}:activate` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.offers.batchDelete` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions/{purchaseOptionId}/offers:batchDelete` | owner only (typed confirm) |  |
@@ -1661,13 +1661,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.monetization.subscriptions.archive` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}:archive` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.batchGet` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions:batchGet` | read |  |
 | `androidpublisher.monetization.subscriptions.batchUpdate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions:batchUpdate` | write (dry by default) |  |
-| `androidpublisher.monetization.subscriptions.create` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions` | write (dry by default) | play/subscriptions |
+| `androidpublisher.monetization.subscriptions.create` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions` | write (dry by default) | play\subscriptions |
 | `androidpublisher.monetization.subscriptions.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | owner only (typed confirm) |  |
-| `androidpublisher.monetization.subscriptions.get` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | read | play/subscriptions, prices |
-| `androidpublisher.monetization.subscriptions.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions` | read | catalog, play/subscriptions, validate |
-| `androidpublisher.monetization.subscriptions.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | write (dry by default) | play/subscriptions |
+| `androidpublisher.monetization.subscriptions.get` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | read | play\subscriptions, prices |
+| `androidpublisher.monetization.subscriptions.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions` | read | catalog, play\subscriptions, validate |
+| `androidpublisher.monetization.subscriptions.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | write (dry by default) | play\subscriptions |
 | **androidpublisher.monetization.subscriptions.basePlans** (6) | | | | |
-| `androidpublisher.monetization.subscriptions.basePlans.activate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}:activate` | owner only (typed confirm) | play/subscriptions |
+| `androidpublisher.monetization.subscriptions.basePlans.activate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}:activate` | owner only (typed confirm) | play\subscriptions |
 | `androidpublisher.monetization.subscriptions.basePlans.batchMigratePrices` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans:batchMigratePrices` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.batchUpdateStates` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans:batchUpdateStates` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.deactivate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}:deactivate` | owner only (typed confirm) |  |
@@ -1682,7 +1682,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.monetization.subscriptions.basePlans.offers.deactivate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}:deactivate` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.offers.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.offers.get` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}` | read |  |
-| `androidpublisher.monetization.subscriptions.basePlans.offers.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers` | read | catalog, play/subscriptions |
+| `androidpublisher.monetization.subscriptions.basePlans.offers.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers` | read | catalog, play\subscriptions |
 | `androidpublisher.monetization.subscriptions.basePlans.offers.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}` | write (dry by default) |  |
 | **androidpublisher.orders** (4) | | | | |
 | `androidpublisher.orders.batchget` | GET | `androidpublisher/v3/applications/{packageName}/orders:batchGet` | read |  |
@@ -1709,7 +1709,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.reviews** (3) | | | | |
 | `androidpublisher.reviews.get` | GET | `androidpublisher/v3/applications/{packageName}/reviews/{reviewId}` | read |  |
 | `androidpublisher.reviews.list` | GET | `androidpublisher/v3/applications/{packageName}/reviews` | read | reviews |
-| `androidpublisher.reviews.reply` | POST | `androidpublisher/v3/applications/{packageName}/reviews/{reviewId}:reply` | owner only (typed confirm) | lib/reviews |
+| `androidpublisher.reviews.reply` | POST | `androidpublisher/v3/applications/{packageName}/reviews/{reviewId}:reply` | owner only (typed confirm) | lib\reviews |
 | **androidpublisher.systemapks.variants** (4) | | | | |
 | `androidpublisher.systemapks.variants.create` | POST | `androidpublisher/v3/applications/{packageName}/systemApks/{versionCode}/variants` | write (dry by default) |  |
 | `androidpublisher.systemapks.variants.download` | GET | `androidpublisher/v3/applications/{packageName}/systemApks/{versionCode}/variants/{variantId}:download` | read |  |
@@ -1731,7 +1731,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `playdeveloperreporting.anomalies.list` | GET | `v1beta1/{+parent}/anomalies` | read |  |
 | **playdeveloperreporting.apps** (2) | | | | |
 | `playdeveloperreporting.apps.fetchReleaseFilterOptions` | GET | `v1beta1/{+name}:fetchReleaseFilterOptions` | read |  |
-| `playdeveloperreporting.apps.search` | GET | `v1beta1/apps:search` | read | apps, lib/store-apps |
+| `playdeveloperreporting.apps.search` | GET | `v1beta1/apps:search` | read | apps, lib\store-apps |
 | **playdeveloperreporting.vitals.anonrssandswapmemoryusage** (2) | | | | |
 | `playdeveloperreporting.vitals.anonrssandswapmemoryusage.get` | GET | `v1beta1/{+name}` | read |  |
 | `playdeveloperreporting.vitals.anonrssandswapmemoryusage.query` | POST | `v1beta1/{+name}:query` | read |  |

From 0ed7bc1ca058d232f5714e17517cefd71b5cf4f8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 11:30:53 +0700
Subject: [PATCH 101/255] storebound 0.8.42: version in package.json and every
 copy, CHANGELOG 0.8.42 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 24b83ff..e670194 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.41",
+      "version": "0.8.42",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 9bbdea1..17540ac 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.41",
+  "version": "0.8.42",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index bdf466e..0411633 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.41",
+  "version": "0.8.42",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 42a65c1..d2d2631 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.42 · 2026-10-23
+
 - Desktop: every read goes through one registry: one store call per read however many buttons are clicked, overlapping buttons (Refresh all, card refresh, Check again, Import, Test) are busy and disabled together, a read just finished is not repeated, and all reads share the scheduler's rate limits and backoff.
 - Desktop: tray mini card on left click (rejections, releases moving, crash alerts, recent low reviews, refresh, quick actions); right click keeps the menu.
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 527db86..e64bf46 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.41",
+  "version": "0.8.42",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 9d2ab9a..234d938 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.41"
+version = "0.8.42"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index df30f0c..e28e236 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.41"
+version = "0.8.42"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 1ac8b1d..f684e50 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.41",
+  "version": "0.8.42",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index f1ba838..73a3a0e 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.41",
+  "version": "0.8.42",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 9ce3e6f..6bab2d5 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.41",
+  "version": "0.8.42",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 493327998754125f53881959a1fe73be50b023e5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:13:03 +0800
Subject: [PATCH 102/255] gen-api: module names with forward slashes on Windows
 too (the tables were stale on Linux CI)

---
 tools/gen-api.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/gen-api.ts b/tools/gen-api.ts
index 31eaaf1..38e6c12 100644
--- a/tools/gen-api.ts
+++ b/tools/gen-api.ts
@@ -204,7 +204,7 @@ function listTs(dir: string): string[] {
 }
 
 export function scanCli(root = ROOT): CallSite[] {
-  return listTs(join(root, 'cli')).flatMap(p => scanSource(relative(join(root, 'cli'), p).replace(/\.ts$/, ''), readFileSync(p, 'utf8')));
+  return listTs(join(root, 'cli')).flatMap(p => scanSource(relative(join(root, 'cli'), p).replaceAll('\\', '/').replace(/\.ts$/, ''), readFileSync(p, 'utf8')));
 }
 
 // ---------------------------------------------------------------------------------------------------------- output

From 4eac8e8cd84501855a6edba371ca061c7ace7797 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:13:15 +0800
Subject: [PATCH 103/255] storebound status: per platform live and next
 version, build, track, review state and rollout % without uploading
 (read-only, one JSON line); release status --app also takes an app folder or
 a store id

---
 cli/commands.ts |  1 +
 cli/release.ts  | 21 ++++++++++++---
 cli/status.ts   | 72 +++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 90 insertions(+), 4 deletions(-)
 create mode 100644 cli/status.ts

diff --git a/cli/commands.ts b/cli/commands.ts
index fb036bb..3655643 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -12,6 +12,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'install': [() => import('./install'), 'skills + MCP server for --agent claude|codex|cursor|copilot|windsurf|gemini|opencode'],
   'mcp': [async () => ({ run: async () => (await import('./mcp')).serve() }), 'stdio MCP server wrapping these commands (for any MCP-capable AI tool)'],
   'watch': [() => import('./watch'), 'store events for every app on this machine: rejected, approved, live, rollout halted, crash threshold, low reviews; loops every --every 15m or --once; sinks --notify os|ntfy|telegram|webhook; test sends a test event; --dry, --dir <folder>, --json (read-only on the stores)'],
+  'status': [() => import('./status'), '[--app <name|store id|folder>] [--json]: per platform the live and next version, build, track, review state and rollout %, without uploading (read-only; read by ship pipelines, docs/ship-step.md)'],
   'events': [() => import('./events'), '[--since 24h] [--app <name>] [--kind rejected] [--json]: the events watch recorded in ~/.storebound/events.jsonl (read-only)'],
   'serve': [() => import('./serve'), '--stdio: JSON-RPC session for the storebound desktop app (dry runs; writes need a host confirm token)'],
   'apps': [() => import('./apps'), 'list (every app the store keys can see: App Store Connect team, Play developer accounts; --icons) | check (key works / permission missing / revoked, with the fix); --store apple|play, --json; read-only | folders | add [<folder>] | remove <folder>: the app folders of this machine, the same list as the desktop app | ignore|unignore <name|id> [--store apple|play]: leave a dormant app (or one store side) out of watch, portfolio reads and the desktop lists; storebound only, the store is untouched'],
diff --git a/cli/release.ts b/cli/release.ts
index fc217c1..134900b 100644
--- a/cli/release.ts
+++ b/cli/release.ts
@@ -23,7 +23,7 @@ import { findWorkspace, loadWorkspace, resolveApps, selectApps } from './lib/wor
 import { appDir, appEnv, workspaceApps } from './workspace';
 import { findFastlaneTraces, traceMessage } from './lib/fastlane-traces';
 
-interface Target { name: string; dir: string; virtual: boolean; env: Record<string, string>; problems: string[] }
+export interface Target { name: string; dir: string; virtual: boolean; env: Record<string, string>; problems: string[] }
 
 const USAGE = 'usage: storebound release status [--app a,b] [--versions] [--json] | release plan <version> [--app a] [--no-validate] [--json]';
 
@@ -35,8 +35,14 @@ function configDir(from: string): string | null {
 }
 
 /** The apps to read: this app folder, or the workspace's apps (filtered by --app). */
-async function targets(args: Args): Promise<{ list: Target[]; concurrency: number }> {
+export async function targets(args: Args): Promise<{ list: Target[]; concurrency: number }> {
   const cwd = process.cwd();
+  // --app <folder>: an app folder given by path (the ship pipeline's checkout)
+  const asked = args.list('app');
+  if (asked.length === 1 && existsSync(resolve(cwd, asked[0]!)) && configDir(resolve(cwd, asked[0]!)) === resolve(cwd, asked[0]!)) {
+    const dir = resolve(cwd, asked[0]!);
+    return { list: [{ name: dir.split(/[\\/]/).pop() ?? dir, dir, virtual: false, env: {}, problems: [] }], concurrency: 1 };
+  }
   const here = configDir(cwd);
   const wsFile = findWorkspace(cwd, args.get('workspace'));
   // an app folder wins unless --app asks for the workspace (or the workspace file is closer than the config)
@@ -53,14 +59,21 @@ async function targets(args: Args): Promise<{ list: Target[]; concurrency: numbe
     if (r.code === 0 && r.data) summaries.set(f.id, r.data as AppStatus['summary']);
   });
   const { apps, accounts } = workspaceApps(l, summaries);
-  const { picked, unknown } = selectApps(apps.filter(a => !a.ignored), args.list('app'));
+  const live = apps.filter(a => !a.ignored);
+  const sel = selectApps(live, args.list('app'));
+  // --app <store id>: a bundle id, package name or App Store app id finds the app too
+  const ids = (a: (typeof live)[number]): string[] => [a.unified.ios?.app.bundleId, a.unified.ios?.app.id, a.unified.android?.app.id, a.summary?.apple?.bundleId, a.summary?.apple?.appId, a.summary?.play?.packageName]
+    .filter((x): x is string => !!x).map(x => x.toLowerCase());
+  const byId = sel.unknown.map(n => ({ n, hits: live.filter(a => ids(a).includes(n.toLowerCase())) }));
+  const picked = live.filter(a => sel.picked.includes(a) || byId.some(b => b.hits.includes(a)));
+  const unknown = byId.filter(b => !b.hits.length).map(b => b.n);
   if (unknown.length) throw new Error(`--app: no app named ${unknown.join(', ')} (storebound ws list shows the names)`);
   return { list: picked.map(a => { const { env, problems } = appEnv(a.unified, accounts); return { name: a.name, dir: appDir(a), virtual: a.virtual, env, problems }; }), concurrency: n };
 }
 
 const exec = (env: Record<string, string>) => (argv: string[], cwd: string): Promise<RunResult> => runCommand(argv, { cwd, env, machine: true }).result;
 
-async function readLive(t: Target): Promise<AppStatus> {
+export async function readLive(t: Target): Promise<AppStatus> {
   const e = emptyStatus(t.dir);
   if (t.virtual) e.virtual = true;
   try { await fillAppStatus(e, t.dir, { live: true, virtual: t.virtual, exec: exec(t.env) }); } catch (err) { e.errors.push((err as Error).message); }
diff --git a/cli/status.ts b/cli/status.ts
new file mode 100644
index 0000000..a242f14
--- /dev/null
+++ b/cli/status.ts
@@ -0,0 +1,72 @@
+// What is on the stores now, per platform, without uploading anything (the read of a ship pipeline before a step).
+//   storebound status [--app <name|store id|folder>] [--json]
+// Per app and platform: the version reaching users (live) and the one above it (next), each with its build, track,
+// store state, review state and rollout %. The same reads as `storebound release status` (apple status / play status
+// through cli/lib/app-status.ts). --app takes an app folder (path), a workspace app name, or a store id (bundle id,
+// package name, App Store app id); without it: this app folder, or every app of the workspace. Read-only; exit 1
+// when a store could not be read. --json: one JSON line on stdout.
+import type { Args } from './lib/args';
+import type { AppStatus, StoreRelease } from './lib/desktop-protocol';
+import { log, printJson, warn } from './lib/log';
+import { pool } from './lib/app-status';
+import { storeNow } from './lib/train';
+import { textTable } from './lib/table';
+import { readLive, targets } from './release';
+
+export interface ReleaseState {
+  version: string | null;
+  build: string | null;
+  track: string | null;
+  /** The store's own state word (READY_FOR_SALE, WAITING_FOR_REVIEW, completed, inProgress ...). */
+  state: string;
+  phase: StoreRelease['phase'];
+  /** The state word while the release is with the store's review (sent, in review, approved, rejected), else null. */
+  reviewState: string | null;
+  /** Staged rollout (Play) / phased release (App Store) share in %, null without one. */
+  rolloutPct: number | null;
+}
+export interface PlatformStatus { platform: 'ios' | 'android'; store: 'apple' | 'play'; live: ReleaseState | null; next: ReleaseState | null; error?: string }
+
+const REVIEW = new Set(['sent', 'review', 'approved', 'rejected']);
+
+const stateOf = (r: StoreRelease | null): ReleaseState | null => r && {
+  version: r.version, build: r.build, track: r.track ?? (r.store === 'ios' ? 'app-store' : null), state: r.state, phase: r.phase,
+  reviewState: REVIEW.has(r.phase) ? r.state : null,
+  rolloutPct: r.fraction === null || r.fraction === undefined ? null : Math.round(r.fraction * 1000) / 10,
+};
+
+/** Per platform of an app: live + next release from its status read. Pure. */
+export function platformStatus(s: AppStatus): PlatformStatus[] {
+  const out: PlatformStatus[] = [];
+  const all = s.release.all ?? [];
+  for (const platform of ['ios', 'android'] as const) {
+    const on = platform === 'ios' ? s.summary?.apple : s.summary?.play;
+    const error = s.storeErrors[platform];
+    if (!on && !error) continue;
+    const { now, next } = storeNow(all, platform);
+    out.push({ platform, store: platform === 'ios' ? 'apple' : 'play', live: stateOf(now), next: stateOf(next), ...(error ? { error } : {}) });
+  }
+  return out;
+}
+
+const cell = (r: ReleaseState | null): string => !r ? '-' : `${r.version ?? '?'}${r.build ? ` (${r.build})` : ''} ${r.state}${r.rolloutPct !== null && r.rolloutPct < 100 ? ` ${r.rolloutPct}%` : ''}${r.track && r.track !== 'app-store' && r.track !== 'production' ? ` [${r.track}]` : ''}`;
+
+export async function run(args: Args): Promise<void> {
+  const { list, concurrency } = await targets(args);
+  const read = await pool(list, concurrency, async t => ({ t, s: await readLive(t) }));
+  const apps = read.map(({ t, s }) => ({ app: t.name, folder: t.virtual ? null : t.dir, platforms: platformStatus(s), errors: [...t.problems, ...s.errors], warnings: s.warnings ?? [] }));
+  if (args.has('json')) {
+    const data = { apps, at: new Date().toISOString() };
+    if (process.env.STOREBOUND_MACHINE === '1') printJson(data); else process.stdout.write(JSON.stringify(data) + '\n');
+  } else {
+    const rows: string[][] = [];
+    for (const a of apps) {
+      if (!a.platforms.length) rows.push([a.app, '', a.errors[0] ? `error: ${a.errors[0]}` : 'not on a store yet', '']);
+      for (const p of a.platforms) rows.push([a.app, p.store === 'apple' ? 'App Store' : 'Google Play', p.error ? `unreadable: ${p.error}` : cell(p.live), p.error ? '' : cell(p.next)]);
+      for (const w of [...a.warnings, ...a.errors.slice(a.platforms.length ? 0 : 1)]) warn('status', `${a.app}: ${w}`);
+    }
+    console.log(textTable(['app', 'store', 'live', 'next'], rows));
+    log('status', 'read-only; `storebound release status` shows both stores on one train');
+  }
+  if (apps.some(a => a.errors.length || a.platforms.some(p => p.error))) process.exitCode = 1;
+}

From 06a0b424f5af69987d817c5aa0a473358172ba11 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:13:21 +0800
Subject: [PATCH 104/255] Ship-step contract for pipelines: uniform exit codes
 (0/1/2/3/4/7) in cli/lib/ship-step.ts, one final --json line, --result-file
 (atomic, also on failure), --progress json, --env-file with secret redaction,
 --version-from; idempotent play upload / apple upload / play release / apple
 submit re-runs end with exit 7; play upload takes --track production and
 --version-code

---
 cli/apple/build.ts       |   5 +
 cli/apple/resubmit.ts    |  26 ++-
 cli/apple/upload.ts      |  31 ++-
 cli/data/flags.json      |  57 +++++-
 cli/index.ts             |  25 ++-
 cli/lib/console-links.ts |   1 +
 cli/lib/ctx.ts           |   3 +
 cli/lib/log.ts           |   3 +
 cli/lib/ship-step.ts     | 412 +++++++++++++++++++++++++++++++++++++++
 cli/play/build.ts        |   5 +
 cli/play/release.ts      |  11 +-
 cli/play/upload.ts       |  45 +++--
 tests/build-sign.test.ts |  13 +-
 tests/ship-step.test.ts  | 315 ++++++++++++++++++++++++++++++
 14 files changed, 928 insertions(+), 24 deletions(-)
 create mode 100644 cli/lib/ship-step.ts
 create mode 100644 tests/ship-step.test.ts

diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index ba282fd..277bfce 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -28,6 +28,7 @@ import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { findBundleId } from './signing';
 import * as rt from '../lib/rt';
+import { shipPhase } from '../lib/ship-step';
 
 const TAG = 'build';
 
@@ -172,6 +173,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // (Embed Pods Frameworks). Stop before the web build and the archive (pitfall 101).
   const remote = remoteBuildSession(process.env, rt.spawnSync(['launchctl', 'managername'], { timeout: 5000 }).stdout.toString().trim());
   if (remote && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session: a Jenkins / Forgejo agent started in that session, or from SSH: write the command into a .command file and \`open -a Terminal <file>\` (it runs in the GUI session; unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside). --allow-ssh skips this check after \`security unlock-keychain\`.`);
+  shipPhase('prebuild', 'web build / prebuild');
   const web = await webStep({ ...webOpts, dry: false });
   for (const n of target.notes) log(TAG, n);
   const rsync = foreignRsync(process.env.PATH);
@@ -182,12 +184,15 @@ export async function run(ctx: Ctx): Promise<void> {
   const realAuth: AscAuth | null = key ? { keyPath: key.keyPath, keyId: key.keyId, issuerId: key.issuerId } : null;
   try {
     if (target.framework === 'flutter') await runLogged(flutterConfigArgs(build!, version), root, join(out, 'flutter-config.log'), showCmd(flutterConfigArgs(build!, version), null));
+    shipPhase('build', `xcodebuild archive, build ${build}`);
     const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth });
     await runLogged(arch, root, join(out, 'xcodebuild-archive.log'), showCmd(arch, realAuth));
+    shipPhase('sign', 'xcodebuild -exportArchive (signing)');
     await exportIpa({ root, out, archivePath, exportPath, auth: realAuth });
   } finally { key?.cleanup(); }
   const ipa = readdirSync(exportPath).find(f => f.endsWith('.ipa'))!;
   const info = ipaInfo(join(exportPath, ipa));
+  shipPhase('verify', `${info.version} (${info.build})`);
   if (info.bundleId !== bundleId) warn(TAG, `the IPA's bundle id is ${info.bundleId}, the config says ${bundleId}`);
   const vwhy = ipaVersionProblem(info.version, version, 'the requested --version');
   if (vwhy) { if (a.has('allow-version-mismatch')) warn(TAG, vwhy); else throw new Error(`${relative(root, join(exportPath, ipa))}: ${vwhy}`); }
diff --git a/cli/apple/resubmit.ts b/cli/apple/resubmit.ts
index ef834a5..9b23312 100644
--- a/cli/apple/resubmit.ts
+++ b/cli/apple/resubmit.ts
@@ -28,11 +28,15 @@ import { readSubmitState, submitPlanned } from './iap-submit';
 import { explain409, isScreenshotProcessing409, pendingScreenshots, updateLedger, versionScreenshotRows } from './screenshot-health';
 import { openSubmissions } from './submission';
 import { ensureGcSwitch, gameCenterInUse, gcSwitchPlan, readGcSwitch } from './game-center';
+import { shipNoop, shipPhase, shipReport, shipRun } from '../lib/ship-step';
+import { consoleUrl } from '../lib/console-links';
 import { allVersions, parsePlatform, pickPlatform, platformLabel, platformOf, versionsPath } from './platform';
 
 /** App Store version states a first submission may send: the editable version (Prepare for Submission, a rejected
  *  one, or one already Ready for Review in a draft). */
 export const SUBMITTABLE_APP = new Set(['PREPARE_FOR_SUBMISSION', 'READY_FOR_REVIEW', ...REJECTED_APP]);
+/** App Store version states after a submission went through: a re-run of `apple submit` with the same build has nothing to do. */
+export const SUBMITTED_APP = new Set(['WAITING_FOR_REVIEW', 'IN_REVIEW', 'PENDING_DEVELOPER_RELEASE', 'PENDING_APPLE_RELEASE', 'PROCESSING_FOR_DISTRIBUTION', 'READY_FOR_DISTRIBUTION', 'READY_FOR_SALE']);
 
 export async function run(ctx: Ctx): Promise<void> { await submitVersion(ctx, 'resubmit'); }
 
@@ -45,6 +49,24 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   if (!/^\d+(\.\d+)*$/.test(number)) throw new Error(`--build ${number}: a build number like 42 or 1.0.3 (the one you just uploaded, never "the latest")`);
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
   const appId = await c.app();
+  shipReport({ build: number, version: a.get('version'), url: consoleUrl('asc.app-review') });
+  shipPhase('verify', `reading the App Store versions and build ${number}`);
+  // the ship-step contract: the version already went to App Review with this build: nothing to do (exit 7)
+  if (mode === 'submit' && shipRun()) {
+    const want0 = a.get('version');
+    const flag0 = parsePlatform(a.get('platform'));
+    const sent = (await allVersions(c, appId)).filter((x: J) => (!want0 || x.attributes.versionString === want0) && (!flag0 || platformOf(x) === flag0)
+      && SUBMITTED_APP.has(String(x.attributes.appVersionState ?? x.attributes.appStoreState)));
+    for (const x of sent) {
+      const att = (await c.maybe(`/v1/appStoreVersions/${x.id}/build`))?.data;
+      if (att && String(att.attributes?.version ?? '') === number) {
+        const st = String(x.attributes.appVersionState ?? x.attributes.appStoreState);
+        shipNoop({ version: String(x.attributes.versionString), build: number, state: st });
+        done(TAG, `version ${String(x.attributes.versionString)} with build ${number} is ${st} already: nothing sent`);
+        return;
+      }
+    }
+  }
   const ids = [...(config.products ?? []).filter(p => sellsOn(config, p, 'apple')).map(p => p.id), ...allSubscriptions(config.subscriptions).filter(x => sellsOn(config, x.sub, 'apple')).map(x => x.sub.id)];
 
   // the platform: --platform, else the one whose version (or UNRESOLVED_ISSUES submission) this needs; both -> ask
@@ -100,6 +122,7 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
     // the desktop's owner dialog shows the output text: the plan table goes with the result there
     if (process.env.STOREBOUND_MACHINE === '1') { console.log(formatRows(rows)); for (const x of blockers) warn(TAG, x); }
     if (blockers.length) process.exitCode = 1;
+    else if (state.choice?.action === 'busy') shipNoop({ version: versionString, state: stateOf(v) });
     if (dry || blockers.length || state.choice?.action === 'busy') return;
   } else {
     console.log(formatRows(rows));
@@ -108,12 +131,13 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
     for (const x of blockers) warn(TAG, x);
   }
   if (blockers.length) { process.exitCode = 1; done(TAG, 'nothing sent: fix the blockers above'); return; }
-  if (state.choice?.action === 'busy') { done(TAG, `nothing to ${mode}: ${state.choice.why}`); return; }
+  if (state.choice?.action === 'busy') { shipNoop({ version: versionString, state: stateOf(v) }); done(TAG, `nothing to ${mode}: ${state.choice.why}`); return; }
   if (dry) {
     done(TAG, a.has('dry') ? 'dry run: nothing sent' : `dry run (no --yes): nothing sent. ${mode === 'submit' ? 'Submitting' : 'Resubmitting'} is the owner's step: after the owner's yes, run it again with --yes`);
     return;
   }
 
+  shipPhase('submit', `${mode === 'submit' ? 'submitting' : 'resubmitting'} ${versionString} with build ${number}`);
   if (build.action === 'attach') {
     await c.asc('PATCH', `/v1/appStoreVersions/${v.id}/relationships/build`, { data: { type: 'builds', id: build.id } });
     log(TAG, `build ${number} attached to ${versionString}`);
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 0f4f522..6868d25 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -35,6 +35,14 @@ import { elapsed, heartbeat, type HeartbeatOptions, mb, share, withHeartbeat } f
 import { pump } from '../lib/runner';
 import * as rt from '../lib/rt';
 import { partHeaders } from './screenshot-health';
+import { SHIP_EXIT, ShipStepError, shipNoop, shipPhase, shipReport, shipRun } from '../lib/ship-step';
+import { consoleUrl } from '../lib/console-links';
+
+/** Ends the run with a legacy exit code; under the ship-step contract a ShipStepError with the uniform code instead. */
+function stop(legacy: number, message: string): never {
+  if (shipRun()) throw legacy === BUILD_WAIT_EXIT.timeout ? new ShipStepError(message, SHIP_EXIT.failure, 'TIMEOUT') : new ShipStepError(message, SHIP_EXIT.refused, 'BUILD_INVALID', consoleUrl('asc.testflight'));
+  process.exit(legacy);
+}
 
 const TAG = 'upload';
 
@@ -124,6 +132,7 @@ export async function sendParts(o: SendPartsOptions): Promise<void> {
         await sleep(2000 * attempt);
       }
       sent += op.length;
+      shipPhase('upload', `${i + 1}/${n} parts`, (sent / o.size) * 100);
       if (n < 20 || (i + 1) % 10 === 0 || i === n - 1) say(`${i + 1}/${n} parts, ${share(sent, o.size)}, ${elapsed(now() - started)}`);
     }
   } finally { beat.stop(); }
@@ -230,7 +239,9 @@ export async function run(ctx: Ctx): Promise<void> {
     if (!found[0]) throw new Error(`usage: storebound apple upload <app.ipa> (no ${want ? `build ${want} ` : ''}IPA in ${relative(root, dir)}; storebound apple build makes one)`);
     ipa = found[0];
   } else ipa = resolve(ipa);
+  shipPhase('verify', `checking ${relative(root, ipa)}`);
   const info = ipaInfo(ipa);
+  shipReport({ version: info.version, build: info.build, url: consoleUrl('asc.testflight') });
   if (want && info.build !== want) throw new Error(`${relative(root, ipa)} is build ${info.build}, not ${want} (--build): did the last apple build fail?`);
   if (info.bundleId !== bundleId) throw new Error(`${relative(root, ipa)} is ${info.bundleId}, the config says ${bundleId}`);
   // App Store Connect refuses IPAs from an Xcode / SDK older than its current minimum (cli/lib/store-minimums.ts)
@@ -260,6 +271,14 @@ export async function run(ctx: Ctx): Promise<void> {
   const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
   const onAsc = builds.find(b => String(b.attributes.version) === info.build);
   const decision = existingBuild({ ipa: relative(root, ipa), build: info.build, onAsc: !!onAsc, state: onAsc?.attributes?.processingState, uploadComplete: !!already, allowExisting: a.has('allow-existing'), next });
+  // the ship-step contract: a build number App Store Connect has already is "nothing to do" (exit 7), never a second upload
+  if (shipRun() && (onAsc || already)) {
+    const state = String(onAsc?.attributes?.processingState ?? 'UPLOADED');
+    shipNoop({ state, url: consoleUrl('asc.testflight') });
+    if (json) printJson({ ipa: relative(root, ipa), version: info.version, build: info.build, uploaded: true, alreadyUploaded: true, processingState: state });
+    done(TAG, `build ${info.version} (${info.build}) is on App Store Connect already (${state}): nothing uploaded`);
+    return;
+  }
   if (decision instanceof Error) throw decision;
   if (decision === 'recheck') {
     log(TAG, `build ${info.version} (${info.build}) is on App Store Connect already${already ? ` (build upload ${already.id})` : ''}; --allow-existing: not sending it again`);
@@ -267,7 +286,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const r = await waitForBuild(c, appId, info.build, { marketing: info.version, timeoutMs: timeout, tag: TAG });
     if (json) printJson({ ipa: relative(root, ipa), version: info.version, build: info.build, uploaded: true, alreadyUploaded: true, processingState: r.seen.processingState ?? null });
     if (r.outcome === 'valid') { done(TAG, waitMessage(info.build, r)); return; }
-    process.exit(r.outcome === 'failed' ? BUILD_WAIT_EXIT.failed : BUILD_WAIT_EXIT.timeout);
+    stop(r.outcome === 'failed' ? BUILD_WAIT_EXIT.failed : BUILD_WAIT_EXIT.timeout, waitMessage(info.build, r));
   }
   if (numbers.length && compareBuild(info.build, next) < 0) warn(TAG, `build ${info.build} is lower than the highest uploaded one (next free: ${next}); Apple accepts it only if this version train has no higher build`);
   const reqs = buildUploadReqs(appId, info, basename(ipa), size);
@@ -285,19 +304,21 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   if (!(await confirm(ctx, `Upload ${info.bundleId} ${info.version} (${info.build}) to App Store Connect? It shows up in TestFlight once processed.`))) return;
   const deadline = Date.now() + timeout;
+  shipPhase('upload', `uploading ${mb(size)} via ${via}`, 0);
   log(TAG, `${relative(root, ipa)}: ${info.bundleId} ${info.version} (${info.build}), ${mb(size)}, via ${via}, timeout ${a.str('timeout', '60m')}`);
   if (via === 'api') {
-    try { await apiUpload(c, appId, ipa, info, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); process.exit((e as { exit: number }).exit); } throw e; }
+    try { await apiUpload(c, appId, ipa, info, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   } else {
-    try { await altoolUpload(root, ipa, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); process.exit((e as { exit: number }).exit); } throw e; }
+    try { await altoolUpload(root, ipa, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   }
   if (!wait) { if (json) printJson({ ...summary, uploaded: true }); done(TAG, `build ${info.build} uploaded; storebound apple status shows when it is VALID`); return; }
   // the same poll as `storebound apple testflight wait`, within what is left of --timeout
+  shipPhase('processing', `waiting for App Store Connect to process build ${info.build}`);
   const r = await waitForBuild(c, appId, info.build, { marketing: info.version, timeoutMs: Math.max(0, deadline - Date.now()), tag: TAG });
   const state = r.timedOut || (r.outcome !== 'valid' && r.outcome !== 'failed') ? 'TIMEOUT' : r.seen.processingState ?? 'UNKNOWN';
   if (json) printJson({ ...summary, uploaded: true, processingState: state });
   if (r.outcome === 'valid') { done(TAG, `${waitMessage(info.build, r)}. Then: apple testflight distribute --build ${info.build} --group <name> --dry`); return; }
-  if (state === 'TIMEOUT') { warn(TAG, `build ${info.build} not processed after ${a.str('timeout', '60m')}; keep waiting with storebound apple testflight wait --build ${info.build} --version ${info.version}`); process.exit(BUILD_WAIT_EXIT.timeout); }
+  if (state === 'TIMEOUT') { warn(TAG, `build ${info.build} not processed after ${a.str('timeout', '60m')}; keep waiting with storebound apple testflight wait --build ${info.build} --version ${info.version}`); stop(BUILD_WAIT_EXIT.timeout, `build ${info.build} not processed after ${a.str('timeout', '60m')}`); }
   warn(TAG, `${waitMessage(info.build, r)} (Apple emails the ITMS-xxxxx reason to the team)`);
-  process.exit(BUILD_WAIT_EXIT.failed);
+  stop(BUILD_WAIT_EXIT.failed, `${waitMessage(info.build, r)} (Apple emails the ITMS-xxxxx reason to the team)`);
 }
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 3d26219..0cde295 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -71,13 +71,17 @@
    "allow-version-mismatch",
    "build-number",
    "configuration",
+   "env-file",
    "keychain",
    "no-install",
    "no-prebuild",
    "out",
+   "progress",
    "project",
+   "result-file",
    "scheme",
    "version",
+   "version-from",
    "workspace"
   ],
   "apple bundle": [
@@ -215,13 +219,17 @@
   ],
   "apple resubmit": [
    "build",
+   "env-file",
    "keychain",
    "new-version",
    "no-install",
    "no-submit",
    "platform",
+   "progress",
    "resolve-iaps",
+   "result-file",
    "version",
+   "version-from",
    "with-version"
   ],
   "apple review-details": [
@@ -253,13 +261,17 @@
   ],
   "apple submit": [
    "build",
+   "env-file",
    "keychain",
    "new-version",
    "no-install",
    "no-submit",
    "platform",
+   "progress",
    "resolve-iaps",
+   "result-file",
    "version",
+   "version-from",
    "with-version"
   ],
   "apple subscriptions": [
@@ -308,6 +320,7 @@
    "allow-version-mismatch",
    "build",
    "csv",
+   "env-file",
    "group",
    "internal-only",
    "invite",
@@ -315,11 +328,14 @@
    "locale",
    "no-wait",
    "older-than",
+   "progress",
    "remove",
+   "result-file",
    "submit-review",
    "text",
    "timeout",
    "version",
+   "version-from",
    "via"
   ],
   "apple win-back": [
@@ -649,16 +665,20 @@
   "play build": [
    "allow-stale-web",
    "dir",
+   "env-file",
    "flavor",
    "include-drafts",
    "module",
    "no-prebuild",
    "not-sent-for-review",
    "out",
+   "progress",
    "prune",
+   "result-file",
    "src",
    "variant",
    "version-code",
+   "version-from",
    "version-name",
    "write"
   ],
@@ -690,16 +710,20 @@
   "play release": [
    "alpha",
    "beta",
+   "env-file",
    "fraction",
    "include-drafts",
    "internal",
    "name",
    "not-sent-for-review",
    "production",
+   "progress",
    "prune",
+   "result-file",
    "src",
    "variant",
    "version-code",
+   "version-from",
    "write"
   ],
   "play rollout": [
@@ -746,14 +770,19 @@
    "write"
   ],
   "play upload": [
+   "env-file",
    "include-drafts",
    "name",
    "not-sent-for-review",
+   "progress",
    "prune",
+   "result-file",
    "src",
    "status",
    "track",
    "variant",
+   "version-code",
+   "version-from",
    "write"
   ],
   "prices": [
@@ -941,6 +970,25 @@
    "seconds",
    "target"
   ],
+  "status": [
+   "all",
+   "app",
+   "apple",
+   "apply",
+   "apps",
+   "concurrency",
+   "force",
+   "merge",
+   "no-health",
+   "no-validate",
+   "offline",
+   "out",
+   "play",
+   "state",
+   "stdio",
+   "versions",
+   "workspace"
+  ],
   "triage": [
    "apple",
    "build",
@@ -1079,6 +1127,7 @@
    "download",
    "enable",
    "end",
+   "env-file",
    "every",
    "experiment",
    "expo",
@@ -1185,6 +1234,7 @@
    "poster",
    "production",
    "profile",
+   "progress",
    "project",
    "propose",
    "prune",
@@ -1200,6 +1250,7 @@
    "render",
    "repair-stuck",
    "resolve-iaps",
+   "result-file",
    "resume",
    "review-sent",
    "root",
@@ -1253,6 +1304,7 @@
    "verify",
    "version",
    "version-code",
+   "version-from",
    "version-name",
    "versions",
    "via",
@@ -1559,7 +1611,7 @@
    "storebound play subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--yes] [--allow-price-changes]"
   ],
   "play upload": [
-   "storebound play upload [<app.aab>] [--track internal|alpha|beta] [--status completed|draft] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]"
+   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]"
   ],
   "prices": [
    "storebound prices export [--out store/prices.csv] [--store apple|play] [--only ids] [--with-automatic] [--no-subscriptions] [--dry] [--json]",
@@ -1628,6 +1680,9 @@
   "shots video": [
    "storebound shots video [--lang en,tr] [--target iphone,ipad,youtube] [--seconds 25] [--no-captions] [--dry]"
   ],
+  "status": [
+   "storebound status [--app <name|store id|folder>] [--json]"
+  ],
   "triage": [
    "storebound triage [--apple] [--play] [--days 14] [--build N] [--issues 10] [--comments 3] [--dry] [--json]"
   ],
diff --git a/cli/index.ts b/cli/index.ts
index 7ba9efd..b1e1386 100755
--- a/cli/index.ts
+++ b/cli/index.ts
@@ -83,12 +83,35 @@ async function main(): Promise<void> {
   if (accepted) {
     const ok = new Set([...FLAGS.global, ...accepted]);
     const bad = [...new Set(rest.filter(x => /^--[^-]/.test(x)).map(x => x.slice(2).split('=')[0]!).filter(f => !ok.has(f)))];
-    if (bad.length) { console.error(`unknown option${bad.length > 1 ? 's' : ''} for storebound ${key}: ${bad.map(f => '--' + f).join(', ')}\n\n${commandUsage(key)}`); process.exit(2); }
+    if (bad.length) {
+      const why = `unknown option${bad.length > 1 ? 's' : ''} for storebound ${key}: ${bad.map(f => '--' + f).join(', ')}`;
+      console.error(`${why}\n\n${commandUsage(key)}`);
+      // a ship step still answers with its one JSON line / result file (exit 2)
+      const { SHIP_STEPS, usageResult } = await import('./lib/ship-step');
+      if (SHIP_STEPS[key]) usageResult(key, rest, why);
+      process.exit(2);
+    }
   }
   // --json: stdout is only the JSON, every log line goes to stderr (lib/log.ts withJsonOutput)
 
   const json = (f: () => Promise<void>): Promise<void> => (rest.includes('--json') && key !== 'mcp' && key !== 'serve' ? withJsonOutput(f) : f());
   if (PLAIN[key]) { const plain = PLAIN[key]![0]; return json(async () => (await plain()).run(parseArgs(rest))); }
+  // the ship-step contract (cli/lib/ship-step.ts, docs/ship-step.md): one final JSON line / result file, uniform exit codes
+  const { SHIP_STEPS, runShipStep, shipOptions, usesContract } = await import('./lib/ship-step');
+  if (SHIP_STEPS[key] && (() => { try { return usesContract(shipOptions(parseArgs(rest))); } catch { return true; } })()) {
+    const code = await runShipStep(key, rest, parseArgs, async args => {
+      const go = async (): Promise<void> => {
+        const { loadConfig } = await import('./lib/config');
+        const loaded = await loadConfig(args.get('config'));
+        const { acquireLock, lockKeys } = await import('./lib/lock');
+        for (const k of lockKeys(key, args, loaded.config)) acquireLock(loaded.root, k, argv.filter(x => x !== '--force-unlock').join(' '), { force: args.has('force-unlock') });
+        await (await COMMANDS[key]![0]()).run({ loaded, args });
+      };
+      await (args.has('json') ? withJsonOutput(go) : go());
+    });
+    process.exitCode = code;
+    return;
+  }
   const args = parseArgs(rest);
   await json(async () => {
     const { loadConfig } = await import('./lib/config');
diff --git a/cli/lib/console-links.ts b/cli/lib/console-links.ts
index 3a2958a..8159d60 100644
--- a/cli/lib/console-links.ts
+++ b/cli/lib/console-links.ts
@@ -44,6 +44,7 @@ export const CONSOLE_PAGES = {
   'asc.ppo': { store: 'apple', label: 'App Store Connect > Product Page Optimization', scope: 'app', path: '/distribution/product-page-optimization' },
   // App Store Connect, account
   'asc.payments': { store: 'apple', label: 'App Store Connect > Payments and Financial Reports', scope: 'account', path: '/itc/payments_and_financial_reports' },
+  'asc.agreements': { store: 'apple', label: 'App Store Connect > Business > Agreements', scope: 'account', path: '/business' },
   'asc.users': { store: 'apple', label: 'App Store Connect > Users and Access', scope: 'account', path: '/access/users' },
   'asc.keys': { store: 'apple', label: 'App Store Connect > Users and Access > Integrations > App Store Connect API', scope: 'account', path: '/access/integrations/api' },
   // Play Console, per app (/u/0/developers/<dev>/app/<app>/...)
diff --git a/cli/lib/ctx.ts b/cli/lib/ctx.ts
index 17218ad..6991235 100644
--- a/cli/lib/ctx.ts
+++ b/cli/lib/ctx.ts
@@ -57,6 +57,9 @@ export const DECLINED_MARK = 'declined: ';
 /** A declined confirmation: the reason on stderr, a nonzero exit code; returns false for confirm(). */
 export function declined(reason: string): false {
   console.error(`${DECLINED_MARK}${reason}`);
+  // a ship step (cli/lib/ship-step.ts) reports the reason in error.message of its exit 3
+  const ship = (globalThis as unknown as Record<symbol, { declined?: string } | null | undefined>)[Symbol.for('storebound.shipRun')];
+  if (ship) ship.declined = reason;
   process.exitCode = DECLINED_EXIT;
   return false;
 }
diff --git a/cli/lib/log.ts b/cli/lib/log.ts
index 34bb78a..9bc6756 100644
--- a/cli/lib/log.ts
+++ b/cli/lib/log.ts
@@ -104,6 +104,9 @@ export const RESULT_MARK = '\u001estorebound-result ';
  * `storebound serve` (STOREBOUND_MACHINE=1) it is one marked line, so log lines printed before it never break parsing.
  */
 export function printJson(data: unknown): void {
+  // a ship step (cli/lib/ship-step.ts) keeps the data for its one final line instead of printing it
+  const ship = (globalThis as unknown as Record<symbol, { detail?: unknown } | null | undefined>)[Symbol.for('storebound.shipRun')];
+  if (ship) { ship.detail = data; return; }
   if (process.env.STOREBOUND_MACHINE === '1') process.stdout.write(RESULT_MARK + JSON.stringify(data) + '\n');
   // during a --json run console.log goes to stderr, so the JSON goes to stdout itself
   else if (jsonOutput()) process.stdout.write(JSON.stringify(data, null, 2) + '\n');
diff --git a/cli/lib/ship-step.ts b/cli/lib/ship-step.ts
new file mode 100644
index 0000000..147e93a
--- /dev/null
+++ b/cli/lib/ship-step.ts
@@ -0,0 +1,412 @@
+// The "ship step" contract (docs/ship-step.md): how an external release pipeline (a Jenkins node, a VOX Ship job)
+// calls `play build | play upload | play release | apple build | apple upload | apple submit` without a person:
+//   exit codes      0 ok, 1 failure, 2 usage, 3 needs the owner, 4 the store refused it, 7 nothing to do (SHIP_EXIT)
+//   --json          exactly one final JSON line on stdout (ShipResult); every log line goes to stderr
+//   --result-file   the same JSON written atomically to a file, also on failure
+//   --progress json one JSON line per phase on stderr: {"phase":"upload","pct":40,"message":"..."}
+//   --env-file      KEY=VALUE secrets loaded before the credentials resolve (POSIX: mode 600 or stricter); every known
+//                   secret value is scrubbed from stdout, stderr and the result file
+//   --version-from  version.json: the version and build for the step ({version, build} | {versionName, versionCode} |
+//                   {marketing, build})
+// The commands keep their own logic; they report what they did with shipReport / shipNoop / shipPhase, and printJson
+// hands its data here during a ship run. Everything else (classifying a thrown error, the final line, the file) is
+// in this one module, so every ship command answers the same way.
+import { existsSync, readFileSync, renameSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, join, basename } from 'node:path';
+import type { Args } from './args';
+import { type ConsolePage, consoleUrl } from './console-links';
+
+/** The exit codes of a ship step (the same for every ship command). */
+export const SHIP_EXIT = { ok: 0, failure: 1, usage: 2, owner: 3, refused: 4, noop: 7 } as const;
+export type ShipExitCode = (typeof SHIP_EXIT)[keyof typeof SHIP_EXIT];
+
+/** The commands that follow the contract: command key -> step name and store. */
+export const SHIP_STEPS: Record<string, { step: string; store: 'apple' | 'play' }> = {
+  'play build': { step: 'build', store: 'play' },
+  'play upload': { step: 'upload', store: 'play' },
+  'play release': { step: 'release', store: 'play' },
+  'apple build': { step: 'build', store: 'apple' },
+  'apple upload': { step: 'upload', store: 'apple' },
+  'apple submit': { step: 'submit', store: 'apple' },
+  'apple resubmit': { step: 'resubmit', store: 'apple' },
+};
+
+/** error.code of an exit 3: what the owner has to do. */
+export const OWNER_CODES = ['AGREEMENT_PENDING', 'SIGN_IN_REQUIRED', 'COMPLIANCE_ANSWER_MISSING', 'CONSOLE_STEP', 'CONFIRMATION_REQUIRED'] as const;
+
+export interface ShipErrorInfo { code: string; message: string; consoleUrl?: string }
+export interface ShipResult {
+  ok: boolean;
+  step: string;
+  store: 'apple' | 'play';
+  track: string | null;
+  version: string | null;
+  build: string | null;
+  state: string | null;
+  url: string | null;
+  warnings: string[];
+  /** The file a build step wrote (AAB / IPA); absent for other steps. */
+  artifact?: string;
+  error?: ShipErrorInfo;
+}
+
+/** An error that knows its ship exit code (thrown by commands where the generic classification would guess). */
+export class ShipStepError extends Error {
+  constructor(message: string, readonly exit: ShipExitCode, readonly code: string, readonly consoleUrl?: string) { super(message); }
+}
+
+type Fields = Partial<Pick<ShipResult, 'track' | 'version' | 'build' | 'state' | 'url' | 'artifact'>>;
+interface Run {
+  key: string; step: string; store: 'apple' | 'play';
+  progress: boolean;
+  fields: Fields; noop: boolean; warnings: string[]; detail?: unknown; declined?: string;
+}
+const RUN = Symbol.for('storebound.shipRun');
+const g = globalThis as unknown as Record<symbol, Run | null | undefined>;
+
+/** The ship run going on, or null (a normal command run). */
+export const shipRun = (): Run | null => g[RUN] ?? null;
+
+/** What the command did: fields of the final result (later calls overwrite earlier ones). */
+export function shipReport(f: Fields): void { const r = shipRun(); if (r) Object.assign(r.fields, Object.fromEntries(Object.entries(f).filter(([, v]) => v !== undefined))); }
+/** Nothing to do (the build is on the store already, the release is there): exit 7 with what is there. */
+export function shipNoop(f: Fields = {}): void { const r = shipRun(); if (r) { r.noop = true; shipReport(f); } }
+/** A warning for the result's warnings[] (the log line is the command's own). */
+export function shipWarn(msg: string): void { const r = shipRun(); if (r && !r.warnings.includes(msg)) r.warnings.push(msg); }
+// printJson (log.ts) puts its data in run.detail and ctx.declined puts its reason in run.declined, through the same
+// globalThis key (no import cycle with log.ts / ctx.ts)
+
+/** One progress line on stderr ({"phase","pct"?,"message"}) when the run asked for --progress json. */
+export function shipPhase(phase: string, message: string, pct?: number): void {
+  const r = shipRun();
+  if (!r?.progress) return;
+  process.stderr.write(JSON.stringify({ phase, ...(pct === undefined ? {} : { pct: Math.max(0, Math.min(100, Math.round(pct))) }), message }) + '\n');
+}
+
+// ---- error classification ----
+
+const page = (p: ConsolePage): string => consoleUrl(p);
+
+/** The ship exit code, error code and console deep link of an error a ship command threw. Pure but for the console
+ *  ids of the loaded config (console-links). */
+export function classifyError(e: unknown, store: 'apple' | 'play'): { exit: ShipExitCode; error: ShipErrorInfo } {
+  if (e instanceof ShipStepError) return { exit: e.exit, error: { code: e.code, message: e.message, ...(e.consoleUrl ? { consoleUrl: e.consoleUrl } : {}) } };
+  const message = e instanceof Error ? e.message : String(e);
+  const m = message;
+  const apple = store === 'apple';
+  const owner = (code: string, url: string): { exit: ShipExitCode; error: ShipErrorInfo } => ({ exit: SHIP_EXIT.owner, error: { code, message, consoleUrl: url } });
+  // usage: a flag or argument problem (the dispatcher's own unknown-option exit 2 happens before this)
+  if (/^usage:|^--[a-z][\w-]*[ :<=]|is required\b|^unknown (option|command)/i.test(m)) return { exit: SHIP_EXIT.usage, error: { code: 'USAGE', message } };
+  // the owner: agreements, sign-in / key access, compliance answers, console-only steps
+  if (/REQUIRED_AGREEMENTS|agreement|Program License|terms of service|must (accept|agree)/i.test(m)) return owner('AGREEMENT_PENDING', apple ? page('asc.agreements') : page('play.app-list'));
+  if (/-> 401\b|NOT_AUTHORIZED|NOT_AUTHENTICATED|unauthori[sz]ed|invalid_grant|Google token:|two-factor|2FA|sign[ -]?in required|are not set \(env|is not set \(env|key not found|not a Google service account|-> 403\b|does not have permission|PERMISSION_DENIED|FORBIDDEN_ERROR/i.test(m))
+    return owner('SIGN_IN_REQUIRED', apple ? page('asc.keys') : page('play.api-access'));
+  if (/never been published|draft app|status draft|from the Console|in the Console|console plan|Play Console UI|create the app record in the web UI|sent for review from the Google Play Console/i.test(m))
+    return owner('CONSOLE_STEP', apple ? (/app record/i.test(m) ? page('asc.new-app') : page('asc.version')) : page('play.publishing'));
+  if (/export compliance|usesNonExemptEncryption|Missing Compliance|encryption answer/i.test(m)) return owner('COMPLIANCE_ANSWER_MISSING', page('asc.encryption'));
+  if (/data safety/i.test(m)) return owner('COMPLIANCE_ANSWER_MISSING', page('play.data-safety'));
+  if (/app privacy/i.test(m)) return owner('COMPLIANCE_ANSWER_MISSING', page('asc.app-privacy'));
+  if (/content rating|IARC/i.test(m)) return owner('COMPLIANCE_ANSWER_MISSING', page('play.content-rating'));
+  if (/age rating/i.test(m)) return owner('COMPLIANCE_ANSWER_MISSING', page('asc.age-rating'));
+  if (/target audience/i.test(m)) return owner('COMPLIANCE_ANSWER_MISSING', page('play.target-audience'));
+  // the store said no: a 4xx answer, Apple's ITMS / state errors, a rejected upload or an invalid build
+  if (/-> (400|404|409|413|422)\b|ENTITY_ERROR|STATE_ERROR|ITMS-\d+|INVALID_ARGUMENT|FAILED_PRECONDITION|upload rejected|processingState (INVALID|FAILED)|is INVALID|Invalid Binary/i.test(m))
+    return { exit: SHIP_EXIT.refused, error: { code: 'STORE_REFUSED', message, consoleUrl: apple ? page('asc.testflight') : page('play.releases') } };
+  return { exit: SHIP_EXIT.failure, error: { code: 'FAILED', message } };
+}
+
+/** A legacy exit code a command (or a library) passed to process.exit / process.exitCode during a ship run. */
+export function classifyExit(code: number, run: Pick<Run, 'declined' | 'detail' | 'store'>): { exit: ShipExitCode; error?: ShipErrorInfo } {
+  if (code === 0) return { exit: SHIP_EXIT.ok };
+  if (code === 2) return { exit: SHIP_EXIT.usage, error: { code: 'USAGE', message: 'usage error (see stderr)' } };
+  if (code === 3) return { exit: SHIP_EXIT.owner, error: { code: 'CONFIRMATION_REQUIRED', message: run.declined ?? 'a confirmation was declined or could not be asked (pass --yes in a pipeline)' } };
+  // a command that reported blockers (apple submit) and set exit 1: classify the blockers' text
+  const blockers = (run.detail as { blockers?: unknown } | undefined)?.blockers;
+  if (Array.isArray(blockers) && blockers.length) {
+    const c = classifyError(new Error(blockers.map(String).join('; ')), run.store);
+    return { exit: c.exit === SHIP_EXIT.usage ? SHIP_EXIT.failure : c.exit, error: c.exit === SHIP_EXIT.failure ? { ...c.error, code: 'BLOCKERS' } : c.error };
+  }
+  if (code === 7) return { exit: SHIP_EXIT.failure, error: { code: 'TIMEOUT', message: 'the step stopped at its timeout (see stderr); run it again to go on' } };
+  return { exit: SHIP_EXIT.failure, error: { code: 'FAILED', message: `exit ${code} (see stderr)` } };
+}
+
+// ---- the result ----
+
+const str = (v: unknown): string | null => (v === undefined || v === null || v === '' ? null : String(v));
+
+/** Fields of the result read from the data a command printed with --json (when it did not shipReport them). */
+export function fieldsFromDetail(key: string, d: unknown): Fields {
+  if (!d || typeof d !== 'object') return {};
+  const x = d as Record<string, unknown>;
+  const dry = x.dry === true || x.dryRun === true;
+  switch (key) {
+    case 'play build': return { version: str(x.versionName), build: str(x.versionCode), state: x.aab ? 'built' : 'planned', ...(x.aab ? { artifact: String(x.aab) } : {}) };
+    case 'apple build': return { version: x.ipa ? str(x.version) : null, build: x.ipa ? str(x.build) : null, state: x.ipa ? 'built' : 'planned', ...(x.ipa ? { artifact: String(x.ipa) } : {}) };
+    case 'play upload': return { version: str(x.versionName), build: str(x.versionCode), track: str(x.track), state: x.uploaded ? str(x.status) : 'planned' };
+    case 'play release': {
+      const tracks = Array.isArray(x.tracks) ? x.tracks as { track: string; status: string }[] : [];
+      return { build: str(x.versionCode), version: str(x.name), track: tracks.map(t => t.track).join(',') || null, state: dry ? 'planned' : tracks.map(t => t.status).join(',') || null };
+    }
+    case 'apple upload': return { version: str(x.version), build: str(x.build), state: x.uploaded ? (str(x.processingState) ?? 'uploaded') : 'planned' };
+    case 'apple submit': case 'apple resubmit': {
+      const v = x.version as { versionString?: string; state?: string } | undefined;
+      const b = x.build as { number?: string } | undefined;
+      return { version: str(v?.versionString), build: str(b?.number), state: dry ? 'planned' : 'WAITING_FOR_REVIEW' };
+    }
+    default: return {};
+  }
+}
+
+const DEFAULT_URL: Record<string, ConsolePage> = {
+  'play build': 'play.bundle-explorer', 'play upload': 'play.releases', 'play release': 'play.releases',
+  'apple build': 'asc.testflight', 'apple upload': 'asc.testflight', 'apple submit': 'asc.app-review', 'apple resubmit': 'asc.app-review',
+};
+
+/** The final result: the contract keys, then the command's own --json fields that do not clash with them (so readers
+ *  of the old output, like a stage reading versionCode / sha256 of `play release --json`, keep working). */
+export function buildResult(run: Run, exit: ShipExitCode, error?: ShipErrorInfo): ShipResult & Record<string, unknown> {
+  const f = { ...fieldsFromDetail(run.key, run.detail), ...run.fields };
+  let url: string | null = f.url ?? null;
+  if (!url) { try { url = consoleUrl(DEFAULT_URL[run.key] ?? (run.store === 'apple' ? 'asc.apps' : 'play.app-list')); } catch { url = null; } }
+  const own = run.detail && typeof run.detail === 'object' && !Array.isArray(run.detail) ? run.detail as Record<string, unknown> : {};
+  const out: ShipResult = {
+    ok: exit === SHIP_EXIT.ok || exit === SHIP_EXIT.noop,
+    step: run.step, store: run.store,
+    track: f.track ?? null, version: f.version ?? null, build: f.build ?? null,
+    state: exit === SHIP_EXIT.noop ? (f.state ?? 'unchanged') : error ? (f.state && f.state !== 'planned' ? f.state : 'failed') : f.state ?? null,
+    url, warnings: run.warnings,
+    ...(f.artifact ? { artifact: f.artifact } : {}),
+    ...(error ? { error } : {}),
+  };
+  return { ...out, ...Object.fromEntries(Object.entries(own).filter(([k]) => !(k in out) && !CONTRACT_KEYS.has(k))) } as ShipResult & Record<string, unknown>;
+}
+const CONTRACT_KEYS = new Set(['ok', 'step', 'store', 'track', 'version', 'build', 'state', 'url', 'warnings', 'artifact', 'error']);
+
+// ---- secrets: --env-file and redaction ----
+
+const SECRET_NAME = /(SECRET|TOKEN|PASSWORD|PASSWD|PASS$|_KEY$|^ASC_P8$|P8|PRIVATE|CREDENTIAL|SERVICE_ACCOUNT|KEYSTORE_PASSWORD|AUTH)/i;
+const extraSecrets = new Set<string>();
+
+/** Parses KEY=VALUE lines (# comments, `export ` prefix, single or double quotes; \n in double quotes). */
+export function parseEnvFile(text: string): Record<string, string> {
+  const out: Record<string, string> = {};
+  for (const raw of text.split(/\r?\n/)) {
+    const line = raw.trim();
+    if (!line || line.startsWith('#')) continue;
+    const m = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
+    if (!m) throw new Error(`--env-file: not KEY=VALUE: "${line.split('=')[0]!.slice(0, 40)}..."`);
+    let v = m[2]!;
+    if (v.length >= 2 && v.startsWith('"') && v.endsWith('"')) v = v.slice(1, -1).replace(/\\n/g, '\n').replace(/\\"/g, '"').replace(/\\\\/g, '\\');
+    else if (v.length >= 2 && v.startsWith("'") && v.endsWith("'")) v = v.slice(1, -1);
+    else v = v.replace(/\s+#.*$/, '');
+    out[m[1]!] = v;
+  }
+  return out;
+}
+
+/** Why an env file may not be read (group / world readable on POSIX), or null. Windows: no mode check. */
+export function envFileProblem(path: string, platform: string = process.platform): string | null {
+  if (!existsSync(path)) return `--env-file ${path}: no such file`;
+  if (platform === 'win32') return null;
+  const mode = statSync(path).mode & 0o777;
+  if (mode & 0o077) return `--env-file ${path}: mode ${mode.toString(8).padStart(3, '0')} lets others read it; chmod 600 ${path}`;
+  return null;
+}
+
+/** Loads an env file into process.env (it wins over the environment); its values are scrubbed from every output. */
+export function loadEnvFile(path: string): string[] {
+  const why = envFileProblem(path);
+  if (why) throw new ShipStepError(why, SHIP_EXIT.usage, 'ENV_FILE');
+  const vars = parseEnvFile(readFileSync(path, 'utf8'));
+  for (const [k, v] of Object.entries(vars)) { process.env[k] = v; if (v) extraSecrets.add(v); }
+  return Object.keys(vars);
+}
+
+/** The secret values to scrub: every --env-file value and every env var whose name says secret. */
+export function secretValues(env: Record<string, string | undefined> = process.env): string[] {
+  const vals = new Set<string>(extraSecrets);
+  for (const [k, v] of Object.entries(env)) if (v && SECRET_NAME.test(k)) vals.add(v);
+  const out = new Set<string>();
+  for (const v of vals) {
+    if (v.length < 6) continue; // "true", "1": too short to be a secret, too common to scrub
+    out.add(v);
+    const esc = JSON.stringify(v).slice(1, -1);
+    if (esc !== v) out.add(esc);
+    if (v.includes('\n')) for (const l of v.split(/\r?\n/)) if (l.trim().length >= 16) out.add(l.trim());
+  }
+  return [...out].sort((a, b) => b.length - a.length);
+}
+
+/** Replaces every secret value in the text with [redacted]. */
+export function redact(text: string, secrets: string[] = secretValues()): string {
+  let t = text;
+  for (const s of secrets) if (t.includes(s)) t = t.split(s).join('[redacted]');
+  return t;
+}
+
+/** Scrubs secrets from everything written to stdout / stderr until the returned function is called. */
+export function installRedaction(): () => void {
+  const secrets = secretValues();
+  if (!secrets.length) return () => {};
+  const wrap = (s: NodeJS.WriteStream): (() => void) => {
+    const orig = s.write.bind(s);
+    s.write = ((chunk: unknown, ...rest: unknown[]) => {
+      const text = typeof chunk === 'string' ? chunk : chunk instanceof Uint8Array ? new TextDecoder().decode(chunk) : String(chunk);
+      return (orig as (c: string, ...r: unknown[]) => boolean)(redact(text, secrets), ...rest);
+    }) as typeof s.write;
+    return () => { s.write = orig as typeof s.write; };
+  };
+  const a = wrap(process.stdout), b = wrap(process.stderr);
+  // console.* in Bun writes to the fd directly, not through process.stdout.write: route it through the wrapped streams
+  const keep = { log: console.log, info: console.info, warn: console.warn, error: console.error };
+  const fmt = (args: unknown[]): string => args.map(x => (typeof x === 'string' ? x : x instanceof Error ? x.stack ?? x.message : (() => { try { return JSON.stringify(x); } catch { return String(x); } })())).join(' ') + '\n';
+  console.log = (...x: unknown[]) => { process.stdout.write(fmt(x)); };
+  console.info = (...x: unknown[]) => { process.stdout.write(fmt(x)); };
+  console.warn = (...x: unknown[]) => { process.stderr.write(fmt(x)); };
+  console.error = (...x: unknown[]) => { process.stderr.write(fmt(x)); };
+  return () => { Object.assign(console, keep); a(); b(); };
+}
+
+// ---- --version-from ----
+
+export interface VersionFrom { version: string | null; build: string | null; shape: string }
+
+/** version.json shapes: {version, build} | {versionName, versionCode} | {marketing, build} (also marketingVersion /
+ *  buildNumber); the build may be a number or a string. */
+export function parseVersionFile(text: string, where = 'version.json'): VersionFrom {
+  let j: Record<string, unknown>;
+  try { j = JSON.parse(text) as Record<string, unknown>; } catch (e) { throw new ShipStepError(`--version-from ${where}: not JSON (${(e as Error).message})`, SHIP_EXIT.usage, 'USAGE'); }
+  if (!j || typeof j !== 'object' || Array.isArray(j)) throw new ShipStepError(`--version-from ${where}: a JSON object is needed`, SHIP_EXIT.usage, 'USAGE');
+  const pick = (...k: string[]): [string, string] | null => { for (const n of k) if (j[n] !== undefined && j[n] !== null && j[n] !== '') return [n, String(j[n])]; return null; };
+  const v = pick('version', 'versionName', 'marketing', 'marketingVersion');
+  const b = pick('build', 'versionCode', 'buildNumber');
+  if (!v && !b) throw new ShipStepError(`--version-from ${where}: no version / build ({version, build}, {versionName, versionCode} or {marketing, build})`, SHIP_EXIT.usage, 'USAGE');
+  if (v && !/^\d+(\.\d+){0,3}$/.test(v[1])) throw new ShipStepError(`--version-from ${where}: ${v[0]} "${v[1]}" is not x.y.z`, SHIP_EXIT.usage, 'USAGE');
+  if (b && !/^\d+(\.\d+)*$/.test(b[1])) throw new ShipStepError(`--version-from ${where}: ${b[0]} "${b[1]}" is not a build number`, SHIP_EXIT.usage, 'USAGE');
+  return { version: v?.[1] ?? null, build: b?.[1] ?? null, shape: `{${[v?.[0], b?.[0]].filter(Boolean).join(', ')}}` };
+}
+
+/** The flags --version-from stands for, per command. */
+const VERSION_FLAGS: Record<string, { version?: string; build?: string; intBuild?: boolean }> = {
+  'play build': { version: 'version-name', build: 'version-code', intBuild: true },
+  'play upload': { build: 'version-code', intBuild: true },
+  'play release': { build: 'version-code', intBuild: true },
+  'apple build': { version: 'version', build: 'build-number' },
+  'apple upload': { build: 'build' },
+  'apple submit': { version: 'version', build: 'build' },
+  'apple resubmit': { version: 'version', build: 'build' },
+};
+
+/** The argv with the flags of --version-from added (a flag given by hand must agree with the file). */
+export function versionArgv(key: string, argv: string[], hand: Args, v: VersionFrom): string[] {
+  const map = VERSION_FLAGS[key];
+  if (!map) return argv;
+  const out = [...argv];
+  const add = (flag: string | undefined, value: string | null, int = false): void => {
+    if (!flag || value === null) return;
+    if (int && !/^\d+$/.test(value)) throw new ShipStepError(`--version-from: build "${value}" is not an Android versionCode (an integer)`, SHIP_EXIT.usage, 'USAGE');
+    const given = hand.get(flag);
+    if (given !== undefined && given !== 'true') { if (given !== value) throw new ShipStepError(`--${flag} ${given} disagrees with --version-from (${value})`, SHIP_EXIT.usage, 'USAGE'); return; }
+    // play release with an .aab: the bundle carries its versionCode
+    if (key === 'play release' && flag === 'version-code' && hand._.some(x => x.endsWith('.aab'))) return;
+    out.push(`--${flag}`, value);
+  };
+  add(map.version, v.version);
+  add(map.build, v.build, map.intBuild);
+  return out;
+}
+
+// ---- the run ----
+
+export interface ShipOptions { json: boolean; resultFile?: string; progress: boolean; envFile?: string; versionFrom?: string }
+
+/** The ship flags of a run (also lists them for tools/gen-flags.ts: every ship command imports this module). */
+export function shipOptions(a: Args): ShipOptions {
+  const p = a.get('progress');
+  if (p !== undefined && p !== 'json' && p !== 'text') throw new ShipStepError('--progress json | text', SHIP_EXIT.usage, 'USAGE');
+  const file = (n: string, v: string | undefined): string | undefined => { if (v === 'true') throw new ShipStepError(`--${n} <path> needs a path`, SHIP_EXIT.usage, 'USAGE'); return v; };
+  return { json: a.has('json'), resultFile: file('result-file', a.get('result-file')), progress: p === 'json', envFile: file('env-file', a.get('env-file')), versionFrom: file('version-from', a.get('version-from')) };
+}
+
+/** True when this run uses the contract (any ship flag): plain runs keep their old output and exit codes. A --json run
+ *  under `storebound serve` / flows (STOREBOUND_MACHINE=1: the desktop reads the command's own result line) keeps
+ *  the old result unless another ship flag asks for the contract. */
+export const usesContract = (o: ShipOptions, env: Record<string, string | undefined> = process.env): boolean =>
+  (o.json && env.STOREBOUND_MACHINE !== '1') || !!o.resultFile || o.progress || !!o.envFile || !!o.versionFrom;
+
+/** Writes the result file atomically (temp file in the same folder, then rename). */
+export function writeResultFile(path: string, data: string): void {
+  const tmp = join(dirname(path), `.${basename(path)}.${process.pid}.tmp`);
+  writeFileSync(tmp, data, { mode: 0o600 });
+  renameSync(tmp, path);
+}
+
+class ExitSignal extends Error { constructor(readonly code: number) { super(`exit ${code}`); } }
+
+/**
+ * Runs one ship command under the contract. `prepare` turns the raw argv into the command's Args (after --env-file
+ * and --version-from); `body` runs the command. Returns the ship exit code; prints the final line / writes the file.
+ */
+export async function runShipStep(key: string, rest: string[], parse: (argv: string[]) => Args, body: (args: Args) => Promise<void>): Promise<ShipExitCode> {
+  const meta = SHIP_STEPS[key]!;
+  const run: Run = { key, step: meta.step, store: meta.store, progress: false, fields: {}, noop: false, warnings: [] };
+  const prevRun = g[RUN];
+  g[RUN] = run;
+  let opts: ShipOptions = { json: rest.includes('--json'), progress: false };
+  let unredact = (): void => {};
+  const exitOrig = process.exit;
+  let exit: ShipExitCode = SHIP_EXIT.ok;
+  let error: ShipErrorInfo | undefined;
+  const before = process.exitCode;
+  process.exitCode = 0;
+  try {
+    let args = parse(rest);
+    opts = shipOptions(args);
+    run.progress = opts.progress;
+    if (opts.envFile) loadEnvFile(opts.envFile);
+    unredact = installRedaction();
+    if (opts.versionFrom) {
+      if (!existsSync(opts.versionFrom)) throw new ShipStepError(`--version-from ${opts.versionFrom}: no such file`, SHIP_EXIT.usage, 'USAGE');
+      const v = parseVersionFile(readFileSync(opts.versionFrom, 'utf8'), opts.versionFrom);
+      args = parse(versionArgv(key, rest, args, v));
+      shipReport({ version: v.version ?? undefined, build: v.build ?? undefined });
+    }
+    shipPhase('start', `storebound ${key}`);
+    process.exit = ((c?: number) => { throw new ExitSignal(c ?? 0); }) as typeof process.exit;
+    await body(args);
+    const c = Number(process.exitCode ?? 0);
+    const k = classifyExit(c, run);
+    exit = k.exit; error = k.error;
+    if (exit === SHIP_EXIT.ok && run.noop) exit = SHIP_EXIT.noop;
+  } catch (e) {
+    if (e instanceof ExitSignal) { const k = classifyExit(e.code, run); exit = k.exit; error = k.error; if (exit === SHIP_EXIT.ok && run.noop) exit = SHIP_EXIT.noop; }
+    else {
+      const k = classifyError(e, run.store);
+      exit = k.exit; error = k.error;
+      console.error(`\nerror: ${(e as Error).message ?? String(e)}`);
+    }
+  } finally { process.exit = exitOrig; }
+  const result = buildResult(run, exit, error);
+  shipPhase('done', exit === SHIP_EXIT.ok ? 'ok' : exit === SHIP_EXIT.noop ? 'nothing to do' : `${error?.code ?? 'failed'}`);
+  const line = redact(JSON.stringify(result));
+  try {
+    if (opts.resultFile) writeResultFile(opts.resultFile, line + '\n');
+  } catch (e) { console.error(`--result-file ${opts.resultFile}: ${(e as Error).message}`); if (exit === SHIP_EXIT.ok) exit = SHIP_EXIT.failure; }
+  if (opts.json) process.stdout.write(line + '\n');
+  unredact();
+  g[RUN] = prevRun ?? null;
+  process.exitCode = before ?? 0;
+  return exit;
+}
+
+/** The answer of a ship step stopped by the dispatcher (an unknown flag): the usage result line and file, exit 2. */
+export function usageResult(key: string, argv: string[], message: string): void {
+  const meta = SHIP_STEPS[key];
+  if (!meta) return;
+  const run: Run = { key, step: meta.step, store: meta.store, progress: false, fields: {}, noop: false, warnings: [] };
+  const line = JSON.stringify(buildResult(run, SHIP_EXIT.usage, { code: 'USAGE', message }));
+  const at = argv.findIndex(x => x === '--result-file' || x.startsWith('--result-file='));
+  const file = at < 0 ? undefined : argv[at]!.includes('=') ? argv[at]!.slice(argv[at]!.indexOf('=') + 1) : argv[at + 1];
+  if (file && !file.startsWith('--')) { try { writeResultFile(file, line + '\n'); } catch { /* the exit code still says usage */ } }
+  if (argv.includes('--json')) process.stdout.write(line + '\n');
+}
diff --git a/cli/play/build.ts b/cli/play/build.ts
index 8fd4295..01e9155 100644
--- a/cli/play/build.ts
+++ b/cli/play/build.ts
@@ -29,6 +29,7 @@ import { playClient } from './client';
 import { readPlayCopy, refusePlayNotes } from './listing';
 import { usedVersionCodes } from './next-version-code';
 import * as rt from '../lib/rt';
+import { shipPhase } from '../lib/ship-step';
 
 const TAG = 'build';
 
@@ -97,12 +98,14 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!sdk.path) throw new Error(androidSdkMissing(sdk));
   notesGuard(ctx);
   log(TAG, `Android SDK: ${sdk.path} (from ${sdk.source})`);
+  shipPhase('prebuild', 'web build / prebuild');
   const web = await webStep({ ...webOpts, dry: false });
   if (signing && !existsSync(signing.storeFile)) throw new Error('ANDROID_KEYSTORE: the keystore file does not exist');
   if (!signing) warn(TAG, 'no ANDROID_KEYSTORE: the project\'s own release signingConfig must sign, else Play refuses the bundle');
   for (const n of t.notes) log(TAG, n);
   for (const w of versionWarnings) warn(TAG, w);
   log(TAG, `$ ${plan.command}`);
+  shipPhase('build', `${plan.task}, versionCode ${code || '?'}`);
   const started = Date.now();
   mkdirSync(out, { recursive: true });
   const p = rt.spawn(argv, { cwd, stdout: 'pipe', stderr: 'pipe', env: { ...process.env, ...androidSdkEnv(sdk), ...signingEnv(signing) } });
@@ -118,9 +121,11 @@ export async function run(ctx: Ctx): Promise<void> {
   if (exit !== 0) throw new Error(`build failed (exit ${exit}); last lines:\n${lines.slice(-20).join('\n')}\nfull log: ${relative(root, logFile)}`);
   const aab = findBundles([join(t.dir, t.module, 'build', 'outputs', 'bundle'), join(root, 'build', 'app', 'outputs', 'bundle')], started - 1000)[0];
   if (!aab) throw new Error(`build finished but no new .aab under ${relative(root, t.dir)}/${t.module}/build/outputs/bundle`);
+  shipPhase('sign', 'checking the bundle signature');
   const info = aabInfo(aab);
   // Play refuses an unsigned bundle (403) only at upload: stop here, naming the fix
   assertAabSigned(aab, relative(root, aab));
+  shipPhase('verify', `versionCode ${info.versionCode}, ${info.packageName}`);
   if (info.packageName !== pkg) warn(TAG, `the AAB's package is ${info.packageName}, the config says ${pkg}`);
   // the hard stop: an AAB with another versionCode than planned is never copied to the output folder
   if (code && info.versionCode !== code) {
diff --git a/cli/play/release.ts b/cli/play/release.ts
index 71797f3..53fd29b 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -17,6 +17,8 @@ import { playTargetSdkProblem, targetSdkFile } from '../lib/store-minimums';
 import { playClient } from './client';
 import { usedVersionCodes } from './next-version-code';
 import { readPlayCopy, refusePlayNotes } from './listing';
+import { shipNoop, shipPhase, shipReport } from '../lib/ship-step';
+import { consoleUrl, playTrackPage } from '../lib/console-links';
 
 const TRACKS = ['internal', 'alpha', 'beta', 'production'];
 
@@ -56,8 +58,10 @@ export async function run(ctx: Ctx): Promise<void> {
     const sdkWhy = playTargetSdkProblem(aabInfo(aab).targetSdk, { where: targetSdkFile(root) });
     if (sdkWhy) throw new Error(`${aab}: not released, ${sdkWhy}`);
   }
+  shipReport({ track: tracks.map(t => t.track).join(','), url: consoleUrl(playTrackPage(tracks.length === 1 ? tracks[0]!.track : undefined)) });
   const play = await playClient(root, pkg);
   let released = fixed ?? '';
+  let nothing = false;
   try {
     await play.edit(async (id, ctl) => {
       let code = fixed ?? '';
@@ -69,11 +73,13 @@ export async function run(ctx: Ctx): Promise<void> {
           code = String(info.versionCode);
           log('play', `versionCode ${code} is on Play already: not uploaded again`);
         } else {
+          shipPhase('upload', `uploading ${aab}`, 0);
           log('play', `uploading ${aab} (${(statSync(aab).size / 1048576).toFixed(1)} MB), this can take minutes`);
           const b = await play.call<{ versionCode: number }>('POST', `${play.UPLOAD}/edits/${id}/bundles?uploadType=media`,
             new Uint8Array(readFileSync(aab)), { 'Content-Type': 'application/octet-stream' });
           code = String(b.versionCode);
           uploaded = true;
+          shipPhase('upload', `uploaded versionCode ${code}`, 100);
           log('play', `uploaded versionCode ${code}`);
         }
       }
@@ -90,7 +96,8 @@ export async function run(ctx: Ctx): Promise<void> {
         changed++;
         log('play', `${t.track} <- ${code} (${t.status}, notes in ${notes.length} languages)`);
       }
-      if (!changed && !uploaded) ctl.unchanged();
+      if (!changed && !uploaded) { nothing = true; ctl.unchanged(); }
+      else shipPhase('commit', `${changed} track(s) changed`);
     }, { dry: a.has('dry'), retries: aab ? 0 : 3, notSentForReview: a.has('not-sent-for-review'),
       // the staged rollout share is part of the plan (it was applied but not shown in the dry run)
       summary: `release ${a.get('name') ?? (aab ?? `versionCode ${fixed}`)}: ${tracks.map(t => `${t.track} ${t.status}${t.status === 'inProgress' ? ` ${Math.round(Number(fraction ?? 0.1) * 100)}%` : ''}`).join(', ')}` });
@@ -99,6 +106,8 @@ export async function run(ctx: Ctx): Promise<void> {
       throw new Error(`${(e as Error).message}\n\nThis app has never been published: the API may only create DRAFT releases. Re-run with --production draft, then send it from the Console (skill play-first-release).`);
     throw e;
   }
+  // the ship-step contract: every track holds this release already (and no upload): nothing to do, exit 7
+  if (nothing && !a.has('dry')) shipNoop({ build: released || undefined, state: tracks.map(t => t.status).join(',') });
   const prod = tracks.find(t => t.track === 'production');
   if (prod) {
     // Play's default: an approved release goes live by itself (managed publishing is a console-only setting)
diff --git a/cli/play/upload.ts b/cli/play/upload.ts
index dd630df..d7c93a1 100644
--- a/cli/play/upload.ts
+++ b/cli/play/upload.ts
@@ -1,10 +1,12 @@
 // Upload an Android App Bundle to a Google Play testing track.
-//   storebound play upload [<app.aab>] [--track internal|alpha|beta] [--status completed|draft] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]
-// Default AAB: the newest in build/android (storebound play build). Package and versionCode are read from the bundle;
-// the upload is refused when Play already has that versionCode. Release notes: the "What's new" of every listing
-// language. --dry is read-only (one throwaway edit: version codes and the track are read, the edit is deleted).
-// A real run asks first (--yes in scripts). Production is not offered here: `storebound play release --production
-// draft` (and the play-first-release / release-management skills) keep that the owner's step.
+//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]
+// Default AAB: the newest in build/android (storebound play build), or with --version-code N the one with that
+// versionCode. Package and versionCode are read from the bundle; the upload is refused when Play already has that
+// versionCode (exit 1), and under the ship-step contract (--json / --result-file, docs/ship-step.md) it is exit 7
+// "nothing to do" with the track and state that are there: never a second upload. Release notes: the "What's new" of
+// every listing language. --dry is read-only (one throwaway edit: version codes and the track are read, the edit is
+// deleted). A real run asks first (--yes in scripts). --track production sends the release to Google's review (a
+// pipeline's update step); --status draft keeps it for the Console.
 import { readdirSync, readFileSync, statSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import type { Ctx } from '../lib/ctx';
@@ -16,29 +18,36 @@ import { nextVersionCode } from '../lib/release';
 import { playClient } from './client';
 import { readPlayCopy, refusePlayNotes } from './listing';
 import { usedVersionCodes } from './next-version-code';
+import { shipNoop, shipPhase, shipReport, shipRun, shipWarn } from '../lib/ship-step';
+import { consoleUrl, playTrackPage } from '../lib/console-links';
 
 const TAG = 'upload';
-export const UPLOAD_TRACKS = ['internal', 'alpha', 'beta'] as const;
+export const UPLOAD_TRACKS = ['internal', 'alpha', 'beta', 'production'] as const;
 
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
   const pkg = need(config.play?.packageName, 'play.packageName');
   const track = a.str('track', 'internal');
-  if (track === 'production') throw new Error('play upload is for testing tracks; production goes through storebound play release --production draft (the owner sends it)');
   if (!(UPLOAD_TRACKS as readonly string[]).includes(track)) throw new Error(`--track: ${UPLOAD_TRACKS.join(' | ')}`);
   const status = a.str('status', 'completed');
   if (!['completed', 'draft'].includes(status)) throw new Error('--status: completed | draft');
+  const wantCode = a.get('version-code');
+  if (wantCode !== undefined && !/^\d+$/.test(wantCode)) throw new Error('--version-code: an integer (the versionCode of the AAB to upload)');
   let aab = a._.find(x => x.endsWith('.aab'));
   if (aab) aab = resolve(aab);
   else {
     const dir = resolve('build/android');
     let found: string[] = [];
     try { found = readdirSync(dir).filter(f => f.endsWith('.aab')).map(f => join(dir, f)).sort((x, y) => statSync(y).mtimeMs - statSync(x).mtimeMs); } catch { /* none */ }
-    if (!found[0]) throw new Error('usage: storebound play upload <app.aab> --track internal (nothing in build/android; storebound play build makes one)');
+    if (wantCode) found = found.filter(f => { try { return aabInfo(f).versionCode === Number(wantCode); } catch { return false; } });
+    if (!found[0]) throw new Error(`usage: storebound play upload <app.aab> --track internal (no ${wantCode ? `versionCode ${wantCode} ` : ''}AAB in build/android; storebound play build makes one)`);
     aab = found[0];
   }
+  shipPhase('verify', `checking ${relative(root, aab)}`);
   const info = aabInfo(aab);
+  if (wantCode && info.versionCode !== Number(wantCode)) throw new Error(`${relative(root, aab)} is versionCode ${info.versionCode}, not ${wantCode} (--version-code)`);
+  shipReport({ track, version: info.versionName ?? undefined, build: String(info.versionCode), url: consoleUrl(playTrackPage(track)) });
   if (info.packageName !== pkg) throw new Error(`${relative(root, aab)} is ${info.packageName}, the config says ${pkg}`);
   // Play refuses bundles below its current target API level (cli/lib/store-minimums.ts): stop before any network call
   const sdkWhy = playTargetSdkProblem(info.targetSdk, { where: targetSdkFile(root) });
@@ -56,10 +65,21 @@ export async function run(ctx: Ctx): Promise<void> {
   }));
   // an earlier run did it already (the bundle is on Play and on this track): nothing to send again
   if (used.includes(info.versionCode) && current.some(r => (r.versionCodes ?? []).includes(String(info.versionCode)) && r.status === status)) {
-    if (json) { printJson({ aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, track, status, uploaded: true, alreadyThere: true }); return; }
+    shipNoop({ state: status });
+    if (json) { printJson({ aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, track, status, uploaded: true, alreadyThere: true }); return; }
     done(TAG, `versionCode ${info.versionCode} is on ${track} (${status}) already: nothing uploaded`);
     return;
   }
+  if (used.includes(info.versionCode) && !dry) {
+    // the ship-step contract: the versionCode is on Play already, nothing is uploaded again (exit 7 with what is there)
+    const on = await play.read(async id => (await play.call<{ tracks?: { track: string; releases?: { status: string; versionCodes?: string[] }[] }[] }>('GET', `${play.API}/edits/${id}/tracks`)).tracks ?? []).catch(() => []);
+    const where = on.flatMap(t => (t.releases ?? []).filter(r => (r.versionCodes ?? []).includes(String(info.versionCode))).map(r => ({ track: t.track, status: r.status })));
+    const here = where.find(w => w.track === track) ?? where[0];
+    if (here) shipNoop({ track: here.track, state: here.status, url: consoleUrl(playTrackPage(here.track)) });
+    else shipNoop({ state: 'uploaded' });
+    if (!where.some(w => w.track === track)) shipWarn(`versionCode ${info.versionCode} is on Google Play${where.length ? ` (${where.map(w => `${w.track} ${w.status}`).join(', ')})` : ' (in the bundle library, on no track)'} but not on ${track}: storebound play release --version-code ${info.versionCode} --${track} ${status} puts it there`);
+    if (shipRun()) { done(TAG, `versionCode ${info.versionCode} is on Google Play already: nothing uploaded`); return; }
+  }
   if (used.includes(info.versionCode)) throw new Error(`versionCode ${info.versionCode} is already on Google Play: rebuild with --version-code ${nextVersionCode(used)} (storebound play build)`);
   const summary = { aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, sizeMB: Math.round(size / 104857.6) / 10,
     track, status, notes: notes.map(n => n.language), replaces: current.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`) };
@@ -70,15 +90,18 @@ export async function run(ctx: Ctx): Promise<void> {
     done(TAG, 'upload planned (dry run, read-only)');
     return;
   }
-  if (!(await confirm(ctx, `Upload ${info.packageName} versionCode ${info.versionCode} and put it on the ${track} track (${status})? Testers of that track get it.`))) return;
+  if (!(await confirm(ctx, `Upload ${info.packageName} versionCode ${info.versionCode} and put it on the ${track} track (${status})? ${track === 'production' ? 'It goes to Google review and then to every user.' : 'Testers of that track get it.'}`))) return;
   try {
     await play.edit(async id => {
       log(TAG, `uploading ${summary.sizeMB} MB, this can take minutes`);
+      shipPhase('upload', `uploading ${summary.sizeMB} MB`, 0);
       const b = await play.call<{ versionCode: number }>('POST', `${play.UPLOAD}/edits/${id}/bundles?uploadType=media`, new Uint8Array(readFileSync(aab!)), { 'Content-Type': 'application/octet-stream' });
       log(TAG, `uploaded versionCode ${b.versionCode}`);
+      shipPhase('upload', `uploaded versionCode ${b.versionCode}`, 100);
       const release: Record<string, unknown> = { versionCodes: [String(b.versionCode)], status, ...(notes.length ? { releaseNotes: notes } : {}), ...(a.get('name') ? { name: a.get('name') } : {}) };
       await play.call('PUT', `${play.API}/edits/${id}/tracks/${track}`, { track, releases: [release] });
       log(TAG, `${track} <- ${b.versionCode} (${status})`);
+      shipPhase('commit', `${track} <- ${b.versionCode} (${status})`);
     }, { retries: 0, notSentForReview: ctx.args.has('not-sent-for-review'), summary: `upload versionCode ${info.versionCode} to ${track} ${status}` });
   } catch (e) {
     if (/draft app|status draft/i.test(String(e)) && status !== 'draft')
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 20e8327..9bd1b4a 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -471,12 +471,17 @@ describe('CLI dry runs (no store access)', () => {
     expect(r.stderr.toString()).toContain("Use in defaultConfig of android/app/build.gradle: versionCode((project.findProperty('versionCode') ?: 1) as Integer)");
     expect(existsSync(join(d, 'build/android/com.example.game-1.aab'))).toBe(false);
   });
-  test('play upload refuses production', () => {
+  test('play upload: an unknown track is a usage error; under the ship contract exit 2 with one JSON line', () => {
     const d = project('cli-up');
     writeFileSync(join(d, 'app.aab'), makeAab('com.example.game', 3));
-    const r = cli(d, ['play', 'upload', 'app.aab', '--track', 'production', '--dry']);
-    expect(r.exitCode).toBe(1);
-    expect(r.stderr.toString()).toContain('testing tracks');
+    const plain = cli(d, ['play', 'upload', 'app.aab', '--track', 'nightly', '--dry']);
+    expect(plain.exitCode).toBe(1);
+    expect(plain.stderr.toString()).toContain('--track: internal | alpha | beta | production');
+    const r = cli(d, ['play', 'upload', 'app.aab', '--track', 'nightly', '--dry', '--json']);
+    expect(r.exitCode).toBe(2);
+    const lines = r.stdout.toString().trim().split('\n');
+    expect(lines).toHaveLength(1);
+    expect(JSON.parse(lines[0]!)).toMatchObject({ ok: false, step: 'upload', store: 'play', error: { code: 'USAGE' } });
   });
 });
 
diff --git a/tests/ship-step.test.ts b/tests/ship-step.test.ts
new file mode 100644
index 0000000..3da79de
--- /dev/null
+++ b/tests/ship-step.test.ts
@@ -0,0 +1,315 @@
+// The ship-step contract (cli/lib/ship-step.ts, docs/ship-step.md): exit codes, the one final JSON line, the result
+// file (also on failure), --progress json lines, idempotent re-uploads against the fake stores, --env-file with its
+// permission check and redaction, --version-from shapes and the status read.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from 'bun:test';
+import { chmodSync, existsSync, mkdtempSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { parseArgs } from '../cli/lib/args';
+import { log, printJson } from '../cli/lib/log';
+import { declined } from '../cli/lib/ctx';
+import { classifyError, classifyExit, envFileProblem, parseEnvFile, parseVersionFile, redact, runShipStep, SHIP_EXIT, shipNoop, shipPhase, shipReport, ShipStepError, usageResult, versionArgv } from '../cli/lib/ship-step';
+import { setConsoleIds } from '../cli/lib/console-links';
+import { platformStatus } from '../cli/status';
+import type { AppStatus } from '../cli/lib/desktop-protocol';
+import { run as playUpload } from '../cli/play/upload';
+import { run as appleUpload } from '../cli/apple/upload';
+import { run as playRelease } from '../cli/play/release';
+import { makeAab, makeIpa } from './build-fixtures';
+import { ascEnv, BASE, playEnv, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores, writes } from './helpers/fake-stores';
+
+const tmp = (): string => mkdtempSync(join(tmpdir(), 'sb-ship-'));
+
+/** Runs a ship step in-process with stdout / stderr captured. */
+async function ship(key: string, argv: string[], body: (a: ReturnType<typeof parseArgs>) => Promise<void>): Promise<{ code: number; out: string; err: string }> {
+  const out: string[] = [], err: string[] = [];
+  const o = process.stdout.write, e = process.stderr.write, cl = console.log, ce = console.error, cw = console.warn, ci = console.info;
+  process.stdout.write = ((s: string | Uint8Array) => { out.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stdout.write;
+  process.stderr.write = ((s: string | Uint8Array) => { err.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stderr.write;
+  console.log = (...a: unknown[]) => { out.push(a.map(String).join(' ') + '\n'); };
+  console.info = console.log;
+  console.error = (...a: unknown[]) => { err.push(a.map(String).join(' ') + '\n'); };
+  console.warn = console.error;
+  try {
+    const code = await runShipStep(key, argv, parseArgs, async a => {
+      // the dispatcher's --json: console.log goes to stderr (log.ts withJsonOutput)
+      const keep = console.log;
+      if (a.has('json')) console.log = (...x: unknown[]) => console.error(...x);
+      try { await body(a); } finally { console.log = keep; }
+    });
+    return { code, out: out.join(''), err: err.join('') };
+  } finally { process.stdout.write = o; process.stderr.write = e; console.log = cl; console.error = ce; console.warn = cw; console.info = ci; }
+}
+
+const KEYS = ['ok', 'step', 'store', 'track', 'version', 'build', 'state', 'url', 'warnings'];
+
+describe('exit codes and error classification', () => {
+  afterEach(() => setConsoleIds({}));
+  test('the uniform codes', () => {
+    expect(SHIP_EXIT).toEqual({ ok: 0, failure: 1, usage: 2, owner: 3, refused: 4, noop: 7 });
+  });
+  test('owner steps carry a code and the console deep link', () => {
+    setConsoleIds({ appleAppId: '1000000001', playDeveloperId: '5550000000000000001', playAppId: '4970000000000000002' });
+    const agree = classifyError(new Error('GET /v1/apps -> 403 FORBIDDEN.REQUIRED_AGREEMENTS_MISSING_OR_EXPIRED'), 'apple');
+    expect(agree.exit).toBe(3);
+    expect(agree.error.code).toBe('AGREEMENT_PENDING');
+    expect(agree.error.consoleUrl).toBe('https://appstoreconnect.apple.com/business');
+    const sign = classifyError(new Error('GET /v1/apps -> 401 NOT_AUTHORIZED'), 'apple');
+    expect([sign.exit, sign.error.code, sign.error.consoleUrl]).toEqual([3, 'SIGN_IN_REQUIRED', 'https://appstoreconnect.apple.com/access/integrations/api']);
+    expect(classifyError(new Error('PLAY_SERVICE_ACCOUNT is not set (env, ...)'), 'play').error.code).toBe('SIGN_IN_REQUIRED');
+    const draft = classifyError(new Error('POST edits:commit -> 400 Only releases with status draft may be created on draft app.\n\nThis app has never been published'), 'play');
+    expect([draft.exit, draft.error.code]).toEqual([3, 'CONSOLE_STEP']);
+    expect(draft.error.consoleUrl).toContain('/app/4970000000000000002/publishing');
+    const ds = classifyError(new Error('the Data safety form is not answered'), 'play');
+    expect([ds.exit, ds.error.code]).toEqual([3, 'COMPLIANCE_ANSWER_MISSING']);
+    expect(ds.error.consoleUrl).toContain('data-privacy-security');
+    expect(classifyError(new Error('build 7 has no export compliance answer yet'), 'apple').error.consoleUrl).toContain('/distribution/info');
+  });
+  test('store refusals, usage, failures', () => {
+    expect(classifyError(new Error('PATCH /v1/reviewSubmissions/1 -> 409 STATE_ERROR'), 'apple')).toMatchObject({ exit: 4, error: { code: 'STORE_REFUSED' } });
+    expect(classifyError(new Error('upload rejected: ITMS-90725'), 'apple').exit).toBe(4);
+    expect(classifyError(new Error('--track: internal | alpha'), 'play')).toMatchObject({ exit: 2, error: { code: 'USAGE' } });
+    expect(classifyError(new Error('usage: storebound play upload <app.aab>'), 'play').exit).toBe(2);
+    expect(classifyError(new Error('build failed (exit 1)'), 'play')).toMatchObject({ exit: 1, error: { code: 'FAILED' } });
+    expect(classifyError(new ShipStepError('x', 4, 'BUILD_INVALID', 'https://example.com'), 'apple')).toEqual({ exit: 4, error: { code: 'BUILD_INVALID', message: 'x', consoleUrl: 'https://example.com' } });
+  });
+  test('legacy exit codes: a declined confirmation is exit 3, blockers are classified', () => {
+    expect(classifyExit(3, { declined: 'not a terminal and no --yes', store: 'play' })).toEqual({ exit: 3, error: { code: 'CONFIRMATION_REQUIRED', message: 'not a terminal and no --yes' } });
+    expect(classifyExit(1, { store: 'apple', detail: { blockers: ['PATCH x -> 409 ENTITY_ERROR'] } }).exit).toBe(4);
+    expect(classifyExit(1, { store: 'apple', detail: { blockers: ['screenshots missing'] } }).error?.code).toBe('BLOCKERS');
+    expect(classifyExit(7, { store: 'apple' }).exit).toBe(1);
+  });
+});
+
+describe('the final JSON line, the result file and progress', () => {
+  test('--json: exactly one JSON line on stdout, logs on stderr', async () => {
+    const r = await ship('play build', ['--json'], async () => {
+      log('build', 'a log line');
+      printJson({ aab: '/x/app-42.aab', packageName: 'com.example.notes', versionCode: 42, versionName: '1.2.0' });
+    });
+    expect(r.code).toBe(0);
+    const lines = r.out.trim().split('\n');
+    expect(lines).toHaveLength(1);
+    const j = JSON.parse(lines[0]!);
+    for (const k of KEYS) expect(j).toHaveProperty(k);
+    expect(j).toMatchObject({ ok: true, step: 'build', store: 'play', version: '1.2.0', build: '42', state: 'built', artifact: '/x/app-42.aab', warnings: [] });
+    expect(j.error).toBeUndefined();
+    expect(r.err).toContain('a log line');
+  });
+  test('--result-file: written atomically on failure too, with the error', async () => {
+    const d = tmp();
+    const file = join(d, 'result.json');
+    const r = await ship('apple submit', ['--result-file', file], async () => {
+      shipReport({ version: '1.2.0', build: '7' });
+      throw new Error('PATCH /v1/reviewSubmissions/x -> 409 ENTITY_ERROR.ATTRIBUTE.INVALID');
+    });
+    expect(r.code).toBe(4);
+    expect(r.out).toBe(''); // no --json: nothing on stdout but the logs
+    const j = JSON.parse(readFileSync(file, 'utf8'));
+    expect(j).toMatchObject({ ok: false, step: 'submit', store: 'apple', version: '1.2.0', build: '7', state: 'failed', error: { code: 'STORE_REFUSED' } });
+    expect(j.error.message).toContain('409');
+    expect(readdirSync(d)).toEqual(['result.json']); // no temp file left
+  });
+  test('a declined confirmation: exit 3 CONFIRMATION_REQUIRED', async () => {
+    const r = await ship('play upload', ['--json'], async () => { declined('not a terminal and no --yes (re-run with --yes to confirm)'); });
+    expect(r.code).toBe(3);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: false, error: { code: 'CONFIRMATION_REQUIRED' } });
+  });
+  test('process.exit inside a command still gives the line and the file', async () => {
+    const file = join(tmp(), 'r.json');
+    const r = await ship('play release', ['--json', '--result-file', file], async () => { process.exit(2); });
+    expect(r.code).toBe(2);
+    expect(JSON.parse(r.out).error.code).toBe('USAGE');
+    expect(JSON.parse(readFileSync(file, 'utf8')).error.code).toBe('USAGE');
+  });
+  test('nothing to do: exit 7, ok true', async () => {
+    const r = await ship('play upload', ['--json'], async () => { shipNoop({ track: 'production', build: '42', state: 'completed' }); });
+    expect(r.code).toBe(7);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, track: 'production', build: '42', state: 'completed' });
+  });
+  test('--progress json: one JSON line per phase on stderr', async () => {
+    const r = await ship('apple upload', ['--progress', 'json'], async () => { shipPhase('upload', 'parts', 40); shipPhase('processing', 'waiting'); });
+    const lines = r.err.split('\n').filter(l => l.startsWith('{')).map(l => JSON.parse(l) as { phase: string; pct?: number; message: string });
+    expect(lines.map(l => l.phase)).toEqual(['start', 'upload', 'processing', 'done']);
+    expect(lines[1]).toEqual({ phase: 'upload', pct: 40, message: 'parts' });
+  });
+  test('--progress with another value: usage', async () => {
+    const r = await ship('apple upload', ['--progress', 'xml', '--json'], async () => {});
+    expect(r.code).toBe(2);
+  });
+  test('an unknown flag (stopped by the dispatcher): the usage line and file', () => {
+    const file = join(tmp(), 'u.json');
+    const out: string[] = [];
+    const o = process.stdout.write;
+    process.stdout.write = ((s: string) => { out.push(s); return true; }) as typeof process.stdout.write;
+    try { usageResult('play upload', ['--json', '--result-file', file, '--trak', 'x'], 'unknown option for storebound play upload: --trak'); } finally { process.stdout.write = o; }
+    expect(JSON.parse(out.join(''))).toMatchObject({ ok: false, step: 'upload', error: { code: 'USAGE' } });
+    expect(existsSync(file)).toBe(true);
+  });
+});
+
+describe('--env-file and redaction', () => {
+  test('KEY=VALUE parsing', () => {
+    expect(parseEnvFile('# c\nexport A=1\nB="x y\\nz"\nC=\'q\'\nD=plain # note\n')).toEqual({ A: '1', B: 'x y\nz', C: 'q', D: 'plain' });
+    expect(() => parseEnvFile('not a pair')).toThrow('KEY=VALUE');
+  });
+  test.skipIf(process.platform === 'win32')('POSIX: group / world readable files are refused', () => {
+    const f = join(tmp(), '.env');
+    writeFileSync(f, 'A=1\n');
+    chmodSync(f, 0o644);
+    expect(envFileProblem(f)).toContain('chmod 600');
+    chmodSync(f, 0o600);
+    expect(envFileProblem(f)).toBeNull();
+  });
+  test('Windows: no mode check; a missing file is refused', () => {
+    expect(envFileProblem(join(tmp(), 'none'), 'win32')).toContain('no such file');
+    const f = join(tmp(), '.env');
+    writeFileSync(f, 'A=1\n');
+    expect(envFileProblem(f, 'win32')).toBeNull();
+  });
+  test('values are loaded before the command and scrubbed from stdout, stderr and the result file', async () => {
+    const d = tmp();
+    const env = join(d, 'ship.env');
+    writeFileSync(env, 'SB_TEST_UPLOAD_TOKEN=s3cr3t-value-123456\n', { mode: 0o600 });
+    const file = join(d, 'r.json');
+    try {
+      const r = await ship('play upload', ['--json', '--env-file', env, '--result-file', file], async () => {
+        expect(process.env.SB_TEST_UPLOAD_TOKEN).toBe('s3cr3t-value-123456');
+        console.error(`token is ${process.env.SB_TEST_UPLOAD_TOKEN}`);
+        throw new Error(`refused with s3cr3t-value-123456`);
+      });
+      expect(r.err).not.toContain('s3cr3t-value-123456');
+      expect(r.err).toContain('[redacted]');
+      expect(r.out).not.toContain('s3cr3t-value-123456');
+      expect(readFileSync(file, 'utf8')).not.toContain('s3cr3t-value-123456');
+      expect(JSON.parse(r.out).error.message).toContain('[redacted]');
+    } finally { delete process.env.SB_TEST_UPLOAD_TOKEN; }
+  });
+  test('redact: multi-line keys line by line, JSON-escaped forms', () => {
+    const pem = '-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49\n-----END PRIVATE KEY-----';
+    const s = [pem, JSON.stringify(pem).slice(1, -1)];
+    expect(redact(`a ${pem} b`, s)).toBe('a [redacted] b');
+    expect(redact(JSON.stringify({ k: pem }), s)).not.toContain('MIGHAgEA');
+  });
+});
+
+describe('--version-from', () => {
+  test('the three shapes', () => {
+    expect(parseVersionFile('{"version":"1.2.0","build":42}')).toMatchObject({ version: '1.2.0', build: '42' });
+    expect(parseVersionFile('{"versionName":"1.2.0","versionCode":42}')).toMatchObject({ version: '1.2.0', build: '42' });
+    expect(parseVersionFile('{"marketing":"1.2","build":"1.2.42"}')).toMatchObject({ version: '1.2', build: '1.2.42' });
+    expect(() => parseVersionFile('{"name":"x"}')).toThrow('no version');
+    expect(() => parseVersionFile('{"version":"one"}')).toThrow('not x.y.z');
+    expect(() => parseVersionFile('nope')).toThrow('not JSON');
+  });
+  test('the flags each command gets; a hand flag must agree', () => {
+    const v = { version: '1.2.0', build: '42', shape: '' };
+    expect(versionArgv('play build', ['--json'], parseArgs(['--json']), v)).toEqual(['--json', '--version-name', '1.2.0', '--version-code', '42']);
+    expect(versionArgv('apple build', [], parseArgs([]), v)).toEqual(['--version', '1.2.0', '--build-number', '42']);
+    expect(versionArgv('apple upload', [], parseArgs([]), v)).toEqual(['--build', '42']);
+    expect(versionArgv('apple submit', ['--yes'], parseArgs(['--yes']), v)).toEqual(['--yes', '--version', '1.2.0', '--build', '42']);
+    expect(versionArgv('play upload', [], parseArgs([]), v)).toEqual(['--version-code', '42']);
+    expect(versionArgv('play release', ['a.aab'], parseArgs(['a.aab']), v)).toEqual(['a.aab']);
+    expect(versionArgv('apple upload', ['--build', '42'], parseArgs(['--build', '42']), v)).toEqual(['--build', '42']);
+    expect(() => versionArgv('apple upload', ['--build', '41'], parseArgs(['--build', '41']), v)).toThrow('disagrees');
+    expect(() => versionArgv('play build', [], parseArgs([]), { ...v, build: '1.2.42' })).toThrow('versionCode');
+  });
+  test('a run reads the file and the result carries the version', async () => {
+    const f = join(tmp(), 'version.json');
+    writeFileSync(f, '{"versionName":"2.0.0","versionCode":77}');
+    let seen = '';
+    const r = await ship('play upload', ['--json', '--version-from', f], async a => { seen = a.str('version-code', ''); });
+    expect(seen).toBe('77');
+    expect(JSON.parse(r.out)).toMatchObject({ version: '2.0.0', build: '77' });
+  });
+});
+
+describe('idempotent re-upload (fake stores)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); playEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  const LISTING = '# Play\n\n## English\n<!-- play: en-US -->\n\n### Play short description\n```\nNotes.\n```\n\n### Play full description\n```\nNotes for everyone.\n```\n\n### What\'s new\n```\nFixes.\n```\n';
+
+  test('play upload: first run uploads (exit 0), the re-run is exit 7 with the existing release, no second upload', async () => {
+    const p = project(BASE, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42, '1.2.0') });
+    const first = await ship('play upload', ['--json', '--yes', '--track', 'production'], a => playUpload({ loaded: p.loaded, args: a }));
+    expect(first.code).toBe(0);
+    expect(JSON.parse(first.out)).toMatchObject({ ok: true, step: 'upload', store: 'play', track: 'production', version: '1.2.0', build: '42', state: 'completed' });
+    const n = s.calls.length;
+    const again = await ship('play upload', ['--json', '--yes', '--track', 'production'], a => playUpload({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(JSON.parse(again.out)).toMatchObject({ ok: true, track: 'production', build: '42', state: 'completed' });
+    expect(writes(s.calls.slice(n))).toEqual([]);
+  });
+
+  test('play upload: the versionCode is in the bundle list but on another track: exit 7 with a warning, nothing sent', async () => {
+    s.play.live.bundles = [42];
+    s.play.live.tracks = { internal: { releases: [{ status: 'completed', versionCodes: ['42'] }] } } as never;
+    const p = project(BASE, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42) });
+    const r = await ship('play upload', ['--json', '--yes', '--track', 'production'], a => playUpload({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(7);
+    const j = JSON.parse(r.out);
+    expect(j).toMatchObject({ track: 'internal', state: 'completed', build: '42' });
+    expect(j.warnings[0]).toContain('not on production');
+    expect(writes(s.calls)).toEqual([]);
+  });
+
+  test('play release: the same release on the track again is exit 7, no commit', async () => {
+    s.play.live.bundles = [42];
+    const p = project(BASE, { 'store/listing.md': LISTING });
+    const argv = ['--json', '--yes', '--version-code', '42', '--internal', 'completed'];
+    const first = await ship('play release', argv, a => playRelease({ loaded: p.loaded, args: a }));
+    expect(first.code).toBe(0);
+    expect(JSON.parse(first.out)).toMatchObject({ ok: true, step: 'release', track: 'internal', build: '42', state: 'completed', versionCode: 42 });
+    const n = s.play.committed.length;
+    const again = await ship('play release', argv, a => playRelease({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(s.play.committed.length).toBe(n);
+  });
+
+  test('play upload without the contract keeps its old exit 1 for a used versionCode', async () => {
+    s.play.live.bundles = [42];
+    const p = project(BASE, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42) });
+    await expect(playUpload(p.ctx(['--yes']))).rejects.toThrow('already on Google Play');
+  });
+
+  test('apple upload: a build number App Store Connect has is exit 7 with its state, no build upload', async () => {
+    s.asc.put({ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID' }, rels: { app: '6400000101' } });
+    const plist = '<?xml version="1.0" encoding="UTF-8"?><plist version="1.0"><dict><key>CFBundleIdentifier</key><string>com.example.notes</string><key>CFBundleShortVersionString</key><string>1.2.0</string><key>CFBundleVersion</key><string>7</string></dict></plist>';
+    const p = project(BASE, { 'build/ios/export/Example.ipa': makeIpa(plist) });
+    const r = await ship('apple upload', ['--json', '--yes'], a => appleUpload({ loaded: p.loaded, args: a }));
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(7);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'upload', store: 'apple', version: '1.2.0', build: '7', state: 'VALID' });
+    expect(writes(s.calls).filter(c => /buildUploads/.test(c.path))).toEqual([]);
+  });
+});
+
+describe('status', () => {
+  test('per platform: live and next with build, track, review state, rollout %', () => {
+    const s: AppStatus = {
+      project: '/x', ok: true, app: null, check: null, catalog: null, storeErrors: {}, errors: [],
+      summary: { apple: { bundleId: 'com.example.notes', appId: '1' }, play: { packageName: 'com.example.notes' } } as never,
+      release: { source: 'live', current: null, next: null, all: [
+        { store: 'ios', version: '1.1.0', build: '6', state: 'READY_FOR_SALE', phase: 'live', fraction: null, track: null },
+        { store: 'ios', version: '1.2.0', build: '7', state: 'WAITING_FOR_REVIEW', phase: 'sent', fraction: null, track: null },
+        { store: 'android', version: '1.2.0', build: '42', state: 'inProgress', phase: 'rollout', fraction: 0.2, track: 'production' },
+      ] },
+    };
+    const p = platformStatus(s);
+    expect(p).toEqual([
+      { platform: 'ios', store: 'apple', live: { version: '1.1.0', build: '6', track: 'app-store', state: 'READY_FOR_SALE', phase: 'live', reviewState: null, rolloutPct: null },
+        next: { version: '1.2.0', build: '7', track: 'app-store', state: 'WAITING_FOR_REVIEW', phase: 'sent', reviewState: 'WAITING_FOR_REVIEW', rolloutPct: null } },
+      { platform: 'android', store: 'play', live: { version: '1.2.0', build: '42', track: 'production', state: 'inProgress', phase: 'rollout', reviewState: null, rolloutPct: 20 }, next: null },
+    ]);
+  });
+  test('an unreadable store is listed with its error', () => {
+    const s = { project: '/x', ok: false, app: null, check: null, catalog: null, errors: [], storeErrors: { android: 'GET -> 401' },
+      summary: { apple: null, play: { packageName: 'com.example.notes' } }, release: { source: 'live', current: null, next: null, all: [] } } as unknown as AppStatus;
+    expect(platformStatus(s)).toEqual([{ platform: 'android', store: 'play', live: null, next: null, error: 'GET -> 401' }]);
+  });
+});

From 2e888a01ccdbc1b21e0a493d11100f309a061d82 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:13:28 +0800
Subject: [PATCH 105/255] docs/ship-step.md, pitfall 110 (pipeline exit 7 and
 double uploads), CHANGELOG Unreleased

---
 CHANGELOG.md                   |   6 ++
 docs/commands.md               |   1 +
 docs/ship-step.md              | 130 +++++++++++++++++++++++++++++++++
 skills/store-pitfalls/SKILL.md |  12 +++
 4 files changed, 149 insertions(+)
 create mode 100644 docs/ship-step.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 42a65c1..51d014f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 
 ## Unreleased
 
+- Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
+- `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
+- Re-runs never upload twice: `play upload` with a versionCode Play has and `apple upload` with a build number App Store Connect has end with exit 7 and what is there; `play release` with the same release and `apple submit` of an already submitted build too.
+- `play upload --track production` (the pipeline's update step; `--status draft` keeps it for the Console) and `--version-code N` to pick the AAB.
+- New `storebound status [--app <name|store id|folder>] [--json]`: per platform the live and next version, build, track, review state and rollout %, read-only. `release status --app` also takes a folder or a store id.
+
 - Desktop: every read goes through one registry: one store call per read however many buttons are clicked, overlapping buttons (Refresh all, card refresh, Check again, Import, Test) are busy and disabled together, a read just finished is not repeated, and all reads share the scheduler's rate limits and backoff.
 - Desktop: tray mini card on left click (rejections, releases moving, crash alerts, recent low reviews, refresh, quick actions); right click keeps the menu.
 
diff --git a/docs/commands.md b/docs/commands.md
index c71643e..0d3ee56 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -168,6 +168,7 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `ws apps import --account <profile>` | API, read-only + local cache | the apps a store account sees, paired with the folders (the desktop's rules) |
 | `ws desktop export [--out f \| --merge [--apply]]`, `ws desktop import` | local | the workspace to and from the desktop app's state (labels, never keys) |
 | `release status [--app a,b] [--versions]` | API, read-only | both stores on one train per version: build > testing > review > live > rollout % |
+| `status [--app <name, store id or folder>] [--json]` | API, read-only | per platform: live and next version, build, track, review state, rollout % (docs/ship-step.md) |
 | `release plan <version> [--app a]` | API, read-only | what is left for that version on each store, in fix order, with the owner's next step |
 
 </details>
diff --git a/docs/ship-step.md b/docs/ship-step.md
new file mode 100644
index 0000000..dc9aa02
--- /dev/null
+++ b/docs/ship-step.md
@@ -0,0 +1,130 @@
+# Ship step contract
+
+How a release pipeline (a Jenkins node, a Forgejo runner, any CI job) calls storebound without a person. The
+commands below keep their normal behaviour in a terminal; the contract switches on when a run passes `--json`,
+`--result-file`, `--progress json`, `--env-file` or `--version-from`. The code is in one module:
+`cli/lib/ship-step.ts`.
+
+| Command | step | store |
+|---|---|---|
+| `storebound play build` | `build` | `play` |
+| `storebound play upload` (`--track internal\|alpha\|beta\|production`) | `upload` | `play` |
+| `storebound play release` (promote / several tracks in one edit) | `release` | `play` |
+| `storebound apple build` | `build` | `apple` |
+| `storebound apple upload` | `upload` | `apple` |
+| `storebound apple submit` | `submit` | `apple` |
+| `storebound apple resubmit` | `resubmit` | `apple` |
+
+A write still needs `--yes` in a pipeline: without it the confirmation is declined and the run ends with exit 3
+(`CONFIRMATION_REQUIRED`). `apple submit` without `--yes` is a dry run (exit 0, `state: "planned"`).
+
+## Exit codes
+
+| Code | Meaning | `error.code` |
+|---|---|---|
+| 0 | ok | - |
+| 1 | failure (build failed, network, timeout, blockers) | `FAILED`, `TIMEOUT`, `BLOCKERS` |
+| 2 | usage (unknown flag, bad value, bad `--version-from` / `--env-file`) | `USAGE`, `ENV_FILE` |
+| 3 | needs the owner | `AGREEMENT_PENDING`, `SIGN_IN_REQUIRED`, `COMPLIANCE_ANSWER_MISSING`, `CONSOLE_STEP`, `CONFIRMATION_REQUIRED` |
+| 4 | the store refused it (4xx answer, ITMS error, invalid build, rejected upload) | `STORE_REFUSED`, `BUILD_INVALID` |
+| 7 | nothing to do: the build / release is on the store already (the result names what is there) | - |
+
+An exit 3 carries `error.consoleUrl`: the absolute console deep link of the page where the owner acts (App Store
+Connect Business > Agreements, Users and Access > Integrations, the encryption / App Privacy / age rating pages; Play
+Console API access, Data safety, Content ratings, Publishing overview). The links come from
+`cli/lib/console-links.ts`, with the app's console ids when the config knows them.
+
+Note: `apple upload` and `apple testflight wait` keep their old exit 7 for a processing timeout when the contract is
+off; under the contract a timeout is exit 1 `TIMEOUT` and an invalid build exit 4 `BUILD_INVALID`.
+
+## `--json`: one final line
+
+stdout carries exactly one line, at the end, also on failure:
+
+```json
+{"ok":true,"step":"upload","store":"play","track":"production","version":"1.2.0","build":"42","state":"completed","url":"https://play.google.com/console/u/0/developers/<dev>/app/<app>/tracks/production","warnings":[]}
+```
+
+| Key | |
+|---|---|
+| `ok` | true for exit 0 and 7 |
+| `step`, `store` | see the table above |
+| `track` | Play track(s) (`internal`, `production`, `internal,production`); null on Apple |
+| `version`, `build` | marketing version and build number / versionCode, as strings |
+| `state` | `built`, `planned` (dry run), Play release status (`completed`, `draft`, `inProgress`), App Store `processingState` (`VALID`, `PROCESSING`) or version state (`WAITING_FOR_REVIEW`), `failed` |
+| `url` | the console page to look at |
+| `warnings[]` | e.g. a versionCode that is on Play but on another track |
+| `error` | `{code, message, consoleUrl?}` when not ok |
+| `artifact` | build steps: the AAB / IPA path |
+
+The command's own `--json` fields follow in the same object when they do not clash (`versionCode`, `sha256`,
+`tracks`, `aab`, `processingState` ...), so readers of the old output keep working. Every log line goes to stderr.
+Under `storebound serve` and flows (`STOREBOUND_MACHINE=1`) a bare `--json` keeps the old result line.
+
+## `--result-file <path>`
+
+The same JSON, written atomically (a temp file in the same folder, then a rename), on success and on failure. Also
+written for an unknown flag (exit 2).
+
+## `--progress json`
+
+One JSON line on stderr per phase: `{"phase":"upload","pct":40,"message":"4/10 parts"}`. Phases: `start`,
+`prebuild`, `build`, `sign`, `verify`, `upload` (with `pct`), `commit`, `processing`, `submit`, `done`. Other stderr
+lines are plain logs: read the lines that start with `{`.
+
+## `--env-file <path>`
+
+`KEY=VALUE` lines (`#` comments, `export ` prefix, quotes; `\n` inside double quotes) loaded into the environment
+before the credentials resolve; the file wins over the environment. On macOS / Linux the file must not be readable by
+group or others (mode 600 or stricter), else exit 2. On Windows it is read as is. Every value of the file, and every
+environment variable whose name says secret (`*_KEY`, `*PASSWORD*`, `*TOKEN*`, `ASC_P8`, `PLAY_SERVICE_ACCOUNT` ...),
+is replaced with `[redacted]` in stdout, stderr and the result file (multi-line keys line by line).
+
+## `--version-from <version.json>`
+
+Reads the version and build for the step. Accepted shapes:
+
+```json
+{"version": "1.2.0", "build": 42}
+{"versionName": "1.2.0", "versionCode": 42}
+{"marketing": "1.2.0", "build": "42"}
+```
+
+(`marketingVersion` and `buildNumber` work too.) What it sets: `play build` `--version-name` + `--version-code`,
+`play upload` `--version-code` (picks the AAB with that versionCode), `play release` `--version-code` (without an
+.aab), `apple build` `--version` + `--build-number`, `apple upload` `--build`, `apple submit` / `resubmit` `--version`
++ `--build`. A flag given by hand must agree with the file (else exit 2). An Android build must be an integer.
+
+## Idempotency
+
+- `play upload`: a versionCode already in Play's bundle list is never uploaded again: exit 7 with the track and
+  status it has (a warning when it is not on the asked track: `play release --version-code N --<track> <status>`).
+- `apple upload`: a build number App Store Connect already has (a build, or a finished build upload) is exit 7 with
+  its `processingState`; nothing is sent.
+- `play release`: every track already holds the same release: exit 7, nothing committed.
+- `apple submit`: the version is already submitted (or further) with this build, or the submission is in review:
+  exit 7.
+
+## `storebound status`
+
+```
+storebound status --app <name|store id|folder> --json
+```
+
+Read-only, before any step: per platform the release reaching users (`live`) and the one above it (`next`), each with
+`version`, `build`, `track`, `state`, `phase`, `reviewState` and `rolloutPct`. `--app` takes an app folder path, a
+workspace app name or a store id (bundle id, package name, App Store app id). One JSON line:
+
+```json
+{"apps":[{"app":"notes","folder":"/srv/notes","platforms":[{"platform":"android","store":"play","live":{"version":"1.2.0","build":"42","track":"production","state":"inProgress","phase":"rollout","reviewState":null,"rolloutPct":20},"next":null}],"errors":[],"warnings":[]}],"at":"2026-10-23T10:00:00.000Z"}
+```
+
+Exit 1 when a store could not be read (`platforms[].error`).
+
+## A pipeline stage
+
+```sh
+storebound play build --version-from version.json --env-file /run/secrets/ship.env --json --result-file out/build.json --progress json --yes
+storebound play upload --track production --version-from version.json --env-file /run/secrets/ship.env --json --result-file out/upload.json --yes
+case $? in 0|7) ;; 3) echo "owner: $(jq -r .error.consoleUrl out/upload.json)"; exit 1 ;; *) exit 1 ;; esac
+```
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 0ee01c1..54f25ad 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1311,3 +1311,15 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Do:** write the notes without other platforms or stores; `[play]` / `[apple]` tags split shared notes.
 - **Guard:** `storebound check` reports the "What's new" of every Play language, `play build` refuses before Gradle runs
   (`notesGuard`), `play upload` / `play release` refuse before any edit (`refusePlayNotes`).
+
+## 110. A pipeline read "exit 7" as a failure, or uploaded the same build twice
+
+- **What happens:** a CI stage re-ran after a crash (or a retry) and either uploaded the same versionCode / build
+  number again (Play 403 "APK specifies a version code that has already been used", App Store Connect "redundant
+  binary upload") or failed the job on exit 7, which used to mean "processing timeout" for `apple upload` alone.
+- **Do:** call the ship commands under the ship-step contract (`--json` / `--result-file`, docs/ship-step.md): exit 7
+  is "nothing to do, it is there", with the track and state in the result; exit 3 names what the owner must do with
+  the console deep link (`error.consoleUrl`); exit 4 is the store refusing. Treat 0 and 7 as success.
+- **Guard:** `cli/lib/ship-step.ts` holds the one exit-code mapping; `play upload` and `apple upload` check the store
+  before sending and stop with exit 7 (`tests/ship-step.test.ts`, fake stores); `--env-file` values are scrubbed from
+  every output.

From 021c0eef5ade0355ed5afd47cd327b99c86fcf89 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:13:45 +0800
Subject: [PATCH 106/255] Regenerate the API tables with forward slashes

---
 cli/api/wrapped.gen.ts | 486 ++++++++++++++++++++---------------------
 docs/api-coverage.md   | 486 ++++++++++++++++++++---------------------
 2 files changed, 486 insertions(+), 486 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 93ee57e..4d1f965 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -2,276 +2,276 @@
 // Operation id -> the source modules (cli/<module>.ts) of storebound commands that already call it.
 export const WRAPPED: { apple: Record<string, string>; play: Record<string, string> } = {
   apple: {
-    'ageRatingDeclarations_updateInstance': 'apple\\appinfo',
+    'ageRatingDeclarations_updateInstance': 'apple/appinfo',
     'analyticsReportInstances_segments_getToManyRelated': 'analytics',
     'analyticsReportRequests_createInstance': 'analytics',
     'analyticsReportRequests_reports_getToManyRelated': 'analytics',
     'analyticsReports_instances_getToManyRelated': 'analytics',
-    'appAssetLibraries_images_getToManyRelated': 'apple\\creative-assets',
-    'appAssetLibraries_videos_getToManyRelated': 'apple\\creative-assets',
-    'appAssetLibraryPlacements_createInstance': 'apple\\creative-assets',
-    'appAssetLibraryPlacements_deleteInstance': 'apple\\creative-assets',
-    'appAvailabilitiesV2_createInstance': 'apple\\appinfo',
-    'appAvailabilitiesV2_territoryAvailabilities_getToManyRelated': 'apple\\appinfo apple\\preorder',
-    'appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated': 'apple\\cpp',
-    'appCustomProductPageLocalizations_createInstance': 'lib\\cpp-events',
-    'appCustomProductPageLocalizations_updateInstance': 'lib\\cpp-events',
-    'appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated': 'apple\\cpp',
-    'appCustomProductPageVersions_updateInstance': 'lib\\cpp-events',
-    'appCustomProductPages_appCustomProductPageVersions_getToManyRelated': 'apple\\cpp',
-    'appCustomProductPages_createInstance': 'apple\\cpp',
-    'appCustomProductPages_getInstance': 'apple\\cpp',
-    'appCustomProductPages_updateInstance': 'apple\\cpp',
-    'appEncryptionDeclarations_getCollection': 'apple\\encryption',
-    'appEventLocalizations_appEventScreenshots_getToManyRelated': 'apple\\events',
-    'appEventLocalizations_createInstance': 'lib\\cpp-events',
-    'appEventLocalizations_updateInstance': 'lib\\cpp-events',
-    'appEventScreenshots_createInstance': 'apple\\events',
-    'appEventScreenshots_deleteInstance': 'apple\\events',
-    'appEventScreenshots_updateInstance': 'apple\\events',
-    'appEvents_createInstance': 'apple\\events',
-    'appEvents_getInstance': 'apple\\events',
-    'appEvents_localizations_getToManyRelated': 'apple\\events',
-    'appEvents_updateInstance': 'lib\\cpp-events',
+    'appAssetLibraries_images_getToManyRelated': 'apple/creative-assets',
+    'appAssetLibraries_videos_getToManyRelated': 'apple/creative-assets',
+    'appAssetLibraryPlacements_createInstance': 'apple/creative-assets',
+    'appAssetLibraryPlacements_deleteInstance': 'apple/creative-assets',
+    'appAvailabilitiesV2_createInstance': 'apple/appinfo',
+    'appAvailabilitiesV2_territoryAvailabilities_getToManyRelated': 'apple/appinfo apple/preorder',
+    'appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated': 'apple/cpp',
+    'appCustomProductPageLocalizations_createInstance': 'lib/cpp-events',
+    'appCustomProductPageLocalizations_updateInstance': 'lib/cpp-events',
+    'appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated': 'apple/cpp',
+    'appCustomProductPageVersions_updateInstance': 'lib/cpp-events',
+    'appCustomProductPages_appCustomProductPageVersions_getToManyRelated': 'apple/cpp',
+    'appCustomProductPages_createInstance': 'apple/cpp',
+    'appCustomProductPages_getInstance': 'apple/cpp',
+    'appCustomProductPages_updateInstance': 'apple/cpp',
+    'appEncryptionDeclarations_getCollection': 'apple/encryption',
+    'appEventLocalizations_appEventScreenshots_getToManyRelated': 'apple/events',
+    'appEventLocalizations_createInstance': 'lib/cpp-events',
+    'appEventLocalizations_updateInstance': 'lib/cpp-events',
+    'appEventScreenshots_createInstance': 'apple/events',
+    'appEventScreenshots_deleteInstance': 'apple/events',
+    'appEventScreenshots_updateInstance': 'apple/events',
+    'appEvents_createInstance': 'apple/events',
+    'appEvents_getInstance': 'apple/events',
+    'appEvents_localizations_getToManyRelated': 'apple/events',
+    'appEvents_updateInstance': 'lib/cpp-events',
     'appInfoLocalizations_createInstance': 'listing-store',
     'appInfoLocalizations_updateInstance': 'listing-store',
-    'appInfos_ageRatingDeclaration_getToOneRelated': 'apple\\appinfo console\\verify validate',
-    'appInfos_appInfoLocalizations_getToManyRelated': 'apple\\listing listing-store onboard validate',
-    'appInfos_getInstance': 'apple\\appinfo',
-    'appInfos_updateInstance': 'apple\\appinfo',
-    'appPreviewSets_appPreviews_getToManyRelated': 'apple\\previews art',
-    'appPreviewSets_createInstance': 'apple\\previews',
-    'appPreviews_updateInstance': 'apple\\previews',
-    'appPriceSchedules_createInstance': 'apple\\appinfo',
-    'appPriceSchedules_manualPrices_getToManyRelated': 'apple\\appinfo',
-    'appScreenshotSets_appScreenshots_getToManyRelated': 'apple\\ppo apple\\screenshot-health apple\\screenshots art validate',
-    'appScreenshotSets_appScreenshots_replaceToManyRelationship': 'apple\\screenshot-health',
-    'appScreenshotSets_createInstance': 'apple\\screenshots',
-    'appScreenshots_createInstance': 'apple\\screenshot-health',
-    'appScreenshots_deleteInstance': 'apple\\screenshot-health',
-    'appScreenshots_updateInstance': 'apple\\screenshot-health',
-    'appStoreReviewDetails_createInstance': 'apple\\review-details',
-    'appStoreReviewDetails_updateInstance': 'apple\\review-details',
-    'appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated': 'apple\\ppo',
-    'appStoreVersionExperimentTreatmentLocalizations_createInstance': 'lib\\ppo',
-    'appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated': 'apple\\ppo',
-    'appStoreVersionExperimentTreatments_createInstance': 'lib\\ppo',
-    'appStoreVersionExperimentTreatments_getInstance': 'apple\\ppo',
-    'appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated': 'apple\\ppo',
-    'appStoreVersionExperimentsV2_createInstance': 'lib\\ppo',
-    'appStoreVersionExperimentsV2_getInstance': 'apple\\ppo',
-    'appStoreVersionExperimentsV2_updateInstance': 'lib\\ppo',
-    'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple\\previews art',
-    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple\\screenshot-health apple\\screenshots art validate',
+    'appInfos_ageRatingDeclaration_getToOneRelated': 'apple/appinfo console/verify validate',
+    'appInfos_appInfoLocalizations_getToManyRelated': 'apple/listing listing-store onboard validate',
+    'appInfos_getInstance': 'apple/appinfo',
+    'appInfos_updateInstance': 'apple/appinfo',
+    'appPreviewSets_appPreviews_getToManyRelated': 'apple/previews art',
+    'appPreviewSets_createInstance': 'apple/previews',
+    'appPreviews_updateInstance': 'apple/previews',
+    'appPriceSchedules_createInstance': 'apple/appinfo',
+    'appPriceSchedules_manualPrices_getToManyRelated': 'apple/appinfo',
+    'appScreenshotSets_appScreenshots_getToManyRelated': 'apple/ppo apple/screenshot-health apple/screenshots art validate',
+    'appScreenshotSets_appScreenshots_replaceToManyRelationship': 'apple/screenshot-health',
+    'appScreenshotSets_createInstance': 'apple/screenshots',
+    'appScreenshots_createInstance': 'apple/screenshot-health',
+    'appScreenshots_deleteInstance': 'apple/screenshot-health',
+    'appScreenshots_updateInstance': 'apple/screenshot-health',
+    'appStoreReviewDetails_createInstance': 'apple/review-details',
+    'appStoreReviewDetails_updateInstance': 'apple/review-details',
+    'appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated': 'apple/ppo',
+    'appStoreVersionExperimentTreatmentLocalizations_createInstance': 'lib/ppo',
+    'appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated': 'apple/ppo',
+    'appStoreVersionExperimentTreatments_createInstance': 'lib/ppo',
+    'appStoreVersionExperimentTreatments_getInstance': 'apple/ppo',
+    'appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated': 'apple/ppo',
+    'appStoreVersionExperimentsV2_createInstance': 'lib/ppo',
+    'appStoreVersionExperimentsV2_getInstance': 'apple/ppo',
+    'appStoreVersionExperimentsV2_updateInstance': 'lib/ppo',
+    'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple/previews art',
+    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/screenshot-health apple/screenshots art validate',
     'appStoreVersionLocalizations_createInstance': 'listing-store',
-    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple\\creative-assets',
+    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets',
     'appStoreVersionLocalizations_updateInstance': 'listing-store',
-    'appStoreVersionPhasedReleases_createInstance': 'apple\\release',
-    'appStoreVersionPhasedReleases_updateInstance': 'apple\\release',
-    'appStoreVersionReleaseRequests_createInstance': 'apple\\release',
-    'appStoreVersions_appStoreReviewDetail_getToOneRelated': 'apple\\review-details onboard validate',
-    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple\\creative-assets apple\\listing apple\\previews apple\\screenshot-health apple\\screenshots art listing-store onboard validate',
-    'appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated': 'apple\\release apple\\status',
-    'appStoreVersions_build_getToOneRelated': 'apple\\listing apple\\resubmit validate',
-    'appStoreVersions_build_updateToOneRelationship': 'apple\\listing apple\\resubmit',
-    'appStoreVersions_createInstance': 'apple\\listing',
-    'appStoreVersions_gameCenterAppVersion_getToOneRelated': 'apple\\game-center',
-    'appStoreVersions_getInstance': 'apple\\listing',
-    'appStoreVersions_updateInstance': 'apple\\listing',
+    'appStoreVersionPhasedReleases_createInstance': 'apple/release',
+    'appStoreVersionPhasedReleases_updateInstance': 'apple/release',
+    'appStoreVersionReleaseRequests_createInstance': 'apple/release',
+    'appStoreVersions_appStoreReviewDetail_getToOneRelated': 'apple/review-details onboard validate',
+    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple/creative-assets apple/listing apple/previews apple/screenshot-health apple/screenshots art listing-store onboard validate',
+    'appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated': 'apple/release apple/status',
+    'appStoreVersions_build_getToOneRelated': 'apple/listing apple/resubmit validate',
+    'appStoreVersions_build_updateToOneRelationship': 'apple/listing apple/resubmit',
+    'appStoreVersions_createInstance': 'apple/listing',
+    'appStoreVersions_gameCenterAppVersion_getToOneRelated': 'apple/game-center',
+    'appStoreVersions_getInstance': 'apple/listing',
+    'appStoreVersions_updateInstance': 'apple/listing',
     'apps_analyticsReportRequests_getToManyRelated': 'analytics',
-    'apps_appAvailabilityV2_getToOneRelated': 'apple\\appinfo apple\\preorder validate',
-    'apps_appCustomProductPages_getToManyRelated': 'apple\\cpp',
-    'apps_appEvents_getToManyRelated': 'apple\\events',
-    'apps_appInfos_getToManyRelated': 'apple\\asc apple\\listing',
-    'apps_appPricePoints_getToManyRelated': 'apple\\appinfo',
-    'apps_appPriceSchedule_getToOneRelated': 'apple\\appinfo validate',
-    'apps_appStoreVersionExperimentsV2_getToManyRelated': 'apple\\ppo',
-    'apps_appStoreVersions_getToManyRelated': 'apple\\asc apple\\creative-assets apple\\iap-submit apple\\platform apple\\review-details apple\\status art lib\\store-apps listing-store onboard',
-    'apps_assetLibrary_getToOneRelated': 'apple\\creative-assets',
-    'apps_betaAppLocalizations_getToManyRelated': 'apple\\testflight',
-    'apps_betaAppReviewDetail_getToOneRelated': 'apple\\testflight',
+    'apps_appAvailabilityV2_getToOneRelated': 'apple/appinfo apple/preorder validate',
+    'apps_appCustomProductPages_getToManyRelated': 'apple/cpp',
+    'apps_appEvents_getToManyRelated': 'apple/events',
+    'apps_appInfos_getToManyRelated': 'apple/asc apple/listing',
+    'apps_appPricePoints_getToManyRelated': 'apple/appinfo',
+    'apps_appPriceSchedule_getToOneRelated': 'apple/appinfo validate',
+    'apps_appStoreVersionExperimentsV2_getToManyRelated': 'apple/ppo',
+    'apps_appStoreVersions_getToManyRelated': 'apple/asc apple/creative-assets apple/iap-submit apple/platform apple/review-details apple/status art lib/store-apps listing-store onboard',
+    'apps_assetLibrary_getToOneRelated': 'apple/creative-assets',
+    'apps_betaAppLocalizations_getToManyRelated': 'apple/testflight',
+    'apps_betaAppReviewDetail_getToOneRelated': 'apple/testflight',
     'apps_betaFeedbackCrashSubmissions_getToManyRelated': 'health',
-    'apps_betaGroups_getToManyRelated': 'apple\\testflight',
-    'apps_buildUploads_getToManyRelated': 'apple\\upload',
+    'apps_betaGroups_getToManyRelated': 'apple/testflight',
+    'apps_buildUploads_getToManyRelated': 'apple/upload',
     'apps_customerReviews_getToManyRelated': 'reviews',
-    'apps_gameCenterDetail_getToOneRelated': 'apple\\game-center',
-    'apps_getCollection': 'apple\\asc apple\\bundle apps console\\app-id console\\verify lib\\store-apps',
-    'apps_getInstance': 'apple\\appinfo apple\\status apps onboard watch',
-    'apps_inAppPurchasesV2_getToManyRelated': 'apple\\first-products apple\\iap apple\\iap-review apple\\iap-submit apple\\offer-codes apple\\promoted apple\\status catalog prices validate',
+    'apps_gameCenterDetail_getToOneRelated': 'apple/game-center',
+    'apps_getCollection': 'apple/asc apple/bundle apps console/app-id console/verify lib/store-apps',
+    'apps_getInstance': 'apple/appinfo apple/status apps onboard watch',
+    'apps_inAppPurchasesV2_getToManyRelated': 'apple/first-products apple/iap apple/iap-review apple/iap-submit apple/offer-codes apple/promoted apple/status catalog prices validate',
     'apps_perfPowerMetrics_getToManyRelated': 'health',
-    'apps_promotedPurchases_getToManyRelated': 'apple\\promoted',
-    'apps_promotedPurchases_replaceToManyRelationship': 'lib\\offers',
-    'apps_reviewSubmissions_getToManyRelated': 'apple\\resubmit apple\\submission',
-    'apps_subscriptionGroups_getToManyRelated': 'apple\\first-products apple\\iap-submit apple\\promoted apple\\subscriptions apple\\win-back catalog prices validate',
-    'apps_updateInstance': 'apple\\appinfo',
-    'betaAppLocalizations_createInstance': 'lib\\testflight',
-    'betaAppLocalizations_updateInstance': 'lib\\testflight',
-    'betaAppReviewDetails_updateInstance': 'lib\\testflight',
-    'betaAppReviewSubmissions_createInstance': 'lib\\testflight',
-    'betaBuildLocalizations_createInstance': 'lib\\testflight',
-    'betaBuildLocalizations_updateInstance': 'lib\\testflight',
+    'apps_promotedPurchases_getToManyRelated': 'apple/promoted',
+    'apps_promotedPurchases_replaceToManyRelationship': 'lib/offers',
+    'apps_reviewSubmissions_getToManyRelated': 'apple/resubmit apple/submission',
+    'apps_subscriptionGroups_getToManyRelated': 'apple/first-products apple/iap-submit apple/promoted apple/subscriptions apple/win-back catalog prices validate',
+    'apps_updateInstance': 'apple/appinfo',
+    'betaAppLocalizations_createInstance': 'lib/testflight',
+    'betaAppLocalizations_updateInstance': 'lib/testflight',
+    'betaAppReviewDetails_updateInstance': 'lib/testflight',
+    'betaAppReviewSubmissions_createInstance': 'lib/testflight',
+    'betaBuildLocalizations_createInstance': 'lib/testflight',
+    'betaBuildLocalizations_updateInstance': 'lib/testflight',
     'betaFeedbackCrashSubmissions_crashLog_getToOneRelated': 'triage',
-    'betaGroups_betaTesters_createToManyRelationship': 'lib\\testflight',
-    'betaGroups_betaTesters_deleteToManyRelationship': 'lib\\testflight',
-    'betaGroups_betaTesters_getToManyRelated': 'apple\\testflight',
-    'betaGroups_builds_createToManyRelationship': 'lib\\testflight',
-    'betaGroups_builds_getToManyRelated': 'apple\\testflight',
-    'betaGroups_builds_getToManyRelationship': 'apple\\testflight',
-    'betaGroups_createInstance': 'lib\\testflight',
-    'betaGroups_getInstance': 'apple\\testflight',
-    'betaTesterInvitations_createInstance': 'lib\\testflight',
-    'betaTesters_createInstance': 'lib\\testflight',
-    'betaTesters_getCollection': 'apple\\testflight',
-    'buildUploadFiles_createInstance': 'lib\\xcode',
-    'buildUploadFiles_updateInstance': 'lib\\xcode',
-    'buildUploads_buildUploadFiles_getToManyRelated': 'apple\\upload',
-    'buildUploads_createInstance': 'lib\\xcode',
-    'buildUploads_getInstance': 'apple\\upload',
+    'betaGroups_betaTesters_createToManyRelationship': 'lib/testflight',
+    'betaGroups_betaTesters_deleteToManyRelationship': 'lib/testflight',
+    'betaGroups_betaTesters_getToManyRelated': 'apple/testflight',
+    'betaGroups_builds_createToManyRelationship': 'lib/testflight',
+    'betaGroups_builds_getToManyRelated': 'apple/testflight',
+    'betaGroups_builds_getToManyRelationship': 'apple/testflight',
+    'betaGroups_createInstance': 'lib/testflight',
+    'betaGroups_getInstance': 'apple/testflight',
+    'betaTesterInvitations_createInstance': 'lib/testflight',
+    'betaTesters_createInstance': 'lib/testflight',
+    'betaTesters_getCollection': 'apple/testflight',
+    'buildUploadFiles_createInstance': 'lib/xcode',
+    'buildUploadFiles_updateInstance': 'lib/xcode',
+    'buildUploads_buildUploadFiles_getToManyRelated': 'apple/upload',
+    'buildUploads_createInstance': 'lib/xcode',
+    'buildUploads_getInstance': 'apple/upload',
     'builds_appEncryptionDeclaration_getToOneRelated': 'validate',
-    'builds_betaAppReviewSubmission_getToOneRelated': 'apple\\testflight',
-    'builds_betaBuildLocalizations_getToManyRelated': 'apple\\testflight',
+    'builds_betaAppReviewSubmission_getToOneRelated': 'apple/testflight',
+    'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
-    'builds_getCollection': 'apple\\build apple\\encryption apple\\listing apple\\next-build apple\\resubmit apple\\status apple\\testflight apple\\upload art health lib\\store-apps triage',
-    'builds_updateInstance': 'apple\\encryption lib\\build-ops',
-    'bundleIdCapabilities_createInstance': 'lib\\signing',
-    'bundleIds_createInstance': 'apple\\bundle',
-    'bundleIds_getCollection': 'apple\\adhoc apple\\bundle apple\\signing',
-    'bundleIds_profiles_getToManyRelated': 'apple\\adhoc lib\\signing',
-    'certificates_createInstance': 'apple\\signing lib\\signing',
-    'certificates_getCollection': 'apple\\adhoc apple\\signing',
-    'customerReviewResponses_createInstance': 'lib\\reviews',
-    'devices_createInstance': 'apple\\adhoc',
-    'devices_getCollection': 'apple\\adhoc',
+    'builds_getCollection': 'apple/build apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
+    'builds_updateInstance': 'apple/encryption lib/build-ops',
+    'bundleIdCapabilities_createInstance': 'lib/signing',
+    'bundleIds_createInstance': 'apple/bundle',
+    'bundleIds_getCollection': 'apple/adhoc apple/bundle apple/signing',
+    'bundleIds_profiles_getToManyRelated': 'apple/adhoc lib/signing',
+    'certificates_createInstance': 'apple/signing lib/signing',
+    'certificates_getCollection': 'apple/adhoc apple/signing',
+    'customerReviewResponses_createInstance': 'lib/reviews',
+    'devices_createInstance': 'apple/adhoc',
+    'devices_getCollection': 'apple/adhoc',
     'diagnosticSignatures_logs_getToManyRelated': 'health',
-    'endAppAvailabilityPreOrders_createInstance': 'lib\\offers',
-    'financeReports_getCollection': 'lib\\reports',
-    'gameCenterAchievements_localizations_getToManyRelated': 'apple\\game-center',
-    'gameCenterAppVersions_createInstance': 'apple\\game-center',
-    'gameCenterDetails_createInstance': 'apple\\game-center',
-    'gameCenterDetails_gameCenterAchievements_getToManyRelated': 'apple\\game-center',
-    'gameCenterDetails_gameCenterLeaderboards_getToManyRelated': 'apple\\game-center',
-    'gameCenterLeaderboards_localizations_getToManyRelated': 'apple\\game-center',
-    'inAppPurchaseAppStoreReviewScreenshots_createInstance': 'apple\\iap-review',
-    'inAppPurchaseAppStoreReviewScreenshots_deleteInstance': 'apple\\iap-review',
-    'inAppPurchaseAppStoreReviewScreenshots_updateInstance': 'apple\\iap-review',
-    'inAppPurchaseAvailabilities_availableTerritories_getToManyRelated': 'apple\\iap',
-    'inAppPurchaseAvailabilities_createInstance': 'apple\\iap',
-    'inAppPurchaseLocalizations_createInstance': 'apple\\iap',
-    'inAppPurchaseLocalizations_updateInstance': 'apple\\iap',
-    'inAppPurchaseOfferCodeCustomCodes_createInstance': 'lib\\offers',
-    'inAppPurchaseOfferCodeOneTimeUseCodes_createInstance': 'lib\\offers',
-    'inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated': 'apple\\offer-codes',
-    'inAppPurchaseOfferCodes_createInstance': 'apple\\offer-codes',
-    'inAppPurchaseOfferCodes_customCodes_getToManyRelated': 'apple\\offer-codes',
-    'inAppPurchaseOfferCodes_getInstance': 'apple\\offer-codes',
-    'inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated': 'apple\\offer-codes',
-    'inAppPurchaseOfferCodes_prices_getToManyRelated': 'apple\\offer-codes',
-    'inAppPurchasePricePoints_equalizations_getToManyRelated': 'apple\\offer-codes prices-ppp',
+    'endAppAvailabilityPreOrders_createInstance': 'lib/offers',
+    'financeReports_getCollection': 'lib/reports',
+    'gameCenterAchievements_localizations_getToManyRelated': 'apple/game-center',
+    'gameCenterAppVersions_createInstance': 'apple/game-center',
+    'gameCenterDetails_createInstance': 'apple/game-center',
+    'gameCenterDetails_gameCenterAchievements_getToManyRelated': 'apple/game-center',
+    'gameCenterDetails_gameCenterLeaderboards_getToManyRelated': 'apple/game-center',
+    'gameCenterLeaderboards_localizations_getToManyRelated': 'apple/game-center',
+    'inAppPurchaseAppStoreReviewScreenshots_createInstance': 'apple/iap-review',
+    'inAppPurchaseAppStoreReviewScreenshots_deleteInstance': 'apple/iap-review',
+    'inAppPurchaseAppStoreReviewScreenshots_updateInstance': 'apple/iap-review',
+    'inAppPurchaseAvailabilities_availableTerritories_getToManyRelated': 'apple/iap',
+    'inAppPurchaseAvailabilities_createInstance': 'apple/iap',
+    'inAppPurchaseLocalizations_createInstance': 'apple/iap',
+    'inAppPurchaseLocalizations_updateInstance': 'apple/iap',
+    'inAppPurchaseOfferCodeCustomCodes_createInstance': 'lib/offers',
+    'inAppPurchaseOfferCodeOneTimeUseCodes_createInstance': 'lib/offers',
+    'inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated': 'apple/offer-codes',
+    'inAppPurchaseOfferCodes_createInstance': 'apple/offer-codes',
+    'inAppPurchaseOfferCodes_customCodes_getToManyRelated': 'apple/offer-codes',
+    'inAppPurchaseOfferCodes_getInstance': 'apple/offer-codes',
+    'inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated': 'apple/offer-codes',
+    'inAppPurchaseOfferCodes_prices_getToManyRelated': 'apple/offer-codes',
+    'inAppPurchasePricePoints_equalizations_getToManyRelated': 'apple/offer-codes prices-ppp',
     'inAppPurchasePriceSchedules_automaticPrices_getToManyRelated': 'prices',
     'inAppPurchasePriceSchedules_baseTerritory_getToOneRelated': 'prices',
-    'inAppPurchasePriceSchedules_createInstance': 'apple\\iap prices',
+    'inAppPurchasePriceSchedules_createInstance': 'apple/iap prices',
     'inAppPurchasePriceSchedules_manualPrices_getToManyRelated': 'prices',
-    'inAppPurchaseVersions_createInstance': 'lib\\review-submit',
-    'inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated': 'apple\\iap-review validate',
-    'inAppPurchasesV2_createInstance': 'apple\\iap',
-    'inAppPurchasesV2_getInstance': 'apple\\iap',
-    'inAppPurchasesV2_iapPriceSchedule_getToOneRelated': 'apple\\iap apple\\iap-review catalog',
-    'inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated': 'apple\\iap apple\\iap-review',
-    'inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated': 'apple\\iap apple\\iap-review catalog',
-    'inAppPurchasesV2_offerCodes_getToManyRelated': 'apple\\offer-codes',
-    'inAppPurchasesV2_pricePoints_getToManyRelated': 'apple\\iap apple\\offer-codes prices prices-ppp',
-    'inAppPurchasesV2_updateInstance': 'apple\\iap',
-    'inAppPurchasesV2_versions_getToManyRelated': 'apple\\first-products apple\\iap-submit',
-    'profiles_certificates_getToManyRelationship': 'lib\\signing',
-    'profiles_createInstance': 'apple\\adhoc lib\\signing',
-    'profiles_devices_getToManyRelated': 'apple\\adhoc',
-    'profiles_getInstance': 'apple\\signing',
-    'promotedPurchases_createInstance': 'lib\\offers',
-    'promotedPurchases_updateInstance': 'lib\\offers',
-    'reviewSubmissionItems_createInstance': 'apple\\submission lib\\cpp-events lib\\review-submit',
-    'reviewSubmissionItems_updateInstance': 'apple\\submission',
-    'reviewSubmissions_createInstance': 'apple\\cpp apple\\events apple\\submission lib\\review-submit',
-    'reviewSubmissions_getCollection': 'apple\\events apple\\iap-submit apple\\status apple\\submission',
-    'reviewSubmissions_getInstance': 'apple\\submission',
-    'reviewSubmissions_items_getToManyRelated': 'apple\\submission',
-    'reviewSubmissions_updateInstance': 'apple\\cpp apple\\events apple\\status apple\\submission lib\\review-submit',
-    'salesReports_getCollection': 'lib\\reports',
-    'subscriptionAppStoreReviewScreenshots_createInstance': 'apple\\subscriptions',
-    'subscriptionAppStoreReviewScreenshots_deleteInstance': 'apple\\subscriptions',
-    'subscriptionAppStoreReviewScreenshots_updateInstance': 'apple\\subscriptions',
-    'subscriptionAvailabilities_availableTerritories_getToManyRelated': 'apple\\subscriptions',
-    'subscriptionAvailabilities_createInstance': 'apple\\subscriptions',
-    'subscriptionGroupLocalizations_createInstance': 'apple\\subscriptions',
-    'subscriptionGroupLocalizations_updateInstance': 'apple\\subscriptions',
-    'subscriptionGroups_createInstance': 'apple\\subscriptions',
-    'subscriptionGroups_getInstance': 'apple\\subscriptions',
-    'subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated': 'apple\\subscriptions validate',
-    'subscriptionGroups_subscriptions_getToManyRelated': 'apple\\first-products apple\\iap-submit apple\\promoted apple\\subscriptions apple\\win-back catalog prices validate',
-    'subscriptionGroups_versions_getToManyRelated': 'apple\\iap-submit',
-    'subscriptionLocalizations_createInstance': 'apple\\subscriptions',
-    'subscriptionLocalizations_updateInstance': 'apple\\subscriptions',
-    'subscriptionOfferCodeCustomCodes_createInstance': 'apple\\subscriptions',
-    'subscriptionOfferCodes_createInstance': 'apple\\subscriptions',
-    'subscriptionOfferCodes_customCodes_getToManyRelated': 'apple\\subscriptions',
-    'subscriptionOfferCodes_getInstance': 'apple\\subscriptions',
-    'subscriptionPricePoints_equalizations_getToManyRelated': 'apple\\subscriptions apple\\win-back',
-    'subscriptionPromotionalOffers_createInstance': 'apple\\subscriptions',
-    'subscriptionVersions_createInstance': 'lib\\review-submit',
-    'subscriptions_appStoreReviewScreenshot_getToOneRelated': 'apple\\subscriptions validate',
-    'subscriptions_createInstance': 'apple\\subscriptions',
-    'subscriptions_getInstance': 'apple\\subscriptions',
-    'subscriptions_introductoryOffers_getToManyRelated': 'apple\\subscriptions catalog',
-    'subscriptions_offerCodes_getToManyRelated': 'apple\\subscriptions catalog',
-    'subscriptions_pricePoints_getToManyRelated': 'apple\\subscriptions apple\\win-back',
-    'subscriptions_prices_getToManyRelated': 'apple\\subscriptions apple\\win-back catalog prices',
-    'subscriptions_promotionalOffers_getToManyRelated': 'apple\\subscriptions catalog',
-    'subscriptions_subscriptionAvailability_getToOneRelated': 'apple\\subscriptions',
-    'subscriptions_subscriptionLocalizations_getToManyRelated': 'apple\\subscriptions catalog validate',
-    'subscriptions_updateInstance': 'apple\\subscriptions',
-    'subscriptions_versions_getToManyRelated': 'apple\\first-products apple\\iap-submit',
-    'subscriptions_winBackOffers_getToManyRelated': 'apple\\win-back',
-    'territories_getCollection': 'apple\\appinfo apple\\events apple\\iap apple\\offer-codes apple\\subscriptions',
-    'territoryAvailabilities_updateInstance': 'lib\\offers',
-    'winBackOffers_createInstance': 'apple\\win-back',
-    'winBackOffers_prices_getToManyRelated': 'apple\\win-back',
+    'inAppPurchaseVersions_createInstance': 'lib/review-submit',
+    'inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated': 'apple/iap-review validate',
+    'inAppPurchasesV2_createInstance': 'apple/iap',
+    'inAppPurchasesV2_getInstance': 'apple/iap',
+    'inAppPurchasesV2_iapPriceSchedule_getToOneRelated': 'apple/iap apple/iap-review catalog',
+    'inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated': 'apple/iap apple/iap-review',
+    'inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated': 'apple/iap apple/iap-review catalog',
+    'inAppPurchasesV2_offerCodes_getToManyRelated': 'apple/offer-codes',
+    'inAppPurchasesV2_pricePoints_getToManyRelated': 'apple/iap apple/offer-codes prices prices-ppp',
+    'inAppPurchasesV2_updateInstance': 'apple/iap',
+    'inAppPurchasesV2_versions_getToManyRelated': 'apple/first-products apple/iap-submit',
+    'profiles_certificates_getToManyRelationship': 'lib/signing',
+    'profiles_createInstance': 'apple/adhoc lib/signing',
+    'profiles_devices_getToManyRelated': 'apple/adhoc',
+    'profiles_getInstance': 'apple/signing',
+    'promotedPurchases_createInstance': 'lib/offers',
+    'promotedPurchases_updateInstance': 'lib/offers',
+    'reviewSubmissionItems_createInstance': 'apple/submission lib/cpp-events lib/review-submit',
+    'reviewSubmissionItems_updateInstance': 'apple/submission',
+    'reviewSubmissions_createInstance': 'apple/cpp apple/events apple/submission lib/review-submit',
+    'reviewSubmissions_getCollection': 'apple/events apple/iap-submit apple/status apple/submission',
+    'reviewSubmissions_getInstance': 'apple/submission',
+    'reviewSubmissions_items_getToManyRelated': 'apple/submission',
+    'reviewSubmissions_updateInstance': 'apple/cpp apple/events apple/status apple/submission lib/review-submit',
+    'salesReports_getCollection': 'lib/reports',
+    'subscriptionAppStoreReviewScreenshots_createInstance': 'apple/subscriptions',
+    'subscriptionAppStoreReviewScreenshots_deleteInstance': 'apple/subscriptions',
+    'subscriptionAppStoreReviewScreenshots_updateInstance': 'apple/subscriptions',
+    'subscriptionAvailabilities_availableTerritories_getToManyRelated': 'apple/subscriptions',
+    'subscriptionAvailabilities_createInstance': 'apple/subscriptions',
+    'subscriptionGroupLocalizations_createInstance': 'apple/subscriptions',
+    'subscriptionGroupLocalizations_updateInstance': 'apple/subscriptions',
+    'subscriptionGroups_createInstance': 'apple/subscriptions',
+    'subscriptionGroups_getInstance': 'apple/subscriptions',
+    'subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated': 'apple/subscriptions validate',
+    'subscriptionGroups_subscriptions_getToManyRelated': 'apple/first-products apple/iap-submit apple/promoted apple/subscriptions apple/win-back catalog prices validate',
+    'subscriptionGroups_versions_getToManyRelated': 'apple/iap-submit',
+    'subscriptionLocalizations_createInstance': 'apple/subscriptions',
+    'subscriptionLocalizations_updateInstance': 'apple/subscriptions',
+    'subscriptionOfferCodeCustomCodes_createInstance': 'apple/subscriptions',
+    'subscriptionOfferCodes_createInstance': 'apple/subscriptions',
+    'subscriptionOfferCodes_customCodes_getToManyRelated': 'apple/subscriptions',
+    'subscriptionOfferCodes_getInstance': 'apple/subscriptions',
+    'subscriptionPricePoints_equalizations_getToManyRelated': 'apple/subscriptions apple/win-back',
+    'subscriptionPromotionalOffers_createInstance': 'apple/subscriptions',
+    'subscriptionVersions_createInstance': 'lib/review-submit',
+    'subscriptions_appStoreReviewScreenshot_getToOneRelated': 'apple/subscriptions validate',
+    'subscriptions_createInstance': 'apple/subscriptions',
+    'subscriptions_getInstance': 'apple/subscriptions',
+    'subscriptions_introductoryOffers_getToManyRelated': 'apple/subscriptions catalog',
+    'subscriptions_offerCodes_getToManyRelated': 'apple/subscriptions catalog',
+    'subscriptions_pricePoints_getToManyRelated': 'apple/subscriptions apple/win-back',
+    'subscriptions_prices_getToManyRelated': 'apple/subscriptions apple/win-back catalog prices',
+    'subscriptions_promotionalOffers_getToManyRelated': 'apple/subscriptions catalog',
+    'subscriptions_subscriptionAvailability_getToOneRelated': 'apple/subscriptions',
+    'subscriptions_subscriptionLocalizations_getToManyRelated': 'apple/subscriptions catalog validate',
+    'subscriptions_updateInstance': 'apple/subscriptions',
+    'subscriptions_versions_getToManyRelated': 'apple/first-products apple/iap-submit',
+    'subscriptions_winBackOffers_getToManyRelated': 'apple/win-back',
+    'territories_getCollection': 'apple/appinfo apple/events apple/iap apple/offer-codes apple/subscriptions',
+    'territoryAvailabilities_updateInstance': 'lib/offers',
+    'winBackOffers_createInstance': 'apple/win-back',
+    'winBackOffers_prices_getToManyRelated': 'apple/win-back',
   },
   play: {
-    'androidpublisher.applications.dataSafety': 'play\\data-safety',
-    'androidpublisher.edits.apks.list': 'play\\next-version-code',
-    'androidpublisher.edits.bundles.list': 'play\\next-version-code',
-    'androidpublisher.edits.bundles.upload': 'play\\release play\\upload',
-    'androidpublisher.edits.commit': 'play\\client',
+    'androidpublisher.applications.dataSafety': 'play/data-safety',
+    'androidpublisher.edits.apks.list': 'play/next-version-code',
+    'androidpublisher.edits.bundles.list': 'play/next-version-code',
+    'androidpublisher.edits.bundles.upload': 'play/release play/upload',
+    'androidpublisher.edits.commit': 'play/client',
     'androidpublisher.edits.countryavailability.get': 'validate',
-    'androidpublisher.edits.delete': 'apps onboard play\\client validate',
-    'androidpublisher.edits.details.get': 'apps onboard play\\listing play\\status validate',
-    'androidpublisher.edits.details.update': 'play\\listing',
-    'androidpublisher.edits.images.deleteall': 'play\\images',
-    'androidpublisher.edits.images.list': 'apps art play\\images validate',
-    'androidpublisher.edits.images.upload': 'play\\images play\\listing',
-    'androidpublisher.edits.insert': 'apps onboard play\\client validate',
+    'androidpublisher.edits.delete': 'apps onboard play/client validate',
+    'androidpublisher.edits.details.get': 'apps onboard play/listing play/status validate',
+    'androidpublisher.edits.details.update': 'play/listing',
+    'androidpublisher.edits.images.deleteall': 'play/images',
+    'androidpublisher.edits.images.list': 'apps art play/images validate',
+    'androidpublisher.edits.images.upload': 'play/images play/listing',
+    'androidpublisher.edits.insert': 'apps onboard play/client validate',
     'androidpublisher.edits.listings.get': 'onboard',
-    'androidpublisher.edits.listings.list': 'art listing-store play\\listing play\\status validate',
+    'androidpublisher.edits.listings.list': 'art listing-store play/listing play/status validate',
     'androidpublisher.edits.listings.patch': 'listing-store',
-    'androidpublisher.edits.listings.update': 'listing-store play\\listing',
-    'androidpublisher.edits.tracks.get': 'play\\release play\\rollout play\\upload',
-    'androidpublisher.edits.tracks.list': 'play\\next-version-code play\\status validate',
-    'androidpublisher.edits.tracks.update': 'play\\release play\\rollout play\\upload',
-    'androidpublisher.edits.validate': 'play\\client',
+    'androidpublisher.edits.listings.update': 'listing-store play/listing',
+    'androidpublisher.edits.tracks.get': 'play/release play/rollout play/upload',
+    'androidpublisher.edits.tracks.list': 'play/next-version-code play/status validate',
+    'androidpublisher.edits.tracks.update': 'play/release play/rollout play/upload',
+    'androidpublisher.edits.validate': 'play/client',
     'androidpublisher.generatedapks.list': 'web',
-    'androidpublisher.monetization.convertRegionPrices': 'play\\products play\\subscriptions prices prices-ppp',
+    'androidpublisher.monetization.convertRegionPrices': 'play/products play/subscriptions prices prices-ppp',
     'androidpublisher.monetization.onetimeproducts.get': 'prices',
-    'androidpublisher.monetization.onetimeproducts.list': 'play\\products',
-    'androidpublisher.monetization.onetimeproducts.patch': 'play\\products prices',
-    'androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates': 'play\\products',
-    'androidpublisher.monetization.subscriptions.basePlans.activate': 'play\\subscriptions',
-    'androidpublisher.monetization.subscriptions.basePlans.offers.list': 'catalog play\\subscriptions',
-    'androidpublisher.monetization.subscriptions.create': 'play\\subscriptions',
-    'androidpublisher.monetization.subscriptions.get': 'play\\subscriptions prices',
-    'androidpublisher.monetization.subscriptions.list': 'catalog play\\subscriptions validate',
-    'androidpublisher.monetization.subscriptions.patch': 'play\\subscriptions',
+    'androidpublisher.monetization.onetimeproducts.list': 'play/products',
+    'androidpublisher.monetization.onetimeproducts.patch': 'play/products prices',
+    'androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates': 'play/products',
+    'androidpublisher.monetization.subscriptions.basePlans.activate': 'play/subscriptions',
+    'androidpublisher.monetization.subscriptions.basePlans.offers.list': 'catalog play/subscriptions',
+    'androidpublisher.monetization.subscriptions.create': 'play/subscriptions',
+    'androidpublisher.monetization.subscriptions.get': 'play/subscriptions prices',
+    'androidpublisher.monetization.subscriptions.list': 'catalog play/subscriptions validate',
+    'androidpublisher.monetization.subscriptions.patch': 'play/subscriptions',
     'androidpublisher.reviews.list': 'reviews',
-    'androidpublisher.reviews.reply': 'lib\\reviews',
-    'playdeveloperreporting.apps.search': 'apps lib\\store-apps',
+    'androidpublisher.reviews.reply': 'lib/reviews',
+    'playdeveloperreporting.apps.search': 'apps lib/store-apps',
     'playdeveloperreporting.vitals.anrrate.query': 'health',
     'playdeveloperreporting.vitals.crashrate.get': 'health',
     'playdeveloperreporting.vitals.crashrate.query': 'health',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index c52f3fe..bc7d076 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -31,7 +31,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `actors_getCollection` | GET | `/v1/actors` | read |  |
 | `actors_getInstance` | GET | `/v1/actors/{id}` | read |  |
 | **ageRatingDeclarations** (1) | | | | |
-| `ageRatingDeclarations_updateInstance` | PATCH | `/v1/ageRatingDeclarations/{id}` | write (dry by default) | apple\appinfo |
+| `ageRatingDeclarations_updateInstance` | PATCH | `/v1/ageRatingDeclarations/{id}` | write (dry by default) | apple/appinfo |
 | **alternativeDistributionDomains** (4) | | | | |
 | `alternativeDistributionDomains_createInstance` | POST | `/v1/alternativeDistributionDomains` | write (dry by default) |  |
 | `alternativeDistributionDomains_deleteInstance` | DELETE | `/v1/alternativeDistributionDomains/{id}` | owner only (typed confirm) |  |
@@ -80,9 +80,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidToIosAppMappingDetails_updateInstance` | PATCH | `/v1/androidToIosAppMappingDetails/{id}` | write (dry by default) |  |
 | **appAssetLibraries** (5) | | | | |
 | `appAssetLibraries_getInstance` | GET | `/v1/appAssetLibraries/{id}` | read |  |
-| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple\creative-assets |
+| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple/creative-assets |
 | `appAssetLibraries_images_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/images` | read |  |
-| `appAssetLibraries_videos_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/videos` | read | apple\creative-assets |
+| `appAssetLibraries_videos_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/videos` | read | apple/creative-assets |
 | `appAssetLibraries_videos_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/videos` | read |  |
 | **appAssetLibraryImages** (6) | | | | |
 | `appAssetLibraryImages_createInstance` | POST | `/v1/appAssetLibraryImages` | write (dry by default) |  |
@@ -94,8 +94,8 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appAssetLibraryPlacementOrderingRequests** (1) | | | | |
 | `appAssetLibraryPlacementOrderingRequests_createInstance` | POST | `/v1/appAssetLibraryPlacementOrderingRequests` | write (dry by default) |  |
 | **appAssetLibraryPlacements** (3) | | | | |
-| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple\creative-assets |
-| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple\creative-assets |
+| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple/creative-assets |
+| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple/creative-assets |
 | `appAssetLibraryPlacements_getInstance` | GET | `/v1/appAssetLibraryPlacements/{id}` | read |  |
 | **appAssetLibraryRefData** (2) | | | | |
 | `appAssetLibraryRefData_getCollection` | GET | `/v1/appAssetLibraryRefData` | read |  |
@@ -108,9 +108,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appAssetLibraryVideos_placements_getToManyRelationship` | GET | `/v1/appAssetLibraryVideos/{id}/relationships/placements` | read |  |
 | `appAssetLibraryVideos_updateInstance` | PATCH | `/v1/appAssetLibraryVideos/{id}` | write (dry by default) |  |
 | **appAvailabilities** (4) | | | | |
-| `appAvailabilitiesV2_createInstance` | POST | `/v2/appAvailabilities` | write (dry by default) | apple\appinfo |
+| `appAvailabilitiesV2_createInstance` | POST | `/v2/appAvailabilities` | write (dry by default) | apple/appinfo |
 | `appAvailabilitiesV2_getInstance` | GET | `/v2/appAvailabilities/{id}` | read |  |
-| `appAvailabilitiesV2_territoryAvailabilities_getToManyRelated` | GET | `/v2/appAvailabilities/{id}/territoryAvailabilities` | read | apple\appinfo, apple\preorder |
+| `appAvailabilitiesV2_territoryAvailabilities_getToManyRelated` | GET | `/v2/appAvailabilities/{id}/territoryAvailabilities` | read | apple/appinfo, apple/preorder |
 | `appAvailabilitiesV2_territoryAvailabilities_getToManyRelationship` | GET | `/v2/appAvailabilities/{id}/relationships/territoryAvailabilities` | read |  |
 | **appCategories** (6) | | | | |
 | `appCategories_getCollection` | GET | `/v1/appCategories` | read |  |
@@ -164,9 +164,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appCustomProductPageLocalizations** (14) | | | | |
 | `appCustomProductPageLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/appPreviewSets` | read |  |
 | `appCustomProductPageLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appCustomProductPageLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/appScreenshotSets` | read | apple\cpp |
+| `appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/appScreenshotSets` | read | apple/cpp |
 | `appCustomProductPageLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appCustomProductPageLocalizations/{id}/relationships/appScreenshotSets` | read |  |
-| `appCustomProductPageLocalizations_createInstance` | POST | `/v1/appCustomProductPageLocalizations` | write (dry by default) | lib\cpp-events |
+| `appCustomProductPageLocalizations_createInstance` | POST | `/v1/appCustomProductPageLocalizations` | write (dry by default) | lib/cpp-events |
 | `appCustomProductPageLocalizations_deleteInstance` | DELETE | `/v1/appCustomProductPageLocalizations/{id}` | owner only (typed confirm) |  |
 | `appCustomProductPageLocalizations_getInstance` | GET | `/v1/appCustomProductPageLocalizations/{id}` | read |  |
 | `appCustomProductPageLocalizations_placements_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/placements` | read |  |
@@ -175,20 +175,20 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appCustomProductPageLocalizations_searchKeywords_deleteToManyRelationship` | DELETE | `/v1/appCustomProductPageLocalizations/{id}/relationships/searchKeywords` | owner only (typed confirm) |  |
 | `appCustomProductPageLocalizations_searchKeywords_getToManyRelated` | GET | `/v1/appCustomProductPageLocalizations/{id}/searchKeywords` | read |  |
 | `appCustomProductPageLocalizations_searchKeywords_getToManyRelationship` | GET | `/v1/appCustomProductPageLocalizations/{id}/relationships/searchKeywords` | read |  |
-| `appCustomProductPageLocalizations_updateInstance` | PATCH | `/v1/appCustomProductPageLocalizations/{id}` | write (dry by default) | lib\cpp-events |
+| `appCustomProductPageLocalizations_updateInstance` | PATCH | `/v1/appCustomProductPageLocalizations/{id}` | write (dry by default) | lib/cpp-events |
 | **appCustomProductPageVersions** (5) | | | | |
-| `appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated` | GET | `/v1/appCustomProductPageVersions/{id}/appCustomProductPageLocalizations` | read | apple\cpp |
+| `appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelated` | GET | `/v1/appCustomProductPageVersions/{id}/appCustomProductPageLocalizations` | read | apple/cpp |
 | `appCustomProductPageVersions_appCustomProductPageLocalizations_getToManyRelationship` | GET | `/v1/appCustomProductPageVersions/{id}/relationships/appCustomProductPageLocalizations` | read |  |
 | `appCustomProductPageVersions_createInstance` | POST | `/v1/appCustomProductPageVersions` | write (dry by default) |  |
 | `appCustomProductPageVersions_getInstance` | GET | `/v1/appCustomProductPageVersions/{id}` | read |  |
-| `appCustomProductPageVersions_updateInstance` | PATCH | `/v1/appCustomProductPageVersions/{id}` | write (dry by default) | lib\cpp-events |
+| `appCustomProductPageVersions_updateInstance` | PATCH | `/v1/appCustomProductPageVersions/{id}` | write (dry by default) | lib/cpp-events |
 | **appCustomProductPages** (6) | | | | |
-| `appCustomProductPages_appCustomProductPageVersions_getToManyRelated` | GET | `/v1/appCustomProductPages/{id}/appCustomProductPageVersions` | read | apple\cpp |
+| `appCustomProductPages_appCustomProductPageVersions_getToManyRelated` | GET | `/v1/appCustomProductPages/{id}/appCustomProductPageVersions` | read | apple/cpp |
 | `appCustomProductPages_appCustomProductPageVersions_getToManyRelationship` | GET | `/v1/appCustomProductPages/{id}/relationships/appCustomProductPageVersions` | read |  |
-| `appCustomProductPages_createInstance` | POST | `/v1/appCustomProductPages` | write (dry by default) | apple\cpp |
+| `appCustomProductPages_createInstance` | POST | `/v1/appCustomProductPages` | write (dry by default) | apple/cpp |
 | `appCustomProductPages_deleteInstance` | DELETE | `/v1/appCustomProductPages/{id}` | owner only (typed confirm) |  |
-| `appCustomProductPages_getInstance` | GET | `/v1/appCustomProductPages/{id}` | read | apple\cpp |
-| `appCustomProductPages_updateInstance` | PATCH | `/v1/appCustomProductPages/{id}` | write (dry by default) | apple\cpp |
+| `appCustomProductPages_getInstance` | GET | `/v1/appCustomProductPages/{id}` | read | apple/cpp |
+| `appCustomProductPages_updateInstance` | PATCH | `/v1/appCustomProductPages/{id}` | write (dry by default) | apple/cpp |
 | **appEncryptionDeclarationDocuments** (3) | | | | |
 | `appEncryptionDeclarationDocuments_createInstance` | POST | `/v1/appEncryptionDeclarationDocuments` | write (dry by default) |  |
 | `appEncryptionDeclarationDocuments_getInstance` | GET | `/v1/appEncryptionDeclarationDocuments/{id}` | read |  |
@@ -200,47 +200,47 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appEncryptionDeclarations_app_getToOneRelationship` | GET | `/v1/appEncryptionDeclarations/{id}/relationships/app` | read |  |
 | `appEncryptionDeclarations_builds_createToManyRelationship` | POST | `/v1/appEncryptionDeclarations/{id}/relationships/builds` | write (dry by default) |  |
 | `appEncryptionDeclarations_createInstance` | POST | `/v1/appEncryptionDeclarations` | write (dry by default) |  |
-| `appEncryptionDeclarations_getCollection` | GET | `/v1/appEncryptionDeclarations` | read | apple\encryption |
+| `appEncryptionDeclarations_getCollection` | GET | `/v1/appEncryptionDeclarations` | read | apple/encryption |
 | `appEncryptionDeclarations_getInstance` | GET | `/v1/appEncryptionDeclarations/{id}` | read |  |
 | **appEventLocalizations** (10) | | | | |
-| `appEventLocalizations_appEventScreenshots_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/appEventScreenshots` | read | apple\events |
+| `appEventLocalizations_appEventScreenshots_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/appEventScreenshots` | read | apple/events |
 | `appEventLocalizations_appEventScreenshots_getToManyRelationship` | GET | `/v1/appEventLocalizations/{id}/relationships/appEventScreenshots` | read |  |
 | `appEventLocalizations_appEventVideoClips_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/appEventVideoClips` | read |  |
 | `appEventLocalizations_appEventVideoClips_getToManyRelationship` | GET | `/v1/appEventLocalizations/{id}/relationships/appEventVideoClips` | read |  |
-| `appEventLocalizations_createInstance` | POST | `/v1/appEventLocalizations` | write (dry by default) | lib\cpp-events |
+| `appEventLocalizations_createInstance` | POST | `/v1/appEventLocalizations` | write (dry by default) | lib/cpp-events |
 | `appEventLocalizations_deleteInstance` | DELETE | `/v1/appEventLocalizations/{id}` | owner only (typed confirm) |  |
 | `appEventLocalizations_getInstance` | GET | `/v1/appEventLocalizations/{id}` | read |  |
 | `appEventLocalizations_placements_getToManyRelated` | GET | `/v1/appEventLocalizations/{id}/placements` | read |  |
 | `appEventLocalizations_placements_getToManyRelationship` | GET | `/v1/appEventLocalizations/{id}/relationships/placements` | read |  |
-| `appEventLocalizations_updateInstance` | PATCH | `/v1/appEventLocalizations/{id}` | write (dry by default) | lib\cpp-events |
+| `appEventLocalizations_updateInstance` | PATCH | `/v1/appEventLocalizations/{id}` | write (dry by default) | lib/cpp-events |
 | **appEventScreenshots** (4) | | | | |
-| `appEventScreenshots_createInstance` | POST | `/v1/appEventScreenshots` | write (dry by default) | apple\events |
-| `appEventScreenshots_deleteInstance` | DELETE | `/v1/appEventScreenshots/{id}` | owner only (typed confirm) | apple\events |
+| `appEventScreenshots_createInstance` | POST | `/v1/appEventScreenshots` | write (dry by default) | apple/events |
+| `appEventScreenshots_deleteInstance` | DELETE | `/v1/appEventScreenshots/{id}` | owner only (typed confirm) | apple/events |
 | `appEventScreenshots_getInstance` | GET | `/v1/appEventScreenshots/{id}` | read |  |
-| `appEventScreenshots_updateInstance` | PATCH | `/v1/appEventScreenshots/{id}` | write (dry by default) | apple\events |
+| `appEventScreenshots_updateInstance` | PATCH | `/v1/appEventScreenshots/{id}` | write (dry by default) | apple/events |
 | **appEventVideoClips** (4) | | | | |
 | `appEventVideoClips_createInstance` | POST | `/v1/appEventVideoClips` | write (dry by default) |  |
 | `appEventVideoClips_deleteInstance` | DELETE | `/v1/appEventVideoClips/{id}` | owner only (typed confirm) |  |
 | `appEventVideoClips_getInstance` | GET | `/v1/appEventVideoClips/{id}` | read |  |
 | `appEventVideoClips_updateInstance` | PATCH | `/v1/appEventVideoClips/{id}` | write (dry by default) |  |
 | **appEvents** (6) | | | | |
-| `appEvents_createInstance` | POST | `/v1/appEvents` | write (dry by default) | apple\events |
+| `appEvents_createInstance` | POST | `/v1/appEvents` | write (dry by default) | apple/events |
 | `appEvents_deleteInstance` | DELETE | `/v1/appEvents/{id}` | owner only (typed confirm) |  |
-| `appEvents_getInstance` | GET | `/v1/appEvents/{id}` | read | apple\events |
-| `appEvents_localizations_getToManyRelated` | GET | `/v1/appEvents/{id}/localizations` | read | apple\events |
+| `appEvents_getInstance` | GET | `/v1/appEvents/{id}` | read | apple/events |
+| `appEvents_localizations_getToManyRelated` | GET | `/v1/appEvents/{id}/localizations` | read | apple/events |
 | `appEvents_localizations_getToManyRelationship` | GET | `/v1/appEvents/{id}/relationships/localizations` | read |  |
-| `appEvents_updateInstance` | PATCH | `/v1/appEvents/{id}` | write (dry by default) | lib\cpp-events |
+| `appEvents_updateInstance` | PATCH | `/v1/appEvents/{id}` | write (dry by default) | lib/cpp-events |
 | **appInfoLocalizations** (4) | | | | |
 | `appInfoLocalizations_createInstance` | POST | `/v1/appInfoLocalizations` | write (dry by default) | listing-store |
 | `appInfoLocalizations_deleteInstance` | DELETE | `/v1/appInfoLocalizations/{id}` | owner only (typed confirm) |  |
 | `appInfoLocalizations_getInstance` | GET | `/v1/appInfoLocalizations/{id}` | read |  |
 | `appInfoLocalizations_updateInstance` | PATCH | `/v1/appInfoLocalizations/{id}` | write (dry by default) | listing-store |
 | **appInfos** (20) | | | | |
-| `appInfos_ageRatingDeclaration_getToOneRelated` | GET | `/v1/appInfos/{id}/ageRatingDeclaration` | read | apple\appinfo, console\verify, validate |
+| `appInfos_ageRatingDeclaration_getToOneRelated` | GET | `/v1/appInfos/{id}/ageRatingDeclaration` | read | apple/appinfo, console/verify, validate |
 | `appInfos_ageRatingDeclaration_getToOneRelationship` | GET | `/v1/appInfos/{id}/relationships/ageRatingDeclaration` | read |  |
-| `appInfos_appInfoLocalizations_getToManyRelated` | GET | `/v1/appInfos/{id}/appInfoLocalizations` | read | apple\listing, listing-store, onboard, validate |
+| `appInfos_appInfoLocalizations_getToManyRelated` | GET | `/v1/appInfos/{id}/appInfoLocalizations` | read | apple/listing, listing-store, onboard, validate |
 | `appInfos_appInfoLocalizations_getToManyRelationship` | GET | `/v1/appInfos/{id}/relationships/appInfoLocalizations` | read |  |
-| `appInfos_getInstance` | GET | `/v1/appInfos/{id}` | read | apple\appinfo |
+| `appInfos_getInstance` | GET | `/v1/appInfos/{id}` | read | apple/appinfo |
 | `appInfos_primaryCategory_getToOneRelated` | GET | `/v1/appInfos/{id}/primaryCategory` | read |  |
 | `appInfos_primaryCategory_getToOneRelationship` | GET | `/v1/appInfos/{id}/relationships/primaryCategory` | read |  |
 | `appInfos_primarySubcategoryOne_getToOneRelated` | GET | `/v1/appInfos/{id}/primarySubcategoryOne` | read |  |
@@ -255,19 +255,19 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appInfos_secondarySubcategoryTwo_getToOneRelationship` | GET | `/v1/appInfos/{id}/relationships/secondarySubcategoryTwo` | read |  |
 | `appInfos_territoryAgeRatings_getToManyRelated` | GET | `/v1/appInfos/{id}/territoryAgeRatings` | read |  |
 | `appInfos_territoryAgeRatings_getToManyRelationship` | GET | `/v1/appInfos/{id}/relationships/territoryAgeRatings` | read |  |
-| `appInfos_updateInstance` | PATCH | `/v1/appInfos/{id}` | write (dry by default) | apple\appinfo |
+| `appInfos_updateInstance` | PATCH | `/v1/appInfos/{id}` | write (dry by default) | apple/appinfo |
 | **appPreviewSets** (6) | | | | |
-| `appPreviewSets_appPreviews_getToManyRelated` | GET | `/v1/appPreviewSets/{id}/appPreviews` | read | apple\previews, art |
+| `appPreviewSets_appPreviews_getToManyRelated` | GET | `/v1/appPreviewSets/{id}/appPreviews` | read | apple/previews, art |
 | `appPreviewSets_appPreviews_getToManyRelationship` | GET | `/v1/appPreviewSets/{id}/relationships/appPreviews` | read |  |
 | `appPreviewSets_appPreviews_replaceToManyRelationship` | PATCH | `/v1/appPreviewSets/{id}/relationships/appPreviews` | write (dry by default) |  |
-| `appPreviewSets_createInstance` | POST | `/v1/appPreviewSets` | write (dry by default) | apple\previews |
+| `appPreviewSets_createInstance` | POST | `/v1/appPreviewSets` | write (dry by default) | apple/previews |
 | `appPreviewSets_deleteInstance` | DELETE | `/v1/appPreviewSets/{id}` | owner only (typed confirm) |  |
 | `appPreviewSets_getInstance` | GET | `/v1/appPreviewSets/{id}` | read |  |
 | **appPreviews** (4) | | | | |
 | `appPreviews_createInstance` | POST | `/v1/appPreviews` | write (dry by default) |  |
 | `appPreviews_deleteInstance` | DELETE | `/v1/appPreviews/{id}` | owner only (typed confirm) |  |
 | `appPreviews_getInstance` | GET | `/v1/appPreviews/{id}` | read |  |
-| `appPreviews_updateInstance` | PATCH | `/v1/appPreviews/{id}` | write (dry by default) | apple\previews |
+| `appPreviews_updateInstance` | PATCH | `/v1/appPreviews/{id}` | write (dry by default) | apple/previews |
 | **appPricePoints** (3) | | | | |
 | `appPricePointsV3_equalizations_getToManyRelated` | GET | `/v3/appPricePoints/{id}/equalizations` | read |  |
 | `appPricePointsV3_equalizations_getToManyRelationship` | GET | `/v3/appPricePoints/{id}/relationships/equalizations` | read |  |
@@ -277,22 +277,22 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appPriceSchedules_automaticPrices_getToManyRelationship` | GET | `/v1/appPriceSchedules/{id}/relationships/automaticPrices` | read |  |
 | `appPriceSchedules_baseTerritory_getToOneRelated` | GET | `/v1/appPriceSchedules/{id}/baseTerritory` | read |  |
 | `appPriceSchedules_baseTerritory_getToOneRelationship` | GET | `/v1/appPriceSchedules/{id}/relationships/baseTerritory` | read |  |
-| `appPriceSchedules_createInstance` | POST | `/v1/appPriceSchedules` | owner only (typed confirm) | apple\appinfo |
+| `appPriceSchedules_createInstance` | POST | `/v1/appPriceSchedules` | owner only (typed confirm) | apple/appinfo |
 | `appPriceSchedules_getInstance` | GET | `/v1/appPriceSchedules/{id}` | read |  |
-| `appPriceSchedules_manualPrices_getToManyRelated` | GET | `/v1/appPriceSchedules/{id}/manualPrices` | read | apple\appinfo |
+| `appPriceSchedules_manualPrices_getToManyRelated` | GET | `/v1/appPriceSchedules/{id}/manualPrices` | read | apple/appinfo |
 | `appPriceSchedules_manualPrices_getToManyRelationship` | GET | `/v1/appPriceSchedules/{id}/relationships/manualPrices` | read |  |
 | **appScreenshotSets** (6) | | | | |
-| `appScreenshotSets_appScreenshots_getToManyRelated` | GET | `/v1/appScreenshotSets/{id}/appScreenshots` | read | apple\ppo, apple\screenshot-health, apple\screenshots, art, validate |
+| `appScreenshotSets_appScreenshots_getToManyRelated` | GET | `/v1/appScreenshotSets/{id}/appScreenshots` | read | apple/ppo, apple/screenshot-health, apple/screenshots, art, validate |
 | `appScreenshotSets_appScreenshots_getToManyRelationship` | GET | `/v1/appScreenshotSets/{id}/relationships/appScreenshots` | read |  |
-| `appScreenshotSets_appScreenshots_replaceToManyRelationship` | PATCH | `/v1/appScreenshotSets/{id}/relationships/appScreenshots` | write (dry by default) | apple\screenshot-health |
-| `appScreenshotSets_createInstance` | POST | `/v1/appScreenshotSets` | write (dry by default) | apple\screenshots |
+| `appScreenshotSets_appScreenshots_replaceToManyRelationship` | PATCH | `/v1/appScreenshotSets/{id}/relationships/appScreenshots` | write (dry by default) | apple/screenshot-health |
+| `appScreenshotSets_createInstance` | POST | `/v1/appScreenshotSets` | write (dry by default) | apple/screenshots |
 | `appScreenshotSets_deleteInstance` | DELETE | `/v1/appScreenshotSets/{id}` | owner only (typed confirm) |  |
 | `appScreenshotSets_getInstance` | GET | `/v1/appScreenshotSets/{id}` | read |  |
 | **appScreenshots** (4) | | | | |
-| `appScreenshots_createInstance` | POST | `/v1/appScreenshots` | write (dry by default) | apple\screenshot-health |
-| `appScreenshots_deleteInstance` | DELETE | `/v1/appScreenshots/{id}` | owner only (typed confirm) | apple\screenshot-health |
+| `appScreenshots_createInstance` | POST | `/v1/appScreenshots` | write (dry by default) | apple/screenshot-health |
+| `appScreenshots_deleteInstance` | DELETE | `/v1/appScreenshots/{id}` | owner only (typed confirm) | apple/screenshot-health |
 | `appScreenshots_getInstance` | GET | `/v1/appScreenshots/{id}` | read |  |
-| `appScreenshots_updateInstance` | PATCH | `/v1/appScreenshots/{id}` | write (dry by default) | apple\screenshot-health |
+| `appScreenshots_updateInstance` | PATCH | `/v1/appScreenshots/{id}` | write (dry by default) | apple/screenshot-health |
 | **appStoreReviewAttachments** (4) | | | | |
 | `appStoreReviewAttachments_createInstance` | POST | `/v1/appStoreReviewAttachments` | write (dry by default) |  |
 | `appStoreReviewAttachments_deleteInstance` | DELETE | `/v1/appStoreReviewAttachments/{id}` | owner only (typed confirm) |  |
@@ -301,33 +301,33 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appStoreReviewDetails** (5) | | | | |
 | `appStoreReviewDetails_appStoreReviewAttachments_getToManyRelated` | GET | `/v1/appStoreReviewDetails/{id}/appStoreReviewAttachments` | read |  |
 | `appStoreReviewDetails_appStoreReviewAttachments_getToManyRelationship` | GET | `/v1/appStoreReviewDetails/{id}/relationships/appStoreReviewAttachments` | read |  |
-| `appStoreReviewDetails_createInstance` | POST | `/v1/appStoreReviewDetails` | write (dry by default) | apple\review-details |
+| `appStoreReviewDetails_createInstance` | POST | `/v1/appStoreReviewDetails` | write (dry by default) | apple/review-details |
 | `appStoreReviewDetails_getInstance` | GET | `/v1/appStoreReviewDetails/{id}` | read |  |
-| `appStoreReviewDetails_updateInstance` | PATCH | `/v1/appStoreReviewDetails/{id}` | write (dry by default) | apple\review-details |
+| `appStoreReviewDetails_updateInstance` | PATCH | `/v1/appStoreReviewDetails/{id}` | write (dry by default) | apple/review-details |
 | **appStoreVersionExperimentTreatmentLocalizations** (9) | | | | |
 | `appStoreVersionExperimentTreatmentLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/appPreviewSets` | read |  |
 | `appStoreVersionExperimentTreatmentLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/appScreenshotSets` | read | apple\ppo |
+| `appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/appScreenshotSets` | read | apple/ppo |
 | `appStoreVersionExperimentTreatmentLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/relationships/appScreenshotSets` | read |  |
-| `appStoreVersionExperimentTreatmentLocalizations_createInstance` | POST | `/v1/appStoreVersionExperimentTreatmentLocalizations` | write (dry by default) | lib\ppo |
+| `appStoreVersionExperimentTreatmentLocalizations_createInstance` | POST | `/v1/appStoreVersionExperimentTreatmentLocalizations` | write (dry by default) | lib/ppo |
 | `appStoreVersionExperimentTreatmentLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}` | owner only (typed confirm) |  |
 | `appStoreVersionExperimentTreatmentLocalizations_getInstance` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}` | read |  |
 | `appStoreVersionExperimentTreatmentLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/placements` | read |  |
 | `appStoreVersionExperimentTreatmentLocalizations_placements_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatmentLocalizations/{id}/relationships/placements` | read |  |
 | **appStoreVersionExperimentTreatments** (6) | | | | |
-| `appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatments/{id}/appStoreVersionExperimentTreatmentLocalizations` | read | apple\ppo |
+| `appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelated` | GET | `/v1/appStoreVersionExperimentTreatments/{id}/appStoreVersionExperimentTreatmentLocalizations` | read | apple/ppo |
 | `appStoreVersionExperimentTreatments_appStoreVersionExperimentTreatmentLocalizations_getToManyRelationship` | GET | `/v1/appStoreVersionExperimentTreatments/{id}/relationships/appStoreVersionExperimentTreatmentLocalizations` | read |  |
-| `appStoreVersionExperimentTreatments_createInstance` | POST | `/v1/appStoreVersionExperimentTreatments` | write (dry by default) | lib\ppo |
+| `appStoreVersionExperimentTreatments_createInstance` | POST | `/v1/appStoreVersionExperimentTreatments` | write (dry by default) | lib/ppo |
 | `appStoreVersionExperimentTreatments_deleteInstance` | DELETE | `/v1/appStoreVersionExperimentTreatments/{id}` | owner only (typed confirm) |  |
-| `appStoreVersionExperimentTreatments_getInstance` | GET | `/v1/appStoreVersionExperimentTreatments/{id}` | read | apple\ppo |
+| `appStoreVersionExperimentTreatments_getInstance` | GET | `/v1/appStoreVersionExperimentTreatments/{id}` | read | apple/ppo |
 | `appStoreVersionExperimentTreatments_updateInstance` | PATCH | `/v1/appStoreVersionExperimentTreatments/{id}` | write (dry by default) |  |
 | **appStoreVersionExperiments** (12) | | | | |
-| `appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated` | GET | `/v2/appStoreVersionExperiments/{id}/appStoreVersionExperimentTreatments` | read | apple\ppo |
+| `appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelated` | GET | `/v2/appStoreVersionExperiments/{id}/appStoreVersionExperimentTreatments` | read | apple/ppo |
 | `appStoreVersionExperimentsV2_appStoreVersionExperimentTreatments_getToManyRelationship` | GET | `/v2/appStoreVersionExperiments/{id}/relationships/appStoreVersionExperimentTreatments` | read |  |
-| `appStoreVersionExperimentsV2_createInstance` | POST | `/v2/appStoreVersionExperiments` | write (dry by default) | lib\ppo |
+| `appStoreVersionExperimentsV2_createInstance` | POST | `/v2/appStoreVersionExperiments` | write (dry by default) | lib/ppo |
 | `appStoreVersionExperimentsV2_deleteInstance` | DELETE | `/v2/appStoreVersionExperiments/{id}` | owner only (typed confirm) |  |
-| `appStoreVersionExperimentsV2_getInstance` | GET | `/v2/appStoreVersionExperiments/{id}` | read | apple\ppo |
-| `appStoreVersionExperimentsV2_updateInstance` | PATCH | `/v2/appStoreVersionExperiments/{id}` | owner only (typed confirm) | lib\ppo |
+| `appStoreVersionExperimentsV2_getInstance` | GET | `/v2/appStoreVersionExperiments/{id}` | read | apple/ppo |
+| `appStoreVersionExperimentsV2_updateInstance` | PATCH | `/v2/appStoreVersionExperiments/{id}` | owner only (typed confirm) | lib/ppo |
 | `appStoreVersionExperiments_appStoreVersionExperimentTreatments_getToManyRelated` | GET | `/v1/appStoreVersionExperiments/{id}/appStoreVersionExperimentTreatments` | read |  |
 | `appStoreVersionExperiments_appStoreVersionExperimentTreatments_getToManyRelationship` | GET | `/v1/appStoreVersionExperiments/{id}/relationships/appStoreVersionExperimentTreatments` | read |  |
 | `appStoreVersionExperiments_createInstance` | POST | `/v1/appStoreVersionExperiments` | write (dry by default) |  |
@@ -335,14 +335,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersionExperiments_getInstance` | GET | `/v1/appStoreVersionExperiments/{id}` | read |  |
 | `appStoreVersionExperiments_updateInstance` | PATCH | `/v1/appStoreVersionExperiments/{id}` | owner only (typed confirm) |  |
 | **appStoreVersionLocalizations** (14) | | | | |
-| `appStoreVersionLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appPreviewSets` | read | apple\previews, art |
+| `appStoreVersionLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appPreviewSets` | read | apple/previews, art |
 | `appStoreVersionLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple\screenshot-health, apple\screenshots, art, validate |
+| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple/screenshot-health, apple/screenshots, art, validate |
 | `appStoreVersionLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appScreenshotSets` | read |  |
 | `appStoreVersionLocalizations_createInstance` | POST | `/v1/appStoreVersionLocalizations` | write (dry by default) | listing-store |
 | `appStoreVersionLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionLocalizations/{id}` | owner only (typed confirm) |  |
 | `appStoreVersionLocalizations_getInstance` | GET | `/v1/appStoreVersionLocalizations/{id}` | read |  |
-| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple\creative-assets |
+| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple/creative-assets |
 | `appStoreVersionLocalizations_placements_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/placements` | read |  |
 | `appStoreVersionLocalizations_searchKeywords_createToManyRelationship` | POST | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | write (dry by default) |  |
 | `appStoreVersionLocalizations_searchKeywords_deleteToManyRelationship` | DELETE | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | owner only (typed confirm) |  |
@@ -350,13 +350,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersionLocalizations_searchKeywords_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | read |  |
 | `appStoreVersionLocalizations_updateInstance` | PATCH | `/v1/appStoreVersionLocalizations/{id}` | write (dry by default) | listing-store |
 | **appStoreVersionPhasedReleases** (3) | | | | |
-| `appStoreVersionPhasedReleases_createInstance` | POST | `/v1/appStoreVersionPhasedReleases` | write (dry by default) | apple\release |
+| `appStoreVersionPhasedReleases_createInstance` | POST | `/v1/appStoreVersionPhasedReleases` | write (dry by default) | apple/release |
 | `appStoreVersionPhasedReleases_deleteInstance` | DELETE | `/v1/appStoreVersionPhasedReleases/{id}` | owner only (typed confirm) |  |
-| `appStoreVersionPhasedReleases_updateInstance` | PATCH | `/v1/appStoreVersionPhasedReleases/{id}` | owner only (typed confirm) | apple\release |
+| `appStoreVersionPhasedReleases_updateInstance` | PATCH | `/v1/appStoreVersionPhasedReleases/{id}` | owner only (typed confirm) | apple/release |
 | **appStoreVersionPromotions** (1) | | | | |
 | `appStoreVersionPromotions_createInstance` | POST | `/v1/appStoreVersionPromotions` | write (dry by default) |  |
 | **appStoreVersionReleaseRequests** (1) | | | | |
-| `appStoreVersionReleaseRequests_createInstance` | POST | `/v1/appStoreVersionReleaseRequests` | owner only (typed confirm) | apple\release |
+| `appStoreVersionReleaseRequests_createInstance` | POST | `/v1/appStoreVersionReleaseRequests` | owner only (typed confirm) | apple/release |
 | **appStoreVersionSubmissions** (1) | | | | |
 | `appStoreVersionSubmissions_deleteInstance` | DELETE | `/v1/appStoreVersionSubmissions/{id}` | owner only (typed confirm) |  |
 | **appStoreVersions** (30) | | | | |
@@ -365,31 +365,31 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersions_appClipDefaultExperience_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appClipDefaultExperience` | read |  |
 | `appStoreVersions_appClipDefaultExperience_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appClipDefaultExperience` | read |  |
 | `appStoreVersions_appClipDefaultExperience_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/appClipDefaultExperience` | write (dry by default) |  |
-| `appStoreVersions_appStoreReviewDetail_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreReviewDetail` | read | apple\review-details, onboard, validate |
+| `appStoreVersions_appStoreReviewDetail_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreReviewDetail` | read | apple/review-details, onboard, validate |
 | `appStoreVersions_appStoreReviewDetail_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreReviewDetail` | read |  |
 | `appStoreVersions_appStoreVersionExperimentsV2_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionExperimentsV2` | read |  |
 | `appStoreVersions_appStoreVersionExperimentsV2_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperimentsV2` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionExperiments` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperiments` | read |  |
-| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple\creative-assets, apple\listing, apple\previews, apple\screenshot-health, apple\screenshots, art, listing-store, onboard, validate |
+| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple/creative-assets, apple/listing, apple/previews, apple/screenshot-health, apple/screenshots, art, listing-store, onboard, validate |
 | `appStoreVersions_appStoreVersionLocalizations_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionLocalizations` | read |  |
-| `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionPhasedRelease` | read | apple\release, apple\status |
+| `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionPhasedRelease` | read | apple/release, apple/status |
 | `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionPhasedRelease` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionSubmission` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionSubmission` | read |  |
-| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple\listing, apple\resubmit, validate |
+| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple/listing, apple/resubmit, validate |
 | `appStoreVersions_build_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/build` | read |  |
-| `appStoreVersions_build_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/build` | write (dry by default) | apple\listing, apple\resubmit |
-| `appStoreVersions_createInstance` | POST | `/v1/appStoreVersions` | write (dry by default) | apple\listing |
+| `appStoreVersions_build_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/build` | write (dry by default) | apple/listing, apple/resubmit |
+| `appStoreVersions_createInstance` | POST | `/v1/appStoreVersions` | write (dry by default) | apple/listing |
 | `appStoreVersions_customerReviews_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/customerReviews` | read |  |
 | `appStoreVersions_customerReviews_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/customerReviews` | read |  |
 | `appStoreVersions_deleteInstance` | DELETE | `/v1/appStoreVersions/{id}` | owner only (typed confirm) |  |
-| `appStoreVersions_gameCenterAppVersion_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/gameCenterAppVersion` | read | apple\game-center |
+| `appStoreVersions_gameCenterAppVersion_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/gameCenterAppVersion` | read | apple/game-center |
 | `appStoreVersions_gameCenterAppVersion_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/gameCenterAppVersion` | read |  |
-| `appStoreVersions_getInstance` | GET | `/v1/appStoreVersions/{id}` | read | apple\listing |
+| `appStoreVersions_getInstance` | GET | `/v1/appStoreVersions/{id}` | read | apple/listing |
 | `appStoreVersions_routingAppCoverage_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/routingAppCoverage` | read |  |
 | `appStoreVersions_routingAppCoverage_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/routingAppCoverage` | read |  |
-| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple\listing |
+| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple/listing |
 | **appTags** (3) | | | | |
 | `appTags_territories_getToManyRelated` | GET | `/v1/appTags/{id}/territories` | read |  |
 | `appTags_territories_getToManyRelationship` | GET | `/v1/appTags/{id}/relationships/territories` | read |  |
@@ -403,47 +403,47 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_analyticsReportRequests_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/analyticsReportRequests` | read |  |
 | `apps_androidToIosAppMappingDetails_getToManyRelated` | GET | `/v1/apps/{id}/androidToIosAppMappingDetails` | read |  |
 | `apps_androidToIosAppMappingDetails_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/androidToIosAppMappingDetails` | read |  |
-| `apps_appAvailabilityV2_getToOneRelated` | GET | `/v1/apps/{id}/appAvailabilityV2` | read | apple\appinfo, apple\preorder, validate |
+| `apps_appAvailabilityV2_getToOneRelated` | GET | `/v1/apps/{id}/appAvailabilityV2` | read | apple/appinfo, apple/preorder, validate |
 | `apps_appAvailabilityV2_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/appAvailabilityV2` | read |  |
 | `apps_appClips_getToManyRelated` | GET | `/v1/apps/{id}/appClips` | read |  |
 | `apps_appClips_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appClips` | read |  |
-| `apps_appCustomProductPages_getToManyRelated` | GET | `/v1/apps/{id}/appCustomProductPages` | read | apple\cpp |
+| `apps_appCustomProductPages_getToManyRelated` | GET | `/v1/apps/{id}/appCustomProductPages` | read | apple/cpp |
 | `apps_appCustomProductPages_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appCustomProductPages` | read |  |
 | `apps_appEncryptionDeclarations_getToManyRelated` | GET | `/v1/apps/{id}/appEncryptionDeclarations` | read |  |
 | `apps_appEncryptionDeclarations_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appEncryptionDeclarations` | read |  |
-| `apps_appEvents_getToManyRelated` | GET | `/v1/apps/{id}/appEvents` | read | apple\events |
+| `apps_appEvents_getToManyRelated` | GET | `/v1/apps/{id}/appEvents` | read | apple/events |
 | `apps_appEvents_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appEvents` | read |  |
-| `apps_appInfos_getToManyRelated` | GET | `/v1/apps/{id}/appInfos` | read | apple\asc, apple\listing |
+| `apps_appInfos_getToManyRelated` | GET | `/v1/apps/{id}/appInfos` | read | apple/asc, apple/listing |
 | `apps_appInfos_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appInfos` | read |  |
-| `apps_appPricePoints_getToManyRelated` | GET | `/v1/apps/{id}/appPricePoints` | read | apple\appinfo |
+| `apps_appPricePoints_getToManyRelated` | GET | `/v1/apps/{id}/appPricePoints` | read | apple/appinfo |
 | `apps_appPricePoints_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appPricePoints` | read |  |
-| `apps_appPriceSchedule_getToOneRelated` | GET | `/v1/apps/{id}/appPriceSchedule` | read | apple\appinfo, validate |
+| `apps_appPriceSchedule_getToOneRelated` | GET | `/v1/apps/{id}/appPriceSchedule` | read | apple/appinfo, validate |
 | `apps_appPriceSchedule_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/appPriceSchedule` | read |  |
-| `apps_appStoreVersionExperimentsV2_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersionExperimentsV2` | read | apple\ppo |
+| `apps_appStoreVersionExperimentsV2_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersionExperimentsV2` | read | apple/ppo |
 | `apps_appStoreVersionExperimentsV2_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appStoreVersionExperimentsV2` | read |  |
-| `apps_appStoreVersions_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersions` | read | apple\asc, apple\creative-assets, apple\iap-submit, apple\platform, apple\review-details, apple\status, art, lib\store-apps, listing-store, onboard |
+| `apps_appStoreVersions_getToManyRelated` | GET | `/v1/apps/{id}/appStoreVersions` | read | apple/asc, apple/creative-assets, apple/iap-submit, apple/platform, apple/review-details, apple/status, art, lib/store-apps, listing-store, onboard |
 | `apps_appStoreVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appStoreVersions` | read |  |
 | `apps_appTags_getToManyRelated` | GET | `/v1/apps/{id}/appTags` | read |  |
 | `apps_appTags_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appTags` | read |  |
-| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple\creative-assets |
+| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple/creative-assets |
 | `apps_assetLibrary_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/assetLibrary` | read |  |
 | `apps_backgroundAssets_getToManyRelated` | GET | `/v1/apps/{id}/backgroundAssets` | read |  |
 | `apps_backgroundAssets_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/backgroundAssets` | read |  |
-| `apps_betaAppLocalizations_getToManyRelated` | GET | `/v1/apps/{id}/betaAppLocalizations` | read | apple\testflight |
+| `apps_betaAppLocalizations_getToManyRelated` | GET | `/v1/apps/{id}/betaAppLocalizations` | read | apple/testflight |
 | `apps_betaAppLocalizations_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaAppLocalizations` | read |  |
-| `apps_betaAppReviewDetail_getToOneRelated` | GET | `/v1/apps/{id}/betaAppReviewDetail` | read | apple\testflight |
+| `apps_betaAppReviewDetail_getToOneRelated` | GET | `/v1/apps/{id}/betaAppReviewDetail` | read | apple/testflight |
 | `apps_betaAppReviewDetail_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/betaAppReviewDetail` | read |  |
 | `apps_betaFeedbackCrashSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/betaFeedbackCrashSubmissions` | read | health |
 | `apps_betaFeedbackCrashSubmissions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaFeedbackCrashSubmissions` | read |  |
 | `apps_betaFeedbackScreenshotSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/betaFeedbackScreenshotSubmissions` | read |  |
 | `apps_betaFeedbackScreenshotSubmissions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaFeedbackScreenshotSubmissions` | read |  |
-| `apps_betaGroups_getToManyRelated` | GET | `/v1/apps/{id}/betaGroups` | read | apple\testflight |
+| `apps_betaGroups_getToManyRelated` | GET | `/v1/apps/{id}/betaGroups` | read | apple/testflight |
 | `apps_betaGroups_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/betaGroups` | read |  |
 | `apps_betaLicenseAgreement_getToOneRelated` | GET | `/v1/apps/{id}/betaLicenseAgreement` | read |  |
 | `apps_betaLicenseAgreement_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/betaLicenseAgreement` | read |  |
 | `apps_betaTesterUsages_getMetrics` | GET | `/v1/apps/{id}/metrics/betaTesterUsages` | read |  |
 | `apps_betaTesters_deleteToManyRelationship` | DELETE | `/v1/apps/{id}/relationships/betaTesters` | owner only (typed confirm) |  |
-| `apps_buildUploads_getToManyRelated` | GET | `/v1/apps/{id}/buildUploads` | read | apple\upload |
+| `apps_buildUploads_getToManyRelated` | GET | `/v1/apps/{id}/buildUploads` | read | apple/upload |
 | `apps_buildUploads_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/buildUploads` | read |  |
 | `apps_builds_getToManyRelated` | GET | `/v1/apps/{id}/builds` | read |  |
 | `apps_builds_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/builds` | read |  |
@@ -454,13 +454,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_customerReviews_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/customerReviews` | read |  |
 | `apps_endUserLicenseAgreement_getToOneRelated` | GET | `/v1/apps/{id}/endUserLicenseAgreement` | read |  |
 | `apps_endUserLicenseAgreement_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/endUserLicenseAgreement` | read |  |
-| `apps_gameCenterDetail_getToOneRelated` | GET | `/v1/apps/{id}/gameCenterDetail` | read | apple\game-center |
+| `apps_gameCenterDetail_getToOneRelated` | GET | `/v1/apps/{id}/gameCenterDetail` | read | apple/game-center |
 | `apps_gameCenterDetail_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/gameCenterDetail` | read |  |
 | `apps_gameCenterEnabledVersions_getToManyRelated` | GET | `/v1/apps/{id}/gameCenterEnabledVersions` | read |  |
 | `apps_gameCenterEnabledVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/gameCenterEnabledVersions` | read |  |
-| `apps_getCollection` | GET | `/v1/apps` | read | apple\asc, apple\bundle, apps, console\app-id, console\verify, lib\store-apps |
-| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple\appinfo, apple\status, apps, onboard, watch |
-| `apps_inAppPurchasesV2_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchasesV2` | read | apple\first-products, apple\iap, apple\iap-review, apple\iap-submit, apple\offer-codes, apple\promoted, apple\status, catalog, prices, validate |
+| `apps_getCollection` | GET | `/v1/apps` | read | apple/asc, apple/bundle, apps, console/app-id, console/verify, lib/store-apps |
+| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple/appinfo, apple/status, apps, onboard, watch |
+| `apps_inAppPurchasesV2_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchasesV2` | read | apple/first-products, apple/iap, apple/iap-review, apple/iap-submit, apple/offer-codes, apple/promoted, apple/status, catalog, prices, validate |
 | `apps_inAppPurchasesV2_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/inAppPurchasesV2` | read |  |
 | `apps_inAppPurchases_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchases` | read |  |
 | `apps_inAppPurchases_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/inAppPurchases` | read |  |
@@ -470,18 +470,18 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_performanceOverviews_getToManyRelated` | GET | `/v1/apps/{id}/performanceOverviews` | read |  |
 | `apps_preReleaseVersions_getToManyRelated` | GET | `/v1/apps/{id}/preReleaseVersions` | read |  |
 | `apps_preReleaseVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/preReleaseVersions` | read |  |
-| `apps_promotedPurchases_getToManyRelated` | GET | `/v1/apps/{id}/promotedPurchases` | read | apple\promoted |
+| `apps_promotedPurchases_getToManyRelated` | GET | `/v1/apps/{id}/promotedPurchases` | read | apple/promoted |
 | `apps_promotedPurchases_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/promotedPurchases` | read |  |
-| `apps_promotedPurchases_replaceToManyRelationship` | PATCH | `/v1/apps/{id}/relationships/promotedPurchases` | write (dry by default) | lib\offers |
-| `apps_reviewSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/reviewSubmissions` | read | apple\resubmit, apple\submission |
+| `apps_promotedPurchases_replaceToManyRelationship` | PATCH | `/v1/apps/{id}/relationships/promotedPurchases` | write (dry by default) | lib/offers |
+| `apps_reviewSubmissions_getToManyRelated` | GET | `/v1/apps/{id}/reviewSubmissions` | read | apple/resubmit, apple/submission |
 | `apps_reviewSubmissions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/reviewSubmissions` | read |  |
 | `apps_searchKeywords_getToManyRelated` | GET | `/v1/apps/{id}/searchKeywords` | read |  |
 | `apps_searchKeywords_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/searchKeywords` | read |  |
 | `apps_subscriptionGracePeriod_getToOneRelated` | GET | `/v1/apps/{id}/subscriptionGracePeriod` | read |  |
 | `apps_subscriptionGracePeriod_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/subscriptionGracePeriod` | read |  |
-| `apps_subscriptionGroups_getToManyRelated` | GET | `/v1/apps/{id}/subscriptionGroups` | read | apple\first-products, apple\iap-submit, apple\promoted, apple\subscriptions, apple\win-back, catalog, prices, validate |
+| `apps_subscriptionGroups_getToManyRelated` | GET | `/v1/apps/{id}/subscriptionGroups` | read | apple/first-products, apple/iap-submit, apple/promoted, apple/subscriptions, apple/win-back, catalog, prices, validate |
 | `apps_subscriptionGroups_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/subscriptionGroups` | read |  |
-| `apps_updateInstance` | PATCH | `/v1/apps/{id}` | write (dry by default) | apple\appinfo |
+| `apps_updateInstance` | PATCH | `/v1/apps/{id}` | write (dry by default) | apple/appinfo |
 | `apps_webhooks_getToManyRelated` | GET | `/v1/apps/{id}/webhooks` | read |  |
 | `apps_webhooks_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/webhooks` | read |  |
 | **backgroundAssetUploadFiles** (3) | | | | |
@@ -517,31 +517,31 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **betaAppLocalizations** (7) | | | | |
 | `betaAppLocalizations_app_getToOneRelated` | GET | `/v1/betaAppLocalizations/{id}/app` | read |  |
 | `betaAppLocalizations_app_getToOneRelationship` | GET | `/v1/betaAppLocalizations/{id}/relationships/app` | read |  |
-| `betaAppLocalizations_createInstance` | POST | `/v1/betaAppLocalizations` | write (dry by default) | lib\testflight |
+| `betaAppLocalizations_createInstance` | POST | `/v1/betaAppLocalizations` | write (dry by default) | lib/testflight |
 | `betaAppLocalizations_deleteInstance` | DELETE | `/v1/betaAppLocalizations/{id}` | owner only (typed confirm) |  |
 | `betaAppLocalizations_getCollection` | GET | `/v1/betaAppLocalizations` | read |  |
 | `betaAppLocalizations_getInstance` | GET | `/v1/betaAppLocalizations/{id}` | read |  |
-| `betaAppLocalizations_updateInstance` | PATCH | `/v1/betaAppLocalizations/{id}` | write (dry by default) | lib\testflight |
+| `betaAppLocalizations_updateInstance` | PATCH | `/v1/betaAppLocalizations/{id}` | write (dry by default) | lib/testflight |
 | **betaAppReviewDetails** (5) | | | | |
 | `betaAppReviewDetails_app_getToOneRelated` | GET | `/v1/betaAppReviewDetails/{id}/app` | read |  |
 | `betaAppReviewDetails_app_getToOneRelationship` | GET | `/v1/betaAppReviewDetails/{id}/relationships/app` | read |  |
 | `betaAppReviewDetails_getCollection` | GET | `/v1/betaAppReviewDetails` | read |  |
 | `betaAppReviewDetails_getInstance` | GET | `/v1/betaAppReviewDetails/{id}` | read |  |
-| `betaAppReviewDetails_updateInstance` | PATCH | `/v1/betaAppReviewDetails/{id}` | write (dry by default) | lib\testflight |
+| `betaAppReviewDetails_updateInstance` | PATCH | `/v1/betaAppReviewDetails/{id}` | write (dry by default) | lib/testflight |
 | **betaAppReviewSubmissions** (5) | | | | |
 | `betaAppReviewSubmissions_build_getToOneRelated` | GET | `/v1/betaAppReviewSubmissions/{id}/build` | read |  |
 | `betaAppReviewSubmissions_build_getToOneRelationship` | GET | `/v1/betaAppReviewSubmissions/{id}/relationships/build` | read |  |
-| `betaAppReviewSubmissions_createInstance` | POST | `/v1/betaAppReviewSubmissions` | owner only (typed confirm) | lib\testflight |
+| `betaAppReviewSubmissions_createInstance` | POST | `/v1/betaAppReviewSubmissions` | owner only (typed confirm) | lib/testflight |
 | `betaAppReviewSubmissions_getCollection` | GET | `/v1/betaAppReviewSubmissions` | read |  |
 | `betaAppReviewSubmissions_getInstance` | GET | `/v1/betaAppReviewSubmissions/{id}` | read |  |
 | **betaBuildLocalizations** (7) | | | | |
 | `betaBuildLocalizations_build_getToOneRelated` | GET | `/v1/betaBuildLocalizations/{id}/build` | read |  |
 | `betaBuildLocalizations_build_getToOneRelationship` | GET | `/v1/betaBuildLocalizations/{id}/relationships/build` | read |  |
-| `betaBuildLocalizations_createInstance` | POST | `/v1/betaBuildLocalizations` | write (dry by default) | lib\testflight |
+| `betaBuildLocalizations_createInstance` | POST | `/v1/betaBuildLocalizations` | write (dry by default) | lib/testflight |
 | `betaBuildLocalizations_deleteInstance` | DELETE | `/v1/betaBuildLocalizations/{id}` | owner only (typed confirm) |  |
 | `betaBuildLocalizations_getCollection` | GET | `/v1/betaBuildLocalizations` | read |  |
 | `betaBuildLocalizations_getInstance` | GET | `/v1/betaBuildLocalizations/{id}` | read |  |
-| `betaBuildLocalizations_updateInstance` | PATCH | `/v1/betaBuildLocalizations/{id}` | write (dry by default) | lib\testflight |
+| `betaBuildLocalizations_updateInstance` | PATCH | `/v1/betaBuildLocalizations/{id}` | write (dry by default) | lib/testflight |
 | **betaCrashLogs** (1) | | | | |
 | `betaCrashLogs_getInstance` | GET | `/v1/betaCrashLogs/{id}` | read |  |
 | **betaFeedbackCrashSubmissions** (4) | | | | |
@@ -560,18 +560,18 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `betaGroups_betaRecruitmentCriterionCompatibleBuildCheck_getToOneRelated` | GET | `/v1/betaGroups/{id}/betaRecruitmentCriterionCompatibleBuildCheck` | read |  |
 | `betaGroups_betaRecruitmentCriterionCompatibleBuildCheck_getToOneRelationship` | GET | `/v1/betaGroups/{id}/relationships/betaRecruitmentCriterionCompatibleBuildCheck` | read |  |
 | `betaGroups_betaTesterUsages_getMetrics` | GET | `/v1/betaGroups/{id}/metrics/betaTesterUsages` | read |  |
-| `betaGroups_betaTesters_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib\testflight |
-| `betaGroups_betaTesters_deleteToManyRelationship` | DELETE | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib\testflight |
-| `betaGroups_betaTesters_getToManyRelated` | GET | `/v1/betaGroups/{id}/betaTesters` | read | apple\testflight |
+| `betaGroups_betaTesters_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib/testflight |
+| `betaGroups_betaTesters_deleteToManyRelationship` | DELETE | `/v1/betaGroups/{id}/relationships/betaTesters` | owner only (typed confirm) | lib/testflight |
+| `betaGroups_betaTesters_getToManyRelated` | GET | `/v1/betaGroups/{id}/betaTesters` | read | apple/testflight |
 | `betaGroups_betaTesters_getToManyRelationship` | GET | `/v1/betaGroups/{id}/relationships/betaTesters` | read |  |
-| `betaGroups_builds_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/builds` | write (dry by default) | lib\testflight |
+| `betaGroups_builds_createToManyRelationship` | POST | `/v1/betaGroups/{id}/relationships/builds` | write (dry by default) | lib/testflight |
 | `betaGroups_builds_deleteToManyRelationship` | DELETE | `/v1/betaGroups/{id}/relationships/builds` | owner only (typed confirm) |  |
-| `betaGroups_builds_getToManyRelated` | GET | `/v1/betaGroups/{id}/builds` | read | apple\testflight |
-| `betaGroups_builds_getToManyRelationship` | GET | `/v1/betaGroups/{id}/relationships/builds` | read | apple\testflight |
-| `betaGroups_createInstance` | POST | `/v1/betaGroups` | write (dry by default) | lib\testflight |
+| `betaGroups_builds_getToManyRelated` | GET | `/v1/betaGroups/{id}/builds` | read | apple/testflight |
+| `betaGroups_builds_getToManyRelationship` | GET | `/v1/betaGroups/{id}/relationships/builds` | read | apple/testflight |
+| `betaGroups_createInstance` | POST | `/v1/betaGroups` | write (dry by default) | lib/testflight |
 | `betaGroups_deleteInstance` | DELETE | `/v1/betaGroups/{id}` | owner only (typed confirm) |  |
 | `betaGroups_getCollection` | GET | `/v1/betaGroups` | read |  |
-| `betaGroups_getInstance` | GET | `/v1/betaGroups/{id}` | read | apple\testflight |
+| `betaGroups_getInstance` | GET | `/v1/betaGroups/{id}` | read | apple/testflight |
 | `betaGroups_publicLinkUsages_getMetrics` | GET | `/v1/betaGroups/{id}/metrics/publicLinkUsages` | read |  |
 | `betaGroups_updateInstance` | PATCH | `/v1/betaGroups/{id}` | write (dry by default) |  |
 | **betaLicenseAgreements** (5) | | | | |
@@ -587,7 +587,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **betaRecruitmentCriterionOptions** (1) | | | | |
 | `betaRecruitmentCriterionOptions_getCollection` | GET | `/v1/betaRecruitmentCriterionOptions` | read |  |
 | **betaTesterInvitations** (1) | | | | |
-| `betaTesterInvitations_createInstance` | POST | `/v1/betaTesterInvitations` | owner only (typed confirm) | lib\testflight |
+| `betaTesterInvitations_createInstance` | POST | `/v1/betaTesterInvitations` | owner only (typed confirm) | lib/testflight |
 | **betaTesters** (16) | | | | |
 | `betaTesters_apps_deleteToManyRelationship` | DELETE | `/v1/betaTesters/{id}/relationships/apps` | owner only (typed confirm) |  |
 | `betaTesters_apps_getToManyRelated` | GET | `/v1/betaTesters/{id}/apps` | read |  |
@@ -601,9 +601,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `betaTesters_builds_deleteToManyRelationship` | DELETE | `/v1/betaTesters/{id}/relationships/builds` | owner only (typed confirm) |  |
 | `betaTesters_builds_getToManyRelated` | GET | `/v1/betaTesters/{id}/builds` | read |  |
 | `betaTesters_builds_getToManyRelationship` | GET | `/v1/betaTesters/{id}/relationships/builds` | read |  |
-| `betaTesters_createInstance` | POST | `/v1/betaTesters` | owner only (typed confirm) | lib\testflight |
+| `betaTesters_createInstance` | POST | `/v1/betaTesters` | owner only (typed confirm) | lib/testflight |
 | `betaTesters_deleteInstance` | DELETE | `/v1/betaTesters/{id}` | owner only (typed confirm) |  |
-| `betaTesters_getCollection` | GET | `/v1/betaTesters` | read | apple\testflight |
+| `betaTesters_getCollection` | GET | `/v1/betaTesters` | read | apple/testflight |
 | `betaTesters_getInstance` | GET | `/v1/betaTesters/{id}` | read |  |
 | **buildBetaDetails** (5) | | | | |
 | `buildBetaDetails_build_getToOneRelated` | GET | `/v1/buildBetaDetails/{id}/build` | read |  |
@@ -623,15 +623,15 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `buildBundles_buildBundleFileSizes_getToManyRelated` | GET | `/v1/buildBundles/{id}/buildBundleFileSizes` | read |  |
 | `buildBundles_buildBundleFileSizes_getToManyRelationship` | GET | `/v1/buildBundles/{id}/relationships/buildBundleFileSizes` | read |  |
 | **buildUploadFiles** (3) | | | | |
-| `buildUploadFiles_createInstance` | POST | `/v1/buildUploadFiles` | write (dry by default) | lib\xcode |
+| `buildUploadFiles_createInstance` | POST | `/v1/buildUploadFiles` | write (dry by default) | lib/xcode |
 | `buildUploadFiles_getInstance` | GET | `/v1/buildUploadFiles/{id}` | read |  |
-| `buildUploadFiles_updateInstance` | PATCH | `/v1/buildUploadFiles/{id}` | write (dry by default) | lib\xcode |
+| `buildUploadFiles_updateInstance` | PATCH | `/v1/buildUploadFiles/{id}` | write (dry by default) | lib/xcode |
 | **buildUploads** (5) | | | | |
-| `buildUploads_buildUploadFiles_getToManyRelated` | GET | `/v1/buildUploads/{id}/buildUploadFiles` | read | apple\upload |
+| `buildUploads_buildUploadFiles_getToManyRelated` | GET | `/v1/buildUploads/{id}/buildUploadFiles` | read | apple/upload |
 | `buildUploads_buildUploadFiles_getToManyRelationship` | GET | `/v1/buildUploads/{id}/relationships/buildUploadFiles` | read |  |
-| `buildUploads_createInstance` | POST | `/v1/buildUploads` | write (dry by default) | lib\xcode |
+| `buildUploads_createInstance` | POST | `/v1/buildUploads` | write (dry by default) | lib/xcode |
 | `buildUploads_deleteInstance` | DELETE | `/v1/buildUploads/{id}` | owner only (typed confirm) |  |
-| `buildUploads_getInstance` | GET | `/v1/buildUploads/{id}` | read | apple\upload |
+| `buildUploads_getInstance` | GET | `/v1/buildUploads/{id}` | read | apple/upload |
 | **builds** (30) | | | | |
 | `builds_appEncryptionDeclaration_getToOneRelated` | GET | `/v1/builds/{id}/appEncryptionDeclaration` | read | validate |
 | `builds_appEncryptionDeclaration_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/appEncryptionDeclaration` | read |  |
@@ -640,9 +640,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_appStoreVersion_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/appStoreVersion` | read |  |
 | `builds_app_getToOneRelated` | GET | `/v1/builds/{id}/app` | read |  |
 | `builds_app_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/app` | read |  |
-| `builds_betaAppReviewSubmission_getToOneRelated` | GET | `/v1/builds/{id}/betaAppReviewSubmission` | read | apple\testflight |
+| `builds_betaAppReviewSubmission_getToOneRelated` | GET | `/v1/builds/{id}/betaAppReviewSubmission` | read | apple/testflight |
 | `builds_betaAppReviewSubmission_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/betaAppReviewSubmission` | read |  |
-| `builds_betaBuildLocalizations_getToManyRelated` | GET | `/v1/builds/{id}/betaBuildLocalizations` | read | apple\testflight |
+| `builds_betaBuildLocalizations_getToManyRelated` | GET | `/v1/builds/{id}/betaBuildLocalizations` | read | apple/testflight |
 | `builds_betaBuildLocalizations_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/betaBuildLocalizations` | read |  |
 | `builds_betaBuildUsages_getMetrics` | GET | `/v1/builds/{id}/metrics/betaBuildUsages` | read |  |
 | `builds_betaGroups_createToManyRelationship` | POST | `/v1/builds/{id}/relationships/betaGroups` | write (dry by default) |  |
@@ -651,7 +651,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
-| `builds_getCollection` | GET | `/v1/builds` | read | apple\build, apple\encryption, apple\listing, apple\next-build, apple\resubmit, apple\status, apple\testflight, apple\upload, art, health, lib\store-apps, triage |
+| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
 | `builds_getInstance` | GET | `/v1/builds/{id}` | read |  |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
@@ -662,9 +662,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_perfPowerMetrics_getToManyRelated` | GET | `/v1/builds/{id}/perfPowerMetrics` | read |  |
 | `builds_preReleaseVersion_getToOneRelated` | GET | `/v1/builds/{id}/preReleaseVersion` | read |  |
 | `builds_preReleaseVersion_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/preReleaseVersion` | read |  |
-| `builds_updateInstance` | PATCH | `/v1/builds/{id}` | write (dry by default) | apple\encryption, lib\build-ops |
+| `builds_updateInstance` | PATCH | `/v1/builds/{id}` | write (dry by default) | apple/encryption, lib/build-ops |
 | **bundleIdCapabilities** (3) | | | | |
-| `bundleIdCapabilities_createInstance` | POST | `/v1/bundleIdCapabilities` | write (dry by default) | lib\signing |
+| `bundleIdCapabilities_createInstance` | POST | `/v1/bundleIdCapabilities` | write (dry by default) | lib/signing |
 | `bundleIdCapabilities_deleteInstance` | DELETE | `/v1/bundleIdCapabilities/{id}` | owner only (typed confirm) |  |
 | `bundleIdCapabilities_updateInstance` | PATCH | `/v1/bundleIdCapabilities/{id}` | write (dry by default) |  |
 | **bundleIds** (11) | | | | |
@@ -672,17 +672,17 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `bundleIds_app_getToOneRelationship` | GET | `/v1/bundleIds/{id}/relationships/app` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelated` | GET | `/v1/bundleIds/{id}/bundleIdCapabilities` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/bundleIdCapabilities` | read |  |
-| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple\bundle |
+| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple/bundle |
 | `bundleIds_deleteInstance` | DELETE | `/v1/bundleIds/{id}` | owner only (typed confirm) |  |
-| `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple\adhoc, apple\bundle, apple\signing |
+| `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple/adhoc, apple/bundle, apple/signing |
 | `bundleIds_getInstance` | GET | `/v1/bundleIds/{id}` | read |  |
-| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple\adhoc, lib\signing |
+| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple/adhoc, lib/signing |
 | `bundleIds_profiles_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/profiles` | read |  |
 | `bundleIds_updateInstance` | PATCH | `/v1/bundleIds/{id}` | write (dry by default) |  |
 | **certificates** (7) | | | | |
-| `certificates_createInstance` | POST | `/v1/certificates` | write (dry by default) | apple\signing, lib\signing |
+| `certificates_createInstance` | POST | `/v1/certificates` | write (dry by default) | apple/signing, lib/signing |
 | `certificates_deleteInstance` | DELETE | `/v1/certificates/{id}` | owner only (typed confirm) |  |
-| `certificates_getCollection` | GET | `/v1/certificates` | read | apple\adhoc, apple\signing |
+| `certificates_getCollection` | GET | `/v1/certificates` | read | apple/adhoc, apple/signing |
 | `certificates_getInstance` | GET | `/v1/certificates/{id}` | read |  |
 | `certificates_passTypeId_getToOneRelated` | GET | `/v1/certificates/{id}/passTypeId` | read |  |
 | `certificates_passTypeId_getToOneRelationship` | GET | `/v1/certificates/{id}/relationships/passTypeId` | read |  |
@@ -744,7 +744,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `ciXcodeVersions_macOsVersions_getToManyRelated` | GET | `/v1/ciXcodeVersions/{id}/macOsVersions` | read |  |
 | `ciXcodeVersions_macOsVersions_getToManyRelationship` | GET | `/v1/ciXcodeVersions/{id}/relationships/macOsVersions` | read |  |
 | **customerReviewResponses** (3) | | | | |
-| `customerReviewResponses_createInstance` | POST | `/v1/customerReviewResponses` | owner only (typed confirm) | lib\reviews |
+| `customerReviewResponses_createInstance` | POST | `/v1/customerReviewResponses` | owner only (typed confirm) | lib/reviews |
 | `customerReviewResponses_deleteInstance` | DELETE | `/v1/customerReviewResponses/{id}` | owner only (typed confirm) |  |
 | `customerReviewResponses_getInstance` | GET | `/v1/customerReviewResponses/{id}` | read |  |
 | **customerReviews** (3) | | | | |
@@ -752,14 +752,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `customerReviews_response_getToOneRelated` | GET | `/v1/customerReviews/{id}/response` | read |  |
 | `customerReviews_response_getToOneRelationship` | GET | `/v1/customerReviews/{id}/relationships/response` | read |  |
 | **devices** (4) | | | | |
-| `devices_createInstance` | POST | `/v1/devices` | write (dry by default) | apple\adhoc |
-| `devices_getCollection` | GET | `/v1/devices` | read | apple\adhoc |
+| `devices_createInstance` | POST | `/v1/devices` | write (dry by default) | apple/adhoc |
+| `devices_getCollection` | GET | `/v1/devices` | read | apple/adhoc |
 | `devices_getInstance` | GET | `/v1/devices/{id}` | read |  |
 | `devices_updateInstance` | PATCH | `/v1/devices/{id}` | write (dry by default) |  |
 | **diagnosticSignatures** (1) | | | | |
 | `diagnosticSignatures_logs_getToManyRelated` | GET | `/v1/diagnosticSignatures/{id}/logs` | read | health |
 | **endAppAvailabilityPreOrders** (1) | | | | |
-| `endAppAvailabilityPreOrders_createInstance` | POST | `/v1/endAppAvailabilityPreOrders` | write (dry by default) | lib\offers |
+| `endAppAvailabilityPreOrders_createInstance` | POST | `/v1/endAppAvailabilityPreOrders` | write (dry by default) | lib/offers |
 | **endUserLicenseAgreements** (6) | | | | |
 | `endUserLicenseAgreements_createInstance` | POST | `/v1/endUserLicenseAgreements` | write (dry by default) |  |
 | `endUserLicenseAgreements_deleteInstance` | DELETE | `/v1/endUserLicenseAgreements/{id}` | owner only (typed confirm) |  |
@@ -768,7 +768,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `endUserLicenseAgreements_territories_getToManyRelationship` | GET | `/v1/endUserLicenseAgreements/{id}/relationships/territories` | read |  |
 | `endUserLicenseAgreements_updateInstance` | PATCH | `/v1/endUserLicenseAgreements/{id}` | write (dry by default) |  |
 | **financeReports** (1) | | | | |
-| `financeReports_getCollection` | GET | `/v1/financeReports` | read | lib\reports |
+| `financeReports_getCollection` | GET | `/v1/financeReports` | read | lib/reports |
 | **gameCenterAchievementImages** (8) | | | | |
 | `gameCenterAchievementImagesV2_createInstance` | POST | `/v2/gameCenterAchievementImages` | write (dry by default) |  |
 | `gameCenterAchievementImagesV2_deleteInstance` | DELETE | `/v2/gameCenterAchievementImages/{id}` | owner only (typed confirm) |  |
@@ -817,7 +817,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterAchievements_groupAchievement_getToOneRelated` | GET | `/v1/gameCenterAchievements/{id}/groupAchievement` | read |  |
 | `gameCenterAchievements_groupAchievement_getToOneRelationship` | GET | `/v1/gameCenterAchievements/{id}/relationships/groupAchievement` | read |  |
 | `gameCenterAchievements_groupAchievement_updateToOneRelationship` | PATCH | `/v1/gameCenterAchievements/{id}/relationships/groupAchievement` | write (dry by default) |  |
-| `gameCenterAchievements_localizations_getToManyRelated` | GET | `/v1/gameCenterAchievements/{id}/localizations` | read | apple\game-center |
+| `gameCenterAchievements_localizations_getToManyRelated` | GET | `/v1/gameCenterAchievements/{id}/localizations` | read | apple/game-center |
 | `gameCenterAchievements_localizations_getToManyRelationship` | GET | `/v1/gameCenterAchievements/{id}/relationships/localizations` | read |  |
 | `gameCenterAchievements_releases_getToManyRelated` | GET | `/v1/gameCenterAchievements/{id}/releases` | read |  |
 | `gameCenterAchievements_releases_getToManyRelationship` | GET | `/v1/gameCenterAchievements/{id}/relationships/releases` | read |  |
@@ -868,7 +868,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterAppVersions_compatibilityVersions_deleteToManyRelationship` | DELETE | `/v1/gameCenterAppVersions/{id}/relationships/compatibilityVersions` | owner only (typed confirm) |  |
 | `gameCenterAppVersions_compatibilityVersions_getToManyRelated` | GET | `/v1/gameCenterAppVersions/{id}/compatibilityVersions` | read |  |
 | `gameCenterAppVersions_compatibilityVersions_getToManyRelationship` | GET | `/v1/gameCenterAppVersions/{id}/relationships/compatibilityVersions` | read |  |
-| `gameCenterAppVersions_createInstance` | POST | `/v1/gameCenterAppVersions` | write (dry by default) | apple\game-center |
+| `gameCenterAppVersions_createInstance` | POST | `/v1/gameCenterAppVersions` | write (dry by default) | apple/game-center |
 | `gameCenterAppVersions_getInstance` | GET | `/v1/gameCenterAppVersions/{id}` | read |  |
 | `gameCenterAppVersions_updateInstance` | PATCH | `/v1/gameCenterAppVersions/{id}` | write (dry by default) |  |
 | **gameCenterChallengeImages** (4) | | | | |
@@ -916,11 +916,11 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterDetails_challengeReleases_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/challengeReleases` | read |  |
 | `gameCenterDetails_challengesMinimumPlatformVersions_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/challengesMinimumPlatformVersions` | write (dry by default) |  |
 | `gameCenterDetails_classicMatchmakingRequests_getMetrics` | GET | `/v1/gameCenterDetails/{id}/metrics/classicMatchmakingRequests` | read |  |
-| `gameCenterDetails_createInstance` | POST | `/v1/gameCenterDetails` | write (dry by default) | apple\game-center |
+| `gameCenterDetails_createInstance` | POST | `/v1/gameCenterDetails` | write (dry by default) | apple/game-center |
 | `gameCenterDetails_gameCenterAchievementsV2_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterAchievementsV2` | read |  |
 | `gameCenterDetails_gameCenterAchievementsV2_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievementsV2` | read |  |
 | `gameCenterDetails_gameCenterAchievementsV2_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievementsV2` | write (dry by default) |  |
-| `gameCenterDetails_gameCenterAchievements_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterAchievements` | read | apple\game-center |
+| `gameCenterDetails_gameCenterAchievements_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterAchievements` | read | apple/game-center |
 | `gameCenterDetails_gameCenterAchievements_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievements` | read |  |
 | `gameCenterDetails_gameCenterAchievements_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterAchievements` | write (dry by default) |  |
 | `gameCenterDetails_gameCenterActivities_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterActivities` | read |  |
@@ -940,7 +940,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterDetails_gameCenterLeaderboardsV2_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterLeaderboardsV2` | read |  |
 | `gameCenterDetails_gameCenterLeaderboardsV2_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboardsV2` | read |  |
 | `gameCenterDetails_gameCenterLeaderboardsV2_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboardsV2` | write (dry by default) |  |
-| `gameCenterDetails_gameCenterLeaderboards_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterLeaderboards` | read | apple\game-center |
+| `gameCenterDetails_gameCenterLeaderboards_getToManyRelated` | GET | `/v1/gameCenterDetails/{id}/gameCenterLeaderboards` | read | apple/game-center |
 | `gameCenterDetails_gameCenterLeaderboards_getToManyRelationship` | GET | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboards` | read |  |
 | `gameCenterDetails_gameCenterLeaderboards_replaceToManyRelationship` | PATCH | `/v1/gameCenterDetails/{id}/relationships/gameCenterLeaderboards` | write (dry by default) |  |
 | `gameCenterDetails_getInstance` | GET | `/v1/gameCenterDetails/{id}` | read |  |
@@ -1106,7 +1106,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `gameCenterLeaderboards_groupLeaderboard_getToOneRelated` | GET | `/v1/gameCenterLeaderboards/{id}/groupLeaderboard` | read |  |
 | `gameCenterLeaderboards_groupLeaderboard_getToOneRelationship` | GET | `/v1/gameCenterLeaderboards/{id}/relationships/groupLeaderboard` | read |  |
 | `gameCenterLeaderboards_groupLeaderboard_updateToOneRelationship` | PATCH | `/v1/gameCenterLeaderboards/{id}/relationships/groupLeaderboard` | write (dry by default) |  |
-| `gameCenterLeaderboards_localizations_getToManyRelated` | GET | `/v1/gameCenterLeaderboards/{id}/localizations` | read | apple\game-center |
+| `gameCenterLeaderboards_localizations_getToManyRelated` | GET | `/v1/gameCenterLeaderboards/{id}/localizations` | read | apple/game-center |
 | `gameCenterLeaderboards_localizations_getToManyRelationship` | GET | `/v1/gameCenterLeaderboards/{id}/relationships/localizations` | read |  |
 | `gameCenterLeaderboards_releases_getToManyRelated` | GET | `/v1/gameCenterLeaderboards/{id}/releases` | read |  |
 | `gameCenterLeaderboards_releases_getToManyRelationship` | GET | `/v1/gameCenterLeaderboards/{id}/relationships/releases` | read |  |
@@ -1152,14 +1152,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **gameCenterScoreModerations** (1) | | | | |
 | `gameCenterScoreModerations_updateInstance` | PATCH | `/v1/gameCenterScoreModerations/{id}` | write (dry by default) |  |
 | **inAppPurchaseAppStoreReviewScreenshots** (4) | | | | |
-| `inAppPurchaseAppStoreReviewScreenshots_createInstance` | POST | `/v1/inAppPurchaseAppStoreReviewScreenshots` | write (dry by default) | apple\iap-review |
-| `inAppPurchaseAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple\iap-review |
+| `inAppPurchaseAppStoreReviewScreenshots_createInstance` | POST | `/v1/inAppPurchaseAppStoreReviewScreenshots` | write (dry by default) | apple/iap-review |
+| `inAppPurchaseAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple/iap-review |
 | `inAppPurchaseAppStoreReviewScreenshots_getInstance` | GET | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | read |  |
-| `inAppPurchaseAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | write (dry by default) | apple\iap-review |
+| `inAppPurchaseAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/inAppPurchaseAppStoreReviewScreenshots/{id}` | write (dry by default) | apple/iap-review |
 | **inAppPurchaseAvailabilities** (4) | | | | |
-| `inAppPurchaseAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/inAppPurchaseAvailabilities/{id}/availableTerritories` | read | apple\iap |
+| `inAppPurchaseAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/inAppPurchaseAvailabilities/{id}/availableTerritories` | read | apple/iap |
 | `inAppPurchaseAvailabilities_availableTerritories_getToManyRelationship` | GET | `/v1/inAppPurchaseAvailabilities/{id}/relationships/availableTerritories` | read |  |
-| `inAppPurchaseAvailabilities_createInstance` | POST | `/v1/inAppPurchaseAvailabilities` | write (dry by default) | apple\iap |
+| `inAppPurchaseAvailabilities_createInstance` | POST | `/v1/inAppPurchaseAvailabilities` | write (dry by default) | apple/iap |
 | `inAppPurchaseAvailabilities_getInstance` | GET | `/v1/inAppPurchaseAvailabilities/{id}` | read |  |
 | **inAppPurchaseContents** (1) | | | | |
 | `inAppPurchaseContents_getInstance` | GET | `/v1/inAppPurchaseContents/{id}` | read |  |
@@ -1177,45 +1177,45 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `inAppPurchaseLocalizationsV2_deleteInstance` | DELETE | `/v2/inAppPurchaseLocalizations/{id}` | owner only (typed confirm) |  |
 | `inAppPurchaseLocalizationsV2_getInstance` | GET | `/v2/inAppPurchaseLocalizations/{id}` | read |  |
 | `inAppPurchaseLocalizationsV2_updateInstance` | PATCH | `/v2/inAppPurchaseLocalizations/{id}` | write (dry by default) |  |
-| `inAppPurchaseLocalizations_createInstance` | POST | `/v1/inAppPurchaseLocalizations` | write (dry by default) | apple\iap |
+| `inAppPurchaseLocalizations_createInstance` | POST | `/v1/inAppPurchaseLocalizations` | write (dry by default) | apple/iap |
 | `inAppPurchaseLocalizations_deleteInstance` | DELETE | `/v1/inAppPurchaseLocalizations/{id}` | owner only (typed confirm) |  |
 | `inAppPurchaseLocalizations_getInstance` | GET | `/v1/inAppPurchaseLocalizations/{id}` | read |  |
-| `inAppPurchaseLocalizations_updateInstance` | PATCH | `/v1/inAppPurchaseLocalizations/{id}` | write (dry by default) | apple\iap |
+| `inAppPurchaseLocalizations_updateInstance` | PATCH | `/v1/inAppPurchaseLocalizations/{id}` | write (dry by default) | apple/iap |
 | **inAppPurchaseOfferCodeCustomCodes** (3) | | | | |
-| `inAppPurchaseOfferCodeCustomCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeCustomCodes` | write (dry by default) | lib\offers |
+| `inAppPurchaseOfferCodeCustomCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeCustomCodes` | write (dry by default) | lib/offers |
 | `inAppPurchaseOfferCodeCustomCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodeCustomCodes/{id}` | read |  |
 | `inAppPurchaseOfferCodeCustomCodes_updateInstance` | PATCH | `/v1/inAppPurchaseOfferCodeCustomCodes/{id}` | write (dry by default) |  |
 | **inAppPurchaseOfferCodeOneTimeUseCodes** (4) | | | | |
-| `inAppPurchaseOfferCodeOneTimeUseCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes` | write (dry by default) | lib\offers |
+| `inAppPurchaseOfferCodeOneTimeUseCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes` | write (dry by default) | lib/offers |
 | `inAppPurchaseOfferCodeOneTimeUseCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}` | read |  |
 | `inAppPurchaseOfferCodeOneTimeUseCodes_updateInstance` | PATCH | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}` | write (dry by default) |  |
-| `inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated` | GET | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}/values` | read | apple\offer-codes |
+| `inAppPurchaseOfferCodeOneTimeUseCodes_values_getToOneRelated` | GET | `/v1/inAppPurchaseOfferCodeOneTimeUseCodes/{id}/values` | read | apple/offer-codes |
 | **inAppPurchaseOfferCodes** (9) | | | | |
-| `inAppPurchaseOfferCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodes` | write (dry by default) | apple\offer-codes |
-| `inAppPurchaseOfferCodes_customCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/customCodes` | read | apple\offer-codes |
+| `inAppPurchaseOfferCodes_createInstance` | POST | `/v1/inAppPurchaseOfferCodes` | write (dry by default) | apple/offer-codes |
+| `inAppPurchaseOfferCodes_customCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/customCodes` | read | apple/offer-codes |
 | `inAppPurchaseOfferCodes_customCodes_getToManyRelationship` | GET | `/v1/inAppPurchaseOfferCodes/{id}/relationships/customCodes` | read |  |
-| `inAppPurchaseOfferCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodes/{id}` | read | apple\offer-codes |
-| `inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/oneTimeUseCodes` | read | apple\offer-codes |
+| `inAppPurchaseOfferCodes_getInstance` | GET | `/v1/inAppPurchaseOfferCodes/{id}` | read | apple/offer-codes |
+| `inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/oneTimeUseCodes` | read | apple/offer-codes |
 | `inAppPurchaseOfferCodes_oneTimeUseCodes_getToManyRelationship` | GET | `/v1/inAppPurchaseOfferCodes/{id}/relationships/oneTimeUseCodes` | read |  |
-| `inAppPurchaseOfferCodes_prices_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/prices` | read | apple\offer-codes |
+| `inAppPurchaseOfferCodes_prices_getToManyRelated` | GET | `/v1/inAppPurchaseOfferCodes/{id}/prices` | read | apple/offer-codes |
 | `inAppPurchaseOfferCodes_prices_getToManyRelationship` | GET | `/v1/inAppPurchaseOfferCodes/{id}/relationships/prices` | read |  |
 | `inAppPurchaseOfferCodes_updateInstance` | PATCH | `/v1/inAppPurchaseOfferCodes/{id}` | write (dry by default) |  |
 | **inAppPurchasePricePoints** (2) | | | | |
-| `inAppPurchasePricePoints_equalizations_getToManyRelated` | GET | `/v1/inAppPurchasePricePoints/{id}/equalizations` | read | apple\offer-codes, prices-ppp |
+| `inAppPurchasePricePoints_equalizations_getToManyRelated` | GET | `/v1/inAppPurchasePricePoints/{id}/equalizations` | read | apple/offer-codes, prices-ppp |
 | `inAppPurchasePricePoints_equalizations_getToManyRelationship` | GET | `/v1/inAppPurchasePricePoints/{id}/relationships/equalizations` | read |  |
 | **inAppPurchasePriceSchedules** (8) | | | | |
 | `inAppPurchasePriceSchedules_automaticPrices_getToManyRelated` | GET | `/v1/inAppPurchasePriceSchedules/{id}/automaticPrices` | read | prices |
 | `inAppPurchasePriceSchedules_automaticPrices_getToManyRelationship` | GET | `/v1/inAppPurchasePriceSchedules/{id}/relationships/automaticPrices` | read |  |
 | `inAppPurchasePriceSchedules_baseTerritory_getToOneRelated` | GET | `/v1/inAppPurchasePriceSchedules/{id}/baseTerritory` | read | prices |
 | `inAppPurchasePriceSchedules_baseTerritory_getToOneRelationship` | GET | `/v1/inAppPurchasePriceSchedules/{id}/relationships/baseTerritory` | read |  |
-| `inAppPurchasePriceSchedules_createInstance` | POST | `/v1/inAppPurchasePriceSchedules` | owner only (typed confirm) | apple\iap, prices |
+| `inAppPurchasePriceSchedules_createInstance` | POST | `/v1/inAppPurchasePriceSchedules` | owner only (typed confirm) | apple/iap, prices |
 | `inAppPurchasePriceSchedules_getInstance` | GET | `/v1/inAppPurchasePriceSchedules/{id}` | read |  |
 | `inAppPurchasePriceSchedules_manualPrices_getToManyRelated` | GET | `/v1/inAppPurchasePriceSchedules/{id}/manualPrices` | read | prices |
 | `inAppPurchasePriceSchedules_manualPrices_getToManyRelationship` | GET | `/v1/inAppPurchasePriceSchedules/{id}/relationships/manualPrices` | read |  |
 | **inAppPurchaseSubmissions** (1) | | | | |
 | `inAppPurchaseSubmissions_createInstance` | POST | `/v1/inAppPurchaseSubmissions` | owner only (typed confirm) |  |
 | **inAppPurchaseVersions** (8) | | | | |
-| `inAppPurchaseVersions_createInstance` | POST | `/v1/inAppPurchaseVersions` | write (dry by default) | lib\review-submit |
+| `inAppPurchaseVersions_createInstance` | POST | `/v1/inAppPurchaseVersions` | write (dry by default) | lib/review-submit |
 | `inAppPurchaseVersions_getInstance` | GET | `/v1/inAppPurchaseVersions/{id}` | read |  |
 | `inAppPurchaseVersions_image_getToOneRelated` | GET | `/v1/inAppPurchaseVersions/{id}/image` | read |  |
 | `inAppPurchaseVersions_image_getToOneRelationship` | GET | `/v1/inAppPurchaseVersions/{id}/relationships/image` | read |  |
@@ -1224,29 +1224,29 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `inAppPurchaseVersions_localizations_getToManyRelated` | GET | `/v1/inAppPurchaseVersions/{id}/localizations` | read |  |
 | `inAppPurchaseVersions_localizations_getToManyRelationship` | GET | `/v1/inAppPurchaseVersions/{id}/relationships/localizations` | read |  |
 | **inAppPurchases** (25) | | | | |
-| `inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/appStoreReviewScreenshot` | read | apple\iap-review, validate |
+| `inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/appStoreReviewScreenshot` | read | apple/iap-review, validate |
 | `inAppPurchasesV2_appStoreReviewScreenshot_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/appStoreReviewScreenshot` | read |  |
 | `inAppPurchasesV2_content_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/content` | read |  |
 | `inAppPurchasesV2_content_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/content` | read |  |
-| `inAppPurchasesV2_createInstance` | POST | `/v2/inAppPurchases` | write (dry by default) | apple\iap |
+| `inAppPurchasesV2_createInstance` | POST | `/v2/inAppPurchases` | write (dry by default) | apple/iap |
 | `inAppPurchasesV2_deleteInstance` | DELETE | `/v2/inAppPurchases/{id}` | owner only (typed confirm) |  |
-| `inAppPurchasesV2_getInstance` | GET | `/v2/inAppPurchases/{id}` | read | apple\iap |
-| `inAppPurchasesV2_iapPriceSchedule_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/iapPriceSchedule` | read | apple\iap, apple\iap-review, catalog |
+| `inAppPurchasesV2_getInstance` | GET | `/v2/inAppPurchases/{id}` | read | apple/iap |
+| `inAppPurchasesV2_iapPriceSchedule_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/iapPriceSchedule` | read | apple/iap, apple/iap-review, catalog |
 | `inAppPurchasesV2_iapPriceSchedule_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/iapPriceSchedule` | read |  |
 | `inAppPurchasesV2_images_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/images` | read |  |
 | `inAppPurchasesV2_images_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/images` | read |  |
-| `inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseAvailability` | read | apple\iap, apple\iap-review |
+| `inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseAvailability` | read | apple/iap, apple/iap-review |
 | `inAppPurchasesV2_inAppPurchaseAvailability_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/inAppPurchaseAvailability` | read |  |
-| `inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseLocalizations` | read | apple\iap, apple\iap-review, catalog |
+| `inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/inAppPurchaseLocalizations` | read | apple/iap, apple/iap-review, catalog |
 | `inAppPurchasesV2_inAppPurchaseLocalizations_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/inAppPurchaseLocalizations` | read |  |
-| `inAppPurchasesV2_offerCodes_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/offerCodes` | read | apple\offer-codes |
+| `inAppPurchasesV2_offerCodes_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/offerCodes` | read | apple/offer-codes |
 | `inAppPurchasesV2_offerCodes_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/offerCodes` | read |  |
-| `inAppPurchasesV2_pricePoints_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/pricePoints` | read | apple\iap, apple\offer-codes, prices, prices-ppp |
+| `inAppPurchasesV2_pricePoints_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/pricePoints` | read | apple/iap, apple/offer-codes, prices, prices-ppp |
 | `inAppPurchasesV2_pricePoints_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/pricePoints` | read |  |
 | `inAppPurchasesV2_promotedPurchase_getToOneRelated` | GET | `/v2/inAppPurchases/{id}/promotedPurchase` | read |  |
 | `inAppPurchasesV2_promotedPurchase_getToOneRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/promotedPurchase` | read |  |
-| `inAppPurchasesV2_updateInstance` | PATCH | `/v2/inAppPurchases/{id}` | write (dry by default) | apple\iap |
-| `inAppPurchasesV2_versions_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/versions` | read | apple\first-products, apple\iap-submit |
+| `inAppPurchasesV2_updateInstance` | PATCH | `/v2/inAppPurchases/{id}` | write (dry by default) | apple/iap |
+| `inAppPurchasesV2_versions_getToManyRelated` | GET | `/v2/inAppPurchases/{id}/versions` | read | apple/first-products, apple/iap-submit |
 | `inAppPurchasesV2_versions_getToManyRelationship` | GET | `/v2/inAppPurchases/{id}/relationships/versions` | read |  |
 | `inAppPurchases_getInstance` | GET | `/v1/inAppPurchases/{id}` | read |  |
 | **marketplaceSearchDetails** (3) | | | | |
@@ -1291,36 +1291,36 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `profiles_bundleId_getToOneRelated` | GET | `/v1/profiles/{id}/bundleId` | read |  |
 | `profiles_bundleId_getToOneRelationship` | GET | `/v1/profiles/{id}/relationships/bundleId` | read |  |
 | `profiles_certificates_getToManyRelated` | GET | `/v1/profiles/{id}/certificates` | read |  |
-| `profiles_certificates_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/certificates` | read | lib\signing |
-| `profiles_createInstance` | POST | `/v1/profiles` | write (dry by default) | apple\adhoc, lib\signing |
+| `profiles_certificates_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/certificates` | read | lib/signing |
+| `profiles_createInstance` | POST | `/v1/profiles` | write (dry by default) | apple/adhoc, lib/signing |
 | `profiles_deleteInstance` | DELETE | `/v1/profiles/{id}` | owner only (typed confirm) |  |
-| `profiles_devices_getToManyRelated` | GET | `/v1/profiles/{id}/devices` | read | apple\adhoc |
+| `profiles_devices_getToManyRelated` | GET | `/v1/profiles/{id}/devices` | read | apple/adhoc |
 | `profiles_devices_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/devices` | read |  |
 | `profiles_getCollection` | GET | `/v1/profiles` | read |  |
-| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple\signing |
+| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple/signing |
 | **promotedPurchases** (4) | | | | |
-| `promotedPurchases_createInstance` | POST | `/v1/promotedPurchases` | write (dry by default) | lib\offers |
+| `promotedPurchases_createInstance` | POST | `/v1/promotedPurchases` | write (dry by default) | lib/offers |
 | `promotedPurchases_deleteInstance` | DELETE | `/v1/promotedPurchases/{id}` | owner only (typed confirm) |  |
 | `promotedPurchases_getInstance` | GET | `/v1/promotedPurchases/{id}` | read |  |
-| `promotedPurchases_updateInstance` | PATCH | `/v1/promotedPurchases/{id}` | write (dry by default) | lib\offers |
+| `promotedPurchases_updateInstance` | PATCH | `/v1/promotedPurchases/{id}` | write (dry by default) | lib/offers |
 | **reviewSubmissionItems** (3) | | | | |
-| `reviewSubmissionItems_createInstance` | POST | `/v1/reviewSubmissionItems` | write (dry by default) | apple\submission, lib\cpp-events, lib\review-submit |
+| `reviewSubmissionItems_createInstance` | POST | `/v1/reviewSubmissionItems` | write (dry by default) | apple/submission, lib/cpp-events, lib/review-submit |
 | `reviewSubmissionItems_deleteInstance` | DELETE | `/v1/reviewSubmissionItems/{id}` | owner only (typed confirm) |  |
-| `reviewSubmissionItems_updateInstance` | PATCH | `/v1/reviewSubmissionItems/{id}` | write (dry by default) | apple\submission |
+| `reviewSubmissionItems_updateInstance` | PATCH | `/v1/reviewSubmissionItems/{id}` | write (dry by default) | apple/submission |
 | **reviewSubmissions** (6) | | | | |
-| `reviewSubmissions_createInstance` | POST | `/v1/reviewSubmissions` | owner only (typed confirm) | apple\cpp, apple\events, apple\submission, lib\review-submit |
-| `reviewSubmissions_getCollection` | GET | `/v1/reviewSubmissions` | read | apple\events, apple\iap-submit, apple\status, apple\submission |
-| `reviewSubmissions_getInstance` | GET | `/v1/reviewSubmissions/{id}` | read | apple\submission |
-| `reviewSubmissions_items_getToManyRelated` | GET | `/v1/reviewSubmissions/{id}/items` | read | apple\submission |
+| `reviewSubmissions_createInstance` | POST | `/v1/reviewSubmissions` | owner only (typed confirm) | apple/cpp, apple/events, apple/submission, lib/review-submit |
+| `reviewSubmissions_getCollection` | GET | `/v1/reviewSubmissions` | read | apple/events, apple/iap-submit, apple/status, apple/submission |
+| `reviewSubmissions_getInstance` | GET | `/v1/reviewSubmissions/{id}` | read | apple/submission |
+| `reviewSubmissions_items_getToManyRelated` | GET | `/v1/reviewSubmissions/{id}/items` | read | apple/submission |
 | `reviewSubmissions_items_getToManyRelationship` | GET | `/v1/reviewSubmissions/{id}/relationships/items` | read |  |
-| `reviewSubmissions_updateInstance` | PATCH | `/v1/reviewSubmissions/{id}` | owner only (typed confirm) | apple\cpp, apple\events, apple\status, apple\submission, lib\review-submit |
+| `reviewSubmissions_updateInstance` | PATCH | `/v1/reviewSubmissions/{id}` | owner only (typed confirm) | apple/cpp, apple/events, apple/status, apple/submission, lib/review-submit |
 | **routingAppCoverages** (4) | | | | |
 | `routingAppCoverages_createInstance` | POST | `/v1/routingAppCoverages` | write (dry by default) |  |
 | `routingAppCoverages_deleteInstance` | DELETE | `/v1/routingAppCoverages/{id}` | owner only (typed confirm) |  |
 | `routingAppCoverages_getInstance` | GET | `/v1/routingAppCoverages/{id}` | read |  |
 | `routingAppCoverages_updateInstance` | PATCH | `/v1/routingAppCoverages/{id}` | write (dry by default) |  |
 | **salesReports** (1) | | | | |
-| `salesReports_getCollection` | GET | `/v1/salesReports` | read | lib\reports |
+| `salesReports_getCollection` | GET | `/v1/salesReports` | read | lib/reports |
 | **sandboxTesters** (2) | | | | |
 | `sandboxTestersV2_getCollection` | GET | `/v2/sandboxTesters` | read |  |
 | `sandboxTestersV2_updateInstance` | PATCH | `/v2/sandboxTesters/{id}` | write (dry by default) |  |
@@ -1343,14 +1343,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `scmRepositories_pullRequests_getToManyRelated` | GET | `/v1/scmRepositories/{id}/pullRequests` | read |  |
 | `scmRepositories_pullRequests_getToManyRelationship` | GET | `/v1/scmRepositories/{id}/relationships/pullRequests` | read |  |
 | **subscriptionAppStoreReviewScreenshots** (4) | | | | |
-| `subscriptionAppStoreReviewScreenshots_createInstance` | POST | `/v1/subscriptionAppStoreReviewScreenshots` | write (dry by default) | apple\subscriptions |
-| `subscriptionAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple\subscriptions |
+| `subscriptionAppStoreReviewScreenshots_createInstance` | POST | `/v1/subscriptionAppStoreReviewScreenshots` | write (dry by default) | apple/subscriptions |
+| `subscriptionAppStoreReviewScreenshots_deleteInstance` | DELETE | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | owner only (typed confirm) | apple/subscriptions |
 | `subscriptionAppStoreReviewScreenshots_getInstance` | GET | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | read |  |
-| `subscriptionAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | write (dry by default) | apple\subscriptions |
+| `subscriptionAppStoreReviewScreenshots_updateInstance` | PATCH | `/v1/subscriptionAppStoreReviewScreenshots/{id}` | write (dry by default) | apple/subscriptions |
 | **subscriptionAvailabilities** (4) | | | | |
-| `subscriptionAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/subscriptionAvailabilities/{id}/availableTerritories` | read | apple\subscriptions |
+| `subscriptionAvailabilities_availableTerritories_getToManyRelated` | GET | `/v1/subscriptionAvailabilities/{id}/availableTerritories` | read | apple/subscriptions |
 | `subscriptionAvailabilities_availableTerritories_getToManyRelationship` | GET | `/v1/subscriptionAvailabilities/{id}/relationships/availableTerritories` | read |  |
-| `subscriptionAvailabilities_createInstance` | POST | `/v1/subscriptionAvailabilities` | write (dry by default) | apple\subscriptions |
+| `subscriptionAvailabilities_createInstance` | POST | `/v1/subscriptionAvailabilities` | write (dry by default) | apple/subscriptions |
 | `subscriptionAvailabilities_getInstance` | GET | `/v1/subscriptionAvailabilities/{id}` | read |  |
 | **subscriptionGracePeriods** (2) | | | | |
 | `subscriptionGracePeriods_getInstance` | GET | `/v1/subscriptionGracePeriods/{id}` | read |  |
@@ -1360,10 +1360,10 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionGroupLocalizationsV2_deleteInstance` | DELETE | `/v2/subscriptionGroupLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionGroupLocalizationsV2_getInstance` | GET | `/v2/subscriptionGroupLocalizations/{id}` | read |  |
 | `subscriptionGroupLocalizationsV2_updateInstance` | PATCH | `/v2/subscriptionGroupLocalizations/{id}` | write (dry by default) |  |
-| `subscriptionGroupLocalizations_createInstance` | POST | `/v1/subscriptionGroupLocalizations` | write (dry by default) | apple\subscriptions |
+| `subscriptionGroupLocalizations_createInstance` | POST | `/v1/subscriptionGroupLocalizations` | write (dry by default) | apple/subscriptions |
 | `subscriptionGroupLocalizations_deleteInstance` | DELETE | `/v1/subscriptionGroupLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionGroupLocalizations_getInstance` | GET | `/v1/subscriptionGroupLocalizations/{id}` | read |  |
-| `subscriptionGroupLocalizations_updateInstance` | PATCH | `/v1/subscriptionGroupLocalizations/{id}` | write (dry by default) | apple\subscriptions |
+| `subscriptionGroupLocalizations_updateInstance` | PATCH | `/v1/subscriptionGroupLocalizations/{id}` | write (dry by default) | apple/subscriptions |
 | **subscriptionGroupSubmissions** (1) | | | | |
 | `subscriptionGroupSubmissions_createInstance` | POST | `/v1/subscriptionGroupSubmissions` | owner only (typed confirm) |  |
 | **subscriptionGroupVersions** (4) | | | | |
@@ -1372,15 +1372,15 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionGroupVersions_localizations_getToManyRelated` | GET | `/v1/subscriptionGroupVersions/{id}/localizations` | read |  |
 | `subscriptionGroupVersions_localizations_getToManyRelationship` | GET | `/v1/subscriptionGroupVersions/{id}/relationships/localizations` | read |  |
 | **subscriptionGroups** (10) | | | | |
-| `subscriptionGroups_createInstance` | POST | `/v1/subscriptionGroups` | write (dry by default) | apple\subscriptions |
+| `subscriptionGroups_createInstance` | POST | `/v1/subscriptionGroups` | write (dry by default) | apple/subscriptions |
 | `subscriptionGroups_deleteInstance` | DELETE | `/v1/subscriptionGroups/{id}` | owner only (typed confirm) |  |
-| `subscriptionGroups_getInstance` | GET | `/v1/subscriptionGroups/{id}` | read | apple\subscriptions |
-| `subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptionGroupLocalizations` | read | apple\subscriptions, validate |
+| `subscriptionGroups_getInstance` | GET | `/v1/subscriptionGroups/{id}` | read | apple/subscriptions |
+| `subscriptionGroups_subscriptionGroupLocalizations_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptionGroupLocalizations` | read | apple/subscriptions, validate |
 | `subscriptionGroups_subscriptionGroupLocalizations_getToManyRelationship` | GET | `/v1/subscriptionGroups/{id}/relationships/subscriptionGroupLocalizations` | read |  |
-| `subscriptionGroups_subscriptions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptions` | read | apple\first-products, apple\iap-submit, apple\promoted, apple\subscriptions, apple\win-back, catalog, prices, validate |
+| `subscriptionGroups_subscriptions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/subscriptions` | read | apple/first-products, apple/iap-submit, apple/promoted, apple/subscriptions, apple/win-back, catalog, prices, validate |
 | `subscriptionGroups_subscriptions_getToManyRelationship` | GET | `/v1/subscriptionGroups/{id}/relationships/subscriptions` | read |  |
 | `subscriptionGroups_updateInstance` | PATCH | `/v1/subscriptionGroups/{id}` | write (dry by default) |  |
-| `subscriptionGroups_versions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/versions` | read | apple\iap-submit |
+| `subscriptionGroups_versions_getToManyRelated` | GET | `/v1/subscriptionGroups/{id}/versions` | read | apple/iap-submit |
 | `subscriptionGroups_versions_getToManyRelationship` | GET | `/v1/subscriptionGroups/{id}/relationships/versions` | read |  |
 | **subscriptionImages** (8) | | | | |
 | `subscriptionImagesV2_createInstance` | POST | `/v2/subscriptionImages` | write (dry by default) |  |
@@ -1400,12 +1400,12 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionLocalizationsV2_deleteInstance` | DELETE | `/v2/subscriptionLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionLocalizationsV2_getInstance` | GET | `/v2/subscriptionLocalizations/{id}` | read |  |
 | `subscriptionLocalizationsV2_updateInstance` | PATCH | `/v2/subscriptionLocalizations/{id}` | write (dry by default) |  |
-| `subscriptionLocalizations_createInstance` | POST | `/v1/subscriptionLocalizations` | write (dry by default) | apple\subscriptions |
+| `subscriptionLocalizations_createInstance` | POST | `/v1/subscriptionLocalizations` | write (dry by default) | apple/subscriptions |
 | `subscriptionLocalizations_deleteInstance` | DELETE | `/v1/subscriptionLocalizations/{id}` | owner only (typed confirm) |  |
 | `subscriptionLocalizations_getInstance` | GET | `/v1/subscriptionLocalizations/{id}` | read |  |
-| `subscriptionLocalizations_updateInstance` | PATCH | `/v1/subscriptionLocalizations/{id}` | write (dry by default) | apple\subscriptions |
+| `subscriptionLocalizations_updateInstance` | PATCH | `/v1/subscriptionLocalizations/{id}` | write (dry by default) | apple/subscriptions |
 | **subscriptionOfferCodeCustomCodes** (3) | | | | |
-| `subscriptionOfferCodeCustomCodes_createInstance` | POST | `/v1/subscriptionOfferCodeCustomCodes` | write (dry by default) | apple\subscriptions |
+| `subscriptionOfferCodeCustomCodes_createInstance` | POST | `/v1/subscriptionOfferCodeCustomCodes` | write (dry by default) | apple/subscriptions |
 | `subscriptionOfferCodeCustomCodes_getInstance` | GET | `/v1/subscriptionOfferCodeCustomCodes/{id}` | read |  |
 | `subscriptionOfferCodeCustomCodes_updateInstance` | PATCH | `/v1/subscriptionOfferCodeCustomCodes/{id}` | write (dry by default) |  |
 | **subscriptionOfferCodeOneTimeUseCodes** (4) | | | | |
@@ -1414,10 +1414,10 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionOfferCodeOneTimeUseCodes_updateInstance` | PATCH | `/v1/subscriptionOfferCodeOneTimeUseCodes/{id}` | write (dry by default) |  |
 | `subscriptionOfferCodeOneTimeUseCodes_values_getToOneRelated` | GET | `/v1/subscriptionOfferCodeOneTimeUseCodes/{id}/values` | read |  |
 | **subscriptionOfferCodes** (9) | | | | |
-| `subscriptionOfferCodes_createInstance` | POST | `/v1/subscriptionOfferCodes` | write (dry by default) | apple\subscriptions |
-| `subscriptionOfferCodes_customCodes_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/customCodes` | read | apple\subscriptions |
+| `subscriptionOfferCodes_createInstance` | POST | `/v1/subscriptionOfferCodes` | write (dry by default) | apple/subscriptions |
+| `subscriptionOfferCodes_customCodes_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/customCodes` | read | apple/subscriptions |
 | `subscriptionOfferCodes_customCodes_getToManyRelationship` | GET | `/v1/subscriptionOfferCodes/{id}/relationships/customCodes` | read |  |
-| `subscriptionOfferCodes_getInstance` | GET | `/v1/subscriptionOfferCodes/{id}` | read | apple\subscriptions |
+| `subscriptionOfferCodes_getInstance` | GET | `/v1/subscriptionOfferCodes/{id}` | read | apple/subscriptions |
 | `subscriptionOfferCodes_oneTimeUseCodes_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/oneTimeUseCodes` | read |  |
 | `subscriptionOfferCodes_oneTimeUseCodes_getToManyRelationship` | GET | `/v1/subscriptionOfferCodes/{id}/relationships/oneTimeUseCodes` | read |  |
 | `subscriptionOfferCodes_prices_getToManyRelated` | GET | `/v1/subscriptionOfferCodes/{id}/prices` | read |  |
@@ -1432,14 +1432,14 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionPlanAvailabilities_updateInstance` | PATCH | `/v1/subscriptionPlanAvailabilities/{id}` | write (dry by default) |  |
 | **subscriptionPricePoints** (4) | | | | |
 | `subscriptionPricePoints_adjustedEqualizations_getToManyRelated` | GET | `/v1/subscriptionPricePoints/{id}/adjustedEqualizations` | read |  |
-| `subscriptionPricePoints_equalizations_getToManyRelated` | GET | `/v1/subscriptionPricePoints/{id}/equalizations` | read | apple\subscriptions, apple\win-back |
+| `subscriptionPricePoints_equalizations_getToManyRelated` | GET | `/v1/subscriptionPricePoints/{id}/equalizations` | read | apple/subscriptions, apple/win-back |
 | `subscriptionPricePoints_equalizations_getToManyRelationship` | GET | `/v1/subscriptionPricePoints/{id}/relationships/equalizations` | read |  |
 | `subscriptionPricePoints_getInstance` | GET | `/v1/subscriptionPricePoints/{id}` | read |  |
 | **subscriptionPrices** (2) | | | | |
 | `subscriptionPrices_createInstance` | POST | `/v1/subscriptionPrices` | owner only (typed confirm) |  |
 | `subscriptionPrices_deleteInstance` | DELETE | `/v1/subscriptionPrices/{id}` | owner only (typed confirm) |  |
 | **subscriptionPromotionalOffers** (6) | | | | |
-| `subscriptionPromotionalOffers_createInstance` | POST | `/v1/subscriptionPromotionalOffers` | write (dry by default) | apple\subscriptions |
+| `subscriptionPromotionalOffers_createInstance` | POST | `/v1/subscriptionPromotionalOffers` | write (dry by default) | apple/subscriptions |
 | `subscriptionPromotionalOffers_deleteInstance` | DELETE | `/v1/subscriptionPromotionalOffers/{id}` | owner only (typed confirm) |  |
 | `subscriptionPromotionalOffers_getInstance` | GET | `/v1/subscriptionPromotionalOffers/{id}` | read |  |
 | `subscriptionPromotionalOffers_prices_getToManyRelated` | GET | `/v1/subscriptionPromotionalOffers/{id}/prices` | read |  |
@@ -1448,7 +1448,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **subscriptionSubmissions** (1) | | | | |
 | `subscriptionSubmissions_createInstance` | POST | `/v1/subscriptionSubmissions` | owner only (typed confirm) |  |
 | **subscriptionVersions** (8) | | | | |
-| `subscriptionVersions_createInstance` | POST | `/v1/subscriptionVersions` | write (dry by default) | lib\review-submit |
+| `subscriptionVersions_createInstance` | POST | `/v1/subscriptionVersions` | write (dry by default) | lib/review-submit |
 | `subscriptionVersions_getInstance` | GET | `/v1/subscriptionVersions/{id}` | read |  |
 | `subscriptionVersions_image_getToOneRelated` | GET | `/v1/subscriptionVersions/{id}/image` | read |  |
 | `subscriptionVersions_image_getToOneRelationship` | GET | `/v1/subscriptionVersions/{id}/relationships/image` | read |  |
@@ -1457,42 +1457,42 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `subscriptionVersions_localizations_getToManyRelated` | GET | `/v1/subscriptionVersions/{id}/localizations` | read |  |
 | `subscriptionVersions_localizations_getToManyRelationship` | GET | `/v1/subscriptionVersions/{id}/relationships/localizations` | read |  |
 | **subscriptions** (32) | | | | |
-| `subscriptions_appStoreReviewScreenshot_getToOneRelated` | GET | `/v1/subscriptions/{id}/appStoreReviewScreenshot` | read | apple\subscriptions, validate |
+| `subscriptions_appStoreReviewScreenshot_getToOneRelated` | GET | `/v1/subscriptions/{id}/appStoreReviewScreenshot` | read | apple/subscriptions, validate |
 | `subscriptions_appStoreReviewScreenshot_getToOneRelationship` | GET | `/v1/subscriptions/{id}/relationships/appStoreReviewScreenshot` | read |  |
-| `subscriptions_createInstance` | POST | `/v1/subscriptions` | write (dry by default) | apple\subscriptions |
+| `subscriptions_createInstance` | POST | `/v1/subscriptions` | write (dry by default) | apple/subscriptions |
 | `subscriptions_deleteInstance` | DELETE | `/v1/subscriptions/{id}` | owner only (typed confirm) |  |
-| `subscriptions_getInstance` | GET | `/v1/subscriptions/{id}` | read | apple\subscriptions |
+| `subscriptions_getInstance` | GET | `/v1/subscriptions/{id}` | read | apple/subscriptions |
 | `subscriptions_images_getToManyRelated` | GET | `/v1/subscriptions/{id}/images` | read |  |
 | `subscriptions_images_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/images` | read |  |
 | `subscriptions_introductoryOffers_deleteToManyRelationship` | DELETE | `/v1/subscriptions/{id}/relationships/introductoryOffers` | owner only (typed confirm) |  |
-| `subscriptions_introductoryOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/introductoryOffers` | read | apple\subscriptions, catalog |
+| `subscriptions_introductoryOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/introductoryOffers` | read | apple/subscriptions, catalog |
 | `subscriptions_introductoryOffers_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/introductoryOffers` | read |  |
-| `subscriptions_offerCodes_getToManyRelated` | GET | `/v1/subscriptions/{id}/offerCodes` | read | apple\subscriptions, catalog |
+| `subscriptions_offerCodes_getToManyRelated` | GET | `/v1/subscriptions/{id}/offerCodes` | read | apple/subscriptions, catalog |
 | `subscriptions_offerCodes_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/offerCodes` | read |  |
 | `subscriptions_planAvailabilities_getToManyRelated` | GET | `/v1/subscriptions/{id}/planAvailabilities` | read |  |
 | `subscriptions_planAvailabilities_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/planAvailabilities` | read |  |
-| `subscriptions_pricePoints_getToManyRelated` | GET | `/v1/subscriptions/{id}/pricePoints` | read | apple\subscriptions, apple\win-back |
+| `subscriptions_pricePoints_getToManyRelated` | GET | `/v1/subscriptions/{id}/pricePoints` | read | apple/subscriptions, apple/win-back |
 | `subscriptions_pricePoints_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/pricePoints` | read |  |
 | `subscriptions_prices_deleteToManyRelationship` | DELETE | `/v1/subscriptions/{id}/relationships/prices` | owner only (typed confirm) |  |
-| `subscriptions_prices_getToManyRelated` | GET | `/v1/subscriptions/{id}/prices` | read | apple\subscriptions, apple\win-back, catalog, prices |
+| `subscriptions_prices_getToManyRelated` | GET | `/v1/subscriptions/{id}/prices` | read | apple/subscriptions, apple/win-back, catalog, prices |
 | `subscriptions_prices_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/prices` | read |  |
 | `subscriptions_promotedPurchase_getToOneRelated` | GET | `/v1/subscriptions/{id}/promotedPurchase` | read |  |
 | `subscriptions_promotedPurchase_getToOneRelationship` | GET | `/v1/subscriptions/{id}/relationships/promotedPurchase` | read |  |
-| `subscriptions_promotionalOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/promotionalOffers` | read | apple\subscriptions, catalog |
+| `subscriptions_promotionalOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/promotionalOffers` | read | apple/subscriptions, catalog |
 | `subscriptions_promotionalOffers_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/promotionalOffers` | read |  |
-| `subscriptions_subscriptionAvailability_getToOneRelated` | GET | `/v1/subscriptions/{id}/subscriptionAvailability` | read | apple\subscriptions |
+| `subscriptions_subscriptionAvailability_getToOneRelated` | GET | `/v1/subscriptions/{id}/subscriptionAvailability` | read | apple/subscriptions |
 | `subscriptions_subscriptionAvailability_getToOneRelationship` | GET | `/v1/subscriptions/{id}/relationships/subscriptionAvailability` | read |  |
-| `subscriptions_subscriptionLocalizations_getToManyRelated` | GET | `/v1/subscriptions/{id}/subscriptionLocalizations` | read | apple\subscriptions, catalog, validate |
+| `subscriptions_subscriptionLocalizations_getToManyRelated` | GET | `/v1/subscriptions/{id}/subscriptionLocalizations` | read | apple/subscriptions, catalog, validate |
 | `subscriptions_subscriptionLocalizations_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/subscriptionLocalizations` | read |  |
-| `subscriptions_updateInstance` | PATCH | `/v1/subscriptions/{id}` | write (dry by default) | apple\subscriptions |
-| `subscriptions_versions_getToManyRelated` | GET | `/v1/subscriptions/{id}/versions` | read | apple\first-products, apple\iap-submit |
+| `subscriptions_updateInstance` | PATCH | `/v1/subscriptions/{id}` | write (dry by default) | apple/subscriptions |
+| `subscriptions_versions_getToManyRelated` | GET | `/v1/subscriptions/{id}/versions` | read | apple/first-products, apple/iap-submit |
 | `subscriptions_versions_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/versions` | read |  |
-| `subscriptions_winBackOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/winBackOffers` | read | apple\win-back |
+| `subscriptions_winBackOffers_getToManyRelated` | GET | `/v1/subscriptions/{id}/winBackOffers` | read | apple/win-back |
 | `subscriptions_winBackOffers_getToManyRelationship` | GET | `/v1/subscriptions/{id}/relationships/winBackOffers` | read |  |
 | **territories** (1) | | | | |
-| `territories_getCollection` | GET | `/v1/territories` | read | apple\appinfo, apple\events, apple\iap, apple\offer-codes, apple\subscriptions |
+| `territories_getCollection` | GET | `/v1/territories` | read | apple/appinfo, apple/events, apple/iap, apple/offer-codes, apple/subscriptions |
 | **territoryAvailabilities** (1) | | | | |
-| `territoryAvailabilities_updateInstance` | PATCH | `/v1/territoryAvailabilities/{id}` | write (dry by default) | lib\offers |
+| `territoryAvailabilities_updateInstance` | PATCH | `/v1/territoryAvailabilities/{id}` | write (dry by default) | lib/offers |
 | **userInvitations** (6) | | | | |
 | `userInvitations_createInstance` | POST | `/v1/userInvitations` | owner only (typed confirm) |  |
 | `userInvitations_deleteInstance` | DELETE | `/v1/userInvitations/{id}` | owner only (typed confirm) |  |
@@ -1522,10 +1522,10 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `webhooks_getInstance` | GET | `/v1/webhooks/{id}` | read |  |
 | `webhooks_updateInstance` | PATCH | `/v1/webhooks/{id}` | write (dry by default) |  |
 | **winBackOffers** (6) | | | | |
-| `winBackOffers_createInstance` | POST | `/v1/winBackOffers` | write (dry by default) | apple\win-back |
+| `winBackOffers_createInstance` | POST | `/v1/winBackOffers` | write (dry by default) | apple/win-back |
 | `winBackOffers_deleteInstance` | DELETE | `/v1/winBackOffers/{id}` | owner only (typed confirm) |  |
 | `winBackOffers_getInstance` | GET | `/v1/winBackOffers/{id}` | read |  |
-| `winBackOffers_prices_getToManyRelated` | GET | `/v1/winBackOffers/{id}/prices` | read | apple\win-back |
+| `winBackOffers_prices_getToManyRelated` | GET | `/v1/winBackOffers/{id}/prices` | read | apple/win-back |
 | `winBackOffers_prices_getToManyRelationship` | GET | `/v1/winBackOffers/{id}/relationships/prices` | read |  |
 | `winBackOffers_updateInstance` | PATCH | `/v1/winBackOffers/{id}` | write (dry by default) |  |
 
@@ -1536,7 +1536,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | operation | method | path | gate | wrapped by (cli/…) |
 |---|---|---|---|---|
 | **androidpublisher.applications** (1) | | | | |
-| `androidpublisher.applications.dataSafety` | POST | `androidpublisher/v3/applications/{packageName}/dataSafety` | write (dry by default) | play\data-safety |
+| `androidpublisher.applications.dataSafety` | POST | `androidpublisher/v3/applications/{packageName}/dataSafety` | write (dry by default) | play/data-safety |
 | **androidpublisher.applications.deviceTierConfigs** (3) | | | | |
 | `androidpublisher.applications.deviceTierConfigs.create` | POST | `androidpublisher/v3/applications/{packageName}/deviceTierConfigs` | write (dry by default) |  |
 | `androidpublisher.applications.deviceTierConfigs.get` | GET | `androidpublisher/v3/applications/{packageName}/deviceTierConfigs/{deviceTierConfigId}` | read |  |
@@ -1564,26 +1564,26 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.appstorecatalog.recentupdateevents** (1) | | | | |
 | `androidpublisher.appstorecatalog.recentupdateevents.list` | GET | `androidpublisher/v3/appstorecatalog/{appStorePackageName}/recentUpdateEvents` | read |  |
 | **androidpublisher.edits** (5) | | | | |
-| `androidpublisher.edits.commit` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:commit` | owner only (typed confirm) | play\client |
-| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play\client, validate |
+| `androidpublisher.edits.commit` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:commit` | owner only (typed confirm) | play/client |
+| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play/client, validate |
 | `androidpublisher.edits.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | read |  |
-| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play\client, validate |
-| `androidpublisher.edits.validate` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:validate` | write (dry by default) | play\client |
+| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play/client, validate |
+| `androidpublisher.edits.validate` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:validate` | write (dry by default) | play/client |
 | **androidpublisher.edits.apks** (3) | | | | |
 | `androidpublisher.edits.apks.addexternallyhosted` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/externallyHosted` | write (dry by default) |  |
-| `androidpublisher.edits.apks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks` | read | play\next-version-code |
+| `androidpublisher.edits.apks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks` | read | play/next-version-code |
 | `androidpublisher.edits.apks.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks` | write (dry by default) |  |
 | **androidpublisher.edits.bundles** (2) | | | | |
-| `androidpublisher.edits.bundles.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | read | play\next-version-code |
-| `androidpublisher.edits.bundles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | write (dry by default) | play\release, play\upload |
+| `androidpublisher.edits.bundles.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | read | play/next-version-code |
+| `androidpublisher.edits.bundles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/bundles` | write (dry by default) | play/release, play/upload |
 | **androidpublisher.edits.countryavailability** (1) | | | | |
 | `androidpublisher.edits.countryavailability.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/countryAvailability/{track}` | read | validate |
 | **androidpublisher.edits.deobfuscationfiles** (1) | | | | |
 | `androidpublisher.edits.deobfuscationfiles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/deobfuscationFiles/{deobfuscationFileType}` | write (dry by default) |  |
 | **androidpublisher.edits.details** (3) | | | | |
-| `androidpublisher.edits.details.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | read | apps, onboard, play\listing, play\status, validate |
+| `androidpublisher.edits.details.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | read | apps, onboard, play/listing, play/status, validate |
 | `androidpublisher.edits.details.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | write (dry by default) |  |
-| `androidpublisher.edits.details.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | write (dry by default) | play\listing |
+| `androidpublisher.edits.details.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/details` | write (dry by default) | play/listing |
 | **androidpublisher.edits.expansionfiles** (4) | | | | |
 | `androidpublisher.edits.expansionfiles.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/expansionFiles/{expansionFileType}` | read |  |
 | `androidpublisher.edits.expansionfiles.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/expansionFiles/{expansionFileType}` | write (dry by default) |  |
@@ -1591,26 +1591,26 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.edits.expansionfiles.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/{apkVersionCode}/expansionFiles/{expansionFileType}` | write (dry by default) |  |
 | **androidpublisher.edits.images** (4) | | | | |
 | `androidpublisher.edits.images.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}/{imageId}` | owner only (typed confirm) |  |
-| `androidpublisher.edits.images.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | owner only (typed confirm) | play\images |
-| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play\images, validate |
-| `androidpublisher.edits.images.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | write (dry by default) | play\images, play\listing |
+| `androidpublisher.edits.images.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | owner only (typed confirm) | play/images |
+| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play/images, validate |
+| `androidpublisher.edits.images.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | write (dry by default) | play/images, play/listing |
 | **androidpublisher.edits.listings** (6) | | | | |
 | `androidpublisher.edits.listings.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | owner only (typed confirm) |  |
 | `androidpublisher.edits.listings.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | owner only (typed confirm) |  |
 | `androidpublisher.edits.listings.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | read | onboard |
-| `androidpublisher.edits.listings.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | read | art, listing-store, play\listing, play\status, validate |
+| `androidpublisher.edits.listings.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | read | art, listing-store, play/listing, play/status, validate |
 | `androidpublisher.edits.listings.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store |
-| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play\listing |
+| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play/listing |
 | **androidpublisher.edits.testers** (3) | | | | |
 | `androidpublisher.edits.testers.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | read |  |
 | `androidpublisher.edits.testers.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | owner only (typed confirm) |  |
 | `androidpublisher.edits.testers.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | owner only (typed confirm) |  |
 | **androidpublisher.edits.tracks** (5) | | | | |
 | `androidpublisher.edits.tracks.create` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | write (dry by default) |  |
-| `androidpublisher.edits.tracks.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | read | play\release, play\rollout, play\upload |
-| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play\next-version-code, play\status, validate |
+| `androidpublisher.edits.tracks.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | read | play/release, play/rollout, play/upload |
+| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play/next-version-code, play/status, validate |
 | `androidpublisher.edits.tracks.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) |  |
-| `androidpublisher.edits.tracks.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) | play\release, play\rollout, play\upload |
+| `androidpublisher.edits.tracks.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) | play/release, play/rollout, play/upload |
 | **androidpublisher.externaltransactions** (3) | | | | |
 | `androidpublisher.externaltransactions.createexternaltransaction` | POST | `androidpublisher/v3/{+parent}/externalTransactions` | write (dry by default) |  |
 | `androidpublisher.externaltransactions.getexternaltransaction` | GET | `androidpublisher/v3/{+name}` | read |  |
@@ -1636,18 +1636,18 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.internalappsharingartifacts.uploadapk` | POST | `androidpublisher/v3/applications/internalappsharing/{packageName}/artifacts/apk` | write (dry by default) |  |
 | `androidpublisher.internalappsharingartifacts.uploadbundle` | POST | `androidpublisher/v3/applications/internalappsharing/{packageName}/artifacts/bundle` | write (dry by default) |  |
 | **androidpublisher.monetization** (1) | | | | |
-| `androidpublisher.monetization.convertRegionPrices` | POST | `androidpublisher/v3/applications/{packageName}/pricing:convertRegionPrices` | read | play\products, play\subscriptions, prices, prices-ppp |
+| `androidpublisher.monetization.convertRegionPrices` | POST | `androidpublisher/v3/applications/{packageName}/pricing:convertRegionPrices` | read | play/products, play/subscriptions, prices, prices-ppp |
 | **androidpublisher.monetization.onetimeproducts** (7) | | | | |
 | `androidpublisher.monetization.onetimeproducts.batchDelete` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts:batchDelete` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.batchGet` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts:batchGet` | read |  |
 | `androidpublisher.monetization.onetimeproducts.batchUpdate` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts:batchUpdate` | write (dry by default) |  |
 | `androidpublisher.monetization.onetimeproducts.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.get` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}` | read | prices |
-| `androidpublisher.monetization.onetimeproducts.list` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts` | read | play\products |
-| `androidpublisher.monetization.onetimeproducts.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/onetimeproducts/{productId}` | write (dry by default) | play\products, prices |
+| `androidpublisher.monetization.onetimeproducts.list` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts` | read | play/products |
+| `androidpublisher.monetization.onetimeproducts.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/onetimeproducts/{productId}` | write (dry by default) | play/products, prices |
 | **androidpublisher.monetization.onetimeproducts.purchaseOptions** (2) | | | | |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchDelete` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchDelete` | owner only (typed confirm) |  |
-| `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchUpdateStates` | owner only (typed confirm) | play\products |
+| `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchUpdateStates` | owner only (typed confirm) | play/products |
 | **androidpublisher.monetization.onetimeproducts.purchaseOptions.offers** (8) | | | | |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.offers.activate` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions/{purchaseOptionId}/offers/{offerId}:activate` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.offers.batchDelete` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions/{purchaseOptionId}/offers:batchDelete` | owner only (typed confirm) |  |
@@ -1661,13 +1661,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.monetization.subscriptions.archive` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}:archive` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.batchGet` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions:batchGet` | read |  |
 | `androidpublisher.monetization.subscriptions.batchUpdate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions:batchUpdate` | write (dry by default) |  |
-| `androidpublisher.monetization.subscriptions.create` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions` | write (dry by default) | play\subscriptions |
+| `androidpublisher.monetization.subscriptions.create` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions` | write (dry by default) | play/subscriptions |
 | `androidpublisher.monetization.subscriptions.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | owner only (typed confirm) |  |
-| `androidpublisher.monetization.subscriptions.get` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | read | play\subscriptions, prices |
-| `androidpublisher.monetization.subscriptions.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions` | read | catalog, play\subscriptions, validate |
-| `androidpublisher.monetization.subscriptions.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | write (dry by default) | play\subscriptions |
+| `androidpublisher.monetization.subscriptions.get` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | read | play/subscriptions, prices |
+| `androidpublisher.monetization.subscriptions.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions` | read | catalog, play/subscriptions, validate |
+| `androidpublisher.monetization.subscriptions.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}` | write (dry by default) | play/subscriptions |
 | **androidpublisher.monetization.subscriptions.basePlans** (6) | | | | |
-| `androidpublisher.monetization.subscriptions.basePlans.activate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}:activate` | owner only (typed confirm) | play\subscriptions |
+| `androidpublisher.monetization.subscriptions.basePlans.activate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}:activate` | owner only (typed confirm) | play/subscriptions |
 | `androidpublisher.monetization.subscriptions.basePlans.batchMigratePrices` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans:batchMigratePrices` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.batchUpdateStates` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans:batchUpdateStates` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.deactivate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}:deactivate` | owner only (typed confirm) |  |
@@ -1682,7 +1682,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.monetization.subscriptions.basePlans.offers.deactivate` | POST | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}:deactivate` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.offers.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.subscriptions.basePlans.offers.get` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}` | read |  |
-| `androidpublisher.monetization.subscriptions.basePlans.offers.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers` | read | catalog, play\subscriptions |
+| `androidpublisher.monetization.subscriptions.basePlans.offers.list` | GET | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers` | read | catalog, play/subscriptions |
 | `androidpublisher.monetization.subscriptions.basePlans.offers.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/subscriptions/{productId}/basePlans/{basePlanId}/offers/{offerId}` | write (dry by default) |  |
 | **androidpublisher.orders** (4) | | | | |
 | `androidpublisher.orders.batchget` | GET | `androidpublisher/v3/applications/{packageName}/orders:batchGet` | read |  |
@@ -1709,7 +1709,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.reviews** (3) | | | | |
 | `androidpublisher.reviews.get` | GET | `androidpublisher/v3/applications/{packageName}/reviews/{reviewId}` | read |  |
 | `androidpublisher.reviews.list` | GET | `androidpublisher/v3/applications/{packageName}/reviews` | read | reviews |
-| `androidpublisher.reviews.reply` | POST | `androidpublisher/v3/applications/{packageName}/reviews/{reviewId}:reply` | owner only (typed confirm) | lib\reviews |
+| `androidpublisher.reviews.reply` | POST | `androidpublisher/v3/applications/{packageName}/reviews/{reviewId}:reply` | owner only (typed confirm) | lib/reviews |
 | **androidpublisher.systemapks.variants** (4) | | | | |
 | `androidpublisher.systemapks.variants.create` | POST | `androidpublisher/v3/applications/{packageName}/systemApks/{versionCode}/variants` | write (dry by default) |  |
 | `androidpublisher.systemapks.variants.download` | GET | `androidpublisher/v3/applications/{packageName}/systemApks/{versionCode}/variants/{variantId}:download` | read |  |
@@ -1731,7 +1731,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `playdeveloperreporting.anomalies.list` | GET | `v1beta1/{+parent}/anomalies` | read |  |
 | **playdeveloperreporting.apps** (2) | | | | |
 | `playdeveloperreporting.apps.fetchReleaseFilterOptions` | GET | `v1beta1/{+name}:fetchReleaseFilterOptions` | read |  |
-| `playdeveloperreporting.apps.search` | GET | `v1beta1/apps:search` | read | apps, lib\store-apps |
+| `playdeveloperreporting.apps.search` | GET | `v1beta1/apps:search` | read | apps, lib/store-apps |
 | **playdeveloperreporting.vitals.anonrssandswapmemoryusage** (2) | | | | |
 | `playdeveloperreporting.vitals.anonrssandswapmemoryusage.get` | GET | `v1beta1/{+name}` | read |  |
 | `playdeveloperreporting.vitals.anonrssandswapmemoryusage.query` | POST | `v1beta1/{+name}:query` | read |  |

From 6abc1f65dd7fb4977e19707fbf33955d4f86ec8b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:16:13 +0800
Subject: [PATCH 107/255] Merge origin/main (0.8.42 tag, not published); API
 tables and flags regenerated

---
 cli/data/flags.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index 0cde295..864cd5a 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -1407,6 +1407,9 @@
   "apple next-build": [
    "storebound apple next-build            -> 42"
   ],
+  "apple offer-codes": [
+   "storebound apple offer-codes [--only id1,id2] [--codes] [--dry] [--yes] [--json]"
+  ],
   "apple ppo": [
    "storebound apple ppo status [--json]",
    "storebound apple ppo create --variant b[,c] [--name \"...\"] [--traffic 30] [--dry]",
@@ -1431,6 +1434,9 @@
   "apple resubmit": [
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]"
   ],
+  "apple review-details": [
+   "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
+  ],
   "apple screenshots": [
    "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
    "storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)"

From b1ed2ad8caf6968abfa1d664ac7d03f52285473e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 12:20:06 +0700
Subject: [PATCH 108/255] storebound 0.8.43: version in package.json and every
 copy, CHANGELOG 0.8.43 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index e670194..d2349e5 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.42",
+      "version": "0.8.43",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 17540ac..cf4e92c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.42",
+  "version": "0.8.43",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 0411633..d4027e5 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.42",
+  "version": "0.8.43",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e1467d1..fc0ae8c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.43 · 2026-10-23
+
 - Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
 - `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
 - Re-runs never upload twice: `play upload` with a versionCode Play has and `apple upload` with a build number App Store Connect has end with exit 7 and what is there; `play release` with the same release and `apple submit` of an already submitted build too.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index e64bf46..dc0770f 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.42",
+  "version": "0.8.43",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 234d938..a9b36f0 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.42"
+version = "0.8.43"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index e28e236..fdec89f 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.42"
+version = "0.8.43"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index f684e50..26f4c57 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.42",
+  "version": "0.8.43",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 73a3a0e..e7eabcd 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.42",
+  "version": "0.8.43",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 6bab2d5..dd1a161 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.42",
+  "version": "0.8.43",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 960e084beafa7583350def2e6055285a5b92567e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:55:44 +0800
Subject: [PATCH 109/255] ship step: apple build plan keeps its version and
 build in --json; test fixtures pass the scrub (documentation IPs, neutral
 home paths, 10-char key ids)

---
 cli/lib/ship-step.ts          |  2 +-
 tests/build-sign.test.ts      | 12 ++++++------
 tests/registry-relink.test.ts |  8 ++++----
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/cli/lib/ship-step.ts b/cli/lib/ship-step.ts
index 147e93a..796ce18 100644
--- a/cli/lib/ship-step.ts
+++ b/cli/lib/ship-step.ts
@@ -141,7 +141,7 @@ export function fieldsFromDetail(key: string, d: unknown): Fields {
   const dry = x.dry === true || x.dryRun === true;
   switch (key) {
     case 'play build': return { version: str(x.versionName), build: str(x.versionCode), state: x.aab ? 'built' : 'planned', ...(x.aab ? { artifact: String(x.aab) } : {}) };
-    case 'apple build': return { version: x.ipa ? str(x.version) : null, build: x.ipa ? str(x.build) : null, state: x.ipa ? 'built' : 'planned', ...(x.ipa ? { artifact: String(x.ipa) } : {}) };
+    case 'apple build': return { version: str(x.version), build: str(x.build), state: x.ipa ? 'built' : 'planned', ...(x.ipa ? { artifact: String(x.ipa) } : {}) };
     case 'play upload': return { version: str(x.versionName), build: str(x.versionCode), track: str(x.track), state: x.uploaded ? str(x.status) : 'planned' };
     case 'play release': {
       const tracks = Array.isArray(x.tracks) ? x.tracks as { track: string; status: string }[] : [];
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 9bd1b4a..8a491dc 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -372,9 +372,9 @@ describe('credentials for builds', () => {
       // another machine's paths and a keystore the stored password does not open are named by field
       const m = dir('moved');
       touch(m, 'keys/upload.jks', 'x');
-      touch(m, '.storebound/credentials.json', JSON.stringify({ ANDROID_KEYSTORE: 'keys/upload.jks', ANDROID_KEYSTORE_PASSWORD: 'wrong', ANDROID_KEY_ALIAS: 'upload', PLAY_SERVICE_ACCOUNT: '/Users/someone/keys/play.json' }));
+      touch(m, '.storebound/credentials.json', JSON.stringify({ ANDROID_KEYSTORE: 'keys/upload.jks', ANDROID_KEYSTORE_PASSWORD: 'wrong', ANDROID_KEY_ALIAS: 'upload', PLAY_SERVICE_ACCOUNT: '/Users/user/keys/play.json' }));
       const issues = credentialFileIssues(m, () => ({ ok: false, out: 'keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect' }));
-      expect(issues.some(i => i.startsWith('PLAY_SERVICE_ACCOUNT: /Users/someone/keys/play.json does not exist'))).toBe(true);
+      expect(issues.some(i => i.startsWith('PLAY_SERVICE_ACCOUNT: /Users/user/keys/play.json does not exist'))).toBe(true);
       expect(issues.some(i => i.startsWith('ANDROID_KEYSTORE_PASSWORD does not open'))).toBe(true);
       expect(credentialFileIssues(m, () => ({ ok: true, out: '' })).some(i => i.startsWith('ANDROID'))).toBe(false);
       const { pem } = newSigningKey();
@@ -498,7 +498,7 @@ describe('MCP', () => {
 describe('apple build outside the GUI session (pitfall 101)', () => {
   test('SSH or a non-Aqua launchd manager is named; the logged-in session passes', async () => {
     const { remoteBuildSession } = await import('../cli/lib/xcode');
-    expect(remoteBuildSession({ SSH_CONNECTION: '10.0.0.2 5000 10.0.0.3 22' }, 'Aqua')).toBe('this is an SSH session');
+    expect(remoteBuildSession({ SSH_CONNECTION: '192.0.2.2 5000 192.0.2.3 22' }, 'Aqua')).toBe('this is an SSH session');
     expect(remoteBuildSession({}, 'Background')).toContain('launchctl manager: Background');
     expect(remoteBuildSession({}, 'Aqua')).toBeNull();
   });
@@ -509,15 +509,15 @@ describe('apple build outside the GUI session (pitfall 101)', () => {
     const d = mkdtempSync(join(tmpdir(), 'sb-p8-'));
     mkdirSync(join(d, '.storebound'));
     const { generateKeyPairSync } = await import('node:crypto');
-    writeFileSync(join(d, '.storebound/AuthKey_KEYID00002.p8'), generateKeyPairSync('ec', { namedCurve: 'P-256' }).privateKey.export({ type: 'pkcs8', format: 'pem' }).toString());
-    writeFileSync(join(d, '.storebound/credentials.json'), JSON.stringify({ ASC_KEY_ID: 'KEYID00002', ASC_ISSUER_ID: '00000000-0000-0000-0000-000000000000', ASC_P8: '.storebound/AuthKey_KEYID00002.p8' }));
+    writeFileSync(join(d, '.storebound/AuthKey_KEYID0002.p8'), generateKeyPairSync('ec', { namedCurve: 'P-256' }).privateKey.export({ type: 'pkcs8', format: 'pem' }).toString());
+    writeFileSync(join(d, '.storebound/credentials.json'), JSON.stringify({ ASC_KEY_ID: 'KEYID00002', ASC_ISSUER_ID: '00000000-0000-0000-0000-000000000000', ASC_P8: '.storebound/AuthKey_KEYID0002.p8' }));
     const saved = { ...process.env };
     try {
       for (const k of ['ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8']) delete process.env[k];
       const { ascKeyFile } = await import('../cli/lib/credentials');
       const path = ascKeyFile(d).keyPath;
       expect(isAbsolute(path)).toBe(true);
-      expect(path).toBe(join(d, '.storebound/AuthKey_KEYID00002.p8'));
+      expect(path).toBe(join(d, '.storebound/AuthKey_KEYID0002.p8'));
     } finally { process.env = saved; }
   });
 });
diff --git a/tests/registry-relink.test.ts b/tests/registry-relink.test.ts
index 31d1cb6..eef98c9 100644
--- a/tests/registry-relink.test.ts
+++ b/tests/registry-relink.test.ts
@@ -22,10 +22,10 @@ describe('apps relink', () => {
     expect(found.sort()).toEqual([game, front, renamed].sort());
     expect(configAppName(front)).toBe('Studio');
     const r = { version: 1 as const, projects: [
-      { id: 'a', path: '/Users/old/Desktop/game-one', name: 'Game One', added: '' },
-      { id: 'b', path: '/Users/old/Work/Studio/frontend', name: 'frontend', added: '' },
-      { id: 'c', path: '/Users/old/Work/OldName/app', name: 'Old App', added: '' },
-      { id: 'd', path: '/Users/old/gone', name: 'Gone', added: '' },
+      { id: 'a', path: '/Users/name/Desktop/game-one', name: 'Game One', added: '' },
+      { id: 'b', path: '/Users/name/Work/Studio/frontend', name: 'frontend', added: '' },
+      { id: 'c', path: '/Users/name/Work/OldName/app', name: 'Old App', added: '' },
+      { id: 'd', path: '/Users/name/gone', name: 'Gone', added: '' },
     ] };
     const plan = relinkPlan(r, found, () => false, configAppName);
     expect(plan.map(p => [p.id, p.to])).toEqual([['a', game], ['b', front], ['c', renamed]]);

From e2ff7efcdab1037c7848e2e2e75f4041b8145859 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:56:01 +0800
Subject: [PATCH 110/255] CHANGELOG: 0.8.43 was not published; notes move to
 Unreleased

---
 CHANGELOG.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fc0ae8c..c2a6e2c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,8 +3,6 @@
 
 ## Unreleased
 
-## 0.8.43 · 2026-10-23
-
 - Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
 - `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
 - Re-runs never upload twice: `play upload` with a versionCode Play has and `apple upload` with a build number App Store Connect has end with exit 7 and what is there; `play release` with the same release and `apple submit` of an already submitted build too.
@@ -20,6 +18,10 @@
 - Desktop: tabs in one row with a More menu, one Refresh, reviews keyboard (J/K, R, C, O), Settings and More tools search, sticky first column and compact density for wide tables, styled in-app dry-run preview before every write.
 - Checks: "Open guide" opens the matching skill for every finding.
 
+## 0.8.43 · 2026-10-23
+
+- Tagged but not published (CI red: scrub hits in test fixtures, a ship-step test); everything ships in the next version.
+
 ## 0.8.42 · 2026-10-23
 
 - Tagged but not published (generated API tables differed on Linux CI); everything ships in the next version.

From 987f0775b3499f7d8a1431d12ff64e417cc394fc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 14:07:44 +0800
Subject: [PATCH 111/255] tray card: per-icon Phosphor imports; teaser pins the
 current app-privacy step 5 text

---
 apps/desktop/src/card/Card.tsx | 31 ++++++++++++++++++++-----------
 media/teaser/script.js         |  2 +-
 2 files changed, 21 insertions(+), 12 deletions(-)

diff --git a/apps/desktop/src/card/Card.tsx b/apps/desktop/src/card/Card.tsx
index f7b3c80..a07e633 100644
--- a/apps/desktop/src/card/Card.tsx
+++ b/apps/desktop/src/card/Card.tsx
@@ -1,6 +1,15 @@
 // The tray card: store status at a glance next to the tray icon. It only draws the main window's snapshot (card_get /
 // `card-snapshot`) and sends its buttons back (card_action); Refresh is the main window's own Refresh all.
-import { ArrowsClockwise, ArrowSquareOut, BellSlash, Bell, DotsThree, Power, Star, WarningOctagon, Pulse, AppWindow } from '@phosphor-icons/react';
+import { ArrowsClockwiseIcon } from '@phosphor-icons/react/dist/csr/ArrowsClockwise';
+import { ArrowSquareOutIcon } from '@phosphor-icons/react/dist/csr/ArrowSquareOut';
+import { BellSlashIcon } from '@phosphor-icons/react/dist/csr/BellSlash';
+import { BellIcon } from '@phosphor-icons/react/dist/csr/Bell';
+import { DotsThreeIcon } from '@phosphor-icons/react/dist/csr/DotsThree';
+import { PowerIcon } from '@phosphor-icons/react/dist/csr/Power';
+import { StarIcon } from '@phosphor-icons/react/dist/csr/Star';
+import { WarningOctagonIcon } from '@phosphor-icons/react/dist/csr/WarningOctagon';
+import { PulseIcon } from '@phosphor-icons/react/dist/csr/Pulse';
+import { AppWindowIcon } from '@phosphor-icons/react/dist/csr/AppWindow';
 import { useCallback, useEffect, useRef, useState, type KeyboardEvent, type ReactNode } from 'react';
 import type { CardApp, CardRelease, CardSnapshot, CardStore } from './model';
 import { ago, cardT, type CardKey, type CardLang } from './text';
@@ -54,18 +63,18 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
       <header className="tc-head">
         <div className="tc-title">
           <strong>{T('title')}</strong>
-          <span className="tc-meta">{s?.muted && <span className="tc-muted"><BellSlash size={12} weight="bold" />{T('muted')}</span>}{T('lastRead', { ago: ago(lang, s?.at ?? null, now) })}</span>
+          <span className="tc-meta">{s?.muted && <span className="tc-muted"><BellSlashIcon size={12} weight="bold" />{T('muted')}</span>}{T('lastRead', { ago: ago(lang, s?.at ?? null, now) })}</span>
         </div>
         <button className="tc-btn tc-primary" data-first onClick={() => host.action('refresh')} disabled={busy} aria-busy={busy} data-testid="card-refresh">
-          <ArrowsClockwise size={14} weight="bold" className={busy ? 'spin' : undefined} />{busy ? T('refreshing') : T('refresh')}
+          <ArrowsClockwiseIcon size={14} weight="bold" className={busy ? 'spin' : undefined} />{busy ? T('refreshing') : T('refresh')}
         </button>
-        <button className="tc-icon" onClick={() => setMenu(m => !m)} aria-haspopup="menu" aria-expanded={menu} aria-label={T('more')} title={T('more')}><DotsThree size={18} weight="bold" /></button>
+        <button className="tc-icon" onClick={() => setMenu(m => !m)} aria-haspopup="menu" aria-expanded={menu} aria-label={T('more')} title={T('more')}><DotsThreeIcon size={18} weight="bold" /></button>
         {menu && (
           <div className="tc-menu" role="menu">
-            <button role="menuitem" onClick={() => host.action('open')}><AppWindow size={15} />{T('openMain')}</button>
-            <button role="menuitem" onClick={() => { host.action('mute'); setMenu(false); }}>{s?.muted ? <Bell size={15} /> : <BellSlash size={15} />}{s?.muted ? T('unmute') : T('mute')}</button>
+            <button role="menuitem" onClick={() => host.action('open')}><AppWindowIcon size={15} />{T('openMain')}</button>
+            <button role="menuitem" onClick={() => { host.action('mute'); setMenu(false); }}>{s?.muted ? <BellIcon size={15} /> : <BellSlashIcon size={15} />}{s?.muted ? T('unmute') : T('mute')}</button>
             <hr />
-            <button role="menuitem" onClick={() => host.action('quit')}><Power size={15} />{T('quit')}</button>
+            <button role="menuitem" onClick={() => host.action('quit')}><PowerIcon size={15} />{T('quit')}</button>
           </div>
         )}
       </header>
@@ -78,7 +87,7 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
           <Section title={T('rejections')} tone="bad">
             {s.rejections.map(r => (
               <Row key={`${r.app}:${r.store}:${r.version}`} hue={r.hue} name={r.name} tone="bad" onOpen={() => host.action('route', route(r.app, 'releases'))} openLabel={T('openApp', { name: r.name })}
-                line={<><WarningOctagon size={13} weight="fill" />{T('rejected')} · {store(r.store)}{r.version ? ` ${r.version}` : ''}</>} sub={r.reason}
+                line={<><WarningOctagonIcon size={13} weight="fill" />{T('rejected')} · {store(r.store)}{r.version ? ` ${r.version}` : ''}</>} sub={r.reason}
                 consoles={consoles(link(r.app), r.store, host, T)} />
             ))}
           </Section>
@@ -100,7 +109,7 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
           <Section title={T('health')} tone="warn">
             {s.health.map(h => (
               <Row key={h.app} hue={h.hue} name={h.name} tone="warn" onOpen={() => host.action('route', route(h.app, 'health'))} openLabel={T('openApp', { name: h.name })}
-                line={<><Pulse size={13} weight="bold" />{h.kinds.length > 1 ? T('crashAnr') : T(h.kinds[0]!)}</>} consoles={consoles(link(h.app), 'android', host, T)} />
+                line={<><PulseIcon size={13} weight="bold" />{h.kinds.length > 1 ? T('crashAnr') : T(h.kinds[0]!)}</>} consoles={consoles(link(h.app), 'android', host, T)} />
             ))}
           </Section>
         )}
@@ -109,7 +118,7 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
           <Section title={T('reviews')} aside={s.reviews.recent ? T('recent', { n: s.reviews.recent }) : T('recentNone')}>
             {s.reviews.low.map(r => (
               <button key={`${r.app}:${r.date}:${r.text}`} className="tc-review" onClick={() => host.action('route', route(r.app, 'reviews'))}>
-                <span className="tc-stars" aria-label={T('stars', { n: r.rating })}>{[1, 2, 3, 4, 5].map(i => <Star key={i} size={11} weight={i <= r.rating ? 'fill' : 'regular'} />)}</span>
+                <span className="tc-stars" aria-label={T('stars', { n: r.rating })}>{[1, 2, 3, 4, 5].map(i => <StarIcon key={i} size={11} weight={i <= r.rating ? 'fill' : 'regular'} />)}</span>
                 <span className="tc-rname">{r.name}</span>
                 <span className="tc-rtext">{r.text}</span>
               </button>
@@ -124,7 +133,7 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
 function consoles(l: CardApp | undefined, st: CardStore, host: CardHost, T: (k: CardKey) => string): ReactNode {
   const url = st === 'ios' ? l?.asc : l?.play;
   if (!url) return null;
-  return <button className="tc-ext" onClick={e => { e.stopPropagation(); host.action('external', url); }} title={T(st === 'ios' ? 'asc' : 'play')} aria-label={T(st === 'ios' ? 'asc' : 'play')}><ArrowSquareOut size={14} /></button>;
+  return <button className="tc-ext" onClick={e => { e.stopPropagation(); host.action('external', url); }} title={T(st === 'ios' ? 'asc' : 'play')} aria-label={T(st === 'ios' ? 'asc' : 'play')}><ArrowSquareOutIcon size={14} /></button>;
 }
 
 function Section({ title, tone, aside, children }: { title: string; tone?: 'bad' | 'warn'; aside?: string; children: ReactNode }) {
diff --git a/media/teaser/script.js b/media/teaser/script.js
index 844967c..1262abe 100644
--- a/media/teaser/script.js
+++ b/media/teaser/script.js
@@ -138,7 +138,7 @@ export const PRIVACY_STEPS = [
   '  2. First time: click "Get Started" and answer the Data Collection question; then Next.  [click: "Get Started"]',
   '  6. "Email Address" step 1, purposes: tick and untick the 6 checkboxes as answered, then Next.  [click: "Next"]',
   '  7. "Email Address" step 2, linked to the user: pick the radio, then Next.  [click: "Next"]',
-  '  9. "Email Address" step 5, tracking: pick the radio, then Save (a draft). Never "Definitions and Examples". The dialog closes; the row shows Edit and the summary.  [click: "Save"]',
+  '  9. "Email Address" step 5, tracking: pick the radio, then the last button: "Save" (first setup: a draft) or "Publish" (answers published before: this type goes live at once, verified 2026-10-22). Publish is the owner\'s button unless bypass mode is on (storebound settings bypass status). Never "Definitions and Examples". The dialog closes; the row shows Edit and the summary.  [click: "Save"]',
 ];
 export const DATA_SAFETY_CSV = [
   'PSL_DATA_COLLECTION_COLLECTS_PERSONAL_DATA,,TRUE,REQUIRED,Does your app collect or share any of the required user data types?',

From bffbf942783c9bc0ba8570b0df8993d9e62e93e6 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 14:11:38 +0800
Subject: [PATCH 112/255] portfolio test: android identity carries developerId
 and appId

---
 tests/portfolio.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/portfolio.test.ts b/tests/portfolio.test.ts
index 1bb045c..87070ff 100644
--- a/tests/portfolio.test.ts
+++ b/tests/portfolio.test.ts
@@ -29,7 +29,7 @@ const play = {
 
 describe('portfolio (apps, release trains, catalog parity)', () => {
   test('identity: one app, both platforms', () => {
-    expect(appIdentity(summary)).toEqual({ id: '/games/demo', name: 'Demo', platforms: { ios: { bundleId: 'com.example.demo', ascAppId: null }, android: { packageName: 'com.example.demo' } } });
+    expect(appIdentity(summary)).toEqual({ id: '/games/demo', name: 'Demo', platforms: { ios: { bundleId: 'com.example.demo', ascAppId: null }, android: { packageName: 'com.example.demo', developerId: null, appId: null } } });
     expect(appIdentity({ ...summary, apple: null }).platforms.ios).toBeNull();
     expect(appIdentity({ ...summary, platforms: ['android'] }).platforms.ios).toBeNull();
   });

From 84efa4e913d88b615abb01efea09bfdcb8d4cc1f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 14:14:02 +0800
Subject: [PATCH 113/255] desktop coverage: place for the status command

---
 cli/lib/desktop-coverage.ts | 1 +
 docs/desktop-coverage.md    | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/cli/lib/desktop-coverage.ts b/cli/lib/desktop-coverage.ts
index 1a9f620..6896869 100644
--- a/cli/lib/desktop-coverage.ts
+++ b/cli/lib/desktop-coverage.ts
@@ -60,6 +60,7 @@ export const DESKTOP_COVERAGE: Record<string, Coverage> = {
   'privacy-manifest': { where: `${T}: Quality`, methods: ['privacy.manifest'] },
   'ws': { where: 'Portfolio, studios and Settings (the workspace of this machine)', methods: ['host:workspace_get', 'host:portfolio_status'] },
   'release': { where: 'Portfolio release trains and the Releases tab', methods: ['host:portfolio_status', 'apple.status', 'play.status'] },
+  'status': { where: 'Releases tab and the tray card (live and next version, build, track, review state and rollout per platform)', methods: ['host:portfolio_status', 'apple.status', 'play.status'] },
   'flow': { where: `${T}: Workflows (plans; owner steps never run)`, methods: ['flow.list', 'flow.run'] },
   'ads': { where: `${T}: Quality (AdAttributionKit / SKAdNetwork scan)`, methods: ['ads.scan'] },
   // COMMANDS
diff --git a/docs/desktop-coverage.md b/docs/desktop-coverage.md
index 493ec96..55f5b06 100644
--- a/docs/desktop-coverage.md
+++ b/docs/desktop-coverage.md
@@ -5,7 +5,7 @@ Every CLI command (cli/commands.ts) and the desktop place that runs it. "covered
 (serve.ts, or a host command `host:`) and the window calls it; tests/desktop-coverage.test.ts fails on a gap.
 Owner-only parts are owner actions in the window or owner steps with their terminal command (More tools).
 
-**99 commands:** 91 covered, 0 gaps, 8 not for the desktop.
+**100 commands:** 92 covered, 0 gaps, 8 not for the desktop.
 
 | command | status | where in the window | methods | owner step |
 |---|---|---|---|---|
@@ -14,6 +14,7 @@ Owner-only parts are owner actions in the window or owner steps with their termi
 | `install` | covered | More tools: Install for an AI tool | `agent.install` |  |
 | `mcp` | not-for-desktop | the stdio server for AI tools; the window itself is the GUI over the same commands |  |  |
 | `watch` | not-for-desktop | a server loop for people and agents (PM2, cron); the window already reads the stores in the background and notifies from the tray |  |  |
+| `status` | covered | Releases tab and the tray card (live and next version, build, track, review state and rollout per platform) | `host:portfolio_status`, `apple.status`, `play.status` |  |
 | `events` | not-for-desktop | the log that watch writes for terminals and agents; the window shows its own what-changed feed and tray notifications |  |  |
 | `serve` | not-for-desktop | the JSON-RPC sidecar the window runs on; nothing to click |  |  |
 | `apps` | covered | Accounts (store apps per account, key check) and App folders (list, add, remove) | `host:store_apps_refresh`, `host:account_check`, `host:projects_list`, `host:project_add`, `host:project_remove` |  |

From 12e56c5a8265e31809597e11ca319ed5b941db82 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:16:42 +0700
Subject: [PATCH 114/255] storebound 0.8.44: version in package.json and every
 copy, CHANGELOG 0.8.44 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index d2349e5..90b97e9 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.43",
+      "version": "0.8.44",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index cf4e92c..758dd04 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.43",
+  "version": "0.8.44",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index d4027e5..858e897 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.43",
+  "version": "0.8.44",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c2a6e2c..bb7ed57 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.44 · 2026-10-23
+
 - Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
 - `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
 - Re-runs never upload twice: `play upload` with a versionCode Play has and `apple upload` with a build number App Store Connect has end with exit 7 and what is there; `play release` with the same release and `apple submit` of an already submitted build too.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index dc0770f..2216fc7 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.43",
+  "version": "0.8.44",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index a9b36f0..6f3a8c9 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.43"
+version = "0.8.44"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index fdec89f..713558a 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.43"
+version = "0.8.44"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 26f4c57..de8c0a1 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.43",
+  "version": "0.8.44",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index e7eabcd..d845c62 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.43",
+  "version": "0.8.44",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index dd1a161..ad0c9b4 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.43",
+  "version": "0.8.44",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 0b0007045c4e7327cec06454db7518188cc9b773 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 14:47:53 +0800
Subject: [PATCH 115/255] desktop tests: clippy clean (repeat_n in the tray
 test, unix-only time imports in ai_fix)

---
 apps/desktop/src-tauri/tests/ai_fix.rs | 1 +
 apps/desktop/src-tauri/tests/tray.rs   | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/apps/desktop/src-tauri/tests/ai_fix.rs b/apps/desktop/src-tauri/tests/ai_fix.rs
index 2231869..179bf1d 100644
--- a/apps/desktop/src-tauri/tests/ai_fix.rs
+++ b/apps/desktop/src-tauri/tests/ai_fix.rs
@@ -3,6 +3,7 @@
 use std::fs;
 use std::path::{Path, PathBuf};
 use std::process::Command;
+#[cfg(unix)]
 use std::time::{Duration, Instant};
 
 use storebound_desktop::ai_fix::*;
diff --git a/apps/desktop/src-tauri/tests/tray.rs b/apps/desktop/src-tauri/tests/tray.rs
index 0707c06..95d5b67 100644
--- a/apps/desktop/src-tauri/tests/tray.rs
+++ b/apps/desktop/src-tauri/tests/tray.rs
@@ -90,7 +90,7 @@ fn only_known_small_routes_are_remembered() {
 #[test]
 fn attention_dot_changes_only_the_corner() {
     let (w, h) = (32u32, 32u32);
-    let base: Vec<u8> = std::iter::repeat([10u8, 20, 30, 255]).take((w * h) as usize).flatten().collect();
+    let base: Vec<u8> = std::iter::repeat_n([10u8, 20, 30, 255], (w * h) as usize).flatten().collect();
     let out = with_attention_dot(&base, w, h);
     assert_eq!(out.len(), base.len());
     let at = |v: &[u8], x: u32, y: u32| -> [u8; 4] { let i = ((y * w + x) * 4) as usize; [v[i], v[i + 1], v[i + 2], v[i + 3]] };

From 5b3905679bc8d0395287fa4a2af52215947ae101 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 14:48:09 +0800
Subject: [PATCH 116/255] CHANGELOG: 0.8.44 was not published

---
 CHANGELOG.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bb7ed57..93aba44 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,8 +3,6 @@
 
 ## Unreleased
 
-## 0.8.44 · 2026-10-23
-
 - Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
 - `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
 - Re-runs never upload twice: `play upload` with a versionCode Play has and `apple upload` with a build number App Store Connect has end with exit 7 and what is there; `play release` with the same release and `apple submit` of an already submitted build too.
@@ -20,6 +18,10 @@
 - Desktop: tabs in one row with a More menu, one Refresh, reviews keyboard (J/K, R, C, O), Settings and More tools search, sticky first column and compact density for wide tables, styled in-app dry-run preview before every write.
 - Checks: "Open guide" opens the matching skill for every finding.
 
+## 0.8.44 · 2026-10-23
+
+- Tagged but not published (desktop clippy red on the bump commit); everything ships in the next version.
+
 ## 0.8.43 · 2026-10-23
 
 - Tagged but not published (CI red: scrub hits in test fixtures, a ship-step test); everything ships in the next version.

From 960662029ed3ca8d20c2e8fa3edf6ec6f9023e79 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 13:50:24 +0700
Subject: [PATCH 117/255] storebound 0.8.45: version in package.json and every
 copy, CHANGELOG 0.8.45 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 90b97e9..c8eb804 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.44",
+      "version": "0.8.45",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 758dd04..5fda118 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.44",
+  "version": "0.8.45",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 858e897..686385b 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.44",
+  "version": "0.8.45",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 93aba44..68764ae 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.45 · 2026-10-23
+
 - Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
 - `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
 - Re-runs never upload twice: `play upload` with a versionCode Play has and `apple upload` with a build number App Store Connect has end with exit 7 and what is there; `play release` with the same release and `apple submit` of an already submitted build too.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 2216fc7..59314c8 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.44",
+  "version": "0.8.45",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 6f3a8c9..1a0bba4 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.44"
+version = "0.8.45"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 713558a..6786f24 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.44"
+version = "0.8.45"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index de8c0a1..6b05a03 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.44",
+  "version": "0.8.45",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index d845c62..4e6b7b4 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.44",
+  "version": "0.8.45",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index ad0c9b4..d1723b0 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.44",
+  "version": "0.8.45",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 487e138f9dd398b4eeea5fe581227e8c7789a321 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 15:30:18 +0800
Subject: [PATCH 118/255] watch: ingest sink (--notify ingest) posting events
 to a push ingest endpoint

---
 CHANGELOG.md               |   1 +
 cli/commands.ts            |   2 +-
 cli/data/flags.json        |   2 +-
 cli/lib/watch-sinks.ts     | 103 ++++++++++++++++++++++++++++---
 cli/lib/watch.ts           |  10 +--
 cli/watch.ts               |   6 +-
 docs/watch.md              |   6 +-
 tests/watch-ingest.test.ts | 122 +++++++++++++++++++++++++++++++++++++
 tests/watch.test.ts        |   2 +-
 9 files changed, 236 insertions(+), 18 deletions(-)
 create mode 100644 tests/watch-ingest.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 93aba44..757ef35 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `storebound watch` has an `ingest` sink (`--notify ingest`, `ingest` in ~/.storebound/watch.json): a JSON POST per event to a push ingest endpoint with a Bearer token read from a file at send time (refused when group or world readable), 8 KiB body cap, 60 sends a minute, one retry on 5xx; `watch test` covers it.
 - Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
 - `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
 - Re-runs never upload twice: `play upload` with a versionCode Play has and `apple upload` with a build number App Store Connect has end with exit 7 and what is there; `play release` with the same release and `apple submit` of an already submitted build too.
diff --git a/cli/commands.ts b/cli/commands.ts
index 3655643..ddce923 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -11,7 +11,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'import': [() => import('./import'), 'fastlane [--dir fastlane] [--profile app|game|subscription-app] [--dry]: Appfile, deliver + supply metadata and screenshots -> config, store/*.md, shots frames (read-only on fastlane, never overwrites)'],
   'install': [() => import('./install'), 'skills + MCP server for --agent claude|codex|cursor|copilot|windsurf|gemini|opencode'],
   'mcp': [async () => ({ run: async () => (await import('./mcp')).serve() }), 'stdio MCP server wrapping these commands (for any MCP-capable AI tool)'],
-  'watch': [() => import('./watch'), 'store events for every app on this machine: rejected, approved, live, rollout halted, crash threshold, low reviews; loops every --every 15m or --once; sinks --notify os|ntfy|telegram|webhook; test sends a test event; --dry, --dir <folder>, --json (read-only on the stores)'],
+  'watch': [() => import('./watch'), 'store events for every app on this machine: rejected, approved, live, rollout halted, crash threshold, low reviews; loops every --every 15m or --once; sinks --notify os|ntfy|telegram|webhook|ingest; test sends a test event; --dry, --dir <folder>, --json (read-only on the stores)'],
   'status': [() => import('./status'), '[--app <name|store id|folder>] [--json]: per platform the live and next version, build, track, review state and rollout %, without uploading (read-only; read by ship pipelines, docs/ship-step.md)'],
   'events': [() => import('./events'), '[--since 24h] [--app <name>] [--kind rejected] [--json]: the events watch recorded in ~/.storebound/events.jsonl (read-only)'],
   'serve': [() => import('./serve'), '--stdio: JSON-RPC session for the storebound desktop app (dry runs; writes need a host confirm token)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 864cd5a..9b96343 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -1696,7 +1696,7 @@
    "storebound validate [--apple] [--play] [--json] [--src store/renders] [--no-local] [--no-health] [--no-scan]"
   ],
   "watch": [
-   "storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook] [--once] [--dry] [--json]",
+   "storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook,ingest] [--once] [--dry] [--json]",
    "storebound watch test [--notify ...] [--dry]     sends one test event to every configured sink"
   ],
   "web": [
diff --git a/cli/lib/watch-sinks.ts b/cli/lib/watch-sinks.ts
index 83c5c69..5bbdfec 100644
--- a/cli/lib/watch-sinks.ts
+++ b/cli/lib/watch-sinks.ts
@@ -1,29 +1,33 @@
-// Where `storebound watch` sends events: OS notification, ntfy, Telegram, a webhook. All optional, configured from the
+// Where `storebound watch` sends events: OS notification, ntfy, Telegram, a webhook, a push ingest endpoint. All optional, configured from the
 // environment or ~/.storebound/watch.json (never printed; logs name the sink, not its URL, topic or token):
 //   STOREBOUND_NTFY_URL (default https://ntfy.sh) + STOREBOUND_NTFY_TOPIC [+ STOREBOUND_NTFY_TOKEN]
 //   STOREBOUND_TELEGRAM_TOKEN + STOREBOUND_TELEGRAM_CHAT
 //   STOREBOUND_WEBHOOK_URL
-//   watch.json: { "notify": ["os"], "ntfy": { "url", "topic", "token" }, "telegram": { "token", "chat" }, "webhook": { "url" } }
+//   STOREBOUND_INGEST_URL + STOREBOUND_INGEST_TOKEN_FILE [+ STOREBOUND_INGEST_CATEGORY]
+//   watch.json: { "notify": ["os"], "ntfy": { "url", "topic", "token" }, "telegram": { "token", "chat" }, "webhook": { "url" },
+//                 "ingest": { "url", "tokenFile", "category" } }
 // Builders are pure (tests check them); `send` takes the fetch and the OS runner as parameters.
 import { spawnSync } from 'node:child_process';
-import { readFileSync } from 'node:fs';
+import { readFileSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
 import { type EventKind, watchConfigFile, type WatchEvent } from './watch';
 
-export type SinkName = 'os' | 'ntfy' | 'telegram' | 'webhook';
-export const SINK_NAMES: readonly SinkName[] = ['os', 'ntfy', 'telegram', 'webhook'];
+export type SinkName = 'os' | 'ntfy' | 'telegram' | 'webhook' | 'ingest';
+export const SINK_NAMES: readonly SinkName[] = ['os', 'ntfy', 'telegram', 'webhook', 'ingest'];
 
 export interface SinkConfig {
   os?: true;
   ntfy?: { url: string; topic: string; token?: string };
   telegram?: { token: string; chat: string };
   webhook?: { url: string };
+  ingest?: { url: string; tokenFile: string; category: string };
 }
 
 type Env = Record<string, string | undefined>;
 
 /** The sinks that are configured (os only when the file lists it). `only` limits and, for os, enables. */
 export function sinkConfig(env: Env = process.env, file: string | null = watchConfigFile(env), only?: SinkName[]): SinkConfig {
-  let f: { notify?: string[]; ntfy?: Record<string, string>; telegram?: Record<string, string>; webhook?: Record<string, string> } = {};
+  let f: { notify?: string[]; ntfy?: Record<string, string>; telegram?: Record<string, string>; webhook?: Record<string, string>; ingest?: Record<string, string> } = {};
   if (file) { try { f = JSON.parse(readFileSync(file, 'utf8')); } catch { /* no file */ } }
   const out: SinkConfig = {};
   const topic = env.STOREBOUND_NTFY_TOPIC || f.ntfy?.topic;
@@ -32,6 +36,8 @@ export function sinkConfig(env: Env = process.env, file: string | null = watchCo
   if (tg.token && tg.chat) out.telegram = { token: tg.token, chat: tg.chat };
   const hook = env.STOREBOUND_WEBHOOK_URL || f.webhook?.url;
   if (hook) out.webhook = { url: hook };
+  const iUrl = env.STOREBOUND_INGEST_URL || f.ingest?.url, iFile = env.STOREBOUND_INGEST_TOKEN_FILE || f.ingest?.tokenFile;
+  if (iUrl && iFile) out.ingest = { url: iUrl, tokenFile: iFile, category: env.STOREBOUND_INGEST_CATEGORY || f.ingest?.category || 'storebound' };
   if (Array.isArray(f.notify) && f.notify.includes('os')) out.os = true;
   if (only) {
     const picked: SinkConfig = {};
@@ -96,7 +102,7 @@ export function osCommand(platform: string, title: string, message: string): { c
   return null;
 }
 
-export type FetchLike = (url: string, init: { method: string; headers: Record<string, string>; body: string; signal?: AbortSignal }) => Promise<{ ok: boolean; status: number }>;
+export type FetchLike = (url: string, init: { method: string; headers: Record<string, string>; body: string; signal?: AbortSignal }) => Promise<{ ok: boolean; status: number; text?: () => Promise<string> }>;
 export type OsRunner = (c: { cmd: string; args: string[]; env: Record<string, string> }) => boolean;
 
 export const runOs: OsRunner = c => {
@@ -118,6 +124,88 @@ export async function post(fetchFn: FetchLike, r: HttpRequest, o: { timeoutMs?:
   return last;
 }
 
+// ---- ingest: one JSON POST per event to a push ingest endpoint (Bearer token read from a file at send time) ----
+export const INGEST_EVENTS: Partial<Record<EventKind, string>> = {
+  rejected: 'review-rejected', approved: 'review-approved', live: 'live', rollout_halted: 'rollout-halted',
+  crash_threshold: 'crash-threshold', review_low: 'low-reviews', review_needs_reply: 'review-reply',
+};
+export const INGEST_MAX_BODY = 8 * 1024;
+export const INGEST_DETAIL_MAX = 300;
+export const INGEST_PER_MINUTE = 60;
+export const slugOf = (s: string): string => s.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '') || 'app';
+
+function ingestDetail(e: WatchEvent): string {
+  if (e.kind === 'review_low' || e.kind === 'review_needs_reply') return e.to ?? e.detail;
+  if (e.kind === 'crash_threshold' && e.store === 'play') {
+    const m = /([\d.]+)\s*%/.exec(e.to ?? '');
+    if (m) return `crash-free ${(100 - Number(m[1])).toFixed(1)}%`;
+  }
+  return e.detail;
+}
+
+/** The exact JSON body the endpoint accepts (no other fields: unknown ones are a 400); null for an event with no mapping. */
+export function ingestBody(e: WatchEvent, c: { category: string }): Record<string, string> | null {
+  const event = INGEST_EVENTS[e.kind];
+  if (!event) return null;
+  const app = slugOf(e.app);
+  const body: Record<string, string> = { category: c.category, event, app, platform: e.store === 'apple' ? 'ios' : 'android' };
+  if (e.version) body.version = e.version;
+  body.detail = ingestDetail(e).replace(/\s+/g, ' ').trim().slice(0, INGEST_DETAIL_MAX);
+  body.url = e.url;
+  body.dedupeKey = `${app}:${event}:${e.version ?? ''}${e.ref ? `:${e.ref}` : ''}`;
+  // keep the whole body within 8 KiB (only detail is free text)
+  while (Buffer.byteLength(JSON.stringify(body)) > INGEST_MAX_BODY && body.detail!.length > 0) body.detail = body.detail!.slice(0, Math.max(0, body.detail!.length - 100));
+  return body;
+}
+
+const expandHome = (p: string): string => (p === '~' || /^~[\\/]/.test(p) ? homedir() + p.slice(1) : p);
+
+/** The token from its file (trimmed), or an error text that names the file, never the token. */
+export function readIngestToken(file: string): { token: string } | { error: string } {
+  const path = expandHome(file);
+  try {
+    const st = statSync(path);
+    if (process.platform !== 'win32' && (st.mode & 0o077)) return { error: `token file ${file} is readable by group or others, refusing to use it (chmod 600 ${file})` };
+    const token = readFileSync(path, 'utf8').trim();
+    if (!token) return { error: `token file ${file} is empty` };
+    return { token };
+  } catch { return { error: `token file ${file} cannot be read` }; }
+}
+
+let sentAt: number[] = [];
+/** Client-side limit: INGEST_PER_MINUTE sends in any 60 s window; true = allowed (and counted). */
+export function ingestAllow(now = Date.now()): boolean {
+  sentAt = sentAt.filter(t => now - t < 60_000);
+  if (sentAt.length >= INGEST_PER_MINUTE) return false;
+  sentAt.push(now);
+  return true;
+}
+export const resetIngestLimit = (): void => { sentAt = []; };
+
+/** 202 = sent. 5xx and network errors are retried once; 4xx never (status and the server's message are the error). Resolves to an error text or null. */
+export async function sendIngest(e: WatchEvent, c: NonNullable<SinkConfig['ingest']>, d: { fetch: FetchLike; timeoutMs?: number; retryMs?: number }): Promise<string | null> {
+  const body = ingestBody(e, c);
+  if (!body) return null;
+  const t = readIngestToken(c.tokenFile);
+  if ('error' in t) return `not sent, ${t.error}`;
+  if (!ingestAllow()) return `not sent, rate limit of ${INGEST_PER_MINUTE}/min reached (event dropped)`;
+  const scrub = (s: string): string => s.split(t.token).join('***').replace(/\s+/g, ' ').slice(0, 200);
+  const init = { method: 'POST', headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${t.token}` }, body: JSON.stringify(body) };
+  let last = '';
+  for (let attempt = 0; attempt < 2; attempt++) {
+    if (attempt) await new Promise(res => setTimeout(res, d.retryMs ?? 1500));
+    try {
+      const res = await d.fetch(c.url, { ...init, signal: AbortSignal.timeout(d.timeoutMs ?? 10_000) });
+      if (res.status === 202) return null;
+      let msg = '';
+      try { msg = scrub(await res.text?.() ?? ''); } catch { /* no body */ }
+      last = `HTTP ${res.status}${msg ? `: ${msg}` : ''}`;
+      if (res.status < 500) return last;
+    } catch (err) { last = (err as Error).name === 'TimeoutError' ? 'timed out' : 'network error'; }
+  }
+  return last;
+}
+
 export interface SendReport { sink: SinkName; ok: boolean; error?: string }
 
 /** Sends one event to every sink in the config. A failing sink is a report row, never an exception. */
@@ -133,5 +221,6 @@ export async function sendEvent(e: WatchEvent, c: SinkConfig, d: { fetch?: Fetch
   if (c.ntfy) await http('ntfy', ntfyRequest(e, c.ntfy));
   if (c.telegram) await http('telegram', telegramRequest(e, c.telegram));
   if (c.webhook) await http('webhook', webhookRequest(e, c.webhook));
+  if (c.ingest && INGEST_EVENTS[e.kind]) { const err = await sendIngest(e, c.ingest, { fetch: fetchFn, timeoutMs: d.timeoutMs, retryMs: d.retryMs }); out.push(err ? { sink: 'ingest', ok: false, error: err } : { sink: 'ingest', ok: true }); }
   return out;
 }
diff --git a/cli/lib/watch.ts b/cli/lib/watch.ts
index b037b37..8a11079 100644
--- a/cli/lib/watch.ts
+++ b/cli/lib/watch.ts
@@ -25,6 +25,8 @@ export interface WatchEvent {
   detail: string;
   /** The absolute console deep link for the app (App Store Connect / Play Console). */
   url: string;
+  /** Review events only: the store's review id (dedupe key of the ingest sink). */
+  ref?: string;
 }
 
 /** One version on one store, reduced to what the diff needs. */
@@ -189,8 +191,8 @@ export function diffApp(prev: AppSnap | undefined, next: AppSnap, at: string): W
   if (!prev) return [];
   const out: WatchEvent[] = [];
   const ids = { ...prev.ids, ...next.ids };
-  const ev = (store: WatchStore, kind: EventKind, version: string | null, from: string | null, to: string | null, detail: string): void => {
-    out.push({ at, app: next.name, store, kind, version, from, to, detail, url: eventUrl(kind, store, ids) });
+  const ev = (store: WatchStore, kind: EventKind, version: string | null, from: string | null, to: string | null, detail: string, ref?: string): void => {
+    out.push({ at, app: next.name, store, kind, version, from, to, detail, url: eventUrl(kind, store, ids), ...(ref ? { ref } : {}) });
   };
 
   for (const store of ['apple', 'play'] as const) {
@@ -225,8 +227,8 @@ export function diffApp(prev: AppSnap | undefined, next: AppSnap, at: string): W
     const seen = new Set(p.map(r => r.id));
     for (const r of n) {
       if (seen.has(r.id)) continue;
-      if (r.rating >= 1 && r.rating <= LOW_STARS) ev(store, 'review_low', null, null, `${r.rating} stars`, `${r.rating}-star review${r.replied ? '' : ', no reply yet'}: ${snippet(r.text)}`);
-      else if (!r.replied) ev(store, 'review_needs_reply', null, null, `${r.rating} stars`, `${r.rating}-star review without a reply: ${snippet(r.text)}`);
+      if (r.rating >= 1 && r.rating <= LOW_STARS) ev(store, 'review_low', null, null, `${r.rating} stars`, `${r.rating}-star review${r.replied ? '' : ', no reply yet'}: ${snippet(r.text)}`, r.id);
+      else if (!r.replied) ev(store, 'review_needs_reply', null, null, `${r.rating} stars`, `${r.rating}-star review without a reply: ${snippet(r.text)}`, r.id);
     }
   }
   return out;
diff --git a/cli/watch.ts b/cli/watch.ts
index 50b8f5a..4dda790 100644
--- a/cli/watch.ts
+++ b/cli/watch.ts
@@ -1,5 +1,5 @@
 // `storebound watch`: store events for every app on this machine, for people and agents.
-//   storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook] [--once] [--dry] [--json]
+//   storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook,ingest] [--once] [--dry] [--json]
 //   storebound watch test [--notify ...] [--dry]     sends one test event to every configured sink
 // Apps: the machine's app folder list (~/.storebound/projects.json: folders and store-only apps, the same list as the
 // desktop app) or --dir for one folder. Each pass reads release state (like `release status`), crash / ANR health
@@ -29,7 +29,7 @@ import {
 import { configuredSinks, parseNotify, sendEvent, sinkConfig, type SinkConfig } from './lib/watch-sinks';
 
 const TAG = 'watch';
-const USAGE = 'usage: storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook] [--once] [--dry] [--json] | watch test [--notify ...] [--dry]';
+const USAGE = 'usage: storebound watch [--dir <folder>] [--every 15m] [--notify os,ntfy,telegram,webhook,ingest] [--once] [--dry] [--json] | watch test [--notify ...] [--dry]';
 export const HEALTH_EVERY_MS = 60 * 60_000;
 const MIN_EVERY_MS = 5 * 60_000;
 const MAX_BACKOFF_MS = 4 * 60 * 60_000;
@@ -150,7 +150,7 @@ function emit(e: WatchEvent, args: Args): void {
 async function testCmd(args: Args): Promise<void> {
   const c = chosenSinks(args);
   const names = configuredSinks(c);
-  if (!names.length) { warn(TAG, 'no sink configured: set STOREBOUND_NTFY_TOPIC, STOREBOUND_TELEGRAM_TOKEN + STOREBOUND_TELEGRAM_CHAT, STOREBOUND_WEBHOOK_URL, or pass --notify os (docs/watch.md)'); process.exitCode = 1; return; }
+  if (!names.length) { warn(TAG, 'no sink configured: set STOREBOUND_NTFY_TOPIC, STOREBOUND_TELEGRAM_TOKEN + STOREBOUND_TELEGRAM_CHAT, STOREBOUND_WEBHOOK_URL, STOREBOUND_INGEST_URL + STOREBOUND_INGEST_TOKEN_FILE, or pass --notify os (docs/watch.md)'); process.exitCode = 1; return; }
   const e = testEvent();
   emit(e, args);
   if (args.has('dry')) { done(TAG, `dry run: would send the test event to ${names.join(', ')}`); return; }
diff --git a/docs/watch.md b/docs/watch.md
index 813ca7d..a0b7005 100644
--- a/docs/watch.md
+++ b/docs/watch.md
@@ -46,12 +46,16 @@ All optional. Configure with environment variables or `~/.storebound/watch.json`
 | ntfy | `STOREBOUND_NTFY_TOPIC` (required), `STOREBOUND_NTFY_URL` (default `https://ntfy.sh`), `STOREBOUND_NTFY_TOKEN` (optional). Title, Tags and Click headers; Priority high for `rejected` and `rollout_halted` |
 | Telegram | `STOREBOUND_TELEGRAM_TOKEN` and `STOREBOUND_TELEGRAM_CHAT` |
 | webhook | `STOREBOUND_WEBHOOK_URL` (JSON POST of the event) |
+| ingest | `watch.json` `ingest` (or `STOREBOUND_INGEST_URL`, `STOREBOUND_INGEST_TOKEN_FILE`, `STOREBOUND_INGEST_CATEGORY`): JSON POST with `Authorization: Bearer <token>`; the token is read from `tokenFile` at send time (`~` expanded, trimmed, never logged; on POSIX a group- or world-readable file is refused). Body: `category`, `event`, `app` (slug), `platform` (`ios`/`android`), `version`, `detail` (max 300 chars), `url`, `dedupeKey`, at most 8 KiB. 202 = sent; 5xx and network errors retry once, 4xx do not (status and server message are logged). At most 60 sends a minute, the rest are dropped with a warning |
 | OS notification | `--notify os`, or `"notify": ["os"]` in watch.json (Windows toast, macOS osascript, Linux notify-send; skipped quietly when unavailable) |
 
 ```json
-{ "notify": ["os"], "ntfy": { "topic": "..." }, "telegram": { "token": "...", "chat": "..." }, "webhook": { "url": "..." } }
+{ "notify": ["os"], "ntfy": { "topic": "..." }, "telegram": { "token": "...", "chat": "..." }, "webhook": { "url": "..." },
+  "ingest": { "url": "https://push.example.com/api/notifications/ingest", "tokenFile": "~/.ingest-token", "category": "storebound" } }
 ```
 
+Ingest events: `review-rejected`, `review-approved`, `live`, `rollout-halted`, `crash-threshold`, `low-reviews`, `review-reply`. Several sinks can be active at once (ntfy stays a fine fallback).
+
 Network calls time out after 10 s and are retried once. A failing sink is logged (by name) and never stops the watch.
 
 ## On a server with PM2
diff --git a/tests/watch-ingest.test.ts b/tests/watch-ingest.test.ts
new file mode 100644
index 0000000..abbf530
--- /dev/null
+++ b/tests/watch-ingest.test.ts
@@ -0,0 +1,122 @@
+import { afterAll, beforeEach, describe, expect, test } from 'bun:test';
+import { chmodSync, mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { testEvent, type WatchEvent } from '../cli/lib/watch';
+import { ingestBody, INGEST_EVENTS, resetIngestLimit, sendEvent, sinkConfig, slugOf, type FetchLike } from '../cli/lib/watch-sinks';
+
+const TOKEN = 'sekret-token-123';
+const dir = mkdtempSync(join(tmpdir(), 'sb-ingest-'));
+const tokenFile = join(dir, 'token');
+writeFileSync(tokenFile, `  ${TOKEN}\n`);
+chmodSync(tokenFile, 0o600);
+
+const ev = (o: Partial<WatchEvent> = {}): WatchEvent => ({ ...testEvent('2026-10-22T10:00:00.000Z'), app: 'Demo App!', version: '1.2.0', kind: 'rejected', detail: 'App Store 1.2.0: review ended in REJECTED', url: 'https://appstoreconnect.apple.com/apps/1', ...o });
+
+let status = 202, replyText = 'ok';
+const hits: { headers: Headers; body: string }[] = [];
+const server = Bun.serve({ port: 0, async fetch(req) { hits.push({ headers: req.headers, body: await req.text() }); return new Response(replyText, { status }); } });
+afterAll(() => server.stop(true));
+beforeEach(() => { hits.length = 0; status = 202; replyText = 'ok'; resetIngestLimit(); });
+const cfg = (o: Record<string, string> = {}) => ({ ingest: { url: `http://localhost:${server.port}/api/notifications/ingest`, tokenFile, category: 'storebound', ...o } });
+const logs = (rep: unknown): string => JSON.stringify(rep);
+
+describe('watch ingest sink', () => {
+  test('config: watch.json and defaults; needs url and tokenFile', () => {
+    const f = join(dir, 'watch.json');
+    writeFileSync(f, JSON.stringify({ ingest: { url: 'https://push.example.com/api/notifications/ingest', tokenFile: '~/.ingest-token' } }));
+    expect(sinkConfig({}, f).ingest).toEqual({ url: 'https://push.example.com/api/notifications/ingest', tokenFile: '~/.ingest-token', category: 'storebound' });
+    writeFileSync(f, JSON.stringify({ ingest: { url: 'https://push.example.com/x' } }));
+    expect(sinkConfig({}, f).ingest).toBeUndefined();
+    expect(sinkConfig({}, f, ['ingest'])).toEqual({});
+  });
+  test('headers and the exact body fields', async () => {
+    const rep = await sendEvent(ev(), cfg(), { retryMs: 1 });
+    expect(rep).toEqual([{ sink: 'ingest', ok: true }]);
+    expect(hits).toHaveLength(1);
+    expect(hits[0]!.headers.get('authorization')).toBe(`Bearer ${TOKEN}`);
+    expect(hits[0]!.headers.get('content-type')).toBe('application/json');
+    expect(JSON.parse(hits[0]!.body)).toEqual({
+      category: 'storebound', event: 'review-rejected', app: 'demo-app', platform: 'ios', version: '1.2.0',
+      detail: 'App Store 1.2.0: review ended in REJECTED', url: 'https://appstoreconnect.apple.com/apps/1', dedupeKey: 'demo-app:review-rejected:1.2.0',
+    });
+  });
+  test('custom category; version omitted when null; crash-free detail', async () => {
+    await sendEvent(ev({ kind: 'crash_threshold', store: 'play', version: null, to: '2.90 %', detail: 'x' }), cfg({ category: 'apps' }), { retryMs: 1 });
+    expect(JSON.parse(hits[0]!.body)).toEqual({ category: 'apps', event: 'crash-threshold', app: 'demo-app', platform: 'android', detail: 'crash-free 97.1%', url: 'https://appstoreconnect.apple.com/apps/1', dedupeKey: 'demo-app:crash-threshold:' });
+  });
+  test('mapping of every event kind; review events add the review id to the dedupe key', () => {
+    expect(INGEST_EVENTS).toEqual({ rejected: 'review-rejected', approved: 'review-approved', live: 'live', rollout_halted: 'rollout-halted', crash_threshold: 'crash-threshold', review_low: 'low-reviews', review_needs_reply: 'review-reply' });
+    const low = ingestBody(ev({ kind: 'review_low', version: null, to: '2 stars', detail: '2-star review: meh', ref: 'r-9' }), { category: 'c' })!;
+    expect(low).toMatchObject({ event: 'low-reviews', detail: '2 stars', dedupeKey: 'demo-app:low-reviews::r-9' });
+    expect(ingestBody(ev({ kind: 'review_needs_reply', ref: 'r-1', to: '4 stars' }), { category: 'c' })).toMatchObject({ event: 'review-reply', dedupeKey: 'demo-app:review-reply:1.2.0:r-1' });
+    expect(ingestBody(ev({ kind: 'bogus' as never }), { category: 'c' })).toBeNull();
+  });
+  test('an unmapped event is skipped: nothing sent, no report row', async () => {
+    expect(await sendEvent(ev({ kind: 'bogus' as never }), cfg(), { retryMs: 1 })).toEqual([]);
+    expect(hits).toHaveLength(0);
+  });
+  test('slug', () => {
+    expect(slugOf('My  Cool_App 2!')).toBe('my-cool-app-2');
+    expect(slugOf('Café')).toBe('caf');
+  });
+  test('detail is cut to 300 chars and the body stays under 8 KiB', () => {
+    const b = ingestBody(ev({ detail: 'x'.repeat(5000), url: 'https://example.com/' + 'u'.repeat(7600) }), { category: 'c' })!;
+    expect(b.detail!.length).toBeLessThanOrEqual(300);
+    expect(Buffer.byteLength(JSON.stringify(b))).toBeLessThanOrEqual(8192);
+    expect(ingestBody(ev({ detail: 'y'.repeat(900) }), { category: 'c' })!.detail).toHaveLength(300);
+  });
+  test('4xx: no retry; status and server message reported, token not', async () => {
+    status = 400; replyText = `unknown field; token ${TOKEN}`;
+    const rep = await sendEvent(ev(), cfg(), { retryMs: 1 });
+    expect(hits).toHaveLength(1);
+    expect(rep[0]).toMatchObject({ sink: 'ingest', ok: false });
+    expect(rep[0]!.error).toContain('HTTP 400: unknown field');
+    expect(logs(rep)).not.toContain(TOKEN);
+  });
+  test('5xx: retried once, then reported', async () => {
+    status = 503;
+    const rep = await sendEvent(ev(), cfg(), { retryMs: 1 });
+    expect(hits).toHaveLength(2);
+    expect(rep[0]).toMatchObject({ ok: false });
+    expect(rep[0]!.error).toContain('HTTP 503');
+  });
+  test('a network error is retried once, then succeeds', async () => {
+    let n = 0;
+    const flaky: FetchLike = async () => { n++; if (n === 1) throw new Error('down'); return { ok: true, status: 202 }; };
+    expect(await sendEvent(ev(), cfg(), { fetch: flaky, retryMs: 1 })).toEqual([{ sink: 'ingest', ok: true }]);
+    expect(n).toBe(2);
+  });
+  test('missing or empty token file: warning naming the file, nothing sent, no token', async () => {
+    const missing = join(dir, 'nope');
+    const rep = await sendEvent(ev(), cfg({ tokenFile: missing }), { retryMs: 1 });
+    expect(hits).toHaveLength(0);
+    expect(rep[0]).toMatchObject({ sink: 'ingest', ok: false });
+    expect(rep[0]!.error).toContain(missing);
+    const empty = join(dir, 'empty'); writeFileSync(empty, '\n'); chmodSync(empty, 0o600);
+    expect((await sendEvent(ev(), cfg({ tokenFile: empty }), { retryMs: 1 }))[0]!.error).toContain('empty');
+    expect(hits).toHaveLength(0);
+  });
+  test.skipIf(process.platform === 'win32')('a group- or world-readable token file is refused', async () => {
+    const open = join(dir, 'open'); writeFileSync(open, TOKEN); chmodSync(open, 0o644);
+    const rep = await sendEvent(ev(), cfg({ tokenFile: open }), { retryMs: 1 });
+    expect(hits).toHaveLength(0);
+    expect(rep[0]!.error).toContain(open);
+    expect(logs(rep)).not.toContain(TOKEN);
+  });
+  test('client-side rate limit: 60 a minute, the rest dropped with a warning', async () => {
+    const ok: FetchLike = async () => ({ ok: true, status: 202 });
+    let dropped = 0, sent = 0;
+    for (let i = 0; i < 62; i++) {
+      const r = (await sendEvent(ev(), cfg(), { fetch: ok, retryMs: 1 }))[0]!;
+      if (r.ok) sent++; else { dropped++; expect(r.error).toContain('rate limit'); }
+    }
+    expect([sent, dropped]).toEqual([60, 2]);
+  });
+  test('the test event reaches the ingest sink and the token never appears in the report', async () => {
+    const rep = await sendEvent(testEvent(), cfg(), { retryMs: 1 });
+    expect(rep).toEqual([{ sink: 'ingest', ok: true }]);
+    expect(JSON.parse(hits[0]!.body).event).toBe('live');
+    expect(logs(rep)).not.toContain(TOKEN);
+  });
+});
diff --git a/tests/watch.test.ts b/tests/watch.test.ts
index e1f9eea..34e5bfb 100644
--- a/tests/watch.test.ts
+++ b/tests/watch.test.ts
@@ -86,7 +86,7 @@ describe('watch diff', () => {
       ...diffApp(snap({ reviews: { play: [] } }), snap({ reviews: { play: [{ id: 'x', rating: 1, replied: false, date: AT, text: 't' }, { id: 'y', rating: 5, replied: false, date: AT, text: 't' }] } }), AT),
     ];
     expect([...new Set(all.map(e => e.kind))].sort()).toEqual(['approved', 'crash_threshold', 'live', 'rejected', 'review_low', 'review_needs_reply', 'rollout_halted']);
-    for (const e of all) { expect(Object.keys(e).sort()).toEqual(['app', 'at', 'detail', 'from', 'kind', 'store', 'to', 'url', 'version']); expect(e.url).toMatch(/^https:\/\//); }
+    for (const e of all) { expect(Object.keys(e).filter(k => k !== 'ref').sort()).toEqual(['app', 'at', 'detail', 'from', 'kind', 'store', 'to', 'url', 'version']); expect('ref' in e).toBe(e.kind.startsWith('review_')); expect(e.url).toMatch(/^https:\/\//); }
   });
 });
 

From 882255a32f6d48f1f0b2a0f23276529f6885e7d0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 14:44:51 +0700
Subject: [PATCH 119/255] storebound 0.8.46: version in package.json and every
 copy, CHANGELOG 0.8.46 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index c8eb804..9bec984 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.45",
+      "version": "0.8.46",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5fda118..c2f327a 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.45",
+  "version": "0.8.46",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 686385b..deeb48a 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.45",
+  "version": "0.8.46",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 452d61d..4796754 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.46 · 2026-10-23
+
 - `storebound watch` has an `ingest` sink (`--notify ingest`, `ingest` in ~/.storebound/watch.json): a JSON POST per event to a push ingest endpoint with a Bearer token read from a file at send time (refused when group or world readable), 8 KiB body cap, 60 sends a minute, one retry on 5xx; `watch test` covers it.
 - Ship-step contract for release pipelines (docs/ship-step.md): `play build | upload | release`, `apple build | upload | submit | resubmit` exit 0 ok, 1 failure, 2 usage, 3 needs the owner (with `error.code` and the console deep link), 4 store refused, 7 nothing to do; `--json` ends with exactly one result line on stdout, `--result-file` writes it atomically (also on failure), `--progress json` gives one JSON line per phase on stderr.
 - `--env-file <path>` loads KEY=VALUE secrets before the credentials resolve (POSIX: mode 600 or stricter) and every known secret value is scrubbed from stdout, stderr and the result file; `--version-from version.json` takes the version and build ({version, build}, {versionName, versionCode}, {marketing, build}).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 59314c8..3976033 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.45",
+  "version": "0.8.46",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 1a0bba4..37d04ba 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.45"
+version = "0.8.46"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 6786f24..11955e7 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.45"
+version = "0.8.46"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 6b05a03..e88e3a6 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.45",
+  "version": "0.8.46",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 4e6b7b4..ecd29b6 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.45",
+  "version": "0.8.46",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index d1723b0..25554d3 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.45",
+  "version": "0.8.46",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From b0641c1fc8215361e590753bf9c583c0fe75d251 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 16:52:28 +0800
Subject: [PATCH 120/255] play products: clamp regional prices to Play's
 min/max, per-product results; apple iap: skip live localizations, per-product
 results

---
 CHANGELOG.md                          |   3 +
 cli/apple/iap.ts                      |  36 +++++--
 cli/apple/subscriptions.ts            |  30 ++++--
 cli/data/flags.json                   |  34 +++----
 cli/lib/args.ts                       |   2 +-
 cli/lib/loc-lock.ts                   |  16 +++
 cli/lib/play-limits.ts                |  78 +++++++++++++++
 cli/play/products.ts                  | 109 ++++++++++++++------
 cli/play/subscriptions.ts             |  27 ++++-
 skills/store-pitfalls/SKILL.md        |  27 +++++
 tests/helpers/fake-stores.ts          |  26 ++++-
 tests/price-limits-locked-loc.test.ts | 137 ++++++++++++++++++++++++++
 12 files changed, 456 insertions(+), 69 deletions(-)
 create mode 100644 cli/lib/loc-lock.ts
 create mode 100644 cli/lib/play-limits.ts
 create mode 100644 tests/price-limits-locked-loc.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4796754..7625693 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- `play products` / `play subscriptions`: regions outside Play's min / max (a 649.99 USD product in KR: "must be between ₩70 and ₩600,000") are flagged in the dry run (old -> new) and clamped to the bound on write with a warning; `--skip-out-of-range-regions` leaves them out. Limits Play reports in a 400 are learned (`.storebound/play-price-limits.json`) and the write is retried. A product or subscription that fails no longer stops the others: per-product results, exit 1 at the end.
+- `apple iap` / `apple subscriptions`: edits to approved (ACTIVE) localizations, which App Store Connect refuses with 409 UNMODIFIABLE, are marked "not editable now" in the dry run and skipped with a warning on write; prices and the other changes still apply. One IAP failing no longer stops the rest (results at the end, exit 1).
+
 ## 0.8.46 · 2026-10-23
 
 - `storebound watch` has an `ingest` sink (`--notify ingest`, `ingest` in ~/.storebound/watch.json): a JSON POST per event to a push ingest endpoint with a Bearer token read from a file at send time (refused when group or world readable), 8 KiB body cap, 60 sends a minute, one retry on 5xx; `watch test` covers it.
diff --git a/cli/apple/iap.ts b/cli/apple/iap.ts
index 39cc4f7..2b684a9 100644
--- a/cli/apple/iap.ts
+++ b/cli/apple/iap.ts
@@ -13,7 +13,8 @@ import { APPLE_IAP_LIMITS } from '../lib/copy';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { dryPlan, type PlanRow } from '../lib/dry';
-import { done, log, step } from '../lib/log';
+import { isLockedLocState, isUnmodifiableError, lockedLocNote } from '../lib/loc-lock';
+import { done, log, step, warn } from '../lib/log';
 import { LAG_HINT, reportMissing } from '../lib/store-lag';
 import { appleTerritory, nearestPrices, samePrice } from '../lib/money';
 import { createOnce, findOrCreate, getById } from '../lib/upsert';
@@ -27,8 +28,9 @@ export const APPLE_IAP_TYPE = { consumable: 'CONSUMABLE', non_consumable: 'NON_C
 // one plan line per change: store texts carry line breaks, which broke the dry-run table
 const clip = (s: string, n = 40): string => { const a = [...s.replace(/\s+/g, ' ').trim()]; return a.length > n ? `${a.slice(0, n - 1).join('')}…` : a.join(''); };
 
-export type IapLocalization = { locale: string; id?: string; name: string; description: string };
-export type IapLocalizationChange = { locale: string; id: string; attrs: { name?: string; description?: string }; note: string };
+export type IapLocalization = { locale: string; id?: string; name: string; description: string; state?: string };
+/** `locked`: the localization is live (APPROVED / ACTIVE) and Apple refuses the edit; the note says so. */
+export type IapLocalizationChange = { locale: string; id: string; attrs: { name?: string; description?: string }; note: string; locked?: string };
 /** Existing locales whose name/description differ from the config: the attributes to PATCH and a short plan note. */
 export function iapLocalizationChanges(store: IapLocalization[], wanted: IapLocalization[]): IapLocalizationChange[] {
   const out: IapLocalizationChange[] = [];
@@ -39,7 +41,9 @@ export function iapLocalizationChanges(store: IapLocalization[], wanted: IapLoca
     const parts: string[] = [];
     if ((s.name ?? '') !== w.name) { attrs.name = w.name; parts.push(`name "${clip(s.name ?? '')}" -> "${clip(w.name)}"`); }
     if ((s.description ?? '') !== w.description) { attrs.description = w.description; parts.push(`description "${clip(s.description ?? '')}" -> "${clip(w.description)}"`); }
-    if (parts.length) out.push({ locale: w.locale, id: s.id, attrs, note: `localization ${w.locale}: ${parts.join(', ')}` });
+    if (!parts.length) continue;
+    const locked = isLockedLocState(s.state) ? s.state : undefined;
+    out.push({ locale: w.locale, id: s.id, attrs, note: `localization ${w.locale}: ${locked ? `${lockedLocNote(locked)}: ` : ''}${parts.join(', ')}`, ...(locked ? { locked } : {}) });
   }
   return out;
 }
@@ -94,7 +98,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const live = (await appleCurrent(c, id, p.id, false)).rows.filter(x => !x.startDate || x.startDate <= new Date().toISOString().slice(0, 10));
     return wanted(p).flatMap(w => { const cur = live.find(x => x.territory === w.territory); return cur && !samePrice(cur.price, w.price) ? [`${w.territory} ${cur.price} -> ${w.price}`] : []; });
   }
-  const locOf = (x: J) => ({ locale: x.attributes.locale as string, name: (x.attributes.name ?? '') as string, description: (x.attributes.description ?? '') as string });
+  const locOf = (x: J) => ({ locale: x.attributes.locale as string, name: (x.attributes.name ?? '') as string, description: (x.attributes.description ?? '') as string, state: x.attributes.state as string | undefined });
   const wantedLocs = (p: (typeof products)[number]) => Object.entries(p.listings).flatMap(([k, l]) => { const locale = langs.get(k)?.apple; return locale ? [{ locale, name: l.title, description: l.description }] : []; });
   const wantedAttrs = (p: (typeof products)[number]): IapAttributes => ({ name: p.referenceName ?? Object.values(p.listings)[0]!.title, reviewNote: p.reviewNote, familySharable: p.familySharable });
   /** The store's availability as territory ids + the new-territories flag (null when there is none). */
@@ -117,11 +121,14 @@ export async function run(ctx: Ctx): Promise<void> {
   const allowPrices = ctx.args.has('allow-price-changes');
   const rows: PlanRow[] = [];
   const created: string[] = [];
+  const results: { id: string; ok: boolean; text: string }[] = [];
+  let skippedLocs = 0;
   for (const [i, p] of products.entries()) {
     const tag = step(i + 1, products.length, p.id);
     const lookup = async (): Promise<J | null> => (await c.asc('GET', `/v1/apps/${appId}/inAppPurchasesV2?filter[productId]=${encodeURIComponent(p.id)}`)).data
       ?.find((x: J) => x.attributes?.productId === p.id) ?? null;
     if (dry) { const f = await lookup(); rows.push(await planProduct(p, f?.id, f?.attributes?.state)); continue; }
+    try {
     // product ids are unique per app: a 409 finds the existing one; the journal covers the list lag after a create
     const first = Object.values(p.listings)[0]!;
     const made = await findOrCreate<J>({ what: `in-app purchase ${p.id}`, tag: 'apple', unique: true, find: lookup,
@@ -148,10 +155,14 @@ export async function run(ctx: Ctx): Promise<void> {
       log('apple', `  localization ${locale}`);
     }
     for (const ch of iapLocalizationChanges(storeLocs.map((x: J) => ({ id: x.id, ...locOf(x) })), wantedLocs(p))) {
+      if (ch.locked) { warn('apple', `  ${ch.note}; skipped`); skippedLocs++; continue; }
       const l = Object.entries(p.listings).find(([k]) => langs.get(k)?.apple === ch.locale)![1];
       if ([...l.description].length > APPLE_IAP_LIMITS.description) throw new Error(`${p.id} ${ch.locale}: description over ${APPLE_IAP_LIMITS.description} characters (Apple limit)`);
       if ([...l.title].length > APPLE_IAP_LIMITS.name) throw new Error(`${p.id} ${ch.locale}: name over ${APPLE_IAP_LIMITS.name} characters (Apple limit)`);
-      await c.asc('PATCH', `/v1/inAppPurchaseLocalizations/${ch.id}`, { data: { type: 'inAppPurchaseLocalizations', id: ch.id, attributes: ch.attrs } });
+      try { await c.asc('PATCH', `/v1/inAppPurchaseLocalizations/${ch.id}`, { data: { type: 'inAppPurchaseLocalizations', id: ch.id, attributes: ch.attrs } }); } catch (e) {
+        if (!isUnmodifiableError(e)) throw e;
+        warn('apple', `  localization ${ch.locale}: ${lockedLocNote('ACTIVE')}; skipped`); skippedLocs++; continue;
+      }
       log('apple', `  ${ch.note}`);
     }
     if (!made.created) {
@@ -183,6 +194,12 @@ export async function run(ctx: Ctx): Promise<void> {
           availableTerritories: { data: territories.map(t => ({ type: 'territories', id: t })) } } } });
       log('apple', `  ${avail?.data ? availDiff.note : `available in ${territories.length} territories + new ones`}`);
     }
+    results.push({ id: p.id, ok: true, text: 'ok' });
+    } catch (e) {
+      const msg = (e as Error).message.replace(/\s+/g, ' ').slice(0, 300);
+      warn('apple', `${tag}: FAILED: ${msg}; going on with the next product`);
+      results.push({ id: p.id, ok: false, text: msg });
+    }
   }
   if (dry) {
     console.log(dryPlan('apple iap', rows));
@@ -196,6 +213,13 @@ export async function run(ctx: Ctx): Promise<void> {
     const listed = (await c.all(`/v1/apps/${appId}/inAppPurchasesV2?limit=200`)).map((x: J) => x.attributes.productId as string);
     if (reportMissing('apple', 'new products', created, listed, { fail: false }).length) log('apple', 'wait a minute before apple iap-review, or it cannot see them');
   }
+  const failed = results.filter(r => !r.ok);
+  if (skippedLocs) warn('apple', `${skippedLocs} localization edit(s) skipped: the localization is live (APPROVED / ACTIVE). The text changes with the next review of the product, or add a new localization.`);
+  if (failed.length) {
+    process.exitCode = 1;
+    warn('apple', `${failed.length} of ${results.length} product(s) failed (${failed.map(f => f.id).join(', ')}): ${failed.map(f => `${f.id}: ${f.text}`).join(' | ')}. The others are written. Fix the cause, run \`storebound apple iap --dry\`, then again with --yes.`);
+    return;
+  }
   done('apple', 'iap done (next: apple iap-review for the review screenshots)');
 
   /** What a real run would do to one product, from read-only calls. */
diff --git a/cli/apple/subscriptions.ts b/cli/apple/subscriptions.ts
index d892670..9ac596c 100644
--- a/cli/apple/subscriptions.ts
+++ b/cli/apple/subscriptions.ts
@@ -18,6 +18,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { type OfferCodeDef, sellsOn, type Subscription, type SubscriptionGroup } from '../lib/config';
 import type { Ctx } from '../lib/ctx';
+import { isLockedLocState, isUnmodifiableError, lockedLocNote } from '../lib/loc-lock';
 import { confirm, need } from '../lib/ctx';
 import { done, log, step, warn } from '../lib/log';
 import { allowPriceChanges, type HeldPrice, heldSection, holdPriceChanges, withoutYes } from '../lib/price-gate';
@@ -73,7 +74,7 @@ const heldOf = (id: string, changes: { territory: string; from: number | null; t
 /** Everything an existing subscription has that differs from the config (pure data; the run prints and applies it). */
 export interface SubDrift {
   attrs: AppleAttrDiff;
-  locs: { id: string; loc: string; patch: Record<string, string> }[];
+  locs: { id: string; loc: string; patch: Record<string, string>; locked?: string }[];
   availability: { missing: string[]; newTerritories: boolean } | null;
   intro: string[];
 }
@@ -88,7 +89,7 @@ export async function readSubDrift(c: Asc, s: Subscription, id: string, locale:
     const loc = locale.get(lang);
     const h = loc ? haveLocs.find((x: J) => x.attributes.locale === loc) : undefined;
     const patch = h ? appleLocDiff(l, { name: h.attributes.name, description: h.attributes.description }) : null;
-    if (h && patch && loc) locs.push({ id: h.id, loc, patch });
+    if (h && patch && loc) locs.push({ id: h.id, loc, patch, ...(isLockedLocState(h.attributes.state) ? { locked: h.attributes.state as string } : {}) });
   }
   let availability: SubDrift['availability'] = null;
   const av = (await c.maybe(`/v1/subscriptions/${id}/subscriptionAvailability`))?.data;
@@ -103,14 +104,14 @@ export async function readSubDrift(c: Asc, s: Subscription, id: string, locale:
 }
 
 /** Group localizations whose name / customAppName differ from the config. Read-only. */
-export async function readGroupLocDrift(c: Asc, g: SubscriptionGroup, groupId: string, locale: Map<string, string | undefined>): Promise<{ id: string; loc: string; patch: Record<string, string> }[]> {
+export async function readGroupLocDrift(c: Asc, g: SubscriptionGroup, groupId: string, locale: Map<string, string | undefined>): Promise<{ id: string; loc: string; patch: Record<string, string>; locked?: string }[]> {
   const have = await c.all(`/v1/subscriptionGroups/${groupId}/subscriptionGroupLocalizations?limit=200`);
-  const out: { id: string; loc: string; patch: Record<string, string> }[] = [];
+  const out: { id: string; loc: string; patch: Record<string, string>; locked?: string }[] = [];
   for (const [lang, l] of Object.entries(g.listings)) {
     const loc = locale.get(lang);
     const h = loc ? have.find((x: J) => x.attributes.locale === loc) : undefined;
     const patch = h ? appleGroupLocDiff(l, { name: h.attributes.name, customAppName: h.attributes.customAppName }) : null;
-    if (h && patch && loc) out.push({ id: h.id, loc, patch });
+    if (h && patch && loc) out.push({ id: h.id, loc, patch, ...(isLockedLocState(h.attributes.state) ? { locked: h.attributes.state as string } : {}) });
   }
   return out;
 }
@@ -120,7 +121,7 @@ export function driftLines(id: string, d: SubDrift): string[] {
   const av = d.availability;
   return [
     ...d.attrs.text.map(x => `${id}: ${x}`), ...d.attrs.report,
-    ...d.locs.map(l => `${id} ${l.loc}: ${Object.keys(l.patch).join(' + ')} differ from the config`),
+    ...d.locs.map(l => `${id} ${l.loc}: ${Object.keys(l.patch).join(' + ')} differ from the config${l.locked ? ` - ${lockedLocNote(l.locked)}` : ''}`),
     ...(av ? [`${id}: availability${av.missing.length ? ` ${av.missing.length} territories missing (${av.missing.slice(0, 5).join(', ')})` : ''}${av.newTerritories ? ' new territories off' : ''}`] : []),
     ...d.intro,
   ];
@@ -160,7 +161,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const heldDry: HeldPrice[] = [];
     for (const g of groups) {
       const sg = state.groups.find(x => x.referenceName === g.name);
-      if (sg) for (const d of await readGroupLocDrift(c, g, sg.id, locale)) log(TAG, `group "${g.name}" ${d.loc}: ${Object.keys(d.patch).join(' + ')} differ from the config`);
+      if (sg) for (const d of await readGroupLocDrift(c, g, sg.id, locale)) log(TAG, `group "${g.name}" ${d.loc}: ${Object.keys(d.patch).join(' + ')} differ from the config${d.locked ? ` - ${lockedLocNote(d.locked)}` : ''}`);
       for (const s of g.subscriptions) {
         const cur = state.subscriptions.find(x => x.productId === s.id);
         if (!cur) continue;
@@ -209,7 +210,11 @@ export async function run(ctx: Ctx): Promise<void> {
     }
     if (state.groups.some(x => x.id === groupId)) {
       for (const d of await readGroupLocDrift(c, g, groupId, locale)) {
-        await c.asc('PATCH', `/v1/subscriptionGroupLocalizations/${d.id}`, appleGroupLocPatchBody(d.id, d.patch));
+        if (d.locked) { warn(TAG, `  group ${d.loc}: ${lockedLocNote(d.locked)}; skipped`); continue; }
+        try { await c.asc('PATCH', `/v1/subscriptionGroupLocalizations/${d.id}`, appleGroupLocPatchBody(d.id, d.patch)); } catch (e) {
+          if (!isUnmodifiableError(e)) throw e;
+          warn(TAG, `  group ${d.loc}: ${lockedLocNote('ACTIVE')}; skipped`); continue;
+        }
         log(TAG, `  group ${d.loc}: ${Object.keys(d.patch).join(' + ')} updated`);
       }
     }
@@ -242,7 +247,14 @@ export async function run(ctx: Ctx): Promise<void> {
         // and the period / family sharing are only reported (Apple cannot change them)
         const d = await readSubDrift(c, s, subId, locale, territories);
         if (Object.keys(d.attrs.patch).length) { await c.asc('PATCH', `/v1/subscriptions/${subId}`, appleSubPatchBody(subId, d.attrs.patch)); log(TAG, `  attributes updated: ${d.attrs.text.join(', ')}`); }
-        for (const l of d.locs) { await c.asc('PATCH', `/v1/subscriptionLocalizations/${l.id}`, appleLocPatchBody(l.id, l.patch)); log(TAG, `  ${l.loc}: ${Object.keys(l.patch).join(' + ')} updated`); }
+        for (const l of d.locs) {
+          if (l.locked) { warn(TAG, `  ${l.loc}: ${lockedLocNote(l.locked)}; skipped`); continue; }
+          try { await c.asc('PATCH', `/v1/subscriptionLocalizations/${l.id}`, appleLocPatchBody(l.id, l.patch)); } catch (e) {
+            if (!isUnmodifiableError(e)) throw e;
+            warn(TAG, `  ${l.loc}: ${lockedLocNote('ACTIVE')}; skipped`); continue;
+          }
+          log(TAG, `  ${l.loc}: ${Object.keys(l.patch).join(' + ')} updated`);
+        }
         if (d.availability) { await c.asc('POST', '/v1/subscriptionAvailabilities', appleAvailabilityBody(subId, territories)); log(TAG, `  availability set again: ${territories.length} territories + new ones`); }
         for (const x of [...d.attrs.report, ...d.intro]) warn(TAG, x);
       }
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9b96343..b19831e 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -133,6 +133,7 @@
    "only-decreases",
    "out",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -174,6 +175,7 @@
    "only-decreases",
    "out",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -293,6 +295,7 @@
    "only-decreases",
    "out",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -356,6 +359,7 @@
    "only-decreases",
    "out",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -416,6 +420,7 @@
    "only-decreases",
    "out",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -624,6 +629,7 @@
    "play",
    "react-native",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -705,7 +711,8 @@
   ],
   "play next-version-code": [],
   "play products": [
-   "allow-price-changes"
+   "allow-price-changes",
+   "skip-out-of-range-regions"
   ],
   "play release": [
    "alpha",
@@ -740,7 +747,8 @@
   ],
   "play status": [
    "allow-price-changes",
-   "review-sent"
+   "review-sent",
+   "skip-out-of-range-regions"
   ],
   "play subscriptions": [
    "all",
@@ -762,6 +770,7 @@
    "out",
    "prune-languages",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -803,6 +812,7 @@
    "only-decreases",
    "out",
    "reconvert",
+   "skip-out-of-range-regions",
    "source",
    "store",
    "threshold",
@@ -1026,6 +1036,7 @@
    "react-native",
    "repair-stuck",
    "signature",
+   "skip-out-of-range-regions",
    "src",
    "unity",
    "variant",
@@ -1263,6 +1274,7 @@
    "signature",
    "since",
    "size",
+   "skip-out-of-range-regions",
    "sku",
    "source",
    "src",
@@ -1391,9 +1403,6 @@
   "apple game-center": [
    "storebound apple game-center [status] [--dry] [--yes] [--json]"
   ],
-  "apple iap": [
-   "storebound apple iap [--dry] [--only id1,id2] [--allow-price-changes]"
-  ],
   "apple iap-review": [
    "storebound apple iap-review [--dry]"
   ],
@@ -1407,9 +1416,6 @@
   "apple next-build": [
    "storebound apple next-build            -> 42"
   ],
-  "apple offer-codes": [
-   "storebound apple offer-codes [--only id1,id2] [--codes] [--dry] [--yes] [--json]"
-  ],
   "apple ppo": [
    "storebound apple ppo status [--json]",
    "storebound apple ppo create --variant b[,c] [--name \"...\"] [--traffic 30] [--dry]",
@@ -1434,9 +1440,6 @@
   "apple resubmit": [
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]"
   ],
-  "apple review-details": [
-   "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
-  ],
   "apple screenshots": [
    "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
    "storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)"
@@ -1453,9 +1456,6 @@
   "apple submit": [
    "storebound apple submit --build <n> [--version 1.0.0] [--resolve-iaps] [--dry] [--yes] [--json]"
   ],
-  "apple subscriptions": [
-   "storebound apple subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--codes] [--yes] [--allow-price-changes]"
-  ],
   "apple testflight": [
    "storebound apple testflight status [--json]                          groups, testers per group, recent builds + beta states",
    "storebound apple testflight groups                                   list the groups and what the config would create (read-only)",
@@ -1596,9 +1596,6 @@
   "play next-version-code": [
    "storebound play next-version-code      -> 43"
   ],
-  "play products": [
-   "storebound play products [--dry] [--only id1,id2] [--yes] [--allow-price-changes]"
-  ],
   "play release": [
    "storebound play release app-release.aab [--internal completed] [--production draft] [--name \"1.0.0 (3)\"] [--dry]",
    "storebound play release --version-code 3 --production draft",
@@ -1613,9 +1610,6 @@
   "play status": [
    "storebound play status [--json] [--review-sent]"
   ],
-  "play subscriptions": [
-   "storebound play subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--yes] [--allow-price-changes]"
-  ],
   "play upload": [
    "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]"
   ],
diff --git a/cli/lib/args.ts b/cli/lib/args.ts
index 5e68b04..780121c 100644
--- a/cli/lib/args.ts
+++ b/cli/lib/args.ts
@@ -20,7 +20,7 @@ export function parseArgs(argv: string[], booleans: string[] = []): Args {
   const repeated = new Map<string, string[]>();
   const set = (k: string, v: string) => { flags.set(k, v); repeated.set(k, [...(repeated.get(k) ?? []), v]); };
   const _: string[] = [];
-  const bool = new Set(['dry', 'yes', 'allow-price-changes', 'help', 'json', 'verbose', 'all-pages', 'apply', 'resume', 'force', 'force-unlock', 'include-drafts', 'not-sent-for-review', 'review-sent', 'once', ...booleans]);
+  const bool = new Set(['dry', 'yes', 'allow-price-changes', 'skip-out-of-range-regions', 'help', 'json', 'verbose', 'all-pages', 'apply', 'resume', 'force', 'force-unlock', 'include-drafts', 'not-sent-for-review', 'review-sent', 'once', ...booleans]);
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i]!;
     if (!a.startsWith('--')) { _.push(a); continue; }
diff --git a/cli/lib/loc-lock.ts b/cli/lib/loc-lock.ts
new file mode 100644
index 0000000..b0470a7
--- /dev/null
+++ b/cli/lib/loc-lock.ts
@@ -0,0 +1,16 @@
+// App Store Connect refuses to edit a localization that is already live: PATCH /v1/inAppPurchaseLocalizations/<id> (and
+// subscriptionLocalizations, subscriptionGroupLocalizations) answers 409 ENTITY_ERROR.ATTRIBUTE.INVALID.UNMODIFIABLE
+// "Cannot edit InAppPurchaseLocalization when it is in ACTIVE state" once the product was approved. The text then
+// changes only with the next review of the product (or a new localization). The localization's `state` is read, the
+// dry run marks such edits "not editable now" and the write skips them with a warning; a 409 of this kind that still
+// comes (a state we did not know) is skipped the same way instead of ending the run. Pure.
+
+/** Localization states that cannot be edited (Apple's own error names ACTIVE; the API lists APPROVED). */
+const LOCKED = new Set(['ACTIVE', 'APPROVED']);
+
+export const isLockedLocState = (state: unknown): boolean => typeof state === 'string' && LOCKED.has(state.toUpperCase());
+
+export const lockedLocNote = (state: string): string => `not editable now (state ${state}; changes ship with the next review of the product / needs a new localization)`;
+
+/** True for Apple's 409 UNMODIFIABLE answer to an edit of a live resource. */
+export const isUnmodifiableError = (e: unknown): boolean => /UNMODIFIABLE|Cannot edit \w+ when it is in \w+ state/i.test(e instanceof Error ? e.message : String(e));
diff --git a/cli/lib/play-limits.ts b/cli/lib/play-limits.ts
new file mode 100644
index 0000000..b409637
--- /dev/null
+++ b/cli/lib/play-limits.ts
@@ -0,0 +1,78 @@
+// Google Play refuses a regional price outside the region's min / max ("Price for KR must be between ₩70 and ₩600,000,
+// found ₩950,000"). convertRegionPrices converts a USD base per region and does not look at those limits, so a high USD
+// price (649.99) breaks the PATCH for a few regions and the run dies half way. The API does not list the limits, so:
+// a small seed table, every limit learned from a 400 (kept in <project>/.storebound/play-price-limits.json so the next
+// dry run and write know it), and a clamp: by default the price is lowered (or raised) to the region's bound with a
+// warning; --skip-out-of-range-regions leaves the region out instead. Pure except load / save of the cache.
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fromMoney, type Money, toMoney } from './money';
+
+export interface RegionLimit { currency: string; min: number; max: number }
+export type RegionLimits = Record<string, RegionLimit>;
+
+/** Limits seen on live Play (extended by every 400 the run learns from). */
+export const SEED_LIMITS: RegionLimits = { KR: { currency: 'KRW', min: 70, max: 600000 } };
+
+export interface LimitError { region: string; min: number; max: number; found: number }
+
+/** "₩600,000" / "$1.99" / "1.234,50 €" -> number. Commas followed by exactly three digits are thousands separators. */
+export function parseLocalAmount(s: string): number {
+  let t = s.replace(/[^\d.,]/g, '');
+  t = /,\d{3}(?!\d)/.test(t) ? t.replace(/,(?=\d{3}(?!\d))/g, '') : t.replace(',', '.');
+  return Number(t);
+}
+
+/** The region and bounds from Play's 400 text, or null when it is another error. */
+export function parseLimitError(message: string): LimitError | null {
+  const m = /Price for ([A-Z]{2}) must be between (\S+) and (\S+?),? found (\S+?)\.?(?:["\s]|$)/.exec(message);
+  if (!m) return null;
+  const [min, max, found] = [parseLocalAmount(m[2]!), parseLocalAmount(m[3]!), parseLocalAmount(m[4]!)];
+  return [min, max, found].every(Number.isFinite) && max >= min ? { region: m[1]!, min, max, found } : null;
+}
+
+const cacheFile = (root: string): string => join(root, '.storebound', 'play-price-limits.json');
+
+export function loadLimits(root: string): RegionLimits {
+  let learned: RegionLimits = {};
+  try { if (existsSync(cacheFile(root))) learned = JSON.parse(readFileSync(cacheFile(root), 'utf8')) as RegionLimits; } catch { /* unreadable cache: seed only */ }
+  return { ...SEED_LIMITS, ...learned };
+}
+
+export function saveLimits(root: string, limits: RegionLimits): void {
+  try {
+    mkdirSync(dirname(cacheFile(root)), { recursive: true });
+    writeFileSync(cacheFile(root), JSON.stringify(limits, null, 2));
+  } catch { /* the cache is a convenience */ }
+}
+
+export interface Clamp { region: string; currency: string; from: number; to: number | null; bound: 'max' | 'min' }
+export const clampText = (c: Clamp): string => `${c.region} ${c.currency} ${c.from} -> ${c.to === null ? 'region left out' : c.to} (${c.bound === 'max' ? 'above' : 'below'} Play's ${c.bound} for the region)`;
+
+/**
+ * Regions outside their min / max: clamped to the bound, or removed with skip. Regions without a known limit, or priced
+ * in another currency than the limit, are untouched. Returns new rows; the input is not changed.
+ */
+export function applyLimits<T extends { regionCode: string; price: Money }>(regions: T[], limits: RegionLimits, skip = false): { regions: T[]; clamps: Clamp[] } {
+  const out: T[] = [];
+  const clamps: Clamp[] = [];
+  for (const r of regions) {
+    const l = limits[r.regionCode];
+    if (!l || l.currency !== r.price.currencyCode) { out.push(r); continue; }
+    const v = fromMoney(r.price);
+    const to = v > l.max ? l.max : v < l.min ? l.min : null;
+    if (to === null) { out.push(r); continue; }
+    const bound = to === l.max ? 'max' : 'min';
+    clamps.push({ region: r.regionCode, currency: l.currency, from: v, to: skip ? null : to, bound });
+    if (!skip) out.push({ ...r, price: toMoney(r.price.currencyCode, to) });
+  }
+  return { regions: out, clamps };
+}
+
+/** Learn a limit from Play's 400 for a region priced in `currency`; true when it is new or different. */
+export function learnLimit(limits: RegionLimits, e: LimitError, currency: string): boolean {
+  const cur = limits[e.region];
+  if (cur && cur.currency === currency && cur.min === e.min && cur.max === e.max) return false;
+  limits[e.region] = { currency, min: e.min, max: e.max };
+  return true;
+}
diff --git a/cli/play/products.ts b/cli/play/products.ts
index c4607bc..02c22e9 100644
--- a/cli/play/products.ts
+++ b/cli/play/products.ts
@@ -14,6 +14,11 @@
 // a "price changes on existing products (held)" section. (lib/price-gate.ts)
 // Play has no non-renewing type: a `non_renewing` product is a plain one-time product here (your app consumes it
 // when the access ends). Products with `platforms` that leave out android are skipped.
+// Regional price limits: Play refuses a price outside a region's min / max (a 649.99 USD product in KR: "must be between
+// ₩70 and ₩600,000"). The dry run lists those regions (old -> new); a write clamps them to the bound with a warning, or
+// leaves them out with --skip-out-of-range-regions. Limits Play reports in a 400 are learned, kept in
+// .storebound/play-price-limits.json and the write retried. A product that fails does not stop the others: every
+// product gets a result line, and the run exits 1 at the end when any failed (lib/play-limits.ts).
 // --dry ends with the standard plan table (lib/dry.ts). After a real run the product list is read again: a product
 // created a moment ago can be missing from it for a minute, and that gap is named (docs/pitfalls.md).
 import { playCodes, sellsOn } from '../lib/config';
@@ -24,6 +29,7 @@ import { done, log, step, warn } from '../lib/log';
 import { allowPriceChanges, type HeldPrice, heldSection, holdPriceChanges } from '../lib/price-gate';
 import { LAG_HINT, reportMissing } from '../lib/store-lag';
 import { fromMoney, type Money, playRegionConfigs, type RegionConfig, toMoney } from '../lib/money';
+import { applyLimits, type Clamp, clampText, learnLimit, loadLimits, parseLimitError, saveLimits } from '../lib/play-limits';
 import { playClient } from './client';
 
 const OPTION = 'buy';
@@ -107,36 +113,44 @@ export async function run(ctx: Ctx): Promise<void> {
   const play = await playClient(root, pkg);
   const existing = new Map((await listOneTimeProducts(play)).map(p => [p.productId, p]));
   const langs = new Map(config.languages.map(l => [l.id, l]));
+  const limits = loadLimits(root);
+  const skipOut = ctx.args.has('skip-out-of-range-regions');
 
-  const plan: { p: (typeof products)[number]; tag: string; body: Record<string, unknown>; version: string; cur?: Existing; changes: ProductChange[]; regions: number; listings: number }[] = [];
+  const plan: { p: (typeof products)[number]; tag: string; body: Record<string, unknown>; version: string; cur?: Existing; changes: ProductChange[]; regions: number; listings: number;
+    all: RegionConfig[]; clamps: Clamp[]; mkBody: (regions: RegionConfig[]) => Record<string, unknown> }[] = [];
   for (const [i, p] of products.entries()) {
     const tag = step(i + 1, products.length, p.id);
     const conv = await play.call<Converted>('POST', `${play.API}/pricing:convertRegionPrices`, { price: toMoney('USD', p.usd) });
     if (!conv.convertedRegionPrices || !conv.convertedOtherRegionsPrice) throw new Error(`${p.id}: convertRegionPrices returned no prices`);
-    const regions = playRegionConfigs(conv.convertedRegionPrices, p.overrides);
+    const all = playRegionConfigs(conv.convertedRegionPrices, p.overrides);
+    const lim = applyLimits(all, limits, skipOut);
+    const regions = lim.regions;
     const listings = Object.entries(p.listings).flatMap(([id, l]) =>
       playCodes(langs.get(id)!).map(languageCode => ({ languageCode, title: l.title, description: l.description })));
     if (!listings.length) throw new Error(`${p.id}: no listing language has a Play code`);
-    const body = {
+    const mkBody = (rs: RegionConfig[]): Record<string, unknown> => ({
       packageName: pkg, productId: p.id, listings,
       purchaseOptions: [{
         purchaseOptionId: OPTION,
         buyOption: { legacyCompatible: true, multiQuantityEnabled: false },
-        regionalPricingAndAvailabilityConfigs: regions,
-        newRegionsConfig: { usdPrice: conv.convertedOtherRegionsPrice.usdPrice, eurPrice: conv.convertedOtherRegionsPrice.eurPrice, availability: 'AVAILABLE' },
+        regionalPricingAndAvailabilityConfigs: rs,
+        newRegionsConfig: { usdPrice: conv.convertedOtherRegionsPrice!.usdPrice, eurPrice: conv.convertedOtherRegionsPrice!.eurPrice, availability: 'AVAILABLE' },
       }],
-    };
+    });
+    const body = mkBody(regions);
     const cur = existing.get(p.id);
     const changes = productChanges(cur, { listings, regions, newRegions: conv.convertedOtherRegionsPrice });
     const what = !changes.length ? 'unchanged' : !cur ? `${dry ? 'would create' : 'create'} · ${regions.length} regions · ${listings.length} listings`
       : `${dry ? 'would update' : 'update'} ${changes.map(c => c.text).join('; ')}`;
     log('play', `${tag}: ${what}${dry ? ' (dry)' : ''}`);
-    plan.push({ p, tag, body, version: conv.regionVersion?.version ?? '2022/02', cur, changes, regions: regions.length, listings: listings.length });
+    for (const c of lim.clamps) warn('play', `${tag}: price limit ${clampText(c)}${skipOut ? '' : ' (clamped; --skip-out-of-range-regions leaves such regions out)'}`);
+    plan.push({ p, tag, body, version: conv.regionVersion?.version ?? '2022/02', cur, changes, regions: regions.length, listings: listings.length, all, clamps: lim.clamps, mkBody });
   }
   if (dry) {
     console.log(dryPlan('play products', plan.map(x => !x.changes.length ? { item: x.p.id, action: 'keep' }
       : !x.cur ? { item: x.p.id, action: 'create', detail: `${x.regions} regions, ${x.listings} listings, USD ${x.p.usd}` }
         : { item: x.p.id, action: x.changes.some(c => c.owner) ? 'update (owner: price change, --allow-price-changes)' : 'update', detail: x.changes.map(c => c.text).join('; ') })));
+    for (const x of plan.filter(y => y.clamps.length && y.changes.length)) console.log(`price limits on ${x.p.id} (USD ${x.p.usd}): ${x.clamps.map(clampText).join('; ')}${skipOut ? '' : ' -> written clamped to the bound'}`);
     const h = heldSection(plan.filter(x => x.cur && x.changes.some(c => c.owner)).map(x => ({ id: x.p.id, changes: x.changes.flatMap(c => c.prices ?? []) })), ctx.args.has('allow-price-changes'));
     if (h) console.log(h);
     const absent = plan.filter(x => !x.cur).map(x => x.p.id);
@@ -156,33 +170,68 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!activateOk) warn('play', `activation of ${activate.length} existing product(s) skipped: confirm with --yes or in a terminal`);
   const held: HeldPrice[] = [];
 
-  for (const x of plan) {
-    if (!x.changes.length) continue;
-    const id = encodeURIComponent(x.p.id);
-    const v = encodeURIComponent(x.version);
-    const ownerChange = !!x.cur && x.changes.some(c => c.owner);
-    if (x.cur && ownerChange && !priceOk) {
-      held.push({ id: x.p.id, changes: x.changes.flatMap(c => c.prices ?? []) });
-      if (x.changes.some(c => c.text.startsWith('listings '))) {
-        await play.call('PATCH', `${play.API}/onetimeproducts/${id}?regionsVersion.version=${v}&updateMask=listings`, x.body);
-        log('play', `${x.tag}: listings updated (prices unchanged)`);
+  const results: { id: string; ok: boolean; text: string }[] = [];
+  /** PATCH; a 400 naming a region's min / max is learned, the region clamped (or left out) and the PATCH sent again. */
+  async function patch(x: (typeof plan)[number], url: string): Promise<void> {
+    for (let n = 0; ; n++) {
+      try { await play.call('PATCH', url, x.body); return; } catch (e) {
+        const le = parseLimitError((e as Error).message);
+        const cur = le ? x.all.find(r => r.regionCode === le.region) : undefined;
+        if (!le || !cur || n >= 40 || !learnLimit(limits, le, cur.price.currencyCode)) throw e;
+        saveLimits(root, limits);
+        const lim = applyLimits(x.all, limits, skipOut);
+        x.regions = lim.regions.length; x.clamps = lim.clamps; x.body = x.mkBody(lim.regions);
+        warn('play', `${x.tag}: Play limit for ${le.region} is ${le.min}-${le.max} (saved in .storebound/play-price-limits.json); ${skipOut ? 'region left out' : 'clamped'}, sending again`);
       }
-    } else if (!x.cur || x.changes.some(c => c.owner || c.text.startsWith('listings '))) {
-      const mask = x.cur && !ownerChange ? 'listings' : 'listings,purchaseOptions';
-      await play.call('PATCH', `${play.API}/onetimeproducts/${id}?allowMissing=true&regionsVersion.version=${v}&updateMask=${mask}`, x.body);
-      log('play', `${x.tag}: ${x.cur ? 'updated' : 'created'} · ${x.regions} regions · ${x.listings} listings`);
     }
-    // a new product's option starts as DRAFT; an existing one is activated after the confirmation
-    if (optionOf(x)?.state === 'ACTIVE' || (x.cur && (!activateOk || !activate.includes(x)))) continue;
-    try {
-      await play.call('POST', `${play.API}/oneTimeProducts/${id}/purchaseOptions:batchUpdateStates`, {
-        requests: [{ activatePurchaseOptionRequest: { packageName: pkg, productId: x.p.id, purchaseOptionId: OPTION } }],
-      });
-      log('play', `${x.tag}: purchase option activated`);
-    } catch (e) { warn('play', `${x.tag}: activate failed: ${(e as Error).message}`); }
   }
-  const created = plan.filter(x => !x.cur && x.changes.length).map(x => x.p.id);
+
+  for (const x of plan) {
+    if (!x.changes.length) { results.push({ id: x.p.id, ok: true, text: 'unchanged' }); continue; }
+    try {
+      const id = encodeURIComponent(x.p.id);
+      const v = encodeURIComponent(x.version);
+      const ownerChange = !!x.cur && x.changes.some(c => c.owner);
+      let text = x.cur ? 'updated' : 'created';
+      if (x.cur && ownerChange && !priceOk) {
+        held.push({ id: x.p.id, changes: x.changes.flatMap(c => c.prices ?? []) });
+        text = 'prices held for the owner';
+        if (x.changes.some(c => c.text.startsWith('listings '))) {
+          await patch(x, `${play.API}/onetimeproducts/${id}?regionsVersion.version=${v}&updateMask=listings`);
+          log('play', `${x.tag}: listings updated (prices unchanged)`);
+        }
+      } else if (!x.cur || x.changes.some(c => c.owner || c.text.startsWith('listings '))) {
+        const mask = x.cur && !ownerChange ? 'listings' : 'listings,purchaseOptions';
+        await patch(x, `${play.API}/onetimeproducts/${id}?allowMissing=true&regionsVersion.version=${v}&updateMask=${mask}`);
+        log('play', `${x.tag}: ${x.cur ? 'updated' : 'created'} · ${x.regions} regions · ${x.listings} listings`);
+      }
+      if (x.clamps.length) text += ` (${x.clamps.length} region(s) ${skipOut ? 'left out' : 'clamped'}: ${x.clamps.map(c => c.region).join(', ')})`;
+      // a new product's option starts as DRAFT; an existing one is activated after the confirmation
+      if (!(optionOf(x)?.state === 'ACTIVE' || (x.cur && (!activateOk || !activate.includes(x))))) {
+        try {
+          await play.call('POST', `${play.API}/oneTimeProducts/${id}/purchaseOptions:batchUpdateStates`, {
+            requests: [{ activatePurchaseOptionRequest: { packageName: pkg, productId: x.p.id, purchaseOptionId: OPTION } }],
+          });
+          log('play', `${x.tag}: purchase option activated`);
+        } catch (e) { warn('play', `${x.tag}: activate failed: ${(e as Error).message}`); text += ' (activation failed)'; }
+      }
+      results.push({ id: x.p.id, ok: true, text });
+    } catch (e) {
+      const msg = (e as Error).message.replace(/\s+/g, ' ').slice(0, 300);
+      warn('play', `${x.tag}: FAILED: ${msg}; going on with the next product`);
+      results.push({ id: x.p.id, ok: false, text: msg });
+    }
+  }
+  const failedIds = new Set(results.filter(r => !r.ok).map(r => r.id));
+  const created = plan.filter(x => !x.cur && x.changes.length && !failedIds.has(x.p.id)).map(x => x.p.id);
   if (created.length) reportMissing('play', 'new products', created, (await listOneTimeProducts(play)).map(p => p.productId), { fail: false });
   holdPriceChanges(held);
+  const failed = results.filter(r => !r.ok);
+  if (failed.length || plan.some(x => x.clamps.length)) for (const r of results) log('play', `result ${r.id}: ${r.ok ? 'ok' : 'FAILED'} · ${r.text}`);
+  if (failed.length) {
+    process.exitCode = 1;
+    warn('play', `${failed.length} of ${results.length} product(s) failed (${failed.map(f => f.id).join(', ')}); the others are written. Fix the cause and run \`storebound play products --dry\`, then again with --yes: finished products are unchanged.`);
+    return;
+  }
   done('play', held.length ? 'products done, price changes left for the owner' : 'products done');
 }
diff --git a/cli/play/subscriptions.ts b/cli/play/subscriptions.ts
index ab037b0..5fcfdcf 100644
--- a/cli/play/subscriptions.ts
+++ b/cli/play/subscriptions.ts
@@ -19,6 +19,7 @@ import { confirm, need } from '../lib/ctx';
 import { done, log, step, warn } from '../lib/log';
 import { allowPriceChanges, type HeldPrice, heldSection, holdPriceChanges } from '../lib/price-gate';
 import { type Money, toMoney } from '../lib/money';
+import { applyLimits, clampText, learnLimit, loadLimits, parseLimitError, saveLimits } from '../lib/play-limits';
 import {
   allSubscriptions, basePlanId, offerId, type PlayOfferLike, playOfferBody, playOfferDiff, playPatchSubscription, type PlaySubscription, playSubDiff, playSubRegions,
   playSubscriptionBody, playSubTextChanges,
@@ -58,13 +59,15 @@ export async function run(ctx: Ctx): Promise<void> {
     return { convertedRegionPrices: conv.convertedRegionPrices, convertedOtherRegionsPrice: conv.convertedOtherRegionsPrice, regionVersion: conv.regionVersion ?? { version: '2022/02' } };
   };
 
+  const limits = loadLimits(root);
+  const skipOut = ctx.args.has('skip-out-of-range-regions');
   const prune = ctx.args.has('prune-languages');
   // the offer the config would create (pay-up-front prices come from convertRegionPrices of the offer price)
   const buildOffer = async (s: typeof subs[number], regions: { regionCode: string; price: Money }[], o: { type: string; usd?: number }, extra?: NonNullable<typeof s.offers>[number]) => {
     let offerRegions;
     if (o.type === 'pay-up-front') {
       const oc = await convert(o.usd!);
-      offerRegions = { regions: Object.values(oc.convertedRegionPrices).map(r => ({ regionCode: r.regionCode, price: r.price })), other: oc.convertedOtherRegionsPrice };
+      offerRegions = { regions: applyLimits(Object.values(oc.convertedRegionPrices).map(r => ({ regionCode: r.regionCode, price: r.price })), limits, skipOut).regions, other: oc.convertedOtherRegionsPrice };
     }
     return playOfferBody(pkg, s, regions, offerRegions, extra);
   };
@@ -73,7 +76,9 @@ export async function run(ctx: Ctx): Promise<void> {
   const work: { s: typeof subs[number]; body: PlaySubscription; diff: ReturnType<typeof playSubDiff>; version: string; offerMissing: boolean; extraMissing: string[]; offerDrift: OfferDrift[] }[] = [];
   for (const [i, s] of subs.entries()) {
     const conv = await convert(s.usd);
-    const regions = playSubRegions(s, conv.convertedRegionPrices, csv);
+    const lim = applyLimits(playSubRegions(s, conv.convertedRegionPrices, csv), limits, skipOut);
+    const regions = lim.regions;
+    for (const c of lim.clamps) warn(TAG, `${s.id}: price limit ${clampText(c)}${skipOut ? '' : ' (clamped; --skip-out-of-range-regions leaves such regions out)'}`);
     const body = playSubscriptionBody(pkg, s, config.languages, regions, conv.convertedOtherRegionsPrice);
     const cur = existing.get(s.id) ?? null;
     const diff = playSubDiff(cur, body);
@@ -135,7 +140,9 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!liveOk && priced.length) log(TAG, 'writing what is new; price changes of existing base plans and offers wait for the owner (--allow-price-changes)');
   const held: HeldPrice[] = [];
 
+  const failedSubs: string[] = [];
   for (const { s, body, diff, version, offerMissing, extraMissing, offerDrift } of todo) {
+   try {
     const v = encodeURIComponent(version);
     const id = encodeURIComponent(s.id);
     const cur = existing.get(s.id);
@@ -186,7 +193,23 @@ export async function run(ctx: Ctx): Promise<void> {
       await play.call('PATCH', `${offerUrl}/${encodeURIComponent(d.offerId)}?updateMask=phases&regionsVersion.version=${v}`, d.body);
       log(TAG, `${s.id}: offer ${d.offerId} updated (${[...d.phase, ...(d.prices.length ? [`${d.prices.length} price(s)`] : [])].join('; ')})`);
     }
+   } catch (e) {
+     const msg = (e as Error).message.replace(/\s+/g, ' ').slice(0, 300);
+     const le = parseLimitError(msg);
+     const cur = le ? body.basePlans?.[0]?.regionalConfigs?.find(r => r.regionCode === le.region)?.price?.currencyCode : undefined;
+     if (le && cur && learnLimit(limits, le, cur)) {
+       saveLimits(root, limits);
+       warn(TAG, `${s.id}: Play limit for ${le.region} is ${le.min}-${le.max}, saved in .storebound/play-price-limits.json: run again and that region is ${skipOut ? 'left out' : 'clamped'}`);
+     }
+     warn(TAG, `${s.id}: FAILED: ${msg}; going on with the next subscription`);
+     failedSubs.push(s.id);
+   }
   }
   holdPriceChanges(held);
+  if (failedSubs.length) {
+    process.exitCode = 1;
+    warn(TAG, `${failedSubs.length} of ${todo.length} subscription(s) failed (${failedSubs.join(', ')}); the others are written. Fix the cause, run --dry, then again with --yes.`);
+    return;
+  }
   done(TAG, held.length ? 'subscriptions done, price changes left for the owner' : 'subscriptions done');
 }
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 54f25ad..bef6ea6 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1323,3 +1323,30 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/ship-step.ts` holds the one exit-code mapping; `play upload` and `apple upload` check the store
   before sending and stop with exit 7 (`tests/ship-step.test.ts`, fake stores); `--env-file` values are scrubbed from
   every output.
+
+## 111. `play products` died on a high price: "Price for KR must be between ₩70 and ₩600,000"
+
+- **What happens:** the regional prices come from `convertRegionPrices` (a USD base converted per region). Play does
+  not check its own min / max there, so a 649.99 USD product converts to ₩950,000 in KR and the PATCH is refused 400.
+  The run used to stop at that product, after the earlier ones were already created and activated.
+- **Do:** run `storebound play products --dry`: it names every region outside its min / max (`price limits on <id>:
+  KR KRW 942486 -> 600000`). The write clamps those regions to the bound with a warning; `--skip-out-of-range-regions`
+  leaves them out instead. A limit Play reports that storebound did not know is learned from the 400, saved in
+  `.storebound/play-price-limits.json` and the PATCH is sent again. Set an explicit `overrides` price if you want a
+  different price in that region.
+- **Guard:** `cli/lib/play-limits.ts` (seed table, 400 parser, clamp); one product failing no longer stops the others:
+  every product gets a `result` line and the run exits 1 at the end. Play subscriptions (base plan and pay-up-front
+  offer regions) use the same clamp and keep going after a failed subscription. `tests/price-limits-locked-loc.test.ts`.
+
+## 112. `apple iap` died on an approved product: "Cannot edit InAppPurchaseLocalization when it is in ACTIVE state"
+
+- **What happens:** once an in-app purchase (or subscription, subscription group) is approved, its localizations are
+  live. PATCH answers 409 `ENTITY_ERROR.ATTRIBUTE.INVALID.UNMODIFIABLE`, and the run stopped there, before the price
+  schedule of that and the later products.
+- **Do:** run `storebound apple iap --dry`: a changed name / description on an APPROVED / ACTIVE localization is
+  marked "not editable now (changes ship with the next review of the product / needs a new localization)". The write
+  skips those edits with a warning and still applies prices, attributes, availability and the other products. To change
+  the live text, edit it in the product's next review round (App Store Connect) or add a new localization.
+- **Guard:** `cli/lib/loc-lock.ts` reads the localization `state` (IAP, subscription and group localizations) and treats
+  a 409 UNMODIFIABLE the same way; one IAP failing no longer stops the others (results at the end, exit 1).
+  `tests/price-limits-locked-loc.test.ts` (fake ASC answers the 409 for APPROVED / ACTIVE localizations).
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index 756ebfc..bf5c880 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -143,6 +143,10 @@ export class FakeAsc {
   /** The attached builds carry com.apple.developer.game-center: submitting answers Apple's 409 (seen live) until the
    *  app has a gameCenterDetail and the version a gameCenterAppVersion. */
   gameCenterBuild = false;
+  /** localization ids whose PATCH answers 409 UNMODIFIABLE besides those in state APPROVED / ACTIVE */
+  unmodifiable = new Set<string>();
+  /** ids whose PATCH was refused with that 409 */
+  patchRefused: string[] = [];
 
   constructor(readonly appId = '6400000101') {
     this.put({ type: 'apps', id: appId, attributes: { bundleId: 'com.example.notes', name: 'Example Notes' }, rels: {} });
@@ -327,6 +331,12 @@ export class FakeAsc {
       // the age rating declaration is addressed by its app info's id
       if (self && type && self.type !== type) self = this.children(self.id, type)[0];
       if (!self) return json({ errors: [{ status: '404' }] }, 404);
+      // seen live (2026-10-23): a live (approved) localization cannot be edited
+      if (/^(inAppPurchase|subscription|subscriptionGroup)Localizations$/.test(self.type) && (['APPROVED', 'ACTIVE'].includes(String(self.attributes.state)) || this.unmodifiable.has(self.id))) {
+        this.patchRefused.push(self.id);
+        return json({ errors: [{ id: '00000000-0000-0000-0000-000000000000', status: '409', code: 'ENTITY_ERROR.ATTRIBUTE.INVALID.UNMODIFIABLE', title: 'The provided entity includes an attribute with an invalid value',
+          detail: `Cannot edit ${self.type.replace(/s$/, '').replace(/^./, c => c.toUpperCase())} when it is in ACTIVE state` }] }, 409);
+      }
       const attrs = (body as { data: { attributes?: Record<string, unknown> } }).data.attributes ?? {};
       for (const [k, v] of Object.entries((body as { data: { relationships?: Record<string, { data: { id: string } | null }> } }).data.relationships ?? {})) {
         if (v.data) self.rels[k] = v.data.id; else delete self.rels[k];
@@ -405,6 +415,12 @@ export class FakePlay {
   /** How many validate / commit calls without changesNotSentForReview=true Play refuses with its 400 "Changes cannot
    *  be sent for review automatically" (after a rejection, pending changes, managed publishing: pitfall 72). */
   refuseAutoReview = 0;
+  /** convertRegionPrices also answers KR (KRW, 1450 per USD) */
+  convertKr = false;
+  /** per region the min / max Play accepts in a product's regional price (live: KR 70-600000 KRW); a PATCH outside answers 400 */
+  priceLimits: Record<string, { min: number; max: number; symbol: string }> = {};
+  /** product id -> 400 message for its PATCH */
+  rejectProducts: Record<string, string> = {};
   /** validate calls that carried changesNotSentForReview (live Play answers them 400 "Unknown name") */
   validateWithNotSent = 0;
 
@@ -454,7 +470,8 @@ export class FakePlay {
     if (method === 'POST' && p === '/pricing:convertRegionPrices') {
       const usd = body as { price: { units?: string; nanos?: number } };
       const price = { currencyCode: 'USD', units: usd.price.units ?? '0', nanos: usd.price.nanos ?? 0 };
-      return json({ convertedRegionPrices: { US: { regionCode: 'US', price }, DE: { regionCode: 'DE', price: { ...price, currencyCode: 'EUR' } } },
+      const kr = this.convertKr ? { KR: { regionCode: 'KR', price: { currencyCode: 'KRW', units: String(Math.round((Number(price.units) + price.nanos / 1e9) * 1450)), nanos: 0 } } } : {};
+      return json({ convertedRegionPrices: { US: { regionCode: 'US', price }, DE: { regionCode: 'DE', price: { ...price, currencyCode: 'EUR' } }, ...kr },
         convertedOtherRegionsPrice: { usdPrice: price, eurPrice: { ...price, currencyCode: 'EUR' } }, regionVersion: { version: '2022/02' } });
     }
     if (method === 'GET' && p === '/oneTimeProducts') return json({ oneTimeProducts: [...this.products.values()] });
@@ -463,7 +480,14 @@ export class FakePlay {
       if (method === 'PATCH') {
         const cur = this.products.get(id);
         if (!cur && u.searchParams.get('allowMissing') !== 'true') return err(404, 'NOT_FOUND', 'no product');
+        if (this.rejectProducts[id]) return err(400, 'INVALID_ARGUMENT', this.rejectProducts[id]!);
         const b = clone(body as Record<string, unknown>);
+        for (const o of (b.purchaseOptions as { regionalPricingAndAvailabilityConfigs?: { regionCode: string; price: { units?: string; nanos?: number } }[] }[] | undefined) ?? [])
+          for (const r of o.regionalPricingAndAvailabilityConfigs ?? []) {
+            const l = this.priceLimits[r.regionCode];
+            const v = Number(r.price.units ?? 0) + (r.price.nanos ?? 0) / 1e9;
+            if (l && (v < l.min || v > l.max)) return err(400, 'INVALID_ARGUMENT', `Price for ${r.regionCode} must be between ${l.symbol}${l.min.toLocaleString('en-US')} and ${l.symbol}${l.max.toLocaleString('en-US')}, found ${l.symbol}${v.toLocaleString('en-US')}`);
+          }
         const mask = (u.searchParams.get('updateMask') ?? '').split(',');
         const next = cur ? { ...cur, ...(mask.includes('listings') ? { listings: b.listings } : {}), ...(mask.includes('purchaseOptions') ? { purchaseOptions: b.purchaseOptions } : {}) } : b;
         for (const o of (next.purchaseOptions as { state?: string; purchaseOptionId: string }[] | undefined) ?? []) {
diff --git a/tests/price-limits-locked-loc.test.ts b/tests/price-limits-locked-loc.test.ts
new file mode 100644
index 0000000..431c66a
--- /dev/null
+++ b/tests/price-limits-locked-loc.test.ts
@@ -0,0 +1,137 @@
+// Real use 2026-10-23: (1) `play products --yes` died at a 649.99 USD product: Play refused the converted KR price
+// ("Price for KR must be between ₩70 and ₩600,000, found ₩950,000") after earlier products were written; (2) `apple iap
+// --allow-price-changes --yes` died at an approved IAP: 409 ENTITY_ERROR.ATTRIBUTE.INVALID.UNMODIFIABLE "Cannot edit
+// InAppPurchaseLocalization when it is in ACTIVE state". Both against the stateful fakes with those answers.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } from 'bun:test';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { run as appleIap } from '../cli/apple/iap';
+import type { ShipConfig } from '../cli/lib/config';
+import { applyLimits, parseLimitError, parseLocalAmount } from '../cli/lib/play-limits';
+import { isLockedLocState, isUnmodifiableError } from '../cli/lib/loc-lock';
+import { run as playProducts } from '../cli/play/products';
+import { upsertTiming } from '../cli/lib/upsert';
+import { ascEnv, BASE, capture, playEnv, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores } from './helpers/fake-stores';
+
+let s: Stores;
+beforeAll(() => { ascEnv(); playEnv(); });
+afterAll(restore);
+beforeEach(() => { upsertTiming.waitMs = 0; s = installStores(); });
+afterEach(uninstallStores);
+
+const L = { en: { title: 'Pack', description: 'A pack.' } };
+const BIG = 'com.example.notes.credits_big';
+const SMALL = 'com.example.notes.credits_small';
+const cfg = (...ids: [string, number][]): ShipConfig => ({ ...BASE, languages: [{ id: 'en', apple: 'en-US', play: 'en-US' }],
+  products: ids.map(([id, usd]) => ({ id, type: 'consumable' as const, usd, listings: L })) });
+const region = (id: string, code: string) => ((s.play.products.get(id)?.purchaseOptions as { regionalPricingAndAvailabilityConfigs: { regionCode: string; price: { units: string } }[] }[] | undefined)?.[0]?.regionalPricingAndAvailabilityConfigs ?? []).find(r => r.regionCode === code);
+
+describe('play price limits (pure)', () => {
+  test('Play\'s 400 text is parsed, amounts with symbols and thousands separators too', () => {
+    expect(parseLimitError('PATCH /x -> 400 Price for KR must be between ₩70 and ₩600,000, found ₩950,000')).toEqual({ region: 'KR', min: 70, max: 600000, found: 950000 });
+    expect(parseLimitError('Price for DE must be between €0.5 and €500.00, found €649.99.')).toEqual({ region: 'DE', min: 0.5, max: 500, found: 649.99 });
+    expect(parseLimitError('some other 400')).toBeNull();
+    expect(parseLocalAmount('₩1,234,567')).toBe(1234567);
+  });
+  test('applyLimits clamps to max / min, or leaves the region out', () => {
+    const m = (currencyCode: string, units: string) => ({ currencyCode, units });
+    const rows = [{ regionCode: 'KR', price: m('KRW', '950000') }, { regionCode: 'US', price: m('USD', '5') }];
+    const lim = { KR: { currency: 'KRW', min: 70, max: 600000 } };
+    const c = applyLimits(rows, lim);
+    expect(c.regions[0]!.price.units).toBe('600000');
+    expect(c.clamps).toEqual([{ region: 'KR', currency: 'KRW', from: 950000, to: 600000, bound: 'max' }]);
+    expect(applyLimits(rows, lim, true).regions.map(r => r.regionCode)).toEqual(['US']);
+    expect(applyLimits([{ regionCode: 'KR', price: m('KRW', '10') }], lim).clamps[0]!.bound).toBe('min');
+  });
+  test('Apple\'s 409 and the locked states', () => {
+    expect(isUnmodifiableError(new Error('PATCH /v1/x -> 409 ENTITY_ERROR.ATTRIBUTE.INVALID.UNMODIFIABLE Cannot edit InAppPurchaseLocalization when it is in ACTIVE state'))).toBe(true);
+    expect(isLockedLocState('APPROVED') && isLockedLocState('ACTIVE') && !isLockedLocState('PREPARE_FOR_SUBMISSION')).toBe(true);
+  });
+});
+
+describe('play products: regions outside Play\'s min / max (KR 649.99 USD)', () => {
+  beforeEach(() => { s.play.convertKr = true; s.play.priceLimits.KR = { min: 70, max: 600000, symbol: '₩' }; });
+
+  test('dry run names the region, old -> new; the write clamps it (one PATCH, no 400) and the next run is unchanged', async () => {
+    const p = project(cfg([SMALL, 0.99], [BIG, 649.99]));
+    const d = await capture(() => playProducts(p.ctx(['--dry'])));
+    expect(d.out).toContain(`price limits on ${BIG}`);
+    expect(d.out).toMatch(/KR KRW 942486 -> 600000 \(above Play's max/);
+    expect(d.out).not.toContain(`price limits on ${SMALL}`);
+    const r = await capture(() => playProducts(p.ctx(['--yes'])));
+    expect(r.exit).toBeNull();
+    expect(region(BIG, 'KR')?.price.units).toBe('600000');
+    expect(region(SMALL, 'KR')?.price.units).toBe('1436');
+    const again = await capture(() => playProducts(p.ctx(['--dry'])));
+    expect(again.out).toContain('nothing to change, 2 unchanged');
+  });
+
+  test('--skip-out-of-range-regions leaves the region out', async () => {
+    const p = project(cfg([BIG, 649.99]));
+    const r = await capture(() => playProducts(p.ctx(['--yes', '--skip-out-of-range-regions'])));
+    expect(r.exit).toBeNull();
+    expect(region(BIG, 'KR')).toBeUndefined();
+    expect(region(BIG, 'US')?.price.units).toBe('649');
+  });
+
+  test('a limit not in the table is learned from Play\'s 400, saved, and the PATCH sent again clamped', async () => {
+    s.play.priceLimits.DE = { min: 0.5, max: 500, symbol: '€' };
+    const p = project(cfg([BIG, 649.99]));
+    const r = await capture(() => playProducts(p.ctx(['--yes'])));
+    expect(r.exit).toBeNull();
+    expect(r.err).toContain('Play limit for DE is 0.5-500');
+    expect(region(BIG, 'DE')?.price.units).toBe('500');
+    const file = join(p.root, '.storebound', 'play-price-limits.json');
+    expect(existsSync(file)).toBe(true);
+    expect(JSON.parse(readFileSync(file, 'utf8')).DE.max).toBe(500);
+    // the next dry run knows it without a 400
+    const d = await capture(() => playProducts(p.ctx(['--dry'])));
+    expect(d.out).not.toContain('price limits on');
+  });
+
+  test('one product failing does not stop the others: results per product, exit 1 at the end', async () => {
+    s.play.rejectProducts[BIG] = 'Some other refusal';
+    const p = project(cfg([BIG, 5], [SMALL, 0.99]));
+    const r = await capture(() => playProducts(p.ctx(['--yes'])));
+    expect(s.play.products.has(SMALL)).toBe(true);
+    expect(s.play.products.has(BIG)).toBe(false);
+    expect(r.exit).toBe(1);
+    expect(r.err).toContain('1 of 2 product(s) failed');
+    expect(r.out + r.err).toContain(`result ${SMALL}: ok`);
+    expect(r.out + r.err).toContain(`result ${BIG}: FAILED`);
+  });
+});
+
+describe('apple iap: live (approved) localizations cannot be edited', () => {
+  const two = (d1: string, d2: string): ShipConfig => ({ ...BASE, languages: [{ id: 'en', apple: 'en-US', play: 'en-US' }],
+    products: [{ id: BIG, type: 'consumable', usd: 1.99, listings: { en: { title: 'Big', description: d1 } } }, { id: SMALL, type: 'consumable', usd: 0.99, listings: { en: { title: 'Small', description: d2 } } }] });
+
+  test('dry run marks it, the write skips it (no PATCH sent) and goes on; a failing IAP does not abort the rest', async () => {
+    await capture(() => appleIap(project(two('one', 'one')).ctx([])));
+    const locs = s.asc.all('inAppPurchaseLocalizations');
+    expect(locs).toHaveLength(2);
+    for (const l of locs) l.attributes.state = 'APPROVED';
+    const p = project(two('two', 'two'));
+    const d = await capture(() => appleIap(p.ctx(['--dry'])));
+    expect(d.out).toContain('not editable now');
+    expect(d.out).toContain('next review of the product');
+    const r = await capture(() => appleIap(p.ctx(['--allow-price-changes', '--yes'])));
+    expect(r.exit).toBeNull();
+    expect(s.asc.patchRefused).toEqual([]);
+    expect(r.err).toContain('2 localization edit(s) skipped');
+    // an unknown locked state: the 409 itself is skipped with a warning
+    for (const l of locs) l.attributes.state = 'SOMETHING_NEW';
+    s.asc.unmodifiable.add(locs[0]!.id);
+    const r2 = await capture(() => appleIap(project(two('three', 'three')).ctx(['--yes'])));
+    expect(r2.exit).toBeNull();
+    expect(s.asc.patchRefused).toEqual([locs[0]!.id]);
+    expect(r2.err).toContain('skipped');
+    expect(locs[1]!.attributes.description).toBe('three');
+    // a product that throws (description over Apple's limit) is reported at the end, the next one still runs
+    const r3 = await capture(() => appleIap(project(two('x'.repeat(5000), 'four')).ctx(['--yes'])));
+    expect(r3.exit).toBe(1);
+    expect(r3.err).toContain('1 of 2 product(s) failed');
+    expect(locs[1]!.attributes.description).toBe('four');
+  });
+});

From a01c78aa20566be54c00ede1980296af9f0d36be Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 15:56:36 +0700
Subject: [PATCH 121/255] generated API tables and flags refreshed for the play
 products clamp (Forgejo ci failed on stale api tables)

---
 cli/api/wrapped.gen.ts |  2 +-
 cli/data/flags.json    | 18 ++++++++++++++++++
 docs/api-coverage.md   |  2 +-
 3 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index d902b13..8693d61 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -261,7 +261,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'androidpublisher.monetization.convertRegionPrices': 'play/products play/subscriptions prices prices-ppp',
     'androidpublisher.monetization.onetimeproducts.get': 'prices',
     'androidpublisher.monetization.onetimeproducts.list': 'play/products',
-    'androidpublisher.monetization.onetimeproducts.patch': 'play/products prices',
+    'androidpublisher.monetization.onetimeproducts.patch': 'prices',
     'androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates': 'play/products',
     'androidpublisher.monetization.subscriptions.basePlans.activate': 'play/subscriptions',
     'androidpublisher.monetization.subscriptions.basePlans.offers.list': 'catalog play/subscriptions',
diff --git a/cli/data/flags.json b/cli/data/flags.json
index b19831e..5fc96bf 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -1403,6 +1403,9 @@
   "apple game-center": [
    "storebound apple game-center [status] [--dry] [--yes] [--json]"
   ],
+  "apple iap": [
+   "storebound apple iap [--dry] [--only id1,id2] [--allow-price-changes]"
+  ],
   "apple iap-review": [
    "storebound apple iap-review [--dry]"
   ],
@@ -1416,6 +1419,9 @@
   "apple next-build": [
    "storebound apple next-build            -> 42"
   ],
+  "apple offer-codes": [
+   "storebound apple offer-codes [--only id1,id2] [--codes] [--dry] [--yes] [--json]"
+  ],
   "apple ppo": [
    "storebound apple ppo status [--json]",
    "storebound apple ppo create --variant b[,c] [--name \"...\"] [--traffic 30] [--dry]",
@@ -1440,6 +1446,9 @@
   "apple resubmit": [
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]"
   ],
+  "apple review-details": [
+   "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
+  ],
   "apple screenshots": [
    "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
    "storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)"
@@ -1456,6 +1465,9 @@
   "apple submit": [
    "storebound apple submit --build <n> [--version 1.0.0] [--resolve-iaps] [--dry] [--yes] [--json]"
   ],
+  "apple subscriptions": [
+   "storebound apple subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--codes] [--yes] [--allow-price-changes]"
+  ],
   "apple testflight": [
    "storebound apple testflight status [--json]                          groups, testers per group, recent builds + beta states",
    "storebound apple testflight groups                                   list the groups and what the config would create (read-only)",
@@ -1596,6 +1608,9 @@
   "play next-version-code": [
    "storebound play next-version-code      -> 43"
   ],
+  "play products": [
+   "storebound play products [--dry] [--only id1,id2] [--yes] [--allow-price-changes]"
+  ],
   "play release": [
    "storebound play release app-release.aab [--internal completed] [--production draft] [--name \"1.0.0 (3)\"] [--dry]",
    "storebound play release --version-code 3 --production draft",
@@ -1610,6 +1625,9 @@
   "play status": [
    "storebound play status [--json] [--review-sent]"
   ],
+  "play subscriptions": [
+   "storebound play subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--yes] [--allow-price-changes]"
+  ],
   "play upload": [
    "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]"
   ],
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index e614c2d..f575a42 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -1644,7 +1644,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.monetization.onetimeproducts.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.get` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}` | read | prices |
 | `androidpublisher.monetization.onetimeproducts.list` | GET | `androidpublisher/v3/applications/{packageName}/oneTimeProducts` | read | play/products |
-| `androidpublisher.monetization.onetimeproducts.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/onetimeproducts/{productId}` | write (dry by default) | play/products, prices |
+| `androidpublisher.monetization.onetimeproducts.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/onetimeproducts/{productId}` | write (dry by default) | prices |
 | **androidpublisher.monetization.onetimeproducts.purchaseOptions** (2) | | | | |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchDelete` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchDelete` | owner only (typed confirm) |  |
 | `androidpublisher.monetization.onetimeproducts.purchaseOptions.batchUpdateStates` | POST | `androidpublisher/v3/applications/{packageName}/oneTimeProducts/{productId}/purchaseOptions:batchUpdateStates` | owner only (typed confirm) | play/products |

From 8f69a27709649ec105a3b353e7b8872f5d78682a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 15:57:31 +0700
Subject: [PATCH 122/255] desktop install: stop the running app by exact path,
 check the installed exe's real version, verify it opened

---
 CHANGELOG.md                   |  1 +
 cli/desktop.ts                 | 55 +++++++++++++++----
 cli/lib/desktop-proc.ts        | 98 ++++++++++++++++++++++++++++++++++
 docs/desktop.md                |  6 +++
 skills/store-pitfalls/SKILL.md | 14 +++++
 tests/desktop-proc.test.ts     | 84 +++++++++++++++++++++++++++++
 6 files changed, 249 insertions(+), 9 deletions(-)
 create mode 100644 cli/lib/desktop-proc.ts
 create mode 100644 tests/desktop-proc.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7625693..00625dd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `storebound desktop`: an update no longer reports "installed" while the old app stays. It stops the running app first (exact install path only, graceful close, then by PID), checks the installed exe's own version (Windows PE version resource instead of the registry entry; Info.plist on macOS) and fails with what it found, and prints "opened" only when a visible (not `--hidden`) process started from the installed path, otherwise it names the app's log.
 - `play products` / `play subscriptions`: regions outside Play's min / max (a 649.99 USD product in KR: "must be between ₩70 and ₩600,000") are flagged in the dry run (old -> new) and clamped to the bound on write with a warning; `--skip-out-of-range-regions` leaves them out. Limits Play reports in a 400 are learned (`.storebound/play-price-limits.json`) and the write is retried. A product or subscription that fails no longer stops the others: per-product results, exit 1 at the end.
 - `apple iap` / `apple subscriptions`: edits to approved (ACTIVE) localizations, which App Store Connect refuses with 409 UNMODIFIABLE, are marked "not editable now" in the dry run and skipped with a warning on write; prices and the other changes still apply. One IAP failing no longer stops the rest (results at the end, exit 1).
 
diff --git a/cli/desktop.ts b/cli/desktop.ts
index 5426361..f318e6f 100644
--- a/cli/desktop.ts
+++ b/cli/desktop.ts
@@ -21,7 +21,8 @@ import type { Args } from './lib/args';
 import { CONFIG_NAMES } from './lib/config';
 import { DECLINED_EXIT } from './lib/ctx';
 import { BUNDLE_ID, DOWNLOAD_LABEL, type Download, type DownloadKey, downloadsDir, downloadsFor, findInstalled, type Installed, MANIFEST, type Manifest, manifestProblems, openCommand, openFolderLink, PAGE, PUBLIC_KEY, versionManifest } from './lib/desktop-dist';
-import { consent, type Decision, decide, installPlan, isRunning, type Plan, question, runningCheck } from './lib/desktop-install';
+import { consent, type Decision, decide, installPlan, type Plan, question } from './lib/desktop-install';
+import { appExe, listCommand, logDir, matchByPath, mismatchMessage, notOpenedMessage, parseProcs, peVersion, type Proc, startedHidden, stopCommand, versionMatches } from './lib/desktop-proc';
 import { verify } from './lib/minisign';
 import { parsePlist } from './lib/plist';
 import { addFolder } from './lib/registry';
@@ -105,9 +106,11 @@ async function readBody(r: Response, d: Download, stallMs: number, say: (s: stri
 
 const VERSION_RE = /\b(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)\b/;
 
-/** The version of an installed app: Info.plist on macOS, `storebound-desktop --version` elsewhere (15 s at most). */
+/** The version of an installed app, read from its own files: Info.plist on macOS, the PE version resource of the exe
+ *  on Windows (never the uninstall registry entry, never by starting the GUI exe), `--version` on Linux (15 s at most). */
 export function appVersion(platform: NodeJS.Platform, app: string): string | null {
   try {
+    if (platform === 'win32') return peVersion(readFileSync(app));
     if (platform === 'darwin') {
       const p = parsePlist(readFileSync(join(app, 'Contents', 'Info.plist'))) as Record<string, unknown>;
       return typeof p.CFBundleShortVersionString === 'string' ? p.CFBundleShortVersionString : null;
@@ -139,7 +142,8 @@ export function runPlan(plan: Plan, platform: NodeJS.Platform, say: (s: string)
       else if ('write' in s) { writeFileSync(s.write.path, s.write.content); if (s.write.mode) chmodSync(s.write.path, s.write.mode); }
       else if ('expectVersion' in s) {
         const v = appVersion(platform, s.expectVersion.app);
-        if (v && v !== s.expectVersion.version) throw new Error(`the installed app is ${v}, expected ${s.expectVersion.version}`);
+        const win = platform === 'win32';
+        if ((v && !versionMatches(v, s.expectVersion.version, win)) || (!v && win)) throw new Error(mismatchMessage(v, s.expectVersion.version, s.expectVersion.app));
         if (!v) say(`  (could not read the new app's version; going on)`);
       }
       if (!always) say(`  ${s.what}`);
@@ -162,6 +166,37 @@ async function askYes(text: string): Promise<boolean> {
   return line !== null && !/^n(o)?$/i.test(line.trim());
 }
 
+/** Processes of the installed app, matched by its exact executable path; [] when they cannot be listed. */
+function appProcs(platform: NodeJS.Platform, exe: string): Proc[] {
+  try {
+    const r = rt.spawnSync(listCommand(platform), { timeout: 15_000 });
+    return r.success ? matchByPath(platform, parseProcs(platform, r.stdout.toString()), exe) : [];
+  } catch { return []; }
+}
+
+/** Stops the running app (only processes started from `exe`): a graceful close, then by PID after `graceMs`. */
+async function stopApp(platform: NodeJS.Platform, exe: string, say: (s: string) => void, graceMs = 10_000): Promise<void> {
+  let procs = appProcs(platform, exe);
+  if (!procs.length) return;
+  say(`  stopping the running storebound desktop (PID ${procs.map(p => p.pid).join(', ')})`);
+  for (const p of procs) try { rt.spawnSync(stopCommand(platform, p.pid, false), { timeout: 10_000 }); } catch { /* forced below */ }
+  for (const end = Date.now() + graceMs; Date.now() < end && procs.length; ) { await rt.sleep(500); procs = appProcs(platform, exe); }
+  for (const p of procs) try { rt.spawnSync(stopCommand(platform, p.pid, true), { timeout: 10_000 }); } catch { /* checked below */ }
+  for (const end = Date.now() + 5_000; Date.now() < end && procs.length; ) { await rt.sleep(500); procs = appProcs(platform, exe); }
+  if (procs.length) throw new Error(`storebound desktop is still running from ${exe} (PID ${procs.map(p => p.pid).join(', ')}): close it (also in the tray), then run this again`);
+}
+
+/** Waits until a visible (not --hidden) process runs from `exe`. */
+async function waitOpened(platform: NodeJS.Platform, exe: string, timeoutMs = 15_000): Promise<'ok' | 'none' | 'hidden'> {
+  let last: 'none' | 'hidden' = 'none';
+  for (const end = Date.now() + timeoutMs; Date.now() < end; await rt.sleep(500)) {
+    const procs = appProcs(platform, exe);
+    if (procs.some(p => !startedHidden(p))) return 'ok';
+    if (procs.length) last = 'hidden';
+  }
+  return last;
+}
+
 const tilde = (p: string) => (p.startsWith(homedir()) ? '~' + p.slice(homedir().length) : p);
 
 export async function run(args: Args): Promise<void> {
@@ -233,12 +268,6 @@ export async function run(args: Args): Promise<void> {
       console.log('nothing changed.');
       return;
     }
-    if (installed) {
-      const chk = runningCheck(platform);
-      let running = false;
-      try { const r = rt.spawnSync(chk, { timeout: 10_000 }); running = isRunning(platform, r.exitCode, r.stdout.toString()); } catch { /* no pgrep / tasklist: go on */ }
-      if (running) throw new Error(`storebound desktop ${decision.from} is running: quit it first, then run this again (or update it from the app: Settings > Updates)`);
-    }
     const how = consent(args.has('yes'), stdinIsTTY());
     if (how !== 'yes') {
       if (how === 'declined') {
@@ -260,6 +289,8 @@ export async function run(args: Args): Promise<void> {
       console.log(`downloading ${d.file} (${(d.size / 1e6).toFixed(1)} MB)`);
       await download(d, tmp);
       console.log('  size, SHA-256 and signature checked');
+      // a running app keeps its files locked (Windows) or keeps running the old code: stop it, our install path only
+      await stopApp(platform, appExe(platform, installed?.path ?? plan!.target), s => console.log(s));
       runPlan(plan!, platform, s => console.log(s));
     } finally { rmSync(tmp, { recursive: true, force: true }); }
     installed = findInstalled(platform) ?? { path: plan!.target, how: platform === 'darwin' ? 'bundle' : platform === 'win32' ? 'exe' : 'appimage' };
@@ -278,5 +309,11 @@ export async function run(args: Args): Promise<void> {
     const code = await Promise.race([p.exited, rt.sleep(30_000).then(() => -1)]);
     if (code !== 0) throw new Error(`${fresh ? 'open -a' : `open -b ${BUNDLE_ID}`} failed${code === -1 ? ' (no answer in 30 s)' : `: ${(await new Response(p.stderr).text()).trim()}`}`);
   } else p.unref();
+  const exe = appExe(platform, installed!.path);
+  const opened = await waitOpened(platform, exe);
+  if (opened !== 'ok') {
+    // an already running visible copy counts as opened (single-instance hands it the request)
+    throw new Error(notOpenedMessage(opened, exe, join(logDir(platform, process.env, homedir()), 'host.log')));
+  }
   console.log(link ? `storebound desktop: opening ${tilde(dir)}` : 'storebound desktop: opened');
 }
diff --git a/cli/lib/desktop-proc.ts b/cli/lib/desktop-proc.ts
new file mode 100644
index 0000000..fbbcc4f
--- /dev/null
+++ b/cli/lib/desktop-proc.ts
@@ -0,0 +1,98 @@
+// The running storebound desktop app, matched by its exact executable path (our install only, never another
+// program with a similar name), how to stop it before an install, how to read the real version of the installed
+// files (the Windows PE version resource, not the uninstall registry entry) and where its log is. Pure parts only;
+// cli/desktop.ts runs the commands.
+import { posix } from 'node:path';
+import { compareVersions } from './desktop-install';
+
+export interface Proc { pid: number; exe: string; args: string }
+
+/** The executable a process of the installed app runs from (the .app bundle's binary on macOS). */
+export function appExe(platform: NodeJS.Platform, installedPath: string): string {
+  return platform === 'darwin' ? posix.join(installedPath, 'Contents', 'MacOS', 'storebound-desktop') : installedPath;
+}
+
+/** The command that lists processes with their executable and arguments (never through a shell). */
+export function listCommand(platform: NodeJS.Platform): string[] {
+  if (platform === 'win32') {
+    return ['powershell', '-NoProfile', '-NonInteractive', '-Command',
+      "Get-CimInstance Win32_Process -Filter \"Name='storebound-desktop.exe'\" | Select-Object ProcessId,ExecutablePath,CommandLine | ConvertTo-Json -Compress"];
+  }
+  return ['ps', '-axww', '-o', 'pid=,args='];
+}
+
+/** Parses the output of listCommand. */
+export function parseProcs(platform: NodeJS.Platform, out: string): Proc[] {
+  if (platform === 'win32') {
+    const t = out.trim();
+    if (!t) return [];
+    let j: unknown;
+    try { j = JSON.parse(t); } catch { return []; }
+    const rows = (Array.isArray(j) ? j : [j]) as { ProcessId?: number; ExecutablePath?: string | null; CommandLine?: string | null }[];
+    return rows.filter(r => typeof r?.ProcessId === 'number').map(r => ({ pid: r.ProcessId!, exe: r.ExecutablePath ?? '', args: r.CommandLine ?? '' }));
+  }
+  const procs: Proc[] = [];
+  for (const line of out.split('\n')) {
+    const m = /^\s*(\d+)\s+(.*)$/.exec(line);
+    if (m) procs.push({ pid: Number(m[1]), exe: '', args: m[2]! });
+  }
+  return procs;
+}
+
+/** Processes started from exactly this executable (Windows: case-insensitive full path; elsewhere the argv[0] path). */
+export function matchByPath(platform: NodeJS.Platform, procs: Proc[], exe: string): Proc[] {
+  if (platform === 'win32') {
+    const want = exe.replace(/\//g, '\\').toLowerCase();
+    return procs.filter(p => p.exe.replace(/\//g, '\\').toLowerCase() === want);
+  }
+  return procs.filter(p => p.args === exe || p.args.startsWith(exe + ' '));
+}
+
+/** Was the process started hidden (the logon entry: tray only, no window)? */
+export const startedHidden = (p: Proc): boolean => /(?:^|\s|")--hidden(?:\s|"|$)/.test(p.args);
+
+/** The graceful stop (Windows: WM_CLOSE through taskkill without /F; elsewhere TERM) and the forced one, by PID. */
+export function stopCommand(platform: NodeJS.Platform, pid: number, force: boolean): string[] {
+  if (platform === 'win32') return force ? ['taskkill', '/F', '/PID', String(pid)] : ['taskkill', '/PID', String(pid)];
+  return ['kill', force ? '-KILL' : '-TERM', String(pid)];
+}
+
+/** The product version in a PE file's VS_FIXEDFILEINFO (Tauri writes the app version there), "0.8.46"; null if none. */
+export function peVersion(buf: Uint8Array): string | null {
+  if (buf.length < 64) return null;
+  const v = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+  if (v.getUint16(0, true) !== 0x5a4d) return null; // "MZ"
+  // the signature 0xFEEF04BD (DWORD aligned), then struct version, FileVersionMS/LS, ProductVersionMS/LS
+  for (let i = 0; i + 24 <= buf.length; i += 4) {
+    if (v.getUint32(i, true) !== 0xfeef04bd) continue;
+    const ms = v.getUint32(i + 16, true), ls = v.getUint32(i + 20, true);
+    const parts = [ms >>> 16, ms & 0xffff, ls >>> 16, ls & 0xffff];
+    return parts[3] === 0 ? parts.slice(0, 3).join('.') : parts.join('.');
+  }
+  return null;
+}
+
+/** The installed version matches the expected one (a PE version has no pre-release tag: compare a.b.c only). */
+export function versionMatches(found: string, expected: string, peOnly = false): boolean {
+  if (peOnly) return found === expected.replace(/[-+].*$/, '');
+  return compareVersions(found, expected) === 0;
+}
+
+/** The app's log folder (Tauri app data dir of dev.storebound.desktop + /logs, host.log inside). */
+export function logDir(platform: NodeJS.Platform, env: Record<string, string | undefined>, home: string): string {
+  const id = 'dev.storebound.desktop';
+  if (platform === 'win32') return `${env.APPDATA ?? `${home}\\AppData\\Roaming`}\\${id}\\logs`;
+  if (platform === 'darwin') return posix.join(home, 'Library', 'Application Support', id, 'logs');
+  return posix.join(env.XDG_DATA_HOME ?? posix.join(home, '.local', 'share'), id, 'logs');
+}
+
+export function mismatchMessage(found: string | null, expected: string, exe: string): string {
+  return `the installed app at ${exe} is ${found ?? 'unreadable (no version found)'}, expected ${expected}: the files were not replaced, `
+    + 'most likely because storebound desktop was still running. Close storebound desktop (also in the tray) and run this again';
+}
+
+export function notOpenedMessage(why: 'none' | 'hidden', exe: string, logs: string): string {
+  return why === 'hidden'
+    ? `storebound desktop did not open a window: only a hidden (tray) copy runs from ${exe}. Click its tray icon, or quit it and run this again. Log: ${logs}`
+    : `storebound desktop did not open: no process started from ${exe} within 15 s. Log: ${logs}`;
+}
diff --git a/docs/desktop.md b/docs/desktop.md
index 9de0347..5e96ff4 100644
--- a/docs/desktop.md
+++ b/docs/desktop.md
@@ -490,6 +490,12 @@ The CLI and the app are one product: one version number, one set of store accoun
   starts silently in the tray, without a window. Closing the window keeps it running in the tray; the tray icon
   opens it, the tray menu's Quit (macOS: Cmd+Q) quits. Turn the logon entry off in the OS (Windows: Settings > Apps >
   Startup). Window state never restores "visible", so a `--hidden` start stays hidden.
+- **`storebound desktop` install / update**: before the installer runs it stops the running app (only processes
+  started from the exact install path: `%LOCALAPPDATA%\storebound\storebound-desktop.exe`,
+  `storebound.app/Contents/MacOS/storebound-desktop`, the AppImage; a graceful close, then by PID after 10 s). After the
+  install it reads the real version of the installed files (Windows: the exe's PE version resource, never the
+  registry entry; macOS: Info.plist; Linux: `--version`) and fails on a mismatch. "opened" is printed only when a
+  process without `--hidden` runs from the installed path within 15 s; otherwise it says so and names `host.log`.
 - **`storebound://open?path=<absolute folder>`** (sent by `storebound desktop` in an app folder, which first puts
   the folder on the machine's list): the host accepts one plain absolute path (`policy::deep_link_open_path`), syncs
   the list, selects that app folder when it is on it, otherwise asks in a native dialog and adds it
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index bef6ea6..a22d44a 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1350,3 +1350,17 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/loc-lock.ts` reads the localization `state` (IAP, subscription and group localizations) and treats
   a 409 UNMODIFIABLE the same way; one IAP failing no longer stops the others (results at the end, exit 1).
   `tests/price-limits-locked-loc.test.ts` (fake ASC answers the 409 for APPROVED / ACTIVE localizations).
+
+## 113. `storebound desktop` said "installed" and "opened", but the old app stayed and no window came
+
+- **What happens:** on Windows the silent installer ran while storebound desktop was still running (often hidden in
+  the tray from the logon entry). The exe was locked, so the files stayed at the old version, while the uninstall
+  registry entry already showed the new one. The version check started the GUI exe with `--version`, read nothing
+  and went on; "opened" was printed without looking whether a window process started.
+- **Do:** let `storebound desktop` stop the running app first (it does now, only processes started from the exact
+  install path: a graceful close, then by PID after 10 s). If it still says the installed app is the old version,
+  close storebound desktop in the tray and run it again. If it says it did not open, read the `host.log` it names.
+- **Guard:** `cli/lib/desktop-proc.ts`: the exact-path process match, the PE version resource of the installed exe
+  (never the registry `DisplayVersion`), Info.plist on macOS, the AppImage's `--version` on Linux; a mismatch fails
+  with what was found. Opening waits up to 15 s for a non-`--hidden` process from the installed path
+  (`tests/desktop-proc.test.ts`).
diff --git a/tests/desktop-proc.test.ts b/tests/desktop-proc.test.ts
new file mode 100644
index 0000000..348edbd
--- /dev/null
+++ b/tests/desktop-proc.test.ts
@@ -0,0 +1,84 @@
+import { describe, expect, test } from 'bun:test';
+import { appExe, listCommand, logDir, matchByPath, mismatchMessage, notOpenedMessage, parseProcs, peVersion, startedHidden, stopCommand, versionMatches } from '../cli/lib/desktop-proc';
+
+/** A tiny fake PE: "MZ", padding, then a VS_FIXEDFILEINFO with the given product version. */
+function fakePe(a: number, b: number, c: number, d = 0, at = 128): Uint8Array {
+  const buf = new Uint8Array(at + 52);
+  const v = new DataView(buf.buffer);
+  v.setUint16(0, 0x5a4d, true);
+  v.setUint32(at, 0xfeef04bd, true);
+  v.setUint32(at + 4, 0x00010000, true);
+  v.setUint32(at + 8, (9 << 16) | 9, true); // file version differs on purpose
+  v.setUint32(at + 16, (a << 16) | b, true);
+  v.setUint32(at + 20, (c << 16) | d, true);
+  return buf;
+}
+
+describe('desktop install: real version of the installed files', () => {
+  test('PE product version from VS_FIXEDFILEINFO', () => {
+    expect(peVersion(fakePe(0, 8, 46))).toBe('0.8.46');
+    expect(peVersion(fakePe(2, 0, 7, 5))?.split(".")).toEqual(["2", "0", "7", "5"]);
+    expect(peVersion(new Uint8Array(200))).toBeNull(); // no MZ
+    const noInfo = new Uint8Array(200); noInfo[0] = 0x4d; noInfo[1] = 0x5a;
+    expect(peVersion(noInfo)).toBeNull();
+  });
+  test('the stale 0.8.38 exe is a mismatch for 0.8.46', () => {
+    expect(versionMatches('0.8.38', '0.8.46', true)).toBe(false);
+    expect(versionMatches('0.8.46', '0.8.46', true)).toBe(true);
+    expect(versionMatches('0.8.46', '0.8.46-beta.1', true)).toBe(true);
+    expect(versionMatches('0.8.46', '0.8.46')).toBe(true);
+    expect(versionMatches('0.8.45', '0.8.46')).toBe(false);
+    const m = mismatchMessage('0.8.38', '0.8.46', 'C:\\Users\\u\\AppData\\Local\\storebound\\storebound-desktop.exe');
+    expect(m).toContain('is 0.8.38, expected 0.8.46');
+    expect(m).toContain('Close storebound desktop');
+    expect(mismatchMessage(null, '0.8.46', 'x')).toContain('unreadable');
+  });
+});
+
+describe('desktop install: the running app by exact path', () => {
+  const exe = 'C:\\Users\\u\\AppData\\Local\\storebound\\storebound-desktop.exe';
+  test('Windows: CIM JSON, one row or many, case-insensitive exact path only', () => {
+    expect(listCommand('win32')[0]).toBe('powershell');
+    const one = parseProcs('win32', JSON.stringify({ ProcessId: 42, ExecutablePath: exe.toUpperCase(), CommandLine: `"${exe}" --hidden` }));
+    expect(matchByPath('win32', one, exe).map(p => p.pid)).toEqual([42]);
+    expect(startedHidden(one[0]!)).toBe(true);
+    const many = parseProcs('win32', JSON.stringify([
+      { ProcessId: 1, ExecutablePath: 'D:\\other\\storebound-desktop.exe', CommandLine: '' },
+      { ProcessId: 2, ExecutablePath: exe, CommandLine: `"${exe}"` },
+      { ProcessId: 3, ExecutablePath: null, CommandLine: null },
+    ]));
+    expect(matchByPath('win32', many, exe).map(p => p.pid)).toEqual([2]);
+    expect(startedHidden(many[1]!)).toBe(false);
+    expect(parseProcs('win32', '')).toEqual([]);
+    expect(parseProcs('win32', 'not json')).toEqual([]);
+  });
+  test('macOS / Linux: ps args, the bundle binary, no prefix lookalikes', () => {
+    const mac = appExe('darwin', '/Applications/storebound.app');
+    expect(mac).toBe('/Applications/storebound.app/Contents/MacOS/storebound-desktop');
+    const procs = parseProcs('darwin', [
+      ` 101 ${mac}`,
+      ` 102 ${mac} --hidden`,
+      ` 103 ${mac}-helper`,
+      ` 104 /tmp/h/Applications/storebound.app/Contents/MacOS/storebound-desktop`,
+      '',
+    ].join('\n'));
+    expect(matchByPath('darwin', procs, mac).map(p => [p.pid, startedHidden(p)])).toEqual([[101, false], [102, true]]);
+    expect(appExe('linux', '/tmp/h/.local/bin/storebound.AppImage')).toBe('/tmp/h/.local/bin/storebound.AppImage');
+  });
+  test('stop: graceful first, then forced, by PID', () => {
+    expect(stopCommand('win32', 42, false)).toEqual(['taskkill', '/PID', '42']);
+    expect(stopCommand('win32', 42, true)).toEqual(['taskkill', '/F', '/PID', '42']);
+    expect(stopCommand('darwin', 7, false)).toEqual(['kill', '-TERM', '7']);
+    expect(stopCommand('linux', 7, true)).toEqual(['kill', '-KILL', '7']);
+  });
+});
+
+describe('desktop open: the log the message points to', () => {
+  test('per OS', () => {
+    expect(logDir('win32', { APPDATA: 'C:\\Users\\u\\AppData\\Roaming' }, 'C:\\Users\\u')).toBe('C:\\Users\\u\\AppData\\Roaming\\dev.storebound.desktop\\logs');
+    expect(logDir('darwin', {}, '/tmp/h')).toBe('/tmp/h/Library/Application Support/dev.storebound.desktop/logs');
+    expect(logDir('linux', {}, '/tmp/h')).toBe('/tmp/h/.local/share/dev.storebound.desktop/logs');
+    expect(notOpenedMessage('none', 'x.exe', 'L')).toContain('did not open: no process');
+    expect(notOpenedMessage('hidden', 'x.exe', 'L')).toContain('hidden (tray)');
+  });
+});

From 9ed1890de81a939363687c44271cc7810b9605c1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 16:03:29 +0700
Subject: [PATCH 123/255] storebound 0.8.47: version in package.json and every
 copy, CHANGELOG 0.8.47 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 9bec984..1f47268 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.46",
+      "version": "0.8.47",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index c2f327a..6b75797 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index deeb48a..5e92768 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 00625dd..04bd82a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.47 · 2026-10-23
+
 - `storebound desktop`: an update no longer reports "installed" while the old app stays. It stops the running app first (exact install path only, graceful close, then by PID), checks the installed exe's own version (Windows PE version resource instead of the registry entry; Info.plist on macOS) and fails with what it found, and prints "opened" only when a visible (not `--hidden`) process started from the installed path, otherwise it names the app's log.
 - `play products` / `play subscriptions`: regions outside Play's min / max (a 649.99 USD product in KR: "must be between ₩70 and ₩600,000") are flagged in the dry run (old -> new) and clamped to the bound on write with a warning; `--skip-out-of-range-regions` leaves them out. Limits Play reports in a 400 are learned (`.storebound/play-price-limits.json`) and the write is retried. A product or subscription that fails no longer stops the others: per-product results, exit 1 at the end.
 - `apple iap` / `apple subscriptions`: edits to approved (ACTIVE) localizations, which App Store Connect refuses with 409 UNMODIFIABLE, are marked "not editable now" in the dry run and skipped with a warning on write; prices and the other changes still apply. One IAP failing no longer stops the rest (results at the end, exit 1).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 3976033..48b121c 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 37d04ba..0bf2c5c 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.46"
+version = "0.8.47"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 11955e7..f200fc4 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.46"
+version = "0.8.47"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index e88e3a6..9ce8df9 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index ecd29b6..16d0c93 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 25554d3..c9c6de6 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From d4cf1ad3a12b36a75700882f3d2d6d4ca6c9a302 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 22:45:10 +0800
Subject: [PATCH 124/255] shots: full-bleed layout (shots.layout bleed) with
 corner captions, per-size frames, and landscape orientation, on top of the
 landscape sizes

---
 CHANGELOG.md                      |  2 +
 cli/lib/config.ts                 | 32 +++++++++-
 cli/lib/embedded.ts               |  2 +
 cli/shots/capture.ts              |  2 +-
 cli/shots/check.ts                | 24 +++++++-
 cli/shots/feature-bleed.html      | 49 ++++++++++++++++
 cli/shots/lib.ts                  | 13 ++++-
 cli/shots/render.ts               | 14 +++--
 cli/shots/template-bleed.html     | 97 +++++++++++++++++++++++++++++++
 skills/store-screenshots/SKILL.md |  2 +
 tests/shots-bleed.test.ts         | 94 ++++++++++++++++++++++++++++++
 11 files changed, 320 insertions(+), 11 deletions(-)
 create mode 100644 cli/shots/feature-bleed.html
 create mode 100644 cli/shots/template-bleed.html
 create mode 100644 tests/shots-bleed.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 04bd82a..1d65e5e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
+
 ## 0.8.47 · 2026-10-23
 
 - `storebound desktop`: an update no longer reports "installed" while the old app stays. It stops the running app first (exact install path only, graceful close, then by PID), checks the installed exe's own version (Windows PE version resource instead of the registry entry; Info.plist on macOS) and fails with what it found, and prints "opened" only when a visible (not `--hidden`) process started from the installed path, otherwise it names the app's log.
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 9abb510..e6e87cc 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -131,7 +131,16 @@ export interface ShotFrame { src: string; x?: number; dy?: number; scale?: numbe
 /** bg: gradient stops (2-3 colours), one colour (flat) or a CSS gradient string. image: a photo background (path
  *  relative to the config, cropped to cover) under a dark overlay (0-0.9, default 0.45) that keeps white ink legible. */
 export interface Palette { bg: string | [string, string] | [string, string, string]; glow: string; ink: string; shadow: string; image?: string; overlay?: number }
-export interface ShotScene { id: string; palette: string | Palette; hero?: boolean; frames: ShotFrame[]; badges?: ShotBadgeSlot[]; over?: number }
+export interface ShotScene { id: string; palette: string | Palette; hero?: boolean; frames: ShotFrame[]; badges?: ShotBadgeSlot[]; over?: number
+  /** layout "bleed": the corner the caption sits in (top / bottom, left / right). Default "tl". */
+  corner?: 'tl' | 'tr' | 'bl' | 'br';
+  /** layout "bleed": caption size multiplier (0.6-1.4, default 1). */
+  captionScale?: number;
+  /** layout "bleed": the caption's maximum width as a share of the image width (0.2-0.9; default 0.4 landscape,
+   *  0.84 portrait). Lines that do not fit shrink, down to 60 %. */
+  captionWidth?: number;
+  /** layout "bleed": the caption's distance from its corner as a share of the short side (0.01-0.15, default 0.05). */
+  captionInset?: number }
 
 /** A local font file for shots.fonts. license: 'OFL-1.1', 'proprietary' or a short note (shown by `shots fonts`;
  *  `shots check` warns without one). weight / style: the @font-face descriptors (default: all weights, normal). */
@@ -144,6 +153,16 @@ export interface ShotsConfig {
    *  device frame, headline + subline, no sparkles or badges). Default: app for the app / subscription-app profiles,
    *  else game. */
   style?: 'game' | 'app';
+  /** "device" (default): the frames inside device outlines on the style's background, titles above. "bleed": the
+   *  frame fills the whole image (no device, no background) and the scene's title is a short caption in one corner
+   *  (scene.corner), legible through a text shadow and a soft glow only. Bleed frames are captured per size at the
+   *  size's own pixels: <frames>/<languageId>/<size>/<name>.png (feature: <frames>/<languageId>/feature/<name>);
+   *  that includes the mac and chromebook sizes. */
+  layout?: 'device' | 'bleed';
+  /** "landscape" (only with layout "bleed"): every portrait screenshot size is rendered landscape (width and height
+   *  swapped; the feature graphic, mac and chromebook are landscape anyway). Both stores accept landscape
+   *  screenshots. Default "portrait". */
+  orientation?: 'portrait' | 'landscape';
   /** JSON file: { [languageId]: { [sceneId]: { eyebrow, title: [line1, line2], sub, badges: [[big, small?]] } } } */
   copy: string;
   /** Raw frames: <frames>/<languageId>/<phone|tablet>/<name>.png */
@@ -164,6 +183,8 @@ export interface ShotsConfig {
    *  bottom edge on purpose (shots check then allows it). `scale` (0.5-1.5, default 1) multiplies the phone's width
    *  (still clamped to the canvas with 'contain'). */
   feature?: { frame: string; palette?: string | Palette; fit?: 'contain' | 'bleed'; scale?: number;
+    /** layout "bleed": the name on the feature graphic when there is no logo (default app.name). */
+    title?: string;
     /** Photo background for the feature graphic (path relative to the config, or { image, overlay }); wins over the
      *  palette's image. Also usable for the App Store Header and Search Results art. */
     background?: string | { image: string; overlay?: number } };
@@ -1214,6 +1235,15 @@ export function validateConfig(c: unknown): string[] {
     const s = cfg.shots;
     for (const k of ['copy', 'frames', 'out'] as const) if (!s[k]) e.push(`shots.${k}: missing`);
     if (s.style !== undefined && s.style !== 'game' && s.style !== 'app') e.push('shots.style: game | app');
+    if (s.layout !== undefined && s.layout !== 'device' && s.layout !== 'bleed') e.push('shots.layout: device | bleed');
+    if (s.orientation !== undefined && s.orientation !== 'portrait' && s.orientation !== 'landscape') e.push('shots.orientation: portrait | landscape');
+    else if (s.orientation === 'landscape' && s.layout !== 'bleed') e.push("shots.orientation: 'landscape' needs shots.layout: 'bleed' (the device layouts draw portrait phones)");
+    for (const sc of s.scenes ?? []) {
+      if (sc.corner !== undefined && !['tl', 'tr', 'bl', 'br'].includes(sc.corner)) e.push(`shots.scenes ${sc.id}: corner tl | tr | bl | br`);
+      if (sc.captionScale !== undefined && !(sc.captionScale >= 0.6 && sc.captionScale <= 1.4)) e.push(`shots.scenes ${sc.id}: captionScale 0.6-1.4`);
+      if (sc.captionWidth !== undefined && !(sc.captionWidth >= 0.2 && sc.captionWidth <= 0.9)) e.push(`shots.scenes ${sc.id}: captionWidth 0.2-0.9`);
+      if (sc.captionInset !== undefined && !(sc.captionInset >= 0.01 && sc.captionInset <= 0.15)) e.push(`shots.scenes ${sc.id}: captionInset 0.01-0.15`);
+    }
     if (!s.scenes?.length) e.push('shots.scenes: at least one scene');
     if (s.landscape?.frame !== undefined && s.landscape.frame !== 'window' && s.landscape.frame !== 'none') e.push("shots.landscape.frame: 'window' | 'none'");
     if (s.landscape?.side !== undefined && s.landscape.side !== 'left' && s.landscape.side !== 'right') e.push("shots.landscape.side: 'left' | 'right'");
diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index f5917f9..f392f2f 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -39,8 +39,10 @@ export const TEMPLATE_TEXT: Record<string, string> = {
 export const SHOTS_PAGES: Record<string, string> = {
   "caption.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Caption overlay for app preview videos (transparent PNG, rendered by `storebound shots video`, overlaid by ffmpeg).\n     caption.html?w=<px>&h=<px>&lang=<id>&i=<caption index>. Same title font, stroke and colours as the screenshots. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { background: transparent; overflow: hidden; }\n  #c { position: relative; width: var(--W); height: var(--H); }\n  .cap { position: absolute; left: 50%; top: calc(var(--u) * 7); transform: translateX(-50%) rotate(-1.5deg); max-width: calc(var(--u) * 90);\n    padding: calc(var(--u) * 2.6) calc(var(--u) * 5) calc(var(--u) * 3); border-radius: calc(var(--u) * 5); text-align: center;\n    background: linear-gradient(180deg, rgba(0,0,0,.42), rgba(0,0,0,.28)); box-shadow: inset 0 0 0 calc(var(--u) * .35) rgba(255,255,255,.3);\n    font-family: var(--tf); font-weight: var(--tw); font-size: calc(var(--u) * var(--fs)); line-height: 1.04; color: #fff;\n    -webkit-text-stroke: calc(var(--u) * var(--fs) * .07) var(--ink); paint-order: stroke fill; text-wrap: balance;\n    filter: drop-shadow(0 calc(var(--u) * .7) 0 var(--ink)); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), I = +q.get('i');\nconst job = await (await fetch(`/caption.json?lang=${encodeURIComponent(LANG)}&i=${I}`)).json();\nconst u = Math.min(W, H) / 100, R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', job.ink); R.setProperty('--fs', W > H ? 6.4 : 8.2);\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : 400);\nconst el = document.createElement('div');\nel.className = 'cap';\nif (job.rtl) el.dir = 'rtl';\nel.textContent = job.text;\ndocument.getElementById('c').append(el);\nawait document.fonts.ready;\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, app style, 1024 x 500: logo (or the app name) on the left on a calm gradient, an upright phone\n     with one frame on the right. feature-app.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render` when\n     the screenshot style is app. Keep text out of it apart from the name: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #fff; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 760px; top: 260px; width: 700px; height: 600px; transform: translate(-50%, -50%); z-index: -1;\n    border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n  .logo { position: absolute; left: 330px; top: 250px; width: 440px; max-height: 220px; object-fit: contain; transform: translate(-50%, -50%); z-index: 5; }\n  .name { position: absolute; left: 330px; top: 250px; transform: translate(-50%, -50%); z-index: 5; width: 520px; text-align: center;\n    font-family: var(--tf); font-weight: 750; font-size: 76px; line-height: 1.02; letter-spacing: -.02em; color: var(--ink); }\n  .tel { position: absolute; left: 690px; top: 40px; width: 230px; aspect-ratio: var(--ar); z-index: 3; border-radius: 36px; padding: 5px;\n    background: #121317; box-shadow: inset 0 0 0 1px #3a3c44, 0 22px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 31px; background: #fff; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #fff center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 19px; background: #000; border-radius: 99px; }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"soft\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(135deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accentSoft', rgba(P.glow, .18));\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
+  "feature-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst R = document.documentElement.style;\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\ndocument.documentElement.lang = lang;\nconst c = document.getElementById('c');\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, 1024 x 500: logo (or the app name) on the left, a tilted phone with one frame on the right.\n     feature.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render`. Keep text out of it: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .rays { position: absolute; left: 360px; top: 250px; width: 1700px; height: 1700px; transform: translate(-50%, -50%) rotate(8deg); z-index: -4;\n    opacity: .55; background: repeating-conic-gradient(rgba(255,255,255,.22) 0deg 7deg, rgba(255,255,255,0) 7deg 18deg);\n    -webkit-mask-image: radial-gradient(closest-side, #000 0%, rgba(0,0,0,.6) 30%, transparent 75%); }\n  .glow { position: absolute; left: 360px; top: 250px; width: 900px; height: 700px; transform: translate(-50%, -50%); z-index: -3;\n    background: radial-gradient(closest-side, var(--glow), transparent); }\n  .vign { position: absolute; inset: 0; z-index: -2; background: radial-gradient(90% 90% at 45% 50%, transparent 60%, rgba(0,0,0,.28) 100%); }\n  .logo { position: absolute; left: 360px; top: 252px; width: 540px; max-height: 400px; object-fit: contain; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5;\n    filter: drop-shadow(0 14px 22px rgba(0,0,0,.4)); }\n  .name { position: absolute; left: 360px; top: 250px; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5; width: 540px; text-align: center;\n    font-family: var(--tf); font-size: 104px; line-height: .95; color: #fff; -webkit-text-stroke: 9px var(--ink); paint-order: stroke fill;\n    filter: drop-shadow(0 8px 0 var(--ink)) drop-shadow(0 14px 22px rgba(0,0,0,.35)); }\n  .tel { position: absolute; left: 748px; top: 36px; width: 232px; aspect-ratio: var(--ar); transform: rotate(7deg); z-index: 3;\n    border-radius: 40px; padding: 6px;\n    background: linear-gradient(140deg, #f4f4f6 0%, #9da0a8 8%, #3c3e44 20%, #1a1b1f 50%, #3c3e44 82%, #c8cad0 100%);\n    box-shadow: inset 0 0 0 1px rgba(255,255,255,.6), inset 0 0 0 3px #101114, 0 20px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 34px; background: #000; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #0b0b10 center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 20px; background: #000; border-radius: 99px; }\n  .spark { position: absolute; width: var(--s); height: var(--s); transform: translate(-50%, -50%); background: #fff; z-index: -1;\n    clip-path: polygon(50% 0, 58% 42%, 100% 50%, 58% 58%, 50% 100%, 42% 58%, 0 50%, 42% 42%); opacity: var(--o); filter: drop-shadow(0 0 6px #fff); }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"glow\"></div><div class=\"rays\"></div><div class=\"vign\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(160deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--glow', P.glow); R.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow);\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nlet seed = 7; const rnd = () => ((seed = (seed * 1664525 + 1013904223) >>> 0) / 4294967296);\nfor (let i = 0; i < 22; i++)\n  c.insertAdjacentHTML('beforeend', `<i class=\"spark\" style=\"left:${rnd() * 1024}px;top:${rnd() * 500}px;--s:${8 + rnd() * 18}px;--o:${.5 + rnd() * .5}\"></i>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!--\n  Store screenshot template, app style (shots.style 'app', the default for the app / subscription-app profiles).\n  template-app.html?s=<scene id>&w=<px>&h=<px>&lang=<id>[&device=tablet][&style=android][&v=<variant>]\n  Calm: a soft gradient (or solid) background, one clean device frame, a headline (two lines) and a subline. No\n  sunburst, no sparkles; badges only when the copy has them, drawn as quiet chips. Same /job.json as template.html\n  (palette: bg = gradient stops, ink = headline, glow = accent, shadow = device shadow).\n  Layout: everything is in u = W / 100; the text block is measured first, then the device fills the room below it.\n  device=landscape: u = H / 100, copy column on one side, the landscape frame in a Mac window (frame=window) or bare\n  (frame=none) on the other (as template.html). Safe margins: 7 % of the width left / right, 5 % of the height at the\n  top; text and logo boxes go to body.dataset.boxes for shots check.\n-->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { overflow: hidden; background: #fff; }\n  body { font-family: var(--bf); -webkit-font-smoothing: antialiased; color: var(--ink); }\n  #c { position: relative; overflow: hidden; width: var(--W); height: var(--H); isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 50%; top: var(--softY); width: calc(var(--u) * 140); height: calc(var(--u) * 110); z-index: -1;\n    transform: translate(-50%, -50%); border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n\n  .top { position: absolute; left: 0; right: 0; top: calc(var(--u) * var(--top)); text-align: center; z-index: 6;\n    padding: 0 calc(var(--W) * .07); display: flex; flex-direction: column; align-items: center; }\n  .eyebrow { margin-bottom: calc(var(--u) * 2.4); font-size: calc(var(--u) * 2.9); font-weight: 700; letter-spacing: var(--kls, .14em);\n    text-transform: uppercase; color: var(--accent); line-height: 1.2; }\n  h1 { font-family: var(--tf); font-weight: var(--tw); line-height: var(--lh); letter-spacing: var(--ls, -.02em);\n    font-size: calc(var(--u) * var(--fs)); color: var(--ink); }\n  h1 span { display: block; width: max-content; max-width: none; margin: 0 auto; white-space: nowrap; }\n  h1 span + span { color: var(--line2); }\n  p.sub { margin-top: calc(var(--u) * 2.4); max-width: calc(var(--u) * 78); font-size: calc(var(--u) * var(--sub));\n    line-height: 1.38; font-weight: 500; color: var(--ink); opacity: .72; text-wrap: balance; }\n  .logo { width: min(100%, calc(var(--u) * 60)); max-height: calc(var(--u) * 26); object-fit: contain; margin-bottom: calc(var(--u) * 3); }\n\n  /* device: a plain modern phone, dark bezel, soft shadow */\n  .tel { position: absolute; z-index: 3; width: var(--pw); aspect-ratio: var(--ar); left: var(--px); top: var(--py);\n    transform: translateX(-50%) rotate(var(--pr, 0deg)); transform-origin: 50% 40%;\n    border-radius: calc(var(--pw) * .155); padding: calc(var(--pw) * .022); background: #121317;\n    box-shadow: inset 0 0 0 calc(var(--pw) * .005) #3a3c44, 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08),\n      0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .tel.back { z-index: 2; opacity: .96; }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; background: #fff; border-radius: calc(var(--pw) * .135); }\n  .screen img.app { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .bar { position: absolute; top: 0; left: 0; right: 0; height: var(--barH); display: flex; align-items: center;\n    justify-content: space-between; padding: 0 8.5% 0 11.5%; font-family: -apple-system, 'SF Pro Text', var(--bf), sans-serif;\n    font-weight: 600; font-size: calc(var(--pw) * .041); z-index: 2; color: var(--barInk, #fff);\n    background: #ffffff center top / 100% 60000% no-repeat; }\n  .bar svg { height: calc(var(--pw) * .03); width: auto; margin-left: calc(var(--pw) * .012); }\n  .island { position: absolute; top: calc(var(--pw) * .025); left: 50%; transform: translateX(-50%); width: 30%; height: calc(var(--pw) * .082);\n    background: #000; border-radius: 999px; z-index: 3; }\n  .tablet .tel { border-radius: calc(var(--pw) * .06); padding: calc(var(--pw) * .018); }\n  .tablet .screen { border-radius: calc(var(--pw) * .044); }\n  .tablet .bar { padding: 0 5%; font-size: calc(var(--pw) * .024); }\n  .tablet .bar svg { height: calc(var(--pw) * .018); }\n  .tablet .island { width: calc(var(--pw) * .016); height: calc(var(--pw) * .016); top: calc(var(--pw) * .007); }\n  .android .tel { border-radius: calc(var(--pw) * .04); padding: calc(var(--pw) * .014); }\n  .android .screen { border-radius: calc(var(--pw) * .028); }\n  .android .island { width: calc(var(--pw) * .013); height: calc(var(--pw) * .013); top: calc(var(--pw) * .009); }\n  .android .bar { padding: 0 4%; }\n\n  .land .top { right: auto; width: var(--colW); padding: 0; left: var(--colL); }\n  .lwin { position: absolute; z-index: 3; left: var(--lx); top: var(--ly); width: var(--lw); border-radius: calc(var(--lw) * .012);\n    overflow: hidden; background: #1c1c1e; box-shadow: 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08), 0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .lwin .tb { height: calc(var(--lw) * .028); display: flex; align-items: center; gap: calc(var(--lw) * .006); padding-left: calc(var(--lw) * .012); background: #e8e8ea; }\n  .lwin .tb i { width: calc(var(--lw) * .009); height: calc(var(--lw) * .009); border-radius: 50%; background: #ff5f57; }\n  .lwin .tb i:nth-child(2) { background: #febc2e; } .lwin .tb i:nth-child(3) { background: #28c840; }\n  .lwin img { display: block; width: 100%; aspect-ratio: var(--lar); object-fit: cover; }\n  .lwin.bare { border-radius: calc(var(--lw) * .02); } .lwin.bare .tb { display: none; }\n  .chip { position: absolute; z-index: 9; display: flex; flex-direction: column; padding: calc(var(--u) * 1.8) calc(var(--u) * 3);\n    border-radius: calc(var(--u) * 3); background: rgba(255,255,255,.92); color: #111827; white-space: nowrap;\n    box-shadow: 0 calc(var(--u) * 1) calc(var(--u) * 3.5) rgba(15,23,42,.14); }\n  .chip b { font-family: var(--tf); font-weight: 700; font-size: calc(var(--u) * 3.6); line-height: 1.1; }\n  .chip small { font-size: calc(var(--u) * 2.3); font-weight: 500; opacity: .65; margin-top: calc(var(--u) * .3); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '';\nconst tablet = q.get('device') === 'tablet', LAND = q.get('device') === 'landscape';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst u = LAND ? H / 100 : W / 100, Hu = H / u;\nconst dev = LAND ? job.landscape : tablet ? job.tablet : job.phone;\nconst FR = `/frames/${encodeURIComponent(LANG)}/${LAND ? 'landscape' : tablet ? 'tablet' : 'phone'}/`;\nconst MX = W * .07, MT = H * .05;                       // safe margins (lib.ts SAFE_MARGIN)\nconst colW = W * .36, colL = job.side === 'right' ? W - MX - colW : MX;\n\ndocument.documentElement.lang = LANG;\nconst RTL = !!job.rtl;\nconst R = document.documentElement.style;\n// #rrggbb -> rgba with alpha, for the soft accent glow\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nconst lum = hex => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return 1; const n = parseInt(m[1], 16); return (.299 * (n >> 16) + .587 * ((n >> 8) & 255) + .114 * (n & 255)) / 255; };\nconst tone = P.bgTone ?? (Array.isArray(P.bg) ? P.bg[1] : P.bg);\nconst dark = !!P.photo && P.photo.overlay >= .35 || lum(tone) < .45;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', P.ink); R.setProperty('--accent', P.glow); R.setProperty('--shadow', P.shadow);\nR.setProperty('--line2', dark ? P.glow : P.ink);\nR.setProperty('--accentSoft', rgba(P.glow, dark ? .28 : .14));\n// bgCss from job.json (palette.ts bgCss / photoCss): stops, one colour, a CSS gradient string, or a photo under an overlay\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(180deg, ${P.bg.join(', ')})` : P.bg));\nconst T = job.fonts.title, B = job.fonts.body, X = job.fonts.script;\n// titleStack / bodyStack (from shots fonts): script face, the configured font, then any automatic Noto fallback\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, T));\nR.setProperty('--bf', fstack(job.fonts.bodyStack, B));\nR.setProperty('--tw', 750);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.18 : 1.06);\nif (X) { R.setProperty('--ls', '0'); R.setProperty('--kls', '0'); }\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nif (tablet) document.body.classList.add('tablet');\nif (q.get('style') === 'android') document.body.classList.add('android');\nif (LAND) { document.body.classList.add('land'); R.setProperty('--colW', colW + 'px'); R.setProperty('--colL', colL + 'px'); }\nconst tall = !LAND && Hu > 200, wide = !LAND && Hu < 150;\nR.setProperty('--top', Math.max(tall ? 9.5 : wide ? 4.5 : 6, MT / u));\nR.setProperty('--fs', LAND ? 8.5 : tall ? 8.6 : wide ? 5.6 : 7);\nR.setProperty('--sub', LAND ? 3.4 : tall ? 3.7 : wide ? 2.6 : 3.2);\nconst AR = dev.w / (dev.h + dev.bar);\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\n\nconst c = document.getElementById('c');\nconst esc = s => { const t = String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\n  return RTL ? t.replace(/\\d+(?:\\s*\\/\\s*\\d+)?/g, m => '⁦' + m + '⁩') : t; };\nlet top = '';\nif (S.hero && job.logo) top += `<img class=\"logo\" src=\"/logo\">`;\nif (C.eyebrow) top += `<div class=\"eyebrow\">${esc(C.eyebrow)}</div>`;\ntop += `<h1><span>${esc(C.title?.[0])}</span>${C.title?.[1] ? `<span>${esc(C.title[1])}</span>` : ''}</h1>`;\nif (C.sub) top += `<p class=\"sub\">${esc(C.sub)}</p>`;\nc.innerHTML = `<div class=\"soft\"></div><div class=\"top\"${RTL ? ' dir=\"rtl\"' : ''}>${top}</div>`;\n\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nfor (const [i, sp] of [...c.querySelectorAll('h1 span')].entries()) {\n  const max = LAND ? colW : W - 2 * MX, wd = sp.getBoundingClientRect().width;\n  let f = 1; while (wd * f > max && f > .55) f -= .02;\n  if (f < 1) sp.style.fontSize = `calc(${getComputedStyle(sp).fontSize} * ${f.toFixed(2)})`;\n  if (wd * f > max + 1) overflow.push(`title line ${i + 1} is too long even at 55 % size: shorten it`);\n  else if (f < .7) overflow.push(`title line ${i + 1} shrunk to ${Math.round(f * 100)} %: consider shorter words`);\n}\nconst subEl = c.querySelector('p.sub');\nif (subEl) { const lines = Math.round(subEl.getBoundingClientRect().height / parseFloat(getComputedStyle(subEl).lineHeight)); if (lines > 3) overflow.push(`subtitle wraps to ${lines} lines (max 3)`); }\nconst textBottom = c.querySelector('.top').getBoundingClientRect().bottom / u;\nportrait: {\nif (LAND) {\n  const topEl = c.querySelector('.top'), bh = topEl.getBoundingClientRect().height;\n  topEl.style.top = Math.max(MT, (H - bh) / 2) + 'px';\n  if (bh > H - MT * 2) overflow.push('text block is taller than the image: shorten the copy');\n  const f = S.frames[0], src = FR + encodeURIComponent(f.src), bare = q.get('frame') === 'none';\n  const x0 = job.side === 'right' ? W * .04 : colL + colW + W * .05, x1 = job.side === 'right' ? colL - W * .05 : W - W * .04;\n  let lw = x1 - x0;\n  const lh = k => k / (dev.w / dev.h) + (bare ? 0 : k * .028);\n  if (lh(lw) > H * .88) lw = lw * H * .88 / lh(lw);\n  R.setProperty('--lar', `${dev.w} / ${dev.h}`); R.setProperty('--softY', H / 2 + 'px');\n  c.insertAdjacentHTML('beforeend', `<div class=\"lwin front${bare ? ' bare' : ''}\" style=\"--lw:${lw}px;--lx:${(x0 + x1 - lw) / 2}px;--ly:${(H - lh(lw)) / 2}px\"><div class=\"tb\"><i></i><i></i><i></i></div><img src=\"${src}\"></div>`);\n  await Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n  break portrait;\n}\n\nconst frames = S.frames.map(f => ({ x: 0, dy: 0, scale: 1, rotate: 0, ...f }));\nconst front = frames[0];\nconst pTop = textBottom + (tall ? 6 : 4.5);\nconst room = Hu - pTop + (S.over ?? 9);\nconst pw = Math.min(tablet ? 80 : 74, Math.max(52, room * AR)) * front.scale;\nconst ph = pw / AR;\nR.setProperty('--softY', (pTop + ph * .35) * u + 'px');\n\n// status bar text colour from the frame's own top row (dark text on a light app bar)\nasync function barInk(src) {\n  try {\n    const img = new Image(); img.src = src; await img.decode();\n    const cv = document.createElement('canvas'); cv.width = 8; cv.height = 2;\n    const g = cv.getContext('2d'); g.drawImage(img, 0, 0, img.naturalWidth, 2, 0, 0, 8, 2);\n    const d = g.getImageData(0, 0, 8, 1).data; let L = 0;\n    for (let i = 0; i < d.length; i += 4) L += .299 * d[i] + .587 * d[i + 1] + .114 * d[i + 2];\n    return L / (d.length / 4) > 150 ? '#111' : '#fff';\n  } catch { return '#fff'; }\n}\nconst BAR = `<span>9:41</span><span style=\"display:flex;align-items:center\">\n<svg viewBox=\"0 0 18 12\"><g fill=\"currentColor\"><rect x=\"0\" y=\"8\" width=\"3\" height=\"4\" rx=\".8\"/><rect x=\"5\" y=\"5.5\" width=\"3\" height=\"6.5\" rx=\".8\"/><rect x=\"10\" y=\"3\" width=\"3\" height=\"9\" rx=\".8\"/><rect x=\"15\" y=\"0\" width=\"3\" height=\"12\" rx=\".8\"/></g></svg>\n<svg viewBox=\"0 0 16 12\"><path fill=\"currentColor\" d=\"M8 2.2c2.3 0 4.4.9 6 2.4l1.3-1.3A10.3 10.3 0 0 0 8 .4C5.2.4 2.6 1.5.7 3.3L2 4.6a8.5 8.5 0 0 1 6-2.4zm0 3.6c1.3 0 2.5.5 3.4 1.3l1.3-1.3A6.6 6.6 0 0 0 8 4c-1.8 0-3.4.7-4.7 1.8l1.3 1.3C5.5 6.3 6.7 5.8 8 5.8zm0 3.6c.4 0 .8.2 1.1.4L8 11.6 6.9 9.8c.3-.2.7-.4 1.1-.4z\"/></svg>\n<svg viewBox=\"0 0 27 13\"><rect x=\".5\" y=\".5\" width=\"23\" height=\"12\" rx=\"3.5\" fill=\"none\" stroke=\"currentColor\" stroke-opacity=\".45\"/><rect x=\"2\" y=\"2\" width=\"20\" height=\"9\" rx=\"2.2\" fill=\"currentColor\"/><path d=\"M25 4.5v4c.8-.3 1.4-1.1 1.4-2s-.6-1.7-1.4-2z\" fill=\"currentColor\" fill-opacity=\".45\"/></svg></span>`;\n\nlet html = '';\nconst phone = async (f, cls) => {\n  const w = pw / front.scale * f.scale, src = FR + encodeURIComponent(f.src);\n  const ink = await barInk(src);\n  return `<div class=\"tel ${cls}\" style=\"--pw:${w * u}px;--px:${(50 + f.x) * u}px;--py:${(pTop + f.dy) * u}px;--pr:${f.rotate}deg\"><div class=\"screen\">\n    <div class=\"bar\" style=\"background-image:url('${src}');--barInk:${ink}\">${BAR}</div><div class=\"island\"></div><img class=\"app\" src=\"${src}\"></div></div>`;\n};\nfor (const f of frames.slice(1)) html += await phone(f, 'back');\nhtml += await phone(front, 'front');\n(S.badges ?? []).forEach((b, i) => {\n  const [big, small] = (C.badges ?? [])[i] ?? [''];\n  if (!big) return;\n  const pos = b.side === 'l' ? `left:${5 * u}px` : `right:${5 * u}px`;\n  html += `<div class=\"chip\"${RTL ? ' dir=\"rtl\"' : ''} style=\"${pos};top:${Math.min(pTop + ph * b.y, Hu - 14) * u}px\"><b>${esc(big)}</b>${small ? `<small>${esc(small)}</small>` : ''}</div>`;\n});\nc.insertAdjacentHTML('beforeend', html);\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nif (textBottom > Hu * .45) overflow.push(`text block covers ${Math.round(textBottom / Hu * 100)} % of the height (the app should be the star)`);\nfor (const b of c.querySelectorAll('.chip')) { const r = b.getBoundingClientRect(); if (r.left < 0 || r.right > W || r.bottom > H) overflow.push(`badge \"${b.textContent.trim().slice(0, 30)}\" runs off the image`); }\n}\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.top .logo, .top .eyebrow, .top h1 span, .top p.sub')].map(e => { const r = e.getBoundingClientRect();\n  return { el: e.matches('.logo') ? 'logo' : e.matches('.eyebrow') ? 'eyebrow' : e.matches('p') ? 'subtitle' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }).filter(b => b.w > 0 && b.h > 0));\n// the front device only: back phones of a fanned layout peek in from the side on purpose\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel.front, .lwin')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
+  "template-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Full-bleed layout (shots.layout \"bleed\"): the app's own frame fills the whole image, no device and no background,\n     and a short caption sits in one corner. Legibility comes from a text shadow and a soft glow only: no band, no\n     scrim, no box behind the words. template-bleed.html?s=<scene>&w=<px>&h=<px>&lang=<id>&size=<size key>.\n     The frame is read at the size's own pixels: /frames/<lang>/<size>/<src> (shots check: frames for \"bleed\").\n     Colours from the scene palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = line 2.\n     A dark custom palette suits it, e.g. { bg: [...], ink: 'rgba(4,18,38,.92)', shadow: 'rgba(4,22,48,.55)', glow: '#ffd76a' }. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: var(--W); height: var(--H); overflow: hidden; background: #000; }\n  #c { position: relative; width: var(--W); height: var(--H); overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .cap { position: absolute; max-width: calc(var(--W) * var(--mw)); display: flex; flex-direction: column; gap: calc(var(--fs) * .06);\n    font-family: var(--tf); font-weight: var(--tw); font-size: var(--fs); line-height: var(--lh); color: #fff; letter-spacing: var(--ls, .005em);\n    text-wrap: balance;\n    /* a dark outline-shadow for edges, then a wide soft glow: readable on light water and on dark rock alike */\n    text-shadow: 0 0 calc(var(--fs) * .05) var(--ink), 0 calc(var(--fs) * .04) calc(var(--fs) * .08) var(--ink),\n      0 0 calc(var(--fs) * .3) var(--shadow), 0 0 calc(var(--fs) * .6) var(--shadow); }\n  .cap span { display: block; }\n  .cap span + span { color: var(--accent); }\n  .cap.tl { left: var(--mx); top: var(--my); }\n  .cap.tr { right: var(--mx); top: var(--my); text-align: right; align-items: flex-end; }\n  .cap.bl { left: var(--mx); bottom: var(--my); }\n  .cap.br { right: var(--mx); bottom: var(--my); text-align: right; align-items: flex-end; }\n  .cap[dir=\"rtl\"].tl, .cap[dir=\"rtl\"].bl { text-align: right; }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '', SIZE = q.get('size') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nconst short = Math.min(W, H);\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px');\n// caption size from the short side: about 9 % of it on a landscape phone, a little less on squarer canvases\nconst fs = short * (W / H > 1.9 ? .092 : W / H > 1.5 ? .08 : .066) * (S.captionScale ?? 1);\nR.setProperty('--fs', fs + 'px');\nconst inset = S.captionInset ?? .05;                   // distance from the corner, share of the short side\nR.setProperty('--mx', (short * (inset + .005)) + 'px'); R.setProperty('--my', (short * inset) + 'px');\n// the caption keeps to its corner: at most 40 % of a landscape image's width (scene.captionWidth), so it stays clear of\n// what an app centres at the top\nconst MW = S.captionWidth ?? (W > H ? .4 : .84);\nR.setProperty('--mw', MW);\n// palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = the second line's colour\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accent', P.glow);\nconst X = job.fonts.script;\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, job.fonts.title));\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.16 : 1.04);\nif (X) R.setProperty('--ls', '0');\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nconst RTL = !!job.rtl;\nconst esc = s => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\nconst corner = ['tl', 'tr', 'bl', 'br'].includes(S.corner) ? S.corner : 'tl';\nconst src = `/frames/${encodeURIComponent(LANG)}/${encodeURIComponent(SIZE)}/${encodeURIComponent(S.frames[0].src)}`;\nconst lines = (C.title ?? []).filter(Boolean);\nconst c = document.getElementById('c');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\"><div class=\"cap ${corner}\"${RTL ? ' dir=\"rtl\"' : ''}>${lines.map(l => `<span>${esc(l)}</span>`).join('')}</div>`;\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];                                    // read by `shots render` -> report.json -> shots check / gallery\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`frame ${SIZE}/${S.frames[0].src} did not load`);\nelse {\n  const ar = img.naturalWidth / img.naturalHeight, want = W / H;\n  if (Math.abs(ar / want - 1) > .01) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is cropped to fit ${W}x${H}: capture it at the size's aspect`);\n  if (img.naturalWidth < W * .99) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is upscaled to ${W}x${H}: capture it at native resolution`);\n}\nconst cap = c.querySelector('.cap');\nconst maxW = W * MW;\nfor (const [i, sp] of [...cap.querySelectorAll('span')].entries()) {   // shrink a line that would not fit its corner\n  const wd = sp.scrollWidth;\n  let f = 1; while (wd * f > maxW && f > .6) f -= .02;\n  if (f < 1) sp.style.fontSize = `${(fs * f).toFixed(1)}px`;\n  if (wd * f > maxW + 1) overflow.push(`caption line ${i + 1} is too long even at 60 % size: shorten it`);\n}\nconst r = cap.getBoundingClientRect();\nif (r.left < 0 || r.top < 0 || r.right > W || r.bottom > H) overflow.push('caption runs off the image');\nif (r.height > H * .42) overflow.push(`caption covers ${Math.round(r.height / H * 100)} % of the height: shorten it`);\nif (lines.join(' ').split(/\\s+/).length > 6 && !CJK && !/^th/.test(LANG)) overflow.push('caption has more than 6 words: keep it to 3-5');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!--\n  Store screenshot template (rendered by `storebound shots render`, served by its local server).\n  template.html?s=<scene id>&w=<px>&h=<px>&lang=<id>[&device=tablet][&style=android][&v=<variant>]\n  style=android (Play 7\" / 10\" tablets): a plain Android tablet body (thin dark bezel, punch-hole camera) instead of the iPad look.\n  /job.json gives the scene (palette, frames, badge slots), the words for this language and the font families.\n  Layout: everything is in u = W / 100; the text block is measured first, then the phone fills the room below it.\n  device=landscape (Mac, Chromebook, Play tablets with shots.landscape.playTablets): u = H / 100, the copy in a column on\n  one side (job.side), the first frame of the scene from frames/<lang>/landscape/ on the other, in a Mac window\n  (frame=window) or bare with rounded corners (frame=none). Badges are not drawn in landscape.\n  Safe margins (lib.ts SAFE_MARGIN): text and logo keep 7 % of the width left and right and 5 % of the height at the\n  top; their boxes go to body.dataset.boxes -> report.json -> shots check.\n-->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { overflow: hidden; background: #000; }\n  body { font-family: var(--bf); -webkit-font-smoothing: antialiased; color: #fff; }\n  #c { position: relative; overflow: hidden; width: var(--W); height: var(--H); isolation: isolate; background: var(--bg); }\n\n  /* background: sunburst, glow, vignette, sparkles */\n  .rays { position: absolute; left: 50%; top: var(--rayY); width: calc(var(--u) * 260); height: calc(var(--u) * 260);\n    transform: translate(-50%, -50%) rotate(var(--rayRot, 0deg)); z-index: -4; opacity: .55;\n    background: repeating-conic-gradient(from 0deg, rgba(255,255,255,.20) 0deg 7deg, rgba(255,255,255,0) 7deg 18deg);\n    -webkit-mask-image: radial-gradient(closest-side, #000 0%, rgba(0,0,0,.65) 35%, transparent 80%); }\n  .glow { position: absolute; left: 50%; top: var(--rayY); width: calc(var(--u) * 150); height: calc(var(--u) * 150); z-index: -3;\n    transform: translate(-50%, -50%); background: radial-gradient(closest-side, var(--glow) 0%, transparent 100%); opacity: .9; }\n  .vign { position: absolute; inset: 0; z-index: -2; pointer-events: none;\n    background: radial-gradient(120% 70% at 50% 45%, transparent 55%, rgba(0,0,0,.28) 100%); }\n  .spark { position: absolute; z-index: -1; width: var(--s); height: var(--s); transform: translate(-50%, -50%) rotate(var(--r));\n    background: #fff; opacity: var(--o);\n    clip-path: polygon(50% 0, 58% 42%, 100% 50%, 58% 58%, 50% 100%, 42% 58%, 0 50%, 42% 42%);\n    filter: drop-shadow(0 0 calc(var(--u) * .8) rgba(255,255,255,.9)); }\n  .dot { position: absolute; z-index: -1; width: var(--s); height: var(--s); border-radius: 50%; transform: translate(-50%, -50%);\n    background: radial-gradient(circle, rgba(255,255,255,.55), rgba(255,255,255,0) 70%); }\n\n  /* text block */\n  .top { position: absolute; left: 0; right: 0; top: calc(var(--u) * var(--top)); text-align: center; z-index: 6;\n    padding: 0 calc(var(--W) * .07); display: flex; flex-direction: column; align-items: center; }\n  .eyebrow { display: inline-flex; align-items: center; gap: calc(var(--u) * 1.6); margin-bottom: calc(var(--u) * 3);\n    padding: calc(var(--u) * 1.15) calc(var(--u) * 3) calc(var(--u) * 1.15) calc(var(--u) * 1.3); border-radius: 999px;\n    background: rgba(0,0,0,.26); box-shadow: inset 0 0 0 calc(var(--u) * .25) rgba(255,255,255,.28);\n    font-size: calc(var(--u) * 2.75); font-weight: 800; letter-spacing: var(--kls, .2em); text-transform: uppercase; line-height: 1.15; }\n  .eyebrow b { display: grid; place-items: center; width: calc(var(--u) * 5); height: calc(var(--u) * 5); border-radius: 50%;\n    background: linear-gradient(180deg, #fff3a8, #ffc31f 55%, #ff9500); color: #5a2300; font-weight: 900; letter-spacing: 0;\n    font-size: calc(var(--u) * 2.5); box-shadow: 0 calc(var(--u) * .35) 0 rgba(0,0,0,.25); }\n  h1 { font-family: var(--tf); font-weight: var(--tw); line-height: var(--lh); letter-spacing: var(--ls, .005em);\n    font-size: calc(var(--u) * var(--fs)); color: #fff;\n    -webkit-text-stroke: calc(var(--u) * var(--fs) * var(--sk, .085)) var(--ink); paint-order: stroke fill;\n    filter: drop-shadow(0 calc(var(--u) * .9) 0 var(--ink)) drop-shadow(0 calc(var(--u) * 1.6) calc(var(--u) * 2.2) rgba(0,0,0,.3)); }\n  h1 span { display: block; width: max-content; margin: 0 auto; white-space: nowrap; }\n  h1 span + span { color: #ffd23a; font-size: .86em; margin-top: .06em; }\n  p.sub { margin-top: calc(var(--u) * 2.6); max-width: calc(var(--u) * 80); font-size: calc(var(--u) * var(--sub));\n    line-height: 1.32; font-weight: 700; color: #fff; text-wrap: balance;\n    text-shadow: 0 calc(var(--u) * .3) calc(var(--u) * 1) rgba(0,0,0,.35); }\n  .logo { width: 100%; max-height: calc(var(--u) * 32); object-fit: contain; margin: 0 0 calc(var(--u) * 1);\n    filter: drop-shadow(0 calc(var(--u) * 1.5) calc(var(--u) * 2.5) rgba(0,0,0,.35)); }\n\n  /* phone */\n  .tel { position: absolute; z-index: 3; width: var(--pw); aspect-ratio: var(--ar); left: var(--px); top: var(--py);\n    transform: translateX(-50%) rotate(var(--pr, 0deg)); transform-origin: 50% 40%;\n    border-radius: calc(var(--pw) * .16); padding: calc(var(--pw) * .024);\n    background: linear-gradient(140deg, #f4f4f6 0%, #9da0a8 8%, #3c3e44 20%, #1a1b1f 50%, #3c3e44 82%, #c8cad0 100%);\n    box-shadow: inset 0 0 0 calc(var(--pw) * .004) rgba(255,255,255,.6), inset 0 0 0 calc(var(--pw) * .011) #101114,\n      0 calc(var(--u) * 3) calc(var(--u) * 6) rgba(0,0,0,.35), 0 calc(var(--u) * 6) calc(var(--u) * 14) var(--shadow); }\n  .tel.back { z-index: 2; filter: saturate(.9) brightness(.9); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; background: #000; border-radius: calc(var(--pw) * .137); }\n  .screen img.app { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen::after { content: \"\"; position: absolute; inset: 0; z-index: 4; pointer-events: none;\n    background: linear-gradient(115deg, rgba(255,255,255,.12) 0%, rgba(255,255,255,.03) 24%, transparent 40%); }\n  /* status bar: the frame's top pixel row stretched, so it matches the game's own top colour */\n  .bar { position: absolute; top: 0; left: 0; right: 0; height: var(--barH); display: flex; align-items: center;\n    justify-content: space-between; padding: 0 8.5% 0 11.5%; font-family: -apple-system, 'SF Pro Text', sans-serif;\n    font-weight: 600; font-size: calc(var(--pw) * .041); z-index: 2; background: #0b0b10 center top / 100% 60000% no-repeat; }\n  .bar svg { height: calc(var(--pw) * .03); width: auto; margin-left: calc(var(--pw) * .012); }\n  .island { position: absolute; top: calc(var(--pw) * .025); left: 50%; transform: translateX(-50%); width: 30%; height: calc(var(--pw) * .082);\n    background: #000; border-radius: 999px; z-index: 3; }\n  .tablet .tel { border-radius: calc(var(--pw) * .065); padding: calc(var(--pw) * .02); }\n  .tablet .screen { border-radius: calc(var(--pw) * .048); }\n  .tablet .bar { padding: 0 5%; font-size: calc(var(--pw) * .024); }\n  .tablet .bar svg { height: calc(var(--pw) * .018); }\n  .tablet .island { width: calc(var(--pw) * .016); height: calc(var(--pw) * .016); top: calc(var(--pw) * .007); }\n  .android .tel { border-radius: calc(var(--pw) * .04); padding: calc(var(--pw) * .014);\n    background: linear-gradient(160deg, #3a3b41 0%, #1c1d21 30%, #111215 70%, #2c2d33 100%); }\n  .android .screen { border-radius: calc(var(--pw) * .028); }\n  .android .island { width: calc(var(--pw) * .013); height: calc(var(--pw) * .013); top: calc(var(--pw) * .009); }\n  .android .bar { padding: 0 4%; }\n\n  /* landscape: copy column + a Mac window (or the bare frame) */\n  .land .top { right: auto; width: var(--colW); padding: 0; left: var(--colL); }\n  .land h1 span { margin: 0 auto; }\n  .lwin { position: absolute; z-index: 3; left: var(--lx); top: var(--ly); width: var(--lw); border-radius: calc(var(--lw) * .012);\n    overflow: hidden; background: #1c1c1e; box-shadow: 0 0 0 calc(var(--u) * .12) rgba(255,255,255,.18),\n      0 calc(var(--u) * 2) calc(var(--u) * 5) rgba(0,0,0,.35), 0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .lwin .tb { height: calc(var(--lw) * .028); display: flex; align-items: center; gap: calc(var(--lw) * .006); padding-left: calc(var(--lw) * .012);\n    background: linear-gradient(180deg, #3a3a3c, #2c2c2e); }\n  .lwin .tb i { width: calc(var(--lw) * .009); height: calc(var(--lw) * .009); border-radius: 50%; background: #ff5f57; }\n  .lwin .tb i:nth-child(2) { background: #febc2e; } .lwin .tb i:nth-child(3) { background: #28c840; }\n  .lwin img { display: block; width: 100%; aspect-ratio: var(--lar); object-fit: cover; }\n  .lwin.bare { border-radius: calc(var(--lw) * .02); }\n  .lwin.bare .tb { display: none; }\n\n  /* badges */\n  .badge { position: absolute; z-index: 9; display: flex; align-items: center; gap: calc(var(--u) * 2.2);\n    padding: calc(var(--u) * 1.7) calc(var(--u) * 3.6) calc(var(--u) * 1.7) calc(var(--u) * 1.7); border-radius: calc(var(--u) * 4);\n    background: linear-gradient(180deg, #ffffff 0%, #fff6e2 55%, #ffe3b0 100%);\n    box-shadow: inset 0 calc(var(--u) * -.7) 0 rgba(180,90,0,.18), 0 0 0 calc(var(--u) * .55) var(--ink),\n      0 calc(var(--u) * 1.1) 0 calc(var(--u) * .55) var(--ink), 0 calc(var(--u) * 3) calc(var(--u) * 5) rgba(0,0,0,.35);\n    transform: rotate(var(--br, 0deg)); color: var(--ink); white-space: nowrap; }\n  .badge .icon { flex: none; width: calc(var(--u) * 9); height: calc(var(--u) * 9); border-radius: calc(var(--u) * 2.6);\n    display: grid; place-items: center; background: var(--ic, linear-gradient(180deg, #ffd84d, #ff8a00));\n    box-shadow: inset 0 calc(var(--u) * .5) 0 rgba(255,255,255,.45), inset 0 calc(var(--u) * -.6) 0 rgba(0,0,0,.2); }\n  .badge .icon svg { width: 62%; height: 62%; overflow: visible; }\n  .badge b { display: block; font-family: var(--tf); font-weight: var(--tw); font-size: calc(var(--u) * 4.7); line-height: 1.02; }\n  .badge small { display: block; font-size: calc(var(--u) * 2.35); font-weight: 700; opacity: .72; margin-top: calc(var(--u) * .5); }\n  .badge.hot { background: linear-gradient(180deg, #fff27a 0%, #ffc21a 45%, #ff8a00 100%); padding: calc(var(--u) * 2) calc(var(--u) * 4.2); }\n  .badge.hot b { color: #fff; font-size: calc(var(--u) * 5.6); -webkit-text-stroke: calc(var(--u) * .5) #7a2c00; paint-order: stroke fill;\n    text-shadow: 0 calc(var(--u) * .5) 0 #7a2c00; }\n  .badge .stars { display: flex; gap: calc(var(--u) * .4); margin-right: calc(var(--u) * .6); }\n  .badge .stars svg { width: calc(var(--u) * 6.4); height: calc(var(--u) * 6.4); }\n  .badge .stars svg:nth-child(2) { transform: translateY(calc(var(--u) * -1)) scale(1.15); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '';\nconst tablet = q.get('device') === 'tablet', LAND = q.get('device') === 'landscape';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst u = LAND ? H / 100 : W / 100, Hu = H / u;\nconst dev = LAND ? job.landscape : tablet ? job.tablet : job.phone;   // { w, h, bar } in CSS px of the raw frame\nconst FR = `/frames/${encodeURIComponent(LANG)}/${LAND ? 'landscape' : tablet ? 'tablet' : 'phone'}/`;\nconst MX = W * .07, MT = H * .05;                       // safe margins (lib.ts SAFE_MARGIN)\nconst colW = W * .36, colL = job.side === 'right' ? W - MX - colW : MX;\n\ndocument.documentElement.lang = LANG;\nconst RTL = !!job.rtl;\nconst R = document.documentElement.style;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', P.ink); R.setProperty('--glow', P.glow); R.setProperty('--shadow', P.shadow);\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(180deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\n// A script the title font lacks (CJK, Arabic, Cyrillic, ...): the whole line switches to the Noto subset so a word\n// never mixes two typefaces.\nconst T = job.fonts.title, B = job.fonts.body, X = job.fonts.script;\n// titleStack / bodyStack (from shots fonts): script face, the configured font, then any automatic Noto fallback\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, T));\nR.setProperty('--bf', fstack(job.fonts.bodyStack, B));\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.28 : CJK ? 1.12 : .98);\nif (X) { R.setProperty('--ls', '0'); R.setProperty('--kls', '0'); }\nif (CJK) R.setProperty('--sk', '.06');\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nif (tablet) document.body.classList.add('tablet');\nif (q.get('style') === 'android') document.body.classList.add('android');\nif (LAND) { document.body.classList.add('land'); R.setProperty('--colW', colW + 'px'); R.setProperty('--colL', colL + 'px'); }\nconst tall = !LAND && Hu > 200;                                  // iOS 6.9\" / 6.5\" vs 16:9\nconst wide = Hu < 150;                                  // 3:4 iPad\nR.setProperty('--top', Math.max(tall ? 9 : wide ? 4 : 5.5, MT / u));\nR.setProperty('--fs', LAND ? (S.hero ? 9 : 10) : S.hero ? (tall ? 10.5 : wide ? 7 : 8.6) : (tall ? 12 : wide ? 7.6 : 9.8));\nR.setProperty('--sub', LAND ? 3.6 : tall ? 3.75 : wide ? 2.7 : 3.3);\nconst AR = dev.w / (dev.h + dev.bar);\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\n\nconst I = {\n  clock: '<svg viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"13\" r=\"8.5\" fill=\"#fff\" stroke=\"#5a2300\" stroke-width=\"2\"/><path d=\"M12 8v5l3.5 2.2\" stroke=\"#5a2300\" stroke-width=\"2.4\" fill=\"none\" stroke-linecap=\"round\"/><rect x=\"9\" y=\"1.5\" width=\"6\" height=\"3\" rx=\"1.2\" fill=\"#5a2300\"/></svg>',\n  bolt: '<svg viewBox=\"0 0 24 24\"><path d=\"M13.5 1.5 4 14h6.5L9.5 22.5 20 9.5h-6.8z\" fill=\"#fff\" stroke=\"#5a2300\" stroke-width=\"1.8\" stroke-linejoin=\"round\"/></svg>',\n  burst: '<svg viewBox=\"0 0 24 24\"><path d=\"M12 1l2.3 6 6.2-2-3.4 5.6 5.4 3.4-6.4.9.9 6.5L12 17l-5 4.4.9-6.5-6.4-.9 5.4-3.4L3.5 5l6.2 2z\" fill=\"#fff\" stroke=\"#5a2300\" stroke-width=\"1.6\" stroke-linejoin=\"round\"/></svg>',\n  cube: '<svg viewBox=\"0 0 24 24\"><path d=\"M12 2 21 7v10l-9 5-9-5V7z\" fill=\"#fff\" stroke=\"#0a4a2a\" stroke-width=\"1.8\" stroke-linejoin=\"round\"/><path d=\"M3 7l9 5 9-5M12 12v10\" stroke=\"#0a4a2a\" stroke-width=\"1.8\" fill=\"none\"/></svg>',\n  map: '<svg viewBox=\"0 0 24 24\"><path d=\"M3 6l6-2.5 6 2.5 6-2.5v14.5L15 20.5 9 18l-6 2.5z\" fill=\"#fff\" stroke=\"#06336e\" stroke-width=\"1.8\" stroke-linejoin=\"round\"/><path d=\"M9 3.5V18M15 6v14.5\" stroke=\"#06336e\" stroke-width=\"1.8\"/></svg>',\n  star: '<svg viewBox=\"0 0 24 24\"><path d=\"M12 1.8l3 6.4 7 .9-5.1 4.8 1.3 6.9L12 17.4l-6.2 3.4 1.3-6.9L2 9.1l7-.9z\" fill=\"url(#sg)\" stroke=\"#6b2c00\" stroke-width=\"1.6\" stroke-linejoin=\"round\"/><defs><linearGradient id=\"sg\" x1=\"0\" y1=\"0\" x2=\"0\" y2=\"1\"><stop offset=\"0\" stop-color=\"#fff59a\"/><stop offset=\".55\" stop-color=\"#ffcc1a\"/><stop offset=\"1\" stop-color=\"#ff9000\"/></linearGradient></defs></svg>',\n  grid: '<svg viewBox=\"0 0 24 24\"><rect x=\"3\" y=\"3\" width=\"18\" height=\"18\" rx=\"3\" fill=\"#fff\" stroke=\"#5e0636\" stroke-width=\"1.8\"/><path d=\"M3 9h18M3 15h18M9 3v18M15 3v18\" stroke=\"#5e0636\" stroke-width=\"1.5\"/></svg>',\n  gift: '<svg viewBox=\"0 0 24 24\"><rect x=\"3\" y=\"9\" width=\"18\" height=\"12\" rx=\"2\" fill=\"#fff\" stroke=\"#5e0636\" stroke-width=\"1.8\"/><rect x=\"2\" y=\"6\" width=\"20\" height=\"4\" rx=\"1.5\" fill=\"#fff\" stroke=\"#5e0636\" stroke-width=\"1.8\"/><path d=\"M12 6v15M12 6C10 2 6 3 7.5 6M12 6c2-4 6-3 4.5 0\" stroke=\"#5e0636\" stroke-width=\"1.8\" fill=\"none\"/></svg>',\n  offline: '<svg viewBox=\"0 0 24 24\"><path d=\"M2.5 9a14 14 0 0 1 19 0M6 12.5a9 9 0 0 1 12 0M9.4 16a4 4 0 0 1 5.2 0\" stroke=\"#fff\" stroke-width=\"2.4\" fill=\"none\" stroke-linecap=\"round\"/><circle cx=\"12\" cy=\"19.3\" r=\"1.6\" fill=\"#fff\"/><path d=\"M3 3l18 18\" stroke=\"#6e1300\" stroke-width=\"4.4\" stroke-linecap=\"round\"/><path d=\"M3 3l18 18\" stroke=\"#fff\" stroke-width=\"2.2\" stroke-linecap=\"round\"/></svg>',\n  flag: '<svg viewBox=\"0 0 24 24\"><path d=\"M5 22V3\" stroke=\"#6e1300\" stroke-width=\"2.4\" stroke-linecap=\"round\"/><path d=\"M5 3.5h13l-3 4 3 4H5z\" fill=\"#fff\" stroke=\"#6e1300\" stroke-width=\"1.8\" stroke-linejoin=\"round\"/></svg>',\n  trophy: '<svg viewBox=\"0 0 24 24\"><path d=\"M7 3h10v5a5 5 0 0 1-10 0z\" fill=\"#fff\" stroke=\"#6b2c00\" stroke-width=\"1.8\" stroke-linejoin=\"round\"/><path d=\"M7 5H3.5a3.5 3.5 0 0 0 4 4M17 5h3.5a3.5 3.5 0 0 1-4 4M12 13v4M8 21h8l-1-4H9z\" stroke=\"#6b2c00\" stroke-width=\"1.8\" fill=\"#fff\" stroke-linejoin=\"round\"/></svg>',\n  heart: '<svg viewBox=\"0 0 24 24\"><path d=\"M12 21s-8.5-5.3-8.5-11.2A4.8 4.8 0 0 1 12 6.6a4.8 4.8 0 0 1 8.5 3.2C20.5 15.7 12 21 12 21z\" fill=\"#fff\" stroke=\"#5e0636\" stroke-width=\"1.8\" stroke-linejoin=\"round\"/></svg>',\n};\nconst ICON_BG = {\n  gold: 'linear-gradient(180deg,#ffe05a,#ff8a00)', green: 'linear-gradient(180deg,#8ff06a,#16a34a)',\n  blue: 'linear-gradient(180deg,#7fe0ff,#1f7aff)', violet: 'linear-gradient(180deg,#c49bff,#6a2fe0)',\n  pink: 'linear-gradient(180deg,#ffa3c8,#e8306f)', red: 'linear-gradient(180deg,#ff8a6a,#e4251b)',\n};\n\n// seeded rng: every render of a scene is identical\nlet seed = 0; for (const ch of SID + JSON.stringify(P.bg)) seed = (seed * 31 + ch.charCodeAt(0)) >>> 0;\nconst rnd = () => ((seed = (seed * 1664525 + 1013904223) >>> 0) / 4294967296);\n\nconst c = document.getElementById('c');\n// RTL: keep number runs (\"72 / 80\") left-to-right inside right-to-left text\nconst esc = s => { const t = String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\n  return RTL ? t.replace(/\\d+(?:\\s*\\/\\s*\\d+)?/g, m => '⁦' + m + '⁩') : t; };\nlet top = '';\nif (S.hero && job.logo) top += `<img class=\"logo\" src=\"/logo\">`;\nelse if (!S.hero && C.eyebrow) top += `<div class=\"eyebrow\"><b>${String(job.number).padStart(2, '0')}</b>${esc(C.eyebrow)}</div>`;\ntop += `<h1><span>${esc(C.title?.[0])}</span><span>${esc(C.title?.[1])}</span></h1>`;\nif (!S.hero && C.sub) top += `<p class=\"sub\">${esc(C.sub)}</p>`;\nc.innerHTML = `<div class=\"glow\"></div><div class=\"rays\"></div><div class=\"vign\"></div><div class=\"top\"${RTL ? ' dir=\"rtl\"' : ''}>${top}</div>`;\n\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];                                    // read by `shots render` -> report.json -> shots check / gallery\nfor (const [i, sp] of [...c.querySelectorAll('h1 span')].entries()) {  // shrink a line that would overflow (long words)\n  const max = LAND ? colW : W - 2 * MX, wd = sp.getBoundingClientRect().width;\n  let f = 1; while (wd * f > max && f > .55) f -= .02;\n  if (f < 1) sp.style.fontSize = `calc(${getComputedStyle(sp).fontSize} * ${f.toFixed(2)})`;\n  if (wd * f > max + 1) overflow.push(`title line ${i + 1} is too long even at 55 % size: shorten it`);\n  else if (f < .7) overflow.push(`title line ${i + 1} shrunk to ${Math.round(f * 100)} %: consider shorter words`);\n}\nconst subEl = c.querySelector('p.sub');\nif (subEl) { const lines = Math.round(subEl.getBoundingClientRect().height / parseFloat(getComputedStyle(subEl).lineHeight)); if (lines > 3) overflow.push(`subtitle wraps to ${lines} lines (max 3)`); }\nconst eb = c.querySelector('.eyebrow');\nif (eb && eb.getBoundingClientRect().width > (LAND ? colW : W - 2 * MX)) overflow.push('eyebrow is wider than the image');\nconst textBottom = c.querySelector('.top').getBoundingClientRect().bottom / u;\nportrait: {\nif (LAND) {\n  const topEl = c.querySelector('.top'), bh = topEl.getBoundingClientRect().height;\n  topEl.style.top = Math.max(MT, (H - bh) / 2) + 'px';\n  if (bh > H - MT * 2) overflow.push('text block is taller than the image: shorten the copy');\n  const f = S.frames[0], src = FR + encodeURIComponent(f.src), bare = q.get('frame') === 'none';\n  const x0 = job.side === 'right' ? W * .04 : colL + colW + W * .05, x1 = job.side === 'right' ? colL - W * .05 : W - W * .04;\n  let lw = x1 - x0;\n  const lh = k => k / (dev.w / dev.h) + (bare ? 0 : k * .028);\n  if (lh(lw) > H * .88) lw = lw * H * .88 / lh(lw);\n  R.setProperty('--lar', `${dev.w} / ${dev.h}`);\n  R.setProperty('--rayY', H / 2 + 'px'); R.setProperty('--rayRot', (rnd() * 20) + 'deg');\n  c.insertAdjacentHTML('beforeend', `<div class=\"lwin front${bare ? ' bare' : ''}\" style=\"--lw:${lw}px;--lx:${(x0 + x1 - lw) / 2}px;--ly:${(H - lh(lw)) / 2}px\"><div class=\"tb\"><i></i><i></i><i></i></div><img src=\"${src}\"></div>`);\n  await Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n  break portrait;\n}\n\nconst frames = S.frames.map(f => ({ x: 0, dy: 0, scale: 1, rotate: 0, ...f }));\nconst front = frames[0];\nconst pTop = textBottom + (S.hero ? 4 : 5.5);\nconst room = Hu - pTop + (S.over ?? 7);\nconst pw = Math.min(tablet ? 82 : 78, Math.max(56, room * AR)) * front.scale;\nconst ph = pw / AR;\nR.setProperty('--rayY', (pTop + ph * .3) * u + 'px');\nR.setProperty('--rayRot', (rnd() * 20) + 'deg');\n\nconst BAR = `<span>9:41</span><span style=\"display:flex;align-items:center\">\n<svg viewBox=\"0 0 18 12\"><g fill=\"#fff\"><rect x=\"0\" y=\"8\" width=\"3\" height=\"4\" rx=\".8\"/><rect x=\"5\" y=\"5.5\" width=\"3\" height=\"6.5\" rx=\".8\"/><rect x=\"10\" y=\"3\" width=\"3\" height=\"9\" rx=\".8\"/><rect x=\"15\" y=\"0\" width=\"3\" height=\"12\" rx=\".8\"/></g></svg>\n<svg viewBox=\"0 0 16 12\"><path fill=\"#fff\" d=\"M8 2.2c2.3 0 4.4.9 6 2.4l1.3-1.3A10.3 10.3 0 0 0 8 .4C5.2.4 2.6 1.5.7 3.3L2 4.6a8.5 8.5 0 0 1 6-2.4zm0 3.6c1.3 0 2.5.5 3.4 1.3l1.3-1.3A6.6 6.6 0 0 0 8 4c-1.8 0-3.4.7-4.7 1.8l1.3 1.3C5.5 6.3 6.7 5.8 8 5.8zm0 3.6c.4 0 .8.2 1.1.4L8 11.6 6.9 9.8c.3-.2.7-.4 1.1-.4z\"/></svg>\n<svg viewBox=\"0 0 27 13\"><rect x=\".5\" y=\".5\" width=\"23\" height=\"12\" rx=\"3.5\" fill=\"none\" stroke=\"rgba(255,255,255,.45)\"/><rect x=\"2\" y=\"2\" width=\"20\" height=\"9\" rx=\"2.2\" fill=\"#fff\"/><path d=\"M25 4.5v4c.8-.3 1.4-1.1 1.4-2s-.6-1.7-1.4-2z\" fill=\"rgba(255,255,255,.45)\"/></svg></span>`;\n\nlet html = '';\nfor (let i = 0; i < 26; i++) {\n  const x = rnd() * 100, y = textBottom + rnd() * (Hu - textBottom);\n  if (i % 2) html += `<i class=\"spark\" style=\"left:${x * u}px;top:${y * u}px;--s:${(1.6 + rnd() * 3.2) * u}px;--r:${rnd() * 45}deg;--o:${.55 + rnd() * .45}\"></i>`;\n  else html += `<i class=\"dot\" style=\"left:${x * u}px;top:${y * u}px;--s:${(3 + rnd() * 9) * u}px\"></i>`;\n}\nfor (let i = 0; i < 8; i++) {\n  const x = i % 2 ? 1 + rnd() * 6 : 93 + rnd() * 6, y = 2 + rnd() * (textBottom - 4);\n  html += `<i class=\"spark\" style=\"left:${x * u}px;top:${y * u}px;--s:${(1.2 + rnd() * 2) * u}px;--r:0deg;--o:${.4 + rnd() * .4}\"></i>`;\n}\nconst phone = (f, cls) => {\n  const w = pw / front.scale * f.scale, src = FR + encodeURIComponent(f.src);\n  return `<div class=\"tel ${cls}\" style=\"--pw:${w * u}px;--px:${(50 + f.x) * u}px;--py:${(pTop + f.dy) * u}px;--pr:${f.rotate}deg\"><div class=\"screen\">\n    <div class=\"bar\" style=\"background-image:url('${src}')\">${BAR}</div><div class=\"island\"></div><img class=\"app\" src=\"${src}\"></div></div>`;\n};\nfor (const f of frames.slice(1)) html += phone(f, 'back');\nhtml += phone(front, 'front');\n(S.badges ?? []).forEach((b, i) => {\n  const [big, small] = (C.badges ?? [])[i] ?? [''];\n  if (!big) return;\n  const ic = b.stars ? `<span class=\"stars\">${I.star}${I.star}${I.star}</span>`\n    : b.hot ? '' : `<span class=\"icon\" style=\"--ic:${ICON_BG[b.iconBg] ?? b.iconBg ?? ICON_BG.gold}\">${I[b.icon] ?? I.star}</span>`;\n  const pos = b.side === 'l' ? `left:${4 * u}px` : `right:${4 * u}px`;\n  html += `<div class=\"badge${b.hot ? ' hot' : ''}\"${RTL ? ' dir=\"rtl\"' : ''} style=\"${pos};top:${Math.min(pTop + ph * b.y, Hu - 18) * u}px;--br:${b.rot || 0}deg\">${ic}\n    <div${RTL ? ' dir=\"rtl\"' : ''}><b>${esc(big)}</b>${small ? `<small>${esc(small)}</small>` : ''}</div></div>`;\n});\nc.insertAdjacentHTML('beforeend', html);\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nif (textBottom > Hu * .48) overflow.push(`text block covers ${Math.round(textBottom / Hu * 100)} % of the height (the game should be the star)`);\nfor (const b of c.querySelectorAll('.badge')) { const r = b.getBoundingClientRect(); if (r.left < 0 || r.right > W || r.bottom > H) overflow.push(`badge \"${b.textContent.trim().slice(0, 30)}\" runs off the image`); }\n}\ndocument.body.dataset.overflow = JSON.stringify(overflow);\n// text and logo boxes for the safe-margin rule (shots check)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.top .logo, .top .eyebrow, .top h1 span, .top p.sub')].map(e => { const r = e.getBoundingClientRect();\n  return { el: e.matches('.logo') ? 'logo' : e.matches('.eyebrow') ? 'eyebrow' : e.matches('p') ? 'subtitle' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }).filter(b => b.w > 0 && b.h > 0));\n// the front device only: back phones of a fanned layout peek in from the side on purpose\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel.front, .lwin')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
 };
 
diff --git a/cli/shots/capture.ts b/cli/shots/capture.ts
index b82d0e3..1267e7c 100644
--- a/cli/shots/capture.ts
+++ b/cli/shots/capture.ts
@@ -114,7 +114,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const dir = resolve(cap.folder ?? shots.frames);
     const issues = checkFrameFolder(config, dir, langs);
     for (const x of issues) warn('shots', `frames/${x.file}: ${x.msg}`);
-    if (issues.length) throw new Error(`${issues.length} frame problems in ${dir} (expected <lang>/<phone|tablet>/<name>.png)`);
+    if (issues.length) throw new Error(`${issues.length} frame problems in ${dir} (expected <lang>/${shots.layout === 'bleed' ? '<size>' : '<phone|tablet>'}/<name>.png)`);
     if (dir !== framesDir) warn('shots', `frames are read from shots.frames (${shots.frames}); point it at ${cap.folder} or copy them there`);
     return done('shots', `folder frames ok: ${dir}`);
   }
diff --git a/cli/shots/check.ts b/cli/shots/check.ts
index d7f8f85..7f322ee 100644
--- a/cli/shots/check.ts
+++ b/cli/shots/check.ts
@@ -15,7 +15,7 @@ import type { ShipConfig } from '../lib/config';
 import type { Ctx } from '../lib/ctx';
 import { log, printJson } from '../lib/log';
 import { checkFrames, type FrameIssue } from './devices';
-import { defaultSizes, frameDims, SIZES } from './lib';
+import { defaultSizes, frameDims, renderDims, SIZES } from './lib';
 import type { LocalIssue, RendersCheck } from '../lib/validate-rules';
 import { allIssues, requiredSets, type RendersScan, resolvedTablets, scanRenders, storeOf } from './report';
 import { imageInfo } from './spec';
@@ -65,7 +65,29 @@ export function framesNeeded(config: ShipConfig, langs: string[], tablets?: bool
   return langs.flatMap(lang => devices.flatMap(device => (device === 'phone' ? phone : scene).map(name => ({ lang, device, name }))));
 }
 
+/** shots.layout 'bleed': one frame per scene for every size, at that size's pixels (<lang>/<size>/<name>; the mac and
+ *  chromebook sizes too), and the feature frame in <lang>/feature/. Each must have the size's aspect (1 %) and at least
+ *  its width (no upscaling). */
+export function checkBleedFrames(config: ShipConfig, dir: string, langs: string[], tablets?: boolean): FrameIssue[] {
+  const shots = config.shots!;
+  const out: FrameIssue[] = [];
+  const names = [...new Set(shots.scenes.map(s => s.frames[0]!.src))];
+  for (const lang of langs) for (const size of defaultSizes(config, tablets)) {
+    const feature = !!SIZES[size]!.feature;
+    const want = renderDims(size, shots);
+    for (const name of feature ? (shots.feature?.frame ? [shots.feature.frame] : []) : names) {
+      const rel = `${lang}/${feature ? 'feature' : size}/${name}`, f = join(dir, rel);
+      if (!existsSync(f)) { out.push({ file: rel, msg: 'missing' }); continue; }
+      const i = imageInfo(readFileSync(f));
+      if (Math.abs((i.w / i.h) / (want.w / want.h) - 1) > 0.01) out.push({ file: rel, msg: `${i.w}x${i.h} has aspect ${(i.w / i.h).toFixed(3)}, ${size} wants ${(want.w / want.h).toFixed(3)} (${want.w}x${want.h}): capture at that size` });
+      else if (i.w < want.w * 0.99) out.push({ file: rel, msg: `${i.w}x${i.h} is smaller than ${want.w}x${want.h}: capture at native resolution (no upscaling)` });
+    }
+  }
+  return out;
+}
+
 export function checkFrameFolder(config: ShipConfig, dir: string, langs: string[], tablets?: boolean): FrameIssue[] {
+  if (config.shots?.layout === 'bleed') return checkBleedFrames(config, dir, langs, tablets);
   const found = new Map<string, { w: number; h: number }>();
   for (const lang of langs) for (const device of ['phone', 'tablet']) {
     const d = join(dir, lang, device);
diff --git a/cli/shots/feature-bleed.html b/cli/shots/feature-bleed.html
new file mode 100644
index 0000000..848715d
--- /dev/null
+++ b/cli/shots/feature-bleed.html
@@ -0,0 +1,49 @@
+<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<link rel="stylesheet" href="/fonts/fonts.css">
+<!-- Play feature graphic for shots.layout "bleed": the frame /frames/<lang>/feature/<shots.feature.frame> fills the
+     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with
+     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->
+<style>
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }
+  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }
+  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }
+  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;
+    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }
+  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);
+    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;
+    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }
+</style>
+</head>
+<body>
+<div id="c"></div>
+<script type="module">
+const q = new URLSearchParams(location.search);
+const lang = q.get('lang'), V = q.get('v') ?? '';
+const job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();
+const R = document.documentElement.style;
+const X = job.fonts.script;
+R.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');
+R.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);
+document.documentElement.lang = lang;
+const c = document.getElementById('c');
+const src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;
+const name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');
+c.innerHTML = `<img class="frame" src="${src}">` + (job.logo ? '<img class="logo" src="/logo">' : `<div class="name">${name}</div>`);
+await document.fonts.ready;
+await Promise.all([...document.images].map(i => i.decode().catch(() => {})));
+const overflow = [];
+const img = c.querySelector('img.frame');
+if (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);
+else if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);
+const t = c.querySelector('.name, .logo').getBoundingClientRect();
+if (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');
+document.body.dataset.overflow = JSON.stringify(overflow);
+document.body.dataset.devices = '[]';
+document.body.dataset.ready = '1';
+</script>
+</body>
+</html>
diff --git a/cli/shots/lib.ts b/cli/shots/lib.ts
index 8f56cde..57b2b59 100644
--- a/cli/shots/lib.ts
+++ b/cli/shots/lib.ts
@@ -32,11 +32,13 @@ export const PLAY_TABLET_LANDSCAPE: Record<string, { w: number; h: number }> = {
 /** Pixel size and layout of one size key for a project: the landscape layout for mac / chromebook, and for the Play
  *  tablet slots with shots.landscape.playTablets. frame = the device drawn around a landscape frame ('window' = a Mac
  *  window, 'none' = the bare frame with rounded corners); default window on Mac, none on Play. Pure. */
-export function renderDims(size: string, shots: Pick<ShotsConfig, 'landscape'> | undefined): { w: number; h: number; landscape: boolean; frame: 'window' | 'none' } {
+export function renderDims(size: string, shots: Pick<ShotsConfig, 'landscape' | 'orientation'> | undefined): { w: number; h: number; landscape: boolean; frame: 'window' | 'none' } {
   const s = SIZES[size]!;
   const tabLand = !!shots?.landscape?.playTablets && !!PLAY_TABLET_LANDSCAPE[size];
   const landscape = s.device === 'landscape' || tabLand;
-  const d = tabLand ? PLAY_TABLET_LANDSCAPE[size]! : s;
+  // shots.orientation 'landscape' (bleed layout): every other portrait screenshot size swaps width and height
+  const swap = shots?.orientation === 'landscape' && !s.feature && !landscape;
+  const d = tabLand ? PLAY_TABLET_LANDSCAPE[size]! : swap ? { w: s.h, h: s.w } : s;
   const frame = shots?.landscape?.frame ?? (size === 'mac' ? 'window' : 'none');
   return { w: d.w, h: d.h, landscape, frame };
 }
@@ -310,11 +312,16 @@ export function boxOutside(b: DeviceBox, W: number, H: number, tol = 1): string[
  *  loads. A missing one renders an image with no app or game content (only a 404 in the page), so `shots render`
  *  refuses to start without them. Landscape layouts use each scene's first frame; the feature graphic a phone frame. */
 export function framesForRender(scenes: { frames: { src: string }[] }[], sizes: string[], langs: string[],
-  shots: Pick<ShotsConfig, 'landscape'> & { feature?: { frame?: string } }): string[] {
+  shots: Pick<ShotsConfig, 'landscape' | 'layout'> & { feature?: { frame?: string } }): string[] {
   const out = new Set<string>();
   for (const lang of langs) for (const size of sizes) {
     const s = SIZES[size];
     if (!s) continue;
+    if (shots.layout === 'bleed') { // one frame per scene at each size's own pixels: <lang>/<size>/<src>, the feature one in <lang>/feature/
+      if (s.feature) { const f = shots.feature?.frame ?? scenes[0]?.frames[0]?.src; if (f) out.add(`${lang}/feature/${f}`); }
+      else for (const sc of scenes) if (sc.frames[0]) out.add(`${lang}/${size}/${sc.frames[0].src}`);
+      continue;
+    }
     if (s.feature) { const f = shots.feature?.frame ?? scenes[0]?.frames[0]?.src; if (f) out.add(`${lang}/phone/${f}`); continue; }
     const d = renderDims(size, shots);
     const kind = d.landscape ? 'landscape' : s.device ? 'tablet' : 'phone';
diff --git a/cli/shots/render.ts b/cli/shots/render.ts
index fff6517..2ff3ef1 100644
--- a/cli/shots/render.ts
+++ b/cli/shots/render.ts
@@ -13,6 +13,9 @@
 // paths) are served from where they are at /fonts/local/... (local-fonts.ts); a file changed since `shots fonts` fails.
 // Style: shotsStyle() = shots.style, else app for the app / subscription-app profiles (template-app.html,
 // feature-app.html: calm gradient, device frame, headline + subline), else game (template.html, feature.html).
+// Layout: shots.layout 'bleed' renders template-bleed.html / feature-bleed.html instead (the frame of that size fills
+// the image, the title is a corner caption with a text shadow, no device or background); shots.orientation 'landscape'
+// swaps every other portrait screenshot size (renderDims in lib.ts).
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { SHOTS_PAGES } from '../lib/embedded';
 import { fontCodepoints } from './cmap';
@@ -91,6 +94,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const { phone, tablet } = frameDims(config);
   const rtl = new Map(config.languages.map(l => [l.id, !!l.rtl] as const));
   const style = shotsStyle(config);
+  const bleedLayout = shots.layout === 'bleed';
   const rf = resolveShotFonts(shots, style, resolve, root);
   const sf = { title: rf.title.family, body: rf.body.family };
   const fonts = { title: sf.title, body: sf.body };
@@ -156,10 +160,10 @@ export async function run(ctx: Ctx): Promise<void> {
         const st = stacks(lang, copy);
         const ls = shots.landscape?.size;
         const landscape = { w: ls?.w ?? 1440, h: ls?.h ?? 900, bar: 0 };
-        const base = { style, phone, tablet, landscape, side: shots.landscape?.side ?? 'left', rtl: rtl.get(lang), logo: !!shots.logo, appName: config.app.name,
+        const base = { style, layout: shots.layout ?? 'device', phone, tablet, landscape, side: shots.landscape?.side ?? 'left', rtl: rtl.get(lang), logo: !!shots.logo, appName: config.app.name,
           fonts: { ...fonts, script: st.script, titleStack: st.title, bodyStack: st.body } };
         if (url.searchParams.has('feature'))
-          return Response.json({ ...base, frame: shots.feature?.frame ?? scenes[0]!.frames[0]!.src,
+          return Response.json({ ...base, frame: shots.feature?.frame ?? scenes[0]!.frames[0]!.src, featureTitle: shots.feature?.title,
             device: featureLayout(style, phone, { fit: shots.feature?.fit, scale: shots.feature?.scale }),
             palette: look(palette(shots.feature?.palette ?? scenes[0]!.palette, style), style === 'app' ? 135 : 160, style === 'app' ? 55 : 50, shots.feature?.background) });
         const sid = url.searchParams.get('s') ?? '';
@@ -173,7 +177,7 @@ export async function run(ctx: Ctx): Promise<void> {
       else if (p.startsWith('/frames/')) file = join(framesDir, p.slice(8));
       else if (p.startsWith('/fonts/')) file = fontsRoute(p.slice(7), fontsDir, root, manifest) ?? '';
       else if (p.startsWith('/out/')) file = join(outDir, p.slice(5));
-      else if (/^\/(template|feature)(-app)?\.html$/.test(p)) return new Response(SHOTS_PAGES[p.slice(1)]!, { headers: { 'content-type': TYPES.html! } });
+      else if (/^\/(template|feature)(-app|-bleed)?\.html$/.test(p)) return new Response(SHOTS_PAGES[p.slice(1)]!, { headers: { 'content-type': TYPES.html! } });
       if (!file || file.includes('..')) return new Response('no', { status: 404 });
       return rt.fileResponse(file, { 'content-type': TYPES[file.split('.').pop()!.toLowerCase()] ?? 'application/octet-stream' }) ?? new Response('missing ' + p, { status: 404 });
     },
@@ -254,7 +258,7 @@ export async function run(ctx: Ctx): Promise<void> {
       const s = SIZES[size]!, d = renderDims(size, shots);
       if (s.feature) {
         const f = join(dir, 'feature', '1024x500.png');
-        items.push({ url: `${base}/${style === 'app' ? 'feature-app' : 'feature'}.html?lang=${encodeURIComponent(lang)}${vq}`, w: s.w, h: s.h, out: f });
+        items.push({ url: `${base}/${bleedLayout ? 'feature-bleed' : style === 'app' ? 'feature-app' : 'feature'}.html?lang=${encodeURIComponent(lang)}${vq}`, w: s.w, h: s.h, out: f });
         rows.push({ size, files: [f] });
         continue;
       }
@@ -262,7 +266,7 @@ export async function run(ctx: Ctx): Promise<void> {
       for (const [i, id] of sceneIds.entries()) {
         const f = join(dir, size, `${String(i + 1).padStart(2, '0')}.png`);
         const dev = d.landscape ? `&device=landscape&frame=${d.frame}` : s.device ? '&device=tablet' : '';
-        items.push({ url: `${base}/${style === 'app' ? 'template-app' : 'template'}.html?s=${encodeURIComponent(id)}&w=${d.w}&h=${d.h}&lang=${encodeURIComponent(lang)}${dev}${size === 'tab7' || size === 'tab10' ? '&style=android' : ''}${vq}`, w: d.w, h: d.h, out: f });
+        items.push({ url: `${base}/${bleedLayout ? 'template-bleed' : style === 'app' ? 'template-app' : 'template'}.html?s=${encodeURIComponent(id)}&w=${d.w}&h=${d.h}&lang=${encodeURIComponent(lang)}&size=${encodeURIComponent(size)}${bleedLayout ? '' : dev}${size === 'tab7' || size === 'tab10' ? '&style=android' : ''}${vq}`, w: d.w, h: d.h, out: f });
         files.push(f);
       }
       rows.push({ size, files, dims: { w: d.w, h: d.h } });
diff --git a/cli/shots/template-bleed.html b/cli/shots/template-bleed.html
new file mode 100644
index 0000000..a94c215
--- /dev/null
+++ b/cli/shots/template-bleed.html
@@ -0,0 +1,97 @@
+<!doctype html>
+<html>
+<head>
+<meta charset="utf-8">
+<link rel="stylesheet" href="/fonts/fonts.css">
+<!-- Full-bleed layout (shots.layout "bleed"): the app's own frame fills the whole image, no device and no background,
+     and a short caption sits in one corner. Legibility comes from a text shadow and a soft glow only: no band, no
+     scrim, no box behind the words. template-bleed.html?s=<scene>&w=<px>&h=<px>&lang=<id>&size=<size key>.
+     The frame is read at the size's own pixels: /frames/<lang>/<size>/<src> (shots check: frames for "bleed").
+     Colours from the scene palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = line 2.
+     A dark custom palette suits it, e.g. { bg: [...], ink: 'rgba(4,18,38,.92)', shadow: 'rgba(4,22,48,.55)', glow: '#ffd76a' }. -->
+<style>
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  html, body { width: var(--W); height: var(--H); overflow: hidden; background: #000; }
+  #c { position: relative; width: var(--W); height: var(--H); overflow: hidden; }
+  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }
+  .cap { position: absolute; max-width: calc(var(--W) * var(--mw)); display: flex; flex-direction: column; gap: calc(var(--fs) * .06);
+    font-family: var(--tf); font-weight: var(--tw); font-size: var(--fs); line-height: var(--lh); color: #fff; letter-spacing: var(--ls, .005em);
+    text-wrap: balance;
+    /* a dark outline-shadow for edges, then a wide soft glow: readable on light water and on dark rock alike */
+    text-shadow: 0 0 calc(var(--fs) * .05) var(--ink), 0 calc(var(--fs) * .04) calc(var(--fs) * .08) var(--ink),
+      0 0 calc(var(--fs) * .3) var(--shadow), 0 0 calc(var(--fs) * .6) var(--shadow); }
+  .cap span { display: block; }
+  .cap span + span { color: var(--accent); }
+  .cap.tl { left: var(--mx); top: var(--my); }
+  .cap.tr { right: var(--mx); top: var(--my); text-align: right; align-items: flex-end; }
+  .cap.bl { left: var(--mx); bottom: var(--my); }
+  .cap.br { right: var(--mx); bottom: var(--my); text-align: right; align-items: flex-end; }
+  .cap[dir="rtl"].tl, .cap[dir="rtl"].bl { text-align: right; }
+</style>
+</head>
+<body>
+<div id="c"></div>
+<script type="module">
+const q = new URLSearchParams(location.search);
+const W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '', SIZE = q.get('size') ?? '';
+const job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();
+const S = job.scene, C = job.copy, P = job.palette;
+const R = document.documentElement.style;
+document.documentElement.lang = LANG;
+const short = Math.min(W, H);
+R.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px');
+// caption size from the short side: about 9 % of it on a landscape phone, a little less on squarer canvases
+const fs = short * (W / H > 1.9 ? .092 : W / H > 1.5 ? .08 : .066) * (S.captionScale ?? 1);
+R.setProperty('--fs', fs + 'px');
+const inset = S.captionInset ?? .05;                   // distance from the corner, share of the short side
+R.setProperty('--mx', (short * (inset + .005)) + 'px'); R.setProperty('--my', (short * inset) + 'px');
+// the caption keeps to its corner: at most 40 % of a landscape image's width (scene.captionWidth), so it stays clear of
+// what an app centres at the top
+const MW = S.captionWidth ?? (W > H ? .4 : .84);
+R.setProperty('--mw', MW);
+// palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = the second line's colour
+R.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accent', P.glow);
+const X = job.fonts.script;
+const fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';
+R.setProperty('--tf', fstack(job.fonts.titleStack, job.fonts.title));
+R.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);
+const CJK = /^(ja|ko|zh)/.test(LANG);
+R.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.16 : 1.04);
+if (X) R.setProperty('--ls', '0');
+if (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';
+if (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';
+const RTL = !!job.rtl;
+const esc = s => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');
+const corner = ['tl', 'tr', 'bl', 'br'].includes(S.corner) ? S.corner : 'tl';
+const src = `/frames/${encodeURIComponent(LANG)}/${encodeURIComponent(SIZE)}/${encodeURIComponent(S.frames[0].src)}`;
+const lines = (C.title ?? []).filter(Boolean);
+const c = document.getElementById('c');
+c.innerHTML = `<img class="frame" src="${src}"><div class="cap ${corner}"${RTL ? ' dir="rtl"' : ''}>${lines.map(l => `<span>${esc(l)}</span>`).join('')}</div>`;
+await document.fonts.ready;
+await Promise.all([...document.images].map(i => i.decode().catch(() => {})));
+const overflow = [];                                    // read by `shots render` -> report.json -> shots check / gallery
+const img = c.querySelector('img.frame');
+if (!img.naturalWidth) overflow.push(`frame ${SIZE}/${S.frames[0].src} did not load`);
+else {
+  const ar = img.naturalWidth / img.naturalHeight, want = W / H;
+  if (Math.abs(ar / want - 1) > .01) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is cropped to fit ${W}x${H}: capture it at the size's aspect`);
+  if (img.naturalWidth < W * .99) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is upscaled to ${W}x${H}: capture it at native resolution`);
+}
+const cap = c.querySelector('.cap');
+const maxW = W * MW;
+for (const [i, sp] of [...cap.querySelectorAll('span')].entries()) {   // shrink a line that would not fit its corner
+  const wd = sp.scrollWidth;
+  let f = 1; while (wd * f > maxW && f > .6) f -= .02;
+  if (f < 1) sp.style.fontSize = `${(fs * f).toFixed(1)}px`;
+  if (wd * f > maxW + 1) overflow.push(`caption line ${i + 1} is too long even at 60 % size: shorten it`);
+}
+const r = cap.getBoundingClientRect();
+if (r.left < 0 || r.top < 0 || r.right > W || r.bottom > H) overflow.push('caption runs off the image');
+if (r.height > H * .42) overflow.push(`caption covers ${Math.round(r.height / H * 100)} % of the height: shorten it`);
+if (lines.join(' ').split(/\s+/).length > 6 && !CJK && !/^th/.test(LANG)) overflow.push('caption has more than 6 words: keep it to 3-5');
+document.body.dataset.overflow = JSON.stringify(overflow);
+document.body.dataset.devices = '[]';
+document.body.dataset.ready = '1';
+</script>
+</body>
+</html>
diff --git a/skills/store-screenshots/SKILL.md b/skills/store-screenshots/SKILL.md
index 80f1ac7..c2bccb1 100644
--- a/skills/store-screenshots/SKILL.md
+++ b/skills/store-screenshots/SKILL.md
@@ -93,6 +93,8 @@ Play API has no Chromebook image type, so `play images` prints the Main store li
 uploading), and `shots.landscape.playTablets: true` renders tab7 / tab10 in landscape (1920 x 1080 / 2560 x 1440),
 which Play's tablet slots accept. Badges are not drawn in landscape.
 
+**Full-bleed layout (`shots.layout: "bleed"`).** The app's own frame fills the whole image: no device, no background; the scene's title becomes a short caption (3-5 words) in one corner (`corner` tl/tr/bl/br, `captionScale`, `captionWidth`, `captionInset`), made legible by a text shadow and soft glow only (palette `ink` = tight outline, `shadow` = wide glow, `glow` = second line); never a band or scrim behind the words. Frames are captured per size at the size's own pixels: `<frames>/<lang>/<size>/<name>.png` for every size including `mac` and `chromebook`, the feature graphic frame in `<frames>/<lang>/feature/<shots.feature.frame>` (the feature graphic shows `shots.logo`, else `shots.feature.title`, else the app name). `shots check` and `capture --source folder` refuse a frame with the wrong aspect or fewer pixels than the size (no upscaling). `shots.orientation: "landscape"` (bleed only) swaps every portrait size to landscape (Apple takes landscape for every display set, Play any 320-3840 px up to 2:1); feature, mac and chromebook are landscape already.
+
 **Safe margins (every template, every size, both stores).** Text and logo keep about 7 % of the width left and right
 and 5 % of the height at the top; the logo scales to fit inside. Each render records the layout boxes of the logo,
 eyebrow, title lines and subtitle (and the feature graphic's logo or name) in `report.json`, and `shots check` fails
diff --git a/tests/shots-bleed.test.ts b/tests/shots-bleed.test.ts
new file mode 100644
index 0000000..36b2992
--- /dev/null
+++ b/tests/shots-bleed.test.ts
@@ -0,0 +1,94 @@
+// shots.layout 'bleed' (the frame fills the image, a corner caption with a text shadow, no device) and
+// shots.orientation 'landscape', plus the Mac App Store size (apple.mac). Pure checks, no browser.
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { type ShipConfig, validateConfig } from '../cli/lib/config';
+import { SHOTS_PAGES } from '../cli/lib/embedded';
+import { checkFrameFolder } from '../cli/shots/check';
+import { renderDims } from '../cli/shots/lib';
+import { checkImage } from '../cli/shots/spec';
+
+function png(w: number, h: number): Uint8Array {
+  const b = new Uint8Array(8 + 25 + 12);
+  b.set([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+  const dv = new DataView(b.buffer);
+  dv.setUint32(8, 13); b.set([0x49, 0x48, 0x44, 0x52], 12); dv.setUint32(16, w); dv.setUint32(20, h); b[24] = 8; b[25] = 2;
+  dv.setUint32(33, 0); b.set([0x49, 0x45, 0x4e, 0x44], 37);
+  return b;
+}
+
+const base = (shots: Partial<ShipConfig['shots']> = {}, apple: ShipConfig['apple'] = { bundleId: 'com.example.game', mac: true }): ShipConfig => ({
+  app: { name: 'Example Game' }, languages: [{ id: 'en', apple: 'en-US', play: 'en-US' }],
+  apple, play: { packageName: 'com.example.game', tablets: false },
+  shots: { copy: 'c.json', frames: 'frames', out: 'out', layout: 'bleed', orientation: 'landscape',
+    scenes: [{ id: 'a', palette: 'night', frames: [{ src: 'a.png' }], corner: 'bl' }], feature: { frame: 'f.png' }, ...shots },
+} as ShipConfig);
+
+describe('landscape sizes', () => {
+  const dims = (k: string, o?: 'landscape' | 'portrait') => { const d = renderDims(k, { orientation: o }); return { w: d.w, h: d.h }; };
+  test('portrait sizes swap, feature, mac and chromebook stay', () => {
+    expect(dims('ios69', 'landscape')).toEqual({ w: 2868, h: 1320 });
+    expect(dims('ipad13', 'landscape')).toEqual({ w: 2752, h: 2064 });
+    expect(dims('play', 'landscape')).toEqual({ w: 1920, h: 1080 });
+    expect(dims('ios69')).toEqual({ w: 1320, h: 2868 });
+    expect(dims('feature', 'landscape')).toEqual({ w: 1024, h: 500 });
+    expect(dims('mac', 'landscape')).toEqual({ w: 2880, h: 1800 });
+    expect(dims('chromebook', 'landscape')).toEqual({ w: 1920, h: 1080 });
+  });
+  test('stores accept the landscape renders', () => {
+    for (const [k, w, h] of [['ios69', 2868, 1320], ['ipad13', 2752, 2064], ['mac', 2880, 1800], ['play', 1920, 1080], ['tab7', 1920, 1200], ['tab10', 2560, 1600]] as const)
+      expect(checkImage({ format: 'png', w, h, alpha: false, palette: false, bytes: 1000, depth: 8 }, k)).toEqual([]);
+  });
+  test('orientation landscape needs the bleed layout', () => {
+    expect(validateConfig(base({ layout: 'device' })).join(' ')).toContain("needs shots.layout: 'bleed'");
+    expect(validateConfig(base()).join(' ')).not.toContain('orientation');
+  });
+});
+
+describe('bleed layout', () => {
+  test('config checks', () => {
+    const bad = base({ layout: 'full' as never, orientation: 'sideways' as never, scenes: [{ id: 'a', palette: 'night', frames: [{ src: 'a.png' }], corner: 'mid' as never, captionScale: 3 }] });
+    const e = validateConfig(bad).join('\n');
+    expect(e).toContain('shots.layout: device | bleed');
+    expect(e).toContain('shots.orientation: portrait | landscape');
+    expect(e).toContain('corner tl | tr | bl | br');
+    expect(e).toContain('captionScale 0.6-1.4');
+  });
+  test('the pages ship embedded and draw no band behind the caption', () => {
+    for (const p of ['template-bleed.html', 'feature-bleed.html']) {
+      const html = SHOTS_PAGES[p]!;
+      expect(html).toBeTruthy();
+      expect(html).toContain('text-shadow');
+      // owner rule: legibility from a text shadow and glow, never a dark band, scrim or box behind the words
+      const css = html.slice(html.indexOf('<style>'), html.indexOf('</style>'));
+      expect(css).not.toMatch(/\.(cap|name)\b[^}]*background/);
+      expect(css).not.toMatch(/linear-gradient|scrim|band/);
+    }
+  });
+  test('frames per size at native pixels', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-bleed-'));
+    try {
+      const c = base();
+      const put = (rel: string, w: number, h: number) => { mkdirSync(join(dir, rel, '..'), { recursive: true }); writeFileSync(join(dir, rel), png(w, h)); };
+      const missing = checkFrameFolder(c, dir, ['en']).map(i => i.file);
+      expect(missing).toContain('en/ios69/a.png');
+      expect(missing).toContain('en/mac/a.png');
+      expect(missing).toContain('en/feature/f.png');
+      put('en/ios69/a.png', 2868, 1320); put('en/ios65/a.png', 2778, 1284); put('en/mac/a.png', 2880, 1800);
+      put('en/play/a.png', 1920, 1080); put('en/feature/f.png', 2048, 1000);
+      expect(checkFrameFolder(c, dir, ['en'])).toEqual([]);
+      put('en/play/a.png', 1080, 1920);
+      expect(checkFrameFolder(c, dir, ['en'])[0]!.msg).toContain('aspect');
+      put('en/play/a.png', 960, 540);
+      expect(checkFrameFolder(c, dir, ['en'])[0]!.msg).toContain('native resolution');
+    } finally { rmSync(dir, { recursive: true, force: true }); }
+  });
+  test('render serves the bleed pages and names the size in the URL', () => {
+    const src = readFileSync(join(import.meta.dir, '..', 'cli', 'shots', 'render.ts'), 'utf8');
+    expect(src).toContain("bleedLayout ? 'template-bleed'");
+    expect(src).toContain('&size=${encodeURIComponent(size)}');
+    expect(SHOTS_PAGES['template-bleed.html']).toContain('/frames/${encodeURIComponent(LANG)}/${encodeURIComponent(SIZE)}/');
+  });
+});

From 8df41a26b0a457e2d677300b270d6ecf84ea5bc5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 22:42:12 +0800
Subject: [PATCH 125/255] desktop open: a hidden tray copy that is already
 running counts once its window is visible (Windows), graceful stop wait 3 s
 on Windows

---
 CHANGELOG.md                   |  1 +
 cli/desktop.ts                 | 21 ++++++++++++---------
 cli/lib/desktop-proc.ts        | 22 ++++++++++++++++++----
 skills/store-pitfalls/SKILL.md |  7 ++++---
 tests/desktop-proc.test.ts     | 24 +++++++++++++++++++++++-
 5 files changed, 58 insertions(+), 17 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1d65e5e..6a0a01a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 ## Unreleased
 
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
+- `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
 
 ## 0.8.47 · 2026-10-23
 
diff --git a/cli/desktop.ts b/cli/desktop.ts
index f318e6f..ad1343f 100644
--- a/cli/desktop.ts
+++ b/cli/desktop.ts
@@ -22,7 +22,7 @@ import { CONFIG_NAMES } from './lib/config';
 import { DECLINED_EXIT } from './lib/ctx';
 import { BUNDLE_ID, DOWNLOAD_LABEL, type Download, type DownloadKey, downloadsDir, downloadsFor, findInstalled, type Installed, MANIFEST, type Manifest, manifestProblems, openCommand, openFolderLink, PAGE, PUBLIC_KEY, versionManifest } from './lib/desktop-dist';
 import { consent, type Decision, decide, installPlan, type Plan, question } from './lib/desktop-install';
-import { appExe, listCommand, logDir, matchByPath, mismatchMessage, notOpenedMessage, parseProcs, peVersion, type Proc, startedHidden, stopCommand, versionMatches } from './lib/desktop-proc';
+import { appExe, graceMs, listCommand, logDir, matchByPath, mismatchMessage, notOpenedMessage, openState, parseProcs, peVersion, type Proc, stopCommand, versionMatches } from './lib/desktop-proc';
 import { verify } from './lib/minisign';
 import { parsePlist } from './lib/plist';
 import { addFolder } from './lib/registry';
@@ -175,24 +175,25 @@ function appProcs(platform: NodeJS.Platform, exe: string): Proc[] {
 }
 
 /** Stops the running app (only processes started from `exe`): a graceful close, then by PID after `graceMs`. */
-async function stopApp(platform: NodeJS.Platform, exe: string, say: (s: string) => void, graceMs = 10_000): Promise<void> {
+async function stopApp(platform: NodeJS.Platform, exe: string, say: (s: string) => void, grace = graceMs(platform)): Promise<void> {
   let procs = appProcs(platform, exe);
   if (!procs.length) return;
   say(`  stopping the running storebound desktop (PID ${procs.map(p => p.pid).join(', ')})`);
   for (const p of procs) try { rt.spawnSync(stopCommand(platform, p.pid, false), { timeout: 10_000 }); } catch { /* forced below */ }
-  for (const end = Date.now() + graceMs; Date.now() < end && procs.length; ) { await rt.sleep(500); procs = appProcs(platform, exe); }
+  for (const end = Date.now() + grace; Date.now() < end && procs.length; ) { await rt.sleep(500); procs = appProcs(platform, exe); }
   for (const p of procs) try { rt.spawnSync(stopCommand(platform, p.pid, true), { timeout: 10_000 }); } catch { /* checked below */ }
   for (const end = Date.now() + 5_000; Date.now() < end && procs.length; ) { await rt.sleep(500); procs = appProcs(platform, exe); }
   if (procs.length) throw new Error(`storebound desktop is still running from ${exe} (PID ${procs.map(p => p.pid).join(', ')}): close it (also in the tray), then run this again`);
 }
 
-/** Waits until a visible (not --hidden) process runs from `exe`. */
-async function waitOpened(platform: NodeJS.Platform, exe: string, timeoutMs = 15_000): Promise<'ok' | 'none' | 'hidden'> {
+/** Waits until the app is open for the user (see openState); `handedOver()` tells whether the launched process already
+ *  exited normally (a running copy took the request). */
+async function waitOpened(platform: NodeJS.Platform, exe: string, handedOver: () => boolean, timeoutMs = 15_000): Promise<'ok' | 'none' | 'hidden'> {
   let last: 'none' | 'hidden' = 'none';
   for (const end = Date.now() + timeoutMs; Date.now() < end; await rt.sleep(500)) {
-    const procs = appProcs(platform, exe);
-    if (procs.some(p => !startedHidden(p))) return 'ok';
-    if (procs.length) last = 'hidden';
+    const st = openState(platform, appProcs(platform, exe), handedOver());
+    if (st === 'ok') return 'ok';
+    if (st === 'hidden') last = 'hidden';
   }
   return last;
 }
@@ -310,7 +311,9 @@ export async function run(args: Args): Promise<void> {
     if (code !== 0) throw new Error(`${fresh ? 'open -a' : `open -b ${BUNDLE_ID}`} failed${code === -1 ? ' (no answer in 30 s)' : `: ${(await new Response(p.stderr).text()).trim()}`}`);
   } else p.unref();
   const exe = appExe(platform, installed!.path);
-  const opened = await waitOpened(platform, exe);
+  let exitCode: number | null = null;
+  void p.exited.then(c => { exitCode = c; }, () => {});
+  const opened = await waitOpened(platform, exe, () => exitCode === 0);
   if (opened !== 'ok') {
     // an already running visible copy counts as opened (single-instance hands it the request)
     throw new Error(notOpenedMessage(opened, exe, join(logDir(platform, process.env, homedir()), 'host.log')));
diff --git a/cli/lib/desktop-proc.ts b/cli/lib/desktop-proc.ts
index fbbcc4f..3291bad 100644
--- a/cli/lib/desktop-proc.ts
+++ b/cli/lib/desktop-proc.ts
@@ -5,7 +5,7 @@
 import { posix } from 'node:path';
 import { compareVersions } from './desktop-install';
 
-export interface Proc { pid: number; exe: string; args: string }
+export interface Proc { pid: number; exe: string; args: string; /** Windows only: the process has a visible top-level window. */ window?: boolean }
 
 /** The executable a process of the installed app runs from (the .app bundle's binary on macOS). */
 export function appExe(platform: NodeJS.Platform, installedPath: string): string {
@@ -16,7 +16,7 @@ export function appExe(platform: NodeJS.Platform, installedPath: string): string
 export function listCommand(platform: NodeJS.Platform): string[] {
   if (platform === 'win32') {
     return ['powershell', '-NoProfile', '-NonInteractive', '-Command',
-      "Get-CimInstance Win32_Process -Filter \"Name='storebound-desktop.exe'\" | Select-Object ProcessId,ExecutablePath,CommandLine | ConvertTo-Json -Compress"];
+      "Get-CimInstance Win32_Process -Filter \"Name='storebound-desktop.exe'\" | ForEach-Object { $g = Get-Process -Id $_.ProcessId -ErrorAction SilentlyContinue; [pscustomobject]@{ ProcessId = $_.ProcessId; ExecutablePath = $_.ExecutablePath; CommandLine = $_.CommandLine; Window = [bool]($g -and $g.MainWindowHandle -ne 0) } } | ConvertTo-Json -Compress"];
   }
   return ['ps', '-axww', '-o', 'pid=,args='];
 }
@@ -28,8 +28,8 @@ export function parseProcs(platform: NodeJS.Platform, out: string): Proc[] {
     if (!t) return [];
     let j: unknown;
     try { j = JSON.parse(t); } catch { return []; }
-    const rows = (Array.isArray(j) ? j : [j]) as { ProcessId?: number; ExecutablePath?: string | null; CommandLine?: string | null }[];
-    return rows.filter(r => typeof r?.ProcessId === 'number').map(r => ({ pid: r.ProcessId!, exe: r.ExecutablePath ?? '', args: r.CommandLine ?? '' }));
+    const rows = (Array.isArray(j) ? j : [j]) as { ProcessId?: number; ExecutablePath?: string | null; CommandLine?: string | null; Window?: boolean }[];
+    return rows.filter(r => typeof r?.ProcessId === 'number').map(r => ({ pid: r.ProcessId!, exe: r.ExecutablePath ?? '', args: r.CommandLine ?? '', window: r.Window === true }));
   }
   const procs: Proc[] = [];
   for (const line of out.split('\n')) {
@@ -51,6 +51,20 @@ export function matchByPath(platform: NodeJS.Platform, procs: Proc[], exe: strin
 /** Was the process started hidden (the logon entry: tray only, no window)? */
 export const startedHidden = (p: Proc): boolean => /(?:^|\s|")--hidden(?:\s|"|$)/.test(p.args);
 
+/** Is the app open for the user? Windows: a process of ours has a visible window (a running tray copy started with
+ *  --hidden counts once the single-instance handoff showed its window). Elsewhere a window cannot be seen from here:
+ *  a process started without --hidden, or a hidden copy that the new start handed over to (`handedOver`: the new
+ *  process exited normally), counts. 'none' = no process, 'hidden' = only tray copies and no visible window. */
+export function openState(platform: NodeJS.Platform, procs: Proc[], handedOver: boolean): 'ok' | 'none' | 'hidden' {
+  if (!procs.length) return 'none';
+  if (platform === 'win32') return procs.some(p => p.window) ? 'ok' : 'hidden';
+  return procs.some(p => !startedHidden(p)) || handedOver ? 'ok' : 'hidden';
+}
+
+/** Seconds to wait for a graceful quit before the forced stop: closing the window of a tray app only hides it, so on
+ *  Windows the graceful step is short. */
+export const graceMs = (platform: NodeJS.Platform): number => (platform === 'win32' ? 3_000 : 10_000);
+
 /** The graceful stop (Windows: WM_CLOSE through taskkill without /F; elsewhere TERM) and the forced one, by PID. */
 export function stopCommand(platform: NodeJS.Platform, pid: number, force: boolean): string[] {
   if (platform === 'win32') return force ? ['taskkill', '/F', '/PID', String(pid)] : ['taskkill', '/PID', String(pid)];
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index a22d44a..19f7785 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1358,9 +1358,10 @@ that fails without the fix (see CONTRIBUTING.md).
   registry entry already showed the new one. The version check started the GUI exe with `--version`, read nothing
   and went on; "opened" was printed without looking whether a window process started.
 - **Do:** let `storebound desktop` stop the running app first (it does now, only processes started from the exact
-  install path: a graceful close, then by PID after 10 s). If it still says the installed app is the old version,
+  install path: a graceful close, then by PID after 3 s on Windows / 10 s elsewhere; closing a tray app only hides it). If it still says the installed app is the old version,
   close storebound desktop in the tray and run it again. If it says it did not open, read the `host.log` it names.
 - **Guard:** `cli/lib/desktop-proc.ts`: the exact-path process match, the PE version resource of the installed exe
   (never the registry `DisplayVersion`), Info.plist on macOS, the AppImage's `--version` on Linux; a mismatch fails
-  with what was found. Opening waits up to 15 s for a non-`--hidden` process from the installed path
-  (`tests/desktop-proc.test.ts`).
+  with what was found. Opening waits up to 15 s: on Windows for a visible top-level window of a process
+  from the installed path (a running `--hidden` tray copy is shown by the single-instance handler, so a second start
+  without `--hidden` opens it), elsewhere for a non-`--hidden` process or a handoff (`tests/desktop-proc.test.ts`).
diff --git a/tests/desktop-proc.test.ts b/tests/desktop-proc.test.ts
index 348edbd..c1a859b 100644
--- a/tests/desktop-proc.test.ts
+++ b/tests/desktop-proc.test.ts
@@ -1,5 +1,5 @@
 import { describe, expect, test } from 'bun:test';
-import { appExe, listCommand, logDir, matchByPath, mismatchMessage, notOpenedMessage, parseProcs, peVersion, startedHidden, stopCommand, versionMatches } from '../cli/lib/desktop-proc';
+import { appExe, graceMs, openState, listCommand, logDir, matchByPath, mismatchMessage, notOpenedMessage, parseProcs, peVersion, startedHidden, stopCommand, versionMatches } from '../cli/lib/desktop-proc';
 
 /** A tiny fake PE: "MZ", padding, then a VS_FIXEDFILEINFO with the given product version. */
 function fakePe(a: number, b: number, c: number, d = 0, at = 128): Uint8Array {
@@ -82,3 +82,25 @@ describe('desktop open: the log the message points to', () => {
     expect(notOpenedMessage('hidden', 'x.exe', 'L')).toContain('hidden (tray)');
   });
 });
+
+describe('desktop open: a hidden tray copy that is already running', () => {
+  const exe = "D:/app/storebound-desktop.exe";
+  const hidden = { pid: 1, exe, args: `"${exe}" --hidden` };
+  test('Windows: the visible window decides, read from the CIM/Get-Process JSON', () => {
+    const rows = parseProcs('win32', JSON.stringify([{ ProcessId: 1, ExecutablePath: exe, CommandLine: `"${exe}" --hidden`, Window: false }, { ProcessId: 2, ExecutablePath: exe, CommandLine: `"${exe}"`, Window: true }]));
+    expect(rows.map(r => r.window)).toEqual([false, true]);
+    expect(openState('win32', [rows[0]!], true)).toBe('hidden');
+    expect(openState('win32', rows, false)).toBe('ok');
+    expect(openState('win32', [], true)).toBe('none');
+    expect(listCommand('win32').join(' ')).toContain('MainWindowHandle');
+  });
+  test('elsewhere: a visible start, or a hidden copy the new start handed over to', () => {
+    expect(openState('linux', [hidden], false)).toBe('hidden');
+    expect(openState('linux', [hidden], true)).toBe('ok');
+    expect(openState('darwin', [{ pid: 3, exe: '', args: '/x/storebound-desktop' }], false)).toBe('ok');
+    expect(openState('darwin', [], true)).toBe('none');
+  });
+  test('a tray app only hides on close: short graceful wait on Windows', () => {
+    expect(graceMs('win32')).toBeLessThan(graceMs('linux'));
+  });
+});

From 4dff7d9b2e65de096dc936a1a86d127b27788603 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 22:48:02 +0800
Subject: [PATCH 126/255] desktop open: Windows window check uses real
 top-level windows (the tray helper windows and MainWindowHandle also answer
 for a hidden app)

---
 cli/lib/desktop-proc.ts    | 15 ++++++++++++++-
 tests/desktop-proc.test.ts |  2 +-
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/cli/lib/desktop-proc.ts b/cli/lib/desktop-proc.ts
index 3291bad..08eee60 100644
--- a/cli/lib/desktop-proc.ts
+++ b/cli/lib/desktop-proc.ts
@@ -15,8 +15,21 @@ export function appExe(platform: NodeJS.Platform, installedPath: string): string
 /** The command that lists processes with their executable and arguments (never through a shell). */
 export function listCommand(platform: NodeJS.Platform): string[] {
   if (platform === 'win32') {
+    // Window = a visible, unowned, titled top-level window that is not a tool window (the tray helper windows are
+    // visible but tool windows / untitled; Process.MainWindowHandle also answers for a hidden window)
+    const cs = 'using System; using System.Collections.Generic; using System.Runtime.InteropServices; using System.Text; '
+      + 'public static class SbWin { delegate bool CB(IntPtr h, IntPtr l); '
+      + '[DllImport("user32.dll")] static extern bool EnumWindows(CB c, IntPtr l); '
+      + '[DllImport("user32.dll")] static extern uint GetWindowThreadProcessId(IntPtr h, out uint p); '
+      + '[DllImport("user32.dll")] static extern bool IsWindowVisible(IntPtr h); '
+      + '[DllImport("user32.dll")] static extern IntPtr GetWindow(IntPtr h, uint c); '
+      + '[DllImport("user32.dll")] static extern int GetWindowTextLength(IntPtr h); '
+      + '[DllImport("user32.dll")] static extern int GetWindowLong(IntPtr h, int i); '
+      + 'public static uint[] Visible() { var r = new List<uint>(); EnumWindows((h, l) => { uint p; GetWindowThreadProcessId(h, out p); '
+      + 'if (IsWindowVisible(h) && GetWindow(h, 4) == IntPtr.Zero && GetWindowTextLength(h) > 0 && (GetWindowLong(h, -20) & 0x80) == 0) r.Add(p); return true; }, IntPtr.Zero); return r.ToArray(); } }';
     return ['powershell', '-NoProfile', '-NonInteractive', '-Command',
-      "Get-CimInstance Win32_Process -Filter \"Name='storebound-desktop.exe'\" | ForEach-Object { $g = Get-Process -Id $_.ProcessId -ErrorAction SilentlyContinue; [pscustomobject]@{ ProcessId = $_.ProcessId; ExecutablePath = $_.ExecutablePath; CommandLine = $_.CommandLine; Window = [bool]($g -and $g.MainWindowHandle -ne 0) } } | ConvertTo-Json -Compress"];
+      `Add-Type -TypeDefinition '${cs}'; $v = [SbWin]::Visible(); `
+      + "Get-CimInstance Win32_Process -Filter \"Name='storebound-desktop.exe'\" | ForEach-Object { [pscustomobject]@{ ProcessId = $_.ProcessId; ExecutablePath = $_.ExecutablePath; CommandLine = $_.CommandLine; Window = [bool]($v -contains [uint32]$_.ProcessId) } } | ConvertTo-Json -Compress"];
   }
   return ['ps', '-axww', '-o', 'pid=,args='];
 }
diff --git a/tests/desktop-proc.test.ts b/tests/desktop-proc.test.ts
index c1a859b..b7a3e18 100644
--- a/tests/desktop-proc.test.ts
+++ b/tests/desktop-proc.test.ts
@@ -92,7 +92,7 @@ describe('desktop open: a hidden tray copy that is already running', () => {
     expect(openState('win32', [rows[0]!], true)).toBe('hidden');
     expect(openState('win32', rows, false)).toBe('ok');
     expect(openState('win32', [], true)).toBe('none');
-    expect(listCommand('win32').join(' ')).toContain('MainWindowHandle');
+    expect(listCommand('win32').join(' ')).toContain('IsWindowVisible');
   });
   test('elsewhere: a visible start, or a hidden copy the new start handed over to', () => {
     expect(openState('linux', [hidden], false)).toBe('hidden');

From 39b2f73ad7c53d13ef33c7e94b240bf540156b16 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 23:14:08 +0800
Subject: [PATCH 127/255] desktop dev update channel: every push to main builds
 dev bundles (<next patch>-dev.<UTC>), the VDS signs and publishes
 dev/latest.json (newest 5); app channel setting stable|dev, background
 updater at start / 15 min / resume / channel switch, deferred while in use,
 no downgrade, autostart rewritten on every start, card shows version and
 channel

---
 .forgejo/workflows/ci.yml                |  99 +++++++++++++
 CHANGELOG.md                             |   1 +
 apps/desktop/src-tauri/src/commands.rs   |   8 +-
 apps/desktop/src-tauri/src/lib.rs        |  93 +++++++++---
 apps/desktop/src-tauri/src/updates.rs    |  99 ++++++++++++-
 apps/desktop/src-tauri/src/workspace.rs  |   6 +-
 apps/desktop/src-tauri/tauri.conf.json   |   1 +
 apps/desktop/src-tauri/tests/d5.rs       |  41 +++++-
 apps/desktop/src/api.ts                  |   5 +-
 apps/desktop/src/card/Card.tsx           |   1 +
 apps/desktop/src/card/bridge.tsx         |   2 +-
 apps/desktop/src/card/card.css           |   1 +
 apps/desktop/src/card/model.ts           |   5 +-
 apps/desktop/src/card/text.ts            |   8 ++
 apps/desktop/src/i18n/en.ts              |   4 +-
 apps/desktop/src/i18n/tr.ts              |   4 +-
 apps/desktop/src/lib/normalize.ts        |   2 +-
 apps/desktop/src/screens/Settings.tsx    |   7 +-
 docs/desktop-release.md                  |  28 ++++
 tests/desktop-dev.test.ts                |  39 ++++++
 tools/desktop-dev.ts                     | 123 ++++++++++++++++
 tools/vds/storebound-desktop-dev         | 171 +++++++++++++++++++++++
 tools/vds/storebound-desktop-dev.service |  11 ++
 tools/vds/storebound-desktop-dev.timer   |  10 ++
 tools/vds/storebound-desktop-publish     |  10 +-
 25 files changed, 732 insertions(+), 47 deletions(-)
 create mode 100644 tests/desktop-dev.test.ts
 create mode 100644 tools/desktop-dev.ts
 create mode 100644 tools/vds/storebound-desktop-dev
 create mode 100644 tools/vds/storebound-desktop-dev.service
 create mode 100644 tools/vds/storebound-desktop-dev.timer

diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 286c25a..d0d95da 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -223,6 +223,33 @@ jobs:
           name: storebound-desktop-linux
           path: out/
           retention-days: 7
+      # dev channel (tools/desktop-dev.ts): the same commit again with the version <next patch>-dev.<commit UTC>, only in
+      # this workspace (never committed); a failure here never touches the release candidate above
+      - name: Dev build (AppImage + deb, dev version)
+        id: dev
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        continue-on-error: true
+        env:
+          FORBIDDEN_TERMS: ${{ secrets.FORBIDDEN_TERMS }}
+        run: |
+          set -euo pipefail
+          V=$(bun tools/desktop-dev.ts set)
+          bun tools/build-sidecars.ts --target bun-linux-x64
+          patchelf --set-rpath '$ORIGIN/../lib' apps/desktop/src-tauri/binaries/storebound-x86_64-unknown-linux-gnu
+          B="$CARGO_TARGET_DIR/release/bundle"; rm -rf "$B"
+          (cd apps/desktop && bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci)
+          mkdir -p dev && cp "$B/appimage/storebound_${V}_amd64.AppImage" "$B/deb/storebound_${V}_amd64.deb" dev/
+          chmod +x dev/*.AppImage
+          (cd /tmp && rm -rf squashfs-root && "$GITHUB_WORKSPACE/dev/storebound_${V}_amd64.AppImage" --appimage-extract >/dev/null && squashfs-root/usr/bin/storebound-desktop --self-test)
+          umask 077; printf '%s\n' "$FORBIDDEN_TERMS" > "$RUNNER_TEMP/terms.txt"
+          rc=0; STOREBOUND_FORBIDDEN_TERMS="$RUNNER_TEMP/terms.txt" bun tools/privacy-scan.ts dev/ || rc=$?
+          rm -f "$RUNNER_TEMP/terms.txt"; git checkout -- . ; exit $rc
+      - uses: actions/upload-artifact@v3
+        if: steps.dev.outcome == 'success'
+        with:
+          name: storebound-desktop-dev-linux
+          path: dev/
+          retention-days: 3
 
   windows:
     needs: gate
@@ -288,6 +315,78 @@ jobs:
           name: storebound-desktop-windows
           path: out/
           retention-days: 7
+      # dev channel (tools/desktop-dev.ts): see the linux job
+      - name: Dev build (NSIS, dev version)
+        id: dev
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        continue-on-error: true
+        shell: pwsh
+        env:
+          FORBIDDEN_TERMS: ${{ secrets.FORBIDDEN_TERMS }}
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $V = bun tools/desktop-dev.ts set
+          if ($LASTEXITCODE -ne 0) { throw "dev version stamp refused" }
+          bun tools/build-sidecars.ts --target bun-windows-x64
+          Remove-Item -Recurse -Force "$env:CARGO_TARGET_DIR\release\bundle\nsis" -ErrorAction SilentlyContinue
+          Push-Location apps/desktop
+          bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles nsis --ci
+          if ($LASTEXITCODE -ne 0) { throw "dev build failed" }
+          Pop-Location
+          New-Item -ItemType Directory -Force dev | Out-Null
+          Copy-Item "$env:CARGO_TARGET_DIR\release\bundle\nsis\storebound_${V}_x64-setup.exe" dev\
+          Start-Process -Wait -FilePath "dev\storebound_${V}_x64-setup.exe" -ArgumentList '/S'
+          & "$env:LOCALAPPDATA\storebound\storebound-desktop.exe" --self-test
+          if ($LASTEXITCODE -ne 0) { throw "dev self-test failed" }
+          Start-Process -Wait -FilePath "$env:LOCALAPPDATA\storebound\uninstall.exe" -ArgumentList '/S'
+          $t = Join-Path $env:RUNNER_TEMP "terms-$([guid]::NewGuid()).txt"
+          Set-Content -Path $t -Value $env:FORBIDDEN_TERMS -NoNewline:$false
+          $env:STOREBOUND_FORBIDDEN_TERMS = $t
+          bun tools/privacy-scan.ts dev
+          $rc = $LASTEXITCODE
+          Remove-Item -Force $t
+          git checkout -- .
+          if ($rc -ne 0) { throw "privacy scan failed" }
+      - uses: actions/upload-artifact@v3
+        if: steps.dev.outcome == 'success'
+        with:
+          name: storebound-desktop-dev-windows
+          path: dev/
+          retention-days: 3
+
+  # dev channel: the dev bundles of both jobs go to a Forgejo draft dev-<version> (no tag; the newest 5 kept); the VDS
+  # (tools/vds/storebound-desktop-dev, a root timer) signs them with the updater key and publishes
+  # storebound.dev/desktop/dev/latest.json. macOS has no dev build: Developer ID signing needs the Mac's GUI session.
+  dev:
+    needs: [linux, windows]
+    if: ${{ always() && github.event_name == 'push' && github.ref == 'refs/heads/main' && needs.linux.result == 'success' && needs.windows.result == 'success' }}
+    runs-on: ubuntu-22.04
+    timeout-minutes: 40
+    env:
+      FORGEJO_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+      FORGEJO_URL: ${{ github.server_url }}
+      FORGEJO_ORIGIN: ${{ secrets.FORGEJO_ORIGIN }}
+      SHA: ${{ github.sha }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Tools
+        run: |
+          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
+      - uses: actions/download-artifact@v3
+        with:
+          name: storebound-desktop-dev-linux
+          path: dev
+      - uses: actions/download-artifact@v3
+        with:
+          name: storebound-desktop-dev-windows
+          path: dev
+      - name: Draft dev-<version> (newest 5 kept), then wait for the VDS to publish it
+        run: |
+          ls -la dev
+          bun tools/desktop-dev.ts record --dir dev --yes
+          V=$(ls dev | sed -n 's/^storebound_\(.*\)_x64-setup\.exe$/\1/p')
+          bun tools/desktop-dev.ts wait "$V" --minutes 20
 
   record:
     needs: [gate, linux, windows]
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6a0a01a..9f63eba 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
 
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index b45303b..2cbf8f9 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -1246,6 +1246,10 @@ pub fn settings_set(window: WebviewWindow, state: State<'_, AppState>, settings:
     guard(&window)?;
     workspace::check_settings(&settings).map_err(Fail::host)?;
     let mut st = saved(&state)?;
+    if st.settings.channel != settings.channel {
+        // a switched channel is checked right away by the background updater (lib.rs auto_update)
+        crate::updates::kick();
+    }
     st.settings = settings.clone();
     persist(&state, &st)?;
     drop(st);
@@ -1480,7 +1484,7 @@ pub struct UpdateInfo {
     pub date: Option<String>,
 }
 
-async fn find_update(app: &AppHandle, channel: &str) -> Res<Option<tauri_plugin_updater::Update>> {
+pub async fn find_update(app: &AppHandle, channel: &str) -> Res<Option<tauri_plugin_updater::Update>> {
     use tauri_plugin_updater::UpdaterExt;
     let url = url::Url::parse(updates::endpoint(channel)).map_err(|e| Fail::host(e.to_string()))?;
     if !updates::endpoint_allowed(&url) {
@@ -1491,6 +1495,8 @@ async fn find_update(app: &AppHandle, channel: &str) -> Res<Option<tauri_plugin_
         .endpoints(vec![url])
         .map_err(|e| Fail::host(e.to_string()))?
         .timeout(std::time::Duration::from_secs(30))
+        // the no-downgrade rule (updates::should_install), also after a switch from dev back to stable
+        .version_comparator(|current, remote| updates::should_install(&current.to_string(), &remote.version.to_string()))
         .build()
         .map_err(|e| Fail::host(updates::error_text(&e.to_string())))?;
     updater.check().await.map_err(|e| Fail::host(updates::error_text(&e.to_string())))
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index a5dd222..2ef5046 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -26,7 +26,6 @@ use tauri::menu::{Menu, MenuItem, PredefinedMenuItem, Submenu, WINDOW_SUBMENU_ID
 use tauri::tray::{MouseButton, MouseButtonState, TrayIconBuilder, TrayIconEvent};
 use tauri::{AppHandle, Emitter, Manager, RunEvent, Runtime, WindowEvent};
 use tauri_plugin_autostart::{MacosLauncher, ManagerExt};
-use tauri_plugin_updater::UpdaterExt;
 use tauri_plugin_deep_link::DeepLinkExt;
 
 /// WebKitGTK's DMABUF renderer leaves the window blank on some Linux GPU / driver / VM combinations. Turn it off unless
@@ -86,29 +85,79 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
 
 /// Silent self-update: at start (after a minute) and every 30 minutes, a signed update from storebound.dev is
 /// downloaded, installed and the app restarts with the same arguments (`--hidden` stays hidden). Errors are logged.
+/// Background updater (docs/desktop-release.md, "Dev channel"): asks the chosen channel's latest.json at start, every
+/// 15 minutes, right after a resume from sleep and when Settings switched the channel; installs a strictly newer, signed
+/// build silently (the plugin checks the minisign signature first), deferred while the main window is in use (at most
+/// updates::MAX_DEFERS checks in a row). Every step goes to host.log as `auto-update ...`.
 fn auto_update(app: AppHandle) {
     tauri::async_runtime::spawn(async move {
-        tokio::time::sleep(std::time::Duration::from_secs(60)).await;
+        use std::time::{Duration, Instant, SystemTime};
+        tokio::time::sleep(Duration::from_secs(10)).await;
+        let mut first = true;
+        let mut last_check = Instant::now();
+        let mut last_wall = SystemTime::now();
+        let mut defers = 0u32;
         loop {
-            match app.updater() {
-                Ok(u) => match u.check().await {
-                    Ok(Some(update)) => {
-                        logs::host("info", &format!("auto-update: {} available, installing", update.version));
-                        match update.download_and_install(|_, _| {}, || {}).await {
-                            Ok(()) => app.restart(),
-                            Err(e) => logs::host("warn", &format!("auto-update: install failed: {e}")),
-                        }
-                    }
-                    Ok(None) => {}
-                    Err(e) => logs::host("warn", &format!("auto-update: check failed: {e}")),
-                },
-                Err(e) => logs::host("warn", &format!("auto-update: no updater: {e}")),
+            let now_wall = SystemTime::now();
+            let gap = now_wall.duration_since(last_wall).map(|d| d.as_secs()).unwrap_or(0);
+            last_wall = now_wall;
+            let kicked = updates::take_kick();
+            if updates::check_due(first, kicked, gap, last_check.elapsed().as_secs()) {
+                let why = if first { "start" } else if kicked { "channel switched" } else if gap > updates::TICK_SECS + 60 { "resume" } else { "every 15 min" };
+                first = false;
+                last_check = Instant::now();
+                defers = auto_update_once(&app, why, defers).await;
             }
-            tokio::time::sleep(std::time::Duration::from_secs(30 * 60)).await;
+            tokio::time::sleep(Duration::from_secs(updates::TICK_SECS)).await;
         }
     });
 }
 
+/// One check of the background updater; returns the new count of deferred installs.
+async fn auto_update_once(app: &AppHandle, why: &str, defers: u32) -> u32 {
+    let state = app.state::<commands::AppState>();
+    let channel = match state.saved.lock() {
+        Ok(s) => s.settings.channel.clone(),
+        Err(_) => return defers,
+    };
+    let current = env!("CARGO_PKG_VERSION");
+    let update = match commands::find_update(app, &channel).await {
+        Ok(Some(u)) => u,
+        Ok(None) => {
+            logs::host("info", &format!("auto-update ({why}): {current} is current on {channel}"));
+            return 0;
+        }
+        Err(e) => {
+            logs::host("warn", &format!("auto-update ({why}): check of {channel} failed: {}", e.message));
+            return defers;
+        }
+    };
+    if !updates::should_install(current, &update.version) {
+        logs::host("info", &format!("auto-update ({why}): {channel} offers {}, not newer than {current}: no downgrade", update.version));
+        return 0;
+    }
+    let main = app.get_webview_window(policy::MAIN);
+    let visible = main.as_ref().and_then(|w| w.is_visible().ok()).unwrap_or(false);
+    let focused = main.as_ref().and_then(|w| w.is_focused().ok()).unwrap_or(false);
+    if updates::defer_install(visible, focused, defers) {
+        logs::host("info", &format!("auto-update ({why}): {} on {channel} waits, the window is in use ({}/{})", update.version, defers + 1, updates::MAX_DEFERS));
+        return defers + 1;
+    }
+    logs::host("info", &format!("auto-update ({why}): installing {} from {channel} (this is {current})", update.version));
+    // the sidecar binary lives inside the app bundle that is about to be replaced
+    state.sidecar.shutdown().await;
+    match update.download_and_install(|_, _| {}, || {}).await {
+        Ok(()) => {
+            logs::host("info", &format!("auto-update: {} installed, restarting", update.version));
+            app.restart()
+        }
+        Err(e) => {
+            logs::host("warn", &format!("auto-update: install of {} failed: {}", update.version, updates::error_text(&e.to_string())));
+            0
+        }
+    }
+}
+
 fn show_main<R: Runtime>(app: &AppHandle<R>) {
     if let Some(w) = app.get_webview_window(policy::MAIN) {
         let _ = w.unminimize();
@@ -281,13 +330,11 @@ pub fn run() {
             if let Err(e) = commands::sync_machine(&state) {
                 logs::host("warn", &format!("accounts / app folders not synced at start: {}", e.message));
             }
-            // start at logon, in the tray: set once (first run); the owner can turn it off in the OS afterwards
-            let marker = state.data_dir.join("autostart-set");
-            if !marker.exists() {
-                match app.autolaunch().enable() {
-                    Ok(()) => { let _ = std::fs::write(&marker, "1"); logs::host("info", "autostart at logon enabled (--hidden, tray)"); }
-                    Err(e) => logs::host("warn", &format!("autostart not enabled: {e}")),
-                }
+            // start at logon, in the tray: rewritten on every start (Windows: the HKCU Run entry then points at the
+            // running exe, so a moved or updated install fixes itself)
+            match app.autolaunch().enable() {
+                Ok(()) => logs::host("info", "autostart at logon set (--hidden, tray)"),
+                Err(e) => logs::host("warn", &format!("autostart not set: {e}")),
             }
             app.manage(state);
             tray(app)?;
diff --git a/apps/desktop/src-tauri/src/updates.rs b/apps/desktop/src-tauri/src/updates.rs
index 40c0ef5..2baaf87 100644
--- a/apps/desktop/src-tauri/src/updates.rs
+++ b/apps/desktop/src-tauri/src/updates.rs
@@ -1,22 +1,111 @@
 //! Signed updates from storebound.dev. The updater plugin checks `latest.json` of the chosen channel, downloads the
 //! platform's bundle and refuses it unless its minisign signature matches the public key in tauri.conf.json (the
 //! private key never leaves the release machine, ~/.storebound-keys). Nothing installs without the owner's click in
-//! a native dialog (commands::update_install). Pure parts here so tests can pin them.
+//! a native dialog (commands::update_install), or by the background updater (lib.rs auto_update). Pure parts here so tests can pin them.
+use std::sync::atomic::{AtomicBool, Ordering};
+
 use url::Url;
 
+/// Set when Settings > Updates switched the channel: the background updater checks on its next tick.
+pub static KICK: AtomicBool = AtomicBool::new(false);
+
+pub fn kick() {
+    KICK.store(true, Ordering::SeqCst);
+}
+
+pub fn take_kick() -> bool {
+    KICK.swap(false, Ordering::SeqCst)
+}
+
 /// `latest.json` of each channel (static files on storebound.dev, published by tools/desktop-release.ts).
 pub const STABLE: &str = "https://storebound.dev/desktop/latest.json";
 pub const BETA: &str = "https://storebound.dev/desktop/beta/latest.json";
+/// Every push to main (Forgejo ci `dev` job, signed on the VDS): `<next patch>-dev.<UTC yyyymmddHHMMSS>`.
+pub const DEV: &str = "https://storebound.dev/desktop/dev/latest.json";
+
+/// The channels Settings > Updates accepts (beta is kept for saved states; the window offers stable and dev).
+pub const CHANNELS: &[&str] = &["stable", "dev", "beta"];
 
 /// The endpoint of a channel (Settings > Updates); anything unknown is the stable channel.
 pub fn endpoint(channel: &str) -> &'static str {
-    if channel == "beta" {
-        BETA
-    } else {
-        STABLE
+    match channel {
+        "beta" => BETA,
+        "dev" => DEV,
+        _ => STABLE,
     }
 }
 
+/// How often the background updater asks the channel (plus once at start and right after a resume from sleep).
+pub const CHECK_EVERY_SECS: u64 = 15 * 60;
+/// The background loop's tick; a wall-clock jump of more than this plus a minute between two ticks is a resume.
+pub const TICK_SECS: u64 = 5;
+/// An install waits while the main window is visible and focused, at most this many checks in a row (so an app that
+/// stays open still updates).
+pub const MAX_DEFERS: u32 = 4;
+
+/// A semver version as (major, minor, patch) and its prerelease identifiers; None when it is not one.
+fn parse(v: &str) -> Option<([u64; 3], Vec<String>)> {
+    let v = v.trim().trim_start_matches('v');
+    let v = v.split('+').next()?;
+    let (core, pre) = match v.split_once('-') {
+        Some((c, p)) => (c, p.split('.').map(str::to_string).collect::<Vec<_>>()),
+        None => (v, Vec::new()),
+    };
+    let mut n = core.split('.').map(|x| x.parse::<u64>().ok());
+    let r = [n.next()??, n.next()??, n.next()??];
+    if n.next().is_some() || pre.iter().any(String::is_empty) {
+        return None;
+    }
+    Some((r, pre))
+}
+
+/// semver 2.0 precedence, a > b: a release is above its own prereleases (0.8.48 > 0.8.48-dev.20261023120000), numeric
+/// identifiers compare as numbers and sort below alphanumeric ones, a longer prerelease is above its prefix.
+pub fn newer(a: &str, b: &str) -> bool {
+    use std::cmp::Ordering::{Equal, Greater, Less};
+    let (Some((ac, ap)), Some((bc, bp))) = (parse(a), parse(b)) else { return false };
+    match ac.cmp(&bc) {
+        Greater => return true,
+        Less => return false,
+        Equal => {}
+    }
+    match (ap.is_empty(), bp.is_empty()) {
+        (true, true) | (false, true) => return false,
+        (true, false) => return true,
+        _ => {}
+    }
+    for (x, y) in ap.iter().zip(bp.iter()) {
+        let o = match (x.parse::<u64>(), y.parse::<u64>()) {
+            (Ok(i), Ok(j)) => i.cmp(&j),
+            (Ok(_), Err(_)) => Less,
+            (Err(_), Ok(_)) => Greater,
+            _ => x.cmp(y),
+        };
+        if o != Equal {
+            return o == Greater;
+        }
+    }
+    ap.len() > bp.len()
+}
+
+/// The no-downgrade rule: an update installs only when the channel's version is strictly newer than this build. A dev
+/// install switched back to stable stays on its dev build until a stable release passes it.
+pub fn should_install(current: &str, offered: &str) -> bool {
+    newer(offered, current)
+}
+
+/// The background updater defers an install while the owner works in the main window (visible and focused), at most
+/// MAX_DEFERS checks in a row. A hidden window can report focus, so only a visible one counts.
+pub fn defer_install(visible: bool, focused: bool, defers_so_far: u32) -> bool {
+    visible && focused && defers_so_far < MAX_DEFERS
+}
+
+/// Whether the background updater asks the channel now: the first tick, a kick (channel switched), a resume from sleep
+/// (the wall clock moved much further than one tick), or CHECK_EVERY_SECS since the last check.
+pub fn check_due(first: bool, kicked: bool, wall_gap_secs: u64, since_check_secs: u64) -> bool {
+    first || kicked || wall_gap_secs > TICK_SECS + 60 || since_check_secs >= CHECK_EVERY_SECS
+}
+
 /// Only storebound.dev over HTTPS, without port or user info, may serve updates.
 pub fn endpoint_allowed(url: &Url) -> bool {
     url.scheme() == "https" && url.host_str() == Some("storebound.dev") && url.port().is_none() && url.username().is_empty() && url.password().is_none() && url.path().starts_with("/desktop/")
diff --git a/apps/desktop/src-tauri/src/workspace.rs b/apps/desktop/src-tauri/src/workspace.rs
index b1917a2..02f170b 100644
--- a/apps/desktop/src-tauri/src/workspace.rs
+++ b/apps/desktop/src-tauri/src/workspace.rs
@@ -310,7 +310,7 @@ pub struct Settings {
     pub refresh: RefreshSettings,
     pub cache: CacheSettings,
     pub notify: NotifySettings,
-    /// Update channel (placeholder until the updater ships): stable | beta.
+    /// Update channel (Settings > Updates): stable | dev (beta kept for saved states). crate::updates::endpoint.
     pub channel: String,
 }
 
@@ -360,8 +360,8 @@ pub fn check_settings(s: &Settings) -> Result<(), String> {
     if !valid_hhmm(&s.notify.quiet_hours.from) || !valid_hhmm(&s.notify.quiet_hours.to) {
         return Err("quiet hours: times as HH:MM (00:00 to 23:59)".into());
     }
-    if !["stable", "beta"].contains(&s.channel.as_str()) {
-        return Err("channel: stable or beta".into());
+    if !crate::updates::CHANNELS.contains(&s.channel.as_str()) {
+        return Err("channel: stable or dev".into());
     }
     Ok(())
 }
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 9ce8df9..c786df1 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -88,6 +88,7 @@
     },
     "updater": {
       "endpoints": ["https://storebound.dev/desktop/latest.json"],
+      "windows": { "installMode": "quiet" },
       "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDQ0Rjc4QTc4RDlFRjM4MkEKUldRcU9PL1plSXIzUkJtb2x0L2Z4MTA4bTg5UU5FVW5kUlRGcnVjangwQ0JNb2VGYjcveGhydlcK"
     }
   }
diff --git a/apps/desktop/src-tauri/tests/d5.rs b/apps/desktop/src-tauri/tests/d5.rs
index 27fd060..6232f5b 100644
--- a/apps/desktop/src-tauri/tests/d5.rs
+++ b/apps/desktop/src-tauri/tests/d5.rs
@@ -41,10 +41,13 @@ fn updater_has_a_real_minisign_key_and_only_storebound_dev() {
     assert_eq!(c["plugins"]["updater"]["endpoints"], serde_json::json!([updates::STABLE]));
     // updater bundles are signed by tools/desktop-release.ts on the release Mac, never by a CI runner
     assert_eq!(c["bundle"]["createUpdaterArtifacts"], false);
-    for ch in ["stable", "beta", "nightly", ""] {
+    assert_eq!(c["plugins"]["updater"]["windows"]["installMode"], "quiet");
+    for ch in ["stable", "beta", "dev", "nightly", ""] {
         assert!(updates::endpoint_allowed(&Url::parse(updates::endpoint(ch)).unwrap()), "{ch}");
     }
     assert_eq!(updates::endpoint("beta"), updates::BETA);
+    assert_eq!(updates::endpoint("dev"), updates::DEV);
+    assert_eq!(updates::DEV, "https://storebound.dev/desktop/dev/latest.json");
     assert_eq!(updates::endpoint("anything"), updates::STABLE);
     for bad in ["http://storebound.dev/desktop/latest.json", "https://storebound.dev:8443/desktop/latest.json", "https://evil.test/desktop/latest.json", "https://storebound.dev/latest.json"] {
         assert!(!updates::endpoint_allowed(&Url::parse(bad).unwrap()), "{bad}");
@@ -103,3 +106,39 @@ fn deep_links_to_folders_ask_before_adding() {
     let body = &cmds[at..];
     assert!(body.find("confirm_dialog_with(").unwrap() < body.find("download_and_install(").unwrap());
 }
+
+#[test]
+fn dev_versions_sort_and_never_downgrade() {
+    // a dev build of the next patch is above the current stable, below that next stable, and later stamps go up
+    assert!(updates::newer("0.8.48-dev.20261023120000", "0.8.47"));
+    assert!(updates::newer("0.8.48", "0.8.48-dev.20261023120000"));
+    assert!(updates::newer("0.8.48-dev.20261023120001", "0.8.48-dev.20261023120000"));
+    assert!(updates::newer("0.8.48-dev.20261024000000", "0.8.48-dev.9"), "numeric identifiers compare as numbers");
+    assert!(updates::newer("0.8.49-dev.1", "0.8.48"));
+    assert!(updates::newer("0.10.0", "0.9.9"));
+    assert!(!updates::newer("0.8.48", "0.8.48"));
+    assert!(!updates::newer("nonsense", "0.8.48"));
+    // switched from dev back to stable: stays on the dev build until a stable release passes it
+    assert!(!updates::should_install("0.8.48-dev.20261023120000", "0.8.47"));
+    assert!(updates::should_install("0.8.48-dev.20261023120000", "0.8.48"));
+    assert!(updates::should_install("0.8.47", "0.8.48-dev.20261023120000"));
+    assert!(!updates::should_install("0.8.48-dev.20261023120000", "0.8.48-dev.20261023120000"));
+}
+
+#[test]
+fn background_updater_schedule_and_defer() {
+    assert!(updates::check_due(true, false, 0, 0), "at start");
+    assert!(updates::check_due(false, true, 0, 0), "channel switched");
+    assert!(updates::check_due(false, false, 3600, 5), "resume from sleep");
+    assert!(updates::check_due(false, false, 5, updates::CHECK_EVERY_SECS));
+    assert!(!updates::check_due(false, false, 5, 60));
+    assert_eq!(updates::CHECK_EVERY_SECS, 900);
+    assert!(updates::defer_install(true, true, 0));
+    assert!(!updates::defer_install(true, true, updates::MAX_DEFERS), "an open window still updates after a few checks");
+    assert!(!updates::defer_install(false, true, 0), "a hidden window can report focus");
+    assert!(!updates::defer_install(true, false, 0));
+    let _ = updates::take_kick();
+    updates::kick();
+    assert!(updates::take_kick());
+    assert!(!updates::take_kick());
+}
diff --git a/apps/desktop/src/api.ts b/apps/desktop/src/api.ts
index 343a570..58c06e8 100644
--- a/apps/desktop/src/api.ts
+++ b/apps/desktop/src/api.ts
@@ -36,7 +36,8 @@ export interface Settings {
   cache: { keepDays: 0 | 7 | 30 | 90 | 365 };
   /** reviewState: other state changes (submitted, in review); rejected / approved / live: own toggles; crash also covers a halted rollout. quietHours: no notification between from and to (HH:MM, may cross midnight). */
   notify: { reviewState: boolean; rejected: boolean; approved: boolean; live: boolean; lowReviews: boolean; crash: boolean; quietHours: { enabled: boolean; from: string; to: string } };
-  channel: 'stable' | 'beta';
+  /** Update channel: stable (npm releases) or dev (every push to main); beta is kept for saved states. */
+  channel: 'stable' | 'dev' | 'beta';
 }
 export const DEFAULT_SETTINGS: Settings = { refresh: { autoMinutes: 0, onLaunch: false, parallel: 4, icons: true, autoRead: true, everyMinutes: 15 }, cache: { keepDays: 30 }, notify: { reviewState: true, rejected: true, approved: true, live: true, lowReviews: true, crash: true, quietHours: { enabled: false, from: '23:00', to: '08:00' } }, channel: 'stable' };
 export interface Workspace { studios: Studio[]; overrides: Overrides; settings: Settings }
@@ -47,7 +48,7 @@ export interface CacheEntry<T = unknown> { value: T; at: string }
 export interface DownloadInfo { tool: 'ffmpeg' | 'chrome'; available: boolean; version: string | null; size: number | null; license: string; licenseUrl: string; source: string; installed: boolean; folder: string }
 export interface DownloadEvent { job: string; tool: string; stage: 'resolve' | 'download' | 'verify' | 'unpack' | 'install' | 'done' | 'error' | 'cancelled'; received: number; total: number | null; message?: string }
 export type { IconResult as Icon };
-export interface UpdateInfo { current: string; channel: 'stable' | 'beta'; available: string | null; notes: string | null; date: string | null }
+export interface UpdateInfo { current: string; channel: 'stable' | 'dev' | 'beta'; available: string | null; notes: string | null; date: string | null }
 
 /** What a failed command rejects with (sidecar.rs `Fail`). */
 export interface Fail { code: number; message: string; data?: unknown }
diff --git a/apps/desktop/src/card/Card.tsx b/apps/desktop/src/card/Card.tsx
index a07e633..99b4101 100644
--- a/apps/desktop/src/card/Card.tsx
+++ b/apps/desktop/src/card/Card.tsx
@@ -126,6 +126,7 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
           </Section>
         )}
       </div>
+      {s?.build && <footer className="tc-foot" data-testid="card-build">{T('build', { version: s.build.version, channel: T(s.build.channel === 'dev' ? 'chDev' : s.build.channel === 'beta' ? 'chBeta' : 'chStable') })}</footer>}
     </div>
   );
 }
diff --git a/apps/desktop/src/card/bridge.tsx b/apps/desktop/src/card/bridge.tsx
index 4c375c5..f34d644 100644
--- a/apps/desktop/src/card/bridge.tsx
+++ b/apps/desktop/src/card/bridge.tsx
@@ -51,7 +51,7 @@ export function TrayCardBridge() {
         asc: ios ? ascUrl(ios.ascAppId) : null, play: st?.app?.platforms.android || a.android ? playUrlFor(d, a) : null,
       };
     });
-    return cardSnapshot(inputs, { at: d.live?.value.at ?? d.portfolio?.at ?? null, busy: all.busy, muted: d.muteUntil > Date.now() });
+    return cardSnapshot(inputs, { at: d.live?.value.at ?? d.portfolio?.at ?? null, busy: all.busy, muted: d.muteUntil > Date.now(), build: d.info ? { version: d.info.version, channel: d.settings.channel } : null });
   }, [visible, d, extra, all.busy]);
 
   const last = useRef('');
diff --git a/apps/desktop/src/card/card.css b/apps/desktop/src/card/card.css
index 827fe12..c9502c8 100644
--- a/apps/desktop/src/card/card.css
+++ b/apps/desktop/src/card/card.css
@@ -56,3 +56,4 @@ body.tc-page.tc-in .tc { animation: tc-in 120ms ease-out; }
 .tc-stars { display: inline-flex; gap: 1px; align-items: center; color: var(--warn-solid); }
 .tc-rname { font-weight: var(--ds-w-strong); font-size: var(--ds-t-meta); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
 .tc-rtext { grid-column: 1 / -1; font-size: var(--ds-t-meta); color: var(--ink-2); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.tc-foot { padding: 6px 12px 8px; color: var(--muted); font-size: var(--ds-t-micro); border-top: 1px solid var(--ds-stroke); font-variant-numeric: tabular-nums; }
diff --git a/apps/desktop/src/card/model.ts b/apps/desktop/src/card/model.ts
index 6b59c49..79ca0ac 100644
--- a/apps/desktop/src/card/model.ts
+++ b/apps/desktop/src/card/model.ts
@@ -23,6 +23,8 @@ export interface CardSnapshot {
   health: CardHealth[];
   /** Apps with something on the card, for the quick actions (console links). */
   links: CardApp[];
+  /** This app's version and update channel (Settings > Updates), shown at the card's foot. */
+  build?: { version: string; channel: string } | null;
 }
 
 export interface CardInput {
@@ -48,7 +50,7 @@ export function healthAlerts(h: HealthSnapshot | null | undefined): ('crash' | '
   return out;
 }
 
-export function cardSnapshot(apps: CardInput[], o: { at: string | null; busy: boolean; muted: boolean; now?: number }): CardSnapshot {
+export function cardSnapshot(apps: CardInput[], o: { at: string | null; busy: boolean; muted: boolean; now?: number; build?: { version: string; channel: string } | null }): CardSnapshot {
   const now = o.now ?? Date.now();
   const rejections: CardRejection[] = [], releases: CardRelease[] = [], low: CardLowReview[] = [], health: CardHealth[] = [];
   const touched = new Set<string>();
@@ -82,5 +84,6 @@ export function cardSnapshot(apps: CardInput[], o: { at: string | null; busy: bo
     rejections: rejections.slice(0, MAX_ROWS), releases: releases.slice(0, MAX_ROWS),
     reviews: { recent, low: low.slice(0, MAX_LOW) }, health: health.slice(0, MAX_ROWS),
     links: apps.filter(a => touched.has(a.key)).map(a => ({ key: a.key, name: a.name, hue: a.hue, asc: a.asc ?? null, play: a.play ?? null })),
+    build: o.build ?? null,
   };
 }
diff --git a/apps/desktop/src/card/text.ts b/apps/desktop/src/card/text.ts
index 5c163ab..3a700fc 100644
--- a/apps/desktop/src/card/text.ts
+++ b/apps/desktop/src/card/text.ts
@@ -28,6 +28,10 @@ export const en = {
   refresh: 'Refresh',
   refreshing: 'Reading…',
   openMain: 'Open storebound',
+  build: 'storebound {version} · {channel} channel',
+  chStable: 'stable',
+  chDev: 'dev',
+  chBeta: 'beta',
   more: 'More',
   mute: 'Mute notifications for 1 hour',
   unmute: 'Unmute notifications',
@@ -70,6 +74,10 @@ export const tr: Record<CardKey, string> = {
   refresh: 'Yenile',
   refreshing: 'Okunuyor…',
   openMain: 'storebound\'u aç',
+  build: 'storebound {version} · {channel} kanalı',
+  chStable: 'kararlı',
+  chDev: 'geliştirme',
+  chBeta: 'beta',
   more: 'Diğer',
   mute: 'Bildirimleri 1 saat sustur',
   unmute: 'Bildirimleri aç',
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index c504156..8424ef3 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -974,7 +974,9 @@ export const en = {
   'set.channel': 'Channel',
   'set.stable': 'Stable',
   'set.beta': 'Beta',
-  'set.updatesText': 'Updates come from storebound.dev and are signed; the app checks the signature before it replaces anything, and installs only when you press Install. Nothing is checked in the background.',
+  'set.dev': 'Dev (every change)',
+  'set.devToStable': 'This is the dev build {version}: it stays until a stable release is newer (no downgrade).',
+  'set.updatesText': 'Updates come from storebound.dev and are signed; the app checks the signature before it replaces anything. It looks for a newer version of the chosen channel at start, every 15 minutes and after sleep, and installs it in the background (not while you work in this window). Stable follows the npm releases; Dev gets every change on main.',
   'set.updateCheck': 'Check for updates',
   'set.updateChecking': 'Checking…',
   'set.updateNone': 'storebound {version} is the newest version on the {channel} channel.',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 15c2593..935eac8 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -976,7 +976,9 @@ export const tr: Record<keyof typeof en, string> = {
   'set.channel': 'Kanal',
   'set.stable': 'Kararlı',
   'set.beta': 'Beta',
-  'set.updatesText': 'Güncellemeler storebound.dev\'den imzalı gelir; uygulama bir şeyi değiştirmeden önce imzayı denetler ve yalnızca siz Yükle\'ye bastığınızda yükler. Arka planda denetim yapılmaz.',
+  'set.dev': 'Geliştirme (her değişiklik)',
+  'set.devToStable': 'Bu, geliştirme sürümü {version}: daha yeni bir kararlı sürüm çıkana kadar kalır (eski sürüme dönülmez).',
+  'set.updatesText': 'Güncellemeler storebound.dev\'den imzalı gelir; uygulama bir şeyi değiştirmeden önce imzayı denetler. Seçili kanalda daha yeni bir sürümü açılışta, 15 dakikada bir ve uykudan sonra arar, arka planda yükler (siz bu pencerede çalışırken değil). Kararlı, npm sürümlerini izler; Geliştirme, main\'deki her değişikliği alır.',
   'set.updateCheck': 'Güncellemeleri denetle',
   'set.updateChecking': 'Denetleniyor…',
   'set.updateNone': 'storebound {version}, {channel} kanalındaki en yeni sürüm.',
diff --git a/apps/desktop/src/lib/normalize.ts b/apps/desktop/src/lib/normalize.ts
index 8b584de..bab3173 100644
--- a/apps/desktop/src/lib/normalize.ts
+++ b/apps/desktop/src/lib/normalize.ts
@@ -65,7 +65,7 @@ export function normalizeSettings(v: unknown): Settings {
       lowReviews: pick(n.lowReviews, d.notify.lowReviews, isBool), crash: pick(n.crash, d.notify.crash, isBool),
       quietHours: { enabled: pick(q.enabled, d.notify.quietHours.enabled, isBool), from: pick(q.from, d.notify.quietHours.from, isHm), to: pick(q.to, d.notify.quietHours.to, isHm) },
     },
-    channel: v.channel === 'beta' ? 'beta' : 'stable',
+    channel: v.channel === 'dev' || v.channel === 'beta' ? v.channel : 'stable',
   };
 }
 
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
index 599c9af..e5ca1ab 100644
--- a/apps/desktop/src/screens/Settings.tsx
+++ b/apps/desktop/src/screens/Settings.tsx
@@ -257,7 +257,8 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
           <Section id="set-updates" title={t('set.updates')} icon="download" className="set-card">
             <div className="form">
               <div className="field"><span className="legend">{t('set.channel')}</span>
-                <Seg value={s.channel} label={t('set.channel')} onChange={channel => set(x => ({ ...x, channel }))} options={[['stable', t('set.stable')], ['beta', t('set.beta')]]} /></div>
+                <Seg value={s.channel} label={t('set.channel')} onChange={channel => set(x => ({ ...x, channel }))} options={[['stable', t('set.stable')], ['dev', t('set.dev')]]} /></div>
+              {s.channel === 'stable' && /-dev\./.test(d.info?.version ?? '') && <p className="small muted">{t('set.devToStable', { version: d.info!.version })}</p>}
               <Updates />
               <p className="small muted">{t('set.updatesText')}</p>
             </div>
@@ -279,7 +280,7 @@ export function Settings({ onTheme: _onTheme, section }: { onTheme: () => void;
   );
 }
 
-/** Settings > Updates: checks on click only; installs after the host's native dialog (the signature is checked there). */
+/** Settings > Updates: Check asks the channel now; Install runs after the host's native dialog (the signature is checked there). The host also checks and installs in the background (lib.rs auto_update). */
 function Updates() {
   const [info, setInfo] = useState<UpdateInfo | null>(null);
   const [busy, setBusy] = useState<'check' | 'install' | null>(null);
@@ -294,7 +295,7 @@ function Updates() {
     setBusy('install'); setError(null);
     try { await api.updateInstall(version); } catch (e) { setError(errorText(e)); } finally { setBusy(null); setGot(null); }
   };
-  const channel = info ? t(info.channel === 'beta' ? 'set.beta' : 'set.stable') : '';
+  const channel = info ? t(info.channel === 'beta' ? 'set.beta' : info.channel === 'dev' ? 'set.dev' : 'set.stable') : '';
   return (
     <div className="stack" style={{ gap: 8 }}>
       {error && <Notice tone="bad">{error}</Notice>}
diff --git a/docs/desktop-release.md b/docs/desktop-release.md
index 0e99d13..1e17e7e 100644
--- a/docs/desktop-release.md
+++ b/docs/desktop-release.md
@@ -380,6 +380,34 @@ candidate on a tag (Jenkins still publishes site/, and `publish` storebound.dev/
 4. **Windows code signing (later).** Buy a code-signing certificate, then sign the installer before `add` and pass
    `--code-signed`.
 
+## Dev channel (every push to main)
+
+Installs set to **Dev** in Settings > Updates follow `https://storebound.dev/desktop/dev/latest.json`; everything else
+stays on the stable channel (`latest.json`, the npm releases).
+
+- **Version.** `bun tools/desktop-dev.ts stamp`: `<next patch>-dev.<UTC yyyymmddHHMMSS of the commit>`, e.g.
+  `0.8.48-dev.20261023120000` while 0.8.47 is current. semver puts it above 0.8.47 and below 0.8.48, so the next
+  stable release passes every dev build of it, and later commits sort higher. The stamp refuses a version that is not
+  above the live dev `latest.json`. `set` writes it into every version copy of the CI workspace only (never committed).
+- **CI** (`.forgejo/workflows/ci.yml`). After the release-candidate build, the `linux` and `windows` jobs build the
+  same commit again with the dev version (AppImage + deb, NSIS), self-test and privacy-scan them (failures never touch
+  the candidate). The `dev` job attaches them to a Forgejo **draft** `dev-<version>` (no git tag), deletes all but
+  the newest 5 dev drafts, and waits up to 20 minutes for the VDS to publish it. No macOS dev build: Developer ID
+  signing needs the Mac's GUI session.
+- **VDS.** `tools/vds/storebound-desktop-dev` (root, `/usr/local/sbin`, run every 2 minutes by
+  `storebound-desktop-dev.timer`) reads the drafts with a read-only Forgejo token (`/root/.storebound-keys/forgejo-read-token`),
+  takes the newest complete one above the live dev version, checks its SHA256SUMS, signs every file with the updater key
+  that lives there, writes latest.json and runs `storebound-desktop-publish <version> dev` (a dev version can only go
+  to the dev channel and the dev channel takes only dev versions). It keeps the newest 5 dev versions in `dl/`.
+  Logs: `journalctl -u storebound-desktop-dev`.
+  Install: copy the script to `/usr/local/sbin/` (755), the `.service` and `.timer` to `/etc/systemd/system/`, then
+  `systemctl daemon-reload && systemctl enable --now storebound-desktop-dev.timer`.
+- **App.** The background updater (src-tauri `lib.rs` `auto_update`, pure rules in `updates.rs`) asks the chosen
+  channel at start, every 15 minutes, after a resume from sleep and right after a channel switch; it installs only a
+  strictly newer version (no downgrade: a dev install switched back to stable stays until a stable release passes it),
+  waits while the main window is visible and focused (at most 4 checks in a row), installs quietly on Windows and
+  restarts. Each step is an `auto-update (...)` line in `host.log`. Autostart at logon is rewritten on every start.
+
 ## Hosting on storebound.dev
 
 | URL | served from | how it gets there |
diff --git a/tests/desktop-dev.test.ts b/tests/desktop-dev.test.ts
new file mode 100644
index 0000000..94e5533
--- /dev/null
+++ b/tests/desktop-dev.test.ts
@@ -0,0 +1,39 @@
+import { describe, expect, test } from 'bun:test';
+import { compare, devVersion, guardProblem, nextPatch, pruneDev, utcStamp } from '../tools/desktop-dev';
+
+describe('desktop dev channel', () => {
+  test('stamps the next patch with the UTC commit time', () => {
+    expect(nextPatch('0.8.47')).toBe('0.8.48');
+    expect(nextPatch('0.8.48-rc.1')).toBe('0.8.48');
+    expect(utcStamp(new Date('2026-10-23T09:05:07+03:00'))).toBe('20261023060507');
+    expect(devVersion('0.8.47', new Date('2026-10-23T06:05:07Z'))).toBe('0.8.48-dev.20261023060507');
+  });
+
+  test('dev builds sort above the current stable, below the next stable, monotonic in time', () => {
+    const a = devVersion('0.8.47', new Date('2026-10-23T06:05:07Z'));
+    const b = devVersion('0.8.47', new Date('2026-10-23T06:05:08Z'));
+    expect(compare(a, '0.8.47')).toBe(1);
+    expect(compare('0.8.48', a)).toBe(1);
+    expect(compare(b, a)).toBe(1);
+    expect(compare(a, a)).toBe(0);
+    // after 0.8.48 ships, its successor's dev builds pass it
+    expect(compare(devVersion('0.8.48', new Date('2026-10-24T00:00:00Z')), '0.8.48')).toBe(1);
+    expect(compare('0.8.48-dev.10', '0.8.48-dev.9')).toBe(1);
+    expect(compare('0.10.0', '0.9.9')).toBe(1);
+  });
+
+  test('the publish guard refuses a version not above the live dev build', () => {
+    expect(guardProblem('0.8.48-dev.20261023060507', null)).toBeNull();
+    expect(guardProblem('0.8.48-dev.20261023060508', '0.8.48-dev.20261023060507')).toBeNull();
+    expect(guardProblem('0.8.48-dev.20261023060507', '0.8.48-dev.20261023060507')).toContain('refused');
+    expect(guardProblem('0.8.48-dev.20261023060506', '0.8.48-dev.20261023060507')).toContain('refused');
+    expect(guardProblem('0.8.48', null)).toContain('not a dev version');
+  });
+
+  test('prunes dev drafts to the newest 5, never other releases', () => {
+    const rel = (t: string) => ({ tag_name: t });
+    const dev = [1, 2, 3, 4, 5, 6, 7].map(i => rel(`dev-0.8.48-dev.2026102300000${i}`));
+    const out = pruneDev([rel('v0.8.47'), rel('rc-' + 'a'.repeat(40)), ...dev.reverse()]);
+    expect(out.map(r => r.tag_name)).toEqual(['dev-0.8.48-dev.20261023000002', 'dev-0.8.48-dev.20261023000001']);
+  });
+});
diff --git a/tools/desktop-dev.ts b/tools/desktop-dev.ts
new file mode 100644
index 0000000..29f8a30
--- /dev/null
+++ b/tools/desktop-dev.ts
@@ -0,0 +1,123 @@
+#!/usr/bin/env bun
+// Dev update channel of the desktop app (docs/desktop-release.md, "Dev channel"). Every push to main builds Windows
+// and Linux bundles stamped `<next patch>-dev.<UTC yyyymmddHHMMSS of the commit>` (ci.yml, linux / windows jobs), the
+// `dev` job attaches them to a Forgejo draft `dev-<version>` (no git tag), and the VDS (tools/vds/storebound-desktop-dev,
+// a root timer) signs them with the updater key that lives there and publishes storebound.dev/desktop/dev/latest.json.
+// Installs set to the dev channel (Settings > Updates) follow it; everyone else stays on stable (the npm releases).
+//   bun tools/desktop-dev.ts stamp                 print the dev version of HEAD; refuses one not above the live dev
+//   bun tools/desktop-dev.ts set                   stamp, then write it into every version copy (CI workspace only)
+//   bun tools/desktop-dev.ts record --dir <d> [--yes]   draft dev-<version> with the files of <d>, prune to the newest 5
+//   bun tools/desktop-dev.ts wait <version> [--minutes 15]   until storebound.dev serves it on the dev channel
+import { readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { setVersion, versions } from './desktop-version';
+
+export const DEV_URL = 'https://storebound.dev/desktop/dev/latest.json';
+export const KEEP = 5;
+export const DEV_TAG = /^dev-(\d+\.\d+\.\d+-dev\.\d{14})$/;
+
+/** The next patch of a release version: dev builds of 0.8.47's successor are 0.8.48-dev.*, below 0.8.48. */
+export function nextPatch(v: string): string {
+  const m = /^(\d+)\.(\d+)\.(\d+)(?:-.*)?$/.exec(v);
+  if (!m) throw new Error(`not a version: ${v}`);
+  // a prerelease base (0.8.48-rc.1) already stands below 0.8.48: its dev builds keep that core
+  return v.includes('-') ? `${m[1]}.${m[2]}.${m[3]}` : `${m[1]}.${m[2]}.${Number(m[3]) + 1}`;
+}
+
+/** UTC yyyymmddHHMMSS. */
+export const utcStamp = (d: Date): string => d.toISOString().replace(/[-:T]/g, '').slice(0, 14);
+
+export function devVersion(base: string, at: Date): string {
+  return `${nextPatch(base)}-dev.${utcStamp(at)}`;
+}
+
+/** semver 2.0 precedence: -1, 0, 1 (numeric identifiers as numbers, a release above its prereleases). */
+export function compare(a: string, b: string): number {
+  const p = (v: string) => { const [core, ...pre] = v.split('+')[0]!.split('-'); return { n: core!.split('.').map(Number), pre: pre.length ? pre.join('-').split('.') : [] }; };
+  const x = p(a), y = p(b);
+  for (let i = 0; i < 3; i++) if (x.n[i] !== y.n[i]) return x.n[i]! > y.n[i]! ? 1 : -1;
+  if (!x.pre.length || !y.pre.length) return x.pre.length === y.pre.length ? 0 : x.pre.length ? -1 : 1;
+  for (let i = 0; i < Math.min(x.pre.length, y.pre.length); i++) {
+    const s = x.pre[i]!, t = y.pre[i]!;
+    if (s === t) continue;
+    const ns = /^\d+$/.test(s), nt = /^\d+$/.test(t);
+    if (ns && nt) return Number(s) > Number(t) ? 1 : -1;
+    if (ns !== nt) return ns ? -1 : 1;
+    return s > t ? 1 : -1;
+  }
+  return Math.sign(x.pre.length - y.pre.length);
+}
+
+/** The publish guard: a dev version goes out only above the live dev latest.json (null: nothing published yet). */
+export function guardProblem(next: string, live: string | null): string | null {
+  if (!/^\d+\.\d+\.\d+-dev\.\d{14}$/.test(next)) return `${next} is not a dev version`;
+  if (live && compare(next, live) <= 0) return `${next} is not above the live dev build ${live}: refused (the updater installs only a newer version)`;
+  return null;
+}
+
+/** Dev drafts to delete: all but the newest `keep` by version (other releases are never touched). */
+export function pruneDev<T extends { tag_name: string }>(releases: T[], keep = KEEP): T[] {
+  const dev = releases.filter(r => DEV_TAG.test(r.tag_name)).sort((a, b) => compare(b.tag_name.slice(4), a.tag_name.slice(4)));
+  return dev.slice(keep);
+}
+
+async function liveDev(): Promise<string | null> {
+  const r = await fetch(`${DEV_URL}?t=${Date.now()}`, { signal: AbortSignal.timeout(20_000) }).catch(() => null);
+  if (!r || r.status === 404) return null;
+  if (!r.ok) throw new Error(`${DEV_URL}: HTTP ${r.status}`);
+  return ((await r.json()) as { version?: string }).version ?? null;
+}
+
+function commitDate(): Date {
+  const r = Bun.spawnSync(['git', 'log', '-1', '--format=%cI'], { stdout: 'pipe' });
+  const d = new Date(r.stdout.toString().trim());
+  if (r.exitCode !== 0 || Number.isNaN(d.getTime())) throw new Error('git log: no commit date');
+  return d;
+}
+
+async function stamp(): Promise<string> {
+  const { version, drift } = versions();
+  if (!version || drift.length) throw new Error('desktop version drift (bun tools/desktop-version.ts)');
+  const v = devVersion(version, commitDate());
+  const problem = guardProblem(v, await liveDev());
+  if (problem) throw new Error(problem);
+  return v;
+}
+
+const arg = (argv: string[], n: string) => { const i = argv.indexOf(`--${n}`); return i >= 0 ? argv[i + 1] : undefined; };
+
+if (import.meta.main) {
+  const argv = process.argv.slice(2);
+  try {
+    if (argv[0] === 'stamp') console.log(await stamp());
+    else if (argv[0] === 'set') { const v = await stamp(); setVersion(v); console.log(v); }
+    else if (argv[0] === 'record') {
+      const { upsert, listReleases, api } = await import('./forgejo-release');
+      const dir = arg(argv, 'dir') ?? 'dev';
+      const files = readdirSync(dir).filter(f => /\.(exe|AppImage|deb)$/.test(f)).map(f => join(dir, f));
+      const vs = [...new Set(files.map(f => /_(\d+\.\d+\.\d+-dev\.\d{14})_/.exec(f)?.[1]))];
+      if (vs.length !== 1 || !vs[0]) throw new Error(`${dir}: expected the files of one dev version, got ${vs.join(', ') || 'none'}`);
+      const v = vs[0];
+      for (const kind of [/_x64-setup\.exe$/, /_amd64\.AppImage$/, /_amd64\.deb$/]) if (!files.some(f => kind.test(f))) throw new Error(`${dir}: no ${kind.source} of ${v}`);
+      const problem = guardProblem(v, await liveDev());
+      if (problem) throw new Error(problem);
+      const yes = argv.includes('--yes');
+      await upsert({ tag: `dev-${v}`, title: `dev ${v}`, notes: `Dev build of ${process.env.SHA ?? 'HEAD'} (signed and published by the VDS to ${DEV_URL}).`, draft: true, prerelease: true, files, yes });
+      const old = pruneDev(await listReleases());
+      for (const r of old) {
+        console.log(`${yes ? 'delete' : 'would delete'} draft ${r.tag_name}`);
+        if (yes) await api('DELETE', `/releases/${(r as { id: number }).id}`);
+      }
+    } else if (argv[0] === 'wait') {
+      const v = argv[1] ?? ''; const minutes = Number(arg(argv, 'minutes') ?? 15);
+      const t0 = Date.now();
+      for (;;) {
+        const live = await liveDev().catch(() => null);
+        if (live && compare(live, v) >= 0) { console.log(`live on the dev channel: ${live}`); break; }
+        if (Date.now() - t0 > minutes * 60_000) throw new Error(`${v} not on ${DEV_URL} after ${minutes} min (live: ${live ?? 'none'}); see journalctl -u storebound-desktop-dev on the VDS`);
+        console.log(`waiting for the VDS to publish ${v} (live: ${live ?? 'none'}, ${Math.round((Date.now() - t0) / 1000)} s)`);
+        await Bun.sleep(20_000);
+      }
+    } else { console.log('usage: stamp | set | record --dir <d> [--yes] | wait <version> [--minutes n]'); process.exit(2); }
+  } catch (e) { console.error(`desktop-dev: ${(e as Error).message}`); process.exit(1); }
+}
diff --git a/tools/vds/storebound-desktop-dev b/tools/vds/storebound-desktop-dev
new file mode 100644
index 0000000..6b8cbbb
--- /dev/null
+++ b/tools/vds/storebound-desktop-dev
@@ -0,0 +1,171 @@
+#!/usr/bin/env python3
+# Root-owned dev channel publisher for storebound desktop (install as /usr/local/sbin/storebound-desktop-dev, root:root
+# 755, run by storebound-desktop-dev.timer every 2 minutes; see docs/desktop-release.md, "Dev channel").
+#
+# Every push to main attaches its dev bundles (Windows NSIS setup, Linux AppImage + deb, SHA256SUMS) to a Forgejo
+# draft release `dev-<x.y.z-dev.yyyymmddHHMMSS>` (ci.yml `dev` job, tools/desktop-dev.ts). This script, with a
+# read-only Forgejo token (/root/.storebound-keys/forgejo-read-token):
+#   1. takes the newest complete dev draft whose version is above the live dev/latest.json (never a lower one),
+#   2. downloads its files into /var/lib/storebound-desktop/incoming/<version>/ and checks them against SHA256SUMS,
+#   3. signs each with the updater key (/root/.storebound-keys/updater.key; it never leaves this host),
+#   4. writes latest.json + SHA256SUMS and runs storebound-desktop-publish <version> dev (latest.json last),
+#   5. keeps the newest 5 dev versions in /var/www/storebound-desktop/dl/ (and whatever dev/latest.json names).
+# Nothing it downloads is executed. One run at a time (flock).
+import fcntl, hashlib, json, os, re, shutil, subprocess, sys, urllib.request
+from datetime import datetime, timezone
+
+FORGEJO = "https://git.crt.fyi"
+REPO = "CRT/storebound"
+KEYS = "/root/.storebound-keys"
+TOKEN = f"{KEYS}/forgejo-read-token"
+KEY = f"{KEYS}/updater.key"
+KEY_PASSWORD = f"{KEYS}/updater.key.password"
+TAURI_CLI = "@tauri-apps/cli@2.12.1"
+INCOMING = "/var/lib/storebound-desktop/incoming"
+ROOT = "/var/www/storebound-desktop"
+SITE = "https://storebound.dev/desktop"
+KEEP = 5
+DEV = re.compile(r"^(\d+)\.(\d+)\.(\d+)-dev\.(\d{14})$")
+SAFE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]*$")
+
+
+def log(msg):
+    print(f"storebound-desktop-dev: {msg}", flush=True)
+
+
+def key(v):
+    m = DEV.match(v)
+    return tuple(int(x) for x in m.groups()) if m else None
+
+
+def get(url, binary=False):
+    req = urllib.request.Request(url, headers={"Authorization": f"token {open(TOKEN).read().strip()}"})
+    with urllib.request.urlopen(req, timeout=60) as r:
+        return r.read() if binary else json.loads(r.read())
+
+
+def live_version():
+    try:
+        return json.load(open(f"{ROOT}/dev/latest.json")).get("version")
+    except FileNotFoundError:
+        return None
+
+
+def kind(name, v):
+    if name == f"storebound_{v}_x64-setup.exe":
+        return "nsis", f"storebound_{v}_x64-setup-unsigned.exe"
+    if name == f"storebound_{v}_amd64.AppImage":
+        return "appimage", name
+    if name == f"storebound_{v}_amd64.deb":
+        return "deb", name
+    return None, None
+
+
+def sign(path):
+    pw = open(KEY_PASSWORD).read().strip() if os.path.exists(KEY_PASSWORD) else ""
+    env = dict(os.environ, TAURI_SIGNING_PRIVATE_KEY_PASSWORD=pw)
+    if os.path.exists(path + ".sig"):
+        os.remove(path + ".sig")
+    subprocess.run(["timeout", "300", "bunx", TAURI_CLI, "signer", "sign", "-f", KEY, path], env=env, stdin=subprocess.DEVNULL,
+                   stdout=subprocess.DEVNULL, check=True)
+    s = open(path + ".sig").read().strip()
+    os.remove(path + ".sig")
+    return s
+
+
+def sha256(path):
+    h = hashlib.sha256()
+    with open(path, "rb") as f:
+        for b in iter(lambda: f.read(1 << 20), b""):
+            h.update(b)
+    return h.hexdigest()
+
+
+def publish(rel, v):
+    assets = {a["name"]: a for a in rel["assets"]}
+    sums = {}
+    for line in get(f"{FORGEJO}/attachments/{assets['SHA256SUMS']['uuid']}", binary=True).decode().splitlines():
+        m = re.match(r"^([0-9a-f]{64})\s+\*?(\S+)$", line.strip())
+        if m:
+            sums[m.group(2)] = m.group(1)
+    files = [(n,) + kind(n, v) for n in assets if kind(n, v)[0]]
+    if sorted(k for _, k, _ in files) != ["appimage", "deb", "nsis"]:
+        log(f"{v}: draft incomplete ({', '.join(assets)}), waiting")
+        return False
+    inc = f"{INCOMING}/{v}"
+    shutil.rmtree(inc, ignore_errors=True)
+    os.makedirs(inc, mode=0o755)
+    manifest = {"version": v, "notes": f"storebound desktop {v} (dev channel: every push to main)",
+                "pub_date": datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ"), "platforms": {}, "downloads": {}}
+    out_sums = []
+    for name, k, dest in files:
+        assert SAFE.match(dest) and name in sums, name
+        p = f"{inc}/{dest}"
+        log(f"{v}: fetching {name}")
+        req = urllib.request.Request(f"{FORGEJO}/attachments/{assets[name]['uuid']}", headers={"Authorization": f"token {open(TOKEN).read().strip()}"})
+        with urllib.request.urlopen(req, timeout=900) as r, open(p, "wb") as f:
+            shutil.copyfileobj(r, f, 1 << 20)
+        h = sha256(p)
+        if h != sums[name]:
+            raise SystemExit(f"{name}: SHA-256 differs from the draft's SHA256SUMS")
+        sig = sign(p)
+        url = f"{SITE}/dl/{v}/{dest}"
+        d = {"file": dest, "url": url, "sha256": h, "size": os.path.getsize(p), "signature": sig, "codeSigned": False}
+        if k == "nsis":
+            manifest["downloads"]["windows-x86_64-nsis"] = d
+            manifest["platforms"]["windows-x86_64"] = {"signature": sig, "url": url}
+        elif k == "appimage":
+            manifest["downloads"]["linux-x86_64-appimage"] = d
+            manifest["platforms"]["linux-x86_64"] = {"signature": sig, "url": url}
+        else:
+            manifest["downloads"]["linux-x86_64-deb"] = d
+        out_sums.append(f"{h}  {dest}")
+        log(f"{v}: {dest} checked and signed")
+    with open(f"{inc}/latest.json", "w") as f:
+        json.dump(manifest, f, indent=2)
+    out_sums.append(f"{sha256(inc + '/latest.json')}  latest.json")
+    with open(f"{inc}/SHA256SUMS", "w") as f:
+        f.write("\n".join(sorted(out_sums, key=lambda l: l.split()[1])) + "\n")
+    for n in os.listdir(inc):
+        os.chmod(f"{inc}/{n}", 0o644)
+    subprocess.run(["/usr/local/sbin/storebound-desktop-publish", v, "dev"], check=True)
+    return True
+
+
+def prune():
+    live = live_version()
+    dl = f"{ROOT}/dl"
+    dev = sorted((d for d in os.listdir(dl) if key(d)), key=key, reverse=True)
+    for d in dev[KEEP:]:
+        if d != live:
+            shutil.rmtree(f"{dl}/{d}")
+            log(f"pruned dl/{d}")
+
+
+def main():
+    os.makedirs(INCOMING, exist_ok=True)
+    lock = open(f"{INCOMING}/.dev.lock", "w")
+    try:
+        fcntl.flock(lock, fcntl.LOCK_EX | fcntl.LOCK_NB)
+    except BlockingIOError:
+        return
+    rels = get(f"{FORGEJO}/api/v1/repos/{REPO}/releases?draft=true&limit=50")
+    cands = [(r, r["tag_name"][4:]) for r in rels if r["tag_name"].startswith("dev-") and key(r["tag_name"][4:])]
+    if not cands:
+        return
+    rel, v = max(cands, key=lambda c: key(c[1]))
+    live = live_version()
+    if live and key(live) and key(v) <= key(live):
+        prune()
+        return
+    log(f"publishing {v} (live: {live or 'none'})")
+    if publish(rel, v):
+        prune()
+
+
+if __name__ == "__main__":
+    try:
+        main()
+    except subprocess.CalledProcessError as e:
+        log(f"failed: {e}")
+        sys.exit(1)
diff --git a/tools/vds/storebound-desktop-dev.service b/tools/vds/storebound-desktop-dev.service
new file mode 100644
index 0000000..7867584
--- /dev/null
+++ b/tools/vds/storebound-desktop-dev.service
@@ -0,0 +1,11 @@
+# /etc/systemd/system/storebound-desktop-dev.service (docs/desktop-release.md, "Dev channel")
+[Unit]
+Description=storebound desktop dev channel: sign and publish the newest dev build
+After=network-online.target
+
+[Service]
+Type=oneshot
+Environment=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/usr/local/sbin/storebound-desktop-dev
+TimeoutStartSec=30min
+Nice=10
diff --git a/tools/vds/storebound-desktop-dev.timer b/tools/vds/storebound-desktop-dev.timer
new file mode 100644
index 0000000..0b60e01
--- /dev/null
+++ b/tools/vds/storebound-desktop-dev.timer
@@ -0,0 +1,10 @@
+# /etc/systemd/system/storebound-desktop-dev.timer
+[Unit]
+Description=storebound desktop dev channel every 2 minutes
+
+[Timer]
+OnBootSec=2min
+OnUnitInactiveSec=2min
+
+[Install]
+WantedBy=timers.target
diff --git a/tools/vds/storebound-desktop-publish b/tools/vds/storebound-desktop-publish
index 277a8e5..16c8303 100755
--- a/tools/vds/storebound-desktop-publish
+++ b/tools/vds/storebound-desktop-publish
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # Root-owned publish step for storebound desktop releases (install as /usr/local/sbin/storebound-desktop-publish,
 # root:root 755; see docs/desktop-release.md). tools/desktop-release.ts publish uploads one version folder to
-# /var/lib/storebound-desktop/incoming/<version>/ and then runs:  storebound-desktop-publish <version> [stable|beta|rehearsal]
+# /var/lib/storebound-desktop/incoming/<version>/ and then runs:  storebound-desktop-publish <version> [stable|beta|rehearsal|dev]
 # (rehearsal: tools/release.ts --rehearsal, a throwaway prerelease at /desktop/rehearsal/latest.json that no app reads)
 #
 # It checks the upload (regular files with plain names only, SHA256SUMS, latest.json of that version whose every URL
@@ -21,10 +21,12 @@ ROOT=/var/www/storebound-desktop
 SITE=https://storebound.dev/desktop
 
 die() { echo "storebound-desktop-publish: $*" >&2; exit 1; }
-[[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.]+)?$ ]] || die "usage: storebound-desktop-publish <version> [stable|beta|rehearsal]"
-[[ "$CHANNEL" == stable || "$CHANNEL" == beta || "$CHANNEL" == rehearsal ]] || die "channel: stable, beta or rehearsal"
+[[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.]+)?$ ]] || die "usage: storebound-desktop-publish <version> [stable|beta|rehearsal|dev]"
+[[ "$CHANNEL" == stable || "$CHANNEL" == beta || "$CHANNEL" == rehearsal || "$CHANNEL" == dev ]] || die "channel: stable, beta, rehearsal or dev"
 # a stable or beta version is never a rehearsal, and a rehearsal never reaches stable or beta
 if [[ "$VERSION" == *-rehearsal.* ]]; then [ "$CHANNEL" = rehearsal ] || die "a rehearsal version goes to the rehearsal channel only"; else [ "$CHANNEL" != rehearsal ] || die "the rehearsal channel takes rehearsal versions only"; fi
+# a dev build (storebound-desktop-dev, every push to main) goes to the dev channel only, and the dev channel takes only those
+if [[ "$VERSION" =~ -dev\.[0-9]{14}$ ]]; then [ "$CHANNEL" = dev ] || die "a dev version goes to the dev channel only"; else [ "$CHANNEL" != dev ] || die "the dev channel takes dev versions only"; fi
 IN="$INCOMING/$VERSION"
 DL="$ROOT/dl/$VERSION"
 [ -d "$IN" ] && [ ! -L "$IN" ] || die "nothing uploaded at $IN"
@@ -54,7 +56,7 @@ for e in entries:
     assert e.get("signature"), url
 PY
 
-install -d -m 755 "$ROOT" "$ROOT/dl" "$ROOT/beta" "$ROOT/rehearsal"
+install -d -m 755 "$ROOT" "$ROOT/dl" "$ROOT/beta" "$ROOT/rehearsal" "$ROOT/dev"
 if [ ! -e "$DL" ]; then
   TMP="$(mktemp -d "$ROOT/dl/.tmp-$VERSION.XXXXXX")"
   for f in "$IN"/*; do n="$(basename "$f")"; [ "$n" = latest.json ] || install -m 644 "$f" "$TMP/$n"; done

From 9947ea163941cc9be8801adea47039fb6b589031 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 23:17:05 +0800
Subject: [PATCH 128/255] dev channel VDS publisher: send a User-Agent
 (Cloudflare refuses urllib's default with 403)

---
 tools/vds/storebound-desktop-dev | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/tools/vds/storebound-desktop-dev b/tools/vds/storebound-desktop-dev
index 6b8cbbb..463eb7f 100644
--- a/tools/vds/storebound-desktop-dev
+++ b/tools/vds/storebound-desktop-dev
@@ -38,8 +38,13 @@ def key(v):
     return tuple(int(x) for x in m.groups()) if m else None
 
 
+def headers():
+    # Cloudflare refuses urllib's default User-Agent (403)
+    return {"Authorization": f"token {open(TOKEN).read().strip()}", "User-Agent": "storebound-desktop-dev"}
+
+
 def get(url, binary=False):
-    req = urllib.request.Request(url, headers={"Authorization": f"token {open(TOKEN).read().strip()}"})
+    req = urllib.request.Request(url, headers=headers())
     with urllib.request.urlopen(req, timeout=60) as r:
         return r.read() if binary else json.loads(r.read())
 
@@ -102,7 +107,7 @@ def publish(rel, v):
         assert SAFE.match(dest) and name in sums, name
         p = f"{inc}/{dest}"
         log(f"{v}: fetching {name}")
-        req = urllib.request.Request(f"{FORGEJO}/attachments/{assets[name]['uuid']}", headers={"Authorization": f"token {open(TOKEN).read().strip()}"})
+        req = urllib.request.Request(f"{FORGEJO}/attachments/{assets[name]['uuid']}", headers=headers())
         with urllib.request.urlopen(req, timeout=900) as r, open(p, "wb") as f:
             shutil.copyfileobj(r, f, 1 << 20)
         h = sha256(p)

From 29a9683ab7d5e39f8bdfc735188f24b01bccd9aa Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 23 Oct 2026 23:46:03 +0800
Subject: [PATCH 129/255] dev channel: Apache serves /desktop/dev/latest.json;
 the VDS publisher lists releases without the draft filter (it hid the dev
 drafts)

---
 tools/vds/apache-storebound-desktop.conf | 3 ++-
 tools/vds/storebound-desktop-dev         | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/tools/vds/apache-storebound-desktop.conf b/tools/vds/apache-storebound-desktop.conf
index 39371f7..ee4f92b 100644
--- a/tools/vds/apache-storebound-desktop.conf
+++ b/tools/vds/apache-storebound-desktop.conf
@@ -6,6 +6,7 @@
 Alias /desktop/latest.json /var/www/storebound-desktop/latest.json
 Alias /desktop/beta/latest.json /var/www/storebound-desktop/beta/latest.json
 Alias /desktop/rehearsal/latest.json /var/www/storebound-desktop/rehearsal/latest.json
+Alias /desktop/dev/latest.json /var/www/storebound-desktop/dev/latest.json
 Alias /desktop/dl/ /var/www/storebound-desktop/dl/
 <Directory /var/www/storebound-desktop>
   Options -Indexes -FollowSymLinks
@@ -16,7 +17,7 @@ Alias /desktop/dl/ /var/www/storebound-desktop/dl/
     Header set Content-Disposition "attachment"
   </FilesMatch>
 </Directory>
-<LocationMatch "^/desktop/((beta|rehearsal)/)?latest\.json$">
+<LocationMatch "^/desktop/((beta|rehearsal|dev)/)?latest\.json$">
   Header set Cache-Control "no-cache"
   Header set Access-Control-Allow-Origin "*"
 </LocationMatch>
diff --git a/tools/vds/storebound-desktop-dev b/tools/vds/storebound-desktop-dev
index 463eb7f..a0bedf0 100644
--- a/tools/vds/storebound-desktop-dev
+++ b/tools/vds/storebound-desktop-dev
@@ -154,7 +154,7 @@ def main():
         fcntl.flock(lock, fcntl.LOCK_EX | fcntl.LOCK_NB)
     except BlockingIOError:
         return
-    rels = get(f"{FORGEJO}/api/v1/repos/{REPO}/releases?draft=true&limit=50")
+    rels = get(f"{FORGEJO}/api/v1/repos/{REPO}/releases?limit=50")
     cands = [(r, r["tag_name"][4:]) for r in rels if r["tag_name"].startswith("dev-") and key(r["tag_name"][4:])]
     if not cands:
         return

From 1bb43fd4a0b8147d5e223fc25003c53172e09dd4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 11:56:07 +0800
Subject: [PATCH 130/255] play managed publishing: console plan/verify
 play-publish-changes, ready-to-publish items in play status, desktop hint

---
 CHANGELOG.md                               |  1 +
 apps/desktop/src/i18n/en.ts                |  2 ++
 apps/desktop/src/i18n/tr.ts                |  2 ++
 apps/desktop/src/screens/tabs/Releases.tsx | 16 ++++++++++
 cli/console/plan.ts                        |  6 ++++
 cli/console/verify.ts                      |  4 +++
 cli/lib/console-answers.ts                 |  2 +-
 cli/lib/console-plan.ts                    |  2 ++
 cli/lib/console-play-plans.ts              | 32 +++++++++++++++++++
 cli/lib/console-verify.ts                  | 18 +++++++++++
 cli/lib/play-publish.ts                    | 29 +++++++++++++++++
 cli/lib/train.ts                           |  2 +-
 cli/mcp-tools.ts                           |  2 +-
 cli/play/publish-ready.ts                  | 18 +++++++++++
 cli/play/status.ts                         |  4 ++-
 docs/pitfalls.md                           |  1 +
 skills/console-autofill/SKILL.md           |  2 +-
 skills/play-first-release/SKILL.md         |  3 ++
 skills/store-pitfalls/SKILL.md             | 11 +++++++
 tests/console-play-plans.test.ts           | 36 +++++++++++++++++++---
 20 files changed, 184 insertions(+), 9 deletions(-)
 create mode 100644 cli/lib/play-publish.ts
 create mode 100644 cli/play/publish-ready.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9f63eba..1ec495d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview.
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 8424ef3..3e3d6ba 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -154,6 +154,8 @@ export const en = {
   'phase.pageUnknown': "Couldn't check the store page",
   'phase.pageStale': "couldn't check the store page, as of {when}",
   'phase.reviewLive': 'In review (live: {version})',
+  'roll.publishReady': 'If the release is approved, publish it in Publishing overview ("Publish N changes"). The agent prepares it with `{cmd}`; the final press is for the owner.',
+  'roll.publishOpen': 'Open Publishing overview',
   'phase.reviewManaged': 'In review / ready to publish (managed publishing)',
   'phase.rejected': 'Rejected',
   'phase.testing': 'Testing',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 935eac8..8901d14 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -156,6 +156,8 @@ export const tr: Record<keyof typeof en, string> = {
   'phase.pageUnknown': 'Mağaza sayfası kontrol edilemedi',
   'phase.pageStale': 'mağaza sayfası kontrol edilemedi, {when} itibarıyla',
   'phase.reviewLive': 'İncelemede (yayında: {version})',
+  'roll.publishReady': 'Sürüm onaylandıysa Yayınlama özetinde yayınlayın ("Publish N changes"). Ajan `{cmd}` ile hazırlar; son basış sahibine aittir.',
+  'roll.publishOpen': 'Yayınlama özetini aç',
   'phase.reviewManaged': 'İncelemede / yayına hazır (yönetilen yayınlama)',
   'phase.rejected': 'Reddedildi',
   'phase.testing': 'Testte',
diff --git a/apps/desktop/src/screens/tabs/Releases.tsx b/apps/desktop/src/screens/tabs/Releases.tsx
index ee83644..fdf96ac 100644
--- a/apps/desktop/src/screens/tabs/Releases.tsx
+++ b/apps/desktop/src/screens/tabs/Releases.tsx
@@ -11,6 +11,7 @@ import { WriteButton } from '../../ui/WriteButton';
 import { type Key, t } from '../../i18n';
 import { ago, date, share } from '../../lib/format';
 import { type Lane, STAGES, type TestFlightStatus, trainLanes, versionHistory } from '../../lib/model';
+import { api } from '../../api';
 import { useData, useRead, useWrite } from '../../store';
 import { Icon, StoreGlyph } from '../../ui/icons';
 import { RolloutBar } from '../../ui/charts';
@@ -19,6 +20,8 @@ import { EmptyState, Section, StatusPill, tintStyle, useTint } from '../../ui/ds
 import { AppleSubmitCard, PlayProductionCard } from './Submit';
 import { useContextMenu } from '../../ui/ContextMenu';
 import { releaseMenu } from '../../ui/app-menu';
+import { consoleUrl } from '../../../../../cli/lib/console-links';
+import { PUBLISH_PLAN_HINT } from '../../../../../cli/lib/play-publish';
 import '../../styles/releases.css';
 
 const STAGE_KEY: Record<(typeof STAGES)[number], Key> = { build: 'stage.build', testing: 'stage.testing', review: 'stage.review', live: 'stage.live', rollout: 'stage.rollout' };
@@ -92,11 +95,24 @@ function LaneRow({ lane, version, st, app }: { lane: Lane; version: string; st:
           )}
         </div>
       )}
+      {r && r.store === 'android' && r.managed && r.phase === 'review' && <PublishHint st={st} />}
       {r && app.project && <RolloutControls app={app} r={r} />}
     </article>
   );
 }
 
+/** Managed publishing: the approved production release waits in Publishing overview ("Publish N changes"). */
+function PublishHint({ st }: { st: AppStatus }) {
+  const a = st.app?.platforms.android;
+  const url = consoleUrl('play.publishing', { playDeveloperId: a?.developerId, playAppId: a?.appId });
+  return (
+    <div className="roll-ctl" data-hint="publish-changes">
+      <span className="small muted">{t('roll.publishReady', { cmd: PUBLISH_PLAN_HINT })}</span>
+      <button className="btn btn-sm" onClick={() => { api.openExternal(url).catch(() => {}); }}><Icon name="external" />{t('roll.publishOpen')}</button>
+    </div>
+  );
+}
+
 const SHARES = [1, 2, 5, 10, 20, 50];
 
 /** Rollout controls of one store release: Play staged rollout share / halt / resume / complete, iOS phased release
diff --git a/cli/console/plan.ts b/cli/console/plan.ts
index 846645b..be96c28 100644
--- a/cli/console/plan.ts
+++ b/cli/console/plan.ts
@@ -47,6 +47,12 @@ export async function run(ctx: Ctx): Promise<void> {
     const { projectSignals } = await import('../lib/project-signals');
     ids.signals = projectSignals(detectProject(root));
   } catch { /* not scanned */ }
+  if (form === 'play-publish-changes' && args.has('lookup') && cfg.play?.packageName) {
+    try {
+      const { readyFromApi } = await import('../play/publish-ready');
+      ids.readyChanges = await readyFromApi(root, cfg);
+    } catch { /* not read: the plan says so */ }
+  }
   if (args.has('all') && form !== 'play-app-content') throw new Error('console plan: --all is for play-app-content (every App content card inline)');
   const plan = consolePlan(form, cfg, ids, { all: args.has('all') });
   if (json) return printJson(plan);
diff --git a/cli/console/verify.ts b/cli/console/verify.ts
index 09d0d45..5310af6 100644
--- a/cli/console/verify.ts
+++ b/cli/console/verify.ts
@@ -39,6 +39,10 @@ export async function run(ctx: Ctx): Promise<void> {
     const text = inline ?? await readText(from!);
     if (!text.trim()) throw new Error('console verify: the page text is empty');
     r = verifyText(form, config, text);
+  } else if (form === 'play-publish-changes') {
+    const { readyFromApi } = await import('../play/publish-ready');
+    const { verifyPublishChangesApi } = await import('../lib/console-verify');
+    r = verifyPublishChangesApi(await readyFromApi(root, config));
   } else if (form === 'apple-app-record' || form === 'apple-age-rating') {
     const bundleId = config.apple?.bundleId;
     if (!bundleId) throw new Error('console verify: apple.bundleId is not set');
diff --git a/cli/lib/console-answers.ts b/cli/lib/console-answers.ts
index a585937..8294abb 100644
--- a/cli/lib/console-answers.ts
+++ b/cli/lib/console-answers.ts
@@ -29,7 +29,7 @@ export type FormId = typeof FORM_IDS[number];
  *  API cannot set), the App content overview and its declarations without a fill form (cli/lib/console-play-plans.ts). */
 export const PLAN_ONLY_FORM_IDS = ['play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details',
   'play-advertising-id', 'play-government-apps', 'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release',
-  'play-games-services'] as const;
+  'play-games-services', 'play-publish-changes'] as const;
 export type PlanOnlyFormId = typeof PLAN_ONLY_FORM_IDS[number];
 /** Every form `console plan` / `console verify` know. */
 export const PLAN_FORM_IDS = [...FORM_IDS, ...PLAN_ONLY_FORM_IDS] as const;
diff --git a/cli/lib/console-plan.ts b/cli/lib/console-plan.ts
index 7eeac67..ff11b8c 100644
--- a/cli/lib/console-plan.ts
+++ b/cli/lib/console-plan.ts
@@ -108,6 +108,8 @@ export interface PlanIds {
   demoAccount?: boolean;
   /** What the project scan found (ad / attribution SDKs, the AD_ID permission, support and AR code); undefined: not scanned. */
   signals?: ProjectSignals;
+  /** play-publish-changes: the production releases ready to publish per the API (null/undefined: not read). */
+  readyChanges?: { track: string; version: string | null; build: string | null; rollout: string }[] | null;
 }
 
 const ASC = 'https://appstoreconnect.apple.com';
diff --git a/cli/lib/console-play-plans.ts b/cli/lib/console-play-plans.ts
index da3a979..51978b7 100644
--- a/cli/lib/console-play-plans.ts
+++ b/cli/lib/console-play-plans.ts
@@ -20,6 +20,7 @@ import { NEVER_PRESS, PLAY_NEVER_PRESS, playAppList } from './console-forms';
 import type { ConsolePlan, PlanAnswer, PlanIds, PlanStatus, PlanStep } from './console-plan';
 import { AD_ID_PERMISSION, type ProjectSignals } from './project-signals';
 import { playGamesPart } from './console-games-plan';
+import { PUBLISH_BUTTON, PUBLISH_CONFIRM } from './play-publish';
 
 const PLAY = 'https://play.google.com/console';
 
@@ -503,10 +504,41 @@ function productionRelease(config: ShipConfig, p: PlanIds): Part {
   };
 }
 
+function publishChanges(config: ShipConfig, p: PlanIds): Part {
+  const ready = p.readyChanges ?? null;
+  const readyText = ready === null ? 'not read (add --lookup, or run `storebound play status`)' : ready.length ? ready.map(r => `${r.track} ${r.version ?? '?'} (${r.build ?? '?'}) ${r.rollout}`).join('; ') : 'nothing ready to publish per the API';
+  return {
+    title: 'Play Console: publish the approved changes (managed publishing)',
+    start: start(config, p, 'publishing', ['Publishing overview (left menu)']),
+    steps: steps([
+      { text: 'Precondition: `storebound play status` shows "production <version>: In review / ready to publish" (managed publishing on, Google approved).' },
+      { text: 'Open Publishing overview. The section "Changes ready to publish" lists every approved change (e.g. the production release and Data safety); read the list as text and compare it with the ready changes below.' },
+      { text: `Stop. The owner presses "${PUBLISH_BUTTON}" (N = the number in the list) and then confirms in its dialog (button "${PUBLISH_CONFIRM}"; a real mouse click, a JS .click() may do nothing). It makes every listed change live at once.`, answers: ['ready'] },
+      { text: 'Verify: `storebound console verify play-publish-changes` (API: no production release is left ready to publish) or pipe the page text to `--from-text -`.' },
+    ]),
+    answers: [ans('ready', 'Changes ready to publish (API)', readyText, 'certain', 'play status (public store page + tracks)', { note: 'The API sees production releases only; Data safety, listing and other non-track changes show in the console list only.', where: 'Publishing overview > Changes ready to publish' })],
+    final: PUBLISH_BUTTON,
+    neverPress: ['Publish N changes', 'Send changes for review', 'Submit N changes for review', 'Restart review', 'Discard changes', 'Stop managed publishing', 'Turn off managed publishing', 'Halt rollout', 'Unpublish app', 'Deactivate', ...NEVER_PRESS],
+    allowed: [
+      { button: 'Publishing overview (left menu), expand Changes ready to publish', class: 'navigation', where: 'read-only: lists the approved changes' },
+    ],
+    uiFacts: [
+      'Managed publishing (play.managedPublishing: true): after approval the changes wait in Publishing overview > "Changes ready to publish"; the button is "Publish N changes" (N counts every change, e.g. production full rollout + Data safety) and opens a confirm dialog.',
+      'The Developer API has no publishing-state endpoint: storebound infers "ready to publish" from a completed production release the public store page does not show yet.',
+      'Never "Discard changes" or "Stop managed publishing" (it would unpublish or drop the approved changes).',
+      managedPublishingNote(config),
+      PLAY_MATERIAL_FACT,
+    ],
+    verify: { command: 'storebound console verify play-publish-changes', source: 'page-text', capture: PAGE_TEXT, expect: ['No production release is left ready to publish (API), or the page shows no "Publish N changes" button / "Changes ready to publish".'] },
+    guidance: ['Open: Publishing overview > Changes ready to publish'],
+  };
+}
+
 export function playOnlyPart(form: Exclude<PlanOnlyFormId, 'play-app-content'>, config: ShipConfig, p: PlanIds): Part {
   switch (form) {
     case 'play-production-countries': return productionCountries(config, p);
     case 'play-production-release': return productionRelease(config, p);
+    case 'play-publish-changes': return publishChanges(config, p);
     case 'play-store-settings': return storeSettings(config, p);
     case 'play-privacy-policy': return privacyPolicy(config, p);
     case 'play-ads': return adsDeclaration(config, p);
diff --git a/cli/lib/console-verify.ts b/cli/lib/console-verify.ts
index 797e227..b68db83 100644
--- a/cli/lib/console-verify.ts
+++ b/cli/lib/console-verify.ts
@@ -426,11 +426,29 @@ export function verifyProductionRelease(text: string): VerifyResult {
   return result('play-production-release', 'page-text', rows);
 }
 
+/** Publishing overview as text (or the API's ready list): nothing left to publish. */
+export function verifyPublishChanges(text: string): VerifyResult {
+  const f = fold(text);
+  const pending = /publish \d+ changes?|changes ready to publish/.test(f) && !/no changes ready to publish|0 changes ready/.test(f);
+  const rows: VerifyRow[] = [{ item: 'Changes ready to publish', expected: 'none left', seen: pending ? 'changes ready to publish' : 'none listed', status: pending ? 'mismatch' : 'match',
+    ...(pending ? { note: 'the owner presses "Publish N changes" and confirms' } : {}) }];
+  return result('play-publish-changes', 'page-text', rows);
+}
+
+/** The same check from the API's ready list (`readyToPublish`). */
+export function verifyPublishChangesApi(ready: { track: string; version: string | null; build: string | null; rollout: string }[]): VerifyResult {
+  const seen = ready.map(r => `${r.track} ${r.version ?? '?'} (${r.build ?? '?'}) ${r.rollout}`).join('; ');
+  const rows: VerifyRow[] = [{ item: 'Production releases ready to publish', expected: 'none left', seen: ready.length ? seen : 'none', status: ready.length ? 'mismatch' : 'match',
+    ...(ready.length ? { note: 'the owner presses "Publish N changes" and confirms (storebound console plan play-publish-changes)' } : {}) }];
+  return result('play-publish-changes', 'api', rows, ['The API sees production releases only; Data safety and other non-track changes are not readable.']);
+}
+
 /** Page-text verification of any form that has one. */
 export function verifyText(form: PlanFormId, config: ShipConfig, text: string): VerifyResult {
   if (form === 'play-app-content') return verifyAppContent(text);
   if (form === 'play-production-countries') return verifyProductionCountries(config, text);
   if (form === 'play-production-release') return verifyProductionRelease(text);
+  if (form === 'play-publish-changes') return verifyPublishChanges(text);
   if (form === 'play-games-services') return result(form, 'page-text', verifyPlayGames(config, text));
   if (form === 'play-store-settings' || form === 'play-privacy-policy' || form === 'play-ads' || form === 'play-sign-in-details' || form === 'play-advertising-id'
     || form === 'play-government-apps' || form === 'play-financial-features' || form === 'play-health-apps') return verifyPlayDeclaration(form, config, text);
diff --git a/cli/lib/play-publish.ts b/cli/lib/play-publish.ts
new file mode 100644
index 0000000..d4f5c41
--- /dev/null
+++ b/cli/lib/play-publish.ts
@@ -0,0 +1,29 @@
+// Play managed publishing: what waits in Publishing overview as "Changes ready to publish" (button "Publish N changes").
+// The Developer API has no publishing-state endpoint; `play status` decides it the same way portfolio.playReleases does:
+// a completed production release that the public store page does not show yet (404, or an older version) while
+// play.managedPublishing is on is "In review / ready to publish". Pure. Non-track changes (Data safety, listing, content
+// rating) are listed by the console page only; the API cannot see them.
+import { playReleases } from './portfolio';
+import { consoleUrl } from './console-links';
+
+export const PUBLISH_PLAN_HINT = 'storebound console plan play-publish-changes';
+/** The owner's final button: "Publish N changes" (N is the page's count) and its confirm dialog. */
+export const PUBLISH_BUTTON = 'Publish N changes';
+export const PUBLISH_CONFIRM = 'Publish';
+
+export interface ReadyChange { track: string; version: string | null; build: string | null; rollout: string; liveVersion: string | null }
+
+/** Ready-to-publish production releases from the `play status --json` data ({ tracks, publicPage, managedPublishing }). */
+export function readyToPublish(data: unknown): ReadyChange[] {
+  return playReleases(data).filter(r => r.track === 'production' && r.managed === true && r.phase === 'review').map(r => ({
+    track: r.track ?? 'production', version: r.version, build: r.build,
+    rollout: r.fraction !== null && r.fraction < 1 ? `${Math.round(r.fraction * 1000) / 10}% staged` : 'full rollout', liveVersion: r.liveVersion ?? null,
+  }));
+}
+
+/** Status lines for `play status` / `status`: the items and the hint (empty when nothing is ready). */
+export function readyLines(items: ReadyChange[]): string[] {
+  if (!items.length) return [];
+  return [`  ready to publish (managed publishing): ${items.map(i => `${i.track} ${i.version ?? '?'} (${i.build ?? '?'}) ${i.rollout}${i.liveVersion ? `, live: ${i.liveVersion}` : ''}`).join(' | ')}; non-track changes (Data safety, listing) show only in the console`,
+    `  next: ${PUBLISH_PLAN_HINT}  (${consoleUrl('play.publishing')})`];
+}
diff --git a/cli/lib/train.ts b/cli/lib/train.ts
index 1cdb660..86cac78 100644
--- a/cli/lib/train.ts
+++ b/cli/lib/train.ts
@@ -239,7 +239,7 @@ function storeSteps(store: 'ios' | 'android', v: string, r: StoreRelease | null,
       break;
     case 'review':
       if (store === 'android' && r!.track === 'production') {
-        steps.push({ kind: r!.managed ? 'owner' : 'wait', text: `${v}: ${playReleaseLabel(r!)}`, fix: r!.managed ? `${consoleLink('play.publishing')} (publish once approved)` : 'storebound play status', ...(r!.managed ? { url: consoleUrl('play.publishing') } : {}) });
+        steps.push({ kind: r!.managed ? 'owner' : 'wait', text: `${v}: ${playReleaseLabel(r!)}`, fix: r!.managed ? `${consoleLink('play.publishing')} (publish once approved; \`storebound console plan play-publish-changes\`)` : 'storebound play status', ...(r!.managed ? { url: consoleUrl('play.publishing') } : {}) });
         break;
       }
       steps.push({ kind: 'wait', text: `${v} is in review (${r!.state}); nothing to do until the store answers`, fix: store === 'ios' ? 'storebound apple status --wait-review' : 'storebound play status' });
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index 24c7644..c7972ae 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -40,7 +40,7 @@ export const notSentProp = { type: 'boolean', default: false, description: 'Comm
 /** Every form `console plan` / `console verify` know (cli/lib/console-answers.ts PLAN_FORM_IDS; a test keeps them equal). */
 export const CONSOLE_PLAN_FORMS = ['apple-app-record', 'apple-age-rating', 'apple-app-privacy', 'play-app-record', 'play-content-rating', 'play-target-audience',
   'play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details', 'play-advertising-id', 'play-government-apps',
-  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services'];
+  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes'];
 
 export const TOOLS: ToolDef[] = [
   { name: 'check', title: 'Offline config check', command: ['check'], write: false, network: false,
diff --git a/cli/play/publish-ready.ts b/cli/play/publish-ready.ts
new file mode 100644
index 0000000..14f5dfe
--- /dev/null
+++ b/cli/play/publish-ready.ts
@@ -0,0 +1,18 @@
+// Read-only: the production releases waiting in Publishing overview (managed publishing), from the tracks and the public store page.
+import type { ShipConfig } from '../lib/config';
+import { need } from '../lib/ctx';
+import { type ReadyChange, readyToPublish } from '../lib/play-publish';
+import { playPublicPage } from '../lib/play-public';
+import { playClient } from './client';
+
+export async function readyFromApi(root: string, config: ShipConfig): Promise<ReadyChange[]> {
+  const pkg = need(config.play?.packageName, 'play.packageName');
+  const play = await playClient(root, pkg);
+  let out: ReadyChange[] = [];
+  await play.read(async id => {
+    const tracks = (await play.call<{ tracks?: unknown[] }>('GET', `${play.API}/edits/${id}/tracks`)).tracks ?? [];
+    const publicPage = await playPublicPage(play.packageName);
+    out = readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null });
+  });
+  return out;
+}
diff --git a/cli/play/status.ts b/cli/play/status.ts
index 3097c3a..74214cc 100644
--- a/cli/play/status.ts
+++ b/cli/play/status.ts
@@ -10,6 +10,7 @@ import { playPublicPage } from '../lib/play-public';
 import { playReleases, playReleaseLabel } from '../lib/portfolio';
 import { playClient } from './client';
 import { listOneTimeProducts } from './products';
+import { readyLines, readyToPublish } from '../lib/play-publish';
 import { clearPending, pendingLine, publishingUrl, readPending } from './review-pending';
 
 interface Track { track: string; releases?: { name?: string; versionCodes?: string[]; status: string; userFraction?: number }[] }
@@ -32,7 +33,7 @@ export async function run(ctx: Ctx): Promise<void> {
     // the App category is not in the API (edits.details has no category field): a console step
     const cat = playCategoryOf(config);
     const category = { config: cat?.category ?? null, source: cat?.source ?? null, api: false, plan: 'storebound console plan play-store-settings' };
-    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending }); return; }
+    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending, readyToPublish: readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }) }); return; }
     console.log(`${play.packageName}\n  details: ${details.defaultLanguage} · ${details.contactEmail ?? '-'} · ${details.contactWebsite ?? '-'}`);
     console.log(`  category: ${cat ? `${cat.category} (${cat.source})` : 'not in the config (play.category)'} · not readable by the API: Store settings is a console step (${category.plan})`);
     console.log(`  listings (${listings.length}): ${listings.map(l => l.language).join(', ') || '-'}`);
@@ -42,6 +43,7 @@ export async function run(ctx: Ctx): Promise<void> {
     }
     console.log(`  public store page: ${publicPage.state === 'public' ? `published (200), live version ${publicPage.versionName ?? (publicPage.varies ? 'varies with device' : 'not shown')}` : publicPage.state === 'notPublic' ? 'not public yet (404)' : `couldn't check it (${publicPage.error ?? 'not read'})`}${publicPage.stale ? ` (last known, ${publicPage.checkedAt.slice(0, 16).replace('T', ' ')} UTC)` : ''}`);
     for (const r of playReleases({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }).filter(x => x.track === 'production')) console.log(`  production ${r.version ?? '?'} (${r.build ?? '?'}): ${playReleaseLabel(r)}`);
+    for (const l of readyLines(readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }))) console.log(l);
     if (pending) console.log(`  review: ${pendingLine(pending)}`);
     console.log(`  products (${products.length}):`);
     for (const p of products) console.log(`    ${p.productId.padEnd(40)} ${(p.purchaseOptions ?? []).map(o => `${o.purchaseOptionId}:${o.state ?? '?'}`).join(' ')}`);
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index 8056ceb..4f58aed 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -9,6 +9,7 @@ fails without the fix.
 
 | # | date | lesson | guard |
 |---|---|---|---|
+| 94 | 2026-10 | An app with managed publishing was approved but never went live: `play status` said "In review / ready to publish" with no next step, and the Publishing overview "Publish N changes" button (production + Data safety) was easy to miss or to confuse with Discard changes. | `console plan play-publish-changes` (final "Publish N changes" is the owner's, Discard changes / Stop managed publishing never-press), `console verify play-publish-changes` (API), the hint in `play status`, `status` and the desktop Releases tab (`cli/lib/play-publish.ts`, `tests/console-play-plans.test.ts`). |
 | 93 | 2026-10 | A git-ignored, never-captured frames folder rendered store images with no app or game in them; render only logged 404s and `shots check` said 0 errors. | `shots render` refuses to start while a scene frame is missing (`framesForRender` in `cli/shots/lib.ts`) and fails when any load failed; report.json `missing` is a `frame-missing` error in `shots check` / `validate` (`cli/shots/report.ts`, `tests/shots-missing-frames.test.ts`). |
 | 90 | 2026-10 | `apple submit --build N --version X --yes` after `apple submit --no-submit --yes` (the documented two-step flow) printed the plan (every item "in it already", then "submit PATCH submitted: true"), logged "not added ...: already in the draft submission" and ended with "nothing to submit" without the PATCH: the submit only ran for new items or an UNRESOLVED_ISSUES submission. | `willSubmit` (cli/lib/review-submit.ts) also submits a READY_FOR_REVIEW draft that already holds the named app version (iap-submit: one of the asked-for items), with the same "not ready yet" retry. `tests/resubmit.test.ts` ("the second step submits the prepared draft"). |
 | 85 | 2026-10 | `shots record --source web` filmed at the page's CSS size: Chromium's screencast ignores the deviceScaleFactor (maxWidth only shrinks), so a 1080x1920 preview of a 430x932 @2x page was a 2.5x upscale. | `Page.captureScreenshot` with `clip.scale` = dpr (long side capped at 1920), 3 requests in flight, timestamped frames joined by ffmpeg; a warning when the first frame is smaller than asked or the rate is under 20 frames/s. `recordSize` / `captureShortfall` in `cli/shots/devices.ts`, `tests/video.test.ts`. |
diff --git a/skills/console-autofill/SKILL.md b/skills/console-autofill/SKILL.md
index 1048a99..251dac8 100644
--- a/skills/console-autofill/SKILL.md
+++ b/skills/console-autofill/SKILL.md
@@ -45,7 +45,7 @@ the UI shows. This is the primary mode.
    `--all` / MCP `all: true` puts every card's steps inline in fix order and ends with the one owner list: tick the
    IARC Terms of Use box (before), Send changes for review (after)), its cards `play-privacy-policy`, `play-ads`, `play-sign-in-details`, `play-advertising-id`,
    `play-government-apps`, `play-financial-features`, `play-health-apps`, and the first production release:
-   `play-production-countries` and `play-production-release`. `storebound console plan` lists them.
+   `play-production-countries`, `play-production-release` and `play-publish-changes` (managed publishing). `storebound console plan` lists them.
 2. Send the owner the `ownerBatch` of every form you will fill in ONE message before you start (AGENTS.md rule 5): the
    `ask-owner` answers (write them into the config, so the plan has them; never guess them) and the `before` steps
    (Play content rating: tick the IARC Terms of Use box on the questionnaire's page 1 first; page 1's Next does
diff --git a/skills/play-first-release/SKILL.md b/skills/play-first-release/SKILL.md
index c1e7f26..393544a 100644
--- a/skills/play-first-release/SKILL.md
+++ b/skills/play-first-release/SKILL.md
@@ -103,6 +103,9 @@ products) and answers the compliance facts no file proves, all in one batch at t
     Managed publishing is off by default: the app goes live automatically once Google approves it. If the owner wants
     to pick the moment, they turn on Publishing overview > Managed publishing first; record it in
     `play.managedPublishing` (`play release` and the plan warn while it is off).
+    With managed publishing on, `play status` shows "production X: In review / ready to publish" after approval and
+    names `storebound console plan play-publish-changes`: Publishing overview > "Changes ready to publish" > **Publish N
+    changes** (owner's final button; never Discard changes / Stop managed publishing). `console verify play-publish-changes` reads the API.
 13. **Verify.** `storebound validate --play` (no blockers), `storebound play status` (tracks, listings, products), Console dashboard has no open tasks,
     Publishing overview shows "In review".
 
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 19f7785..c9fa7d2 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1365,3 +1365,14 @@ that fails without the fix (see CONTRIBUTING.md).
   with what was found. Opening waits up to 15 s: on Windows for a visible top-level window of a process
   from the installed path (a running `--hidden` tray copy is shown by the single-instance handler, so a second start
   without `--hidden` opens it), elsewhere for a non-`--hidden` process or a handoff (`tests/desktop-proc.test.ts`).
+
+## 114. Managed publishing: approved, but nothing went live
+- **What happens:** with `play.managedPublishing: true` Google approves the release and it waits in Publishing overview
+  ("Changes ready to publish", button "Publish N changes", e.g. production plus Data safety). `play status` only said
+  "In review / ready to publish".
+- **Do:** `storebound console plan play-publish-changes`, drive to Publishing overview, then the owner's "Publish N
+  changes" and its confirm dialog. Never "Discard changes" or "Stop managed publishing". Check with
+  `storebound console verify play-publish-changes` (API: no production release left ready to publish).
+- **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
+  gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
+  not visible to the API.
diff --git a/tests/console-play-plans.test.ts b/tests/console-play-plans.test.ts
index b7c6c65..f517dd9 100644
--- a/tests/console-play-plans.test.ts
+++ b/tests/console-play-plans.test.ts
@@ -7,7 +7,8 @@ import { consoleAnswers, PLAN_FORM_IDS, PLAN_ONLY_FORM_IDS } from '../cli/lib/co
 import { declarationSaveAllowed, flowAllowed, forbiddenControl, formDef, forbiddenTick, publishingControl } from '../cli/lib/console-forms';
 import { consolePlan, IN_PAGE_LOOP, playConsoleReminders, planText } from '../cli/lib/console-plan';
 import { APP_CONTENT_CARDS, PLAY_MATERIAL_FACT, startLabel } from '../cli/lib/console-play-plans';
-import { appPrivacyPublished, verifyAppContent, verifyPlayDeclaration, verifyText } from '../cli/lib/console-verify';
+import { readyLines, readyToPublish } from '../cli/lib/play-publish';
+import { appPrivacyPublished, verifyPublishChangesApi, verifyAppContent, verifyPlayDeclaration, verifyText } from '../cli/lib/console-verify';
 import { CONSOLE_PLAN_FORMS, TOOLS, validateInput } from '../cli/mcp-tools';
 import { playRules, type PlaySnapshot } from '../cli/lib/validate-rules';
 
@@ -27,7 +28,7 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
     'play-store-settings': 'store-settings', 'play-app-content': 'app-content/overview', 'play-privacy-policy': 'app-content/privacy-policy',
     'play-ads': 'app-content/ads-declaration', 'play-sign-in-details': 'app-content/testing-credentials', 'play-advertising-id': 'app-content/ad-id-declaration',
     'play-government-apps': 'app-content/government-apps', 'play-financial-features': 'app-content/finance', 'play-health-apps': 'app-content/health', 'play-games-services': 'play-games-services/setup',
-    'play-production-countries': 'tracks/production', 'play-production-release': 'tracks/production',
+    'play-production-countries': 'tracks/production', 'play-production-release': 'tracks/production', 'play-publish-changes': 'publishing',
   };
   for (const form of PLAN_ONLY_FORM_IDS) {
     test(form, () => {
@@ -45,7 +46,7 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
       for (const b of ['Publish', 'Submit', 'Send changes for review']) expect(p.buttons.neverPress).toContain(b);
       for (const b of p.buttons.allowed) expect(b.class).not.toBe('final-submit');
       // an App content card's Save is the agent's (verified 2026-10-13); the owner's button is Send changes for review
-      if (form.startsWith('play-') && !['play-store-settings', 'play-app-content', 'play-production-countries', 'play-production-release', 'play-games-services'].includes(form)) {
+      if (form.startsWith('play-') && !['play-store-settings', 'play-app-content', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes'].includes(form)) {
         expect(p.buttons.final).toBe('Send changes for review');
         expect(p.buttons.neverPress).not.toContain('Save');
         expect(p.buttons.allowed).toContainEqual(expect.objectContaining({ button: 'Save', class: 'declaration-save' }));
@@ -58,7 +59,8 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
       p.ownerBatch.forEach((o, i) => expect(o.n).toBe(i + 1));
       expect(planText(p).indexOf('Owner batch')).toBeLessThan(planText(p).indexOf('Steps:'));
       expect(p.uiFacts.join('\n')).toContain(PLAY_MATERIAL_FACT);
-      expect(p.verify.command).toBe(`storebound console verify ${form} ${p.verify.capture.includes("aria-selected") ? "--from" : "--from-text"} -`);
+      // play-publish-changes verifies through the API (no page text needed)
+      expect(p.verify.command).toBe(form === 'play-publish-changes' ? 'storebound console verify play-publish-changes' : `storebound console verify ${form} ${p.verify.capture.includes("aria-selected") ? "--from" : "--from-text"} -`);
       expect(p.inPageLoop).toBe(IN_PAGE_LOOP);
       expect(planText(p)).toContain('window.__sb.run');
       expect(JSON.parse(JSON.stringify(p))).toEqual(p);
@@ -328,6 +330,32 @@ describe('the first production release: countries, managed publishing, the owner
     expect(verifyText('play-production-release', base, 'Publishing overview\nChanges in review').ok).toBe(true);
   });
 
+  test('publish changes: Publish N changes is the final button, never-press holds Discard / Stop managed publishing, ready list from the API', () => {
+    const managed = { ...base, play: { ...base.play!, managedPublishing: true } } as ShipConfig;
+    const p = consolePlan('play-publish-changes', managed, { readyChanges: [{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout' }] });
+    expect(p.buttons.final).toBe('Publish N changes');
+    for (const b of ['Discard changes', 'Stop managed publishing', 'Publish N changes']) expect(p.buttons.neverPress).toContain(b);
+    expect(p.answers[0]!.text).toContain('production 2.0.0 (45) full rollout');
+    expect(p.steps.map(s => s.text).join('\n')).toContain('Changes ready to publish');
+    expect(p.ownerBatch.at(-1)!.text).toContain('Publish N changes');
+    expect(consolePlan('play-publish-changes', managed).answers[0]!.text).toContain('not read');
+  });
+
+  test('publish changes: ready = managed + completed production the store page does not show; verify by API and by page text', () => {
+    const tracks = [{ track: 'production', releases: [{ name: '2.0.0 (45)', versionCodes: ['45'], status: 'completed' }] }];
+    const ready = readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: true });
+    expect(ready).toEqual([{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout', liveVersion: null }]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: false })).toEqual([]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '2.0.0' }, managedPublishing: true })).toEqual([]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: true })[0]!.liveVersion).toBe('1.9.0');
+    expect(readyLines(ready).join('\n')).toContain('storebound console plan play-publish-changes');
+    expect(readyLines([])).toEqual([]);
+    expect(verifyPublishChangesApi(ready).ok).toBe(false);
+    expect(verifyPublishChangesApi([]).ok).toBe(true);
+    expect(verifyText('play-publish-changes', base, 'Publishing overview\nChanges ready to publish\nPublish 2 changes').ok).toBe(false);
+    expect(verifyText('play-publish-changes', base, 'Publishing overview\nChanges in review').ok).toBe(true);
+  });
+
   test('validate: production with 0 countries is a blocker with a release on the track, a warning without', () => {
     const snap = { defaultLanguage: 'en-US', expectedLanguages: [], listings: [], privacyUrl: { url: 'https://example.com/privacy', status: 200 }, website: null, appAds: null, appAdsLines: [], adsLikely: false, tracks: [], products: [], expectedProducts: [] } as unknown as PlaySnapshot;
     expect(playRules({ ...snap, productionCountries: 0 }).find(f => f.code === 'countries')).toMatchObject({ level: 'warn', msg: 'production has 0 countries / regions (the API cannot set them)', fix: 'storebound console plan play-production-countries' });

From 4e2ffd6b3dc98c416f0ac6bfd6356800376c4d07 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:01:37 +0800
Subject: [PATCH 131/255] generated API tables refreshed for the
 play-publish-changes form

---
 cli/api/wrapped.gen.ts | 2 +-
 docs/api-coverage.md   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 8693d61..1b484d8 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -254,7 +254,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'androidpublisher.edits.listings.patch': 'listing-store',
     'androidpublisher.edits.listings.update': 'listing-store play/listing',
     'androidpublisher.edits.tracks.get': 'play/release play/rollout play/upload',
-    'androidpublisher.edits.tracks.list': 'play/next-version-code play/status play/upload validate',
+    'androidpublisher.edits.tracks.list': 'play/next-version-code play/publish-ready play/status play/upload validate',
     'androidpublisher.edits.tracks.update': 'play/release play/rollout play/upload',
     'androidpublisher.edits.validate': 'play/client',
     'androidpublisher.generatedapks.list': 'web',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index f575a42..cb6249a 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -1608,7 +1608,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.edits.tracks** (5) | | | | |
 | `androidpublisher.edits.tracks.create` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | write (dry by default) |  |
 | `androidpublisher.edits.tracks.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | read | play/release, play/rollout, play/upload |
-| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play/next-version-code, play/status, play/upload, validate |
+| `androidpublisher.edits.tracks.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks` | read | play/next-version-code, play/publish-ready, play/status, play/upload, validate |
 | `androidpublisher.edits.tracks.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) |  |
 | `androidpublisher.edits.tracks.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/tracks/{track}` | write (dry by default) | play/release, play/rollout, play/upload |
 | **androidpublisher.externaltransactions** (3) | | | | |

From 26f9559e1ae681701c711ca741988f52580fd424 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:12:37 +0800
Subject: [PATCH 132/255] play-publish-changes: a release is ready only when
 the store page shows an older version; unknown reads are not determined,
 never a mismatch

---
 CHANGELOG.md                               |  2 +-
 apps/desktop/src/screens/tabs/Releases.tsx |  2 +-
 cli/lib/console-verify.ts                  |  7 ++++---
 cli/lib/play-publish.ts                    | 16 +++++++++++++++-
 cli/play/publish-ready.ts                  | 10 ++++++----
 tests/console-play-plans.test.ts           | 18 +++++++++++++-----
 6 files changed, 40 insertions(+), 15 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1ec495d..b4f69d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,7 @@
 
 ## Unreleased
 
-- Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview.
+- Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/apps/desktop/src/screens/tabs/Releases.tsx b/apps/desktop/src/screens/tabs/Releases.tsx
index fdf96ac..17b99ad 100644
--- a/apps/desktop/src/screens/tabs/Releases.tsx
+++ b/apps/desktop/src/screens/tabs/Releases.tsx
@@ -95,7 +95,7 @@ function LaneRow({ lane, version, st, app }: { lane: Lane; version: string; st:
           )}
         </div>
       )}
-      {r && r.store === 'android' && r.managed && r.phase === 'review' && <PublishHint st={st} />}
+      {r && r.store === 'android' && r.managed && r.phase === 'review' && !!r.liveVersion && !r.pageStaleAt && <PublishHint st={st} />}
       {r && app.project && <RolloutControls app={app} r={r} />}
     </article>
   );
diff --git a/cli/lib/console-verify.ts b/cli/lib/console-verify.ts
index b68db83..730997d 100644
--- a/cli/lib/console-verify.ts
+++ b/cli/lib/console-verify.ts
@@ -436,11 +436,12 @@ export function verifyPublishChanges(text: string): VerifyResult {
 }
 
 /** The same check from the API's ready list (`readyToPublish`). */
-export function verifyPublishChangesApi(ready: { track: string; version: string | null; build: string | null; rollout: string }[]): VerifyResult {
+export function verifyPublishChangesApi(ready: { track: string; version: string | null; build: string | null; rollout: string }[] & { undetermined?: boolean }): VerifyResult {
   const seen = ready.map(r => `${r.track} ${r.version ?? '?'} (${r.build ?? '?'}) ${r.rollout}`).join('; ');
-  const rows: VerifyRow[] = [{ item: 'Production releases ready to publish', expected: 'none left', seen: ready.length ? seen : 'none', status: ready.length ? 'mismatch' : 'match',
+  const rows: VerifyRow[] = [{ item: 'Production releases ready to publish', expected: 'none left', seen: ready.length ? seen : ready.undetermined ? 'none proven (the store page does not show an older live version; not determined)' : 'none', status: ready.length ? 'mismatch' : 'match',
     ...(ready.length ? { note: 'the owner presses "Publish N changes" and confirms (storebound console plan play-publish-changes)' } : {}) }];
-  return result('play-publish-changes', 'api', rows, ['The API sees production releases only; Data safety and other non-track changes are not readable.']);
+  return result('play-publish-changes', 'api', rows, ['The API sees production releases only; Data safety and other non-track changes are not readable.',
+    ...(ready.undetermined ? ['A release counts as ready only when the public store page shows an OLDER version; a 404, failed read or same version is never ready. Check Publishing overview ("Last published on ...") or pass the page text with --from-text -.'] : [])]);
 }
 
 /** Page-text verification of any form that has one. */
diff --git a/cli/lib/play-publish.ts b/cli/lib/play-publish.ts
index d4f5c41..6174390 100644
--- a/cli/lib/play-publish.ts
+++ b/cli/lib/play-publish.ts
@@ -13,9 +13,23 @@ export const PUBLISH_CONFIRM = 'Publish';
 
 export interface ReadyChange { track: string; version: string | null; build: string | null; rollout: string; liveVersion: string | null }
 
+/**
+ * Ready only when the public store page POSITIVELY shows an older version than the completed production release
+ * (both parsed and compared; playReleases sets liveVersion only then) and the page read is fresh. A 404, a failed or
+ * stale read, "Varies with device", a same or newer version, or an unparseable version is never "ready": a release
+ * already published (managed publishing, "Last published on ...") must not be reported as waiting.
+ */
+const isReady = (r: ReturnType<typeof playReleases>[number]): boolean => r.track === 'production' && r.managed === true && r.phase === 'review' && !!r.liveVersion && !r.pageStaleAt && !!r.version;
+
+/** True when a completed managed production release exists but the store page cannot tell whether it is published. */
+export function readyUndetermined(data: unknown): boolean {
+  const rs = playReleases(data);
+  return (data as { managedPublishing?: unknown })?.managedPublishing === true && rs.some(r => r.track === 'production' && r.state === 'completed' && !isReady(r) && r.phase !== 'live');
+}
+
 /** Ready-to-publish production releases from the `play status --json` data ({ tracks, publicPage, managedPublishing }). */
 export function readyToPublish(data: unknown): ReadyChange[] {
-  return playReleases(data).filter(r => r.track === 'production' && r.managed === true && r.phase === 'review').map(r => ({
+  return playReleases(data).filter(isReady).map(r => ({
     track: r.track ?? 'production', version: r.version, build: r.build,
     rollout: r.fraction !== null && r.fraction < 1 ? `${Math.round(r.fraction * 1000) / 10}% staged` : 'full rollout', liveVersion: r.liveVersion ?? null,
   }));
diff --git a/cli/play/publish-ready.ts b/cli/play/publish-ready.ts
index 14f5dfe..705400b 100644
--- a/cli/play/publish-ready.ts
+++ b/cli/play/publish-ready.ts
@@ -1,18 +1,20 @@
 // Read-only: the production releases waiting in Publishing overview (managed publishing), from the tracks and the public store page.
 import type { ShipConfig } from '../lib/config';
 import { need } from '../lib/ctx';
-import { type ReadyChange, readyToPublish } from '../lib/play-publish';
+import { type ReadyChange, readyToPublish, readyUndetermined } from '../lib/play-publish';
 import { playPublicPage } from '../lib/play-public';
 import { playClient } from './client';
 
-export async function readyFromApi(root: string, config: ShipConfig): Promise<ReadyChange[]> {
+export async function readyFromApi(root: string, config: ShipConfig): Promise<ReadyChange[] & { undetermined?: boolean }> {
   const pkg = need(config.play?.packageName, 'play.packageName');
   const play = await playClient(root, pkg);
-  let out: ReadyChange[] = [];
+  let out: ReadyChange[] & { undetermined?: boolean } = [];
   await play.read(async id => {
     const tracks = (await play.call<{ tracks?: unknown[] }>('GET', `${play.API}/edits/${id}/tracks`)).tracks ?? [];
     const publicPage = await playPublicPage(play.packageName);
-    out = readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null });
+    const data = { tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null };
+    out = readyToPublish(data);
+    out.undetermined = !out.length && readyUndetermined(data);
   });
   return out;
 }
diff --git a/tests/console-play-plans.test.ts b/tests/console-play-plans.test.ts
index f517dd9..c65df5d 100644
--- a/tests/console-play-plans.test.ts
+++ b/tests/console-play-plans.test.ts
@@ -7,7 +7,7 @@ import { consoleAnswers, PLAN_FORM_IDS, PLAN_ONLY_FORM_IDS } from '../cli/lib/co
 import { declarationSaveAllowed, flowAllowed, forbiddenControl, formDef, forbiddenTick, publishingControl } from '../cli/lib/console-forms';
 import { consolePlan, IN_PAGE_LOOP, playConsoleReminders, planText } from '../cli/lib/console-plan';
 import { APP_CONTENT_CARDS, PLAY_MATERIAL_FACT, startLabel } from '../cli/lib/console-play-plans';
-import { readyLines, readyToPublish } from '../cli/lib/play-publish';
+import { readyLines, readyToPublish, readyUndetermined } from '../cli/lib/play-publish';
 import { appPrivacyPublished, verifyPublishChangesApi, verifyAppContent, verifyPlayDeclaration, verifyText } from '../cli/lib/console-verify';
 import { CONSOLE_PLAN_FORMS, TOOLS, validateInput } from '../cli/mcp-tools';
 import { playRules, type PlaySnapshot } from '../cli/lib/validate-rules';
@@ -343,11 +343,19 @@ describe('the first production release: countries, managed publishing, the owner
 
   test('publish changes: ready = managed + completed production the store page does not show; verify by API and by page text', () => {
     const tracks = [{ track: 'production', releases: [{ name: '2.0.0 (45)', versionCodes: ['45'], status: 'completed' }] }];
-    const ready = readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: true });
-    expect(ready).toEqual([{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout', liveVersion: null }]);
-    expect(readyToPublish({ tracks, publicPage: { state: 'notPublic' }, managedPublishing: false })).toEqual([]);
+    const ready = readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: true });
+    expect(ready).toEqual([{ track: 'production', version: '2.0.0', build: '45', rollout: 'full rollout', liveVersion: '1.9.0' }]);
+    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: false })).toEqual([]);
     expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '2.0.0' }, managedPublishing: true })).toEqual([]);
-    expect(readyToPublish({ tracks, publicPage: { state: 'public', versionName: '1.9.0' }, managedPublishing: true })[0]!.liveVersion).toBe('1.9.0');
+    // already published (real case: 2.0.0 / 2000001 full rollout, "Last published on ..."): never ready, whatever the page says
+    const live = [{ track: 'production', releases: [{ name: '2.0.0 (2000001)', versionCodes: ['2000001'], status: 'completed' }] }];
+    for (const publicPage of [{ state: 'public', versionName: '2.0.0' }, { state: 'public', versionName: '2.1.0' }, { state: 'public', versionName: null }, { state: 'public', varies: true }, { state: 'notPublic' }, { state: 'unknown' }, { state: 'public', versionName: '1.9.0', stale: true, checkedAt: '2026-10-24T00:00:00Z' }]) {
+      expect({ publicPage, ready: readyToPublish({ tracks: live, publicPage, managedPublishing: true }) }).toEqual({ publicPage, ready: [] });
+    }
+    const unk = Object.assign([], { undetermined: readyUndetermined({ tracks: live, publicPage: { state: 'notPublic' }, managedPublishing: true }) });
+    expect(unk.undetermined).toBe(true);
+    expect(verifyPublishChangesApi(unk).ok).toBe(true);
+    expect(verifyPublishChangesApi(unk).rows[0]!.seen).toContain('not determined');
     expect(readyLines(ready).join('\n')).toContain('storebound console plan play-publish-changes');
     expect(readyLines([])).toEqual([]);
     expect(verifyPublishChangesApi(ready).ok).toBe(false);

From fb1609cba77ec86f29daad3e563926ecc155bd43 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:10:23 +0800
Subject: [PATCH 133/255] upload --pre-check/--evidence, shots copy translate,
 game-center --locale-map, play games API-disabled hint

---
 CHANGELOG.md                       |   5 ++
 cli/apple/game-center.ts           |  17 ++--
 cli/apple/upload.ts                |   6 +-
 cli/check.ts                       |   8 ++
 cli/commands.ts                    |   1 +
 cli/data/flags.json                |  35 +++++++-
 cli/games-status.ts                |   2 +-
 cli/lib/config.ts                  |   9 +++
 cli/lib/console-games-plan.ts      |   2 +-
 cli/lib/credentials.ts             |   4 +-
 cli/lib/game-services.ts           |  48 ++++++++++-
 cli/lib/google-errors.ts           |   2 +
 cli/lib/pre-check.ts               |  72 +++++++++++++++++
 cli/lib/ship-step.ts               |   6 +-
 cli/lib/shots-copy-translate.ts    |  75 +++++++++++++++++
 cli/play/games.ts                  |  22 ++++-
 cli/play/upload.ts                 |   6 +-
 cli/shots/copy.ts                  | 125 +++++++++++++++++++++++++++++
 cli/shots/lib.ts                   |   2 +-
 docs/ship-step.md                  |   7 ++
 skills/store-pitfalls/SKILL.md     |  39 +++++++++
 tests/game-services.test.ts        |  53 +++++++++++-
 tests/ship-step.test.ts            |  28 +++++++
 tests/shots-copy-translate.test.ts |  52 ++++++++++++
 24 files changed, 599 insertions(+), 27 deletions(-)
 create mode 100644 cli/lib/pre-check.ts
 create mode 100644 cli/lib/shots-copy-translate.ts
 create mode 100644 cli/shots/copy.ts
 create mode 100644 tests/shots-copy-translate.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b4f69d8..043b6e2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,11 @@
 ## Unreleased
 
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
+||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
+- `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
+- New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
+- `apple game-center --locale-map en=en-GB` (config `games.localeMap`) maps a config language to the live Game Center locale; the dry run suggests it when the live Game Center has exactly one variant of the language.
+- `play games`: a 403 SERVICE_DISABLED / accessNotConfigured names the Google Play Game Services Publishing API, the enable URL for the project and `console plan play-games-services`.
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/cli/apple/game-center.ts b/cli/apple/game-center.ts
index e122b2d..ba757e0 100644
--- a/cli/apple/game-center.ts
+++ b/cli/apple/game-center.ts
@@ -1,5 +1,7 @@
 // Game Center through the App Store Connect API, from the `games` config section (cli/lib/game-services.ts).
-//   storebound apple game-center [status] [--dry] [--yes] [--json]
+//   storebound apple game-center [status] [--locale-map en=en-GB] [--dry] [--yes] [--json]
+// --locale-map (config games.localeMap): config language -> the locale the live Game Center uses; the dry run suggests it
+// when Game Center has exactly one variant of a language (en-GB) and the config says another (en-US).
 // status: read-only (App ID capability, Game Center detail, the editable version's switch, leaderboards and
 // achievements on the store vs the config, the project's entitlement). Default: the upsert. Every write is a
 // find-then-create (createOnce: a conflict or an unclear answer reads the store again, never a second create) or a
@@ -10,7 +12,7 @@ import { consoleLink } from '../lib/console-links';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { dryPlan } from '../lib/dry';
-import { type GcExisting, gcFindings, type ItemPlan, planGameCenter, planRows, usesGameCenter } from '../lib/game-services';
+import { type GcExisting, gcFindings, gcLocaleMap, type ItemPlan, liveGcLocales, planGameCenter, planRows, suggestLocaleMap, usesGameCenter } from '../lib/game-services';
 import { done, log, warn } from '../lib/log';
 import { createOnce } from '../lib/upsert';
 import { type Asc, ascClient, type J } from './asc';
@@ -61,21 +63,24 @@ export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const a = ctx.args;
   const sub = a._[0] ?? 'sync';
-  if (!['sync', 'status'].includes(sub)) throw new Error('usage: storebound apple game-center [status] [--dry] [--yes] [--json]');
+  if (!['sync', 'status'].includes(sub)) throw new Error('usage: storebound apple game-center [status] [--locale-map en=en-GB] [--dry] [--yes] [--json]');
   if (!usesGameCenter(config)) throw new Error('games.gameCenter is not true in storebound.config.ts (game-services skill): nothing to do');
   const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
   const c = await ascClient(root, bundleId, config.apple?.appId);
   const appId = await c.app();
   const s = await readGameCenter(c, bundleId);
   const g = config.games!;
-  const plan = planGameCenter(g, config.languages, s);
+  const localeMap = gcLocaleMap(g, a.many('locale-map'));
+  const plan = planGameCenter(g, config.languages, s, localeMap);
+  const suggest = suggestLocaleMap(config.languages, liveGcLocales(s), localeMap);
   const project = gcFindings(config, readProjectEntitlements(root));
 
-  if (a.has('json')) { console.log(JSON.stringify({ ...stateSummary(s, plan), project, plan }, null, 2)); return; }
+  if (a.has('json')) { console.log(JSON.stringify({ ...stateSummary(s, plan), project, localeMap, ...(suggest.length ? { suggestLocaleMap: suggest } : {}), plan }, null, 2)); return; }
   if (s.capability === false) warn(TAG, `the App ID ${bundleId} has no GAME_CENTER capability: storebound apple signing ensure --dry, then without --dry (games.gameCenter adds it)`);
   if (s.capability === null) warn(TAG, `bundle id ${bundleId} not found in Certificates, Identifiers & Profiles: storebound apple bundle`);
   for (const f of project) (f.level === 'ok' ? log : warn)(TAG, `${f.msg}${f.fix ? ` (${f.fix})` : ''}`);
 
+  for (const x of suggest) warn(TAG, `config language "${x.id}" is ${x.from}, but the live Game Center has only ${x.to} for that language, so ${x.from} would be created next to it. Map it: storebound apple game-center --locale-map ${x.id}=${x.to} (or games: { localeMap: { ${x.id}: '${x.to}' } } in the config)`);
   const rows = [
     { item: 'Game Center (app)', action: s.detail ? 'keep' : 'create', detail: 'POST /v1/gameCenterDetails' },
     ...(s.version ? [{ item: `Game Center (version ${s.version.versionString})`, action: s.version.enabled ? 'keep' : 'create', detail: 'POST /v1/gameCenterAppVersions' }] : []),
@@ -122,7 +127,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   // read back: the store must now match the config (lists can lag right after a create: say so, do not fail)
   const after = await readGameCenter(c, bundleId);
-  const left = planGameCenter(g, config.languages, after).filter(p => p.action !== 'keep' || p.locales.some(l => l.action !== 'keep'));
+  const left = planGameCenter(g, config.languages, after, localeMap).filter(p => p.action !== 'keep' || p.locales.some(l => l.action !== 'keep'));
   if (!after.detail || left.length) warn(TAG, `read back: ${!after.detail ? 'no Game Center detail yet; ' : ''}${left.map(p => `${p.kind} ${p.id}`).join(', ') || ''} not listed as written yet (App Store Connect lists lag after a create): run storebound apple game-center status in a minute`);
   done(TAG, `Game Center: ${after.leaderboards.length} leaderboard(s), ${after.achievements.length} achievement(s); images and review go with the next version (${consoleLink('asc.version')})`);
 }
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 6868d25..966019f 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -1,5 +1,5 @@
 // Upload an IPA to App Store Connect and wait until Apple has processed the build.
-//   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--dry] [--yes] [--json]
+//   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 // Default IPA: the newest in <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
 // --build N the one with that build number. The bundle id, version and build number come from the IPA's Info.plist.
 // An IPA whose build number is already on App Store Connect fails with exit 1 (a stale IPA left by a failed
@@ -16,6 +16,7 @@
 // with `apple testflight wait` (waitForBuild) until processingState is VALID (exit 0), INVALID / FAILED (exit 1) or the
 // timeout (exit 7).
 // An upload is a write: --dry shows the plan; a real run asks first (--yes in scripts).
+import { runPreCheck } from '../lib/pre-check';
 import { appleSdkProblem } from '../lib/store-minimums';
 import { closeSync, existsSync, openSync, readdirSync, readSync, statSync } from 'node:fs';
 import { basename, join, relative } from 'node:path';
@@ -251,6 +252,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // upload when NSPrivacyTracking and NSPrivacyTrackingDomains disagree (ITMS-91064), so stop before any network call
   const privacy = bundleTrackingIssues(ipaManifests(ipa));
   if (privacy.length) throw new Error(`${relative(root, ipa)}: not uploaded, Apple would refuse it as Invalid Binary:\n${privacy.map(x => `  ${x}`).join('\n')}\nFix the manifest, rebuild (storebound apple build) and upload the new IPA.`);
+  const pre = await runPreCheck({ args: a, config, root, resolve, file: ipa, shown: relative(root, ipa), tag: TAG });
   const size = statSync(ipa).size;
   const dry = a.has('dry');
   const json = a.has('json');
@@ -294,7 +296,7 @@ export async function run(ctx: Ctx): Promise<void> {
     ? [describeReq(reqs.upload), describeReq(reqs.file('<upload id>')), `PUT the file parts to the upload URLs Apple returns`, describeReq(reqs.commit('<file id>', '<md5>')), 'GET /v1/buildUploads/<id> until COMPLETE']
     : [showCmd(altoolArgs(ipa, { keyPath: '$ASC_P8', keyId: '$ASC_KEY_ID', issuerId: '$ASC_ISSUER_ID' }), null)];
   if (wait) plan.push(`GET /v1/builds?filter[version]=${info.build} until processingState is VALID (timeout ${a.str('timeout', '60m')})`);
-  const summary = { ipa: relative(root, ipa), bundleId: info.bundleId, version: info.version, build: info.build, sizeMB: Math.round(size / 104857.6) / 10, via, plan };
+  const summary = { ipa: relative(root, ipa), bundleId: info.bundleId, version: info.version, build: info.build, sizeMB: Math.round(size / 104857.6) / 10, via, plan, ...(pre ? { preCheck: pre } : {}) };
   if (dry) {
     if (json) { printJson(summary); return; }
     log(TAG, `${summary.ipa}: ${info.bundleId} ${info.version} (${info.build}), ${summary.sizeMB} MB, build number free`);
diff --git a/cli/check.ts b/cli/check.ts
index ed1f5ab..89ddd21 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -5,6 +5,7 @@
 //   storebound check --aso    keyword audit of both listing files (App Store keyword field, Play stuffing); exit 1 on errors
 //   --json                    structured result ({ ok, items, warnings, hints, problems } or { findings, errors }), exit 1 on problems
 import { localGameFindings } from './games-status';
+import { marksNotes, marksPath, parseMarks } from './lib/shots-copy-translate';
 import { templateBlockers } from './lib/template-answers';
 import { COPYRIGHT_MISSING, templatePlaceholders } from './lib/validate-rules';
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
@@ -212,6 +213,13 @@ export async function run(ctx: Ctx): Promise<void> {
     if (e.length) throw new Error(e.join('; '));
     return `${Object.keys(copy).length} languages x ${config.shots!.scenes.length} scenes`;
   });
+  if (config.shots) {
+    try {
+      const cp = resolve(config.shots.copy);
+      const mf = marksPath(cp);
+      if (existsSync(mf)) for (const n of marksNotes(parseMarks(readFileSync(mf, 'utf8')), relative(process.cwd(), cp) || cp)) note(n);
+    } catch { /* unreadable marks: shots copy check says so */ }
+  }
   // Capacitor: the native builds ship the web assets cap sync copied last (pitfall 20)
   for (const store of ['apple', 'play'] as const) {
     if (!config[store] || prebuildFor(config, store)) continue;
diff --git a/cli/commands.ts b/cli/commands.ts
index ddce923..e4df348 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -103,6 +103,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'shots capture': [() => import('./shots/capture'), 'raw frames: --source web (playwright; signed-in apps: shots.capture.auth) | ios-sim (simctl) | android-emu (adb) | folder; --dry'],
   'shots login': [() => import('./shots/login'), 'opens a visible browser (fresh profile) at shots.capture.baseUrl or --url; you sign in to a demo account by hand, Enter saves .storebound/auth.json (0600) for shots.capture.auth.storageState; --timeout <s>'],
   'shots fonts': [() => import('./shots/fonts'), 'download font subsets for the copy (CJK / Arabic / Cyrillic ...)'],
+  'shots copy': [() => import('./shots/copy'), 'translate --to de,es [--from en] [--translate "<command>"]: fill store/shots/copy.json per language (machine-translated until reviewed, caption limits); check | reviewed --lang de'],
   'shots render': [() => import('./shots/render'), 'store screenshots + feature graphic in every size and language'],
   'shots jpeg': [() => import('./shots/jpeg'), 'JPEG q92 copies of the Play renders (4x faster uploads)'],
   'shots check': [() => import('./shots/check'), 'local store checks of the renders (size, alpha, counts, overflow) and folder frames; --variants, --json'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 5fc96bf..9707cf8 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -73,6 +73,7 @@
    "configuration",
    "env-file",
    "keychain",
+   "locale-map",
    "no-install",
    "no-prebuild",
    "out",
@@ -113,6 +114,7 @@
   ],
   "apple game-center": [
    "keychain",
+   "locale-map",
    "no-install"
   ],
   "apple iap": [
@@ -223,6 +225,7 @@
    "build",
    "env-file",
    "keychain",
+   "locale-map",
    "new-version",
    "no-install",
    "no-submit",
@@ -250,11 +253,13 @@
   ],
   "apple signing": [
    "keychain",
+   "locale-map",
    "no-install"
   ],
   "apple status": [
    "cancel-submission",
    "keychain",
+   "locale-map",
    "no-install",
    "platform",
    "timeout",
@@ -265,6 +270,7 @@
    "build",
    "env-file",
    "keychain",
+   "locale-map",
    "new-version",
    "no-install",
    "no-submit",
@@ -324,6 +330,7 @@
    "build",
    "csv",
    "env-file",
+   "evidence",
    "group",
    "internal-only",
    "invite",
@@ -331,6 +338,7 @@
    "locale",
    "no-wait",
    "older-than",
+   "pre-check",
    "progress",
    "remove",
    "result-file",
@@ -440,6 +448,7 @@
    "flutter",
    "godot",
    "keychain",
+   "locale-map",
    "name",
    "no-install",
    "react-native",
@@ -545,6 +554,7 @@
   ],
   "games status": [
    "keychain",
+   "locale-map",
    "no-install"
   ],
   "health": [
@@ -780,9 +790,11 @@
   ],
   "play upload": [
    "env-file",
+   "evidence",
    "include-drafts",
    "name",
    "not-sent-for-review",
+   "pre-check",
    "progress",
    "prune",
    "result-file",
@@ -928,6 +940,14 @@
    "src",
    "variants"
   ],
+  "shots copy": [
+   "all",
+   "force",
+   "from",
+   "lang",
+   "to",
+   "translate"
+  ],
   "shots fonts": [],
   "shots gallery": [
    "lang",
@@ -1024,6 +1044,7 @@
    "jobs",
    "keychain",
    "lang",
+   "locale-map",
    "no-health",
    "no-install",
    "no-local",
@@ -1140,6 +1161,7 @@
    "end",
    "env-file",
    "every",
+   "evidence",
    "experiment",
    "expo",
    "fields",
@@ -1188,6 +1210,7 @@
    "listing-text",
    "listings",
    "locale",
+   "locale-map",
    "lookup",
    "manual-release",
    "max-level",
@@ -1243,6 +1266,7 @@
    "plist",
    "port",
    "poster",
+   "pre-check",
    "production",
    "profile",
    "progress",
@@ -1401,7 +1425,7 @@
    "storebound apple events submit --name \"...\" [--dry] [--yes]  into a review submission (the owner's step; asks)"
   ],
   "apple game-center": [
-   "storebound apple game-center [status] [--dry] [--yes] [--json]"
+   "storebound apple game-center [status] [--locale-map en=en-GB] [--dry] [--yes] [--json]"
   ],
   "apple iap": [
    "storebound apple iap [--dry] [--only id1,id2] [--allow-price-changes]"
@@ -1480,7 +1504,7 @@
    "storebound apple testflight expire (--keep N | --older-than D) [--version x.y.z] [--dry] [--yes] [--json]"
   ],
   "apple upload": [
-   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--dry] [--yes] [--json]"
+   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
   ],
   "apple win-back": [
    "storebound apple win-back [--only sub1,sub2] [--dry] [--yes] [--json]"
@@ -1629,7 +1653,7 @@
    "storebound play subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--yes] [--allow-price-changes]"
   ],
   "play upload": [
-   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]"
+   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
   ],
   "prices": [
    "storebound prices export [--out store/prices.csv] [--store apple|play] [--only ids] [--with-automatic] [--no-subscriptions] [--dry] [--json]",
@@ -1677,6 +1701,11 @@
   "shots check": [
    "storebound shots check [--lang en,tr] [--variants] [--json]"
   ],
+  "shots copy": [
+   "storebound shots copy translate --to de,es [--from en] [--translate \"<command>\"] [--force] [--dry] [--json]",
+   "storebound shots copy check [--json]               marked languages, caption limits; exit 1 on a problem",
+   "storebound shots copy reviewed --lang de[,es] | --all [--dry]   a human read the copy: remove its marker"
+  ],
   "shots fonts": [
    "storebound shots fonts [--json]     (re-run after editing the copy or the fonts)"
   ],
diff --git a/cli/games-status.ts b/cli/games-status.ts
index a1a2048..5a06489 100644
--- a/cli/games-status.ts
+++ b/cli/games-status.ts
@@ -47,7 +47,7 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
       const c = await ascClient(root, config.apple.bundleId, config.apple.appId);
       const s = await readGameCenter(c, config.apple.bundleId);
       out.apple = { capability: s.capability, enabled: !!s.detail, version: s.version?.versionString ?? null, versionEnabled: s.version ? s.version.enabled : null,
-        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(planGameCenter(g, config.languages, s)), why: gcUse.why ?? undefined };
+        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(planGameCenter(g, config.languages, s, g.localeMap)), why: gcUse.why ?? undefined };
     } catch (e) { out.apple = { capability: null, enabled: false, version: null, versionEnabled: null, leaderboards: 0, achievements: 0, config: count('apple'), changes: [], error: (e as Error).message.slice(0, 300) }; }
   }
   if (config.play && usesPlayGames(config) && o.play !== false) {
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index e6e87cc..f300e23 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -768,6 +768,15 @@ export interface ShipConfig {
     /** Words `whats-new check` must not flag as internal jargon (a product or game term that collides), any case. */
     allowWords?: string[];
   };
+  /** Uploads (`apple upload`, `play upload`). */
+  upload?: {
+    /** Shell command run before any byte is sent; `{file}` is the IPA / AAB path. A nonzero exit refuses the upload
+     *  (ship-step error code PRE_CHECK_FAILED). `--pre-check` overrides it. */
+    preCheck?: string;
+    /** Where the pre-check evidence JSON (file, sha256, size, command, exit code, stdout tail, time, storebound
+     *  version) is written. `--evidence` overrides it. */
+    evidence?: string;
+  };
   /** Native builds (`apple build`, `play build`). */
   build?: {
     /** Shell command run in the project root before the archive / bundle, e.g. "npm run build && npx cap sync" for a
diff --git a/cli/lib/console-games-plan.ts b/cli/lib/console-games-plan.ts
index 48bb8cc..c3c9b4a 100644
--- a/cli/lib/console-games-plan.ts
+++ b/cli/lib/console-games-plan.ts
@@ -49,7 +49,7 @@ export function playGamesPart(config: ShipConfig, p: PlanIds): Part {
       { n: 5, text: `Credentials > Add credential > Android: pick ${pkg}; it links to an OAuth client in Google Cloud. Create it at ${GOOGLE_CLOUD_CREDENTIALS} > Create credentials > OAuth client ID > Android (package ${pkg}, the SHA-1 of step 4) > Create, then back in Play Console pick that client > Save changes.`, click: ['Add credential', 'Save changes'], answers: ['package', 'sha1'] },
       { n: 6, text: `Only with a game server (ask-owner): Add credential > Game server: create a Web application OAuth client at ${GOOGLE_CLOUD_CREDENTIALS}, pick it, Save changes. Its client id goes into the game's requestServerSideAccess; the client secret stays on the server (never in chat or files here).`, answers: ['webClient'] },
       { n: 7, text: 'Copy the project id (Configuration page, "Project ID" / Get resources): write it to games.playGames.appId, and put the resources XML into android/app/src/main/res/values/games-ids.xml. `storebound check` then compares it with the manifest\'s com.google.android.gms.games.APP_ID.' },
-      { n: 8, text: `Leaderboards (${lb}) and achievements (${ach}) come from the config: run \`storebound play games --dry\`, then without --dry (the Configuration API; drafts only). Play needs at least 5 achievements before it publishes the games project.` },
+      { n: 8, text: `Leaderboards (${lb}) and achievements (${ach}) come from the config: run \`storebound play games --dry\`, then without --dry (the Configuration API; drafts only). If it answers 403 SERVICE_DISABLED / accessNotConfigured, the Google Play Game Services Publishing API is off in the service account's Cloud project: open https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=<project id of the service account key> (the error names the project), press Enable, wait a minute, run it again. Play needs at least 5 achievements before it publishes the games project.` },
       { n: 9, text: 'Testers: Play Games Services > Testers lists who can sign in before publishing (the owner adds them; storebound never invites testers).' },
       { n: 10, text: `Stop before "${PGS_PUBLISH}" (Review and publish): the owner presses it. Then read the page text and pipe it to \`storebound console verify play-games-services --from-text -\`.` },
     ],
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index 709be38..186a8fe 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -28,7 +28,7 @@ import { homedir, tmpdir } from 'node:os';
 import { isAbsolute, join, resolve } from 'node:path';
 import * as rt from './rt';
 
-export interface ServiceAccount { client_email: string; private_key: string; token_uri?: string }
+export interface ServiceAccount { client_email: string; private_key: string; token_uri?: string; project_id?: string }
 export interface AscKey { keyId: string; issuerId: string; pem: string }
 export interface ReviewContact { firstName: string; lastName: string; phone: string; email: string }
 
@@ -201,7 +201,7 @@ export function parseServiceAccount(text: string): ServiceAccount {
   const j = JSON.parse(text) as Partial<ServiceAccount>;
   if (typeof j.client_email !== 'string' || typeof j.private_key !== 'string' || !j.private_key.includes('PRIVATE KEY'))
     throw new Error('not a Google service account JSON key (client_email / private_key missing)');
-  return { client_email: j.client_email, private_key: j.private_key, token_uri: j.token_uri };
+  return { client_email: j.client_email, private_key: j.private_key, token_uri: j.token_uri, ...(typeof j.project_id === 'string' ? { project_id: j.project_id } : {}) };
 }
 
 export function playServiceAccount(root: string): ServiceAccount {
diff --git a/cli/lib/game-services.ts b/cli/lib/game-services.ts
index 9de1f7f..47fd17c 100644
--- a/cli/lib/game-services.ts
+++ b/cli/lib/game-services.ts
@@ -65,6 +65,8 @@ export interface GamesConfig {
   gameCenter?: boolean;
   /** Play Games Services: the games project id (the digits of games_APP_ID / com.google.android.gms.games.APP_ID). */
   playGames?: { appId?: string };
+  /** Game Center only: config language id (or its apple locale) -> the locale the live Game Center uses, e.g. { en: 'en-GB' } when the app's English is en-GB there but the language says en-US. `storebound apple game-center --locale-map en=en-GB` overrides. */
+  localeMap?: Record<string, string>;
   leaderboards?: GameLeaderboard[];
   achievements?: GameAchievement[];
 }
@@ -78,6 +80,10 @@ export function validateGames(g: GamesConfig | undefined, languages: Language[]
   if (g.gameCenter !== undefined && typeof g.gameCenter !== 'boolean') e.push('games.gameCenter: true | false');
   if (g.playGames !== undefined && (typeof g.playGames !== 'object' || (g.playGames.appId !== undefined && !/^\d{6,20}$/.test(String(g.playGames.appId)))))
     e.push('games.playGames.appId: the digits of the Play Games Services project id (games_APP_ID)');
+  if (g.localeMap !== undefined) {
+    if (!g.localeMap || typeof g.localeMap !== 'object' || Array.isArray(g.localeMap)) e.push('games.localeMap: an object { en: "en-GB" } (config language id or locale -> Game Center locale)');
+    else for (const [k, v] of Object.entries(g.localeMap)) if (typeof v !== 'string' || !/^[A-Za-z]{2,3}(-[A-Za-z0-9]{2,8})*$/.test(v)) e.push(`games.localeMap.${k}: "${String(v)}" is not a locale like en-GB`);
+  }
   const langs = new Set(languages.map(l => l.id));
   const seen = new Set<string>();
   const checkId = (kind: string, id: unknown) => {
@@ -133,7 +139,41 @@ export function changedFields(have: Record<string, unknown> | undefined, want: R
   return Object.keys(want).filter(k => JSON.stringify(have?.[k] ?? null) !== JSON.stringify(want[k] ?? null));
 }
 
-const appleLocale = (languages: Language[], id: string): string | undefined => languages.find(l => l.id === id)?.apple;
+const appleLocale = (languages: Language[], id: string, map: Record<string, string> = {}): string | undefined => {
+  const apple = languages.find(l => l.id === id)?.apple;
+  return map[id] ?? (apple ? map[apple] : undefined) ?? apple;
+};
+
+/** The effective Game Center locale map: games.localeMap, then --locale-map en=en-GB,tr=tr (flag entries win). */
+export function gcLocaleMap(g: GamesConfig | undefined, flag: string[] = []): Record<string, string> {
+  const out: Record<string, string> = { ...(g?.localeMap ?? {}) };
+  for (const item of flag.flatMap(x => x.split(',')).map(x => x.trim()).filter(Boolean)) {
+    const m = /^([A-Za-z0-9_-]+)=([A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*)$/.exec(item);
+    if (!m) throw new Error(`--locale-map "${item}": use <config language id or locale>=<Game Center locale>, e.g. en=en-GB (several: en=en-GB,pt=pt-PT)`);
+    out[m[1]!] = m[2]!;
+  }
+  return out;
+}
+
+/** A suggestion per config language whose Game Center locale is not on the live Game Center while exactly one other
+ *  variant of the same language is (en-US configured, only en-GB live): the map entry that stops the spurious creates. */
+export function suggestLocaleMap(languages: Language[], liveLocales: string[], map: Record<string, string> = {}): { id: string; from: string; to: string }[] {
+  const live = [...new Set(liveLocales)];
+  if (!live.length) return [];
+  const out: { id: string; from: string; to: string }[] = [];
+  for (const l of languages) {
+    const from = appleLocale(languages, l.id, map);
+    if (!from || live.includes(from) || map[l.id] || map[l.apple ?? '']) continue;
+    const base = from.split('-')[0]!.toLowerCase();
+    const same = live.filter(x => x.split('-')[0]!.toLowerCase() === base);
+    if (same.length === 1) out.push({ id: l.id, from, to: same[0]! });
+  }
+  return out;
+}
+
+/** The live locales of a Game Center read (every leaderboard and achievement localization). */
+export const liveGcLocales = (have: { leaderboards: GcExisting[]; achievements: GcExisting[] }): string[] =>
+  [...have.leaderboards, ...have.achievements].flatMap(x => x.localizations.map(l => String(l.attributes.locale ?? '')).filter(Boolean));
 
 export function gcLeaderboardAttrs(l: GameLeaderboard): Record<string, unknown> {
   return {
@@ -151,7 +191,7 @@ export interface GcExisting { id: string; attributes: Record<string, unknown>; l
 
 /** Game Center plan: matched by vendorIdentifier; create what is missing, PATCH what differs, keep the rest. Archived
  *  items on the store are left alone (an archived vendor id cannot be reused; the plan names it). */
-export function planGameCenter(g: GamesConfig, languages: Language[], have: { leaderboards: GcExisting[]; achievements: GcExisting[] }): ItemPlan[] {
+export function planGameCenter(g: GamesConfig, languages: Language[], have: { leaderboards: GcExisting[]; achievements: GcExisting[] }, localeMap: Record<string, string> = {}): ItemPlan[] {
   const out: ItemPlan[] = [];
   const one = (kind: ItemPlan['kind'], id: string, attrs: Record<string, unknown>, locs: Record<string, Record<string, unknown>>, list: GcExisting[]) => {
     const cur = list.find(x => x.attributes.vendorIdentifier === id);
@@ -166,7 +206,7 @@ export function planGameCenter(g: GamesConfig, languages: Language[], have: { le
   for (const l of (g.leaderboards ?? []).filter(x => onStore(x, 'apple'))) {
     const locs: Record<string, Record<string, unknown>> = {};
     for (const [k, v] of Object.entries(l.locales)) {
-      const loc = appleLocale(languages, k);
+      const loc = appleLocale(languages, k, localeMap);
       if (loc) locs[loc] = { name: v.name, ...(v.suffix ? { formatterSuffix: v.suffix } : {}) };
     }
     one('leaderboard', l.id, gcLeaderboardAttrs(l), locs, have.leaderboards);
@@ -174,7 +214,7 @@ export function planGameCenter(g: GamesConfig, languages: Language[], have: { le
   for (const a of (g.achievements ?? []).filter(x => onStore(x, 'apple'))) {
     const locs: Record<string, Record<string, unknown>> = {};
     for (const [k, v] of Object.entries(a.locales)) {
-      const loc = appleLocale(languages, k);
+      const loc = appleLocale(languages, k, localeMap);
       if (loc) locs[loc] = { name: v.name, beforeEarnedDescription: v.description, afterEarnedDescription: v.earned ?? v.description };
     }
     one('achievement', a.id, gcAchievementAttrs(a), locs, have.achievements);
diff --git a/cli/lib/google-errors.ts b/cli/lib/google-errors.ts
index 91c0349..606307e 100644
--- a/cli/lib/google-errors.ts
+++ b/cli/lib/google-errors.ts
@@ -19,6 +19,7 @@ export const PLAY_USERS_URL = 'https://play.google.com/console/developers/users-
 const TITLES: Record<string, string> = {
   'playdeveloperreporting.googleapis.com': 'Google Play Developer Reporting API',
   'androidpublisher.googleapis.com': 'Google Play Android Developer API',
+  'gamesconfiguration.googleapis.com': 'Google Play Game Services Publishing API',
   'storage.googleapis.com': 'Cloud Storage API',
   'storage-api.googleapis.com': 'Cloud Storage API',
 };
@@ -26,6 +27,7 @@ const TITLES: Record<string, string> = {
 const NEEDS: Record<string, string> = {
   'playdeveloperreporting.googleapis.com': 'Crash and ANR data',
   'androidpublisher.googleapis.com': 'Reading and updating the app on Google Play',
+  'gamesconfiguration.googleapis.com': 'Play Games Services leaderboards and achievements (storebound play games)',
   'storage.googleapis.com': 'Play statistics (store listing visitors, installs)',
   'storage-api.googleapis.com': 'Play statistics (store listing visitors, installs)',
 };
diff --git a/cli/lib/pre-check.ts b/cli/lib/pre-check.ts
new file mode 100644
index 0000000..f85bb15
--- /dev/null
+++ b/cli/lib/pre-check.ts
@@ -0,0 +1,72 @@
+// The pre-upload check of `apple upload` and `play upload`: a shell command the project owns (a store-readiness gate,
+// a policy scan of the binary) runs before any byte is sent.
+//   --pre-check "<cmd with {file}>"   (config: upload.preCheck)   {file} is replaced by the quoted IPA / AAB path
+//   --evidence <path.json>            (config: upload.evidence)   what ran, written also when the check fails
+// A nonzero exit refuses the upload: ShipStepError PRE_CHECK_FAILED (exit 1 under the ship-step contract), nothing
+// is sent. The evidence ({file, sha256, size, command, exitCode, stdoutTail, timestamp, storeboundVersion}) goes to
+// --evidence and into the --json / --result-file result as `preCheck`.
+import { createHash } from 'node:crypto';
+import { mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { basename, dirname } from 'node:path';
+import type { Args } from './args';
+import type { ShipConfig } from './config';
+import { log } from './log';
+import { pump } from './runner';
+import * as rt from './rt';
+import { SHIP_EXIT, ShipStepError, shipExtra, shipPhase } from './ship-step';
+
+export interface PreCheckEvidence {
+  file: string; sha256: string; size: number; command: string; exitCode: number;
+  stdoutTail: string[]; timestamp: string; storeboundVersion: string;
+}
+
+/** The command with {file} replaced by the POSIX-quoted path (sh -c); a command without {file} gets none. */
+export function preCheckCommand(template: string, file: string): string {
+  const q = `'${file.replace(/\\/g, '/').replace(/'/g, `'\\''`)}'`;
+  return template.split('{file}').join(q);
+}
+
+function sha256File(path: string): string { return createHash('sha256').update(readFileSync(path)).digest('hex'); }
+
+/**
+ * Runs the pre-check for `file` when --pre-check / upload.preCheck is set (else returns null). Throws PRE_CHECK_FAILED
+ * on a nonzero exit, after writing the evidence. `shown` is the file name for the evidence (not the absolute path).
+ */
+export async function runPreCheck(o: { args: Args; config: ShipConfig; root: string; resolve: (p: string) => string; file: string; shown: string; tag: string }): Promise<PreCheckEvidence | null> {
+  const flag = o.args.get('pre-check');
+  if (flag === 'true') throw new Error('--pre-check "<command with {file}>" needs a command');
+  const template = (flag ?? o.config.upload?.preCheck)?.trim();
+  const evFlag = o.args.get('evidence');
+  if (evFlag === 'true') throw new Error('--evidence <path.json> needs a path');
+  const evPath = evFlag ?? o.config.upload?.evidence;
+  if (!template) {
+    if (evFlag) throw new Error('--evidence needs --pre-check (or upload.preCheck in the config)');
+    return null;
+  }
+  const command = preCheckCommand(template, o.file);
+  shipPhase('pre-check', command);
+  log(o.tag, `pre-check: $ ${command}`);
+  const p = rt.spawn(['sh', '-c', command], { cwd: o.root, stdin: 'ignore', stdout: 'pipe', stderr: 'pipe', env: process.env });
+  const tail: string[] = [];
+  const each = (line: string, kind: 'stdout' | 'stderr'): void => {
+    if (kind === 'stdout') { tail.push(line); if (tail.length > 20) tail.shift(); }
+    console.error(`  ${line}`);
+  };
+  await Promise.all([pump(p.stdout, 'stdout', each), pump(p.stderr, 'stderr', each)]);
+  const exitCode = Number(await p.exited);
+  const version = ((await import('../../package.json')) as { version: string }).version;
+  const ev: PreCheckEvidence = {
+    file: o.shown.split('\\').join('/'), sha256: sha256File(o.file), size: statSync(o.file).size, command, exitCode,
+    stdoutTail: tail, timestamp: new Date().toISOString(), storeboundVersion: version,
+  };
+  if (evPath) {
+    const abs = o.resolve(evPath);
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, JSON.stringify(ev, null, 2) + '\n');
+    log(o.tag, `pre-check evidence: ${basename(abs)}`);
+  }
+  shipExtra({ preCheck: ev });
+  if (exitCode !== 0) throw new ShipStepError(`pre-check failed (exit ${exitCode}), nothing was uploaded: ${command}${tail.length ? `\n${tail.slice(-5).join('\n')}` : ''}`, SHIP_EXIT.failure, 'PRE_CHECK_FAILED');
+  log(o.tag, 'pre-check: ok');
+  return ev;
+}
diff --git a/cli/lib/ship-step.ts b/cli/lib/ship-step.ts
index 796ce18..af8e3da 100644
--- a/cli/lib/ship-step.ts
+++ b/cli/lib/ship-step.ts
@@ -59,7 +59,7 @@ type Fields = Partial<Pick<ShipResult, 'track' | 'version' | 'build' | 'state' |
 interface Run {
   key: string; step: string; store: 'apple' | 'play';
   progress: boolean;
-  fields: Fields; noop: boolean; warnings: string[]; detail?: unknown; declined?: string;
+  fields: Fields; extra?: Record<string, unknown>; noop: boolean; warnings: string[]; detail?: unknown; declined?: string;
 }
 const RUN = Symbol.for('storebound.shipRun');
 const g = globalThis as unknown as Record<symbol, Run | null | undefined>;
@@ -69,6 +69,8 @@ export const shipRun = (): Run | null => g[RUN] ?? null;
 
 /** What the command did: fields of the final result (later calls overwrite earlier ones). */
 export function shipReport(f: Fields): void { const r = shipRun(); if (r) Object.assign(r.fields, Object.fromEntries(Object.entries(f).filter(([, v]) => v !== undefined))); }
+/** Extra keys of the final result (e.g. the preCheck evidence), kept also when the step fails. */
+export function shipExtra(x: Record<string, unknown>): void { const r = shipRun(); if (r) r.extra = { ...r.extra, ...x }; }
 /** Nothing to do (the build is on the store already, the release is there): exit 7 with what is there. */
 export function shipNoop(f: Fields = {}): void { const r = shipRun(); if (r) { r.noop = true; shipReport(f); } }
 /** A warning for the result's warnings[] (the log line is the command's own). */
@@ -178,7 +180,7 @@ export function buildResult(run: Run, exit: ShipExitCode, error?: ShipErrorInfo)
     ...(f.artifact ? { artifact: f.artifact } : {}),
     ...(error ? { error } : {}),
   };
-  return { ...out, ...Object.fromEntries(Object.entries(own).filter(([k]) => !(k in out) && !CONTRACT_KEYS.has(k))) } as ShipResult & Record<string, unknown>;
+  return { ...out, ...(run.extra ?? {}), ...Object.fromEntries(Object.entries(own).filter(([k]) => !(k in out) && !CONTRACT_KEYS.has(k))) } as ShipResult & Record<string, unknown>;
 }
 const CONTRACT_KEYS = new Set(['ok', 'step', 'store', 'track', 'version', 'build', 'state', 'url', 'warnings', 'artifact', 'error']);
 
diff --git a/cli/lib/shots-copy-translate.ts b/cli/lib/shots-copy-translate.ts
new file mode 100644
index 0000000..2145bc4
--- /dev/null
+++ b/cli/lib/shots-copy-translate.ts
@@ -0,0 +1,75 @@
+// Screenshot copy translation (`storebound shots copy translate`): fills the languages of shots.copy (store/shots/
+// copy.json: language id -> scene id -> {eyebrow, title [line1, line2], sub, badges}) from the source language's copy.
+// Pure. Like the listing (lib/listing-translate.ts) the CLI never calls a translation service: the agent translates the
+// sections marked "translate", or `--translate "<command>"` runs a command of your own once per caption field. A
+// language written by this command is machine-translated until a human read it: the marker lives next to the copy file
+// (copy.translations.json), because copy.json itself has no place for comments:
+//   { "de": { "from": "en", "status": "translate" | "draft" } }
+//   translate: the source text was copied in, still to translate    draft: machine-translated, review then `shots copy reviewed`
+// Caption limits (characters, per line / field), so a translation still fits the template without the overflow
+// `shots check` would flag: eyebrow 30, each of the two title lines 28, sub 90, a badge 18. A translation over its limit
+// is not kept (the source text stays and the language stays "translate").
+import type { SceneCopy } from '../shots/lib';
+
+export type CopyStatus = 'translate' | 'draft';
+export type CopyMarks = Record<string, { from: string; status: CopyStatus }>;
+
+export const CAPTION_LIMITS = { eyebrow: 30, title: 28, sub: 90, badge: 18 } as const;
+
+export const marksPath = (copyPath: string): string => copyPath.replace(/\.json$/i, '') + '.translations.json';
+
+export interface CopyField { key: string; text: string; limit: number }
+
+/** The translatable strings of a scene, in a fixed order (key: eyebrow, title.0, title.1, sub, badge.<n>.<0|1>). */
+export function sceneFields(sc: SceneCopy): CopyField[] {
+  const out: CopyField[] = [];
+  if (sc.eyebrow) out.push({ key: 'eyebrow', text: sc.eyebrow, limit: CAPTION_LIMITS.eyebrow });
+  sc.title.forEach((t, i) => { if (t) out.push({ key: `title.${i}`, text: t, limit: CAPTION_LIMITS.title }); });
+  if (sc.sub) out.push({ key: 'sub', text: sc.sub, limit: CAPTION_LIMITS.sub });
+  (sc.badges ?? []).forEach((b, i) => b.forEach((t, j) => { if (t) out.push({ key: `badge.${i}.${j}`, text: t, limit: CAPTION_LIMITS.badge }); }));
+  return out;
+}
+
+/** The scene with the given field texts put in (keys of sceneFields; a missing key keeps the source text). */
+export function applyFields(src: SceneCopy, texts: Record<string, string>): SceneCopy {
+  const t = (key: string, d: string): string => texts[key] ?? d;
+  const out: SceneCopy = { title: [t('title.0', src.title[0]), t('title.1', src.title[1])] };
+  if (src.eyebrow !== undefined) out.eyebrow = t('eyebrow', src.eyebrow);
+  if (src.sub !== undefined) out.sub = t('sub', src.sub);
+  if (src.badges) out.badges = src.badges.map((b, i) => b.map((x, j) => (x === undefined ? x : t(`badge.${i}.${j}`, x))) as [string, string?]);
+  return out;
+}
+
+/** Characters the way a person counts them (code points). */
+export const chars = (s: string): number => [...s].length;
+
+export interface SceneCheck { scene: string; field: string; chars: number; limit: number }
+/** Fields of a language's copy over their caption limit. */
+export function overLimit(copy: Record<string, SceneCopy> | undefined): SceneCheck[] {
+  const out: SceneCheck[] = [];
+  for (const [scene, sc] of Object.entries(copy ?? {})) for (const f of sceneFields(sc)) if (chars(f.text) > f.limit) out.push({ scene, field: f.key, chars: chars(f.text), limit: f.limit });
+  return out;
+}
+
+/** Parses the marks file; anything unreadable counts as no marks. */
+export function parseMarks(text: string | null): CopyMarks {
+  if (!text) return {};
+  try {
+    const j = JSON.parse(text) as Record<string, { from?: unknown; status?: unknown }>;
+    return Object.fromEntries(Object.entries(j).filter(([, v]) => v && (v.status === 'translate' || v.status === 'draft') && typeof v.from === 'string')
+      .map(([k, v]) => [k, { from: v.from as string, status: v.status as CopyStatus }]));
+  } catch { return {}; }
+}
+
+/** One line per marked language for `storebound check` / `shots copy check`; empty when nothing is marked. */
+export function marksNotes(marks: CopyMarks, where: string): string[] {
+  const todo = Object.entries(marks).filter(([, m]) => m.status === 'translate').map(([k]) => k);
+  const drafts = Object.entries(marks).filter(([, m]) => m.status === 'draft').map(([k]) => k);
+  return [
+    ...(todo.length ? [`${where}: not translated yet (status=translate): ${todo.join(', ')} (storebound shots copy translate --to ${todo.join(',')})`] : []),
+    ...(drafts.length ? [`${where}: machine-translated drafts not reviewed: ${drafts.join(', ')} (storebound shots copy reviewed --lang <ids> after reading them)`] : []),
+  ];
+}
+
+/** The fix to name in "no copy" problems of validateCopy. */
+export const copyFix = (lang: string): string => `storebound shots copy translate --to ${lang}`;
diff --git a/cli/play/games.ts b/cli/play/games.ts
index 3cebf46..009683f 100644
--- a/cli/play/games.ts
+++ b/cli/play/games.ts
@@ -14,16 +14,30 @@ import { confirm, need } from '../lib/ctx';
 import { dryPlan } from '../lib/dry';
 import { hasAndroidProject, type ItemPlan, pgsFindings, type PlayExisting, planPlayGames, planRows, readPgsProject, usesPlayGames } from '../lib/game-services';
 import { PLAY_SCOPE, tokenSource } from '../lib/google-auth';
+import { enableUrl, findingText, parseGoogleError } from '../lib/google-errors';
 import { errorBody } from '../lib/http';
 import { done, log, warn } from '../lib/log';
 import * as rt from '../lib/rt';
 import { AmbiguousWriteError, createOnce, retrySafe } from '../lib/upsert';
 
 const TAG = 'play-games';
+export const GAMES_SERVICE = 'gamesconfiguration.googleapis.com';
+export const GAMES_API_TITLE = 'Google Play Game Services Publishing API';
 export const GAMES_CONFIG_API = 'https://gamesconfiguration.googleapis.com/games/v1configuration';
 
+/** The Games Configuration API is off in the service account's Cloud project (403 SERVICE_DISABLED / accessNotConfigured): the exact API name, where to turn it on and the console plan. Null for any other error. */
+export function gamesApiDisabledText(errText: string, fallbackProject: string | null): string | null {
+  const f = parseGoogleError(errText);
+  if (f?.kind !== 'api-disabled') return null;
+  const projectId = f.projectId ?? fallbackProject;
+  const line = findingText({ ...f, service: GAMES_SERVICE, serviceTitle: GAMES_API_TITLE, projectId, activationUrl: enableUrl(GAMES_SERVICE, projectId) }, { withUrl: true });
+  return `${line}
+API: ${GAMES_API_TITLE} (${GAMES_SERVICE}). Enable it, wait a minute, then run storebound play games again. Plan: storebound console plan play-games-services`;
+}
+
 export function gamesConfigClient(root: string) {
-  const token = tokenSource(playServiceAccount(root), PLAY_SCOPE);
+  const account = playServiceAccount(root);
+  const token = tokenSource(account, PLAY_SCOPE);
   async function call<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {
     const url = GAMES_CONFIG_API + path;
     const safe = method !== 'POST' && retrySafe(method, url);
@@ -37,7 +51,11 @@ export function gamesConfigClient(root: string) {
         throw new Error(`${method} ${path} -> ${r.status} ${errorBody(t, 300)}`);
       }
       const t = await r.text();
-      if (!r.ok) throw new Error(`${method} ${path} -> ${r.status} ${errorBody(t, 800)}`);
+      if (!r.ok) {
+        const msg = `${method} ${path} -> ${r.status} ${errorBody(t, 800)}`;
+        const off = r.status === 403 ? gamesApiDisabledText(msg, account.project_id ?? null) : null;
+        throw new Error(off ? `${msg.split(' -> ')[0]} -> 403: ${off}` : msg);
+      }
       return (t ? JSON.parse(t) : {}) as T;
     }
   }
diff --git a/cli/play/upload.ts b/cli/play/upload.ts
index d7c93a1..0ccad8d 100644
--- a/cli/play/upload.ts
+++ b/cli/play/upload.ts
@@ -1,5 +1,5 @@
 // Upload an Android App Bundle to a Google Play testing track.
-//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--dry] [--yes] [--json]
+//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 // Default AAB: the newest in build/android (storebound play build), or with --version-code N the one with that
 // versionCode. Package and versionCode are read from the bundle; the upload is refused when Play already has that
 // versionCode (exit 1), and under the ship-step contract (--json / --result-file, docs/ship-step.md) it is exit 7
@@ -18,6 +18,7 @@ import { nextVersionCode } from '../lib/release';
 import { playClient } from './client';
 import { readPlayCopy, refusePlayNotes } from './listing';
 import { usedVersionCodes } from './next-version-code';
+import { runPreCheck } from '../lib/pre-check';
 import { shipNoop, shipPhase, shipReport, shipRun, shipWarn } from '../lib/ship-step';
 import { consoleUrl, playTrackPage } from '../lib/console-links';
 
@@ -53,6 +54,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const sdkWhy = playTargetSdkProblem(info.targetSdk, { where: targetSdkFile(root) });
   if (sdkWhy) throw new Error(`${relative(root, aab)}: not uploaded, ${sdkWhy}`);
   assertAabSigned(aab, relative(root, aab));
+  const pre = await runPreCheck({ args: a, config, root, resolve, file: aab, shown: relative(root, aab), tag: TAG });
   const size = statSync(aab).size;
   const dry = a.has('dry');
   const json = a.has('json');
@@ -82,7 +84,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   if (used.includes(info.versionCode)) throw new Error(`versionCode ${info.versionCode} is already on Google Play: rebuild with --version-code ${nextVersionCode(used)} (storebound play build)`);
   const summary = { aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, sizeMB: Math.round(size / 104857.6) / 10,
-    track, status, notes: notes.map(n => n.language), replaces: current.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`) };
+    track, status, notes: notes.map(n => n.language), replaces: current.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`), ...(pre ? { preCheck: pre } : {}) };
   if (dry) {
     if (json) { printJson(summary); return; }
     log(TAG, `${summary.aab}: ${info.packageName} ${info.versionName ?? ''} (${info.versionCode}), ${summary.sizeMB} MB, versionCode free`);
diff --git a/cli/shots/copy.ts b/cli/shots/copy.ts
new file mode 100644
index 0000000..96ca84e
--- /dev/null
+++ b/cli/shots/copy.ts
@@ -0,0 +1,125 @@
+// Screenshot caption copy per language (shots.copy, store/shots/copy.json).
+//   storebound shots copy translate --to de,es [--from en] [--translate "<command>"] [--force] [--dry] [--json]
+//     fills the missing languages (and the missing scenes of a language) from the source language: without --translate
+//     the source text is copied in and marked status=translate for your agent to translate in place (listing-localization
+//     skill); with --translate your command runs once per caption field with the source text on stdin and
+//     STOREBOUND_SOURCE_LANG, STOREBOUND_TARGET_LANG, STOREBOUND_TARGET_LANG_ID, STOREBOUND_FIELD, STOREBOUND_LIMIT in the
+//     environment; its stdout is the translation (status=draft). A translation over the caption limit is not kept.
+//     Scenes already there are kept unless --force. The marker lives in copy.translations.json next to the copy file.
+//   storebound shots copy check [--json]               marked languages, caption limits; exit 1 on a problem
+//   storebound shots copy reviewed --lang de[,es] | --all [--dry]   a human read the copy: remove its marker
+// --to / --from / --lang take config language ids, App Store locales or Play codes. Local files only.
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { playCodes } from '../lib/config';
+import type { Ctx } from '../lib/ctx';
+import { need } from '../lib/ctx';
+import { done, log, printJson, warn } from '../lib/log';
+import * as rt from '../lib/rt';
+import { applyFields, type CopyMarks, chars, marksNotes, marksPath, overLimit, parseMarks, sceneFields } from '../lib/shots-copy-translate';
+import { resolveLanguages } from '../lib/whats-new';
+import type { CopyFile } from './lib';
+
+const TAG = 'shots-copy';
+
+function readCopy(path: string): CopyFile {
+  if (!existsSync(path)) throw new Error(`${path}: no copy file (storebound init creates store/shots/copy.json)`);
+  return JSON.parse(readFileSync(path, 'utf8')) as CopyFile;
+}
+const readMarks = (path: string): CopyMarks => parseMarks(existsSync(marksPath(path)) ? readFileSync(marksPath(path), 'utf8') : null);
+const write = (path: string, v: unknown): void => writeFileSync(path, JSON.stringify(v, null, 2) + '\n');
+
+async function translate(ctx: Ctx): Promise<void> {
+  const { config, resolve } = ctx.loaded;
+  const a = ctx.args;
+  const shots = need(config.shots, 'shots');
+  const path = resolve(shots.copy);
+  const targets = resolveLanguages(config.languages, a.list('to'));
+  if (!targets.length) throw new Error('--to <languages>: config language ids, App Store locales or Play codes (add a language to languages[] in the config first)');
+  const primary = config.apple?.primaryLocale ?? config.play?.defaultLanguage;
+  const want = a.get('from');
+  const src = want ? resolveLanguages(config.languages, [want])[0]! : config.languages.find(l => l.apple === primary || playCodes(l).includes(primary ?? '')) ?? config.languages[0]!;
+  const copy = readCopy(path);
+  const from = copy[src.id];
+  if (!from) throw new Error(`${path}: no copy for the source language ${src.id} (--from <language>)`);
+  const hook = a.get('translate');
+  const dry = a.has('dry');
+  const marks = readMarks(path);
+  const rows: { lang: string; scenes: number; kept: number; status: string; problems: string[] }[] = [];
+  const runHook = (text: string, l: (typeof targets)[number], field: string, limit: number): string | null => {
+    const r = rt.spawnSync(['sh', '-c', hook!], { stdin: new TextEncoder().encode(text), stdout: 'pipe', stderr: 'pipe',
+      env: { ...process.env, STOREBOUND_SOURCE_LANG: src.apple ?? src.id, STOREBOUND_TARGET_LANG: l.apple ?? playCodes(l)[0] ?? l.id, STOREBOUND_TARGET_LANG_ID: l.id, STOREBOUND_FIELD: field, STOREBOUND_LIMIT: String(limit) } });
+    const out = r.stdout.toString().trim();
+    if (r.exitCode !== 0 || !out) { warn(TAG, `${l.id} ${field}: --translate failed (exit ${r.exitCode}): ${r.stderr.toString().trim().slice(0, 200)}`); return null; }
+    return out;
+  };
+  for (const l of targets) {
+    if (l === src) { warn(TAG, `${l.id} is the source language: skipped`); continue; }
+    const cur = { ...(copy[l.id] ?? {}) };
+    let written = 0, kept = 0, failed = false;
+    const problems: string[] = [];
+    for (const scene of shots.scenes) {
+      const sc = from[scene.id];
+      if (!sc) continue;
+      if (cur[scene.id] && !a.has('force')) { kept++; continue; }
+      const texts: Record<string, string> = {};
+      if (hook && !dry) for (const f of sceneFields(sc)) {
+        const t = runHook(f.text, l, `${scene.id}.${f.key}`, f.limit);
+        if (t === null) { failed = true; continue; }
+        const one = t.replace(/\s*\n\s*/g, ' ');
+        if (chars(one) > f.limit) { failed = true; problems.push(`${scene.id}.${f.key}: ${chars(one)} > ${f.limit} characters (source text kept)`); continue; }
+        texts[f.key] = one;
+      }
+      cur[scene.id] = applyFields(sc, texts);
+      written++;
+    }
+    const status = hook && !dry && !failed ? 'draft' : 'translate';
+    rows.push({ lang: l.id, scenes: written, kept, status: written ? status : 'kept', problems });
+    if (!written || dry) continue;
+    copy[l.id] = cur;
+    marks[l.id] = { from: src.id, status };
+  }
+  if (!dry && rows.some(r => r.scenes)) { write(path, copy); write(marksPath(path), marks); }
+  if (a.has('json')) { printJson({ copy: path, from: src.id, dry, languages: rows }); return; }
+  for (const r of rows) log(TAG, `${r.lang}: ${r.scenes ? `${r.scenes} scene(s) ${dry ? 'would be ' : ''}written (${r.status})` : 'nothing to write'}${r.kept ? `, ${r.kept} kept (--force replaces)` : ''}${r.problems.length ? `; ${r.problems.join('; ')}` : ''}`);
+  const todo = rows.filter(r => r.scenes && r.status === 'translate').length;
+  done(TAG, dry ? 'translation planned (dry run, nothing written)' : todo ? `${todo} language(s) to translate in place (edit copy.json, keep the marker in copy.translations.json), then storebound shots copy check` : 'drafts written: read them, storebound shots copy check, then storebound shots copy reviewed --lang <ids>');
+}
+
+async function check(ctx: Ctx): Promise<void> {
+  const { config, resolve } = ctx.loaded;
+  const shots = need(config.shots, 'shots');
+  const path = resolve(shots.copy);
+  const copy = readCopy(path);
+  const marks = readMarks(path);
+  const over = Object.fromEntries(Object.keys(copy).map(l => [l, overLimit(copy[l])] as const).filter(([, v]) => v.length));
+  const missing = config.languages.map(l => l.id).filter(id => !copy[id]);
+  if (ctx.args.has('json')) printJson({ copy: path, marks, overLimit: over, missing });
+  else {
+    for (const n of marksNotes(marks, path)) warn(TAG, n);
+    for (const [l, v] of Object.entries(over)) for (const o of v) warn(TAG, `${l} ${o.scene}.${o.field}: ${o.chars} > ${o.limit} characters`);
+    if (missing.length) warn(TAG, `no copy for ${missing.join(', ')}: storebound shots copy translate --to ${missing.join(',')}`);
+  }
+  if (Object.keys(over).length || missing.length) process.exitCode = 1;
+  else if (!ctx.args.has('json')) done(TAG, 'shots copy ok');
+}
+
+async function reviewed(ctx: Ctx): Promise<void> {
+  const { config, resolve } = ctx.loaded;
+  const path = resolve(need(config.shots, 'shots').copy);
+  const marks = readMarks(path);
+  const ids = ctx.args.has('all') ? Object.keys(marks) : resolveLanguages(config.languages, ctx.args.list('lang')).map(l => l.id);
+  if (!ids.length) throw new Error('--lang <languages> | --all');
+  const cleared = ids.filter(id => marks[id]);
+  const refused = cleared.filter(id => marks[id]!.status === 'translate');
+  if (refused.length) throw new Error(`${refused.join(', ')}: still status=translate (the source text is in place): translate it first (storebound shots copy translate --translate "<command>", or edit ${path})`);
+  if (!ctx.args.has('dry')) { for (const id of cleared) delete marks[id]; write(marksPath(path), marks); }
+  done(TAG, `${cleared.length ? cleared.join(', ') : 'nothing'} marked reviewed${ctx.args.has('dry') ? ' (dry run)' : ''}`);
+}
+
+export async function run(ctx: Ctx): Promise<void> {
+  const sub = ctx.args._[0];
+  if (sub === 'translate') return translate(ctx);
+  if (sub === 'check') return check(ctx);
+  if (sub === 'reviewed') return reviewed(ctx);
+  throw new Error('usage: storebound shots copy translate --to de,es [--from en] [--translate "<command>"] [--force] [--dry] | check | reviewed --lang de | --all');
+}
diff --git a/cli/shots/lib.ts b/cli/shots/lib.ts
index 57b2b59..5b882ab 100644
--- a/cli/shots/lib.ts
+++ b/cli/shots/lib.ts
@@ -145,7 +145,7 @@ export function validateCopy(copy: CopyFile, shots: ShotsConfig, langs: string[]
   const e: string[] = [];
   for (const lang of langs) {
     const c = copy[lang];
-    if (!c) { e.push(`${lang}: no copy`); continue; }
+    if (!c) { e.push(`${lang}: no copy (storebound shots copy translate --to ${lang})`); continue; }
     for (const s of shots.scenes) {
       const sc = c[s.id];
       if (!sc) { e.push(`${lang} scene ${s.id}: missing`); continue; }
diff --git a/docs/ship-step.md b/docs/ship-step.md
index dc9aa02..cb44b15 100644
--- a/docs/ship-step.md
+++ b/docs/ship-step.md
@@ -128,3 +128,10 @@ storebound play build --version-from version.json --env-file /run/secrets/ship.e
 storebound play upload --track production --version-from version.json --env-file /run/secrets/ship.env --json --result-file out/upload.json --yes
 case $? in 0|7) ;; 3) echo "owner: $(jq -r .error.consoleUrl out/upload.json)"; exit 1 ;; *) exit 1 ;; esac
 ```
+
+## `--pre-check` and `--evidence` (upload steps)
+
+`apple upload` and `play upload` take `--pre-check "<command with {file}>"` (config `upload.preCheck`): the command runs
+(sh -c, project root) before any byte is sent. A nonzero exit is exit 1 with error code `PRE_CHECK_FAILED`. `--evidence
+<path.json>` (config `upload.evidence`) writes `{file, sha256, size, command, exitCode, stdoutTail, timestamp,
+storeboundVersion}`, also on failure; the same object is the result's `preCheck` key.
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index c9fa7d2..b0c0381 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1376,3 +1376,42 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
   gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
   not visible to the API.
+||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
+## 115. A project's own pre-upload gate ran as a separate step and could be skipped
+
+- **What happens:** a store-readiness scan of the binary lived in the pipeline next to `apple upload` / `play upload`, so
+  a re-run, a manual upload or a reordered job sent the file without it, and nothing proved afterwards what had run.
+- **Do:** pass the gate to the upload: `storebound apple upload app.ipa --pre-check "./scan.sh {file}" --evidence
+  build/pre-check.json` (same for `play upload`; or `upload.preCheck` / `upload.evidence` in the config). A nonzero exit
+  refuses the upload before any network call: ship-step exit 1, error code `PRE_CHECK_FAILED`. The evidence (file,
+  sha256, size, command, exit code, stdout tail, time, storebound version) is written also on failure and is in the
+  `--json` / `--result-file` result as `preCheck`.
+- **Guard:** `cli/lib/pre-check.ts`, `tests/ship-step.test.ts` (failing check: no store write, evidence + error code).
+
+## 116. `storebound play games` died with a bare 403 when the Games Configuration API was off
+
+- **What happens:** the Play Games Services Publishing API (`gamesconfiguration.googleapis.com`) is a separate API in the
+  service account's Cloud project; while it is off every call is 403 SERVICE_DISABLED / accessNotConfigured.
+- **Do:** the error now names the API, the project and the enable URL
+  (`https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=<id>`); press Enable, wait a
+  minute, run it again. The plan: `storebound console plan play-games-services` (step 8 has the case).
+- **Guard:** `gamesApiDisabledText` in `cli/play/games.ts`, `tests/game-services.test.ts`.
+
+## 117. Game Center creates `en-US` next to a live `en-GB` (spurious creates)
+
+- **What happens:** the config language `en` is `en-US`, the live Game Center has only `en-GB`; the plan wants to create
+  an `en-US` localization for every item and leaves the `en-GB` ones unmanaged.
+- **Do:** map it: `storebound apple game-center --locale-map en=en-GB` or `games: { localeMap: { en: 'en-GB' } }`
+  (key: config language id or its App Store locale). The dry run suggests the exact flag when the live Game Center has
+  exactly one variant of a language the config spells differently.
+- **Guard:** `gcLocaleMap` / `suggestLocaleMap` in `cli/lib/game-services.ts`, `tests/game-services.test.ts`.
+
+## 118. Screenshot copy missing for a locale, translated by hand into copy.json
+
+- **What happens:** `storebound check` / `shots render` stopped with "<lang>: no copy" and the only fix was typing every
+  caption.
+- **Do:** `storebound shots copy translate --to de,es` (agent translates the copied source text, or `--translate "<cmd>"`
+  runs your command per caption field). Languages stay marked machine-translated in `copy.translations.json` until
+  `storebound shots copy reviewed --lang de`. Captions over the limit (eyebrow 30, title line 28, sub 90, badge 18) are
+  not kept.
+- **Guard:** `cli/shots/copy.ts`, `cli/lib/shots-copy-translate.ts`, `tests/shots-copy-translate.test.ts`.
diff --git a/tests/game-services.test.ts b/tests/game-services.test.ts
index f47c27e..636bcd8 100644
--- a/tests/game-services.test.ts
+++ b/tests/game-services.test.ts
@@ -5,7 +5,7 @@ import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } fr
 import type { ShipConfig } from '../cli/lib/config';
 import { validateConfig } from '../cli/lib/config';
 import { capabilitySpecs, planCapabilities } from '../cli/lib/signing';
-import { gamesPrivacyFindings, gcFindings, pgsFindings, planGameCenter, playAchievementBody, playLeaderboardBody, readPgsProject, validateGames } from '../cli/lib/game-services';
+import { gamesPrivacyFindings, gcFindings, gcLocaleMap, liveGcLocales, suggestLocaleMap, pgsFindings, planGameCenter, playAchievementBody, playLeaderboardBody, readPgsProject, validateGames } from '../cli/lib/game-services';
 import { consolePlan } from '../cli/lib/console-plan';
 import { verifyText } from '../cli/lib/console-verify';
 import { gameServicesFindings, type GameServicesStatus } from '../cli/games-status';
@@ -116,6 +116,42 @@ describe('apple game-center (fake App Store Connect)', () => {
   });
 });
 
+describe('Game Center locale map', () => {
+  const live = { leaderboards: [{ id: 'lb-1', attributes: { vendorIdentifier: 'com.example.game.highscore', referenceName: 'com.example.game.highscore', defaultFormatter: 'INTEGER', submissionType: 'BEST_SCORE', scoreSortType: 'DESC' },
+    localizations: [{ id: 'l1', attributes: { locale: 'en-GB', name: 'High score', formatterSuffix: ' points' } }, { id: 'l2', attributes: { locale: 'tr', name: 'En yüksek skor' } }] }], achievements: [] };
+  const only = { ...GAME.games!, achievements: [] };
+  const sig = (p: ReturnType<typeof planGameCenter>) => p[0]!.locales.map(l => l.locale + ':' + l.action);
+  test('without a map the config en-US is created next to the live en-GB, and the suggestion names the map', () => {
+    expect(sig(planGameCenter(only, GAME.languages, live))).toEqual(['en-US:create', 'tr:keep']);
+    expect(suggestLocaleMap(GAME.languages, liveGcLocales(live))).toEqual([{ id: 'en', from: 'en-US', to: 'en-GB' }]);
+  });
+  test('--locale-map en=en-GB (or games.localeMap) leaves nothing to create or update, and no suggestion remains', () => {
+    const map = gcLocaleMap(only, ['en=en-GB']);
+    expect(map).toEqual({ en: 'en-GB' });
+    const plan = planGameCenter(only, GAME.languages, live, map);
+    expect(sig(plan)).toEqual(['en-GB:keep', 'tr:keep']);
+    expect(plan[0]!.action).toBe('keep');
+    expect(suggestLocaleMap(GAME.languages, liveGcLocales(live), map)).toEqual([]);
+    expect(gcLocaleMap({ ...only, localeMap: { en: 'en-AU' } }, ['en=en-GB,tr=tr'])).toEqual({ en: 'en-GB', tr: 'tr' });
+    expect(planGameCenter(only, GAME.languages, live, { 'en-US': 'en-GB' })[0]!.locales[0]!.locale).toBe('en-GB');
+  });
+  test('two English variants live: no guess; a bad map entry is refused', () => {
+    expect(suggestLocaleMap(GAME.languages, ['en-GB', 'en-AU', 'tr'])).toEqual([]);
+    expect(() => gcLocaleMap(only, ['en'])).toThrow('--locale-map');
+    expect(validateGames({ ...only, localeMap: { en: 'english' } }, GAME.languages).join()).toContain('games.localeMap.en');
+  });
+  test('apple game-center against the fake store: the dry run warns with the exact flag; with the flag nothing is written', async () => {
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, rels: { app: APP } });
+    const base = await run2(() => gameCenter(project(GAME).ctx(['--yes'])));
+    expect(base.writes.length).toBeGreaterThan(0);
+    for (const l of [...s.asc.all('gameCenterLeaderboardLocalizations'), ...s.asc.all('gameCenterAchievementLocalizations')]) if (l.attributes.locale === 'en-US') l.attributes.locale = 'en-GB';
+    const dry = await run2(() => gameCenter(project(GAME).ctx(['--dry'])));
+    expect(dry.out + dry.err).toContain('--locale-map en=en-GB');
+    const mapped = await run2(() => gameCenter(project(GAME).ctx(['--yes', '--locale-map', 'en=en-GB'])));
+    expect(mapped.writes).toEqual([]);
+  });
+});
+
 describe('play games (fake Games Configuration API)', () => {
   test('create, no-op re-run, update by name match; playId wins', async () => {
     const p = project(GAME);
@@ -141,6 +177,21 @@ describe('play games (fake Games Configuration API)', () => {
   });
 });
 
+describe('play games with the Games Configuration API disabled', () => {
+  test('a 403 SERVICE_DISABLED names the API, the enable URL for the project and the console plan', async () => {
+    s.faults.push({ method: 'GET', match: /leaderboards/, when: 'before', status: 403, times: 5, code: 'SERVICE_DISABLED', detail: 'Google Play Game Services Publishing API has not been used in project 987654321 before or it is disabled. SERVICE_DISABLED accessNotConfigured' });
+    const err = await run2(() => playGames(project(GAME).ctx(['--dry']))).then(() => null, (e: Error) => e);
+    expect(err?.message).toContain('Google Play Game Services Publishing API');
+    expect(err?.message).toContain('gamesconfiguration.googleapis.com');
+    expect(err?.message).toContain('https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=987654321');
+    expect(err?.message).toContain('storebound console plan play-games-services');
+  });
+  test('the console plan has the enable step', () => {
+    const plan = consolePlan('play-games-services', GAME);
+    expect(JSON.stringify(plan)).toContain('gamesconfiguration.googleapis.com');
+  });
+});
+
 describe('project checks', () => {
   const ENT = '<?xml version="1.0"?><plist><dict><key>com.apple.developer.game-center</key><true/></dict></plist>';
   test('Game Center entitlement: missing, unreferenced, present, present without config', () => {
diff --git a/tests/ship-step.test.ts b/tests/ship-step.test.ts
index 3da79de..133b817 100644
--- a/tests/ship-step.test.ts
+++ b/tests/ship-step.test.ts
@@ -287,6 +287,34 @@ describe('idempotent re-upload (fake stores)', () => {
     expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'upload', store: 'apple', version: '1.2.0', build: '7', state: 'VALID' });
     expect(writes(s.calls).filter(c => /buildUploads/.test(c.path))).toEqual([]);
   });
+  test('play upload --pre-check: a passing command writes the evidence and joins the result; a failing one refuses with PRE_CHECK_FAILED before any write', async () => {
+    const d = tmp();
+    const p = project(BASE, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42, '1.2.0') });
+    const ev = join(d, 'ev', 'evidence.json');
+    const bad = await ship('play upload', ['--json', '--yes', '--pre-check', 'echo scanning {file}; exit 3', '--evidence', ev], a => playUpload({ loaded: p.loaded, args: a }));
+    expect(bad.code).toBe(1);
+    const jb = JSON.parse(bad.out);
+    expect(jb).toMatchObject({ ok: false, error: { code: 'PRE_CHECK_FAILED' }, preCheck: { exitCode: 3, size: expect.any(Number) } });
+    expect(JSON.parse(readFileSync(ev, 'utf8')).exitCode).toBe(3);
+    expect(writes(s.calls)).toEqual([]);
+    const ok = await ship('play upload', ['--json', '--yes', '--pre-check', 'echo scanning {file}', '--evidence', ev], a => playUpload({ loaded: p.loaded, args: a }));
+    expect(ok.code).toBe(0);
+    const e = JSON.parse(readFileSync(ev, 'utf8'));
+    expect(e).toMatchObject({ file: 'build/android/app.aab', exitCode: 0, storeboundVersion: expect.any(String) });
+    expect(e.sha256).toMatch(/^[0-9a-f]{64}$/);
+    expect(e.stdoutTail.join(' ')).toContain('scanning');
+    expect(JSON.parse(ok.out).preCheck.sha256).toBe(e.sha256);
+  });
+
+  test('apple upload --pre-check: a failing command stops before any App Store Connect call', async () => {
+    const plist = '<?xml version="1.0" encoding="UTF-8"?><plist version="1.0"><dict><key>CFBundleIdentifier</key><string>com.example.notes</string><key>CFBundleShortVersionString</key><string>1.2.0</string><key>CFBundleVersion</key><string>9</string></dict></plist>';
+    const p = project(BASE, { 'build/ios/export/Example.ipa': makeIpa(plist) });
+    const n = s.calls.length;
+    const r = await ship('apple upload', ['--json', '--yes', '--pre-check', 'exit 1'], a => appleUpload({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(1);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: false, step: 'upload', store: 'apple', error: { code: 'PRE_CHECK_FAILED' }, preCheck: { exitCode: 1 } });
+    expect(s.calls.length).toBe(n);
+  });
 });
 
 describe('status', () => {
diff --git a/tests/shots-copy-translate.test.ts b/tests/shots-copy-translate.test.ts
new file mode 100644
index 0000000..85bf9d5
--- /dev/null
+++ b/tests/shots-copy-translate.test.ts
@@ -0,0 +1,52 @@
+// `storebound shots copy translate | check | reviewed`: fills copy.json per language with a marker file, caption limits.
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import type { ShipConfig } from '../cli/lib/config';
+import { validateCopy } from '../cli/shots/lib';
+import { applyFields, marksNotes, overLimit, parseMarks, sceneFields } from '../cli/lib/shots-copy-translate';
+import { run } from '../cli/shots/copy';
+import { BASE, capture, project } from './helpers/store-mock';
+
+const CFG: ShipConfig = {
+  ...BASE,
+  languages: [{ id: 'en', apple: 'en-US', play: 'en-US' }, { id: 'de', apple: 'de-DE', play: 'de-DE' }],
+  shots: { copy: 'store/shots/copy.json', scenes: [{ id: 'home', palette: 'gold', frames: [] }] } as never,
+};
+const COPY = JSON.stringify({ en: { home: { eyebrow: 'Hello', title: ['Everything', 'in order'], sub: 'Lists and notes.' } } });
+const go = async (p: ReturnType<typeof project>, argv: string[]) => { const r = await capture(() => run(p.ctx(argv))); return r; };
+
+describe('shots copy translate', () => {
+  test('without a hook the source is copied in as status=translate; the missing-locale problem names the command', async () => {
+    const p = project(CFG, { 'store/shots/copy.json': COPY });
+    expect(validateCopy(JSON.parse(COPY), CFG.shots!, ['en', 'de'])[0]).toContain('storebound shots copy translate --to de');
+    await go(p, ['translate', '--to', 'de']);
+    const copy = JSON.parse(readFileSync(join(p.root, 'store/shots/copy.json'), 'utf8'));
+    expect(copy.de.home.title).toEqual(['Everything', 'in order']);
+    const marks = parseMarks(readFileSync(join(p.root, 'store/shots/copy.translations.json'), 'utf8'));
+    expect(marks.de).toEqual({ from: 'en', status: 'translate' });
+    expect(marksNotes(marks, 'copy')[0]).toContain('not translated yet');
+    expect(validateCopy(copy, CFG.shots!, ['en', 'de'])).toEqual([]);
+  });
+  test('with a hook: draft; an over-limit field keeps the source and the language stays translate; reviewed refuses translate', async () => {
+    const p = project(CFG, { 'store/shots/copy.json': COPY });
+    await go(p, ['translate', '--to', 'de', '--translate', 'tr a-z A-Z']);
+    let copy = JSON.parse(readFileSync(join(p.root, 'store/shots/copy.json'), 'utf8'));
+    expect(copy.de.home.eyebrow).toBe('HELLO');
+    expect(parseMarks(readFileSync(join(p.root, 'store/shots/copy.translations.json'), 'utf8')).de!.status).toBe('draft');
+    const r = await go(p, ['reviewed', '--lang', 'de']);
+    expect(r.exit).toBeFalsy();
+    expect(readFileSync(join(p.root, 'store/shots/copy.translations.json'), 'utf8').trim()).toBe('{}');
+    const q = project(CFG, { 'store/shots/copy.json': COPY });
+    await go(q, ['translate', '--to', 'de', '--translate', 'echo xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx']);
+    copy = JSON.parse(readFileSync(join(q.root, 'store/shots/copy.json'), 'utf8'));
+    expect(copy.de.home.title[0]).toBe('Everything');
+    expect(parseMarks(readFileSync(join(q.root, 'store/shots/copy.translations.json'), 'utf8')).de!.status).toBe('translate');
+  });
+  test('helpers: fields, limits', () => {
+    const sc = JSON.parse(COPY).en.home;
+    expect(sceneFields(sc).map(f => f.key)).toEqual(['eyebrow', 'title.0', 'title.1', 'sub']);
+    expect(applyFields(sc, { sub: 'x' }).sub).toBe('x');
+    expect(overLimit({ home: { title: ['a'.repeat(40), 'b'] } })[0]).toMatchObject({ field: 'title.0', limit: 28 });
+  });
+});

From 8084104a4d8eb5b8f0183068fddaebdbaceca117 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:14:18 +0800
Subject: [PATCH 134/255] desktop coverage entry for shots copy

---
 cli/lib/desktop-coverage.ts | 1 +
 docs/desktop-coverage.md    | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/cli/lib/desktop-coverage.ts b/cli/lib/desktop-coverage.ts
index 6896869..c869941 100644
--- a/cli/lib/desktop-coverage.ts
+++ b/cli/lib/desktop-coverage.ts
@@ -137,6 +137,7 @@ export const DESKTOP_COVERAGE: Record<string, Coverage> = {
   'shots capture': { where: `${T}: Captures`, methods: ['shots.capture'] },
   'shots login': { where: `${T}: owner steps (terminal command)`, methods: [], owner: 'signing in to a demo account by hand in a visible browser' },
   'shots fonts': { where: `${T}: Captures`, methods: ['shots.fonts'] },
+  'shots copy': { not: 'caption translation drafts are edited by the agent in store/shots/copy.json; the window shows the result in the Store art tab' },
   'shots render': { where: 'Store art tab: Render', methods: ['shots.render'] },
   'shots jpeg': { where: `${T}: Captures`, methods: ['shots.jpeg'] },
   'shots check': { where: `${T}: Captures`, methods: ['shots.check'] },
diff --git a/docs/desktop-coverage.md b/docs/desktop-coverage.md
index 55f5b06..d57be84 100644
--- a/docs/desktop-coverage.md
+++ b/docs/desktop-coverage.md
@@ -5,7 +5,7 @@ Every CLI command (cli/commands.ts) and the desktop place that runs it. "covered
 (serve.ts, or a host command `host:`) and the window calls it; tests/desktop-coverage.test.ts fails on a gap.
 Owner-only parts are owner actions in the window or owner steps with their terminal command (More tools).
 
-**100 commands:** 92 covered, 0 gaps, 8 not for the desktop.
+**101 commands:** 92 covered, 0 gaps, 9 not for the desktop.
 
 | command | status | where in the window | methods | owner step |
 |---|---|---|---|---|
@@ -103,6 +103,7 @@ Owner-only parts are owner actions in the window or owner steps with their termi
 | `shots capture` | covered | More tools: Captures | `shots.capture` |  |
 | `shots login` | covered | More tools: owner steps (terminal command) |  | signing in to a demo account by hand in a visible browser |
 | `shots fonts` | covered | More tools: Captures | `shots.fonts` |  |
+| `shots copy` | not-for-desktop | caption translation drafts are edited by the agent in store/shots/copy.json; the window shows the result in the Store art tab |  |  |
 | `shots render` | covered | Store art tab: Render | `shots.render` |  |
 | `shots jpeg` | covered | More tools: Captures | `shots.jpeg` |  |
 | `shots check` | covered | More tools: Captures | `shots.check` |  |

From 089c14928908c924ac17ef03f87164897c6f7b45 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:15:14 +0800
Subject: [PATCH 135/255] desktop coverage test: shots copy is agent-edited

---
 tests/desktop-coverage.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/desktop-coverage.test.ts b/tests/desktop-coverage.test.ts
index 36f198b..7a279e4 100644
--- a/tests/desktop-coverage.test.ts
+++ b/tests/desktop-coverage.test.ts
@@ -8,7 +8,7 @@ import { describeMethods } from '../cli/serve';
 import { analyze, render } from '../tools/gen-desktop-coverage';
 
 /** The only commands that make no sense in a window. Adding one here needs a reason in the coverage map. */
-const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings', 'aab', 'watch', 'events'];
+const NOT_FOR_DESKTOP = ['mcp', 'serve', 'desktop', 'api', 'settings', 'aab', 'watch', 'events', 'shots copy'];
 
 describe('desktop coverage', () => {
   const { rows, extra } = analyze();

From b325b453543bac13a25f0191af7bb20836c3ba16 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:17:01 +0800
Subject: [PATCH 136/255] merge fixups: changelog and pitfall numbering

---
 CHANGELOG.md                   | 1 -
 skills/store-pitfalls/SKILL.md | 1 -
 2 files changed, 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 043b6e2..6f174cf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,6 @@
 ## Unreleased
 
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
-||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
 - `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
 - `apple game-center --locale-map en=en-GB` (config `games.localeMap`) maps a config language to the live Game Center locale; the dry run suggests it when the live Game Center has exactly one variant of the language.
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index b0c0381..55badb3 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1376,7 +1376,6 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
   gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
   not visible to the API.
-||||||| parent of abe0821 (upload --pre-check/--evidence, shots copy translate, game-center --locale-map, play games API-disabled hint)
 ## 115. A project's own pre-upload gate ran as a separate step and could be skipped
 
 - **What happens:** a store-readiness scan of the binary lived in the pipeline next to `apple upload` / `play upload`, so

From 2e8593ed5c55b0a95ed1257b1f2f4eea01a3838a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:17:45 +0800
Subject: [PATCH 137/255] pitfalls spacing

---
 skills/store-pitfalls/SKILL.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 55badb3..70aa528 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1376,6 +1376,7 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/play-publish.ts` (ready list from tracks plus the public store page, the only signal the API
   gives), the plan, the verify, the hint in `play status` / `status` / the desktop Releases tab. Non-track changes are
   not visible to the API.
+
 ## 115. A project's own pre-upload gate ran as a separate step and could be skipped
 
 - **What happens:** a store-readiness scan of the binary lived in the pipeline next to `apple upload` / `play upload`, so

From 9a937b5512f4a47fc90ff35c8c8fcd2e64d16675 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:04:26 +0800
Subject: [PATCH 138/255] apple build --platform macos --tauri: Mac App Store
 build of a Tauri app (sandbox entitlements, profile, productbuild pkg,
 path-free, checks); apple upload accepts the pkg

---
 cli/apple/build-mas.ts  | 201 +++++++++++++++++++++++++++
 cli/apple/build.ts      |   3 +
 cli/apple/signing.ts    |   2 +-
 cli/apple/upload.ts     |  37 +++--
 cli/lib/mas.ts          | 299 ++++++++++++++++++++++++++++++++++++++++
 cli/lib/signing.ts      |   4 +-
 cli/lib/xcode.ts        |   8 +-
 tests/mas-build.test.ts | 194 ++++++++++++++++++++++++++
 8 files changed, 726 insertions(+), 22 deletions(-)
 create mode 100644 cli/apple/build-mas.ts
 create mode 100644 cli/lib/mas.ts
 create mode 100644 tests/mas-build.test.ts

diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
new file mode 100644
index 0000000..d1bb17c
--- /dev/null
+++ b/cli/apple/build-mas.ts
@@ -0,0 +1,201 @@
+// Mac App Store build of a Tauri app: `tauri build --bundles app`, signed for the Mac App Store, then productbuild to a .pkg.
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--target universal-apple-darwin]
+//       [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
+// Steps: Tauri project -> version / build number (next free one on App Store Connect, platform MAC_OS) -> signing
+// identities from the keychain ("Apple Distribution" or "3rd Party Mac Developer Application"; "Mac Installer
+// Distribution" or "3rd Party Mac Developer Installer") -> Mac App Store provisioning profile (--profile, installed, or
+// from the API) -> entitlements (app sandbox + application / team identifier, the project's own keys kept) -> a
+// tauri.conf overlay (signingIdentity, entitlements, embedded.provisionprofile, bundleVersion) -> `tauri build` ->
+// checks of the .app (sandbox entitlement, category, minimum OS, version / build, profile inside, no local paths) ->
+// productbuild --sign -> pkgutil --check-signature. --path-free remaps the checkout, CARGO_HOME, RUSTUP_HOME and the home
+// folder in rustc, strips debug info and symbols, and fails when the home folder or user name is still in the app.
+// --unsigned builds without identities, profile and installer signature (a pipeline check on any Mac; not uploadable).
+// Result: <out>/export/<version>-<build>/<Product>.pkg + <out>/latest.json; then `storebound apple upload <pkg> --platform macos`.
+// codesign needs the Mac's logged-in GUI session (SSH: errSecInternalComponent), same as apple build.
+import { copyFileSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir, userInfo } from 'node:os';
+import { dirname, join, relative } from 'node:path';
+import type { Ctx } from '../lib/ctx';
+import { need } from '../lib/ctx';
+import { done, log, printJson, warn } from '../lib/log';
+import { parseMobileprovision, parsePlist, type PlistValue } from '../lib/plist';
+import { nextBuildNumber } from '../lib/release';
+import { parseIdentities, profileDirs, readProfiles, type ApiProfile } from '../lib/signing';
+import { remoteBuildSession, showCmd } from '../lib/xcode';
+import {
+  appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
+  pickMasProfiles, pkgProblems, parsePkgSignature, readAppInfo, scanPathLeaks, tauriOverlay, categoryId,
+} from '../lib/mas';
+import { readdirSync } from 'node:fs';
+import { ascClient, type Asc } from './asc';
+import { findBundleId } from './signing';
+import { runLogged } from './build';
+import * as rt from '../lib/rt';
+import { shipPhase } from '../lib/ship-step';
+
+const TAG = 'build';
+const run1 = (argv: string[], timeout = 120_000): { ok: boolean; out: string } => {
+  const r = rt.spawnSync(argv, { stdout: 'pipe', stderr: 'pipe', timeout });
+  return { ok: r.exitCode === 0, out: `${r.stdout.toString()}${r.stderr.toString()}` };
+};
+
+/** The Tauri CLI: the project's node_modules/.bin/tauri (walking up), `cargo tauri`, else bunx. */
+export function tauriCommand(cwd: string, exists: (p: string) => boolean = existsSync, which: (c: string) => string | null = rt.which): string[] {
+  for (let d = cwd, prev = ''; d !== prev; prev = d, d = dirname(d)) { const p = join(d, 'node_modules', '.bin', 'tauri'); if (exists(p)) return [p]; }
+  if (which('cargo-tauri')) return ['cargo', 'tauri'];
+  return ['bunx', '--bun', '@tauri-apps/cli'];
+}
+
+/** Mac App Store profiles installed for Xcode (both folders, .provisionprofile and .mobileprovision). */
+export function installedMasProfiles(bundleId: string, teamId: string | null, home = homedir()): MasProfile[] {
+  const files: { path: string; profile: Record<string, PlistValue> }[] = [];
+  for (const d of profileDirs(home)) {
+    let names: string[] = []; try { names = readdirSync(d).filter(f => /\.(provisionprofile|mobileprovision)$/.test(f)); } catch { continue; }
+    for (const f of names) { try { files.push({ path: join(d, f), profile: parseMobileprovision(readFileSync(join(d, f))) }); } catch { /* not a profile */ } }
+  }
+  return pickMasProfiles(files, bundleId, teamId);
+}
+
+/** The ACTIVE MAC_APP_STORE profile of the bundle id from the API, written to `dest`. Null when there is none. */
+async function fetchMasProfile(c: Asc, bundleId: string, dest: string): Promise<string | null> {
+  const b = await findBundleId(c, bundleId);
+  if (!b) return null;
+  const list: ApiProfile[] = await readProfiles(p => c.all(p), b.id, 'MAC_APP_STORE');
+  const ok = list.filter(p => p.attributes.profileState === 'ACTIVE' && Date.parse(p.attributes.expirationDate ?? '') - Date.now() > 86_400_000)
+    .sort((x, y) => Date.parse(y.attributes.expirationDate!) - Date.parse(x.attributes.expirationDate!))[0];
+  if (!ok) return null;
+  const content = ok.attributes.profileContent ?? (await c.asc('GET', `/v1/profiles/${ok.id}`)).data.attributes.profileContent;
+  if (!content) return null;
+  mkdirSync(dirname(dest), { recursive: true });
+  writeFileSync(dest, Buffer.from(content, 'base64'));
+  return dest;
+}
+
+export async function run(ctx: Ctx): Promise<void> {
+  const { config, root, resolve } = ctx.loaded;
+  const a = ctx.args;
+  const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
+  const dry = a.has('dry'), json = a.has('json');
+  const unsigned = a.has('unsigned');
+  const pathFree = a.has('path-free');
+  const tauri = findTauri(root, a.get('tauri'));
+  if (tauri.identifier !== bundleId) throw new Error(`${relative(root, tauri.confPath)}: identifier is "${tauri.identifier}", the config's apple.bundleId is "${bundleId}": they must be the same`);
+  const target = a.str('target', 'universal-apple-darwin');
+  const out = resolve(a.get('out') ?? (config.apple?.build?.out ? `${config.apple.build.out.replace(/\/ios$/, '')}/macos` : 'build/macos'));
+  const version = a.get('version') ?? tauri.version;
+  if (!version || !/^\d+(\.\d+){0,2}$/.test(version)) throw new Error('version: x.y.z from --version or tauri.conf.json "version"');
+  let build = a.get('build-number');
+  let teamId = config.apple?.signing?.teamId ?? null;
+  let client: Asc | null = null;
+  if (!unsigned || !build) {
+    try {
+      client = await ascClient(root, bundleId, config.apple?.appId);
+      if (!build) {
+        const builds = await client.all(`/v1/builds?filter[app]=${await client.app()}&filter[preReleaseVersion.platform]=MAC_OS&limit=200&fields[builds]=version`);
+        build = nextBuildNumber(builds.map(b => String(b.attributes.version)));
+        log(TAG, `${builds.length} macOS builds on App Store Connect: next build number ${build} (CFBundleVersion must increase)`);
+      }
+      if (!teamId) teamId = (await findBundleId(client, bundleId))?.attributes?.seedId ?? null;
+    } catch (e) {
+      if (!dry) throw new Error(`${(e as Error).message}\n(pass --build-number N and set apple.signing.teamId to build without App Store Connect reads)`);
+      warn(TAG, `App Store Connect not readable (${(e as Error).message.split('\n')[0]?.slice(0, 120)}): dry run continues with placeholders`);
+    }
+  }
+  if (build && !/^\d+(\.\d+){0,2}$/.test(build)) throw new Error('--build-number: digits, e.g. 42 or 1.0.42');
+  const buildNo = build ?? '<next build number>';
+  const team = teamId ?? '<TEAM_ID>';
+
+  // identities and profile (a real signed run needs them; a dry run shows placeholders)
+  const mac = process.platform === 'darwin';
+  let appIdentity: string | null = null, installerIdentity: string | null = null;
+  if (!unsigned && mac) {
+    const picked = pickMasIdentities(parseIdentities(run1(['security', 'find-identity', '-v']).out), teamId);
+    appIdentity = picked.app?.name ?? null; installerIdentity = picked.installer?.name ?? null;
+    const missing = [!appIdentity && 'an "Apple Distribution" / "3rd Party Mac Developer Application" identity', !installerIdentity && 'a "Mac Installer Distribution" / "3rd Party Mac Developer Installer" identity'].filter(Boolean);
+    if (missing.length && !dry) throw new Error(`no ${missing.join(' and no ')} for team ${team} in the keychain. Create them with apple.signing.certificateType DISTRIBUTION / MAC_INSTALLER_DISTRIBUTION and \`storebound apple signing ensure\`, then import the certificate into the login keychain.`);
+    if (missing.length) warn(TAG, `missing in the keychain: ${missing.join(', ')}`);
+  }
+  const profileFile = join(out, 'embedded.provisionprofile');
+  let profile: string | null = null;
+  if (!unsigned) {
+    const given = a.get('profile');
+    if (given) { profile = resolve(given); if (!existsSync(profile)) throw new Error(`--profile ${given}: no such file`); }
+    else {
+      const have = installedMasProfiles(bundleId, teamId)[0];
+      if (have) { profile = have.path; log(TAG, `Mac App Store profile "${have.name}" (installed, expires ${have.expires.slice(0, 10)})`); }
+      else if (client && !dry) profile = await fetchMasProfile(client, bundleId, profileFile);
+      else if (client) { try { profile = await fetchMasProfile(client, bundleId, profileFile); } catch (e) { warn(TAG, `profile not readable: ${(e as Error).message.split('\n')[0]}`); } }
+      if (!profile && !dry) throw new Error(`no active MAC_APP_STORE provisioning profile for ${bundleId}: set apple.signing.profileType to MAC_APP_STORE and run \`storebound apple signing ensure\`, or pass --profile <file.provisionprofile>`);
+      if (!profile) warn(TAG, `no MAC_APP_STORE profile for ${bundleId} yet (storebound apple signing ensure with apple.signing.profileType MAC_APP_STORE)`);
+    }
+  }
+
+  const home = homedir(), user = userInfo().username;
+  const env = pathFree ? pathFreeEnv({ home, user, root: process.env.STOREBOUND_PATHFREE_ROOT ?? root, cargoHome: process.env.CARGO_HOME, rustupHome: process.env.RUSTUP_HOME, rustflags: process.env.RUSTFLAGS }) : {};
+  const entFile = join(out, 'mas.entitlements');
+  const configFile = join(out, 'tauri.mas.conf.json');
+  const exportPath = join(out, 'export', `${version}-${buildNo}`);
+  const pkg = join(exportPath, `${tauri.productName}.pkg`);
+  const tauriCmd = tauriCommand(tauri.cwd);
+  const category = tauri.category && !categoryId(tauri.category) ? undefined : tauri.category;
+  const overlay = tauriOverlay({ appIdentity, entitlementsFile: entFile, profile, version, build: buildNo, unsigned, minOs: tauri.minOs, category });
+  const input = { tauri, tauriCmd, target, out, configFile, entitlementsFile: entFile, profile, appIdentity, installerIdentity: installerIdentity ?? '<Mac Installer Distribution identity>', version, build: buildNo, unsigned, pathFree, pkg };
+  const steps = masSteps(input);
+  const existingEnt = tauri.entitlements && existsSync(tauri.entitlements) ? (parsePlist(readFileSync(tauri.entitlements)) as Record<string, PlistValue>) : undefined;
+  const ent = masEntitlements({ teamId: team, bundleId, existing: existingEnt });
+  const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
+    profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
+    steps: [showCmd(steps.tauri, null), showCmd(steps.codesignVerify, null), showCmd(steps.productbuild, null), showCmd(steps.pkgCheck, null)], out: relative(root, out) || '.', pkg: relative(root, pkg) };
+  if (dry) {
+    if (json) { printJson(plan); return; }
+    log(TAG, `Tauri ${tauri.productName} (${bundleId}) ${version} (${buildNo}) for ${target}, ${unsigned ? 'UNSIGNED' : 'Mac App Store signing'}${pathFree ? ', path-free' : ''}`);
+    log(TAG, `app identity: ${appIdentity ?? '(none found)'}; installer identity: ${installerIdentity ?? '(none found)'}; profile: ${plan.profile ?? '(none)'}`);
+    log(TAG, `entitlements: ${plan.entitlements.join(', ')}`);
+    if (pathFree) log(TAG, `RUSTFLAGS: ${plan.env.RUSTFLAGS}`);
+    for (const s of plan.steps) log(TAG, `would run: ${s}`);
+    done(TAG, 'macOS build planned (dry run)');
+    return;
+  }
+  if (!mac) throw new Error('apple build --platform macos needs macOS (tauri build, codesign, productbuild)');
+  const remote = remoteBuildSession(process.env, run1(['launchctl', 'managername'], 5000).out.trim());
+  if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session (write the command into a .command file and \`open -a Terminal <file>\`), or add --unsigned for a pipeline check.`);
+  mkdirSync(out, { recursive: true });
+  writeFileSync(entFile, entitlementsXml(ent));
+  writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
+  shipPhase('build', `tauri build ${target}, build ${buildNo}`);
+  await runLogged(steps.tauri, tauri.cwd, join(out, 'tauri-build.log'), showCmd(steps.tauri, null), env);
+  const appDir = findBuiltApp(tauri.cwd, root, target, tauri.productName);
+  if (!appDir) throw new Error(`tauri build exited 0 but no ${tauri.productName}.app is under ${join(tauri.cwd, 'target', target, 'release/bundle/macos')} (see ${join(out, 'tauri-build.log')})`);
+  shipPhase('verify', `checking ${basenameOf(appDir)}`);
+  if (!unsigned) {
+    const v = run1(steps.codesignVerify.map(x => (x.endsWith('.app') ? appDir : x)));
+    if (!v.ok) throw new Error(`codesign --verify failed:\n${v.out.slice(-600)}`);
+  }
+  const entOut = unsigned ? null : entitlementKeysOf(run1(['codesign', '-d', '--entitlements', ':-', appDir]).out);
+  const leaks = pathFree || a.has('scan-paths') ? scanPathLeaks(appDir, leakNeedles(home, user, root)) : [];
+  const checks = appProblems({ info: readAppInfo(appDir), entitlements: entOut, hasProfile: existsSync(join(appDir, 'Contents', 'embedded.provisionprofile')), leaks },
+    { bundleId, version, build: buildNo, signed: !unsigned, pathFree });
+  for (const w of checks.warnings) warn(TAG, w);
+  if (checks.errors.length) throw new Error(`${basenameOf(appDir)} was built, but the Mac App Store would refuse it:\n${checks.errors.map(x => `  ${x}`).join('\n')}`);
+  shipPhase('sign', 'productbuild');
+  rmSync(exportPath, { recursive: true, force: true });
+  mkdirSync(exportPath, { recursive: true });
+  const pbArgv = masSteps({ ...input, installerIdentity }).productbuild.map(x => (x.endsWith('.app') ? appDir : x));
+  await runLogged(pbArgv, tauri.cwd, join(out, 'productbuild.log'), showCmd(pbArgv, null));
+  if (!existsSync(pkg)) throw new Error(`productbuild exited 0 but left no ${pkg}`);
+  if (!unsigned) {
+    const sig = parsePkgSignature(run1(steps.pkgCheck).out);
+    const bad = pkgProblems(sig);
+    if (bad.length) throw new Error(`${relative(root, pkg)}:\n${bad.map(x => `  ${x}`).join('\n')}`);
+    log(TAG, `pkg signed with "${sig.certificate}"`);
+  }
+  copyIfAny(profile, profileFile);
+  const result = { pkg, platform: 'MAC_OS', bundleId, version, build: buildNo, unsigned, pathFree, leaks: leaks.length };
+  writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}\n`);
+  writeFileSync(`${pkg}.json`, `${JSON.stringify(result, null, 2)}\n`);
+  if (json) printJson(result);
+  done(TAG, `${relative(root, pkg)}: ${bundleId} ${version} (${buildNo})${unsigned ? ' UNSIGNED, not uploadable' : `. Next: storebound apple upload ${relative(root, pkg)} --platform macos --dry`}`);
+}
+
+const basenameOf = (p: string): string => p.split(/[\\/]/).pop() ?? p;
+function copyIfAny(src: string | null, dest: string): void { if (src && src !== dest && existsSync(src) && !existsSync(dest)) { try { copyFileSync(src, dest); } catch { /* optional */ } } }
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 277bfce..b5df488 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -26,6 +26,7 @@ import { capacitorProject, webStep } from '../lib/web-assets';
 import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
+import { parsePlatform } from './platform';
 import { findBundleId } from './signing';
 import * as rt from '../lib/rt';
 import { shipPhase } from '../lib/ship-step';
@@ -98,6 +99,8 @@ export async function exportIpa(o: { root: string; out: string; archivePath: str
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
+  // Mac App Store build of a Tauri app (cli/apple/build-mas.ts)
+  if (a.has('tauri') || parsePlatform(a.get('platform')) === 'MAC_OS') return (await import('./build-mas')).run(ctx);
   const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
   const cfg = config.apple?.build ?? {};
   const signing = config.apple?.signing ?? {};
diff --git a/cli/apple/signing.ts b/cli/apple/signing.ts
index 30ce943..cea09e0 100644
--- a/cli/apple/signing.ts
+++ b/cli/apple/signing.ts
@@ -55,7 +55,7 @@ function localKeys(root: string): Map<string, string> {
 /** SHA-1s of code signing identities in the keychain search list (macOS; empty elsewhere). Read-only. */
 function keychainIdentities(): Set<string> {
   if (process.platform !== 'darwin' || !rt.which('security')) return new Set();
-  const r = rt.spawnSync(['security', 'find-identity', '-v', '-p', 'codesigning'], { stdout: 'pipe', stderr: 'pipe' });
+  const r = rt.spawnSync(['security', 'find-identity', '-v'], { stdout: 'pipe', stderr: 'pipe' });
   return new Set(parseIdentities(r.stdout.toString()).map(i => i.sha1));
 }
 
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 966019f..03b19c6 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -17,6 +17,7 @@
 // timeout (exit 7).
 // An upload is a write: --dry shows the plan; a real run asks first (--yes in scripts).
 import { runPreCheck } from '../lib/pre-check';
+import { pkgInfo } from '../lib/mas';
 import { appleSdkProblem } from '../lib/store-minimums';
 import { closeSync, existsSync, openSync, readdirSync, readSync, statSync } from 'node:fs';
 import { basename, join, relative } from 'node:path';
@@ -29,6 +30,7 @@ import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem,
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { BUILD_WAIT_EXIT } from '../lib/build-ops';
 import { type Asc, ascClient, type J } from './asc';
+import { parsePlatform } from './platform';
 import { waitForBuild, waitMessage } from './testflight';
 import { describeReq } from './jsonapi';
 import { createOnce } from '../lib/upsert';
@@ -139,13 +141,13 @@ export async function sendParts(o: SendPartsOptions): Promise<void> {
   } finally { beat.stop(); }
 }
 
-async function apiUpload(c: Asc, appId: string, ipa: string, info: ReturnType<typeof ipaInfo>, deadline: number, o: HeartbeatOptions = {}): Promise<void> {
+async function apiUpload(c: Asc, appId: string, ipa: string, info: ReturnType<typeof ipaInfo>, deadline: number, o: HeartbeatOptions = {}, platform: 'IOS' | 'MAC_OS' = 'IOS'): Promise<void> {
   const size = statSync(ipa).size;
-  const reqs = buildUploadReqs(appId, info, basename(ipa), size);
+  const reqs = buildUploadReqs(appId, info, basename(ipa), size, platform);
   // one build upload per version + build number: an earlier one that did not fail is resumed, never doubled
-  const prior = (await uploadsOf(c, appId, info)).find((u: J) => u.attributes?.state?.state !== 'FAILED');
+  const prior = (await uploadsOf(c, appId, info, platform)).find((u: J) => u.attributes?.state?.state !== 'FAILED');
   const made = prior ? { value: prior, created: false } : await createOnce<J>({ what: `build upload ${info.version} (${info.build})`, tag: TAG,
-    find: async () => (await uploadsOf(c, appId, info)).find((u: J) => u.attributes?.state?.state !== 'FAILED') ?? null,
+    find: async () => (await uploadsOf(c, appId, info, platform)).find((u: J) => u.attributes?.state?.state !== 'FAILED') ?? null,
     create: async () => (await c.asc('POST', reqs.upload.path, reqs.upload.body)).data });
   const up = made.value;
   log(TAG, made.created ? `build upload ${up.id} created` : `build upload ${up.id} exists (${up.attributes?.state?.state ?? '?'}): resuming it`);
@@ -179,8 +181,8 @@ async function apiUpload(c: Asc, appId: string, ipa: string, info: ReturnType<ty
 }
 
 /** Build uploads of this version + build number (any state), newest first. */
-const uploadsOf = (c: Asc, appId: string, info: { version: string; build: string }): Promise<J[]> =>
-  c.all(`/v1/apps/${appId}/buildUploads?filter[cfBundleShortVersionString]=${encodeURIComponent(info.version)}&filter[cfBundleVersion]=${encodeURIComponent(info.build)}&filter[platform]=IOS&limit=20`);
+const uploadsOf = (c: Asc, appId: string, info: { version: string; build: string }, platform = 'IOS'): Promise<J[]> =>
+  c.all(`/v1/apps/${appId}/buildUploads?filter[cfBundleShortVersionString]=${encodeURIComponent(info.version)}&filter[cfBundleVersion]=${encodeURIComponent(info.build)}&filter[platform]=${platform}&limit=20`);
 
 /**
  * `xcrun altool --upload-package`: runs in the background with a heartbeat (it prints nothing until it is done) and is
@@ -232,25 +234,30 @@ export async function run(ctx: Ctx): Promise<void> {
   const via = a.str('via', 'api');
   if (via !== 'api' && via !== 'altool') throw new Error('--via api | altool');
   const want = a.get('build');
-  let ipa = a._.find(x => x.endsWith('.ipa'));
+  const macos = parsePlatform(a.get('platform')) === 'MAC_OS';
+  let ipa = a._.find(x => x.endsWith('.ipa') || x.endsWith('.pkg'));
   if (!ipa) {
     const dir = join(resolve(config.apple?.build?.out ?? 'build/ios'), 'export');
     let found = exportedIpas(dir);
     if (want) found = found.filter(f => { try { return ipaInfo(f).build === want; } catch { return false; } });
+    if (!found[0] && macos) throw new Error('usage: storebound apple upload <app.pkg> --platform macos (storebound apple build --platform macos --tauri <src-tauri> makes one)');
     if (!found[0]) throw new Error(`usage: storebound apple upload <app.ipa> (no ${want ? `build ${want} ` : ''}IPA in ${relative(root, dir)}; storebound apple build makes one)`);
     ipa = found[0];
   } else ipa = resolve(ipa);
   shipPhase('verify', `checking ${relative(root, ipa)}`);
-  const info = ipaInfo(ipa);
+  const isPkg = ipa.endsWith('.pkg');
+  const platform: 'IOS' | 'MAC_OS' = isPkg ? 'MAC_OS' : 'IOS';
+  if (macos && !isPkg) throw new Error('--platform macos uploads a signed .pkg (storebound apple build --platform macos --tauri <src-tauri>), not an .ipa');
+  const info: ReturnType<typeof ipaInfo> = isPkg ? pkgInfo(ipa, bundleId) : ipaInfo(ipa);
   shipReport({ version: info.version, build: info.build, url: consoleUrl('asc.testflight') });
   if (want && info.build !== want) throw new Error(`${relative(root, ipa)} is build ${info.build}, not ${want} (--build): did the last apple build fail?`);
   if (info.bundleId !== bundleId) throw new Error(`${relative(root, ipa)} is ${info.bundleId}, the config says ${bundleId}`);
   // App Store Connect refuses IPAs from an Xcode / SDK older than its current minimum (cli/lib/store-minimums.ts)
-  const sdkWhy = appleSdkProblem(info);
+  const sdkWhy = isPkg ? null : appleSdkProblem(info);
   if (sdkWhy) throw new Error(`${relative(root, ipa)}: not uploaded, ${sdkWhy}`);
   // every PrivacyInfo.xcprivacy in the app (root, Frameworks, bundles): Apple refuses the build minutes after the
   // upload when NSPrivacyTracking and NSPrivacyTrackingDomains disagree (ITMS-91064), so stop before any network call
-  const privacy = bundleTrackingIssues(ipaManifests(ipa));
+  const privacy = isPkg ? [] : bundleTrackingIssues(ipaManifests(ipa));
   if (privacy.length) throw new Error(`${relative(root, ipa)}: not uploaded, Apple would refuse it as Invalid Binary:\n${privacy.map(x => `  ${x}`).join('\n')}\nFix the manifest, rebuild (storebound apple build) and upload the new IPA.`);
   const pre = await runPreCheck({ args: a, config, root, resolve, file: ipa, shown: relative(root, ipa), tag: TAG });
   const size = statSync(ipa).size;
@@ -263,14 +270,14 @@ export async function run(ctx: Ctx): Promise<void> {
   const appId = await c.app();
   // the IPA must belong to the version train being prepared (the editable App Store version): MARKETING_VERSION 1.0
   // from a project that ignored the intended version otherwise lands in the wrong train
-  const editable = await c.editableVersion().catch(() => null);
+  const editable = await c.editableVersion(platform).catch(() => null);
   const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
   if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
+  const builds = await c.all(`/v1/builds?filter[app]=${appId}${isPkg ? '&filter[preReleaseVersion.platform]=MAC_OS' : ''}&limit=200&fields[builds]=version,processingState`);
   const numbers = builds.map(b => String(b.attributes.version));
   const next = nextBuildNumber(numbers);
   // the same IPA uploaded by an earlier run: nothing to send again, only the wait
-  const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
+  const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info, platform).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
   const onAsc = builds.find(b => String(b.attributes.version) === info.build);
   const decision = existingBuild({ ipa: relative(root, ipa), build: info.build, onAsc: !!onAsc, state: onAsc?.attributes?.processingState, uploadComplete: !!already, allowExisting: a.has('allow-existing'), next });
   // the ship-step contract: a build number App Store Connect has already is "nothing to do" (exit 7), never a second upload
@@ -291,7 +298,7 @@ export async function run(ctx: Ctx): Promise<void> {
     stop(r.outcome === 'failed' ? BUILD_WAIT_EXIT.failed : BUILD_WAIT_EXIT.timeout, waitMessage(info.build, r));
   }
   if (numbers.length && compareBuild(info.build, next) < 0) warn(TAG, `build ${info.build} is lower than the highest uploaded one (next free: ${next}); Apple accepts it only if this version train has no higher build`);
-  const reqs = buildUploadReqs(appId, info, basename(ipa), size);
+  const reqs = buildUploadReqs(appId, info, basename(ipa), size, platform);
   const plan = via === 'api'
     ? [describeReq(reqs.upload), describeReq(reqs.file('<upload id>')), `PUT the file parts to the upload URLs Apple returns`, describeReq(reqs.commit('<file id>', '<md5>')), 'GET /v1/buildUploads/<id> until COMPLETE']
     : [showCmd(altoolArgs(ipa, { keyPath: '$ASC_P8', keyId: '$ASC_KEY_ID', issuerId: '$ASC_ISSUER_ID' }), null)];
@@ -309,7 +316,7 @@ export async function run(ctx: Ctx): Promise<void> {
   shipPhase('upload', `uploading ${mb(size)} via ${via}`, 0);
   log(TAG, `${relative(root, ipa)}: ${info.bundleId} ${info.version} (${info.build}), ${mb(size)}, via ${via}, timeout ${a.str('timeout', '60m')}`);
   if (via === 'api') {
-    try { await apiUpload(c, appId, ipa, info, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
+    try { await apiUpload(c, appId, ipa, info, deadline, {}, platform); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   } else {
     try { await altoolUpload(root, ipa, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   }
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
new file mode 100644
index 0000000..cc5d15b
--- /dev/null
+++ b/cli/lib/mas.ts
@@ -0,0 +1,299 @@
+// Mac App Store builds of a Tauri app: detection, entitlements, signing identities, path-free build flags, and the
+// checks of the built .app and .pkg. Pure except findTauri / scanPathLeaks / readAppInfo (bounded file reads).
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free]   (cli/apple/build-mas.ts runs it)
+import { existsSync, readdirSync, readFileSync, rmSync, statSync } from 'node:fs';
+import { basename, dirname, join, relative, sep } from 'node:path';
+import { parsePlist, toXmlPlist, type PlistValue } from './plist';
+import * as rt from './rt';
+
+export interface TauriProject {
+  /** Folder with tauri.conf.json (usually src-tauri). */
+  dir: string;
+  confPath: string;
+  /** Folder `tauri build` runs in: the parent of `dir`. */
+  cwd: string;
+  productName: string;
+  identifier: string;
+  version?: string;
+  category?: string;
+  minOs?: string;
+  entitlements?: string;
+  conf: Record<string, unknown>;
+}
+
+const SKIP = new Set(['node_modules', 'target', '.git', 'dist', 'build', '.storebound', 'Pods']);
+
+/** The Tauri project: `hint` (a folder with tauri.conf.json, or the file itself) or the only tauri.conf.json found. */
+export function findTauri(root: string, hint?: string): TauriProject {
+  const names = ['tauri.conf.json', 'tauri.conf.json5'];
+  let confPath: string | undefined;
+  if (hint && hint !== 'true') {
+    const p = join(root, hint);
+    if (/tauri\.conf\.json5?$/.test(p) && existsSync(p)) confPath = p;
+    else confPath = names.map(n => join(p, n)).find(existsSync);
+    if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json in it`);
+  } else {
+    const hits: string[] = [];
+    const walk = (dir: string, d: number): void => {
+      let ns: string[]; try { ns = readdirSync(dir); } catch { return; }
+      for (const n of ns) if (names.includes(n)) hits.push(join(dir, n));
+      if (d <= 0) return;
+      for (const n of ns) { if (SKIP.has(n) || n.startsWith('.')) continue; const p = join(dir, n); try { if (statSync(p).isDirectory()) walk(p, d - 1); } catch { /* unreadable */ } }
+    };
+    walk(root, 4);
+    if (hits.length !== 1) throw new Error(hits.length ? `several Tauri projects (${hits.map(h => relative(root, h)).join(', ')}): pass --tauri <folder with tauri.conf.json>` : 'no tauri.conf.json found: pass --tauri <folder with tauri.conf.json>');
+    confPath = hits[0]!;
+  }
+  let conf: Record<string, any>;
+  try { conf = JSON.parse(readFileSync(confPath, 'utf8')); } catch (e) { throw new Error(`${confPath}: not valid JSON (${(e as Error).message}); tauri.conf.json5 / Tauri.toml are not read, use tauri.conf.json`); }
+  const mac = conf.bundle?.macOS ?? {};
+  const productName = String(conf.productName ?? '');
+  if (!productName) throw new Error(`${confPath}: productName is missing`);
+  const dir = dirname(confPath);
+  return { dir, confPath, cwd: dirname(dir), productName, identifier: String(conf.identifier ?? ''), version: typeof conf.version === 'string' ? conf.version : undefined,
+    category: typeof conf.bundle?.category === 'string' ? conf.bundle.category : undefined, minOs: typeof mac.minimumSystemVersion === 'string' ? mac.minimumSystemVersion : undefined,
+    entitlements: typeof mac.entitlements === 'string' ? join(dir, mac.entitlements) : undefined, conf };
+}
+
+/** Tauri's category names (and Apple's public.app-category.* ids) -> the LSApplicationCategoryType Tauri writes; null when unknown. */
+export function categoryId(c: string | undefined): string | null {
+  if (!c) return null;
+  if (c.startsWith('public.app-category.')) return c;
+  const map: Record<string, string> = { Business: 'business', DeveloperTool: 'developer-tools', Education: 'education', Entertainment: 'entertainment', Finance: 'finance', Game: 'games',
+    GraphicsAndDesign: 'graphics-design', HealthcareAndFitness: 'healthcare-fitness', Lifestyle: 'lifestyle', Medical: 'medical', Music: 'music', News: 'news', Photography: 'photography',
+    Productivity: 'productivity', Reference: 'reference', SocialNetworking: 'social-networking', Sports: 'sports', Travel: 'travel', Utility: 'utilities', Video: 'video', Weather: 'weather' };
+  return map[c] ? `public.app-category.${map[c]}` : null;
+}
+
+/** Entitlements a Mac App Store build needs: the sandbox plus the application / team identifiers of the profile. */
+export const MAS_REQUIRED = ['com.apple.security.app-sandbox', 'com.apple.application-identifier', 'com.apple.developer.team-identifier'] as const;
+
+/** The entitlements file: the project's own keys kept, the required ones added (the project's values win for the optional ones). */
+export function masEntitlements(o: { teamId: string; bundleId: string; existing?: Record<string, PlistValue>; network?: boolean }): Record<string, PlistValue> {
+  return {
+    ...(o.network === false ? {} : { 'com.apple.security.network.client': true }),
+    ...(o.existing ?? {}),
+    'com.apple.security.app-sandbox': true,
+    'com.apple.application-identifier': `${o.teamId}.${o.bundleId}`,
+    'com.apple.developer.team-identifier': o.teamId,
+  };
+}
+
+export const entitlementsXml = (e: Record<string, PlistValue>): string => toXmlPlist(e);
+
+/** Keys of an entitlements plist (XML or what `codesign -d --entitlements :-` prints). */
+export function entitlementKeysOf(text: string): Record<string, PlistValue> | null {
+  const start = text.indexOf('<?xml'); const i = start >= 0 ? start : text.indexOf('<plist');
+  if (i < 0) return null;
+  try { const v = parsePlist(text.slice(i)); return v && typeof v === 'object' && !Array.isArray(v) && !Buffer.isBuffer(v) ? v as Record<string, PlistValue> : null; } catch { return null; }
+}
+
+export interface Identity { sha1: string; name: string }
+
+/** The signing identities for a Mac App Store build on this team: the app one ("Apple Distribution" or the older
+ *  "3rd Party Mac Developer Application" / "Mac App Distribution") and the installer one ("3rd Party Mac Developer
+ *  Installer" / "Mac Installer Distribution"). `all` is the parsed `security find-identity -v` list. */
+export function pickMasIdentities(all: Identity[], teamId?: string | null): { app: Identity | null; installer: Identity | null } {
+  const mine = all.filter(i => !teamId || i.name.includes(`(${teamId})`));
+  const first = (...prefixes: string[]): Identity | null => { for (const p of prefixes) { const h = mine.find(i => i.name.startsWith(p)); if (h) return h; } return null; };
+  return { app: first('3rd Party Mac Developer Application', 'Apple Distribution', 'Mac App Distribution'), installer: first('Mac Installer Distribution', '3rd Party Mac Developer Installer') };
+}
+
+export interface MasProfile { path: string; uuid: string; name: string; team: string; expires: string }
+
+/** Mac App Store profiles (.provisionprofile / .mobileprovision) among `files`: macOS platform, no device list, this
+ *  application identifier, not expired; newest expiry first. `parse` reads one profile file. Pure. */
+export function pickMasProfiles(files: { path: string; profile: Record<string, PlistValue> }[], bundleId: string, teamId: string | null, now = Date.now()): MasProfile[] {
+  const out: MasProfile[] = [];
+  for (const { path, profile: p } of files) {
+    const ent = (p.Entitlements ?? {}) as Record<string, PlistValue>;
+    const team = String((p.TeamIdentifier as string[] | undefined)?.[0] ?? '');
+    const appId = String(ent['com.apple.application-identifier'] ?? ent['application-identifier'] ?? '');
+    const platforms = (p.Platform as string[] | undefined) ?? [];
+    if (platforms.length && !platforms.includes('OSX') && !platforms.includes('macOS')) continue;
+    if (p.ProvisionedDevices || p.ProvisionsAllDevices) continue;
+    if (appId !== `${team}.${bundleId}` || (teamId && team !== teamId)) continue;
+    if (Date.parse(String(p.ExpirationDate)) < now) continue;
+    if (!out.some(x => x.uuid === p.UUID)) out.push({ path, uuid: String(p.UUID), name: String(p.Name), team, expires: String(p.ExpirationDate) });
+  }
+  return out.sort((a, b) => Date.parse(b.expires) - Date.parse(a.expires));
+}
+
+export interface PathFreeInput { home: string; user: string; root: string; cargoHome?: string; rustupHome?: string; rustflags?: string }
+
+/** Environment of a build that leaves no local path in the binary: rustc remaps the checkout, CARGO_HOME, RUSTUP_HOME
+ *  and the home folder; no debug info; symbols stripped. Pure. */
+export function pathFreeEnv(i: PathFreeInput): Record<string, string> {
+  const maps: [string, string][] = [
+    [i.root, '/src'], [i.cargoHome ?? `${i.home}/.cargo`, '/cargo'], [i.rustupHome ?? `${i.home}/.rustup`, '/rustup'], [i.home, '/home/build'],
+  ];
+  const seen = new Set<string>();
+  const flags = maps.filter(([from]) => from && !seen.has(from) && seen.add(from)).map(([from, to]) => `--remap-path-prefix=${from}=${to}`);
+  return {
+    RUSTFLAGS: [i.rustflags ?? '', ...flags].filter(Boolean).join(' '),
+    CARGO_PROFILE_RELEASE_DEBUG: '0',
+    CARGO_PROFILE_RELEASE_STRIP: 'symbols',
+    CARGO_PROFILE_RELEASE_TRIM_PATHS: 'all',
+  };
+}
+
+export interface Leak { file: string; needle: string; count: number }
+
+const MAX_SCAN = 400 * 1048576;
+
+/** Every file under `dir` that contains one of the needles (home folder, user name as /name/, checkout path). Reads each
+ *  file whole (an .app is some tens of MB). */
+export function scanPathLeaks(dir: string, needles: string[]): Leak[] {
+  const ns = [...new Set(needles.filter(n => n.length >= 4))].map(n => ({ n, b: Buffer.from(n) }));
+  const out: Leak[] = [];
+  const walk = (d: string): void => {
+    let names: string[]; try { names = readdirSync(d); } catch { return; }
+    for (const name of names) {
+      const p = join(d, name);
+      let st; try { st = statSync(p); } catch { continue; }
+      if (st.isDirectory()) { walk(p); continue; }
+      if (!st.isFile() || st.size > MAX_SCAN) continue;
+      const buf = readFileSync(p);
+      for (const { n, b } of ns) {
+        let count = 0; for (let at = buf.indexOf(b); at >= 0; at = buf.indexOf(b, at + b.length)) count++;
+        if (count) out.push({ file: relative(dir, p).split(sep).join('/'), needle: n, count });
+      }
+    }
+  };
+  walk(dir);
+  return out;
+}
+
+/** The needles for a leak scan: the home folder, /Users/<user> and the checkout. */
+export const leakNeedles = (home: string, user: string, root: string): string[] => [home, `/Users/${user}/`, `/home/${user}/`, root];
+
+export interface AppFacts { info: Record<string, PlistValue>; entitlements: Record<string, PlistValue> | null; hasProfile: boolean; leaks: Leak[] }
+
+/** Problems (stop) and warnings of a built .app before it goes into a .pkg. Pure. */
+export function appProblems(f: AppFacts, o: { bundleId: string; version: string; build: string; signed: boolean; pathFree: boolean }): { errors: string[]; warnings: string[] } {
+  const errors: string[] = [], warnings: string[] = [];
+  const s = (k: string): string | undefined => (typeof f.info[k] === 'string' ? f.info[k] as string : undefined);
+  if (s('CFBundleIdentifier') !== o.bundleId) errors.push(`CFBundleIdentifier is ${s('CFBundleIdentifier') ?? 'missing'}, not ${o.bundleId}`);
+  if (s('CFBundleShortVersionString') !== o.version) errors.push(`CFBundleShortVersionString is ${s('CFBundleShortVersionString') ?? 'missing'}, not ${o.version}`);
+  if (s('CFBundleVersion') !== o.build) errors.push(`CFBundleVersion is ${s('CFBundleVersion') ?? 'missing'}, not ${o.build} (Tauri: bundle.macOS.bundleVersion)`);
+  if (!s('LSApplicationCategoryType')) errors.push('LSApplicationCategoryType is missing: set bundle.category in tauri.conf.json (e.g. "Utility", "Productivity")');
+  if (!s('LSMinimumSystemVersion')) errors.push('LSMinimumSystemVersion is missing: set bundle.macOS.minimumSystemVersion in tauri.conf.json');
+  if (f.info.ITSAppUsesNonExemptEncryption === undefined) warnings.push('ITSAppUsesNonExemptEncryption is not in Info.plist: the build will ask for export compliance in App Store Connect (storebound apple encryption answers it)');
+  if (o.signed) {
+    if (!f.entitlements) errors.push('the app has no entitlements (codesign -d --entitlements): the Mac App Store requires the app sandbox');
+    else {
+      for (const k of MAS_REQUIRED) if (f.entitlements[k] === undefined) errors.push(`entitlement ${k} is missing`);
+      if (f.entitlements['com.apple.security.app-sandbox'] !== true) errors.push('com.apple.security.app-sandbox is not true');
+      if (f.entitlements['com.apple.security.get-task-allow'] === true) errors.push('com.apple.security.get-task-allow is true: a development entitlement, App Store Connect refuses it');
+    }
+    if (!f.hasProfile) errors.push('Contents/embedded.provisionprofile is missing: a Mac App Store app needs its provisioning profile inside (Tauri bundle.macOS.files)');
+  }
+  if (f.leaks.length) {
+    const lines = f.leaks.slice(0, 8).map(l => `  ${l.file}: ${l.count}x "${l.needle}"`);
+    (o.pathFree ? errors : warnings).push(`local paths in the app:\n${lines.join('\n')}${f.leaks.length > 8 ? `\n  ... ${f.leaks.length - 8} more` : ''}${o.pathFree ? '' : '\n  (build with --path-free to remap them)'}`);
+  }
+  return { errors, warnings };
+}
+
+export interface PkgSignature { signed: boolean; trusted: boolean; certificate: string | null; installerCert: boolean }
+
+/** `pkgutil --check-signature` output -> what matters. Pure. */
+export function parsePkgSignature(out: string): PkgSignature {
+  if (/no signature/i.test(out)) return { signed: false, trusted: false, certificate: null, installerCert: false };
+  const cert = /^\s*1\.\s+(.+)$/m.exec(out)?.[1]?.trim() ?? null;
+  return { signed: /Status:\s+signed/i.test(out), trusted: /trusted (certificate|timestamp)|signed by a certificate trusted/i.test(out), certificate: cert,
+    installerCert: !!cert && /(3rd Party Mac Developer Installer|Mac Installer Distribution)/.test(cert) };
+}
+
+export function pkgProblems(sig: PkgSignature): string[] {
+  if (!sig.signed) return ['the .pkg is not signed (pkgutil --check-signature): productbuild --sign "<Mac Installer Distribution identity>"'];
+  const e: string[] = [];
+  if (!sig.installerCert) e.push(`the .pkg is signed with "${sig.certificate ?? '?'}", not a "3rd Party Mac Developer Installer" / "Mac Installer Distribution" certificate: the Mac App Store refuses it`);
+  return e;
+}
+
+/** bundle id, version and build from a component package's PackageInfo (`pkgutil --expand` writes it). Pure. */
+export function parsePackageInfo(xml: string): { bundleId: string; version: string; build: string } | null {
+  const tag = /<bundle\b[^>]*>/.exec(xml)?.[0];
+  if (!tag) return null;
+  const attr = (n: string): string | undefined => new RegExp(`\\b${n}="([^"]*)"`).exec(tag)?.[1];
+  const bundleId = attr('id'), version = attr('CFBundleShortVersionString'), build = attr('CFBundleVersion');
+  return bundleId && version && build ? { bundleId, version, build } : null;
+}
+
+export interface MasPlanInput {
+  tauri: TauriProject; tauriCmd: string[]; target: string; out: string; configFile: string; entitlementsFile: string; profile: string | null;
+  appIdentity: string | null; installerIdentity: string | null; version: string; build: string; unsigned: boolean; pathFree: boolean; pkg: string;
+}
+
+/** The commands of one build, as shown by --dry and run by build-mas. Pure. */
+export function masSteps(i: MasPlanInput): { tauri: string[]; productbuild: string[]; codesignVerify: string[]; pkgCheck: string[] } {
+  const appPath = join(i.tauri.cwd, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
+  return {
+    tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, '--config', i.configFile],
+    codesignVerify: ['codesign', '--verify', '--deep', '--strict', '--verbose=2', appPath],
+    productbuild: ['productbuild', '--component', appPath, '/Applications', ...(i.unsigned || !i.installerIdentity ? [] : ['--sign', i.installerIdentity]), i.pkg],
+    pkgCheck: ['pkgutil', '--check-signature', i.pkg],
+  };
+}
+
+/** The tauri.conf.json overlay for the Mac App Store: identity, entitlements, profile, version, build. */
+export function tauriOverlay(i: Pick<MasPlanInput, 'appIdentity' | 'entitlementsFile' | 'profile' | 'version' | 'build' | 'unsigned'> & { minOs?: string; category?: string }): Record<string, unknown> {
+  return {
+    version: i.version,
+    bundle: {
+      ...(i.category ? { category: i.category } : {}),
+      macOS: {
+        bundleVersion: i.build,
+        ...(i.minOs ? { minimumSystemVersion: i.minOs } : {}),
+        ...(i.unsigned ? {} : { signingIdentity: i.appIdentity, entitlements: i.entitlementsFile, hardenedRuntime: true, ...(i.profile ? { files: { 'embedded.provisionprofile': i.profile } } : {}) }),
+      },
+    },
+  };
+}
+
+export interface AppInfo { appDir: string; info: Record<string, PlistValue> }
+
+/** The .app Tauri built: the first *.app in <cwd>/target/<target>/release/bundle/macos (or the workspace's target). */
+export function findBuiltApp(cwd: string, root: string, target: string, productName: string): string | null {
+  for (const base of [join(cwd, 'target'), join(root, 'target'), join(dirname(cwd), 'target')]) {
+    const d = join(base, target, 'release', 'bundle', 'macos');
+    const p = join(d, `${productName}.app`);
+    if (existsSync(p)) return p;
+    try { const any = readdirSync(d).find(f => f.endsWith('.app')); if (any) return join(d, any); } catch { /* none */ }
+  }
+  return null;
+}
+
+export function readAppInfo(appDir: string): Record<string, PlistValue> {
+  const p = join(appDir, 'Contents', 'Info.plist');
+  if (!existsSync(p)) throw new Error(`${basename(appDir)}: no Contents/Info.plist`);
+  return parsePlist(readFileSync(p)) as Record<string, PlistValue>;
+}
+
+/** bundle id, version and build of a .pkg: pkgutil --expand on a Mac (PackageInfo), else the <pkg>.json next to it that
+ *  `apple build --platform macos` wrote. Refuses an unsigned or wrongly signed .pkg when pkgutil is there. */
+export function pkgInfo(pkg: string, expectBundleId?: string): { bundleId: string; version: string; build: string } {
+  if (rt.which('pkgutil')) {
+    const sig = parsePkgSignature(rt.spawnSync(['pkgutil', '--check-signature', pkg], { stdout: 'pipe', stderr: 'pipe' }).stdout.toString());
+    const bad = pkgProblems(sig);
+    if (bad.length) throw new Error(`${basename(pkg)}: not uploaded:\n${bad.map(x => `  ${x}`).join('\n')}`);
+    const tmp = join(process.env.TMPDIR ?? '/tmp', `sb-pkg-${process.pid}-${Date.now()}`);
+    try {
+      if (rt.spawnSync(['pkgutil', '--expand', pkg, tmp], { stdout: 'pipe', stderr: 'pipe' }).exitCode === 0) {
+        for (const d of readdirSync(tmp)) {
+          const p = join(tmp, d, 'PackageInfo');
+          const info = existsSync(p) ? parsePackageInfo(readFileSync(p, 'utf8')) : null;
+          if (info && (!expectBundleId || info.bundleId === expectBundleId)) return info;
+        }
+      }
+    } finally { try { rmSync(tmp, { recursive: true, force: true }); } catch { /* temp */ } }
+  }
+  const side = `${pkg}.json`;
+  if (existsSync(side)) {
+    const j = JSON.parse(readFileSync(side, 'utf8')) as { bundleId?: string; version?: string; build?: string; unsigned?: boolean };
+    if (j.unsigned) throw new Error(`${basename(pkg)} was built with --unsigned: the Mac App Store refuses it`);
+    if (j.bundleId && j.version && j.build) return { bundleId: j.bundleId, version: j.version, build: j.build };
+  }
+  throw new Error(`${basename(pkg)}: cannot read bundle id / version / build (needs pkgutil on a Mac, or the ${basename(side)} file apple build wrote)`);
+}
diff --git a/cli/lib/signing.ts b/cli/lib/signing.ts
index 8abefab..70019c9 100644
--- a/cli/lib/signing.ts
+++ b/cli/lib/signing.ts
@@ -20,7 +20,7 @@ export type CapabilityType = typeof CAPABILITY_TYPES[number];
 
 /** Certificate types storebound creates: Apple Distribution (DISTRIBUTION, all platforms), the older iOS Distribution,
  *  and Developer ID Application (Mac apps outside the App Store; Account Holder only). */
-export const CERT_TYPES = ['DISTRIBUTION', 'IOS_DISTRIBUTION', 'DEVELOPER_ID_APPLICATION', 'DEVELOPER_ID_APPLICATION_G2'] as const;
+export const CERT_TYPES = ['DISTRIBUTION', 'IOS_DISTRIBUTION', 'DEVELOPER_ID_APPLICATION', 'DEVELOPER_ID_APPLICATION_G2', 'MAC_APP_DISTRIBUTION', 'MAC_INSTALLER_DISTRIBUTION'] as const;
 export type CertType = typeof CERT_TYPES[number];
 
 /** Profile types for store builds (Profile.profileType). */
@@ -105,7 +105,7 @@ export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: Ap
 }
 
 /** Apple caps distribution certificates per team (Apple Distribution: 3 per team). */
-export const CERT_LIMIT: Partial<Record<CertType, number>> = { DISTRIBUTION: 3, IOS_DISTRIBUTION: 3, DEVELOPER_ID_APPLICATION: 5, DEVELOPER_ID_APPLICATION_G2: 5 };
+export const CERT_LIMIT: Partial<Record<CertType, number>> = { DISTRIBUTION: 3, IOS_DISTRIBUTION: 3, DEVELOPER_ID_APPLICATION: 5, DEVELOPER_ID_APPLICATION_G2: 5, MAC_APP_DISTRIBUTION: 3, MAC_INSTALLER_DISTRIBUTION: 3 };
 
 export function certificateReq(type: CertType, csr: string): Req {
   return { method: 'POST', path: '/v1/certificates', note: `create ${type} certificate (key in .storebound/signing, never printed)`,
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index 6d01360..fe0dd52 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -187,13 +187,13 @@ export function ipaVersionProblem(ipaVersion: string, wanted: string | null | un
 export const UPLOAD_DONE = new Set(['COMPLETE', 'FAILED']);
 
 /** Requests of an App Store Connect API build upload (Build Uploads, API 4.1): the upload, then the file reservation. */
-export function buildUploadReqs(appId: string, info: IpaInfo, fileName: string, fileSize: number) {
+export function buildUploadReqs(appId: string, info: IpaInfo, fileName: string, fileSize: number, platform: 'IOS' | 'MAC_OS' = 'IOS') {
   return {
     upload: { method: 'POST' as const, path: '/v1/buildUploads', note: `build ${info.build} (${info.version})`,
-      body: { data: { type: 'buildUploads', attributes: { cfBundleShortVersionString: info.version, cfBundleVersion: info.build, platform: 'IOS' },
+      body: { data: { type: 'buildUploads', attributes: { cfBundleShortVersionString: info.version, cfBundleVersion: info.build, platform },
         relationships: { app: { data: { type: 'apps', id: appId } } } } } },
     file: (uploadId: string) => ({ method: 'POST' as const, path: '/v1/buildUploadFiles', note: `${fileName} (${(fileSize / 1048576).toFixed(1)} MB)`,
-      body: { data: { type: 'buildUploadFiles', attributes: { assetType: 'ASSET', fileName, fileSize, uti: 'com.apple.ipa' },
+      body: { data: { type: 'buildUploadFiles', attributes: { assetType: 'ASSET', fileName, fileSize, uti: platform === 'MAC_OS' ? 'com.apple.pkg' : 'com.apple.ipa' },
         relationships: { buildUpload: { data: { type: 'buildUploads', id: uploadId } } } } } }),
     commit: (fileId: string, md5: string) => ({ method: 'PATCH' as const, path: `/v1/buildUploadFiles/${fileId}`, note: 'commit',
       body: { data: { type: 'buildUploadFiles', id: fileId, attributes: { uploaded: true, sourceFileChecksums: { file: { hash: md5, algorithm: 'MD5' } } } } } }),
@@ -202,7 +202,7 @@ export function buildUploadReqs(appId: string, info: IpaInfo, fileName: string,
 
 /** altool upload (Xcode's command line uploader) with the API key. */
 export const altoolArgs = (ipa: string, auth: AscAuth): string[] =>
-  ['xcrun', 'altool', '--upload-package', ipa, '--api-key', auth.keyId, '--api-issuer', auth.issuerId, '--p8-file-path', auth.keyPath, '--output-format', 'json'];
+  ['xcrun', 'altool', '--upload-package', ipa, ...(ipa.endsWith('.pkg') ? ['--type', 'macos'] : []), '--api-key', auth.keyId, '--api-issuer', auth.issuerId, '--p8-file-path', auth.keyPath, '--output-format', 'json'];
 
 /** Errors and warnings of a build upload's state (StateDetail: code, message). */
 export function uploadProblems(state: { errors?: { code?: string; message?: string; description?: string }[]; warnings?: { code?: string; message?: string; description?: string }[] } | undefined): { errors: string[]; warnings: string[] } {
diff --git a/tests/mas-build.test.ts b/tests/mas-build.test.ts
new file mode 100644
index 0000000..b689b02
--- /dev/null
+++ b/tests/mas-build.test.ts
@@ -0,0 +1,194 @@
+// Mac App Store build of a Tauri app (cli/lib/mas.ts, cli/apple/build-mas.ts): plan, entitlements, identities, path-free
+// flags, leak scan, app / pkg checks, and the pkg variant of the build upload requests.
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { tauriCommand } from '../cli/apple/build-mas';
+import { appProblems, categoryId, entitlementKeysOf, entitlementsXml, findTauri, masEntitlements, masSteps, parsePackageInfo, parsePkgSignature, pathFreeEnv, pickMasIdentities, pickMasProfiles, pkgProblems, scanPathLeaks, tauriOverlay } from '../cli/lib/mas';
+import { altoolArgs, buildUploadReqs } from '../cli/lib/xcode';
+
+const tmp = mkdtempSync(join(tmpdir(), 'sb-mas-'));
+afterAll(() => rmSync(tmp, { recursive: true, force: true }));
+
+const conf = { productName: 'Demo App', identifier: 'com.example.demo', version: '1.2.3', bundle: { category: 'Utility', macOS: { minimumSystemVersion: '12.0' } } };
+function fixture(): string {
+  const root = mkdtempSync(join(tmp, 'p-'));
+  mkdirSync(join(root, 'apps/desktop/src-tauri'), { recursive: true });
+  writeFileSync(join(root, 'apps/desktop/src-tauri/tauri.conf.json'), JSON.stringify(conf));
+  return root;
+}
+
+describe('tauri project', () => {
+  test('found by scan and by hint; fields read', () => {
+    const root = fixture();
+    const t = findTauri(root);
+    expect(t.productName).toBe('Demo App');
+    expect(t.identifier).toBe('com.example.demo');
+    expect(t.cwd).toBe(join(root, 'apps/desktop'));
+    expect(t.minOs).toBe('12.0');
+    expect(findTauri(root, 'apps/desktop/src-tauri').dir).toBe(t.dir);
+    expect(() => findTauri(root, 'nope')).toThrow('no tauri.conf.json');
+  });
+  test('none or several found', () => {
+    const empty = mkdtempSync(join(tmp, 'e-'));
+    expect(() => findTauri(empty)).toThrow('no tauri.conf.json found');
+    const two = fixture();
+    mkdirSync(join(two, 'other/src-tauri'), { recursive: true });
+    writeFileSync(join(two, 'other/src-tauri/tauri.conf.json'), JSON.stringify(conf));
+    expect(() => findTauri(two)).toThrow('several Tauri projects');
+  });
+  test('tauri command: project binary, cargo-tauri, else bunx', () => {
+    expect(tauriCommand('/a/b', p => /a.node_modules..bin.tauri$/.test(p), () => null)).toHaveLength(1);
+    expect(tauriCommand('/a/b', () => false, c => (c === 'cargo-tauri' ? '/x' : null))).toEqual(['cargo', 'tauri']);
+    expect(tauriCommand('/a/b', () => false, () => null)[0]).toBe('bunx');
+  });
+  test('category ids', () => {
+    expect(categoryId('Utility')).toBe('public.app-category.utilities');
+    expect(categoryId('public.app-category.games')).toBe('public.app-category.games');
+    expect(categoryId('Nope')).toBeNull();
+  });
+});
+
+describe('entitlements', () => {
+  test('sandbox and identifiers forced, project keys kept', () => {
+    const e = masEntitlements({ teamId: 'ABCDE12345', bundleId: 'com.example.demo', existing: { 'com.apple.security.app-sandbox': false, 'com.apple.security.files.user-selected.read-write': true } });
+    expect(e['com.apple.security.app-sandbox']).toBe(true);
+    expect(e['com.apple.application-identifier']).toBe('ABCDE12345.com.example.demo');
+    expect(e['com.apple.developer.team-identifier']).toBe('ABCDE12345');
+    expect(e['com.apple.security.files.user-selected.read-write']).toBe(true);
+    expect(e['com.apple.security.network.client']).toBe(true);
+  });
+  test('xml round trip', () => {
+    const e = masEntitlements({ teamId: 'ABCDE12345', bundleId: 'com.example.demo' });
+    expect(entitlementKeysOf(entitlementsXml(e))?.['com.apple.security.app-sandbox']).toBe(true);
+    expect(entitlementKeysOf('garbage')).toBeNull();
+  });
+});
+
+describe('identities and profiles', () => {
+  const ids = [
+    { sha1: 'A', name: 'Apple Development: X (AAAAAAAAAA)' },
+    { sha1: 'B', name: 'Apple Distribution: Co (ABCDE12345)' },
+    { sha1: 'C', name: '3rd Party Mac Developer Installer: Co (ABCDE12345)' },
+    { sha1: 'D', name: 'Apple Distribution: Other (ZZZZZZZZZZ)' },
+  ];
+  test('app and installer identity of the team', () => {
+    const p = pickMasIdentities(ids, 'ABCDE12345');
+    expect(p.app?.sha1).toBe('B');
+    expect(p.installer?.sha1).toBe('C');
+    expect(pickMasIdentities(ids, 'QQQQQQQQQQ')).toEqual({ app: null, installer: null });
+    expect(pickMasIdentities([{ sha1: 'E', name: '3rd Party Mac Developer Application: Co (ABCDE12345)' }, ids[1]!], 'ABCDE12345').app?.sha1).toBe('E');
+    expect(pickMasIdentities([{ sha1: 'F', name: 'Mac Installer Distribution: Co (ABCDE12345)' }, ids[2]!], 'ABCDE12345').installer?.sha1).toBe('F');
+  });
+  const prof = (o: Record<string, unknown>) => ({ path: '/p', profile: { UUID: 'u1', Name: 'n', TeamIdentifier: ['ABCDE12345'], Platform: ['OSX'], ExpirationDate: '2099-01-01T00:00:00Z',
+    Entitlements: { 'com.apple.application-identifier': 'ABCDE12345.com.example.demo' }, ...o } as never });
+  test('Mac App Store profile: macOS, no devices, matching id, not expired', () => {
+    expect(pickMasProfiles([prof({})], 'com.example.demo', 'ABCDE12345')).toHaveLength(1);
+    expect(pickMasProfiles([prof({ Platform: ['iOS'] })], 'com.example.demo', null)).toHaveLength(0);
+    expect(pickMasProfiles([prof({ ProvisionedDevices: ['x'] })], 'com.example.demo', null)).toHaveLength(0);
+    expect(pickMasProfiles([prof({})], 'com.example.other', null)).toHaveLength(0);
+    expect(pickMasProfiles([prof({ ExpirationDate: '2000-01-01T00:00:00Z' })], 'com.example.demo', null)).toHaveLength(0);
+  });
+});
+
+describe('path-free', () => {
+  test('remaps checkout, cargo, rustup, home; no debug info', () => {
+    const e = pathFreeEnv({ home: '/Users/dev', user: 'dev', root: '/Users/dev/work/app', rustflags: '-C target-cpu=native' });
+    expect(e.RUSTFLAGS).toContain('-C target-cpu=native');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/work/app=/src');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.cargo=/cargo');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.rustup=/rustup');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev=/home/build');
+    expect(e.CARGO_PROFILE_RELEASE_DEBUG).toBe('0');
+    
+  });
+  test('leak scan finds the home folder in a binary and a plist', () => {
+    const app = mkdtempSync(join(tmp, 'app-'));
+    mkdirSync(join(app, 'Contents/MacOS'), { recursive: true });
+    writeFileSync(join(app, 'Contents/MacOS/bin'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('panic at /Users/dev/.cargo/registry/x.rs'), Buffer.from([0])]));
+    writeFileSync(join(app, 'Contents/Info.plist'), 'clean');
+    const leaks = scanPathLeaks(app, ['/Users/dev', '/Users/dev/']);
+    expect(leaks.map(l => `${l.file}:${l.needle}`)).toEqual(['Contents/MacOS/bin:/Users/dev', 'Contents/MacOS/bin:/Users/dev/']);
+    expect(scanPathLeaks(app, ['/Users/nobody'])).toEqual([]);
+  });
+});
+
+describe('app and pkg checks', () => {
+  const good = { info: { CFBundleIdentifier: 'com.example.demo', CFBundleShortVersionString: '1.2.3', CFBundleVersion: '7', LSApplicationCategoryType: 'public.app-category.utilities', LSMinimumSystemVersion: '12.0', ITSAppUsesNonExemptEncryption: false },
+    entitlements: masEntitlements({ teamId: 'ABCDE12345', bundleId: 'com.example.demo' }), hasProfile: true, leaks: [] };
+  const o = { bundleId: 'com.example.demo', version: '1.2.3', build: '7', signed: true, pathFree: true };
+  test('a good app passes', () => { expect(appProblems(good, o)).toEqual({ errors: [], warnings: [] }); });
+  test('missing sandbox, category, min OS, profile, wrong build', () => {
+    const bad = { ...good, info: { ...good.info, CFBundleVersion: '6', LSApplicationCategoryType: undefined, LSMinimumSystemVersion: undefined } as never, entitlements: { 'com.apple.security.app-sandbox': false }, hasProfile: false };
+    const e = appProblems(bad, o).errors.join('\n');
+    for (const s of ['CFBundleVersion is 6', 'LSApplicationCategoryType', 'LSMinimumSystemVersion', 'app-sandbox is not true', 'application-identifier', 'embedded.provisionprofile']) expect(e).toContain(s);
+    expect(appProblems({ ...good, entitlements: null }, o).errors[0]).toContain('no entitlements');
+  });
+  test('get-task-allow refused; unsigned skips entitlement checks', () => {
+    expect(appProblems({ ...good, entitlements: { ...good.entitlements!, 'com.apple.security.get-task-allow': true } }, o).errors.join()).toContain('get-task-allow');
+    expect(appProblems({ ...good, entitlements: null, hasProfile: false }, { ...o, signed: false }).errors).toEqual([]);
+  });
+  test('path leaks are errors with --path-free, warnings without', () => {
+    const leaks = [{ file: 'Contents/MacOS/bin', needle: '/Users/dev', count: 3 }];
+    expect(appProblems({ ...good, leaks }, o).errors[0]).toContain('local paths');
+    const w = appProblems({ ...good, leaks }, { ...o, pathFree: false });
+    expect(w.errors).toEqual([]);
+    expect(w.warnings.join()).toContain('--path-free');
+  });
+  test('pkgutil --check-signature', () => {
+    const ok = parsePkgSignature('Package "a.pkg":\n   Status: signed by a certificate trusted by macOS\n   Certificate Chain:\n    1. 3rd Party Mac Developer Installer: Co (ABCDE12345)\n       Expires: 2027');
+    expect(ok).toMatchObject({ signed: true, installerCert: true, certificate: '3rd Party Mac Developer Installer: Co (ABCDE12345)' });
+    expect(pkgProblems(ok)).toEqual([]);
+    expect(pkgProblems(parsePkgSignature('Package "a.pkg":\n   Status: no signature'))[0]).toContain('not signed');
+    const dev = parsePkgSignature('   Status: signed by a certificate trusted by macOS\n    1. Developer ID Installer: Co (ABCDE12345)');
+    expect(pkgProblems(dev)[0]).toContain('not a "3rd Party Mac Developer Installer"');
+  });
+  test('PackageInfo', () => {
+    const x = '<pkg-info identifier="com.example.demo" version="1.2.3"><bundle path="./Demo.app" id="com.example.demo" CFBundleShortVersionString="1.2.3" CFBundleVersion="7"/></pkg-info>';
+    expect(parsePackageInfo(x)).toEqual({ bundleId: 'com.example.demo', version: '1.2.3', build: '7' });
+    expect(parsePackageInfo('<pkg-info/>')).toBeNull();
+  });
+});
+
+describe('plan', () => {
+  const t = findTauri(fixture());
+  const base = { tauri: t, tauriCmd: ['cargo', 'tauri'], target: 'universal-apple-darwin', out: '/o', configFile: '/o/c.json', entitlementsFile: '/o/e', profile: '/o/p', appIdentity: 'Apple Distribution: Co (ABCDE12345)',
+    installerIdentity: '3rd Party Mac Developer Installer: Co (ABCDE12345)', version: '1.2.3', build: '7', unsigned: false, pathFree: true, pkg: '/o/Demo App.pkg' };
+  test('signed steps: tauri app bundle, productbuild with the installer identity', () => {
+    const s = masSteps(base);
+    expect(s.tauri).toEqual(['cargo', 'tauri', 'build', '--bundles', 'app', '--target', 'universal-apple-darwin', '--config', '/o/c.json']);
+    expect(s.productbuild.slice(0, 2)).toEqual(['productbuild', '--component']);
+    expect(s.productbuild).toContain('--sign');
+    expect(s.productbuild.at(-1)).toBe('/o/Demo App.pkg');
+    expect(s.pkgCheck).toEqual(['pkgutil', '--check-signature', '/o/Demo App.pkg']);
+  });
+  test('unsigned: no --sign', () => { expect(masSteps({ ...base, unsigned: true }).productbuild).not.toContain('--sign'); });
+  test('tauri overlay: identity, entitlements, embedded profile, bundleVersion', () => {
+    const o = tauriOverlay({ ...base, minOs: '12.0' }) as { version: string; bundle: { macOS: Record<string, unknown> } };
+    expect(o.version).toBe('1.2.3');
+    expect(o.bundle.macOS.bundleVersion).toBe('7');
+    expect(o.bundle.macOS.signingIdentity).toBe(base.appIdentity);
+    expect(o.bundle.macOS.hardenedRuntime).toBe(true);
+    expect(o.bundle.macOS.files).toEqual({ 'embedded.provisionprofile': '/o/p' });
+    const u = tauriOverlay({ ...base, unsigned: true }) as { bundle: { macOS: Record<string, unknown> } };
+    expect(u.bundle.macOS.signingIdentity).toBeUndefined();
+  });
+});
+
+describe('build upload of a pkg', () => {
+  const info = { bundleId: 'com.example.demo', version: '1.2.3', build: '7' };
+  test('platform MAC_OS and the pkg uti; iOS unchanged', () => {
+    const m = buildUploadReqs('app1', info, 'Demo.pkg', 10, 'MAC_OS');
+    expect((m.upload.body.data.attributes as Record<string, unknown>).platform).toBe('MAC_OS');
+    expect((m.file('u1').body.data.attributes as Record<string, unknown>).uti).toBe('com.apple.pkg');
+    const i = buildUploadReqs('app1', info, 'Demo.ipa', 10);
+    expect((i.upload.body.data.attributes as Record<string, unknown>).platform).toBe('IOS');
+    expect((i.file('u1').body.data.attributes as Record<string, unknown>).uti).toBe('com.apple.ipa');
+  });
+  test('altool gets --type macos for a pkg', () => {
+    const k = { keyPath: 'k', keyId: 'i', issuerId: 's' };
+    expect(altoolArgs('/o/Demo.pkg', k)).toContain('macos');
+    expect(altoolArgs('/o/Demo.ipa', k)).not.toContain('--type');
+  });
+});

From 5fc15dd77359fafd216d5f27e36f4eecc37c7627 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:11:14 +0800
Subject: [PATCH 139/255] apple build/upload: flags and help for the macOS
 Tauri path

---
 cli/apple/build.ts  |  2 ++
 cli/apple/upload.ts |  1 +
 cli/commands.ts     |  4 ++--
 cli/data/flags.json | 16 +++++++++++++++-
 4 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index b5df488..74f0056 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -1,4 +1,6 @@
 // Archive and export an App Store IPA with xcodebuild, no Xcode UI.
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]
+//     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
 // First the prebuild (build.prebuild / apple.prebuild: e.g. the web build + npx cap sync; once per flow run), then a
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 03b19c6..114d989 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -1,5 +1,6 @@
 // Upload an IPA to App Store Connect and wait until Apple has processed the build.
 //   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
+//   storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)
 // Default IPA: the newest in <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
 // --build N the one with that build number. The bundle id, version and build number come from the IPA's Info.plist.
 // An IPA whose build number is already on App Store Connect fails with exit 1 (a stale IPA left by a failed
diff --git a/cli/commands.ts b/cli/commands.ts
index e4df348..01665de 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -91,8 +91,8 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
   'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple signing': [() => import('./apple/signing'), 'status | ensure: bundle id capabilities, distribution certificate (key kept in .storebound/signing), App Store profiles installed for Xcode; --dry, asks first'],
-  'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --dry'],
-  'apple upload': [() => import('./apple/upload'), 'upload an IPA (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
+  'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --platform macos --tauri <src-tauri> [--path-free] builds a Tauri app for the Mac App Store (signed .app, sandbox entitlements, profile, productbuild .pkg); --dry'],
+  'apple upload': [() => import('./apple/upload'), 'upload an IPA, or with --platform macos a signed .pkg (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
   'apple adhoc': [() => import('./apple/adhoc'), 'ad-hoc / release-testing: devices (list) | register (dry run, asks first) | options (ExportOptions.plist) | export --archive <x.xcarchive>'],
   'apple next-build': [() => import('./apple/next-build'), 'next safe build number (prints the number)'],
   'apple game-center': [() => import('./apple/game-center'), '[status] Game Center from games: the app\'s Game Center detail, the version switch, leaderboards + achievements with localizations (upsert by vendor id); App ID capability via signing ensure; --dry, asks first'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9707cf8..db3f259 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -77,10 +77,17 @@
    "no-install",
    "no-prebuild",
    "out",
+   "path-free",
+   "platform",
+   "profile",
    "progress",
    "project",
    "result-file",
+   "scan-paths",
    "scheme",
+   "target",
+   "tauri",
+   "unsigned",
    "version",
    "version-from",
    "workspace"
@@ -338,6 +345,7 @@
    "locale",
    "no-wait",
    "older-than",
+   "platform",
    "pre-check",
    "progress",
    "remove",
@@ -1259,6 +1267,7 @@
    "originality",
    "out",
    "param",
+   "path-free",
    "paths",
    "phased",
    "platform",
@@ -1289,6 +1298,7 @@
    "resume",
    "review-sent",
    "root",
+   "scan-paths",
    "scenes",
    "scheme",
    "sdk-dirs",
@@ -1313,6 +1323,7 @@
    "storefronts",
    "submit-review",
    "target",
+   "tauri",
    "term",
    "territories",
    "text",
@@ -1329,6 +1340,7 @@
    "unanswered",
    "undo",
    "unity",
+   "unsigned",
    "update-bigmac",
    "update-desktop-database",
    "upload",
@@ -1398,6 +1410,7 @@
    "storebound apple appinfo [--dry] [--json] [--allow-price-changes] [--allow-availability-changes]"
   ],
   "apple build": [
+   "storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]",
    "storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]"
   ],
   "apple bundle": [
@@ -1504,7 +1517,8 @@
    "storebound apple testflight expire (--keep N | --older-than D) [--version x.y.z] [--dry] [--yes] [--json]"
   ],
   "apple upload": [
-   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
+   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]",
+   "storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)"
   ],
   "apple win-back": [
    "storebound apple win-back [--only sub1,sub2] [--dry] [--yes] [--json]"

From 0263f624439e4317d1f098d3aba510d3f7859333 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:11:56 +0800
Subject: [PATCH 140/255] mas build: cargo target folder is src-tauri/target

---
 cli/apple/build-mas.ts | 4 ++--
 cli/lib/mas.ts         | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index d1bb17c..82beef3 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -164,8 +164,8 @@ export async function run(ctx: Ctx): Promise<void> {
   writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
   shipPhase('build', `tauri build ${target}, build ${buildNo}`);
   await runLogged(steps.tauri, tauri.cwd, join(out, 'tauri-build.log'), showCmd(steps.tauri, null), env);
-  const appDir = findBuiltApp(tauri.cwd, root, target, tauri.productName);
-  if (!appDir) throw new Error(`tauri build exited 0 but no ${tauri.productName}.app is under ${join(tauri.cwd, 'target', target, 'release/bundle/macos')} (see ${join(out, 'tauri-build.log')})`);
+  const appDir = findBuiltApp(tauri.dir, root, target, tauri.productName);
+  if (!appDir) throw new Error(`tauri build exited 0 but no ${tauri.productName}.app is under ${join(tauri.dir, 'target', target, 'release/bundle/macos')} (see ${join(out, 'tauri-build.log')})`);
   shipPhase('verify', `checking ${basenameOf(appDir)}`);
   if (!unsigned) {
     const v = run1(steps.codesignVerify.map(x => (x.endsWith('.app') ? appDir : x)));
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index cc5d15b..c870b5d 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -228,7 +228,7 @@ export interface MasPlanInput {
 
 /** The commands of one build, as shown by --dry and run by build-mas. Pure. */
 export function masSteps(i: MasPlanInput): { tauri: string[]; productbuild: string[]; codesignVerify: string[]; pkgCheck: string[] } {
-  const appPath = join(i.tauri.cwd, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
+  const appPath = join(i.tauri.dir, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
   return {
     tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, '--config', i.configFile],
     codesignVerify: ['codesign', '--verify', '--deep', '--strict', '--verbose=2', appPath],

From f588f4e1aa549cf0c505fe07b365919b4808d049 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:12:37 +0800
Subject: [PATCH 141/255] path-free: no cargo trim-paths (nightly only)

---
 cli/lib/mas.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index c870b5d..a5365bb 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -132,8 +132,8 @@ export function pathFreeEnv(i: PathFreeInput): Record<string, string> {
   return {
     RUSTFLAGS: [i.rustflags ?? '', ...flags].filter(Boolean).join(' '),
     CARGO_PROFILE_RELEASE_DEBUG: '0',
+    // no CARGO_PROFILE_RELEASE_TRIM_PATHS: still nightly-only in cargo 1.98 ("feature trim-paths is required"); the remaps do the job
     CARGO_PROFILE_RELEASE_STRIP: 'symbols',
-    CARGO_PROFILE_RELEASE_TRIM_PATHS: 'all',
   };
 }
 

From 33a7f73ab97e843841b3a2b27b0364fecf117938 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:16:19 +0800
Subject: [PATCH 142/255] docs: build-and-sign Mac App Store Tauri section,
 pitfall 114, changelog

---
 CHANGELOG.md                   |  2 ++
 skills/build-and-sign/SKILL.md | 26 ++++++++++++++++++++++++++
 skills/store-pitfalls/SKILL.md | 26 ++++++++++++++++++++++++++
 3 files changed, 54 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6f174cf..703ba22 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,8 @@
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
 - `apple game-center --locale-map en=en-GB` (config `games.localeMap`) maps a config language to the live Game Center locale; the dry run suggests it when the live Game Center has exactly one variant of the language.
 - `play games`: a 403 SERVICE_DISABLED / accessNotConfigured names the Google Play Game Services Publishing API, the enable URL for the project and `console plan play-games-services`.
+
+- `apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned]`: Mac App Store build of a Tauri app. Generated sandbox entitlements, Mac App Store profile (installed, `--profile` or from the API), Apple Distribution / Mac Installer Distribution identities, `tauri build --bundles app`, checks of the .app, `productbuild` to a signed .pkg, `pkgutil --check-signature`; `--path-free` remaps local paths in rustc and fails on any leak of the home folder or user name. `apple upload <pkg> --platform macos` uploads it (platform MAC_OS). New certificate types MAC_APP_DISTRIBUTION and MAC_INSTALLER_DISTRIBUTION. Pitfall 119.
 - Desktop dev update channel: Settings > Updates offers Stable (the npm releases) and Dev (every push to main). Each push to main builds Windows and Linux bundles stamped `<next patch>-dev.<UTC commit time>` (above the current stable, below the next one); the VDS signs them and serves `storebound.dev/desktop/dev/latest.json` (newest 5 kept). The app checks its channel at start, every 15 minutes, after sleep and right after a channel switch, installs a strictly newer build quietly (deferred while the window is in use), never downgrades (dev back to stable waits for a newer stable), rewrites its logon autostart on every start, and the tray card shows version and channel. No macOS dev builds (Developer ID signing needs the Mac's GUI session).
 - `shots` full-bleed layout: `shots.layout: "bleed"` fills the image with the app's own frame (no device, no background) and puts the scene title as a short corner caption (`corner`, `captionScale`, `captionWidth`, `captionInset` per scene) legible through a text shadow and soft glow only; the Play feature graphic shows the logo or `shots.feature.title`. Frames are captured per size at its own pixels in `<frames>/<lang>/<size>/<name>.png` (feature: `<lang>/feature/`), including the `mac` and `chromebook` sizes; `shots check` / `capture --source folder` verify aspect and native width. `shots.orientation: "landscape"` (bleed only) renders every portrait size landscape (stores accept it). Templates `template-bleed.html`, `feature-bleed.html`.
 - `storebound desktop`: "opened" now also works when a hidden tray copy is already running. On Windows it prints "opened" only when a process of the installed path has a visible window (the running copy shows it through the single-instance handoff); on macOS / Linux a visible start or a handoff to the running copy counts, otherwise it says only a tray copy runs. The graceful stop waits 3 s on Windows (closing a tray app only hides it), then stops by PID.
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 274ab8e..e54b8e9 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -85,6 +85,32 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
 6. **Next.** `storebound apple encryption --build N`, `storebound apple testflight distribute --build N --group Team
    --dry` (`testflight` skill), `storebound apple listing --version x.y.z --build N` (`appstore-first-release`).
 
+## Mac App Store: a Tauri app (.pkg)
+
+`storebound apple build --platform macos --tauri apps/desktop/src-tauri --path-free --dry` prints the plan; without
+`--dry` it runs in the Mac's logged-in GUI session (not over SSH: write a .command file and `open -a Terminal` it):
+
+1. Version from `--version` or tauri.conf.json, build number from `--build-number` or the next free one on App Store
+   Connect for macOS (CFBundleVersion must increase). `tauri.conf.json` `identifier` must equal `apple.bundleId`.
+2. Identities from the login keychain: "Apple Distribution" (or "3rd Party Mac Developer Application") and "Mac
+   Installer Distribution" (or "3rd Party Mac Developer Installer"). The installer one is its own certificate type
+   (`apple.signing.certificateType: 'MAC_INSTALLER_DISTRIBUTION'`, `apple signing ensure`).
+3. Provisioning profile: `--profile`, else an installed one, else the active `MAC_APP_STORE` profile from the API
+   (`apple.signing.profileType: 'MAC_APP_STORE'`).
+4. `tauri build --bundles app --target universal-apple-darwin --config <overlay>`: the overlay sets the signing identity,
+   the generated entitlements (app sandbox, application / team identifier, your own keys kept), the embedded profile,
+   hardened runtime and `bundleVersion`. Set `bundle.category` and `bundle.macOS.minimumSystemVersion` in
+   tauri.conf.json (the build stops without LSApplicationCategoryType / LSMinimumSystemVersion).
+5. Checks of the .app (sandbox, no get-task-allow, profile inside, version / build), `codesign --verify`, then
+   `productbuild --component <app> /Applications --sign <installer identity>` and `pkgutil --check-signature`.
+6. `--path-free`: rustc remaps the checkout, CARGO_HOME, RUSTUP_HOME and the home folder, no debug info, symbols stripped;
+   the build fails when the home folder or user name is still in the app. `--unsigned` runs the pipeline without
+   identities (not uploadable). Result: `<out>/export/<version>-<build>/<Product>.pkg` (`--out`, default `build/macos`).
+
+Then `storebound apple upload <pkg> --platform macos --dry` and without `--dry` (App Store Connect build upload,
+platform MAC_OS, or `--via altool`). The .pkg is checked first (installer signature); the build shows up in the macOS
+version's build list once processed. Details and fixes: `store-pitfalls` 119.
+
 ## Android
 
 1. **Upload key.** Generate once (`keytool -genkeypair -v -storetype PKCS12 -keystore upload.p12 -alias upload
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 70aa528..1e06369 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1415,3 +1415,29 @@ that fails without the fix (see CONTRIBUTING.md).
   `storebound shots copy reviewed --lang de`. Captions over the limit (eyebrow 30, title line 28, sub 90, badge 18) are
   not kept.
 - **Guard:** `cli/shots/copy.ts`, `cli/lib/shots-copy-translate.ts`, `tests/shots-copy-translate.test.ts`.
+
+## 119. A Tauri Mac App Store build was refused (no sandbox, no profile, wrong installer certificate) or carried the builder's home folder
+
+- **What happens:** a plain `tauri build` makes a Developer ID app: no `com.apple.security.app-sandbox`, no
+  `embedded.provisionprofile`, signed with the wrong certificate, packed as a .dmg. Packed by hand into a .pkg it fails at
+  upload with ITMS-90xxx (sandbox, missing profile, CFBundleVersion not above the last one, no LSApplicationCategoryType) or
+  the .pkg is signed with an application certificate. Separately, rustc panic messages and debug info carry the
+  checkout, `~/.cargo` and the user name (`/Users/<name>/...`, hundreds of times in a release binary), which ends up
+  in a public download.
+- **Do:** `storebound apple build --platform macos --tauri <src-tauri> --path-free --dry`, then the same without `--dry`
+  in the Mac's logged-in GUI session (codesign over SSH fails with errSecInternalComponent). It needs, on the Mac: an
+  "Apple Distribution" (or "3rd Party Mac Developer Application") and a "Mac Installer Distribution" (or "3rd Party Mac
+  Developer Installer") identity in the login keychain, and an active MAC_APP_STORE profile
+  (`apple.signing.profileType: 'MAC_APP_STORE'`, `apple signing ensure`, or `--profile <file>`). The installer certificate
+  is a separate certificate type (`MAC_INSTALLER_DISTRIBUTION`). `--unsigned` checks the whole pipeline without them
+  (never uploadable). A universal build needs both Rust targets (rustup); with Homebrew Rust only the host
+  target exists: pass `--target aarch64-apple-darwin`.
+- **Guard:** `cli/lib/mas.ts` / `cli/apple/build-mas.ts`: entitlements generated with sandbox and application / team
+  identifier (the project's own keys kept), profile embedded through a tauri.conf overlay, bundleVersion from App Store
+  Connect (platform MAC_OS) so it increases, the built app checked (sandbox entitlement, no get-task-allow, category,
+  minimum OS, profile inside, version / build), `--path-free` remaps checkout / CARGO_HOME / RUSTUP_HOME / home in rustc,
+  drops debug info and symbols and fails when the home folder or user name is still in the app (without the flag the
+  same scan warns). `cargo trim-paths` is not used: it is nightly-only (cargo 1.98 refuses it). `apple upload <pkg>
+  --platform macos` refuses an unsigned .pkg or one not signed with an installer certificate before any network call
+  (`tests/mas-build.test.ts`). The `com.apple.pkg` file type of the API build upload is taken from Apple's schema and has not
+  been exercised against the live API yet; `--via altool` (`--type macos`) is the fallback.

From 634d5dd71dcfa7ecb605e6ccc71522d521cbbc1d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:18:12 +0800
Subject: [PATCH 143/255] generated API tables refreshed for the macOS build
 upload

---
 cli/api/wrapped.gen.ts | 4 ++--
 docs/api-coverage.md   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 1b484d8..d361d9a 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -131,7 +131,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_betaAppReviewSubmission_getToOneRelated': 'apple/testflight',
     'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
-    'builds_getCollection': 'apple/build apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
+    'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
     'bundleIds_createInstance': 'apple/bundle',
@@ -185,7 +185,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'profiles_certificates_getToManyRelationship': 'lib/signing',
     'profiles_createInstance': 'apple/adhoc lib/signing',
     'profiles_devices_getToManyRelated': 'apple/adhoc',
-    'profiles_getInstance': 'apple/signing',
+    'profiles_getInstance': 'apple/build-mas apple/signing',
     'promotedPurchases_createInstance': 'lib/offers',
     'promotedPurchases_updateInstance': 'lib/offers',
     'reviewSubmissionItems_createInstance': 'apple/submission lib/cpp-events lib/review-submit',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index cb6249a..9388e08 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -651,7 +651,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
-| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
+| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/build-mas, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
 | `builds_getInstance` | GET | `/v1/builds/{id}` | read |  |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
@@ -1297,7 +1297,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `profiles_devices_getToManyRelated` | GET | `/v1/profiles/{id}/devices` | read | apple/adhoc |
 | `profiles_devices_getToManyRelationship` | GET | `/v1/profiles/{id}/relationships/devices` | read |  |
 | `profiles_getCollection` | GET | `/v1/profiles` | read |  |
-| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple/signing |
+| `profiles_getInstance` | GET | `/v1/profiles/{id}` | read | apple/build-mas, apple/signing |
 | **promotedPurchases** (4) | | | | |
 | `promotedPurchases_createInstance` | POST | `/v1/promotedPurchases` | write (dry by default) | lib/offers |
 | `promotedPurchases_deleteInstance` | DELETE | `/v1/promotedPurchases/{id}` | owner only (typed confirm) |  |

From 2e1c7cdc3c62aeeb4eb62b96c4d6166c33f1d8ea Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 12:19:27 +0800
Subject: [PATCH 144/255] mas: placeholders the scrub accepts

---
 cli/lib/mas.ts          |  2 +-
 tests/mas-build.test.ts | 20 ++++++++++----------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index a5365bb..0a9d650 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -125,7 +125,7 @@ export interface PathFreeInput { home: string; user: string; root: string; cargo
  *  and the home folder; no debug info; symbols stripped. Pure. */
 export function pathFreeEnv(i: PathFreeInput): Record<string, string> {
   const maps: [string, string][] = [
-    [i.root, '/src'], [i.cargoHome ?? `${i.home}/.cargo`, '/cargo'], [i.rustupHome ?? `${i.home}/.rustup`, '/rustup'], [i.home, '/home/build'],
+    [i.root, '/src'], [i.cargoHome ?? `${i.home}/.cargo`, '/cargo'], [i.rustupHome ?? `${i.home}/.rustup`, '/rustup'], [i.home, '/build-home'],
   ];
   const seen = new Set<string>();
   const flags = maps.filter(([from]) => from && !seen.has(from) && seen.add(from)).map(([from, to]) => `--remap-path-prefix=${from}=${to}`);
diff --git a/tests/mas-build.test.ts b/tests/mas-build.test.ts
index b689b02..1fd738c 100644
--- a/tests/mas-build.test.ts
+++ b/tests/mas-build.test.ts
@@ -94,23 +94,23 @@ describe('identities and profiles', () => {
 
 describe('path-free', () => {
   test('remaps checkout, cargo, rustup, home; no debug info', () => {
-    const e = pathFreeEnv({ home: '/Users/dev', user: 'dev', root: '/Users/dev/work/app', rustflags: '-C target-cpu=native' });
+    const e = pathFreeEnv({ home: '/Users/you', user: 'you', root: '/Users/you/work/app', rustflags: '-C target-cpu=native' });
     expect(e.RUSTFLAGS).toContain('-C target-cpu=native');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/work/app=/src');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.cargo=/cargo');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev/.rustup=/rustup');
-    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/dev=/home/build');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you/work/app=/src');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you/.cargo=/cargo');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you/.rustup=/rustup');
+    expect(e.RUSTFLAGS).toContain('--remap-path-prefix=/Users/you=/build-home');
     expect(e.CARGO_PROFILE_RELEASE_DEBUG).toBe('0');
     
   });
   test('leak scan finds the home folder in a binary and a plist', () => {
     const app = mkdtempSync(join(tmp, 'app-'));
     mkdirSync(join(app, 'Contents/MacOS'), { recursive: true });
-    writeFileSync(join(app, 'Contents/MacOS/bin'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('panic at /Users/dev/.cargo/registry/x.rs'), Buffer.from([0])]));
+    writeFileSync(join(app, 'Contents/MacOS/bin'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('panic at /Users/you/.cargo/registry/x.rs'), Buffer.from([0])]));
     writeFileSync(join(app, 'Contents/Info.plist'), 'clean');
-    const leaks = scanPathLeaks(app, ['/Users/dev', '/Users/dev/']);
-    expect(leaks.map(l => `${l.file}:${l.needle}`)).toEqual(['Contents/MacOS/bin:/Users/dev', 'Contents/MacOS/bin:/Users/dev/']);
-    expect(scanPathLeaks(app, ['/Users/nobody'])).toEqual([]);
+    const leaks = scanPathLeaks(app, ['/Users/you', '/Users/you/']);
+    expect(leaks.map(l => `${l.file}:${l.needle}`)).toEqual(['Contents/MacOS/bin:/Users/you', 'Contents/MacOS/bin:/Users/you/']);
+    expect(scanPathLeaks(app, ['/Users/me'])).toEqual([]);
   });
 });
 
@@ -130,7 +130,7 @@ describe('app and pkg checks', () => {
     expect(appProblems({ ...good, entitlements: null, hasProfile: false }, { ...o, signed: false }).errors).toEqual([]);
   });
   test('path leaks are errors with --path-free, warnings without', () => {
-    const leaks = [{ file: 'Contents/MacOS/bin', needle: '/Users/dev', count: 3 }];
+    const leaks = [{ file: 'Contents/MacOS/bin', needle: '/Users/you', count: 3 }];
     expect(appProblems({ ...good, leaks }, o).errors[0]).toContain('local paths');
     const w = appProblems({ ...good, leaks }, { ...o, pathFree: false });
     expect(w.errors).toEqual([]);

From 61b5fa062370187c6ede41c6f07f4e77e1fafc29 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:00:48 +0800
Subject: [PATCH 145/255] shots: feature rotate, per-language frame fallback,
 layout-aware capture selectors

---
 CHANGELOG.md                         |  3 +
 cli/lib/config.ts                    | 17 ++++++
 cli/lib/embedded.ts                  |  2 +-
 cli/shots/capture-web.ts             | 31 ++++++++++
 cli/shots/capture.ts                 | 27 +++++++--
 cli/shots/check.ts                   | 10 ++-
 cli/shots/devices.ts                 |  5 ++
 cli/shots/feature-bleed.html         |  6 ++
 cli/shots/fonts.ts                   |  7 ++-
 cli/shots/lib.ts                     | 28 ++++++++-
 cli/shots/render.ts                  | 13 ++--
 cli/shots/selectors.ts               | 79 ++++++++++++++++++++++++
 skills/store-pitfalls/SKILL.md       | 13 ++++
 tests/browser/feature-fit.browser.ts | 40 ++++++++++++
 tests/shots-gaps.test.ts             | 91 ++++++++++++++++++++++++++++
 15 files changed, 355 insertions(+), 17 deletions(-)
 create mode 100644 cli/shots/selectors.ts
 create mode 100644 tests/shots-gaps.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 703ba22..1a36300 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
+- `shots check` / `shots render` without frames for a language that has copy use the default language's frames (an info line, no failure); `shots.perLanguageFrames: true` requires per-language frames. `shots fonts --lang en,tr` limits the report to those languages (the font manifest keeps all of them).
+- `shots capture` web shots take `waitSelector` and `click` selector lists per layout (`{ phone, tablet, any }`, data attributes first, `text=` fallback). A miss names the selector and the size with every candidate's match count; `shots capture --dry` prints the candidates per size and `--dry --probe` opens the pages and reports which one matched or MISSed on which size.
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
 - `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index f300e23..e0a52fb 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -167,6 +167,10 @@ export interface ShotsConfig {
   copy: string;
   /** Raw frames: <frames>/<languageId>/<phone|tablet>/<name>.png */
   frames: string;
+  /** true: every language needs its own frames (<frames>/<lang>/...). Default false: a language with copy but no frames
+   *  folder uses the default language's frames (play.defaultLanguage, else the first language); `shots check` / `render`
+   *  say so as an info line. */
+  perLanguageFrames?: boolean;
   /** Output: <out>/<languageId>/<size>/NN.png and feature/1024x500.png */
   out: string;
   /** Optional logo image for the hero scene and the feature graphic. */
@@ -183,6 +187,9 @@ export interface ShotsConfig {
    *  bottom edge on purpose (shots check then allows it). `scale` (0.5-1.5, default 1) multiplies the phone's width
    *  (still clamped to the canvas with 'contain'). */
   feature?: { frame: string; palette?: string | Palette; fit?: 'contain' | 'bleed'; scale?: number;
+    /** Degrees added to the phone's tilt (layout "bleed": the frame image is turned), like a scene frame's `rotate`: -90 stands a
+     *  landscape game frame upright in a phone lying on its side. Default 0. */
+    rotate?: number;
     /** layout "bleed": the name on the feature graphic when there is no logo (default app.name). */
     title?: string;
     /** Photo background for the feature graphic (path relative to the config, or { image, overlay }); wins over the
@@ -207,7 +214,16 @@ export interface ShotsConfig {
 }
 
 /** One raw frame. Web: `path` (+ query). Simulator / emulator: `url` deep link and / or `args` / `extras`. */
+/** Web capture: a selector, candidates tried in order, or per layout { phone, tablet, any } (own list first). Prefer data
+ *  attributes (`[data-shot="shop-row"]`); `text=Shop` and `role=button[name="Shop"]` work as fallbacks. */
+export type ShotSelector = string | string[] | { phone?: string | string[]; tablet?: string | string[]; any?: string | string[] };
+
 export interface ShotSpec {
+  /** Web: wait (up to the waitFor timeout) until one of these matches, before waitFor; a miss names the selector and the size. */
+  waitSelector?: ShotSelector;
+  /** Web: element(s) to click after waitSelector, in order (a list of selectors is ONE click with fallbacks; use
+   *  [{...}, {...}] objects for several clicks). */
+  click?: ShotSelector | ShotSelector[];
   /** Web: URL path after baseUrl, "{lang}" replaced. */
   path?: string;
   /** ios-sim / android-emu: deep link opened after launch, e.g. "mygame://shot/{shot}?lang={lang}". */
@@ -1259,6 +1275,7 @@ export function validateConfig(c: unknown): string[] {
     if (s.feature !== undefined) {
       if (!s.feature || typeof s.feature.frame !== 'string' || !s.feature.frame) e.push('shots.feature.frame: a frame name');
       if (s.feature?.fit !== undefined && s.feature.fit !== 'contain' && s.feature.fit !== 'bleed') e.push("shots.feature.fit: 'contain' | 'bleed'");
+      if (s.feature?.rotate !== undefined && !(typeof s.feature.rotate === 'number' && Math.abs(s.feature.rotate) <= 360)) e.push('shots.feature.rotate: a number of degrees from -360 to 360');
       if (s.feature?.scale !== undefined && !(typeof s.feature.scale === 'number' && s.feature.scale >= 0.5 && s.feature.scale <= 1.5)) e.push('shots.feature.scale: a number from 0.5 to 1.5');
       e.push(...featureBackgroundIssues(s.feature?.background));
       if (s.feature?.palette !== undefined) e.push(...paletteIssues(s.feature.palette, 'shots.feature.palette'));
diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index f392f2f..715eb69 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -39,7 +39,7 @@ export const TEMPLATE_TEXT: Record<string, string> = {
 export const SHOTS_PAGES: Record<string, string> = {
   "caption.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Caption overlay for app preview videos (transparent PNG, rendered by `storebound shots video`, overlaid by ffmpeg).\n     caption.html?w=<px>&h=<px>&lang=<id>&i=<caption index>. Same title font, stroke and colours as the screenshots. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { background: transparent; overflow: hidden; }\n  #c { position: relative; width: var(--W); height: var(--H); }\n  .cap { position: absolute; left: 50%; top: calc(var(--u) * 7); transform: translateX(-50%) rotate(-1.5deg); max-width: calc(var(--u) * 90);\n    padding: calc(var(--u) * 2.6) calc(var(--u) * 5) calc(var(--u) * 3); border-radius: calc(var(--u) * 5); text-align: center;\n    background: linear-gradient(180deg, rgba(0,0,0,.42), rgba(0,0,0,.28)); box-shadow: inset 0 0 0 calc(var(--u) * .35) rgba(255,255,255,.3);\n    font-family: var(--tf); font-weight: var(--tw); font-size: calc(var(--u) * var(--fs)); line-height: 1.04; color: #fff;\n    -webkit-text-stroke: calc(var(--u) * var(--fs) * .07) var(--ink); paint-order: stroke fill; text-wrap: balance;\n    filter: drop-shadow(0 calc(var(--u) * .7) 0 var(--ink)); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), I = +q.get('i');\nconst job = await (await fetch(`/caption.json?lang=${encodeURIComponent(LANG)}&i=${I}`)).json();\nconst u = Math.min(W, H) / 100, R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', job.ink); R.setProperty('--fs', W > H ? 6.4 : 8.2);\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : 400);\nconst el = document.createElement('div');\nel.className = 'cap';\nif (job.rtl) el.dir = 'rtl';\nel.textContent = job.text;\ndocument.getElementById('c').append(el);\nawait document.fonts.ready;\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, app style, 1024 x 500: logo (or the app name) on the left on a calm gradient, an upright phone\n     with one frame on the right. feature-app.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render` when\n     the screenshot style is app. Keep text out of it apart from the name: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #fff; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 760px; top: 260px; width: 700px; height: 600px; transform: translate(-50%, -50%); z-index: -1;\n    border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n  .logo { position: absolute; left: 330px; top: 250px; width: 440px; max-height: 220px; object-fit: contain; transform: translate(-50%, -50%); z-index: 5; }\n  .name { position: absolute; left: 330px; top: 250px; transform: translate(-50%, -50%); z-index: 5; width: 520px; text-align: center;\n    font-family: var(--tf); font-weight: 750; font-size: 76px; line-height: 1.02; letter-spacing: -.02em; color: var(--ink); }\n  .tel { position: absolute; left: 690px; top: 40px; width: 230px; aspect-ratio: var(--ar); z-index: 3; border-radius: 36px; padding: 5px;\n    background: #121317; box-shadow: inset 0 0 0 1px #3a3c44, 0 22px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 31px; background: #fff; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #fff center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 19px; background: #000; border-radius: 99px; }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"soft\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(135deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accentSoft', rgba(P.glow, .18));\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
-  "feature-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst R = document.documentElement.style;\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\ndocument.documentElement.lang = lang;\nconst c = document.getElementById('c');\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
+  "feature-bleed.html": "<!doctype html>\r\n<html>\r\n<head>\r\n<meta charset=\"utf-8\">\r\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\r\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\r\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\r\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\r\n<style>\r\n  * { box-sizing: border-box; margin: 0; padding: 0; }\r\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\r\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\r\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\r\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\r\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\r\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\r\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\r\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"c\"></div>\r\n<script type=\"module\">\r\nconst q = new URLSearchParams(location.search);\r\nconst lang = q.get('lang'), V = q.get('v') ?? '';\r\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\r\nconst R = document.documentElement.style;\r\nconst X = job.fonts.script;\r\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\r\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\r\ndocument.documentElement.lang = lang;\r\nconst c = document.getElementById('c');\r\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\r\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\r\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\r\nawait document.fonts.ready;\r\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\r\nconst overflow = [];\r\nconst img = c.querySelector('img.frame');\r\n// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas\r\nconst rot = Number(job.rotate) || 0;\r\nif (rot) {\r\n  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;\r\n  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });\r\n}\r\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\r\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\r\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\r\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\r\ndocument.body.dataset.overflow = JSON.stringify(overflow);\r\ndocument.body.dataset.devices = '[]';\r\ndocument.body.dataset.ready = '1';\r\n</script>\r\n</body>\r\n</html>\r\n",
   "feature.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, 1024 x 500: logo (or the app name) on the left, a tilted phone with one frame on the right.\n     feature.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render`. Keep text out of it: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .rays { position: absolute; left: 360px; top: 250px; width: 1700px; height: 1700px; transform: translate(-50%, -50%) rotate(8deg); z-index: -4;\n    opacity: .55; background: repeating-conic-gradient(rgba(255,255,255,.22) 0deg 7deg, rgba(255,255,255,0) 7deg 18deg);\n    -webkit-mask-image: radial-gradient(closest-side, #000 0%, rgba(0,0,0,.6) 30%, transparent 75%); }\n  .glow { position: absolute; left: 360px; top: 250px; width: 900px; height: 700px; transform: translate(-50%, -50%); z-index: -3;\n    background: radial-gradient(closest-side, var(--glow), transparent); }\n  .vign { position: absolute; inset: 0; z-index: -2; background: radial-gradient(90% 90% at 45% 50%, transparent 60%, rgba(0,0,0,.28) 100%); }\n  .logo { position: absolute; left: 360px; top: 252px; width: 540px; max-height: 400px; object-fit: contain; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5;\n    filter: drop-shadow(0 14px 22px rgba(0,0,0,.4)); }\n  .name { position: absolute; left: 360px; top: 250px; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5; width: 540px; text-align: center;\n    font-family: var(--tf); font-size: 104px; line-height: .95; color: #fff; -webkit-text-stroke: 9px var(--ink); paint-order: stroke fill;\n    filter: drop-shadow(0 8px 0 var(--ink)) drop-shadow(0 14px 22px rgba(0,0,0,.35)); }\n  .tel { position: absolute; left: 748px; top: 36px; width: 232px; aspect-ratio: var(--ar); transform: rotate(7deg); z-index: 3;\n    border-radius: 40px; padding: 6px;\n    background: linear-gradient(140deg, #f4f4f6 0%, #9da0a8 8%, #3c3e44 20%, #1a1b1f 50%, #3c3e44 82%, #c8cad0 100%);\n    box-shadow: inset 0 0 0 1px rgba(255,255,255,.6), inset 0 0 0 3px #101114, 0 20px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 34px; background: #000; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #0b0b10 center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 20px; background: #000; border-radius: 99px; }\n  .spark { position: absolute; width: var(--s); height: var(--s); transform: translate(-50%, -50%); background: #fff; z-index: -1;\n    clip-path: polygon(50% 0, 58% 42%, 100% 50%, 58% 58%, 50% 100%, 42% 58%, 0 50%, 42% 42%); opacity: var(--o); filter: drop-shadow(0 0 6px #fff); }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"glow\"></div><div class=\"rays\"></div><div class=\"vign\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(160deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--glow', P.glow); R.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow);\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nlet seed = 7; const rnd = () => ((seed = (seed * 1664525 + 1013904223) >>> 0) / 4294967296);\nfor (let i = 0; i < 22; i++)\n  c.insertAdjacentHTML('beforeend', `<i class=\"spark\" style=\"left:${rnd() * 1024}px;top:${rnd() * 500}px;--s:${8 + rnd() * 18}px;--o:${.5 + rnd() * .5}\"></i>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!--\n  Store screenshot template, app style (shots.style 'app', the default for the app / subscription-app profiles).\n  template-app.html?s=<scene id>&w=<px>&h=<px>&lang=<id>[&device=tablet][&style=android][&v=<variant>]\n  Calm: a soft gradient (or solid) background, one clean device frame, a headline (two lines) and a subline. No\n  sunburst, no sparkles; badges only when the copy has them, drawn as quiet chips. Same /job.json as template.html\n  (palette: bg = gradient stops, ink = headline, glow = accent, shadow = device shadow).\n  Layout: everything is in u = W / 100; the text block is measured first, then the device fills the room below it.\n  device=landscape: u = H / 100, copy column on one side, the landscape frame in a Mac window (frame=window) or bare\n  (frame=none) on the other (as template.html). Safe margins: 7 % of the width left / right, 5 % of the height at the\n  top; text and logo boxes go to body.dataset.boxes for shots check.\n-->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { overflow: hidden; background: #fff; }\n  body { font-family: var(--bf); -webkit-font-smoothing: antialiased; color: var(--ink); }\n  #c { position: relative; overflow: hidden; width: var(--W); height: var(--H); isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 50%; top: var(--softY); width: calc(var(--u) * 140); height: calc(var(--u) * 110); z-index: -1;\n    transform: translate(-50%, -50%); border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n\n  .top { position: absolute; left: 0; right: 0; top: calc(var(--u) * var(--top)); text-align: center; z-index: 6;\n    padding: 0 calc(var(--W) * .07); display: flex; flex-direction: column; align-items: center; }\n  .eyebrow { margin-bottom: calc(var(--u) * 2.4); font-size: calc(var(--u) * 2.9); font-weight: 700; letter-spacing: var(--kls, .14em);\n    text-transform: uppercase; color: var(--accent); line-height: 1.2; }\n  h1 { font-family: var(--tf); font-weight: var(--tw); line-height: var(--lh); letter-spacing: var(--ls, -.02em);\n    font-size: calc(var(--u) * var(--fs)); color: var(--ink); }\n  h1 span { display: block; width: max-content; max-width: none; margin: 0 auto; white-space: nowrap; }\n  h1 span + span { color: var(--line2); }\n  p.sub { margin-top: calc(var(--u) * 2.4); max-width: calc(var(--u) * 78); font-size: calc(var(--u) * var(--sub));\n    line-height: 1.38; font-weight: 500; color: var(--ink); opacity: .72; text-wrap: balance; }\n  .logo { width: min(100%, calc(var(--u) * 60)); max-height: calc(var(--u) * 26); object-fit: contain; margin-bottom: calc(var(--u) * 3); }\n\n  /* device: a plain modern phone, dark bezel, soft shadow */\n  .tel { position: absolute; z-index: 3; width: var(--pw); aspect-ratio: var(--ar); left: var(--px); top: var(--py);\n    transform: translateX(-50%) rotate(var(--pr, 0deg)); transform-origin: 50% 40%;\n    border-radius: calc(var(--pw) * .155); padding: calc(var(--pw) * .022); background: #121317;\n    box-shadow: inset 0 0 0 calc(var(--pw) * .005) #3a3c44, 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08),\n      0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .tel.back { z-index: 2; opacity: .96; }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; background: #fff; border-radius: calc(var(--pw) * .135); }\n  .screen img.app { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .bar { position: absolute; top: 0; left: 0; right: 0; height: var(--barH); display: flex; align-items: center;\n    justify-content: space-between; padding: 0 8.5% 0 11.5%; font-family: -apple-system, 'SF Pro Text', var(--bf), sans-serif;\n    font-weight: 600; font-size: calc(var(--pw) * .041); z-index: 2; color: var(--barInk, #fff);\n    background: #ffffff center top / 100% 60000% no-repeat; }\n  .bar svg { height: calc(var(--pw) * .03); width: auto; margin-left: calc(var(--pw) * .012); }\n  .island { position: absolute; top: calc(var(--pw) * .025); left: 50%; transform: translateX(-50%); width: 30%; height: calc(var(--pw) * .082);\n    background: #000; border-radius: 999px; z-index: 3; }\n  .tablet .tel { border-radius: calc(var(--pw) * .06); padding: calc(var(--pw) * .018); }\n  .tablet .screen { border-radius: calc(var(--pw) * .044); }\n  .tablet .bar { padding: 0 5%; font-size: calc(var(--pw) * .024); }\n  .tablet .bar svg { height: calc(var(--pw) * .018); }\n  .tablet .island { width: calc(var(--pw) * .016); height: calc(var(--pw) * .016); top: calc(var(--pw) * .007); }\n  .android .tel { border-radius: calc(var(--pw) * .04); padding: calc(var(--pw) * .014); }\n  .android .screen { border-radius: calc(var(--pw) * .028); }\n  .android .island { width: calc(var(--pw) * .013); height: calc(var(--pw) * .013); top: calc(var(--pw) * .009); }\n  .android .bar { padding: 0 4%; }\n\n  .land .top { right: auto; width: var(--colW); padding: 0; left: var(--colL); }\n  .lwin { position: absolute; z-index: 3; left: var(--lx); top: var(--ly); width: var(--lw); border-radius: calc(var(--lw) * .012);\n    overflow: hidden; background: #1c1c1e; box-shadow: 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08), 0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .lwin .tb { height: calc(var(--lw) * .028); display: flex; align-items: center; gap: calc(var(--lw) * .006); padding-left: calc(var(--lw) * .012); background: #e8e8ea; }\n  .lwin .tb i { width: calc(var(--lw) * .009); height: calc(var(--lw) * .009); border-radius: 50%; background: #ff5f57; }\n  .lwin .tb i:nth-child(2) { background: #febc2e; } .lwin .tb i:nth-child(3) { background: #28c840; }\n  .lwin img { display: block; width: 100%; aspect-ratio: var(--lar); object-fit: cover; }\n  .lwin.bare { border-radius: calc(var(--lw) * .02); } .lwin.bare .tb { display: none; }\n  .chip { position: absolute; z-index: 9; display: flex; flex-direction: column; padding: calc(var(--u) * 1.8) calc(var(--u) * 3);\n    border-radius: calc(var(--u) * 3); background: rgba(255,255,255,.92); color: #111827; white-space: nowrap;\n    box-shadow: 0 calc(var(--u) * 1) calc(var(--u) * 3.5) rgba(15,23,42,.14); }\n  .chip b { font-family: var(--tf); font-weight: 700; font-size: calc(var(--u) * 3.6); line-height: 1.1; }\n  .chip small { font-size: calc(var(--u) * 2.3); font-weight: 500; opacity: .65; margin-top: calc(var(--u) * .3); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '';\nconst tablet = q.get('device') === 'tablet', LAND = q.get('device') === 'landscape';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst u = LAND ? H / 100 : W / 100, Hu = H / u;\nconst dev = LAND ? job.landscape : tablet ? job.tablet : job.phone;\nconst FR = `/frames/${encodeURIComponent(LANG)}/${LAND ? 'landscape' : tablet ? 'tablet' : 'phone'}/`;\nconst MX = W * .07, MT = H * .05;                       // safe margins (lib.ts SAFE_MARGIN)\nconst colW = W * .36, colL = job.side === 'right' ? W - MX - colW : MX;\n\ndocument.documentElement.lang = LANG;\nconst RTL = !!job.rtl;\nconst R = document.documentElement.style;\n// #rrggbb -> rgba with alpha, for the soft accent glow\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nconst lum = hex => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return 1; const n = parseInt(m[1], 16); return (.299 * (n >> 16) + .587 * ((n >> 8) & 255) + .114 * (n & 255)) / 255; };\nconst tone = P.bgTone ?? (Array.isArray(P.bg) ? P.bg[1] : P.bg);\nconst dark = !!P.photo && P.photo.overlay >= .35 || lum(tone) < .45;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', P.ink); R.setProperty('--accent', P.glow); R.setProperty('--shadow', P.shadow);\nR.setProperty('--line2', dark ? P.glow : P.ink);\nR.setProperty('--accentSoft', rgba(P.glow, dark ? .28 : .14));\n// bgCss from job.json (palette.ts bgCss / photoCss): stops, one colour, a CSS gradient string, or a photo under an overlay\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(180deg, ${P.bg.join(', ')})` : P.bg));\nconst T = job.fonts.title, B = job.fonts.body, X = job.fonts.script;\n// titleStack / bodyStack (from shots fonts): script face, the configured font, then any automatic Noto fallback\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, T));\nR.setProperty('--bf', fstack(job.fonts.bodyStack, B));\nR.setProperty('--tw', 750);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.18 : 1.06);\nif (X) { R.setProperty('--ls', '0'); R.setProperty('--kls', '0'); }\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nif (tablet) document.body.classList.add('tablet');\nif (q.get('style') === 'android') document.body.classList.add('android');\nif (LAND) { document.body.classList.add('land'); R.setProperty('--colW', colW + 'px'); R.setProperty('--colL', colL + 'px'); }\nconst tall = !LAND && Hu > 200, wide = !LAND && Hu < 150;\nR.setProperty('--top', Math.max(tall ? 9.5 : wide ? 4.5 : 6, MT / u));\nR.setProperty('--fs', LAND ? 8.5 : tall ? 8.6 : wide ? 5.6 : 7);\nR.setProperty('--sub', LAND ? 3.4 : tall ? 3.7 : wide ? 2.6 : 3.2);\nconst AR = dev.w / (dev.h + dev.bar);\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\n\nconst c = document.getElementById('c');\nconst esc = s => { const t = String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\n  return RTL ? t.replace(/\\d+(?:\\s*\\/\\s*\\d+)?/g, m => '⁦' + m + '⁩') : t; };\nlet top = '';\nif (S.hero && job.logo) top += `<img class=\"logo\" src=\"/logo\">`;\nif (C.eyebrow) top += `<div class=\"eyebrow\">${esc(C.eyebrow)}</div>`;\ntop += `<h1><span>${esc(C.title?.[0])}</span>${C.title?.[1] ? `<span>${esc(C.title[1])}</span>` : ''}</h1>`;\nif (C.sub) top += `<p class=\"sub\">${esc(C.sub)}</p>`;\nc.innerHTML = `<div class=\"soft\"></div><div class=\"top\"${RTL ? ' dir=\"rtl\"' : ''}>${top}</div>`;\n\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nfor (const [i, sp] of [...c.querySelectorAll('h1 span')].entries()) {\n  const max = LAND ? colW : W - 2 * MX, wd = sp.getBoundingClientRect().width;\n  let f = 1; while (wd * f > max && f > .55) f -= .02;\n  if (f < 1) sp.style.fontSize = `calc(${getComputedStyle(sp).fontSize} * ${f.toFixed(2)})`;\n  if (wd * f > max + 1) overflow.push(`title line ${i + 1} is too long even at 55 % size: shorten it`);\n  else if (f < .7) overflow.push(`title line ${i + 1} shrunk to ${Math.round(f * 100)} %: consider shorter words`);\n}\nconst subEl = c.querySelector('p.sub');\nif (subEl) { const lines = Math.round(subEl.getBoundingClientRect().height / parseFloat(getComputedStyle(subEl).lineHeight)); if (lines > 3) overflow.push(`subtitle wraps to ${lines} lines (max 3)`); }\nconst textBottom = c.querySelector('.top').getBoundingClientRect().bottom / u;\nportrait: {\nif (LAND) {\n  const topEl = c.querySelector('.top'), bh = topEl.getBoundingClientRect().height;\n  topEl.style.top = Math.max(MT, (H - bh) / 2) + 'px';\n  if (bh > H - MT * 2) overflow.push('text block is taller than the image: shorten the copy');\n  const f = S.frames[0], src = FR + encodeURIComponent(f.src), bare = q.get('frame') === 'none';\n  const x0 = job.side === 'right' ? W * .04 : colL + colW + W * .05, x1 = job.side === 'right' ? colL - W * .05 : W - W * .04;\n  let lw = x1 - x0;\n  const lh = k => k / (dev.w / dev.h) + (bare ? 0 : k * .028);\n  if (lh(lw) > H * .88) lw = lw * H * .88 / lh(lw);\n  R.setProperty('--lar', `${dev.w} / ${dev.h}`); R.setProperty('--softY', H / 2 + 'px');\n  c.insertAdjacentHTML('beforeend', `<div class=\"lwin front${bare ? ' bare' : ''}\" style=\"--lw:${lw}px;--lx:${(x0 + x1 - lw) / 2}px;--ly:${(H - lh(lw)) / 2}px\"><div class=\"tb\"><i></i><i></i><i></i></div><img src=\"${src}\"></div>`);\n  await Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n  break portrait;\n}\n\nconst frames = S.frames.map(f => ({ x: 0, dy: 0, scale: 1, rotate: 0, ...f }));\nconst front = frames[0];\nconst pTop = textBottom + (tall ? 6 : 4.5);\nconst room = Hu - pTop + (S.over ?? 9);\nconst pw = Math.min(tablet ? 80 : 74, Math.max(52, room * AR)) * front.scale;\nconst ph = pw / AR;\nR.setProperty('--softY', (pTop + ph * .35) * u + 'px');\n\n// status bar text colour from the frame's own top row (dark text on a light app bar)\nasync function barInk(src) {\n  try {\n    const img = new Image(); img.src = src; await img.decode();\n    const cv = document.createElement('canvas'); cv.width = 8; cv.height = 2;\n    const g = cv.getContext('2d'); g.drawImage(img, 0, 0, img.naturalWidth, 2, 0, 0, 8, 2);\n    const d = g.getImageData(0, 0, 8, 1).data; let L = 0;\n    for (let i = 0; i < d.length; i += 4) L += .299 * d[i] + .587 * d[i + 1] + .114 * d[i + 2];\n    return L / (d.length / 4) > 150 ? '#111' : '#fff';\n  } catch { return '#fff'; }\n}\nconst BAR = `<span>9:41</span><span style=\"display:flex;align-items:center\">\n<svg viewBox=\"0 0 18 12\"><g fill=\"currentColor\"><rect x=\"0\" y=\"8\" width=\"3\" height=\"4\" rx=\".8\"/><rect x=\"5\" y=\"5.5\" width=\"3\" height=\"6.5\" rx=\".8\"/><rect x=\"10\" y=\"3\" width=\"3\" height=\"9\" rx=\".8\"/><rect x=\"15\" y=\"0\" width=\"3\" height=\"12\" rx=\".8\"/></g></svg>\n<svg viewBox=\"0 0 16 12\"><path fill=\"currentColor\" d=\"M8 2.2c2.3 0 4.4.9 6 2.4l1.3-1.3A10.3 10.3 0 0 0 8 .4C5.2.4 2.6 1.5.7 3.3L2 4.6a8.5 8.5 0 0 1 6-2.4zm0 3.6c1.3 0 2.5.5 3.4 1.3l1.3-1.3A6.6 6.6 0 0 0 8 4c-1.8 0-3.4.7-4.7 1.8l1.3 1.3C5.5 6.3 6.7 5.8 8 5.8zm0 3.6c.4 0 .8.2 1.1.4L8 11.6 6.9 9.8c.3-.2.7-.4 1.1-.4z\"/></svg>\n<svg viewBox=\"0 0 27 13\"><rect x=\".5\" y=\".5\" width=\"23\" height=\"12\" rx=\"3.5\" fill=\"none\" stroke=\"currentColor\" stroke-opacity=\".45\"/><rect x=\"2\" y=\"2\" width=\"20\" height=\"9\" rx=\"2.2\" fill=\"currentColor\"/><path d=\"M25 4.5v4c.8-.3 1.4-1.1 1.4-2s-.6-1.7-1.4-2z\" fill=\"currentColor\" fill-opacity=\".45\"/></svg></span>`;\n\nlet html = '';\nconst phone = async (f, cls) => {\n  const w = pw / front.scale * f.scale, src = FR + encodeURIComponent(f.src);\n  const ink = await barInk(src);\n  return `<div class=\"tel ${cls}\" style=\"--pw:${w * u}px;--px:${(50 + f.x) * u}px;--py:${(pTop + f.dy) * u}px;--pr:${f.rotate}deg\"><div class=\"screen\">\n    <div class=\"bar\" style=\"background-image:url('${src}');--barInk:${ink}\">${BAR}</div><div class=\"island\"></div><img class=\"app\" src=\"${src}\"></div></div>`;\n};\nfor (const f of frames.slice(1)) html += await phone(f, 'back');\nhtml += await phone(front, 'front');\n(S.badges ?? []).forEach((b, i) => {\n  const [big, small] = (C.badges ?? [])[i] ?? [''];\n  if (!big) return;\n  const pos = b.side === 'l' ? `left:${5 * u}px` : `right:${5 * u}px`;\n  html += `<div class=\"chip\"${RTL ? ' dir=\"rtl\"' : ''} style=\"${pos};top:${Math.min(pTop + ph * b.y, Hu - 14) * u}px\"><b>${esc(big)}</b>${small ? `<small>${esc(small)}</small>` : ''}</div>`;\n});\nc.insertAdjacentHTML('beforeend', html);\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nif (textBottom > Hu * .45) overflow.push(`text block covers ${Math.round(textBottom / Hu * 100)} % of the height (the app should be the star)`);\nfor (const b of c.querySelectorAll('.chip')) { const r = b.getBoundingClientRect(); if (r.left < 0 || r.right > W || r.bottom > H) overflow.push(`badge \"${b.textContent.trim().slice(0, 30)}\" runs off the image`); }\n}\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.top .logo, .top .eyebrow, .top h1 span, .top p.sub')].map(e => { const r = e.getBoundingClientRect();\n  return { el: e.matches('.logo') ? 'logo' : e.matches('.eyebrow') ? 'eyebrow' : e.matches('p') ? 'subtitle' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }).filter(b => b.w > 0 && b.h > 0));\n// the front device only: back phones of a fanned layout peek in from the side on purpose\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel.front, .lwin')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Full-bleed layout (shots.layout \"bleed\"): the app's own frame fills the whole image, no device and no background,\n     and a short caption sits in one corner. Legibility comes from a text shadow and a soft glow only: no band, no\n     scrim, no box behind the words. template-bleed.html?s=<scene>&w=<px>&h=<px>&lang=<id>&size=<size key>.\n     The frame is read at the size's own pixels: /frames/<lang>/<size>/<src> (shots check: frames for \"bleed\").\n     Colours from the scene palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = line 2.\n     A dark custom palette suits it, e.g. { bg: [...], ink: 'rgba(4,18,38,.92)', shadow: 'rgba(4,22,48,.55)', glow: '#ffd76a' }. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: var(--W); height: var(--H); overflow: hidden; background: #000; }\n  #c { position: relative; width: var(--W); height: var(--H); overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .cap { position: absolute; max-width: calc(var(--W) * var(--mw)); display: flex; flex-direction: column; gap: calc(var(--fs) * .06);\n    font-family: var(--tf); font-weight: var(--tw); font-size: var(--fs); line-height: var(--lh); color: #fff; letter-spacing: var(--ls, .005em);\n    text-wrap: balance;\n    /* a dark outline-shadow for edges, then a wide soft glow: readable on light water and on dark rock alike */\n    text-shadow: 0 0 calc(var(--fs) * .05) var(--ink), 0 calc(var(--fs) * .04) calc(var(--fs) * .08) var(--ink),\n      0 0 calc(var(--fs) * .3) var(--shadow), 0 0 calc(var(--fs) * .6) var(--shadow); }\n  .cap span { display: block; }\n  .cap span + span { color: var(--accent); }\n  .cap.tl { left: var(--mx); top: var(--my); }\n  .cap.tr { right: var(--mx); top: var(--my); text-align: right; align-items: flex-end; }\n  .cap.bl { left: var(--mx); bottom: var(--my); }\n  .cap.br { right: var(--mx); bottom: var(--my); text-align: right; align-items: flex-end; }\n  .cap[dir=\"rtl\"].tl, .cap[dir=\"rtl\"].bl { text-align: right; }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '', SIZE = q.get('size') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nconst short = Math.min(W, H);\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px');\n// caption size from the short side: about 9 % of it on a landscape phone, a little less on squarer canvases\nconst fs = short * (W / H > 1.9 ? .092 : W / H > 1.5 ? .08 : .066) * (S.captionScale ?? 1);\nR.setProperty('--fs', fs + 'px');\nconst inset = S.captionInset ?? .05;                   // distance from the corner, share of the short side\nR.setProperty('--mx', (short * (inset + .005)) + 'px'); R.setProperty('--my', (short * inset) + 'px');\n// the caption keeps to its corner: at most 40 % of a landscape image's width (scene.captionWidth), so it stays clear of\n// what an app centres at the top\nconst MW = S.captionWidth ?? (W > H ? .4 : .84);\nR.setProperty('--mw', MW);\n// palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = the second line's colour\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accent', P.glow);\nconst X = job.fonts.script;\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, job.fonts.title));\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.16 : 1.04);\nif (X) R.setProperty('--ls', '0');\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nconst RTL = !!job.rtl;\nconst esc = s => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\nconst corner = ['tl', 'tr', 'bl', 'br'].includes(S.corner) ? S.corner : 'tl';\nconst src = `/frames/${encodeURIComponent(LANG)}/${encodeURIComponent(SIZE)}/${encodeURIComponent(S.frames[0].src)}`;\nconst lines = (C.title ?? []).filter(Boolean);\nconst c = document.getElementById('c');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\"><div class=\"cap ${corner}\"${RTL ? ' dir=\"rtl\"' : ''}>${lines.map(l => `<span>${esc(l)}</span>`).join('')}</div>`;\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];                                    // read by `shots render` -> report.json -> shots check / gallery\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`frame ${SIZE}/${S.frames[0].src} did not load`);\nelse {\n  const ar = img.naturalWidth / img.naturalHeight, want = W / H;\n  if (Math.abs(ar / want - 1) > .01) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is cropped to fit ${W}x${H}: capture it at the size's aspect`);\n  if (img.naturalWidth < W * .99) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is upscaled to ${W}x${H}: capture it at native resolution`);\n}\nconst cap = c.querySelector('.cap');\nconst maxW = W * MW;\nfor (const [i, sp] of [...cap.querySelectorAll('span')].entries()) {   // shrink a line that would not fit its corner\n  const wd = sp.scrollWidth;\n  let f = 1; while (wd * f > maxW && f > .6) f -= .02;\n  if (f < 1) sp.style.fontSize = `${(fs * f).toFixed(1)}px`;\n  if (wd * f > maxW + 1) overflow.push(`caption line ${i + 1} is too long even at 60 % size: shorten it`);\n}\nconst r = cap.getBoundingClientRect();\nif (r.left < 0 || r.top < 0 || r.right > W || r.bottom > H) overflow.push('caption runs off the image');\nif (r.height > H * .42) overflow.push(`caption covers ${Math.round(r.height / H * 100)} % of the height: shorten it`);\nif (lines.join(' ').split(/\\s+/).length > 6 && !CJK && !/^th/.test(LANG)) overflow.push('caption has more than 6 words: keep it to 3-5');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
diff --git a/cli/shots/capture-web.ts b/cli/shots/capture-web.ts
index 516c798..0229eeb 100644
--- a/cli/shots/capture-web.ts
+++ b/cli/shots/capture-web.ts
@@ -24,6 +24,7 @@ import type { ShotSpec, ShotsCapture } from '../lib/config';
 import { log, warn } from '../lib/log';
 import { type AuthPlan, expiredHint, landedOnLogin, maskSecrets, safeUrl } from './auth';
 import { shotsFor } from './devices';
+import { applySelectors, candidates, probe } from './selectors';
 import type { FrameDims } from './lib';
 
 type Device = 'phone' | 'tablet';
@@ -166,6 +167,7 @@ export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[]
       if (!expired.has(safeUrl(s.page.url()))) { expired.add(safeUrl(s.page.url())); warn('shots', `${j.lang}/${j.device}/${j.name}: ${mask(expiredHint(s.page.url()))}`); }
       throw new Error(`landed on the sign-in page ${safeUrl(s.page.url())}`);
     }
+    await applySelectors(s.page, j.spec, { device: j.device, w: o.dims[j.device].w, h: o.dims[j.device].h }, waitTimeout); // waitSelector, click: a miss names the selector and the size
     if (j.spec.waitFor) await s.page.waitForFunction(j.spec.waitFor, null, { timeout: waitTimeout, polling: 50 });
     t.waitFor = Date.now() - t0; t0 = Date.now();
     for (const js of j.spec.eval ?? []) await s.page.evaluate(js);
@@ -245,3 +247,32 @@ export function writeCaptureState(root: string, report: CaptureReport, cache: Ca
   writeFileSync(cachePath(root), JSON.stringify(Object.fromEntries(Object.entries(cache).sort()), null, 1) + '\n');
   writeFileSync(join(root, '.storebound', 'capture-report.json'), JSON.stringify(report, null, 1) + '\n');
 }
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+/** `shots capture --dry --probe`: opens each page (no screenshot), runs the shot's waitFor, and reports per size which
+ *  selector candidates match. Returns the log lines; `missed` counts shots where no candidate of a list matched. */
+export async function probeSelectors(browser: any, jobs: WebJob[], o: { dims: Record<Device, FrameDims>; auth?: AuthPlan; timeoutMs?: number }): Promise<{ lines: string[]; missed: number }> {
+  const lines: string[] = []; let missed = 0;
+  for (const j of jobs) {
+    const lists = [['waitSelector', candidates(j.spec.waitSelector, j.device)], ...(Array.isArray(j.spec.click) && j.spec.click.some(c => typeof c !== 'string') ? j.spec.click : j.spec.click === undefined ? [] : [j.spec.click])
+      .map((c, i) => [`click[${i}]`, candidates(c as any, j.device)] as const)].filter(([, l]) => l.length) as [string, string[]][];
+    if (!lists.length) continue;
+    const d = o.dims[j.device];
+    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: 1, hasTouch: true, isMobile: true, serviceWorkers: 'block', locale: j.lang, ...(o.auth?.contextOptions ?? {}) });
+    try {
+      if (o.auth) await o.auth.prepare(c);
+      const page = await c.newPage();
+      await page.goto(j.url, { waitUntil: 'domcontentloaded', timeout: 90000 });
+      if (j.spec.waitFor) await page.waitForFunction(j.spec.waitFor, null, { timeout: o.timeoutMs ?? 20000, polling: 50 }).catch(() => lines.push(`${j.frame} ${d.w}x${d.h}: waitFor did not become true in ${(o.timeoutMs ?? 20000) / 1000}s`));
+      for (const [what, list] of lists) {
+        await page.waitForTimeout(500);
+        const res = await probe(page, list);
+        const hit = res.find(r => r.matches > 0);
+        if (!hit) missed++;
+        lines.push(`${j.frame} ${j.device} ${d.w}x${d.h} ${what}: ${hit ? `ok via ${hit.selector}` : 'MISS'} (${res.map(r => `${r.selector} -> ${r.matches < 0 ? 'invalid' : r.matches}`).join('; ')})`);
+      }
+    } catch (e) { missed++; lines.push(`${j.frame}: probe failed: ${(e as Error).message.split('\n')[0]!.slice(0, 200)}`); } finally { await c.close(); }
+  }
+  return { lines, missed };
+}
+/* eslint-enable @typescript-eslint/no-explicit-any */
diff --git a/cli/shots/capture.ts b/cli/shots/capture.ts
index 1267e7c..c5b6d24 100644
--- a/cli/shots/capture.ts
+++ b/cli/shots/capture.ts
@@ -1,6 +1,6 @@
 // Raw frames from a running build of your app or game, from any engine.
 //   storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet] [--source web|ios-sim|android-emu|folder]
-//                            [--dry] [--keep-booted] [--concurrency N] [--only-missing | --force]
+//                            [--dry [--probe]] [--keep-booted] [--concurrency N] [--only-missing | --force]
 // Frames go to <shots.frames>/<lang>/<device>/<name>.png: the screen BELOW the status bar (the template draws one).
 // shots.capture.source (default web):
 //   web          headless Chromium (playwright), mobile viewport + touch at phone / tablet size. Each shot:
@@ -18,7 +18,9 @@
 //   folder       your own frames (any tool, any engine): only checks that every frame the scenes use exists with the
 //                right aspect ratio and resolution.
 // A simulator storebound booted itself is shut down at the end (--keep-booted keeps it); one that was already running is
-// left running with its status bar restored. --dry prints the simctl / adb commands without running them.
+// left running with its status bar restored. Web shots may list waitSelector / click candidates per layout
+// ({ phone, tablet, any }, data attributes first, text= fallback); --dry prints them per size, --dry --probe opens the
+// pages and reports which candidate matched or MISSed on which size. --dry prints the simctl / adb commands without running them.
 // Simulator / emulator screenshots are full screen: cropTop rows (the status bar) are cut so the frame fits the template
 // (default per device class from the frame dims: phone 162 px of a 6.9" iPhone, tablet 48 px of a 13" iPad with apple.ipad).
 // The app or game needs switches for this: language, scene, fixed seed, no ads / tutorial, freeze. See the store-screenshots skill.
@@ -26,7 +28,8 @@ import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { spawnSync } from 'node:child_process';
-import type { ShipConfig, ShotsCapture } from '../lib/config';
+import type { ShipConfig, ShotSelector, ShotsCapture } from '../lib/config';
+import { candidates } from './selectors';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, step, warn } from '../lib/log';
@@ -36,7 +39,7 @@ import { adbAppLocaleArgs, adbDemoExitArgs, adbDemoModeArgs, adbForceStopArgs, a
   cropArgs, cropTopFor, fill, pickSimulator, shotsFor, simBootArgs, simBootStatusArgs, simInstallArgs, simLaunchArgs, simOpenUrlArgs,
   simScreenshotArgs, simShutdownArgs, simStatusBarArgs, simStatusBarClearArgs, simTarget, SOURCES, type Source, TOOL_HINTS, validateCapture } from './devices';
 import { type CopyFile, copyText, type FrameDims, frameDims } from './lib';
-import { captureWeb, defaultConcurrency, hashPaths, hashServed, planWeb, readCache, selectJobs, summaryLines, writeCaptureState } from './capture-web';
+import { captureWeb, defaultConcurrency, probeSelectors, hashPaths, hashServed, planWeb, readCache, selectJobs, summaryLines, writeCaptureState } from './capture-web';
 import { imageInfo } from './spec';
 import { authPlan, safeUrl } from './auth';
 import * as rt from '../lib/rt';
@@ -122,7 +125,21 @@ export async function run(ctx: Ctx): Promise<void> {
 
   if (source === 'web') {
     if (dry) {
-      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only)) progress(`${lang}/${device}/${name}.png <- ${cap.baseUrl}${(s.path ?? '/').replaceAll('{lang}', lang)}`);
+      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only)) {
+        progress(`${lang}/${device}/${name}.png <- ${cap.baseUrl}${(s.path ?? '/').replaceAll('{lang}', lang)}`);
+        const sel: [string, string[]][] = [['waitSelector', candidates(s.waitSelector, device)], ...(Array.isArray(s.click) && s.click.some(c => typeof c !== 'string') ? s.click : s.click === undefined ? [] : [s.click]).map((c, k) => [`click[${k}]`, candidates(c as ShotSelector, device)] as [string, string[]])];
+        for (const [what, list] of sel) if (list.length) log('shots', `  ${what} on ${device} ${dims[device].w}x${dims[device].h}: ${list.join(' | ')}`);
+      }
+      if (a.has('probe')) { // open the pages and test every candidate on each size (needs the app running at baseUrl)
+        need(cap.baseUrl, 'shots.capture.baseUrl');
+        const auth = cap.auth ? authPlan(cap.auth, { root, baseUrl: cap.baseUrl! }) : undefined;
+        const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build: '', fonts: '' });
+        const browser = await launch(root, { headless: true, args: ['--mute-audio'] });
+        let r;
+        try { r = await probeSelectors(browser, jobs, { dims, ...(auth ? { auth } : {}) }); } finally { await closeBrowser(browser); }
+        for (const l of r.lines) log('shots', l);
+        if (r.missed) throw new Error(`${r.missed} selector lists matched nothing (see MISS lines above: the size and every candidate with its match count)`);
+      }
       if (cap.auth) log('shots', cap.auth.storageState ? `would load the signed-in state from ${cap.auth.storageState} into every context` : `would sign every context in first: ${(cap.auth.request?.method ?? 'POST').toUpperCase()} ${safeUrl(cap.auth.request?.url ?? '')} (values from .storebound/credentials.json / env, never shown)`);
       return done('shots', `capture planned (dry run): ${total} frames from web`);
     }
diff --git a/cli/shots/check.ts b/cli/shots/check.ts
index 7f322ee..2697d8f 100644
--- a/cli/shots/check.ts
+++ b/cli/shots/check.ts
@@ -15,7 +15,7 @@ import type { ShipConfig } from '../lib/config';
 import type { Ctx } from '../lib/ctx';
 import { log, printJson } from '../lib/log';
 import { checkFrames, type FrameIssue } from './devices';
-import { defaultSizes, frameDims, renderDims, SIZES } from './lib';
+import { defaultSizes, frameDims, frameLangs, langHasFrames, renderDims, SIZES } from './lib';
 import type { LocalIssue, RendersCheck } from '../lib/validate-rules';
 import { allIssues, requiredSets, type RendersScan, resolvedTablets, scanRenders, storeOf } from './report';
 import { imageInfo } from './spec';
@@ -125,9 +125,13 @@ export async function run(ctx: Ctx): Promise<void> {
   const tablets = resolvedTablets(config, resolve(ctx.args.get('src') ?? config.renders ?? config.shots?.out ?? 'store/renders'));
   const issues = [...allIssues(scan), ...localFontIssues(readManifest(fontsDirOf(root))).map(issue => ({ where: '.storebound/fonts/fonts.json', issue })),
     ...backgroundIssues(config, resolve, tablets)];
-  const frameIssues = cap?.source === 'folder' ? checkFrameFolder(config, resolve(cap.folder ?? config.shots!.frames), scan.langs, tablets) : [];
+  // languages with copy but no frames use the default language's (shots.perLanguageFrames: true requires them per language)
+  const framesRoot = resolve(cap?.folder ?? config.shots!.frames), def = config.play?.defaultLanguage ?? config.languages[0]!.id;
+  const fl = frameLangs(scan.langs, l => langHasFrames(framesRoot, l), def, config.shots?.perLanguageFrames);
+  const frameIssues = cap?.source === 'folder' ? checkFrameFolder(config, framesRoot, scan.langs.filter(l => !fl.borrowed.includes(l)), tablets) : [];
+  if (fl.borrowed.length && !ctx.args.has('json')) console.log(`info  frames: no frames for ${fl.borrowed.join(', ')}; they use the ${def} frames (shots.perLanguageFrames: true requires per-language frames)`);
   if (ctx.args.has('json')) {
-    printJson({ images: scan.images.length, videos: scan.videos.length, issues, frames: frameIssues });
+    printJson({ images: scan.images.length, videos: scan.videos.length, issues, frames: frameIssues, info: fl.borrowed.map(l => ({ lang: l, framesFrom: def })) });
   } else {
     for (const { where, issue } of issues) console.log(`${issue.level === 'error' ? 'ERROR' : 'warn '} ${where}: ${issue.msg}`);
     for (const f of frameIssues) console.log(`ERROR frames/${f.file}: ${f.msg}`);
diff --git a/cli/shots/devices.ts b/cli/shots/devices.ts
index fecf941..1fa9f20 100644
--- a/cli/shots/devices.ts
+++ b/cli/shots/devices.ts
@@ -6,6 +6,7 @@
 //   android-emu  adb: demo-mode status bar, per-app language (Android 13+), am start with deep link / extras,
 //                exec-out screencap. Emulator or a USB device.
 //   folder       bring your own frames: <frames>/<lang>/<phone|tablet>/<name>.png, checked for size.
+import { validateSelector } from './selectors';
 import type { ShotsCapture, ShotSpec, VideoRecord } from '../lib/config';
 import { validateAuth } from './auth';
 
@@ -37,6 +38,10 @@ export function validateCapture(c: ShotsCapture | undefined): string[] {
   if (src !== 'folder' && (!c.shots || !Object.keys(c.shots).length)) e.push('shots.capture.shots: at least one shot');
   for (const [name, s] of Object.entries(c.shots ?? {})) {
     if (!/^[A-Za-z0-9._-]+$/.test(name)) e.push(`shots.capture.shots.${name}: name must be a file name (letters, digits, . _ -)`);
+    if (src === 'web') {
+      if (s.waitSelector !== undefined) e.push(...validateSelector(`shots.capture.shots.${name}.waitSelector`, s.waitSelector));
+      if (s.click !== undefined) for (const [i, c] of (Array.isArray(s.click) && s.click.some(x => typeof x !== 'string') ? s.click : [s.click]).entries()) e.push(...validateSelector(`shots.capture.shots.${name}.click[${i}]`, c));
+    } else if (s.waitSelector !== undefined || s.click !== undefined) e.push(`shots.capture.shots.${name}: waitSelector / click only apply to source web`);
     if (s.navigate && !['spa', 'reload'].includes(s.navigate)) e.push(`shots.capture.shots.${name}.navigate: spa | reload`);
     if (s.device && !['phone', 'tablet', 'both'].includes(s.device)) e.push(`shots.capture.shots.${name}.device: phone | tablet | both`);
     if (src === 'web' && s.path === undefined) e.push(`shots.capture.shots.${name}.path: URL path (source web)`);
diff --git a/cli/shots/feature-bleed.html b/cli/shots/feature-bleed.html
index 848715d..aeebd9c 100644
--- a/cli/shots/feature-bleed.html
+++ b/cli/shots/feature-bleed.html
@@ -37,6 +37,12 @@ await document.fonts.ready;
 await Promise.all([...document.images].map(i => i.decode().catch(() => {})));
 const overflow = [];
 const img = c.querySelector('img.frame');
+// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas
+const rot = Number(job.rotate) || 0;
+if (rot) {
+  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;
+  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });
+}
 if (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);
 else if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);
 const t = c.querySelector('.name, .logo').getBoundingClientRect();
diff --git a/cli/shots/fonts.ts b/cli/shots/fonts.ts
index 2f24be8..09ea404 100644
--- a/cli/shots/fonts.ts
+++ b/cli/shots/fonts.ts
@@ -6,7 +6,7 @@
 // sublines, badge labels; plus the Noto face of a non-Latin script). A character the stack lacks gets an automatic
 // Noto fallback (logged; `shots check` errors on renders that used it unless shots.fonts.fallback lists it); a
 // character no fallback covers fails with the language and the characters.
-//   storebound shots fonts [--json]     (re-run after editing the copy or the fonts)
+//   storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report to those languages; the manifest keeps all)     (re-run after editing the copy or the fonts)
 // Out: <project>/.storebound/fonts/*.woff2 + fonts.css + fonts.json (faces and the per-language stacks, read by render).
 // The Google fonts are SIL Open Font License 1.1. A local font file in shots.fonts (local-fonts.ts) gets the same cmap
 // check, is read in place (never copied) and recorded with its path, sha256 and license note.
@@ -107,7 +107,10 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   for (const f of Object.values(local)) if (!f.license) warn('shots', `local font ${f.path} has no license note: add license ('OFL-1.1', 'proprietary', ...) to its shots.fonts entry`);
   let auto = 0;
-  for (const [lang, l] of Object.entries(manifest.langs)) for (const f of l.fallbacks) {
+  const only = ctx.args.list('lang');
+  const unknown = only.filter(l => !(l in manifest.langs));
+  if (unknown.length) throw new Error(`--lang: no copy or config language ${unknown.join(', ')} (known: ${Object.keys(manifest.langs).join(', ')})`);
+  for (const [lang, l] of Object.entries(manifest.langs)) for (const f of only.length && !only.includes(lang) ? [] : l.fallbacks) {
     const ok = manifest.faces[f.face]?.chosen;
     if (!ok) auto++;
     const base = f.role === 'title' ? title : body;
diff --git a/cli/shots/lib.ts b/cli/shots/lib.ts
index 5b882ab..f20964c 100644
--- a/cli/shots/lib.ts
+++ b/cli/shots/lib.ts
@@ -1,4 +1,6 @@
 // Pure parts of the screenshot pipeline: store sizes, palettes, per-language script fonts, copy validation, job data.
+import { readdirSync } from 'node:fs';
+import { join } from 'node:path';
 import { specFamily } from './local-fonts';
 import { bgIssue } from './palette';
 import type { Palette, ShipConfig, ShotScene, ShotsConfig } from '../lib/config';
@@ -280,8 +282,9 @@ export interface FeatureLayout { left: number; top: number; width: number; heigh
  *  side, centred vertically; `scale` (default 1) multiplies the design width before that clamp. fit 'bleed': the design
  *  width x scale at the old fixed top, cropped by the canvas edge on purpose. */
 export function featureLayout(style: 'game' | 'app', dev: { w: number; h: number; bar: number },
-  o: { fit?: 'contain' | 'bleed'; scale?: number } = {}): FeatureLayout {
-  const d = FEATURE_DEVICE[style], C = FEATURE_CANVAS, fit = o.fit ?? 'contain';
+  o: { fit?: 'contain' | 'bleed'; scale?: number; rotate?: number } = {}): FeatureLayout {
+  const base = FEATURE_DEVICE[style], C = FEATURE_CANVAS, fit = o.fit ?? 'contain';
+  const d = { ...base, angle: base.angle + (o.rotate ?? 0) }; // shots.feature.rotate adds to the template's tilt, like a scene frame's rotate
   const k = (dev.h + dev.bar) / dev.w;
   let width = d.width * (o.scale ?? 1);
   if (fit === 'contain') {
@@ -329,3 +332,24 @@ export function framesForRender(scenes: { frames: { src: string }[] }[], sizes:
   }
   return [...out].sort();
 }
+
+/** Which language's frames each language loads (shots.perLanguageFrames false, the default): its own when
+ *  <frames>/<lang> holds any file, else the default language's. `hasFrames` is injected so tests need no disk. */
+export function frameLangs(langs: string[], hasFrames: (lang: string) => boolean, def: string, perLanguage = false): { map: Record<string, string>; borrowed: string[] } {
+  const map: Record<string, string> = {}, borrowed: string[] = [];
+  for (const l of langs) {
+    if (perLanguage || l === def || hasFrames(l)) map[l] = l;
+    else if (hasFrames(def)) { map[l] = def; borrowed.push(l); }
+    else map[l] = l; // nothing anywhere: the normal missing-frames error names it
+  }
+  return { map, borrowed };
+}
+
+/** true when <dir>/<lang> holds at least one file (any depth up to 3). */
+export function langHasFrames(dir: string, lang: string): boolean {
+  const walk = (d: string, depth: number): boolean => {
+    let ents; try { ents = readdirSync(d, { withFileTypes: true }); } catch { return false; }
+    return ents.some(e => e.isFile() || (depth < 3 && e.isDirectory() && walk(join(d, e.name), depth + 1)));
+  };
+  return walk(join(dir, lang), 0);
+}
diff --git a/cli/shots/render.ts b/cli/shots/render.ts
index 2ff3ef1..8895ecf 100644
--- a/cli/shots/render.ts
+++ b/cli/shots/render.ts
@@ -28,7 +28,7 @@ import { done, log, warn } from '../lib/log';
 import { closeBrowser, launch } from './browser';
 import { defaultConcurrency, pool, progressLine } from './capture-web';
 import { shotsStyle } from '../lib/config';
-import { type CopyFile, type DeviceBox, type TextBox, SIZES, renderDims, sheetTimeoutMs, featureLayout, copyText, defaultSizes, frameDims, framesForRender, mergeCopy, palette, renderDir, scriptFont, sheetLayout, validateCopy, variantScenes } from './lib';
+import { type CopyFile, type DeviceBox, type TextBox, SIZES, renderDims, sheetTimeoutMs, featureLayout, copyText, defaultSizes, frameDims, framesForRender, frameLangs, langHasFrames, mergeCopy, palette, renderDir, scriptFont, sheetLayout, validateCopy, variantScenes } from './lib';
 import { bgCss, bgTone, type ContrastSample, contrastIssues, parseColour, photoBackground, photoCss, type RGB, worstContrast } from './palette';
 import { type WeightSample, weightIssues } from './weights';
 import type { Palette } from '../lib/config';
@@ -74,9 +74,11 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   const framesDir = resolve(shots.frames), outDir = resolve(shots.out);
   // every frame the scenes load must exist: a missing one renders a store image with no app or game in it
+  const fl = frameLangs(langs, l => langHasFrames(framesDir, l), config.play?.defaultLanguage ?? config.languages[0]!.id, shots.perLanguageFrames);
+  if (fl.borrowed.length) log('shots', `info: no frames for ${fl.borrowed.join(', ')}; using the ${config.play?.defaultLanguage ?? config.languages[0]!.id} frames (shots.perLanguageFrames: true requires them per language)`);
   const gone = [...jobs.values()].flatMap(job => {
     const sel = a.list('scenes').length ? job.scenes.filter(s => a.list('scenes').includes(s.id)) : job.scenes;
-    return framesForRender(sel, sizes, langs, shots);
+    return framesForRender(sel, sizes, langs.map(l => fl.map[l]!), shots);
   }).filter((f, i, all) => all.indexOf(f) === i && !existsSync(join(framesDir, f)));
   if (gone.length) throw new Error(`shots render: ${gone.length} frame file${gone.length > 1 ? 's' : ''} missing under ${relative(root, framesDir) || '.'} (run \`storebound shots capture\` first, or restore the frames folder; it is often git-ignored):\n  ${gone.slice(0, 20).join('\n  ')}${gone.length > 20 ? `\n  ... ${gone.length - 20} more` : ''}`);
   if (a.has('dry')) {
@@ -164,7 +166,7 @@ export async function run(ctx: Ctx): Promise<void> {
           fonts: { ...fonts, script: st.script, titleStack: st.title, bodyStack: st.body } };
         if (url.searchParams.has('feature'))
           return Response.json({ ...base, frame: shots.feature?.frame ?? scenes[0]!.frames[0]!.src, featureTitle: shots.feature?.title,
-            device: featureLayout(style, phone, { fit: shots.feature?.fit, scale: shots.feature?.scale }),
+            device: featureLayout(style, phone, { fit: shots.feature?.fit, scale: shots.feature?.scale, rotate: shots.feature?.rotate }), rotate: shots.feature?.rotate ?? 0,
             palette: look(palette(shots.feature?.palette ?? scenes[0]!.palette, style), style === 'app' ? 135 : 160, style === 'app' ? 55 : 50, shots.feature?.background) });
         const sid = url.searchParams.get('s') ?? '';
         const scene = scenes.find(s => s.id === sid)!;
@@ -174,7 +176,10 @@ export async function run(ctx: Ctx): Promise<void> {
       let file = '';
       if (p === '/logo' && shots.logo) file = resolve(shots.logo);
       else if (p.startsWith('/bgimg/')) file = photos[Number(p.slice(7))] ?? '';
-      else if (p.startsWith('/frames/')) file = join(framesDir, p.slice(8));
+      else if (p.startsWith('/frames/')) {
+        const [fl0 = '', ...rest] = p.slice(8).split('/');
+        file = join(framesDir, [fl.map[fl0] ?? fl0, ...rest].join('/'));
+      }
       else if (p.startsWith('/fonts/')) file = fontsRoute(p.slice(7), fontsDir, root, manifest) ?? '';
       else if (p.startsWith('/out/')) file = join(outDir, p.slice(5));
       else if (/^\/(template|feature)(-app|-bleed)?\.html$/.test(p)) return new Response(SHOTS_PAGES[p.slice(1)]!, { headers: { 'content-type': TYPES.html! } });
diff --git a/cli/shots/selectors.ts b/cli/shots/selectors.ts
new file mode 100644
index 0000000..1efb778
--- /dev/null
+++ b/cli/shots/selectors.ts
@@ -0,0 +1,79 @@
+// Layout-aware element selectors for web capture shots (shots.capture.shots.<name>.waitSelector / .click):
+// a list of candidates tried in order, with a per-device list first ("phone", "tablet"). Data attributes are preferred
+// (`[data-shot="shop-row"]`), then CSS, then Playwright text (`text=Shop`, `role=button[name="Shop"]`). A shop row that is
+// a list on the phone and a grid at 1180x820 needs different selectors; the miss message names the selector and the size.
+import type { ShotSelector } from '../lib/config';
+
+type Device = 'phone' | 'tablet';
+
+/** Candidates for one device: its own list first, then the shared ones, without repeats. */
+export function candidates(sel: ShotSelector | undefined, device: Device): string[] {
+  if (sel === undefined) return [];
+  const list = (v: string | string[] | undefined): string[] => (v === undefined ? [] : Array.isArray(v) ? v : [v]);
+  const all = typeof sel === 'string' || Array.isArray(sel) ? list(sel) : [...list(sel[device]), ...list(sel.any)];
+  return [...new Set(all)];
+}
+
+export function validateSelector(where: string, sel: unknown): string[] {
+  const ok = (v: unknown): boolean => typeof v === 'string' && v.trim() !== '';
+  const okList = (v: unknown): boolean => ok(v) || (Array.isArray(v) && v.length > 0 && v.every(ok));
+  if (okList(sel)) return [];
+  if (sel && typeof sel === 'object' && !Array.isArray(sel)) {
+    const o = sel as Record<string, unknown>, bad = Object.keys(o).filter(k => !['phone', 'tablet', 'any'].includes(k));
+    if (bad.length) return [`${where}: unknown key ${bad.join(', ')} (phone | tablet | any)`];
+    if (!Object.keys(o).length) return [`${where}: at least one of phone | tablet | any`];
+    return Object.entries(o).filter(([, v]) => !okList(v)).map(([k]) => `${where}.${k}: a selector or a list of selectors`);
+  }
+  return [`${where}: a selector, a list of selectors, or { phone, tablet, any }`];
+}
+
+/** Minimal Playwright surface used here, so tests can fake a page. */
+export interface SelPage {
+  locator(sel: string): { count(): Promise<number>; first(): { click(o?: { timeout?: number }): Promise<void> } };
+  waitForTimeout(ms: number): Promise<void>;
+}
+
+export interface SelResult { selector: string; matches: number }
+
+/** Match counts of every candidate. */
+export async function probe(page: SelPage, list: string[]): Promise<SelResult[]> {
+  const out: SelResult[] = [];
+  for (const selector of list) {
+    let matches = 0;
+    try { matches = await page.locator(selector).count(); } catch { matches = -1; } // -1: not a valid selector
+    out.push({ selector, matches });
+  }
+  return out;
+}
+
+/** The miss message: which selector, on which size, what each candidate matched. */
+export function missMessage(what: string, where: { device: Device; w: number; h: number }, res: SelResult[]): string {
+  const rows = res.map(r => `${r.selector} ${r.matches < 0 ? 'is not a valid selector' : `matched ${r.matches}`}`).join('; ');
+  return `${what} selector missed on ${where.device} ${where.w}x${where.h}: ${rows}. Add a candidate for this layout (waitSelector/click: { ${where.device}: [...] }), data attributes first`;
+}
+
+/** Waits (polling) until one candidate matches; returns it. Throws the miss message on timeout. */
+export async function firstMatch(page: SelPage, list: string[], what: string, where: { device: Device; w: number; h: number }, timeoutMs: number): Promise<string> {
+  const end = Date.now() + timeoutMs;
+  let res: SelResult[] = [];
+  for (;;) {
+    res = await probe(page, list);
+    const hit = res.find(r => r.matches > 0);
+    if (hit) return hit.selector;
+    if (Date.now() >= end) throw new Error(missMessage(what, where, res));
+    await page.waitForTimeout(100);
+  }
+}
+
+/** waitSelector, then click, for one shot on one device. No-ops without either. */
+export async function applySelectors(page: SelPage, spec: { waitSelector?: ShotSelector; click?: ShotSelector | ShotSelector[] }, where: { device: Device; w: number; h: number }, timeoutMs: number): Promise<void> {
+  const w = candidates(spec.waitSelector, where.device);
+  if (w.length) await firstMatch(page, w, 'waitSelector', where, timeoutMs);
+  const clicks = spec.click === undefined ? [] : Array.isArray(spec.click) && spec.click.some(c => typeof c !== 'string') ? spec.click : [spec.click as ShotSelector];
+  for (const c of clicks) {
+    const list = candidates(c, where.device);
+    if (!list.length) continue;
+    const hit = await firstMatch(page, list, 'click', where, timeoutMs);
+    await page.locator(hit).first().click({ timeout: timeoutMs });
+  }
+}
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 1e06369..15a874c 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1441,3 +1441,16 @@ that fails without the fix (see CONTRIBUTING.md).
   --platform macos` refuses an unsigned .pkg or one not signed with an installer certificate before any network call
   (`tests/mas-build.test.ts`). The `com.apple.pkg` file type of the API build upload is taken from Apple's schema and has not
   been exercised against the live API yet; `--via altool` (`--type macos`) is the fallback.
+
+## 120. Play feature graphic shows a landscape game sideways; a language without frames fails the whole check
+
+- **Symptom:** the 1024x500 feature graphic showed a landscape game frame sideways inside the portrait phone (the
+  feature path ignored `rotate`); `shots check` without `--lang` failed on missing frames of languages that only have
+  copy; a capture click on a shop row matched on the phone layout and silently missed at tablet / desktop sizes.
+- **Do:** set `shots.feature.rotate` (degrees, added to the template tilt; `-90` stands a landscape frame upright in a
+  phone lying on its side; with layout "bleed" the frame image itself is turned). Frames of a language that has none
+  come from the default language (info line; `shots.perLanguageFrames: true` requires them per language). In web
+  capture list `waitSelector` / `click` candidates per layout (`{ phone: [...], tablet: [...], any: [...] }`, data
+  attributes first, `text=` last); `shots capture --dry` prints them per size, `--dry --probe` opens the pages and
+  names the MISS with the size and every candidate's match count.
+- **Guard:** `tests/shots-gaps.test.ts`, `tests/browser/feature-fit.browser.ts` (rotate), `cli/shots/selectors.ts`.
diff --git a/tests/browser/feature-fit.browser.ts b/tests/browser/feature-fit.browser.ts
index 82aea79..a546755 100644
--- a/tests/browser/feature-fit.browser.ts
+++ b/tests/browser/feature-fit.browser.ts
@@ -63,6 +63,8 @@ describe('shots.feature config', () => {
     expect(errs({ frame: 'a.png' })).toEqual([]);
     expect(errs({ frame: 'a.png', fit: 'bleed', scale: 1.2 })).toEqual([]);
     expect(errs({ frame: 'a.png', fit: 'cover' })).toEqual(["shots.feature.fit: 'contain' | 'bleed'"]);
+    expect(errs({ frame: 'a.png', rotate: -90 })).toEqual([]);
+    expect(errs({ frame: 'a.png', rotate: 'left' })).toEqual(['shots.feature.rotate: a number of degrees from -360 to 360']);
     expect(errs({ frame: 'a.png', scale: 3 })).toEqual(['shots.feature.scale: a number from 0.5 to 1.5']);
   });
 });
@@ -106,3 +108,41 @@ describe.skipIf(!browser)('feature graphic templates at 1024 x 500 (DOM layout b
     } finally { await page.close(); }
   }, scaled(30_000));
 });
+
+describe.skipIf(!browser)('shots.feature.rotate', () => {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const route = (page: any, html: string, name: string, job: unknown) => page.route('http://t.test/**', (r: { request(): { url(): string }; fulfill(o: unknown): Promise<void> }) => {
+    const u = new URL(r.request().url());
+    if (u.pathname === `/${name}`) return r.fulfill({ contentType: 'text/html', body: html });
+    if (u.pathname === '/job.json') return r.fulfill({ contentType: 'application/json', body: JSON.stringify(job) });
+    if (u.pathname.startsWith('/frames/')) return r.fulfill({ contentType: 'image/png', body: PNG });
+    return r.fulfill({ contentType: 'text/css', body: '' });
+  });
+  const pal = { bg: ['#123456', '#345678', '#567890'], glow: '#ffffff', ink: '#000000', shadow: 'rgba(0,0,0,.4)' };
+  test('game template: a -90 phone lies on its side and still fits', async () => {
+    const page = await browser.newPage({ viewport: { width: 1024, height: 500 } });
+    try {
+      const device = featureLayout('game', DEFAULT_PHONE, { rotate: -90 });
+      expect(device.angle).toBe(-83);
+      await route(page, readFileSync(join(import.meta.dir, '..', '..', 'cli', 'shots', 'feature.html'), 'utf8'), 'feature.html',
+        { style: 'game', phone: DEFAULT_PHONE, logo: false, appName: 'Demo', fonts: { title: 'X' }, frame: 'a.png', device, palette: pal });
+      await page.goto('http://t.test/feature.html?lang=en');
+      await page.waitForFunction("document.body.dataset.ready === '1'", null, { timeout: 15000 });
+      const d = (JSON.parse(await page.evaluate('document.body.dataset.devices')) as { x: number; y: number; w: number; h: number }[])[0]!;
+      expect(d.w).toBeGreaterThan(d.h); // landscape outline
+      expect(boxOutside(d, 1024, 500)).toEqual([]);
+    } finally { await page.close(); }
+  }, scaled(30_000));
+  test('bleed template: the frame image is turned and still covers the canvas', async () => {
+    const page = await browser.newPage({ viewport: { width: 1024, height: 500 } });
+    try {
+      await route(page, readFileSync(join(import.meta.dir, '..', '..', 'cli', 'shots', 'feature-bleed.html'), 'utf8'), 'feature-bleed.html',
+        { fonts: { title: 'X' }, frame: 'a.png', appName: 'Demo', rotate: -90 });
+      await page.goto('http://t.test/feature-bleed.html?lang=en');
+      await page.waitForFunction("document.body.dataset.ready === '1'", null, { timeout: 15000 });
+      const r = await page.evaluate("(() => { const b = document.querySelector('img.frame').getBoundingClientRect(); return { x: b.x, y: b.y, w: b.width, h: b.height }; })()") as { x: number; y: number; w: number; h: number };
+      expect(Math.round(r.w)).toBe(1024); expect(Math.round(r.h)).toBe(500); expect(Math.round(r.x)).toBe(0); expect(Math.round(r.y)).toBe(0);
+      expect(await page.evaluate("document.querySelector('img.frame').style.transform")).toBe('rotate(-90deg)');
+    } finally { await page.close(); }
+  }, scaled(30_000));
+});
diff --git a/tests/shots-gaps.test.ts b/tests/shots-gaps.test.ts
new file mode 100644
index 0000000..3bc8045
--- /dev/null
+++ b/tests/shots-gaps.test.ts
@@ -0,0 +1,91 @@
+// Real-use gaps in `shots`: feature rotate, check/render frame fallback per language, layout-aware capture selectors.
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_PHONE, featureLayout, frameLangs, langHasFrames } from '../cli/shots/lib';
+import { applySelectors, candidates, missMessage, probe, validateSelector, type SelPage } from '../cli/shots/selectors';
+import { validateCapture } from '../cli/shots/devices';
+
+describe('feature rotate', () => {
+  test('adds to the template tilt and still fits', () => {
+    const a = featureLayout('game', DEFAULT_PHONE, {}), b = featureLayout('game', DEFAULT_PHONE, { rotate: -90 });
+    expect(a.angle).toBe(7); expect(b.angle).toBe(-83);
+    expect(b.box.w).toBeGreaterThan(b.box.h);
+    expect(b.box.x).toBeGreaterThanOrEqual(23.99); expect(b.box.x + b.box.w).toBeLessThanOrEqual(1024 - 23.99);
+    expect(b.box.y).toBeGreaterThanOrEqual(23.99); expect(b.box.y + b.box.h).toBeLessThanOrEqual(500 - 23.99);
+  });
+});
+
+describe('frame languages', () => {
+  const has = (set: string[]) => (l: string) => set.includes(l);
+  test('a language without frames borrows the default language', () => {
+    expect(frameLangs(['en', 'tr', 'de'], has(['en', 'de']), 'en')).toEqual({ map: { en: 'en', tr: 'en', de: 'de' }, borrowed: ['tr'] });
+  });
+  test('perLanguage requires its own', () => {
+    expect(frameLangs(['en', 'tr'], has(['en']), 'en', true)).toEqual({ map: { en: 'en', tr: 'tr' }, borrowed: [] });
+  });
+  test('no frames anywhere: nothing borrowed, the missing error names the language', () => {
+    expect(frameLangs(['en', 'tr'], has([]), 'en').borrowed).toEqual([]);
+  });
+  test('langHasFrames reads the folder', () => {
+    const d = mkdtempSync(join(tmpdir(), 'sb-fl-'));
+    try {
+      mkdirSync(join(d, 'en', 'phone'), { recursive: true }); writeFileSync(join(d, 'en', 'phone', 'a.png'), 'x');
+      mkdirSync(join(d, 'tr'), { recursive: true });
+      expect(langHasFrames(d, 'en')).toBe(true);
+      expect(langHasFrames(d, 'tr')).toBe(false);
+      expect(langHasFrames(d, 'de')).toBe(false);
+    } finally { rmSync(d, { recursive: true, force: true }); }
+  });
+});
+
+/** Fake page: a DOM of selector -> count; text= selectors are just keys. */
+function fake(dom: Record<string, number>, clicks: string[] = []): SelPage {
+  return {
+    locator: (s: string) => ({ count: async () => { if (s.startsWith('!')) throw new Error('bad'); return dom[s] ?? 0; }, first: () => ({ click: async () => { clicks.push(s); } }) }),
+    waitForTimeout: async () => {},
+  };
+}
+
+describe('capture selectors', () => {
+  test('per-device list first, then shared, no repeats', () => {
+    const s = { phone: ['[data-shot="row"]'], tablet: ['[data-shot="tile"]', 'text=Shop'], any: ['text=Shop'] };
+    expect(candidates(s, 'tablet')).toEqual(['[data-shot="tile"]', 'text=Shop']);
+    expect(candidates(s, 'phone')).toEqual(['[data-shot="row"]', 'text=Shop']);
+    expect(candidates('a', 'phone')).toEqual(['a']);
+    expect(candidates(undefined, 'phone')).toEqual([]);
+  });
+  test('validation', () => {
+    expect(validateSelector('x', 'a')).toEqual([]);
+    expect(validateSelector('x', { tablet: ['a'] })).toEqual([]);
+    expect(validateSelector('x', { desktop: 'a' })[0]).toContain('unknown key desktop');
+    expect(validateSelector('x', '')).not.toEqual([]);
+    expect(validateSelector('x', {})).not.toEqual([]);
+  });
+  test('the click lands on the first candidate that matches', async () => {
+    const clicks: string[] = [];
+    await applySelectors(fake({ 'text=Shop': 1 }, clicks), { waitSelector: ['[data-shot="row"]', 'text=Shop'], click: { tablet: ['[data-shot="tile"]', 'text=Shop'] } }, { device: 'tablet', w: 1180, h: 820 }, 50);
+    expect(clicks).toEqual(['text=Shop']);
+  });
+  test('several clicks in order', async () => {
+    const clicks: string[] = [];
+    await applySelectors(fake({ a: 1, b: 1 }, clicks), { click: [{ any: 'a' }, 'b'] }, { device: 'phone', w: 440, h: 902 }, 50);
+    expect(clicks).toEqual(['a', 'b']);
+  });
+  test('a miss names the selector, the size and every match count', async () => {
+    const err = await applySelectors(fake({ '[data-shot="row"]': 3 }), { click: { tablet: ['[data-shot="tile"]', 'text=Shop'] } }, { device: 'tablet', w: 1180, h: 820 }, 30).then(() => '', e => (e as Error).message);
+    expect(err).toContain('click selector missed on tablet 1180x820');
+    expect(err).toContain('[data-shot="tile"] matched 0');
+    expect(err).toContain('text=Shop matched 0');
+    expect(missMessage('click', { device: 'phone', w: 1, h: 2 }, [{ selector: '!x', matches: -1 }])).toContain('is not a valid selector');
+  });
+  test('probe counts every candidate', async () => {
+    expect(await probe(fake({ a: 2 }), ['a', 'b'])).toEqual([{ selector: 'a', matches: 2 }, { selector: 'b', matches: 0 }]);
+  });
+  test('validateCapture accepts and rejects', () => {
+    const cap = (shot: object) => ({ source: 'web', baseUrl: 'http://127.0.0.1:1', shots: { shop: { path: '/', ...shot } } }) as never;
+    expect(validateCapture(cap({ waitSelector: { tablet: 'a' }, click: ['a', 'b'] }))).toEqual([]);
+    expect(validateCapture(cap({ click: { desktop: 'a' } }))[0]).toContain('unknown key desktop');
+  });
+});

From b059e83b90f7aa3c858bbcbdb870dccd49efc78d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:01:32 +0800
Subject: [PATCH 146/255] shots fonts usage line

---
 cli/shots/fonts.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/shots/fonts.ts b/cli/shots/fonts.ts
index 09ea404..cb0a9e0 100644
--- a/cli/shots/fonts.ts
+++ b/cli/shots/fonts.ts
@@ -6,7 +6,7 @@
 // sublines, badge labels; plus the Noto face of a non-Latin script). A character the stack lacks gets an automatic
 // Noto fallback (logged; `shots check` errors on renders that used it unless shots.fonts.fallback lists it); a
 // character no fallback covers fails with the language and the characters.
-//   storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report to those languages; the manifest keeps all)     (re-run after editing the copy or the fonts)
+//   storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report; the manifest keeps all languages)     (re-run after editing the copy or the fonts)
 // Out: <project>/.storebound/fonts/*.woff2 + fonts.css + fonts.json (faces and the per-language stacks, read by render).
 // The Google fonts are SIL Open Font License 1.1. A local font file in shots.fonts (local-fonts.ts) gets the same cmap
 // check, is read in place (never copied) and recorded with its path, sha256 and license note.

From 66247f35d94a196abedbf3b8e3dc40ce0f05ae40 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:01:45 +0800
Subject: [PATCH 147/255] flags: shots fonts --lang, capture --probe

---
 cli/data/flags.json | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index db3f259..7473ef4 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -939,6 +939,7 @@
    "keep-booted",
    "lang",
    "only-missing",
+   "probe",
    "source",
    "src",
    "variants"
@@ -956,7 +957,9 @@
    "to",
    "translate"
   ],
-  "shots fonts": [],
+  "shots fonts": [
+   "lang"
+  ],
   "shots gallery": [
    "lang",
    "no-variants",
@@ -985,6 +988,7 @@
    "no-captions",
    "only-missing",
    "port",
+   "probe",
    "seconds",
    "source",
    "src",
@@ -1276,6 +1280,7 @@
    "port",
    "poster",
    "pre-check",
+   "probe",
    "production",
    "profile",
    "progress",
@@ -1721,7 +1726,7 @@
    "storebound shots copy reviewed --lang de[,es] | --all [--dry]   a human read the copy: remove its marker"
   ],
   "shots fonts": [
-   "storebound shots fonts [--json]     (re-run after editing the copy or the fonts)"
+   "storebound shots fonts [--lang en,tr] [--json]   (--lang limits the report; the manifest keeps all languages)     (re-run after editing the copy or the fonts)"
   ],
   "shots gallery": [
    "storebound shots gallery [--lang en,tr] [--src store/renders] [--out <file>] [--no-variants] [--json]"

From 98cd1d3c926eed767c2060f2105ace800595d7ca Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:02:02 +0800
Subject: [PATCH 148/255] embedded: regenerated

---
 cli/lib/embedded.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index 715eb69..c963dee 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -39,7 +39,7 @@ export const TEMPLATE_TEXT: Record<string, string> = {
 export const SHOTS_PAGES: Record<string, string> = {
   "caption.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Caption overlay for app preview videos (transparent PNG, rendered by `storebound shots video`, overlaid by ffmpeg).\n     caption.html?w=<px>&h=<px>&lang=<id>&i=<caption index>. Same title font, stroke and colours as the screenshots. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { background: transparent; overflow: hidden; }\n  #c { position: relative; width: var(--W); height: var(--H); }\n  .cap { position: absolute; left: 50%; top: calc(var(--u) * 7); transform: translateX(-50%) rotate(-1.5deg); max-width: calc(var(--u) * 90);\n    padding: calc(var(--u) * 2.6) calc(var(--u) * 5) calc(var(--u) * 3); border-radius: calc(var(--u) * 5); text-align: center;\n    background: linear-gradient(180deg, rgba(0,0,0,.42), rgba(0,0,0,.28)); box-shadow: inset 0 0 0 calc(var(--u) * .35) rgba(255,255,255,.3);\n    font-family: var(--tf); font-weight: var(--tw); font-size: calc(var(--u) * var(--fs)); line-height: 1.04; color: #fff;\n    -webkit-text-stroke: calc(var(--u) * var(--fs) * .07) var(--ink); paint-order: stroke fill; text-wrap: balance;\n    filter: drop-shadow(0 calc(var(--u) * .7) 0 var(--ink)); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), I = +q.get('i');\nconst job = await (await fetch(`/caption.json?lang=${encodeURIComponent(LANG)}&i=${I}`)).json();\nconst u = Math.min(W, H) / 100, R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', job.ink); R.setProperty('--fs', W > H ? 6.4 : 8.2);\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : 400);\nconst el = document.createElement('div');\nel.className = 'cap';\nif (job.rtl) el.dir = 'rtl';\nel.textContent = job.text;\ndocument.getElementById('c').append(el);\nawait document.fonts.ready;\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, app style, 1024 x 500: logo (or the app name) on the left on a calm gradient, an upright phone\n     with one frame on the right. feature-app.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render` when\n     the screenshot style is app. Keep text out of it apart from the name: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #fff; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 760px; top: 260px; width: 700px; height: 600px; transform: translate(-50%, -50%); z-index: -1;\n    border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n  .logo { position: absolute; left: 330px; top: 250px; width: 440px; max-height: 220px; object-fit: contain; transform: translate(-50%, -50%); z-index: 5; }\n  .name { position: absolute; left: 330px; top: 250px; transform: translate(-50%, -50%); z-index: 5; width: 520px; text-align: center;\n    font-family: var(--tf); font-weight: 750; font-size: 76px; line-height: 1.02; letter-spacing: -.02em; color: var(--ink); }\n  .tel { position: absolute; left: 690px; top: 40px; width: 230px; aspect-ratio: var(--ar); z-index: 3; border-radius: 36px; padding: 5px;\n    background: #121317; box-shadow: inset 0 0 0 1px #3a3c44, 0 22px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 31px; background: #fff; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #fff center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 19px; background: #000; border-radius: 99px; }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"soft\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(135deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accentSoft', rgba(P.glow, .18));\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
-  "feature-bleed.html": "<!doctype html>\r\n<html>\r\n<head>\r\n<meta charset=\"utf-8\">\r\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\r\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\r\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\r\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\r\n<style>\r\n  * { box-sizing: border-box; margin: 0; padding: 0; }\r\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\r\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\r\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\r\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\r\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\r\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\r\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\r\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"c\"></div>\r\n<script type=\"module\">\r\nconst q = new URLSearchParams(location.search);\r\nconst lang = q.get('lang'), V = q.get('v') ?? '';\r\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\r\nconst R = document.documentElement.style;\r\nconst X = job.fonts.script;\r\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\r\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\r\ndocument.documentElement.lang = lang;\r\nconst c = document.getElementById('c');\r\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\r\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\r\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\r\nawait document.fonts.ready;\r\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\r\nconst overflow = [];\r\nconst img = c.querySelector('img.frame');\r\n// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas\r\nconst rot = Number(job.rotate) || 0;\r\nif (rot) {\r\n  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;\r\n  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });\r\n}\r\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\r\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\r\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\r\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\r\ndocument.body.dataset.overflow = JSON.stringify(overflow);\r\ndocument.body.dataset.devices = '[]';\r\ndocument.body.dataset.ready = '1';\r\n</script>\r\n</body>\r\n</html>\r\n",
+  "feature-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic for shots.layout \"bleed\": the frame /frames/<lang>/feature/<shots.feature.frame> fills the\n     1024 x 500 canvas and the logo (shots.logo) or the name (shots.feature.title, else app.name) sits on the left with\n     a text shadow and a soft glow only: no band, no scrim. Play may lay its own play button over the centre. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .logo { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 380px; max-height: 300px;\n    filter: drop-shadow(0 4px 6px rgba(4,18,38,.7)) drop-shadow(0 0 28px rgba(4,22,48,.5)); }\n  .name { position: absolute; left: 44px; top: 50%; transform: translateY(-50%); max-width: 420px; font-family: var(--tf); font-weight: var(--tw);\n    font-size: 84px; line-height: 1; color: #fff; text-wrap: balance;\n    text-shadow: 0 0 4px rgba(4,18,38,.92), 0 3px 7px rgba(4,18,38,.92), 0 0 26px rgba(4,22,48,.55), 0 0 50px rgba(4,22,48,.55); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst R = document.documentElement.style;\nconst X = job.fonts.script;\nR.setProperty('--tf', (job.fonts.titleStack ?? (X ? [X, job.fonts.title] : [job.fonts.title])).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\ndocument.documentElement.lang = lang;\nconst c = document.getElementById('c');\nconst src = `/frames/${encodeURIComponent(lang)}/feature/${encodeURIComponent(job.frame)}`;\nconst name = String(job.featureTitle ?? job.appName).replace(/&/g, '&amp;').replace(/</g, '&lt;');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\">` + (job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${name}</div>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nconst img = c.querySelector('img.frame');\n// shots.feature.rotate: turn the frame like a scene frame's rotate; a quarter turn swaps the box so the image still covers the canvas\nconst rot = Number(job.rotate) || 0;\nif (rot) {\n  const quarter = Math.abs(rot % 180) === 90, W = quarter ? 500 : 1024, H = quarter ? 1024 : 500;\n  Object.assign(img.style, { inset: 'auto', left: (512 - W / 2) + 'px', top: (250 - H / 2) + 'px', width: W + 'px', height: H + 'px', transform: `rotate(${rot}deg)` });\n}\nif (!img.naturalWidth) overflow.push(`feature frame ${job.frame} did not load`);\nelse if (img.naturalWidth < 1024) overflow.push(`feature frame ${img.naturalWidth}x${img.naturalHeight} is upscaled: capture it at least 1024 px wide`);\nconst t = c.querySelector('.name, .logo').getBoundingClientRect();\nif (t.right > 1024 || t.top < 0 || t.bottom > 500) overflow.push('the name runs off the feature graphic');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "feature.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Play feature graphic, 1024 x 500: logo (or the app name) on the left, a tilted phone with one frame on the right.\n     feature.html?lang=<id>[&v=<variant>]. Rendered by `storebound shots render`. Keep text out of it: Play overlays its own UI. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: 1024px; height: 500px; overflow: hidden; background: #000; }\n  #c { position: relative; width: 1024px; height: 500px; overflow: hidden; isolation: isolate; background: var(--bg); }\n  .rays { position: absolute; left: 360px; top: 250px; width: 1700px; height: 1700px; transform: translate(-50%, -50%) rotate(8deg); z-index: -4;\n    opacity: .55; background: repeating-conic-gradient(rgba(255,255,255,.22) 0deg 7deg, rgba(255,255,255,0) 7deg 18deg);\n    -webkit-mask-image: radial-gradient(closest-side, #000 0%, rgba(0,0,0,.6) 30%, transparent 75%); }\n  .glow { position: absolute; left: 360px; top: 250px; width: 900px; height: 700px; transform: translate(-50%, -50%); z-index: -3;\n    background: radial-gradient(closest-side, var(--glow), transparent); }\n  .vign { position: absolute; inset: 0; z-index: -2; background: radial-gradient(90% 90% at 45% 50%, transparent 60%, rgba(0,0,0,.28) 100%); }\n  .logo { position: absolute; left: 360px; top: 252px; width: 540px; max-height: 400px; object-fit: contain; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5;\n    filter: drop-shadow(0 14px 22px rgba(0,0,0,.4)); }\n  .name { position: absolute; left: 360px; top: 250px; transform: translate(-50%, -50%) rotate(-3deg); z-index: 5; width: 540px; text-align: center;\n    font-family: var(--tf); font-size: 104px; line-height: .95; color: #fff; -webkit-text-stroke: 9px var(--ink); paint-order: stroke fill;\n    filter: drop-shadow(0 8px 0 var(--ink)) drop-shadow(0 14px 22px rgba(0,0,0,.35)); }\n  .tel { position: absolute; left: 748px; top: 36px; width: 232px; aspect-ratio: var(--ar); transform: rotate(7deg); z-index: 3;\n    border-radius: 40px; padding: 6px;\n    background: linear-gradient(140deg, #f4f4f6 0%, #9da0a8 8%, #3c3e44 20%, #1a1b1f 50%, #3c3e44 82%, #c8cad0 100%);\n    box-shadow: inset 0 0 0 1px rgba(255,255,255,.6), inset 0 0 0 3px #101114, 0 20px 50px var(--shadow); }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; border-radius: 34px; background: #000; }\n  .screen img { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .screen .bar { position: absolute; left: 0; right: 0; top: 0; height: var(--barH); background: #0b0b10 center top / 100% 60000% no-repeat; }\n  .island { position: absolute; top: 6px; left: 50%; transform: translateX(-50%); width: 30%; height: 20px; background: #000; border-radius: 99px; }\n  .spark { position: absolute; width: var(--s); height: var(--s); transform: translate(-50%, -50%); background: #fff; z-index: -1;\n    clip-path: polygon(50% 0, 58% 42%, 100% 50%, 58% 58%, 50% 100%, 42% 58%, 0 50%, 42% 42%); opacity: var(--o); filter: drop-shadow(0 0 6px #fff); }\n</style>\n</head>\n<body>\n<div id=\"c\">\n  <div class=\"glow\"></div><div class=\"rays\"></div><div class=\"vign\"></div>\n  <div class=\"tel\"><div class=\"screen\"><div class=\"bar\" id=\"bar\"></div><img id=\"f\"><div class=\"island\"></div></div></div>\n</div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst lang = q.get('lang'), V = q.get('v') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(lang)}&feature=1&v=${encodeURIComponent(V)}`)).json();\nconst P = job.palette, R = document.documentElement.style, dev = job.phone;\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(160deg, ${P.bg.join(', ')})` : P.bg)); // palette.ts: stops, colour, gradient string or photo + overlay\nR.setProperty('--glow', P.glow); R.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow);\nR.setProperty('--tf', (job.fonts.titleStack ?? [job.fonts.title]).map(f => `'${f}'`).join(', ') + ', sans-serif');\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\nconst c = document.getElementById('c');\n// device place and size from featureLayout() (lib.ts): fit 'contain' keeps the rotated phone inside the canvas\nconst D = job.device, tel = c.querySelector('.tel');\nif (D) Object.assign(tel.style, { left: D.left + 'px', top: D.top + 'px', width: D.width + 'px', transform: `rotate(${D.angle}deg)` });\nconst src = `/frames/${encodeURIComponent(lang)}/phone/${encodeURIComponent(job.frame)}`;\ndocument.getElementById('f').src = src;\ndocument.getElementById('bar').style.backgroundImage = `url('${src}')`;\nc.insertAdjacentHTML('beforeend', job.logo ? '<img class=\"logo\" src=\"/logo\">' : `<div class=\"name\">${String(job.appName).replace(/</g, '&lt;')}</div>`);\nlet seed = 7; const rnd = () => ((seed = (seed * 1664525 + 1013904223) >>> 0) / 4294967296);\nfor (let i = 0; i < 22; i++)\n  c.insertAdjacentHTML('beforeend', `<i class=\"spark\" style=\"left:${rnd() * 1024}px;top:${rnd() * 500}px;--s:${8 + rnd() * 18}px;--o:${.5 + rnd() * .5}\"></i>`);\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n// read by `shots render` -> report.json -> shots check: the phone's rotated outline must stay inside the canvas\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\nif (D?.fit === 'bleed') document.body.dataset.bleed = '1';\n// logo / name box for the safe-margin rule (7 % of the width left / right, 5 % of the height at the top)\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.logo, .name')].map(e => { const r = e.getBoundingClientRect(); return { el: e.matches('.logo') ? 'logo' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-app.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!--\n  Store screenshot template, app style (shots.style 'app', the default for the app / subscription-app profiles).\n  template-app.html?s=<scene id>&w=<px>&h=<px>&lang=<id>[&device=tablet][&style=android][&v=<variant>]\n  Calm: a soft gradient (or solid) background, one clean device frame, a headline (two lines) and a subline. No\n  sunburst, no sparkles; badges only when the copy has them, drawn as quiet chips. Same /job.json as template.html\n  (palette: bg = gradient stops, ink = headline, glow = accent, shadow = device shadow).\n  Layout: everything is in u = W / 100; the text block is measured first, then the device fills the room below it.\n  device=landscape: u = H / 100, copy column on one side, the landscape frame in a Mac window (frame=window) or bare\n  (frame=none) on the other (as template.html). Safe margins: 7 % of the width left / right, 5 % of the height at the\n  top; text and logo boxes go to body.dataset.boxes for shots check.\n-->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { overflow: hidden; background: #fff; }\n  body { font-family: var(--bf); -webkit-font-smoothing: antialiased; color: var(--ink); }\n  #c { position: relative; overflow: hidden; width: var(--W); height: var(--H); isolation: isolate; background: var(--bg); }\n  .soft { position: absolute; left: 50%; top: var(--softY); width: calc(var(--u) * 140); height: calc(var(--u) * 110); z-index: -1;\n    transform: translate(-50%, -50%); border-radius: 50%; background: radial-gradient(closest-side, var(--accentSoft), transparent); }\n\n  .top { position: absolute; left: 0; right: 0; top: calc(var(--u) * var(--top)); text-align: center; z-index: 6;\n    padding: 0 calc(var(--W) * .07); display: flex; flex-direction: column; align-items: center; }\n  .eyebrow { margin-bottom: calc(var(--u) * 2.4); font-size: calc(var(--u) * 2.9); font-weight: 700; letter-spacing: var(--kls, .14em);\n    text-transform: uppercase; color: var(--accent); line-height: 1.2; }\n  h1 { font-family: var(--tf); font-weight: var(--tw); line-height: var(--lh); letter-spacing: var(--ls, -.02em);\n    font-size: calc(var(--u) * var(--fs)); color: var(--ink); }\n  h1 span { display: block; width: max-content; max-width: none; margin: 0 auto; white-space: nowrap; }\n  h1 span + span { color: var(--line2); }\n  p.sub { margin-top: calc(var(--u) * 2.4); max-width: calc(var(--u) * 78); font-size: calc(var(--u) * var(--sub));\n    line-height: 1.38; font-weight: 500; color: var(--ink); opacity: .72; text-wrap: balance; }\n  .logo { width: min(100%, calc(var(--u) * 60)); max-height: calc(var(--u) * 26); object-fit: contain; margin-bottom: calc(var(--u) * 3); }\n\n  /* device: a plain modern phone, dark bezel, soft shadow */\n  .tel { position: absolute; z-index: 3; width: var(--pw); aspect-ratio: var(--ar); left: var(--px); top: var(--py);\n    transform: translateX(-50%) rotate(var(--pr, 0deg)); transform-origin: 50% 40%;\n    border-radius: calc(var(--pw) * .155); padding: calc(var(--pw) * .022); background: #121317;\n    box-shadow: inset 0 0 0 calc(var(--pw) * .005) #3a3c44, 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08),\n      0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .tel.back { z-index: 2; opacity: .96; }\n  .screen { position: relative; width: 100%; height: 100%; overflow: hidden; background: #fff; border-radius: calc(var(--pw) * .135); }\n  .screen img.app { position: absolute; left: 0; bottom: 0; width: 100%; height: var(--appH); object-fit: cover; object-position: top; }\n  .bar { position: absolute; top: 0; left: 0; right: 0; height: var(--barH); display: flex; align-items: center;\n    justify-content: space-between; padding: 0 8.5% 0 11.5%; font-family: -apple-system, 'SF Pro Text', var(--bf), sans-serif;\n    font-weight: 600; font-size: calc(var(--pw) * .041); z-index: 2; color: var(--barInk, #fff);\n    background: #ffffff center top / 100% 60000% no-repeat; }\n  .bar svg { height: calc(var(--pw) * .03); width: auto; margin-left: calc(var(--pw) * .012); }\n  .island { position: absolute; top: calc(var(--pw) * .025); left: 50%; transform: translateX(-50%); width: 30%; height: calc(var(--pw) * .082);\n    background: #000; border-radius: 999px; z-index: 3; }\n  .tablet .tel { border-radius: calc(var(--pw) * .06); padding: calc(var(--pw) * .018); }\n  .tablet .screen { border-radius: calc(var(--pw) * .044); }\n  .tablet .bar { padding: 0 5%; font-size: calc(var(--pw) * .024); }\n  .tablet .bar svg { height: calc(var(--pw) * .018); }\n  .tablet .island { width: calc(var(--pw) * .016); height: calc(var(--pw) * .016); top: calc(var(--pw) * .007); }\n  .android .tel { border-radius: calc(var(--pw) * .04); padding: calc(var(--pw) * .014); }\n  .android .screen { border-radius: calc(var(--pw) * .028); }\n  .android .island { width: calc(var(--pw) * .013); height: calc(var(--pw) * .013); top: calc(var(--pw) * .009); }\n  .android .bar { padding: 0 4%; }\n\n  .land .top { right: auto; width: var(--colW); padding: 0; left: var(--colL); }\n  .lwin { position: absolute; z-index: 3; left: var(--lx); top: var(--ly); width: var(--lw); border-radius: calc(var(--lw) * .012);\n    overflow: hidden; background: #1c1c1e; box-shadow: 0 calc(var(--u) * 2) calc(var(--u) * 4) rgba(0,0,0,.08), 0 calc(var(--u) * 5) calc(var(--u) * 12) var(--shadow); }\n  .lwin .tb { height: calc(var(--lw) * .028); display: flex; align-items: center; gap: calc(var(--lw) * .006); padding-left: calc(var(--lw) * .012); background: #e8e8ea; }\n  .lwin .tb i { width: calc(var(--lw) * .009); height: calc(var(--lw) * .009); border-radius: 50%; background: #ff5f57; }\n  .lwin .tb i:nth-child(2) { background: #febc2e; } .lwin .tb i:nth-child(3) { background: #28c840; }\n  .lwin img { display: block; width: 100%; aspect-ratio: var(--lar); object-fit: cover; }\n  .lwin.bare { border-radius: calc(var(--lw) * .02); } .lwin.bare .tb { display: none; }\n  .chip { position: absolute; z-index: 9; display: flex; flex-direction: column; padding: calc(var(--u) * 1.8) calc(var(--u) * 3);\n    border-radius: calc(var(--u) * 3); background: rgba(255,255,255,.92); color: #111827; white-space: nowrap;\n    box-shadow: 0 calc(var(--u) * 1) calc(var(--u) * 3.5) rgba(15,23,42,.14); }\n  .chip b { font-family: var(--tf); font-weight: 700; font-size: calc(var(--u) * 3.6); line-height: 1.1; }\n  .chip small { font-size: calc(var(--u) * 2.3); font-weight: 500; opacity: .65; margin-top: calc(var(--u) * .3); }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '';\nconst tablet = q.get('device') === 'tablet', LAND = q.get('device') === 'landscape';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst u = LAND ? H / 100 : W / 100, Hu = H / u;\nconst dev = LAND ? job.landscape : tablet ? job.tablet : job.phone;\nconst FR = `/frames/${encodeURIComponent(LANG)}/${LAND ? 'landscape' : tablet ? 'tablet' : 'phone'}/`;\nconst MX = W * .07, MT = H * .05;                       // safe margins (lib.ts SAFE_MARGIN)\nconst colW = W * .36, colL = job.side === 'right' ? W - MX - colW : MX;\n\ndocument.documentElement.lang = LANG;\nconst RTL = !!job.rtl;\nconst R = document.documentElement.style;\n// #rrggbb -> rgba with alpha, for the soft accent glow\nconst rgba = (hex, a) => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return hex; const n = parseInt(m[1], 16); return `rgba(${n >> 16},${(n >> 8) & 255},${n & 255},${a})`; };\nconst lum = hex => { const m = /^#?([0-9a-f]{6})$/i.exec(hex); if (!m) return 1; const n = parseInt(m[1], 16); return (.299 * (n >> 16) + .587 * ((n >> 8) & 255) + .114 * (n & 255)) / 255; };\nconst tone = P.bgTone ?? (Array.isArray(P.bg) ? P.bg[1] : P.bg);\nconst dark = !!P.photo && P.photo.overlay >= .35 || lum(tone) < .45;\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px'); R.setProperty('--u', u + 'px');\nR.setProperty('--ink', P.ink); R.setProperty('--accent', P.glow); R.setProperty('--shadow', P.shadow);\nR.setProperty('--line2', dark ? P.glow : P.ink);\nR.setProperty('--accentSoft', rgba(P.glow, dark ? .28 : .14));\n// bgCss from job.json (palette.ts bgCss / photoCss): stops, one colour, a CSS gradient string, or a photo under an overlay\nR.setProperty('--bg', P.bgCss ?? (Array.isArray(P.bg) ? `linear-gradient(180deg, ${P.bg.join(', ')})` : P.bg));\nconst T = job.fonts.title, B = job.fonts.body, X = job.fonts.script;\n// titleStack / bodyStack (from shots fonts): script face, the configured font, then any automatic Noto fallback\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, T));\nR.setProperty('--bf', fstack(job.fonts.bodyStack, B));\nR.setProperty('--tw', 750);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.18 : 1.06);\nif (X) { R.setProperty('--ls', '0'); R.setProperty('--kls', '0'); }\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nif (tablet) document.body.classList.add('tablet');\nif (q.get('style') === 'android') document.body.classList.add('android');\nif (LAND) { document.body.classList.add('land'); R.setProperty('--colW', colW + 'px'); R.setProperty('--colL', colL + 'px'); }\nconst tall = !LAND && Hu > 200, wide = !LAND && Hu < 150;\nR.setProperty('--top', Math.max(tall ? 9.5 : wide ? 4.5 : 6, MT / u));\nR.setProperty('--fs', LAND ? 8.5 : tall ? 8.6 : wide ? 5.6 : 7);\nR.setProperty('--sub', LAND ? 3.4 : tall ? 3.7 : wide ? 2.6 : 3.2);\nconst AR = dev.w / (dev.h + dev.bar);\nR.setProperty('--ar', `${dev.w} / ${dev.h + dev.bar}`);\nR.setProperty('--appH', `${100 * dev.h / (dev.h + dev.bar)}%`);\nR.setProperty('--barH', `${100 * dev.bar / (dev.h + dev.bar)}%`);\n\nconst c = document.getElementById('c');\nconst esc = s => { const t = String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\n  return RTL ? t.replace(/\\d+(?:\\s*\\/\\s*\\d+)?/g, m => '⁦' + m + '⁩') : t; };\nlet top = '';\nif (S.hero && job.logo) top += `<img class=\"logo\" src=\"/logo\">`;\nif (C.eyebrow) top += `<div class=\"eyebrow\">${esc(C.eyebrow)}</div>`;\ntop += `<h1><span>${esc(C.title?.[0])}</span>${C.title?.[1] ? `<span>${esc(C.title[1])}</span>` : ''}</h1>`;\nif (C.sub) top += `<p class=\"sub\">${esc(C.sub)}</p>`;\nc.innerHTML = `<div class=\"soft\"></div><div class=\"top\"${RTL ? ' dir=\"rtl\"' : ''}>${top}</div>`;\n\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];\nfor (const [i, sp] of [...c.querySelectorAll('h1 span')].entries()) {\n  const max = LAND ? colW : W - 2 * MX, wd = sp.getBoundingClientRect().width;\n  let f = 1; while (wd * f > max && f > .55) f -= .02;\n  if (f < 1) sp.style.fontSize = `calc(${getComputedStyle(sp).fontSize} * ${f.toFixed(2)})`;\n  if (wd * f > max + 1) overflow.push(`title line ${i + 1} is too long even at 55 % size: shorten it`);\n  else if (f < .7) overflow.push(`title line ${i + 1} shrunk to ${Math.round(f * 100)} %: consider shorter words`);\n}\nconst subEl = c.querySelector('p.sub');\nif (subEl) { const lines = Math.round(subEl.getBoundingClientRect().height / parseFloat(getComputedStyle(subEl).lineHeight)); if (lines > 3) overflow.push(`subtitle wraps to ${lines} lines (max 3)`); }\nconst textBottom = c.querySelector('.top').getBoundingClientRect().bottom / u;\nportrait: {\nif (LAND) {\n  const topEl = c.querySelector('.top'), bh = topEl.getBoundingClientRect().height;\n  topEl.style.top = Math.max(MT, (H - bh) / 2) + 'px';\n  if (bh > H - MT * 2) overflow.push('text block is taller than the image: shorten the copy');\n  const f = S.frames[0], src = FR + encodeURIComponent(f.src), bare = q.get('frame') === 'none';\n  const x0 = job.side === 'right' ? W * .04 : colL + colW + W * .05, x1 = job.side === 'right' ? colL - W * .05 : W - W * .04;\n  let lw = x1 - x0;\n  const lh = k => k / (dev.w / dev.h) + (bare ? 0 : k * .028);\n  if (lh(lw) > H * .88) lw = lw * H * .88 / lh(lw);\n  R.setProperty('--lar', `${dev.w} / ${dev.h}`); R.setProperty('--softY', H / 2 + 'px');\n  c.insertAdjacentHTML('beforeend', `<div class=\"lwin front${bare ? ' bare' : ''}\" style=\"--lw:${lw}px;--lx:${(x0 + x1 - lw) / 2}px;--ly:${(H - lh(lw)) / 2}px\"><div class=\"tb\"><i></i><i></i><i></i></div><img src=\"${src}\"></div>`);\n  await Promise.all([...document.images].map(i => i.decode().catch(() => {})));\n  break portrait;\n}\n\nconst frames = S.frames.map(f => ({ x: 0, dy: 0, scale: 1, rotate: 0, ...f }));\nconst front = frames[0];\nconst pTop = textBottom + (tall ? 6 : 4.5);\nconst room = Hu - pTop + (S.over ?? 9);\nconst pw = Math.min(tablet ? 80 : 74, Math.max(52, room * AR)) * front.scale;\nconst ph = pw / AR;\nR.setProperty('--softY', (pTop + ph * .35) * u + 'px');\n\n// status bar text colour from the frame's own top row (dark text on a light app bar)\nasync function barInk(src) {\n  try {\n    const img = new Image(); img.src = src; await img.decode();\n    const cv = document.createElement('canvas'); cv.width = 8; cv.height = 2;\n    const g = cv.getContext('2d'); g.drawImage(img, 0, 0, img.naturalWidth, 2, 0, 0, 8, 2);\n    const d = g.getImageData(0, 0, 8, 1).data; let L = 0;\n    for (let i = 0; i < d.length; i += 4) L += .299 * d[i] + .587 * d[i + 1] + .114 * d[i + 2];\n    return L / (d.length / 4) > 150 ? '#111' : '#fff';\n  } catch { return '#fff'; }\n}\nconst BAR = `<span>9:41</span><span style=\"display:flex;align-items:center\">\n<svg viewBox=\"0 0 18 12\"><g fill=\"currentColor\"><rect x=\"0\" y=\"8\" width=\"3\" height=\"4\" rx=\".8\"/><rect x=\"5\" y=\"5.5\" width=\"3\" height=\"6.5\" rx=\".8\"/><rect x=\"10\" y=\"3\" width=\"3\" height=\"9\" rx=\".8\"/><rect x=\"15\" y=\"0\" width=\"3\" height=\"12\" rx=\".8\"/></g></svg>\n<svg viewBox=\"0 0 16 12\"><path fill=\"currentColor\" d=\"M8 2.2c2.3 0 4.4.9 6 2.4l1.3-1.3A10.3 10.3 0 0 0 8 .4C5.2.4 2.6 1.5.7 3.3L2 4.6a8.5 8.5 0 0 1 6-2.4zm0 3.6c1.3 0 2.5.5 3.4 1.3l1.3-1.3A6.6 6.6 0 0 0 8 4c-1.8 0-3.4.7-4.7 1.8l1.3 1.3C5.5 6.3 6.7 5.8 8 5.8zm0 3.6c.4 0 .8.2 1.1.4L8 11.6 6.9 9.8c.3-.2.7-.4 1.1-.4z\"/></svg>\n<svg viewBox=\"0 0 27 13\"><rect x=\".5\" y=\".5\" width=\"23\" height=\"12\" rx=\"3.5\" fill=\"none\" stroke=\"currentColor\" stroke-opacity=\".45\"/><rect x=\"2\" y=\"2\" width=\"20\" height=\"9\" rx=\"2.2\" fill=\"currentColor\"/><path d=\"M25 4.5v4c.8-.3 1.4-1.1 1.4-2s-.6-1.7-1.4-2z\" fill=\"currentColor\" fill-opacity=\".45\"/></svg></span>`;\n\nlet html = '';\nconst phone = async (f, cls) => {\n  const w = pw / front.scale * f.scale, src = FR + encodeURIComponent(f.src);\n  const ink = await barInk(src);\n  return `<div class=\"tel ${cls}\" style=\"--pw:${w * u}px;--px:${(50 + f.x) * u}px;--py:${(pTop + f.dy) * u}px;--pr:${f.rotate}deg\"><div class=\"screen\">\n    <div class=\"bar\" style=\"background-image:url('${src}');--barInk:${ink}\">${BAR}</div><div class=\"island\"></div><img class=\"app\" src=\"${src}\"></div></div>`;\n};\nfor (const f of frames.slice(1)) html += await phone(f, 'back');\nhtml += await phone(front, 'front');\n(S.badges ?? []).forEach((b, i) => {\n  const [big, small] = (C.badges ?? [])[i] ?? [''];\n  if (!big) return;\n  const pos = b.side === 'l' ? `left:${5 * u}px` : `right:${5 * u}px`;\n  html += `<div class=\"chip\"${RTL ? ' dir=\"rtl\"' : ''} style=\"${pos};top:${Math.min(pTop + ph * b.y, Hu - 14) * u}px\"><b>${esc(big)}</b>${small ? `<small>${esc(small)}</small>` : ''}</div>`;\n});\nc.insertAdjacentHTML('beforeend', html);\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nif (textBottom > Hu * .45) overflow.push(`text block covers ${Math.round(textBottom / Hu * 100)} % of the height (the app should be the star)`);\nfor (const b of c.querySelectorAll('.chip')) { const r = b.getBoundingClientRect(); if (r.left < 0 || r.right > W || r.bottom > H) overflow.push(`badge \"${b.textContent.trim().slice(0, 30)}\" runs off the image`); }\n}\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.boxes = JSON.stringify([...c.querySelectorAll('.top .logo, .top .eyebrow, .top h1 span, .top p.sub')].map(e => { const r = e.getBoundingClientRect();\n  return { el: e.matches('.logo') ? 'logo' : e.matches('.eyebrow') ? 'eyebrow' : e.matches('p') ? 'subtitle' : 'title', x: r.x, y: r.y, w: r.width, h: r.height }; }).filter(b => b.w > 0 && b.h > 0));\n// the front device only: back phones of a fanned layout peek in from the side on purpose\ndocument.body.dataset.devices = JSON.stringify([...c.querySelectorAll('.tel.front, .lwin')].map(t => { const r = t.getBoundingClientRect(); return { x: r.x, y: r.y, w: r.width, h: r.height }; }));\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",
   "template-bleed.html": "<!doctype html>\n<html>\n<head>\n<meta charset=\"utf-8\">\n<link rel=\"stylesheet\" href=\"/fonts/fonts.css\">\n<!-- Full-bleed layout (shots.layout \"bleed\"): the app's own frame fills the whole image, no device and no background,\n     and a short caption sits in one corner. Legibility comes from a text shadow and a soft glow only: no band, no\n     scrim, no box behind the words. template-bleed.html?s=<scene>&w=<px>&h=<px>&lang=<id>&size=<size key>.\n     The frame is read at the size's own pixels: /frames/<lang>/<size>/<src> (shots check: frames for \"bleed\").\n     Colours from the scene palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = line 2.\n     A dark custom palette suits it, e.g. { bg: [...], ink: 'rgba(4,18,38,.92)', shadow: 'rgba(4,22,48,.55)', glow: '#ffd76a' }. -->\n<style>\n  * { box-sizing: border-box; margin: 0; padding: 0; }\n  html, body { width: var(--W); height: var(--H); overflow: hidden; background: #000; }\n  #c { position: relative; width: var(--W); height: var(--H); overflow: hidden; }\n  #c > img.frame { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; display: block; }\n  .cap { position: absolute; max-width: calc(var(--W) * var(--mw)); display: flex; flex-direction: column; gap: calc(var(--fs) * .06);\n    font-family: var(--tf); font-weight: var(--tw); font-size: var(--fs); line-height: var(--lh); color: #fff; letter-spacing: var(--ls, .005em);\n    text-wrap: balance;\n    /* a dark outline-shadow for edges, then a wide soft glow: readable on light water and on dark rock alike */\n    text-shadow: 0 0 calc(var(--fs) * .05) var(--ink), 0 calc(var(--fs) * .04) calc(var(--fs) * .08) var(--ink),\n      0 0 calc(var(--fs) * .3) var(--shadow), 0 0 calc(var(--fs) * .6) var(--shadow); }\n  .cap span { display: block; }\n  .cap span + span { color: var(--accent); }\n  .cap.tl { left: var(--mx); top: var(--my); }\n  .cap.tr { right: var(--mx); top: var(--my); text-align: right; align-items: flex-end; }\n  .cap.bl { left: var(--mx); bottom: var(--my); }\n  .cap.br { right: var(--mx); bottom: var(--my); text-align: right; align-items: flex-end; }\n  .cap[dir=\"rtl\"].tl, .cap[dir=\"rtl\"].bl { text-align: right; }\n</style>\n</head>\n<body>\n<div id=\"c\"></div>\n<script type=\"module\">\nconst q = new URLSearchParams(location.search);\nconst W = +q.get('w'), H = +q.get('h'), LANG = q.get('lang'), SID = q.get('s'), V = q.get('v') ?? '', SIZE = q.get('size') ?? '';\nconst job = await (await fetch(`/job.json?lang=${encodeURIComponent(LANG)}&s=${encodeURIComponent(SID)}&v=${encodeURIComponent(V)}`)).json();\nconst S = job.scene, C = job.copy, P = job.palette;\nconst R = document.documentElement.style;\ndocument.documentElement.lang = LANG;\nconst short = Math.min(W, H);\nR.setProperty('--W', W + 'px'); R.setProperty('--H', H + 'px');\n// caption size from the short side: about 9 % of it on a landscape phone, a little less on squarer canvases\nconst fs = short * (W / H > 1.9 ? .092 : W / H > 1.5 ? .08 : .066) * (S.captionScale ?? 1);\nR.setProperty('--fs', fs + 'px');\nconst inset = S.captionInset ?? .05;                   // distance from the corner, share of the short side\nR.setProperty('--mx', (short * (inset + .005)) + 'px'); R.setProperty('--my', (short * inset) + 'px');\n// the caption keeps to its corner: at most 40 % of a landscape image's width (scene.captionWidth), so it stays clear of\n// what an app centres at the top\nconst MW = S.captionWidth ?? (W > H ? .4 : .84);\nR.setProperty('--mw', MW);\n// palette: ink = the tight outline shadow, shadow = the wide soft glow, glow = the second line's colour\nR.setProperty('--ink', P.ink); R.setProperty('--shadow', P.shadow); R.setProperty('--accent', P.glow);\nconst X = job.fonts.script;\nconst fstack = (st, def) => (st ?? (X ? [X, def] : [def])).map(f => `'${f}'`).join(', ') + ', sans-serif';\nR.setProperty('--tf', fstack(job.fonts.titleStack, job.fonts.title));\nR.setProperty('--tw', X ? 900 : job.fonts.titleWeight ?? 400);\nconst CJK = /^(ja|ko|zh)/.test(LANG);\nR.setProperty('--lh', /^(ar|hi|fa|ur|th)/.test(LANG) ? 1.3 : CJK ? 1.16 : 1.04);\nif (X) R.setProperty('--ls', '0');\nif (LANG.startsWith('ja')) document.documentElement.style.wordBreak = 'auto-phrase';\nif (LANG.startsWith('ko')) document.documentElement.style.wordBreak = 'keep-all';\nconst RTL = !!job.rtl;\nconst esc = s => String(s ?? '').replace(/&/g, '&amp;').replace(/</g, '&lt;');\nconst corner = ['tl', 'tr', 'bl', 'br'].includes(S.corner) ? S.corner : 'tl';\nconst src = `/frames/${encodeURIComponent(LANG)}/${encodeURIComponent(SIZE)}/${encodeURIComponent(S.frames[0].src)}`;\nconst lines = (C.title ?? []).filter(Boolean);\nconst c = document.getElementById('c');\nc.innerHTML = `<img class=\"frame\" src=\"${src}\"><div class=\"cap ${corner}\"${RTL ? ' dir=\"rtl\"' : ''}>${lines.map(l => `<span>${esc(l)}</span>`).join('')}</div>`;\nawait document.fonts.ready;\nawait Promise.all([...document.images].map(i => i.decode().catch(() => {})));\nconst overflow = [];                                    // read by `shots render` -> report.json -> shots check / gallery\nconst img = c.querySelector('img.frame');\nif (!img.naturalWidth) overflow.push(`frame ${SIZE}/${S.frames[0].src} did not load`);\nelse {\n  const ar = img.naturalWidth / img.naturalHeight, want = W / H;\n  if (Math.abs(ar / want - 1) > .01) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is cropped to fit ${W}x${H}: capture it at the size's aspect`);\n  if (img.naturalWidth < W * .99) overflow.push(`frame ${img.naturalWidth}x${img.naturalHeight} is upscaled to ${W}x${H}: capture it at native resolution`);\n}\nconst cap = c.querySelector('.cap');\nconst maxW = W * MW;\nfor (const [i, sp] of [...cap.querySelectorAll('span')].entries()) {   // shrink a line that would not fit its corner\n  const wd = sp.scrollWidth;\n  let f = 1; while (wd * f > maxW && f > .6) f -= .02;\n  if (f < 1) sp.style.fontSize = `${(fs * f).toFixed(1)}px`;\n  if (wd * f > maxW + 1) overflow.push(`caption line ${i + 1} is too long even at 60 % size: shorten it`);\n}\nconst r = cap.getBoundingClientRect();\nif (r.left < 0 || r.top < 0 || r.right > W || r.bottom > H) overflow.push('caption runs off the image');\nif (r.height > H * .42) overflow.push(`caption covers ${Math.round(r.height / H * 100)} % of the height: shorten it`);\nif (lines.join(' ').split(/\\s+/).length > 6 && !CJK && !/^th/.test(LANG)) overflow.push('caption has more than 6 words: keep it to 3-5');\ndocument.body.dataset.overflow = JSON.stringify(overflow);\ndocument.body.dataset.devices = '[]';\ndocument.body.dataset.ready = '1';\n</script>\n</body>\n</html>\n",

From 0ef27cf2e46ad400639e4d315c34b5540ee3605b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:01:50 +0800
Subject: [PATCH 149/255] desktop: five sections by job (Release, Store page,
 Revenue, Players, Health), Game services view, sidebar by attention

- app view: 12 tabs become 5 sections, each with a header (what it is for, the one next step from state
  already read) and its sub views in a segmented control; 1-5 jump, Ctrl+Shift+[ ] cycle, Ctrl+K and the
  context menu list sections and sub views; old tab ids, section and section/sub links all resolve
- Players > Game services (games only): both stores, one row per leaderboard / achievement with its
  languages and each store's state, Game Center locale map, Play API-disabled state with the console plan
- games status --json: items, localeMap, playApiDisabled; inspect summary: games
- sidebar: apps grouped by attention / in progress / live / not on a store, one status line each, studio
  filter, workspace as a footer icon row
- boot check opens places like a person (section, then sub view)
---
 apps/desktop/src/App.tsx                  | 147 +++++++++++++---------
 apps/desktop/src/design.css               |  42 +++++++
 apps/desktop/src/dev/fixtures.ts          |  10 ++
 apps/desktop/src/i18n/en.ts               | 102 +++++++++++++++
 apps/desktop/src/i18n/tr.ts               | 102 +++++++++++++++
 apps/desktop/src/lib/model.ts             |  47 ++++++-
 apps/desktop/src/lib/sections.ts          |  94 ++++++++++++++
 apps/desktop/src/nav.ts                   |  49 ++++++--
 apps/desktop/src/screens/AppView.tsx      |  26 ++--
 apps/desktop/src/screens/SectionHead.tsx  |  60 +++++++++
 apps/desktop/src/screens/tabs/AppInfo.tsx |   2 -
 apps/desktop/src/screens/tabs/Games.tsx   |  90 +++++++++++++
 apps/desktop/src/store.tsx                |  18 +++
 apps/desktop/src/ui/GameServicesCard.tsx  |  16 ++-
 apps/desktop/src/ui/app-menu.ts           |  10 +-
 apps/desktop/src/ui/ds.tsx                |   5 +-
 apps/desktop/tests/sections.test.ts       |  79 ++++++++++++
 cli/games-status.ts                       |  46 ++++++-
 cli/inspect.ts                            |   1 +
 cli/lib/desktop-protocol.ts               |   2 +
 tests/game-services.test.ts               |  14 ++-
 tools/desktop-boot-check.ts               |  71 ++++++++---
 22 files changed, 918 insertions(+), 115 deletions(-)
 create mode 100644 apps/desktop/src/lib/sections.ts
 create mode 100644 apps/desktop/src/screens/SectionHead.tsx
 create mode 100644 apps/desktop/src/screens/tabs/Games.tsx
 create mode 100644 apps/desktop/tests/sections.test.ts

diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index b1b01fe..4cfa717 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -1,4 +1,5 @@
-// Shell: sidebar (studios, collapsible, with their apps; the workspace), top bar (breadcrumbs, last read, refresh),
+// Shell: sidebar (apps grouped by what they need: attention, in progress, live, not on a store yet; one status line
+// each; a studio filter; the workspace as a compact footer row), top bar (breadcrumbs, last read, refresh),
 // the screen, the command palette (Cmd/Ctrl+K), toasts and the first-run welcome guide.
 import { DryRunPreview } from './ui/DryRunPreview';
 import { useCallback, useEffect, useMemo, useState } from 'react';
@@ -6,8 +7,8 @@ import { FIXTURES, onDeepLink, onDeepLinkFolder, onTrayRoute } from './api';
 import { devSwitch } from './dev/switches';
 import { type Key, t } from './i18n';
 import { ago, num } from './lib/format';
-import { groupByStudio, type UnifiedApp } from './lib/identity';
-import { NavCtx, parseRouteJson, parseStart, type Route, sameRoute, TAB_ICON, TAB_KEY, tabsFor, WORKSPACE, type WorkspaceScreen } from './nav';
+import type { UnifiedApp } from './lib/identity';
+import { NavCtx, parseRouteJson, parseStart, type Route, sameRoute, SECTION_ICON, SECTION_KEY, sectionOf, sectionsFor, subsOf, TAB_ICON, TAB_KEY, tabsFor, WORKSPACE, type WorkspaceScreen } from './nav';
 import { usePrefs } from './prefs-ctx';
 import { Accounts } from './screens/Accounts';
 import { AppFolders } from './screens/AppFolders';
@@ -28,16 +29,18 @@ import { Toasts } from './ui/Toasts';
 import { useContextMenu } from './ui/ContextMenu';
 import { appMenu } from './ui/app-menu';
 import { isEditable, isItem, type MenuInput } from './ui/menu-logic';
-import { worstTone } from './ui/ds';
-import { attention } from './lib/model';
+import { attention, isGameSummary, SIDE_GROUPS, type SideGroup, sideStatus } from './lib/model';
 
 const WS_ICON: Record<WorkspaceScreen, IconName> = { apps: 'folder', accounts: 'building', ignored: 'eyeOff', dependencies: 'package', settings: 'settings' };
 export const WS_KEY: Record<WorkspaceScreen, Key> = { apps: 'nav.apps', accounts: 'nav.accounts', ignored: 'nav.ignored', dependencies: 'nav.dependencies', settings: 'nav.settings' };
 
 const SIDE_KEY = 'storebound.side.v1';
+const STUDIO_KEY = 'storebound.side.studio.v1';
 function loadCollapsed(): string[] {
   try { const v = JSON.parse(localStorage.getItem(SIDE_KEY) ?? '[]') as unknown; return Array.isArray(v) ? v.filter((x): x is string => typeof x === 'string') : []; } catch { return []; }
 }
+function loadStudio(): string | null { try { return localStorage.getItem(STUDIO_KEY); } catch { return null; } }
+const GROUP_KEY: Record<SideGroup | 'ignored', Key> = { attention: 'side.gAttention', progress: 'side.gProgress', live: 'side.gLive', draft: 'side.gDraft', ignored: 'nav.ignored' };
 
 export function App({ onTheme }: { onTheme: () => void }) {
   const d = useData();
@@ -47,6 +50,8 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const [welcome, setWelcome] = useState(false);
   const [started, setStarted] = useState(false);
   const [collapsed, setCollapsed] = useState<string[]>(loadCollapsed);
+  const [studioFilter, setStudioFilterState] = useState<string | null>(loadStudio);
+  const setStudioFilter = (v: string | null) => { setStudioFilterState(v); try { if (v) localStorage.setItem(STUDIO_KEY, v); else localStorage.removeItem(STUDIO_KEY); } catch { /* private mode */ } };
   const exports = useExportItems();
   const runExport = useRunExport();
 
@@ -56,16 +61,27 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const allReads = useReadState({ tags: ['all'] });
   const [showIgnored, setShowIgnored] = useShowIgnored();
   const ignoredApps = useMemo(() => d.apps.filter(a => a.ignored).sort((a, b) => a.name.localeCompare(b.name)), [d.apps]);
-  const listed = showIgnored ? [...visible, ...ignoredApps] : visible;
-  const groups = d.studios.length ? groupByStudio(listed.map(a => ({ app: a })), d.studios) : [{ studio: null as string | null, rows: listed.map(a => ({ app: a })) }];
-  // Alt+Up / Alt+Down: the previous / next app in sidebar order (keeps the tab when the other app has it)
-  const sideOrder = groups.flatMap(x => x.rows.map(r => r.app));
+  const gameOf = useCallback((a: UnifiedApp) => isGameSummary(d.statusFor(a)?.summary), [d]);
+  const tabsOf = useCallback((a: UnifiedApp) => tabsFor(!!a.project, gameOf(a)), [gameOf]);
+  // the sidebar: apps by what they need (attention, in progress, live, not on a store yet), one status line each
+  const studioOn = studioFilter && (studioFilter === 'none' || d.studios.some(s => s.id === studioFilter)) ? studioFilter : null;
+  const inStudio = useCallback((a: UnifiedApp) => !studioOn || (studioOn === 'none' ? !a.studio : a.studio === studioOn), [studioOn]);
+  const sideRows = useMemo(() => visible.filter(inStudio).map(a => {
+    const e = d.statusFor(a), l = d.liveFor(a);
+    return { app: a, st: sideStatus({ att: attention(a.key, a.name, e, l), all: l?.release.all ?? [], read: !!l || e?.release.source === 'live', missing: !!a.project?.missing, storeOnly: !a.project }) };
+  }), [visible, d, inStudio]);
+  const groups: { id: SideGroup | 'ignored'; rows: typeof sideRows }[] = [
+    ...SIDE_GROUPS.map(g => ({ id: g, rows: sideRows.filter(r => r.st.group === g) })).filter(g => g.rows.length),
+    ...(showIgnored && ignoredApps.length ? [{ id: 'ignored' as const, rows: ignoredApps.filter(inStudio).map(a => ({ app: a, st: { group: 'draft' as SideGroup, text: t('side.ignored'), tone: 'neutral' as const } })) }] : []),
+  ];
+  // Alt+Up / Alt+Down: the previous / next app in sidebar order (keeps the place when the other app has it)
+  const sideOrder = groups.flatMap(x => (collapsed.includes(`g:${x.id}`) ? [] : x.rows.map(r => r.app)));
   const stepApp = useCallback((dir: 1 | -1) => {
     if (!sideOrder.length) return;
     const i = route.screen === 'app' ? sideOrder.findIndex(a => a.key === route.appId) : -1;
     const next = sideOrder[i < 0 ? (dir === 1 ? 0 : sideOrder.length - 1) : (i + dir + sideOrder.length) % sideOrder.length]!;
-    go({ screen: 'app', appId: next.key, tab: route.screen === 'app' && tabsFor(!!next.project).includes(route.tab) ? route.tab : 'releases' });
-  }, [sideOrder, route, go]);
+    go({ screen: 'app', appId: next.key, tab: route.screen === 'app' && tabsOf(next).includes(route.tab) ? route.tab : 'releases' });
+  }, [sideOrder, route, go, tabsOf]);
   const toggleGroup = (id: string) => setCollapsed(c => {
     const next = c.includes(id) ? c.filter(x => x !== id) : [...c, id];
     try { localStorage.setItem(SIDE_KEY, JSON.stringify(next)); } catch { /* private mode */ }
@@ -94,9 +110,12 @@ export function App({ onTheme }: { onTheme: () => void }) {
   }, [go, d.reload]);
 
   const app = route.screen === 'app' ? d.appByKey(route.appId) : undefined;
-  const tabs = app ? tabsFor(!!app.project) : [];
+  const game = app ? gameOf(app) : false;
+  const tabs = app ? tabsOf(app) : [];
+  const sections = app ? sectionsFor(!!app.project, game) : [];
 
-  // keyboard: Cmd/Ctrl+K palette, Cmd/Ctrl+1 portfolio, 2-6 workspace, Cmd/Ctrl+Shift+[ ] app tabs
+  // keyboard: Cmd/Ctrl+K palette, Cmd/Ctrl+1 portfolio, 2-6 workspace, 1-5 (no modifier) the app's sections,
+  // Cmd/Ctrl+Shift+[ ] the previous / next section
   useEffect(() => {
     const onKey = (e: KeyboardEvent) => {
       const mod = e.metaKey || e.ctrlKey;
@@ -109,15 +128,20 @@ export function App({ onTheme }: { onTheme: () => void }) {
         go(n === 1 ? { screen: 'portfolio' } : { screen: WORKSPACE[n - 2]! });
         return;
       }
-      if (mod && e.shiftKey && (e.key === '[' || e.key === ']' || e.key === '{' || e.key === '}') && route.screen === 'app' && tabs.length) {
+      if (!mod && !e.shiftKey && !e.altKey && /^[1-9]$/.test(e.key) && route.screen === 'app' && app && !isEditable(e.target as HTMLInputElement) && !document.querySelector('.ds-menu, .ds-dialog')) {
+        const sec = sections[Number(e.key) - 1];
+        if (sec) { e.preventDefault(); go({ ...route, tab: subsOf(sec, !!app.project, game)[0]! }); }
+        return;
+      }
+      if (mod && e.shiftKey && (e.key === '[' || e.key === ']' || e.key === '{' || e.key === '}') && route.screen === 'app' && app && sections.length) {
         e.preventDefault();
-        const i = tabs.indexOf(route.tab) + (e.key === ']' || e.key === '}' ? 1 : -1);
-        go({ ...route, tab: tabs[(i + tabs.length) % tabs.length]! });
+        const i = sections.indexOf(sectionOf(route.tab)) + (e.key === ']' || e.key === '}' ? 1 : -1);
+        go({ ...route, tab: subsOf(sections[(i + sections.length) % sections.length]!, !!app.project, game)[0]! });
       }
     };
     window.addEventListener('keydown', onKey);
     return () => window.removeEventListener('keydown', onKey);
-  }, [palette, welcome, route, go, tabs, stepApp]);
+  }, [palette, welcome, route, go, app, sections, game, stepApp]);
 
   const closeWelcome = useCallback(() => {
     setWelcome(false);
@@ -131,13 +155,18 @@ export function App({ onTheme }: { onTheme: () => void }) {
     const G = { apps: t('palette.gApps'), go: t('palette.gGo'), tabs: t('palette.gTabs'), act: t('palette.gActions'), exp: t('palette.gExport') };
     const studioName = (a: UnifiedApp) => d.studios.find(s => s.id === a.studio)?.name;
     for (const a of visible) c.push({ id: `app-${a.key}`, group: G.apps, title: a.name, hint: studioName(a) ?? t('palette.openApp'), keywords: `${a.ios?.app.bundleId ?? ''} ${a.android?.app.id ?? ''} ${a.project?.name ?? ''}`, app: { name: a.name, icon: d.iconFor(a) },
-      run: () => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' }) });
+      run: () => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsOf(a).includes(route.tab) ? route.tab : 'releases' }) });
     c.push({ id: 'go-next-app', group: G.go, title: t('palette.nextApp'), icon: 'arrowRight', hint: 'Alt ↓', keywords: 'next app down j', run: () => stepApp(1) });
     c.push({ id: 'go-prev-app', group: G.go, title: t('palette.prevApp'), icon: 'arrowLeft', hint: 'Alt ↑', keywords: 'previous app up k', run: () => stepApp(-1) });
     c.push({ id: 'go-portfolio', group: G.go, title: t('nav.portfolio'), icon: 'portfolio', hint: `${MOD} 1`, run: () => go({ screen: 'portfolio' }) });
     WORKSPACE.forEach((s, i) => c.push({ id: `go-${s}`, group: G.go, title: t(WS_KEY[s]), icon: WS_ICON[s], hint: `${MOD} ${i + 2}`, run: () => go({ screen: s }) }));
     for (const s of d.studios) c.push({ id: `studio-${s.id}`, group: G.go, title: s.name, icon: 'building', keywords: 'studio', hint: t('palette.studio'), run: () => go({ screen: 'accounts', section: s.id }) });
-    if (app) for (const tab of tabs) c.push({ id: `tab-${tab}`, group: G.tabs, title: `${app.name} · ${t(TAB_KEY[tab])}`, icon: TAB_ICON[tab], run: () => go({ screen: 'app', appId: app.key, tab }) });
+    // every section of the open app (1-5) and every sub view in it
+    if (app) sections.forEach((sec, i) => {
+      const subs = subsOf(sec, !!app.project, game);
+      c.push({ id: `sec-${sec}`, group: G.tabs, title: `${app.name} · ${t(SECTION_KEY[sec])}`, icon: SECTION_ICON[sec], hint: String(i + 1), keywords: subs.map(x => t(TAB_KEY[x])).join(' '), run: () => go({ screen: 'app', appId: app.key, tab: subs[0]! }) });
+      if (subs.length > 1) for (const tab of subs) c.push({ id: `tab-${tab}`, group: G.tabs, title: `${app.name} · ${t(SECTION_KEY[sec])} · ${t(TAB_KEY[tab])}`, icon: TAB_ICON[tab], run: () => go({ screen: 'app', appId: app.key, tab }) });
+    });
     // the app's own menu (consoles, folder, copy ids, reads, ignore, unpair) as commands: every right-click action is
     // also one Ctrl+K away; opening a tab is already above
     if (app) {
@@ -166,10 +195,10 @@ export function App({ onTheme }: { onTheme: () => void }) {
     c.push({ id: 'act-theme', group: G.act, title: t('action.toggleTheme'), icon: 'moon', keywords: 'dark light', run: onTheme });
     c.push({ id: 'act-welcome', group: G.act, title: t('action.welcome'), icon: 'sparkle', keywords: 'onboarding start guide', run: () => setWelcome(true) });
     return c;
-  }, [d, visible, app, tabs, route, go, onTheme, exports, runExport, showIgnored, stepApp, prefs, update]);
+  }, [d, visible, app, sections, game, route, go, onTheme, exports, runExport, showIgnored, stepApp, prefs, update, tabsOf]);
 
   const crumbs: { label: string; to?: Route }[] = route.screen === 'portfolio' ? [{ label: t('nav.portfolio') }]
-    : route.screen === 'app' ? [{ label: t('nav.portfolio'), to: { screen: 'portfolio' } }, { label: app?.name ?? '', to: app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined }, { label: t(TAB_KEY[route.tab]) }]
+    : route.screen === 'app' ? [{ label: t('nav.portfolio'), to: { screen: 'portfolio' } }, { label: app?.name ?? '', to: app ? { screen: 'app', appId: app.key, tab: 'releases' } : undefined }, { label: t(SECTION_KEY[sectionOf(route.tab)]), to: app ? { screen: 'app', appId: app.key, tab: subsOf(sectionOf(route.tab), !!app.project, game)[0] ?? route.tab } : undefined }, ...(app && subsOf(sectionOf(route.tab), !!app.project, game).length > 1 ? [{ label: t(TAB_KEY[route.tab]) }] : [])]
     : [{ label: t('nav.workspace') }, { label: t(WS_KEY[route.screen]) }];
   const lastRead = d.live?.at ?? null;
   // the app on screen is read first by the background reader
@@ -180,26 +209,19 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const ignoredCount = d.apps.filter(a => a.ignored).length + d.overrides.ignored.filter(i => i.startsWith('account:')).length;
 
   const menu = useContextMenu();
-  const appItem = (a: UnifiedApp) => {
-    const e = d.statusFor(a);
-    const missing = !!a.project?.missing;
-    const tone = missing ? 'bad' : (worstTone(attention(a.key, a.name, e, d.liveFor(a))) ?? (e ? 'ok' : null));
-    const bad = missing ? 1 : (e?.errors.length ?? 0) + (e?.check?.problems.length ?? 0);
-    return (
-      <div role="listitem" key={a.key}>
-        <button {...menu(() => appMenu(a, d, nav, { showIgnored }))} className={`nav nav-app${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
-          onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsFor(!!a.project).includes(route.tab) ? route.tab : 'releases' })}>
-          <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{tone && <span className={`ds-sdot ${tone}`} role="img" aria-label={tone === 'bad' ? t('pf.blocker') : tone === 'warn' ? t('pf.warning') : t('pf.note')} />}</span>
-          <span className="grow">{a.name}</span>
-          {a.ignored && <span className="so-dot" title={t('ignored.rowHint')}><Icon name="eyeOff" /></span>}
-          {!a.ignored && a.ignoredStores.length > 0 && <span className="so-dot" title={t('ignored.sideHint', { stores: a.ignoredStores.map(k => (k === 'ios' ? 'App Store' : 'Google Play')).join(', ') })}><Icon name="eyeOff" /></span>}
-          {!a.project && <span className="so-dot" title={t('apps.storeOnlyHint')}><Icon name="cloud" /></span>}
-          {missing ? <span className="tag-count bad" title={t('folder.missingShort')} aria-label={t('folder.missingShort')}>!</span>
-            : bad > 0 && <span className="tag-count bad" aria-label={t('nav.problems', { count: bad })}>{bad}</span>}
-        </button>
-      </div>
-    );
-  };
+  const appItem = (a: UnifiedApp, st: { text: string; tone: string }) => (
+    <div role="listitem" key={a.key}>
+      <button {...menu(() => appMenu(a, d, nav, { showIgnored }))} className={`nav nav-app has-line${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
+        onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsOf(a).includes(route.tab) ? route.tab : 'releases' })}
+        title={`${a.name} · ${st.text}`}>
+        <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{(st.tone === 'bad' || st.tone === 'warn') && <span className={`ds-sdot ${st.tone}`} role="img" aria-label={st.tone === 'bad' ? t('pf.blocker') : t('pf.warning')} />}</span>
+        <span className="grow side-t"><span className="side-n">{a.name}</span><span className={`side-s ${st.tone}`} data-testid="side-status">{st.text}</span></span>
+        {!a.ignored && a.ignoredStores.length > 0 && <span className="so-dot" title={t('ignored.sideHint', { stores: a.ignoredStores.map(k => (k === 'ios' ? 'App Store' : 'Google Play')).join(', ') })}><Icon name="eyeOff" /></span>}
+        {!a.project && <span className="so-dot" title={t('apps.storeOnlyHint')}><Icon name="cloud" /></span>}
+      </button>
+    </div>
+  );
+  const WS_ROW: (WorkspaceScreen | 'portfolio')[] = ['portfolio', ...WORKSPACE];
 
   return (
     <NavCtx.Provider value={nav}>
@@ -213,36 +235,41 @@ export function App({ onTheme }: { onTheme: () => void }) {
             </button>
           </div>
           <div className="side-scroll">
-            <button className="nav" aria-current={current({ screen: 'portfolio' })} onClick={() => go({ screen: 'portfolio' })}>
-              <Icon name="portfolio" weight={current({ screen: 'portfolio' }) ? 'fill' : 'regular'} /><span className="grow">{t('nav.portfolio')}</span><span className="count">{visible.length}</span>
-            </button>
-            <div className="side-label" id="apps-label"><span>{d.studios.length ? t('nav.studiosLabel') : t('nav.appsLabel')}</span>
+            <div className="side-label" id="apps-label"><span>{t('nav.appsLabel')} <span className="count">{visible.length}</span></span>
               <button onClick={() => go({ screen: 'apps' })} aria-label={t('action.addFolder')} title={t('action.addFolder')}><Icon name="plus" /></button>
             </div>
+            {d.studios.length > 1 && (
+              <div className="side-studios" role="group" aria-label={t('side.studioFilter')}>
+                <button aria-pressed={!studioOn} onClick={() => setStudioFilter(null)}>{t('side.allStudios')}</button>
+                {d.studios.map(s => <button key={s.id} aria-pressed={studioOn === s.id} onClick={() => setStudioFilter(studioOn === s.id ? null : s.id)}><StudioMark studio={s} size="sm" />{s.name}</button>)}
+              </div>
+            )}
             {groups.map(g => {
-              const s = d.studios.find(x => x.id === g.studio) ?? null;
-              const gid = g.studio ?? 'none';
+              const gid = `g:${g.id}`;
               const open = !collapsed.includes(gid);
-              if (!d.studios.length) return <div role="list" aria-labelledby="apps-label" key={gid}>{g.rows.map(r => appItem(r.app))}</div>;
               return (
-                <div className="side-group" key={gid}>
-                  <button className="side-group-head" aria-expanded={open} aria-controls={`sg-${gid}`} onClick={() => toggleGroup(gid)}>
-                    <Icon name="chevronRight" className="chev" /><StudioMark studio={s} size="sm" /><span className="grow">{s?.name ?? t('studio.none')}</span><span className="count">{g.rows.length}</span>
+                <div className="side-group" key={gid} data-group={g.id}>
+                  <button className="side-group-head" aria-expanded={open} aria-controls={`sg-${g.id}`} onClick={() => toggleGroup(gid)}>
+                    <Icon name="chevronRight" className="chev" /><span className="grow">{t(GROUP_KEY[g.id])}</span><span className="count">{g.rows.length}</span>
                   </button>
-                  {open && <div role="list" id={`sg-${gid}`} aria-label={s?.name ?? t('studio.none')}>{g.rows.map(r => appItem(r.app))}</div>}
+                  {open && <div role="list" id={`sg-${g.id}`} aria-label={t(GROUP_KEY[g.id])}>{g.rows.map(r => appItem(r.app, r.st))}</div>}
                 </div>
               );
             })}
             {!visible.length && !showIgnored && <p className="side-empty">{t('nav.noApps')}</p>}
             {ignoredApps.length > 0 && <button className="link side-ignored-toggle" aria-pressed={showIgnored} onClick={() => setShowIgnored(!showIgnored)} data-testid="toggle-ignored">{showIgnored ? t('ignored.hide', { count: ignoredApps.length }) : t('ignored.show', { count: ignoredApps.length })}</button>}
-            <div className="side-label"><span>{t('nav.workspace')}</span></div>
-            {WORKSPACE.map((s, i) => (
-              <button key={s} className="nav" aria-current={current({ screen: s })} onClick={() => go({ screen: s })} title={`${t(WS_KEY[s])} (${MOD} ${i + 2})`}>
-                <Icon name={WS_ICON[s]} weight={current({ screen: s }) ? 'fill' : 'regular'} /><span className="grow">{t(WS_KEY[s])}</span>
-                {s === 'accounts' && <span className="count">{d.accounts.length}</span>}
-                {s === 'ignored' && ignoredCount > 0 && <span className="count">{ignoredCount}</span>}
-              </button>
-            ))}
+          </div>
+          <div className="side-ws" role="group" aria-label={t('nav.workspace')}>
+            {WS_ROW.map((s, i) => {
+              const label = s === 'portfolio' ? t('nav.portfolio') : t(WS_KEY[s]);
+              const n = s === 'accounts' ? d.accounts.length : s === 'ignored' ? ignoredCount : 0;
+              return (
+                <button key={s} className="nav-ws" aria-current={current({ screen: s })} onClick={() => go({ screen: s })} title={`${label} (${MOD} ${i + 1})`} aria-label={label} data-screen={s}>
+                  <Icon name={s === 'portfolio' ? 'portfolio' : WS_ICON[s]} weight={current({ screen: s }) ? 'fill' : 'regular'} />
+                  {n > 0 && <span className="ws-n">{n}</span>}
+                </button>
+              );
+            })}
           </div>
           <div className="side-foot" aria-live="polite">
             <div className="row"><i className={`dot ${d.sidecar?.running ? 'ok' : d.sidecarError ? 'bad' : ''}`} />
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index fc782ca..adfc21f 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -245,3 +245,45 @@
 .table-wrap .table tbody tr:hover > :first-child, .ds-table-wrap .table tbody tr:hover > :first-child { background: color-mix(in srgb, var(--tint, var(--accent-solid)) 6%, var(--ds-surface, var(--surface))); }
 /* Settings > Appearance > Tables: compact */
 :root[data-density="compact"] .table th, :root[data-density="compact"] .table td { padding-top: 5px; padding-bottom: 5px; padding-left: 8px; padding-right: 8px; font-size: 12.5px; }
+
+/* ---------- App sections (docs IA): section header, next step, sub views ---------- */
+.ds-tab-k { font: 600 10px/1 var(--mono, ui-monospace, monospace); min-width: 16px; height: 16px; display: inline-grid; place-items: center; border-radius: 4px; color: var(--muted); border: 1px solid var(--ds-stroke); background: var(--ds-surface); margin-left: 2px; opacity: .75; }
+.ds-tab[aria-selected="true"] .ds-tab-k { opacity: 1; }
+.sec-head { display: grid; grid-template-columns: minmax(0, 1fr) auto; grid-template-areas: "t next" "subs subs"; gap: 10px 16px; align-items: center; padding: 2px 4px 4px; }
+.sec-head-t { grid-area: t; min-width: 0; }
+.sec-head-name { display: flex; align-items: center; gap: 8px; margin: 0; font-size: var(--ds-t-h2, 18px); font-weight: 700; letter-spacing: -.01em; }
+.sec-head-name svg { width: 18px; height: 18px; color: var(--tint, var(--accent-solid)); }
+.sec-head-for { margin: 2px 0 0; color: var(--muted); font-size: var(--t-meta); }
+.sec-next { grid-area: next; display: inline-flex; align-items: center; gap: 8px; padding: 6px 6px 6px 12px; min-height: 32px; box-sizing: border-box; border-radius: var(--ds-r); border: 1px solid var(--ds-stroke); background: var(--ds-surface); font-weight: 600; font-size: var(--t-meta); max-width: 560px; }
+.sec-next > svg { width: 15px; height: 15px; flex: none; }
+.sec-next-t { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.sec-next:not(:has(.btn)) { padding-right: 12px; }
+.sec-next.tone-bad { background: var(--bad-bg); color: var(--bad-ink); border-color: transparent; }
+.sec-next.tone-warn { background: var(--warn-bg); color: var(--warn-ink); border-color: transparent; }
+.sec-next.tone-ok > svg { color: var(--ok-solid); }
+.sec-next.tone-info > svg { color: var(--accent-solid); }
+.sec-next .btn { flex: none; }
+.sec-subs { grid-area: subs; justify-self: start; }
+.sec-subs .ed-dot { margin-left: 2px; }
+@media (max-width: 1100px) { .sec-head { grid-template-columns: 1fr; grid-template-areas: "t" "next" "subs"; } .sec-next { justify-self: start; } }
+
+/* ---------- Sidebar: attention groups, one status line per app, workspace footer ---------- */
+.nav-app.has-line { height: auto; min-height: 40px; padding-top: 4px; padding-bottom: 4px; align-items: center; }
+.nav-app .side-t { display: grid; min-width: 0; line-height: 1.2; }
+.nav-app .side-n { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.nav-app .side-s { font-size: 11px; font-weight: 500; color: var(--muted); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.nav-app .side-s.bad { color: var(--bad-ink); } .nav-app .side-s.warn { color: var(--warn-ink); } .nav-app .side-s.ok { color: var(--ok-ink); }
+:root[data-theme="dark"] .nav-app .side-s.bad { color: color-mix(in srgb, var(--bad-solid) 70%, white); }
+:root[data-theme="dark"] .nav-app .side-s.warn { color: color-mix(in srgb, var(--warn-solid) 70%, white); }
+:root[data-theme="dark"] .nav-app .side-s.ok { color: color-mix(in srgb, var(--ok-solid) 70%, white); }
+.side-studios { display: flex; flex-wrap: wrap; gap: 4px; margin: 6px 6px 2px; }
+.side-studios button { all: unset; cursor: pointer; display: inline-flex; align-items: center; gap: 5px; height: 22px; padding: 0 8px; border-radius: 99px; font-size: 11px; font-weight: 600; color: var(--muted); border: 1px solid var(--line); }
+.side-studios button[aria-pressed="true"] { color: var(--ink); background: var(--surface); box-shadow: var(--shadow-1); }
+.side-studios button:focus-visible { outline: 2px solid var(--focus); }
+.side-ws { display: flex; gap: 2px; padding: 6px 8px; border-top: 1px solid var(--line); }
+.side-ws button { all: unset; cursor: pointer; position: relative; flex: 1; height: 30px; display: grid; place-items: center; border-radius: 7px; color: var(--muted); }
+.side-ws button:hover { background: var(--hover); color: var(--ink); }
+.side-ws button[aria-current="page"] { background: var(--surface); color: var(--ink); box-shadow: var(--shadow-1); }
+.side-ws button:focus-visible { outline: 2px solid var(--focus); }
+.side-ws svg { width: 17px; height: 17px; }
+.side-ws .ws-n { position: absolute; top: 2px; right: 4px; font-size: 9.5px; font-weight: 700; color: var(--muted); font-variant-numeric: tabular-nums; }
diff --git a/apps/desktop/src/dev/fixtures.ts b/apps/desktop/src/dev/fixtures.ts
index 4ba99d4..7e7be9e 100644
--- a/apps/desktop/src/dev/fixtures.ts
+++ b/apps/desktop/src/dev/fixtures.ts
@@ -430,6 +430,16 @@ const GAMES_PRISM = {
   play: { appId: '123456789012', resource: '123456789012 (android/app/src/main/res/values/games-ids.xml)', leaderboards: 2, achievements: 5, config: { leaderboards: 2, achievements: 5 }, changes: [] },
   findings: [{ store: 'apple', level: 'ok', id: 'gc.entitlement', msg: 'com.apple.developer.game-center in ios/App/App/App.entitlements' }, { store: 'play', level: 'ok', id: 'pgs.app-id', msg: 'games_APP_ID 123456789012 matches the config' }],
   links: [{ label: 'Play Console: Play Games Services configuration', url: 'https://play.google.com/console/u/0/developers/4444/app/9876/play-games-services/setup' }],
+  items: [
+    { kind: 'leaderboard', id: 'com.example.prismpuddle.best', name: 'Best score', locales: ['en', 'tr', 'ja', 'ar'], ios: true, android: true,
+      apple: { action: 'keep', changed: [], locales: [{ locale: 'en-US', action: 'keep' }, { locale: 'tr', action: 'keep' }, { locale: 'ja', action: 'keep' }, { locale: 'ar-SA', action: 'keep' }] }, play: { action: 'keep', changed: [] } },
+    { kind: 'leaderboard', id: 'com.example.prismpuddle.daily', name: 'Daily puddle', locales: ['en', 'tr'], ios: true, android: true,
+      apple: { action: 'create', changed: ['referenceName'], locales: [{ locale: 'en-US', action: 'create' }, { locale: 'tr', action: 'create' }] }, play: { action: 'keep', changed: [] } },
+    ...['first-drop', 'ten-levels', 'no-hints', 'rainbow', 'speedrun'].map((k, i) => ({ kind: 'achievement', id: `com.example.prismpuddle.${k}`, name: ['First drop', 'Ten levels', 'No hints', 'Rainbow', 'Speedrun'][i]!, locales: ['en', 'tr', 'ja', 'ar'], points: [10, 20, 30, 20, 20][i], hidden: k === 'speedrun', ios: true, android: true,
+      apple: { action: 'keep', changed: [], locales: [{ locale: 'en-US', action: 'keep' }] }, play: { action: i === 2 ? 'update' : 'keep', changed: i === 2 ? ['draft.description'] : [] } })),
+  ],
+  localeMap: { configured: { ar: 'ar-SA' }, suggested: [{ id: 'en', from: 'en-US', to: 'en-GB' }] },
+  playApiDisabled: null,
 };
 const ok = (method: string, data: unknown): ToolResult => ({ method, ok: true, exitCode: 0, dryRun: false, command: `storebound ${method.replace('.', ' ')} --json`, output: '', data });
 
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 3e3d6ba..c4f37ed 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2116,4 +2116,106 @@ export const en = {
   'cm.copyPrincipal': "Service account / key",
   'cm.copyProfile': "Profile name",
   'cm.openAccounts': "Open Studios & accounts",
+  "sec.release": "Release",
+  "sec.store": "Store page",
+  "sec.revenue": "Revenue",
+  "sec.players": "Players",
+  "sec.health": "Health",
+  "sec.release.for": "Get a version to players on both stores: builds, TestFlight, review and rollout.",
+  "sec.store.for": "What people see on the store: texts per language, screenshots and app details.",
+  "sec.revenue.for": "What the app sells and for how much: in-app products, subscriptions and prices.",
+  "sec.players.for": "What players say, and for games what they can earn: reviews, Game Center, Play Games.",
+  "sec.health.for": "Is the app well and ready: crashes and ANRs, growth, checks to fix first, more tools.",
+  "sec.views": "{section} views",
+  "tab.games": "Game services",
+  "next.open": "Open {where}",
+  "next.rejected": "{version} was rejected on {store}",
+  "next.halted": "{version} is halted on {store}",
+  "next.blockers": "{count} blockers before submit",
+  "next.blockers_one": "1 blocker before submit",
+  "next.rollout": "{version} is rolling out at {share}",
+  "next.approved": "{version} is approved: release it",
+  "next.submit": "Submit {version} for review",
+  "next.review": "{version} is in review",
+  "next.managed": "{version} waits in Publishing overview (managed publishing)",
+  "next.upload": "Upload a first build",
+  "next.live": "Live: {version}",
+  "next.notRead": "Stores not read yet",
+  "next.storeLive": "The live store page, read from the stores",
+  "next.listingProblems": "{count} listing problems",
+  "next.listingProblems_one": "1 listing problem",
+  "next.unsaved": "{count} unsaved edits",
+  "next.unsaved_one": "1 unsaved edit",
+  "next.listingsUnread": "Listings not checked yet",
+  "next.storeOk": "Store page in step with the config",
+  "next.catalogDiff": "{count} products differ between the stores",
+  "next.catalogDiff_one": "1 product differs between the stores",
+  "next.noProducts": "No products yet: add one",
+  "next.products": "{products} products · {subs} subscriptions",
+  "next.reviews": "{count} reviews without a reply",
+  "next.reviews_one": "1 review without a reply",
+  "next.reviewsUnread": "Reviews not read yet",
+  "next.reviewsOk": "All reviews answered",
+  "next.gamesApiOff": "Play Games Services API is off",
+  "next.gamesBlockers": "{count} game services blockers",
+  "next.gamesBlockers_one": "1 game services blocker",
+  "next.gamesSync": "Game services: {count} changes to sync",
+  "next.gamesSync_one": "Game services: 1 change to sync",
+  "next.fixFirst": "{count} problems to fix first",
+  "next.fixFirst_one": "1 problem to fix first",
+  "next.warnings": "{count} warnings to look at",
+  "next.warnings_one": "1 warning to look at",
+  "next.healthOk": "No problems found",
+  "side.gAttention": "Needs attention",
+  "side.gProgress": "In progress",
+  "side.gLive": "Live",
+  "side.gDraft": "Not on a store yet",
+  "side.missing": "Folder missing",
+  "side.rejected": "Rejected · {what}",
+  "side.halted": "Halted · {what}",
+  "side.blockers": "{count} blockers",
+  "side.blockers_one": "1 blocker",
+  "side.rollout": "Rollout {share} · {what}",
+  "side.review": "In review · {what}",
+  "side.approved": "Approved · {what}",
+  "side.draft": "Draft · {what}",
+  "side.live": "Live · {version}",
+  "side.liveWarn": "Live · {version} · {count} warnings",
+  "side.liveWarn_one": "Live · {version} · 1 warning",
+  "side.storeOnly": "Store only · not read yet",
+  "side.notRead": "Not read yet",
+  "side.warnings": "{count} warnings",
+  "side.warnings_one": "1 warning",
+  "side.notOnStore": "No store version yet",
+  "side.ignored": "Ignored",
+  "side.studioFilter": "Show apps of a studio",
+  "side.allStudios": "All",
+  "games.keep": "In step",
+  "games.update": "Differs",
+  "games.create": "Missing",
+  "games.notOnStore": "Not on this store",
+  "games.notListed": "Not planned",
+  "games.notRead": "Not read",
+  "games.item": "Item",
+  "games.name": "Name",
+  "games.points": "Points",
+  "games.languages": "Languages",
+  "games.leaderboard": "Leaderboard",
+  "games.achievement": "Achievement",
+  "games.hidden": "hidden until earned",
+  "games.localeChanges": "Game Center languages: {list}",
+  "games.checkAgain": "Check again",
+  "games.apiOffTitle": "Play Games Services API is off.",
+  "games.apiOffText": "Turn on {api} in the service account's Google Cloud project, wait a minute, then check again.",
+  "games.itemsTitle": "Leaderboards and achievements",
+  "games.itemsSub": "One list in the config, mapped to both stores: each store's state against the config.",
+  "games.refresh": "Read again",
+  "games.noItems": "No leaderboards or achievements in the config yet (games.leaderboards, games.achievements).",
+  "games.notReadYet": "Reading game services…",
+  "games.images": "Images of leaderboards and achievements are added in the consoles; on Play the existing icon is kept on every sync.",
+  "games.localeMap": "Game Center locale map",
+  "games.localeMapSub": "Config language to the locale the live Game Center uses (games.localeMap).",
+  "games.mapSet": "Set",
+  "games.mapSuggested": "Suggested",
+  "games.mapHint": "Add to games.localeMap: {entries}",
 } as const;
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 8901d14..e19a2e7 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2118,4 +2118,106 @@ export const tr: Record<keyof typeof en, string> = {
   'cm.copyPrincipal': "Hizmet hesabı / anahtar",
   'cm.copyProfile': "Profil adı",
   'cm.openAccounts': "Stüdyolar ve hesapları aç",
+  "sec.release": "Yayın",
+  "sec.store": "Mağaza sayfası",
+  "sec.revenue": "Gelir",
+  "sec.players": "Oyuncular",
+  "sec.health": "Sağlık",
+  "sec.release.for": "Bir sürümü iki mağazada oyunculara ulaştır: build, TestFlight, inceleme ve dağıtım.",
+  "sec.store.for": "Mağazada insanların gördüğü: dile göre metinler, ekran görüntüleri ve uygulama bilgileri.",
+  "sec.revenue.for": "Uygulamanın sattıkları ve fiyatları: uygulama içi ürünler, abonelikler ve fiyatlar.",
+  "sec.players.for": "Oyuncuların söyledikleri ve oyunlarda kazanabilecekleri: yorumlar, Game Center, Play Games.",
+  "sec.health.for": "Uygulama sağlıklı ve hazır mı: çökmeler ve ANR, büyüme, önce düzeltilecek kontroller, diğer araçlar.",
+  "sec.views": "{section} görünümleri",
+  "tab.games": "Oyun servisleri",
+  "next.open": "{where} aç",
+  "next.rejected": "{version}, {store} tarafından reddedildi",
+  "next.halted": "{version}, {store} üzerinde durduruldu",
+  "next.blockers": "Göndermeden önce {count} engel",
+  "next.blockers_one": "Göndermeden önce 1 engel",
+  "next.rollout": "{version} dağıtımı {share} seviyesinde",
+  "next.approved": "{version} onaylandı: yayınla",
+  "next.submit": "{version} sürümünü incelemeye gönder",
+  "next.review": "{version} incelemede",
+  "next.managed": "{version} Yayınlama özeti'nde bekliyor (yönetilen yayınlama)",
+  "next.upload": "İlk build'i yükle",
+  "next.live": "Yayında: {version}",
+  "next.notRead": "Mağazalar henüz okunmadı",
+  "next.storeLive": "Mağazalardan okunan canlı mağaza sayfası",
+  "next.listingProblems": "{count} mağaza metni sorunu",
+  "next.listingProblems_one": "1 mağaza metni sorunu",
+  "next.unsaved": "{count} kaydedilmemiş düzenleme",
+  "next.unsaved_one": "1 kaydedilmemiş düzenleme",
+  "next.listingsUnread": "Mağaza metinleri henüz kontrol edilmedi",
+  "next.storeOk": "Mağaza sayfası yapılandırmayla uyumlu",
+  "next.catalogDiff": "{count} ürün mağazalar arasında farklı",
+  "next.catalogDiff_one": "1 ürün mağazalar arasında farklı",
+  "next.noProducts": "Henüz ürün yok: bir tane ekle",
+  "next.products": "{products} ürün · {subs} abonelik",
+  "next.reviews": "{count} yorum yanıtsız",
+  "next.reviews_one": "1 yorum yanıtsız",
+  "next.reviewsUnread": "Yorumlar henüz okunmadı",
+  "next.reviewsOk": "Tüm yorumlar yanıtlandı",
+  "next.gamesApiOff": "Play Games Services API kapalı",
+  "next.gamesBlockers": "{count} oyun servisi engeli",
+  "next.gamesBlockers_one": "1 oyun servisi engeli",
+  "next.gamesSync": "Oyun servisleri: eşitlenecek {count} değişiklik",
+  "next.gamesSync_one": "Oyun servisleri: eşitlenecek 1 değişiklik",
+  "next.fixFirst": "Önce düzeltilecek {count} sorun",
+  "next.fixFirst_one": "Önce düzeltilecek 1 sorun",
+  "next.warnings": "Bakılacak {count} uyarı",
+  "next.warnings_one": "Bakılacak 1 uyarı",
+  "next.healthOk": "Sorun bulunmadı",
+  "side.gAttention": "İlgi bekliyor",
+  "side.gProgress": "Sürüyor",
+  "side.gLive": "Yayında",
+  "side.gDraft": "Henüz mağazada değil",
+  "side.missing": "Klasör bulunamadı",
+  "side.rejected": "Reddedildi · {what}",
+  "side.halted": "Durduruldu · {what}",
+  "side.blockers": "{count} engel",
+  "side.blockers_one": "1 engel",
+  "side.rollout": "Dağıtım {share} · {what}",
+  "side.review": "İncelemede · {what}",
+  "side.approved": "Onaylandı · {what}",
+  "side.draft": "Taslak · {what}",
+  "side.live": "Yayında · {version}",
+  "side.liveWarn": "Yayında · {version} · {count} uyarı",
+  "side.liveWarn_one": "Yayında · {version} · 1 uyarı",
+  "side.storeOnly": "Yalnız mağaza · henüz okunmadı",
+  "side.notRead": "Henüz okunmadı",
+  "side.warnings": "{count} uyarı",
+  "side.warnings_one": "1 uyarı",
+  "side.notOnStore": "Henüz mağaza sürümü yok",
+  "side.ignored": "Yok sayıldı",
+  "side.studioFilter": "Bir stüdyonun uygulamalarını göster",
+  "side.allStudios": "Tümü",
+  "games.keep": "Uyumlu",
+  "games.update": "Farklı",
+  "games.create": "Eksik",
+  "games.notOnStore": "Bu mağazada değil",
+  "games.notListed": "Planlanmadı",
+  "games.notRead": "Okunmadı",
+  "games.item": "Öğe",
+  "games.name": "Ad",
+  "games.points": "Puan",
+  "games.languages": "Diller",
+  "games.leaderboard": "Skor tablosu",
+  "games.achievement": "Başarım",
+  "games.hidden": "kazanılana kadar gizli",
+  "games.localeChanges": "Game Center dilleri: {list}",
+  "games.checkAgain": "Yeniden kontrol et",
+  "games.apiOffTitle": "Play Games Services API kapalı.",
+  "games.apiOffText": "Hizmet hesabının Google Cloud projesinde {api} açın, bir dakika bekleyin, sonra yeniden kontrol edin.",
+  "games.itemsTitle": "Skor tabloları ve başarımlar",
+  "games.itemsSub": "Yapılandırmada tek liste, iki mağazaya eşlenir: her mağazanın yapılandırmaya göre durumu.",
+  "games.refresh": "Yeniden oku",
+  "games.noItems": "Yapılandırmada henüz skor tablosu veya başarım yok (games.leaderboards, games.achievements).",
+  "games.notReadYet": "Oyun servisleri okunuyor…",
+  "games.images": "Skor tablosu ve başarım görselleri konsollarda eklenir; Play'de mevcut simge her eşitlemede korunur.",
+  "games.localeMap": "Game Center dil eşlemesi",
+  "games.localeMapSub": "Yapılandırma dilinden canlı Game Center'ın kullandığı dile (games.localeMap).",
+  "games.mapSet": "Ayarlı",
+  "games.mapSuggested": "Önerilen",
+  "games.mapHint": "games.localeMap'e ekleyin: {entries}",
 };
diff --git a/apps/desktop/src/lib/model.ts b/apps/desktop/src/lib/model.ts
index e1979c0..a104d02 100644
--- a/apps/desktop/src/lib/model.ts
+++ b/apps/desktop/src/lib/model.ts
@@ -2,7 +2,7 @@
 // inbox stats, catalog parity matrix, the portfolio's "needs attention" list, and the command palette matcher.
 // "Unknown, never false": every derivation keeps "not read" apart from "none" / "ok".
 import { plainError } from '../../../../cli/lib/google-errors';
-import type { AppStatus, ProjectSummary } from '../api';
+import type { AppStatus, ProjectSummary, StoreRelease } from '../api';
 import { t } from '../i18n';
 
 import type { Tone } from '../../../../cli/lib/train';
@@ -138,7 +138,7 @@ export function parityMatrix(s: ProjectSummary | null, diff: CatalogDiff | null)
 
 // ---- Portfolio: needs attention ----
 
-export interface Attention { app: string; projectId: string; tone: Tone; text: string; hint?: string; tab?: 'releases' | 'catalog' | 'listings' | 'health' | 'reviews' | 'testflight' | 'checks' }
+export interface Attention { app: string; projectId: string; tone: Tone; text: string; hint?: string; tab?: 'releases' | 'catalog' | 'listings' | 'health' | 'reviews' | 'testflight' | 'checks' | 'games' }
 
 export function attention(projectId: string, name: string, e: AppStatus | undefined, live: AppStatus | undefined, health?: HealthSnapshot | null): Attention[] {
   const out: Attention[] = [];
@@ -203,3 +203,46 @@ export function hueOf(name: string): number {
   for (const c of name) h = (h * 31 + c.charCodeAt(0)) >>> 0;
   return h % 360;
 }
+
+// ---- App kind and the sidebar ----
+
+const PLAY_GAME_CATS = ['Action', 'Adventure', 'Arcade', 'Board', 'Card', 'Casino', 'Casual', 'Educational', 'Music', 'Puzzle', 'Racing', 'Role Playing', 'Simulation', 'Sports', 'Strategy', 'Trivia', 'Word'];
+/** A game: profile game, a games section in the config, or a Play game category. */
+export function isGameSummary(s: ProjectSummary | null | undefined): boolean {
+  if (!s) return false;
+  return s.profile === 'game' || !!s.games || PLAY_GAME_CATS.includes(s.playRelease?.category ?? '');
+}
+
+export type SideGroup = 'attention' | 'progress' | 'live' | 'draft';
+export interface SideStatus { group: SideGroup; text: string; tone: Tone }
+
+/** One sidebar row's group and status line: the one thing worth knowing about the app (docs IA). */
+export function sideStatus(o: { att: Attention[]; all: StoreRelease[]; read: boolean; missing: boolean; storeOnly: boolean }): SideStatus {
+  const sn = (r: StoreRelease) => `${r.store === 'ios' ? 'iOS' : 'Play'} ${r.version ?? ''}`.trim();
+  if (o.missing) return { group: 'attention', text: t('side.missing'), tone: 'bad' };
+  const rej = o.all.find(r => r.phase === 'rejected');
+  if (rej) return { group: 'attention', text: t('side.rejected', { what: sn(rej) }), tone: 'bad' };
+  const halted = o.all.find(r => r.phase === 'halted');
+  if (halted) return { group: 'attention', text: t('side.halted', { what: sn(halted) }), tone: 'bad' };
+  const bad = o.att.filter(a => a.tone === 'bad').length;
+  if (bad) return { group: 'attention', text: t('side.blockers', { count: bad }), tone: 'bad' };
+  const crash = o.att.find(a => a.tab === 'health');
+  if (crash) return { group: 'attention', text: crash.text, tone: crash.tone };
+  const rolling = o.all.find(r => r.phase === 'rollout' && r.fraction !== null && r.fraction < 1);
+  if (rolling) return { group: 'progress', text: t('side.rollout', { share: `${Math.round((rolling.fraction ?? 0) * 100)} %`, what: sn(rolling) }), tone: 'info' };
+  const review = o.all.find(r => r.phase === 'review' || r.phase === 'sent');
+  if (review) return { group: 'progress', text: t('side.review', { what: sn(review) }), tone: 'info' };
+  const approved = o.all.find(r => r.phase === 'approved');
+  if (approved) return { group: 'progress', text: t('side.approved', { what: sn(approved) }), tone: 'info' };
+  const live = o.all.filter(r => r.phase === 'live' || r.phase === 'released' || r.phase === 'rollout');
+  const draft = o.all.find(r => r.phase === 'draft' || r.phase === 'testing');
+  if (draft && !live.length) return { group: 'progress', text: t('side.draft', { what: sn(draft) }), tone: 'neutral' };
+  const warn = o.att.filter(a => a.tone === 'warn').length;
+  if (live.length) {
+    const vs = [...new Set(live.map(r => r.version).filter(Boolean))];
+    return { group: 'live', text: warn ? t('side.liveWarn', { version: vs.join(' / '), count: warn }) : t('side.live', { version: vs.join(' / ') }), tone: warn ? 'warn' : 'ok' };
+  }
+  if (!o.read) return { group: o.storeOnly ? 'live' : 'draft', text: o.storeOnly ? t('side.storeOnly') : t('side.notRead'), tone: 'neutral' };
+  return { group: 'draft', text: warn ? t('side.warnings', { count: warn }) : t('side.notOnStore'), tone: warn ? 'warn' : 'neutral' };
+}
+export const SIDE_GROUPS: SideGroup[] = ['attention', 'progress', 'live', 'draft'];
diff --git a/apps/desktop/src/lib/sections.ts b/apps/desktop/src/lib/sections.ts
new file mode 100644
index 0000000..5cad08e
--- /dev/null
+++ b/apps/desktop/src/lib/sections.ts
@@ -0,0 +1,94 @@
+// The "what's next" line of each app section (docs IA): one sentence and the sub view it opens, from state that is
+// already read (status, live releases, attention, cached reads). Pure, so tests pin the rules; a section never starts
+// a read to fill it.
+import type { CatalogParity, ListingsResult, StoreRelease } from '../api';
+import { t } from '../i18n';
+import type { AppSection, AppTab } from '../nav';
+import type { IconName } from '../ui/icons';
+import { type Attention, isGameSummary } from './model';
+import { share } from './format';
+import type { ProjectSummary } from '../api';
+
+export type NextTone = 'bad' | 'warn' | 'ok' | 'info' | 'neutral';
+export interface SectionNext { text: string; tone: NextTone; tab: AppTab | null; icon: IconName }
+
+export interface GamesNext { changes: number; blockers: number; apiOff: boolean }
+export interface SectionInput {
+  project: boolean;
+  att: Attention[];
+  all: StoreRelease[];
+  next: string | null;
+  summary: ProjectSummary | null;
+  catalog: CatalogParity | null;
+  /** Unsaved edits of the section's editors. */
+  unsaved: number;
+  /** Cached reads (null: not read yet). */
+  listings: ListingsResult | null;
+  reviews: { reply?: unknown }[] | null;
+  games: GamesNext | null;
+  /** Blockers of the last store readiness read (validate), null when never read. */
+  readiness?: number | null;
+}
+
+const storeName = (s: 'ios' | 'android') => (s === 'ios' ? 'App Store' : 'Google Play');
+
+/** Problems of a listings read: file problems plus required fields missing or over the limit. */
+export function listingProblems(l: ListingsResult | null): number | null {
+  if (!l) return null;
+  let n = l.problems.length;
+  for (const loc of l.locales) for (const s of [loc.play, loc.apple]) for (const f of s?.fields ?? []) if (f.state === 'missing' || f.state === 'over') n++;
+  return n;
+}
+
+export function sectionNext(section: AppSection, i: SectionInput): SectionNext {
+  const bad = i.att.filter(a => a.tone === 'bad');
+  if (section === 'release') {
+    const rej = i.all.find(r => r.phase === 'rejected' || r.phase === 'halted');
+    if (rej) return { text: t(rej.phase === 'rejected' ? 'next.rejected' : 'next.halted', { version: rej.version ?? '', store: storeName(rej.store) }), tone: 'bad', tab: 'releases', icon: 'alertCircle' };
+    const checks = bad.filter(a => a.tab === 'checks').length + (i.readiness ?? 0);
+    if (checks) return { text: t('next.blockers', { count: checks }), tone: 'bad', tab: 'checks', icon: 'alertCircle' };
+    const rolling = i.all.find(r => r.phase === 'rollout' && r.fraction !== null && r.fraction < 1);
+    if (rolling) return { text: t('next.rollout', { share: share(rolling.fraction ?? 0), version: rolling.version ?? '' }), tone: 'info', tab: 'releases', icon: 'rocket' };
+    const approved = i.all.find(r => r.phase === 'approved');
+    if (approved) return { text: t('next.approved', { version: approved.version ?? '' }), tone: 'info', tab: 'releases', icon: 'rocket' };
+    const ready = i.all.find(r => r.phase === 'draft' || r.phase === 'testing');
+    if (ready) return { text: t('next.submit', { version: ready.version ?? '' }), tone: 'info', tab: 'releases', icon: 'send' };
+    const review = i.all.find(r => r.phase === 'review' || r.phase === 'sent');
+    if (review) return { text: review.managed ? t('next.managed', { version: review.version ?? '' }) : t('next.review', { version: review.version ?? '' }), tone: 'neutral', tab: 'releases', icon: 'clock' };
+    if (i.project && !i.next && !i.all.length) return { text: t('next.upload'), tone: 'neutral', tab: 'releases', icon: 'upload' };
+    const live = i.all.find(r => r.phase === 'live' || r.phase === 'released');
+    return live ? { text: t('next.live', { version: live.version ?? '' }), tone: 'ok', tab: null, icon: 'check' } : { text: t('next.notRead'), tone: 'neutral', tab: null, icon: 'clock' };
+  }
+  if (section === 'store') {
+    if (!i.project) return { text: t('next.storeLive'), tone: 'neutral', tab: null, icon: 'cloud' };
+    const n = listingProblems(i.listings);
+    if (n) return { text: t('next.listingProblems', { count: n }), tone: 'warn', tab: 'listings', icon: 'alert' };
+    if (i.unsaved) return { text: t('next.unsaved', { count: i.unsaved }), tone: 'warn', tab: null, icon: 'edit' };
+    return n === null ? { text: t('next.listingsUnread'), tone: 'neutral', tab: 'listings', icon: 'text' } : { text: t('next.storeOk'), tone: 'ok', tab: null, icon: 'check' };
+  }
+  if (section === 'revenue') {
+    const c = i.catalog;
+    if (c && c.checked === 'live' && !c.ok) return { text: t('next.catalogDiff', { count: c.missingIos.length + c.missingAndroid.length + c.onlyIos.length + c.onlyAndroid.length }), tone: 'warn', tab: 'catalog', icon: 'alert' };
+    const p = i.summary?.products ?? 0, s = i.summary?.subscriptions ?? 0;
+    if (!p && !s) return { text: t('next.noProducts'), tone: 'neutral', tab: 'catalog', icon: 'plus' };
+    return { text: t('next.products', { products: p, subs: s }), tone: 'ok', tab: null, icon: 'check' };
+  }
+  if (section === 'players') {
+    const open = i.reviews ? i.reviews.filter(r => !r.reply).length : null;
+    if (open) return { text: t('next.reviews', { count: open }), tone: 'warn', tab: 'reviews', icon: 'message' };
+    if (i.games?.apiOff) return { text: t('next.gamesApiOff'), tone: 'bad', tab: 'games', icon: 'alertCircle' };
+    if (i.games?.blockers) return { text: t('next.gamesBlockers', { count: i.games.blockers }), tone: 'bad', tab: 'games', icon: 'alertCircle' };
+    if (i.games?.changes) return { text: t('next.gamesSync', { count: i.games.changes }), tone: 'warn', tab: 'games', icon: 'upload' };
+    return open === null ? { text: t('next.reviewsUnread'), tone: 'neutral', tab: 'reviews', icon: 'message' } : { text: t('next.reviewsOk'), tone: 'ok', tab: null, icon: 'check' };
+  }
+  const crash = i.att.find(a => a.tab === 'health');
+  if (crash) return { text: crash.text, tone: crash.tone === 'bad' ? 'bad' : 'warn', tab: 'health', icon: 'activity' };
+  const problems = i.att.filter(a => a.tab === 'checks');
+  const fix = problems.filter(a => a.tone === 'bad').length + (i.readiness ?? 0);
+  if (fix) return { text: t('next.fixFirst', { count: fix }), tone: 'bad', tab: 'checks', icon: 'shield' };
+  if (problems.length) return { text: t('next.warnings', { count: problems.length }), tone: 'warn', tab: 'checks', icon: 'shield' };
+  return { text: t('next.healthOk'), tone: 'ok', tab: null, icon: 'check' };
+}
+
+/** A game: profile game, a games section in the config, or a Play game category. */
+export const isGame = (s: ProjectSummary | null | undefined): boolean => isGameSummary(s);
diff --git a/apps/desktop/src/nav.ts b/apps/desktop/src/nav.ts
index a6429e1..b442265 100644
--- a/apps/desktop/src/nav.ts
+++ b/apps/desktop/src/nav.ts
@@ -4,31 +4,58 @@ import { createContext, useContext } from 'react';
 import type { Key } from './i18n';
 import type { IconName } from './ui/icons';
 
-export const APP_TABS = ['releases', 'catalog', 'prices', 'listings', 'art', 'health', 'reviews', 'testflight', 'growth', 'appinfo', 'checks', 'tools'] as const;
+export const APP_TABS = ['releases', 'testflight', 'listings', 'art', 'appinfo', 'catalog', 'prices', 'reviews', 'games', 'health', 'growth', 'checks', 'tools'] as const;
 export type AppTab = (typeof APP_TABS)[number];
-/** Tabs of a store-only app: store reads only (catalog, prices, app info and checks need the app folder; listings and
- *  store art are the live ones; Growth shows the Product Page Optimization tests only). */
-export const STORE_TABS: readonly AppTab[] = ['releases', 'listings', 'art', 'health', 'reviews', 'testflight', 'growth'];
-export const tabsFor = (hasFolder: boolean): readonly AppTab[] => (hasFolder ? APP_TABS : STORE_TABS);
+
+/** The five sections of an app, by job (docs IA): each holds sub views (the old tabs). The route keeps the sub id. */
+export const SECTIONS = ['release', 'store', 'revenue', 'players', 'health'] as const;
+export type AppSection = (typeof SECTIONS)[number];
+export const SECTION_TABS: Record<AppSection, readonly AppTab[]> = {
+  release: ['releases', 'testflight'], store: ['listings', 'art', 'appinfo'], revenue: ['catalog', 'prices'], players: ['reviews', 'games'], health: ['health', 'growth', 'checks', 'tools'],
+};
+export const sectionOf = (tab: AppTab): AppSection => SECTIONS.find(s => SECTION_TABS[s].includes(tab)) ?? 'release';
+export const SECTION_KEY: Record<AppSection, Key> = { release: 'sec.release', store: 'sec.store', revenue: 'sec.revenue', players: 'sec.players', health: 'sec.health' };
+export const SECTION_ICON: Record<AppSection, IconName> = { release: 'rocket', store: 'image', revenue: 'coins', players: 'users', health: 'activity' };
+
+/** Sub views of a store-only app: store reads only (catalog, prices, app info, checks and tools need the app folder;
+ *  listings and store art are the live ones; Growth shows the Product Page Optimization tests only). */
+export const STORE_TABS: readonly AppTab[] = ['releases', 'testflight', 'listings', 'art', 'reviews', 'health', 'growth'];
+/** The sub views an app has: the folder decides most; Game services only for games. */
+export const tabsFor = (hasFolder: boolean, game = false): readonly AppTab[] => (hasFolder ? APP_TABS : STORE_TABS).filter(x => x !== 'games' || (game && hasFolder));
+/** The sections an app has (a section with no sub view is left out: Revenue for a store-only app). */
+export const sectionsFor = (hasFolder: boolean, game = false): AppSection[] => { const tabs = tabsFor(hasFolder, game); return SECTIONS.filter(s => SECTION_TABS[s].some(x => tabs.includes(x))); };
+export const subsOf = (s: AppSection, hasFolder: boolean, game = false): AppTab[] => { const tabs = tabsFor(hasFolder, game); return SECTION_TABS[s].filter(x => tabs.includes(x)); };
 export const TAB_KEY: Record<AppTab, Key> = {
   releases: 'tab.releases', catalog: 'tab.catalog', prices: 'tab.prices', listings: 'tab.listings', art: 'tab.art', health: 'tab.health', reviews: 'tab.reviews',
-  testflight: 'tab.testflight', growth: 'tab.growth', appinfo: 'tab.appinfo', checks: 'tab.checks', tools: 'tab.tools',
+  testflight: 'tab.testflight', growth: 'tab.growth', appinfo: 'tab.appinfo', checks: 'tab.checks', tools: 'tab.tools', games: 'tab.games',
 };
 export const TAB_ICON: Record<AppTab, IconName> = {
   releases: 'rocket', catalog: 'tag', prices: 'coins', listings: 'text', art: 'grid', health: 'activity', reviews: 'message', testflight: 'plane', growth: 'chart',
-  appinfo: 'clipboard', checks: 'shield', tools: 'sliders',
+  appinfo: 'clipboard', checks: 'shield', tools: 'sliders', games: 'sparkle',
 };
+
+/** A place in an app from a link: an old tab id ("prices"), a section ("revenue", its first sub view) or
+ *  "section/sub" ("store/art"). Unknown: Release. */
+export function placeOf(v: string | undefined | null): AppTab {
+  if (!v) return 'releases';
+  const [a, b] = v.split('/');
+  if (b && (SECTIONS as readonly string[]).includes(a!) && SECTION_TABS[a as AppSection].includes(b as AppTab)) return b as AppTab;
+  if (APP_TABS.includes(a as AppTab)) return a as AppTab;
+  if ((SECTIONS as readonly string[]).includes(a!)) return SECTION_TABS[a as AppSection][0]!;
+  return 'releases';
+}
+
 export const WORKSPACE = ['apps', 'accounts', 'ignored', 'dependencies', 'settings'] as const;
 export type WorkspaceScreen = (typeof WORKSPACE)[number];
 
 export type Route = { screen: 'portfolio' } | { screen: 'app'; appId: string; tab: AppTab } | { screen: WorkspaceScreen; section?: string };
 
-/** storebound://<screen> deep links and the dev-only start switch ("app:health" = first app, Health tab;
- *  "app:health:2" = second app; "settings:refresh" = a Settings section). `apps` are the app keys in list order. */
+/** storebound://<screen> deep links and the dev-only start switch ("app:health" = first app, Health section;
+ *  "app:store/art" = a sub view; "app:prices" = an old tab id; "app:health:2" = second app; "settings:refresh" = a Settings section). `apps` are the app keys in list order. */
 export function parseStart(v: string, apps: string[]): Route | null {
   const [screen, tab, n] = v.split(':');
   const app = apps[Math.max(0, (Number(n) || 1) - 1)];
-  if (screen === 'app' && app) return { screen: 'app', appId: app, tab: APP_TABS.includes(tab as AppTab) ? tab as AppTab : 'releases' };
+  if (screen === 'app' && app) return { screen: 'app', appId: app, tab: placeOf(tab) };
   if (screen === 'portfolio') return { screen: 'portfolio' };
   if (!(WORKSPACE as readonly string[]).includes(screen ?? '')) return null;
   return tab ? { screen: screen as WorkspaceScreen, section: tab } : { screen: screen as WorkspaceScreen };
@@ -41,7 +68,7 @@ export function parseRouteJson(v: string): Route | null {
   if (!o || typeof o !== 'object') return null;
   const r = o as Record<string, unknown>;
   if (r.screen === 'portfolio') return { screen: 'portfolio' };
-  if (r.screen === 'app') return typeof r.appId === 'string' && r.appId ? { screen: 'app', appId: r.appId, tab: APP_TABS.includes(r.tab as AppTab) ? r.tab as AppTab : 'releases' } : null;
+  if (r.screen === 'app') return typeof r.appId === 'string' && r.appId ? { screen: 'app', appId: r.appId, tab: placeOf(typeof r.tab === 'string' ? r.tab : null) } : null;
   if (typeof r.screen === 'string' && (WORKSPACE as readonly string[]).includes(r.screen)) return typeof r.section === 'string' ? { screen: r.screen as WorkspaceScreen, section: r.section } : { screen: r.screen as WorkspaceScreen };
   return null;
 }
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 1736d8d..1a8424d 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -1,16 +1,20 @@
-// One app across both stores: header (icon, studio, ids, store state, pairing), then the tabs. A store-only app (no
+// One app across both stores: header (icon, studio, ids, store state, pairing), then five sections by job (Release,
+// Store page, Revenue, Players, Health; docs IA), each with a header (what it is for, the one next step) and its sub views. A store-only app (no
 // app folder) shows its store reads (releases, health, reviews, TestFlight) read-only, with "Link a folder" and
 // "Start an app folder here" to make it a full app.
 import { useContextMenu, useMenuButton } from '../ui/ContextMenu';
 import { appMenu, playUrlFor } from '../ui/app-menu';
 import { useShowIgnored } from '../lib/show-ignored';
 import { useState } from 'react';
+import { GamesTab } from './tabs/Games';
+import { SectionHead } from './SectionHead';
 import { api, errorText } from '../api';
 import { type Key, t } from '../i18n';
 import { pairCandidates, type UnifiedApp, withLink, withPair, withStudio } from '../lib/identity';
 import { attention, storeNow } from '../lib/model';
 import { Hero, nextStep, Tabs } from '../ui/ds';
-import { type AppTab, TAB_ICON, TAB_KEY, tabsFor, useNav } from '../nav';
+import { isGameSummary } from '../lib/model';
+import { type AppSection, type AppTab, SECTION_ICON, SECTION_KEY, SECTION_TABS, sectionOf, sectionsFor, subsOf, useNav } from '../nav';
 import { useData } from '../store';
 import { Icon } from '../ui/icons';
 import { ErrorBoundary } from '../ui/ErrorBoundary';
@@ -107,11 +111,15 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
   const ios = e?.app?.platforms.ios ?? (app.ios ? { bundleId: app.ios.app.bundleId, ascAppId: app.ios.app.id } : null);
   const android = e?.app?.platforms.android ?? (app.android ? { packageName: app.android.app.id } : null);
   const name = (app.project && e?.app?.name) || app.name;
-  const tabs = tabsFor(!!app.project);
+  const game = isGameSummary(e?.summary);
+  const sections = sectionsFor(!!app.project, game);
+  const section = sectionOf(tab);
   const ed = useEdits();
   useUnsavedGuard();
   const studio = d.studios.find(s => s.id === app.studio) ?? null;
   const setTab = (x: AppTab) => nav.go({ screen: 'app', appId: app.key, tab: x });
+  const setSection = (x: AppSection) => setTab(subsOf(x, !!app.project, game)[0] ?? SECTION_TABS[x][0]!);
+  const editCount = (x: AppTab) => (EDIT_TABS[x] ? ed.count(app.project?.id ?? app.target, EDIT_TABS[x]) : 0);
   const all = l?.release.all ?? [];
   const iosNow = l ? storeNow(all, 'ios').now : null, androidNow = l ? storeNow(all, 'android').now : null;
   const att = attention(app.key, app.name, e, l);
@@ -137,19 +145,20 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
           {android && <button className="btn btn-sm btn-ghost" onClick={() => open(playUrlFor(d, app))} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
         </>}
         all={all} ios={!!ios} android={!!android} next={l?.release.next?.version ?? null}
-        compact={tab !== 'releases'}
+        compact={section !== 'release' || tab !== 'releases'}
         cta={nextStep({ project: !!app.project, att, all, next: l?.release.next?.version ?? null })} onCta={setTab} />
       <AppControls app={app} />
       {!app.project && <StoreOnlyBanner app={app} />}
       {app.project?.storeboundPin && <Notice tone="info" icon="info">{t('app.pinNotice', { pin: app.project.storeboundPin, app: d.info?.version ?? '' })}</Notice>}
       {app.project?.missing ? <FolderMissing project={app.project} /> : <>
       <div className="ds-app-sticky">
-        <Tabs label={t('app.sections', { name })} value={tab} onChange={setTab} items={tabs.map(x => {
-          const n = EDIT_TABS[x] ? ed.count(app.project?.id ?? app.target, EDIT_TABS[x]) : 0;
-          return { id: x, label: t(TAB_KEY[x]), icon: TAB_ICON[x], count: att.filter(a => a.tab === x && a.tone === 'bad').length, dot: n > 0, dotTitle: n ? t('ed.unsaved', { count: n }) : undefined };
+        <Tabs label={t('app.sections', { name })} value={section} onChange={setSection} items={sections.map((x, i) => {
+          const n = subsOf(x, !!app.project, game).reduce((a, s2) => a + editCount(s2), 0);
+          return { id: x, label: t(SECTION_KEY[x]), icon: SECTION_ICON[x], hint: String(i + 1), count: att.filter(a => a.tab && sectionOf(a.tab) === x && a.tone === 'bad').length, dot: n > 0, dotTitle: n ? t('ed.unsaved', { count: n }) : undefined };
         })} />
       </div>
-      <div role="tabpanel" id="tabpanel" aria-labelledby={`tab-${tab}`} className="stack" style={{ gap: 16 }}>
+      <SectionHead app={app} section={section} tab={tab} subs={subsOf(section, !!app.project, game)} att={att} all={all} next={l?.release.next?.version ?? null} unsaved={subsOf(section, !!app.project, game).reduce((a, s2) => a + editCount(s2), 0)} editCount={editCount} onTab={setTab} />
+      <div role="tabpanel" id="tabpanel" aria-labelledby={`tab-${section}`} className="stack" style={{ gap: 16 }}>
         <ErrorBoundary key={tab} where={`tab ${tab}`}>
           {tab === 'releases' && <ReleasesTab app={app} />}
           {tab === 'catalog' && app.project && <CatalogTab project={app.project} />}
@@ -160,6 +169,7 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
           {tab === 'art' && !app.project && <LiveArt target={app.target} />}
           {tab === 'health' && <HealthTab app={app} />}
           {tab === 'reviews' && <ReviewsTab app={app} />}
+          {tab === 'games' && app.project && <GamesTab project={app.project} />}
           {tab === 'testflight' && <TestFlightTab app={app} />}
           {tab === 'growth' && <GrowthTab app={app} />}
           {tab === 'appinfo' && app.project && <AppInfoTab project={app.project} />}
diff --git a/apps/desktop/src/screens/SectionHead.tsx b/apps/desktop/src/screens/SectionHead.tsx
new file mode 100644
index 0000000..75f04c1
--- /dev/null
+++ b/apps/desktop/src/screens/SectionHead.tsx
@@ -0,0 +1,60 @@
+// The header of one app section (docs IA): the section's name, one line on what it is for, the single next step
+// derived from state that is already read (lib/sections.ts), and the sub views as a segmented control (only when the
+// section has more than one).
+import type { ListingsResult, StoreRelease } from '../api';
+import { t } from '../i18n';
+import type { UnifiedApp } from '../lib/identity';
+import type { Attention } from '../lib/model';
+import { sectionNext } from '../lib/sections';
+import { type AppSection, type AppTab, SECTION_ICON, SECTION_KEY, TAB_ICON, TAB_KEY } from '../nav';
+import { useCachedRead, useData } from '../store';
+import type { GameServicesStatus } from '../ui/GameServicesCard';
+import { Icon } from '../ui/icons';
+
+const PURPOSE: Record<AppSection, 'sec.release.for' | 'sec.store.for' | 'sec.revenue.for' | 'sec.players.for' | 'sec.health.for'> = {
+  release: 'sec.release.for', store: 'sec.store.for', revenue: 'sec.revenue.for', players: 'sec.players.for', health: 'sec.health.for',
+};
+
+export function SectionHead({ app, section, tab, subs, att, all, next, unsaved, editCount, onTab }: {
+  app: UnifiedApp; section: AppSection; tab: AppTab; subs: AppTab[]; att: Attention[]; all: StoreRelease[]; next: string | null; unsaved: number;
+  editCount: (t: AppTab) => number; onTab: (t: AppTab) => void;
+}) {
+  const d = useData();
+  const e = d.statusFor(app);
+  const pid = app.project && !app.project.missing ? app.project.id : null;
+  // cached reads only: the header never starts a store call
+  const listings = useCachedRead<ListingsResult>(section === 'store' ? pid : null, 'project.listings');
+  const reviews = useCachedRead<{ reply?: unknown }[]>(section === 'players' ? app.target : null, 'reviews.list', { days: 30 });
+  const games = useCachedRead<GameServicesStatus>(section === 'players' && subs.includes('games') ? pid : null, 'games.status');
+  const validate = useCachedRead<{ findings?: { level: string }[] }>(section === 'health' || section === 'release' ? pid : null, 'validate');
+  const n = sectionNext(section, {
+    project: !!app.project, att, all, next, summary: e?.summary ?? null, catalog: (d.liveFor(app) ?? e)?.catalog ?? null, unsaved, listings,
+    reviews: Array.isArray(reviews) ? reviews : null, readiness: validate?.findings ? validate.findings.filter(f => f.level === 'blocker').length : null,
+    games: games ? { changes: (games.apple?.changes.length ?? 0) + (games.play?.changes.length ?? 0), blockers: games.findings.filter(f => f.level === 'error').length, apiOff: !!games.playApiDisabled } : null,
+  });
+  return (
+    <div className="sec-head" data-testid="section-head">
+      <div className="sec-head-t">
+        <h2 className="sec-head-name"><Icon name={SECTION_ICON[section]} />{t(SECTION_KEY[section])}</h2>
+        <p className="sec-head-for">{t(PURPOSE[section])}</p>
+      </div>
+      <div className={`sec-next tone-${n.tone}`} role="status" data-testid="section-next">
+        <Icon name={n.icon} />
+        <span className="sec-next-t">{n.text}</span>
+        {n.tab && n.tab !== tab && <button className="btn btn-sm" onClick={() => onTab(n.tab!)}>{t('next.open', { where: t(TAB_KEY[n.tab]) })}<Icon name="arrowRight" /></button>}
+      </div>
+      {subs.length > 1 && (
+        <div className="seg sec-subs" role="group" aria-label={t('sec.views', { section: t(SECTION_KEY[section]) })}>
+          {subs.map(x => {
+            const c = editCount(x);
+            return (
+              <button key={x} id={`sub-${x}`} type="button" aria-pressed={tab === x} aria-controls="tabpanel" onClick={() => onTab(x)}>
+                <Icon name={TAB_ICON[x]} />{t(TAB_KEY[x])}{c > 0 && <span className="ed-dot" title={t('ed.unsaved', { count: c })} />}
+              </button>
+            );
+          })}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/desktop/src/screens/tabs/AppInfo.tsx b/apps/desktop/src/screens/tabs/AppInfo.tsx
index 7e6b1c3..8666d46 100644
--- a/apps/desktop/src/screens/tabs/AppInfo.tsx
+++ b/apps/desktop/src/screens/tabs/AppInfo.tsx
@@ -19,7 +19,6 @@ import { Bar, Chip, ErrorNotice, Notice, Skeleton } from '../../ui/kit';
 import { EmptyState, Section } from '../../ui/ds';
 import '../../styles/appinfo.css';
 import { WriteButton } from '../../ui/WriteButton';
-import { GameServicesCard } from '../../ui/GameServicesCard';
 import { ascUrl } from '../AppView';
 
 const AREA: Record<DeclAsk['area'], Key> = { dataSafety: 'ai.aDataSafety', appPrivacy: 'ai.aAppPrivacy', appInfo: 'ai.aAppInfo', encryption: 'ai.aEncryption', review: 'ai.aReview' };
@@ -258,7 +257,6 @@ export function AppInfoTab({ project }: { project: Project }) {
           </Section>
         </div>
       )}
-      <GameServicesCard project={project} />
       <ConsoleSteps project={project} stores={d.stores} />
 
       <p className="ai-foot">{t('ai.foot', { when: ago(r.at) })}</p>
diff --git a/apps/desktop/src/screens/tabs/Games.tsx b/apps/desktop/src/screens/tabs/Games.tsx
new file mode 100644
index 0000000..26950fd
--- /dev/null
+++ b/apps/desktop/src/screens/tabs/Games.tsx
@@ -0,0 +1,90 @@
+// Players > Game services: Game Center (App Store) and Play Games Services (Google Play) for a game, from
+// `games status --json` (cli/games-status.ts). The two store panels (switches, ids, counts, sync writes with dry run +
+// confirm) are the GameServicesCard; below it one row per leaderboard / achievement with its languages and each
+// store's state against the config, the Game Center locale map with suggestions, and the Play API-disabled state with
+// the enable link and the console plan.
+import { Fragment } from 'react';
+import type { Project } from '../../api';
+import { t } from '../../i18n';
+import { useRead } from '../../store';
+import { ConsolePlanButton } from '../../ui/ConsolePlan';
+import { EmptyState, Section } from '../../ui/ds';
+import { type GameAction, type GameItemRow, GameServicesCard, type GameServicesStatus } from '../../ui/GameServicesCard';
+import { Icon, StoreGlyph } from '../../ui/icons';
+import { Chip, Notice } from '../../ui/kit';
+import { OpenLink } from '../../ui/OpenLink';
+
+const ACTION_TONE: Record<GameAction, 'ok' | 'warn' | 'info'> = { keep: 'ok', update: 'warn', create: 'info' };
+const ACTION_KEY = { keep: 'games.keep', update: 'games.update', create: 'games.create' } as const;
+
+function StoreState({ on, plan, read }: { on: boolean; plan: { action: GameAction; changed: string[] } | null; read: boolean }) {
+  if (!on) return <span className="muted small">{t('games.notOnStore')}</span>;
+  if (!plan) return <span className="muted small">{read ? t('games.notListed') : t('games.notRead')}</span>;
+  return <Chip tone={ACTION_TONE[plan.action]} title={plan.changed.length && plan.action !== 'keep' ? plan.changed.join(', ') : undefined}>{t(ACTION_KEY[plan.action])}</Chip>;
+}
+
+function ItemsTable({ rows, appleRead, playRead }: { rows: GameItemRow[]; appleRead: boolean; playRead: boolean }) {
+  return (
+    <div className="table-wrap">
+      <table className="table">
+        <thead><tr>
+          <th>{t('games.item')}</th><th>{t('games.name')}</th><th className="num">{t('games.points')}</th><th>{t('games.languages')}</th>
+          <th><span className="row" style={{ gap: 4 }}><StoreGlyph store="ios" className="ic13" />{t('gs.gameCenter')}</span></th>
+          <th><span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" />{t('gs.playGames')}</span></th>
+        </tr></thead>
+        <tbody>
+          {rows.map(r => {
+            const locs = r.apple?.locales.filter(l => l.action !== 'keep') ?? [];
+            return (
+              <tr key={`${r.kind}:${r.id}`}>
+                <td><span className="row" style={{ gap: 6 }}><Icon name={r.kind === 'leaderboard' ? 'chart' : 'sparkle'} className="ic13" /><span className="mono-id small">{r.id}</span></span>
+                  <div className="small muted">{t(r.kind === 'leaderboard' ? 'games.leaderboard' : 'games.achievement')}{r.hidden ? ` · ${t('games.hidden')}` : ''}</div></td>
+                <td>{r.name}</td>
+                <td className="num">{r.points ?? '–'}</td>
+                <td className="small">{r.locales.join(', ')}{locs.length > 0 && <div className="small muted">{t('games.localeChanges', { list: locs.map(l => `${l.locale} ${t(ACTION_KEY[l.action])}`).join(', ') })}</div>}</td>
+                <td><StoreState on={r.ios} plan={r.apple} read={appleRead} /></td>
+                <td><StoreState on={r.android} plan={r.play} read={playRead} /></td>
+              </tr>
+            );
+          })}
+        </tbody>
+      </table>
+    </div>
+  );
+}
+
+export function GamesTab({ project }: { project: Project }) {
+  const r = useRead<GameServicesStatus>(project.id, 'games.status', { network: true, title: t('gs.title') });
+  const s = r.data;
+  const rows = s?.items ?? [];
+  const appleRead = !!s?.apple && !s.apple.error, playRead = !!s?.play && !s.play.error;
+  const map = s?.localeMap;
+  return (
+    <>
+      {s?.playApiDisabled && (
+        <Notice tone="bad" icon="alertCircle" action={<div className="actions">
+          <button className="btn btn-sm btn-primary" onClick={() => r.refresh()} disabled={r.loading}><Icon name="refresh" className={r.loading ? 'spin' : undefined} />{t('games.checkAgain')}</button>
+          <ConsolePlanButton project={project} form="play-games-services" label={t('gs.setup')} />
+        </div>}>
+          <b>{t('games.apiOffTitle')}</b> {t('games.apiOffText', { api: s.playApiDisabled.title })} <OpenLink url={s.playApiDisabled.url} />
+        </Notice>
+      )}
+      <GameServicesCard project={project} read={r} />
+      <Section title={t('games.itemsTitle')} icon="chart" sub={t('games.itemsSub')}
+        actions={<button className="btn btn-sm" onClick={() => r.refresh()} disabled={r.loading} aria-busy={r.loading}><Icon name="refresh" className={r.loading ? 'spin' : undefined} />{t('games.refresh')}</button>}>
+        {rows.length ? <ItemsTable rows={rows} appleRead={appleRead} playRead={playRead} />
+          : <EmptyState icon="sparkle">{s ? t('games.noItems') : t('games.notReadYet')}</EmptyState>}
+        <p className="small muted" style={{ marginTop: 10 }}>{t('games.images')}</p>
+      </Section>
+      {map && (Object.keys(map.configured).length > 0 || map.suggested.length > 0) && (
+        <Section title={t('games.localeMap')} icon="globe" sub={t('games.localeMapSub')}>
+          <dl className="kv">
+            {Object.entries(map.configured).map(([k, v]) => <Fragment key={`k${k}`}><dt>{k}</dt><dd><span className="mono-id small">{v}</span> <Chip tone="ok">{t('games.mapSet')}</Chip></dd></Fragment>)}
+            {map.suggested.map(x => <Fragment key={`s${x.id}`}><dt>{x.id}</dt><dd><span className="mono-id small">{x.from} → {x.to}</span> <Chip tone="warn">{t('games.mapSuggested')}</Chip></dd></Fragment>)}
+          </dl>
+          {map.suggested.length > 0 && <p className="small muted" style={{ marginTop: 8 }}>{t('games.mapHint', { entries: map.suggested.map(x => `${x.id}: '${x.to}'`).join(', ') })}</p>}
+        </Section>
+      )}
+    </>
+  );
+}
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
index 877b9ca..cfe6af2 100644
--- a/apps/desktop/src/store.tsx
+++ b/apps/desktop/src/store.tsx
@@ -750,3 +750,21 @@ export function useRead<T>(target: string, method: string, o: { network: boolean
 
   return { ...s, loading: !o.skip && (s.loading || st.busy), justNow: st.justNow, pausedUntil: st.pausedUntil, refresh };
 }
+
+/** The cached value of one read (and every later result of it), without ever starting a read: for summaries such as a
+ *  section's "what's next" line that must not cost a store call. Null until the read ran once. */
+export function useCachedRead<T>(target: string | null, method: string, args: Record<string, unknown> = {}): T | null {
+  const d = useData();
+  const argsKey = JSON.stringify(args);
+  const [v, set] = useState<T | null>(null);
+  useEffect(() => {
+    set(null);
+    if (!target) return;
+    let alive = true;
+    const a = JSON.parse(argsKey) as Record<string, unknown>;
+    api.cached<ToolResult>(method, target, a).then(c => { if (alive && c && c.value.data !== undefined && usable(method, c.value)) set(c.value.data as T); }, () => {});
+    const un = d.onRead(readKey(target, method, a), e => { if (e.kind === 'done' && usable(method, e.result)) set(e.result.data as T); });
+    return () => { alive = false; un(); };
+  }, [target, method, argsKey]); // eslint-disable-line react-hooks/exhaustive-deps
+  return v;
+}
diff --git a/apps/desktop/src/ui/GameServicesCard.tsx b/apps/desktop/src/ui/GameServicesCard.tsx
index 3aa77cd..50ae13f 100644
--- a/apps/desktop/src/ui/GameServicesCard.tsx
+++ b/apps/desktop/src/ui/GameServicesCard.tsx
@@ -4,7 +4,7 @@
 // (dry run -> native dialog -> apply) of `apple game-center` and `play games`; the PGS setup is a console plan.
 import type { Project } from '../api';
 import { t } from '../i18n';
-import { useRead, useWrite } from '../store';
+import { type ReadState, useRead, useWrite } from '../store';
 import { ConsolePlanButton } from './ConsolePlan';
 import { StoreGlyph } from './icons';
 import { Card, Chip, ErrorNotice, Skeleton } from './kit';
@@ -18,13 +18,23 @@ export interface GameServicesStatus {
   play: null | { appId: string | null; resource: string | null; config: Counts; changes: string[]; error?: string } & Counts;
   findings: Finding[];
   links: { label: string; url: string }[];
+  items?: GameItemRow[];
+  localeMap?: { configured: Record<string, string>; suggested: { id: string; from: string; to: string }[] };
+  playApiDisabled?: { service: string; title: string; url: string } | null;
+}
+export type GameAction = 'create' | 'update' | 'keep';
+export interface GameItemRow {
+  kind: 'leaderboard' | 'achievement'; id: string; name: string; locales: string[]; points?: number; hidden?: boolean; ios: boolean; android: boolean;
+  apple: { action: GameAction; changed: string[]; locales: { locale: string; action: GameAction }[] } | null;
+  play: { action: GameAction; changed: string[] } | null;
 }
 
 const tone = (l: Finding['level']) => (l === 'error' ? 'bad' : l === 'warn' ? 'warn' : 'ok');
 const yesNo = (v: boolean | null | undefined) => (v === null || v === undefined ? <Chip tone="neutral">{t('gs.unknown')}</Chip> : <Chip tone={v ? 'ok' : 'bad'}>{v ? t('gs.yes') : t('gs.no')}</Chip>);
 
-export function GameServicesCard({ project }: { project: Project }) {
-  const r = useRead<GameServicesStatus>(project.id, 'games.status', { network: true, title: t('gs.title') });
+export function GameServicesCard({ project, read }: { project: Project; read?: ReadState<GameServicesStatus> }) {
+  const own = useRead<GameServicesStatus>(project.id, 'games.status', { network: true, title: t('gs.title'), skip: !!read });
+  const r = read ?? own;
   const w = useWrite(project.id);
   if (!r.data) return r.error ? <ErrorNotice error={r.error} tone="warn" /> : <Card title={t('gs.title')} icon="sparkle"><Skeleton lines={3} block /></Card>;
   const s = r.data;
diff --git a/apps/desktop/src/ui/app-menu.ts b/apps/desktop/src/ui/app-menu.ts
index d82ba47..144e0aa 100644
--- a/apps/desktop/src/ui/app-menu.ts
+++ b/apps/desktop/src/ui/app-menu.ts
@@ -5,7 +5,8 @@ import { t } from '../i18n';
 import { copyText } from '../lib/crash';
 import { withIgnored, withSideIgnored, withUnpair, type UnifiedApp } from '../lib/identity';
 import { setShowIgnored } from '../lib/show-ignored';
-import { type AppTab, type Nav, TAB_ICON, TAB_KEY, tabsFor } from '../nav';
+import { type AppTab, type Nav, SECTION_ICON, SECTION_KEY, sectionsFor, subsOf, TAB_ICON, TAB_KEY } from '../nav';
+import { isGameSummary } from '../lib/model';
 import type { Data } from '../store';
 import type { MenuInput, MenuItem } from './menu-logic';
 import { pickConsoleId, playAppUrl } from '../../../../cli/lib/console-links';
@@ -36,7 +37,12 @@ export function appMenu(app: UnifiedApp, d: Data, nav: Nav, opts: { showIgnored:
   const storeName = (k: 'ios' | 'android') => (k === 'ios' ? 'App Store' : 'Google Play');
   return [
     { label: t('cm.open'), icon: 'arrowRight', onSelect: () => go('releases') },
-    { label: t('cm.openTab'), icon: 'grid', submenu: tabsFor(!!p).map(tab => ({ label: t(TAB_KEY[tab]), icon: TAB_ICON[tab], onSelect: () => go(tab) })) },
+    { label: t('cm.openTab'), icon: 'grid', submenu: sectionsFor(!!p, isGameSummary(d.statusFor(app)?.summary)).map((sec, i) => {
+      const subs = subsOf(sec, !!p, isGameSummary(d.statusFor(app)?.summary));
+      return subs.length > 1
+        ? { label: t(SECTION_KEY[sec]), icon: SECTION_ICON[sec], shortcut: String(i + 1), submenu: subs.map(tab => ({ label: t(TAB_KEY[tab]), icon: TAB_ICON[tab], onSelect: () => go(tab) })) }
+        : { label: t(SECTION_KEY[sec]), icon: SECTION_ICON[sec], shortcut: String(i + 1), onSelect: () => go(subs[0]!) };
+    }) },
     'sep',
     (ios || android) && { label: t('cm.openConsole'), icon: 'external', submenu: [
       ios && { label: 'App Store Connect', icon: 'external', onSelect: () => openUrl(d, ASC_APP(ios.id)) },
diff --git a/apps/desktop/src/ui/ds.tsx b/apps/desktop/src/ui/ds.tsx
index b38aa8b..6460ba2 100644
--- a/apps/desktop/src/ui/ds.tsx
+++ b/apps/desktop/src/ui/ds.tsx
@@ -275,7 +275,7 @@ export function Toolbar({ label, children }: { label: string; children: ReactNod
   return <div className="ds-toolbar" role="toolbar" aria-label={label}>{children}</div>;
 }
 
-export interface TabItem<T extends string> { id: T; label: string; icon?: IconName; count?: number | null; dot?: boolean; dotTitle?: string }
+export interface TabItem<T extends string> { id: T; label: string; icon?: IconName; count?: number | null; dot?: boolean; dotTitle?: string; /** A keyboard hint shown in the tab ("1"). */ hint?: string }
 
 /** Pill tabs with icons and counts; arrows / Home / End move between them (roving tabindex). One row always: tabs that
  *  do not fit go into a "More" menu at the end, the active tab always stays in the row. */
@@ -323,11 +323,12 @@ export function Tabs<T extends string>({ items, value, onChange, label, panelId
   return (
     <div className="ds-tabs" ref={row} role="tablist" aria-label={label} onKeyDown={onKey}>
       {items.map((x, i) => (
-        <button key={x.id} ref={el => { refs.current[i] = el; }} role="tab" id={`tab-${x.id}`} aria-selected={value === x.id} aria-controls={panelId}
+        <button key={x.id} ref={el => { refs.current[i] = el; }} role="tab" id={`tab-${x.id}`} aria-selected={value === x.id} aria-controls={panelId} aria-keyshortcuts={x.hint}
           tabIndex={value === x.id ? 0 : -1} className="ds-tab" onClick={() => onChange(x.id)} hidden={!visible(i)}>
           {x.icon && <Icon name={x.icon} weight={value === x.id ? 'fill' : 'regular'} />}{x.label}
           {x.count != null && x.count > 0 && <span className="ds-tab-n num">{x.count}</span>}
           {x.dot && <span className="ed-dot" title={x.dotTitle} />}
+          {x.hint && <kbd className="ds-tab-k" aria-hidden="true">{x.hint}</kbd>}
         </button>
       ))}
       {hidden.length > 0 && (
diff --git a/apps/desktop/tests/sections.test.ts b/apps/desktop/tests/sections.test.ts
new file mode 100644
index 0000000..e5a6494
--- /dev/null
+++ b/apps/desktop/tests/sections.test.ts
@@ -0,0 +1,79 @@
+// App sections (docs IA): old tab ids and section links resolve to one place, the sections an app has, the "what's
+// next" line of each section and the sidebar's status line.
+import { describe, expect, test } from 'bun:test';
+import type { StoreRelease } from '../src/api';
+import type { Attention } from '../src/lib/model';
+import { isGameSummary, sideStatus } from '../src/lib/model';
+import { listingProblems, type SectionInput, sectionNext } from '../src/lib/sections';
+import { APP_TABS, parseRouteJson, parseStart, placeOf, SECTION_TABS, SECTIONS, sectionOf, sectionsFor, subsOf } from '../src/nav';
+
+const rel = (store: 'ios' | 'android', version: string, phase: StoreRelease['phase'], o: Partial<StoreRelease> = {}): StoreRelease =>
+  ({ store, version, phase, fraction: null, track: null, ...o }) as StoreRelease;
+const base: SectionInput = { project: true, att: [], all: [], next: null, summary: null, catalog: null, unsaved: 0, listings: null, reviews: null, games: null };
+const att = (tone: Attention['tone'], tab: Attention['tab'], text = 'x'): Attention => ({ app: 'A', projectId: 'a', tone, text, tab });
+
+describe('places', () => {
+  test('every old tab id is in exactly one section', () => {
+    for (const tab of APP_TABS) expect(SECTIONS.filter(s => SECTION_TABS[s].includes(tab))).toHaveLength(1);
+  });
+  test('old tab ids, sections and section/sub links', () => {
+    expect(placeOf('prices')).toBe('prices');
+    expect(placeOf('revenue')).toBe('catalog');
+    expect(placeOf('store/art')).toBe('art');
+    expect(placeOf('store/prices')).toBe('listings');
+    expect(placeOf('health')).toBe('health');
+    expect(placeOf('nope')).toBe('releases');
+    expect(parseStart('app:players/games:2', ['a', 'b'])).toEqual({ screen: 'app', appId: 'b', tab: 'games' });
+    expect(parseStart('app:release', ['a'])).toEqual({ screen: 'app', appId: 'a', tab: 'releases' });
+    expect(parseRouteJson('{"screen":"app","appId":"k","tab":"store/appinfo"}')).toEqual({ screen: 'app', appId: 'k', tab: 'appinfo' });
+    expect(sectionOf('testflight')).toBe('release');
+  });
+  test('store-only apps have no Revenue; Game services only for games with a folder', () => {
+    expect(sectionsFor(false)).toEqual(['release', 'store', 'players', 'health']);
+    expect(subsOf('players', true, false)).toEqual(['reviews']);
+    expect(subsOf('players', true, true)).toEqual(['reviews', 'games']);
+    expect(subsOf('players', false, true)).toEqual(['reviews']);
+    expect(subsOf('store', false)).toEqual(['listings', 'art']);
+  });
+  test('a game: profile, games config or a Play game category', () => {
+    expect(isGameSummary({ profile: 'app' } as never)).toBe(false);
+    expect(isGameSummary({ profile: 'game' } as never)).toBe(true);
+    expect(isGameSummary({ profile: 'app', games: { gameCenter: true, playGames: false, leaderboards: 0, achievements: 0 } } as never)).toBe(true);
+    expect(isGameSummary({ profile: 'app', playRelease: { managedPublishing: null, countries: null, category: 'Puzzle' } } as never)).toBe(true);
+  });
+});
+
+describe('next step per section', () => {
+  test('release: rejected first, then blockers, rollout, review (managed), upload, live', () => {
+    expect(sectionNext('release', { ...base, all: [rel('ios', '2.1', 'rejected')], att: [att('bad', 'checks')] })).toMatchObject({ tone: 'bad', tab: 'releases' });
+    expect(sectionNext('release', { ...base, att: [att('bad', 'checks'), att('bad', 'checks')] })).toMatchObject({ text: '2 blockers before submit', tab: 'checks' });
+    expect(sectionNext('release', { ...base, all: [rel('android', '3.0', 'rollout', { fraction: 0.2 })] }).text).toContain('20');
+    expect(sectionNext('release', { ...base, all: [rel('ios', '2.1', 'review', { managed: true })] }).text).toContain('Publishing overview');
+    expect(sectionNext('release', base)).toMatchObject({ tab: 'releases', text: 'Upload a first build' });
+    expect(sectionNext('release', { ...base, all: [rel('ios', '2.1', 'live')] })).toMatchObject({ tone: 'ok', tab: null });
+  });
+  test('store, revenue, players, health', () => {
+    const listings = { files: { play: null, apple: null }, problems: [], locales: [{ lang: 'en', rtl: false, screenshots: null, complete: 0.5, apple: null, play: { code: 'en-US', fields: [{ field: 'title', length: 0, limit: 30, required: true, state: 'missing' }] } }] } as never;
+    expect(listingProblems(listings)).toBe(1);
+    expect(sectionNext('store', { ...base, listings })).toMatchObject({ text: '1 listing problem', tab: 'listings' });
+    expect(sectionNext('revenue', base).tab).toBe('catalog');
+    expect(sectionNext('revenue', { ...base, catalog: { checked: 'live', ok: false, products: 2, subscriptions: 0, onlyIos: ['a'], onlyAndroid: [], missingIos: [], missingAndroid: ['b'] } })).toMatchObject({ tone: 'warn', text: '2 products differ between the stores' });
+    expect(sectionNext('players', { ...base, reviews: [{}, { reply: { text: 'hi' } }, {}] })).toMatchObject({ text: '2 reviews without a reply', tab: 'reviews' });
+    expect(sectionNext('players', { ...base, reviews: [], games: { changes: 0, blockers: 0, apiOff: true } })).toMatchObject({ tone: 'bad', tab: 'games' });
+    expect(sectionNext('players', { ...base, reviews: [] }).tone).toBe('ok');
+    expect(sectionNext('health', { ...base, att: [att('bad', 'health', 'Crash rate over the line')] })).toMatchObject({ text: 'Crash rate over the line', tab: 'health' });
+    expect(sectionNext('health', { ...base, att: [att('bad', 'checks')] })).toMatchObject({ text: '1 problem to fix first', tab: 'checks' });
+  });
+});
+
+describe('sidebar status line', () => {
+  const o = { att: [] as Attention[], all: [] as StoreRelease[], read: true, missing: false, storeOnly: false };
+  test('groups and lines', () => {
+    expect(sideStatus({ ...o, all: [rel('ios', '2.1', 'rejected')] })).toEqual({ group: 'attention', text: 'Rejected · iOS 2.1', tone: 'bad' });
+    expect(sideStatus({ ...o, att: [att('bad', 'checks'), att('bad', 'checks')] })).toMatchObject({ group: 'attention', text: '2 blockers' });
+    expect(sideStatus({ ...o, all: [rel('ios', '2.1', 'review'), rel('android', '2.0', 'live')] })).toMatchObject({ group: 'progress', text: 'In review · iOS 2.1' });
+    expect(sideStatus({ ...o, all: [rel('ios', '2.1', 'live'), rel('android', '2.1', 'live')] })).toEqual({ group: 'live', text: 'Live · 2.1', tone: 'ok' });
+    expect(sideStatus({ ...o, read: false })).toMatchObject({ group: 'draft', text: 'Not read yet' });
+    expect(sideStatus({ ...o, missing: true })).toMatchObject({ group: 'attention', text: 'Folder missing' });
+  });
+});
diff --git a/cli/games-status.ts b/cli/games-status.ts
index 5a06489..814732c 100644
--- a/cli/games-status.ts
+++ b/cli/games-status.ts
@@ -7,7 +7,8 @@ import { ascClient } from './apple/asc';
 import { readProjectEntitlements } from './apple/signing';
 import type { Loaded } from './lib/config';
 import { consoleUrl } from './lib/console-links';
-import { type Finding, gamesPrivacyFindings, gcFindings, hasAndroidProject, planGameCenter, planPlayGames, pgsFindings, readPgsProject, usesPlayGames } from './lib/game-services';
+import { type Action, type Finding, gamesPrivacyFindings, gcFindings, hasAndroidProject, type ItemPlan, liveGcLocales, onStore, planGameCenter, planPlayGames, pgsFindings, readPgsProject, suggestLocaleMap, usesPlayGames } from './lib/game-services';
+import { parseGoogleError } from './lib/google-errors';
 import type { Finding as VFinding } from './lib/validate-rules';
 import { gamesConfigClient, playDefaultLocale, readPlayGames } from './play/games';
 
@@ -18,6 +19,33 @@ export interface GameServicesStatus {
     config: { leaderboards: number; achievements: number }; changes: string[]; error?: string };
   findings: (Finding & { store: 'apple' | 'play' })[];
   links: { label: string; url: string }[];
+  /** One row per configured leaderboard / achievement: its texts and where each store stands against the config
+   *  (create / update / keep; null = not on that store or that store was not read). */
+  items?: GameItemRow[];
+  /** Game Center locale map: the configured entries and the suggestions from the live locales. */
+  localeMap?: { configured: Record<string, string>; suggested: { id: string; from: string; to: string }[] };
+  /** Play: the Games Configuration API is off in the service account's Cloud project. */
+  playApiDisabled?: { service: string; title: string; url: string } | null;
+}
+
+export interface GameItemRow {
+  kind: 'leaderboard' | 'achievement'; id: string; name: string; locales: string[]; points?: number; hidden?: boolean;
+  ios: boolean; android: boolean;
+  apple: { action: Action; changed: string[]; locales: { locale: string; action: Action }[] } | null;
+  play: { action: Action; changed: string[] } | null;
+}
+
+/** The per-item rows of the status (pure; plans are null when that store was not read). */
+export function gameItemRows(g: NonNullable<Loaded['config']['games']>, applePlan: ItemPlan[] | null, playPlan: ItemPlan[] | null): GameItemRow[] {
+  const find = (plan: ItemPlan[] | null, kind: ItemPlan['kind'], id: string) => plan?.find(p => p.kind === kind && p.id === id) ?? null;
+  const row = (kind: ItemPlan['kind'], x: { id: string; locales: Record<string, { name: string }>; platforms?: ('ios' | 'android')[] }, extra: Partial<GameItemRow>): GameItemRow => {
+    const a = find(applePlan, kind, x.id), p = find(playPlan, kind, x.id);
+    return { kind, id: x.id, name: Object.values(x.locales)[0]?.name ?? x.id, locales: Object.keys(x.locales), ...extra,
+      ios: onStore(x, 'apple'), android: onStore(x, 'play'),
+      apple: a ? { action: a.action, changed: a.changed, locales: a.locales.map(l => ({ locale: l.locale, action: l.action })) } : null,
+      play: p ? { action: p.action, changed: p.changed } : null };
+  };
+  return [...(g.leaderboards ?? []).map(l => row('leaderboard', l, {})), ...(g.achievements ?? []).map(a => row('achievement', a, { points: a.points, hidden: !!a.hidden }))];
 }
 
 /** Offline findings (check, scan-like): entitlement, APP_ID resource, declarations reminders. */
@@ -37,7 +65,8 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
   const { config, root } = loaded;
   const g = config.games ?? {};
   const findings = localGameFindings(loaded);
-  const out: GameServicesStatus = { apple: null, play: null, findings, links: [] };
+  const out: GameServicesStatus = { apple: null, play: null, findings, links: [], localeMap: { configured: { ...(g.localeMap ?? {}) }, suggested: [] }, playApiDisabled: null };
+  let applePlan: ItemPlan[] | null = null, playPlan: ItemPlan[] | null = null;
   const count = (store: 'apple' | 'play') => ({ leaderboards: (g.leaderboards ?? []).filter(x => !x.platforms || x.platforms.includes(store === 'apple' ? 'ios' : 'android')).length,
     achievements: (g.achievements ?? []).filter(x => !x.platforms || x.platforms.includes(store === 'apple' ? 'ios' : 'android')).length });
   const gcUse = config.apple ? gameCenterInUse(config, root) : { inUse: false, why: null };
@@ -46,8 +75,10 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
     try {
       const c = await ascClient(root, config.apple.bundleId, config.apple.appId);
       const s = await readGameCenter(c, config.apple.bundleId);
+      applePlan = planGameCenter(g, config.languages, s, g.localeMap);
+      out.localeMap!.suggested = suggestLocaleMap(config.languages, liveGcLocales(s), g.localeMap ?? {});
       out.apple = { capability: s.capability, enabled: !!s.detail, version: s.version?.versionString ?? null, versionEnabled: s.version ? s.version.enabled : null,
-        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(planGameCenter(g, config.languages, s, g.localeMap)), why: gcUse.why ?? undefined };
+        leaderboards: s.leaderboards.length, achievements: s.achievements.length, config: count('apple'), changes: changesOf(applePlan), why: gcUse.why ?? undefined };
     } catch (e) { out.apple = { capability: null, enabled: false, version: null, versionEnabled: null, leaderboards: 0, achievements: 0, config: count('apple'), changes: [], error: (e as Error).message.slice(0, 300) }; }
   }
   if (config.play && usesPlayGames(config) && o.play !== false) {
@@ -58,9 +89,14 @@ export async function gameServicesStatus(loaded: Loaded, o: { apple?: boolean; p
     if (!appId) out.play = { ...base, leaderboards: 0, achievements: 0, changes: [], error: 'no games project id yet (storebound console plan play-games-services)' };
     else try {
       const have = await readPlayGames(gamesConfigClient(root), appId);
-      out.play = { ...base, leaderboards: have.leaderboards.length, achievements: have.achievements.length, changes: changesOf(planPlayGames(g, config.languages, playDefaultLocale(config), have)) };
-    } catch (e) { out.play = { ...base, leaderboards: 0, achievements: 0, changes: [], error: (e as Error).message.slice(0, 300) }; }
+      playPlan = planPlayGames(g, config.languages, playDefaultLocale(config), have);
+      out.play = { ...base, leaderboards: have.leaderboards.length, achievements: have.achievements.length, changes: changesOf(playPlan) };
+    } catch (e) {
+      const f = parseGoogleError((e as Error).message);
+      if (f?.kind === 'api-disabled') out.playApiDisabled = { service: f.service, title: f.serviceTitle, url: f.activationUrl };
+      out.play = { ...base, leaderboards: 0, achievements: 0, changes: [], error: (e as Error).message.slice(0, 300) }; }
   }
+  out.items = gameItemRows(g, applePlan, playPlan);
   return out;
 }
 
diff --git a/cli/inspect.ts b/cli/inspect.ts
index 4c2e7d5..e3313d9 100644
--- a/cli/inspect.ts
+++ b/cli/inspect.ts
@@ -44,6 +44,7 @@ export function summarize(ctx: Ctx): ProjectSummary {
     variants: Object.keys(config.shots?.variants ?? {}),
     playReports: !!config.play?.reportsBucket,
     playRelease: config.play ? { managedPublishing: config.play.managedPublishing ?? null, countries: config.play.countries?.length ?? null, category: playCategoryOf(config)?.category ?? null } : null,
+    games: config.games ? { gameCenter: config.games.gameCenter === true, playGames: !!config.games.playGames, leaderboards: config.games.leaderboards?.length ?? 0, achievements: config.games.achievements?.length ?? 0 } : null,
   };
 }
 
diff --git a/cli/lib/desktop-protocol.ts b/cli/lib/desktop-protocol.ts
index 58a2582..1a174d5 100644
--- a/cli/lib/desktop-protocol.ts
+++ b/cli/lib/desktop-protocol.ts
@@ -148,6 +148,8 @@ export interface ProjectSummary {
   /** Play production settings from the config: play.managedPublishing (null: not set, Play's default off), the number
    *  of play.countries (null: all countries / regions) and the App category (play.category or the App Store match). */
   playRelease?: { managedPublishing: boolean | null; countries: number | null; category: string | null } | null;
+  /** The games section of the config (Game Center / Play Games Services and the item counts), null without one. */
+  games?: { gameCenter: boolean; playGames: boolean; leaderboards: number; achievements: number } | null;
 }
 
 // ---- App-centric model (one app = one product on up to two platforms; a workspace holds many apps) ----
diff --git a/tests/game-services.test.ts b/tests/game-services.test.ts
index 636bcd8..8554834 100644
--- a/tests/game-services.test.ts
+++ b/tests/game-services.test.ts
@@ -8,7 +8,7 @@ import { capabilitySpecs, planCapabilities } from '../cli/lib/signing';
 import { gamesPrivacyFindings, gcFindings, gcLocaleMap, liveGcLocales, suggestLocaleMap, pgsFindings, planGameCenter, playAchievementBody, playLeaderboardBody, readPgsProject, validateGames } from '../cli/lib/game-services';
 import { consolePlan } from '../cli/lib/console-plan';
 import { verifyText } from '../cli/lib/console-verify';
-import { gameServicesFindings, type GameServicesStatus } from '../cli/games-status';
+import { gameItemRows, gameServicesFindings, type GameServicesStatus } from '../cli/games-status';
 import { run as gameCenter } from '../cli/apple/game-center';
 import { run as playGames } from '../cli/play/games';
 import { run as appleSubmit } from '../cli/apple/submit';
@@ -298,3 +298,15 @@ describe('apple submit with a Game Center build (live 409 STATE_ERROR.BUILD_INDI
     expect(s.asc.all('gameCenterAppVersions')).toHaveLength(1);
   });
 });
+
+describe('games status rows (desktop Players section)', () => {
+  test('one row per item, store states from the plans, null when a store was not read', () => {
+    const g = { leaderboards: [{ id: 'com.example.lb', locales: { en: { name: 'Best' } } }], achievements: [{ id: 'com.example.a1', points: 10, hidden: true, platforms: ['android' as const], locales: { en: { name: 'First', description: 'd' } } }] };
+    const plan = [{ kind: 'leaderboard' as const, id: 'com.example.lb', action: 'update' as const, attributes: {}, changed: ['scoreSortType'], locales: [{ locale: 'en-US', action: 'create' as const, attributes: {}, changed: [] }] }];
+    const rows = gameItemRows(g, plan, null);
+    expect(rows.map(r => [r.kind, r.id, r.name, r.ios, r.android])).toEqual([['leaderboard', 'com.example.lb', 'Best', true, true], ['achievement', 'com.example.a1', 'First', false, true]]);
+    expect(rows[0]!.apple).toEqual({ action: 'update', changed: ['scoreSortType'], locales: [{ locale: 'en-US', action: 'create' }] });
+    expect(rows[0]!.play).toBeNull();
+    expect(rows[1]).toMatchObject({ points: 10, hidden: true, apple: null });
+  });
+});
diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index 6f7ced0..1943097 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -244,20 +244,51 @@ async function newPage(ctx: { newPage(): Promise<import('playwright').Page> }):
   return page;
 }
 
-/** Opens an app tab like a person: the tab itself when it is in the row, else through the row's "More" menu (tabs
- *  that do not fit the window go there). */
+/** The app's places (docs IA): five sections, each with sub views in a segmented control. A place is named by its
+ *  sub view's old tab id ("tab-prices"); the section of each, for opening it like a person. */
+const SECTION_OF: Record<string, string> = {
+  releases: 'release', testflight: 'release', listings: 'store', art: 'store', appinfo: 'store', catalog: 'revenue', prices: 'revenue',
+  reviews: 'players', games: 'players', health: 'health', growth: 'health', checks: 'health', tools: 'health',
+};
+
+/** Opens a place in an app like a person: its section in the section row (or through the row's "More" menu when it
+ *  does not fit), then the sub view in the section's segmented control when the section has more than one. */
 async function clickTab(page: Page, id: string, o: { timeout?: number } = {}): Promise<void> {
-  const tab = page.locator(`[role="tab"]#${id}`);
+  const sub = id.replace(/^tab-/, '');
+  const sec = SECTION_OF[sub];
+  if (!sec) throw new Error(`unknown place ${id}`);
+  const tab = page.locator(`[role="tab"]#tab-${sec}`);
   await tab.waitFor({ state: 'attached', timeout: o.timeout });
-  if (await tab.isVisible()) { await tab.click(o); return; }
-  const label = ((await tab.textContent()) ?? '').replace(/\d+$/, '').trim();
-  try {
-    await page.locator('.ds-tab-more').click(o);
-    await page.locator('.ds-menu [role="menuitem"]', { hasText: label }).first().click(o);
-  } catch (e) {
-    const why = await page.evaluate(() => JSON.stringify({ more: document.querySelectorAll('.ds-tab-more').length, menu: [...document.querySelectorAll('.ds-menu [role^="menuitem"]')].map(x => x.textContent), w: innerWidth }));
-    throw new Error(`${String(e).split('\n')[0]} (${label}; ${why})`);
+  if (await tab.isVisible()) await tab.click(o);
+  else {
+    const label = ((await tab.textContent()) ?? '').replace(/\d+$/, '').trim();
+    try {
+      await page.locator('.ds-tab-more').click(o);
+      await page.locator('.ds-menu [role="menuitem"]', { hasText: label }).first().click(o);
+    } catch (e) {
+      const why = await page.evaluate(() => JSON.stringify({ more: document.querySelectorAll('.ds-tab-more').length, menu: [...document.querySelectorAll('.ds-menu [role^="menuitem"]')].map(x => x.textContent), w: innerWidth }));
+      throw new Error(`${String(e).split('\n')[0]} (${label}; ${why})`);
+    }
   }
+  const btn = page.locator(`.sec-subs #sub-${sub}`);
+  if (await btn.count()) { await btn.click(o); return; }
+  // a section with one sub view has no segmented control: the section itself is the place
+  if (await page.locator('.sec-subs button').count()) throw new Error(`${id}: not in the ${sec} section's views`);
+}
+
+/** Every place of the open app, in order: each section, then each of its sub views (as clickTab ids). */
+async function places(page: Page, o: { timeout?: number } = {}): Promise<string[]> {
+  const secs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id.replace(/^tab-/, '')));
+  const out: string[] = [];
+  for (const sec of secs) {
+    await page.locator(`[role="tab"]#tab-${sec}`).click(o).catch(() => {});
+    await page.locator('[data-testid="section-head"]').waitFor({ state: 'visible', timeout: o.timeout }).catch(() => {});
+    const subs = await page.locator('.sec-subs button').evaluateAll(bs => bs.map(b => b.id.replace(/^sub-/, '')));
+    const first = Object.entries(SECTION_OF).find(([, s]) => s === sec)?.[0];
+    // a one-view section: its only view (Players without games is Reviews)
+    out.push(...(subs.length ? subs : first ? [first] : []).map(x => `tab-${x}`));
+  }
+  return out;
 }
 
 async function state(page: Page) {
@@ -342,10 +373,12 @@ async function runCase(browser: Browser, name: string, sidecar: Sidecar, o: { br
       if (await wizard.count()) problems.push('the welcome guide does not close with Escape');
     }
     // every sidebar entry: the portfolio, each app (folders that are gone included), each workspace screen
-    const count = await page.locator('nav.side button.nav').count();
+    // (apps are .nav rows; the workspace is the footer's icon row, named by aria-label)
+    const SIDE = 'nav.side button.nav, nav.side button.nav-ws';
+    const count = await page.locator(SIDE).count();
     for (let i = 0; i < count; i++) {
-      const b = page.locator('nav.side button.nav').nth(i);
-      const label = ((await b.innerText().catch(() => '')) || `entry ${i}`).split('\n')[0]!.trim();
+      const b = page.locator(SIDE).nth(i);
+      const label = ((await b.getAttribute('aria-label').catch(() => null)) || (await b.innerText().catch(() => '')) || `entry ${i}`).split('\n')[0]!.trim();
       await b.click({ timeout: WAIT_MS }).catch(e => problems.push(`could not open ${label}: ${String(e).split('\n')[0]}`));
       await settle(page);
       await check(label);
@@ -365,7 +398,7 @@ async function runCase(browser: Browser, name: string, sidecar: Sidecar, o: { br
     // shared with the CLI: each account names its credential profile (or that its old keychain key has not moved)
     const accts = fx.accounts_list as { label?: string; profile?: string | null }[];
     if (accts.length) {
-      const nav = page.locator('nav.side button.nav', { hasText: 'Accounts' }).first();
+      const nav = page.locator('nav.side [data-screen="accounts"]').first();
       if (await nav.count()) {
         await nav.click({ timeout: WAIT_MS });
         await settle(page);
@@ -510,8 +543,8 @@ async function runSubmitCase(browser: Browser, sidecar: Sidecar, base: 'd3-full'
     await gone(page, '.cp-panel');
     await crashCheck('Releases');
     visited++;
-    // every tab of the app, then App info's console steps and the Dependencies screen
-    const tabs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id));
+    // every place of the app (each section and its sub views), then App info's console steps and Dependencies
+    const tabs = await places(page, { timeout: WAIT_MS });
     for (const id of tabs) {
       await clickTab(page, id, { timeout: WAIT_MS }).catch(e => problems.push(`tab ${id}: ${String(e).split('\n')[0]}`));
       await settle(page);
@@ -524,7 +557,7 @@ async function runSubmitCase(browser: Browser, sidecar: Sidecar, base: 'd3-full'
       if (id === 'tab-testflight' && !(await text()).length) problems.push('TestFlight: empty');
     }
     notes.push(`tabs: ${tabs.join(', ')}`);
-    const deps = page.locator('nav.side button.nav', { hasText: 'Dependencies' }).first();
+    const deps = page.locator('nav.side [data-screen="dependencies"]').first();
     await deps.click({ timeout: WAIT_MS }).catch(() => {});
     await shows(page, '#content', 'Android SDK');
     await settle(page);
@@ -710,7 +743,7 @@ async function runAutoReadCase(browser: Browser): Promise<CaseResult> {
       await page.locator('nav.side .nav-app:visible').nth(i).click({ timeout: WAIT_MS }).catch(e => problems.push(`app ${i}: ${String(e).split('\n')[0]}`));
       await settle(page);
       const appName = (await page.locator('nav.side .nav-app:visible').nth(i).innerText().catch(() => `app ${i}`)).split('\n')[0]!.trim();
-      const tabs = await page.locator('[role="tab"]').evaluateAll(ts => ts.map(x => x.id));
+      const tabs = await places(page, { timeout: WAIT_MS });
       for (const id of tabs) {
         await clickTab(page, id, { timeout: WAIT_MS }).catch(e => problems.push(`${appName} ${id}: ${String(e).split('\n')[0]}`));
         await settle(page);

From 5b6e0992ca6c3632eb76b47494a08a8acd835b28 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:05:40 +0800
Subject: [PATCH 150/255] desktop: boot check finds unsaved marks on the sub
 views; neutral next-step lines before a read

---
 apps/desktop/src/i18n/en.ts | 4 ++--
 apps/desktop/src/i18n/tr.ts | 4 ++--
 tools/desktop-boot-check.ts | 6 +++---
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index c4f37ed..9c5642b 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2140,7 +2140,7 @@ export const en = {
   "next.managed": "{version} waits in Publishing overview (managed publishing)",
   "next.upload": "Upload a first build",
   "next.live": "Live: {version}",
-  "next.notRead": "Stores not read yet",
+  "next.notRead": "Release state shows once the stores are read",
   "next.storeLive": "The live store page, read from the stores",
   "next.listingProblems": "{count} listing problems",
   "next.listingProblems_one": "1 listing problem",
@@ -2154,7 +2154,7 @@ export const en = {
   "next.products": "{products} products · {subs} subscriptions",
   "next.reviews": "{count} reviews without a reply",
   "next.reviews_one": "1 review without a reply",
-  "next.reviewsUnread": "Reviews not read yet",
+  "next.reviewsUnread": "See what players say",
   "next.reviewsOk": "All reviews answered",
   "next.gamesApiOff": "Play Games Services API is off",
   "next.gamesBlockers": "{count} game services blockers",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index e19a2e7..6872f6b 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2142,7 +2142,7 @@ export const tr: Record<keyof typeof en, string> = {
   "next.managed": "{version} Yayınlama özeti'nde bekliyor (yönetilen yayınlama)",
   "next.upload": "İlk build'i yükle",
   "next.live": "Yayında: {version}",
-  "next.notRead": "Mağazalar henüz okunmadı",
+  "next.notRead": "Yayın durumu mağazalar okununca görünür",
   "next.storeLive": "Mağazalardan okunan canlı mağaza sayfası",
   "next.listingProblems": "{count} mağaza metni sorunu",
   "next.listingProblems_one": "1 mağaza metni sorunu",
@@ -2156,7 +2156,7 @@ export const tr: Record<keyof typeof en, string> = {
   "next.products": "{products} ürün · {subs} abonelik",
   "next.reviews": "{count} yorum yanıtsız",
   "next.reviews_one": "1 yorum yanıtsız",
-  "next.reviewsUnread": "Yorumlar henüz okunmadı",
+  "next.reviewsUnread": "Oyuncuların söylediklerine bak",
   "next.reviewsOk": "Tüm yorumlar yanıtlandı",
   "next.gamesApiOff": "Play Games Services API kapalı",
   "next.gamesBlockers": "{count} oyun servisi engeli",
diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index 1943097..cc4d1e4 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -976,7 +976,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     if (!over.includes('42 / 30')) problems.push(`no live counter "42 / 30" (${over.slice(0, 200)})`);
     if (!over.includes('subtitle is 42 characters; the App Store takes 30')) problems.push('no limit check while typing');
     else notes.push('typing: counter 42 / 30 and "the App Store takes 30"');
-    if (!(await page.locator('#tab-listings .ed-dot').count())) problems.push('the Listings tab has no unsaved mark');
+    if (!(await page.locator('#sub-listings .ed-dot').count())) problems.push('the Listings tab has no unsaved mark');
     // undo goes back to the saved text, redo brings the edit back
     await page.locator('[data-edit-bar="listings"] button', { hasText: 'Undo' }).click({ timeout: WAIT_MS });
     const undone = await page.locator(field).inputValue();
@@ -993,7 +993,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     }
     await page.locator('[data-edit-bar="listings"] button', { hasText: 'Save to the app folder' }).click({ timeout: WAIT_MS })
       .catch(async e => problems.push(`no enabled Save button: ${String(e).split('\n')[0]} (${(await text('[data-edit-bar="listings"]')).slice(0, 600)})`));
-    await page.waitForFunction(() => !document.querySelector('#tab-listings .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('the unsaved mark stays after Save'));
+    await page.waitForFunction(() => !document.querySelector('#sub-listings .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('the unsaved mark stays after Save'));
     await settle(page);
     const md = readFileSync(appstore, 'utf8');
     const changed = md.split('\n').filter((l, i) => l !== before.md.split('\n')[i]);
@@ -1022,7 +1022,7 @@ async function runEditorCase(browser: Browser, sidecar: Sidecar): Promise<CaseRe
     if (!(await shows(page, '[data-edit-bar="appinfo"] [data-edit-plan]', 'apple.info.reviewNotes'))) problems.push(`App info: no review plan (${(await text('[data-edit-bar="appinfo"]')).slice(0, 400)})`);
     await page.locator('[data-edit-bar="appinfo"] button', { hasText: 'Save to the app folder' }).click({ timeout: WAIT_MS })
       .catch(async e => problems.push(`App info: no enabled Save button: ${String(e).split('\n')[0]} (${(await text('[data-edit-bar="appinfo"]')).slice(0, 600)})`));
-    await page.waitForFunction(() => !document.querySelector('#tab-appinfo .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('App info: the unsaved mark stays after Save'));
+    await page.waitForFunction(() => !document.querySelector('#sub-appinfo .ed-dot'), null, { timeout: WAIT_MS, polling: 50 }).catch(() => problems.push('App info: the unsaved mark stays after Save'));
     const cfg = readFileSync(join(dir, 'storebound.config.ts'), 'utf8');
     const cfgChanged = cfg.split('\n').filter((l, i) => l !== before.cfg.split('\n')[i]);
     if (!cfg.includes("reviewNotes: 'Sign in with the demo account.'") || cfgChanged.length !== 1 || !cfg.includes('// storebound config of the demo app')) problems.push(`storebound.config.ts: expected one changed line with reviewNotes and the comments kept, got ${JSON.stringify(cfgChanged).slice(0, 300)}`);

From 445ab1adbc1523b6d7588297735b24c8dc62e0a8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:02:35 +0800
Subject: [PATCH 151/255] apple signing: every signable target (extensions, App
 Group check), build keychain unlock over SSH, api confirm docs

---
 CHANGELOG.md                   |   6 +
 cli/api.ts                     |   4 +-
 cli/api/gate.ts                |   4 +-
 cli/api/wrapped.gen.ts         |   2 +-
 cli/apple/build-mas.ts         |   4 +-
 cli/apple/build.ts             |  65 ++++++-
 cli/apple/signing.ts           | 159 +++++++++++++--
 cli/data/flags.json            |  22 ++-
 cli/lib/keychain.ts            |  45 +++++
 cli/lib/signing.ts             |  29 ++-
 cli/lib/targets.ts             | 138 +++++++++++++
 cli/lib/xcode.ts               |   4 +-
 docs/api-coverage.md           |   2 +-
 skills/build-and-sign/SKILL.md |   9 +-
 skills/store-api/SKILL.md      |   4 +-
 skills/store-pitfalls/SKILL.md |  36 +++-
 tests/signing-targets.test.ts  | 341 +++++++++++++++++++++++++++++++++
 17 files changed, 832 insertions(+), 42 deletions(-)
 create mode 100644 cli/lib/keychain.ts
 create mode 100644 cli/lib/targets.ts
 create mode 100644 tests/signing-targets.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1a36300..5a15c38 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@
 - `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
 - `shots check` / `shots render` without frames for a language that has copy use the default language's frames (an info line, no failure); `shots.perLanguageFrames: true` requires per-language frames. `shots fonts --lang en,tr` limits the report to those languages (the font manifest keeps all of them).
 - `shots capture` web shots take `waitSelector` and `click` selector lists per layout (`{ phone, tablet, any }`, data attributes first, `text=` fallback). A miss names the selector and the size with every candidate's match count; `shots capture --dry` prints the candidates per size and `--dry --probe` opens the pages and reports which one matched or MISSed on which size.
+||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
+
+- `apple signing ensure` signs every target of the Xcode project, not only the app: it reads the pbxproj targets (app, app extensions such as a share extension or widget, watch app, App Clip: Release PRODUCT_BUNDLE_IDENTIFIER and entitlements), registers each extension's bundle id (`POST /v1/bundleIds`, platform from the profile type), enables the capabilities its entitlements need (read back) and, with manual signing, creates its App Store profile; `--dry` lists every target. `apple.signing.extensions` (`bundleId`, `name`, `capabilities`, `appGroups`) replaces the detected extensions when detection is wrong; `status` shows a target table.
+- App Groups: the API cannot assign a group to a bundle id, so `signing status` / `ensure` and (manual signing) `apple build` decode the profile and compare its `com.apple.security.application-groups` with the target's entitlements; a gap names the developer portal link (`.../identifiers/bundleId/edit/<id>`) and the steps to tick the group. `signing ensure --refresh-profile` makes the profile again afterwards; `apple build --allow-app-group-gap` overrides.
+- `apple build` over SSH / in CI: the refusal now names the fixes (GUI session `.command` file, a CI runner with an unlocked keychain, a build keychain). New `--keychain-unlock` (keychain password from `STOREBOUND_KEYCHAIN_PASSWORD`, never printed; runs `security unlock-keychain` and `set-key-partition-list`) and `--keychain <path>` (sign with a build keychain).
+- `storebound api` writes: the usage, the dry-run message and the refusals show the agent form with an example (`--yes --confirm <operationId>`), and the store-api skill says both flags are needed.
 - Play managed publishing: `storebound console plan play-publish-changes` (Publishing overview > "Changes ready to publish" > the owner's final "Publish N changes" + its confirm dialog; never-press: Discard changes, Stop managed publishing; `--lookup` lists the ready production releases from the API) and `console verify play-publish-changes` (API: passes when no production release is left ready to publish; or the page text). `play status` (and `--json` `readyToPublish`) prints the ready items and the plan hint, `storebound status` names the plan, and the desktop Releases tab shows the same hint with a button that opens Publishing overview. A release counts as ready to publish only when the public store page positively shows an older version; a 404, a failed or stale page read, a same or unparseable version is never ready (verify says "not determined" instead of a mismatch).
 - `apple upload` / `play upload` `--pre-check "<cmd with {file}>"` (config `upload.preCheck`) runs your gate before any byte is sent; a nonzero exit refuses the upload (ship-step exit 1, `PRE_CHECK_FAILED`). `--evidence <path.json>` (`upload.evidence`) writes file, sha256, size, command, exit code, stdout tail, time and version, also on failure, and the result carries it as `preCheck`.
 - New `storebound shots copy translate --to de,es` fills store/shots/copy.json per language (agent translation or `--translate "<cmd>"`), machine-translated until `shots copy reviewed`, caption limits respected; `shots copy check`; `check` / `shots render` name this command for a missing language.
diff --git a/cli/api.ts b/cli/api.ts
index a629aed..953919f 100644
--- a/cli/api.ts
+++ b/cli/api.ts
@@ -35,7 +35,9 @@ export const USAGE = `usage:
 GETs run right away. Writes print the exact request and are sent only with --yes in a terminal; owner-only
 operations (submit, release, delete, cancel, prices, testers, review replies, experiments) also ask you to type the
 operation id. Agents without a terminal: --yes --confirm <operationId> (must equal the operation id; plain writes
-only, never owner-only operations). Full table: docs/api-coverage.md`;
+only, never owner-only operations), e.g.
+  storebound api apple bundleIds_createInstance --body bundle.json --yes --confirm bundleIds_createInstance
+Full table: docs/api-coverage.md`;
 
 export interface Row { store: Store; id: string; method: string; path: string; gate: GateKind; wrapped: string }
 
diff --git a/cli/api/gate.ts b/cli/api/gate.ts
index d3f6ef7..c7c8cef 100644
--- a/cli/api/gate.ts
+++ b/cli/api/gate.ts
@@ -94,7 +94,7 @@ export type Decision =
   | { action: 'refuse'; why: string };
 
 /** --yes without a terminal: refused loudly (exit 1, stderr), never a silent dry run (pitfall 77). */
-export const NOT_A_TTY = 'refused: writes through `storebound api` need an interactive terminal (stdout is not a TTY: piped or redirected). Nothing was sent. Run it without a pipe or redirect, add --confirm <operationId> (agents, plain writes only), or use the dedicated storebound command.';
+export const NOT_A_TTY = 'refused: writes through `storebound api` need an interactive terminal (stdout is not a TTY: piped or redirected). Nothing was sent. Run it without a pipe or redirect, add --confirm <operationId> (agents, plain writes only: --yes --confirm bundleIds_createInstance for the operation bundleIds_createInstance), or use the dedicated storebound command.';
 
 /** --confirm never stands in for the owner's typed id on an owner-only operation. */
 export const OWNER_NO_CONFIRM = 'refused: owner-only operation: --confirm does not apply; the owner types the operation id in an interactive terminal. Nothing was sent.';
@@ -107,7 +107,7 @@ export function decide(g: GateInput): Decision {
   if (g.agent && !g.bypass) return { action: 'refuse', why: g.kind === 'owner'
     ? 'owner-only operation: never through MCP or the desktop app; the owner runs it in a terminal'
     : 'writes through `storebound api` are not available to MCP or the desktop app; run it in a terminal' };
-  if (g.dry || !g.yes) return { action: 'dry', why: g.dry ? '--dry' : 'writes are dry by default: add --yes (in a terminal) to send' };
+  if (g.dry || !g.yes) return { action: 'dry', why: g.dry ? '--dry' : g.kind === 'owner' ? 'writes are dry by default: add --yes (in a terminal; owner-only operations also ask for the typed operation id)' : `writes are dry by default: add --yes in a terminal, or from an agent's shell --yes --confirm <operationId> (e.g. \`storebound api apple ${g.opId ?? 'bundleIds_createInstance'} --body body.json --yes --confirm ${g.opId ?? 'bundleIds_createInstance'}\`)` };
   if (g.confirm !== undefined) {
     // an agent's typed confirmation: only for plain writes, only when it names this exact operation
     if (g.kind === 'owner' && !g.bypass) return { action: 'refuse', why: OWNER_NO_CONFIRM };
diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index d361d9a..4a8fca5 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -134,7 +134,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
-    'bundleIds_createInstance': 'apple/bundle',
+    'bundleIds_createInstance': 'apple/bundle apple/signing',
     'bundleIds_getCollection': 'apple/adhoc apple/bundle apple/signing',
     'bundleIds_profiles_getToManyRelated': 'apple/adhoc lib/signing',
     'certificates_createInstance': 'apple/signing lib/signing',
diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 82beef3..865b233 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -21,6 +21,7 @@ import { done, log, printJson, warn } from '../lib/log';
 import { parseMobileprovision, parsePlist, type PlistValue } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { parseIdentities, profileDirs, readProfiles, type ApiProfile } from '../lib/signing';
+import { sshBuildRefusal } from '../lib/keychain';
 import { remoteBuildSession, showCmd } from '../lib/xcode';
 import {
   appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
@@ -158,7 +159,8 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   if (!mac) throw new Error('apple build --platform macos needs macOS (tauri build, codesign, productbuild)');
   const remote = remoteBuildSession(process.env, run1(['launchctl', 'managername'], 5000).out.trim());
-  if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session (write the command into a .command file and \`open -a Terminal <file>\`), or add --unsigned for a pipeline check.`);
+  if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`${sshBuildRefusal(remote, { unlockFlag: false })}
+  Or add --unsigned for a pipeline check.`);
   mkdirSync(out, { recursive: true });
   writeFileSync(entFile, entitlementsXml(ent));
   writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 74f0056..97ac211 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -3,6 +3,11 @@
 //     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
+//                          [--keychain <path>] [--keychain-unlock] [--allow-ssh] [--allow-app-group-gap]
+// Over SSH (no GUI session) codesign needs an unlocked keychain: --keychain-unlock unlocks it with the password in
+// STOREBOUND_KEYCHAIN_PASSWORD (never printed) and sets its key partition list; --keychain <path> signs with a build
+// keychain instead of the login keychain. Manual signing: stops before the build when a target's App Group is not in its
+// installed profile (the developer portal assigns groups; storebound apple signing status/ensure names the steps).
 // First the prebuild (build.prebuild / apple.prebuild: e.g. the web build + npx cap sync; once per flow run), then a
 // Capacitor project's copied web assets (ios/App/App/public) must be newer than the source, else it stops.
 // Finds the workspace / project and scheme (native, Capacitor ios/App, React Native ios/<Name>, Flutter ios/Runner,
@@ -24,20 +29,22 @@ import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
+import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
+import { appGroupGapsFor, appGroupSteps } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
 import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { parsePlatform } from './platform';
-import { findBundleId } from './signing';
+import { discoverTargets, findBundleId } from './signing';
 import * as rt from '../lib/rt';
 import { shipPhase } from '../lib/ship-step';
 
 const TAG = 'build';
 
 /** Installed App Store profiles for a bundle id, newest expiry first: { uuid, name, team }. */
-export function installedProfiles(bundleId: string, teamId: string | null, home = homedir()): { uuid: string; name: string; team: string; expires: string }[] {
-  const out: { uuid: string; name: string; team: string; expires: string }[] = [];
+export function installedProfiles(bundleId: string, teamId: string | null, home = homedir()): { uuid: string; name: string; team: string; expires: string; entitlements: Record<string, unknown> }[] {
+  const out: { uuid: string; name: string; team: string; expires: string; entitlements: Record<string, unknown> }[] = [];
   for (const d of profileDirs(home)) {
     let files: string[] = [];
     try { files = readdirSync(d).filter(f => f.endsWith('.mobileprovision')); } catch { continue; }
@@ -50,13 +57,35 @@ export function installedProfiles(bundleId: string, teamId: string | null, home
         const store = !p.ProvisionedDevices && !p.ProvisionsAllDevices && ent?.['get-task-allow'] !== true;
         if (!store || appId !== `${team}.${bundleId}` || (teamId && team !== teamId)) continue;
         if (Date.parse(String(p.ExpirationDate)) < Date.now()) continue;
-        if (!out.some(x => x.uuid === p.UUID)) out.push({ uuid: String(p.UUID), name: String(p.Name), team, expires: String(p.ExpirationDate) });
+        if (!out.some(x => x.uuid === p.UUID)) out.push({ uuid: String(p.UUID), name: String(p.Name), team, expires: String(p.ExpirationDate), entitlements: ent ?? {} });
       } catch { /* not a profile */ }
     }
   }
   return out.sort((a, b) => Date.parse(b.expires) - Date.parse(a.expires));
 }
 
+const security = (argv: string[]): { ok: boolean; out: string } => { const r = rt.spawnSync(argv, { stdout: 'pipe', stderr: 'pipe', timeout: 60_000 }); return { ok: r.success, out: (r.stdout.toString() + r.stderr.toString()).trim() }; };
+
+/** Puts a build keychain on the user's keychain search list (xcodebuild -exportArchive finds identities there). */
+function addToSearchList(keychain: string): void {
+  const list = parseKeychainList(security(['security', 'list-keychains', '-d', 'user']).out);
+  const step = unlockSteps(keychain, list).find(x => x[1] === 'list-keychains');
+  if (step) { const r = security(step); if (!r.ok) throw new Error(`${showSecurity(step)} failed: ${r.out.slice(0, 200)}`); log(TAG, `${keychain} added to the keychain search list`); }
+}
+
+/** --keychain-unlock: unlocks the keychain (the login keychain, or --keychain) with STOREBOUND_KEYCHAIN_PASSWORD and
+ *  sets the key partition list so codesign uses the keys without a prompt. The password is never printed. */
+function unlockKeychain(keychain: string | null): void {
+  const pw = keychainPassword(process.env);
+  const kc = keychain ?? parseKeychainList(security(['security', 'default-keychain', '-d', 'user']).out)[0] ?? join(homedir(), 'Library/Keychains/login.keychain-db');
+  const list = parseKeychainList(security(['security', 'list-keychains', '-d', 'user']).out);
+  for (const step of unlockSteps(kc, list)) {
+    const r = security(step.map(x => (x === 'PASSWORD' ? pw : x)));
+    if (!r.ok) throw new Error(`${showSecurity(step)} failed: ${r.out.split(pw).join('***').slice(0, 300)}`);
+  }
+  log(TAG, `keychain ${kc} unlocked, key partition list set (password from ${'STOREBOUND_KEYCHAIN_PASSWORD'})`);
+}
+
 export async function runLogged(argv: string[], cwd: string, logFile: string, show: string, env?: Record<string, string>): Promise<void> {
   log(TAG, `$ ${show}`);
   log(TAG, `full output: ${logFile}`);
@@ -142,33 +171,45 @@ export async function run(ctx: Ctx): Promise<void> {
   if (build && !/^\d+(\.\d+){0,2}$/.test(build)) throw new Error('--build-number: digits, e.g. 42 or 1.0.42');
   const buildNo = build ?? '<next build number>';
 
-  const ids = [bundleId, ...(signing.extraBundleIds ?? [])];
+  const scan = discoverTargets(root, config);
+  const ids = [bundleId, ...scan.extensions.map(t => t.bundleId)];
   const profiles: Record<string, string> = {};
   if (style === 'manual') for (const id of ids) {
     const p = installedProfiles(id, teamId)[0];
     if (p) profiles[id] = p.uuid; else if (!dry) throw new Error(`no installed App Store profile for ${id}: storebound apple signing ensure`);
     else warn(TAG, `no installed App Store profile for ${id} (storebound apple signing ensure)`);
   }
+  // App Groups: a manual-signing profile carries a group only when the portal assigned it to the bundle id
+  const groupGaps = style === 'manual' ? appGroupGapsFor([...(scan.main ? [scan.main] : []), ...scan.extensions], id => { const p = installedProfiles(id, teamId)[0]; return p ? p.entitlements : null; }, () => null) : [];
+  for (const g of groupGaps) {
+    const msg = `${g.bundleId}: the installed profile lacks App Group(s) ${g.groups.join(', ')}`;
+    if (a.has('allow-app-group-gap') || dry) warn(TAG, msg);
+    else throw new Error(`${msg}; codesign would refuse the build.\n${appGroupSteps(g).slice(1).join('\n')}\n(--allow-app-group-gap builds anyway)`);
+  }
   const opts = exportOptions({ teamId: teamId ?? '<TEAM_ID>', style, profiles: style === 'manual' ? (Object.keys(profiles).length ? profiles : { [bundleId]: '<profile uuid>' }) : undefined });
   const plist = toXmlPlist(opts);
+  const keychainFlag = a.get('keychain');
+  const keychain = keychainFlag && keychainFlag !== 'true' ? resolve(keychainFlag) : null;
+  const unlock = a.has('keychain-unlock');
   const archivePath = join(out, `${target.scheme}.xcarchive`);
   const exportPath = exportDir(out, version, buildNo);
   const authPreview: AscAuth = { keyPath: '$ASC_P8', keyId: '$ASC_KEY_ID', issuerId: '$ASC_ISSUER_ID' };
   const auth = style === 'automatic' ? authPreview : null;
   const steps = [
     ...(target.framework === 'flutter' ? [showCmd(flutterConfigArgs(buildNo, version), null)] : []),
-    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth }), auth),
+    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth, settings: keychain ? keychainSigningArgs(keychain) : undefined }), auth),
     showCmd(exportArgs(archivePath, join(out, 'ExportOptions.plist'), exportPath, auth), auth),
   ];
+  const unlockPreview = unlock ? unlockSteps(keychain ?? '<login keychain>', []).map(showSecurity) : [];
   const plan = { framework: target.framework, workspace: target.workspace ?? null, project: target.project ?? null, scheme: target.scheme, configuration,
-    version: version ?? '(project value)', build: buildNo, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps, notes: target.notes };
+    version: version ?? '(project value)', build: buildNo, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
   const webOpts = { config, root, cap, store: 'apple' as const, tag: TAG, noPrebuild: a.has('no-prebuild'), allowStale: a.has('allow-stale-web') };
   if (dry) {
     const web = await webStep({ ...webOpts, dry: true, quiet: json });
     if (json) { printJson({ ...plan, web }); return; }
     log(TAG, `${target.framework}: ${target.workspace ?? target.project} scheme ${target.scheme} (${configuration}), build ${buildNo}${version ? `, version ${version}` : ''}, signing ${style}`);
     for (const n of target.notes) log(TAG, n);
-    for (const s of steps) log(TAG, `would run: ${s}`);
+    for (const s of plan.steps) log(TAG, `would run: ${s}`);
     console.log(`\n${relative(root, join(out, 'ExportOptions.plist'))}:\n${plist}`);
     done(TAG, 'build planned (dry run)');
     return;
@@ -177,7 +218,11 @@ export async function run(ctx: Ctx): Promise<void> {
   // codesign in an SSH session cannot use the login keychain: the archive fails late with errSecInternalComponent
   // (Embed Pods Frameworks). Stop before the web build and the archive (pitfall 101).
   const remote = remoteBuildSession(process.env, rt.spawnSync(['launchctl', 'managername'], { timeout: 5000 }).stdout.toString().trim());
-  if (remote && !a.has('allow-ssh')) throw new Error(`apple build: ${remote}; codesign there fails with errSecInternalComponent (locked keychain). Run it in the Mac's logged-in session: a Jenkins / Forgejo agent started in that session, or from SSH: write the command into a .command file and \`open -a Terminal <file>\` (it runs in the GUI session; unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside). --allow-ssh skips this check after \`security unlock-keychain\`.`);
+  if (remote && !a.has('allow-ssh') && !unlock && !keychain) throw new Error(sshBuildRefusal(remote));
+  if (unlock || keychain) {
+    if (unlock) unlockKeychain(keychain);
+    else addToSearchList(keychain!);
+  }
   shipPhase('prebuild', 'web build / prebuild');
   const web = await webStep({ ...webOpts, dry: false });
   for (const n of target.notes) log(TAG, n);
@@ -190,7 +235,7 @@ export async function run(ctx: Ctx): Promise<void> {
   try {
     if (target.framework === 'flutter') await runLogged(flutterConfigArgs(build!, version), root, join(out, 'flutter-config.log'), showCmd(flutterConfigArgs(build!, version), null));
     shipPhase('build', `xcodebuild archive, build ${build}`);
-    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth });
+    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth, settings: keychain ? keychainSigningArgs(keychain) : undefined });
     await runLogged(arch, root, join(out, 'xcodebuild-archive.log'), showCmd(arch, realAuth));
     shipPhase('sign', 'xcodebuild -exportArchive (signing)');
     await exportIpa({ root, out, archivePath, exportPath, auth: realAuth });
diff --git a/cli/apple/signing.ts b/cli/apple/signing.ts
index cea09e0..09fb9b0 100644
--- a/cli/apple/signing.ts
+++ b/cli/apple/signing.ts
@@ -2,7 +2,13 @@
 // provisioning profiles, so `apple build` can sign without anyone opening Xcode's Accounts settings.
 //   storebound apple signing status [--json]                 read-only: capabilities, certificates (with / without a
 //                                                            private key on this machine), profiles, what is installed
-//   storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--json]
+//   storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--refresh-profile] [--json]
+//       every signable target of the Xcode project (app, app extensions such as a share extension or widget, watch app,
+//       App Clip: PRODUCT_BUNDLE_IDENTIFIER + entitlements of project.pbxproj, or apple.signing.extensions) gets its
+//       bundle id registered, the capabilities its entitlements need and (manual style) an App Store profile.
+//       App Groups: the API cannot assign a group to a bundle id, so a profile lacks the group until it is ticked in the
+//       developer portal; ensure compares the entitlements with the profile and names the portal link and the steps;
+//       --refresh-profile makes the new profile after that.
 //       adds missing capabilities (apple.signing.capabilities) and reads them back (fails when one did not stick).
 //       style automatic (the default) stops there: Xcode owns certificates and profiles. style manual also
 //       creates a distribution certificate when this machine
@@ -20,14 +26,15 @@ import { confirm, need } from '../lib/ctx';
 import { buildCsr, csrContent, newSigningKey, spkiOfKey } from '../lib/csr';
 import { done, log, printJson, warn } from '../lib/log';
 import {
-  type ApiCert, type ApiProfile, type AppleSigning, type BuildEntitlements, buildEntitlements, type CapabilityType, type CapMismatch, type CheckoutInfo,
+  type ApiCert, type ApiProfile, type AppleSigning, type CapabilitySpec, type BuildEntitlements, buildEntitlements, type CapabilityType, type CapMismatch, type CheckoutInfo,
   ENTITLEMENT_CAPABILITIES, machoEntitlements, capabilitySpecs, CERT_LIMIT, certificateReq, certSha1, certSpki, type CertType,
   compareCapabilities, deleteProfileCmd, ensureScope, explainCertError, parseIdentities, pickCertificate, planCapabilities, planProfile, profileDirs,
   type ProfileType, type ProjectEntitlements, projectEntitlements, readProfiles, unusedStoreboundProfiles, verifyCapabilities,
 } from '../lib/signing';
 import { isBuildCopyPath } from '../lib/privacy-manifest';
 import { exportedIpas, ipaInfo, scanXcode } from '../lib/xcode';
-import { parsePlist } from '../lib/plist';
+import { parseMobileprovision, parsePlist } from '../lib/plist';
+import { appGroupGapsFor, appGroupSteps, type AppGroupGap, pbxTargets, type TargetKind } from '../lib/targets';
 import { zipEntries, zipRead } from '../lib/zip';
 import type { ShipConfig } from '../lib/config';
 import { textTable } from '../lib/table';
@@ -37,7 +44,7 @@ import { createOnce, isAmbiguous, upsertTiming } from '../lib/upsert';
 import * as rt from '../lib/rt';
 
 const TAG = 'signing';
-const USAGE = 'usage: storebound apple signing status | ensure [--dry] [--keychain [path]] [--no-install]';
+const USAGE = 'usage: storebound apple signing status | ensure [--dry] [--keychain [path]] [--no-install] [--refresh-profile]';
 
 export const signingDir = (root: string): string => join(root, '.storebound', 'signing');
 
@@ -98,6 +105,78 @@ export function readProjectEntitlements(root: string): ProjectEntitlements[] | n
   return out;
 }
 
+export interface SigningTarget {
+  bundleId: string; name: string; kind: TargetKind | 'configured'; source: 'xcode' | 'config';
+  /** the .entitlements file read (relative to the repository), if any */
+  entitlements: string | null;
+  capabilities: CapabilitySpec[];
+  /** com.apple.security.application-groups of the entitlements */
+  appGroups: string[];
+}
+export interface TargetScan { main: SigningTarget | null; extensions: SigningTarget[]; notes: string[] }
+
+/** Every signable target of the iOS project: the app and its extensions / widgets / watch app / App Clip, read from the
+ *  pbxproj (Release configuration) and their entitlements files. apple.signing.extensions replaces the detected
+ *  extensions; apple.signing.extraBundleIds are added (no capabilities). Capabilities come from the entitlements:
+ *  keychain-access-groups has no App ID capability (nothing to enable). Offline. */
+export function discoverTargets(root: string, config: ShipConfig): TargetScan {
+  const main = config.apple?.bundleId ?? '';
+  const s: AppleSigning = config.apple?.signing ?? {};
+  const notes: string[] = [];
+  const found: SigningTarget[] = [];
+  const projects = scanXcode(root).projects.filter(p => !isBuildCopyPath(p) && !/(^|\/)Pods\.xcodeproj$/.test(p));
+  for (const proj of projects) {
+    let pbx = '';
+    try { pbx = readFileSync(join(root, proj, 'project.pbxproj'), 'utf8'); } catch { continue; }
+    for (const t of pbxTargets(pbx)) {
+      if (!t.bundleId) { notes.push(`${proj}: target ${t.name} has bundle id "${t.unresolved ?? '?'}" which storebound cannot resolve (an xcconfig or a build variable): list it in apple.signing.extensions`); continue; }
+      if (found.some(f => f.bundleId === t.bundleId)) continue;
+      let caps: CapabilitySpec[] = [], groups: string[] = [], file: string | null = null;
+      if (t.entitlements) {
+        const f = join(dirname(join(root, proj)), t.entitlements);
+        try {
+          const xml = readFileSync(f, 'utf8');
+          file = relative(root, f).split(sep).join('/');
+          caps = projectEntitlements(file, xml, true).caps.map((c): CapabilitySpec => ({ type: c.cap }));
+          const g = (parsePlist(xml) as Record<string, unknown>)['com.apple.security.application-groups'];
+          groups = Array.isArray(g) ? g.map(String) : [];
+        } catch { notes.push(`${proj}: target ${t.name}: entitlements file ${t.entitlements} not readable`); }
+      }
+      found.push({ bundleId: t.bundleId, name: t.name, kind: t.kind, source: 'xcode', entitlements: file, capabilities: caps, appGroups: groups });
+    }
+  }
+  const mainTarget = found.find(t => t.bundleId === main) ?? null;
+  let extensions: SigningTarget[];
+  if (s.extensions?.length) {
+    extensions = s.extensions.map((x): SigningTarget => {
+      const det = found.find(t => t.bundleId === x.bundleId);
+      return { bundleId: x.bundleId, name: x.name ?? det?.name ?? x.bundleId, kind: det?.kind ?? 'configured', source: 'config', entitlements: det?.entitlements ?? null,
+        capabilities: (x.capabilities ?? det?.capabilities ?? []).map((c): CapabilitySpec => (typeof c === 'string' ? { type: c } : c)), appGroups: x.appGroups ?? det?.appGroups ?? [] };
+    });
+    notes.push(`apple.signing.extensions replaces the ${found.filter(t => t.bundleId !== main).length} extension target(s) found in the Xcode project`);
+  } else extensions = found.filter(t => t.bundleId !== main);
+  for (const b of s.extraBundleIds ?? []) if (b !== main && !extensions.some(t => t.bundleId === b)) extensions.push({ bundleId: b, name: b, kind: 'configured', source: 'config', entitlements: null, capabilities: [], appGroups: [] });
+  return { main: mainTarget, extensions, notes };
+}
+
+/** Name of a bundle id on the developer portal (letters, digits, spaces). */
+export const bundleIdName = (appName: string, t: SigningTarget): string => `${appName} ${t.name}`.replace(/[^A-Za-z0-9 ]/g, ' ').replace(/\s+/g, ' ').trim().slice(0, 60);
+
+const platformOf = (type: ProfileType): 'IOS' | 'MAC_OS' => (type.startsWith('MAC_') ? 'MAC_OS' : 'IOS');
+
+/** The entitlements of the newest ACTIVE profile of a bundle id that the API serves with its content (a managed one
+ *  is not readable: null = unknown). */
+export function profileEntitlements(list: ApiProfile[]): Record<string, unknown> | null {
+  const p = list.filter(x => !x.managed && x.attributes.profileState === 'ACTIVE' && x.attributes.profileContent)
+    .sort((a, b) => Date.parse(b.attributes.expirationDate ?? '') - Date.parse(a.attributes.expirationDate ?? ''))[0];
+  if (!p) return null;
+  try { return (parseMobileprovision(Buffer.from(p.attributes.profileContent!, 'base64')).Entitlements ?? {}) as Record<string, unknown>; } catch { return null; }
+}
+
+export function warnAppGroupGaps(gaps: AppGroupGap[], tag: string): void {
+  for (const g of gaps) for (const l of appGroupSteps(g)) warn(tag, l);
+}
+
 const git = (root: string, args: string[]): string | null => {
   try {
     const r = rt.spawnSync(['git', '-C', root, ...args], { stdout: 'pipe', stderr: 'pipe' });
@@ -171,7 +250,9 @@ export async function capabilityReport(c: Asc, config: ShipConfig, root: string)
   const b = await findBundleId(c, bundleId);
   const appId = b ? (b.capabilities as string[]) : null;
   const cfg = capabilitySpecs(config.apple?.signing, config.games?.gameCenter === true).map(x => x.type);
-  const project = readProjectEntitlements(root);
+  // an extension's entitlements belong to its own bundle id (signing ensure handles it), not to the app's App ID
+  const extFiles = new Set(discoverTargets(root, config).extensions.map(t => t.entitlements).filter((f): f is string => !!f));
+  const project = readProjectEntitlements(root)?.filter(p => !extFiles.has(p.file)) ?? null;
   let build: BuildEntitlements | null = null;
   try { build = builtIpaEntitlements(root, config); } catch { /* unreadable IPA: compared without it */ }
   const checkout = project && cfg.some(x => Object.values(ENTITLEMENT_CAPABILITIES).includes(x as CapabilityType)) && !project.some(p => p.caps.length) ? checkoutInfo(root) : null;
@@ -219,6 +300,9 @@ export interface SigningState {
   capabilities: { present: string[]; missing: string[]; extra: string[] };
   certificate: { type: CertType; chosen: string | null; why: string; onTeam: number; withKey: number; limit: number | null };
   profiles: { bundleId: string; name: string | null; uuid: string | null; state: string; installed: boolean; why: string }[];
+  /** every signable target: where it was found, its capabilities (present / missing on its App ID) and App Groups */
+  targets: { bundleId: string; name: string; kind: string; source: string; registered: boolean; capabilities: string[]; missingCapabilities: string[]; appGroups: string[] }[];
+  appGroupGaps: AppGroupGap[];
 }
 
 export async function run(ctx: Ctx): Promise<void> {
@@ -237,7 +321,13 @@ export async function run(ctx: Ctx): Promise<void> {
   const c = await ascClient(root, bundleId, config.apple?.appId);
 
   // --- read everything first (read-only)
-  const ids = [bundleId, ...(s.extraBundleIds ?? [])];
+  const scan = discoverTargets(root, config);
+  const exts = scan.extensions;
+  const ids = [bundleId, ...exts.map(t => t.bundleId)];
+  const targetOf = (id: string): SigningTarget | undefined => (id === bundleId ? scan.main ?? undefined : exts.find(t => t.bundleId === id));
+  const refresh = a.has('refresh-profile');
+  const refreshIds = new Set(ids.filter(id => (targetOf(id)?.appGroups.length ?? 0) > 0));
+  if (refresh && !refreshIds.size) ids.forEach(id => refreshIds.add(id));
   const bundles = new Map<string, J | null>();
   for (const id of ids) bundles.set(id, await findBundleId(c, id));
   const main = bundles.get(bundleId);
@@ -257,8 +347,11 @@ export async function run(ctx: Ctx): Promise<void> {
     const b = bundles.get(id);
     if (!b) { profiles.set(id, { list: [], plan: null }); continue; }
     const list = await profilesOf(c, b.id, profileType);
-    profiles.set(id, { list, plan: choice.cert ? planProfile(list, { bundleId: id, bundleIdId: b.id, certId: choice.cert.id, type: profileType }) : null });
+    profiles.set(id, { list, plan: choice.cert ? planProfile(list, { bundleId: id, bundleIdId: b.id, certId: choice.cert.id, type: profileType, refresh: refresh && refreshIds.has(id) }) : null });
   }
+  const wantCaps = (t: SigningTarget): CapabilitySpec[] => (t.bundleId === bundleId ? capabilitySpecs(s, config.games?.gameCenter === true) : t.capabilities);
+  const targetList: SigningTarget[] = [...(scan.main ? [scan.main] : []), ...exts];
+  const gapsOf = (): AppGroupGap[] => appGroupGapsFor(targetList, id => { const b = bundles.get(id); return b ? profileEntitlements(profiles.get(id)?.list ?? []) : null; }, id => bundles.get(id)?.id ?? null);
   const state: SigningState = {
     bundleId, teamId: s.teamId ?? main?.attributes?.seedId ?? null, registered: !!main,
     capabilities: { present: capPlan.present, missing: capabilitySpecs(s, config.games?.gameCenter === true).filter(w => !capPlan.present.includes(w.type)).map(w => w.type), extra: capPlan.extra },
@@ -266,7 +359,7 @@ export async function run(ctx: Ctx): Promise<void> {
       onTeam: certs.filter(x => Date.parse(x.attributes.expirationDate ?? '') > Date.now()).length, withKey: choice.usable.length, limit: CERT_LIMIT[certType] ?? null },
     profiles: ids.map(id => {
       const p = profiles.get(id)!;
-      if (!bundles.get(id)) return { bundleId: id, name: null, uuid: null, state: 'bundle id not registered', installed: false, why: 'register it first (storebound apple bundle for the app; extensions in Certificates, Identifiers & Profiles)' };
+      if (!bundles.get(id)) return { bundleId: id, name: null, uuid: null, state: 'bundle id not registered', installed: false, why: id === bundleId ? 'register it first (storebound apple bundle)' : 'storebound apple signing ensure registers it' };
       const r = p.plan?.reuse;
       const managed = p.list.find(x => x.managed && x.attributes.profileState === 'ACTIVE');
       if (style === 'automatic')
@@ -277,8 +370,17 @@ export async function run(ctx: Ctx): Promise<void> {
       return { bundleId: id, name: r?.attributes.name ?? null, uuid: r?.attributes.uuid ?? null, state: r ? 'ACTIVE' : 'needs a new profile',
         installed: installedAt(r?.attributes.uuid).length > 0, why: p.plan?.why ?? 'waits for a usable certificate' };
     }),
+    targets: [], appGroupGaps: [],
   };
 
+  state.targets = ids.map(id => {
+    const t = targetOf(id), b = bundles.get(id);
+    const want = t ? wantCaps(t).map(w => w.type) : id === bundleId ? capabilitySpecs(s, config.games?.gameCenter === true).map(w => w.type) : [];
+    return { bundleId: id, name: t?.name ?? id, kind: t?.kind ?? 'app', source: t?.source ?? 'config', registered: !!b, capabilities: want,
+      missingCapabilities: want.filter(w => !(b?.capabilities ?? []).includes(w)), appGroups: t?.appGroups ?? [] };
+  });
+  state.appGroupGaps = style === 'manual' ? gapsOf() : [];
+
   // storebound-made profiles that nothing uses (automatic signing: all of them; manual: all but the reused one)
   const inUse = new Set(style === 'manual' ? [...profiles.values()].map(p => p.plan?.reuse?.id).filter((x): x is string => !!x) : []);
   const unused = [...profiles.values()].flatMap(p => unusedStoreboundProfiles(p.list, inUse));
@@ -296,6 +398,9 @@ export async function run(ctx: Ctx): Promise<void> {
     log(TAG, `capabilities: ${state.capabilities.present.join(', ') || 'none configured'}${state.capabilities.missing.length ? `; missing ${state.capabilities.missing.join(', ')}` : ''}${state.capabilities.extra.length ? `; also on the bundle id: ${state.capabilities.extra.join(', ')}` : ''}`);
     log(TAG, `certificate ${certType}: ${choice.why} (${state.certificate.onTeam} valid on the team${state.certificate.limit ? `, limit ${state.certificate.limit}` : ''})`);
     for (const x of choice.expiring) warn(TAG, `${x.attributes.name ?? x.id} expires ${x.attributes.expirationDate?.slice(0, 10)}: make a new one soon (storebound apple signing ensure)`);
+    for (const n of scan.notes) log(TAG, n);
+    console.log(textTable(['target', 'kind', 'bundle id', 'registered', 'capabilities', 'app groups'], state.targets.map(t => [t.name, t.kind, t.bundleId, t.registered ? 'yes' : 'no', t.capabilities.join(', ') || '-', t.appGroups.join(', ') || '-'])));
+    warnAppGroupGaps(state.appGroupGaps, TAG);
     console.log(textTable(['bundle id', 'profile', 'state', 'installed', ''], state.profiles.map(p => [p.bundleId, p.name ?? '', p.state, p.installed ? 'yes' : 'no', p.why])));
     printCapabilityReport(report, TAG);
     cleanup();
@@ -305,11 +410,19 @@ export async function run(ctx: Ctx): Promise<void> {
 
   // --- ensure: plan, show, ask once, then write
   if (!main) throw new Error(`bundle id ${bundleId} is not registered: storebound apple bundle --dry, then without --dry`);
-  const missingExtra = ids.filter(id => !bundles.get(id));
-  if (missingExtra.length) throw new Error(`not registered: ${missingExtra.join(', ')} (register extension bundle ids in Certificates, Identifiers & Profiles first)`);
+  for (const n of scan.notes) log(TAG, n);
+  // extensions: register the bundle id (not there yet), then the capabilities its entitlements need
+  const toRegister = exts.filter(t => !bundles.get(t.bundleId));
+  const registerReq = (t: SigningTarget): Req => ({ method: 'POST', path: '/v1/bundleIds', note: `register ${t.bundleId} (${t.kind} ${t.name})`,
+    body: { data: { type: 'bundleIds', attributes: { identifier: t.bundleId, name: bundleIdName(config.app.name, t), platform: platformOf(profileType) } } } });
+  const extCapPlans = exts.map(t => { const b = bundles.get(t.bundleId); return { t, b, plan: b ? planCapabilities(b.id, b.capabilities ?? [], t.capabilities) : null }; });
+  const extCapLines = extCapPlans.flatMap(({ t, b, plan: cp }) => (b ? (cp?.create ?? []).map(r => `${describeReq(r)}  # ${t.bundleId}`)
+    : t.capabilities.map(w => `POST /v1/bundleIdCapabilities {capabilityType="${w.type}"}  # ${t.bundleId}, after it is registered`)));
   const needCert = scope.certificates && !choice.cert;
   const plan: string[] = [
+    ...toRegister.map(t => `${describeReq(registerReq(t))}`),
     ...capPlan.create.map(r => describeReq(r)),
+    ...extCapLines,
     ...(needCert ? [describeReq(certificateReq(certType, '<CSR of a new RSA 2048 key>'))] : []),
     ...(!scope.profiles ? [] : ids.flatMap(id => {
       const p = profiles.get(id)!.plan;
@@ -339,6 +452,20 @@ export async function run(ctx: Ctx): Promise<void> {
   const responses = await execute(c.asc, capPlan.create, { dry: false, tag: TAG });
   if (capPlan.create.length) await checkCapabilitiesStuck(c, bundleId, capabilitySpecs(s, config.games?.gameCenter === true).map(w => w.type), responses);
   if (gcPlan.length && gcSw) await ensureGcSwitch(c, gcSw, TAG);
+  for (const t of toRegister) {
+    const made = (await createOnce<J>({ what: `${t.bundleId} bundle id`, tag: TAG,
+      find: async () => findBundleId(c, t.bundleId),
+      create: async () => (await c.asc('POST', '/v1/bundleIds', registerReq(t).body)).data })).value;
+    bundles.set(t.bundleId, (await findBundleId(c, t.bundleId)) ?? { ...made, capabilities: [] });
+    log(TAG, `${t.bundleId}: bundle id registered (${t.kind} ${t.name})`);
+  }
+  for (const { t } of extCapPlans) {
+    const bid = bundles.get(t.bundleId)!;
+    const cp = planCapabilities(bid.id, bid.capabilities ?? [], t.capabilities);
+    if (!cp.create.length) continue;
+    const rs = await execute(c.asc, cp.create, { dry: false, tag: TAG });
+    await checkCapabilitiesStuck(c, t.bundleId, t.capabilities.map(w => w.type), rs);
+  }
   if (!scope.profiles) {
     printCapabilityReport(await capabilityReport(c, config, root), TAG);
     cleanup();
@@ -385,10 +512,11 @@ export async function run(ctx: Ctx): Promise<void> {
     else warn(TAG, 'xcodebuild signs with identities from the keychain: re-run with --keychain to import it there (or import the .key + .cer into the login keychain with `security import`)');
     cert = created;
   }
+  const finalEnt = new Map<string, Record<string, unknown>>();
   for (const id of ids) {
     const b = bundles.get(id)!;
     const list = profiles.get(id)!.list;
-    const p = planProfile(list, { bundleId: id, bundleIdId: b.id, certId: cert!.id, type: profileType });
+    const p = planProfile(list, { bundleId: id, bundleIdId: b.id, certId: cert!.id, type: profileType, refresh: refresh && refreshIds.has(id) });
     let prof: ApiProfile;
     if (p.create) {
       // an unclear answer is checked by reading the bundle id's profiles again (one active profile with this
@@ -407,9 +535,16 @@ export async function run(ctx: Ctx): Promise<void> {
       log(TAG, `${id}: ${p.why}`);
     }
     if (!a.has('no-install')) for (const f of install(prof)) log(TAG, `${id}: installed ${f.replace(homedir(), '~')}`);
+    try { finalEnt.set(id, (parseMobileprovision(Buffer.from(prof.attributes.profileContent ?? '', 'base64')).Entitlements ?? {}) as Record<string, unknown>); } catch { /* unreadable: not compared */ }
   }
   cleanup();
-  if (json) printJson({ ...state, plan, done: true });
+  // App Groups: the profile carries a group only when it is assigned to the bundle id in the developer portal
+  const gaps = appGroupGapsFor(targetList, id => finalEnt.get(id) ?? null, id => bundles.get(id)?.id ?? null);
+  if (json) printJson({ ...state, plan, appGroupGaps: gaps, done: !gaps.length });
+  if (gaps.length) {
+    warnAppGroupGaps(gaps, TAG);
+    throw new Error(`profile(s) installed, but ${gaps.map(g => `${g.bundleId} lacks ${g.groups.join(', ')}${g.url ? ` (${g.url})` : ''}`).join('; ')}: the build would fail at codesign. Tick the App Group(s) in the developer portal (steps above), then run storebound apple signing ensure --refresh-profile.`);
+  }
   done(TAG, 'signing ready (storebound apple build --dry shows the ExportOptions.plist it will use)');
 }
 
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 7473ef4..2e3f8ba 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -66,6 +66,7 @@
    "allow-price-changes"
   ],
   "apple build": [
+   "allow-app-group-gap",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
@@ -73,6 +74,7 @@
    "configuration",
    "env-file",
    "keychain",
+   "keychain-unlock",
    "locale-map",
    "no-install",
    "no-prebuild",
@@ -82,6 +84,7 @@
    "profile",
    "progress",
    "project",
+   "refresh-profile",
    "result-file",
    "scan-paths",
    "scheme",
@@ -122,7 +125,8 @@
   "apple game-center": [
    "keychain",
    "locale-map",
-   "no-install"
+   "no-install",
+   "refresh-profile"
   ],
   "apple iap": [
    "all",
@@ -238,6 +242,7 @@
    "no-submit",
    "platform",
    "progress",
+   "refresh-profile",
    "resolve-iaps",
    "result-file",
    "version",
@@ -261,7 +266,8 @@
   "apple signing": [
    "keychain",
    "locale-map",
-   "no-install"
+   "no-install",
+   "refresh-profile"
   ],
   "apple status": [
    "cancel-submission",
@@ -269,6 +275,7 @@
    "locale-map",
    "no-install",
    "platform",
+   "refresh-profile",
    "timeout",
    "version",
    "wait-review"
@@ -283,6 +290,7 @@
    "no-submit",
    "platform",
    "progress",
+   "refresh-profile",
    "resolve-iaps",
    "result-file",
    "version",
@@ -460,6 +468,7 @@
    "name",
    "no-install",
    "react-native",
+   "refresh-profile",
    "sku",
    "storefront",
    "unity"
@@ -563,7 +572,8 @@
   "games status": [
    "keychain",
    "locale-map",
-   "no-install"
+   "no-install",
+   "refresh-profile"
   ],
   "health": [
    "apple",
@@ -1067,6 +1077,7 @@
    "play",
    "prune",
    "react-native",
+   "refresh-profile",
    "repair-stuck",
    "signature",
    "skip-out-of-range-regions",
@@ -1113,6 +1124,7 @@
    "agent",
    "all",
    "all-pages",
+   "allow-app-group-gap",
    "allow-availability-changes",
    "allow-existing",
    "allow-price-changes",
@@ -1212,6 +1224,7 @@
    "keep",
    "keep-booted",
    "keychain",
+   "keychain-unlock",
    "keyword",
    "keywords",
    "kind",
@@ -1292,6 +1305,7 @@
    "rating",
    "react-native",
    "reconvert",
+   "refresh-profile",
    "region",
    "release",
    "release-date",
@@ -1497,7 +1511,7 @@
   ],
   "apple signing": [
    "storebound apple signing status [--json]                 read-only: capabilities, certificates (with / without a",
-   "storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--json]"
+   "storebound apple signing ensure [--dry] [--yes] [--keychain [path]] [--no-install] [--refresh-profile] [--json]"
   ],
   "apple status": [
    "storebound apple status [--platform ios|macos|tvos|visionos] [--json]",
diff --git a/cli/lib/keychain.ts b/cli/lib/keychain.ts
new file mode 100644
index 0000000..5106f43
--- /dev/null
+++ b/cli/lib/keychain.ts
@@ -0,0 +1,45 @@
+// Code signing keychain for `storebound apple build` outside the Mac's logged-in GUI session. codesign in an SSH
+// session (or any session without the login keychain unlocked) fails late with errSecInternalComponent. The fixes:
+//   - run from the GUI session (a .command file opened with `open -a Terminal`)
+//   - a CI runner / Jenkins agent started in that session, or with an unlocked keychain
+//   - a build keychain: --keychain <path>, unlocked with --keychain-unlock (password from STOREBOUND_KEYCHAIN_PASSWORD,
+//     never printed) and its key partition list set so codesign may use the keys without a prompt.
+// Pure planning here; cli/apple/build.ts runs it.
+export const KEYCHAIN_PASSWORD_ENV = 'STOREBOUND_KEYCHAIN_PASSWORD';
+
+/** The refusal for a build in an SSH / non-GUI session, naming every fix. */
+export function sshBuildRefusal(reason: string, o: { unlockFlag?: boolean } = {}): string {
+  const unlock = o.unlockFlag !== false;
+  return `apple build: ${reason}; codesign there fails with errSecInternalComponent (locked keychain). Fixes, pick one:\n`
+    + `  1. Run it in the Mac's logged-in GUI session: write the command into a .command file and \`open -a Terminal <file>\` (unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside).\n`
+    + `  2. A CI runner / Jenkins agent started in the GUI session, or one whose keychain is unlocked first (\`security unlock-keychain -p "$${KEYCHAIN_PASSWORD_ENV}" <keychain>\`, then \`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$${KEYCHAIN_PASSWORD_ENV}" <keychain>\`).\n`
+    + (unlock ? `  3. Let storebound do step 2: export ${KEYCHAIN_PASSWORD_ENV}=... (the keychain password; never printed) and add --keychain-unlock (the login keychain), or --keychain <path> --keychain-unlock for a build keychain that holds the Apple Distribution key + certificate (storebound apple signing ensure --keychain <path> imports them).\n`
+      + `  --allow-ssh skips this check when the keychain is already unlocked in this session.`
+      : '  --allow-ssh skips this check when the keychain is already unlocked in this session.');
+}
+
+export interface KeychainPlan { keychain: string; steps: string[][] }
+
+/** The `security` calls --keychain-unlock runs, with PASSWORD as a placeholder (substituted by the caller, never logged). */
+export function unlockSteps(keychain: string, searchList: string[]): string[][] {
+  const steps: string[][] = [['security', 'unlock-keychain', '-p', 'PASSWORD', keychain],
+    ['security', 'set-key-partition-list', '-S', 'apple-tool:,apple:,codesign:', '-s', '-k', 'PASSWORD', keychain]];
+  if (!searchList.includes(keychain)) steps.push(['security', 'list-keychains', '-d', 'user', '-s', keychain, ...searchList]);
+  return steps;
+}
+
+/** `security list-keychains` output -> paths (quotes stripped). */
+export const parseKeychainList = (out: string): string[] => out.split('\n').map(l => l.trim().replace(/^"|"$/g, '')).filter(Boolean);
+
+/** The password from the environment, or an error that names the variable (the value is never in a message). */
+export function keychainPassword(env: Record<string, string | undefined>): string {
+  const p = env[KEYCHAIN_PASSWORD_ENV];
+  if (!p) throw new Error(`--keychain-unlock needs the keychain password in the environment variable ${KEYCHAIN_PASSWORD_ENV} (not an argument: arguments end up in shell history)`);
+  return p;
+}
+
+/** A command line for logs with the password replaced. */
+export const showSecurity = (argv: string[]): string => argv.map(a => (a === 'PASSWORD' ? '$' + KEYCHAIN_PASSWORD_ENV : a)).join(' ');
+
+/** Settings that make xcodebuild sign with a given keychain. */
+export const keychainSigningArgs = (keychain: string): string[] => [`OTHER_CODE_SIGN_FLAGS=--keychain ${keychain}`];
diff --git a/cli/lib/signing.ts b/cli/lib/signing.ts
index 70019c9..9b28e45 100644
--- a/cli/lib/signing.ts
+++ b/cli/lib/signing.ts
@@ -43,6 +43,20 @@ export interface AppleSigning {
   capabilities?: (CapabilityType | CapabilitySpec)[];
   /** Bundle ids of app extensions / widgets / watch apps in the same archive: each gets its own profile. */
   extraBundleIds?: string[];
+  /** Override for the app extensions / widgets / watch app / App Clip that `signing ensure` finds in the Xcode project
+   *  (every target's PRODUCT_BUNDLE_IDENTIFIER and entitlements): when set, these replace the detected ones. Each is
+   *  registered as a bundle id, gets the capabilities its entitlements need (or `capabilities` here) and a profile. */
+  extensions?: ExtensionSpec[];
+}
+
+export interface ExtensionSpec {
+  bundleId: string;
+  /** A label for messages and the bundle id's name on the developer portal. */
+  name?: string;
+  /** Default: the capabilities of the target's entitlements file (none when there is none). */
+  capabilities?: (CapabilityType | CapabilitySpec)[];
+  /** App group ids the target's entitlements list (com.apple.security.application-groups); checked against the profile. */
+  appGroups?: string[];
 }
 
 export function validateSigning(s: AppleSigning | undefined): string[] {
@@ -56,6 +70,14 @@ export function validateSigning(s: AppleSigning | undefined): string[] {
     const t = typeof c === 'string' ? c : c?.type;
     if (!CAPABILITY_TYPES.includes(t as CapabilityType)) e.push(`apple.signing.capabilities: unknown capability "${String(t)}" (${CAPABILITY_TYPES.slice(0, 6).join(', ')}, ...)`);
   }
+  for (const x of s.extensions ?? []) {
+    if (!x || typeof x.bundleId !== 'string' || !/^[A-Za-z0-9.-]+$/.test(x.bundleId)) { e.push(`apple.signing.extensions: "${String(x?.bundleId)}" is not a bundle id`); continue; }
+    for (const c of x.capabilities ?? []) {
+      const t = typeof c === 'string' ? c : c?.type;
+      if (!CAPABILITY_TYPES.includes(t as CapabilityType)) e.push(`apple.signing.extensions ${x.bundleId}: unknown capability "${String(t)}"`);
+    }
+    if (x.appGroups && (!Array.isArray(x.appGroups) || x.appGroups.some(g => typeof g !== 'string' || !/^group\.[A-Za-z0-9.-]+$/.test(g)))) e.push(`apple.signing.extensions ${x.bundleId}: appGroups are ids like group.com.example.app`);
+  }
   for (const b of s.extraBundleIds ?? []) if (!/^[A-Za-z0-9.-]+$/.test(b)) e.push(`apple.signing.extraBundleIds: "${b}" is not a bundle id`);
   return e;
 }
@@ -158,19 +180,20 @@ export const profileName = (bundleId: string, type: ProfileType, date = new Date
 export interface ProfilePlan { reuse: ApiProfile | null; create: Req | null; why: string }
 
 /** Reuse an ACTIVE profile of the type that holds the certificate and is valid for 14 more days; else create one. */
-export function planProfile(existing: ApiProfile[], o: { bundleId: string; bundleIdId: string; certId: string; type: ProfileType; now?: number }): ProfilePlan {
+export function planProfile(existing: ApiProfile[], o: { bundleId: string; bundleIdId: string; certId: string; type: ProfileType; now?: number; /** make a new profile even when one is reusable (after an App Group was ticked in the portal) */ refresh?: boolean }): ProfilePlan {
   const now = o.now ?? Date.now();
   const ok = existing.filter(p => p.attributes.profileType === o.type && p.attributes.profileState === 'ACTIVE'
     && Date.parse(p.attributes.expirationDate ?? '') - now > 14 * 86_400_000 && (p.certIds ?? []).includes(o.certId))
     .sort((a, b) => Date.parse(b.attributes.expirationDate!) - Date.parse(a.attributes.expirationDate!));
-  if (ok[0]) return { reuse: ok[0], create: null, why: `profile "${ok[0].attributes.name}" is active (expires ${ok[0].attributes.expirationDate?.slice(0, 10)})` };
+  if (ok[0] && !o.refresh) return { reuse: ok[0], create: null, why: `profile "${ok[0].attributes.name}" is active (expires ${ok[0].attributes.expirationDate?.slice(0, 10)})` };
   const stale = existing.filter(p => p.attributes.profileType === o.type && !p.managed);
   const managed = existing.filter(p => p.attributes.profileType === o.type && p.managed);
   const why = [
     stale.length ? `${stale.length} ${o.type} profile(s), none active with this certificate (states: ${[...new Set(stale.map(p => p.attributes.profileState))].join(', ')})` : '',
     managed.length ? `${managed.length} Xcode-managed (automatic signing; not readable through the API, not reused)` : '',
   ].filter(Boolean).join('; ') || `no ${o.type} profile`;
-  return { reuse: null, why, create: {
+  const why2 = ok[0] ? `--refresh-profile: a new profile instead of "${ok[0].attributes.name}"` : why;
+  return { reuse: null, why: why2, create: {
     method: 'POST', path: '/v1/profiles', note: `create ${o.type} profile for ${o.bundleId}`,
     body: { data: { type: 'profiles', attributes: { name: profileName(o.bundleId, o.type, new Date(now)), profileType: o.type },
       relationships: { bundleId: one('bundleIds', o.bundleIdId), certificates: many('certificates', [o.certId]) } } },
diff --git a/cli/lib/targets.ts b/cli/lib/targets.ts
new file mode 100644
index 0000000..fc8e8b9
--- /dev/null
+++ b/cli/lib/targets.ts
@@ -0,0 +1,138 @@
+// Signable targets of an Xcode project (the app, app extensions such as a share extension or widget, the watch app, an
+// App Clip), read from project.pbxproj: product type, PRODUCT_BUNDLE_IDENTIFIER and CODE_SIGN_ENTITLEMENTS of the
+// Release configuration. Pure parsing; the fs side (entitlements files, config override) is cli/apple/signing.ts.
+// Also the App Group check: Apple's API can switch the APP_GROUPS capability on for a bundle id but cannot assign a
+// group container to it, so a profile carries `com.apple.security.application-groups` only when the group was ticked in
+// the developer portal; comparing the target's entitlements with the profile's entitlements finds the gap offline.
+export type TargetKind = 'app' | 'extension' | 'watch' | 'clip';
+
+export interface PbxTarget { name: string; productType: string; kind: TargetKind; /** null: not resolvable (set in an xcconfig or a variable) */ bundleId: string | null; unresolved?: string; entitlements: string | null }
+
+/** Product types that are code signed with their own bundle id and provisioning profile. Frameworks, bundles, test
+ *  bundles, tools and libraries are not. */
+export function targetKind(productType: string): TargetKind | null {
+  const m = /^com\.apple\.product-type\.(.+)$/.exec(productType);
+  const t = m?.[1];
+  if (!t) return null;
+  if (t === 'application.on-demand-install-capable') return 'clip';
+  if (/^application\.watchapp/.test(t) || /^watchkit2?-extension$/.test(t)) return 'watch';
+  if (t === 'application') return 'app';
+  if (/^(app-extension(\..+)?|extensionkit-extension|tv-app-extension)$/.test(t)) return 'extension';
+  return null;
+}
+
+/** id -> body of every `<24 hex id> /* comment *\/ = { ... };` object (brace matched, quoted strings skipped). */
+function pbxObjects(pbx: string): Map<string, string> {
+  const out = new Map<string, string>();
+  const re = /^[ \t]*([0-9A-Fa-f]{24})(?:[ \t]*\/\*[\s\S]*?\*\/)?[ \t]*=[ \t]*\{/gm;
+  for (let m = re.exec(pbx); m; m = re.exec(pbx)) {
+    const open = m.index + m[0].length - 1;
+    let depth = 0, q = false, i = open;
+    for (; i < pbx.length; i++) {
+      const ch = pbx[i];
+      if (q) { if (ch === '\\') i++; else if (ch === '"') q = false; continue; }
+      if (ch === '"') q = true;
+      else if (ch === '{') depth++;
+      else if (ch === '}' && --depth === 0) break;
+    }
+    out.set(m[1]!, pbx.slice(open + 1, i));
+    re.lastIndex = i;
+  }
+  return out;
+}
+
+const unquote = (s: string): string => { const t = s.trim(); return t.startsWith('"') && t.endsWith('"') ? t.slice(1, -1).replace(/\\"/g, '"') : t; };
+const field = (body: string, name: string): string | null => {
+  const m = new RegExp(`(?:^|[;\\s])${name}\\s*=\\s*("(?:[^"\\\\]|\\\\.)*"|[^;\\s]+)\\s*(?:/\\*[\\s\\S]*?\\*/)?\\s*;`).exec(body);
+  return m ? unquote(m[1]!) : null;
+};
+
+function buildSettings(body: string): Record<string, string> {
+  const at = body.search(/buildSettings\s*=\s*\{/);
+  if (at < 0) return {};
+  const inner = body.slice(body.indexOf('{', at) + 1);
+  const out: Record<string, string> = {};
+  for (const m of inner.matchAll(/^[ \t]*("?[A-Za-z_][A-Za-z0-9_\[\]=*]*"?)[ \t]*=[ \t]*("(?:[^"\\]|\\.)*"|\([^)]*\)|[^;]*);/gm)) out[unquote(m[1]!)] = unquote(m[2]!);
+  return out;
+}
+
+/** $(VAR) / ${VAR} from the target's own settings, TARGET_NAME and PRODUCT_NAME; a modifier (:rfc1034identifier)
+ *  makes the value an identifier. Anything still containing $( afterwards is unresolved. */
+export function resolveSetting(value: string, vars: Record<string, string>): string {
+  let v = value;
+  for (let n = 0; n < 5 && /\$[({]/.test(v); n++) {
+    v = v.replace(/\$[({]([A-Za-z0-9_]+)(?::([a-z0-9]+))?[)}]/g, (all, name: string, mod?: string) => {
+      const r = vars[name];
+      if (r === undefined || r === `$(${name})`) return all;
+      return mod === 'rfc1034identifier' || mod === 'identifier' ? r.replace(/[^A-Za-z0-9.-]/g, '-') : r;
+    });
+  }
+  return v;
+}
+
+/** The signable targets of one project.pbxproj, in file order. */
+export function pbxTargets(pbx: string): PbxTarget[] {
+  const objs = pbxObjects(pbx);
+  const out: PbxTarget[] = [];
+  for (const body of objs.values()) {
+    if (field(body, 'isa') !== 'PBXNativeTarget') continue;
+    const productType = field(body, 'productType') ?? '';
+    const kind = targetKind(productType);
+    if (!kind) continue;
+    const name = field(body, 'name') ?? field(body, 'productName') ?? '?';
+    const listBody = objs.get((field(body, 'buildConfigurationList') ?? '').split(/\s/)[0]!);
+    const ids = [...(/buildConfigurations\s*=\s*\(([\s\S]*?)\)/.exec(listBody ?? '')?.[1] ?? '').matchAll(/([0-9A-Fa-f]{24})/g)].map(m => m[1]!);
+    const cfgs = ids.map(id => objs.get(id)).filter((b): b is string => !!b);
+    const cfg = cfgs.find(c => field(c, 'name') === 'Release') ?? cfgs[cfgs.length - 1];
+    const s = cfg ? buildSettings(cfg) : {};
+    const vars: Record<string, string> = { ...s, TARGET_NAME: name, PRODUCT_NAME: resolveSetting(s.PRODUCT_NAME ?? name, { TARGET_NAME: name }) };
+    const raw = s.PRODUCT_BUNDLE_IDENTIFIER;
+    const bundleId = raw ? resolveSetting(raw, vars) : null;
+    const ent = s.CODE_SIGN_ENTITLEMENTS ? resolveSetting(s.CODE_SIGN_ENTITLEMENTS, { ...vars, SRCROOT: '' }).replace(/^\/+/, '') : null;
+    out.push({ name, productType, kind, bundleId: bundleId && !/\$[({]/.test(bundleId) ? bundleId : null, ...(raw && (!bundleId || /\$[({]/.test(bundleId)) ? { unresolved: raw } : {}), entitlements: ent });
+  }
+  return out;
+}
+
+/** App groups (`com.apple.security.application-groups`) a profile's Entitlements allow. */
+export const profileAppGroups = (ent: Record<string, unknown> | undefined): string[] => {
+  const g = ent?.['com.apple.security.application-groups'];
+  return Array.isArray(g) ? g.map(String) : [];
+};
+
+/** Groups the target's entitlements need that the profile does not carry. `*` in a profile allows any group. */
+export function appGroupGaps(want: string[], profileEnt: Record<string, unknown> | undefined): string[] {
+  const have = profileAppGroups(profileEnt);
+  if (have.includes('*')) return [];
+  return want.filter(g => !have.includes(g));
+}
+
+/** The developer portal page of a bundle id (the id is the App Store Connect API resource id of the bundle id). */
+export const bundleIdPortalUrl = (resourceId: string): string => `https://developer.apple.com/account/resources/identifiers/bundleId/edit/${encodeURIComponent(resourceId)}`;
+
+export interface AppGroupGap { bundleId: string; resourceId: string | null; groups: string[]; url: string | null }
+
+/** The agent-first steps to tick the groups (the API cannot do it); the never-press list is part of the text. */
+export function appGroupSteps(g: AppGroupGap): string[] {
+  const url = g.url ?? 'https://developer.apple.com/account/resources/identifiers/list';
+  return [
+    `${g.bundleId}: the profile lacks App Group(s) ${g.groups.join(', ')} (the API can enable the App Groups capability but cannot assign a group to a bundle id).`,
+    `Open ${url} in the signed-in browser (agent-first: you drive it).`,
+    'Capabilities list > App Groups: tick it if it is not ticked, press Configure, tick each group above (Continue if the group is new: register it first under Identifiers > App Groups), Continue, then Save at the top right (and Confirm in the dialog that says the profiles get invalidated).',
+    'Never press: Remove (the bundle id), Delete, Revoke, or any Certificates / Keys / Account button.',
+    `Then run: storebound apple signing ensure --refresh-profile (makes a new profile that carries the group), and storebound apple signing status to read it back.`,
+  ];
+}
+
+/** Groups missing per bundle id -> one gap row each. `groupsOf` and `profileOf` are looked up by bundle id. */
+export function appGroupGapsFor(targets: { bundleId: string; appGroups: string[] }[], profileEnt: (bundleId: string) => Record<string, unknown> | undefined | null, resourceId: (bundleId: string) => string | null): AppGroupGap[] {
+  const out: AppGroupGap[] = [];
+  for (const t of targets) {
+    if (!t.appGroups.length) continue;
+    const ent = profileEnt(t.bundleId);
+    if (ent === null) continue; // no readable profile: unknown, not a gap
+    const groups = appGroupGaps(t.appGroups, ent);
+    if (groups.length) { const rid = resourceId(t.bundleId); out.push({ bundleId: t.bundleId, resourceId: rid, groups, url: rid ? bundleIdPortalUrl(rid) : null }); }
+  }
+  return out;
+}
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index fe0dd52..a961fd6 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -125,14 +125,14 @@ export interface AscAuth { keyPath: string; keyId: string; issuerId: string }
 
 const authArgs = (a: AscAuth | null): string[] => (a ? ['-allowProvisioningUpdates', '-authenticationKeyPath', a.keyPath, '-authenticationKeyID', a.keyId, '-authenticationKeyIssuerID', a.issuerId] : []);
 
-export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null }
+export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null; /** extra build settings, e.g. OTHER_CODE_SIGN_FLAGS=--keychain <path> */ settings?: string[] }
 
 /** xcodebuild archive. Version / build go in as build settings (they beat the project's values). */
 export function archiveArgs(i: ArchiveInput): string[] {
   return ['xcodebuild', ...(i.target.workspace ? ['-workspace', join(i.root, i.target.workspace)] : ['-project', join(i.root, i.target.project!)]),
     '-scheme', i.target.scheme, '-configuration', i.configuration, '-destination', 'generic/platform=iOS', '-archivePath', i.archivePath,
     ...authArgs(i.auth), 'archive', `CURRENT_PROJECT_VERSION=${i.build}`, ...(i.version ? [`MARKETING_VERSION=${i.version}`] : []),
-    ...(i.teamId ? [`DEVELOPMENT_TEAM=${i.teamId}`] : [])];
+    ...(i.teamId ? [`DEVELOPMENT_TEAM=${i.teamId}`] : []), ...(i.settings ?? [])];
 }
 
 export function exportArgs(archivePath: string, plist: string, exportPath: string, auth: AscAuth | null): string[] {
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 9388e08..5a00c04 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -672,7 +672,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `bundleIds_app_getToOneRelationship` | GET | `/v1/bundleIds/{id}/relationships/app` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelated` | GET | `/v1/bundleIds/{id}/bundleIdCapabilities` | read |  |
 | `bundleIds_bundleIdCapabilities_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/bundleIdCapabilities` | read |  |
-| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple/bundle |
+| `bundleIds_createInstance` | POST | `/v1/bundleIds` | write (dry by default) | apple/bundle, apple/signing |
 | `bundleIds_deleteInstance` | DELETE | `/v1/bundleIds/{id}` | owner only (typed confirm) |  |
 | `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple/adhoc, apple/bundle, apple/signing |
 | `bundleIds_getInstance` | GET | `/v1/bundleIds/{id}` | read |  |
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index e54b8e9..9845d21 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -19,7 +19,7 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
 1. **Read.** `storebound apple signing status`: is the bundle id registered (else `storebound apple bundle`), which
    capabilities it has vs `apple.signing.capabilities`, the distribution certificates of the team and whether this
    Mac holds a private key for one (a key file in `.storebound/signing/` or an identity in the keychain), App Store
-   profiles per bundle id (app + `apple.signing.extraBundleIds` for extensions) and whether Xcode has them installed.
+   profiles per bundle id (the app and every extension / widget / watch app / App Clip found in the Xcode project, or `apple.signing.extensions`; `extraBundleIds` adds more) and whether Xcode has them installed. `signing ensure` registers the extensions' bundle ids, enables the capabilities their entitlements need and (manual style) makes their profiles; an App Group the profile lacks is reported with the developer portal link and steps (the API cannot assign a group; then `signing ensure --refresh-profile`, store-pitfalls 121).
    It also compares three places a capability must be and names what is missing where: the App ID, the config's
    `apple.signing.capabilities` and the iOS project's `.entitlements` (`aps-environment` = PUSH_NOTIFICATIONS,
    `com.apple.developer.game-center` = GAME_CENTER, associated domains, Sign in with Apple, iCloud, app groups, ...;
@@ -57,7 +57,12 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    number**: later steps use exactly it. Any archive or export failure exits non-zero, so `apple build && apple upload`
    stops there; an export failure shows the IDEDistribution log's real error lines. xcodebuild runs with Apple's tool
    folders first on PATH (a Homebrew rsync breaks Xcode's IPA step: "exportArchive Copy failed"; `storebound doctor`
-   flags it).
+   flags it). Over SSH or in CI (no GUI session) codesign fails with errSecInternalComponent on a locked keychain:
+   `apple build` stops first and names the fixes. `STOREBOUND_KEYCHAIN_PASSWORD=... storebound apple build
+   --keychain-unlock` unlocks the login keychain and sets its key partition list (the password is read from the
+   environment and never printed); `--keychain <path>` signs with a build keychain (`--keychain <path> --keychain-unlock`
+   unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). With manual signing it
+   also stops when a target's App Group is missing from its installed profile (store-pitfalls 121).
    - Capacitor: the archive ships the web assets `npx cap sync` copied last. Set `build.prebuild` (e.g.
      `"npm run build && npx cap sync"`; per store `apple.prebuild` / `play.prebuild`) and `apple build` / `play build`
      run it first (once per `flow run`; `--no-prebuild` skips it). Then the copied `public/index.html` must be newer
diff --git a/skills/store-api/SKILL.md b/skills/store-api/SKILL.md
index dae8e94..74e61dc 100644
--- a/skills/store-api/SKILL.md
+++ b/skills/store-api/SKILL.md
@@ -42,7 +42,9 @@ storebound api apple salesReports_getCollection --param ... --out report.gz   #
    on stderr (store-pitfalls 78). Never pipe or redirect a write; use the dedicated command the message names.
    An agent without a terminal sends a plain (non-owner) write with `--yes --confirm <operationId>`, the id equal
    to the one the call resolved to (store-pitfalls 92), after showing the dry run. `--confirm` never applies to
-   owner-only operations.
+   owner-only operations. Both flags are needed, and `--confirm` repeats the operation id:
+   `storebound api apple bundleIds_createInstance --body bundle.json --yes --confirm bundleIds_createInstance`
+   (without `--yes` it stays a dry run; a `--confirm` that differs from the id is refused).
 3. Owner-only operations (cli/api/gate.ts: every DELETE, submissions and their cancel, release requests, phased
    release changes, product page test start / stop, price schedules and price migrations, review replies, tester and
    user invitations, Play `edits.commit`, product activation, refunds, revokes and cancels, app signing) also ask for
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 15a874c..4d19934 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1229,8 +1229,13 @@ that fails without the fix (see CONTRIBUTING.md).
   (and read relative to the working directory, not the project).
 - **Do:** run the build in the Mac's logged-in session: a CI agent started there, or from SSH a `.command` file opened
   with `open -a Terminal <file>` (unset SSH_CONNECTION SSH_CLIENT SSH_TTY inside). `--allow-ssh` after
-  `security unlock-keychain` skips the check.
-- **Guard:** `remoteBuildSession` in `cli/lib/xcode.ts` stops `apple build` before the archive; `credPath` in
+  `security unlock-keychain` skips the check. To build over SSH or in CI anyway: export `STOREBOUND_KEYCHAIN_PASSWORD`
+  (never printed, never an argument of storebound) and add `--keychain-unlock` (unlocks the login keychain and runs
+  `security set-key-partition-list -S apple-tool:,apple:,codesign:`), or `--keychain <path> --keychain-unlock` for a
+  build keychain that holds the Apple Distribution key + certificate (`apple signing ensure --keychain <path>` imports
+  them); `--keychain` also signs the archive with `OTHER_CODE_SIGN_FLAGS=--keychain <path>` and puts the keychain on the search list.
+- **Guard:** `remoteBuildSession` in `cli/lib/xcode.ts` stops `apple build` before the archive, and its message names
+  these fixes (`sshBuildRefusal`, `cli/lib/keychain.ts`; `tests/signing-targets.test.ts`); `credPath` in
   `cli/lib/credentials.ts` resolves relative credential paths from the project and `ascKeyFile` hands xcodebuild an
   absolute path (`tests/build-sign.test.ts`).
 
@@ -1454,3 +1459,30 @@ that fails without the fix (see CONTRIBUTING.md).
   attributes first, `text=` last); `shots capture --dry` prints them per size, `--dry --probe` opens the pages and
   names the MISS with the size and every candidate's match count.
 - **Guard:** `tests/shots-gaps.test.ts`, `tests/browser/feature-fit.browser.ts` (rotate), `cli/shots/selectors.ts`.
+||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
+
+## 121. An app extension (share extension, widget, watch app) could not be signed: bundle id not registered, capabilities missing, App Group not in the profile
+
+- **Symptom:** an iOS app with a share extension archived, then failed at export / codesign: "No profile for team 'X'
+  matching 'com.example.app.share' found", "Provisioning profile ... doesn't include the App Groups capability" or
+  "doesn't match the entitlements file's value for the com.apple.security.application-groups entitlement". `apple
+  signing ensure` knew only the app's bundle id and refused (`not registered`) for `extraBundleIds`.
+- **Cause:** every signable target of the archive (app, app extension, widget, watch app, App Clip) is its own bundle id
+  with its own capabilities and profile. And Apple's API can switch the APP_GROUPS capability on for a bundle id but
+  cannot assign a group container to it: the profile carries `com.apple.security.application-groups` only after the
+  group was ticked in the developer portal (Identifiers > the bundle id > App Groups > Configure).
+- **Do:** `storebound apple signing ensure --dry` lists every target found in the Xcode project (PRODUCT_BUNDLE_IDENTIFIER
+  and CODE_SIGN_ENTITLEMENTS of the Release configuration) and what it would register, enable and create; without
+  `--dry` it registers the extension bundle ids, enables the capabilities its entitlements need (the entitlement-to-
+  capability table; `keychain-access-groups` needs none) and, for manual signing, creates an App Store profile per
+  target. It then decodes each profile and compares its App Groups with the target's entitlements: a gap fails with
+  the developer portal deep link `https://developer.apple.com/account/resources/identifiers/bundleId/edit/<id>` and the
+  steps to tick the group (drive it in the signed-in browser; never press Remove / Delete / Revoke). After that
+  `storebound apple signing ensure --refresh-profile` makes the profile again (a normal run reuses the active one, so it
+  does not pile up profiles while the group is unassigned). `apple build` (manual signing) stops before the archive on the
+  same gap (`--allow-app-group-gap` overrides). A variable bundle id (set in an xcconfig) is not resolvable: list the
+  extension in `apple.signing.extensions` (`bundleId`, `capabilities`, `appGroups`), which replaces the detected ones.
+- **Guard:** `cli/lib/targets.ts` (pbxproj targets, App Group comparison, portal link and steps), `discoverTargets` in
+  `cli/apple/signing.ts`, `tests/signing-targets.test.ts` (fixture pbxproj with an app, a share extension and app group
+  entitlements, a decoded profile plist, a fake App Store Connect). There is no `console plan` form for the portal page:
+  the steps are in the error and the warning.
diff --git a/tests/signing-targets.test.ts b/tests/signing-targets.test.ts
new file mode 100644
index 0000000..0104925
--- /dev/null
+++ b/tests/signing-targets.test.ts
@@ -0,0 +1,341 @@
+// Signable targets of an Xcode project (app + share extension + App Group entitlements): `apple signing ensure`
+// registers the extension's bundle id, enables the capabilities its entitlements need, creates its profile and checks
+// the App Group against the profile (the API cannot assign a group to a bundle id); `apple build` over SSH names the
+// keychain fixes; `storebound api` writes say how an agent confirms. Fixtures are placeholders (com.example.*).
+import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
+import { toXmlPlist } from '../cli/lib/plist';
+import { run as signing, discoverTargets, profileEntitlements } from '../cli/apple/signing';
+import { decide, NOT_A_TTY } from '../cli/api/gate';
+import { USAGE } from '../cli/api';
+import { keychainPassword, KEYCHAIN_PASSWORD_ENV, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../cli/lib/keychain';
+import { planProfile, validateSigning } from '../cli/lib/signing';
+import { appGroupGaps, appGroupGapsFor, appGroupSteps, bundleIdPortalUrl, pbxTargets, targetKind } from '../cli/lib/targets';
+import { upsertTiming } from '../cli/lib/upsert';
+import { ascEnv, BASE, capture, mockFetch, project, restore } from './helpers/store-mock';
+
+const APP_ENT = `<?xml version="1.0" encoding="UTF-8"?>
+<plist version="1.0"><dict>
+  <key>aps-environment</key><string>development</string>
+  <key>com.apple.security.application-groups</key><array><string>group.com.example.notes</string></array>
+</dict></plist>`;
+const SHARE_ENT = `<?xml version="1.0" encoding="UTF-8"?>
+<plist version="1.0"><dict>
+  <key>com.apple.security.application-groups</key><array><string>group.com.example.notes</string></array>
+  <key>keychain-access-groups</key><array><string>$(AppIdentifierPrefix)com.example.notes</string></array>
+  <key>com.apple.developer.associated-domains</key><array><string>applinks:example.com</string></array>
+</dict></plist>`;
+
+/** A pbxproj the way Xcode 15 writes it: app, share extension, a unit test bundle, a framework, one variable bundle id. */
+const PBX = `// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	objects = {
+/* Begin PBXNativeTarget section */
+		AAAAAAAAAAAAAAAAAAAAAA01 /* App */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC01 /* Build configuration list for PBXNativeTarget "App" */;
+			buildPhases = ( );
+			name = App;
+			productName = App;
+			productType = "com.apple.product-type.application";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA02 /* ShareExt */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC02 /* Build configuration list for PBXNativeTarget "ShareExt" */;
+			name = ShareExt;
+			productType = "com.apple.product-type.app-extension";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA03 /* AppTests */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC03 /* x */;
+			name = AppTests;
+			productType = "com.apple.product-type.bundle.unit-test";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA04 /* Kit */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC03 /* x */;
+			name = Kit;
+			productType = "com.apple.product-type.framework";
+		};
+		AAAAAAAAAAAAAAAAAAAAAA05 /* Widget */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = CCCCCCCCCCCCCCCCCCCCCC05 /* x */;
+			name = Widget;
+			productType = "com.apple.product-type.app-extension";
+		};
+/* End PBXNativeTarget section */
+/* Begin XCBuildConfiguration section */
+		BBBBBBBBBBBBBBBBBBBBBB01 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = { PRODUCT_BUNDLE_IDENTIFIER = com.example.notes.debug; };
+			name = Debug;
+		};
+		BBBBBBBBBBBBBBBBBBBBBB02 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				CODE_SIGN_ENTITLEMENTS = App/App.entitlements;
+				FRAMEWORK_SEARCH_PATHS = (
+					"$(inherited)",
+					"{braces}",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.example.notes;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+			};
+			name = Release;
+		};
+		BBBBBBBBBBBBBBBBBBBBBB03 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				CODE_SIGN_ENTITLEMENTS = "$(SRCROOT)/Share/Share.entitlements";
+				PRODUCT_BUNDLE_IDENTIFIER = "com.example.notes.$(PRODUCT_NAME:rfc1034identifier)";
+				PRODUCT_NAME = "$(TARGET_NAME)";
+			};
+			name = Release;
+		};
+		BBBBBBBBBBBBBBBBBBBBBB04 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = { PRODUCT_BUNDLE_IDENTIFIER = "$(MY_BASE_ID).widget"; };
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+/* Begin XCConfigurationList section */
+		CCCCCCCCCCCCCCCCCCCCCC01 /* x */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				BBBBBBBBBBBBBBBBBBBBBB01 /* Debug */,
+				BBBBBBBBBBBBBBBBBBBBBB02 /* Release */,
+			);
+		};
+		CCCCCCCCCCCCCCCCCCCCCC02 /* x */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = ( BBBBBBBBBBBBBBBBBBBBBB03 /* Release */, );
+		};
+		CCCCCCCCCCCCCCCCCCCCCC03 /* x */ = { isa = XCConfigurationList; buildConfigurations = ( ); };
+		CCCCCCCCCCCCCCCCCCCCCC05 /* x */ = { isa = XCConfigurationList; buildConfigurations = ( BBBBBBBBBBBBBBBBBBBBBB04 ); };
+/* End XCConfigurationList section */
+	};
+}
+`;
+
+const files = { 'ios/App/App.xcodeproj/project.pbxproj': PBX, 'ios/App/App/App.entitlements': APP_ENT, 'ios/App/Share/Share.entitlements': SHARE_ENT };
+
+describe('pbxproj targets', () => {
+  test('targetKind: only signable product types', () => {
+    expect(targetKind('com.apple.product-type.application')).toBe('app');
+    expect(targetKind('com.apple.product-type.app-extension')).toBe('extension');
+    expect(targetKind('com.apple.product-type.app-extension.messages-sticker-pack')).toBe('extension');
+    expect(targetKind('com.apple.product-type.application.watchapp2')).toBe('watch');
+    expect(targetKind('com.apple.product-type.application.on-demand-install-capable')).toBe('clip');
+    expect(targetKind('com.apple.product-type.framework')).toBeNull();
+    expect(targetKind('com.apple.product-type.bundle.unit-test')).toBeNull();
+  });
+
+  test('app + share extension + widget: bundle ids resolved from Release, entitlements paths, tests and frameworks skipped', () => {
+    const t = pbxTargets(PBX);
+    expect(t.map(x => x.name)).toEqual(['App', 'ShareExt', 'Widget']);
+    expect(t[0]).toMatchObject({ kind: 'app', bundleId: 'com.example.notes', entitlements: 'App/App.entitlements' });
+    expect(t[1]).toMatchObject({ kind: 'extension', bundleId: 'com.example.notes.ShareExt', entitlements: 'Share/Share.entitlements' });
+    expect(t[2]).toMatchObject({ bundleId: null, unresolved: '$(MY_BASE_ID).widget' });
+  });
+
+  test('discoverTargets reads the entitlements: capabilities and app groups per target; unresolved ids are noted', () => {
+    const p = project({ ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101' } }, files);
+    const s = discoverTargets(p.root, p.loaded.config);
+    expect(s.main).toMatchObject({ bundleId: 'com.example.notes', appGroups: ['group.com.example.notes'] });
+    expect(s.main!.capabilities.map(c => c.type).sort()).toEqual(['APP_GROUPS', 'PUSH_NOTIFICATIONS']);
+    expect(s.extensions).toHaveLength(1);
+    expect(s.extensions[0]).toMatchObject({ bundleId: 'com.example.notes.ShareExt', kind: 'extension', source: 'xcode', appGroups: ['group.com.example.notes'] });
+    expect(s.extensions[0]!.capabilities.map(c => c.type).sort()).toEqual(['APP_GROUPS', 'ASSOCIATED_DOMAINS']);   // keychain-access-groups has no capability
+    expect(s.notes.join('\n')).toContain('Widget has bundle id "$(MY_BASE_ID).widget"');
+  });
+
+  test('apple.signing.extensions replaces the detected extensions; extraBundleIds are added', () => {
+    const cfg = { ...BASE, apple: { bundleId: 'com.example.notes', signing: { extensions: [{ bundleId: 'com.example.notes.widget', capabilities: ['PUSH_NOTIFICATIONS' as const], appGroups: ['group.com.example.notes'] }], extraBundleIds: ['com.example.notes.watch'] } } };
+    const p = project(cfg, files);
+    const s = discoverTargets(p.root, p.loaded.config);
+    expect(s.extensions.map(t => t.bundleId)).toEqual(['com.example.notes.widget', 'com.example.notes.watch']);
+    expect(s.extensions[0]).toMatchObject({ source: 'config', appGroups: ['group.com.example.notes'], capabilities: [{ type: 'PUSH_NOTIFICATIONS' }] });
+  });
+
+  test('validateSigning checks the extensions override', () => {
+    expect(validateSigning({ extensions: [{ bundleId: 'com.example.app.share', capabilities: ['APP_GROUPS'], appGroups: ['group.com.example.app'] }] })).toEqual([]);
+    const e = validateSigning({ extensions: [{ bundleId: 'bad id', capabilities: ['NOPE' as never], appGroups: ['x'] }, { bundleId: 'com.example.a', capabilities: ['NOPE' as never], appGroups: ['x'] }] });
+    expect(e.join('\n')).toContain('"bad id" is not a bundle id');
+    expect(e.join('\n')).toContain('unknown capability "NOPE"');
+    expect(e.join('\n')).toContain('appGroups are ids like group.');
+  });
+});
+
+describe('App Group check', () => {
+  const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00trailer`, 'latin1').toString('base64');
+  const profile = (ent: Record<string, unknown>) => ({ id: 'P1', attributes: { name: 'p', profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', expirationDate: '2099-01-01T00:00:00Z', profileContent: prov(ent) } });
+
+  test('the profile plist is decoded and compared with the target\'s groups', () => {
+    const ent = profileEntitlements([profile({ 'application-identifier': 'ABCDE12345.com.example.notes.share', 'com.apple.security.application-groups': ['group.com.example.other'] })])!;
+    expect(appGroupGaps(['group.com.example.notes', 'group.com.example.other'], ent)).toEqual(['group.com.example.notes']);
+    expect(appGroupGaps(['group.com.example.notes'], { 'com.apple.security.application-groups': ['*'] })).toEqual([]);
+    expect(appGroupGaps(['group.com.example.notes'], {})).toEqual(['group.com.example.notes']);
+  });
+
+  test('a managed or contentless profile is unknown, not a gap', () => {
+    expect(profileEntitlements([{ id: 'M', attributes: { profileType: 'IOS_APP_STORE', profileState: 'ACTIVE' }, managed: true }])).toBeNull();
+    expect(appGroupGapsFor([{ bundleId: 'com.example.notes', appGroups: ['group.com.example.notes'] }], () => null, () => 'X')).toEqual([]);
+  });
+
+  test('the gap carries the portal deep link and the agent-first steps with a never-press list', () => {
+    const g = appGroupGapsFor([{ bundleId: 'com.example.notes.share', appGroups: ['group.com.example.notes'] }], () => ({}), () => 'EXT0001');
+    expect(g).toEqual([{ bundleId: 'com.example.notes.share', resourceId: 'EXT0001', groups: ['group.com.example.notes'], url: 'https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001' }]);
+    expect(bundleIdPortalUrl('EXT0001')).toBe(g[0]!.url!);
+    const steps = appGroupSteps(g[0]!).join('\n');
+    expect(steps).toContain(g[0]!.url!);
+    expect(steps).toContain('Never press');
+    expect(steps).toContain('signing ensure --refresh-profile');
+  });
+
+  test('planProfile: --refresh-profile makes a new profile although an active one is reusable', () => {
+    const existing = [{ id: 'P1', certIds: ['C1'], attributes: { name: 'old', profileType: 'IOS_APP_STORE' as const, profileState: 'ACTIVE', expirationDate: '2099-01-01T00:00:00Z' } }];
+    const o = { bundleId: 'com.example.notes', bundleIdId: 'B1', certId: 'C1', type: 'IOS_APP_STORE' as const };
+    expect(planProfile(existing, o).reuse?.id).toBe('P1');
+    const r = planProfile(existing, { ...o, refresh: true });
+    expect(r.reuse).toBeNull();
+    expect(r.create?.path).toBe('/v1/profiles');
+    expect(r.why).toContain('--refresh-profile');
+  });
+});
+
+describe('signing ensure with an extension (fake App Store Connect)', () => {
+  beforeEach(() => { upsertTiming.waitMs = 0; });
+  afterEach(() => { restore(); upsertTiming.waitMs = 3000; });
+
+  const MAIN = 'BUNDLE0001', EXT = 'EXT0001';
+  const cfg = (style: 'automatic' | 'manual') => ({ ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101', signing: { style, capabilities: ['IN_APP_PURCHASE' as const] } } });
+  const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00`, 'latin1').toString('base64');
+
+  function store(o: { groupInProfile: boolean }) {
+    const caps: Record<string, string[]> = { [MAIN]: ['IN_APP_PURCHASE', 'PUSH_NOTIFICATIONS', 'APP_GROUPS'], [EXT]: [] };
+    let registered = false;
+    const bundle = (id: string, ident: string) => ({ type: 'bundleIds', id, attributes: { identifier: ident, platform: 'IOS', seedId: 'ABCDE12345' },
+      relationships: { bundleIdCapabilities: { data: caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}` })) } } });
+    const incl = (id: string) => caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}`, attributes: { capabilityType: t, settings: null } }));
+    const page = (data: unknown[], included: unknown[] = []) => ({ data, included, links: { self: '' }, meta: { paging: { total: data.length, limit: 200 } } });
+    const routes = [
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes\.ShareExt/, answer: () => (registered ? page([bundle(EXT, 'com.example.notes.ShareExt')], incl(EXT)) : page([])) },
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes&/, answer: () => page([bundle(MAIN, 'com.example.notes')], incl(MAIN)) },
+      { method: 'POST', match: /^\/v1\/bundleIds$/, answer: () => { registered = true; return { data: bundle(EXT, 'com.example.notes.ShareExt') }; } },
+      { method: 'POST', match: /^\/v1\/bundleIdCapabilities$/, answer: (c: { body: unknown }) => {
+        const a = (c.body as { data: { attributes: { capabilityType: string }; relationships: { bundleId: { data: { id: string } } } } }).data;
+        caps[a.relationships.bundleId.data.id]!.push(a.attributes.capabilityType);
+        return { data: { type: 'bundleIdCapabilities', id: 'x', attributes: { capabilityType: a.attributes.capabilityType } } };
+      } },
+      { match: /^\/v1\/certificates\?/, answer: page([]) },
+      { method: 'POST', match: /^\/v1\/certificates$/, answer: { data: { type: 'certificates', id: 'CERT0001', attributes: { certificateType: 'DISTRIBUTION', name: 'Apple Distribution: Example', expirationDate: '2099-01-01T00:00:00.000+00:00', certificateContent: Buffer.from('cert').toString('base64') } } } },
+      { match: /^\/v1\/bundleIds\/[A-Z0-9]+\/profiles/, answer: page([]) },
+      { method: 'POST', match: /^\/v1\/profiles$/, answer: (c: { body: unknown }) => {
+        const id = (c.body as { data: { relationships: { bundleId: { data: { id: string } } } } }).data.relationships.bundleId.data.id;
+        const groups = o.groupInProfile ? { 'com.apple.security.application-groups': ['group.com.example.notes'] } : {};
+        return { data: { type: 'profiles', id: `PROF_${id}`, attributes: { name: `storebound ${id}`, profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', uuid: `uuid-${id}`, expirationDate: '2099-01-01T00:00:00.000+00:00', profileContent: prov({ 'application-identifier': `ABCDE12345.${id}`, ...groups }) } } };
+      } },
+      { match: /^\/v1\/apps\/6400000101\/gameCenterDetail/, answer: { errors: [{ status: '404' }] }, status: 404 },
+    ];
+    return { routes: routes as never, caps, isRegistered: () => registered };
+  }
+
+  test('--dry lists every target: the extension bundle id, its capabilities and (manual) its profile', async () => {
+    ascEnv();
+    const p = project(cfg('manual'), files);
+    const s = store({ groupInProfile: true });
+    const calls = mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--dry'])));
+    const all = r.out + r.err;
+    expect(all).toContain('POST /v1/bundleIds');
+    expect(all).toContain('register com.example.notes.ShareExt');
+    expect(all).toMatch(/POST \/v1\/bundleIdCapabilities \{capabilityType="APP_GROUPS"\}  # com\.example\.notes\.ShareExt, after it is registered/);
+    expect(all).toContain('ASSOCIATED_DOMAINS');
+    expect(all).toContain('# com.example.notes.ShareExt: with the new certificate');
+    expect(all).not.toContain('ASSOCIATED_DOMAINS is in ios/App/Share/Share.entitlements');   // the extension's entitlements are not compared with the app's App ID
+    expect(calls.filter(c => c.method !== 'GET')).toEqual([]);
+  });
+
+  test('automatic: registers the extension bundle id and its capabilities, reads them back, no profile', async () => {
+    ascEnv();
+    const p = project(cfg('automatic'), files);
+    const s = store({ groupInProfile: true });
+    const calls = mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--yes'])));
+    expect(r.exit).toBeNull();
+    const writes = calls.filter(c => c.method !== 'GET').map(c => `${c.method} ${c.path}`);
+    expect(writes[0]).toBe('POST /v1/bundleIds');
+    expect(writes.filter(w => w === 'POST /v1/bundleIdCapabilities')).toHaveLength(2);
+    expect(writes.some(w => /profiles|certificates/.test(w))).toBe(false);
+    expect(s.caps.EXT0001!.sort()).toEqual(['APP_GROUPS', 'ASSOCIATED_DOMAINS']);
+    const reg = calls.find(c => c.method === 'POST' && c.path === '/v1/bundleIds')!.body as { data: { attributes: Record<string, string> } };
+    expect(reg.data.attributes).toMatchObject({ identifier: 'com.example.notes.ShareExt', platform: 'IOS', name: 'Example Notes ShareExt' });
+  });
+
+  test('manual: a profile for the app and the extension; the group missing from the profile fails with the portal link and steps', async () => {
+    ascEnv();
+    const p = project(cfg('manual'), files);
+    const s = store({ groupInProfile: false });
+    const calls = mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--yes', '--no-install']))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
+    const all = r.out + r.err;
+    expect(calls.filter(c => c.method === 'POST' && c.path === '/v1/profiles')).toHaveLength(2);
+    expect(all).toContain('com.example.notes.ShareExt lacks group.com.example.notes');
+    expect(all).toContain('https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001');
+    expect(all).toContain('signing ensure --refresh-profile');
+  });
+
+  test('manual: the profile carries the group: ensure finishes', async () => {
+    ascEnv();
+    const p = project(cfg('manual'), files);
+    const s = store({ groupInProfile: true });
+    mockFetch(s.routes);
+    const r = await capture(() => signing(p.ctx(['ensure', '--yes', '--no-install'])));
+    expect(r.exit).toBeNull();
+    expect(r.out + r.err).toContain('signing ready');
+  });
+});
+
+describe('apple build over SSH: the keychain fixes', () => {
+  test('the refusal names the GUI session, the CI runner and the keychain flags', () => {
+    const m = sshBuildRefusal('this is an SSH session');
+    expect(m).toContain('errSecInternalComponent');
+    expect(m).toContain('open -a Terminal');
+    expect(m).toContain('Jenkins');
+    expect(m).toContain('security unlock-keychain');
+    expect(m).toContain('security set-key-partition-list');
+    expect(m).toContain('--keychain-unlock');
+    expect(m).toContain('--keychain <path>');
+    expect(m).toContain(KEYCHAIN_PASSWORD_ENV);
+    expect(sshBuildRefusal('x', { unlockFlag: false })).not.toContain('--keychain-unlock');
+  });
+
+  test('unlock steps carry a PASSWORD placeholder that is never shown; the build keychain joins the search list', () => {
+    const steps = unlockSteps('/tmp/build.keychain-db', ['/Users/example/Library/Keychains/login.keychain-db']);
+    expect(steps.map(s => s[1])).toEqual(['unlock-keychain', 'set-key-partition-list', 'list-keychains']);
+    expect(steps[1]).toContain('apple-tool:,apple:,codesign:');
+    expect(steps[2]).toEqual(['security', 'list-keychains', '-d', 'user', '-s', '/tmp/build.keychain-db', '/Users/example/Library/Keychains/login.keychain-db']);
+    expect(showSecurity(steps[0]!)).toBe(`security unlock-keychain -p $${KEYCHAIN_PASSWORD_ENV} /tmp/build.keychain-db`);
+    expect(unlockSteps('/a', ['/a']).map(s => s[1])).toEqual(['unlock-keychain', 'set-key-partition-list']);
+    expect(parseKeychainList('    "/Users/example/Library/Keychains/login.keychain-db"\n    "/Library/Keychains/System.keychain"\n')).toEqual(['/Users/example/Library/Keychains/login.keychain-db', '/Library/Keychains/System.keychain']);
+  });
+
+  test('the password comes from the environment; its absence is an error that names the variable only', () => {
+    expect(() => keychainPassword({})).toThrow(KEYCHAIN_PASSWORD_ENV);
+    expect(keychainPassword({ [KEYCHAIN_PASSWORD_ENV]: 'pw-for-test' })).toBe('pw-for-test');
+    try { keychainPassword({}); } catch (e) { expect((e as Error).message).not.toContain('pw-for-test'); }
+  });
+});
+
+describe('storebound api writes: --yes --confirm <operationId>', () => {
+  const w = { store: 'apple' as const, method: 'POST', kind: 'write' as const, opId: 'bundleIds_createInstance', yes: false, tty: false, dry: false, agent: false };
+  test('the usage and the refusals show the example', () => {
+    expect(USAGE).toContain('--yes --confirm bundleIds_createInstance');
+    expect(NOT_A_TTY).toContain('--yes --confirm bundleIds_createInstance');
+    const d = decide(w as never);
+    expect(d.action).toBe('dry');
+    const why = (d as { why: string }).why;
+    expect(why).toContain('--yes --confirm bundleIds_createInstance');
+    expect(why).toContain('storebound api apple bundleIds_createInstance --body body.json');
+  });
+});

From 5236f002f195ea2011e6f4b0c4588485abfbcc36 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 13:44:08 +0800
Subject: [PATCH 152/255] desktop: tray menu panels and pinnable context menus

The tray's right-click menu is drawn by the app: one tree from tray.rs
(stable submenu keys), one frameless always-on-top menu-N window per
panel rendered by tray-menu.html with the design system, placed inside
the monitor's work area. A pure panel book keeps transient and pinned
panels apart; pinned panels (pin button, Ctrl+click, middle click) are
draggable, step aside from each other and are saved in state.json
(menuPins) and restored at start. tray_update pushes the tree to the
open panels, which update in place; closed panels are destroyed. The
native menu, rendered from the same tree, stays as the fallback and on
Linux. Only menu-* windows get the menu_* commands (menu.json).

In-app context menus get the same behaviour through a pure menu stack
(ui/menu-stack.ts): pin a menu, tear off a submenu, pinned panels
survive the next menu, are draggable and re-read their entries from
live sources so data changes update them in place.

Also drops a stray diff3 marker line from CHANGELOG.md.
---
 CHANGELOG.md                                  |   3 +-
 apps/desktop/src-tauri/build.rs               |   2 +-
 apps/desktop/src-tauri/capabilities/menu.json |  21 +
 apps/desktop/src-tauri/src/commands.rs        |  81 ++
 apps/desktop/src-tauri/src/commands_list.rs   |   3 +
 apps/desktop/src-tauri/src/lib.rs             |  83 +-
 apps/desktop/src-tauri/src/menu_panel.rs      | 744 ++++++++++++++++++
 apps/desktop/src-tauri/src/policy.rs          |  11 +
 apps/desktop/src-tauri/src/store.rs           |   6 +-
 apps/desktop/src-tauri/src/tray.rs            |  58 +-
 apps/desktop/src-tauri/tauri.conf.json        |   2 +-
 apps/desktop/src-tauri/tests/menu_panel.rs    | 203 +++++
 apps/desktop/src-tauri/tests/security.rs      |  47 +-
 apps/desktop/src-tauri/tests/tray.rs          |   2 +-
 apps/desktop/src/App.tsx                      |   2 +-
 apps/desktop/src/design.css                   |  13 +
 apps/desktop/src/i18n/en.ts                   |   6 +
 apps/desktop/src/i18n/tr.ts                   |   6 +
 apps/desktop/src/screens/AppView.tsx          |   4 +-
 apps/desktop/src/screens/Ignored.tsx          |   2 +-
 apps/desktop/src/screens/Portfolio.tsx        |   6 +-
 apps/desktop/src/traymenu/TrayMenu.tsx        | 166 ++++
 apps/desktop/src/traymenu/demo.tsx            |  55 ++
 apps/desktop/src/traymenu/main.tsx            |  70 ++
 apps/desktop/src/traymenu/menu-api.ts         |  33 +
 apps/desktop/src/traymenu/model.ts            |  75 ++
 apps/desktop/src/traymenu/traymenu.css        |  28 +
 apps/desktop/src/ui/ContextMenu.tsx           | 282 +++++--
 apps/desktop/src/ui/icons.tsx                 |   4 +-
 apps/desktop/src/ui/menu-stack.ts             | 140 ++++
 apps/desktop/tests/menu-stack.test.ts         | 150 ++++
 apps/desktop/tests/tray-menu.test.ts          |  85 ++
 apps/desktop/tray-menu.html                   |  14 +
 apps/desktop/vite.config.ts                   |   5 +-
 docs/desktop.md                               |  19 +
 35 files changed, 2308 insertions(+), 123 deletions(-)
 create mode 100644 apps/desktop/src-tauri/capabilities/menu.json
 create mode 100644 apps/desktop/src-tauri/src/menu_panel.rs
 create mode 100644 apps/desktop/src-tauri/tests/menu_panel.rs
 create mode 100644 apps/desktop/src/traymenu/TrayMenu.tsx
 create mode 100644 apps/desktop/src/traymenu/demo.tsx
 create mode 100644 apps/desktop/src/traymenu/main.tsx
 create mode 100644 apps/desktop/src/traymenu/menu-api.ts
 create mode 100644 apps/desktop/src/traymenu/model.ts
 create mode 100644 apps/desktop/src/traymenu/traymenu.css
 create mode 100644 apps/desktop/src/ui/menu-stack.ts
 create mode 100644 apps/desktop/tests/menu-stack.test.ts
 create mode 100644 apps/desktop/tests/tray-menu.test.ts
 create mode 100644 apps/desktop/tray-menu.html

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5a15c38..ac914f7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,10 +3,11 @@
 
 ## Unreleased
 
+- Desktop tray: the right-click menu is drawn by the app (the design system's menu look) instead of the OS menu. Each submenu opens as its own small panel; the pin button, Ctrl+click or a middle click keeps a panel open (pinned): it can be dragged, steps aside so it never covers another pinned panel, and comes back after a restart. Values (the apps and their store state, mute) update in place after every store read without closing anything. The native menu stays as a fallback (and on Linux), built from the same menu tree. The left-click tray card is unchanged.
+- Desktop right-click menus in the window work the same way: a menu's pin button keeps it open as a floating panel, a submenu can be torn off (its pin button, Ctrl+click or a middle click), pinned panels survive the next menu, can be dragged, and update in place when the data behind them changes ("Gone" when the thing they were for left the screen).
 - `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
 - `shots check` / `shots render` without frames for a language that has copy use the default language's frames (an info line, no failure); `shots.perLanguageFrames: true` requires per-language frames. `shots fonts --lang en,tr` limits the report to those languages (the font manifest keeps all of them).
 - `shots capture` web shots take `waitSelector` and `click` selector lists per layout (`{ phone, tablet, any }`, data attributes first, `text=` fallback). A miss names the selector and the size with every candidate's match count; `shots capture --dry` prints the candidates per size and `--dry --probe` opens the pages and reports which one matched or MISSed on which size.
-||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
 
 - `apple signing ensure` signs every target of the Xcode project, not only the app: it reads the pbxproj targets (app, app extensions such as a share extension or widget, watch app, App Clip: Release PRODUCT_BUNDLE_IDENTIFIER and entitlements), registers each extension's bundle id (`POST /v1/bundleIds`, platform from the profile type), enables the capabilities its entitlements need (read back) and, with manual signing, creates its App Store profile; `--dry` lists every target. `apple.signing.extensions` (`bundleId`, `name`, `capabilities`, `appGroups`) replaces the detected extensions when detection is wrong; `status` shows a target table.
 - App Groups: the API cannot assign a group to a bundle id, so `signing status` / `ensure` and (manual signing) `apple build` decode the profile and compare its `com.apple.security.application-groups` with the target's entitlements; a gap names the developer portal link (`.../identifiers/bundleId/edit/<id>`) and the steps to tick the group. `signing ensure --refresh-profile` makes the profile again afterwards; `apple build --allow-app-group-gap` overrides.
diff --git a/apps/desktop/src-tauri/build.rs b/apps/desktop/src-tauri/build.rs
index 673bde2..02a67cc 100644
--- a/apps/desktop/src-tauri/build.rs
+++ b/apps/desktop/src-tauri/build.rs
@@ -5,7 +5,7 @@ include!("src/commands_list.rs");
 fn main() {
     tauri_build::try_build(
         tauri_build::Attributes::new()
-            .app_manifest(tauri_build::AppManifest::new().commands(Box::leak([COMMANDS, CARD_COMMANDS].concat().into_boxed_slice()))),
+            .app_manifest(tauri_build::AppManifest::new().commands(Box::leak([COMMANDS, CARD_COMMANDS, MENU_COMMANDS].concat().into_boxed_slice()))),
     )
     .expect("tauri build script failed");
 }
diff --git a/apps/desktop/src-tauri/capabilities/menu.json b/apps/desktop/src-tauri/capabilities/menu.json
new file mode 100644
index 0000000..2f5783e
--- /dev/null
+++ b/apps/desktop/src-tauri/capabilities/menu.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "../gen/schemas/desktop-schema.json",
+  "identifier": "menu-window",
+  "description": "The tray menu panels (menu-1, menu-2...: small frameless windows the app opens on a right click on the tray icon, one per open or pinned submenu) with the app's own bundled tray-menu page only. They may listen to app events (the live menu tree) and call the menu commands: read their panel, report their size, open, pin and close panels, pick a row, which runs the same tray action as the native menu, and start a drag of their own window (a pinned panel's header). They never read the stores or reach the sidecar; every command re-checks the window label and page origin in Rust.",
+  "windows": ["menu-*"],
+  "local": true,
+  "permissions": [
+    "core:event:allow-listen",
+    "core:event:allow-unlisten",
+    "core:window:allow-start-dragging",
+    "allow-menu-state",
+    "allow-menu-ready",
+    "allow-menu-open-sub",
+    "allow-menu-pin-sub",
+    "allow-menu-close-subs",
+    "allow-menu-close",
+    "allow-menu-dismiss",
+    "allow-menu-pin",
+    "allow-menu-select"
+  ]
+}
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index 2cbf8f9..9739e6a 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -49,6 +49,11 @@ fn guard_card(w: &WebviewWindow) -> Res<()> {
     policy::require_card(w.label(), &url, cfg!(debug_assertions)).map_err(Fail::host)
 }
 
+fn guard_menu(w: &WebviewWindow) -> Res<()> {
+    let url = w.url().map_err(|e| Fail::host(e.to_string()))?;
+    policy::require_menu(w.label(), &url, cfg!(debug_assertions)).map_err(Fail::host)
+}
+
 fn saved(s: &AppState) -> Res<std::sync::MutexGuard<'_, Saved>> {
     s.saved.lock().map_err(|_| Fail::host("state poisoned"))
 }
@@ -1665,3 +1670,79 @@ pub async fn ai_fix_undo(window: WebviewWindow, run_id: String) -> Res<Vec<Strin
     let rec = ai_fix::runs().lock().ok().and_then(|mut m| m.remove(&run_id)).ok_or_else(|| Fail::host("no such AI fix run"))?;
     tauri::async_runtime::spawn_blocking(move || ai_fix::undo(&rec.0, &rec.1)).await.map_err(|e| Fail::host(e.to_string()))?.map_err(Fail::host)
 }
+
+// ---- the tray menu panels (menu_panel.rs; only `menu-*` windows) ----
+
+/// A panel: what it shows (the whole tree and its path into it).
+#[tauri::command]
+pub fn menu_state(window: WebviewWindow) -> Res<Option<crate::menu_panel::PanelInfo>> {
+    guard_menu(&window)?;
+    Ok(crate::menu_panel::panel_state(&window))
+}
+
+/// A panel measured itself (CSS px): sized, placed inside the work area and shown.
+#[tauri::command]
+pub fn menu_ready(window: WebviewWindow, width: f64, height: f64) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::ready(&window, width, height);
+    Ok(())
+}
+
+/// Opens a submenu beside this panel at the row whose top is `top` (CSS px).
+#[tauri::command]
+pub fn menu_open_sub(window: WebviewWindow, key: String, top: f64, focus: bool) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::open_sub(&window, &key, top, focus, false);
+    Ok(())
+}
+
+/// Ctrl / middle click on a submenu row: opens it as its own pinned panel.
+#[tauri::command]
+pub fn menu_pin_sub(window: WebviewWindow, key: String, top: f64) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::open_sub(&window, &key, top, false, true);
+    Ok(())
+}
+
+/// The pointer moved to a plain row: this panel's submenus close.
+#[tauri::command]
+pub fn menu_close_subs(window: WebviewWindow) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::close_subs(&window);
+    Ok(())
+}
+
+/// Closes this panel (Left / Esc in a submenu, X on a pinned one).
+#[tauri::command]
+pub fn menu_close(window: WebviewWindow, refocus_parent: bool) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::close(&window, refocus_parent);
+    Ok(())
+}
+
+/// Esc on the root menu: every transient panel closes.
+#[tauri::command]
+pub fn menu_dismiss(window: WebviewWindow) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::dismiss(window.app_handle());
+    Ok(())
+}
+
+/// Pins or unpins this panel.
+#[tauri::command]
+pub fn menu_pin(window: WebviewWindow, pinned: bool) -> Res<()> {
+    guard_menu(&window)?;
+    crate::menu_panel::pin(&window, pinned);
+    Ok(())
+}
+
+/// A pick: the same action as the native tray menu (an id tray.rs knows; anything else is refused).
+#[tauri::command]
+pub fn menu_select(window: WebviewWindow, id: String) -> Res<()> {
+    guard_menu(&window)?;
+    if id.len() > 300 || crate::tray::action_of(&id).is_none() {
+        return Err(Fail::host("unknown menu item"));
+    }
+    crate::menu_panel::select(&window, id);
+    Ok(())
+}
diff --git a/apps/desktop/src-tauri/src/commands_list.rs b/apps/desktop/src-tauri/src/commands_list.rs
index 1daea05..a076389 100644
--- a/apps/desktop/src-tauri/src/commands_list.rs
+++ b/apps/desktop/src-tauri/src/commands_list.rs
@@ -56,3 +56,6 @@ pub const COMMANDS: &[&str] = &[
 
 /// The tray card window's commands (capabilities/card.json grants them to the `card` window only).
 pub const CARD_COMMANDS: &[&str] = &["card_get", "card_action"];
+
+/// The tray menu panels' commands (capabilities/menu.json grants them to the `menu-*` windows only).
+pub const MENU_COMMANDS: &[&str] = &["menu_state", "menu_ready", "menu_open_sub", "menu_pin_sub", "menu_close_subs", "menu_close", "menu_dismiss", "menu_pin", "menu_select"];
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index 2ef5046..e616bdd 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -8,6 +8,7 @@ pub mod commands;
 pub mod confirm;
 pub mod downloads;
 pub mod logs;
+pub mod menu_panel;
 pub mod policy;
 pub mod profiles;
 pub mod registry;
@@ -43,17 +44,53 @@ fn started_hidden() -> bool {
     std::env::args().any(|a| a == "--hidden")
 }
 
-/// Tray icon: a click shows the window; the menu (tray.rs) opens the window, reads the stores, lists the apps with their
-/// state, mutes notifications, checks for updates, opens Settings and quits (the only real quit on Windows and Linux,
-/// where closing the window keeps the app running in the tray). The window refines tooltip, menu and icon after every
-/// read (`tray_update`).
+/// Tray icon: a left click shows the tray card (card.rs), a right click the app's own menu panels (menu_panel.rs, with
+/// the tree from tray.rs: open the window, read the stores, the apps with their state, mute, updates, Settings and Quit,
+/// the only real quit on Windows and Linux, where closing the window keeps the app running in the tray). The window
+/// refines tooltip, menu and icon after every read (`tray_update`). Linux trays send no clicks: the native menu,
+/// rendered from the same tree, stays on the icon there (and anywhere the panels fail).
 fn tray(app: &tauri::App) -> tauri::Result<()> {
-    let menu = tray::initial_menu(app.handle())?;
-    let mut b = TrayIconBuilder::with_id("main").tooltip("storebound").menu(&menu).show_menu_on_left_click(false);
+    let handle = app.handle();
+    let panels = handle.state::<menu_panel::MenuPanels>();
+    if let Ok(mut n) = panels.nodes.lock() {
+        *n = tray::initial_nodes();
+    }
+    let mut b = TrayIconBuilder::with_id("main").tooltip("storebound").show_menu_on_left_click(false);
+    if cfg!(target_os = "linux") {
+        panels.native.store(true, std::sync::atomic::Ordering::Relaxed);
+        b = b.menu(&tray::native_menu(handle, &tray::initial_nodes())?);
+    }
     if let Some(icon) = app.default_window_icon() {
         b = b.icon(icon.clone());
     }
-    b.on_menu_event(|app, e| match tray::action_of(e.id().as_ref()) {
+    b.on_menu_event(|app, e| dispatch_menu(app, e.id().as_ref()))
+        .on_tray_icon_event(|t, e| {
+            let TrayIconEvent::Click { button, button_state: MouseButtonState::Up, rect, position, .. } = e else { return };
+            let app = t.app_handle();
+            match button {
+                // right click: the menu panels at the click point
+                MouseButton::Right => menu_panel::open_root(app, position.x, position.y),
+                // left click: the tray card next to the icon
+                MouseButton::Left => {
+                    if app.get_webview_window(card::LABEL).is_none() {
+                        show_main(app);
+                        return;
+                    }
+                    let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
+                    let p = rect.position.to_physical::<f64>(scale);
+                    let s = rect.size.to_physical::<f64>(scale);
+                    card::toggle(app, card::Rect { x: p.x, y: p.y, w: s.width, h: s.height });
+                }
+                _ => {}
+            }
+        })
+        .build(app)?;
+    Ok(())
+}
+
+/// A tray menu pick (a menu panel row or the native fallback menu): tray.rs maps the id to what it does.
+pub fn dispatch_menu<R: Runtime>(app: &AppHandle<R>, id: &str) {
+    match tray::action_of(id) {
         Some(tray::Action::Open) => show_main(app),
         Some(tray::Action::Quit) => app.exit(0),
         Some(tray::Action::Event(word)) => {
@@ -64,23 +101,7 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
             let _ = app.emit_to(policy::MAIN, "tray-route", route);
         }
         None => {}
-    })
-    .on_tray_icon_event(|t, e| {
-        // left click: the tray card next to the icon (right click keeps the native menu)
-        if let TrayIconEvent::Click { button: MouseButton::Left, button_state: MouseButtonState::Up, rect, .. } = e {
-            let app = t.app_handle();
-            if app.get_webview_window(card::LABEL).is_none() {
-                show_main(app);
-                return;
-            }
-            let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
-            let p = rect.position.to_physical::<f64>(scale);
-            let s = rect.size.to_physical::<f64>(scale);
-            card::toggle(app, card::Rect { x: p.x, y: p.y, w: s.width, h: s.height });
-        }
-    })
-    .build(app)?;
-    Ok(())
+    }
 }
 
 /// Silent self-update: at start (after a minute) and every 30 minutes, a signed update from storebound.dev is
@@ -282,7 +303,7 @@ pub fn run() {
         .plugin(tauri_plugin_single_instance::init(|app, _argv, _cwd| show_main(app)))
         .plugin(tauri_plugin_deep_link::init())
         // never restore "visible": a --hidden start would otherwise pop the window up
-        .plugin(tauri_plugin_window_state::Builder::new().with_state_flags(tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::VISIBLE).build())
+        .plugin(tauri_plugin_window_state::Builder::new().with_filter(|label| !label.starts_with(menu_panel::LABEL_PREFIX)).with_state_flags(tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::VISIBLE).build())
         .plugin(tauri_plugin_autostart::init(MacosLauncher::LaunchAgent, Some(vec!["--hidden"])))
         .plugin(tauri_plugin_shell::init())
         .plugin(tauri_plugin_opener::init())
@@ -337,7 +358,10 @@ pub fn run() {
                 Err(e) => logs::host("warn", &format!("autostart not set: {e}")),
             }
             app.manage(state);
+            app.manage(menu_panel::MenuPanels::default());
             tray(app)?;
+            // pinned tray menu panels of the last session come back
+            menu_panel::restore(app.handle());
             if let Err(e) = card::create(app.handle()) {
                 logs::host("warn", &format!("tray card not created: {e}"));
             }
@@ -438,6 +462,15 @@ pub fn run() {
             commands::ai_fix_undo,
             commands::card_get,
             commands::card_action,
+            commands::menu_state,
+            commands::menu_ready,
+            commands::menu_open_sub,
+            commands::menu_pin_sub,
+            commands::menu_close_subs,
+            commands::menu_close,
+            commands::menu_dismiss,
+            commands::menu_pin,
+            commands::menu_select,
         ])
         .build(tauri::generate_context!())
         .expect("storebound desktop failed to start");
diff --git a/apps/desktop/src-tauri/src/menu_panel.rs b/apps/desktop/src-tauri/src/menu_panel.rs
new file mode 100644
index 0000000..3809791
--- /dev/null
+++ b/apps/desktop/src-tauri/src/menu_panel.rs
@@ -0,0 +1,744 @@
+//! The tray's right-click menu, drawn by the app itself instead of the OS menu (tray-menu.html, src/traymenu/).
+//!
+//! - One tree: tray.rs builds the menu as `Entry`s, turned here into `Node`s. Every submenu has a stable key (its label
+//!   without the live part), so an open or pinned panel finds its submenu again after the values change.
+//! - One window per panel: the root menu and each submenu are their own frameless, always-on-top `menu-N` windows. The
+//!   page measures itself and calls `menu_ready`; Rust sizes, places (inside the monitor's work area) and shows it.
+//! - The panel book (`Book`, pure, tests/menu_panel.rs) records which panels are open, which are pinned and whose child
+//!   each one is. Transient panels close together (focus left all of them, Esc, a pick); pinned ones stay, can be
+//!   dragged, step aside so they never cover each other and come back after a restart (`menuPins` in state.json).
+//! - Live: every `tray_update` pushes the tree to the open panels (`menu-model`), which update in place. Nothing polls.
+//! - Idle: a closed panel is destroyed, never hidden.
+//! - Fallback: when a panel window cannot be built or never reports ready, the native tray menu (rendered from the same
+//!   tree) comes back. Linux always uses it (its tray sends no click events).
+//!
+//! The top half is pure and covered by tests/menu_panel.rs.
+use std::collections::BTreeMap;
+use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
+use std::sync::Mutex;
+use std::time::Duration;
+
+use serde::{Deserialize, Serialize};
+
+use crate::tray::Entry;
+
+pub const LABEL_PREFIX: &str = "menu-";
+pub const PAGE: &str = "tray-menu.html";
+pub const MODEL_EVENT: &str = "menu-model";
+pub const PANEL_EVENT: &str = "menu-panel";
+/// Gap to the work area's edges (physical px at scale 1).
+pub const GAP: f64 = 8.0;
+/// The estimated size of a panel before it measured itself (logical px).
+pub const EST: (f64, f64) = (280.0, 220.0);
+
+// ---------------------------------------------------------------- model
+
+#[derive(Serialize, Clone, Debug, PartialEq, Eq)]
+#[serde(tag = "kind", rename_all = "camelCase")]
+pub enum Node {
+    Item { id: String, label: String, enabled: bool },
+    Sep,
+    Sub { key: String, label: String, items: Vec<Node> },
+}
+
+/// A submenu's stable key: its label without status glyphs and without the live part after ':' / '·' / '('
+/// ("Apps (3)" -> "apps", "Apps · 2 need you" -> "apps"). Pinned panels are found again by these keys.
+pub fn sub_key(label: &str) -> String {
+    let head = label.split([':', '\u{00B7}', '(']).next().unwrap_or("");
+    let mut out = String::new();
+    for c in head.chars() {
+        if c.is_alphanumeric() {
+            out.extend(c.to_lowercase());
+        } else if (c == ' ' || c == '-' || c == '_') && !out.is_empty() && !out.ends_with('-') {
+            out.push('-');
+        }
+    }
+    let out = out.trim_end_matches('-').to_string();
+    if out.is_empty() { "sub".into() } else { out }
+}
+
+/// Sibling submenus with the same key get "-2", "-3"...
+pub fn unique_keys(mut nodes: Vec<Node>) -> Vec<Node> {
+    let mut seen: BTreeMap<String, u32> = BTreeMap::new();
+    for n in nodes.iter_mut() {
+        if let Node::Sub { key, .. } = n {
+            let count = seen.entry(key.clone()).or_insert(0);
+            *count += 1;
+            if *count > 1 {
+                *key = format!("{key}-{count}");
+            }
+        }
+    }
+    nodes
+}
+
+/// The tray menu entries as panel nodes. A submenu keeps the fixed key tray.rs gives it (so a translated label never
+/// changes it), else the key comes from its label.
+pub fn from_entries(entries: &[Entry]) -> Vec<Node> {
+    let nodes = entries
+        .iter()
+        .map(|e| match e {
+            Entry::Item { id, label, enabled } => Node::Item { id: id.clone(), label: label.clone(), enabled: *enabled },
+            Entry::Separator => Node::Sep,
+            Entry::Sub { key, label, items } => Node::Sub { key: if key.is_empty() { sub_key(label) } else { sub_key(key) }, label: label.clone(), items: from_entries(items) },
+        })
+        .collect();
+    unique_keys(nodes)
+}
+
+/// The items of the submenu at `path` (empty path: the root) and its label.
+pub fn find<'a>(nodes: &'a [Node], path: &[String]) -> Option<(&'a [Node], Option<&'a str>)> {
+    let mut current = nodes;
+    let mut label = None;
+    for key in path {
+        let (items, l) = current.iter().find_map(|n| match n {
+            Node::Sub { key: k, label: l, items } if k == key => Some((items.as_slice(), l.as_str())),
+            _ => None,
+        })?;
+        current = items;
+        label = Some(l);
+    }
+    Some((current, label))
+}
+
+// ---------------------------------------------------------------- placement
+
+#[derive(Clone, Copy, Debug, PartialEq)]
+pub enum Anchor {
+    /// The tray click point (physical).
+    Point { x: f64, y: f64 },
+    /// Beside a parent panel: its left and right edge and the row's top (physical).
+    Beside { left: f64, right: f64, top: f64 },
+    /// A remembered top-left (pinned panels).
+    At { x: f64, y: f64 },
+}
+
+/// x, y, width, height (physical px).
+pub type Rect = (f64, f64, f64, f64);
+
+/// Keeps a panel of size w x h fully inside the work area (with `GAP`).
+pub fn clamp_into(x: f64, y: f64, w: f64, h: f64, work: Rect) -> (f64, f64) {
+    let (wx, wy, ww, wh) = work;
+    (x.clamp(wx + GAP, (wx + ww - w - GAP).max(wx + GAP)), y.clamp(wy + GAP, (wy + wh - h - GAP).max(wy + GAP)))
+}
+
+/// Where a panel of `size` goes for `anchor`, inside the work area: the root opens away from the taskbar / menu bar the
+/// click is near, a submenu beside its parent (flipped left at the screen edge), a pinned panel at its spot.
+pub fn place_menu(anchor: Anchor, size: (f64, f64), work: Rect) -> (f64, f64) {
+    let (w, h) = size;
+    let (wx, wy, ww, wh) = work;
+    let (x, y) = match anchor {
+        Anchor::Point { x, y } => (if x + w > wx + ww { x - w } else { x }, if y + h > wy + wh { y - h } else { y }),
+        Anchor::Beside { left, right, top } => (if right + w <= wx + ww - GAP { right - 2.0 } else { left - w + 2.0 }, top - 5.0),
+        Anchor::At { x, y } => (x, y),
+    };
+    clamp_into(x, y, w, h, work)
+}
+
+pub fn overlaps(a: Rect, b: Rect) -> bool {
+    a.0 < b.0 + b.2 && b.0 < a.0 + a.2 && a.1 < b.1 + b.3 && b.1 < a.1 + a.3
+}
+
+/// A spot for a newly pinned panel that covers no other pinned panel: below whatever it overlaps, then the next column.
+/// Gives up after a while (a screen full of pins) and returns the clamped wish.
+pub fn free_spot(want: Rect, others: &[Rect], work: Rect) -> (f64, f64) {
+    let (mut x, mut y, w, h) = want;
+    for _ in 0..64 {
+        let Some(hit) = others.iter().find(|o| overlaps((x, y, w, h), **o)) else {
+            return clamp_into(x, y, w, h, work);
+        };
+        y = hit.1 + hit.3 + GAP;
+        if y + h > work.1 + work.3 {
+            y = work.1 + GAP;
+            x += w + GAP;
+            if x + w > work.0 + work.2 {
+                x = work.0 + GAP;
+            }
+        }
+    }
+    clamp_into(want.0, want.1, w, h, work)
+}
+
+// ---------------------------------------------------------------- panel book
+
+#[derive(Clone, Debug, PartialEq)]
+pub struct Panel {
+    pub path: Vec<String>,
+    pub pinned: bool,
+    pub parent: Option<String>,
+    pub anchor: Anchor,
+    /// Measured and shown once.
+    pub shown: bool,
+    /// Physical top-left once shown (kept for pins).
+    pub pos: Option<(f64, f64)>,
+    /// Opened from the keyboard: takes focus and starts on its first row.
+    pub focus: bool,
+}
+
+/// A pinned panel as state.json keeps it (`menuPins`).
+#[derive(Serialize, Deserialize, Clone, Debug, PartialEq, Eq)]
+pub struct PinRecord {
+    pub path: Vec<String>,
+    pub x: i32,
+    pub y: i32,
+}
+
+/// Which panels are open, which are pinned, who is whose child.
+#[derive(Default, Debug)]
+pub struct Book {
+    pub panels: BTreeMap<String, Panel>,
+    next: u32,
+}
+
+impl Book {
+    fn add(&mut self, path: Vec<String>, pinned: bool, parent: Option<String>, anchor: Anchor) -> String {
+        self.next += 1;
+        let label = format!("{LABEL_PREFIX}{}", self.next);
+        self.panels.insert(label.clone(), Panel { path, pinned, parent, anchor, shown: false, pos: None, focus: false });
+        label
+    }
+
+    fn remove_all(&mut self, labels: &[String]) {
+        for l in labels {
+            self.panels.remove(l);
+        }
+    }
+
+    pub fn transient(&self) -> Vec<String> {
+        self.panels.iter().filter(|(_, p)| !p.pinned).map(|(l, _)| l.clone()).collect()
+    }
+
+    /// Transient panels below `label` (children first).
+    pub fn descendants(&self, label: &str) -> Vec<String> {
+        let mut out = Vec::new();
+        let mut frontier = vec![label.to_string()];
+        while let Some(l) = frontier.pop() {
+            for (child, p) in &self.panels {
+                if p.parent.as_deref() == Some(l.as_str()) && !p.pinned && !out.contains(child) {
+                    out.push(child.clone());
+                    frontier.push(child.clone());
+                }
+            }
+        }
+        out
+    }
+
+    /// A fresh root menu: every transient panel closes, pinned ones stay. Returns the new label and the closed ones.
+    pub fn open_root(&mut self, anchor: Anchor) -> (String, Vec<String>) {
+        let closes = self.transient();
+        self.remove_all(&closes);
+        (self.add(vec![], false, None, anchor), closes)
+    }
+
+    /// Opens submenu `key` of `parent`; its other transient children close. None when that submenu already is the open
+    /// child, or the parent is gone. `pinned`: torn off as its own pinned panel (one pinned copy per submenu).
+    pub fn open_sub(&mut self, parent: &str, key: &str, anchor: Anchor, pinned: bool) -> Option<(String, Vec<String>)> {
+        let mut path = self.panels.get(parent)?.path.clone();
+        path.push(key.to_string());
+        if !pinned && self.panels.values().any(|p| p.parent.as_deref() == Some(parent) && !p.pinned && p.path == path) {
+            return None;
+        }
+        let mut closes = self.descendants(parent);
+        self.remove_all(&closes);
+        if pinned {
+            let old: Vec<String> = self.panels.iter().filter(|(_, p)| p.pinned && p.path == path).map(|(l, _)| l.clone()).collect();
+            for l in old {
+                closes.extend(self.close(&l));
+            }
+            return Some((self.add(path, true, None, anchor), closes));
+        }
+        Some((self.add(path, false, Some(parent.to_string()), anchor), closes))
+    }
+
+    /// Closes `label` and its transient children.
+    pub fn close(&mut self, label: &str) -> Vec<String> {
+        if !self.panels.contains_key(label) {
+            return vec![];
+        }
+        let mut out = self.descendants(label);
+        out.push(label.to_string());
+        self.remove_all(&out);
+        out
+    }
+
+    /// Every transient panel closes (Esc on the root, a pick, focus left the menus).
+    pub fn dismiss(&mut self) -> Vec<String> {
+        let t = self.transient();
+        self.remove_all(&t);
+        t
+    }
+
+    /// Pin or unpin. Pinning detaches the panel from its chain: the transient panels that are not its own children
+    /// close (returned). A second pinned copy of the same submenu closes too.
+    pub fn pin(&mut self, label: &str, on: bool) -> Vec<String> {
+        let Some(p) = self.panels.get(label) else { return vec![] };
+        let path = p.path.clone();
+        if !on {
+            if let Some(p) = self.panels.get_mut(label) {
+                p.pinned = false;
+            }
+            return vec![];
+        }
+        let mut closes: Vec<String> = self.panels.iter().filter(|(l, p)| p.pinned && p.path == path && l.as_str() != label).map(|(l, _)| l.clone()).collect();
+        if let Some(p) = self.panels.get_mut(label) {
+            p.pinned = true;
+            p.parent = None;
+        }
+        let mine = self.descendants(label);
+        closes.extend(self.transient().into_iter().filter(|l| l != label && !mine.contains(l)));
+        self.remove_all(&closes);
+        closes
+    }
+
+    /// The tree changed: transient panels whose submenu is gone close (with their children). Pinned ones stay and show
+    /// that their submenu is gone until it comes back (an app that is read again) or they are closed.
+    pub fn prune(&mut self, nodes: &[Node]) -> Vec<String> {
+        let gone: Vec<String> = self.panels.iter().filter(|(_, p)| !p.pinned && find(nodes, &p.path).is_none()).map(|(l, _)| l.clone()).collect();
+        let mut out = Vec::new();
+        for l in gone {
+            if self.panels.contains_key(&l) {
+                out.extend(self.close(&l));
+            }
+        }
+        out
+    }
+
+    /// The pinned panels to save (only placed ones; in label order, so the order is stable).
+    pub fn pins(&self) -> Vec<PinRecord> {
+        self.panels
+            .values()
+            .filter(|p| p.pinned)
+            .filter_map(|p| p.pos.map(|(x, y)| PinRecord { path: p.path.clone(), x: x.round() as i32, y: y.round() as i32 }))
+            .collect()
+    }
+
+    /// Recreates pinned panels from a saved list (duplicates and more than `MAX_PINS` dropped).
+    pub fn restore(&mut self, pins: &[PinRecord]) -> Vec<String> {
+        let mut out = Vec::new();
+        for r in pins.iter().take(MAX_PINS) {
+            if self.panels.values().any(|p| p.pinned && p.path == r.path) || r.path.len() > 8 {
+                continue;
+            }
+            let (x, y) = (r.x as f64, r.y as f64);
+            let l = self.add(r.path.clone(), true, None, Anchor::At { x, y });
+            if let Some(p) = self.panels.get_mut(&l) {
+                p.pos = Some((x, y));
+            }
+            out.push(l);
+        }
+        out
+    }
+}
+
+/// At most this many pinned panels are restored after a restart.
+pub const MAX_PINS: usize = 12;
+
+/// A panel label the app made (`menu-` and a number), for the window / command checks.
+pub fn is_menu_label(label: &str) -> bool {
+    label.strip_prefix(LABEL_PREFIX).is_some_and(|n| !n.is_empty() && n.len() <= 9 && n.chars().all(|c| c.is_ascii_digit()))
+}
+
+// ---------------------------------------------------------------- runtime
+
+#[derive(Serialize, Clone, Debug)]
+#[serde(rename_all = "camelCase")]
+pub struct PanelInfo {
+    pub label: String,
+    pub path: Vec<String>,
+    pub pinned: bool,
+    pub has_parent: bool,
+    pub focus_first: bool,
+    pub nodes: Vec<Node>,
+}
+
+/// The panels' shared state (managed by the app).
+#[derive(Default)]
+pub struct MenuPanels {
+    pub book: Mutex<Book>,
+    pub nodes: Mutex<Vec<Node>>,
+    /// The native menu took over (a panel failed, or Linux).
+    pub native: AtomicBool,
+    /// Bumped on every move of a pinned panel; the save runs once the moves stop.
+    moves: AtomicU64,
+}
+
+#[cfg(desktop)]
+mod runtime {
+    use super::*;
+    use tauri::{AppHandle, Emitter, Manager, PhysicalPosition, PhysicalSize, WebviewUrl, WebviewWindow, WebviewWindowBuilder};
+
+    fn state(app: &AppHandle) -> tauri::State<'_, MenuPanels> {
+        app.state::<MenuPanels>()
+    }
+
+    fn book<R>(app: &AppHandle, f: impl FnOnce(&mut Book) -> R) -> R {
+        let s = state(app);
+        let mut b = s.book.lock().unwrap_or_else(|e| e.into_inner());
+        f(&mut b)
+    }
+
+    fn nodes(app: &AppHandle) -> Vec<Node> {
+        state(app).nodes.lock().map(|n| n.clone()).unwrap_or_default()
+    }
+
+    pub fn native_fallback(app: &AppHandle) -> bool {
+        state(app).native.load(Ordering::Relaxed)
+    }
+
+    /// Puts the native menu (from the current tree) on the tray: the fallback, and Linux.
+    pub fn set_native(app: &AppHandle) {
+        let Some(tray) = app.tray_by_id("main") else { return };
+        match crate::tray::native_menu(app, &nodes(app)) {
+            Ok(m) => {
+                let _ = tray.set_menu(Some(m));
+            }
+            Err(e) => crate::logs::host("warn", &format!("native tray menu not built: {e}")),
+        }
+    }
+
+    /// Writes the pinned panels into state.json (`menuPins`).
+    fn save_pins(app: &AppHandle) {
+        let pins = book(app, |b| b.pins());
+        let Some(s) = app.try_state::<crate::commands::AppState>() else { return };
+        let Ok(mut st) = s.saved.lock() else { return };
+        if st.menu_pins == pins {
+            return;
+        }
+        st.menu_pins = pins;
+        if let Err(e) = crate::store::save(&s.data_dir, &st) {
+            crate::logs::host("warn", &format!("menu pins not saved: {e}"));
+        }
+    }
+
+    /// Stores the latest tree and pushes it to every open panel (they update in place). Panels of a submenu that is gone
+    /// close when transient. Cheap when nothing changed or no panel is open.
+    pub fn set_nodes(app: &AppHandle, next: Vec<Node>) {
+        let changed = {
+            let s = state(app);
+            let mut g = s.nodes.lock().unwrap_or_else(|e| e.into_inner());
+            let changed = *g != next;
+            *g = next.clone();
+            changed
+        };
+        if !changed {
+            return;
+        }
+        let (closes, open) = book(app, |b| (b.prune(&next), b.panels.keys().cloned().collect::<Vec<_>>()));
+        destroy(app, &closes);
+        for l in open {
+            let _ = app.emit_to(l.as_str(), MODEL_EVENT, &next);
+        }
+        if native_fallback(app) {
+            set_native(app);
+        }
+    }
+
+    fn destroy(app: &AppHandle, labels: &[String]) {
+        for l in labels {
+            if let Some(w) = app.get_webview_window(l) {
+                let _ = w.destroy();
+            }
+        }
+    }
+
+    fn build_window(app: &AppHandle, label: &str) -> tauri::Result<WebviewWindow> {
+        let b = WebviewWindowBuilder::new(app, label, WebviewUrl::App(PAGE.into()))
+            .title("storebound")
+            .inner_size(EST.0, EST.1)
+            .decorations(false)
+            .always_on_top(true)
+            .skip_taskbar(true)
+            .resizable(false)
+            .shadow(true)
+            .visible(false)
+            .focused(false);
+        #[cfg(not(target_os = "macos"))]
+        let b = b.transparent(true);
+        let window = b.build()?;
+        #[cfg(target_os = "macos")]
+        let _ = window.set_visible_on_all_workspaces(true);
+        let handle = app.clone();
+        let me = label.to_string();
+        window.on_window_event(move |event| match event {
+            tauri::WindowEvent::Focused(false) => {
+                let handle = handle.clone();
+                std::thread::spawn(move || {
+                    std::thread::sleep(Duration::from_millis(160));
+                    close_transient_unless_focused(&handle);
+                });
+            }
+            tauri::WindowEvent::Moved(pos) => {
+                let pinned = book(&handle, |b| match b.panels.get_mut(&me) {
+                    Some(p) if p.shown => {
+                        p.pos = Some((pos.x as f64, pos.y as f64));
+                        p.pinned
+                    }
+                    _ => false,
+                });
+                if pinned {
+                    // a drag sends many moves: save once they stop
+                    let n = state(&handle).moves.fetch_add(1, Ordering::Relaxed) + 1;
+                    let handle = handle.clone();
+                    std::thread::spawn(move || {
+                        std::thread::sleep(Duration::from_millis(400));
+                        if state(&handle).moves.load(Ordering::Relaxed) == n {
+                            save_pins(&handle);
+                        }
+                    });
+                }
+            }
+            _ => {}
+        });
+        Ok(window)
+    }
+
+    /// Focus left a menu window: every transient panel closes unless one of them has focus now.
+    fn close_transient_unless_focused(app: &AppHandle) {
+        let transient = book(app, |b| b.transient());
+        if transient.iter().any(|l| app.get_webview_window(l).and_then(|w| w.is_focused().ok()).unwrap_or(false)) {
+            return;
+        }
+        book(app, |b| {
+            for l in &transient {
+                b.panels.remove(l);
+            }
+        });
+        destroy(app, &transient);
+    }
+
+    /// The panels cannot be shown: the native menu goes on the tray and opens once now.
+    fn native_popup(app: &AppHandle) {
+        if !state(app).native.swap(true, Ordering::Relaxed) {
+            crate::logs::host("warn", "tray menu panels unavailable: the native menu is used");
+        }
+        set_native(app);
+        let handle = app.clone();
+        let _ = app.run_on_main_thread(move || {
+            if let (Some(w), Ok(menu)) = (handle.get_webview_window(crate::policy::MAIN), crate::tray::native_menu(&handle, &nodes(&handle))) {
+                let _ = w.popup_menu(&menu);
+            }
+        });
+    }
+
+    /// A right click on the tray icon: a fresh root menu at the click point (physical px).
+    pub fn open_root(app: &AppHandle, x: f64, y: f64) {
+        if native_fallback(app) {
+            return; // the native menu is on the tray and opens by itself
+        }
+        let (label, closes) = book(app, |b| b.open_root(Anchor::Point { x, y }));
+        destroy(app, &closes);
+        let handle = app.clone();
+        std::thread::spawn(move || {
+            if let Err(e) = build_window(&handle, &label) {
+                crate::logs::host("warn", &format!("tray menu panel not built: {e}"));
+                book(&handle, |b| b.panels.remove(&label));
+                native_popup(&handle);
+                return;
+            }
+            std::thread::sleep(Duration::from_millis(2500));
+            if book(&handle, |b| b.panels.get(&label).map(|p| p.shown)) == Some(false) {
+                crate::logs::host("warn", "tray menu panel never reported ready");
+                let closes = book(&handle, |b| b.close(&label));
+                destroy(&handle, &closes);
+                native_popup(&handle);
+            }
+        });
+    }
+
+    /// Brings back the pinned panels of the last session (state.json `menuPins`).
+    pub fn restore(app: &AppHandle) {
+        let pins = app.try_state::<crate::commands::AppState>().and_then(|s| s.saved.lock().ok().map(|st| st.menu_pins.clone())).unwrap_or_default();
+        if pins.is_empty() || native_fallback(app) {
+            return;
+        }
+        let labels = book(app, |b| b.restore(&pins));
+        let handle = app.clone();
+        std::thread::spawn(move || {
+            for l in labels {
+                if build_window(&handle, &l).is_err() {
+                    book(&handle, |b| b.panels.remove(&l));
+                }
+            }
+        });
+    }
+
+    fn work_area(app: &AppHandle, x: f64, y: f64) -> Option<Rect> {
+        let m = app.monitor_from_point(x, y).ok().flatten().or_else(|| app.primary_monitor().ok().flatten())?;
+        let w = m.work_area();
+        Some((w.position.x as f64, w.position.y as f64, w.size.width as f64, w.size.height as f64))
+    }
+
+    fn anchor_point(a: Anchor) -> (f64, f64) {
+        match a {
+            Anchor::Point { x, y } | Anchor::At { x, y } => (x, y),
+            Anchor::Beside { right, top, .. } => (right, top),
+        }
+    }
+
+    fn outer_rect(w: &WebviewWindow) -> Option<Rect> {
+        let p = w.outer_position().ok()?;
+        let s = w.outer_size().ok()?;
+        Some((p.x as f64, p.y as f64, s.width as f64, s.height as f64))
+    }
+
+    fn pinned_rects(app: &AppHandle, skip: &str) -> Vec<Rect> {
+        let labels: Vec<String> = book(app, |b| b.panels.iter().filter(|(l, p)| p.pinned && l.as_str() != skip).map(|(l, _)| l.clone()).collect());
+        labels.iter().filter_map(|l| app.get_webview_window(l).and_then(|w| outer_rect(&w))).collect()
+    }
+
+    // ---- what the panel page calls (commands.rs checks the window first) ----
+
+    pub fn panel_state(window: &WebviewWindow) -> Option<PanelInfo> {
+        let app = window.app_handle();
+        let p = book(app, |b| b.panels.get(window.label()).cloned())?;
+        Some(PanelInfo { label: window.label().into(), path: p.path, pinned: p.pinned, has_parent: p.parent.is_some(), focus_first: p.focus, nodes: nodes(app) })
+    }
+
+    /// The panel measured itself (CSS px): size it, place it inside the work area, show it the first time.
+    pub fn ready(window: &WebviewWindow, width: f64, height: f64) {
+        let app = window.app_handle().clone();
+        let Some(panel) = book(&app, |b| b.panels.get(window.label()).cloned()) else { return };
+        let scale = window.scale_factor().unwrap_or(1.0);
+        let size = ((width.clamp(120.0, 600.0) * scale).ceil(), (height.clamp(40.0, 900.0) * scale).ceil());
+        let (ax, ay) = panel.pos.unwrap_or_else(|| anchor_point(panel.anchor));
+        let Some(work) = work_area(&app, ax, ay) else { return };
+        let (x, y) = if panel.shown {
+            let (x, y, _, _) = outer_rect(window).unwrap_or((ax, ay, 0.0, 0.0));
+            clamp_into(x, y, size.0, size.1, work)
+        } else if let Some((x, y)) = panel.pos {
+            clamp_into(x, y, size.0, size.1, work)
+        } else {
+            place_menu(panel.anchor, size, work)
+        };
+        let _ = window.set_size(PhysicalSize::new(size.0 as u32, size.1 as u32));
+        let _ = window.set_position(PhysicalPosition::new(x as i32, y as i32));
+        if !panel.shown {
+            book(&app, |b| {
+                if let Some(p) = b.panels.get_mut(window.label()) {
+                    p.shown = true;
+                    p.pos = Some((x, y));
+                }
+            });
+            let _ = window.show();
+            if panel.focus || (panel.parent.is_none() && !panel.pinned) {
+                let _ = window.set_focus();
+            }
+            if panel.pinned {
+                save_pins(&app);
+            }
+        }
+    }
+
+    /// Opens submenu `key` beside this panel at the row whose top is `top` (CSS px). `pinned`: torn off (Ctrl / middle
+    /// click), placed so it covers no other pinned panel.
+    pub fn open_sub(window: &WebviewWindow, key: &str, top: f64, focus: bool, pinned: bool) {
+        let app = window.app_handle().clone();
+        let Some((wx, wy, ww, _)) = outer_rect(window) else { return };
+        let scale = window.scale_factor().unwrap_or(1.0);
+        let anchor = Anchor::Beside { left: wx, right: wx + ww, top: wy + top.max(0.0) * scale };
+        let Some((label, closes)) = book(&app, |b| b.open_sub(window.label(), key, anchor, pinned)) else { return };
+        destroy(&app, &closes);
+        if pinned {
+            let others = pinned_rects(&app, &label);
+            if let Some(work) = work_area(&app, wx, wy) {
+                let est = (EST.0 * scale, EST.1 * scale);
+                let (x, y) = place_menu(anchor, est, work);
+                let spot = free_spot((x, y, est.0, est.1), &others, work);
+                book(&app, |b| {
+                    if let Some(p) = b.panels.get_mut(&label) {
+                        p.pos = Some(spot);
+                    }
+                });
+            }
+        }
+        book(&app, |b| {
+            if let Some(p) = b.panels.get_mut(&label) {
+                p.focus = focus;
+            }
+        });
+        let handle = app.clone();
+        std::thread::spawn(move || {
+            if build_window(&handle, &label).is_err() {
+                book(&handle, |b| b.panels.remove(&label));
+            }
+        });
+    }
+
+    /// The pointer moved to a plain row: this panel's transient submenus close.
+    pub fn close_subs(window: &WebviewWindow) {
+        let app = window.app_handle().clone();
+        let closes = book(&app, |b| {
+            let d = b.descendants(window.label());
+            for l in &d {
+                b.panels.remove(l);
+            }
+            d
+        });
+        destroy(&app, &closes);
+    }
+
+    /// Closes this panel (Left / Esc in a submenu, X on a pinned one).
+    pub fn close(window: &WebviewWindow, refocus_parent: bool) {
+        let app = window.app_handle().clone();
+        let (closes, parent, was_pinned) = book(&app, |b| {
+            let p = b.panels.get(window.label()).cloned();
+            (b.close(window.label()), p.as_ref().and_then(|p| p.parent.clone()), p.is_some_and(|p| p.pinned))
+        });
+        if refocus_parent {
+            if let Some(w) = parent.and_then(|p| app.get_webview_window(&p)) {
+                let _ = w.set_focus();
+                let _ = app.emit_to(w.label(), PANEL_EVENT, "focus");
+            }
+        }
+        destroy(&app, &closes);
+        if was_pinned {
+            save_pins(&app);
+        }
+    }
+
+    /// Esc on the root menu: every transient panel closes.
+    pub fn dismiss(app: &AppHandle) {
+        let closes = book(app, |b| b.dismiss());
+        destroy(app, &closes);
+    }
+
+    /// Pin or unpin this panel. Pinning steps it aside from the other pinned panels.
+    pub fn pin(window: &WebviewWindow, on: bool) {
+        let app = window.app_handle().clone();
+        let label = window.label().to_string();
+        let closes = book(&app, |b| b.pin(&label, on));
+        destroy(&app, &closes);
+        if on {
+            let others = pinned_rects(&app, &label);
+            if let Some(me) = outer_rect(window) {
+                if let Some(work) = work_area(&app, me.0, me.1) {
+                    let (x, y) = free_spot(me, &others, work);
+                    if (x, y) != (me.0, me.1) {
+                        let _ = window.set_position(PhysicalPosition::new(x as i32, y as i32));
+                    }
+                    book(&app, |b| {
+                        if let Some(p) = b.panels.get_mut(&label) {
+                            p.pos = Some((x, y));
+                        }
+                    });
+                }
+            }
+        }
+        let _ = app.emit_to(label.as_str(), PANEL_EVENT, if on { "pinned" } else { "unpinned" });
+        save_pins(&app);
+    }
+
+    /// A pick: the same action as the native menu. Transient panels close; pinned ones stay and update in place.
+    pub fn select(window: &WebviewWindow, id: String) {
+        let app = window.app_handle().clone();
+        let pinned = book(&app, |b| b.panels.get(window.label()).map(|p| p.pinned).unwrap_or(false));
+        if !pinned {
+            dismiss(&app);
+        }
+        let handle = app.clone();
+        let _ = app.run_on_main_thread(move || crate::dispatch_menu(&handle, &id));
+    }
+}
+
+#[cfg(desktop)]
+pub use runtime::*;
diff --git a/apps/desktop/src-tauri/src/policy.rs b/apps/desktop/src-tauri/src/policy.rs
index 8d6cfff..3381956 100644
--- a/apps/desktop/src-tauri/src/policy.rs
+++ b/apps/desktop/src-tauri/src/policy.rs
@@ -56,6 +56,17 @@ pub fn require_card(label: &str, url: &Url, dev: bool) -> Result<(), String> {
     Ok(())
 }
 
+/// The tray menu panels (`menu-1`, `menu-2`... menu_panel.rs): they may call only the menu commands.
+pub fn require_menu(label: &str, url: &Url, dev: bool) -> Result<(), String> {
+    if !crate::menu_panel::is_menu_label(label) {
+        return Err(format!("not allowed from window '{label}'"));
+    }
+    if !is_local_origin(url, dev) {
+        return Err("not allowed from this page".into());
+    }
+    Ok(())
+}
+
 /// Method kinds the sidecar announces in its `session.hello` descriptors.
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
 pub enum Kind {
diff --git a/apps/desktop/src-tauri/src/store.rs b/apps/desktop/src-tauri/src/store.rs
index 5d2c567..f999653 100644
--- a/apps/desktop/src-tauri/src/store.rs
+++ b/apps/desktop/src-tauri/src/store.rs
@@ -45,11 +45,14 @@ pub struct State {
     pub overrides: Overrides,
     #[serde(default)]
     pub settings: Settings,
+    /// Pinned tray menu panels and where they sit (menu_panel.rs); restored at start.
+    #[serde(default, rename = "menuPins", skip_serializing_if = "Vec::is_empty")]
+    pub menu_pins: Vec<crate::menu_panel::PinRecord>,
 }
 
 impl Default for State {
     fn default() -> State {
-        State { version: VERSION, projects: vec![], accounts: vec![], studios: vec![], overrides: Overrides::default(), settings: Settings::default() }
+        State { version: VERSION, projects: vec![], accounts: vec![], studios: vec![], overrides: Overrides::default(), settings: Settings::default(), menu_pins: vec![] }
     }
 }
 
@@ -121,6 +124,7 @@ pub fn migrate(mut v: Value) -> (State, u32, Vec<String>) {
         studios: list(&o, "studios", &mut notes),
         overrides: one(&o, "overrides", &mut notes),
         settings: one(&o, "settings", &mut notes),
+        menu_pins: list(&o, "menuPins", &mut notes),
     };
     // two entries with one id (hand-edited or merged files): the first one wins
     let mut seen = std::collections::HashSet::new();
diff --git a/apps/desktop/src-tauri/src/tray.rs b/apps/desktop/src-tauri/src/tray.rs
index e3a653f..0b23b9f 100644
--- a/apps/desktop/src-tauri/src/tray.rs
+++ b/apps/desktop/src-tauri/src/tray.rs
@@ -1,7 +1,7 @@
 //! The tray: tooltip, attention icon, context menu and the "where to go" memory of the last notification.
 //!
 //! The window pushes a small summary after every store read (`tray_update`); this module turns it into a menu model
-//! (pure, tested in tests/tray.rs), rebuilds the menu, sets the tooltip and swaps the icon for one with a red dot while
+//! (pure, tested in tests/tray.rs), pushes it to the menu panels (menu_panel.rs), sets the tooltip and swaps the icon for one with a red dot while
 //! something needs the owner. Menu clicks come back as events to the window: `tray-route` (a route as JSON) and
 //! `tray-action` (`read`, `mute-toggle`).
 //!
@@ -14,7 +14,9 @@ use std::time::{Duration, Instant};
 use serde::Deserialize;
 use serde_json::Value;
 use tauri::image::Image;
-use tauri::menu::{Menu, MenuItem, PredefinedMenuItem, Submenu};
+use tauri::menu::{IsMenuItem, Menu, MenuItem, PredefinedMenuItem, Submenu};
+
+use crate::menu_panel::{from_entries, Node};
 use tauri::{AppHandle, Runtime};
 
 pub const ID_OPEN: &str = "tray-open";
@@ -88,7 +90,8 @@ pub struct TraySummary {
 pub enum Entry {
     Item { id: String, label: String, enabled: bool },
     Separator,
-    Sub { label: String, items: Vec<Entry> },
+    /// `key`: the submenu's fixed key (menu_panel::sub_key), the same in every language.
+    Sub { key: String, label: String, items: Vec<Entry> },
 }
 
 fn clean(s: &str, max: usize) -> String {
@@ -132,7 +135,7 @@ pub fn menu_model(s: &TraySummary) -> Vec<Entry> {
         item(ID_OPEN, &l.open),
         item(ID_READ, &l.read_now),
         Entry::Separator,
-        Entry::Sub { label: clean(&l.apps, 40), items: apps },
+        Entry::Sub { key: "apps".into(), label: clean(&l.apps, 40), items: apps },
         Entry::Separator,
         item(ID_MUTE, if s.muted { &l.unmute } else { &l.mute }),
         item(ID_UPDATE, &l.update),
@@ -233,40 +236,45 @@ pub fn take_pending() -> Option<String> {
 
 static LAST: Mutex<Option<String>> = Mutex::new(None);
 
-fn build_menu<R: Runtime>(app: &AppHandle<R>, model: &[Entry]) -> tauri::Result<Menu<R>> {
-    let menu = Menu::new(app)?;
-    for e in model {
-        match e {
-            Entry::Item { id, label, enabled } => menu.append(&MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)?,
-            Entry::Separator => menu.append(&PredefinedMenuItem::separator(app)?)?,
-            Entry::Sub { label, items } => {
-                let sub = Submenu::new(app, label, true)?;
-                for it in items {
-                    if let Entry::Item { id, label, enabled } = it {
-                        sub.append(&MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)?;
-                    }
-                }
-                menu.append(&sub)?;
+/// The native menu items for a panel tree (the fallback, and Linux), nested to any depth.
+fn native_items<R: Runtime>(app: &AppHandle<R>, nodes: &[Node]) -> tauri::Result<Vec<Box<dyn IsMenuItem<R>>>> {
+    let mut out: Vec<Box<dyn IsMenuItem<R>>> = Vec::new();
+    for n in nodes {
+        match n {
+            Node::Item { id, label, enabled } => out.push(Box::new(MenuItem::with_id(app, id, label, *enabled, None::<&str>)?)),
+            Node::Sep => out.push(Box::new(PredefinedMenuItem::separator(app)?)),
+            Node::Sub { label, items, .. } => {
+                let children = native_items(app, items)?;
+                let refs: Vec<&dyn IsMenuItem<R>> = children.iter().map(|b| b.as_ref()).collect();
+                out.push(Box::new(Submenu::with_items(app, label, true, &refs)?));
             }
         }
     }
-    Ok(menu)
+    Ok(out)
 }
 
-/// The menu shown before the window has sent anything (English words).
-pub fn initial_menu<R: Runtime>(app: &AppHandle<R>) -> tauri::Result<Menu<R>> {
-    build_menu(app, &menu_model(&TraySummary::default()))
+/// The native tray menu, rendered from the same tree as the panels.
+pub fn native_menu<R: Runtime>(app: &AppHandle<R>, nodes: &[Node]) -> tauri::Result<Menu<R>> {
+    let items = native_items(app, nodes)?;
+    let refs: Vec<&dyn IsMenuItem<R>> = items.iter().map(|b| b.as_ref()).collect();
+    Menu::with_items(app, &refs)
 }
 
-/// Applies a summary: tooltip, menu and icon of the tray with id `main`. Skips the work when nothing changed.
-pub fn apply<R: Runtime>(app: &AppHandle<R>, s: &TraySummary) -> tauri::Result<()> {
+/// The tree before the window has sent anything (English words).
+pub fn initial_nodes() -> Vec<Node> {
+    from_entries(&menu_model(&TraySummary::default()))
+}
+
+/// Applies a summary: tooltip and icon of the tray with id `main`, and the menu tree, which goes live to the open menu
+/// panels (and to the native menu when that is in use). Skips the work when nothing changed.
+pub fn apply(app: &AppHandle, s: &TraySummary) -> tauri::Result<()> {
     let Some(tray) = app.tray_by_id("main") else { return Ok(()) };
     let key = format!("{s:?}");
     if LAST.lock().ok().is_some_and(|l| l.as_deref() == Some(key.as_str())) {
         return Ok(());
     }
     tray.set_tooltip(Some(tooltip_text(s)))?;
-    tray.set_menu(Some(build_menu(app, &menu_model(s))?))?;
+    crate::menu_panel::set_nodes(app, from_entries(&menu_model(s)));
     if let Some(icon) = app.default_window_icon() {
         let img = if s.attention > 0 { Image::new_owned(with_attention_dot(icon.rgba(), icon.width(), icon.height()), icon.width(), icon.height()) } else { icon.clone() };
         tray.set_icon(Some(img))?;
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index c786df1..b95e93c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -50,7 +50,7 @@
         "form-action": "'none'"
       },
       "freezePrototype": true,
-      "capabilities": ["main-window", "card-window"]
+      "capabilities": ["main-window", "card-window", "menu-window"]
     }
   },
   "bundle": {
diff --git a/apps/desktop/src-tauri/tests/menu_panel.rs b/apps/desktop/src-tauri/tests/menu_panel.rs
new file mode 100644
index 0000000..0f89878
--- /dev/null
+++ b/apps/desktop/src-tauri/tests/menu_panel.rs
@@ -0,0 +1,203 @@
+//! The tray menu panels' pure half: the tree and its stable keys, live updates, placement inside the work area, the
+//! panel book (transient vs pinned, parents, restore after a restart).
+use storebound_desktop::menu_panel::*;
+use storebound_desktop::store::State;
+use storebound_desktop::tray::{menu_model, Entry, TrayApp, TrayLabels, TraySummary};
+
+const WORK: Rect = (0.0, 0.0, 1920.0, 1040.0);
+const AT: Anchor = Anchor::At { x: 0.0, y: 0.0 };
+
+fn summary(state: &str, apps_label: &str) -> TraySummary {
+    TraySummary {
+        apps: vec![TrayApp { key: "k1".into(), name: "First".into(), state: state.into() }, TrayApp { key: "k2".into(), name: "Second".into(), state: String::new() }],
+        labels: TrayLabels { apps: apps_label.into(), ..TrayLabels::default() },
+        ..TraySummary::default()
+    }
+}
+
+fn tree() -> Vec<Node> {
+    from_entries(&[
+        Entry::Item { id: "open".into(), label: "Open".into(), enabled: true },
+        Entry::Separator,
+        Entry::Sub { key: String::new(), label: "Fleet".into(), items: vec![Entry::Sub { key: String::new(), label: "Recently lowered".into(), items: vec![] }] },
+        Entry::Sub { key: String::new(), label: "Profile: Work".into(), items: vec![] },
+    ])
+}
+
+#[test]
+fn keys_ignore_live_parts_and_stay_unique() {
+    assert_eq!(sub_key("Profile: Work"), "profile");
+    assert_eq!(sub_key("\u{25CF} First  \u{00B7}  ok"), "first");
+    assert_eq!(sub_key("Queue (1 running, 2 queued)"), "queue");
+    assert_eq!(sub_key("\u{2716}"), "sub");
+    let nodes = unique_keys(vec![Node::Sub { key: "a".into(), label: "A".into(), items: vec![] }, Node::Sub { key: "a".into(), label: "A".into(), items: vec![] }]);
+    assert!(matches!(&nodes[1], Node::Sub { key, .. } if key == "a-2"));
+}
+
+#[test]
+fn find_walks_keys() {
+    let t = tree();
+    let (items, label) = find(&t, &["fleet".into(), "recently-lowered".into()]).unwrap();
+    assert_eq!((items.len(), label), (0, Some("Recently lowered")));
+    assert!(find(&t, &["nope".into()]).is_none());
+    assert_eq!(find(&t, &[]).unwrap().0.len(), 4);
+}
+
+#[test]
+fn the_tray_tree_keeps_its_apps_key_in_every_language_and_value() {
+    let en = from_entries(&menu_model(&summary("App Store: In review", "Apps")));
+    let tr = from_entries(&menu_model(&summary("App Store: Live", "Uygulamalar")));
+    let key = |n: &[Node]| n.iter().find_map(|n| if let Node::Sub { key, .. } = n { Some(key.clone()) } else { None }).unwrap();
+    assert_eq!(key(&en), "apps");
+    assert_eq!(key(&tr), "apps");
+    // a live value changed: the tree differs (so it is pushed), the open Apps panel still resolves
+    assert_ne!(en, tr);
+    let (items, _) = find(&tr, &["apps".into()]).unwrap();
+    assert!(matches!(&items[0], Node::Item { id, label, .. } if id == "tray-app:k1" && label.contains("Live")));
+    // the same summary twice: the same tree (nothing is pushed)
+    assert_eq!(from_entries(&menu_model(&summary("x", "Apps"))), from_entries(&menu_model(&summary("x", "Apps"))));
+}
+
+#[test]
+fn the_tree_serializes_as_the_panel_page_reads_it() {
+    let v = serde_json::to_value(tree()).unwrap();
+    assert_eq!(v[0], serde_json::json!({ "kind": "item", "id": "open", "label": "Open", "enabled": true }));
+    assert_eq!(v[1], serde_json::json!({ "kind": "sep" }));
+    assert_eq!(v[2]["kind"], "sub");
+    assert_eq!(v[2]["key"], "fleet");
+}
+
+#[test]
+fn root_opens_away_from_the_taskbar_and_stays_inside() {
+    // bottom taskbar, icon at the right: above and left of the click
+    let (x, y) = place_menu(Anchor::Point { x: 1900.0, y: 1060.0 }, (300.0, 400.0), WORK);
+    assert!(x + 300.0 <= 1920.0 - GAP && y + 400.0 <= 1040.0 - GAP && x >= 0.0 && y >= 0.0);
+    // macOS menu bar at the top: below it
+    let (_, y) = place_menu(Anchor::Point { x: 1800.0, y: 0.0 }, (300.0, 400.0), (0.0, 25.0, 1920.0, 1055.0));
+    assert!(y >= 25.0 + GAP);
+    // a second monitor left of the primary (negative x)
+    let (x, _) = place_menu(Anchor::Point { x: -10.0, y: 500.0 }, (300.0, 400.0), (-1920.0, 0.0, 1920.0, 1080.0));
+    assert!(x + 300.0 <= -GAP + 0.001 && x >= -1920.0);
+    // a panel taller than the work area: pinned to the top edge, never above it
+    let (_, y) = place_menu(Anchor::Point { x: 100.0, y: 100.0 }, (300.0, 2000.0), WORK);
+    assert_eq!(y, GAP);
+}
+
+#[test]
+fn submenus_open_beside_and_flip_left_at_the_edge() {
+    let (x, _) = place_menu(Anchor::Beside { left: 1600.0, right: 1880.0, top: 100.0 }, (280.0, 200.0), WORK);
+    assert!(x + 280.0 <= 1602.0);
+    let (x, y) = place_menu(Anchor::Beside { left: 100.0, right: 380.0, top: 100.0 }, (280.0, 200.0), WORK);
+    assert!((378.0..=380.0).contains(&x) && (90.0..=100.0).contains(&y));
+    // a row near the bottom: the submenu moves up into the work area
+    let (_, y) = place_menu(Anchor::Beside { left: 100.0, right: 380.0, top: 1000.0 }, (280.0, 300.0), WORK);
+    assert!(y + 300.0 <= 1040.0 - GAP);
+}
+
+#[test]
+fn pinned_panels_step_aside_and_stay_inside() {
+    let others = [(100.0, 100.0, 280.0, 300.0), (100.0, 408.0, 280.0, 300.0)];
+    let (x, y) = free_spot((120.0, 120.0, 280.0, 300.0), &others, WORK);
+    assert!(others.iter().all(|o| !overlaps((x, y, 280.0, 300.0), *o)));
+    assert!(x >= 0.0 && y >= 0.0 && x + 280.0 <= 1920.0 && y + 300.0 <= 1040.0);
+    // no room left below: the next column
+    let col = [(8.0, 8.0, 280.0, 1000.0)];
+    let (x, _) = free_spot((8.0, 8.0, 280.0, 300.0), &col, WORK);
+    assert!(x >= 288.0);
+    // nothing in the way: where it was
+    assert_eq!(free_spot((500.0, 500.0, 280.0, 300.0), &others, WORK), (500.0, 500.0));
+}
+
+#[test]
+fn several_menus_open_and_pinned_ones_survive_a_new_menu() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (fleet, _) = b.open_sub(&root, "fleet", AT, false).unwrap();
+    assert!(b.open_sub(&root, "fleet", AT, false).is_none(), "the same submenu again is a no-op");
+    let (deep, _) = b.open_sub(&fleet, "recently-lowered", AT, false).unwrap();
+    assert_eq!(b.descendants(&root).len(), 2);
+    // pinning the Fleet panel detaches it; the root closes, its own child stays its own
+    let closes = b.pin(&fleet, true);
+    assert_eq!(closes, vec![root.clone()]);
+    assert!(b.panels[&fleet].pinned && b.panels[&fleet].parent.is_none());
+    assert_eq!(b.descendants(&fleet), vec![deep.clone()]);
+    let (root2, closes) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    assert_eq!(closes, vec![deep]);
+    assert!(b.panels.contains_key(&fleet));
+    assert_eq!(b.transient(), vec![root2.clone()]);
+    // a pick / Esc: transient panels go, the pinned one stays
+    assert_eq!(b.dismiss(), vec![root2]);
+    assert_eq!(b.panels.len(), 1);
+    // unpinned, it behaves like a menu again and goes with the next one
+    b.pin(&fleet, false);
+    let (_, closes) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    assert!(closes.contains(&fleet));
+}
+
+#[test]
+fn a_torn_off_submenu_keeps_one_pinned_copy() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (p1, _) = b.open_sub(&root, "fleet", AT, true).unwrap();
+    let (p2, closes) = b.open_sub(&root, "fleet", AT, true).unwrap();
+    assert!(closes.contains(&p1) && b.panels[&p2].pinned && !b.panels.contains_key(&p1));
+    assert_eq!(b.panels[&p2].path, vec!["fleet".to_string()]);
+    // the root stays open (a tear-off is not a pick)
+    assert!(b.panels.contains_key(&root));
+    // closing a panel that is already gone does nothing
+    assert!(b.close("menu-99").is_empty());
+}
+
+#[test]
+fn a_live_update_closes_nothing_that_still_exists() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (profile, _) = b.open_sub(&root, "profile", AT, true).unwrap();
+    let (fleet, _) = b.open_sub(&root, "fleet", AT, false).unwrap();
+    assert!(b.prune(&tree()).is_empty());
+    // the Fleet submenu is gone from the tree: its transient panel closes, the pinned Profile panel stays even when its
+    // submenu goes too (it shows that it is gone)
+    let smaller = from_entries(&[Entry::Item { id: "open".into(), label: "Open".into(), enabled: true }]);
+    assert_eq!(b.prune(&smaller), vec![fleet]);
+    assert!(b.panels.contains_key(&root) && b.panels.contains_key(&profile));
+}
+
+#[test]
+fn pins_are_saved_in_the_state_and_restored_after_a_restart() {
+    let mut b = Book::default();
+    let (root, _) = b.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    let (p, _) = b.open_sub(&root, "apps", AT, true).unwrap();
+    // not placed yet: nothing to save
+    assert!(b.pins().is_empty());
+    b.panels.get_mut(&p).unwrap().pos = Some((40.4, 50.6));
+    let pins = b.pins();
+    assert_eq!(pins, vec![PinRecord { path: vec!["apps".into()], x: 40, y: 51 }]);
+    // through state.json
+    let st = State { menu_pins: pins.clone(), ..State::default() };
+    let text = serde_json::to_string(&st).unwrap();
+    assert!(text.contains("\"menuPins\""));
+    let back: State = serde_json::from_str(&text).unwrap();
+    assert_eq!(back.menu_pins, pins);
+    // an empty list is not written at all (older files stay as they were)
+    assert!(!serde_json::to_string(&State::default()).unwrap().contains("menuPins"));
+    let mut fresh = Book::default();
+    let mut saved = back.menu_pins.clone();
+    saved.push(saved[0].clone()); // a duplicate is dropped
+    let labels = fresh.restore(&saved);
+    assert_eq!(labels.len(), 1);
+    let r = &fresh.panels[&labels[0]];
+    assert!(r.pinned && r.path == vec!["apps".to_string()] && r.pos == Some((40.0, 51.0)) && r.parent.is_none());
+    // a restored pin survives the next menu
+    let (_, closes) = fresh.open_root(Anchor::Point { x: 0.0, y: 0.0 });
+    assert!(closes.is_empty());
+    let many: Vec<PinRecord> = (0..40).map(|i| PinRecord { path: vec![format!("s{i}")], x: 0, y: 0 }).collect();
+    assert_eq!(Book::default().restore(&many).len(), MAX_PINS);
+}
+
+#[test]
+fn panel_labels_are_menu_and_a_number() {
+    assert!(is_menu_label("menu-1") && is_menu_label("menu-204"));
+    for bad in ["menu-", "menu-a", "card", "main", "menu-1-2", "xmenu-1"] {
+        assert!(!is_menu_label(bad), "{bad}");
+    }
+}
diff --git a/apps/desktop/src-tauri/tests/security.rs b/apps/desktop/src-tauri/tests/security.rs
index 1d31b45..6c6c4c6 100644
--- a/apps/desktop/src-tauri/tests/security.rs
+++ b/apps/desktop/src-tauri/tests/security.rs
@@ -6,7 +6,7 @@ use std::path::{Path, PathBuf};
 
 use serde_json::{json, Value};
 use storebound_desktop::policy::*;
-use storebound_desktop::{CARD_COMMANDS, COMMANDS};
+use storebound_desktop::{CARD_COMMANDS, COMMANDS, MENU_COMMANDS};
 use url::Url;
 
 fn root() -> PathBuf {
@@ -26,7 +26,7 @@ fn one_capability_for_the_main_window_with_exactly_the_app_commands() {
     let dir = root().join("capabilities");
     let mut files: Vec<PathBuf> = fs::read_dir(&dir).unwrap().map(|e| e.unwrap().path()).collect();
     files.sort();
-    assert_eq!(files.len(), 2, "main and card capability files expected, found {files:?}");
+    assert_eq!(files.len(), 3, "main, card and menu capability files expected, found {files:?}");
     let cap = read_json(&dir.join("main.json"));
     assert_eq!(cap["identifier"], "main-window");
     assert_eq!(cap["windows"], json!(["main"]));
@@ -71,6 +71,45 @@ fn the_card_window_gets_only_the_card_commands() {
     assert!(require_main("card", &u("tauri://localhost/card.html"), false).is_err());
 }
 
+#[test]
+fn the_menu_panels_get_only_the_menu_commands() {
+    let cap = read_json(&root().join("capabilities/menu.json"));
+    assert_eq!(cap["identifier"], "menu-window");
+    assert_eq!(cap["windows"], json!(["menu-*"]));
+    assert!(cap.get("webviews").is_none() && cap.get("remote").is_none());
+    assert_ne!(cap["local"], json!(false));
+    let got: BTreeSet<String> = cap["permissions"].as_array().unwrap().iter().map(|p| p.as_str().unwrap().to_string()).collect();
+    let mut want: BTreeSet<String> = MENU_COMMANDS.iter().map(|c| format!("allow-{}", c.replace('_', "-"))).collect();
+    want.insert("core:event:allow-listen".into());
+    want.insert("core:event:allow-unlisten".into());
+    // a pinned panel is dragged by its header (data-tauri-drag-region): only its own window
+    want.insert("core:window:allow-start-dragging".into());
+    assert_eq!(got, want);
+    // the menu commands never leak into the main or card capability
+    for other in ["main.json", "card.json"] {
+        let cap = read_json(&root().join("capabilities").join(other));
+        let perms = cap["permissions"].to_string();
+        for c in MENU_COMMANDS {
+            assert!(!perms.contains(&format!("\"allow-{}\"", c.replace('_', "-"))), "{c} granted in {other}");
+        }
+    }
+    let cmds = fs::read_to_string(root().join("src/commands.rs")).unwrap();
+    for c in MENU_COMMANDS {
+        let at = cmds.find(&format!("pub fn {c}(")).unwrap_or_else(|| panic!("{c} not in commands.rs"));
+        let body = &cmds[at..];
+        let open = body.find('{').unwrap();
+        assert!(body[open + 1..].trim_start().starts_with("guard_menu(&window)?;"), "{c} must start with guard_menu(&window)?");
+    }
+    assert!(require_menu("menu-1", &u("tauri://localhost/tray-menu.html"), false).is_ok());
+    assert!(require_menu("menu-12", &u("http://tauri.localhost/tray-menu.html"), false).is_ok());
+    for bad in ["main", "card", "menu-", "menu-x", "menu-1a", "menus-1"] {
+        assert!(require_menu(bad, &u("tauri://localhost/tray-menu.html"), false).is_err(), "{bad}");
+    }
+    assert!(require_menu("menu-1", &u("https://example.com/tray-menu.html"), false).is_err());
+    assert!(require_main("menu-1", &u("tauri://localhost/tray-menu.html"), false).is_err());
+    assert!(require_card("menu-1", &u("tauri://localhost/tray-menu.html"), false).is_err());
+}
+
 #[test]
 fn every_registered_command_is_in_the_list_and_nothing_else() {
     let lib = fs::read_to_string(root().join("src/lib.rs")).unwrap();
@@ -81,7 +120,7 @@ fn every_registered_command_is_in_the_list_and_nothing_else() {
         .map(|s| s.trim().trim_start_matches("commands::").to_string())
         .filter(|s| !s.is_empty())
         .collect();
-    assert_eq!(registered, COMMANDS.iter().chain(CARD_COMMANDS).map(|s| s.to_string()).collect::<Vec<_>>());
+    assert_eq!(registered, COMMANDS.iter().chain(CARD_COMMANDS).chain(MENU_COMMANDS).map(|s| s.to_string()).collect::<Vec<_>>());
     // every command checks the caller first
     let cmds = fs::read_to_string(root().join("src/commands.rs")).unwrap();
     for c in COMMANDS {
@@ -109,7 +148,7 @@ fn csp_is_strict_and_the_config_has_no_backdoors() {
         assert!(!v.contains("unsafe-eval") && !v.contains("unsafe-inline") && !v.contains('*'), "{k}: {v}");
         assert!(!v.contains("https:") && !v.contains("http://") || v == "ipc: http://ipc.localhost", "{k}: no remote sources: {v}");
     }
-    assert_eq!(conf["app"]["security"]["capabilities"], json!(["main-window", "card-window"]));
+    assert_eq!(conf["app"]["security"]["capabilities"], json!(["main-window", "card-window", "menu-window"]));
     assert_eq!(conf["app"]["security"]["freezePrototype"], json!(true));
     assert!(conf["app"].get("withGlobalTauri").is_none() || conf["app"]["withGlobalTauri"] == json!(false));
     let windows = conf["app"]["windows"].as_array().unwrap();
diff --git a/apps/desktop/src-tauri/tests/tray.rs b/apps/desktop/src-tauri/tests/tray.rs
index 95d5b67..47c03e8 100644
--- a/apps/desktop/src-tauri/tests/tray.rs
+++ b/apps/desktop/src-tauri/tests/tray.rs
@@ -23,7 +23,7 @@ fn ids(m: &[Entry]) -> Vec<String> {
 fn menu_has_every_entry_in_order() {
     let m = menu_model(&summary());
     assert_eq!(ids(&m), vec![ID_OPEN, ID_READ, ID_MUTE, ID_UPDATE, ID_SETTINGS, ID_QUIT]);
-    let Entry::Sub { label, items } = &m[3] else { panic!("the Apps submenu comes after the first separator") };
+    let Entry::Sub { label, items, .. } = &m[3] else { panic!("the Apps submenu comes after the first separator") };
     assert_eq!(label, "Apps");
     assert_eq!(items.len(), 2);
     let Entry::Item { id, label, enabled } = &items[0] else { panic!() };
diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
index 4cfa717..02a809d 100644
--- a/apps/desktop/src/App.tsx
+++ b/apps/desktop/src/App.tsx
@@ -211,7 +211,7 @@ export function App({ onTheme }: { onTheme: () => void }) {
   const menu = useContextMenu();
   const appItem = (a: UnifiedApp, st: { text: string; tone: string }) => (
     <div role="listitem" key={a.key}>
-      <button {...menu(() => appMenu(a, d, nav, { showIgnored }))} className={`nav nav-app has-line${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
+      <button {...menu(() => appMenu(a, d, nav, { showIgnored }), `app:${a.key}`)} className={`nav nav-app has-line${a.ignored ? ' is-ignored' : ''}`} aria-current={current({ screen: 'app', appId: a.key, tab: 'releases' })}
         onClick={() => go({ screen: 'app', appId: a.key, tab: route.screen === 'app' && tabsOf(a).includes(route.tab) ? route.tab : 'releases' })}
         title={`${a.name} · ${st.text}`}>
         <span className="ds-side-ic"><AppIcon name={a.name} src={d.iconFor(a)} />{(st.tone === 'bad' || st.tone === 'warn') && <span className={`ds-sdot ${st.tone}`} role="img" aria-label={st.tone === 'bad' ? t('pf.blocker') : t('pf.warning')} />}</span>
diff --git a/apps/desktop/src/design.css b/apps/desktop/src/design.css
index adfc21f..2ac3a50 100644
--- a/apps/desktop/src/design.css
+++ b/apps/desktop/src/design.css
@@ -229,6 +229,19 @@
 .ds-menu-k { max-width: 150px; overflow: hidden; text-overflow: ellipsis; margin-left: 18px; color: var(--faint); font-size: var(--ds-t-micro); letter-spacing: .02em; font-variant-numeric: tabular-nums; }
 .ds-menu-sub { width: 12px; height: 12px; color: var(--faint); margin-left: 10px; }
 .ds-menu-sep { height: 1px; margin: 5px 6px; background: var(--ds-stroke); }
+/* menu header: the pin button (a normal menu or submenu), a pinned panel's title, unpin, close and drag handle */
+.ds-menu-head { display: flex; align-items: center; gap: 2px; height: 24px; padding: 0 0 0 9px; margin-bottom: 1px; }
+.ds-menu-head.pinned { cursor: grab; touch-action: none; }
+.ds-menu-head.pinned:active { cursor: grabbing; }
+.ds-menu-title { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: var(--ds-t-micro);
+  font-weight: 600; letter-spacing: .04em; text-transform: uppercase; color: var(--faint); }
+.ds-menu-btn { flex: none; width: 22px; height: 22px; display: grid; place-items: center; padding: 0; border: 0; border-radius: 6px;
+  background: transparent; color: var(--faint); cursor: pointer; }
+.ds-menu-btn svg { width: 13px; height: 13px; }
+.ds-menu-btn:hover, .ds-menu-btn:focus-visible { background: var(--ds-inset); color: var(--ink); outline: none; }
+.ds-menu-btn.on { color: var(--accent); }
+.ds-menu.pinned { border-color: color-mix(in srgb, var(--accent) 45%, var(--ds-stroke-strong)); transition: opacity 120ms var(--ease); }
+.ds-menu-gone { max-width: 240px; padding: 6px 10px 8px; color: var(--muted); font-size: var(--ds-t-micro); white-space: normal; }
 @media (prefers-reduced-motion: reduce) { .ds-menu { transition: none; transform: none; } }
 :root[data-motion="reduce"] .ds-menu { transition: none; transform: none; }
 /* headings focused by code (dialog / wizard step titles) for screen readers: no ring */
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index 9c5642b..b93dd8c 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2059,6 +2059,12 @@ export const en = {
 
   // context menus (ui/ContextMenu.tsx)
   'cm.cut': "Cut",
+  'cm.pin': "Pin: keeps this menu open",
+  'cm.unpin': "Unpin",
+  'cm.closePanel': "Close",
+  'cm.gone': "Gone: what this menu was for is not on screen now.",
+  'cm.menu': "Menu",
+  'cm.tearOff': "Ctrl+click or middle-click: pin this submenu",
   'cm.copy': "Copy",
   'cm.paste': "Paste",
   'cm.selectAll': "Select all",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 6872f6b..ec1d1ac 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2061,6 +2061,12 @@ export const tr: Record<keyof typeof en, string> = {
 
   // context menus (ui/ContextMenu.tsx)
   'cm.cut': "Kes",
+  'cm.pin': "Sabitle: menü açık kalır",
+  'cm.unpin': "Sabitlemeyi kaldır",
+  'cm.closePanel': "Kapat",
+  'cm.gone': "Yok: bu menünün ait olduğu şey şu an ekranda değil.",
+  'cm.menu': "Menü",
+  'cm.tearOff': "Ctrl+tık veya orta tık: bu alt menüyü sabitle",
   'cm.copy': "Kopyala",
   'cm.paste': "Yapıştır",
   'cm.selectAll': "Tümünü seç",
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
index 1a8424d..150c29b 100644
--- a/apps/desktop/src/screens/AppView.tsx
+++ b/apps/desktop/src/screens/AppView.tsx
@@ -69,7 +69,7 @@ function AppControls({ app }: { app: UnifiedApp }) {
           </select></label>
       )}
       <span className="grow" />
-      <button className="btn btn-sm btn-ghost" {...more(() => appMenu(app, d, nav, { showIgnored }))} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" />{app.ignored || app.ignoredStores.length ? t('nav.ignored') : null}</button>
+      <button className="btn btn-sm btn-ghost" {...more(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)} aria-label={t('cm.more')} title={t('cm.more')}><Icon name="more" />{app.ignored || app.ignoredStores.length ? t('nav.ignored') : null}</button>
     </div>
   );
 }
@@ -130,7 +130,7 @@ export function AppView({ app, tab }: { app: UnifiedApp; tab: AppTab }) {
   return (
     <div className="page ds-app">
       <Hero name={name} icon={d.iconFor(app)} projectId={app.project && !app.project.missing ? app.project.id : null}
-        {...cm(() => appMenu(app, d, nav, { showIgnored }))}
+        {...cm(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)}
         badges={<>
           {e?.summary?.profile && app.project && <Chip tone="outline">{t(`profile.${e.summary.profile}` as 'profile.app')}</Chip>}
           {!app.project && <StoreOnlyTag />}
diff --git a/apps/desktop/src/screens/Ignored.tsx b/apps/desktop/src/screens/Ignored.tsx
index 4c7ac27..fdc3167 100644
--- a/apps/desktop/src/screens/Ignored.tsx
+++ b/apps/desktop/src/screens/Ignored.tsx
@@ -30,7 +30,7 @@ export function Ignored() {
                 {apps.map(a => {
                   const s = d.studios.find(x => x.id === a.studio) ?? null;
                   return (
-                    <div className="li" key={a.key} {...cm(() => appMenu(a, d, nav, { showIgnored: true }))}>
+                    <div className="li" key={a.key} {...cm(() => appMenu(a, d, nav, { showIgnored: true }), `app:${a.key}`)}>
                       <AppIcon name={a.name} src={d.iconFor(a)} />
                       <div className="li-main">
                         <span className="li-title row" style={{ gap: 8 }}>{a.name}{!a.project && <StoreOnlyTag />}</span>
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index c49926d..27eb5b0 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -153,7 +153,7 @@ function AppCard({ r, icon, health, studio }: { r: CardRow; icon: string | null;
   const menu = useContextMenu();
   const [showIgnored] = useShowIgnored();
   return (
-    <article className="pf-card" style={style} aria-label={name} {...menu(() => appMenu(app, d, nav, { showIgnored }))}>
+    <article className="pf-card" style={style} aria-label={name} {...menu(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)}>
       <div className={`pf-shots${shots.length ? '' : ' empty'}`} aria-hidden="true">
         {shots.length ? shots.map((s, i) => <img key={i} src={s} alt="" draggable={false} loading="lazy" />) : <>
           <AppIcon name={app.name} src={icon} className="pf-hero-icon" />
@@ -373,7 +373,7 @@ export function Portfolio() {
     const ios = !!(app.ios || e?.app?.platforms.ios), android = !!(app.android || e?.app?.platforms.android);
     const sub = app.ios?.app.bundleId ?? e?.app?.platforms.ios?.bundleId ?? app.android?.app.id ?? e?.app?.platforms.android?.packageName ?? '';
     return (
-      <tr key={app.key} className="clickable" onClick={() => open(app)} {...menu(() => appMenu(app, d, nav, { showIgnored }))}>
+      <tr key={app.key} className="clickable" onClick={() => open(app)} {...menu(() => appMenu(app, d, nav, { showIgnored }), `app:${app.key}`)}>
         <td>
           <div className="cell-app">
             <AppIcon name={app.name} src={d.iconFor(app)} />
@@ -456,7 +456,7 @@ export function Portfolio() {
           <button className="link" aria-pressed={showIgnored} onClick={() => setShowIgnored(!showIgnored)}>{showIgnored ? t('ignored.hide', { count: ignoredApps.length }) : t('ignored.show', { count: ignoredApps.length })}</button>
           {showIgnored && ignoredApps.map(a => (
             <span key={a.key} className="row muted" style={{ gap: 4 }}>
-              <button className="link" onClick={() => open(a)} {...menu(() => appMenu(a, d, nav, { showIgnored }))}>{a.name}</button>
+              <button className="link" onClick={() => open(a)} {...menu(() => appMenu(a, d, nav, { showIgnored }), `app:${a.key}`)}>{a.name}</button>
               <button className="btn btn-sm btn-ghost btn-icon" onClick={() => d.updateOverrides(o => withIgnored(o, a.ignoreKeys, false))} aria-label={t('ignored.restore')} title={t('ignored.restore')}><Icon name="eye" /></button>
             </span>
           ))}
diff --git a/apps/desktop/src/traymenu/TrayMenu.tsx b/apps/desktop/src/traymenu/TrayMenu.tsx
new file mode 100644
index 0000000..ceab77d
--- /dev/null
+++ b/apps/desktop/src/traymenu/TrayMenu.tsx
@@ -0,0 +1,166 @@
+// One tray menu panel (tray-menu.html): the root menu or one submenu, drawn with the design system's menu look. The
+// window around it belongs to Rust (menu_panel.rs); the panel only measures itself and reports what the owner does.
+import { AppWindowIcon } from '@phosphor-icons/react/dist/csr/AppWindow';
+import { ArrowsClockwiseIcon } from '@phosphor-icons/react/dist/csr/ArrowsClockwise';
+import { BellSlashIcon } from '@phosphor-icons/react/dist/csr/BellSlash';
+import { CaretRightIcon } from '@phosphor-icons/react/dist/csr/CaretRight';
+import { DeviceMobileIcon } from '@phosphor-icons/react/dist/csr/DeviceMobile';
+import { DownloadSimpleIcon } from '@phosphor-icons/react/dist/csr/DownloadSimple';
+import { GearSixIcon } from '@phosphor-icons/react/dist/csr/GearSix';
+import { PowerIcon } from '@phosphor-icons/react/dist/csr/Power';
+import { PushPinIcon } from '@phosphor-icons/react/dist/csr/PushPin';
+import { PushPinSlashIcon } from '@phosphor-icons/react/dist/csr/PushPinSlash';
+import { SquaresFourIcon } from '@phosphor-icons/react/dist/csr/SquaresFour';
+import { XIcon } from '@phosphor-icons/react/dist/csr/X';
+import { type KeyboardEvent, type MouseEvent, type ReactNode, useEffect, useLayoutEffect, useMemo, useRef, useState } from 'react';
+import { filterNodes, findPath, isEnabled, isTearOff, keepActive, type MenuNode, nextIndex, type Row, rows, split } from './model';
+
+export interface MenuBridge {
+  ready(width: number, height: number): void;
+  openSub(key: string, top: number, focus: boolean): void;
+  pinSub(key: string, top: number): void;
+  closeSubs(): void;
+  close(refocusParent: boolean): void;
+  dismiss(): void;
+  pin(on: boolean): void;
+  select(id: string): void;
+}
+
+const WORDS = {
+  en: { title: 'storebound', pin: 'Pin (stays open)', unpin: 'Unpin', close: 'Close', gone: 'This menu is gone for now.', filter: 'Filter', none: 'Nothing matches', tearOff: 'Ctrl+click or middle-click: pin' },
+  tr: { title: 'storebound', pin: 'Sabitle (açık kalır)', unpin: 'Sabitlemeyi kaldır', close: 'Kapat', gone: 'Bu menü şu an yok.', filter: 'Süz', none: 'Eşleşen yok', tearOff: 'Ctrl+tık veya orta tık: sabitle' },
+} satisfies Record<'en' | 'tr', Record<string, string>>;
+export type MenuLang = keyof typeof WORDS;
+
+const ICON: Record<string, ReactNode> = {
+  'tray-open': <AppWindowIcon />, 'tray-read': <ArrowsClockwiseIcon />, 'tray-mute': <BellSlashIcon />,
+  'tray-update': <DownloadSimpleIcon />, 'tray-settings': <GearSixIcon />, 'tray-quit': <PowerIcon />,
+};
+const iconOf = (n: Row): ReactNode => (n.kind === 'sub' ? <SquaresFourIcon /> : ICON[n.id] ?? (n.id.startsWith('tray-app:') ? <DeviceMobileIcon /> : null));
+
+export function TrayMenu({ nodes, path, pinned, hasParent, focusFirst, bridge, lang = 'en', openKey }: {
+  nodes: MenuNode[]; path: string[]; pinned: boolean; hasParent: boolean; focusFirst?: boolean; bridge: MenuBridge; lang?: MenuLang;
+  /** The submenu shown as open (the dev demo; in the app Rust knows). */
+  openKey?: string;
+}) {
+  const w = WORDS[lang];
+  const ref = useRef<HTMLDivElement>(null);
+  const [query, setQuery] = useState('');
+  const [active, setActive] = useState(-1);
+  const [open, setOpen] = useState<string | null>(openKey ?? null);
+  const hover = useRef<number | undefined>(undefined);
+  const found = useMemo(() => findPath(nodes, path), [nodes, path]);
+  const items = useMemo(() => (found ? filterNodes(found.items, query) : []), [found, query]);
+  const list = useMemo(() => rows(items), [items]);
+  const prev = useRef<Row[]>(list);
+
+  // a live update keeps the highlight on the same row
+  useEffect(() => {
+    setActive(a => keepActive(prev.current, list, a));
+    prev.current = list;
+  }, [list]);
+  useEffect(() => {
+    if (focusFirst) setActive(nextIndex(-1, 1, list.map(isEnabled)));
+    ref.current?.focus({ preventScroll: true });
+    // only on the first render
+  }, []);
+  useEffect(() => () => window.clearTimeout(hover.current), []);
+
+  // the window takes the panel's size (Rust places it inside the work area)
+  useLayoutEffect(() => {
+    const el = ref.current;
+    if (!el) return;
+    let last = '';
+    const report = () => {
+      const r = el.getBoundingClientRect();
+      const size = `${Math.ceil(r.width)}x${Math.ceil(r.height)}`;
+      if (size !== last) { last = size; bridge.ready(Math.ceil(r.width), Math.ceil(r.height)); }
+    };
+    report();
+    const ro = new ResizeObserver(report);
+    ro.observe(el);
+    return () => ro.disconnect();
+  }, [bridge]);
+
+  const rowTop = (i: number) => ref.current?.querySelector<HTMLElement>(`[data-i="${i}"]`)?.getBoundingClientRect().top ?? 0;
+  const openSub = (i: number, focus: boolean) => {
+    const n = list[i];
+    if (n?.kind !== 'sub') return;
+    setOpen(n.key);
+    bridge.openSub(n.key, rowTop(i), focus);
+  };
+  const pick = (i: number, e?: { button: number; ctrlKey: boolean; metaKey: boolean }) => {
+    const n = list[i];
+    if (!n || !isEnabled(n)) return;
+    if (n.kind === 'sub') {
+      if (e && isTearOff(e)) { bridge.pinSub(n.key, rowTop(i)); return; }
+      openSub(i, !e);
+      return;
+    }
+    bridge.select(n.id);
+  };
+  const back = () => (hasParent ? bridge.close(true) : pinned ? undefined : bridge.dismiss());
+
+  const onKey = (e: KeyboardEvent) => {
+    const k = e.key;
+    const en = list.map(isEnabled);
+    const stop = () => { e.preventDefault(); e.stopPropagation(); };
+    if (k === 'ArrowDown') { stop(); setActive(a => nextIndex(a, 1, en)); }
+    else if (k === 'ArrowUp') { stop(); setActive(a => nextIndex(a, -1, en)); }
+    else if (k === 'Home' || k === 'PageUp') { stop(); setActive(nextIndex(-1, 1, en)); }
+    else if (k === 'End' || k === 'PageDown') { stop(); setActive(nextIndex(-1, -1, en)); }
+    else if (k === 'Enter' || k === ' ') { stop(); if (active >= 0) pick(active); }
+    else if (k === 'ArrowRight') { stop(); if (list[active]?.kind === 'sub') openSub(active, true); }
+    else if (k === 'ArrowLeft') { stop(); if (hasParent) bridge.close(true); }
+    else if (k === 'Escape') { stop(); if (query) setQuery(''); else if (pinned) bridge.close(false); else back(); }
+    else if (k === 'Backspace') { stop(); setQuery(q => q.slice(0, -1)); }
+    else if (k.length === 1 && !e.ctrlKey && !e.metaKey && !e.altKey) { stop(); setQuery(q => q + k); setActive(0); }
+  };
+
+  // a pinned panel whose submenu is gone keeps a name: its key
+  const title = !found ? (path[path.length - 1] ?? w.title).replace(/-/g, ' ') : found.label == null ? w.title : split(found.label).text;
+  const onRowMove = (i: number, n: Row) => {
+    if (active !== i) setActive(isEnabled(n) ? i : -1);
+    window.clearTimeout(hover.current);
+    if (n.kind === 'sub') {
+      if (open !== n.key) hover.current = window.setTimeout(() => openSub(i, false), 120);
+    } else if (open) {
+      hover.current = window.setTimeout(() => { setOpen(null); bridge.closeSubs(); }, 200);
+    }
+  };
+
+  return (
+    <div ref={ref} className={`tm-panel${pinned ? ' pinned' : ''}`} role="menu" tabIndex={-1} onKeyDown={onKey} aria-label={title}
+      onContextMenu={e => e.preventDefault()}>
+      <div className="tm-head" data-tauri-drag-region={pinned ? '' : undefined}>
+        <span className="tm-title" data-tauri-drag-region={pinned ? '' : undefined}>{query ? <><span className="tm-q">{query}</span><span className="tm-caret" /></> : title}</span>
+        <button type="button" className={`tm-btn${pinned ? ' on' : ''}`} title={pinned ? w.unpin : w.pin} aria-label={pinned ? w.unpin : w.pin} aria-pressed={pinned}
+          onClick={() => bridge.pin(!pinned)}>{pinned ? <PushPinSlashIcon /> : <PushPinIcon />}</button>
+        {pinned && <button type="button" className="tm-btn" title={w.close} aria-label={w.close} onClick={() => bridge.close(false)}><XIcon /></button>}
+      </div>
+      {!found && <div className="tm-gone">{w.gone}</div>}
+      {found && !list.length && <div className="tm-gone">{query ? w.none : '—'}</div>}
+      {items.map((n, idx) => {
+        if (n.kind === 'sep') return <div key={`s${idx}`} className="ds-menu-sep" role="separator" />;
+        const i = list.indexOf(n);
+        const { text, value } = split(n.label);
+        const dis = !isEnabled(n);
+        return (
+          <div key={n.kind === 'sub' ? `sub:${n.key}` : n.id} data-i={i} role="menuitem" aria-disabled={dis || undefined}
+            aria-haspopup={n.kind === 'sub' ? 'menu' : undefined} aria-expanded={n.kind === 'sub' ? open === n.key : undefined}
+            title={n.kind === 'sub' ? w.tearOff : undefined}
+            className={`ds-menu-item tm-row${i === active ? ' active' : ''}${dis ? ' disabled' : ''}${n.kind === 'sub' && open === n.key ? ' open' : ''}`}
+            onPointerMove={() => onRowMove(i, n)}
+            onMouseDown={(e: MouseEvent) => { if (e.button === 1) e.preventDefault(); }}
+            onAuxClick={(e: MouseEvent) => { if (e.button === 1) pick(i, e); }}
+            onClick={(e: MouseEvent) => pick(i, e)}>
+            <span className="ds-menu-ic">{iconOf(n)}</span>
+            <span className="ds-menu-l">{text}</span>
+            {value && <span className="tm-value">{value}</span>}
+            {n.kind === 'sub' && <CaretRightIcon className="ds-menu-sub" />}
+          </div>
+        );
+      })}
+    </div>
+  );
+}
diff --git a/apps/desktop/src/traymenu/demo.tsx b/apps/desktop/src/traymenu/demo.tsx
new file mode 100644
index 0000000..2b81adc
--- /dev/null
+++ b/apps/desktop/src/traymenu/demo.tsx
@@ -0,0 +1,55 @@
+// Dev only (a plain browser, never in the release bundle): the tray menu panels on fixture data, as the tray would show
+// them: the root menu with Apps open beside it and a pinned Apps panel, whose values change every few seconds the way a
+// store read changes them (the panels update in place).
+import { useEffect, useMemo, useState } from 'react';
+import type { MenuNode } from './model';
+import { type MenuBridge, type MenuLang, TrayMenu } from './TrayMenu';
+
+const STATES = [
+  ['App Store: In review · Play: Live', 'App Store: Ready for sale · Play: Live'],
+  ['Play: Rolling out 20%', 'Play: Rolling out 50%', 'Play: Rolling out 100%'],
+  ['App Store: Rejected', 'App Store: Rejected'],
+  ['App Store: Waiting for review', 'App Store: In review'],
+];
+const NAMES = ['Star Dash', 'Puzzle Garden', 'Pocket Chef', 'Night Runner'];
+
+/** The tree tray.rs builds (menu_model), with fixture apps. */
+export function demoNodes(tick: number, lang: MenuLang): MenuNode[] {
+  const tr = lang === 'tr';
+  const item = (id: string, label: string, enabled = true): MenuNode => ({ kind: 'item', id, label, enabled });
+  return [
+    item('tray-open', tr ? 'storebound\'u aç' : 'Open storebound'),
+    item('tray-read', tr ? 'Mağazaları şimdi oku' : 'Read the stores now'),
+    { kind: 'sep' },
+    { kind: 'sub', key: 'apps', label: tr ? 'Uygulamalar' : 'Apps', items: NAMES.map((n, i) => item(`tray-app:k${i}`, `${n}  ·  ${STATES[i]![tick % STATES[i]!.length]}`)) },
+    { kind: 'sep' },
+    item('tray-mute', tr ? 'Bildirimleri 1 saat sustur' : 'Mute notifications for 1 hour'),
+    item('tray-update', tr ? 'Güncellemeleri denetle' : 'Check for updates'),
+    item('tray-settings', tr ? 'Ayarlar' : 'Settings'),
+    { kind: 'sep' },
+    item('tray-quit', tr ? 'storebound\'dan çık' : 'Quit storebound'),
+  ];
+}
+
+const log = (what: string) => (...a: unknown[]) => console.info('tray menu', what, ...a);
+const demoBridge: MenuBridge = { ready: () => {}, openSub: log('openSub'), pinSub: log('pinSub'), closeSubs: () => {}, close: log('close'), dismiss: log('dismiss'), pin: log('pin'), select: log('select') };
+
+export function Demo({ lang }: { lang: MenuLang }) {
+  const [tick, setTick] = useState(0);
+  const q = new URLSearchParams(location.search);
+  const still = q.has('still');
+  useEffect(() => {
+    if (still) return;
+    const t = window.setInterval(() => setTick(n => n + 1), 3000);
+    return () => window.clearInterval(t);
+  }, [still]);
+  const nodes = useMemo(() => demoNodes(tick, lang), [tick, lang]);
+  return (
+    <>
+      <div className="tm-demo-at" style={{ left: 24, top: 160 }}><TrayMenu nodes={nodes} path={[]} pinned={false} hasParent={false} bridge={demoBridge} lang={lang} openKey="apps" /></div>
+      <div className="tm-demo-at" style={{ left: 262, top: 262 }}><TrayMenu nodes={nodes} path={['apps']} pinned={false} hasParent focusFirst bridge={demoBridge} lang={lang} /></div>
+      <div className="tm-demo-at" style={{ left: 690, top: 24 }}><TrayMenu nodes={nodes} path={['apps']} pinned hasParent={false} bridge={demoBridge} lang={lang} /></div>
+      <div className="tm-demo-at" style={{ left: 690, top: 260 }}><TrayMenu nodes={nodes} path={['gone']} pinned hasParent={false} bridge={demoBridge} lang={lang} /></div>
+    </>
+  );
+}
diff --git a/apps/desktop/src/traymenu/main.tsx b/apps/desktop/src/traymenu/main.tsx
new file mode 100644
index 0000000..df0ba93
--- /dev/null
+++ b/apps/desktop/src/traymenu/main.tsx
@@ -0,0 +1,70 @@
+// The tray menu panel window's entry (tray-menu.html; one window per panel, made by menu_panel.rs). Theme and language
+// from the same prefs as the main window; the tree and every live update from Rust (`menu-model`). In a plain dev
+// browser it shows a demo with fixture data instead (demo.tsx, never in the release bundle).
+import { useEffect, useState } from 'react';
+import { createRoot } from 'react-dom/client';
+import { applyPrefs, loadPrefs, resolveLang } from '../prefs';
+import { bridge, inTauri, menuState, onModel, onPanel } from './menu-api';
+import type { MenuNode, PanelInfo } from './model';
+import { type MenuLang, TrayMenu } from './TrayMenu';
+import '../styles.css';
+import '../design.css';
+import './traymenu.css';
+
+const sys = () => (typeof navigator !== 'undefined' ? navigator.language : 'en');
+
+function prefs(): MenuLang {
+  const p = loadPrefs();
+  if (import.meta.env.DEV) {
+    const q = new URLSearchParams(location.search);
+    const th = q.get('theme'), lg = q.get('lang');
+    if (th === 'light' || th === 'dark') p.theme = th;
+    if (lg === 'en' || lg === 'tr') p.lang = lg;
+  }
+  applyPrefs(p, document.documentElement, sys());
+  return resolveLang(p.lang, sys());
+}
+
+/** One panel window: its state from Rust, the live tree, pin changes. */
+function Panel({ lang }: { lang: MenuLang }) {
+  const [info, setInfo] = useState<PanelInfo | null>(null);
+  const [nodes, setNodes] = useState<MenuNode[]>([]);
+  const [pinned, setPinned] = useState(false);
+  const [focusTick, setFocusTick] = useState(0);
+  useEffect(() => {
+    let live = true;
+    const offs = [
+      onModel(setNodes),
+      onPanel(word => {
+        if (word === 'pinned') setPinned(true);
+        else if (word === 'unpinned') setPinned(false);
+        else if (word === 'focus') setFocusTick(n => n + 1);
+      }),
+    ];
+    menuState().then((s: PanelInfo | null) => {
+      if (!live || !s) return;
+      setInfo(s);
+      setNodes(s.nodes);
+      setPinned(s.pinned);
+    }, () => {});
+    return () => { live = false; for (const off of offs) off(); };
+  }, []);
+  useEffect(() => { if (focusTick) document.querySelector<HTMLElement>('.tm-panel')?.focus(); }, [focusTick]);
+  if (!info) return null;
+  return <TrayMenu nodes={nodes} path={info.path} pinned={pinned} hasParent={info.hasParent && !pinned} focusFirst={info.focusFirst} bridge={bridge} lang={lang} />;
+}
+
+void (async () => {
+  let lang = prefs();
+  const root = createRoot(document.getElementById('menu')!);
+  if (!inTauri() && import.meta.env.DEV) {
+    const { Demo } = await import('./demo');
+    document.body.classList.add('tm-demo');
+    root.render(<Demo lang={lang} />);
+    return;
+  }
+  const render = () => root.render(<Panel key={lang} lang={lang} />);
+  render();
+  // theme or language changed in the main window (same origin: shared localStorage)
+  window.addEventListener('storage', () => { const l = prefs(); if (l !== lang) { lang = l; render(); } });
+})();
diff --git a/apps/desktop/src/traymenu/menu-api.ts b/apps/desktop/src/traymenu/menu-api.ts
new file mode 100644
index 0000000..fd9896c
--- /dev/null
+++ b/apps/desktop/src/traymenu/menu-api.ts
@@ -0,0 +1,33 @@
+// The tray menu panels' host calls (the panel page's counterpart of src/api.ts, kept apart so the panel bundle stays
+// small). Only `menu-*` windows may call these (capabilities/menu.json; every command re-checks the window in Rust).
+import { invoke } from '@tauri-apps/api/core';
+import { listen } from '@tauri-apps/api/event';
+import type { MenuNode, PanelInfo } from './model';
+import type { MenuBridge } from './TrayMenu';
+
+export const inTauri = (): boolean => typeof window !== 'undefined' && '__TAURI_INTERNALS__' in window;
+
+const call = (cmd: string, args?: Record<string, unknown>) => { invoke(cmd, args).catch(() => {}); };
+
+function sub<T>(ev: string, fn: (p: T) => void): () => void {
+  const un = listen<T>(ev, e => fn(e.payload));
+  return () => { un.then(f => f()).catch(() => {}); };
+}
+
+/** This panel: its path into the tree, pinned or not, and the tree now. */
+export const menuState = (): Promise<PanelInfo | null> => invoke<PanelInfo | null>('menu_state').catch(() => null);
+/** Every change of the tree (a store read, mute, language): the panel updates in place. */
+export const onModel = (fn: (nodes: MenuNode[]) => void) => sub<MenuNode[]>('menu-model', fn);
+/** Rust about this panel: `pinned`, `unpinned`, `focus`. */
+export const onPanel = (fn: (word: string) => void) => sub<string>('menu-panel', fn);
+
+export const bridge: MenuBridge = {
+  ready: (width, height) => call('menu_ready', { width, height }),
+  openSub: (key, top, focus) => call('menu_open_sub', { key, top, focus }),
+  pinSub: (key, top) => call('menu_pin_sub', { key, top }),
+  closeSubs: () => call('menu_close_subs'),
+  close: refocusParent => call('menu_close', { refocusParent }),
+  dismiss: () => call('menu_dismiss'),
+  pin: pinned => call('menu_pin', { pinned }),
+  select: id => call('menu_select', { id }),
+};
diff --git a/apps/desktop/src/traymenu/model.ts b/apps/desktop/src/traymenu/model.ts
new file mode 100644
index 0000000..9109366
--- /dev/null
+++ b/apps/desktop/src/traymenu/model.ts
@@ -0,0 +1,75 @@
+// The tray menu panels' pure half (tested in tests/tray-menu.test.ts): the tree Rust sends (menu_panel.rs `Node`),
+// walking it by stable submenu keys, splitting a row into its text and live value, type-to-filter, keyboard moves and
+// keeping the highlighted row on the same item when a live update arrives.
+
+export type MenuNode =
+  | { kind: 'item'; id: string; label: string; enabled: boolean }
+  | { kind: 'sep' }
+  | { kind: 'sub'; key: string; label: string; items: MenuNode[] };
+export type Row = Exclude<MenuNode, { kind: 'sep' }>;
+
+/** What menu_state returns for one panel window. */
+export interface PanelInfo {
+  label: string;
+  path: string[];
+  pinned: boolean;
+  hasParent: boolean;
+  focusFirst: boolean;
+  nodes: MenuNode[];
+}
+
+/** "First  ·  App Store: In review" -> { text: 'First', value: 'App Store: In review' } (the value is right-aligned). */
+export function split(label: string): { text: string; value?: string } {
+  const at = label.indexOf('·');
+  if (at <= 0) return { text: label.trim() };
+  const value = label.slice(at + 1).trim();
+  return value ? { text: label.slice(0, at).trim(), value } : { text: label.slice(0, at).trim() };
+}
+
+/** The items at `path` (submenu keys) and the submenu's label, or null when that submenu is gone. */
+export function findPath(nodes: readonly MenuNode[], path: readonly string[]): { items: MenuNode[]; label: string | null } | null {
+  let items = nodes as MenuNode[];
+  let label: string | null = null;
+  for (const key of path) {
+    const next = items.find((n): n is Extract<MenuNode, { kind: 'sub' }> => n.kind === 'sub' && n.key === key);
+    if (!next) return null;
+    items = next.items;
+    label = next.label;
+  }
+  return { items, label };
+}
+
+/** Type-to-filter: rows whose label holds every word; separators drop out while filtering. */
+export function filterNodes(items: readonly MenuNode[], query: string): MenuNode[] {
+  const words = query.toLocaleLowerCase().split(/\s+/).filter(Boolean);
+  if (!words.length) return items as MenuNode[];
+  return items.filter(n => n.kind !== 'sep' && words.every(w => n.label.toLocaleLowerCase().includes(w)));
+}
+
+export const rows = (items: readonly MenuNode[]): Row[] => items.filter((n): n is Row => n.kind !== 'sep');
+export const isEnabled = (n: Row): boolean => n.kind === 'sub' || n.enabled;
+export const rowId = (n: Row): string => (n.kind === 'sub' ? `sub:${n.key}` : n.id);
+
+/** The next enabled row from `current` in `dir`, wrapping; -1 when none. `current` -1 starts before the first. */
+export function nextIndex(current: number, dir: 1 | -1, enabled: readonly boolean[]): number {
+  const n = enabled.length;
+  if (!n) return -1;
+  const from = current < 0 ? (dir > 0 ? -1 : n) : current;
+  for (let step = 1; step <= n; step += 1) {
+    const i = (((from + dir * step) % n) + n) % n;
+    if (enabled[i]) return i;
+  }
+  return -1;
+}
+
+/** A live update must not move the highlight: the same id / key in the new rows, else the same place (clamped). */
+export function keepActive(before: readonly Row[], after: readonly Row[], active: number): number {
+  if (active < 0 || !after.length) return -1;
+  const was = before[active];
+  if (!was) return Math.min(active, after.length - 1);
+  const found = after.findIndex(n => rowId(n) === rowId(was));
+  return found >= 0 ? found : Math.min(active, after.length - 1);
+}
+
+/** Ctrl / Cmd + click or a middle click on a submenu row tears it off as a pinned panel. */
+export const isTearOff = (e: { button: number; ctrlKey: boolean; metaKey: boolean }): boolean => e.button === 1 || ((e.ctrlKey || e.metaKey) && e.button === 0);
diff --git a/apps/desktop/src/traymenu/traymenu.css b/apps/desktop/src/traymenu/traymenu.css
new file mode 100644
index 0000000..5bc1176
--- /dev/null
+++ b/apps/desktop/src/traymenu/traymenu.css
@@ -0,0 +1,28 @@
+/* The tray menu panels (tray-menu.html): the design system's menu (.ds-menu-*) in its own small window. The window is
+   transparent and exactly as large as the panel (menu_panel.rs sizes it from what the panel measures). */
+html:has(body.tm-page), body.tm-page { margin: 0; background: transparent; overflow: hidden; }
+body.tm-page { font: var(--ds-t-body)/1.4 system-ui, -apple-system, "Segoe UI", sans-serif; color: var(--ink); }
+
+.tm-panel { box-sizing: border-box; width: max-content; min-width: 230px; max-width: 380px; max-height: 860px; overflow: auto; padding: 4px 5px 5px;
+  border-radius: 12px; background: var(--ds-raised); border: 1px solid var(--ds-stroke-strong);
+  font-size: var(--ds-t-body); color: var(--ink); outline: none; user-select: none; cursor: default; }
+.tm-panel.pinned { border-color: color-mix(in srgb, var(--accent) 45%, var(--ds-stroke-strong)); }
+.tm-head { display: flex; align-items: center; gap: 2px; height: 28px; padding: 0 2px 0 9px; margin-bottom: 2px; }
+.tm-panel.pinned .tm-head { cursor: grab; }
+.tm-title { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font-size: var(--ds-t-micro);
+  font-weight: 600; letter-spacing: .04em; text-transform: uppercase; color: var(--muted); }
+.tm-q { text-transform: none; letter-spacing: 0; color: var(--ink); font-weight: 500; }
+.tm-caret { display: inline-block; width: 1px; height: 11px; margin-left: 1px; vertical-align: -1px; background: var(--accent); }
+.tm-btn { flex: none; width: 24px; height: 24px; display: grid; place-items: center; padding: 0; border: 0; border-radius: 6px;
+  background: transparent; color: var(--faint); cursor: pointer; }
+.tm-btn svg { width: 14px; height: 14px; }
+.tm-btn:hover, .tm-btn:focus-visible { background: var(--ds-inset); color: var(--ink); outline: none; }
+.tm-btn.on { color: var(--accent); }
+.tm-row.open:not(.active) { background: var(--ds-inset); }
+.tm-value { max-width: 190px; overflow: hidden; text-overflow: ellipsis; margin-left: 18px; color: var(--muted);
+  font-size: var(--ds-t-micro); font-variant-numeric: tabular-nums; }
+.tm-gone { padding: 8px 10px 10px; color: var(--muted); font-size: var(--ds-t-micro); }
+
+/* the dev demo (a plain browser): several panels side by side on a desktop-like backdrop */
+body.tm-page.tm-demo { overflow: auto; min-height: 100vh; background: linear-gradient(135deg, #3b4a6b, #1d2436); }
+.tm-demo-at { position: absolute; }
diff --git a/apps/desktop/src/ui/ContextMenu.tsx b/apps/desktop/src/ui/ContextMenu.tsx
index e54b534..c71217e 100644
--- a/apps/desktop/src/ui/ContextMenu.tsx
+++ b/apps/desktop/src/ui/ContextMenu.tsx
@@ -1,55 +1,94 @@
 // Context menus (design system): the browser's own menu never shows. ContextMenuProvider (main.tsx) prevents every
 // native `contextmenu`, opens a small Cut / Copy / Paste / Select all menu on text fields and a Copy menu on selected
 // text, and turns Shift+F10 / the Menu key into a context menu on the focused element. Screens attach menus with
-// `useContextMenu()`: `<div {...menu(() => [...entries])}>`. Keyboard: arrows, Home / End, Enter / Space, Esc,
-// ArrowRight / ArrowLeft for submenus, type-ahead. Logic (placement, moves, type-ahead) in menu-logic.ts.
-import { createContext, type KeyboardEvent as ReactKeyboardEvent, type MouseEvent as ReactMouseEvent, type ReactNode, useCallback, useContext, useEffect, useLayoutEffect, useId, useRef, useState } from 'react';
+// `useContextMenu()`: `<div {...menu(() => [...entries], 'app:' + key)}>`. Keyboard: arrows, Home / End, Enter / Space,
+// Esc, ArrowRight / ArrowLeft for submenus, type-ahead. Logic (placement, moves, type-ahead) in menu-logic.ts.
+//
+// Several menus at once (the same behaviour as the tray menu panels): a menu's pin button keeps it open as a floating
+// panel; the pin button of a submenu, or Ctrl / Cmd / middle click on a submenu row, tears that submenu off as its own
+// pinned panel. Pinned panels survive the next menu, can be dragged by their header, step aside so they never sit on
+// each other, and update in place: they re-read their entries from the newest builder the screen registered (live
+// sources, menu-stack.ts), so a read that changes a value never closes them. The panel stack is pure (menu-stack.ts).
+import { createContext, type KeyboardEvent as ReactKeyboardEvent, type MouseEvent as ReactMouseEvent, type PointerEvent as ReactPointerEvent, type ReactNode, useCallback, useContext, useEffect, useId, useLayoutEffect, useReducer, useRef, useState } from 'react';
 import { createPortal } from 'react-dom';
 import { t } from '../i18n';
 import { copyText } from '../lib/crash';
 import { Icon } from './icons';
 import { MOD } from './kit';
 import { enabled, first, isEditable, isItem, last, type MenuEntry, type MenuInput, type MenuItem, move, placeAt, placeBeside, tidy, typeahead } from './menu-logic';
+import { clampPos, closeMenu, closeUnpinned, LiveMenus, moveMenu, openMenu, pinMenu, type Pos, resolvePath, type StackEntry, tearOff, unpinMenu } from './menu-stack';
 
 export type { MenuEntry, MenuInput, MenuItem } from './menu-logic';
 
-interface Open { x: number; y: number; items: MenuEntry[]; from: Element | null; keyboard: boolean }
-type OpenFn = (x: number, y: number, input: MenuInput, opts?: { from?: Element | null; keyboard?: boolean }) => void;
+interface OpenOpts { from?: Element | null; keyboard?: boolean; source?: string | null }
+type OpenFn = (x: number, y: number, input: MenuInput, opts?: OpenOpts) => void;
 const Ctx = createContext<OpenFn | null>(null);
 
+/** Every screen's menu builders, newest first: what pinned panels re-read. */
+const live = new LiveMenus();
+
 /** Marks a native event a menu handled, so the global fallback leaves it alone. */
 const HANDLED = '__sbMenu';
 /** Marks the contextmenu event Shift+F10 / the Menu key sent (the menu starts on its first item). */
 const BY_KEY = '__sbKey';
 
-/** Props that attach a menu to an element: `<button {...menu(() => entries)}>`. Entries are built when it opens. */
-export function useContextMenu(): (build: () => MenuInput) => { onContextMenu: (e: ReactMouseEvent) => void } {
+/** One live source key per menu call of a component (`id` when given, else its call order in the render); the keys a
+ *  render no longer makes are dropped after it commits, all of them when the component unmounts. */
+function useLiveKeys(): (id?: string) => string {
+  const hid = useId();
+  const seen = useRef(new Set<string>());
+  const n = useRef(0);
+  seen.current = new Set();
+  n.current = 0;
+  useEffect(() => { live.retain(hid, seen.current); });
+  useEffect(() => () => live.retain(hid), [hid]);
+  return useCallback((id?: string) => {
+    const k = `${hid}#${id ?? n.current++}`;
+    seen.current.add(k);
+    return k;
+  }, [hid]);
+}
+
+/** Props that attach a menu to an element: `<button {...menu(() => entries, id)}>`. Entries are built when it opens
+ *  (and again for a pinned copy whenever the element re-renders). `id`: what the menu is about, unique in the component
+ *  (an app key), so a pinned panel follows that thing even when rows reorder. */
+export function useContextMenu(): (build: () => MenuInput, id?: string) => { onContextMenu: (e: ReactMouseEvent) => void } {
   const open = useContext(Ctx);
-  return useCallback((build: () => MenuInput) => ({
-    onContextMenu: (e: ReactMouseEvent) => {
-      if ((e.nativeEvent as unknown as Record<string, unknown>)[HANDLED]) return;
-      // a text field or a selection inside keeps the edit menu
-      const target = e.target as HTMLElement;
-      if (isEditable(target as HTMLInputElement) || (window.getSelection()?.toString() ?? '').trim()) return;
-      e.preventDefault();
-      (e.nativeEvent as unknown as Record<string, unknown>)[HANDLED] = true;
-      if (!open) return;
-      open(e.clientX, e.clientY, build(), { from: e.currentTarget as Element, keyboard: !!(e.nativeEvent as unknown as Record<string, unknown>)[BY_KEY] });
-    },
-  }), [open]);
+  const key = useLiveKeys();
+  return useCallback((build: () => MenuInput, id?: string) => {
+    const source = key(id);
+    live.set(source, build);
+    return {
+      onContextMenu: (e: ReactMouseEvent) => {
+        if ((e.nativeEvent as unknown as Record<string, unknown>)[HANDLED]) return;
+        // a text field or a selection inside keeps the edit menu
+        const target = e.target as HTMLElement;
+        if (isEditable(target as HTMLInputElement) || (window.getSelection()?.toString() ?? '').trim()) return;
+        e.preventDefault();
+        (e.nativeEvent as unknown as Record<string, unknown>)[HANDLED] = true;
+        if (!open) return;
+        open(e.clientX, e.clientY, build(), { from: e.currentTarget as Element, keyboard: !!(e.nativeEvent as unknown as Record<string, unknown>)[BY_KEY], source });
+      },
+    };
+  }, [open, key]);
 }
 
 /** Props for a "..." overflow button that opens the same menu under itself (click, Enter or Space). */
-export function useMenuButton(): (build: () => MenuInput) => { onClick: (e: ReactMouseEvent) => void; 'aria-haspopup': 'menu' } {
+export function useMenuButton(): (build: () => MenuInput, id?: string) => { onClick: (e: ReactMouseEvent) => void; 'aria-haspopup': 'menu' } {
   const open = useContext(Ctx);
-  return useCallback((build: () => MenuInput) => ({
-    'aria-haspopup': 'menu' as const,
-    onClick: (e: ReactMouseEvent) => {
-      if (!open) return;
-      const r = (e.currentTarget as Element).getBoundingClientRect();
-      open(Math.round(r.left), Math.round(r.bottom + 4), build(), { from: e.currentTarget as Element, keyboard: e.detail === 0 });
-    },
-  }), [open]);
+  const key = useLiveKeys();
+  return useCallback((build: () => MenuInput, id?: string) => {
+    const source = key(id);
+    live.set(source, build);
+    return {
+      'aria-haspopup': 'menu' as const,
+      onClick: (e: ReactMouseEvent) => {
+        if (!open) return;
+        const r = (e.currentTarget as Element).getBoundingClientRect();
+        open(Math.round(r.left), Math.round(r.bottom + 4), build(), { from: e.currentTarget as Element, keyboard: e.detail === 0, source });
+      },
+    };
+  }, [open, key]);
 }
 
 /** Copies and says so in a toast-less way (the menu closes; failures are silent like the browser's own Copy). */
@@ -75,19 +114,48 @@ function editMenu(el: HTMLInputElement | HTMLTextAreaElement | HTMLElement): Men
   ]);
 }
 
+/** What a panel was opened with (kept beside the pure stack entry). */
+interface Extra { items: MenuEntry[]; from: Element | null; keyboard: boolean }
+
 export function ContextMenuProvider({ children }: { children: ReactNode }) {
-  const [state, setState] = useState<Open | null>(null);
+  const [stack, setStack] = useState<StackEntry[]>([]);
+  const stackRef = useRef(stack);
+  stackRef.current = stack;
+  const extras = useRef(new Map<string, Extra>());
+  const seq = useRef(0);
+  const nextUid = () => `m${++seq.current}`;
+
   const open = useCallback<OpenFn>((x, y, input, opts) => {
     const items = tidy(input);
     if (!items.length) return;
-    setState({ x, y, items, from: opts?.from ?? (document.activeElement as Element | null), keyboard: !!opts?.keyboard });
+    const uid = nextUid();
+    extras.current.set(uid, { items, from: opts?.from ?? (document.activeElement as Element | null), keyboard: !!opts?.keyboard });
+    setStack(s => openMenu(s, { uid, source: opts?.source ?? null, path: [], pinned: false, x, y }));
   }, []);
-  const close = useCallback((restore: boolean) => {
-    setState(s => {
-      if (restore && s?.from instanceof HTMLElement && s.from.isConnected) s.from.focus({ preventScroll: true });
-      return null;
-    });
+  /** Every unpinned menu closes; `restore` puts the focus back where the last one was opened. */
+  const closeTransient = useCallback((restore: boolean) => {
+    const last = [...stackRef.current].reverse().find(e => !e.pinned);
+    if (!last) return;
+    const from = extras.current.get(last.uid)?.from;
+    if (restore && from instanceof HTMLElement && from.isConnected) from.focus({ preventScroll: true });
+    setStack(s => closeUnpinned(s));
   }, []);
+  const pin = useCallback((uid: string, pos: Pos) => setStack(s => pinMenu(s, uid, pos)), []);
+  /** A submenu at `path` of panel `uid` becomes its own pinned panel at `pos`. */
+  const tear = useCallback((uid: string, path: string[], pos: Pos, closeOthers: boolean) => {
+    const parent = stackRef.current.find(e => e.uid === uid);
+    const extra = extras.current.get(uid);
+    if (!parent || !extra) return;
+    const id = nextUid();
+    extras.current.set(id, { items: extra.items, from: null, keyboard: false });
+    setStack(s => tearOff(closeOthers ? closeUnpinned(s) : s, { uid: id, source: parent.source, path: [...parent.path, ...path], pinned: true, x: pos.x, y: pos.y }, pos));
+  }, []);
+
+  // what a closed panel was opened with is not kept
+  useEffect(() => {
+    const ids = new Set(stack.map(e => e.uid));
+    for (const k of [...extras.current.keys()]) if (!ids.has(k)) extras.current.delete(k);
+  }, [stack]);
 
   useEffect(() => {
     // the fallback for everything no screen menu handled: never the browser's menu
@@ -118,15 +186,30 @@ export function ContextMenuProvider({ children }: { children: ReactNode }) {
     return () => { document.removeEventListener('contextmenu', onMenu); document.removeEventListener('keydown', onKey, true); };
   }, [open]);
 
+  const hasTransient = stack.some(e => !e.pinned);
   return (
     <Ctx.Provider value={open}>
       {children}
-      {state && createPortal(<MenuRoot key={`${state.x},${state.y}`} state={state} close={close} />, document.body)}
+      {stack.length > 0 && createPortal(<>
+        {hasTransient && <OutsideCloser close={closeTransient} />}
+        {stack.map(e => {
+          const extra = extras.current.get(e.uid);
+          if (!extra) return null;
+          return e.pinned
+            ? <PinnedPanel key={e.uid} entry={e} extra={extra} closeTransient={closeTransient}
+              onClose={() => setStack(s => closeMenu(s, e.uid))} onUnpin={() => setStack(s => unpinMenu(s, e.uid))}
+              onMove={p => setStack(s => moveMenu(s, e.uid, p))} onTear={(path, p) => tear(e.uid, path, p, false)} />
+            : <MenuList key={e.uid} items={extra.items} at={{ x: e.x, y: e.y }} close={closeTransient} root keyboard={extra.keyboard} path={[]}
+              onPin={r => pin(e.uid, { x: r.left, y: r.top })} onTear={(path, p, others) => tear(e.uid, path, p, others)} />;
+        })}
+      </>, document.body)}
     </Ctx.Provider>
   );
 }
 
-function MenuRoot({ state, close }: { state: Open; close: (restore: boolean) => void }) {
+/** While a normal menu is open: a click outside every menu, a scroll outside, blur or resize closes it (pinned panels
+ *  stay). */
+function OutsideCloser({ close }: { close: (restore: boolean) => void }) {
   useEffect(() => {
     const outside = (e: Event) => { if (!(e.target as Element | null)?.closest?.('.ds-menu')) close(false); };
     const scroll = (e: Event) => { if (!(e.target instanceof Element && e.target.closest('.ds-menu'))) close(false); };
@@ -142,12 +225,43 @@ function MenuRoot({ state, close }: { state: Open; close: (restore: boolean) =>
       window.removeEventListener('resize', blur);
     };
   }, [close]);
-  return <MenuList items={state.items} at={{ x: state.x, y: state.y }} close={close} root keyboard={state.keyboard} />;
+  return null;
 }
 
-type Anchor = { x: number; y: number } | { left: number; right: number; top: number };
+/** A pinned panel: its entries re-read from the live source on every change of the screen that registered it. */
+function PinnedPanel({ entry, extra, closeTransient, onClose, onUnpin, onMove, onTear }: {
+  entry: StackEntry; extra: Extra; closeTransient: (restore: boolean) => void; onClose: () => void; onUnpin: () => void;
+  onMove: (p: Pos) => void; onTear: (path: string[], p: Pos) => void;
+}) {
+  const [, bump] = useReducer((n: number) => n + 1, 0);
+  useEffect(() => (entry.source ? live.watch(entry.source, bump) : undefined), [entry.source]);
+  const root = entry.source ? live.get(entry.source) ?? null : extra.items;
+  const items = root ? resolvePath(root, entry.path) : null;
+  const title = entry.path.length ? entry.path[entry.path.length - 1]! : t('cm.menu');
+  return (
+    <MenuList items={items ?? []} gone={!items} at={{ fx: entry.x, fy: entry.y }} close={() => {}} root path={[]}
+      pinned={{ title, onClose, onUnpin, onMove }} done={() => closeTransient(false)} onTear={(path, p) => onTear(path, p)} />
+  );
+}
 
-function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEntry[]; at: Anchor; close: (restore: boolean) => void; root?: boolean; keyboard?: boolean; onBack?: () => void }) {
+type Anchor = { x: number; y: number } | { left: number; right: number; top: number } | { fx: number; fy: number };
+
+interface PinnedHead { title: string; onClose: () => void; onUnpin: () => void; onMove: (p: Pos) => void }
+
+function MenuList({ items, at, close, root, keyboard, onBack, path, onPin, onTear, pinned, gone, done }: {
+  items: MenuEntry[]; at: Anchor; close: (restore: boolean) => void; root?: boolean; keyboard?: boolean; onBack?: () => void;
+  /** Submenu labels from the panel's root to this list. */
+  path: string[];
+  /** The pin button of a normal (root) menu. */
+  onPin?: (rect: DOMRect) => void;
+  /** A submenu torn off: its path (from the panel root), where, and whether the normal menus close. */
+  onTear?: (path: string[], pos: Pos, closeOthers: boolean) => void;
+  /** This is a pinned panel's root list: header with title, unpin, close, drag. */
+  pinned?: PinnedHead;
+  gone?: boolean;
+  /** After a pick in a pinned panel (normal menus close; the panel stays). */
+  done?: () => void;
+}) {
   const uid = useId();
   const ref = useRef<HTMLDivElement>(null);
   const [pos, setPos] = useState<{ left: number; top: number } | null>(null);
@@ -155,19 +269,33 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
   const [sub, setSub] = useState<{ index: number; anchor: Anchor; focus: boolean } | null>(null);
   const typed = useRef({ q: '', at: 0 });
   const hoverTimer = useRef<number | undefined>(undefined);
+  const shown = useRef(false);
+  const drag = useRef<{ dx: number; dy: number } | null>(null);
+  const fixed = 'fx' in at ? at : null;
 
   useLayoutEffect(() => {
     const el = ref.current;
     if (!el) return;
     const box = { w: el.offsetWidth, h: el.offsetHeight }, view = { w: window.innerWidth, h: window.innerHeight };
-    setPos('x' in at ? placeAt(at.x, at.y, box, view) : placeBeside(at, box, view));
-  }, [at]);
+    if ('fx' in at) { const p = clampPos({ x: at.fx, y: at.fy }, box, view); setPos({ left: p.x, top: p.y }); }
+    else setPos('x' in at ? placeAt(at.x, at.y, box, view) : placeBeside(at, box, view));
+    // a pinned panel follows its position (drag) and stays inside the window when it shrinks
+  }, ['fx' in at ? at.fx : 'x' in at ? at.x : at.left, 'fx' in at ? at.fy : 'x' in at ? at.y : at.top, items.length]);
   useEffect(() => {
-    if (!pos) return;
+    if (!fixed) return;
+    const onResize = () => { const el = ref.current; if (el) { const p = clampPos({ x: fixed.fx, y: fixed.fy }, { w: el.offsetWidth, h: el.offsetHeight }, { w: window.innerWidth, h: window.innerHeight }); setPos({ left: p.x, top: p.y }); } };
+    window.addEventListener('resize', onResize);
+    return () => window.removeEventListener('resize', onResize);
+  }, [fixed?.fx, fixed?.fy]);
+  useEffect(() => {
+    if (!pos || shown.current) return;
+    shown.current = true;
+    // a pinned panel never takes the focus by itself (it updates while the owner works elsewhere)
+    if (pinned) return;
     ref.current?.focus({ preventScroll: true });
     // a submenu, or a menu opened from the keyboard, starts on its first item; a mouse-opened menu waits for a key
     if (!root || keyboard) setActive(first(items));
-  }, [pos, root, keyboard, items]);
+  }, [pos, root, keyboard, items, pinned]);
   useEffect(() => () => window.clearTimeout(hoverTimer.current), []);
 
   const itemEl = (i: number) => ref.current?.querySelector<HTMLElement>(`[data-i="${i}"]`) ?? null;
@@ -177,11 +305,22 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
     const r = el.getBoundingClientRect();
     setSub({ index: i, anchor: { left: r.left, right: r.right, top: r.top }, focus });
   };
-  const choose = (i: number) => {
+  const tearAt = (i: number) => {
+    const e = items[i];
+    const el = itemEl(i);
+    if (!isItem(e) || !e.submenu || !el || !onTear) return;
+    const r = el.getBoundingClientRect();
+    onTear([...path, e.label], { x: Math.round(r.right + 6), y: Math.round(r.top - 30) }, false);
+  };
+  const choose = (i: number, ev?: { button: number; ctrlKey: boolean; metaKey: boolean }) => {
     const e = items[i];
     if (!enabled(e)) return;
-    if (e.submenu) { openSub(i, true); return; }
-    close(true);
+    if (e.submenu) {
+      if (ev && (ev.button === 1 || ev.ctrlKey || ev.metaKey)) { tearAt(i); return; }
+      openSub(i, true);
+      return;
+    }
+    if (done) { setSub(null); done(); } else close(true);
     // after the menu is gone, so the action sees the restored focus (paste, select all)
     window.setTimeout(() => e.onSelect?.(), 0);
   };
@@ -197,8 +336,8 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
     else if (k === 'Enter' || k === ' ') { stop(); if (active >= 0) choose(active); }
     else if (k === 'ArrowRight') { stop(); const e = items[active]; if (enabled(e) && e.submenu) openSub(active, true); }
     else if (k === 'ArrowLeft') { stop(); onBack?.(); }
-    else if (k === 'Escape') { stop(); if (onBack) onBack(); else close(true); }
-    else if (k === 'Tab') { stop(); close(true); }
+    else if (k === 'Escape') { stop(); if (onBack) onBack(); else if (pinned) ref.current?.blur(); else close(true); }
+    else if (k === 'Tab') { stop(); if (!pinned) close(true); }
     else if (k.length === 1 && !ev.ctrlKey && !ev.metaKey && !ev.altKey) {
       stop();
       const now = Date.now();
@@ -211,12 +350,44 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
 
   useEffect(() => { if (active >= 0) itemEl(active)?.scrollIntoView({ block: 'nearest' }); }, [active]);
 
+  // a pinned panel is dragged by its header
+  const onHeadDown = (e: ReactPointerEvent) => {
+    if (!pinned || e.button !== 0 || (e.target as Element).closest('button') || !pos) return;
+    drag.current = { dx: e.clientX - pos.left, dy: e.clientY - pos.top };
+    (e.currentTarget as Element).setPointerCapture(e.pointerId);
+  };
+  const onHeadMove = (e: ReactPointerEvent) => {
+    if (!drag.current || !pinned) return;
+    pinned.onMove({ x: Math.round(e.clientX - drag.current.dx), y: Math.round(e.clientY - drag.current.dy) });
+  };
+  const onHeadUp = () => { drag.current = null; };
+
+  // the header: a pinned panel's title, unpin and close; a normal menu's (or submenu's) pin button
+  const pinHere = () => {
+    if (pinned) return pinned.onUnpin();
+    const r = ref.current?.getBoundingClientRect();
+    if (!r) return;
+    if (path.length) onTear?.(path, { x: Math.round(r.left), y: Math.round(r.top) }, true);
+    else onPin?.(r);
+  };
+  const canPin = !!pinned || (path.length ? !!onTear : !!onPin);
+  const head = canPin && (
+    <div className={`ds-menu-head${pinned ? ' pinned' : ''}`} onPointerDown={onHeadDown} onPointerMove={onHeadMove} onPointerUp={onHeadUp} onPointerCancel={onHeadUp}>
+      <span className="ds-menu-title">{pinned ? pinned.title : path.length ? path[path.length - 1] : ''}</span>
+      <button type="button" className={`ds-menu-btn${pinned ? ' on' : ''}`} title={pinned ? t('cm.unpin') : t('cm.pin')} aria-label={pinned ? t('cm.unpin') : t('cm.pin')}
+        aria-pressed={!!pinned} onClick={pinHere}><Icon name={pinned ? 'pinOff' : 'pin'} /></button>
+      {pinned && <button type="button" className="ds-menu-btn" title={t('cm.closePanel')} aria-label={t('cm.closePanel')} onClick={pinned.onClose}><Icon name="x" /></button>}
+    </div>
+  );
+
   return (
     <>
-      <div ref={ref} className={`ds-menu${pos ? ' in' : ''}`} role="menu" tabIndex={-1} onKeyDown={onKey}
+      <div ref={ref} className={`ds-menu${pos ? ' in' : ''}${pinned ? ' pinned' : ''}`} role="menu" tabIndex={-1} onKeyDown={onKey}
         style={pos ? { left: pos.left, top: pos.top } : { left: -9999, top: -9999 }}
-        aria-activedescendant={active >= 0 ? `${uid}-${active}` : undefined}
+        aria-label={pinned?.title} aria-activedescendant={active >= 0 ? `${uid}-${active}` : undefined}
         onContextMenu={e => e.preventDefault()}>
+        {head}
+        {gone && <div className="ds-menu-gone">{t('cm.gone')}</div>}
         {items.map((e, i) => {
           if (!isItem(e)) return <div key={`s${i}`} className="ds-menu-sep" role="separator" />;
           const dis = !!e.disabled;
@@ -225,7 +396,7 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
             <div key={i} id={`${uid}-${i}`} data-i={i} role={checkable ? 'menuitemcheckbox' : 'menuitem'}
               aria-checked={checkable ? e.checked : undefined} aria-disabled={dis || undefined}
               aria-haspopup={e.submenu ? 'menu' : undefined} aria-expanded={e.submenu ? sub?.index === i : undefined}
-              title={typeof e.disabled === 'string' ? e.disabled : undefined}
+              title={typeof e.disabled === 'string' ? e.disabled : e.submenu && onTear ? t('cm.tearOff') : undefined}
               className={`ds-menu-item${i === active ? ' active' : ''}${e.danger ? ' danger' : ''}${dis ? ' disabled' : ''}`}
               onPointerMove={() => {
                 if (active !== i) setActive(dis ? -1 : i);
@@ -233,7 +404,9 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
                 if (!dis && e.submenu) { if (sub?.index !== i) hoverTimer.current = window.setTimeout(() => openSub(i, false), 120); }
                 else if (sub) hoverTimer.current = window.setTimeout(() => setSub(null), 200);
               }}
-              onClick={() => choose(i)}>
+              onMouseDown={ev => { if (ev.button === 1) ev.preventDefault(); }}
+              onAuxClick={ev => { if (ev.button === 1) choose(i, ev); }}
+              onClick={ev => choose(i, ev)}>
               <span className="ds-menu-ic">{checkable ? (e.checked ? <Icon name="check" /> : null) : e.icon ? <Icon name={e.icon} /> : null}</span>
               <span className="ds-menu-l">{e.label}</span>
               {e.shortcut && <span className="ds-menu-k">{e.shortcut}</span>}
@@ -243,7 +416,8 @@ function MenuList({ items, at, close, root, keyboard, onBack }: { items: MenuEnt
         })}
       </div>
       {sub && isItem(items[sub.index]) && (items[sub.index] as MenuItem).submenu && (
-        <MenuList key={sub.index} items={(items[sub.index] as MenuItem).submenu as MenuEntry[]} at={sub.anchor} close={close}
+        <MenuList key={sub.index} items={(items[sub.index] as MenuItem).submenu as MenuEntry[]} at={sub.anchor} close={close} done={done}
+          path={[...path, (items[sub.index] as MenuItem).label]} onTear={onTear}
           onBack={() => { setSub(null); ref.current?.focus({ preventScroll: true }); }} />
       )}
     </>
diff --git a/apps/desktop/src/ui/icons.tsx b/apps/desktop/src/ui/icons.tsx
index 6d0cb1c..d941d89 100644
--- a/apps/desktop/src/ui/icons.tsx
+++ b/apps/desktop/src/ui/icons.tsx
@@ -55,6 +55,8 @@ import { PauseIcon } from '@phosphor-icons/react/dist/csr/Pause';
 import { PencilSimpleIcon } from '@phosphor-icons/react/dist/csr/PencilSimple';
 import { PlayIcon } from '@phosphor-icons/react/dist/csr/Play';
 import { PlusIcon } from '@phosphor-icons/react/dist/csr/Plus';
+import { PushPinIcon } from '@phosphor-icons/react/dist/csr/PushPin';
+import { PushPinSlashIcon } from '@phosphor-icons/react/dist/csr/PushPinSlash';
 import { PulseIcon } from '@phosphor-icons/react/dist/csr/Pulse';
 import { QuestionIcon } from '@phosphor-icons/react/dist/csr/Question';
 import { RocketLaunchIcon } from '@phosphor-icons/react/dist/csr/RocketLaunch';
@@ -89,7 +91,7 @@ const ICONS = {
   more: DotsThreeIcon, gauge: GaugeIcon, eye: EyeIcon, eyeOff: EyeSlashIcon, link: LinkIcon, unlink: LinkBreakIcon, bell: BellIcon, filter: FunnelIcon, play: PlayIcon,
   send: PaperPlaneRightIcon, edit: PencilSimpleIcon, upload: UploadSimpleIcon, sliders: SlidersHorizontalIcon,
   rotate: ArrowCounterClockwiseIcon, cloud: CloudIcon, coins: CoinsIcon, chart: TrendUpIcon, flask: FlaskIcon, grid: GridFourIcon,
-  clipboard: ClipboardTextIcon, share: ExportIcon, lock: LockIcon, question: QuestionIcon,
+  clipboard: ClipboardTextIcon, share: ExportIcon, lock: LockIcon, question: QuestionIcon, pin: PushPinIcon, pinOff: PushPinSlashIcon,
 } satisfies Record<string, PhosphorIcon>;
 
 export type IconName = keyof typeof ICONS;
diff --git a/apps/desktop/src/ui/menu-stack.ts b/apps/desktop/src/ui/menu-stack.ts
new file mode 100644
index 0000000..300371d
--- /dev/null
+++ b/apps/desktop/src/ui/menu-stack.ts
@@ -0,0 +1,140 @@
+// The in-app context menus' panel stack without React or the DOM (tested in tests/menu-stack.test.ts): several menus
+// open at once, a submenu chain per menu, pinned panels that survive the next menu, step aside so they never sit on
+// each other and stay inside the window; plus the live sources pinned panels re-read their entries from.
+import type { MenuEntry, MenuInput, MenuItem } from './menu-logic';
+import { tidy } from './menu-logic';
+
+export interface Pos { x: number; y: number }
+
+/** One open panel: a root menu, or a submenu torn off (pinned) at `path` (submenu labels from the root). */
+export interface StackEntry {
+  uid: string;
+  /** The live source of its entries (`liveKey`), or null for a menu built once (the edit menu). */
+  source: string | null;
+  path: readonly string[];
+  pinned: boolean;
+  x: number;
+  y: number;
+}
+
+/** Pinned panels step this far (CSS px) until no other pinned panel sits there. */
+export const OFFSET_STEP = 24;
+
+const same = (a: Pick<StackEntry, 'source' | 'path'>, b: Pick<StackEntry, 'source' | 'path'>) =>
+  a.source !== null && a.source === b.source && a.path.length === b.path.length && a.path.every((p, i) => p === b.path[i]);
+
+/** Opening a menu closes only the unpinned ones. */
+export function openMenu(list: readonly StackEntry[], entry: StackEntry): StackEntry[] {
+  return [...list.filter(e => e.pinned), entry];
+}
+
+/** Outside click, Esc, a pick, scroll, blur: every unpinned panel closes (the same list when there is none). */
+export function closeUnpinned(list: readonly StackEntry[]): StackEntry[] {
+  return list.some(e => !e.pinned) ? list.filter(e => e.pinned) : (list as StackEntry[]);
+}
+
+export function closeMenu(list: readonly StackEntry[], uid: string): StackEntry[] {
+  return list.some(e => e.uid === uid) ? list.filter(e => e.uid !== uid) : (list as StackEntry[]);
+}
+
+/** A free spot: steps down-right until no taken spot is within a step of it. */
+export function autoOffset(taken: readonly Pos[], pos: Pos, step = OFFSET_STEP): Pos {
+  let next = { ...pos };
+  for (let k = 0; k < 200 && taken.some(t => Math.abs(t.x - next.x) < step && Math.abs(t.y - next.y) < step); k++) next = { x: next.x + step, y: next.y + step };
+  return next;
+}
+
+const taken = (list: readonly StackEntry[], skip?: string): Pos[] => list.filter(e => e.pinned && e.uid !== skip).map(e => ({ x: e.x, y: e.y }));
+
+/** Pins an open panel where it is (moved off other pinned panels). A pinned copy of the same panel is replaced. */
+export function pinMenu(list: readonly StackEntry[], uid: string, pos: Pos): StackEntry[] {
+  const entry = list.find(e => e.uid === uid);
+  if (!entry || entry.pinned) return list as StackEntry[];
+  const rest = list.filter(e => !(e.pinned && same(e, entry)));
+  const at = autoOffset(taken(rest, uid), pos);
+  return rest.map(e => (e.uid === uid ? { ...e, pinned: true, x: at.x, y: at.y } : e));
+}
+
+/** A submenu torn off its menu (pin button on a submenu, Ctrl / middle click on its row): a new pinned panel. The menu
+ *  it came from stays open. */
+export function tearOff(list: readonly StackEntry[], entry: StackEntry, pos: Pos): StackEntry[] {
+  const rest = list.filter(e => !(e.pinned && same(e, entry)));
+  const at = autoOffset(taken(rest), pos);
+  return [...rest, { ...entry, pinned: true, x: at.x, y: at.y }];
+}
+
+/** Unpin: a root menu becomes a normal menu again (it closes with the next one); a torn-off submenu closes. */
+export function unpinMenu(list: readonly StackEntry[], uid: string): StackEntry[] {
+  const entry = list.find(e => e.uid === uid);
+  if (!entry?.pinned) return list as StackEntry[];
+  if (entry.path.length > 0) return closeMenu(list, uid);
+  return list.map(e => (e.uid === uid ? { ...e, pinned: false } : e));
+}
+
+export function moveMenu(list: readonly StackEntry[], uid: string, pos: Pos): StackEntry[] {
+  return list.map(e => (e.uid === uid ? { ...e, x: pos.x, y: pos.y } : e));
+}
+
+/** Keeps a panel of `size` inside `box` (the window), `margin` from its edges. */
+export function clampPos(pos: Pos, size: { w: number; h: number }, box: { w: number; h: number }, margin = 8): Pos {
+  return { x: Math.max(margin, Math.min(pos.x, box.w - size.w - margin)), y: Math.max(margin, Math.min(pos.y, box.h - size.h - margin)) };
+}
+
+/** The entries at `path` (submenu labels) inside a menu, or null when that submenu is gone. */
+export function resolvePath(items: readonly MenuEntry[], path: readonly string[]): MenuEntry[] | null {
+  let cur = items as MenuEntry[];
+  for (const label of path) {
+    const next = cur.find((e): e is MenuItem => e !== 'sep' && e.label === label && !!e.submenu);
+    if (!next) return null;
+    cur = next.submenu as MenuEntry[];
+  }
+  return cur;
+}
+
+// ---- live sources ----
+
+/**
+ * The menus' live sources: every `useContextMenu` / `useMenuButton` call registers the builder it got on each render,
+ * so a pinned panel re-reads its entries from the newest builder (fresh data, fresh actions) and updates in place. A
+ * source that is gone (its row unmounted) gives null: the panel says so instead of closing.
+ */
+export class LiveMenus {
+  private builders = new Map<string, () => MenuInput>();
+  private subs = new Map<string, Set<() => void>>();
+  private pending = new Set<string>();
+  constructor(private schedule: (fn: () => void) => void = fn => queueMicrotask(fn)) {}
+
+  /** Registers (or replaces) the builder of `key`; its watchers hear about it once per batch. */
+  set(key: string, build: () => MenuInput): void {
+    this.builders.set(key, build);
+    this.ping(key);
+  }
+  delete(key: string): void {
+    if (this.builders.delete(key)) this.ping(key);
+  }
+  /** Keeps only the keys of one hook (`prefix#...`) that its last render registered; `keep` empty drops them all. */
+  retain(prefix: string, keep: ReadonlySet<string> = new Set()): void {
+    for (const k of [...this.builders.keys()]) if (k.startsWith(`${prefix}#`) && !keep.has(k)) this.delete(k);
+  }
+  /** The entries of `key` now (tidied), or null when it is gone. */
+  get(key: string): MenuEntry[] | null {
+    const b = this.builders.get(key);
+    if (!b) return null;
+    try { return tidy(b()); } catch { return null; }
+  }
+  has(key: string): boolean { return this.builders.has(key); }
+  watch(key: string, fn: () => void): () => void {
+    let s = this.subs.get(key);
+    if (!s) { s = new Set(); this.subs.set(key, s); }
+    s.add(fn);
+    return () => { s.delete(fn); if (!s.size) this.subs.delete(key); };
+  }
+  private ping(key: string): void {
+    if (!this.subs.has(key) || this.pending.has(key)) return;
+    this.pending.add(key);
+    this.schedule(() => {
+      this.pending.delete(key);
+      for (const fn of [...(this.subs.get(key) ?? [])]) fn();
+    });
+  }
+}
diff --git a/apps/desktop/tests/menu-stack.test.ts b/apps/desktop/tests/menu-stack.test.ts
new file mode 100644
index 0000000..b1c4b67
--- /dev/null
+++ b/apps/desktop/tests/menu-stack.test.ts
@@ -0,0 +1,150 @@
+// The in-app context menus' panel stack (ui/menu-stack.ts): several menus open, pinned panels that survive the next
+// menu and never sit on each other, tear-offs, live sources that a pinned panel re-reads, and the wiring in
+// ContextMenu.tsx that keeps it that way.
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import type { MenuEntry, MenuInput } from '../src/ui/menu-logic';
+import { autoOffset, clampPos, closeMenu, closeUnpinned, LiveMenus, moveMenu, OFFSET_STEP, openMenu, pinMenu, resolvePath, type StackEntry, tearOff, unpinMenu } from '../src/ui/menu-stack';
+
+const e = (uid: string, extra: Partial<StackEntry> = {}): StackEntry => ({ uid, source: `src-${uid}`, path: [], pinned: false, x: 10, y: 10, ...extra });
+const uids = (l: readonly StackEntry[]) => l.map(x => `${x.uid}${x.pinned ? '*' : ''}`);
+
+describe('menu stack', () => {
+  test('opening a menu closes only the unpinned ones', () => {
+    let l = openMenu([], e('a'));
+    l = pinMenu(l, 'a', { x: 100, y: 100 });
+    l = openMenu(l, e('b'));
+    l = openMenu(l, e('c'));
+    expect(uids(l)).toEqual(['a*', 'c']);
+    l = closeUnpinned(l);
+    expect(uids(l)).toEqual(['a*']);
+    expect(closeUnpinned(l)).toBe(l); // nothing to close: the same list (no re-render)
+  });
+
+  test('a pinned panel steps aside from other pinned panels', () => {
+    let l = [e('a', { pinned: true, x: 100, y: 100 }), e('b')];
+    l = pinMenu(l, 'b', { x: 104, y: 98 });
+    const b = l.find(x => x.uid === 'b')!;
+    expect(b.pinned).toBe(true);
+    expect(Math.abs(b.x - 100) >= OFFSET_STEP || Math.abs(b.y - 100) >= OFFSET_STEP).toBe(true);
+    expect(autoOffset([{ x: 0, y: 0 }, { x: 24, y: 24 }], { x: 0, y: 0 })).toEqual({ x: 48, y: 48 });
+    expect(autoOffset([], { x: 5, y: 5 })).toEqual({ x: 5, y: 5 });
+  });
+
+  test('pinning the same panel again replaces the old pinned copy', () => {
+    let l = [e('a', { pinned: true, source: 's', path: ['Copy'] }), e('b', { source: 's', path: ['Copy'] })];
+    l = pinMenu(l, 'b', { x: 300, y: 300 });
+    expect(uids(l)).toEqual(['b*']);
+    // a menu without a live source (the edit menu) is never "the same" as another
+    l = [e('a', { pinned: true, source: null }), e('b', { source: null })];
+    expect(uids(pinMenu(l, 'b', { x: 300, y: 300 }))).toEqual(['a*', 'b*']);
+  });
+
+  test('a torn-off submenu is its own pinned panel and the menu it came from stays open', () => {
+    let l = openMenu([], e('a'));
+    l = tearOff(l, e('t', { path: ['Open tab'] }), { x: 50, y: 50 });
+    expect(uids(l)).toEqual(['a', 't*']);
+    // the same submenu torn off again: one copy
+    l = tearOff(l, e('t2', { path: ['Open tab'], source: 'src-t' }), { x: 50, y: 50 });
+    expect(uids(l)).toEqual(['a', 't2*']);
+  });
+
+  test('unpin: a root menu becomes a normal menu again, a torn-off submenu closes', () => {
+    let l = [e('a', { pinned: true }), e('t', { pinned: true, path: ['Copy'] })];
+    l = unpinMenu(l, 'a');
+    expect(uids(l)).toEqual(['a', 't*']);
+    l = unpinMenu(l, 't');
+    expect(uids(l)).toEqual(['a']);
+    expect(uids(closeMenu(l, 'a'))).toEqual([]);
+    expect(closeMenu(l, 'zz')).toBe(l);
+  });
+
+  test('a moved panel keeps the move; positions stay inside the window', () => {
+    const l = moveMenu([e('a', { pinned: true })], 'a', { x: 400, y: 20 });
+    expect(l[0]).toMatchObject({ x: 400, y: 20 });
+    expect(clampPos({ x: 1900, y: -40 }, { w: 240, h: 300 }, { w: 1280, h: 800 })).toEqual({ x: 1280 - 240 - 8, y: 8 });
+    expect(clampPos({ x: 100, y: 100 }, { w: 240, h: 300 }, { w: 1280, h: 800 })).toEqual({ x: 100, y: 100 });
+  });
+
+  test('resolvePath walks submenu labels; a gone submenu gives null', () => {
+    const items: MenuEntry[] = [{ label: 'Open' }, 'sep', { label: 'Copy', submenu: [{ label: 'Name' }, { label: 'More', submenu: [{ label: 'Deep' }] }] }];
+    expect(resolvePath(items, [])).toBe(items);
+    expect(resolvePath(items, ['Copy', 'More'])!.map(x => (x === 'sep' ? '-' : x.label))).toEqual(['Deep']);
+    expect(resolvePath(items, ['Open'])).toBeNull(); // not a submenu
+    expect(resolvePath(items, ['Gone'])).toBeNull();
+  });
+});
+
+describe('live sources', () => {
+  const sync = () => {
+    const queue: (() => void)[] = [];
+    return { live: new LiveMenus(fn => queue.push(fn)), flush: () => { while (queue.length) queue.shift()!(); } };
+  };
+
+  test('a pinned panel hears once per batch and re-reads the newest builder', () => {
+    const { live, flush } = sync();
+    let value = 1;
+    const build = (): MenuInput => [{ label: `Rollout ${value}%` }, false];
+    live.set('h#0', build);
+    let heard = 0;
+    const off = live.watch('h#0', () => heard++);
+    value = 20;
+    live.set('h#0', build);
+    live.set('h#0', build);
+    expect(heard).toBe(0);
+    flush();
+    expect(heard).toBe(1);
+    expect(live.get('h#0')!.map(x => (x === 'sep' ? '-' : x.label))).toEqual(['Rollout 20%']);
+    off();
+    live.set('h#0', build);
+    flush();
+    expect(heard).toBe(1);
+  });
+
+  test('keys a render no longer makes are dropped and their panels hear it (gone, not closed)', () => {
+    const { live, flush } = sync();
+    live.set('h#0', () => [{ label: 'A' }]);
+    live.set('h#app:k1', () => [{ label: 'B' }]);
+    live.set('other#0', () => [{ label: 'C' }]);
+    let heard = 0;
+    live.watch('h#app:k1', () => heard++);
+    live.retain('h', new Set(['h#0']));
+    flush();
+    expect(heard).toBe(1);
+    expect(live.get('h#app:k1')).toBeNull();
+    expect(live.has('h#0') && live.has('other#0')).toBe(true);
+    live.retain('h');
+    expect(live.has('h#0')).toBe(false);
+    expect(live.has('other#0')).toBe(true);
+  });
+
+  test('a builder that throws reads as gone', () => {
+    const { live } = sync();
+    live.set('x#0', () => { throw new Error('boom'); });
+    expect(live.get('x#0')).toBeNull();
+    expect(live.get('missing')).toBeNull();
+  });
+});
+
+describe('wiring', () => {
+  const s = readFileSync(join(import.meta.dir, '../src/ui/ContextMenu.tsx'), 'utf8');
+  test('menus register live sources and pinned panels re-read them', () => {
+    expect(s).toMatch(/live\.set\(source, build\)/);
+    expect(s).toMatch(/live\.watch\(entry\.source, bump\)/);
+    expect(s).toMatch(/resolvePath\(root, entry\.path\)/);
+  });
+  test('an outside click closes only the normal menus; a pick in a pinned panel keeps it', () => {
+    expect(s).toMatch(/closeUnpinned\(s\)/);
+    expect(s).toMatch(/done=\{\(\) => closeTransient\(false\)\}/);
+    expect(s).toMatch(/ev\.button === 1 \|\| ev\.ctrlKey \|\| ev\.metaKey/);
+  });
+  test('the app menus carry the app key, so a pinned panel follows the app when rows reorder', () => {
+    for (const f of ['src/App.tsx', 'src/screens/AppView.tsx', 'src/screens/Ignored.tsx', 'src/screens/Portfolio.tsx']) {
+      const src = readFileSync(join(import.meta.dir, '..', f), 'utf8');
+      const lines = src.split('\n').filter(l => l.includes('=> appMenu('));
+      expect(lines.length, f).toBeGreaterThan(0);
+      for (const l of lines) expect(l, f).toMatch(/`app:\$\{/);
+    }
+  });
+});
diff --git a/apps/desktop/tests/tray-menu.test.ts b/apps/desktop/tests/tray-menu.test.ts
new file mode 100644
index 0000000..1b36a6f
--- /dev/null
+++ b/apps/desktop/tests/tray-menu.test.ts
@@ -0,0 +1,85 @@
+// The tray menu panels' page (src/traymenu/): the tree from Rust, paths by stable keys, the row split, filtering,
+// keyboard moves, a live update that keeps the highlight, and the page's wiring (its own bundle, dev demo only in dev).
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { filterNodes, findPath, isTearOff, keepActive, type MenuNode, nextIndex, rows, split } from '../src/traymenu/model';
+
+const ROOT = join(import.meta.dir, '..');
+const src = (f: string) => readFileSync(join(ROOT, f), 'utf8');
+const item = (id: string, label: string, enabled = true): MenuNode => ({ kind: 'item', id, label, enabled });
+const tree = (state: string): MenuNode[] => [
+  item('tray-open', 'Open storebound'),
+  { kind: 'sep' },
+  { kind: 'sub', key: 'apps', label: 'Apps', items: [item('tray-app:k1', `First  ·  ${state}`), item('tray-app:k2', 'Second')] },
+  item('tray-none', 'No apps yet', false),
+  item('tray-quit', 'Quit storebound'),
+];
+
+describe('tray menu model', () => {
+  test('a row splits into its text and the live value after the middle dot', () => {
+    expect(split('First  ·  App Store: In review · Play: Live')).toEqual({ text: 'First', value: 'App Store: In review · Play: Live' });
+    expect(split('Settings')).toEqual({ text: 'Settings' });
+    expect(split('Odd  ·  ')).toEqual({ text: 'Odd' });
+  });
+  test('paths follow submenu keys; a gone submenu gives null', () => {
+    expect(findPath(tree('x'), [])!.label).toBeNull();
+    expect(findPath(tree('x'), ['apps'])!.items).toHaveLength(2);
+    expect(findPath(tree('x'), ['apps'])!.label).toBe('Apps');
+    expect(findPath(tree('x'), ['gone'])).toBeNull();
+  });
+  test('typing filters rows by every word, separators drop out', () => {
+    const r = filterNodes(tree('x'), 'stor quit');
+    expect(r.map(n => (n.kind === 'sep' ? '-' : n.label))).toEqual(['Quit storebound']);
+    expect(filterNodes(tree('x'), '  ')).toHaveLength(5);
+  });
+  test('keyboard moves skip disabled rows and wrap', () => {
+    const en = rows(tree('x')).map(n => n.kind === 'sub' || n.enabled);
+    expect(en).toEqual([true, true, false, true]);
+    expect(nextIndex(1, 1, en)).toBe(3);
+    expect(nextIndex(3, 1, en)).toBe(0);
+    expect(nextIndex(-1, 1, en)).toBe(0);
+    expect(nextIndex(-1, -1, en)).toBe(3);
+    expect(nextIndex(0, 1, [])).toBe(-1);
+  });
+  test('a live update keeps the highlight on the same row', () => {
+    const before = rows(findPath(tree('In review'), ['apps'])!.items);
+    const after = rows(findPath([...tree('Live')], ['apps'])!.items).slice().reverse();
+    expect(keepActive(before, after, 0)).toBe(1); // First moved to index 1
+    expect(keepActive(before, after.slice(0, 1), 0)).toBe(0); // gone: the same place, clamped
+    expect(keepActive(before, after, -1)).toBe(-1);
+    expect(keepActive(before, [], 0)).toBe(-1);
+  });
+  test('Ctrl / Cmd + click or a middle click tears a submenu off', () => {
+    expect(isTearOff({ button: 1, ctrlKey: false, metaKey: false })).toBe(true);
+    expect(isTearOff({ button: 0, ctrlKey: true, metaKey: false })).toBe(true);
+    expect(isTearOff({ button: 0, ctrlKey: false, metaKey: true })).toBe(true);
+    expect(isTearOff({ button: 0, ctrlKey: false, metaKey: false })).toBe(false);
+  });
+});
+
+describe('tray menu page', () => {
+  test('its own page in the build, with the demo only behind import.meta.env.DEV', () => {
+    expect(src('vite.config.ts')).toMatch(/menu: 'tray-menu\.html'/);
+    expect(src('tray-menu.html')).toMatch(/src="\/src\/traymenu\/main\.tsx"/);
+    const main = src('src/traymenu/main.tsx');
+    expect(main).toMatch(/!inTauri\(\) && import\.meta\.env\.DEV/);
+    expect(main).toMatch(/await import\('\.\/demo'\)/);
+    expect(main).not.toMatch(/^import .*\.\/demo/m);
+  });
+  test('the page never polls: values come from menu-model pushes', () => {
+    const main = src('src/traymenu/main.tsx');
+    expect(src('src/traymenu/menu-api.ts')).toMatch(/sub<MenuNode\[\]>\('menu-model'/);
+    expect(main).toMatch(/onModel\(setNodes\)/);
+    expect(main).not.toMatch(/setInterval/);
+    expect(src('src/traymenu/TrayMenu.tsx')).not.toMatch(/setInterval|requestAnimationFrame/);
+  });
+  test('every command the page calls is a menu command Rust grants to menu-* windows', () => {
+    const api = src('src/traymenu/menu-api.ts');
+    const called = [...api.matchAll(/call\('(\w+)'/g), ...api.matchAll(/invoke<[^>]*>\('(\w+)'/g)].map(m => m[1]);
+    const list = src('src-tauri/src/commands_list.rs');
+    const menu = list.slice(list.indexOf('MENU_COMMANDS'));
+    expect(called.length).toBeGreaterThan(5);
+    for (const c of called) expect(menu, c).toContain(`"${c}"`);
+  });
+});
diff --git a/apps/desktop/tray-menu.html b/apps/desktop/tray-menu.html
new file mode 100644
index 0000000..b765ee1
--- /dev/null
+++ b/apps/desktop/tray-menu.html
@@ -0,0 +1,14 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
+    <link rel="icon" href="data:," />
+    <title>storebound</title>
+  </head>
+  <body class="tm-page">
+    <div id="menu"></div>
+    <script type="module" src="/src/traymenu/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/desktop/vite.config.ts b/apps/desktop/vite.config.ts
index ba701d6..84580da 100644
--- a/apps/desktop/vite.config.ts
+++ b/apps/desktop/vite.config.ts
@@ -16,7 +16,8 @@ export default defineConfig({
     // no inline scripts or styles: the CSP is script-src 'self', style-src 'self'
     assetsInlineLimit: 0,
     cssCodeSplit: false,
-    // two pages: the main window and the tray card (pre-created hidden by src-tauri/src/card.rs)
-    rollupOptions: { input: { main: 'index.html', card: 'card.html' } },
+    // three pages: the main window, the tray card (pre-created hidden by src-tauri/src/card.rs) and the tray menu panels
+    // (one window per panel, src-tauri/src/menu_panel.rs)
+    rollupOptions: { input: { main: 'index.html', card: 'card.html', menu: 'tray-menu.html' } },
   },
 });
diff --git a/docs/desktop.md b/docs/desktop.md
index 5e96ff4..63d3c76 100644
--- a/docs/desktop.md
+++ b/docs/desktop.md
@@ -490,6 +490,25 @@ The CLI and the app are one product: one version number, one set of store accoun
   starts silently in the tray, without a window. Closing the window keeps it running in the tray; the tray icon
   opens it, the tray menu's Quit (macOS: Cmd+Q) quits. Turn the logon entry off in the OS (Windows: Settings > Apps >
   Startup). Window state never restores "visible", so a `--hidden` start stays hidden.
+- **Tray menu panels** (`src-tauri/src/menu_panel.rs`, `src/traymenu/`, page `tray-menu.html`): a right click on the
+  tray icon opens the app's own menu instead of the OS menu. tray.rs builds one tree (`menu_model`, submenus with a
+  stable key such as `apps`, the same in every language); every panel (the root and each submenu) is its own
+  frameless, always-on-top `menu-N` window that measures itself and calls `menu_ready`, and Rust places it inside the
+  monitor's work area (the root away from the taskbar or menu bar, a submenu beside its parent, flipped at the edge).
+  The panel book (pure, `tests/menu_panel.rs`) keeps transient and pinned panels apart: a new menu, Esc, a pick or
+  focus leaving every menu closes the transient ones; pinned ones (pin button, Ctrl+click, middle click) stay, can be
+  dragged by the header, step aside from other pins and are saved in state.json (`menuPins`) and restored at start.
+  `tray_update` pushes the tree to the open panels (`menu-model`), which update in place; nothing polls, and a closed
+  panel is destroyed. Only `menu-*` windows get the `menu_*` commands (`capabilities/menu.json`, `guard_menu`). If a
+  panel cannot be built or never reports ready, the native menu (rendered from the same tree) goes on the tray and
+  pops once; Linux always uses it (its tray sends no clicks). The left-click card stays as it was. Look at the panels
+  without Tauri: `bunx vite` in apps/desktop and open `/tray-menu.html` (a dev-only demo on fixture data; `?still=1`
+  stops the ticking values).
+- **Pinned context menus in the window** (`src/ui/ContextMenu.tsx`, pure stack in `src/ui/menu-stack.ts`): every menu
+  has a pin button; a submenu's pin button, Ctrl / Cmd + click or a middle click on a submenu row tears it off. Pinned
+  panels survive the next menu, are dragged by the header and re-read their entries from the newest builder the screen
+  registered (`useContextMenu()` / `useMenuButton()` register on every render; pass an id such as `app:<key>` when rows
+  can reorder), so a store read updates them in place; when the thing is gone they say so instead of closing.
 - **`storebound desktop` install / update**: before the installer runs it stops the running app (only processes
   started from the exact install path: `%LOCALAPPDATA%\storebound\storebound-desktop.exe`,
   `storebound.app/Contents/MacOS/storebound-desktop`, the AppImage; a graceful close, then by PID after 10 s). After the

From a889ada137b087004cb836e8aac204ca7e48c855 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:09:21 +0800
Subject: [PATCH 153/255] tests: adhoc register --yes gets 20 s (timed out at 5
 s on a busy CI runner)

---
 tests/adhoc.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/adhoc.test.ts b/tests/adhoc.test.ts
index 5e6d606..2337396 100644
--- a/tests/adhoc.test.ts
+++ b/tests/adhoc.test.ts
@@ -247,7 +247,7 @@ describe('apple adhoc runs (mocked App Store Connect)', () => {
     expect(out).toContain('Old pad (aaaa…aaab) not registered');
     expect(err).toBe('1 of 2 device(s) not registered');
     expect(leaks(out + err)).toEqual([]);
-  });
+  }, 20_000); // signs an ES256 token and runs two POSTs: over 5 s on a busy CI runner
 
   test('register --udid with a bad UDID fails before any call, masked', async () => {
     ascKey();

From 2ec1f0ab1380e5d157d40f884abf57b9fed23e60 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 18:17:14 +0700
Subject: [PATCH 154/255] storebound 0.8.48: version in package.json and every
 copy, CHANGELOG 0.8.48 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 1f47268..0878844 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.47",
+      "version": "0.8.48",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 6b75797..7fe1a01 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 5e92768..6cbea1a 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ac914f7..80f2267 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.48 · 2026-10-24
+
 - Desktop tray: the right-click menu is drawn by the app (the design system's menu look) instead of the OS menu. Each submenu opens as its own small panel; the pin button, Ctrl+click or a middle click keeps a panel open (pinned): it can be dragged, steps aside so it never covers another pinned panel, and comes back after a restart. Values (the apps and their store state, mute) update in place after every store read without closing anything. The native menu stays as a fallback (and on Linux), built from the same menu tree. The left-click tray card is unchanged.
 - Desktop right-click menus in the window work the same way: a menu's pin button keeps it open as a floating panel, a submenu can be torn off (its pin button, Ctrl+click or a middle click), pinned panels survive the next menu, can be dragged, and update in place when the data behind them changes ("Gone" when the thing they were for left the screen).
 - `shots.feature.rotate` (degrees) is honoured by the Play feature graphic like a scene frame's `rotate`: added to the template tilt and the phone is re-fitted (`-90` stands a landscape game frame upright); with `shots.layout: "bleed"` the frame image is turned and still covers the canvas.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 48b121c..f05a79c 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 0bf2c5c..15deadb 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.47"
+version = "0.8.48"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index f200fc4..9a6707f 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.47"
+version = "0.8.48"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index b95e93c..a3a7baf 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 16d0c93..762fc7c 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index c9c6de6..b544124 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.47",
+  "version": "0.8.48",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From ed8d138a8e0bb229940b1e7c39a96cf615ac7d42 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:46:57 +0800
Subject: [PATCH 155/255] play: a new language is created with everything Play
 needs to commit it (icon, feature graphic, phone and tablet screenshots);
 play images creates a missing listing

---
 CHANGELOG.md                   |  2 ++
 cli/play/images.ts             | 55 ++++++++++++++++++++--------
 cli/play/listing.ts            | 40 +++++++++++++++++----
 skills/store-pitfalls/SKILL.md | 22 +++++++-----
 tests/helpers/fake-stores.ts   | 13 +++++++
 tests/idempotency.test.ts      | 66 ++++++++++++++++++++++++++++++++++
 tests/play-post-reads.test.ts  |  6 ++--
 7 files changed, 172 insertions(+), 32 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 80f2267..d11434f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `play listing` for a language Play does not have yet uploads, in the same edit as the text, everything Play requires to commit it: icon, feature graphic, 2+ phone screenshots from `store/renders/<lang>/` and the tablet sets when the other languages have them (a set the folder lacks falls back to the default language's). The dry run lists the uploads or refuses with the missing file, instead of a 403 "too few screenshots" at commit. `play images` creates a Play listing that does not exist yet (text from the listing file) together with its images instead of skipping the language (pitfall 102).
+
 ## 0.8.48 · 2026-10-24
 
 - Desktop tray: the right-click menu is drawn by the app (the design system's menu look) instead of the OS menu. Each submenu opens as its own small panel; the pin button, Ctrl+click or a middle click keeps a panel open (pinned): it can be dragged, steps aside so it never covers another pinned panel, and comes back after a restart. Values (the apps and their store state, mute) update in place after every store read without closing anything. The native menu stays as a fallback (and on Linux), built from the same menu tree. The left-click tray card is unchanged.
diff --git a/cli/play/images.ts b/cli/play/images.ts
index de181b2..76ed75c 100644
--- a/cli/play/images.ts
+++ b/cli/play/images.ts
@@ -2,8 +2,9 @@
 // language, not of the whole upload).
 //   storebound play images [--dry] [--only en-US,de-DE] [--src store/renders] [--variant b] [--prune] [--include-drafts] [--not-sent-for-review]
 // Languages: the ones `play listing` pushes (a status=draft or status=translate section is skipped unless
-// --include-drafts) and that have a listing on Play. A language Play has no listing for yet (404 "Listing for language
-// ... not found") is skipped with an info line, never an error: run `play listing` first.
+// --include-drafts). A language Play has no listing for yet (404 "Listing for language ... not found") is created by
+// this run from its text in the listing file, in the same edit as all its images (Play commits a new language only with
+// icon, feature graphic and 2+ phone screenshots in it; `play listing` does the same, from either command).
 // Per Play language, from <renders>/<language id>/: icon (play.icon, 512x512), featureGraphic (feature/1024x500.*) and
 // phoneScreenshots (play/NN.*, at least 2) are required (Play Console Help answer 9866151). Optional, uploaded only
 // when present: sevenInchScreenshots (tab7/NN.*), tenInchScreenshots (tab10/NN.*), tvScreenshots (tv/NN.*),
@@ -26,7 +27,7 @@ import { draftReason, draftSections } from '../lib/listing-plan';
 import { done, log, step } from '../lib/log';
 import { playClient } from './client';
 import { pulledChecksum } from '../lib/art-pull';
-import { readPlayCopy } from './listing';
+import { listingBody, readPlayCopy } from './listing';
 import { variantRoot } from '../shots/lib';
 import { resolvedTablets } from '../shots/report';
 import { consoleLink } from '../lib/console-links';
@@ -72,16 +73,34 @@ export function missingChange(type: string, remote: number, prune: boolean): Ima
 /** What one language uploads: the sets with files, the optional types without, and errors (missing required sets). */
 export interface LangImages { sets: [string, string[]][]; missing: string[]; errors: string[] }
 
-/** The graphics a NEW Play language needs before its edit can commit (403 "no high resolution icon set for language"):
- *  the hi-res icon and, when rendered, the feature graphic. `play listing` uploads them in the same edit as the text,
- *  so listing and images never wait for each other (pitfall 102). */
-export function firstGraphics(ctx: Ctx, code: string): [string, string][] {
+/** Everything Play wants in the same edit that creates a NEW language, or the commit is refused (403 "no high
+ *  resolution icon set for language X" / "too few screenshots for language X"): icon, feature graphic, at least 2 phone
+ *  screenshots and, when the app's other languages have them (or play.tablets is true), the two tablet sets. A set the
+ *  language's renders folder lacks falls back to the default language's (a note); what is still missing is an error
+ *  with the exact fix, raised in the dry run, never at commit time (pitfall 102). */
+export interface NewLangImages { code: string; uploads: [string, string[]][]; notes: string[]; errors: string[] }
+export function newLanguageImages(ctx: Ctx, code: string, defaultCode: string, tabletsOnPlay: boolean): NewLangImages {
   const { config, resolve } = ctx.loaded;
   const icon = resolve(config.play?.icon ?? join(config.icons?.out ?? 'store/icons', 'play-512.png'));
-  const l = byPlayCode(config.languages).get(code);
-  const src = resolve(config.renders ?? config.shots?.out ?? 'store/renders');
-  const li = langImages(code, l ? join(src, l.id) : join(src, '__none__'), icon, false);
-  return li.sets.filter(([t]) => t === 'icon' || t === 'featureGraphic').map(([t, files]) => [t, files[0]!] as [string, string]);
+  const langOf = byPlayCode(config.languages);
+  const src = variantRoot(resolve(ctx.args.get('src') ?? config.renders ?? config.shots?.out ?? 'store/renders'), ctx.args.get('variant'), config.shots?.variants);
+  const tablets = config.play?.tablets === undefined ? resolvedTablets(config, src) || tabletsOnPlay : config.play.tablets;
+  const dirOf = (c: string) => join(src, langOf.get(c)?.id ?? '__none__');
+  const own = langImages(code, dirOf(code), icon, tablets);
+  const def = code === defaultCode ? null : langImages(defaultCode, dirOf(defaultCode), icon, tablets);
+  const required = ['icon', 'featureGraphic', 'phoneScreenshots', ...(tablets ? PLAY_TABLET_TYPES : [])];
+  const sets = new Map(own.sets);
+  const notes: string[] = [], errors: string[] = [];
+  for (const type of required) {
+    const mine = sets.get(type), fb = def?.sets.find(([t]) => t === type)?.[1];
+    const short = type === 'phoneScreenshots' || PLAY_TABLET_TYPES.includes(type);
+    if (mine && (!short || mine.length >= 2)) continue;
+    if (fb && (!short || fb.length >= 2)) { sets.set(type, fb); notes.push(`${code}: no ${type} of its own, using ${defaultCode}'s (${fb.length}); render ${code}'s with storebound shots render`); continue; }
+    const why = own.errors.find(e => e.includes(type === 'icon' ? 'no icon' : type)) ?? `${code}: ${type} missing`;
+    errors.push(`${why}. Play refuses to commit a new language without it (403 too few screenshots / no high resolution icon)`);
+  }
+  const uploads = [...sets].filter(([t, f]) => f.length && (tablets || !PLAY_TABLET_TYPES.includes(t)));
+  return { code, uploads, notes, errors };
 }
 
 /** The image sets of one language folder (`tablets` = resolved play.tablets). Reads the folder only. */
@@ -180,7 +199,7 @@ export async function run(ctx: Ctx): Promise<void> {
     (await play.call<{ images?: { sha256?: string }[] }>('GET', `${play.API}/edits/${id}/listings/${code}/${type}`)).images ?? [];
   // one read-only edit: what Play has now (sha256 per image, in order) against the local files, per language and type;
   // for an optional type with no local files only how many Play has (kept, or deleted with --prune)
-  // a language with no listing on Play yet answers 404: skipped (play listing creates it), never fatal
+  // a language with no listing on Play yet answers 404: created in its edit (below), never fatal
   const plan = new Map<string, ImageChange[]>();
   const unlisted: string[] = [];
   await play.read(async id => {
@@ -197,14 +216,21 @@ export async function run(ctx: Ctx): Promise<void> {
       plan.set(code, out);
     }
   });
-  for (const code of unlisted) log('play', `skipped ${code}: no Play listing yet (run storebound play listing first; a draft section needs review or --include-drafts)`);
+  // a language with text in the listing file but no Play listing yet: this run creates it (the default text of the file)
+  // together with all its images in one edit, which Play only commits as a whole (pitfall 102)
+  const copyOf = new Map(readPlayCopy(ctx).map(c => [c.lang, c]));
+  for (const code of unlisted) {
+    const li = sets.get(code)!;
+    plan.set(code, [...li.sets.map(([type, files]) => imageChange(type, [], files.map(storeSha))), ...li.missing.map(t => missingChange(t, 0, prune))]);
+    log('play', `${code}: no Play listing yet, this run creates it from the listing file with its images`);
+  }
   codes = codes.filter(c => plan.has(c));
   const writes = (code: string) => plan.get(code)!.filter(c => c.change === 'replace' || c.change === 'delete');
   if (ctx.args.has('dry')) {
     let changed = 0;
     for (const [i, code] of codes.entries()) {
       changed += writes(code).length;
-      log('play', `${step(i + 1, codes.length, code)}: ${describePlan(plan.get(code)!)}`);
+      log('play', `${step(i + 1, codes.length, code)}: ${describePlan(plan.get(code)!)}${unlisted.includes(code) ? ' (and creates the listing)' : ''}`);
     }
     done('play', `dry run: ${changed ? changed + ' image set(s) would change' : 'every image set is already on Play'}; read-only, nothing uploaded`);
     return;
@@ -221,6 +247,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const li = sets.get(code)!;
     await play.edit(async (id, ctl) => {
       let n = 0, types = 0, deleted = 0;
+      if (unlisted.includes(code)) await play.call('PUT', `${play.API}/edits/${id}/listings/${code}`, listingBody(copyOf.get(code)!, config.play?.video));
       await Promise.all([
         ...li.sets.map(async ([type, files]) => {
           const remote = await remoteOf(id, code, type);
diff --git a/cli/play/listing.ts b/cli/play/listing.ts
index f0dce56..698a1f1 100644
--- a/cli/play/listing.ts
+++ b/cli/play/listing.ts
@@ -20,7 +20,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, step, warn } from '../lib/log';
 import { playClient } from './client';
-import { firstGraphics } from './images';
+import { newLanguageImages, type NewLangImages } from './images';
 import { stdinIsTTY } from '../lib/tty';
 
 /** Play release notes that name iOS, iPhone, App Store, ... are refused before any edit, dry runs included (pitfall 77). */
@@ -140,12 +140,40 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!a.has('json')) log('play', `${copy.length} listings: ${copy.map(c => c.lang).join(', ')}${config.play?.video ? ` · promo video ${config.play.video}` : ''}`);
   const play = await playClient(root, pkg);
   const bodies = copy.map(c => listingBody(c, config.play?.video));
+  // A language Play does not have yet only commits with its icon, feature graphic, 2+ phone screenshots (and the
+  // tablet sets when the other languages have them) in the same edit: planned here so the dry run refuses early.
+  const fresh = new Map<string, NewLangImages>();
+  const planFresh = async (id: string, now: PlayListing[]) => {
+    const missing = bodies.filter(b => !now.some(n => n.language === b.language)).map(b => b.language!);
+    if (!missing.length) return;
+    const ref = now.find(n => n.language === details.defaultLanguage) ?? now[0];
+    let tabletsOnPlay = false;
+    if (ref) for (const t of ['sevenInchScreenshots', 'tenInchScreenshots']) {
+      try { tabletsOnPlay ||= !!((await play.call<{ images?: unknown[] }>('GET', `${play.API}/edits/${id}/listings/${ref.language}/${t}`)).images?.length); } catch { /* no tablet set */ }
+    }
+    for (const code of missing) {
+      const f = newLanguageImages(ctx, code, details.defaultLanguage, tabletsOnPlay);
+      // the very first listing of an app: Play checks the images at release, not at this commit, so only a warning
+      if (!now.length && f.errors.length) { f.notes.push(...f.errors.map(e => `warning: ${e}`)); f.errors = []; }
+      fresh.set(code, f);
+    }
+  };
   const p = await play.read(async id => {
     const cur = await play.call<Record<string, string>>('GET', `${play.API}/edits/${id}/details`);
     const now = (await play.call<{ listings?: PlayListing[] }>('GET', `${play.API}/edits/${id}/listings`)).listings ?? [];
+    await planFresh(id, now);
     return playPlan(cur, details, now, bodies, { skipped, notes, only: a.has('only') });
   });
+  for (const f of fresh.values()) {
+    p.notes.push(...f.notes);
+    if (!f.errors.length) p.notes.push(`${f.code} is new on Play: uploads ${f.uploads.map(([t, fl]) => `${t} (${fl.length})`).join(', ')} in the same edit`);
+  }
   const dry = a.has('dry');
+  const refuse = [...fresh.values()].flatMap(f => f.errors);
+  if (refuse.length) {
+    if (a.has('json')) printJson({ dry, ...p, errors: refuse }); else for (const line of playPlanLines(p)) console.log(line);
+    throw new Error(['a new Play language needs its images in the same edit:', ...refuse].join('\n'));
+  }
   if (a.has('json')) printJson({ dry, ...p });
   else for (const line of playPlanLines(p)) console.log(line);
   if (dry) { done('play', `dry run: ${p.changes ? `${p.changes} change(s)` : 'nothing to change'}; read-only, nothing written`); return; }
@@ -168,13 +196,11 @@ export async function run(ctx: Ctx): Promise<void> {
     for (const [i, b] of todo.entries()) {
       await play.call('PUT', `${play.API}/edits/${id}/listings/${b.language}`, b);
       log('play', step(i + 1, todo.length, b.language!));
-      // a language Play does not have yet: its edit only commits with a hi-res icon (pitfall 102)
+      // a language Play does not have yet: its edit only commits with its images in it (pitfall 102)
       if (!now.some(n => n.language === b.language)) {
-        const graphics = firstGraphics(ctx, b.language!);
-        if (!graphics.some(([t]) => t === 'icon')) warn('play', `${b.language}: no 512x512 icon to send with this new language (play.icon or store/icons/play-512.png; storebound icons makes it): Play may refuse the commit with 403 "no high resolution icon"`);
-        for (const [type, f] of graphics) {
-          await play.call('POST', `${play.UPLOAD}/edits/${id}/listings/${b.language}/${type}?uploadType=media`, new Uint8Array(readFileSync(f)), { 'Content-Type': /\.png$/i.test(f) ? 'image/png' : 'image/jpeg' });
-          log('play', `${b.language}: ${type} uploaded with the new listing`);
+        for (const [type, files] of fresh.get(b.language!)?.uploads ?? []) {
+          for (const f of files) await play.call('POST', `${play.UPLOAD}/edits/${id}/listings/${b.language}/${type}?uploadType=media`, new Uint8Array(readFileSync(f)), { 'Content-Type': /.png$/i.test(f) ? 'image/png' : 'image/jpeg' });
+          log('play', `${b.language}: ${type} (${files.length}) uploaded with the new listing`);
         }
       }
     }
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 4d19934..95f7ac0 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1239,15 +1239,21 @@ that fails without the fix (see CONTRIBUTING.md).
   `cli/lib/credentials.ts` resolves relative credential paths from the project and `ascKeyFile` hands xcodebuild an
   absolute path (`tests/build-sign.test.ts`).
 
-## 102. A new Play language: `play listing` 403 "no high resolution icon set for language", `play images` skips it
-- **Symptom:** adding a language (tr-TR) to an existing app, `play listing --yes` failed at the edit commit with 403
-  "This app has no high resolution icon set for language tr-TR", while `play images` said "skipped tr-TR: no Play
+## 102. A new Play language: commit 403 "no high resolution icon" / "too few screenshots for language", `play images` skips it
+- **Symptom:** adding a language (tr-TR) to an existing app, `play listing --write --yes` created the listing and
+  uploaded the icon and feature graphic, then the commit failed: 403 PERMISSION_DENIED "This app has too few screenshots
+  for language tr-TR" (earlier: "no high resolution icon set"). `play images` then said "skipped tr-TR: no Play
   listing yet": each waited for the other.
-- **Cause:** Play commits a new language only when its hi-res icon is in the same edit.
-- **Do:** update storebound; `play listing` now uploads the icon (and the feature graphic when rendered) for a new
-  language in the same edit. Then run `play images` for the screenshots.
-- **Guard:** `firstGraphics` in `cli/play/images.ts`, used by `cli/play/listing.ts` for languages Play does not have yet;
-  it stops with the fix when the 512x512 icon is missing.
+- **Cause:** Play commits a new language only with its hi-res icon, feature graphic, 2+ phone screenshots (and the
+  tablet sets when the app's other languages have them) in the SAME edit.
+- **Do:** update storebound; `play listing` uploads all of these for a new language in its edit, from
+  `store/renders/<lang>/` (a set that folder lacks falls back to the default language's, with a note), and the dry run
+  lists the uploads or refuses with the exact missing file. `play images` now creates a listing Play does not have yet
+  (text from the listing file) together with its images, so either command works. Render first if it refuses:
+  `storebound shots render`.
+- **Guard:** `newLanguageImages` in `cli/play/images.ts`, planned in `cli/play/listing.ts` before any write;
+  `FakePlay.requireNewLangAssets` simulates the 403 (`tests/idempotency.test.ts`). The first listing of an app with no
+  listing at all only warns.
 
 ## 103. "App.entitlements is not referenced by CODE_SIGN_ENTITLEMENTS" on Windows although it is
 - **Symptom:** on Windows, `apple status` / `apple signing` warned that `ios\App\App\App.entitlements` is not
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index bf5c880..d89233f 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -421,6 +421,10 @@ export class FakePlay {
   priceLimits: Record<string, { min: number; max: number; symbol: string }> = {};
   /** product id -> 400 message for its PATCH */
   rejectProducts: Record<string, string> = {};
+  /** live Play: committing a language that is new in the edit needs its hi-res icon, feature graphic and 2+ phone screenshots
+   *  in the same edit (403 PERMISSION_DENIED), 2+ tablet sets too when `requireTablets` */
+  requireNewLangAssets = false;
+  requireTablets = false;
   /** validate calls that carried changesNotSentForReview (live Play answers them 400 "Unknown name") */
   validateWithNotSent = 0;
 
@@ -445,12 +449,21 @@ export class FakePlay {
         return json({ error: { code: 400, status: 'INVALID_ARGUMENT', message: 'Changes cannot be sent for review automatically. Please set the query parameter changesNotSentForReview to true. Once committed, the changes in this edit can be sent for review from the Google Play Console UI.', errors: [{ message: 'Changes cannot be sent for review automatically. Please set the query parameter changesNotSentForReview to true.', domain: 'global', reason: 'badRequest' }] } }, 400);
       }
       if (method === 'POST' && rest === ':validate') return json({ id });
+      if (method === 'POST' && rest === ':commit' && this.requireNewLangAssets) {
+        for (const lang of Object.keys(e.listings).filter(l => !this.live.listings[l])) {
+          const n = (t: string) => (e.images[`${lang}/${t}`] ?? []).length;
+          const miss = n('icon') < 1 ? `This app has no high resolution icon set for language ${lang}` : n('featureGraphic') < 1 ? `This app has no feature graphic set for language ${lang}`
+            : n('phoneScreenshots') < 2 || (this.requireTablets && (n('sevenInchScreenshots') < 2 || n('tenInchScreenshots') < 2)) ? `This app has too few screenshots for language ${lang}` : '';
+          if (miss) return err(403, 'PERMISSION_DENIED', miss);
+        }
+      }
       if (method === 'POST' && rest === ':commit') { this.live = e; this.edits.delete(id!); this.committed.push(id!); return json({ id }); }
       if (rest === '/details') { if (method === 'PUT') e.details = body as Record<string, unknown>; return json(e.details); }
       if (rest === '/listings') return json({ listings: Object.values(e.listings) });
       if ((m = /^\/listings\/([^/]+)$/.exec(rest!))) { if (method === 'PUT') e.listings[m[1]!] = body as Record<string, unknown>; return json(e.listings[m[1]!] ?? {}); }
       if ((m = /^\/listings\/([^/]+)\/(\w+)$/.exec(rest!))) {
         const k = `${m[1]}/${m[2]}`;
+        if (this.requireNewLangAssets && method === 'GET' && !e.listings[m[1]!]) return err(404, 'NOT_FOUND', `Listing for language '${m[1]}' not found.`);
         if (method === 'DELETE') { e.images[k] = []; return json({ deleted: [] }); }
         if (method === 'POST') { const h = new Bun.CryptoHasher('sha256').update(body as Uint8Array).digest('hex'); (e.images[k] ??= []).push(h); return json({ image: { sha256: h } }); }
         return json({ images: (e.images[k] ?? []).map(sha256 => ({ sha256 })) });
diff --git a/tests/idempotency.test.ts b/tests/idempotency.test.ts
index bef1580..39d22af 100644
--- a/tests/idempotency.test.ts
+++ b/tests/idempotency.test.ts
@@ -370,6 +370,7 @@ describe('listing, appinfo, data safety and the owner commands: a second run wri
 
   test('play listing: one committed edit with only what differs; the second run opens no write edit and commits nothing', async () => {
     s.play.live.listings['de-DE'] = { language: 'de-DE', title: 'Notizen' };
+    s.play.live.listings['en-US'] = { language: 'en-US', title: 'Old' };
     const p = project(CONFIG, { 'store/listing.md': LISTING });
     const r = await twice(() => playListing(p.ctx([])));
     expect(r.first).toEqual(['PUT /androidpublisher/v3/applications/com.example.notes/edits/edit-2/details', 'PUT /androidpublisher/v3/applications/com.example.notes/edits/edit-2/listings/en-US',
@@ -380,6 +381,71 @@ describe('listing, appinfo, data safety and the owner commands: a second run wri
     expect(s.play.live.listings['de-DE']).toEqual({ language: 'de-DE', title: 'Notizen' }); // a language not in the file is left alone
   });
 
+  // A new Play language (tr-TR next to a live en-US): the commit is refused 403 "too few screenshots" unless the
+  // screenshots, icon and feature graphic travel in the same edit (pitfall 102)
+  const trConfig = (): ShipConfig => ({ ...CONFIG, languages: [{ id: 'en', play: 'en-US' }, { id: 'tr', play: 'tr-TR' }] as never });
+  const trListing = LISTING + ['', '## Turkish', '<!-- play: tr-TR -->', '', '### Play short description', '```', 'Notlar.', '```', '', '### Play full description', '```', 'Herkes icin notlar.', '```', ''].join('\n');
+  const renders = (lang: string, base: number, tablets = false): Record<string, Uint8Array> => {
+    const f: Record<string, Uint8Array> = { [`store/renders/${lang}/feature/1024x500.png`]: png(base) };
+    for (const n of [1, 2]) { f[`store/renders/${lang}/play/0${n}.png`] = png(base + n); if (tablets) for (const t of ['tab7', 'tab10']) f[`store/renders/${lang}/${t}/0${n}.png`] = png(base + n + 5); }
+    return f;
+  };
+  const liveEn = () => {
+    s.play.live.listings['en-US'] = { language: 'en-US', title: 'Example Notes', shortDescription: 'Notes.', fullDescription: 'Notes for everyone.' };
+    s.play.live.details = { defaultLanguage: 'en-US', contactEmail: 'support@example.com', contactWebsite: 'https://example.com' };
+    s.play.requireNewLangAssets = true;
+  };
+
+  test('play listing: a new language uploads icon, feature graphic and phone screenshots in the same edit, so the commit passes', async () => {
+    liveEn();
+    const p = project(trConfig(), { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1), ...renders('tr', 40) });
+    const r = await capture(() => playListing(p.ctx([])));
+    expect(r.exit).toBe(null);
+    expect(s.play.committed).toHaveLength(1);
+    expect(s.play.live.images['tr-TR/phoneScreenshots']).toHaveLength(2);
+    expect(s.play.live.images['tr-TR/icon']).toHaveLength(1);
+    expect(s.play.live.images['tr-TR/featureGraphic']).toHaveLength(1);
+  });
+
+  test('play listing: a new language without its own screenshots uses the default language images; none anywhere is refused in the dry run, nothing written', async () => {
+    liveEn();
+    const base = { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1) };
+    const ok = project(trConfig(), { ...base, ...renders('en', 10) });
+    const r1 = await capture(() => playListing(ok.ctx([])));
+    expect(r1.exit).toBe(null);
+    expect(r1.out).toContain("no phoneScreenshots of its own, using en-US's");
+    expect(s.play.live.images['tr-TR/phoneScreenshots']).toHaveLength(2);
+    s.play.live.listings = { 'en-US': s.play.live.listings['en-US']! };
+    s.play.live.images = {};
+    const bad = project(trConfig(), base);
+    const before = s.play.committed.length;
+    const mark = s.calls.length;
+    await expect(playListing(bad.ctx(['--dry']))).rejects.toThrow('tr-TR: no phoneScreenshots');
+    expect(s.play.committed).toHaveLength(before);
+    expect(writes(s.calls.slice(mark))).toEqual([]);
+  });
+
+  test('play listing: the dry run names the uploads of a new language; tablet sets are required when the default language has them on Play', async () => {
+    liveEn();
+    s.play.requireTablets = true;
+    s.play.live.images['en-US/sevenInchScreenshots'] = ['x', 'y'];
+    const p = project(trConfig(), { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1), ...renders('tr', 40), ...renders('en', 10, true) });
+    const r = await capture(() => playListing(p.ctx(['--dry'])));
+    expect(r.out).toContain('tr-TR is new on Play: uploads');
+    expect(r.out).toContain('sevenInchScreenshots (2)');
+    expect(s.play.committed).toEqual([]);
+  });
+
+  test('play images: a language with text in the listing file but no Play listing yet is created with its images, commit passes', async () => {
+    liveEn();
+    const p = project(trConfig(), { 'store/listing.md': trListing, 'store/icons/play-512.png': png(1), ...renders('en', 10), ...renders('tr', 40) });
+    const r = await capture(() => playImages(p.ctx([])));
+    expect(r.exit).toBe(null);
+    expect(r.out).toContain('tr-TR: no Play listing yet, this run creates it');
+    expect(s.play.live.listings['tr-TR']!.title).toBeDefined();
+    expect(s.play.live.images['tr-TR/phoneScreenshots']).toHaveLength(2);
+  });
+
   test('play listing: the store reached the wanted state between plan and edit: the edit is deleted, not committed', async () => {
     const p = project(CONFIG, { 'store/listing.md': LISTING });
     // the plan sees an empty listing; right after it (before the write edit opens) another run makes it current
diff --git a/tests/play-post-reads.test.ts b/tests/play-post-reads.test.ts
index 6322b37..5572ae1 100644
--- a/tests/play-post-reads.test.ts
+++ b/tests/play-post-reads.test.ts
@@ -287,7 +287,7 @@ describe('play images: tablet, TV and Wear sets are optional (play.tablets)', ()
     expect(resolvedTablets({ play: {} }, join(phoneOnly().root, 'store/renders'))).toBe(false);
   });
 
-  test('languages without a Play listing are skipped: a draft section before any call, a 404 listing as info; exit 0', async () => {
+  test('a draft section is skipped before any call, a language with a 404 listing is created by the run (dry: named); exit 0', async () => {
     playKey();
     const root = mkdtempSync(join(tmpdir(), 'sb-langs-'));
     const sec = (name: string, code: string, marker = '') => `## ${name}\n<!-- play: ${code} -->\n${marker}\n### Play short description\n\`\`\`\nShort.\n\`\`\`\n\n### Play full description\n\`\`\`\nFull.\n\`\`\`\n\n`;
@@ -309,9 +309,9 @@ describe('play images: tablet, TV and Wear sets are optional (play.tablets)', ()
     const out = await capture(() => imagesRun({ loaded, args: parseArgs(['--dry']) }));
     expect(process.exitCode).toBe(before);
     expect(out).toContain('skipped fr-FR: no Play listing yet (machine-translated draft, not reviewed');
-    expect(out).toContain('skipped de-DE: no Play listing yet (run storebound play listing first');
+    expect(out).toContain('de-DE: no Play listing yet, this run creates it from the listing file with its images');
+    expect(out).toContain('de-DE: would replace icon (0 -> 1)');
     expect(out).toContain('en-US: would replace icon (0 -> 1)');
-    expect(out).not.toMatch(/de-DE: would/);
     expect(calls.some(c => c.url.includes('fr-FR'))).toBe(false);
     expect(calls.every(readOnly)).toBe(true);
     expect(noListing(new Error("GET /edits/1/listings/de-DE/icon -> 404 Listing for language 'de-DE' not found."))).toBe(true);

From 6782ac60785bcf33626c08e7f0c242ff576024c9 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:49:26 +0800
Subject: [PATCH 156/255] api tables: regenerate for the new Play listing calls

---
 cli/api/wrapped.gen.ts | 4 ++--
 docs/api-coverage.md   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 4a8fca5..20dc859 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -246,13 +246,13 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'androidpublisher.edits.details.get': 'apps onboard play/listing play/status validate',
     'androidpublisher.edits.details.update': 'play/listing',
     'androidpublisher.edits.images.deleteall': 'play/images',
-    'androidpublisher.edits.images.list': 'apps art play/images validate',
+    'androidpublisher.edits.images.list': 'apps art play/images play/listing validate',
     'androidpublisher.edits.images.upload': 'play/images play/listing',
     'androidpublisher.edits.insert': 'apps onboard play/client validate',
     'androidpublisher.edits.listings.get': 'onboard',
     'androidpublisher.edits.listings.list': 'art listing-store play/listing play/status validate',
     'androidpublisher.edits.listings.patch': 'listing-store',
-    'androidpublisher.edits.listings.update': 'listing-store play/listing',
+    'androidpublisher.edits.listings.update': 'listing-store play/images play/listing',
     'androidpublisher.edits.tracks.get': 'play/release play/rollout play/upload',
     'androidpublisher.edits.tracks.list': 'play/next-version-code play/publish-ready play/status play/upload validate',
     'androidpublisher.edits.tracks.update': 'play/release play/rollout play/upload',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 5a00c04..2e79da5 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -1592,7 +1592,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **androidpublisher.edits.images** (4) | | | | |
 | `androidpublisher.edits.images.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}/{imageId}` | owner only (typed confirm) |  |
 | `androidpublisher.edits.images.deleteall` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | owner only (typed confirm) | play/images |
-| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play/images, validate |
+| `androidpublisher.edits.images.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | read | apps, art, play/images, play/listing, validate |
 | `androidpublisher.edits.images.upload` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}/{imageType}` | write (dry by default) | play/images, play/listing |
 | **androidpublisher.edits.listings** (6) | | | | |
 | `androidpublisher.edits.listings.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | owner only (typed confirm) |  |
@@ -1600,7 +1600,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.edits.listings.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | read | onboard |
 | `androidpublisher.edits.listings.list` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings` | read | art, listing-store, play/listing, play/status, validate |
 | `androidpublisher.edits.listings.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store |
-| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play/listing |
+| `androidpublisher.edits.listings.update` | PUT | `androidpublisher/v3/applications/{packageName}/edits/{editId}/listings/{language}` | write (dry by default) | listing-store, play/images, play/listing |
 | **androidpublisher.edits.testers** (3) | | | | |
 | `androidpublisher.edits.testers.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | read |  |
 | `androidpublisher.edits.testers.patch` | PATCH | `androidpublisher/v3/applications/{packageName}/edits/{editId}/testers/{track}` | owner only (typed confirm) |  |

From da7ca48ab48f24e5f93ac2245ec4e642a4895b46 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 19:53:06 +0800
Subject: [PATCH 157/255] desktop tray: card as tall as its content, card and
 menu open from the tray icon's edge (never over the taskbar); menu permission
 files

---
 .../permissions/autogenerated/menu_close.toml | 11 +++++
 .../autogenerated/menu_close_subs.toml        | 11 +++++
 .../autogenerated/menu_dismiss.toml           | 11 +++++
 .../autogenerated/menu_open_sub.toml          | 11 +++++
 .../permissions/autogenerated/menu_pin.toml   | 11 +++++
 .../autogenerated/menu_pin_sub.toml           | 11 +++++
 .../permissions/autogenerated/menu_ready.toml | 11 +++++
 .../autogenerated/menu_select.toml            | 11 +++++
 .../permissions/autogenerated/menu_state.toml | 11 +++++
 apps/desktop/src-tauri/src/card.rs            | 47 +++++++++++++++----
 apps/desktop/src-tauri/src/commands.rs        |  4 ++
 apps/desktop/src-tauri/src/lib.rs             | 15 +++---
 apps/desktop/src-tauri/src/menu_panel.rs      | 11 +++--
 apps/desktop/src-tauri/tests/menu_panel.rs    | 11 +++++
 apps/desktop/src/card/Card.tsx                | 14 +++++-
 apps/desktop/src/card/card-api.ts             |  2 +-
 apps/desktop/src/card/card.css                |  8 ++--
 17 files changed, 185 insertions(+), 26 deletions(-)
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml
 create mode 100644 apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml

diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml
new file mode 100644
index 0000000..f113d1c
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_close.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-close"
+description = "Enables the menu_close command without any pre-configured scope."
+commands.allow = ["menu_close"]
+
+[[permission]]
+identifier = "deny-menu-close"
+description = "Denies the menu_close command without any pre-configured scope."
+commands.deny = ["menu_close"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml
new file mode 100644
index 0000000..dab5968
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_close_subs.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-close-subs"
+description = "Enables the menu_close_subs command without any pre-configured scope."
+commands.allow = ["menu_close_subs"]
+
+[[permission]]
+identifier = "deny-menu-close-subs"
+description = "Denies the menu_close_subs command without any pre-configured scope."
+commands.deny = ["menu_close_subs"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml
new file mode 100644
index 0000000..5c7a0ef
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_dismiss.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-dismiss"
+description = "Enables the menu_dismiss command without any pre-configured scope."
+commands.allow = ["menu_dismiss"]
+
+[[permission]]
+identifier = "deny-menu-dismiss"
+description = "Denies the menu_dismiss command without any pre-configured scope."
+commands.deny = ["menu_dismiss"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml
new file mode 100644
index 0000000..ee4175b
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_open_sub.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-open-sub"
+description = "Enables the menu_open_sub command without any pre-configured scope."
+commands.allow = ["menu_open_sub"]
+
+[[permission]]
+identifier = "deny-menu-open-sub"
+description = "Denies the menu_open_sub command without any pre-configured scope."
+commands.deny = ["menu_open_sub"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml
new file mode 100644
index 0000000..6e1dabc
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-pin"
+description = "Enables the menu_pin command without any pre-configured scope."
+commands.allow = ["menu_pin"]
+
+[[permission]]
+identifier = "deny-menu-pin"
+description = "Denies the menu_pin command without any pre-configured scope."
+commands.deny = ["menu_pin"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml
new file mode 100644
index 0000000..b339f12
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_pin_sub.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-pin-sub"
+description = "Enables the menu_pin_sub command without any pre-configured scope."
+commands.allow = ["menu_pin_sub"]
+
+[[permission]]
+identifier = "deny-menu-pin-sub"
+description = "Denies the menu_pin_sub command without any pre-configured scope."
+commands.deny = ["menu_pin_sub"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml
new file mode 100644
index 0000000..c839ac0
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_ready.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-ready"
+description = "Enables the menu_ready command without any pre-configured scope."
+commands.allow = ["menu_ready"]
+
+[[permission]]
+identifier = "deny-menu-ready"
+description = "Denies the menu_ready command without any pre-configured scope."
+commands.deny = ["menu_ready"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml
new file mode 100644
index 0000000..e546f01
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_select.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-select"
+description = "Enables the menu_select command without any pre-configured scope."
+commands.allow = ["menu_select"]
+
+[[permission]]
+identifier = "deny-menu-select"
+description = "Denies the menu_select command without any pre-configured scope."
+commands.deny = ["menu_select"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml b/apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml
new file mode 100644
index 0000000..b4844a3
--- /dev/null
+++ b/apps/desktop/src-tauri/permissions/autogenerated/menu_state.toml
@@ -0,0 +1,11 @@
+# Automatically generated - DO NOT EDIT!
+
+[[permission]]
+identifier = "allow-menu-state"
+description = "Enables the menu_state command without any pre-configured scope."
+commands.allow = ["menu_state"]
+
+[[permission]]
+identifier = "deny-menu-state"
+description = "Denies the menu_state command without any pre-configured scope."
+commands.deny = ["menu_state"]
diff --git a/apps/desktop/src-tauri/src/card.rs b/apps/desktop/src-tauri/src/card.rs
index 0e60f4c..e7c85ff 100644
--- a/apps/desktop/src-tauri/src/card.rs
+++ b/apps/desktop/src-tauri/src/card.rs
@@ -62,7 +62,7 @@ pub fn place(tray: Rect, work: Rect, card_w: f64, card_h: f64, gap: f64) -> (f64
 
 /// Whether a card action word is one the card may send.
 pub fn valid_action(a: &str) -> bool {
-    matches!(a, "hide" | "open" | "route" | "refresh" | "mute" | "quit" | "external" | "ready")
+    matches!(a, "hide" | "open" | "route" | "refresh" | "mute" | "quit" | "external" | "ready" | "size")
 }
 
 // ---- the last snapshot ----
@@ -123,6 +123,38 @@ mod window {
         Ok(())
     }
 
+    /// The icon rectangle of the last show, so a size change keeps the card anchored to the icon.
+    static LAST_ICON: Mutex<Option<Rect>> = Mutex::new(None);
+
+    /// Card height in CSS px (what the page measured), clamped; the window keeps WIDTH.
+    fn height_px(h: f64) -> f64 { h.clamp(120.0, HEIGHT) }
+
+    /// Puts the card next to `tray` at its current height: its edge GAP from the icon, inside the work area.
+    fn anchor<R: Runtime>(app: &AppHandle<R>, w: &tauri::WebviewWindow<R>, tray: Rect, css_h: f64) {
+        let monitor = app.monitor_from_point(tray.x + tray.w / 2.0, tray.y + tray.h / 2.0).ok().flatten().or_else(|| w.primary_monitor().ok().flatten());
+        if let Some(m) = monitor {
+            let s = m.scale_factor();
+            let wa = m.work_area();
+            let work = Rect { x: wa.position.x as f64, y: wa.position.y as f64, w: wa.size.width as f64, h: wa.size.height as f64 };
+            let _ = w.set_size(tauri::PhysicalSize::new((WIDTH * s).round() as u32, (css_h * s).round() as u32));
+            let (x, y) = place(tray, work, WIDTH * s, css_h * s, GAP * s);
+            let _ = w.set_position(PhysicalPosition::new(x as i32, y as i32));
+        }
+    }
+
+    /// The page measured its height: resize the window to it and keep it anchored (the bottom edge stays above a bottom
+    /// taskbar, no empty band under the content).
+    pub fn resize<R: Runtime>(app: &AppHandle<R>, css_h: f64) {
+        let Some(w) = app.get_webview_window(LABEL) else { return };
+        let h = height_px(css_h);
+        if let Ok(mut c) = CURRENT_H.lock() { *c = h; }
+        if let Some(tray) = LAST_ICON.lock().ok().and_then(|t| *t) {
+            anchor(app, &w, tray, h);
+        }
+    }
+
+    static CURRENT_H: Mutex<f64> = Mutex::new(HEIGHT);
+
     /// A left click on the tray icon: shows the card next to the icon, or hides it when it is open.
     pub fn toggle<R: Runtime>(app: &AppHandle<R>, tray: Rect) {
         let Some(w) = app.get_webview_window(LABEL) else { return };
@@ -134,14 +166,9 @@ mod window {
         if just_hidden() {
             return;
         }
-        let monitor = app.monitor_from_point(tray.x + tray.w / 2.0, tray.y + tray.h / 2.0).ok().flatten().or_else(|| w.primary_monitor().ok().flatten());
-        if let Some(m) = monitor {
-            let s = m.scale_factor();
-            let wa = m.work_area();
-            let work = Rect { x: wa.position.x as f64, y: wa.position.y as f64, w: wa.size.width as f64, h: wa.size.height as f64 };
-            let (x, y) = place(tray, work, WIDTH * s, HEIGHT * s, GAP * s);
-            let _ = w.set_position(PhysicalPosition::new(x as i32, y as i32));
-        }
+        if let Ok(mut t) = LAST_ICON.lock() { *t = Some(tray); }
+        let h = CURRENT_H.lock().map(|c| *c).unwrap_or(HEIGHT);
+        anchor(app, &w, tray, h);
         let _ = w.show();
         let _ = w.set_focus();
         let _ = app.emit_to(LABEL, "card-shown", ());
@@ -158,4 +185,4 @@ mod window {
 }
 
 #[cfg(desktop)]
-pub use window::{create, hide, toggle};
+pub use window::{create, hide, resize, toggle};
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
index 9739e6a..5bfa27e 100644
--- a/apps/desktop/src-tauri/src/commands.rs
+++ b/apps/desktop/src-tauri/src/commands.rs
@@ -1355,6 +1355,10 @@ pub fn card_action(window: WebviewWindow, app: AppHandle, action: String, arg: O
     match action.as_str() {
         "hide" => crate::card::hide(&app),
         "ready" => { let _ = app.emit_to(policy::MAIN, "card-request", ()); }
+        "size" => {
+            let h: f64 = arg.as_deref().unwrap_or_default().parse().map_err(|_| Fail::host("bad size"))?;
+            crate::card::resize(&app, h);
+        }
         "open" => { crate::card::hide(&app); main(); }
         "refresh" => { let _ = app.emit_to(policy::MAIN, "tray-action", "read"); }
         "mute" => { let _ = app.emit_to(policy::MAIN, "tray-action", "mute-toggle"); }
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index e616bdd..f45f3bc 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -67,19 +67,20 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
         .on_tray_icon_event(|t, e| {
             let TrayIconEvent::Click { button, button_state: MouseButtonState::Up, rect, position, .. } = e else { return };
             let app = t.app_handle();
+            // both open from the icon's rectangle (not the click point): their edge sits next to the icon, above a
+            // bottom taskbar, so nothing starts inside the taskbar
+            let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
+            let p = rect.position.to_physical::<f64>(scale);
+            let s = rect.size.to_physical::<f64>(scale);
+            let icon = if s.width > 0.0 && s.height > 0.0 { card::Rect { x: p.x, y: p.y, w: s.width, h: s.height } } else { card::Rect { x: position.x, y: position.y, w: 1.0, h: 1.0 } };
             match button {
-                // right click: the menu panels at the click point
-                MouseButton::Right => menu_panel::open_root(app, position.x, position.y),
-                // left click: the tray card next to the icon
+                MouseButton::Right => menu_panel::open_root(app, menu_panel::Anchor::Tray { x: icon.x, y: icon.y, w: icon.w, h: icon.h }),
                 MouseButton::Left => {
                     if app.get_webview_window(card::LABEL).is_none() {
                         show_main(app);
                         return;
                     }
-                    let scale = app.get_webview_window(policy::MAIN).and_then(|w| w.scale_factor().ok()).unwrap_or(1.0);
-                    let p = rect.position.to_physical::<f64>(scale);
-                    let s = rect.size.to_physical::<f64>(scale);
-                    card::toggle(app, card::Rect { x: p.x, y: p.y, w: s.width, h: s.height });
+                    card::toggle(app, icon);
                 }
                 _ => {}
             }
diff --git a/apps/desktop/src-tauri/src/menu_panel.rs b/apps/desktop/src-tauri/src/menu_panel.rs
index 3809791..935ac09 100644
--- a/apps/desktop/src-tauri/src/menu_panel.rs
+++ b/apps/desktop/src-tauri/src/menu_panel.rs
@@ -107,6 +107,8 @@ pub fn find<'a>(nodes: &'a [Node], path: &[String]) -> Option<(&'a [Node], Optio
 pub enum Anchor {
     /// The tray click point (physical).
     Point { x: f64, y: f64 },
+    /// The tray icon's rectangle (physical): the root opens from the icon's edge that faces the screen, like the card.
+    Tray { x: f64, y: f64, w: f64, h: f64 },
     /// Beside a parent panel: its left and right edge and the row's top (physical).
     Beside { left: f64, right: f64, top: f64 },
     /// A remembered top-left (pinned panels).
@@ -129,6 +131,8 @@ pub fn place_menu(anchor: Anchor, size: (f64, f64), work: Rect) -> (f64, f64) {
     let (wx, wy, ww, wh) = work;
     let (x, y) = match anchor {
         Anchor::Point { x, y } => (if x + w > wx + ww { x - w } else { x }, if y + h > wy + wh { y - h } else { y }),
+        // same rule as the card: the panel's edge sits GAP from the icon, never over the taskbar
+        Anchor::Tray { x, y, w: iw, h: ih } => return crate::card::place(crate::card::Rect { x, y, w: iw, h: ih }, crate::card::Rect { x: wx, y: wy, w: ww, h: wh }, w, h, GAP),
         Anchor::Beside { left, right, top } => (if right + w <= wx + ww - GAP { right - 2.0 } else { left - w + 2.0 }, top - 5.0),
         Anchor::At { x, y } => (x, y),
     };
@@ -520,12 +524,12 @@ mod runtime {
         });
     }
 
-    /// A right click on the tray icon: a fresh root menu at the click point (physical px).
-    pub fn open_root(app: &AppHandle, x: f64, y: f64) {
+    /// A right click on the tray icon: a fresh root menu next to the icon (`anchor`: Anchor::Tray, physical px).
+    pub fn open_root(app: &AppHandle, anchor: Anchor) {
         if native_fallback(app) {
             return; // the native menu is on the tray and opens by itself
         }
-        let (label, closes) = book(app, |b| b.open_root(Anchor::Point { x, y }));
+        let (label, closes) = book(app, |b| b.open_root(anchor));
         destroy(app, &closes);
         let handle = app.clone();
         std::thread::spawn(move || {
@@ -571,6 +575,7 @@ mod runtime {
     fn anchor_point(a: Anchor) -> (f64, f64) {
         match a {
             Anchor::Point { x, y } | Anchor::At { x, y } => (x, y),
+            Anchor::Tray { x, y, w, h } => (x + w / 2.0, y + h / 2.0),
             Anchor::Beside { right, top, .. } => (right, top),
         }
     }
diff --git a/apps/desktop/src-tauri/tests/menu_panel.rs b/apps/desktop/src-tauri/tests/menu_panel.rs
index 0f89878..d46cd18 100644
--- a/apps/desktop/src-tauri/tests/menu_panel.rs
+++ b/apps/desktop/src-tauri/tests/menu_panel.rs
@@ -83,6 +83,17 @@ fn root_opens_away_from_the_taskbar_and_stays_inside() {
     assert_eq!(y, GAP);
 }
 
+#[test]
+fn tray_root_sits_just_above_the_icon_never_over_the_taskbar() {
+    // icon in a bottom taskbar (the icon is below the work area): bottom edge exactly GAP above the icon's top
+    let icon = Anchor::Tray { x: 1800.0, y: 1044.0, w: 32.0, h: 32.0 };
+    let (_, y) = place_menu(icon, (260.0, 300.0), WORK);
+    assert_eq!(y + 300.0, 1040.0 - GAP);
+    // even when the reported work area wrongly includes the taskbar, the panel stays above the icon
+    let (_, y) = place_menu(icon, (260.0, 300.0), (0.0, 0.0, 1920.0, 1080.0));
+    assert!(y + 300.0 <= 1044.0 - GAP);
+}
+
 #[test]
 fn submenus_open_beside_and_flip_left_at_the_edge() {
     let (x, _) = place_menu(Anchor::Beside { left: 1600.0, right: 1880.0, top: 100.0 }, (280.0, 200.0), WORK);
diff --git a/apps/desktop/src/card/Card.tsx b/apps/desktop/src/card/Card.tsx
index 99b4101..4140e6a 100644
--- a/apps/desktop/src/card/Card.tsx
+++ b/apps/desktop/src/card/Card.tsx
@@ -18,7 +18,7 @@ export interface CardHost {
   get: () => Promise<CardSnapshot | null>;
   onSnapshot: (fn: (s: CardSnapshot) => void) => () => void;
   onShown: (fn: () => void) => () => void;
-  action: (action: 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready', arg?: string) => void;
+  action: (action: 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready' | 'size', arg?: string) => void;
 }
 
 const route = (app: string, tab: 'releases' | 'reviews' | 'health') => JSON.stringify({ screen: 'app', appId: app, tab });
@@ -39,6 +39,18 @@ export function Card({ host, lang }: { host: CardHost; lang: CardLang }) {
     const tm = setInterval(() => setNow(Date.now()), 30_000);
     return () => { a(); b(); clearInterval(tm); };
   }, [host]);
+  // the window is as tall as the card: report the height whenever it changes (the host re-anchors it above the icon)
+  useEffect(() => {
+    const el = root.current;
+    if (!el || typeof ResizeObserver === 'undefined') return;
+    let last = 0;
+    const ro = new ResizeObserver(() => {
+      const h = Math.ceil(el.getBoundingClientRect().height);
+      if (h > 0 && h !== last) { last = h; host.action('size', String(h)); }
+    });
+    ro.observe(el);
+    return () => ro.disconnect();
+  }, [host]);
   // every show: fade in, focus the first control (keyboard users start at Refresh)
   useEffect(() => { (root.current?.querySelector<HTMLElement>('button:not([disabled])') ?? root.current)?.focus(); }, [shown, !!s]);
 
diff --git a/apps/desktop/src/card/card-api.ts b/apps/desktop/src/card/card-api.ts
index 6a66afc..86b466c 100644
--- a/apps/desktop/src/card/card-api.ts
+++ b/apps/desktop/src/card/card-api.ts
@@ -4,7 +4,7 @@ import { invoke } from '@tauri-apps/api/core';
 import { listen } from '@tauri-apps/api/event';
 import type { CardSnapshot } from './model';
 
-export type CardAction = 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready';
+export type CardAction = 'hide' | 'open' | 'route' | 'refresh' | 'mute' | 'quit' | 'external' | 'ready' | 'size';
 
 export const inTauri = (): boolean => typeof window !== 'undefined' && '__TAURI_INTERNALS__' in window;
 
diff --git a/apps/desktop/src/card/card.css b/apps/desktop/src/card/card.css
index c9502c8..68ca2e6 100644
--- a/apps/desktop/src/card/card.css
+++ b/apps/desktop/src/card/card.css
@@ -1,12 +1,12 @@
-/* The tray card (card.html): v2 language at 360 x 480, rounded, its own surface; fades in over 120 ms on every show. */
+/* The tray card (card.html): v2 language, 360 wide and as tall as its content (at most 480: the body scrolls), rounded, its own surface; fades in over 120 ms on every show. */
 html:has(body.tc-page), body.tc-page { margin: 0; height: 100%; background: transparent; overflow: hidden; }
 body.tc-page { font: var(--ds-t-body)/1.4 system-ui, -apple-system, "Segoe UI", sans-serif; color: var(--ink); }
-body.tc-page #card { height: 100%; }
+body.tc-page #card { height: auto; }
 body.tc-page.tc-in .tc { animation: tc-in 120ms ease-out; }
 :root[data-motion="reduce"] body.tc-page.tc-in .tc { animation: none; }
 @keyframes tc-in { from { opacity: 0; transform: translateY(4px); } to { opacity: 1; transform: none; } }
 
-.tc { box-sizing: border-box; height: 100%; max-height: 480px; display: flex; flex-direction: column; border-radius: var(--ds-r-lg);
+.tc { box-sizing: border-box; height: auto; max-height: 480px; display: flex; flex-direction: column; border-radius: var(--ds-r-lg);
   border: 1px solid var(--ds-stroke); background: radial-gradient(120% 60% at 100% 0%, color-mix(in srgb, var(--accent-solid) 10%, transparent), transparent 60%), var(--ds-raised); overflow: hidden; outline: none; }
 .tc-head { position: relative; display: flex; align-items: center; gap: 8px; padding: 14px 12px 12px 16px; border-bottom: 1px solid var(--ds-stroke); }
 .tc-title { flex: 1; min-width: 0; display: flex; flex-direction: column; }
@@ -25,7 +25,7 @@ body.tc-page.tc-in .tc { animation: tc-in 120ms ease-out; }
 .tc-menu button:hover, .tc-menu button:focus-visible { background: var(--hover); outline: none; }
 .tc-menu hr { border: 0; border-top: 1px solid var(--ds-stroke); margin: 4px 2px; }
 
-.tc-body { flex: 1; overflow-y: auto; padding: 6px 10px 12px; scrollbar-width: thin; }
+.tc-body { flex: 1 1 auto; min-height: 0; overflow-y: auto; padding: 6px 10px 12px; scrollbar-width: thin; }
 .tc-empty { margin: 28px 16px; text-align: center; color: var(--muted); }
 .tc-sec { margin-top: 8px; }
 .tc-sec h2 { display: flex; align-items: baseline; justify-content: space-between; gap: 8px; margin: 6px 6px 4px; font-size: var(--ds-t-micro); font-weight: var(--ds-w-strong); text-transform: uppercase; letter-spacing: .07em; color: var(--muted); }

From 53845c6dd97af050d3bc80b247efca592f588431 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sat, 24 Oct 2026 21:13:10 +0800
Subject: [PATCH 158/255] desktop: autostart respects Windows Startup apps
 (turned off there stays off; the Run entry is no longer re-enabled on every
 start)

---
 apps/desktop/src-tauri/src/lib.rs  | 40 +++++++++++++++++++++++++++---
 apps/desktop/src-tauri/tests/d5.rs | 10 ++++++++
 2 files changed, 47 insertions(+), 3 deletions(-)

diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index f45f3bc..c2cd10e 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -90,6 +90,35 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
 }
 
 /// A tray menu pick (a menu panel row or the native fallback menu): tray.rs maps the id to what it does.
+/// Whether the person turned storebound off in Windows' Startup apps (Settings / Task Manager), from the `reg query`
+/// output of HKCU\...\Explorer\StartupApproved\Run /v storebound: the first byte of the REG_BINARY is even when enabled
+/// (02, 06), odd when disabled (03, 07). No entry: not turned off. Pure.
+pub fn startup_approved_off(reg_query_out: &str) -> bool {
+    reg_query_out
+        .lines()
+        .find(|l| l.contains("REG_BINARY"))
+        .and_then(|l| l.split_whitespace().last())
+        .and_then(|hex| u8::from_str_radix(hex.get(0..2)?, 16).ok())
+        .is_some_and(|b| b & 1 == 1)
+}
+
+#[cfg(windows)]
+fn startup_disabled_by_user() -> bool {
+    use std::os::windows::process::CommandExt;
+    const CREATE_NO_WINDOW: u32 = 0x0800_0000;
+    std::process::Command::new("reg")
+        .args(["query", r"HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run", "/v", "storebound"])
+        .creation_flags(CREATE_NO_WINDOW)
+        .output()
+        .map(|o| startup_approved_off(&String::from_utf8_lossy(&o.stdout)))
+        .unwrap_or(false)
+}
+
+#[cfg(not(windows))]
+fn startup_disabled_by_user() -> bool {
+    false
+}
+
 pub fn dispatch_menu<R: Runtime>(app: &AppHandle<R>, id: &str) {
     match tray::action_of(id) {
         Some(tray::Action::Open) => show_main(app),
@@ -354,9 +383,14 @@ pub fn run() {
             }
             // start at logon, in the tray: rewritten on every start (Windows: the HKCU Run entry then points at the
             // running exe, so a moved or updated install fixes itself)
-            match app.autolaunch().enable() {
-                Ok(()) => logs::host("info", "autostart at logon set (--hidden, tray)"),
-                Err(e) => logs::host("warn", &format!("autostart not set: {e}")),
+            // ...unless the person turned it off (Windows Settings > Apps > Startup / Task Manager): that choice stands
+            if startup_disabled_by_user() {
+                logs::host("info", "autostart at logon left off (turned off in Windows Startup apps)");
+            } else {
+                match app.autolaunch().enable() {
+                    Ok(()) => logs::host("info", "autostart at logon set (--hidden, tray)"),
+                    Err(e) => logs::host("warn", &format!("autostart not set: {e}")),
+                }
             }
             app.manage(state);
             app.manage(menu_panel::MenuPanels::default());
diff --git a/apps/desktop/src-tauri/tests/d5.rs b/apps/desktop/src-tauri/tests/d5.rs
index 6232f5b..6342910 100644
--- a/apps/desktop/src-tauri/tests/d5.rs
+++ b/apps/desktop/src-tauri/tests/d5.rs
@@ -142,3 +142,13 @@ fn background_updater_schedule_and_defer() {
     assert!(updates::take_kick());
     assert!(!updates::take_kick());
 }
+
+#[test]
+fn startup_apps_choice_is_read_from_startup_approved() {
+    use storebound_desktop::startup_approved_off;
+    let on = "\r\nHKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run\r\n    storebound    REG_BINARY    020000000000000000000000\r\n";
+    let off = "\r\nHKEY_CURRENT_USER\\Run\r\n    storebound    REG_BINARY    0300000020D1D3B1F0B3DC01\r\n";
+    assert!(!startup_approved_off(on));
+    assert!(startup_approved_off(off));
+    assert!(!startup_approved_off("ERROR: The system was unable to find the specified registry key or value."));
+}

From d43c95db7e59de43c34af191c9a360aa65d134c7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 21:11:31 +0800
Subject: [PATCH 159/255] desktop: read StartupApproved through the registry
 API, no reg.exe (the security test allows no other programs)

---
 apps/desktop/src-tauri/Cargo.lock  |  1 +
 apps/desktop/src-tauri/Cargo.toml  |  2 ++
 apps/desktop/src-tauri/src/lib.rs  | 27 ++++++++++-----------------
 apps/desktop/src-tauri/tests/d5.rs | 10 +++++-----
 4 files changed, 18 insertions(+), 22 deletions(-)

diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 15deadb..6dfcec4 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4126,6 +4126,7 @@ dependencies = [
  "url",
  "webview2-com",
  "windows-core",
+ "winreg",
  "zip",
 ]
 
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 9a6707f..14112cb 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -53,6 +53,8 @@ zip = { version = "4", default-features = false, features = ["deflate-flate2-zli
 [target.'cfg(windows)'.dependencies]
 webview2-com = "0.39"
 windows-core = "0.62"
+# reads Startup apps' StartupApproved value (already in the tree through the autostart plugin)
+winreg = "0.56"
 
 [dev-dependencies]
 tempfile = "3"
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index c2cd10e..0e55f5c 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -90,27 +90,20 @@ fn tray(app: &tauri::App) -> tauri::Result<()> {
 }
 
 /// A tray menu pick (a menu panel row or the native fallback menu): tray.rs maps the id to what it does.
-/// Whether the person turned storebound off in Windows' Startup apps (Settings / Task Manager), from the `reg query`
-/// output of HKCU\...\Explorer\StartupApproved\Run /v storebound: the first byte of the REG_BINARY is even when enabled
-/// (02, 06), odd when disabled (03, 07). No entry: not turned off. Pure.
-pub fn startup_approved_off(reg_query_out: &str) -> bool {
-    reg_query_out
-        .lines()
-        .find(|l| l.contains("REG_BINARY"))
-        .and_then(|l| l.split_whitespace().last())
-        .and_then(|hex| u8::from_str_radix(hex.get(0..2)?, 16).ok())
-        .is_some_and(|b| b & 1 == 1)
+/// Whether the person turned storebound off in Windows' Startup apps (Settings / Task Manager), from the
+/// HKCU\...\Explorer\StartupApproved\Run value named like the Run entry: its first byte is even when enabled (02, 06),
+/// odd when disabled (03, 07). No value: not turned off. Pure.
+pub fn startup_approved_off(value: &[u8]) -> bool {
+    value.first().is_some_and(|b| b & 1 == 1)
 }
 
 #[cfg(windows)]
 fn startup_disabled_by_user() -> bool {
-    use std::os::windows::process::CommandExt;
-    const CREATE_NO_WINDOW: u32 = 0x0800_0000;
-    std::process::Command::new("reg")
-        .args(["query", r"HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run", "/v", "storebound"])
-        .creation_flags(CREATE_NO_WINDOW)
-        .output()
-        .map(|o| startup_approved_off(&String::from_utf8_lossy(&o.stdout)))
+    use winreg::{enums::HKEY_CURRENT_USER, RegKey};
+    RegKey::predef(HKEY_CURRENT_USER)
+        .open_subkey(r"Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run")
+        .and_then(|k| k.get_raw_value("storebound"))
+        .map(|v| startup_approved_off(&v.bytes))
         .unwrap_or(false)
 }
 
diff --git a/apps/desktop/src-tauri/tests/d5.rs b/apps/desktop/src-tauri/tests/d5.rs
index 6342910..9f2f382 100644
--- a/apps/desktop/src-tauri/tests/d5.rs
+++ b/apps/desktop/src-tauri/tests/d5.rs
@@ -146,9 +146,9 @@ fn background_updater_schedule_and_defer() {
 #[test]
 fn startup_apps_choice_is_read_from_startup_approved() {
     use storebound_desktop::startup_approved_off;
-    let on = "\r\nHKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run\r\n    storebound    REG_BINARY    020000000000000000000000\r\n";
-    let off = "\r\nHKEY_CURRENT_USER\\Run\r\n    storebound    REG_BINARY    0300000020D1D3B1F0B3DC01\r\n";
-    assert!(!startup_approved_off(on));
-    assert!(startup_approved_off(off));
-    assert!(!startup_approved_off("ERROR: The system was unable to find the specified registry key or value."));
+    assert!(!startup_approved_off(&[0x02, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]));
+    assert!(!startup_approved_off(&[0x06, 0, 0, 0]));
+    assert!(startup_approved_off(&[0x03, 0, 0, 0, 0x20, 0xD1, 0xD3, 0xB1, 0xF0, 0xB3, 0xDC, 0x01]));
+    assert!(startup_approved_off(&[0x07]));
+    assert!(!startup_approved_off(&[]));
 }

From d7c36cbdb657eae8bc0e8ec9eaf200e6d7ea06e7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 20:15:46 +0700
Subject: [PATCH 160/255] storebound 0.8.49: version in package.json and every
 copy, CHANGELOG 0.8.49 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 0878844..4919deb 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.48",
+      "version": "0.8.49",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 7fe1a01..3c2fc7c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 6cbea1a..5f1e53c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d11434f..b029e3f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.49 · 2026-10-25
+
 - `play listing` for a language Play does not have yet uploads, in the same edit as the text, everything Play requires to commit it: icon, feature graphic, 2+ phone screenshots from `store/renders/<lang>/` and the tablet sets when the other languages have them (a set the folder lacks falls back to the default language's). The dry run lists the uploads or refuses with the missing file, instead of a 403 "too few screenshots" at commit. `play images` creates a Play listing that does not exist yet (text from the listing file) together with its images instead of skipping the language (pitfall 102).
 
 ## 0.8.48 · 2026-10-24
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index f05a79c..62a3769 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 6dfcec4..ba11a53 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.48"
+version = "0.8.49"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 14112cb..1611078 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.48"
+version = "0.8.49"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index a3a7baf..ba5ad4f 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 762fc7c..e4f2853 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b544124..7e841cd 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.48",
+  "version": "0.8.49",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From d978bb7a8b08b0c0e01f2c5f69907818d90b9589 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 21:08:07 +0700
Subject: [PATCH 161/255] desktop icon: the brand mark at every size (small
 Windows sizes were a plain S tile), each size resampled on its own,
 20/30/36/40/60/72/80/96 px added for 125-200 % scaling

---
 apps/desktop/src-tauri/icons/128x128.png      | Bin 15007 -> 22762 bytes
 apps/desktop/src-tauri/icons/128x128@2x.png   | Bin 43665 -> 71045 bytes
 apps/desktop/src-tauri/icons/256x256.png      | Bin 43665 -> 71045 bytes
 apps/desktop/src-tauri/icons/32x32.png        | Bin 1650 -> 2439 bytes
 apps/desktop/src-tauri/icons/64x64.png        | Bin 5265 -> 7474 bytes
 .../src-tauri/icons/Square107x107Logo.png     | Bin 14924 -> 15933 bytes
 .../src-tauri/icons/Square142x142Logo.png     | Bin 22453 -> 25328 bytes
 .../src-tauri/icons/Square150x150Logo.png     | Bin 24745 -> 27718 bytes
 .../src-tauri/icons/Square284x284Logo.png     | Bin 63233 -> 78585 bytes
 .../src-tauri/icons/Square30x30Logo.png       | Bin 1522 -> 2040 bytes
 .../src-tauri/icons/Square310x310Logo.png     | Bin 74510 -> 90992 bytes
 .../src-tauri/icons/Square44x44Logo.png       | Bin 2331 -> 3799 bytes
 .../src-tauri/icons/Square71x71Logo.png       | Bin 7858 -> 8308 bytes
 .../src-tauri/icons/Square89x89Logo.png       | Bin 10888 -> 11928 bytes
 apps/desktop/src-tauri/icons/StoreLogo.png    | Bin 4533 -> 4699 bytes
 apps/desktop/src-tauri/icons/icon.ico         | Bin 75036 -> 161653 bytes
 apps/desktop/src-tauri/icons/icon.png         | Bin 121756 -> 233530 bytes
 17 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/apps/desktop/src-tauri/icons/128x128.png b/apps/desktop/src-tauri/icons/128x128.png
index 701fe9a480ef7bd840d0781bf5100c8f5c439f18..bfff39e39c43b68c1001def238e6751452b2245f 100644
GIT binary patch
literal 22762
zcmV)CK*GO?P)<h;3K|Lk000e1NJLTq004jh004jp1^@s6!#-il003CANkl<Zc%1FM
z2fSrfbwB>y`_$X->vei#Ds=z>6$AtkMPqNopV*C2qe*@tzeN8@)ToI@lh|USi5hEE
zEC?tfy~7L)!_+r3@4b1w+<wnJW$*uI?S0OBZ!A%fp(qEh_r5!~oO{;Vt9;jYtqnYN
zJas&EJas&EJas&EJas&EJZc96Q}+Xz^?m2{zw8}po;Q<!dFuE*I2a>Ab6oj?Ke=xF
zo_pkJ9q0Z5J<l1(6X|$joy}vqKKYW{qq{2U^Q4r>p(}Up)3WDxpF9$tv328%=-(tH
zo=C^<nF6p_*dzwA<feu4XeokT{lJD?|K<%F!KGy4wC!syFpxG$F&=G&`)!WcFa16o
ziQoa7bz}?Hx-Ds|doU35^YhKa4>U0{P5(;5BO(1ZN1{;Yu3PrH{*5+*z-gR%dbWGO
zUbbS`-+NG5h$o08_`Og7GV`?3Im=k93om{5iG6?g!Iga*vAI2klb6k6%GiagZoB1M
z-?{BO?;ewT59{|lG9htNAV_qup3J4^_q>Mnr+vc+?Tt^*;8|PGc-I&1-TOzeE<SZU
zR>G&lWL<?b`#=8BThDIFKY2^g{EIKOs-OCPtGe%V^{Ri%eRVl>v%KjOUzRWEfBxGR
z-}{@HYI?oF_4mDg-DU4@-uX7^``@fLn?DVL;PcI!Kk-j;0Bcv#zZ=YWLbw9{`>^tD
z*57f)z(@C;y!!2%<XOB{eo16Dp9XhsJKUSkcHJqz+YUwKo$;oPwa<O$Pygl5PJ8vI
zQb-xJl4(W%>hEC-D?btf&&Z$ktoOWQ#g)c}Y(vWRwqf)_gq%O^wO#&uU-Qx*wWGf+
zl975ny-#NbkB>6&-+kftww*cnj|Vm_e^qCAR@jLCfVrn^H;~OTF+2)U%SD*q(1&`t
z-(+>e&2C#$dH=VreDlXHece@AxQ39wS_xE0DJ5Lw%$F~}=uMyf;M1>P{R*=o?Ne;V
zmw~YX04^79gx7!kq&1&;=c~ug>p1Iq^m=-qkm7Ok36H-GI*!7((3Lx5@E;#OVcDzu
z<o3X~U&+iDZe<WA6aRfMg5?1@6L|hA&bQPh+}aRQ111FT^XytV`<1u7|GGc=+7~XJ
zll6d<fQ0q)hlv3!8$5f}+ULFO;*EcK;mh5D)G29Cm|IO|o(6_~z0Tyl5W$@QbA)N6
z`P@BC^Tw|qoV@y`JzuzU-{@8Q8@uoHWkV#v>SK4Ue&-H-0XcH+_JI#Sux-_w*2$A2
z&wYh3pTCV`YYO<pgb;hCB{G5`%YcDA_!TQnq-T8YghRsY>VuFO&u)~m-+RZ0Zh7sO
zK7HPtXoQIpr~r{kI7st%KI=vQ{i?TYdfA%I2GVOR1jsdn?6Nsu0fyxOvgGjr3`2@L
zfz}XY7zt*x(27JFvjX!EF}&l?cm2l~cYoswGB&?u67u_;1!&<jq|L3}e|i0uWml{-
zP6`|L%VA%#jpOtb@T0mE2daQ68CnrQG229g<NDbMFX?hnA0I%jItiZ7xPH1=d)_Dh
z;+)S0)vI3r)h}IEl1-%qN<fkVOUFEMS^LYjZmc1)E53g;@L}X^o}C0T(*T<Quu7>T
zqWgj1AW$9!X68BOJ%~9gY>YVO!Le@4wZi>Nf5T&W#ePSQ<ieS3YsZz}KYjg`m+;NJ
zAzvx&=WpjYCk>2;z$d2#M&}?z3t$1`HV3jc(3u4;?FF8ZHhFobj6!A>k-H31GS4cF
zr~m5>@BQW*ulnLkTZrV+6tU0l$z3qG{_+=|-S_76o}JrLJh6q)3_Y3aFj@O@NOPH9
z(v97~<RM_B3N~(p)4O}zAKqivzQ1?)A8#Jp^Tio);2;n^E?4bwJ#_R;*GT@>2p@gI
z+Wgx-arXN6zunp7)Z}ZVd)_Gqo|OlL1io6AxMf<RRfmW?fccD*33P0rJq>i{fminf
z>zT>RQ&TA9rxB%BLPU1Mo;{TPhs)pliU0TGZ@trJp_2bnoFL88{Fyx~x4-$4lRkUN
z+j_Rao%UopXR@vpfQTR`_CoG231cLU>#y&!|L(^RzvZsd{a<LwS?^J~kdOGv{SF0v
zgXvfP#o6mV@qyg>T#fyqbk8`;z$FEMg}`kg@INyW<(fp$gpdsYA>)PwECWcVfMNz%
z-T}O>8z}k)TH~Y0wND^Q_j4(W4L-6v``%Z4<ij7h`<s8h;0hG<OA4m{Xk%&X!_Rr{
zwXgla>hs`^doo`z850nDj)D(4;kUol>%Qm5H*6YiJ@BwTcP)a)3mJS|(?FA1>}6YD
z@xBwgPd%Cbek8z1BK&UW!k3(}^8Fuh2XnRPMbh1NhJj}kfG`4f3gDWOK;4t@1Bl31
zixNTrVF36opxFd!o)jY`h_B59p)Fu^527~N4WoQWAUx=bWrf<Ge)5VxyL{cHZ&Sfw
zY`t_~NZ<~~yle!2am_W)`S!n5_c5!J%W_FXr5Z3RydAf7xqtbSJD)|u=W!8=1pj!#
z!jFprB!cdcUELpg{|nyx&R4$V8w>{f%`b!&e!)KT+%s2w^y}IF{+j(#xT~LG;LL&q
zkAMdw;5+j|%+#f5w4?}qi71Q}Akw!e00NJp;W1P_V9z|n*Q<b&mfY`Lj{4Dln57bA
zZOTn=E7sos@i+X-g<a2jIpy!1Co33;q)<vQBdV>BeB~#v9D6WlBc1k94SadDGyShO
zRj%6Kyz>SEe#DX@)Z=+PJ_^9J3ao4IUDLfj@Sk>J_o{x@GeFP(`t@>poq)^NtUhh<
zgEthqH#E#krQP-nj<dP|hcVn4XyH#bfQHWzv=|Rt3^D{4A>%S6Hvq^02wM_<4X8II
zstt)-XC=N?lcHD@nD1VN`r&?9b0Oq-!|i@rruLB!zTqp|GTYA*LL76>${KKno%Nv|
zKe?tnVwr7e)MU7GcadK=eE*fo*gyVqf4p6Q*8Qig9(+lv-Lu!8o#ih+`K&*sKu{NL
zepQWL3*SOd`)LDz|6qUbIbP}lVdgL7d`mA7NZ^Nc;0Ln;lQoHY3ut+g3y*>M;L>MW
z@FA2nhyn?63w{IeD?r@?S`8^~C`o*~33T-cjP<O7cVqz89D^8<_NMc@8Xx<!x8J(b
z+PX<uf>;US=ny{q=*M@Ae5EyGa;s*fui05YGS)h{XYtqno+<#DNLnQYw7Ji_WceGT
z_I6)p2E0Fc?-_smjQq(LNJ(JJ|7IRZF$CrM_NJcycgOO+7rE})0@;f>w>p5?P~v;D
z61U9?lo||mkD=8BB2Nn8OCbW#4arT?EoAC(=mV`9(5jHdVDM@XKbVu^Y7gjJ#j(G8
z6<UXv!!El#Itud{mkxUW-)sN)-Zr+Xo6b2YJV9#Zy<_k2_eT%0P|oGVO$VpG1~i1`
z3jAIw08^%4`AOL9J!fC^>8D-M?@GB=2(ixWzogUquP<KyqxYV7`BzWMp7^vpR&@US
z=`H5^>)YOW)d~G?T<4q^dd26$ET@5)ro_$Tz)%@zv=|y>)>}ZR6o5haTHv($MQj0N
z6yHc8THur(w#q<r9;h@Vyt>49<|S@u3G{Ae*wMEf;m{!LQkF-PCSLuD&E}t7`lk;&
z=*g1x(n_EOe55(N<G~$ybI<Tfd-vSv_m(Qh6Xkf!&t?S%``&TU(?9dpe>nAd#tG{^
zDbF)G&+sU`NpN;wXwF;i^xhK29^iP#2XDIk#<6R^xCp`Opl?O?ijSPR=A-XPZE<UT
zm%|;)ag=R|mI?R-x=}!;R=1>;Eo2Lz8>NFh0;j-F`VfW$#Q}l|^*mt`Trw$`4e%6T
z6al9V$YcN`!}!ZP8Mbg>^rr%6?wtYao&~t)3mEA?{?OHT{QJFs|MUp;Z~-V{3|rgJ
zdvV4suDxgchaV0_^D)QzA9pA?xflhr-F?-W7k&7O*PrzEQ(m+Tq1*JNh)l-!L&}2S
z;Soef_L$Llv(kQ;=XdYvM5Prp=`$#3N`&9(T==R}mjBgzoaJt9@MUnvEslx0L=XX?
zBZV;3>gEU;`FEj&t^z(O$kz)BzXO0#^e>qDchVRt$VF1waWEwx!u!EFhp2PH{iXPC
z2L9SkhR(A&Zf<nq?7a?*+?>tqu=c^%z3|Mjx%tn3|IjC1qduHgx|Dcu_9x#w_KL_~
zN+J7gnMhAa3!qXSDR55Lxo^DgYcKswYSTEv+O#KSQ@~Eytk?l*<{^(B1i!Bm?!B?i
z{oAX?zxe&JU02p|U^M;|<@dAZwiBPe>hn8_gIj7VFPCm*(7^tRM3|AncK~5gX_W*^
z0%lx<5L~T##^IASkb=xV)QV?HP9%J~Hw3sO<sb#H;+xIDGZIESU={#71z1_eU)9Nw
z@c?<1#2I^9aEdi>+ix5iujXI;$-nvIhiYH{=R{#2PvJfx6d*Bp1*<J}(csB%K6M~<
z{^=)J7j3^FXS(YnU$~5mtPA7eX86$m<lQU2w(p92%QybVA}+3lZ?oR^vsQj~x^M7e
zZ}2i{vdx^|KP3^QrHEW0vH-!AY}LhPf^n&YEWtvi{5(RrAapYMEKUQNVCrufNx=+&
zZpt<~RJ{clxqvq9609`iPMYDx9Y8P#bpH>qbtpp0Y9i}0@49^lvVZu^w{D*c@46>Z
zf?s7FSEko?aRYp)dSLRg<_kU!5s85go=;smu<=!Y@$N1Ew&t8UPr?+@U0L_?56phy
z8>8R8LZ292JY9C<NSP=1{QdpwSN+imUC#`|u5*}q*BDT>0O=BHCxtM9h%e;WT>Ug9
zY`xOS#FH}Uza?0(L<s^2GW&Ef)Pf}iu;QDom4N3NH;PgidB&{_fkePLIUqd?Ec;K1
zfgy&J6N&Du5q{$KAK8C<+nc%rjL!cufvU8T&NnjoxBu@4%G1@#op1Q$-(HYV%75pw
zfP^+hQkfO=&Ho&^?Q?(r_q*Oaf3Vw)BKY_2wE4B8JKw8cd+f?tRro)jUE6cTmcmJ)
zH?Upu2M<V5Z)kHaJwVg}!uAc1aqclLJyq-xQbqj|f@(J^>Zkl)Ki0|tdMrSS5nBUg
z5$Hy70x5~Fibg;a5LL#b8f6rOD*$)afzb|zoiF4#oQIh5IQC6T{=yS3<QFY_>-Q<?
z)l2Nyb*5_v0wR+5gZ{H$`rNnoWjAecR~yn)mxxf1-#G<HXjAG-3Gw3$S5NHtx3B(B
zYnSO|-P`wgdny<|s$WaO*XdN7b;kKy`rq?^GV86{nzMwx{|LieCC=Zy_|}k+H9*$2
zpk#xA(LE_ZjP%J+D}sW5X~hd|8C3L71>V>isK4nx7QVWVz`4)BJO)%r;iQl)DZCbN
zpaIm@0^_e?d@N#otS-$dPc|+;<+W!GI2XS17xe+qWpGfmFY7<^vX6Z1yswDPRkdwr
zb*_3|-^u3-p*t0Rr;$LV2$CT{Lwx@FhyQx^-WBcxll5DGrqnT$273&&<+gQSd0l?l
zU}NReggrXWab!y8?NI{|H7QUBSdD?#092(wBUXYI5VaKWqgQ)!Ppez4esTx;S}Wl%
zy{XIrFd_y+FmCvO(E^Ny6ub$+s-$dyXh`9OKsEw;PXQjjh+($DF;o_|$vYdDZFuW{
z8R*dXK#UY-jCSX*FMY!|uKU-wjQrO%FaFN*7oFovd8+MhTIPNDA1=A>qTbWaXRz4s
zd^Iq!1`n4W{N9T`eD7cVWca?nITk2kSebvtM+SQ@=51Snif`~e!&;DnO1UKD8iTAt
za1uIMg=q#pN5W!UrFyYBS3plF1*cW7QbS2rL6Buoraoevg^Uv(kYoi^OK>^38!)5<
zkdji^5nz#3Xab}JbPjeCxW5UkiX^r@S7LG#Fjr+bSP|j+u4nR<*=N2?{~G<fLIGw*
z{t2h8^19vj@mg5k%eiqckLDlb%g>#uT=PHA{qct{zWg@z?Ua!mXLs<#f~A(^4JK>L
zK4b99)s?4Q==tj-vsB_}Lg)FC>l|IVZXW<){7p%SpCC8yoD41oq=-nECgWsQ5lUfF
znI_T^KPdr^SGmpv7B7b504^A+`+=w~VW$DBLkhDUuzLX3O=%6${g?ub>S^$Edl;@r
z1ON0LKz>pPzZHcAE0w<Cz(;SmcI4g9TKd~)-JPC2?HQkX$L8x#d~rjBg(B?TQ|6%?
zO@8yi%<iin9{Z1P?)m9Qh4kg`0Vj}xL+uxJw5%_ZfqeV&?g0@vQcTV=L}b!U20`*_
zg3Bgg1q@lq)r$3l2)4_3gRWTxa8@y@@vBu$Hwpli(FufrWSoa&-WLNu9`pQE>sW>%
zm;gjmvH4IxEFgy%499?#14t39ZUL)b!WjSx-5d|JfDdH=UrH?R1rF@tW`U??x!w~r
z<%FQB<Pf;4cGpes`YfLRovquhPUmMTKlqQLc=y$JpS#aH_#i-t;bU_=0Th6OLv83(
zr!M(Q6(ysUO@}-U#t$D3z${Z`gpOn=Fu)3dpc#mA$rJOn3R<3TI@vblRu{n-DG<04
zY8>cM8ptDv*vAVlz!P(?Tt&j};W`VXE8}!94Bt2lZ@vP<VB9oJ*tP@Pbz#`9u=6Ij
ziU!OgLB$dF2Mn7E5iUHn%$FlAdiuE7_mepa8^zBN*f?<8^xhvoy!({7RZd6y+rD?l
z$-}{}o%HX&oPz#4p#X7*uKu6q!>BSa9rT!%E3J{EQ`hbI#{IAAT7BZ#g<M!~F&@dt
zuh*q0mjs`h_snX;w<QZ;a09ND_XD5vuqBW(n2zkVSve-SBTz_#LmB`|G6AK4#M6-A
zCNX|fKy5~#S&m>@E+7m9fk4m-g;%Y4l2u?#nWp8~rt3J|&08qA22R=7z}%#PbGI}+
zv1u%S_ZRQ`E=8P6n@*FGamcE{RX2L~hYbY7!9zO;8=%)bR>IfPIL;rhzd%b{3HKKs
z7IRQ^yHedf{l(tZgPr|b`#T0ss5hMF92moZ!OjsKxwX9Bu*}&?9e!9vfC>0GxUVI~
z?u?>Fae2qfpJ!&y4E^p9=`$Iu^$fLItN<#nmqG=6%Is^l5GPPbFwTWk7J!HxWb->Z
zG>9~NSYqhM4OpDRfCbyIMAj^uT+H)Kx*dj*LKtv}i1~&g{jMyqtQ{Cg0cULpv;T1Y
zXT1Nq{X@OLWcimBfgH5iAwm(M8a^I{BJ+5zZe7>MqH|S;YoyUr=*{;HuI*jEdGqph
z&sf{P>a4-Ofi1;MH|Hq84>RyuHd=u|tvns>JhX>jeb1-;vBr+qOFp|Vh$=@zIX@eU
z`GzEE(hr#vU*6n)+AHV5J%dS8B~qcJHO|!vr(B*g4DIs;MUYHAr~Eus1XV^vX{Zs`
z1B{duhHWd%!VnN$d2Wx5e{Fnd;?pn9xXXKs>6I6Dq&J+~*S7hDuEH`qZD$n6Y_fg?
z@BHf3H{N*Q%P%G2Gv!oB^E8KWsgPTkr!Y1?9{YNM`Dh7TukM)OxFB!x=v|p^XVt2e
zUF)`QTDIxgn^&zlYxUsDWu5s>m_`B3AdT6IfzdhXKX6F+<ys^fEhQgXn6_muM{jXm
z_@c8myI;KRuX9H#*WP~Y85q=(iG~>ZAxGntrj-uCm`PZo4gjT~Vh~0DD%c}s5L5@I
z)vtU%rH7m`(pCl9Pz4ag7dIUSW^foBa7`h)yBMFIDLqsd58PI7Jb<YNzNKn;!)@6V
z@9j(3#a@cs%dN>n0;8kJRiN|xc}kpCh6MWk-)aU=Km|yCK+N1(P~41_X3M(z3+ql?
z*SqQ5^~*M2yk_8pZ3ErQkVzF02?sTgVRR<+b_|KITo+WiqXlR(PVhK$$p)J?1JSkV
zk`U+a(0t9zTFbqQwtn!Rzk6?Oe!}~~m$l#*n<^vem6+KAHz;f*#xAFotOG%X_mkPz
zkw2pxQhhkI>5l^sJvat1xP+Bru+jiG7)(RJwj}Q^0EehP06JM+bkY&bT(u$QstphO
z7O#=TGJHi(%FN`2^jr0yTyCLK2O0r=-D1?Ucqq+FF6YvC;fbXH3!$4b=Pp(Z_7}IF
zxn}T`=Wbka@^ja%KB2w4*aOE+q3Hp0rO4km8TsW3&<a|njOgmYWDF*!%A2Wj`gk%2
zfi_IFSX11rJ7;MHGF1Jholf`Fwy$~jm#*8r>-v^FGND<)`iNv>UK%YJmR`M-cqKyC
z!Y50hxdGbmD<7p4KnXLBSLm@tWnd}*IpC(lglTZNw#16g5JQ=e&P<h^7q3TBzo3=Q
z&}}{aSr=}6%|D;L;ml1PIR}Q}p%KhtzCKl&ZBFbtGJWK(!xO_hj?RugI9;1OQo(FV
zq7sm@|J>D%tpy#&1d)%A0%+k|yv^ygFMh*$XT9YAZrQSJptCpt$96#!k6I<D?HdJ}
z^%f5UX%b%&lDVpvjsP55@5K8f%sXD?6nv?s$haIQDH@Jz2L$#IPY}#REohj1J!kk^
z=ihzpy<>lV3gD4Q)#V5yuSOC!9l$W+R4&N?1o?ao@2aSugf8Sl1(06H6aR1O6pgDG
zfT@(gvKdcVOl(-|Vb?yNK;<Pz!c>aDP_R$zxZ)Ep*#1Xv>gyUn6o!p?Uy76s<g@Gf
zvTl}dFGgo(vcZ|$YM>F#V5T~a@wutWk)y+RKRk5c=6xf>caP4D?4EDUOxG~ikTO`v
zk$#y{{5A?<{^nh`DQipDUp@4W_q=sYzTFnnhr`CqtQ6HslScteM9fvErvy%U6&6>s
z(1KUORrj&Lb$q0ifSw~oiL*hHjc&f6RnE;;<a--dzI5C8{QZA(wE6kJOwt%BgE~wf
zMoQ@lly$*^uvN-u#4DdmscB$H*hU%@r?`L<hF~!mE?|%{+2E!D6jKcA)>mNPK;hxi
ztD-BHCVKMcta#sj=WTt>nuy8LfvLJ{GsAW*2FGHUZAKzhX1+54;hMHc+m6U(+fc}?
zHBTEr{=99$`BtiVzR#*CH)k<1H;sdbkL=pB@6fFW4jj5=XngpA;qvgIdCb<N43ANY
z--bi*Yb!wVB^}QB|7YE@SFCC46LW_j_Ohi>W>c(fN<($ps>L1Ys+%MsD}$-LvJ#@E
zUQxUi*X~vQQ%j#w^^_heEQl*=ml~cBQ*}uF{3x_dGg~=n?c1*`@4o-*wP=R|Pa@%Y
zk>M%A2281yfaFR+pu&wQ0F<NziXo&{Ka)aL>r{PK#R4jJFo_dL(TD?><WdZV<((mx
zucex>C4O!Q1qQpGzUuFGp0Vj=eKQTO0<g5nZLWTgq?Q*0CIb)E^^rUj5}q$nnwOX;
z0rnX8Ic$+ixgwh>gqiGebD%RaH=iT6yyQ9l7FhK+RqG{;PfXz8fdhLU+_nFw5A5D^
z!|ve&cN_|ak49)d;;zzPTLF?NwLP`*qDmzc_ucBJdpk3n8A51Z9ltIXx)MCCc#7tg
z1t1~O$|wIGD?kGM3a+AUas{+<xglvuaW1&R`lXa)Fu3Atag+OD%PtnzdmH-R`I8-^
z?;40$$&&>A^ALpDDEm)QWNf!c_(n({3&CmNM`Bi_F3~CRlhUc^U&3%0%(SL}nJ$HM
z92-`8Fmf$KwD{tHjeduP{?4;keB|)fHJ7<F)n<b+!{ywh(QryZD1H$ZgRseA302IZ
zDi2u|3WRJ6@aeGu-iidT*Q9CGBbd`1_Fluc3@c1!(juGfLPv3(z2>ZQPPpvS)(O&W
zzIkST3P1SDEhGQ<l`mYjzj4?7kHixE1{OeTdm|WoC=BObuwzG6Jnym%unfTkb=%NC
z#)2n{KyF)GTQcWL@FI#LP63{dg0)&{w0&`cAJMT4$^yuHnBbzygzwSPp*PY!y~pH%
z2>ew8&u^bD-TBYMwNJf4#rj4F!(}|Q1h^S16A4*i{Zi?Kq0Vk0@Z)rTN+V(_7^49p
z4mcHn+_ZKBDF$pDsK>=q(k?P{L{nSVc~al|cCA}+nK|dRJTACNL!xvUk0YYT<Vw;M
zhf3kob@KJd8IuB4VldNJ({CmSnyQTkqvyHFfzXmL4QAJ?RAH1b#~I8$%(t9Wm}_&z
zzzKQ0>Hn=*RzB2!-(TPGmd=(OpZ!gh;MXn(Cm%Z1yy-K|@Bp7bTE%^LkD;yCjB)%V
zr(yAhRl#5E`_+LcqFbbJuSjV8D-<Cj`a2X5bR*XR#z~NN4shBT=ME*~Bpv!lx|tLY
zxQ3akov`xlug@AMZ;eo`30mg)c-5w%E;3zM&d3cY8n})L$keO!53xd!P+~#Y6#Qu@
zm_CPF4828x<?RCSENV8j=?opCD|br&-|gSD=G8s5z!#z5b_4^Vq!NRnq)UY(w@nQu
zRL!R?Pa+5zd><e(Ny}%vscwL}wWuLQqTxf(<7!KaN<#|zyAcxoK#C><uM269PDuCY
zVaxsQzm`j5^Ic(2X2WU8Qaw(50Bx>YV&v$7sjs|`b3c9W?FapdnF@+MCJ8R-jnYA#
zvh-32qGQK`mm(4i0v7@yDFgi*DTgFw5C}sl0>Z{Dz%Bx*4j|P<KACfAaY)06Z#H}p
z+U>>l{_5U8`GL*Wo*FRULyDUuM2D;hMe<AvT1~WWN%+bNs2)U(_^Du#9@A^+^=WWg
z^(vLLwGs>zsdQ`uz71*cX#?HaEnV-uXWgoo6q{ko3z=a?FcC77N3?b=1~bp#c2db$
zih5HBTE!%EF92F0loC+mN+VVTPbq~|sWS<`Nu5b8h9*6yUQ1n0pf)#Ar3oh)10xj=
z|NX-e^GJ2ttoRcLe<R8N<_eG;3{&2B|88{lnmx8<*w_E)!7wy@q_c#HCxHNonov>g
z^GN}eu$AzWzhl9Z(A7PSSd$0?srYtYO)+qhA7scb*GfQX8FRGch%Y3$#alAutCn51
ztUL39Yg@8Tui>10I0?~`TCj}#Z5$LXxfv=TV4NGA0ycUdH_}X70Y@u9Iww(VW2i(a
zE?Zm#VP@Ov{JZX4xB7MKTS5{c$fOld=OZ|WB-c{_++GR0O>+mUrC9jXdPcvGZXsC%
zh*qGV_kD0LU}yyl%>ZZyQncv#h-rnPlDA;$wUT~N7WnV~c`$5v&FsP18*eH3`wnXB
zD~=})psj#}9}U+&e{Mdta>5Q)de`6Zp!w`)oQh^WLO@+O6!1mhp(Id8>Xj|EkSUte
zaex}k8rNZ!(*WaS2{<SE6>;zCWr^NZTv(kF(g6<+G2WV!1S7yE^UN(3B&MY4FYCO(
z_AvpOmV&twPD)Y)FAOt|D+p^KzZBQ~lj<L%X@CafNjDHNe(AGqM^6sP7d7dl9NAn(
zo&X=*vTnsW6#M&r<eQwdg}`OPGAZ*Y0I6j_x|dqaB&u_ON67<qtWqSaf3*${Rg6N{
zicm3fS#)gxlbjM)NsBNkbv2~=9TeJ708<<^@Qv@@FDA$5L`xhJd*{FM0v%?v$HD?=
zMvE`UCJ)U1+jGIH*{RWa?~eQSBHwON#Lq)PEF5hCl=(+u=JmbG1VZf|l#8Hiqm(1g
z7D8<WN@Eh`$%q#Qf&Og_U0Z<SO3w3xCO0xbrB=n!(Zkq1w3Cm{4huopukzhY3D8oj
zn8BjF-jLeI>xg^du|a=Z+SHr0`icERia=Jt2HdPf%aW){6FzC7)$YS>^QFr;cTEWD
zcjS!I%4c~XwUQyXo&hO{$}B{!LS~<FUoaj<)WJjxLf>dr2gGYo&olTT=RwH0ehvr%
za6gdn<G;xw6bDTF=+=GMy>HByyprBE_3!8Vn3#Q}mBdF_3(&|-CA#bC{nP*Xfpy()
zx^nkJ2Wpvg)?L*#fa&p23zCFSXkHX)vmdYg1fkUll?ILIb@T-JXL8Ug8nz5HCxFJZ
z;HyuBn(8$^3Jf2rWA5lAyvj60SXXdzBq@({6o5m*v~8Wn84e**`j_e$KIRF~!L_ef
z4IpU-MuB5mQYN9W0Lzvt4k40JO>p>Bp$rW^TOS2WwIQ9!Af2K}lTh&pRu@C@1R&c6
zOx;h)D|J&U6)c6I@8yP+BAF_xvLQ)~HL`u$O(kcht_iJt$zU_aTcJSjatrtGJ&L>U
zKj>vrX7-_@U;MMG*zwb(dFF8`2haIe|JCSR-$lKJ=bn1^y?1-*vomHoQ$%^*S1X=`
zu2;7Pel$mee7NM4-)ngrFf9vi$^}<}9$^L{=BFDN84Gb_+(lj3aF#Qm8xSc2Mm7yw
zbc(2vQJk=lTk5Jg84cjLmK3QJ35IfTsaw6&52j`e-MA?^IHjD7&_gQxWXNhTWjRQJ
zEC+(8wKbw7upwOD3<Zu%-;J4i8ir9ow$P3Co*s1cWU%Z+pmQ0}7~yD4k+qL$=%I>-
zIa3QDp(+u#kup@lX=EMMK;mRugbI<+I05HOS%J=O3kSw#@S_`d_!-B^4o!XaD^tNW
zANg%L1iys>B=JBXCYoPA&o(*^=QG>Vx7_tp@$^$K;+Acr)uir>Mbl6BdbW-U$FX7B
zHn&V$VFrHSVZJhka&;c{W(}V2gIfBGbRHS67s0jdIQ5kV)@%oA(~bz5?GS+jNu3%Z
z05_<@<iSmm0!Wdy7&0yp*b)(~aOw^wWut{+=oQFKu3QGxjaEKc4W@j*YXH8(I7RW~
zn(7>=5yO}}V5DWXiI(A`B`fe`8(1oXuB=39h~en<K6oWm>|q-gEZ5>pSSmn^!iYy<
zq*gyc)T)xfi3+Fajyg3}g$#v?a^Xv~wVRl1lyU8icZRNQrbp+lzGI~EmCF+uJWdL*
zs05*$tB%#bbgE^%<q&wbapwcq*=KIP47`;>5P1q-wP~eM0~|M0OwbDJn6HeZQlCJz
zIfZ7cf*=ZD5ctkBFn9r+=M{7tH3O7K0zCX<juT%B44f``Y1}~QX9YpClIAnIHVjtb
zYV|ryjevCtwI@73Ma`jvCM!5m!_9Qz3@ONcAO+58wcApye%EB&<v_!f5UIEmNH9)=
zTqEXynQ1UL1<TFCY3oDB2?Z=ai(Ug9xRIDdB?OgW$VLSucGqx_aoUhewZpLsNT<@I
zKQUac35(<+mBo;Z>QLH31p>LOg=*BqH8<ZLG9H;z<-4a2Rsa220^Xy-AbJ!SL0Sns
zapdsP>X)9~pMT|bM`tFyYwj2~Ph4>-WejNed3d3TN_85oXbypxMl%>iC>lyB7$f1O
zVVDINbb*N$Ac+L3VdBUaqScJ}#BLyc2e9%ShUt?ee2-8@7g5uJ8CYOUh;&LSTDN0p
zGY)DTrQShDFBZiIP!~83fgR-@1gFX$0Z2p!wE&0W0|FjXj7JK@p|%w|r3|<$VWhJ#
z3hl@)&!hiTAk!gn;D=ny4117KolA;)&_c_fMmekkWly^(qlmQKiCnr9*;FrbZYMHM
z7N+H>aZ|)((qa|J<t&)#09W67i}0f+THX*2mp*q=gj(~r@%xXm0xV_*wP@FmM(4l#
zmQ}qMeCqN`wlz-MFkq9v^JEQ&hR3jPVwCUPe?S}@nM9>ZrCuAhokGSjVcL$e4#d9G
zhEeb5LynrTI$DJ^#A)O%Aio+|aVA4`mIgdX5mq^(mJP$sfc!qKF2`g@lW-j%Bqg9C
zuF1GT=10{Sb=6Q(Y@llYlClM!A`F2t0|J~WvUemR69_obw@5-+7-<t`t_Zg$hn|xe
z`Zw$In%E@}wG?b81o<yj&>&<<C_1u`bu`1nsJ3=vywn1RgOt^UjMI&r+lxYW8M5h4
zI93*E%SL^sj0X?igNCSzpmo$eJpbtpEsT#Rol}p-@hB-kazd`Tdf@D*zv6lC4BcFT
z-!j7Cm_V@r^se53Ehj--epw5iKZm2!6WF=?Fm~)6#{S_7=1O%H2&K~*q+AP@NkN^V
zgC@F|5u*_<Xw3pcw*i}90Q8>D(3mISK#IuYu-!Cw9I48$DGMUw=pqbH>8T(fgpr0v
zNXq}0bO94yPsk&!e3P0|ROGFEvFbWDh`|fANYAY_tZYh{ooN&|Fuw9MpgawX+zEsY
z8cd;zVd_5xhpPfZQbV8|#DJwp3mie%M5(z4WAi)IJi`p{!1AtcY~QpAC#+AQ#XL+m
zC&PR09&zXSwa;vbp?#0m%6}9UU}0_#-`e-i?>+y*_g*|#H@)$>z_chcW5DzbaLAU5
zWRcI9=qmQ1v(Sf2&OI5gd`=6^U>-*%kK+D4leqVx5)K}&VSb)I(L^f4k)~1^d2MR$
z^cX5b5{K^xmXj4Yg=6kM$*F_ac5KDmN!g4Pk7pc-Fvj*NkW*fTn88$cq)bB+XcU)z
zDeAW%Y?E=DfTks_;sh8)9Gnz@IWFvWhTKYqW!p)UfP*&y{=Du)j*A(Zr9u@!Ds!vK
z6IU&2tw^HLXd)!k+P1K)vmaa5bl~(;`*8A>c5K{GKwDQDDstr=2n`co_|h%-%lF;T
zr1r;0dz$!fPYP8hWU_UgZ~4qc=U#bn!{fD<7rLftYCVk$FS4a7d??ifswIIDLhBqL
zlQz(n>BV42FD`!$@TNbgVZJ(#-3MoI$Idc#?47{)REV%@BURKUo{+-XJrRm4C6=Gc
z5LB2VRXbT?B|`1>K?+0lfD}ddfu0%?(c+<*0-Cu6(*&0`gh`+d-J23Nr`0djg;6YV
zdc6rA8W6seoaYSW+QA1-f++M#vHupv>qleiIrXB^5JDwyhR~-8Wi7O#8bnk^+6b_s
zD~~PP2XNZ@EVgg$!G?A1NEN7toq|7aqcUdW$b%M0Gp($Fv@7`)Z+M>HUhKH*jqm)U
z6X)dv5B#dZ6OWMsB*K?iQF!e~FL~zQzTR)yl|~~<8_b}2Je+(e1yagJ@OT18zz}%g
zL5(4xTDU7w%le8uy=xdKrqk%lWpUDqWw_v^7D8FVk?9h43?0Q?yC$)3G>`H`0d6{j
z!+SYSI1lJPMIb0iq#Yn_FxW)or1;K~2xxVC8gYvhx}v9rsHnwKOPwnQunBd(<g)0!
zs(3`mqADROz=#tD?{rAC4FEms8J|8VMQNXe5t(Z0Sm=jn)>`n&Ww3A_`OF;FZfN0z
zVmG!AEW>Hr+pw}b1-p;|A{TR01`h4CQEs^KLvjnII;WTu0oEXQ#Cc&P5SN{EYNPtT
zf86=U@B8DGH9UOe(Ncm(tN@zMEYO#J>ARkN*5AC-58O(lCelpOd?rZ@Uj#k{QaZ9$
z=2TBVP?RjyogFgnHyO;T247NHDvAiqdjbbb5*folr`v_W_Ab2mtPrnxb`>*?3U(hI
z$BrQjJ9im4QqQCFnOPK0F~Mg5(-zdptE+y7ZuBHGPauTi{e>jR#flJ%>0@M_Ncc29
zo{+jEL{RLc__a+T;SK`X6B)cF$Jl<(n-!ooLbLy?$gxSRUp<dgwploJ`wDE@v<(Bx
zb2JtY*we!BJsuw1V`6H~LOn8xz@P`qDJc+W6se&WJWx(UP$rUg!Rr>|{&yr^bLrXM
z^vwJ2`OANK*V+(c<wrva9-#un6T7U7Uv=RbfB#W#v{$O-Fr5s9QVK#X8BmkD5Yft^
zV9O*b79pPr2~!He2qULPOd8h;7-gNuyBQ$N0UiXVr-8jw2HKrA^k&;|dS8eOHhJ(w
z1&5}macKV}4%8eR@pEuy^Kkks72DAm7g-~g1x5Lc`%)K@5-uPT7Em0g5hS1#K$mwE
zW}qg;kVPTDu?;X!0IKzXPu)}#VyJ{oZVOw_m)N$^z~(L87#vswWKufdq#n<PW}yZf
zQn>p^DU6RWRc8o&p@vq(qwI((MztYW3I>NDR<q)@3n*xM9+rLJdr|oAmtE36Hd(p%
z<KKACCW*5D+bY2$Xbsa*XwEqO?2EU5`j%p0bFJ2Bxyg2EDn6mCN4-=#0P@EMnPv*K
z=qf8Pn6S~<C=eA)O^}IQ1`#u<&71Q16qGV#iwtf`!Zsuv!B8+6y4o1}`$Ob<eZa0`
zcCLY=qfJaTIGmN85bN@2WNkG)#Gj=;KZWF|AUcVo7+EKk3QEfGkm_LQC>kgN7y@wn
zI8ffx0-NxWZ!|DJ?_+J&z{VbqjcY9o4yJ*eqkSCV#ePg|k;ML@0uNBH1Ffb+c@DVx
z^BNvjjj1YhR?Q0{DO(du$c_tEqztYJq!hHxxMN84r={Qf%x3!4fA)`8ednGJzmTyY
zW{b<mLIJe!9jsmX>{C8>sK58DMyb>=4I<9Rr;xC0Rr*G%X>d*^HQ7_oqRJcjxCP;>
zf*K*Y@oS_|K9E9b1;(ht5Vssj?cYiX$W>%XSmg6LL*Ae^Y>CbRiBw+`g4Z!O<6~;L
zilZf9rmGXiiXu7+E*i4}UXxBMW++q8moXG`hbDnhO(4~1p>(8ydmb!f`e6?%BMVzk
z%VWcO3;lgAtUQe*Gsrwqfk4d~CXRW;7`%v~M#8QD)dtXPP%VL>)dC6y;QsFlObyfi
z1PYGUWEHYL32%Yxo(5%&Xwk&Llp0n+1QiCX>Vju(n#;c6kN^5(cOCh+KOv-5Yk@qT
z3Xsski<xuQeEjgn4X@0WN_CPh0bGJ=>PdA^)d;BiMV5esuPHYaQz;>nzEE6{m|kM-
zC<P$jtN6ol1g=_p;>TQ<bIF2`38k7n`Nwn?NN0dtigxV)il#(Iw?x}A3EmYTLKD;b
zXK?$qEsS-wW8Jd{z#{{JCt#&HsLEDuc$l3jqdw+Aj5W|!1D2;!Sl!`ZO;-wb%0Vfx
z5u9kCYZVYo>8h3%IMj%F5;oy;wAxAN#A=F?ar9((C`(B(coPykuhCYGVxfeJrog9I
z5lF~pYz^r5l0~4Rqr(|@DOQBU#+9-$oEgc#@LlhC#YpYyuWBU_$4dbce9~ZBy8iF=
zPdoXq&a2j2o@6w1V{wSdLU}i_1hE1n8G|NaaJ8z5h@*Zq(XeRMFSvqaGer%>YHOg&
zPKw`0jhYmx$H0wE1WKDBosl4A$mM}TiXj7u_Ow9HmL~SxTE|1Tc=-HJ9spktyyIgR
zD&*(z-BSpT*5Qv;vAp17^V)W-XivkXa-uXbUgg+7CU9t)Q6C_YQt-OBGeiL+z8<P|
zpi-BL@ZtMRfjK1TFwg}gg*_zqs^-HuDe8USlJKceWX1}hSG^({YqoHFQ_nLMm#AG$
z48|2qO@VDFux%6bu04EL_KJ_Zc|%h^wC|Cyf`5GlfJBdb**h;f<Fg-&kgbKnceU0n
z0VkHWOT{igt>>8kuiLLxbB3C)uGq08P~{fXPzPdF#Z$y$1yG6;vuI)hhXz-4c0nf6
zrtHboqz`2oazMTv*s#^aU7tUSyKXvw8!Fc$m0OLTbSHBCKBns-!jUZA`l2&&*^Bck
z&#R0_7&<I*Xj)>T!7$f?n*5tE-O4i(&%8)t)9D5#CnP+NRypw<w2&jB!K+oT%HJYk
zL@TCr+~JffFn;tdfze$OG;orvfMIZ|g2xK3gF#XRmCn-dq+Uge2RP#@O*N%(EO1ju
zvGpWFeBfJOs(tL5cP$4>G`;9Ias}qEZ~D7BPFnM}k6Bi+)@oF3ZrO2T$D+<HboL~(
z@W{gw_8#x2LL<NuEv2qq)vc}CzZfSr4+VG%RMuS^G4Dh_xAai1gSLAiqJ{1!6x4G_
zmVo*IeVX7oVB(hVP2i5Z=5b5un+WX9c+PWPix*x9tZVad?>!QK_g^>T%1?g}zV$+E
z-I~Q6JArxf*OIHoji4n}4S}|mAvTZn7<SwtuzaILqoxKvAq*AyRVjhuohqR(c0(mS
z5(#=o)}pwKVPrQEV~H0*B9GUM;?XnErn0(;hB#rmXO8IY$;2SlE*COd0DR9wGJMmy
zFX_B#$E_c^cj9w@^qV4uzmgJ`82IkgGhR11aF(E+eS?;4GEybE{j8J{-%ngQ+9W_7
zF&CSI6B#4v4x(EaYIZEqo`_PWIE692Oc6{qsYd%$5=Pv86cVr$677n3_dvY@<T^}D
zO_uQeZyv_OmD@4VtfRN>bQ~QEanFp8{aF`3+-sugw@~4?<G;VPPgw+EQ(y@AWr^0D
z-Z#Ln1HKohs0LI3H+F~y3utC9bvH+9{t#1w)WMjh#%t5Bn_e0DJc5%wVmmXqc_N5X
zwh%L<DQlp<5&Ap<P82Z8AX>iK=ZMo|x)E8lK@@UDCS{nf3A<Ug8!tNPHE-kS>P)`>
zQB!~<$L!3U`l56?L+voOWI9w+|IzLqvGnzpFWTQPHVcpfFAj}Z9Gs~b5W4SgVb2}K
zf8!J}Qwt`oDiXft7!tu$|4n)G!oEL3PYMr0qED+<RHQNyuKN0Z%y>tzd*(V6v+H0x
zIn?I^cqIeZekZ~$H|-a-@(fLy!oIP)aK~*k=<nrdRwM#XDupDnrb2hs_vn=!1ssQV
z3svJG%b=lu9FqklBVM#}YbDnT9A_Q|L%xTh<wuGvOAP72j}U}H-xP09D}NYj;S-%)
z(ZhrI76LV2s=#xyEJZ%QMdaB@7c5=0kBS1s2WxsYr(UaxwjKu-0px_M$;FawQZ-pv
z`AYK>4(u@>rBQ%bF$gnE!Uy%d+EhX-K%kUBuSyyip~k||s*e>z2_?SBLNFfqlJ~AM
z@sl6z!`RVzj5cpp(PGN!Qw(CFd(nILKGXtZO~pl!(nf{vz)iP~A`E<0KTxo7LQ+*X
zvNog?x^Z-LhyuY_u(5exd~F;LQ1y3#0;fJhM3HK76J$BkUAnu7z9$e7f+$2l)cHgK
zBt0+T$2**Q3R9A_@~M%8S6c$jh=b)URP(^SLsTVhE%xU;$}xZ}`@6m~GPLic_P(A*
zv7?yH@f5s<K&z!Yd=~vc90)9N5vuJw<^nDZK!{U9-CTX_k^F#=gio-ps?X~bLPZ>u
zHIT2=-A96oth91^1}yA9IEnl39Yza#G35=REqfv?Bd0h8lsVL^9MuvnX<sRxX{OPL
z4q|v}4{p6>CDyFz#`Lr*9H^c|b-s&?ZlY)N(hS4gq=1t*)Q%*2LW(|T9r<f|_tM!J
zOFR3C<Cp2=ioEKFk?Nw>)`Px|hGXc;A;m&^mbIE|paMb1F<_*)g177NaA0aWJa}sf
zdyf2+H{_n{j=h49iUR0k&cES9M`kv@!EZf(V0>((*49}x+q=5WLbj+(VXF}#2uSTU
z<wjuxWD@AHE(;zLCoGt$B`zzDDHs0MS6{PuDc~YSqNtcIk^)#&Q<qdRLN;fBx`S`{
z$pdPP=aI?{aGX3$BM*yuv=jrBsm>cRw}N)_loWOAHlV7!A3Gk{isdVda9k69O$TtQ
zW}%u$7y9r;;4?mUFvNy43^W@$D2?K%pW@|&5})+E|13~P!nHCSnGS~8qamm#LHiN1
zh~#A>b<I>0DNR62S#W7^s3lMhYdADLC#L7;!_v$=nzbO^@JDd8`K1^6a_TpxhyNN1
zpnr%!)jL@E?1ow}_V0a}3ttxb1DKwg@lzSw@95~X3x!Ue&Sh0qtl5ZYa3d84v`a|3
zLG^ZE3){ve7y@yA;sHu(Rnp%SR4o{kB(f&7EonZ|oW3}&6v(z)xcQcy@Tv{W_&1})
zDkzwnU>I3g)agkP7}3Xx*r}-LYAhHSx0QvcwT3W0^DrLX(}U&9`cbKd3qD<20Of8J
z+CoDl#)bvfo)&K&sa!-d16g4oG4FQ~6<t*PIOvU_TI!}oh&rYz;*9Fmq^PC|+p&nC
z$_0E;YR+J0WLnJ5O^5Xc&0&aK83lGACQxcUbjwupM{lV|2X;LYj^M9p0kjfCn6HmD
zzxeVw@8-YmaL@SDj`Y)C&w_RKNV$#?Hq=OGbLi^sF>|?2p2??G^xX0U0vRflQ04c@
zWmsYjBt^)|NNZb>%nM%V7>>P*nxCkKOX&BLHc?Y)XP<@rhlX+Jz$gS8!L<J%T&GJ3
z-{h_`^E6A)Fu95=)J%YQB#6OmaONOn0m{+6c=+M9=<V--<65XE13QU061xF<uVFxx
zXF0FVN3hct{FWYesdD}WH>a=+y$eaKL<<@~Zomf$y;OttRjg!LE>bBArWvBqs$rxw
zgWBjED&-35^%~6?usPF0ulxJ&oo_w-xk|9-d%m0)TLQrUM#BFM6kt&a=-!iu_Z@8>
ze#3b4+V>RfZI^bq+pjD*+cqKW#!#sY!x{3k`8;oH>qc9#1C~Yc0`1O8&7VSDD8+e>
zoxd9277xfIR;;q4Nv$9bYv}SWQ3Q1=ln$md2I@fr_uc(~n#D6(y$PnBf@Nl5((1P|
zuuNAWkn}#4J;Ys9Jf{567SfiPK`lIh+42w$9_qugfn})Hsi`<tI%NU0C8J_h;4@5*
zMi@N7Qi19MO<o73)cm1bl*R_)Sc3cq%_>j`r-a+dk;<eHh8`;Z1jb5Js8%beRVxVn
z7J{fw%>)pbKqc7sy?Suui#31WjlQJ%=u&Ava(3_|=nY)_LV;3w-oNR~^ZqSgaoDnz
zIcxK)i_S@JE68o#v&~XCH#Gytb&xG&QB=y%rG!BnG*SSmhax3Ol-32hxCutCA>d<w
zWIWDAD~SPQ+Bj~x`F=#ck7@4?v{(r#qcdLpS(s){(R!2_j{z3yPe|s{FlNDE7EB|9
zW>`fz+<`-fR-m`93zlVr_5{-zO+3*=J=WOP#7Km}4e^)@#<+;V_yqo5GA>VT5Td7z
zDC(K|9Iq;H@aXL*&CDPYK1A4rWG(p79DFf>?z9uyGIZ~p{?@vdIC|h%Su6nXk4Im?
z&)72v(UM1oTK<v0nengxV0ZKR*S2NWJyXE-Gtq!aO&oKRv#^{4$Q27{Z|_FF&;i>@
zspd|<NfkBSHkQ-?lEG0+@dI^X^*A{tghHo<ef#!fa%>zSKZ05RA;r6=X>+vtX_BX9
zWK<(c0$J+`U*vTa{y=mDFz$jyCMT;=4If6Sd<sU6_F<rRCA?|HBZ*y896!(i6N{lV
zO>i&`qcBv^rvd61`HNf6sl|+926`^^fJQ~aD@in}0_luEy*`FgZ7&3$MJQVkXu>s9
zNV|DFd(BpEU=BA;R>ppI8=XgMsN|#27?K=`m|6ihgWYR7pLgED((Pi#+W`Y6T(gL@
z7(~!&!~E1VOxr@XkVAV%4~oT3nlPv?knd4FJyMom)eaWY0zJ=-5<%)c&v#fTS4(*4
zft}!H6XVsJ)l6S%EHTZzpy=N)(wrM9L34Uk!I{X#iVL74e5m1sltkJ}NjOiTg&Hd1
z4jdWkM`w38Ow&cn7gV<pl3?$6rVzO+uMXZQ2S^u50pd9WRNNwt0Zso1<DE#$0<Ah_
zA2A;>-X51Y>a(reP>JSXn+_Z!hm_fYter!OXE4}q!p_++Z*_R6cBy#u1b-Yx#V%R}
z>XWt&2RVB=ETaQnG>>{PflA{}nz)O!)de@|h2JD)n1N+G$Q1G@ws)bUtrMvfaps^}
z%|k*#VmCpt1A!!My#~_R5V!o`PB0!}s(vd1R)x(A!lYGC4JJmGbM6Y$OvM42_A}IZ
ztgK6Xri{hHXD&DkNO@2W_8?u}fP+H?oUmpqT9Xl_XDU=tdle9TN9PpUs7wJJgEUiK
zulg44KRhSVs%i*X?N}1mFVyTKHRVRe1F<4*8ChggHXJLZ_yDe%M%u}tO*q(mQV*XN
z4Qj4AZo9}FhiTzDk)z1lG%WCll%W6;OeFf$pyyIF1sNQH#av{}9=K5-0>2&e(^EKN
z7|0d#Xz%Pods{cM9eHg8h@RyDy{mw(KH$rrxgF)o6nq>(Dcld+$*Y{+;8_@)qW%m_
zGo$=FA$|!s5sx6#K`0C^C<fpzgh8VWiN_`3MN=q8_hIx<8#>xMQS9hLr4;EwR?MW~
z5uBJr)k+nkV<il1>c`BmgxAnJ0j(HP=asT0e%~-v$h(BjoeU+^$dbu2njc}fu(^W_
zHOg3NtjgF}zs14i!-TmKGVml&fF-eLWLsG{R-2mi)C%f~9woVeZRV76NExWsuyQbs
zIsc%VIhrPA-~%X46;Ym<$B1<V>1-OgVjJ4pi|AYKV0J#jRo~o+sqry@&11ZJD{Qv_
zgWD>QGY$Iu91J5Plmbu&U}(OPGN3B{O9DVcn__N*3+haAAY=&JYD2ws7@6=O9^5Ih
zdi{y$?&?<=45ehX>I~+~qnMeRz`9gFrVcGbZJw+L4Sz~7Kh+!(Z~L+|nx*g6pcs{~
z9V?H>r%B|tx(0OX%cild+Y%`jnL&f<lE-ge?4zmxi)TqD*HD5^nHDTN1JAF)k7@{6
zQ|;#_L392IgvqGQdz3On^C$&JVZuPl>_l1)Ae?VUd2R+{M{Ml8*QbpkVA&odMlo5x
z6Q+|=xjvbDBNjgSf73|A;u%!~U{Z~Pre<8_0u(x@$C83v04HuZbHSJo#)+#-<c|o`
z-i<1K+_T%mVHz36LbL)8t)N8Hl2B?K!hpXS27gvO;Y3#fDLzn{Y{DpBa(z@FO0f(P
zK-Cb*G$ND3HEk4}3<mQVtZ%d67$L%%;9(>32)D$O$pX-9Zo@EW<*6sg6=aMwTv>o0
zHQ@U-grZ5q9l_Mj&OR*ez%p|X!dJ>riz+BL#^N@u99*NQ%(^gYD0?%gMPuL&we^}R
z=AhM2?<WgDuQPZGCiQ#A{BK>kB*`R`&2_g94I^N%sEtGcLIw*FG2#rSRcG;3>n5al
z4=lf^5?{e;@WqUpFJB2~;72ReZ;$6ZCx;?P#|@6^P!Lg)*+h~XCKHPN1PfW$MrS&Q
zu8fQJxFxAY>1N=d(TIqZ@Z_)n$)QF#QSUv)0BUq7ZIwmA6LkSw$fk2j_|zgEgmpww
z6Ojy*57w*DQSdD7@=RNQ2eOG)G=V5+L6X7{k<;o?rj!nYJ4*1DQQ($A?jS8JBMrlH
zX$(}{53G|k<pNZtj-;>W`B6i*p|*!ksedF_r6z}x&v#8U!wEFyxUO?Z;zQUlOb3>q
zM=I5+dHwWh3)=!Dl`y4rl(z`e;%HPto^mW?vKBQFa$++TQXO!aiM(wp=1(#p+owul
z%cA~+#gXVwo-Jbxig#7yEdz#PM+#@3JBUiv!@<2X7#*%5XmYq#8Y!nuHA(tm9bwo&
zMEkl+5_A9of=PXtG!o0~)XypRp?7`I`~%txjQoF&o1EIqv#^XbH|>mio>BUzB5qxI
zq~Q#ViG?xaOl1O;1yBGPD(hg7!YbCVewj_tr^4%L)E(^ssIe$clSwUG3qGDat>YX@
zMZp6<P&@_O;WRiKKm5_B;o1e9e(H0uabqtgCK{?~#5QS)z~by=N>!UQ9jt1gUL|J2
zLR|5r*)xbr-*KUYqo*f_wvIHYKCo<MJLYF<IIw>fhYprdD|66bKgZ4^5>5C4L7)w#
z1d(VF#1tz63CE{l)$yQzZN`-g;1*1Z`c(!%rk}>Qq+_y5?1*E&nudXse41(ZAc@;*
zgULv-l9eb3|Do(b5@$e<99IgU8XfibS_Z{AjvjZfFbjc{Yh&NugUYR~U%yeYf9YGU
zzWUpknA#27Oylb74&%WcTXnu~*fGATcS?<7W{}S~yoQZ>gZ4&!lDPoAT2wGVTA*x!
zqI|Ui(74oWE{!wJ%3|BeeHb}X#=bqXm>O#!5-GS&1}-Zij9SVvgybFs1&-t*D5*{?
zVlrZ!k~xY2DD6zE8h~Nuq2|6Nf?raWRfVJ&7hqI+m9*aVcHx{k%4ZYpT3H53N<p}-
zwhVg9QPsTwZkVcbmlQ{h95My6Sr-pKFof%W`bnj@M-E?rleV3M!^02Z;Lu$t=2pQV
zYa@Y1bq@LVyyiqGZXi(*7-*n0O%Ef%RB8szQJ^3F<Wc}BBbE$<Uf3l^k|`z3U6Upn
zH5!FvVC}jttXkWS>4_>1?4QH%kt&*X%Ad2yq%vyNkurpluPp+>rKAiBk)uzhUIMD3
z5&WBiWfd1!|I%tgd_Kwo=(j;b!5X+yFEOa%tYdjWLxag3(SQIo@0?ObOQnjW0FkJp
z2^#WXpwLbda`Etk`*Hn^pH+Hqn^_z<d;>;~KA>1m*-RHqP>{)ywsUC95lhL?45E13
zd&NB<ULdEja0Y4(8<o277v}-UCr28X0Ov75QPsvNAs88%#mr0vD_3-)y@PBchv$VV
zFzf0mqIaN(YPE^sBV`=iU&ibt?F?<ea&oY&WYQQ}0*c~@(4kR6T8$J48fHq}sJcft
za?ZLjP4ml>MiZqB%4Kskdw2oAh)dQgprf8}YU(ryF19J4rCo$oD5;d&r}pzSh7KIU
zniUls+J6|g-}7}Cl=d3bSVp^ybb?6(ra?41R~5n>GXs}4mtuxy{w9`*;u8WFsb&yS
zgDpq3>7wqF**kvw$Q`$R11a*S5M0m0)A;!8d=2~dO<;1og!ax11_nCN)ty(hcVZJ!
z%a(1~*u13|Cv5D%<U|eo_LMMkq^WlcP(1+z-Rf1H5Yp9Zr?gYy`E-j1059a;F&$lT
z^y3{wV?rzR-XcqZ8lgTzC+u;g5N~S}*Q_aqpiIEF3z(ao!Pma_Pbx;S33#Hwlh8tL
zDy{*gqVzlopDdLDLlFOgI3y}VGL)axq*29(WC&;^EDcKcQm6*RM?QYXaY_TDNKhpt
z{)?^|(Z<%S?pCXIV!Vu_N9Qp$Sw^9lMt^@hdVAWC$+>D;R-+cE4xpZ%0#>YQ!^lV(
zKfZb*&b8I`inn-+H=0mr9tC`)1TpNZ8A$P7M2kE{HH~YrxCg!5byTmn51`M`L7j3l
zG1o$WmwJOx10QMb4EJEE&kr@^tV+w20Z=SL0F|SroPZfBq$K{LCY9+;>NG!q5zNb}
z{6(u@6_kh-1QYeZK`RWKc(N&gfM_c8m535?HbC@h*RgThsjD$JTgAxeEG8z(C|5j`
zN@F;Dct%-+!Txp>+tP|H>-!N}ErEf-0(u847(LPuG;U6X+p6bOD*&a>G?!q3L7=LC
zG3dX9vQ7n<ghjlRjL2fVR!;>`_CF~;#_3r+UOt}PNB>6wr^---p;k7z30nPzp;tOp
z88w+@f$<!ZC3O(0w#$u)v1(WQnEOc21qvzTXwcwj%8j3N3Lv9EU-w0}YjQDZb+@<Y
zP%P%KYE=`H(`8JI&GY%WrZ_w_rRdzNR&`<B+CDW;kUob>#3nVz#qDK!Hx8!CysF(I
zCTc9$@de)D;@=Cgpjv~97$O!<cxlH{5)s4!rUsi961BJ&j^1LbS_gfM!XlLANctiY
z08mBuv>(diNs!r($!_YNhG`JPIl&gxrXth_$<ZP#AR-#;lT87HR}KOqRca~}1#i^R
zyLbN#jvSsu|3Eti`a00wkw&4A!m_~*F*RAi<YWm`Q#FiF%wyf!UY)upsI98E6V9%X
zF?Gc5Shb+X%(28hD9uskmb8fCxg|mBBIts+ry;hz3z^GeKjT92M!%1~TV)9en@Ew9
z;(yne1DW|)xbccksISR6s4OEn0m7a2=Gn2q(6f_ij;K$YOGMO5lu+oO;8{RY4Txl`
zLi+<qE(OH`3rqn{ee)igjY*6jokv$s9?J&W(bk^D@?{+u7-+-nY;~bvLSgX&GdBs^
z$n@()sEHnldDlpvzKAg^m--JA_L?@`i+k_=Y?l%i0>eeZs<t$78oMA!r7g<pBxxv}
zha`BB+QSy;?@9Qm5y-^8Xrx$wW=t@QC%wl+SIGqhf;7#J_7n(3Kw~GKToxb{jakas
z)pb%bAb$?5Sl$K4HZeLnkNNpJhK8nabaW0K9T^NR>q1vo4&B`a)s{stYAjAo#Zs3&
zF0CoSE=K73h)1$5X+>Y?Qqm4yDFNl(i>)Xu_V)|hSCQ{lfj*tL9&^3;9ScU`n1vX}
zA&Qzp)1c$Ep7b`v`K3xmV?856nkr8vv50aRs!>#JIiqJ;kp+<O!dhwJd!G0fK%ZbB
zDpReX0%mq7y;n?NRf+|c4R)cwzYSB<6$~Gl#@uWj<Ktz_%+ydQq|w*kj=sJkGHC~4
z7^!~2<fp6rdr4_TuX?QzOtsU*L6)w>EB0U#HzX@ti!`<s(c(-4-MA79T3MW!)0-?z
z4Fx8@QdyRmx2m68Xn{&TFLo3v)Td5p%KK<8N!(|l-mEvxQajmFHlW5KlHFv&l_tC(
zL@R1k@no|AzMMN!^QLGPt}?r&QZwF^iNW)9ir3rSj^6G9D&;zcRYp+3%xn#_vvnLg
zG=<*YB37^JhGo;x)}P-tb)f-OJ*h^&(ezI>rAny`DZxS@u7#fT@aZld^(k>VNJsYC
zH&eAof9z6r?=fy6)(j%JC!dnUjmNwv)(O?|qqItUkL1w0p|?epv`3!mrBr9iX|vTv
z(1I71CX?45kK+;S81kzRfzouTvA1L~D$5BmJyF4q`;MxSahVLkwhTcKsGj>mTOQlC
zt-x7NTZa=i_92^d&}jPD{qRxj-aQJFHi(J=oMeTn)wQJ0Y$2;t8`mvX{?sdDd%ToR
zsVUyEC5YKM2}@9~_E@Q6&#j8XaU7y<am#nI;`QT%Hl7GJejO=_YJjERphT^0P;5rx
zEsWz9G_9b72T)C;5!7k8_Arj)@hB@mvQ)xwyne%{0>1`BS|R<+`|lXV_rA3oyC0fB
z5QeHIZduf+6Qb3M)MgPI)(_&Wv)19nZG-6Rr(uwUs_9RTF?`iMl=$JrZkr|h=c=I_
z$+;wF6%U7wUA`vdEMf%uMOuI~K6WAdkNd)CX(khElFy4*>H^PiK?mbWAjyXC3nOCG
zbO5qus_|2qnK*Zd+g_4RW1`426x#}X-W!G|XXAbV`Q)(xbd>zNKRz~l8)t$BnFMN_
z%lvE|xBc`mzWc3*aMvBfs8w2UT@$u#sXDz!z0cgjvSmHWB5YXSkARx!2rP+xx87zY
zxsTICI+7y&Lh&!2WEvNL^mrQGO{9XdpP_0&<&!bn_t<|~h|uE;7Uy$u8(3limcDCY
z@CB{<c#|aZPUP#8n=1Zj=vP|{O<bYYwZ6Vy^sY4Qp{cuS0<)?o;CLO!K>@TC2r)f5
zH2<G}SFev`r7#+SXsH2Ega_1XE!=z8D6abUF5Gba0Tl#Vwt;k-5HwvjRvh}+pd`Lq
zt#0k7b(9|8)Jj#UUjhv;MFRC%C2eJDtuDo7uz1!BCFTVS5@WxrSv7es9!s<Ez9n$q
zl9r9+<vO6$D5YNI@viAhr=G;SsMCGM?m{us<KJ`l0duVS(@*Lt3CAY`IIesEI;zoa
z?>#*Cg)`RlyzxTG?MfiLG?%9G-?nY2)xCGm6o!W8(A$^C+I5{+zC4di+E)Gkq3RaW
zYN{llF?vnxiXE=1rX@ajVN9uB(8|A4S`|ZciNRek-Etux*DGIL=OwOVG4PL{NK#Ez
z($`%5C6wP|EJ6HyJS|NVNn*`eH2hQ|FzD;Ksy<R<O4P&yyLOB5x$9BI9e<DGd>prG
zU>pmGY5zNyh>6B$R&-qPI_`9NUQmHaY&dDD3ZA7n7!u=SWsHwikuNw{v7#NTR<)z8
zjXHZdd^I&A3C`oabYfvIwvf{XRB`7H4W!a5S#1-e-=-&xEaVb`O3HC~xMUEOjwRy>
z=S%Pb!t(Vtf3YH}WlbnvyyA7|Gbd>t13|~irtuK1g-WM&s!1dh75xX1k49912*X;?
zoG6YpzVZ4{mgbM=>R&j;<995ce41~2*<k(^Uu`d(K?JW_gwQr=I2x64)m}onqDMSD
z>bA8V6J6a|tXx$@wHAmyyDPA58V{jNWgJUu?48QLsv<~`uqp{JQo$7OpY|+DTgdmB
zIC`*(Mr9n$>LfzilxJ~Z&BEy}LavLbAsvK6>!)K^v-r*hMbPyr%~VpKy`Vt}YN-Mh
zm7WT<lPZx;e26IYX^M5|O{R~QzWTvRbnBII7<t?!gvUw=I0{`|&iNnj$v^)UPHH)P
z>DQzI+ca!W1P--jOnk2pGnz3WNU(+=Hqip)n?&z1fkT&pwa}F^aFZvLFLf_D+^mJd
zpo!r<6|DfZ89`h_U9LzX$@qThqFc%qIp#Mh<x@>&%7r9zaAKugnx-bGq_R#za3Zr%
zB{33B!352!VK#i<t~K{zrg_cFYvO^g9dE%Ob8e5#v3ON&wqko{>VnVp<SyD~rn=CQ
z9_=1wnx?~vXb~3!)KCYSi=qXuEyW_VyC8%G-oI+}RID8i!!l_UrM4{8Xp*y#>oc?h
zRL9V$%}~KP#sl<9TZrp_re=`1jYVvKQ9Bm94E3pKs+t0H^rVn@cSvF~>DAs6Q51x<
z+D*aIBCMg|9YU#f&&O)v{eK&(y;2@qsXWGCms~u9r`Wm+yED)EOlSU?D`4kBUwA$@
zY+JQ+C9E7~2`aZHD_Vng$!Izy_Jzow6o8mG>M;>EO`23~fCA4<!9b>)V|cH&0Hgqd
zDCWxllNC5Nu2)H+f}s;EF?pPf%}o?U6`rW%yU+xpK_pEhr|*a&#c&RpK<F?t&BBO#
ztx42d`*zfVT_3HBeOE<ly!6jrqvL-Z#~|<*9ZT(MB${&1wMS}0>t-7_y{0>N(Z}0!
z=VYZ}gnm%>4a2rMDFPF;rL@NQlA@Vz9$x@s7BIYp*elK*m&|3M`9MTV)2Ue!-m`^j
z9~EZQB-13xNN|S*Za|DFEI`6BX+*s_u2IJWFCw8=dnAL93mF=;t6{`l5!6s=?X6UU
zhdxn@_I@Fd6GKV4=<yJK@{Nz<vGfPKshn}*ANJ*+_wlyeb~`W~KM<|ZvPcoKf`U86
zlTku4kF^5I)Ek;|9aF<p9mt{)<wV0aQRp_1?&KKSSwX!vCcMU+TAh0H05zO-!L!5w
zPTWHFGvjwuUY96WT>g!*2@xsQGMN*fGt;yLcUjOv!#^BWS`U7q7ViCbPmbJANXN0)
zKz;CIeesX^_Q&z~*$a@$7OgYh-IKleeYxz32u#}-G7K#%Wm_gSXqtL}S{(Ex=3Zw4
zqy#*69|ld^;)ZD`hA$0dO0_W@+*wAWHZGd=SxDLmP&Jq&kYel#RQeYqG>ei~Y+&Us
z68u0hlWC*u7QHf5T|UxEi_k;MA4T2Yds8)d_@j+z|Bq;|uwVY0AHU-Xpa8%4qA+9%
zMQi)pyK|TRZ8oz7p<($nV#+dI+p@E2n-6NE)0u;@5C9sc#VL4HaRYUQ(O@27p>u@^
z8W(ur-V&OP3DK<2s6IoYnClh2WW^_S;>1(L)4_B+M@kZ?U{1&=Bp#p*H_d3L^k5bh
zf7iWbZ|6TXqM>U9N;5zI`xbxW6XAFQDZnpQ1de>MV4e1k?(D_yBSjFF8%8qnO)F)a
z77c>X10a;ySIS^5NheLUD>-fbIk4G+k&@VbYYDB^gz)OKx(AWEe&YRm7gIuo)W=Gp
zO+Dr8)R3b5I*ia}cABd}(IwQpgX6W}fsfaMJzoqlJ$|f&pE#@iNumJ1OcAn$oOSXW
zy0aI5D3?BwODjz~^LWg1Y{$-WYQ9ibK=laF>ZiH_m7Yz6zJm*1<6!tefCp}>AdIF&
zqc#m8J=JKU_mLA^NA1Zh4iY}if~VO9e#j*YZNsq*Y1%TZqt@DAsd~FURgd<5(U;?U
z^}O?6eC|)=;|Z()ztlD4a>hw-ZO@$hzG7y(%j`UL<kq<9*tV77G!w{BDIj$Qn_!WF
zTu&aCyxzeNJ~NH!u^J?rs8z-VDF8&E1h0F>qqqY(R2#k11I}#IlBUZgZFzeb<>s!h
zRfAn0Z^@B+_1LFhe4bC1<4K?Zzf2L_RN6S<vX0dG|J0T{y~nV-$TK%6i?f}a>DU=g
z10!i(V6i`kFbpuh{~&~HsvXKbZ$`}~(5syCbT2mV2rcfK795ueAI;WLR9ic*t_HjR
zr5PQ$S)yM1`Ey!4uP58_BvOE1w$dys#n)ck=A8N7w#+%Fx~b(5h9M$Ew3V}I*%>Of
z@Ss&k7*&<9$-HY+&QsAlQxnGx+hiu~&jjBeN4dG<j#{wm6U}J&x(Joo|NR`EyvLJJ
z0e+bf7_(Ua#=L#v>kFyvZ^@=Mx|ZFc*f}jx^@6A&)D|vM4PfUcGr7fFn<lx4u%Xhn
zn!oq@YOwF$o8i!pBOSp%X@a@mLk0NX1mn0aA3P;%Z+c_KSos{+9_%)FQIWdTi~-ed
zUWXry?XN}qe^?KOzU7OF`-R$Y=2w08@7D1<pa8#0U}V+{-3H4KaAxJHO;yO&Oem}4
zw2yf*yYqkljHiyLj;D^Nj;D^Nj;D^Nj^C~0{|CJ}5@wf8O{f3>002ovPDHLkV1mu<
Bd07Ae

literal 15007
zcmai5RaYELkj35I-66QU6WrZBxCIRs+}$;}dvN!`6Wn!Rg1Zb1u;2cGJ^RpIuXXBF
zRaf7-H&#PU0Ud<|1quoZUGb}|)_*qie-9GEfA^@k<qQ;*u$`i;l#bu#Wxs!c&6+L<
zEcQG=_ybsE_*SY_qhsXKkd@eCLrQAgLE@W_^CuMjJ0`yctljx3<}6@Dl84tAQzpdV
zhrwooCbTMPf{Qb4cIp?y_=XCdG)In=BExR``s<w^C&|w=+}x~fEIf5A=&Gh6)6)Qe
zANKA1`%c^YypX%Msj2?jiueC*K3|mwhOfUgD_gwW1t<OBSfjt{Efug>C<;OmU=ghk
z{XpGte@1AYF&p27w9i~^KE{~3Xf&?o=fa)#nw}Gq3hbsgP4wtG`!u}#(;I$>!`Icl
z4IK^@u=q+zKL~#_)n=jcc6SL9^Gg@s3pihWTyz2_?R8MlHF1U(_lp-^FI@cS<ggHK
z$`Ey%?c1Zfwp8(S!LKXTlZAA(cZ2$$?J@eEmV<p3cJtw={&VQ!v)c{or)eeq3!jsj
z1n|rC-A(8(-%w{P<oXyYD`D{@sxRo&i?@DyUSD5-Y%T!87TV2OXW!m*Bo}YZ3fIhU
z`c(sRS086#uKU-oLBVFaiv0P)j8<mYv+1=Tn!2BBh?pO%cth+y8#|(hQV+!k2<x`S
zVb`W!pt*@nN?89PqFw|^KClFIa?CYEu#}-+|0EFFDIk6PyEDPBcM_@JUa%?Kf!I36
zrD|q%X(r0NK?Nwi?fN=sX#<t-1#}V|eW}8!d(1EJ{N{J52^NW8LvyHFV3rFdk9ks$
z2g!oLYfms2{{?xc|4r(7!4?)tl<ubadg~<*{jil17VO$0CBH&l%kFQSzW+6078?kk
zvJpGIq5mCalP&a6E@kiMYIhX|`8C%wU)vgw*Pc1St0?ymBa;`PriR>jIJR{IA49m8
zCNA)ZW~KPYaps;lJZ3JdCEN7z+M{3SuD9>|58AtUn&FgM*ckYhhWq<KOLm2qdo}o6
zxyQxi_s9r|x4e1l!JxQiv;&SPh|r$fE=aXVTekok*C2ng_XY1P<n9=D@GcgJNx_}H
z#NU-bN(HtE3fk%gJig~)-(T|yfvh?8HhnuI6Z{ok21S7jZ^8FX$+dAj69}s(?jA?J
z@y9Kg68E#$a@k(EfMeO<=M&?AaHeNsuHl_C>u4gLc=GNTPJJp!NC#lB`ew@qCU)hh
z;fuj_83$s?kNrr(V1J0G3ru&xNT=pin|xTWj%mbK!O!ZCswBvL#Al+^M}6x0?Q`vz
zr3PAon>c;tT~g3n4@25u|8G?b_V9d0r`2sEUYCQ(+mVs%4qb^KZ6a*XLO(o^0ok@R
z<^(bWvq9Uj5ctT2L%<--i26GLmlT=4wNsn#L0oZIGRuYXcB$Jo!q-4ZWyGMZDk_-4
zz~F`Zdj0gFf$(mNBQ!88HjqF@9CeJy;Dye>y$w)6^*2*881xp;^)ue71^w=MyZIgz
zjOf#AdcnU(g`e^Q4m!VvK+C*DBj0h*1sXyr#v6>*HQs~Fow$HA_-kO0+ml-6Qk*^(
zVh7Qf=CO#`<|k_M#UXZYe&#qb5JwGzoUG3&5ff-DJN+ewEeQe^n4A?s{y_c*IVK5&
zGUH@<+4rOkxw0$ly}hNO{sq#3I6Ylj`&B#*p(H1p!c=2EWRJt`{Q4MK{g4(ecB`IO
z$4ef^qLY{rCEceH-rEEk^<Hg^B@aF`Xhg^KI|~m6Nz4<9hjG=mbn;8kC7DM>zq7lh
zt+Ya;T|B*?U#%lQiRcz0wh*p@J)sNT^b|o00}~c$)vR%oWof`n8%1FWf1sFOQ{R#J
z<d1<WOwvfEI1~0l4%DFM2M-vebCVs?eDHj}TktoKE5!q5i5)(_WLWSrBx9W_pDc`q
zP=3G!3S5tKXD?6;vxxSu&dq|{37G_XmsBzx>Jh%-9azspQ?I`;Ps#>sJZ-W?Ub*^e
zD=psoUnU7?uaKrs;cOMde5dR^R@#Ds`M25bMwX!R8?)RzM>W}$LLy{9&8)PzU$(I6
zj3~}*bZ$))khJD<wDnqf({Fw<81%~g@!Bne1$P;-0A|#`%dL-GCmsl~PcMFdG5zMx
zGx&+Cep~$MLxi1A^!1*9H_iJ)E=A(Gw~PiFrA#V{v^eO=UIC}m{d8m07Ki5weLrX6
zd&3)s^~g1j_kg#b+4_ROO!Jc};@vR}|M=Z|;I;Lt!n4Pu3nle)iR(i@MKAqme#elA
zL|36xDVuumBPX9z3!om0>(n-F(hOa|a8yBpB&GMG!LRtBGGD9-@=m8<m)ExUoR-2t
zh&>QWq^V1Z5UEAhn;oSvaC6cBj6){UF=<|c?%p{hK9?;Jv`n?esAy`Pl>|YpiDiur
z43}DIp$<kB*m;#wk|6PV+sX_dRpPVXDB#firqg};(c9JAG<5X&LX!?h1bqpFf*S8R
z5EFq3zO{x&*bN|^4?(TXYJOvK3z;!eqE(ew8!K=ci)q(K0=MNGW8ovq@ns#Pas(c(
zw^08K3ZU1KEPea$wV`ysP?(iB+5pSFLu`8jvUe5)h_H1shbPXvE>|h(KWVwH2Pun)
zqX$LKP6cj;vQj$V9CRj_9^8)iuhj2lB;G(|PlhnGf{_Wh!51Ig*N`Wid^gr3B`5a)
zfheb+DB>T+Y?IAa`}@2LLHs8&gU0rB?`USnG{GN{36o$zF)SHA^7z|7*&30~qgck^
z)($ehW;EIxYUqFXz35!w<=3r#5$fzTfrc-31=%9MXvuo|kj%pZD?0sAJ54@EZN#ze
zKYT+IBNmcbsx=bPlamCKGN<9bYZepRy*2vYnTLFcIWG#UITUkRwn^1+qm3e30v)PD
z5MH>?o`!&H7S}xg%*AKCLITnjE^9QDF%87jUr-I-P;(~ZsY9-;HN72G1P$^NI-o@#
z{w)6NN5ki|u_z{(A$8-zfrS3bOA%r(zXx>(6ShBb6weDdYHBJyI(6UY6*JsJkN((e
zxIjZ66sRT3hcZVbL`{wM@^d9-ODk;L|DI5?Wj^UNjXux}g5pEIMW7HtDTdh0j_oou
zZ2$ooY9&4h4VRMxeZ{E@-|s0ujWGwGbaL$((B|+@1G_`#voSJ-6?CiHH#GP@X4+`Y
z1-W^@r*Cw+Js*oh<D7N)xhh6hC@YA^)0(p<L4fB*J%M%(EkS(Me%y~zu4ebx7jH1T
zw@sN_ZBaYg)2K^vZqmyU^5nI;ehw-xV}2^zJQ4Y!ex4ki??at8%9MTSCS;7ml(cB}
zGQrQ|G!pOk(Cya!Ik{yyZIiiv_0gCg{*=XakzFRN6c&wCcc5)2{FdrGW2mTT^9)u3
zL@XPsxs20k6R~*#&y$)kp?rF|S4oD^>yNQ5!+chYvF|Ti_w_-1RB;YjT@|27=3rmK
zrcd^TOT$s~Ii?VaD+fK?gI<Fe+Uf;KZ-gSEsKHvH*?opudz7)!x0kHq?&#u=jzYg{
zca*F#bjZlpq0hHy3}uQR+jk<x?6+wwKMU!D&a43T6$pDUEY0Zh@iF9Ghd-%W7|hHL
ztxGuEPHZrQn*@r*oSI{hjFqVO9tO;I-CZ!vaP!(-j&Y5ICGf@PLdkO}ORvR9yFY@G
z&f~Kb7%~Tmb?sQB+h7LRUyuTE4~3T*ehI^e_!@z2F8)5QaeCXp{{6|d`?=(M|L$u7
zd!~uKOkZ-OE)JiG>pxG<ej~uh9b0#bvv3dw$gV&#&tigXOio~#-=hE8%ncdv1R!!+
z-PBf(^j^(MyX8`X|DZdM<A{u(Z?9D|iR*RbJhxnatZ96hMFY`8eB{9pAzM2VlBNB+
znvbS%C%VtPB@MA`(NBGQ(Gbc2k~LRr&rkl+qomJwTDN@{QUN+=JFZ_NEw!FDO|91!
zL){r$wS<e{8ENqutl&F|su>Uh+bGhu<9`j)*JWVgt2?Ec7>(UAARCp&+~_vI`=X~Z
zI~j5&mecq~+%<pKv6Wvh0Ik(dmhVin=-EzoUgmam^7eth@hn%sO8TTeTw@e=_YJ`W
z{#&Sg7(YG@6#*~88XRZ{@kXgW1F@uPIbNJNg%ABI=#rn}2LujOD!hu~h?aSPW-fx`
z-d9P)b)OWJm9}n31aAF)0K1!4;6ZXtOaXr5aNP+gHgx3t20s;^#I%-{$`MZ!@?qyd
zO}XFGh%@+n)O5V|d596FN}r+4TW4?3dCMf>*L2Xai*@Z>>s8YE6yVx@FLL_Ym}BiI
zC{(GUmuUxowzTi~%iG<1d_`=aq=rNz(Dc^(TN3JHn{*J&$3;2F$w^GXyz}SZ><+D*
z(<6b8OV|e|3Q)S+N9UVU;BA7FKA9;$uubP+0mg|wx8Gu;=_WK4-lV@mqm#q+veQ%%
zzvCIy<x#D6>7=gNCGYSMlxa~uGO*`xhZ|yefKQ4Ir#P%I&=HyM3&DczwZagz4MYh<
zKCC=E%E%`}=9QvN`HGz_%0QrniYXgASz<?x_ri1A=Y&|0e*vl-oNx1Y4^0kQ>b#{j
zhj;-x68>&j57O&gr_I!u*4_{vvH)-*_D=cg<%I>QU*}hLvXQ};n-ax=H49|qpf8^X
zP@hku_!Mur<4FZ2ue!(fA62#?MA&e#?c~cd+g(qiCiiBeis!@>_`i`|Ng#ONbW0Eh
zvWSAl(jZQuyg#F8G|%nR){>+|Q68BOmZ~zF_D)`=gM^;0<~-Jhb^<?FeQ_qa<S(2n
zWO`wcgMq5_R~uQAL}~x_TT=&R4}1-vS#dy0xi+4PHc9uX9QRgl4U-;3H;<JElOIfW
zCy^9IKd_%(8Gb@P5+sTmd+klm`(koxdXh;nuOn^a{i6f?{-ym(_fJ%*svNDH_6`U3
zS2*5bSql=2S}JcTMzjPeYlH!D1ob`Cg}#kDAlJfHXMdvc$ob8;+E$$5Iu_py5(r?@
z_3)}NEFhhzPI(pFI%aK7&|IZ=0LOU`*T>C0c^FGh5OV{MFdtd82No3l&?0aWGy7sj
z9{xAK`*F^9i7a6w1VHz-7%CS^Q2+{mcr9%|nSV)}3MLlc!{Si(Wf6{4N<Okay19lE
zn!A>_(xMgvj2PL!MfSEJxI1v%AA#<G`jXdocfM!;a+z!%O&KVL8SF0hd|jQYs_x?j
zpCX}uV~6h?3dZiTrS~zwj^<be`n`uY={8SLF~r^?KDzoihoqcL<dh-8*-Mh{SK{fy
zdJq3d?pFI#+TlWU4i}4qDOvh}cQe&LkKARA1%wl!`*U3aXK6}Y6sD5wKKg7-@!o9R
z&}iv&B9C#0Lo;GC%EQAglP#jcdk=cxH#=b5TN(d*q-s`soLzGdx@RVgE1K6WuCs<)
zWG_@r7@m<m%1efTTcCBRG03>$6cq_&HdMbivEGlgAW^33Q1DY3cXlbMY~OULNH#;4
zJG-lDRADhQAZ)2bQicm6-CHn3Oj}lPZ4bdo2dhf@gi{$)_sYF&<JBksdLx;fji;6w
zZzrq1kO}pey9o(qkqNTPxemI)`#c5RLsq!d#j;_S40YL*B?s7`!Q3DYyZ3>&(CDUF
zgqtr4?tfE`kCjj36s3D7kmeUUyfs8o3L4P0tM%5G0oX$EO)^0^42-0+I;=WJ3>8jq
zOgW*IEF_F0{HL03iy{1KU8}27jo*kG^#t#yIi)O`n`{7faS?LL0~|n|PWO(<d+jY&
z=RM}Yi=`?q-T0gchkq+K;OsZ%cg0i*p{2yR8JyG*ar8iDfZMn-4tX02%TT!#DZUr9
zQwSJNP4P&}3hq%{$cC5NwRQ~{<E0cbFqEg2%Xdt1Cl%{uFCo?DftneR+fu`#J!eVc
ziNnS7Ku95Jplo4vXwd9I^O7~rk!oc%TpdOTgSkQDXOG<aj_2ji9ZXag%`_drjVp%d
zXxQ;X(3fR$<8PJU#Y&JOb%vu71$L1b?%lRxJUZwZw+rhoH#)FwsNWQrp=xdgajb?K
zwWakUg5x5%4w@d;US?bX8=TI3Z>#YQbwXHctMEm43Ru$wpdXrWtQZwJE@_b$0AFfk
zAUpAc>TR4!Ur5H_n54H2WYk?n^r+n9<ild&mf&#d8;c+Fw!3)Iu<XQgwL;M&hX>GB
zY9@&t0&{BuVoM+X%mh3YPqkdnGI1nQ(6B{$r6P^VW8wN>9WUrR5Gsfh$_2j#<cagw
z*}+Zwdq6U&%oYDMo^g5nELp@de&uiVw_qg==;SuomE_-2ZXo6qhmDT1tUUO}o5>V+
z<40!O6aRcuc^>dGiTjCfpNB+^b##fwuaY2AHic|KGR16RTKb%*TxTrTLSqw$g$GAE
zq9HNMl#n)z%QYuddE^!Q7NY?`c-Vw#k=Hq7;JfDJANrb7U{PomaE8$tQnk3t$*S-%
z!hFo?3OA4ZTyFqEwJggnG<LPz>N(%wY)<^RnuCkbspAxa=P2}C&R4p~V~T6BfT0G2
z8OV^a`YrecMFoNpIx_d>W-<q<X8m;FIk2S&oT1Fp4F(fM`Ei`th^k^3I_j~JWT=@W
z4dC*5oQ+@~n}<IfhGSgn==Q#EYxL#5x%MP`2kqF5lF;Dt+GhNH6;e}6a1W>*IgKTb
zVkFhka88l)*2~#U^8KnXlWa>f7<Bh9?g(mlx<Jz58ED9Umq_=wSIYkj<;wwPdYh?A
z^2l;IXeGVKuIy(|`RdnHy0k0;t7?>8dMP)KFzsUZ%jQ|$%Jt@xF9~F#L*)ZVM9X7v
za?K^wo=W@p=WwLRQUMR04qp&plv|<iu!u&{x2)zfY1TPnps(><{I34>7w30w&&V#9
zb6+syqdwq8{bMC@HG^#$TutZTrQ#X3IpU?w^eP}DKl)eWkyO~=9{79u+mf{lhAA4D
zCVopF75l549uG$INGZDH%6@*-<2z;wGoIkBXW^!b63M-E=>AUwxNGVpvE3hil|a$_
z8`v~%o$$J!3LZquawfeWQbl67=PwXmGa4os;*<a@I(RNP3THM&UkYB$G8BH;Ty8iy
z00_OQ-yx1;j*giEgxBD2w)NSx(R|{nrZS(>k|jNlgOs3<6zhdOEJTefNe$2dplh->
z*)}V$dx+s(f5%ec(UzFmxYZ^T=9w;2@0(s*;9t^HECiS*-GH)E>$SMQ>X|g!CUA0l
z=Ghk+Og^qXEafC&WB2Lnz$>Jw#9AxhiS+f1kq)K&)<Qu-wLp<hpw3ei*SjFMtV~ut
zc02m|o=jEt6`L-<D_|E{svNF%9nUL{O8zgDv)a@%Qf@2fI%uP%W*YR#HJ2lhd0FxN
zXUU6@mWRhC9IeGbMJfemb~costt7HfI-$xadTQOn2Zy@~y#%{eD%Z0n|7!Q#|5;$P
zbI?ET8r&jrf;1QLIm8{gSHcg$-+_9D`H?0c<739!ar^=f`ze{5FfcpN)L?5tCDXD!
z{vaE%Mpu7EJ~od#$)!nFMM@>ckZ3Ws-$%cPhzIYx$>1N%hEB-E`+^Xa99UQ>6#ZSQ
z5lv7dUC`zyVwsDcvF9<CvnEo!g=e$vpHxg9-hv9l`1OrPGlbVG%TjUG37eP};ExCh
zNwu1^i*R=(AJ%w^w<3}VF3N_aLjY2J)maJmsh}7FE&j|vcAbusA(Pziz>;IKH^uh!
zd1mMS!|qTYI(PWUyawH=D|<f(a*^K!Ql1+Y9D;Y8@4gj%5}76$Zf_2gTCi&+qcom>
z?UEuwr(5)&c5;=eL)dTu>Uox})eyp;dy*OX)Y{xOt$9eYIQcZ8V`9A0SV&T4NWD}5
zsTNcO1hmFHdPlhL0(;USpXa%;EY-jmm(WxE=`~4MA`wI$zKTVST6Ei<MwPW+TI#_P
zrnoG+)yt7aGC8$Kxmtj=B=q|!u?4TJ)W|ndc4RR5Z?G;pyt&q2`9)4whG#f?_2*ll
zHns1bC+tcsjz~-aj*tS7ti@|=o>9I8JAvs?Oij$XDx#6R`8Zz+mGiz9Yvl{ik+-9&
zI+3d+s_KX*w)sy%SW759`}Q2TI2-uWFlPbaoyHZyl5I{*#E`4?dsMH(zGnKkA@#q=
z#<kF?A%JD|nxs{-6mkMJE>S_apoTQZ7==|+%_X#$DYOE^1o#4EW>*g8`%abbju>G}
z{R!DT*G+_VM|LqxyDG?Y;l{o`xcMpCtrA5}+QH+=PxB;>9efefKk2W20p-@Lhdc_E
zkK6)7+cfkCy~t@7&V09lECkG}ZLhA;q(&QwV62p7f~|rb2z{aA3A4WZnvJD`{98l_
zdV~zvn`s2iP)e34IGH=m#s7?vb~%lcQSwY+X(3V&sFO>k{reP~5I1Ju<<K)q?*^$T
zV(FhQQh^p5g31d@vHt^pl)afGA|7i;8HNWKV6V37u6qcD`gmq)XH1~@y@Q}Cr(kn5
zo<k^%YQ`cM7k5cjM@)^}Oo~p1J)0h>&4TI<eWFUCCQ+}3jEjtt@^C&xzx?+S_9ZJ#
zw^Zu@nooiWavVIpKAb*Wx_VNuV#Ako^*<atDI8MbsNL+<1fsa&HY}cG#Qu56Ys!uG
zs9PP*mgfy4xuDEg?YLAZWJ!7|AFf@Y0^tIZzIp!7r!!>FET(TakzzlDyj(d3+|sC+
z=x?D7k?$&Y4t**vk}T*8B+GfqyZcViyp9e~tZt6ARn!AB?ad2LUK{ozZg+U|uqS}c
z(A5r{JA%{8W5ktpWy@#ieG4>|@hZXSbJ_8D;)T|rPE^`x<$?fV89MJjp@C-qm?aCM
z1E5v7nDcq^>@dCJGT@j4P~c0*kUEewu^I65w5XWSEdmfY^AS${!w>dZqq0Bk@FYAU
zsA{#4JTtuB@!DYV+UQ}dx15bZqN#LMSwK<qz*m2@qMi6_an+nJRV$g<p@CW~eMl4e
zD>Lxb^K~n|5m72u(t*#&^9AJA)?W@?ItP;+@jU*`61^o|905*YRn}PGEPr|ihgt=H
z*>ENXSkgzVdp#(sJ5(KSzGY6OrfkNtHKL45OX^dQ7%~wIXQ%xdd}L-6My;&=stEu^
z1VZs6di>>t^)qH*BK17yZ@&M4iDaMTDUPYpuX3LwF5Og=FU6Lvi(sH5%=*XfTwc|j
zDlI50{*T_8N6`HEG<?Cs6KHF43b!HcYh>E(3GD2SagaIJ6@nHPlFD9;bMX;jln~Ut
z8n`sueR?%r|I<7`)OOVFO_6e*Q$TS7XwmNbeglW7u17@d!c8vHN~~N%lrm-X4JG<h
zs{1%3T-EKTb@9_bo1(zKTGKL(R4RnS-t>D$eKe;CDZH=Qm{iI*Sf0eyhqso5xgV~p
zd+FAf4M~I_D%DA{SgfVcxy@*mie!_^B(!MiWWRR(5}+)reN)!V2GieMx1<_@LN}-S
zIe%!;G6d*i!@w<pmbWw;@Tq$qX;wFNmT(=RwAl%e4GvJjQROhA-{m}_kh`e7B8*IK
z^H=?v+5I5|*Y0EftDyc#&f$OS#Ad>R^Y?G0WTN6zFS3M|HZf`>7$L|$qWd+8Oxg<w
z-$5k>nx$+RGgu1yFjVNw>AGPsaK!YKk`z)fR1v~)CwC7!OwPUfLLYp#XU$k76$d37
zSZA3CbAAZ4-UvN$+a4~2zPp@&!p_EnSEp#AvrC5Zn7PN>55(&eQ1E*b7{X(Z6h^jt
zUO`=)WQC^}OW?}RbJw5T)d9h9-Tk1lU*P4Oz_LS|U=sIH(Idw#n@+`Qg)bQ#Oipxq
z^_w9**z0RoYUiFm;NdG02}tO#LP5J`#Wu;WdNzx%lhz+jS7?FGQ2z5RMPu^tLHq<R
zKU#(0jzAjEDIFbaGQ|*fZ4c_P_IN#AgE)HnRB_})C@R3d>nSP4xTn)&EsJc;<-DS<
zF1gFlsx{C4P&P`ti73#SYn5x=_GSF~&9#;%WCRznvUy^^pFL$I-Tys<Kqk1?dhd)r
ze6zlQfYw<KAV36tO@2Nq;JMVkHv{+z+eahsz@Nd1$8CA|Op0HCOQI?$g3HB^)&z{a
zDk3|76==4l?fa-?v0^Q#QE7eN7K)l|CEGR`a{NgKy$E07klYZEhmxkXKo5s2$sdY_
zY|cqY)aoBYYT@>?Hd*jVfagKqY1`jAe66o)n7qkwX8ydf%BdM@;%@qr@cu#EvXy$7
zG|V>-E^it4a0-6J4@*-5_eS~p4MY6p6XJ_e;9`+5Ue|~OF8sTaxj3Sqh1&dO#=8Qb
zK9b$PJvO%$oH7+ll1E^M^G3%&fhx{#(~97fMupmtV8J$qPhWJWBTvq#hPq=agb)YM
z|0uNE%~xtr&$S~l`Y)HOasmFI1+mjT9wIl8K~!_RYP?aJfz>8H%9B|7*X}nhp*5R&
z;<n-OZP!TB&&*b9<D$mlB4F1yX;E~LSz?WB(UROun?go{X1#hBe2L@)3Il8lVP8u@
z?suEwnY)nw&%K-LkC|fbU9_cwF{PBf;i`<4L)hPal6)ZAp#SzOTt=RMNnE#Xsae{Q
z0^ueYmO0>?FsxPb2(d;Iunab9EV<(17M(-mBTmqk8Aa3m7jiY3iZO`KrkiU9^U-0^
z?<#~dZynUu6a;zmqE(#$4an};%Y9Xg&fNax^JDkkJqp&1LWK8odA4&-)6P9@NRCqI
zn(*_54=S@`Dk`JE?~BI2%pwELm<ckcECHZ&lfh18vr?i2mPfnAyu0-ndxbxf96`^$
z;6IdsIBxf>vLDXWN+75@T@7efnP3sO6@cgY2_{xI+x(nGg4_yY06lr!VZVZ|CWoL~
zx?d1di7I#0E-F9s;<y6Vq>>Kq8IQ&kOFI1VGUtPjEz#M0>tzr7Dp--?vn?C~9^ml$
z4CyMg5?B9V!#iRT!1F?T5!IVf*+Ns8Kr;syj~ILXS*t1_PRuR%sia%I5?PHg&&X&+
z#@d1;mTw8{V!&5+i0ck=e0}H@VzQ5XXS8-*?<u4VIzNBOTnNroX<T1DK}8O+1kTXw
zgW*``C>(12v#c*^!{TW>e6LG2ww2n&V_T#~zWsfurMYA;qVmID_AekT;OXM+tz@1v
zDx<3dsd~m53=56RN$cR-F^FXXG-SXtpKtKuA$N6s;D&3v(K>JOw`9iDsT6at#O~0k
zr5}WotoR8{{Rav5a%INE=S|;-Y1R@Wu2!6vL$*d0vf?=7#*8C=E3BeY_pZ(eRfFr3
zG+P|zQdc%hsWdxppF8JC;@UuJ760IL_CgXZ|JS@L_D!jAwrR2~d;<U6%p$0n_9tyC
zQUA`UFXsc10sV1YK8=-5D~3imVX~8U`YUt_e<A|NNm8+dVniKU>8EIV4AKW3BpXVW
z9TBWEcS8D-7s%f6x{F8+y>=2!-a7J;13K=q)jz)sf*BDvL|{0I5{Sw5Ab6bUmS_s*
zTJmZy83i!xYWz8C<xzjZ8LkA(z=)C1#c#qi*A4;IA{E$-#TA<oMszy)oTlN9+CuKj
z_w$#}G7U-3i$xYb!GA&0fZ{sHyJLCyyT9zjeY^<aW(&=fCPA0@9XQmPU$(GNl{H>5
zid9K^@tbCa5jqLqinkeVc<o;mlO84lD-J~hF12?EZ<(OBX53CzRgvIS5lCElJn3&{
zZ&Yd<SIFzFaI%C)jMXz-@!Pb7^iry~bX%>g>abjF3TygE4J`#1mRufh{Wog!rKMl*
z-M=`Y=9m<X*GRb%E6WZ<(Ggd^<~lIp>Mq!r=DHf$X~>tdSKFUx^#W;JpI{1QXEQ~i
zuL>y<GrGNN2=jmcrTL<>t(Zh97K%*M6CiyTNmo#p7m<x?Ds;YDtzK=pc_z!!Rw+#;
z(^ezPzJb?5Sb#E*s)+_}Owld_`CYVB5&yMk0(MxdB9IbI%*(?4oQ(2MN)R8{9|(xE
z+Q3nmO1%o4*1$P<q1IS?4Z7n{Q_s)35mVeNf&7w#Rp&{H4O9VIk+hU;Ce+9m^$5u3
zrUXoQs^y7#dnP1@+@daDs`M@lJJ*0Ai`{Z@Dn_KB>BW(2WhSZL8jb|H^&Y9gZ{s9y
zYVXvrpsNZuch;StAUu>EgQ)|WiofoHAlya@#X~cjEak1*5!KThKl}pN$2hoCJaNpD
zmTwv$R`d0lsp+z=A#Fh8<YvmcRN0BguB9rbre8*r_?w{9S|cM`q@%WnxW9mPWNNxn
z`ysY<jOil1Nl@6w6QZJnb8cD+vy3g9(pPq=s03tAV%P~T3RP|)(fRckI_sm+1XT)}
z>0}Lx%@pn;0`Vt8a-M94@Cc!HOMP)--r|VnWlK~mnBTr>Z7ZL{>ot#f>gEdi4y+ZP
zlsiH1cqpb+{wBDkb_F`fxnm3|YL8Xqx+|yl9_*^OwTnCUFR%Aa?iUZ~Dl^bZ2dWYO
zO+C&8Uzv{)VA4kspeN-A$3DWFtVb)qs9;Vi29GeJ(>mf4NnD=pIeVZN>%clmPiE<$
zr+f$?MHYD**5Xp<_CcY`vz8?kliLQIk@4_YFOyVx_>iO%jy(E%9z@BR_D5Ew6%?c8
z6?*ldxb8!u;FP6<Co%Yuw9szGEgABvavQ~EI9sA1r*lA5nTLn^lFpDAlbZY?V9Xho
z0<*q}oj|yQcbzg3LkxBwOGRT!y1jbqXC^534<i!ye_#!CYc6{NGEUi?e*%*QvWr0b
zKG6?M(W#-$N4V8LF*vNn-&p{;xLiT`IILn0M1@HGb1axRMgM`4RP|o3+gy30pqxBn
zJI50`;+mrhgdM|?0h(_2Ik2f_Rw87+CrmdEu0yuoD^KK$TjOqhlM@m*0ylQc!1T+k
zCP}(6aUmc@WJ95*t7v!N@%tm17Mr)VDn=r;Yd~LedZL994{w@iNKT9FZ1ZzBA(4})
zl(roc;ui9#S=g^_aeC8fUV`-DJZ=WTnVQ&1K@SMVYU7@K5SyAv!jCb(i3P#ZN`)mH
zPHUV;Dux#P!vLIwJRuh$??WaIve#?44Ph&*`nj8=bJzWqS0+U7X7n(h$rk#q074A3
z241W{<N`@U=lR`ny9>_F=kGIOc(_!#3{KnvoU3HkwZS<xx3CE+8B@_tO!#YyOT9m@
z2B_mAT|F%+%Jyk)#3#m;a`?Vuk`zIvQ40$Fq8!8|`9&ld$f(eITKJ2f2&h~n7>SUv
zr?7I&98ZWi$OFR$hP`b@L|5c_Ea`}4f`rR8BTcfg`0xqo3uVrDlyp{><-TVqQ>PZu
zw^lI&qnRT5Gl=)SJDug#1q5##7d?J!zbJb=vXkL2uZTd4G9XWOs6STFe8PNDSAB)o
zMINQ0j~f%GT2#!t6{`Jf#xU{BCAzEpF-8&>>0Og&AfxZgv7wTrC1ml=?`O4ePbT!l
zmj24i&y<23fD|r1@+*4i1P4K@S82+EPR1hM&wL_McU~nV_WiB1<vyx6l`8!e%yo2R
zjaEGWXY0b+lTNKC9=y!jN=GcK=!hbdUzW2YDYT@{&elwCe3I1L^Ku4Ci>2{2lNgRn
z8B9oNri<z}&-`kUhqjpXZ)x#AB10}?%Eb{UlLiv1>=>^phEu$tIsFs<nQMZP=qwO8
zgO;2<RcxS8)0|}GkTSq0H}Ld`oJ1b{6ZsRrK(kef!}5<h!v$^r=`eynXWHu(GWlE%
z+A1C=gF4Xzj;*|qJ4BoJDCXm*6w3-RLzOzG=o8NS)}A8P^MO@zyIqI5-ez0qGVYA+
zoz18jN-o7}c2Aczr+RLVooP1luBnl@B!~-HZy43!muw(Cptu-<6^_ofN&w)AS?+D|
zL1@CK5l{v8co;FR5|g;5_53KBIweG^j3W~-8b3wza3>(-o!a~_rrFMRDV+bP(Pk7s
ze?Gu{W%Gq4u>x4D600XfC84}+gg6rYsEtTRF|(_dw-&sj2hjah*ekVSnCqFc;r^u<
zWXX?o%7Nygx`%bH4Bd^kTnU?po@?LDkrZf1h1>Pd0^JsWX*gD$ziM!8JazE*?ug<>
zjuai0Il%M%i%fwK-`q{EL&8Jaluqmp?_5_{XON)zsOGo>{59i^kwSTX0Wv289WDmW
zCN#Gcrj&t-xbIn~Q=T(Ui$Ol)uZTrBT{`R7OWqc>UuP{0biDMQU@NQE7{=@wOSrQ{
z1aM#$p?P4G)j+(6>mbGvPyM->f>1W><FZu=e__e4#T3AvId@2T3fA1w|HV1=pJ(Ma
zjtEG%d_^VmJ|Ags7f3Zfr^waw6^Iv&nc#Jz6KT|*?QAgVkhs3^C&B(d|Jq}@l^NUk
z6()Re^IW+tF;{KU(JfSJ*MeS&*`yJi;uMkdP`-txlGSq6vb)Hgr`se-wq#g;vc4g~
z&Y%mJE&PN<^nXweQQ~KFf7mzu9vy3nBQi{^yfX^)``VDTi)@N=$B}}ThFY_(`vt8#
zr+qM?@zCX2Yl&JlDuBGzGV0t1&3&#tC?QElFwnigTA?y0&lwBu9q5H_rB5AK=jZb4
z499vl!e#`gdlt&_&&o6>{a=|qD_TayAE{(|OOP_6goV=0uitxYu-P6@1aqB}JS9Z$
zU+x1xC_h4n>;%96^F~W1t12*8U}w`PuGPNM<K6j|8Xm=$pcbKX=A#y!iArmp6&mR9
zrd3CQXh3l{_urrSjsZ{A5BiXE0*8;*Y|}UG@jQT-h=qsKz|Nw2HnDS6$ip+P43Uvo
z+?1Bn6wfp69$P74tvuYGhyZDnT_r_sjN#gD(Y>yNA(^f}s$Y`ILN(NpI2FpejR^P9
zG+e%I;s7>U(91b(asWbzcNb)kf3$Lh$aI3pl-)ZOO|Jy@6i(ruQl=vw4sFRLYbOHy
zj+!<l0@Hw=KaI)2iX=NZ{~>WE3_xYZmF0a?H2y*byU3O)6oq7rr9E?-`xENb`pXgx
zK+F9r*;eN>m$=@slX|k})AvH>M!|d)?C^Fe;f2lFq>!Zu^Az5qwC~$>bk>JsRx17!
zFu0or)DnQU1<{|iWjUlYXmK_pG#j4SPF@i>7OIOAyD`)R)Oyr+(mWjry7#=>Y}wN6
zVUT-jU+A~mb}qd#PC8~xi9!886;vU5ge)|Q2=hPa(O`C8v+@Ol91Fsu=Wj-Kt;q!4
z^Bzgx)_;41s_<LPZL+)ej^5>}7dmGrGn!tgvaJ3p9Fk50Se7C{$gXKU%ECHyo6ffO
z#_|Gj)R|6@oheuiVe%Q9Ew`GU^UzZD_ylnd1o|!TNUU-lNoZ_SH6P>mCQ)f6-qlVU
zpHE07Q3uHYZj;c9MV}3pzcqn^-(T3y*PiYw1$KsjvY9f`3!X233>hZuyWXzOzb%u`
zha;<yU@1oKozi&Y7;Gib?%9#IljzacjPbsG3+y3GOH4!mvDJsLbgKG$b1U9Kd!-<?
zJT+3$=uhOXMj{@_^v#=4VSo)8yvS9t-0V0-l@$x2pI_wr6O;G#-_35ArkNQ32rEai
z)o7Gi;|~AWWvBV*d?9I0Uj3miGTi|h-9Ldg@@|z$du7umJyc;M|7W3Y<ja3bo5TK`
z3?Aqr#B*M0OAP+?4eO!mNmedFUdj`QI<%_sjy9_ZUF*m!goNVc;g0&u81CTz64|=}
z`|w*7)mKLZ7~GpEx6P?so+C0L?%5)-w}00hUUThEhMkR!g)mnR*l<SDs!8KnsRH@(
zu5<6If-%fqopW+35pt7LoLeh1zJZKO!Nml(OLgim@2B&NzyGzb+)#UF)yBsxt@0{M
ziCYnPlo1xuwZ^$xFp9{r=ik5&Z;GyL3I;`n#>TSD`^QDHtvQ>{OeDT1B&c{^tRtyQ
z1jPi3kFGYzm~;lAi@Pi}#*U@=g=KHNRflc<9%bIF^q4DMD0e2i%uy7~zrt^ExEhqx
zU0R)0GlCYo##tEeOi0KWtn{Oq;>2C?I0RL={nz@ARWO(Qy-D=b@XqG?{_PxN4_IKe
zsJtD)$rDQmj211B+q}%;S&4!J0TYR^eOKNhexv8Uf3~#u0jX`Wngutg%fHiUzNp<g
zJ6pPbr0R4srVeFsE_M7?>b(v*?^5SC=<#2!T3~c7TBAcQJM~+SpvVG}7D)5NA%}_b
z6{^&#2`9{tr*h1Yk$1*1N~S?|_W`P4@jdLq4sM&YnOs5thAoo@h39)zZ5w+n(MkEg
zr_aHmp?zQ4(l7m+0I-2A6;$et@xR$0r?bJ#MX&ri%|^gl^9vV7k^38~i$nuesY_-`
z3^#qq?@i+Jh?T6fn_2_w+nR&5P2M=EejKHuIpekam$pyIfj<HZt>$Fl`&cSMGOCK#
z#53&g{{OK@$n5Uuqnwgk8+T=LzTh~eTPw&5`8bDtl+cLyptX1_b5wX@q_;D3aQ@u}
zu!Ui7`6LU^G}t-V=50cqI{X!<_^q3t_GJ21RhEyuR_eB`EdTb4^+;6+N88s0TSULp
zigz@9^*^SYo1UcXwfBb28V^?KvU<ZvIxPYIks-ltK&=qWQS0Jz)(?h}ZQ+DRqPm1c
zJwFJm!p7T(A-~I&?M#+9zcZV*(?rcj$LZe&7iDukYOnb;17kMp;xu)|8p}M_N*hE)
z<*&l|^?I2}^F_Z`R4;-Yof%Xpn=qQVS_BFj$PTxG6tA7mibAQVbN~Wb@fi}5+(4Zb
z)&Xc)zAhX<v4jcB-r6|ufx<I$F2l3)fG?hC93ji7VM>`J(S3hN@Ew+(B(Yp&_O0W6
zm!1Dn5m~bq#}2+>x044`{E|4wG5lfh3rJ%N3I8i?Oj}E&UNNHX_z#70u3bKC$|F*q
z<wMv9XM^bWNTH0Ynb<%Vk#dHvJ5tHn?j)Y8R+>TWcx34o(a?MA1l8a;6>rk<#W_Lz
zF<#^_v@mO+b0ifS@(5?*MtM8zx6M#$W;z#D0j>t*Vqw;sWr!1LScAD!Z>(6%e20fK
zX?6|hfKNK;E_wYR?`Z6Ut;6D<@sBSPHrXZjAfBJu+>$7oc=bZQ<NQPal{>GPUa|gT
z%xvo;2Qs+z#-u;1*u|wN(EMk$e?shOy3GR#N+fAa4A%rU9E{a1ySz%MBD#p~IEl;B
zgfT?Mnx2c`GzQ>+6HK6}6*+L^ui6{SKq2E;UprYh>Yw}#ZoW(tov=`PG{(96YmF1n
zDo}V`;@*3JZQbWHP@D?&cSdoir7WFG`HSe#pFc5XKXLabRt*I&Rs_a#n*UpGcmii&
zZg0VKNC2Av3(0TGm|U7dQY9^k&IiIYE>;Z+F8r~Yl~MWS-qFIOPs+~sPz8$C2woWe
zdmY4S8J@KmI$J9YW=FuLLS+)3ZUhf6IA?rgfCkwaL;mUczn_0tR&$%~=Z>X=g}Ihv
z*1Ar4Nf5ejCro=pT_;;-KPk~V%(MN6mHhhG1QY!@5W${OKn`)~AU(|R5;Jm{I>T1a
zFB>C1bVw~y2-e&VENfOS2u?6Cq*mcjw1%(zHs2g)Q~MQa*3?qbFx4W}!ko2av{uT*
zm4dSuEfe)kc-3YF`Rjm6J3tgz^5QkRD0`ChF2P)D>cT-z4FWbqr#W<=#CKgW&wHK)
zh{g6_xX(L;FrUkSv7u`@d0?HDw8rhse?)tk0ii*GE9sH!dCm4IC(p=W6j<BRk>E;}
z;xhj3>@I#8ycPGxq*p=gB43A5MRhV}FgIN8?+g{3F%ilm(*!T<vwS~&#-zG25A^G!
z@(L5{xa!~tgCwjczSFJd+@cbvDSQOb?Oht6WR|!gU+bT6m?(G1%L!R{Q@D@BHJ{fJ
z3=GR|4qI5@ajv~M*5ziqXfFE<5*fvZi=skruwKG|8~?W+oI;5~B@3?q!e^m4mcsfV
zE%j{`gNN^)Wq3B=ZoKfn5tTE2k|ddETm)8-e;4a!yXdszW@U0e-_PYRu)t*fM*_;k
zTFfCfuXEbzyfzC)MSz$pO-%>3*d)MM2h?U$xDe?bZ0|oHB{p$GIK|=96uR5lH@G%D
zOv(QEWP=g6&X>pUWjZi#4)FVr_)bV(`|adm-C=n$mL)DRnhEG@#j^vqAu7e7+_J4O
zK$tXGkny&926AtVdd8Mkkwh9$!$X(RU}TH3LA4!ecJfKDy8T>DnW?aSB>20B`Y+IM
zNUT8Od#wz5bt;ywFGJq6*=MHyu3({0u}LdR^Gq^~xK-UsvBSgTUfU8v_twg!TDhEj
zPl0fV5O(uMxf<5V6hYjJdxFtBr-w^Um!^Vs^?ZWI(>itDoEI-?S<HmNV@%y)Sz9%+
z9CteK6$S6dTH2JirHfAomX4NEE})<+KymqUru<%{sVQy-&XnILaqsgE_4$3S|5==b
zOvEQ~aHM3Pa7ifgM87|IP+_cmPTi<u|BU)G&?uwBp4g@>2-u2nO-s`LuCn$dg;$!V
z&hrD?QIy@;Djs?~FqiYfmGS@~Tz`*!k2?od<-QLBkVt;|k5LW7VwLFCZczUY8!Gm^
z1KJqH*M<J#^=HJj(|S@JqG^G8oqS}(HUYQC1mxhiU}pX}4ZMgo#n)9O(Ly*Dx^#t$
zXGA}rFFx$AH|l4Nhwyq|jx<lo-;TM3oYr&(eOqf(xVYNE?8(%GWcO2WLkYOnpmo>#
ztH~lPT1uZl;!0TA0_Q19#5><>=Y7Zw0TxRHb*m=7U|+2Yg|f8ve3|#$q=4av<92Y5
zpu@cWj|Psw;5$q4+L^!a*^7o~e(R&Et=H>KMVi~u4Rg7_VL!J?o9PZ_DyYrb`R&H%
z)AVildj-xF>0FJ^<vIGl%)qCFP^1yQ1rsLT6mkT@;U6_j#o>J3SaSs4zYLfPOesYS
zO4ByC`>={yDJX<kxrJPtp1WxD&AbWnTg^(K13CV<g<x!y(l)x6M5*ZGft7FWL8z38
zBh4ZSho^gxMeV&i(q5mM|5QzOom$LhMwY}ZH@|)=K+r`#j`W>1y8f%u79vtMf?d<V
zxTlJ92&(UnSr1iH!Mu6Gl$S?gv5!mww`B;Cf_Cxeq4snC<?atk^rs8|wsSh+hBTBM
zRSZU<u;e(nL|>u3Ko+EU=-S)y)R0tv8A9ogR?yj(jPKpQJJ<+0HVu@Nd}{!Re`H@g
zj+vDo3NghVQa0K^1Ijobw(C$|en354z9qIO5rxz}|IH5nMMS5n`B%<+;Ct{!1x-lq
zWH95fSFmy~yiv=P?O!mfrqh2UWIwq;tfz>1T?x`PhQUWv^?sL!gJ@%@K3OEMja3;0
ziYMRg+i=VF)~imK{P)mj>{@mLt`0A@#j{h09H1`#G|&+GuBo8CsrIaX4#BGRrRyo*
zJn(EF`TOqq40ZcV7xYPRbH0!GL!nieIS)hcZZ}Ew7>y(DWMB!^f?UerMQk1`J{{{a
zm{sn>-*g0jJT`|4Y1)sna72O9|DooM!v7yNAErct83yn_CC8th6B!uHxAUfuZ$TC#
z=2$PTPHn{3`F@Y=Us@dZ8bS^L>KpZnRO5LG$j+(jYxzUh{EjQ;eh{!5xmtaYhrXnN
zzMZ#xrRxqjUf>6<1Oote)ozWB2l|i~F<D&%)ATp~Cb$hbi`yC`ZQ2PU3A-0q3}al7
z#$Ea^u}qgY1>_UB7{XIcMikuVa3|o3-PvD{#MB4<uOUCc3wE%-x5xfdJ@qOIj5K`u
zf3?~@zQz2t{qrA!lUIlCR4=Cy$mq&bD%{Pd^41@aUhxV>?as4H6&;6YgCN>c1ZXJj
zLIA-vcdHB5(mT4B!A7l+hbhME;yio^dx%gnM0Xdetz)>+R6r5LJ^(5*pAo2>)1%C3
z7jN8iL<-O?to_YtcOt}su#{)!HtP)ZH=Ap9`?Q^ON*sRC1NRxaPh^#>h_eUnmg{QV
zn;qSP%!|vdiFRiPBEZEBd`^lwba<Kq6geaJ@)x<gbCb`$yZK{-pQVE)QM(c)6`t4q
znDC0+r)POh+`g9q<tq{)D_McCgKa}HtxjvI+@g?Dwk9X=CyCRyZ?bON{mPWC_-rQs
jk9PBab)Bh?pRjD2pDUQX3N8N$PoWg$)MOi_EyDf>pAiZ&

diff --git a/apps/desktop/src-tauri/icons/128x128@2x.png b/apps/desktop/src-tauri/icons/128x128@2x.png
index 9b3b288c514a934e2b6875403109d335d83eb173..875659f3a9052be7e013944cd6a0204635382bdc 100644
GIT binary patch
literal 71045
zcma%iWm6nX(=P1d?(XjHx=3&jmf#TF-C;L)g1bxbpuycOcyM=jci3}3RqqctpJux1
zs+pdyo@trxC=E4vbQBU47#J9IMFm+c7#P_9rm!$b2>%U+Ze>>gqZMVPw0*MAI^kQs
zEqXG%Tn6T=ZCjpnP1recH>6u8WRS0#rFZmn^q`IpL?!wDg<~)gQ#?@Z$r$(pv{G;w
zZc?dZv$89fnh4B5Q72z|4YWTG{QcW9UL4ne-IFq~*#C8-O{ett<geiOQ<I*I-Er3g
zA@^+INiyqL-r@gmvUGtvoszk7((#J{iqhoIKn~8v{=h%#TmP;0v?&Y+$Hyn2>*XlY
zeVK}g$ol-TJBx}bz8AF9mhlqx_2HFwxLI-!_3h(-d(&g`T=ZZLF!)|ezHO;HUP6=F
zgZv(Tk2M?m5OBPz-u?&ncFT5!v5rk!qdv0~J*hJ2v^2MQ<gZct-I`dvcDK7<6xk)1
za%&l32xAFr9qSzYf9Qma`$+x3`P8av6uDKb7qiwNd911oB4a(g5FqCbbJw?6UW~2r
z>qJpLJTiGx8lq0mF)wP%>ir?t$eVOsgJv{~9`aSI3ttAHPr+_9P>3D#x?@%OkZX&A
zOaJJW;b*^K&FYFmXe9lXGIq;N<t-vNldg&VMIZw5|KTxsNS7_nUVH^V>viMVS(&N3
zdOF=y@`qd;Jq>v=SuW!{A!{jlpD#;<uSYfCr6?tW`_lUC{kY@)<I6ILsGsq(#@oF6
zEz=XN@jpt;A0Lr<kE{Xc)0e8ND%mq~NrQLj7j1$LE6Kn3m@R1#sEjCS)b`pOMaU?b
zE=cZ%hL3}2Zi)VrhhO$KY=;BpKkk4{_MeIEX72e6&X0rBRb6CD+oHwhnRJ@T<LnG>
z+Y<X6K`qB*FDKHc`r__Dk8Gt*4<4&3{viaG4F>OXb*If7CSo5a79eO)VTUO2RLgVn
z6Ta9@E59K5z{g{bh;^_Xg*92v*wRyR@)73b>O$Pl4=<|b<C&=KiF6|45ZLbIXgx80
z?lL9eRv{4s(YEtt+F8klU}$va!qms4=HrKCMm1%1ro4zJ690h?Y!*t^<T9VGe!bbF
zxlx%pRW=zI2@7Qg_u?W8abB;>Z=vR_LhS0J*v=?Nsb*VSbW#YMwr)0F6mO71>Q)2o
zH*-Fm%4>W;sU#6CCGqiH*2AmYBy{tn+Dk<)W<VG!G`CeL-wxYrJ@^4Fo~rbJ)RSm_
z5R84id>;hvK)N%(WIE-sAQbUyjQH<3w4Qr68O>`yH_oVbNFkLX*&rVSXm0i&>~jv9
z?(MzE#9SWGF?BDW`+f#)l-{@w!FE()upHvQptLg}%r%-AZF*lHkgqz~61dAa6@8*6
zQ>R+Ar+X*S1TxKmKNP6-%9Kl|y_y}aYL9<UOjK-YxJte-h6J|-U%r?Go9|RtP-OY-
z_53u#QJ~Im7<zse<yey73R+!mZpxfte`@1G%Kvsjr$yHXk<4t->ue)Ce=WS-2zGF}
zY&#wd^U{^b7FLt^pLnva5ec*TlZ_wGQs?zdZ--V-T~82nWUn|psk~7dBH&)+U^d|?
z@&Kdqs6^<a8et5Hd<dCQ-MhcB9oi}lp?ATeTum2wA@76NYnI;XoBo{QV?WIlGOjW8
zST+W4>Vn&j9)wOd0fN}V3eA)xmPiS8?l^Vm<o*{amoEJg65>Klb%&#yZ)_6Jc?B`3
zqWC-+pO1xR;eCjSgM(fEPErTXcGWMg<2Wu~jn*zJ1?og^ukV12PzK&XYo!Gdd<cx-
zH{Gp2Mt~{2VXCB{k!(a_9|bLlVKGt1114w8#vLLd|0b8mym+&^F*L+@(qb1HM046l
z(w&#&^XWNUQaD)8_BO1>nNbOq`4$M~MT78wX{Zojh^5A0T7x8gPTLVO54FACOMgai
zbS`-aPkO-T250|;F=iN&)NVQX1-UyxoZN8n7ixMj*Y02P945<X*P;4Sn&5}S!9N5r
zEvf#ay_k=%brm_p>q|J8F|Us+Q1HW3VN?DDFMoA({T^st0cqU#gVq#Z8t9R9?opOX
zyxxwnva<Xf-K+><R+5&s4RaG_G#2-{ZLcO<zT$0um+rhkf9@J3EVw;|<wiR~35|UA
zXa9|rD~E$=K4BUA`mlN3zb9$p-F^5si^8zuGL}h6H9`if#D#%WXcxv9VMtQHWv5Rn
z@E+Jc@}y@JEk~s2JpSq0E6O8Bjz}Te0RiC^{1s`=I)6sCkeVt21wguJd!~NN#8Ek9
z`hhj`9gHQ6v?)a*qh{R5>a%ZhP*DgyW|f@1MC=c4gVIWBI4^WFs!>@`bFoUXs$gL5
zJC(29ET*YB_#CnZSAC^iqIeqhEM`)b7OjAd{eXqR#Cpf7Ln}g!Z*?s)`*IObOdBja
zY<BU;`PvsL`jQqW|M))IyIgLkiyVoezH{e+V6BhC>AFja#IeD{;uPRD+@=>syPGy5
zho|Vh^yxX}J8bvh_nuVp9(v2IP=b@c%Xl&Hw~O?!djXJBJ>=Gjd7*&m-sOAdz1PzC
zSVT}45_LeCZ0~*GTpR@|<$I%ga@W%y<njG@d+Ke;&5{27(FHKH7e>#TQD}&^=R25_
zc7eh1(sQBALhAI^+G4!C2UnhqwU15J4D4aCsRV+EVKT0{L6WF+h~uxjPGCF1?LkJa
z_bZ2|n&1@{@mrV9XOE6Y#yqsVw}I=Fj3L3?;o~se{|pr8aVGTb-lFBaC-%Pilf`bk
zC4Y30=+Unm7FgHRAvffuPMNJAI9SYEu_d}w<crhXTTE1(;6zloPt3vJ_~X^Vh4SEu
zD%ufDHX3qDu*=O5*JsRFJvsk})~n;qH<#ns2#mm;$H$-@^s)OBs2M}N=i|hm-(p{v
zayNr!n@nfhCyfPNwlDMsm!4VHJ$`iM9RMPCkUX4dCjbCH9O>xg;rz!Ul&U<KIVq}~
zQY)rVQDpqVt3=`=GuD;YuyE)TW6J9|?!3#?==I~J^Eq@F_wSzwy~MDuM1wgUTOJv-
z|5Ls?8>n!Fyz6U0)v1#%u6?z}gznjBV#sI(j5DhStD<2OZc7(ZnRZ#k=ddX?`y&3@
zKO*IzUJ)2U#8yYp4tWR(FFGVeI0pS(<_dvSLuStE7UoW-6esqO>gxvO#dAzIYvBGz
z`PAF>_EhJ^)0+yNW9LV=yUK%V^3YwI^6=j8W=GO&pW)|2?Kk%t_uA**UbCdiYuY|q
zaQKmLLJjq!MBPLYJzOo%&Up*pup+4Mc&Cr~;;Ug;0DDYS!?2%Z3-F6m36ho(3Eu)u
zRM$!=Y_~GrRmlv{E;EPMA|6UGp%V@k)lsv1|2ypWArp)yOw6Bp<V!rhfwivh_lo=~
zfnU6)A5nT%3pCl04O^AB+GyfSKy-~SJv=Thx<F)MICwo&IB6;ua3b&v6N;fEo68qt
zi-P@88|oo_`@BR8l;1pnB79KGv@Oc;7`5>R;ko}JBFdw<K=7vX`TM~9@L>t9IR(po
zpBmNA8sAMqJxs%US_37~54V2ZsdZnD+Q8=Mp(fD;-uT<byP_MwbUx;qS;&nAmb41Y
z5ilNDbRq<ETZV4aiP@t`m4P_JBCCbifGYH^k&I6jwmYD~qBf^R`$c5!Ax;7v%9>}l
zdx1z0xA6t~v=FusaH>rW3grBsw?c3A1|RI`N>t<Pb^DuisL835-7a)genaXQAGB>4
z^HpuD!w9E26@N#zj}YZ?=xd;#n#??38bAS_%yGw04FHdLG=?m!kL@!{#dU!!Y>=e!
zQ<XpUB7|fL_L(1aLV9Ni8+%IgMTCsvt*V<N@Hk-?dQ)BcvG0k>s(kF7i2N<wbN&dw
zxyx@BKhO8v`Eha45R2)Hn^E~^J!a;{E2?z>)y?#`j({d#P%`_8`j*K?BA84;5w;8d
zNZ3XN)-SvlRK_B^f{@4%F9*T_mWONcNp49AQ79;C+ZX=|^LrPEYGQUlw<C<(ORwkE
zaX?Eyl{?7dc#Xhm@z;lIn$8;QH-nyqX;m8?+Y5fI+7LDcyc)!tLmR$Z0HGtI6BAGo
z;3IAJ#okk0MkWmOt6Uc`6hX_9)f%>edRhgxwEX%Ww3QOr<H9`{J!)a=3q&Bul@bv_
z-LBqeVl4t?(zzfmz>|KAsn0vVokO303$;F9Zgw8lUmE_dDkG#pwbX1>kJ)JR(p$+E
zb7sayHKsQDE7hKW=LFdH2UEge2$NIBKU6Tm{=y`A$C`Ux+(Qa4(C(9~`FnMbZ1HxC
zB5N2H`xPYmJ(7m1$N+6wDW8Pd<1+vqeLxt5Nv$S_b^M^XwKewqpPH*Z_wx<9ZA6N)
zY(9l~hNPWuG@Ya0>sAK(0KzK3ThcMpgiB56Eq?$)QPONM@-W_w;6a2>@-d-_Cakbj
z6C;$NIMc`p=WuV@yDp!1d&%bTVfPf62OYHJs=AQ(Po&BqVnw_|wq5xil2O|aRmcp%
zyThk~Z!i8qpso3^P2UHT4WaJ3>>yFbcuN@Go9Wkw_2!F13TVAm?Jkeb<7-Otuj60q
zZumK-+=!Z!GJCfm4e-MlmN9X>Cx|cKQnK_7fZY%aBaT|eOjU4X5@y2*jA7BRhnXO<
zvDLWzyhxv&3T$|jW&gdmh0IJTETP?UIDNFW`+2xaBunfb-@SzM@-8oym%fKNFx_tX
z5n(U=wnSY;mm_e#wSB|Txi~0ZDW=a7C(Isy#W%`v6|#y5HndYRKZ%x10zg}ebSes_
z?NA5q+To&s@oy1@)a1xMI3ukfdPc6~*&|j!^S$uW7PBn#-pr4Xj|Z~vGp=Pg)R!_W
z759xw+btA*<%oU2?ho~1PO<hUh`0E20;Pk1!ON;BEJz8mUU+!f)lz%fNjltNB-$jp
z6aYIn!m&P%KGbCs!GlbT@x}y?wU6TQ2eYpR#%Wmyh6BEgEfR(wbD$p70mGL@b;5t-
zhg3N*M+L4%ZZX4X`=X)jE_F9oAbku8#GuHu-F6Awt{8inrlfF`cxd&@x+$35{hvy>
z?s{jFF?0w*AFoXxr}DfnL{F4bL*TgG(u78gN~dq&7n})w#+Wpe_;8eGi_x|y?Ry}<
zwak=hqnRBMKlxMbk8m=}xWE(t%0Op&0pObyZXzx`Aa~T!{X1kKW&kweM}4@E7(Wwf
zM<EHp4G@cJmTQF~^Tn;<U%WQPB}+Vw7nnRds|Ov#AvwIM5qXCc|Ej0%_PZTgTVkEM
zB!woRE?}PNdqxdqR%BcGiW}<KE3G?8C#JEafVJSS#tsgW3(DE38YI6U{PNA0z^r5g
zHVO><2sg%=)<IMo({tyQa$B?r412}gbICWB6e`SpO|saYrOd@tALm=KUIAOje%?7!
z@{Tz)c}?2=&<XbKt!~yUmeh*GDs+K_yiK6!$eTJO^%yL|02Q0Nyh3}(v0WB_$Pw9n
zlH!VGez8B2ot`Fxg?xK-Dei?8+X4FQ!GR?(%l7!a&=l5m<6S~ilcg5Z=)?O$u-<t=
zW;j@LiL^j<;zwFWjo^!)|2}tLKli=n`t9TdKkpq%#CK*o?*nr4=%epa)+>euP24}(
zo?kk#?0Y+RamU3t6Qgw+?lHKdVo75wBmL5cL$T~R1%88-b(;Q%Go6h{KnO{}(pP|3
z5~>|ZF9Po8UvF-b9uY6<@1GIXj;w>8W&JnTQDf|G0y=wVsqd#^d5L?NeTkBYSvwBS
zX?I33vzvF>=kps_Y)bx&UsC;wldFJBUPS8fB<IS7`7_@=hP*`#AK>w+Z~;J)Ah#4w
zqY*#0*T4v*0>yKA&`b!!Y&-c<GWmdl)e1EL)#ph|=SoQOf9>d|jbXySB7zHqM`pN^
z^?_iwJ3JQb(Q6zw@!S2QUXy3@?Iih!k2#ae=QWdJWbyKkCN;3hpNowOEtG+ag2uzO
zjqdwPjwNBYjp{r~+lQ*ycONSP>5}+B%X|&E8+@<}gfG--LW+$;x`q$(jF;}c#b+ej
z7;w`Ye2OXYs*-&cM-k9pe=iSh+;FOxO?hAR&t9N1m6H;0Y}s0NnL=OGxf`Th`m?Wd
zFYT%`tzdEN<f754NXrH@$PcKY-Bsr|_s9M`YbS>q5Qf&Rn$!tO$9kC}Bf_;kwr8R9
z1dQw;p&oU3j3VGz#2ZqEqIkEH3?}w*fKme3lY$U`9{Zt9$!Vm+qp*Xj%{`3UzLvQD
zMrbnH%DW|vY5SPi;<Sjm>x>J0agJnvs#1b|X}!pS#{xA{oN&%PN<1u$&J9Xl8eKzH
zoSQb?{?^0^A~vJF{vD_B;0@in3+o`_#$Uy%67lGS*T#+fjmjs^XZ5yMBf*Qa=3RNc
z7g816`mlBLFYL_sNXS#-k?>HcY8Vo;Y;B%iiZkf__|Ww<!|7<`{kd~4IJG-*K&#S=
z+e0*84%S+0E0w=zMZ4~rl%fNqj1)i*u##5YB41%9dMea1ykBeJnKLSehsKUbdla%2
zkOMV;>k!%N#KGx)?IAQk8U8zoQ~vT@yZF8O>zx1#w}IyGWi5qRn3EQ%J@GKU2QII_
zzP*zs!lgku-TR$_HJgFN;*_p%#z$M~p>nazyx4&HvBte_%8t`>Oin$?fT>Fk0=u7q
zQKEbpvLrT|{x!&0E1T882>}gtuqEJ)EPtCZ`1Y6@YA>If_u+RN@}Ff_-n}`qu5oRn
zENuib?f;lOcxz3oo^UpX?o<qu>~bCmU}6;MNwj!Qpl>f7g$2>76;Y%fwSSR{Mm5#n
z3il)-J$`Ba?4CTv0vo`N@F2)f>iQG?>*q)Ha_!YQ6PLTgvD}s5Gqg&e0w^i?3@#F9
zQ;9D#K{qCTB@&S5Xv-FVV2pxx__+ZQsNH$*Vg)=YWyNM^A}7~TIH1bLQe>+=X*>V;
z)a~c=G&)-BZPN6T%?^i0bnCwzGRaLpT8EczP*xi3dNkQADXiD|3VCFMXAz92Vv-iL
zIPxMDp}~$PY9p4yJuEnp7BIXoZy#-Wt#y)E`B-FCuViZ&c}kgw|1UFmfI)TmymK<c
z3jHW`el76d@Vi*WykIhRp?!ZFOc<Dq4z}=x6I|~$o9F)+SgFv^i^2oq00m(u{UCD0
zOP#Pn21qA+*Mnr5c!)0E05Ri576(?HpZqIPR#?V)c+bnVK2D77mXcF-Fm|{@Q6Pu0
z2su&~2jDPCPxmJh>}yo2eH+EUcEQA+jTn>3amfv#yGT67JG$8*Tw9{Qsx|8@HP6MU
zeT&I8f##2y?t)3rfu(BTSZ&)Dt(~VcrMKqKChgB%oKq8G?@=Ymg%(PT7)gFl6Oj!w
zF|x<_@~w_0<YM|N5-%VuvBIu^+3o#udh`2#ubu}&6XYPPt^SRrt<=#c%(uNfhrGby
zcCSyX*;T>+^v>M7pks7s{}}VK&=B_7A8Uxa>}JFHn;EJUT7M}FacV3v|6@ZvTPpe^
z17KGUX6!GmeA$5W$*<Pt)h^S#Q_nZILuQFdF6=g?!AbxxA*Zvw7S(|gu7`6}KyD22
z=_<cA7FbXU9{9ncM-qK(*u=~%;}~~^Q93SGM)_*%LY7BOig4wh%f7NTci*!az9$|2
z&U!z6$QA$N$S(@H%qJU()n@eqyjoeGnmCEwHz9u5E;#GF%cioHOe!L8&4E74EE*MQ
zO1uob2ZkMHB0?8u$Kp2ar{8&ppcApPld#|9KcT5Ot<j|HPP~#%QX+A#)%ne~)cf7M
z`V*9p+^<P2b2@+Q$?ku5%o6OXUY;AJUkTj*3fXxE>BBWSAaIQF#^eBv9iVR?L@hN^
z<!y4}^t*)FLyUOyxKblxEpQ`RL8HO=-%>x4baNNJD+7w*w8jXjNEr~P)zH%QWBB_B
zBni6`OH}4=>Gu@!`u==iH|);G-wGeep((-`5xFTz{g&`6J~zJGJ)Ik@kz{REGJ5Zk
z-PG^d@9{o@JIXF6qml_Kx?amsmk<r!Iu<>F5E)f9OlCA${mM7s5Yy?|07CpXrHV`L
z`@7{ZuEwvc;$|0Mqx}k31sz6}w;5+BNfND1bcc!zZ%;0}y}Ew}9Ue#$-FS7G55EX5
z;Q9oe+3j)SmYpGFa&Wc5wp5n+hUeJ@wrR3_Gzz$w7*$v)7iJ(eX!Xiv6~(g<@J#qY
z%ejuftCH5;ZF;~hwUu#gZE7-rczFYUmXl5Ahkv03=&ppeBM1DccGXj&GcWsI!!1^J
zwbsM*YXL5MSqx9p>90K>EdbBw0i=x!Juq3pF}lq(!d>)h4)|T8;WdIBP`a$UAf;cq
zINSMmj#B*oIa9?_n8vO)mS48Az<@$qTczttUqXn0^1Xd`g4X@5+4}c~vv0N+1~`f*
zwkOl{4&PqjH6C)QMBHjnLtvL8c!&C4{NweV4T$iT739(*dYCq~adY5zk`kgZjO3+=
zW{4PyfmI1RS@2iy$3>snKsPm*Goq*P+gpKjf5{16l?8oK)XTSAJmN4sWc(h!62>9{
zlZi_QMD!dUaCX>1CAFh+`N|NoY{C|EpRPfLoq;REm9uJCMATa$91BFwm&m6nnCR~f
z+@1<DRkgV4{Ngbtewnd%W;wKNb7`aF;>F#mjr#E<n1bmM>YQRYRm>>S`gl!1fH_qC
znayP)#EPx6DWq5!F^)_pT{Z8++4U_)G=277sEQ2a#f^sd(t#fKu_`Z6q(tM|_|<LE
z#2ABfNvzf^sr{M8ee-hP%;PBhW^tX5iX&)q*}Aj%0-xc#M&q_qDp6~ObOj6ppI5XE
zo=x~CR66PHP=LfHTyD9o%Y^!3kR42WI!*A*{_9VDh2GeFMqqxfXc`;=)i@Y5idJUX
zLk_D-4oBx`#shnShSZP(V*O4ND^*c^U7ku!t{Kj)HHRbz7Vj@qu-}bG{d5!$gL<Q%
zpCD6|04$|=b$*RGzek-~zaBart$AKmDrf34V08H<F6#cR;GqYCm<eHdq|c<ts*7D3
zq(%Hz>uhPeDIH*Q`FKYgkU>_O2CQ9NdNFld4ZrR?>It{|%=lGn50_TvCfqx^Lb=m@
z<1-sVAB@h9f7y}yzos8;Pq(WAU3JD6n_CgKq!(WiX`8XzbwKy_Drzt?eRFT$hW%H1
zx^*D5-`*1B__4EJKCi|Nui+BBY7aafX7Sqz_`KxifMY%$HkT*vP?_Di5LDIZsQm(y
z>R@B|78D{ql5cLy<<Qug`6Si=xrL9q$SS%p;tW^g(@3>k2;BBLAUbMkL>jmF1~R;4
zq@c6)LtVi*NB_f%KF3QQ_9eogn)?0Xd8^Or!((|tI~N3aYoTN50<iJMZkv#7!{}0I
zcZzPvQ>^t2lu$^G6)_(BpO-Ibu+#1!xSfSD<t$?NL8_GA`!#DpcF~Bt_4W7G5AT_G
zo|_*}k4}%zSrJMnHxU9=UG!wc!kg&3NEa<Xx3l2CYf}9ZPSea+zww+%e(*o-5oaY)
z=36GTJ!scBAa%XmAS(S4d0NB#y@GH4$H%V7rrguUWz1);aZnP%H%Z=Nu#)XS?p~v(
zymAOP>?bi`j4tW#d4z+nB+zL9hO4!-=`PkZk^9x%G}GP=(SRYc$epS<F3QN<C#}-x
zUiP=ScJBp2-O1;3ch<!X6{b$jqxT2-hcDw}&zur3F6c4OM6t;(s~EpgIdUZ~@(W@E
zht?idUZB#$w!1JR@yy>Hh_lJMOg(mny}Ei)$%6+7Kd>+xZO%cd0gvG(xBXcQjzOEM
z7J5((lVYlo@HXXo)z{PD8W7icS5FqwXv;&_y~QFz#iC)DTyjg>*=X-6WJV-E2RAZ;
zuZSSs9_XLd17z)iWD0yGaCrLu*-h?M*pg5qdLwH@HJ^fdcPL#kKSBg%sKu9Nx(=3?
zM+5Q8xClJ5(9is6@CO666!{EZ{$Zp|WqNL&5?0kpf$q;_<j@|zV>E@RDq0fv3i@0M
z3W#AkSicg~9FV_H%$OfY#|k(d`q4Y}ap;~Y`eX5JwKYV~<RM1{R>W!tH;zJr?9(u&
zf7eJ_a^>riy9R>1z4E<=Iwkj`$SmxCzjO^QFmjE$5Utm&x3Q0lU#nwBn>rwt@R-<+
zY_Nwets;%KmulPPQ%(Q2ee>B%yEj_r^W>OrUa%8)9wFmwcva?*_v(c^iyO!Udad)G
z=D5;wkzz(vT>U`Lq6bWI#G`{h!ME$iPLSW0#a(Jg8y9Hc513F0j@Vh9Z9hbsy6=XC
z5k2mNe{NZ~?zXm`UPaCiHqfX|qStt&VgOBxsgVIRjd1rVxY3Ee<bpzA`UJS<XPyqR
z(&;;;<V|0ZT)w4*Sj&Y|AIgI*SrEnY&t;m)6}D-Or<b}sr{9lFHi(@F1UCXFuTreL
z<8eo@-cvmObj|6v9`^9Uo8ZeOHQ>u)QZVP2q+V8*Dw|yfPLY)!bHzuk3_U6DgF1@c
zZYkG2dfQf~pnu$OnV$M+6aGrzL?_3SQm-?o6e$yRy%;`5e4OatLLMiKTHk-}%QrVP
zi8Yu^1ezmHApUkc&Un7NO5j4d_ZD50+*^AXrhWeDyxjDxI-$_3Zj=w@ftY<=rH8ls
zgr2ET>b0q)aNn75t2_QiYaX|Kk;S(G@Flxvz8Ay*M`yqS4Gxu+7}D=8g5|nP#eLTd
zo7H+QCdNd7vYh6-+ym6~hPcc)fV=d+)>bYK`=IWkKLB5(o(R6H1u?F4U{f?O&K6ei
zWcbT4+{`GAM>%pYuKWN{Az^&zrcQZbXGC;md-H9+5!3m^BvY*RZEn1IcDJw|eHHuU
zqi^`~MaySGwdUOZm(gG+;!pVf$)H-*(8yVZl~?GV&ldv4sl2;PGBV~h-Ig~_C&|l7
zZ)4~y?fu(IkDeO{C773Q5)uyyEeT(eplT&$sqDKS$}dW4z@*d}rufQs7T6Ng9|08e
zruvU1t4qJ4`;08Yud@?`y0QF(J1!Rwl;mzTA6cm0Z>Bm=g<(yxnyn!79RZSh+;n$v
zTMe}vNNK;0=Nl!@hc=ey)U>&<=Ox%*Bm2N00h9K@ta9dG$vUIoFVS^9v6^@Jp($vS
z;76DH%G>A?ERr5*`i5Lj1`Y=KK2ar)6sd*67TE@_D}DtikOH?s03#DSu$_YE9|ub)
zSzPO92Tx>(fI_`B^EdrY`V(??FV*vGchKDXQE9HkQ{`)%C?N^&b+eyyeO??s1ES#J
zMy<;(x`lpjl*^$-eZBllTxFi~crL+@E-1zD*d**-&=qZ9;D&H(y>n|r$9d=Cng&JZ
z&f$*<Q@0-Vb?V5quQm>0$+$&~_TjdkMpEmj4S8TEHmO3)>bwxQLRl$>w#?ri)Ugr|
zrGKx2UwaBK{n%cXps(kge83lU!s_m7&dwd>Lx({5&KhWCey$wTg-h*=4!~HFtBUX7
zF9r}?2QY6e@z9Mu-&i(HExsf6DMi{Dn|=>%cy~}>Km!l>G!VZw-oh9zy6=^`th>TI
zur}^6;Zhy;f{{hZ&C#)*^PKyr3kj)cy>Gw<(=KiRHH<5<L=NDMFm=>mOD9YRJr<D*
zxRd}QBhSwfDAxPCl_9%VL>6Q*kWgjNf)1M;a@72>m)n;{5pb6DdQ~9ECO|Mt$g`(2
z7*p}%x>d5ev*k|_<y%GAfycSZnWU;R_{^M`<-vD#&8TKMb@S<U(NL)6_{96c?A~)9
zOKMqN94ECBWC6b4ZZy`FPNoN0?k3L-7%ECfmce3kNb}>(434N)lxO`6nCVlNEtHJ%
za7xa-4U6u^$rk^j#Q8SUgx)NG$ddKuhezE#*n46C4v^$Z(pVoynXg=tkrCR1<2llF
z*JsGA{)3JCF8r<wcZdCV*yV<ay%a~vUDx!)ze+`$ka6+p+gdXDQn2;o-z{`}10!cS
z2{h~8x5?Z%JgqP*q$tW|hZ{ajx&noMZ%lBU(w3ue)OiTX&p$oDs1RjJ7Bim>$l@VL
zL^TLj8^>kU6Z@m)ec<9{M(K{^ahmjFM+zD!`Hz8q(>ZA}&qmA};B(=P<yrHcHv!5w
z4#Tr+Vqhp3q;nna@1192?0uhAyb`qfQo`$&nm0qoGEq?~tFBD_ZBjv{u&-_=S<?Q*
zM({zJjRO8Rb!}0+8nci)`_UkspPgOL`(nh)`_!en3n(yXJ!+_4zRNe1htQ$d<TFtZ
z>!VX<i{-c7msLFKkB!=pzl*4M&Hw`3t=3ezJ(wu#qs|}Eo3l!yjLUSqFJ)+4o?^nV
z#bqYy*aj>#Z|N(WO;C}?u^GQYz?{X=U3)GYSQ)(WYAs;h*w1`l>a8L4T~>sC7eKK^
zQ1DID-HIv@J>tRHhtG~ZA3)8?V$&fZe~ZwgSIYODIR=$No5(mefm48LZ8{mi^C`1v
z6qStZr*2;!v{RH7vEmWBgnN$(ts(3KwwcpdgS-C=ai+K1yIRWM+C-td!EJk^tigWs
zzYdGT_~xoLSmW(5G9SzpM=ivWjzOO(PVuO}QS$wB=(p(Eaiz(Y$%`zAg>_Oc1HKl$
zl-3~j8p#`tGt34DNUuM(-^T1JZ;J7Jp*Lw(#}ILTn_20yuUT$At}>%lH9|vD*<j%I
z5dh8BBc5a~*D-$z_5uuDeHIXKH=D&mBaX`#4oX@eg(n9bIymQ@2BOT2zm}Hk{kUQz
z^|87l2Oh%aS0|auOE(~n3TUZLhxi(|d#Qi3gbBPvR%|W2%ZJ-0fQKywsr76D_Ta=!
z^0(~E10gx^5W(5hUji<}l|xUOF-G3VXrbIn&jg00=t2z}qB@E={hVzrmsi(Ei_o2o
znaYp8{VDCsmO~HynQL=0&Yw6`Kl{2yT4$~~^?92NQzA-@Iy>?Wm9BMY6xq|xWbpzb
zr74);uwe0PgnNv*!wqs^f1@8A!@ZcIH1C(IZ*E?G+=}N0{Jy?xx1Jf^;Qh=<Hzsx}
zC>S)ec*}LP{(?x`+q!tRbhBbbJ0FyY$iP8Jv;j*|Eo=x>zx+3orEmL*U$XS!n~(Ms
z?s%?v2P{m=Tp!KLL6^fc-*TEILiB-sd9nuFhihyuaR9;ba%jxIdWb<$w}pXR`cyLB
zf_g1({$ZUl1S0j}A42roYU&kq>0Z)EmwyAeNk}~y8o(qVGvtC>E5^_M$tMsnIJl*R
z{2oSTn6{AAu#JRy{;YqID>Me}HeN-8Zc%1=tL>?)s5Iv0LXAaW|KXylm*VVLZo}~W
zu;DEq9{v>wy@vXGZ`ahckN2KLiP<#o_vjO)GHUIk+33{_XtB#<r4W2G0qr_~<+TMt
zi>E!(Xr9`=My_)v8=8rEL1JIl;y8^Oz4yzl>keNRdXoPnL$-#Rb@qh212zu+3%50q
zXe5WO1~GJvOi!Nr(SQAOTd&#C=G|H}J0ia2Q5N+<#N@?sWZxv;#{cRa?x!-E7dT}i
zOgqA)oQ!qFgT)i%1hgWCJd^sdO#+rOnQ^CQ@NnduD(y*2&`ce`*{F{Q6PLEEgzs70
zfIgxne2CKzfhX~5_zwz{OEwtM7ciqBijWTE>9nDCK%V}vZ?W1#8xE194>u~Hzm@QJ
zr+nJJ<ht*zURLX}yWYxek?or}w?-fd@%va4Tz<bhS$4{1lLef`VjRM=GJ|sOAZdi#
z>Ow4wgOG{EE$isSTJ3IW{Vi4lWxFJpf!Po+XeCpG$hY>zBybP)Q^(^5lQ5G+`*u&?
zpJg_=4y>caylx-s?w0GnKLwzsopasvWyRP^t47)PC{%i|xfOtjlgxxWeLz%U%7ZF{
zDf-YiSc13um7KdZvSW2OIJ7<N9cNlzQV;d;X?Lg^^7JagI1ik`SE5x0W61K$Kkgu<
z*Dpm=T`CK>&6cn^f`L=V-C#Bi#p(5fPd?yX<cvp{6x^0Fn6=EL7JuUcO~fY2BJO~^
zp?n}-s2m2e*aZsF=r7*LBWvjKZdm){CX_JZZWHPuD}x#E_DWP)i(%QpW!xgv^3t5P
zzZUYyzIoq!aof=mmzD!O5?6TY!okaqdh5A**co6y#Mgbls7|;!K@Dc2R5K=R`TK{t
z-m@gmYudMGTOd26XG6SrPY_Ctlsj<feUTCTa7?Hs&OW?pU_wDqBidwfZvUoJQIpK7
zNEf1rnPm)nrwSM*C3z))r;(oxKr4LLzGYpU`}n~=9WX)1dMuaF?%w)XdynRmR`9$4
zoBi$Tp@xkTl&yVB>c{1c)AF9SzW5C_fKmeUws98;DZ9Z3=8}Te(RH}`{Pt||d%_8$
zT8IZVxk=A10d=Ppgk5;ckJ87(xNsU_AxNhXN)7ho-b)IsdM=rP3+vGt3k$m%h92~%
zgp7H2-nKr-OU8F@LL~^h!H2#+r&|V+_n)E14|?LS(|AFTA;Dc2Ab)7WEUb4tr#(VG
zAT?{kW2)~uBaYnnDiCV%GDa%lb=RXFaDdrwx=EOoz-y@4Mgg(5v(4{fh;MTH7twtI
z?{DBAG)M$R{j0dV9(a*ITk8Ba-j<-OjGL5JVMnIyy)?MO3W2zq7GRL27xa=3z6A=H
z{v5yEqkzv=Q{N<FC|#Umh_mgBD}8IZR394qCq{a8oO4q@*)w-TJlrk%vHB0E9s|Pb
zg@Z}2h203Ps|3el_+Ra1ePNr)5#Dm&xfRR=B8BZSmnbNx-U4OynrO#l0Rg{@U9Bts
zw3?U-GrF9iKw4D+sH&#r@N?z`y5@)l58MW`N0`GQ(AOdREO^h0*Tut{C8wd-4{{D8
zvjZ8g)TyqmUpf6XBCqmFpAU_7Rdinqt*!IU#@>Ctn8Hj+`pw>{Smy@u)f@hltPQyI
z&$2#F*@t#L%SbNOob1|<NhxKoYWGKxiFu11ZUj;(#g@iF2T>)HT4luq<EWtrlEe?*
zMy<a6=l51+fy<0@C(4lRd6Gs37t_oz5n%v}t&dPZ^&Qq1amT*Sm=1wD>kP2bpHC&~
z{C)(-!t+zL?QCtUUvs~J#XEyO->wpvA;2VV86OC-(YLT})~Nb#UKNci>PJ;oiXD+4
zSA=EOfw^JpeVKqXI75izq4bVaemq5NQWn4HT-LA^YT##>^TjK4&SsrtRLM2_fP0W*
zqBOL;^Df`V?IX$y^lq_u(FU*bK(QCeUf@%T-NY?*+Vf%e<4yA@U7Gt?NPl^IiI|VD
z-P7GM7`20q7wlZZn>X<|8=NQnuoXdB!SQyUCK1nBJeUy4A&Accs7s8<yMN30cAb~D
z)B5${ar0yZX;`M!-dGRIAjs);NKkuM=n7Ze%%OQ;&x-eRH#AhPQ*n{>{+Qh}ZQd`s
zh4NGIBp`Bp20@mtNF_A6p{J1b!YsXBQ6S#}AxNlg^`CM7(<%0At&o&8S<5WoEb54y
zr1me12(ffrsQ#mMQ}mX59Stqsd;ROT8pxCm7%xl+cWcp>0l&PX)Qmw7S&SSd+tiEN
z#RHwoKMPc4VyXz_R~n(Awl88~pu-qvd5(2ANjTH*^s3C>xN^!A;adfEz4jX-9@KYI
z2Orxzb@|;tA9nb0xn(Cx2Iv~(@blfB^o$um?{6l7#t#_zk0S(Xp=LiK`i6s!3*>W7
z{>U3Lqxyal-O*8HP$wTVBOcyVHc#CA=okFQcv)TL^S1=k(Zt)o9!sURNDtbIW8XB5
zhvDL5YylCNO-wK4hbcL;VwSXBwiNuj{;64CUxp?&I{%#V&ELEo`G-HbYn*dp$)iSi
zJqGO5gL_f4hlxM!BupCam!^aX)NlQ=;u$g#OmnSY-l$j=N4jV97AW~fi?s<fyg|*j
z`ijityyO|9=*EW9!TwY`=*H1eY`N$IH8?z@sIA#ZiZ=&EZe%3@^eV3U#M|JPA9{SR
zZ=T%}XT|~5%<u!=Is{gWu<)VlA?=g?6RBeoK@&9y1+(1~>bRI6D`md_sv$<Co&2Zi
zh|j++e?Dzcl%@dlX=jT!1%u6x{~Z*VbnYf8=6@A&UE#1}4gBb8<@@p@R_um6=5e&{
zY&H!#+jd>Ce>MGFmpjDcol3iy!>-{0U*_%NFzIyKsAVKD!|DYSfXmR9WLDoo|4CK#
zJJjJSpirmV<CMEP8fP3Km)JgnMdb@jF*F<^4?Ud;<W&|d1}!j;FubV@IbFl9l8=a>
zYd5FoWjTbVhGKyf1$nGK1RJrV3KWD8gkk+U9Se>;|4l`Qg#6+@P-)AK#D69`XIV@a
zri|nu)K>)4^8`>p7^*`Dw8gb#TKR8O2@NTHuLq%84?`W5@Nd%cL#kKq90Ctj<N@zj
zj@>V`qSgL;3*N<Mw#r{h%n_&5MwI?_ZpG04UDY+Z@uqzb#CV>#l<Rvd_Ud5c1`~?Z
z6@6q}U1J7(oZ<$1%vKefy21VZLo6xOR(GetYUI=VUqwk>%iW=z65)E2@5FzP%`ady
zz@7sR0k!8&tTs6FFIV`cdQ;l{tD~d((7bZ%{>tXUXs8)V`|yv;$!HjviO+XTiDl4K
zq^yYtYr5Rn7=!*x4tVZ_O&0hJ1`ENL+u3h$)UR@`MTfWCl6!du{v$mK9Oy@CO1SLH
z9Bj2UAzbLAPGtwpP=<Y)HbFD$0SJ|w)hd3=I`F~?@X84sdPJgAw;6~9=V{eLTCf1G
z2gx07?>hf-UNI|uy^c>zD!2QCucY(5snZDUL#hm35<h-6W2$r=oOu>HcWk+B{c7It
zdmF+o&z``!U~0D1Zr_Pr;~`pin;M;0rtJL4+u-be0=oaS3b`6{?YrXhggNNTbDo;R
zJU(H(cp4or2;M?0e6c{JZB4Een^9wW3##ZRGXJ~EgKc{1-&7T7i7$dQ6Y%{{4o*c`
zxRKV9dmo&$-SM?FhCq<0ip;$)V33_ZfjIrsg2Px$V92cf6N8F7*5U9kYBGTiH6I#K
zTt*Oa{-P_)(1>qPj~c+rvzr*>WP+mY>}68F7M_V1YkUd$+meUZx3kWCs;nQnL(l1w
zRPuwwszZ$V_(OCia$|mE%u&x`@-gXTF8&lgHSso`a%S&*)9KVikfMR{-C{Z+EzCE)
z+(6&kt(@T?XS$`gMR#g`z3zWP^?B!PM(>k?CSHTD9IgNQGaV&{Chfv6%F<dcGO3CO
zOWeehPeSl~6@+1OCR+~Q`g{U?ZLd}TGpA|+0)B6ZxsKxA$+@rlUL67MS%gAIJ5=nQ
zzSf)2*JIJokHPO@Bp++Da9cS~h_|oK_Y2cqZDc=$9@Q7)jLTn8N!LZpzpT*w@zToI
zoLzD^y!A3xdM<}gZG29za2|uX!6>q-pf$LheS}NLE{rW%mf^v9X$9j-X`whCy!)R7
z7j9Z3Ad2z_H^)sC^$q-bBQNT%fb-z#u^x)3=a3rW+$!p8VqHf3g1BSTo4Dm+5f~?=
z{H#jczd4*4%xK}xTZ4$@_>)qfDq(-vd`lS_)SeNvr2MB2TfYODDp8xApCqzTp|BVZ
zqlQjju$FdNq|5l=t~!q^Z&dKLXk6X1;_U^sS<t1oikG*-JG-o1iplfr$@VMa9gia^
zSQb}WPZ)mY99IjD9h$khIroOy-F!c~*|M!8zajAU(rsX5xSnSu%9*yif2;I?8S6Rd
z&f&2_x^b~bcquf~c3HnE0_6JV!{xpFssDo=)3E8?`h?~DF$ujqTS(o!2<<FuCcS#O
zAh!~olR0luz|TF|+8k3J^f@(4dlO<VXR4d``NyTyOaQwjfZ1__KCwDxR12w2UcyIc
zBo+3~JqVPQ>uzNlBWMAe$t?Yv!rW(sNZmk=c<~nyc}rUiriB$mRP10*0;b~`i-upS
zA4+|}T#qD@#SIzxM?#JJZ0i%*mBvR0Vmr%@udb2m&p7Ys;e_uQ{JLGieYMOS6$35$
z<I#;ET~*exRb8%ibZf*<Dsd9L1$m^*Q<JPMz~-z&aj9V);Q`Nw#UzP-U(XBN=V(1`
z6l5goF49kfCqF8HF*hY*ijirzm-75!a{<&XiC>Um($sJ&&Zdh(i+iu2c$?S^yr`he
zfsS}`|E23ziJh&3^Z9UXxqg!A*~NsgLJ7a_>VPn^f`c7wN=FN54EBj8)5nmYy~L(n
zc3?r><3`#}wj;C8X3}HJ$m!AsiT{$!xZ63t%c|0TDG^z&jf?zpScxzYdW}Oo6*2RA
zW+w8TTKm6@ch)_$-sisKfieeCI8=pekIoUs4GE2(XjoQ3NIZ>^@4FasJfMns;_KTU
z$WRM`1=tFUgUn4ku`I+}L#fU)yvXid=HjaF48x)u4ZW7#dzWy5;I;4|k`V!{yiuNB
z!6)1kdom1a%#e)mM2nP(i9a`O{6EJk7Wis?j-D++5AW9p?!yF08MhCT4d<B=7`cy<
zK~K{oO%=w?L_ZEHE3$M<9f*H5pf%`%%L_H?(S7FOZ1?E>TGjavWo_-+zK@_Iv>8Ft
zBF;vL5vO@Sf8>lOy_y#t{pjQ0EuK)!RM3kpve87XDEXsRZzDPXPKJICQjx3Hj3*<u
zy+}n1tz-*Tu_<R*w-H!EF;Iwr<(WC(y6LU45&FdXpy*u-lp&5Bz76^6az3G(YKd*-
z6B+TdUYBAQGayfG;1E|}C{GyH0O;9)xb+#2ac3`x${434w19vTLiX*y$chzc41W~?
zhtdz4Mr6{$-ieNcS5}el2P76*^kgHjN4|x;ibItDt7{d(5xqfqya$R7!*FwA@y8g`
zc#0?TefoVv#2Q!8$!gIKVZ;oqn2MFy)SXknl*0_P{c<j8y}!HozA^WfX%e&>hcC@-
z;H|g|(=g`p2i}t}lsBzxU#2Hy3XPCLm?xCcIt_!OjN)Uh;O?JyBks)i0AC_Wa%(b>
zbJY`hhne(Y1hD1|gMi^g1he}>S#h_sDjY;aazMVnI?9~^W4%uHNmW;kpU3{J8C+DI
z!6rl4c&K5=PR07ACNq?i+V^X1Ikg>NgDyTi_1Ip$r7*~b7bf<Iz-G^8xfkewnqcQ8
zp_uvH45s$4*cd)N!MJ+NpEK$Agzx*Zqr5a+G?PDqA5*@oIN@Vl$X!T{VIu@j0>-%t
z2fuM`p(Dd-e|lVgj5H~8wIi+u)x%$=0X|i^u+8byF%{*{FBJ_zO5xqsDvA<+DB}og
zAEi|@8KG^3Y@XnbgG^qW%Nucm)u5-)q=5T_o1=l1ytV_?U*!ZVT`FWn5f&}=)qZ<j
z*wD*voNdU-ws%hC<y*wQ$ANyM&cwr?u1XQu|GKce1HSn-88AKJqdgE}!}q8#{c~FW
zE}<#cl7wTp`1@EZN9}=tB!n?A5N9YqSx_Fx;~SsOaC$r&4a&NZS846o*-QXq7ypyZ
zrDntymFCG{5@i>dsqRRde-&7V$)p@{fgJ_#P{qAGkW*cKo34?epNtL{|4|NQ{;9q?
z#H|tWT^E8KPdK@B2LFB0M|7=oS}Wpfm}<-co<?!^lx-HdjWJj{_!1q!gpA}y$Gz1E
zuX{q$Ek8r&Xv$UMDBJUb9Y$Nt>Z{B(K`9IvB-7y7+dcwQ?89U91F1O4!jUiBFP`I|
z56@kCdBLi#WzIrM3OP$Tv2&e|v51$?(oaY0F;kl!zk<v^_E@)6NUs_sLtS?8Fc8L&
zrQv35Sq88bEr@N!X1i&V4HT5pl2T>Y6k451a{V^&nF!!eie#h(h!p3n@O6K)^JP*e
z3eorSJQdS~3%rax1L%HQ@93$=I9J=M<-|;v9&dZob@Ph%Tp)4X|C?Bolz(@ijaMD^
zSCCpJqiKF`nc<2ST9n`>4h~8lBP8qY4s$8Ss4_Q(zfd5|JsdNPm(jQ?&T`+LZsFag
znb2-jgg=I(gAFy->^}vf7A7Lk>Wz|=MWc|C@D=AQ;!N1FFbXzvC9oEj(~Hu`qeSb4
z2KY6_>JQIJKF4AJ1dejDo!Ocwvok(ItSMJNa#5W<DkfDX0uQc1AIs#&<BKPGU3Mkh
z2EknlBV)`r*25WSTkT>+v&LV`1^?MhwaOIZAmrC}&|v8`W*nE^CC{3zL@LWA{W=3S
z3^Z*i?nN$>!p8WTx-t*BHU5y(mj9K-wP3q-J7oUf-Nb6uiM6fpWNI}+2$26btg=i*
zdx7Oq$CJ-kcS~oYo8}P_Jg!hX2=LqK_Qkn<%s_*Y-vm)fGP&NdV%xco#jA~UN{^!9
z6kE0zYnmir^@SYnVZp)gq4@ehP-ot5#c61nkJ{wc;QE;J<;W2d$sSdkLvtC?;YgIs
zPZtE5ayvth%pmxJ5nP_zLMVrocIBAjt^kyC>xsWXrH!qvn;sok#ie=dyM3qda{-9~
zR~wMg!gE9?`rXpH64s=<8}a`d<Svg!%psuY)?$5r3<-~|UUcVnC!-dY@5+Q{<{>V0
zzX$mP<oj;nZa(q&!REo#5|vdmsj$oG8zO5u&tsPp@bOwBB?{7d_x(6m6hg9Rb_>nL
z{^lHPKNHyIJarbV{<5jK&pU5Ya&5&69Q_gDvDYg?4?@uYmXu^=R;o$OZ6t4|;nQYw
zQ{rr56bWLZpbj|V<K722qjB5H|ISiK!f&t#{5oJ^2DBLGl1q2RN0?m2kBR1MMNwq$
zMcY;+T#Z*lLKhI(27D&64*z&CMa<(m8rF7&TYZ6{4-22|>*_WP-(?GqIb`VC#amyq
zHlCpL^9dFYkYCkNrzB!u3#<&<^!U$ltQU@(-Ttq#JJ(w*_%RRiyY1MdzB6Ag0^{Q>
z<aMsJx!R<{t7<c*Pw9tMf|VnWUv~dv$^E)AD@wgGcdD**CEr(@VQR^e-4`a`z|niL
z{T`iix8m?bYCA1Wlb9J~<?Uj>=A>Bnq6;NY(yb|s$2*KOkC}i|G&GHoI?5s%hwM)R
zw9~X~ecq<v_*F=WKUMStV*LmHTDB3bni0%)W>wV8Ar5#AE{%R~)I-S@i;uX;PO4mB
zMU(X03%@ZFQ{K--SZ0JeZLF8G#pNds$2k#|4V8}1tT2D*l#h?;B^Lt<@=m`en#$xa
z7peS>*RIkvi+a?t^EU`%o%*S$aNSg0!NI9Ir9se@a-O04zTQRbwZm>NrJ=20y*FxU
zzblC-*h#yTw!*(%L~Om^9k_k;{q#huckvzQWRTpTG2ab6+a#<OZV&UM)pOTWwrhz}
z`!f^C)tqknrv$4BnMh?RIWR$<dW4mkR`xf;>|JP{tmm>)mVyqh%zn<qb{~g#(|W3Q
zMO|-#>sS5_2bhH&HzSWtl1>?PIhyMweA8tvOiFP#(~gIvFTqBse|#CyV3}rtBVRX&
z5kOy1I1ydZsT4*>`>q|sL1zpz2)ma@6+9Q9Ut7vPS{2&%8D&JSIMj;LL+Ht|({>Hm
z3x-clV8coIcy~=^;f}8kcCDeqn9oF`tVIP8Enf#NZdk;ErZ%popu^($dzc?5ZuXg)
ziI+n*zMc9r3;qU=9oNkt*uf3y6i+?cZvz{%%rAKYDm~5=^WE21hLl~^KJd|KdviS^
z>W_|9Ei!~?`|@6dW4);bA6?rYA3=0l7FM<lEAHlU7Y3P9@Q3ERJ?KpPjN8w?GY9H@
zy1#KoU)QJcd9HVhAWRuD1``E2lfSC0<I4`j@^cljDZ+FQX<WS>@&XL>%h#w5SN|mE
zhISkO+PA|K1g6x(|NJ??XE;j>NQ?@``Wy={!REPm2H#N324w@H)>lKY&yN<MaAcWY
z^v!JSW)VWDDL+8PXyX*HA%1-cJ|~5aDGgDbbVYMBDrh{m3M?o3PtvBf3Ihc)Ec1@d
z+C-5`VN&}(xhkKjcNIo-X}+<l5aXJngWO1}L0iZvsG;MEkb;h(+8VA46vM9BPkhfR
zw~QaBlDZh=;xF@-he?8bg(=Rau(`r&t7!S6kMHNd{3h9dkiCR}Vxm(A2AY0|x@iVG
zUDf?3CsYPTIY!-@Q42S=p3Fx4=&IlOJIX0(Qjvz5#VZMa&5t;$8eE_sxKCG$lzlQ&
zALQDdl>2WmTI@iQAazAEy8j13K)%0hAyx5Annuqm(b}U#^}$5XKb+{rBTCn*sjkHe
zP3_82w<K=*!z0so{=)f#7d7*`-%n_3PLJ}A%j`MY49q&fW+NxT16j@AqxM6A+G+u^
zuwBOg=Qet_9xQuX1R-)A_)i()P|pBRCI*~21fuxLRMEab>YqzZGUP%ES11~trEY;Q
zHTv={W~={(!-xJQaAc|J%3`6A??ZoO5dGy5^cP1k<c~$=zR@J-xk!~m#fPLW0Nrv9
zR9{}m!91{jSgJKcN%BzrYxv{e{%U1vX5q_K=ihGqKQ(^QiTJ0d0}(H;H2#}M_DXKd
z^Ymb!tA-|XYH(Xw4qh}?8NF=H_}DpXC;LmA))cT|V+G@DOBgKYR6bV>W929HIUkFQ
zt~{~m$@w`Ut1Ch_BPnT1FJ;;lADA5WFg&O+HGdHA{o-fU6NgT?A~*ZX)p+k`$P5!z
zolDe8RiTxpiq?UA^VdOVpK~`9`qb^m&)NDz1vhs-8fhZMq(n0ZRL&9@JQt|ev<h1!
zrERb_O8YaNzK-Z;*3!!~0~K!y=&Jvi`%&~aZx}g@%#m<ak;#Dz=IBys)7LLhrVQXX
z;0I>b;qi|u=oSqnnsG;mTZMwseH0vExL-$)KKbXR#m1fQZtBPWK<ZLiqOwM!a)GP+
zu6Jc{W!@iH)1RNfU}XZM{i`rGID)}aUl@oW38-sAv%tFM&QuQu_wRcgPaK$rmM4C3
zQGM=DoAL4s?hZV2ysR>SZx-Fnzp|s?_sJZ_2YfxY$xVmPF1o|lj+Vx57#|&)*s!J_
zJJ$DM)7moDt}S6`xRgjI-)z-9RbBSw+_W$EJPJ%N3U_H4ZoMTCrN-E@op_ncBzrm0
z(%7?<!gmBV^limYT(cS<3_hmr+;iV8iJblORy_4hw579h<oOq^K%%FcsaUu>YR%tP
z%<GWWXPRQ$a&sAA>@xNYk6%-*ExYpI*6=&vUYG96c!2JLfD8n3SHUm>jm=x-0LlVv
z_rbt{1Oght0Lff``T<d%%<JJPLBS9pd`BZ+kf`)W%9B14J^QIJK0?bE={5)8VJYQ%
zT{Y;|!oI$R*5KwtOG8)qhlj6no&NIzue3Vv`+<-#(lkP?U002;`lygA{{Zjc`<KE!
zGueA~#`s^h4xk&|yD9w1WDMWU3m1byPOn<$s?qZcV)W_(fBgFKfzd4+Ru5w5mO-4g
zsSoSdR503C3SBp^qR_>{f{#N79QXeFB<7c;zub^$CK@rX+ok%JS^R)Y7rW-@$lMyH
z)^<1F5Ic@elGM7MoNwdcqAzdQ^^Pb^@~?Q{x#Hu(`{en}_*i(djP*B`BiW&K1TEu*
zSk<`=#v{Pi0=vpoW>ANRfjR>}J>neto9+ASX$kfW02$w6Z~^`~8NYQ3v>w3PznMxj
zBL#3|$|Znpc<|5oZ&(vl!*ys&utvEE^p&)9sElEvFx{IPiI$b56e7$g!2AMmU;)6r
zuH*f&qbja!7X#5Qmb8{RA(B|5QB_X0*-olPwYVn`d}9)ug@iL%!Ar~me51iXKf34r
zLC4i212P#qJBP8WE6&9AqkZF-t{Y$DZ<-vymUY9}w6-5(gQc*PFC<Fjuu^yA@gu^0
zcuu+V%L>a4piTmn*|rU)>l$OHgTO2<m1$iU*%-$|Q$%--zvlwu-WnnH4w_ow$+^Vc
zz2#N)<z{2sb2Iv%W9I{}i__|NFhD{w=1hv8ja3N8H{-7?uG2{xtg#a4#w~oU9O}Jw
z7Jqh^ePp5^cKny_&WbvjJebKKvhm=abF+g)+|w5f>lq;*=HByOK+yQErU3?v37Gc3
znNDN}KzjiLD!u4^A$WnLP<iy}d1czklXV1|CRj*}h&t-u_zoFwsA;S7cWmIj&f>e7
z`Zzs~7uf-11lMmg_?%x9z8EPuYGl&Wt1b=X=ye0Z=#`U$6Pq?oj$zZ<F>F{pjPcR_
zsN7en3%IJ@l<s0xx(D|tcd@G6dJAZ^88l<StfPNIb*)jpW1C7T+-2=Dwh2Bbl7=w<
zF}9YK9+?xMEZUr_`5hUSM5q#ZyygU#?s$E@878k$E4Td2RQjPm|4wUFEu!g^Mg(oj
z&C`P&G~Tq|>}gWHZCiPE`Y+@4_iPNxT7|~oEk)THd{+vLSBi9ei~${cWi)xZ0gkKS
zx)Rb?Qaf64DM06CK|-1Va6KVClJ%x6z}M1af>T#${CThTd0(?v*88<9&YC%of<Gud
zJ<=~!X-sOrWHO|<4kuhuXw+g|ZN|EuwwWRP%_+PmcZT$7>lj`H2avt-ClhRZuOM7K
zSn#lVb55^+Wl^rab*Q}R(#hd*xoOQ9&YB#-hBZSN9_<fZ-%pxtA(tCM?q3#i<!Bnz
zY8tJOc=@DA(S0WV%Kb2kKW1478#`a<cJ)@)U$_6}pIH5?u8yYJcW0JkS|`8(*-p)o
zTopftgSJlLCVjz0+iz@s`N8==Yv~KWupB+~?01ATi*$h;0D)}Oe(PxQImW=aZ<krA
z9r-oJZ?^hmEj>&BHSA*ZR?AK)fS#Fw%rW$+-*#~W>hRh0-VwY!NxF<Yk~n~LY0Q@t
zj#DT{Yc_r=T|75MF_0K3r0^xd7~c)n{Cua-UCdJQCi5kn`=$YB>;E&+ziQXWK$#bd
zlDcXbw^3`hvD~PtrF!*nD{4HgW&0V0<)>PD?y)u&j>f1~V^NP9?V4F}3jJ-Jg1r*(
zaz4Iq4xp<vXWn?v4dCjLvaeR}^swgU5>~%ruz%Ght41f>4U?;I)}~chvt}q7=<kc9
zCuA52*=P#+_>^#~)x>Qz6~d;K*|tKIS&E)L4I6xqk(%Ed#T~<kF}!ngf>uG-&e$9O
z&=JA2fwFtabe8W}BkH0QR7*Rk#SQfNXSrL}Um7;{Eqt!+p4ie#rlJ>e0vhp3!X<MG
z$8pRy^DGNsHl7vkv<}GB{Q9KzUxxW-c>lc&zs?{K=i+={3u>Aop!;E&E`XGrfJmMM
zWHOSZ-NR;cF)tElaZ>x~nkhin)yR3&0@PSN(nckqr=m~kf9EjRNzUz){o;z(SH!lz
zK7Z4W{u|CaADhR=!*U^?crKLhCerm2NYR#URd*Zh`i8|uZNp-<b^F|61IOnZn3}0$
zes*cOR$ty%l}itYYU#n2Sa>{i77j*oc_l<OYDa`oo?h9)_sIct4YTO4Ef<orUz<xe
z{78R!{JM#WactVK9-B5yV$JH2sIOA0(_7t6gsiuvJ9{Gan^h&-O^qayZ18+D>b4xo
z%<!8vb{pOK*=&$B#%t&E*%6qtGMO*~UZy{uDcM@Dz{o$Z74HTAx)HxKA=VM&?M{me
z;bJ+e%gOPpqQ&aWx^$-cdu{QLzib-v-~2tIzfE;}IZ+7_=@d=YQ5%jOfHj9KDd6YI
zc>X-kpUHl8GXS$?)H(rv!PW_o5|0J@vR?l;>;trL08QOx4k*h+sQ*v=eIsgW%M<>c
z=8<LE0Z8PX^;<#|3p~r5e7Dz2hGv%iO@009hL4^#boLE5U37W4b@kS2lsf*w+1O1~
z>QX`DN)Nv4qTm-$$`7M2FT!<|RGqyxR>i>xP9cQW4Y`suOEW92i>Hn(UwrgP{ilu{
zYhdPh4fFH$<wmpiconl>t)|oW)b#Y8rktONoO-*_uJM5PH|yG*j4ix09m4m)0hkZ7
zlHXX#r|14+S#J5yTeqF(UUcbpY}!5^_Luu3+Je(gq)QS0;B?|Q8x-9&VwycqrCByX
zyp}B5X3>}X@g@Lr#J8!xiOM$Pu-|t;yl#SEyItAW?vz{>)w_=Cn?-Gdn49X@77@<_
z3Q1cpPPD&c(@pio`phrIjT=6<5Pjhb-+sAeTq8|^)KStH8Bg|`Ou(k&op_XycZf!3
zX97B{zs`(6w`FMGF*`MAFW?^J-~2P<0dSXrCGkxuVrGUJ3*bedlF9)h{h3i=V(>YX
z{%Zs|V5A(QZ(U@Z$ahr&bl>Zd-1WOlxcKvzZ@;8+)%n*gLl=TQQ_X-rZ{L;h=y@GT
z>1fqT1?n-d5NbF}1eZ86=Qs$w0L7q;N^uDN{VJIpP|5c5+seH@RNAkpIBB`_t*Ep(
zA6`9oIK2A!p%BLpR&iwiOgOi&_{@r~Jv<*By`v`Po{V#~sg_)+w$ySIhBVXh?XrcJ
zMyBvRb^zv$7^_@%PM^5$fmH*${Hw3OJUaifi8_RI(@4mL#WZNt$>39jEx~Fzq=Utm
zYDzh$x#)SDi#7Btoj2cG<L`~`qW5=Mo!?!xZSIpfi4Ob4Is@}_^KDN(nt_And9q!)
zo##7AlHWcjSx=-R1n!W#dHogj#*@pRkG!ezTKwe9w{ilc|3mA&2)A%NQs6X1H}1DH
zAHREkW-`#$@tHJOch#5a?HjqUPKuwg{|w4+N`cJBbtS<phQLp0-hVCw$Qih_NLiXK
zzz%f-%(?K!aA~#x7d?T|kv4*XCM1vUI+Dp0-{JM*J0&sZzxo&Z-LwDOjpyGGZCZ6+
zb9$*&h|{_$iy#rFMiq!42$wVkY2wm_qLhH>k_4C%WjoXwX<MQmIhbD5(m0L0^qmxi
zU=XEBit?aRXAOtp+1Er$zadq^Y06fu?$6AG=gk~yop=1X=8qoTzl_<#bu7)*X6I{5
z4=l;)uPv+DhiY<R-?EyWZlW56Ve=cXh0M`*5e0p^H~{lu7QD3;KR)-N4eKt)Ew|lN
zzxu6iaCm<joOqgsJ2aw@w#Q1dK~}Nay{S#DU79*ROZWMKJG<*`EpHNJoAYOKc%5`V
zGf12EcFKcHJC7AMtzQ50W(GPFx2(RIJ+lD_&12hAp(m~HJZI-A95mYvIo5xHTs?jy
zNvCQbX*q|lPEuk8ev`~XBrTe?)v^ug7EP*c9aiQ9Iu>g{z#iZ)a{|2@05)sr*#XE;
zlR3iYEe1Jh2~LkXkQo9pO232yNCqQp8!#(RBvGu1x34j|z7D6*MvkxnHqRG2j6?LD
zvKaB+_-8};tv_?~`ERHW_OJJkEL7cW%94UZ)&}JXMMtvus+mc&K(Cbyqo6^J5xVij
zG4*vML53QUa?otKJjU%Dqp_y4^gU8xN>L~$s0_uJm`K9)=SNCkA1mHtu3PTPQaC()
zFuZ;G+4}9r_AFy&{}QH-E-ub3Ej_lZmmaRl#fN5b{QgBff1<9I!*<ll5T~BYimuZP
zNY*dk41g~F0xtNIiGlOovB6g~S8vmSK!Ta)1fmuYx4NsNZTpJbS{-o9MlYIku|`Xm
zvt4FkqCH8=v9h&w3Ynkis$=mV8VABopr=Hjl(u7pwqCY<wvOgzM#Q(#kex{inPCpS
ze`^vByZ*;=^^JgsL>NWxmi0G;_2%4_as9e?%%z`te|IHt_s}|S5g`apEQx|Eh>T=U
zhU;&-bvXehrSCO*BlE?GzghLg1R=AQq>~Y3Pxib{eAZ&@WC_`w3<yYF0A5zYl3%pb
z1FU^W@@7N=qJNW$&#Fp{v2{%l55qHEfETC%jH}PN19HfD^?O$LpZhbfxbTftsFC3K
zBF*~~*g$xtVH>jYP><R&??#c-2o^L;z=4DfjIx&0NQ$wnIsF|`Ehr1Hs>F^2Q<v#0
zZ7^=N9W1pSOfBT$9e|s2l#(Kq`C^LlaEkKkIN3hgR@*L!l`c{F6r-`wtjr$>ubX|g
zcHPvoRh-zrh^fOf&6$O{N9V$YuT4cKzA%UBr|M31siv0OahouS-YmhaDSt7_h3}CA
zFy1`xtQ+a`cKqn-k?X>Rm1V!(?!)XM0`lyhDx*-_*<+UhYrOg@J4`6$VHN(?Zokcb
z#{jr3-?K4U{rpSIl({FN_L(@8xsx5FA^m<%zq7uxO@ZyTrUVVVSblxyLo@g6fPl7L
zXi5OHt(TpRPT`1(ziGqu^~Te4e;@frzq%4Va^(4?fJPjrX#yGqVm2U6){t||Bzc&f
zU>u*R-Me{9Cler7nzaBsY(UcnG%vT~p=`C3)&JdcsM|s{#-H7cQ?i=>ObIp)h+b<h
zr%~_)3wIQTA~cj|5E9KU{@Y$F1%JZp7q|WMWdFIZzvbc|s76UKsJ5ysF_u~~gmDw3
zp4ibU<I2KBRLN<-BI$8RNjpd>Tj0q@?tvOn6GLb+EKbReKog%rkwYMoBRL8xZAhIc
zkx(H^xqGPAeazN`at>(eJ6h&*34%hb3jGPnYtm%>WE!nMH-RqFrxhVwZ21dE8kf)S
zS-kxC;|srf?CDt?KfF?(TAF#_ggo)7Y0Q3kUd|m@N~h}~k-j^fGW~LJ0Om!w7{9!f
zA5*R@CAFmLKKFD9K~5SW35(oksdv_Ex1H@SkkXS4WNWX@Q)Iwi4<^uQ_jQ3mHb~3n
z%O0<n#m5obf@1tfB!SVh2Fq->vURrA$mb|%tLiRC;N&(T7ubA_NyVeC#1DvD=qqlP
ztH#eyqGPo$wB4zlVKPm-b9&ynBuQ0@R4NdmhN3M8P>#Ab0{2Af9=2a+B)GRE$QFKf
zQvEK%(J7ZQa#8nz%@;G9XPh3<e_gKsjT3NtoB%8OQu?10=r00m)-<><XXJrDj~<8q
zO^m<fugML&uldSI>8wkyJMV4PS}Py4;s)r6iKN9De@14?TCLf?Not%Ime}12<OCcO
zFbGUFi%)EsVrMDnJ<6DksU)nxC^OSX#v=|&O3D;S!I>AKNKJE!{NATNR4S!x)5eyT
zFP$3T9iuEFm0m8DK|VoHPEZ)DsL3@tntaV<a_&2ol4;wm9jh1So>{)`#G`Z99eZ*C
z`<^|4Cr?a$et&TAclS2${#qD?`upt!zPBZScE&vE%QS(ElNO$OvWE3rhao)$-RMLa
zo<%iRNVk^fqZ75et-K7JGe0M&tm`Pu&kb0}9Rnkf+xdAHi0L^PbTF(y?sMA=fVuKn
zx}60aDnU~)0fw`VY}(GKT=Q;Bli2i>6`jn$c#w9x<*u2yI$T^iu_dWq`^zEz`S*M8
z3qi}g1yY?z-l~)B70BKe>npSw+&41|*@d3cT)xQ;xD2Ln`8@isJt14UcbAJ&@{{4G
zy=jHaoB(A2Wbm}8#FvD=!|_PI*susFo%UTq|5HqiQGG`<!A2&m!>{_LJ^mr5U*7)N
z;nKECuRQ1N)q2|t+DQ{qx*cU9(__pcxcRJ1@n(QY0|pppX%><g!WZo;;H|~>y))&5
z>87whmBw+IR;L9!>3x)1appivPqN>4HzP6p!LMIx&~npQQd&aaIFNA;auINz)6%<7
zA)ibApc11vo}jdTDA{=V2DRb#9Ob^KA3N+m^^u2O@wva-`ii@bZ~mu8<i~z^C7g@C
zpHAR=>Hw6Ejz?*zNC(D|F^(UZ#o^~l*l?DQu*!@w#gjC)hV8uMEE~vrbhhr#erc(>
zhQ!i40An(43c37Ex94xXNSD2L64Ym+yzQo$Az3PFO^VMpXIpUw^fLRRDKpn?5&+eT
zT9sY!uUmu&0yX({bsYim*j?oPjq7i$hfgj4*FIeIv6cA2y`~PdBpsgOPdM^Yirt|e
z+n&40=lP<Sv|5}aEu$md=--**vtE$@&1P@tJKgudTx?n2Kf^rOwf6M?GeQzM0E+&;
zOR{Fh;OOVn0U$eEJJdoxAF^g3sD$B<Nqke|_nbc2CvN)N!NTV2F4^(6dMnNaQPScX
zgS7!!T*PE#?8q!p!vJWe#_zO9EiWN;G>=q}bEfjLGc08d-ue>bGqlMfIq|c4h}`}(
zPM~us(C_$VvLm3ZKrpVrWkW{N$}&U(NXcn<KqLfO%7s|=;4T6FJ|zpKM3zU}sElj$
zZJxlTzwqktoC^+zx&QRw+v?AxLr<v>-r9<4_N?_w)dAS3EUQn|!+9CCt7gTzSi%GM
zO<}|44JZw0RA=eEGSQJVVK`Cjl+|7F%1$qyuXDQ(&o<(0%R9rw3{aTTYznu=JJPwv
zKzmw$_B{DJ`m<~UE}u6oz_j<`4_I)o*_QaMc$KZbN?In`*c#ek71olw)k~(~M@qQ@
zZ57MD{3dr|^#xJ;$n?Lq+(SE}geK$oxd`N-*+l8&v?6^_BNR;AgoH`CS?%L_8M}$}
zT$p5Ozawn>uZQSkQvWQIGXJKmx${7l*w4>t3TLkQ>3PWtNUqSy8RKU`5UQ66Wf#=(
z5!ke<Y04<Nw6f)gCxL**Yv=t@w@<wKABXch-gL>1chuWS&X3a;HT64t5wmt`H(RmM
zpFv3z^{EVTa&`wH4@l7lVa*OmB^KMUrGhbRlL?s1OLww`j0nb<hh5T~p)*ES$y^ik
zyM&wsWrL2%xa?I$r<MJ!%(9BCbs9SwZ7I-ddssf^qi{@P=wJ;)uc*6jajbOHMVBq#
zH$DA|>AACSJBGXe_4{M~-?Qz&=F~%V>_{s)^vqKI3E!82a=jGuQ!}{#t|gTF9Tt~l
zRat(MyDBs%rvj$lrigC>TUI9Yq}IlYc`X)4e#Xbh=*bC?CLd)4RFl$IBR{2jZ#w(E
z{d>BAEZEp7KR690M_@SdM27M5fFzx7S4b@>+h*0wPDx?fl35rvR;BpTa1bV;yL$YJ
zWT1cN<^g%rZ(0#f&QX+(6D1=l>G6G9s7cH_WBdk*w~^1LwHdJ2CH(YY0~vPM=@#@%
z0~*(q(Wh*BY@_7!E?_b=2LI?B{Oml;iZi1B($~>Siq!)#RO-Xwe4KWZbeI;M7G^#-
z;!Ff@`Iq6sxo^67$J^_PD)?>E2!vx+sb}px+ex8fhR&41RmNaM_dEh~BVGbIZk0gN
zZr7AHF;f=6tHcEFC!~cdw8N2ZBuS=HDf#}iYK(6rYi{pnZxrc?b3h{|tW=bOzmHNN
zOtosKT19*VqQu<V%KW@d-_zohwpsW>JeOt*XtXt!g~Vb~f}G3YzK=(Ee4ig|7~P;8
zwfe_g$9<`n0LCXKs-~KH|Ibb@KXgZ5@vORoeBirnJo>;<jE?3pu{yvay-TE{Z+GH#
zx@Z}LkJDAtPV24VGg6Le#~GC0fPyCF<#BnQ@9$+~b>GyE6prPwTabYx26NrX>5w7N
z*VG0^E*#1DIKFYDA>BKUa<tKh9TG`z8!W+;Fx`@yyU_f)$Q)_?N8Vqz_NHe2$+>s+
zd6$2DIr{n|l#r$=U%~~EvxXO0<F~E240tn|y$tVnjo(K4P6?1@LA~Wv1|VjU|9J;H
zl`IReQ8vp0xC>&#24f^N{KE>sz{b%Oc}l|*`k#i5$)HFT*nR>uB;^Dcc3=5FithSb
z&fET`dMYbHl+g5}XXpO-bIsP3m`)0#GnS~8Mg73Yle>Y5{yY!W)@ajOc3Qd4a}Yh5
zq)l!*%Ua1XNX<h|oVA<z2Et7k&tOa?bAp!5$o&QTe$r!;!|37)rmWy{i5w1ZU*)G@
z%|rqlX<mgp4=y<ojgfJIy$=@fkvondFC!_$fDF9B)gtjM#p!#W2Yin*fbP*qpZroY
zn!a~x@!>+==}#ysr|}}ba>rqWErq^O8ZR{w#D-7%mnVNUG~TRRz(SW?GT1s_nTTy>
z^XYqz>YND}h>`!q+>z$!&0-2W%WoWrDG{=4fHMO7SQI_d#8``@3oa0xb~<^%n{51w
zS&T_P(+*_=-B8L?g|<*6*p9mnR7FS^iE4vNfw75;q9DESv%WjxYTb$@3X;y9qM9O0
zr!0w(cSrJmK1#pY_%!vXY5TZMTW#vvZ3$*nV0)2f%RTJd+Tj)17@c7U42WgXKXW*g
zVrM)At4-*ze!p4h5%|FBG8v%D^leE!G>X79cufkT6m6UU<KF9kz3goLsdKixxehrH
zP~@ivO|9lJIrKzG#xu>$q0Gvd0cAn7KQR!zh1jEYVg=1=>=e~0(nb+AQZ;J|W)Yhr
zdD`=pvI0_iiW7k-&hA55f{+~b>F?s68%1`$5A|sHxp-$I|2%sxTI)tx0DsjS`6GUO
zZ8C%Gu~MKFQ|73VdM^IqQ?od>w19>ZYOdKtqG|gg8NdBpUb-M)mIX9)O+WBDu~L~T
z<i=Hyn}Cwbs4h?AD|h7anm4UQSTjb(wRFPOcqc$pYHMcBOpTkh1FfNR+Haz*y;;L$
zAv{eRb9;cmEPJpSMrRU`BaIco$O?Tcw`HD7NQ(B7Ck{2doMD%-p^>xpY?i_6#pwbz
zAXKOM#TbKi1~w<jiiAkD<+|0^CDr<gv84IR{~G%b{3fb0OcGU5RNL~_9uv|{x@|{-
zd&x;%IzzXNx7>zq>&&+QdMLka>zrhnd(b}&R%2^riu@i2=Z@hUT>wk{wd)ILR%0O0
z2poZW+ed}^y!5EFCy@4r3#nY!#j4=#zm-q7zI(^kH`awe7KCww$zmCzpPge?>t|#h
ze%~lS_{IUd1<ejX<cStwL{iDPXoVUP%NYF2#7`~Wk&Qgl=WGE#MRSd&hPObY6*pl=
zPqh&j9!7@5W)I5Yzp>;hyFbAM4)fSdn(AR98pmv9)fq3L>qTL3t%omsX&#S0bJT1~
zk|H@Ye*n$&=)ba>^h+BA%ntLBHsWWeJ#Xx-N9Tfn-Zb&rx)grk=Mp@({}Ar_YJe-R
z8bzy-^2N@?px$g<^$gzF;U8n@mI!2xzZ0>0+kPC)dm4W>+I5^lX7BbM1oBuV9Hx=*
z)o!=fQkfzmv%r#80r^GSETHF)3@FG%CffL$F$sC5!9K60!f*zVod-WYsoVJO+R2-u
z+OtQ0xmX%;>b3StI}S%_I|e-;U4k5inSyK6aJt5rwPKZxYzvEN0!&`9>8X7iJ9Od>
zx50P}lc8p4zg-4OU(JRx#vh~wAhVKyoe-tS<oGB<puwGrM(j$ow2P9a)WyglMq1J)
zAb*wjnjiGqo8G-;%Wd@_zb**ls%5}+i?i%Rh!DzUh{X?Ce#{qe@)~ZD9Dqsx$uZH>
z#J0w!m214E*i1)uCLc3|o|OeG?;+zpIJUH)=O-|e6D4V&!)$6YGj1kXN}*h>nU!qH
zgzgX-p@94xq>adzj%ibpgaWULC#N7aR&DU`%+pQ$+n4r1qYl^Y$3lI^om$zi8tT9Y
z@p2pouB8ut$Wy~_pPIktRcj`044cui8w3#^x^F*5$Me{*ri>E@QUbd=t-<clPj`xs
z>-<hx(Cz(YPQc&*Hr=-|zrz9OObKS>qpT*j4uR2z4(UfS7}(n~qzjQ)x+Gcc1Ab9+
z#3AiIN!=@<d6RESfFWTTso+)wgHhb-FclX^SzD7+bc>P*h1@#1det@2(b+qHL24ao
zp%Pjo$iyDo1t7hAc2YJPXT^R8yrb{Afz)Lv8tz2)x@~l)+=c^HMy9dYMux0g(2v@9
z26Hfzeq5$`HVYtwVSv&sJnioT+VonqgEVCz0BM-`EA47jaxVMxMq6CBX~Qd`N@aV{
ziYW5CJ>|JcI|vmqpr$cO#yIFJ4Ibq+oD$%bZQY+ELpQ6|+bw~1Xpnz$0Q|XTbh4i5
z$?SbHH~>3H4$@?xF_n5;+8F1_+$|fm>EBE=I;nqTfzoUQJFEX~IhK(s={(5y6M{_u
z<EnKM%gYfy^wGTtlSOzA4JWDS$zu-}+WP2kRHMU7->>NZeR2Ti;!9Oi*PMIa=7i-V
zh3aTwu(UmCMvJcNRPm)RJc~EK<!lU&<ghT6&`KH863p^d3kjLF9@mMiG-rf5v$~(1
zgXsj&5C}ne_WP3^Kracn>kK$ZcQSx%3Qiaz2^lth!W7g<s+ZPWhXUmx!55??+0TGv
zjaa7->5}2dQ)WOJjX~lK(<WQsX?luw7D>7!X@$*eub1s~E;>?sO!8JBig5H8bpEy$
zr=b_VVr@F!JCEP(3RnQlMzM@LoB=*oVoYVPl{@}6&&|008T+quBL)oh{)tylQ4K&q
z>&xkVAT2-_XeohEIY<};lx&cR^3ZOUuiL)yns8|Fe77Ek#`vF4lw#TveXgc1;o&XI
zI}ioHsQ_+8z@d%8fi<iUh?+puCas99?8*kmdg>f|DKWOod<BDV=#D6=ooKYcAa?>e
zy|=iDWis)mqn-{Gt4vve7B11~y)+uBokgllFOvpy7@9OJ(ht0EFBYp)aNGpt+=x0d
z_n1Flf9~+IeBcl9eLlWV8Gw0*!gQ+9@E*B(ZmIla-mO%<+>ngZrffHt@UNfVkJr6w
zI|^lq>Jp{JR)v>afLwD+)6%h3bcgY0JU&ByLQ{aWJfa@s&r*H^8}b>^ed+Gz+GE(x
zq?`PWGRDsr3hlwOX(HW-;nvh}8ydN~Kyj5&PF_JaI8BxGjxqzbCXlqWMBC2XpTt+N
zk(APD9+m-QqLH+Lb>p|l6GsoRKqg)Mnih`INwOrE2{o<<*5%LW!I?AQ41f_7%WUgq
z|8>fM4yEE`)}K`yF)cO%9Vzwi(tSw}kZON&0Hg~@KFB3TrwbMUjRd9plmSS@R04<;
zGUp)Ct{fY?Bpe^TSgtfl5XrF%3cKglVIXGQgDfMV5{T0M65tO|^w$jhF?LeZJW$5B
zkP{9Q{j)g}TlaS!Kl^HneU8x55~}RTxw&qP^Wn%&RAD9@8Ar}DN!jBV4kmXH_*_i}
z!30!#eWcgOz&~AIiAHf$pfKRzA3m@TM@}4p=S3)b1E@AnB!}kq6zcMUYg@^D{QZpn
z-)BuglT6p*$DhjitN!of3x)Tr9lx<Ekqdl3k_$5@aOa(QTzln4gpop6&HjqW^ck72
zOZl}CzpL2WsqHfypi2$r?^DAQFsZ+JXruT;UfUR12B4XrWzTO7DO<0Vn6$H11N^Fn
z->*?#ZR%1{(-1ksNmnz5P(<fOQGinEASd7khGCZ`60K!`WGtg*f;em;Y}e6>YrJzW
zPD3^TLfM&1XX|h>5-J6hVc!^Se(sIiuNlcVTkD-&+}(iNVfbYZfM09Y@*}5`@%)+g
z+x^N6z?7uFm=?onG&uzVMacmW_!*G~0$ikg^0Z{gf$ObtSDFHGCoO*-FUVFz%(3NG
zpEi-7(EgH!KP2D}0e;CS4kb0MsO}FNKuooN+yPx#zMUADCJX8rmg+25wbP_rE(z|~
z7_hEO5HnzH7Pc&{yaT4tz62BS%`A&e_wB+4`p+TIID1dE=~fJ_a`1_d9m13Q_9Mtg
z@N^y!t?=0sca@rW{LR&5&!O+P@xN%Qz{|<k{#3f9R~(za>$Z(!H#J*v>id3zXP-TU
zf&MafZ5@%b%>-#|L99-s&u(TjPnY=9jrQEev#h{w2GD)(Ovp3)2P4p(wb-@+-C@ny
zuy3JZx-eMWiqg#{&{_e!6(Rk8ttu0yE$G%wJCLq*lFt?c1_+`{GHw8^We1H#ps^UE
zzEVdkTtZtdBUUxUs>!<nco>KtAxp#QqM~*iUr-dCP21F@?7cK)yZ<i>qMaJJD@kEr
zmAMb|-%W(;wD@f8Pxi}K2kk{5CzSR7X=;YgLvaVh&l|!#<!n?TwLuPmHUzs!+Yu`=
zOD{D<9cH=P{zvb?mF<kOL-EXdaFC>U5%7iu{9z#1r%7x?sYoM<jRS7Cz|NRjdqnK%
z_WO;~?hJKNIcKquj%l0pT#?f-w%cvH^8*nv&8kdg<rT*v&I<T?BzhA6t+Ifi0a)$)
zf(;tPSD4)9;_k03;DINeL#{wQWfwuti=I7kN2!$@dH)LT{qT!n{4at7=xGhAd)};@
z#pkA$9_k+(xI{JE%hGW|-2cEH6pJ~m8m(aQL}Jo!PT%b`U=Q-&>HFhk?!OtqJ$aCb
zK`-MIETqtlLfq_gIBD(}$4NYd4ghJg0J;bX6rzjJUC=-tGUyW+9tYZWpxFfc98e2@
z#w@Th2dvBh%X1N0)dt$(GQ##ENa03nGMkKUNa{H`NT&o%X@mvbGBFMsKB1t`W4IKV
zUBM|h8z<$OlofPz|1wH&r>WM_FYF9B@s({e2R3%wVITwSnfA-@0F!;#v0#EcNdDWt
zPn3C+2sib?V*+uKZ0a+BlXI9akt5DT-gu=XB&8m~7>C_SY|fuvb6!B^1-wBGe^?+G
z0`eun#3HKun^hD2>G8RJOzJ>(Et-9av?<BxAK3Ng9Y>fMJAtc$vm?p`C5yatG9}v<
zWFW9-T(XnFn07S%t<^_0ZPTnpoi(yujkQ}{?0K?=FW$Weex7O-7e&86IXwU6pb;M5
zSCjYtL`oj*q+;!5odFmp&`ORs9QT3U^DFY8>sOkU+$KMbm!MP?cYS>iZo2V2REBa`
znC6`l-C>)|31q2#=VuoA@3aB=GqO*a)%{E-wpxBB7v_{OQv>Zu{rK0mFzjRr){MyT
zSpJ&QRI&?-NGrg|C@?S%96bTFQedSCOwVX6O)J!w8)!9F5XV*WAhZ`p(n@jj5twt$
z7>-gDph@P&8h$qH!mKqx^4oy2hOen!&qjo)L@-=h3k`HN0S#!?Ep4n~nQbLz3_DY5
za0yRQpE?ihXiTQTW5BHcPc%5o!8hbbj>2>q6AsW;L;-f8Vv-IUK&@U!dScN;zI+aa
z3J{bef<DcNJ`skfjweD5e++pG`i%g&L7+Hbrtg#za%B-{E@>4p>Th-qQ8$25`_3FV
z8@}X$kc{Key9~v)er2aOV&^upcAcX62rCwAvMQwrChh1c*zAc@f1b(AsHC0ihg65w
zZ+9_0)yBvEbq|!Y!f#U98&k8jr!imK7uLl+m$j0a_KOw$U&O^A=1s3BPaksJ%I!1r
z?x+2czPc;Rff98zThqAn>w9qHHRqsE5m=ec1U<6|Z_|5@{EF*)JMCvycs;MZ*V7c^
zOrUo?4X12YW1@R{nLMsxr%|Nze1RObp-P4T!{QUEM12~lE-Dn4jW++tMu3={p$EhT
zKvgu<GS##aZjggO87awqi9o41mO4$C7Mv9(M2s;MKm)=NcEEji;@YxIH%Y1+2O#WM
zp1a}Jpjiu?=>#w}HB$)g0p84Y%+Zh$YQ73A;75kf4uF`BocbH=fdN3e8Ip{me2LDD
zXJm+cLl?c$WRsFJ0m1=Nhp~XA)=?})$9TTqt(W013?T3Z5acT;R&po}NCf>rp_H0T
zfegL^XiuO#AmRE%uLi1f8r5lyn4|_Hqb8*(^Wl}~Oa`SFZucH`$w1tn?_i7O!{?3w
z?2L!~%=tRuUz*E+hN-wL<co&<4_^@c9x(aZ%y>yU1v`e#k3nq0p|uj#YKjki>{+z+
zEDyfsoPJdgk44i<50)C@;T^S@R-(Ol#{VL31~NukO&|J<>yG^OiG?r!#N_BJnzVSz
zbz4|iIEecmD&Wf9Ti`VlG?z`@dNOU-d`(Sc@1XzY(Ypw62l(sgUsLEey)Zjf-pMTJ
zQ*}HSzV9HHcQ``vu!$=<U2QJ|)dtXxV>Ht?+LXfQ1WJoO>XC<~6c|_!3{D8NW1t*S
z?e9Rh14E5Xgd(&|I59-(LaPXZ5G*6*3(5)vS)Y<TUmy8azKS~r2KS?%Q>Tp#Htm^%
zXXDTI0@~U&`@VOg(nfzX%tOwDBEOX%0}mc`(|*o6tO!WfW$+v!JqL=~p*&1Pv{+k(
zBoOpA$%tFO4i92!LGu7qCbZEObu{!epmT7OBHY#hiYvn?l`HUzITXhw#`=NrKA<oN
z<f#Qnjh6+|OE#n|{;UX#p?L!?{aEdYQ+e}gn}Zdc$o{P};Q4(^>M^ytwv&g(De`!*
zVf1uJQ)W7lG7J+4%>8W}(cYC3A{$&d6RC`v?Cisz+=HdY5nhzyi3*am79E+tv(&;9
zudBvS?s>6||CHDbNHuU(ef|F$kio@Mi+7$kF>pf|r!CiY+c<pW8I+0zY(HxfVJoG!
zni=i22A-7x{5aP5yF$Lq#Wd|V!{)TMZzo_nf|n9RRd=Yh<v9onE`ovym0^=o_mnpd
zwVNs0?Kav;4G|hh&^AgmegI#Upq9(P5g_qh=%T>rBrv*)P-=npkVaH@ki<Ea&|X67
z7l9lA89(){i3xA!76fr`2?tOPd^>f>z`Unfwkk*Xm>teBAf34a2@4=A<ezr{wywIb
z5d_aT4tAQ**7^)6(&KmrV5IMP+OGG;!Wgvt(}0n#6jJ)O&Y}c{fH)Sz(uk=YNT4U-
zH}GiPne|3?@XF3b#4<r7me4{QP0>Qp8$v9K5Df{R0bq%0O(CfQ&HWOhq4+%kF#?Hd
zKsZ1sOesK_NNQ(4EPKoPd`{0Z-iJdRaf{^Bk<CBQJ!pW3a3V8PZJlYxoTO|iqY*OB
zm}xNDwP}_*TpAL{_dEF1r}tuJ{t$A00!J5!P!t}Sxw90i{qI_g@BYN8VEm_m129o3
zP8XA!xbGSr<qj^@9xC-$&Q<MXSqiy=C-*!E-|?_+VhoE>Od5<m?7rTbzZdkgm^UHI
z9W>Z7%<NU+`7VOMM=tQ-<s9z)(hOeIN-?|GLZj9~vsFh(2Co{3bpxrQ?Y;CUzA;ia
zZ-B@+MI1(`FOcy%Ob#lP1qyvY-vkiW1vwKHMdSp0bA{2YyzeL)o7Frq#|t#1kUn@0
zSkqDvTLO@v2QS@_WKPIY>Q6N>am#z6zl9SFfM=76E+ME#_=H<-2Fsw-->mww02~+j
zX73*xKCSz5H4A?5jqb*3IJCgghP+tviZIRqBxG9ybW6xc_<{VcvNAuv5f_wRU~WMX
zPH_P4U;*xsgd7IqqQ)Xg<wY7t?*p1gV|X#(P$wZFLJnn1G+ju8Swz2}EY5(B1`{Cu
zhMf+zxPU?KtOiAP{ps#Vq-&sr4tdJR#AP!VnaHEb3fLDg;MWynr4q3`=-`g89K>@+
z_krZWpnUi_H##zNN2w9-d+%a;=kInIs4xEUqGteEaoS3bRHggCd9o#rI9{<?%B}a?
z$pVy`#bZz3jbiRb3=EbrKOI?sFSS(QZbs0X{%6cT(-Ec!?;)4-5#(JeGWdRRl%UaU
zqcz_`tJy@@ZlDz}p&2dGC^JVc(-S7fxDUx9*8zkXKDVi8iZn_&nvoP`bIHTf0aMeC
zZV?z5HB)M>rjV_gR!K+~sLum5iH-?{gGeZGCM+XWLV6H%MN_{$<KB~<Qp?R|0KUWO
zQ|tsd2d50clVlGZ!8((qSw{dp+Jbb@7mD&(-``@9EI>+*fLeb9baHlJFaR=o-ww5~
zuc7B9v64in)TR9Z245k@B=Z5Xg{nNeYX>37SjYi54uqS7lPf^_1vteraziELM|||J
zQ>cuaA){C;EbbRrJfhI5HjxlHByK@QiXDNk0=SNkoELER=1BoRC*e~G=TdnkLFiqY
z(l9@rkilBmcu(RZh%Av|;E)X4@B_M?V8%+U@e|uK6J5!q=83n^H|FB&_Z`O*d!9fp
zh@h2+AgClq=k6%1G@ty$62A6RiE4gd#(ZBw4uB5hW*f<~M_s@F70WgE^Ab+ob^8K^
zCR*_^-2cQqxZ=EP(bw-|cD~IHAS(g7xPa{rSP5v)&%yV7xSq=&T#_aT!x;62Wi;w5
z+=?S(57PxCx{g#woSKtyOW_kx$3{<kZ#uNQj9JT^aZ4&m3=chx71}L@>b!(_8u0ow
zM%N3BtOn{U0*!gdq{+xN30JcK2FavrP`i`#^T>kfe2Xj%$f-6V?-FeMJ{f<eV`sVf
zEXhT{9sMaGO=OI8fzdpCr?1_^{<CcAZ0RSb<Fs8TYyA<MEi-(oe`(o<1IhRUfuR|=
zNRPvwfXWZSU?eH<knxkPu^JaIOwDMDHUW1$2-gFx5SF<jynGpcUlBo{gVMM{-zp#|
z7$9x=IgOb;f^?FR((3ReWG9fe>qwIZPXf_kmMeXDC?JO-e7B68SAx%<Jz+WI@IB-S
z&mk*K6%x`Zu&hCyQNTJ{0fZY^K#|d6qGj1uWyZs>{C^{8Ylvk1qaL1oW)2TN{uI0*
zVy9CG3d!`+z3xh5@4*#u-&^C9bns3c<3EKQKo2Mw-~R>AEB)3|E&1)fzVqus<N|>R
z%dN-p^~XY7wDo56SITG;!X^{Mu|kxjWI{}<^;|MsLpLR8DvDcJt~F7sFQMLCKqHz*
zJDx?NYrK3zYcfEx1J?j>6zOey&R|MC;90gdt8>nxJFG;r;<1Jx7Gq6AP6^EHA*LXu
zg#ttCf%<~suJdd<bJpoONCk(){RoYt!2u5rIRG88IHhk{c2xT^2Y~F<rr^|Xrj7&=
zlN4zcl0#q&z(SwBYr(SGpB;cjzF4$}ISmSq=C&Yb0}TF|u7XMZE!05&R^$$ChGkWF
zi8nyXIw^~p>W%~8*?W30VqCM=a3MSo!q36+b8zz|_?05^gFcF5KzTxg_!NZEwr5gI
zKMJ&}3UMnznnXww68q+Sjt4K4j+sjl#w}<ST9n^|F9PJ83Or{JzSGCIAeTq65Fnp-
z;Ss<a7|AlzMWE7wGD-sqDnX<WO;8P&3uOB&1Z`12-brBFi1c-2m4|&t7ID{okHOCo
zw?o1Y`qV=GajdL7;WqH#rR{Y7MQ!)J1RQ`l=tEde?*1?R?$u|lRG)fhrE+$YI@3}{
zSZv&nuRpPb{`>|+ZL=ndL?-h2A@o;Pqm;`bRV^&6EMTQEjb>OyJ8B`)%ZSoNL}~%4
zs`K-Z!BIMIB7Kkiu3a9ItqM0Y^ad5O+p_t{wCH&o4Xd1Jh&Yu=n}9q*?}6n*0{$Q%
z&IZbT!0=|m1BkprXtWt`=5b@;K_?D$O5zzTccaL7m}@|(H`U#o2^b;}{fsh$j0=#p
z1j+dAv;!M+)|%=#EIZ?n?E&aeiK)*|*Ev6);K3u7{K~*T>u}6+4b~7e-7?}MBt|xz
zR)mp5qUwXjB{&1%nS?x3e6_7-G6&!mittJW`28M&5uk6aLC-0)rtK87k4e>BP7$^h
z(x@$U9PvI0o~+EaBO7Ke9C8NylE^`XXsQJ?;^#QyAYzp#%J3Wg$Sn`T_xj;E73BN^
z@<G5jP(H{ZD0*<Hv?DN++l#4W9KmKyovBbeRK*#At1vO?V|uZMuiyI!ggegzWxh9%
z)SHKr<)x=eP4UDz_4vT-sc8JCpaaO5f-SwA-2Eei@)hgq)dN=t<&iLoYwk*Y2|=Ha
zvsMZ0SUZe-&c*b~JdP|K#?k5f@$j=%RGTehoK6#t7eczUpprl~ljb=#&*gqQ;|5e0
z(qEXL_eS}wOJL-wJF|2hMA`J24PSuIo~6yqSZUJK%nF>}E07x@5fOo*ae?|qGxWn5
z0OiXzwPZnh`a{YFC{5-qMJDAZFpZ<Hk)>uwkdcF^4VcMwrPcu$eJV&N?Mj7ZxD#^)
zvY{uQCotiyqx;8Yg<x8~lVuy30uh;%Rp4eYl<EQMJkaDLVG{HbIPIsR#*`OA=Iw+b
zoe&KU_;7N0xWxjzJ`ce#P+F}qv{t}(1(HN#>T#{ACsLm8kJ~A96e%Q%$FsXy5t-5<
z0l4&RR&9+(cuAUx>5<%KZRsgA^dSaY$tifU2;Uh&-Wf;W4kPE3k;@fO2#N^u1^AxN
zw|v2cOX{EWxhARMoY*yTq)jls%EkQB3cmdHN0EvJ2pVYgimKT@oGdInTngo$E0?3k
zo;X#F{}glpy-uK(E{m_-JgBa_Yk7I$TrVi8pS<mj@<(sK0+SO37J(q+2?7PLlA@*S
zIDBLpPaHaqrw`7{Cl1VG|AARd&#kCd62X%Wf}D?Bj_9`Cg`uWxV9~Nn#Iti`gS>Wn
zhKpV+nUgId>F~a-m<2_UL?EWTy+MNy!2CXe;t;XlfZ??Q?YfY3{)$j8_CFeu+JiJL
zL*uqSbr>9u`gB%YciSBWX8)c60tp0U0#Jt#WNKC(T4GE<NXLk$nRhl5+2}9_Gbdns
z|4a&E&`(LnqW`x4-(9X@G60747)Uf4ifsILw+eR!vo&oF)%#|ND0Ks*AHXT*;gvk(
z2Ly_vz|cC4plCkNg#!Zf2Q;F#8T27;u}BESBmF1t;&fF+IwOo!N*PDqDa$yUG$1iM
zE_h~2Q^kmqIfU^E)WlP8WB^Z=;nw@%iy`<<KXP6l^0`4&iUX*W3J8K6)6<JZkKcRB
zz;Zd@(6J@l{qX$=6Oy+kzCa%B_FObG_w`aN4!nLby8r8^vhkmy4xr}{jj)}j2ggSy
z&i{!w{7kZQ{YLr7T#C;>7jeB!Ex5b~R0<LU#WKeF`f%-z?RfLG3ZfiiX{Dx~J}`y*
zA3K7F_e^2$!8uG#FQXd9JkjR)3b~xer9`%Dv_m1Y(WJZk)__?i6EJ$ZW>6#(FEQvE
z0fX!WtVl@O0%}vh{6S!RyWztRZ3J3%188g7E5LK=b~Kfhc3ei?h;Tz_G%3uIA=0v7
z3hv|>m<*Jq{jQKPMQ>Z5+8&nC(kCp>Xrp%7&Q{!%k*utJXj_S<_Ro6$^qgG<;*2gp
z&?S9k=V22dTg{l!?d-;EIdTBx2qd)hmB<HhOP<X20l8sdU>(puY&sIl(;Cx{3);se
zQ!4zZmB4*{>TMWxB_{k(k!>!J9&Ulj)HoC9-41O=cZjWI90Gr)l<u1hfl7u@HK6s0
zP8Z3S6<Sq>g~ky4#R7b{0^cRaP((iGLnRH&%}k@#Y``g0jTWQ|5XSS#{QScu<xKzL
zVs!7vPj%xzMIC^7(|orq%DDBf)~~+sjc<G7kAy-FxnJ4WroER2jV2`(G6E@3Zve-e
zz|(UnJfsMas-Zw&^>`oFjt}6HH|>O9Nl|Y#v43g~4?TVy_uhX5PwhK_qbC-z5;ozw
zKJt0VN<Y+F?lS0Yu3#g6Hc8W+7VO!(XS)JM1;`-tL{^Ea8ngQZ3PZra8jXCPKxrM&
zT%jz0l5*O<V<WUu@bjMZc=n%W@VVD7J$49&3>3IRh8Z)D#$z)&u+=PN(8^jPU-LwF
zWs|W6%ZhgPd(QKFlz&-!uuJ%1$}hG4>`Tvv0y7~JHpNT`BXa;YL!dH85-96BP_C;4
zWnU!+ei_J(2vjDGNCuIxsMbIFC=f53Isc?>g*{jlB1`?dl)KKt6)R%M#%~o;de?FD
z|9ko1ogpzJKF&E4tN2h5FsW0TE@Qc|f-p`IMQv1^L9FfHfWA>5>joSQ4rnBsA}lUB
zcyiAI4jx%Sad;$Is_yf(tbb%#-TNNAL=N{<H2$2|C;D*Pdnbl={^%QC{bS8~YrtQw
zwc$}eiZ3qGO{LJrFfB(dLd#jK(-Wv^2h|Wbb_no~C=^_cfg&(ESir>adi=oE8}MVd
zq-eC8*mq(M4?cAQ_dR+XPwt(=@#9sr!WMkLf?~mkA5f3X^ptzYin{{_9VH2KQQ2~U
zt|bPns8k{9@QTLNULe<R1TLuEMPtFF8bmQR6}-z5B9_t*Ty}0`0Q5CyK|n_eNm&3n
z2XcU%^4ldP#Mw9EDON)-6D75qQ;jgOsr|E7DQgH=Dlnz#Tn1Ra0F}NjV*w`RHwl7i
zTzW!-F!zp6wEI7(d&-M8tOFoU0672>6G7gEQ<U(^0=XfrN)wPnYmA~WjXocJMx%9H
zAf<A@#g5T%Bluj6%t_X-?>(|EjBx_p=%1By-OsFN9NO}wr4@al7GsnoXcOR=NaWlS
zM*91(`K*3ivSkFjFIj`F+xxI;Jb=^ZK$LS5l`^!KS96CO`1oJlh4=pXm)%AxlV<U;
zpNy-G=Z~D6vWI)B89xy_`t>XSaBT3LAAQZMeyHAT4FuJC1jliismJ&1AoQ8YgP9Gd
z+Me2CG^J;jR|q7oK%KbcEsYb$fX5DN<fTGips{Kok2MqP@guiv!jHc>L9<=QGe>7}
z|Kn4*|A84i_4GWZrj`(=eF%a96bfZ-A+eHehk0mMjAzSBjfHUr0A4_$zd(I)E>Q^>
zYzWlnG)_DVtT_)T6@igW0+i~KkBFIRYCtt7qQ<+K%4Kj*ne^Yyz<cWi$nXjHqfQ$e
zzwP;FQJHCNcE??|^@a^LQ$)67z{c>qqMuCE>*(Q|?^!F4FPQFlZAUIQQ}LmxTw-5l
z-GG!FfCDFRAPOYzArKJ1e+1}XtyR8kI(k!wG!~zsRcmHMnAx62*x8n2oQHLXd@>BC
zBkOG6{A{;;kEf>UpADX~15S~6b|{Jygi*@RRm|nFcBl{A){WtUontuvyfJK9Tg1d@
z9vE_f61`9&dL&%d=z65m#hMgJgptuQe)7M*7MH(jr+U{rKjiK`7QefeJMkZhHvVF4
z`+bQzfNrhSCvN`nq007Oe${R7tft9uP^}S)FS&JQm|K?D-Lr9$l~_sFojxYgiDO*I
zOt8_)YRU|Ff{*E~MtriBXe`VLJTpfQAwhp0ST$J2rqvZ(@Y=KRAKn&YWu=P8_s`(I
z2kEwieS1$}X^u!m6$FKT<O+GX)Yh`+!l`Cz#Dp_$02?L&f;9i$plLRN#bX-dn+5tt
zfM}z@q7^}9O^Y_*65W-ezmfl9N-OQK&$jGQZBF|EQcDFUgH_avw`y2~Qga#5qocs3
zij}=JyDJQDfDGR#4O<y7`*_(NJ>FwvTVIS3W&=i6S;zp3RAQJ0q*ZNWZ9kd^ATLG=
zz9<Uml%ev20+rQ3d5BkVtK~&t>PaD0!=(MxK4AHElGtKLn(4sV@x7i&ziisibaJ|a
z5ym$u!(IaIUq}&#37U-twf9i;^H?`Bh;ufs!o@pQ;oP0W*s`IBfpH(`x2u9F4bdS|
z8rYh3kSw`~=JSYZ1w>IEN_mR1p?nY{7+J)w>$l1O`K6zZe&yDG{`q8obnt-q*n4_K
zXHV7R6mbCN81`TFj-mV|e|^iX@2EqJ1~oE%N<1@3ZM&$mv*d<<m~pvmf0pZLb0M*K
zPt*3WeT^K6Oi-ynq#8098rh`<jzVC$sd20+@YD%lFsCq7kQf{3$K`7Wan%LefdA0O
ziJ4_Qx@Qjee0>HFK6(^~jvT{Es{*eufnwh%{2bN0#E&(mz;!Aq*BYrD#sg?8^4t-P
zU`V4fBG5lc<$=Kqm^?%GvG-@Xi&dedb|5k~0vV=t0?H%jX9P{D6JTxLG%Yhcvm=yY
zHXoDoB#lo^%t0<6gp`@_8*IR=$+j7Q0sgu|mn?<Ng-bUJp!A<5S7<25Z1dp?+bIZ$
zBH)xI`~i*97%;dB@QL0PY8-z8P%DDB`lJNxCRT>s=(yS89wIK9@$XL8rjv3}YcI8;
zCI&Z1QsNJ^XcIHvtr7&-GBSp37jDLdTZVDo)*)<JUqOW;e1Rq)X`Y!rpb%-zgKGJR
zSITHF1qkaov}-=%mJ3DQ2EvJGe0hkn8)6>hS@2VTCB*o}L+&4Z{>}AYx?cW?IFhD^
z@aaE`Nw4e_b^@n>12AvSaPF0F8t^ZE|E;&atr~cf!SYg@Yi}-$nVHGCD-ZWjRO)?C
zGbtuB<;R&qXWyMp%ra4G&5;U?X+>K{kh2ogR&0aX@YGrhQ;GQ+aJV5*KB~~?35=9;
z7#beKZRd{TwySp_P8-;JWFC(`vVgnqn#NPl%wl1>gw!2FeqbE=z7mfS8<p6U>B1D<
z<A#P{CjjKjM0=G?f{9yZ=AEG}0uZU3;n82CgFx9prcmp2x&Z_Z2*i{f5#B)ALPq?t
zLLDYb8r?fHC1<q-jlLj@n6d^RWdaQP8FCP>u;LM9vr0Rgg~=MDSvSF`>zX=@r!ISd
zK{61pBp^u2yHBGyF66*kAXnr`PIY`Q(4K=-ZO!(_89GsPIhY&nzSIe)?ED_`3^1`J
zZT(KXeB${N#XAlWww8djih+C{XN~t^=h}6+VCxvp**1br8!9OF(`%#pf_dA3sv@mA
zh}%BeEB$D#1ZdRrXtn~h+cdyLf+kiEaX`SMZA3Zqx`~LYLNgN(xf%sO0PYJhaZx$=
z-A~?H|M?r5f0}FMooDfp_r#=ha*7@=vI8*K&X9lo^+lZjp&PD$UA3HFAI#6QdaNX+
zBw~M=h?;F(F&7v|s}4Q42N%d{UyFEiOdyP%m+l&N8a-~Cme>-QMng6Q&5J%gpC<G)
zO|&unmey6)AuyW?91DT+yheGi!ayDv87^Sw=p=T&auweGrZ$#q4Lr4f1rOYF91lKl
z07s7Gv675I42&WeA?BIO7ZUMfN$Iz>2rM22M$b~nQ(e5u?6#xBDtj3UE_FI6E$&(U
z#l84U2Y|<S4R@aM?v(eI8#W@-fXsk|6}Pk{RJK<jn<8YTp&n@~PU+1q06K>r#zW_3
z%7YAlJ827PCo^DCqmqW(2lyjEX#zYUNls?|7_fYdNl_}Hb|?{wm<?%{xU$Z-+4MnE
zPMpq54@n%M-Ad4^%_C_aLq1nSUy#R+;WEzKv;h}v8p5tEV_3VcXyn65p2Q)Pr3OSa
z7~~>q1!yhzp*kO+y6mCe42*yYqscVlP3KL<ZX6>k{G>pm1}KtzkIb$I{v3!r?f`|n
zLOJiF@`VQ0Uo+(Ymyf=t`m3*W{zT;)2cM2V^~qBe6m(x~<F9xZZ!YKyzj)o%x6}tK
z+x+S2n78K|32;;Ib>241)@6>Xm1)lQv-4rK0{9}QA6k-4ruD}zz*1#dNQCqm+nQ5R
zDhcQV&oTqLc-&m3A+PD$K}!HjT4FYoID8x^99I}{75WPf2FC(iv26%fTumn);^2WL
zJo-Qt58OS2$Dfs0nCeF~F@gO03S46P`M}ZwiR&jQj|-GW1Zch`rniO3MCNsHBqq?W
zv-i)o<uV?Bwkasvdq?V3CVMt^P0`=-m(2tmA?1c;X!825V`X-s%>w9g={d9ZA3bO1
zPt2*A=~#O+5xLWqW5+<y204I$bp6JN3}ybPu>{N=l+dB#C`ty!+JIqd778(+!Egvt
z#E8Qcw5sz^?Ijd)O{`lbu=UCu&OYxvTy)7AtX?&Q(WVFQU__F^z^GMirM-PkiLg~b
zvz9}(RYbL!L#^SU6**|9#7!`hd|pAqC5bayHKr-6qA5<T2zX8+VOWUSbR{hcVV0!e
z?hJ7-XvJZ?q*UnVk^E}|=e%K!|LzapQvXk{O+K+YKYiBm*8K-gMJM3Cn8x4dpTD-0
zUibK=m){mnth&UVosM1l1Sp!BaxdFzYqmz2eSTRF-dylJEl0JlRdwxD2AwGwI;fx2
z1;|W`$T$TSa7;;)0Gt_651LYIqVDqcS#k!xK<aB=_7Mq<wgMUsup%TD5`lcpL!l1z
z9ZE4!P#74K*f8c}!<$C%x*yh9nQLIr<25{S&rv+~w8Eiha;OehAkQ9zC>A;TQx-t1
zw<a%|)M$p50xSpsw1Yr)8HHWntsF-)iq5S(v-FZDgz09s(Pa8|CoAM;?K_?bv?ID1
z*~e_pF`}ngC!n)I$YxlbC8OEy1kvMkd7+13<0njyQfJcjqY+;}Cy4xnnS&Z}O-r&-
zx|7++>ljiK8DQ8#bKyAR>R|-#Jl3pI*txre3wN)=1?R8ArY(ag4w6(*roKs|U<uk=
zeWXvi2=}zn3I%F44@)&4D-9R4a+PKjC}U!!Wm@p++3Sb^SgH&nVq?-WPpwGHpNyVo
zgzXk!^ImAh&QQ|lA|#(PEsiBNBspaUFpH2Mugl$U-st|?|GYN(jUQ?~oE96KryEbr
zo@!3OebFL+?wql5a{aUCoqMg^u=es~b|$8ehChHV>7zU2pRw}DV6z&RZp0TS5R9Ba
zc7gJ?XI>-Hz3}<_p2;`@=#1{OT?3wN)3Gf)azZYt|GIW4CueX2HxLXWQk#qZJ|^tI
z(`X5es*;#*I4B+RP&%eirp+&v1bu5<TzXAEF1<}dH9{PDY8g*_;RGIk<RGRVEupb(
z1j$tcsBA5<YVOJbn4UBZme?q4u2s9-((W?g*KA7!!Z65ju_kDS1EkLrp6K*WGudFf
zH8^9`X4?7umhkFqE7fm15N5|g&t8E{HY*#WF#3C`)Sx_$#62nc=SNvPh1i>F=@<}J
zsW6jlh=en=n-Q8P=Fpy>g_q7_a<qwE*SI+M{C=Ew{$`xDc^IW(LK3a~a4SYq582W1
z^G7s=X|^ZlE~((al)`<V5XPxy^A1M8u%q$F8B?1KpY}XZHfRjql$v&tC|x7wb0*!7
zY=Dxl7b2r&>;&r4_|!(_9S)qG%H^dBoR6%?o8Gh|nf~o+=}+ISo^S`S?by;&OQ(_(
z_&z%T^Ntn$^~F+h{X^TfUE=QAc4IU*m%1c{!D8##7Le{#Ye(FJ-ZrXhJHt4c!VS}J
zNi5S)O1THlySUAIr|eO(sV*AzG>acCHjqU=))p|TLCk3<!x929Y4f$n$!NF)AO;$Q
z`4E!L7nMo3IqDIRNRh9m1QyypO0zzKIfe3`1f@QO!blP8Hw9RK`4C=}q*&ft$G$Jm
zVE-o$Vm{4bc4Pq6wWIJx`!PbyK?&4I6qA6yP88<UQ%V{?W*oq*lP7*3F#stUAhMJd
ztm)|FWlU!#3T3iawlmO~bhBD{YydW!$ULaY1gsOVEkR=aWuHSfE<uK%T(b+$9RvzP
z5`IylI<FB?nX?pO?#U%Yhh|ZTmau9t!M0rv&N;7)b9QaQ=FLMWjF!yhLa9s`A!&rh
zu@MJ>qH;`Y$nEdxbupV!0(FI*w*k*Sm16FMgF@M0A-p?)R+W*#(`*6j0iXktb^;D}
zK)M@+`8}{D5x<d{M0mF5jc;b5w*$dii1Z%S=t7&WKz?G`eaA0e86H2;9R1K=CU=JA
zr3>e4C!$lu35f4I#n%~-1NwD$oVE7y>n^+Go%Q7<<wwNt&AL0CCT}*d)BS7KdguKQ
z-HDw}1Y)fxG7QuI=ik|s&19zCM>=_9Z0`kZwBj<M3_huzHCil%MM^n7FR9=ZGQ$jL
zTW~-Eo)%2wt>IE}`c6T}*Mj*ZMNgyXrYKfY<W?(qYc(*&n!1P&w=n(nCG2}(Mebj5
zRbk5rhAtg~dtpDkK8cF$Z`UKur2^>y#4X!GqfCfXSQFJ4KqdH-Nyhed_UuXM?gr?t
z{?7ISu-tcGz|kOY#)JFmwPvsi%{VFGzGWb;lHMVps~VyS<b^<g$-(3Zl}Nznr-1?@
zx%^BMN5586IJ%5sG_hq(jPuSb;k*lmv3ctd3d2-y8NLm|1PM>x*^UE+T>3fPY?pw~
zm$w#KezLIg;x$_F08AZ~_{86vDuLF9n~6T^7#NT^llvDvbDq5J`=oA17wqitA?)XC
z+M_~Jm&CJJ09|`Vz{SY6<vopxP#D?Pgm<eK{?c1MTKe4Q?)kt`{{!!&Hsz^66cXQ0
z<M*7h7!+^#+sW|@e(1_ef4E*-^8I!~Y<>&TeUlT)e56_TWOv4MIo8PoY+7n{`*~3%
zeGqovJ>Sc&it2g%jyl#i7=O>>+Eg%8i0yp%gpSju9wVZu_(Gs183nqLELEoB+a=IY
z1{zRX%+cJ_F9?C6m!j+|6e=maNd<R<161faW2sLx)zm$+IQX?i96uott?9?WwQDi4
zdjPo+3EG@SWkPdV6XwY6GZq{rK+TZWItscO9k|Pnx396&$G1)(TL!|C1O@}4Ooto-
zIRMVUZ5c41YCJ$x<~jjjB!D2<`H`M#E{@TjuH)f*7qRz=Iwpn2#&J(xa86O3drlD>
z&MKlfOg%L+c6uS!;4?>_89aCWOh(2ZOSS}sDUl|_NbG8GGV+j?hBP$7w!q{%fzN+X
z;n|1H0+W>V8nS_{=iwQ`L>Fc1{ESGHfuCImkj+Jy>%d?uG%Q67b=GSj`m`jcV0I_u
zU5$XG&5>Z@!WP=+M&VD~{=w4yPk#NEk2)X!V`^cVL%*CIfO!f>`WTXL`2Df|3x4&w
zYk#EPs8xbSvt|0u8KpA=?RqJm*(J;PJ@eenbQ?FCvlZ9f`TY#k%4%Znd0Tm>Y&4W=
zy3W~|G=NW|6a9Nq?QGYc`C9_VNE5$X_tFP$lyix-XXK*E0g)5PQG1ba19Ap*KD5-s
zs{2qj;R%5PwUDGn+0!VM5_shVVo1YXOCob*a&?fN#PnVBIR0pYg_;MwVF<w`1Mtop
zKsxAg4?S7};<}->a+I{Q2-(t(j7()-a~G-SEFhZ!$aDdy6-HeUTF_xxl>JuwnjSvz
z9jpL&Fa^9i&^R9B_!BEQ@<<i&(KgCaf{C)m_Ok+9difBx>?ono&twam(kF<?dKq|>
zoYJ$gv$lAT*QYiHMR=>%!XRy=(F(!0kc^(PpxCtO+Fa9{e~+&cSURThZ-1LIenam=
z7ST->-)()e@n@0W{w#9>8Rvo>fCWeSz8O)9IyA=kjaGxf2TW$*3gjG(z!B*4+nBsE
z!qL)V_~WnsXz57p{&(zceC!`y>{38{zv}*B|CMha$Y1h-8?XMMs#cSQm0Gh~mu3iZ
z&ynGPe3GVkH~Se(?Pbz>^J%fhf5!oI&}p-Emofn|&`#v<rv9`V(vk>_1F*`~_I?>a
z#w)`ad0@5Jo{K0e6&xW*445+lb_UF=w~RfaBM0Dlclt__-jpU9E{;G>Qbr({>RS}V
zn59fXAt*=44I~hwfV0K}3dBH(k<Kk*_U<_xy>lKX4#%ji?uWc`9m?ksQ0DXaakxlp
zdW^H9l-KYnOqSJojh)39me9l6f^;K+QDbyYK%096@<j)eE-+xWqhqSt#$%5!;d5VG
zLjC?ZM8_0X59G1?nj!4IZWvoO=TRolR<yNPJ3&lJNxY8BeoBnG6L@EgGrLq6nI{Z^
zcm(8ds2xYkSX&yc7SN)lpyUW>7Xdv6wQ`9DP8m>E9@x)jXbAZ7-=|oaH8Ud2T{25R
z?ezo8eJ~dmX8@cTWf`9}`pf~?_m9a~S$5#`7{AqP^yqqEsWmgUO+10Xl^F0^SaplW
z12YH0pMA?GOY`nmcOR;K<^C7b35f4YyU)95N56CZQ`cYq_G-DjGnid$NV3}u;m^{0
zR;9}@mY$lub7Y_Z)waFB6r<vdWm~e0d6>?J%-Fy;*8HToXMd780G?{IpFMrRrgZ2L
z)HJ1rK_NO$NE@`AoCRM@^x+#xZ5u(%{RuY+IIT9dHGzo4@S`a^ju@o*FHOV<s7#Ow
z1wTPhX~P{=z=RKHI53kzs3X}s&(2`qgLUkkm6#u^pmNzbwq3po#k|DIY{~;vM1EpH
z+)T}YCg8G}8K&`CK$V;&l`ln?wG2tXBqxF9d<%<DFXO;tH9Y(1GLAi4MbJ_>cdQ>5
z>=?kd4Skp#FC*yl5EccT%^F@sF}I&0I58UqG5tcCcC?+AEc>z!$Owv%B9JlgHbr+b
zc8d7K)v%GCfjl;PQ_FL9Lm)8C4rEylJx&CSjSHN3I>E!AHM<4PDlh(UJ3GXsHE8ax
zFx9-rG1#sPe}*<=FjB521E5X-X9B(2iJS!pNq7MT0>@?oMCmR#0z<_nMqe$}M?Qa_
z`ki0?ioaa`)T$HJCuUwOCm_D(h`+mepdYs!x$L~xxsz+J!t`8|uKA8c7vGZ{0EJ}Y
zpYdYG-fFc2^>^mFjXXpTI&JSm4y2RHcQOJSb?Aek4}?Zw?JMU}z|aYK(^n4wXac3J
z3p)#ivIv^>&QE%-tSso_1za9jZGXqJrGsfDNy-Aq8RUurzONAwkVrKy*Olf**)M5V
z79A=TQUt{aemRC55YXcuFyg}%zSO#@qCLm)^ylaCwL5A!sPowR`qkKV(+1RQL_bap
zeVX6oj3%r&ZKjXG%ehQTCaNpd;f<9h4nMPur|+J@v8R^Mm`+fZ0^3IVaoN^koV}wT
zlj9`mO|OJ<?*wS4W(>IP;OLZ#!YvNQw*cuJp>S3v=y@zbF7;C@n@+|~^*kBBP2(dA
zW>QO*#)J8*)daLM0o`S>c3vpsdr-zx$O8jq;PZb&X^`wSZf<i5n|XE&-bVE7b9J8Y
zAbLxKEGx)VntOy(Js~**AaKwG22=L=u13ib7$`L{@)}3|@t@rx|K@*w?eJXiPdk@d
zQ|%W66cpcE#DCBoP_KDl*I757bN0?RM>C5gW5Mgzta?jlQMa-2&Y$)GKQ<N5L>w{)
zkUdWq%(LZyffBfHYY==pt!B4@vFFY>>=_WmDSpN;?}_xi#(h%9p^E`@tA_4;c_+i@
zNikVhkFx^Zi4t~hp;IQ5Dgt@J4TyVA5rr@VBLITDLkK$%IEu%a{bCGvIE0=^r88Qf
z`BvbWHs<$A-0}G;{{HiO;cjo^hkyHejI8cQdnw_`KT4@7UCtLA6w9WqzO+!sfqe^j
z^uD7w{KO*kg2d{43A<L8aPF3V>{v5|wPQ3m<Myn;rJP$axE3}AR+e4NwH&M{iK$tE
zxme=|f6H_(lByY0A`eT9EIQS!e$S#jMf`}7dUH;c){{P9LL?hDeA4PRGYvfA@VvR8
zY&<(-jPoa=fb|;%9{H@s;YW=c6FLTL%K&@LWwK}46eO!6okYLx!3Jyz(7^=wzUF)W
z%mnE+*jWl&9?)k`{*uc9tue7GMCAq@{p`<utnh`eeEq{y-ao!2Buc8imR|A>z>yvX
z^sE2-+R@8?{>t6|p}DXEpZ4CHBU{|jY3HAOoFw3q^$5DZ%P;^I>+Jlo1qf{(m9f_t
zAF#-+iR{+nTV>s@17XPz8xhE1m@=ccEoAO%?~_G}j&taylqUg**@a^x0beYvwMTWo
zUCx<xFL*YA7;~hNN6rA88PL1}fl0hQ+Yts`))E7L3;A=ZXwE4-^_eF2KiS4y!^fPa
zg`B_>&pm<AUBqv_?>4O2IfB_~1t*Xk<z}9n!_!}z!7~reW9e`eMWL{BvJbnrkKw#?
z$FOQc(bVuXpAcHhv<m>EwnV+<V18L(YF=QvDzF$yYQZC>GAM`tzrFVWvh=#n1HV7M
z*!?>9%=84LK_Ea9BnSr46hz6^D%fS0w7Xu}TjjFLL3Y{Ju6Ii=Z`oegZmq*^sjOW&
zN|tPyDkV~Zv_z4TD2XCSfB*pu!VD&-p3ePV_sj47aqFCO@BQ!V0p&zMXs|EY=$;q<
zaPPV2eCIpg0hRfF@MAf??=QG$T@{W5@9t49fF1okR=YgYn8p2Pm!1rOwlj(no+MNe
zBpZXlhl~b;(7kmUS?-^3Ll%}CL@nUypG&!Eh<JXA+yey)EBZ1oYBucZzN;*beq6Dp
z3&YNaK(QvZ2SGbO-oOB8oIpKRLxwXC#u(kRH~N7;|MT_hTVMXco6)EL^;;bZIB%Bg
zKkI+ncP^B_?el;1TmN!r94(al<AI8v%_d(|^Jz1zJG8354<0HnEG2QN8GVZ0rMw6A
z4T9_0`F*u01t#GC=$)B>FWn7R!%>b7B?KMTZldin@(;6Q)Ph$nXLU}QIrMt_VD%!U
zw4-IVsEZ950G8oWxB-EO9E%D$hZu;J8c?mNaDmu}s!=D^6+QZRj=kG4zVM@)SZ{YQ
zH8+LzXcu3;@gjCRO;l=&XtzUnwG{v0r@jjd4=iKj$}T?hZ(hL0xiP-uu?O(ck1pVz
z*$Ph2QH2xX3$&tQWZbJehZ{MF+CX>DL96Ryx96ZaaIrI>9u7ITK^MCqiFHk)qU$qg
zXZY)Xn@VPV^amnL7{?BA?AZ&UDn@egbv(}^T~_(OuKtzBh}BT=7_>1kCC{b<7++gK
zfQg6{01I=#SAH%<zv*&Wc(Ie`D(}zPBUdQCR;Z^KfZ8iCSyM#?F2KOzZ>9)SLo|g6
z=<vWLIXA)vl+-$9fht*wM?M0a>%TtuOF#IT>3#3FA7AZ1{qkFB1irycK!NM0f=3oB
z`D34c&%3{804$aJ!wx*xqy67BWweL5`--DJ0sq^?ei>A9N`xSe`E55sKTkLScYh*q
zix|PCN?5)_0XlkuaVuLRhN)Xc^M7<72)6uEK2&ts;eS}EHQs}0CsPxJ7=fPp0N#y^
zc!kollkev?RCJIe04lqVfMK-T(~d~uq0B-I98~H#re>rz;pDp=Y^~+^<Ud-+&fYGT
z8guy4?JwhZul^p8RZ*)h!;K;=E?2R-+QMJ^o_~R*duFk7XNaZnG(PtDN3poLgt>AB
zr{5bO^M*)!L)OB`h7RIgANxBFc3KWL+b(v-K#!V!vQz<e9~1T)$NgFeH6g~G=pT@K
z+}Z)2{=F0*{tg%2fk>H;hB@c!rEp1hZF<jL{T&(D(^6~vH<7#b9&gF8Sp+9FR}v;b
ziG&(`7aix)y$&vKWnAe;-)ru(BRZ@iyC7JC-X`c)N}EBULTiwa?Y{a9IUw>riw`r!
zziJwj_zH`hP;5%)!YYs=lzQo_37+_lN5jARS2jlf`2TJH=0bJt{@uZi-dlwS_-_W;
zr<#56GiOe|zkFih@xe~3&pRCJ<!Kt_8+ZZynC<%OJERdf)!0)&cVz_hL{M)g5Kx}C
zQ-fwftLj2(BQ0;C8$z#T9X-`llezCXb&$1LpF%;Fme3}3Xi`oSd<9+<L}pQa=oQwW
zPl|7<GCtH@SW}dUcTRtEJ8mlRRXI=UTO>X9WZ@)D2lqTAlkgXRatjxCw{WU9kLPxt
z#iuX*TO6ysA7}3Q6L|3KlX&z*6_4FRrK(-5?XKhMl`gIv&vE|tHh$x4pT?_K-iuHD
z>Ky*WM~>qM|JHE~Ix*T!7oE0)%?)6yo3pYxRcWMD^T2XiBK1XadP0j`VG82L3lcBq
zB<T0oz6?C^l-$1|$)AznC%?Bq@A<mOW2E@Y<;V>5Szdtb_{DXWMX$kOJ8aat2L%C&
zfY7D;99(@t@FzV|fpcY!XcZMT$><lA`m%Zw%^CV!Mf;Y50L`UPk1G$*$z={Q$H(e0
ztm!DyMxx-R^ql~&e=&Cd;<tZ1dG`4mOTYK*xBhe~*!cc2>)s#2T7ZiC$OlXQ(uW^=
z@Vk1wA<A4>VpwQ;6xwv!+n-$chO0LDK0DsGy#)QJ^<K>@q$U>*DN2}6v@E}T1O*i?
z?c8}xEuvN2MjU(fT1`x5B7!riLNp;tqJFdkM>jvUx%OsWs$-#PrLrD8CzKH&CLH(X
zV?8AG6*M^`0t$1?&HDJvzuCd7=eIClZ(w7zjnCisB<5@PVt(!k9KZjASbC^}>C*{U
z<2}4Eg(tu3Az%;KxCVUYCE(|Oqk@~OpT>iW--%!N{S?O^s^ELScLuLrNU@*gXjdfX
zPw6yX@C2lD)g-y`%5|q5pWp$t2&LPR(kILugn@(2JHYjeDUO{A(b-EG-Dh$lyZK}=
zROGH=efb>bXb3%AEBLD2U3Z1PYw;VU--7YTYK@fD=;l~nb}+RFbhoMWTi**u%_Dh_
z*di6Css*ljYBF!^ngQAMSwLE=HKio(YKM&C4d~6zQ}>q}sj6#5=hccmcl|;T{@p+Q
zCwu2!-TuDe=zZ_s!80$u6`_FL1>?VRQ0!HL6QB4$A2{>DtWsO_$8iM5BUnVQPH~6T
z%W=0mpbOO$uC8Ky)7{<r4CV~z7OnOWqK9=<7URwOY9%#bbrO~dNs};692O&?9gT~E
za@vu&zR=~rjr^R7c~#7+ZIVt$Wfn-KcQh>%#%-r~p>P20vQSBuX9@MB(<nG~5TYHH
zM6alzg;4E>e7y9f4u0!%*O4JY5Y+L-+n<M%hbWg%A*`H6JaW+KBp8<+3|D~5GbuK_
z1efCkFZL1)h}%E^Fk<+)w)-1s%#`qnPi^34bA*MH9{R+nQz3|?<Oukqa3lvc=%tQF
z@qj46x#HN1F<>!IZmR_)ib@N_#Y<1e@O@I;Epqod)|am6ay|65q!MNw@9P_=GsfCT
zitSa8+Z)5gq>`OBP8_PV#?pPBcpj{oNLEJe-m1r+{D_=cK{-+PkB(b`lX8C~Lm@_y
z?wvf&4N-}cpk7DcN6!<a!mpu!CzA1q5(i@zfpKwTE5c%M%>OeV|7haG5B+$_uPS9n
z=P(!mImi$vk2gy9{;@NsKNgKhVnwYy>7jR!;4}Gd;oaMDzh(v(slwvL>b0zQFG061
z57N2-#mkHLvu>SvPQ{&;e4hTzyAa(dCY_kqnFXEZF2#lv)=BuFc6CF$R}0>NR;n&v
z|HvDhVj>ZJpBFv}Vaj*wA2I?|+(UrbJ&!tQZAbW}pTExi??ShN=T^Ur)%GRSE63n@
zGw|IiM*TkaHi7dm0xv!bB$WQEI{4hPE`ITI!0$f2fz{QoBJ@JE$Lr|CmoV<7_{2|b
zVc}jWlO;|)GYDzoj&km4m<(0X5iMlyd!SQvqT?q9O?3JA8YZN;>*DHppwrGowq51&
z={)&b&^1(EgKA{PSd0PpECa5xC9dA>i_o9|1XTvW<-D)*Ea-_|58Qr?!Yl60$Obs$
z&eGcOvr%GCPnI5G2fUDThwnE(t{xMEPW1@v#mId#_frgl4t3aTQX!N47H>)$2TF^k
ziH9q<GymHk`A~Fn=AI`i`2$blEg0WG4}dD(R=#I``T^9dvk9gAxY>fNPST54S##ZF
z>JJ))UoCn314n9Q060_@J$ixZ4uk|M?jna$NJe}>S{=h|5^CWWlPLx5`eeBsml<ee
z2&}Y}-ifG;nY{vKIHX~Pz3^4ss8y?VjI3a54R+}rh9?Di0wnFDNH64uPtQ@UfQMiH
z#0EC@Zle;E(d=#Gh4oLNR1V-$_nKe<rP4H$osx)JmFL*omExcmz6`wle2T60Z8Uc-
zAx#HdpW%5m-0A#2!df3+eRc=0pYP%R`#p@gjlD=;k=hOI=CarotvC~<MtyGV$tX8S
zUmN<NRBONM<J#*nv+*c=(8f_Od|I$PQ7FPv=^K4Ncm`-aLo+GVPOr1(7B*o1)`nPd
zI*3M0nt=6rT5!@9Jk2d5pclTnzxsz4yY@~<k461tIq4ufE*olXw0ZYeMnElmG7yyZ
z<kTlsAycYU8w0-AlnNDHi@kP&EULK=o_Kc_<Y)f2Pu%P`83_Ca8309SLF1`<^#tj+
zQKxRh%{T5pzf_TV)T&l__XEMaz4#SliyxoJ8%|srRth>$6QDmz|D_FtnJBV#6Eb8}
z2y{rGc5&wQks%<Ljdo$#xik|^#iXJmAnvK^`fF6Ib-Zh(w`>V}9V*D~uPCkT7R$~^
zKO_=z--7|Z^tm=(JAVT~n80(&cxC&ufHOilq(wi4a%llx5b$@B0U+1<#A#q_8+h?K
zV9*;P8to!YBj(jm6;R+$qZ4gmKVC)ZjPOgJ+`zpL0aIlMX<RI1-r;q+PK*@?sKUxq
zZMC&}xAA=Bd`f|bOD|@Ot?-U*KhM`$XLM|YPkw9fOJ;$&JJz+gTC<4_lI)E|Hlusa
zKxGchuegFk(4x<j%WpgY+RcgFBm^h+66kLwQO=l!#Xe-c71}5$G)x^=jJI?|;$5H0
zlerbVJRWB`OQjPhBFZQ%$%#OTQIca!KdFOu=D2h9dr@*ueXH+I8?@qW?*TXnX-8R(
zBO#@Q6#=rO-dYU2{+C|xk`vVRsKwuEQ&%J&dc9GflrK}e4F72b35J_*q`>6JCISKJ
z{_B#kfTWXnH?gimak0fds2z)TV!D}R1e9*Qp6IfuwZSMn3J&k}0_QllzzPazr<l+@
z2`xbq+Lb83e&!Jew=a+Jx!<^e+}lSjSjKAaWo!;#MY+^~=heAQdJt61wWS41;A^e!
zVC@#Lemg_2Gt82NGU|LFY@%5f*m1DYeF2r4gO^`y;quKs9(mM9G$8Ozou~BFP}jr4
zG_*IQy&wIz;O1=1%4J~vCUFT;mS*QTTrIeRX*?ZHO{N43mtT8VHkr)6=5{uKm;>@2
zF#>}=Fn7}B{s?5ua?6!xcRo##Ce#{?7QGly+Q9{*C|;`_I-M2axS!?+Eq?MEiMW)h
zMJ`^QG7ch@#=E}y(F=c&IB*&s_TjjlE+Wq@Ex0++zz$6aKzMgF9F1Gpz0+ca-KiOu
zbJijm?=c{x>-P1+H2<<%Jh6*sYF15bXLaN~pbKVPLERKm*AJ-2)qk}wAyh%m%?M%S
zU@tlT?<B{s*kJ^aqZqE3w8h`X6R>uD0j<O<Ft6uMx3(**(@*>y$GJ4AmhU09kb_VE
z(slI5TX5YFaXP@|=5HYkDy+5Txpnpk2!vH>G`_V&93l*%xs_wk%`lE4mm7C$z7o6A
zDSWSl-O&XMk{v#dU;f!WET5tHU0hp1)C+J^qv5Qmq>*|3qZfAJ?6ExfXy{?}T7s#D
z3a6B@(CIz>dSg^9JVv|!e3=fm1~4nXFcy?qp!Lg(RW(MXOG0T#>PTFwlS?j7hyf!5
zAZ^GvEKuP9B`8cdpu7aZ1neK-LvZ-Um_V`Plks5Sj}3(5lGh}=zF-031rXUXL;1J^
zf7!=NulBNy_L?7Irz2bGAu#|M>9=Qt3sKh0I<1{-?Z!63iiepcALY92_D=3`FDNP1
zwRd#=DTUxCKdjPi6ZwAgq^j;xcz}`q(El+D)9NX&|F#ylaxo^-c;<6VD56^cTDvpv
z7}5dPOn5zsHCk<D2(;0eK$cZ%(S|u4Zg3|PtvU-FTk-IlpV`9d#vM*y)q*)(ZT>bQ
zbm04ScwU3sQhRQdTU~QEU0!t#hYo}|cRM-8gxC`pkjJh7rQ}^noirKe3?ppyUqQK+
z;f3dSasHJNPTlJ=U6-Y?wQ*&sarzQ*we{cX8I@VpExOe`Az41($My3mi*pE#TjK>b
ziKjsPCvX&vrAX)@-)r5kiTh@p#KP?JTBj^3l^;`W{xXFD@-FV4Zh*gnkYqd^l^sxR
zNeVCEpdnz;P<mF9K`=j-Az%-HeyemUwRQ97T}<5{AgyQk%&*_V%U7;vt?^|y&i1|<
z=WRs>$lvZf09ih<yYma((bnI|+-}y|NYEb)aO}hqW@hS`nkEaJVn{8ZNS>94it1RO
z&(!yrTy8-Tw!h0L1s7;w!Oc+*Dbf(X-J%NH#Y1m!Sr2@w<dv-!WcoRAFV*p@dIZV~
z3q4e3VM>n(V@Xk6tl9+$L&PdjRUETurL0(-7t$UCmQVXQ_gojxJ$D(7-$u!uN3(w!
zYyB5du1v#mOYog3xDJ7NWnR!azsxr`5P*q@Fx*bvxbH$?bX;n4M(-i+Lk+FLB^<AR
znA2mQ`?VJSyZ_+?!XV`|n$po!n1ysSrjkOPiZh1q04PU;;^<Q7a<f(n1IlHW>-!b?
z!7{pXafCNg7;e4d8L!ip`M`JBf19~uc?Q~;(*itpPk_~nk$jjc5!U@3h0G`Y9+};&
zL_jsZ%w#pi_T>Ao3c!R1M4qeqTg_w5d5}OeXQ}z1=AhQ_xb(Wy9pT*bEnK?1iS~XI
zL1~aQ`?t!8v-?j|O1Zq@OnuuK06D;6cJ-A~a^JI??ce+0nYr&BwOeapcYh1j=~*lv
zU&j1m1N9jX<57k|FK3BpLX^qE3gLpcE-nw2F0-OFTWrC4rRxcBAh{2Hhpgvl5!2_X
zQe*uRV;D>^l1w_OB~S*)0;f#G!QZ7)f6N3Fp1+P~nQE*jh<pz7{R$(%OhH|>NOWOZ
zM50Wfi%~oWb0-`O`Wb%rcP}G#b`fw5ZHmjS&%mR)VTX!(s&J|D#_<^gpr)l02TX1+
zwI}E6Or3R9T0yNWDU2d@Q4g+H#yH-?-tamWYLDamg-twpYZk{&lyKvE#tcO=1ajO8
zG_`hXQerMraqJZoU>!LT9x&YZar07wGmliz?<ayHYIdg>4)&##_J+Bw2JcaxR<WWB
zT>-P-n*uTY+QKuWP>STk$OE9R&ne-cn(D1@tzPI>k(w9>?Tc!%k&u(fSTX>v=C3jx
z#xv!Dvyy{S)nnaAa=HfNF>c@NVs&*J8yh<qjRx>M7u9kQ-RZniAI7U+?d7k19&f?;
zhEjpke2@?E%AeY7hnt~WcaJrmiaMj+aIdwB{k<(zYqOYNT*Bhw3>x#~t^%V08G{V*
z*p*$C!&fFtnpvO`U@ipGlfx7hs2gG!dwMx5m!Ez!qG%tfnI7gH#k(v6Vtoy73{1|`
z6ROx&iV`Lj4k$cRsBAhzVZsP92!eUgu9|YzdqRn((g3DrJ^bdcUBO<9T>lgm?>JWX
zehb6AiO_3s<l?ym`uXs@5WYu$t9^-bo=WA12~FH>R{#lN?G>RA8x4oruDkGjA3Oc8
zVW#phk|f46UvA-#|H&1s-pV;vHDI0b-Bg$}v4)guZ?39bC%P^q+kN};2xs40D$={w
z?xt-QGXW{zZvl+@`64W|n#9@|&;*8aV1|-(;W$Ta)<JC+*x$++qbiuFh2pWaX`9>{
zSS6S+EM*LI$f{36SDI3RS-I|_Jmqm1mZTY4`#tPjZex3U53T)ujE8+>d5;;Vm2!i+
z-i=n<&(`+_7kfQC_gzWW&))3a{~K%o<VFvY>sxM6d+c_z^x8NYV|nVy9{ffaWnH)5
zU&ElkgN-!`3Ffh|G>6&wI_8guoa-L;Qr@k|UDX8`@~OI+g_r@egW4NE*NUmX6;n{l
z-&<55;~D6xL1?vM-YgWTbs&9+;uwgl&SWBiFm$bgwHqnifw|yHRY;tdBHJ)&+=Tke
zm^|%XL5|tuJ}$i6#D(*(Bk)HEoEh}S>sT8;gD|X1h~U*Y?q~O(LIJ-*bPMCE@I)mY
zJ;lD0YsVQ+m7Y}Pj9k(vwaw&3490h`Ke~k3(z|f^@-}w27csx=<Ms_H<}r<0ZS-Ba
z?3$EgOoWN;DOPY?0wp(A35-lpDtj0!*|GwY$hqK$k2G^KyS{${58%}BWOrx{t`;*!
z4$|5VOgfOBn?K=UcP(ZEAQMNM6#^Tya*{m4uD#NGkZ?_%AqkBVU7M7sD=w;apEU=l
zSx7V<V|}-U?VUYr@9v@7=^&<#!%ocEF+cDTxaBN_pY)?`cdPSKy%$}+*vGl2hUwb=
zTe0}xgjxW(_`Uem^O-+dS?}~evp2Z*#IeTvvPR|MLGIPVDDSyRzK6Y57yGR>l)@?+
za|>(?8Z&iFH$0Yq8V(XBppan@ovs`?b;7YME)A_9WcvgB8kIRPsbDMiS8p``Hduif
z#l=@VeQ`e3uBmqz-Kxv{_W%|_$CBnbtsCywr94Cp6BzG9c4Xm}Pc6CVv|>E-^m)J|
zHonjQySVo&a6D-}?l=K_Pmq7|030`f>xF_N=oG6GG~o%adMRjCf7$tE_jeuYW-Og=
zbJFW_9qja8!c6&LjEDPp=9wKl_3bNITTPhd$JL6gFK9VS+S4)4leEkzI2Eebq3@#I
z_ON~{!qUka2D=G|7JU7bgQ5vl^7-oCPTV}}K56jQ7@(q%$G+R#yqx|}K;meWGv)cp
zO9!dLlimndkE$-m^i5>c=~YxC><2C?Q!Z+>=qm(HW@vYNxOHRC-QL>8-rgQY<37=~
zGsjCANcBSxzEjBpl#(nPqCdJ_-5A{pd*dy{`OP2h<*)weINOWgs>S~%H3re1z?Jpb
z+xlRVKl1&<=GMQO3SXUDntlw^<%fE?+wc>=@5k8)<9LXz&3$Zdh74>qX6G<7+raGX
z6iRa*bI|*plw&u+3*<W(9pD?UqArCjn`Nyh4YzfgeC*&-*DF@q-0>~G8+<u%KPLPH
z{k_KHHM<}mF7Fz$vB)AUzR!jgQJ$ibUl+go*-L15o6^$UoxytNOXy{*D2229F5j&%
z@=v#q=vN*sVybi1Ne$|1tBRQ@1YlQM^-UC>gf;-K!T@}@nJ1;sUKO43b##U|Q4de!
z^^3Rh=zA70zZhV9L$nSPA^{cHoF%$0XQCdbCWK1<NvtEc3wHzDyg0(idyA{6uR)O}
z)tA*WEc|jxj~0bp1zc-=)`9zE9<w4lnoHC3KFZYqNkp7ab=;;0o%Lqz)p#y~l7~_y
zAie}SUWlS$wz;>5?Mr*u+1bIM-$9ZNkUJ64gSeq-K&&{YmV{22q}d3g@lLflS_|9b
z>lkO7w^FD5BT>Hki9xcuU(Cq2X7Rs?oq^;^$7v^v)31Iq^cFu8#izcz-MsR@*Zkv;
z&r}}4Z0*sg9xOzOlZ4}J;HK!KKkTC0-NgFs5VcwZ3roi^yD*Ddqk^d!kLi+>NuZi?
z;-L%R!@jfR^aYxq*v*YH&|R*5aiq*u7WaN~mnpC&{eGoqVB-S^jEaa$YC9#srql`W
z+~V#=D$>-^EDdT?K6}i^rSm(ua_u_2U<3~(4C4)~4ZegRoZ^M;Iwc0|Xy<lZN~wDA
zyb^pi0Iu5ArIQT}+O>(rCdaGYrUJ8|6re7qFeEKE#rEJiOwHbdXxPO|=XUWeA6dcf
zcB1(D+J!Nnt3W?~M3&P5h8~w#XK>494_mj0s+_P#U})8{<C3dy`Z(%aKxsT32AKP%
zQ@{2Lt=^G3B+*cVeea10=+8NrUUIQ>D`nvh0rg~qVVKEr;RhZnwE&fh$1-ihIL3Z^
z53AcvG+Rw{J8d!o$VivnjYaJ#2r|#9l2&6vDrgCM?r40wygR-V_ToDjr+YWX>CR8Y
zdGnVOXZLEHv~9umw{-Ep$*sYPOCF^=;|M#y>bp~)iISCfbvsx8=2q{;zcgDu8_rc9
zM76Xs$ekHP&d5)^p_}D>^aexpZZxrayMk(c26GGZSXh`ry-`7}5rE32M}w4qXVm4D
zzDS&Fx#=cV`1P-;JuxJ-GmBa2JV;TB+I`H9Z8_3vf@vK<enhDXO<oJ?Z^Mg2A=U+8
zDc;QVf`@i%jOV|40r1<Ls`H&1u6I7q4J`@iV=|Rjf=5Pxc5U9hL->9fp63g{!Xu-g
zTBLCbPMB;4L1)^wwTWtWCNl!1fIaZ5=)_ksh&NCw&EeXWb-e45B}~tH*xi<_hw%ce
zlU1Luj6ng8N=lC}Waj&>+iTOg#wgV)=u<BP%k4KzLi=->grh6#IlSQ|tI>MFHr1W9
z0Z7f=u;u{2o@#VGVDY4ftsA7cplcF51c8rgt;9-9q}DVZ^{~FXkDcZ&c6N6#9CnfC
zN#=4XSOVAg5O95OnE8&MxbQP%<MJ?GFL$Cl=tirE(v9b%eD~jGPUrJ+ws$Me4la6q
zfN$;Me+zm87BCHsB<p4gF1`j_{L3Zh<PVRA*S>Rm^tJ!B<{f`>x^xD!m9tqjI6i<E
z_)$LelYEF2`{;Dr=yW!)e!GlnZ3eURi<qCEMPshQz!aCN_EU`dvg2ul-8h(9Y1o<s
zdT5tV(l#cQpui?oi@>C#qD`2YUltg_-Uv;8<KC;qt>2?0!OWG>GoCu>G$?29;_2VN
zh{0eBuAd=vXVB`uif()xL3x@#L>4_60`dS#T+Bm{5qL)^qOPm3Ltw5e;B8H}2$m-#
zOqbLIO?>tya_v!&_twYm@I{<%d>4kp7GAxug(sgliQS#V2&NLSrvm^vC#ycf-u@5F
zi7fH4c0Iy_AE+SRmu!Vzxa<W;cFm&xDici>R96Zf2%w6OSJ#-uJqm+h_6CK05;$6#
zBF<HSY9&Be^7%O8bc{}a2di5<*xPTS*KK1QQ(r>TG*3lTmhVA;z?tHTOpfQ{)vz_b
z9rlw=L}@Qe^3H!q^ZlQT^PMloS#vYaNHNj6F?X$zcXV^mNkc&Y9;bKq$GG#0zFYrf
zf)fw*dRPAHZvWh0s0F9%Gu8Vs6`qdD?o^Vwj-PrXH_ao&d4zVShxYy!?%b-NR-eJb
z@&cBR&tYb<gruR`L=D9=&=g!Y1)Q|iM`6X`Tofa!fO>s!#g}cE)$zN$z-2kB*BLK>
zp5ye;8-%BdpD*b@b0x&M_>~;fvjHx=vX1pTHxUG6LuyEqF4lU#13x67k8liHoB`+k
z3H7Jn4E{L*dj;A$X}7qb)oPDJSZ|zxU?ZX7&!YB%j7gsR%oq%UDq5r0uvq&b{9p<<
zuiwVm2Ny9t6QH##xC&<mCs>e^wBDj5t5~LVxk=t^^;(Lv@7E~>dv2JuUd$NX)z>^?
zA^mcFMFf=i9{QD5{eTGlNV66~?5RgYsg|QUO*?*$VZ4u>_CEIa_t5P&F&giK;&n#%
zU6=biNJ(jk(5b-5Qw*aWw4-edqbA_=5To6R)6Jib(foxdYo1H;c0Zxe;BC0*{}8(a
z+b6EQf?l3vmoEaBe<*Mles~xke{#S3%3ll6_<^#w9L|*=!OYa7QOTcm69NtM9x`u)
zC>tW$r<=Bh)f+W7293FS%rDNNLE@HFaW&4ktaUudq-B=c2yG9*-ZAY7Yj$w9Ap#JZ
zqm~{5E`tt}A6A^FmIv2wQa>h3K)4ch|C$fb-09=OYZu}B5gV<*4{&wwQ%L;?zBi?I
zY+C%GS^R?DhsqF?l$T?<&%y_`3Tb4cF5Gf;#*{_S^lX-J2#`^#ifRs=J?!>h!ttq(
zV>D{x((7CJz>}xZ+7&OrbPCmCE(IoPuA=5*=)WmG@Ix1^T}k@}p)a&t1M~~C&Q|KN
zhv9%tJg9ef_6{=g5=_`Y)?Bq|BT728Y>P)ZI!zDl-2q;^{@a9AA*b%jP6k5k$xu)^
zD;HQfH8zfM+Qled$9{AJ-S`&BJ6$Nx;$6#2$;F*sIm)kotQDVo<?aL1SNrX==>HH6
zz#r@t#M$mR#_rQ@=05GaOMj)GE<CjtUHMzp{<)7&hi9Ux(u!O2PXK-c2@+&3<y9j@
z$q=Jf3(eg-xO1b9sm2@|g4u-`G^pz=wUqB?{6obtnwO_M0VVxsACGqZjmW%`8n<P{
zwLqmkDV1ulet&U#6WxqOjW|cOA@1)B&z(mUwcz>*O8yjfde5U1-$12IsK2=WvfGDn
z+>ng{8w9oc({mc9px;dPVV^@SB3^h>>>>p(s(L}kCrm={TnYg+kVvod{VH0+bC|C_
zjv$!At($9j_>pDQ8zt<uQUMyNpSJP@CIC6J_zU6@w`5fE*n^&f-HkDpPlt#U5^ol^
z+R>#<zW^+i29)Jm6<1XoI!){i$_{E&D^-%?AXaU!nWNXF#wQsnW%~RGqo~PR{*F)g
znbLGM24Cs9@pu=V_+@nCb&Qf7M)%8M74uUo?y2cB`0kZQvQpT?KivF93{w(6)3@6A
zM0mT8KSTrY^}Pb(^hD`q7uftY&#nJ@fZ&HZ!{kTW(MzKw?}jtsyD?XJ9QD#Yybxk%
zfW#Rf^~Q+u2)j)(1|doz5st_h%wu+;ftf{O%L!&M>Zgc@QWh#Zp|#_iLy^U=y?ND0
z)PPSam{9MRe=D1zjeryy+2Eui=#bZ5pZ0O?Yd5gHy#_ywxtqc$Ze|<ZFC#2Xso1s1
z)zi6p9Dj-tpkP*mgZ%BbPJ;R_UDzTbcawYx*==RPJ2}N3Y?{O?aESg}!U#KP4PO;6
zV7!M5udn01@3|N4eL>k%O3eurXt02Z`)byKwENZ%x(KjwJI2Zba)A|QIkCG-JBI`5
zJqxwfx&qvXF>v5hccqH7=qADvsTg&4at!vQg}D>}i5FDn7Vi#1cb=QH!s%n2Y@<Vq
zJ=(<}+d)K3J=aIcpT%6|K2(DSs(u9}FU)E|h?#nVu$H3c*Rh}bt|^u{1PlLdWB~pk
zV?ZgaULLz^PgjCt?t6~^jcjjx9qXN!aHIXJ9Lvs>&SJLm7;52Z<c^OB10+PCaYl?8
zG+S*no2v-II_gt1m|L93yz&g_zK@3)M*R#iwW(G$;*u^?i^(oeR1H3iG2k6v^*9t)
zz*TZ(Lipjur6z<b8sT`}0~&KaR&Ta&>HO>PLvsD8EVqK|`=3Vc6SJP$*wE``_jjCf
zM&O@A2EZ%1u17|J;&$>11OQ~Pj8cUR(iK<$Px*=8uE9YxA&4sggFt-01L=#&2;^h{
zq{T2@x4qFhEL7i*zzeZ@a~1d8e+<*J73}Yl>XXsYlZFshsh%<nlZI94?-A&^bBEH3
zM3S)xMXHjpAYNIsLo2MXJU1=)96^Ozn@M~h4;>6!IR<TD)FwPgVK*As5$$hIJw{{d
z0+C{vT*Y3rj$wQU!*rd2zR;gTxwMRF|33I0(XgoXxewp<xMNf3Io#xRt_n;qdRVN?
zVJjsm=Rb@@-aE<w*rRaC$%9PuAwsW=<?4swxGU&J>*$UzV{d!|JL6YTa_eXW_cM>3
zj6voGi1Pswe?U3~AkxuZYY(m6Roo7$s87#gZgBx~3p1$AQ7yg8JcCg$K{OBvEQJY>
zz8rTVDv*CA_AN$$Z~#N`<s(<U1t-D^ZWbx;oSJtLjbog9{#9g7htf(2y=m+Y&Skyi
zCQ6k#hU{ebXAdA_#NQ(hfR6vAlFxNZ8Fk%NEo-D*x@tm5R8`K~D`QpE0B9nzPG*Y!
zuxJnqFM!g5<bji97y(|*!8t6~K8De#gG(3J@Wc}jpuH!240U??-1RD8+hA%YifXzn
zOEZ@^0R6U$QIF`jWsIr&knyx+@e7Me9%cHo4+ONsm!&xhu^h*JptA)G_rO>Wd316O
zBwZ<%$Z8^@f&>yNi8BIPKa0?>Aq*GL@ZJrNuQz2|R5MVeKS}eW<X2D*DyRklW<nS9
z6&IBi&#hC7Crh;KFpamd0nmf*T<n0*Zy!-M0PzGoglLrCg{jiRly<=|T17LuhOOZX
zD0?&P88k`{p&G0p_X0#1BJuiwJ3^fG&}y~V7=%F`wdq;RFD+nhNsK{#)<rZD0Fm|Z
z2ovM(xkbxxJ~BQuwb*qPfo1{Ppr7vg<K|rBU#+`%`gdMOr@sl$PsshoIBsFH|9c2S
z0{x`TA+?d=IA8Jo1pq9&%-*9N+x0VI0NO6Ht(2=3YMK47m4eiBn#jzHUZ(_=5fBW3
zQiDG7EMYHTclZKkO7EoxFSv7S6{pTDqdq%@y{$wz@=_Wr`FYLD=RSgOkkjY#W4f+B
zI=eCEPn8)HU@3OXz2}Cm+(j8&MoaIdu&uKV3~7h&=PKKyJS)|XOLB;M`si9rskxLU
zEz-0#$x_sUdr>J>r6@`j@Ur9#xBH@9pMC;_UJ0RJMkOer?t54$m2muY72{Jm0s<Hu
z)0_BEjYD7nXymDj5P@4kf=KOvW28BeIH>b&3H9;=sFm(xt4_vXXZ#wrhR>nm&Y@90
zi$<A@!7_5!N1Tx{7$NtEi1RVp`)%y+-NEgvHB{@fn3<nrW6+qb!uN%N7!6V-gDr$%
zLGvvUQY}YjA=%vWi+cJo-<|UPIc66Fy!N#<tlqu`KTNqy*LTXe-Tigs#P#O|O)aTp
z7k1siWz^p-!=c4b^k3rb!^;991+j3XCMxMZh^j_iRq&}irDFS8d;oU+CI8Py?Gg~^
zbDE1V0D|{2Cq+PBK)i+4=p`&xK8z@C;{2=E@sU6BUX-g2H~Wx68J%9#*%Q(?pz<vt
z@o0U2UA0Ky=JtAo<@;2Tk*cJlMNfJNbj(sDmSeaE47;Q`r8+WM4Oj`olxbq~9VjiU
z*p?<EqZFjYFLI?$-!sH0!X=1g#n+G#8Cm=#KSaqZq2vcBdp_!+kEL44U4C*pTMrU9
zNMlvleE7!UFaWB`gv_>^`+Q@_C6+cTl;4X$Jb~O1d8>N)e$-0$GB10aY+-A39_xc=
zP;uwQGbo=$m9hy=2{9QGcZeJV#Q6~Ib{qTq>sY->q$8puFJS4|ET-lvTrNw-o-hN_
z%gd>njd|iq0K!f&s#enkG||jx9M5t5-T<$Cc^|L5@-m#Dhct^&4rZ{^`6>qKI!fhv
z<@z%!uXy^UObkE>GJ*~%129NOH2@S2=nkhvA&|zxIU}Gpf72#i)&T#XbVsEUkav5R
z>H#PXD1{3w`>QYv!UCqz8h#Cp(t~7_u)BQ|t2d9~zI&IkaZB1?ut&tZu}(z_&wye9
zE%3pWoaC9Xx~7NQSAoa>XoC3@E`yca7JQte+X91k1mp=&t4eVdk*BB*EO-G-1<=Lg
zLOhgvp&cA$APiq4rP_p$ucIK2<XO2&DNc6(z@yzi<liMPM8)?}FL^jQ=Vj%Gt4LRS
z2*uzY8Gtu!5RaDjJOaK5Sa$=_zf<bFbi;CTTd9#28G@XYR49I}pz7X(a(D`9*2Os4
z#8&hQHb>8)>^9H{9zdh=Fsi{x&ZS3rAF(^&)MAo#(eCb|y}ydv*Q%)18_F}7#mw9k
zs*Ql%)OeI39+KX(CdTSCkP?l|fU{3H_|Uie_`RPW;rVA?MVvR`<Pie5j()U`&E8iK
zlqn}j{}<O=7=N_jg>}X|KQsR*15nB&6F|?4J1;d6ns89$(N*}ZgJ~=7XZPRb+JQV^
z0F|yG|C@0DGAx3+F=$6#fU}9_;CU=mp90Xs<qH=vJJ&#Csf^ZUQtZeqx2UucR2j7D
z(#4tpr4ngHx?HHVz1PBE5F(E%*xv@a&0N)b$YS+8ZqO-&O^aMupew2X#0dHn6`&fN
zFytUM1d=)s6epL=3iBw)6nZR<!vAByk4kna{30XZqY}{K53w{A;NBAf^3cihD5FN8
z<QpD^0B@!R;AyTbGFfeEr7eOKWCUWmb+qJF%uTxqHJXe0hi*EFXH>&`Q48-yl8+E2
zP3%Tjur+#-bH6jC`!QE}m@DAmRxri@<E(?+?;}DVaj%8_&Kg#4R#7cCFtad^#ba}r
zS*W8vN8Sik-pO2~^3bW-9Q9cTXWr%E*fQ{IKe3PB{@eu&(+%YLSjmQsvAXveIH3>6
zrv<H0e?|Jygdh1g?fhQmx}i&9g2o0Iup=6;$DQicLQs`$T;^W{)kT_J1AWT6s&GTT
zhsu5vagB+8z=}$O^OwRI?2pc4s{9y2r-9*U11~;z4)6ca6PQ{I(AlADEg_OA38Xka
zbXf+B+<N+`!MKZ7w}qXp4Ggn8*x&tbbnb8qa4Ekwts}I+p;T#dSVMxTdP<n-F%fta
zQ|1k4lCVO_JM*}MZ<&ErWkwYUC<Y+ljV7RqK6d@fUVui$$Jr$x(>1!d8L|<vRC88b
z#33AqBLomgh|^FcBt<uj`>d&F6YBJyQyyK|IXM{u#H##`5N|3tAp<Rf&c0KEAD%=d
zIEggtW0Y*78DGNg_$7pH6*Hv=FjIOIHUAXF-Ha1ZMj`VOWKJ9XxQG7QHn!F)D1|jt
zYQ!;^Vb5TyQAWAup)v1adN#x57e@H;|FDVMw=TjhwUDG^R_qDADcs)w6~q`J4CZ+<
z3Am>yzwGLZ5#S5}r2vWb=LE!#W`p4QA_GRd7Ww?l1~jxo-Kj@YYi*^YB4p4#_q5?5
z&qQ{AYDktbc}G%&M5C=D^@rH)e+4Vk-^(2McIO(Ne>TO#kG&gn%cN7NlzEj>E;m6<
zBJ{gG?5uC0*<3@fzl}5<vG7Y{nGk&!W5UsF{<IEe?D`2IH)W(otg;2RkmMVz`9k5x
ze1bY>`q;pyg<j=2pDDvE?L{E~?ff2BSe87G7e9Fbvy~7J&W4x@rH=z``srv45)(gM
z$-l#90Ej?Ny?VIilcy%XOnll69isQ~WT%~rV_T^X<|-|bu_1gwE8<W`d#&zHJ8d;w
z;UCh>i_#XF(JgEZ&!glt-0ARCHWl8B>EK>?!5k8YOv?bNJ3`9FppDM%CU%--luI@E
zKBel2pc8OojX{5e%xm)EkD?AQ$f|b?TixG5FJ48tvZO#eiR;A(P^mBdP>$aKfT{|R
zJOY}yB?*Zn<)>u6<#GuL$>AN9^#C+U$)eU4JsKqS$DAd0{mJks{XjARWSF$*SDv9%
zUcjJ#3(es(m@j{T4P&=|1LwXrz~aIR=9gzsDu)>LV{|$l^m_Z~4>}l(_K>9eaGWv6
z@a)mJW%lT}U09-U6veYp%tocBIHCDmj04I}#j{#O#HMN67l?u%@lI%m=UNKU?BsNx
zPgQ}+?GL>GW#7kgJ;Z$tA5~9e%{k;7P~l1DW{ykEoQ^zzH*ZM6iWYd6ns-uW2{}DO
z<*<HIL6r27W@C9Rq1jntCUeFtpG4d?;=Hp_h}me!u1S;KL)krna<GCFBP7XwwjZx!
zyZ0LW+{aXK0*&$mm@1t`C0OFwO2nhF(?f<n#@P_#h~iiATzPSN8H15YJm9k^du42O
ze-o|fJj&H2m9v%@z9{&ionLhRX@WYu@Ks2_-hi(FK#}qy;SH`>B<`P8k08AVj7pF4
zst;V(0|tQAftUy+V%RKpVkEfeTII}B*zJFn4b@!b1BkL7qU;XttZ(7Y8W}F~x<*JT
z)FJ&~>Y(TmKug~+B^(21fL?M9y>W^>{eBTcHAh~AF07%bbzpce&@%3Z(PS_H+jlTL
z4YTl-$&(bJOPm5v831m<r7FO<27o*O&qv7%FjFaGspey;LdJkEwQ1~1LW${^HU9@k
z2H;H`!mCkaQC={DFzaqZw3~z>m2;NZ#b)<1qaB(+LBawOxW)@0*EV5{KyuxQ@eCwX
z;GQr1*~AD7{aJp0LR^Dn51sCpkavCuWp5s{<@?YG&!X<HAV-MANs%H(<_-{LT}0`K
z$v9L{QuB@>&Gxa;`7C<z2C9`4rY))L{FH<DGl}^H>?;;MEq00f&GVEmlga`E{uyUi
zNm<d(ujSMXN7)2aDqP?k8h<xm7vTj^?5}VD{#$7>GPszrAPE_-?fzFejX7I=zg$me
z1h@lm4Gx)EHeeN{uRlbd4ls&#(2qBWJC9y;6VB9q$YS~)%l+5o+lEu5a~dN4qC*1~
zSDC;9EJ5f4yMNI(PDo3xR&RDfWdIZfN`Ze<r84Gg70i`=R7lQEaXKhD%8fo!svUN@
zk!qZz{gkSS4jBvZ@Pq)W3^(vyB#Bxq%yYK@pPW#Cp~mK3m3JR90tp#|G%_wN?P65!
z>X0#@-Htr~`kRb^3KOIux5_FAuod_X1pX{gKEt*0QL>NC(JNRRJcE)`Ww*ZWpGLiO
z5+#2gp)<?9_9(@eWNqyBUqEa83Ilf4>ODM{B@9tiTomQLQuU_{0Oh6G3()C5+WiF-
zEC@VWov`S-WRe1EQi=w?US#@x@;6};vY86{Pv<UGf;woBLLwpjdJLpfQ<7>u#NO})
zbUT+Z6+D27e*(Tc&Gqs*#>lch2H7eG@hami#J^x^0#Y#!>L}v`!f=V(Y>USvH`5d<
z8KG4T{cBpaQh`zu0U8SsJpuVkuSU5J`npJHKtwL0W@Oazm%>Hm0T9)<7L+kvqMra2
zpN@-FN=;e0(nIHr2@((SILAmjuHZ0^Lty}N<x>-(hIBzChg0an3SYkv-ykp1C*~lL
zhw>_tG)9t)*fZb-%?cFc8KiIs*kj{B9)UIjYVk88PK65`LP$749eApx<8VqRkmZyz
z>|>a;(22i-d>p~aSo~4&h@AKZ9bUxc(h7WknlT7Q#}qL~LK+3a*@7Pm_><k=Hz_(T
z1R^X~EiYy@M3q|QLQsRMtGK^iA!{bZdxY=n7+Qn`g%V7=J{?O&+T6%E4XN_#DzqW`
zGBqQq)K(Bh`)J0`!-;73R6Bkasf8>|LD#P$2<P}ZNLWGQq5=G{##{*oL6uRLwXZ4&
z%{djIA1gC6r@(sBI5?`=2l+LgE7IaB8$qxT@A{t0wBjTYPmgo_eu$}{%rxJCrPoAC
zT^N%}9F!{`9q#^<)6$7tt|5uCIL^&(bhr$`p)dd%y4AQ2i^907HLX^t=SfMf83B8e
z3Y4ZGv{*<*w}dPsV=!i~fYO8H=H@CqU>8<p3pi9zi#>N!E*jCGA>jsvkr3Q~!i17f
z{C!$j5z>^fh#`MR;51NjPpRrX0n%g<XfacX{{{S`oxjX<UviyYx57ribwW!2sZ^j3
z&ktOO$nfO0=wzOmcL%WWLYknc&sPmrnEU5=+yk%J-Kq2?Gx>5ZB~WQZ3O^+Esurul
zPr`5(LC{b}HG|97tENJmf_We*O1g$pL`9)S7*-LM2o<zQJ5s<yx7RcXQKv!}hrt7i
z<||g)9+m#2W9;`5%+5+mkGKVd4wK#VSr~*|eiu{a24-sw_>Q9pJxbt(>kuVXsu5NW
z4q0Q-;mi|-0P&auCn;n&gyWDHfP%Whe=A0tPC0RJJLLq<%m?Up#?00u<r(^s#U}iD
z5_w4T8nwtacmWj)NxSI65D4{%j6fnrK>bak??jK)SOF9;mYYT5!}X^TpvJ%>zhCQ7
z%M@1fqMDtjig1X4;)X6QdUpF!qV}E&`Iq?LcLSHpf0Y0z)$sFgRs2(2tU|h+zm~T#
zAp)2{Rnuk}7*j+l%9yy~^$4eq&PQ<wB%{bjpHYKR<#`F~P8%~aP=r0Gj(WNex;iEe
zMDn5{jsfEYq-iLn%fj1{9b5N)FzjA+KHOeb)flLUB;YCF1C&AsH?Q`vv$Km+Cr@H_
zF2~fY%Pv0E5|G>O2N~CS)GAXTO0|=5mPr)>6-`Hq8V0GW;2wVo;eQT?08uRblL=M%
zLo^PF0T7H>Yfjk3C7cZ)jzB5LcmIjgn4YbnKa6na);=zsZ(?V2#BZQoh8Y1=eo8K`
zPsV`s++vV)6J-z5JVu_yNO@<I1x^b%GmBV41@S}$Ptdr5Y_&A$nG&cv$;b}R&zlLN
zWy7r2=Sq%?6@R(%uk4Bu5C))!&}AJu!U8DmNxv2QuV4ULRAfn#b9#*_x7?{Pr=mu)
zzzl8Jv|1~Qf!MR5c3~M+1e$)zENRAnOoSYgLDAscWF}wSXPuVRLlzpj*_6&zQ_yzj
zRo#HbGPGMyEJ7%Lfzf0$8~_O!Nb0M#3B2&~ui(zsSMWgVJ8}BNN3l4+gfkDMm_P1t
z8gDdmapPteVW1l&>uWiIIv7f`6fwE{-Q510aEq>!4LT8qSwbNI4&yi!20%|V-KtsU
zw?t=T8^*%~4?Wtz!tykWR)(b#-u3R|c=SDsSYPen{3}hY-soX8N;%$S7g0@3uCN0U
zL8{W>m_mevDh^fpFeigS3tbrmHUJtkkPL%_2YRQZ&!X6pfFj*V-t?B0Gf@jvYw;Dl
ze~t7D2B3vMCO85_2GW&$+GSNADlV%9gi#*_DhW1OG#ytLopTI_U%TmS1nBjY&XY($
znXp1z&-7@cSE?5o<3Q&v9?wBRF9GS4_r`n<^3Xz~1t8k&#r-b8JO^QrV=#;`Rd-Mc
zLkv1(%(=pk(|Odaq*O^U=#=on%fE#iYhOS)n8uYGzl-&)S8@8plW6WfiRI-5%rr{q
z_xG{Bxs5QCmg>4+LXkgE_>u%id|c83oZNrvlSr~g4)-`5XYo+AOFVSrP#6H6xDqRC
z3eOouliaR@#!MB%fpo+rBeCB~Sk!T0c@BT<d*-mW-@~QXo4EY?9y)sw0?$KOlH@ak
zV>!WV<Yo)6AWNy;IfV%n9!S-pEFdumoIN0wSTY(a!yvmy;T1?KOQ+z9MM$G)%%L>-
z8Qo|8ze~Sa0!)d1Y6&pn0|=I&^!v?HDY5`I)6a;2sBe}K*#H8%fsd91GgF?6d%4*O
zElOo{3m&l;I6Hh$9m0!+Ba2^pA`~2bZMa$6i?a-4CNoJB6V(t<w`I|K!<mC}Imdo8
z!TM?o^K;W!T5(v>m-|U3)TEdis^pwbeC?I<xOnxmsD{V*GXg(E634i5<F~QC`5cbT
zJ%M_49>c*Vro(xb^)~HhRJ@^Qnf{?W?^6iCM!-Qz28S?!BtRTfYjuzk0S@Ch6b2x7
zv_=f;TX8^Yiar!E$R~2Q<z^GeLvwA|PtZ?+a;1uoe6)`DKY0w-ukGW~Yx~$*A94u?
zNkV&6Tfn=exYS&4kXI0-DUvK=V~`PpFjK&xOSfG9CXc{?go<w<-hfV9>D8wfzb+cm
zjZK6Eq;>vHu3s&DPa6Y@RXN_YOAnO`Y@~|h{0$pUtB@**5+fU?uAzVt$|aIA9>c1i
zFdoK`(d!kdiqC=g0*W+b+PI3>QIPMfomCk=s_1kn%b;ku8hqo9>FPXar>#^n>^Ff+
zuV28+m;ODDFTMwl4Za)Gjd@HhB$!?B;RmAmckbm)ymIN67*`<RPYjU<-zT=;G<Qke
z-MxU0Q^DfwJxunIMnfk4utZf!`Bkzdq%S~fVu2DCNm2>}Twoj^8WSeuL`9{=;Tng+
z04SYUQ}$^vZAscI07wB|@}~^Zk!MgRjx)6Ps3<7F*$0;K&_fH@-R<M`*IKxKwT(eH
zWo|g9q<F3?V2k+Tc_<*E;t;SgpdZ2q2=P{7fH4A`GSrL0-WgQZ!sMluOUz`ZNdq9e
zKNUS`79dHOkwMV7w94gMF|(+fTl=t*2G{!drfpb8n1k%xYSME9(_*1guN)atPoW!q
z%I?pg7ii}r<0l=!3bLN^02F&rQk4Z$S>pi`0&vGb2Gz(|3i7T(6rxPmQ?xc+oPYHt
zynOkmktRdjxcxMCTG#Q=z2AZ5?I$oe=3-&d#oDa_UVP<O5Jv-qoNCpLy2;qcwe`X}
zLbr^m$`TiJC0WA2ptO50+PgF1M^S@0aMOJrQ-C~ws&tGJhx<_UdYt))sdV}<jzeJp
z^ekt=2@}K8L$uJOrJdb9mh0&i*k<Be-J%;gr-$g_#?&;P`u1r&@!<ikUfjd^S6bNH
zCBYGgyVug(pr((aEiY}kfRb7CVhHH>m{WejBhXlZ-UT(KR_~{_AuB=w*%74%K<d(^
z>QU2ziG8QZD0lr>RmjqUTtRchvFA%9uC%_AqKczzgFHGJMmW@t!INvMj<c|>t~x(K
zFesJBUXUug<zch<%=MQni~y(fdh%q5BS3~gNpCUPQ>qEe(+Qe)JiPMCb9m+QCpaS#
z`T^X~K@tsc?!u?AF!wA@HlIQ%n8vNmFQVOBL%B4gm%Y(IkTPEiu^g0xI;xe1%Iv#R
zO{(sL;`ng7Bhw*>>Oo1D&x8PuizIc??;-1SsTfFiCOUlMP#6HwvLo<KOL5ydAV~qK
zuvR^$`_ft6fGo#=^}Rq{ViOGdU`@Km-m`*tJ-USTI~~0KdJC(!x)=^}gw)ZML_Lh2
zo|KVt^|&Vh5_tub|CcnPt}md8u2^*Hr*O0N(W;!YiitTjrWOik1-y_o4TwZTtAloJ
zIb8*$X?~mG!Q0LF^mk2O0PUa~ww>;;sL^~LZ1mWNcewIS)PcC#kjY3CcPsFdGaodK
zbc+OCKOiVSYZj;~N0#(Tx}0{^b(=J*H4^qDmM1X`fyzvR<}DxR&OL)yuKYXrE_Ff{
zaFtE5@1o+D(e7-a)BBVOmn!8M_DDoLh4>6A+n~IFG6}<0=d63+s<^)}$i_q~qLKEZ
zc=5AHE%PK1ryj;hfN@HHCxasc@a7JlkFuD=Jr|A$DNhPUtvTUp&2eK#LWgOP`_C@g
z0ggCLZHhOEJk)Jdc;I4XWgchlo5kM#02eRp;p*i!x_c2k4I1)ps%vaj9{?&(233?1
zI!-@C9uh4ANh1o&P;>MrQi8nukc%pH{Zjlxi$@l}<53r2qCPA6ZX2!E=|mk0SWbb?
zt7|Y%r|1+dST3ZIF)Kt&<Z;Q-a{(30lLbmXtH|%OTdylDRhm<ZnFvquGsh{pbPh)C
zSFtP;>YU3DCY;vm?2{xLuyl%g1&~T}jN2D|T)OmSoWK5y2;6B=e_|Lz0if!vOW}g@
zmPjl`a16PAwD>)>@JXoILAg{%tum{-yP7ugu=)qG_oN=yVSpz8a32&(t!7efnq&cz
zgw8KOlBazf(s3v}07DHmO+17!BEEjX5M+!n%MtiKHa7RLMyT=P6jn~mqEeBv(<Bk)
znhBtQX`}M*{xAUsL?)@?Lm#f={U2Dy?bSA3e{Bz&cZP%`u_2(>vsWOE_cW{yFQ<tY
z0$xS!`YJ2Hv9k^lBs>tvQ8cck6jti|83Q1~4^4a}Q&lYTqWEWm`>%HLf-H5AAEXSH
z%6YR+f~gJAK9zP8NLWQnX9X^2KKRNjb|kYUC3C_b&xT7xOQ|n5yVLA7JFf5!)OQn|
z+a)?SX$}w_w}RI09bCJxi<M&w$kP;?H_CYB(id=f^;ft*BGGn@jv%K)^|=Zyx+tX5
zVU+H2M8qGTGdh7+MG%xsTUT8@jRX094P$ECpcA(`4XCNW^qbOvqsYS`=5X&&ssSAu
z1E9@5PbCrJ7vVg;qcWncUddKE#)S)O=ydv6TPKij8z)v~aO&hN8Z$MK@{${;IWuPP
z4&hQAeTMd!y5D%X@18|G^x!;pcYC;Seh=3!_0a1i2m^;(TNPbt%oLKmIR~}0o2nR7
z@ypqjHHJV5dFmaWxT;1IP<An<>6=N*XIV^MR=O%sY$@?oAgLu(Djv6{04orY8GG_R
zBc!V?uk5kJl97~OfxAev5;k32j_hZ&^yv5~FwkBaBLwW76`27MN)5SIf{)K7FfGQH
zzw)!V@A!8xvu>;XGH$MY4Ha)rEqK-K*ifcb2&77vxhbmhqFCRLo27;beBC^i!U5&s
zsGD8nIH2L=2?JniC^+VHECb*mCcGx2R$)E{qX7MgnV?5h;5T*otA?;CZQ&}$l~AB?
zZS`ZcQxPhiq#4R3iVYn^QH*O>w{Yv$4i=ZDaL?&Q%*{^;H8f6zbgtTH@#m;enCjQ*
z)4LtHzx7HTPkq}oKKPLlu3l;5;;Vbu*@$?8hGkKz)W$$umBLLo%U11VIybIP(75(G
zPhPMDWk*wfz2&*6Pt;sln=H-8K_no}1<(`RMnd%WD^Ea|+0x0YVk^-C)0O(X>k>F<
zB(x=x;MxMg3#{yf`JWC$6j?}c4k~3P&4vh}KZWM*4z_oGLQ;)c36+q<QFT#|uq4G0
zsKw82y=X)*$j71{WdwdjvL=cr;c)T3g7a0LR2sFbhRI-O$33|4g^wWq8Djy;3o!9N
zO92EJ#bt~H_aUv~LpctG2OylY9BD%28)d6`wd)0|7;b8ZEr$W7rYqRm?4n+gd@%6@
z=$3A*?_qPJjhUG$R!+|1_%Z4N6S8qh2<f>?T1v`C>A}G$L%*LQ3<Es+=rSICY#tjM
zJ-qb%K2~pxxbdXM)-_Q^=eLXPMlJn`FHwu%?DTravkZcDU<Z#+|5iyxQ#DJoT&~SQ
zMxOqyJq8UPD#4WkCghJPq{emoaYM$k6nTp7#0HOHFkL(~F;)~xP>PehCh~6RYhwg{
z4FM?2kugPEl!VpJ&&Nlhk^Ea0HzE3xDPd`JUlFA2z>c#+7UzLP3RJ5!@kSIfk~vvM
zG-*B^!#0s5qN=v!Isg`*Rn;G^gE;dMr6I;d7(=2AKmkP`mT@QyfbK!h8;urV*A*fv
zy~hu!$Eo+<d*8Q$mtMS$*3Llm-?)1V5C*dQw%Y^j@Aq)?`Zi9Sn8S&cdDQDv8;~(5
zsNHj8Y^08dd(e@`(AuGHA;7}iH2%z=pTU>ExQnNMdlz9@x(SNQuX*<NI@NWnwxwZ_
zn}Xu2D$%q{Ut9+DOS!Ua7K{^7fOtBr(bVb5wm4#>ikM&h)=WhMlnRMPADfL42=87Q
zOI1stHG_zD!Et~Z^tUqL#3oP~4pLOsdJLLFAdUvR_A0g)!>8Jp3%JOc7Z&oQcweRZ
zL>icb65WN73{P=xx}?{X4D0q|Fo_xM5t!gg*GT9)l)G6%&IoZR;3LgEj8hjeivedx
z9>AM9a)#cRqN)hj2i#!(Rk+!-fJ=TEPkrnxws+dNdUXfeTRm2<34NMGM0KHs<|B#{
zT)DP|o41-+Tx{Uf={d~J)uaniB;kQAuAyf(gN6>!>tq;>GJMO&7O=h=;rit+8-ZME
zY>TX%kP{9ZuZ84mm(`_CWI8=(fqX)RW(qz(GO3rTIQqt!(6zEAYciP<)O-qkJQgoO
zN5!UH@8lKN-y_Fp(~3=e&27|dhevtTYC((KdG1Qul#zXvlh@##M&@auF+JKBffQ+k
zN+`co{>+D=Ya&G7KvjuMNP?Q;C0h6<695%P>g%NH{!LO;8v-`|q!NIX3>1NZnTJtK
zpfVrKkpXyfhm^FiH!kt1vh<eJwVt39&-3n=VLWuPv@nOIg&FMa^>E|XF4phtV=y8B
z&qLq|_*U|yXl8w_g^i6p%+6MD;^Z8Tk-%jbG8sskWY~=;<U5HY5Jfq5HZ#2YJ=3^;
zwaax1GH)!IE?(RPk~hKSr-e=_0@<DUi!_T)xzD_NiZ)u|Js2FpZd<NB2nCv&olMw3
z#v;k*>)2nfRxQX;7%A-s=@sW3tnyP}nfy`QF{Rojp@YULRN^Lc%ScjL{Nx4b<B@EK
zfQzh(#PK{Wdhv$LuFmHqO<A-DQVe^+7bt&mJqzvOoIgsmCP@!av=7XyC7jbDGg>Il
zq4w%h7&OlFETTVhDl9&n<4}YE)bf$B99EMhdY;t}o{?<JRj0wKFY?%ENU1Aesy2-$
z9-qcT5B72MRtsxuZ43ty=ZV9>p?x<a(hrUOy#aQcJzT49<HX5XoIW{=O1X?U)tz#z
z9WN7&dFp0UD*FruQjWqZ!7F(C){bsI!#uAir7iEJPDXtef3;^D0iF9V7J$wS@CL5i
zRhxx*AU-vlzjaQQM<D;!x|>CuWsXZ58U3s_E^61LoQ7s@n%7XBhFezI5NY6|5q-($
z7oCrsyRei=k4WqMY0SaO1zA7E;+J^7z$qLtUaH{O+WmE7QpN$~ai$=t#m||h+#yX+
z#3>8T9(e$7>d15AVCa0cD?Q)zjn*U<dveR<CE$<JdDNkYWWlIMJke?&KD&am_b+3+
z*~YD#P3*OXtoG=+r10#pPCZGFMdJiFu5aVc>Mq{>=xHo1%_2#ON1%2_^_46iMWvz%
zb+VyyQAH5C>pZkkFg5b*?(4ipu}%woU}6W;pE*HjQaiaK{>VeBu!c8$mC;s8Kqfvn
z8UQvxp@W9PC6@2Ah(gvYi`VPWLMPayU5Pktlc5KjILAfkOeyVzLKIb>mGQAu>^1p6
zh5MLGYF}Ra6RhiIu9Gwc(J#*RIcVi0Rku(8pppXAib}NjxmuB5Lv-L2V~S2iB>Yg0
zL*W5%&lqBnr7=-s2*M&wFlC{2+DpAy5n#xr-`Z`XS`9HhRbds^h<W=NMq`TMJ)Brt
z#LBTb?Cy84dTS3GYhA>nghK;n5^{*(Ac|95yt0Y8xv2@ju>iuv4iyVd$H)g3t2xF=
z(_q+rOqQA8HJk6Uy#+fXFzMD#PJRjfi+DGMqc9XJlVaR_Z3v2mZ9h7RyI4nNJ!}O$
zB1+C`qgo`ytT5%~)1RU3jH?}ArxDF{5kk>{MXd~!N<SXl`HRC6c+u1(o9kh?{~51w
zE~65jMp4*oe;*A>29XeuPdeua+$hTsr{w*U{`uh?hr|HH5mlZgNsN$dQ6wusH?Bxn
zsrkstF%DjQ`3`R1+C{bEVQG09r%x_oW@d_C!+Zi{7>@;^nwx55^Y3lo?AZ}kZ?~{^
zXAi?c44(i)?oa1nJc<xU5lR(tU-|2FXgvXvX+nY&+ZWTZSlDJ4S0(TYA9GnxTa7o8
zm=af3fmqttH^G86@r}Jv7i8kIY|C=sOZ1yfNvu$O#ZH)1z=Qy4v7p}QzA1b|sSvSo
zn>Y#sIU1K<9|#k&%=Hz+WnQbH`yzU=0Mo)iOdO*!u)69|!uwps{_46*X41+472byN
z0CK|$r1;-WSm2edz@Z$6!T@A>6z6#oMOoyRNtTT{s9Ll_D!Pn2M>*OwMRT`@QsA;D
zaO+kRt9SOWw9vpkXBM!yJO$q)F$W@XP=QK@JR;s(84o{r5)VAEfUWHgR&Te_Yz`17
zF{{W_s#F$SNLJgfda)Z?+c($Ts;88?v{A${yBO!$1^G7<@PHSfQ=eocbeSz*7(pg^
zx^kCPx-M$TD7W3#&DU+f%${Zmb{Oa1LiY7}7695^kyi0*GLn$bbsedaD_nN1N}!?-
z1?K6`Hy>MMLGCuO6U)<l|D+e7UsvP+CeDw)THZAg^IKRZu|^2=6Y(QyyC%SjBhtdT
z>qbe2MACo+W*o|KC=7rk_Ap43ybf-+tx`9<73Z!^bRjEU4yF4nDZ!RPssfY754*b^
z>^8fYnW^B^>3N(uK7(?JiaNN`pT5N%4ztYle5@Q_z^Rov1_QTtyI48iU;>K7ty*Y9
zFCaDP6j8C*$*kR&!8;z}6<BF`Q$=TX!Gh+iVqQ%YD5kfOpgHLF7XOwIpzx61AiA((
zbc+sbsR)Z3e!y!`7)+rrSQr7F{SfCvK1cy?W_Puz+p0l=vNar|v&%2XF}YZEm|%ef
z7SeAocZtag^Pz=H?Hh6+kE&kFV6(bOl>1km8~9yP9K>uumt;_A@w247!*0N#9EZXH
zP&}C<?I-DA#(~2vSf~g`ZoDqDRfCByKF&TkkLR9Q<*k=I0b<#ed|?9;38;0hk84-9
zaq`qGR#s+Et5vCXKBHnG+T}?<kZyZpdK&YyGok{+0H9g-1@53GwJs7ArCxhavQl-~
zB+6bm5O)Jxrq21`Fr|$JNk|zTz8H!yCz+BWs5r1Y7KX~+C3Swka29mR&%Ph(uINQM
zu|X^2pm_pnu?uEm0dM+Sb(TPOVQz6Id;vn-NvutW7#40}Tzrk@+h)u>V@!gQJ$VBc
z1;)$a<4T>(@rV^D9jEv+H4{+5%^U_$_i0c;P^!X7>JM}{$DuF)N{4kPO8YBD(u)6M
z_`ef%@Z(W}l@km2)^7`O<?;@iO{&%;#UCM=5CG`8IflbAUVnW9*RO42`51)<%b1y~
zGLI}K+A)1|l5#mQ*9d9P{~#i+{>kBiTIn`qMU6SsPHw&Yz-#qnoLH21|5bcW5qsbD
zT5e?}syaqpSJ*f%iC5U4s%bEjXEdqgtK)w%Ys%;<kJ;kS9oSJPJR#dqnvTTQP`f{2
zu2O!lI&HE?FnNBHDL;|$(TQODn&|H<>L0YZnq2r0SEleJ6vm><p=j~bj>G+uR9ND%
zVI?|nf`~OEqoZ=*H)p8nmd9C!q!}eW%GGIsT4V90M%_lr$p~bapP9kpw@fqT_r|Rj
zHr6|w+6$Q0MMWf3$3_{0l)=CCwGI{*r*P`@ES44<@B<$)HGnjNuZ06W(Tm>1!B$Oz
z+SLlD)ZT$D*Hx4!D6^#c-`QBYdbQ4hYqwX23C91nLk__cbT>WIT+0AwrWLAk(KW!J
zp4T2W8A=L%HAUHWdrYjL&P^Q;C(v|iQTU3AcdrOkHgux?eGoq&UybPbg$q)IC6k8L
ze7pQ+Bdg9;3I--pkT%1QKiN1F`Q&}c-7Ir*s>%=!bB2u3e|2Zr!6b8@dl<%JHzqYG
z?hkZ0$D!~5GEm3gbbS!*@!r5ULT;Z_a^)G4Se0a}Nk)@yOr@G*pjxfreebQ~!3RgU
zaifXVTTKi{G1G!cl!9u`L#jK6gPolYwzu18Gz2F&c6^qLg-CstDh$n3DPmT$1}AE6
zjO2E)sN@gJZP)*`z$Y^wmAh<ku);|<YtPV&rORbOC{kqvg}|kO%1Q9w#QXMB`iQK}
z(+Zahwjk}!6DOeYP9gnpv4*;725}c(L3=@pBQW6x=xyCHYU<a-lAqv5sPIC9a}@{5
z{m?xEv?Vj)gDGj2PjHMr0D-5hNGhPEt_qYJC!&W6D3pRBQa7TK;DO6+0gre9Z{|?K
z8_w`TZ?sENR8)UXU3d#-Xr80rC-ohZ_%$vl&3PgN#Sv-Cm+{!UPT{_L=Q%5|dV3GO
zF0lbgK3djNK>u)nZfAs7Us=P|E4w&$Vj5>o&0)G;W9OI1KzdP#n`mvq#dc+R2sR~k
z^4!cL8q_1Ax&2C=JunlTD|D?+I0dFq#K`h*gGn%xS!)ky2i`s!wHPcTHledd3^>l~
zn-f&RrUn4yx>;ICvQ8AG*suvFzfW`n^dmL`VgIK<8Ya9V`-K);+EiT%K17X$C=fD+
zS)bp*;c8sMfI7MgP_8BAX^AbE=PYz0d;t<nfrmjflqNFNhyIX`L*W6?$erO!<N-v<
zAfr;yD2w=pXuxT|Ju+^%ss2(_Qmp|<J9ylulGG9&ynh7`+_%KL{f(Qu*xl)~n@XKx
zn5yE5>Q6L|aP7(#R&O`4MB%~71uV=@F)XPB$}FjEyEBgU*F<=1aqaD?t}O%^0#5h6
zk+GPFI*MoRinR-IOKm!gtIWHa?4E|kt9D+B@r_|oo2FT;R@T$x;twoV+X&qS^0BS6
z`ga#cV`QF+0wv3!={&qTX5-qJa}n>SxV-wTlo7C#2K@3#FfgNk5tz><!G(WC`F@d3
zmkz=d7HEYaR%b?@b&|H9=HpK8jE_LTH+y90oFBv;4C9s?mgX=>2Sxypq`cSfv@se|
zO@0|soQQCz3NQ_Dq||e0p^nBeL**xqFW|(=ESk+OuH9&2YomuG61_U&_>=J{h14rA
z$NI)T?yT)&X>l6wf8RYyTHA6j54h9CtfT)H1*&>a(+fuvWDMCxdoL5aqTZ)P##>bb
zPZa6cOHrprjbguU3TpP=$&{Kj8PuOOfn2a_FCMb4ypx5e!+nF)^Mc9Ttk4KI=W9}j
z=FE$QNR?CO8;$p`7UEs_iGDUK9;I%9lrcC^_HclMFnJ9pjsUC|kh_^Hc!rglJO~bw
z=qM>PXFzwf?`9ZoW_fgIJpfy0>TNwz>}@4kXMb;evt042nb14QF_liXqd|(NzjPaZ
zn4w&entv5XQ|*92QfkJ~RM!S#I7(Rkm(qP7eBxd__3;OA_TeS?B^SdnQHNEG&qYH4
z%7M=^V^^<javuSE)pOF=X0(~Wx!|xDnSde}VE-5|nH!+!mNmu4=^ahZr}(Y{?y|qv
z0@;)Su)Ph<KahqzlZ)RVfjS<xj-gl-lkSLWLS~s53wBihFrM~AJ%?Qfp?;a)g<Q8W
zWco98Z$thV>N23bn_|aT!OtX^SiBzxuD^A@+K6gl72RV2A-5Bwnb#Talfv=M3?ozH
zaoENoFaUB<lYBph)BW^r_q<Pa^FGT=3-czU`v1Ve>WwZw^Gg@8cBh3>iCRjr*e1(j
z+@)%xF*9k*!?pjU_EYvNc<hl=`1r>k#(N)MLA4fO6s3qM7o_fQr5vEwA5L!1OjlB%
zlgX!xWUj6pG$52&OxE6{eC~r&XkwxoAKCWx&9lWn*|rt0VUgjxTy?G9S9s@lU3D9O
z<NqA^UX>ChmEp`GQ>^qF3^TL%fQg;?fLCDiDT+{BS9}&cB)v$D0a1@@>2CdcId=X1
zp2AV|_1E4|ae~GGkQbmnSF21hcEU{*1pf5BDoUgvmFHPEYQc5lOVnKUu#Q850f_!w
z>TUna=HSAg>kiklQcy>fk;1GzPhEdWq_ep>z;Au#3YJgR@Ys8f<J6fMR-n<+;M~62
zT724V)ZB9_79vAHiZl0~S;m=D^Vr&Ma|v;CcfdQ&I1;f?R?Ac503z#=x1e^7NudJE
z#nlVIgtP}o5v;z!<7&6mZM`(yVR;q2^tiB20dc1GKsmhTxQaO5xWd-@mT+Crd;4%~
zC1Gynp^cg7glo>eYJyHnrvMf7!qz9Gy9bHeZTmzTL@dr-n<}fcXySZ~`jUB8Q+L(k
zPPvG$sJ>LGTE|>D`#S46ryo<w)0u}-SVO7eqqE=3+M^w0?(nMxv*Pf10Eff?$Qb9h
zzUC(@*S5MZoH;)G?HM(Tp!QC(D8vEveUXgbx--D$ookp|s^Ec#=J3GT1=Q*##F0pY
z(=fH>I`&jEgEdF;9K(U|zm^x~apKr4`r|%s-)>{S9pRw|k8uqFcf?U?Z)qW2RQnV=
zmlbVVh+sj|v8J>MN=-qLN^=!#LQ+OHe0URxYYDMJ8Axj;Or#=}zF@ISTHC99nVI|r
zT5lb{4jXvK)EJyPPOXJ%;&+P8$pun<2=vfjYp{=^no}1Z8!m+e`3DgW)%Z&xE5$WX
zJ;*3?XI?6cUlN!ZQL+sJlk0m?;4|hHnQtp}2as1Vcf5jn8MyxXS~iF`kmh?|#UUPt
z!~n<yOtMazdVBw1qx02IG%Anvat~#OgE;ukEtaeUKNMN&c5{elzjzC;o!h|KhZphS
zBa4`wts;rQWxj8?<LLFL`q7VL(h<*5DNo_CcQsgOV>}k^K%HTrPZ7~#*_J1rdGTQ6
zFV&4k?^JrG>Av(lkBvZ}`fRP2r`~0W{Ah!s-FQyVY1X}RV`V|HjBaKYoBCd}1~hly
zxWq+RF<EFsMo-}jW|0X$T9-#m8aPJO-IO{0R{em!E|#u>e3XvEZN{KJE}MR(fJiBX
zV*UZix|q^vJ0q&U$5Lbx1LqcjN)bCr8GyOg5=OXLi0SD$yz4^&R-etYjoyW7oVR)j
z_EvF-$05J~CdW9x{;A<;bFk6={g6mlX-x5#o~%+Ks2g@rSU{<~ay7tsnBt}9*YW93
zUceWA^9rZ`!jgwliAbKBHY*d<pz`z|!x|*lKVyk->IqMwf-di|JVh(cEOuYLn3ROJ
zS$Vo)M&ZGzUEeeTkZ?ky(fnUsIcO^S^ee4+p7jok1#Z%l+Do?Ec1y*+=@e9C7A9gC
zeTLR|6_|*G2{xi(qH6UK#lkHXWic!kH?2HX#ZzPiY-2QmFbZkdNSsQaNF7e7xSf7n
zvO$hp-~?K}9SYpjy_2-$oBp?G7f{+caOUv-Z=K=KzI}a=HKU7umW_Ws&RPlpIDGE^
zA@Trd$PA6Mol)%F`Li4Cul!2cKhdj(r^+#g+)2lPWNZLrwliy!OT47vC+*soUvJ{t
zl@^vy)bY^6i#UB|4%Mp93p`bBy`HhQ>@{Z|L^W&z;L?AkR4F1m6StNuHZWnUn@Csh
zHp*L(#mT#kYJeio7l}ZNP-6$iCV(#tmc7trr!T}X$d>6^0NL@C$DtORI2}ssUyA|g
z7aK1{{;j+Ua}CJN=PavrX!?BB<y1U>eQws((+0^{wBmC$p-aeMg~2tiQf$D&f18Zm
z#lEU<Rg~m{VVRp_F*ITOA}RwAU>YY*EV20aGoS5YbMIQx9$rW4Z2zcupNBL4KV$}g
zhTO1z_R_D`o!Zab+5g=C_|Vdy8#tL45+~dBL?+r)shJ%^8olX>Q6kmeoVWuW+*$2l
zZhnKS2Ol^)FX}-tbq=BeVLhWKQ&tC$Nbgh>erV1;15WCRObM8fi%Ohz+Xm=iRDP8P
zoz|^)Rr5p5I4qW+HViiK_4Tfq_CRcb(89<`wog%Y_0DSypnc`l-xist02uiaOCJF1
zwMF(p3vy`e!U`3v%1H7iie!g!^R4W|q)k&MMjx=%@~a>V9k>*xcEPR(DvE(fvQ)Yr
z(F;88O;`^Xxoz3AU);d36D6CY-!G5TjccR)+H*MM<B%Bu8Pri`=)C+FojCmHjpi@i
zd-m9$9rV+FNb*c1A3f3gO)V%r_gT=9)CC-B>m>%G+aBY&XV-B4wH=&3)4+pg7qGls
zXG|#?Q^{x1X3M1UiVfThasY}5x7gV@R5-Xn@QOEjAv_o}S1ezRN$3U_W{wm7#c4eq
z$dcMH&t`>WiHv#iJ(FRASxXAEEQ)3=WhE01Sg%))7ol=tRE$|vBB92!(BH4FnF>r)
zCE;Yh1d;tRUz7>eScge=LlPawOqK@oKly%WQ>_ZK4lHnXMOe~9>mRV>7?%*~ODe>O
z0D)73>y*(R?qa>Qhct=-r<ZKDUn$4f{2NKu%MSDIe@G304h5Ryp?mIq`3UE)@BG}#
zy^G)18>Vh~oDMkc$AGY<hsQgmv=UYSBW-v2ED{<nhaS>6#pR1lT)*1J(sB(CoSng$
zGc%}FL#`(nClXVtHZsK#S@EP^1ZIfgaH&rK|4+@rH{7u$Y~|*BN_WGq{IyrIDSnYN
z(h;oHI?Mv;tQ4L!1~&Y6IhO)Iu)G439kExvddw0T(brerSAb{}$E#k&*hEf*9YN)-
z+o@89mXoDJ0@HZJa#}16fWk{r7?9HTHfV(ob@Wx&4v{Y6f*1qiS&%w$PRf&{AvwS>
zZX$}QDeM^appmS$zEB<|+b<2AOP{yS{?Lv?XaH!)?ToU`Hr#XX+UuuZjFR5t_bmLk
zy_!E??xnko)a!QDy2%As5;DS0#T-RkPO=lcu{sV)B|-4FHab{eYh$Xhi8H4gxc~k+
zEG$g%H*>=f<rV05B{X{}EqLG%Cqi`@8X;#bO0#jBjae=J3GDy^{<LFl_d>T;x%qtE
z*_PXaSqQgfr8E#}06E<n%%m3N2_0ikJTi#~-pw!2m*Aiww9b-CevMwDwb+XjmgA=T
zqOk<FZ+7@n#3)usVlW6XW-0`;HB>c>W4yIo6*dVYj7xvB2;*#wBppcyqcldztz)bA
z)ui3OT8`bze=5xehko}z#0Fr(2y{|s@MIbde&q7TPyfx8xj#B+)ZXv*(>;Hjwyd_*
z(m!4%sH`DwI;vc8)x(O}g)I8uyYL+sqke){U)ja$7x!@d_!REDe-<kz>Zp`MsSG4N
zL2eKNwDv|54L^7kVSvkdXm*ix9I6+du4YsF79;&uk1wl6IM*=(TP`V6)s$WXqA7P+
z<?_wdLY}(PEUdr<j4Q3(cl8;?)P5t9jFpa?07?yecmk_54miKTbPqP{#G>FxQWpeP
z(lfdOQ5XFbDMsVcXx)$rz+!SoFYprj9O5h(Trk(K7s)VgeV)dMvq)H`oHj@iI8}6p
zuMc+ipPx>=%^w^l*KfZQ7XKkP05oJOrFkbA;Q1edGyKZUX8Y%7hZk{j=D+DxgVW_s
zvVk}ouo0kEQ{3;)?0`iKYt;}-_CN)Ylv*yA=`uN3U+v+}Y9CY60ZyHo;_zT@zJzMk
z!}aU?+1jl>8;(39x3b9O*~k0FFrt~zR>^yTX6tIbBKB5`iv0q9#OMsF8g_ZV($-<z
zQ6u4IVOU-OKc-w~DeIj$;=2`tbXA;{!ZYr~B${tZZ_J6Av%AYsnD@VtqhYR|Wt;>c
zoxoe{xIhbj>MN!J%Hp##k(SF7=8}-UA8S4et$<G?K#1P((qL!*nd#Ko{gH0^{Ey=u
zG`=2me8@(ztV-_bV}5?`FO<BwZ@p*Xk4201Z%Ou(Za7HyRV{!R0f)NHQny%oH*czH
zXHkFant`HCw{E%RGAKx7LeKXx)d;!qXuCyhA!$!3?6{&oosOdqcF;0X)<V`-jX3pV
z+$~tNGgKXeLH!TBmb7cBXPOua53^@nRHj{QTuIRD_K;;mM8gh}Q5SJC&aynV8W-tZ
zU%S$i-2n8EbI@R6VTcai1#Qs8&6jXSXu|3hnnWZQKq>W55LSd6HjrAB`RmxeKu?VM
zo(Lao6C;1~UD2QlpC={UPmKTo6+lTuK~(8J#$3zKX*}JaM4O5%gO_`7(md&nE@k_@
z^VKN3^LKjq+CRzi=<sj*?>qybhfGk<skvqMk^kP$m;dcld8K@;@g0L&_>kL2%O9m}
z={?6?YC~E4nn9|ogLvWzlaLppdW^$RrMyG<0;$4q0T6M;d{0Oywm!X@y^|b6%Ud-J
zKHUsMzh4%&*apuqZTWcA_v`m5BaqRH1S$8iaG!@#-NX8&2;FWEc|Jrm5Cf2~0bmge
zm1$6b-oaX0{(PIiudSDs+nlhw*0~k^^z<hcf2;G7{)48)nS=l;dob}H1>KnzVEU8n
zlHy{)Pb3G5>#XY%z~`OCyy&Sdd2W{!lb4jmoD=YJFH7USXn$~_K8iOn%5QvcFMIj3
zlfce9V;u4j;Om71{j8sU?dL=H_^+kI{lC{8Zv60k^<gYGp6Z3c@vxV++$0}Tb0@ge
ztrpawR`2-5!W8gGg$$ak!p&|-C02w1=Mxz0LWyaZQ!`N7Nf^-cCWS0bFgoeVOF@s`
z1t;*rqTq!-h%yHxR-ubn40YGaBM5?3h<9>l?SkBAN^8wx*KeD|@(NH;9?+bIyRY$q
zINxd%e6ZY^|2Cf~z^nRL_6|s>R126&lO7TW6^qB3E5aM#f2$m#E#Ys%8I$%iQGmQp
zyY{r>XH++$)2sZdl)VAEcVxcZ)XB1RkaVLv)$aIK80XthkMb)&Fv@P<Ie7l>l<^Mp
z0PImr?~3>ELoSZ}RLQA-%VPBjEKEJs%Ys_i&vsnm6tE`%@(83UrE<Szhh^_Tp~Pla
z7srx2-Lg=Oa{DQ)P%gcA4))>byk4<-JQlJbjjtlMmBN%F+%SY6rU=XNNaf;Wn8JN^
z`B*(Ho^|1u9jskS(B}|ffbpP%c+|^MuAof0?M0!UV<BP(pg$W;*CZw5h#Tu-@c|50
zVH>$3-q)XMyY*BnK>M$b(RI2}AD;nM4*-;8AQUr075HenHMMo8MNf;H)SYRe7kZ9-
z{$va?TKI$v`AL@alm7U2y_ejf6!Voh+xY9l{OWIK`8xyc|0eMO>`_d)VS4eB=id2P
zj{82g*&qExYjox8@%l%ynW-m7v6qDXq)8fs$a88%?Zfd%0Z8r6oE1>n0v%DR^3W7S
zFSoS;$qOJOpeyRke71_-)npc-i6RxIk614j9k1#l9eS<Q1QjjDbxf^~Kr`HO)x^$X
z^64oo_3n3rdc_eGzs({w+r72OCbxEer3N62#jn+n)Si1VouCfNh=`bQV{*CauVE5{
zwDXb<Ns5xe<Yj(}7Je)XpBKE6Ut`?}Qg@EIV$01u_$Xxo!YEE!VLQ52?#HW0^4_&1
zZ~nbucIi`T-cijy-nona9qs|xqqvE_JL8AWec$Kgb3Zm6o?JRM{YR3i>U*M*GYkjm
z9>0dO1%we$e|pjdGYie?R;za2oSa9sQ*&a=U<k#+l>Zwl;zVw}0I{?gQ5ybgx7RSA
zJk1Kmf(fvfqVWRq07S!(K+L84T{xbDwJR}({XSCV0Yu~hBqLBCq@wSi4g6_NeqjI(
z!hv=Hle}n><!JB$6K51DIsFRzzL>B`uCCw$Dj{>w5EY?}{#r@hk!#O8J)`(qxliL8
z65G3J4nHqtejX%AGQcR=sE*QgjM80<v+bXX^Q|9?v&~o2ygMl`{SF`BBnIFO41qIO
z3Y{~5+Qs6(oDT1+uFO0&C{^xthk4f@r5(u>kocn;!1L(0rxv&F(j^NobHo7fQq`c`
z1Q$SohANbpxa0?V3rc2O7I*P^Dh$vI-l6IMm94OzCxbzK4#;RMKPVy_YnLJn2R)G6
zKkB!$Xxv9e27p5VG62@%w^E};agpLHsMMh73LHq^S;KbkZGUG1Bhas9$|C`ng$Gb{
zGnl+zMQEYC7jEe*i(YnjrF^L91mppv>6rbql2f6ckCB%q*&y1gcH&#^DBeJl?|dae
z`(MWS_OD0Trda;sh`%Wo|2sScc%xBF-6U^~lf3os1NX$Q?#KPV-`lzQzsy!1!1C0$
zj^;}Dp`W+?QN9oE4oB{!=fm>|E6_We>K$X{(`8cM{at#OGm5kY_eP0q+HbMscP;0@
zDV`_vu_#0q0RbzE0C<7cCsgsX;Q$l{$Xeo7T0)Zowdkh;B8&K;aQ$_&5B(-<C>cd{
zgchc+c6GxjRBg9(SR<)M8;>ZA3Gei&2K1!6Gv61DS<s><X)aFTRZwwfk`kOGPIkj?
zbfMad?_ij=T4~n)u>>1G8Dr;8mXGpp)`kB~>H*ke@`jhadsp22*#8z_;jb-JAH%Wf
zj}4siF%0r%7^OYo54a&ng~+u$0$N}heAXN^F1!)&P$7Zx3Z!9Q!EHCkVJQHcU7gs7
z90C+!he=6N7L#etg_l4=HzZT$_zq4!>L89CtiB#&G#DUByBPJmSsV|LCS#71MZRCV
z{Tk;|#!MM1ojcdNzx3aj6zVg(y#*ASU)rGEr97l)O!iW@-mck_^1Vc45>SstU{x)G
zGUM#t(`&pufS3DOn3tj)u|JI0%I)D*jM5FnXni7c_WnhZ?Y%^X|Le_xZ^rRWYykAI
zuxY9gbnZFn<;VVy(4G17%k>XoY5HS5KbZGB`IbM<25`v$&<}?OA!iOUcvMJGWC|#J
zFg5&=6%by57MT#{8t1(&f{$$g$XFC;f3d?$7{K{Q)dGy8e+dCRhYi4~ce@ym$N)qb
z56J-ZG3<BP08j|PsV@~L>k?hrO)(J$n5H8Wio%S)ALtfTTuJj1J0Wk}7ybA|y`u3z
zv<(tNqjL4yl~JAw3;ojLc?v)E5Tcfq-FlMcBlJhB)n0rZ{dfy;zW2o}-~Sg0c77|t
z_MTQ`I(W~&*~gIqctb<rA#hgi3G$VHSn`hjz*7CaIM(>KUK%#SZnEvh=};9JQERaf
zo=>#~0k_?fMPq|^dLilOER8uEBvgyu?CKV#U|4_Zb^MuZ04!sndL2^x^m`t6(eIK0
z7$X|>ktPES2i+`=$O9N5ClHWQV+NmBuC%W5(<{-2D=Z}=LG*1`{S77-f%Wo-5=qdW
z0ZEf-xuODuGz;A9_Tp_6$4IO_;%zu6IaQS0T0$k7QM^^|#&_J__!gpU``HAof0g8|
z&!%YYP>T2NseZKZ?QvuP{y;+zqU4@=mzyvDWW`(f@Y2+WF+cU8LF(1~e%f?nCKLHm
zaO8*Zy)qo)5~xK@8G^ePzTF#e0^Cy!MeDVeA<&+Hcm;&=OEy5dgeloF;xL2`?t8*T
zXV1avg)yRtfIl$+1Olch^|6%PxLKGJEFk-*0Pu<hYH4rV4F-#ur1<%^{Ba?RCb)ym
zA0Yc6Xg(PwJ7X#w{RD32B5)bZOZ+TL;$*Mfi>~{<XcbY`>%{5KKT5Fmvk7)rkK+3O
zyzxy20{*9r!f(y<2&44M1<&33DDrzgdaJel|LnA%{m`-L4`a6eWG@P4!vV1h(*e>v
z;`o}p0naUSXaFZ+Fn~e?%_tPsnvVGCyEO1Et~GPv3>Z$ax$xf{hg+FQjgkS~Y!Hwd
z*^0b5SIz3afNH^sK3=h_7VkZH-gb;#umSI?AUxnj^Nw#4{Yslr8G$0jC|Lzr@RF`G
z`Fd>*bPk`|w9!uQ)e_I~l5w&d_6C>Bz41+qlC2~`?`Pl+e>%>$zZ~b=L+ePa^Euk>
z|6}9G0Q@Hyf;8)7gY1<rc~1Q!S+?@z&Hd&-+wOnu$@%(+FjN0P5ALGh&$s<J?<0*P
zcn+}(1Nc4}0_r1|a(OSO4RcK%(sc(#nQW0JER-)4?N_8bot$LGL`c9?F51T|;wE0G
zV`(jbsRNFK%0zls*I{~L1jt|%DLidWtQ~(c`7b552SNm?EYxnk7Hp-wyka7nvn4-(
zn0ZvmP)6BnWFab1mbLx<=yG{~bREN(sybVr%JTM4q}cs(f>u8#Whd+0j~4xZ{x~uK
z|ItyTvC_Pkr?~W->#lt$Nl$)wxYzu#X7Ah+i}m+mzV?A$<j=E5K*XCY^N^(xdjx(^
z0Tq_Y4w)(<fkwTA3QXN*jhY56SSbXg9+kym&=4aq39?y->4y%2ir)1PEL@w0FkyF8
zn^Ohw$@8`vkQN}arH^c-0r~*#wrG4np3@!9Xwhq84(INrX_A0>P8nr)J}Y_EB+vR7
zjc!->#y7%VyiO#Y-%s=XA5F3Qg(TnY+zsaGV>sIF|4YV^0r*cE_T(Z3pk6-0#b;vo
z&XY-c&qoIB)qlR#d-n0g`Uf#r{lFme=iEWw@=1pvizB3D2)q(Jufn9FA_nHooecuD
zF{j!UL$uL5DJvRllw3Fh8mKc^ok^kP2+BFCHPr^(R?d+_Hw8ml!=Dzp9pg_}1{2F$
zI05hC(oeyT>$RAN?DXnc<<3jdjeb2nmcY#ea__UUJDs_CnvKRA)vfXMa1h<WINg0d
z#r{7_(fWLn?`~)L`0M2Bj~4xZ?Km<3|5c$uFCXHyuXxVX6DiJoY_zxgPj<R5d}yiu
zKFrkKKS+b)?l|lCQA&N}Be-b<pF9G;3^?l2a|lnLN%{m-)vGfE<ik^Kff5)e+Od)R
z6FvdAz2wkB9aH9@R09I~cv^5ITSl4(cB`_9z}--Elp<e|8q|oqejOJ!7(77ak9EGD
za*>46OCu7MVl-ZYQrcl3$4BT)A#kgSpCcPbJLOh%!R<yj5G8x948xzvoYqf9`JLBN
zF2b=6)ExWKqW?yYBLnb_Fa&uw8>X*)(Q~K1B}q?yV9>tvkE^}sK0a4_60^1U4XVKj
zcbK>Ran?s3jX4)jeGDXfPzG|k4TQ=UYQ{o>(JiZlSj5hN`F?sPV?rW>0!q_h<`__$
z0Y*L5u9y=DEHNgF*6hxD!D~QH;`2fsSJP|txfV2FKG4D;K&~XTG_a>rixk&WL!!{B
zqwLKjLGC8wbUW;gu9UmcO^nj*B+GjLE<y93C;9GcNxo<0?T!}xTQQCdz&8>j$hujI
z*PnBp%6Fvc@pp|nyZ?8y_u}`=Rv*S<{X>INxZ;kowjUF-kVGe)F}!R9->-5S(alJg
zfOdUN1(t=U+ic3luk&)UJChgSDK|eaIe5>L4jQvAnp+X_jM9`!CS5ONBcdsbo!hG`
z15n6t7Y0F?`jfk^+11$~P-$&J&DD4U>F9;-Y*t1kiPN4t7`|3+4=-aBZy`ndXA<oF
z>onhcA<ml?f=}ZJ%zG=xkpXx!FoJxTkMry2V`uGqlkCiUNB!-8)*PPuBaQOIn6G_!
zPz_IF?DWG?-bI#-rEnz)5cpLDUWE&gbc`(-18xOi5PQZ5c@s|gak3Lh>R@(748U_=
z0Q#LV@^~N;xT47~Mue3&^zN?3FbmqP?h+<E0qr5!%zmk}mm(aE;LGmsqlAh#l~vuT
zB+L5fjc!z%!>i#S-a(Y@KAmCj$5QP5W`do4yV=LlZvTfjj)*{S>ZO%Q?mAVc<ehok
zO=teD?@WK+OyyB5)ISmh;fW-6qHvsdr70d$j0r3xc438ChEju2ln1lAG1npJ+5-=s
zQ$}^Jf``5{#F_gtJp0KQw=Om@9&W=6YW#W0xQpSilMyYL`17D9J{pZT3txUq^8(4w
zYc76~|CirH&>_Yi9dqc^v$8Xl_zv|>SgW>2S3vptDBWMn^5MTqu=P_3b~lblI&Z&m
zWB}e$Lr`LhvFptLP2Xw!&y5m!1Rsd%<p+}3bNo@(aZ^Naa#1GIT!Mg%K~Uy}Ea^cq
z0^DSS)r`V&6*H$wm^}rw@1)qi(MPYnfoQZ3mopD#Ad3-2BnsL`mX4WPtMl>&4p6Z2
z1kBT3fYJtLv674t{IWBR(5okInkJ)Yt=x;R_=98}!+3Wi$y)zk=5&5J#oqNK+fVME
zZbv}g+hrUXfVcEg7Zcximl|Qd@>e}~;s2_Ir`(0w6UkKRkx}Yb!V$V|ob~xVJ_0zN
zXc7?Bn6LsbATNQ$O3Da=GTeYF6se6_j3gQ(iP{(qn#eN2)X0bsRzRT!X#>!2k;>BK
z97)Xy3s1TCx>8W(8Y$E$Ia4UPjl|FLB+j=((#`9PZep0O_tJd-C$hZ#i6n2mmgMdD
z4?6dw@%9-<2H+3nk{631aE~{9XXOW7)c$VOTddEP--AZ&iGdd`xiR`ag$L5mg0u>Y
z5@6CFlu)6ppd6Kz&r(F=HZOjyek<=GViE~sj#bRA+<(Rc3Q-NS^K)X7a`jWF_;ZP$
zJIOfS47;PtVQ+jLgJhE=w0;g4{CJ%2Je%aL(cR}s<7nZ(oyU;@c-wdci<Q7x`nZ=h
z{=V-ne5g@Ai^ZuYlS=7S6gjRN<$a%uj~Enmm8>}%1T7twBS~W<RPxJITam)jd3h~?
ztup|cp36g#dn8vMB5=Yibn98kEhlNVU+#`>_+5_c*OBCVpUa)jKTXkoCPAxfxB}*!
z_ygbCOL;W@i^q`xc$*ml*Qq(7d+I%IKKDa`TmN&l;G{cUc?7k}{iBjUpCpdw$Ii%4
zNZnV-Xmeyvi$5I^D?t)^4EQHXxri3LNMh5F+yWKc<Qai@zEgEewBVgmf_#kec)Q$>
zZ@T^D4u;827NxD9&(QnXj23;~YGt{lsd2RE5A`@Q0B@Ud_wE_E$LhW__c0H1|C8^`
zerGK>iALoiRLf@uVK9$0cl;>ryW_NjI3F1KYuVj3HJ1!Rp@;7g5b097v6_{gFmaG4
zN!s>D(N?t=-9&$U8>6JTouc!}48vbevHyIM?{>d_+U{r^=5b^I4uw}xaeQ}S*~@4D
zxaTx}Fz{xcsQOE&g{M$0os25pa^yHAsx)*HCv%gW;(VbII(f>{<6iD$tQ-U<%Q5iB
z@lLs)(1KsXAl^ojcP^ya=$CV+|Ep=<d^O4UZ8eRfMgI;RM+V?+J?`FViBk}|$L{wq
z^Zm%m-|ss9lYuvllDCA=n?c|=;CodiJfdW^@`z=@qNIm$x{oMnBgqD>6umE`PXCv3
zw0|!{cPGtzcB$RbqW>lsM+V?98w0oMc&OJM)K0sozc0_rkGXK}0o*wUm=aoU+C`qX
zfb3R=^fEAfEkpl$hQVH%x0C;r?>QRp+;L<84(0gzd3DMTP}hT^Y={BCob&r%_p@jm
zE%>8xG>*p6I2uReXdI2BaWsy`(Ks4M<7ga>qj5Bj#?d$$N8@N5jiYfij>geA8b{-3
e91R@e@&5y_?H;I3s(|<a0000<MNUMnLSTZ3&M3D4

literal 43665
zcmd3tRbQ0f_xFcxq`L%Ex}-r;0i~pyp+P#NV`z{P@JlGIq;xk!NXO7E9TLL;L(eet
z=XY{HhWlt=XV-e|wfBnmXYDT^wNyz683+LY0Lgo`x4HlT#?vPT03Y{hG50Qa004d)
zzkjQ!AFz7*=%4Gl<h%JLY-!__{y!%79)P<NE=DSuqA-5(+cc^dI^<2&Lg`U_YqrVz
z=ea{HUu?e)v$(i^{gppA@;?3D(P;V$Q;PR#g>-2?J#A9{XEmSuEn#0nwG6JinLRK)
z7w`&{ZlS+xYNUN{R!>?NJs!jAd|jE%h8OGqzgw=Q>`tg$^S;U3#kuE2Rwr6)S?_}1
z2-azCYsF|EE#i3pVwKkmITIXHe)gC9tL)_t>oLR<<;i~s$7KC{&fU6-73UFz=CYxl
ztbJ&ww}h9$dp$4Etz-4b=5DdC+rGd8wc_7juocfX0(OCrT9o;-HOr58O^5+9vb|@+
zKS7))VB5nf{{@QVGm*tpgN0!IYZ`K&*G?AyDWj^gskOg-Mhk|@r=E2;>{Mj1-=1~?
z4Z|ibH^KkH^iX>{OD+8;-+a%2N0n7qEZ6D7-_=>nH#`>a7(*RZ4Ld<GxBM=DYsXRD
zm%)O-tZ--2he+WFpDAW);o-NZKE3Md>eaT6Q^*qswD0A#vOFbKAKNA&z@zf^D%GOr
zA8X66POa{>epRYlOPw<^+ndODZ$q+;y8r#O$soG>spo*LZ)o06E2zLN=v0J|IS~ju
z;>R|*@U^&lXfluE-4uMs*0C38mxsveM(oJU^lUjK6x;}oUCIrXw>!Dr<}ZQw)PWxD
zcfk-YMj3ErE{7sn{UBKLVug3Aq`jA$9FBed0>9_-xN^AQ)a>r^d;n}C_jnX%aZ%ce
z*=u$#be?*|kBo!<tNHfK)OWLteUqErKYrP!i1+tz1>lcYy5<TFdKe0Z%Ms$ABiwCn
zvrzk;S^#68IE#Icap~LI|Nf3h-vU3g*d<rl4TAYk*1=~xj{Bzorg${+ox)pUn|FLD
z2TuX4s~6LoH1%NA7%%!?<=^VPZD75GE*qJ9w*IE-iQ5{>dOqI6FRL*9w;K_3AKxuh
z6b7cL6UDcG-mYpsH+dmuAp-^afvdWrMi~-UVaQ70U6ue+><nmo=*ZFMk__fBdd)S8
z3q-s)^z%`y5UkYwXh4mlkIhSwARO@wmj`IDN87-6KgpqrI%;Q;y<0&-S@8E%OzwWI
zv9_%-AZ!y*<@MWs264aj*zklO@q_Fq_!tL}Moo8uq3c13=p9uH)LF;n&gS`9$Jq{0
zP{@L00`wvgRMN}i!jBi1K-tGY`6YhvlOO5T;Wy4lBYU=U`o352YC!L``~KYr)D3jA
zi~se#HU`K*gRDZj*Pexfu5tFo(pQ3|)q5jz*@nfb*4fRr^(IjBAh@5D=cF%^THv$E
zA&OT6A;`;X;(rJ}Z30mq`o)}J`6iSLFEUW>ntPM(9nQ@^j!SIZfgy;<Dae@V-;!#8
z=R!(c_2%^^bqbUiofMBSWB1GHV2UR0Fvu74*D?`)0W32W$eQmp>Q*q?ypL&)oV{!c
zfkrNt5GDBvgta^IkK+oUGSDeic<-?nq54&w@Y>vrsxEl#^~%V*=KmJ*LCuAm(D-tm
zc40*;&7|>fb36~Nz`%W06vD=qa7%B+5YXmOd+mrVw?EV(e^*HN2>P>(x3C}X5MR$L
z*08vdw?UW<dSTuXb6+cb0K9%2Ply>&w=DSW?5;sZN4b4@>Mx8G6a*u0f!8ZXkmI!y
zaW;=y3)UgO9z+=qswf`&xHVLd=6q=rW3wh3)ZK*sAdF^M888?`p75h2DB-o9;HqmD
zE=-JelHU=|a<#{(8{S%E6v*#Ftdkm0^DlraT(zOkqV;Q>^p)V?vi45H&zM(!C5hHV
za1Uz~?*Nk5(W5d{JmEkksk!CD*({J?U_~Cj?t^x|fdU97)~qkS!rEXtO3V*GfXGi?
zN`e;1h8@griHjG<GUyT+0Pn|-c7u{Ul>%WV-`~!Gt?Wv`V9YP}$%EjX6Ik$N1`LMQ
zY>(d?AOwM!C%`Wep51u`1~fMx4l@m=poH{aN8Z6K3@66+er|53uUln6RC?p<3xC*8
zPW<@yEl~RAJ_--L`gmS(S`-)da(N6;V|DTMEaXr%W-IIMM7eV&!AoN|S|DrIMtL?U
zc|H&;8)z6o=pk?b{#RxGdO|Sg{k<T;25mvGL6(UbN$x@8ly47W!3cE5oB#TJaRPh7
zEaU<mo%YWkTV-Z~z?(j?z?Vke$m^mJBOUUAw!Dh<+fpyGD(c<{Xyx)a<tzm;jX3fa
zlCS#vWrg^_k$D2L`t)0Ej}ooPgg#@})WbaUX&o0HU>E!bd_nmX`WGj$Pt6*)ZojV!
zqRxSp9bH>lISUE?F1xxWj)$9k2VkZk*aF|31<?dJNd02fCT!&`<8_dAm<cVsR<)3V
z9BYceCh3d3u-wIDSwX-KOzzAD^J`l*pzdG_D1a(AM!qOIoQ>gg5kU3y<%pR$@oKhI
z$J|faTZI|+BE6}F!B4i^yG;nX0^q<V&&5Gx4iqjpjKt9fJ?&Ht`#~0oHA)N;dJ8N)
zrImKsh0(KuZjUM|z_)kG&mJ{APnXSJ;g6W{Ls{2+H{)W)91Y+$7g^g#l|f`f#QcM^
z6-sPlbBzXGyL8;CI{~JNaE@}b)4{1^H_Y|hxV;<)p<T{-X*L+Htl^7AH*)F8ur@S?
z=!5;d)CIg@$?5{UASBP&i!{fXfG~hLmI&bE218F~3!zPMz{&Ggivko661!yj)%u{5
zmNnGsoAXhmHA{;bMj=d;Wb-qm{KGjfyTiKnkvldVI5j2cLglk)_SxlI$TDEmvDt7b
z!#ZrS4|$RnV(5|NF2LKKD~BG!JlW4%YmO2=!A?pv`^m`5U>TH;ZJRr8@OG%`3wr#`
zE%JIs+o#Nulkg%=3?OT_tv6LX116_D)thX1x-B{OchzzCf@kl5NLj`s_&86St^ibQ
z{8%<NLk5?2clO#7K6dvwhCm*O(1p2Jhpk{AWcdn#tHST?^W?yu+^Wike~{y6S&6iu
z?|%{|;aU!w*ZF)TD3Xw|H&@e;Rr$Sl3cw52wfkOeGs?$z<{f=<=!No|@#E0*41wu0
zSoU}?vH?{CdY28tB61~}5M&H<bIC<$8X)ZRoWZXDnk`rkfVH!NM)CJqcngW0SW_=P
zkrA)I5l3y!Q)(mgJY*+omuc^>a>OOrJZ{ur=QVg|&*o(f@!@wrH%rYzyX@N^8&rtg
zIrKsq4{vIfwJm=I_=g^K8+}^?ixYnno6lK1gOB4TRGgGNR-#e}7r$hemU^R!YSGXE
z`2k3_cK7>Ve=c9*vP8s9ET<g&8p=i__OS%}(xS(HwYb2LOC1n!e)jPGNPxwZ{^shh
z`mBr$^Mjo%rF5O*d5*61q6*&a8xMUh`xt~o%N>!IuD1*CV*AY@Fu+6((|<H)fjZ!u
zGvFCxZ!*joSzO=uI}y03j@bV&hicZ-GZA((e+D0CX#4#7DGm(hd0#xbY#)S~^Hlnv
zjRuiRTu>O|wCS$3=5EED`~Ufcc|vg9`jFuhIsr+<A?^>Iz{T41JA^*`>ft@-^&n)*
zk~r}og$6>LvJY#c=y5Y9ldmk@3xMJZiho^K!8)jW>JRpAbXhgA_Y#?=z)d;u5?ji=
z?)SJUGEN6ygM(Iw0uX;1mEp^e_aLb>z<eG=v<<PJCDZ5;n-U)Q%@0J<cqN!fpwf4A
zoLEq)ak<T4g-Sk$ES;2iv_Qaqm0x{@<UPL2fnm{agd|5GkFaNO&1T_0N8bEsbs_Y^
zlQ#%?G;)sMjZ-_o>#$w(gQRL`-RwR0-G9N^+BuBOm~?kdjB6KL%xdRG^ZTU24!hX}
z<A0Eh#$8KI5HL%H9hTjHy!}W<Xt8;6+D0<Y;^iwZy}J>FbJyYU(EZkM3uTjefmyGE
z{MYfLr?gln=8T)ui>$OaU^hNA<yn>oA)p`+<ecnjjfBLOG+uaIQkKP{{EH!#7y+;=
z6Ff%(1716z*k&^U@$E-eB~;`1Pz!-q^b0l-b@(#L`!xvcw8Qqp2t^gKn{nVKVRk`f
z<h_x6EBmpxqnq3MhX*~jpzcP1PiQ@w<NgK;TgFAk|DNkFwg3C~x<R*-8i92EN!x9D
zU?rZu;nt8fCCw1#nz9C-dRyQmh?7+_@T|}whROBUCwUiJR3aq%E<DUit?ho1W)b(a
zGdQ)|77Il_<m&Ek5wp;~4T;tKI4t-KUQ2BHHp$10dZGX{EQ8u^(T0zn{J_aR8NXA0
zZT6^Bzb)>0|KXu&i53nowGCU@b4BgjqI&+e8lV4A&gTw18|%xkN5w29tO2D-7n!?k
zwfjfpqLy`3Zn*ILaF;c@^Oif-QO(bnhJ?^TZatN;_eP!WgHl;$W~}}um%qX-wPUw@
zi2+~t)&m`*k68tYWhR>YkPX%of*u$XU`vpLt<0&45NIWe=2SN$ZAf!HcM~Gh@3Cze
z{499w8}Y<K+C-I8d*J@y{8O&m1P`0AglMbDnR2N2EtqxPVsQ{V$kqLJ_hZ@e7DD6x
zF|NUfd$9463;(X*Is3X9cnEpB;q~u<sqb3<nmLCxpp4EZ>$i_plB*j2t~27Qo++z_
z``P2myDN(+wc09Q@KMWJv4wTInN-`!!08Xkk(wC>|70#$TRXu5N0$&N9gXUQoF@;w
z%BI&I5gDY4`H@T%;I7c6*JU&pDmLuKIw9mhWs6Nd9L2ghR1N<8;}xeOJTdu0ZQX)@
z40ge|I%4TL>-|}**AHplZHph{GKxK6-Ar*cdH_k_)tf!MIvP>m$Bhsd?c(Z3y+vJ@
z4!+AM^KF<1C)6=-{_`&oQ2YwX-W!sqJixl&(!HrDOV0))%XHUC`MgznpK5j+r?D<R
zr7VBN5(dlizdS)-;Pe#vh$fwsp1Oej8;g8w6T`jr%<gVr_!S#&BP%h&1ABRtNnIQ}
zyR1L9k~bx%t`zD{J!;zn8)v?BYv$^hbiS(FX&l+NF!?QM%kj<S2CH`oQUFqPFSIVS
z9n14q$?&^Ehtq>4S%4D_9W7CB8jh_-hGMlRemn$Kw$9nbEP)#kQ$x5;hG?1DuV;UH
zC)jQ^!qOi*dzf1X(nI5Zg%$_}2okU3mEm#t`A7E!FwpDWgt{_5TL<GkuHvNdi#aiv
zShH)1i!F1g`Clv<+($4AZ{8Y7W3Q<cJ^<Kv%Vi?S2T*HU^Ny6Hf(~|zOI(8^3@L9K
zQo_rsrVq1xYpOH;bvJ0O3Z8t{704I=FL9u({D4xKV-xO?A9P&nD4_-jSnf}B7wy{r
zyNC_K(J%4$wZxlCNnZA~P<KZMi7zenm(N}OH|MC@=8yPV=W-bA8BB$EOx<v&Tjy<}
z%B0CSjvgQ;7HTQ{6Q#a4L#B+^0-y2#f1fFXcm<UXHc1nE>wM^uJD@$cz`KySkFO7b
zDa6QMNH9m;np}=`t9d>XiX9OZ@SyZy+&PosDD7z*S@DZ&sqeNg-S5~`I|k1bRV?U&
z+BGJ?7;cK~(Tf6w&Ki<5Z>!OMC?u>P@b0M_6YL3adxcZ049ITsoLInfe|T>j88<Bp
zO9*xSvF1@z4gq(mcJ;MKi3QJ8Uf<jAhN4I=AQE$j5`TSc4`bUM5ziXkE-@M`J|G`s
z_Y4OR?$pQ1{og;SE@JccTLiOB;#LSYeTifKUQPZr*$1IY>NR)bC>aux3FpC4R9%F^
zZ^5+Wb%Y4Y0oFCvi($0ipMSwP$+xyVx8WPnBY<fI$;fdI+?(XfUKtsEOOI)(ePi#~
zKf02gwc-->X>#(6Pf_3g`hGG92W$ZOMx(6s<4|=9c!xB4`3lywWGa6yjUCR4$1=0p
zn-6};j@S3;Xf=4Wrllee^h+<4x0%A8L?%@oJ#|bAF`FrGEWDXW_JrK9+IS;#Mp~qt
z<*l}~w(;C!u&D2%;3+GCpmql-JDQE|VUY!f;*IPVOyYYCWb=NW@YcUmZe=Mxcjv^8
zxmMHaWjBUg4_^ouQoMyELT>YUK*x9-J-cPEop1F$x5J8qB>FMl#&)g)wq@J&_P&2y
zdp#uswoSq#U2Lydc`3VDES8fhqfArNBvZ?`)!u^I8SA_p@<T0rCSIhIu+-yvXTT{M
znD1$Qe2bo|w`Ij<(b*UpP{926)NWcrCi~Un{}Odn0qzzl&e#7<+?&mn>&^3WkM*<p
zr-0J)WHz<MONm3|vx8$`@|^3GeIDW&n^HyCUnnH4mzB&Tv`?uvESfb6oEwxk!r$!f
ztw;{VPPg}t%OhCtz+s0ZJ?nhiy<_VD9KVX~JPzu!PNM(_!kH-qh#gGQ4`^Tcf-S)j
zL^Kjm?;_2n8pv`<%O-_270LXL$BKdEhpIGFV9zAw*Uxv?f)f{}WV=^86#EWOnaeL9
zq!|P&okghwb13UoEd0#-&!-#<9?_z*-2YZd@GWdvdLj4<EP@*^ZTxBVHV>*@R_oIO
z!;`P>B|a>hfE~N7e@)q3blzuUDQ}K${Dr9wTiqdI{xQeGq`21U`|33ULoCxYM)Ojo
zo%T{o`i&f{V{_~C#7fsKvwtW>Qf0}+ziNMU1Vw`H^IFf(egpS#Exaz`wC>Jt!qF%4
zTIb4W8wtEHC$jE}gvK?mZB84Kf0$z?TcXo^n7x71I3I!NbXP)?00#e4o%Gj&Iu*HF
z(^z`QY3=5Kf4zVj=sz(+!Bz;kCmoV;eJ}B@P~`V_21=-oZz~3J0%E?V`M}VM0lX>`
z%fgBmW<dup*VoIToo!f*Y?kX&RFTb3r~D<(YjLYtZfDs}kBTu=#McH7nCg3%vEEz4
z8|Hq0=13V^HSarb%2Eb7D?7qPMLbq)ht=~HsqJsOQWtwdK67hyCejg%ZOoJ2qAUkn
zo2d7wr5p6*CZd~2_D430cA*Eija5ya&oPnSX-_JfvL^nj6$f4Uz!tv#5P2uba%=--
zydp5}N{G`jwS?&3DZ6x*4K0-kp=a6FKbPm5lJz<AlIa|2g*a^O456s&^(cu~TMZOd
z_E=gUcm7~!t}_GjLoNoj$Jg3$w}`@<``*YqX`DaT22eD5O@O?j#ZRvKmMU*N-ntz?
zW9}b!@O}sfM?Ld8EMn!XRzebtz-W6K)ewVyE>g&;s`RF!Z;JUeZ|JFWBb$}<s44ON
z=Y6F6$U3qq;tr<+s79$sDqVwN)l5N9oP7C>oi2Dm0!=}(qGxXfc0S6q|6=&Z+e1th
zXX>39;v>GT14p5Bh1Bq-M@>NmKjI(5sYiPMjsmZY6Qo?6x<$s8z)gv0<Om!3>^^(*
z&7mY~<XB1H^^=uG0d71~tIOplvY@m6L)P}im|hnqzy|;M&qdrDl%&lWR#`*B4(xaL
zGB3q>*Hg=NoEKd=a|pagJ=Kpy<?<OnqEAOyw`!E--x?Co-9`U`Yi$q2Mc)#Kk7v9f
z4|5|I5Y6zzG$FJr{2u;Gy|Wq9hjhqxVB>egA2N|v1**K50Ai8UF`>21V4_aTu(UF5
zzw9M-gBZQ&*ERty<d=V}B@r44Qpee{P03EG(Vap>#qpD5mGJ_K2vLoK2tD<YPl^sM
zvZ#{xs2LAD<fZWbr&k(ynX*DzT4H0)--=J34(hiXU|0d@O?AZCBQ7;TQpf3Xdj;fi
zsB^Ph(=z1ZU1$z&cpMJP%<<L+n9Iif0+F2E`aAq^Kk&Lbcjx|WyCgtovF^_*)q$W2
zw<rm{+u!lfRutVQ{h}La3No}G@r-a&nmA9NAnCl*Ex<wXh%=RQOV^V=^%hehjW|G5
zz|)6M!|=a*S1Oq|>U4SGA4n$obaSkhqHJA3$3lXTy@|shulE!jsg*);`zsEAz71pF
z-mwS!B@21F#82_FJtw1^7N5wA^&#?HWjl064#Cd$3PPCkzYr%D4UY2AFP1(aa||w5
zTnnB+3>ug13z}Jsg05@@c~4Y;h@k~ux%_iu0LXF4MptWh7Kqw}kbB}_q#9hLRXNUc
zyLe7Z2nYl{CQH{c-9{<6S4_fond4B{49|2BsmgM$ZHM9K^*U;LFGTxo>17)VMP;V>
zXhFZ7UY1je-YWE%sY|2+4vE)U2%^NS1?XSo=M2AfWcyq`E{sLFeyJIS4GfBMJfK+3
z#w6uidU*Zrpi!YW(d6y<9TVc2ridropGnAb9nwG|fr+25L?&D_faq#wWa6Pu$`YRz
z@y|z_nTGe2^W(ZOi+s1y<_`$LNDdxn4J#^tREo?df@nCU$YTk>b{<c<FQbYn2Er?+
zngupA;7#t+`HtDs`C4jRws)xH?JqrN->}$>8W*8?FX2AlJ_Z<jkqC?l@WZ=3L(gG1
zL$NpiBM*(+UX1D=9(oR86YU=-4Rcid?!l}6<*uR=TP?A=X9D02wt3h4g>}%4YXZm9
zA6sWZXo<c^x*NZb3Y*_NpDbx%#UF-WtvYpX`nqIpa4f4uheS!{HIpCtg^&9BeNo<9
z2bQc?;pqj=R%Mv^4`ZC@e=eThy==~g^0$ma$NweLt~i*5dY2?_RwdsHzQoPgdv9-5
z@g0ebAu4cw=sMN&fOuI6N3b7nF#V5G6}ZIRKRYl$je?O}puO%m{MiN1C*&u+&n`>>
z`P~YqTn~kRrCjo(+{n>G*M!%bZDCQ$HA~=H`kk*4rL2_NKG&I@PjgH?+%kt{9$Mx-
zS7$p>coi{7Dw;C}Pdt}#D>qj4W#0>_WA*7EP2|@Qk8=?a3b^HzzX64Wf7So}M|W{g
za39k7(^oQ&E^NPUw;pI3okrla@5Fd2TYMOM_Z3JYWs2cjn)SYF1iHz2;P@>YG%)M-
zgiyrg=4NkSV@<6lY_J6Z4%}?!+c)ku9zs#+&;31Bd+#1KSswmj_&H|$v;iApc)pp~
zlxg_R;O~mCB_?L>XP%&Yh_?5X53!TLrnkej9NTWC%^=dW7p6|fo_#w)vFWhHRDhDv
zo}68$#hz<PZI1E#Iq|A)Ib3jxx4><naFW2!P>KUjxXih3y1!|yZH0ysM!)kFo$L>v
z66KR4ZM2bJr%pU^Eg6D6p5d(e>^?!t)ro1XyxKPsLzL<XtA*pd#_ES&@KBVdRai|>
z0Z4gI0(BmMW%=xvmiVWa?N7YMjGK&Yg5Mv;7)?jo^J;6+y1?w@U35*eri{RY)}v|$
z#7I)|;f+SpU+s>+!k3{m?vV&TB{5nNEbY?sHFydU$*?X@liqW65&;~|N2R58ThOFp
zLal(&rT*xT)aJrGd^oec7lB-3VTcs<%bi?Tk37Aju!%3$pGU13q=H^<_o}|UuK-`N
zwMt-B@!y`Q(^mXW=a3Dax_qGA`t571R@X=!28;Qx{cNa=G5csUN#{`IzYwcX-lpqW
z)VKxG#mju-2E&Tl{C{BJfX6zlhT#BM<Ksw1?$@5$=}zS7kamnQ;2(Nosbcm#!73ro
z%lFq5wGgNecQT9J{dZV)jz5SIsx!QI%Xo^hz2$D--zyaZk=TYej(t`(QHwFe{PeTu
zuz)cA+8*#-`_aO11GzhkJsX?a95P;)#+CdM`H+5T%yU|OD0)NUE&ccF8{s5@$WNy0
z-;)q>a-#*0_5R*->DMc%mK}VW!bE<C?D@zsb`@LKaj#>$jA4k3IoZ__CXnFZkWd&M
z1V=XXqne+*vPK9E5<s2M0cvOt4tZ?D+KDH?xMzF<H^I0{q+trk)Wj6{4EmmJQ&>33
z>xD}-lbgl3sD9@41H8pL5>L_-ew#LLy>^Q~10~bsQWow?>xE5ne}zcXtja+>{Mn#f
zfvR52?<o1D0ilX)2CUebIGAc{A3E>@8Ku8ZyACK}g?Z@&%2MBal@efL*wJudz1icc
zp|>_A4_ds~j`N2rvv%if<0xy-?9TdZreO8l>|suF5AHwL?xyh)c=ot^{RFDBBJS;<
z_|}P4SUXQP2zqi88wK#7o`B#Ap@%eNG<4n+oEpnr@JA7Y;B>zcUhdB>m^0;XD=d(`
z3dzh28GJ$W|9CJ;L2){wF+nHdXUn%7oI@g)ZXcj51O4H{2yIAjR@s(5*6R0ZwV2{v
zqM$(45lY3*<xQhUivt|Raq&X%J<OsEACq5=hRsc>@fV+1MojFby80NLe!XYXYcIum
zs)>{=m*E}b^Vyo-rt<;$uvGbnd>J}Z!pHU{l=K%+!FRDPzgbUIzoY>30b{L0u~!eS
z>_*k6Vfz659)fI;W*PTJPb3@WNBW)$=R711xn2f!#tVs`yZ-!7IjRZ*M5SQv3T$b^
zHv3+o&io=rq2*mzw*I^6aN@uA0gxz}<t3rFho)^YsZEsW(Scb9T{|&b#4||Cvp46C
zsh-hAao$7VNg--Q-3SNVL(}Pz!f(nl*L?C>O8Ix01uuIJwa>Wwe&~e=rdE33WfHR)
z(cSz9Y{n<0$-TH*qY4-#kcg}EFb<SXqL<UPwvtoDdiOf<{T9j}y475kDJj>ez;d01
z{lS>yvuTRi%a(dg8`PkO*e7CoZS9`&7ad+Wo4k3)ow!#U2H$IWJxtkEKDt$oqL1$3
z1s($s%SQ1+^IbsUfJ8S)bZSq?M)hdrjq6y6|NRfq9JagZ*FDSeAy>a2H=3axO2l}x
z@vI$XQ?Jms-G5-~UmR}P`$F+)7GAgAc-Uy*{waQSC<($&k=wq*L!VIz9uv>vk$&*&
zj(;bR<h98U%3Pfe`-$*zM=6eT6E)WF*f>=b>_c!aZ5)?0-b_ji!jKif^C9hZ0bbPm
z_J7QD*Lj2m&Ab%h*jDVR82E8)RYVKFDGZ{wJI=o;3;jOdOFYl775|Q3Iy%hI)}=|-
z8#72M{|J)php*twswIwv!DLMhhD<;3|MtqHd2iKjEaX058QTA{{gD=(vI02R+}oiY
zc*rN9b-~2`dF+sP#1wGW4i*mPSB;E1$-e|H1fs5IUzwCBdHT|T$(L8+@3uAwL3^st
zE>q-NNb=%mT<HiZ=_KNGu}aC8R3Kn2xfA>Y-IqSfbYHE!^{Ql#wl~-{I=&P7LmxP!
zu0uzvr4T(3Z&Jx6FFW?n-kwE2kJnrR&+Z><?sx`kzUqnUU9JOFeh}Fa*4&xdI~1bo
z_cxbBC;`RXd*S3IZpdp%j&qN<cNOH4p1dLT7W+}a%^@d|xN3p4c2dd(>4JyRXBSzh
zqeID3c=1kVUhu1aeG=K*X?NN48Xxq65VS2R5H&8OVX}Qae%**q;vO;qroY}uwhrSK
zIZ&4F-9)+E!na;wou)i*D8@*f%ia>*^GIFu653Te^xZ>_w@LiKF8fbUyC3xEoB?4n
z+tGKcUq8<>LekpaJPUb6$?+@|`g#4~O(qW3tAh+q8fk*Pv<I<V#TwJ%n|C|~JUa^B
zM>NQ>zpQ21N}e6X7`J#4-a=|kYP++MfmLDOKC6sUvl~odpqcLUl>1X;VjyMDSwrk{
z(^NE!Kcx%4IAvTL1)?_M?ij&$QkgH!>;wcGL@choO<W>;|0aEItd?6T{xqBueqZ~V
znJrwR9se#<<k&7sB~R`>3xM=*)7ublLQ5G{@nw~&J{)R0SF(y{g?#{Ne~dS)y<O?>
z5u;akhd>|M9D$-=B<7a?`mXuIpwXwq8{?A_p}B^Cy-sfF8lDF{Vt!Uq%L}3b>hu|5
zmkp+z&ASNf&q869ydn`4u+Dy}32L%JVoa?rnOaL-RbE2)hYc=@xCT46vG?RCoUsCW
zic*-kY=cw4Eo~efYx&17YkOrmAy%7;VV6bX=<{27yfs1}1rtb<?Y{ENKJ$MhwqfEP
zt6qazdW`j6W?>ei$3+)Ug>~^r*7cKIF;0KnP9tK8%E_`wlt<G7w`-uWX8!oM>xR3%
z2;zlD%vWXBW{f*HSFVgc6msYiVbodHT5gTlh-ST+VDMv4xcGE?o(ySdx*^{>GEb<^
zEa13l7T~QTV#X(TGWyQ6lyh|e{)6ba$zw^7DR7L&?7ndVlwm_tNX$N4yIQ{Q0vE$!
zkfW@_bi=CGnPNvWM#vk+9d6=i^AY%i-Z=1)mXoDHeD7uuEL;2E=8&zsUpbWb;bWyS
zx<iz4boM+=MyWToarZ`)aAU_qV3b`;SlYuwD@H9V_Q!Tib#C!>k#_GF1=q>a<2Dv^
zJYUzuziJa<>3PD{&!=gLHxZ*cq+wZudHHc)FeW}vea|{ZR@Uz4vKX^N5c(lO*Sc@{
zw~?f0Qda|<))~y3xs4~J1C5UV-IMMK?|t7&f&k{JG6JEtv`+K@s<L-9AF*+`oxr-i
z5%v;B^Mp-mkIkJ>|L0$C+~QZyL2GpX=;Cpv==SBYSgVK*Hw52m4(Hc0#O@M$v5>b$
zgRiEC1Fz@iy5{9l^w&i?V5=&*DA-W-e+8%wGp7zx5ZZt0r+5ePivo2YLX()9uxnwo
zX(IZe6>HKA4|7CJ<aoW!_SuO(!pJ_4fRBC~hZ+TyMg9W4fe;m7P{y?#Q87G6KhA_7
zHh5oTHErdq*NWlhReBws$$v0jnd*H*kH<nqTHuwN$4?k)Qg7Ru_`~G48aoQ{^Y5W9
z8xA*1<zF0uca^<xG=jEAGDJsc&eD+$wt&MWgKKip^+n;OllpXQq1$ul-Qw=b%MfmZ
zNR0jFXN)PQv|5w>O|Nrd3XVlnzyO&4>$Z=>R-GIJF3BIV<PBmF8i`*~5Uh1{{&QTJ
z?@Q)n;$Q9&7WvnjFgVzRv+!gL+dStWfL|Ewx?HZeNRQi*jaL}D5>6#{s=xgt{;Q+k
zeVRPu{HX5Tf0;p<Qe}D?;9aj%nktCBE`sz@!95#VPxrZv<8v(i@0a6aO<sm9N^54#
z1A||Y0`v>(b61T@7Odd@7<>|i`NKs5I{aROG4&^o+G6WnqI9HPci}7vCUYT2+e@c8
za81)L)=>M~fGL94QRl0-1aqzUhh{<r^eF;+r&Z8{I2gijm9{~wYPwjJo-6YxzjRj{
zeJ(jO`RjD~d*ds$(Ab|HiW6YnAx8mwprz^r`0_Ex7AHJ8+iyf##FAG<Cv98^YPDO+
z9Ga=yfWc74D^QjaB{<c~8ZwlsK2lE^)iqPBO=`V@ln~H~y&`pAz0jF`-v(EXRl%~9
z`pY=Ckn&*BgVjVWeM}o%X`J*$fn800vQ==<|NBiTDp!y$^HYzc&?+xsrb&1kI|r9P
zno2_;n@QuT*yOzMR4_w{*)zxJe?Q}zBfMv6J6Dal|Ls|dq4}yyxGV%d2|KXhz#IMH
z9;4l^{qb!Kn;xn78uI?D_+4qiMpQF`{z+QtzE#oB<()#PXvpj}Xv!@9K~~Zg)pRua
z*RExJ8eY#HP%w`%ENCap28t)&OH^%`*{w!;zSOuI+%)N(O7TQ0jogbu&+cd&@h6dV
z{?JGA^dH-qw=zl`vZ2ODpSwKEPQqOffAdJEX^LN{5jk<qQh|UK@T}j!b9=IpF`7a@
zv#>qFz!{$Cjh&^9+frlX%iH6=m$VuO;8mtbDpyQ#oF8{fbFo!WqFD7_D9ul-^W)*@
z65>)_YXRTf?{ToM-Ol(do`A}<#8{iR%ajaqO@Gh9UGiIps423|$6Jp9lJ0MOU>xSv
z(Ocv~Xb5@>=O^c&MY0?^VQuQAekG!2=9*~1r7u$?mt-?sHryrU-kwsR+r<bWsC@#y
zee@wZhoJ`mf-L#N2CpCJS?pP5fkNxjsK0L)2%P;LHBwCTgA7bG6qO-odfc=PnY!U9
z>Bc+Vkbeb}^zWi<yxW9k^h%td)IC8aiWmZGu_a8#tgk-?8Dh~vFaFcmvW|3E9oNsh
zp~>Nwqt&Us&gzGgBfluzmpmgpw2XM5eYCw4wG9q^_3SL@6-Wp{9objs6h$Kg_E~2U
zyLSXRGTy&&yF6xVUx^Tj7k(~KufI97_X>T)a`U+ME^K#3TyS4ls$o<PZOX}7LwNvn
zo1E}bp1{O*Mq{!sB>H~e(-c1LVpx4-q&%PKPpa+d__OV&MB_lat@SRiD4%I(Di0Lx
z>fd|Q8BKY(eU%F`ubAJZ1z)+>aP^B}OH|eYY$6IBJDndG?skyi<ZtfIn~y!q+oL#M
zDB*n=J$V&=#>e<7HaC2c=M7}4R@JxEqM@0gxSRAsD)>}d4BLOx&LfsD{?tV{T76oj
z{6ZtsZ|oaQ3z3g8%xcfIO4{z%of-#94@~-Se{1G$g5&CbSJ{)CkV}yA&aTV!+zjSf
zpRIzom#r4-2x~eC_+J3s-2XSRBG}!MWUSZ><?KFa1oY(;+>A?qLTCK&Gw1KDnN0LQ
zASAZ4qwVf&c!aKw-K@TeZchCiJoUvVvpo>4|EZ=tO+fKul?S!MmnFzN?zFyq53iM<
z!j%>)t7l|(B%3}J;EkM)#!O7=PdYA~8`vSHT0042Jp1#{V>>5Ghmk)kILZ}7G5fgQ
zek0Q+WT2gT``f83p!z$g6-+}=@SBko8u`j2=9v5WC>w<7R|ZrA`&+J8nefm}<S)WR
zujEb3s*6i>4xARke^CSjhmYqg^VV8hzR^b6jO}Wh^mx4u@a}o1%Xn0yX)*Ub@K-2m
zLHs{om4zh@#FDjSW{JJefFi);mvcv76Z*I0jk(1Hc;ivG0r4PMXk*|)DD&#pM%8+T
zV1?<kbi!-7W}_36kU-V<45V&EMNu8(k-b|=(>#3QKI!x&XV?TWTB^ZskPYWckCtx;
zxnrX`66JYc<8(v;Fr%N_y;gGkKwwjs5$=kynwTI%N+ER`PLZM{OE9B_-@@yMZAa$J
z&P1{WB+7N;6{$+n>`$W%<C4bb<H*3!DwPs%=}zn0(WmENs=!6AdobQ?$c~|&i3<<Y
zX5Sy<%io>|1C8mdxNEE*8d$s8CqVR`7YV{>=ao|=$p@SsjlZZ?(F5QMw(@_+ZMwEE
zhk53C&yVR}&~eeovNSrnjpTgzZy;N29upKJIQeQqu=$gi&rTXovjzEk;Yr65H8g?_
zw1fRCl=^YK?4h*k?l9rMR0X2n)faudLL2Y6ST4lE8^1!n2{hLaQN)t#ym*;Q<aJ04
zHKL}KJguY9zB?^!VD4AkmstJy+Ve2i+ey2B;)uuC9zym<2N$aT+|(n;SkjVy?=|qp
zei^F}pKR8JKd5>N_L5^cNZa;(yLk{S<Ef>#nE=~3{0y?S0}Lp17C8D^v_GCS>l(g>
zE<YiX2eCx=fijOXAh~E=Zl26kD~sfx%GW6?Ql9L_(fB1S1lP;jXZ(|8=GpGTGMk0p
z1&WI4DCbO>o-;8GkRlB8^~ik3%llYv)pZsG<D#iX6Z)<C@PxFo2>xTdpjG?%k-0TD
zv~=+F!o>Bz!glz#C<QAlo(w`Ax9~R8KE8LHbD4WWd^n`ZZ1`K|<CoJC5&^I`@b&a(
zvkZ+%#7%c-Ik{w#etUMVtdTnUf!$Ylo{0u>h-Mz3(_+0r6!&MG%toGl9<6JOL^(7=
zShRO&AYe%rFoBg}e}COPg!HJ<ajeCwvX~(f&L1rsw=AO|;rZHq@y;E*4|w*stKgfD
z(wVH4wr+L-BwIR9<jq>q%+$wG0*(PSdnyiU)AZC&YKvZUE<)w7Ll+%KE}F0vh(stm
zTl($wBO(%;%SJsY$)B1KbA-Q%hUsNWeajAWm~f$#0K}<TgeGe$iqM))=L@g?layf^
z6Trrn5Mx%!ypiD_a8=>uPMFnp(kEUJ48>P<{1GjqiQejKX#72u^MUnKF9^|09(Mgg
z-Lm>l!P$_KwcGpGRAtn?gk%F>Lju_`Nh-$Y@QgBf`(MFV_H)4!B06<CV#<pN+p8{~
z|E-4rcjwRI-SP><iOL<xueq#>r6)qVC&4I~{BWPe=48Z|XCJE<vMoj=CB98->3J{p
z)vGy`y}z7mT7`dZkiy+%KFz(ebVw)TjpU8>$#u>euO0j;@%VWo9cAW;$(ePw+xfl;
zE=^;hM*biWC5&NHx!h|b+RLEM7F)DTu@)`V6yMBQF?-bXsfj{*68nI8;YUdaV;G`d
zM@6%@cY|=nr}hH;_-%7AC15+rplmB)w78_MfAi5Mv5JAi&?t{~CENKNSI)mZX_Izk
z&$n4O*37hOLv1dchmq^9dR`>WMRK9FBUG}oI3>(c;;Ghq$m<pim%+0mZ{~FPDczgW
z$0Omv=m2ZMxY0^#2t{y4>0}g2Yc$U6jMVEPZ}bGuuW7-GuNcc1hB;R#oL9?7y;{C}
zd#S4_WJqQ!DRWH`HR+c0HH25wo2ri{-QuPH_)zHhJC6<ut4O<5=0|GkVtl56TNPlu
zI1BDFAf8E_B9g10E^3f0K}5G%G)r#yONF3L<*8MG72~g{PI}gjsp%AE{h!i{JjYZn
z)(F5U>!{RoK{(_Ipa|vJ>&O1;>Grrz+h7{O>#tmX8nzsD#9D&JzI9%VZ1uLa2UH5y
zB|qKa(rl3J<$kHt7w!(%dPKAwgkON9yv#tQGU}9`d1nziu-@Vk85-Q$=w_GQCinJL
zwNNXWw>8gJhF<1(DZv#e6Y-zc%Nd0HgmNqM{!?mo>FPRX&v2V^Brn}U@O4&sJKH|@
zNzS5UM2oMo+hHySSPKiD7QF**!Y=<3_Xa|Rj>=F!QC{I{<ZP~eVj}i{kDOFV&Bnag
z?0?vkl6qHs1b+=AHVs6VTnP<BinED%ME-dCGOoq>3G1?!(DYACV4`<NmjbW*1N)2G
zI`7mggiH=Q$oY?2gJN*Nl`;4GV^8C%PsD)jP58FWXDBq{zQn9}&XO7!6if5TnLtJ?
z)-F6x`4`i2Pjct8v#s7qnPn*{m2T6rZ~EC5@sje4=l$f?4wfdaym|Uw0;(n1t+bw8
zho<y`+V)9rCE)e`k5cKwD5Bw2L5lfVxz{8Yjo81fux&Gv0;?wLtN}y(ju|dr$JX{Q
zJ26Qm6PSS=7z();z`;stqDWym##Df-xhHv&B40FSv+;`fwq)3Rdh~PgaJHmE8tU49
z;k^8v^_};h4M+1@F~9!I9=jQP(btLAoAC}Yk4B9F#)afhd=Rzx@LIcNuV!KN2ifqG
z;aTw6+rn0c1Ht!#Z=z>&sv)lx=i)zDI<m9a-~JOPJzXDkLy*=vu5tcSR*wJEG#gIj
zGnQ2lQ4wfgpYd&<%~04-7?+bOQo*zRiHNDD=>+6;bLrE}Mjt5siSn1#*gXQ;i3gH=
znUzD?J-baHXQF?pR{!$+Hpjbz%yks&-><vOP*Bvx5oq+Wj0}VOuwZQKW8FjK2$?=L
zrDT;sl>ug@K2Lvu<`=gOi$V*j`kjziYX!Q@Luu2@m<pxLeaTn(zD^{IV<Kt`!-eO2
zFPA8_kAR#WEC+GC!$^-z;bmU}09?T>G}k9j7)&MIwQ8Zi^W7yc+gYxEZ%g0?x;jww
zM#9SqCg69L%}IRHL}^`=1|Q;^U?I<Bkb0l#8`ToemiGKK4MsRxqw4|L*7q8;@xnQo
z<Yvp%%4a9O=yls1r_DzMUe>S3k-jZR%EafP&!(c(@8c3D%Y~9$-?gJRl0Yjs|NQXA
zq$1d_X)jDtsIDx@U&KeV`Kw`zQ@H-?#I)x6Lp|IQksI`pEaAcLR2|c!;79y8mBmPV
zpp}fo*RMkQ^^%&#8m1azG$u}EO?oA1`<xL<PN}_XNwwI|O0?CQk><6e2SCj~D&m<l
z?qu*MHKSI75L<0&P>XSnu#2LfH0$3O#$I)Ho!EqND5C^y9pZ*~<^?}{<GLoNQes%L
zFlAz{n=k)@k8iIjXNt(jNzf^#=pxaiuf1Xa5D)f8tzfHGyJ);7oQ9pYJu?pz<4KEh
z<H^Wd?>XF+^?xv`|Mdl!?Ql=$RYUJA5;^_)AnDF4-1}#(#1c?9oahXELJ+3gLR3N}
z1BD_N35RHm-UGxxYOrPF_bbrHXP9|>2>2|zpL~=kxSmnHIUAGY<{s$*hMBebquu6t
z$%_njmUWW#FxM1I6xkCsBn~A*trK<~%OrjM(i$5Hd^A<(6lMJE(kNEL)hE6uq$r^s
zi;e8-4v%fa0_Sc}CnH$p?g{`q<u=gY3$2y9?6{-(3elVMtx(vm1*|=B^ov)2;fKrv
zzA4@~Z6%)y<<*PRF3Xr+qy46)<+IMVrhkC)Oj)Md9$O6p;iiwO@J{{jIE8XV(>w2}
z)HyyixD0oGH<j!^8v2Eeb+*$&*e*HGC9bbgNXHRV<D|3T-+c_$(MBF=-BtuWC*fbq
zX1UGUg|<|o)OE1RBMCyG&+C-vxCiR%U>_473j3Q(;35(fsT%w1G8dY%pJA=mP`289
zj|hio3~byTp`R=Z^i>){ve+`Q-tJ(DvYQBTT?@`p+H4o`?>{WI=8sG^0&Ek04QENp
z<cZ9E_=K0)gekyRMqy7cW<2ITKS*vp&~()-jO<`s?r`s={a$!X(vPKP_~uJh`b}es
z(Pog=?}j0Glqm1IE`m<}>QHWKLs?89_v3+M%>7EVp|DjH!^d4Smn;5L_U0Sz?i;GW
ztde`v(*qRcXDxwMrjots!nXW|kKC&#NR0p)$TIkL?RyvsI}oa&(|1zv8sHjR4WLQl
zuf`@Ku0_3L<bR3L%!Z?bjj`l!`Jr!`;!}LB=5jAy44ZiN^m7_aA|0z`soaL$OdOA!
zc0-*hlUeTJRwg92|2h(INRzYY{$<)!$#&XXVV+(zu6Q>aT$r0rp@g|(mHI*UkAm;3
z0p&4%N^V#HPzgCh6F6;GF}Kw}!RM&;B&J-`r?8ql?HA4AfiA;uQJW%4`Xqv2%Jk4H
zZ-Z_pAx*<qS7Xw*f`?%>X*adxLLF{C-50SD8>e#MajU{m8Gre6i*@wJ7)Nlv7fPs2
z-*d_eAuHV>6U3cip)vkx6YnHp9%!MX!!;Kun_22Qd98`z*J@&Lxqe5KYMG;x*rAYL
z65U7F`WI;->%Sv!JDl_1(r>Vex9C4I{oZ9I-rgI+*pdk&|I^lwC}Ddv_yjfMzsmGx
z5`)|oTO5ys=_P;>U;LvDQJkMY-A103#q_O-KtbrVxz*5Rwf`evO$D}fcZ#`aToo-z
z?Y*1vpFW>6QcYxPJo!+;{XdPOJg!6n^K9BkO5x0SE*3kdkLAw}laeHF*7MIJZkvUg
zNuf=Hr}sEhOnLhwCx=oG4}8PgqEcdW4vX{*)QO1$ETWyR6A&KUrkp<H<5IQd($B4&
zGvd$PLZI&t?<@Py>Ys_UW_#V?s5;IV<-^}1>H=YiSyqT6PDyLGc3#G;vUZ3Ur2Xf)
zQSk%5qzC<(hR5GTX$=$T6!GtxaTdO7*gOQDZpS|~d}ejH9xT~-hwnG->+fu!>L3!C
z;4$<5<A3N*?y&lQc@X@hAbZvXB`b+JK9Ovci$RhjV0F6ekYcw;1>c%@z;`_2k)%BQ
zcr2kK9j}f1E>i}D&oK}u32sxf;>e}+#&8MpgDv6<kX=TK=k3R|0K(Wt>F}$`Oly^`
z-X3v@{;<lS@maO8Oe$Bw(ytubN)>4u@LGa$!$Rt!s!NOSDPGe$NM6k1ScV=`)q*>E
z)yo)|e4oF6vl{+s_$4hmRv2tPi@U@)MOQ5U7)mJw@?WsaluVHFamX|R;;*#79@?)N
zms-+AcYN&R_Py$$E3k><IqIG=x_*RpxVu1%0G+R^V=}Ub|CRo$rVKYwlqp?e;ImSA
zo*417X^u45FEo6`=xe&e@bi&Q8XGNdjb-@lpRGV#D&O#~)XP~pUsk9W&e)ZifNnEI
zrP@b309AGGvbF6Xu8?r95Bv<*j#N+OTSF#W<iQ6&#Xy*w{D<n60yvx~TKo#Cqn8?{
z?@1?r!-OB5%J^K9O1DFaqoq))Y!MH`w#zDBOes4swy2rRxc1rdQExxaz;_?qUl`A+
zcL<4-Q(iZ@2;TO*KJ0^yrTy5w;*GnX1R*)m*E5Y1$@+=n2Pzkcg{Q|E6@EKw5`cd>
zarcj#w}I8K>GM8gWMr2W{PTpr@_11td0Cv=$x|6*&jTZ5*DAU#!x4v{_ud1x%q5cj
ze~+U}TerD`qr)!V;o62aurgfqgt?)Op^XQZ5GOBzfmr3!wMQ>Y$s1UFixe5qSnr$l
z&d*J!#}W4xaxVX%UF2yuIn;S8bGK&|rv7o__Ty=rO(JoxlD=;=Id+j%)plk*?m!f?
zIRpE<@RJsRkFxj1Ma?59+BsC-2l^uEZE^c6T9c5BnJ;}N7yLtnPFrz>mw(1n-Ya^D
z?=+@PkJH%@MW%~c#z=WaPExu2!Hemo6?#)Y`b@N0#JG(u8;-H<let<bB7MAkzpacM
zMZ+B&KuGeii#@&NqBMKP1+igdR_fdpZVBeC6qW^V)`nR7<GzErrj*1jmjv{VbShVN
zxKUfvdx`m1uE|8uDFABrPq+Ai=PyrTEfEzF`0hBtNvDN27+1Sgy~T^FT9%vV*uJ-6
zYkq4r|IHyf{PPK>jnb^BeZU@@3@yvfdOwVkcwf>x_s9yb&kyOYc`6w8Z8r3UJ*FLD
z5k0pE6}JcuKb!jdmlS5i=;#glWn41DzUU8RN=&`bP8lmKQKI)2M=u2Enu{ATZZ|H4
zl$GO*odn6V0Y>KlS@ZL{c!fHHcwE^zA#Ju#!O!P)n<aTg!YS;jq9S@UKZW3CFbZlq
zB)_t_FZ}q~?XB$h_hTB0@83GLTHolaLBIcJWT{3LOw^3zmVP`+b!~d-iSzWRr{&rM
z4X`pE?zZQz?U~H>tCDxLV$XKz`V#<`!{wn2c}x_1EgU3oE5oZ%FcMVCT(db-ZhU9j
zaM#odmx&u^PO-W0w+MRhTa^3cRj-u!z${oEgrR8zYuG(_!^Fmmn~<<r#LELR$*d1v
zQq};U6B6fNLfjMODtQ#KU*2@KxCN(8>y~Lh%%Ky_S3_qS%jx3_u(*!E`Ix7)7Gwm9
z*t@>N`HF?i3WO$Es#c={l4r~C?xduRA>D@PwA6_V=sQ;HBs$J$D~0&j{|X5MaiKJv
z{6WNnKevvO1PL9q@H@l+1q;T!b}e*f0wP%75VvmCSGYg0UC+>Ndg!URmcDJh=jfX(
zZCwJrB>g4&Q<F-zfWU0@<N-#uge{fRZZ=SW6<(|Owq<}|xKv&}zj>x>lvWNwNFnok
zAlCaAtOeQ((I1fVXx}#{$7j-FZa>K11=?XwNnNg|$?&Vm?ZYI^YwYNYD+HHgu*gUV
zFS3pP67XOaabwHjh~bLSh+$~45#p|Z;J4`lq}EWf_xTFM6kIRQ6X%VER36^}u>qT$
zWUe}iLP{5*X=jWD`HZ{P(aAVw7ZHWgnAU@i7?i&6EEHD1kSlRkQR+VLE<9aBJtign
zoz!(C$N(4_hs#{R6bBWs9RU5-FBm99qYW8NHPv*lcmL3H26~Mbej|YDzZX$Ugl9SE
z%3A&_p4NI3ttN8ubu<A~hPsuh0HOST%Q+>{q2RUPsgTYAeU~5YAw46ypQAAI8Mkqt
zrokla9N;&%I6{>@qYF<XL=Bs!+?weNXFzw-=Z`p%kz54}+CC1)y!w?K8rpgLxAF*S
z<uzi(^1qP<9hSV))YKq;ny@o((D-9N1a4`#)e%uBXg1xy$D!9iHEYvK#G@3dTcM@k
zix;gdCzD!UcukEZX`Hwmuaz(KQT|T=RFUS;v{+QQ{-U)`4ISkj1}<Z<Bn-*6Ss(rH
zGxkvhnt_9kH+xzT<u0zn^?;p5VPIvWZ~R{>-&e0MMc;^^761LUWpxNago;X&2+<5~
z2}$ztyaUT)o5eXz5G8)Vk#=(uP<(ZfxFqQPVzL<_=F{_fnw!?QhLd#GT+QdjXwz*l
zy<H7HW}uhPApb2`Cd{W77IG#D=?VC+4YM{cIMS+)j9Scrxwa>9!f8)8!^$Lihu7Th
z{{YWGFuyjl+7v1`<}lE;$NU?RYf^))!9x3a>WjM>9=w@XUwNJJZFTOuZ8v9*q`h`r
zS?w=608WdY-SsVS)uI#Ny8MA27gcfMS$AR_k_onaOAQE{%GhopGK#5ttec+^Xh7ak
zT;c;qF*StP0E^>}10Q34>I5no5`*g~CRW0VAfd;?YKnB(6ih(Z*Jm#I1Z80Wum2^1
zhe@VVK!DIM{?I~P6NZK$uEC<SBw0Wu%UEpW>==GOH{J9tEVU9uB6{*7f-%Np_{a-|
z29pqvLr{fe-qBnX+AUuL&|JHMq-DLr8E=ScZNa;cqTpvePr#}#7P=x>8!a-PQq;tH
zSfED8oU;4YkjI`n&*vU_j>(ZaCoa59Gi+0fM^IIaY=YjqF6Q5$Oc`sL=iX?dpw|)e
zuV&f-5RN&{U-%MX_#F(@hj{dBFETt(XUF6)7fxrMjDzRuyPRc<y?1j3|G%sS^r`+D
zpZ%C(!VdLScydKEfi^T|p+2XK-3Gw`NL9!!xU;~b-+gT)h&ALLXw5^X*=DJe5`=q6
zwS%dEv;`AF6e(fg3wT<v18q_9_ZdJb{MpA#C`>&h00}`NFjb!g1QA35gn_{Xj%roO
ztk6_LM=NLuCYoSm<h?Z8N}l^JL3z5R7*LSV2e^2fP~ELm2EjF;u^_aTAT1YvUY;i{
zI;qkv$~yId&3V!wxl@9mSolSaMvboxxFRS>5g39%$U4g8o{(3M&GBph{RxKZmS*cb
zCtEKtviGJH7Qbv-XK2mEFKY{s-q`lwtY_N66&ZD|DbTrwj))m+aq7Y&?A!jGL>9jE
z$g_OMM;@d;7_%^wp-zgbKbI5$Jrw8*0wtFK;{$>7DYom*=t~z;koz64JrA>|Al?S!
z2Ot{uRq?2%WD7#4VOW}SESzaEcYdCQg(*7OESa=fYM!BPcKS+v#kc5!P<`qi_z`4Z
z(Ju>pEDr!>JFvhBCIn(ZDn1JcDn0-i1I9XE5FCKSD&7h(Buf)AXV6$M1BS>M&#KJm
zu@)ncx)4r4^(Lro^8%$yr<KOMHx<n@Z%#sCT+-G3D0>+WEXHSA#y@wU;t4}V%eL&F
znqnBr86N;KKARff9<Y>k__g19mLT?@-{GmRGPHM>Z>w&Ur+?Kk{|!A3e6`d5)uZ$3
z0-h_~U;NA}IyB9RsV}j6@>^MI%<=n=Ji|x6^#Q_)kSrAAx_v3XQ(yfrVZd@0UttI$
zr46{>#ayxYoby4zs$ZB^yp!+Jd0})9>^lg@LYSL@b4QgkZ#0=ZH$`V@hAf>2&3u2`
z!~}K}B=S3U<kR&ygdp}eLiNfWiC+-iT7X{Ep$Uo%AoiG?3fNdZ6o`aSJk>a=f({6&
zDour!Gvw_6rOrZY9tjQAfr#p$#YTS4A<Yy*#SRJ4Zl%6ksMcWd7|fsd_}`@k%yG`o
zDrk<=qD@*T{@Q~1XiSfnfq0IC?IR#-F~)37PdF&;C<CK{8F2jSuRKd9TVOaI=J2`C
zP~Sd*38P-LT2(dTGSmK56{lCZ9&fZ^pv};GFK_X0M50+%zh4DgQ#zf)oSzwCeCS>-
zOdaJbkJfnayY8mBl;M)z&YwFiIsu;j*CqaxgF*d*7X{lb&;4U;Y>8q^P!+<O!4@u7
zjTxAoO<7zt<PSkw6<RfDRUi!&Qx6Dq0NW06NrH1JA^{=|&;T3z3cU@K$SRd0Ah-xL
zP`|*-0HDjcCR()1h`_|+C7dh1I9V3|)cP7gP*su&WEpe>nix_SlVUl3;Rz}W5mpAN
zRwfu48fSEJh}xK?x=k3_2lWYIcpTa@Fni3=Uh*zSu0!EB=(<yiB}-9C+G3IV8!fYe
z;sQ3({d7wMBwzC=RLgUSDne!0@@v2OEa#?AF)}d5$(gTXMlC^opvzudjbL^yG5@7M
z(^WJy-{t{eb%x(&Fuz<L=3lcH>j^CJSjfVKrwAH#25P%`<LI*t4%9hx(>|t8r#&GL
z=W)I(IsaOY1WVuSfENx80!t8t1Ytm2i?D$qNpf1Pgqi6Mjm8qqq)A5<TdOg$ILeY#
zIQVU_=Qg3U1j#}Lml#|clIJbRS_mn|7{t`E2$d>C2}FTX37`^zMnWEXvrq|p8Ud!D
zICr%Qte@{E28k4j1&KZO4`R;(RI5Z*2r5b%dtbi<XsOW2EtwP4I&zcJVVXud$A#I`
zM4d@SI=dOK3=#*1(J{kP%dzl=!Q_T829xIGt|+i(pf2yqfjI?hN}&?xNlV>SN{Y3j
z-PWDeo)$q~aH>qK4DSf|-7mhx8z)|6VrUyP^Doi~&ru)VQ%pX}224FRsy%!;nE%b=
z0teS^!&f%JhPqame|7$W;;2qo=FUAz5PS=jxXRPd{{gX$*fF-7>GMq-IZECe-qBtl
z$aApP62%cg91unk#s;X%X|>y&KR3nv!ZeN6Jng(m<`OU#W2*$wAW>*&%r!atVn}t;
zvhSOPZMVYWG_)2%@^pa2S<n#85<g>aI~eWw#TqG5DAbDpkQF<>MuMaTH!&}jdy1|=
z!T6Kd<Mc8Jn8+&uMWHtW6)Qvrv?6Hi3!-TbO_a6+Yy}N!5Cp!67FICv0Kw2Oc2|w)
zCPRBjIoEKU`~zj?#THSPU^@`zhByd`gODJw2o`nf+p4LjT9-6sQ_6!CEJlp48>sq1
z=fyj;5oLHX;13>uoflqvf$`xnW|v-NUSDBg+s(z!zgjnZCDV?LY(AHR`B$>AztL&{
zhCV9r^*8F=NFh>12`6)=&wq{a!3Pm(@#wRk<NfdYUIvGTSy)_xz~EAcQ!mABOh6n)
z1Yw96i_@HTr@{2hDdrnzSZbZ8lQ&5628a^aDn_ap<8Md=&X9K;X)C8WpL6mlOFXIU
zyi1s$6Bf=x)`@V=AR3Y<DWYJb6r+p2O;>?x;BRr!&XWQLNZL1xQPP3CR=z$EXe1s2
zloNj;gaK3nf87V-+juTk@<hl~=qPklaD<47AP5l~A(blOz!=qSV~pG!v*Qj&G$@>V
z2F|^%G?wN`7SED5=aD2Kl7QG&s0M=!R7a^*1_{FoQ7s?}3^+%gxuQkrtN-3_u{+M#
z_kBs;QpR?MJpIZko_OYI1_xpq?K4cbpJ8~<fj(#It0m*b8km0_Rbjb^IeNpj0pB7<
zo$GZWR14PINR#QguQ4?64l=#KSD*Q>+`9WCxXhAk2Sc5DZG?I~BuyK%lX;qp3(PH^
zW@hOat>i3@wqIOgFcM>=hBb8z5klyPd<uGQ32^hoku-A_&ML>hE>tF!9k&Xzr#)#X
zS4)yt{pwZ-Dj9+!ij=AoDuuF67~<P=A-GV{vc{ErJ%CdE7b!UQ#bYH@D2jhJP{Ke6
z3pFE)`l}@pTx3Wyr2}+w#YqK;G9-$Ss7g>Dq%uCr(C&!wLpk;B!opEF`GnG3>J$u2
z?^v4App(uq-){Ob={X@Xbt>Tm^=Oiz`Xu$*FqODQ7>5Kl@DtCuLkqTLi5If&;HNUV
zJLK@GvwZD|Z!l1=&`B4Wn*TDxHy!L-&zn{6-2lCJ173rxFa8^O8gN7H!E0gEx$zH3
z3RfRnwP@C&(Kw7mgUl|z!QN5Fdv4!HXyI%l<@A*B%4^e{o0+E3IS-~m6la7XSQ}v^
z24aL5Ljah*QPUpHMGBcQ!J-+YEkE8ne-e&84!3?7cHb{F<{d8g9Rsl;IE!hfpb2pd
zRrNb|WQ8bHh#)U-soz&j4z?=*($^OZ>F)dz`Ql#~_&^d^&x5ey3yT^FE`Th6M1&MD
zwvLGfTZxfsooH;B>h_TFJC%t8LVH0u`Iyk0hfceLw$q|b=vxp*D&9WLwa9geW<E_b
ze}n0kBC`f715|@;3|4kCSe<03K1QuFOcYe8RwDx2dpltW+qS`(>GOQ`@ox}SG7{Hf
zdhRiX_TGZAwh%rw>tlYAtAP1sUGK=1c>w$&-~p_Q`LCT(=V}4N6vUHYFr?X@rY<>u
z`G<ajkG$tzR1C)D3=C!Dy1>lLIZiFj@%(G2c>K9Hc=h-+GqVY4<_N-+YDI`6gEdhx
zs9)M#6(e^TuLW3e4Xhe86Vf)=C75~*25*6Fx518k4V@)$9p|4SaRilsAgU9`P;tH@
z9$Kh{eo<!ysfVoBGV{`4g+@^!_^Ab4kkE7etreok58fDj`X7iOMWArjtMz0kiGs5g
zY%G{c1v@lIWjtc^0PMI;u_2s%0_ILT(zZi8IhuK$#j;r19XLR|bhwl{?QL?JWZ4w0
z>@{Xv0d}rRAj8DLC_}Y9j1BCiRvV^P9im>X6XYpJo;<@#$DSpu<>Z+%HTPA9cJIQ5
zao^&<JkyRfWxOsM^KZWV`1a=kyah1-%0bCz0!a(D4;|o>pZE#tgFE=uCo^)F5d~0<
zEd$j_CWj{3IRt;~Bk(7`r$Z~B=lHpEJoWrB9)IoxFCIS2x#<phuEZhKt1)31AOwE*
zQ=fxtQK8pjfocX>3zAtl^)w7@gRy-ub6!cCMe5#ys2=zkeX9hq5Qh+3s769wEPg2@
zy_|Sia0*R8DbjzjJ^++3zyu}r*J~Bn;uHnN422qR6zar}>Lw~kP$8(s*uj`+G-O~8
z?7RyG$Au%0D^ssQ))qAJqt5C|&9z=OBt=lv!lOVn!#RhjK}-dsAz~7gMOxVuv&}Xq
zr()2UvC1%a?7p4xeFKb*Cj>#l%-l4uA73I5XBgbRgD@T_TK(oKr2SV9^REqKZ&(QM
z*1-H1-(PY;@^-+8+sh|D_UC9OqntmH5Czr;hE&Kq&~B&9HQ<#qULS9$YMB_?#*Wc#
zeBuN5@FO2d=wx#oK6{QQUpdL6&z|9x*V{}_&*0n$wQ5YY5)cG_YDWrFL3Q56$E8Bv
zR2paC#B<6m?-RD&CA8;+wm94Z<Q+>G8muVQs7U`UR3arU>i}_~USvQEww(aR3a*^F
z4Jg=u-WfP3m4C~j#A1q2`vgOrh0F+v0~=Kcj1Z4nYCB=_4rOE)TsQ@%pMt!pWG$gj
zHMJ|9?A4H^Z+5`9{X{HA3{D|UQ`(&lNhigkjMfIY?Uq}(=g>~xb^93K^zLo!zjKhv
zs6pZy#3L-sD*x|4{{sK!pM06>;4ry5ynpiLI`&)}%)cTJ;6|(g$htlItA+Vx(;rZG
zUQmQQ6>6PbeEg$7Ns^7wXr+WUAWN6e(3@r<G!cm>+~ly7q#T{`Cv`9qwhd0OYkV6&
z{B8H}XMUi~d~=rP-#EqBo|)!}XPO*6+GJ*?hOy(+2WwQq5MzudyQE6q0cj{RZ$N#A
zvhyAxxd+a+h0F>r@%{R^(9(+vNFN0dg`klq?f3zjLOUQY=IyN(8ZC-MQtbXd%@1r*
zOf(P_5+|zCYa1H>e7Ptc2gHWB4wXq5Js?cpqBNUu^f5^11x*B#DXy5DEZkDMr3j%^
zE%k6H$#ar4qm!hNwHc`f+_~>2-g*0O-u;g4+;{gd`)?h95$gj<C!~E=n0YxSO$H#h
z42>Ip>VN&C+;-=!{LD}P7Wv+hixxi{*!j5%n4b+`{`LGbZvY;^>ekP1F6Qt5&ZU-0
za~B`|)}KJ^7>%V25ku-cE|#wBo#(2nQ(Pu=n$R+(TaKTWTQbmG%sH}<6CHu^YQXN{
z?cB9vCm;IZ9QQvpI5j=ZlP{g;D^Jbx{PT;PIX_OW+o_JkR4P8>(8QsOj`ObxwVlf3
zL7_D(ECMc7!dQrlL7t$f)(2LIB1L1c8RV`IG&Tj)C=5)D6|cn?c*?JhJmuF~hzkF|
zl4k3qrxc{76zKpbLNH{gRAA&L*nTSnv2gV3O8YdpMA4*>T5~CyXMn?q&o*)=B%Opb
zYtu>R2(-<3&2ZqB3GTan2j6t(Fz+}pz)gFrFc$j=HwOzRV-}vO(w?u9B@wD2LDf<n
zHv}Vw`F2k7`w8FviFe}CjQ{N~{}0T*aWb!7a+w02mxK9b1DJnhF2V4PR0GhrEaop>
zUv9AT6MXnXe}XXF&fHAqEAs^|aK<kf<NJ06N8Ky#Vjy>d=6<lHwd99!;uzuqFm+)%
zhq*b&t8+Qkmxb+>I(x?k_|A9S#KYgxW~npFtLNr<?D-Qs_S6Xu9~)+NVH7hl%;0cD
zl)>~ds0}$r4l2naXd+as@B3p*`2Zm>N)-COeVX>1fUw2DO(ARMm4EuifUTdJGl3W1
z4EpICl)@o&MFzy%788vK^)Y4qkT5s_XI_Q5qkaHK+X5Mg%l*i%2%Szwd#ORznWYk*
zWykiM{X>J?zhfT{+&{^kw+^#y!ora8m*|4w!m)tqM<W)NYIL$HxedJqTg?wYmHMmG
zXB^}?p%H3v!04}Z`1TLq&D`Hg`Nx0nOR#5<i=4yWWX!)Z<WLdjZ_FCNN|=BB(&1(e
zA7!0Cu<W^=!A+0w!EgQ%D$#DHr*cF~y?)O+%S905$4`TxXDx>IhHISoan;NTc?xM8
z+6`z#P^tJ}5Y-Gxq_i^S)Hz4x91Piro%J2uymJTd{O**W{G*GUnV#pFm(TF^r%rSD
z>=5UkuXB2SfF!Q5=Up(C!9wZ?n_js%iu{gk@Qc`nN)!PpkQJ8UdC`n;zN(M(7P6G1
z!$lB?jE4cXPog>~xcO2j2VtSDV8@h^12C{dnL7hhuL~xzkb$PqZbIY266xYG2Er+B
z*`9Fc2djM31ADpqp1V14`vikw1r8^0W`QKlIDOc1emY{VQKgwjB+inHK|=LXYA7zv
z(F>5Zi}q+SZXH>u#6l}nTE>!m+VSuw-^Jowi+}#_9w(X{=s5&khEeCHWV~c^DZSk2
z(}3$^{wtpc*w}DJiTeZc={nzh-w!h~avL)<Y0;kZ(<FW%rC`oEKen0&zE5sSn=j|p
zXDLU0O=<pP$TClz%@f~Q2qPt|7X1C1ki|;dz<dI4ya9uUBeoBWv3+8MkKL8=u@5J-
zJ1t&+b(SX|JH@MCj9EA`LiMgelD&hZOAyx~lpLG+1z=3^`XbQ8Q+;!vf%|XFaymk}
z_@%3#=V3%pJk;TZiKGZ{#wgAY8PYLO+YQxy1~J0)DOj3;=9xB~GxLOtbL<{i<gO2<
z-2aZ4`|i7ygSU=S8L#^Yk~wH)WbGWer^eCw3SaqUAsjMf_(G)=Y(<wT*@BW!X;-bO
zoCXZ6e~p0@{s>Od)Q>k$Ye4j?jz9I|4|3+@0{`u^hq2=|R-gA@*&cl3m|r%D`7g2u
z@0v;t-++ohSA_Z3Csk}5^ZO$`AM&nSzmJ{U?_p*tE!=Wk-*AuXrk7>9m^wec8iiid
zo`QtZt!Ecj+gk8$U7?8V93%;trqT)^ilI`6N=?Y>N*03)pqUD%Ph09I48vi_<V2mj
zZyMq5pXdNB&b&6yiKElJbX0gl28f;+BfNWvD251#)uG0b885*VI3ZQYRC}&J+GA#y
zD!cS)@CVQxsSWT-yOBarSceC(P#radgFZ+!mJ$wszD4K71;$&meDk)PcRy6)?tALo
zvVSMl$zs8$KqDhPn?ss;nef06SObf&?|#FxPr&J8-iAEsK-N(oyi_p7z>oI}@Kb-K
z`g%!h67?MiQ)D`A3}@#I_BWLO^>2PVXU;70wO6MIhpK(9NbA%DWTQFi<zW8RhUMnp
z1ij9yYz1=DP2V}1OXaX2qll_37hHc+Fn{?f(%A}k?*16J9{4!3vq@LEykDWc=XWp5
zx&@}t&<jHd!t%LYH>>P!u%*hb6pB1v9>~LJ<5Tw__OPN-gZf}mNQ{)g`jP&c2vwBf
zSQ(p8CigqIIR|afINjvr)AO7-(xyEz%IE_-uy+m6sT$hzkj^-gMMs_pc~-OnORIv?
zaoF|*K}_s5`{Lp@926g9WO=j&OAD}c8kSCVs4ul?o?Yb3@ivD>EO+e+x%;+={RgX5
zCu$x~<UrHUIgl0lgQoNaP*R1YgE#Y-^Fgw;2*2@fT~V7Ud=5)_#IA;6aSn^16<SY(
zvPJ7MvR)l24h^AEs*zGv<>tK(d2ogw`|)4mXd(oacx|tWYmE6XUHGU-AgbAHD{mZl
z?zulVTi_LaduIS<{TAo-!2I3CzYwy2{QcZ^=;KUJC!nr7%inL-S$-*<bWNcd<?!ir
zqEbjsX_rM<8fzk6AHWpK!2W*i{uSrE6jq)=W`(RHbe5Db5~3L5s?QM8iqeUofnjb6
z&QBReo-quL4N>1e%x#~T;I?#;xg$-^zjB=EKS)`MLz=g5Cps`reOo{_2gzav2C`Io
zW3bY56e<gxMuaf74Ax*L&<2jrwK)9LA~R3SBPTL;ZL4tiO%Vt047vT2V+>5jeidfG
zk|UjVeur1DHxOEb3n3L@DN&jW%3>25O{LuyF9_Q4ZOe%X7#M|f$CbF^I~&>+kJW<7
z*fVe{KUe4cqnz=gEV&cX%x7aA^)%<BM-8{t$N5J;_dWc{pZGLOLE(M2=?>M^!Tgv0
zPQNk8@C}jyn95-zX0*?S^*X2h%YT-)g-Lfe?|t{5WoAKfc~+$UrEOKuFRvSxO9mar
zSHi^<yOHs`lM#ZzZ+hK|xp-1bDFP}*o37t6%;RqVgTVOifiJ{)93O;Gsrp-WK&Vyl
zq8|oo3IoP55a$f-a#U|Ouw9_tVD7nTPCmKFD`#>}4GpmSeS6roZ-|+*j<n;vo`CwX
zTPF}!1FAz14S8I@u+U`g#5_wcEi!vJp?S8&9usr-jykvRA7<BWgK%dI6An6%H5}UV
zY(p_pPU`wPK`yisrO|?=1~eN=yX`v^Sq6FTAyw`m&xKkY8Ydl3{12sCmqN$b*B?r$
zbK9*~_^wCy=io_9wwPxyp4Au?-hy!q)zoqKdxfvgKhIzItG`9KcY-{3eH7s<!2Bzw
z{c8*z$qHMP1fuF@Te&&#+;cyCO*4S&767c6QN1JpY<BUl=O(lo=I{NE%Y=A-2OoU!
zr)g&+bdnaPNKXV%)3>ekO$p+3*@q@#iVMADt{IPKOXG?XQ;YVr_Y0bFSuZdmUHmPD
z(S=CQ^(F{B#4rUpC$vS~paz43P^<YCU~Ggz1A{iBUdyTNgy0}BZsFV%&;O@se)Ex(
zh1-R1{p0r#5Yld>*f8`NM&_8EYjO0*6lV|5;!ZoN^C`Q+3Wv50a`*mWcHdlwnt{~O
zo^njh3ojhA?0eX7>p?>{qiEq#*mlrPV6h2HO=z{ely|$Mqy-dlxgRo8C%9a3&Sz4k
zr1JO(eC@wFl7@I`@)F{gbqdp~SM=Ws4bol^C<ska;Azr9(VnfPId^`@@{8a2D*xxd
z{37+;6Z8P8tg-mlfTEjS{Fhv}{SY9ZjdF9~%hxyn1lP|OR5q6I%LWT9D;7>x+xbml
zvn4Q7<AHmBgjC1qbe1rtoDS>Z;xeUNhFN-IGerSSd&)Y3FGo8;)!_1CCl4S;3e!;2
zD<*2$>n&cH6jE2EHJK~OHqP&mHia-$ob~O+RzqmaDU}LT2cSNnv<F~G0;;Wm$}6y^
z)g-CT^Te;Wm^wd3qqD%5f8k|bd-@cA_2)mv__mN!$67r7yC;}^tx5C5B75oqAHQXs
zyFWC}_T4q#8t5o)K{+=ioSITjTriwzge(F}8NB$b%C5hpG&7;q#P9S?Xf~Bj;>|m<
zf{f&HA<rSti-oVgv*Octx}QUy`C8$&n}x$qC>86WlPxq1`mchnF|qa;IT?YxD;3bw
zK<N8Kb8C6=i;f@q;DbE>>`8v>iR0A9M*QQ=+QUGy4l!s=hvBss|8;K%zBz5cOE}gm
z%Z15$K7z7VtM5`=mCjn;vG02s96rSC!Xnn#ZeT5CvU}d1y2=NpUEjZQ$M8<Pen%7W
zL7}{;O;A{0=RO;dqDp8?@u!P9eeKigFE45>)P|h%a#?wy&mROzhS12ARs$C2pjwCe
zpi&=zZF>zfRQPXy>kRXA36C|t$TKHjVR(2qFF#)8ul|w$z@Z1X^U@b)xMSch{=^U7
z&U^n@1uEXPhYKk)$CNYYlv6Xpg-*as2j(;AX!-v9Ykd7x_=C?mZobnpH>b2(zMz-o
zehk_BC3rmEbwAEa_2e=D6zWRa`&<_nVf1E@r@h*eDOR)V+f1B-b$&p}71%#0{rrk7
zs|)}Xip;t5f+C?6G7(<=s^zc$$anC<YyX~8?S!Bj6@X)di(fXQ>o4ofr1bO+-Hj6f
zh6^^zwd(WBh9(a4j$tCaott)lfcb@1*PFid?kmUSSIR_|8GZEW&WY)B#4Q%9xZJzt
zI<HMHDyWr0+paLWRQ1I{Q$D7bqx33}#ja(f_uBGe5jan+wbrM{WQr@b^@06$!+-u~
zM>uyj;km|d@%X9dc<|o8#Cz_)i}xLLWXUOBer1l<z!=Y;eT9GU^BF%jb%^i$#3*mP
zm~-}gz=;bmuU`B!!!PJGS6u474U^0-;<N?d__DJ5Hf3o6+Qs7cDZS!yDJ0YV>&ErX
z0$t?5<n<Ljq-r%`WCZFHN@H3HLO(cEYJ{qKbCA+Ez)^Ur28E-ul=B8s6maQteDVP~
z3gG-=PVLoU{??Cvf<OHae}U+xn~LD3eNthY>GN+E^RK`IxQ?b>!S(Y7HyhCKTYr#Z
zvjx9y?|xpn{oaq0=BCGn=~G`7(Myb(yZ<ig0(uF1w5aME>8AA*!K7$nA-U(esPPiy
z<u4o86Cv^OLVJa$Ld~`W1yTrH=0(;~Zo#hDRh<)vp_3}R_6GdMe>l#oFEmN)X&ycG
zb@uQ0LALFA7o&GU{cgDL&>`MG1=~Ld|M(YXc;VEq^KXCof8wTFtK?eaXqwZkcv^Fo
z78pL!qF`5;q~?BijRN7stIE0K4y+|j{4Sm6#mtZMJ9v3UyTYl?yCtL23j}>9*yWHq
zVSKM){#@>5#*1^D7p0`~@uq;ts)DA4Z-5olcxf;xl!H@z1`w8pqfUqeID9(eo<j%t
z!3V#Y|ML9P43ACrn1Y+`^RJWkug3%6hBF79Uy}xLZ7~1x#h;}a6V=-o8@r7p$uK7D
zR{bvl5weEEap81RT6}9)!ujHttHpo43p;nd>YXH7EDj-eo;IAh!g}oDTj55ed67ov
zMa$4ZR{G`@MwyKz$Ig8LhhLfFcR%wgi7fEQk>8|V*-aepWN~_d=by}Y;&8_6os7Tt
zUo-yGZ=I&ooTuqdGS_;AU;gw31}7bzB_&Uw(}2dDk}Uao{yY&}CS4tWm-|d4X&PRB
zHYbdgBq=k1a`*2=Q`P?25dWTB;rgRxU8V16HeqCsAXZ6pM^4_eW-A~-rjV+Vx$;){
z|CL6fdGF>;MxkAN?WE93ge(^hpM(z_dOz_}6X){vXZAOY`DI<q|7O~Qo9hDs=##*@
z)HGqaQRq6DUp9jI%WJM|`zezn_Yg*&0b|OccI~GG%Q86Ev$O8Y1>{orx9oM5ef2&v
zK{-lWV%#hj?`)fDu~7UicS7FxxNe$Uw8*?<cKIB=i#p4dq^%4L3sxMz@{2DL#lmxE
zf1mmEB=y=YRI3vpN^4OuIXwDEzzdHpGIjPf(zJ<4jX56Usi)8K`s=go*&Wbs`*CEK
z_S$shC4TSSN=D@27nCe17Ikqev3)<ON=w=FK6q6ctI+rU5g$w{!$M^k(oXKxmkV!(
zEOTVJBg>Vn&xtu#?c)3_6VhBra_=16&b;ezJBLnjYiH0(h3WZ(%nh@1@DQEWQfch4
zGUk_cye3w{{IUVVkvE|VXs(|cfUcAF%c>D@y$C5QMa{mgT%3?}99Si;dDl$AblH6(
zg(6L%c;W9eUB+M8BG58jEh5BnPNQ4|dW3$rAf@yVC>C+%)9bvi1y-i>uCU0<)GzSd
z^#=t{D$0x9HOsyE$L{?BzwxUtGdr`uk~_zd#ji40+f5XV5QY_8?hA-E5T1TKqp`Gv
z2Ne+70cJYKSjvy{+0V|hYp)k2(ZUnao1sGHJhmwpxXV3{Ac&ONv%<_dM;HrPs@;O$
zCAXd&K=-}$-|xCL0V#HPVR(mlXi*rk<ath(W@K4TmKDy-xfVgdQ=U^Nq|Q4CC%G3d
zZD-}e_j2Z~92$wT&~%uQkn^gv+fgyHyw)|jTG}s{I8(2V`DKmk`i8RyUn}k34Cdc>
z+TZ_3V_;$N6z7l6F*s%!8jlEUfT;D7Q~lF1D!uV#UH-G>A6ie%rkld5PwgF^rP3po
z=<?K}v=DQUXWri~cfDd(Ucdt{oGXP9i4?YCMf*(reQB!fy*1>SCob^R({E6#2D~!$
zS%Roa7>p6xK}0Ml#5F@>5oXUj(zJ~h<AGu<scW(%&+y{23%vZ&0^278I*ETjJqa(<
z7leB0J4VPe%c;XT)tY+Bu}aql&GiMa?$>VLzpo%j`IypiNolv0!R-czE6iD4_twh@
z9J#6wm<0^Tw4fR1N>T;_=l|W#ppiH_IY=#_c2me%*XDP>{5t2GFA{{&b;kS~89I6!
z7Xi&0t-j4+e%aLGH^uk18nD=Um6>xVSXi27`|b%ww~dkK&|GpPt=zYz#C6$wdNDIo
zSNS~kq9tBt28AzR`6Rjm(X(u2l^9=bNqCWhU!Yy!<oceV>^$VTV|<5YcDBQ3KJyfV
zwTP4Rk29a2WVmt=D}w|<9SWLk5J6)Jnv05RUSM5=n1C>-Gt)lINbNkI|Lh3g@tp&n
z%3sb7IR7qsn7xPCy-Tlf^i?=;UqN|x+DFsveO(3(ba}J2zot?uD5oh5PFkV?L)yu)
zfhm-fecRP^2>^I|_HyQ;m>I~W=ZIvC5JiT#W{K)v1oh0~Ja2sCEXUrMXTJ419lO9#
z<(8s5WHx~LxeA#726qPP?xLa_h=P~X=U;i}?*@Xv(237;Zt)9j({JJB=g(6etg&;~
zE=I=37#NL6TF_d`NIO1vHRUv)6m2E#J%8E1U-lAp`Ddv8y^k`HD0|Y&IP8iz&jgZE
zxkpN;8|f7jyBB$3F^*EH34;@c-~RPy$+8BCW*lF7geb0KObufzgh9Q~JM=?I%?4y?
zUWjgL;f@nvgDUOx91VSmH{O`!)Ts%^$A&n0Dqn`-3lz{}Nm6+Ag)nm#=BIMPYDlNk
zBUhEu{bjqagaQ4NcwO?9u<Ycz9PEHFFd<wx>ZsUWR%DD9&M04-&{tn@J^%z(h${h=
z0ZUYcBuhE7FwcdP)0{gu#oWv+#zm+sa=!U>M)vG0UV~w6-TpO(d)DmpuQCNI{g06A
zrVMx;hk<lOXP~Rq=U=|~FTKAqQsu(*vvg)UObou0&Jw)-$_oT>%-HB8liMd58XpFY
z=rp0z%)A?o`oSK(s6nX93@kl+tiO#VqRTFu@&a9!Jd~`nf&rvOTdedP3=BA1EZ)9X
zAjLu)-4XEQ<3~7h<aNdeCwO)G(>R+F+i?OrfVEYEuv*kB495DpgWrK24n@Tv5+MZG
zAmT#nNosNzPdz=%2fk$pPL;2%SHn<OwA|?7cRyrgICDJX;Qb-3mKPrNk1c8<#j0O6
zYf+M)N_U^Wno)V)vJ6JI8_vE_l8}n$ae^9Ka14CQ)Ea{g43%0)wQi6Anw<vcr)Ib?
zeSr(pGc+1a9~_J&2%0oH$Cz%uz|gL}gq6WHiqu!5&%fTpq27S9;4Ad(uN~%JIWns%
zm9dz{(yJ`YzQ%Zb7o!7rBCf*pxig$UdxC0hfU)syjEs&kG%<uBps@r=EAvxj-7Q_a
zg~2X&t8|!^zE>c<c7W;IF{OVPzkJR8!$-x`VD5Us(;9DGCIVUJ7~dH(Gqc2FUw@8z
zZHV&=PcoamOeGq_n!&<}C?>G6FJ@X#n#q#o7qKx0V?vCCSX-r;T%h4z=8e|}Ie7av
zM#qM@FqQXsP_C~Sx{S=Dn9y+I4ab3di*wP}(kugopPtZeb|d|*m%gB&1-nv#PDdHp
z5n{u%n@yC^19cc15JVwi91>LoXF4=mvm8BofeTX?m|K`3O%g&I5QP!dP)U+GW}0u%
z;sWvDC=)yGK}@iYfam34em1fAumAC;P=PNW^K%)Ce|aY&8i-)fFthj!Gjq>UV=of}
z_fw0vk#;(qIQ9xhk0^tKBTR1F#mLwM!;=H#nU}Uo+8KFPkVX5LfTI1<*8MMUh1a68
ztc|$rtMn@<_LzdM)FI5hqEI{lU;NB7q;3h5J5IJ9Aq)qxwnAWQ7zqh%g&?RP#$v5S
zjOPrv!dtJzBO=z{Fo-o=Xg@){dK=F@dy4nIX9zRX2V45_O@CUiz78;d!O&dDutDgR
zl(kns=miexgH+mAM3r7dk>0sX6Brt?)JF_Uvl+$;p$(~2Vk-53z-F{M4Ngx_F*AFC
z`GslPttNSv5rr{P5E91$t@J!oi-+l$MNC{Jo)~AmelKPv^1p17-pfW?eH+Pm<wi3G
z@p~ZMiTlgt_M27RT4haX<>D0gRpl##H5e2+?b94>o+MrxVlddpU}YcGXqcqc=8ZRA
zK#m%QhQ=5l+s???B%|Bvo}{wqVS;l#3V;gB1t;}V%}MREAuD<a#p3VB4}B8k<#0<^
zjaV6(40-0s*Ew_M2!quDPRxD=XFJ4p1Z!$oTf^FzFsNg#ml`jFOP&=0fIhB+3L+sQ
zmeAH{re|o$5l)||bMCf9s`WuSv-vVAv=)WQk~XXAyDhDzVd`|wwtXR;R>7j|=S66*
zBr5cV`nA8<S}gvu*5Y!o6{wF^$eM;qT}ZPwi=A_voI39p{n8v+k`UPnp*2*3h}<mE
z=p1Icb-}wHMG?`qQO2qVih$QwhY?vr%wrvr&!#Z{ddgTgq&1jXvv?wxqw6ml(fwb`
zaM9l%Rw_glaCwK>=F`k9JwrveF%aECE!ssG4%1p%<c+y0%+Y|s!BKYZ+R4E17{h~g
z#6i2|J^j+e*9Ner=qB{1w%v`t#}bfUAm}|#yFs8F9O~j>rwnfoIe%e}7oK~Lf$AW$
zt(Te0Um=c%5ffl-jlk3~rh>IK3I&4hV3E2KyE{LQi~s>ftcL<N!Z^cJ`$;O*TX^NA
zV?6M{-7L)YF!?f4Pv7}>MGAlFSjzVO7Y|nTS4ayWpwibpDfATkW&^?y;+hb~N?0+Z
zZkFR`PmsEK<`<^uB#T%H34<yjg0(5F^cb_v3xwiGY=_G5ID@slgwfElYpW;tDm}NL
zH5T&K!~CqHGQ^E)45G_gKGz!aUrISx`+j2sDuV+sDCF537n)zjEm;PZZlxMc5{Kgi
zGD2fvmX~JFU~I_H&?J-Fwlg|0&d6|`tmEmkX(#LQ-;L?JAPP`h28V9TQTo6`*+wkX
zce~RsDAhrO4Ktqj`cohYS)OpZ@p)`m1+f@YAuu(+_)P^HRM9RL?=R-LqNV2wyF!bo
z#Yp6{fM9^7_EB2#an78sF}E;Jr9Mo$;C&K&8=zOLa_S17KSvP2%vmK%a>UyHsz-O+
zvKJWp26T$d$wm;yf(?9oG*6VN^Nu*MoIU><uOEGe!GStf46!kE^7AyB=V@o>QI?3p
zn2#QK7a?u_`?<5!M{emWx|Wbfix%-lj5@gvnEz5|Ai2?uLDpCDxmuWih0#rsb;O;Q
ze*iX!s11+9Ff5#Y4NYcQNSYWOW~j1{db}Gk6&4q!n3*|66jm4>o?v`(8^dGcjEvRM
z+}8}!R*uWG``JrBqtvimaI_CbmNew@F~-8+h~=rrpJ#gR6a&>7$LD?zXEGu)gfTJJ
zR57Mn1c0IdSUyR)%N8AgQuvfE>oG21K!A}DvBFH}Nvh^%UVZr}@3{Y78jFRU7#E2q
z_R)K70L=wqVK$>S5|VWCzGlBJs~h;h3t?3VqC%lPh4!M-nuE@w(rGJc>X_UHp$#x5
zr;)xuvvY!6Gn{dRHlkh`W2my1x~+5XuDvKz{NA}44^|4__invr(?*?Fg8A8W#(RSn
z0c8VTeVg6+*O6<I^%PxJ`x`yYJP8wS8TugBPV)Nf7dYE`3~4?}J(y%Lx`ldWFPMP2
zxpPcSpC+&&LqlUsY}>)e#5jZ71`wdV1W7Z)Wu@v*p$Q;;N+U{9>6dN?!B4U|#wJ6K
zA3wvZuRKSsT4$#5B8&O!gwY5h#_#y1j<o|=Q^D8>D^ZWOY;BK-Bic>ZJ;X2=2|>JZ
zDHy_Fkj3N(o%keYPX*kxf0oL?D2sDhw^v=Z@0Kkcapb8mcP?Xi656eT7*xzX7>hSF
zjl2PgQ%G7$V;b7?N~h%~4a<zlTF-<C0+?w%#p&i}7_5&XfguhiiEWL@S|Srs4+j_s
z0wxDi!qJey=W1x*6zbJ7?buw}FYBcJvO@Uq{DvFM9CWqx=1Thfo5%bcj__Too}U~v
zMi`85rXKB~l`qgrPO{K=6w~+`^<a|W_%^EX4iH$FKgaaUNkUs?Xn357ZQB_h8>c>5
z$6!cXkazN4W4+v&Ou6_KF@D}Z&y~^bmQLQ{=_j5hh#W~e%enTK2*P^txQM`32?F2y
zHzptms)#K<Uhz7Heo#kyJD1Y!0+be@J_`s7Eq=p=_G9d<Z0E%nUgd#zKZsfI14`W@
zX7RitraL=e#4taVA?kxcP=&BkI1?ebL}|<^t$FA)l`JXRh_*=2E#0g_3iah61VcbQ
z-p*ik(nARx)))d?p&HZ}h-*xkhy%BeGFM5EJiCa$u@R$AuHxd~9Ojq)fg|Mxw+DZd
zG5?CyR#_>uD1oV9O^6YT)11&$2rBz=m77SiSz74@78+m1G#mrr4hExrRHNM(8x%0%
zG{(jZ42&?jZ3mM(CK%W@fT$tuK+??7OpA11yH)W#S8lq~5C(?-{$C%bm7Jp%4RUPe
zcTk&QOwI4!rh>I~pZ-gXhz|%xg5r#sF1^_=R>2rsggVn*^hQFAiBWRY<wU_SOP!;%
z+!4}q31?29VAqblOr6e(>b~?;jB+iAK883BnLcBXFlTte(r&4j3!7Kk3+jbS9KE)u
zfY@U2s#`14?$~u#uvJ3>6Zzt$1O#FUZA2xgQj4k#gfTm!fSbQ*h{Y501UQlnn{vEa
zn18KxaYMBMbzNtmjnjLt7Uo~6t8fv4s3;HyL7l)>z2pp*j0Dk)$PN;iLGoxXnVYAP
zooBxJHG+nr7ECf2AEXxVz*tM8G0p5NCpr9j%;3N<W0O0W+_s&;(LtghAW!_*Zx}l&
zb>+almf<1z5C8aC&Q8Bdy;9@C(xWW86U3Df&wR60tW+^l!Ab>Vs=gK=u~#lO0V=*w
z*Ilhe5fCxm{(rgn4INZNkeJ*EHVBz&J<87dck|M7&oDSR%E0&l3o}{KtrP-d2x3DJ
z`c7?<G&wtUl<5n5(AE&M=ToxM*rPNdF&C8v`t=nqX^DHoQX>I@9q@%tF$5A21u>N%
zrW(WyRVv)QJ7i$OlE0B-CA>n+FB{PCyK>CGZ0ElrnSg*%gW@)=<a6yY|5{`X|6O2W
z;;2p(4q&8%W?uYL#NaeRT^j*HJ4j>)aX7NPK_i`FuJHxJrePr5!9aMBTDS`_5$#r!
zV@F=$_>tEbs1GqTJkIFE1jA!P42=YA-zyw{ZHdqQ#`Bz?d4)<`W3hFd^UX(zs$<2d
za#R%jY6NBf-&6`RP>}%`)5ZEqA<tC|;|RU6Xd}K0V2DtYqU4Cn34>ue`4mgZs|<vP
z_{KNBz+Lyem$AuljP)d)BuVMC=QwxaG*dIjSzMSUtfe&Ochj79-bOuGIjxnxvdc>J
z_%cJV2BNS^U<dtsLx@aB#a4)I$Y2<A>v)CT!va}G-fs70bXUu?<Jw^UOS4tE(d@ym
zM#1kIV18MDC`l>JFvEgiQ!NH(mPlO-QSZ%dG{tF(YK9>tv~>bgMcGBJZ5r7O^R2HF
zv@Ed<G8FHl7VjkthRM=|Q>WhG<mn@XVOaPO1~i*Zh|Uv*LaTFzvyDdxD#HaFF}>YB
zs9|i~7XeL7V0sL|@&XeBd8Xu9kEzrn<OCQA3MddGq=@7g$x$Q3@fcIBuMpS@m2@{x
zJ^6V?M|M)J$26NuG@1*vI!okPgTNYcmti&O32O8we@1$QBGv8!?`H#-1SRcyD0t6>
z&;~?7jmTCpKx`taL50a$h5e&3+v|obOOZy0tev9;1X>&OuMH`$Ip)7k#lAPc2)ImT
z`z?a`H&75X1YH9?&#1G$!X8vfvNl=PAa!kW*THE9WH?Q6bZ{=kX+|KHARa);$?_#S
z`5b53Pb00zh-HYucrW!}4}lr;qrWa8annQ<MO>Yw*0Y>%J&vsmVQf&O>`|BO6PUWs
z089mADj4e*zd!6n!liw~$z7d;00=Pz7(yJ84*;f=C|80?owLm^GFf>am2f9hQ?H>@
z-ni2Q0muR>^E8qL7CJ|XrA?mw7)Fe*DRgUFJ<6Y$o-BGvl#)XISBv7GS6tV^2O#iF
zzaSzYU^uR_eW1o<JzyX%MN|SvENM%~jJYz*FV_L{ud6<M!wdsmFU&6+#{9B|S3&={
zYY-UErMI?V)_JM#Y7paGoy@gKvL<QTCU<Q_I~XFI_^iNbhLVChPt`S52qAZE(tLpn
z$tzswJV&4bu^A$^qktuKb2PIvB(#aEJG$FxiPr;LC9ppAH@1Q?5!UzuAf@aXCDqpp
zca&OuJz~G<`&twOiBNJ+7?K>p5!fM2HReL+4+xSPRl6M{F}b$M+VdoC#`A-0h*}}4
zOrUB(T(1DBE2v}j=_pDu1m!Kt6mr1?f>`hQ=Q1U-F+-IhhQcbtm6(CR6Of!5972wP
zG@#wg$)w+LcYX1hjf|;p9`myf=I0MF58$!}d)CAJ>qPi<Fn=!>Ey*~ACARg#8KM>u
zN0vd7=71xNs?@_OS(K8dZPL6+-pvY9oXdO=kQ76Pb1AARR$@#zMkN~a<GI=)aZ5C_
zlQ>NPhl#3G?IeZ4x6eRKP^ABL0y98h>P29Q2yBcEB5!ftH#<>g0jj0Ge(8Q(Qegwc
z1b*?W?*f4HY8nViidcv%ljN>J!=36f0F4-ISSPTN_gzd9qHvJ77SL>JZv?|#^f754
zOVs%MKMaL-%TSGksFIVVUdJ)8Pz`E~4@@v#s}mPSpuQbwP=w40X|9k4bUNOb(Oz@R
zzuwNj5zN1AaC{Xbowq#?fXfo|SVLQA^L}R=?6k<mU4bG;HDVBBNHQ4TUg6d|N13|N
z;Mf~;EY2rb8&HXdh_p_YC1iPv%(ck!gxq!f!Xm|q4*;qu4*xSG!)ioe1|ZD4^#n&&
zSd^C>fxxr%Ok9lp*0EB<N=#s?1VI&JJ*Bs7qxCO1?{VmmemY*k1~dfThs@=E;deU+
z#ycK4-=+-gAYw~Zpd8hFnXIdr2pdEML1EyBE4|OUxZaBQ0W2((5mjsmE*1XZ4}P8D
z;ceV?$2YTQZ$ud6WG*M`1PoN`1#h8W)!hfPG>29OSu>#31YHpVT)w&Is<oyKj`Yep
zFGX(LVIb)<2)mY;Up64oycYJ8O9w!^nsz>oG==iV{SRzo&n+YD&nCJ5-EEE>p5@gS
zXE}eify*6HTp^4q<Zh7MrKDMdENkOjO0Ee=p~_PR0!=(cmmH^AvCy-^BSwn=VEx~h
zs3`W;u%?C~#)yXi##RbKPan;<FfnlsFLENTPk*3S3lJ=VF9sT;zH3vu>U1x3OOZbm
zK?0<JMZJ!KBMd4%lLP5ZGa3t;TT~3SK}WNZqZ!!15d<+``pV~d;kExCm1vaXC!Xi_
zgYV<e!CP6HKgaBBgE$EKv=z0eYY4gXLZC?w*@CdJ&><5DmhGpP!|+>Yq*ty$#Ad_f
zv>Sp4uu3d_Q!ziQerVqC!(Y&@u(L5mS{+3~6vZ?eIce$$!iZaM-^sz-COLOzfmdFd
z=H#&komNg5hE&3sFsPE}33;B7W^Hm3oJ)$upZf2~Q8J9CJ{U-!o^YudV62z$D!Bha
zQS`GW_O$?s3huw@3Y7Gl-6<D)w3P0<K{@1Gh?^*49Fmu#vKC`3XxhyT{O+&Iio3>I
za1I+(yBSDfl!OFIAQ4YI`4~%$^StYw-^So@g}9m!MKO<k^+le2@pl-i@4-mG{Nhm_
zfBFQky?hfR^)V)fws&pXd&AUT+c<R|0wfNSBqHgAsF*9n{IWSrf0>wHR<4xaU_5{>
zy4mc`e|<2&toXX5J36ZUz6R3s60k)o+-i7s+|He2?A|lN!a|$Fhi5tb@(i<62_imd
z1cBG-%QYj{ggk4Lxel(V7kJBy9K{vi_Z%*za3?Whu{QEOf2kCOz$(_%ip;_EwfcIP
zvtM$%bT_6bo}sn~G+|ea)URF;H8{yp=Q9K(FIsj*kSeS8c-WyP$4G@NQ}2c(-lAJv
z#ADxhf^R(i3*>o&^XFgVw*4RGw%c!GX8IUkf9%((L^T455D}_j1uKS1SY@y_USvqU
znFd!_kmpXwr0`3yhQ$TL!lJ`;$Iw^mt*?*y*K!BmIOb;^%)i<-f5S}!vW}R?<$IW4
z70iE$|3g=kr<(@%zvgn5y_^$p1%J2G_WbioT;cxvcXQ`mlN>uT$Kh9JIeWT6nmD4!
z5(NRyRnVZ0(~R6D<awLi_4ou@1OobuH2fe@fHhH32Z#x5jUX68Y}6IDkY&KX=ThWc
zpXR0%YQq%z1%&=_rU-b>yB@1rL^IR`{&h*#Cv_I|<_8cm*Tm4oiltH$8VgEL0jnWj
z`_k8W^x6MJXk#i-otgO~Jo?PP<+V3%qnXSCo_=fyup<6B!a5^^I}x#d(Tf($M!H@K
zDuqK(Zb);>Qp2*)NH;c6Bb%+lZx-{L4Nl3vImRH@xdtFtX{7hsVg8k#$1g-bM(cOi
zf=1&EB91i4h~fxqAj=8|o7~Y@@>TnThqiI()^VmTG<fZ`+5dlgUm7FVm7VvUd+)2Y
z7j`$vCMi;+7D^mSn#CGB_Q;;rShEC)kvIW*62S1EAQ?M={li9p*gpb_F^t53^CJlC
z1Rlo@5Ccibv4c$F#M>-A8haK>9?wXm))7f9T)NrpwYsb7y?al7-22|UulDM_d+G`r
zkzG^ORj=MX_k8Dk=lgK;?PaVkN03q=2m(kbNRtPvAuwxb6FGQLhc=N70!RyJf)u1s
zHVcpiC^c+_JV-i-Kv|-FeBTO@)Dz$-=*IN|`$Ls9=Y@#p5;VXOz#*6wKmt<cY|TOB
zov8{e#4!d^hFD#xqFy6RKA<rB9`NEfzk%;w`ya>$<zz~+SQrABuv(o%po+-JVf)#j
zpoBtR6);?yfE3D=EF7B=R*cnpC|IjBK>`sGLak5@3#e-eBcc}H{Z3>4e#vVNt}-1^
zO~5^b`KiS)P`e5Sah&SLZ6`oV;P&k$eD8ZVFg`wv)2AkIWO5k!oI)5Hm$EX}*CPPH
z=%FF}*fS&e$VaQVd1DE0y}pFIx2j+R<nq!=k+Xyld4Njp<Tqd#7*4D0BqW4XmJB3w
zPSjJTvR0naN#cAY2tpXgGK}TGB?!`K0|;NI)X{LsP5FfotN<!m)}Z@+@Pi>UBuNMz
zfT)N{Wd&dTv#;Qx;~&E7Z+s80UjI|%f>B7yxmt#Ta5D&&i723?)iB7ZJOWulAoH$s
zK(4LnD*lw>e*=bgW+{;oh>XO_T7cEMP7GhTp$NFQFh5$Dg5Utkf^P`(ci{na=qPL)
z^Ec)O1Z`Zgi%iDhRw`hvTE*I02$&Vj&n;tkG>;PxOyKyjF%*k=7-OKdRo)5f8uhw?
zlmQ-pd=ihJo51YsD&BZ)0oUJLLloIrd86H+j<dhc7E$fbY=P1-6NMG^jMYQf-~34R
z4NNTShtyfuw$cQMO%m8rDg?Q}QgVSHbzF?Q0x?yW9oa_8JR+@;Q^R=W>I`1F`egt>
zDSz0tQf&Ys5_bLo3Q7b}s)Rt5pj>bfo{$Mcz_2Y<S_=i|mPF1mi3PMFgdo(kK&4(p
zB?_$<T9V;x7v^uVrF*Vbp(!h-gE|Zp%R%*r$*Dgcz$P$%`?)~@qjjod?>X4$2snOx
z47cwrVd;JaQpH{MTU$-A4#9$Zad&rjx8hc$#i2kUP>K{ua4Rk?6qh2!9SStK2Djqw
z*20H}aJkR@Bkp<5?`QYy&O0;j&b~uzYWCCrY&ozEc|%JhEf;0P&L$uug$9_C(&B04
zu4Ie>k?b(v-8C}br8v80-d~w_LcQ@66FW`6Ee>kMCDnlW4e6EpfBEt%QFNRRP)OV5
z5T0+<qpYPDFrYZ0IyGFO@PX=Uk2QBcX$6zBaj!C}_Q-7zUiN@8@k)%SfWxCnUjSO|
zS?DR@>5}RVN@-cIkB1J^Q}7BR@l2MF2tiDiAcxRo(uHCgC3l5(8>kKBc);tuwNYp*
z_SLQJz$(su8C@Oq0I3*Md0D5hS&;!%=Bi%Z^I(Fh#u^qq@JL1&!Xe^+ksIj$+=c%7
zHSW$X>Q1JFP<)PYOjDF6zgeYgRV_+iu_|KMIdSKbzB8O-4!`zG6y>W?s_$&`kgeSR
z(t~wr2CcLw1lS`7jKi8x=%vpAGRmZ`e>L2sbh4`3V>p%{A_Z(XKpH25r^a8>d8AO%
zI$2Fc&1<pl0!B1@GIAI=&38y?p>~PR*r)Q#998q~(#f3#ZK9>LD<SvU4x@;Gr9%P$
zfsMEzwCr|lfjTj_t}LC{D*DInL+XrxfW>C0y}D=6N1EFU{+$Qut4vrc_QKb@Phek4
z@5YxaL42G2v0g8nGDSLeK|&~DOGaA*O`!~r*X|p-i`6&k@8X(V_-CjyH_1;qT=3Y!
zWp}4_IPox8Qc?~uvPD`wUn}2TI*|Hd{F#p2v8A);oh3FR)deys=of*QPg)!`h-XNs
zQj~s#jx{=ho0grPJM2=ri7Ww4ut^E?k7uj-%?$6~h;MzzI9_I1Pku>Wnou)gXFEYt
z#-Y;FG!@#6HDh;9laq>#H`c9K{C=}(`CkLRwrIsgI1VLK(9#YN1iwdfo99}G`Ovq5
zd2QY26^IKPEc&RytAo`mxBs>X<l^l(J(+S(<0WRpXj7sa*GgNftVY`o->e9X9wNjS
z@a*^$WH2{dy!t%ZnhT1WlKXsx_QWJa+9JBS@b-?9yPO>K9GOyFc?QKC*RP%Ag_%?8
z1NDLcD4B0e{%k!<;7nn}tbVdhEb&Ic?^;|gFmNXL^+YY*R2~VON1?-D@{cU~n$)y1
zJjaGKL>(zxdGGATnmJ+JAdMBNSbkFBBx^_w{(<)D6?a>}nJf(z@8&LQw4jV(6K_or
z(ZNJsZ`Q23=i?2rN0%QxH@68#VO?Ea;!?Y+%;m7)T;Fh(#qtJCw(p;8a?0n<*V+U{
z1Hs>fc4Jc3tmbU`Xrn<N%RX$IFf<_1D7A%MIX({XDBPq!R}U5_YzA+*Y!UyyXMGfY
zJ{Q!@&2sN-Sjmsg$zyaJ%(jp9>Y0F~k{uK2i~Fc&50=JDbx2te`FP?g1^!6G|2c;_
zMOmJ*)|3&9<Q+sL{NxKGR9iq9rm(l%t+}Ws^@Q4zdHa2<>uieiTklG;Pb-#q+C&>9
zAXqW5OX&+|PuiRt@#5jD-d^(~ud5rTpyy`WsUQBJH42Jk+b5&kdpjz%<Y^kXLBQdw
z*9dm|E_Epq6fj})1aEt1Xc_Y*F1AH}i4WNJ??sjuomFn+pZ#f8sZsa>$>YApy8@w8
zXw6(9h-S7KJ)V(*SwHDCCPPbvsD<R}w(smB;$AwyhL#1~-4%W>t>zz>Aj`t^wpCU5
zX4M4?#JqVp&6pl_338*l&v`*=q4NnoyAK~gWx6_>hr0s66lGE&{DefC4<FE^W|9q=
zW(@4mzLPE`u$~gi9Bf4??6afh{C5)k%&SEcnx?>LNHSTf&6mtMNR-S<B-(!D(D)_Z
z1W?@bSD24$Fs|RrHZ9olYa9GKmTXi)wsBp7YFknHzOjyZw+G}*2rv$`btq_7;}iCK
zO}&a(Nw}|Q^qo+o!CdFggxOCnlC^7K&lQv5*huUbN}f_ul73N@x!Q5|+8LBx?P`p#
zqf!F(_9D3U555}EO>FH}FiUvZ;SLl4?0K5Su&XCRo>d#Yl!d)~HcGOyvf*l+SYb!D
zuiYP}>Xi+0cw*R2C$eD9Zdfns;~g%N)Um_n!J=#1Dp_grqNcj7Sz98`gyypaDrzAV
z0uD4C8<)V-5xtn489~7widYK=!ulKI6tTE_m$cdPCp!rA<V!dyz#mgk-ktEOud--}
zmu0M@)|7m$;^Hq%aBBHg?s1_aqgi*_0eycTLG8|yC652WzHC+XLSc!D4{tAZ?fPKC
ziMNDr5NVk%-QZu1rDkmAi{bIO-Ue{yQQ3{xb^da$tN8=i&WAtcC(3}O<k5ZhLaR(5
z@ikHr`$h|ZHz!(~wrOM;^d^}qq?8teU2K!>u1XHz>=_y^>7kUmgpYpYU^<FUWm>N4
z6G6lF3x#?J@dpS`;>(1Yk#7f61JqC=#_1alKw80e$aM+`FBDVMkK35grrDRA?PteV
zYUViHg-Rl|C85J6u^1*i){hd8f3b3;BtxZJ$-Pb%fUn58Zc5^C*W2ZiZr9Db`%@TY
z{67Mt+0_(!FR|>ZKBN{=IZqs@tj?aH+jIOQM~gVY=%327Y~x)yU<qYaexu2(FLO)L
zL2BN#GxZC`_*USxG|5t!t;OjTDq4qO7&+RieJ|_7LJR!WQ%v>_Y!404kHN->m0~77
zY|CpE>a^xr{^H*+NTmXX5IRY-6M#@!5I`F+il_Pm?*r1k2XXk*vfLP@(up#qLMb&&
z4bOslwY@nanvPPDLh?w*rB$=~l@fMj^u+6JcvfF#M{C536zb0UDK@S!n(+QPkNx>M
z@o1l_%;$4b{Dg0X362|r;s?4eIs#-@CGdn)(>~!NHpiE|Joy)z_cG|i0R3*s*W`?{
zxQ#CdHs|ZYqLh^^xfpCo3u%HtjTzihhX#t*_!p0J4&oCuP$eA<c&{W4^E9gQ&-lHJ
zTib{wM!243*nKuLt?&ESP<5dYU74e^LBw2_@bs1%p;Gs-kFl#?iV>@d0j*-U|JgB3
z&AVLHLJoZ%uD~#1hLWx{w`)S%VF?+*M0&`BZP2N`v)BF>7KpVVi}6SA%#&#6&Hm%a
z{<Y}Cuzb6QgTFt-7vO>a3d^g^mN_;5*P{|$|M;n*Zlug?nU@ewk9o1TI)_%c;-&Yk
zyw{0H6y6}-UxBhJSlg@3X&#~4i<Q)sgOy2JyD{P2<S}j@GxBOf!Ks+yfMJk}x*&9H
z92Ty9>OfLQvR~%wE^!%cF=hHElqzrbj<pq0B>e2+VKR8D>%oz<GG<2T$(I!rE_gS_
zzt*3Rs5SF?dc0K#GvMLW;Iv}3dJ_s4P^oqj5Hape)63}*p3E88Ibbv3FdxdhBTU-6
zOxTCF?=5aM^wWB@KCVrr((_QTJn6Y~8m;Kn8YOrn$~z;lk>^(g;M(u`p19iw_mf}{
zS55?pnVFY}weB5|>E7p`j6x0(Md?fL({+S}@C*O^8vr-+U>yFo(&~>z*YlHPB--MW
zvc>$*^83GxuF4ngSBO_{zlG0Z{1+7(;BoCPz7HPLFM0jkB@qPjzJL;>oydnOeAS<I
zvk?HIziha;l~!&Fd8_W?1Gc}1OUxYKyg_|!!_Jt_MZ*kLZX6kX#RU2N%t<r@U4h)g
z2iUJ}JFIIH*wNMGc(aJt@tR{CM?TSimiG+H>(?cjazn+|8gkuQyiFy^o7T|T+wI?E
zW3|ke9d<EHX+dA&A2wu5Vss|nK25c?JFsO}8h!Uqz=QK65bLzd@fbxnk3M`Z-ttRr
z0b*0-1l8WClvcLs;iYWUGN@3F*?z+rP(5@J(1Z8`*e}Zyly6Rna}~lQ!v6W%-w#<i
z<%23_N<K+}_anqg;Z2V9kT}ej#2V3O_O}|m+J9+?ejld9r>{xHYgJ!Gr#4mCpVIeI
z{lTTwq2r<_tfgz<)RG6$g-Cm2I}4#)VnjBmbWzx+#m_pnHmfdoJL{oj#9Delw4YSD
zPQGr@-kHb9i)KY~A`k46QipR!N$Yp0`)~H5I3<sKFr;GA8Ozbxl61H0%cB0>jAxf`
zieV4LzH*<f7CU=^IK4UR>f`Qz04Y1j^0pilDltZ{M@c0gx0Jo1R45c%IAcCn0c0%6
zU2{fFRnWyU=JG*YXIQp9jPmH_(hb-r(GL70=}T5(!fke^|J6zyl|nN9sS9FH+>lV+
zJ*58IQ;}h9H&r6{@ivUoh<QkE|9mJggM<YCBWx&fEr7Y#!D@>yfgj@t7Z8{baLLg_
zqsR2|CwsE&ki>n~GnJqop(b}y*X{Qfsvol`P1rl<X~`;*5^?{ON!l*=96JMc(9_ik
zLN(Y>-v(ApZscNygnz(Q%0238qIHp%B7H3HP;I}3QcB+d)?wGsf1XHs<)4CcMWPxh
z-oEeZb2C(aGuXuUWP{;54=Z0XW#r=3Cv`XB;r1LEKougwC@GgZYE+F8-GiD?a=@fE
zf9{RW%xS;Z(Bp?)qAbLy>~;&ISE)k??tPRnr~ExBEaG$rom74RJc1xJ2fx1=P~jK>
zzWyMZH;1zgSN50pJJS(67X_k;0LQ!M7p;dLmWiDzt%vG&=zSLTJi5ypH{^n0F3`tB
z;1-|*^@10^aq+(N$-73se|T5I1OB!*d<RP3zKT_q%?kRu5W6`3Q<#MT?c?V!X3iH?
zo9AcP@94U|2oof17tZdy7!i<h99tyK=+_=x!=p%H&eL+BN?J?nVs*PT4)c3wT+mDB
zZ{tJ>VXVz3PSeMP+H&nRBaogZioh$45v#|xYmFRAS1lZBym)!1I>A_KqXr_$r+6C6
zD8&$okm-o|2OigEGLGGP{d)}TViNuKtxxZ4zr;(efFT9)@C}zMdSk_8mEy!(z`nW}
zd;^=Se{%erx`N@>LoUBfgG^*fA%X2U592l$&>RB?#rAc8MQQ{o8e_<)E8fP_#M{mQ
zAG#sk_|3xTA<ykUgmD8j#sK(wWs${va?uuBoTbaZalO2axA6F45!p%qzn{q<3obr+
zJHNsf=^RFX`PQ3}swfxy)zsSL$<0I<7P?&#d9|=@ar213nhr*yc+EUV+Y(aN2?{uk
zQ&y`C8(@9m-cTG^?H;k0&w8cPY6Z7vMs<4$T%=+MLn_E=VYx#HT8`d1Iqng%QHh{q
z+tutxsjp78+jIS8iaiph*Fq7DgqN}YtVF9v6NE|(-&((}U34{u`E8gF3~S&M<j@S<
zr2y9<Ze&s-$&x7*6$XQ&D=SUsXyOqOU6|Xrj`K56$&qcHD)1jWV2Isn?y2Xf67Z7i
z(T2Ta98XgIGkRCs#IR-=Gt%@Fj_T}&fpv3h5_8(TNYnGa^6LkQ2C-9~!Z)^F_pDXN
z;$D}9`5GJ(!QRi}ESv40;Tz{u+q7|Lt}mLgA93fHT~qUy`QRHB$14Q;7dhXtI0d~<
zZL6wZET9)U^ya*ef>$1omvy1oQNu9#CkW&&jADz$?KQ2-3B*$RLA*Whc4fncrWnFd
z7pV$G=BGU-2*;^vhQs?GGlbdQv=$qG2YR*Q!DCNFK6A>jtK?v4^zb^7*&MayES)nI
z5|&+Krv1Pj3_y)2$xB}Sm#$0G`)5&%t;y+UY2F<RHbzOx)OBE6t1q5$jOQ_&ok67z
z1->!fWZz*Ce0E-4Qc0pobP4f574lSE?YzJE)*Y0=q0p<pB(Oh}Xa_m|o<cav94!dB
zB;pw}^V(UzunoR;Ocz8`l#H0hE-H7ed>jlh@2iWlMRh+N<|1My2i$jtq;sl%BY7ty
zZaWcSu_O4OP<8X5n+DKO?B+lFoGH&RXBOo)7e2-(>7km)qizC93W_oDzj@l8srIo=
zWw&4}OPj#pOy&1)RY|LhUhx&Y;wz%#WfpSVEXOCJ%4|mG;SI*Ta@$Zj`b&|R3&Bt-
z=RLeCmX<F8!}Wq~AsCd5-VA@|vo4VT&7fDt4n9%>1z07`VVU%6Sr)Wxn2%ETD>leP
zaebQF$nHXB0wx*bAp}CaUf}jE4eb-!=s;TeN3!ep=vups4k%%3D%nPtWc{0O1kEJ)
z;`x6n=8@Bh&&7@8?WQMJNj#ntWAT0S&Ta~xOgQc33Ea@xbqohKZrtsZ;3(ps|B=a;
z{hnlUY<p=Po*M!RB!ljhEEdl(Potv>p*fOjP*Ze;Wi0#5)rVXb?z}`!=$zi`744{{
zw1<2<&64nosG_XZ!Hsv($?o`o#ckl_Ey_O<P1sLoxZX<K{R$rHbxwx<FIvh7hGBce
zAM?4&$~K?pq!i2C?&*}IVtt7?(XKEJGe(o85t|`&F_gBRjLaKXJvA*dsBi_WGMvOw
z_wWr5^HTr1D4SVC)52!X(nZC2!D1jg?09n|R2=`xKQ~}s<U_p~g@|r@YkL8fSqv_3
zsd$R8CY~bhE(fLy(6cM7`LEPM@hyY)XI#C!-rc{^Y39#Oi!jT~{1&vUvP1<>BrYNt
z&?Xj~<@q@uBc!6@N<<iyaHO@mMJDq-)DC%bIWta$ao;PDnB!05mZ91i_?#rr^Z;Os
zg3>VgQMfr_EgKgaV`=TX>*Y0z&VN$o>zzF*OE*b#oOMd^Q&Zy(tXbhvz?fUFDLj(Q
ziI;0+J}w(j^vDE?R76=L=w$Z_Soj5VKJiywoA0hBDupl$P=lD0)lo`LVvbwuh=b`1
zXE+k*26hkCQ^pcRI0$+gU03ko8}FCvWnExkr#>5BEnP6`OWK<9l#K$1TQySBWiMvo
zX@Hg?@D2AXdmM4-!CZ|oo$_aY8gA{zwsub}=3|4`@j<vu6iNd;#if-XV=Tk{+_TL3
zFxvDy*AJb){d+NsKB0;nU6p;Z)l!S3RC1#7%gXY0okH0!Vcj&_ljK_~dkdI&#VU+e
z)W)Xh#jYd`?rFof<DDYI1hoNrFs>hHxV9?GZBY~}Vp4XT4Y+70mH2Mkg}%pR_ae?{
z0;hVKiu1>l^2DKGoo~VwYEiqVi@iIO7`q)?5+(LKl#Z!T+GQi}r{(uA)U~+yJ`yC*
z3``BPn0{R!8oz&zQ*I})`S4#f(FpNE9~r|>hO#IIlW9jFn`DX(JlQ#ASXBr&LL(Bn
zRJm*v1*B;`0i>e2|Dg<i_|f%x2!?VoB>#nTl&zXxq#Ri0$?}6{WpXPnpKkz@8Z^pS
zAOpmB-4^Ehgt0JATb`=qvW><THKB|>IX_e^ReFT<$nyQ~%Y8*s;1@+grR)G+yQjAR
z2`D5$9up8KKj*r?#vtIWa?IlGAY(QnCkl9p6lGJn%FSMxa_hCzHKe|3pBO&W{0p*o
z`S+Fw{;uy0QZpVOik8Av^a?Y~=8qC8<6Bb(l5qSmcXn)I&Fi(g*^w`g&!@Rp>82Ox
z=HTwO|D2k!b_n~-P4sv2#{ODGAfy0+EjxMNU0!6?nCNU)HER_?`XxeWIGJ@XlW^x*
zs8!x2)3PV9`S_m;hso&a{avv5iu+lzfiwG?I+INK#{e~bh9;~7SDN2A0CIji7-ope
z=f|6is$AK}FZ|1Zg7#wgBEB7R;@3s405lpNVj+8OGNHLS^~WXCAUtD$`ptJJdhtDh
zy~ClhKtss&1Mx9SvXLW)Nt3(xo7;C|U&!h5Lp}&FY;Z3g9kFu8gy^FY{b~OUE|K56
z?Km(Ls&=-D++ay^j0=HleodV~x;bajDS00TVUPh06uPm)D6b#h@)&P~r1+#q5$p^P
z&vKCBH|x{3<X1wAClYLsx@x&AN%xH&#{EkBg*tcJ+Wb#l%`R4{-xLF^NkX@k7=)c-
z4$HE-fIj(Zxm}Cb6$gti{?A97=^+rjYcdf@C?NvDaDv-7Zn3?(fQ2cyvkO=u84BXc
zqqsrE*kLvlT3=INv@(Jky*Y^;#JQvoR{KX~92YBSlIf$UrT60}ZK@jcXTo*ZI7%*M
zs7|kl?0*BP7k}gQ!~iHbxERz`HHwK$$?M+);#imxrmG3~-Wia7QSa<NmI6@{8)1@_
z{YH}s^!mBX7jFJ3Jsa%ZDwqO5n*?;9&Jp##NIH;sIt_9uQriFac<m6wuu@rWXkAMC
z!cqkLG6iHLolm1>$UuG*zJy|B1q3ctJnQ{4Pn8rSxqW~CMgz>%s(;5No4#e>P#9*2
zB(Kq$v{1rP0NQND!*RpoQR-Fn9Z1JQV*dzBU*D2S7p3Y=OivK=>OLo&JgszgQ)mx~
z(uDQs8>_sF5BUV5<+E)@V*K3a3p1qbODof-ll$uB*HX)CRaQLY2IDTJeLDkLF7d3M
z<Y)M*wis^{L<`6ZzA+aTZoF_t;iDSMAmSHR2NR(uElC0T75flRK1{<EN6SrCT9L{m
zWwwJ9mD(3J_eeJi!z9~Jhv5nWaRI?(K0M5zQBW9T@@V^cNbxEKsxodJP!V;I%5lyO
z+c}R=;-j(69)y-FMBFetZ?i>$qU;)jP4|cd65=aQVEY=+29+~zc#H@wsyl!-qxr)2
zEsVefUi|3}Z7>=_V~FuC4$QC`!$)-OJQv$#vpikv>Qn0^wh&@C+9~i0>EtCCKxy;K
zzdl9s%TonNMAS#|_w@p_TyUB^5(HpNyDy?bld*III5n@9ho|c8dlkXqiU+3jKPotz
zNn$^Q-e-$J8<CcQxsoX@2#RDSn@^{>i8&Br+k3us^E+^6{xej+85^5JIohPEdZXvz
zLH4lDiG9b)Z9LVbsARnKgzD#OiAQGQ#zp3;Y96JNU$ZOP;&PUpOdUOMljst2`q;t*
zO;mn`30R;|Cn&_*XwWHUkrrK_WLiGpz@wq)UK;k7h4el3Y4TAi)56I@8XThwjyhsi
zD`LMAX@B3=0P}QI8r5plzFd@6N6`n&{dHrP)y1O<&0UwL=ESz?C4b(nh8bmlfB4z2
zn1vC44<LHEZWas43aS~)8$vXV+%9nQH7|#HsVT4sNcmDR7njvHT=K13Bb0Z|lI%MX
z2D>;zgsSoLhkP+CA6-H1R+NhRfD|;&vU7eQ&1a6JZ%!eL@7|yYB)PH@pm3Mbwu{Ks
zESEh;X$BAoprH?cAwpv!ATiai-RM>FM^&3o=BDl48X+jur*L;+++TtEZR>x)+b4en
zT{%N1RFqD>6DdJa{veU^zL2}SFu+THK0b)i=&E`GRzk*yBh0Jf;wbAt5Bck?n_01v
zr!&LZo34Eo_n}<fjCtudSui}8D8Y9RjJsFP1&$$8RX`;MeN_&Vh*7cvV=TqrxP>gP
z8HCNpG_K8$008I5m?BY?Uv_0@tEJ+l`1Y<g?>mn61c18=zY+yH!{`4>DZNwmcu%2R
zOi=VjCMN~`3+veT%ClUt=T~+}xf*wHCd{N6rU%!{J<+UrRg%GlRlWEwr~R@w>0S3#
zTg;i>v!4Z#27sJ-ia$6{11Z3K`XuvX;w)2F%uZGq5ip4O(>tD&D9&&{uLK-b9x|Yl
zN^EWpZ1aO+bY24S$>hVfE_VPKM5<IL(=u&?`b-BDQ3@rMF-1P&7M9+Tayy$!Xi>h*
z9N3bQVE|(62o9_6nFs3f?<>Ou2}L3h?7bN*zbWDdp#di8xYdj1i<8|A^Wuqh?64OS
z^aCh_L6z#i&znW}$8(L?!UC8)sCBTD`XR_?V7Hr!$i%w8Ik*hq(@tcOi;#T)8Pey*
z=zx*B%a_#;1HXCw9+1b^K2<!wzr61XlS#B`yF=N%B2XwN7NMRS=Q^I|YI>(f_L&G6
zqks!ai6%zh<pf(sJJHTByBi-b7Vb$IyMTUN8l-Ct(Oe~`F4*x*uBG`%UvF;xnJKN#
z_JBUpAqLT8I+BCL)=t1nu{KQT7#q=p?OEUQa=|&L5*#RiZdR-y(|p-S?MZHvUxcb|
z79!?tV$?n@U7Azo@9WE&@~5n+Qv<F@--FqfCiD`QGYiDzCv=4@^`+Q4TjZjfe@Mst
z6eZnb(du#8os-ZY?a`kS_$tuf(yh**L7@_W;<nZC24@4cM6u=*XrOS1gN!|=oJ|yj
z)W4Yjn>P#jZ*yjjiI?4#`$+9<cfEYk6~ca9fscvf<LV`jiRQG>ZetuZeL0ZDJt-?M
zJAQe&cgFgBT8b}-67PKgv9-$XJqdd+Bkb^-H4~O(O7E_h54CS=$~9Fw@FfwJW~Y^4
z%mrnP@+_D+5zU(_N)d!IrSr5Sp`hv$0Z>nB;YXB@dtT|I>M4^6PB=z6Tom`&1>Vh_
zB>NjNW*fftNDo}txE<2;Vm!_F2jF#(b=Kd1{BQ4fpK@iM{M2Js$ACbS-!K1+h^S(H
z26-d0GH#2^)p!gfO)0_q@4N7X0@Ia0={%w8Nz2m^1`B!#Psz@(4ps%Yl+nU!C86|b
zuFN6u+l7<%43aMxQbfno?Gm0%Z?n(wjoQezt&O|vnGYSnw)t7g?|hvidxl#@!j<y9
zheA0&<XP?KQ#I40Y3WlFC+2SAc15+A0XL^-DMkZcbH<pK-o4mGf|x>BAzmGK1p#$y
zaKe3>JSDLtz{&LcLz?xk%WL$_&+8+z(1WTTDwX_D_QU2yh+Ccnf{YP6Y$?{nz}_X^
z;+=+TD8&m)J|}i+U<p5j6&;4%2QDFarCzD<4w-+y%2flJ?CdZ}^V8!%oDTd`Vm=co
z>St%?2k@A-u;^b)kS#8hH=5+bo?eJ)JXm6OzJ(2>sl6rQ2BW1q9JN_Wq)IK!pn<1p
z8g}`EJO6ur9wg5<;OfE<gRs^GE9YQn(iHi6xYv8xxVZq=1ov%%3;}TeA`7}6E7sLM
zn;}KYbSt)h@$nK&b#?0regQE{MY07gJk9FG-y&CM&hoOd!C8FP$g1^(w;aCwfE?$|
zB7^vRdlhco&9Fz|vqSVN@RYv8$^#;I;{Ii^I)Z=mm2o!*Sj)cDcswGS27-}i0>>rm
zdK$+(cC)`odS0i83)-r_zw!oTT^-b3dYmb>2cp<Sg=&91NAiy+B|RTDr2fbkVvFMt
z{ItRc*9*kH@>@Zy2|}aW?-ISQ0*S6Js^y?VOrM@J<-Z!uw%ceNm0w<22OqWb>*-mi
z!k$)OHok7;=XMx?mv$XSM&xtUV8lN7==~Ex1{XS<%{AfP1xMgn?E1dq8{Ptyc#(3z
zcgkd!*!vaSOc6XC(c9tdbxZY^<A9KRX}p{Nghb{O6e6Q~vVAXLD>ekbaBoUnpa*W+
z)rQX;<nfgOZHPx<e!1I6BO_~rj*N$kP%4EM?!R+J&C?tultr7I)o$NoSllJfhUoeb
zXIxK~k@wOrtpA1FW39OXr4#NgJrHNzh+rz8n}mBJJ!@CivD9{Ck%cw%W@<-!e(YP>
zxCbfnMjwOF54~o3jQ@EBy>H(+b3B-_g!ava-Q1EmEND>x$_|lqM|r6`5RiZA0r3YL
zo>V=6c=ABv*(2%79>n7BvEUy{I5g_s#rQupLXlmQ##Mg~&OMN_!~nocsVm>eqV;pa
zH_G|^h8A+-ao@0Dj;b4}$qk{ii!F>3oNq<W!Xp#g<+=0jmg<RoS`zL!kUxM{m^B&e
za+q7kyjt#D%jTlxrXuscxDpzJ4daYk{^zZg{B}9nV9oQ0KSOfZ02kTK7t6S!t~!xt
zSDCQb*LU?@^RBElgX>ZEAnZ^x^KV36NbiQ!mr01xmbPTl3xt&z6fqo6A0Pa_*)FR&
zMPG#txdIYS!hn2g2NTF+`7}kOUwo_`jK)hq5ZbEsY-)?t_0V`EyYeeG1t$f7lQK6z
zL?G5UQ1Ra6xYg(LtN&dfVd4Ckn;8$1Kz@K#d}%3P`Qkc4Jb$tDMw00VI%kim-!B-o
zr?m~l#)z##)*kZd4^5MDCd_&^(c>kh2VD6*2E7bdP1~Fh__2_V_qq55O@ko;-}m0F
zAOb~D6{?uaot*g8^ki--C+mivz>K?@3(YYa<<%yaM~r6|mE=0vG^a~H<)E+^IJ~)k
z9Mihd&8H8>zxm`3u9+`$Fb^$$OnLXb;<XGT7k|#f2S5n#x{IGLnVHNUCc{3`#}>sg
z<Fx<F(8>1wBzbSSjwrf1TJ|Y-PWx}2uk6GLOO9ImF%U=VtkzxpC4+f6TM(L?RsGe$
zYi#4hmWG3`S<P+s$^FUs_l<Zy#G4<Cl*LBbjE#L4U+SsY^{@aAQXjrPh_88T__GS2
zs5|7E_6|B%Rt6CL0Qt0pI84ZUJxAZw8trSr4&Q)L8_H*w(HBqX64$z81U?*JfgOsH
z9@<)B@8j4wu;=RL0-pT1gLcxaAG7sflK;CA_Qqic!T<-1Xg)W9#Pi)1j3eSslyUBT
zNu{P(o!`NI2R!{&#(O>6*mSHaJfH&WL&JRQnjIar=HsL2amj>`<M;-SFsem`?LgJH
zc>L!9ct*trdI%2ro6`(a`kQ?o1^E*TnO(m9eSXNvpRJ_l6coC&pLZ19{qZp|Sa?Qf
zXOD=E7t=>&Cv|7uFQe`KKWOSkbaje5IlX7}7Sd<#&0Nlpayp~`?YYPP92D@7+Ua{n
z?BwK|zv~?$1gPZ;!EwbPX9oCRqCP+53ryE)8c5i_Ci@`4WS0fGD#8n|yT;ORXDN7a
zyLNXdclHy6x<!^$V`)86`rJtIb*)wZ_GO2y+$nMXh$2$WutdA6{e5}n3?%^gDo-C^
zvY=`#>cA;Z1pk`A*8^{)hoa??m=-oV0Q%&g0zeA8{TM^DIHUj+<|2PRtql%521l%~
zFrJk`EJFheCpYk~F5cyD7&(dq;t91lM0qmdZ{2&LX5UVp|BD0%U!HjR2AnOk!yzkr
zk9?@Z#u%miBbg@GyJ;{vO{!;_f_!ozd6(cLWhXWrl`yK=P}%{+nlAFiXM4PSjx)W1
z{<U-q_El@}GX^{=ri7H0sj$H3nvdj(J$4z2xNMdC><7zxz+?mT&qf#-O^#(zV&dc>
zt~GluowLR#iDL<{Q@ry&i&4C(kkJ~w?^rvy;DC1h$b@A}aJlzP5uGW+^AC#!h3m;q
z88}t*A~?DaxhU?qnf_UW=J^MyH(GA<<^ydD4lrc^P55ZDv$L1uZhFtW;|Kx(;w{rX
z3Zq@)C<snOl4i>!?WRDp@v*2F*L-DssZU2Ym?HesbnS+JGi>X22IEi09P|E#!el9*
z`<O>h<xxlBIuJMf^=VR$1TCSaB1*(CDob}Mw%CIS=-*Ju5frjFPyy3w)cyL6zwh)m
z0SZ7>I8guqX4_acg0}YwD2vN74~=Z(*dv0HRW{-LRje)Urz-C68_pi4A?~5sR*7l(
zDbIHWhw5+jkRJc-nP$VZm-WyXFVD@1Re*4+lp5ENb@pCuK(J2Ms&%6LfAuh3qrlQ5
zmzeOTe*~U@zw#?hnct=KAOe7pvi#rrGxLS)xSrT5dZER_3_jnN(y_LA1aC8Miu+{b
zKO1vjcKJ|w*iY~6Uf9IWvqfH%ew%`PTJWoM^9R3hrcY@wlQOn0-=dVhg+^-9P^|AE
zmB3Iz5Lg4-gBYFP?a)lUs4)Ba;73voW1q@XoK(Q4#M_zw))@dFq$s)p<SV9b`2okR
zLlNcmg7Z37*#-b@JSg2733)HnIRT2Qc01hhA!sPu(lFgT8=LIo=PPplVAl#GgU`M<
zpmrT_5Ye?FKq3UiHXwkivC-`4aGL$@a<3BCYL`BO{|PhjEg|_|nHn8ywvMIzy{m6M
z<kd`~&j62z9@hm9nkv+wF#;gM25;g2`914>c>Ynnnh3saxCOjCnyR`gHA*&N{{w9T
BYIXns

diff --git a/apps/desktop/src-tauri/icons/256x256.png b/apps/desktop/src-tauri/icons/256x256.png
index 9b3b288c514a934e2b6875403109d335d83eb173..875659f3a9052be7e013944cd6a0204635382bdc 100644
GIT binary patch
literal 71045
zcma%iWm6nX(=P1d?(XjHx=3&jmf#TF-C;L)g1bxbpuycOcyM=jci3}3RqqctpJux1
zs+pdyo@trxC=E4vbQBU47#J9IMFm+c7#P_9rm!$b2>%U+Ze>>gqZMVPw0*MAI^kQs
zEqXG%Tn6T=ZCjpnP1recH>6u8WRS0#rFZmn^q`IpL?!wDg<~)gQ#?@Z$r$(pv{G;w
zZc?dZv$89fnh4B5Q72z|4YWTG{QcW9UL4ne-IFq~*#C8-O{ett<geiOQ<I*I-Er3g
zA@^+INiyqL-r@gmvUGtvoszk7((#J{iqhoIKn~8v{=h%#TmP;0v?&Y+$Hyn2>*XlY
zeVK}g$ol-TJBx}bz8AF9mhlqx_2HFwxLI-!_3h(-d(&g`T=ZZLF!)|ezHO;HUP6=F
zgZv(Tk2M?m5OBPz-u?&ncFT5!v5rk!qdv0~J*hJ2v^2MQ<gZct-I`dvcDK7<6xk)1
za%&l32xAFr9qSzYf9Qma`$+x3`P8av6uDKb7qiwNd911oB4a(g5FqCbbJw?6UW~2r
z>qJpLJTiGx8lq0mF)wP%>ir?t$eVOsgJv{~9`aSI3ttAHPr+_9P>3D#x?@%OkZX&A
zOaJJW;b*^K&FYFmXe9lXGIq;N<t-vNldg&VMIZw5|KTxsNS7_nUVH^V>viMVS(&N3
zdOF=y@`qd;Jq>v=SuW!{A!{jlpD#;<uSYfCr6?tW`_lUC{kY@)<I6ILsGsq(#@oF6
zEz=XN@jpt;A0Lr<kE{Xc)0e8ND%mq~NrQLj7j1$LE6Kn3m@R1#sEjCS)b`pOMaU?b
zE=cZ%hL3}2Zi)VrhhO$KY=;BpKkk4{_MeIEX72e6&X0rBRb6CD+oHwhnRJ@T<LnG>
z+Y<X6K`qB*FDKHc`r__Dk8Gt*4<4&3{viaG4F>OXb*If7CSo5a79eO)VTUO2RLgVn
z6Ta9@E59K5z{g{bh;^_Xg*92v*wRyR@)73b>O$Pl4=<|b<C&=KiF6|45ZLbIXgx80
z?lL9eRv{4s(YEtt+F8klU}$va!qms4=HrKCMm1%1ro4zJ690h?Y!*t^<T9VGe!bbF
zxlx%pRW=zI2@7Qg_u?W8abB;>Z=vR_LhS0J*v=?Nsb*VSbW#YMwr)0F6mO71>Q)2o
zH*-Fm%4>W;sU#6CCGqiH*2AmYBy{tn+Dk<)W<VG!G`CeL-wxYrJ@^4Fo~rbJ)RSm_
z5R84id>;hvK)N%(WIE-sAQbUyjQH<3w4Qr68O>`yH_oVbNFkLX*&rVSXm0i&>~jv9
z?(MzE#9SWGF?BDW`+f#)l-{@w!FE()upHvQptLg}%r%-AZF*lHkgqz~61dAa6@8*6
zQ>R+Ar+X*S1TxKmKNP6-%9Kl|y_y}aYL9<UOjK-YxJte-h6J|-U%r?Go9|RtP-OY-
z_53u#QJ~Im7<zse<yey73R+!mZpxfte`@1G%Kvsjr$yHXk<4t->ue)Ce=WS-2zGF}
zY&#wd^U{^b7FLt^pLnva5ec*TlZ_wGQs?zdZ--V-T~82nWUn|psk~7dBH&)+U^d|?
z@&Kdqs6^<a8et5Hd<dCQ-MhcB9oi}lp?ATeTum2wA@76NYnI;XoBo{QV?WIlGOjW8
zST+W4>Vn&j9)wOd0fN}V3eA)xmPiS8?l^Vm<o*{amoEJg65>Klb%&#yZ)_6Jc?B`3
zqWC-+pO1xR;eCjSgM(fEPErTXcGWMg<2Wu~jn*zJ1?og^ukV12PzK&XYo!Gdd<cx-
zH{Gp2Mt~{2VXCB{k!(a_9|bLlVKGt1114w8#vLLd|0b8mym+&^F*L+@(qb1HM046l
z(w&#&^XWNUQaD)8_BO1>nNbOq`4$M~MT78wX{Zojh^5A0T7x8gPTLVO54FACOMgai
zbS`-aPkO-T250|;F=iN&)NVQX1-UyxoZN8n7ixMj*Y02P945<X*P;4Sn&5}S!9N5r
zEvf#ay_k=%brm_p>q|J8F|Us+Q1HW3VN?DDFMoA({T^st0cqU#gVq#Z8t9R9?opOX
zyxxwnva<Xf-K+><R+5&s4RaG_G#2-{ZLcO<zT$0um+rhkf9@J3EVw;|<wiR~35|UA
zXa9|rD~E$=K4BUA`mlN3zb9$p-F^5si^8zuGL}h6H9`if#D#%WXcxv9VMtQHWv5Rn
z@E+Jc@}y@JEk~s2JpSq0E6O8Bjz}Te0RiC^{1s`=I)6sCkeVt21wguJd!~NN#8Ek9
z`hhj`9gHQ6v?)a*qh{R5>a%ZhP*DgyW|f@1MC=c4gVIWBI4^WFs!>@`bFoUXs$gL5
zJC(29ET*YB_#CnZSAC^iqIeqhEM`)b7OjAd{eXqR#Cpf7Ln}g!Z*?s)`*IObOdBja
zY<BU;`PvsL`jQqW|M))IyIgLkiyVoezH{e+V6BhC>AFja#IeD{;uPRD+@=>syPGy5
zho|Vh^yxX}J8bvh_nuVp9(v2IP=b@c%Xl&Hw~O?!djXJBJ>=Gjd7*&m-sOAdz1PzC
zSVT}45_LeCZ0~*GTpR@|<$I%ga@W%y<njG@d+Ke;&5{27(FHKH7e>#TQD}&^=R25_
zc7eh1(sQBALhAI^+G4!C2UnhqwU15J4D4aCsRV+EVKT0{L6WF+h~uxjPGCF1?LkJa
z_bZ2|n&1@{@mrV9XOE6Y#yqsVw}I=Fj3L3?;o~se{|pr8aVGTb-lFBaC-%Pilf`bk
zC4Y30=+Unm7FgHRAvffuPMNJAI9SYEu_d}w<crhXTTE1(;6zloPt3vJ_~X^Vh4SEu
zD%ufDHX3qDu*=O5*JsRFJvsk})~n;qH<#ns2#mm;$H$-@^s)OBs2M}N=i|hm-(p{v
zayNr!n@nfhCyfPNwlDMsm!4VHJ$`iM9RMPCkUX4dCjbCH9O>xg;rz!Ul&U<KIVq}~
zQY)rVQDpqVt3=`=GuD;YuyE)TW6J9|?!3#?==I~J^Eq@F_wSzwy~MDuM1wgUTOJv-
z|5Ls?8>n!Fyz6U0)v1#%u6?z}gznjBV#sI(j5DhStD<2OZc7(ZnRZ#k=ddX?`y&3@
zKO*IzUJ)2U#8yYp4tWR(FFGVeI0pS(<_dvSLuStE7UoW-6esqO>gxvO#dAzIYvBGz
z`PAF>_EhJ^)0+yNW9LV=yUK%V^3YwI^6=j8W=GO&pW)|2?Kk%t_uA**UbCdiYuY|q
zaQKmLLJjq!MBPLYJzOo%&Up*pup+4Mc&Cr~;;Ug;0DDYS!?2%Z3-F6m36ho(3Eu)u
zRM$!=Y_~GrRmlv{E;EPMA|6UGp%V@k)lsv1|2ypWArp)yOw6Bp<V!rhfwivh_lo=~
zfnU6)A5nT%3pCl04O^AB+GyfSKy-~SJv=Thx<F)MICwo&IB6;ua3b&v6N;fEo68qt
zi-P@88|oo_`@BR8l;1pnB79KGv@Oc;7`5>R;ko}JBFdw<K=7vX`TM~9@L>t9IR(po
zpBmNA8sAMqJxs%US_37~54V2ZsdZnD+Q8=Mp(fD;-uT<byP_MwbUx;qS;&nAmb41Y
z5ilNDbRq<ETZV4aiP@t`m4P_JBCCbifGYH^k&I6jwmYD~qBf^R`$c5!Ax;7v%9>}l
zdx1z0xA6t~v=FusaH>rW3grBsw?c3A1|RI`N>t<Pb^DuisL835-7a)genaXQAGB>4
z^HpuD!w9E26@N#zj}YZ?=xd;#n#??38bAS_%yGw04FHdLG=?m!kL@!{#dU!!Y>=e!
zQ<XpUB7|fL_L(1aLV9Ni8+%IgMTCsvt*V<N@Hk-?dQ)BcvG0k>s(kF7i2N<wbN&dw
zxyx@BKhO8v`Eha45R2)Hn^E~^J!a;{E2?z>)y?#`j({d#P%`_8`j*K?BA84;5w;8d
zNZ3XN)-SvlRK_B^f{@4%F9*T_mWONcNp49AQ79;C+ZX=|^LrPEYGQUlw<C<(ORwkE
zaX?Eyl{?7dc#Xhm@z;lIn$8;QH-nyqX;m8?+Y5fI+7LDcyc)!tLmR$Z0HGtI6BAGo
z;3IAJ#okk0MkWmOt6Uc`6hX_9)f%>edRhgxwEX%Ww3QOr<H9`{J!)a=3q&Bul@bv_
z-LBqeVl4t?(zzfmz>|KAsn0vVokO303$;F9Zgw8lUmE_dDkG#pwbX1>kJ)JR(p$+E
zb7sayHKsQDE7hKW=LFdH2UEge2$NIBKU6Tm{=y`A$C`Ux+(Qa4(C(9~`FnMbZ1HxC
zB5N2H`xPYmJ(7m1$N+6wDW8Pd<1+vqeLxt5Nv$S_b^M^XwKewqpPH*Z_wx<9ZA6N)
zY(9l~hNPWuG@Ya0>sAK(0KzK3ThcMpgiB56Eq?$)QPONM@-W_w;6a2>@-d-_Cakbj
z6C;$NIMc`p=WuV@yDp!1d&%bTVfPf62OYHJs=AQ(Po&BqVnw_|wq5xil2O|aRmcp%
zyThk~Z!i8qpso3^P2UHT4WaJ3>>yFbcuN@Go9Wkw_2!F13TVAm?Jkeb<7-Otuj60q
zZumK-+=!Z!GJCfm4e-MlmN9X>Cx|cKQnK_7fZY%aBaT|eOjU4X5@y2*jA7BRhnXO<
zvDLWzyhxv&3T$|jW&gdmh0IJTETP?UIDNFW`+2xaBunfb-@SzM@-8oym%fKNFx_tX
z5n(U=wnSY;mm_e#wSB|Txi~0ZDW=a7C(Isy#W%`v6|#y5HndYRKZ%x10zg}ebSes_
z?NA5q+To&s@oy1@)a1xMI3ukfdPc6~*&|j!^S$uW7PBn#-pr4Xj|Z~vGp=Pg)R!_W
z759xw+btA*<%oU2?ho~1PO<hUh`0E20;Pk1!ON;BEJz8mUU+!f)lz%fNjltNB-$jp
z6aYIn!m&P%KGbCs!GlbT@x}y?wU6TQ2eYpR#%Wmyh6BEgEfR(wbD$p70mGL@b;5t-
zhg3N*M+L4%ZZX4X`=X)jE_F9oAbku8#GuHu-F6Awt{8inrlfF`cxd&@x+$35{hvy>
z?s{jFF?0w*AFoXxr}DfnL{F4bL*TgG(u78gN~dq&7n})w#+Wpe_;8eGi_x|y?Ry}<
zwak=hqnRBMKlxMbk8m=}xWE(t%0Op&0pObyZXzx`Aa~T!{X1kKW&kweM}4@E7(Wwf
zM<EHp4G@cJmTQF~^Tn;<U%WQPB}+Vw7nnRds|Ov#AvwIM5qXCc|Ej0%_PZTgTVkEM
zB!woRE?}PNdqxdqR%BcGiW}<KE3G?8C#JEafVJSS#tsgW3(DE38YI6U{PNA0z^r5g
zHVO><2sg%=)<IMo({tyQa$B?r412}gbICWB6e`SpO|saYrOd@tALm=KUIAOje%?7!
z@{Tz)c}?2=&<XbKt!~yUmeh*GDs+K_yiK6!$eTJO^%yL|02Q0Nyh3}(v0WB_$Pw9n
zlH!VGez8B2ot`Fxg?xK-Dei?8+X4FQ!GR?(%l7!a&=l5m<6S~ilcg5Z=)?O$u-<t=
zW;j@LiL^j<;zwFWjo^!)|2}tLKli=n`t9TdKkpq%#CK*o?*nr4=%epa)+>euP24}(
zo?kk#?0Y+RamU3t6Qgw+?lHKdVo75wBmL5cL$T~R1%88-b(;Q%Go6h{KnO{}(pP|3
z5~>|ZF9Po8UvF-b9uY6<@1GIXj;w>8W&JnTQDf|G0y=wVsqd#^d5L?NeTkBYSvwBS
zX?I33vzvF>=kps_Y)bx&UsC;wldFJBUPS8fB<IS7`7_@=hP*`#AK>w+Z~;J)Ah#4w
zqY*#0*T4v*0>yKA&`b!!Y&-c<GWmdl)e1EL)#ph|=SoQOf9>d|jbXySB7zHqM`pN^
z^?_iwJ3JQb(Q6zw@!S2QUXy3@?Iih!k2#ae=QWdJWbyKkCN;3hpNowOEtG+ag2uzO
zjqdwPjwNBYjp{r~+lQ*ycONSP>5}+B%X|&E8+@<}gfG--LW+$;x`q$(jF;}c#b+ej
z7;w`Ye2OXYs*-&cM-k9pe=iSh+;FOxO?hAR&t9N1m6H;0Y}s0NnL=OGxf`Th`m?Wd
zFYT%`tzdEN<f754NXrH@$PcKY-Bsr|_s9M`YbS>q5Qf&Rn$!tO$9kC}Bf_;kwr8R9
z1dQw;p&oU3j3VGz#2ZqEqIkEH3?}w*fKme3lY$U`9{Zt9$!Vm+qp*Xj%{`3UzLvQD
zMrbnH%DW|vY5SPi;<Sjm>x>J0agJnvs#1b|X}!pS#{xA{oN&%PN<1u$&J9Xl8eKzH
zoSQb?{?^0^A~vJF{vD_B;0@in3+o`_#$Uy%67lGS*T#+fjmjs^XZ5yMBf*Qa=3RNc
z7g816`mlBLFYL_sNXS#-k?>HcY8Vo;Y;B%iiZkf__|Ww<!|7<`{kd~4IJG-*K&#S=
z+e0*84%S+0E0w=zMZ4~rl%fNqj1)i*u##5YB41%9dMea1ykBeJnKLSehsKUbdla%2
zkOMV;>k!%N#KGx)?IAQk8U8zoQ~vT@yZF8O>zx1#w}IyGWi5qRn3EQ%J@GKU2QII_
zzP*zs!lgku-TR$_HJgFN;*_p%#z$M~p>nazyx4&HvBte_%8t`>Oin$?fT>Fk0=u7q
zQKEbpvLrT|{x!&0E1T882>}gtuqEJ)EPtCZ`1Y6@YA>If_u+RN@}Ff_-n}`qu5oRn
zENuib?f;lOcxz3oo^UpX?o<qu>~bCmU}6;MNwj!Qpl>f7g$2>76;Y%fwSSR{Mm5#n
z3il)-J$`Ba?4CTv0vo`N@F2)f>iQG?>*q)Ha_!YQ6PLTgvD}s5Gqg&e0w^i?3@#F9
zQ;9D#K{qCTB@&S5Xv-FVV2pxx__+ZQsNH$*Vg)=YWyNM^A}7~TIH1bLQe>+=X*>V;
z)a~c=G&)-BZPN6T%?^i0bnCwzGRaLpT8EczP*xi3dNkQADXiD|3VCFMXAz92Vv-iL
zIPxMDp}~$PY9p4yJuEnp7BIXoZy#-Wt#y)E`B-FCuViZ&c}kgw|1UFmfI)TmymK<c
z3jHW`el76d@Vi*WykIhRp?!ZFOc<Dq4z}=x6I|~$o9F)+SgFv^i^2oq00m(u{UCD0
zOP#Pn21qA+*Mnr5c!)0E05Ri576(?HpZqIPR#?V)c+bnVK2D77mXcF-Fm|{@Q6Pu0
z2su&~2jDPCPxmJh>}yo2eH+EUcEQA+jTn>3amfv#yGT67JG$8*Tw9{Qsx|8@HP6MU
zeT&I8f##2y?t)3rfu(BTSZ&)Dt(~VcrMKqKChgB%oKq8G?@=Ymg%(PT7)gFl6Oj!w
zF|x<_@~w_0<YM|N5-%VuvBIu^+3o#udh`2#ubu}&6XYPPt^SRrt<=#c%(uNfhrGby
zcCSyX*;T>+^v>M7pks7s{}}VK&=B_7A8Uxa>}JFHn;EJUT7M}FacV3v|6@ZvTPpe^
z17KGUX6!GmeA$5W$*<Pt)h^S#Q_nZILuQFdF6=g?!AbxxA*Zvw7S(|gu7`6}KyD22
z=_<cA7FbXU9{9ncM-qK(*u=~%;}~~^Q93SGM)_*%LY7BOig4wh%f7NTci*!az9$|2
z&U!z6$QA$N$S(@H%qJU()n@eqyjoeGnmCEwHz9u5E;#GF%cioHOe!L8&4E74EE*MQ
zO1uob2ZkMHB0?8u$Kp2ar{8&ppcApPld#|9KcT5Ot<j|HPP~#%QX+A#)%ne~)cf7M
z`V*9p+^<P2b2@+Q$?ku5%o6OXUY;AJUkTj*3fXxE>BBWSAaIQF#^eBv9iVR?L@hN^
z<!y4}^t*)FLyUOyxKblxEpQ`RL8HO=-%>x4baNNJD+7w*w8jXjNEr~P)zH%QWBB_B
zBni6`OH}4=>Gu@!`u==iH|);G-wGeep((-`5xFTz{g&`6J~zJGJ)Ik@kz{REGJ5Zk
z-PG^d@9{o@JIXF6qml_Kx?amsmk<r!Iu<>F5E)f9OlCA${mM7s5Yy?|07CpXrHV`L
z`@7{ZuEwvc;$|0Mqx}k31sz6}w;5+BNfND1bcc!zZ%;0}y}Ew}9Ue#$-FS7G55EX5
z;Q9oe+3j)SmYpGFa&Wc5wp5n+hUeJ@wrR3_Gzz$w7*$v)7iJ(eX!Xiv6~(g<@J#qY
z%ejuftCH5;ZF;~hwUu#gZE7-rczFYUmXl5Ahkv03=&ppeBM1DccGXj&GcWsI!!1^J
zwbsM*YXL5MSqx9p>90K>EdbBw0i=x!Juq3pF}lq(!d>)h4)|T8;WdIBP`a$UAf;cq
zINSMmj#B*oIa9?_n8vO)mS48Az<@$qTczttUqXn0^1Xd`g4X@5+4}c~vv0N+1~`f*
zwkOl{4&PqjH6C)QMBHjnLtvL8c!&C4{NweV4T$iT739(*dYCq~adY5zk`kgZjO3+=
zW{4PyfmI1RS@2iy$3>snKsPm*Goq*P+gpKjf5{16l?8oK)XTSAJmN4sWc(h!62>9{
zlZi_QMD!dUaCX>1CAFh+`N|NoY{C|EpRPfLoq;REm9uJCMATa$91BFwm&m6nnCR~f
z+@1<DRkgV4{Ngbtewnd%W;wKNb7`aF;>F#mjr#E<n1bmM>YQRYRm>>S`gl!1fH_qC
znayP)#EPx6DWq5!F^)_pT{Z8++4U_)G=277sEQ2a#f^sd(t#fKu_`Z6q(tM|_|<LE
z#2ABfNvzf^sr{M8ee-hP%;PBhW^tX5iX&)q*}Aj%0-xc#M&q_qDp6~ObOj6ppI5XE
zo=x~CR66PHP=LfHTyD9o%Y^!3kR42WI!*A*{_9VDh2GeFMqqxfXc`;=)i@Y5idJUX
zLk_D-4oBx`#shnShSZP(V*O4ND^*c^U7ku!t{Kj)HHRbz7Vj@qu-}bG{d5!$gL<Q%
zpCD6|04$|=b$*RGzek-~zaBart$AKmDrf34V08H<F6#cR;GqYCm<eHdq|c<ts*7D3
zq(%Hz>uhPeDIH*Q`FKYgkU>_O2CQ9NdNFld4ZrR?>It{|%=lGn50_TvCfqx^Lb=m@
z<1-sVAB@h9f7y}yzos8;Pq(WAU3JD6n_CgKq!(WiX`8XzbwKy_Drzt?eRFT$hW%H1
zx^*D5-`*1B__4EJKCi|Nui+BBY7aafX7Sqz_`KxifMY%$HkT*vP?_Di5LDIZsQm(y
z>R@B|78D{ql5cLy<<Qug`6Si=xrL9q$SS%p;tW^g(@3>k2;BBLAUbMkL>jmF1~R;4
zq@c6)LtVi*NB_f%KF3QQ_9eogn)?0Xd8^Or!((|tI~N3aYoTN50<iJMZkv#7!{}0I
zcZzPvQ>^t2lu$^G6)_(BpO-Ibu+#1!xSfSD<t$?NL8_GA`!#DpcF~Bt_4W7G5AT_G
zo|_*}k4}%zSrJMnHxU9=UG!wc!kg&3NEa<Xx3l2CYf}9ZPSea+zww+%e(*o-5oaY)
z=36GTJ!scBAa%XmAS(S4d0NB#y@GH4$H%V7rrguUWz1);aZnP%H%Z=Nu#)XS?p~v(
zymAOP>?bi`j4tW#d4z+nB+zL9hO4!-=`PkZk^9x%G}GP=(SRYc$epS<F3QN<C#}-x
zUiP=ScJBp2-O1;3ch<!X6{b$jqxT2-hcDw}&zur3F6c4OM6t;(s~EpgIdUZ~@(W@E
zht?idUZB#$w!1JR@yy>Hh_lJMOg(mny}Ei)$%6+7Kd>+xZO%cd0gvG(xBXcQjzOEM
z7J5((lVYlo@HXXo)z{PD8W7icS5FqwXv;&_y~QFz#iC)DTyjg>*=X-6WJV-E2RAZ;
zuZSSs9_XLd17z)iWD0yGaCrLu*-h?M*pg5qdLwH@HJ^fdcPL#kKSBg%sKu9Nx(=3?
zM+5Q8xClJ5(9is6@CO666!{EZ{$Zp|WqNL&5?0kpf$q;_<j@|zV>E@RDq0fv3i@0M
z3W#AkSicg~9FV_H%$OfY#|k(d`q4Y}ap;~Y`eX5JwKYV~<RM1{R>W!tH;zJr?9(u&
zf7eJ_a^>riy9R>1z4E<=Iwkj`$SmxCzjO^QFmjE$5Utm&x3Q0lU#nwBn>rwt@R-<+
zY_Nwets;%KmulPPQ%(Q2ee>B%yEj_r^W>OrUa%8)9wFmwcva?*_v(c^iyO!Udad)G
z=D5;wkzz(vT>U`Lq6bWI#G`{h!ME$iPLSW0#a(Jg8y9Hc513F0j@Vh9Z9hbsy6=XC
z5k2mNe{NZ~?zXm`UPaCiHqfX|qStt&VgOBxsgVIRjd1rVxY3Ee<bpzA`UJS<XPyqR
z(&;;;<V|0ZT)w4*Sj&Y|AIgI*SrEnY&t;m)6}D-Or<b}sr{9lFHi(@F1UCXFuTreL
z<8eo@-cvmObj|6v9`^9Uo8ZeOHQ>u)QZVP2q+V8*Dw|yfPLY)!bHzuk3_U6DgF1@c
zZYkG2dfQf~pnu$OnV$M+6aGrzL?_3SQm-?o6e$yRy%;`5e4OatLLMiKTHk-}%QrVP
zi8Yu^1ezmHApUkc&Un7NO5j4d_ZD50+*^AXrhWeDyxjDxI-$_3Zj=w@ftY<=rH8ls
zgr2ET>b0q)aNn75t2_QiYaX|Kk;S(G@Flxvz8Ay*M`yqS4Gxu+7}D=8g5|nP#eLTd
zo7H+QCdNd7vYh6-+ym6~hPcc)fV=d+)>bYK`=IWkKLB5(o(R6H1u?F4U{f?O&K6ei
zWcbT4+{`GAM>%pYuKWN{Az^&zrcQZbXGC;md-H9+5!3m^BvY*RZEn1IcDJw|eHHuU
zqi^`~MaySGwdUOZm(gG+;!pVf$)H-*(8yVZl~?GV&ldv4sl2;PGBV~h-Ig~_C&|l7
zZ)4~y?fu(IkDeO{C773Q5)uyyEeT(eplT&$sqDKS$}dW4z@*d}rufQs7T6Ng9|08e
zruvU1t4qJ4`;08Yud@?`y0QF(J1!Rwl;mzTA6cm0Z>Bm=g<(yxnyn!79RZSh+;n$v
zTMe}vNNK;0=Nl!@hc=ey)U>&<=Ox%*Bm2N00h9K@ta9dG$vUIoFVS^9v6^@Jp($vS
z;76DH%G>A?ERr5*`i5Lj1`Y=KK2ar)6sd*67TE@_D}DtikOH?s03#DSu$_YE9|ub)
zSzPO92Tx>(fI_`B^EdrY`V(??FV*vGchKDXQE9HkQ{`)%C?N^&b+eyyeO??s1ES#J
zMy<;(x`lpjl*^$-eZBllTxFi~crL+@E-1zD*d**-&=qZ9;D&H(y>n|r$9d=Cng&JZ
z&f$*<Q@0-Vb?V5quQm>0$+$&~_TjdkMpEmj4S8TEHmO3)>bwxQLRl$>w#?ri)Ugr|
zrGKx2UwaBK{n%cXps(kge83lU!s_m7&dwd>Lx({5&KhWCey$wTg-h*=4!~HFtBUX7
zF9r}?2QY6e@z9Mu-&i(HExsf6DMi{Dn|=>%cy~}>Km!l>G!VZw-oh9zy6=^`th>TI
zur}^6;Zhy;f{{hZ&C#)*^PKyr3kj)cy>Gw<(=KiRHH<5<L=NDMFm=>mOD9YRJr<D*
zxRd}QBhSwfDAxPCl_9%VL>6Q*kWgjNf)1M;a@72>m)n;{5pb6DdQ~9ECO|Mt$g`(2
z7*p}%x>d5ev*k|_<y%GAfycSZnWU;R_{^M`<-vD#&8TKMb@S<U(NL)6_{96c?A~)9
zOKMqN94ECBWC6b4ZZy`FPNoN0?k3L-7%ECfmce3kNb}>(434N)lxO`6nCVlNEtHJ%
za7xa-4U6u^$rk^j#Q8SUgx)NG$ddKuhezE#*n46C4v^$Z(pVoynXg=tkrCR1<2llF
z*JsGA{)3JCF8r<wcZdCV*yV<ay%a~vUDx!)ze+`$ka6+p+gdXDQn2;o-z{`}10!cS
z2{h~8x5?Z%JgqP*q$tW|hZ{ajx&noMZ%lBU(w3ue)OiTX&p$oDs1RjJ7Bim>$l@VL
zL^TLj8^>kU6Z@m)ec<9{M(K{^ahmjFM+zD!`Hz8q(>ZA}&qmA};B(=P<yrHcHv!5w
z4#Tr+Vqhp3q;nna@1192?0uhAyb`qfQo`$&nm0qoGEq?~tFBD_ZBjv{u&-_=S<?Q*
zM({zJjRO8Rb!}0+8nci)`_UkspPgOL`(nh)`_!en3n(yXJ!+_4zRNe1htQ$d<TFtZ
z>!VX<i{-c7msLFKkB!=pzl*4M&Hw`3t=3ezJ(wu#qs|}Eo3l!yjLUSqFJ)+4o?^nV
z#bqYy*aj>#Z|N(WO;C}?u^GQYz?{X=U3)GYSQ)(WYAs;h*w1`l>a8L4T~>sC7eKK^
zQ1DID-HIv@J>tRHhtG~ZA3)8?V$&fZe~ZwgSIYODIR=$No5(mefm48LZ8{mi^C`1v
z6qStZr*2;!v{RH7vEmWBgnN$(ts(3KwwcpdgS-C=ai+K1yIRWM+C-td!EJk^tigWs
zzYdGT_~xoLSmW(5G9SzpM=ivWjzOO(PVuO}QS$wB=(p(Eaiz(Y$%`zAg>_Oc1HKl$
zl-3~j8p#`tGt34DNUuM(-^T1JZ;J7Jp*Lw(#}ILTn_20yuUT$At}>%lH9|vD*<j%I
z5dh8BBc5a~*D-$z_5uuDeHIXKH=D&mBaX`#4oX@eg(n9bIymQ@2BOT2zm}Hk{kUQz
z^|87l2Oh%aS0|auOE(~n3TUZLhxi(|d#Qi3gbBPvR%|W2%ZJ-0fQKywsr76D_Ta=!
z^0(~E10gx^5W(5hUji<}l|xUOF-G3VXrbIn&jg00=t2z}qB@E={hVzrmsi(Ei_o2o
znaYp8{VDCsmO~HynQL=0&Yw6`Kl{2yT4$~~^?92NQzA-@Iy>?Wm9BMY6xq|xWbpzb
zr74);uwe0PgnNv*!wqs^f1@8A!@ZcIH1C(IZ*E?G+=}N0{Jy?xx1Jf^;Qh=<Hzsx}
zC>S)ec*}LP{(?x`+q!tRbhBbbJ0FyY$iP8Jv;j*|Eo=x>zx+3orEmL*U$XS!n~(Ms
z?s%?v2P{m=Tp!KLL6^fc-*TEILiB-sd9nuFhihyuaR9;ba%jxIdWb<$w}pXR`cyLB
zf_g1({$ZUl1S0j}A42roYU&kq>0Z)EmwyAeNk}~y8o(qVGvtC>E5^_M$tMsnIJl*R
z{2oSTn6{AAu#JRy{;YqID>Me}HeN-8Zc%1=tL>?)s5Iv0LXAaW|KXylm*VVLZo}~W
zu;DEq9{v>wy@vXGZ`ahckN2KLiP<#o_vjO)GHUIk+33{_XtB#<r4W2G0qr_~<+TMt
zi>E!(Xr9`=My_)v8=8rEL1JIl;y8^Oz4yzl>keNRdXoPnL$-#Rb@qh212zu+3%50q
zXe5WO1~GJvOi!Nr(SQAOTd&#C=G|H}J0ia2Q5N+<#N@?sWZxv;#{cRa?x!-E7dT}i
zOgqA)oQ!qFgT)i%1hgWCJd^sdO#+rOnQ^CQ@NnduD(y*2&`ce`*{F{Q6PLEEgzs70
zfIgxne2CKzfhX~5_zwz{OEwtM7ciqBijWTE>9nDCK%V}vZ?W1#8xE194>u~Hzm@QJ
zr+nJJ<ht*zURLX}yWYxek?or}w?-fd@%va4Tz<bhS$4{1lLef`VjRM=GJ|sOAZdi#
z>Ow4wgOG{EE$isSTJ3IW{Vi4lWxFJpf!Po+XeCpG$hY>zBybP)Q^(^5lQ5G+`*u&?
zpJg_=4y>caylx-s?w0GnKLwzsopasvWyRP^t47)PC{%i|xfOtjlgxxWeLz%U%7ZF{
zDf-YiSc13um7KdZvSW2OIJ7<N9cNlzQV;d;X?Lg^^7JagI1ik`SE5x0W61K$Kkgu<
z*Dpm=T`CK>&6cn^f`L=V-C#Bi#p(5fPd?yX<cvp{6x^0Fn6=EL7JuUcO~fY2BJO~^
zp?n}-s2m2e*aZsF=r7*LBWvjKZdm){CX_JZZWHPuD}x#E_DWP)i(%QpW!xgv^3t5P
zzZUYyzIoq!aof=mmzD!O5?6TY!okaqdh5A**co6y#Mgbls7|;!K@Dc2R5K=R`TK{t
z-m@gmYudMGTOd26XG6SrPY_Ctlsj<feUTCTa7?Hs&OW?pU_wDqBidwfZvUoJQIpK7
zNEf1rnPm)nrwSM*C3z))r;(oxKr4LLzGYpU`}n~=9WX)1dMuaF?%w)XdynRmR`9$4
zoBi$Tp@xkTl&yVB>c{1c)AF9SzW5C_fKmeUws98;DZ9Z3=8}Te(RH}`{Pt||d%_8$
zT8IZVxk=A10d=Ppgk5;ckJ87(xNsU_AxNhXN)7ho-b)IsdM=rP3+vGt3k$m%h92~%
zgp7H2-nKr-OU8F@LL~^h!H2#+r&|V+_n)E14|?LS(|AFTA;Dc2Ab)7WEUb4tr#(VG
zAT?{kW2)~uBaYnnDiCV%GDa%lb=RXFaDdrwx=EOoz-y@4Mgg(5v(4{fh;MTH7twtI
z?{DBAG)M$R{j0dV9(a*ITk8Ba-j<-OjGL5JVMnIyy)?MO3W2zq7GRL27xa=3z6A=H
z{v5yEqkzv=Q{N<FC|#Umh_mgBD}8IZR394qCq{a8oO4q@*)w-TJlrk%vHB0E9s|Pb
zg@Z}2h203Ps|3el_+Ra1ePNr)5#Dm&xfRR=B8BZSmnbNx-U4OynrO#l0Rg{@U9Bts
zw3?U-GrF9iKw4D+sH&#r@N?z`y5@)l58MW`N0`GQ(AOdREO^h0*Tut{C8wd-4{{D8
zvjZ8g)TyqmUpf6XBCqmFpAU_7Rdinqt*!IU#@>Ctn8Hj+`pw>{Smy@u)f@hltPQyI
z&$2#F*@t#L%SbNOob1|<NhxKoYWGKxiFu11ZUj;(#g@iF2T>)HT4luq<EWtrlEe?*
zMy<a6=l51+fy<0@C(4lRd6Gs37t_oz5n%v}t&dPZ^&Qq1amT*Sm=1wD>kP2bpHC&~
z{C)(-!t+zL?QCtUUvs~J#XEyO->wpvA;2VV86OC-(YLT})~Nb#UKNci>PJ;oiXD+4
zSA=EOfw^JpeVKqXI75izq4bVaemq5NQWn4HT-LA^YT##>^TjK4&SsrtRLM2_fP0W*
zqBOL;^Df`V?IX$y^lq_u(FU*bK(QCeUf@%T-NY?*+Vf%e<4yA@U7Gt?NPl^IiI|VD
z-P7GM7`20q7wlZZn>X<|8=NQnuoXdB!SQyUCK1nBJeUy4A&Accs7s8<yMN30cAb~D
z)B5${ar0yZX;`M!-dGRIAjs);NKkuM=n7Ze%%OQ;&x-eRH#AhPQ*n{>{+Qh}ZQd`s
zh4NGIBp`Bp20@mtNF_A6p{J1b!YsXBQ6S#}AxNlg^`CM7(<%0At&o&8S<5WoEb54y
zr1me12(ffrsQ#mMQ}mX59Stqsd;ROT8pxCm7%xl+cWcp>0l&PX)Qmw7S&SSd+tiEN
z#RHwoKMPc4VyXz_R~n(Awl88~pu-qvd5(2ANjTH*^s3C>xN^!A;adfEz4jX-9@KYI
z2Orxzb@|;tA9nb0xn(Cx2Iv~(@blfB^o$um?{6l7#t#_zk0S(Xp=LiK`i6s!3*>W7
z{>U3Lqxyal-O*8HP$wTVBOcyVHc#CA=okFQcv)TL^S1=k(Zt)o9!sURNDtbIW8XB5
zhvDL5YylCNO-wK4hbcL;VwSXBwiNuj{;64CUxp?&I{%#V&ELEo`G-HbYn*dp$)iSi
zJqGO5gL_f4hlxM!BupCam!^aX)NlQ=;u$g#OmnSY-l$j=N4jV97AW~fi?s<fyg|*j
z`ijityyO|9=*EW9!TwY`=*H1eY`N$IH8?z@sIA#ZiZ=&EZe%3@^eV3U#M|JPA9{SR
zZ=T%}XT|~5%<u!=Is{gWu<)VlA?=g?6RBeoK@&9y1+(1~>bRI6D`md_sv$<Co&2Zi
zh|j++e?Dzcl%@dlX=jT!1%u6x{~Z*VbnYf8=6@A&UE#1}4gBb8<@@p@R_um6=5e&{
zY&H!#+jd>Ce>MGFmpjDcol3iy!>-{0U*_%NFzIyKsAVKD!|DYSfXmR9WLDoo|4CK#
zJJjJSpirmV<CMEP8fP3Km)JgnMdb@jF*F<^4?Ud;<W&|d1}!j;FubV@IbFl9l8=a>
zYd5FoWjTbVhGKyf1$nGK1RJrV3KWD8gkk+U9Se>;|4l`Qg#6+@P-)AK#D69`XIV@a
zri|nu)K>)4^8`>p7^*`Dw8gb#TKR8O2@NTHuLq%84?`W5@Nd%cL#kKq90Ctj<N@zj
zj@>V`qSgL;3*N<Mw#r{h%n_&5MwI?_ZpG04UDY+Z@uqzb#CV>#l<Rvd_Ud5c1`~?Z
z6@6q}U1J7(oZ<$1%vKefy21VZLo6xOR(GetYUI=VUqwk>%iW=z65)E2@5FzP%`ady
zz@7sR0k!8&tTs6FFIV`cdQ;l{tD~d((7bZ%{>tXUXs8)V`|yv;$!HjviO+XTiDl4K
zq^yYtYr5Rn7=!*x4tVZ_O&0hJ1`ENL+u3h$)UR@`MTfWCl6!du{v$mK9Oy@CO1SLH
z9Bj2UAzbLAPGtwpP=<Y)HbFD$0SJ|w)hd3=I`F~?@X84sdPJgAw;6~9=V{eLTCf1G
z2gx07?>hf-UNI|uy^c>zD!2QCucY(5snZDUL#hm35<h-6W2$r=oOu>HcWk+B{c7It
zdmF+o&z``!U~0D1Zr_Pr;~`pin;M;0rtJL4+u-be0=oaS3b`6{?YrXhggNNTbDo;R
zJU(H(cp4or2;M?0e6c{JZB4Een^9wW3##ZRGXJ~EgKc{1-&7T7i7$dQ6Y%{{4o*c`
zxRKV9dmo&$-SM?FhCq<0ip;$)V33_ZfjIrsg2Px$V92cf6N8F7*5U9kYBGTiH6I#K
zTt*Oa{-P_)(1>qPj~c+rvzr*>WP+mY>}68F7M_V1YkUd$+meUZx3kWCs;nQnL(l1w
zRPuwwszZ$V_(OCia$|mE%u&x`@-gXTF8&lgHSso`a%S&*)9KVikfMR{-C{Z+EzCE)
z+(6&kt(@T?XS$`gMR#g`z3zWP^?B!PM(>k?CSHTD9IgNQGaV&{Chfv6%F<dcGO3CO
zOWeehPeSl~6@+1OCR+~Q`g{U?ZLd}TGpA|+0)B6ZxsKxA$+@rlUL67MS%gAIJ5=nQ
zzSf)2*JIJokHPO@Bp++Da9cS~h_|oK_Y2cqZDc=$9@Q7)jLTn8N!LZpzpT*w@zToI
zoLzD^y!A3xdM<}gZG29za2|uX!6>q-pf$LheS}NLE{rW%mf^v9X$9j-X`whCy!)R7
z7j9Z3Ad2z_H^)sC^$q-bBQNT%fb-z#u^x)3=a3rW+$!p8VqHf3g1BSTo4Dm+5f~?=
z{H#jczd4*4%xK}xTZ4$@_>)qfDq(-vd`lS_)SeNvr2MB2TfYODDp8xApCqzTp|BVZ
zqlQjju$FdNq|5l=t~!q^Z&dKLXk6X1;_U^sS<t1oikG*-JG-o1iplfr$@VMa9gia^
zSQb}WPZ)mY99IjD9h$khIroOy-F!c~*|M!8zajAU(rsX5xSnSu%9*yif2;I?8S6Rd
z&f&2_x^b~bcquf~c3HnE0_6JV!{xpFssDo=)3E8?`h?~DF$ujqTS(o!2<<FuCcS#O
zAh!~olR0luz|TF|+8k3J^f@(4dlO<VXR4d``NyTyOaQwjfZ1__KCwDxR12w2UcyIc
zBo+3~JqVPQ>uzNlBWMAe$t?Yv!rW(sNZmk=c<~nyc}rUiriB$mRP10*0;b~`i-upS
zA4+|}T#qD@#SIzxM?#JJZ0i%*mBvR0Vmr%@udb2m&p7Ys;e_uQ{JLGieYMOS6$35$
z<I#;ET~*exRb8%ibZf*<Dsd9L1$m^*Q<JPMz~-z&aj9V);Q`Nw#UzP-U(XBN=V(1`
z6l5goF49kfCqF8HF*hY*ijirzm-75!a{<&XiC>Um($sJ&&Zdh(i+iu2c$?S^yr`he
zfsS}`|E23ziJh&3^Z9UXxqg!A*~NsgLJ7a_>VPn^f`c7wN=FN54EBj8)5nmYy~L(n
zc3?r><3`#}wj;C8X3}HJ$m!AsiT{$!xZ63t%c|0TDG^z&jf?zpScxzYdW}Oo6*2RA
zW+w8TTKm6@ch)_$-sisKfieeCI8=pekIoUs4GE2(XjoQ3NIZ>^@4FasJfMns;_KTU
z$WRM`1=tFUgUn4ku`I+}L#fU)yvXid=HjaF48x)u4ZW7#dzWy5;I;4|k`V!{yiuNB
z!6)1kdom1a%#e)mM2nP(i9a`O{6EJk7Wis?j-D++5AW9p?!yF08MhCT4d<B=7`cy<
zK~K{oO%=w?L_ZEHE3$M<9f*H5pf%`%%L_H?(S7FOZ1?E>TGjavWo_-+zK@_Iv>8Ft
zBF;vL5vO@Sf8>lOy_y#t{pjQ0EuK)!RM3kpve87XDEXsRZzDPXPKJICQjx3Hj3*<u
zy+}n1tz-*Tu_<R*w-H!EF;Iwr<(WC(y6LU45&FdXpy*u-lp&5Bz76^6az3G(YKd*-
z6B+TdUYBAQGayfG;1E|}C{GyH0O;9)xb+#2ac3`x${434w19vTLiX*y$chzc41W~?
zhtdz4Mr6{$-ieNcS5}el2P76*^kgHjN4|x;ibItDt7{d(5xqfqya$R7!*FwA@y8g`
zc#0?TefoVv#2Q!8$!gIKVZ;oqn2MFy)SXknl*0_P{c<j8y}!HozA^WfX%e&>hcC@-
z;H|g|(=g`p2i}t}lsBzxU#2Hy3XPCLm?xCcIt_!OjN)Uh;O?JyBks)i0AC_Wa%(b>
zbJY`hhne(Y1hD1|gMi^g1he}>S#h_sDjY;aazMVnI?9~^W4%uHNmW;kpU3{J8C+DI
z!6rl4c&K5=PR07ACNq?i+V^X1Ikg>NgDyTi_1Ip$r7*~b7bf<Iz-G^8xfkewnqcQ8
zp_uvH45s$4*cd)N!MJ+NpEK$Agzx*Zqr5a+G?PDqA5*@oIN@Vl$X!T{VIu@j0>-%t
z2fuM`p(Dd-e|lVgj5H~8wIi+u)x%$=0X|i^u+8byF%{*{FBJ_zO5xqsDvA<+DB}og
zAEi|@8KG^3Y@XnbgG^qW%Nucm)u5-)q=5T_o1=l1ytV_?U*!ZVT`FWn5f&}=)qZ<j
z*wD*voNdU-ws%hC<y*wQ$ANyM&cwr?u1XQu|GKce1HSn-88AKJqdgE}!}q8#{c~FW
zE}<#cl7wTp`1@EZN9}=tB!n?A5N9YqSx_Fx;~SsOaC$r&4a&NZS846o*-QXq7ypyZ
zrDntymFCG{5@i>dsqRRde-&7V$)p@{fgJ_#P{qAGkW*cKo34?epNtL{|4|NQ{;9q?
z#H|tWT^E8KPdK@B2LFB0M|7=oS}Wpfm}<-co<?!^lx-HdjWJj{_!1q!gpA}y$Gz1E
zuX{q$Ek8r&Xv$UMDBJUb9Y$Nt>Z{B(K`9IvB-7y7+dcwQ?89U91F1O4!jUiBFP`I|
z56@kCdBLi#WzIrM3OP$Tv2&e|v51$?(oaY0F;kl!zk<v^_E@)6NUs_sLtS?8Fc8L&
zrQv35Sq88bEr@N!X1i&V4HT5pl2T>Y6k451a{V^&nF!!eie#h(h!p3n@O6K)^JP*e
z3eorSJQdS~3%rax1L%HQ@93$=I9J=M<-|;v9&dZob@Ph%Tp)4X|C?Bolz(@ijaMD^
zSCCpJqiKF`nc<2ST9n`>4h~8lBP8qY4s$8Ss4_Q(zfd5|JsdNPm(jQ?&T`+LZsFag
znb2-jgg=I(gAFy->^}vf7A7Lk>Wz|=MWc|C@D=AQ;!N1FFbXzvC9oEj(~Hu`qeSb4
z2KY6_>JQIJKF4AJ1dejDo!Ocwvok(ItSMJNa#5W<DkfDX0uQc1AIs#&<BKPGU3Mkh
z2EknlBV)`r*25WSTkT>+v&LV`1^?MhwaOIZAmrC}&|v8`W*nE^CC{3zL@LWA{W=3S
z3^Z*i?nN$>!p8WTx-t*BHU5y(mj9K-wP3q-J7oUf-Nb6uiM6fpWNI}+2$26btg=i*
zdx7Oq$CJ-kcS~oYo8}P_Jg!hX2=LqK_Qkn<%s_*Y-vm)fGP&NdV%xco#jA~UN{^!9
z6kE0zYnmir^@SYnVZp)gq4@ehP-ot5#c61nkJ{wc;QE;J<;W2d$sSdkLvtC?;YgIs
zPZtE5ayvth%pmxJ5nP_zLMVrocIBAjt^kyC>xsWXrH!qvn;sok#ie=dyM3qda{-9~
zR~wMg!gE9?`rXpH64s=<8}a`d<Svg!%psuY)?$5r3<-~|UUcVnC!-dY@5+Q{<{>V0
zzX$mP<oj;nZa(q&!REo#5|vdmsj$oG8zO5u&tsPp@bOwBB?{7d_x(6m6hg9Rb_>nL
z{^lHPKNHyIJarbV{<5jK&pU5Ya&5&69Q_gDvDYg?4?@uYmXu^=R;o$OZ6t4|;nQYw
zQ{rr56bWLZpbj|V<K722qjB5H|ISiK!f&t#{5oJ^2DBLGl1q2RN0?m2kBR1MMNwq$
zMcY;+T#Z*lLKhI(27D&64*z&CMa<(m8rF7&TYZ6{4-22|>*_WP-(?GqIb`VC#amyq
zHlCpL^9dFYkYCkNrzB!u3#<&<^!U$ltQU@(-Ttq#JJ(w*_%RRiyY1MdzB6Ag0^{Q>
z<aMsJx!R<{t7<c*Pw9tMf|VnWUv~dv$^E)AD@wgGcdD**CEr(@VQR^e-4`a`z|niL
z{T`iix8m?bYCA1Wlb9J~<?Uj>=A>Bnq6;NY(yb|s$2*KOkC}i|G&GHoI?5s%hwM)R
zw9~X~ecq<v_*F=WKUMStV*LmHTDB3bni0%)W>wV8Ar5#AE{%R~)I-S@i;uX;PO4mB
zMU(X03%@ZFQ{K--SZ0JeZLF8G#pNds$2k#|4V8}1tT2D*l#h?;B^Lt<@=m`en#$xa
z7peS>*RIkvi+a?t^EU`%o%*S$aNSg0!NI9Ir9se@a-O04zTQRbwZm>NrJ=20y*FxU
zzblC-*h#yTw!*(%L~Om^9k_k;{q#huckvzQWRTpTG2ab6+a#<OZV&UM)pOTWwrhz}
z`!f^C)tqknrv$4BnMh?RIWR$<dW4mkR`xf;>|JP{tmm>)mVyqh%zn<qb{~g#(|W3Q
zMO|-#>sS5_2bhH&HzSWtl1>?PIhyMweA8tvOiFP#(~gIvFTqBse|#CyV3}rtBVRX&
z5kOy1I1ydZsT4*>`>q|sL1zpz2)ma@6+9Q9Ut7vPS{2&%8D&JSIMj;LL+Ht|({>Hm
z3x-clV8coIcy~=^;f}8kcCDeqn9oF`tVIP8Enf#NZdk;ErZ%popu^($dzc?5ZuXg)
ziI+n*zMc9r3;qU=9oNkt*uf3y6i+?cZvz{%%rAKYDm~5=^WE21hLl~^KJd|KdviS^
z>W_|9Ei!~?`|@6dW4);bA6?rYA3=0l7FM<lEAHlU7Y3P9@Q3ERJ?KpPjN8w?GY9H@
zy1#KoU)QJcd9HVhAWRuD1``E2lfSC0<I4`j@^cljDZ+FQX<WS>@&XL>%h#w5SN|mE
zhISkO+PA|K1g6x(|NJ??XE;j>NQ?@``Wy={!REPm2H#N324w@H)>lKY&yN<MaAcWY
z^v!JSW)VWDDL+8PXyX*HA%1-cJ|~5aDGgDbbVYMBDrh{m3M?o3PtvBf3Ihc)Ec1@d
z+C-5`VN&}(xhkKjcNIo-X}+<l5aXJngWO1}L0iZvsG;MEkb;h(+8VA46vM9BPkhfR
zw~QaBlDZh=;xF@-he?8bg(=Rau(`r&t7!S6kMHNd{3h9dkiCR}Vxm(A2AY0|x@iVG
zUDf?3CsYPTIY!-@Q42S=p3Fx4=&IlOJIX0(Qjvz5#VZMa&5t;$8eE_sxKCG$lzlQ&
zALQDdl>2WmTI@iQAazAEy8j13K)%0hAyx5Annuqm(b}U#^}$5XKb+{rBTCn*sjkHe
zP3_82w<K=*!z0so{=)f#7d7*`-%n_3PLJ}A%j`MY49q&fW+NxT16j@AqxM6A+G+u^
zuwBOg=Qet_9xQuX1R-)A_)i()P|pBRCI*~21fuxLRMEab>YqzZGUP%ES11~trEY;Q
zHTv={W~={(!-xJQaAc|J%3`6A??ZoO5dGy5^cP1k<c~$=zR@J-xk!~m#fPLW0Nrv9
zR9{}m!91{jSgJKcN%BzrYxv{e{%U1vX5q_K=ihGqKQ(^QiTJ0d0}(H;H2#}M_DXKd
z^Ymb!tA-|XYH(Xw4qh}?8NF=H_}DpXC;LmA))cT|V+G@DOBgKYR6bV>W929HIUkFQ
zt~{~m$@w`Ut1Ch_BPnT1FJ;;lADA5WFg&O+HGdHA{o-fU6NgT?A~*ZX)p+k`$P5!z
zolDe8RiTxpiq?UA^VdOVpK~`9`qb^m&)NDz1vhs-8fhZMq(n0ZRL&9@JQt|ev<h1!
zrERb_O8YaNzK-Z;*3!!~0~K!y=&Jvi`%&~aZx}g@%#m<ak;#Dz=IBys)7LLhrVQXX
z;0I>b;qi|u=oSqnnsG;mTZMwseH0vExL-$)KKbXR#m1fQZtBPWK<ZLiqOwM!a)GP+
zu6Jc{W!@iH)1RNfU}XZM{i`rGID)}aUl@oW38-sAv%tFM&QuQu_wRcgPaK$rmM4C3
zQGM=DoAL4s?hZV2ysR>SZx-Fnzp|s?_sJZ_2YfxY$xVmPF1o|lj+Vx57#|&)*s!J_
zJJ$DM)7moDt}S6`xRgjI-)z-9RbBSw+_W$EJPJ%N3U_H4ZoMTCrN-E@op_ncBzrm0
z(%7?<!gmBV^limYT(cS<3_hmr+;iV8iJblORy_4hw579h<oOq^K%%FcsaUu>YR%tP
z%<GWWXPRQ$a&sAA>@xNYk6%-*ExYpI*6=&vUYG96c!2JLfD8n3SHUm>jm=x-0LlVv
z_rbt{1Oght0Lff``T<d%%<JJPLBS9pd`BZ+kf`)W%9B14J^QIJK0?bE={5)8VJYQ%
zT{Y;|!oI$R*5KwtOG8)qhlj6no&NIzue3Vv`+<-#(lkP?U002;`lygA{{Zjc`<KE!
zGueA~#`s^h4xk&|yD9w1WDMWU3m1byPOn<$s?qZcV)W_(fBgFKfzd4+Ru5w5mO-4g
zsSoSdR503C3SBp^qR_>{f{#N79QXeFB<7c;zub^$CK@rX+ok%JS^R)Y7rW-@$lMyH
z)^<1F5Ic@elGM7MoNwdcqAzdQ^^Pb^@~?Q{x#Hu(`{en}_*i(djP*B`BiW&K1TEu*
zSk<`=#v{Pi0=vpoW>ANRfjR>}J>neto9+ASX$kfW02$w6Z~^`~8NYQ3v>w3PznMxj
zBL#3|$|Znpc<|5oZ&(vl!*ys&utvEE^p&)9sElEvFx{IPiI$b56e7$g!2AMmU;)6r
zuH*f&qbja!7X#5Qmb8{RA(B|5QB_X0*-olPwYVn`d}9)ug@iL%!Ar~me51iXKf34r
zLC4i212P#qJBP8WE6&9AqkZF-t{Y$DZ<-vymUY9}w6-5(gQc*PFC<Fjuu^yA@gu^0
zcuu+V%L>a4piTmn*|rU)>l$OHgTO2<m1$iU*%-$|Q$%--zvlwu-WnnH4w_ow$+^Vc
zz2#N)<z{2sb2Iv%W9I{}i__|NFhD{w=1hv8ja3N8H{-7?uG2{xtg#a4#w~oU9O}Jw
z7Jqh^ePp5^cKny_&WbvjJebKKvhm=abF+g)+|w5f>lq;*=HByOK+yQErU3?v37Gc3
znNDN}KzjiLD!u4^A$WnLP<iy}d1czklXV1|CRj*}h&t-u_zoFwsA;S7cWmIj&f>e7
z`Zzs~7uf-11lMmg_?%x9z8EPuYGl&Wt1b=X=ye0Z=#`U$6Pq?oj$zZ<F>F{pjPcR_
zsN7en3%IJ@l<s0xx(D|tcd@G6dJAZ^88l<StfPNIb*)jpW1C7T+-2=Dwh2Bbl7=w<
zF}9YK9+?xMEZUr_`5hUSM5q#ZyygU#?s$E@878k$E4Td2RQjPm|4wUFEu!g^Mg(oj
z&C`P&G~Tq|>}gWHZCiPE`Y+@4_iPNxT7|~oEk)THd{+vLSBi9ei~${cWi)xZ0gkKS
zx)Rb?Qaf64DM06CK|-1Va6KVClJ%x6z}M1af>T#${CThTd0(?v*88<9&YC%of<Gud
zJ<=~!X-sOrWHO|<4kuhuXw+g|ZN|EuwwWRP%_+PmcZT$7>lj`H2avt-ClhRZuOM7K
zSn#lVb55^+Wl^rab*Q}R(#hd*xoOQ9&YB#-hBZSN9_<fZ-%pxtA(tCM?q3#i<!Bnz
zY8tJOc=@DA(S0WV%Kb2kKW1478#`a<cJ)@)U$_6}pIH5?u8yYJcW0JkS|`8(*-p)o
zTopftgSJlLCVjz0+iz@s`N8==Yv~KWupB+~?01ATi*$h;0D)}Oe(PxQImW=aZ<krA
z9r-oJZ?^hmEj>&BHSA*ZR?AK)fS#Fw%rW$+-*#~W>hRh0-VwY!NxF<Yk~n~LY0Q@t
zj#DT{Yc_r=T|75MF_0K3r0^xd7~c)n{Cua-UCdJQCi5kn`=$YB>;E&+ziQXWK$#bd
zlDcXbw^3`hvD~PtrF!*nD{4HgW&0V0<)>PD?y)u&j>f1~V^NP9?V4F}3jJ-Jg1r*(
zaz4Iq4xp<vXWn?v4dCjLvaeR}^swgU5>~%ruz%Ght41f>4U?;I)}~chvt}q7=<kc9
zCuA52*=P#+_>^#~)x>Qz6~d;K*|tKIS&E)L4I6xqk(%Ed#T~<kF}!ngf>uG-&e$9O
z&=JA2fwFtabe8W}BkH0QR7*Rk#SQfNXSrL}Um7;{Eqt!+p4ie#rlJ>e0vhp3!X<MG
z$8pRy^DGNsHl7vkv<}GB{Q9KzUxxW-c>lc&zs?{K=i+={3u>Aop!;E&E`XGrfJmMM
zWHOSZ-NR;cF)tElaZ>x~nkhin)yR3&0@PSN(nckqr=m~kf9EjRNzUz){o;z(SH!lz
zK7Z4W{u|CaADhR=!*U^?crKLhCerm2NYR#URd*Zh`i8|uZNp-<b^F|61IOnZn3}0$
zes*cOR$ty%l}itYYU#n2Sa>{i77j*oc_l<OYDa`oo?h9)_sIct4YTO4Ef<orUz<xe
z{78R!{JM#WactVK9-B5yV$JH2sIOA0(_7t6gsiuvJ9{Gan^h&-O^qayZ18+D>b4xo
z%<!8vb{pOK*=&$B#%t&E*%6qtGMO*~UZy{uDcM@Dz{o$Z74HTAx)HxKA=VM&?M{me
z;bJ+e%gOPpqQ&aWx^$-cdu{QLzib-v-~2tIzfE;}IZ+7_=@d=YQ5%jOfHj9KDd6YI
zc>X-kpUHl8GXS$?)H(rv!PW_o5|0J@vR?l;>;trL08QOx4k*h+sQ*v=eIsgW%M<>c
z=8<LE0Z8PX^;<#|3p~r5e7Dz2hGv%iO@009hL4^#boLE5U37W4b@kS2lsf*w+1O1~
z>QX`DN)Nv4qTm-$$`7M2FT!<|RGqyxR>i>xP9cQW4Y`suOEW92i>Hn(UwrgP{ilu{
zYhdPh4fFH$<wmpiconl>t)|oW)b#Y8rktONoO-*_uJM5PH|yG*j4ix09m4m)0hkZ7
zlHXX#r|14+S#J5yTeqF(UUcbpY}!5^_Luu3+Je(gq)QS0;B?|Q8x-9&VwycqrCByX
zyp}B5X3>}X@g@Lr#J8!xiOM$Pu-|t;yl#SEyItAW?vz{>)w_=Cn?-Gdn49X@77@<_
z3Q1cpPPD&c(@pio`phrIjT=6<5Pjhb-+sAeTq8|^)KStH8Bg|`Ou(k&op_XycZf!3
zX97B{zs`(6w`FMGF*`MAFW?^J-~2P<0dSXrCGkxuVrGUJ3*bedlF9)h{h3i=V(>YX
z{%Zs|V5A(QZ(U@Z$ahr&bl>Zd-1WOlxcKvzZ@;8+)%n*gLl=TQQ_X-rZ{L;h=y@GT
z>1fqT1?n-d5NbF}1eZ86=Qs$w0L7q;N^uDN{VJIpP|5c5+seH@RNAkpIBB`_t*Ep(
zA6`9oIK2A!p%BLpR&iwiOgOi&_{@r~Jv<*By`v`Po{V#~sg_)+w$ySIhBVXh?XrcJ
zMyBvRb^zv$7^_@%PM^5$fmH*${Hw3OJUaifi8_RI(@4mL#WZNt$>39jEx~Fzq=Utm
zYDzh$x#)SDi#7Btoj2cG<L`~`qW5=Mo!?!xZSIpfi4Ob4Is@}_^KDN(nt_And9q!)
zo##7AlHWcjSx=-R1n!W#dHogj#*@pRkG!ezTKwe9w{ilc|3mA&2)A%NQs6X1H}1DH
zAHREkW-`#$@tHJOch#5a?HjqUPKuwg{|w4+N`cJBbtS<phQLp0-hVCw$Qih_NLiXK
zzz%f-%(?K!aA~#x7d?T|kv4*XCM1vUI+Dp0-{JM*J0&sZzxo&Z-LwDOjpyGGZCZ6+
zb9$*&h|{_$iy#rFMiq!42$wVkY2wm_qLhH>k_4C%WjoXwX<MQmIhbD5(m0L0^qmxi
zU=XEBit?aRXAOtp+1Er$zadq^Y06fu?$6AG=gk~yop=1X=8qoTzl_<#bu7)*X6I{5
z4=l;)uPv+DhiY<R-?EyWZlW56Ve=cXh0M`*5e0p^H~{lu7QD3;KR)-N4eKt)Ew|lN
zzxu6iaCm<joOqgsJ2aw@w#Q1dK~}Nay{S#DU79*ROZWMKJG<*`EpHNJoAYOKc%5`V
zGf12EcFKcHJC7AMtzQ50W(GPFx2(RIJ+lD_&12hAp(m~HJZI-A95mYvIo5xHTs?jy
zNvCQbX*q|lPEuk8ev`~XBrTe?)v^ug7EP*c9aiQ9Iu>g{z#iZ)a{|2@05)sr*#XE;
zlR3iYEe1Jh2~LkXkQo9pO232yNCqQp8!#(RBvGu1x34j|z7D6*MvkxnHqRG2j6?LD
zvKaB+_-8};tv_?~`ERHW_OJJkEL7cW%94UZ)&}JXMMtvus+mc&K(Cbyqo6^J5xVij
zG4*vML53QUa?otKJjU%Dqp_y4^gU8xN>L~$s0_uJm`K9)=SNCkA1mHtu3PTPQaC()
zFuZ;G+4}9r_AFy&{}QH-E-ub3Ej_lZmmaRl#fN5b{QgBff1<9I!*<ll5T~BYimuZP
zNY*dk41g~F0xtNIiGlOovB6g~S8vmSK!Ta)1fmuYx4NsNZTpJbS{-o9MlYIku|`Xm
zvt4FkqCH8=v9h&w3Ynkis$=mV8VABopr=Hjl(u7pwqCY<wvOgzM#Q(#kex{inPCpS
ze`^vByZ*;=^^JgsL>NWxmi0G;_2%4_as9e?%%z`te|IHt_s}|S5g`apEQx|Eh>T=U
zhU;&-bvXehrSCO*BlE?GzghLg1R=AQq>~Y3Pxib{eAZ&@WC_`w3<yYF0A5zYl3%pb
z1FU^W@@7N=qJNW$&#Fp{v2{%l55qHEfETC%jH}PN19HfD^?O$LpZhbfxbTftsFC3K
zBF*~~*g$xtVH>jYP><R&??#c-2o^L;z=4DfjIx&0NQ$wnIsF|`Ehr1Hs>F^2Q<v#0
zZ7^=N9W1pSOfBT$9e|s2l#(Kq`C^LlaEkKkIN3hgR@*L!l`c{F6r-`wtjr$>ubX|g
zcHPvoRh-zrh^fOf&6$O{N9V$YuT4cKzA%UBr|M31siv0OahouS-YmhaDSt7_h3}CA
zFy1`xtQ+a`cKqn-k?X>Rm1V!(?!)XM0`lyhDx*-_*<+UhYrOg@J4`6$VHN(?Zokcb
z#{jr3-?K4U{rpSIl({FN_L(@8xsx5FA^m<%zq7uxO@ZyTrUVVVSblxyLo@g6fPl7L
zXi5OHt(TpRPT`1(ziGqu^~Te4e;@frzq%4Va^(4?fJPjrX#yGqVm2U6){t||Bzc&f
zU>u*R-Me{9Cler7nzaBsY(UcnG%vT~p=`C3)&JdcsM|s{#-H7cQ?i=>ObIp)h+b<h
zr%~_)3wIQTA~cj|5E9KU{@Y$F1%JZp7q|WMWdFIZzvbc|s76UKsJ5ysF_u~~gmDw3
zp4ibU<I2KBRLN<-BI$8RNjpd>Tj0q@?tvOn6GLb+EKbReKog%rkwYMoBRL8xZAhIc
zkx(H^xqGPAeazN`at>(eJ6h&*34%hb3jGPnYtm%>WE!nMH-RqFrxhVwZ21dE8kf)S
zS-kxC;|srf?CDt?KfF?(TAF#_ggo)7Y0Q3kUd|m@N~h}~k-j^fGW~LJ0Om!w7{9!f
zA5*R@CAFmLKKFD9K~5SW35(oksdv_Ex1H@SkkXS4WNWX@Q)Iwi4<^uQ_jQ3mHb~3n
z%O0<n#m5obf@1tfB!SVh2Fq->vURrA$mb|%tLiRC;N&(T7ubA_NyVeC#1DvD=qqlP
ztH#eyqGPo$wB4zlVKPm-b9&ynBuQ0@R4NdmhN3M8P>#Ab0{2Af9=2a+B)GRE$QFKf
zQvEK%(J7ZQa#8nz%@;G9XPh3<e_gKsjT3NtoB%8OQu?10=r00m)-<><XXJrDj~<8q
zO^m<fugML&uldSI>8wkyJMV4PS}Py4;s)r6iKN9De@14?TCLf?Not%Ime}12<OCcO
zFbGUFi%)EsVrMDnJ<6DksU)nxC^OSX#v=|&O3D;S!I>AKNKJE!{NATNR4S!x)5eyT
zFP$3T9iuEFm0m8DK|VoHPEZ)DsL3@tntaV<a_&2ol4;wm9jh1So>{)`#G`Z99eZ*C
z`<^|4Cr?a$et&TAclS2${#qD?`upt!zPBZScE&vE%QS(ElNO$OvWE3rhao)$-RMLa
zo<%iRNVk^fqZ75et-K7JGe0M&tm`Pu&kb0}9Rnkf+xdAHi0L^PbTF(y?sMA=fVuKn
zx}60aDnU~)0fw`VY}(GKT=Q;Bli2i>6`jn$c#w9x<*u2yI$T^iu_dWq`^zEz`S*M8
z3qi}g1yY?z-l~)B70BKe>npSw+&41|*@d3cT)xQ;xD2Ln`8@isJt14UcbAJ&@{{4G
zy=jHaoB(A2Wbm}8#FvD=!|_PI*susFo%UTq|5HqiQGG`<!A2&m!>{_LJ^mr5U*7)N
z;nKECuRQ1N)q2|t+DQ{qx*cU9(__pcxcRJ1@n(QY0|pppX%><g!WZo;;H|~>y))&5
z>87whmBw+IR;L9!>3x)1appivPqN>4HzP6p!LMIx&~npQQd&aaIFNA;auINz)6%<7
zA)ibApc11vo}jdTDA{=V2DRb#9Ob^KA3N+m^^u2O@wva-`ii@bZ~mu8<i~z^C7g@C
zpHAR=>Hw6Ejz?*zNC(D|F^(UZ#o^~l*l?DQu*!@w#gjC)hV8uMEE~vrbhhr#erc(>
zhQ!i40An(43c37Ex94xXNSD2L64Ym+yzQo$Az3PFO^VMpXIpUw^fLRRDKpn?5&+eT
zT9sY!uUmu&0yX({bsYim*j?oPjq7i$hfgj4*FIeIv6cA2y`~PdBpsgOPdM^Yirt|e
z+n&40=lP<Sv|5}aEu$md=--**vtE$@&1P@tJKgudTx?n2Kf^rOwf6M?GeQzM0E+&;
zOR{Fh;OOVn0U$eEJJdoxAF^g3sD$B<Nqke|_nbc2CvN)N!NTV2F4^(6dMnNaQPScX
zgS7!!T*PE#?8q!p!vJWe#_zO9EiWN;G>=q}bEfjLGc08d-ue>bGqlMfIq|c4h}`}(
zPM~us(C_$VvLm3ZKrpVrWkW{N$}&U(NXcn<KqLfO%7s|=;4T6FJ|zpKM3zU}sElj$
zZJxlTzwqktoC^+zx&QRw+v?AxLr<v>-r9<4_N?_w)dAS3EUQn|!+9CCt7gTzSi%GM
zO<}|44JZw0RA=eEGSQJVVK`Cjl+|7F%1$qyuXDQ(&o<(0%R9rw3{aTTYznu=JJPwv
zKzmw$_B{DJ`m<~UE}u6oz_j<`4_I)o*_QaMc$KZbN?In`*c#ek71olw)k~(~M@qQ@
zZ57MD{3dr|^#xJ;$n?Lq+(SE}geK$oxd`N-*+l8&v?6^_BNR;AgoH`CS?%L_8M}$}
zT$p5Ozawn>uZQSkQvWQIGXJKmx${7l*w4>t3TLkQ>3PWtNUqSy8RKU`5UQ66Wf#=(
z5!ke<Y04<Nw6f)gCxL**Yv=t@w@<wKABXch-gL>1chuWS&X3a;HT64t5wmt`H(RmM
zpFv3z^{EVTa&`wH4@l7lVa*OmB^KMUrGhbRlL?s1OLww`j0nb<hh5T~p)*ES$y^ik
zyM&wsWrL2%xa?I$r<MJ!%(9BCbs9SwZ7I-ddssf^qi{@P=wJ;)uc*6jajbOHMVBq#
zH$DA|>AACSJBGXe_4{M~-?Qz&=F~%V>_{s)^vqKI3E!82a=jGuQ!}{#t|gTF9Tt~l
zRat(MyDBs%rvj$lrigC>TUI9Yq}IlYc`X)4e#Xbh=*bC?CLd)4RFl$IBR{2jZ#w(E
z{d>BAEZEp7KR690M_@SdM27M5fFzx7S4b@>+h*0wPDx?fl35rvR;BpTa1bV;yL$YJ
zWT1cN<^g%rZ(0#f&QX+(6D1=l>G6G9s7cH_WBdk*w~^1LwHdJ2CH(YY0~vPM=@#@%
z0~*(q(Wh*BY@_7!E?_b=2LI?B{Oml;iZi1B($~>Siq!)#RO-Xwe4KWZbeI;M7G^#-
z;!Ff@`Iq6sxo^67$J^_PD)?>E2!vx+sb}px+ex8fhR&41RmNaM_dEh~BVGbIZk0gN
zZr7AHF;f=6tHcEFC!~cdw8N2ZBuS=HDf#}iYK(6rYi{pnZxrc?b3h{|tW=bOzmHNN
zOtosKT19*VqQu<V%KW@d-_zohwpsW>JeOt*XtXt!g~Vb~f}G3YzK=(Ee4ig|7~P;8
zwfe_g$9<`n0LCXKs-~KH|Ibb@KXgZ5@vORoeBirnJo>;<jE?3pu{yvay-TE{Z+GH#
zx@Z}LkJDAtPV24VGg6Le#~GC0fPyCF<#BnQ@9$+~b>GyE6prPwTabYx26NrX>5w7N
z*VG0^E*#1DIKFYDA>BKUa<tKh9TG`z8!W+;Fx`@yyU_f)$Q)_?N8Vqz_NHe2$+>s+
zd6$2DIr{n|l#r$=U%~~EvxXO0<F~E240tn|y$tVnjo(K4P6?1@LA~Wv1|VjU|9J;H
zl`IReQ8vp0xC>&#24f^N{KE>sz{b%Oc}l|*`k#i5$)HFT*nR>uB;^Dcc3=5FithSb
z&fET`dMYbHl+g5}XXpO-bIsP3m`)0#GnS~8Mg73Yle>Y5{yY!W)@ajOc3Qd4a}Yh5
zq)l!*%Ua1XNX<h|oVA<z2Et7k&tOa?bAp!5$o&QTe$r!;!|37)rmWy{i5w1ZU*)G@
z%|rqlX<mgp4=y<ojgfJIy$=@fkvondFC!_$fDF9B)gtjM#p!#W2Yin*fbP*qpZroY
zn!a~x@!>+==}#ysr|}}ba>rqWErq^O8ZR{w#D-7%mnVNUG~TRRz(SW?GT1s_nTTy>
z^XYqz>YND}h>`!q+>z$!&0-2W%WoWrDG{=4fHMO7SQI_d#8``@3oa0xb~<^%n{51w
zS&T_P(+*_=-B8L?g|<*6*p9mnR7FS^iE4vNfw75;q9DESv%WjxYTb$@3X;y9qM9O0
zr!0w(cSrJmK1#pY_%!vXY5TZMTW#vvZ3$*nV0)2f%RTJd+Tj)17@c7U42WgXKXW*g
zVrM)At4-*ze!p4h5%|FBG8v%D^leE!G>X79cufkT6m6UU<KF9kz3goLsdKixxehrH
zP~@ivO|9lJIrKzG#xu>$q0Gvd0cAn7KQR!zh1jEYVg=1=>=e~0(nb+AQZ;J|W)Yhr
zdD`=pvI0_iiW7k-&hA55f{+~b>F?s68%1`$5A|sHxp-$I|2%sxTI)tx0DsjS`6GUO
zZ8C%Gu~MKFQ|73VdM^IqQ?od>w19>ZYOdKtqG|gg8NdBpUb-M)mIX9)O+WBDu~L~T
z<i=Hyn}Cwbs4h?AD|h7anm4UQSTjb(wRFPOcqc$pYHMcBOpTkh1FfNR+Haz*y;;L$
zAv{eRb9;cmEPJpSMrRU`BaIco$O?Tcw`HD7NQ(B7Ck{2doMD%-p^>xpY?i_6#pwbz
zAXKOM#TbKi1~w<jiiAkD<+|0^CDr<gv84IR{~G%b{3fb0OcGU5RNL~_9uv|{x@|{-
zd&x;%IzzXNx7>zq>&&+QdMLka>zrhnd(b}&R%2^riu@i2=Z@hUT>wk{wd)ILR%0O0
z2poZW+ed}^y!5EFCy@4r3#nY!#j4=#zm-q7zI(^kH`awe7KCww$zmCzpPge?>t|#h
ze%~lS_{IUd1<ejX<cStwL{iDPXoVUP%NYF2#7`~Wk&Qgl=WGE#MRSd&hPObY6*pl=
zPqh&j9!7@5W)I5Yzp>;hyFbAM4)fSdn(AR98pmv9)fq3L>qTL3t%omsX&#S0bJT1~
zk|H@Ye*n$&=)ba>^h+BA%ntLBHsWWeJ#Xx-N9Tfn-Zb&rx)grk=Mp@({}Ar_YJe-R
z8bzy-^2N@?px$g<^$gzF;U8n@mI!2xzZ0>0+kPC)dm4W>+I5^lX7BbM1oBuV9Hx=*
z)o!=fQkfzmv%r#80r^GSETHF)3@FG%CffL$F$sC5!9K60!f*zVod-WYsoVJO+R2-u
z+OtQ0xmX%;>b3StI}S%_I|e-;U4k5inSyK6aJt5rwPKZxYzvEN0!&`9>8X7iJ9Od>
zx50P}lc8p4zg-4OU(JRx#vh~wAhVKyoe-tS<oGB<puwGrM(j$ow2P9a)WyglMq1J)
zAb*wjnjiGqo8G-;%Wd@_zb**ls%5}+i?i%Rh!DzUh{X?Ce#{qe@)~ZD9Dqsx$uZH>
z#J0w!m214E*i1)uCLc3|o|OeG?;+zpIJUH)=O-|e6D4V&!)$6YGj1kXN}*h>nU!qH
zgzgX-p@94xq>adzj%ibpgaWULC#N7aR&DU`%+pQ$+n4r1qYl^Y$3lI^om$zi8tT9Y
z@p2pouB8ut$Wy~_pPIktRcj`044cui8w3#^x^F*5$Me{*ri>E@QUbd=t-<clPj`xs
z>-<hx(Cz(YPQc&*Hr=-|zrz9OObKS>qpT*j4uR2z4(UfS7}(n~qzjQ)x+Gcc1Ab9+
z#3AiIN!=@<d6RESfFWTTso+)wgHhb-FclX^SzD7+bc>P*h1@#1det@2(b+qHL24ao
zp%Pjo$iyDo1t7hAc2YJPXT^R8yrb{Afz)Lv8tz2)x@~l)+=c^HMy9dYMux0g(2v@9
z26Hfzeq5$`HVYtwVSv&sJnioT+VonqgEVCz0BM-`EA47jaxVMxMq6CBX~Qd`N@aV{
ziYW5CJ>|JcI|vmqpr$cO#yIFJ4Ibq+oD$%bZQY+ELpQ6|+bw~1Xpnz$0Q|XTbh4i5
z$?SbHH~>3H4$@?xF_n5;+8F1_+$|fm>EBE=I;nqTfzoUQJFEX~IhK(s={(5y6M{_u
z<EnKM%gYfy^wGTtlSOzA4JWDS$zu-}+WP2kRHMU7->>NZeR2Ti;!9Oi*PMIa=7i-V
zh3aTwu(UmCMvJcNRPm)RJc~EK<!lU&<ghT6&`KH863p^d3kjLF9@mMiG-rf5v$~(1
zgXsj&5C}ne_WP3^Kracn>kK$ZcQSx%3Qiaz2^lth!W7g<s+ZPWhXUmx!55??+0TGv
zjaa7->5}2dQ)WOJjX~lK(<WQsX?luw7D>7!X@$*eub1s~E;>?sO!8JBig5H8bpEy$
zr=b_VVr@F!JCEP(3RnQlMzM@LoB=*oVoYVPl{@}6&&|008T+quBL)oh{)tylQ4K&q
z>&xkVAT2-_XeohEIY<};lx&cR^3ZOUuiL)yns8|Fe77Ek#`vF4lw#TveXgc1;o&XI
zI}ioHsQ_+8z@d%8fi<iUh?+puCas99?8*kmdg>f|DKWOod<BDV=#D6=ooKYcAa?>e
zy|=iDWis)mqn-{Gt4vve7B11~y)+uBokgllFOvpy7@9OJ(ht0EFBYp)aNGpt+=x0d
z_n1Flf9~+IeBcl9eLlWV8Gw0*!gQ+9@E*B(ZmIla-mO%<+>ngZrffHt@UNfVkJr6w
zI|^lq>Jp{JR)v>afLwD+)6%h3bcgY0JU&ByLQ{aWJfa@s&r*H^8}b>^ed+Gz+GE(x
zq?`PWGRDsr3hlwOX(HW-;nvh}8ydN~Kyj5&PF_JaI8BxGjxqzbCXlqWMBC2XpTt+N
zk(APD9+m-QqLH+Lb>p|l6GsoRKqg)Mnih`INwOrE2{o<<*5%LW!I?AQ41f_7%WUgq
z|8>fM4yEE`)}K`yF)cO%9Vzwi(tSw}kZON&0Hg~@KFB3TrwbMUjRd9plmSS@R04<;
zGUp)Ct{fY?Bpe^TSgtfl5XrF%3cKglVIXGQgDfMV5{T0M65tO|^w$jhF?LeZJW$5B
zkP{9Q{j)g}TlaS!Kl^HneU8x55~}RTxw&qP^Wn%&RAD9@8Ar}DN!jBV4kmXH_*_i}
z!30!#eWcgOz&~AIiAHf$pfKRzA3m@TM@}4p=S3)b1E@AnB!}kq6zcMUYg@^D{QZpn
z-)BuglT6p*$DhjitN!of3x)Tr9lx<Ekqdl3k_$5@aOa(QTzln4gpop6&HjqW^ck72
zOZl}CzpL2WsqHfypi2$r?^DAQFsZ+JXruT;UfUR12B4XrWzTO7DO<0Vn6$H11N^Fn
z->*?#ZR%1{(-1ksNmnz5P(<fOQGinEASd7khGCZ`60K!`WGtg*f;em;Y}e6>YrJzW
zPD3^TLfM&1XX|h>5-J6hVc!^Se(sIiuNlcVTkD-&+}(iNVfbYZfM09Y@*}5`@%)+g
z+x^N6z?7uFm=?onG&uzVMacmW_!*G~0$ikg^0Z{gf$ObtSDFHGCoO*-FUVFz%(3NG
zpEi-7(EgH!KP2D}0e;CS4kb0MsO}FNKuooN+yPx#zMUADCJX8rmg+25wbP_rE(z|~
z7_hEO5HnzH7Pc&{yaT4tz62BS%`A&e_wB+4`p+TIID1dE=~fJ_a`1_d9m13Q_9Mtg
z@N^y!t?=0sca@rW{LR&5&!O+P@xN%Qz{|<k{#3f9R~(za>$Z(!H#J*v>id3zXP-TU
zf&MafZ5@%b%>-#|L99-s&u(TjPnY=9jrQEev#h{w2GD)(Ovp3)2P4p(wb-@+-C@ny
zuy3JZx-eMWiqg#{&{_e!6(Rk8ttu0yE$G%wJCLq*lFt?c1_+`{GHw8^We1H#ps^UE
zzEVdkTtZtdBUUxUs>!<nco>KtAxp#QqM~*iUr-dCP21F@?7cK)yZ<i>qMaJJD@kEr
zmAMb|-%W(;wD@f8Pxi}K2kk{5CzSR7X=;YgLvaVh&l|!#<!n?TwLuPmHUzs!+Yu`=
zOD{D<9cH=P{zvb?mF<kOL-EXdaFC>U5%7iu{9z#1r%7x?sYoM<jRS7Cz|NRjdqnK%
z_WO;~?hJKNIcKquj%l0pT#?f-w%cvH^8*nv&8kdg<rT*v&I<T?BzhA6t+Ifi0a)$)
zf(;tPSD4)9;_k03;DINeL#{wQWfwuti=I7kN2!$@dH)LT{qT!n{4at7=xGhAd)};@
z#pkA$9_k+(xI{JE%hGW|-2cEH6pJ~m8m(aQL}Jo!PT%b`U=Q-&>HFhk?!OtqJ$aCb
zK`-MIETqtlLfq_gIBD(}$4NYd4ghJg0J;bX6rzjJUC=-tGUyW+9tYZWpxFfc98e2@
z#w@Th2dvBh%X1N0)dt$(GQ##ENa03nGMkKUNa{H`NT&o%X@mvbGBFMsKB1t`W4IKV
zUBM|h8z<$OlofPz|1wH&r>WM_FYF9B@s({e2R3%wVITwSnfA-@0F!;#v0#EcNdDWt
zPn3C+2sib?V*+uKZ0a+BlXI9akt5DT-gu=XB&8m~7>C_SY|fuvb6!B^1-wBGe^?+G
z0`eun#3HKun^hD2>G8RJOzJ>(Et-9av?<BxAK3Ng9Y>fMJAtc$vm?p`C5yatG9}v<
zWFW9-T(XnFn07S%t<^_0ZPTnpoi(yujkQ}{?0K?=FW$Weex7O-7e&86IXwU6pb;M5
zSCjYtL`oj*q+;!5odFmp&`ORs9QT3U^DFY8>sOkU+$KMbm!MP?cYS>iZo2V2REBa`
znC6`l-C>)|31q2#=VuoA@3aB=GqO*a)%{E-wpxBB7v_{OQv>Zu{rK0mFzjRr){MyT
zSpJ&QRI&?-NGrg|C@?S%96bTFQedSCOwVX6O)J!w8)!9F5XV*WAhZ`p(n@jj5twt$
z7>-gDph@P&8h$qH!mKqx^4oy2hOen!&qjo)L@-=h3k`HN0S#!?Ep4n~nQbLz3_DY5
za0yRQpE?ihXiTQTW5BHcPc%5o!8hbbj>2>q6AsW;L;-f8Vv-IUK&@U!dScN;zI+aa
z3J{bef<DcNJ`skfjweD5e++pG`i%g&L7+Hbrtg#za%B-{E@>4p>Th-qQ8$25`_3FV
z8@}X$kc{Key9~v)er2aOV&^upcAcX62rCwAvMQwrChh1c*zAc@f1b(AsHC0ihg65w
zZ+9_0)yBvEbq|!Y!f#U98&k8jr!imK7uLl+m$j0a_KOw$U&O^A=1s3BPaksJ%I!1r
z?x+2czPc;Rff98zThqAn>w9qHHRqsE5m=ec1U<6|Z_|5@{EF*)JMCvycs;MZ*V7c^
zOrUo?4X12YW1@R{nLMsxr%|Nze1RObp-P4T!{QUEM12~lE-Dn4jW++tMu3={p$EhT
zKvgu<GS##aZjggO87awqi9o41mO4$C7Mv9(M2s;MKm)=NcEEji;@YxIH%Y1+2O#WM
zp1a}Jpjiu?=>#w}HB$)g0p84Y%+Zh$YQ73A;75kf4uF`BocbH=fdN3e8Ip{me2LDD
zXJm+cLl?c$WRsFJ0m1=Nhp~XA)=?})$9TTqt(W013?T3Z5acT;R&po}NCf>rp_H0T
zfegL^XiuO#AmRE%uLi1f8r5lyn4|_Hqb8*(^Wl}~Oa`SFZucH`$w1tn?_i7O!{?3w
z?2L!~%=tRuUz*E+hN-wL<co&<4_^@c9x(aZ%y>yU1v`e#k3nq0p|uj#YKjki>{+z+
zEDyfsoPJdgk44i<50)C@;T^S@R-(Ol#{VL31~NukO&|J<>yG^OiG?r!#N_BJnzVSz
zbz4|iIEecmD&Wf9Ti`VlG?z`@dNOU-d`(Sc@1XzY(Ypw62l(sgUsLEey)Zjf-pMTJ
zQ*}HSzV9HHcQ``vu!$=<U2QJ|)dtXxV>Ht?+LXfQ1WJoO>XC<~6c|_!3{D8NW1t*S
z?e9Rh14E5Xgd(&|I59-(LaPXZ5G*6*3(5)vS)Y<TUmy8azKS~r2KS?%Q>Tp#Htm^%
zXXDTI0@~U&`@VOg(nfzX%tOwDBEOX%0}mc`(|*o6tO!WfW$+v!JqL=~p*&1Pv{+k(
zBoOpA$%tFO4i92!LGu7qCbZEObu{!epmT7OBHY#hiYvn?l`HUzITXhw#`=NrKA<oN
z<f#Qnjh6+|OE#n|{;UX#p?L!?{aEdYQ+e}gn}Zdc$o{P};Q4(^>M^ytwv&g(De`!*
zVf1uJQ)W7lG7J+4%>8W}(cYC3A{$&d6RC`v?Cisz+=HdY5nhzyi3*am79E+tv(&;9
zudBvS?s>6||CHDbNHuU(ef|F$kio@Mi+7$kF>pf|r!CiY+c<pW8I+0zY(HxfVJoG!
zni=i22A-7x{5aP5yF$Lq#Wd|V!{)TMZzo_nf|n9RRd=Yh<v9onE`ovym0^=o_mnpd
zwVNs0?Kav;4G|hh&^AgmegI#Upq9(P5g_qh=%T>rBrv*)P-=npkVaH@ki<Ea&|X67
z7l9lA89(){i3xA!76fr`2?tOPd^>f>z`Unfwkk*Xm>teBAf34a2@4=A<ezr{wywIb
z5d_aT4tAQ**7^)6(&KmrV5IMP+OGG;!Wgvt(}0n#6jJ)O&Y}c{fH)Sz(uk=YNT4U-
zH}GiPne|3?@XF3b#4<r7me4{QP0>Qp8$v9K5Df{R0bq%0O(CfQ&HWOhq4+%kF#?Hd
zKsZ1sOesK_NNQ(4EPKoPd`{0Z-iJdRaf{^Bk<CBQJ!pW3a3V8PZJlYxoTO|iqY*OB
zm}xNDwP}_*TpAL{_dEF1r}tuJ{t$A00!J5!P!t}Sxw90i{qI_g@BYN8VEm_m129o3
zP8XA!xbGSr<qj^@9xC-$&Q<MXSqiy=C-*!E-|?_+VhoE>Od5<m?7rTbzZdkgm^UHI
z9W>Z7%<NU+`7VOMM=tQ-<s9z)(hOeIN-?|GLZj9~vsFh(2Co{3bpxrQ?Y;CUzA;ia
zZ-B@+MI1(`FOcy%Ob#lP1qyvY-vkiW1vwKHMdSp0bA{2YyzeL)o7Frq#|t#1kUn@0
zSkqDvTLO@v2QS@_WKPIY>Q6N>am#z6zl9SFfM=76E+ME#_=H<-2Fsw-->mww02~+j
zX73*xKCSz5H4A?5jqb*3IJCgghP+tviZIRqBxG9ybW6xc_<{VcvNAuv5f_wRU~WMX
zPH_P4U;*xsgd7IqqQ)Xg<wY7t?*p1gV|X#(P$wZFLJnn1G+ju8Swz2}EY5(B1`{Cu
zhMf+zxPU?KtOiAP{ps#Vq-&sr4tdJR#AP!VnaHEb3fLDg;MWynr4q3`=-`g89K>@+
z_krZWpnUi_H##zNN2w9-d+%a;=kInIs4xEUqGteEaoS3bRHggCd9o#rI9{<?%B}a?
z$pVy`#bZz3jbiRb3=EbrKOI?sFSS(QZbs0X{%6cT(-Ec!?;)4-5#(JeGWdRRl%UaU
zqcz_`tJy@@ZlDz}p&2dGC^JVc(-S7fxDUx9*8zkXKDVi8iZn_&nvoP`bIHTf0aMeC
zZV?z5HB)M>rjV_gR!K+~sLum5iH-?{gGeZGCM+XWLV6H%MN_{$<KB~<Qp?R|0KUWO
zQ|tsd2d50clVlGZ!8((qSw{dp+Jbb@7mD&(-``@9EI>+*fLeb9baHlJFaR=o-ww5~
zuc7B9v64in)TR9Z245k@B=Z5Xg{nNeYX>37SjYi54uqS7lPf^_1vteraziELM|||J
zQ>cuaA){C;EbbRrJfhI5HjxlHByK@QiXDNk0=SNkoELER=1BoRC*e~G=TdnkLFiqY
z(l9@rkilBmcu(RZh%Av|;E)X4@B_M?V8%+U@e|uK6J5!q=83n^H|FB&_Z`O*d!9fp
zh@h2+AgClq=k6%1G@ty$62A6RiE4gd#(ZBw4uB5hW*f<~M_s@F70WgE^Ab+ob^8K^
zCR*_^-2cQqxZ=EP(bw-|cD~IHAS(g7xPa{rSP5v)&%yV7xSq=&T#_aT!x;62Wi;w5
z+=?S(57PxCx{g#woSKtyOW_kx$3{<kZ#uNQj9JT^aZ4&m3=chx71}L@>b!(_8u0ow
zM%N3BtOn{U0*!gdq{+xN30JcK2FavrP`i`#^T>kfe2Xj%$f-6V?-FeMJ{f<eV`sVf
zEXhT{9sMaGO=OI8fzdpCr?1_^{<CcAZ0RSb<Fs8TYyA<MEi-(oe`(o<1IhRUfuR|=
zNRPvwfXWZSU?eH<knxkPu^JaIOwDMDHUW1$2-gFx5SF<jynGpcUlBo{gVMM{-zp#|
z7$9x=IgOb;f^?FR((3ReWG9fe>qwIZPXf_kmMeXDC?JO-e7B68SAx%<Jz+WI@IB-S
z&mk*K6%x`Zu&hCyQNTJ{0fZY^K#|d6qGj1uWyZs>{C^{8Ylvk1qaL1oW)2TN{uI0*
zVy9CG3d!`+z3xh5@4*#u-&^C9bns3c<3EKQKo2Mw-~R>AEB)3|E&1)fzVqus<N|>R
z%dN-p^~XY7wDo56SITG;!X^{Mu|kxjWI{}<^;|MsLpLR8DvDcJt~F7sFQMLCKqHz*
zJDx?NYrK3zYcfEx1J?j>6zOey&R|MC;90gdt8>nxJFG;r;<1Jx7Gq6AP6^EHA*LXu
zg#ttCf%<~suJdd<bJpoONCk(){RoYt!2u5rIRG88IHhk{c2xT^2Y~F<rr^|Xrj7&=
zlN4zcl0#q&z(SwBYr(SGpB;cjzF4$}ISmSq=C&Yb0}TF|u7XMZE!05&R^$$ChGkWF
zi8nyXIw^~p>W%~8*?W30VqCM=a3MSo!q36+b8zz|_?05^gFcF5KzTxg_!NZEwr5gI
zKMJ&}3UMnznnXww68q+Sjt4K4j+sjl#w}<ST9n^|F9PJ83Or{JzSGCIAeTq65Fnp-
z;Ss<a7|AlzMWE7wGD-sqDnX<WO;8P&3uOB&1Z`12-brBFi1c-2m4|&t7ID{okHOCo
zw?o1Y`qV=GajdL7;WqH#rR{Y7MQ!)J1RQ`l=tEde?*1?R?$u|lRG)fhrE+$YI@3}{
zSZv&nuRpPb{`>|+ZL=ndL?-h2A@o;Pqm;`bRV^&6EMTQEjb>OyJ8B`)%ZSoNL}~%4
zs`K-Z!BIMIB7Kkiu3a9ItqM0Y^ad5O+p_t{wCH&o4Xd1Jh&Yu=n}9q*?}6n*0{$Q%
z&IZbT!0=|m1BkprXtWt`=5b@;K_?D$O5zzTccaL7m}@|(H`U#o2^b;}{fsh$j0=#p
z1j+dAv;!M+)|%=#EIZ?n?E&aeiK)*|*Ev6);K3u7{K~*T>u}6+4b~7e-7?}MBt|xz
zR)mp5qUwXjB{&1%nS?x3e6_7-G6&!mittJW`28M&5uk6aLC-0)rtK87k4e>BP7$^h
z(x@$U9PvI0o~+EaBO7Ke9C8NylE^`XXsQJ?;^#QyAYzp#%J3Wg$Sn`T_xj;E73BN^
z@<G5jP(H{ZD0*<Hv?DN++l#4W9KmKyovBbeRK*#At1vO?V|uZMuiyI!ggegzWxh9%
z)SHKr<)x=eP4UDz_4vT-sc8JCpaaO5f-SwA-2Eei@)hgq)dN=t<&iLoYwk*Y2|=Ha
zvsMZ0SUZe-&c*b~JdP|K#?k5f@$j=%RGTehoK6#t7eczUpprl~ljb=#&*gqQ;|5e0
z(qEXL_eS}wOJL-wJF|2hMA`J24PSuIo~6yqSZUJK%nF>}E07x@5fOo*ae?|qGxWn5
z0OiXzwPZnh`a{YFC{5-qMJDAZFpZ<Hk)>uwkdcF^4VcMwrPcu$eJV&N?Mj7ZxD#^)
zvY{uQCotiyqx;8Yg<x8~lVuy30uh;%Rp4eYl<EQMJkaDLVG{HbIPIsR#*`OA=Iw+b
zoe&KU_;7N0xWxjzJ`ce#P+F}qv{t}(1(HN#>T#{ACsLm8kJ~A96e%Q%$FsXy5t-5<
z0l4&RR&9+(cuAUx>5<%KZRsgA^dSaY$tifU2;Uh&-Wf;W4kPE3k;@fO2#N^u1^AxN
zw|v2cOX{EWxhARMoY*yTq)jls%EkQB3cmdHN0EvJ2pVYgimKT@oGdInTngo$E0?3k
zo;X#F{}glpy-uK(E{m_-JgBa_Yk7I$TrVi8pS<mj@<(sK0+SO37J(q+2?7PLlA@*S
zIDBLpPaHaqrw`7{Cl1VG|AARd&#kCd62X%Wf}D?Bj_9`Cg`uWxV9~Nn#Iti`gS>Wn
zhKpV+nUgId>F~a-m<2_UL?EWTy+MNy!2CXe;t;XlfZ??Q?YfY3{)$j8_CFeu+JiJL
zL*uqSbr>9u`gB%YciSBWX8)c60tp0U0#Jt#WNKC(T4GE<NXLk$nRhl5+2}9_Gbdns
z|4a&E&`(LnqW`x4-(9X@G60747)Uf4ifsILw+eR!vo&oF)%#|ND0Ks*AHXT*;gvk(
z2Ly_vz|cC4plCkNg#!Zf2Q;F#8T27;u}BESBmF1t;&fF+IwOo!N*PDqDa$yUG$1iM
zE_h~2Q^kmqIfU^E)WlP8WB^Z=;nw@%iy`<<KXP6l^0`4&iUX*W3J8K6)6<JZkKcRB
zz;Zd@(6J@l{qX$=6Oy+kzCa%B_FObG_w`aN4!nLby8r8^vhkmy4xr}{jj)}j2ggSy
z&i{!w{7kZQ{YLr7T#C;>7jeB!Ex5b~R0<LU#WKeF`f%-z?RfLG3ZfiiX{Dx~J}`y*
zA3K7F_e^2$!8uG#FQXd9JkjR)3b~xer9`%Dv_m1Y(WJZk)__?i6EJ$ZW>6#(FEQvE
z0fX!WtVl@O0%}vh{6S!RyWztRZ3J3%188g7E5LK=b~Kfhc3ei?h;Tz_G%3uIA=0v7
z3hv|>m<*Jq{jQKPMQ>Z5+8&nC(kCp>Xrp%7&Q{!%k*utJXj_S<_Ro6$^qgG<;*2gp
z&?S9k=V22dTg{l!?d-;EIdTBx2qd)hmB<HhOP<X20l8sdU>(puY&sIl(;Cx{3);se
zQ!4zZmB4*{>TMWxB_{k(k!>!J9&Ulj)HoC9-41O=cZjWI90Gr)l<u1hfl7u@HK6s0
zP8Z3S6<Sq>g~ky4#R7b{0^cRaP((iGLnRH&%}k@#Y``g0jTWQ|5XSS#{QScu<xKzL
zVs!7vPj%xzMIC^7(|orq%DDBf)~~+sjc<G7kAy-FxnJ4WroER2jV2`(G6E@3Zve-e
zz|(UnJfsMas-Zw&^>`oFjt}6HH|>O9Nl|Y#v43g~4?TVy_uhX5PwhK_qbC-z5;ozw
zKJt0VN<Y+F?lS0Yu3#g6Hc8W+7VO!(XS)JM1;`-tL{^Ea8ngQZ3PZra8jXCPKxrM&
zT%jz0l5*O<V<WUu@bjMZc=n%W@VVD7J$49&3>3IRh8Z)D#$z)&u+=PN(8^jPU-LwF
zWs|W6%ZhgPd(QKFlz&-!uuJ%1$}hG4>`Tvv0y7~JHpNT`BXa;YL!dH85-96BP_C;4
zWnU!+ei_J(2vjDGNCuIxsMbIFC=f53Isc?>g*{jlB1`?dl)KKt6)R%M#%~o;de?FD
z|9ko1ogpzJKF&E4tN2h5FsW0TE@Qc|f-p`IMQv1^L9FfHfWA>5>joSQ4rnBsA}lUB
zcyiAI4jx%Sad;$Is_yf(tbb%#-TNNAL=N{<H2$2|C;D*Pdnbl={^%QC{bS8~YrtQw
zwc$}eiZ3qGO{LJrFfB(dLd#jK(-Wv^2h|Wbb_no~C=^_cfg&(ESir>adi=oE8}MVd
zq-eC8*mq(M4?cAQ_dR+XPwt(=@#9sr!WMkLf?~mkA5f3X^ptzYin{{_9VH2KQQ2~U
zt|bPns8k{9@QTLNULe<R1TLuEMPtFF8bmQR6}-z5B9_t*Ty}0`0Q5CyK|n_eNm&3n
z2XcU%^4ldP#Mw9EDON)-6D75qQ;jgOsr|E7DQgH=Dlnz#Tn1Ra0F}NjV*w`RHwl7i
zTzW!-F!zp6wEI7(d&-M8tOFoU0672>6G7gEQ<U(^0=XfrN)wPnYmA~WjXocJMx%9H
zAf<A@#g5T%Bluj6%t_X-?>(|EjBx_p=%1By-OsFN9NO}wr4@al7GsnoXcOR=NaWlS
zM*91(`K*3ivSkFjFIj`F+xxI;Jb=^ZK$LS5l`^!KS96CO`1oJlh4=pXm)%AxlV<U;
zpNy-G=Z~D6vWI)B89xy_`t>XSaBT3LAAQZMeyHAT4FuJC1jliismJ&1AoQ8YgP9Gd
z+Me2CG^J;jR|q7oK%KbcEsYb$fX5DN<fTGips{Kok2MqP@guiv!jHc>L9<=QGe>7}
z|Kn4*|A84i_4GWZrj`(=eF%a96bfZ-A+eHehk0mMjAzSBjfHUr0A4_$zd(I)E>Q^>
zYzWlnG)_DVtT_)T6@igW0+i~KkBFIRYCtt7qQ<+K%4Kj*ne^Yyz<cWi$nXjHqfQ$e
zzwP;FQJHCNcE??|^@a^LQ$)67z{c>qqMuCE>*(Q|?^!F4FPQFlZAUIQQ}LmxTw-5l
z-GG!FfCDFRAPOYzArKJ1e+1}XtyR8kI(k!wG!~zsRcmHMnAx62*x8n2oQHLXd@>BC
zBkOG6{A{;;kEf>UpADX~15S~6b|{Jygi*@RRm|nFcBl{A){WtUontuvyfJK9Tg1d@
z9vE_f61`9&dL&%d=z65m#hMgJgptuQe)7M*7MH(jr+U{rKjiK`7QefeJMkZhHvVF4
z`+bQzfNrhSCvN`nq007Oe${R7tft9uP^}S)FS&JQm|K?D-Lr9$l~_sFojxYgiDO*I
zOt8_)YRU|Ff{*E~MtriBXe`VLJTpfQAwhp0ST$J2rqvZ(@Y=KRAKn&YWu=P8_s`(I
z2kEwieS1$}X^u!m6$FKT<O+GX)Yh`+!l`Cz#Dp_$02?L&f;9i$plLRN#bX-dn+5tt
zfM}z@q7^}9O^Y_*65W-ezmfl9N-OQK&$jGQZBF|EQcDFUgH_avw`y2~Qga#5qocs3
zij}=JyDJQDfDGR#4O<y7`*_(NJ>FwvTVIS3W&=i6S;zp3RAQJ0q*ZNWZ9kd^ATLG=
zz9<Uml%ev20+rQ3d5BkVtK~&t>PaD0!=(MxK4AHElGtKLn(4sV@x7i&ziisibaJ|a
z5ym$u!(IaIUq}&#37U-twf9i;^H?`Bh;ufs!o@pQ;oP0W*s`IBfpH(`x2u9F4bdS|
z8rYh3kSw`~=JSYZ1w>IEN_mR1p?nY{7+J)w>$l1O`K6zZe&yDG{`q8obnt-q*n4_K
zXHV7R6mbCN81`TFj-mV|e|^iX@2EqJ1~oE%N<1@3ZM&$mv*d<<m~pvmf0pZLb0M*K
zPt*3WeT^K6Oi-ynq#8098rh`<jzVC$sd20+@YD%lFsCq7kQf{3$K`7Wan%LefdA0O
ziJ4_Qx@Qjee0>HFK6(^~jvT{Es{*eufnwh%{2bN0#E&(mz;!Aq*BYrD#sg?8^4t-P
zU`V4fBG5lc<$=Kqm^?%GvG-@Xi&dedb|5k~0vV=t0?H%jX9P{D6JTxLG%Yhcvm=yY
zHXoDoB#lo^%t0<6gp`@_8*IR=$+j7Q0sgu|mn?<Ng-bUJp!A<5S7<25Z1dp?+bIZ$
zBH)xI`~i*97%;dB@QL0PY8-z8P%DDB`lJNxCRT>s=(yS89wIK9@$XL8rjv3}YcI8;
zCI&Z1QsNJ^XcIHvtr7&-GBSp37jDLdTZVDo)*)<JUqOW;e1Rq)X`Y!rpb%-zgKGJR
zSITHF1qkaov}-=%mJ3DQ2EvJGe0hkn8)6>hS@2VTCB*o}L+&4Z{>}AYx?cW?IFhD^
z@aaE`Nw4e_b^@n>12AvSaPF0F8t^ZE|E;&atr~cf!SYg@Yi}-$nVHGCD-ZWjRO)?C
zGbtuB<;R&qXWyMp%ra4G&5;U?X+>K{kh2ogR&0aX@YGrhQ;GQ+aJV5*KB~~?35=9;
z7#beKZRd{TwySp_P8-;JWFC(`vVgnqn#NPl%wl1>gw!2FeqbE=z7mfS8<p6U>B1D<
z<A#P{CjjKjM0=G?f{9yZ=AEG}0uZU3;n82CgFx9prcmp2x&Z_Z2*i{f5#B)ALPq?t
zLLDYb8r?fHC1<q-jlLj@n6d^RWdaQP8FCP>u;LM9vr0Rgg~=MDSvSF`>zX=@r!ISd
zK{61pBp^u2yHBGyF66*kAXnr`PIY`Q(4K=-ZO!(_89GsPIhY&nzSIe)?ED_`3^1`J
zZT(KXeB${N#XAlWww8djih+C{XN~t^=h}6+VCxvp**1br8!9OF(`%#pf_dA3sv@mA
zh}%BeEB$D#1ZdRrXtn~h+cdyLf+kiEaX`SMZA3Zqx`~LYLNgN(xf%sO0PYJhaZx$=
z-A~?H|M?r5f0}FMooDfp_r#=ha*7@=vI8*K&X9lo^+lZjp&PD$UA3HFAI#6QdaNX+
zBw~M=h?;F(F&7v|s}4Q42N%d{UyFEiOdyP%m+l&N8a-~Cme>-QMng6Q&5J%gpC<G)
zO|&unmey6)AuyW?91DT+yheGi!ayDv87^Sw=p=T&auweGrZ$#q4Lr4f1rOYF91lKl
z07s7Gv675I42&WeA?BIO7ZUMfN$Iz>2rM22M$b~nQ(e5u?6#xBDtj3UE_FI6E$&(U
z#l84U2Y|<S4R@aM?v(eI8#W@-fXsk|6}Pk{RJK<jn<8YTp&n@~PU+1q06K>r#zW_3
z%7YAlJ827PCo^DCqmqW(2lyjEX#zYUNls?|7_fYdNl_}Hb|?{wm<?%{xU$Z-+4MnE
zPMpq54@n%M-Ad4^%_C_aLq1nSUy#R+;WEzKv;h}v8p5tEV_3VcXyn65p2Q)Pr3OSa
z7~~>q1!yhzp*kO+y6mCe42*yYqscVlP3KL<ZX6>k{G>pm1}KtzkIb$I{v3!r?f`|n
zLOJiF@`VQ0Uo+(Ymyf=t`m3*W{zT;)2cM2V^~qBe6m(x~<F9xZZ!YKyzj)o%x6}tK
z+x+S2n78K|32;;Ib>241)@6>Xm1)lQv-4rK0{9}QA6k-4ruD}zz*1#dNQCqm+nQ5R
zDhcQV&oTqLc-&m3A+PD$K}!HjT4FYoID8x^99I}{75WPf2FC(iv26%fTumn);^2WL
zJo-Qt58OS2$Dfs0nCeF~F@gO03S46P`M}ZwiR&jQj|-GW1Zch`rniO3MCNsHBqq?W
zv-i)o<uV?Bwkasvdq?V3CVMt^P0`=-m(2tmA?1c;X!825V`X-s%>w9g={d9ZA3bO1
zPt2*A=~#O+5xLWqW5+<y204I$bp6JN3}ybPu>{N=l+dB#C`ty!+JIqd778(+!Egvt
z#E8Qcw5sz^?Ijd)O{`lbu=UCu&OYxvTy)7AtX?&Q(WVFQU__F^z^GMirM-PkiLg~b
zvz9}(RYbL!L#^SU6**|9#7!`hd|pAqC5bayHKr-6qA5<T2zX8+VOWUSbR{hcVV0!e
z?hJ7-XvJZ?q*UnVk^E}|=e%K!|LzapQvXk{O+K+YKYiBm*8K-gMJM3Cn8x4dpTD-0
zUibK=m){mnth&UVosM1l1Sp!BaxdFzYqmz2eSTRF-dylJEl0JlRdwxD2AwGwI;fx2
z1;|W`$T$TSa7;;)0Gt_651LYIqVDqcS#k!xK<aB=_7Mq<wgMUsup%TD5`lcpL!l1z
z9ZE4!P#74K*f8c}!<$C%x*yh9nQLIr<25{S&rv+~w8Eiha;OehAkQ9zC>A;TQx-t1
zw<a%|)M$p50xSpsw1Yr)8HHWntsF-)iq5S(v-FZDgz09s(Pa8|CoAM;?K_?bv?ID1
z*~e_pF`}ngC!n)I$YxlbC8OEy1kvMkd7+13<0njyQfJcjqY+;}Cy4xnnS&Z}O-r&-
zx|7++>ljiK8DQ8#bKyAR>R|-#Jl3pI*txre3wN)=1?R8ArY(ag4w6(*roKs|U<uk=
zeWXvi2=}zn3I%F44@)&4D-9R4a+PKjC}U!!Wm@p++3Sb^SgH&nVq?-WPpwGHpNyVo
zgzXk!^ImAh&QQ|lA|#(PEsiBNBspaUFpH2Mugl$U-st|?|GYN(jUQ?~oE96KryEbr
zo@!3OebFL+?wql5a{aUCoqMg^u=es~b|$8ehChHV>7zU2pRw}DV6z&RZp0TS5R9Ba
zc7gJ?XI>-Hz3}<_p2;`@=#1{OT?3wN)3Gf)azZYt|GIW4CueX2HxLXWQk#qZJ|^tI
z(`X5es*;#*I4B+RP&%eirp+&v1bu5<TzXAEF1<}dH9{PDY8g*_;RGIk<RGRVEupb(
z1j$tcsBA5<YVOJbn4UBZme?q4u2s9-((W?g*KA7!!Z65ju_kDS1EkLrp6K*WGudFf
zH8^9`X4?7umhkFqE7fm15N5|g&t8E{HY*#WF#3C`)Sx_$#62nc=SNvPh1i>F=@<}J
zsW6jlh=en=n-Q8P=Fpy>g_q7_a<qwE*SI+M{C=Ew{$`xDc^IW(LK3a~a4SYq582W1
z^G7s=X|^ZlE~((al)`<V5XPxy^A1M8u%q$F8B?1KpY}XZHfRjql$v&tC|x7wb0*!7
zY=Dxl7b2r&>;&r4_|!(_9S)qG%H^dBoR6%?o8Gh|nf~o+=}+ISo^S`S?by;&OQ(_(
z_&z%T^Ntn$^~F+h{X^TfUE=QAc4IU*m%1c{!D8##7Le{#Ye(FJ-ZrXhJHt4c!VS}J
zNi5S)O1THlySUAIr|eO(sV*AzG>acCHjqU=))p|TLCk3<!x929Y4f$n$!NF)AO;$Q
z`4E!L7nMo3IqDIRNRh9m1QyypO0zzKIfe3`1f@QO!blP8Hw9RK`4C=}q*&ft$G$Jm
zVE-o$Vm{4bc4Pq6wWIJx`!PbyK?&4I6qA6yP88<UQ%V{?W*oq*lP7*3F#stUAhMJd
ztm)|FWlU!#3T3iawlmO~bhBD{YydW!$ULaY1gsOVEkR=aWuHSfE<uK%T(b+$9RvzP
z5`IylI<FB?nX?pO?#U%Yhh|ZTmau9t!M0rv&N;7)b9QaQ=FLMWjF!yhLa9s`A!&rh
zu@MJ>qH;`Y$nEdxbupV!0(FI*w*k*Sm16FMgF@M0A-p?)R+W*#(`*6j0iXktb^;D}
zK)M@+`8}{D5x<d{M0mF5jc;b5w*$dii1Z%S=t7&WKz?G`eaA0e86H2;9R1K=CU=JA
zr3>e4C!$lu35f4I#n%~-1NwD$oVE7y>n^+Go%Q7<<wwNt&AL0CCT}*d)BS7KdguKQ
z-HDw}1Y)fxG7QuI=ik|s&19zCM>=_9Z0`kZwBj<M3_huzHCil%MM^n7FR9=ZGQ$jL
zTW~-Eo)%2wt>IE}`c6T}*Mj*ZMNgyXrYKfY<W?(qYc(*&n!1P&w=n(nCG2}(Mebj5
zRbk5rhAtg~dtpDkK8cF$Z`UKur2^>y#4X!GqfCfXSQFJ4KqdH-Nyhed_UuXM?gr?t
z{?7ISu-tcGz|kOY#)JFmwPvsi%{VFGzGWb;lHMVps~VyS<b^<g$-(3Zl}Nznr-1?@
zx%^BMN5586IJ%5sG_hq(jPuSb;k*lmv3ctd3d2-y8NLm|1PM>x*^UE+T>3fPY?pw~
zm$w#KezLIg;x$_F08AZ~_{86vDuLF9n~6T^7#NT^llvDvbDq5J`=oA17wqitA?)XC
z+M_~Jm&CJJ09|`Vz{SY6<vopxP#D?Pgm<eK{?c1MTKe4Q?)kt`{{!!&Hsz^66cXQ0
z<M*7h7!+^#+sW|@e(1_ef4E*-^8I!~Y<>&TeUlT)e56_TWOv4MIo8PoY+7n{`*~3%
zeGqovJ>Sc&it2g%jyl#i7=O>>+Eg%8i0yp%gpSju9wVZu_(Gs183nqLELEoB+a=IY
z1{zRX%+cJ_F9?C6m!j+|6e=maNd<R<161faW2sLx)zm$+IQX?i96uott?9?WwQDi4
zdjPo+3EG@SWkPdV6XwY6GZq{rK+TZWItscO9k|Pnx396&$G1)(TL!|C1O@}4Ooto-
zIRMVUZ5c41YCJ$x<~jjjB!D2<`H`M#E{@TjuH)f*7qRz=Iwpn2#&J(xa86O3drlD>
z&MKlfOg%L+c6uS!;4?>_89aCWOh(2ZOSS}sDUl|_NbG8GGV+j?hBP$7w!q{%fzN+X
z;n|1H0+W>V8nS_{=iwQ`L>Fc1{ESGHfuCImkj+Jy>%d?uG%Q67b=GSj`m`jcV0I_u
zU5$XG&5>Z@!WP=+M&VD~{=w4yPk#NEk2)X!V`^cVL%*CIfO!f>`WTXL`2Df|3x4&w
zYk#EPs8xbSvt|0u8KpA=?RqJm*(J;PJ@eenbQ?FCvlZ9f`TY#k%4%Znd0Tm>Y&4W=
zy3W~|G=NW|6a9Nq?QGYc`C9_VNE5$X_tFP$lyix-XXK*E0g)5PQG1ba19Ap*KD5-s
zs{2qj;R%5PwUDGn+0!VM5_shVVo1YXOCob*a&?fN#PnVBIR0pYg_;MwVF<w`1Mtop
zKsxAg4?S7};<}->a+I{Q2-(t(j7()-a~G-SEFhZ!$aDdy6-HeUTF_xxl>JuwnjSvz
z9jpL&Fa^9i&^R9B_!BEQ@<<i&(KgCaf{C)m_Ok+9difBx>?ono&twam(kF<?dKq|>
zoYJ$gv$lAT*QYiHMR=>%!XRy=(F(!0kc^(PpxCtO+Fa9{e~+&cSURThZ-1LIenam=
z7ST->-)()e@n@0W{w#9>8Rvo>fCWeSz8O)9IyA=kjaGxf2TW$*3gjG(z!B*4+nBsE
z!qL)V_~WnsXz57p{&(zceC!`y>{38{zv}*B|CMha$Y1h-8?XMMs#cSQm0Gh~mu3iZ
z&ynGPe3GVkH~Se(?Pbz>^J%fhf5!oI&}p-Emofn|&`#v<rv9`V(vk>_1F*`~_I?>a
z#w)`ad0@5Jo{K0e6&xW*445+lb_UF=w~RfaBM0Dlclt__-jpU9E{;G>Qbr({>RS}V
zn59fXAt*=44I~hwfV0K}3dBH(k<Kk*_U<_xy>lKX4#%ji?uWc`9m?ksQ0DXaakxlp
zdW^H9l-KYnOqSJojh)39me9l6f^;K+QDbyYK%096@<j)eE-+xWqhqSt#$%5!;d5VG
zLjC?ZM8_0X59G1?nj!4IZWvoO=TRolR<yNPJ3&lJNxY8BeoBnG6L@EgGrLq6nI{Z^
zcm(8ds2xYkSX&yc7SN)lpyUW>7Xdv6wQ`9DP8m>E9@x)jXbAZ7-=|oaH8Ud2T{25R
z?ezo8eJ~dmX8@cTWf`9}`pf~?_m9a~S$5#`7{AqP^yqqEsWmgUO+10Xl^F0^SaplW
z12YH0pMA?GOY`nmcOR;K<^C7b35f4YyU)95N56CZQ`cYq_G-DjGnid$NV3}u;m^{0
zR;9}@mY$lub7Y_Z)waFB6r<vdWm~e0d6>?J%-Fy;*8HToXMd780G?{IpFMrRrgZ2L
z)HJ1rK_NO$NE@`AoCRM@^x+#xZ5u(%{RuY+IIT9dHGzo4@S`a^ju@o*FHOV<s7#Ow
z1wTPhX~P{=z=RKHI53kzs3X}s&(2`qgLUkkm6#u^pmNzbwq3po#k|DIY{~;vM1EpH
z+)T}YCg8G}8K&`CK$V;&l`ln?wG2tXBqxF9d<%<DFXO;tH9Y(1GLAi4MbJ_>cdQ>5
z>=?kd4Skp#FC*yl5EccT%^F@sF}I&0I58UqG5tcCcC?+AEc>z!$Owv%B9JlgHbr+b
zc8d7K)v%GCfjl;PQ_FL9Lm)8C4rEylJx&CSjSHN3I>E!AHM<4PDlh(UJ3GXsHE8ax
zFx9-rG1#sPe}*<=FjB521E5X-X9B(2iJS!pNq7MT0>@?oMCmR#0z<_nMqe$}M?Qa_
z`ki0?ioaa`)T$HJCuUwOCm_D(h`+mepdYs!x$L~xxsz+J!t`8|uKA8c7vGZ{0EJ}Y
zpYdYG-fFc2^>^mFjXXpTI&JSm4y2RHcQOJSb?Aek4}?Zw?JMU}z|aYK(^n4wXac3J
z3p)#ivIv^>&QE%-tSso_1za9jZGXqJrGsfDNy-Aq8RUurzONAwkVrKy*Olf**)M5V
z79A=TQUt{aemRC55YXcuFyg}%zSO#@qCLm)^ylaCwL5A!sPowR`qkKV(+1RQL_bap
zeVX6oj3%r&ZKjXG%ehQTCaNpd;f<9h4nMPur|+J@v8R^Mm`+fZ0^3IVaoN^koV}wT
zlj9`mO|OJ<?*wS4W(>IP;OLZ#!YvNQw*cuJp>S3v=y@zbF7;C@n@+|~^*kBBP2(dA
zW>QO*#)J8*)daLM0o`S>c3vpsdr-zx$O8jq;PZb&X^`wSZf<i5n|XE&-bVE7b9J8Y
zAbLxKEGx)VntOy(Js~**AaKwG22=L=u13ib7$`L{@)}3|@t@rx|K@*w?eJXiPdk@d
zQ|%W66cpcE#DCBoP_KDl*I757bN0?RM>C5gW5Mgzta?jlQMa-2&Y$)GKQ<N5L>w{)
zkUdWq%(LZyffBfHYY==pt!B4@vFFY>>=_WmDSpN;?}_xi#(h%9p^E`@tA_4;c_+i@
zNikVhkFx^Zi4t~hp;IQ5Dgt@J4TyVA5rr@VBLITDLkK$%IEu%a{bCGvIE0=^r88Qf
z`BvbWHs<$A-0}G;{{HiO;cjo^hkyHejI8cQdnw_`KT4@7UCtLA6w9WqzO+!sfqe^j
z^uD7w{KO*kg2d{43A<L8aPF3V>{v5|wPQ3m<Myn;rJP$axE3}AR+e4NwH&M{iK$tE
zxme=|f6H_(lByY0A`eT9EIQS!e$S#jMf`}7dUH;c){{P9LL?hDeA4PRGYvfA@VvR8
zY&<(-jPoa=fb|;%9{H@s;YW=c6FLTL%K&@LWwK}46eO!6okYLx!3Jyz(7^=wzUF)W
z%mnE+*jWl&9?)k`{*uc9tue7GMCAq@{p`<utnh`eeEq{y-ao!2Buc8imR|A>z>yvX
z^sE2-+R@8?{>t6|p}DXEpZ4CHBU{|jY3HAOoFw3q^$5DZ%P;^I>+Jlo1qf{(m9f_t
zAF#-+iR{+nTV>s@17XPz8xhE1m@=ccEoAO%?~_G}j&taylqUg**@a^x0beYvwMTWo
zUCx<xFL*YA7;~hNN6rA88PL1}fl0hQ+Yts`))E7L3;A=ZXwE4-^_eF2KiS4y!^fPa
zg`B_>&pm<AUBqv_?>4O2IfB_~1t*Xk<z}9n!_!}z!7~reW9e`eMWL{BvJbnrkKw#?
z$FOQc(bVuXpAcHhv<m>EwnV+<V18L(YF=QvDzF$yYQZC>GAM`tzrFVWvh=#n1HV7M
z*!?>9%=84LK_Ea9BnSr46hz6^D%fS0w7Xu}TjjFLL3Y{Ju6Ii=Z`oegZmq*^sjOW&
zN|tPyDkV~Zv_z4TD2XCSfB*pu!VD&-p3ePV_sj47aqFCO@BQ!V0p&zMXs|EY=$;q<
zaPPV2eCIpg0hRfF@MAf??=QG$T@{W5@9t49fF1okR=YgYn8p2Pm!1rOwlj(no+MNe
zBpZXlhl~b;(7kmUS?-^3Ll%}CL@nUypG&!Eh<JXA+yey)EBZ1oYBucZzN;*beq6Dp
z3&YNaK(QvZ2SGbO-oOB8oIpKRLxwXC#u(kRH~N7;|MT_hTVMXco6)EL^;;bZIB%Bg
zKkI+ncP^B_?el;1TmN!r94(al<AI8v%_d(|^Jz1zJG8354<0HnEG2QN8GVZ0rMw6A
z4T9_0`F*u01t#GC=$)B>FWn7R!%>b7B?KMTZldin@(;6Q)Ph$nXLU}QIrMt_VD%!U
zw4-IVsEZ950G8oWxB-EO9E%D$hZu;J8c?mNaDmu}s!=D^6+QZRj=kG4zVM@)SZ{YQ
zH8+LzXcu3;@gjCRO;l=&XtzUnwG{v0r@jjd4=iKj$}T?hZ(hL0xiP-uu?O(ck1pVz
z*$Ph2QH2xX3$&tQWZbJehZ{MF+CX>DL96Ryx96ZaaIrI>9u7ITK^MCqiFHk)qU$qg
zXZY)Xn@VPV^amnL7{?BA?AZ&UDn@egbv(}^T~_(OuKtzBh}BT=7_>1kCC{b<7++gK
zfQg6{01I=#SAH%<zv*&Wc(Ie`D(}zPBUdQCR;Z^KfZ8iCSyM#?F2KOzZ>9)SLo|g6
z=<vWLIXA)vl+-$9fht*wM?M0a>%TtuOF#IT>3#3FA7AZ1{qkFB1irycK!NM0f=3oB
z`D34c&%3{804$aJ!wx*xqy67BWweL5`--DJ0sq^?ei>A9N`xSe`E55sKTkLScYh*q
zix|PCN?5)_0XlkuaVuLRhN)Xc^M7<72)6uEK2&ts;eS}EHQs}0CsPxJ7=fPp0N#y^
zc!kollkev?RCJIe04lqVfMK-T(~d~uq0B-I98~H#re>rz;pDp=Y^~+^<Ud-+&fYGT
z8guy4?JwhZul^p8RZ*)h!;K;=E?2R-+QMJ^o_~R*duFk7XNaZnG(PtDN3poLgt>AB
zr{5bO^M*)!L)OB`h7RIgANxBFc3KWL+b(v-K#!V!vQz<e9~1T)$NgFeH6g~G=pT@K
z+}Z)2{=F0*{tg%2fk>H;hB@c!rEp1hZF<jL{T&(D(^6~vH<7#b9&gF8Sp+9FR}v;b
ziG&(`7aix)y$&vKWnAe;-)ru(BRZ@iyC7JC-X`c)N}EBULTiwa?Y{a9IUw>riw`r!
zziJwj_zH`hP;5%)!YYs=lzQo_37+_lN5jARS2jlf`2TJH=0bJt{@uZi-dlwS_-_W;
zr<#56GiOe|zkFih@xe~3&pRCJ<!Kt_8+ZZynC<%OJERdf)!0)&cVz_hL{M)g5Kx}C
zQ-fwftLj2(BQ0;C8$z#T9X-`llezCXb&$1LpF%;Fme3}3Xi`oSd<9+<L}pQa=oQwW
zPl|7<GCtH@SW}dUcTRtEJ8mlRRXI=UTO>X9WZ@)D2lqTAlkgXRatjxCw{WU9kLPxt
z#iuX*TO6ysA7}3Q6L|3KlX&z*6_4FRrK(-5?XKhMl`gIv&vE|tHh$x4pT?_K-iuHD
z>Ky*WM~>qM|JHE~Ix*T!7oE0)%?)6yo3pYxRcWMD^T2XiBK1XadP0j`VG82L3lcBq
zB<T0oz6?C^l-$1|$)AznC%?Bq@A<mOW2E@Y<;V>5Szdtb_{DXWMX$kOJ8aat2L%C&
zfY7D;99(@t@FzV|fpcY!XcZMT$><lA`m%Zw%^CV!Mf;Y50L`UPk1G$*$z={Q$H(e0
ztm!DyMxx-R^ql~&e=&Cd;<tZ1dG`4mOTYK*xBhe~*!cc2>)s#2T7ZiC$OlXQ(uW^=
z@Vk1wA<A4>VpwQ;6xwv!+n-$chO0LDK0DsGy#)QJ^<K>@q$U>*DN2}6v@E}T1O*i?
z?c8}xEuvN2MjU(fT1`x5B7!riLNp;tqJFdkM>jvUx%OsWs$-#PrLrD8CzKH&CLH(X
zV?8AG6*M^`0t$1?&HDJvzuCd7=eIClZ(w7zjnCisB<5@PVt(!k9KZjASbC^}>C*{U
z<2}4Eg(tu3Az%;KxCVUYCE(|Oqk@~OpT>iW--%!N{S?O^s^ELScLuLrNU@*gXjdfX
zPw6yX@C2lD)g-y`%5|q5pWp$t2&LPR(kILugn@(2JHYjeDUO{A(b-EG-Dh$lyZK}=
zROGH=efb>bXb3%AEBLD2U3Z1PYw;VU--7YTYK@fD=;l~nb}+RFbhoMWTi**u%_Dh_
z*di6Css*ljYBF!^ngQAMSwLE=HKio(YKM&C4d~6zQ}>q}sj6#5=hccmcl|;T{@p+Q
zCwu2!-TuDe=zZ_s!80$u6`_FL1>?VRQ0!HL6QB4$A2{>DtWsO_$8iM5BUnVQPH~6T
z%W=0mpbOO$uC8Ky)7{<r4CV~z7OnOWqK9=<7URwOY9%#bbrO~dNs};692O&?9gT~E
za@vu&zR=~rjr^R7c~#7+ZIVt$Wfn-KcQh>%#%-r~p>P20vQSBuX9@MB(<nG~5TYHH
zM6alzg;4E>e7y9f4u0!%*O4JY5Y+L-+n<M%hbWg%A*`H6JaW+KBp8<+3|D~5GbuK_
z1efCkFZL1)h}%E^Fk<+)w)-1s%#`qnPi^34bA*MH9{R+nQz3|?<Oukqa3lvc=%tQF
z@qj46x#HN1F<>!IZmR_)ib@N_#Y<1e@O@I;Epqod)|am6ay|65q!MNw@9P_=GsfCT
zitSa8+Z)5gq>`OBP8_PV#?pPBcpj{oNLEJe-m1r+{D_=cK{-+PkB(b`lX8C~Lm@_y
z?wvf&4N-}cpk7DcN6!<a!mpu!CzA1q5(i@zfpKwTE5c%M%>OeV|7haG5B+$_uPS9n
z=P(!mImi$vk2gy9{;@NsKNgKhVnwYy>7jR!;4}Gd;oaMDzh(v(slwvL>b0zQFG061
z57N2-#mkHLvu>SvPQ{&;e4hTzyAa(dCY_kqnFXEZF2#lv)=BuFc6CF$R}0>NR;n&v
z|HvDhVj>ZJpBFv}Vaj*wA2I?|+(UrbJ&!tQZAbW}pTExi??ShN=T^Ur)%GRSE63n@
zGw|IiM*TkaHi7dm0xv!bB$WQEI{4hPE`ITI!0$f2fz{QoBJ@JE$Lr|CmoV<7_{2|b
zVc}jWlO;|)GYDzoj&km4m<(0X5iMlyd!SQvqT?q9O?3JA8YZN;>*DHppwrGowq51&
z={)&b&^1(EgKA{PSd0PpECa5xC9dA>i_o9|1XTvW<-D)*Ea-_|58Qr?!Yl60$Obs$
z&eGcOvr%GCPnI5G2fUDThwnE(t{xMEPW1@v#mId#_frgl4t3aTQX!N47H>)$2TF^k
ziH9q<GymHk`A~Fn=AI`i`2$blEg0WG4}dD(R=#I``T^9dvk9gAxY>fNPST54S##ZF
z>JJ))UoCn314n9Q060_@J$ixZ4uk|M?jna$NJe}>S{=h|5^CWWlPLx5`eeBsml<ee
z2&}Y}-ifG;nY{vKIHX~Pz3^4ss8y?VjI3a54R+}rh9?Di0wnFDNH64uPtQ@UfQMiH
z#0EC@Zle;E(d=#Gh4oLNR1V-$_nKe<rP4H$osx)JmFL*omExcmz6`wle2T60Z8Uc-
zAx#HdpW%5m-0A#2!df3+eRc=0pYP%R`#p@gjlD=;k=hOI=CarotvC~<MtyGV$tX8S
zUmN<NRBONM<J#*nv+*c=(8f_Od|I$PQ7FPv=^K4Ncm`-aLo+GVPOr1(7B*o1)`nPd
zI*3M0nt=6rT5!@9Jk2d5pclTnzxsz4yY@~<k461tIq4ufE*olXw0ZYeMnElmG7yyZ
z<kTlsAycYU8w0-AlnNDHi@kP&EULK=o_Kc_<Y)f2Pu%P`83_Ca8309SLF1`<^#tj+
zQKxRh%{T5pzf_TV)T&l__XEMaz4#SliyxoJ8%|srRth>$6QDmz|D_FtnJBV#6Eb8}
z2y{rGc5&wQks%<Ljdo$#xik|^#iXJmAnvK^`fF6Ib-Zh(w`>V}9V*D~uPCkT7R$~^
zKO_=z--7|Z^tm=(JAVT~n80(&cxC&ufHOilq(wi4a%llx5b$@B0U+1<#A#q_8+h?K
zV9*;P8to!YBj(jm6;R+$qZ4gmKVC)ZjPOgJ+`zpL0aIlMX<RI1-r;q+PK*@?sKUxq
zZMC&}xAA=Bd`f|bOD|@Ot?-U*KhM`$XLM|YPkw9fOJ;$&JJz+gTC<4_lI)E|Hlusa
zKxGchuegFk(4x<j%WpgY+RcgFBm^h+66kLwQO=l!#Xe-c71}5$G)x^=jJI?|;$5H0
zlerbVJRWB`OQjPhBFZQ%$%#OTQIca!KdFOu=D2h9dr@*ueXH+I8?@qW?*TXnX-8R(
zBO#@Q6#=rO-dYU2{+C|xk`vVRsKwuEQ&%J&dc9GflrK}e4F72b35J_*q`>6JCISKJ
z{_B#kfTWXnH?gimak0fds2z)TV!D}R1e9*Qp6IfuwZSMn3J&k}0_QllzzPazr<l+@
z2`xbq+Lb83e&!Jew=a+Jx!<^e+}lSjSjKAaWo!;#MY+^~=heAQdJt61wWS41;A^e!
zVC@#Lemg_2Gt82NGU|LFY@%5f*m1DYeF2r4gO^`y;quKs9(mM9G$8Ozou~BFP}jr4
zG_*IQy&wIz;O1=1%4J~vCUFT;mS*QTTrIeRX*?ZHO{N43mtT8VHkr)6=5{uKm;>@2
zF#>}=Fn7}B{s?5ua?6!xcRo##Ce#{?7QGly+Q9{*C|;`_I-M2axS!?+Eq?MEiMW)h
zMJ`^QG7ch@#=E}y(F=c&IB*&s_TjjlE+Wq@Ex0++zz$6aKzMgF9F1Gpz0+ca-KiOu
zbJijm?=c{x>-P1+H2<<%Jh6*sYF15bXLaN~pbKVPLERKm*AJ-2)qk}wAyh%m%?M%S
zU@tlT?<B{s*kJ^aqZqE3w8h`X6R>uD0j<O<Ft6uMx3(**(@*>y$GJ4AmhU09kb_VE
z(slI5TX5YFaXP@|=5HYkDy+5Txpnpk2!vH>G`_V&93l*%xs_wk%`lE4mm7C$z7o6A
zDSWSl-O&XMk{v#dU;f!WET5tHU0hp1)C+J^qv5Qmq>*|3qZfAJ?6ExfXy{?}T7s#D
z3a6B@(CIz>dSg^9JVv|!e3=fm1~4nXFcy?qp!Lg(RW(MXOG0T#>PTFwlS?j7hyf!5
zAZ^GvEKuP9B`8cdpu7aZ1neK-LvZ-Um_V`Plks5Sj}3(5lGh}=zF-031rXUXL;1J^
zf7!=NulBNy_L?7Irz2bGAu#|M>9=Qt3sKh0I<1{-?Z!63iiepcALY92_D=3`FDNP1
zwRd#=DTUxCKdjPi6ZwAgq^j;xcz}`q(El+D)9NX&|F#ylaxo^-c;<6VD56^cTDvpv
z7}5dPOn5zsHCk<D2(;0eK$cZ%(S|u4Zg3|PtvU-FTk-IlpV`9d#vM*y)q*)(ZT>bQ
zbm04ScwU3sQhRQdTU~QEU0!t#hYo}|cRM-8gxC`pkjJh7rQ}^noirKe3?ppyUqQK+
z;f3dSasHJNPTlJ=U6-Y?wQ*&sarzQ*we{cX8I@VpExOe`Az41($My3mi*pE#TjK>b
ziKjsPCvX&vrAX)@-)r5kiTh@p#KP?JTBj^3l^;`W{xXFD@-FV4Zh*gnkYqd^l^sxR
zNeVCEpdnz;P<mF9K`=j-Az%-HeyemUwRQ97T}<5{AgyQk%&*_V%U7;vt?^|y&i1|<
z=WRs>$lvZf09ih<yYma((bnI|+-}y|NYEb)aO}hqW@hS`nkEaJVn{8ZNS>94it1RO
z&(!yrTy8-Tw!h0L1s7;w!Oc+*Dbf(X-J%NH#Y1m!Sr2@w<dv-!WcoRAFV*p@dIZV~
z3q4e3VM>n(V@Xk6tl9+$L&PdjRUETurL0(-7t$UCmQVXQ_gojxJ$D(7-$u!uN3(w!
zYyB5du1v#mOYog3xDJ7NWnR!azsxr`5P*q@Fx*bvxbH$?bX;n4M(-i+Lk+FLB^<AR
znA2mQ`?VJSyZ_+?!XV`|n$po!n1ysSrjkOPiZh1q04PU;;^<Q7a<f(n1IlHW>-!b?
z!7{pXafCNg7;e4d8L!ip`M`JBf19~uc?Q~;(*itpPk_~nk$jjc5!U@3h0G`Y9+};&
zL_jsZ%w#pi_T>Ao3c!R1M4qeqTg_w5d5}OeXQ}z1=AhQ_xb(Wy9pT*bEnK?1iS~XI
zL1~aQ`?t!8v-?j|O1Zq@OnuuK06D;6cJ-A~a^JI??ce+0nYr&BwOeapcYh1j=~*lv
zU&j1m1N9jX<57k|FK3BpLX^qE3gLpcE-nw2F0-OFTWrC4rRxcBAh{2Hhpgvl5!2_X
zQe*uRV;D>^l1w_OB~S*)0;f#G!QZ7)f6N3Fp1+P~nQE*jh<pz7{R$(%OhH|>NOWOZ
zM50Wfi%~oWb0-`O`Wb%rcP}G#b`fw5ZHmjS&%mR)VTX!(s&J|D#_<^gpr)l02TX1+
zwI}E6Or3R9T0yNWDU2d@Q4g+H#yH-?-tamWYLDamg-twpYZk{&lyKvE#tcO=1ajO8
zG_`hXQerMraqJZoU>!LT9x&YZar07wGmliz?<ayHYIdg>4)&##_J+Bw2JcaxR<WWB
zT>-P-n*uTY+QKuWP>STk$OE9R&ne-cn(D1@tzPI>k(w9>?Tc!%k&u(fSTX>v=C3jx
z#xv!Dvyy{S)nnaAa=HfNF>c@NVs&*J8yh<qjRx>M7u9kQ-RZniAI7U+?d7k19&f?;
zhEjpke2@?E%AeY7hnt~WcaJrmiaMj+aIdwB{k<(zYqOYNT*Bhw3>x#~t^%V08G{V*
z*p*$C!&fFtnpvO`U@ipGlfx7hs2gG!dwMx5m!Ez!qG%tfnI7gH#k(v6Vtoy73{1|`
z6ROx&iV`Lj4k$cRsBAhzVZsP92!eUgu9|YzdqRn((g3DrJ^bdcUBO<9T>lgm?>JWX
zehb6AiO_3s<l?ym`uXs@5WYu$t9^-bo=WA12~FH>R{#lN?G>RA8x4oruDkGjA3Oc8
zVW#phk|f46UvA-#|H&1s-pV;vHDI0b-Bg$}v4)guZ?39bC%P^q+kN};2xs40D$={w
z?xt-QGXW{zZvl+@`64W|n#9@|&;*8aV1|-(;W$Ta)<JC+*x$++qbiuFh2pWaX`9>{
zSS6S+EM*LI$f{36SDI3RS-I|_Jmqm1mZTY4`#tPjZex3U53T)ujE8+>d5;;Vm2!i+
z-i=n<&(`+_7kfQC_gzWW&))3a{~K%o<VFvY>sxM6d+c_z^x8NYV|nVy9{ffaWnH)5
zU&ElkgN-!`3Ffh|G>6&wI_8guoa-L;Qr@k|UDX8`@~OI+g_r@egW4NE*NUmX6;n{l
z-&<55;~D6xL1?vM-YgWTbs&9+;uwgl&SWBiFm$bgwHqnifw|yHRY;tdBHJ)&+=Tke
zm^|%XL5|tuJ}$i6#D(*(Bk)HEoEh}S>sT8;gD|X1h~U*Y?q~O(LIJ-*bPMCE@I)mY
zJ;lD0YsVQ+m7Y}Pj9k(vwaw&3490h`Ke~k3(z|f^@-}w27csx=<Ms_H<}r<0ZS-Ba
z?3$EgOoWN;DOPY?0wp(A35-lpDtj0!*|GwY$hqK$k2G^KyS{${58%}BWOrx{t`;*!
z4$|5VOgfOBn?K=UcP(ZEAQMNM6#^Tya*{m4uD#NGkZ?_%AqkBVU7M7sD=w;apEU=l
zSx7V<V|}-U?VUYr@9v@7=^&<#!%ocEF+cDTxaBN_pY)?`cdPSKy%$}+*vGl2hUwb=
zTe0}xgjxW(_`Uem^O-+dS?}~evp2Z*#IeTvvPR|MLGIPVDDSyRzK6Y57yGR>l)@?+
za|>(?8Z&iFH$0Yq8V(XBppan@ovs`?b;7YME)A_9WcvgB8kIRPsbDMiS8p``Hduif
z#l=@VeQ`e3uBmqz-Kxv{_W%|_$CBnbtsCywr94Cp6BzG9c4Xm}Pc6CVv|>E-^m)J|
zHonjQySVo&a6D-}?l=K_Pmq7|030`f>xF_N=oG6GG~o%adMRjCf7$tE_jeuYW-Og=
zbJFW_9qja8!c6&LjEDPp=9wKl_3bNITTPhd$JL6gFK9VS+S4)4leEkzI2Eebq3@#I
z_ON~{!qUka2D=G|7JU7bgQ5vl^7-oCPTV}}K56jQ7@(q%$G+R#yqx|}K;meWGv)cp
zO9!dLlimndkE$-m^i5>c=~YxC><2C?Q!Z+>=qm(HW@vYNxOHRC-QL>8-rgQY<37=~
zGsjCANcBSxzEjBpl#(nPqCdJ_-5A{pd*dy{`OP2h<*)weINOWgs>S~%H3re1z?Jpb
z+xlRVKl1&<=GMQO3SXUDntlw^<%fE?+wc>=@5k8)<9LXz&3$Zdh74>qX6G<7+raGX
z6iRa*bI|*plw&u+3*<W(9pD?UqArCjn`Nyh4YzfgeC*&-*DF@q-0>~G8+<u%KPLPH
z{k_KHHM<}mF7Fz$vB)AUzR!jgQJ$ibUl+go*-L15o6^$UoxytNOXy{*D2229F5j&%
z@=v#q=vN*sVybi1Ne$|1tBRQ@1YlQM^-UC>gf;-K!T@}@nJ1;sUKO43b##U|Q4de!
z^^3Rh=zA70zZhV9L$nSPA^{cHoF%$0XQCdbCWK1<NvtEc3wHzDyg0(idyA{6uR)O}
z)tA*WEc|jxj~0bp1zc-=)`9zE9<w4lnoHC3KFZYqNkp7ab=;;0o%Lqz)p#y~l7~_y
zAie}SUWlS$wz;>5?Mr*u+1bIM-$9ZNkUJ64gSeq-K&&{YmV{22q}d3g@lLflS_|9b
z>lkO7w^FD5BT>Hki9xcuU(Cq2X7Rs?oq^;^$7v^v)31Iq^cFu8#izcz-MsR@*Zkv;
z&r}}4Z0*sg9xOzOlZ4}J;HK!KKkTC0-NgFs5VcwZ3roi^yD*Ddqk^d!kLi+>NuZi?
z;-L%R!@jfR^aYxq*v*YH&|R*5aiq*u7WaN~mnpC&{eGoqVB-S^jEaa$YC9#srql`W
z+~V#=D$>-^EDdT?K6}i^rSm(ua_u_2U<3~(4C4)~4ZegRoZ^M;Iwc0|Xy<lZN~wDA
zyb^pi0Iu5ArIQT}+O>(rCdaGYrUJ8|6re7qFeEKE#rEJiOwHbdXxPO|=XUWeA6dcf
zcB1(D+J!Nnt3W?~M3&P5h8~w#XK>494_mj0s+_P#U})8{<C3dy`Z(%aKxsT32AKP%
zQ@{2Lt=^G3B+*cVeea10=+8NrUUIQ>D`nvh0rg~qVVKEr;RhZnwE&fh$1-ihIL3Z^
z53AcvG+Rw{J8d!o$VivnjYaJ#2r|#9l2&6vDrgCM?r40wygR-V_ToDjr+YWX>CR8Y
zdGnVOXZLEHv~9umw{-Ep$*sYPOCF^=;|M#y>bp~)iISCfbvsx8=2q{;zcgDu8_rc9
zM76Xs$ekHP&d5)^p_}D>^aexpZZxrayMk(c26GGZSXh`ry-`7}5rE32M}w4qXVm4D
zzDS&Fx#=cV`1P-;JuxJ-GmBa2JV;TB+I`H9Z8_3vf@vK<enhDXO<oJ?Z^Mg2A=U+8
zDc;QVf`@i%jOV|40r1<Ls`H&1u6I7q4J`@iV=|Rjf=5Pxc5U9hL->9fp63g{!Xu-g
zTBLCbPMB;4L1)^wwTWtWCNl!1fIaZ5=)_ksh&NCw&EeXWb-e45B}~tH*xi<_hw%ce
zlU1Luj6ng8N=lC}Waj&>+iTOg#wgV)=u<BP%k4KzLi=->grh6#IlSQ|tI>MFHr1W9
z0Z7f=u;u{2o@#VGVDY4ftsA7cplcF51c8rgt;9-9q}DVZ^{~FXkDcZ&c6N6#9CnfC
zN#=4XSOVAg5O95OnE8&MxbQP%<MJ?GFL$Cl=tirE(v9b%eD~jGPUrJ+ws$Me4la6q
zfN$;Me+zm87BCHsB<p4gF1`j_{L3Zh<PVRA*S>Rm^tJ!B<{f`>x^xD!m9tqjI6i<E
z_)$LelYEF2`{;Dr=yW!)e!GlnZ3eURi<qCEMPshQz!aCN_EU`dvg2ul-8h(9Y1o<s
zdT5tV(l#cQpui?oi@>C#qD`2YUltg_-Uv;8<KC;qt>2?0!OWG>GoCu>G$?29;_2VN
zh{0eBuAd=vXVB`uif()xL3x@#L>4_60`dS#T+Bm{5qL)^qOPm3Ltw5e;B8H}2$m-#
zOqbLIO?>tya_v!&_twYm@I{<%d>4kp7GAxug(sgliQS#V2&NLSrvm^vC#ycf-u@5F
zi7fH4c0Iy_AE+SRmu!Vzxa<W;cFm&xDici>R96Zf2%w6OSJ#-uJqm+h_6CK05;$6#
zBF<HSY9&Be^7%O8bc{}a2di5<*xPTS*KK1QQ(r>TG*3lTmhVA;z?tHTOpfQ{)vz_b
z9rlw=L}@Qe^3H!q^ZlQT^PMloS#vYaNHNj6F?X$zcXV^mNkc&Y9;bKq$GG#0zFYrf
zf)fw*dRPAHZvWh0s0F9%Gu8Vs6`qdD?o^Vwj-PrXH_ao&d4zVShxYy!?%b-NR-eJb
z@&cBR&tYb<gruR`L=D9=&=g!Y1)Q|iM`6X`Tofa!fO>s!#g}cE)$zN$z-2kB*BLK>
zp5ye;8-%BdpD*b@b0x&M_>~;fvjHx=vX1pTHxUG6LuyEqF4lU#13x67k8liHoB`+k
z3H7Jn4E{L*dj;A$X}7qb)oPDJSZ|zxU?ZX7&!YB%j7gsR%oq%UDq5r0uvq&b{9p<<
zuiwVm2Ny9t6QH##xC&<mCs>e^wBDj5t5~LVxk=t^^;(Lv@7E~>dv2JuUd$NX)z>^?
zA^mcFMFf=i9{QD5{eTGlNV66~?5RgYsg|QUO*?*$VZ4u>_CEIa_t5P&F&giK;&n#%
zU6=biNJ(jk(5b-5Qw*aWw4-edqbA_=5To6R)6Jib(foxdYo1H;c0Zxe;BC0*{}8(a
z+b6EQf?l3vmoEaBe<*Mles~xke{#S3%3ll6_<^#w9L|*=!OYa7QOTcm69NtM9x`u)
zC>tW$r<=Bh)f+W7293FS%rDNNLE@HFaW&4ktaUudq-B=c2yG9*-ZAY7Yj$w9Ap#JZ
zqm~{5E`tt}A6A^FmIv2wQa>h3K)4ch|C$fb-09=OYZu}B5gV<*4{&wwQ%L;?zBi?I
zY+C%GS^R?DhsqF?l$T?<&%y_`3Tb4cF5Gf;#*{_S^lX-J2#`^#ifRs=J?!>h!ttq(
zV>D{x((7CJz>}xZ+7&OrbPCmCE(IoPuA=5*=)WmG@Ix1^T}k@}p)a&t1M~~C&Q|KN
zhv9%tJg9ef_6{=g5=_`Y)?Bq|BT728Y>P)ZI!zDl-2q;^{@a9AA*b%jP6k5k$xu)^
zD;HQfH8zfM+Qled$9{AJ-S`&BJ6$Nx;$6#2$;F*sIm)kotQDVo<?aL1SNrX==>HH6
zz#r@t#M$mR#_rQ@=05GaOMj)GE<CjtUHMzp{<)7&hi9Ux(u!O2PXK-c2@+&3<y9j@
z$q=Jf3(eg-xO1b9sm2@|g4u-`G^pz=wUqB?{6obtnwO_M0VVxsACGqZjmW%`8n<P{
zwLqmkDV1ulet&U#6WxqOjW|cOA@1)B&z(mUwcz>*O8yjfde5U1-$12IsK2=WvfGDn
z+>ng{8w9oc({mc9px;dPVV^@SB3^h>>>>p(s(L}kCrm={TnYg+kVvod{VH0+bC|C_
zjv$!At($9j_>pDQ8zt<uQUMyNpSJP@CIC6J_zU6@w`5fE*n^&f-HkDpPlt#U5^ol^
z+R>#<zW^+i29)Jm6<1XoI!){i$_{E&D^-%?AXaU!nWNXF#wQsnW%~RGqo~PR{*F)g
znbLGM24Cs9@pu=V_+@nCb&Qf7M)%8M74uUo?y2cB`0kZQvQpT?KivF93{w(6)3@6A
zM0mT8KSTrY^}Pb(^hD`q7uftY&#nJ@fZ&HZ!{kTW(MzKw?}jtsyD?XJ9QD#Yybxk%
zfW#Rf^~Q+u2)j)(1|doz5st_h%wu+;ftf{O%L!&M>Zgc@QWh#Zp|#_iLy^U=y?ND0
z)PPSam{9MRe=D1zjeryy+2Eui=#bZ5pZ0O?Yd5gHy#_ywxtqc$Ze|<ZFC#2Xso1s1
z)zi6p9Dj-tpkP*mgZ%BbPJ;R_UDzTbcawYx*==RPJ2}N3Y?{O?aESg}!U#KP4PO;6
zV7!M5udn01@3|N4eL>k%O3eurXt02Z`)byKwENZ%x(KjwJI2Zba)A|QIkCG-JBI`5
zJqxwfx&qvXF>v5hccqH7=qADvsTg&4at!vQg}D>}i5FDn7Vi#1cb=QH!s%n2Y@<Vq
zJ=(<}+d)K3J=aIcpT%6|K2(DSs(u9}FU)E|h?#nVu$H3c*Rh}bt|^u{1PlLdWB~pk
zV?ZgaULLz^PgjCt?t6~^jcjjx9qXN!aHIXJ9Lvs>&SJLm7;52Z<c^OB10+PCaYl?8
zG+S*no2v-II_gt1m|L93yz&g_zK@3)M*R#iwW(G$;*u^?i^(oeR1H3iG2k6v^*9t)
zz*TZ(Lipjur6z<b8sT`}0~&KaR&Ta&>HO>PLvsD8EVqK|`=3Vc6SJP$*wE``_jjCf
zM&O@A2EZ%1u17|J;&$>11OQ~Pj8cUR(iK<$Px*=8uE9YxA&4sggFt-01L=#&2;^h{
zq{T2@x4qFhEL7i*zzeZ@a~1d8e+<*J73}Yl>XXsYlZFshsh%<nlZI94?-A&^bBEH3
zM3S)xMXHjpAYNIsLo2MXJU1=)96^Ozn@M~h4;>6!IR<TD)FwPgVK*As5$$hIJw{{d
z0+C{vT*Y3rj$wQU!*rd2zR;gTxwMRF|33I0(XgoXxewp<xMNf3Io#xRt_n;qdRVN?
zVJjsm=Rb@@-aE<w*rRaC$%9PuAwsW=<?4swxGU&J>*$UzV{d!|JL6YTa_eXW_cM>3
zj6voGi1Pswe?U3~AkxuZYY(m6Roo7$s87#gZgBx~3p1$AQ7yg8JcCg$K{OBvEQJY>
zz8rTVDv*CA_AN$$Z~#N`<s(<U1t-D^ZWbx;oSJtLjbog9{#9g7htf(2y=m+Y&Skyi
zCQ6k#hU{ebXAdA_#NQ(hfR6vAlFxNZ8Fk%NEo-D*x@tm5R8`K~D`QpE0B9nzPG*Y!
zuxJnqFM!g5<bji97y(|*!8t6~K8De#gG(3J@Wc}jpuH!240U??-1RD8+hA%YifXzn
zOEZ@^0R6U$QIF`jWsIr&knyx+@e7Me9%cHo4+ONsm!&xhu^h*JptA)G_rO>Wd316O
zBwZ<%$Z8^@f&>yNi8BIPKa0?>Aq*GL@ZJrNuQz2|R5MVeKS}eW<X2D*DyRklW<nS9
z6&IBi&#hC7Crh;KFpamd0nmf*T<n0*Zy!-M0PzGoglLrCg{jiRly<=|T17LuhOOZX
zD0?&P88k`{p&G0p_X0#1BJuiwJ3^fG&}y~V7=%F`wdq;RFD+nhNsK{#)<rZD0Fm|Z
z2ovM(xkbxxJ~BQuwb*qPfo1{Ppr7vg<K|rBU#+`%`gdMOr@sl$PsshoIBsFH|9c2S
z0{x`TA+?d=IA8Jo1pq9&%-*9N+x0VI0NO6Ht(2=3YMK47m4eiBn#jzHUZ(_=5fBW3
zQiDG7EMYHTclZKkO7EoxFSv7S6{pTDqdq%@y{$wz@=_Wr`FYLD=RSgOkkjY#W4f+B
zI=eCEPn8)HU@3OXz2}Cm+(j8&MoaIdu&uKV3~7h&=PKKyJS)|XOLB;M`si9rskxLU
zEz-0#$x_sUdr>J>r6@`j@Ur9#xBH@9pMC;_UJ0RJMkOer?t54$m2muY72{Jm0s<Hu
z)0_BEjYD7nXymDj5P@4kf=KOvW28BeIH>b&3H9;=sFm(xt4_vXXZ#wrhR>nm&Y@90
zi$<A@!7_5!N1Tx{7$NtEi1RVp`)%y+-NEgvHB{@fn3<nrW6+qb!uN%N7!6V-gDr$%
zLGvvUQY}YjA=%vWi+cJo-<|UPIc66Fy!N#<tlqu`KTNqy*LTXe-Tigs#P#O|O)aTp
z7k1siWz^p-!=c4b^k3rb!^;991+j3XCMxMZh^j_iRq&}irDFS8d;oU+CI8Py?Gg~^
zbDE1V0D|{2Cq+PBK)i+4=p`&xK8z@C;{2=E@sU6BUX-g2H~Wx68J%9#*%Q(?pz<vt
z@o0U2UA0Ky=JtAo<@;2Tk*cJlMNfJNbj(sDmSeaE47;Q`r8+WM4Oj`olxbq~9VjiU
z*p?<EqZFjYFLI?$-!sH0!X=1g#n+G#8Cm=#KSaqZq2vcBdp_!+kEL44U4C*pTMrU9
zNMlvleE7!UFaWB`gv_>^`+Q@_C6+cTl;4X$Jb~O1d8>N)e$-0$GB10aY+-A39_xc=
zP;uwQGbo=$m9hy=2{9QGcZeJV#Q6~Ib{qTq>sY->q$8puFJS4|ET-lvTrNw-o-hN_
z%gd>njd|iq0K!f&s#enkG||jx9M5t5-T<$Cc^|L5@-m#Dhct^&4rZ{^`6>qKI!fhv
z<@z%!uXy^UObkE>GJ*~%129NOH2@S2=nkhvA&|zxIU}Gpf72#i)&T#XbVsEUkav5R
z>H#PXD1{3w`>QYv!UCqz8h#Cp(t~7_u)BQ|t2d9~zI&IkaZB1?ut&tZu}(z_&wye9
zE%3pWoaC9Xx~7NQSAoa>XoC3@E`yca7JQte+X91k1mp=&t4eVdk*BB*EO-G-1<=Lg
zLOhgvp&cA$APiq4rP_p$ucIK2<XO2&DNc6(z@yzi<liMPM8)?}FL^jQ=Vj%Gt4LRS
z2*uzY8Gtu!5RaDjJOaK5Sa$=_zf<bFbi;CTTd9#28G@XYR49I}pz7X(a(D`9*2Os4
z#8&hQHb>8)>^9H{9zdh=Fsi{x&ZS3rAF(^&)MAo#(eCb|y}ydv*Q%)18_F}7#mw9k
zs*Ql%)OeI39+KX(CdTSCkP?l|fU{3H_|Uie_`RPW;rVA?MVvR`<Pie5j()U`&E8iK
zlqn}j{}<O=7=N_jg>}X|KQsR*15nB&6F|?4J1;d6ns89$(N*}ZgJ~=7XZPRb+JQV^
z0F|yG|C@0DGAx3+F=$6#fU}9_;CU=mp90Xs<qH=vJJ&#Csf^ZUQtZeqx2UucR2j7D
z(#4tpr4ngHx?HHVz1PBE5F(E%*xv@a&0N)b$YS+8ZqO-&O^aMupew2X#0dHn6`&fN
zFytUM1d=)s6epL=3iBw)6nZR<!vAByk4kna{30XZqY}{K53w{A;NBAf^3cihD5FN8
z<QpD^0B@!R;AyTbGFfeEr7eOKWCUWmb+qJF%uTxqHJXe0hi*EFXH>&`Q48-yl8+E2
zP3%Tjur+#-bH6jC`!QE}m@DAmRxri@<E(?+?;}DVaj%8_&Kg#4R#7cCFtad^#ba}r
zS*W8vN8Sik-pO2~^3bW-9Q9cTXWr%E*fQ{IKe3PB{@eu&(+%YLSjmQsvAXveIH3>6
zrv<H0e?|Jygdh1g?fhQmx}i&9g2o0Iup=6;$DQicLQs`$T;^W{)kT_J1AWT6s&GTT
zhsu5vagB+8z=}$O^OwRI?2pc4s{9y2r-9*U11~;z4)6ca6PQ{I(AlADEg_OA38Xka
zbXf+B+<N+`!MKZ7w}qXp4Ggn8*x&tbbnb8qa4Ekwts}I+p;T#dSVMxTdP<n-F%fta
zQ|1k4lCVO_JM*}MZ<&ErWkwYUC<Y+ljV7RqK6d@fUVui$$Jr$x(>1!d8L|<vRC88b
z#33AqBLomgh|^FcBt<uj`>d&F6YBJyQyyK|IXM{u#H##`5N|3tAp<Rf&c0KEAD%=d
zIEggtW0Y*78DGNg_$7pH6*Hv=FjIOIHUAXF-Ha1ZMj`VOWKJ9XxQG7QHn!F)D1|jt
zYQ!;^Vb5TyQAWAup)v1adN#x57e@H;|FDVMw=TjhwUDG^R_qDADcs)w6~q`J4CZ+<
z3Am>yzwGLZ5#S5}r2vWb=LE!#W`p4QA_GRd7Ww?l1~jxo-Kj@YYi*^YB4p4#_q5?5
z&qQ{AYDktbc}G%&M5C=D^@rH)e+4Vk-^(2McIO(Ne>TO#kG&gn%cN7NlzEj>E;m6<
zBJ{gG?5uC0*<3@fzl}5<vG7Y{nGk&!W5UsF{<IEe?D`2IH)W(otg;2RkmMVz`9k5x
ze1bY>`q;pyg<j=2pDDvE?L{E~?ff2BSe87G7e9Fbvy~7J&W4x@rH=z``srv45)(gM
z$-l#90Ej?Ny?VIilcy%XOnll69isQ~WT%~rV_T^X<|-|bu_1gwE8<W`d#&zHJ8d;w
z;UCh>i_#XF(JgEZ&!glt-0ARCHWl8B>EK>?!5k8YOv?bNJ3`9FppDM%CU%--luI@E
zKBel2pc8OojX{5e%xm)EkD?AQ$f|b?TixG5FJ48tvZO#eiR;A(P^mBdP>$aKfT{|R
zJOY}yB?*Zn<)>u6<#GuL$>AN9^#C+U$)eU4JsKqS$DAd0{mJks{XjARWSF$*SDv9%
zUcjJ#3(es(m@j{T4P&=|1LwXrz~aIR=9gzsDu)>LV{|$l^m_Z~4>}l(_K>9eaGWv6
z@a)mJW%lT}U09-U6veYp%tocBIHCDmj04I}#j{#O#HMN67l?u%@lI%m=UNKU?BsNx
zPgQ}+?GL>GW#7kgJ;Z$tA5~9e%{k;7P~l1DW{ykEoQ^zzH*ZM6iWYd6ns-uW2{}DO
z<*<HIL6r27W@C9Rq1jntCUeFtpG4d?;=Hp_h}me!u1S;KL)krna<GCFBP7XwwjZx!
zyZ0LW+{aXK0*&$mm@1t`C0OFwO2nhF(?f<n#@P_#h~iiATzPSN8H15YJm9k^du42O
ze-o|fJj&H2m9v%@z9{&ionLhRX@WYu@Ks2_-hi(FK#}qy;SH`>B<`P8k08AVj7pF4
zst;V(0|tQAftUy+V%RKpVkEfeTII}B*zJFn4b@!b1BkL7qU;XttZ(7Y8W}F~x<*JT
z)FJ&~>Y(TmKug~+B^(21fL?M9y>W^>{eBTcHAh~AF07%bbzpce&@%3Z(PS_H+jlTL
z4YTl-$&(bJOPm5v831m<r7FO<27o*O&qv7%FjFaGspey;LdJkEwQ1~1LW${^HU9@k
z2H;H`!mCkaQC={DFzaqZw3~z>m2;NZ#b)<1qaB(+LBawOxW)@0*EV5{KyuxQ@eCwX
z;GQr1*~AD7{aJp0LR^Dn51sCpkavCuWp5s{<@?YG&!X<HAV-MANs%H(<_-{LT}0`K
z$v9L{QuB@>&Gxa;`7C<z2C9`4rY))L{FH<DGl}^H>?;;MEq00f&GVEmlga`E{uyUi
zNm<d(ujSMXN7)2aDqP?k8h<xm7vTj^?5}VD{#$7>GPszrAPE_-?fzFejX7I=zg$me
z1h@lm4Gx)EHeeN{uRlbd4ls&#(2qBWJC9y;6VB9q$YS~)%l+5o+lEu5a~dN4qC*1~
zSDC;9EJ5f4yMNI(PDo3xR&RDfWdIZfN`Ze<r84Gg70i`=R7lQEaXKhD%8fo!svUN@
zk!qZz{gkSS4jBvZ@Pq)W3^(vyB#Bxq%yYK@pPW#Cp~mK3m3JR90tp#|G%_wN?P65!
z>X0#@-Htr~`kRb^3KOIux5_FAuod_X1pX{gKEt*0QL>NC(JNRRJcE)`Ww*ZWpGLiO
z5+#2gp)<?9_9(@eWNqyBUqEa83Ilf4>ODM{B@9tiTomQLQuU_{0Oh6G3()C5+WiF-
zEC@VWov`S-WRe1EQi=w?US#@x@;6};vY86{Pv<UGf;woBLLwpjdJLpfQ<7>u#NO})
zbUT+Z6+D27e*(Tc&Gqs*#>lch2H7eG@hami#J^x^0#Y#!>L}v`!f=V(Y>USvH`5d<
z8KG4T{cBpaQh`zu0U8SsJpuVkuSU5J`npJHKtwL0W@Oazm%>Hm0T9)<7L+kvqMra2
zpN@-FN=;e0(nIHr2@((SILAmjuHZ0^Lty}N<x>-(hIBzChg0an3SYkv-ykp1C*~lL
zhw>_tG)9t)*fZb-%?cFc8KiIs*kj{B9)UIjYVk88PK65`LP$749eApx<8VqRkmZyz
z>|>a;(22i-d>p~aSo~4&h@AKZ9bUxc(h7WknlT7Q#}qL~LK+3a*@7Pm_><k=Hz_(T
z1R^X~EiYy@M3q|QLQsRMtGK^iA!{bZdxY=n7+Qn`g%V7=J{?O&+T6%E4XN_#DzqW`
zGBqQq)K(Bh`)J0`!-;73R6Bkasf8>|LD#P$2<P}ZNLWGQq5=G{##{*oL6uRLwXZ4&
z%{djIA1gC6r@(sBI5?`=2l+LgE7IaB8$qxT@A{t0wBjTYPmgo_eu$}{%rxJCrPoAC
zT^N%}9F!{`9q#^<)6$7tt|5uCIL^&(bhr$`p)dd%y4AQ2i^907HLX^t=SfMf83B8e
z3Y4ZGv{*<*w}dPsV=!i~fYO8H=H@CqU>8<p3pi9zi#>N!E*jCGA>jsvkr3Q~!i17f
z{C!$j5z>^fh#`MR;51NjPpRrX0n%g<XfacX{{{S`oxjX<UviyYx57ribwW!2sZ^j3
z&ktOO$nfO0=wzOmcL%WWLYknc&sPmrnEU5=+yk%J-Kq2?Gx>5ZB~WQZ3O^+Esurul
zPr`5(LC{b}HG|97tENJmf_We*O1g$pL`9)S7*-LM2o<zQJ5s<yx7RcXQKv!}hrt7i
z<||g)9+m#2W9;`5%+5+mkGKVd4wK#VSr~*|eiu{a24-sw_>Q9pJxbt(>kuVXsu5NW
z4q0Q-;mi|-0P&auCn;n&gyWDHfP%Whe=A0tPC0RJJLLq<%m?Up#?00u<r(^s#U}iD
z5_w4T8nwtacmWj)NxSI65D4{%j6fnrK>bak??jK)SOF9;mYYT5!}X^TpvJ%>zhCQ7
z%M@1fqMDtjig1X4;)X6QdUpF!qV}E&`Iq?LcLSHpf0Y0z)$sFgRs2(2tU|h+zm~T#
zAp)2{Rnuk}7*j+l%9yy~^$4eq&PQ<wB%{bjpHYKR<#`F~P8%~aP=r0Gj(WNex;iEe
zMDn5{jsfEYq-iLn%fj1{9b5N)FzjA+KHOeb)flLUB;YCF1C&AsH?Q`vv$Km+Cr@H_
zF2~fY%Pv0E5|G>O2N~CS)GAXTO0|=5mPr)>6-`Hq8V0GW;2wVo;eQT?08uRblL=M%
zLo^PF0T7H>Yfjk3C7cZ)jzB5LcmIjgn4YbnKa6na);=zsZ(?V2#BZQoh8Y1=eo8K`
zPsV`s++vV)6J-z5JVu_yNO@<I1x^b%GmBV41@S}$Ptdr5Y_&A$nG&cv$;b}R&zlLN
zWy7r2=Sq%?6@R(%uk4Bu5C))!&}AJu!U8DmNxv2QuV4ULRAfn#b9#*_x7?{Pr=mu)
zzzl8Jv|1~Qf!MR5c3~M+1e$)zENRAnOoSYgLDAscWF}wSXPuVRLlzpj*_6&zQ_yzj
zRo#HbGPGMyEJ7%Lfzf0$8~_O!Nb0M#3B2&~ui(zsSMWgVJ8}BNN3l4+gfkDMm_P1t
z8gDdmapPteVW1l&>uWiIIv7f`6fwE{-Q510aEq>!4LT8qSwbNI4&yi!20%|V-KtsU
zw?t=T8^*%~4?Wtz!tykWR)(b#-u3R|c=SDsSYPen{3}hY-soX8N;%$S7g0@3uCN0U
zL8{W>m_mevDh^fpFeigS3tbrmHUJtkkPL%_2YRQZ&!X6pfFj*V-t?B0Gf@jvYw;Dl
ze~t7D2B3vMCO85_2GW&$+GSNADlV%9gi#*_DhW1OG#ytLopTI_U%TmS1nBjY&XY($
znXp1z&-7@cSE?5o<3Q&v9?wBRF9GS4_r`n<^3Xz~1t8k&#r-b8JO^QrV=#;`Rd-Mc
zLkv1(%(=pk(|Odaq*O^U=#=on%fE#iYhOS)n8uYGzl-&)S8@8plW6WfiRI-5%rr{q
z_xG{Bxs5QCmg>4+LXkgE_>u%id|c83oZNrvlSr~g4)-`5XYo+AOFVSrP#6H6xDqRC
z3eOouliaR@#!MB%fpo+rBeCB~Sk!T0c@BT<d*-mW-@~QXo4EY?9y)sw0?$KOlH@ak
zV>!WV<Yo)6AWNy;IfV%n9!S-pEFdumoIN0wSTY(a!yvmy;T1?KOQ+z9MM$G)%%L>-
z8Qo|8ze~Sa0!)d1Y6&pn0|=I&^!v?HDY5`I)6a;2sBe}K*#H8%fsd91GgF?6d%4*O
zElOo{3m&l;I6Hh$9m0!+Ba2^pA`~2bZMa$6i?a-4CNoJB6V(t<w`I|K!<mC}Imdo8
z!TM?o^K;W!T5(v>m-|U3)TEdis^pwbeC?I<xOnxmsD{V*GXg(E634i5<F~QC`5cbT
zJ%M_49>c*Vro(xb^)~HhRJ@^Qnf{?W?^6iCM!-Qz28S?!BtRTfYjuzk0S@Ch6b2x7
zv_=f;TX8^Yiar!E$R~2Q<z^GeLvwA|PtZ?+a;1uoe6)`DKY0w-ukGW~Yx~$*A94u?
zNkV&6Tfn=exYS&4kXI0-DUvK=V~`PpFjK&xOSfG9CXc{?go<w<-hfV9>D8wfzb+cm
zjZK6Eq;>vHu3s&DPa6Y@RXN_YOAnO`Y@~|h{0$pUtB@**5+fU?uAzVt$|aIA9>c1i
zFdoK`(d!kdiqC=g0*W+b+PI3>QIPMfomCk=s_1kn%b;ku8hqo9>FPXar>#^n>^Ff+
zuV28+m;ODDFTMwl4Za)Gjd@HhB$!?B;RmAmckbm)ymIN67*`<RPYjU<-zT=;G<Qke
z-MxU0Q^DfwJxunIMnfk4utZf!`Bkzdq%S~fVu2DCNm2>}Twoj^8WSeuL`9{=;Tng+
z04SYUQ}$^vZAscI07wB|@}~^Zk!MgRjx)6Ps3<7F*$0;K&_fH@-R<M`*IKxKwT(eH
zWo|g9q<F3?V2k+Tc_<*E;t;SgpdZ2q2=P{7fH4A`GSrL0-WgQZ!sMluOUz`ZNdq9e
zKNUS`79dHOkwMV7w94gMF|(+fTl=t*2G{!drfpb8n1k%xYSME9(_*1guN)atPoW!q
z%I?pg7ii}r<0l=!3bLN^02F&rQk4Z$S>pi`0&vGb2Gz(|3i7T(6rxPmQ?xc+oPYHt
zynOkmktRdjxcxMCTG#Q=z2AZ5?I$oe=3-&d#oDa_UVP<O5Jv-qoNCpLy2;qcwe`X}
zLbr^m$`TiJC0WA2ptO50+PgF1M^S@0aMOJrQ-C~ws&tGJhx<_UdYt))sdV}<jzeJp
z^ekt=2@}K8L$uJOrJdb9mh0&i*k<Be-J%;gr-$g_#?&;P`u1r&@!<ikUfjd^S6bNH
zCBYGgyVug(pr((aEiY}kfRb7CVhHH>m{WejBhXlZ-UT(KR_~{_AuB=w*%74%K<d(^
z>QU2ziG8QZD0lr>RmjqUTtRchvFA%9uC%_AqKczzgFHGJMmW@t!INvMj<c|>t~x(K
zFesJBUXUug<zch<%=MQni~y(fdh%q5BS3~gNpCUPQ>qEe(+Qe)JiPMCb9m+QCpaS#
z`T^X~K@tsc?!u?AF!wA@HlIQ%n8vNmFQVOBL%B4gm%Y(IkTPEiu^g0xI;xe1%Iv#R
zO{(sL;`ng7Bhw*>>Oo1D&x8PuizIc??;-1SsTfFiCOUlMP#6HwvLo<KOL5ydAV~qK
zuvR^$`_ft6fGo#=^}Rq{ViOGdU`@Km-m`*tJ-USTI~~0KdJC(!x)=^}gw)ZML_Lh2
zo|KVt^|&Vh5_tub|CcnPt}md8u2^*Hr*O0N(W;!YiitTjrWOik1-y_o4TwZTtAloJ
zIb8*$X?~mG!Q0LF^mk2O0PUa~ww>;;sL^~LZ1mWNcewIS)PcC#kjY3CcPsFdGaodK
zbc+OCKOiVSYZj;~N0#(Tx}0{^b(=J*H4^qDmM1X`fyzvR<}DxR&OL)yuKYXrE_Ff{
zaFtE5@1o+D(e7-a)BBVOmn!8M_DDoLh4>6A+n~IFG6}<0=d63+s<^)}$i_q~qLKEZ
zc=5AHE%PK1ryj;hfN@HHCxasc@a7JlkFuD=Jr|A$DNhPUtvTUp&2eK#LWgOP`_C@g
z0ggCLZHhOEJk)Jdc;I4XWgchlo5kM#02eRp;p*i!x_c2k4I1)ps%vaj9{?&(233?1
zI!-@C9uh4ANh1o&P;>MrQi8nukc%pH{Zjlxi$@l}<53r2qCPA6ZX2!E=|mk0SWbb?
zt7|Y%r|1+dST3ZIF)Kt&<Z;Q-a{(30lLbmXtH|%OTdylDRhm<ZnFvquGsh{pbPh)C
zSFtP;>YU3DCY;vm?2{xLuyl%g1&~T}jN2D|T)OmSoWK5y2;6B=e_|Lz0if!vOW}g@
zmPjl`a16PAwD>)>@JXoILAg{%tum{-yP7ugu=)qG_oN=yVSpz8a32&(t!7efnq&cz
zgw8KOlBazf(s3v}07DHmO+17!BEEjX5M+!n%MtiKHa7RLMyT=P6jn~mqEeBv(<Bk)
znhBtQX`}M*{xAUsL?)@?Lm#f={U2Dy?bSA3e{Bz&cZP%`u_2(>vsWOE_cW{yFQ<tY
z0$xS!`YJ2Hv9k^lBs>tvQ8cck6jti|83Q1~4^4a}Q&lYTqWEWm`>%HLf-H5AAEXSH
z%6YR+f~gJAK9zP8NLWQnX9X^2KKRNjb|kYUC3C_b&xT7xOQ|n5yVLA7JFf5!)OQn|
z+a)?SX$}w_w}RI09bCJxi<M&w$kP;?H_CYB(id=f^;ft*BGGn@jv%K)^|=Zyx+tX5
zVU+H2M8qGTGdh7+MG%xsTUT8@jRX094P$ECpcA(`4XCNW^qbOvqsYS`=5X&&ssSAu
z1E9@5PbCrJ7vVg;qcWncUddKE#)S)O=ydv6TPKij8z)v~aO&hN8Z$MK@{${;IWuPP
z4&hQAeTMd!y5D%X@18|G^x!;pcYC;Seh=3!_0a1i2m^;(TNPbt%oLKmIR~}0o2nR7
z@ypqjHHJV5dFmaWxT;1IP<An<>6=N*XIV^MR=O%sY$@?oAgLu(Djv6{04orY8GG_R
zBc!V?uk5kJl97~OfxAev5;k32j_hZ&^yv5~FwkBaBLwW76`27MN)5SIf{)K7FfGQH
zzw)!V@A!8xvu>;XGH$MY4Ha)rEqK-K*ifcb2&77vxhbmhqFCRLo27;beBC^i!U5&s
zsGD8nIH2L=2?JniC^+VHECb*mCcGx2R$)E{qX7MgnV?5h;5T*otA?;CZQ&}$l~AB?
zZS`ZcQxPhiq#4R3iVYn^QH*O>w{Yv$4i=ZDaL?&Q%*{^;H8f6zbgtTH@#m;enCjQ*
z)4LtHzx7HTPkq}oKKPLlu3l;5;;Vbu*@$?8hGkKz)W$$umBLLo%U11VIybIP(75(G
zPhPMDWk*wfz2&*6Pt;sln=H-8K_no}1<(`RMnd%WD^Ea|+0x0YVk^-C)0O(X>k>F<
zB(x=x;MxMg3#{yf`JWC$6j?}c4k~3P&4vh}KZWM*4z_oGLQ;)c36+q<QFT#|uq4G0
zsKw82y=X)*$j71{WdwdjvL=cr;c)T3g7a0LR2sFbhRI-O$33|4g^wWq8Djy;3o!9N
zO92EJ#bt~H_aUv~LpctG2OylY9BD%28)d6`wd)0|7;b8ZEr$W7rYqRm?4n+gd@%6@
z=$3A*?_qPJjhUG$R!+|1_%Z4N6S8qh2<f>?T1v`C>A}G$L%*LQ3<Es+=rSICY#tjM
zJ-qb%K2~pxxbdXM)-_Q^=eLXPMlJn`FHwu%?DTravkZcDU<Z#+|5iyxQ#DJoT&~SQ
zMxOqyJq8UPD#4WkCghJPq{emoaYM$k6nTp7#0HOHFkL(~F;)~xP>PehCh~6RYhwg{
z4FM?2kugPEl!VpJ&&Nlhk^Ea0HzE3xDPd`JUlFA2z>c#+7UzLP3RJ5!@kSIfk~vvM
zG-*B^!#0s5qN=v!Isg`*Rn;G^gE;dMr6I;d7(=2AKmkP`mT@QyfbK!h8;urV*A*fv
zy~hu!$Eo+<d*8Q$mtMS$*3Llm-?)1V5C*dQw%Y^j@Aq)?`Zi9Sn8S&cdDQDv8;~(5
zsNHj8Y^08dd(e@`(AuGHA;7}iH2%z=pTU>ExQnNMdlz9@x(SNQuX*<NI@NWnwxwZ_
zn}Xu2D$%q{Ut9+DOS!Ua7K{^7fOtBr(bVb5wm4#>ikM&h)=WhMlnRMPADfL42=87Q
zOI1stHG_zD!Et~Z^tUqL#3oP~4pLOsdJLLFAdUvR_A0g)!>8Jp3%JOc7Z&oQcweRZ
zL>icb65WN73{P=xx}?{X4D0q|Fo_xM5t!gg*GT9)l)G6%&IoZR;3LgEj8hjeivedx
z9>AM9a)#cRqN)hj2i#!(Rk+!-fJ=TEPkrnxws+dNdUXfeTRm2<34NMGM0KHs<|B#{
zT)DP|o41-+Tx{Uf={d~J)uaniB;kQAuAyf(gN6>!>tq;>GJMO&7O=h=;rit+8-ZME
zY>TX%kP{9ZuZ84mm(`_CWI8=(fqX)RW(qz(GO3rTIQqt!(6zEAYciP<)O-qkJQgoO
zN5!UH@8lKN-y_Fp(~3=e&27|dhevtTYC((KdG1Qul#zXvlh@##M&@auF+JKBffQ+k
zN+`co{>+D=Ya&G7KvjuMNP?Q;C0h6<695%P>g%NH{!LO;8v-`|q!NIX3>1NZnTJtK
zpfVrKkpXyfhm^FiH!kt1vh<eJwVt39&-3n=VLWuPv@nOIg&FMa^>E|XF4phtV=y8B
z&qLq|_*U|yXl8w_g^i6p%+6MD;^Z8Tk-%jbG8sskWY~=;<U5HY5Jfq5HZ#2YJ=3^;
zwaax1GH)!IE?(RPk~hKSr-e=_0@<DUi!_T)xzD_NiZ)u|Js2FpZd<NB2nCv&olMw3
z#v;k*>)2nfRxQX;7%A-s=@sW3tnyP}nfy`QF{Rojp@YULRN^Lc%ScjL{Nx4b<B@EK
zfQzh(#PK{Wdhv$LuFmHqO<A-DQVe^+7bt&mJqzvOoIgsmCP@!av=7XyC7jbDGg>Il
zq4w%h7&OlFETTVhDl9&n<4}YE)bf$B99EMhdY;t}o{?<JRj0wKFY?%ENU1Aesy2-$
z9-qcT5B72MRtsxuZ43ty=ZV9>p?x<a(hrUOy#aQcJzT49<HX5XoIW{=O1X?U)tz#z
z9WN7&dFp0UD*FruQjWqZ!7F(C){bsI!#uAir7iEJPDXtef3;^D0iF9V7J$wS@CL5i
zRhxx*AU-vlzjaQQM<D;!x|>CuWsXZ58U3s_E^61LoQ7s@n%7XBhFezI5NY6|5q-($
z7oCrsyRei=k4WqMY0SaO1zA7E;+J^7z$qLtUaH{O+WmE7QpN$~ai$=t#m||h+#yX+
z#3>8T9(e$7>d15AVCa0cD?Q)zjn*U<dveR<CE$<JdDNkYWWlIMJke?&KD&am_b+3+
z*~YD#P3*OXtoG=+r10#pPCZGFMdJiFu5aVc>Mq{>=xHo1%_2#ON1%2_^_46iMWvz%
zb+VyyQAH5C>pZkkFg5b*?(4ipu}%woU}6W;pE*HjQaiaK{>VeBu!c8$mC;s8Kqfvn
z8UQvxp@W9PC6@2Ah(gvYi`VPWLMPayU5Pktlc5KjILAfkOeyVzLKIb>mGQAu>^1p6
zh5MLGYF}Ra6RhiIu9Gwc(J#*RIcVi0Rku(8pppXAib}NjxmuB5Lv-L2V~S2iB>Yg0
zL*W5%&lqBnr7=-s2*M&wFlC{2+DpAy5n#xr-`Z`XS`9HhRbds^h<W=NMq`TMJ)Brt
z#LBTb?Cy84dTS3GYhA>nghK;n5^{*(Ac|95yt0Y8xv2@ju>iuv4iyVd$H)g3t2xF=
z(_q+rOqQA8HJk6Uy#+fXFzMD#PJRjfi+DGMqc9XJlVaR_Z3v2mZ9h7RyI4nNJ!}O$
zB1+C`qgo`ytT5%~)1RU3jH?}ArxDF{5kk>{MXd~!N<SXl`HRC6c+u1(o9kh?{~51w
zE~65jMp4*oe;*A>29XeuPdeua+$hTsr{w*U{`uh?hr|HH5mlZgNsN$dQ6wusH?Bxn
zsrkstF%DjQ`3`R1+C{bEVQG09r%x_oW@d_C!+Zi{7>@;^nwx55^Y3lo?AZ}kZ?~{^
zXAi?c44(i)?oa1nJc<xU5lR(tU-|2FXgvXvX+nY&+ZWTZSlDJ4S0(TYA9GnxTa7o8
zm=af3fmqttH^G86@r}Jv7i8kIY|C=sOZ1yfNvu$O#ZH)1z=Qy4v7p}QzA1b|sSvSo
zn>Y#sIU1K<9|#k&%=Hz+WnQbH`yzU=0Mo)iOdO*!u)69|!uwps{_46*X41+472byN
z0CK|$r1;-WSm2edz@Z$6!T@A>6z6#oMOoyRNtTT{s9Ll_D!Pn2M>*OwMRT`@QsA;D
zaO+kRt9SOWw9vpkXBM!yJO$q)F$W@XP=QK@JR;s(84o{r5)VAEfUWHgR&Te_Yz`17
zF{{W_s#F$SNLJgfda)Z?+c($Ts;88?v{A${yBO!$1^G7<@PHSfQ=eocbeSz*7(pg^
zx^kCPx-M$TD7W3#&DU+f%${Zmb{Oa1LiY7}7695^kyi0*GLn$bbsedaD_nN1N}!?-
z1?K6`Hy>MMLGCuO6U)<l|D+e7UsvP+CeDw)THZAg^IKRZu|^2=6Y(QyyC%SjBhtdT
z>qbe2MACo+W*o|KC=7rk_Ap43ybf-+tx`9<73Z!^bRjEU4yF4nDZ!RPssfY754*b^
z>^8fYnW^B^>3N(uK7(?JiaNN`pT5N%4ztYle5@Q_z^Rov1_QTtyI48iU;>K7ty*Y9
zFCaDP6j8C*$*kR&!8;z}6<BF`Q$=TX!Gh+iVqQ%YD5kfOpgHLF7XOwIpzx61AiA((
zbc+sbsR)Z3e!y!`7)+rrSQr7F{SfCvK1cy?W_Puz+p0l=vNar|v&%2XF}YZEm|%ef
z7SeAocZtag^Pz=H?Hh6+kE&kFV6(bOl>1km8~9yP9K>uumt;_A@w247!*0N#9EZXH
zP&}C<?I-DA#(~2vSf~g`ZoDqDRfCByKF&TkkLR9Q<*k=I0b<#ed|?9;38;0hk84-9
zaq`qGR#s+Et5vCXKBHnG+T}?<kZyZpdK&YyGok{+0H9g-1@53GwJs7ArCxhavQl-~
zB+6bm5O)Jxrq21`Fr|$JNk|zTz8H!yCz+BWs5r1Y7KX~+C3Swka29mR&%Ph(uINQM
zu|X^2pm_pnu?uEm0dM+Sb(TPOVQz6Id;vn-NvutW7#40}Tzrk@+h)u>V@!gQJ$VBc
z1;)$a<4T>(@rV^D9jEv+H4{+5%^U_$_i0c;P^!X7>JM}{$DuF)N{4kPO8YBD(u)6M
z_`ef%@Z(W}l@km2)^7`O<?;@iO{&%;#UCM=5CG`8IflbAUVnW9*RO42`51)<%b1y~
zGLI}K+A)1|l5#mQ*9d9P{~#i+{>kBiTIn`qMU6SsPHw&Yz-#qnoLH21|5bcW5qsbD
zT5e?}syaqpSJ*f%iC5U4s%bEjXEdqgtK)w%Ys%;<kJ;kS9oSJPJR#dqnvTTQP`f{2
zu2O!lI&HE?FnNBHDL;|$(TQODn&|H<>L0YZnq2r0SEleJ6vm><p=j~bj>G+uR9ND%
zVI?|nf`~OEqoZ=*H)p8nmd9C!q!}eW%GGIsT4V90M%_lr$p~bapP9kpw@fqT_r|Rj
zHr6|w+6$Q0MMWf3$3_{0l)=CCwGI{*r*P`@ES44<@B<$)HGnjNuZ06W(Tm>1!B$Oz
z+SLlD)ZT$D*Hx4!D6^#c-`QBYdbQ4hYqwX23C91nLk__cbT>WIT+0AwrWLAk(KW!J
zp4T2W8A=L%HAUHWdrYjL&P^Q;C(v|iQTU3AcdrOkHgux?eGoq&UybPbg$q)IC6k8L
ze7pQ+Bdg9;3I--pkT%1QKiN1F`Q&}c-7Ir*s>%=!bB2u3e|2Zr!6b8@dl<%JHzqYG
z?hkZ0$D!~5GEm3gbbS!*@!r5ULT;Z_a^)G4Se0a}Nk)@yOr@G*pjxfreebQ~!3RgU
zaifXVTTKi{G1G!cl!9u`L#jK6gPolYwzu18Gz2F&c6^qLg-CstDh$n3DPmT$1}AE6
zjO2E)sN@gJZP)*`z$Y^wmAh<ku);|<YtPV&rORbOC{kqvg}|kO%1Q9w#QXMB`iQK}
z(+Zahwjk}!6DOeYP9gnpv4*;725}c(L3=@pBQW6x=xyCHYU<a-lAqv5sPIC9a}@{5
z{m?xEv?Vj)gDGj2PjHMr0D-5hNGhPEt_qYJC!&W6D3pRBQa7TK;DO6+0gre9Z{|?K
z8_w`TZ?sENR8)UXU3d#-Xr80rC-ohZ_%$vl&3PgN#Sv-Cm+{!UPT{_L=Q%5|dV3GO
zF0lbgK3djNK>u)nZfAs7Us=P|E4w&$Vj5>o&0)G;W9OI1KzdP#n`mvq#dc+R2sR~k
z^4!cL8q_1Ax&2C=JunlTD|D?+I0dFq#K`h*gGn%xS!)ky2i`s!wHPcTHledd3^>l~
zn-f&RrUn4yx>;ICvQ8AG*suvFzfW`n^dmL`VgIK<8Ya9V`-K);+EiT%K17X$C=fD+
zS)bp*;c8sMfI7MgP_8BAX^AbE=PYz0d;t<nfrmjflqNFNhyIX`L*W6?$erO!<N-v<
zAfr;yD2w=pXuxT|Ju+^%ss2(_Qmp|<J9ylulGG9&ynh7`+_%KL{f(Qu*xl)~n@XKx
zn5yE5>Q6L|aP7(#R&O`4MB%~71uV=@F)XPB$}FjEyEBgU*F<=1aqaD?t}O%^0#5h6
zk+GPFI*MoRinR-IOKm!gtIWHa?4E|kt9D+B@r_|oo2FT;R@T$x;twoV+X&qS^0BS6
z`ga#cV`QF+0wv3!={&qTX5-qJa}n>SxV-wTlo7C#2K@3#FfgNk5tz><!G(WC`F@d3
zmkz=d7HEYaR%b?@b&|H9=HpK8jE_LTH+y90oFBv;4C9s?mgX=>2Sxypq`cSfv@se|
zO@0|soQQCz3NQ_Dq||e0p^nBeL**xqFW|(=ESk+OuH9&2YomuG61_U&_>=J{h14rA
z$NI)T?yT)&X>l6wf8RYyTHA6j54h9CtfT)H1*&>a(+fuvWDMCxdoL5aqTZ)P##>bb
zPZa6cOHrprjbguU3TpP=$&{Kj8PuOOfn2a_FCMb4ypx5e!+nF)^Mc9Ttk4KI=W9}j
z=FE$QNR?CO8;$p`7UEs_iGDUK9;I%9lrcC^_HclMFnJ9pjsUC|kh_^Hc!rglJO~bw
z=qM>PXFzwf?`9ZoW_fgIJpfy0>TNwz>}@4kXMb;evt042nb14QF_liXqd|(NzjPaZ
zn4w&entv5XQ|*92QfkJ~RM!S#I7(Rkm(qP7eBxd__3;OA_TeS?B^SdnQHNEG&qYH4
z%7M=^V^^<javuSE)pOF=X0(~Wx!|xDnSde}VE-5|nH!+!mNmu4=^ahZr}(Y{?y|qv
z0@;)Su)Ph<KahqzlZ)RVfjS<xj-gl-lkSLWLS~s53wBihFrM~AJ%?Qfp?;a)g<Q8W
zWco98Z$thV>N23bn_|aT!OtX^SiBzxuD^A@+K6gl72RV2A-5Bwnb#Talfv=M3?ozH
zaoENoFaUB<lYBph)BW^r_q<Pa^FGT=3-czU`v1Ve>WwZw^Gg@8cBh3>iCRjr*e1(j
z+@)%xF*9k*!?pjU_EYvNc<hl=`1r>k#(N)MLA4fO6s3qM7o_fQr5vEwA5L!1OjlB%
zlgX!xWUj6pG$52&OxE6{eC~r&XkwxoAKCWx&9lWn*|rt0VUgjxTy?G9S9s@lU3D9O
z<NqA^UX>ChmEp`GQ>^qF3^TL%fQg;?fLCDiDT+{BS9}&cB)v$D0a1@@>2CdcId=X1
zp2AV|_1E4|ae~GGkQbmnSF21hcEU{*1pf5BDoUgvmFHPEYQc5lOVnKUu#Q850f_!w
z>TUna=HSAg>kiklQcy>fk;1GzPhEdWq_ep>z;Au#3YJgR@Ys8f<J6fMR-n<+;M~62
zT724V)ZB9_79vAHiZl0~S;m=D^Vr&Ma|v;CcfdQ&I1;f?R?Ac503z#=x1e^7NudJE
z#nlVIgtP}o5v;z!<7&6mZM`(yVR;q2^tiB20dc1GKsmhTxQaO5xWd-@mT+Crd;4%~
zC1Gynp^cg7glo>eYJyHnrvMf7!qz9Gy9bHeZTmzTL@dr-n<}fcXySZ~`jUB8Q+L(k
zPPvG$sJ>LGTE|>D`#S46ryo<w)0u}-SVO7eqqE=3+M^w0?(nMxv*Pf10Eff?$Qb9h
zzUC(@*S5MZoH;)G?HM(Tp!QC(D8vEveUXgbx--D$ookp|s^Ec#=J3GT1=Q*##F0pY
z(=fH>I`&jEgEdF;9K(U|zm^x~apKr4`r|%s-)>{S9pRw|k8uqFcf?U?Z)qW2RQnV=
zmlbVVh+sj|v8J>MN=-qLN^=!#LQ+OHe0URxYYDMJ8Axj;Or#=}zF@ISTHC99nVI|r
zT5lb{4jXvK)EJyPPOXJ%;&+P8$pun<2=vfjYp{=^no}1Z8!m+e`3DgW)%Z&xE5$WX
zJ;*3?XI?6cUlN!ZQL+sJlk0m?;4|hHnQtp}2as1Vcf5jn8MyxXS~iF`kmh?|#UUPt
z!~n<yOtMazdVBw1qx02IG%Anvat~#OgE;ukEtaeUKNMN&c5{elzjzC;o!h|KhZphS
zBa4`wts;rQWxj8?<LLFL`q7VL(h<*5DNo_CcQsgOV>}k^K%HTrPZ7~#*_J1rdGTQ6
zFV&4k?^JrG>Av(lkBvZ}`fRP2r`~0W{Ah!s-FQyVY1X}RV`V|HjBaKYoBCd}1~hly
zxWq+RF<EFsMo-}jW|0X$T9-#m8aPJO-IO{0R{em!E|#u>e3XvEZN{KJE}MR(fJiBX
zV*UZix|q^vJ0q&U$5Lbx1LqcjN)bCr8GyOg5=OXLi0SD$yz4^&R-etYjoyW7oVR)j
z_EvF-$05J~CdW9x{;A<;bFk6={g6mlX-x5#o~%+Ks2g@rSU{<~ay7tsnBt}9*YW93
zUceWA^9rZ`!jgwliAbKBHY*d<pz`z|!x|*lKVyk->IqMwf-di|JVh(cEOuYLn3ROJ
zS$Vo)M&ZGzUEeeTkZ?ky(fnUsIcO^S^ee4+p7jok1#Z%l+Do?Ec1y*+=@e9C7A9gC
zeTLR|6_|*G2{xi(qH6UK#lkHXWic!kH?2HX#ZzPiY-2QmFbZkdNSsQaNF7e7xSf7n
zvO$hp-~?K}9SYpjy_2-$oBp?G7f{+caOUv-Z=K=KzI}a=HKU7umW_Ws&RPlpIDGE^
zA@Trd$PA6Mol)%F`Li4Cul!2cKhdj(r^+#g+)2lPWNZLrwliy!OT47vC+*soUvJ{t
zl@^vy)bY^6i#UB|4%Mp93p`bBy`HhQ>@{Z|L^W&z;L?AkR4F1m6StNuHZWnUn@Csh
zHp*L(#mT#kYJeio7l}ZNP-6$iCV(#tmc7trr!T}X$d>6^0NL@C$DtORI2}ssUyA|g
z7aK1{{;j+Ua}CJN=PavrX!?BB<y1U>eQws((+0^{wBmC$p-aeMg~2tiQf$D&f18Zm
z#lEU<Rg~m{VVRp_F*ITOA}RwAU>YY*EV20aGoS5YbMIQx9$rW4Z2zcupNBL4KV$}g
zhTO1z_R_D`o!Zab+5g=C_|Vdy8#tL45+~dBL?+r)shJ%^8olX>Q6kmeoVWuW+*$2l
zZhnKS2Ol^)FX}-tbq=BeVLhWKQ&tC$Nbgh>erV1;15WCRObM8fi%Ohz+Xm=iRDP8P
zoz|^)Rr5p5I4qW+HViiK_4Tfq_CRcb(89<`wog%Y_0DSypnc`l-xist02uiaOCJF1
zwMF(p3vy`e!U`3v%1H7iie!g!^R4W|q)k&MMjx=%@~a>V9k>*xcEPR(DvE(fvQ)Yr
z(F;88O;`^Xxoz3AU);d36D6CY-!G5TjccR)+H*MM<B%Bu8Pri`=)C+FojCmHjpi@i
zd-m9$9rV+FNb*c1A3f3gO)V%r_gT=9)CC-B>m>%G+aBY&XV-B4wH=&3)4+pg7qGls
zXG|#?Q^{x1X3M1UiVfThasY}5x7gV@R5-Xn@QOEjAv_o}S1ezRN$3U_W{wm7#c4eq
z$dcMH&t`>WiHv#iJ(FRASxXAEEQ)3=WhE01Sg%))7ol=tRE$|vBB92!(BH4FnF>r)
zCE;Yh1d;tRUz7>eScge=LlPawOqK@oKly%WQ>_ZK4lHnXMOe~9>mRV>7?%*~ODe>O
z0D)73>y*(R?qa>Qhct=-r<ZKDUn$4f{2NKu%MSDIe@G304h5Ryp?mIq`3UE)@BG}#
zy^G)18>Vh~oDMkc$AGY<hsQgmv=UYSBW-v2ED{<nhaS>6#pR1lT)*1J(sB(CoSng$
zGc%}FL#`(nClXVtHZsK#S@EP^1ZIfgaH&rK|4+@rH{7u$Y~|*BN_WGq{IyrIDSnYN
z(h;oHI?Mv;tQ4L!1~&Y6IhO)Iu)G439kExvddw0T(brerSAb{}$E#k&*hEf*9YN)-
z+o@89mXoDJ0@HZJa#}16fWk{r7?9HTHfV(ob@Wx&4v{Y6f*1qiS&%w$PRf&{AvwS>
zZX$}QDeM^appmS$zEB<|+b<2AOP{yS{?Lv?XaH!)?ToU`Hr#XX+UuuZjFR5t_bmLk
zy_!E??xnko)a!QDy2%As5;DS0#T-RkPO=lcu{sV)B|-4FHab{eYh$Xhi8H4gxc~k+
zEG$g%H*>=f<rV05B{X{}EqLG%Cqi`@8X;#bO0#jBjae=J3GDy^{<LFl_d>T;x%qtE
z*_PXaSqQgfr8E#}06E<n%%m3N2_0ikJTi#~-pw!2m*Aiww9b-CevMwDwb+XjmgA=T
zqOk<FZ+7@n#3)usVlW6XW-0`;HB>c>W4yIo6*dVYj7xvB2;*#wBppcyqcldztz)bA
z)ui3OT8`bze=5xehko}z#0Fr(2y{|s@MIbde&q7TPyfx8xj#B+)ZXv*(>;Hjwyd_*
z(m!4%sH`DwI;vc8)x(O}g)I8uyYL+sqke){U)ja$7x!@d_!REDe-<kz>Zp`MsSG4N
zL2eKNwDv|54L^7kVSvkdXm*ix9I6+du4YsF79;&uk1wl6IM*=(TP`V6)s$WXqA7P+
z<?_wdLY}(PEUdr<j4Q3(cl8;?)P5t9jFpa?07?yecmk_54miKTbPqP{#G>FxQWpeP
z(lfdOQ5XFbDMsVcXx)$rz+!SoFYprj9O5h(Trk(K7s)VgeV)dMvq)H`oHj@iI8}6p
zuMc+ipPx>=%^w^l*KfZQ7XKkP05oJOrFkbA;Q1edGyKZUX8Y%7hZk{j=D+DxgVW_s
zvVk}ouo0kEQ{3;)?0`iKYt;}-_CN)Ylv*yA=`uN3U+v+}Y9CY60ZyHo;_zT@zJzMk
z!}aU?+1jl>8;(39x3b9O*~k0FFrt~zR>^yTX6tIbBKB5`iv0q9#OMsF8g_ZV($-<z
zQ6u4IVOU-OKc-w~DeIj$;=2`tbXA;{!ZYr~B${tZZ_J6Av%AYsnD@VtqhYR|Wt;>c
zoxoe{xIhbj>MN!J%Hp##k(SF7=8}-UA8S4et$<G?K#1P((qL!*nd#Ko{gH0^{Ey=u
zG`=2me8@(ztV-_bV}5?`FO<BwZ@p*Xk4201Z%Ou(Za7HyRV{!R0f)NHQny%oH*czH
zXHkFant`HCw{E%RGAKx7LeKXx)d;!qXuCyhA!$!3?6{&oosOdqcF;0X)<V`-jX3pV
z+$~tNGgKXeLH!TBmb7cBXPOua53^@nRHj{QTuIRD_K;;mM8gh}Q5SJC&aynV8W-tZ
zU%S$i-2n8EbI@R6VTcai1#Qs8&6jXSXu|3hnnWZQKq>W55LSd6HjrAB`RmxeKu?VM
zo(Lao6C;1~UD2QlpC={UPmKTo6+lTuK~(8J#$3zKX*}JaM4O5%gO_`7(md&nE@k_@
z^VKN3^LKjq+CRzi=<sj*?>qybhfGk<skvqMk^kP$m;dcld8K@;@g0L&_>kL2%O9m}
z={?6?YC~E4nn9|ogLvWzlaLppdW^$RrMyG<0;$4q0T6M;d{0Oywm!X@y^|b6%Ud-J
zKHUsMzh4%&*apuqZTWcA_v`m5BaqRH1S$8iaG!@#-NX8&2;FWEc|Jrm5Cf2~0bmge
zm1$6b-oaX0{(PIiudSDs+nlhw*0~k^^z<hcf2;G7{)48)nS=l;dob}H1>KnzVEU8n
zlHy{)Pb3G5>#XY%z~`OCyy&Sdd2W{!lb4jmoD=YJFH7USXn$~_K8iOn%5QvcFMIj3
zlfce9V;u4j;Om71{j8sU?dL=H_^+kI{lC{8Zv60k^<gYGp6Z3c@vxV++$0}Tb0@ge
ztrpawR`2-5!W8gGg$$ak!p&|-C02w1=Mxz0LWyaZQ!`N7Nf^-cCWS0bFgoeVOF@s`
z1t;*rqTq!-h%yHxR-ubn40YGaBM5?3h<9>l?SkBAN^8wx*KeD|@(NH;9?+bIyRY$q
zINxd%e6ZY^|2Cf~z^nRL_6|s>R126&lO7TW6^qB3E5aM#f2$m#E#Ys%8I$%iQGmQp
zyY{r>XH++$)2sZdl)VAEcVxcZ)XB1RkaVLv)$aIK80XthkMb)&Fv@P<Ie7l>l<^Mp
z0PImr?~3>ELoSZ}RLQA-%VPBjEKEJs%Ys_i&vsnm6tE`%@(83UrE<Szhh^_Tp~Pla
z7srx2-Lg=Oa{DQ)P%gcA4))>byk4<-JQlJbjjtlMmBN%F+%SY6rU=XNNaf;Wn8JN^
z`B*(Ho^|1u9jskS(B}|ffbpP%c+|^MuAof0?M0!UV<BP(pg$W;*CZw5h#Tu-@c|50
zVH>$3-q)XMyY*BnK>M$b(RI2}AD;nM4*-;8AQUr075HenHMMo8MNf;H)SYRe7kZ9-
z{$va?TKI$v`AL@alm7U2y_ejf6!Voh+xY9l{OWIK`8xyc|0eMO>`_d)VS4eB=id2P
zj{82g*&qExYjox8@%l%ynW-m7v6qDXq)8fs$a88%?Zfd%0Z8r6oE1>n0v%DR^3W7S
zFSoS;$qOJOpeyRke71_-)npc-i6RxIk614j9k1#l9eS<Q1QjjDbxf^~Kr`HO)x^$X
z^64oo_3n3rdc_eGzs({w+r72OCbxEer3N62#jn+n)Si1VouCfNh=`bQV{*CauVE5{
zwDXb<Ns5xe<Yj(}7Je)XpBKE6Ut`?}Qg@EIV$01u_$Xxo!YEE!VLQ52?#HW0^4_&1
zZ~nbucIi`T-cijy-nona9qs|xqqvE_JL8AWec$Kgb3Zm6o?JRM{YR3i>U*M*GYkjm
z9>0dO1%we$e|pjdGYie?R;za2oSa9sQ*&a=U<k#+l>Zwl;zVw}0I{?gQ5ybgx7RSA
zJk1Kmf(fvfqVWRq07S!(K+L84T{xbDwJR}({XSCV0Yu~hBqLBCq@wSi4g6_NeqjI(
z!hv=Hle}n><!JB$6K51DIsFRzzL>B`uCCw$Dj{>w5EY?}{#r@hk!#O8J)`(qxliL8
z65G3J4nHqtejX%AGQcR=sE*QgjM80<v+bXX^Q|9?v&~o2ygMl`{SF`BBnIFO41qIO
z3Y{~5+Qs6(oDT1+uFO0&C{^xthk4f@r5(u>kocn;!1L(0rxv&F(j^NobHo7fQq`c`
z1Q$SohANbpxa0?V3rc2O7I*P^Dh$vI-l6IMm94OzCxbzK4#;RMKPVy_YnLJn2R)G6
zKkB!$Xxv9e27p5VG62@%w^E};agpLHsMMh73LHq^S;KbkZGUG1Bhas9$|C`ng$Gb{
zGnl+zMQEYC7jEe*i(YnjrF^L91mppv>6rbql2f6ckCB%q*&y1gcH&#^DBeJl?|dae
z`(MWS_OD0Trda;sh`%Wo|2sScc%xBF-6U^~lf3os1NX$Q?#KPV-`lzQzsy!1!1C0$
zj^;}Dp`W+?QN9oE4oB{!=fm>|E6_We>K$X{(`8cM{at#OGm5kY_eP0q+HbMscP;0@
zDV`_vu_#0q0RbzE0C<7cCsgsX;Q$l{$Xeo7T0)Zowdkh;B8&K;aQ$_&5B(-<C>cd{
zgchc+c6GxjRBg9(SR<)M8;>ZA3Gei&2K1!6Gv61DS<s><X)aFTRZwwfk`kOGPIkj?
zbfMad?_ij=T4~n)u>>1G8Dr;8mXGpp)`kB~>H*ke@`jhadsp22*#8z_;jb-JAH%Wf
zj}4siF%0r%7^OYo54a&ng~+u$0$N}heAXN^F1!)&P$7Zx3Z!9Q!EHCkVJQHcU7gs7
z90C+!he=6N7L#etg_l4=HzZT$_zq4!>L89CtiB#&G#DUByBPJmSsV|LCS#71MZRCV
z{Tk;|#!MM1ojcdNzx3aj6zVg(y#*ASU)rGEr97l)O!iW@-mck_^1Vc45>SstU{x)G
zGUM#t(`&pufS3DOn3tj)u|JI0%I)D*jM5FnXni7c_WnhZ?Y%^X|Le_xZ^rRWYykAI
zuxY9gbnZFn<;VVy(4G17%k>XoY5HS5KbZGB`IbM<25`v$&<}?OA!iOUcvMJGWC|#J
zFg5&=6%by57MT#{8t1(&f{$$g$XFC;f3d?$7{K{Q)dGy8e+dCRhYi4~ce@ym$N)qb
z56J-ZG3<BP08j|PsV@~L>k?hrO)(J$n5H8Wio%S)ALtfTTuJj1J0Wk}7ybA|y`u3z
zv<(tNqjL4yl~JAw3;ojLc?v)E5Tcfq-FlMcBlJhB)n0rZ{dfy;zW2o}-~Sg0c77|t
z_MTQ`I(W~&*~gIqctb<rA#hgi3G$VHSn`hjz*7CaIM(>KUK%#SZnEvh=};9JQERaf
zo=>#~0k_?fMPq|^dLilOER8uEBvgyu?CKV#U|4_Zb^MuZ04!sndL2^x^m`t6(eIK0
z7$X|>ktPES2i+`=$O9N5ClHWQV+NmBuC%W5(<{-2D=Z}=LG*1`{S77-f%Wo-5=qdW
z0ZEf-xuODuGz;A9_Tp_6$4IO_;%zu6IaQS0T0$k7QM^^|#&_J__!gpU``HAof0g8|
z&!%YYP>T2NseZKZ?QvuP{y;+zqU4@=mzyvDWW`(f@Y2+WF+cU8LF(1~e%f?nCKLHm
zaO8*Zy)qo)5~xK@8G^ePzTF#e0^Cy!MeDVeA<&+Hcm;&=OEy5dgeloF;xL2`?t8*T
zXV1avg)yRtfIl$+1Olch^|6%PxLKGJEFk-*0Pu<hYH4rV4F-#ur1<%^{Ba?RCb)ym
zA0Yc6Xg(PwJ7X#w{RD32B5)bZOZ+TL;$*Mfi>~{<XcbY`>%{5KKT5Fmvk7)rkK+3O
zyzxy20{*9r!f(y<2&44M1<&33DDrzgdaJel|LnA%{m`-L4`a6eWG@P4!vV1h(*e>v
z;`o}p0naUSXaFZ+Fn~e?%_tPsnvVGCyEO1Et~GPv3>Z$ax$xf{hg+FQjgkS~Y!Hwd
z*^0b5SIz3afNH^sK3=h_7VkZH-gb;#umSI?AUxnj^Nw#4{Yslr8G$0jC|Lzr@RF`G
z`Fd>*bPk`|w9!uQ)e_I~l5w&d_6C>Bz41+qlC2~`?`Pl+e>%>$zZ~b=L+ePa^Euk>
z|6}9G0Q@Hyf;8)7gY1<rc~1Q!S+?@z&Hd&-+wOnu$@%(+FjN0P5ALGh&$s<J?<0*P
zcn+}(1Nc4}0_r1|a(OSO4RcK%(sc(#nQW0JER-)4?N_8bot$LGL`c9?F51T|;wE0G
zV`(jbsRNFK%0zls*I{~L1jt|%DLidWtQ~(c`7b552SNm?EYxnk7Hp-wyka7nvn4-(
zn0ZvmP)6BnWFab1mbLx<=yG{~bREN(sybVr%JTM4q}cs(f>u8#Whd+0j~4xZ{x~uK
z|ItyTvC_Pkr?~W->#lt$Nl$)wxYzu#X7Ah+i}m+mzV?A$<j=E5K*XCY^N^(xdjx(^
z0Tq_Y4w)(<fkwTA3QXN*jhY56SSbXg9+kym&=4aq39?y->4y%2ir)1PEL@w0FkyF8
zn^Ohw$@8`vkQN}arH^c-0r~*#wrG4np3@!9Xwhq84(INrX_A0>P8nr)J}Y_EB+vR7
zjc!->#y7%VyiO#Y-%s=XA5F3Qg(TnY+zsaGV>sIF|4YV^0r*cE_T(Z3pk6-0#b;vo
z&XY-c&qoIB)qlR#d-n0g`Uf#r{lFme=iEWw@=1pvizB3D2)q(Jufn9FA_nHooecuD
zF{j!UL$uL5DJvRllw3Fh8mKc^ok^kP2+BFCHPr^(R?d+_Hw8ml!=Dzp9pg_}1{2F$
zI05hC(oeyT>$RAN?DXnc<<3jdjeb2nmcY#ea__UUJDs_CnvKRA)vfXMa1h<WINg0d
z#r{7_(fWLn?`~)L`0M2Bj~4xZ?Km<3|5c$uFCXHyuXxVX6DiJoY_zxgPj<R5d}yiu
zKFrkKKS+b)?l|lCQA&N}Be-b<pF9G;3^?l2a|lnLN%{m-)vGfE<ik^Kff5)e+Od)R
z6FvdAz2wkB9aH9@R09I~cv^5ITSl4(cB`_9z}--Elp<e|8q|oqejOJ!7(77ak9EGD
za*>46OCu7MVl-ZYQrcl3$4BT)A#kgSpCcPbJLOh%!R<yj5G8x948xzvoYqf9`JLBN
zF2b=6)ExWKqW?yYBLnb_Fa&uw8>X*)(Q~K1B}q?yV9>tvkE^}sK0a4_60^1U4XVKj
zcbK>Ran?s3jX4)jeGDXfPzG|k4TQ=UYQ{o>(JiZlSj5hN`F?sPV?rW>0!q_h<`__$
z0Y*L5u9y=DEHNgF*6hxD!D~QH;`2fsSJP|txfV2FKG4D;K&~XTG_a>rixk&WL!!{B
zqwLKjLGC8wbUW;gu9UmcO^nj*B+GjLE<y93C;9GcNxo<0?T!}xTQQCdz&8>j$hujI
z*PnBp%6Fvc@pp|nyZ?8y_u}`=Rv*S<{X>INxZ;kowjUF-kVGe)F}!R9->-5S(alJg
zfOdUN1(t=U+ic3luk&)UJChgSDK|eaIe5>L4jQvAnp+X_jM9`!CS5ONBcdsbo!hG`
z15n6t7Y0F?`jfk^+11$~P-$&J&DD4U>F9;-Y*t1kiPN4t7`|3+4=-aBZy`ndXA<oF
z>onhcA<ml?f=}ZJ%zG=xkpXx!FoJxTkMry2V`uGqlkCiUNB!-8)*PPuBaQOIn6G_!
zPz_IF?DWG?-bI#-rEnz)5cpLDUWE&gbc`(-18xOi5PQZ5c@s|gak3Lh>R@(748U_=
z0Q#LV@^~N;xT47~Mue3&^zN?3FbmqP?h+<E0qr5!%zmk}mm(aE;LGmsqlAh#l~vuT
zB+L5fjc!z%!>i#S-a(Y@KAmCj$5QP5W`do4yV=LlZvTfjj)*{S>ZO%Q?mAVc<ehok
zO=teD?@WK+OyyB5)ISmh;fW-6qHvsdr70d$j0r3xc438ChEju2ln1lAG1npJ+5-=s
zQ$}^Jf``5{#F_gtJp0KQw=Om@9&W=6YW#W0xQpSilMyYL`17D9J{pZT3txUq^8(4w
zYc76~|CirH&>_Yi9dqc^v$8Xl_zv|>SgW>2S3vptDBWMn^5MTqu=P_3b~lblI&Z&m
zWB}e$Lr`LhvFptLP2Xw!&y5m!1Rsd%<p+}3bNo@(aZ^Naa#1GIT!Mg%K~Uy}Ea^cq
z0^DSS)r`V&6*H$wm^}rw@1)qi(MPYnfoQZ3mopD#Ad3-2BnsL`mX4WPtMl>&4p6Z2
z1kBT3fYJtLv674t{IWBR(5okInkJ)Yt=x;R_=98}!+3Wi$y)zk=5&5J#oqNK+fVME
zZbv}g+hrUXfVcEg7Zcximl|Qd@>e}~;s2_Ir`(0w6UkKRkx}Yb!V$V|ob~xVJ_0zN
zXc7?Bn6LsbATNQ$O3Da=GTeYF6se6_j3gQ(iP{(qn#eN2)X0bsRzRT!X#>!2k;>BK
z97)Xy3s1TCx>8W(8Y$E$Ia4UPjl|FLB+j=((#`9PZep0O_tJd-C$hZ#i6n2mmgMdD
z4?6dw@%9-<2H+3nk{631aE~{9XXOW7)c$VOTddEP--AZ&iGdd`xiR`ag$L5mg0u>Y
z5@6CFlu)6ppd6Kz&r(F=HZOjyek<=GViE~sj#bRA+<(Rc3Q-NS^K)X7a`jWF_;ZP$
zJIOfS47;PtVQ+jLgJhE=w0;g4{CJ%2Je%aL(cR}s<7nZ(oyU;@c-wdci<Q7x`nZ=h
z{=V-ne5g@Ai^ZuYlS=7S6gjRN<$a%uj~Enmm8>}%1T7twBS~W<RPxJITam)jd3h~?
ztup|cp36g#dn8vMB5=Yibn98kEhlNVU+#`>_+5_c*OBCVpUa)jKTXkoCPAxfxB}*!
z_ygbCOL;W@i^q`xc$*ml*Qq(7d+I%IKKDa`TmN&l;G{cUc?7k}{iBjUpCpdw$Ii%4
zNZnV-Xmeyvi$5I^D?t)^4EQHXxri3LNMh5F+yWKc<Qai@zEgEewBVgmf_#kec)Q$>
zZ@T^D4u;827NxD9&(QnXj23;~YGt{lsd2RE5A`@Q0B@Ud_wE_E$LhW__c0H1|C8^`
zerGK>iALoiRLf@uVK9$0cl;>ryW_NjI3F1KYuVj3HJ1!Rp@;7g5b097v6_{gFmaG4
zN!s>D(N?t=-9&$U8>6JTouc!}48vbevHyIM?{>d_+U{r^=5b^I4uw}xaeQ}S*~@4D
zxaTx}Fz{xcsQOE&g{M$0os25pa^yHAsx)*HCv%gW;(VbII(f>{<6iD$tQ-U<%Q5iB
z@lLs)(1KsXAl^ojcP^ya=$CV+|Ep=<d^O4UZ8eRfMgI;RM+V?+J?`FViBk}|$L{wq
z^Zm%m-|ss9lYuvllDCA=n?c|=;CodiJfdW^@`z=@qNIm$x{oMnBgqD>6umE`PXCv3
zw0|!{cPGtzcB$RbqW>lsM+V?98w0oMc&OJM)K0sozc0_rkGXK}0o*wUm=aoU+C`qX
zfb3R=^fEAfEkpl$hQVH%x0C;r?>QRp+;L<84(0gzd3DMTP}hT^Y={BCob&r%_p@jm
zE%>8xG>*p6I2uReXdI2BaWsy`(Ks4M<7ga>qj5Bj#?d$$N8@N5jiYfij>geA8b{-3
e91R@e@&5y_?H;I3s(|<a0000<MNUMnLSTZ3&M3D4

literal 43665
zcmd3tRbQ0f_xFcxq`L%Ex}-r;0i~pyp+P#NV`z{P@JlGIq;xk!NXO7E9TLL;L(eet
z=XY{HhWlt=XV-e|wfBnmXYDT^wNyz683+LY0Lgo`x4HlT#?vPT03Y{hG50Qa004d)
zzkjQ!AFz7*=%4Gl<h%JLY-!__{y!%79)P<NE=DSuqA-5(+cc^dI^<2&Lg`U_YqrVz
z=ea{HUu?e)v$(i^{gppA@;?3D(P;V$Q;PR#g>-2?J#A9{XEmSuEn#0nwG6JinLRK)
z7w`&{ZlS+xYNUN{R!>?NJs!jAd|jE%h8OGqzgw=Q>`tg$^S;U3#kuE2Rwr6)S?_}1
z2-azCYsF|EE#i3pVwKkmITIXHe)gC9tL)_t>oLR<<;i~s$7KC{&fU6-73UFz=CYxl
ztbJ&ww}h9$dp$4Etz-4b=5DdC+rGd8wc_7juocfX0(OCrT9o;-HOr58O^5+9vb|@+
zKS7))VB5nf{{@QVGm*tpgN0!IYZ`K&*G?AyDWj^gskOg-Mhk|@r=E2;>{Mj1-=1~?
z4Z|ibH^KkH^iX>{OD+8;-+a%2N0n7qEZ6D7-_=>nH#`>a7(*RZ4Ld<GxBM=DYsXRD
zm%)O-tZ--2he+WFpDAW);o-NZKE3Md>eaT6Q^*qswD0A#vOFbKAKNA&z@zf^D%GOr
zA8X66POa{>epRYlOPw<^+ndODZ$q+;y8r#O$soG>spo*LZ)o06E2zLN=v0J|IS~ju
z;>R|*@U^&lXfluE-4uMs*0C38mxsveM(oJU^lUjK6x;}oUCIrXw>!Dr<}ZQw)PWxD
zcfk-YMj3ErE{7sn{UBKLVug3Aq`jA$9FBed0>9_-xN^AQ)a>r^d;n}C_jnX%aZ%ce
z*=u$#be?*|kBo!<tNHfK)OWLteUqErKYrP!i1+tz1>lcYy5<TFdKe0Z%Ms$ABiwCn
zvrzk;S^#68IE#Icap~LI|Nf3h-vU3g*d<rl4TAYk*1=~xj{Bzorg${+ox)pUn|FLD
z2TuX4s~6LoH1%NA7%%!?<=^VPZD75GE*qJ9w*IE-iQ5{>dOqI6FRL*9w;K_3AKxuh
z6b7cL6UDcG-mYpsH+dmuAp-^afvdWrMi~-UVaQ70U6ue+><nmo=*ZFMk__fBdd)S8
z3q-s)^z%`y5UkYwXh4mlkIhSwARO@wmj`IDN87-6KgpqrI%;Q;y<0&-S@8E%OzwWI
zv9_%-AZ!y*<@MWs264aj*zklO@q_Fq_!tL}Moo8uq3c13=p9uH)LF;n&gS`9$Jq{0
zP{@L00`wvgRMN}i!jBi1K-tGY`6YhvlOO5T;Wy4lBYU=U`o352YC!L``~KYr)D3jA
zi~se#HU`K*gRDZj*Pexfu5tFo(pQ3|)q5jz*@nfb*4fRr^(IjBAh@5D=cF%^THv$E
zA&OT6A;`;X;(rJ}Z30mq`o)}J`6iSLFEUW>ntPM(9nQ@^j!SIZfgy;<Dae@V-;!#8
z=R!(c_2%^^bqbUiofMBSWB1GHV2UR0Fvu74*D?`)0W32W$eQmp>Q*q?ypL&)oV{!c
zfkrNt5GDBvgta^IkK+oUGSDeic<-?nq54&w@Y>vrsxEl#^~%V*=KmJ*LCuAm(D-tm
zc40*;&7|>fb36~Nz`%W06vD=qa7%B+5YXmOd+mrVw?EV(e^*HN2>P>(x3C}X5MR$L
z*08vdw?UW<dSTuXb6+cb0K9%2Ply>&w=DSW?5;sZN4b4@>Mx8G6a*u0f!8ZXkmI!y
zaW;=y3)UgO9z+=qswf`&xHVLd=6q=rW3wh3)ZK*sAdF^M888?`p75h2DB-o9;HqmD
zE=-JelHU=|a<#{(8{S%E6v*#Ftdkm0^DlraT(zOkqV;Q>^p)V?vi45H&zM(!C5hHV
za1Uz~?*Nk5(W5d{JmEkksk!CD*({J?U_~Cj?t^x|fdU97)~qkS!rEXtO3V*GfXGi?
zN`e;1h8@griHjG<GUyT+0Pn|-c7u{Ul>%WV-`~!Gt?Wv`V9YP}$%EjX6Ik$N1`LMQ
zY>(d?AOwM!C%`Wep51u`1~fMx4l@m=poH{aN8Z6K3@66+er|53uUln6RC?p<3xC*8
zPW<@yEl~RAJ_--L`gmS(S`-)da(N6;V|DTMEaXr%W-IIMM7eV&!AoN|S|DrIMtL?U
zc|H&;8)z6o=pk?b{#RxGdO|Sg{k<T;25mvGL6(UbN$x@8ly47W!3cE5oB#TJaRPh7
zEaU<mo%YWkTV-Z~z?(j?z?Vke$m^mJBOUUAw!Dh<+fpyGD(c<{Xyx)a<tzm;jX3fa
zlCS#vWrg^_k$D2L`t)0Ej}ooPgg#@})WbaUX&o0HU>E!bd_nmX`WGj$Pt6*)ZojV!
zqRxSp9bH>lISUE?F1xxWj)$9k2VkZk*aF|31<?dJNd02fCT!&`<8_dAm<cVsR<)3V
z9BYceCh3d3u-wIDSwX-KOzzAD^J`l*pzdG_D1a(AM!qOIoQ>gg5kU3y<%pR$@oKhI
z$J|faTZI|+BE6}F!B4i^yG;nX0^q<V&&5Gx4iqjpjKt9fJ?&Ht`#~0oHA)N;dJ8N)
zrImKsh0(KuZjUM|z_)kG&mJ{APnXSJ;g6W{Ls{2+H{)W)91Y+$7g^g#l|f`f#QcM^
z6-sPlbBzXGyL8;CI{~JNaE@}b)4{1^H_Y|hxV;<)p<T{-X*L+Htl^7AH*)F8ur@S?
z=!5;d)CIg@$?5{UASBP&i!{fXfG~hLmI&bE218F~3!zPMz{&Ggivko661!yj)%u{5
zmNnGsoAXhmHA{;bMj=d;Wb-qm{KGjfyTiKnkvldVI5j2cLglk)_SxlI$TDEmvDt7b
z!#ZrS4|$RnV(5|NF2LKKD~BG!JlW4%YmO2=!A?pv`^m`5U>TH;ZJRr8@OG%`3wr#`
zE%JIs+o#Nulkg%=3?OT_tv6LX116_D)thX1x-B{OchzzCf@kl5NLj`s_&86St^ibQ
z{8%<NLk5?2clO#7K6dvwhCm*O(1p2Jhpk{AWcdn#tHST?^W?yu+^Wike~{y6S&6iu
z?|%{|;aU!w*ZF)TD3Xw|H&@e;Rr$Sl3cw52wfkOeGs?$z<{f=<=!No|@#E0*41wu0
zSoU}?vH?{CdY28tB61~}5M&H<bIC<$8X)ZRoWZXDnk`rkfVH!NM)CJqcngW0SW_=P
zkrA)I5l3y!Q)(mgJY*+omuc^>a>OOrJZ{ur=QVg|&*o(f@!@wrH%rYzyX@N^8&rtg
zIrKsq4{vIfwJm=I_=g^K8+}^?ixYnno6lK1gOB4TRGgGNR-#e}7r$hemU^R!YSGXE
z`2k3_cK7>Ve=c9*vP8s9ET<g&8p=i__OS%}(xS(HwYb2LOC1n!e)jPGNPxwZ{^shh
z`mBr$^Mjo%rF5O*d5*61q6*&a8xMUh`xt~o%N>!IuD1*CV*AY@Fu+6((|<H)fjZ!u
zGvFCxZ!*joSzO=uI}y03j@bV&hicZ-GZA((e+D0CX#4#7DGm(hd0#xbY#)S~^Hlnv
zjRuiRTu>O|wCS$3=5EED`~Ufcc|vg9`jFuhIsr+<A?^>Iz{T41JA^*`>ft@-^&n)*
zk~r}og$6>LvJY#c=y5Y9ldmk@3xMJZiho^K!8)jW>JRpAbXhgA_Y#?=z)d;u5?ji=
z?)SJUGEN6ygM(Iw0uX;1mEp^e_aLb>z<eG=v<<PJCDZ5;n-U)Q%@0J<cqN!fpwf4A
zoLEq)ak<T4g-Sk$ES;2iv_Qaqm0x{@<UPL2fnm{agd|5GkFaNO&1T_0N8bEsbs_Y^
zlQ#%?G;)sMjZ-_o>#$w(gQRL`-RwR0-G9N^+BuBOm~?kdjB6KL%xdRG^ZTU24!hX}
z<A0Eh#$8KI5HL%H9hTjHy!}W<Xt8;6+D0<Y;^iwZy}J>FbJyYU(EZkM3uTjefmyGE
z{MYfLr?gln=8T)ui>$OaU^hNA<yn>oA)p`+<ecnjjfBLOG+uaIQkKP{{EH!#7y+;=
z6Ff%(1716z*k&^U@$E-eB~;`1Pz!-q^b0l-b@(#L`!xvcw8Qqp2t^gKn{nVKVRk`f
z<h_x6EBmpxqnq3MhX*~jpzcP1PiQ@w<NgK;TgFAk|DNkFwg3C~x<R*-8i92EN!x9D
zU?rZu;nt8fCCw1#nz9C-dRyQmh?7+_@T|}whROBUCwUiJR3aq%E<DUit?ho1W)b(a
zGdQ)|77Il_<m&Ek5wp;~4T;tKI4t-KUQ2BHHp$10dZGX{EQ8u^(T0zn{J_aR8NXA0
zZT6^Bzb)>0|KXu&i53nowGCU@b4BgjqI&+e8lV4A&gTw18|%xkN5w29tO2D-7n!?k
zwfjfpqLy`3Zn*ILaF;c@^Oif-QO(bnhJ?^TZatN;_eP!WgHl;$W~}}um%qX-wPUw@
zi2+~t)&m`*k68tYWhR>YkPX%of*u$XU`vpLt<0&45NIWe=2SN$ZAf!HcM~Gh@3Cze
z{499w8}Y<K+C-I8d*J@y{8O&m1P`0AglMbDnR2N2EtqxPVsQ{V$kqLJ_hZ@e7DD6x
zF|NUfd$9463;(X*Is3X9cnEpB;q~u<sqb3<nmLCxpp4EZ>$i_plB*j2t~27Qo++z_
z``P2myDN(+wc09Q@KMWJv4wTInN-`!!08Xkk(wC>|70#$TRXu5N0$&N9gXUQoF@;w
z%BI&I5gDY4`H@T%;I7c6*JU&pDmLuKIw9mhWs6Nd9L2ghR1N<8;}xeOJTdu0ZQX)@
z40ge|I%4TL>-|}**AHplZHph{GKxK6-Ar*cdH_k_)tf!MIvP>m$Bhsd?c(Z3y+vJ@
z4!+AM^KF<1C)6=-{_`&oQ2YwX-W!sqJixl&(!HrDOV0))%XHUC`MgznpK5j+r?D<R
zr7VBN5(dlizdS)-;Pe#vh$fwsp1Oej8;g8w6T`jr%<gVr_!S#&BP%h&1ABRtNnIQ}
zyR1L9k~bx%t`zD{J!;zn8)v?BYv$^hbiS(FX&l+NF!?QM%kj<S2CH`oQUFqPFSIVS
z9n14q$?&^Ehtq>4S%4D_9W7CB8jh_-hGMlRemn$Kw$9nbEP)#kQ$x5;hG?1DuV;UH
zC)jQ^!qOi*dzf1X(nI5Zg%$_}2okU3mEm#t`A7E!FwpDWgt{_5TL<GkuHvNdi#aiv
zShH)1i!F1g`Clv<+($4AZ{8Y7W3Q<cJ^<Kv%Vi?S2T*HU^Ny6Hf(~|zOI(8^3@L9K
zQo_rsrVq1xYpOH;bvJ0O3Z8t{704I=FL9u({D4xKV-xO?A9P&nD4_-jSnf}B7wy{r
zyNC_K(J%4$wZxlCNnZA~P<KZMi7zenm(N}OH|MC@=8yPV=W-bA8BB$EOx<v&Tjy<}
z%B0CSjvgQ;7HTQ{6Q#a4L#B+^0-y2#f1fFXcm<UXHc1nE>wM^uJD@$cz`KySkFO7b
zDa6QMNH9m;np}=`t9d>XiX9OZ@SyZy+&PosDD7z*S@DZ&sqeNg-S5~`I|k1bRV?U&
z+BGJ?7;cK~(Tf6w&Ki<5Z>!OMC?u>P@b0M_6YL3adxcZ049ITsoLInfe|T>j88<Bp
zO9*xSvF1@z4gq(mcJ;MKi3QJ8Uf<jAhN4I=AQE$j5`TSc4`bUM5ziXkE-@M`J|G`s
z_Y4OR?$pQ1{og;SE@JccTLiOB;#LSYeTifKUQPZr*$1IY>NR)bC>aux3FpC4R9%F^
zZ^5+Wb%Y4Y0oFCvi($0ipMSwP$+xyVx8WPnBY<fI$;fdI+?(XfUKtsEOOI)(ePi#~
zKf02gwc-->X>#(6Pf_3g`hGG92W$ZOMx(6s<4|=9c!xB4`3lywWGa6yjUCR4$1=0p
zn-6};j@S3;Xf=4Wrllee^h+<4x0%A8L?%@oJ#|bAF`FrGEWDXW_JrK9+IS;#Mp~qt
z<*l}~w(;C!u&D2%;3+GCpmql-JDQE|VUY!f;*IPVOyYYCWb=NW@YcUmZe=Mxcjv^8
zxmMHaWjBUg4_^ouQoMyELT>YUK*x9-J-cPEop1F$x5J8qB>FMl#&)g)wq@J&_P&2y
zdp#uswoSq#U2Lydc`3VDES8fhqfArNBvZ?`)!u^I8SA_p@<T0rCSIhIu+-yvXTT{M
znD1$Qe2bo|w`Ij<(b*UpP{926)NWcrCi~Un{}Odn0qzzl&e#7<+?&mn>&^3WkM*<p
zr-0J)WHz<MONm3|vx8$`@|^3GeIDW&n^HyCUnnH4mzB&Tv`?uvESfb6oEwxk!r$!f
ztw;{VPPg}t%OhCtz+s0ZJ?nhiy<_VD9KVX~JPzu!PNM(_!kH-qh#gGQ4`^Tcf-S)j
zL^Kjm?;_2n8pv`<%O-_270LXL$BKdEhpIGFV9zAw*Uxv?f)f{}WV=^86#EWOnaeL9
zq!|P&okghwb13UoEd0#-&!-#<9?_z*-2YZd@GWdvdLj4<EP@*^ZTxBVHV>*@R_oIO
z!;`P>B|a>hfE~N7e@)q3blzuUDQ}K${Dr9wTiqdI{xQeGq`21U`|33ULoCxYM)Ojo
zo%T{o`i&f{V{_~C#7fsKvwtW>Qf0}+ziNMU1Vw`H^IFf(egpS#Exaz`wC>Jt!qF%4
zTIb4W8wtEHC$jE}gvK?mZB84Kf0$z?TcXo^n7x71I3I!NbXP)?00#e4o%Gj&Iu*HF
z(^z`QY3=5Kf4zVj=sz(+!Bz;kCmoV;eJ}B@P~`V_21=-oZz~3J0%E?V`M}VM0lX>`
z%fgBmW<dup*VoIToo!f*Y?kX&RFTb3r~D<(YjLYtZfDs}kBTu=#McH7nCg3%vEEz4
z8|Hq0=13V^HSarb%2Eb7D?7qPMLbq)ht=~HsqJsOQWtwdK67hyCejg%ZOoJ2qAUkn
zo2d7wr5p6*CZd~2_D430cA*Eija5ya&oPnSX-_JfvL^nj6$f4Uz!tv#5P2uba%=--
zydp5}N{G`jwS?&3DZ6x*4K0-kp=a6FKbPm5lJz<AlIa|2g*a^O456s&^(cu~TMZOd
z_E=gUcm7~!t}_GjLoNoj$Jg3$w}`@<``*YqX`DaT22eD5O@O?j#ZRvKmMU*N-ntz?
zW9}b!@O}sfM?Ld8EMn!XRzebtz-W6K)ewVyE>g&;s`RF!Z;JUeZ|JFWBb$}<s44ON
z=Y6F6$U3qq;tr<+s79$sDqVwN)l5N9oP7C>oi2Dm0!=}(qGxXfc0S6q|6=&Z+e1th
zXX>39;v>GT14p5Bh1Bq-M@>NmKjI(5sYiPMjsmZY6Qo?6x<$s8z)gv0<Om!3>^^(*
z&7mY~<XB1H^^=uG0d71~tIOplvY@m6L)P}im|hnqzy|;M&qdrDl%&lWR#`*B4(xaL
zGB3q>*Hg=NoEKd=a|pagJ=Kpy<?<OnqEAOyw`!E--x?Co-9`U`Yi$q2Mc)#Kk7v9f
z4|5|I5Y6zzG$FJr{2u;Gy|Wq9hjhqxVB>egA2N|v1**K50Ai8UF`>21V4_aTu(UF5
zzw9M-gBZQ&*ERty<d=V}B@r44Qpee{P03EG(Vap>#qpD5mGJ_K2vLoK2tD<YPl^sM
zvZ#{xs2LAD<fZWbr&k(ynX*DzT4H0)--=J34(hiXU|0d@O?AZCBQ7;TQpf3Xdj;fi
zsB^Ph(=z1ZU1$z&cpMJP%<<L+n9Iif0+F2E`aAq^Kk&Lbcjx|WyCgtovF^_*)q$W2
zw<rm{+u!lfRutVQ{h}La3No}G@r-a&nmA9NAnCl*Ex<wXh%=RQOV^V=^%hehjW|G5
zz|)6M!|=a*S1Oq|>U4SGA4n$obaSkhqHJA3$3lXTy@|shulE!jsg*);`zsEAz71pF
z-mwS!B@21F#82_FJtw1^7N5wA^&#?HWjl064#Cd$3PPCkzYr%D4UY2AFP1(aa||w5
zTnnB+3>ug13z}Jsg05@@c~4Y;h@k~ux%_iu0LXF4MptWh7Kqw}kbB}_q#9hLRXNUc
zyLe7Z2nYl{CQH{c-9{<6S4_fond4B{49|2BsmgM$ZHM9K^*U;LFGTxo>17)VMP;V>
zXhFZ7UY1je-YWE%sY|2+4vE)U2%^NS1?XSo=M2AfWcyq`E{sLFeyJIS4GfBMJfK+3
z#w6uidU*Zrpi!YW(d6y<9TVc2ridropGnAb9nwG|fr+25L?&D_faq#wWa6Pu$`YRz
z@y|z_nTGe2^W(ZOi+s1y<_`$LNDdxn4J#^tREo?df@nCU$YTk>b{<c<FQbYn2Er?+
zngupA;7#t+`HtDs`C4jRws)xH?JqrN->}$>8W*8?FX2AlJ_Z<jkqC?l@WZ=3L(gG1
zL$NpiBM*(+UX1D=9(oR86YU=-4Rcid?!l}6<*uR=TP?A=X9D02wt3h4g>}%4YXZm9
zA6sWZXo<c^x*NZb3Y*_NpDbx%#UF-WtvYpX`nqIpa4f4uheS!{HIpCtg^&9BeNo<9
z2bQc?;pqj=R%Mv^4`ZC@e=eThy==~g^0$ma$NweLt~i*5dY2?_RwdsHzQoPgdv9-5
z@g0ebAu4cw=sMN&fOuI6N3b7nF#V5G6}ZIRKRYl$je?O}puO%m{MiN1C*&u+&n`>>
z`P~YqTn~kRrCjo(+{n>G*M!%bZDCQ$HA~=H`kk*4rL2_NKG&I@PjgH?+%kt{9$Mx-
zS7$p>coi{7Dw;C}Pdt}#D>qj4W#0>_WA*7EP2|@Qk8=?a3b^HzzX64Wf7So}M|W{g
za39k7(^oQ&E^NPUw;pI3okrla@5Fd2TYMOM_Z3JYWs2cjn)SYF1iHz2;P@>YG%)M-
zgiyrg=4NkSV@<6lY_J6Z4%}?!+c)ku9zs#+&;31Bd+#1KSswmj_&H|$v;iApc)pp~
zlxg_R;O~mCB_?L>XP%&Yh_?5X53!TLrnkej9NTWC%^=dW7p6|fo_#w)vFWhHRDhDv
zo}68$#hz<PZI1E#Iq|A)Ib3jxx4><naFW2!P>KUjxXih3y1!|yZH0ysM!)kFo$L>v
z66KR4ZM2bJr%pU^Eg6D6p5d(e>^?!t)ro1XyxKPsLzL<XtA*pd#_ES&@KBVdRai|>
z0Z4gI0(BmMW%=xvmiVWa?N7YMjGK&Yg5Mv;7)?jo^J;6+y1?w@U35*eri{RY)}v|$
z#7I)|;f+SpU+s>+!k3{m?vV&TB{5nNEbY?sHFydU$*?X@liqW65&;~|N2R58ThOFp
zLal(&rT*xT)aJrGd^oec7lB-3VTcs<%bi?Tk37Aju!%3$pGU13q=H^<_o}|UuK-`N
zwMt-B@!y`Q(^mXW=a3Dax_qGA`t571R@X=!28;Qx{cNa=G5csUN#{`IzYwcX-lpqW
z)VKxG#mju-2E&Tl{C{BJfX6zlhT#BM<Ksw1?$@5$=}zS7kamnQ;2(Nosbcm#!73ro
z%lFq5wGgNecQT9J{dZV)jz5SIsx!QI%Xo^hz2$D--zyaZk=TYej(t`(QHwFe{PeTu
zuz)cA+8*#-`_aO11GzhkJsX?a95P;)#+CdM`H+5T%yU|OD0)NUE&ccF8{s5@$WNy0
z-;)q>a-#*0_5R*->DMc%mK}VW!bE<C?D@zsb`@LKaj#>$jA4k3IoZ__CXnFZkWd&M
z1V=XXqne+*vPK9E5<s2M0cvOt4tZ?D+KDH?xMzF<H^I0{q+trk)Wj6{4EmmJQ&>33
z>xD}-lbgl3sD9@41H8pL5>L_-ew#LLy>^Q~10~bsQWow?>xE5ne}zcXtja+>{Mn#f
zfvR52?<o1D0ilX)2CUebIGAc{A3E>@8Ku8ZyACK}g?Z@&%2MBal@efL*wJudz1icc
zp|>_A4_ds~j`N2rvv%if<0xy-?9TdZreO8l>|suF5AHwL?xyh)c=ot^{RFDBBJS;<
z_|}P4SUXQP2zqi88wK#7o`B#Ap@%eNG<4n+oEpnr@JA7Y;B>zcUhdB>m^0;XD=d(`
z3dzh28GJ$W|9CJ;L2){wF+nHdXUn%7oI@g)ZXcj51O4H{2yIAjR@s(5*6R0ZwV2{v
zqM$(45lY3*<xQhUivt|Raq&X%J<OsEACq5=hRsc>@fV+1MojFby80NLe!XYXYcIum
zs)>{=m*E}b^Vyo-rt<;$uvGbnd>J}Z!pHU{l=K%+!FRDPzgbUIzoY>30b{L0u~!eS
z>_*k6Vfz659)fI;W*PTJPb3@WNBW)$=R711xn2f!#tVs`yZ-!7IjRZ*M5SQv3T$b^
zHv3+o&io=rq2*mzw*I^6aN@uA0gxz}<t3rFho)^YsZEsW(Scb9T{|&b#4||Cvp46C
zsh-hAao$7VNg--Q-3SNVL(}Pz!f(nl*L?C>O8Ix01uuIJwa>Wwe&~e=rdE33WfHR)
z(cSz9Y{n<0$-TH*qY4-#kcg}EFb<SXqL<UPwvtoDdiOf<{T9j}y475kDJj>ez;d01
z{lS>yvuTRi%a(dg8`PkO*e7CoZS9`&7ad+Wo4k3)ow!#U2H$IWJxtkEKDt$oqL1$3
z1s($s%SQ1+^IbsUfJ8S)bZSq?M)hdrjq6y6|NRfq9JagZ*FDSeAy>a2H=3axO2l}x
z@vI$XQ?Jms-G5-~UmR}P`$F+)7GAgAc-Uy*{waQSC<($&k=wq*L!VIz9uv>vk$&*&
zj(;bR<h98U%3Pfe`-$*zM=6eT6E)WF*f>=b>_c!aZ5)?0-b_ji!jKif^C9hZ0bbPm
z_J7QD*Lj2m&Ab%h*jDVR82E8)RYVKFDGZ{wJI=o;3;jOdOFYl775|Q3Iy%hI)}=|-
z8#72M{|J)php*twswIwv!DLMhhD<;3|MtqHd2iKjEaX058QTA{{gD=(vI02R+}oiY
zc*rN9b-~2`dF+sP#1wGW4i*mPSB;E1$-e|H1fs5IUzwCBdHT|T$(L8+@3uAwL3^st
zE>q-NNb=%mT<HiZ=_KNGu}aC8R3Kn2xfA>Y-IqSfbYHE!^{Ql#wl~-{I=&P7LmxP!
zu0uzvr4T(3Z&Jx6FFW?n-kwE2kJnrR&+Z><?sx`kzUqnUU9JOFeh}Fa*4&xdI~1bo
z_cxbBC;`RXd*S3IZpdp%j&qN<cNOH4p1dLT7W+}a%^@d|xN3p4c2dd(>4JyRXBSzh
zqeID3c=1kVUhu1aeG=K*X?NN48Xxq65VS2R5H&8OVX}Qae%**q;vO;qroY}uwhrSK
zIZ&4F-9)+E!na;wou)i*D8@*f%ia>*^GIFu653Te^xZ>_w@LiKF8fbUyC3xEoB?4n
z+tGKcUq8<>LekpaJPUb6$?+@|`g#4~O(qW3tAh+q8fk*Pv<I<V#TwJ%n|C|~JUa^B
zM>NQ>zpQ21N}e6X7`J#4-a=|kYP++MfmLDOKC6sUvl~odpqcLUl>1X;VjyMDSwrk{
z(^NE!Kcx%4IAvTL1)?_M?ij&$QkgH!>;wcGL@choO<W>;|0aEItd?6T{xqBueqZ~V
znJrwR9se#<<k&7sB~R`>3xM=*)7ublLQ5G{@nw~&J{)R0SF(y{g?#{Ne~dS)y<O?>
z5u;akhd>|M9D$-=B<7a?`mXuIpwXwq8{?A_p}B^Cy-sfF8lDF{Vt!Uq%L}3b>hu|5
zmkp+z&ASNf&q869ydn`4u+Dy}32L%JVoa?rnOaL-RbE2)hYc=@xCT46vG?RCoUsCW
zic*-kY=cw4Eo~efYx&17YkOrmAy%7;VV6bX=<{27yfs1}1rtb<?Y{ENKJ$MhwqfEP
zt6qazdW`j6W?>ei$3+)Ug>~^r*7cKIF;0KnP9tK8%E_`wlt<G7w`-uWX8!oM>xR3%
z2;zlD%vWXBW{f*HSFVgc6msYiVbodHT5gTlh-ST+VDMv4xcGE?o(ySdx*^{>GEb<^
zEa13l7T~QTV#X(TGWyQ6lyh|e{)6ba$zw^7DR7L&?7ndVlwm_tNX$N4yIQ{Q0vE$!
zkfW@_bi=CGnPNvWM#vk+9d6=i^AY%i-Z=1)mXoDHeD7uuEL;2E=8&zsUpbWb;bWyS
zx<iz4boM+=MyWToarZ`)aAU_qV3b`;SlYuwD@H9V_Q!Tib#C!>k#_GF1=q>a<2Dv^
zJYUzuziJa<>3PD{&!=gLHxZ*cq+wZudHHc)FeW}vea|{ZR@Uz4vKX^N5c(lO*Sc@{
zw~?f0Qda|<))~y3xs4~J1C5UV-IMMK?|t7&f&k{JG6JEtv`+K@s<L-9AF*+`oxr-i
z5%v;B^Mp-mkIkJ>|L0$C+~QZyL2GpX=;Cpv==SBYSgVK*Hw52m4(Hc0#O@M$v5>b$
zgRiEC1Fz@iy5{9l^w&i?V5=&*DA-W-e+8%wGp7zx5ZZt0r+5ePivo2YLX()9uxnwo
zX(IZe6>HKA4|7CJ<aoW!_SuO(!pJ_4fRBC~hZ+TyMg9W4fe;m7P{y?#Q87G6KhA_7
zHh5oTHErdq*NWlhReBws$$v0jnd*H*kH<nqTHuwN$4?k)Qg7Ru_`~G48aoQ{^Y5W9
z8xA*1<zF0uca^<xG=jEAGDJsc&eD+$wt&MWgKKip^+n;OllpXQq1$ul-Qw=b%MfmZ
zNR0jFXN)PQv|5w>O|Nrd3XVlnzyO&4>$Z=>R-GIJF3BIV<PBmF8i`*~5Uh1{{&QTJ
z?@Q)n;$Q9&7WvnjFgVzRv+!gL+dStWfL|Ewx?HZeNRQi*jaL}D5>6#{s=xgt{;Q+k
zeVRPu{HX5Tf0;p<Qe}D?;9aj%nktCBE`sz@!95#VPxrZv<8v(i@0a6aO<sm9N^54#
z1A||Y0`v>(b61T@7Odd@7<>|i`NKs5I{aROG4&^o+G6WnqI9HPci}7vCUYT2+e@c8
za81)L)=>M~fGL94QRl0-1aqzUhh{<r^eF;+r&Z8{I2gijm9{~wYPwjJo-6YxzjRj{
zeJ(jO`RjD~d*ds$(Ab|HiW6YnAx8mwprz^r`0_Ex7AHJ8+iyf##FAG<Cv98^YPDO+
z9Ga=yfWc74D^QjaB{<c~8ZwlsK2lE^)iqPBO=`V@ln~H~y&`pAz0jF`-v(EXRl%~9
z`pY=Ckn&*BgVjVWeM}o%X`J*$fn800vQ==<|NBiTDp!y$^HYzc&?+xsrb&1kI|r9P
zno2_;n@QuT*yOzMR4_w{*)zxJe?Q}zBfMv6J6Dal|Ls|dq4}yyxGV%d2|KXhz#IMH
z9;4l^{qb!Kn;xn78uI?D_+4qiMpQF`{z+QtzE#oB<()#PXvpj}Xv!@9K~~Zg)pRua
z*RExJ8eY#HP%w`%ENCap28t)&OH^%`*{w!;zSOuI+%)N(O7TQ0jogbu&+cd&@h6dV
z{?JGA^dH-qw=zl`vZ2ODpSwKEPQqOffAdJEX^LN{5jk<qQh|UK@T}j!b9=IpF`7a@
zv#>qFz!{$Cjh&^9+frlX%iH6=m$VuO;8mtbDpyQ#oF8{fbFo!WqFD7_D9ul-^W)*@
z65>)_YXRTf?{ToM-Ol(do`A}<#8{iR%ajaqO@Gh9UGiIps423|$6Jp9lJ0MOU>xSv
z(Ocv~Xb5@>=O^c&MY0?^VQuQAekG!2=9*~1r7u$?mt-?sHryrU-kwsR+r<bWsC@#y
zee@wZhoJ`mf-L#N2CpCJS?pP5fkNxjsK0L)2%P;LHBwCTgA7bG6qO-odfc=PnY!U9
z>Bc+Vkbeb}^zWi<yxW9k^h%td)IC8aiWmZGu_a8#tgk-?8Dh~vFaFcmvW|3E9oNsh
zp~>Nwqt&Us&gzGgBfluzmpmgpw2XM5eYCw4wG9q^_3SL@6-Wp{9objs6h$Kg_E~2U
zyLSXRGTy&&yF6xVUx^Tj7k(~KufI97_X>T)a`U+ME^K#3TyS4ls$o<PZOX}7LwNvn
zo1E}bp1{O*Mq{!sB>H~e(-c1LVpx4-q&%PKPpa+d__OV&MB_lat@SRiD4%I(Di0Lx
z>fd|Q8BKY(eU%F`ubAJZ1z)+>aP^B}OH|eYY$6IBJDndG?skyi<ZtfIn~y!q+oL#M
zDB*n=J$V&=#>e<7HaC2c=M7}4R@JxEqM@0gxSRAsD)>}d4BLOx&LfsD{?tV{T76oj
z{6ZtsZ|oaQ3z3g8%xcfIO4{z%of-#94@~-Se{1G$g5&CbSJ{)CkV}yA&aTV!+zjSf
zpRIzom#r4-2x~eC_+J3s-2XSRBG}!MWUSZ><?KFa1oY(;+>A?qLTCK&Gw1KDnN0LQ
zASAZ4qwVf&c!aKw-K@TeZchCiJoUvVvpo>4|EZ=tO+fKul?S!MmnFzN?zFyq53iM<
z!j%>)t7l|(B%3}J;EkM)#!O7=PdYA~8`vSHT0042Jp1#{V>>5Ghmk)kILZ}7G5fgQ
zek0Q+WT2gT``f83p!z$g6-+}=@SBko8u`j2=9v5WC>w<7R|ZrA`&+J8nefm}<S)WR
zujEb3s*6i>4xARke^CSjhmYqg^VV8hzR^b6jO}Wh^mx4u@a}o1%Xn0yX)*Ub@K-2m
zLHs{om4zh@#FDjSW{JJefFi);mvcv76Z*I0jk(1Hc;ivG0r4PMXk*|)DD&#pM%8+T
zV1?<kbi!-7W}_36kU-V<45V&EMNu8(k-b|=(>#3QKI!x&XV?TWTB^ZskPYWckCtx;
zxnrX`66JYc<8(v;Fr%N_y;gGkKwwjs5$=kynwTI%N+ER`PLZM{OE9B_-@@yMZAa$J
z&P1{WB+7N;6{$+n>`$W%<C4bb<H*3!DwPs%=}zn0(WmENs=!6AdobQ?$c~|&i3<<Y
zX5Sy<%io>|1C8mdxNEE*8d$s8CqVR`7YV{>=ao|=$p@SsjlZZ?(F5QMw(@_+ZMwEE
zhk53C&yVR}&~eeovNSrnjpTgzZy;N29upKJIQeQqu=$gi&rTXovjzEk;Yr65H8g?_
zw1fRCl=^YK?4h*k?l9rMR0X2n)faudLL2Y6ST4lE8^1!n2{hLaQN)t#ym*;Q<aJ04
zHKL}KJguY9zB?^!VD4AkmstJy+Ve2i+ey2B;)uuC9zym<2N$aT+|(n;SkjVy?=|qp
zei^F}pKR8JKd5>N_L5^cNZa;(yLk{S<Ef>#nE=~3{0y?S0}Lp17C8D^v_GCS>l(g>
zE<YiX2eCx=fijOXAh~E=Zl26kD~sfx%GW6?Ql9L_(fB1S1lP;jXZ(|8=GpGTGMk0p
z1&WI4DCbO>o-;8GkRlB8^~ik3%llYv)pZsG<D#iX6Z)<C@PxFo2>xTdpjG?%k-0TD
zv~=+F!o>Bz!glz#C<QAlo(w`Ax9~R8KE8LHbD4WWd^n`ZZ1`K|<CoJC5&^I`@b&a(
zvkZ+%#7%c-Ik{w#etUMVtdTnUf!$Ylo{0u>h-Mz3(_+0r6!&MG%toGl9<6JOL^(7=
zShRO&AYe%rFoBg}e}COPg!HJ<ajeCwvX~(f&L1rsw=AO|;rZHq@y;E*4|w*stKgfD
z(wVH4wr+L-BwIR9<jq>q%+$wG0*(PSdnyiU)AZC&YKvZUE<)w7Ll+%KE}F0vh(stm
zTl($wBO(%;%SJsY$)B1KbA-Q%hUsNWeajAWm~f$#0K}<TgeGe$iqM))=L@g?layf^
z6Trrn5Mx%!ypiD_a8=>uPMFnp(kEUJ48>P<{1GjqiQejKX#72u^MUnKF9^|09(Mgg
z-Lm>l!P$_KwcGpGRAtn?gk%F>Lju_`Nh-$Y@QgBf`(MFV_H)4!B06<CV#<pN+p8{~
z|E-4rcjwRI-SP><iOL<xueq#>r6)qVC&4I~{BWPe=48Z|XCJE<vMoj=CB98->3J{p
z)vGy`y}z7mT7`dZkiy+%KFz(ebVw)TjpU8>$#u>euO0j;@%VWo9cAW;$(ePw+xfl;
zE=^;hM*biWC5&NHx!h|b+RLEM7F)DTu@)`V6yMBQF?-bXsfj{*68nI8;YUdaV;G`d
zM@6%@cY|=nr}hH;_-%7AC15+rplmB)w78_MfAi5Mv5JAi&?t{~CENKNSI)mZX_Izk
z&$n4O*37hOLv1dchmq^9dR`>WMRK9FBUG}oI3>(c;;Ghq$m<pim%+0mZ{~FPDczgW
z$0Omv=m2ZMxY0^#2t{y4>0}g2Yc$U6jMVEPZ}bGuuW7-GuNcc1hB;R#oL9?7y;{C}
zd#S4_WJqQ!DRWH`HR+c0HH25wo2ri{-QuPH_)zHhJC6<ut4O<5=0|GkVtl56TNPlu
zI1BDFAf8E_B9g10E^3f0K}5G%G)r#yONF3L<*8MG72~g{PI}gjsp%AE{h!i{JjYZn
z)(F5U>!{RoK{(_Ipa|vJ>&O1;>Grrz+h7{O>#tmX8nzsD#9D&JzI9%VZ1uLa2UH5y
zB|qKa(rl3J<$kHt7w!(%dPKAwgkON9yv#tQGU}9`d1nziu-@Vk85-Q$=w_GQCinJL
zwNNXWw>8gJhF<1(DZv#e6Y-zc%Nd0HgmNqM{!?mo>FPRX&v2V^Brn}U@O4&sJKH|@
zNzS5UM2oMo+hHySSPKiD7QF**!Y=<3_Xa|Rj>=F!QC{I{<ZP~eVj}i{kDOFV&Bnag
z?0?vkl6qHs1b+=AHVs6VTnP<BinED%ME-dCGOoq>3G1?!(DYACV4`<NmjbW*1N)2G
zI`7mggiH=Q$oY?2gJN*Nl`;4GV^8C%PsD)jP58FWXDBq{zQn9}&XO7!6if5TnLtJ?
z)-F6x`4`i2Pjct8v#s7qnPn*{m2T6rZ~EC5@sje4=l$f?4wfdaym|Uw0;(n1t+bw8
zho<y`+V)9rCE)e`k5cKwD5Bw2L5lfVxz{8Yjo81fux&Gv0;?wLtN}y(ju|dr$JX{Q
zJ26Qm6PSS=7z();z`;stqDWym##Df-xhHv&B40FSv+;`fwq)3Rdh~PgaJHmE8tU49
z;k^8v^_};h4M+1@F~9!I9=jQP(btLAoAC}Yk4B9F#)afhd=Rzx@LIcNuV!KN2ifqG
z;aTw6+rn0c1Ht!#Z=z>&sv)lx=i)zDI<m9a-~JOPJzXDkLy*=vu5tcSR*wJEG#gIj
zGnQ2lQ4wfgpYd&<%~04-7?+bOQo*zRiHNDD=>+6;bLrE}Mjt5siSn1#*gXQ;i3gH=
znUzD?J-baHXQF?pR{!$+Hpjbz%yks&-><vOP*Bvx5oq+Wj0}VOuwZQKW8FjK2$?=L
zrDT;sl>ug@K2Lvu<`=gOi$V*j`kjziYX!Q@Luu2@m<pxLeaTn(zD^{IV<Kt`!-eO2
zFPA8_kAR#WEC+GC!$^-z;bmU}09?T>G}k9j7)&MIwQ8Zi^W7yc+gYxEZ%g0?x;jww
zM#9SqCg69L%}IRHL}^`=1|Q;^U?I<Bkb0l#8`ToemiGKK4MsRxqw4|L*7q8;@xnQo
z<Yvp%%4a9O=yls1r_DzMUe>S3k-jZR%EafP&!(c(@8c3D%Y~9$-?gJRl0Yjs|NQXA
zq$1d_X)jDtsIDx@U&KeV`Kw`zQ@H-?#I)x6Lp|IQksI`pEaAcLR2|c!;79y8mBmPV
zpp}fo*RMkQ^^%&#8m1azG$u}EO?oA1`<xL<PN}_XNwwI|O0?CQk><6e2SCj~D&m<l
z?qu*MHKSI75L<0&P>XSnu#2LfH0$3O#$I)Ho!EqND5C^y9pZ*~<^?}{<GLoNQes%L
zFlAz{n=k)@k8iIjXNt(jNzf^#=pxaiuf1Xa5D)f8tzfHGyJ);7oQ9pYJu?pz<4KEh
z<H^Wd?>XF+^?xv`|Mdl!?Ql=$RYUJA5;^_)AnDF4-1}#(#1c?9oahXELJ+3gLR3N}
z1BD_N35RHm-UGxxYOrPF_bbrHXP9|>2>2|zpL~=kxSmnHIUAGY<{s$*hMBebquu6t
z$%_njmUWW#FxM1I6xkCsBn~A*trK<~%OrjM(i$5Hd^A<(6lMJE(kNEL)hE6uq$r^s
zi;e8-4v%fa0_Sc}CnH$p?g{`q<u=gY3$2y9?6{-(3elVMtx(vm1*|=B^ov)2;fKrv
zzA4@~Z6%)y<<*PRF3Xr+qy46)<+IMVrhkC)Oj)Md9$O6p;iiwO@J{{jIE8XV(>w2}
z)HyyixD0oGH<j!^8v2Eeb+*$&*e*HGC9bbgNXHRV<D|3T-+c_$(MBF=-BtuWC*fbq
zX1UGUg|<|o)OE1RBMCyG&+C-vxCiR%U>_473j3Q(;35(fsT%w1G8dY%pJA=mP`289
zj|hio3~byTp`R=Z^i>){ve+`Q-tJ(DvYQBTT?@`p+H4o`?>{WI=8sG^0&Ek04QENp
z<cZ9E_=K0)gekyRMqy7cW<2ITKS*vp&~()-jO<`s?r`s={a$!X(vPKP_~uJh`b}es
z(Pog=?}j0Glqm1IE`m<}>QHWKLs?89_v3+M%>7EVp|DjH!^d4Smn;5L_U0Sz?i;GW
ztde`v(*qRcXDxwMrjots!nXW|kKC&#NR0p)$TIkL?RyvsI}oa&(|1zv8sHjR4WLQl
zuf`@Ku0_3L<bR3L%!Z?bjj`l!`Jr!`;!}LB=5jAy44ZiN^m7_aA|0z`soaL$OdOA!
zc0-*hlUeTJRwg92|2h(INRzYY{$<)!$#&XXVV+(zu6Q>aT$r0rp@g|(mHI*UkAm;3
z0p&4%N^V#HPzgCh6F6;GF}Kw}!RM&;B&J-`r?8ql?HA4AfiA;uQJW%4`Xqv2%Jk4H
zZ-Z_pAx*<qS7Xw*f`?%>X*adxLLF{C-50SD8>e#MajU{m8Gre6i*@wJ7)Nlv7fPs2
z-*d_eAuHV>6U3cip)vkx6YnHp9%!MX!!;Kun_22Qd98`z*J@&Lxqe5KYMG;x*rAYL
z65U7F`WI;->%Sv!JDl_1(r>Vex9C4I{oZ9I-rgI+*pdk&|I^lwC}Ddv_yjfMzsmGx
z5`)|oTO5ys=_P;>U;LvDQJkMY-A103#q_O-KtbrVxz*5Rwf`evO$D}fcZ#`aToo-z
z?Y*1vpFW>6QcYxPJo!+;{XdPOJg!6n^K9BkO5x0SE*3kdkLAw}laeHF*7MIJZkvUg
zNuf=Hr}sEhOnLhwCx=oG4}8PgqEcdW4vX{*)QO1$ETWyR6A&KUrkp<H<5IQd($B4&
zGvd$PLZI&t?<@Py>Ys_UW_#V?s5;IV<-^}1>H=YiSyqT6PDyLGc3#G;vUZ3Ur2Xf)
zQSk%5qzC<(hR5GTX$=$T6!GtxaTdO7*gOQDZpS|~d}ejH9xT~-hwnG->+fu!>L3!C
z;4$<5<A3N*?y&lQc@X@hAbZvXB`b+JK9Ovci$RhjV0F6ekYcw;1>c%@z;`_2k)%BQ
zcr2kK9j}f1E>i}D&oK}u32sxf;>e}+#&8MpgDv6<kX=TK=k3R|0K(Wt>F}$`Oly^`
z-X3v@{;<lS@maO8Oe$Bw(ytubN)>4u@LGa$!$Rt!s!NOSDPGe$NM6k1ScV=`)q*>E
z)yo)|e4oF6vl{+s_$4hmRv2tPi@U@)MOQ5U7)mJw@?WsaluVHFamX|R;;*#79@?)N
zms-+AcYN&R_Py$$E3k><IqIG=x_*RpxVu1%0G+R^V=}Ub|CRo$rVKYwlqp?e;ImSA
zo*417X^u45FEo6`=xe&e@bi&Q8XGNdjb-@lpRGV#D&O#~)XP~pUsk9W&e)ZifNnEI
zrP@b309AGGvbF6Xu8?r95Bv<*j#N+OTSF#W<iQ6&#Xy*w{D<n60yvx~TKo#Cqn8?{
z?@1?r!-OB5%J^K9O1DFaqoq))Y!MH`w#zDBOes4swy2rRxc1rdQExxaz;_?qUl`A+
zcL<4-Q(iZ@2;TO*KJ0^yrTy5w;*GnX1R*)m*E5Y1$@+=n2Pzkcg{Q|E6@EKw5`cd>
zarcj#w}I8K>GM8gWMr2W{PTpr@_11td0Cv=$x|6*&jTZ5*DAU#!x4v{_ud1x%q5cj
ze~+U}TerD`qr)!V;o62aurgfqgt?)Op^XQZ5GOBzfmr3!wMQ>Y$s1UFixe5qSnr$l
z&d*J!#}W4xaxVX%UF2yuIn;S8bGK&|rv7o__Ty=rO(JoxlD=;=Id+j%)plk*?m!f?
zIRpE<@RJsRkFxj1Ma?59+BsC-2l^uEZE^c6T9c5BnJ;}N7yLtnPFrz>mw(1n-Ya^D
z?=+@PkJH%@MW%~c#z=WaPExu2!Hemo6?#)Y`b@N0#JG(u8;-H<let<bB7MAkzpacM
zMZ+B&KuGeii#@&NqBMKP1+igdR_fdpZVBeC6qW^V)`nR7<GzErrj*1jmjv{VbShVN
zxKUfvdx`m1uE|8uDFABrPq+Ai=PyrTEfEzF`0hBtNvDN27+1Sgy~T^FT9%vV*uJ-6
zYkq4r|IHyf{PPK>jnb^BeZU@@3@yvfdOwVkcwf>x_s9yb&kyOYc`6w8Z8r3UJ*FLD
z5k0pE6}JcuKb!jdmlS5i=;#glWn41DzUU8RN=&`bP8lmKQKI)2M=u2Enu{ATZZ|H4
zl$GO*odn6V0Y>KlS@ZL{c!fHHcwE^zA#Ju#!O!P)n<aTg!YS;jq9S@UKZW3CFbZlq
zB)_t_FZ}q~?XB$h_hTB0@83GLTHolaLBIcJWT{3LOw^3zmVP`+b!~d-iSzWRr{&rM
z4X`pE?zZQz?U~H>tCDxLV$XKz`V#<`!{wn2c}x_1EgU3oE5oZ%FcMVCT(db-ZhU9j
zaM#odmx&u^PO-W0w+MRhTa^3cRj-u!z${oEgrR8zYuG(_!^Fmmn~<<r#LELR$*d1v
zQq};U6B6fNLfjMODtQ#KU*2@KxCN(8>y~Lh%%Ky_S3_qS%jx3_u(*!E`Ix7)7Gwm9
z*t@>N`HF?i3WO$Es#c={l4r~C?xduRA>D@PwA6_V=sQ;HBs$J$D~0&j{|X5MaiKJv
z{6WNnKevvO1PL9q@H@l+1q;T!b}e*f0wP%75VvmCSGYg0UC+>Ndg!URmcDJh=jfX(
zZCwJrB>g4&Q<F-zfWU0@<N-#uge{fRZZ=SW6<(|Owq<}|xKv&}zj>x>lvWNwNFnok
zAlCaAtOeQ((I1fVXx}#{$7j-FZa>K11=?XwNnNg|$?&Vm?ZYI^YwYNYD+HHgu*gUV
zFS3pP67XOaabwHjh~bLSh+$~45#p|Z;J4`lq}EWf_xTFM6kIRQ6X%VER36^}u>qT$
zWUe}iLP{5*X=jWD`HZ{P(aAVw7ZHWgnAU@i7?i&6EEHD1kSlRkQR+VLE<9aBJtign
zoz!(C$N(4_hs#{R6bBWs9RU5-FBm99qYW8NHPv*lcmL3H26~Mbej|YDzZX$Ugl9SE
z%3A&_p4NI3ttN8ubu<A~hPsuh0HOST%Q+>{q2RUPsgTYAeU~5YAw46ypQAAI8Mkqt
zrokla9N;&%I6{>@qYF<XL=Bs!+?weNXFzw-=Z`p%kz54}+CC1)y!w?K8rpgLxAF*S
z<uzi(^1qP<9hSV))YKq;ny@o((D-9N1a4`#)e%uBXg1xy$D!9iHEYvK#G@3dTcM@k
zix;gdCzD!UcukEZX`Hwmuaz(KQT|T=RFUS;v{+QQ{-U)`4ISkj1}<Z<Bn-*6Ss(rH
zGxkvhnt_9kH+xzT<u0zn^?;p5VPIvWZ~R{>-&e0MMc;^^761LUWpxNago;X&2+<5~
z2}$ztyaUT)o5eXz5G8)Vk#=(uP<(ZfxFqQPVzL<_=F{_fnw!?QhLd#GT+QdjXwz*l
zy<H7HW}uhPApb2`Cd{W77IG#D=?VC+4YM{cIMS+)j9Scrxwa>9!f8)8!^$Lihu7Th
z{{YWGFuyjl+7v1`<}lE;$NU?RYf^))!9x3a>WjM>9=w@XUwNJJZFTOuZ8v9*q`h`r
zS?w=608WdY-SsVS)uI#Ny8MA27gcfMS$AR_k_onaOAQE{%GhopGK#5ttec+^Xh7ak
zT;c;qF*StP0E^>}10Q34>I5no5`*g~CRW0VAfd;?YKnB(6ih(Z*Jm#I1Z80Wum2^1
zhe@VVK!DIM{?I~P6NZK$uEC<SBw0Wu%UEpW>==GOH{J9tEVU9uB6{*7f-%Np_{a-|
z29pqvLr{fe-qBnX+AUuL&|JHMq-DLr8E=ScZNa;cqTpvePr#}#7P=x>8!a-PQq;tH
zSfED8oU;4YkjI`n&*vU_j>(ZaCoa59Gi+0fM^IIaY=YjqF6Q5$Oc`sL=iX?dpw|)e
zuV&f-5RN&{U-%MX_#F(@hj{dBFETt(XUF6)7fxrMjDzRuyPRc<y?1j3|G%sS^r`+D
zpZ%C(!VdLScydKEfi^T|p+2XK-3Gw`NL9!!xU;~b-+gT)h&ALLXw5^X*=DJe5`=q6
zwS%dEv;`AF6e(fg3wT<v18q_9_ZdJb{MpA#C`>&h00}`NFjb!g1QA35gn_{Xj%roO
ztk6_LM=NLuCYoSm<h?Z8N}l^JL3z5R7*LSV2e^2fP~ELm2EjF;u^_aTAT1YvUY;i{
zI;qkv$~yId&3V!wxl@9mSolSaMvboxxFRS>5g39%$U4g8o{(3M&GBph{RxKZmS*cb
zCtEKtviGJH7Qbv-XK2mEFKY{s-q`lwtY_N66&ZD|DbTrwj))m+aq7Y&?A!jGL>9jE
z$g_OMM;@d;7_%^wp-zgbKbI5$Jrw8*0wtFK;{$>7DYom*=t~z;koz64JrA>|Al?S!
z2Ot{uRq?2%WD7#4VOW}SESzaEcYdCQg(*7OESa=fYM!BPcKS+v#kc5!P<`qi_z`4Z
z(Ju>pEDr!>JFvhBCIn(ZDn1JcDn0-i1I9XE5FCKSD&7h(Buf)AXV6$M1BS>M&#KJm
zu@)ncx)4r4^(Lro^8%$yr<KOMHx<n@Z%#sCT+-G3D0>+WEXHSA#y@wU;t4}V%eL&F
znqnBr86N;KKARff9<Y>k__g19mLT?@-{GmRGPHM>Z>w&Ur+?Kk{|!A3e6`d5)uZ$3
z0-h_~U;NA}IyB9RsV}j6@>^MI%<=n=Ji|x6^#Q_)kSrAAx_v3XQ(yfrVZd@0UttI$
zr46{>#ayxYoby4zs$ZB^yp!+Jd0})9>^lg@LYSL@b4QgkZ#0=ZH$`V@hAf>2&3u2`
z!~}K}B=S3U<kR&ygdp}eLiNfWiC+-iT7X{Ep$Uo%AoiG?3fNdZ6o`aSJk>a=f({6&
zDour!Gvw_6rOrZY9tjQAfr#p$#YTS4A<Yy*#SRJ4Zl%6ksMcWd7|fsd_}`@k%yG`o
zDrk<=qD@*T{@Q~1XiSfnfq0IC?IR#-F~)37PdF&;C<CK{8F2jSuRKd9TVOaI=J2`C
zP~Sd*38P-LT2(dTGSmK56{lCZ9&fZ^pv};GFK_X0M50+%zh4DgQ#zf)oSzwCeCS>-
zOdaJbkJfnayY8mBl;M)z&YwFiIsu;j*CqaxgF*d*7X{lb&;4U;Y>8q^P!+<O!4@u7
zjTxAoO<7zt<PSkw6<RfDRUi!&Qx6Dq0NW06NrH1JA^{=|&;T3z3cU@K$SRd0Ah-xL
zP`|*-0HDjcCR()1h`_|+C7dh1I9V3|)cP7gP*su&WEpe>nix_SlVUl3;Rz}W5mpAN
zRwfu48fSEJh}xK?x=k3_2lWYIcpTa@Fni3=Uh*zSu0!EB=(<yiB}-9C+G3IV8!fYe
z;sQ3({d7wMBwzC=RLgUSDne!0@@v2OEa#?AF)}d5$(gTXMlC^opvzudjbL^yG5@7M
z(^WJy-{t{eb%x(&Fuz<L=3lcH>j^CJSjfVKrwAH#25P%`<LI*t4%9hx(>|t8r#&GL
z=W)I(IsaOY1WVuSfENx80!t8t1Ytm2i?D$qNpf1Pgqi6Mjm8qqq)A5<TdOg$ILeY#
zIQVU_=Qg3U1j#}Lml#|clIJbRS_mn|7{t`E2$d>C2}FTX37`^zMnWEXvrq|p8Ud!D
zICr%Qte@{E28k4j1&KZO4`R;(RI5Z*2r5b%dtbi<XsOW2EtwP4I&zcJVVXud$A#I`
zM4d@SI=dOK3=#*1(J{kP%dzl=!Q_T829xIGt|+i(pf2yqfjI?hN}&?xNlV>SN{Y3j
z-PWDeo)$q~aH>qK4DSf|-7mhx8z)|6VrUyP^Doi~&ru)VQ%pX}224FRsy%!;nE%b=
z0teS^!&f%JhPqame|7$W;;2qo=FUAz5PS=jxXRPd{{gX$*fF-7>GMq-IZECe-qBtl
z$aApP62%cg91unk#s;X%X|>y&KR3nv!ZeN6Jng(m<`OU#W2*$wAW>*&%r!atVn}t;
zvhSOPZMVYWG_)2%@^pa2S<n#85<g>aI~eWw#TqG5DAbDpkQF<>MuMaTH!&}jdy1|=
z!T6Kd<Mc8Jn8+&uMWHtW6)Qvrv?6Hi3!-TbO_a6+Yy}N!5Cp!67FICv0Kw2Oc2|w)
zCPRBjIoEKU`~zj?#THSPU^@`zhByd`gODJw2o`nf+p4LjT9-6sQ_6!CEJlp48>sq1
z=fyj;5oLHX;13>uoflqvf$`xnW|v-NUSDBg+s(z!zgjnZCDV?LY(AHR`B$>AztL&{
zhCV9r^*8F=NFh>12`6)=&wq{a!3Pm(@#wRk<NfdYUIvGTSy)_xz~EAcQ!mABOh6n)
z1Yw96i_@HTr@{2hDdrnzSZbZ8lQ&5628a^aDn_ap<8Md=&X9K;X)C8WpL6mlOFXIU
zyi1s$6Bf=x)`@V=AR3Y<DWYJb6r+p2O;>?x;BRr!&XWQLNZL1xQPP3CR=z$EXe1s2
zloNj;gaK3nf87V-+juTk@<hl~=qPklaD<47AP5l~A(blOz!=qSV~pG!v*Qj&G$@>V
z2F|^%G?wN`7SED5=aD2Kl7QG&s0M=!R7a^*1_{FoQ7s?}3^+%gxuQkrtN-3_u{+M#
z_kBs;QpR?MJpIZko_OYI1_xpq?K4cbpJ8~<fj(#It0m*b8km0_Rbjb^IeNpj0pB7<
zo$GZWR14PINR#QguQ4?64l=#KSD*Q>+`9WCxXhAk2Sc5DZG?I~BuyK%lX;qp3(PH^
zW@hOat>i3@wqIOgFcM>=hBb8z5klyPd<uGQ32^hoku-A_&ML>hE>tF!9k&Xzr#)#X
zS4)yt{pwZ-Dj9+!ij=AoDuuF67~<P=A-GV{vc{ErJ%CdE7b!UQ#bYH@D2jhJP{Ke6
z3pFE)`l}@pTx3Wyr2}+w#YqK;G9-$Ss7g>Dq%uCr(C&!wLpk;B!opEF`GnG3>J$u2
z?^v4App(uq-){Ob={X@Xbt>Tm^=Oiz`Xu$*FqODQ7>5Kl@DtCuLkqTLi5If&;HNUV
zJLK@GvwZD|Z!l1=&`B4Wn*TDxHy!L-&zn{6-2lCJ173rxFa8^O8gN7H!E0gEx$zH3
z3RfRnwP@C&(Kw7mgUl|z!QN5Fdv4!HXyI%l<@A*B%4^e{o0+E3IS-~m6la7XSQ}v^
z24aL5Ljah*QPUpHMGBcQ!J-+YEkE8ne-e&84!3?7cHb{F<{d8g9Rsl;IE!hfpb2pd
zRrNb|WQ8bHh#)U-soz&j4z?=*($^OZ>F)dz`Ql#~_&^d^&x5ey3yT^FE`Th6M1&MD
zwvLGfTZxfsooH;B>h_TFJC%t8LVH0u`Iyk0hfceLw$q|b=vxp*D&9WLwa9geW<E_b
ze}n0kBC`f715|@;3|4kCSe<03K1QuFOcYe8RwDx2dpltW+qS`(>GOQ`@ox}SG7{Hf
zdhRiX_TGZAwh%rw>tlYAtAP1sUGK=1c>w$&-~p_Q`LCT(=V}4N6vUHYFr?X@rY<>u
z`G<ajkG$tzR1C)D3=C!Dy1>lLIZiFj@%(G2c>K9Hc=h-+GqVY4<_N-+YDI`6gEdhx
zs9)M#6(e^TuLW3e4Xhe86Vf)=C75~*25*6Fx518k4V@)$9p|4SaRilsAgU9`P;tH@
z9$Kh{eo<!ysfVoBGV{`4g+@^!_^Ab4kkE7etreok58fDj`X7iOMWArjtMz0kiGs5g
zY%G{c1v@lIWjtc^0PMI;u_2s%0_ILT(zZi8IhuK$#j;r19XLR|bhwl{?QL?JWZ4w0
z>@{Xv0d}rRAj8DLC_}Y9j1BCiRvV^P9im>X6XYpJo;<@#$DSpu<>Z+%HTPA9cJIQ5
zao^&<JkyRfWxOsM^KZWV`1a=kyah1-%0bCz0!a(D4;|o>pZE#tgFE=uCo^)F5d~0<
zEd$j_CWj{3IRt;~Bk(7`r$Z~B=lHpEJoWrB9)IoxFCIS2x#<phuEZhKt1)31AOwE*
zQ=fxtQK8pjfocX>3zAtl^)w7@gRy-ub6!cCMe5#ys2=zkeX9hq5Qh+3s769wEPg2@
zy_|Sia0*R8DbjzjJ^++3zyu}r*J~Bn;uHnN422qR6zar}>Lw~kP$8(s*uj`+G-O~8
z?7RyG$Au%0D^ssQ))qAJqt5C|&9z=OBt=lv!lOVn!#RhjK}-dsAz~7gMOxVuv&}Xq
zr()2UvC1%a?7p4xeFKb*Cj>#l%-l4uA73I5XBgbRgD@T_TK(oKr2SV9^REqKZ&(QM
z*1-H1-(PY;@^-+8+sh|D_UC9OqntmH5Czr;hE&Kq&~B&9HQ<#qULS9$YMB_?#*Wc#
zeBuN5@FO2d=wx#oK6{QQUpdL6&z|9x*V{}_&*0n$wQ5YY5)cG_YDWrFL3Q56$E8Bv
zR2paC#B<6m?-RD&CA8;+wm94Z<Q+>G8muVQs7U`UR3arU>i}_~USvQEww(aR3a*^F
z4Jg=u-WfP3m4C~j#A1q2`vgOrh0F+v0~=Kcj1Z4nYCB=_4rOE)TsQ@%pMt!pWG$gj
zHMJ|9?A4H^Z+5`9{X{HA3{D|UQ`(&lNhigkjMfIY?Uq}(=g>~xb^93K^zLo!zjKhv
zs6pZy#3L-sD*x|4{{sK!pM06>;4ry5ynpiLI`&)}%)cTJ;6|(g$htlItA+Vx(;rZG
zUQmQQ6>6PbeEg$7Ns^7wXr+WUAWN6e(3@r<G!cm>+~ly7q#T{`Cv`9qwhd0OYkV6&
z{B8H}XMUi~d~=rP-#EqBo|)!}XPO*6+GJ*?hOy(+2WwQq5MzudyQE6q0cj{RZ$N#A
zvhyAxxd+a+h0F>r@%{R^(9(+vNFN0dg`klq?f3zjLOUQY=IyN(8ZC-MQtbXd%@1r*
zOf(P_5+|zCYa1H>e7Ptc2gHWB4wXq5Js?cpqBNUu^f5^11x*B#DXy5DEZkDMr3j%^
zE%k6H$#ar4qm!hNwHc`f+_~>2-g*0O-u;g4+;{gd`)?h95$gj<C!~E=n0YxSO$H#h
z42>Ip>VN&C+;-=!{LD}P7Wv+hixxi{*!j5%n4b+`{`LGbZvY;^>ekP1F6Qt5&ZU-0
za~B`|)}KJ^7>%V25ku-cE|#wBo#(2nQ(Pu=n$R+(TaKTWTQbmG%sH}<6CHu^YQXN{
z?cB9vCm;IZ9QQvpI5j=ZlP{g;D^Jbx{PT;PIX_OW+o_JkR4P8>(8QsOj`ObxwVlf3
zL7_D(ECMc7!dQrlL7t$f)(2LIB1L1c8RV`IG&Tj)C=5)D6|cn?c*?JhJmuF~hzkF|
zl4k3qrxc{76zKpbLNH{gRAA&L*nTSnv2gV3O8YdpMA4*>T5~CyXMn?q&o*)=B%Opb
zYtu>R2(-<3&2ZqB3GTan2j6t(Fz+}pz)gFrFc$j=HwOzRV-}vO(w?u9B@wD2LDf<n
zHv}Vw`F2k7`w8FviFe}CjQ{N~{}0T*aWb!7a+w02mxK9b1DJnhF2V4PR0GhrEaop>
zUv9AT6MXnXe}XXF&fHAqEAs^|aK<kf<NJ06N8Ky#Vjy>d=6<lHwd99!;uzuqFm+)%
zhq*b&t8+Qkmxb+>I(x?k_|A9S#KYgxW~npFtLNr<?D-Qs_S6Xu9~)+NVH7hl%;0cD
zl)>~ds0}$r4l2naXd+as@B3p*`2Zm>N)-COeVX>1fUw2DO(ARMm4EuifUTdJGl3W1
z4EpICl)@o&MFzy%788vK^)Y4qkT5s_XI_Q5qkaHK+X5Mg%l*i%2%Szwd#ORznWYk*
zWykiM{X>J?zhfT{+&{^kw+^#y!ora8m*|4w!m)tqM<W)NYIL$HxedJqTg?wYmHMmG
zXB^}?p%H3v!04}Z`1TLq&D`Hg`Nx0nOR#5<i=4yWWX!)Z<WLdjZ_FCNN|=BB(&1(e
zA7!0Cu<W^=!A+0w!EgQ%D$#DHr*cF~y?)O+%S905$4`TxXDx>IhHISoan;NTc?xM8
z+6`z#P^tJ}5Y-Gxq_i^S)Hz4x91Piro%J2uymJTd{O**W{G*GUnV#pFm(TF^r%rSD
z>=5UkuXB2SfF!Q5=Up(C!9wZ?n_js%iu{gk@Qc`nN)!PpkQJ8UdC`n;zN(M(7P6G1
z!$lB?jE4cXPog>~xcO2j2VtSDV8@h^12C{dnL7hhuL~xzkb$PqZbIY266xYG2Er+B
z*`9Fc2djM31ADpqp1V14`vikw1r8^0W`QKlIDOc1emY{VQKgwjB+inHK|=LXYA7zv
z(F>5Zi}q+SZXH>u#6l}nTE>!m+VSuw-^Jowi+}#_9w(X{=s5&khEeCHWV~c^DZSk2
z(}3$^{wtpc*w}DJiTeZc={nzh-w!h~avL)<Y0;kZ(<FW%rC`oEKen0&zE5sSn=j|p
zXDLU0O=<pP$TClz%@f~Q2qPt|7X1C1ki|;dz<dI4ya9uUBeoBWv3+8MkKL8=u@5J-
zJ1t&+b(SX|JH@MCj9EA`LiMgelD&hZOAyx~lpLG+1z=3^`XbQ8Q+;!vf%|XFaymk}
z_@%3#=V3%pJk;TZiKGZ{#wgAY8PYLO+YQxy1~J0)DOj3;=9xB~GxLOtbL<{i<gO2<
z-2aZ4`|i7ygSU=S8L#^Yk~wH)WbGWer^eCw3SaqUAsjMf_(G)=Y(<wT*@BW!X;-bO
zoCXZ6e~p0@{s>Od)Q>k$Ye4j?jz9I|4|3+@0{`u^hq2=|R-gA@*&cl3m|r%D`7g2u
z@0v;t-++ohSA_Z3Csk}5^ZO$`AM&nSzmJ{U?_p*tE!=Wk-*AuXrk7>9m^wec8iiid
zo`QtZt!Ecj+gk8$U7?8V93%;trqT)^ilI`6N=?Y>N*03)pqUD%Ph09I48vi_<V2mj
zZyMq5pXdNB&b&6yiKElJbX0gl28f;+BfNWvD251#)uG0b885*VI3ZQYRC}&J+GA#y
zD!cS)@CVQxsSWT-yOBarSceC(P#radgFZ+!mJ$wszD4K71;$&meDk)PcRy6)?tALo
zvVSMl$zs8$KqDhPn?ss;nef06SObf&?|#FxPr&J8-iAEsK-N(oyi_p7z>oI}@Kb-K
z`g%!h67?MiQ)D`A3}@#I_BWLO^>2PVXU;70wO6MIhpK(9NbA%DWTQFi<zW8RhUMnp
z1ij9yYz1=DP2V}1OXaX2qll_37hHc+Fn{?f(%A}k?*16J9{4!3vq@LEykDWc=XWp5
zx&@}t&<jHd!t%LYH>>P!u%*hb6pB1v9>~LJ<5Tw__OPN-gZf}mNQ{)g`jP&c2vwBf
zSQ(p8CigqIIR|afINjvr)AO7-(xyEz%IE_-uy+m6sT$hzkj^-gMMs_pc~-OnORIv?
zaoF|*K}_s5`{Lp@926g9WO=j&OAD}c8kSCVs4ul?o?Yb3@ivD>EO+e+x%;+={RgX5
zCu$x~<UrHUIgl0lgQoNaP*R1YgE#Y-^Fgw;2*2@fT~V7Ud=5)_#IA;6aSn^16<SY(
zvPJ7MvR)l24h^AEs*zGv<>tK(d2ogw`|)4mXd(oacx|tWYmE6XUHGU-AgbAHD{mZl
z?zulVTi_LaduIS<{TAo-!2I3CzYwy2{QcZ^=;KUJC!nr7%inL-S$-*<bWNcd<?!ir
zqEbjsX_rM<8fzk6AHWpK!2W*i{uSrE6jq)=W`(RHbe5Db5~3L5s?QM8iqeUofnjb6
z&QBReo-quL4N>1e%x#~T;I?#;xg$-^zjB=EKS)`MLz=g5Cps`reOo{_2gzav2C`Io
zW3bY56e<gxMuaf74Ax*L&<2jrwK)9LA~R3SBPTL;ZL4tiO%Vt047vT2V+>5jeidfG
zk|UjVeur1DHxOEb3n3L@DN&jW%3>25O{LuyF9_Q4ZOe%X7#M|f$CbF^I~&>+kJW<7
z*fVe{KUe4cqnz=gEV&cX%x7aA^)%<BM-8{t$N5J;_dWc{pZGLOLE(M2=?>M^!Tgv0
zPQNk8@C}jyn95-zX0*?S^*X2h%YT-)g-Lfe?|t{5WoAKfc~+$UrEOKuFRvSxO9mar
zSHi^<yOHs`lM#ZzZ+hK|xp-1bDFP}*o37t6%;RqVgTVOifiJ{)93O;Gsrp-WK&Vyl
zq8|oo3IoP55a$f-a#U|Ouw9_tVD7nTPCmKFD`#>}4GpmSeS6roZ-|+*j<n;vo`CwX
zTPF}!1FAz14S8I@u+U`g#5_wcEi!vJp?S8&9usr-jykvRA7<BWgK%dI6An6%H5}UV
zY(p_pPU`wPK`yisrO|?=1~eN=yX`v^Sq6FTAyw`m&xKkY8Ydl3{12sCmqN$b*B?r$
zbK9*~_^wCy=io_9wwPxyp4Au?-hy!q)zoqKdxfvgKhIzItG`9KcY-{3eH7s<!2Bzw
z{c8*z$qHMP1fuF@Te&&#+;cyCO*4S&767c6QN1JpY<BUl=O(lo=I{NE%Y=A-2OoU!
zr)g&+bdnaPNKXV%)3>ekO$p+3*@q@#iVMADt{IPKOXG?XQ;YVr_Y0bFSuZdmUHmPD
z(S=CQ^(F{B#4rUpC$vS~paz43P^<YCU~Ggz1A{iBUdyTNgy0}BZsFV%&;O@se)Ex(
zh1-R1{p0r#5Yld>*f8`NM&_8EYjO0*6lV|5;!ZoN^C`Q+3Wv50a`*mWcHdlwnt{~O
zo^njh3ojhA?0eX7>p?>{qiEq#*mlrPV6h2HO=z{ely|$Mqy-dlxgRo8C%9a3&Sz4k
zr1JO(eC@wFl7@I`@)F{gbqdp~SM=Ws4bol^C<ska;Azr9(VnfPId^`@@{8a2D*xxd
z{37+;6Z8P8tg-mlfTEjS{Fhv}{SY9ZjdF9~%hxyn1lP|OR5q6I%LWT9D;7>x+xbml
zvn4Q7<AHmBgjC1qbe1rtoDS>Z;xeUNhFN-IGerSSd&)Y3FGo8;)!_1CCl4S;3e!;2
zD<*2$>n&cH6jE2EHJK~OHqP&mHia-$ob~O+RzqmaDU}LT2cSNnv<F~G0;;Wm$}6y^
z)g-CT^Te;Wm^wd3qqD%5f8k|bd-@cA_2)mv__mN!$67r7yC;}^tx5C5B75oqAHQXs
zyFWC}_T4q#8t5o)K{+=ioSITjTriwzge(F}8NB$b%C5hpG&7;q#P9S?Xf~Bj;>|m<
zf{f&HA<rSti-oVgv*Octx}QUy`C8$&n}x$qC>86WlPxq1`mchnF|qa;IT?YxD;3bw
zK<N8Kb8C6=i;f@q;DbE>>`8v>iR0A9M*QQ=+QUGy4l!s=hvBss|8;K%zBz5cOE}gm
z%Z15$K7z7VtM5`=mCjn;vG02s96rSC!Xnn#ZeT5CvU}d1y2=NpUEjZQ$M8<Pen%7W
zL7}{;O;A{0=RO;dqDp8?@u!P9eeKigFE45>)P|h%a#?wy&mROzhS12ARs$C2pjwCe
zpi&=zZF>zfRQPXy>kRXA36C|t$TKHjVR(2qFF#)8ul|w$z@Z1X^U@b)xMSch{=^U7
z&U^n@1uEXPhYKk)$CNYYlv6Xpg-*as2j(;AX!-v9Ykd7x_=C?mZobnpH>b2(zMz-o
zehk_BC3rmEbwAEa_2e=D6zWRa`&<_nVf1E@r@h*eDOR)V+f1B-b$&p}71%#0{rrk7
zs|)}Xip;t5f+C?6G7(<=s^zc$$anC<YyX~8?S!Bj6@X)di(fXQ>o4ofr1bO+-Hj6f
zh6^^zwd(WBh9(a4j$tCaott)lfcb@1*PFid?kmUSSIR_|8GZEW&WY)B#4Q%9xZJzt
zI<HMHDyWr0+paLWRQ1I{Q$D7bqx33}#ja(f_uBGe5jan+wbrM{WQr@b^@06$!+-u~
zM>uyj;km|d@%X9dc<|o8#Cz_)i}xLLWXUOBer1l<z!=Y;eT9GU^BF%jb%^i$#3*mP
zm~-}gz=;bmuU`B!!!PJGS6u474U^0-;<N?d__DJ5Hf3o6+Qs7cDZS!yDJ0YV>&ErX
z0$t?5<n<Ljq-r%`WCZFHN@H3HLO(cEYJ{qKbCA+Ez)^Ur28E-ul=B8s6maQteDVP~
z3gG-=PVLoU{??Cvf<OHae}U+xn~LD3eNthY>GN+E^RK`IxQ?b>!S(Y7HyhCKTYr#Z
zvjx9y?|xpn{oaq0=BCGn=~G`7(Myb(yZ<ig0(uF1w5aME>8AA*!K7$nA-U(esPPiy
z<u4o86Cv^OLVJa$Ld~`W1yTrH=0(;~Zo#hDRh<)vp_3}R_6GdMe>l#oFEmN)X&ycG
zb@uQ0LALFA7o&GU{cgDL&>`MG1=~Ld|M(YXc;VEq^KXCof8wTFtK?eaXqwZkcv^Fo
z78pL!qF`5;q~?BijRN7stIE0K4y+|j{4Sm6#mtZMJ9v3UyTYl?yCtL23j}>9*yWHq
zVSKM){#@>5#*1^D7p0`~@uq;ts)DA4Z-5olcxf;xl!H@z1`w8pqfUqeID9(eo<j%t
z!3V#Y|ML9P43ACrn1Y+`^RJWkug3%6hBF79Uy}xLZ7~1x#h;}a6V=-o8@r7p$uK7D
zR{bvl5weEEap81RT6}9)!ujHttHpo43p;nd>YXH7EDj-eo;IAh!g}oDTj55ed67ov
zMa$4ZR{G`@MwyKz$Ig8LhhLfFcR%wgi7fEQk>8|V*-aepWN~_d=by}Y;&8_6os7Tt
zUo-yGZ=I&ooTuqdGS_;AU;gw31}7bzB_&Uw(}2dDk}Uao{yY&}CS4tWm-|d4X&PRB
zHYbdgBq=k1a`*2=Q`P?25dWTB;rgRxU8V16HeqCsAXZ6pM^4_eW-A~-rjV+Vx$;){
z|CL6fdGF>;MxkAN?WE93ge(^hpM(z_dOz_}6X){vXZAOY`DI<q|7O~Qo9hDs=##*@
z)HGqaQRq6DUp9jI%WJM|`zezn_Yg*&0b|OccI~GG%Q86Ev$O8Y1>{orx9oM5ef2&v
zK{-lWV%#hj?`)fDu~7UicS7FxxNe$Uw8*?<cKIB=i#p4dq^%4L3sxMz@{2DL#lmxE
zf1mmEB=y=YRI3vpN^4OuIXwDEzzdHpGIjPf(zJ<4jX56Usi)8K`s=go*&Wbs`*CEK
z_S$shC4TSSN=D@27nCe17Ikqev3)<ON=w=FK6q6ctI+rU5g$w{!$M^k(oXKxmkV!(
zEOTVJBg>Vn&xtu#?c)3_6VhBra_=16&b;ezJBLnjYiH0(h3WZ(%nh@1@DQEWQfch4
zGUk_cye3w{{IUVVkvE|VXs(|cfUcAF%c>D@y$C5QMa{mgT%3?}99Si;dDl$AblH6(
zg(6L%c;W9eUB+M8BG58jEh5BnPNQ4|dW3$rAf@yVC>C+%)9bvi1y-i>uCU0<)GzSd
z^#=t{D$0x9HOsyE$L{?BzwxUtGdr`uk~_zd#ji40+f5XV5QY_8?hA-E5T1TKqp`Gv
z2Ne+70cJYKSjvy{+0V|hYp)k2(ZUnao1sGHJhmwpxXV3{Ac&ONv%<_dM;HrPs@;O$
zCAXd&K=-}$-|xCL0V#HPVR(mlXi*rk<ath(W@K4TmKDy-xfVgdQ=U^Nq|Q4CC%G3d
zZD-}e_j2Z~92$wT&~%uQkn^gv+fgyHyw)|jTG}s{I8(2V`DKmk`i8RyUn}k34Cdc>
z+TZ_3V_;$N6z7l6F*s%!8jlEUfT;D7Q~lF1D!uV#UH-G>A6ie%rkld5PwgF^rP3po
z=<?K}v=DQUXWri~cfDd(Ucdt{oGXP9i4?YCMf*(reQB!fy*1>SCob^R({E6#2D~!$
zS%Roa7>p6xK}0Ml#5F@>5oXUj(zJ~h<AGu<scW(%&+y{23%vZ&0^278I*ETjJqa(<
z7leB0J4VPe%c;XT)tY+Bu}aql&GiMa?$>VLzpo%j`IypiNolv0!R-czE6iD4_twh@
z9J#6wm<0^Tw4fR1N>T;_=l|W#ppiH_IY=#_c2me%*XDP>{5t2GFA{{&b;kS~89I6!
z7Xi&0t-j4+e%aLGH^uk18nD=Um6>xVSXi27`|b%ww~dkK&|GpPt=zYz#C6$wdNDIo
zSNS~kq9tBt28AzR`6Rjm(X(u2l^9=bNqCWhU!Yy!<oceV>^$VTV|<5YcDBQ3KJyfV
zwTP4Rk29a2WVmt=D}w|<9SWLk5J6)Jnv05RUSM5=n1C>-Gt)lINbNkI|Lh3g@tp&n
z%3sb7IR7qsn7xPCy-Tlf^i?=;UqN|x+DFsveO(3(ba}J2zot?uD5oh5PFkV?L)yu)
zfhm-fecRP^2>^I|_HyQ;m>I~W=ZIvC5JiT#W{K)v1oh0~Ja2sCEXUrMXTJ419lO9#
z<(8s5WHx~LxeA#726qPP?xLa_h=P~X=U;i}?*@Xv(237;Zt)9j({JJB=g(6etg&;~
zE=I=37#NL6TF_d`NIO1vHRUv)6m2E#J%8E1U-lAp`Ddv8y^k`HD0|Y&IP8iz&jgZE
zxkpN;8|f7jyBB$3F^*EH34;@c-~RPy$+8BCW*lF7geb0KObufzgh9Q~JM=?I%?4y?
zUWjgL;f@nvgDUOx91VSmH{O`!)Ts%^$A&n0Dqn`-3lz{}Nm6+Ag)nm#=BIMPYDlNk
zBUhEu{bjqagaQ4NcwO?9u<Ycz9PEHFFd<wx>ZsUWR%DD9&M04-&{tn@J^%z(h${h=
z0ZUYcBuhE7FwcdP)0{gu#oWv+#zm+sa=!U>M)vG0UV~w6-TpO(d)DmpuQCNI{g06A
zrVMx;hk<lOXP~Rq=U=|~FTKAqQsu(*vvg)UObou0&Jw)-$_oT>%-HB8liMd58XpFY
z=rp0z%)A?o`oSK(s6nX93@kl+tiO#VqRTFu@&a9!Jd~`nf&rvOTdedP3=BA1EZ)9X
zAjLu)-4XEQ<3~7h<aNdeCwO)G(>R+F+i?OrfVEYEuv*kB495DpgWrK24n@Tv5+MZG
zAmT#nNosNzPdz=%2fk$pPL;2%SHn<OwA|?7cRyrgICDJX;Qb-3mKPrNk1c8<#j0O6
zYf+M)N_U^Wno)V)vJ6JI8_vE_l8}n$ae^9Ka14CQ)Ea{g43%0)wQi6Anw<vcr)Ib?
zeSr(pGc+1a9~_J&2%0oH$Cz%uz|gL}gq6WHiqu!5&%fTpq27S9;4Ad(uN~%JIWns%
zm9dz{(yJ`YzQ%Zb7o!7rBCf*pxig$UdxC0hfU)syjEs&kG%<uBps@r=EAvxj-7Q_a
zg~2X&t8|!^zE>c<c7W;IF{OVPzkJR8!$-x`VD5Us(;9DGCIVUJ7~dH(Gqc2FUw@8z
zZHV&=PcoamOeGq_n!&<}C?>G6FJ@X#n#q#o7qKx0V?vCCSX-r;T%h4z=8e|}Ie7av
zM#qM@FqQXsP_C~Sx{S=Dn9y+I4ab3di*wP}(kugopPtZeb|d|*m%gB&1-nv#PDdHp
z5n{u%n@yC^19cc15JVwi91>LoXF4=mvm8BofeTX?m|K`3O%g&I5QP!dP)U+GW}0u%
z;sWvDC=)yGK}@iYfam34em1fAumAC;P=PNW^K%)Ce|aY&8i-)fFthj!Gjq>UV=of}
z_fw0vk#;(qIQ9xhk0^tKBTR1F#mLwM!;=H#nU}Uo+8KFPkVX5LfTI1<*8MMUh1a68
ztc|$rtMn@<_LzdM)FI5hqEI{lU;NB7q;3h5J5IJ9Aq)qxwnAWQ7zqh%g&?RP#$v5S
zjOPrv!dtJzBO=z{Fo-o=Xg@){dK=F@dy4nIX9zRX2V45_O@CUiz78;d!O&dDutDgR
zl(kns=miexgH+mAM3r7dk>0sX6Brt?)JF_Uvl+$;p$(~2Vk-53z-F{M4Ngx_F*AFC
z`GslPttNSv5rr{P5E91$t@J!oi-+l$MNC{Jo)~AmelKPv^1p17-pfW?eH+Pm<wi3G
z@p~ZMiTlgt_M27RT4haX<>D0gRpl##H5e2+?b94>o+MrxVlddpU}YcGXqcqc=8ZRA
zK#m%QhQ=5l+s???B%|Bvo}{wqVS;l#3V;gB1t;}V%}MREAuD<a#p3VB4}B8k<#0<^
zjaV6(40-0s*Ew_M2!quDPRxD=XFJ4p1Z!$oTf^FzFsNg#ml`jFOP&=0fIhB+3L+sQ
zmeAH{re|o$5l)||bMCf9s`WuSv-vVAv=)WQk~XXAyDhDzVd`|wwtXR;R>7j|=S66*
zBr5cV`nA8<S}gvu*5Y!o6{wF^$eM;qT}ZPwi=A_voI39p{n8v+k`UPnp*2*3h}<mE
z=p1Icb-}wHMG?`qQO2qVih$QwhY?vr%wrvr&!#Z{ddgTgq&1jXvv?wxqw6ml(fwb`
zaM9l%Rw_glaCwK>=F`k9JwrveF%aECE!ssG4%1p%<c+y0%+Y|s!BKYZ+R4E17{h~g
z#6i2|J^j+e*9Ner=qB{1w%v`t#}bfUAm}|#yFs8F9O~j>rwnfoIe%e}7oK~Lf$AW$
zt(Te0Um=c%5ffl-jlk3~rh>IK3I&4hV3E2KyE{LQi~s>ftcL<N!Z^cJ`$;O*TX^NA
zV?6M{-7L)YF!?f4Pv7}>MGAlFSjzVO7Y|nTS4ayWpwibpDfATkW&^?y;+hb~N?0+Z
zZkFR`PmsEK<`<^uB#T%H34<yjg0(5F^cb_v3xwiGY=_G5ID@slgwfElYpW;tDm}NL
zH5T&K!~CqHGQ^E)45G_gKGz!aUrISx`+j2sDuV+sDCF537n)zjEm;PZZlxMc5{Kgi
zGD2fvmX~JFU~I_H&?J-Fwlg|0&d6|`tmEmkX(#LQ-;L?JAPP`h28V9TQTo6`*+wkX
zce~RsDAhrO4Ktqj`cohYS)OpZ@p)`m1+f@YAuu(+_)P^HRM9RL?=R-LqNV2wyF!bo
z#Yp6{fM9^7_EB2#an78sF}E;Jr9Mo$;C&K&8=zOLa_S17KSvP2%vmK%a>UyHsz-O+
zvKJWp26T$d$wm;yf(?9oG*6VN^Nu*MoIU><uOEGe!GStf46!kE^7AyB=V@o>QI?3p
zn2#QK7a?u_`?<5!M{emWx|Wbfix%-lj5@gvnEz5|Ai2?uLDpCDxmuWih0#rsb;O;Q
ze*iX!s11+9Ff5#Y4NYcQNSYWOW~j1{db}Gk6&4q!n3*|66jm4>o?v`(8^dGcjEvRM
z+}8}!R*uWG``JrBqtvimaI_CbmNew@F~-8+h~=rrpJ#gR6a&>7$LD?zXEGu)gfTJJ
zR57Mn1c0IdSUyR)%N8AgQuvfE>oG21K!A}DvBFH}Nvh^%UVZr}@3{Y78jFRU7#E2q
z_R)K70L=wqVK$>S5|VWCzGlBJs~h;h3t?3VqC%lPh4!M-nuE@w(rGJc>X_UHp$#x5
zr;)xuvvY!6Gn{dRHlkh`W2my1x~+5XuDvKz{NA}44^|4__invr(?*?Fg8A8W#(RSn
z0c8VTeVg6+*O6<I^%PxJ`x`yYJP8wS8TugBPV)Nf7dYE`3~4?}J(y%Lx`ldWFPMP2
zxpPcSpC+&&LqlUsY}>)e#5jZ71`wdV1W7Z)Wu@v*p$Q;;N+U{9>6dN?!B4U|#wJ6K
zA3wvZuRKSsT4$#5B8&O!gwY5h#_#y1j<o|=Q^D8>D^ZWOY;BK-Bic>ZJ;X2=2|>JZ
zDHy_Fkj3N(o%keYPX*kxf0oL?D2sDhw^v=Z@0Kkcapb8mcP?Xi656eT7*xzX7>hSF
zjl2PgQ%G7$V;b7?N~h%~4a<zlTF-<C0+?w%#p&i}7_5&XfguhiiEWL@S|Srs4+j_s
z0wxDi!qJey=W1x*6zbJ7?buw}FYBcJvO@Uq{DvFM9CWqx=1Thfo5%bcj__Too}U~v
zMi`85rXKB~l`qgrPO{K=6w~+`^<a|W_%^EX4iH$FKgaaUNkUs?Xn357ZQB_h8>c>5
z$6!cXkazN4W4+v&Ou6_KF@D}Z&y~^bmQLQ{=_j5hh#W~e%enTK2*P^txQM`32?F2y
zHzptms)#K<Uhz7Heo#kyJD1Y!0+be@J_`s7Eq=p=_G9d<Z0E%nUgd#zKZsfI14`W@
zX7RitraL=e#4taVA?kxcP=&BkI1?ebL}|<^t$FA)l`JXRh_*=2E#0g_3iah61VcbQ
z-p*ik(nARx)))d?p&HZ}h-*xkhy%BeGFM5EJiCa$u@R$AuHxd~9Ojq)fg|Mxw+DZd
zG5?CyR#_>uD1oV9O^6YT)11&$2rBz=m77SiSz74@78+m1G#mrr4hExrRHNM(8x%0%
zG{(jZ42&?jZ3mM(CK%W@fT$tuK+??7OpA11yH)W#S8lq~5C(?-{$C%bm7Jp%4RUPe
zcTk&QOwI4!rh>I~pZ-gXhz|%xg5r#sF1^_=R>2rsggVn*^hQFAiBWRY<wU_SOP!;%
z+!4}q31?29VAqblOr6e(>b~?;jB+iAK883BnLcBXFlTte(r&4j3!7Kk3+jbS9KE)u
zfY@U2s#`14?$~u#uvJ3>6Zzt$1O#FUZA2xgQj4k#gfTm!fSbQ*h{Y501UQlnn{vEa
zn18KxaYMBMbzNtmjnjLt7Uo~6t8fv4s3;HyL7l)>z2pp*j0Dk)$PN;iLGoxXnVYAP
zooBxJHG+nr7ECf2AEXxVz*tM8G0p5NCpr9j%;3N<W0O0W+_s&;(LtghAW!_*Zx}l&
zb>+almf<1z5C8aC&Q8Bdy;9@C(xWW86U3Df&wR60tW+^l!Ab>Vs=gK=u~#lO0V=*w
z*Ilhe5fCxm{(rgn4INZNkeJ*EHVBz&J<87dck|M7&oDSR%E0&l3o}{KtrP-d2x3DJ
z`c7?<G&wtUl<5n5(AE&M=ToxM*rPNdF&C8v`t=nqX^DHoQX>I@9q@%tF$5A21u>N%
zrW(WyRVv)QJ7i$OlE0B-CA>n+FB{PCyK>CGZ0ElrnSg*%gW@)=<a6yY|5{`X|6O2W
z;;2p(4q&8%W?uYL#NaeRT^j*HJ4j>)aX7NPK_i`FuJHxJrePr5!9aMBTDS`_5$#r!
zV@F=$_>tEbs1GqTJkIFE1jA!P42=YA-zyw{ZHdqQ#`Bz?d4)<`W3hFd^UX(zs$<2d
za#R%jY6NBf-&6`RP>}%`)5ZEqA<tC|;|RU6Xd}K0V2DtYqU4Cn34>ue`4mgZs|<vP
z_{KNBz+Lyem$AuljP)d)BuVMC=QwxaG*dIjSzMSUtfe&Ochj79-bOuGIjxnxvdc>J
z_%cJV2BNS^U<dtsLx@aB#a4)I$Y2<A>v)CT!va}G-fs70bXUu?<Jw^UOS4tE(d@ym
zM#1kIV18MDC`l>JFvEgiQ!NH(mPlO-QSZ%dG{tF(YK9>tv~>bgMcGBJZ5r7O^R2HF
zv@Ed<G8FHl7VjkthRM=|Q>WhG<mn@XVOaPO1~i*Zh|Uv*LaTFzvyDdxD#HaFF}>YB
zs9|i~7XeL7V0sL|@&XeBd8Xu9kEzrn<OCQA3MddGq=@7g$x$Q3@fcIBuMpS@m2@{x
zJ^6V?M|M)J$26NuG@1*vI!okPgTNYcmti&O32O8we@1$QBGv8!?`H#-1SRcyD0t6>
z&;~?7jmTCpKx`taL50a$h5e&3+v|obOOZy0tev9;1X>&OuMH`$Ip)7k#lAPc2)ImT
z`z?a`H&75X1YH9?&#1G$!X8vfvNl=PAa!kW*THE9WH?Q6bZ{=kX+|KHARa);$?_#S
z`5b53Pb00zh-HYucrW!}4}lr;qrWa8annQ<MO>Yw*0Y>%J&vsmVQf&O>`|BO6PUWs
z089mADj4e*zd!6n!liw~$z7d;00=Pz7(yJ84*;f=C|80?owLm^GFf>am2f9hQ?H>@
z-ni2Q0muR>^E8qL7CJ|XrA?mw7)Fe*DRgUFJ<6Y$o-BGvl#)XISBv7GS6tV^2O#iF
zzaSzYU^uR_eW1o<JzyX%MN|SvENM%~jJYz*FV_L{ud6<M!wdsmFU&6+#{9B|S3&={
zYY-UErMI?V)_JM#Y7paGoy@gKvL<QTCU<Q_I~XFI_^iNbhLVChPt`S52qAZE(tLpn
z$tzswJV&4bu^A$^qktuKb2PIvB(#aEJG$FxiPr;LC9ppAH@1Q?5!UzuAf@aXCDqpp
zca&OuJz~G<`&twOiBNJ+7?K>p5!fM2HReL+4+xSPRl6M{F}b$M+VdoC#`A-0h*}}4
zOrUB(T(1DBE2v}j=_pDu1m!Kt6mr1?f>`hQ=Q1U-F+-IhhQcbtm6(CR6Of!5972wP
zG@#wg$)w+LcYX1hjf|;p9`myf=I0MF58$!}d)CAJ>qPi<Fn=!>Ey*~ACARg#8KM>u
zN0vd7=71xNs?@_OS(K8dZPL6+-pvY9oXdO=kQ76Pb1AARR$@#zMkN~a<GI=)aZ5C_
zlQ>NPhl#3G?IeZ4x6eRKP^ABL0y98h>P29Q2yBcEB5!ftH#<>g0jj0Ge(8Q(Qegwc
z1b*?W?*f4HY8nViidcv%ljN>J!=36f0F4-ISSPTN_gzd9qHvJ77SL>JZv?|#^f754
zOVs%MKMaL-%TSGksFIVVUdJ)8Pz`E~4@@v#s}mPSpuQbwP=w40X|9k4bUNOb(Oz@R
zzuwNj5zN1AaC{Xbowq#?fXfo|SVLQA^L}R=?6k<mU4bG;HDVBBNHQ4TUg6d|N13|N
z;Mf~;EY2rb8&HXdh_p_YC1iPv%(ck!gxq!f!Xm|q4*;qu4*xSG!)ioe1|ZD4^#n&&
zSd^C>fxxr%Ok9lp*0EB<N=#s?1VI&JJ*Bs7qxCO1?{VmmemY*k1~dfThs@=E;deU+
z#ycK4-=+-gAYw~Zpd8hFnXIdr2pdEML1EyBE4|OUxZaBQ0W2((5mjsmE*1XZ4}P8D
z;ceV?$2YTQZ$ud6WG*M`1PoN`1#h8W)!hfPG>29OSu>#31YHpVT)w&Is<oyKj`Yep
zFGX(LVIb)<2)mY;Up64oycYJ8O9w!^nsz>oG==iV{SRzo&n+YD&nCJ5-EEE>p5@gS
zXE}eify*6HTp^4q<Zh7MrKDMdENkOjO0Ee=p~_PR0!=(cmmH^AvCy-^BSwn=VEx~h
zs3`W;u%?C~#)yXi##RbKPan;<FfnlsFLENTPk*3S3lJ=VF9sT;zH3vu>U1x3OOZbm
zK?0<JMZJ!KBMd4%lLP5ZGa3t;TT~3SK}WNZqZ!!15d<+``pV~d;kExCm1vaXC!Xi_
zgYV<e!CP6HKgaBBgE$EKv=z0eYY4gXLZC?w*@CdJ&><5DmhGpP!|+>Yq*ty$#Ad_f
zv>Sp4uu3d_Q!ziQerVqC!(Y&@u(L5mS{+3~6vZ?eIce$$!iZaM-^sz-COLOzfmdFd
z=H#&komNg5hE&3sFsPE}33;B7W^Hm3oJ)$upZf2~Q8J9CJ{U-!o^YudV62z$D!Bha
zQS`GW_O$?s3huw@3Y7Gl-6<D)w3P0<K{@1Gh?^*49Fmu#vKC`3XxhyT{O+&Iio3>I
za1I+(yBSDfl!OFIAQ4YI`4~%$^StYw-^So@g}9m!MKO<k^+le2@pl-i@4-mG{Nhm_
zfBFQky?hfR^)V)fws&pXd&AUT+c<R|0wfNSBqHgAsF*9n{IWSrf0>wHR<4xaU_5{>
zy4mc`e|<2&toXX5J36ZUz6R3s60k)o+-i7s+|He2?A|lN!a|$Fhi5tb@(i<62_imd
z1cBG-%QYj{ggk4Lxel(V7kJBy9K{vi_Z%*za3?Whu{QEOf2kCOz$(_%ip;_EwfcIP
zvtM$%bT_6bo}sn~G+|ea)URF;H8{yp=Q9K(FIsj*kSeS8c-WyP$4G@NQ}2c(-lAJv
z#ADxhf^R(i3*>o&^XFgVw*4RGw%c!GX8IUkf9%((L^T455D}_j1uKS1SY@y_USvqU
znFd!_kmpXwr0`3yhQ$TL!lJ`;$Iw^mt*?*y*K!BmIOb;^%)i<-f5S}!vW}R?<$IW4
z70iE$|3g=kr<(@%zvgn5y_^$p1%J2G_WbioT;cxvcXQ`mlN>uT$Kh9JIeWT6nmD4!
z5(NRyRnVZ0(~R6D<awLi_4ou@1OobuH2fe@fHhH32Z#x5jUX68Y}6IDkY&KX=ThWc
zpXR0%YQq%z1%&=_rU-b>yB@1rL^IR`{&h*#Cv_I|<_8cm*Tm4oiltH$8VgEL0jnWj
z`_k8W^x6MJXk#i-otgO~Jo?PP<+V3%qnXSCo_=fyup<6B!a5^^I}x#d(Tf($M!H@K
zDuqK(Zb);>Qp2*)NH;c6Bb%+lZx-{L4Nl3vImRH@xdtFtX{7hsVg8k#$1g-bM(cOi
zf=1&EB91i4h~fxqAj=8|o7~Y@@>TnThqiI()^VmTG<fZ`+5dlgUm7FVm7VvUd+)2Y
z7j`$vCMi;+7D^mSn#CGB_Q;;rShEC)kvIW*62S1EAQ?M={li9p*gpb_F^t53^CJlC
z1Rlo@5Ccibv4c$F#M>-A8haK>9?wXm))7f9T)NrpwYsb7y?al7-22|UulDM_d+G`r
zkzG^ORj=MX_k8Dk=lgK;?PaVkN03q=2m(kbNRtPvAuwxb6FGQLhc=N70!RyJf)u1s
zHVcpiC^c+_JV-i-Kv|-FeBTO@)Dz$-=*IN|`$Ls9=Y@#p5;VXOz#*6wKmt<cY|TOB
zov8{e#4!d^hFD#xqFy6RKA<rB9`NEfzk%;w`ya>$<zz~+SQrABuv(o%po+-JVf)#j
zpoBtR6);?yfE3D=EF7B=R*cnpC|IjBK>`sGLak5@3#e-eBcc}H{Z3>4e#vVNt}-1^
zO~5^b`KiS)P`e5Sah&SLZ6`oV;P&k$eD8ZVFg`wv)2AkIWO5k!oI)5Hm$EX}*CPPH
z=%FF}*fS&e$VaQVd1DE0y}pFIx2j+R<nq!=k+Xyld4Njp<Tqd#7*4D0BqW4XmJB3w
zPSjJTvR0naN#cAY2tpXgGK}TGB?!`K0|;NI)X{LsP5FfotN<!m)}Z@+@Pi>UBuNMz
zfT)N{Wd&dTv#;Qx;~&E7Z+s80UjI|%f>B7yxmt#Ta5D&&i723?)iB7ZJOWulAoH$s
zK(4LnD*lw>e*=bgW+{;oh>XO_T7cEMP7GhTp$NFQFh5$Dg5Utkf^P`(ci{na=qPL)
z^Ec)O1Z`Zgi%iDhRw`hvTE*I02$&Vj&n;tkG>;PxOyKyjF%*k=7-OKdRo)5f8uhw?
zlmQ-pd=ihJo51YsD&BZ)0oUJLLloIrd86H+j<dhc7E$fbY=P1-6NMG^jMYQf-~34R
z4NNTShtyfuw$cQMO%m8rDg?Q}QgVSHbzF?Q0x?yW9oa_8JR+@;Q^R=W>I`1F`egt>
zDSz0tQf&Ys5_bLo3Q7b}s)Rt5pj>bfo{$Mcz_2Y<S_=i|mPF1mi3PMFgdo(kK&4(p
zB?_$<T9V;x7v^uVrF*Vbp(!h-gE|Zp%R%*r$*Dgcz$P$%`?)~@qjjod?>X4$2snOx
z47cwrVd;JaQpH{MTU$-A4#9$Zad&rjx8hc$#i2kUP>K{ua4Rk?6qh2!9SStK2Djqw
z*20H}aJkR@Bkp<5?`QYy&O0;j&b~uzYWCCrY&ozEc|%JhEf;0P&L$uug$9_C(&B04
zu4Ie>k?b(v-8C}br8v80-d~w_LcQ@66FW`6Ee>kMCDnlW4e6EpfBEt%QFNRRP)OV5
z5T0+<qpYPDFrYZ0IyGFO@PX=Uk2QBcX$6zBaj!C}_Q-7zUiN@8@k)%SfWxCnUjSO|
zS?DR@>5}RVN@-cIkB1J^Q}7BR@l2MF2tiDiAcxRo(uHCgC3l5(8>kKBc);tuwNYp*
z_SLQJz$(su8C@Oq0I3*Md0D5hS&;!%=Bi%Z^I(Fh#u^qq@JL1&!Xe^+ksIj$+=c%7
zHSW$X>Q1JFP<)PYOjDF6zgeYgRV_+iu_|KMIdSKbzB8O-4!`zG6y>W?s_$&`kgeSR
z(t~wr2CcLw1lS`7jKi8x=%vpAGRmZ`e>L2sbh4`3V>p%{A_Z(XKpH25r^a8>d8AO%
zI$2Fc&1<pl0!B1@GIAI=&38y?p>~PR*r)Q#998q~(#f3#ZK9>LD<SvU4x@;Gr9%P$
zfsMEzwCr|lfjTj_t}LC{D*DInL+XrxfW>C0y}D=6N1EFU{+$Qut4vrc_QKb@Phek4
z@5YxaL42G2v0g8nGDSLeK|&~DOGaA*O`!~r*X|p-i`6&k@8X(V_-CjyH_1;qT=3Y!
zWp}4_IPox8Qc?~uvPD`wUn}2TI*|Hd{F#p2v8A);oh3FR)deys=of*QPg)!`h-XNs
zQj~s#jx{=ho0grPJM2=ri7Ww4ut^E?k7uj-%?$6~h;MzzI9_I1Pku>Wnou)gXFEYt
z#-Y;FG!@#6HDh;9laq>#H`c9K{C=}(`CkLRwrIsgI1VLK(9#YN1iwdfo99}G`Ovq5
zd2QY26^IKPEc&RytAo`mxBs>X<l^l(J(+S(<0WRpXj7sa*GgNftVY`o->e9X9wNjS
z@a*^$WH2{dy!t%ZnhT1WlKXsx_QWJa+9JBS@b-?9yPO>K9GOyFc?QKC*RP%Ag_%?8
z1NDLcD4B0e{%k!<;7nn}tbVdhEb&Ic?^;|gFmNXL^+YY*R2~VON1?-D@{cU~n$)y1
zJjaGKL>(zxdGGATnmJ+JAdMBNSbkFBBx^_w{(<)D6?a>}nJf(z@8&LQw4jV(6K_or
z(ZNJsZ`Q23=i?2rN0%QxH@68#VO?Ea;!?Y+%;m7)T;Fh(#qtJCw(p;8a?0n<*V+U{
z1Hs>fc4Jc3tmbU`Xrn<N%RX$IFf<_1D7A%MIX({XDBPq!R}U5_YzA+*Y!UyyXMGfY
zJ{Q!@&2sN-Sjmsg$zyaJ%(jp9>Y0F~k{uK2i~Fc&50=JDbx2te`FP?g1^!6G|2c;_
zMOmJ*)|3&9<Q+sL{NxKGR9iq9rm(l%t+}Ws^@Q4zdHa2<>uieiTklG;Pb-#q+C&>9
zAXqW5OX&+|PuiRt@#5jD-d^(~ud5rTpyy`WsUQBJH42Jk+b5&kdpjz%<Y^kXLBQdw
z*9dm|E_Epq6fj})1aEt1Xc_Y*F1AH}i4WNJ??sjuomFn+pZ#f8sZsa>$>YApy8@w8
zXw6(9h-S7KJ)V(*SwHDCCPPbvsD<R}w(smB;$AwyhL#1~-4%W>t>zz>Aj`t^wpCU5
zX4M4?#JqVp&6pl_338*l&v`*=q4NnoyAK~gWx6_>hr0s66lGE&{DefC4<FE^W|9q=
zW(@4mzLPE`u$~gi9Bf4??6afh{C5)k%&SEcnx?>LNHSTf&6mtMNR-S<B-(!D(D)_Z
z1W?@bSD24$Fs|RrHZ9olYa9GKmTXi)wsBp7YFknHzOjyZw+G}*2rv$`btq_7;}iCK
zO}&a(Nw}|Q^qo+o!CdFggxOCnlC^7K&lQv5*huUbN}f_ul73N@x!Q5|+8LBx?P`p#
zqf!F(_9D3U555}EO>FH}FiUvZ;SLl4?0K5Su&XCRo>d#Yl!d)~HcGOyvf*l+SYb!D
zuiYP}>Xi+0cw*R2C$eD9Zdfns;~g%N)Um_n!J=#1Dp_grqNcj7Sz98`gyypaDrzAV
z0uD4C8<)V-5xtn489~7widYK=!ulKI6tTE_m$cdPCp!rA<V!dyz#mgk-ktEOud--}
zmu0M@)|7m$;^Hq%aBBHg?s1_aqgi*_0eycTLG8|yC652WzHC+XLSc!D4{tAZ?fPKC
ziMNDr5NVk%-QZu1rDkmAi{bIO-Ue{yQQ3{xb^da$tN8=i&WAtcC(3}O<k5ZhLaR(5
z@ikHr`$h|ZHz!(~wrOM;^d^}qq?8teU2K!>u1XHz>=_y^>7kUmgpYpYU^<FUWm>N4
z6G6lF3x#?J@dpS`;>(1Yk#7f61JqC=#_1alKw80e$aM+`FBDVMkK35grrDRA?PteV
zYUViHg-Rl|C85J6u^1*i){hd8f3b3;BtxZJ$-Pb%fUn58Zc5^C*W2ZiZr9Db`%@TY
z{67Mt+0_(!FR|>ZKBN{=IZqs@tj?aH+jIOQM~gVY=%327Y~x)yU<qYaexu2(FLO)L
zL2BN#GxZC`_*USxG|5t!t;OjTDq4qO7&+RieJ|_7LJR!WQ%v>_Y!404kHN->m0~77
zY|CpE>a^xr{^H*+NTmXX5IRY-6M#@!5I`F+il_Pm?*r1k2XXk*vfLP@(up#qLMb&&
z4bOslwY@nanvPPDLh?w*rB$=~l@fMj^u+6JcvfF#M{C536zb0UDK@S!n(+QPkNx>M
z@o1l_%;$4b{Dg0X362|r;s?4eIs#-@CGdn)(>~!NHpiE|Joy)z_cG|i0R3*s*W`?{
zxQ#CdHs|ZYqLh^^xfpCo3u%HtjTzihhX#t*_!p0J4&oCuP$eA<c&{W4^E9gQ&-lHJ
zTib{wM!243*nKuLt?&ESP<5dYU74e^LBw2_@bs1%p;Gs-kFl#?iV>@d0j*-U|JgB3
z&AVLHLJoZ%uD~#1hLWx{w`)S%VF?+*M0&`BZP2N`v)BF>7KpVVi}6SA%#&#6&Hm%a
z{<Y}Cuzb6QgTFt-7vO>a3d^g^mN_;5*P{|$|M;n*Zlug?nU@ewk9o1TI)_%c;-&Yk
zyw{0H6y6}-UxBhJSlg@3X&#~4i<Q)sgOy2JyD{P2<S}j@GxBOf!Ks+yfMJk}x*&9H
z92Ty9>OfLQvR~%wE^!%cF=hHElqzrbj<pq0B>e2+VKR8D>%oz<GG<2T$(I!rE_gS_
zzt*3Rs5SF?dc0K#GvMLW;Iv}3dJ_s4P^oqj5Hape)63}*p3E88Ibbv3FdxdhBTU-6
zOxTCF?=5aM^wWB@KCVrr((_QTJn6Y~8m;Kn8YOrn$~z;lk>^(g;M(u`p19iw_mf}{
zS55?pnVFY}weB5|>E7p`j6x0(Md?fL({+S}@C*O^8vr-+U>yFo(&~>z*YlHPB--MW
zvc>$*^83GxuF4ngSBO_{zlG0Z{1+7(;BoCPz7HPLFM0jkB@qPjzJL;>oydnOeAS<I
zvk?HIziha;l~!&Fd8_W?1Gc}1OUxYKyg_|!!_Jt_MZ*kLZX6kX#RU2N%t<r@U4h)g
z2iUJ}JFIIH*wNMGc(aJt@tR{CM?TSimiG+H>(?cjazn+|8gkuQyiFy^o7T|T+wI?E
zW3|ke9d<EHX+dA&A2wu5Vss|nK25c?JFsO}8h!Uqz=QK65bLzd@fbxnk3M`Z-ttRr
z0b*0-1l8WClvcLs;iYWUGN@3F*?z+rP(5@J(1Z8`*e}Zyly6Rna}~lQ!v6W%-w#<i
z<%23_N<K+}_anqg;Z2V9kT}ej#2V3O_O}|m+J9+?ejld9r>{xHYgJ!Gr#4mCpVIeI
z{lTTwq2r<_tfgz<)RG6$g-Cm2I}4#)VnjBmbWzx+#m_pnHmfdoJL{oj#9Delw4YSD
zPQGr@-kHb9i)KY~A`k46QipR!N$Yp0`)~H5I3<sKFr;GA8Ozbxl61H0%cB0>jAxf`
zieV4LzH*<f7CU=^IK4UR>f`Qz04Y1j^0pilDltZ{M@c0gx0Jo1R45c%IAcCn0c0%6
zU2{fFRnWyU=JG*YXIQp9jPmH_(hb-r(GL70=}T5(!fke^|J6zyl|nN9sS9FH+>lV+
zJ*58IQ;}h9H&r6{@ivUoh<QkE|9mJggM<YCBWx&fEr7Y#!D@>yfgj@t7Z8{baLLg_
zqsR2|CwsE&ki>n~GnJqop(b}y*X{Qfsvol`P1rl<X~`;*5^?{ON!l*=96JMc(9_ik
zLN(Y>-v(ApZscNygnz(Q%0238qIHp%B7H3HP;I}3QcB+d)?wGsf1XHs<)4CcMWPxh
z-oEeZb2C(aGuXuUWP{;54=Z0XW#r=3Cv`XB;r1LEKougwC@GgZYE+F8-GiD?a=@fE
zf9{RW%xS;Z(Bp?)qAbLy>~;&ISE)k??tPRnr~ExBEaG$rom74RJc1xJ2fx1=P~jK>
zzWyMZH;1zgSN50pJJS(67X_k;0LQ!M7p;dLmWiDzt%vG&=zSLTJi5ypH{^n0F3`tB
z;1-|*^@10^aq+(N$-73se|T5I1OB!*d<RP3zKT_q%?kRu5W6`3Q<#MT?c?V!X3iH?
zo9AcP@94U|2oof17tZdy7!i<h99tyK=+_=x!=p%H&eL+BN?J?nVs*PT4)c3wT+mDB
zZ{tJ>VXVz3PSeMP+H&nRBaogZioh$45v#|xYmFRAS1lZBym)!1I>A_KqXr_$r+6C6
zD8&$okm-o|2OigEGLGGP{d)}TViNuKtxxZ4zr;(efFT9)@C}zMdSk_8mEy!(z`nW}
zd;^=Se{%erx`N@>LoUBfgG^*fA%X2U592l$&>RB?#rAc8MQQ{o8e_<)E8fP_#M{mQ
zAG#sk_|3xTA<ykUgmD8j#sK(wWs${va?uuBoTbaZalO2axA6F45!p%qzn{q<3obr+
zJHNsf=^RFX`PQ3}swfxy)zsSL$<0I<7P?&#d9|=@ar213nhr*yc+EUV+Y(aN2?{uk
zQ&y`C8(@9m-cTG^?H;k0&w8cPY6Z7vMs<4$T%=+MLn_E=VYx#HT8`d1Iqng%QHh{q
z+tutxsjp78+jIS8iaiph*Fq7DgqN}YtVF9v6NE|(-&((}U34{u`E8gF3~S&M<j@S<
zr2y9<Ze&s-$&x7*6$XQ&D=SUsXyOqOU6|Xrj`K56$&qcHD)1jWV2Isn?y2Xf67Z7i
z(T2Ta98XgIGkRCs#IR-=Gt%@Fj_T}&fpv3h5_8(TNYnGa^6LkQ2C-9~!Z)^F_pDXN
z;$D}9`5GJ(!QRi}ESv40;Tz{u+q7|Lt}mLgA93fHT~qUy`QRHB$14Q;7dhXtI0d~<
zZL6wZET9)U^ya*ef>$1omvy1oQNu9#CkW&&jADz$?KQ2-3B*$RLA*Whc4fncrWnFd
z7pV$G=BGU-2*;^vhQs?GGlbdQv=$qG2YR*Q!DCNFK6A>jtK?v4^zb^7*&MayES)nI
z5|&+Krv1Pj3_y)2$xB}Sm#$0G`)5&%t;y+UY2F<RHbzOx)OBE6t1q5$jOQ_&ok67z
z1->!fWZz*Ce0E-4Qc0pobP4f574lSE?YzJE)*Y0=q0p<pB(Oh}Xa_m|o<cav94!dB
zB;pw}^V(UzunoR;Ocz8`l#H0hE-H7ed>jlh@2iWlMRh+N<|1My2i$jtq;sl%BY7ty
zZaWcSu_O4OP<8X5n+DKO?B+lFoGH&RXBOo)7e2-(>7km)qizC93W_oDzj@l8srIo=
zWw&4}OPj#pOy&1)RY|LhUhx&Y;wz%#WfpSVEXOCJ%4|mG;SI*Ta@$Zj`b&|R3&Bt-
z=RLeCmX<F8!}Wq~AsCd5-VA@|vo4VT&7fDt4n9%>1z07`VVU%6Sr)Wxn2%ETD>leP
zaebQF$nHXB0wx*bAp}CaUf}jE4eb-!=s;TeN3!ep=vups4k%%3D%nPtWc{0O1kEJ)
z;`x6n=8@Bh&&7@8?WQMJNj#ntWAT0S&Ta~xOgQc33Ea@xbqohKZrtsZ;3(ps|B=a;
z{hnlUY<p=Po*M!RB!ljhEEdl(Potv>p*fOjP*Ze;Wi0#5)rVXb?z}`!=$zi`744{{
zw1<2<&64nosG_XZ!Hsv($?o`o#ckl_Ey_O<P1sLoxZX<K{R$rHbxwx<FIvh7hGBce
zAM?4&$~K?pq!i2C?&*}IVtt7?(XKEJGe(o85t|`&F_gBRjLaKXJvA*dsBi_WGMvOw
z_wWr5^HTr1D4SVC)52!X(nZC2!D1jg?09n|R2=`xKQ~}s<U_p~g@|r@YkL8fSqv_3
zsd$R8CY~bhE(fLy(6cM7`LEPM@hyY)XI#C!-rc{^Y39#Oi!jT~{1&vUvP1<>BrYNt
z&?Xj~<@q@uBc!6@N<<iyaHO@mMJDq-)DC%bIWta$ao;PDnB!05mZ91i_?#rr^Z;Os
zg3>VgQMfr_EgKgaV`=TX>*Y0z&VN$o>zzF*OE*b#oOMd^Q&Zy(tXbhvz?fUFDLj(Q
ziI;0+J}w(j^vDE?R76=L=w$Z_Soj5VKJiywoA0hBDupl$P=lD0)lo`LVvbwuh=b`1
zXE+k*26hkCQ^pcRI0$+gU03ko8}FCvWnExkr#>5BEnP6`OWK<9l#K$1TQySBWiMvo
zX@Hg?@D2AXdmM4-!CZ|oo$_aY8gA{zwsub}=3|4`@j<vu6iNd;#if-XV=Tk{+_TL3
zFxvDy*AJb){d+NsKB0;nU6p;Z)l!S3RC1#7%gXY0okH0!Vcj&_ljK_~dkdI&#VU+e
z)W)Xh#jYd`?rFof<DDYI1hoNrFs>hHxV9?GZBY~}Vp4XT4Y+70mH2Mkg}%pR_ae?{
z0;hVKiu1>l^2DKGoo~VwYEiqVi@iIO7`q)?5+(LKl#Z!T+GQi}r{(uA)U~+yJ`yC*
z3``BPn0{R!8oz&zQ*I})`S4#f(FpNE9~r|>hO#IIlW9jFn`DX(JlQ#ASXBr&LL(Bn
zRJm*v1*B;`0i>e2|Dg<i_|f%x2!?VoB>#nTl&zXxq#Ri0$?}6{WpXPnpKkz@8Z^pS
zAOpmB-4^Ehgt0JATb`=qvW><THKB|>IX_e^ReFT<$nyQ~%Y8*s;1@+grR)G+yQjAR
z2`D5$9up8KKj*r?#vtIWa?IlGAY(QnCkl9p6lGJn%FSMxa_hCzHKe|3pBO&W{0p*o
z`S+Fw{;uy0QZpVOik8Av^a?Y~=8qC8<6Bb(l5qSmcXn)I&Fi(g*^w`g&!@Rp>82Ox
z=HTwO|D2k!b_n~-P4sv2#{ODGAfy0+EjxMNU0!6?nCNU)HER_?`XxeWIGJ@XlW^x*
zs8!x2)3PV9`S_m;hso&a{avv5iu+lzfiwG?I+INK#{e~bh9;~7SDN2A0CIji7-ope
z=f|6is$AK}FZ|1Zg7#wgBEB7R;@3s405lpNVj+8OGNHLS^~WXCAUtD$`ptJJdhtDh
zy~ClhKtss&1Mx9SvXLW)Nt3(xo7;C|U&!h5Lp}&FY;Z3g9kFu8gy^FY{b~OUE|K56
z?Km(Ls&=-D++ay^j0=HleodV~x;bajDS00TVUPh06uPm)D6b#h@)&P~r1+#q5$p^P
z&vKCBH|x{3<X1wAClYLsx@x&AN%xH&#{EkBg*tcJ+Wb#l%`R4{-xLF^NkX@k7=)c-
z4$HE-fIj(Zxm}Cb6$gti{?A97=^+rjYcdf@C?NvDaDv-7Zn3?(fQ2cyvkO=u84BXc
zqqsrE*kLvlT3=INv@(Jky*Y^;#JQvoR{KX~92YBSlIf$UrT60}ZK@jcXTo*ZI7%*M
zs7|kl?0*BP7k}gQ!~iHbxERz`HHwK$$?M+);#imxrmG3~-Wia7QSa<NmI6@{8)1@_
z{YH}s^!mBX7jFJ3Jsa%ZDwqO5n*?;9&Jp##NIH;sIt_9uQriFac<m6wuu@rWXkAMC
z!cqkLG6iHLolm1>$UuG*zJy|B1q3ctJnQ{4Pn8rSxqW~CMgz>%s(;5No4#e>P#9*2
zB(Kq$v{1rP0NQND!*RpoQR-Fn9Z1JQV*dzBU*D2S7p3Y=OivK=>OLo&JgszgQ)mx~
z(uDQs8>_sF5BUV5<+E)@V*K3a3p1qbODof-ll$uB*HX)CRaQLY2IDTJeLDkLF7d3M
z<Y)M*wis^{L<`6ZzA+aTZoF_t;iDSMAmSHR2NR(uElC0T75flRK1{<EN6SrCT9L{m
zWwwJ9mD(3J_eeJi!z9~Jhv5nWaRI?(K0M5zQBW9T@@V^cNbxEKsxodJP!V;I%5lyO
z+c}R=;-j(69)y-FMBFetZ?i>$qU;)jP4|cd65=aQVEY=+29+~zc#H@wsyl!-qxr)2
zEsVefUi|3}Z7>=_V~FuC4$QC`!$)-OJQv$#vpikv>Qn0^wh&@C+9~i0>EtCCKxy;K
zzdl9s%TonNMAS#|_w@p_TyUB^5(HpNyDy?bld*III5n@9ho|c8dlkXqiU+3jKPotz
zNn$^Q-e-$J8<CcQxsoX@2#RDSn@^{>i8&Br+k3us^E+^6{xej+85^5JIohPEdZXvz
zLH4lDiG9b)Z9LVbsARnKgzD#OiAQGQ#zp3;Y96JNU$ZOP;&PUpOdUOMljst2`q;t*
zO;mn`30R;|Cn&_*XwWHUkrrK_WLiGpz@wq)UK;k7h4el3Y4TAi)56I@8XThwjyhsi
zD`LMAX@B3=0P}QI8r5plzFd@6N6`n&{dHrP)y1O<&0UwL=ESz?C4b(nh8bmlfB4z2
zn1vC44<LHEZWas43aS~)8$vXV+%9nQH7|#HsVT4sNcmDR7njvHT=K13Bb0Z|lI%MX
z2D>;zgsSoLhkP+CA6-H1R+NhRfD|;&vU7eQ&1a6JZ%!eL@7|yYB)PH@pm3Mbwu{Ks
zESEh;X$BAoprH?cAwpv!ATiai-RM>FM^&3o=BDl48X+jur*L;+++TtEZR>x)+b4en
zT{%N1RFqD>6DdJa{veU^zL2}SFu+THK0b)i=&E`GRzk*yBh0Jf;wbAt5Bck?n_01v
zr!&LZo34Eo_n}<fjCtudSui}8D8Y9RjJsFP1&$$8RX`;MeN_&Vh*7cvV=TqrxP>gP
z8HCNpG_K8$008I5m?BY?Uv_0@tEJ+l`1Y<g?>mn61c18=zY+yH!{`4>DZNwmcu%2R
zOi=VjCMN~`3+veT%ClUt=T~+}xf*wHCd{N6rU%!{J<+UrRg%GlRlWEwr~R@w>0S3#
zTg;i>v!4Z#27sJ-ia$6{11Z3K`XuvX;w)2F%uZGq5ip4O(>tD&D9&&{uLK-b9x|Yl
zN^EWpZ1aO+bY24S$>hVfE_VPKM5<IL(=u&?`b-BDQ3@rMF-1P&7M9+Tayy$!Xi>h*
z9N3bQVE|(62o9_6nFs3f?<>Ou2}L3h?7bN*zbWDdp#di8xYdj1i<8|A^Wuqh?64OS
z^aCh_L6z#i&znW}$8(L?!UC8)sCBTD`XR_?V7Hr!$i%w8Ik*hq(@tcOi;#T)8Pey*
z=zx*B%a_#;1HXCw9+1b^K2<!wzr61XlS#B`yF=N%B2XwN7NMRS=Q^I|YI>(f_L&G6
zqks!ai6%zh<pf(sJJHTByBi-b7Vb$IyMTUN8l-Ct(Oe~`F4*x*uBG`%UvF;xnJKN#
z_JBUpAqLT8I+BCL)=t1nu{KQT7#q=p?OEUQa=|&L5*#RiZdR-y(|p-S?MZHvUxcb|
z79!?tV$?n@U7Azo@9WE&@~5n+Qv<F@--FqfCiD`QGYiDzCv=4@^`+Q4TjZjfe@Mst
z6eZnb(du#8os-ZY?a`kS_$tuf(yh**L7@_W;<nZC24@4cM6u=*XrOS1gN!|=oJ|yj
z)W4Yjn>P#jZ*yjjiI?4#`$+9<cfEYk6~ca9fscvf<LV`jiRQG>ZetuZeL0ZDJt-?M
zJAQe&cgFgBT8b}-67PKgv9-$XJqdd+Bkb^-H4~O(O7E_h54CS=$~9Fw@FfwJW~Y^4
z%mrnP@+_D+5zU(_N)d!IrSr5Sp`hv$0Z>nB;YXB@dtT|I>M4^6PB=z6Tom`&1>Vh_
zB>NjNW*fftNDo}txE<2;Vm!_F2jF#(b=Kd1{BQ4fpK@iM{M2Js$ACbS-!K1+h^S(H
z26-d0GH#2^)p!gfO)0_q@4N7X0@Ia0={%w8Nz2m^1`B!#Psz@(4ps%Yl+nU!C86|b
zuFN6u+l7<%43aMxQbfno?Gm0%Z?n(wjoQezt&O|vnGYSnw)t7g?|hvidxl#@!j<y9
zheA0&<XP?KQ#I40Y3WlFC+2SAc15+A0XL^-DMkZcbH<pK-o4mGf|x>BAzmGK1p#$y
zaKe3>JSDLtz{&LcLz?xk%WL$_&+8+z(1WTTDwX_D_QU2yh+Ccnf{YP6Y$?{nz}_X^
z;+=+TD8&m)J|}i+U<p5j6&;4%2QDFarCzD<4w-+y%2flJ?CdZ}^V8!%oDTd`Vm=co
z>St%?2k@A-u;^b)kS#8hH=5+bo?eJ)JXm6OzJ(2>sl6rQ2BW1q9JN_Wq)IK!pn<1p
z8g}`EJO6ur9wg5<;OfE<gRs^GE9YQn(iHi6xYv8xxVZq=1ov%%3;}TeA`7}6E7sLM
zn;}KYbSt)h@$nK&b#?0regQE{MY07gJk9FG-y&CM&hoOd!C8FP$g1^(w;aCwfE?$|
zB7^vRdlhco&9Fz|vqSVN@RYv8$^#;I;{Ii^I)Z=mm2o!*Sj)cDcswGS27-}i0>>rm
zdK$+(cC)`odS0i83)-r_zw!oTT^-b3dYmb>2cp<Sg=&91NAiy+B|RTDr2fbkVvFMt
z{ItRc*9*kH@>@Zy2|}aW?-ISQ0*S6Js^y?VOrM@J<-Z!uw%ceNm0w<22OqWb>*-mi
z!k$)OHok7;=XMx?mv$XSM&xtUV8lN7==~Ex1{XS<%{AfP1xMgn?E1dq8{Ptyc#(3z
zcgkd!*!vaSOc6XC(c9tdbxZY^<A9KRX}p{Nghb{O6e6Q~vVAXLD>ekbaBoUnpa*W+
z)rQX;<nfgOZHPx<e!1I6BO_~rj*N$kP%4EM?!R+J&C?tultr7I)o$NoSllJfhUoeb
zXIxK~k@wOrtpA1FW39OXr4#NgJrHNzh+rz8n}mBJJ!@CivD9{Ck%cw%W@<-!e(YP>
zxCbfnMjwOF54~o3jQ@EBy>H(+b3B-_g!ava-Q1EmEND>x$_|lqM|r6`5RiZA0r3YL
zo>V=6c=ABv*(2%79>n7BvEUy{I5g_s#rQupLXlmQ##Mg~&OMN_!~nocsVm>eqV;pa
zH_G|^h8A+-ao@0Dj;b4}$qk{ii!F>3oNq<W!Xp#g<+=0jmg<RoS`zL!kUxM{m^B&e
za+q7kyjt#D%jTlxrXuscxDpzJ4daYk{^zZg{B}9nV9oQ0KSOfZ02kTK7t6S!t~!xt
zSDCQb*LU?@^RBElgX>ZEAnZ^x^KV36NbiQ!mr01xmbPTl3xt&z6fqo6A0Pa_*)FR&
zMPG#txdIYS!hn2g2NTF+`7}kOUwo_`jK)hq5ZbEsY-)?t_0V`EyYeeG1t$f7lQK6z
zL?G5UQ1Ra6xYg(LtN&dfVd4Ckn;8$1Kz@K#d}%3P`Qkc4Jb$tDMw00VI%kim-!B-o
zr?m~l#)z##)*kZd4^5MDCd_&^(c>kh2VD6*2E7bdP1~Fh__2_V_qq55O@ko;-}m0F
zAOb~D6{?uaot*g8^ki--C+mivz>K?@3(YYa<<%yaM~r6|mE=0vG^a~H<)E+^IJ~)k
z9Mihd&8H8>zxm`3u9+`$Fb^$$OnLXb;<XGT7k|#f2S5n#x{IGLnVHNUCc{3`#}>sg
z<Fx<F(8>1wBzbSSjwrf1TJ|Y-PWx}2uk6GLOO9ImF%U=VtkzxpC4+f6TM(L?RsGe$
zYi#4hmWG3`S<P+s$^FUs_l<Zy#G4<Cl*LBbjE#L4U+SsY^{@aAQXjrPh_88T__GS2
zs5|7E_6|B%Rt6CL0Qt0pI84ZUJxAZw8trSr4&Q)L8_H*w(HBqX64$z81U?*JfgOsH
z9@<)B@8j4wu;=RL0-pT1gLcxaAG7sflK;CA_Qqic!T<-1Xg)W9#Pi)1j3eSslyUBT
zNu{P(o!`NI2R!{&#(O>6*mSHaJfH&WL&JRQnjIar=HsL2amj>`<M;-SFsem`?LgJH
zc>L!9ct*trdI%2ro6`(a`kQ?o1^E*TnO(m9eSXNvpRJ_l6coC&pLZ19{qZp|Sa?Qf
zXOD=E7t=>&Cv|7uFQe`KKWOSkbaje5IlX7}7Sd<#&0Nlpayp~`?YYPP92D@7+Ua{n
z?BwK|zv~?$1gPZ;!EwbPX9oCRqCP+53ryE)8c5i_Ci@`4WS0fGD#8n|yT;ORXDN7a
zyLNXdclHy6x<!^$V`)86`rJtIb*)wZ_GO2y+$nMXh$2$WutdA6{e5}n3?%^gDo-C^
zvY=`#>cA;Z1pk`A*8^{)hoa??m=-oV0Q%&g0zeA8{TM^DIHUj+<|2PRtql%521l%~
zFrJk`EJFheCpYk~F5cyD7&(dq;t91lM0qmdZ{2&LX5UVp|BD0%U!HjR2AnOk!yzkr
zk9?@Z#u%miBbg@GyJ;{vO{!;_f_!ozd6(cLWhXWrl`yK=P}%{+nlAFiXM4PSjx)W1
z{<U-q_El@}GX^{=ri7H0sj$H3nvdj(J$4z2xNMdC><7zxz+?mT&qf#-O^#(zV&dc>
zt~GluowLR#iDL<{Q@ry&i&4C(kkJ~w?^rvy;DC1h$b@A}aJlzP5uGW+^AC#!h3m;q
z88}t*A~?DaxhU?qnf_UW=J^MyH(GA<<^ydD4lrc^P55ZDv$L1uZhFtW;|Kx(;w{rX
z3Zq@)C<snOl4i>!?WRDp@v*2F*L-DssZU2Ym?HesbnS+JGi>X22IEi09P|E#!el9*
z`<O>h<xxlBIuJMf^=VR$1TCSaB1*(CDob}Mw%CIS=-*Ju5frjFPyy3w)cyL6zwh)m
z0SZ7>I8guqX4_acg0}YwD2vN74~=Z(*dv0HRW{-LRje)Urz-C68_pi4A?~5sR*7l(
zDbIHWhw5+jkRJc-nP$VZm-WyXFVD@1Re*4+lp5ENb@pCuK(J2Ms&%6LfAuh3qrlQ5
zmzeOTe*~U@zw#?hnct=KAOe7pvi#rrGxLS)xSrT5dZER_3_jnN(y_LA1aC8Miu+{b
zKO1vjcKJ|w*iY~6Uf9IWvqfH%ew%`PTJWoM^9R3hrcY@wlQOn0-=dVhg+^-9P^|AE
zmB3Iz5Lg4-gBYFP?a)lUs4)Ba;73voW1q@XoK(Q4#M_zw))@dFq$s)p<SV9b`2okR
zLlNcmg7Z37*#-b@JSg2733)HnIRT2Qc01hhA!sPu(lFgT8=LIo=PPplVAl#GgU`M<
zpmrT_5Ye?FKq3UiHXwkivC-`4aGL$@a<3BCYL`BO{|PhjEg|_|nHn8ywvMIzy{m6M
z<kd`~&j62z9@hm9nkv+wF#;gM25;g2`914>c>Ynnnh3saxCOjCnyR`gHA*&N{{w9T
BYIXns

diff --git a/apps/desktop/src-tauri/icons/32x32.png b/apps/desktop/src-tauri/icons/32x32.png
index 2d4c28ada4d37396052f1d0519813b6115d45da8..37cd4c8d00ba538398850514282331b962d09870 100644
GIT binary patch
delta 2429
zcmV-@34-?W42KhtBYz1_Nkl<Zc%0Q&d2p2F9e&>TJNHPkyE%3fa+q*yfIxz#pkPs|
zA|u`mYIU5dt;Z<n)Y5iZvDO2pw%Bp36{(IEbZUpH(MlC(xFi$=IShpa$O$H9v-k0x
z@7wuyg9(V*I!<T${ISRH{q}vH-}V091^ypFK)z@rBUV*b$ba&iZvK(;SrqBFOGb#8
zdzVlp-@B~uqYs~Z`*pv|onsM2A-8tT?1phX_68p<?ppyNc>;ov^we(*{xIjfjdRZ9
zpYo8uB)9nL&#qs|%@)VVdB<{o?UWhKj-AqPEP@P^pA4moJn{>TALN|RYE8xGZPwzB
z1|IF;iX>r1ZGWk^YwKMf@yPxBm-A;{?RORAg#B0abXaX&s6u)3nMYTTUc2?yfr0g$
z^94uJ$)*;=Y<^8QuWQqjoLk)5*rMlt7xXDTzrT-vGk-~*ywp=9r4Oz$Ip4-tExCM!
zW4r2t);I1r#(6_qIyt>XH)p@9n-@H%n^V{5`obPPX@7Nce(d&lH#^T(`D;A?k+V1*
zJTE-0Yu3ug)-5>k@(Wn{>N_hM$Nu{IihG(DwH{7I$RSY{6M&TfcpR*F2pHH))cGMT
zMiyN<XL;?j_w+`)(_>0X#ixJ1^!s1wFi!J6UuX=Bv7Ai;B_<^PgQXhpDgd+|K%ZzB
zJP0aB0Dn16pcnv&+t4po#Ti!u=idP=UL6vDeDnAVAAREHjnf)d1onS+B1#DX8+P!F
z0#1iV^$?%CL~5>Cbe-Z^`sZDTwm&I`i)RLxU;16GTGym5LRChn3lwdCNQx3a(q46L
z!-U0W_jKI$?AQs;9wA9l`b|Ao8v+$_0yxh*=YN2l>~#(fRVg41W3Qc3Uv=4n>cIIo
zN+eJZD99Q>I2^&Vn~I4`s8+uBNVgW{T1q`mRhe?;E*DtzAELUwwMa;t307Zr&CJHS
zsTD)nwvOGstsRkMzp0xh&IHkUamXFqePu73F{ud0+JSTyh$K0fsB2uZ3`PQlmz=X>
z(|@+3w=ALsfV-DaR~Af?0Pd&ayz_NzX-%`bz)u%m-Sk*XbtO=&0Lwgp>dgRTU~kym
z_x3|CJ^tIhT|1+cP%zH&0-PRq!m|GTl|S^kAN!-OXCu+1?$)(5HBGNLW@>?G`z#~-
z;dyiGYoGi86&gIpBw00WMqPxu>IiM}#DA<s(_UVuYd0*32bpy+u4Pi)9KjMvEh%!#
zl_j+el@+xOF21=P*!jxI?9*HXh6|%J^7!*_ZCtlKnQ;Y%1}%IR6KI+NhxW$cpUG&d
zDq);B9%>AYgXQ-z=8*tTH9^HWoW;FGG!mJ<#GIbhJTn;jyHvNJs%k7F(%ya})qfWU
z?)u$}e{bzx^@_vAxIK~r<Wk@$;@H)D<Lt3#Rq~nV)vG(&HW~+eI_UAfO6*>`2<QH!
zgsL4Aweh8(kxCBT2IR9is|+#PM+7!h4x@CABCdJpUx=J|5B@?%>x#!&m(7~%eR1QO
z5BB!ob@@o?@zDZCaNdMR7S^6M2Y)Hc(&jcVrdM2)0wXaTX)_QW%3#`kF0srfz*SF>
zR2f`jILau+VJ}d!WTM#no{352S<JYw6txOaH?A0y$BCFVZ5o~bV4lM{>rQqf$r}W4
zZex7#w&shcuWpSdbW0$Nxm+^!dI*Y3Ih$C;X@y@$QKgPxBf-JAh`zXrqJL73A|;K!
z4uY{E0p%tTtWl8&3wV7ckj-!=7`Aco6xrLA-oJg}Q`2UTQ1g*<AmEu=a7FXJL{>{C
zzzr2tp^_j#kqBHOVNS6qDnV61q>Ym}UVG~ucp7SPZb1QPwj6toaxA!8z>rDN+0GbK
z7{a?4O?Gkw%Lwx_mb$Fo6MuMl=h|ftZ@6idb0*l#9yyAO<SCO}B2Z9JQ0Q_O%aqEn
z7)M$M5*nyQ2xW#1TjuP+XVzd#KgB0)Zmd}S7aWL5*xg0&#@`qQqc#X-P$+@763AE*
zGNvk~;0e6j4#d*abBS=s9eiE`ozb<sUfa|?VPg56PnHFmuJjeuFn?K9sgo<)0x}sL
z-cp6`Z|}j5o>y?ih3k+tISz&2NB@ai5ex*_U~iUAW-@HSNiyIqQxG#d*^#zhaUi~D
zeP4XTqcLOSp3y0wqv{V)eOt$lt{bn~dvMjt9s5?xdk(EJ!m$GoL<^yE1(E{1we3L^
z`zAA04uJ>+isECN4u7nM-$$sKaIxqhpeHzu^@udwW3!gs4_kg|D^l!<8)C-$drnsW
z8M}ZI1&r(Py6Q5;#dC4Ey9Mn%&!foWLRDxo!ii6y3lWSjz5$>D48uT4VIw_}+<^@{
zS0Rz^qrUMEpe9rf+u}@?fu@>y^p;t5=-s?l?HU@?DG|ZA^?y01I9dQlet|+#=3O!c
z3w`6Uv$YQg+S<_7e;AUh5H-QYDD+IEPE}gA0a*wkP}qb|le@r}0gqq7uC^T*_^g|n
zaRcLnli6UHBRpi~HYXSvL|+gv5(?P51=v~`P0c~fo>PZ^wtfdaJyE#a5-4?pIU(d6
z0xe{+dNvB(jelS~MO)rnhs00@{(><m@r+?fBa6;h2@=`-(Z{~_LIS7g3`3ECRMKJx
z4)j5F8yGj)4Z{|gsJK3#;+%01L4fE?C*r(&A)^-66|<PXu$pl}Le`?_&k*R$$|wD_
zi<)@q*Zjr_<JjTBPl2<W%M6bzsrL3pkV?5gC<nJ0qkmigciNJJk(`w=!Z{cS69fgi
zrNJU#V(ucVAjw?N?BsCb`Ikq44-bfb?WMnN+0=sdYr}z9l(6dRfI&qL+jeeB91w|f
zxp4wY8R0B9%s8h`SJ{p#n_D&)4U;OAigoHh>PV+yNA1z0|5TSx!SE4DL{xYlSfR=n
zJyc#f7Jsq=!!RvFpt3B9Zt4#f<9OeG#KJvHkR@<tSrh^Tm1I$H%Y+eV*#TtI`~K7w
zTX{Q&&PETR(QIeH$b+gFa+Mb?d)n`tce}T+22`|}2tf<g1jHjp+E{Gxs3pjvOt>h6
zQ7}6WT|549B)#GOxVCL8Lna^AF9G?grM!&15Ozfv<F4@C`K!{B`44#96Hry}!=aD&
zA|B}k;aOPb;L%uS%ko5a>)Qq&)JE@e#_Ice0T_l;CL_%wkRqwfyYOmNnSQTrMzUGs
vlNS=k?ss(ic=FVZosw`!zuEtj{~7)bzKK_RJ}hxS00000NkvXXu0mjfw?Lmm

delta 1634
zcmV-o2A%nb6Y>m@BYy@tNkl<Zc-pO3X>3$g7(M5^_f1P%oGF8p$|8_hl_iR$HHunP
zh^TSJx`2QXLp1S+Mq@BBPMR2_#<-!>Y9eUdB1%MvQ4yhyM3j<9R6r0c3aJCw#a6n^
z%)9=0Z{C|X^M-_ko6Njr?%eb3-}!*h)u4e!g)_DqRk8C}<bT-!KxJiZ)IO^suqT%D
z9bDn>G8q{<a^$4}_gDfn#ROm$c+|N1B?5H^AeYgICKU)FsX;0L0_U9qslnW55eO9k
zWrP}}?jx;sv32vl-=E(MBm`(OSuExX5}i0BrZZ)42(3E-0Rb080Z<V7_r3sm_fQ~%
z0*aJCs9|T)Er0v=Kl^~=j&(KwqkJDtV?|m2yP`@OjcpGT1gXdZFmW{&00MEJL2-X$
zU=Jb2z}UtZ+p<R1$K#h*pE&WxM#mDZhEBk>rsLIhi$s;YXKZ_zR1tAOQA|_EErI8t
zl_Y<!0d(53Dy&TU<bq%KHLY)GNN54Z7{>*2FCjLmlz&hIrvirqju3E!fm4ChBq@N{
zWMl<k*xI_y@qOi#xluKEvO~m*0W^eSF&{fXVVVn&ACL?ROe#Z(kOtk>2u$9!Yh|wn
z06UYShN7dD6b-P8FRH<U1#?hWcRt3P9Yg7e2)erZ@%w>JeEHQ+*tlUA><mM|o!CJ(
zUO-8wHGcs>dpYPvZlUiKl+s8%wHyl<&MnCFs;U^Os$!UZ#f4bBcn%(Va4n7<>(2xC
zgIB0w!!HHm7XdfDLNs5#{H9Rw{8dv^jn|r&K`AQ$j;wN7cfl`;ITp}v0g(cq-+k9L
z0if>geym-y1)ZI}m^N)9?p=HploD5nvAFu0sejn|&3@19envT|>F8hK3lKvL!yGD>
zJ{UW8R6u}LuWZ7)bvpnEzWm~6^mGs4o<*}gTTU1scfl2c=`8NO@tmOjW3w(`L8=`-
zoJ38{cyH&t>n=fC+kPBN_JLGb^Y(XGyXO16fD3{<W_PV?06Pa2vDgKrHu$iJE_EuL
zW`8!-gbF=9CozA1ttY^Q32`i0+JGBwyaX4|oP=@X<FGTtKPLt}kOFYmq9PUv8L}xa
zCzBfn2>|DwdrK^Bq(j7t0yL6ag55Z{e*P>x_V{h6uC6Q^gnxJbi#J=gW7CFTL%|6#
zA`!wiy~E_B-Mg3dcos0U9v0E1uI6N3<9|7L=r}%je>>WLJcPeHdoeheLU~0g%E}_1
z02L!k&@ksbbaxG6@7@!k^+0Hm;7|tU<z#Zhpq~Yve~2Ksc)@5gMElMT>}vnZJ9NsF
zDm?Mz4XB+p(Gz6R(ps$lWN%(Ni-%#1K@4Z*24M_j$~7AU<#p=x$!Km~;fZOC!GHbB
z-o~GYdq603{LzI?pZ^jNVD#wn5b)fqK{gG13rO}440N@F2a?cQAsQ|70GeCw!$%+P
z#PMW5#!aZi!bNp~SUB9#69S&i0=Etn2$0QDAkfuP!v@W(zro5UZuS7G&xzuZM~hd+
z_uko^!w2$-iUv$bDHi(v_KJpUg@2De_yKRVY=do^Q<maX%EqfN?!cC>J3?4ePH&Kq
zQVb|VD!|Yu8aYwi{CX=kfAt$~y?rL?>L;VBY9z`lBIxTILg&#w?ELX4K3l&J$<CAE
z;5jaUfeDmiW6B5^l^cX%DRk&y7hZZ{E6BD}v!x=O5uTfk%Ggdj762R=V1G)e`?9Pz
zyr1WEwW8osMDwhBofsfhpUR|D04P9%I(~e0KPl}Z5gU+9F)|@J2g_-IdkhLHqg1&K
z>h{(>SNAtGBvh6Y0+3ZgOR^=?r%~aJ<#fS8F;0)rBF3x&fH7mH83pVyKtj5@o;w&H
zb!oL_MeB{RGlUqSrUU5mJ%1JkXOQuPkW?t+5K(29Mn>yYy0@jRecr1H7+Jk%y6xse
zD-uY^r~f>&F&>{?ZRwHqA|*nSq^3y3xiUhbrikT#n0FPO_pXGNt`JL=OFI2uOWV$C
zA4tGRlRKj2jb;e~P4<kbPd5VAViK1Dq5*+G5w4~J?au{ylsuc~gj+HW%hG+qNV`y)
zzy0CL%?Tu=DP%OuS^fZ7Tl;J@oi5?22T+Gmh5s-KLqh{YJ9b=NbT|zkrW-$2XL3Am
gZ2VX`XBMvi0hP|lR^Vwy9RL6T07*qoM6N<$f{Io5RsaA1

diff --git a/apps/desktop/src-tauri/icons/64x64.png b/apps/desktop/src-tauri/icons/64x64.png
index b6d21d669404aafb83ae95bac168d1b8b0ecc982..f3e642ce20ccf04f7e2f195ca6ecea997109dba0 100644
GIT binary patch
literal 7474
zcmV-29nIp2P)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF0012MNkl<Zc%1Ef
z33Oc5mF>RwjWw!DQc1Ec$(9FfV;f^UVn~=ib07>Iet!}I{Dx-y1OiEupH6qWR~8Lf
zq0<Qo5b_Bjfy50VA<z)O#0&|>7=yvHCCidE4^^ca-+14>f8AFynBQTr8S;CrT(2jo
z-h1`lJ?EZt_Bs1p1AiHR8Gn{RhyqF}6smv{`hmZ9%~@C8(pKM|s6B(=zu+K$`s{lM
zBd^ILr6i5~>pvG~f9m8_^0PuexZ>VzP<*083Ms<BX2i}}^;h$M^t~HD{q?UORzGj5
z5TYjN|Dz!JSyL$F^%LfHEKe;|`H8C*UKrj_$w67qpLvk|zsbtXzkc`XuL<$(jY5oW
zsEWeo7sWMaec__o)&HynITDELuiW#uJAMBJJJ<Phv2yC-dHAn0$bJ(iD;n>->zZ!}
zad*L<xV)!YzIU%vb+i3t5oE=8uekB%15I9zn3_;dp1*X_OZQy&x(J>Wj%(YDJ?V~a
zxm*0*g%@10sC8DeM)f~mFre=nh@>zzGhLd#^_IWAS%|eor+EK_>z=v6aj)C%`@8e5
z?@SC8g%IMdYrpdK@LPmHg-L())vG&2_EsUpzY5!3Z~H7CIMyS+KXIKcdcQ9E?)-+B
zTR(4lZ7%fx&uA~lqU6nAy7W3B9vydzTYb+zZ-?uivEFsheaZ80>kIr+#R}}gP+5pT
z+;+)T*UIlGih}u#Q&N9_=Bh6YKYCG_kKYhD)jM3)b*Y>C?td3wUUK4%(<7}7QdNJJ
zp(z?^OLo-1+jT-}6PsyXa_;B9D8&6kPH|u0`PU72{t2(S?#b(1|Maz<f8Ivdy*C^9
zPNC#mW4p>C=oL4db;0KkeAcq&j+UV(uPwSGmy`?lTqKUqtXTa~$UqP2OGHLrg4R?f
z`pa8y7&j3KpK~BA$(0v^p;<e1<;qj;`t`DZ^eTrpljxme;9K*83k&dl0@nuI2||B2
z!1!ZI41%?o_P*iDcka3Nf%BH0dXjur#MH29v}fejJG-t^tvd6^kCcD>{P@Q8ic*`$
zC$0cO3AhkAs<mm+F&A~vi%&lOY<WK5ymlQ@_y7sAxc#`*Ki|-Lvtp^OLceQ(V8ggT
zPzHi3q1*-n2e1o(H43ch_xTg41gh?Qll7>TpWJ@qvn!^rUSvBy6hiUjraiy&w>GH1
z*|PV}P;OqE$0w=)LI{F@<H#wqTE6w|FaCl@Kh18x|BJu*^(}w%&}SANd!iIyAb^3X
zi4%@ovvta~_1<76P#@bvX=hG=6#>5pa9bddha;5%SYtqCkl?{S#-Hs-V2Cf&qvKPp
zHUIltTiWUlpBe~`{_IHhrhn_cb4PAqr<7X?FD>B1WQ6pfZl)wmNG?0>j4L)jbM^4N
z6M_!kdzMA4t?V$+bA4B+GSQ(hmDL?TePQku^O8M{KI<K#D3=5e1+O4ndEXK|aKHmw
z@Id}u0o+kSt3$vqq!Nyb(d}vnZLco$esRein<Gjl;<76L!E^UtQ}FU`Z8d62kaIfJ
zK@RF>0?2pGX>3ieo{?U1*=MKUy6U3%qV;!>{!?#%X0d~uE$>^>^n-g&x#pV7_b#xl
zfk07_0GRw@Kq&DD-~q%Fpe{fifcW54f<*+N34pc&kv2kCXA~@Z!1IpVZAO2v<>6;;
zT6f`TiXsFLcsO$@_{!-EJA4H88~wXRAf!vw-0)+u05PfPuI#|X{hPL~JLjJ^99Mjy
z+5Fjyga5o=`1a@}7o2q7HJ4|n*rky^MW<ze=KvH4cnMsZK6eowZ~@|i6R8M!$R|_@
zFixpE1iU;EVBH0Z{_B`qI<e_<r<^+D>c0tsAjErxD43SWMDF|HmtMN)yiZ-sxd4dx
zgn}Tc<>xt;wXeKw`(^8Uho6_}Yn04tIPRF+{@tDKReCy!jv}}i14thMMhJLCfIEP2
z1cU<)DZCF*uciRQA&A<9Ms32)s^B~?cwQ$kt|ZY7fp4AE_O%};^|oXn0<4~X<jPHJ
zuC!*IJTvj7>lfYn)l*NpMsRx2@jyKk1xVBL1B8+JS391)H^h4a%x(JI|4`eTu(_+s
z2sDs!K(zpGg6p)6Qf(#Sfi!;xs2->it~`-00L=vGAc55vKurjk(+M{Y120s$+CQJr
z(gL5MH{*4rj#>8R*qU|gd*9r6(?9VOA4m_c`|X;MC${$HH%Z|S78TSFc3UmdhX06!
zyCAIUg2|UjyqCjay(7v{g|~=!id#T2%TO%k;RFhjnL0)(sOw0-7hJBm;t{HN02rVf
z1QJCD-^fAO0gXq}dZaE2vx(y2`oOzlCc)8X`T8&K%$DRlnDE7e8@E2U^457z-Tc^#
z=UOQFhk^y_dx}jI5F)@i4_7@DcT&MoHLgxew<c#c&7RTLIA=*FF>AT1G%uUTzKo%s
zp;v~B-4B=j?wy|KAD-3lFAp2q>JGs?7PypZK4@tEp5T;$k^s;pyha3|CRw_{Q0?MF
zPgb(!oKanJO2@>^<}nZYx5n=H*3OY<H@!7^Md13!etV`M7FUTfnTLFY79d108Tcq^
zh|P%4$SjySv*oB`XEz^t^0bCI#~9j_MvfFLm!ePsESDqJ;Ik>#({#h|E&s+vAWa3n
zc<pJ^IOb}f3&uR?)Fx0oL8%X}1hv4eQBXYzu0=Jky+Jcy9lQ5yefj6MXi8L#4mU*~
zd_C(*$7_g8i&VX$?*tXb0%>`SOPQGnUxocOgghq~?fp<eefLWQvszAFeAN6i{%S_k
z^3P1EpLe9Gq~JL~xeD}802PNh0r!}!cZd*_`GM+k&RUwzUVe1PT|awi@0Fh?pkRt!
zkUlObApKtP1Xrc`GeN1GBLQ?BAQ3{92%&SQGYkyqO8*3bA6Tqt_m-ASx%lMsmwx4e
zsp&)$A^EIN26l~<yEg5c=-jw>Z1<ZzBYOu&3ZoS#Z~}=Ghin0aNcM$e;j|n6*WX=#
z`}a#@KxqQVPcX-IY>)YZau5{~jf7BDN>xIs%t|2w3It3qI)%#Ywu>(u$iJ{=U*W;W
zx#E=7c<Aa}VS;Nup!$Hq!6kA@#b{CibppBpEIY!&rX5@jSs$qM_*u7q|5Nj?yT*mj
zhswfhOt;lHM2<XmW)qG*Ee@Db2R_ZB==Bc{<oB%a8rb&Yww|poZ`rf6yF1%kI4A{(
zNs}@8;){Cr`4+W&&#DlU2tpMorXZlq=kOVuG%pIGY0%>YnnvLk6drJ{2ZUKmX5aGI
z&}&aceVW@tlK@o#g@NimxX!`D#E1wU5I~CoT0KE3EpX&K3yia>oX6@J-~Y+N8CP9A
zR4x@vMT<5zDYU>`Z+uvALj{j&l$$z1BG#;?6Rp$c)gS%2<?Z;KaS}tMsfb_xdd&kj
z{q!pr3*t-ygm@nd0EGZYPws)QzWT@I&mDVg2UjhHGEX4jpo|Ibdp^9tqtf|g;!8ON
zH8mt!0Ul9kVUTby@DYi&V?oO;KgyGxThugQ#t98bC_L0j1d*ts>VTdUpb3KZDTKB}
z2^^Q!9oF#8o9E8B>f&s*RMIpfo}5CVq=AV+O5uTeszfA0UBS7{IZBq}4CDk?2$-oV
zG}E3yIs54^7^MDMTMQO!vb~Q21b7H{IdARrTRQK%KaslX;v?ovt4xdvJ@5(lJO+<>
za2bOvP^33d#fM*@(3=%ZJsR*gQ!0iGT?o!*&bZ_v#aYLKq|YJ=sxwV+jQ}$9r3$!A
zCPWl4>It+2U^FXw!3x-n#_Jzzik#6{a&1QtGio*y#O4U(yTGeO0hI`73W3K643C7a
z<7$K&I;g4$)vSZ}_zV5<N1yxg4;?X7lrl-#K2RnoCVvk)cVGV68&B@r-7~6drotUJ
zpl-mZ!x;6L57+UzE2CZ@qo9uRhyqPlu;5$*-Y77XAHuGEn>_~_^t3=M2_A{m0-iji
z-y0FYXdp1sK(bDNHUQ&Z1Zrenqo;X}l2BE1I>FRa2rQ5Au_2)92ej(=sJa0v4oB4`
z)UrXVGC)@ZrJBMwb&W-zdHM0qe)lKW%T*T#mkNvU660lmU+FumHooz^K9tL;l<M4e
zIk-@uX>mm24b+UqsLX06>;d%j?ZMOck7BF{7>5I6Wy)P<QbH4m*9p`oA(a3#0+{CH
z?-XD*0<k(Ekpx(Z@jQ=VpwR1W8GJ$Qv_@batH6Ok-&T*Z(C17D8bu&9*j&K&0`7X8
zJFcLrq4M1$<M{ph=bXLe+gCABWe3vn2LXdTj0X<y9qBKAZ<YPp=(?llolH$VNyiE{
zvgJ{f-C_8=6jn)u#6f8Wsxcj}u1R6(RT|okX~y7-DXyD&q!R-5I$$ROQ~)Y#0BJZ$
zaHIs1QP7wPur$Gh2XLdF@`Qopss^xnVBI|>SOeRku^b|*fn+2@Q?X_w)J6ovq*bpb
zVqZSTH*Ec**_r>B*>*56u|K9AS|S8VI8c=Q*IrrJa?Z;~EpI#_mC!uLv(^650=oJ}
zv9Esu*+LASpM<WNNa#9>JwWezVD{MoE%a+#SL#uhq)013DFp;Bp^7Vb7zpA5G)WLQ
z2}~7WF+t0|ER9>yxFm^rr|a1DZ~!Z7bD{*)@hT`3cVN%(I9%6(sl?Heo{r`7k3ie>
zH2dB28}&B_zju_6o!##z{QD|E3eQD=rL%6n;rJDQf6_pnIsI9xrs9ogZ=HuFivUxr
zz_v%x*PqAsP7mEf6-?MZwm)m&hy@fg&j&5O3^YW5dQ~cbz?TVuLnx>KiGwRqfw+W7
z3J4vr1YowLu;8<Vk9TvL-J!sBIkmC@xaT1mQ!#s128XvBIBI?q=FMqATc!@NWCQ;C
zoRjeRn;#+@wrvXu97!F#*C6kDAtW^e%$s`UMW?K|>t_|qwG;wf7A+Kl%X~pmDUBr*
zv@}z+O$9P_9w;v%JK<vcAVqh~M6kj@d7p`MFQv%nz|hVB)e*skClvtD2%y#jZ5@Cx
z3D#}}I)*4VRe-D-VDE!IjPVMlC5Ev0a0g2dS1{et5!32Gv=qwKC@Pi;rz{gO!P}b!
zk7Y{c+5d3%+-*HCby5j6Vexhl3LulhPp?1!zn#2n&05d(DuLjpJTIBwh#@rrE)9$l
zNs@w64TvWwnwu4LOaZ1fxQJ>F9Mi$DDnO?w5RFlcSq6ATg+CD>2n4h!h2BEZ(g9fD
zc>EO~Q^x{SI72GuV^KZF!Z|8hTP0kW;rzNb0+0S5$tnk+T*4veQ5A^k1TmFk?lg`2
z=|1($Z=N<~bfPO;vt<6k6hJ0Z;l}8SIj1jwrjrY;5(wXv$W6H5lJS)*Z)g;{1}Lh4
zN@c<dF0onBKy?#{#VDFG1Z^2$Ml(aQ&O#7#FpdD*hfUD76k-ttxd{tS;G#+Rh-3q>
z5rQdm<CuS>21S*bj)H6f7|wEJa~y@D096S(*9w$|z#}q;P=SaFm<o_E33L+h`K^Z9
zX>A<7;Px}-xc-D>9sVR3lK=csz@SZ$GnPI(5|7Q-J-<vrWqTGNoN&pzg<V-np(>Q>
zlCjYQS1F*X1hNoQAfTxPnjsK135_QR8q>hyBNX(%(TzKPx(SD!(T;d3iNnnl=1tXM
zWla=q1N}t>gEqlwe+@W+z-U&$b^y<nWd=BB0-8Z+wGY_)l7LizDc_|EE)@_}36eUf
zt_0qK8IkCkH|~G*AAWV|d6LilQ)CH!=jzw=v7qgSe@rD8C0$lzM3w8iKWCK~EFdVM
zVNJj|w_O35gt#&_^+A14!1n>4iLi3CtKfw(j)^kCvupGC(k;J1p=kzAJ8mhqzBqx0
z9(fa4D}yI@$MD!T1sl47T{}3|Jr!Ui2NVk6u2ZvMS?<fACP@`d_M?mdwkKdSS&9=>
z96-Wh#UZGARDGk<E}c2+;&WECoqv3dLRa2f0ixz7B$Hfmp&nt5N_170c~WnoZsZSz
z)|xSrexgLWApC%Y6Ob$AGD0O?CRfb&0LK&X1m%{+@QX)&i<~-)`p6uteND%nkurY2
z<!Su!)lp~xMNs0Pu8_`#{!YNHO3E9Qb5JRGFsTH_1Yi(oDFMs%VS7v_L)7*KEnA#U
zSONu`qACa<s4^!LJ?@H03E#&85PlT9_WkmQxsh>GHx)A)Gdxp|c$BCRtVUafO^KSW
zLPf~O%EM!T>rE<w6Zo7^&nHxiDs<h8uVPnr9pdqsP*oMfJ)Z0hATSD8x8db5m<AH%
z0)QxjPmF`-$E4p8us{YpfccV!Ba#A<%s7uV64;&x+xOtG03N6Csm3dmc%#0rzd2S)
z-S^x^^N-yR++JJY_sIjqWYVy&bnmyzZ|vLImOl5kmdwg|snk?NV+jsD!WrWTynqWL
zsHCB#%0j-dRz*?CZUkI_$)*JpNToFF-m@34@A?gd=_6*ehatuHWjLWQ%{aF0TZ?%e
zpN1Jt!!FCrl~C6ae5_xfqn^T(Ns|m>LLPwp#C*_LlLFN=BsT^bp2qAfs=0z*ERN`7
z#T~=r#mzs>I?vthqNndb`QB9lZx12zZ0%$D@!$VPcW&XldUN$<4T;s4rc%@64Gl98
zi#AeKF%kHf<O>7&XsQsIJjtULZ&Y1F$tvR2H`by|cc9K#1Vc}OC<^>AL*dYsG$ybG
zZ|?pBRxJ5!2ti@rg8-xb0b1uvNS17G*p!v94xxa{KCB+4DA)tY<@!*x`dHvhs8y%y
z(INZ!8y())$Klr4+C!-YNG*-z6~1Lh#oF@aqPOv(>HcLe_YJSF)J3P7>GVw0r`r&Z
zXP_yj>`~R&9TDO?rK$og65y2$uVA>k4r(L;)0hTTON3LA%(8T8N@LKBDBUyiEIM+l
zVVW6QskmI4R4FfDR|V9FLIoGKmG=P8BGfC(VCZ0b?*k~62BBysJ8RA&v%ft2^F6z}
z_U@M<T+TzO1;pf+DAcgoNfnGY)g6I-<;}?3dof<#4t+3=WV8*bR0kRw+G)Bj14EC(
zFo4WdVB^c1v1jNBaIMVa`r$CN3{{l~7lcr0A(SXop%EBr6RO?-w(fo!tB(2tB2j~K
zF1Tg8C}w@c(+VoGvFg?oAni`(D^z7rbx!M&Q;|R;PFOJ;YrEna*<C~KAS6vcWM4p_
z#`_RZ#Wd2W59Y!0^KgSK{2-5UYa7O^ThTk1KqAtLbaDn7TQb<)o5!~8YvHK9F!U)f
z^kx`FGgq}}_%s<O<O-=Y234tpVOB6uSc})UCehq{7)sS~Ix_wSqSKB;d&?1UJzs(j
zr4pAy6aq9tXu_Np#-RDBG#0dIczlN=n{SZ$%17E6B18yHkH8f5Fr!J7D)sP#5(2#l
zpBLe=JhJX~<VLq(&yWfxHvyOx=t>5WPyth5Nbn|FID4r8A>$~CK&5ri6bD{p9D8zW
zuy;HHPAoWV0xRkAkV{nMmP$#!N@`UQ=&DMSQ4@`^7StyVw8ki$iVnLh8}1)VYm9{a
zb*eFeV~(GS{=Oo*c4v_rFTwT8h-g(XQGyo~5r{HW5dlF96h#kB-&9+m8+9O38ks}v
z-%LSts7exCNZXcVUKw22P=tYq-U3aJhHbM_-j>x4nlmZ-#MA!{$0}p-+*OEa=`anp
zIYXgnpki_MF)2Vmc3`8rhD2Qii<d^QU~vojdJE{<mBa8*36^EU)GcsPMZj%v!9W!S
zhL%FaY>`eBMipuNA+X6%E_6<59GWUSn+g;j4bLmYfbHZFjmISci{Cwc518*@>XiBD
z>+OO;Bk1(I(3Gr)%pF`pku7K_l|xPbNzDIH3J?%PmX(z1$Y#sfzI_05W;dgKMm=WE
zPGNk^LQhWtJ>4Z(6(593>MX=`Xj(Lk{*piqBeP7N!Wj}CmXRU~iEpYJmk7ZX#gy%D
z%6Si7-}o}BWgDeZ0Z}83k--r(rxze<BoWoLaNhxwowfkTmZK=UAD0CP*?SV<_Lx*E
ziq^Jz?A$egUAu?SI;{cIXEb8j@~N16cs-taVgODRTsIU6-7?y9D#LQfH`5T6!~7xq
zOM172D~-z{t7aOtjaacrGY0!dpsO)t(u-lJQK;15;Z9PS_4%?gq|^-vR6>z=3|M~P
zek=;$@^v-rqPFEhRTLcisre`rs_5(-!FaBOWlLwm&^1INI_#?KfXXHkrD5xb6HZjw
z39Ho+64#|dYh7na4%R}uRG4hY%1^pl2cs?>ZiWcYhjB<i3ESX6ASnERa#@_p`l0L-
zI7}wvAG}4XeozH4?zo=kKuFGt0Nvdq=;|6qdwV06E$avcP&EaCOw@(MVY&Jw#A^~3
zP-H)*%0{BBDc=%0gjp%%{&st~<CAj<lG0*$4cBUxAwN&<CT9DU7|57Gc{OaG))eqT
zgMj*eH|!@7ykMfjcomKnQR9gSPB?KP1_pB2*E@!uo-s6LlIUp9Ad!kp7E5xCrK#3x
z1OmdPz)~3@3QWpht29H$pn^==zsx8lixX~ys|i~pG)PE$aoJC&io8GE72}7yV-#9;
z8Fzw8xK-yP+#(}t3gCIG;_lv3DloeKg>F`wurYIH1CBpoK9((;3E45~>>hrbV>zHo
z43#jsAp3=uh*I+?La87$5F*^>6ZYD|qG$h6yDzK<<i0?8dkvDggk@P7drbD&b)6{z
zwfwQtfeZJMxB#iu1)@8D-*pR(Bc9*!rd8RqXFNK+qk+zz+k|P;>hP)N1T2SzL6V0(
zGagPj40)Ptf)ZZifkO_l)=Q8yjl2<p*8aah=nS07O0#x>AGku3+u^vRqU7~J_KrcN
z+p&gp8y(62eupQ<%LgvpN3uyugmnSIg!|$Poujwiq$wiBJg)BCKIlC4<PJRf#7=D6
zHZDulP$(uOX9Ow<mN1c)t2jxbgk|&o6kF8N?3(G<?hC(Bi<EDhy_7n<CIcV90?7+V
zzz_(S?}2EnXP{Hx(D|MJ8HSL9*!x93@SShnE|Accu53$R_DDRwXj-5M##rDfilNt~
z<47iB$mJN9ejS>)Y^qa9aB5UhHArHmt~r8{p<(2QJGmfiG7P@uFq1wXhJ`R!kk1Lx
zLWYkpwuID`)Knad!E;72IC1|4MgI>EzgOw|5hy^8+6xGDEfYEYi<#8<cSfVLb*{=C
zKZ1dns%aRIRSV>VW!xqzR7HoP>r_=Vq*@{v>K{aIq>G1J#=^BdKneRfxKQv~`#^S@
z!<{hTCIX=fzY5#lH&$_8`~HOU;@v*Ra|bKD9EY^Y_P~~tO6p>n*k`WI)SYvy5uFaG
z)S;9zN)25KE>}@ib!b%ftyQSHNgJk_=-)el+-Nrkk*HOB7U%3Oca!ELcO(!Y<R&1M
z3TleL2XjYJv9{e;@n8E<mF;?+!|~tt=7ZZMD#wS|Yrfw{YcJJFCe;`}>&p$vGrwU*
z+W}Q`6h&c_sJf~e2oFuCnrb55W}vTY0Qs>!p#s7r6LLdV5R#1n4_L@SfJP<EaaMw5
z?|icCzJ6E5+x{HGMD^`i?BDcoX#0i9p)26s6w#b+h@F02W8E3wG^4Ym*)vtu9T_7O
z&7{$26dgy!@cQ%nP|S64A#8B&an3y^6+l4aM8aQCh3)Klt?F&LqvCD(50?+;-uc!K
zC-~dX`N+mQ6`_&FRN6fG^2XE|x5Q%eRo#pOism#-YvA#;OLuJ?fa?u%pH(G=Xv#)|
z;4WOZcVE@r@`JLw`5~M4_8%zWM<w(-XZ?|ncPc_bJW^*I^O<z~gfGWq3s$LG8kSWA
zNCglKa-Y284eWBf&YxA>&5u~Y-fj^R;UAyS@0{(&Hfoih^yU30BFd~8F?H@Kn%2Ao
w!uR}O{8h{E`hy+x^?#B=|7HAT;H~k00q$`13?wxbUjP6A07*qoM6N<$g2$FB#Q*>R

literal 5265
zcmV;C6mIK@P)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF000zNNkl<Zc-rlo
zdypk}b>Bbd_v`Nap7+eozE`W&KD7dA^;n|dm5c(G5d@qpHVH~4Atf9q!Hz2qu1fH-
zm5M_uKvYHH1eZ}!c1(hnvZ+!qNF}kz5(0@`^xF6PJv;B2J9D4i{X6-i@66npotd2-
z2uUUCsyp{i-`m~4@A;kIIp6d6!8^x0$2-UW&xb7ky1fPl1bP&<>;IYIACo<Mw#$nz
z9#c5r0R06BY_I*lbvF0zecJx-)Bppxsn6}J-m}{x4+HlIrY$*bMT|6VYcOJxho}Wf
z&IvO8*&twSa;|X=B8~rT@;wF+M3QrYL5!$i0T~l9KQ+cbc=BZ7$FSdl3VcqI&p$T-
z?6q(phFyNwD*L!1zawII8u1#p5Cj8a5D`RYKBJ9yG0ATbM9j1>nm;3E`d-rXIT1?Z
zceBnLjCiPvP~>e9ee&eVFFiGT%s;aLk{flcx@)tNeoBo0AgZ9KATc5`8`yk<mRTUB
zF|*CH+N>cnzi+<Jocm8*uc9Kx8XJg_0H@KjQ2+Fa6JI*D6d~M10Q(H=cb&cW-iMg)
ziSasA<4CYZ#F!hw-Z-PP!OnBO>H4`^fC$!DoRfL3pDS!}AkMQ{&$)QSX#6WjPksI;
zQy3Oo*NcL0?YVa&VxARar@(v52XAJbH`rv!EC60Gi-VV@=Zi5S){Ej=WQ^@l6Fj@~
zj^E!1``teFnOhY=q8Zz_2cDI0i1FH0UEBcQ7^Ezqp3-E<=Fa?#ffEcW$q+na<^}It
zk8QoJP4_j^26O)9CKzKq=c3q{pgp$1H@0uz7wiXUJZ*^r*lS?F>ln#>+}PlO#?0H<
zAPu*^_RTC|<m)YXu_ac)n3?6^8H<QzZJY3izqba|V62(;3JZak#xq2$b*>iqUf}_p
zd>r<>y&N#NAb_VGyLS0v<TI+Of-yfI@Qv>kHgx?4pZM$-`1XJLO@8&BRj3oJXE9h}
zmrT}2{${|=N4N6OwpP>$x&-hu-&x~as0RC)UAw;OA7HOrq5$?<5N*Ha-!I~AMNtuJ
zZUwwGW?t|{EUJ!89sh*KzxrYNKAL9Y;d}VXpZ_a9`RKcFF&Jxj_Zpus{B|o(?E4^*
zy_YAywu*oM$vhid6MJA~G4P3Y8H`bl)!1NbR2{k>MCT()^9W!-5=x^F8S$iHU2kdT
zok~K2n$+GHi&Mv{{Np_FU*AXTjylIrIi4P{48}SB&6ocv|LFbOa1J^%!sZnve2zl+
z48hUY(Y^_yIN=qGgP-{y#2J$k=j0)Pfq|np*nxSd<NX51G+S8zyCQZgBuii^;EfSd
zp3kQCR)#BetQZu*;-e@%@<IOLSN<-yKM?WNGf*2BMka;PjNxuu;gP?!lGBIJ@%)i8
z|NRAJy$rFf`vRZ-EuXI)O*0YBFv^>OZ+Ij%#y6^QabWQIZ(h9EBXCS_q5(-@BS^<A
zhIdo77gP-`#_;4HJV4H*a4J~wapGvN@8*~He**hU5l>!l3=M-T3(*K1Jfr+^B~Nj@
zjW7Q8`?!033r0Nt+p}5T`fi@*$Fo?I2w0X3UK%b|5HTIi*p|oxB$~0>H=FrHNVj)p
z_~IYj#rDVE%U^wY3lFX;;Bd6mHu0WM{uWmrjQI28N?)HKqfnnv>XS-%37$C-^ObZr
zMc&OHefT4+EaW(OP5JCMeXKDk2Gtq*d{gjDxmJT<qGb>vE7N@bCTm_qzzG{W(sX<M
z*uJmx;<qnze5guL?PT|(pJr&caOPA@tsitu2q!_yppy_6LC?Xnr(*u&?FB}<?&m*j
z`TJ<(acaz=2&mBE)8PM0^hlcgMw1Bb)&w9%mINLQ>XL!HaAtxJe&!nA`O+Bw`TJEy
z>xTR8`V{d!om@U!#~U!Xeu%~uR|d*pN?=Rim4#HF;q}3oFTX#8EqC&0;Smr+-dFzl
zuXppsf47;|AZ|pOOEb#I6o0s74M?K88#(uleqJQ;&z|)W6Y#s=jww2&$9oUyZFh41
zWJKn823|0j%RmjJ1f~q8Eci9SI|=4TF_|A3iW8Q@zY@}!e;);DArR%4wvMr_>mr+5
zq9pBMWJw-rCe)t)@D>gKMHT^XlR!lk5LAUYRuG{^oz}o-bpgsp2C$<Z<AYa;To;A4
zy@X+enFOy4rlMq8Jw{HKx&GQDU0ptt-{_!go8^&r4e+h!L&m}s|Mm-2(h_sDRKOa8
zb2kUCI^{9UtqZ_Ru`bmGW*(d>f{-$4dh)%jX<f&vwzYI+S7D`-dYIz;rL$bT_AR1d
zoX+$|$oh{_E<3!E#j7e(gN%&{+A?%?Ddq5wsGLi2^m;e1${8wg6|kHsXQtP@(*(4&
z7FFhOgZZ>`IT|2SD@1RYc|owoXXpC&vax#?otX_}O%E<Ilxi?mgIWZYYDl(g4eM*y
zxlsBZk}i`;LA@&YWhDqfLrAB<YlEG4M4Y@nL4R?C>+vXi)_j;voo#sOVajfZ!O9R<
zievN_Cm5a#iJV<@X=+1*QG4qGkOt7{M1{<xxfEz+Cyzb&&nON+aa`%IL{#f_;wVIo
z#m{=!G>jEXtm*tHedBKu1x5T8@UJWBst`DcVo2qcOcy-ZQ|0^%b%Nm@-n;$@azTNL
z5AEJYHl*S1wUEs@@P{eZhA2jZ{N*dhINCQcy%c6qa0Qt%n73{N8u7X6?7*h+cdUAm
z7Y-ibo*i3=>JI0GFbt_hHB>F3F|^(0QSI}njX5^9{{#9`hp`<>>bj7Q!871lNVP$4
zAZ)Bx@M>$>(6X1YY98BF!}ARTSCn)BxwKG78}gYhT5{dowtgFhXcQ<n*8J>Tgihxe
z%yPVdnMqX4N?0V?L281Zoc>eJUK}BnvQ(-O)q0gmwNACJR409+*s|@{0%TQ8CC=le
zZzsLNk<SV#3n>rM1tGmk=vo71a&));9lUH0{-%iB&VatF9-}44=w$L5Da8yG>x|Z8
zp8V!(96WbCi9g(Yi5PQJFJKmNg40?s_r_D!SMyi-!Rvp**{g$;Dly{|F_q9zjVp}T
zFYv~XPILN1iOeqH?6q-1<I~+Mw0A%*pS-fGpuHDzy^elA&&mE%ob|4d-Q#iY#5lvF
zV?<(!O^R9^Ffr*9<MZQVmpF9kAla5wk}r@sW1N*>U6v7SxEOWw=I}tU#t`O@adzM@
z_|StNWpHeOV;6tQ`72i_PPSoXD+B+dgTL{wb8P<5?Nmlftm%vx?iQ+JiTb-<rL!PR
zreV-Ggt>LB`Diz1jzpY(`2-pr$AuMACQnac9q+zl3rDVA=Z7c0OKWdtPS$w_eDee@
z%MB)hVpCi{CxL0OIEC)aHr{jB<CIOFp4FXf+Po1XqfAbYap6kDxl2_}Jy)mmF^|-x
zJiP_*SHz5$6k|X;p)-I`ltJ-W_t<(WDdFwEnn3Dx+EWpm)=seHwun17wX);(2~_fw
z{;ZYr{Snp(jvK*GrQD|2>@s)&O$CWL;2WMGXIAsB)&G*wp){j|A*qzb_wwZO1y=T~
z<DuO#zxMtLwOWaxlrp~CqpcDU_xfa<M^tjqVQ6iE{)w1sN6gAh9gf%e&=Xbe-no(W
z9osm2Fhg-XN4*9o4k>Hegnf^-@tJQOV4#@5*E!&)Vu57ri5uL<=h)BwC2D}N7%@1t
zb7nq?@dGWebH%@)R`-dba+2+FK*}*$g!2>1<qJYfTb9*5aGQ&Hz|<)mEi+;quUv}g
z*wBe9l`)6v+;&OX<fnMoE|2WJ87f+!@4DgC5WLYBbM>u=_7+ELN~n!1n`+(s-ouab
z+3!3<E%Fg#q2czX#+q<c14fp^1E!>>O?i6*#vo4E)cy&4e+9K@9BX`>bJRkJVoTr)
znUr9SFgX@;rU+NA3WZ#nyY9^KgYSHw@s=EI-Gkg!Xr-R(<@g0*xNcA@6zj^^s3WR7
z#6V_+Vtgfx4W&9570&e4*w%X+AK$*4ufKJ8YNT_rMN{dqWd=hurM{<Vr7C!Fp5FG|
z7|-FE07cP;t#K%|5K0wcq5_pjh#b_)4#o2A@4n90zW+lqD<0sbA7AB9o_UEQ*8+}T
zgG(2cpS%=Pt16;kJ;B8wS;1u@MknfwRboafhRM+5)UcA#ccb-qn)feMMOs!clmOOg
zH>eE`5ZW?toc=GY?|DCk!dk2ih+<7xpekaNSfL&^n50uoHsJb5k?*|xr*!siWw;ND
zla9WtFSGs12grC`R3+m2Wo7j?p&kh?Qk(-XWk`1!N+W{BQm$6GG(OJ2_!%ybo<Is-
zQ_Z2dK*O}#UX~k7ZsO(?Ex?Fj%)G%!-`nK+*3*{SMn~HwT3gl<_<00~V~1#r#*PR<
z4ZQfHrx|ybSe^ec4)AT38buDBe2!h){~k_bM*AJ(BM@XgR1~qvI+k>eGktGRjjmCz
z3^Eynm^7qY+or2aa|<*o(i9ReI~G_t+_V{}af#v5IK}ZnLirvYEw|C#v6;4(b!2jR
zJPWPu@aCJZaC+c>($=w^Am}F2h}c0cvyxMN&$D6WBNXyI6vv@B7}2>-sZ0p<QjA1!
z_3|m+y!dtQS-XSx-ks&SE15>A+%$?l^At~~HDEbQK&RHcTQK4>SP(-l(?eVSUd|7_
z%H_c$Tp4<ebkIh7egms|@8HVN1cy%j89^>jA+rrXXdzZb#FF+_QnmfOcI+v(-}blZ
z8#)6gd)eylqg<+CjG?s^a@h>Mt#|V1j=RXM8bB^rF?K5EpTBaf+MFA_RUWWtGGr#)
zOr)$73Oziq;bE>^8DwDiD)qRJYvXTodH5%U@dSR_(2}{6TzVazmnC+Jiw)Mal1p!3
zw044*jvb*?9b(0n-^35@BP%It^$O=Nog*UwJ9@X!nQG<w@IWIYWD~nIU)g->eR}N6
zF@hLW+)c_|5Iaa^eD2?~j{BnZT)McK6UX}K9~dT#M^TwX)sYE0$)r~!)<ac6z}gm4
zW;G%yBpc!TD`{z6$%U(Dc>Sjb$z|HPa`80VR^LlUy1?Ls&tNS;2pd`|^Mh}YBl($(
zpqQlFW3gJFNMiW~hK5QE4~@~gqKywcwuRxL3U9qJ#PCoR>nYaD;Q6`4qclj1wOOnL
zr2H<7O_2>sym|OA^;(Dvg(#C}eeZ4*kE(NwRx<QYrjm^6bacAF7#qvOESCsPOL4LK
ze3B8wIVI&;a=8p6qb2(Li`;$BT1r*N(96RFsZ>Hqb;i9qRYW|D@f*RHBjpzeLrXrL
zC0$4gB2FQ6hH?yJb)RBrnx4Jz1gXrp#AOFVB5o1ziI5@<iJ}lc$WSWPK$UzUORegN
z!bXZ6nSP(*6wLD5Gd?>Vw1Wsy9HUNAlSHM8P^<}+FoIx;?k-k|mgVyRnI=LDgEx(c
zEAmQ=j*ifG*<<IOYbcd!oIN+drOOT@8B`lI)is15G_uLsc!q!|qKU@ENiHYJKZ;9w
z(+s#+3Daq+F1k7R#(igcj&8Xyl7tqERbNyRXQ*DC!P1Mo`q%v&c=|0aoF8Y?##P*L
zM=!A|io-dVfD~y={7jinQB<2>jWoMcVkbnZL@J;KCTnAqY_Vx(7uU|jPFP(A4=~=e
zlox4B(MD}B%3Y>dd5&uT4t_Ws@x~k1*|4#bN<}ahV&@P^Xfi^>1~?oJfd=KKVN@-s
zVnm2FDT&8XM7eg3LAgS{v!}`WFWfq#GYrwY1pyqB#0i)Yq^W&v!Oo0^n%Mx!7pc`=
z#tYX_ncT|pqn04>2vPw~9kFv52Vx8&5$ckONoL*Q(1v2fjXa;lg_A^KKjPK!vzC0W
zXSVB`lLKVle1I7NIK~0F=@QtpXL~~ca>$5>sObFVu^X$jA{H;5g2E6rd5Nfgm^d6K
zj!3|YYcNX%lYmx@aW2HU8ZNF8M|I+QiQ41^YSkl1aEWZUp{2WrOs@Ne>aQ%`H>Ae+
zh{z#;fj!-FQw>NOk0Flb2gXDy$#mTm{8Y@4l<f>QBM1YODt(m4ddZ}=lFhF{O-w59
zK@btgpwz%A>LQ|O2r*UsG-O-S_^Ixuz9KVi%$EorF=Cvnt8@ATfS#T~U1Fo8%C23X
z@`}amTh;_yRAZ&NQECbG`MGK7uv~+%oxrZ6(7u66d6e?x0AbXRNEI)L@v}Zbx@Fcg
zw88dnapp;yCNmPd`pJ@OyX(;5U6C|f-o?GZ0dx59ABVu_jR^$A-3oYVs?2JG_yoBe
zskV?Pb%ep;XP79zf&^#DwpVFcQ6SsVJ_CL_mp@Z^o*%rhaKolJYqDZ6pFe!~-tc34
z=f^6GcZ$N6Ev4tI&A!h?wMdNhme!eZBR59{W9+QTvot4LrwW|&1~v<UpTD12RinUb
z^}@LH{9pg-FMnVkuz$a}TTF=o?AO@iQyRNbV^bbVwA@}nF|*m8sGR{lm3o^6UX}n}
z<^fOS+q@UM`asR-C)h8#fB)x}lM~$UV4s{h`h~NxMjsG0Bi3dUA&7Cy?GT>=Dk4oy
z4rU(kW(nYDx5TLu1zwA%XkQ$cKlJLWkM!@`r;F|#SaQ4k)~&z4*+}*&&!!(#7oi#{
zm>7&qS7vm9PH-{P36@#vzNiorw>p1^`7H9IV#InTE7oKPUFF%ZKJt%WdHo~T_U%)%
zkm@gM!^Ey#Px!U+y2lau9V6aOW73UnI&;?ZLfzwYH&fhj&CMdu+2@m#n2&QcP~H~w
z$%C&w^wiY$nF9wt7XKW#%ry7i?=w4gWOf_O!zlL{v2Do?3L~az`%7a(1Bh*GkdfJq
zj#w}<vo&Uly~*tMyd<7)vI}a}h>r?m7W-3Cd+^|)?>B9kVRo?b^V~GGoQ+ApxJ^@P
zf1%sv_Uzd%JumLi0~}qJwD<A3pKa6J-UBi)&@DYZgL>e=$9^H(=H5BpIo>(`-#Y#m
XN6IPiAlS<E00000NkvXXu0mjfVl-2S

diff --git a/apps/desktop/src-tauri/icons/Square107x107Logo.png b/apps/desktop/src-tauri/icons/Square107x107Logo.png
index a4da06d4699a49825f0da74c2f0332fa300c0501..4e83a2bd7cb172e01bcdb737aab9f5d2ed25a8d4 100644
GIT binary patch
literal 15933
zcmV-DKElC?P)<h;3K|Lk000e1NJLTq003(M003(U1^@s6aKC&E002G&Nkl<Zc%1Eh
z2bf$}dG>qGJ-1BX-Pxkms;zo=mu=ySE6olBn_>vnflz)z2{D8kNZ<!T%MYZ0!J*lJ
zF~t<)Ua(wb*|NHJRkvvSPM=%P`JeCHnU%~Rl3+_l=GXNz-lEx=JNG?bd%yR57dUa8
zI8GcVjuXd;<HT{|IB`5X2Lsbz7w6Z^d)b;de#n3s|Kh}Pv@S3|;_=L`Eo1TD|NU#<
z@vVtXcdBk{(H#1jGmbyj@yC1Tqj<2!$54<*JQO&8dZ5wYD5YQ_ZLUAXy1aEwDLiT6
zinAL3_(wbVp8`+{Qh%G_i)QsC&Of8WK6x3CwWN$e`$GXEt0Kc%otd+E?Mc}#CKBR#
zr!9O<{IBYme2zc)gEiJ#+Fac8{JCGh>ut{;R9|~-Rc(8Jzxvq+zEiwn`Bi^uAR+!x
z_hlIIbN}JeE54y7zMwqs*7DX{zN*^!ybk^E%s57$=uh-uh%Z>Hz3%j@mTy+?ev?w~
zy2Y=4ev4Or>=)H?v}I!u3_PH|{#XCFu@m_WJ=gdz03+)oK$}3Flw7lN@P}_xLGYux
z>)ltE)f=KuUitQ)q4B;3kDvccW8?ofK(#y1JNxPtd(>P0(yzYl!Fv6plV0$ye%JfP
zU=$2LIvjZ8kCc@fR1bdnhT`hPoLTfY2LJCZ?2PP5s~-E@JE}qXLv_#F<9Xh`APBCn
zy8}0=554g9-)cp>2LIVU*mDsmg@`Qb<ck-6@A2HadA0OgrMP09!5<h`a@RqLC9RCV
zqEn!IWDv<7-!~HTt-Uwi8ov5%|7*#k#lb-WERs6T%^U(Lu{yhO#VapZ`_9+><=ksK
zFUp6ZajxX-R1QeU@K@ksEEKhrv+>8H;g4?G`1#v6?f%h@iQSLaWjTy5<*|)t?70Y3
zTC7}r*^(djwXa)JOI$0(>&`TI!B_I1_bMcOg#=?be-7s_OBq~F?UPn}E)-U)7`f$F
z;^l9C>zoaR!65=nDy6f&S!Q?k8`r&V;DT4TWRr6_0xMUOm@f>rj00ql3<{4yc@F}9
zCFEuVQHmVwPvE)_?!EJW-+RNwl#tMC9m_)p-{(%&7a=JY&Ay=b`W<a2FLe`dio~nd
z8N3s~4O0qX2-G7+=^TG#LSac-$y0K35LSjQ-s1ROe|EXNG5GxMmtOnMg_|m)qk<a<
zRfGURFgA4P@%oPP`AIJT&p{|>572rLiZ2J01iXiUu|BY&2`L7X$vs<=xMREj#65le
zAB!#O*suF%)v|O-4Cod8bkcL%=*nI=@4E-)pMGIlz0nU}alR1iY~TlF;HQVAj4A+J
z#))glCV=^^3fImR=&A)=1qZ>iouLp}vE%w1Ca!q<dzb9-rb?7_L<9ynRwR06U32!5
zx4hwXy&s!(b`*xDEqUiMu2cwla5H#c(JyT5N`CgI<saVMxAQ}L>wWz|{i*)+|8F-K
z#{vUs`|O@?ZCi2j%X)FG?_Y7LA<i>_jRA1|xWZIX$*=-2mvKrz5*Cn61FO0e-rOl*
zPSjwkKF-<*u$*}4^WPkO>H9vsXcWadWpz>m79Z<!y$inii5Kr!_9CB4+ainRe9K@s
zeD`eU4d3d2)m>wE-AHjvpB;+}=s%gFxJlhyy6ln{Ua{sSuQ~E}{}Z4Xvy4+ZKlO_x
z%l>>(@M_;Z{~|8Vuz{@+@Z*A%(={c1ABX}Vl0e`C^%_vCLvEjB@(0rqM0*nTaG}JZ
zgFJNm-Lv0&QTJEg`@Z|rNLvIH0md1F;2e(>_w9f4$8JAuY-^jv!m`A~v>Wbjb>4T=
zp-<j5cE^p3shPU%*#hcW151A(2E6gAGe7)^4_x(a0ox#~{_7fr&HVfF*6Y5xa`8JZ
z!qq|Tv=?&gj3mRh0Qmm2lm|)*t_y@7Aj8HZ0793cRspZo6dsy@ytx{|>CT|wE(beM
zv4ZK*+Mj>)qSHR{%6I&nK`;W0PBWBJ*IFB<c5eTV|JeUMA-Wt^0RPQ{smd(}9{6PZ
zfyk9VYu@kK1500W&X81TbIC$;;qvEO@{HCMXGp0a3|h_nzl>A8**9Hxa_<LUYrVv;
zEVx2htFjD_y1;iQrQBBn>K^A&jdA6ItAKF=iXM@#;8lQXiJ@9k`1Kg%t!@N+K@Ovp
z6)^gQ<xiF?@A}wfm%itMw|-q;ipByW9LVy2_S-#QDGgZ=)5+xbHV%C`#H2^oM-<i{
z<2a^Z(FZ3$lvFsUtM{zs>++qft=s*?-(3D5?Z{_?DEd!VXfs9cOuXP_r_TTEr*fCF
zO8QFWq|yxcPAmLqOkt>`-5mU?l##2XBFmzO4=4hQtg8-LFDO)tfL8;4JPO<yMKD*j
zVxY1TqA%+N)v)r35B>QYU%vXae@h;K^Ed|4<B5@ht$ka4zc`W#A2@K}rsmoGv5sR3
z7Og-6WIkr)|Ngp*ZnBpz_mx`9FM7|~CBOLB_l&;j>?{6yP1mVw93#npH$~4`r=E1i
zoUh#6eom_5yjVF!gX57AV8b|2ssgSC3J7aVgQP;HElLHd@l^xI!y4dD0p%%$T1Cm5
z#()hhLU39u_LrAI>~3=mE-GKS?%GeU?|$iPs90u1BQb^=#!9!}9qs<r#=JNb9@zD4
z$Ee>uj_ES7krFRje%7CT<ZqvU!`j!*b3&{S8G3~bZViR^2<KxEr41Qe_Ws*m`q1cI
zKQWj<q(V5x+^%!y-aNAKypwC$zmQ_D!+FI5JQGk12z>%VN#=pv9~6BbG7S(58;=O!
zWVGbkY=Ea3xAQ<EucXK@{@U3L^Cmfxw^pz?8bR1mcX#h7r?33Xb!Y7@{q|wb3`i9r
zYxLv{kw{K^{fGYFi>LkOvj*T%2P^&n<VGz1FK>GL@LN8)xGQR%_Jd;8HxjcPIGs?#
zo22>3kht$wA-{Cr$Oms5eC*5haLOY~G+5eR*Y&NwWoNv!yZcQ+xX0mQ3_zGtQi?d+
zgAY!nj}b7gd<E$#i5ZZX{>mGG>C>?Q?l8{NkY=ZXl>_Vy<FA+vv<)-N{!xI1^=Zjw
zMgE-+^{21?=38c0WZ$79+Aqh&acnG0XWW9le9bwpy=+bE)u+x6FFW<ptO#c-H%cYB
z*y`d3U$zQw`}KV%6=eTN{3mo_6g#Q&v$w8Y{oWVO`-`A<AP4JU9a7~KLKBdzQBX_9
z5i$)3SrY=Kfzcr8pUJAo1Qq=s%miQoEI~~#!0Z5w7Qo3ce#I;XXD6`oCWU!^HOyrV
z@!7k6edxNo-?SJg`*9nFmXUgD(!_uS&lq{9EqAcGe@Z7N&wXx?qa7{DzdZZ&4}9Rm
z-5)Y%*Gq#xZp&Wqsryz92HUp_W*|~@IU+1fzv;SltG@QB-m6rlI2X>gX$E9~z*170
zK-9P#lwXo1fv6=7lG0xZD0;9MFv*)AP{h`yY=AicZ(&??K#ClAA`P682fCgBmV85@
zizz>svXbxk*{6T_!@YlZ_2Hs7212({1P}xg?|Z?kKe~S1+BdxH@2^`xSt4b)$M#Ad
z%NN&$ufznVYX7+5jt_tR8{RLCAZy+FaOvT}VE1;)yduiH5TVUpch;JD|M02#7s-<9
zP}c4}kYp{Y2B<QCGGNpgM-`A&=<JVNAX%19E<9*gs2>3&SsDEJXAPhSaQ$Fll$1<^
z%W|BkJYE2{oy4&Dr5yXJu=*y0%3IHP$5ji{m%UgiN;nR$Y06#+s8#m7x$pbXIUiYf
zQ97ShNt=K=*7}TN`sz&%FmC!ueEGJ=-&uZSw)4bL>F0D6W7i=ekV~%V{PgYf&uXhB
z<|}JUKhvqVEGwyq?<+MP6$VvhK)sQs6HpYh0tH1bF$POgVnL5)?9vwJ14hWWez*Xy
z0IC4Vs!9^uF<A%FmjgT28|WXEmJ6qL&B_nmY_j%L6EMmW&sliJNguiT>W|#=!?*0s
zue-#becGzzKfLD3F9|rDfMm~g1|ud)fqj*|`(E?8%^$z#!0vC;&x%qz0E@EMerC~%
z3)8735?gn3UavGPs&PS4WKfi4i~vTJ@rG4NicKm|k~iWP{DyVutdQ}UI2Hm9XK;ML
z@fDm<NjrozT>wQuR3Qsh!193=S1An7=Y0FH414ltTdVR{UQ6c~yF-rk^Ot`5<L_Sn
z@!ktn7=~jal>6Ox{NwDm{PyE-FD^{=&QdcT<xh&pjd?$^s!JE&R_(g*bid$)yjbH>
zS(F<9QKYjz7`~ycsa}nwSOu<@D$>Gm!kWMmig6w>@IYxRGD1o&0Nw~S$rONbpf<>0
zS{$N9NwX6$dnDK_1)~E9GmLk3GQ6z~_~~~PN?#4bl#_6_41fR8ANIZaOh$xYqs}_F
z{nWE=`1p$Z=U#4v#x~!%{T6@V&OPcoH*9?9)1$RRrDK(BJnQ|e83I&m`xH!;%PgAH
zh2fHtqf?4=rZ~aKeFn#a<erq(N{#!G;#M}r6<L7Ec)cEjL0q5;l~kbuk2p6dT_?BK
z0E++>lEJT$+YB+js|qF=w-Pq&tbo}eq}2l?<||Bg10QjKr4@<Ay&*470JB@OvjNVP
zl4Pg)-0z>*^w9tQZrl65x@7L>zVJEkr|-Y-o~t8FQ-o}MwquiM9AmIzGFE#9?MCDg
z^b*O$fVvtO-#_-qp_4l2cR5vZT1rN~l3tndLLqQURTpmP!V5z`-DB~LX@OHPr<ajr
zMFdR4s<b)AE|JrvCH`0dLQw|DF|?_M;?Oh%HM|rc4BIz$8=-02!b+Lk&I!(h!OuIX
ziVK&ye%Ixazv~;@b^|hMW`*%$Q+ROi@XsIk$(djLhX-$aJpn~*eI%cn;veT=5il`8
zT4<>=Jt~lolqYbO=B;*DwyV9Tb@u$(ZF84}!4vM2PeyRWX^=AOj7-&0u1}&G?i~%-
zzJ~-iW_9JSIWyq4&soF`#bPihk%+*V&i)wHTlAId1Vbsw6yx+9ivyuWr)R-VwZjrN
z9D_+qjU;VTz%*?jvLK2kIx~^)4d!q#XiGmnbw6(2_?^Gjr>*0wnpteS#`f-e`PXmk
zo(hKx^m&P`Kh}phI^Z;01~CD8cx?%uF}l+8+84}U+||2k#oT4<7j`c?r@dwF8r$d)
zVU&XxBvAJ}j7|=@8@4=P-MRbbzYf@*TO=x_P)?R3<x&MDa>>~{TRLCWD~&L;6hkdg
zFep}qnz7(4j9CmGDXBq}+RthWGz?-elr$Ux!{kUhB5bk8olV=WeU;?39j&RQ=jKx@
zFYIYq^E@UyyAF;8*s|}5CvJW6>#r{cTb^u+KACFvumE4WYTVy55<~dx&`sj$0;K*E
za16BAoyp$W3%gdIwtV)Qi<iw=`TY5_7cNOBI}k=`RO&XSD-2r?hGDTPD|IhG7)dCW
zv}|)FU%PCTtjXX-zuEn+e^&60SgJB~<=__6VvC3t)ICDUq^6YoIO8)2u=sbJsW^Ry
zp(F?6F<5|MaWJ8f&M4WH33)B*zoX{wpO|tV+`MNJ{|5(6Lm-=wM17!GZN7Vxh5vu9
zga)zEcRS)a$5G5Wd{PFw(%sn=OP0(z<I)uiPJh9o?&W89w$8JJ(E>jJN@ZZzNaU9)
zkze-+6qj>~3Wj$5jxag6hznyc@^GM}{N)R-y=1I(=zEWkeEgM6D_<K6f>ovr6J!}u
za0a0ik4al4DQ;2y#K<K|rDK)WkHueMk_${JE*vIJiy@O{e12;Llbbe+h+(I;zRvlh
z5R+8dA#bf+aQ@<}-ZQ_Wd!<s<%4BVD=R|dI%h2?|wnNiHLsQ;FF;Zp!_mQ}yo}z!!
zz%{=<dtfzM>_`~%voE^xyt7~S?xhP(Ij5s#K1?HlK!c-X-*8x~*L)cU5!dyu!8l{g
zu}lUk85Q{x9)~c=6v9Yp4PT@Pn8+#xmCD-1Z+pdX@!|g%t^fL$oCzp|@MLwuumNEL
zg2h}Q52?nYbUlt?I`N2iCFrxIhcKY&Avl0Y0K#UxB@LXkq6XvVQKSN?Pv$UbYa6F_
zz4gO?cG|l?I=5pE91}=73RwqNrc)k-Q${@+$5?5gGB`E(<o?mU_wPKgd&8dLeOpJS
zM@FZk$r=#I-_<3~#PUWQKc-;Cx;V~Gp8erpzW;;QU8(|x@qx%68;|@ti5)`fjq6lN
z2s$xg@F*gdoPu)9X6RGY$&_aIKuNlOL`o{9IHmJJ7+98>uAH{$<G;9b+qS%?2BzrG
z6x?Ye2}FVt={VCfh^2@ajEHd~ih*j@RyxV%l+KVf0xU&9fm6$VUWdfOWt74T{j{cK
zF{G^vdq4e~^HyDZz6ZawbEGV6!Fj^wNZ3Z0Hib-Dt;nVFBA;5}EMCmkXU+)M3#SSf
z(<r!O7#uy&w`*Vj1H1b7Jh<cF?nn0y@83TXjFpuNb*}hKj{gx@dete3jInyf{PtH~
z>IUxA=pL1>PU}rIjxe}pmZ*I})rf3-PXsM3u!uUs%@dWh)S+Ab+<@eqaX;i-|E-Fk
zxZt(0&fD`Rg)6)N_UDfezvo<9siCY_K&-i=Bm^TX(s7CEs`$YuJ0$4iEhP<sEJ>ZL
zB%sKu$hs^8s}@z!+7VDfu3;sh474WB@BRFPr!Twa<k4!i#KDucuwjrjka?O)RH3Bn
zDHQz(=Cle;&O%E-CaknfCDX`c7g#Gg&RVi=iCkj8%zZ;3ODI%^v45a{&z4=g@3`Z)
z5C8Pe-S^xcp!&2Fynj&45+ac(Oc&(FhZ5H6C7rxB9Z-bO^$ro4L?7uyOala+JZPY_
z7$xomDso{;==Qm=$wetC8Ru>VQih64dIe<)FR0fR&%0**Xz{mi8Loc+Yf7mAj)Ed9
zAr_s-bdnJ$n21{;S^=+^HZIPUq+b{&q>%tOvw)QXlmo2lt?J@}={%8SZaL@7xu1P#
zMel3Yj+M(LVThzK1OjkaCI?FbF4fdk%2~K}t+t`KZ34amcO!*LO<~Ga7@lCh;E*OW
z!-SJZORm#e-hJAlv)5tKd)_zomXH1Qw;%n)?H^bV=7urdrj9OHP4g}J+n%iWkJolR
zDXgB^DVa&9c)1Yjm8@iZku+fB`lOUm6!I_(Nh#jw2*sC_cp{2j%HiBh0Eq-hna6_y
zwLBt8J~Be+aADV0_kQrJ<6G~&F+^cM&j2C?SY##S4jYLCxkKZKT8^=pQRVa;3n2Gt
zrT}g;bhSq4ZHqAIS%~1)7%XGm+%G-0Y{4}vr`<}0LnQSpa)VnAgOiU}L3N7AV-~w#
zgWNIafsB(IlMK&fuo<{#K?;NX1FV`06#Wnf$3j1`i^;BDQL)r{XSCbPmyLUmZ)^1M
zjy932*D4}a4fYhSe@V44Zar{Mzi+ij7$)OdX%^RulHyMkNg0L_=$lZ62xX)nq{oQA
zmxw|sJz~x|kmvx?a{#-Q0hSTF9br>$##>ug$t9hCcaxI2v!a9#Gr@&TU>Qo9h9ak`
zfzn?!!ym^qid6)tNP!!PI3qM2peL_L8!ZCQkb<|(U)}Zh-(9lcH7hGotrjZN37LtI
z3(ivviEe6ADp{&3St%>jJ;3z=*8|F~Ld|8IephvYY8|L}kR;;K-@8mdsvd(IFwWY9
zxc&zN$@_Nhg)1j?!}S=t!Pt#Wd%wMBxP0TkC|vW_4I6jW&RVm=8b27s7DWjKJwno*
zM+hSViZZ=8VrjEy6sxF`Q9N=LSb-rmmmxo&T$DnvmvO%W8F@rFSR&#|u2}NMOSbKI
zE(y$XXr<eP<%BwE5S%i@c*W^eN8cMtD#{p4vLrxcn6^aA0n#l%E@CK$NnWpq;k>rD
z-n(?+YqGV_^Cc4&rvOJtCje&-G+4C}pfp9&Hd>HWY18{Mn1X3C*$gRZQ8JJWAz4^N
z87tGt4=t9!SG;SkiQjDKbGPmoP9G@!>@($HVDjmZy-$n57^r;booRdFWqWs?IX9O|
zg}oi~#KdTTNHPSGLLdo@h}a(umJFjt6O}_5oLEsXL&i#^5-@pCVc}vXd)9%gBv2h-
zJai4X6^X(`3H4&x2Wx>!1l&jg+Olj-=*F&&;!Yz|)-150z-*>7Kr;i_<T`C2l~Evp
zO);_&z~OD37p9qGxRFO?8zmA9Ji*}f0@)P`!K9K?qk!)=+AdnTt6erC#UQBcAb<oV
zDRJ&31$amqs->jiE8fv%;?dm)!wnnuCd=+4JNrvN_#mC<)5#0}K(OMbx<ozfpZdz#
z%iFs~9(y$O?e!_-5_uG+2{5Xg$g1K8)f<wMH_9{UC79BdMv`1k{|N)K4ovL_UwMfn
zS_qpa83y+hF+DVddU*n&40yzR7>=Q>gurqr4%w88P=Y}C#A{VsmkEg^ILk1Iw1Syr
z5EhWg0bW_55DJ7r8U?=`I#Ep|GYMFZ0cA;0>!ke@z!Jc~CWTswJOwyqO$Nm%DmfbJ
z-N>L)lHxD1S}_Mo;o33?FvVN*CJq!Q<=yx9OE(&nJEs5T90j7!p59)rr^R5<TK3f7
z=-%nCJioW)y>~tI=*G%9>&|nyVI%Ne9hYLzWDFL42#WWbG)+PX3x-A8Z9>$&GA0M>
z=pPc8a<f=?DF^EY>RSy&R!SPS;zlIlM@+jiO2d<uk|g+42?c8N6IfIbYc_#1ZaA@3
zkvPUmGEfrZ*npW;GPD&nop}(YFk0Nq3+@1fl|#0D4%&OWvHTQ)*7?BL1_OS@(0xQ&
zo{`d@i4*rIjF@$y_!uWm`WwPa8@8_$vKbT8UJ1XtXR{v!Q|X<PUs~g-k;&L$%V(3w
zjkm~@!^iGERQc|^yYPxHY}j;n<?PijbPV4@plI<>Vr;<>1~|7Uxk9Ks)cpxm%2Oy;
zrcm=-1f;XzN!XcAc=wqwyHi+x9#9xg$zjigr%F<}J`6A5w#|`BDcNE(6dWM5iJ6F{
zZ@P_77mdPBGA@F7Qb{`rp0pT}<StVTVM39d15z4bRvOAN;8`5gCP#WUhuaQpyjx-9
zw^J~@GVDkoDbjF65{BjIx1wBCHVR4|xwPzx?Ao9O!&3>4I(Ko~{Tto7TS)Jl{?g^;
zaNE{r0@O1As|gsxxckd53f}rWH#+s@cRcnzcj>G%MHmGLWg0#u8M2H(O`=>s2-ly4
z7uI!b6GjHaAsW0jwzP=DuLRg}n?!ORL+=HO7Y+#tnL|kN4HC96WF|$s^8v>JB4RY^
zvFoFlMY(|@&txm`B;!1xU^z@CO`Ww<jm5(xLyf+d0?f*SrxLKTooHLpfh89K<w2nT
zVITG4D1zbuq(1>JeK>}Nq@71L*^O+f9mHgqBBAT^xUh@m3rWX-NJY5g;fLKybviv<
zyy4vw-h;P2Q=pz9Sj|IWw0_gotwH$kDJw2J?Ir8OFliZlqB@S<0|)r#y*uTBg9lJ3
z`;f{((r!V@X@^ZYHBUe(q3I_nnT$NetK-1-+kmy#Fw8ku@%?vjX;>y?l$D93i4?gs
z4kQymkOYD{70D!oX*8PX6OjVfR?<i?p0t^cKNgW$2|(Hmb-f3{gh;l-%w~|B+lGY~
z=}Z#+cSE{mmpEN+a2w395XlP4{s@Zhb_`GZV2UASw<DA2LCTtiw9|v6)rORvLfx-n
z+onhTk~f{6D*xh(BlTZ=@n`_`jKONApC)E?UVQFrJI^}pvT!f}EXmN;4xGR66#0_N
zT|`j<!=uC4wsRl0?i<10!8)c%p@Jlmwm>pr(rgK?i)CM-(8q9alS0p#43mT4_5MgI
zKLI<zc`Bih0V84+)g&OOnO@f#LgK!N9F!U?`Zr6-gvGeU0Goo3sWi7px*DQEL^?0c
zt^|6{X1rq|@Z^tx>IgWCBvDa%+ZJGgK;tY$J!}La#n}obONS6e8{rr>=5@`&8LOAz
z+|%blq@|P_Mx3ABdiMjP>c)2;&CPaC8>}WvZDLm273;rsaLIz_TmAc7-)M*|28Ut-
zm8>D(HVd7tvvApkr{ZNV^brJ;7#cZ*O*^OY<jw#G21}TnvSB%G$S@Pa1BNz6$SzWP
z#qaYO=YgSjGo~F<CovFcl;%evWo5ApjqsrGLCRYygbfR@h0<ZoY{WArAblb&nZcd5
z6mMU}<h(Pa-1j)+)4Qp8Nl6j)S}0ZJ2m%H#2vMuosH=vQ#jv0~i<6fw##twK;gq$V
z=$+kyTqX^84wPuctFN-d=RL1u?q6MZU%sveCaLT@8i0vs0+fM#=CafOeS7cx3;5Vr
z-8GmYXhSavf%K_GN>U$ds3`f!kiyOc)jAxVZQYog@5XCi3?!~7W2!WX?R$!NtZx`Q
z2C5jF&grY&_o%??D}b)EfzfJ&tPP|E(}ic!fd<PbuqXwicuxjnGESC7sk%wAja(o*
z%)Y~nMNh;HWqN^y=YUtIAjcjDL}bACX}5_Fce(}@7LZL%Vo8g{+Eco4=9;BgyDX1+
zT{$E~7WE*BLdC(*P8)m3w?aTTiaT7%*Ij(YeDzUt?^`~8?R;Mi6^@2({%LiJ=}j3j
z_IWG5^w5$8FYX#0t-DMyp|@{po-D53W1(|Q^~!+rh_>jI6zbCf4vkQ)#L$*bp}Qr6
z(^f>dbiIoRMeH3N!{$Q*o5xHH-H}A*)D)amCX5_Fsxku+EK@-yNOu8AX*7!(w3pG?
zh+tCDOklC6P*J)yLkUI-m~);1BMa>KCHT~Uk8rq(bU2Q+izaZ&Y6GX9wiqi`oPv3z
zvF;Bsafo58WZ|J<fkN4UA96BKFfOUD#;KSjNq*91d}?2<cFp;hq^I8X+26kROMi6=
zarMtsqV@;s2Ajp4;AbuP{N1Omedl?lQnd!ftmZhYW~-a3dfOsui5T&?0HLBqf92rR
z5VXimrGP{Ra8f|d;h2@?=xK@2nfD>=3P!6n3`P+)kC;gIrZDG}6w-McCF1CY0e3tk
z3A7}zbVv3G0#{@eQk@L>G!@VW?wbO}_5fY9-#85Mc){m#w<}Xa6|9{jv1S>^s$~hx
zo0A4oB%<MfN7fi&U<dG%e`Rr&9?Do<73$hf5;tja24dlD14x;Sr;<RcA^nriGm?M%
z?SH-V3pc&{l2{G-^oN_Ur=z`C+w<Y;&sy`*H&kl%3ZovZ-rYfJBNp%4AW8|Gx{$Dm
ziq_Vpi%3bWjd<=6ffs{l*-F|r<H;<LOvgN4#$@Qo80g7M%<AyrWb3E|WekqjP_<Ji
zq-_*ZS@47dUIpq!YRku32r?rx#bLK|q-F!{M$CTya%&BfTYStn6lR+tx^pI0%(gIZ
zwh5$Yn~4#FL&U5bq2ek{(iRJhS~=K!m%@&R6_QkR$6aVi{G>?_-8LZ(A4ur#GSh98
zya{*l*<t#1pZUlaZ`trq@1`q5rP(nBD-Mzpy)CbK*Tw7p{fkvMs;DruXdh}EJYy{$
z#VMVZ8H|(0ooFR$ADD56SL)b7g)4p4z2Ue)NB~m(EE+Wwc^=~OQb~ra#gI<{UF{0(
zvjdnJ7t@6zh6^5c9}-}_-N<z(QJs!CLrM@`<)d7y!JVohGv>oCNVIqgOR_2CmS&MZ
zmzrtR`v9aXQ6peHg{sfAREG2;)vAK;0W=AKkq<2^JpOY9(s6L6qy~wY{U%^Mmc7{~
zivbhh1Y%DPZf;pMeZ`0W>P?UByXpGh9p!LT!D<G_R_n~OUbyb&4a~?_{LpnYC^L*<
z6D;x+4R&3}2&Tm&hQT!u)Y{N(41>k(3<9mus@H_929s&61(B}_6P$R!bPh--f%X(b
zs{<@pBT=swaL+fU@U{E4;q*5z#Ccb)z@cp=M2D*IM@v}PnnG_TiB|5ww3C?f4D6i%
zwhb^WITv`|Il#mewKIU}ibAytcplRLg@Kl6>%KF6C5AndVc30}!t{tj!lo{FY*7@S
zHCU_xn89=wnlv~kZ%RVO-Y(`&*n{aSK7RGd<JHGDHy8g=2CJz_Z_i%5=H~IPuCqh8
zUJ=Y7yEwxA#w;zh*5iH%<<Z(5GSbCp&W^MhhDk-LqSe^2G6FMxI=M<}dC+s{XSxVB
zJxs<;lh_C%aTVq+HR1R*{OpTQ;*RlqkndiNm9x`8i;pKC4)MB+Pr|FOnT666!=3}c
zo^gf25-?UF6%|7e(%w3WKYuf)o)igv8f_htiZIF(5QdVzCw)j0EF{yM7yBgoHz?T2
zc(GBeqV^kgrU@)d#I8`gL(Vv5qqap71c?>BM)<4U_uw7hd{w8!Wc3e?U;k}3*evQ6
z<X`cTIo;=4<yyh#+VwTnP7SQIF*THsF<TaAU2$mAx@k(WWdN=sYDXyYLQQ>(B&&*L
z*4mY7i`4O$UL;bwaZlth{ZXx0$IovZ!o4HEM%C)U<rlsfuX{C69|rz*@BR4b4L?Dq
z>y0`|*t$<52pQbE(!)$h8&4w8$s(|8bA;}NLhsR1ih89@^)P*A#v@5Wo;V)ULC;Hc
zF>r?(sl>L&;}{4?N-{`hue;<VJ0PtB)qi@n2H+T+Z{H_zQST+mix<ECGr#Hor?=}3
zc<QKiiko6i%Us-Z<+Y5_PF`*`x9T(~>3HAnj6x;ekfkWYXtXSp5vyY<ZKYQuag6JO
zdw#sigOKr1(#0V_;zF19T+xN4;aP5|WX)HyS^;wH9C!Zm03O_a7l!?V=xR9y{kwhK
zzbnF*e_Y0a!9%F=t+?^l&AOFBVw#|!;8z%eIzymcT<qHWHWPqSzX#R91W*i4L#!!@
z28&%GV~o@Dj3h&%mAb{DmVySM)IB^uBqkr6J_~h|>j6;rfr_tWg}!<;Wk6boCL;fw
zMX!1rLu)#YTkPnz^%*SFt;wvDR5F=JaHhL#%}t=ONHPXXugKWmno8A%G$mq;(_+(l
z!G=u|<4!H|ARzsq22rb=VgTc=GtJPTMqj<AcuS|i&h10kxUmm|(fvr+JupN@^M!-E
z4fJoBfZo4qdDygT1NQY-kWF#@9&yViUil$u4GmyykfB_NEjm_L&BUk1&#|S^Ifs$b
zJ=9P#q&n#QB&h>6yW#mE{D6K|@Dz=cV4T3J_zIP};uROX5^zMejR`aI`^G|W-I2r5
z1S?J*6l(Q>k$WE++JDHBMzNA>6*7|{#@UKn198G0zntQl=xhR~#Y)Zg#StTZ8X-=9
zB{xM1UIL6PENm#0=xeALt$dzHn<)Eb+;evyMuP`YS3Xkqe9*$70(f#lBGhRcl?o0D
z(N^4f?>-pRH6~Y1@ksv{XU-I3>NSRu{WSh3wqPy9BEaZ80@9Mi0BXP*-ij7hrpo~7
zumb8TkaaaX<B^0LM5y{9YJsGo0#J^LFd;By*2B%?LzSCu-<`gH#}A*77#okTnLOGI
zhExN!Z@kFblYO#nY<*9<H78rz+G^=+P9%{QG?&6B-Fg_s`Ui65&Fzl*r{?<6(q=ss
zq&cB4wzOFCOskeI3JGC!2UZuJdg3<{EfV+KyA4yt-5B?uKq|2mrj-My3YbwmQHUa)
zAwU>8c;-&*-2W(+5A`CO$zpVzwwf@#0A_Z#fMIB#ME5d10YJ;-Lam!)@vb6@y*g$e
zz7hnWo#k5A=2at|#gaTUk_If2G+9DFm<Z%_FfEG{g>ZbT=#&d(r&6A9CTkBrHtc=t
zBJvl1C@1kh04qLIUye=fDt%&6yL;Z7+p8CUq&Tsv(@C}>k#^i%OKX@-=Pj@Vr<g!)
zK~lic`n`sDzj0m-n~QC2Mmna`i5X3}c7KX$E~eRnj#(zQ?AV2Y{Rc1>-U}vdm?95L
zq+y6gW0SV5YLPpK;0Z8pV#0eEPds@V)}MV6J%?KDx^1mpwVoZNNN2?B71D$-{Th1C
zh7PUqg3_mT1Xz0Wo?ys!ni%Q}kZ=SX%hD8^8`e?wCV6pUQWmBQR;^Nn=TF0phWv`R
z>zl=J)4!L(Z4Z+=_sDB|6v1j9)ZDIlWB#wdGVb5~Z&`EgnQfKz@5>g}UO6?|11p(A
zrX?3<vw37PEnv*y0Zl6lNQ<Gd(ZJ~;&(vSlWmQc2>O3V*-DP7psQv}TnN-rmRAma=
zp6o+eK8~6iMcP^f(@4Xz2rQxbzR->H$~fsUbaT@+hOmEl6M9GIBav#;oMgN&J(hG6
z9HbnaIus#4#~=XdoV2)yo<eG2?Wh`AVO)X4%HEc46NmOj@MIa&#VM4^Qz#ZDQLasf
zDsn|6hYr=${%@E4?LVr7{aYeMD#F9p@)&C{nx!wrFfS+uk3K*Ti*@C*)~Xle>g)d|
zQCP6j5LuZ^ckxt93tDn{WU{Sb($QI1L|Q^hZD}j2E}EsTwPFm9cr<>YN#S&eNABN(
zn!6tp!Q-&39E6dDDO$iqswq-w>^ju470H;%h2el3CZ_yH(YNPhoP2Ul1F5S4{fNP(
z^BEnK$j@ySB8M*`sS{{R7B}N<L-Ei71?d}@ni|EnzK21I4%eGTsLJr=gzU{_L>Nr$
zdvNTAm67shwywrUvk7^OHzqUzYmN<R21j3wPEL5E-<k5BxNT+Yd&b;w)U8eK<W6B0
z#>{pkQ*Fq!w4$XYk93CG_z67{!FMAlvN+-iXQqq9KryPnq(Y|6#P%JVF*!bniQvK5
z#ThvWk&{BCxnVf*t`w?Qh&myyJSl#eDH$BHF78GH7#!J*xl{9yOm^^MDU6@q$o2??
z>Cs5*9BDT`rSEzH5vxL1hcd+gdK{ihBlAjHYLDXd7!DQgg0QL@1KTi>vRiS%!lm2|
zSmFLr&yQ)PBUyt#N?ZTPeW$vFqD;W;NUwsc1V*b{QH=J0MLS`8EhrQ_F*4MKWHOIz
zYaY3lJW{DvIA($h=y(DrrDKf(lh}mLIVQ%ZhOlpUKT7fm)Z{1<b~{Y7MVdwn7iL<<
zN=}j?#`Rfq5piaMF&hR;ATTPJ@;0KcZz)bbrB!o~fmHEMe_gyYSuY7r8^q02OaM@w
zN1lMDsrh9EpNi&KB(9yJnNf&XfroqwDQ6Z;ZXsi5ky0tSd{GXgfhn<pQLFi=?y5T~
z8jOauamK0dmqyB*i_q+XFQ-utCQ%8tKm-PCFRy{K&30H$D{`$ZXlctMmuo{Zlh$+w
zH4W!30m|hf9{bf}aOGZ12T#H@v(hk9FpV4xBco#$Wr8!sc!O;rc|b%!kp=SvEYS*A
z4q|ZZQM3(qVBVZ%C>I+}-7<AwyHJ|O<hX}CYsKVnpn)Rm*T8d9@yCrz?PzuCK}uj7
zNvjJ9vjrBnkTBEeHWE1Xj8@#foo3k_{ZVO0aRaziw5g6+dG172cr;y@oRXD5q&g7E
zDr!*y<!~65G&OL=Vmn5LI*>}XBbmt|)6#;j9tYdEyLjxuCsA<+G3IT6VI~P2E{qmQ
zu}X-HG(`rS`u5~%8Z=MrpbZ#Yz%UYsWC8{P2s4F>{{;GW=ivnbW_8Vh=lLjCrco>n
zVRGsKI+m`7s<*=T6b!*65y_2Nkx%g>dM}`6)-Bj(8*GtA!f?=@NaNHF3+;}CS0!TV
z=pRQBET)JIBcW#^k%z5X-~|<UVF^K4fh6YJ$RJW4LRCjKDniLo7(PcS$iXh=Ar9ry
zx7~!NebOij!4sOsrbQr(jI>Mwss*OV()J^r^^r9-_k$gtuR;5&Y^|Q+%GcKDi3v;u
z_rmL+!h!u6NEW~iClJXJO8$QM;WACg26RPuqwCy=rOi#=y30&Fpk~_z9FalB$zfJ9
zgN3a&a)}6DnWlz@Gy9Q`OR)5;KtUU<O|VFS(WnA$f|+SJmWLp!zz<6ZqZ$mA(7;LM
zBaAAj%Mxm83OwAUYiP-9@WVO`GX;y<n9PDH+F+V_u0bOgXxNQ$Lh%e<3J+2-38kB9
zR64*QMG_CRD#<eQ2w53Z;eFtKf@X};Zc0rIM}`lBwAj@9Z`P@t5_VEdF;3Y$EkvOV
zdRy39h$E0scVKQy9xWDw$s}CK5%~`4b=|@|e!*(?vkb$4j5rppXv6GzDeT!bh2eoR
zWIchD)1ohs7nBi%RYb~#;7RI~Y2fGrMzRK`QnAoBCOfoCGesLWSqm&9%S|f=i(;e(
ziim#VJZN*i_Jy$uSb#tYW6cQd+o#Ru25A+ExurzJ0Zr_rcBMldPu&Tn!dg+Gt6!_`
zx=5!TzGu%aY~Fky)}8(WtXeS#wUR_zDi4!(>*-qCfEPuml}%JDL|7f?LrW-4rR<7x
z!Fw0Bp=UuFbLO?6FjYf;-y{y~E2C0OAYo;Za6E)z9YIvn))vYd6nqGthSKtD`n=?N
zDE`<mjch~3n+7Es1R@n;x`{`;P)txY2xQt^YJsr?46WwXyBvvnpb1?u!Nn+5r=TQY
z>8X*l(VTQ4hL)c__|V<xoxdEt3%fBnQNq0s+>CO008_si#MZ}Gqs3`M!ZH!j`rsVC
zRH#cO39L$4y2oNb|4{`?pP1g<&14uVP90a$l()2IaOV09)}G?y!2W6U@0!NMSPceG
z!m`?^$c7)*5Nd1lKs!?7W{PT9mIc#D!7{TDW~)xk<A4&ot(YyR_ay*ne=}K&3C?V-
zO{YvDVggK(>!gieao{2MN(a5KuuNDP+GQee&%HNd$FAG3V@D5`FFhaQ69*9ZKH9U(
z^)jHzp@u_?L~qND2mdPuKjN4!3lu7}o9pNwM-eRI+~QRnQ-UOr3^6fYMtgf2jF~Wn
zg{4couy{!xW1|)9>7T~nKozyJfMce>ojgb<FKN=FrpaULG7S3L1Wc0(;v|?sDSKlJ
z9a)mDs+&1mJQt9Wno~LYdz~{V6N)C6FoVFC2Dd2zM-UX@c{LQLi^!)U{OVUf!2W{|
zp|xcplnk+b$9=Hv9CE2Su(+*Vc{-7e?<`5lO`}Ij&B#C*DAyd43B;Cll&7N|&1^7k
zR5m89kjA21spEkMccHy4jd}C)=<aSsB4KHLduLY`-91@Us~-06E24jQ5vAz>7WM9t
zjn%bH;-1`{VS-b_qFHv`S8m)hwL#%DXrvfK+Rf2yh%yM$2e7oH*hYg;VlW$79_=f)
zTXFy0x8osxA1bv;WK(nXdkNEqnM}eIDOiR>#jg~?<PnL2sAOP_6L(JiHrn|}TYU=k
zBr3siZdsZTkQB`0pNPC|Yf0gxljq^U{xNLcd;tA@hcLS*k2yVgWLpw?L$zgEShZ>v
z)|}jqyMA*B2lrKAT0&<Qac?EI6i#J<E`l2qPi8a##0JLu#_4FzzKIE4@_^LyeCi0J
z22$E_Qt?bRTNG8{M?TVt*)W(5lQL0}fI$m{3EgU?1)@n^eebPU2^=y4O6Q+c;i2T&
zq)Dvdcm|8Mo5ghrrD*XoCn?(Mm9w#EVJ8j_Ok!wg3I`61^8*JaWP5uC3m0~xtu2FE
zEkH75Vt#KH`}fso!D`O0*@0$?L^qTmG%8eL!yBfdv(OnYcto3AgW0@&#^GVaIy2Or
zBzg@x-6WLRLYt2vxT7t~;Fd0|=?Tp~TthS$?<t~PFVq##auITWjU<xO05H<VQ=xeD
z?^Aaa-Cz_&($|eUs(I+d>#mP2TSm~+-HJuMU0AfR3!`I29Na&Fv9S_1KDH0%pSv7R
z!qVBCZnslq!}P9CEoswxLo|Az*PgMo88SH@B^h&iGfZiGiJPPJns;5*znhtG7RNaH
z*%mF0SQop|_<kdCt3->m8V*-WRU64nq&FAq_Ey|Mpt6N==|&7*M7Odz`o~cOD~LSb
ztt6#Pl20dAEet~R^&i5%edCxlD~AOO+R@e3BD-hhFg;bp#B@c=n&b4gVL1&6n_m68
zn*vD+Uo;z(T70AxPejLRxSF#KoB!UN7OjK3Rv<N0Qq6<FpgwTJ!e&~c)Wag>dYm`J
zPi=tITmX%^1C7pdyhmC~31E<LOL_s#!|`IeNgc<Q6-4DC6tYm#r+rMF*(}aIXE_cW
zoWP-xf_8)Xd<ygCcc7=I4NLPWcrIB~Y!I3xZKmXLxAt&DhBc>xHe6G4d|bQ-JHC^J
zHX+K(53_lO?s(`Hie?WR+r%4sgT??seNd51CLQNBdOlP`N22!+^CQ60*-N}tHzFAq
zqdJRX7Ka;1+TBUBvXA<4R9N@MA*=rA00W;(o4yGE`p~&t8mFF;L7`B^z~Cef4Nv3o
zP5aQ_H-gzcZJ0YJk7UBums7tQT?<_}#WYew1R!-}($l_T86Ts7*l1G5f1}ZgH4`)9
zoTd@P6K5K79pe4sYp&lkPOo+LIdgM0deMgE=y;?gl@Xkiuyuwk)O0B6`)TT{g5s94
zc%9TvVVSlqAD^Sbn=zqK@4sKu36SC5{z;vES+=1wwQM$tlTKQI^Uhz6m8<9K54>~d
zFz&u*yG}mn)=fv=aiBr_#Ye1=l8sjIj52B_{5Q0I@!!W6o~(o(x~-uFG7S(LNlH9K
zMK>E8F)s$~NY545_>Iv;`t{=-1&#5%dTT8SDamH_%roYo9{Q+-lQh`;_ynu@0Vll;
z->=n2xNSM|;NA(`ddqh7?;6vWz;+0<2&QRa>5|zv=bYs@?X(5RwK(v6U$^jOe4h*5
z5R6?=<Mp*JLp|la;_vAKH8Sy;iJ}ebXoeQ;P8(wv8by2D<!H>Bnz_wVV+f`8a>V4v
z4?XXKK-ZzoAXhE*?;E~AFHIGTgp$b|uc-;t<=9~J{Eowz6}zyy?0a(G#LxH4X}@Yd
zV^KIYRu=c&Sw^nS!Qy3|ShScl84kjL9FBpWo=(h})27u-G+Z*i2n{Agf6sN6rQH(O
z4^C;k4i0qa{2_K%@$DrVyCCUk+$yO#-s^CK^2qaU$fe_9ij7$K)LSf3U8Qe;W*E8v
zKCHruV-#umX+TNR%E{iP9nP=rxOq%savaC^9TQ?c;9&9k%chE(1cxn21}RL1VxfkI
zH|)nxZrO_a@7;^Z$to->7W79E(_rZ$Grk&J(SJI_qv|bQpQ<ShYbF}acWqdfu7pUm
zeOQYqb*yUqLLKq@7z?t#nIZE>4j-9O;l`4+SVkSE?6KOfDg2~5oaSC|mO$F+@SohY
zm+wCG<4?qYak#!aF1bPaumOhl^iO^2d5hTJ{5F|d3D>JsNZDdp7JNUz_U$9svv&%!
zW@WHwVIDnmbFeMq{+emAF0A9rN~^s=SSX6|ahgF#W2Z_SFdO&(q<l}y%$h#1*))u?
zIV|jq5p5`_V)gHg!eS;+Hfk&_{ifk0M`$uh0m`@*W+945vsm#5Dt*rA#2tk~^uWKx
zf3BVjx3_3+5$c>XC-b^rbhKQuHZm+<svtB>VNold+!|REk*%3r0`um!U{-e;TecQt
zu^4b6;`>C>yeGYfQnLx1<~(stIq9-1c0x|dLLzTqaL)v))BE806-`mZ?UF{EJ7TbW
zvs~7@@sE&nQ|Nihr)U=6GcK`NHfV`4my#N%q-Kpm7O`}>{Dd4R|Jx#84ex&@TT%bJ
zD|-x%nIRoUt9jmEbZ4)+KABvBkTX~Di0)J%47&3H7xCCTDn&_{DNIT8opf^12rl~a
zX!6yF`9VYQ_$#q-9LcnaM2En@&M{Pr2jB-)>NFna0h>En8kW*9v!|SElkkn>R)dDp
zdNo~4HEzT~9Aw0arIC>zDizYLG#u#{P^dn9_n7<ht3ymp94nyWYjMnu!zay=Y029c
zePCAZ%J<vJ1qcw<h*vU&L$hHt2sG-1h7D_0z0u}qUdXr@HZ)(S`&*{TW3U9$Splcb
zz`<Q(C>IV$(t8}%=pFW!&B&*ZncTmDVuNa;cc1y)%uS<dz?Ltg(53b=?ZZkcKR_5v
zpyY1;MbUrclXbcK;h9x&jDTuh(PMlZ9))9|eO71k1^?8Uz5La}=|RZo4#R?*CMo%C
zNfs1SfwASp#A#d{bKQrc$>SvYr#-I%Oqs~GnXq%ffgNKg7YAez&^_BJ@<;JJ-Ui#=
z+!Fc}<7)g6&%izsJlY-<B9LxKZB(vUnx<T<un5=d-&625eXbhqyg5+gM`V4+7O3Vs
zJPSvhy)}cbiJnDW=@);dGk59BxZOdZRk&dZLnLVTaib;DY%uCZ2DH4aVTJlZ)&&!}
z4go96uy5-awcTat9|@M`uj2ZO{H-45-#De2IHoIKoyHIq97e8=L!5DoOK!2igX`~~
zDtVj#wH$2wj;9XpjH|0>52PdC=~+CU`oSFDyS6L!!q2y4F1*OFJ814w%`hxZpi%On
z+lzWktEsK3X<Y=Qc7=5Jtu9LsIo`Kr6qWKp8IonuM1Gxr$JP}$MdQY3gRY3FM{RK=
zyAFs>@)_g8RJKDiRy}VJ6?g0RE8(`U)}p?LmEJ-2yO-_R0qJ+&6@Ns~Sb{HF+mU+F
z7h2QjU1-?tG`_S(fKei%8-LU(<|cJ~Iq5O9EQ};?u#lf?fhQ#TH;tlJ9gtyAo>4T#
zgrVL(*<ddst!^ZqFH*jgDx}-aki;xWlR(2@3RQ2%FN)r#uT;Zb_es5f|BnmMaRAou
z18woz_SB`HZcSfsxv;yaRZ^ol!<Lm48YHqdt#%^dOhkc=)#ur$RwcGRI11N|-5{x?
zNI#(oMHR-CnxgIZBy|gQJ6kX_Ni*7`uz;Gk`>~R@`Jb!du3v^~;&<4GKR!su30S|^
zJ+8_pF8WMM>iieli8)ZF>6*fphH!*s(lB@u!jLOW;?mcrvEgSE7~WTb=N*!sH%+$(
z=i~yV3`m<u)pSU{ki$rFny9R5sJVL&mE9-4P!6|zKTxAXPetSS0q8gc>put0WZete
zoD2UhpSkeOw%toJxTPV?nqeh`X{AJ_H4np4IMmm#b%s&s!u2NTzPK`!eyC(9O>QOy
z&3%b#sQUw@vb*_fm0-)aTshDm&jmR0y^lYDj$^R?bI=U5b+uS$UYk!}@HffC@+>p6
zl)lrQbbPNqEhD(`jf<i0a3%yZElLDsR7MbuRm%0P-zoc>u6N}@Jxt-L?{j<u^c(=|
z_oc<AnKTxknsZKlbIM-*O4}eoVj^x)k<wPu%>b&X2Ya8Wdi^(7gI%|{a<K2Y4A653
ztlxiu8SJFRx_T`>YXvu~Hl_S(7?t+;a<o6hG~LGOcWNO#XF)n~oH$M#Cyo=xiQ~j^
f;y7{O#DV_{Hp9I{vRpj800000NkvXXu0mjfu6L+=

literal 14924
zcmV-SI<v)zP)<h;3K|Lk000e1NJLTq003(M003(U1^@s6aKC&E0024@Nkl<Zc-rl~
zd6Zn&apw7pd*6Gx*Iw8Of&d7B;3ASBMM*XVYO^fMYIzZ)k-W%K+n({#W4F57V@o}U
zqTAcF?Y2FqeWu&(9v`>eYFn`7eW7KF0wqe^M2b5IfF$;%P=#8va(VCGm_OdjrK++P
zEV9p>b{-Z{S(Wwj<&7J0Bfj_|0{-do|C@(g!|Mp_H|f)L3VZc`-erAB_V3>-0EZ6Y
z;Q<By(bvPk{@|bX{OXSb2R>`ze)Er^Sq2UW9CYc^{lU<N`i<6@Hz~4J@wW*wh>8j-
zh+XuS**zP{ZlHA=HvNrA`)wBfzUyxh1nK$&Ci}nXJU8j902D!5zmu-NZ@pFp)4rB%
zzXO0u>$~pvHrdnEsATW1U_{YLYr^Nm%SkWcW1BV=jvhMnK$3~grdH<x|BV)wzyZ?|
z(%|~LZn4JvfFkcf*exco?FG=*VoLjMq-8B7{gQ4Ws36jL{es`oeXT`8l+N?kk}2u6
zTJNXX@1(sEq)Qa0b8pi9+;m;PbM5x;yY6MlwZtG|PzCRsiHJQSDhE~c4~`u94~H{V
zvm89=FULH}<!KYXB_xb|!XV!xCWt^$RY08}O14xiSYToC&)UyhOTWxQk}dv%*Dl!z
zo!6%S*`>nn64vU1qU%0QkBzhFd1^!2n?w}_5hKQm2{01kHEyWNXN>Xx;qc*KeIdQ(
z{bsFNwnkwcu&Flf3kNsyDZ&1XF*Z`~KuAE0wA7`&@ZBaOTL|f8+Lqh#9l<UzS3MWE
zBQ&}+YQgoEXlySH>DK<%_r1)nEZltU*PBJlY7kIFR24O1thITZOPUD3ST0Zg{MWwr
zTXAQ7uUc5?g({nGzcJL{cSOQ(!Y2R;Vr=K*E;d)P<ioEns72Z)D=+Q>p(2?gm>!zU
zlEq!gB+~PYTE<E&BdCSi+5Q}=Do%_9fi2>E<58#|IDGim&%tLce9&Emuu?${Z@B$#
zmEdnh?2xKU1Y=vPwr~NK`#^xKRin%z4OxS^>bYPGHKDiArRU;)g9O#KE`q44I&1TR
zdOhbfdH<0kzx3p40$ahAyx(*Q>Om3H5>#+mf|AP-lq@eO>1FylYa)vlSC)8vlD)4i
zIU83O6jvcA7Hud=KaJSHxn?3pHU=hoaM!M%zB?7v^6tG^UQiGC{&jb4R|y_O%pmGr
zCa4umN)L^?R%cYNbEUmO7HSj=OtCC9BEq7dFLWlluVpZc?(<4CD!V^fye?qG1nLuq
zFc_HJgSX!J)7#+zfB!N9Gs~LBefvUV^)n)N5cQ7K^etK3bmy6+ALz0*N-jgAq)Ve@
zkwz^vebRp4)ir9dcIs7Wl=RZ59_wVR`otL%3_25hX5YRa4j*X6KC27sfPn}6;8{Lp
zOn6V%8P!8j-8+(hB#m06LCb0mOFXsZG^!<V=iE|3ak+x(_4f-sP7!0Bt0y)n-!nhA
z{!{RPKXBlnS;fJ)-@pSpyy>o8s^)n?O{yN<d$?Or<{!lCTl)GQ=VjM>n>K1;(h&JF
zygnm>A`FKC|ND2pk>5D@6qC*&(h07wOi)Xml||Q5!Ft4c;~Td=|H{uDxgV7W5WkFO
zy(EBo<&(zPu<Mg9BdCS9y>^X~tI(*WCS|c{QWQl1#Tv6_jq14naO(!k_x#%tc5UhJ
zy5p<SsD*;-aV=52S{sFq;FEy9#6elk3>rA-hBn-BlfisQz4K`tMGt3UaV%s00nVu2
z8YS&xA$`4fO`=+vpqa;ek5_FYhO)rh?BPL5=U(5uJHbaWckC*r$b`8ZuWzX{(blNt
z&O0G9hYfFS_@SF`{@I%j@<G?_Y;*}LO>Y>n|6ELvL+}e=qt%=VE+>v!$@Ix0tgo}<
z7d-DA(CrUjZf@eu13$@!-uest&Ub&3-~8~m^Tv@4s83J~rj1GVj-xCF?}d@3^6qb~
z;GN|?-!@3D4&Iageb?fy?)5DN3YNx#rfYMGpz4ju<?!;)0lv7uBcm=j{DiW1Z<Md+
zehrZkx|XQ7Ms-6-%ed>8b4Fbegk-Ysl!5wQ-n8>)=>PZ*3Lnq0VOKxzy))#yesBlH
zvyP`;K0{(HR!nx5b?)1k^jaQJZ~4Ujgtz|qjW}~F>$lJ14mWu0_-uP)m=r_0+B2$4
zP+cBsx}ikX509>U>u){vR12+d3+sLZhjb*|wga)B1T}(~l{Kmx>yxWHqhv99-VGti
z5{;7fb<*1(tl!F=JAR7r2LpC}DB)aPnW|W>lRT9|gL@9Vg+0xLFFk&gx(QouNBcUh
zg&(cMC*EcG*uNXW5567MJxFkbH|-y!|9pc}$C_MnJ~N5kCVj0MCCh14H^?oZYE9T@
zy!{^+#vhshHSmDij?hl{TzTtv8f(8()O#@I+CfN{qfussc&6i4r-D-Yo4eSz{im=W
zGkoAfiuHyk&ML0%*|?>^=DH>ERd&DQKJLubdF0U}%t?SnXeF?2AC36<w+--9KRLvG
zKe`py_f4q36ES(z&qH*SJHKt1_kMH0JzHWLXA@qV7L1W@2x$fPd^s3wkweu|2*q1l
z2)(%H#x6ee^nS1>IONSjZ$q!kv_`Kjge2D#LJ~~{RcdVIjxC=c{C>lCe@NLL8Xg=|
z5--dq!WYIJ6C*=NJx8N<iMxOFBmBpI{SHRrIzIbos_^z5hL3+V$Mttj5zk$~)sBFC
z9o1LCA0xSVjO6PNF?8`2_J(yvqUD^P<(vswqoCSIzk&g;*QM^n0yFpnz#%PFuKO1v
z<|a@T#4PptzL6TW*i@R{$wy6ha=tOj-5Y;~;Csuw<0GDTlr6tMsXRZaP#1h6)E&%Q
z<qabhWM&F)>s<Hdx3DJ}=kt%BpeX@?F+6_4@$er{;$E6%&&Vu6@dU~g5}e1M{R-g=
z=Q#SgK7Q`EOZ?p5Se}^`MC|fs6f1juD+?-(xr_uxaT8+~ANuTx6ZZj!bb)3mjL_v}
zT^WSLWoneJ8A1|GffU;)aclo4h`xJ(w|t-HJ$;sk=HV+dpiQCKgnAvSHF$Dd`HQN<
zRyGn(Oq0}K=iYzwVSe_*w_;p^SHWAu^GS|Rf4QH3d4GYqmj^J_)40i(30|Azi9gxM
z$Np@Hznzb$mC`KmvJjFiXZqGEsBUM&j4TT`2_}&R9?q3ONNWptO&Y@S?w!~3{+n-1
z-`$#JAtX_QiXw5y&G{dr^8U^2{g~rh`z?>v;d7Io>bw#+6_-HVg!wtB&Iu2mQ@-du
zxq%(jPR|q1zQlL@+&lS+w{J()VT@oAtc8az2K?f$dZb!Lr!F!1^bntVIL~ARR_JnW
zmN}z(dVR81jcRXZO%ao11z~9?;rk6fqcl4e-}AOne&h#t;?;F+lZ9Si>k!vO*)AVr
z^j)`c{SSNIw$Ad^8vOT5p0PP-&O_1=d@T4FTpi|TV0IS%;GE~N5M*#KwIc=Mv5WlJ
z&)&-i_H0b=#TdLxz0bcq;(7MTkjNGIqet?bvKDK=smaJQmmlyh6zU2ZB`p+1Ql`$b
zK(5#xrfjWP-`YW0liA!bQTE;ld)~Q@ca99;eJ6flK?)t5i`n8oz>c@>XW)O0*|tUa
z{Iv3!i=GQJN@EUu6|^q62Dm094QR~3{3V#0f!{grc(xyE>-IAL+&Y?*F`xd_e%?GX
zh-*UthB#+=<naW(*vIFOWpR~X1wCiAGfGwwROh+sV*9pYKI?KJq_qdULPsDUyS<N_
zzU3Bt{to{AZ{Ep=Zr;E;TOgFqZZu**9V3l*u;-5NqV)YS^TWay&cZ_%VR{bgvqC(p
z_&WGT_SMV;R)_i}s7=85r1IP65{_;*Ol;jl{n^dfX2>u9#5>s@RZtbIr0~>}FBx8W
zVl&68=?3;(twyo3>06Y8Tgd-dMp&}Qy}XvDuf^;eH93CjTX*t*{HJfmSN4ExWaRD&
zzx<yDc;r`hao_q8KnTR53VpTPc*EWwV)&y8=Lg~VMd8#m)T+>!gJd3jt))?lZ+$fs
zUssYE)Gk8(qA)Q9zkSwma+l@A_U+6+dp$$ZFu(GVchl!15*0)Y&z?&7_-~)5Q4G@0
z)fL<tV=f0mS^$kLXZpI29<xZ0tw+$41>J?uT{UN-^|u15hKdjQ{ZHM&-VX`R9mCCB
zg2FKR%2S;DlN!JApyjdi4r2^Xm8iC!n>PPA8$RqgJ)oSM5L`uZP4F>j45kS*L7NIO
z7$;~9HUV`RhZBe=(qQER%I}EdJMR*vW;U|-ks>#39pPv9znh=<`@cl;5DQG9OH7}l
zw1YHQhTpi>Gpbhxq3b9x3w0@rv+k2L&br~FV(bm=IO`jLo-6Rm%a=Iv7q2sXahgpV
z$I<$6#{a_d(cdzBdA?38S>~vb=ca*w&F+tkFuu+6`lLZ4#W`>dMVkUmpebl9kbpQr
znjkSqEJy<4vk(pNNxE)x22KIRUBb*{p5o({J2&1yZPxMB<g0`>SRg0?tTE)&aQkqM
z3w6K5bL~x4Th8<?)Tl*3w;CH5)Ez%R_TcZf<g@h566wW#yJi{Q*eH)rH2AHfmhbz2
z0uKF2giPi5e;<USwnk{u51~%E-hPyu-m{hFb)MHx2@->w0i6ZrK&uKh(zB`wB!V`9
z7^Dd_G!q&~1EdbjgPRm&S{R##L$k^=?^PbTG2)q54IkL^KJJKi<5G^qg5B;te9La-
zm;UW_khpeEVkt5qYlx$I0MqS_zVu96dS)3x7E!0JJ!c}#<OW8V3_ZW{InY-&^TdTT
z1>x1;y)xX`&#m{~OYSDe;nxIT1Dyk=L8gIOfjQEjHx+FvE;ECYfN|-UG{MGT8er;R
z8-l3{ege$2GBX2*V`2OUgl9H5j-GQI*!@9rjS#Ob+O@DQZ+X{_n16NuZESekPTsXO
zLA4tYUTeV13L4e@JF_xjMizO4-zXN62NIwD{qvIzKJlAV9IvMz-YbOjqujjvdnw<R
z@WN53&jPccQwmd{7eFQi<^`>5TboRr{@ePJ7)+9WA37*_A>V|8Q*sT(%z&9u=4PN=
zfq{=2zU~rg@eup^?!o&cJ);uke|yUuzwuxC8Gge$G;sXdZ&-e0-#o@?c3`YA;9WtZ
z+Ez`aC+lKa2jhw$q*YV#3-L3R^wj+GbC<GfSk!wq<=#xVqrgjNV`k<BA3`!M;2?-C
zehwPe5xiMQZ01Bb5SI!kJ+o4?DISc4oI>pt!FWT^uY{W**aAizK2V;S6h3mZ@a!Fi
z!+-4=%H4sT{W3%Xq43L}kC>Z2!^eO6zhf^YJp9L=v*YU#170sfqgV?cL>E=e^b}T?
zRIiyv_4atWQ|s19iqWZpQLY;v!8V1l<DOh-37sK7ulPBbot~zN5^kvwW<j(|fJBj4
zF|lA1!DN~y9)f&o{*rmm#0!@o_C&>q{6Iu*eL&#`!}+c7^Eu(&r8*-!a!l28*oy|2
z-F+j-@oSHT{If4l@bH&}`=8uQ7<N3itJSE*g%Yy5>u!4_8o6dHBqIh<0h^}DTdr{8
zrOnMzCmbF75_k9Q<(6PQ@w8!j5+<f*n4TZU5u?E<cAXL$L*h~dEftPnnwox}2-c;W
z)H*1X4P%Wa(_;;yoS|85;wBCClfvvXN|3ko_X`8J3g3CJ@cS=5O5+73kWT19F5p)W
zmU;3*jxZFg2u`(&kFkQ+cNv1x#caA>!pcY(Sz*r_;;0o%bkYQ&7{PmOmBFBr#VP8D
zG{^dKA6tip**rMRXmOZ<(g^c4<?!)GICc!iYE_y^9T!ZZ(KvWzOW|Lj!2qE+nl5$E
zZR^Zxrq4~15z)M0J%kYiIZLiINTpaLuP3R_|1J4wJ*8lj!Tb%Z&-XEQKF9xk_6h#S
zi%$@QVM+r~O@kSMzdBoPpHWUP&-7hR1q&ENS2BZ(_y8+%&ll5@yKYYDXpLs9H=n>z
zG{}~L4eT7<!nTc@87Z%)oL`UA0cPtFmuBG9q$f_44Vxg!9p=HK{{@$;civMyu{%mJ
z+JTV-<A7K)tpek;?Fky6ZVrnO<vd}@Ac19|UkKxqTyRe^uMt{P@{JO&P8CsUFy&_m
z!y-avn!5`G4H%PFN{VXAe8Oa>%*v*3EmXMl=ejloV{t@&xn(!4#F&pmMvEKSHhKfw
z*WbYAq3aneT}NR1X*OYc9$q=8%+-Br%EW<s)O#FCbIwzYZsCoaf1IzJ`3*FeU<h!;
zNZ25VNK+e0rb$i3#-!(!192I1P{0}pi|JPo2}Aubr10uYgfS6BLX0C}4n$aQHn3-K
zGhvu8o6IoNsBx)2&vdPc3kAq6;9s-^Wvl^D`?+3`My2VXUgbSOZ%^K=*_r76SJg3O
zcJZd$-^%qHb~0GLo<MRm8)=&2*f~e7-o!i2V!Cu^29e3kr6p+!>OIB?bMY+sz8!3v
zeh;tK{}dBij2fJ2667Haz%~V%9vdq*PR}W$ifG5L3IoCBAt(tpC#)Za-9t4VdM!IA
zeQM&8hU3=0yLs!bcQafmQ_OiP1y8A1L&8aB8t1q;KhA}jX--_6;N-+S7iXJHHysk>
z@vgJwRRm+wm~rhI)zZ>6c!O&yyXhe~$yB#Ee+xhHi3iB%gtNyy7sovHMgxsgny;u3
zSiy<GIVJHadlsXJkrcxVOp2PT2Mwq-t6aDKTNr=s2y?;FbW_-vpaeF^_O*g_LXZg7
zE5>&$iJ0_tK@ozIVyt23bqQP7*HVWnTPxpi>>GS9d$zolv(<Ud&&^ZJ8!E+sa#W-e
zmFO#OWk*HWw?!#b8u)OAd4G|y=?k2>aEaH>P4ep5X--|JGv+)2#Rcg3@*33xXB27k
z6xR@Et<^m@+1cdiw|8**bV6UjGd-D7mqQ~s1I`Q13yFerigOO9K1=)ofx!ks5I~|9
zUsIe4i3%Raj`bhnx%0mc`FWg)p#((f9aslJ0)fxWpaP=p0Nh4Ot|H{h5akVT*gZ=U
zr`Vo)A*m(YI`AEA9DO6_W@ZV4fP54nIfIXsnWm@OfbnWVbO|DB$VDNA+%SFRQHBO?
zX4@`!*X<q?%}{k0I5Tse&;9v}JalXh6SPd?@*1_63XaI?B|p+@2doGoX$l~TrS4Dg
z^kXL>6mn63y3`f-n&yMNf=@inIHnoLBuPx-65==^X)4|eK~X3Sg2`LFS|B9$j$B~_
zn@aB`Nt#ILFl8_~2*MP+wGKj60u-A@2LuMf5Nr<e{gA6be;@3<u0}I41lFLjva|FZ
z3=iJJcy*pc0~`TTFa&)tp9nMahUvOtu3?x@ELA7WCZ4H==j>#{ky9~GKbP?M<I1y7
zRygy@jqKjEpC5Y9hbUJiOAnc)ag@lSxJugTm~^k1RWwTssSCHZfVT}?ie)DFI_FOB
z;cHJC?ta5I#!n}p>E$#@H7ZUVE=h=80-~s9FsT}78X|<k2>62F&RQDt={+@E%*N6C
z7(4n5jlKq^AM#}(nTFUZR>5lPZnS-iCWN32K?zJ=*gWDG4kMb)9QA6<uKxEiI{Fr-
zo3jKaBEgcY2&FATv#!ierRazSnpTJ%M1c}CAqs`aDnST=RRXIt>dL$~Jo-d~zxm5k
zINP1}SVf~+bzyA}R915^7RLyyLr9wWg&H-uH2-%TeX&UYP{_8SO<X!3qu!8sND@zy
zB*aNV;vK4*W?;o*)ZrTzrY-qR!n*C?Bc*xLpfyE|MXa)O^Y?Nx{yeVWh)NLT6txf<
zus-_)ChZ?U045J%pAhDuP=@@7FxM<luL*<hZH$cE$6TX|H95R7&<EumK%h*Vg66y;
zssthg77`~!LF(Kzof26gau5Vy10^&<FaUq`@KIhm^(3{S7(>|G>syk9WKnL6Rp6$@
zNwYOVNUcU8jlx-`t6%2pj~j~LRG?fOVrnWTaS%I4(>W6FND_zln)1$#W&-oLIm5&$
zW#krN`#V4$gX%d$ZN_nFY?_(rDX0uU*%6g3xuRksAqZ0KGFfG*1d8MY>4T^ras?<=
zKn7sa1*oiJbi-~m@)*tIjbh3|`4%W_RK}lyxtR<gR!<@jc#HE&;vjM<80~`8Q3{+8
zI4G?Tc<|AedFk+B=89(t!T~x5^YR+Cg!8_-X33JyEo&=eYq5S)irIYrd1R)KuRI3#
z-g5_rBF$!l*g0I{NSw#1l6a3-uqZ(o5JY*x0%#LXJneYHcMAiz!z)K(&L25Ved;{T
zT8(1K5LJYH5t0&^f?}#ERm^6dvV>sDpaVkK2T=iv6=k-fTyg>RxWLKDmyz;jN|iqH
zeG&b;V9Q-F@pWP9JS0sAae`GPu-Tcb2A{d+X|DwEDkRP`G7$3k;n#WY#goiMM+hnd
zWUWh9Xx1WK7A!M^ZC93+T=#|Pj9w7Zs(mKZAfcg}dlD|?c<dR+UAynaGz{J;9-m=f
z0l8cb8%BsRB(BcP{28j3=9q6biC^jCVtpgG{4W6my9370juN>L@$*D>nnKxADG0U%
zGewX>DlB}uiA_O}3ecCDze1Ec7*l0s3aBO#V{<Q1KX(B$y^&3~?B=f93S2nrIRCtZ
z1Ogi&5~9xIe1iJagZ18^YO<~}g7cn{;gA<ko#yeUjxsOL5)76zL9rx`T3U6|qi)#<
z_|@PhStg$%i=idy-LxwEds9^A{S%x!-{5gy=enVN)ang9xzyVUVycY`%uStTwl+?+
zR>gUXp^Obj$dxR|pRQBcUgpMc5ynrJm^vDvNu3}F$(NMDLV6~}C7_zVw{5|6c||IM
zDR~M7p%Mre^N^H<S)i^FVQC%F-~hqs7B<|MW4Zy)|4E(dnPZsRMREe=s6sivj!JQa
zLRca&rd=oHd<u<?42GPV9OJ7`zrehE7CT}Wb_`gSuffvwOc||ffty;I;}(_OTxRDM
zld(9;G1HfxBwwB3mNyPFP$_bDs>;i+ALYg4FLG|;0<kj`as!kL8z>dlVWfme4)Fo5
z=6U7smEule=eNNNe;5KGL0;)A3FRCl1!$DOl|h0uD8>RgFhxa*LLo2Y4FoyxC7~+N
zlmbC{J>kd(w(jp^{T{~)zXx*@^QddkOsdQ^&oefC2}4Y1LyFNL1I4YBa~mmy>nQ~N
zRPrI?Cr|VI@n@(vk6?!sW1^LviJlror*ue{5ZHQqgR<Bw6qe~T(F;qYZ9<I^y!UKb
zznk~p_oEd1DmVjswmR;<XAkJTj8BYl<kjQ6{Q3o6JJV!xs*b9skh7F+3N0lwaP0HS
zP2Vf5dy{hEOG-W{QYu->d4VF-OW+zn2;#GYD+i{S=CTSQsjvdUM@k(}925x$H!*Z`
zfgSgGPJS82k0yw7s54lb!$y608`ErFVyb$cGZ$aM`$JUnd3IiR9p7~4&D?eC22Nd^
z<=NMt!3|iVXdpxAWrapvy)??SmsQtFMN6?M*9Bvlr8}UfMs*1=i`9nBZr*X%PcboV
zI5!bvB&})6<%$gUml++|!o6>~llQ(e#wQb;y>Nl&kIeG?ks2q?O>=2tfP7*}jzQnE
zo*nNHniqkIfJz=pA&`f18C(J`NMj<bppm8!Q=}9u<PnTj2%#A(aTwCKEn?@lC{t%W
z=e{OHqBK-VVxcyd&}ht|%+XhXTeppJ+m0Q)>9$SWdeb^KuOFfmmT*alXmE%Ryzf?i
z^izMvST)52b&<=~(I|SOMA9P<)?JvoG@rHb!YgUi@|{~Os-BA5$~WKnFPWKzq!|<D
zEXFG0A&DJhRmb=R<!BB{Wy8AR4Q$!4fe*YJKKkAnCa0%3dTx@ZUz_Fdc$pKAm5?n3
zhTjSG$Du#x$)mUsDivtN;7l5PV?gpLcpK%R5I~4xZR#bu1f&ex-v-4&%hP`ca}!WK
zU&YUjF<6{o@135THf&<w;5KgC)5qw@AV&I_nJX|gmE)x|0nK_!__Pvp<MmtlkN@Ta
z{P53zmZ_x0lays3yrmkoa6K2ES@#1E^g6S21<pjTrd12Mau&gpYp&;>oBt*A^C8W8
zoO*k)$5<g3L0|+iiaH^Qg}EBkr(@2aheAmh94NDCxR2X+Io`Q%o`f1FrY3mtlw*8j
zffE}_1inDtT9Q5}&v?wdC)UgiO6IzU5Lw7&_+icnQQoAS`kf$>@WNl$u&3v_ePe@L
z-dtzjZ53|ayO|A}%23WzdphBZpYuF*)G${Uk~l>}ElQw{NF2pTm^l~oh8s8X?|<|?
z{MfJmHHpckK*0iyVg-#_Sp6x;5-@P-nI!^hm-YIV?cAaU#A6#3_HF-hoa>|6s3FFn
z&LLiq#Gr{G$_rrts*1@xA8i<1Q;BDxIqjGpcbupg2FfKy%N4F4b$n=hgRn5q<j@oo
zFO5-sJx?@R#+m|^k%0J;BdKdUaT|n&e9=(phddB#LUpRf#TiE_Y4SFKoAxPtKM<tC
zDdkdkc@}0T95W{qstB)DEf>#taz?R$6(JNMAEt<YtU|76c<ETe?YnpLsSi)_fBv^G
z5#(C#`&u-rBPeZq7_HxZ8hBuluuK;RU=@w(PFYLlZfe8whAlrx7;UCjo5NV!$>%ta
z5v8e$uNjg+h{Ci|-T+opN|#5eSD{%G8Z*j#UYRU=&P+gmInVn3BG-*Lb_~@CqB_$T
zE^%f)=0vqbaoc)K#p0UK6sT#FiE|AmkJgwNkEx6``JP6|b$j}_{!JBZ6r}X38q8es
z%$!!H<`Sl7V6F<)D%cSEHh4}Q23txQStdvgmGclMsq@*W3pRphUy8Z+);IA(@0#R4
zKXjN}RJaU{lCIE6Fe`b3%XMz)rBRCyP8WN2^?w(AmD{M+rU^`XcBSPjtw>)1kE-Il
z!8t=1LJ*{YuBza@U`@IJ^}3S8so-ieFqiXODtk_i!AM`8^#ggf?doTHIL+67?=?Pm
z{4xI7C-0&d<uPYs?CdPNN_jR)p1f9wgB)k(Er0*_hT9|9c_Uo7m@r+1nK`J{g?bHK
zBB%%N(#?|}HH1Z_UWX`1j}&eF+sbfy1qY?P;p;DWK6uM}IC6Y~M^8>;Oqc=I%WKra
zPHt<Cv${mFqDEzvA(9edhU7N3Zh9~CjTx-9Dd#53E47&O>J?P*ne>{m%LFC_p%NKI
zO-8Ko+Ah%c3W*07r)4~iSz%_<GwTe~FDQTX>(BA<#ix18J#QoT#28<AYMN5L!Y_Vu
zAD1Q#FT4iFr#)w9lxhPS^UA3|^1SCGhOsfB87n?XnM&S)ciI+~^C@EAx88I92xuWq
z_oz=TrfUgHTfI7=86>>?V!)4l^LKIh4}P0Tjk2uuN*X0gD|uG0A~9KWnU&r1)?2Cy
zzM<TB-TR3Xml;vhHm15Hqpe-SCQU%bY1N?yX}UpM?YTv>3uLJjP1#D$D^3mGJO1!@
z4)gg_e?xiQ+u3o?oxJ5+;h9rs_{<;vXEy)-2)l2;foD%7#C4(BP)LN(!THzV<PlHQ
zXNjAnpt5gq+7<89O`-~o29!1#+>w~ro7Ce4oPu-d-})dGn0F8*hPaWCzgXbgZ@7p5
z`tnzaa+M{nd+$1~<<t76cTl`sz`KZOoxxHjuF%)FnJ`q;2kjD6$x_qp<{;fYk2`g<
z?GN6Fg+?8kF~mMawG$6<oM}}8%|w}-Q_2ID$G&uiL(l&WRXam}?gmbuO!%*#Y4FIS
zM=A78@K=vKf+miF6XH1~X-aw>2XR9<{&M>6aoiD(_nQ5i<>54a|6IRd@}6eX(TEco
zO-DWUG`!MCV7>{n4P~n4nW`(ZO~XXuk!Uw@HSVBDJ!_47!%-_2CbX*u7Pl&0rmvEu
z@Q5>WoIdd)Hgr__BZ`FrLXZNUnH#F!WClKMtL<A#lcITTVxv=NHq)=fL7WN9so+$I
z6DanFoIF3qqhEQ7i#$UqzXNL{tTkLX(IhYq8|Ha!;t3vm{2ZmSC5}60Epdui;oJ#m
z)-^jTQvo^G(w3AG;DIDjh#)^G)SC&3PiQ6yapGtsj%qVuuIZ^IhS-KQBg<6ic;d_q
zfAaVjuzAzvxOFvWS<>o!QMPzRGq`NPE6cj=0@$K(Z2S+Hot<KEbPEF`Lli4z@OhG0
zX*Lto`4nK)?#p&Q0vQPu$<At@a@$oEV>2#>Q*x0dG4nin=mpN!zKF9zA=-p7mc&7Q
z-r;<VHT}fFalZQW6Rh8`kuVhI8!4~DYwB`OUWBQOp5maT*-SZtt+PrOa3Ir`c$IaA
z^RGEf;4^b2U;~1jMFM5kRXH;~&BWw1mo8mo?BY=x<@59nY+2Agy_e}*fO4p=y)Z#~
z2E5DDenmhBW;j#*EEA`;QaQJWzP_!LDt+`14v{bSrGjfh+-Rm9#%x#5weHkSmZxhS
z*6P##0%}s0ZU3<0YtJ0!)Yy~Ea*RrND^b`-7)2<CBuSkVYYN!Va(w&{uN=LL&0DrI
zdm%~9u1~$ZBoWS^a@;s#afzmlwpwL8(t2HL?i)3wJYoq8A!01K$b!U7*Do<QHObV}
z1hcbK%+*d4>lB(#$ZgEim*2AL8MQcN($PS(vg<DG4w#qM{8tcyvJmS@#v3P@o*Ez;
z-$dce^^_{3RQiV*99l=QzYH4Tnh-bBk{Zd{dUXgpDG{ghui%`gJP>m7%t?+OeSt}R
zj4&D?3WtfJ3N{E*jdY4JieL$CKQ;S0FC2M_k@Xu10z*AkT;@24!1x)@wp+4hlG)Eu
zMSaSJ(5!1(7(r09_@Kt*r77kc<4n(vF+Fnzm(1gXS%OkXIGm%9AHbM!DO-6ZK`jAz
z*F^HnQY2T@pgtwe1bIR8Rch`<<{L+ty10&Te3<;HVJekP3=D0ce_(_{rGiM5_N<5<
z-h0GoN>6T6$kRYH%7rxi3@<$U0+aD$G^I*ku$eF%BnT>P&&_4r4v`RR%9!v1XQsZ)
z>C<<ze#16ulS!I1^d7Ow^n|B6;|cNsF4nerHUWrD`*pa6Qk{UL?s(<3FL3VsOJL^l
z)EFofc-OWKd}%I+6xMYDUhR=>Uqz#qIv=unoVAq4zIyZD#eub8FgAyj422}16l~z^
z+}D||zruxyeoDDbl*{WG7+O#N;3$Q1ABHHUAG?%B4QbqCtWX^AJo(k<xH$6+GyW*~
z+$cdfL>TsCZN6Q4<JG5T%!G*Kv1Wjpyv8f9KFQGN20|Orh<(N&@-*gQZo)INt#eL!
zr!;ENm{poph?^cC8*=%Cspi+H%NV6xg}!Kj9hEJ-ecuqzJa&evnv`I_r1j5g8nrkn
zxt5?<yIW+Ns~Y*Bq8PDw?+JqnmBKbkah0adP*28~ubp9HKH$RmI*PfCl*$_z7#wAA
zc$8APpL~!<6!HbwyaT@S#pgJE<^`toNrIq66bujsLqtIz)~4C#)ImuLVU0vsQy{c`
zxUkCE=|dblwv*kv@4(NP4!K5SCdO+FT^BNaL5XWhTu(hhffT8iltpDjPZU(B6e7yG
z3PoGurcHzFd}A5?YU<c_yt>62#TqoKwf>7yj$SE}Hrip<$j@G;?|Cb@Q$@sJBp{y~
zpb!lcxB^X6BKC76ewM1cz+C+}VWY^{#4!02>*=d(qOX5F{X+w+-<snqkDlhaXTQ!R
z_f?$n<bz?tV3;TvBnk)Hn&n%NmKdyrr1L%sM0SW~aE@aq{vNRb8#ZpGUT-ivcagK_
zkI*QMFfed0b2Ci>oAT~$pjpSxme(VMRw(3#akV*0VLw|+74E*SOeoEilhKBXdO=8Q
z(I`4?1u$K&UsGCtwUG~Nn<QY2B?ya@it9;|n0h=-qI1Nq59bF-e2v6csrvI&<5Nsc
zM1&Iq<W3CZpE5MvBz1F`*vyd&1_^_HqG*ID7$giTv?gvOS*(=S;Y1h;7%5^*Ob{ka
z#ZU3ltJA!8avhEu4R?|0>Pd#SzXK!pV#AETp}x&R7J(oLaET)@N+B#07K>~f9AJBY
zNZy3hF4b{uxTy<LTGI1=aT1bM8bz;C`S^_(qGF5?gdu7|Dg#A|uEg|omC)94%n>Iu
z#IA<dA)K#~_-X1~qV6xCriqhzFcEn>iZOYja2=5yCJOrq!eYv(k}QPq85W7fm;!;V
zpu~Vj#86ERQ%#QGHO2-87uJaKr3^_=Qxid8N#X<(7`*pPP0p}o^AN>I8O)DR$OQ})
z462@blBYITBi8PgeC9HoiRA{lu{x03T_$<WhNxt(35?~N?%PUvFyz=P6TE(Ol8NyO
zff*(*^TckB*j4d<0H<}lHu2g35|kv(%9<jP9U?USL}5QBGl60R=Rh^9O~q#CRtcYV
zf)flT%%M2EPcUMM>^!+#DNTKZX|k|dn`dyKOc=t$U;JyHd;VeWx$Avw99)OhJfSr>
zuf*O^jYDQ8(xMBS_0G`cAf#nAN*3r}D@C=q!%UA9iMi%uiF{Tq5(FVpE~Hq@bNii}
z*>m$KXV1*?+L1}lo|;7({p6wqrA9NJC2>`}HZo2~su|YiiGm7II7ATiW5l*$FYjAK
zQ-k*bLLO^;7ils=d@Utv7_cV7B~@%t#1^37BOd<ZpL6WkS9r@C4<JT);l;0#k4n7o
z^+%Z++QUfS5H5qi8s0PCFicEX971qSG)k7ZBFmpyvIr`_2J@p-TgX6aqGqS-s8{+2
z3+&i2%+~7%xinto_1C93d3=_csUpSPAYx(?*T8E7uL+7Lun}QcCKnB-S|#00uUch?
z8EHpCj1~#9rp{LKU<a@^!q_~5q1kwq`g{WczVOAr;H8%zA{Q0-@>l<uFeuYk+DP7(
z87PfV&X-e?r=;Bd7)z}gQLhCVNZlzwSSl#iE~s{6uN5>)dr+sYetwjo-k}+U9fp=;
z$Io#5)iJj3T*sD8!}RqR8C_RlWPOEO-q7I8sTqzPnPz;fK^XOA8z|KfV=UI@FgD5t
zI+(6@<+Lj>q}@9)ost^Zd?v>L5u4@85=x~}4!`&^Ctf|x^z;S#O4ktt1wvCG3d-by
zB9Sd%gA{u-Ce@-uq3NO8jA%3>vZAo7*C;Vv=sYV|K6a>Rt7z2a%;t~|z7xle-Mcno
zt#I=A7{^~9WBs}Twrm+;c%(uYhHT$C%I>|xJoNc9oP2GbD4*rgP1>Hpm;hsfC9ZLr
z*3hmdlqn5au~}Ph&BBRRFGEWd_S0-SYV&paN?Qp`kti$?+6W_IJ87t1(qyBDSUM!J
z`6S0|!*&f*T$v-ds-W7uL9_OfpKCEXuM?<hMx04;x4;J6vUe-HZ`{PGGZUOVevzl1
zI!0fAky~!Qj=ug9BEs-UkrS`gvP0W+8uDwpc*d9xl5H|Gq`q@NOKbMA>F~})GtN=^
zgD4mvG{sa~CBPcn?u?iYpvfw})ZkTc0*MN-7eqY`Z>h$9No(^f(x@eg$u*VytRC=Q
z&Y&;nk`&cWJYi%xeB>ObPmFWZO<TC(`cZalU(bc}QyhEsJhRn0!y|pDdR&qUSxjr_
zbJt{oi~-b2bf(|8NAPxiTy2k}ZP(CCtAN#GC4wNI?q%teFQKVtmj?HemQ$#J>oizF
zh1gkYvFjRUy-L8lW<kkXQY7?Xjb7=D!<4t}NYW|{^(2XB^Tq+DC#yXB{BaH+KF!u`
zBW&BYj&HtqPnr#GB;@izN|KaC#pb3n@}j%dn=u_$*5ZB=CQGELw#Y**)^JzGThiXN
znYGP&U`S`*s-`AZ0H2aO@t#IvsU<NI20i;!UA{(jmtC#sx|?>J>NN{WmZt;bQz15e
z74OsHxg>E6j+VLmjXRm1s&eAQ7_S~X&#T8SuyNB6+pZs>udmpyeQM>O+ME#IB0pv(
zy9*if?V~YU=mmAuX@zAAJ!<pOyZ8>;)ni^$R2VOc5rfazJ88Xd>R@;kVjnOcH!x9j
z1zuloL8(a30`Q=BlK=7p-sNW;LQ`gNZVu;^SC5W!*T@#a&@w#S$M8s*xw$$gPfu|A
z<T%HVkFj&dM)uvcHESc((uB<0^Bu*}76&9Vhw3xpi)u=?X&FLodGr~PC$nfRjiSv2
z>Ab#8n$R>+X)q}(%Y&Mf+9V#F7N{oG)H_|avm8CT_AGNoW#)B_nPRi-#JAN=-y(v2
zcB7`?nV5NwzWzIT@#|+8J3qsXw~VrF+aUQuM7dn#rrkwuxPBd{&rYNQ$rfMQMbRx2
z*4@}jmxhI^o$8I2X40aybsURUg<<Qut-ouzAMHesN%20Xbf&9%LxLwV5q-lYX3kHN
zW4KHBS7`cV@$k?!rS-3BVDb`YBnV54%|1a`-G<EtT(~gB`3uuLH&kTDt`W9xAEB?m
zKp~%F=k`r$k(vYN6_4W8feH?T%_c2mlib=te0pYO{+j{s(=?5CZ0N!{kePbvqLveB
zb~qJudQF4ZRD2$=n!-uy4eLj@Gu=2%O{(M=Sq4P7j5BH(R@1Uw(b_$Su6$tfqF&|c
z_xZt)a~J=Nb@J^gKuW^&RFx+lo9D$BF0k!}VRmdEVsu?O1%7R&F`_9^)OYHZReQW=
zI}xCr1#h**)0PHl$|Ki>_ui(bXuBaCkg|idWg=Cv;#2yZT0}z5o*U!Dg+HZ#+xms~
zbA=k!sVQbn^;t@rrg^0rMbAkBVj`l^n6b$}rDESml;4ONM;IBJ&6t;8y1=oc6O69w
z<AxiCSihmfrO8Iy%S-dW>FJT`PsT8k&T^+j&6FOX?Ka;Xev+!PAZ64NRn}Cc`%|>E
z6fap$&fwG$yJjl8*fBlxca+xUu%?J+uKv|%)Z%G;i?NJ_aFd!~AwBv^1}3xY=saU`
z6o!Sl*)I{yZK9OB4YZ7!7;Dqv;up@(a{hdkFiH`GAPBPJh86<hQ#2uS$J1<YO03b=
zxzyG`?Px|fH&uPBT(DDytF0uXwi&mQxwOtT(|)-rSp?slp^==Vv~GZ6dGi$rie;uw
zbW`+%v;<;#-rzW`Zkty-FnO72HzGp5Zv^LNn4JDRQFANh!YvtB&|_^tU?S8zBuEEl
zw#N36_5TwxdnFxjF>TuK+9t1aMrpgXinfHdz}wRWL!nd!)dY{n`zGGS81)c0X*S1D
znIR~J3=M6^n!+{IsIJViwn7P+0BDWC4FLA<#~eC@H=-{XG2fMF3q-!0fyu0C7^P-j
zSYQhTLj~gGJd-nLiE3LZ6>r63KpPk<IG4^_GX!a@)57&kcWc9RsZEeN01NvbYKN-r
zed=s<5=I?uYI%+7QB82(A?h&B<C@bn{Y8R2<VX4`mG>-IXd_pDMlJ3{r>GhU5Tnlm
zjO`y44rRhRbg1=Od#WRyYpGES**+%o$P`N$_7M#Wjpk{lXU~zVZ6jaYMG^|eI;=+R
zPSt`SHfRf}L-GN!in@+-(SAjS6{>cS|McfBlc&RHzY|rA7sSnx#1~V7On;tSc@u%H
zbYi_$aD3Si(sCNLsAZrSK^=m931Hp2i`r!dAMgNi>>mk&xM{?MS2Qr0%b6c#7krFd
zGyuawqwy+@+2e$|jY4S`8pN0&#@HN2!jxN|?Pk+%|CrL%G||k-@E{(=Wt29TW)iZ*
znrfOU_Bcd67K`|VBpxTRRcs-kGCD{U4R)EPE+L7%CSG6f-i|2|!uw|3Y4|L_-h(f8
z3kwe_g~A7q$IVSAj16z}n)nQfTP2Q?-r9F1lLQd*`C-Tl&H4#u=1vmo77B$u_{d>{
z2qc&FT$Ys9V+=0w42&v`^PM(H-g~@HC&#3MO7NOwO()ZGiNGsya}00i3G$Z0-~hS&
z#;%6?Ci6dgEc7=-PzDrdY~FfbfBDN#K5{HQky4zj3n~1xed(oxO@z;g2~icl5`?r=
zqhytG7S=vLN`+j0kkZHy+IN=e`rk2o>2aFX3F5{aaa<)yYItqpl7t{Hj9ecuePJf;
z5$`?T$Ea`O+<f|a7lT(!qDVZ2YrKXxuTvN?3~kv?-^dN*@`Gt*Sr*i(bddO~hLBb>
zeQlwqO;5o51w7#I+y6z|%Nz8WTl;(7CqHe(L>V?9Ytty{kzKz0NdgQ0Rw17sB%g;y
z;}WxTU%<={Qpnvzm>VXJa@Z)3$$1X_@i-UH97l{NNoH}bj%w;CL=xcRX%at<M2@IZ
zB46B$HTm|2N{i8L8$-PMeAMM>R2%;{fjD1pI1PRm;Lv?v^c?ERfInd2pxeFcCx6%4
z()TAxJrQF9xn={CR~GuRyn5}Ndr2}wbG8O?3ClY2`Rh;u8qHZ$ny5A~lAb{>nIzF^
zY%b-p=Su@vTV7CMxS$MYndTx_m*!ZjpaeyeC>#vpc>2E`dh+cbJ#gT&_Ta$}x@8cI
zy;&@%zu;W*VG)~=QWqo|7C94FqEW0mn`1#^%1pCWg)kf-92!6n>htHAtG$ko4dU~y
z8p^bHVCV?Sd5Xnh0#oR`Pb<bUy5MZOb{Sr|0@IgmNfR39YBN~*cc8L&@29o*V4wEm
zvlc$+ZoKhdeL4y&_b17GA|k=H8<>0<8r73wrKp+(XNicUXOudOi7*l@sEU`ankz{O
z>C2~j<R4z6vW$0<3x|S6bMjM<JoWZpIB-Di!Gq#f5ta&kTK4TbXXj=I4_O<%*}0}O
zV(c|DeQVXIW!q_Y5`>Zkrn+EouFbH-)}PrP8{`|onUG~PN>&h*psGm}^aY8V|NIx9
zc<Z+wIDjk`)H2glQ}FO>U;C{%mruUKdpBlnWHlwgU;V)3wakxNOFQk>AR6gz!>#QK
z7HKCe?Fu!#*NQVC%S@hIi=c3UEe6ij$Be|^2cicLe!3?aZJE)x4|urWJontMjv1f4
zPgN$32`$>1NPXo4lh<ncWD#dk7Pom2mX36%Gw)t{j^16S>_&QNl)3yfN>(2QyjY_G
zo3|*FiEF&?3y;6^!u|KFv_Oj9-HVrfq~77KT|a$yX!3t6#tu1GPehCrjQqo#QOnT`
zdR$9bX5!Ea8YQwqHOFPJkmNEnD#b!v81x0|<8z6tzW<S@-u2{S?{AHo)p{Is2M&DJ
z9y#($PkO1o$*X%b2r7YKMA4*WGB1B%@>(=XmeDBbO1du;R4<K^mC9~pwX&Nvn7+%?
zC{;8O6G$!`47{&D7$?*F)*`4iXx2gv+qdtB!}|QjPYJ=#7#l^-)j=gm^JGT4=gnQ+
z{HV)p{=3G`E#G+eyeHO|rKeFb#)d&3&ef+uf92uF@BKM|wFv4mgavTFY1z`-_S}Dq
zlkgJ;`5t3)k=F#(gcO7`9a=-1BOwbr0m#zM01E^qbPf9II#-mn&#0GW1~>N%cvE1x
zXJ?(|G7QV1H`3iC!iW*E))WvE;(ViFR6e7=@qa!1)H`13wCP%o-G0TwN?(6~&zggz
zyWqAxKYxpg`~ZgcpzOA`U{jdLw_SYgVahsZ&KjyIr9&3&ZGM)S0lZ9QW>06L=XiSQ
zF#>RH+Mn_-15_PJQcH{ppB6EH<4yAq4t@1)htnM5!@;3LZ%Zy~@wuYM{pP@do28|?
z`}f};%#07*7;Ew-V`QuP_%<=YpsH82wLIB}GN!Fd3;XiYX-PnL*R_QdxfVlYX`|(?
z4PfZeug|8LWtD|ZtYqPRbWU^A&b}=jP_VciZR>8WidgaZNh{%V#zfC0+C2Qo<M+MX
zK2Q#P)*d|gqAut0eFGo&oBjLm5BR6Y>K5sM+Vm*7ii=#Un}Pdf|Ne9vt~+$I9^^&+
z$5@s7J1HL?Sn&KG?(x!rgEBTYD(lwWr+W{g4<P=Z_Ur#-kN*#)?AY!zG1|`n0000<
KMNUMnLSTZ7)W>ZA

diff --git a/apps/desktop/src-tauri/icons/Square142x142Logo.png b/apps/desktop/src-tauri/icons/Square142x142Logo.png
index a4cd877f98732cf229350bc4fa65ff9fafd07f04..183a972818b7ef400dc62c38add8bd1574503e9d 100644
GIT binary patch
literal 25328
zcmV)2K+M01P)<h;3K|Lk000e1NJLTq0052v0052%1^@s6=lw7U003gQNkl<Zc%1Eh
z2Y6&xdG>qGEpw+z8r7Awz3;m0x~{towqs(7V^jYGNCF|I1_&uX32B6oLV$!42n14r
zK){#)!GLkWeb;5z+ncoNU7CLDIsfyWbMHuYoa7HKyV!eREbT~|xpVJ(zxux40Zy;e
z>-0LkPOsDJ^g6vxuhZ-FI=xP>)9ds)y<T980cW;ee$BR)t6t8zak7u*^g7iSBg6nG
zpr`$|zxtB=!QcG5ETX?x|BT~QU#I>Np0vx#<BQ9lop)gRb<b$qc=e7KRl*Ce55x7v
z^_S_N;gnyefwN>S-sut&Lj9M%XDk8HGq)s!ddCabcfCAYEStFw)7-Xs<F(1VpX%#0
zaMWT;E+$~2EoZZpT|h?*U~nllh@L6%Ffav;R@UKMwyos`)|Lz5SmNBXdTy|gv!2QK
zdbXB%vJc?oFS<Z<896$f9hYrrz2Q$*wQaj}ZLtlV#c2#L>^*q*zI#6W$lP6D2~hIM
z#Yp+|EJE@c+uGJ%e9=|uOlV}P2x_?UCCiHI|8djy{k2^WJrnQqY%cSK?wZKT7_5-m
zRD8=9&tLV9*LAL1iNe;%U+akQXVW2X+0wshT%Pw2U-`ntfANpsy5*IRxexw$(Q5qf
zFKqI6CLDItg&RNCeX%J5^x6y+ti3E7-f-b%pFa4b-RFaalF6U!J)Vp80(Mm~Xwa6~
z*7-ZTE?M^nuPbcrDOX<M`SUl1eCiF-{^6O1S(B#Uz8TebfANxzFMjej?!K|-+BfUJ
z{olJ2&bTsgWJ#{?yzEzA`OAf~!uD1dYy}r0&7*ASzvVYJoO@O4i{B&!y@OPLb1J&6
z7btM(V+)w9J-5C4kM?d`{q8gP7OPr)6*8I24Q_TC7^wo&TRD#Ptl@H|#R;QKxaIZd
zRR88*-~YMa+WzWKny{F@u<U=%&j>K|jub0Nj_bRwdF_Y(?^&O1zlzl*Kig)k58UX5
z2$<b>b-VkQAHDu_Kht&1TP>sw^*6EAIh6o(>Kw^)3>pKi&N)4QwEK(|H*YZ4qaM9Z
z+MCbe*w799a7YMm7U(SiFYh&Z_lXKRGJ`;G3#81|adfQkiMRgw=YIFcU;R}Nfh6#V
z|1lo1*m`UA@>gx!{>Q)it`)Cec0KAcwaI4orGQ)q#^xZS??OZ&3_BlA-Z|=g?Ni70
zeDm%{-uvj>p$E#Ct>F|}?1cy#j=X(#*Y7>BZOyN3H&&vK|0C>e7aF*s6ZqP^6!(q_
z<OM^91Lt-#enXpqU}z2<Z4(F!%K({ojnU(|zkSPxzVusneB<?%s4o69cy!R+Zg!^6
z>)Q6(E4MBG<(Iu|`K6n$2BKc8F8L;#n`Z%78Hbvb(LD+oJOmMh;OU}o1;|W2IFFro
zOyI{4Oy7Rn!@EDYXa3>4^!uFL*oVFFvL~BwY5UC|?%4GHtIU;VoxfJvXI#i}Qx`Dc
zOYxZz3AZX?MhrOv$fX#6<qF_D%jA{OG11!DKxos&maaWElKaA2fB&D}{=Kih(S<LQ
zz&H8ou$=LyH~iAXum0)E4yQXpkP&spid@K6lc5a^eE{pE#2kPNDGvf-FW?OWjS55%
z2^i945#zRN=l<=(7JlIipUZieto@|H`7^c57Z_;R#+G;f^Lgvuca_;^RQao<bH)W6
zFYf}P2>5<kqUr%$GWY@@-@pTgJ7*<U_C;vzT!!kx5OQ6!h|uNuz5Uf+{?zZh-hY!D
zyywn;f3wG8@Q_7dWJ4l3J3IT({7&m<yH>j3Emc!EJcOME+PVRUIt<Gp(GSR3Alw7i
z7=WCaf}E~_m!i;`%oIirT6pkS8ee_9^zo3D>hw`gcDD5busAxTq!Yb5|0{oe*`_~z
zXSy#}^=^{RrYj7*whzcfz&$?jl?fr-8W4H_3mCUKkhXyK3~**U@C%)s2UQNEJ^-gZ
zjZpMJBB-0k_T~QKmw*4mzx}|s-_ICb)kSNNVh%eixAvUtHZOnUjo0+PbL&+ctlxEI
z2$Oa80J%O$gOIxbln();W8kBnz(fj%AMLVleVCoNZE)aE9+}&BOF23*jZ<WulE9&O
zL3#0Kpa7QCYWgy-dC%n=Kl0IRPgj+_Mml{lXo^x|6bzrAl^82YxOE5_1BcA9Wdf}k
z{kWnBcv+tFg$0RB{SfS~G(z-4O4OtM59U7bi+}RIkMH@xU#fP6{LeOFZMv)Vl^Zs_
z{q65M_m6w7sMlq!YV#ffPY+~c26A{1?6@n~Xr6!VyG8TQfBfjH9<M+8%}7>5oMP*g
z1kN)Z40l-9y!O)dpZs!L@2aYGqjcJ@Gw{0QK&OzXGKQ~JfrsZL>J5po0Rb04$haW^
zlLL;Ufz#3gyu1^*)G;tO9iqkC3$w@MA(lZ%yXx({zwn+ne)Q%q9RI;*DFvrgTD3{l
zjUWkNYQ4H|+sppscdq`{itF9FtW|8@)ee*wAP&w5K9Com`*J(}@S)o_PWp$2mZsq+
z+dZA4bsT+iGCXU%dh6@|WMkXb4f<L3G#ZuyE#^5pE?o7;UoLd4s>*AG({i<em-YiK
z5~y*8+Zqyk%L0BNMG!!U01%OWL?ICPfad~LPl{?4;y>nreL;j`r-^xUGos-@7{L+2
z#8}3;U`6!<A9?d<uIsw=Wds@m4_#`?f(SHZNe#yE)zQcP{SW{2!J8KjbY_?dUz8UR
z%{9PgdH91n+MN$Sbk`074TsSTv`;0_oKnC^3TZ3M6=!_%6R-ZizxuM9zCx$@Cp%%<
zJ!Q<zn=e@T=l2)8w%6?!!7f~H;?jNz%42E_3N#Nc2vK#VX!sIQKtZz9z!4fa^jzoy
zuE$VzCFaUfe7yvW2*KOBQkaq(fFT>)od)U)PVe<As(<#uw|?uq%(<5(;7Jw%NKo9&
zfG-W*_qSjB{E5A$)#FG{gsdXn+F*C)Q}>L0YS`bsn}btueaZpmlmkw(HuZF!Rov|P
zmtV8u%uaN4l9~UXs<TgB749yc)$_ZLEo;BRH7*op>Uz%4Sp}?3G0Xz^Ze8NOc`3>s
zL&Il0@E9T=RK10a7?%-%2#_HV`hZ^r>Ml_Bf#C(<iwh95JVJhX7Nfy>@PQO~)di*-
z_U2c2*FW?dH{ZR|*sxZCXUS<!()9?DyydQae>gML#+hM-tYYvx9?Rk0nMeLu|K6#+
zP8s0nJB#DOb$zcg@^yR56^?n$>g{i#Ad|rJ|L3w;TorC{&g^{ut~I@{<~UOze*@zy
zRs$>2z|jD>wIcD*oD>xgs1YbU2I(=*d~g;rPGF&j2p6qR;DQGghDL*-?n-f@B*hm?
z489e?T$9JJyAgaS3sw?bj!W}JZ(QYm@J;VL+{4%O3Q(-G1U&Rn8L)eL=#JeFxBxf6
zrku=o_s!h35T2M|ODG<v>N+KWV^Az0CAwK>%avDlULU4x*IL%?zW3di|Na`RS`~>U
z{hI&M`Xsd)i?3~c$9Ffa_?6Y>I_Y=33Z}J^p_rA}Qv+_9kvOm*QK7iS1%ifz@T3sF
z)bWk4K_deR8N>i07v@9wH3^?GFCTDS;6O>@vn2*ABM@#WV5qhM#%K#rwK%3Ee*Vpy
z#jjm|^CJ#AG6aMtfL{W$n4SO8J=2HHy6FrLI^zD3vCk_rcWPXg|8||^Bh(GRNYdTK
z@k`q-`LlC>z5`Nj7DB8v&wf);eD(wX=h#cTulV_#%4-bv)G2y$K^Xe8KmUodR=xKs
z-fdJnZxpuI%h2EwJEwuWrzK|UKwY^fWknFV43Q@x6TnbVOn`~VWyQ~t)$#Phs{-Bv
zL#-j<)uh;0miW6e&{_~!II{&OYU^Q+wj!!Jrl=U<d*8LA`{s+@{h*CDdudgfZU6ya
zJn;C;H@UyUJTRE$L$%?1@l&!+iFDjS#(eYo%YXk5|K_saEnKm}mEvbj##^`)-xr1)
zMd{(ly!ZRZ!$<eKkN)t%eINeu(4DtvQ=W8<buipzzx=J2Z1}{d)7?GQWp9v<zuCaF
zEfHEkRRAFeLJEA96_G-C0M%^Bx)>25n9^_!6duPo#ED^ozAASrm<@1;!7NBvZ9q25
zU}S*pEsVdR02~?SSoxz0`uRA5mMXXr_~kM(Z~DEjee>4ipS+Q=FfJ^!_?S1Z{f(R6
zc=Vyi2JZO!!GFA3$i}JdqfQ0jSaA6H`K>>5^NpAN)s636w?4Hc>q@c3WPCFibGV4^
z6>{!-Kp<UN^F?YQUHH_W8hGcepR^?w0)6szT+?D+aMh)2Kl7uu?yc4C*GdOx8#wAo
z_-Vj10YMKmK||mWROEwCZb%5GfWnk}Vvz(BOamtZcnlo%Rwlr0fMpoBS^&FMicA)e
z8OC?CGQ2JaJbDN?<3}!*8?*3JWpGEj!()xy8~^+>AHH|$AKssUCRrxBvI5nHK>eoz
zG$*fD#ppuV{5@B{{`<fAp)+6Hvdwly<W<AcxMQa00pkb+Zxtx-0vi|uKNQ*fer(!*
zf1f;Z%h3KefRzK?uhF1MvDGWK_x{0;3T<c9i&qQVIn%(tS&3Q-2n@=urB1JvMbVZ;
zhRVt`Eet(CfT7<J+GQocp|2{9rel{HfSjzCZnc9jmXcDCpWy(%c0I#`UJBy2F7zXf
zC{=O#TXW?PzwRyn_l=*O-aX)c=U)>mNh`$E|45lgV!Km?PWqe!CussQ7(8RLEy3|I
zG>(lq`DIlEZKz8#ZL_X6z)S%nvw}SyiEsRSoAXC^?R(YU%Fb^9HSvTDiWM_wFZ<nx
zm-Srh=PrnN$0Y{eJpoiWL}bRb8CCvgAXXiVK|vkoB&MP76__F^q+n!WIQ^ai4p|#z
zeRLU^t{>A`AYlnXNwucPSRutEZf6W311{RiaCgPRh2L#OUpft=RCO-wUse6R>)!p9
zcYgE4V^!=ulz=B8um5*R_^ASzQ^HkcP_S29eVex|E1YxHx{hCc=?%*+?7hVI1@pMb
zIWYDI;g7!5=DhjV`!5;x9=T5+aB`AqnQTk(x9`}t_IIzaH*<I6Yoxiq#4zGZh>R3r
z3XmockyX%vsVe0*tqB1_fk#`K1S~v^EsgrBfTTdBn4gqRn99!r<g)0I1&lU;w*aX$
z<1)i=Sqsol9rAl6&i)UHb}o<-zQ|_`@%|s&>VACJd;7)z2R$NbU2N~%zW$;$=e_fD
z5B>eG1r(H><aJ5}$FvMs?CQdn7k}{A&;P;pmy}#74B_5i$h_*qV;{S1>f7&C<$Gm0
zbiIe}&i>46|LBtSfBgY_b)mZT)o_L)CJvV+k1`CA1%#Fq1RN0qN8PlX5h!#ZtW1S=
zO%&H8u8GCLF@2Q*1drX6@)iUhBL+_Vpm>L80p1G1^WaVvh#X*B4(MeJ`R_@r`8Gt}
zkvzwkFO4wswp;%E?(a{0_(}#pwk7hv;3$)AGuap3_TGapx#_$O+pc~`>!h42CEVo~
zWICSkaj7yKA&|F~cmME@KYi#Oa|69jB$)rm;}#y6KKL=^8k!swT^Vk*&wugu{`Y^t
z=*X8hTqo=WAL7`E4tl8;LybyV*AMP8&OOHUb4lt=fv|)KWt?{F^jlESOnyhF;zC)W
zaPh(72PlY+9~5ANva<@ftO7pO^n75y%WzBrhhD^R^g=2sLku^BU8)<^w_p6`%llI=
z{>A@}^iGzB-0MxtE`9Y)Z(X;cWu+f(Z0p=ie?zseletdnyDPmUog5YOFmTTB{mI8Z
z`_*sM2TU*LJa{x1D9N!=xkUM>+6ibcoYD2`-^z7utgpO6IxNkxZ$JmX5p}j3#LuIz
z60!z}suZXbn3#U36g&=y<6@ucPlc*Iq;7r!47n)kkgGT+wnFL=62VJ948gb&FmRuN
z(d$x}TbDw(Qb<=~$dd>ip!!<IM^-UDUE&z7NvAE_S$*9Z@BD&^<()dtdGe*OSO@xB
ze{tQ_@A!+qy5uX)#xv`7e;#kY>5`9Skv2mSom8ptDN~|MXa_DT;lJE*^v@=Dt#I~C
zR38B9LZ6_;v$QJzhJRhr^K+Tjvm|fr=6K{F;Ko(or~yPZDP#=-RR&%KSPfux2HDWo
zA@Zf5N1RP*uuz<{2qXb|o)8;@r5P;8|29Gb6@dm&4^M)-5S(ZkRRRx#sO$Hjh-6C}
zF!XAM$s90SXE-tooYQ|5ws*Ydb7&R?_2np<{jHyV{k!(x@s&5t{>}GZ@`>d)?(l`&
zZVO|1_;VlFy5rAoxaqsg&E*|2(eQ;09JOMXy=U&xFTC<kcfJ3Pk)6M(pHIa95(Vp=
z3%B<C%5`?1thTR(x%VhguIfUbAgj_~y7gTJcwK)lXBpTGU^aB!MhCq*rlGW)K*EKJ
zeU>~QyCaH+1Z!ql^tXm!a7>0&#Nb3g8WJf1VF!Rk)KfZ+s=5nc)q!KGS`EBntHj((
z8Rk7;vJu&{F0Ws_;uWt*vAz!V;nn8^yvPq{r>5QI_8jMYxEjvx<DB0MQG3*k<i7IT
zKHB@@`#$!|(-(DI_+lNl@fSAdILR*R;X?4h?5!Vu;`91v-RZ0TpjcclqF$IsM~LP?
znUhq_NJ*V^t~`wDXbYDtjgD*FhzV;wxV?pOUqEn`EHS8VM_l0Jl5zT~-4cT#V(`$<
zbv~u)H)#v-M;U6v6l(x>3t+ZOSnYt_1xN?_b$xAhD82uV#qjYI!z1Sb$G!)_k8v~t
z5w>Nvh_3Y3%ZBSCw<MpjCa0<&xa~{leCwX`uKeq_o$>wiZ`vuM#sKHz^I`Zvqj1M=
zPdqd#Zl4KCC)D{l2|@BH1)RmjwEu1f#7%uS?=GxbpYJsI(IDVqgMpMJQZTCT5pRY^
zb-?hcjbXqf<3X{D1-L@+U|J$=YEUV#P)#OI&6S@F<JcyQL8FR-P2i{tWH=P~GBm~{
zOp_t10JSLzdDKupGg|?xO~C4su=*uZJwU3Rp(24l3xP^iqH`Hg9%QKb%<RqPc$>5A
ztl>ItS^D{bQ0}ZfaL2p;*1zV~jpyD`3}(vHKgbt;^B*dIcFT#|K3v08Ngw#hVFsR}
zz*(eO>PtpIqBy{SZ5im#GwdA{h-^a@+sK{Jh0aR`hb%@QP_5K3TP~wf_rdKPTGzB9
zGAQk*`4fyQq!CDx6r2it3OI}>eX1nBQ6@}9%+zMpF3l+#sL%Qs+e7^E046uMZKYs4
zj(RZL5=M@3s|c8Ff?5-}lU~9%@b={;o?p)~IF~_hOHBk1H{2(Ge)X9-u(P!P?z?uK
zbNH3H%!>E_)BHdE^NHJjI|0nel*pV?z)1!fCD{UHTyfYO14)QIV|RV-iuw(IdU;nz
zI4}zmBB%%?ilnGjd@(iSVWH~tFbZud7E8kvUOhCuY6R0TK(P!bUAC$SCzWIEnlykQ
zSSUFa2bHB!jn24DqUueQ?*LW~DDCzUxFJlN!4Cx7Mip2n3C38+O@pV?S?;6>NH)x@
z2`k01I_F~L3J)zEz-2F~g?An~!AHu2cRl%BC_t$9^~8Pq>i2hsYd8Gc;1_?5K%?1#
zi&T>r7;s{8Rt%D42F(+#4XqTnQAii9j?VUcM{h3W^nUfukBZgHUT*fcoeOTH?9r(J
z^A#6$w~j#0L9hu(Hs?oS)$GV#%tK>sNJufr;xMV>nHV&b8BsfdQ|hBz3-pzmo+=<#
z4NeU+I#e~K&olv(3V+Oikt)ElY;c%lbwt4ew~Qde4Ff?a!oUmspymr!mOPg+cvp(?
zAKcX;&T5T(V`RMWp?~<sv5MHY^C=5@Dp;2I%0u`3`mH<neY7e^=IJ;HG$(sKN5Dx+
zTpB2Hi6vRQY3Mg{RtxKFSzcVec3scP?d$qhUb4Dp#U;zyx>vUrI^mcF_^>cGG7{c(
z-~hjW-+g?(E{=g!4uz~V5s3LmeKGpDCx(xNa$!ygW_iIceRuQf4_;j6cE}*Or7Fi#
z5NIf9<vOc^AvuRC1`=pgCzIgA2{bBT);c{^*D(yhObc+^5Qgo5n+7Z}6w{nfPyhWw
zx%%k8x8^sT(Oy_}ezCB^Y|Ac3-pRr?Efrk1W<pHkg!7S4etGXbNB{XUpc*A0S-KL7
zGVKk`0z<QjKI~Lj&k}H!P(7(+-qaW^1xn7!p|`WIb@i6@y=yPoylVZ6Hud$NwX&zb
zwXLNSU^!HM2Q%{=Q?qdQkIS%90|EgvW%QYwS6w1Db`9do_kDhH=fr1j1c(UwpO#zl
zcYQ>Pxo?_Qryp_3qP441nUiG7MX4TloJmm|ot|eQH76(|Vw^E*a7xmLbAwA527^gI
zv$!%rrp1spnBUnR<&K|t`0FPspSk%&g)=smOWUlYw_vY6rz5}NlD5pUO}2?b#T`F>
zZ0hl^E`+<k160Cfh*DC=(dQ^RV@YNCiByc|5pWXMlK>?~i27o310A_`d-eL2?dvbv
zxcuywZ0_H1@tVGst;;&QV5f7a*DcJH81@ZIci{lSYD022lw36@h2UV)QPv6)jVQ##
zsL!+3^6*7x|Hj2tA742z_t!TvG8xUgQdgNn)MmgN%Ds>$Qb$SvkWwUpu?9`-mXdl7
zSs7I|rVC059l1D7oaZKBrvOgw%3v@IiA-9eyU38TWGQ}cDN(L_vV3&fJAQQ9yZx)p
z6ZIt1lDH^siJ#)kCPAOnJ-Yv?lm1f#oWzJG7A0la=<DdtZM|Uava^0>W8an+Z(6l}
zQ-9A2q@6ZMW}{q}VrC(%A3Z>NCB_?JM41j}T$+Z#2x+iQy3063$h2%FmY2|1+vKPR
zo*D8?^|Gz+ykTMI;kS>ww|+9wQzea1A>Fc!ffE=K1`)B;F(!;ZsYqNr1Xo4CB&#C8
z=vD|tLrn|HxrCKs5EkPWrQarmZA&<5@Sa?RltEWlTMrG0MLAs@$EbI=(BHnf{mR#_
z>s)t9#^JfTU!9(=jvbh-PVHZ)Pam6eC&yis>Od{jNy3xP_!0uYe#Pfjd-V(fhfZvJ
zw#z#A@>PA?Z``!{yq9cPy`^tiS04&3EeNT8QH%T&3z1)1VBB?GE&_G^Y;I86DPdb&
zHS`4OuBrZ_<ohvMi__1jr=?B0;@7Cwl?gZU9VgXMJ$LPUKJlXihrU}E2aju>i(Zj*
zs}b|yq!{-&QQ1{M43TuhDZU9MxhWM8t4_Es2<jMzfwCm^TI5NncEici5QWr+Fl+|P
zVLa<dY+3E0H5Ue$)aN95=wl%~(Lq~$Rpy4bzVxhL`Q(mG=b|;2LCO+H+aXNT1LIZr
zd;v4nDGbkyO%03<J$8I-`2Mk(@m*uHBl~8;@d*zLu9U%3h>RDj$j>&Io(6FA$ux`<
zTjspt-B+If#*bWf<qqCfXoK$om6BhbT##a5$Th<Nrl2eZ%uy*VjVCh}K|(c^<f{ss
z>29Knr_MqA(GwZ1W=K$5kQ0bV3{wjl=CWnyxm)Jnb@wA<|96d`A&)S$ic<KEh!8=%
z8B?m@G*0@#BO%BY#q9>Jnwk_0leN)-ybg?G14dSm9?SqNqR!il8zvP3Ig05BYd6)9
za`Yuz>W>n_mWl5Cxn1x0`t|3%>6(1LSRa`81fTaz+a!%T6ImxG@~MI-=6lg!*lcg@
zmmQhQ-D{auyEb4oRJ;WYkB{QW@sYg;2M6ytF*>qycyjcyvC_!kJZ4G)_2{Xr)6$7x
zr-;RoXvNj<zTriG`O(+Bv#Y-EAt?rqcxIy^dFa7O22GRxS~5vSLy@M0ARCid7HvKB
zMHY)7NlbCl#iJ`uK#8<UDY=&w4Noxc27$j}<&AyQrN=&YqV~6MUp&Il2W!C0GS1BS
z!mD^iyR4*ML;WWLj(U!)-ICcwF)c>_4Oy%d5XCW$K@S61UJTK{rUDZLgZ~T~a!r@6
z{)2;;Z+UG;U5N6+Y|XI^i(3Z0I9Xkedc;H&NL1$}#^%(;@l$46WX!C{rh(SBh;M8^
z!@gi+bcT^}&yaTQ=8C(3iODG(KR!Bo<k0XVhmQ~3b!h0wy+d=uN2W2oAmBa;O#eB1
zdk%r4-`r${^s2VkeZ+Fw>ytymER9PZxLjQf%TS;o|Dxj(BIpu8$f_h%PGwSw(y6Hx
z&7hi2WURX;JEbl*Wig!bP;gFkP<kN^AWE_gjxexID_1^a&CPF{-@p6I<><kC=+8+N
z9xxY3GtQ`TXX;i1Cq`df&q)Gfsy-|Cq}mZuBw|1;1&s|*Y!lk_y;Sua$2PEOO#>~R
z0uh<Fraji6Nwc-fFIxF~doS4Zs?1E?t4gqp#ckmW4yl@E90n()xa6LYB9vq=DW#A+
z5a3=UP^|;gHO7rG6Q*IgwwV@br&YAJ_o1t}$y|T2?0d!aexG2Cm(}VeOiqsB$brG}
zJ&zr}d-s7u-+p9Z|J_6K$j~ztR6i|?!;x>zWjpwx{Zm-6p^K+720Y@TC=k#Ir^_8%
z6d8j=Qg2C<zscG}k<h=RfRI#66JjrKW)u|E8U}IU6nH2`5kgSb6_dV6y&rgXOY8dj
zhMsrbwtMtFT>+-3Pc9=wU^e4Y^&8@H5@VbTDJUp5sp%PmNcW|bztl}l<rNd=AEn@o
zn`xqm0=C1zQxf?MuxT~5#6y)-CTB+?f{p&33s(Hm;2CRvPRvwYpM%@nFcC;{wNwM<
zh$sml#-h!H@T6+2QuCC+WKu9ru8iCyhcKyXt?HGGyB>IDoWYzhVH|)@V02Phk!xue
zZJn#lYp%Lz*$uCaUK3f3*F1jzUVP+3w|wraN5Ama2zA}Fcp4yjTEGcqX|CoE`>1uB
zdv-^-?6Q@pOb04EA&;cg0`WsvJXKPwEsKyMiUg0MD7G|9XUfFBK_wy-4*}d{oSRaR
zyCH&(Tjj(MC)6o`sn=!Tfr!Ma{+DE?OAmeVMD?#<t(+qdz%u|#NpOoEab~Nm3n5v@
zHpUak=yYKz{g#V#(Ks+R93Yh=%OmNy&|L_zqO*Y@Pz6369LWd{U$gA2t`F?ru;LZr
zg71Y~a#M|;l?<jdv?ktSu!we=0z6+L^fV8e6L2V&;_6%?6tTq<IzYD~bvQ8TcPv#~
z;tdg@<}$P70ppVl<^jV`XSpbL7~z(epA+7^ulHAWeQNOWBaMImgm$4nIdFbLB8N^h
z1*+c2{C7W+vON3no^k*9u`=3vEM;91DTyvzskl=U#Z@{DC|R$Fgb)!z5voT-wn0V+
zWvG6x;+aS&$^`ulw;89C?6gs@h;vv(qTtFnNM=AXlj0}aFw@nItKRaeg1O_;2sKYI
zAJlL(QcPGRrc2S?tS%1GE0ndNim;Avbo@gPgOTPzHZLMQIHlkzeW6W<+!e?A?hq;4
zK;Y5L5~8q6q<L>~+p^z3x@G-q3$-v5LB#Dy8X#*)Uy1onsRB_lth{c-yLHmBOX~Q;
zr|~MJ9Q7G@)dQT!YOV(~JfKc8WS^lHKvX;_$_*h%p<4H)sD)BABoQGQpQ$i&wvlpn
z{-f)B_s5N}w|M5u^rd-vf%4O408P6;{NV7+-7^;B{I1&%hyVd{ZInJQVHc?YHm1;q
z%F@t7#Wo5kB2qvJ=@CWBebK+EVXb~Il7i;cPyx@(YyL~78?Xxu%;u03eG`DV32E5y
zMQ9gWH~MRO-tirWZ#gp*!6*slm?dFTj6(4VlY-oU@?J4$=zz&!D4^&nfR2Y)>?#Q~
zX`PBwU5M&APFi4DfdLI0EV98&K1~9<&7HryXYJ~n>_!;)G~A0!WdMUmhDo#^aB_8R
z45<!?(3GNDlcG^0FlaWTN8kwn8o$!;B;0@zkhtqh1s?i6dfs=zoB#F+P)w1=>OMrZ
zF3EYqwIclew?@R^!UCVH4n3+b%G2WxJ`Go;txklpJGk)qt8=O4kC|b2^@l&)=Uo4i
zZKzj51a8b~lRBePbsBmoa1dC+CODGdAR(pGEIs9b=+-CYC0)cSaa|a4-GE7YZwrV<
z!G+6&R%nuAQUNFTqEM_@_R_+9>BOC$2slsa;M%16ixsEVRF@%O#CMRIVXo4t_`EX4
z6*-K8bNU;S!H|`)G<Xb0qOFC&%y85~$27dU5Tf{^b*;bl+VyMR*hdZXNC|XIRmkMz
z#|VW4ns&hHl1e2}p9Jca`1o~GRfCm|Pck7S<K(WW2Bj+1aeNpuCM*F?btwXNl(;j4
zsqYE=?Y#!R@tyq`9i2fW$N6CS&W|M@Po6xBqg4kDd1&{*>_7gdY5KW|;Ys)Y2alrI
zMJFq+&BQgDNT?IQBO!T6aVb^(RYoNch5})rK}1#JFp8gxB>YHn-<R-+f;lf?q=B|o
zKw&kI>1QzVWKDG7OZ6HnYrx1FywIBU*Y>`m0A}Q5S_<I+R$5ZKK+uV%_<%rRP=!gw
zH@dw*wo(P+h7<%61vGMRY3=4L2e2(5ondHg13ZJO*bWavAvoW7?dElF*(O<vm=-1-
zkd%gy>W!$91z4Scvz%@Ma!(S~c|G;Z3ncuIT$MmT-^ULxq_5hls0m^8T)^N*fFEk>
z<i%DhAdP&)xaUgV(re=Odk65yqXRBCz098RFTKN+BNGY7`6O44wdI)&e(;eK(<@)T
zy8Bg^?%i|LZOP@#72VyK84bCRT!BHU5Mnn(V2Om(-&0ma;ZB@+=^UA>ZnVDpV%=>3
z)E0obA&KRE5S?w{$k4@*2p2dP5m(c*DzhOL=E`U^=K1{GWXQ6d(*+|EmU2~&L_ik9
zAZsFZ@Ev!)pHRC|L3vyyPHT%}rO8Fb?kXkK<XKAH>PW$27EGtlhuwyN2V6>14LKms
zWS9&rEn#&qWY+=NE{R}DiqZ_=62U%HBpY3nRPIr#3bzW-RrNu_q<~CnYDX*((Kid#
zFiALQN~)<M^d-9cE$lfmi67qmxZjqwbNk1>{=KR2N1uMC=<UxKa3lgbR{!eHrsjHw
zI$JMx?!AAvNMCg^&lmETpCPdm&DA5IP|JWUiH>P>n?d29dR3~Pr|T#&1%p6Eb$_Bf
z(9dkZD>GEa8DF~tXlVxy3t)6FFn*$j`O#U_7N+0_Wk?<(@LZl{DKH9V4F=1mUX#A~
z<hIC>Fq&4OTox7nn%T4hjTYR2>Ojghne^4xph{&Kcus0=d}JW&+6a`$$3r$_!*-~g
zKo&qi8WOy~kXj?rx`t#r5DSw)t*pnYkUXc!{~<T6il92%B>I^ow;5A()Cd+xmGwz#
z)~Z&Dq-qwThU6VR7AC6|eCJ1xg}H3O9G<yja@76Cjhbw9QVW1j4W1CQm7($%F0zc`
zfwZ-<de^-VIagnCIZWGtUwu-*n^>B7ygY$Ja;d0o>b8lSj8@7(%Aq@%D;Gf*w6PH3
z$o&yQ&e3-sgV(|^6G_a~1Gr?YQw~gJGiYq62Zl1NR0NAsUsDQ)D!)|MPDw}tfl@Be
zox4c;kcpL`-%B$fizaAnk``N1*ck~w!>Efds*>}f%%bLd7?`{Z89Rq`rV}m24zzaU
zknS|lz5!@k!BA)cMt6air=+rwG<QecMHHP$!A;$b(Kn77qM;m}0#|%^s?i@(At(kD
zjhU3b<hd3LmB_`{zq3o2;9|bA-#J$K;yED}8qXAHo?%*rj(0pcaBz6xpWd*#{pNoR
z>Z$6zyB=^ZI_ol^MyYn}rgZapNot<3{-{o3^0bqNX{PAPfpMXjeRI=w)aq3<yt-1j
zn7I~A*E+DtN}=y;pghOmmGWXfGT@P%GO9sJy8kU0@Tq$Z-;{7n8nX{2k|WSifUR7S
z;^$}!rz$aq&U{qkBrO$q$Vw4tER(wIj2js#U`s*mMpEL`LxW0<2)T!<3{a|<F%e85
z8?HcCW*MA}fnp1A;vi5RpgN8L%K}WY#)jZg7%Em`Ac(puDHx{Ql#?kYo*9!;P?nUG
zI;as(w;P!?I)-ePBp4ySdE0|zX?-DPaz|!Av%{04V~GOx6eV(LwPi&-_)jCH;#n(-
zuY2G4_<`!fhUuKM{v!Buq3RQ<c7cfW^ayUiwo|Yy2c~7Kd9iL#!9r;imFgVIwHbIp
zL%TC(!7%eMtvr~YLUqQ)z&#dn%NSN{W0)TYZ<NwP1VrYugbaL$FaU?ksYsSeLF7pB
zU;}jv5Cj~DaTclxkJ?ql{V^&u5}+spBCEq~A*?h*%4VE2Rmuc7j7MoH!iXuMXoKtk
zMeY`dVVU5mG|XH((tRChInx5`jd1K3!?D`}xU(}b+#2i<NT;&Mm>D>B1~!>h&94R%
z5tqs`>vS_Auc+c(VjPKX7D~l?Hu4<bx$AzE%k!>fy19eXpL|7C?0fK;2F<g`0Hm=;
zxBr&C(6XbLzx2}MqYt`_F|$3p6?M0wZuPX2N7^RO<Rg?GW=h8}S2=-deH?C3LMX_x
zau`Mirjdui^I$9mP9#lfD%ED-MpzgTIDChJvtA|9cRo;>U_1&*9%mt9K1@jpga&L|
zicE$hZAhd{AY}t0rNAR31-m5ajYr9<_7pWn6nGdX`UGWF3VbGmqxuj!{vi!jL<Kt1
z-wA4`J0NBtOJ`tY3rKf#p>3Um-m@qLVi>$vqFQah_vR2(rxAH`$~sae;20TX>^5Ya
zF0^F3kk1rgS}DaQP(CRVYJX5)2ujm+n?@4w7&2`J?%4S-CZ{G{+YWNaCja3BrD)f;
z5<=TEy`BZ&#8qYKi5c%Z*P1+YpJ44<jt$=`Hl9=BJ$(*l8xmvl5(kGSF*-AhsyhkB
z>#*zyj+2IE=3p9WFqxvsTwvr+Vw!}`v{buYL~g`=OJMqtfg=wBYcFT$IZvvTRYnFv
zN`aUS$#Nn^=`^L$6x3QE>jO&9!;~7jq#B^69!9uW*rE7`8bjo+9L818$kO!`>X1^v
zO%^L?0L1n2C<C$ziic`ubFhj<<X1UZem+$8b@Xm2=Eow0jXI~PU<?)vo<bxV2xSFj
ze+(tB0ah`<rz}`Ji)^X~Et!54vfaq1+mSM}$ffPL2d{5{Vmq*F|Kk`OIpRAhmOC+Z
z%jaf-+duSd3WT3Ei$iBVl;y@${hqg;zu`^yzv+fwsIKhqbf|@prCm3~0&4YcKC#e;
z-3O0}$B$3q#7G%a^9_Vy9gYoT(kY}YqGlR^G(hPsqrQ~ts1u)ttKLpf1;!r(TGjyl
z+ZoC;j7OdjDk~CHd&wb{;;IH?8w?qnPPhck&w)cRvEmrRhzAZRw?)>3EKZVon;<fn
zYB(CPzDo7HEUD)2_)MyehX^55`!NeGNcT8cwjJnP4Gi1|OdkY~f(XKkRKZdTNtrYl
zBb9^=#xpwh6Lke7&mTd>+lT3@34>)|vOLmOFVc1|vUWQ<S~`()0^Gav7*5O%gssI~
zW@P&IA544SyqR*>XEGRmj)0SFDAv<{(dM`R<8{}(%^xVk-m@!E4Z4(VBA@L>G2bn^
zTY*<!e;Ix`6QJIh!-=60>^Xb_4<DJt(ZLGl=BprTxI=M(Lotr28=s0(s`<jgWALUW
z1|I}AzZB>?7pToJsss^>52l&c*1`cCiy@bisMrjiD(c0NnHo5t7=J3&7DP~|z?ted
zmZDDx+axc<l&(sPtfZQ~L%<0c12wh{I}gj|!tSzB+ydTz1~5COvM7WU2>EeMDxQ6*
zo3nailj`xs?vfG%&eHIF7qxl~zCW*iR?Ls1qva?rJbN83*w&4XK88w=!hd|*;@|k@
zopZCscU~@38SvQy&9elYBoJ%MUbOc2_FZxDuXayP(Rjv)G-|4>?lvTXT7ZRli9zDC
zq!_YkhSqF1dRx13<2C2v^)L5O4`y+Ed;&Z7Okmf(22PwPVSbKy5H@l-1CC|rG&Gc;
zkf=N;F|-?4brD1TJcj9=ssaxlm@2NJrX(r&$cj0(1gMrnz@hA)QZ=fj5GFL22rNak
z3DsOxC4Kr^n~VzdU=pHfsIED&JUDS_03(w^s+FN-HL!e}5Y(VNeh))bCV-PQp`2Q^
z^OfICf^k)Wq<ylafaeLgZXJdQ(9x2`dFxi-f~_66;Jj{Z-O`4>o(xb(17!nf<N=<;
zb=O@iF1lz<?tQ;?_}oc6aPPCd{j~XPfQF&fId9eP+;{mUzuZ|WMfETgHs^*io@x;f
zhi1w&w9GX$0nd@BRRT;dNbDVBNSg+_TY9moqZjA>oPhnh8YbuF@c5Bw+_$@oy@y;(
zPWzzdp;IitAu6W_%pHl)vQnb|Oa^bBsfi=J0;L&G5&eK-T0^QGVaN>;A6jwKW4x;&
zOVmuY7?&1=nPObE9ZV^R6Jt|F7kZHgrR<9s5_&ErwGlY-%fS1#L1fz`4&4ROn2?-+
zsVJ#LwpPSfRS1XI2;sXGgj8!{b#&%9HmvK#`J0P4Z&My;u5U$0AGOe_sb!%w>tJY?
z4Yy)L3Ja+gOIgkIfZ(rt{fm*ZoqOK)p7&ieBX>TqbU@`PEsxQbCT*P2^PW4e-0_aH
zN(;R1`;kqYKnhN%#7`Vuow+FGv)UwCc#Ko5Li;7q@1&?Dke6`75Tgqc&JaVJl|^46
zkIOc$#LF(M!wna3Y_@`j4;;s?$88)LFQ7Euf^;^E;iDYumjRt;3xqYHbx*`$q4!sG
zaUE1rnjO%%eFBU+{N#wpJrN3^=%z}!X);b36*WbTM4?A95MLyRQ4y0Gm(CWTeI?@)
zhovYD2=KsA&DSUt@EQRc3l#`=4w+O5tNKb<zdDbz(>*wEV-{P_C?KD;h$V)wVPj(4
zz{3Y@R2ykTRDCo}Rq<AF7_pnCH4P+Xa$Xwt#Vf8jr&{@g58wZuKX}iEG9EwjY=P$)
zmB)}=cYWL2zH-HmcVAd8v#RSxPRz%m#xOz(Oce2m8jJC8Yeikq6Fn90CS*MHiKwON
z59usJm<Rl{z+5D7Xh9;&ZFFUNu%e>}zjU>aUwLU6<JBtm4o%>(BL*IS*uaT}0y?iM
zpmn<m_W+?qAVV|?5qF&lI20UH1}1cmhY0H`&L9xP)<pFt>6j@SBLKx!T3Ym#WD#+V
z8VyKfRsvm{8ER#YsR7RY8c-Sc5lmH)j;67)IE6DW2F^dfh_laLhgE9}NEb6e1@L#)
zaC}dI*_wsf1q-gUAj!SQ^bTr8L}5hR2Y~jSpcLNZ5Gj-KjKkoW9KkmQf5Qzs+^NYA
z?E3w`dEXjeDL|ij@H_*+SsaJID))v@UA5!4U+H;H)vX5(@rG5FpoY6DmV$0{hFUXa
zS(;c(b@qgLM}0gcKp-g682k_*Ex%<mMb}Id=_yCuV1bEoAUAHIXm_BuwH;Tk3US@`
z2I_tZ$H%8|bngU)eFys+1vupbvYi%X*s8jpG6h0H0R_mCK@Coh6%gb~6&E;GHqfyd
zB&DJ@gwg^-T?Rw-k%+6K2%#`?K*j+UDj^@eqb9t=CG@d6HgAh?)+UZ^XXdbKT^~{u
zpU_{@JZx7W8jFZ%25)l?_x}eCFwoY7nw2sXDlSx%i?}bPT4)ASu2X?Zai%3reCKnp
z?7?qE;cva+XL4gx)yF^i_1|18G1GXa!Sl2e{p5hUou7O6wL3ogv6R(Yt$UtB<@Bbs
zg>=~TRoNY_eIP!qW$JFVRvi%AZm|FtQyn<*S9pB4sUb#`N)w+Y4P^5`CQn(KRGCgX
z1X^qc+HkI?KZMhx$74-S)JXY>iK>LXx&!vsR=7o5xyF#X(+kuLjXOZG;zAt@T_LhM
z1g<QQY5@v)ppeq4ga-m(d>AMn50EK&5c746PkUIGVti8v6I<7rSiL3-r=42!CbiHN
zPz3qL*gaAU!H*cK6+Jom_yORKujyY`wH~!gpR#NUG;|IW?>M%C^fPk3jtNeMK!<8n
zhCqK_`W;s`GQaSikKg{yU4L;c)wQ3=OzUX^C!PRmUU9=qc6|DlY<69>Qf)Y@?t&-E
zpjF&JZ7NPnOJ69Xp!kDa7jIe|MYz&ra>Y>A?!X|nrJA;xaA-KUiPn(PKuX0xA{hx4
z_%f2A)dD)&1d9C<R*#D)C}Cziz|6RZsZxm9&LYIh4rE(W;5DFLrY`>C3{aZLPW+x!
zj>9f;IGsR&E|wqS=s*Q`JW@fh*F{gt#<nxlSlek}&Dt!oZB!*R)hIWb=dCswp)8FE
zR*az$0>sXv5p<QBR9hJlABO^UI{qL3a|E}>6z7L(smeW)rO|ZP7&zpnNNJ)KC90@N
z4-QUW$+E8Qkv_J}W^Q`hhd%ef&}ZMmh@!njmwu9fqe0_f{f29{edbW_vP-M;<%UC+
zgi*|3a3z>a-a^F=BuP=y7fs<;I_!9NJnCE%v5Mja1)kXI5N-^*+Y(?YmZ%;%qKH^Z
zU8yY*H6a~GBAsJubB?qlL2+gl5-p}g`!cDDgy;wmRH~RBtl-eTGLF`==)SBEx%NDf
z?bY#+N{%YVRJ5-89_DAOm_JcQI9x}5o`a}B>)TS;(49eBXBK|ZfqkK&BJFU2*yY;w
zQPY!vQuFjSM`Z#iQAF#SoE4G0S+ODsI1IT0F!7kck%yo@2lW{A>C(hA^_7701nZ*<
zlPMzxjyfL<mXz4C4({>vVD44#{_UFwE4O@BOOwUP0**F$oN6^I|6*e6<~N$9a*YNS
z)Ae1Pd9!4KuLh3NvBV;NGWKLe^q5+*F9Z}VgVEs8)<yrm=F7yuiiuYV#ZrNXGA63n
zQa{Pi?E#Xn<O&j*9FWT}<ZYk;fvhRfwK;&X+Q*4+RdMIHLVWGe5nS`G)p*g3>rpBL
zvm+G@?VrK;!8zFV0P9-|SidZbH7!|mv{A5?0&O)tFeWfK!*FZ@SbhP+D{kbNpO(~?
zLbU;us#1M*Y3v+jaI{rppk@|o;+mq=>IZ!sYF4Hq;Gut0Ru*P_6Y(X$QNel)CL;!s
zDoj!z&QKX7r<Md+V>1vq`)uZZ_xP^doBre-=hpD(BhN&<!+!EVG1-RVyT5nEd4G6q
zxj{8i>NPi~;4Gcg5kIHm2NlOCmS2*R$B%e2BVkBYmlc3wLX**SUx~$uL8O30%sBcQ
z1I&=hdZi3-dL5lg3pi<pTq}^v1H}%G-qrwjesTo+hNkf2xd&0I5G5joD}QMn%JU(@
z0}g)S>P<NRY!gM=c-%1|=76D53EKU8qy$V<8A?RqRMlUJs4nrkH#1U=qEwd3vJeH7
zToAcHHIFbRw1puF{^FQQQEOu%A{Z|efJ3(l%#Et7oG!B<1Ff`G>Ky2siavJ|<0$=A
zET>6x4IGO&Lnblhg*f|M9)9@Nukt_t=KFdiCQ46t4BStcRY|lO7r*A5jW=KG2E5E<
zNYjO$I3IM;OD&GYQA900{ec*5an!2>{;E<-WF1D;Q<~|g>n_CmRkaeDLmY!c-JS7=
zPBi98O+^*(=zkG}txEe^_(ozsr5dOM%T{uH<6ow*@4ysppZYsw+pfaPU->dzz9B+&
zb{G#$`M7I*1pn}j<LFzx9U^66&%FY}Q^0)0Np_-mz+p&*Oo=dN@GZ;%JMR@Z_eulv
zvsw!!BBq3c#7CyIk^q!gnPfy=qCJcMEl3hmTnS7K>n?ai;=TA(#sqdwEfG!q(pNFz
zGci(r#^nJuA1YMg7T>=Ic<YN^;XJhav0LsK_}Gh7D)ux&o&P0pn%fte>v~`LiI&!t
zeyLnlRbee=h;h7RaC4#sZ%%wj+*UkLKr8!IO+vvzO<5;J48e?O3W9Nq6qKB)R2Vd)
zFFr8}i&XznCtkG+7fq<vgmWRJup-9k0uT{=<pvXXeR~)??_0pJ`n@Oz4mS7x49u<q
z(&qygu4;q06}WF~0e9~CH>5w^fnWQzRTyy@N@h$7uS<BY);~p29HWp>jx!v5G{UBH
zn5v8uaMXAfA&Gv}Jbg(8i)24dfub@vOj%q4ceaPaa3Tbe9=}hYQE_jY)%UpF6~8w{
z&}5*MW!66vRI^gM3q%}&FYNrZU46?{zjW1ugSVYqmybXEbX?Z|Qstm8i-R>=SNC1r
zAw=X;H;&{ePnZ&#Gy#(@i=`e&It$501TmE@F1V?-je3Ub5jJXqY^d1%oY?&IeMm|P
z0Zw13YL~<Zdh=DexIH4#Um^$six){zuSgVHIA&+7_}+JpW3>J#4$M4+uC{X!1tAVT
z=Hu{*5dZSs2p|3Y3CvE7!pO~H&!I>0(9U^uwi|FO5`G!*DiUhf;DET$s%S};MY)do
zNrurup<FG+Gei-S)WwX&@G4=5d7%n4O?h-Y6ouG)fdo%8<U2@^M*?Qjo@vELC?qii
z36z{3>RgbjL8&1~=|B~Cpb<zks4u9rSpezOPfSR&Grd7<YQOGJ^qK$3<DCB$aFXk9
zv(ELLIf7~_B*>ODFiT6>)cMgP$@Jg=3W1wIipQEXtx)_m89br}M$n5Sq_<?k3rVZO
zSRzY-WuyT^CrxY6wOdeqr)Hq3iSeW|2&l?x1NnB~8~?fwZdk>^g&)94wIc2GfN@LJ
zg1j2XgSYz-!L%y0NSVSM9>(o=j3JW`RO%bh{^XI4Q`DyRDsG7t9Ln->3?9&fDia0j
zQkrZs7%JJsKCw3Hv#RV$yL<XPg>C{7k@^WJB$){j1d)1<BsBE-Xy#=iiSa`QH>CYW
zNx%nA03wxmHIOLP1Ok)ud2aF)TYU~w%%r7P^;rZ?b663p%uS4*;6WIP_O2Atsg&Z$
zDEAN#8&Kh{G9~n!B3>oadlysmn2o)7$7zazj0=StIC|uX_SxiamH<Q#V4}NjG4ND@
zrjn5)4J1z5q@L9#?zsI3CPvGc@^+#oN=T<xz%(-I!aHdlm(0v~kkVHi9U@uPa1=*}
z2Jq-Z6?AqODozqQCQ-^%`mf&PMT-p$i(za~2gS6SG0jo{CC3_bt&@jVJk!ty2y%s)
zPBjHeONwH}s{#;_{uP*F3nV3cA>qZ3MwBQ(!Ry2vuuT{p7UrEmd~es$aICz4SVME^
zRee@t9Q`J)7`T7Ba=%C)=&;kpRM^qoW#(FPYM_!^3*nJ@i0KJUKrgY1Pt3g*H!f>#
z9~i4D_0$1vrJ7^#z?9#oi=gz}aji!sY7{VPA-UEa5vU@8u09LL2WIf_L&snkGZ-p8
zgluLxOkRL#I66MEfbs%u85Dsi;c5>*BaJW!QIY#__r06&@>dWc%s^PvbAGgVMGtwR
z$~PU8X-X{2ay~sGkn1#5y@m`hfkDl!Y^L9oRV|*8CucaS7}#ncU0|q{A~ms0-(*6y
zNOZhId=9PRr_&Rtiab$9447$MhYER!k;WW`_e_K%!&P^B;b7}rc+YR@GsvDx;3(N|
zW3c@97pHj31KGwIn4B1|wiH{;_RcP|(AI{Wbl?%4vJvRv0u;5W7>;~b{8DtEDqptv
z>PtTc6}~9*Qo{z8yn7NIstpOr%*Wewn}!n9=;`{p!>uMAWOD|j<>N;`dPLPZj+gIH
ztpv+#g=ytrn2vf$vT=0GBGLm7w81iAnmJU$eHfiM7srlwpuMdF<q`oav3ME`$q_1c
zV#F{u5a5hH6ZIMe?MW8Z9E!!8QkP^pMqHw3o&W*~2l8DU3$vk$nbZrA1yiH#D2YhQ
z6&$IQg-pg!%tc?;F;$tz<iJcgJHHUtt94Tbq2onU&T#F^zg>-X|M2OyAAW*#T!W_`
z9eQy8+@G)OPXEk5cjqqOQJD*{FgNeowjo-IMYCA!<oUK1aFzmz={+yt6uhc)6}QY2
zwOKRPQU6b3A3aP-S7>y*At4;=VMqER(YH!^9%D)k3LvIwe3kMY7Vf#{an#EV)Wsf@
zq5<U6D;4?OG_nD`B0}9XicS|G)oiBZ6VmG%;5-GBXV4HMC<VK*dv_mR^x_uSDGn0<
zH`8dXK#eE&lWdq_Y*=Drplney^GV_uMY2jp)FyiQq{^Py0g7FGpsmNm(7_;fb)<Yy
zOnRlFux*P(e;h_AT(5-D$r&*<GmT1VJ`6%ZvARQ@VmBPYyubH*vyFRys}>#E^An@x
z=>caEJf0jpHdO!o#nX-3&n`L_{&q+9lGhk=EvCnOOpFZIQ%(xS&K|R^t&6u53y4Cl
zEs?Lbp;Nu+W(vJz*RJ^AF<|0-qg0HfLAJ=}i6?c%Q^}Q^il<Ew_oZW*h2ukGICA(n
zEVF{q>b<b-78pDS(gfR928L;arl2c}Lllc-{Fd?t78o-XfJ)J0n4CNd11GxB)!vQT
zc$hTF6{vMHSNEi-MN*mPyfPahRj|~KdHVQb{aB({rO&9;s>-b{ng6EG1?lC<-Pvg#
zGYZmh92<5@Ac*RiDve=oY(~_oWz;KG1c7H-hRqpsZ8sc3*+2OGl6U9})!^vuA!cXr
z46dg=t%8hoLmqu>v~l#c6OG&6p104qsUvmX`&*r}Rz_|Y#)k&Q*yvE0$!2(KTPNDv
zy3pR%qGrj^5P^`$+sWPvO9mUMAe+byF)v-wEaMBhn1|{4HOZ67-$$WDCd<)?T<m(_
z5k(apE#Ix=nwF8(DhgApDGW})(0mG2;Uz1e`ek|y7csd^GXvM3K~)^U;ls<&aY?(X
zZij&$&!hw6#gtlcivotJ;Rq|wv{c}(6fRW!jDuwTYcW`~P^vkQj4~^VRj9R+Y2nBg
z(rA=@G@^M-PEDXvokz7=f$tI`BLt!WiwC?e2Hi^I*uU1pfiKs>frmo5P<rAuJ7tud
ziz5>0`v^0$3;vydyWrpZcTTl`L&4tqi!Jt9H@9ZbF4W6zSS?jBHaw(GL`!Q2+KWAC
zX)UNYg~ogYJ}DWM-zKJe68|VGqbBae4bfzq`lZLAwdUIVQ=1`QG;r^|I}v(5%HiWE
zi$OT4qSk3O-Bd=;5R6k~1;g0)s4eT6NriqG+=gM;SO_0OW_A-s$Ggzp(u>B7j&+jY
zw#fvLx`#GC9AU-QL{q$Y(UxwBnAEE%`=jS+rXa;L#6P0f@#<86c?cr|BidAjE*PWX
zQ#JU}I07*zR_9vHiQ4dq<CX86847BnE?rAYvCkX_`5DxXFFnX0a^=7Q*Bkh)Des5B
zS8QDK`J%J&|1cx#=d4v`eZCE~`6|XvoIoa@MLUVsT07C&(xNPn-vAFhvPAkNRevV2
zC~=nGTxw#czN4uyPba&z!@|*H0~j41f?<_0QF{QUom0gegJ;2wjLMie1;+6hTyl(R
z3ZYC!%c)I11c?9%K&FvH-5W<eJc7Yv-Dtm{OIaPCrcA_Kq9j(KScKx7@~nhgkEm&;
zD#*(H>Y;=hU@=8R&FrDdFJ)6SajPsbzaUU82~gjvUSB}9HVkG?A&6@5Wl6<}89R%v
zY$sm7?HvA%{R>n3N(pG59k4u$Wc4Qlh`zdBh{-!vx4+{Trs@OXWPPV;G6Na23mK~y
zjdBNu%4H1m0c5gi6gxW6R_sQ;qoB&k9yJOHL}b2IKPr~6P?)JIvWfgsr>gl@3#D2a
zyB~c7mc=nrxl8S!M>QG4$O_Y-6g<lbI0myQ<>SmC&DIn9M==sraIeY7B+YTK5I&0R
z?0Sq&jH9b<IlLL7VkKrInOmrWcH!0;ugr&N={8lMn|M`aRTP0u59;<Q?kh<}m-Ss;
z{nmpMscC0m!Fvd^{yv%}u3T-#YDe10ppa@s(MXB@?g)KTSzv&gGKA1)Pu=hw2=bCe
zSJdPwGmm^~B_fuB7gbOVMzK(P02VWlv-*_CtX^(GwX}ed!9iqlS+uryqOGk9x%L*i
z$UIUTvC>RH6%KGU+eTR&UB%557&0vp?)%;@H9KS8-Hn<Yg>4a7Y*<DfrkUpy>>6f<
zT#=4646SKW7EXuX@x`Y-VJPiOLBIonuI^2s5+1_w!&ww}biuYvD)Z|gN%I?Z91}$l
z0Yhm@qP<_oPi9JQEkM&L8nb{~mMU3@h(k<(OZZ5%U%K8Torb@uEHdMCAnUZMnvG>x
zNLyKCQfc&9X>8olfz%+qYEwt@eAsqKla47yP}vK!V3QWySO*~*@S_qIf*H(u$6#?A
zIja{LdpYXmB5LI_MotVMop#XP)rn$z7xMWwqzzMT|4b9SlDbas29Ex99AEvrotT>+
z0XM6dad*N>Q3hoSa#4ms!EhD^Ps8MCLSE8sZ5s7Onuo~+BXuQNsuU!Rtsu>|mBm81
z3wEgs$BrGumW^j)W<u9~bcC*XMUInF48E!Hd2CFjP@18k2tsjqh!LnN>apwP#BPiO
z|M+z2G(MgNZGz&mv<l=+Zox4fWbG_+RvMd@*;sZ~4(zLH2lVIPMrXE}fh|I$!Up`1
zHU=j?a0CmK9%uFNfvAE~G=urdpxSRHZ!bf}T7gEj6~pAt28NJM6XULkVp|7t`Bt<R
zQ|Mc3z)JbJ^((t^{P;oGR*0d}55a5-YDu)8CO4(QVq^qY-)F!$jZx8>^rYcRF^=xD
zDGdV*W<$`h1Lo1zd8#1jh100ZBN!e?!?0|u?BA?g21#?(FJrDYj_HX}6e5YSqgP^K
zLNP`Z8DHtKRB2mv!*zwHNpy}+nBIs-52>_hud9Me$7$*p0mm^?=r3e&Mn8>l2@nO8
zqdw1oL-~rjTg)7sln>L)s!=9^Fu<6HNDvjuAa?}YY(-@G2t^sCXcqJS2yB+-X`@wS
z*>d=9C#HrQ7#kdgl}@Q1lW`x%!b}Yfe+(%r#CZ80gocNdS<t)KsSJwTR0}A`rGW;P
zl~%w}jCh(Qtf-qhR%y=ap&AaO_{IU}z8WS#N=zr!fqC~4H5B0Z(Fk)hQ)n%=qT$w2
zt5r~~%^?h{sMkwa+tCFPsIf>YU?$czi9eFDCC%Bax~3WTe3N!dOpCQLNSQg<hOPDs
z%-b2PXvtu6(Sk*t^O8$V&nNBc`8)s)4Vzb!qiI-?K_)y6)6O6WU3g&yL0G5FI+WEB
zWQo*-PLi?|)s9o4D2sA9k5YY1W$78S4H=^cqTYef&8j+v78;c>UU>k4NuX)b7K3L5
zfrV-|oNG&C@QiwWWm#xAdpwLQsjoC|eMUNUyZKOoGLeNi?dOoely@)MC@r3z#MBhY
zAtFdlGr^{5*BZ<P$I)KjsN)yC6@~8m#zGuju2g+C-E2zc-y|+fB!qODPLV;{PNV2#
z(U(u7JEP@0KJ~ro23${6)R8~S(%<LU;)u{9?GXi=QM{Rgx}i*D(`g9l!}sg(!zv=-
zf^!c-Qkk6yEgmf10@E%)N&-<0bwR=PelVK2B`pO^n(h$DI!vp8l#x^247$)%uhC;u
z3fwR<f@(6BNn_TDHm3&SYR!eZu!`28IfbgDulpDDI-IAKwNW?|v@vWRM%u=l_b_N<
zMVcldq5zSsL6WkMQhgpGMbZdeF3|50w?`Pw-%(lN5}Y!kW7rg3sp(wwgb@R$E!&2!
zTmgC8RPq-pno>+2NmB^dq}=uS7vrc_fpQ6CNetCnYAM>P0XZ>VMNlVm?7&I2z>i$`
zK^0+CM-*u*L?hYA5)r^C6S8PZwzBp#C%K{K%h13jhjqric2eP(Dl0OL95;BYF8c8-
zEF;ZLnwvvzDw#X1YB|L0jm3DnA)xzJG_t}Voi+u?iiiW<vGuifHPxYxgGTVvjc$M}
zo32I&oWo9K)OZy#JDR2x?_bUpJ28GA0+3MS>-O&1gYK?gtXkPYWOGh8QO<5fHXEtU
z-6)9G>UClXXrfk7Gl;|$@6YhOa#fsW8|%0srkP%H#d37?<WO3u;rNj`96h{%`Pn)+
z%OIQ1Dv*#X3qk^sr%XS|*R&<lE{y_N4r)Y_g$dOKR2N7o`6%$!7Ki4_aFv;4IK^3%
zjw_9Y+IWGiO-u}nA|iC^+&tk6k<eGgIVl**tI<{h^fz<^Xx@>EgH$A^3NTI3(eD!&
zw5}%s4LwH^OaqxLsUIkwlgQ^&*t2^NZvXMe(OOu8%^R-3wllV&TAGE|h~QAL6EAgZ
z2u<MfLJoJ9p;D&-{?EItN~%4R6ib3emN_O;X&d!ggp`xU+2=0D<}<r7JhXr#2j?+0
z(SYztm6(Q;${`GW_@S%Zn0}D;@nWz93NT6PN)!&AQd8s7QZWsYwe&+}RqCQ^reZvs
zMjhf}pD774SRx>oRL>#TN2D6vPEdEf8t6zKA_kN$;lx`MS*qS*5Z@;Wf|*1*V`F%5
z0*^fUJ)Cvs6<D!iHM+ZjBL~NE?*m^)Hr<XetYOdIZ{x&~N73239K~E)e29rXCF+Fc
zJbOf*uce4C+Q9QL9ao=NQA+9DlZPjZZ&T$|C;%DUz}j_PSi7zRvokduJ~)Gcqh&N|
zoQieGq)Ap6Aq+i)k&7@Q7v<_WNNFyUaaxOctznR>a&+Cs%u?|$t^_y5HObNG@wxF%
zQ{-kMsrCw{sptwkoYN>-y{W5E7taC{7I^dh6SAvrj8djXyV_C3TG1^GiCn?P;NdC!
z;EvCuR5^l)seM?x;xer0-+)IRzfA!$Wpyil4b^M%P7%3ui*5o_DwdGXsUb^h5XGxD
zFgr*4JCM5kS)HZy+yh55ER&hWi>W6qizaNvL8D8OM+vmF=5f)bd7QP~#fiar967vz
zx#<RkFko9br0gsr+BhU4Gw<t+jAEdstI+RZkj0@oj^V(vTENLo(Fj}>lP+P+#u#ey
zW8(iQpeu5Zl8h;HVo2)PQ%FJ+RB79RP`gHoYgE05#J5b<q&Rcc;DDAQy><!%hbQra
zAAJ@LZw7_j3N>N%*wEb=7}=%D1DRBZ-uRvw$fjCQ$Wr_iZ{`*^()D;>4IDLJC$dnf
zr_k_&I30g>CviR3t}1C8leunY5>$SF^wDFgY`<z%2U=RQ>bHGARNL=ZmW?f2mtn)E
zPE1c$apcH6Mh2^B)M?nY1>3e^Dz+biQVrFEpu0crBGSdAEQNr>>7nX2@ffX`Hj%ij
zL>(G8s^VRIbqqu9kK7d@Ms4{hDbphNm{!3$Sry_Na;7$s)YCwz*qO><Xz&E~JT#2j
zyoVn@_*E73XPqAP9+qLiux<4kCbyM!Oc@SrGYgxPcuE)%t07|6BUvv+&X-&f)&0;y
zxo*=WujgM@Me<$}7D<{1l8ii2B=iUqQ)L8Ri1G1xw0CB)ysrc89eFs8r5OFSYM^Am
zUEQtd?JuBGbun;k0f!G(P%CRnrMkeJYAp$8IllNRYck?^M}J-9H7_B~H#d}x`OWc2
z1Z{2Nw!HpbwFx2&M<l>XC>_mqh5EoG-%Y84r|&iJ?eF}pO0_9aPum^3|3&c+fsSdw
z*e2DQXo#dKXfUPT<4egtXe$ggWHK2YNP2V%%n3MNV2K5n`hU;Q;5Z~MFAUOFCYmCW
ztlHSNeFcsknLxSRz~~4C#wE12X0WWc9X&m5Dww1=$a4d=@mI=paOT;)IQzT+Km6_l
zh6k#!Y(vE(iT_FVfzUvSxBH2|Us~C35~<>5v~Hd*QKQC64K=?!wouAzFugs|;y&w5
zEtzs>#0oYz#a50w7S*RCuuxp2tP8o$v<lWKmQmYTH8-dwcf@FOSuIf1<Bb*3o#H0a
zCg`kD&p!4d8&%&#D5<FNe5>Qg&{KjJMgvO{(F;QuM(A7Cj%D2ijE&7>WMmHWb9Kxu
zG%&v~iowBYbafZdx2%Yk)=YCdBEJ$Lle2L4_98}x>iVK4mO;55of*YGk#^unSb}=a
zMYH0jk59=b6AZ<4hNc!HCP2q?HJ%VZFePP<$ysralEj$wJCw~uhO0Qj6f9FaMQ3@G
z*%2>DxjwxOK=bXIl|YTcxDlF=&B#SjnOScVqPK<iB}a|)W+Hn2WmS?02I}TbM#<~5
zMHh@l&eKU<y|N2EJw+@mR53m=kLjrjuhl$p{MeMTME%Q)YN(>R#s<+gNhZM61|v;M
zyWR|1(@x3E2vu>3k3tVUP!lzla#U$0adHwbJxR<HJ0$(D1Sm*QrGXYlO!3TFa+5Ua
zw5Wn--SZ-gM=cC}9%ACglH@M=MrV9UP^>JFo(QftevLmL@&1WU62U+tB&jelo1eS&
z++<b4s|HjN*M%0%u#2zVW4njc)616=_a=*;?pAblwxU$6VT@eYWC^uefMds}(BE4`
zzK~XyicY$!DaL93qE-uw-_fuhnvk(5%A%95_mNxVQ8cr><SCW?Y09$(M$%|%;)x|u
zR2&N>%7jHmk1l&s+?9HQ<pNjWrjb#4mmCF%BtDAcFU7jhgfbG!>kX2X^rx8$sz!-Y
zS(u_hyA3L;{qqJmF&A0-Rg$lQ_R~>XMUv<1opL897SM2gOiq;1(V55c<wbOM7SLA6
ziu{HgU$drDj8BwMtGmc#X_Jsxq}TK<vCU2{pqg2&1$l}sNCTddpjGb_tdEKWarBhF
z6!A0&O{hw&O!GfWo1aZqCR_Run}tJlt()Lk%7k2usRUCZm!`{JjQjLMIYjE4(XYgE
znr3BDeMUpj&N1{Nf#f_2shS==pDa!yp7X2J^;eoQbyMoP4h4;8p52clhbGZz1Q?%K
zz~od3tt}b!^|zAi5=4kvwX#dqE>z=hiD}SOPbIX9FFFy-mjG(Xg>FvEP$!<s*o(6*
zwBUGgMon`qvO)DfRgkTOfJz#pU2YO6$Hc4{P|eNmn=n+tE|t!k#p&ctl#npi{v^&%
zTOu88D=;T=>iD>6Q+qmsNO1T82_K1M`<&JPo*P#cp;7X~5^YdPVpy&RyU+lE2)#WW
z=;|zBVzP|k;Tg=&)i5(t!Q5O0g9Ecz*4u*K-gabjl!cfGX-_9C7VMG}-xOviC|K%H
z;$Sm5>9LMR&*vcnpysFOmq;#Zy!+guG9iv(2pCd55lb=SVMsI)RA+WeE_Cvj@$cwO
z(ifj^USzdpwNkFC*lZCzdOPcQ=sJy4qJ0->A}cvOO;HsF>OO5ELYq%Nck4N-9M={q
z?j-Vg6(u6@BbwKuMy+`s)oHk@-}EkP#q@LuqoebfnXaH*X`ph5M)A*~vn!7k{q1OL
z%_+fsOxV+RcC#tj>}_acK^xlZy&3cngG7Lvs7JLWQa@WVQ9@Jok}c|*0gQgooFu0I
zG6|3396zCoXm_QLXHmwZ!<i)MP6jZ<$E=Pkmh~-8=F&bdmIucw(b$zLL@D<wq>Y+i
zA*&t(=ee;tPkZ0-|G!nQF4Rw)U{t<k5WXMa#EE%iavT=TAEOGWAE;hYPj@@cKYtx|
zT)Y;mR(HZl+h{a=44s$-?JoS-o)gX1MZ(luTuCas<n$%!?$Q7?21l$Ujwz#yvSB@3
zQ4^}-K`k`sQkN2zPS(H@a3%GicmvkNMkTtbrPk{S$3<UN92N(|dUnBLpdPy`n(P%Z
z!D(_?6i@D;jqf?jm?d`>5o%8o-~ChrCy5$`m~$Wfw=k#(Ll~i92t5Ai1n#}_1l)#)
zOvY5AdAj%gFi;ZVd@hHx&RmI0E?tjJo0p-`LPRQHXm}Q$>%$<ex0=)tyCO9WV#&m+
zIL?S;N_Fm^5U(`T;5fsJfs$y_ljC0+w<LcrmwY~QKZy%U(&t66EX~xCQ777(#d`B*
zwR*97r1YtAgLN_4PYQ$TH59j*T%`@mvCIW`g2pM)wiVAmvU(}p_35e7?q6?f*#?hh
zO-g~ikBsB^kr}L5(}oS3JJ8irh^-HG!6Ov|Q5k;y+CHpW(SfPi66&=;ZSL9>zX|g4
zda_A!Nt0m&O@F4vG{m`6qhI5x-p%NRVjMjkD+yeeXhoM;Bn6O!{wXz7RP84I#W){Q
zzn6eZr)!IxQEi+STO%q1R00XkljBgwModJS7`fE4=@C4t4n+f|db*3kDF}OfVei9w
z6Y9lt@cfX+C<@lp@e_03y2rNqE@qs$l1H|kqVe+~4(y%8(Zf^dTTTG#L~mb<?o}xO
z5$jkp`ucmj)N4@>i&i`Vf-)5~YevNsiteeetnLyJ3p5#{8waYoo7udOe33Sq=<t$g
zsA-LokHY>_#t0gEkmO~Ht}~8%lDRiYY@#jT;xruX{%E6nRhd><S6t*$G!7-Ni({Uo
z^+CUrwp+1vdzZg|*MK?a@A=n7>;Aj}4lSK0%y{2>WoB;8L|^fGc<`teK~=J*PI}<@
zECvVX(B759h7Fxqy{4%4@1`s~2t&AT5DV~hR7x!fU5n9GGNm}tb|LQP=&}BK_RQh{
z%f(|_%%XJcnhZ5aih@eSqUF6YD3Z`tHo>WWB3P{bj%z_GgHlcPW(_G>dZf`}0Iq=|
zq!CXui>I(BRUSRfBF^M=hGnn<iiIBRd!)i2+5dg+vV(vBoaN!qJ*|Q&pEHxA)qlD;
zWfksgYq`jGqk70CH<?gEBbb(<LeZJ&DyFAuczo|9R<9~z-P$%3+jHub{D62kdc0Y(
z!H7D=)V?4fC0-#3e5vXhHzc)FiG$;2eI#jVCEi4jBWXsi&Fo0eGH%uaL_B;+{WH#x
z^yE<elzz7-OlQ<yYcZH!O#3Ob(&IXs*<vicU@;9vw^E35nj$(IPK+OR8@1WoXziPy
z3gyi7b7^g!(-<cKkB@=-kIjF4TYotBP*>}<jvocp5Uy<*4p%#c8B`e59qmTV!{d9#
zap>R_x_b&(yRIF*%kpqi#KqBbcAk(~(H!N7u6r`QBEIPKJjER<If^^oF?f<Hv}XTl
z|3_+urhTEh%o9Gv5{s}T5^n~!i9ge+c@j(MZH?l3j|S-zUsV_SVrJrEY_4QGdOtp5
z00w9f2Rn3q9z~g{>i5g#@PYT?BrJAv-jagCLTj7(;(uPze$(}-%<`}ixjv&&m})yZ
zvOJnQqc;?x?TU0Lns0HiyuSr)#S{+gFN<n5BwB^KK#Ozrw3|{K9O@YvYD#kRHIvDx
zBs5^m;Dv5WjX)bcz5tK5uddFCNb&2I<Vnr2=n2uuVvkafV2Sm_Nzt$Q3eAkJ*;{Rn
z-B<$5W*dV@7&;OoLRcgM#d3^fAdCnui=x8x!d=yA_m<58CP$uYYm;2XldzhlFP7#T
zU(%C(=|8pSE-y+u=lY^9xM|tMh|>Tf>q9kXebI%`Akv+2Q&2TIp;0vZSGxYv<lrc8
z#ECp*s2wEKYtqG`z*%s#_1kLusF5S{@ahwA>+>|*Qw0~QCz@nNO#rbcfJv{V7cNfS
z)KoE5hfz(+<oB9H`K5mm*O=5GOG$)h0u0e&mBuVI1q)dubG|!;x!RBKm=Evzxezos
z>A43@@(EAUTKvEanRMPb``5d3*L|=xzXOqBx&a!*jx!B2rFg<v3II+2j0si5Sze-}
zjf0hBqL#`=2tX>aCF^6-RDc+e1}MHNt}s=VmVo1u#i`HJ5ZKriElyls%v{i{3O^Yx
zsz$R|-fcE0Rl6dV$0&M<Dh#W^;<`Yr=DCq&2@@3uv0!~7m+~;QeQydSZ|^|a-}M$(
z9=)C9cqa=q&Chyr*W!ogXzOUP&i}oh!b{$n&z=FFiFyd1n?}YYDyFhPF%TrT1gQa%
zi4)E3jAA}Z(v#A=(`f3b8uCSeF-<iShhB%ALUFmN2x6nh=i$~S&>-ND>_){m8aU0g
zdNGB@;_)vA(9L?yVyQ8<K1(POnxqx)#6a7~1c)Lc+j|tBg(fWGQfETH0+;q44-Wim
zC3yTVeL4CF&53{Vd3%8Zht{GQr)8jXMKN{hUw7xPc||6(2_6gU5syp?poyOw@A^Uf
z-=-x|aX}2Cgg2}Q3XoeOaa^LMBH$P?a7?8t=vrf_Et^M<&ZAMA6mDZ)>9ur2TaOl1
zX?3%*EaJ9AJW>Kn-B(h_Np1!r?JdeW^h;<mdnm}Nk+4wEe)q71ok8d$3`SA*4?kK7
z_Wgw`j(;aYx%|X)b@BkS^e9fDwG=?4EMK;z-MRc@JuNS}Hl0}okLVdp*tVJGG_IuS
zz7k6k$23XVSl4p2wRr+?=zG)PYH%b>bgwtiXh@74nM0#CAv|{>)@x~MxB^RJOyVKc
zP}|gKZ}G%1XGv2+bF`XizNBGGO3JMGGa;8Ow4~)2f|<TQg{pUKxEk#HY%Mzcr4ZAD
zi(R%SpPQ4vPBGv-^<8CQ`L?dii$C94xcXen>4PVOsx+i+n^{iNLuqecZDGiYXt$-J
z3KAqJy^|)ZYY@e8l4)|9!9(_K*(MX!a)i;NbEwy*gy+ud?SYfo=}D{;*KuUrp<3J~
zM?D$uX`|g(Q=vusACb~j5@#j~xnQBiQZ|<~E@%M_ZwO^?|HrG*-p~1R{E(iov-CW~
zuYZcIQxrH)1t6L;vHYU0^i`iIw!CP&o$5z`ph_A&+aOJN8emqUP;Umm%?E+TFu6fN
zHT8fDQX7z<&P4xK0}Hbe#*WRSQJ)ZAeV%r=id~g11|~|;q;rnN0-^GadfIIAydFYH
zSrP5^!k8JFlJpE|2T=`GcK~Jg@vqgw1E2Bb#DfCW+D`*meu{weQ~=`KVQVh#NMHGh
z_WTvw$O8E^?}9VavT_ti$4osH_mD_V1IILZ^Luh#B!)AH6KrDb4g+I@0mhHcq0yKU
zzKU_^qH9fh(=9cXO;SClK@@LTqOu~IluCa`TXM+Ils0T;XIK=%4aQM%_kF({?EM=z
z8n|7cR{5_#<Eg)%!^-i~SxYk%AzXR%o{{?TbEg}3Ufkha_K{-YiVN-33WTCw4S2(}
zEXO3RxM5gaG4*KCRz-<qTqIi}Q3G14eW7q{vG%)!B^HAw*)B#|9j-TXi>SA%CumTC
zPWn`H4h`6FSRunA-}Zwk%(;gSR)WX>x*>*c4dwLM6F=8d>+;hBnx7(z^W?Sk?qtly
zigVl3SA3#9cli$6S&4|Vy5NG_cE+@=yprf@Q69B4w7!XgWf|J&-I&I8Z?N%&Kb}YE
zxu{hstC~|mEE54&a$@C%C{{@<k5r>pR7F<>xjb~tbcWNWWBxp9-r>oTxBIW^;@Fo$
zIWwGW2Dy0b_^AWR^8`3g>B5-J`p+xa7yMCY?yBq3>2(mMS*KczVcNDDz-VQ_RYB2;
zXXIyb#&vm^BE;QaI|e&#fMzh(>XSkWm(##uHHAwBxRg5UDPa;aq@6cR3UVWwE?Ge>
zI9{(b_WVmVIQ&^3W4q&tf=iC`rynfOBj7xBd|;qsRg1mjgB`gmej)2@f;6+CK;SaN
zG%Y)AT6P8&O})q#V5AI`rzj{Mj#<DQzF$HV)s=-=oW~P}1~Wp($k>K3Z5dV22!^rH
z*z@IDxc_flF}f3K+xex(^!x(L^AI>s4IqwUZ`RoSmiEl$ztfi6ZW?wwb)Z~9Tf-Yv
z$uZ3^q^fOAkBt*Ftcfg)n(igQjL?v#Fq!G7QGD>>`lDE=KlZ(9u=kUm9KBnj@f1Ps
z^A|ABQ{X%`fEY3vhp)J-klOy<7H9jl+00rPMu94~!WUIPlA+oGhWb-XMx5#_Cbu~g
z9zs=XIUy?Efv;4fqyOwiBlpOs%!r=<V0i%m=fA$79ED=qSpBmZbIt2B_KJ%gqc6vd
zY^;YOrG*PWT5!E^ba%}^_U{dG;@iHQJ*@Z7`|n@-g|wdM!1<ppaw=`0(9K!8lY=`F
zVM9o7CPH;us@=bz{0A>=u$*3}*Xeb7onEKc>2-RYUZ>aTb$Xp%r`PF)lezvM?o%{3
T^+Y=-00000NkvXXu0mjf7NCK6

literal 22453
zcmV)GK)%0;P)<h;3K|Lk000e1NJLTq0052v0052%1^@s6=lw7U0038fNkl<Zc-rm#
zd6;GQUEhhnKHu*-=Wcat?W$hYi_~gKEm@YW#WuES888kQgNbQFfQhpV84|XcUt)$#
zl98Q27#^Nv<_Ys;e!n4v0kVLV#3X>h#>Q%IfNjZITT82@-nXi*{ch)+@Avcj<9qI{
zTh&$7Rox}op2zo5Nu{b=_uPBV`+U~-=ly|iJ-+q$*5g}`*Xtp#&oPb~xKbQzLgBD}
z>(p=M<G36-a#$vg9oI(zc+>;>O$x{(5gfJOx~N~D$I+ulZE^nPo5A83I4ba{>;7Qp
z&ikvWCU+a-?@{btRliR}_M@VpA^>97cw46Uj}$+V<%dErD2Q41b6NG{*=t^3kiMsw
zzE@cOdKgw5UzR;T{8+lLxcv20Fv2x|*L$Xb_Fmnrc#p+rF|zFEeeYBSBVPO|E757A
z@{AWfTVEJ??(vHsZFZk^<j5n@v154nsQ*R-&N9Gk-~P4<Z~c2c@_nEWh{#^VE}bmx
zzi@Kx#q6EbrQa|8T*Kj1!mmV@UC^Zq+y|c(!0JC*ab<dc-T(L6eG9$U>wmAZ#%nAG
z;SxAy?a#RKXZ^2#&F5SGobKlnF{pY}9l#mj&%~LJJINk<`Q=}mFYJ(ok9iRN1^~`c
z+Xc+X_6P0}Ykp3Y_lb$N11KI81@(d`z0)CmCtX&(pSqUh+Pi)Ale+2!kX5X}MlNXa
zds${(Rz8>405r>iywW1BJO(0&q5<Sa03#BKF)^s(H9u#J{oOS6zxB#1|Ki!;#y(~r
zee{Fw>jj+dr}bmI9=OA+{Lg~?m@zg{??Ke{nGGW=KfEkA%gauPta4Xh_fA{^4q0jX
z`;RSa0AV%I$SQ7d`304At=Z;5v-~}-evBSyR@^wnD|%JD7>r14j49z=nhN}Tr};lQ
zapHeJ504o5h~B96k(;$LqdV{a8L<CMj2*(~06AhTeW#u^K_e^vEw2%1R{rf~L9?1`
zS}mU1;4y9(G|SJ?>Y(XAh5)LlI1!1gE#tkvqWE8Y@x@>HwUyWMH3rU+2#)33w%xze
zNAjCu?R(UF1kJ%%L}aaaW22y1?S!lkn*NLO%?O&+{(f!HT>H0cfo9olrK;kLv5~PQ
zyiY#~?Z5fL3;)MO_?U&wxh``fpc&o%#)o`t9v5TZqu%8L3MTr-1C99>XqGZG5hIb}
z)wy<VBzcc$?eRm0{{DmTL3iZHBhhOFoB}kv-t@Py@ux-Dsp@h;qTp=TzM$8}H2p!|
zYYCdwV;b2q(3mX*4eP`-Hwzl+J55FeiJWWaV$4o!DxbXj&@ViA?AS;1&45QX1)3fA
ze@Kk|e^iwsOERoTsb#g3Cvx3D_~t+(%OaiYfrc#u%?6Kg!<ME$X1h7iT$7E30+KT(
zwu;O+pT6g%m;Se}Y&7QCfW>*lblnri{A*S9>w{*6D_Q}XYw^1J3AuhCEGtebYrHnA
z)?n7po>l|R4IX37KzKDvv)(Z_9n-7;&9$#BVyxH9i!c(|(kBn!{__t7&^%&p*5VjI
zCnoNh$Zh#)#7v-mgO=vnlzVmaz4h7C=Ib=qw=~zpWH(W#5iEjs>*m+BR&qn2F>70z
z{`V9DR2P|&_1;}EQFiaM&;IfictqB#G+zf<M+MN#B)=nKCs3b%eL*8%7tqL-fu{TZ
zSAxcDA!uY%pb2NuSm)B*nq<Of@$Ue7l)L2yT~+XP!`t8dQ^qFm?hAy!j-XjTdwQ)v
z!xn-@fEdd}S|;+cCNOUtG_ons$dcQNa^KEvRC)K|L;vefJ<12&Q9foj37kg^JnF~C
z-*nIz`^)N`7sPHX5H{;)Fs}({c#T10wg5DOEqZGYZXe*^|HhB9w^aUy08QWTt@_lP
zDEj5YhaWlkC`bJxYs5QdEq(`}d1U{In5ZtOzkbTSTElYrNxyl}$eJnlR)R*<hNM*l
z)7PB6*@mSDyoYZ)413>oi8tOpTs*~YA!x4ct;q&J6MkmItMkT`>p1x*AbNZamu1$n
zHe);Qzf&+jjL&^h5xzmtu!W#mC*|G(&;(E#Lf24H6?`Z?V8j$3@y0+S#d{n~;l6u3
zB98m+9l__}Sh8iHS?A`xUaLYvrsZ7Q8yo%bJ@-6v=c9bkKZ2SK04G=*FY*tJu_Y9L
zZAEyklv}RtX3NcFPwS`LTUim7f=1zUN3}h{-t<k}8^4L$%ubS42}RMOe75o4(~3Hc
z!o7p=hKFjTX_<%KR$-gk-Z_#jO}SSzTQ>lj?i*26Z%wI0ZvFwF$9Yt)myQdd13T^;
zFA*O{%vfliirh>aVQXWWt?xYr&<Js-&Yjio=itGI*?n7;cMZZD_MhO1_Hlmu_rA(!
zPoJez3ek^lqPQo;Y4TabFMfN<5C5w}<druPH7EJ`qtEeQPt9XQP+cN*-FV8q;yTD$
zT%J`y(<=>%SX8+hmE`b~PyVCHK%!deq}yvN#HamGZQl<QMSl(TKCqx}uJ<J0z`ds~
zXp-hO9vu5Q_TT>&IzMQL-><X}Dtjd7_9Gp>@5gUv=d9(KC(p4M1&*L@z&&-}tE%Ch
ziQ(t|vBlnYAI{x^lrM4HNQKY+*D2;Amc=7CmU6ES8rc+RmaI+`RR>(2K7VEMvris5
zLUj7{F~0_I9uhdN<@&CVh_QEoS1@KHDfc&H@2Lx#Qgb^GjQ;~h?z@HNU(4C{?S{62
z#i~-D7-ZY!7SSHK=e_sw;6Q~J{^Aub(WQj00UEPpJyZ>EFO~S{FBrzYYXon;17mmN
z^H&+Wv(DjK#PeUA<cdmQ^W8-Dv>IsG6li*XuVNxm&E?AEXMgwf=?Q`3x&{&VxE~)s
zGJtiz1TsV~m0Bz1el2@X<~8j-i5gUda%+P7$NxTqhj)<unCCmcJz}B;&s<X60*p_<
z?%FVBdVy##V&eWc^X+?UyzseaIhUK@V%GS4nmG;;^Px9cKKzdoCcbwY-o71U??xCz
zxPr^hvFD*tzUzSzw$J6XFLjt*@MN*+QC>F(8nYFk>HVY1z_y8Z{`%zPzwQKg_0g3_
zenbE?PHz{HouImOmHyw=dlD5?6x$l&zKNe@=<p8oM;+huPRlz6;LDelMyhlKzB=WZ
z9*dy9k8G-i^Eun!_ildeSAUG}7?5C-rSBL9j4JQmQ|4d(ogMt<zun7E{r2q)e#c!n
z^KBS=FHjBd#@voE74pV;#@?FqxBt~B|K>kz=Rf}HFz>$wyw|0?WCOjY4fnU!1kJJ=
zQ&gQA6Yq?)d^^A+k1Rd0-{M#}?MnkYzt7nC2c*}NGT-FArxkQh4WGj_Yuq>T(@flT
z8~mu}J0FgC_aOZ7qVnad5aojR;8j>exo<~8zL*f}6dI3EKDeJF`^!B4*i)R&;&391
z&lhFF&pce?eLq{Kvi&Mq+C<w9lXMW%2ya3=sDBE{Uq$9l!>O0>r_NJ8KTR?xJo8e_
zlUFISxYc4B*;H|FW1#7;iy2h$)|Ra&|LT>=&pZLxZk)3U|HAAke80Z-pt*kbw3QX%
zU}*$tCEPpmlk7ZnnAZDq-gP8^=2Qk>m{nW`c@D7;j{2nq__JBZ`z8iyTy@lwvt-F0
z2H*2;ezn!$r~c6&@PsS%-hGxB{`n{7`NCJG_};fV-tumPJ#dzMzKm?!2bD=w6KFn*
zzwk2lYy*3$!dJe$jX!!e;<Fb#mlBVSSN7&^tRlQw(DVh{0R!IeS&5Q9;7n*yXx|&0
z_ENd)>(hJUH35ybBkrpHckJAMAL(CpJoN5}ch{lm;ExuSsTSn9qM4u$)In_E^H*VK
z+40cm2=iCk3=W<kEAMCY{qN_WHyZrhFCODXjgZ2^T~^`ID`o!p<M7VUb@<629p=vW
zI`T`WFgrkOguikcd$L9Q`EmY_kJtE5=M9aD!PKH_YGJP(X!--`Yf5{eMu6E1FfnoW
zYQgbQfn!=7*z*s>*uB9>i}}XsJ%RdA!QFftA)FlTc=p>5u<yY4pno;z@cS%3Fb=VY
zKkdL5=Ahkzyd(G&)CKUk;^ogM>>W@hN`ov;HK|6Y$Ro?xeTTSP=Q#F-3pB0iy#pgc
zM}(I<F<<*~%H6dAcD&KzTeIMs*jKNTJvYq%`tOGMkFyq6TBX4Fbpwqch*}#Pk8fO=
z{Pb@gKYm!?n66qm7BT7S4a=`j@2Lxv`$oq3AK&pd;(Ync(Z(8<g659h^4;9F?+5YU
z<GJPg4DT5S<Kc6e@|jsrqphSVxD31lmqXftP6HNNFgXXmI|b7vPifm;<}ZyB&7L4n
zFY?Bpc`N_q$M2!u&e7r=c@2X>k-$r)%s=~$29wVWW65yS3ve;!xBsNhf1QUY0;7HJ
zcT0LtHv*dFb*S)`G~GbUL1q1($LrjCDxUJzLxX(ypTC8J<$8F%-rrxx(qK@ZF_yoT
z+jo5k`3}d9qsn*g43_3|Dg4olGSk$;+62IOC-@vRhrBJc8?e|`PS3$_PAjdd!;Kwa
z@%%2L$*cJJMZV{MelvgfJ8ws_yqE$NP{FHUjPSIN`S^cYz?OC(P0!?s?fmYE2$KW{
zr@eEwb-kzSgGN>_Ac`plZUxlHb%C?|!tr(OJxSqW#T)M09i#gedDp!|!4g?PwC_Z(
z0vf>}stk1Q;?C`Vhxl!t!K0r0cL~-ApJ*zdxazsugjUA{7u5kx1<e9zd<HI6vPEbv
zz+zK5KBN5GS%^kFbKCaQIK2mRu|q!H=D+{P5Afsn><zWk;yo!{eu3q&CzXW@Rcu@M
z(<k7pNMTi9v)<F1DfgPk5V?UVhn@hyDh0OJd00+D*MwVK#6#a!Cd(>(=%)^IXP)3(
zZv=hS2}{wyw2PYCxqJL)sNJ7X|Db34EryoD?@cMkrj^+yv|5lg72i@c4PfbhxjeY8
ztPSZLv=<?5!`EiuH|CY<F2kjrx6*uNFXmEA-c&yP^Ka$5cI-ga7c;EVvyv}dg=d~>
zViqer_Oihy0b06l?@4a5_jJANiPf*4niagH>+*57y7y!@-Fq^o@UPzRH{UtJ?!U4N
z%p2JL@DBdvFW$v>506r9Tb%3mwU_g05QS!yJ4b$+fxCto`XNteyW#Aj@`;PeOLNd{
z39S~SO>j-n4#Cp&0jFnmI*>J?Jp+w-q190Sau)vmf@ko6;pN@8(mu5hxlksOn1A*^
z9^u~71m3gcRuvj$;hAS*+E;Gnx#@1u|62E+)=jzBoy9k6P}BRes)q%RX|2BZLn7t?
zs4nq~U;o|{DhzdmpL=kepZL|o=(YzC4xt(|@y1Jh&v$L-;ll}U8Xn`B7uqx=EB?+R
zqG&7P&e~71{f@(I|8dXsZo{;LsT3A+NV5?5x;FUYiwwvEaL7X{P7dM(9H?Iknw<e-
z;H-y5tGw|R%gNa~<1a=SpHr?!yy=!beCA89(zLGd5P}%P`7@3$J_RplS$GkVO@Zdd
z+6ZfbhBZ|&1k{+=cy*^PPk!pRx)@ob0JuWd<8=g$6h!W_M!fsB3I4{9@8zKn?j)~(
z`VJ!J5iXLSI{~u`+*cJAWeoK;+yVt?T*t9L`XJl)J;2Tn=FCi3F3c)v74k&!QUt!4
zLJE=z<cd!fx?sr#@xkKY74bce7c|0oX&a?vl+Pf<#_^7~2wz&<&fA_X6Aesp>-Hgj
z=>va-pZVQS&>6^44S#nw^_)!`5Sdj|ZdvIRgq!X?tx>00S4u@!>Hw`?09>WVal@eD
zhAfSdP(9i~nP2*!?qcN4m(fdK0?DEFI1KK>&re~GU*y$4sq;&JnDb|ivq&`$#}LIi
z#}2-OJ-dH^?cbNt++%okQppCCJO$^$dEcwim@K?JMFtftOyGHH_xs}idwFLNZy`0{
z1rk;MNQ87ux%Xk=*!(bWeX2}lXo0sMxRalIu)!}q{%PW>1kt9hE=lqI$_uK?8kRQ$
z8m?2PS&ii&*Id8VuoG=e$z&@7;k6r<K2)r^AT9pJ-~V&&8OwP49XStw{}9Q+DO_tF
zJMB34**bss<DL^y3#n>x3<32FXZLV$*WYCOcR7;7!ZYU}tthSljqlPOd;mn(9cdoi
zk!S&uJOD~^5HH{~IPNUGYi~doLj33r#8&y_w2+U%#Jk~3b7kK6TuiOh=0o>9%ySoJ
z_-|JqM<OZcP}hQ{dm#sby_JY(TluoAac$7BftY5qO;PES5i}bKj=MhBeBI`rQs9ZK
z!|z;De&#a~AO5E~lTVj1b4~2&nE&(Bo)dNv5d}3xTCOC`aqbxVNk$(Ow%zY}?sSM{
zG!uLav<2Eyw5ezZ=!Af{8wBG5fHYr<cSwO$5m#8IEPzMS@H=e?Iw$0df@#BJGs=sx
za^?q=$0rP@E>$=?UFN4AILbk{2USmRU}Oboj1^RsAAD29KmG7QY?cSY{B<qODlYDt
zm}Zrx=!Qm@WmRXjx&vD^&wqUzmX^SE$s+iJxs+e~zXjVF=E8}XV^>_!e+sH9Dhh4O
z!TR4~<nS>2-syPZ3@j`vWZ;|Nn+gq(mO+}J4K1=LK{G9iec}56A}Op*0iXg%CJ&(L
zeRTqO{2b(s0L0^q@M2YX`mYIRb_lP|<jl4s{?2_rj9rXSv;f0$_v9QL%9{MGpWem3
z2Zi0*>C+J05OZ&xKzQ?@ku_>PYuKQz2F;BP%lX1}b$|b#Pj-0e3uP`$mbs*PsBDHn
z0hc>=$$J>T?F}6GcF(Jq4VR~bMQ{zE39=xt0L+6n1=><r8x2`hrs4Z;aO^{TV|@4$
z7eHh35Eq#a*i5jgU^`$Mp!30+`8Hf=LVZ76_)*~$mXp&tL$#fJ=fpe6(yWMM!sjlD
zaG)0PgSUGA<*$q}`j&T6+Pjy(_x>6-ZR50mK<CDLPn!h|n+cA)FQr@9M!1<Sw-!Nj
zJI?sk-%A-V7Ag7g$`XEGYaL+!{vTrJL!PMxIC&YU5Q>Byg*c28Qhb?Ma8}Vsdu4U;
z1z2(rr%-@}B49QJtxY`G1fnQVE>r{Xv{l@6Ca9zNL})bNfqRu>?}ee?HcWPudw0H@
zFHb+oeA4VqR@Bps|NZaQx#LGIZe$m^AI8Wu@BR6Nu^o>8@1rS?&nH;3oNf5pgJx}s
zf#~`H@fP%+Zju_IDq!GKSLRU_BHPVM1eZE)seU)L+ajiMoIhnyt9Tb0jA9{o;B!Hn
z;2MgV5bUAg;*1H+NW5aa39(EMFonBvOL1b9K-od-rSP267??378eIabw1sG1`7-eS
zn()r|z@K~;N-sDDs$~w;?%@gdMKB2lxM~xA_FrG-XJ5+s-XD7vd+=3cdK!6piUR}t
zIXIm2_<Xr9UcFxLNv=EbaDCA9SZ^Cm$N7ewdxD}?*1hL6G~uGW#GYNZvRF}OE(%!&
zJ{EEpihI(5#93_7@y_rxo65kU(9TsCw30QGK-+L&oCJ4N1jNP_d>&PjijZAY(hEQ;
zv|a>THYB4EZ-;1y$L?0lcBo~Be;32f9Fo0C=LJYx%C^c5{Inw~7a5)v&N9G1{3B0&
zpv~Klo@DA%F~9t~V|;GL(yml6mZcQ_hI&t%1x^3=W^=&#MiXi@MMYT({bOSwH!-`n
zC7hpw#g@ZZiv?<4h;xv(vbfM-dSQW9E2F-18}Z%}#w$hwJ+$kVj04FE@MO|+UB**T
zu)!)wB-jDZ`9Gh;wcA8CB90T1a+$bNA{mJ&O;}3X;Hj$P^KHvd?p$QYJ)TBB%(Lef
zVP?4%utsp@h>t%p%(p*K<)8kZ@>n{C)UKVTxZ&Q@CP5?X=-@=FCR%C`+?KWxZUi*F
zxg=vyuRSZRMf9U8xTwKrpZPf7{g%JOP?V5+Xtk8Z1>x#Uo0)|cnQJ4~V@;XXjALLg
zSP`t((6x4gI1L$7F1<ileDUAHVjF=-LF$IdlNrrfM^cJOJ3`vZNgHjDCeh^>dom&}
zMU?9?w+>|tCmH*OEeGFuk>C53<HSiBF-7+u2~t(S^OqBT{of^gVKLAxC?-fZ*Lz|M
zKqH~`x`HXOZj2+nVYAl@G)tAzP(AJfq)1$Skv%z~rU~QKDm&_Rb`I6qHZ;b?$yvVi
zwf__KZzhSxxjL8A=**Jp6h69ukLGY`o83b{j8^YL#Sx2;cCAboD7`AOLLOos<F%0W
z4(~7$FeR|DAu11&Br&m+sKqTvPf)E4Q%)+N6)XvfhjEk_Uo26-#qhCz`)7RdmDAJ)
zt3A;4IbhDVBmTuRN|e~uv(oF5u(k#?tQcLsE^tiuUw#W4maBlq^pTOeqpyPEi+)a?
zL(Ny&H8jHhkzo$*+|K^(+Zi7or&QWTmJZNpmua+P_KiF4J21^tFMo|sJpCv-*h0#R
zSPcQP7(^ZOi=Sinw!_RR#8xo52L~n>Oc4m10yxGAQh>(zrR@Nb0TX$mvJfQ+HiqE}
zNcJ2j=YNAF9U_r3H8adu?G|du4i*|^PPb?H+{qVscJeH>p=$5)=*r%Z5u#+RRRuTK
zd)hQ;R9D$Cv6jW@NzA*O?mfvWI|sVKx^|(g;Jrt(G9&Q_dq;M0>-a7X?%Kn?ox2#Q
zZo~N+^UZ|m1;f`~^~^P(*~-asSG17~*6d)%#QS;oJ-hhK+228u&ay=uA~DX)g)}+}
z)87Wcc3o6f)My+SAKX<pMGrAXc)l?ZmjzoE#2Rem7#RW6$vM-gVN2j?v%nQ*)3dyA
zMGzN?LFICt(onLj=(qBQ?y6!e-AwBhXE)n>S`Rc_YiZW05l3sw0^WS@iEC;yim2e6
zVmmb^26nS=+bta2xsL-o_c1cKi&8Q~rz6ZQ!t>`HGYd+y1KvBt<`^sCt0csc!Fq5A
z-aF3B%~Kz`pL-V?JUR0pu$2%Hg^5T-CB?=LW5GtDkY|19Q5hG4V(SEP60A&Nar#M-
zQKUpwh$;}pLQ;m20Vqcfuf9is5+hh!!rCQ^;hH(OR43RmFo2kp`A&nmtj%KTS@e0(
zJByM~eptziF;e`To~7D+?`b{Im}@{IYmm6s$*NXC+)cI-^4v3&@8#A#hq!IeAr9<5
z$k@nElDI^>4RZ^g7cY1ki#b{5d$FI05Xa!VHo}BER7G$amKHcqsIHor`K-y#9dF~}
z!b@E7U&WfZSU4l(WJv6>i4YmE1&Ae8OcvaeDY7WhqCeFa8(IrC7Nk@Z0ZT%Z7`BfJ
zyGm{T_(XBCi^3p<+x0GIs5Q#FZvPJ6c;FuDm555oQHoP+)WF$kt~M`mY4$4Tu1<4d
zrp4vi4wLg87K~zJgV(qZG^Pipuw$hNuw{#4n%+XEwVRx)W>s6&u<ZHp)&LLRb(HV^
zo_A4+sx;?ecGhv~oTt-D(Oi2UUPOqZP?S>*0kKytz@p1K!fFiOD~iJx!IJkvTReB{
z{QxsBp2ZJd4Fw<+6^|)-Y+|t{xFFGxVjEw8#)Zpbd~vKIzQKYup+6awA*u*AQsT&P
zU`K~-!!0N-Zf~`cK-S6FXYS%%Z~6dnsmh7Tl*nY15}{VEQZEfKQr*FL{ca8(a@1-a
z;&K~bT4Z+dGH0(`;>_d>=PoUB=Hen3rc!3JoK6Bz>YZ=x3Z|*_xwsn#&Gm$7qqRw+
zH$N;FNZQJTe>d;{;Cu0s@zPg1xGuX6A+|+dDyJB^4V7Z=!8^sP?*XTqzG4b)q7AMn
zcLvml*TImxj3gT5_U#|w_|@OQ)`A7|I4EV<l0{+=(NNFP5ZhQU*sitF@S45PRb-}7
z2}}h{8EgqEvElAJ7HFhPRn{(HD{H6RmOQ|NxBpdUGKXumDMb;bSTJhoc)%&mdC%o}
z#a@7tDN&6p)G8y?NA_}X#Btw#Pi44`#)~X8r@1nDnODzEaq`qOCr{6F`f|!7iY677
zB%;g~fW~Yl9cN2GBbYGQpH>;F-OUqUX>jX-Qm|*m#D(`7z|kE?@${OT&MDse@YRi`
zHSjfqHXj({vDP5Ygpn2vmPaL`mA4riy_@m*w=tD}9uvi=dR)mtsVK-8mO$gcdc}G{
ze3vsLs4Ok0GZx}9#8pTt0XSoW${n{a^3`VxfdCT<hiR+BKKmB#+5di~nkhyEYhqFj
zGA2o6@Cme>BDoNm;68Jd)Vnap)fVh!B@#oqRHs%Rpgy#NvC+fqyH|PdJ5wmlGvAu#
zmD6YWZy$ew&%DyYmEs<JZVohBWWci7;Mm-7?@7B|Zpm@}D$hJoX77PpNy>)Se9>$2
z!6K;&UP1*xUC6TX+y$nddb*BGeL<#DL9Ad)f;Ea-p*3&tPKzyZ231I1#=f2JWA2rg
z@k5g#P);0D1|kh3HWJcs>lCYCyM#&UHhPO=Mj&yh;gklTTniQCJ=;=7M%!eW4e!fC
z-p<*sZ|3%WKgdkG0}7F~P;9c3l3;6rsgX4U7swhRHc+xc?1Njhk&;B==Pq-kz+4-+
z2$2X$RHiymVq{{1H@@L^-tpi={P%zTKk}Duo+ye}gdLj&P4QQ{*<O|0Z11Uf14+hI
z`_D1+-^-W3c$T-l<yP7YdGG>7%BfNS$P3PUoC{yM&kO2A5#wNrz*P`yQ4yjFlq%q?
z;HD#d?og*-49?})q{{w@4{~DW|3Zw1ipSQ2#fZyAC{i%-Y!UCE+GnAIB{7x|6jvas
zLR?m&lI5=L8CXl2MPL=5=Zx!{Ikf*M3t0zI!HO+1Ela5e<*^VeHK!qO7oP{nEjSCY
zSF9CmE@Y7s+tAoGIYc&CCS#RMbJ|T|@+GB}2``^$;q(?HdkT$8h-#0Jw_eJ<mZqSp
zY$iA^(%0^SyPNDiiLuO?;|z2T@zOK985^&0>(1?5KARW4r{L$+u>=_B@IJ>m*Mp4j
z1^7jC$r(CrAsT{m9i$d0oNn5LVB3L;C3QKYqlXz<cso}X9w(1Fn6eO;g}4OHD#k2<
z#`c?cDJ-V}8-u9^;Mf>!NvPL7<8_NHR)7+|<*D1l+_wLRX!<meu&}5Y#2D-VRK_8y
z!{QV)7YptWU?p_%Q=^o;5L?9vWDa5*3YOM}%+8o#p&}cKlq1_?p1U~1?|<?PSKH^H
z8uit5uAg!*2Ti|g(`(Z9b*ejd3mcZj=7O^4V*5{tq85Mgg%_D_E>Itga9Idyx<Rq`
zipw2&o|8KlK$JW3+~b^*dnI$8+$mYAbXw4whj>sJzD=m_gVLyA%7R8xRH0)saol#x
z4^Yv)WM&al6>M3Fk`T98Q?wH3`x3CGxbvgn7NeRFl_4$#i#0Y1z8pbXq20<UHE-qM
zzQ0CW1JFGYUMy-2Qisw`C{IAU1M@TCzwH#-nbOXbPNt-}&`OKnWkNfJRtl}+xt%<G
zr4CxDViLo=wt4iw9jBRIWir2njY`+lf;JDD)ixV%NRodmg&GYE&2y>oX~a1m`|LB2
zWJD!P?u*utgWM^(_vAkOx9hgD0zBbMm%h)G);!E#R%&C)_+h9Y63XL3byTSDjHqsl
za8}7YluNhcqZEqZHYuz}90g*Qu>nY?n3=LxiK4*4u@$fbP^v<y1f??6hLlAybbN_i
zDs12Wy{IjbW{UF(UMwUAQ-|_i7`QFCqnSx)H6hKEH1}kgBh5UW4ALArsnSXVU%Hb^
z0E<&Pxzg@HCxcF=cm!Wle)spEU~z7qbB(WJhX;xVF`G-dR{@Qz0h)DUoX~REI?cT>
ziO{OP%1rC4)cpf|?$4j$9S^*jRwEBXZcc-%@*eMlwejBLiVn7ya4~(ztMLwes;Gg*
zDPiG?u>aejJ`N{i;p!{O<e7P<FHW&AdxgxmSX`WBce0PD21zNzDM=aPB=99n;i`Jo
zVq0vlsDRXjsHUNQ6GL2qcrdV08!o}SDp{0ZYC>(GgnG!;K?$N=!qD9i$8hCkWpO@~
zA8?9z#Sq-3SC3+_#phHP-j5Ic2b>SFjxCfhMt500@wunDe5FA%eHJ%jNld&(Ak1|G
z;Z?iin9VQ%uhE0s1ZY^3PZPz4x$FsSI>gyCyLqDaJog;9i{^z4S6CTexG3j)-7NC3
zP!jI~c;dv8RLaC<uw_v7oO;4xs)il+3#}nIJ(V+cd6ulPfGQX}KxD=+ktL}?k|>q3
zkXHmLDa1WyX{g3Z$fQg;fJO!&t_pDlk_5_Cr8x)<r!3|XnX7ST@@d+7j%sy`;jwKD
zjFzeIv5Xyt@jY<qab@9(21SgHf;z<eK=CN54eC6;DB>wf(&dpTM7EF~$&}&oh|hlI
zMNYhY38$xN4Kyg1Mph^{ZajNhyD7@X>o{`5LXEQik}wtGYQ)Uk7ujaNix*yKQBJDt
zsPAKXx`ERir;78ThT}rDk0^?WlM+c%LB!z6Xtb`fII~Ej)u5GSXnBBhS9kEnq{1!t
z!PRpyX=8#0Rq};7P>+$6Qe-LDpb~?WAuTB+p$Kav#NJvcLYhP{RiLU!RY<A@Xd+0e
zpcSRlhIxgKi)m|v*|fuCXNt3}Nk%xxZMP4zeHWa031(je?+n%&qB8j0;$4o*JwEp#
zxVJ*oi?oXSUYE|NW}fk#F<(3JDo;H1DzTkr-kzp1Fdl}sWo00|(M4)&%+U!OtsKiu
zbA;Di5+>ociiVWwxi2zo-^y2?`V8Oprthax-Nr&=5k!b0Lu@Q!Vh|zM4$by7S7tA>
z(7MWEbA~K;K#bTbQ8YqgA{tXIUiwUlH|;hYcqhzUh{-yG;3G84v9Tkv38k7ckc2Am
zVi|lHq*Az47iu_SfC5}n1ylBvN<t+TDmE1Vd=0W(SX4+g#w0`7av4c#BqKW*ylaS&
zH^I5{@Y0`TG%lV;n$wgNs!@$vX^2{Rh^SN{DMYt@?ojn)uGlBx1#gR<SLzuXi+Sn7
z1^(jkXNaRV)Bag1!`u5nBWrZIWu5&GYpIiT&DTb06-CeEHQD!6{H+;WWN!K|D93m3
zslWUU-njQ+2Ffwbv_$GEEHr1x{4{NMg+}Kr&NT|6M@(b~iR=(oDu|RZ5`(kk9mn(;
z#|xhn?*0*B_gkR7U{F7RZ+oJqVl4~|KrI%Cp<Dv3fNK|pKfg4OsF5P2Q1mlph!ZHs
zP!dHV@KqseLQ^5t1XCKsRBPD5G3xur*!xzYR99a91IxlpgFKrj>&!6Mxs1yfFq)It
zgi12bP-Q#y>NvIXI0L0RiH$Kunl1t!&$h9cE6pjs_|?a;QHPoI398$77NF7Md~c-p
zv=Pu0bd<g;_y}E<<8_1M*J?>vH;9jru{JXop5e&-NBE&5qYMv}NNIEC!Z}{LaE7N&
zyvW7#lPok8rzI-M0M&Ax$d-vrf)e%8PF0IfA#cIu=b`=t?0HC-xdc;BD!viZS*Q>v
zo`EVP5%>fuWpE|PtAXBUUD4jKp;AmafF>#n<&uP&ihxZ7Eh$+9Ex?&FQFWAPXo%AG
zA@)2ZjNc9~{Si!`$;sOtd=`LjZ4E<?bF;MFB+bStF3+_Pg-SfiKzRqX(sl-`w=hti
zpd1fSFULIl@&%rL^+{};GS_*A+V+VegL(}>v(&WMXmD&+QLVW7ZMpsZE!99h$eO};
zz5Pdc>;3QMl_vN_VW<w{`wwx~8{o&jze78l=G>+8JpIC}Jagg#C(pH*nO($?P%hW0
zmJ_T*7!8UNnnB(W&itiPKOpRWhp;dS?uw%{pHM18xvW&;Pyn1OLskvFDv64b7>Y7-
zQ~;+`Seqm$kd{m!bZHE^fmA%XEfLqph{vjo-EG+SAY3}GTzopX7|nwiWvG@Lz#<Z3
zO@fsSE1ooKadq((E=)a#2S&<c9NN2^x4-!=?!3Ls)n=Qi);XSh@dP_=zpd}`y%wNh
z8P_>HKGL%}*Oxijth(oF1hD?5XcsgM__l+8o!f7Hm=mW`Y>_csor2Tn6cY)90}*4R
zI~gC`$@hQf1N`WFJG9fQoVs+8C!W8|lh1cJeP)5_X(1}r7^p{7N)eJ9(#f1xzNFmo
zKEv*}3s?Re@`fdjp;lJPBDe&qWhE`<p}Y;i3vOLd<1tmilmdaPWJ7<n<OS*G?iM-<
znT;rqMhxC6?0cKCFbk)?2-*tL{P?^G84O}AUImvc?M_N3P0_5yP}Oq(!Gqj?_ZV-v
ze+O^4V}yNs28l}*=u{yY<A3;xHoy3bf5h+q<t56cxFD)+AbYxIjA?z)tR665H>+AP
z$+?LY%d%cmR73igHQ|B1Kf=M=jxaTuA;$F4C>8P$n9Vjl3$vc{CFO;RP_0?E4eny!
z*e?F|_e1#u3rx*S^UTRfzWm%Y$4}-=&3YEoVaidAoQ27kVb6V@bOy2os8)r+1d<F~
z1l0=ID&(Py0ZFJ4i7h5T%R*FwC=S4hB{V`!(e(5Y<f2d!YP(_YLr@-s<DXFSxiF(;
z#pAUo>@Bp(+S9}`$LLUpdv6=!O^5dJmN$&>h66+F***-V8fmM<{B(tLPsDVZF}4z8
zOUlS#jbHw!AA*1UJN*7vE>bB~198cibyM!uc0#NVnkBW04RMYQs|gw2NKCV`DH=XN
z+VR}I?FYF1w)Zf3IqTIOOi`t^HpJyx+(|wK*AlXMXqT17T*k#ID3^udYK=XEb>4Q@
zKECIH2ANsl)btFGAD`l@uavnkJH*K^)yRiS48IN9b5I`elu_bB9im(g{F+V%4h2^T
zJsJryP7<VK<5(zJAwr3YIVfWTfV>FQl<_wxW49SDK5b}T3OC5Yl%qX0MdB~8eYD9P
z4+!_Z=@#zUb}x6TWzU{6xR{w%naP=i&%YG0*iP^^MxsC;5frAvaW6)WohLmX{h1H2
z@GJj`&%Zc{jmqm(gxAplSQj*_H9$AS$GN#cc(u)WdFHvb_HOPv^Z}+OJG~CM7)5eJ
zmWJwT9Cb;)q0y%rE{@AX7892st3apbnQeGZOhdg?W};GK-`E5ndRLpj{e4X)TP>bG
zImL5NS{C;W&>pUnRjbrZ$fnxrNMc1wf>bmV8neE)+-*TvNGz0Wpfec4qK{DV6?|++
z_QSSe;rvO*i7zxU7aELYO&)whi~H`$dGi~0aOloqhQ|h=6qthf`J6xe*BNu|h<0v@
zPCaPuQSZW(X&#Ol8>l3ZC6F(GJ(ln*KllCot&e<+7pK}pQB-INZnXDwJ<#;Y0dG`T
zNtgM<%?HA(wJMy;*<s$oy|@1uvojskyPhfqPBF#Qn>xYALXrs9fYYwrba%Cc;M<U;
zVCSKfKxF{3y3(rWTxko{OC?64GP_2UcOA@l?@*J5YjC=LfeZ5n_ooS+y+f4t)v1j`
zCJ^P0cBb96;KAbAf`?-uLa{#ZloMm94?=AO(izW{W{1mDE!@eBy|WqbzB}c<4<y`v
z#}GqfJ3@aW1)3f|<H>zSnuCvo(!qqYk10{)$=d~mRl~GHWI|_L0%L<L6;f4VV>vVF
zNxnMBzx?nI^4I_2zhl<NEa{h;Edh-dM6QizRYISJ@Xdin#Nd6-NPd_%-}@8HFQj<Q
zgN$oI2}MJlB52(Rni{;P2ObYt34|~FQZOi@blOUuL2E%Mm7!8o%2k-JDOYoNWj1D{
zG|bLzLmb?mbNE1;W^<aWXD>7T(q$Un(i$Hn8m}`}wlt^nLdi7rh>Q`+RZB7i$rx0C
z+36N9Kex#A*IG<?%Ypq75AQbI`nC#V+lE82Ck0yIXB@f9NmXdIVXi4GEDDW9Xt#rC
zLA&YknGi<>U8308quM7}sS@M~ZRnUwESx;&xT`eAzxbcNkDvIZkK?QLqK?4LTbdOD
z2iFIV32}~JbMx9JEKQ*`oHQnQ;0^x+t+pX|ZLA3ly+G0`QdHju98;)hxj<Zxqk?Cw
z1s}LzHTtC$k-?q0ph4U$EK#Eh)tWM2hpTO6@UmsNRAXX$jotelw+yss%r9{1;su`k
zbI;7JJK1&bD9ss<u?AvjJIBoI0`n)Ev@bRon9LaMSRPI+w+~ks9UGvtyTZVO7G}UL
zI`X-^pgjnS9hh$l^Ycox0i90B;9L$_4g+;ze6MikIj}WBbM0%I71Y*(2W@~flVV6P
zv_zgi;d$dd2l>Z;<6-`nUw@49@X*p4)paVy>&7%Itjva}qq5%AgKVbf5w5OZjCs@k
zzl~#vPP&LSw%`zJU&V9DM=GID6_iH|swMy^1``E>mJJGSp-WtJ&27Q!aV|7NT_$u=
zXg6VDMwu-OwLxWS0H$(b<g#V3G{D{m6RKHE^xPu9@vn}t_q`+h_|LzS%V!sudtsKw
znK>%$oHy?o;?~gtM)sGnahaL6<)ur?t7qWUr<Lz*<QzI^xH<=mZDDpnX*85hC$uH<
zY>8K`T@I3i#U_j#Fr0c;Nwd)TE=D?*mOJ>O0jk}bOp(H+Q4*ed*75Lt5Ax$jF7n%d
zagthPVC_ERx}Y(u06;dYI=X@0)4F3ait8u`N8d+%_zo7D^H>|vH8Ncv)tjF#X2rvJ
zN0HSKERpkq_k#6;Miih6vsI=TI_(M(bcyA@xKn)&E)F_>SxZ=)R_1HUWF78$Q^aR}
zZ;ns>_RBoBaE#jUZ8X2y;`jdHpYY;yO%Bx$@(=&so$NkTqH!5comRelMLD-1Otq9o
z9%8h11ODXqJ<(rRu3QnCO(oBZ+K?|qD;)(VIt<5qAFO2Fgn<E}I^t>0gyf*>zSYvB
zl=xzzL%KIy(J{|`sDeNBB>c^{zn5oD{5sDsWJFQY71-D$Xk<lq>jw03Hr_^9Q2><i
zAuIVVZoTEN&}g-YOhE$|UDkR~R*ou%dGFqV3M-U*@M&=YqCl<eU!!h{*HsO|0UC8x
zOpETa1Mfq9Dw|ho!x1k(J<Ff|mr1@f_Xo7%Tlt>v`4N8jeXt|W_^sb-@vna8w`u>H
z=jVU+e!hC#ad95nPJ$IFr2Df>5huL*0-Sl-V@j5GJIL;Or$H5r(5zHn&_fEVqs1st
zrZBu)n4ff**n|qR1kkAn4h<6_Hq?zMCSpYk%asec%{lXO#7{l^0e<>F{9AN*Tc69?
zU`)ft2lC8y6}dJEn(oEUvy^?~-;UV0m`^gxJ?=^mX9_E0Wcf6;SyHa>1Ts^eLMII|
zLhc~*kb5a6I*U6zSJWvkhrG+8OO;kL+_6zP<@f*nNuIg*c`mf3*g5hbCr@U4^-9Jc
zpNaYO6SLUzIll1B7x?TKrx_R%@=VF*pfd}d1tD#LOM_l=))HQN(j!u=F3Jng6aj8e
zAK8ad-h!KjNC=YayF#TpbB<g+nGZKh>OHAfG8bs2owQ&8=FrNNMhBWHbTY%GnVeES
z!M&sVaCvLRO4ZGQ=6bHmtW6nRFA!dDinG|&lv=9E4$5VZA;SB@@JV;OZLmznbc+|#
z8}04w9u|5MAl+bEwU8lpkfszDDJXUZmlnX2yP$Xx2K|&QSJE8XsWQIX^65{U<kj=1
zc)9Uu2CDmrlR9LMxyzPM{g(wUU3eL^%Ay?SQ;)qsCGnVCNIOdI0%u6`Lggz58wsaR
zK-vzBMc1<^Md0p>_g=&(y^KjiRu~Tm(SVYsfd!eRIces|vOt&36f&oDa%ks5GlRtx
z8V(jSWv-<(QkXG{ky~hYn#<%<ZX7fl2F|sT@Up3aye{WmxpeUrI-Qi^Z6&JJDu$?-
zr7FnNQV^C3#vA=>gtY(8l<pvTp_$Vajw~!r7N!BZGvtB4Ofg#?X3SNDP8ucxUU>Ne
zPd{;v%lTiBiBK!;0kxDW!rZLk>XkM&au`z~vsZcH%+q}Bi3Ns-3#m9CX2QIuH&kdM
zn7=B_OnPio?7Z@QUoMO@YmdlYe05_W5eCMEGz}If_m12-G8e2*>XnWv9j~;Ur;&OZ
z9i^2)Y9e$XqBR7^UYh1>uRcL3E*CXGbAzDi-!UPZ*d8Nmr`*>S84w{ZM@+T9z^l(6
z=j`c|IIdD3vkVTGDJ2Q036;(+=c8+pbcrh2y<3+FFcl*!T~n_RXs3CX@Gdx&o|<Tm
zkb6UxL$z*c`v%88{Q?d5GMC!VQYq~rjs}Bfas&&rkhZg+jv*1omRaCwzWAlncy%Ok
zQKWQ*Qok;3v&&N9+zC$<^^G)lt)TDns+Y!`wPz6&r!c%D!l}o3hf^h2UoavaS?*|e
zGTNCV^MWbIM8h$iO3vBNG=F~bCH~7NpX8H|Jw_|JOkAp88yv5ba<4g%x8dMemY8~S
zBLjKG?~Pcp`ZTZ3evFaDw=gp`PNiOFXl#h#p;0RJ!LSFa<>;jOlEbIC9c5))r@f;s
zosj<R=;7zCXk!?JTm<8_m)%x}4abf>MRReQbM427;u^6XC64QeSd5hr^!hNbj#wf)
zNIO5zsY_4s%Bek!3~ythk%tKbAB3Q~Zd9yr>8$6r`@@@3uefdo*mX_4&3Q{LM3E3|
zS4IM-Im;ChAEa@`5?M=<#FVNLHuiK}gUj>N%$}KHdS-#<Vv{VLqn)22tIScK*jMbv
z&<$r#s}AI?Dxb0;x!O(6R;`dsjp7(TI?3h5Kcw2&#X$Q`nzOsPoSdgrD>FJW#?bIM
zrGZ)qc-xLVbKxS0ETx0euTi7D6OXR==(>cxVE&aj3KA<5J7b<dagsBqF0<hNlBP~F
z7~e@`sw8nWh)!A|&*>r$V`8kS;030$FZ0aPck}J<8X`^%d52y%R*US$T9~~mEKEB}
z12LVB_Ea~zQ>#k_%b@Kig&K-Wm1@OO8;h7ems2XoluHRo$>4m4xz;3$bF<9MOtCOO
zPoCy@zeuJR$)tgn9Ld-a^~!<eV@cNq%|-_D%*KHuHwl`hmP1TZhm6ZiHqR5KBUIWu
zsWuL<cy$JooTffB$nfwu^}$i<NtLt(S;q$ww-06i?nrL8-Jo4+qi8RX4x_wF{S^@*
zcS@}mGuN8usVAN%<1CY%rzn@U5!nHvs74&uFg8L=0GaQN01JX8wga^MX)a7X&zZBg
zFgCiKMk^1lMx__{B1+y7CeL|pIUEXp#cq;iSyVt%0Kf0K<1ku0yuHl)<qT&UOfH;b
z;o>Z_v(vPi3$)S(k)&i?KoWt95>+Zx%e#<bKg6nP6&nqNWn)~Nb(GbY#CvWAG)qh}
zMZ^-<EYPNrJ<nq61h!MB+Sx~|wUaBC&QhriGdNObaA=I7p>4!*m8=PA+vA-N`Z#?c
z0v{$5`f5JQrFjF#xH9PZ!snhOPv^PZ{yY*HB0E5Ahlry=j4c;IYjBgk+qNgdn1sky
zN!<)H`QyC&@*Rx6b(F{&x*oP?{0anIKJVCbr(PR27Uc78Y-3EZ{kIqb#2c>8p5>Vn
z&mhvF)1Jd=i_A}x>s1a64l>!ECfRm?I2l@YbL+C^f>~$F%w|Bd_T%OU@~#7#<%;Ve
zZi?b^;9$~WX5k4c&Fw^XfOb}+)!fe1r6H11jltm|hDWziuaA+$)v#}>6Q(#-6=M`J
zrn|>)X$zfnrO!M=V=*th@ElW@uQ2Bxr{%9wNydrn0Jg9=#w5M1y<QbnS6C2(krE;?
zv8~g{UgpZxm$-CkH=`rF=}hN6%Mns+#YQkUskB=Tu@Np`ig853FrSUWu%FK%Z7Q94
zSe$W`V#~tp6jx@xf=#Az+Ce3y990-CZR3M)cmtn4{T#1ELl_a9FWh!9@VI{V#EO#1
z`m<F_bUs;ixofn3hA!9DlUrR%d6gpHir@DLTqVndxsxc~#p&74)973vl88#SomO*#
zsmnver84!wAx5^1Gc>%7s;QwFxHQP1NUuN|`a8x7dFC0Oh`BmD$&1guKq}{$>O4(S
z8YD7R;%JyCsu4w1q)WUhE`}D`!lCArAS4*6pk|TT^a)PBd@F+wZNr)f?MnZ5V-```
zi%N6OQ5}tfV1ez5K!s&%jTvaqd9qf>1o4V`Ph5qTKh3;<p2298NGeq0aq6WZ#_RwG
z4<tO(Eb+=r*X@}V+3#A}(|S6A>s@QJc}f0_q}<oDH0#DqveaiV5|Km$43_UAr%gMb
zVm3Pq{uL5irkqaDYV2V8$|d4bmD=DSqhn)?jBTS*s)GZUf_E;A-e#U#ZjVtqeD=@2
z3}%tbi=V^95!RH6;z6Ql2xF?mQLU$2qeWdsOdx+7i4aLJri9Tlu^p!2U*YoAXE<|u
zgj@ID#nsDM&-I83*2Z8GW+zj|_rctBXtcKH15mP*VwE&O(7=X3+<C!7U`ePY;|!Fx
zVSs8}V<4$>OS#5f-#*SCzA7*yeaqxG(y)|G%~tix!)=_8qg@iuR)NN>ArZHv^lNR2
zQZh(n!pwC!8Yi(sq^?2cr)lM9F#0NqRH)|LX|;E7^>Ur0RHZgJ#MriNjE;^`s@13u
z#_T!(Vw?Pz-~JNK<}@?umq?{SDH_7s8j-1E%>c2j6WI#JMoU?QbYn7uNED_JYz41v
zz~Ov@dG|F=o!m~PT4QW%Z|HpcFpAvH=9rnez_|;;=()p8p3lPWD=C<c668vjnh;B;
z#Rx>UL}cs4wn{89)u_r)QsvG2YHXVbOo8QdPa7-lZ5A|iGuMq;9CN*ayiI~eR^9cv
z{6kn15yf>Xl`-NxrJc`{`9)&FiPU%k=Ub%t4Aa>uO!f+i)G50$+MVspUmfMNtx&EF
zP#-RF{5YI`<sxb4GL7swbNOk?<&h%L9VCv1iKD^7Rn>YrGG2u|@8-@1!C)lDNCjis
zc+E)SF*^P-Go3H<+_Rn?yQZkuYb-1-vamQ!qj`myne$Y4y@AHeVNeZ9rCni1U6LZ!
zJ{Kzlxs`HKrW}t@vNg)4#8`EJ!`mwCsvGjTRwx&25;PkflUaK;k=Z2Y_;mnHa9b8*
zBciBEk_?i#I%(dZlP!?tO+0Ok1UKV#0#Ap`&C+&fAUjEH%2doKaeEuH(*vY=2V+|-
z<}a||FHkOzVk9Cm^#B+<NMr_xqXCSGiWw&<I6&Hq!5|9p4W;m9D&Unk8Dy?=9N+G+
z_{u97BGhz9bqbX>)A=bDJ9Q$voB`0)I?^r!K<Vl1i3pK}NG#>J#$aWbiAs&#^%5gh
z2~E$2CC#MoMPColu=y>(TLT)iO#Nb|5`sv`GU6ykYy=p*mM{`gEf1h{NV7%Kyg}}p
zc%R})Fj7M8Hk`J}{Q~nk1@3&oS8?QS5wRu8$#xLMni6p|L=ue<MPV8=j;evsTd>5t
zs;1uex9lT~DPgIiE-Zdfqm;@Ki`grPzKUps&r?(!CQ49ol*+?&+i^>S9-%WI7M3YC
z5^yo41e{BWV<<%l;{y}y85(9F5{!5<FJx-STQTj7*U{2!ipXU)2pVo0G~H%q_re*8
zh?9s1-#J0Mlk&=oSGhVB5!o_HGJ^9>(yU3AH}KlQX$PxiB3mQqbvnGZaoQ%*@la9_
zkC7NLB_caSBtyg!tc{H;LB+J7b0~pqCAgkKgpmkL38jK+u}9h)JS~!VEXd@lLo`9e
zV2vfSLMf?WqF_<9h;7PAjLUP<%oE4q+<fZKeuwSjxAMT7-inQ(y=WM&4PzuOh$I&0
zp^;hIbB0cOgT1FU2J+SejjmJ6x&A=jnxHWoa8K*+F7Li!Uo4yO-ZHwa#-Y2m;XK@N
zc${-*=6LzVDK4IG;<FO9$}mcsG;5OP%>W=Dz@nOAw1m|Gv{)V<s2dhzN<}bS$C?^Z
zRL4kCq_jm=rC}%e64}fU$eb~TGS>Ls6oIG#-vRL$0(j8SriiTsIkh62O%g+^<v9NG
zv)p#uoeb0yq8L8)$xrao$;UW-_G_Fz^$dF^4q-E;9LGfy)Zz*{Md}RA*_c*FU&V9d
zy{FX%@-}8^WZAIa^<_@BBBqh+EL!jD0dyCO=-YIkX^o}R@no6D7{k8(+c<FBDAQ9-
zPQE<Nt0!hzm>1%xLa8)@*OWACk-H|jZ=#wJCZzn*B%&Cs4He+n4iLwKSX)EHF6}Ir
ze$tg-jKO&msDzSWjP}@wA{OxpA|caKbwSAsi?tECjWH&{c_>vanput=`xq~s{8RS6
z@DLBY>8~(5caaxf{32sRw`0Z9X)Z87HOaQ&?Zsl0f|zEY<Dla#(=(QKYM|WRVr6ft
zjj%EIwEFt!>&n%>rl9Heoz(Yeqs8KdP>MI<Vy10naHz@yZyn(7H*Dw3nHgSwX_l!g
zExeDZlxm1^<avkOb?}<vd?!?ZyK$6Bh@%Q|G(Z#&V@y&6Af{jU3GcO!avfY%cP#@N
z=BvC$I3f&P_Y`AH2_eGyHgFd8!svE5_lodmpZ*V=JpBa*2X-(yeS%N@**T0UGf>?|
zBxPcW85$gCusR$%?h;7&&IfK$hLC0vvx_0dp?vebrwv&ek)^rxjnOI!V)UAzxen25
z!=UM#7gz12s8Iwjym*-_m*=?kzyuRJ>KGG~wjI_++;Qg)4jvk3YI2d2CuTT%YLUjG
zP%0(FalPm@c~l)97e-5L6t=lUm2i<wv6!I<f~6q7n{E@bs2po|GLNu$Rjgn%32{|X
z=MfVvY35~fluLD<fA%;Pvx8@!eS-6so?@_e3nGS693vEQTU4bKRVYO@N^vO+9~L7*
zz8F@_Rmi>2@iDWF5@~nG#ER`>uL)?Bjq4mMH<>+c5;TIrdsir^`(9O54P3rF$Mn?&
zhKDQc+&#*!9V65RDx|5yJ7wFpIy-mOS-ii)tFO-S+>>*pX^xHJ-m0PAv5mnPix?XM
zUNOt1TvZBHcluT|n_ibZ4EzelBp9*Fnwq^HSy9YPl40g&=lJBOe}^QlFi_cr5gT-U
zY?-*o=&VVI#A3t*UXK^N7@SD>(g2*yK|7C_ZI{SYvDa(^-dOKxQ=p;$Jlsfdyusen
z+Iy1L15IHHeZKS|jF4rX1AE6Au9rA<YLdw-^UOSZhBK!pnV1-6_wG@KhHH4IG!{LP
zNqFGF9SqdVJocxTh~h$UNpxxPtC&zP65HcEuaM#d2_oGr6BIIq5jIO1r+}zO`#?j%
z6^cxi+%%C`DJR1iLOLJWDsfaHvT+c0D1h6e#!^_Bf=lEGqsgLRjG^Na7CN@bvu>>S
zw4s<rWcB*n^@C%xf$T{(uzURapjj%4g<w>d7*AMZxMj~MJ9mt7`SL6mFV8S}Wr0^;
zxx%@#R~Z|xbK9-k86F<MdB@x=3=fwnRf@)AXpx7mv5`Xd-q1~TM3%M*2TF6H`=>08
zC3Fc3vZNB<v&&+ONx5P<V$rp=rbH<o#_IsK5Kb~C!W5Q8R(7e2_n_W{#VCd4$_WE^
zc`?qOtD%{BoI>13vf6YTVO`LyQA*jUKF;-0?)7_5n*mL@crH(a(x-;~Q&D6%dwzzi
z)AQW2Ya0_2!|dEO%-npFbLVHca&eYRm*!}-Qr`LYJA3g-o@t?eVZ$+$9+Pm{o=W9f
zqC9;Q2}*DANY`Bjre9&fdM92A&k)kF?!MmG4lLI@>;;*oH;`z0JR0c*-@Ua1#YW(~
zd-r?A5z)#W4u9jlryB%~Y)<CH+(a8;W1xYsCNWL(uztupe8Fj%nOo%fXU}u-+zi`y
z46$d=DC6Tp+<jM-TMtZd;lfPV<=I^ysw*Z?&2kQ-7}HnNP`aa#T_d-|M%CpsRQh&^
z_IHbw<=tm7EU6QBsjN#`iS|#3bQeSv48i~!U5YVv=?#cjM3vlG+TQi`j&zGaBP-mK
zS*0zyS<dlm44Tjpwm8=g!)h8%e44^-2PQDUrHgZ%K0U>`bJJ|wR%6%hF?Q@2;kH{R
za5<!Dz7*IyEiPc+^4R_$(kxkuZqVC%{{^$KZ?{>G_R%W`N^h-7ac!m74;ESC75DE=
z56x3u;tUnP>;BC2Tbd%$>1GE;guGDb$i3jwtOpleAuaq`fJXaniVd$;6mGnYuu;$m
zf-z;<ej&IjmNv*3vD|g%E$rVv&bbTIoIg9w<xBHSUS8nT=oNPE8fEA95e5dz<hkpe
z%-(EzZ&G53E3+j0V~U~v6&sn&QXNN(thk_kD-+Q|ETM}QS+TKK`&cT=8<N_6Yd%;#
zk6qf<-IeE&Ah_Usw=gL<AJa*vQKM@prfn5y`hF&>v;WpstB~s}h;9XFy1`-F&EZ{6
z6dC4bTe#d2Co%1IMr0#yzjYV;_l|RAa+b4ar<s~u;Of*_PSvllW5)=$?%z&zAnv&o
zAuPx+-HC`UpnP8d+|8zYxq$YD=X%8QW$%|BA$=){SX$UhG4!{z17XRfEgR+OtCa=s
z<ndy9(+<A70M0lBTTHGhN|}XpE^sfp$KDdq$m*M)d)Ar_PI4O72#jP|f$&DMr<Iy?
zUB8~%c{<q)k&RhcX!7TuKTTty#lS#JoJ3?<hKR6d_c#wdc#yZe^&orqkK&wi{JHa-
zI&+02HesW$_64p5tFH%~;zIXJv94Ab4S{+e<)P1#sCE~oY9C3R-o!)q_q}7P_Kn9B
zVgwqpC+$U4!D9K|bGj{uAU2TaLKIb*?_3F+@48vwmZjV)zPn}#nru$yWbLT^MnGeh
zZ_eu*b%|@jrP;q=V%v9O%si)Fn&QH_S@s<q<<K45*uHZRfOb1ay)rgB$k^y0iwh0T
zU!GxPu-+RpQSI*m_F079+ta=pRo`${m;O+U#w;_@eN&_1?~CX4X1tc{OfNjvV$*uh
z3P}%erifd*%~jvqZEkwozO~E5^qxvIz{vIzQzy<*8W~w}8Mh{TTKoFlh<N0dfJUxe
zx40sqPfCMaoqdw(!ktK5A&OJ-Jm-aHFY)q=SJ-vSFt^`1&YnHP#7Pw9t8-7aR^{*=
z^<oj)(!w;OVK=9!3A@TA$e^e!?FyCRuI;(ELR!T+EeeP9E#C;QcWpLhmNGQ$x}UCl
z)Sl7OK0TmrQ#TyX6f1@LM&LBG98A%2FfQTHT?c8TSDDSG*kN`o+uLySpji>q^mC3k
zJIN`l=*4X<XjVW+45hI$XD|Ied$)Zs?0J%$IF9gmPQN<M=~FX|P1LykjtLIzAE7=_
zBF_seq>7D9F`?l5vLP*cR;IUiQ?*dYSS3f4ULL+Q$Ef`$RaXSRqWzikvOiFfYh0X)
z^p>M~?S8Mlv`S29Y<LaPy|E=~<xwu4X>t6O|Hi=haNmTb*`n-;>sXo%s#Ta9?s9Ji
zG<}0(#TifHD)G4E!raFZr+9B@b(*+5FSgVPSEm~M#TQTWhkx(_U;5H1Ca)|I$A(fV
z#+s!%Os^W-jY))Fp{-lUTh>GA3syr)-raRBJ$i=pfYOyH3D5C;f%Y<vch9{^Phg;H
zt-7)&&IjRa-~Aik)389*kfkY;i|2Xa^f4BAj)D3u%Us%4q}-bV%_BGBs%|n6UcHC1
z{CMT^AlX=h3se7z(ek%Zs_Y{34$U1#<1pWCpw;Z~+_P7B>BU*bCkEKJf0*67>zqBe
z*ln^e#U`pnJD>|I4HKc=@U~9?AczPAps4q#_@z2cPgg?w+)zl%d$Lho89Gd_&a+en
z>Qg`Oww<-F7Eln{oXhY&!}~mt4Lc2HI$vU9?;E!?5Z=%}vfkfstd65M+k09q5MJ(_
zR?3Sly>=WA5buQ9>BmUscQI6X2#qRazK!t_Y65`bI08{FUYzIR#Rf?dqgWyv;d3AA
zC%ubQ>?1F3cl8=XCvCs*ybn7TiuSm4t(0h=+v}U6k>%N%?_(E;_z)xLa(<Jj2I0(J
zVo+E=@9{pz`wq@$VWCN$lXb4p)-z1(y@xoiUV9EV71OMicFQ{Ir1X_dR5udiBwJIb
z**s|aX$}KpJ4v$zuFU*CWw)Qf`h$2Q<arCDNe>jp7>o%@rN)M_-%x|-E7AzP2?o<u
z?JO95LApH<$c5#pw)Cg*{YAYMd0DS8*mGt5A_-lFV_(}r1@CiIGn`NHK1033creb9
zb}rHJ7bp*pvSZtWD+E2as`qp~&@9Dc+Qr1`z&T!=H#vbZ@4$V%K-0})Ac+S_CI)G@
zt}r?OU#Xcpsn+fwcR3xO5k+N;iI-$iBoxln7Xx)&Thddt&=tPD&l(hh-GW~dby}`r
z+3R5~Ss+;kr(OV4fJghOY8p~&RTmhFE-)00hgiX-3$)U+n35wI9%g*_J|a_I{T$w4
zOtUG_^n?s7h&cgp{P?4C4RDSeIV{JHfry?m7`zrr)UP{exTY{ysf<EJXf#gHn16|S
zbT8%FZ8(>c`<y5$VN4VVVO`l;E4_vzeQstMuSj)ibhlU^-3xO2A=3?}#S}DG?Q4`S
z=@a(9ZudCegW&L*7qnK7RfF}4<{i@XGO0`v4b&K%*iE@S);s=EYHwb5&~!hDh{eFG
z09USzUkjXL$Bq}br#!FXk#2i=lWl~R!PV+IyX%8y)nkZI8yH6hU~&E_8gnl&RJxa_
zvX?yTkh_dHs)h!M6zZNm&73~s6kU2mk(zfumR(ZOS}Lt9(OCn?T(@@-Tw>42^i>~=
zCRtbo?RtT(QHvFbT~6Marp+{_qEtr4sMg+$NW`)_faum|Pn!Zwx6$WN^hJP)iAi0>
zRUIzQPjph%yKaPg^Pn*s9FtieH2s11z~D}FP??+k3NrH)1EqV3%6rNDB4PtY(^3wB
zEmDxE3f&tohz(TG{vJ}0Md>PNdDMFl-wUoOERFU+vm{iw^#8#XIn7XYh!`S`C~1i-
zy-F)PhbcKqqoa(~4+X+}@tIWpQX4^DgWl6-K@)B_<9yo5)jb7p`0&xyfb&rWSX{I(
z)(5l8MxtGTr_hs@*hI?B8cWbN3!46EizN^S2V|%Z??Q(?i*rxF{PWb3!^Gu1WTrtL
zb%<;gYm-7>xXV2bs~xp_!HY&>R2C!(y`iNBWs!}k3vJVa7foSJmOPom`3$e2r)E`%
zh|#P?Cp|?c>5$YbjMVo9p~`N5s?dK9Vg%+j?mcY|G{H?J;x(V@Xm%FhqaS5e`nn!H
z`Z0U?^1o;x@~6hcpyD={a?8ej>4rdKuC-jfZcew#A2Bezi`vdX8un|<&i^ra^Ays_
z$kGO#bPng*1=}k}eO}Z`@*ooFJ$a@KZ-clCoUm=AaBE?13cr*AdCl=Y$K`F(Y=O)*
z5%rWPlVqN(`6|uM)8wVI)OL@tZO=Unj@(8Z4YD-QQOsu*k}6xx+*{34Y!oy_mgKCh
zAgZ5v{PFK^9zCj-zPX2G>G-3MKH6odJ&Njw!nmT@bnmGjH0xHKH{hPuJVu{PN=ScW
z>La_*VWlzuEQ<@zQn81qRBj`UJXzkN6xWEN3bspM(4dxX<A^)nV)^`kUPOH!3V7b3
z8dByic*6fXJQ>~xs~3}C)sc2C(9{{CYD9H(8`a98Ws$h5VwMe(Z^5wKCVEes0!>$T
zRy|_O#|m_?-f9p5^o~0|TvwmJD8}wkbqGc_-bQ$>K(lgIedP)10;ucGJk9xwWDTV(
z`>9p$K%*)cA&N?rN;RUSijgWKdxja>0ndN_Wt`7YpVMky!ub>}QfH?r;IYKS5@S^9
zbS{xIi77#;Hbiw`M_7y9n+){@sr@yYd%Br6!up_5F$t>qrED&_<4Z5TW1&~5Djs%a
zVduz^N213c|L5(|vA6BAw(@Q2b0<B`u#NVfUT@G8gtLOBrG#;qq&!5WK1?bXS!f(5
zZ%z?22pBqPi%vRE?wc&m&T!`W)3jO_>9i+F(;2dSp4>I@nu974ma>$Pe2!N8MKXJV
zWY{ve?G~!_og}5f0FrL!yVq0tW&=%7`;DVP>wWs`UwHb+9~?RI+357?1Ag7g@v&pw
z>bd_n-e*50BJmP)dUL&}n+t?D+gFjE`8F%Wvugu885l6M+EXkn9)tM`CA)`m=@wj?
z()KMf-z;QjGaw~0C9H|ScgWI7Qa?prg1BB`xVD!#8d#!(7L{Qm{R8?NKQFI;?`hp*
zs7Pd-YjsrQ-vmrN>^HW>ilY`Db%zf9fBv7yRzH;I?OcpRTUFfKOd!0mlPW7t>Iwpq
z_RUZM-e<HLSIL?UNCl&HBD<~70Zj3(h1WJ}8c0crD}z*O<5*i>k^s>qRrKEE!A)xJ
zz4pDQ>wu=vw@l)pC`;#l>)2Pn^KTqI`Z4?HqaSn|Byt^AP>DJp{smV`zuy=;6e=7>
zzPUitcWhY-QmrX5P~Qc0@S2mR3%G1D=-dEtR3=J>NTOSoU2xT<0X-43uGGluKlgO=
zpaD^1V&n4G3}Su(R33fwBdaox?drferf}R&&i$K(v9Y%;+NkngRp+GFgV-w2$ZHRp
z6&zY4c8NP&2q#5xl~QStQfY{!G)x@ViA-rp(yb_>njT<Q%$={I8nJbtk=F?{232)Q
zG-O@g`0%l>e#d8z9=+QhKmODH`WuGUa9MZU@!>zUrt)3RwQ~^@Z5?Rjbp_4p(q<v8
z?k$$>ezI<lNVZ_#(`zvIv~{5A6(jRfJRGIj!hb&Ym4|=m$dS)R$Bw-#XLHKx%i0hU
z$I*}HS@yKGr3vpd7utcm2B2BJ7PR%C=~vb;%UE@rUa|aj0L=~ep4J47y4cpD+_heH
zZTl0dDk3=8%y`VQ$45OpBF{ei%a@&Z?^CZcMq&%zZw+W<jpCkpZ9yZe>)~x3Xv`LZ
zMpn4StpyG0ePl{jRcE}<KKO-a-Z}G;kFcy}a|5nwxy!oy&@ViwCix`7i1)cOJ^6;M
z34~Xx(`+Vt>Rr4w=YrO*q1^1YT-LlXzJb~ZD~_S6E;1zxW+r!w@A=$U-~E-fvZzg3
zoL)1+9Xawy^xRAT+gHS=?*W;ywq#W`|Hc4~tN|MHbpefhQ-H?jv8^rx&5<LYjWz<B
zO#lau9s6kB1CQ&x2i1$#R-&-dw3v_FG-zatK(m2B_@+Q3>nsU-J$g@D1e#*0m#WW`
zXed%R(GQySg5eu<Rees2kJ(50pu6+V|7E8k{!MGk?@`~utItJ>6)ZQ<uw1uj_H_r%
z>m<~;iD9{oSA=`dQ3YpA9L08k%(Xt&@R$GISHALBuWr;m-4t;8V;+Ee?)b>hVC_FM
zCK+<BjViebL{+)D-qY3v!m@#C?)5>lmge3!e#271iP$KP>Ufu4QSra{*}r(luL0Z$
zXx1qJUhi?dORh9mu730{w~xO4;~rBJ%-vB`iNTAicZg`g9Tr&?H0B0D!#Xj|R)J<^
zOe1TqSl)W~)DIf7S<q;~W_19@CMJ#s4eC;S{@ZlgKl0hfAO7?skEl6z>?0gMeviKq
z1l*v->9ak3h`smDU%JN|eoj>0XKZOZqNvYM^{QbuS9_<knB(par3uSbB(?-JvZNew
z<Dg;f3%9NdG&kIP+PJ0Z$*pvi6U2yEBQeI53$d!sIf#E(UFWxsef3?>hHIww(MQGI
z%yqwM;DpB`=IGJ8r3avUe|5rp_g?Y(eW*MjM)n4Nt?8RlT7DNVTR<wS&^0zA(B1Wt
zy2gd;isZ;T%)4vinoaheRwN6n0!(B>4a@6U8o?rB1BKPKoQOFO{FzAf@rKSn_T?{s
z@BGqDe$-#DM)NuXXLSGp+<*W7ui9?U-z~~L#>ifE**>w+epRQakyV8#P575tm7ZXh
zPgJf^5jHE<11<;FwL$1LX}zIut*u#Ox?YxPCUT9wjI1tdZ~9+xtu}&Lm%38)!&D>^
zk2_^0J}qLOak%FP^MTWU`1k`&dK|0IMh_o*%zu=RdcLtADo2hy5*_8J<y()h%j4+L
zkJ+O~KW6)U^_D*5b@&VdN6nEVhXr6_;%<HP(dYCV<peJYFnlC5S(b}3d}BWP-{42#
z_|Zq@%9U}Mn0QzZKZ<^|e_HTck8eG`_4wA~oBr|t2bESez1P6HuK)l507*qoM6N<$
Ef^;<)xc~qF

diff --git a/apps/desktop/src-tauri/icons/Square150x150Logo.png b/apps/desktop/src-tauri/icons/Square150x150Logo.png
index bf34596fe901868966a787ea03a7742b8c546dfa..486b26bee85560dc355b76d04a38a6b4697cc265 100644
GIT binary patch
literal 27718
zcmV)CK*GO?P)<h;3K|Lk000e1NJLTq005Q%005Q<1^@s6JOOdy003+aNkl<Zc%1FM
z2b?8WbteAZTjAA<ox@D`^yH{f808E?NJN3aU>RdDwz0upaQJ&|a9SI7*Vx83u(nx@
z4JH_a4MrppC6u!?BTddT-90m%(~DL0s_y;&&bd{uTOho<W+aWo6g+iLhu7~_eRaZj
z&iM{-_BeZ-J<c9ykF&?w<Lq(vID4Eu&K_rvv&Y%v>~UHTaeANb>~T5{AtkmHuDTI1
z#J<J@-%%<)dt%QXKL(&6`D3>j8u-pf{!QQZ*I(7$SUI%xd(W5S`Sog_Q^Wo&7<Zxh
z!}&cMUw_RjYtdCdC8D(*>#uLUgy+$57Fa*>5KF8CU2t>J>1*_zXX4PB{)UZ9H}>C@
zDbCo%PGxU9XX6d#y9&>z<1DbA_8{PB=+?!wCE)P6qOZ|+2wbNVV1k}Y0Nt{;c*VKd
z>r`9bM=l#(a8CcLGAOwOxn~N{&%|Lr*Dv5qJLuvOa3nmd+q>lY<@w8gzCXX_!j2-W
zTI2BkBNKZ+cewW0*8)s8mj3){`MX-<!p^nVU2=8CRx;<Ss1{xQlFrhq&#c{gps{0n
z3i#*4aTZuh4svs3k@EJ&HRtxe^Q-3!{M6R|6@ysbC2(yAuyN(c`jffgo4)q_9o2ui
z^|oK#QM>nFLfueONGScEcU2+*j0;b^YTKIs-glX$n!4MSR!wcVwxn)6|H?l*^w7>5
zIR?|G2guL#an=?70I1sR%U*o#st+BxWW#T4EneDJt^8E%SAHc7w_hEH3nklMe!i%_
z>x1WepZ?shefHPS`=zg!P|6Uf2weZ^NKOcLu-CL*{!_1cQ|Y{@x9CF-%DCy;=!*TH
zfBVK8&UG%ik^jzVcEQioaTZuhK-J+~^Qvps{?(l;mtS9vE)M<b>$DeLsBM3_kP{ax
z`N%oFc3A24RG_iyWh=|?|LR*``N5liZP%L2U=Lk%>;C~<f&oQ;S0mO6=Vs2`^4_;x
z@Wp`}qq-IwTqy=1t#0T@y63;C)BmG)-t^Tqa_gozjq!x}{WBG0Kk>jyLDlJ8{mQG?
ze()R1dM>Hz%e5QaB<=O*Sy;V7V0>1q$r-KG8i}!<m53HPAwnl-FJD&w<<I=m`j7q6
zZ;YIiUC|%^Uw}&_K;YCsE7<VlOS`Up?cconm3v<N+sa4VYFoHlpmiIB90WuRW!ds|
z|6`r~(cgRBzSs1<^tap4<xxCFzkjB>#WNG`&oZdm?aQydX5C-k-P?6hRbHZ9{W>YH
zK1bl34&d`Am71ObiU3x$3Hhc03-Wjky_w?>%Zm`AEt0XaAAjGcqIdqy|60GjI&y-*
zMIif+j&}5xF6`X!qSs!&`F%IPskm+Vjl$RYAsg;C2yqVo1keD~T~N_sKy)Z6q2?ZK
zc=vsNwEC?(_x=6-hYx*exH-P7hN&9PutWT$gQ{q6yZGw0fBoq4zALNN`Pvn)7xL=!
zBwo=De6^z0ZKE1qq><MGo&))!Wdg74uuvUdkX?lnD()D9Kt2+>D);~Cr`>mc<Zsv9
zH+T5h4}vSr9+!Ll#ak|V#Xnqo-LhLQzb23Vi(NE}R$a$^uCP`^h;;zETEC}p7>FMM
z!jsS{1Ch&ycI<n>Xe3YU^YQSvEBL@afA5MtmF*9mt_<~b9P%d_R9Ufp?InYM^5}~G
ztLo1AaNXBSdCj>JH?#vIO|2eY(6AK{DS<kDjG-Q%1&)LYZ3FF?t98SwkJF{JV^L6>
ze*c%lkN?Iy_g+#OT>e9DF}a1W=)Uy#KJcd-Zn@#T-elXQwb?+`eeFB05CNc1LF+>R
zjsmCy7zflapejIAg{&NeI`n|s-2G^%r=Of1=r}z4y2~>dYFm2?|A{lmOq@Y4<=Hyu
zViTy=3|u<&=f~F#-W<uzN?LD%yyAR`8#*|w!M{{A9-Pohg#bNlEu?1w9iG6N4vn|;
z3wRBQc>a_u_GrX%Kxv_sjH}r5M;}o?|9Ahe>WSKkiPUnX)?`g#Rqubf;+n7CaCP?b
z_2)-$hw4%6s!%&wSM)4{$PNJ305tjmH3NiuA*#dBlhe@S4T!Q8%2VyR{d;rx?vsu1
zyCap4Jve>Odl#CMjWfw&iJwGJIik0CasLNK&RO@if?TVj<{OlK;e`^f>jT^vcp?Hm
zJE>49Lp4JHAz&#X9SbOCfX*CnQ5SGamyq?E1*>u#*)AZKs{q8I4Cm|z-t(cUpZoa7
z*AIs?wIAfU9Aw10-13#LSikn?UVq(+_g(l(Pui;+bzKi#+0zS@mO<OyKr|1`9R^0n
zA;)5c@hl#HxZC~0BaO%J96$Qs4pjHv)rcm^w4HIs84IlR?mK;Vp#ha8I=u6{{%FSq
z>wk3vR@$NcW@WFxP~wff1S*X=De#YT8pHD%egi6QXrL)z#X?eHC*uO`IiM{M+|UQS
zG-qMHEM%^{ADKRl*dlPbp&gv?zW(mNJNWL;f99fLf3li_>j&S@pxcrExsB)l&bxm5
zqCf7vrdrq4nk)NyfkF>-eF}PH6ykVOVWfyJe7oEIi~AqBX;1CZZ)$|<2eZsG={RF!
ztn@^ko)bnVpDwB=*Oh+lJDXSi@}{`g^4*_O_KIy1ujvOI1vI3<x9Y&j8sIm9W(>si
zh=hz3(2M{-1j+$W^`X8$4?GseXfJ71@z$&6SW{WiK0uARO}D-N>JR?xhCjLS%@3B4
zx0iy7UJa3=#6q12=W2hp>#jff@9%%`-Q)Ln=44wbQnS-QV;o{(78nm8CUfdjU+s2(
z@9ytz*j>B-8w9Gf7*5Z3rh)2=1Xg+np3`~$mUmtGo40nm{iUT}|Ia?75VlxVc<aY5
zT=SdPik?i}zFE25mq@&78Q??&D&Tfs<H@o@5NZOIQcXZd0!jnaYZo<vC;$SVz@<^H
zKz)4<I2^_3>Xw+xY(g|*Dd`U@-5hbFQl|bh|Ldl$zkAJFzML01YtaG&ig+lhNixwX
z@Q=d}{q2YUeCLPjr}{hr6{<=V(VP#=O8?&by1frR^3aVZgFT02a>>$S_?dc~allIP
zbHk?dfA7Pex%uYnR$ud5OTYgA{$%DtF3-L3e_p)y4}aNiFIDre)o%OM7Ow5r$i;x4
zfa-yHrK%0B>Y-Lq2t*MOD}cfywp;|R5NP^9BM>P2z)V@IFO>x*w2~b?4koSjz(^i;
zV;;IX=UU6X`nx`I^G(07`IgTyD7cAX@y!sx=!j#5Pwct-y?6Y}T-_@4xw@g0Rn=i|
zq9^wc4=mhvsPXXk==ap~q<!X$0#;h#x8R8_Yl|0PRWrQ)@^wFNA!DWA|IfI<4(GZz
zT{QFuzn3ZXRh^eBFLSlTWrM&nOJH6A->C!l&udi<1ZquzW*{U1NJqwE(MM2sFk3KV
zwVE}cPF5=bj?HU)Y5}SuW0VH77{z+vSPrrpKu`E?c8yhi&tKhq%S{8X{XNFf54;Tm
z7nNuhPz}ENy#s&i&-K_+h)CBR_0aA%dDqzX_n3aHGd3hX!+}M2vk>T)JslTp>ew1Z
zW&b6w>07<kU4Ib)?*FaOYl8Knb>UT)ta{(SlseW|-D|X$zuv~$L7>M4j>W*&D;f{a
zDMi+&76M@)qz(mS04YM^3LtfC07dRFjuNX?hYV{#EfA<Tv^u<?@#%_yc4D}za~O^`
zKn}M-R5bJnc)jQ5s{ix-Z~oI4cfa~w^j?0j)mUi3@BiUr!=F3!go2V*WKBA`Z|yE0
z84nKaqn|mGUElM<VqMm|`lbz6(o4%>?JI_&ci(jVKV?vGV!Faf;QJq2F9WKKShMPa
z!9TvQujkULdx>^CULlcPrqPwv*j)#{GOMv?UZWBKH6I9ljW|#$4z*GQB(hLTAM~|I
z^VgdJR9FF;RgFd@DDF}_=QaMZB9P50s4WE?57)sOX@m3~=uzRVzpPY!-*3I;Z#HJG
zzMf*FrQqTaTmz%w_~Co+pASWB$%)Y{9vGeYgodxu)|%(baYg`(PFhMNwxcuqw%2a`
z%fe;dp^#fV?RKa)|LN*2|Ko-?+`q})upY1lxsD%w_Zm>y=qjDl`<`7ZdS4Zab#S|1
zEoHq62qf^}G;q(9#$*j>gaVC#EEN#>0xA#;A{9Xqju~L&5)-Qh3g+qiVG_uf0RmXn
z*9dA_JwcYM3Un6~D(4n)G~57dv=hS5K#$qp<uB>2{?B*(+U-Nur57y)SNeWxn5#du
zqkO+azkT3XRvs&l-fr%p=Z_maBO3kElsVQKo#@QH|0Oqn=VkwOs9QTLe2HbQiXG*w
z9SMKyGuK}7(tqD_@SES>`_T5ojeB;S-2drg)t!4y?5m#=Q%Mw@jUB)B;KsqX=ER^5
zm%S18LK{#eN@@WplS>moQzgJ5pacdiI@HWr5&Nzq4Mc#TpNol+7yPH_-x`pbz(;?5
zj+l8MDggxx>S3WJxwbcVDeT#nhjsTVtXw#WsH+0hBlk5ot*H->zVos7-8!?pj3Z-d
zi7EZ~_`ySef7idCd)+to*8Dj&ywkkB=a02IV{QW%S^KK?b6@eUH(dV7o8B|jEmjTq
zT3u#KYn3FRsOC47sBe$7<tk@B$YD<6(|@V(_RoDRA7P@NrtowKVTslGU;Wah>)-!+
zYk9st^z+)S3`m?%8cokwtk^c8Fas*mWQi0)ND9tX2!&Wf#zLwXimaDZrp!YDJb_B4
zvlW!&Ie>Hlkr&cw({S5_%I7q6PRMK81a8R#j~xLv-r-}Fm_f5xh82gAaxMAZ|8?ig
z-#_pd8|oOZrl6w3magcM7hKj56Nk#p;hE=COY(DWu~JL5zPM@aufO)y-@Ex2hgJ_<
z+pC(o=If|oOY2E!HLWxvi281*<HNQX@x$s~jeB-=;NKsd`Lq%hpU!tWKSOZobzl9S
z3s(Jqua|AP>cH!i7caALd|o5SQe{R%WuO#U91hA&#z)|?VhO=nAOj7W7|jGsS_yWA
z1S+;<bp6xpjyNtJG9}|CAS{il1hQJIy9jdvxPGm`W4;I6(Tkx<1}a;zg{{K>_U4x@
z8=0uw{*@ztc~y)`oIYWsLOr1#d1&!${b*2ev*3Ri8vKM=EXw}qguHq4o4)nWpTFYe
zQQHY0jcI7nP+DeO*<J+lJ<zd&K6V^(rym`9sMGtvHy6J5jgcpQeNG+N&wgr2T-D}W
z@v^Jd{@u5Wo##~hU!%R^WfpeMXw+Sx>1h?afU=BTAWljsAsHkQlodl#{G^)%tVK{s
z3Y(R2dju+rl2Zdr@?C7P1l^vFfb=v(0kGQvs{nW&pz}h$v|Zqe46x@3;Ii8k24w@%
zt3g^(ePpIu`q_{D%|{=b`}_Z5ZZ>1JOzd^$0p`pHR@$GG8SHz-&;|eP{1wiX+txW3
zY`wxk@mxXNw?t0?F<FycjcD&T+q`%E`^gX7JNvyqfcBT1Z38OLTD$tnm4AD5S^rC_
zg{!o;@<t1fPio8wAkHSBA{S^lQyFWm7+3@#Dv+esiQ=lnI`PN!k#Jd(XaTlbT9K6!
z#IO;tY(QiHc!10URy!bzfR_bgPsmqx2&@pm<U<;leH-YrA~>pnTvqsZ9ywn4#ee<1
zpFY+6&KH-u#Q&S~x7ORVa#l@_&xNzW+3tp?IV3V-x!d0UlHS!n`>Q{5-rrt)OT$-j
z-IjJP3huV;U-^jt-OrDH@zq*Kdhz5N*I}U}dtu)PMmDT^d&%1xW7Ex2?w;2e^#SDp
zQAR5Ul?5o7{3cC!5phHyNi35A8G(wxMF7$as2>2AVwae>KaR6(Ks(&Fzz>-<pppcx
zypUcF5Lw{TJkYNN-1{`ve@&yqqQZBKo_1OP-;dr``r|u)V?!N#4*j3Nl@_!I?7^N}
z|KiUl|MAwZ|N6)8{lec!YB420e+C@SIo-gF6i=xH`b0P}_n8w9{oQYT^u8+|{fgrW
zCll(qSUvbe&i>};W4}(Il1~8@U`bD|ZTqF$)-Qi^w;WQ@hU<ahDWy(LX|8@SMc@P4
z2M_=<5Yh@DbpWLTC>;W#X($8+7Cj;XP^^{yI{_BE$i$+VpG$&z`q*52peZDLA$3Ja
zT_=7F&;jsh9T*WBr>+#(cbUM61*jQqslyYN``Y!_hOb%kt_K9#U6Ub-A31=Lw&1+=
z!mI!0qIYDY^Hz6XYkuO)ahuOMunaNy)QbNj^}P>$>|bX->`(UQWZClW+3z2j*C&pV
zfuYi?IgGXHbYJw2tt;Mj9lD(IrW<0r><b(@X+RPO22`p6=!S--&TwBWKB$u^Dcvw&
zi2O_#cIL2}1Wt;vILKEf-XhQ~f{Lt|Tmr20a}Xa!E$dYVwTc4G8Rq^#;Di8<zeZr{
zav>)cgq#dxd!mZyZ5O|xdqd%-KQ-s&>Ccq`mBh`xSHJN$-+$RHu~P`Iyr}f*Zgl09
z(y-V!KljIT4y^P@EB@&T{pyj&-v9mE{76R~;bSB7w*rkN?6b)LJ*-}P{<7csXr^;n
zb>)k74wi*o$FwOHQ>Sl3D*~2i0HP)!>VU3jMSx-pM%|%gxd>1#0+fSyllie_BFjbb
zn9=Nz$s^4W<q~jN1guy{i~6^kfE5Cg=B0^1^MSYl)eJOd6|kZNOukOwL@zK?l{nRi
zT}u|rx195i-_D7xo9TTnW#-AMFUt?LU9;>(*MHz;Z~e;Oee(K$>%9JaUyC*Jf?L+Q
zfArFqe<p*Bl~yP4lTMKS;E~SEE$EYT|9r>%zh{Ciw;ZWF`W^nBPTd2YbVsi4c-uGn
zy042$=SFsWr^KTNG+jT$j<GuA-axz*#X%wsvIS>wf{YQxM%2tg)<|-O$nH~s2vQSg
z(bpI}DbP|&mG+pYK$GN_$xkKLkAThQg`SOkcJjI{fo2BqBjCd28sGeBVBo{l;x5%x
zP221GE>_!mUjI+`Pwu}$V=<m|M2Gjjo8CJA_V;)YD}kuE(pP$o4Rj*zvcq5e$d=dV
z{`}4NeEge_zJ2@5-hEUy&_C$}=?@>~ie+U-rYKi!nb-TC2;(#pG+AJWd+lqlTl2}U
z6gRA>_FV~Yd`75KHO=XNL?kE&)<P;9l)aG`LmUFJua(RQh#tr|s}V`9q$McXV+uiX
zcZHORYc%dJrfCUCV%}TXq9Aq)AV7L9VA=HCfV2RcX2r5l$~9SH?9sn9L>|bL1neAS
z+$Qj$g2rJ5-1jj7@fD@WEEa7U9-V!x@bM?!yv*0f$5UWQ;fPCmx4rh=H*WabH@>NT
zK&}pawQP$moOWRJVWs_g=!)fq$3ExbrVo8)V7z(s)c<XU`4eHW%waIpP;)^;&Fy&V
z_sogv&0g{w?WGke?34D<Q`~eXwFN~zR9bSUfaK(^390IU@VR4w>VPtcq1<x-XR8U?
z$>NYTjJcyPDci&x?-|S0<VdR(s2kZC(`sQk0I>{}{Q|)RrJ8`16|mbBoNgf72gqK-
zcM%~ApJGaZPyn}j0&mR%-#rKL?gr6#2qLXIa_dxAX8jc>{o}W`-nDM(hbJES%J$D5
z{nnFvUh<EB{JZYYW#Y$u5lLx1zTn>Xeb4>Yo};%tIC<)`^Lk>!oW<uZLp(!)^_1Sv
zB_}A2v83!QEFb9XbL3vXDWgb&Vi)ZQzTQn=$+!+kpDsEzBvTp=1kD(3miZs4%7AMF
zVUvKQIetpZHuP^zfx9MP2}6peZjk8+^J?goIGzd8n`Mnmmq0kB;EyX{OhVWa)f`|I
z0lOoH)34wS08YO^dl&Fn12~oeg1W}gGL6I2QYtO%&Rk9wyv}v(*OwgRX`6aF_^a*T
zc-xk*y#CU+4yrZLfhPX$lkNNe`-AtsbXtv^TqKR3+vAJ|mI>t-vp}OE#STa-)eHxV
z0{c#B_!b3191lr5)+h>rtN^SSXw*W?&ec$^meC9aGNpF3tu3J`Gyw*dpeHj{ieo8`
zr!=$dG~F)A3oW4>xNexdB#x`-CB;Cl&q8H1z{$raA*_(PHKc7j@H`KhY!=eVDCs$}
zS^%sP*rEwf<9G!0IRclQyC8?ES=6kI%3AZP@nCh~2hT^U4-xBneCuPAfBkc_Yd-w#
z?=;*$eBiEYD|&c}VpHxiO}bK_%fmjCEmb;zX;SQ@yus&8=>t>uf8^B6{(pG!;M(ZG
zBwS6Ywr!~hS~Y4-H9ZrmnYjRsW@JmLY$>ymWh*;uD6(j<Y(kXrm)xR2#pT2r$;h}p
zc7qhoM}o^ZX%OG)Vo^yxAOYJ07RG|ap1Pbo_<n?XZI0R>LLr6BWIUP8W#MH#IGzKi
zAd!K@CF`ol1{#}|SF!wtdG&?w?U$3a(R-in+@!X9_vF~U+wZ#8`^3W!y_Y~m{GQQr
zI5Q6WOaYO(T87g~E!9(RJWo0(Wjm~{o{mD-K*{S^|K)o>s#Y(1g}ti#YUI3}9G{Nu
zsrdkP-$xi#psZ;~Od^iwLK)j$U*}7siY~Inu`G&}bgNT=vUHjqq^7WxZRZS;*mq*H
zsFfyR<(bc=_>1Bx0oWA0b3pGvx&=741L@e1!cs-ohG&I2%c6WhMa>`zgZU-}>Qc`;
z_KJ3iV9Lc;#|rAjD<Z%8#F6$7e)iUfLvd)oxsRR-6`hcyC#nbcz4>Fey=c_mb-%&*
znF6Wj1XxQtKRL8XCrw%{3W+HwI&Gq-W3YY2nl*hx7q4ADbmf}mE3O>q>{;2_-h-@N
zLL^;`pB#(s+`C^sxcdn?Q**196&{LIIf(T9<AI*q8OFm;1ZrYfp;{5DXN&7Z5BBu^
zEUFao3L-4HY{L`-xjac0iufps!A)0#5|kYhm^ggbieoWF_Q$+bVi5?Wc1A(Ema?4;
zEX$JA@6+Mg2<msrqo;1WqnI5kb+xa$q$@vQw{@>TG24j@{jAVRYav&3ML5_v?EUSB
zKl|{$u`j+vfd(3Xbh}Kb0)4pt;6009`H2G7QXnn0MoZ5_Tc(JCzGZDIHg6bMf8C}P
zE3eo*xZ=DugDcwG+qxj_BI==snK=s+)9{ZRMpUT^8rQTPxx(JG@+x)Cz)AJx2mdv?
z`}jY+zKLTaPk)Z*w$C?qd~ZPh%&Ua7d<bn5rA4lg2vwpLBxP;HdL==+jFss{C#pef
zDl^i*B~cATVi3t~$plz5UQhg(Z9_Ujxmv02F6kbbKQMK?^3j*0631e)n03)PSa63f
z=*n-ruBW*AqGGmV(3W+4y?lJv!SNmcSdMpmS)mdOX3&j--w#e&w$5(SGIOSZ>KOpm
zB9Kfb_k%!krH#J!E_Z0ds_rc>+PHl44V#A6Ua?_lWo~(YHyo#cM&M$4LE^wk__GH@
zRIX~-h?F!`fRd1!SRrUZu~Ce%(WdmQK6TaBUv003?(L7B{Im07O!)%VlHfn>b6Oa-
z?ItYSQ9QU|7;P!3(;*4YQv%e)TM1`D9}U}105g08@n7T)37j_IP_v(H$WU8qc$P+Q
zmyi>u^g>c#(i-#i0P_cf@aVyr@UDM5NMqM<sWeUnMj}dDXHx$M3_1nr#^k5(?96Kf
zv`;6Xet3wo=;p9$u)l5NrK@{4->`Yb#_Kk&+PJ#EdjO?k2Q)mC>srk$MD;_vwOS|(
zS#QQt#fl2`wzP#!KE=*R&frumdH#;BbrOZau_c1IDaUHUzjV{v)-Tk@{(axvhhCk8
z<V#MtMvVF-tN@nfFyk)ix{_23!GW(W$5h0$OGAtbNdRLOizx}p9}{{axrHpL;ZQf9
zE2Qm`Mw;fBE8{|T=N0l+ItfoEdy$VeO)vBsiGxqS*5UPg=U>uS95^py3$GE@rsf)x
zN6Y@qXhSW`gqW`ryZ3ZfD$NM_ohGf!&t)&yX#!UICOj*HRYSe`E!V9Xxad`zR&IUC
zx|N&S2M3oU>lHXtny*Cu@SKXuBSJQOUlM`Irpz+u-gN|&O-+DiC_aS;opzO68?Gsm
z3u9u_G|q%7a)s?xx2^kyS57_g<j+huzxR2=JTIQyD6Y*=5zkK8dB^5>iic874;F!n
z+mabv><*b<=O#ZXgkVe8N;$|4QiC6npAKMA5bsJj87)0msnvZ=jI>i{J-y&XfT#am
zWX5gL?_B@7mu~#of4J_vYdZToO7L6-%kt4w6*R&*EQB){oj!SNc;e*l<71<boR~iO
z_*7-$z=ED04=~fvy1As%x_G1`bI&%|eoSB)6YSVUt4&|^#*4SS@z1Wl`ihmy`v#En
zN{C_=l^3Gw@iDFZTHuC(rap2Tnw$oC6l&!){pvcoz-*0@Q$!$Y-QyfJ8?(Q7ziOo*
zB>%LqP;dHPp|rZXZOw1~%RL8<-W%Y^iN!j*MpK9L)In+yIYIFexiJDP2j|r5ZYYJ6
z&oVI;m354T;y*)w*fMmQMI>0#?B`^eg_o8EWjg|SS7O6jA3G0_i+j2=XFz44CwETg
z+dg^oCBJgZvYx@P+>ELV6N-{bm2*8+@Osga7qY)6wlCijug>P1tF=?Psn(puY-IuC
zvokn4dUE%HgNGkHeB$K&BU8gW=KPtH3z%MrQHh>T&3O@Qr&Ax}G+QhhUKsR#{;O~O
zncsia6)#(ci6hN=c~+}aCw&<-w5?*eT;fgCf$2Tbdo>{wlbU9*K_y_~BrIhh30z4L
zmkuV0%mwCOPc0UgV^|3R^{642_g@*UpZ=A5_RhS2y+WOfGyL4Dxge}2H{vlk7$62T
zk|0V$u^d+!7q}!~N1D;Ir81>uhB#STnE@<MLXeelw6ratI}5B{Uxu9#t~t%o4}r?X
zs@}_2{O+#n&->Y4W!dGUQ+3x7mY1<5GLAqP3)JFR%>@GPoQ5kbKWp16o5`wTzDKnc
zw0+@V?7rx{Xsi8(#@0|&e|fGphbaQv(Xq)xhmJpb;L!0qhfki^eq#Q_fk}){g{U@v
z5NwOXDEdqQmMI38><eGCy89PjwfVyK*@Zd3Fmf0!kEJWgPtK%v(woNMi4!pJ2$d=R
z@^C|fl(avK-y*33CswM}p+G<*A}J=XmAX13x4~@;v9g7f{+6{rvwEhs;}6FCFT6i}
z#Y#6S$_`+8rt6a*CNneuGX3qwY9$l|y*##3Db|xXnGL8ATq|@k)KS5pVmE6$0z<ta
zmaS<(XwtFKKLjcdYlp5{{YQH)-|~jsj2~6C4n2o_Dpj#5Zl_z(wwU^$QN~0Dgj8>2
zJpkrIV0>0e`-G)z;e?)-Q~5$ySSSt2<=wHp`NdIh=BDsf+HSn6S}S9Gd>Tg&kIo<1
zcl4p%dk=p1;PGP*9j_kWKaH7rjqtRatRDkd=CyQq7rf1Jx}wJ)4sx5f6r^n{Bc`D#
z3QAUoFldsYPqI=8h|(aO0Y(2-6qqlG16uvR<|5KL7eXn?nVjUFD(1p;>JkaWwv3~u
z>v~<~%|q{aU*+)ruU6F)PttS5Dr`hDf}Kg;xs_z|Nv)9LD~s$KSuUa(n3+#~DWi!p
zLAJ0=u2PKV3TEBO71Bq`)$lSFHm>p^icP2{(XERE5|l#Z<mR=P5B<^M3)a3SoUJ!~
zt%NHrmj^p+4#Fk1;6PEl=>UOJ2)XzznBHKfUka*qQnxkzjtnBmYDLSbDqx+m;aYB(
zvGOWgXp2f6{pjjgD_352N$J(E3}3G7+RMue^B5kUzyr7M*!%f!-0}WL%Xj`;tb_lM
zJ9}1Lp;FDN5Ouk0M_sMkxQ_4Mut7JMaap`cfq-L7kO2~hFER<hHKI5+KSTACB+lix
z$7X>px|L)-#u~ulQD=&;5&4YSBp+2KR)USN8MwVY7x}B_fB8FmCx34!7G+XoP}+)l
z=z+3Ac7@WkzNB;mS*oNpUeYThC(bxCK;y2hG_DdBlyo3%a;+ZVW&{EkC}e;QgH_}2
ziEJ_*UeFvDtQt6P+3)P#wB}}iHVCLw#<nEAAp(ujyi%5A_exGQlv+iNq^;WYd~qh~
z(zqG9ZRXOnA}-CbnDk{=97|2@WU^5c_DosBI&Q%hR+O<El`9og$55}@ynd5?@oTqj
zdD*ou{lYK)?uRaZp#0h2;pG?4Z3n3dtLOb)UksWjWp#c|J+XZp?Y%ZVDNh0?R90e^
z7*xg>uqz}0DWz0Q|3|DM2AHCUiV&;VPz&iJ?Lp`2u8@vLy-jrT$(<5AA*f2C7_fB3
zg=NPOYR%BieZ9Fie1wBC9fjHoxnD|>b;(d5Z%EFB8RA(BGJQ;VvU@aTAGT2RH4fTM
z{}o+Sj;}I+lP6k4GncijBf^Rv5_rfYwu*jJqhN0w+P3_E9N)a^jjGZJ5XZufVev#Z
z-6TBrV@p_Bz$qGF1vLIox)PCqAJPK|Lm|URNFpjoAkJ?JevpPly$MCGvKl~De66a1
zR*jgtv$bkS$cltLUDxiB1MnXCdTdYMFT;Adzr1z%EB>n|`a4q%ujde02G^B%*S({&
z-`$_{Ja79$$D-kpDms_h6!=nlp8Ocy^}+xu3EGM9qz8jW5wK_gIZhrlv#|I%yU2tg
zkEwr(!r_7eR<=vP%F+d~pvlHai-D!3L%?*i+3xCwfnRxN&f2;`>BbcES2^<>WMPQd
zG?sweoH-#xJ*5-R>83)9t~+N91h52L1WJn6GKM52{>pYG)^<}2W%Jl|9BJwoRat9!
z`<CwC-m`J->)_K=Hl*EzEhDNV3Cnm~NAUadI?bdHfv8ah0s>P6G@I1sL+w8#p(Nl3
zLK4XQP{R*28oov&q@OncBt3~*0MtWL(h;cnTGf51x-U?r9<?qDyY@@@H~%zjSK+~t
zx$Noc|NJq5MW;GcqvbEYVsh>YJ0nGO_Z_>@6iwvXsRv4@iWeprB2P#EixWe|mWte9
ztRk{f^lzPjELKEUB!Dyjj$_SYv!twN=YUK*;Pn96ZUM^^5=2zm651kQ+0eF&Fpk{b
zz6+zF?qB<6#@g`OKsS`|ESDPZ9O9nnAvAd(?ph{ZEA1pE0JR>pP*)PYU?>JE-^d&!
zSu3($^jzc;v)LG31-ghHXzW@$*(nbjmap%8@9uSL-;@iYm|wmUHYXb~eWce)peg~G
zF2HJo3SzA)RjvHM04#_!f><M@k4-4Q$sf%l6bPE;K^Cmh)G7=h!zDl@aI#gS?*|$Y
z#g|!$&wlx!s>FeNbawZ2EjpDn2<qp0n8JW7(8rD+pZ)YZV_hi(wYq=%?R${#l4K1C
zMkWJH0(hl~H!=Zx9Fx0?5s^p&TQCNX0TBoH#;TG2XGC{-sAWhes0Qw>%J&KsmIL`g
zjSS!Af;v`swvT8EB2I}pAXl?~<r~(P+)F;%Bw*3cWyp0ItHUlW1y)+>Nlp%fjN>Y1
z>ZN4~DQqD{2GY)ngcLQvBKO?UE@0&)s!>MLbWY6|tA~nje{$2hw+=+wCc|TsMK!L^
zSXnY|)T5Q@F~Fj3^;(&F$qX>)mxA<T1cb4XvZT*hD>Z^N;L-f^>>?v5a-U(GSUW|9
zYg0HPZPm5`8@JxJAIC=~!bWr2J~(sRFDNvk(-pj*hAABbu7&u%j}K3M>9(vV3nxa$
z!UrEYf{q^B^pYn5VXVOEa;!Dg{$!-nhp7c}tksNF94VzDrJ`6Pis)gi7lA8kYK}Q-
zvl;}lwgIU2l|W%FT@(QjXvi&P0k2IU)8@j?S|}Ae!=Co5LPfJ#H2R(aTn@OkB8x+r
z7Pr!*7K!4ngyLXVX@LV|W(3H}QH(~JAjMboJdQ*rCs1lL(v#K5CF)o~cJ-}UaZ9JP
z3SkgyTMIXF)nr*|umg~7KxR3RrPVoEjoJbjSoHqLLNz009!+}a7C0Dep|M<ao>CCe
zM*<sxtjY11`C1$c=?9Rd0ULMRcMOkiKN#k+R$=GKuY7Sfdh{EoQ+(vK6`?7=n+R_G
zX>WS)<Y4zpyj@QmQf-BzT-nnrr%p9NUXdvVvPg+_B67>n4rX4C8BhLtTJs{NYe{pR
zq0WqcRRx$E(a0|YI@ds1B_T;Wp)p1yUA7EJZEr5Z?BoI}^E2?9WjVVrhGkX<1Hz&?
zAL5<Ja*@@c&IAHZ!m6iZUVPgyxTv9-de;R6jnUI{<N%ifZL)ffg6(Q{(RChKbeUh#
zvKZ-1mx^pHC1rmsIARLcG}Ivr8s4BlVGWSUX;hCvmFHO4jno6VhAC<Knv(}k1DFU_
zoUxb^m#Ic@F+Jg5Oj{2HZk*mGO%ida(ZABh?!!~~-aUI%XVJ5djNdhRD!BD6hCCBz
zUagQ`R8!B@PgFm5S;p--(3aa&z5jt7UiKwdq1aZy?4%KsVmBBYAh9dtz&!yMKNZyn
zsdt^zdv2)XXQ!{lg6o40&BxR81Of}EgzR1g^lmXp=)$bP$zuVgMrKi;ok9@ILF*8d
zgA+$VsTOB)0?4G~X5tdz@Zf|A&WT<~`UdFWA{5m#i3Xs)X9AX|85|U+NlU{c&4vQd
z5I|K)guaa^c2SGUGAlZeDY^_odeWvM+Czi(1mxE8&H(shQ1j!))yH94YU1Lzw1^iZ
zZi`-wp=K1N!}K)<S8_9O10tP6%Ve<h(kLDXeTD9R2b1M0zH$2w)mF$ylk>ZB$7`Rz
zB&HnlG<Qgx#<m$F80G6D2Z!fA^D}GYyS`w{w(>pqKb(8%wb#P&EYzz+C(yK<3Ch#B
zYH5jq8)Hb9%Cv*<lniI#o`sBO!}cUw8Tx*GKE}-B5o!$!8?P6jk*aD&qe3wVVJMeT
zuIQ8$@r#825wMxeBn(-$RvtYUb4Hry42g{==AD{umd<bpimj+M#uKc=Ko4?(><a1k
zsYaO7h_ggiY8niZzRDm}HjYg^jOj`qj@^zzu^a8(T_|>YC=N+<ZvZ-$nM`#2gqHOM
zlB*<TL8XX|0g1R#xhn0};Q)|qmShXd#B(~>VNn{y0HJ6ATo0uivZ+yQcTkA~eEGIV
zDV7YY^^=9e^PjxN*CQh>S8(R`V;N0_n%e%aC+7d{#Vb31?wz$-t$zPw54%^Ke>FtS
zPzWi*&NNq2>!XuMjRl51hjbhlnT$uhQ?PBD8S84jhT41`wOSR8pw4<%GGD}Gr5jZz
zhs`$#3|%15m~{~covIeOKvW|JhwYw_AqVJL(#nc7vbI1zV}wIAsnL)m5xF&Dx#@zj
zo1rTzBv~|afiwU?)=GMU>VR+^n)cCDkd}6iRBg0sYI22C=d%#eOq!(;T0ZJ(9P`zA
zjKy>4kgKq)zlipt;6dq`?LaVNn>de>k1V8$6yhl2b40NynQJ2BH6;%;IYI;pyF8*^
z6X7F6<k7{TGA5|!AzzTt*$7|x&cg_Tns3RlaCrKY@2JMR?rSygKOZ_s2?X=aJN}Ei
z(7k1O$IGuhIkvC9-FDmy)?bETx(O{Jke5?Tf)d?LZpM}w+lA|9=~F~;6OFKfT4f&P
z>NG0V8HAC~858%G+eO%R0Zx>GU-ofohlj#43j^DLxpRT?tc7M!L>SwO(Lxh0HX+xS
zWMwiARNeuyF5uJTG+j)O8F*5|YE3)yf9c}6i!w!m`mS6>eOQu;#ThC@Q~K@+sYo&@
zHtvu%hH;c{=jl#?Wx24jB{=Op$geG;?Hqwx78rgM7`eLv-I#@J_{b;=xlA6OorULQ
z;ksUO15#xnrV%C6nLxy9qI+RZykKDRK`4tfoQ!~7l(_A#hp<qd_OltQaB%Ds@0*G4
z`S>%b6!;7P%fwp>zM2WX{z`ixcdD&$Ztn2t1In=-*;hIbwFaql2-tQWg@Vi7lGO0z
zhgF=MK8l6v3Dg^tXhidfb-+~-OJ-qPMOdN$A!u6Ap&|%thDMDTwb=+q?vuzZ0|w3$
zm>v<bS+kT@IToYTaRfU{BDxj08Pa1GAYPR=dXd#3cc_RSA#=l%HcLvC^mc5TvgQ~|
z!ZVCL(J8JC-U`OQMF6FkEfh2x3tth@>q3z4b+eF}9Gp@YiUS?!*#h*e17;2YC$=jD
zQ4K+T3Q=taaku~xH(-(Cy;Vd$(~g|ii(;-DrCb3{CX;p%ajLC#Oxg8foSJY^l#paQ
zEPVfw?HHRJ3v-?<9H0EsZPU%$-?!LV`@HITPlNf{+O+?*b1j)YKy{Rd_x>}k-gK=T
z>Mo%iD9qNfI6hXx#M~I_!2}=|0ILGaBJ1Ko${Z~1F_5J27)%s6q^E?7y42#;R0!%y
zR!;$k?gqBJ9vHe@pte8>0=ZcSI&!J5NY+$kDd<+<wFCsJ48>VSM~kyIDjV797R!{-
zqBG@ca#K8_Z@D~(L%`x>f`b6IXhM?uGLe~7(uI|W<tbRXEM&e7+5R?kY?fHIMZ>RX
zoOlGPvJgV~bxB<z0xm3RbL<($W%$tu=6oM=!6lf%wM)pmy(r}dP|Ek9nCn2s%E6Wv
zG87{wSuCju_VfS`?cR-Jqx++L&dZ&ey8ZD9|EsT~DEFDxHGKw$DUx7bogA5{e($EC
z?w5V<U2l0y^@{U1ctmbxye5Kp0TYv_Fg(|kPwua%U595dHYri9Ql=9ln`t7KaberZ
z?)H|t29X6kGh>R}F>Rj_RQ$%wQDAf@u<~MH*+o)@q&P!aCrvBYY}lC`pLA-EvMqs}
zqfw(!jIuSdTGT2-N-;cGVa`8GK{Bumctk>odM+oMu&8~8Jf=(2*rotXq%HwVTUj2t
zw{iuzokf&ZS{S-e!_5gCzFng{rlkrZrF;r9O^l?u=uS6N6GFx&2GtFOY90;$DCX-;
zjLo}nWC<C&3;9eh+6ya@&vnCd+felKsQNx0-gN+{<`1iUKIe{2-8C`R`24jIYSe)J
zjQ7YtgTP9I!eVA^{|&$XGq3&KNaj22Z|r30PUJifr9vC}+J<o62B?=@LL_7r^Yv*Q
zI6R8&dyeDDLt_{o^RX~n<u;Lgz5vgq0N1!dQ#Pg+Vx!E*lG+vE<PMF}pkNAOdW^y<
zf!NV1Q@1IGlP&?k7IcTJyeDLhT2qK}$Qmqh6ChFJL^&A#idsEez@k`<TByldCE_*a
zGI3jk5hNk)HtuqAvaqumWw(3C4Onv71whAgfkXFe%+glgfJNTuFPJqs%sHh}fn<@5
zRx8C<lANQRqlQJq%15nv0@Ibl+@|D-HZ1FC!-X5SVDsvB6gr#e9`e<l-#>*TBctV-
z^R086dVwm0&&uG%GX$*k#pkRoJ@2~fwJ&?`<>f}spPXyjF5TinBdRM@%P}UVP5VmD
z6X+=9&{bN6)kCXr#nx-!I91G4r?Bt%2|TiU3Oo0fF?y=Z%)6Jdk<D4i@L(u4=#kz6
zEdc<;6maZujg2=7thhwrctxW*CKzCj>zXW%43s6L=V-D#3>u2FxkrrTji|Um386(J
zhNdD-{1pfBR2Q_N91GHs9KnIIGD`20LZc#<o8m0tWZ<>~*?x)6O-l8x7jo=4F#d#q
z@-^-GGDNCrplERisk^5(89G6+ve5_{Xf$ewnh|o2gXNw5IA>cAE<S%bwr%ae)^pm?
zwSsghEr_@zmEEpR&Q9Zxf8$Hhzue8DPN#AI<FgK|6jT|xuJi4md*w_2>*YbytNM+|
zvn-oS4}A8?<_7|@P8Psa+rwJSo!UqEVhfbKEP9Kpv2ERIy!=v<EiPkZdK%mJ%;4cC
z%Gh(Lf!SHo4qA>}(L$akspz8kF{&dPr}hFXFB7O=ATUiyRMRl!ISR5VxYZgiS+0y`
zH%O%tCUKLPilZ#jcpw=hTPP-0T^gRyuq_SOk{n+#XGA|r_YD0*nzmEgDkyRiSr4*(
zl~9A{0)Abqk%xth%Nis(Lp+_PmJO<R(W@d778W9<;73jPehsQwMJ^+;va<^tR}A8^
z%{{pE!e!XBp@cjw1tLOiR-!uRV(cylVcmnwd&+UNTs|}u{lmZgW@r8vin~Ad&G&7N
zF;#gs<c&`IT%kF|wpdmAg-^Zex<9-niVM|7O?f0$r6Mg^Gr=fLo3>>t7AI@m!WtEM
zDMgluiEGL$%=rq(=E(L5^yJ$y*wKmCUk1GOrFG1Qv)F%Z1`qEZ!;ZZ(7#Z)tLZcJ5
z%AwR@VeS;rKB3UJ0cgx>D6(`#fh;w`ad|}W3}7a8aa3DN_$w|QCB<^d{tl9I2d*nx
zl+n^?k<qg?-497Io7|xV$ySf7S%*X+tFi2SA-#fD2krraNn>5fU$U1aZ>WfIZ^Ext
zAk-L2o{x1UiLK}L;*u>}aQ=oOHm+|&rp*HhN{90{rjI)~{)C5GBMYTHNLO+u=wu}<
z;ye^k-lOgQDG~nVhi)0D)xuq$yZZy1o0w`m)8IOdz-kpguq^w=_uY8ad*7l|TeZ3n
zdraMN-Ot1<-0jHy=4k_Y5>l8aP;m`1sA<@9Kqd=h@&YlHN}zDE5o6~V&~CfvEiT9U
z&VF3^h7ibCF*-em?fZ`5;XM|P&b4D<e;)fp4r_04(0Q@x!pwx!T9>r<(nspLbTpHn
ztVc@xEfKGAq5;o^!o>hSZSo^a=ca*sqJBhiAhY6<`m+R8hhTMTbgcr4y&B_(g{)6V
zMW~MIrqEoUnuQ2YpfkUKty_T$&MV=9i<V*I#vTk-GRT%gz*DGC1Ec$GOjWa})EqQ?
zBGV-7JT>&tX^fSoj=oSx9mUMUWo!ZJu&SKUa^<8~{_scMvU2uq<*$70i4VL&BS<Q+
z&x~6<jYNhi3-r1-|K`iC`tuL9wXH0d7vfwBD(*{61|iJoR5I6RIti$BkzPY?=jCg}
z+egiXq8eL<x<>N?8B)f}X|@`k1aexS*ArOLtI^jR!tQQhA@H&9Pz5{oH8Elr5N#-6
zrddL)T)h6R#?o{}F{&ZdLK%`oXam~j<!i;FxDiFpOU_bajVQ*VVz=8S;B^Sz51q4k
zZ8Ywj(wIF3xKluT)98%eGhsn)6f&6C>hOIE<$XTXL<PB^jFp{rT(Bj^1>3SXcWWmG
zR+cDuH0QDw@r#^3sBrto6_o3sNi{&845AmMxu{GJE@ZH%Nn%aOz*?Zn0;>&XGg@V#
z<)#fPtgfBT-SXDI{^SG0AA37Qm`s4_GZR>;S#1+n-*n@pAO2cz-`4WNLX<Po*^7hj
zEU}*UfYY7M%ey6802;&MIz<9ev%Am)uO#)zprfzR?-1La)5ub{B|UP)pc4b6kySuR
z0?WF9zQG7?zmF)aVr;UG!^05{&AAx3pa`|G4gG^24`r3><ep-L6;r394XV79X=xyx
zSS{Y2Lv1qDz1ksAq~<=M$r$3nSzvD3f;|tkOQ0(UeEXOWf8LkDPG9vlD%jlH#Kjln
zu<4vUmM_l(g`7#AsYSjKK{shE#3T*$+UW0n|I5JcM>t_X*dQ<^<NszZfSVLq^@adN
zyjn7Fkr7lGpv1`VTG^(;Ip-_?P-(1i%g_Dc?;fap;e$s1L7j=fGL|YQwq5#?ZGZLf
zVE<Ls`EuaVFlT!3{Xpb;syV<G$$*PK5=rS$&d#0uBq^P&6XAwU)3wRoGMNLUzvxg2
zj^b9E32o#PfMv2KAkRuc)fcomKwq~;?`j3B&**bc9i7F<zA9>@^1r4H{+c41r5q&1
zSTlgXK)o%(kfmvQwggyIu(k`vVs*Dmv>DZJ++GF7_BJrPzkx!ziH=4CB}d@=l^!;(
z^Dwv~1C)p~ljPT-d~#g`Br~{6T^)@`gL>BMb)Z@%jV%L`+di&9-LnLq^roa6kz6sg
z&!q012P#OUBmoy$ERX7$q?MY{46gI8)c*I!b{5|Do4^0siTL|pdnV#7aXLWdV5tAv
zO@B4Eas6xSv$MX<7KVy})Tz+YcuFd73^2-|X#T<Ix>NHIu@KxUoU|TFig1MBLTXxG
z;l6Y3P)Mej`Q!>|X88;_-HhhAEKjR=a<p<pz!N}TX|!1y?L8Wut76Cj;(|iV9$mnx
zopU%*cQMo7iOl*=^!MaYomTK0M3R{}gkoVLth}NHuN@F=$yohD9hGBs?Atwu6Z?Gh
zSAcWYwBy_tw_()=2UbVo+A3s`Vx}0_5>g9{Bob9{PkN=MQ7LOw$a?ywzrEQM+=kuO
z0qnm+VRSE$%k#a*lR|8zxL<$qbAIsW24KXs(IZ2HKlJa6KrT`^_j=`j>h60B|KA6H
z_q-aO+;zIa^<w}l)j26<F6#f|LzixQci&tkAU25;0&;tr)QFQ|idN$uH?5ieU-pVr
zK4F;#YFv{h?n=h8$U50{{*73ziMJSxM%LN@%Y5C)VH<EU(9E4GX_rlwJWd|Sk;@c7
zL2I<<6xwOo_)1dBrIt(|Bln%cz2A*6xuS$EuUZL9Iq+){T+im(U=S<JEYvVHHjnB^
z1I?3lwATby7xGxQJco_TvdEA{iY=U&wV*GOSg{5Or%hZ$XN!PT3k`s34YS#`UemNP
zm_bCX*)(io8Y0ayDFTD2YCQ54jSMvh@_b`D1j2J9=3@%9G&xDE7bO`CEJF%&yxK06
z+H`Fc{lTYhwg2i%@99@KHFr8WF7f02niOja@A&d{m;cY38%?(!$4z&s#G?UIt4F}t
zE#jAx{m1FgnqsdsE{_2w7+@SMCnHzfGMoY{iN6SuiT+vgJ@a#%xv>S)OoGz$xUN7h
zZ{o6I5h!E@3bg*MsW7-YK-5{s{_li1xJ%)m@7@csHo$Lx<VF;Fvl!mDfbm_^m_57z
zd%?%ro+7qx=)#)*JUo}!RSQ8~Vt7*VR*aKXiP@0KIKbO~!)$J?h8lGrC|5P=4I1k*
zK#I6!m<B|+`^pfsEvh3uX+n0k15bQKqcTnXU+nrgw&Ip~y2<D!WSuT!y$sMy=E{_c
zCE!^m<}#i^qbDPyWfxZ6x4!>>?fk~>zqlBvwN~3bhrrV4v|suQH(vVDPrBKmvLDoQ
zbOl?o3rVm0($~nAikFBiSq6~AT0AePIS%8oF;3&@1aL~vfKqhwIGAs_!6eA%xlkrD
zS*U}pA)jy}G1*lr*ESp(Ck!5tD;am$Hzd*JHSz5~8^w|7lely0ZYWuTtGdv(TA*`n
z5ySV@@yhcr$1nYCKl)Z1f30Q|PK+uX8w18Ff)%;uX(Wqh1i`OsVOrz*S88m!$inoD
zMx$<A9FfGl;D9tI;w4?Rv6&t>z*-#gr9`mMCNQ;2;qW6GUXEpzc<BMTywn}0HzCJb
z+}KDTb?e_mCUP0d)+&?qbgk?aexrN5@P<G9!@oQ@|GD4!p^NtH0n5Zy7W%rbUiUZC
z8`iwGx=^jSmQ8QL9IcnN^z|jp<1Ad3?0+y?iv%QNcc@`4-BxeD#8WYB&Z#>xjkQ_>
z4-Bj%W=XOlvSJ(zCw=OieiNAJBCynup(!X6C19PiP2yXh8piOxDSYqL|3;>8C0_Be
zx8W6+Sm^a;aO_YOU$}P$yZ7$H)tfHE@4sga#z%o8qXHAeLrI!`5eS=R(1SPJM}oKA
zH|iRl{R*%DB@2@iX5xk{6urkNYAx!L<oY;pqMp$uljCW!MqqOtA?;A(iLaA*S3<>5
zKWq{b@OvkvC%VBXJ4|9MvR3pn<U#3c%)MD!IZ4JSbc{`_Mg8`JkClGy6Tfz$kDWVC
zN4)i)n9?z5>2k05%{8m8S2XiRZ64-G)Q%TbhnC0?C6<X|c1A=Zu#wKOCBML<=%%gP
zO!iQlaWWrAcY3S@DL9%((nHT5Nd}1?RF+{K2s1g&IucDtGmocL=nI-8=D|)HEcn(J
zk7M`FGIm!U#6oCcdH0Lav>lAKDRf`ogZ7J8qhsJ4%<0{@bH{`D_gl+|3pOTbddA_<
z42^k>#+*iD9`H%VvY`?AWGMv30SPSj(~oJKI&P8xnz|uiHA89!)Vzz)bTp(uN<n4x
zEfR~x_Yo~aw+aIJZZnxfd=^z0sSk^V2+jMaDJY)cp%F2fMdaz62(lRq{yL3?`RUNB
zPp?Pfz_4(yT60<SqSdeej0q}!{2>1S5m>4Jb?ueCH@-8M>!4K-t{_R^rx?E_!+EJf
zON*G-RIHU`si*~ciO3zdBx{~8Nfl&FC`q89aV9?*W#X8G1}k`+OvuGq#UwW26}+hs
ziKa4*3TY0HXYe%Y6^*W58zaZ(apxVwm<V=b_vF3kYC8`?IyiYWz>$N%BfAv->SGJI
z|DlJNt83Uh@a@}=p<J#ZM@oV<jYe6c*&y%|Jz;hpYLbUZB%0!;g@Zd|NZZ^XMp=iF
z8k(drgCZ$cMi!diOG}<9JricIg33)D0|G&mOo>w?A<tn_n+|=S1AbCul6(V3!VIm_
z_!r$+Ja4FZXq9FU>EDeePe|L7Q#!nK^((hJShLw&!5?oj@IUq268XF>I=d}54sA!u
zWN{6@7;<aIwHfzj{+$HtM(M-ckqP2jaZ(CMmU-Y4&n|PZ;BW3?vOqML$<~Yduy~l2
zyr`Mr;X5}8h#6psP6S^7>XD+d4vpt$BYgP_d!Q{J`)0p`Os0fvW*HnF+fgW$1RlCm
zV_|Ye2~kzHETOKaF*>&g4?Zx5RjVXI+9Jk(%g_<241nT~<~5T09XSYu+?<t8C@ld_
zVr`AAQ;MX-g0ZHT8JVL~Ll&>lM;1SM|NOpUgw1Gi?vUm%lR;ksVnkgQv49_umDV&>
zE&Uj%$A;Xm@EE>EBcoM4?uxP)*!p83>c;_=Kol-4oW$&SS+@7OC=@)>G*7fTTk`(~
z^&G_;&@rf%e3uRe&=S+%I-zXQjD}GQTs+-OCSNeX*v+M~NYoUXr04u-Nlh+-SjU2f
zWzo0V#<y<UkNLSeChCu)63-%+8H8i!`MDg|Vs|+<5+jNN7BZorkK_O<atH3ae;V@(
z4dnBJU7L}+;bp$mC#<-&Fwv->qA-o5%}*&aYL<e%H5tArM8|q4DX5YM$MhU~X+^V!
zc3!|Ok_9r-12jcWoe*ZAH~pF!qTq*0+@jK)SkSC94XxG!T0IJ&V8b48vHes{J$hi5
zt>o0GIp_M>1eW<@F{+KZaQm0XPaJlS9ynZY>REL4xM=V4;JOaW4w=An$(j=VG!F(_
z3pK4Q$cTw7^`EIs<YGQRpdl;7cPIggV=dlAlekyoD$Um!V6qu2^saEQbLSX#?K}=`
zP2qUuL1evtSh5Yam1pZf*(fpIl?B2HP07R%(&8TdT0DxW@^RdI&m20sOq&kR@v)0D
z)<_vuomPGqM-n6Z6(<cQ222$VjY^;am9cUyu%#+{$s0~J#Yi)vy`O+jU1G_!6USKu
zszeq_DKtsvAyx=f3_prd4`XhZR<?vJ*swYsH1aX_&78u&-~NRE&F}8WohaWm+fc)g
z;koH<FmcvY@a<n3o*TMxAbMqKdTP9yFXio?zFxb%vj;`#BB)dEk&!0i-y+7G26I@Z
zFF9FD*N6PjUofd&>LSy*y4LTu23(UC7n&0^dP7E6H2qzrnX4zjv~^l&L=D_~*A95D
zg`@L#@V+?5YGcsYwwZ>ZTqJ1FGEI8Hl)jm^Qp?IBXilN3pTO=ttFV4UCvrI#bMuL~
zToOQQwvtJlNP1f~4bduWywr4fq-NQO^pce``+Vp%rjys^Jti?ii^4G$vaL@-?V;IB
zbGOmorMfKb*&)}No?yy{9LGi`Yr{>XEbGl0j!(^Ea(Y_L&Mt&uy-xLv!d&ne#u~R?
z8lR@t<^Ke*%mt71%>1$PCs)>k@h|lkue;8!3}CoYu8-Qs(bmy!clY+mBC&cp!(E+?
zMuesb#u6(=<sG^|IZx(uVQPuVPw-@~=JHR9siZ~FZ1*q$-O`t2CWn(27LrxuawQoR
zWhjPRhr}JXKY_@Pun_OTe0&snZ@^6dSUFfE_(1#_b&aOkS`yz$>G0T@ZRar8+=IgW
zh1j*b3+vafz}$RfjPerk6K!q=Nos>c2h7h2%+E&1<XupP$2SJ+uNwM=_`9btNUf|e
zJtO8nfv-{Ml5jn0222K6c`n*?HdCd{b*Q`6k#>gqYD3J{W-v86A*ZLOqgu5ZMX{2W
zrc!#tZNwv(u5bU>DgTalhk9!2bP=Tg$$qR9Tobb={m)!K8$57Xw|Ck5x(ip_Sim|g
zOwVC@a-wQEw%yU$Y4`RnN3ny7YZ=hwSKvp8>8ubLYRWmSB$7w#TW6C1M*?VEH%$IC
zx8Rt8;2$t{iBdPaKu#UF8<Sg=&@t#>-~M3?A0I`=4KP~18?IY`WfdSr7LJvLZMz_n
zmwKs)6*q!>$!MXlV9`9I^w3bJP*zW3|NdndT-k$c-bJ}WmXTMYC=M!@#7VTtB5F!G
zaV*B#3jv?DnWU7;5;QHD5L`UdM!DI1k6QbiK(=V1*llC_WXKAKws4Tmy2yGCsg$DH
zs9<__26N>pEX>ZMUa$KWEYG%R&Zy=#<1tM8haa8wcYUlLAGximr&zw|3=suM3(K)?
z=mQUpHV(dQtnuB!Hh0_Gy0e%3R>|AgY3nXbpPC3K$Hqc8mvy_kx@AXuAKE(Gc+}l*
zu)CCoZ(gdsy|itRw?Cwk1;)`Oy<3Y9KJAGHJ3klK9yzg$6$&K_<ysAoJ+=d0M&e}o
zE@*av9UNC#mIue7k1hj<^<|T6kK`)T@)NZ;(D!Z2!$PzhZME}p@K6uduUUnKvQb4g
zmqjzc4QLGKL`3hz35C@ckb6y(pc7D;0Nw-!EL&+-3mEZe9<E420ZJ68=wbuyeJ(0f
z8F-vPG*Ai0F*-Ae*|}*{D=bsV#?X?ntubAw$1|ulhHqQ&cYda(j(tDU^D{qe6VDj!
zhNYcw8WF}%%!J?iAG6_|f03=MzO3EZ_NyJa^WT(nhFl#8jGs6ejh#3FFPlMkUmrT!
zd(qZaVy{L65`H~KMEyucfIZ!0%8M&g^Td+bCOS)~RE{N>apuoWPC)x^IQF6*b+0IK
z*InDm^<trU01NREc$p4J%VRfa%N)m8h9*hfRI>Mvrej)9YO_nEpY_8jRMkElKh}eR
z6@AEf8Pw`#LRoXNkZP$K($khuvy+h3g_x&|hz>}$z?wA2SZZVGOei3Ui8o!W<_y!^
zYo3}N3lgC!V|4NeB3(tLGJ~k;gLJBu4x!Wn{Afa12xQQlJvkXZ@U!)J^zm5NYEQj>
zOOm70-0XK6)n@2OC<ORnUG2NK9_+h!Jox%MJh}R%J(=r2lyiFr9H(0eH6TwMIgU|z
z6xmz>ojpD1?&?Q-cM);qu!K)Yy-IxY6N{0ksqijlQw!v}SnJOwMZ=|>899)SJ_q~u
z9>Da(7;LwWvD!Vb-JFS+$Xd}*EY1E|*+d>F)odVK61UA6m&rNUV!4vRWo0oJ>_D!%
z8N(x|uxiCxRO=+@%)xl;{^zWXZUak6YKNJhh|#;sVNx}TCArfsb%QO}NM#yYqvDvF
zDOV8!jk!|_3);f;)HsGmo<ufB*ryE^3kc#V{z&sdz4>0eVcmK5=XTxtV5PqQo@WD0
z&)_h{Qvt?7B`TG=+Ij12m>cRU{Pc&*;gRZmW0zNSmm`;1$!lv*9;@Qi$S`vG9NIg3
z(be6Hw%!tyviJft{g`7iKHuD3nRG>nr~Wn5JV>d4iKL624yLANuy^+^xUQ6=mAjO(
zVmOjwt1K*8P?nXKmh@ne<|99up*u_<o>2K@F!_lofOp9bO3TW_kEYO2hcJ4y6U&w_
zgO|yn(TI6dSnG7KgG);!5|gJQ^sh}?h*Cm=1_{k_4FVJE#go;hPSKFq{RJSXlHi<1
zGl<dFK^CuqTD%`Me-h28!t;i%ok7X#L@CpSfoxt~u&N#3AMTVp=gs+gHaCSmgCq9o
zVS)*bxVEf#DGE&=W3?wxZcbn}I0{#|D0nN7!vOqhj1%QDP7EJHE?+=rcOSaC`;hM{
zLB|fFfI&u?)?&SJ$)DkPD9Hk|1<ITv+;jJ%5R#^S_Nr<;3^&upwN2Y9D%&oCKqc+0
zBG8zNYg!G7|7xiba?)xnmeGuGNk9OWoyTmr9bR=EjvO7vx;2|os~HLIWI>(T!$H8L
z>`-V~oz~E-B4Z|fSbf<RJOoRYtw~Hc)f^WTGy4=%rBop0jZQ|ZOa{`APNEtgMn`@S
z8JA*37a8dwYiE&jv*^xvShe0oX}e%yfoFT0@3XK7GmStk6I_c3S-Te*yBndZBZy}(
z6CA@#{QxpDhkRxLIcGV7n!?Fy9Vds6!OP{)*42aF?mo2jw1c!DY2bm@@RHO|YP~qs
zZvv$rpm)&19p8EsmD&uXsA014fN_D4il_wxs)8iZE5|0+NT-5=YE$+k`ETA1LBTu;
zL<n1v`xLa0OlD{^4{Q|R$1|v@y%;&_puc|^ilugxskNCX6ppwBuU4gGz_Kh<7bJpE
zq0nx#>?38L^?8k;qCqNzl=Y?eC2P1lW-A4YttCl>CS7;rWX|bBhGIh!Sdlg|Hl4pb
zijIeM{RIqO)dlO{s6zRI-mpsT8y+0$X_p?f3SdbWS=oh*)rO`D5JuCO4vql+K6rw}
zF9wiv2iO&kjZ|@R_%L$0JPVg~cP&GE2W=^JTD|G6r_enpvF04$Yo9)dqsMk5pK~xe
zcPICikh^2IC-blbiH>9;t-Lay^IR8~0*odWS*fJsg1|++3W5YXGEgK<!^2&QcP!3^
zkHZy%*t_dVTy*I*@FE+HdSn&?kW!9eF*vOopE!l7i7Yxhx-l`@<am;JtYj*QnrIVX
zu`<P?rCGwSn3f^Q?%cL=Y#1|^i=3Thi`A9&aPHci%5+*3n^8NyaqrKf*?KmCr5)R2
z*XOx41Qa|e8#Lvor4P~(_M9GgPB#=ngwX<~!$Ux@6IrVb1!o1a_5hj<g^AGs<D+A|
zw7XDhLq|t9I=V|}U+%J6;6Ht2KMoz(g<Lj^@rAq5z%*Q^-EdJHtmk1{6ldiWUmUvY
zi2x<R*~Gt^(u&FQj2omF%Yq=+Npk$OP+Uix00eTD^zLEJJ9zZ5yRm8GC1~#{aACMn
zucGSH;-nE&Dif&H%Gj`Q9hwW>T;AcvMcR^KvQb{+%N=-26B9gj<)KXtdk#qjl;Du{
zWng)5tqj^d4_kXYEGtPwwFYet;WXjdKAt^bF(p8wUJe|$2;0dcXx0%#H2G^&P)y=f
ztQSfb(sOLMc006gqN%Ew4vz!DA?d(T1&0FvL8!0?v*Qg+PfT)b_3(WWf`ICJRnSDr
zboD`$)iGo;ovFr_vN&)j&Z@|uu%*YP9J4Cd^onsYn{~2`i7@v$WrSuNnk1DJnh=82
zXK8m%7Zw`3V3Q2Zyuf3ReGmCU5pf)_-a^o<0jkb~3^CnWUCEuXG>x4UUs@}A(s|0I
z_0d+@E9sV{7G&2Z*H>f-Bhuc<IXUzf^H|@WL06V~=rvS@Zctsv3mI6<S0=833c4iI
zleII*s3JlJSe1!B=3$bD&;jWp!j&1gb_Y?hDvE2Ei%(&uau|+qkh8krS^da320XS?
zLmbyJS>A;@rr~*A{P!(Mih72xa*VZNx5%y}jjt$_N@|&=B$JRxya&MuI>=V=PX5j8
z0HOl0>vdr^c#`?0tUZ9b?->aq5g<@w2;(ZkxCTF-Kp4IiBA-0<A}O3~qcYt@Npl7t
zrto0)@er^~_ZxMHX5hIw6rC*k@;P*8EqJ!+Y>1UaT({6@##OwKfkinFt=T0KkK7Iu
zQPeLK*|6*)YdS?yfH1718P`~*ht&M2yMQbi0nKm;88{YMvXFp=s;Z(A?J~_u)K#Ga
zM5yy~diHV-vYAbn8Q8Kw*`Tzn61hZWi3|ga%^d;B^!c#a;O(tOi#HutC7w$`I2^oN
zWL>E~Cuw7k;&{sPY}A^=s5XzXNE#Qg1t}6zAnrjpHaxc<E)75?gAmEdNdRStU;bM1
zJ)*@Z!JyuKr9zs9Ry;HT3vFHp`imVX*pv+#sUvPF;)jK(Zo!YJx#-zHp2Zl;EFYw6
z$7@KHKsIk<-R3-|rmC2kpfy4svR)1z+E{P2nOLzn4%zh(NC;pADy7IZW#FL1&u)O`
z^GC8LX1ti(qL(n{1fr6phCKopNl!XXR$8=0fX98zhB0GBsCSFWSzaz~f?j6cNp_c&
z*XXrcY|%(VmA9ao-dcw&B+EBa%L0IW(wAnE0&=;T3|YOT{eZWErIX;ywi_;u&zFMh
zX7Ko<kMIudO`F!!f&xi%lOoQbqtJ;A392R|+w|PT`ctn~(6rI4N;G4VG=Cwx!lZSD
zx(#TJS`=z*y`TqMxAmZ2k1#z^#{RuCI5Av?Ul(xQA~J3sv1%fW>WG>(M2cKwz_Cgi
zkHri$>Mo$gP&8yuopj`aQW}B)VT#9wX)jO&2U}((xkK8K!lfKjwl;+#>O^hQlv=X2
zGYxRKiIG<ifUF%EFe5TczegHY^!+A>OT?-1CVDQ}nNC`k&a&yXB-2b(x=NQMBrzTh
zq}J;pyVyc8gWbFK;ogV;9$uys$Btix3(mb9g}j52(K)yo*R%&Eg~xRLaY)6Sz(RdS
zquQjN*=LOxeJ(7P>1#8~=8RrLA@8AHQ|!fhmvy3lpc4!8RUAGzi(^O2D9?rL#&Ve~
zRHlfiNg$&*EMQkju0bY1qb7F-8~=?K<(<TIT#Dfg%82BeG7f2+(go$%FP#}%T3SiF
zE>iv|5zR6&mRY??#Xj?<Y(p>bysk<vGz+SkIGhbOH47$-ds<FUgVds*d~zp7MxVr`
z7rhcaeO+kp1dbe-#QhI`30bcLwsdiP^nOf??MHWE1$sLAX+wL`USs;tBHnwAq{+`x
ze$A%O8_z_M`Ah;9Pk!-T&rvZA4x|@eaVrhI??Rz~OD-?qylqX4j?Cl0o*9gvszb$=
zQR8!SJV-$CSQHb$8U|zxDx#_Bk+`p9-?PaGU9Rt?z@p+aTdUT{>k_Srw5N)mf~Sfo
z9!z&3(tH_-<76a>^Rv>Q38lFNC1{ERW`@SRVMDUgYasf9z-NF!<fn$`xY+UN9^C)X
zrw~SSn3_6-4QpP4fn}@k=#Fo2R-AKtnX9s0mnFJOg>HU6ZfQ<hKZx|A&q?)$Y-Z53
zFf*eNHksvnAqVd<<0-9HF=3ZnM8~24-jpv$29d^_=mM->(}Pv3J25?3#i2v97(QM>
zz1oCrIml#OWKcjH(>gi=Skt&gc9-NP)Am#YUb^F%AmtXBHd@`q48BPM7dK&=Ur74c
z)6bKBFhi!BQ%21X9NH*lcI1%7WEV#olav6E3w9HcS_=`yjPU|g+=Q34dE7s!xY+Ud
zF5L6*C%Czg>ZcS_?m75%>_0-8tBai1%?S^4RdyC_g+5p|$%~t0HL=ZRkc5&UX~g6F
z$U(VIlR4C8`GN+P`F~<bTJ6c?6-GyAF*9Ap%Asy_bdiobO$^6q)QKw+=<aDl-?BDb
za8Uyz!wWckZ~@a3KHssfORCDQnIq&tn|jnE?o43OsHA<4T2*MdVA{!GK-Ch7XiXWV
zuZb%=Y2eP_qu46}AgLO&(yfsLAgdyD6Ovq{AeWdS_p6vzA&1G8W@>5i5rhrweEcBJ
z-`tHyAAS^%@BR`p)C)!pokV8XrQ~@mb2CT>E|H&hj$=-W(M;=e;_y?8mCP1KO0v}o
z!VD^8*}0Vc0tOb{zoxm!+-GSc99gQ9W3w1JK8^A51$1;~F}R`&y*+L4GLF&W44S-H
zoB*_WOFuSk?#9G;6$cN@VdPkyN1;fMfUS&lP0x2y%{Q5t39b!)M$`ilvdNmSWEIoW
z*&+s0I^2=;lXH(@vM@PqMW@3&kE=K%Tk<?;X-b&>cgv0-VshmrJod=#*tO#U_+c5I
zQ)0`;ovZ9JiAW&Mjkvo!T$^qLhdS<Q^&-jBLn@(?i6zrtpD2fOoJGr_1kDb*P*D?s
zqN&1X|9CcIEKPf1cu{zI@mLoU7+TqlN|_Xa158YWn3^u5RPeBTpbN{FcOsk3FlR(l
zHnnP#%OJgd?N~NYLL=~T@As#0YNXEVJr)O#(%!5DFzlL4tdqt(OT|l;&NXs&MQu7s
zjAY=M@Ru!@$Y5j5FQ&`Q1XvQNqt(;HTDe4cvMbK9U>f~xN<v(_&9vf>v$HZ>0pJ#C
zx;dl)EB8B^;U6=2vDl5n86ah`X6=djpT(IeEx^p6$=j|-{r&~*3Y)akia4T_`r`{i
zX?;&;5!b$G14c(@aAI^8m5Psras$=s7>19}ptrAtfq@RRwb9--I-w@mC-+w<<#5e)
zefaVhMp^s7bYi9h8jEsCl2_ERk84eB^Je<==aa)w6lNOP%&;Z>=E-YLbo7#^UIe0%
zxir>;j-}H_%$5tHI6Oo;GQ67A#+Hy02$Q7}&ql4$lv$czPV6mf_boO8vOt4TBuJ*F
zndVrkfJmfAY$qzvB<cHt29|D;{2^HlV+oRdXvyKZ8LVHs97BWM7@t_c*!Vma=Ihe;
zLktg3sgoyW(9u=I+BLmsZ!fTQux){QErMm+$hSFIm}&CY(iQ-d5vDygiKA1*o+tn2
zmcXUW^9jY!>M$_iN?UT$ZimFlCH-JYOEmu{C1$nZKGRXR1cZ)VWOvMfVs4H2Fe-kh
z{Fr$rPHbAhHLjZ5qg%0++2=^v14WViP80bH_Itebi^k_^6rXeeU%<dpItqxLPR5d3
z+pH)Xs+JoV8>^wGr-Y2_V#Qz&1_wGZSFYmZi8)M+l@SCHrl%?>mm9e9vh~R1D7`nr
zw`No;Rhdbyq#3D7E))|?t-qUspar_63{N^3n+*5UO`q0Wl97+6N;EC?rztc<`sH*?
z$9$K9dU}|jNt~B?F-E>Aac7i;E&??HR}xE^@Gr5b2^U7o3(}vY%#bi2Ye&_aoFO-#
z1Ag?`1eU)LMorib@3C)9r%=#+_{ao~AD=)+dmhV{bz;R(C-Qj@-5qVJqg2GIl|Ck?
z=5dO)QiNgBW@7Z`%&l#nk1kFkotF$KEbR<PluVa&O{XKVynM_IyPCNPL$?_otTmmz
zMAK{WT`h^rQW3c&e3+5IGLD(QviRM_QCwsB$mN-R1qK3%y=`?@q>sh%AC?SY5j%?D
z%#)cnAY-YNvLr1a(A;<X>>tk_un^UwsA<afBt@W1tVLJ1y(0@bVxd+GapdSYPMn-U
ze}5ZR40NE_mPfIWL$R2{z(5yIRuhMnic7Udq>^~aSfV5`WPtHiQ@kNHbt`5b#<;0g
z^BX6t$^D*MtR;>0$)W(my`>XDW_^o!n#F`fESZl?I$)A8JN+*Iys@ZU*-m4&)Ha%!
zYN?$xf7iS`GZ&UvyX5^-nUPqWnA@PK2rXsM<VwT~yMt6AC^uCNv}uq)L0J`@7%Jxs
zt>{KR>tbYd2D3ADG#Vj}9i7C9k!f`G6#4s|T}61AjFB)RfVPIe%mlP)&`a_H4&oD;
z_S8sm9eD{IkfJXcm`&Xd5#)5^o3;jaOh$!_`KrZX1VbgTsB;=K@~e0XgOAo<TcVL+
zzMrVg(HxLrjT0-G{x*YcskKb(V=^BGN)QP^DMdnWI95VYX9H)ov4uuRi$iI8Gd%$>
zNMQNpdN_*$72GKOrWOwl2v~m;Jv|-h=`CS?zJ_DRr!X~9L9-cQVr&7^lNFTOa~K%x
zLSKIyubPV@(+g!9T9yXeOWS!9hhyfsSR<kJb-ps}{LC{LmE6{lh6%AaaAV*tcJ&%F
zk;(xis?cTuLTcn-M(Y<F1yhNXrvfb52e5?dSiD(8vM-UG991QaV!kQeFsRK`57n5I
zjwMyR%*tr8gk-stg?dzd;k!bOTDjaf>G$!rKT44`%H@E&A$`(vN_zg=N(EeaK>@XD
z11H92aq1+Eh&M4iQ^nkD9Y+t3qkmZkXOA>i-da$QkfDqBr4hnyxgN8Cnq4AG4w)Ze
zaJ3S`1eGmmp+ujHj?|4Nl3u1Uhf6(6ej))C(x83`!0BMAhSUzG@uB%b`jX9umIpS&
zuH-Dqj2iNG(IqP)N_m_&mZlleR5eTj;MnD0j%gk|2gi>m+xCBTq-Qq>7W^ZR2-*~=
zMMPUv4<DRj&Z<zN0Z_Btl6FLsfLJb{#g@%0aOG9&v1RK3+B&EqPjei0=<qlme&i4W
z-;{jPh2<??iT;z+A`K7K`eN%<nd_d!Ux{XE;$>PNxwg4P`i+H~TY)!UW}{=@;++=t
zzmQljgJ+Y~wLrdT>5{*<^y}t#wIl^q^LG=)t)zO{>fJEIu+;XN)Cvu!ML&{JwEuO%
zpY)At{0kCTbeI!2A3pKvTH_>a;Zc19l{p{Z{K^6B+<p?&=$OsfEP6)HiG;*_pICMW
zYgYB)$}87n+qRYH?JL4{98_unC^#j$f}7*g?iD)MOD}HgVkQ7dgms@Xu##Ge^o*qL
zhIrLhduQ@ak`4|2`4osPBr;pC2#$Cf_qM2Bv&71_G#-pdTna=6NgAhdyqHXBGoY4a
zi%J+7@8m(@MaC)uwvr3}*kPm7yyQ*3082Wksr_F(F?a7LhI((dS;vVse^h-ua^EQS
z?w-P`we8rnsRte1B!EVNy^$6UNQzDf^!Ih5zrO>ON)?rA6ZrzQ{~DT!Tx;4Ulhz3r
ziP0qzNrv0xji#w2LwcbNE0M%l+?$;I-cz_LI#}S0J=>y{G`1>{=R$fN4P~0R-UOH?
zYfMA?rRl(;Y!Vl5D6~rUznD%6Qv2e#uvNlIpCHA%ifjz6>y8%2#_gH<zVEd54?oMm
zdX_9!nmAV~C(GaZtJ#Hvo`|JSgek?ww0Xg=1=#iYDSYkLz4-q34&&6RdENz0g=ntA
zu)r<3NsVH$h{5IEi?K^WkQ(u`#A_s@TSkRA`P}GmnJlkGO)O=e7MmT6budc_(%_nf
zW0(MMv7<|_mwrkdg{Nc`OXZ4|DD^G5)~WSkqe`z?#Vm=$qH&4H9A$oK{6}RRBZO<<
zOg~4;fdk72&_8IagTp&zLm&Avo}=Sg0@mVDi5~ick=ZXzs>t`ESVeK%L`)eTVlE<6
zws&a%6u$M1{kZM6eK>e%ioI7hYr}D<cudBfx=y2~h+@%$`9ZcoWZ@|OF^iU4`Fz?$
zlkx;V;%M0*HZMt61OM9qhh1GOXitAO)jH+$^C>b$f>n|iv9#C)u{54r5@Yd4a($*L
zFa=wxU}JQ(65%#}uuu|jx3_gp-SwRl?vbf)O-4BJ2%e+kS)GKYOQui@rh>0+%gnV6
z4|Lz`1xnSm_FY;@O55mp-HB`Qg&IFu#>A;A+PiXCv$_jw*0iI&J;x`PH8@Epz15VL
z`ks~mhGC^!tuY+oG9VJ`Wqv$m=?%}dq_$^Vn;BYN%4V3Utb`U#-j#U~i$5b;eW|Hc
zHCo3lHNw{Kw@yv+F=hC9P?lwCQp#kJBeSSsq9s;GZqkL+E-JwcW{;intF?or>EQdn
ztXOdS*>{7_dW@BVE5`Jx6SdC_hSB`JgIzzpUOU;U->kTfMQbe$z{u`cj@hqMS@5y_
z@e|m)XB^9xw_)wNF7)>okjdCAtT7iiS?HEFFeGWeWGY}udvfdVr*15fnj`?5@=nq}
zAj}$)Rz|6)^(3`3i^76SR7P9GS!;w{r0;ie=}`h>hO=Qb42mcwOFL9sMwH_J)^n%X
z#1ada_);Di(GpQyXL$ld%2&;D=~U$_cQo{YuRm9yT719H$)BYQm352qvcDW`f5W@m
zOIuOb&ALY9+El1b+BmuV#|xay>|Yd_roHwK4?`=cvow!G2g_=7w1JFgCB!surC>am
zeks#`#WF{hB^P_M3|ns|XsEYJO0Ug9vB$!RLsj_oDKyICG>WE7G~H@mX<f5L=1l+4
zNtH%*CK0J!tQNN7utWqmZPi&KhQD}WQksHVVp^SFG?3clHfL(Xj#X1R%J$>1TpFMM
z<`c8c?_3$9-1rFuR{E#Sn|3gCX@Blz|I$;uVXf`;g$-4WgcNQ%`fdg;2wc?1WB{gk
zGet61C2eI>{FRPxEs0-R>w>8*C0S-530&MsYQW2Z8G%?y<T@M_`Yep>t1z(q$|R!L
zHxouI<GvI~i<#$Au$g1g*|nS@%U-fu=AA)LsSYN<N`EWiM_UO3@BgG~1p!J0Jj@HN
zB0EMTVqIwXBbct<^-l}xfp?HL@^cBQ)=Pixj-`}y#?FZ?Z|}>$<bQV-uch6%eiL=F
zC^j|7NsA_^O^>><K4w&3Yb)7jNZ&KTeam&QXbcYxGIy0$a7>Fb%|IA%8PF22EEKwJ
z<a;a(?<HVOqEVSdtODa%lU}Q*Jd(eYlI=!(ck$qQ9uKSXzgj(F+?LJt!bDQC1*}$?
zC($A$Jwc*fXjmkGR<yuHMi#L(apVR5ILg7U{R_><-|p)p_b+x_Ja?cn@AQl~7Egpk
zsZ_Aee@}n$WxwBEya=&$>jCQ05{^w$*bJtmyupK?!ckPEVPGVE>;_w@-a^V@B`qav
zsS@i(z)D>sSwlz^yDVfoEDRs0z^_fBR+&<9?DJ~aH2p{^&c)l}2eh;K;B3Hr+G^lh
zoK7OZnL>05Qli#)=_+TnDVWGQDIE~O9+6tF73*9aQcN|5d4Jb!HMRH812yu1MqmW>
z&j3)Rui^|jo?0*yXzyvWFZ;7)r5k^-m_G-RwCVwTX<J#FbhZ+!LlVL&1&ayXlfj8}
z_%vx5XjwU)F{EJ%qbwtB0u~K25U^|(=l9wKj_<9YQJ+-x$}|XA94K?o9~qQn3_i6`
zoF^FJj`Yy!f0mx%WWND-7c=q~?U<nth=VgS0!E}Zj--;2qph43H)YtIMA<)Zs1oh@
z3tu1qTBK(u7eRDp0O||`*3$uuM7w*}wL6!8u)po)H|GnRXq>4Uh^FhvjI>EcSh_7Y
zw+J5N;#zgPB!)>rWvpBB^C_^{V%g|eE|Dn-9NSezqduV;wHb=BT5Ac6E<-BFmh2g1
zLN;FV7DQ{&QY-f2PdP(1OBB*6A|4Q=O<rW3NTVW-tXM?0$habIx>0ihwQ#sz4W9VN
zx<34|P){8+i{qZ|e4RPR83-&q?Hy>LZ&PRHMIRbyzwzan+&Tn0szwAb%afK<V5?;`
z;M0f6`qG~E)T*U1R%*TYbK91rCqV&z=L!o>Uf}4?GW^Drs#j;ARAb46buz`bgdjD=
z>Lu})XnkrlNKF!G)}(U`W}ZV4m7z@BBw&S>ux(dMPlZ)9!V_2scm7i~+W+xTkL}R3
zTInh0hW|3o)Z+{W*3$t@2v-bU*6CdJp}w}4T<+vnlm1LKmXYh)SxKTF9D~siR7;RH
z$s9RQC-4~RqBY0Iz_KJS^VAl)SJ4iK6j;U;DwaPW<^D95S_F|PEGP5$i*c4rOG@T<
z(r#CBb)+#tasr{!up&of;c6>Kq9=YZjB2p|ftot}(MEjyYYOGck3JV?_VGLb*3+F-
z8u1*wtSfu%hkJ@Iy)2Vmfe>*uMr6BA&bFNbYjBzN-!v063jhd6mPK;fW@wc;GK;2;
z9Ts^T*kq9y0FLaS0gfpHEVfuAxnV4onQTsj?!<yE0!tdJlul+-Ocs$<;vk#`X&jMN
zj_?X14$*8*VIkPPv+VEsNJ9;OLt%dEX}0J*Zvgc?1lH35%n}(fba|(D^+&o3*InXe
zhY$)?kD;UiSUy><v<NJ=TFE3dsTiA&#Na#7%Ep>YEck)Ofrl69qH~O;;)WUBr$*vb
z`#lNdnK(^?_eASNn)r$s+6b`<31X2AJ96OUNT8<KoJK7;GFuLI|8+e+_}K_Eqe;)|
zlK1%h1Jm;ySWgcy7lRkKdsqB<Px1Qevf0&W3Q<?0DQ(-cU8lrC8XUAUQEEY01Tq6O
zp6{dDkaqFnH`_S4J;tH!6-2SISTO;Mgx``t8@xBlfQ;K;5_ib1E(yXl_ZrxdD?QiN
zjvF;+Pz?@ME8+fssznDr5$UPDw59r~@8|gqrsuF$csh@zX*TK13_m*Qk6b_JKX87B
zciG={=B~anpW8%rXTKIr(n?-C<CIv+h^DD|3sS1ZK%X}>y4Pf|eyfH1ZY@LW1_4mg
zL=k0uLR0%M#YRT0FSTCWmIE3L4G2^UWSN8~Ga}=ucmeh5UX+8~|5}Om{asU!Jwmdx
zPY<RS2B2O57VAH@U^aTUl-zB9(4D{TO@-VRz|Q$iL959n#bGkz7C>}`u#G|t1^z29
zDewx^-FF@3fSra*>$OQ0MP<nWHy5Oh<w_+hwWjCHL=LiWw3CaXGMdo|ECl<$R}J@k
zJWwa^P$<tm^>wDl3kysyP+<Kinxb={;9U48-MK5@Ud)~k;daoBV^s-l+qPrdZWgXn
zgyR*N(f2DA1i`pb3lt8!!Ddu5#3j2q65Wj=2@$zgUS@=sQ&AmZIEr#`aA!H(^Wi`p
z|3-|3sULn_FKjTqz=8Gj0Fx+n<>b1zv}dpS<Icjx?XJ5Fv1Ns^jzcYCN*76$Sdx@C
z^Gh*FP#WuGTIytE!&SC)ZA+8TdjrjQ2Ia>7-DQ90r+j_%Ut=tsd?93Xr{j151M5d|
zKN;5*%eEDqt?z2jZu_}Hb^~0yn-|D6l^;er;ATxjh&H7S$981KCSkQGnu8ynVy>wg
z9{NN>o%l|Sxl?Ds^b-lJA8kDZa`}uLd{Nd~`KFw`;<~IeG(Z~grU*#f6X~2*l;51#
zTaS-_zY!h3HPlm2Xw(*-iq@Z8%k-m;pCDlUpFrR^0{KpfY?lO4_;FL|=7K_FMx$PB
z(dYli=Q(?vJ<c9ykF&?w<Lq(vID4Eu&K_rvv&Y%v>~Z!udz?Ma9(bM{|3A)2-(7<E
RS|0!a002ovPDHLkV1kP>)^Y#<

literal 24745
zcmV)KK)Sz)P)<h;3K|Lk000e1NJLTq005Q%005Q<1^@s6JOOdy003ZcNkl<Zc-rm#
zd7NhFS>FkNulqjdJX`Hmy|=nsEvdD(Em@XVY<a~dvB6+ub_gVa3Bv^92}~xFys{xf
zOqh`5Wq4;`LKv20z=9VDn9as^TgIC#%i3Cd?|WC*`mE=i`@ZIn`#eik*V>D0^6{fj
zsh+NS>RHbDoooGFzYD%``^N1Xw{P73w%p|9f4v7xxO+jqCZG8Jm*c75@^y294;?zJ
z;od_Y(Eo;j`+$Y}qptyozj3?l_Mo}{{s*IQPOk6yxL!|g;C=&#^1&aD?)j$iC~e=Y
zl8hU1_o<p#L{wG902tH%^W{&6FTNX0?>?75-YosO8Th-Uf41~F!DBGXe!s$fZ@?6f
z?frc4d6xf)8TjeoJ74AXyFWLpyngqu{orR^`ugFRS`qQH)+SG=x_X|spFeWs*XEa4
z*!v%h4jsb7hyB+(unasP@Q?$Tn0U>Il=VJU^KOLu1#Sj2Zp45Hf<XZ({tNF$dT&bx
z532O<%aXS)#WMgR%YNSdP4Ok&S6lg{i7b82rGH=iT$cZAh4(e^JhIaJ?0(iIpXu_~
zVer`Wo@3y(WR>SG?rHb`>hRuAi<rkn<Y8l?zk2rB<6r8Yr(nVE&}#`W;hM%y;f;=O
zd-Yvn><<b4yG5ei7zv+G6+tyzVxkNj{-p<L;G}5xSlN|9rP2q5EC<!VW26tf{wps7
zl>jQ}l2bWwqC^k@(eBR_#Vk3cDuX9libwT9D$+gSOTjBh__-{5@2g%wtP0*fHVq;e
z5D~E=5+PzypQHH0hUm{Q{x_d}_TN6$2iQlKoSUy9upY2I3$^uCufs<FGw?2BY)RDv
z>I>U0LimtNPP~}Q-p-P%R|c=fjajOtkL^FtN+&=DPQ?0_YK@b<%;K)}9@e$WOMtZ+
zs962=mw{^8aa9nHq9Rx^u^5x!T$+OXXJh;?bpiGOAGHth0r#~6mcacM4&{@R_w4jZ
z^sfZ@elaG-JAfQ9mI3E+*#X@YsASn=*8|nkleH?SgbljC<+0A!0#vg4>#ukLt>6Lr
z&*N3`MoeUF8RxQ8;8)Y!{i`EK{_TZ9gYj|#OS&$6eCMk^AZq`e7`rn7N*x%}4_H<M
z)mrgTKmNF`mTFU=TF+9g^nTX^l`I40%JJJ(TB;R5wZvMhs(KM)jjf=XpAql=$urOY
zn~%bS20o-$;u_`30(3mw8;@`2-xy<mN&(d8g4lkrvKFYWr=?nYvcB#u)vBP{tfjgl
zPz^q(D(b9>BasO8>A!#GxnKAv-7>{y1AEzQ9Rxn?NB0~Yw|VJLMC=>YJ6D9h=JJea
z`IWwMpuUo&+I;r6F-x`j$zDAx+lZxF={>A#saAD=Y%2R(`65~!R7-&+%d%ZOfVEZQ
zefF18?7rv8CqFW~S#Zf_E!F6rgX1<!{!&bIpL&-G60>5Oy~+Vy6I6fO0`)6#f18M@
zHVCS#v{WmUPy|)7II70ZcOHpi_pZ%?OEv?*k==KUN3QZ0BGG-Sc`le}!=QRO+}}3>
z^=ksEUJ$L4MNuVoK7B;VzvbCyOS2n|xy&Z|d&auT#{#HaA5=xL^Xfo#`N!T|_V;pw
zYW4T9p_pn__a{qZ^mQ%O^#c_c#7LaGR%UJGKBLj^25a@94Yh;p23o5T{Fxiye$Ou%
zn|!D0fcsnVWM7G;G8-re{%y|wHWH|t0&{Y`vcFA$s_%hBj8&g!QB=8Qa^m%4)0ckk
z&+q5K=s1V`RRHS&3xDP&w%_}m#>BrAEY-CH)zy>~%s^{oxl33*@Lk_hZ5~vz2~f$)
zQc_qW0h0AC)u2T!x&>C%<<^$pFg5Xpr@wsZ=bn0i2kc=E>y^Y<24KtH`?k7Np8zuj
zsvF7vHWsK~?>g1x@zB?6_SgNFqB!S>qU0J`s>_e-YM@&3-d4;q)r-V}>a-et#o@zT
z2)|o7m|r8tdO!f5r~V^iqAlRvhC#I~?poXZU9aNj#y}+-0@Z-4+LZf~bprL`IZb%X
z-IEji%)8#gaN2#Oxk~pZ8+LzdgDTKQ)aTAdl`W$FBk*DW0C&nJgZBpwJme?0-+iB8
zzgxX?g4p#zC0CIB$=5-kzOmll#y};T%Kk(Qs)BdQd*4vy$N!K0>>n+M-^<`<HP<yz
zUmH|imuReWEiaOM_rZfdd+S4dz(0tZO#tg~k!{+aHDXJGhNyB~OC{Ga`;+U?`;!f2
zf2K!6=|7L{S>;t+k8G@=+<l7i)Nt1wDULJTeb*LL6|ed-WPgJco|Ql~a9jmZRW+tm
za=HKKfF9-{*(k6KJme;}zxH;-zF9T*V9nP>_9ri|r4nq99Fylcc}K`n2kP-X^2^n<
zX^NJs3b&6a2kuHxH_9syR<M~8c!yVEsWuU)uWqT#(h`dp<6PTYiNEX4JAd}}hxmYd
zkO$2MfOUTnp}K!y#8v@6m~N~ZsBgehu?b7XN--6yw`pKwpkjlTDv%HrQp=X~Ag?L^
z0N=a&$N8DNzmE^xcpo=p6F8?RU`5tH2CLW;MZg>0a))Q+KpF2nuYdap`%0xA*KDJ0
znhhNTRz3!+TB^&RQ&7Ayr4pWh0PyMiFUOIr#9A2NfA6R?%`;-`_JYK4ji@hwJK8jY
z1(c{Y!okt+VgJo<X6QA_zAeh%bvaw_e2!C{bNu$NKEfY-;YDVufo&FC*T(r&UE=i3
znc+YFJZ%5KYslR$5;@1O{DYVH51&1ci7cYhBM@FQ_qS$D#buUi>1(Nq#HhM+rD}Zp
zqmTZx`GQTUt5~csL1P-xJ;p>k2yD-5$fvqa#ZS4m?hll>F~zGV{|S5UdLxbZJ7(UO
zasE3TfAu=UoUgL&o)Z7_@4bs({HZr{YaYl=#+Y^8U-y$(BY2?N5&pqjg&l8?@csaX
zDZKIg;Lq&gZ9`QwcuI^&pR0P^1NF5)1z<$gtFfgW?Y7<n@W2BPnKfMDh3@<QJAtUL
z{%aSg%gY|9hs;Y!np?Pc>jxRXZ9j|e&)M=W*s|Ml@&e546i(l`m-Ore&R2NzKYbVf
z$N%<z-cpY7s#s%IZPRo~Y>ME#u)S^gU*1;X{r`)F(c2NZ31e@-Wf4QS*Z5ce=N)|e
z4j5{AR0DNcU#>uXRZvOc4e>@ItopwLaN)w!vPR|om~!u*#^t*FYZ2Me4cAt-RPwi|
zO|yPQT{Hp-mg-g8{t2V|c9VU;^QyN+ym=cua?#VMLzXEw?v5DN5u(N%48@Gxc96H;
zG0y4FJi+sA!I~}?-(2=tHCJ|~@NN4_{Pf?Cc>7P5$hRFp?VAwU2~;rV60UQMp?y`}
z@hv-e<*224sZIT2#$pB<nJcqYYX<6Uz)}q+1R!F?tE=9y=ez#X=Rf~HI`}ZFMX@@%
z_myK&S~`l@u`u{BNZh*~d@45Bxi{C1PbF$l0oxen-fbUba^HU31CCd|GvWhV;g9E)
zKRf9ea!?at|2X{c4H5B~1#0Cp=;%I#nC$ak<ikJxTm1edk2MzOwb%bs;I@+GhrV@+
zSAA27o9?aPrph=!g>W+>`+<?}1&+GUqV3bzxD1iQUdmWFk@E2GH+k@(4)v1l4`5tX
zMSWQSFYAD+|7aDl;=P-*NqXbskAHY>FwPoqg%1iqtmT^!TU!n)*$}8!s!*?Isbm8r
zJ+tgRT&s#YP=HDrRSu5-C|maIhwt#*{mzK*+zKaB_?tN;@<Qr_wuj?&;j?p&>W&c>
z+fziH^C*`1^{?eazxe%p>xjd9#dgah#rxe?6(0DzF*m+yj?^8)oj(cnqu?J0eFQj)
z>T%RP2I(ne@g(l~FX2D`CHxnj#6ET$77Zfy8dlW1mAZ|AYOu7c>eZN}=Kb(Z01rOc
zf6{1KQ55mAMa0Ca&eJ<2|84TAL`}HBnh6KT|315Jd?l^Fn{(GYBffQO;8OloU72eY
zvqm|n5sZN^%)*|s<L<3f)Mq`z(P=Wfi|F;Q=V$+QgT_z)KA&twA!;ke#SYDSzW+y$
z^N!ndzWHs2ov)q44IRT*#$oaT8ea<eQsXH&cNBAS5pz1>#jkGT&mWKZ#7WN!SsSgI
zZk)4$Kz#!Y(~Y=4Ry?jMVq;vs1>o@Eez9~Q#@b@xxUUZF`YvOlx2dWFF)tfSfsL~i
zM8d4b)$plAEr{aVmRqae%bvY&B7cwL#`jp>ze5;R_)H3)no~M0$UC5!pswKV0v9~o
zGy>zv5Y0<-R7w}|W{i0M&D^&u=c!M>z-e!LM<z!&?IIpNm+*xzL;E?n{q`+Hm3e$?
z5mN?nGwAsv$cqcei{t#}A58I~zp;F>VVR91h-DKo6<1MGSQk{N;v!o%-lxxAnEu4W
zTejR`j~@?on#&4XswR1PE9$J{{^T<1i>mg^Ygg2!DL~ax_SpBbd*?Uf-|pG|Uc-0n
z7RG^RJ$!sYX|^GA;4;W_$TDbmV6hFS8t~B>rIC2d$Q~LOJW=)(-p{b@z3<@Xe&)^G
z?A*Y#x4{%2?KxNCBafH)r3dF}pWBJ`IXZtD>SwU07O^Ks`1c>3;1^#=xLAp?k-5yZ
zt(*OE{Xo_4S_v4EjkI*MKcalCnV)Q+O|$GEEomo&f4pL33*UO<0mSPS@~IS`d3JC=
zH}CpR{F^<a-yytbw=kw~OyLjbJr|owmVryb<={Q!8KiA!wV=^bUYvuE&M9#X^3emd
zPM3+A&y%NTxbX+>=3o5iJ#0(0=rbz5IH`s(-TgafD*XEY)_`marm=vVZNNptAANj`
z|8xR;35-$%>JrKgo8(h%9#m`qRDp1y6cdUYX+kf3L)Xszt#*GUOSRH-7Cl+secu%S
z`ro{roxX~grRl;(_*C9ICf&Up*!d&a*LlXiTe*KPY?T12hZdA$b*0%>Ivpj?z`KF3
zRLGjpXbFo=<*_;VgNA2#)Uz;j3+c&m;)M&idYw1?)GPU^Z@-mNJ1-{vO;5%{0B;Qc
z<*RL;{EUIx2(sW<Ji3+NdNL-jgrM3l8Oz^zn}*du#d?;?tlzF1^diQr--I@s%>FhL
zQ^_U*by<nFB7$|61A7vNUYT>>-f9>eUyFG;z^5_@sHfVznOnE~7||<)(g!@R*e~o$
zgr{=&=)CgcqS8nWosPkEq=>Bq%|UbUnUZ%PTZDQG78=SYW|Ti}DpT7m=V~{T9hoG$
z)WltE@&14MN`CB{ZX!;X!b6LAakgCM<Dcwc{TQb1`Se#4p3Mc*^BC76`x~gJ%Vyl4
ztO2UkxuPpT&0N;3{kmz>sIW(4?!3d|#PI{)b2G#37_T8yGh&vOF9x2&sGulOV><`8
z{{)pgD-3^^XZNj!trhs|y7C8?lw%7@qYdqr;@Ut5GzFjazgz}+3TYG4d1$nt(@;J(
z1ApFjOzw+0K71?grLD-c;O0I5=%2od@3`d#oO1)BBSoSwhA%wrxO7~x3kiSyte{Dk
zS8?t5R97EU$%^A>W^)YEub(!J71L8}dC#3ycE4>3IKZp_-VOZBySKBYY4Bd~%8E>e
z(8N_}l(~K4zoW8mit+b*xY^J^`NRd~Gcz#V48eM*33(HITk%~`4S-AY@Nd_Kv<~T9
zaEr~l@&_~U+0-+6Tg<by18{5?dMSa9@IQU<b-ZO_C*Et3)f&7HCil4+ICU%`o1NhC
zi-jtUe;L~}BAal3OBnI^6<{<_ZrEqwxUY@udy7c)7FFkE(0qLj+cZJ^$noBhF@EMF
z`-u<S0s3k*YVxYLE3e%)MQtI+W>ps3j#OOlT9Tp|?3yvR4*f%>Zg>S-zsu9P!>}N5
zz6EF6(8-{a3V9pyHu!e1RFVfZ3Ua^!PC^GY(6Z3tyH{{Fxa(&eOqF5h&WK}YhS_;c
zaX8{q#A|Qc!{2=73^S4z+{y4+Q>zTM%bYqp!k-^$Kw=Ov*PKsv_3m#;804)f8K>!?
z3l~5B>3#d&V!GvqXl;vijrmlo4p_2gK)Jmc@x5=_%a8obUTUx2j=I}1)}p$DR6fI9
z@9%K;+lJxj5dY|($Nbs!+3;Gv098l1G5L0O?0hX--tWk7H=M3R>L9fN5H1IwDw-AU
zF9TA=yHL9#Rm2P8G(_Hoij>+ASo<Q#7Ne-ZZvj8N#k2kO5nuZA-Mr>Rg>2*!TZWaN
z|DkvA-~Y!yXS&=14d93(!|yyiA5Ls7jP9xE_25&j+NRm4rCR=+E4jUhwc+wI@Tpdw
zrZHkrRo=N{J0JSc0rtG5LMk2H!YOQ}j>;Z1J&qiI0Xf{}nTIXE{lyZWzmS79hz}>m
z<(_T+E$rU;txSA#PW(#C3)4!o0+}d22B)BT2+qmC<N}%Eb0Al6!9o?{co-L~mug|f
z6uf|&gN_OJBb46|_`xY5c}K+O|LYX@ohajm=eXmBQU3Y6-pNn@>7V0<9a419d}Zz8
z=f;FjRw^m5LH8#cim5KoI?cv_1twgE=4;ue2`8>(a<Y@>nfbjlOx(~S-(t{81(}>c
zFV!(mwD{A9M)>(JJI+K+jMW}SRXt<bUEI9$?=kuY&&cbAC(b}4QJe#pDw+%4E8Yi?
zbX}k3Qn){boWfdlU7{3LOA*r-X7oTd7l0MMl>Z2P|CEq_v*mNYJHji^S12tm^6py>
z^6Xu6{K~VRA*t9wuG5;9N_9Yea6^ImayiPY3)EMtL9#K6Wv<cKJ8QbX<;BnC$wD}Q
zhCe+u!)O1+9Q%h1Z{8z(*9S(~{@OZu=RDDj@a0dA@-M&CWWL<NbPJCf3W=rW4sP52
zV+`MA+5HaBQ|E+vr>GHJTk*NzQGEA}xBx2eLVzADl^{O+Tk-%baRXwPhMt_I8qikp
zGaLTx4gB5=yk!FBz75QOiP>{zjB1?oqpx~5htJJ$sPPnW92c}oUC~k*fjEaBxO<Af
zcxjGPEiFpD>jmmuC8*Xow=3dft*o%n{CqjvG^;k04a`@R$DHRs9990wFD`QI3uR2|
zkrQS9ug|5-mpfRoJr21F&`h{>^oJR`X^j2v@En^KF3c;U;5*=3KpSWav=nVCq(B<t
zEA3jQqJG67s50Mok;Ts>E56e3oVp;mMZvdWv8{Y^Ub(bGc>LRhXE2;tj5$A>@Dulb
z7dzTpdX`9*xflVg6}$>>m`wTLzrBt9V|_i-^(*RqCDbdkRA!BHyGGS&<9NH;vG<Kx
zs+Ahb-Kjbe;fvn$tG^Rrn`4}KG2*cW4Zj^|D!A0KCwVVpyYAqocX*~#;rLla@&G7p
zYWS*yv;=7hG(g)$qd8MF*P<Y*eUSMANWO5BSpb#kf~r&8?|}>4qM~hRrSN0}j@=9|
zeV=e1;l=r!oC-g5*Zas9^JSIso@gS@3H#F~KlPK_@w+Xr+1CmwnGRmImxF4l12fma
zQVpKlwIO6y`;lBxpw6b-G#i<w>1JKx!z2IbXp83`E^~Ui$_4U3*)8b#s*dsWAiH<H
zm)&pjWRdX9(ct3pCTJ6A3bH83B2X{fS1M=+TrX%J1XYN&#0B?fd<fu;1C#f`Wir8J
zf=vaRf@y&)3R(|9uBV|rH2HdX=54~oy5+?=&kf_Z@!H{g$nvbPx#4(~fLCve`H}nJ
zmw#!Jo4)H!sNTj0{_%d^R$WBZ7k0?3)5^J$I+a=D+^#hxwMvX-2FH@V&ZcR)y|zv%
z<LCZMn?wX#asz_=U|Pf6H2DLJ-=&l$m9IQ2<WUhfS<sF`1QJQNyNgK#7bzNP@iY<w
za}5Ez<VD)o1z8bq^|Xi;;smVi2G#+bzP)s>KoY_E1ST_x->W?T6x1H^%qGHpH@urC
zo;^%H)NS@a($4vbx0iX%KUDIGDp_t3X;Z#skze@LD*yG@bN=^FTIQ@7IA?Nw0`(>C
zZ)Nqt4P=G#b*oO?&6qyBFyBi`wD?2sbGGWejPKe_w#9MyB}1#DXk3(wjG!jeth5uX
zmuo6!n-JYD<ON&87lFJem?C(WteZ8;lJWxrNePk^nlFV+u`~|xq!LYlltW@k1~j3q
z%3oXI!(+m)y&Gm8GicK>5>IhM`6iC?Vlj4aSS%TS{MTpsdyjg4^hZx%UvU(X685Vv
zF?W25t)+1)qRbI*093NEhVq){c4biYAN3Zxy!Ukrq+hpV?<+i~&y`)Hdyxs{)Qpm~
z1aAfBLT}Ht!K6aj8B89k<r$vF31#?p@FI9uBzk#4K`30H$p!2Bfx6M|vH>Nj37w-#
zdNH`e_Df)5Lp%!c7Kpcb>`ujOS4Or7rw#n42xclud8csxFvKEEmZo^I^E47wLUt(7
ztPb(Z&p_!nJN*3*&Z5UWzxki0_>E`AI9n<aC($)-)2tP!U#?>+^ofrfvshYW9bdQV
z#Il4XU_=lTF)@}fDZ+Eda!eAT3b7Z4y^!RJZ#x=`4W{c0q-|m3hDqWbF~)0{XjXbH
zo30xaC%sro@(^2vk%3UhvL2#Dh(<hTJ~xePx3M-NiAyBq5^=diG#rsk8R9Ka8uvVe
zGVX+*x_zD#3uVT}l=JOosIU%L5Gz5B<^TWm7=QnC#K-=)$wyw;i5)h?*P)@j^0{3J
zRAwpHa$|L@l}5O~wqx%y5KxK<q&pqd%S4G{%NLLS4d1`_wY;ucW}#yc@9DIa#kynq
zQk#WFO72p`8k`EvOF6ZjF_vJ3{1Q+FOC?T&l`4v)Chz0i2*e69Y?wZp(wIq!ONKo4
zv>SD-v;*@ZiYOf~k(6SRp_o!R;`TjFYPFnq-rZpIo@svhi^qwga&YfjtU)PeUe0DQ
zfAX<Oe&?wnY}pj$Gg-1u<!UU|>gRT)^Sbo@=2|*m(?H$yD_$lL6uad>rQh{;PN`-I
zW92eihpKEH9i=ty`O7c<JBCVcV`Atg7V4IZ^9@?*BB`Fi*)upZk4+=CPkw-Qsf?gR
zrl09id=J3t2I~slcxzy+%a|aULK%!TMCDPEB*GF?jU&ojAdU=4GK_NumkYLG83m&G
zDxdpGmABt6{PM5=HqXvYQyVS^Z?Qz-M#&??gP(Nd<#ISC8*0;B`#^mOjAXOHyR4*x
zb$zF40t-Qkc(~vpiG~Sa1)swZRkqcJxM}Mo`?pQ8XUh~@#<oz2Cs0PovI^}?nYnb1
z$BsVF$G`IDEZPP(PLUd5Q?NP4TAHm6qpcel9e)pt<iy5eRmpS3_`d5iMQcZ#Vw{Fj
z1HDCJ7!Q#FNjy<mut|bVgqpPs#}|3&)GuL^5|wzEp=g|m>K?X@-pFuyj4XqOoag8M
z@^gIQ)JxRH3Q&pZEr9Bm^@Y4@E|XJw`9LL?Q<uBG&}_tF8S}Dae?|kPRSUYb4j4J-
z95$;mRi0qa_!e&4xr_a~x3ha{2g8*~lo1x13Db*)!>5#)1y7^pNOQ%bMDZ<bpS+9r
zz3xu_=*i!pQ(YK%eG3@M<%CZ23~^+@2(|!;@xe-&T!Q;^AinPgLmf*HQ7{@b6%3eI
zuq8pP#YUc?A!VwXa%39JP=}P1X@8!x^(T2|HX)W6A*1DTlA(mkSlr|FYj5RQpSRUt
z64$?fUD`Bj1nR7yle$_{XN|0o>yrJ65zs&_35pj=mc`U`l<h-XxpC`GZrrw)z1#M(
zWqb#*9j238X6x|eF~>|@X>~k-ALqL|gJ>i~HuV0ScO02rWGKFwH{ST8eEOwd!4K7o
zLER#D5sNn|aRSB)VnX(3yS1xKF}W1QPzmm@=nqO*kJobyQ3O;qSgc5iV;HFk+lCZ_
zB5J|_g^4MZ5-4?#NJ2$QIF}<$p<*o_Psit^MzN70vPmE*E-M3BW6+{JqDy+tS7NEy
znESg7RBXIJx+*0?Rzm3J+cc<>XF}W=WBcfCZrrh-{X1{w#yvMNJ~W9K%VHg7=NzYx
zD)ojZbNP}B(<a>(Pncp3jpHCA<h&N*96~*9P#fCIfr)qX)ciw4mB4%N*227WFi{a3
zMT$)!?^f8I7BQEE?;0)$aoyPg=^1#NfF|L4R5HY6WpoG*>`3{96>^bYXMmm?H7E`<
zAMwVW_wxE%?qPDcL=<)C<TEUGrkPI{I6XhdnVAL7&$pRtd0JMHSc=B^3f1zimRqks
zz5z?MPWHE&rRrN&vvGEVtlOrM)s=Zyi>aJtIK7!S-S<`w-gOrv)h&RfQTNO)c+Q+x
z+N};gFN}TRALA%AVZDO)+EZN_oHbA>sL2XWLu`gbEMyIK?tBv$7LPFPzJjr~C_pMs
zJthI0D3K_ZZc$X1v}|nGN)@x=;`^<)I12B>l)+Yl#foCXmQlFvjt2HGL&1KzWzVvl
zscakH{EF{j`_wL)xhJiAs)=E^x}QBGFfr;F8P18yO*%Tmd~1da^^2T3JIhO_W;t=8
z$;E}7g|?@eC{a`@vdDhmFTEwC0nD3e)2yp|x<*?kT5U>4uW6tzsLvT{+{*|5=})t5
zkKx!8p3|q5M!g*vnuSKHm9X<dosf6QnobKq1>RKQ(R$+G1v3zg;JoY4@M*AQsXA`i
z{q4-ZbP_*0(+fIPa!lD_N+3~@<*8zQXfzuqSPw=+(B5s~bQ|8HA=a{qAeCUTYz(mx
z_HR$wwx<a`E;u&bI9y0ODL2Tiy!qgF<4nYn=_aulDv6<yD)Xr_-4K##D4B>#JkC&c
zoRR9y+%%DM&wV+Sw|B^Gou-@R{LFbyoSNp?v3ZW4YH;FWiwkwfV#yFmsdo+rqqEIr
ze{0a6WwWkOuZ`wsm$G5oBkUggRy6XQIhr$bK0r7&7LTG1oD12X`e2#76d9ok-g~@y
zRD;C|D-ny!AS&KLEO=*7rzj4Opkl~ePEs1@rmf$`vorrUwnovqN%3WeEm<TAg)H%k
z8L(Qm09dym$`aK+MIu971}%dvE4HLm%Mo`Tn4>xximTlVR>hFDJKSIn^19o;i`kCD
zX-aHjum<Bp>=Z{5*sTh=hfd~LTvRSK1bY#zi76)~Dy0!>BRd(Nx`VxUI^O+F86+*5
z?Kv(^pW*0{b3FIl49~o@$kXTAw1+AK1hNfef3l9H5-k9`30HW{N($QT*H=M>&mWrQ
z^>5sYjdSu;Q7=J`+6Qo{7W{ES<Jft{Ige@pme&v;sqfBJS}dUfY^>tN&}n+S6PyoO
zloHX(TTDzGWMb}h%;cXViXyxhNQz#fr8oR4PO*8=_UpPq(>0UbAg17o*(e0<QiD=e
zuq7BD_8iz-XVGboW2Hc+(_*`S1qW~XZZ6e3f$MH#at)bZ92qEqiy`ZT{-PC#j3Ks4
z7KP6l38c=^>In1G%7qyrHW87HDaBQWh9(%D*v}j8_PqOB91PWY?9-3)^Z)+K9E}Rv
z_Z4S<1Jr2^7u?2LI=+{YuRaaEi8@s`J<eo-)Su+Y^C<^zuQ4=IWA0que@zW>QV}DE
zFRys#aLx@_tAR?FFDCPxAQizxN+|&+f?Kp<1+w?Wdk7%ix9dGD9DNB!FM)WZl4B}S
z5o;A=m0kjvJlJkf&@EhPU_gj1+-DTxt7Hh0iXxG)dop8uBInYDxL1dAX~tCc3U0gc
z0T$8>R4`&uF~r88kzi|Jt6_vcZ3hmRkx(ZqMIkh>E`TfcLTtnDA}eIE$9SRHQ5G{e
zKLgPbA&Db)?i=Brdtc9McPcL&|15EBv`8Q}9;h!>V`f?KzLt5qfAA-Rk-n@+{9Ct8
z(>)>O4(IBh#pI4dAAgCc3Z;tlV-}TuG1LcZ<Gjavk8_^fIdY%loFjKR&V~Cfcep$V
zc9@coj6h{lh=&bC7Bv<%5o%&`Rgz?sy<5JMylD`lP*KbfBo&Cu;Y3*pP_&^`)hmda
zB9s#pBVZ$l%3v#COAwVHDH{%KaiB4I$D-EY@|^MXR&KxXduXYUIwe<&!-Sc<l296l
z@;KxIjd~CsNi*oA&`zP*316*LX?4Q<W1|htj?n19VlxcRHj00@ywLJ6+xE<5G5_Hg
z&+*JzOIhL#wP{x6)vd6Z%xsiFDwrasSbOY!<DzFE646LrV5adEW-l!Axz9hx*bX~L
zlti2sr2~)8J$W9iRTog+d7O9T&Xao$uF-j1?nyh4J4i;Mx)rKBAQ=`&3`7RC7PTch
zK4WtHAj9T$w3<p5wXr23N+@btiZ%3lhqf@_R*LUNFgD0R+C+$I0aP}Is4NT(dB%n;
zrd0xBoHLZ0H*nM5@1unySC5w%ClStAC<*ZdRJMRmU||6o%>b-crnGaVlPS$qX{ON0
zgmx;l(k{rLohqFy0I;1xtN8t5!&94z`NH9IJp9-hPB)*YV^>n=Gs_o|ukQY?G%H-a
zz;^X41zQrP7eC9M(oUX#y2JQXjRQM&bKyh^n4+A}wOB4#DxdePmPd<vP?%)#UJ(<b
zC~u%O52Yz#>?VjN6mKCvD`d@LTpq#15nkZdz3=0(XXbFWiBu<vDoRumj4k3AQ&^_~
zT|+S;W->PHK(iIFRUs}xTnbiiaspi0(n-s-nr)=LjazU29&)ib@1WpLSz{o9XbLJj
z!Bn7e8tMzhw6zOX(E!d0ktxb8PKj(_RODW81|ly+Mf_z9#1W)z&%{K`$=L<|_+!ry
z)8u@1l6Z7#ApejR6=v1~)rvLD%~js72cJqXBPnNR|B78B@8Qdzd!CWE4>2-6%Iw9E
z#pPa$FCVUMuQ=~}Zm}ngWkSX$8rnFTDYS+8bIR}@*m5&a6I`NnE(#SF2L4)gsLwRX
zS}ly-hQ=vU4Q?<ghd3*az}V2<vA(ZfE(XMgI7&)jsu0xzpprNc{wl*tL!jv^<PtMB
z@kVTUgjOpJGEycKcqu_N3DujRIt9&>FgMc;+Cz|OG=R%{gSUe9;R13VA{DHHw}ftk
z2ELe$Lo8XV#w^n2cmMFq;5wXWJc8XeTC|OH^MU$`=T)y@u5eu;i7Vk#DPYM*E^v0?
zVYUswg+qrP=bdkT9Z5N+zUT|7paMuPxIO1XHt01RR0>wHr<m;{99$Kk0kbEB@tcKP
z?+YjW^pnEH<0;c8=9s^Dfo5w4M~8O14kb%e2^J?VD@h6BL?9{}&SoImlp<h{L8<~(
zur<Y2f-6lbkc~oJpy?A_S|&3dp9s}z36UahG>VJ}m78Gf7RWCtv*)1Q4CNMaq3j`|
z7$f}}Uh$b#1fN4xh`_6cUS|{qwrZ&?#N+VL#~!EE@+>r;fXM`7lBJ{fR|TqWVrH(y
z6<*slBE3A(8rqfTxl|va8sEWZzVImbzxEBtq85R=$2si-tf*b}zBH5~j0qg9q>>Pq
z4N)10Vdhj$=Tpin-fNI;!o{z`iSr#Aiwk(4A+|&;H8Rt|MnYT*7N=5%P6bRUlpw^1
z10+R0trD8erV3I8Y7kcnR~SR7qBMq}<zUf4?nXGb@C5ZEvsB6xjEqk)HaS9NDq`%G
zU{xy#9DNL$^B&g@Vk4+SyvItgN*FB$O28MZSdsw{sD?8sE`Yx}X8G8szRJb(3#9%i
zoskyh(gdoyj1IMa_P6?sysVkqt?CM86Z`(y>=H>8qH@e)_874n=F)`*k39Jm4(@*y
z%?la1cX;n`O0WOtd^f(a#7UV_se+hLQfPMS%v`L~Xx3?_9da8}J-LN>9pkQV7jAep
z)Te8x-%f`i^5$YO1X?GF4doh?W5t$)R=F6DDfK6EaD|{yB-jd20jVmcDm^z?jv%gv
zW^~$87J-(F$;hbtOUyUsIMX>#wQ~d8hHl`li3neVqhEyPMT-%Oi350jZtyNIE-+7I
z32~&Fo@86s0d$Fep?jf>Z;Lqe=+nIT(pe%q%VKn#%Fwofxka;ym};GkuTm)C`Hi-8
zq`$l6x@>!wP}xt0Epzi<V8XtM7hZalk}Yx5jysu|ZKBp9>M=yvD8iT+6GbSFb~?}b
znd2-rFR{?LM4EN*m@sG%jS`o~NgFLrKT)H$J7(WE371YoW440NERcY6n5a!`EJ;-v
zN+2u2LK5T|DHl!W986qXXc0&PQVCzS<SCVeN-UIZ$PRr4@?5AZbkriz5GJumRK^aE
zQ`xzViB~4D)A96|EJr`NfUlp!G@F!7Of4CrmW)tIhKS-4)_~Cv7N{zj)1ct&Ls2&_
z23NiFjBStk@^dfp<Z~}jj#Dn>Pf(rOxojBrN&|Jdd=F2d25mOR$67}t>#DZB4*<2e
zYeyY3GY>Nyzlz76|1+j%E-_i#L7HbEV;Eyd^GkSHWU+OUxyA`P=_0wNAeP7u5!+F$
z3?r1Wl7P3kj;FPlbL8Qe+6~GLuM;kv1ece<M`-Senkm-A)P|rM37rT^rN9Pt<!}N`
zR9tLDIH8GRN=0w5)VEe831elx0%==lDYU&s;vq~qf$9k5sV!`|ZHQg3a<onh#~;b*
zq;=BP9C_;^KApz9HjxNrTccLm#%OID!?h_Y$tdNdN^A<(>_fpgcODU8`?i?p&m89~
zPd-f&=S;UBWoY}Z0#v%m;wS5aYM`U+H#7dFYKk=bYNlz{-}WvdL=(#F`Nyc0r+CdB
zbG-i6E#%~!TR6^BM^AG2_%U8Qd4%~!6KfJGl@V&?VUnndNQE#~U<)0sV$*~Z@}|<9
zh8I2s2fr8gycyaJP;bz7OnYI7I57-Y!_1#aLY(Exkd=d*iCjn!y47|~KuW=FMkS$C
z5+Vx;A)}-sxJ76i$Rx&=$FV~tqOl1^Zmh8Hn;a;-^e{B$GF-a@&S0d3*eXI!?&ev@
z&N1J4np3kGMk6ZmRz@nj7_IGOw7Q+~;cb+X3P_BU;MtQ$`RWT_#Y8PGH6N$8V_R_n
zYq5Ch>H_tZ1}t>*b*yV)sn!EkA6TjxlM^@az`OrD_T6v;XInzG0(*DD-S^x}DQU5|
zc#&i0&hq37r+D(&lN>oc&!xFVEJCeXqf(BsHbKM|@<IZ65K@~z4#yvXy>Akx&p_T%
zwC*V_lt@a3a#<<If|j6Kg0uuwihf{TjCz@n5fT^t_CzTqLMaZtyF>&VfksMhAjOkn
zv6WGxkt&rPW%j%lMt2HN|FN=gT7%AaRxBq_P$EPkj3l5X5QmK%sx9i-Gt4v}qjf3=
zKg3YHjhnXb=bqd55LG&yKYo(g>5KT%9HTq8BN7d)$h$I2wG!}F@<3)Yb*#$*w@qb#
zYbf&$#$6()choxjdC%KENZXI_$l(r=H5e04R8lewRfgF<HOj8tH*@d+RNvcRzB$cH
zr%&^h=g;!wvki`&YS3v}lDI^*77@px(I6T42Auh-Qrio=Un4Z9h4dt3iwSWAm9kQ?
zVce!t4nw9<E@5&yEt;)1$P!5mrmUD4l1NBGM<xiJ8%3iK`(y$smSlK@^0tUA2VvWt
z%84h0>1T?8*&=SDm^cy<#F*Zx>ZFclt4-SJkl2_V<HOwkiV5y{#Wr4j*BA#6Ze`0v
z1!ITFqI>zHk3G&W{=y;DCaY4ER|gDhD_qN3k_u*{Q##9De8bt_>I8jRz7bx+*1B?M
zH}8DoKgQ`0&Do43j=_cDQ&LFV%3Q;-Fz+~WQYn>%(V;SvBYW9*!(QHaH^g?1^K+MY
z;<*{V_|yVVKYxztS&vGU+PI}s1H0%s^Qdy`dzBmBAe?y^^14zg2_q#X&V#F~ltN(c
zTrheX6&aTlM=J(fHrPaoBc)`8L^PBox>n5!8A@)1@|0!#CSlL3Vg9^w>PrfpAm}DO
z55)r`xXh5YGTM2AJYS?liyf20+;-PiUVUJM*WJB?+ism?Y_bBThMP-RxRh|=r35LL
zDV5;^?|UbEZ`jRGe((=*qodb0P+#%9>Xo=cx%%vHRZA68V_V<C+g|sR2xH98<QQXV
z=SmcXOv88SF}XrZ$gSXFNEbcxbB>eKLglzHQ5#{`=ooK3coX0LO)XmKEH9p!=PNIs
z<SWl!;HC4U%$*%39j$WwIoS7VXwEwFIT)&hz&-JxRw$PhQ-L%ON<|dFQVo1BNkV}%
ziiISGk{#$LT0v}~0bxPPLTxwfx)-7tUU)>&hC!UcWsY_uqcvAYJ9AXa)7*GNlLKR8
zyn4@eUh}GP_V1`MJT(li#N5T03(qCI&?wQ)N{F=>Yp^kxMkrODKaumASKrS6`Y&4i
zv!DHIn5bUUnCf!tWUg$OVzXoK8v#`@MS(7k^2S&GBdncd_EKJ0F-44!86}P&inJ#>
zCK75|9Veu1p|cnYlX(@=mS?)|dF~<%B?((AJJ~a_ogaBu%8$KofwS{<o;bP4SC2<L
z^VyhF?NLVVtkRq@FbWkMaZ%Myl0btY1>=L_A6<)8P-RRMm<^>k^tf#i$(TY*-<U$>
zsHAMYM;N)maN;poIBQrqmy(@rQq8BidHV%k@iyVU`?hoN;H~W0H$vHz;n@zSo=AD|
zh~?a)F^xPX_XgjM<5VG6G|dq&#0cdCYGtAICmr7Q&b#@a{&Ah3`;{+}jMj>gvTJ3j
zE?@AuDF&&EEKzZ}7M6;F%Ig*?yy4b=NVT$;x!JVP8!bjKeIfCjgNuYD4niKLXxRkH
ziUjG;c34N!szZ_por;o;C@q(BHie;c2~*{*>>Qoq9XDmX@7@;k=>kVCoaMxe%H!<{
z)k`Ckn?uA^ivs1gCu?{p1&ft;6cZH_$%U&kwwQnxh)p3{<CRDuu|ixn*eduT(0b01
z&$XHR!XkU}I(OXddBt}dUU^rIJ$qk4JX{U5>=w|;K|JkSsyzI$Dwk#iYn41JfRrif
z0?{!7lE@Gj%7Ie!HBB|*$xnD5c>C)){hf7w?T?<JR;%@B(bvXObtj!RGfd$FXGCN(
zZJPB#r3I++dc@s(zK4;K+nAqgV~q*)m!db(-O*w+xIynADM{e1cr5@H=)>49`!wiU
zb(+vw49(<n4YDz%r8(y_rE)Q1JQ-%&<OsL!$hhaW4)2u)7cX7n<R71;kqluEjFW7y
zVJ0Jz1X>qeP@w5DlDqqzY!K|Q2#GP&5~u*>QQ&OO#hE7VcnXUx?y+!iD&qDZi`cVw
z8_7r|AhQK@JpQ8MTu!QxW<tGgNmJ#<d*Oxu>_hP}4?CeF6KFfO&^UF)dnja5$!s79
zF2wNkU&H_K?zeO5_zZvb)HJ1}Qh;H-HqAyX)nI{iqZX@Rj&>)LueMIrOG!n^+RE)y
z?`7AHZ(?q)UVut_{Xcr(a;ORPSyh8-h*2UF8nDI`lhVFmcAD;FnUbd9av^IA?L{R?
zgi;l%!%BMy=4O=Ba}i@NMof)XnYh8R?KMqO?J#@(5~sg<oRhxF!me?)+&G3!BjzsU
zSSw+U&l<`#OKGfd!&%C?m)e|vq0ZsMbw<y6UcYmQgKr#S_r7r|W2KNLra;T%E-FrQ
zGK5YJi!GR65Eko7tEF_>LYfJ~Lr|)D7N&)ANxH%}J;r)hYQPa_(@r4E3o@dInMgQt
zsKn3y@cTIPk>BCjnVdL@10t^|P+w^a>n1Fgxu)4)f9N339lN79a?{@TFgxGC6ti~P
zBl>k4s#+8|Jt_t@zOY;d7X{vtL9l^Lk2MABw0JXJ4N{*e&M8?(N!voZ4)wB9DG8M!
zWqt@|91P7_Cd$K1ZmY3v=Q!Km-Qkt_0+0RPX+HCZm)QEADfZt!L2EG-P-o}boO-Fw
z?70QFlu@0}*-gwVCu@A$mPtl#DACDcUVJ(t-78e)m3A}7BeY!r(n3?HH=*8ucB_zB
zDy(zZFs7&oTW>Z@pAJ+Qqy6@r+Ac?|;1CreacD8M9ffmquHh(sb%<a1@$cjZf9|(v
z_%6Fa2e&3|%KfcW4>MOr^jj}bUvF1)`2TR{M(#ZL{meHyfi2y&h6Ruq*f2w{!5W&+
zVP?=5%~`?5;G+O8)j+_r5_pi^J>S|T4N7sca>!C4i=nj$izQ*UqEv@rb`+*_%g`C+
z##>@udR%z%(JG(+!s9&id(-^LzkU<DZ{Na^PtUMDw@jpMUcIfxf!nt-Tq@z35z`IJ
z)6?+$)1C`$!^K6oyW#nk_ZcqC3iY<KxTrK+kYz%i7sDdOx;n4Ll1(4R+8PZQ+95=x
zz>bY=|M+*~y`JS7JY@yAL_uTW$hn+blPNy@1Am8~{6GII@!0slMEKQ!s{d%enXFKk
zB&ch-zx5Y@`-PZ;H~$csFQZyVOsJ0QvQkKw*{EpGHTF7ET5y>p46iyT#BsQU!_^$>
zLHJ@2106UH8ve$IO%pyUM$9sy(^Q)CFjMv1`I?wdeQKV+{>_todiIYfO&#Q0-t<~#
z|MCn^{_cysc-Zs)H@}J>{2y+{dwB5~#|tNw({-53p`I(bGoc2S!xs)IyALQD33IbS
zq&B<<3Id~`PWzHfz5Ah&os7WfcICoRkh0=>>tBkc1-@Hr8@x!Rn2ZXeW2Hzqe8h3r
zZMX3QZ#=?({NghV4UH8`3(V$Xs>}4THZ=)NPdIZUG1Y3DCA$B2uEUO@H!?bQBlC+3
zSZj+av-ShxL2oGi0Sj4yR;{XGtg8@6^HzwX0ID9J(dgj#Uw>Xy3)Z8Cc*%PqB2bq{
zx5T{o*bJZe{fj)_`Xn<x=38F%eZ1w{;GM657rp}j@|VBJM}Gf5lbRpq-QTjEzj*-~
znFPLhE3BH!a{>cFg~d7H*{?coxjUlM3Kx>|q4?WfD5XBcO1`k%gI}EvjO`K59dS6M
z(2Xd7<teh`K-cz03V;=(Y6WM_=i&GqegWQh@ZEgsD=%_heQ|NGZK;;8s#|SBdQ;oK
zHrl3H4OCiW48B=n|L(Vw<sM_~646{)X<bh-uO~(Zo>Kc4M%SXzcX6FG6f~U+Jn-BJ
z&WCI%oXFy2I>qH7$W3#llPc|Ixay*E#vlFOi#&Jn5nh}-%#MlIbMZ`r&pn><$)k>6
z_<!a(aq>LL$V>d$ryu9!`6jiRkhhffEOZuyv=ykuJ`;QfkrAGMT<LT?xeK}wu8^n<
znWh%vX~Cj)r<A&tfp!}zQwCd6vdrPU?@_l?4{0$}lDXpZWJ;O~?K})xG*W10VYp(k
zm2+|0@P>V_r%|5?uhsKQYh?Jcu|=Az0_*-|GR(5%Y?~DqS*{*a^((R_s}RRSl*+||
z??P0}$iO7C7{m-RBD)*fm&;X3kwF$$c=2!7U8$Rfz}NXOgXdh4iffqQajrY8q2w-r
zv7IX0Zm|5-pT5AUa~F8A{&7mBDJs<|yn||F_|jj)@#oKxXN#yroLu-KpLzH^JGKS3
zgv*K*Dg&D>@;nq$XU+*T=RBrZ1l6@h-N6ynuqs8hkP+xwVhzcMBtmr@IvtNg$+Da@
zb)=ai%{^HGw9JJvSUV?7^yJWV(8!d9wo-3HJ%X0*!Zm$?8MDFcZyB9=#XjSPEY?z@
z-^R1QzQ64P!<!aoPaXs78Jnt5E|n3rL6y&U*Pclqj9L^@wO{{Y&_#6h8Ko-_S-egW
zQ)Ic271qlaGm3c^P{qG}kt%djWpYQ%GtZsj$;Zwxoqw5zuTv}U!$^X$p#ga6c#e1N
zFbpDPn)VsK_~j#<J=0-$$dI`(Jws7b>w;H-EH#`t8l;U}Ht;?Q0J%abM}2n+ybn6B
z;j;{H6|%e-ee<pufpa*oWL`<V($Vm}<&<Ww)H_NmRXSpz7U3ohkDjgb@RMIAD*Gi1
z3YM>uTP^!r2~-<s>AVFvv`l++GoV_^gYLEvOwDoT(qChrE>oH)Gqq(4V<RKvDYP0H
zS?0R9>IYjr-LZajuR8F&Jza@@xuP3Sc`Y_}S$e88)^w@8LXKdHm}Y3i(sE5c^@+oD
zIK`>Pm#9_u6Wb9C31U2*%ut_qc+G-5QdA|+Tbyq^!RJ1IfP3%V#kq4uG1rIgPZzkT
zVl13|LD_p}aS;@Ox~ldyDh58Ys`RzP2(EKvM}$Nja_4)3nHB>Yqy&6%+^h(3Y^juE
z;tDu%T*&IooSNax=^4(So8f%=IYy^$3btN08mO-Vs&0XFa}3hWg6eXHq98;`!b15l
zC#Hpw#e0}Jf1c{t2osazjEqh&M1`~iSvw=k!etw%BVl{jK*@zZ4Zknxx+DSUW`|v^
zc2A*&6@vWk*uEC>hP83Sr#|%<oo0hmtwTs`h@)}hcm!i(jFB*9ohe?6mAjH)O_fFW
zRi1tBUT!`xNu^dLoe#CD;LZZ5yoR3Q>_u3dcSPlwJk_36(xSBBeLn~9#aKlQn&(ii
z3FT2}&UvCJbRe7wl9rLNBuPxEWJyYfR9l>DTx9mb9MjXY)EArNohG@PVUd>@+O-pF
z;!V}5SWYWvaKwI-3k22{16fTUYh^lfTuoTC&(LTbWhA?aEWMq^r8#WrB-P;><KvTz
zj!uCuk#?Zd&T+Z#uTblH_kkTQB3<Fc!Q##U?Rj9gj`yMEVT#QWdFGki6?6ExmpFOs
zA}#+_=JTTrS8u|~5OGw)*ccm`A}-S+-ZNNJBC<oYvQwO2c#J2X+Ra^e?Pq>rP%5AR
zP7xq?QsMk@&%V2$(=LFoJ);yph4i!DK@06&u)3q$V&*S)f)I&`D3?maC5zLXR=&W+
z`B`QzU1Dy2p0w3QeTtU_+WC3%sDT|WF+92#Bhf&C^a?E1a*4{#2(QTsLR{-wssY}Q
ztWdd6N(q!a^VyTkH=n1P?xvRRrCr~`?D>ntl@cRkBTP(er8+W!H3?}OI<368qA&l5
zU3c3RX%ksS`jIg3*%K0xptM{YikWXO@RdiO#+!?rZGMqbX@bZO5k(b}q>3$o<$Vac
zr4aNNEJk9)L@e-Cjvjd>yZ3IRT&c0JnD+!rymmnn)CJF<R`%Q(N*qX6WrspNhk>rc
zz-~fU)VUPKcO;yDA*NJQoNqIqo?&kK5|?H!(P}oyvJOUD<jkVdBDZy<Y>BHAR7%@c
zUbwVQooelvYVf<?XiKMC2fsF;l7ZjHNd*$2<4@9T9>Jy~RCF8VY!98*6c^5(r&O*m
zF*U~6_!es8<5&}uwV~C>(V}5yY&X_Y26M)+XITfUWBnLT6%#>u#Pjf>$I!gZ`POGq
zn-kj_ksTq5hKQnCA0R$V7K1OcSc@?+NjyS3J;$Zy)4cT3E^fW`78VxhWv#0HBCoM9
zd(P8ba2OMXq1&DgoAe5s^kT0<A0k$gA*j?0^XFTfntqo2e4ToIhAiulyEeI-!Rrjw
z2<p-x8W|(0j8cxaE-e=fcF{NM{#FE4pY?7wze{KHG1dB<9Vx_FW9(1@c$)bU7FtJ$
z7N#i2!*tRewChuxJ9V0*Qe}K%jETvu3{8w<h{-yTcU;KCx{F{<VNndrIQ4<!B}P#1
z8QT)`?6ZfNzA#NgpJc%ur&5~2+8U7^CbB~qTkgd=p%v$fO<RhX81bbr{9r8e?lDfC
zyn|ggY@<{eq1ki{PS^TkqPg9Kxr>g;8zS=7K=wUwv70EU)fgL$K-PkV^U6#cW~LW7
zdHSnhW^sOzOy}@45%JtSzMF5}yO-ZS`Xb5ju7S%;`y~aDD{y~ipj5fKOsL;1gY?Ql
zb-ATlwVMt^afLWGxU|i-q1SP2?n}VaRHLnwvTd~M6P!PNhEk=%==c~DQ(LKxO%R!w
zv<+Fyp*{f1bgLKISM=zDYIr>6;-!l`^VBmqxx|IWBP7WP)|83tXyFR0Sd$cgXNnSl
zFDm85V5tOc$;b}V%1$%ac$Q;Fw{y#Z5t?=FZKwBzD-;RU^_dGfQ+rD|*G;@NDBMKh
zIJsQuEGq2<=roip4Z9aB<%rzRGn;-MiP{K4DIQ@so?y5%$-dEXUb%mWKRr{UKCs$%
zX`RY!s7<rdB=l;aQZXA}-8-PWwjofhrnR)10c0SX-=(_j@d5^mS5IPw7^~dOSlXuT
zW@)77n9sgKjG-EBC(X9eTpZ#2=~I*|HAW}K86Drk$mj%dl%RQF3ivGV?YU9FWuBo4
zOHxgF?9i7H)8>5r5E^+RQzDLriK9`hsSrigf^-#%w$2SI8yZ9+L}HATFj7WL%v}Bz
zP8{FE)Q&AwYf~)Nvyj<p(Li@WICb%2C>F$}AcC9cfj`x`1f6=Ap!TlYc?c9VNrGSr
z%@nL>sInW2AvO`Uq{dKGW#7~=`|cYi`kUacyBpE2rcJZ7NxcFN#PqmMW;3)IT{cs=
zTK2a(#b%xH?A}EYnwe6VYGW;tiAi)6TdtC8lQf@aE}urTqr|2}&2A^lchIblaqjdf
z;!?u+<OCB_TNoLcq&89k-_>{U?AUAAvK#)NU;6^}#tilRahiITQZ#`vWvm^>njws>
z5}PW<L|q-qura!*pBV||1|td9lu=DdqH$X38Rk1r@xn8syz0K!Q_5r7?Hp??u??=R
zT7%h{Y1(Z=+AOg!t)#7DXrw4DNFnCdtzCBY-NQn2ODP&BG9@C3sYGRJNsY0n!riwH
zF>+%Cac13y^5)t!tGmCI1>4qhh1V!h-w3FdSUEA2lTk{^IAnD?u8GByL_%b1c<qq;
zI`jEOX3`^+Y>8UDog~{qyFSDDQ)ekvs*H?{FfumI_{11H_m;>_#_#^dqnti-mRwJ8
zvHev_<#CL}SUVhIt7wS02;7a0px3=OK|Tp7GD3s3Wt^5V+CgzdQH{m?Nv1FD;IYTx
zz=3-hnXJ%mXSCaO=H}0GY32;x)VcM<JILy#P~;Q|btza<k6S_4pCqy*(HKcoA(4o3
zRADHtaQjq+{aa$PW~*1&?pIsPH4M}TEY${jg)0EdFVUvl7^pVy{$v$_w~%oS6U9}c
ztU)JVBy&x2-^OT+wPj*Eiqj6xH<`~bp?aDKOT|u7(VcXflUz7cC5jUs{i37Q>>zf5
zOpkJ*^<|RM2v$m1TP2Q0i0vq`9U(GRqNoA{EqFx8GT&q1h5~7fA;Cx)V>)=viK8((
zI?YUW2rhUQ<}XpHRY<co&CViOHcOh$lZ-Cl{o4^^FkK0og7DbW&6WOg6EUH+Wet?#
zh;lqcDJoMoF<Yy{+&EF;hLO++&lfTr_KNsaR}QL839p&!8mO-Zs<4~SVk3*O5kgEQ
zDiLQR<TOdMMY60#t}Q%mL}RQe6Gx+XZIinui*Am&)@fo4B{M>jjblw2Cv{rs1sd)w
zad`+S0`SNV6GtONcDRVIh7c1kImk+}T11PiN-aW+p^T9>#yGt9B+(ch=DC=DoN~S$
zsh2@Aa+x952JO5>El<L<z6@4=w6_MPU+Yn<4fP?fA=WY|iLEeR9b>XwWm`32q@-l3
zI1;i(My3obapD@(sn)hsa%Gz-<f=;wn*o&+yjyE6Vxy3%t0OMQxK@=?RH0nT$?^ti
z)*$l@oJ;YV7I9CR*p3A4c5Tzq7A<!QpLOus0b@wY+mWIkWlfpbjuG3jqRdbxjw>Kh
zQO_^7I?!bsbc?VSF)@}B>Z_scBo2&FiY=L`Q};)TzNHHeG%8_;s8qI7D#fI^3$?ah
zFSH+LDN3AJ7U$cH)XG$=hH@3sddyU98{3A5shUts@E$S`S)PzK+T^|qejNbG#sc+~
zE!bM1S`Oe%PeQK+Dzm9TeSN{Nklq_>NjshccTI7}-BX-8Imb)S&T#&06VZrjWfY}N
znzcx?I!@bo?Vy_BHN|U(h!Kbs)fBH8N)F`3j=>mXDnxb!E5le*C60!$Q8mzcx)dG}
z@;nG+iR!?<ng}B$tmLRETFz>4UWn{4Vuw&X>Rqo0s*({$C2VB+({Om=D2(~%c~07K
zlq)fdjRybqWB*?!$8Y3y_q~Ig_HX6v*%q~O4Z#LJTG6oXI8Un`;b%PAvixr|fx2us
zP?sg^M>jo8(d)de8>nwQ`&$!K#p`(WAxJjD_MIbCt7UFJu$`N3*}{c$3%u~$B~Bf$
z({5SHNsUT*lq?S*bK1uF@Z~iHGQ7_)xE>i?#9&N>F(qO<L}Z7sri!&g7!&t${ocM~
zugkV?8AKyQ5=0!vgu*G_fU$^AQE?P|$U^up25f~m9uD+r6C75xlJMdSN0^&C$6a^5
zfzio`yyN-gC;x!?g_AUzm$-Q02s<ZlW3)6vH3_a%3DZrfhsYV)otR7`GBuR0bD+Lr
z3Bqh<m_p<lWq&JMzso^Y@T63F>Am-mJ5SaL#I$YO$Jx1ioP~uJM_!uYrDtcEn*ouS
zT4e;4oGfpV=PfeV#A}L@q3ZfBN2JK?5+YM2wnHTG2-bG%SN#P?T5QKarKsK;R4qa7
zOfg0Wwue~6Cx~<ahpG!Y4jN*{OgmUp4Is3h;h}^V4j<<epZYc0ooS9Adz!lszJ(K~
z4|D$f^NbDOgvADWOr8@}<AReWVL(JAxIvV5$I`C%WrbcgP!$j{o-1tWTvbf9F;InA
z#`VX)q;I;dRcsUnFj~!=a#G@zckkl%+qZK1)I2Y~Fw5C94f0M*5|=2KMsY6ees(^^
z`%VCvYEK3;vI*7(c54)mVoVZ>i%WK5cNqxU-~L)CfAnO!yK0FVh4_v*ROd~MF(pJ|
z)Mxno9C@l#hY~6!!{M(U<rAO!HB?iEYTLOu^DLkE%rT;<!f<UHmW0^Ej8rBWu8sFe
zfCd}|L)HtaLNkq7Y#3bkc#E!36x|G{WF1fy2BSEh8xvkza$K)Z_O}wK`Ugb&%uvGE
z*CStki8zYbw{MEcsUbuR?N-ox*n8s?d-qQ;H{0aMOLH81X@P~glqjlDE>()D7guCh
zg(VRJEyk3vQ3Y!f#B}$VNDp9Qx-y7b7(3Goj#Yx>qyfYVMq{uwkO(UYVxrJWQpLG8
zaa?C{VUf@N_1_RP#1|j^6GSYP(pC^dDVoF(6WLOzRYes_QH>-{ij8N1oe{WZLas`#
zVPd?MmY8eVFjBW<LV0aI)s<VSWwo+RiQBHZ5`(J`)K^fH&_Zhye2@2Ttf8IeoIW+n
z`SY_(PS)75bCT`bMoCHuS?X|386K{3-)o0Bcz1`BCl)yT#5{8|K^0jfxy-_fu^3}8
z5+O?}?E^|Xz8J^y^!BNC8DP?#(iXv(5~k=Y4vw?+==#<dt`;77<SzhEIT^>uaA?Nc
zgvgYMZJ9W#5}5=mw$QZbf+;Lma2nz(haq<c!PCsk%(taTBzhaQH^HacfcDvCl1M8r
z3SKuWT(wOja*Zt&OD3j+IEYzNuYL8aZ{)<ui<~_*%eiy&T)eoz@zEOFc8s%g`xv$1
zD&9F7^$cSo4&1thefvlFqlZq?Zu(%21}M{^pBBI+VtYd!OAosCiFO4Ap<9XXHF%9*
zCaLL{sZMLLg}Ov!tAL|c*&4u%4Ye~{A&x6V5{Dqa3-B(#U!}L?Gt5RpUX&&>BcPUc
z7SqVWIM@}}saQi&;j;cAE3|z!Nc6kjf%;0mUj=LwA+G4r5!8T(YZdN3xQG3Fw{r6I
z3>PlUGe6g2?(k_&9J|Pttt0H)yM>|QDqcN{3mMg+n62BZ9C@J;WFRp;)<LhJ(%mIj
z$ozB%JG#7jV<l{Bg(99XMaiOntc>aJ{|oEd3htH;1kqxM?QqCQu~?G?H*BH+vhFm}
zl9O!u1zHWkdRI*;FNRW0Q3~rgLnF<57l;va9Rl^0h1ae?A4{%7puSpl#1y=zVhx;{
zo+_}745v=d5*cC3)-i57u#^4!wsPUpJf~02a_QnCCyrlY`cj=Yy#4@5DGDc|7+n_=
zEL3;;hr(Jd8Tnq81$XEA!oKMM6yM!_H$Z>xyFOVmL*8W=^hR$)iEOY=!T`8MmRyW|
za-}H-E()??S7)KS@}#gwdGYeOMl`ebfaTl-pK4uDu?$pZmHpD2ST=rL1NF<UC`HN1
za#w&%d-b%ZpE^mq-C^6dF?R2sWc&6}_UxWy`<6-O<`+19c8*4)U9>^yFTUwLz3I6p
z)4Ko%8G-$Y74@>@qv?_+`Q_3*T2Pj|lS50d!GgJgt}vd`ovZ9ps|N-C2RQG_zz9$G
zSZdE&iigY@I(bk;+zg-U$}H6&s5UiBVXkePW(`ZVJWI)Oco(*PbxRM%z>PO=;m8XY
zxNv@fi_;5?k5$>RV~ia;CYYKUVPay0EX#|MMbX0b9`%K_l7T>4mo9T0{NBHgx<a$v
z=Nnw!t;-|;%mDjW`|~RzD-cj*VDK{to*1+AcsT`A=&}bDaHSXFiS*pI!332*4SErs
zEJw<+IX=}@S}N_j>`hrLk!x5{Ux&w4xD!W;^PQp)=}|m+2K)DJW9Rl!PMw|O^vO$1
zUtDDR;sVEyPqS^u7`t{(FftNU>+(GB$Nk!64-|2A5ybbZ8m4PG`YoJ6w`i;s)5`tP
zGu5RDlIelY52)x!Z)5DziJ^Whr2|vnGB{|YK2+zWTO;c4qc);=jc_Xc)iEmM&d|);
zMZ9+<e5#c|wSkTItG5bQ+hWhl<o^0<G6FcsXr~L9$|%k&?RJha(5UAmr4k2j+R2_>
z6P!CY&)G9G%*-@+;kmP%JTb$Tt;6izImzVYFy8y(z-uw6(6=OAQoO2k*V6P|jOh<!
z6vO;@zeKTQSxKcBiSN!iiu5(By5c4S(g2sAWbJK#8t6oZ&`g3PrWTz3@KFrDSXrD)
zSHZ%Pc}pvAU`(kOR>+bKxz{34=du-n=<2S}tW5Ni4P<}U22}m4Sdc`icg|snKyr@0
zaEUz685#+KVV!nHWMlT<xQ*Ao{uW+!-+p%P9>?X56UQ#``7gY{GtZpDbd>^CE<0d7
zNfBSPYL--+`vJ8wsI$;5gXq8*Sg%0RTb2~QOy6SlCUyq83)(GP=wP_to7&c%j8lIc
zv{;=JmQ@w)^ib0RB*7EW$m>{BStC%FD*%;Q9aLAcy7yYPY1RYP;M*uyDqLzkj#a^0
zIDdALkNx2@yzuM=z*8HFv60a3WVjr5Y@OiVdvD^kue*txZr(zv95FlJ=mpchkoxJm
zyWSGbo~_U&N`gx)5q$|tp({HigAW-1%0TN!{SxccpY+ils8qE#(27cbxK%^O=Zjif
z5I>P#kyMN1qN@*)XF1jkL*!`rW~j?8v8-3nrdikh$z?1Uzmd7Z%ZW4B$Neq!|G|}5
zTcs{1SgfDM#8s>`nVZh}%wHd2Y@*D~w@q>LfhmTE%V7|qlc5TuBg2f3kFx)!1}+aL
z${Gqaz>w~%YLLDwM0Webt~y|;ddefckuhHgD;N_3>p>c^*IpFVdoI%p;+D#8^p1iK
zW|aMgWVb9V3Rn}Wcv`%rf+Ax?g7y`m5skCla_0`t9X(DOrNxN8E-Uz6WA}HN@Y*Iv
z?75;gjjY-FSs7GIpRY7p<=FW@;)clw$c-;{G#eJ?TYTwr$9ek6^X%O}&MmiWVQNba
z!H}k*Op!!oB<br-btkBOw<l8^1g{zfUb_|e!NTZZY0J>tZrUBG>Z(6?U0{z(EIJUB
zcYBN4574_b<ZeXS4Z(T^*kCoq7*G?efXWhiux>17Me*LUV{#ATW1e{7)6~YdTt%QR
zs}57F1gguckZdf*TFp|eG+w=$rCNOp!paGF_c2jiK}Y7fIR8l^BC<Rq%hE8k5DV>g
z%2Q9A<70pF44?SKiyS*PgBYk)W5fhvp7&a)xP(i-e@wJTlI!{})yvB&QfMjkdFa}!
zH4VDA%bVuf6NOvuL<Xx_3}lzSSG@?mNAHVje=+RpeX*ZVeZl-t@DZ^YVxivVGlxFU
zrTjUDYCC!ZDN8KXx^0@3wa?bFRI*MxXWatnwP@3<2dc~G6osLYEj08c&dqk18hI<3
z%W$qkWD|^yNJ<t}<;1aBPMw%%Vxq#n8z<PicY=|Ta@Y*vJ-O2*?l!nEEee-~B`5;(
z&`%uDQtHNJJxRwroK(>zq+IQ`d^G@BWKdMKF9Dzf7N@Ji<aMbt=#Az3rB=<VFKR{}
z)X>R0G}{aKH0RR7CmGv)<Mqw{R^@c*3KQ0=082#l`UdLDKqV_H+|)+5(Mm3GcIKl@
z)!t00yp_~v0R)8g5Y}3Zz|2gW>FKjP_0$YIb_}s^{}|1tXK^7VvZj||X@8)ra7cX%
z)01(NrLy4OJG3ZfbwxgwDu_!j%j*}$yZ5!Xg>+!{Ch+;Y3<Mc?Mxhr}^`(pg7uCBA
z?^B%5!y<C$m|J*+%H$~J%G7me(_9{?UxtHTCat<IuvEK??&LZJ>Z~H~eYtt9RwnT~
zQ!ZZmE6Q^>Fjl({7nRAfHrB>qBD}F!8xh48muDP1Hpj7Jix?A;Br)Fkz>Dhj_zDnc
zx9p&F^Ek16{VgrD6jTQ)>LN>>UC)9^KMrDP>@+CwWtO;9mN-ov4DKa#4#az$W_Z`Z
zX^K@rTu$Cupx$|w;qAK_9@(>`fP3|Anw8z(N}%eQAY-BpSS+TO)`+jJO|zb*S}m9t
zOxPMP2_su}(QeOiZuSqT$!!b|-HkVp<xQ+D6@<WW0wZgSc8mr}ve+e+?{1^FoA!4%
zk)b+(5ed5S%VM*oX<kp<ssN&1mIaD-d!W9Er%a#mB~sMJq*#Vih={01H85YDPr-YP
z7p(W>ooSlsG2-DWTX!BLiiZdGJzoy06=R`ITdI}x9D2u4LU>@NR|VFgLx+nC%{&pZ
zpd|>}5T9zz<>airduOFdl0gelE{{^#F-Eg-obwCE7>@3uTDzId<)l8t+A`K8I1O`p
zMr|Q=6e`xec1PC&NvLk?vRR{U%+TxMsrKttz8@dyU?a9$;UBDv4c5uJ&(R~k^Z^(W
z)*P>S0F>+Cy~n7K06uNdY@dLrO*}HpmXW)Nli|Lap~$M)AJ@ZDEyaNps*6tmY~6ZM
zR~H5G+OX>L9wF#jyT4_qUwOXpa#P-YY_+x(hJ?lWr>M_8&1mUfO4WVj&XM^BQB=WV
zLmkM6v8~X%m4RreFM6`Hiqemv#0XK$z_7$p!edwPqdUpmB?I;fRYk?V*DUNM4$^bM
z;PE~q_bJ}{u%6B<HqXhjODy`+*jk0!&aKpjb_}RW(;GOso^`4f-QRLrj{00(-dMvG
zKI93@9G~?*pED+!QuRx&iEEwxZ3I-yX&+sSF*3RX9q}y8e+ij;it);;NGiL?@(#|o
zgLs-L^_Cjpq_|WDMYQ^XdSI^(yf0HQNV^i*OF*OjfW2RK?`x(?U&p;q+Uin)!dRGd
zDe7~?Sgb<q6rV28a%YipPHAGC(cyzwTkH2!)fbG{!8VOtL7Rq6W`D~;6*3bm);Mj?
zbmslD01rL%fM3aCDLiOie3AMsx6D2%61`P5^I;qE^$*lH0xAZmC|ZnM4Ug@{kLJwG
zein17%1GrNOnC>nYl3YPM-_}I;f;c`g+7E0`<{ytb|cc;g*d3rA;lh^pzP-htK<hN
z^hGGI#qV@*-9&HAK~akE#iWo6Q$m_xDU-M7X{SdaPALsfFh07EI2v9ep4RQfiP%lH
zY2=F9H0y&ZOxqe;vYPuRzx3i4>kp#l!-!w8KzjfE82GRU9+nXF>bjtkjg%B*4N!F}
z-|K_w@&yG&j3hB56MLxa9A-{F$K2e<(bhRk=14n>bUJgmyi?SoJgN@w9p1SREHhY6
zD5R}pgH6D>fwE@d^3?kP6z>Y&SlAq(nuRa#@S5XYMxM7w^F?x3$9Sboi6rx6&6jAV
zU&U2VGqQUZ+xEVOvB{f>qv0hMvQIO<+B%ily!(??KvkG+BQc177(VPjegCJ;s##$-
zfcIYh!if79(k(%+)u!1*puVc5Vl$w+e8j(N!K^7WGO-8eQs(DAhncG}RJjvd+C}ag
zVB17d8If|o2j@e#4=dPW$BsjZ5~Vy6)}-`Gd))@LcZG#2zKbs^<G!HU<Ty=11L#Xs
zz;#H|Gjy26RwAm~w^FIxwB&?_EOn5acr|>g%~`7T<qu@psEIMocf1n+#qz*?h2Z@m
z2S}-O=Fu$O^@6eSt*XukO3<|q)VU%{wW6NHz(G_MB3ov3au3dTSe*YdI{zd?$sHu+
z-DEB&%bO%gl{l(GAtULfZ=BP%aL+4CRE9jQdWMNiFF;pcOjfH8*<3-`Qt~hytBO%W
zVoMnB$kS<>?kuKks7y{WK71!4@$xlm#cP}EIQVcif%>x7QM|P!<9z$Y>Bh{Xpz_c|
z;@0dH-hcmt_VD3{QZf9gF$t<+G0Elw_4Ts9YX_=9T?NzST&ZA9g^}?+4DTGL89m1I
z{GZZUd=ArTlee2Ro0n*|XUOw5>K%y3IY)UU#td7Y{=y<zdNB~6G+3elE{F3OdEUXf
zI=O42s>GBjYl%2-&~6^4kv|S24JP&+U~0!JsEzCjlhH-}YLNGSeWq#52HG^61XW?P
ztt}(i|9trH2h#iR|Fm7VKzis<cRjQIy7$>nNDz$D0jGP#ZJLz>^_51!Hw&uePSy4n
z3@Cy%B}OLpq2r$V;`7uOo~CN{QmNcV9#wFiHWJMfB?(D9f+-1~duX2di)YB)EG{dd
zzKPEpp%U&pcy$;N5>qBpi%VzeWT$X(hh(V6=+G|Wcx14cI6&DkU!!T7D+|<@y^e~p
zHqTp~%=_OCnEA9{U8G^j?Ewo9xdR72_?wZf{9vB9oQSd422|I>QmtV6muYdT%0QZK
zsMk-E&Nqm4E49k4*mweO!|<x}8CkxF^PSM6qtiRN5iu5v_#E#R$lL{TsS{NV)!}WF
zN?Vq`-!2<^fGT`F$KJ1-`|DH3TpW+uJe&KiLyx@UhaPy~qxPYPKHxUUZn&e6b#g!N
zeEPi-gbjjH;#CCdY$8x+tyL<ru}c0DVor~v9_|kf?Sf&Ulg?AGe~G-VBur3=_adf3
zgkXqKV-Pin3Pv;1{0uF35o}6atx>5>QZDUV@?Ju{sjy1sO4o>7&DgtaK2TqQ#d5jT
z5f!m$-p-B6&x6VxcU;D0T!&CoSgl)b`5*uHII8~lxobJowOUsisIMsTy;k-oo3~U;
zT!O4BI;Kmi>ESW0)<xQlIeeOfOAs|6S#V`WFtHF<YE-HdMDg%4i^!6A>6*whUeVb5
zwX{@&k1?ovSBl4Mn$7*np-0~S6RTOPb%3P;ACiLyJEK|Zo)d|tRGkjCdah+f{hGMH
zRYA4vYFt)VTSDg@IMLo`;Z&Gp#R~}S%ZR@m>crQcPqm?#s>|*1)|QR;`AcbJ?s?}s
z-`M!@hr8ryHZ@G4a9Eyv@*}f~|8bG1V487xOeI%eQNQv)-E6>8Eth{;`hL5Xt2;Q@
zEtDFQECE%2!e($u)Rn9ek?Rns%T)&IE4aUb?Y4sTf>AX8vCn<(n-&iren?gW)$)x!
zE8Gq%eAHgL^uebmCSN-i+3Fj-cbSobxwK|Qo$FRoxFYu_YZd<b1<66-kfm<f^mHI(
zmE{StQ6br@wp8XixIeS9RSs8MR*J{tET8|`Lyx@uH}1dxQ_-LO*?Zht$Pw1R2|Q@w
z!}+bZ{<DwAw)&1dZ)GA9uQeR8KBxvX6*g?CR@e=*#_E;zLB#;5)~+~Ti*4_$NO3Wn
zv{dGr@u^l7DPF?4@>waKj62!F9~}D9o4@n^`#%*OI`r0jJ<voO0G7gs9AHE`-|bxI
z&!ebvU+!9&VB)p-R9Duf*$AjsX;H8VF41MnvR7Z>^0iqba;0PMn?DAtDPJo-i|uHf
z<@HBgOa7s%N};B-?#-~FTkxgNKKqeNQR3d^eELWf4aF$gsugwFjQf-8<Nja`cineM
zs|T;Ef$GY(y|3y1HaJal{pwW9sZp9G(PZp=`;n}v@A~YMZ<-bP(3)}86#xqY>)}E3
z<dYwnjpF=W-lu;VMb)_Ah4_~z`!gHJ{>++z`sy3lHv+0_vF-iqvrW@qzY-?;lW074
zuJO?>s2+S!yUdr3nIblQd$9KccijH}`FBQ=pHg+G&vWU`cwdV;71t?Hzfw@iHClJO
zoKGd2bbr^OPE|~hsH%%>B@zVZvk!gxOK<-0@^ik?o83IH4)qqxT%7*dznGkQ!!w5X
zjW#Nes^+4Kldvm9uDSb@uNA1w=H1_hvcK!>{?_1A$r6?sUc{JEJZikppZ7ldzE3}L
z|F1vzpqfL6J_Ni~H;a-huvi032p)_M@!|Z|TYq|IWQPBhAm3+fDRHg^D!GW-z_^h$
zgmYK6R4ZCGS!?m8Y$&E$seSUYTdH*{>dQ0cjkRemEBVM;d@Av%su*h{JB;`3RFGet
z&zt}9(MR7oztQaPx&RAcu&n=z+aA2jN&G=m0L=RoRp%860xC<Q)N9|Sx%M&D^>BY*
ztHB3RRD7Y9WQ{3_v1OcVcZ~91oX>yh(3ju()bexsH3L?+{qq11nTO~C?0>yW4L_vt
z-NwYb1I<}c%~ADX$%2ZC$U4pI!IP~kSGl=-+(vpM6dSZ2>(r@wZuxI#o5qNU7>UK0
z5=J7NZ=smOf;{96zkBHOZ+x~7s0aK;GryMsSpC5M0q&G8z+Q9ngCniDdLNR%8|?j{
zH;b6@uv6I%9O&g^UMpFu)lT*XfGJ(MMOi_&ex*X|W_y2TV^(p!lERWPVY5t9O8YY1
z8+3nR+B>jbz2?)R_Hi-tu+`|VCib2AQr9X4Ks~LS4bWdkVD$lZ|NWRlhd#W-M;|=+
z{~Pyy?&gSS+~e;9iA9UD8-^g>V~VL1e;JSl@An>If^_%gt2d&a9$t9n?ypyPP7{{Y
z7;^=$zf#r4tn~Uz-^EJLi3tmjyjgjHcX&=e@E-a{Y{>;Dsv;#(&1NH0eIoaHJ<;s>
zPdxh0`K4iu+J_$c&@~0r%XO0n_^7@A{s*J$2jXwsHg~~)Dth37kJ{^fK3?XNtpXn~
z4?OSy7cM+~m9PDlZ{TDDx9;@JwThj-ar?&Y8@F%V{@c6#zv=c?O`?SW6951J07*qo
IM6N<$g7e3=7XSbN

diff --git a/apps/desktop/src-tauri/icons/Square284x284Logo.png b/apps/desktop/src-tauri/icons/Square284x284Logo.png
index ba1b7f77677c757809766416fbeef1d5bc03e58e..742469c1977134ba358a3018bb4e106622207b47 100644
GIT binary patch
literal 78585
zcmcG!Wmg<b6D>Ln?(Xhx!5xA-!3j24aEIXT?(P-{?k<B9G`PD3cb7TOd++%RXRYop
z{h?RauI}DdwJS<ZMHUr_2nhfHpvuchsRIB|B>$TTaR05~-Xre-pa1}QDG5!_-18pz
zT(f0&vd_&org0EQW^Y$h4||6Jn@`fp5LNQ&RJyr*>qZHG6!v<<{t(YkQ`x8wk8|Cq
zE(^tU^HnD85+ufC(<=)f_Ib;{H`n7mknN5qQGj9$mbJ!GEnY_OkDqYR!hkFPtK2K!
zV<GW?2c7>{BhM$suMNGh@Ab@1Hx|k)>o+CbH2%PTj5AB$dc?g*$7|rc@$rjkJ!`yT
z#N{)e#%KDrNzss!?|U2B?|@ga)`7wV!H-4bkB4y<xZ2)Y;*Ew!KU;ql(TA`uo0*M|
zoxQhmf4xf<BR|6{zt^)gy$_G3zUg&ZN-ZXyBs<7#RUPil60ysQ@1nv}w9qC$zEW?7
zD;na>rs(9=??w3BPeFEk4ZGkW&<`+?yKJxH=pmk`%fQjQz}tXMnrA=T)|Z{*noGa8
zvou{l@JZdB3n!92AT@V(_IJ^F=kF<DQ1LWj)eX=3m;Qx+|Hh##+wV6;r>|Q6zn$xr
zL%a6&+?hpUtF4eIO(P?3k{IF7c;gGL;vDCnPG$M)7EYm60(wHF<ze|?Y`hf%emXeF
zP{P{fn86l!-Ys<Uo)?X!3(u6f1qFvJ3c;yiF*}yXRm|*nyHug`e>@Z`hD03+TFsxt
zWo*qAoQ&Uez=&>?YG6YTeuip!pLHUiaXtwXKVpClo!HJ7*E0zQ#)Kk}rE@NQYP(yT
z{C@K_{pXd*wBT4c>>0vFUtYn}+c|G!Xft&Mxz$QKhJx7Dy(n+tZH45a_rng2RlNfJ
zE?aj>{SBvYP1A`tS%;F*7%WzIH5s>{;#7SugS^b|;9E@Gld)cw<ASdL`E?t|&I*@n
zeFXj>o!t3w$me$JAKf;gct86<8!3%EZrl=yO-&g^(qf<Ov+QS|-p$5fi?(zrrUa6%
z<vN!7Kr12d?SojS1w2Q+_O;Xxt?n7AKz<dDX0-NyjhN>z<F6j)gZYpp_#B-d4^ZWO
zpO`D=J-AzmelMzMjieCQ>UP2^y4EOMYK@28^FRXUz{P#ACS&LX{)^pR=-WY(#x`Wd
zjB7jKe&Lc{1zq$rMRt&$%%=7GtsP7rx4NEwHjB#Y{?*z~GuEA2Gh|CJ2TH^1fc<Fi
zd%U{uc8~4nrn&XK$FGc|kfxi5T-*P7WD$E&4&}IRMO&e^)0U;r{xJPv8Gf*=r2(d`
z2gTJwTl{;nenTKM{$Pjjl2Y96+&Wx{2gu%c#?TBu;Bqhoy}HJ(>rCn-s=)VXVITgX
zq`;5(0n2e2eyJ|wa;-{Fqp^DGovL(94T$KlOi3N#*q0BRvs6QnBkJ-eL3tm!?`>1`
z=qhZHK5pi%tUtW=9s5OSOEh=m`aNB%PS5M*@`)Q6n)pH+Ma+Qqe23`|aUE1aNBln6
z8+l?QEDdUJmse`89v+?w;x5+8`+nHhTkL;k%e(FC{`L#Ht)^q&Fx`Ssnq7!_%rx4e
zHNJ*y)yDBTZPQ~Ui07bvjveq5v9LM%1%OTg8f2xtd~lrLE)QmfxXur)H8dT%=T7{G
z(DB0@Xs{#fW|G+7l%x0Ak!{UW*6-t0Kg2twi&Y3%yPMd?(d+@W@`u9<`fo3(=eY|q
z@(a)|9r}p`A&1&}#Mjht3Gzp*gWq$M-Jz;C+VFmtug>#h#wUN&s>JniQ)p8&l{QFe
z#AMlf`Qs%$#?G!sKqglgWP}ES2C-B*sE>entzAg`r=B|6|IG=rMH_vT_c}6zPj#w4
zPyTm4ffe2K2+XTEF^$wN$WHQwW0gv*(czLU<#9-$D|1A<0R<6YuUd+mA?YA!fM2qn
zvwx7-ck)KwDG8c{xYd!mfkf_Pz3vk%{V4=FI6YNnZi9@VD|LSk?hk)UXlA#Te>J{O
zV`7c_yjq$)^LNpA-h0gPuUI@_Ys$KUp5_mf00_t(K=C5f^OmNCr8#e0LCTUq>(ANi
zb<7)&lJ}lWb0-;pAo5k@<oTl@vvs{#FUR+m;*Fb_uC|_@Z072_brXQkz;4z$!5$A*
z)UZhcls4H8B8V1?5DkYFw2@4pU+-*TK?q$oC<nI=3SkSwl-q+*S?a&-FWZTM9J#*u
zjix^Z6hF4u=8JU%1W}O!3j(6jL^JlCy8R!NuX=I~pDi8Vv$XvNmFJX63YzwqD7uIf
z&%i4LG)I6AbU76uK^V$<{kPFwAEMoY&wIPas3UB#577SQwqY%ID3CPVzvJDaT68D3
zEh#R+88X$!8%o;OZhIzF*%9Qvs!f96F(7ftJ979vs&iOv1tAvQRSK(uh34x5t#8?s
z$$KSY;R@V<BpzFW3YaiYLcOsc2^w&W5fysTX*E3!{{-2<zkMsvXMyye%s6ZaxjNkl
zAqv94;4GFVhzX{)843NIs53gZgM{e^RDav{mEEJGxn@3SpS%QC^8^~ef(Ss0fg9+N
zC4p8!dixj>q^$@}2l)!uyT*cP+fCelGi1W=`Q@tTV)>%<I<F<QKY#c2zMMi&d;M8;
zQZnDV<)S@*uQAl`>$^N$ev#M+7cn*4`3Yy6H`F-D(TLmrGZSf8Nq8PZm!Fl=3=Avo
zw=f7hz0Hfr!Vb+(=@i6|_Kit0{s)v8^au&6V0>7Gc0$4POo3BD=hMnLB>(Mn+ESI=
zpq@bX7AZ(2dv7csLO*R`>3r5YaWV1fcHEi7?C`Pd?01+psSI+?zYE-;lj}u8!A_(A
z-+&p?1}MczfXQZn8^I+T8VOt#?u0UtyZ&uR-FN>PNmdfvQU9AiJAbytv<0+OuwIno
z%g{yH4gA0YSE4pixLJH3{}B4lC5760YA%nL-lpnN%MU05;6e7O3_jp+dlWuY=nfc9
zC61dFx8R>~q0U53aB@|99RB?rgHPy+=lYGHJO{HpVH92>@pzOVXL2k=3Kk9_<mQQ+
zd}Bx?WMOlD5uNO9?}%RYqTu6LMsVBC75y0bv2|l<qHQI||EH_-J!-}VgY%+LN~hS#
zbJTv2MN?u{3us9}P5=l(icLa`APXU3RFN3(3FJqkv5@11`B4{&LR3Gff$@#t3gUvD
z5b)&@U1WKr|MfRIISTsc>doV<EZ$(4O&2MoNv!5-@juSKL$RZ4a`aV2%=mbju5tW*
z6rIypQ-~@GDsiIUv4g4<9sFevCRPkg0hCh?Z?h`0OhF^zV}Vn|mw=6E?Rh4i`}~7!
zs-{=LVdpN`Rfm|7oQOCP015XfV5w8T+yia;UQgc({UaB|srb{UX?x`bJZq`ajdil9
zTXYb6i<?7txRAqVuJdsXdls>5*Ec>O%@;A%uWXMt+8UMtHIquQ$ru<1u)|5j230=?
z%OV4SBwjFIvfz`$YgJa60lX+u_PRe|<;zI&{VN8Z0%)%b0)&S?_i;&>moFJ7ZnxQ2
zMn(N9TCbcouwU+V$epHBq;rfw!U4xQ(SHsLx~<O6Du;`ZKfFm?n2$j_KM=2gL6xHo
z_CkYsNOt`EszdnDJ6qO>OF*nOHyD1<n6BD^^Aa>Uvs1U3u4yDReL5>j>KQ{+2u2Da
zg?^|~#lgAFkSUJD<S0C3y<i3Y>U(2=$K_{@@z&dQZ$^$$ndyKjoueVA=M;Kv{nE$s
z4W^~t1TS${?a_*7mey0bL5@(pnL~(|9+(iWniDoKRfZ8PVe|(WDp#P7OhJpslR;e`
z<cTO}gXF16V;(0?fgDbNSM{}-xFOSaXx>NvGRd;6>xpwGN!IKfIsYvyBE9cjY)^`>
z>+yf46W0^|+43~}X5ju5mSe0_klDUq4}&Q?Jp!H*fBYI$Io$9A{yH5Kl@|r*svg~E
z0LP?=#XT%e1IP$uB@{+$Ct+CGSw$I?rVST@M@S_oFxq3##Fq{t56ff$UJ_75+VEzY
ztq1DHC%hj)TG0Iuar{4qmY4nauer+Y94LR$dqr{PTzQ=<Q#(G-EArL)TvY||V>_%^
zM67bcUG^W%wPH`ey1E3WmH9{prw)mN5u6w*i@3-6_+)!jha3@Sf%Pzqsz4Vsj2I**
zT`Y#bL6J)H!V!g|=6X&sLHhUm{CGi;1<zf2HxYgD13Fa@4)^X}$iZqw>!(AtzwMwG
zfLHozt|sg{xvQ<Zt3g!2KWY<+TGxws^(=5hCF<8;y+79|DRm$|@=&Z>tNI2$AT3;z
zB1x_i0>nX3OUL+~%=H%wMFr-(PEq(+uN`bgK&Zq)ui$h_`6XsFDYg^jt4@kpBBo#(
zh`M^_|4DB;`YG~xXWV^yV;nz#OeWOe_*o_;Xf3v|0Ir-hu|4Q<d?l<CcJIl<t%1sb
zi3}b!SiC;z&_#))qbZZO!deR|f{Tit+u}%vN8mO`1d)YW0bPvJMzeCmG(j3rdxGXz
zfy0;>Vd5)rYxdV1L3Z<Tlt}ht;mw9W*1NPVawG@6`kB4Fcj<j{OlOY&d+JxSX=_p_
z-d)S-LvgD1-~A+A7qfNNr?iLkrjN386wTRTzvB%a{MdOgL%c=QSpPB+cx(o8%uAG}
z!qPMqrQQdW)FJLSzg$QS*g~W8Va2YJn4xh9Gt@KCajYTjXqE>_*bq~UsvtS@Yj#X9
ztyK9RmGAMtfKKp510J{_aSbtK0=*vTLqQ9(AH@^zmAE`a^#t+TV#lgz^g)MfwX9fd
z#dM*#A%}((IZ$8pI7Z>mQE2qku31F*2yDNO2S=*~Vkn_~Ek;Silbw{H;|i<@mc}hK
zgw0kS`$5bS*$)lXOq2X8)DEC+h_sc6!NV-NMS^YYX;bQCUQ4K*Tr!jI{P+0fG-YIa
zFlh?(<2d@8^KsHcRqfF0LmlqJPdlz0Y9AiiOYfkSBZ5_!ZU-QNqGmy}Amtk1vl=P4
z5@{AKkO9tg-0dITy;gLHa}E@nvjCdpA9y&wDAW*?HcN)h<O*1nxW-}G<iYxI8}T2|
z1QUo7TLSk|p{A{<tD?AMuZNJ6s{jg{&+&$?B@usLNbqpxUaXOw^=#gddy3BHZRG&1
z@kT?4$-0F}_YdUYNnMzAG+#_L)l`@XU63BIfW@2_-5jp}To{yORDtkYy$TBZL=#Fv
z>V^d)Bd8v@R1JuuGiL?Z(uhMRx+7Z&?y#yxf}@TtS#Ay})BScTCY~m{bfayaNUi-Y
z3}tQM6Q1UOU;antPYf$4&p9#Fw+|8835MD$4Ifj^)N*zvoSqpj=8iZBh%~&M-S)H`
z`TuaD(q{tM;lUXbKxf5hnVcYgRS7F8K1AJQXCO?BJU`yfItnzInj7sc;m&Ds7_%_c
zA8?g2axtA+@%SPL`g*BCQ$}HMQH~O{nph*b+iU!s2-%>1z=qs_%Uj6|GZB03OU;&+
zl6Xq+J#zv~TezMtr}jIP*W0>u-38F;*`&|$LRqU&RmT4K!lh3DUZ5!S0b|Jnbbkp0
zHGij}k7Wai2w4MLGQgD+;w7+pF@e#6)n5unOd`mNz1g+`_?gLs6aR?%tPRY{yezo6
z9VFoGO9t@F3wzhE(sh`NrJWl3fnV~!zaBhpI$H+!UF>RwZFc=Mc&;tX<Iw+(wIxlm
zH3bYBPShK`ZhZj5Ar3YFMid8-q<}}6!7h@8tHB7S${h^#MRs!10<r5PsZ)uC1ih$g
z013j$MCNbft{cK*4gJY9;9-}L5G^yDL;py1Y$v`zGXx+ak0ugTc)LAyr7->#L^a@a
z`)Ozn-{1PG{3@57oqik5&ATKbYOjzhjZnW$sO@NT8Kv%hW<Lc*Lx;2Bvej+}Z<lTY
zh7Kz8Sp4V?v<d~Df?^9&A;V%LxDlEC^4ADB9wS}@rAb|H0jJm0PlTtti9JJly~i$^
zJ|QYJ$eA(e=aNqPyz~3$bM(mO@R3ib^>gmO{9xM*w7(|lJK(pztz_=e_pnELRV_RA
z%!z;P;dF3?V<muM7ra}O6UeHD69+_FBU0w@?S>+;mTLw^$p9oyQX}O}CR6{RbMmL)
zY+9)-?NvHr_m)Ulg5jcjhgK*Cb8b;2W1W-tSe693U65hVBM1<oEP22c)?c7fzN+C^
ztnv;Vjt*FU&X+eD`<;(P1lVp{Zg*)`MLWU^j{gk)JnNX4USy6i;%WXA5#oHG$XPm!
z*54LdBk2>|r$dfOjAP2QgoYNVw?n&DZXP6&tNhx6|C<|L(?(nXs88WA5=6QdIpO~v
zRcEouE^={=eRG3OuA2WoLr**!4_D;bKU5|9*SG0^pJ!B=s`Drr2>Y^2RM_;&^Y{{Z
zTPx#dKPrZ+M^D(^8Er8Y#VFyW0s8r#xV}2@S6lcXVecB;WsL%ieIcfN^SU|>r-s%J
z_khG#vi;XJd*@%`5tSRw0e+|J%|XGc1~o&Ez)@SjxeJUwlwP%_MB`e@nMcXk@SQCN
z82wd7`4}mriTJ;{ek{HR<zg9rd)IsTqMip_bz&l7<UOhP(Fk@ADv8I9FRN?2l#sX-
zA^*qMfm7qv`_}%~B@djB(r&<Pb$>B5*;o}Xig`3mUN}u~doK)&cAyQhT@ceV?|FFG
z?Vk9vWdW->x!~&eHTKKC{f@(O^4Prvsow4BYjy4I{JleNm~6;&ZCOHuK3jO+GQ=D0
zY}>1UiEq&a{gu+xq3(cTi;fbGF!@_}4j({>H7fDl8U_8FBfQ*f=LQc$8fyy13OkC$
z-CY48nk*G90$Hme86!EU-MCZw=(F^nBP~ixWYH?zBM)saUUo^U0SY=z1rFTb*yZ4v
zRSbJ7OLSmzc7v%C^PW6QBI)*l(L3?-GJ9@j_l0py&wkxq2TIBD`_ChtQv%c#4DqDw
zfB*Jeu7zf{o~jDa&;lS_0fy6JccU>yJi<Vk;2}AH1RxY=F*T?i4sWTSNV#wpu2M6o
z5!7bKk~=vBIolsT4{?nfC9?}~*-W`pWvoAe&Gy&4yZA4VGTKv6t!TO`otvG?^ms$Z
zO`hs=+CAc1sF^G^#-}_W82xKY_)H_ofnv}A)t;$AR7Q=Bq-!_gq~wx#^b1#^8T(h2
zdIR2eGMXyZ7!69Y1B|#j@-vnz^=F1>J_p@(QZcFgH~PPbf%N)7bb1(vV5yK|?!?I9
zukxY0HvM=klmqGFzCes}H+4%znxvS4?6}X`?e^kc0j~EY59Q5w<O32p)lYRO;~*-Y
z%F2p}T~)Gx>k{K1^jja3qao+Lsu4vZz3OSB7BPTwd+~_zZ76dtm<l3k^}Ot`!qXUZ
zzuE)QuIBf5zr_SYpKf6d+8&IWrYm3muK$@nP>g)`I&h?n|GM03Chagawwe-m8m-BA
zcUpxs`zW^6dou0q?^LoKEjdOt3brjRRu~X=`XjTWpih--AkEXz=ma=|@~vU5Cz0c(
zrclF-;RcmR2jt~MQ=tF|3n|5;dBiEB0ZfxHQBoKR-yBoi!gjadu5<q~Sx{vv!UlB|
zankhDRC~!xHYe^Ti+ie5<U==okED*;wXb@w^1mB@wFuGo|6o0H@Ks%NyLQ>~A|<rm
zd1)FYf3Au+*ATlKB2R0&^TAjfq#aw)22c-TeBrHFjioq4DRv0qv%9(Jy4yPuz!b*y
zz0{gdD+|oL)~THM@YVm174VpQvK<K9L2r3gTdfe|zBf|xo`(DIRV{&R{p-!2e)Ax%
z+#VZCd4tb5Wm`vUv;>0#-V_YGzXLm{fo+5p?ci5bFpv47A|n=-^yuH3YK0vvE>z0z
z_LM};+bAnmpxMF@v=uq&l7BgHr0y{-@d*GqDAnqqD%`JX^=c(wd?=j1TRZZ*knO)f
z1<k+Uid&%A<wHTGO;9=QsTIRIHDk0<DH(Ol^_?u&RrCq=oy}}F-Yj{P6--X(;Ur<U
zt9L$H`doeNP$P2%_(86wEMdu`v&0Hr`x6Ja#o@k={laKGMd(sqtnhtaEjNG^cE7b!
zAI>YLRz$g)UoNe-zXsm1YTIP@Q0YO;mb+~z{72#IMBO*1n4i7RpRG?jUM_#jDo=cU
zY(x#Y%`RV3*}|yK>|Sz^;VkF9>^~!f`{~Rr65kL9#-%AOyKSvS{4HC-wNs1d)J-Yf
z#3})rj}N0TqQV<m{;TZDA1c5!z{#|qy8O*pIaQJo7jsg6K(KILA@B!-G;^S?1JJlo
z8&U351Y8L33A-cZ4D0EKpliOPj3_}Y7Eg)jTfz04$n3OJ{wchmuig8%`)tIOZoqub
zKUYfsqeGUj3RE3uQ)>Rd-p5phA%9KluWWf7;^Mw0*KytmAYvnV5-q@*NWx@2r=X)B
zs7jB1-gX?)UoC2Sk=uO={6~rGjdSw?`(Ab{<SQ-yJ}GbhX4lc{bbHFHT8@l|(P$Ta
z0WS=)A<EP129pz21qK2xdhI_SYP#`8g`N4~YJU*4lUTixl*NISX`^Bj5eP9(p=C%7
zqTb@w%+3Bq2L=u#f|2+u1f|UzKq8<L0TSFBH@Z(EqlnLVZzAez{vS+SMc^Vr=m)vt
z#c=+$#Ai1e>6m*y#C<aXswVr~$r>Pg2E}+fQjBL6?9wkBSw0QAL*8wd<IsSqzBPkB
ziuUW2jM%HS+Lx>h|JOOrk*^gqXMgt$+*N%ZJ;>h<x^wD-5-lP$36-V!i$d)>{tFip
z$gi&#<SCDa_Qg`POJ2_k+Wxx>#fs4K)6-p55fSVJ`UOL|Ts|LZ*!{m+!cbEl7wFz&
z*wa$L?lO5$8%{G)KYf0lW%CWQQhJ^PwrIgSE#m9I4aOjy6bl$As20Rbv4RW|W2-1G
za5$49Q=>eAD%A+1w7PjiN0tkJ5Q^#x2?oY2off5<0t>Xf9GIHY^dl38gIhA(ra~Nk
zhKEKJ_iLyU5)zX(8jTgMNbb0D5IZjA1RBf(Bafsm>z=mU^B_gKr2j+La_2JSU+a!b
z_i2&4q;13>$q4n_j1N4ZC!6SN1bl%V$U6YV*7K{gKqRcCrj~6NhJ@(nUW(CAquloi
z>?yORdp^J5=YqcftfyjT?T;6vPO+7_E1Nr2Vkimi!p?QvV&$aN`QSK)BrB+!`8ph~
zV)Q-C$b8B1aM-?&|DpILqq8fI6{Rc(u*PSK((Z)9F!v*(>^gW2Lq&c^5j7|UwP>#5
z*Y5W<PH8@+pim~Ca`BYJm4uB3f{fRyC>ysiu(>KssXE8+l9E75#1kK7nuxC<%4tYn
zS$Cr7u3zM2BkrAS!?9S>g>xUZ!P#WtES7<R-)Cv7;nHehGwX5xZM<XWJlk%yYzE-=
zT|~K;xl1cJ8)>Ini`JU;pX`rLOwm93_2lEO+Oc3`(P7%MwUY|+^O)_fY5-mLUbc}W
z6{Kdusrozqe*p4md&cv-Z5EM`x9W$(tehv1Hjo`BhR*UD$g@~tkN=5ozodK<6OD5t
zbiaD9qxE?cV&8b5?yQG@=RMKUc8%Q{2n0&<(=_<wa!9a>CI6P0%<SyL-kCrJ)iO$P
zrCQM_o!KK$z<4He)K*)KEmE4~j>a~Hc2g;ZmdsT-EHWuqAz0ndl-7P9MzU(RvhAmU
zQj_EJW~(&7#DK*@Z>72X#fSl70_qE;?kq$mtWGNEx=JSUkW+yU%+MBSX_CgHpc@FT
zmp>LpuCw*|R1D3wZw@*eTA<l2#SI1b$_#9y=S^QA7d>@onBO^@e8YO>Qx2B#$kxyy
z=C)o}25)1%SJx3fMm3^4zA@PI6Dun_O1+MUBfOc*d#Ra2Cb5fk`3SW=zBB<zJ$IXK
z+gI=0GNhX*K5e~X5z1nHW)tgGDnBOCrHOr$%?^Ho$rqbSMt%jhlv;55Dq{oDn*-}~
z2-9=0P%DXsQG(<>#&nrg<i1s-&I$3sQV>aLHk-BQ+|zx|D$B}9anmD8kpP`ze%~{3
z;^8mIV1_F#FqR?FT-qpX$QDvVEnDdFQ8`;}3>J$a+WvykyD9ubkG4byh3V%Q!Wwqj
z74TEmbzNG+wzm1Q+p<}$5yA+4`s3w%8STQ}Y&SIY@J+J_h%6vAA4Se@es_4VaHaD-
z)$P%z*yw+1qT}N)0)Sph4vAh4ai_&?<4-WF1G6HuIS94ZsqXFOKPC1Y7UDX1olWJ8
zNCRWG{jFxoec58)KA_oeleh{xti@ly*(7d_fNr!`OZ*%-jRcx3pDKDfazoiLgw3y3
zSkMRJ7%nizeF<f=Hbk(Jk^+^8%c}VVv5C2B(2`F5?c-@!>nKZ7or6|!Gp^K?#&XuD
zav%y3er;2;@Sx?OF#!<(3hWhxLEIvQ1tt%fLw9C+EP5&RzZ4TE$Y_$(?a}a@>W6|+
zSfA}rKA!`6D|)?c7KgiXg&+yXg6uxxo9c~D@6TVkR_?4;(?s!8;gZ*P|G?&uXEuDp
zrx%rcI-}R9+xRbqZqvp0$=U9+$cVU6{NOji1}#yvYkkE+>fL+gG=Q+p^aUBe9sZv4
zjDP%{ywF#Sia}(Dv^7lZ^5?RPuco&~kEmnJF`UxUi&&Bm5RyYc6+@X#;Yg%lOoNBD
z^FntWhvZaAiHT)G3{{iKSQsTpYX^kOdo4Xl#k^zOk(Z#ueP+y;k>(PNn=6#;j_*~a
zA1;2&DHyh=p!)j_Fp9w#oc&EUsG=pP5Z1R7QP@GfSv}rlICE&e>Wl7AdeBrHpoIjZ
zT^z*h5P=Bq98+S&34!kGZt5^`n?N_t?YV>Yj(=%Wb=KIjr_{BXhD&1?{ZKncT2DY6
zGatmBAv68_TE)9A_d}(Rirg%~UHiW{v7SMla%yB`SF3FE#l5fdEYIHx9nbd}d#&`(
zcgF>SSmO`uuxED<9Coj~fb}3^UIQ<!qC}HDSX7MH153#LZCh7wCcciS0MF;C)9^t{
zH=(qFC*G|NV3_p4Z169O{7|k^BaKRHpd}OdlZg;yEkcazr#TUfc~sU(NEL;v_E+c5
zkI&_#^Ua!K)>`{Jl8zW(-~1C7<~Nk2UlvTmRE3n-bw9rMe-Z4;%$6#nFp8imnrUt(
z(nE-k0!murc=}r4S@0s-{v>F;lx(#RbSQnmWh)jOjrJY+@aSu=>TPj4xiS=b|3x0~
zdzDqIEto<^n$7=U><(u&&6Mr#>yp9E^*3awf)52&D(qZ;_tUihgoP77uGoT0-G+bN
zTRoQ=8CwSRI!1Yz@&*8E4}O=ojKSPh+YTBl#+u_c$my>gdoga|m$eP8ZBNS^R^txy
z>%FRxCbN!QSuWJM6s^yc@$Fu&U9@rH%Pf|QX$M``a)iC1bTrvZ)9|FKz!l&rYzqVj
ze?BrWjE+Np8Mo-i2KFiqT_dGm4pi_~4iKRXZ|TR0O(axM?4ARHUUMfuY#xr4x4ikC
zYwZOKgBBMiwzQUV#eH;pUZi)cX6f((C$kYFKy(%c4QcKx^jSE-5y#W5CxJ)?Cn?qj
z&dNvp0GI?F(-AoiBwj{)6}!D^TZ|YmgdE@Q3K`dFRAv0MS-$9qh$lsQIp3r3XoR*}
zxZCC8(o0&oD~Q|A(1SXwbL@J}9})SrF*ICFM0m5E)bn!Xu+p=)Ru#~>61v|pNj%5q
zZu3t3(GS;uAu#4i#86Xj{6H={XkRBldiB!mKDgwF)7x;YYpBF`FmJKt@4F@X!Y8|~
z>feFOJ3P^n&2Y2qXE)U6bli%%y&Vf<P`Po``bBA@V(Ns5S29HLP@|-?1<|1SD|s-N
zMRgfNrY6{Oj!gQMDREYmk5N@JVGt&cweZrxFioA}D`p&!R0B_EbDu8nE78s0nPxov
z*ztc%7g!5o(uy466~BcRYLtk?<sV#=SO4~zB7T1Ra~)4ozXjJCujk1ke{FTJ8*M4G
ztE!(UsRc&wAEU{m-I<i(#@-!|(SF&6d=`EN1c<#aJkGtxA7_yHiaxl19x0NqH1fNf
z_G;(7trW~;h+aPyy>1JCZ?&`u)_Iv_fAA;!uVtkAj;Pm%bX88H$;Wr%=<H&%pmX=M
zp@#2$Tz4~XtYd)5=}1|kkrYI596OvihXod;@JDFmfo6;Vy&YVr#}B`M6%Hso%ojE7
zpicliZ7+@t!lQrgLNE4xL}lJaWjJZ#wQ=nAykx|j?-_TV2R|+D#=h8N_HPe0+^T?y
zEp<)7K&=uhlwXQ?JEa~_2&q=s^h#}HZi=f!EHFit3MJ|_ad7#XW`puz#ck%7`jc`j
z4DNSvF9*#0`(OGCUbQaF_SN~?=dsn|6}ujIsEQzOjC^VdvLo)ul&-)FP796GPW3EL
z&WxLWl)<hhuwYIJA(F7~_hL7cl@B{WffhL0T#HEkW6Ld!7UKfp(Msigw?K?i^ft<`
z|J#$}a(*RgrLXPZSx}?1)6*jM`Rg0K4$97g9k$}$tjAT|#)l5f!ha~%-Vr#(CQcu%
zeE;6}O7&J;urAVgOJC<z5)rd~0q5IprPzk>OW5;Io&zhYYsp3Rmv4;6p*RVFEl<!7
zUSpXEipF_clSf}iS`#nS7M^6M0zOJ^#*U9f1-nT|^<I}+Q?lE##(F+QUd)#ZjGIpk
zAA*YFM0w2Ds#vSLp~vceRLJd^Q%Rhf0!j895yoKz_?>Fzu2A&ka0l~vVWWlaMJ-B6
zmN4VVe66WS*$8`3V7ZYr)qTFvK5``~!+UZoPiTOPnkR(2PKDJd<31GtgJZT6Cb=@w
ztGzhsqaZKyJ=)z)^SxmKR~nfwU?DCPTl@Gh@ts}`@LCBFUxbuupW7r!tWlYZE^?Tv
zO5G+SaVI3}dHHk4=qVo_jZD}aaxqLlF`B(i<aVDuRzvu6D4Ml_C&07Q-{}ZfboF(j
z`i{RWc}1|<dJ6CSxlFlZmc09tj$G#hET`68F$O!cI!6j9`SW9P5vL)WPkC@&?o0>j
zfHL0PsIUd0nFw@2P@OH#0wb6H^%9Od4veQNy8Gk!J1oM|rRSzUb3Ng>fqxOc!^<5j
zv7<d6g53bdQhQh$A9NTaoWi6^g!&CH3=QRpAp^hjzdGf$LGGBM&ffWd;q5rlj;Y=R
zJ71AMG>N1E)TMJX7*;fuqKmY_Cmz-G#quRt&3%<`J@Iy(>6#+TT;429eXb(kWtwqd
zoEBM%aMp3eW{nYd6-JH$zM;@p7C>fS&?v#R=Hw0>8?VSrQi+$YXpt^)a%{Rlm>rgj
z#BG5Wq-83s%&JNFK7B@uE5O&RMT?UxjGe4uk~^LiINE!okZ1VuFtzN3zgtSbMH`~i
z^EqBLA?AKjgI4QTrA6Ln3f<;%W<WGCPSDY(1x1KS3gwht%MXwbnO_)!BBFJ{sdm9&
zU<WK>=qe>n%IU_~M;_An?@5svd;eU4oI-_Le;)XtFZ4d*duLbs-pC_grYA{woi(7Q
z@LfOH8jYUGk9jSP4Ar2NWSlY_$x$>&?d-})@p6Hv5uFfld1_1<@Qe8uT(cvkRuwa?
zXqEGHzmKROBq(*P!$6O7e8l2Z60cSuW}kd`_g(pUo$3-0Fuoylb*N<h`!afRB(Cd4
zv|n68@@1Q<OI`7Wn#+mYcN~6emrH2{j2#0`f(^=hqg@iA=GbZ8^;QNK-z)Uh)5wSJ
zJ1fyYTtoNWw7mZr@7?z1eV-_>#r{(DFeOp0uPjWgywvM~Cq&-=>mcsvlEBOLLF|1i
z{wRH&J}j^KqXO3n*@B}1z<BBn*LrxuFzP~CgOZsRasX??2v<cqU;C-3JT}jntbye)
z<oquY_w!-7=e%c>m1Uw#EH5PiGWX{+2%B9+^t8Y-*V!Yo=Wta^Qpawk;WN*KTE#BO
zjG!yt<d!IW2u=kCtI1w`P24K0mr)<dB*#r5g<%A^06@K|tSr%Ab&SR_XRt56n%7jI
z{jOjsIjf{PlNud}GM1V8TgN^3b9!$60>`P0Mwrmpy4)R_m#N1zRU31eng3y3BU^gj
z^H1HV7KN0C*-kqOp^nQDN9>QltBEhw4S`+9frqqFh6(aYm#|2yyp2Br4#a;=q9RKO
z9F_*K=jZzao<AIM(hmo({5x;k0v^=Wt3F?+Ywy04x$K}TDBfZnWqUprvWGM}S^aF5
z^Bl;k&GqEw&e;I_QAl!CihytW&zWczJ<o7fn<>l9BF#8+TbV^6|0qOV`U*Ce1)qyf
z4sIYWo&Kh57k^&0|I-G%cn>x{@dvk#l!bVE%2qMvXb-RdhM}ZnSfA(Ee_NTM_|u|_
z;Yf{Jo+Wt2xTSq8@tURNu8`$0d!(}?j>`~?XU3HTj8KT7dBLqpRY>cY+a})mB1tqY
zSH3V?B|G2U07q?~S+WuA20JdL#JE$rudz!0LHS`c2eWn0c2r!*tcyVySYQe^me}(X
z2xkr#5G_Cu?n0J31&^8Fm*vLgVh8ElI}r|;qOHYXZi{q^zBz8K*?qnmhmsp*<oKV<
z?GyVzXvNFhQnwP)r_I3fV(*8ZKVGdKRtnyy1I)$THhJ*qMv(}J8u#ZsnI{wES0o31
z)I`cI3VQMe^8AxL_`_KVyMjtVgFK$DQlf&$&!hj|S9fsJQJ(3y(RuuOY?H7h*-7x7
zeVX)NN^)^fGGwh_stNUKrRC(}A=Bc0EIM)9)Z|nva35nuF1PZFmRWolO;0{&zXJ2(
z$)(mzd3C?3b?HpAU?-uLvN~o$L(V^`FVQWOxg6rAaAr)wdM`;&&)cQ6Zm6Qk<-#iL
zN!8gX3((dyGy@&7sK3c$tni@)5qYdD3FO5v4kM%jQw%eRgJu+VW(ck&^@6G*g4hwm
zp)=-bjN(1xOH!K>TkKZmj?yDR{W7+K17~eltxv{%B)-qgaqu!t<>f~?vS-`Ye@{Xt
zW9sgh%1#Zv_y*fv@wfN~!X3$+KbYy@H%M*6bCc4{5Vfx&8%};HakbGM)7?#gs%tC@
zP}&ni0rpV5*c1YjAa?#e$E)c`u}<UH`N!p-!a{9VFB!Zr%6GiftHchI`;~PDohR_8
z(8E*ytZ2K{tqq@eh3!CHq#%(A^{IEdB4fJ~90frDY8!P=+>t|Rl#?5KS|uqV;M>GM
zYXtLD-e2_Y3Q@b7W93!KBCbO|?YUf3h0}gKI}BZjE*)P)|DK)~YmWO~)aah5ck~{7
zi>_eOWrKDW<kkr<J4x&0R52R6CWxH(vLwr_g-T$DCbp#2_SZAD!X$757$dc_gxi}>
zbFa*k?%%+FzB+!uKZ$xQV?J88@sw0PtNgQ_oAJE^FKL~<Jd%t4LH9jhJ+#cfLLWM-
zy~A_z)*10wDa>)zc`f_Rx*El2|0EM&qQR)M;Z=_B;J;3RA9I&@aH@J|cSok1BSD5}
zk_TF86C;P*MsR&n9&arR^WHt{7>zG-^~@A{^bcV;<Zbb~%eoGapKaJ|gljc&x{C}B
z@fI@D<{JaX7sx>JLwFhn%BG4EIhrm&!n|`UFy~EBu}Y?b>;2tHB7^(oJjfJooe{G@
zB@Ab|q!|A$;#5?SbY76uu;!FDj?qE`Tym=DMj%*R#Gx2Ob_GTDnw1uemh^{+8_})8
zK!u{jL11tm``^k=`XC59lL5n&z=dWj*Mi>&4lf7GRuxEHkiwuj#u3Mzgw+Z#7=MyN
z*>3qp&H{f02?$6LYkj}3BS(O|i`m9aF~jpSR>WG4a)~v+_8`}JK`zgA#BR*ri|9YC
zK$HfBXdL&{1$XT&MQy{4xKb{^zB`EVdOYtKlYfjj23YOpN6k!=`$ICs7JibytLfG6
zO3Y0HEwamsS#AS~B<EZP5;kpLMh7J!G2juqF2}b?H}dT)H~1lUV`C8)Y2l7jt!|>0
z{#!gccFW8SxfE=Ev`J_!8{g98maJ59pHPLhHN;IRhSGu}oZ7085(j$;(w%4w-q&oh
z<KBFKMoE%#dt@1%k}F$r1^EnA^wi|xBRW%WGD;~J3G-$kqj%PCy=B6g#Sfo6>{GKJ
zC&~oq`FJ5;ZlfwvRlcQY%cR&dM&TT<f$52`nBfsa2~=vKj%v+xn{gu&6u_E%-aM^;
z)5-9NFrec&pDY~%ls7Sn{hcL`TH36z-*rCk`xg4%kJ-9JQ+nP<b*3*n3qc9r&8j{v
zSd^yY+_!+!$d*d8yz-U=dAclZklUS*fLp@1lZn39lOez7!5B{RX+%Qj`d@)G^qnjH
zLHlF@J8HpZf3W*%$@kY;Nk@F9DTrGf-g0&~MwD}wwlSN(_GgU_U$ce(sgZ(HbhZ=4
zLsnG(8&1d9tK!iLg`1@^7~6@Op@5pZHR&fkuwYh-=AZYnW9{LAPEoNirr9u!^OSdD
zmix;<J#DV*{cqM{jV8^C4<!Hi3X1I`yCSIh?zP>H6KyZBMYZuKI*r+5BmiGGHgKke
zb|hN8#WQzpy55OURv<_>p3(+UO7dSFrk%eV??Kn?`UZLX(Eu2c?PD+cJd8S<@%7j-
z$Zg^JS5k{4K5ETJnc`MIa2eG#rK&yiUU7Y%tG4gIU*Bt2T?<qCr_B?8W7hNBt|hq_
zx4^Tchu^|fdO}B$A<4Ja40WN|Vf1tNj}Fh>6y)7|^;d#zha|@5ih%Wi>*q>7hwbZD
zZxSyDC2Rt=1Klo-lP4#eZ+rK_|1~v23zN!~^D^>C5fv6qRRl)xnp7LUdJZfutH6|A
zs{Z;1BZ$R9YGqlBFY>Q;9dV0O=_*ThapE|au;E{%oKCqnRko41JVZvCgAS>rqpv3^
zuD4I{$3wOfmvwPu6%NR~R5Gp{=R}Q(kMxUhu9`JTrbkeU4z!{WOKMoYiR_YIT%@xN
zhCLTDye0PMG_vFHbV~{q@z#AtZyt~QKQWQlzgPelvxD~j&eLVbcCHBA3^Zn~*YT-j
zRj<Le%C~zc+5Z(eQ_`k?{jxeHj#2#>PWt{F_a>HhlM-Z_nfOeLfuR^#Aaq#tBk%R&
zAFVs?S;H4t%Vj#|?=Sl6%RRlPUD#}>H4_edx_(JgBk<{GSh7E+0tIdf>6{|nASr8}
zI4z+}hU(*nuneVBi0-emgn|}<kup3CW=^k$qd1$Tx-jA*=FV5bOk7bCZ+kS1oEwWf
zYHpH{rB5-D?)WIv&YdAmsp7>cYbi<aylq4gZcNWCA$2_p)U0MBeX>{#PVBv>$!{`8
zUUPmW_SJM<B0#z^y;pb0jUYoARecggN)(=QBEZRewE?oo(*_Uif6~f%7T)%$aTN2L
ze?@BW)gY<e{k~GjvDfKM)#xM00Q@4DbGJgaN;E1&C$s(i9_|k*%E$Db=uY=P1?s#P
z1uiccVF)$)*677;uiVSwiaqgs3?XDp9VcTSJE1pKBlTy2Wtts($BtPQeJz@-V%LTY
zmaA>qR5=@5v{&I408Qx(Rr=ENz_8@Q2E}s-LZG(rW5GD=_F74Ub<m@9Uo~^ra{=xI
zDt#-mY+pH-*YWYTl5th3u56yq!r^xXKab8;ltVjI8@`K}LX{*bB2qJ0Ajp`$tYle!
zHq*-<3TGwJBNDhx5c~?VW`YsGV;jLz&gpNYt;7l4nod*-WFHl$r9?)_h8s_mi|>$$
z3~n0m-(Fni#&mc+OYZ6@^=ivV#(0{<<P+!mqE>%J&~qtLr|<g5vi5Db^h8x<C8`He
ze&y&=hQ0kYd$-~2u4^mX2uv`2<!*H1WOO-aCP(n7`6w!eWB2*2Bg*%h-sayYt3ANq
zs&;Kzd1qV~cBj>O)rOoU;L15x3+ag(817n9-Q21Un=4zYj#8u<2`7we9{Ehc;wIy3
z$Rv`H#mz%YQ2bCX{af~>UH#^Ci@K*Ot5%JZ$4tT}k0~f-OV({!WtWi^zMR(a0b|6W
z82ZcakI<-4L5rUcj*I`YcwK%L=c}BB%#zPuO;(GGh*lm`Xu47K-&f57WFd-^eu!3r
z3_rj;6q<7Zib;8`-+ttBWFi@IuQ<wv_uDFx<bZU&MB;u>?Ej>oCPd6`5yUhg$&7Jc
z9M{=R=7B#SRpEscn~?T3<@x4l^W70@C>UJBT_p2-X=LpBY*}y8fSjx;!t-^%8dEbE
z?sOq;14d*64{%r<7y7Ov-jCMF)^C;{zPeu-Mvw=5bq(|8*nat+8jGdP73nk}@GREn
z{q%3$$iwGbdxhDyJY#xE+1uJpTT|{|;%<<!uRYwEzwcW%pB80L^|d65{l0Ebv}7yn
z<5XZJW2KVaTAtvk32u}cV-{YN)xzbna(1&t+NaDc1J>jmLJ7|FFPfTwI=FRAje&X8
zx`>r5o1`d%xdO%-752=3)2?MwDm;Ab2kz4tPh}$7zsC~drwq0Ty`KN_g^Tl&30C5M
zbyn&@)jLR&gvb8LBf@BfL<h?gf@G6{0R{$=Pkwoap8C=kX!2171-ZlGak*BTP1PJ#
z)#^)8-0+`=<y$H!$m%ki?A#m2j`Jb&ZJ2X^y~7RD>evh;7Ue&A<8#p0*l4~0lIPUg
zn4U8AIp8n9M)d&e%M%L`CX9mG{fIh{byhMU2PdFQzMsNuzYg4uMP3e;XLRa|{*x{;
z+VPV26Rrw+1fS=YS>AZ`H*Z5C_NtvG(C1}5oiF0H2zo_M+g;9Nmuo!T6Q6WCaS8kN
z%}gEy!BMnm)4=kH?*Lg7F~;b$@g-dmhT0Hr<{`GK$Z)cCI}k9_ZIH<prNp_YfN2Jy
z#E%nPk{dl0{$nAlQiHinK?ULmH*1?MD)hBK|0lvC`=Y)BADqGIDk^E!_%j@aR;Xzs
z{;8TOvFN-<<*|?bL2cRmcU!5e5GWFFH0<+=WyR5dNIOy}BuC&2J)5wd6^|5fYl--6
zb8Ta}6px8R2dT;3*mwVz@VFblH`M@!V_|1!NkkyzMq$@P)8PJU%l9Lk+~-X77-%_Q
zeOsjFWYj4A<zQq9hMzbbWG?;RT|{(viL@=RKT=L<$F2eGpnGg{EgHQDJ@Ms3t|CIH
zxuS?_oc;gD3OQ*iKwUewh`V9SzAK2I@6$F!Sv!7eaedyR;i~rDXxrxSrR<9Q&!ujM
z!`_H@6RSaMwuuX}<Q8oFl!CLT#FfGx?HGRy;Omt=G~2x+ECP|Pn^V#+dOCJ>dq6n&
z@Km)Oq=Ycer+!V@I3%T#I{laLd-bw%IX9G&Igh*cLq$BU#M+^0<k^W7qq$>IzSOWO
z5z71)TNrL?bfy_sr8%p_-@;-~>JTX<Ib6VBpF(g<af>FuToHK?y|j?Ef;<r^Q(j7b
zH1yMVu!{a(#3lhbi_2sW96=6TWm8}og0*BaG=KNlh3&Etp|H2x%rsPkg$A{^`F0zY
zLwIqAuupO9bwf!}o9IDxqQ`ze)p<Wth7s)bm{q~M*AkE)ag4}Qc=Wfu*+mW=r<byB
z-#aoh<l-{H;kB(`^=(6SyXSoof;&&*o-20ddt7hyNc6;4-D+W7`6phqm1I(5_ffxG
zee0Jgl*gn|_wL(}=cW4An2eLhci+WSyj#-Tq+mH^t&JjLDEKn5Us@7D2)N#Ep~Wl=
z3$XdTRAqFv)=214N<6G^y!;ivH-9WB#}5@RNR~tav$;?^1q01EFSO<{KWG;WYw5qa
zN&8^oY2_nuO=k{S`_HKV<=h!2q|XtLNlBq}56VdoZ?;}o`KG49B+UU67|ML_XJbYw
zvZ<v~gL?1%hbPf%!K4;<Y=f5P3x%%>miaR*{t6Xreq2zW(ShzAVc{)qR7LTPj?Qu*
z1&*%B&|tvI8{cY#itp>PN_fHZq2uChqKE4e({Uqt2MDz2*!O}Y6tI4_QCR=&ddS9A
zg$om2QQRMEjtDMBj>?~)LX+|oGkFECR!2P5J?DnR5%SoFI3m{kq_N+$JKJ$5AGVR;
zWOS5`ibe|mPv&g>Y5#fUJ>B5P3hAGViqWs_(+aoq<`uj&c$FwMc+?!2h=w|-f7Wcp
zBxgeuXctQ4*;t6Wt2FQyReD$`$9l`*Q~*Uklcz#?;HLTH786QYqaNh*v{N))OFI^r
zr)5NZ*EGr$cPd4KvDoIt%HHZ1L|zELg311VyU}`WE%oO&&tWRFQ7#;HAc5X%%#V=v
zXfQ<dNbF~q-$ey{F)PNWnvz#29ly?IS#k`CN>q9i95zk1<CpU>gL)DG<Bd26!Jm`B
zJlX-m3oNV>cdh7AY5FXqTyoZPMq6)WRfV79V-24dwcq#rv>)n|&QY&E2L%LPGi0w;
zA0*+?FW(_spAM0688ah)X7#4ExxrG{lX=j1mVv9%ksZ9%-VC}z_<VR^Rnnwk%W^}K
zYCT0vTZ|sJ|0&zulMi!o*;Z)$hCf}~640tcp%WrH2)->Hm1f(sLTeG3tS1%yTaa+(
zqZ|Cj)x$Vf<P@xq;=RVZZ_{p|Y^!PYg;pY>Y|J!!u4>rz;OY{W_Ppg+M^g!niUfrp
zPqOe6cLjrtcFI`ZFQw>jvF)k|l$r&p{atJY^Hb;36}p&+cI|W#RD>Lw@qk^Rbp(NV
zg#>+R!{B&sjGZi07sYNmfeUq@5DY&o>1v`o0#s9@g4RaXk$GuVe@6T)yi*^vK{gcI
z9tp8Q5c>}rq(O`<Dz!XI3g@ypQu%Nj@N=RV=0VTil7f$2McC<Hj1d0GjQ?+eZC#tK
z2On1dTk<2wObdDs-!zVgVOFGh>oBWPxHxVmWdRLT@6i6>%;Cn{V|<rt!Sp`J{^X24
zq{KKg>gm0&>`|D<IhSu1_5b2G(p&1K8Xx=6ns8KZmCBj`*Pk=8$7OdysN6iS)mduC
zJ5{2AHryU>7rAW(O&O<K#Dqud{B^)2@K|95`WNGz6erYF@fYgvQhEJFLP#PHUtqrs
z!#@18b;C+kG2+N+kDyW*4jwmGw1!nuSrP)S2&W%;C_hYOR?gq8qDgKf%Gt=!$R%6=
zjkIkYHT!T*5{R%Qw1DL_<J`*JGdno6?<UcK1i4t?h*B4CE!}b|_8J~4%0lH5|5L=z
zRL<@hycLa%O7pE|nx)z#U8BEO@X~UE%DBGZi7-7rWFaPu{jO(IOqJKwa;J}tx%@#y
zboPnQVfTn7JA%jv85=n!O!^dSFDf|W|9UE&mJ=Zjqm_z2#g>o@CEt73MJtovn9Ul}
z^IkAK-Vad6Lhbxb9k60tnhZsnK;S6Vo7tf=cAIs|H{H4ljmAwJ&HpM>m$!5^s&juS
zB(Va3P|;Yzs?5oxxU)`&)*HVlT^HQ)aL4{4;Jp&BT_qi<$kmxLs+wu!t5hj_7CnZ4
z(=HEpE$bvvI7$7w;<;84S#CL57w-_O+UVWQ{myC3BZ0aO1V-D$;*Bx_w*Zp-Gnj0M
z?$tw2E4j!M#inhw6|@#nPEke9x&pA32$A9uKYqXAK%qi&W27BsWyAGLLe>3Is|EBa
z%VGjcaHPY)<EFu8`ElPtat_mp&VdHg;g&uir?L9i_1fuDbf<Geem6Ik?04{o@x~{7
zonL_l{=-<=qrWKp%?*3pOTgpMJ$(T}@B8J;E0(}#rbT7sG3mzre<*cV*zJeKlbV_b
z-joSa5UcZ0VnJ1^Lu*8-=gr}y!H`^d10~W3p!f||uPLrLJ*A2jfCTY2v@$JQU#oDF
z6WA?`ui;!6YFu}`QS99@d1|8QZsnLYU;hez6)k&Q#ASrVh-SECOkkE3Gi!BtcbYp=
zkyI~F$31~&HZg4rt>Gsbl>Cjf29W$oqU);wGBL(Q40B|9*keL<CxOqu>YwS{aAD<{
z3aZqWPemXiB}wl;lWk%B%|)?`@+D2QQxZi*0(;z~v}7Qb>Nnx(#7>FrcipThGZnRJ
z84yaUFEVu&0%!KUdP&B^Nw!XRo!`GYGC$KhNc)L0SsNyjZ7*Z58zk`!KOv3WoBuh&
zBQ*!L_^v2K&MW_GoY4ouu~6gv3C-B(*T#LWLyer;6{p_}0O5?pD?w+r&b8uH`^siT
z$rGzP`ms*&k$IUtLLgy3W@42!Y(+Y>CXsUU9udsiNLq@@5BxZep#KA5K%T#!AA-Mv
zgFM63uR3aCb5yAjx>5M1em5P?CXHHp07e6f7Uk&|*8REuo+6>Hcu*UGncsE!U!y)|
z$P9BNO<-<s4RN?^#=Iy}1#u`jz1CWV;s+Ow?ZNXi@Ut1%z75y2z+97twkdUFXqJKI
zaV;pc)SNE!0;$o{We6OGZP^$bFRlPjO3XHM2n1LDLhA}4>d`5CxlyH|$@9IR-%I_R
z>vFkva4vb|^z_(uYgfkg#iPJSAJ5wR<y~(lu%U2G$+P7vd5)c%s}DHeu|>1ITX3?C
zFF$|mz)i2cq#?%g185*pW#vXF5d{*qr1XfZxlDc*$Pvg;sh7&OEugw6uvBiNTn!L}
z4TQ2qJ>+1Fs1#iTSHgX&9}}lsjp0quzg6vA&x<nrOsXz^0e_=RvlKmS_!woXrK&k;
z`ek~uI$Vw6dsIWF@i`@MN;QZb`&3<pqT@&bhrV&Lz{1G{QP_rU+iJ!+p+j1A(pu{T
zv8W=B5(FVft?CHQeb`P0o}Wb~<HOC`@G_Pzol`}N#sm|8)nckTXS=!~w0a7-{XNTI
zWscH7gl*dv5fwSAp~ToGOZ@5I9(99;n2WrHS@X8Mq?O*U(GKLn+R|4K9U8x8)tY?p
z<tGP64%AM3=tTYKapi*8RSKN<s}DH;?A5LK=+&)WQTQBL&;CiRG4gAF|M187dvAF^
zV#`9oPtXeKMAUhPO@L!*zn4Z+pt_J?sS;ti5}@8}qMfwJ-3qp4BV%Vs!78}46onGY
zHWD6lMQ%u2+gK2RN^<{h2ZZT}P&0Kq2I^fite!}w;{>P$fF?r{DW8+3V%-UxJ<*P8
zRnnv~*_)=3m5OjU2a!S4U}?DmVM99&O4wiuG|44Um+4fQUbSaX<P!-c77}g5vVkb5
zBM1n9d^k4UJUFh8OxA_%S#WX;j>nYapVgE=3%GN24O^lXzWV7g<T;0&tz*=yVSHl+
z?UjZ2lV3StTTbP#s_nVx<x;t+hGsrF{gnqE-TW&XbGHAPCnS!wANz$UO8V`ZFIauR
zc^Ru)64y&BQakW+#(f>fg$188w1Tmb`16nNedKkv%mtTkd9!W9#Q=@Hw6)(&trlXY
zl3<}CP_4%Z0^(&zfl6enFEY-6usLaP0|8cpU`t#@Ps|r%gWKI!%tR$=(~edfTSY09
ziYYwnmbkSJr`NlfA`cS#>G3X|>6$%Yqa&R&xtgv&PM3gA+n<buscOsY*cz+02BG*H
zvIwPgQavVxAp}mGs&Z5`*TAD@fhnycSI=jw-xEN!k;q8dhElsYeGS_LKy}nB3^w!O
zdl|T{1K+nWn&H?vLC%0KKJwL7aA0H57DyU{s4oj_naqmc{oh}VpWJhbv-~r^Pi1<o
zG=BNH&!Rl=&{v<{@|TZ3H};nOjR$U=X&(JHQ&!K<)d!rH5w(1?l6c0=Ge-`1ju;s9
zlhUdz8{O&f+)ketwr0KJ2FK2?sWxk&%cA&;`~J>;Z2xoEJo!cpI-B9TzUrH51&OHF
zg@}>_mMuiiwuG<+kK?Kx%SAT`XVFTg5yZ24v#A169YWNx*jyFvnEC*$q$nB*xo?>x
zH+@GGDQGA4bb4kFK=c5JZr0R5K-pLt)le$c@yt=pkDS0t&lp!}7~NFLKpGvI2%(RF
z(y=tUG7}sW;Mfw}rfM8zgSMculzvV<qQO!Cr1~+HUZ&vN81P~N-i}?zhvj5AB)5Zz
zaq0w*k`Q4WBMM3L$dr8urKq06!EG)MHyA(qjEkX+z*r`M8wmsuSan$upMCnC=Kub~
zM~hx&<~L5Zo;ajG>6e%Oq<~UySK~+GPrS$B*&l91Wi@rL4>tdJ^#SJv;PPTo3)vF*
z_Mnx)NZuDCE3$HE>wrCe<)Aly-C#DmV`M0kU%8@yHEWBQ7_%{6@-SE`fM;A0Rs;Lg
ziL!Y3;0*r$fv550@!vzvT7%)jI+{sE@sJzK0Fh`S4x30?A)+KgBI|UUO;CL_LHT}x
z+EWQ?2NPLapsnWet*@@s>`xq<`#Z65_4|2D_NOMYNN0W1#-&Y6zBDvChKkQ;v?BC2
zV0Qd!^qeXxlczcx^>f1orKNBa=IF-H^zG{X-c+hogku25Qoc2c%MtXRa+?V<+u}4c
zi|jQh&fyF$m&iFbI6sW%4}ZcHvF-cr01AZ>lm;g-m>&&Chel$X6_7}q(_p_?Fy5wq
zG^*N>>YAniCQRhKgnLxQ;}+HqTiCKCia&nfOW|*R=>DRG%AZb0pZ~>})R_NFWlTum
zmrw!zd{o%Hv~?Z=PS*zM#lR)w=9rBE#}&nbFGtqq+4$~3XZ*@iwsggc(V?xYRu%cG
zDIcq+vRJvgfZ-80&NIKsxgR&fEE-D|ugx<)eZ;a`k<CRUlmhn7Z5+4mcrBhgaR?v1
z??F7a{~^+U#BEmjd@O?qEG{QWV^566lR~zR3$zwgk|mbHM9GTJTumJKOwoSJk5nqh
z|2)QA-E+qMP&sd<oz=P=ZK4+nrqtYU?OZ|8NJ<c!21^wXr5)j>xiT%0;~z&wTAXYM
zXY(GW-ZrKR+`Xj{4t13h&*MmN%cAd%fQJc+P6!-rF5z;ZkdtE1kuTc|wP%jNuKt1u
zyb>?xuHoFj)N^uMeJAS{vI7_?tif1uHA(~H!PvlXT*&9ti5-O&WpEhG0L3hj^=e|K
zzMuceNAAx)@Z_w|oD)AkD?a_-+cA+nuM9}^)2Q<raJtb;Hyt{&B_ZqOnT>+$$+58<
zo4VAMBUfkaq036y;*OQWgCpx#4`A!&BGzs!U}D0<@PHd;{6ZXxjHoSISeUo%XCG#m
zp11793hYY5LMtY2h9gnENNJ0bAZ;H?ITss8ufV^*bvM2+@g?!G2kv(nTmIvP;4`1H
zxQ#@$F24Bd>85$QRXV`qf0vOH9}1h(w&#zDm<H3)>rE{oIzC-#O4aqLNi{XbK2+O9
zq#O;cGy>|{i0Ywt+8fZ!x6(<R_Owxdq0_A%z#%TlR%oVDDxo+WTXQ$+4yrSp0vyfN
zC>6EGFi;3%mc%~n%5N>TKld?nRDbC561U@0!HR~~FEj@)Jvujdox=*(Wt`!a`OFZC
z`4UP4gD7M?_zqE15h{%`jxSE*<orB@2<~Fu-k+LnKDf90zP>UMNk5G`Zvdy;9rR++
zi|e>>S<!JZQgY?wj*MJ&ONNbHSIiD>pBNb|tY1BdEgJ{1VSN!BR^>60%LUxc#!=w#
z%CgI6j@ta$Ig2lpxw~AGH0f8gmGztfG1cKMI8u%xg*l^9k<!9K0L&a|Bf}(it-OQF
zs|w-YeB&#BKkPNHUu=Kn9<5mEJ^6cT*x!Uh5@-c6n)6{?ohn!en|jN4!WvD&_LRm`
z(CO9M^qQadrdx^jYUmKpdNgK7G}tMn_gvY{WGj`nbv$c~D`6+XaVWkrsHZAZ`dfPC
zD!Orie2$|~6!cb-;O11vg98b|cu9m<Dg$_&ZWg!xugyw!GZ`MLG)6X@t{1jrI=h9-
z%$i7sgA7qq$lx&Njfa>ue_xXwnGKt*&XM=ipMSY^4g<~^fqdtr>Ak}E&LDR%JYb2D
zHNKpBl`ke=TkwjPjSr2Et(_dg#<fG(x?u=gHVnq2BZa!_WDqx9zF21b)FJRk7P&pQ
z$n8p<p&2v8ROvD08nwB&Dy|4_K!;j%)Z_<aqSv(r?v`*=<=6t6Lg2oWEo>dV3AgMP
z%`ZOA??xutwb=UlQ|VOBZ@tpj8&eBajY`I3{lLk1+yp^H7<X&~b?HZe#~Fb00$<}^
z0y)*xq{HnxUsGW3kk9Iml&QJ~U9C=5iJReZv^9pFZa`&mU5L_sRw@$HGl=0>25_<f
zO<1<L(&Ug$d=D_BQJw~iL?lSWeB8!73HRvsApMqP1XOaDO4CE+jsaEmmm1i+QyaRE
zeWvs9KR&Pe>%0J*f1Domo&=ub!{I}o%|=EYF>#@tOx%)XBd-}Pj9oA_I*d(gCb4nd
zDAr93ipjB|W<Hx0B5`=VY1#7&!1Md1Kf5GRu1hpSi7?Wg$*N>SB0IG?^v+RM4@T@p
zAfpVmd(Fv}$+j^pH<p;XrNGp>lzA0b9o~EA%6!%6b=bYB(R})l{c!9pOjO#>FTXU<
zq337|hGaew0f`3%PqcTARv_y}&=h2dqwO?Q_B2@bf=zD(l*TPRphJ}_MN4<=M0Iqc
zz$X1POiq=?THVsPYR!<`@gS5_pR!0b6CDVQNRwnkHM)8(kn<$BH2Nhkc-1fXYF=zl
zRZ&5)B7%EURHgP&(Jz6}i@c-X0$h5*s1HQngMed3aeR~XDB~8n%SQ_?R&L^A><SNK
zw-wxxt0o4AOY2vRVe7hatXn;XiP52;kk7}kT@u^za+TXp9+mELmFQTBR+u27A#7S%
zujgaa6Oh_hfrh0vrnZSmfunm(JY$}>(u$;~yRn-%BmUB0rGA<km2;b)tOR_=+S}tw
zqiT!kn?BdFPG1uyG+pUih5PBd(UyWmGcozFP`aWb3B8f&B2E<{LLhCtr`5;3l_x!>
z#Z;Pf)I+81-qr=)EArD(Pnw#kW6%a(rZm-wd{RY=2D(mlO1Wyf9F`-LI8kYZY;EI1
zzqee@9a|vd2n;$29C|G;$tLa}r<*T4m-M|f&=mc(SzoT%#zf&Fh|F4>Sspc3fX6e8
zw@)Xio`_}nRKzM}!5U#88cDm|ei1P01JOAQIO&xt1sVMT`)+|d7%A9de4{H@-I|e8
zZ!csfcdi^A$NCkc*t~WeQ!9qWim|~UTgZw)FkY)Mexl0k@@!(0g16O@2-^ZN0Sr0X
zb*|#wr>2xhM=-{;D!mU~#!ZycowjITFtz<upkxNjnY(JKT^jLpVY3^%=$vDz5!<^q
zy*5~^%w8EZZuqI$<nMmxrSJ<hW0&z{F&1qNIL0?8jc^n<Vy2I&%2LNHD~)b?S{Sqs
zj!=!HJ>JHh=?vXURVVy9QwnJ~9i3Ter!K|YXt1GUBg7FTQKSl*quu@xaba=EDY~&8
z3CEVm`@l#pfu|i0<v)*Y>HcNW-8__&7yav^wf<+;jjhhF9UsPcDT^%GXUI01K^sf8
zCgv+OELLi$wOaKg7N?WAwx{7O-QSiAk4IQO7V*kL$SU=gsKqY^MBS;L{b=Yc1e`O&
zVTXEVFfnK+D=u{9)SbSVcx^F1xpQ)K9BZZ~ux@GsYu1hhqoc*x^(}-6w;OfF57e1m
zn~u?{3xt90nodI2GdsKEs?hQ2?e0G_*v$Me1q&m3Q^bTGfYu#!(CLR(t=J|SGv~K5
z|JJq-W~yg*$EcJnedUZJ5D|DX<nGw`ntJ`|^8YHiSA1?Md}#l-ORaR;mQ<*^B{)@p
z3}KyCg$&@Ry^a^8QHCT|fYPZ}DMFY!DO9A>TM}2@RN5|(s#VHTMjwACwNgQl(cB0U
z2rDmRiejjxfXFWTHyxigb|>F4l}o8^a!ac2c;A&MW`L=QfERNTa!yU=`X`=MI)%zO
zBlZZp;YTuZ!yjC<em!o!^zv}?idFTj?JFUo&0=L6lJO!qE`fL(k!bL0Sn;dP*5>(2
zWAmxS<{M6*Zesd$1xpJxlxx)!^|11Ei1NcNYw3};y|h1Ii?e~OH0$jOv3lS1h}e0Y
zmYpSl)4c*^-AO->ov(AE4L?@!CvO^CF@m*gS75{XwU}Bx9*hnbL)RvO7q`it^Ta~p
zHd_L%y5x~EwNieaWIL&2q;5Zu-uNbU>U1`z-=@*W3xTJbNf<zRfw&|EkdFV0HXcr+
z8VzdZaXKB<XDWZR37>^}Tt{i}LVM%d>2Uwy;ImEp*p48c`4;^>`sYHn7h@Ug2#0pL
zigeQIl;%cKD+={jhHEl56w1X<!DecVo^-{5>F6tkqdG4$d8Dx`O<zb)+LOLD>R1c_
zDU?#>aLwf?&`}y319FN`W-7WNzn|f(#H!70WHJIw&`7|4+BropZ_wQ~GAM8O!rJ2I
zOK!gO>iV{+9U_RBzxPDw$K(UTCAE%d&t=ZwI~nA>9P<7M3K<cvD8=#CHL=JHhQjfh
zh^zq1VQ4SRSEf##s7@U}*}UWQu{!2XHnF_aLakNXTgT$P)nw+rI%c10@cH9yt5yqS
zEe?X<MMu%}e$L;kAaoW0j((H#{t9mZm;8vEtpBg8$F>!AUv>d5*u6R!ofrvSY4Nbl
z?PkFE%u?bv8VTA#f_4jt$c7;yxxF4cn-;{=NJdRe>i|yorh&zjtIhq@m!6a=T`w57
z)Zr>pAW2_G8Z~vjAPmUpjY@~n8LiwQlFe}_h80{igC^g!`nq_rdVEtj|JvW1=O6v?
zSOniXp<tp+qi;J_q)Ow`ZEr}swo^u|BjQtT!0b#Vu}QDerb~T4Gg>B%hRD&F40zI^
zcfE&_s*Cl^IGslIC;+K_%5u5>YH3nfrB~`kku5{Ul^D&(D69@OV5<2tFaMmP0~qse
zyD6LO{M@CRcDXlPd~=ywd4KOrgD2!QWN|p0ld_o$OA6}eh$KT>GSm}>#g+swbMDT#
zaBY_p5as;>266(0VuCfLB-naIAo$H~A?=!oWXKnrvAsOo*gAK#z4g@5_K%!8T*Ik@
zvzS||ovOC$Pc5_4U#_y*M?<fAylqt$8e+LsYf?1yk2$FCMG*Qf1CD+(OZgq+Blhi&
z4A`ruF1h5|_*J)TuNQ{6orH`xn<6_`79wcH%C3RZq&U)Zsr9&8IvaIsatBz{72H^c
zzYt{7YLa^T?(aL%PD%iGIMMFqTTMPt-<W?J!XhPP^`ECFM@mxa9wY-%R6W<iy!2R9
zB-9I50_~97Ti3m&zP!BfV<mp`SLWKE{&+f@{F^O_q^i{~0^G5nJTFv=Vxk<A3a08`
zb<C;nO<ILA{7bhZT>Va0*iDa>ijq2pend2<N8ODU&rlYd;dd(9GW?Pvhl!APs0~B=
z<ETu_L^!TPEe#waV*$Kk3p}x?yluVQ6w0@U__+7RU&&$PFW$8Kx?tPt%bN?eAR9zA
zShh0mKrA$7(r9H%klUb&z(m?cN@_)$NpcL;+g)&F4O?znuoql%Q{*<!anDYW%MK$~
zNH8#*@Xez^c)_i)ki|rRHPEWJ`1Gm9<lNC<<>|xC+fN>>VD4BQmAPiP)TlmF;S2Yc
z#oR-6zVv(rbH^*mVzm|41hr^<GZ5-kGoNc9WPi88#<ho?OnmwMrNQ-6H@xay)z`c;
z>$?T%KmTBYsLDWTQWP>ysS<geB+Br+JN1z;fFcqdm6(z<m1I+n#2|;H=?7^(WHw$e
zk(+WjIz{P;P}2WT$EWmEo;ufdv&(e0(QTeog1{8CGyp1a>=t#+F?SAAcS;9wfQ-Aw
zUcdUv`hmmkkLH~NU#UlXmR_9CA;1X%D-;$oI$cSTK^L*ls2~|fzAl(_Dpb8T72Qav
zSKOC!I%#^?Q6;CTQ_qFEa}2~IQ5r>On@OL}xS6s!ZFt|77;yzwuBpSy&=4<*KvbOc
zGQg(9N8Pu7wBW3K+iknwTpb_Y=pI|F5)5nMRHV(})qFwS&!GTD4LFS%Pb3q<ri+^X
z8J!PQT~ju$iU`+zBC1!7BBIzvz3RYPW}K4~A(z~D1kYq+<O&f6Mk1`9jKlSpM?&68
zeJ&xGXz}t=+nzbnx@3B9<C4>RDwsJ~#=@y(F}qlPwu16w4OV%oVl6&CCr&?C5sQ^t
zP)X8@)C*sCdPbe?0Q6l?sq*ZSpDg&RH*8q>miq9DTz2Kg7*9RG&?=KYl;$l#JK~v9
zAyl?C76_e_yAwGWVw3KxuSlJ}ZpN*3rd;=qQ&Nweit^H*s;Hx52bl`g%!W-t#k>YH
z2%+=y-qMW*HLeALombs+Ql#QMLqzMRvC(Qb`Ra+Qd9{8D$-?y?3Hb5bV$pa(&rkY&
zRFk3&X~#N`vB;pS`|#>j_mtwu=z?B!YOd8Od(+@tn#z#+;;3j$kH_s4<2vu>nesRV
zXfGHI+^OiPE^%tq)a5%;O6tf*M`0@Jq1jayad^Or!3blkTS(x-CGn6JKz*BK$YFcb
zE?IB>i_!dsx4rg~x797a!auQChGm#^-PU17*Kn>rdzG<~!I*ioETMhHVx2mwhFF@C
z86{~mED#dsW2T9!pOM=j6+6fZl|!Xw^`?u3h6`(!!`mxu&rXD8#oVWKaU@25RgCRx
z!*JUbkq|i<BTmp*Y}$)QnmebTsqLKGSHsMq3Z_pjVQyjm(4w>Oz*4ew@0^&qe?iV1
zZJ^p}1l4~;PV0B{>;#|h65!~K;#rfKEZg)OYggP7mg|n6uojl4GpH}chKwWvSc3Fh
zI_l`=v_1TXDbLCjH#*g*-c+eGLffoPRjOz6c2XR5hfc<zb{R!bof+6^t3vuxQXERh
z@6uyyovkLRyD(-pE?qgPx@7b}=C3sn8oN%K#}rF@)4JQ5mHON*CEWA_bL~(6#W&+}
z1fmvIsS;A<8qXPZSQHmnJ>zxt3)ig*M#R|RbJRR>6S4F}J!!Vu`MG+GG}AQ4ogPwW
z+-6$9O9^aJ{c6%!Rj^chLz-@BsGvxL4C2XFb;XJR{&0v^;^~-BDqFE{v2^5@cUNZy
z`D;J5qOk4e+pl<MJxU7hVxs~IkW`DA)GVL2%b;{hg9a_#E3W&w(h48NhcTU3h99K&
zjSfUr{*-;HeseVFDAHLt3F9hiQm>URaWr61%_u~Zjx+MWmVHbwGT3`1JX>%-6Y=ao
zWM_(z$gdp4+SM{xvnvrYM;3+xt>u<oK3d%{v$wio?zyFRpMHJ;r;p8JcCq^Wytn*~
z+4%J5X65Xoi<q0K1oM%(;+~a_q~BG*@%hvxd4DpSb63|Zt!01u<Omi{gXC9T)oyBo
zkP^A7*g~#y=5Z9jyrA4`O3|H)lcD6&>QtH%bW<t4&ZtcF+$WXnlS3b!WT|?$GcY6_
zkD?>nbVGABZ&!6_r#YNC#16mIP0iHv(ZyU)Fr*QJDo>s@?5<sXb$#Ey%AXg#nfuD^
zhY!Dy&yk4QiJ+5OD5b8NB~HKAv#N}tusP6Pg>dR;tiG!2qEZqQ@O1of^!uoEIqFE6
z=5<o=>}Hi|ZCwAGhDE60gaQlVY|MmB#n<R*nWkE$Q#YDOK|apZ)jc&;r(8wRz68Ef
zzIaD#nno4<%>zaD+DA+IRhw_R_+9m8JMY%RI!(?nVoOys(;ra!QKda*>UFX1xE>m<
ztcLKVk!O$ZbH`)Id?j#6IVckqsp-m!M&q1%!)RETYFgzg5+cnJ5k*M2L~L8UC45xM
z8CXl;&LJUOTX5HpcxE8vnPLoo)E6sO6vLHoVnV(*6o?`;<{R$P^X2WQpIqF2`kC1u
zK6PLjr{*hjhZ_rDIx3I<$>G)$U#~QmlCuqTzDt0U5+vRR*LERe%8COVK2*mAr*oSB
zc)=;Ai%q@6N>7xXs&-Qz<^{gJhNM*~R|iN^^>E7Z81*mZW@<YblBXM)XhK)>EQYI5
zbHIDVZt3RJS4cWuC2&(b6BV~pvRWBg>E5fJ%&<#NceoOcAgp7oxSKDG9f_0K<|kVA
z(aYNLTyka|TF{_h2p+4A+|>k`ncU`U3Z`0ZY^E#F#xT+$v!N*CF$P=a;X9m+dfZN0
zs#L^Ai_>L_&3i!{hst6o%HjHo?+Vbk8Z{J;QYl9d@KX^E4J36L#)~n=MgxF&7E3jk
zd<&(q2AiC_CNs$Hd~7(sdef^f`hj{Q^xYt;!?LLR-b7$Mq&dBQHBLDt%IR@Zr}tDN
zM1Vk_A*EW1!0Bm5P18i>OW4&qC8X@u?}>I@WKxhv52tCVWO>TzW~2ft3gWOMiv9>%
zrB20c@PIC8p%1>8gEbHE=LL6I4BwA=b}&YEJVJJ=fHfDb2v^^1Q3MvpjgT+xJ2kfF
zbC19K-cL@w`>9hGKl`+O*Xxc}pE`OrfzEf8!;vznsSR!kL59AIb4%F2Cy!m1<#bx5
zcY)B=AY+r6f=!wy8SBhmVPCo%^mtoM)aobH|Cgp$D$-EIZWnM2L18LcFH#jU#HV^H
zljEnxluD{^#BJ)dOXxzbBN`Fu6HoI)U7+bw9%;p@r^3Y;qA0f4t-d*|*A_1xYF_{E
zX7I89amE2rFr?zDgf8g%3f+m+j407;I%+u8?~mGSTHvRqH>m9^bn2iVlmvik=D0ES
z5~_mLO+ig6MHZz-0N5po&BmlXO+{z5xzrqS%ao(3ox$jFR9W06TMCBNBQ1EDHWJD~
zq#*I&i}(WTG|IC_>;ZYx=L?yYo36g_J@t0tyX~l@nlp)W>3Ail?u5n>QKeTZ^);kS
zntrOxi{`Pb@xeOfrHfw*$|=~G3y*F()uW6FZ0LZ~>YR>-sN8NMAgM`arT$JBC)S!?
zCcP&bj8a=z^WM@0gnsYP<(Q$FxF|1ruoeL4c?sW-cz!tM`8C4Mugzid!tLS2rJKZ+
zZ#fix`oBJZf%tOnh#0W99j`sM_iO>3?`ldVSz~`QtRhV6>ZjbQ;>jnbvH60H7#v|(
zK5ecxkt&^%X`Q~B_UzObYHCz5sk@og205d7vWK9NLUPqc)KM0vgmL=s-lOfNL@L5D
zak=VG>Ph!#m>ajujPD-Mpf_4|o5yLi)SVHfDIt}*nJBK?2uV*8Gjie_a@S5>*W9~*
z@wW$@U7x5$PaaLpLv>Y-B8rGBn_vZYR8rAB+d9%PCvzH!sobs$AoNIjL+J`uCmig&
zif$UxD?eh?C2oSswDY@H1EkVQ0v6g(q`gtI#I>2a=68tW(1Y@F4zPBjVcuwh>COYO
zZw59Qd(ti9wVx{Gwp@4B1@Er6W6uramaasZPcC)uQOBXCSfqV#CfzoML8`G-mFx8f
zOmoMHIU@d07b{Z!O@oaB!c@uK;mURUivl<eHrnGSjm0DdOWmoT^q2%PbY3XGAUZ}h
zipO|Qr&y>A==J+c=@<cbNR9*2L2b!}Tb0P|iBZTk`M~Z5&+S-kzx|!V&6BgtKK;ZM
z_m=$=tE$0V`)mN6?`ldF%GrZKJm0KV54qXg1`$~yua)QV=r@YE{^k)hmJ?DAYoDj|
zBvIXeot>QS)(#`Arkr%-Z9O28ZfxQJ=}JUnvJJu9iEeto_8hHdRMHqGRjyFpm+~;C
zpq@q&G>FI;m{Yi{#C3`j08g4`129HHGj%Mf?E@{<JldTqM;VNYpQ5OZk--c2*!bQ!
znXP@XZJ*j6#`B6yl}sj5#$>{vhQO(`ims%FJE3r$yo7bHfdP%)j4UPIO&ZlP;Y)vL
z$YcX<o%bnCrxZ|iUi%A5-iE`WF$#1=R~v}<8yew4getW)7}9uhFvf~f2q9c!A7O*=
z`AopkU{mnd`6cU3cW3OWE3Vk_&U&2W-7smXYLq%fOeIQVxsGlK8TI?CqdtlR)8n%|
zeO&Z!ifj@CHl2p^PFiWA!A{$Vy2zQK%!U*<5ikLZ5kcw#0yE#M&`%T2G}VRzM4G^A
zsdf={LMZwuy*OBUG_e*^(qj-Oq=1JZvL%89XeJJ7v5z$~0?t5yNABhBhKb!labVxb
z!1AVBs+jxCcR#-AIj{a@m)^MTWF`o4;<sk154v0h(GFZE#&b_j<G`K(g%Jks(q`%5
zN6skHq-lcz0wY>GQ^{xi>CzOcLkuf2(#%()DlruVglXQ?ztcQVdP};$6WyC4v9%YD
zCa+C}GA;SijZS3hMRv1*ogo5|T9Fvp_^Rm!gaTT>qqzljJyb7+zS4HoVM99!?KM-k
zgxTzx%_V-ze^O_ldfjnCO`MWN;660yIOe%2T&E3{s*jBbFs-_nbHArrm2x-T3RaiH
z(G@iMYNcS4zSrinQJXC7pE9isotwrG{nh-Q^f|7>VA~Aq#v{1YQ7$Miq)R^#(>RGv
z<C!K$GVYi?>b>DBId|n1m+g2*U1Gou)I4MxBn(LHLv-3~A{wC^H&ok+s+19j#1zoj
z84WlD)U=~%^Hbp>j-(pLtWOgygH&xZ1V%&<D_~My$^=lHzK`hV=6Btj1T|;GJwJ;C
zM4T}FyM!T3fFPD4h=m9vU4l>VOTP<+6k$x?GpMgIL)eBIkVuOARtPj?0>(2q@Kq0=
z{rVz~Eron6KP4<VdR6a!IS&D+yBgxz57t`K;bQG+o^wkooRFe|yT5!K)iO{R=CJ8x
z&|_{*U9&@H8bIk7GIZ9NO_?2XSVuQXhNAK@(E*Xpf21rlz@x%o0v@7b^zZ0<{qvM~
zPQgd(dDI{_6QFR9nHyl6uTDNa!Aa?6LVBbB&>%w_LWc*M=hm~D^uHx2wOYOE`lg*s
z{Yt^U>Y^SRS`ji#ji;ikp9CXP*6=3k{ZqYGCVgUxA5j%2{(|VHJAu=*IdtMhlPYkP
zjCDT-bp&Z}XFP7w6v6aPX#h^sJrf<6ZgD!soDZxm3M7;(5PKRE=S5e3B_J@GXqwHH
zWuw;X{;!9zt1sUAjymjNza`pSSPqYg7Lk;KTIwt1wVfMNF@b3w)gvJYob4RoWSANo
zOemTNiHL?2hD_bmrtbj|0vZ+lsD3>SCQ%9iDk5TB#EdIYQ9z@AuWwS{RP?0pLxVQ-
zV@N~<G<3g&hA3*FX`A1L>hGio6QO~pb0e@~N`=ooiRFrik9@L%1C==}1QhjVxW#E$
z^4YPzi-4n}l2&}89^&}>PA@*~hhZh;q?ARBdU+c6d}SJ5mLpq4C(<Ev%HBs%FG9;&
zO!T4>YK;s8C=`7t5Yu3js*zKm(J2-IOnU1A2}M2ntN9zUR!F0y6pVVJBBe+b6swsG
zk9dm=oe1XS&gc`|9q5Me)Tx{j0xBibth4^NrG^o70ElrSLIaEqU2KnxUl6+TvQIhA
zhy@n5xXdAu35Taq!(fyW0y>VRBAgEIAf-^%v)+jc#-q5yFQ@54PltSmSyH25(y*up
zXi}qex-w8InSu?aRHhr8o<tF(G#OJxHu`u+vJzPiGy@88xaKmH!=eYyNKQwp^Z~ZY
z{r=z1S{r`wqOIRo=k}N%L`@w98nQjTxR9STfehUeW^tu?Qh=jB56fq;Rm2Ifj1ba=
zAh4mC<UyO%?HVj7G9eI1!6pTu6m()515dv<U}B;dnkLH6h-x~I!%Wm7Mf!6BpA=;D
z-)K<MQ4T{W2+Z{F6(9*IIsitGMStT+4363O{MVN8^r2HK(yT`brmHg|M0t<?;9i1$
z@_RkPp*LYUy8oli<jCia&VD)Ta5to@wc`pLJ8~2c-Zzh-aSOJuLttI<O{-QWb5g;w
zNoI5iqD6xyicy%70!UhwGLeglS4_mCQzH|x7+<&!I0=%sr@)eGY0@-Jb3^n@`q}in
za8jpIPEJEH30xckoD73g0NgxN8;(1SQ!cJG^TzR<wzC2t9VXCMwW$>7a6}^H>sQ|{
z26AiHl>9gTw@hwjF%e-L#W7^6Zy_PSssIT!giZl~7NeQy#0c*Uub`?YDbQ$srX%Aq
z9TF;yQrVEMco`{5I&(?`nA+2nu22f+K$F;pG^RUH>O|3wB8^p9Tvunt^Ac@gBZyr{
z;XrjXSuVJhrw0_Cm%+;Hdw$Or8~**)O>e2&{u;j(HB2X|E{ExK$pDY~dDo*urK)sH
z3T)^?Aa$fkDX6Q@6#{{FTZ%Z6sy{si4Eh{n8ndHE?I?~&|Jy`A6cw584G1Z45(F;v
zGjpFr=zpi6m4c3nmPp`AsafZif|}G{g^qmG-^WnV5q(dmUd#nX*V%Y(PZM9d`!Etl
z?vEKPHy8L!^(b$N<9F$uhV#9(K}R`>Xv&6o@SVKro}Mj_W2AVAXoZX1^+G)I;315T
zXR&^54%0_ejoG-=o%tB1G_Js=tFP%APNn5<O%@x#NdYD8pE3`pNsS(1URruLj(;i|
zFn6XCnF}GvZ(ONU=^J7?X*!WhJOJS57#R+#lbX@*sKZ@dvn7Nn&@nanQuk}6+Ubt2
zh=4}93DO_Y@l&ooXs=pvW4Q0o$^VcqUbnuCay^XO1-KBrP2ix*(492O@L-xV(mJCQ
z-_*02^0Nk;lx{Vel{BR?9DN$~7$!^wogLw$s!SQenuuX_3<m5J5cRY)(5M(j0#Js*
zf<%KP07|GwfTMU5-bxa9UM|1FdHqkw`slyfwCR@mz`#bo)vlQ|v!{<FEug1Ar(-mL
zsPr|IzL_+NfS*8zcpEwgXj6v)KvShuWh(9pN;^QD>NidIy?zf>2|>^&l1AJV$f^6N
zN&{26!?cS|s0x=+D68W$9@0ubU~<~jhbSeW>Ha#VRJJRsCCz+(k&qaj;;58keB$p8
zp&2gexn8axKY!|ex0THNLoGgf!kn$Z`QA&_O|6bqeD~lR7M2I@%4eqPj$81fs1Dbz
z;j3RdfRT4?Lutap!ihvxHVFCEUw6QzN4wJ1;B+b~DY*24j*f1+shLugrXNh|2-qov
z^;E=+okYrOP|<)m4~l9!syI4X0-Z|H)hJ8z?r2;J-6sUvP5t=lO4uf?4LFNQ`_a=s
zpvqOc{j#g&)r4pg2Ph5f;43Dt38&|ue6x*ANab<bR7{mtX@i+5m#RvXYF;$h=nbUH
zwyGzn^X_#&lTHtNhqCQzY;-7NKq@7Hb+@&Su1twp-BOR9^ca-EIgS6*QPhwPI6gxF
zj*w=ilY%aZk+g(c4ePNhcKu%54mYh`cS|@_y4Y`oP15l8_zHCtGRkDE6Lpy%tMrm8
zP`(7u0~9pbzK%TAM;#fk2^gZb{u~wPcb(eQ(%e_7Og80kBdpYlXc7r(g|aGhtFpT`
zZqu{f(NU@^XGoPbN{Slk5}+zxX=%OF<!|)S-3y&=R3;FosH(J*sp$VN|M&=ImrlcS
z+8A(#Fkd|&W|xlfmc8d+MM?0A&E5JQNU6FfcqMw|%ON}ZKTa=vJ<nwvsCm<zocreS
z`Oh7O;|t^mbvad4P1Q>M5_-G8Rd~%4QkAPo3LyUz^;O-BCPHm^@}Wz48pXkw)JmmL
zX~%b(Zkf(uaptY_I~4}YZq6P8VH1b~eG+>G2DiZA7XZJ=;0*)BlUrF$A`?&5spcpY
zFzVQJ<8%OrJb`U+C&u>mxACFD)nP1Y%&)Gr&?X?+JY^<S4!4OfaZNg9G&x<qr7Lym
zY|>u7rXylAniB2gC%7e)F-ZFN%Gs|&3~P{6Q4ZaV(l{lsX)_Xy>1G)mkD-t!9~zQL
zaB^-$9FvBC>xz(cMLTddZCZU}Fg1AvZ$|+bNhuX6Ocgwpi_&)ORHD*w#I#STG>TFB
zGys*(+LX@b_3<fQqzz>|L104>sVax3+{+oCwdPkksg8+^^f>^b{>G$2ib&Rv!RhxV
z6+)7xMY^&@uaQ$ROs8GlbgM&9o14<`P{ft!E_XU^e^_E@)WY9>>;(27IRb8lAh!U>
zDA;@Qv20)+{^_OmbH~mWusMqWM=v2`l;!>Zu@xVGc6#A{KVxUqczL=K&Yqgam%ely
z`5_L^*LsC+)S|EYMnO!SzC7)p>b5YXl_!-jaT=1XG&?;cuvYp?$V5=2q3Yx^mgaln
zW()^p(jE;=FXVqrK29eS5q)i--2j3b0S^=YkQCm46n;U%8v-)pfLEmI6$8&OPBUp$
z<wgU8s>-QS5|y}#{~2KLhBz`su0SM=T&$YBh0`UR8aQbaNs8%d9~$tYXu`Ikz{WhT
zu3V+PKpnAOmq_mV=;+U;<EPVA5qCS$Ra*e1O*(~AX_VrpbW~$2Rk5y^QCoveqhb^g
z8Q@XT4G;ln3kxx&RLp_pWstz)!y^}kD<)sX8|_eWS=!Apt=#GF)kkYQfapb~uSZD)
z2yBR~9|G(_x=BSC$JB)uNzrba2q#K88v`OKUzc8hIu|4TnWx-}0Snb(-upAn<CvSd
zfF+%Bx|a7)hE3<I=m3zea`irj;e%AEP4P!`70m&os~vpyv(tFwsROXRmP!E&em>qe
z{b0V4oc{V!eBbZlEL&$mN_A$G6D5_T&L6(nYUQS9D}`Wm@Zz``R_tsh#({lDF;dK8
z=e99bCZsEfCT_LYO~?G)NRkyl(=p>p6QMMhPKo1gZ<UJB6U8u_d-e2WDOGVdZR@z<
znXp>_LZ6_j-GOBFbT-9IrB8NU!mCU8LqL9<p;?7slo`0@N=(y~ET(dD;x1^z_yY`%
zBAj(R-fnUP%K|}-`om*{VH2%(1Fd*jX$_;etx^YzHamd{ZE~{B)PSQw#(;v}ueyY-
z=2xYzfT`strI%@sXd3LKsbWeFbJcsGBCAfx+wMj-+GtDPR7J|XaVba<^t&DbBvTUq
zh(3R2A!IfZMYzzY9wM42d9|ghG-+DdZJ+IAQ(6(Ig?RcnD2?(M?3{!<#Nd>uLMT<w
zmJB4NQX*(bMD*CCyNR_(lK>#SGO1_l<#Br6BYnX$lP64rt~x4{GAT~4$I683&R+dq
z(=Sy~!K9{CPU~^WpueE=kWOrRhgFtr`nRYsFtN_Y{rAk{YxnPgn`uJE35xj<acuDs
zEL0EGtJc@=jFS4dnf!5H0}d^{gX_`$8P6NPW44Tc@Z3^0msw@EqdFX`jYl3ih+;8^
ziBgV}&Or69oM9u{?Q7_oYnhbEOhieIv2=<q&ivc7{kYQ(p--69t~5<AR7AzjoZ-}Y
z4aOjcu1u6G5Z4=20Y49Jl_9(#iNOgAjf#Zb(j#e<<efUEsbp@(r^FN;)i|1qKyw+W
zEr)2;t7s=n2$LEjSwoaGAw)}8D+uKXSd_ZhL>YRPx9-ZOz=2}M^y+U2WcBZKYJ=It
z=@eeIdWH{Za#(K^MJ1S~$5gQ^dpILP7y?u^nV}~d(!EurO`_;Vby(}hMN*#==%~>=
zHj*$_AOO-A*_tp-|LY)4m%dTQqu3BtA*1L<!pch6!wl{);0;Q6RFzWEiH>aAO@=r~
z(<lOgPU{1SdQ4}059eiw^<Gv@pBG&szPCL^w}|K|7=ju&ske%_8j8Yo4~dG3%}J-h
z%QSnYO}O-Tiu<Ani34l4*f_MWi7$Nh0PIXlMO-<*gvI*)@Z{Wc`L_McWzFbh?WN8(
zJC6Z}mj1Ao!v{ZCvW9-^)ZBwVyK&X+bqk&^WD9Xp#y$7$!EHD1M84>vJg=QhIso%R
zRdK2UHo6%NHb!sLlXi8Zpze@2ZHd=YOw<phM-ZshJ@HK+qdtz5B&4u8(p4YYe2p>#
zGT>I0VQizs$OO=+OJwp4z7I4PfS}A!TLh|e9F@5kjdBa^Rs%tM2|>6_6+Km@qSv5L
zddEzd%xS1_y5z0mQHZEkge~LBB7ww)N*GAJfmCDCoS34gyMDxHD2=;)4JqL0zmY^z
z8w(10-ZZ-D+zjxk)&>&=rMwRTj+fD7F%jkTDYhk*#wp6<5HZ*DHl+(YW5FH(d}+8S
z0;RSFWK~U4k&n5G6R?`dhGiJ+Aqi(#!YeUk2K3b=X=$)&RyBV^yp8&-RBu^2Iwze|
zmI7_hjP=yDFzvb1Gtp_dj(Y1-0$zRY=G>(GU21&+SLbNjyP&IHggZKFqzjLUnzWmx
zF3OViMZ|$s8!arCL;U^c_e0nf^<1tsgfJ=xM`j+$OMB*LmZQfXO;y=v+d2yYM=v2G
zl;u6YFoet{N9VqJ)0*+y1DSB!;tA@NIehKj1GweJZO9EWR2I4sO2@WSoY~6ItEowQ
zsCq?w-9=Rem7-}eVfXshRokjBX(L>E(wH#YbTZP_I1T<KZM@VikQB63rD_0UBS10F
zaB>Dn$^fMebEkpwtVF%sK(ks!yH$n=n-Fn8EezUiR}m%Y`(#Gt@+_#{k&@07(WnZQ
z;cy(9%BlDiiU4%<p>#T`r^qOa(>^LA^ixV>wXu47uR3$WO<$HOIT`y<M*^<a6j_F>
zrnFAASP*}crW3|^i*!jUDkAQLHk68PBtjBT3QKWd%qb#h3oOpkdq5G9gY2MypJ&Jn
zX;3AwAkvql{_5gFfJ3EkB8f+cBV))8>8cnt0tX8c^(BgKXoxTo`dT+d+*|6WWYT3t
z4v|nY6+UWf3o|WLwcGc+S9C?Ab0;ON4X_ZX>!wb0Q7nzh=s8oFg3iyiu&C#Jq)Hc&
z&=Z^V6aUS}4x$=N!y<=AWZ-Zs+&6PyKH~F#x)6WugX!O$jq5B09Q|p>NhPUTUw^%9
zvty^1?kP+T-5^@Qq9Rr2W{=|jhcbB873<;V5;WA+u<Ik-NtukUM)f^WvlNqtC^nn5
z^OQZ`YhFg@@uuRgbr(cNYNd0hLf+ND=`@RcQz)t+GBn5F<Rl!bLeVB5i-858O(A>;
zc$P$Aj3KsxiU8WKMCePjErFOPAnue4j~-uG%!i0VE|iR!4vemQso0Kq3ljPm3kc#&
zRD?tN4Q-m0@;Jn$2m?0Cs4GpW3}0g?g^uf>{#j2Yklul`qGfueR8&RcMcVwN2zL!(
zoEmSX6F@tjU>f|Gr=}(75m|~vC1++vssTiBAmRvuXHl-tpqea$OB+t50C%AX-zmV$
zWRWS@$d@=Wg97=iF2~c8D59982pI;i1oauvdllAz$~1VZsy+ijGs{E_P9i;Ze&}{s
zDs3yUQO+A3j4*GAiEujObvmLMV}7A7cxDd0d0$mdC5^aU@mF+ysrO#_Z+8S22HcG;
zlM-aodowUb5ut^TfBXn$mXE`86Ogbx>*eDk^Iy%j;!_VTi?94>EShIc3H%%a99lX!
zZ70)B*WUY@TFrgZu?Fj<+=YHCT8869IC5kk269<kv||Eon(9zXZ92u7kxkmhaE57l
zx`EQwGp*r_<LJ&5C$LF%80z7az(VH;HaYzJbYe4gax3ROx@xzGs{sOvYT^WK8LN#@
zT(;1NI7*wKHbh~ZsRq0p@it8hGW2z-K&4`eZfr8%wrEBZB#-q*FnOc`JOwy3*GYq&
ztp?(0z)`J3rb3iXz!Vm>PNdTvjHj`ALp0!|x}&ZZCvDu;eNwa=ObTaGDFrxMVXXNh
z)6QTyWUoL%1sy#R_-O|~W#hqBIuk>v7AgZek>bEC-B61Faokc>Oo<sVVS^`GIAH;9
zqXd7Ugj_C<Y~F=i1oA6@vDH9vOiK=OdEJ5+1p-S1_*H7oR09$@*@ck(gt{Q5Uf4`^
zxS6-3cNk(<?5F3CX#uDzCa9u<`CY2t(*+HkqA7SmSJ!2_$0@Q@Pez}K5n3vPZj-bV
zf8!5I42{|N^k<Iaz=;F!{7^+@d2d9VSpEjDv<_6O^8Q=eN!cjD&c0OY8~_|znpmjC
zPd??kBR{cJ#s6{beBHNK_>m}s^D3U-`y2`b8LSu^RI{om?@v=9-BOh{XKEs_Ta`-p
z(ivACJ=wv?{3XeCmDnro%BD+`?(8PE)c0-pd0UlrDFPsZGYln~6<wJMni1Mb3$bh>
zK!AjHwd=x5vS{->Vw!jEaExbw!IJ5<i5S`yiKt;Ajyyr4G)j#Gg(GB+o`mY^nHueB
zQ9tRGTrj~^w>3pE<eNg)7&d2urdhfwtx~g~Kobel)(2|LW&~`;mQ-Jq%~iaIOizJE
zy&tO5rGcemTxED6^>YJk3fvU%2xXE^`WxEH4rko5rJzPrrLbnkZj&>WR)wU=QEdR!
zxlJt{8rZpXIy2j2#E9fF8c7w5&%jTHkdKGq1w{-rT*QkE7+@$30<}=6z^65>MVHwD
zsvuJOrnN29aI5oD;#blM8=4GM7chMS5QvzdxU0xk2d`W1J2tG^8iVeuv^y%rQkOGs
z0v_X;L%a@&M(HW&dm4dEV55k51Mp5>Vq}$#uYGMA&mGtU&uc?OG{<dREH<8r%hkQv
zCLY_~j89h2cCa}I0Ed?T6qn=s{&3j3<)Yc;hkkt3@Xbxm9ha&zaWaQTpLhaS?7kd>
zgIPr)rx8r&tFfBsbdPtt7>vo268|X|1kC}P>zh$5Q`N|J9JsCnmk3NprB>>`L<(0H
zBGf8vG+S+iQJ@UPB2h;Knmj;ssB#U5?Pb+uM-fH{8f`33b4c5PGXT;Sp)?G%8bDZQ
zXxFKyM}dywgJKf4$p~E8Hc<FP#IYXE#W*!B`QU=<O-`k8lET?iP^9CgfMd$y34wzV
z#i;=-N<?XBZxcAB-Q(Ix(9r3rSyf5|r+-W7qS5_mK1Z8tDN770&8tzqT9Qu>s?sV#
zABQf;43g%InK3M?Ql&(IRN$lcnUKrX(u2<AQvyF5jL34^19LnG+ehfxa0fY(EYQwK
zw6j1Zq$nxD(m|m1JcAQ)1v)Y^edLZ%9sG_dmC><~&V^DeN?BAZi8&oeB$^iE2|$VI
z)u)Q_y;kQMDI@jRE)6`oG@&^?7~);WJ2JH<B?{gU%ldE4&6OBgVdK%q7xD1Z&%^Zt
z#WQ8y5^BMLaCYgje88W-q0)Zt(Ai27pM!uyi^9wR%lP^ShWKkX&6V%FX?*0>0aVSU
zje7G49(#)6n%!3+U$jwPpv{;9jW(9hCqvpqo>s29CxHrMh)6bN7v(qWTJSvwj%UNN
zv^_)=Ca9I$Xf;AKTTL`tWrSfB5$Y<ENf4=O7!f3lI-Pk&6}6P1l<FcDh{71G8KcD$
z*fTbk4{P;taS|x4kZ1=CVMF_zgaK7-sG*Tk3?-DN9thAN1EyLuh^Mr{Esx8Dj?<`l
zsnL?sC;}Rqh+w`~+>I$^tJW-P9;FC}4%)ORbo_hiUF-B}bQ>^J&)<~4=~SmI3dDqd
ze$^??c&aRRsDqrqoA@nC^K8kb%P31yB(@UAF>u=VDd=c>R2R~UyGCG!S0zN_jt}l+
zz+4}8z5su?2!GT?eo`PeDG}KWH6o;!fKyKct%WvZyRAAOt<VCGI4trMrrF{y^&eSq
zZ6dfi9M@9mEH#qGNn(VY<PM<GAgxH^41X{kcdB$srCeRRdj$m|bw<?hV>-Ms{hIPW
zDw^gJL*q8~9;o2!4?YRottimSxI<_sv%$%^yYm4KzGWeN;O?`TvpGir$B@XPoK)Gp
zcXDyl(S`COL&JqDL_2PA#zHJs_TsT;bGY*2OOY=~EHBX&guuo$X{HfP+JM+o;n6w@
z4$F1md!DL<xGtqmwE1IH%5^mA4K$iHgkc43(LgAw2t`@xU~~!80cS+;y5>fs)o54t
zjPzB2lYm8(J|wW(30if5<>OpcR7ed=)~X{@K&#2PTL!!)73^$115-H;lYOSKqEpgV
zN^uAvGeB%<UtH6H?KsfU4c!cRt1Kccx~qhwp-+h+d`0SPM*wEV|8_dVyRsMB2wKgn
zIh>Bz&)lSmqO=DOO(<ZT0FQ1;_-7j9m7%hul-`2UIzkz$_z-tXhe4pDB`zt+l&UQ?
zqB6@-K*PNpY(EdTn1@%ikRJz%D}l_QHp_}z38tT8N-P<)+h{kdNZMtHb{#Sf;ZPb1
z4<66Kv2vh)In09VIq-ZNo@>LlZ8-D>!qJtdga}*Hlc$bTSC6!<nbCV`Q$8Kt^pefY
zq^7BVi6MJ>runGHC{5Uyo^RqSUw;aMFRA;x_5czz!eg^{=L324rxxOSKY1>J%{c@(
zy(IE%(BMyA&DuD$RO8J;Zi^d7btNV{x$qbsea6Mbn|H$V9W<J;N&|E*tzG?ebfdeQ
zNxx!SE?m#mClnJ1+ijF9%V;)QXtpW{f@OqB1)*Hh03!)t(g?-|XRf+2=73S}SI?DC
zm&%O;o=)`jrZHD_;trygK%>mT4gf9*)3QLez)+k5YD+4;;xzF=2ukm%u1mW*f>67h
zQW7F#ZP-rEa5<VZR-4==l@67onHpKE2IiVnN_$Nh&>&Gh>2v6y$-g(H082o$zckD{
z-x(FGr&*{Zt0PFU7*_yfI>M25hb!7edlf7H8zPIl>ZLTD)6Yxqg#%6)s>Inwd!q5w
zs0!6|3`#*MjdInEd%gyn!94tei%bc~PbA2V>eoOQl-Xw)$|oe^Hbp6>4V;RVN`;=F
z8CB6x7Y$;M=v{T;@d3EaLHO1nY%2%b_Te}LJ}xp@2ic6H{!Qd{9C5^C6qdR@rgp5V
zWNyU8S}wtrwX&HOtGVPZSEd?1js0SA#6r2=#$ES3gIF#pPh$mURurC?`C2v-Gk?7-
z9{k@p2iG|SIOtph>e2Iu9k+0Y4B~%)#p+piwI3x_)t-HD`U@)k+P>y;WPKtXn<^Jb
zVv6^*i=Jas3SuE7E+uTCT$@MGYUwtCU>VJ50j+ozp;$yB8fL>;DvD9Sq6Vg=`A2G5
zLCYv}R8-S5Ye1c8rrM>fFQs6y;BiROQ$gO4Xe~3$?_sK$v$R52SZb@OqN0UqwrXS~
zy$T@)HBk|xKw-a0si--K2uDi_$I&M*VW>)F%ottT{4_#9nQ>83i?TmD`&Hw$@zqN$
z5sVM7w&gGe=~|?wLENNOY6OZN`JmG)<KU;L7sFAg6pD^RX#ZkW5mQw%)$=B#%{V=t
zB5)y9I;FhkRT;+xqxVP=KNQ*6V6F%5da%6=oPjL7K^K`3hJh6l`7x@B>CdEcfMNL%
zMXA&Z5|OL`36;ZQO1X8~qsClNGbjxb6cGYZM@!BrU?Pskv3xkz5IkO@8DVgF0iKhC
zpYh;&Bu91Nc{Cx^1`Q%3P^8q0tVz{%Nh@;Hd&dmnopOn!F4tl|{aeavhf0<jX!yl1
zKZQncQW5?10ojfho|?NW8^trvmc_mAOGN9eE`NWI0M408<f3c;n5?@W;se>bW%)h{
z<2Y~P`D35N;S*1)^WUeuf=*QCBA1=SU|}VE&qfqAP-`xs8O^KNPvrI=$tq&Hi3Wsd
zYc5BD42kVhwN_f(N{g7rcg37gdj58*i0dH=jq$pUfT$D;AtJ#ODqT|_QB$I^z%ctf
z=|?1rC5Evz49yB%oz19Y)$655M!iWA>X0S~)kB}CgIV!5U~rXzyD5*GF}m6pM^};5
z1}E->O4-`MN;QkJSYMGlTAZ}2tn+d-*yu`?(eNm;*gP&_IW>wZgY>SwXlmR=k&bG)
zq)R<LH;J1F9gTUpYG|aiD%Ak-jEa<~jIThRA{^I+<!52#v#<+}YJ$xXNKXNNhC(oj
z)(phLa~$n9rBVVSYI7M!DjiZicY0i5=OUrMr_Y-V+$o)=V{4-wR}jPtsH@M=hQ)oj
ztN^b*1cwj9;YD~(9-iyL_kHAY9x}cMH|v7K)`CLC{iJ<+MjvJr6|~fREF>78u$1@p
z=kIwQwdOI{Zlb)8NozB+@PONH&mF7afveleVstKo%{dA<=)BR@=)wP6atiAkwWB}h
z4GafD#&)H?h)ollaO>`sxP03f#!3SS!ZwaCE#ctYGWHxgfIWw%u~=;(ib>lQz;;8}
zPN=IX%!aLcT#Oz+70s)w5mklMtZViBTK|&jk2T4lwWwWS(g2fIy>yC2l?-+Ak^iyc
za~OC_m(nXI82nMd%>aHD7}=mLF38$|NJCwi(oCb$k5I!Q9g|HkV-&m+@X({fu_&D}
zWoZ+ch#ulsX;Em?Yds0MkgHir9pbBJz+Hz+NjuV0b1hS5S6%H)kGmz3I(76@))uC@
zG4;?<fJIr3QX5Fc-_YixC`Zd0nIYbV1~l$~Ihwn%vspNK2bm#;%os2@B~d6@)aj3A
zP2j|n)S;iK)`f(k!7!%0hihZ4-b!V60v-WcDy1-L8f{rfzaw>*h!7>q2$E@~gePq%
z0gz{nB4ba$Qvfso*UrInbIABvxE=wJk9^LD=NJx1ML?#aMA8LcVq`>fb9deI9A*}d
zz_RIzM2)6-F}rl1-E15WYW(3#o6(8dxe7MtFyN#iXpH6fYd=3?-#S&VHonjH-S9{5
zc&Gh?uYENpCmq!5K&vI-S`xc2urM$}e->h4c?pMRrm^S55`X%@9G-n{8V8S^6bt1V
z1@v%j%F{hK)Bu<oo2PNG+723YbTre`M%`&F)Deyzb)t_|r(Rm(uJd*s2@z<hDFAfM
zYA|JjzId1+KcT^ZS~rH)Nvc+Hnj|11N<sh{QlMsx7&h8+GJ2Sto)`&-vYd35H~pJ>
zmrPXCnJ`JgAMww$nMsmQ)hVUPAv0hK6w*0fU7$(J>H0CKAyl)#>Lr^Li(8UY+NLK;
z_F$FiNT+Sx=~~y;H~MCH4bwxZqX7!psPwJ!Gm=nyure9gSqEN$!yf?(D}bR1Wel$(
z!P8H3G#4bomPDj{F9aBoyz0G6O|?{h-9=GTdSir0iZnNqIo0Pz@3MhGh4qv^(M2Oh
zlGM?NE2y^*!QwV7mW9m+;j$q()*w847+I%;j9)}Pn?)w;V<4Zw;BZzM$14Rm2P*Xd
z4?Xb=W|sG<_7lP*$0>+~@)M#~+vm3Ub6e`s!G&`fY|e4O(aYj4ixLkbL!<cNxBUdR
zuik`5PQ{o%7;0BQ)j}-cI|;HjFpvSp21=M39>uO#GyLEiiM$QO@!3T@wf7VreRdj8
zADqRZLvvVIsv}Ag*mkV)b=UE<C`+xh{$MVb9goe9&!*Xh=!yo@T;A{pW^T6%yNRb!
z4uMS|r~tG30hf%razJr{p;ZUkb-G&jC}PRR)Kru>8FDFcA5p+$<sb!>rl~?jdsXRi
zY#^fQl&L5Q;!ddjK`EvUPm^|zQ>K@g{#E@FI=u-xy)uLLda6`uW2WY9D5cYnn>q?o
z<fy3s9*YY7xT*V{erc(Ltm@t-jgd;#R6Zz}@50JCoQ%v=Dm4a-uF<1rh+mr71JsVG
zel<>@tOpNLdC;^Fbjy`SDBOFoNJrLn4^TJC!W`8L6<)M#WmK=nvL}dT1!1y;hB%;p
z@A5o+cNAVQ1gDmTV;A7CA=t?1>X(&ZdFd2t)fOzT4JWU;Ig916TzOj5sz<Vsd+dr@
zd+*V69c<2Fz|n8KXBVvjcE?9nj_!EdJKz3;fn$%^-#8qo$_C~AN_kJ|gu~GiKr058
z>cEKx@Wix$^Hd^=<SjB{Va3=uZoFs(-tZba$s^2{D|q(E3?6>)Bp!L@1oj`A#_S>i
z5QpapWPAsX%awO<r`ak!8GB|sb#5Jns!6R#fvS8^Oj`k6Jc$@4hrpUd<rG6^7+A4G
zH(};i0hMLt-J(j_)L~3~xN06G0dvOT<Yh}&V~TWCrQG4Vag$5o+2F3Cvy5*GRfbGT
zMNvUoM6*&~W!*2NTRA#}F(IrWcv2gP-eyq+MjB|e!B=X=ZpPcDo#)0orbBlblQBaj
zsqblfQ>!YsU8Rdj9817;z;hPt98(RM{<uVGE!nr~$D5x8=AHxMKp<=~YF$v(C~eY~
z;zep-(w#xC)2iOtqx$=<$*TGPbf#IVQ17%o7(J8`-l^BCGzj!!TBx^<W4?VD<W`tx
z16WhsfYFI8)=qM)T;ag7LNuEU2amMz_%kO_mo~hD6PGK8ecP{mU^#g7;qL{oIY$9U
zzwy2^%!}-fj}8~szV&Ty{J~}zjkz<6ZDZA7u8^cy?Y2AVGO;JsjnF9I7N!$mVU}V4
zJmBpWD0l)R1%|QVAzU<8!VN#L9dHPMYIueK=!w&K<k{0WaA*<p3(H6n4}NA4*{rX{
zVvNXK-N@OEe7en{%KIek)#-HV8Ni`bi3BLb+0=l=BT|)m3oA{evlfWzCIZoAS8d{*
zaPIhysy?Yol?QmD%b(a5<4&T}t(3n}dKxN8Q%cvf2i4Hej-RiY9BIZo=&FjosR@<6
zb`&b0Gc6DngiXd=L{=MRF-d8O2}uJb-9>FIK#hT)YAsRowe)AFnl`BXZCj9pm|3pu
zLEWMh{up?1ieX?#r<FkfoP3%gsY&H;6PqsZ4%<#`E$Thj3L`D8>u%xhq*fE{s6REO
z05uW0+g+8q0CXJhNp_%uSxV_*gi)f%YO+f8tUN{r3%GdgAg<UvhRZLT!nPfQn4HMK
z8MJ_`1y&f~$Yvo!M?C$F!}#O>{w47bUw+OV%-c`SCJ+8W_pCqn*Et3_`faCSXhrsh
zKN`xfd+VEC|AW;y8p|$KiS)Hq8r7jy%-^Knha~rJ>as0a6_9;`nu=+Y5KfPPZATmn
zixT_hiF~D*jsl}OhE-#OxMJN9ZoG5{;Dwl9s^F=E(|GXFX*~Ai91a{<!qN<d!$Zhs
zOUPtA6*5zp-ZA*<87QZ&lxZ7*5|e35Qk98OV<DwhRbZO*IRzk71coP=DwEe#M>Bcb
z8Y8e6uv^+U*fGQ~aU#?=MQKbb;ImD`rs|APEe-|%Q@~L~bP70Ta)3#JO!A@UyQ^@;
z`0b?rJ3XGp+NM<Xap{Qzog~wM7#+SMm$b;RV;f^;Zl{0~QO_7DzG-M6flbc57sHfF
zNij4APOq7=rlZd?v}aU9rn3Ja<)9fmW`LnHiB-21q$c|&(&@~gFio*~I&1HlXJ&&L
zt1PWW(w4RDC_z0)6cL<rGgviT#FjOq*u8xM7hg1vEvs`_Ii3ZEETCYd+%g2Uktq@3
zViodqAgoLdJ8#^8-@Wkz{Ni8zT=@IHcJFp8cg<T4;Paor_sBYj0LS$DaE=mx?SB~b
zSO4G}?|e^{^9g^c9I9QR=0J7y4n6)6W~nPHm0m;Y;x@`#)$Ayh^IQr-DcMTZBQo`_
zG=Sqr82lr2LM0d-;8;06j2kwO;5FA=K-N(>d3qU-KX)4UJv@sipQz&Ku`<dn5)=+1
zn;V4d>w2;2FYYu&(%fj{eWBE=>Ixq*1v+s<B3NdaJp`=1nB3|ZM%MyKL+_zTtMHVc
zj2##s8rl-dBSu%HsON{?58W}Y`5PqwB+f<o<(jlYZFDoyA+6#VK<rQ&NdK)XRLU&f
zRIF6FJuST}kkM@n>2w3dBc%e{RPWQBbFTX!Nt&s@QAXipAxkDYG`-Z#GS2f-C~uol
zQWHzEUlsJ+r}i^mI}8Y8`$08zB8j>2Ayy@6Jq_{9@j^Wfyn5`jPKz|?nEE8m{ZZaO
z^x08^ZGv_yRJtvS4zsR@)g!~WVE0N~x@{5{?-<7Bb$JX=x<HXW0Q#V43~@mI%s}0O
ztaHT6KEkq(u$e{Fc7=?ntwJJOsKMQ0<9+|-P4>j9G4bDi;;xT}+4^P2n)g21F{3<(
zmwm2*&4}~HA1gRJe(Uzz-&J*-m43M#s&Xb(di2IIbFIzab(9t<bwE}DCX1mHhOUHk
zKC~OeJ4o2BR3&MeCZPOds42-<U<Qn%5=+c3avWF!1`kLKX9Y$JHpa%s@cL`U@%q~Z
zqIMGpk1gS`CuZ@$0}FWenZr0aYa>ny@N;9x7RKOt)cI^1UMJ}g$x1R$1acc-Er58M
z+PuW<31ED^M7GE<M4%IB?nY$|0o@oZ>R_fls>l+ZPNiv)+W5q4QHn(+Y+E-dQfb;)
zzI4O()O0JI>(!&fp{8x6^fO>hElo5lT}L^3Dny#fsWuDxYN#8P!<f=|YT}hvy{J=~
z%1mkCr^@5>dVHo@K3I;y8U(V#62+AaxuP}~Tb>0L_XFg@P9!nO4D_2~8kE#@R1G>Q
zhogBIji!o)A)qnMu&IS?O7TarKr3h|ktqGifNNpH@EEqP8Ny{-#&GeLQEb^%#Ndbz
z<mi2+QevCp9)PBZMi!E~gSa|?pzb3myJ%Nz0vQO~f}OYFjd0aKN=Fl505}>U3F^4@
z2d^fctofVoXOFOaa>>#9Hy%INldE$CaP%5+-u(UnYsVkncH29ux$HWBX{oKEhD4oU
zs&=W2leB^O88+KJUO2`iTxA6+0aqs>4WrlPX{MteDlvP+`55pqqlVSQ12cw&JX>mk
zh0_5;Zb4#TKLHTK@K7FGM)TPAx;1$BTO(AeH9WI_4v#)ew`uI#KZ~XLAz0oxvc+*^
z3R%UwsM4?sx0NtZr3N%y(rPj+oq}?$D~tgH;~cFDh2vTpM90D+a+hMtRgW4FQ~QK;
z*d2k5t{_RJUM2p98WL59vYtEF?U(9wjO+JIdAgWxapm4e;E+1~^@#hFIT@Fv(bJ$~
zHg2lPPCp85+TLTlo)X9UQPumPiET1KXJ9!AHo%Y_W}Hgkg;6DN6zzttN{O0O08Buw
zr)H#D8y%r2FfmmmO-E~sR%1A1NNvq7(TLwxP(#qJs0gX(TUa}s$BuPlxOCe}?AkGc
zjZ+!q3KX*G)QE0^k>L@8s98uFSp+o?t$GHHY8K79uaxdmO;}}m3hR)uSoLTcM_QHB
zk^uNNGRroi2WtGbAGpM>l^eka|6TZ)Ka#m}@4{CeI+r7za{zF3$#KlT^Ua>v`bV$1
z=?(Saq0RpMY^apL5xKQd)RKy|l)a;#)<A-{^n%dwyj65<8u6TIGNpuchAdQLS|e>k
zNs$kwTMi9Rqj9}7`-#TGnu}?`B$^B;#|$$S2f3=mz%hZMD=?U67#T0%+Vumt_R@90
zkGF7qri^Evso<dpkK^g54&v15EJ8jGyEqANcmTF%tU_sHMC8E>B@A3Tp}kyalEc7C
zipr$oZ<MhW?V}czqp5X+h9sq+Y5>Q0>=F>@6Q2&=Z2Ht<&iLMRxKQ<`=rJWKlS*e=
zr5)!6fE7QJ+Ey^eRr9728urxcIud?U<Vx?~xkJ~iU4f8M7EpA<3xHFSs(oQ_l2TtC
z37$Ft1WOW0n=841dM{|ERbu+)RPR)zwKX(CM@=g;2JqZMLga3<hM+l(B&;iU)S;4%
zEmJNoT(JdLY+HrxTT56o;=?OYjXQ>FFQ+$}fGr?v4I3c=OW8%W?4#cB(F{C9!hxVS
zg*=#ja(~n<7xbEyz)>;;4M0}t(9C;JT4u@Mxe~cNFi^=L`_*Os)(>1EmKWR2KmB#@
z!Of$s&HLxSao}799s67Wo09kH%iU<}-(LUfTk7K@JKdS-h!ZnPlLu4fZSRSzQYRuF
z<F2H?LnN!omR*k*?OCFoUyNF><IYAy%2da3qy=QWLH=1%k(gxutpJG3uBdlOjX2R$
zk{T9J<qQj<h0L;rY!w(dBvABX6bCX`J?>%kjbpgu?F48|?Afz~C-0rd!w*j5z)>5E
z@etVX7;>vi@Uym>Za`64vz%b=Fi_f%s5w^I6-1EgsSw2D=!`{8O3{^}G@UW8U4f0M
zP^Fd<BrsEc#@c{Ojj$llplC){X$<FMTE@=+oOFm@I>K8;P^L6)WC`gcgVbLqtpzDP
zb~pI!q*tjxP}%+v=BN=bP(uTA6B3rMKdpt6Kx0PpT{KuyP&qPWkZqxr)6`C&l#+A~
zSg>FtX@_XHT4*<xkc1Uv+y*8`8rXLA0Crun1#1e!xX>zK4OPY_Brr&?pQOrxnmi|z
zYS}>$<<V?qP^q};R<Al}wQY6rA-;*oZ8g|XoqHPfL)FRxx`=Vz?w}(v)$OlLxAet;
z(p|C=q2fT3OHrIFpxCbRAO0^li)JMXKJve#dq?x9*U#6FHqS-SvCnp}DY}=g_v0%c
zxZ<iCnrl{HWlzr#*l-oWr~*Wfo0jg4G^JV7zohz$j6X|CROnD!b2*x{>;RVPBT~_U
znJ<(+j;URs9Z=X!rroA*$rW&EIsna&QuCLL)c_5vr|5@E)EKZJIsB%BY?C2B4-D=X
zC=NszoXlg_+8lOWJc;-Hn+UU~nt1ZzWjuE89_%@i#r)|3RECD&ZXSTQF^e*BJ7u6)
zN{}xC7zIMAI1v{`A-S4wqWh>6hogLGbQDAHgBq(twx6B02IcxkK8ET&pfrnkPW5)A
zbb)#w^!t&P#nnbK0i+i4b!TR)&0`uj(^0r8y-T~$jc!S)wUxI_cl?h23@NswDGqvC
zrV{u~5O1UJS6L*$VO&jh2uJ{_TSN$a$oE)P>l_Pl7@^fzLaTZjXwM?+RIzG>g$rLb
zgiEj3fSs3&WBu9^21W<EJE0k({cHo`NENOXA&G1RjV!8V4@+eam70x4<e*Jsg;f-0
z#_y2Sf+9x(N{j2VzM6d{>B1){ib*0vXd5fiw0cOk=@yfmQeo9SZ%I8ll`ftkN3t)E
z5vOYZ)CX^kt4r<ikN?#hKHJXx)h*T50zKMUF*E!e2OI-7-eqg^(e(#*?z}eKwBa>;
zb}m-a4b$nDT@uhJ&U@xQYcMhGc_u|rpwqeH8`Wvb4x02z$=S{Kdj4~_tgOb*($CB>
z5O+kJ4_!!YO1-Gc<!auCs$NufCes7eX2c{y&Jb7<HHv;>j?A);LIo%uNs!NmiU=K_
z^l<B&OStuYv_}FQe5Qt{zJ3x<J`~{4eGbA6qi9|;itIIcWGA&gr+R>hO@WXGx~1p6
zNnvPnr>T{yfst>Ovc}LUi}GIX7?O3l7S$A*Muxq16eeov&c03~oOA<e?Ts2uV=`9l
zC~QUrr|DJNS7ja}-88DLfm4GCLrm4fVNw)Jo*h=bVS;o>3r8iQiiB)ZHOhi*TdMm#
zZUD`C6V1hWB(>AXuz9Q~)v@D}94@<Z1$JL@88&PzAv>DWCxV*A8zBywn(ZUo3U0x<
zd=T-P0X+5RF&5@HBC1wOeN&%5fs7J9>oLZu=MhbSpwy0B`3PXNy@nLZqQpp;EE*?c
z%<t*-6MsbS7oA#2w7;{KFBmYRo<VNIc|OO7-KP8Vzkf?}_C)=L`yP15M^5EG`hDg4
zVsb8l&Y5-Nvj}Vo-j3mX^4h~&HtqDU*!_L+!eU~pF{mBoXqStjmA>7Ykn93a_p8pI
zX|w76A``vnDM2Q}(O2A_NIxCA))_I>;Um%+PMz7>o%v6lsR@d3&d_v8Jtjqq@T9W)
zBu+(jb#uB&WGtqN90isjlZ}xbkC2`C|J(Z$D9g_4JPiHLc*m-`HFfpejiE6E9KcB=
zMTwg2NS2~!$yr%`iDWCzBw5Ky@>a5(_w3lRoOpP$W7<h9S+cEJlqge_NQ&Yhk`MtB
z1OYS}jULcbb=N%K`JVBuz4t%e0%$wSdSs(eKTus&x9&an+;jea|9gM?+usIo%mZ2(
z(CcIQ#XVg9QU_OG%yDf{!Qk8!8t<CLV15dF-2kI?;Cuf}fg?vtHiC3cQ-OyHf#UG6
zIVy{M2%qpxszA?%#KtY9O$+bBrq7cumo|l{e5rM6T!m9?WK^jGrQ5mTU0fDn)kCG>
zkz5UH?o3xa)O@AlN1(O`e2J(A+a>%iP!dMf1EM~)?efs507o0ZFa<t-18ANqeahk>
zL$S9UV6Y<`rQsTotn|@a-a)##jyT!I{L~N+oeS|T@0r0{-oAjd_s^j*TbJ{u)}5n_
zJwZu<3#pH(fQ0>yr1K_ml!8+su02=a<NvfovqciKrum;zUsTLvu~}?j*jr@4T5WXF
zhuzp}UxW90Lr`CAplNPW(JN(2sSJg@w3r#<6k_>}(8F{z#N7J_*gl;P|I6?Fo#wU0
zt3Q9W_@)26+wZ<%q$<L@(b&|Y<CV$$gHN40ajyBUxBf@N?d>9@*p~|jc(N$Ms8f}#
z2MNe=t6Z8KPU?li3<?+MF=8B(aZr<oH(-J+EHA?yJkdB&V>MwsE<e(kvkt?UxW@}!
zGC|qE<4W%&ri>R*se33Z0ydNJ$x2Us2`Q0)=XU8M?#8J0VoWX;Xw(YSrhHV6`8fXA
z1de~3j}In8v|rrDov-ZT&S%zeZPUl~>1piVcNCL@NzC~Hx>ZIW;E}?hYUD<BR%G}X
z_tO2q*~4K^i2GTSY!D@qsX3++1DETqdvuvFQ!KAm1mrMFWqU{l%+$?0Ej-D~Bg0p!
ziARQqZn;#3>-a+OB=RZ-^z)2|#*q+}3b1|?{?7Gb(Ye&d?v*tJo0~X3Il_A%sp4Hf
zI*Z4ico=8zZ=pU#Jz-QrDov5K=}PF*TA#G&rK?=x%n>r2Rl;CIY6H7D?t2_~<UPPE
zU-KBOCxLrzXCq+}he(|GQeK?dy`_YMa}xBAk!!`iayz|=G0{<;$H&sm?^4evBh3bp
z@t!L1RF1j-z_0%85C1^>zxehK|7WKMfA0K6{Mv`!C|=H8<l)FIiGnGAru^ZL9G`#m
z2fyvTf2G?WRN}#qD0sHTi)&_d8xOq~lQysHM5;%SI=1#q#Iqrejqq&j;$i$jp%=E7
zwDD^6&zkDb8vphQTzagYDAK>G30+uH2@vo8Uc}T3Di4xwn>FPX>Ba|sAwpTIPhFMz
zi-#VnUWtjIM5B?T(n=986bQ~xN`+pPBfGhW^)IgZH!k#xwXF#0{1n3X&ZF_JY0NA{
zpa3F4fn9d_g&dbs8kyXGu0W^IP!^B@Gj*0q4Po9|+{Wz@&Ohr;o5b8EP`zGqH&M#w
zO-2Bbh3N>i*6GGP-vd^6fudJ(uc)G1(gMR|#lzf;j}vpiQV00Gmk01xx_<kWHu{%`
zm@7ub11ErYzN3oA-`2v}bJJ+H=t3%8(u^b|#6l8pi^F4z(^#2Z6=`XFPMxoG=#vnL
zK7TSSG1wEFD#<*2_~%Qm%_4DirYq=8uh>`mX?ly3XQRqORM@EGprO?dX;T`bEYRH7
zvL56iv*^82Obn<9v_vf`P!D}fS9_TKkqBSDe0BKW{D;5ST=l>3-o^fBpME2N$ll#$
zY#QF2{}=w*%+v!v@xgEVvF@ll7xxCFS*+N(w$jD1<+d9GNh;{9lOeKkzD4hD*5L5w
zN;gt5i!~p|q|qg`l8%ceG?Va3hf{3Wbh)3F;WU~rD(q5<cOLP)sHl=^j95h6LtLdr
z=?T%0!!UIml{Bg<*IFi=7@$T_Vj?WjsAq`hbNI(g1QdGJDV`~j-`T?IQ@3&b)4Nz%
z@sQth9CP1x9P{sQ0mnjKlieXO*vV0<R=K3LLv#|BGSx+-x}K^Szt*Ny#39(|hIqQY
zFlCa6K0s6g@))K_TUlup>mKjVc7TnphdA@$rG$UTIiNejXr+hEi#xdf!Y<Iu@zyhS
zy!CCANowN0he%GeBJWL(3-uq*#X05TQ8qBj_)wU{Iv46ZMcCb(H+ghvO41+FoNz?R
zfD9N6f#Hb$=HZ@ufu}xJ;DyhZsMI`e1?2DZXmp6JYQ$6+B}PSGD$Tg|mC=!YVK%(t
z$C$LK8Wt+qiclFL3bm>fUQzi~=wWtp53L`m6d(KOv)TXrlYdn2On&~s#rD%z?slVd
z*BBfsia8Sf$p74oANpJ0^=&`i_5Bmo?VX+xyK)FMPS|63#4<?3MH?CSXJue)vtHGt
zjfJ47d7Q+}`@JW%LusBn2M7{ID6rGaWrh7H42TAKOKgZ#%2@Z~rU}HJPfQ*bfs|sw
z=p2Y&!(=ex{6ta^NQ8Rsyg-vs38J&-;{(mG#6*R%WEuR448chc{_z-~j0t*3ukB#-
ztGifyu7~xl7{$>h!gtIfd~z1S0-@T#Xa~r;xzrx9MNlD^BG9n`(xnI*TUTE~&a>n{
z{+YUN5_nEd2c`3)5>%r|yy}dE>LVY7s5}c`qXVRiLo8ot<JPm=XkQ;<BJpr`KEz`W
zR`8Z5C-K<ZTBy&F8$ut6;u+G4QJ$`9tmk?#6ms(|&=x@T#v&ub^;yKvBM)W-^vST0
zk)aG<rVWrhhdsTb#O%D!eZv0WpXI{qvJ@e;;gEq*WJuK`++?5h#^i910;TmV;JO0z
z9b?3XM&o^wwDP&dj>2{-K8dLV%?Ox1vWLkZtP~&mxzFGi{{C07+xpnaJG(D!+|5SE
zyIXLZxytu_f5U(K$G+ozf1y1w@mPIhyKmVs4yfx=@Qq4<#unJaQQ240a?!j$pUKC%
zL76c;8gmfZzpA6+_mMNxVH7v2mrR85ZVYyz{3%hiqfU}q^G|63JD!e8vGd6=KZqs~
zx5IUIL)~qG6#p7Pl`>xR9Nqz?$CU1Z5P2nov9y4zL5W%|MRhVo(8}N)58xlKiOYcz
z^3`o@Jhg;dpV`9FtrUBw=HS2Y6k2be!{mt?Q%#23l*=a`5AEcVB4;4k*`@hv>t5sR
z-AH)^7jhCFL~?^%|3oDs9;%H1Cj($s91dLD9N@~=Ht?x0>|p7c9R#aGOb2zm_kDAC
z=l34L+dtSsW0C+cwP5msF%t^uWKG)+6Xc<>C!;|iWnhS4#})Cc0WF@(a6}AZ@m@wr
ziIM6*#fC<Ok)$J}f7THseP37r{^YlEtX(IsR8EVfKm>WVnK!x?TI@nA9GdK%LmO~@
z=9)9@<v1lFq5~}khYE0sNXhgL@^<;l!&FdW?ra<N?~Akl@xT7<@DDzE;rd47!%u8=
z?~LwNOvk$`GE&jo?wQ25Uw`kDKhQmW>RZF5^??*7DB>9#5*@sd0F6#ijmgp3A!?v9
z8MKMf27-(azq7j8lBuv+E4{n$QEmEHNXg31NMSkS0J^oe@n|$}N7o<m-?cYo5@_Tm
zs|m-oU&85O5~0$O(HXFq3{G59)(6$P$3jyq^`JUga#u~S<nXKFQ!DKf^)N@Rksz8*
z;Vt;UTnulf!lK}$eUV+>#`;$_arx<8TwL<8He1Ksx1PWgA3TYABf#!zfixxPSa?h%
zVXCj0G<6dUge5L$;i;CsA@PwK0V-2sFiCZ=z1qd<g>77Zb`RGtbg^-(hsr3&TaLHz
zo=0c#@Pku0F;hde5@T2b-597o3NFwj%0WQwddR4davyP!$Z8RmV!TEh+OZxorLR-+
zTuO`*kBtjuyXZT4E|gIsqmmjUBSK#^*EoWt;#nn2LH|>>@5m7kyLWOt{W~S!13fna
zswq<*t;4Ai&r5GKnpJJQ9#0t?@k5lRndmne0W(XSG+~ve$$`>Xu%d9C=}Lhk5BE{L
zJxTuZkAAp*{*_lgvgrNtpYIRv&dk*}(cs9%sE22p)8+Tyc=W+<n|%C{A1YQih9S4+
zbuvaCa~b3=7o>Bo<sIB(>6DS~KA=J>`Li-Ql40U7OC?0Ox3$H0q<xHTCTCD*rG`g7
zl*McGVJRac29XY`$#NRUVZke7lmwuWmst)9+(}38t<vhclprXC?m?jzwUME8GZ~^P
z_YhZJk(!)@m2jLNP%4^)!ZK7Q5`>g<pZ8EKMDUwc1YY2m<z6v5zlsZ=+{PC^-Nv=D
zhDUzn1m5yz?qzw_w3|t&sap+bu1qcxm~>sLwGb8RTv?ZpWpA^M8!zqP!WY+Y=h6;F
z>m?>*ACDfN!h0V&g10_AjT0xR`8u%>C8u1Bq$PzP``qIA+ER$t5BNBGKaj6eXFQd*
zQL&6I_@oRUwO95qAP;6FMurRyVKL;TC8QZmMuuw6h&QE-jQ-NX=FCN+yQ_I!YI@OQ
zbe$KD0Dtt0IYw=ty;8oX%;Xjy+zmO|aHxB$=ZY4Q_f^|puDVg1Q{WIL$<t+SjtZ&R
z_;_3&Ysj3M-a$pWwa~+qpW@iNQ>@JF41fGbf4jM~{k8w`>fks2H=&N)U7?ltO$CYl
zDSx*7;m@5p{^SSV_m02PU*F4O>K!EQd6k#oo~SNK;6JJMEDoTnCytRSF@!!h8znuY
z`A6#3YWOug0~nyztXFRFOOl+9cS4ws<N1tvM<!#zc16`Cx#5&~jy5{RXi0^#1|MnS
z>23!EG&6p~u_E`c=3OuXYBiuSNw^Q;L9#1y|0(LU8F&mb*2n-+hQlvWi8F*#BlrtL
zzdRZtXvPJ0`p7R8*ti+sQ-8RFU;d*@s63kD$N$E6;>ek440kfNc4TA-U?ua~Z2FvG
zOVR?HYaP6DaSbm%a|d@W?!w!NaJo5xC(bnSwuf7I<kT!q&eyph(G+PR=RRRn-A+cK
z-}bP*7h-GVqh0t|TJx}n0zdx01gMkYXiNEq6t@ByVNa=t0edlm!>|XV3=P%6k(ZL?
z(l<QI=y%R8k^Y5hzN;{Cm3Gz}oRpMF&rdyD$u8b=pNChzP~y^4K&@e`>xIZSJ|En$
zo68#<Ovl%rkM?j3aO@Zz_MXI};rr=%J{f-UW{oI)pxXe^{RO7{5l(-Pk1s7=9scBB
z{%CV2`uw*q_CEXhyA99zrWqX8wef!NZ_G9x`|IEN{-5mjM^jbmu3#M%>%nN^o(7FI
z_eH688d0aQ0E^U(lp!&ONr8!^EXN|@>fq+P=9MULScf(2MHoGF7NAs<OvJ}Mh4C1?
z#u!M|cSuWSSW1e)cywl&-%oi`JP9?qP77&~TA_3xR@X$%l?)AIK9uolc&I7whqy*0
z9?wb?z8IgXU!qX}Qww|W&keBsVu_2N>Ep)L3>(7`n`H&<VTl*7zkqJJg}?qw-;Z-o
z9>vO1hSCpFp@lZeaO>qYod4n~uD-B|_EHC}iigKf&)~g}9K&1Rb_7Sy5cm{GZNgC4
zgtTb66I||NI1142dRX7~vAPAU^?WXT?UMnb&r3q`>%jZIv&5hKPkiiNr%=hqC@sXW
z<YHJjt3-8f+Jhm7NsH2JDPzTvVmv1!ijm9*EsCb44y6UOvuSZC#Evi<+nHI9>o!04
zFLN%C<$K59co(qjVTTZ^HxC*ngoY{u;c9+c-XXfrg4M96>wwG@Me}B&=b|z^JU7*2
zbh&40Bb@wRzxc(Ed@lRDfA@>kUh@x*uXHc0-AzWv`)1)b)6oasH{pHDQ{Vai|Fm7H
zJW$=~c7?2GD!XmI$k-cxKqbdD(|BxXE{<$m{1Qk0PXmE2FUMsi+iVukB!eIG1kkN=
z)p=-7hrJ@9^ed2BdqavD<buqOWViHzvV0$L!IhY~_JX*ll&-86o(35nVK%FYsp#*L
z5tFhC0-Ni!=E?X_#)~;e0%jkX1Wvpy$CZCQz|+6IioJ4#`qTtghuiq_;>+0XbWm^3
zVy{g}p8@{Xzx-aDc<XU=w{v{;4=>{5zj6UH!#TX~EywZb1Cuy6-N2dC4Pd6Cy7gt;
zY>s6gXz}+;7KQJ0Lu_|^Z1y~CbbV|OfG(w=$rEwZ{){jm!8V-&KmFH;3lpN(r<+Q~
z#zQhH+2Al1L;N8!FeXG2G9PK_aPKLj>!Wx!EMvmW2#uz(o*P=eL}P~m3s%c>=-wYa
z>fy`3onf0=GglSPCbwACqRB=<ZnCPJH+URpu>5@<jxsuim!pi97$@uLgw!BM85}KA
zPh}n?<H|p)3}zK2=2{7ke{Yfe_kaB(@y9=L{?*OeuRXEbU%PAiSbc*Hj(q55e6H2V
zzw_3UkNseH|Jm>I*EhSgnMi9?Jpr8SV;H>}EY^n`yM8uhSsI{OnHH{#awZprR2svf
zK|2}YMB4aBheS4jIs>75Lfbw|mJ`I;DN`Gy>mbz6`v7QNE?`>c>EozMYcWvv!y1>{
z5wzmsOfo(MGBbJ6PJZF|sPrlUunk~hk~|;}wI=Y$69F#%eh;7eS2vM*eN0cb@YS7X
z@r75vh&0U+#dQQh6ZOVXY^-;Iu!l##<s{l0BWztQ@Q!ou!TX<l0PlVGB;Ni+2+XF)
zb~AD2$ekjI&pi+QEe|{F!FX8f0=tEeK4pxkri`;kRA?%-Yot0T;f;XQWJu^UZY-7f
zo*ydku5XX9vML!p!e<6O0(~v!!p25tmel+Z?JY4rBETkL7KK$Zbrioy6#$zWV1wT%
ziUZd=c|IAng`>dA#S$-ly5OE+Cf`ZMRe>cmk+o-HHWC#wK~p8vro@0TV}&+TrNb-v
zT@~V%3d2!zfb`}>!j+8`Cm?k1F(O!=K9d#EqwVC+|HQ8}Z?3%b50{GH{BK8un7_FU
zj=U9-`)0i#`OL!1;~)IMyMMC3wL79NJhDd%!*9$MyV&rU!5Md9oB~YydTQv#$8~u-
zp5^A~gYv{MUXe^rnxxEBHKCJG{kiRlYVsx?jd(WVDyt~UsifAxq5fRfZ?m6C^LV&%
zo!V4g`jNQkDof!Q7V>!bHRK6VQ#mz3jk`^Thk)jqheor+TizF9>(&sz`gd=m(_X`=
z=5ai|`G@%As~^UR#yfEQ$amn(>9^vMlhb(cbcrNg$E&w);FTNOSla>i20*{JftlJ#
zG{aMPV7`W*{>igA`vlNlDUpnT_NI^ZC17P2Xj7*Q%5W<#9$jD-<Wn9Ae<|j!;4SjI
z)XJ3@_Ixy^GyLcOQ;5w?N!1Uj*Hk71Jno=r6#OWZV&lWq2)@e7km<jR9+yUN<l^dn
zW5!rHwRvhwV2%wLw|ZS@2v7Y6>6SRGYlj-4xj|xZ#OrkNn}V@!;R@*{g<48PXRH`h
zR`Z6u8%+=tqeI-Wg84qeTBh4CjAWV%RZ2LNdGX*Q0bUxslKiFr?$?@0^tJE4+57aT
z?}k+QH?WpU5c5XxmUjo`<OkpS@b`B|Nl-0{oT{0u0nwURuGw)6jgEpGQn3Aljl_76
zf}G;!sG<9}=rU%@78SCfGEizl@I=*bCJjgEcwF})Ida)$Omj^=X+={;U`HJS>i4%%
z+}Pyi?-YVaFBJ<wD{3PxE^a5ID%hEqLSYEGVhSH&oQdQOXrk+OvP5P}N=(mt*jvr<
zk$<*^t==wXt8=)x_X<99^LMb&ydN{uZ^7w@--ml1n85sOfteW}Po6xD#*du_+Q8~1
z;Nvf*_?<7lfS0d)828S;6)&!w#ozu%IsU(Y??H6>1#T^ZC0KVT`CgaQGkG!@rPo;$
zU5pJG4la09*b9d`3RlsZ=X8w;i(0+~+`L@i$msy<WYk#VhCCJZU4==cHCTx5mV`}`
z4e|{xLw7+c=lOYNp1D~mcQZ4$Qwloip7p!H^a&p`#|x}qFW76ObG9AF6f@g2Tb0l4
zj#4>QvR5j#cy&KDnNn-Sd8Mk^Q_tt8+QLvFX!56&^Cwx6Azim9^k04{!+XBvvG~V+
z=v~Q&eyjJJla-f`w?`{PEcm8+ItGdV|Nkfu_%+W<kNv$fC!Z)<Gxvnu;Q)RZ`b_3h
z!!9-To6T*TOC>#%91lei0>v9pfsVmMbZZlJ7{0&iuCg(3jGFO8To*&T=(dD{-FVtf
zb80x}u}GKE=$6oc!*kP1TJ=S;zpLk)322Y4cVsOYA)@0dv%)xpR4OB<VoMH73i?i&
z8OAiIR!V7w)2bQ{sg(*aI~U-0|M{x_%GFiGq&^;b_}s0Jq8iMhT0MjM<Rb{838Y?z
z+PwwvNRAs5IX2T2dzBRZ=@iEw4Dk5l@5IdXx8UW~e~qZt#<kTE{^f72V)m>L$}bM+
zvc*ypk`RwD_u24J>A<i{Ro*2=?GkB^M9rM~E&3vYAL-ht=HkQ}CXesAFQ%LZrnEK#
z!kRy$WJ2hgWNBH*<4Qh+BqEH=s9=6N<*ocubw5<v-?`a>?>HNX@`T6>qtyG6`<32}
zx^J8gb^B^jiHXwCroVIOs0}LQI~i2*^60z5p-5#?8E4@G$%evzS96Bw2-MAjjW!u?
zWyGm|jPNbmToU?1h)XZ${*Qm)yR&o0&&<@bCw~HW!T1Il9J!$t@673Xc<lZ6-}@cO
za6~frIw!4aU>ux<hNe`RjL(>AoI0|uVs;;OQD$A*px;VwAI96U@1>0vWwG=z^y0Vu
z7M)&dYKP^UPu0Uh9%H7nh=7w(pjO=;$>Z|G)tX`B2FCuZB#qTVP*NOfrs~P5Jpzg<
z#OQz*n{Z7^mY!hFNd{CVN}N6y;;B#U;OS>>7AZQ2{RX~t^9$G;Zlh5>f*_cNS47y`
z+QZhehfC*yYd3+ds)zKHj~Dg={QA=Ye*a4aUcP!ANw&>E!mXVzU}_@5$3M1#7cO;i
z;(-7il8zWa_4JnhP@^6&qB4fQDjrpUFMD(xM#*=hMXX48<OMaVKCZk}puJ1@k`BR?
z?5P5Y_4RO#w63R>du!ce@eZ|7*Fdqp-r9546bS-<CCnEmw?w-Gw2o78s$wNG4kdV$
zJ1@j5m3ct-osCGTjg5L8<4<Bt+z?Z-yrp`dJvkASC*vZSxRSj^?J-i;j#B^hIyO3~
zT$A;7fnwB*|H8L^An}W1KiiBJYOe_c4yM78J6|bI{y*ni4-~D*6GfV(qD8_tSCYMo
zv}uNmcj%0d@mBWt4KkK!Tr7%hSm5~#6bGzFB@NJA-&w`Y)C*IL4Nq4iKV@Te_aoU}
z;k-ClYQ^(;f|#9Geev@=pEhhVLT0yfNoP(PS9l?c>}Cv*4%g(^Vr=vTq{&B~j-uyl
z!;=*_{eXwnTPc3;qt`L=wo&yOxUzm8FRpzOwaNtiU;<G%jY_4-+P{NtiOqEn7r#bn
zq7v;54`2MF63;)E;_}6t*jT%QJljDvp2ha?D%!~vcwUCz_!sMF%>%VS$_V&$X+dyP
zI`KH9kGd=d?%l0DJyR@dJq|6JMxIT#9pcrOGbIsWcYEzQ3dA8&U|bukfG{}+HH(~m
zMyi3ehpQ*U*nDE|)JzU-h)BV4ATlG<M}>z((Hq5a{8f^UsDOcdj%vd&a|CQ`=>9VW
zN1AMqH%xOwHWLQZ)jS|0qYVvvKKVW);}|M=j-CtP&@)Ya+_;nA;rYjtW34ljwesA5
zgm3crhJ{o?(D1@?=7(pe@AHF@%R@|Qfp`^~)!>9v&UZ_i+lRoKFiNE#^-ylIO`*$+
zG%&2WJr*a?2URb3V=yN(=6KqUm*V*>&rPmwu2Z$L7&I<n)3f6FNFz3DxOA%)cIk~)
zv-;94aFi^c+11U2)046+q+O1L9`h%N{vP0Wesvi;-DPGC)9(8G%D+Y!CJ5sOf}n+J
zb)G_7{`e#;PVdv06zt`hr%Ei|$T1jfV$fekRtyWzkKy|@_7;{q&mwAMc=5$myzqPn
zkG>^f<vTvlTvwn=$fv^`s&gaai#96O+mKAs7(b=}Dsh09pUXwEl(8;-ZSC`QzbnJv
za&SA{1yy4?dOD1Is}82d*-J|fH2y7NW*jC0M<|5U9***Ibm(n28}76<zWEelghaqg
zZA@}*Y<P(Ku00#_{PfRiQ(=Q7-^J)8_TEcar5+z;!cXcA3#3IHo}PaML2>-YB5DzF
zurVCDyFpox1HXBn?@v&<i|E5h>W6D}4348Fnklnn4xV^IvN7nRy8kK8ivf=<GtdY}
z>4zQ4uN!%}D3U%A@`?(N*fIvl;S7gsaMUx+WEZc;W88uak6utR5iO1&I1ha}uDHek
zc!#v1lOeB}%~<c6dQuw<$!9k`FHviiICXD?&wgwZSFYYb80Dx%Gq|+%$LM4$sKzZs
zVH07{K$SclE=H726@;ZM9P_Zb0bD#!9!7#;zbos7wpn$J;$R9p!yD*i8}Pyuzw_Z0
z9J?2oo$xrMG9OB1qQr}1-DRIs1!Qy-U&dl5Dzl^(B!v(4s)ywpKzln!twuXNy;Ntj
z_OpbYY?B+}sE}6AF&#$POx3snVn@X(c`*4X59oDEw2u0m0hG_Bzcj#KFq1mVa+c1>
z>5FlilHF46{gCn3**g`EtIV4cLsOoO7#ATtif7}Ar^CjFq)*B4cnUKsnQJ+sj2@MC
zgg)Ay=U0NcBJ}1S3%#Z)z4s0}XzWu8H|}+N1@S1V)Vh^=J+VJb=_KhdAmlqsUQuim
zF+#k;Z6hP`jHPzK0=+ub#c6gvjLauZkFzx_<AA*^IP<F;-!pGVPuADJQLYh^i7&g8
zE)vuWh$oa;1S%|Z4UP72v?0+uy?ztt9rbIK7pKHhS>_XGAM$bOYXf}tbC*&0JE#OL
z?2XoNeed(A#5MR~9lqB<7*s$W3twejp-LpP5S$g-S}V}&j+o5Htyc<a38=L5{0M2;
z!&>JB)EY4^UD(6(FZS@rTd6~Wu4_}^ty<XHC@A36W|54s))<b)&V<;O3_{$zoN+%W
zTEO;tsxWNKI~~Wz_%R2!VQ<9L-Dw(xLppReD)B-nmnz1Qrre+pL=6wkS+%K{aM<E9
zWLUI!L)0JoIk)6PyJ0A!BRG!`MA#6i$F=uD-`Su@v8hjTyBU2E8L}w(aW+2M^C2vU
zC=tg)+}g;o*X?ESvpR(m_$H2T;G1W8S`NBtvL3E3F7u6^nvIx_PjpF^e)K{%K8CTo
zFW|8}8!;{>3^HD{E7W3tR{hoVvn?R2)WEgZpocb4Jc)HY=X*Z$gjB_}lL%GMbI!@x
zLFtP*CRCAZCcj-|9Ez#X!GvEL4Al$AIUn<W#sVp0qZTKTf=-_Ekqm&3f9wX5LIB>-
zk8pY850rLI4Ph{Wz^fqe>j?ZvwYL>xPrMz<9#MCM(V)bLwo8(LFUb|v*O%U%G-6_`
z51vO-bV$z>zx^van3w}58{*}07^1U$%6O6!KtxNvmr_%}-h?&)+8fbEgnp0W5Z7ML
zIaN;Se_b<Y*uqX0QHQYlwXWCWhELXryKGWt<6uZec*o}XEGj4lVEPzk;3SyRMob$@
zc~n2HKYuCx8nt0^GFpt+aJ9QNIBaOx6A~F(V~8}Li9H+nGGSHWf%<-WEnxoP5Z9MR
zc>er4c1E}2QMs|0V?YeRgKTi*Hs$ChMKOG7m~Ua!?G!gJ-$9b5n3xGLF)f@6r8vvp
zj*x+sCu7p%uMK?cT-lf5+6T1A%g0mh#`V?<*#U8_Nm0*pJSc4lUoR47gXVI9)Ny$N
zsaV{k*zH6X{K^R>++&-a*#RJhTtr?UhbEH60x&UOVrn|TCw_MYE1OI3f(#SU5iIRK
zhwbDB;%EYa-{3FLixCFo>4d5irBGw(UeI}VIwgao1PsyM%N`ELrKDOceRl#sMw;(o
ztA7cVdV!ZOY~qEl3~>5BkHKO?<>YWuRr%|Rep5!tkEw!!*WOF=6f3cZl|`VpOCs~W
z$e^k$q6OehS?t*TvkP8}iYWs(wz=4Oqo%~zeWdfusrXaPqv5c`>?u~mS2&U~Ci{(#
z#&yi!G3L>V7pv0f>NxDRFjy>))6Zgnv{6yNt2sr6ov@rd@(|5>Xr7G_&Ifqrt6TWp
z-+u+`-Rs%b;AT;v`v*x*bj)ua7v~$67SD?jGJoSkyZt+U8FaJW-Yzb`cm=m_ZZf(!
zyAWdbXo&iR=na!ILH`B(uP$*^gt~FW*k-#-IHgzp{x4@&)3KGAnNA^(!jMEtK>p@p
zHZrV-BQJG+cb_2$q+82lYJcpG%U~|2&-o>0z1ee@bi3>2Xs}vk<w%;M2FxE1@$8@M
z;e{8k!VC5glvNDVEnMCCBg8Q^=?)MEO?aqrNEA?yVZ|KNq<_NK2ypE8gx5hWa>Y(4
zUyHSZnFGrf#Sg03=)H{Gqt29FeDaf9s7?5&)#Ot!9baD%Rc@d$8;yBsa9<mIb!C)y
zL5$rJgI<6emr~RlVsNyVW4#>)WyvbaMH~a9H6BA1;~KzsLT7y=U5dBC1ns>bsGEY4
z(FkZA2~e8|7+<m8&3Jgt;S}RKG7mJsY%^FY>>|uZfx_BA>2S$-I($6AZ|FS}dW<AW
zW_&bHg{Yqj(DhP0cYYPW{#!5M<9~P_!_gM@(o02mu;C}T{g3fx>e|pRF8*GWp18fV
z`{`r%%>F>O*WV8B+}OtIN&~a=3s_i~!{ls*Z`!b5aEdlhln9i{Ea?U9^NuJrPs|48
zMX$3FPAFzv4w*g1QBt$e6j)N`gz*|H=BHDk+DO@IZ{4+Ackz@Xk0nSP!Xhs&_C{1c
zBQX}zby4Y`$Z2x1jc<CMTQ7*YL}ZkRIc(%i)v-7)907ADJ?!q}c<QMuD1#lI%+;uY
zOY6UmJm@3zr>G2&2$=BLizE+++7xKxr}+1j5g$mizcMFdBYHJs00%-gSOoZoVGX^}
zGCIR0G;3#Z^~yS~UY*AAGc{bkSQu$e0Czx$zdlvv$;idlEMPL6)@S4>%zAmOyhASv
z!w^@_4{_h)Oe8kmpmUjplu5E9Dvq|sMqN)`*x-0L`c2L6nzo~|pKeDY?QL^?YUE@3
zXn;GHD6|wNvyhmzS1fl?GmCxIUYh5D@|vV?n2rBb0|2W!pbJ~o!Kj{$y1rKG0ciiA
zPuU-iuz0hJrKL@*tgK_$@4@qPRH8Zx4Eig(FHNRc{5#$J>WzJ$`k)#dxmszllMRCl
z-?g^uU9Ncb<aq15vc1t(I2>%@&aFMHEiYkedKPnYbC{lMu*XALlYTeHuunuX(X3NM
zK*crIH%}Eps_X(6g1QDqGnLiurz^vaLEs6hQ&tvScF&(94l42#;~<94+&iUzV}GSp
zAsH^y*;7w5(aT{H8ms4NO<O)5+afuHRCF<*t5$*z0eAwF@lnN_jTtJ`4Dj*ay@dAe
zGJ+^aJy^g-=M`*@E+ei?p!A6CU4`cpP#m&%6H?=AEj-U%I|U;l42RpG@Wqjf%Db_F
z(`>I_GG4^1U+X=KM&%TWvWutxWCwr#M=1kVqCZfJih+E64~)rH)<uUy_HS|#Yz225
zd)QbiFzRKf)Ittxv}0<5B2@=Rm@PjdE7jrEz$Y(7Uqf@B9el^k6=O2?4Q1?zhckEF
z$Korx!w~I$lu1>;DZJ6pIXsn`-~@=&S@A1*6VcDK;UT}yS4FtZ0M(|?5~q~;+S=)2
zeQ^)#>pR%l+r?-&Kw0+T`3b^G1r>j~7^EA++q<8iOtQr<?3K^_zj@>MCWcerU=K%b
zUN^mX#gFRmTimYv$sifw_|&&_y<n<3%)7|)ZES7sVS8&CmBlH{%*<l$$P^}~>X@7k
zFdUHAQwW(XA8*uViWEc|(00~z-kT=@>)`0;iZ+fe&bGHf8yKB(*YnPLHS%&Tr!gL#
zvhX@LtarIV+AES0KD#liif8(TC!WQcbY_QsrB`tOD|;%Eu%jbZOSBe3od4<uu3Wy1
zIHpFlH55gH8|_abBFzdGbgFVVMV<|P1wj>FSaEP*3XiBbP%<5YlZfrq_=Ehe6riXB
z6}N04t)416qbuknx6zDF;`;S<EZv#Mk>eFyy_5^kOCW^8add&34k>jQB$-87u$CJ`
z&BjQCif|<#D@!Sk-4kQbr{k(nR(mj-%%`$=N&=tTLyfEX>DI;0>=*-%)f{jzK;_+-
z8%=<E>zL0SR}1$(IY$tHPGgWIdo<#a+xaU$$}Y)$y&|9WpleN~K|~?kaD=6`Hr6+G
zu)ev2PN#!38^H5Z_7AC?JVbyfm?*pg$!71x>PGj4$)vdR>+SN{A4`i){>?Tv--JeZ
zaueI>SHIK<hYzfFM}N56zj4pP)LWC8`lDG9G{dCq_&ItQ4To61vyJuT2(`u(=8nu`
zW^M|tnJQm4YHd6072IBgY4Th)K-`&9DFN(*nANVNy&?6e3YBE%HII!UKB{kv4an@X
z_T4)vsHC~4C%yAL<3BmOrh*#ud2nhJr5~_gF1@9V)203~87eB`R7Pj=NQmu~5x(;D
zMflN(U8H6(iC1?%f>F7RYA`7>3!IUvDT6~HQH+4wEm%B^Wl{+%;I0K)4Bi3BIh6C^
zvDRxyjf@%Kryjx?QfzczKy&&Ol4KWOdS(OP^L-}~RU|Z~&?@Ci<Vg>A2kbD$tT67A
zy^fk2!zuC@S6=Sp^n(pC=n8Yw-ieEg=_|+SY$v<s-WDxgtNlieCfg0mnMIVTq#u-)
z)nEY3&H9}9=xh~?J?cJbM%P-+3)#>-o}*-dq+O1ZsR)GAQ>_PRPK4aOgHr!{ovwfL
z>MqvSHn6+9i(%3O=b`*u`omKj9z=+|W)YS_mgL*m8C<UK43^?yw!WK|H-4;LzVv%J
zH95ZvjLkQx^QJ7gUUuPX8mv5+<I$g3+}`@oR_8*zF!@-~sz2H<{Z=^ix?%1QQDB5#
zw~tPH9k*}QF)=xf*7P){S`(O@sWBi)o=?A1GTDp@_odp~)=KFeZ`=r}NvVrK36<5}
zg%cWC^v8**<yclT*+l9tz$m#HVbbrv1ST#~&ojHa_ONZsb8Re*33E&t38uGvR{Z<?
z7hgrUzYRYwP{A~I`j@djd=7Cu$&)-(DR8c=RGtZ?v<cG@*In_x$rFJJr^F$#pHW>K
z!fhy%NMV_uhv0I53Jb$Jc7_+Rkh}+#a0*wi+`;2d%;Ct<7)y&Hl}cF^$tF1<J6{j|
zMn;>4ZX^T1@@L_<RH{B!Zc=?#hB)?_7^ts{i`Q5W#U+3`hRt-=uy@$pI)yEb&mMJ#
zsxX#+Bpk={Fmo)%?)r#D@Ll6+RFBL@^O)qADZ?IB15_JK4e`l%j0S^Zd2<)5Yunh|
z+(f_EF0#DOjk}o3F4{SM=v9lzZxlYMdgOidN4M%bqw8@uxrMB3Uo5@7pB<F1{>~s<
zC+YcbdKh&VwEC6Xm*iV%l7Hd<s01f}CC$(NC++RUzt(6!du+P?5L)#|h7-|3k$Op(
z6g|K6Q)I;swzhV#xgH`4E0}7{<H*7Sre>R%nv0oAKN=R&)NE)&0$H?$k_`~f3W;wq
zp-&AL(=n4#ovZb1<n<C0IfBaOBdOg~ez6^AL>9rpc*aeYas0JJ0fUdi`C)!FdqQ>>
z){}<{2&d))Tzq~NHx_Rqj1zcla1-2Ye*!^BB?x3($eXFKN8|hCl?41nfN`KQO-wOT
zBJT7Sx<<#OtqoYE^_YdWAm6D|IxV6Q3EJ4`eHEvtz7L~e8(({V9UuJm(+H!CTjfgF
zp>T8UiIRYs^>l2pqzR7%JIlS&j{+a<PKb@=1XD-q*xSo>;lBe0YfQ)*3xc7j7}J_=
zdo{He;wnk<-waD#1J3GoPB|Yb56+zkaQ(bRecacOai;K*!~^3>h-xiBtxoM%fx#$4
zySsy1E8E!K+Tt*2H0q-$hVXpSlIEUT1$mK?S0gS}5unJDyzO^}x2o;rX53FUG03+s
zW#!I4&%LeRP0O_#Y1UC^YQxjJWqcERi`$zr%I|bWxbsh9fA*hc`Kb?d_ip{aRy$w&
zo~g?HSZF?qdgWxl@MC{ecEi-`0l@%SF~a6%7u#Dah$~G@PR(FueiqX+O|+VkYIs&~
zoSji>mnDlNOQcfR%D2%BW_?cBKV@F;oJ9^*c`+J9)?1_wJ@oM;3t<6l(@sXoQ`)x~
zn;`6cOU7S9KAkn;XNJJke2A^J0iJvA61=dDJWo*%XRy-#90u4%C7cv`K|qG40^f^N
zC`EvAjF9jfHb~;Ja5$w*FpF0)qt{MW?uuggDXPMsjgB0nK+4D58C}3a{$4~;gqzpb
zu>QzVOwWc`T_&+G)$dnhy!)=M%Ds<0D5WC;sFVC1$_Ohr6C61WkoXRFa8RxomFW^;
z&lnIjl;ngpa!U14JYgXtYEQ@wejO}&-?EkVKBG~Ind3ex#0|=XK0qf#?@h+MQjbt?
z5G)|{fL_0grHwtTtgmBxdmF=H4`rDao|lN^EQ_Z}Yn}krqT<yvGUsWr7w-<P#(Se%
z@gQABQf@v|dfk7Om7Px{#oA(8Xd~m!*}KQk+yw@QhIKw^B*j*m6kDGOyxM2u^2CW`
zxcnElMlb!<MtJ1dROKE_*6tlPqJ=E?f;cS(ejbbfzmHKi!20?Y);DgUUY)>XYX;NP
zGnks0M57t<&P2wCWfMq)MFm4fs=@_!^?Kij>Btbiiq$n%#zH-xje_nrVV>upM!G89
z9C=??3TMb#_Fgv(qxikv5(D<7r!HeST4#b^<TueDtuXVKjIgB632UKLxb|=&_(5bi
zIPx~+-3WhBe>RchRM$kGprbb=D^MF7F*x+6FsNae?_hiQ5{@?BjlpOeFI`y2``>>O
zevnHT!s1c%f-%o#{LB2KXNq8HbY5{BVChDVC%#p1&@mu*Jfw9zALa2VZ_(mra?eDp
z%l1FBu9g0*;(fZC6J_)$JswU`c;sWSOD%i?#Bq$c5=aPHBxv_GaC3PJ+glsxbUR4W
z9s~NsaR{VkCtvu`tE1vcC-_mel?{?R)$MFO9;R)iMY~Az-H+$q_OGSI#;22Vb3LQR
z>~_Yy&bqq$#y8pEyuRVd%RxEFU%fNHtN&}{&-{ZdJNeFjdi}3$^q%{(jqoH|^#?Fj
zxu+imvlx_Vn3Y|>2og%XV=x+`zp{<Bl?rOL2~4$SF*`SnnIjXJoDDeC>bDCd11hew
z@&#u3Q|P4#VK!sL285+6Eyu!mNyH;lkgzNl$vm*clcau>mop|VCZU(oLRMR-X%{RW
zlgW^|z@}Gl8{Ot)h!?+h8*3{!5k<6h#|RPQM*CCJLz@jiX~1FMBM+yleh!rZ5)O{t
z(H$Iw&t7Gw)CFO%)Aki*H;a}FH}@iWqk<X}=Lo_IHv7+Ew*Ca7Fu>xi+gN*e4wEx6
zHdke#ssbX*i_ux7vCzoH9+a^t$|8z9e`g)o-AoZiRU|`Yc-)<RKWw4v=bU4ifL1+$
zxu&Y5LGGD)syZpjX6m*>N=KTsgexU#^*X#EP-&(Z47=D^+riH6I@+C0j7SU!nd!vg
z1-Td-M2Nj6f-*o^CdktscCtkbvO8fvTMm<aYduHjH#6-0W>)T;PmA47Rt&~J)N9tz
z-97FSgQLg38N#mQcA6I3Ukd!{e-L3|ZkXKuzP<G7e-j6-CmYcMn(<joR_^InD#ybF
z13xMH$i0MKiT<#U?$SC|mMdsXv@kn2i^-{JG$$Kqv_j6rkl`Wkhq^rGRG{Jzu}r<D
z!gz#RBSb@Ik*e^@;pDJ!F|B@?kK-6E^Xc?wbRbKMEI75LW?GSkZ3SF|wz}NK<x5u(
zMH#bHtKl@3_CAANxx_z{;iS?90)@r1QQi$b2J&)Z#&&FkZvjuvrWhu)5?*j~#{6vJ
zfRnRN;TVMwAquL=Dsqqn!Z6*$&fpSe>Tl(Y)uoH8c<+19VtXS)nUR5#o>cm1mcVD5
z99lBvH~>udCrLuq`8o4wl||Kw5U0IU!fJ$TV?$ZjaV5PR<3Z_rH+Hr6EnZcEz^|p&
zJ5}jTMFc!4p${;~)^O?OtK^Ab&>x`4M~tQU9_hc9%G0dyS5OjRl03*R`oqiEVLHJY
z>lHWrDw5LQPQB}Ywp-kIZkTVItK`m{yA7LpgBqNFgV$3Gk>l3p5Vw9M^qapL7YnDl
z!`UC*7`*sbD*oKL>Dt4XZakjV!g-!YqjG?h`ojh}3q<w119aOf@VqK&)hSHR&0+q?
zEGDKKXiSA1K2VyScs`Wv(%mLaWx0~%l0DJgS(Im@zyX8FIGH5ocUf0O?VLI-s<S2P
zHLeq+dKO74TDmbbTNL_ac<$Mkk!QOcO2t79-Q+sf`cI=$om4yzZZ2XtH~fW20mu|$
z5#dk3UcKPOj}e?plOM(F(U~5m=?khOj9BS-&Z#X*j|Y;mqKOs8*zA1;la&V%gdT3+
zTEXrk3uw($u(qPwATxBlkD=`pGwBisTlhp2Vk&p0ZWRHR7l*j-3C(}8vqobyB{5PQ
zkoYyZM@NoUKQ7|t3XfA>C$|WSrF4XJj5$;q0ec%I_SOqbGy|+}U&Wo(7ckLm@^xY?
zhK(|HIVJBi<h0f(+r&<C9i7oljEW65ypz=h|DAJB6yJ05(d^mvm#d$;{^b|jc>c>=
zgK+?i%p1hud_Av+;^J<Z72QSP+TRcT*3V_-vB%Q>;2&&vU;Q>eD2j>75x-S^3+k2A
z@Vp2aM#%j>;8T<84E@mn-Ng+o-L9b7oJ4D84s-J}n3`^&J{j_4qEvf2EV#Ec>!G+L
zE#s2gb5cA}EfC>k*T+LPOEBDTw#*Kz%H_wqbJEUARQAS1fUi7#4O?5wh~rGH&k~C}
ze}o_ugCY`m5r_)L28KPIm_s1>T|i?u)vXPSoU&qHQ?aHpLo_UetRz90Rzg{>P>JY?
z@uA~{VIBR!GTNgnn61AB!(<N^FRtL7@46TMx`3<nBH|a0-Dib^>2uMTwPq(vSXFRJ
zd}En52Lh^nAx>)iNqagv3rQfd{Miu>a0pNe2r|W`#O|d+Nb2iV69YpV(qON|-fD@#
z9&Jw4LYRzEfrVKrE)5ZSR1{0KY3%p0q+gcz&`z(Qo8CY#TSZo;i2Mrb@ieBZk76>O
z##ChrPfX9@(PQ&?d6)C;X&6+zguAW3@r}$I%;30V|6WCfZM%7f-4}y6{3{jjt=DFo
z_w@JDEAh3x7g6(0Vyb!$)3rxYi)Q&{NjXB|58->H5H&)t*F&$nft5RT#(Y|{Gnknb
z<1;ZWp3kT+r4^*lD?JviMzZn=#wLZ;+aXUw7o0j-bVV1|zngworq8g`T1K}J2}?}0
zBHVm+3s)~)K^UjV@{wPQT3Bv>z8IEUs6<mz48h(F0Xgj16yo7jd<v_?ASn)xo2ECq
z(h4UvsbY)j+KyTpjS})-QHI>sPrMy6YE)fLHC8dU2G3!-_6VY&z@5b<+<X5qOwHD?
zyG}R;%WASWA)F-*`YKe%E$OzW$-ffGuHEsmyOpBesw3^?wmGlf4@@0~x||L`E%!k+
zy`y^+O7~I<lZb@J^-@EiyIG>Q4UEXZjI8D|1LUC;xl%GB0F@I=!YfATCpXX@UBWOW
z1C#N+h@uHh)J~uhOrjFh5d|^gAV8IQ2x$?9Bh1gHIMS+PGH9Vs?HLY`p?QNE96j6{
zA?fa-7z|Tv<M`wc`wv$B0+xF(VXgZj)&|dEssC9t!UfFK-h%1MLuiIG<eDQXhsc8=
z;3b^W?GD@M-d@M@9R)a3X~p~uS~C-vo|3w*q@N=hQe78y7qFZRsYe>eehBt8$y#m^
z%*6{F(@WW=d=`Tdnc`4Y1i{@kr9<b$bbwxGh_5|+0j1voXr~OCMR&A>&Hh&qS0@#y
zOol_aH-Q%yo=2q%3cq0kq!_|vd}J*uC_{KS9Llf^rs>@07#>kw)Y&SbB*}ZhBcsEe
zl9ZQ|BZ?-`AKpQGbQP`mA&k-vE?>HXcfRKw+B-xp)IhYgD7IMEHm4I)r$Qr&>d1MZ
z-}3+)cSd;dSRK8NDty!=LZ>#$c#;kj#WhOQER@<JSIMB0kb8+yx5VBuc{4yd5N&96
z2c<0!y|dy6IsFQ;H@b|Qz287c%=e<tnM5L8PK2|FgGo-2`(7^HHK`QAD-Z=0RKhCi
zG0=*AOiz}Wory6SHL}%x$jw0+Z%~8d4uv#Gw-l5Z@@`oPX8h^;+tI9?!!TP#FImKL
z{~0WGKZjZ{iy6Xvs*j->&LQ^-R<6su1PG}JZiN1zi|*noR&G~Ot4*ObJBOM1X|#yv
zGZpdXIqKyYc4+6*(hjP@p2}eCC;N%BZWn|JyVPqeplth^6K|!~qTScWSH5%wy}>H{
zkU|nM4ojU+!H*)5ilDVf6PqV@TyW_^P=U{Uo3QY`(5EhH9uWc|bOG+Ot{KG2=x9A&
zGLoi{)Xj~XFQr*T>2V6*l$c1aj1YTUL4@`0(`dFHfbV5ky1k4u_Z`FJOcR^Slq1((
zhxBMSv>58P!Soq}${37?Yq9bIQ5a!!X@E!HBNa?^-uihq!z3IX`Zb73_FgzlB9NI<
z3qzp20rYoD?kqu^EeXdINKbk<$}`gP6O73T8OtxJ`CJX?C3jGuk7oTGX9L+FD=}&!
z@ezpc`xJJCEQVGIYGQ1n7!wh2B(7lQc!=7XkGRZ-bnOq~H~<F6jNC_z&?B7}@(mJ{
z#MlH-4HpoH$1qtWNU}|KdGB<e!JW<*(TwKNsyu?}_+eDzIjUtsQg)De18QN&VOM|D
zMgR61R`1kMtxaNTmWoQJF*)7D)I!W*S31lwqBbZ)o&2yygNBA6Z1)K#RqjqMUKvtJ
zOq0GkQDS;F!iBFcVR`8$SAl1Fib^nz<<4g@DA!O8XBnvU12Q&>*vG&yrM{~YP7#j7
zg_aafkpWUfNGcytT?{lxEIpAFSgcOU1$I>zZIygehN>ikK_GMhuOyF$z}}R-oZfJW
zJ%FkB0i@Y3E?&5a_q^{hgjJ8j7ACxL8eS<XY9m8+aUv(<2CN3qCme@V3ClD?=!aZ3
zVT`r{e96F&2gCKNBqE=b7<5YXcBw}ekPOvkp;O%w81gZ6A1V93;^~QfmbQq#LdipK
z3ia?5q98(1WNdiF!<8%^)vSfSHa4;HZX(pf2ve01^D}jS^05g&JYOOx(~+p*AG~pZ
z3=ZvMbVF&82`_|!QBv6}Q!*orEyU3@;%EjF<zw8+c91S&ssBYRcfW{6bOf#1Lzs*o
zKr@_U?>#B|$O!L=xceLz(DiSxW9@bomFg5GrdybqpTX?h1g4LQK6OG$`8ww3MIg)6
z@c0}+*?gy^N_|^ZHj3>|v&78N2us&@@$!XN5JUqMrDUagqifh2d<B(iOKQh>$%?1p
zdyy}t3{3W;svRk3AY<c4EJ-2i9UAno*&4=gbms*17#Szlo<>QE7(zE@V?!kpss>8|
z(o}vbR)WF?u>geSZ1kUD3Ij1}H&z$1cyj@#PtRk0QQGF}k`4ijbzsTw$cMAVo>cT9
zf2Zr!?*`c2$q-dyq@A2S7cwryRq`Y0UP1UvXA2nam5jwvCkZw%Ty1YLD+wnRbzDMZ
zRbr{(e5W2y_2%VQQ1uDnI=<dy0t6lb`1-mL>zL+djM$G5ld%aRRD%e$FvM&e<Jj3M
z%15S(Ag6Y|SzfA8?x2kWWN=iLg^i8u=9H-++Iyf_u>}(3NI9)c3%nA|p%TvXB2MyM
z43gVe?0gO$K8t2}9IeWOpz?}|Z~?hTy0Qag7@`cNsC1b2F<4#4+DeQ{rNLT03&&<L
zGe3dm5n=HX-b0~RMms6<({%r7CsCq)=6>NSdDNUQarTi2w_Y6K*{9DVDc5-c3qDg~
zx$_x>QBA;M4&gNGmll4d5DpIEG=$qwdYsy1gau<eESj!QfL^D|6l~C^s<xdfYmNAD
zf}X-AJ{GA^c~o4e0Az|ba;D~!!3pU%L{STa0eLwuV={gSWx0#1m#*U2@o7xW`q<eJ
zV@pD7`f_L-hm8-j3x%S|HD*flIrm5fFvjg0DW3c;a1%bN{~8T|&US%8+e3e^WG{-n
zONGOj*3vpu8h=;Sms3JYP4d+D$<cBXTuDxf=NEaDq!Z2fo07?;&5u&zgyDn)6#L}e
zgzVi^!w8K^h?#nT<M)KXe3j>F=zF>KE)Ui?Kn91B9n#01I}tFQKbF{@xL0a%k;`9t
z8OkDMpqNF8SkGk|VXcK``5^1^46<e1?tcMy`hSc@uz*(OA<lR;!lNv%LSa|x4N>|d
zco<-q?qRU9j*XQn8=vOXG<!ZX^DQ)6RRlpGt#}7wd<bwh3}Q!1WmEvCANBC<-yh<|
zKhE*g=Psi&T;|Y@a0?3iZtwg)M&%wV(X=u)ve?O}FhHyfjOatlV=7}Mzf&rk-`anz
z_`8;JaFNzA`k~I!1wI{z7FNlIhN{O2@DM^E@p7nqjr*Zfp=nsdX8#$~!n6GPUS|a_
zJ%1f<d*=hFvd)oW?y7eq6-1_?n5Kb3o+QH*MFA=`pYfF}9bjX94_PvW-PIEPJrBKI
zNm&at&)~Zl5Z#T_DbUpDvgaw%%WG<;<Uz)>98#v%G-5}GPnx_K@hS!9Ap<1Wg02yH
zI8i`zGD75&!3oibBTUvJ+<P>{WXmroCZy}-h3INpz(F%R2gu+kY=K-?s)7z;1SI%M
zMusP@&Z!C&pY#H`l9%dx3JSTnK?hH$D4an|xCjMec^gT(hUMOuaHspnjF-$*AH;O^
zAxuWcSqElVbl3nPNRfL(^s^2I8=KhJs2~oSEU7VjWEOKrr_h|Nvak{vLF$aj7*nIf
z#1v4U_Hg=v0B7$9KKp9}eC)R_VXuD+#F@|YA*#U)HalOz&fq1)wRsElvS&lUv0@Y}
zgTs#zNX$U8WU9yrn}SXHPGT%hZj4O}7m#aiif-|y(%`<&eW4_k?YuvQZEU>Bdlcyk
z$>K;TN?6VyUBlk!CCpUcg~ID$`OYOoag2u^Kg-&`!>$;AY09m$LqHt*EK9*c`_%n1
z9iiLZLA$+;TQ{$ua&iu9w@zdAdVwew#XWNTSpSIYwM-^Z^Q44n%;&})k5~^=ej-;x
zeQ5iu6B5g{=L4}Ym<d(csEbp^Mu#+{y^xJeK;OL(l^{elh*66|oSg}Abefoj)Jr`r
ziX=th<*I(+;F+8QWN@UqE-(hCf-p$oQPVU6e_0`rwj#+l(rx6rpfXc}H8fFkl!QC*
z!jZWdhm(lI7En0{5;z)WD_9;pjg|gWs0BpcdIYV?!<Y;fc&AT@;av7ngml~-Svkb^
z-Y#}`m#}!fj!I<$6Vp?eo}I#Ei#(y2Q{FQRKx+nAzLw(Ge{KtxFJ1;Jt0+i(zDN=K
zGw3BNSm}Hbab=dXKf>`*p^UBsr|-Pe3TRAnqFQi^F&wU^VnakAh-B6FWuF){=Ei%f
z2Z5G}V0=fhqcwMka2)n<=$Pa&QkX@Clr+Q$?jdg{0{o2erk%m_XjbmyLd6_AxPJY4
zjItEx&Yi_fliJnjd!tnJ*dxg?=yh>tZ3~+l%h+wNAW7P6{Mwy1;_9??A<cv!sl~S>
z`L|C-L{eRfH{|r+7$ZvAr)uhg=}+&JT9{m2K%5+s`XC93SX?QE-;lA9IT<46uK=+h
zq7j9-uNC8H!<SB?bl4<8mSr@J31vEv;{X{P)l!U`ODp-ypvqYR6tvhz@bUy1cljhp
zfaY5!vI;DeL);NEMg<!k2`w`Ae7I`?^Cl*_TP1KmYnBYNbu9P4ily$CNI%%0s@z*l
z#P_nqrsvg>`YF=94-yh1J)g83V%XckZacurQVrE=gXKTNC}M$dlGNz72gu58_|+|>
zDal9<+1M1t088ypz>lg3qPmi}P<k|qJ<OaN_F%-d_xvh*G-6;B%Q&RJ5f4W<4|L!h
z6-s5?mz=Jt7-F-vJE?J{s%&*}I5kf1ldB?dGB#p(_)=4Esb~^;wvN^Ir*NwE{m99~
z3wE(|`#joP+c<jSIA-RXd@cIj6zz5w-Oet$J^31CI{<nhNkplHr?LUb%5ld~wO8nm
zrAjckDt*7_VjLESU}^uVe|D4t_0TFu27@EaMTJl#`4LnYYNn@!gxhdWF!FFBHZ<hj
zv}z&lZN-?aD!L=_xky;2*XNeVoL)Vk;{X{P-LX@q5@)IklD?z~L8;&>!eWFZ9U`Us
zS;#`6nq7|#l5{8FFEU)rmZi%hk5P(O{w8j?A2iVjCQ+~4hrH+_$#$?ly1?E~j2fom
zd(f&qfJWtBM8Q!$tEA{554tG*A##6&Vb;SSEf|~OU6Df^u9inS>N0^W_8TaQT`cbY
zKFXj#Txlt8hb(sO-I#Dnc{fxuW@@N(g*esp@ZXe&LRM7m^fqIrdV=fVLr0?fQq$a<
zN?jlJa+IhS^KrDH;aXJ!kCh)m8Mf*y`n@|??))K+Py89=RGRI#(H^{ty-SPmFO$I}
zsm~E#2R8mx0D%-iNFgs7*Sa!}DU#wA((H`o&ZrMz$dsmB#K~|g5q$~5_c=ggPL9?e
zRu<DC1xO{n$T><@(P!_5n+h^gs0@xuhm)~sRw|gQM>yIb4@ZtAZGlw>Ji_;Kl4>n_
zIH2Re7#y7vwk1xI<K;wynqXlVa1W(08zRj|+$$?D5}we6Kj@H3bpTS~M5cb%ikG^+
zh<+x+MC7(QYJRn-#z(oxG|hIfo2_7L_cEVVBRbCM_UZUOOa^m&*+<0)sV8af(i>62
zodvY=gxIL$de>M?tCzfjJA0qza_CBRPBLr;x8ZPxGg1;t#cWjQOL#Y0mO@Gz6sE(M
zNA_S&rWXjcGLR}{Fr^LF>X@#k=67YRm9gQ<aW+EaP$=WWp%xdQ=nfS8_iFtpy1hj#
zw?Bnr6W>GmLaL7gJTk`geA0)=-~|+pR8ewTUsCQAH;vMDCUOq*MQn{OVK91F@FK<C
zRue)s?NergKxbn#<O&E#Ek2lP5bC_vdN5;kUh05c<jDeQrS)()jHT<${x#z_1RN8&
zZ@ON^T)lz@g<p!I%&oJit0vI`2p3B|WEpigp*E%ma~v3hW6J?Z;ZBDd!ZUGMn>690
zka}v@+1QZLA&-Z?7r6?bc<#xhXPk$2>@q;Xp_S^>#3@m3)XFXaI}0V%2Sp&mQ;m<4
zaqyFDx9F!^Xm>t`#qyJ=1}#iQ_n;ZwgKBgP)o_ME0OtFk&&Q!fK;0}?dSAfq@D)UH
zi@yq@##1U<wFu<z?A-_$tiva!1#qRfPLm6$EE>l0I-~8Pjfo>csJDG>bX)?U`z7ol
zkr<_^L`GY}szMnEUA!b%5Q`!*wYh>u^CbHHCEVKmb+l@4K`lJNq)m^c8#r8&=jY`R
zqihL%GBDW&(!7VXBz3$9QB*~o90AbekcxXbxw<%}fJ)UNm<QeBEY(TD=?$feZ0)R4
zM#f3rarR3ZhRG302s9wzn9yp%fPGZM3MS$TTD1xqF?l=6q^oO9P3@#;gRE?ba)2VC
zHo_&f1~{1Gz!)6W@D&m99s-@BRU8xcN|ZaS6BRruVg_GBRFUV2cs+T-YHVUuBt&4(
zhj(o8e#i|LzL(<_5eCGUlU2PG9#j^Q2AzqKQuLYcvzcGRTJi#G6~|r!)nE>hKgDJw
zDfTePS1`=C;RSV6YiC)TnDl*g2U4vgEZL?=c{Ex=lqdnB?k66O7^lGSZ<G->IE?K)
z$$pE1QZ@UQ(?_(Ko0X=>ap3Agbu4<A0B99vF<4v>8%`K|8U`k8gOvrj={OpV<E)jl
zG57*YXH<e2L_v!eJzXmT+_R$1B?DxXgP;Mw(m>U334@mwy*ETe=_@`r6;^4T8>bFk
z<2617i{e?ZFQo<R%`>$cptwcq#mu4d119!yYO0{tAna4q$0hVI;}S2v&T$l>8P(8?
zVorZY+yPI@=(K<r8D8$v!3K`5NdSyIjM5xwP8tOVa~v3hqxU9L$He>#@=91;)=l~<
z$~j>QWIS^Cq~$_s%dm#LNRek0YSCmT!=t?(danG;PPoQ=*yvEmpdX_cUKU(gQtJcx
z8|$iYm_(rSDgGNRsx)t-lkK6%*7<mBN+@kwxtDuL@!+CA!3G3tQC$=Giwuiq71w;9
z+Q1NC>_vqLZdpkRKcJswqHFKZ@M@f0+-c9kOO^!4m1eNfZ6*RB(+iZ5k<V<yt3s7G
zSkAD3$7HO<v!ZKBY3vrlXcAf8M_LS!lwH0jEU`hJTQq^tn--wk$Y_wUr}`xF*lMU$
zYmB3qhO63hq0^v~bUvvuBraAnmhK+^dq5e^0)8b9xH7!RC;}zn3y(zExnl-xL_ry%
z9yc-7AcGj9!uX99&)0Jhs_LHkVcc_`z7wH{+MRkBQF|UK!a9)SAQ>Db18irH=qR~*
zB0_Yd(gUh@p~p#kRyZ3}Q&TV-l)%5Dl#nY^SPyY^D1|Nth#JFbV<X|0;5*jvNSGyI
zn2^L&22AP8(1H&s>lI9*7SmbMafuHk&k+wx=AGa!8sJouR{_RiXb2##`aYDRoT?BP
z@?+$a0pku1T(L;8iqngoE3aR3DRugnya1~^?DpVRB@Nsdi^ISG1@V2z(5M#(=byhz
znJ9Z(8Y82jdeKlI7S!Q|6AE0G&o73L@HO2DLxZ}~h)-w$0V*+ti*Cie5#17}Pz$O{
z*u?r;R$<Y6Vgb($HteBNEwR0sVQ)Lfk)r{oXK11X%pRAXA7VfPzeFu+qG%F(I24kP
zGBg@kmiP9JL8MA!!fuFNon+*91@O|qPYBD=1$YN=93X>Z0SMQHc4e*@6Ua+E@#HjG
zvsJ7t_po?#5B;`?IE9gjM-|k>n>>S%>anV9oU)woo*`F~Q)We40}#$5o{o4l)*E7j
z!?=d3D>4gB86BSQVuXzEZ^{N~!b+1l{mJCJlZsaOjM2JLp_J53QJ5I}zV>ohIGtE?
zTtCI3k4)-)+CB>Z;E>6R&GC964@FfTI4NhH{82OnmK>FKZ;auvbs~>OpkVWA)ws?q
zLMB|ghQflqVy9FF(oJD=rcH5+RCdo6tJ$9KY$!E{hJ#$W3*7G9<<)3o#SI3j^JRfi
zKg6X==dr$Z0S^p5h~4cYn4T+e;<S+YdV2+$(*?G-GNhw|yHv0VHsvC6Y+JD5X-JE&
z5M58|aGK^Giqr=N9tOmamYDNEj)P=y6!xHmz#VcHQ{@96{eF(Oy}O0?fAA!Bwt)v8
z0n%)Q>sPk%%1b1?KHw^2>Iy)+HfaUZAUuR>V9Jt=Pl}wwA;NkH^C7Q<-jh5U*WgeX
zr9-yTF+$1<QZk^N31U!Mkq#Bv&bZ&?Jt*rb-i=b$V+=<^robmDiYixxYt3RYMpWmd
zQ|7c7ENM>;sTY|R-;#7MaY0BMM(6>;hBm;l5v&<+`X<JbjE->gjjEP{m37-<_5>CC
zTXo@8DR#9i**g%@pxi;{eVtZ2a^6y)OKol$A|a2%;mt^vN}z3lVmw4KfxCpcc%pUV
z7#$ATNY#f6b$wjDyol#7{sIPr9jtA>jI*adfYZD0M1OAvC(kBmPWi~v7_VO5#xNP7
z5mTc<=7NoHbm~n?b6#T5DV)m4(;*td$VaxDqca+jXxAZzbN3IKo*Wk&r8lRMJQc-7
z1x}xCVRM~Gohb$bGA<Dwe)Jd~e(VUA7WeS-OIujH(P5RpFecSHRcpjfiNbokDu-W;
z^JGKj=#ZR%gjqIp61>OZ_mq_NBDb78B053s8IiG(f=5NIm5_>qo$*jYup2GsNq{jK
zl?q6jL(<>6tU<yJ(J+>7n--+tBbsZZmxQ(@%)#M0X{Ym>BWyMH-GI-^yHN#?8o=ex
z<aVRfp`vc7V>mmit&Z>*G}n0iTouTqJsjZ}We7qt-0}=^+_d1i6%doNj4LHJHxoob
ziG`Cf@+3sBBRvfn{H2QTK<3HKs{=fD;Wv<`2`1{tQDhmeT>TW5SH6N%$KHdLmA7Gf
zat2{c<rOa>4r@vRS%s^vnxYDbOI7VhxT4HcAoD2=P6GY`vVMU<MxG>zoE*$?fIJ-C
zcH3E`1hsGoA#``@d>F=r^5v{q%UOcFz|M{UnR7>G@ZEoQ27B!;E?wNhl~;Dr-lA}e
z43pGJb8|SZ&LiGM6QK&ZOxRT>3@!^#N3a{$;7I01GuL%COBpDW(J`EUC%kY(vUoBp
z?Hk3xp-h$XYE-CUxj9lbt}TG}l5|Q(2Qx0m#$3U%g~Qj8ue5D~N9kOfg;tDhb>5=)
zqZhnBo(Oia!QkwS;9w&CAn!^csFrkhT^fB1t!gMjV}##?MktJZ69)pJMNO})R10jZ
z6u5r<Dr(g_%Iqu}(?irIBkm%>>VqLrpU83hYJulp`Y3kWcTle!;SGfV_gdIMnxwdL
z?GspSd=1l$)5y~irklsmtWC0|Q-n%$-gY*Mhr<*`+WeF-n0PwWvN)v9Aw{0^XF2q6
z?*5_oI8MJR)k<mY!fiu1<*NV*y`<DipmZmVelJ762UM$dy!X9Ly!{==aP#^uE?wBg
z>hb{jNSd%w=7KkFl>wu0O=`F5Lf)g0tCS2E7lx{gR-ug!Wt>zf<%VEmjbgQ@u+QM=
zMJs)$6mY5vHg!h^CIC_h#b1Q$D6dEZy%yjaH!6m=;y|hfFVS7N^y{Q4pa^Ywh3^q`
zstk>5D3!34IT-PXSdd0Fr&9g!ta0Jo7aLzAQS5Mr_$UlM>u#YG(h~OO*iY-+@N?s8
zhK=PCmoGn$7cTt*1M82re*pKKcsD9F;K)f2tp(B@F0k~fj~C8=9?R=rMWaf>W+_5e
z@Dt+}`85_m4~hW2?k-x*1yth(@;sBa$<k>^^*2{jP+>L&m-I>NW@^T0yqv;Ak_1So
zQDesb-l4&{+lSW4ww-A;4V`ybdYGj&rOBISAJg-!zfX13^dQv|5fDfd=-zve;DHC{
zu({d8#S2@wesvGMy$oSQd<$aQihbi*Myyk>iU7o$sSBvA*vw>j<ac2%bLd4zhAWn}
zvC-uKj##dXMva9(A~GfhM=Ham!zRg!Y62i-uOgdOvYMvyfq8Mbpr)4O9Pgv8Q}Obi
zguf7kEKN)_c+3QSlR*Q~R8(e2-bmFoNm`s*{Bd}xNrS@J)+c4?4bGx9p__^QxQYpZ
zpQ6Y-QTy{nzJlLbc^S1vhP4|$F23>%Ub_109D34+df~$FVrA_D?mP7z=x#lP*@X;o
z6yw4xU&FOqpFuU6RjP(c`&qX`R#Fq87ol01#YCO-lnMrl_hVZ^oK#+yzLurF4nR)C
zX_{|^hY^XjWf_K)7q?l212+y*NM)2vwBD~UTQwe_LI=~xMQ2D}zi^LwDbWn+cF8aR
z6O9Rc;DZx*$9o32^2!b_p5Mau1~od9_O8q`B*Kc87u9UwlJt+2hf`3e1u{G%RhuQ<
z=7c<`bI;ZQ8DGQl?A7^-ha(2Z0K`gOREJVkF5|H2Yki4y0@w+al&7azuw+TN5YjO`
z{2BpzjiE8&0~;Cb6_ID6`&~)a&5{%7ymiW-NOCHqH02hGo~ije`o8eyKntCKd&&%w
z10XI9U1u^f1O%%$6Jr#3h^r}9UiI<P%YT9k*M1eDKf&ihxLF*=*xp&f&hF3S*!<&|
z-+B^*bOSe+{)Cz6a$QBES-0X1=s&*Z9x7oC^*ZSh>CjR>ztSxeL*r4nWO3<ImD$ka
z8HG~RwIZh!xrZbT(C=p$CbS_rWfli)92kS6GewN%vP_9ASvOndJlSFrs@<#}hQ6+L
zX!d%DlQooZD~w`1_V{r;_Sig@mpXXmB7w|Z4Eoe7Dd6<F@SdIg4I7{kC5K&PlnB?M
zG<$9UXY27umS(J^z&UyC>4^M+?!X`^bTK%T0<SVlnX^Ci#q?n}Y!VY-vL^=n(vFp(
z{#l`S<9k?KMb3qcs@}te>{rq~5Kvh3#+A+thdu^Sr%<yTOQnm^q6`(eqvBl{Oo}}r
zs$}n}HpHUZ$UUHZ5A_LPcbgV4X&nQVdWw}R0nWet1-yLimk|dozE;fZVWOgsIHppH
zD%Q5HV14^Kf0jx#sTu}K2t{>mY}OR!6!<>ku#RSZmN6u|EhydRv3f1*K$DRvnCK@@
zA%QV6G;}su5g^S;lQ}|4y{rn7cGoxSwJfPO@;ERC$1D?t2e`sfygGT3+MB0$Z{pr)
zqmm|M3={=@yljtmb8d)Ml<4eHxaH&Mu^F5`+rsYN0GBTA;OgZ)w6{l$=@6k%-bcCj
z%Ae+P1onJL%0Q}x#RDS4lcH21muea*$1w9(CsswmQj2Jbrz2@{Vl(?e&5^Fqp_B%j
z_2+Wxr`$Y{mf##)Hex_c7fy2&#lw*nnrfHVeW~d0Id_T>nu5m7geWPU)0H>JnJR@z
zi3mKW`B}nL_x4t8_((E@K!0g+Az<_J?IF&c1LjY87!6C7wzzgaz}0Jij8|^{E-K-y
zszKvQIs=?*J?UyVq1qrTkz-W~!q=4j8iknwh@(0h^%*JBG&e}Sj6aj|W^~3+Ltn~m
z$w_&dp)k=MA`W?8hDfp)D5^e5rQ{|pez1(qfigIT^5wCXp9&R(^P!($ykEtGpiI^J
z`Y!I=*~aYbB#s}SLbVcc=8C=q2GBsItv+U)zyrI$<n=^x4exq)18;lB5!}ArW=_xY
z?E!b~B&9ksK+-wV)qGGKACl=LTmd!1)e#R!YPG~u(y4Oc#AqYJ1}D(ojp`S!n%xO8
zP@bo&w5=Icgg=#SGE!3eYB<#uRocR`TqR7E$8}e3Sr#@tWq*dN+O6!k?p4KEJ3c2J
z$_bDx;`em^q|?sFV6b08CrMqiz<fZx)JIA_L@=XUH!fl2+S?J=N@RTxOIIVjeC-eM
z>e3&e8q8WsC>s=YUG#O-vKp$=T{2%}Y~-4W06G<ARuDxsE*O<-sz0+bGNv`M{&GNL
z^;n@zw8~Iro{xyW=MqxUd`a2cHB{^aHx7)!(Z~tA>s-^I&<DRX4d-m(qHsRaEXRxI
zZ=>7o<M!=sTzj>K<0o4<d14w<Q+1x?X(AMRo7lC0k5F()Kexc{PR_c;XHU=Jfpat1
z+9Hsdyq*rayBXq`NN42P2oGbwyDXT9)Fn|r>aj3JVL&#sri=}T9TZZ@LLwkZFBI`q
zoV1Ob{?_=5b!!~*pJbIxHk=W6T?6D7lI@aI3@tLl%i~3-jS(}Ax$mErAr*d-EnZ~M
zi;u_TMMnI&WXqHV$Y*ggUvjxs#XD73mnkZhDcrhs9?yJv0W;Odk*7T@Za#yX%U?x3
zns*G00=~HlOs<PECn{W%Yex7Jv54us!Z6}?E>!BGn+R&WOALwD6&jm{%J`^IOXp5i
zSXnp*huOyPkrh6YG(vwsnn`?}4l$g&eyGL58F34AigvBS{f%q^#n6F=B+J<7R4dZ<
zb~H+G_3|oi-PpkV!UWEqna9jblP7<c<-+Mut$U3(t>n3Nc7(z$&W_aT_`tVM;9cJ`
z!mF?D;o|unY^)49!&9wULtrYk^#pc6Y%y<A=3sM4Ht#DcHg3qIE6H_nruHtzKp=As
z45vk_`YB{nFcQ70wD+UBVsds!7L__X3-GEmH2-RVX#KXFrsqx%+;B$KOqo;S+o$$F
z6Xw~lmcy>HRG_W89(+DILQLX?3!gw7{~>Z(uz7@fJntM|QwWrbfco50XhjA`-it7s
zFs!oRyBHZMc2$^O!HRC0!zBH&3Xum@BE~ucsLCmHszQ4<C2uw)VnFzf&!92IPEqb7
z%c>aUl;qE74(A6mpgKSvj;?s72`9KQ2hE}x;PlGo=W<#WsMbP6afHzzMI3P_5>yC#
zDN8Ib@9@{`%mj{~n8vZAEmYzdIT;?YJo~_0F&Lz&OMe>-OZ0jv;yA>^4<Es!kI!Ib
zsf(9h+{N|F1L;9U&(&!RUI3bJqK>Fi#YUFb$n&~Jz!Le429W05XfZ!C6iLKMj|<^X
zfx*gwVgW+w^lhj>7E7@(ye?WWL4@jTAl?tR(vzAhCF?L|_*4rR)4<mlMtfalZAw@r
z&n1XevU7xgaGjM$-8XX7;#rn`B@zJ1u(Ac<s$6AUbeKtcNh-vXCUvS;7wce?XGuV@
zQ+rjC`Bk1V0c%XHkohBRVpMjD|E8MkD6KDM7VAzF$|Ed|ha+(ldC4hZI7J1+A`pcF
z<cB<*yMB0HNfV1Z77`B2LBCoU1_x17n>--`Ad3KxK7JI>J$oCYBtygv3}g|+lxHo0
zo$W5RxAt)TS`{Zw%;4nl88jw{;71t~sW{h-+00;JCaTGi_uk$}Ig>IoHHq*44_nyS
z=;5QkwTfXc70<|cII3Zl+1i}UkyKEshaF?1JQ+)j)8sxjBvwMy4FO!6Hh$uYIzZhw
zH9)*iV0@ersQ5CXH>ATJU7Tw1A?vM-r@uv!QDY+7?z(AV=}X7|sl}{IHK?<yd_+wY
zB*0wWmvAvLFedy|p_PyYiNB*mB>{`2-HoAf`NrUxi>`C-PDQ!7Y@*($IX8SKjewag
zP4)Cq3co1)(kCy6yI>R)R)rX4g`acyd_dc79wZN^ENNd>mDkFXF(H(a#1!!)^ALu^
z0>_Tb;=8`PifgZ~<M!=6^oJ=T=5@#ur5k31WSHUVtE;%RxP>G0Q#f^M7Om+96TZ@n
z7{%%xUCN7EOeCE^qub5V>E<|le*-`CqsQ?ZzjQ}xiC8zALwXYqlH$s1C$|of9NY!_
zGEn0num-Kv?rY41zG#L&qiqT=YwgYGOrK-0wa3HwjRA1nl)J5Jm!ItiFh)tk%}z%J
z8&;`P(@J{MCriK~Hc(Q|LF{dUq-n8=j<PapY&=}!t8||gWq?Xim>9{Sojsp|JQ*7%
zvf<Ij#t;ZJS=3|?oyvEol{0%h`}%unss(sYqr`^d5S0P)lG5TH1__0Y6p9Iua}dXY
zF*uTUq8lZ=48b^*){7G|Sbv?KM_n2-)T#|U`SyG8-~)Z!xVeqRTU+RMM=XLJg)-Mk
zwzR^oe92j@<)s}=&opuJR0~HIT3iH5eWqBtLVH%myK=~c@NoS~ij!w+c;Jyqyz<g6
z;)<x}**#Dj3Eq<VSM9#Lm<*@eO{+NtR`7S%(DIs4nLBO2#tnpdX9uUz*%#?erDZ~G
zC}#?!44$RKHCa_kD$7_AOHr{tk8pO})yUV3i8vO|)~sUsg;~r9N@_NjNF_RT<xnq|
zG`5q8Bb7kvhN&}P3W(N*MH?GAw$9?&VMz#M7t4|y6`R>jDQKikm%fUjQf>1*@#r`u
zu0pJg!!zRI0E0{@@etnhfgA_M;7|}ylwRif)R-)U7f^mxM74}wtpNbbG4CVGbEIub
zyH@eYgC}wBz9U#(*}?T2TiD(naIIA(Qjv*ATnrm-ZEdwtYpmhKv1yz*K8=ZqIv<Y=
zlcnoBl?vR_*F(2m;Mj=@F22Ooh5{gsO>2v_*wnmp5P8(4EQ+|6S=sh+@s=#krBBFU
zD*E|4VlYBm`iyK(ZQJTrEiH|Ujd@`fi*m~soxeIw=Ty5~bGd9;g4ik*uqq?R$MY*J
z18c(^eQy;5TNSNJxTNJg#;>lv9=1$^HYXurxxt@45oIflN8{F{xoK~GMr2gv`e>Cw
z1t2R1GQrQHFGNH?Dd0>CinRz7I5aqS{g8c_UD2x0{9cPrX#U6;M#3PVOd%5Iq5@8G
zEKVF-!0}_V*xK%3@y<3j);mZ?IVw>|=7C*s>N!NX%c!5?>eW@;zO#iR3ln(Y{$q%u
znDullykjRZy`JPMNqbp)Jsf(B0mkFTW_%$FP-2&?;~BZ2vTIz__t%Tkbk<3Eh2ty`
zb<J!QzQuCJ6&Q4j9{v3BMQIBkEM-s}PL)Ygu7LJVR61xZRb!t+YKcuQ5uwz$7#dyT
zA!>m8eG?b!vPMr|m;Lw1{e2vN5&qD4NV)%a(fx7Y^m6=ru3jT$7MlErVwh!q&K<#w
z{MmsU2gbu8q?4MSlx51QmfGVNMSQhuI=iio`6+DTIw&fn%NcFvXAA}@KWC;jg`-EN
z(H-=#czerVBAln2^2Fx)9n<ex1g`EZ?r?VMoo~O-71JFvbPQS(=*-f+<!g<Cepx}d
zf?cGlMu-<85gZ9!Gz2tfVVYF5_xi`Rn2Ona#}*y|;ug1&YH%*-9P?H*?a!J#eKgG~
z7Dq^hSw^x!z1FNxZF+2G$bOL5Ner_HJItg205Y^mL_t)ylB>F=#{NH=D9@z*nf>e0
z2BZRAH*l3F3NY<n8~s<u*Ks^HSIR@KqZ<kffGzdBR5#@qXxKYM^DH+RMv|iSG0GA@
zFSDU>8xP<(Fb1bYnit51X`W3MOvcfKKWk>BzRGwAoJHE&>EhO{O-xQ!nDAGxRgqA0
zI)W0&?ad2T3Zy<!4?l3axaaK9UtQhBt(&{p-R|?zDD_QY5*@ozjj^-c!|rYuv$GS(
zq=?#_hs7owT`PlCjP1$t8pDGzTdCTd9RSlpC1XGD4<HmqGWNXjXQ>BG|0y{+-J0Er
zr<@Ps{B9PZ^GWsdboR|yIc2B}XzltWIuCEp$^Od+vmu=+4Rx-gy1*u^)1?gRIb>jz
zC@Fgu`gF!Hw0+-A)x3El*W4;YLp}ZI^Z2E&RXlh{P~KqS98Xf?B7sQRQu=+Arv!s1
zht=Y5fKilbjxyiN^5lq=-l*MQB-m`lH9uyv#xI_~gZ5sR>#43?TjlzwGbiUT)so#a
zqlVR7^;;qvP`~i7ICbI(PM(;<)>a3Lw>Gh{(MOt;T)0WcVUcwPkCptKdQ-iawVmU8
zTwNE&+oZ9Y#%^qDVm3A!b0%zz##UpivEA5eGO>-uoY>|&&mZxgZ|6E+_P+K$>)d;t
zwSM=&J!`$FhEP)gfJx?ri7Fun^RD5jt2jV=y0s>jo^{eKz~K1yIEnAjEWM<~J%j?T
zY<4<Q?|t9>1)lC_bPPk-l>HBmpLdotyv5*B_TwSJ)Ii~GWf0Ne#YwlFU3<o>-|Veg
zdD}#AuAq@53g`sq&RPIcyWwy=fm!Yrqx60V2@kkL5&0@Q{+jtGwGb-yJw4Gp+6yvW
z0_);KWBw~BC5;(?FP-4AFF{?3PzZKW+thEZ*2(sCu!0TfFTkEpYaz%Fa^893Pq8~U
zHZl2PF*#;xm(7o)a-{c>h?I>`b$jO8LRTG5sCtpi*wGQs&F(yJkt}~5kzHuk7<KSu
zMXB6SQR{InOLxFu+kT@K7GA@wH!I~}&XEY>Fb|XB9v|~9yG^9&I?^2@m7L9{@6dSu
z?c0t_v97oG`ijc9mk&l?UoFdbD#P>)B_7_td}nVIKRW3@Qx9#6?!=`Hs8bOWHJ85F
z6piftv|O@x8(f;H2HFg~o3ax=rfsvze+(n}olNBc`wHsbq`@epEqp-8XQV169iL4?
zi{ah1eum{o_wR|%bFURTYRN^i4;6a;=M&)=VJ#$CM3`TnO7TYqzU@0sPtkm%P-WGr
zsb^C-X9>jN<baCqIobS+9p+hLG2Bc8h~b42W8U$+bNBX!ja$=9AuPM%TQ@48N`fvl
zYfiaXI;kD%T(%Roba4<9*D=&5Q#vKrt+GBK`(Vuy+a|ui?Ko`n;<jEIGPo^+9IFFf
zM4Hhbw9?O=`dRHQ)P;V2hCaK*S9vKuCq_M&q+D>$*{y^LxRtexQ4mAXQ@g(M4jFFs
zCbLCstabD>Yq8kOOziBnktCiQF{DhDEc{h8=CH8FEwpQ$7$@hLTy`at!$GpzLk<-4
zP1x=gBY}PhFANWo1!UJ<e^QWiB_(NG(fdvX;rVUt#1F=99+uddND|N`U}!2yRqFKW
z8Q9plu<_{(mL)P1i%g4m8Wt!;!VwS=?hfCyHBeCyr)QY00igwY-)~x@su+g9(*<$D
zqk`k5%%+Xn5d=(<J$~y5TT>ri^f8g65oR>BSHb;j{?m7WZzCHfdqXAR_;cOuMPEV2
z92ejtTeIcMp=b4n7v|J#>Qp_fMw0~ix30rwm2x^%zFURJ-0?&vPQRqB5i+PirU@!b
zL^{%*;Iob$&ilqN*)ROZG3!-mw6!eeA2uqP{8~ZayK0%E8Q1bGy??M;Djj^0)sXYW
z08}1P=)_ggcqreB*Cn^@4#|ZF(PT%`vJv9ieC^t4XK=qg;$QgAk59w5s5$(bHN^1*
zc5UJV9?Q+eQ3WI5r#GR+1aZ%t2HH1r1z@}yeS9I*BL((p@xzBBm${rqNF}1lKHms{
z?p4(bA7L;lPOQoWHimytB`?}z*d6`3k$}7jqv;!qo1Mz!eNlCiLs^zf%lIb-Ha#Bz
zqgnavG_medgo78}fWwzWL9HjgePZrX(8g4DJ$TtMI>UnuYhCAjM4xo9b^Alz3%}KS
z?NjY#yOji&YtKNP8gdEyIn>!pCNzzQh((+{oP+(MpACrlb_!EATlioc4GVOzOd9&0
zSgHJ*L(Ktll0X5WZ;uQhLW(5-S!(=tA52uddGcA+T{RappHkK_4p3X?!jzq*K}Cen
zJM0Y5&<P2<fncBo!^U>L2}Sh3O2F1MJTxk_HDrHPB*HWpsHTFpeJNl6V*HRrv=BOQ
z05id%yhM?cP8<%wu$^xQ+rP9=lKZ#X;GWElYG#}33<O?T;z>^^vw|jI(#K+zW=oxC
z7hDy_Mp-o8!X^zmU`%ub7RSBEe2QSp_vQReO}+nhFU5kuv|f!irScEq9PxBGaAKU+
z1LWqA+)$)b(iK7?C}tN)Cr&P8OALi9jL{K>M>NPrG@-&P#Lf5zFGfU9eA&)({|MWu
zL#*|}yqSHfe1zhGgd(IhZE3k`Sc0Hvcf8O2p(nBBeBA@8a)OQ*d8e%~mPW%%9pi7p
zzlG@Sdur?9WR}dA@5~+Y5eqGdYo-EZIzS7*dl=^qe@A=((%!&m(S_(>rU;gFADbgF
zeX|fG;S0S)9XKKC&U0BaE0rUWPxU`wQz-OcCIyPCYhDzIvr}gG`!xt=EDj%*#tnW@
zm7?kk3G3r>LW^HUw=wYl`6P)Ld>&8~C2+r?ORCsWPqxO*51c;$-s<D3Xyx>yVcbGE
z#cg)d;$Fl*cj{*(Kocf+NJ0{KDKqytCE<p$90l90s+TlzAR&Ik*byN55#TGlv{b-)
zML|Qf$qci2dF|GC1TU_MOEDijn0UT8;`1tue6@zQLht5<&pmN}nL4LFr|a<o?oT&K
za~|}0{d+{Fl<W<!c37M9)q#p?yUis>hLg+z$xfEtt|%&rexl1vk`<=5T2S2OWj_Fa
z>@SUBbZUN+qc9Jw^3K+W?re7Cm@yeb6<EMa5<5f+qtR0#Cis}w%xCGs{3LiVD$jBc
zU}dK>{W8vtpE>X7K*PLe9QA7jaPFEZp;=V1zD{)gfN#OxpE0sTAA5OAtPD)kunOT(
zdP&Ov+Qa^xnJXsCsqrrC`_<P+M&dL=U4KEXKRP|KZ!@eYUr2+LnStVGJKwIb&Ddp-
z(CJnHe|P)|GT)-9&I@=~Zy2LFcU-)$KnXBeXNdLJXgJl0*OZUU#i7%v<O_~Eb>4JU
zlj^klj{9>=KYzBh_&TFhFnU#9;7Lo~CCVNk6cRvyOJrLkMP{pQt>FdIw2nu8OvNR%
zt=W;6gs^9H0tM=%XG_i5x3sg2$~(&Nym?{HGnR2G;v^D4(K|P*B;d0Bncfj0wW|X2
z_W`HTYLBKBG%z7w-3fo-6dE0}6}5G{b=Q7DYowc>P@=QYlJCiNC6gyeP^LZzFi7?z
z5Za#LcrI&?IDlMUqeP6^&KI@ZwFq!#;4*KDZTq3|wX%bNW1!1PFPs``hgEbGBPZwg
z+8|B0iHv>$P=Tjqb<?UdO=?I?et75$8uOuR9WUtr09C)+0SFdsa){Lq#chX^AP9+2
zTpY+BK|vYnD-wcx_m4!syLCJ>qsO1irSyZw2P-=QEOpvJm}b0Y08>V~-8OS<wq&O&
z&O$Av%7huV-Gk}loAtk=xjNsFcnV(QGWghgO1>w>z96g+p-7^0grCWdGeTvk{^elC
zG7V1nReZWv9$hMVts+LsiQ_7&0D-|6-3*IdZM194GK5#h@qf*0Ohy?EzP5LU%s-Cb
z(+;f18dZDG&lI&R4rz#gi5?MNFA_|Q<xwCjNy`2-Ea3h}ej8QH?zO64u4dATb~S>q
zOe$yJaM0%numqF)cf^OSrgf|mVas&2akgMS`=+U8CGDl}S2B9<{6n`}U+vY1<Z_&E
zNZJ#px10^l?zUVhmI($iC7`Y;h05s<>X8ZrVfbDUllpDrTPs4#unT({lRj+;Iz|By
z@gW{}j~U`HbC=yg>HO+5rd;N-huv)?w8S4~nWJk`O{2KX_f)uzD;m<cmGWYNU_LKj
zs?eg_kUKBK1$g|l<-)W_Arj?@J;WFvn0x0o?O)G=Sop0NC+*j5pIu&}D^2sz+wUT?
zBFR%Y<R;9X^xt=H^3=Cf^CU)Vuel)mr0PYZjoUfCMv&}OskY!xcNK`>&(NMxN;!9T
zumJR3_}~F(0HR_(bZ)GlZn!I_xYb2yp>U$QAYcvHBAz|Gl;BO1fm+@J_|D|BqFRpi
zdieRz#8o_*n-J?jJWdIPsBAgy=lExxZlsJA?Wk<_b~g`u$ucaA<14z*)<|B_YJtDI
zyPr6!swCGX|5$t9#4w;`ppH;zuHIpt0UNZBerqdyn_u(<o7bitOXN%&e*vOMhcL>C
z8VIeBW5&SI47|<?G`E`m!DGX%!?!dyDlHUgC^+2diuK4Ju*`IxM_K6<{+$R!EgfiY
z*x7bxiE*8U{OM=qG8n+U_@S~4w3jyWx(-Nl0r*C9@mTs>Xx?qArkPRkQD~HFvV>V-
zxV=V|k$}yJHyuR<i3ObOZ{6AtBf6(Oma9D#i*n6xJ<E<Mkc|8;XCoh8V>_ZMQopx~
zXcUl_J9f0H4&~v16oeATKg64uW|pK<5Wo!L?q9s!ug79^yc=c;a`%6|HHL<~zz(E6
zU^rW9ihu4CQ~&vu-1h^`w#+NOC|L*Gp{0D%YpJ`SmM8l^&-KbFV7?lpWG2>`lNF|q
zCnr-h^7Zy7g9%lX79sQxoi}8w+nPXt##F!k4^K$>y{nLjo-GIl;Owg#xr{W~un=?I
zxM7kwX{jm#tVu#B?EG5xo86%~+;>QCT5EQb&-?4V;Xm)>FLHR);@zRv$#Vz+S<{|r
zs>+@>3y%JSAFmuhPpFaodR=Z$@)f5R8?)uYDUxFStaW*=wwjjeRS!!#WLvTC2Q(Ai
zEinjW>0qJzanpPqF}dFN8w@my<o5E9Um}Kgz#qA5U}-Yc-3M1_ripGGEj;i><!w(+
zsMGA`)5{ck_1jixvtaML>Q)NtGY5ukdZ(95wCQMf`^e<<bW*=1HiW2?{P~RA_-inZ
zw0^r$jRK{V5uA$$MRB12X*i$B$dxgmQ0$;w)%L;#>JSCN(w}C$=0rccs71#smR!FB
zZJ?(j%!QgZ)P+{HFPL|vXI@o|82iS2MP!IOx(0I2i)A9@uTrPIrC8fb^Y!=QdD2WW
z+Gi;2Rzs?=l8&&^Ru~0E6e}l&)hP!?iji4D(9PkG8iQT|Z?<Ls=EvieD$>c@77yph
z2x?-C>?k!{f6=TF{B{s_a6;w&blvRu)@ruuYzH4JSm%G(3SZJ#wi}RI@w<gk($x{?
zQdf>jCq@-U(u5>dSTG=rlo*N=`&;x`+>KRRNW}}Wci***GR=6z6q?YTIn-@rvo#-R
zI~SZ*)LrZkk#YJqPm!+n0gF*L%hiz7Q@TlNkYBScxOXHrg1wIAvm14drYTKdE!8(_
z**wE9X~IlONkyTLl~mjmG5I^_Ws`>tZh%|WE8ei4)4~yhjhOSG5tT1Wlxu>vJd;yV
zHwYZhLC9vyP4c{oK;c_gg7(;_4|3aFwwp`KNKBcZCX7zZ^uVKZBNMcV`98)v0|*?2
z`SD4-A~}UCKSsTbO7~?Av8^bw;P5}-R0q0E<bzl#5#{E7d@LDf^|r<7zK>76Tvj&d
z|98Z~F#ln`e93HOShUFVHc%xG&jYb=Q#wz>i?zRo%-A}=UvZ^Qzab@LfMr(sfyJ8q
zz$VTrlOnF*Fy8Jcg9({$!Arj_2aznSR!)Aaxs8pVtM+fPFCWI<`vD=B`hA~Cp%cL>
zb+y_EyahXg^G<5*_?k|mlOY8bd&&SItS73)uumDk2cJ;J5zlXarPB}-_+MVf-aHT?
zq|Xzamxgm8GjKQhP9?1H@wB(8{31jQjvuVSGV_2bPa)H#vU&@Z1t@zWjCS2f%wiO*
z`^?iej4arF{rt@G7n*_^1IHJ|;R@(r+Pv-#tUqEb7Syllx)<vPBhAyNt;znh{)Ssn
zR@{qQ{*_h&`qK#akHOkN{EnjF%aEW_PP$YTF1f6KRBx4!03$|Y<g-%FA=PkSfJ!$b
zf*4Jmb&gp|2~1S<cK15zAmFPmYR^Y!ZFlL{4zhl3^n^9wpkK`-bx>*RHzkhflvr!h
zv$MIFoZLNHVk29@jwzAT<C)wy8B)yKoI28gz0*?u(ZvXOet2^cT!{x|dY|kp=c(-<
z6A+Ff{5u%Nz+&ra^$zsSDnD`$B(GMa7-v_<-D@j0oo7!{IJI9v1cEQS*a;>P6%Z7g
zBFGLC(bvm`?4FNg2xFT|hjWaE55FMFKE96kI~#X@UyKNG`NY+p?gOU?Nz|z<*Bnwh
zFX^h7+voo|;f=cegW?$+-eIL3&Q_U<X{=uatzns#hK2p~s%YN!<6dv3CP5szEyzi6
zI5wg_@Z*_{qyJp46V)`}WaM=k3>3V*x1(i%JUZ4&k@#NlN`URatfw#KY{SNygoBRy
zlq3WRSsajY-03n_r&x$D?wXqPmI}z_Vb+q?&Son@$E;&M+_JChsMuve#Zd+V!`b$j
zbLp<{L-FQMv1lEgIijUIChg_*bmjOM2!_SewyxZs9Wd2TSK5H-Tjz=)%aZn@1V>KV
zK-XDzLBOaAcj-CAq;^JlXlw2xH-L+-@(?HJDuhh(>h4ycy*tcn|7|Bf=k(DdosCl)
z#9$_n$^a8N{kbyE@i8upEuW?_KmGb-*3IGag-~fjAUcffH~2-+tOte)sqtgVu-$Ma
z;Q`4;N;GXXm-@hGVh(Kn!aO-*O>0G_&*&ChD+?h)<Khl*qgfG_9_oiY$NocSiw~a`
zC!&;2OB>tIt@!)4)(qTcoop7~3alaKexaj2em!ATk346&M;D^9Rva|N3O$!Bheo|Y
zt2CZxd{%-(Pew|^Eq|2N{n!`3cZY?86bHqxA8)y#L?B<`T2j6(8mVdNs0fj0Ye0xy
zb7Y2F6Wc-20nH?i7g*2tXzhjI(2o~hovg)C6fH&}wNQH<C1}CxXZypytP9}l?6nAf
zQ&@&DyKfmLp(4Vx^-K}W(H>#$CL9Y&T$BcLA?Xy{AN|!nSLEgxp3A?m&H(4O5Gl@v
zt(4y&cpnFX2K4V@Qr0JmXb1z`YS#ScD_8fNQH^V=FWAE>hYoUYG*A3v)|^{uUqJVn
z8#Y<ROrE%rU+}?IX+NVQb&b!|rk4R;q0dGIX#FiMZF7D)T~T}MbYhH{-<^ene2b9g
zTU3<(RDwx=W`oa<^@;X^={T|j%QY;mR<=%@=aQxidg)r<0v8<~%1{fJXpg>PQeGW-
zcQ-$e;@dUGQ%h(R$Tc-QD{wO2`#P(vx0$i-_mCjWLBr|VB&+ZS;*0&->UGxvrLxk*
zi|B%EyNPa83$VbFz!JS*SdrlOIx5`Ib}@$ni&3dev59R_Sn{5*ZWZ^c^EuU7w;z1f
zFg$CRs`zC*_26OF46^<q+$F!j@8MsvmYdnBSS@^WUh!Cai%a=ui`#U%pDnv{qkHg~
z-1@%#pen5S@^?omf*33+MdMl}NOi6MN~Nh}?7#)#91WX4Z6S#o(3HbQLT2Yznv*1H
zElT+z(gzaGxnnYbdVZDfI|}=0?wA-zGE!6*85js-5=s1))Wy>@YWZwP5Z}Tdx=e~#
zB0Kv@ho?_+saFmX8~NsdB=LTwj6*#dNlKW>dlyGAJ<2LLk2vC1dAesrQ0Voxy!<ZB
zi(Fj3=ACh@Q%FSF=vy>m@XFsVKbo0rPRUW=+CsfNYX`+M_%y~w;_*1#EPXl?;0;Qo
zEmnyYr-Y)4wkFUMn6}_D3;RZwc?T87<C@Try*7;{XnmRCDNAThLHhQ8nfK?Wg8%F{
zr6~XKAN^9|20D}vi!P}b;0JU1+OBEZ_E>9WP5M^8_DS&4xJ0lF?ozJa&)(X#?MLmH
z^pp`RkBBq>t8n6S?XnX}VbODlIGBU5t8~j3)#4{l=cYJBl9sd<x(KU$9Y**H@2DD8
zNDs`WxI0=R>f%^k^2$qp{^4h(vAXQeiJt*`wspeG&nklV>?Iv3_EaX%*!{4;IqTQ7
zVl7DQHlry*&yU!FAD}!wM}dWWL0bN=yTzKdt&D~MtxWMswF+J^56`~I@%TH!Y`yEM
zvoeZ>va*SFd9NfZ@}P`!dK{rswc833o^M;EW;;PrqsgZbMDHi>hT#3Qnq*kiV>MeX
z%H?3(h;y~L<-Q+JzC<0ppozZRp)a{>dRG0VgV9@Rn^Ezb4ua*2!Ny1JdJW^}wjZ(8
zkGTvXX7U6!d2l6vaE$HbF>g2#hwiYu3O^bihwBvBvJ}W(>Y)f3%H;bk=4g`6DV~m5
zsA|B+NJM_piC5e3LZ6M`kPapcJ)Ci{f;cO>cTT!Q;=T1h!0|5uSEtAh$T_KQig$kB
z_ify>KdL*AH(Su^ZY1s+er~?T$#(5BGEol8SUWac@s!xx2zh7COOWBVRQpOT(5H75
zUo?jUGq%I$*)T8wIjE&Mx{X5-@4jms-|mO3lrB&e*%n%_o`l21GH2(>F)#f*U`b%0
zK7FoS8XOG_|8+&oSYw81`^rydxHWt1{e|(G-Fcxz7^2;s?tGm2MWPVQlJG`)74_4a
zBQYVJXi%y$Z|;)_N!Jkmebg!;9q=X7;wf9Bv9;@$QfKV5AP;CY_Sk(jrPqdN|EY|O
z7`W}JM^mZ3IGrVM*M5d<eTQJ6s2p7u5ru{lmaESzEi2$*p#7!F)V8JVb#NSJ4Q1^r
z-Hp0`U~_zXtz#G!9j&z%#AW>kK1YcNiPZw94?pkw<%+Di&ul30fK6%<a=7IXPbl*g
zo^;fAlLMwvmJK!sE|$9G5%*+e_8v=lfepo`b`8z->9_%3F7g-QZOYs$_E(c*v~Buw
z<?0oSntlD|Ii%iXV&eID=hapPrHM%9`9izYdl=qpZ^Xyej>*fPwA)kiR?hP2!el~)
z3Sl__U~yz+q~UEWj;+KVzJaL82RB<$v#7<0b~ovEB4DFNs4}HpW{8iCxoXioiN7zg
zf3t7qmmR0H6?i|w*oi3pQ1l<+O|&A`vS?T4rRFRW@fJ1?h&9txaKgBaUMxbv-+uKR
zNcq)Yzkt5m`Q_;eKKod;-WGH4*oy~AfY&#NL}p62x4N<1)kU}sx)G#lyW5HSOSTQW
zwrI_yQPFQJ?uJ+LDpS5Q&S!^muz6xKPKwuH9Df}4C1Ddzuqd38ei|z5DMSs`Da8e{
zfyZwE=T)WLJMb!g7-_vFZ!C~p0e)FBJF|{bF{*b4eq!kfIK=!9qgq%u{H6{=U|9r`
zJBKR@M!DFZ_KC1F{O2(#u>;)$wlQx^H2R)sKll1vp9M*8hh1JnWX;->SJjkE^oF$Q
zWJI(=yh7bAh1k8YAsarrhDm!1i&|bByFH(mMneZOo6Q3(h^6B5hOd2R&Wuo>3sxK>
zqWzZWyPh^6X1sp&1R1<#J<E{OzY@&u7y8=SFK}eH7))F_V=)TeUx&fgtK-dalwzV=
z$;zR$-{C_-VGy{dQ#&a-A8w_pT7+ppU#ca3x6@-tb`Ll{a%)MSFYQMSJ_WZM#_#|}
z+-pColBZmD?Ye?&D#N5kCQYeiJ<bj!gkPq>S7tMBhk0}eG6)8RU>>vY$is!Df$H-T
zUX{9PL4TDj0cTeLjANH9kF&S3gSiR<?@_OD_93i%2+~3o8o8emyvy=uBoQ_4PrG2g
zHt&hwT35us=PSt>_Gb^`!UYMVN1;C==T~Y66Tt;e>6tJK6ht6KON?rbS#L)9nj3KE
zcJE-HXy;?pc*ZBLH&2Q4M(U@>qKW`FNRa0HG@0R<@U6Ta7?L4Pcuq3G)m=2?EpmoK
zL{}<8pryx9J%|rC-Zh>TC>HHsJ~;nJA=dm83{eK?*&(K=V%1cne!fEbS7N1gQNuOR
zkRKlZM;rl=G;G?+@y?IOqir}SL*XCBi?xvg(J%I>fselP;w}+<V~-vCq-pu`x5#F}
zOTW^1{^GKc0<Rbd)XjXMP6w%?`aF9nQ}6K39E)lX=udOEu5A4(ZJEIz8Ukw=vA>NB
zNa20BR)^LF;h&ggI~-sqYkoN%fiKWIC~iKo>WZvfeQOo-xV5M0ANkW6V=oN6rnz_M
zQcA-i{-NP;ZiF`Vu&nEjO-s{VATsUVOO{J?cg?&f8%#52IvFa#9KE&FE5doc9BCpZ
zb|_US3vA$p0?7g9vvlZj#w!9cpCFG#!(3M0y&vOoLJN9K?(zfuUr5YYU1X>svLXn<
z>W`$jq+feHFc=p(ZrX*Qjnc!pL7*wAlvrdPhhWVUc>%t>q)X7MLZUhzPuJK0x$!IN
zX}8a7LmO6L%tt9v70)i0ziNZc;(WTGtmwuM-M9|8rZxPqA>(oJm<-qkIF}A58)eCz
z!HSp+h@U}22s*5-YbR8^@wf&cGst4X)yO*=lO1dKGFmig7`%ne5|S#C(q#X-(0ioT
z+<V3Fkq)uFk5@P8#<|<55PS-O#(ose$1e7cuY?%(W2QBsxsreL2a4PDg_NUW`c1f2
z2Fz1V^6OecbW(5&i-8p<N$fHV&hWjiW6xzHW@Zjc7jVKc+1Kf*4Oi9?zTL`8usgh9
zlh`|(9>#{gupT}Ak3Y@u4T10=ZAH+nu4{C|?;Q9PlI}4!|M`!Vj<bKO$k|5(<WSOI
z5o^MSiD3&YVfdK}CvJjA<HVQ|OA=UxQQ#Jw;Uf?WJYsTxeNNz&por^l5>YtU@H*rO
z?O!lgJ$nVCR=k^PFfk_+hsI1+@m@o#Hmbd3Px?wf-DjeYB>Hh){eC~xxE0Gxdz!G*
z5W;jr)Mja0eUG3}7x}e`6&uz`dTccWNAoEFHRjHtkIu4(kzMrrKYyb<q2$F?nje-8
zCPbWofuOouBvk!G<0LP`n4T?>5aAf%U2=K<JuOaD1fks#Faf$JT)+Tz2+mCF_=gS_
zGU-UyVTXB?JvVxQiiiNSPNf#ek$aG}wrKkqw-VP@izY;Z>a?{3ooe?<e*lm`OKHTA
zJf2QtJ9o389$&&N(N~J=NMKRmjn}#RvomK^OxK2z(JM!xbG$osw>f8I#GoW`Eicb;
zFt6va4XlKXoX5~3bdRu??nj#U7SOs+sh#$;(1kY<y5>EoJlbW-khlef8h~<_Z+^_a
zkRX>O@luA0h4Ajb-u$VO;0nRC>X4ja;yF<hs0I}#4fc`7+~zk-n*<fS55%ehiP+WV
zH0L4(Gu@XYI4){jxXG*GJ=ptdHs}*nF+BJ;NeqJqnmS`RMD1D%ALRdpk&Bcsc1<*J
zx~IMM3qHA;m${375v2dBEu<PO>atdu5$Z%OocF+?&z3F_eIEQOvjvPVi5k=#<!A8a
zz8*2*k<lvm0%w@8>d{WWL663-LD<JR3ZtjYy-tSqZ^Y;V>wUSG-L^~Va*57qMn2pZ
zDI(hN7~X@r)z8Y!&()b3_8qV&iDU=3)8ebcTCb=Q!+ujNhly=QeJFbS*;K`)qP?O6
zT(wzE^r1UF`k0!12iehya|Ep6O9;hh&%}ZB%XZngMvj535p5J7C_DeUJ}viX%w1}m
zW%@04PWOM-MUyP~1U4Qx8V@(y4K)Db*BIWkeUg~{G=ODv*U`Xk-b-$^i7$(Wx0Jk?
zu=$&MUuTDQnVJypFlbkTM?ASM0FX8*?!Nq051IFQu{`JoU218KWn>GAEnZ+P-n*h!
zqpr#Md%J`lJ$@W55p?YbzL?rQvY7PaztM{Y0j`CbS2{6l?<O~#8y=yqa!0SPg1>fr
zn+8agb^69;FJMP3Wru^4mkR<_N{j$O0}Pz`KYX}IHiBvRsRixyAKYfq<hGG47Mouy
zv^VCg2?eB8vXkdL4=0}p?ZKOiH}03W^~)pW!+b3ahcQ#hK<!M<nzLW*gi7rxK86^y
zxet448s%u%8Dh@cNlaRKUkI?i3#upF5%!ro0P<Y$Oshjb*MC#lmrc3vJv%6}hQhPO
z+5%usmG{^8Hxz3xiz=7M>up%0_^Kr+ukDG#;2|3xOUbD??K+`ru?U980r`My$e;77
zmvf>{h%#}Ow-L{x_aYlwr#q|O^)<9ZJM!0Q7~9Zim6p9(aU_j8Nqnk5CN*#gpkR&V
zS~-v7?+tdIE6ny&35W~shXC=9)4(f1!p)!SF~|VE{Lkm3ido%v{4I))yKc+|<$B}z
z`h%i$N=v5yE{<YLD~9g7qZykm`pjGA(H83t@2A^%j<li7>@@!X<5$7cZ+moc9OL8+
zK#dUsjTg@ZJOh`6<J+?f&(%q-_@u1Kk6!N<`?kLP%*{>m917-3F7I0pZe-9YzTefX
zcp9FWdvra=PyO(zOuT*b_WN-vQE@ssnQ7_c01&y%u8dV(9p_QSmMAonD>M5f7J?e9
z{Iy<sBx}105i`0fpgeK6*(pilcE4I#BG`K%D$wA7AKNh=^J9@My1WBEPW(kKqDnH-
zl1&nS{wC=WvCAMFuLo$uLjgyn^Y5eGtvs{5$ICx!59E(|n#q+k%Z^X~*va-gTo6#v
z-pVQDnll6c)g<wW2bX%Omwvjf9DDx8+KOXO-F)2X0;f~^svmRemud2hrPJD}nnVc+
zBKG8b@7npy^`_qH%|T1~F2j6x_H2c5+dYdKyK^wtY_5LWOe4V>?e&O@3|d`C7H8rB
zsA?xCAkDsO)oC}~$z~vUWoV2i!6Y-k4_-O+IXmi%@$Y=2#-P|`Hg1HkLYhL)`0Jzm
zwA8X=@_6)FcE&;w2spqlFu_Q|wTKOnCnEkP3cF|Nu;hugKT_Hz_v3^9G2gn8L5n9(
zW?evP!5}ab#TFEC$<^eG1KXz-_*rF^uRDCG8f3^m5_)L8O0pK^bx3g)_*8!PcHf}?
zRASZYTS511gpkTd44v52=1W=BrK}Fx#Kcp7uisYcd`^0KW>4?jbE4E~xXnSy<<|`}
zH^Uu%Y;)Citv`!St-Odjjmoebp^gP8Y>i?jFXlPZ)7=PjNue@<Bcf$<fX?syc`6Xv
z%kpg`jC-L&6WeL<$UNqk5jis-)F-cR97oQ~I02A<L7&fMbclF~%=p9Fwvu=_&=D+%
zzp5cy-gz{owt}+>uD>V6tLjkOTJlAYyDLrv?%`C2TTd}{<jXuA%B_+ZMtT)|i@GA&
zJ$NI0dFvh<JuQ*$cY++RO@c2=c+t@&a*ptoL!{nnhf4)t)$<l#(!)mx#+1730h&Jf
zG964OxW~d~-(aqO9*o9fhT^>09p{vuMRbs&Tsz(JhbfmkXkfh(D~CM-$cc!uC|F%=
zapWy6&ABdt$vtJ`?k(r1!YO}}wSBq8Mo1?<1o^fPeUXdAz`2Z78$x#1{DMQ{T--|t
zbiqz3<hLObJmg*qGkrW_N@fQXdj%0~W4;u1FfD{Hs%xt)gA9S)0oGF^6p}i>?L)J+
z8jscw;6o2-it0qva<3x^c)H?}^+--}I@ezXi2a^+K7$|CNp=cj8?>!Tv>#V${az%#
z%{-T_4;*b+Yh({h58vNGDq;)HW4C>qqF2=m+q^%ClzxpG+6mWe5L4XDw7y7~J3K)@
z!32~$lEtKX=j_&LC<~C(mC|re=(_y{@*8T9TOqTPC5)@Che%*K^*<ImsD`PI<ghO#
z+Jb@Bu~ALspoo(?p3+)E9v5h-_wH|EEvzdWKX!IAf*h?~Zk0>C2)bVp6dUxOuc^mS
zvhB^RE7jfvC*0ke>i0i>9E{CB`M9`tKBqoP#XzGz8k?YOS4XPxqlM}Fu88bxXO5ly
z`pfb71Jyq5daA-=_K;c*TedBz-{0k<stUO=J|*f=!txBVw|FV=5UEI|qz7}fJ`YkW
z7}P5jg`9JG&z3U&J-wjiEKhA#gCL{JTv>v;fywzFA*Y_!9@nxHn2EBpObCy0&sc(a
z8m_KSfG-rEh<slMBckiqqkNS=V<}wyxBefvL-0EG?nPa~ZD$w>nn#Lv-T@OL!?myB
z4XfJpBU|JTUU*T^(MNL$_Ge{5tw(qndde^w6W@$ZZ7W|IrCwa1<`rj^ntn_K@P>d9
zx0ep$d>PJNod|zaWsM*V)4fM@-(K>hbN1M{UZ!yYOz_upCM1$SY}<yd;{Sj?sB-lJ
z3V*HZMX?cj-?vhD?K}eV7|L&&o-Z@U5}ys^Z5d_?<hn0e?G6e%$&iw@kqtb!{?$)+
z5L{+^Gq7G*@PT)6JlOG>`zs1ccGeGg>hf3M>NbWtqA{rVPE*lkJ=`_`eGXk)sVjC3
zjt=EGTYY}}skb>+1GL-A;rF=ew}W9JWCO3>2n14c$P#tB0Y+xAVZI9=>hLTxrFJ;V
zT>>g1um=jh^=j180|ENvXOt8*{D>C^_aCH{AKmwXaNq4*#5D2*PfeEW@u2++1V{l`
zp#>n$WQ2SPqOHCQi))-|B~ziWF<K5Rn<#*t+TBR1Cp9^QUaDy%Q+_`@%68s9??@Tf
zH=PC+?(OG{z}LsH{F8U5&}fXkCH|b`6$um;vcPV)mH#T2;aa>4F+B#M+L-k5Ir&1{
zx$AMkrs)xs@TsvT)&7wx_?uLiI7azAMJ#P$5<l!v`F=z+vK4z|?R0M4htZ^H3Iqu&
z7Dh^JmGM+E@=VkVN|8NsdDxeyNoxFtW=u(Ti{jAEH451_QwQxeB@RtPonI#O&TIX{
zAAK4>*JGLUH6qP$8r(moY|Dzp_8rFuVvxmaNsQa$kmoZEH@}=+I5i4&!~}Dj|LfLq
zKh2pOIc2rjGhf`4u6Fjp7+m8-mnd(C(KkFV(thuz@Ov}bdz>&bTs3%Vy**1k;*4&_
zt9lX$MT`wAa8gcID5OjHWVHZv;JZ7%Ks4T;p|xJLYG>DWA`RC$)TKpEr?a9C)U*0X
z+&Ktt-`LsO=|;N|KpJuR>x4t`kvz~yiY}92w1_q9(j}k?*&_;1LgdFO{;Mo?h?1+q
zF1^l90l~<pH_u-|{MK78m|m(Wg)0ZQMwQKB%{#tr5tXaYPT><G6P?i_GDt6bz4Ain
zJsZ5e0BApU1pC?3;9G5Ygx?))oYtGvE;LWglijC(t@rdx_bqo7Wwvgx1>x`_4uTbo
z6KoQ#GX@klu5`t!F=ThaL-u7wt`HA4gqvSR&VC5^VDCkAQTxsbZcP0dhsuN5$9-2^
zX99IwDESII$SrLngS<hAjQ~_N)eH@<eB>aUbz~SVs{eRtDZ^C}Xw9ZN_hP<fqH>ei
z|8%yAb0gLFa%!J)@K#;c{Fb59+NhBfR1Nz^8Ur0Sbn9?Cdvp<Q&0&1R@~i)%kd^VL
z6OJ?5?S}D^-S3xSntzKmNP9??T7d?{qKrR>T@of<Gll3_`;(ovn658EwQ7<5T_tKK
z7JjKEVe9VkBfr-V8F;;mAo#!<WNf4a69m}>=Bq%^ch2K!{LpG!%OadBt~c>e*)RHP
zxg*K{l6vk<``$h=m@!MRGf6$lt;$2=|1>jd-6?lckP&_7U3JNlJ3V7lVzpZ|`XJE{
zV#3UJrzqg(0A3u)x86kIecz_-abF1NmUuto{Omi!eQ;T7aFA(i|N3woVvGdp{;%5X
zUxGPoJp4kzkWapFVj5yaq?C3~L$j!_YviGwJWp$`yN~{{Sf9A#U5CPkuF0FraW<FA
zG)=)2xvY++E&O`0qsW{K6i_#eQqRQFM=YHWtj7?>ExY$*sN9vZI`LIS_2mYiy(cFV
zLF%1&UwI7@!IuNXP$Bq-bf>-be7<8z<n=oliU?lroh{ZS{n$c|!tZ(MI>GXgAk)Fg
z5z>m!M+-bNi(mc8LT%iKmL!wRF&I$ku%hEo(XDW33rGsBj69eLV7{}WrsGMjM_axe
zMJ4d?&-94;5m=!<EmHz@zV+vb&S!jGMkqJA5*RMB_Hw~0s0^w*@#DI0dRNu86H3I%
z2=beSh!ESqI9fWamxj^;UQ3N8-jq!U-UsK6KUNK_u&I0LiBwL671W(VIjkshvO{JW
zJGGGfLKV1k%wTGHsiCW`xKm<q{z|I@W+8oC!?vcA?iYsIFo`+=UpQ_*<auL`NKvQE
z?coLlEw&NfIN*hJ(c=4K$LgcYce_)W=k&$*%CH^d{|-5!L_7^&cQ8GqOC*S&BZX=F
zc&=!F&)$Zy8Tjd`Rb>u2iJ&ItpO+MlO1Mg6+dWeGF?bW#QO^PC6}?XS5mU7qOZO;b
z`lB7q#9T!f_Lm<r2}>5)Kb$J7^nj$8-|I|ysg}b!w<_?9jz7Kmwu(MOob8Vbpjvj=
z)@?u-i|mESj}K#z*9E$lV8MIo)lzTa_s?e6-RK=p81ub5X{Fg<(5ZeiA?w%s9Y7D%
zUyY_jSS~ZWc);${iJWbGS%0xheaT9JHXrgh7fp=9uTn&xa--j({gHKb2Y9c$KN~sq
zQN0eKFnfbtvv+lm<wp^Y6K{4_w<Ziug)petBxVEec;N)Uow#U|KKgECyc~W`ROZRw
zv0OOokv#44<pu<fp@1v#p9(sn3lE6IpysG@4_PZkY(25-<f6M+kdknKC3Y>uf?7%^
z!8WvW%d|6NRg6_fD&-sv<;Jg7^qkkZp*tnHU0{v{%K5M&_T;c%fUZ0GnER<IdPgzY
zgL8?5!h7zy;;UPpmH^K4tYzQeRB5&X;Z``)1r4(48;G>bkD6Fb)~p55>T!-fsiIm<
zgz>IdwT;wGI`Y6`6yLn>;nX0Q_sJo=hxXbD;;n0Q^KJ`q1*~`cH@~6Ff8R)-s@SgZ
zNN-2N$u1%e!aly+lGAU(sUvnE^=(n*=d!$jVtXr-!hPpZS@S~OJuoBzW06~5I(D5y
z7T>i4)>!xV&U6ibuC)b9P&xy;&Y*$HUVKMF=g;2^%LmKsi)nXkv%Q`#>jW5v6*p{R
zuk`+PdN6v1I_oT*C!XOwdoZ2-`6o@+b&2oo9g|xC;%8{?#A7zfuU+i(I=WenOVQ7}
ubJq^ABLIC6`ZR3EfjH*>cC+~*>Ya>X7-qja0*v_qddYrMlKdlX9QZ$6e4;P_

literal 63233
zcmb4q1ydYd(>4V65S+!`oyFnCB?Ko(aCdhN?(QDkVR3g2wh%nX;sj@L=i_<*!B<mL
zQ#CbpW_r5M)pm81ijph_DlsYy3=D?6oRk_23@pk2PGrQ7J9sx}TQD$p<MLAC8eV@-
zUp+HvR=qc)-g;fBsO%rB?mT?D2l!#QLENE8us)dbPPBF3&nKYXH{*I|b#4ey8}g{G
z1p|3ctv?2A<{t7<RR2X`x;gEAhA|#B;s}AZTK@g+{#e6<?L6c8&X1j?BVu3GRc+CU
zly|+Lq3L0v5ia29cksGNP$&BTe{BAX=pMQMwiRSTZn@7I2)yW06FYx}T%$n;kP7}>
z&QGI?mH#wA$er{NBjbS8Xl3+U>eEzSSsc5c*quLs%}-u^c1VYjDS%S=;5lu&{q&xN
zd%GcsJ?nE^H?yUd**WR2^m6T@+NG+hYINwsptBpyoNwiN*w~F(t_>s$e0rXmeSdvg
zzI&$??mIV(6Bs)IxArUtVnQGV1N4WA1-@Q^Q%7sp<!8^coPzU*Cu08Trf%WjGjOx=
z!R?sUYx>lx*xIb6c3(r&>Ge?oIM+T<V3Jep?AlwY3v-G5p8KpmvLX_1@dd<Gul)o2
zaO%3MHZ8;8X=I-}Xx9JU_!EqN7T+Q>x)T`)VSH~09Dm;7$#v&az5}7HTCT|afl!CQ
zBx5IXTFL0)0h&Zb=JM)IkQ5vrUm|7kel<>+$J#v#l%B~ws`c&4-EFblWI7Rzsap%r
zbr-T+As1NNr#Rfa*oK&g)C2wo3cT`9W{K73T8beaIy@Y?o?aY*ZJl4tUr+WF#~zwp
z%STQS1Mk+y^k=TRt1b#8FXrPZSh1f|2frS_?tb<clK0xFEPs0(>`cAsRhGpPjf^O`
z)`GR1FU~TS3hY-p6?{_q`i5QKt-Phg>G6f}oS|x)`DG^tZM49eGWXp?U~=Sd-`f;I
z@bv7-(;EN1M4Bt?;3Y5>4JpTkHP3j>hgdildW}*M>hJw}5>8NwkJh|ie)$Z;!eeJe
zx?%-Y62Pc&M<#^F2<-NHUj;*+?DHPG3vS&HJ1g~QX3;m<Ug4;<si`8h`zfd@e7eDh
z;$(1-{@B;_U=dGn@g>grsqG%qmLAJ&DpFdMzGGmU<}-ElduU__N`s^)vSG=0^C=ao
zpmA^UJ&A#XSc1Q+=c9)m$m|GqN^7GCK^T_N$ZSRscCOAOSG(O{f@6!*2)(U02iPt2
z8AES?+JD_P&di@<BYCN?jl{We{U?k9z|?&&>#pyo&;ZQKe#=u!vFCpC9~ViJ*W4SH
zlg-v^t-h_6>Et~B3UIbJA`vt-dZ^lW@U6plui{w#R2#YC*|Fi<?UAgtOMwKITPmWx
zR5jq4zr=82&)nulKH?Yk!QVB3MW4~CL)=ctJ0>x_LMM5OQ2yI}uj)7Cr28BH1jDr@
zAucmD!uF>Y4j?c_*^3IatP9jf00=<54eqM~I*;+XBco#FVM1&?;P)UFS?|m2JvV(b
zn8*1U%2l)(%A60k|51Oe<oVN6+8msFB30m+RM(|f7d-u#FsBJxHR`#DL(FksQ~8|0
zWI|=D7<_*uzx6IRzuD*gxc`3fdwzK(=Mj`4u7QI&Jk3X+a@YU9759c@dP=X7T`^f&
zz?EkC&jkkHecdm!hYFk1L_*zx3OoTrXoJ2zN@7E+tH62K+&14_`grfaO5gh0JdJvv
z&vyMd1Gj>}E9Lo5r}uWD^Yns>r`;#T!H<R`Qf(EUKMyFr8+fKUx+UeGNNk{kwx{88
znlz-?{F3tR`}ol8__<d=Ek@LUNK`&d;2|@nA=8RerIBm;tE%P*5sozF&hOr%#rN04
z{O2%s)l2Wqn(t3JxZCRl1IB!u&iC5(F8Az&obNf2t7X}TBdjl|2!K^7P!e}=oF3GO
zItLkeg^vK}fCn)G&PIP~UAQ_bc54m4P2Jr1mdVIEzRiz}yer@LK8uo)ioW~`td`~f
zRDk~=Al7hwevf>0F}!lJC`4|f8&vi96mzQp3jku<u{EbSm;S`~Sh`!@h&sawlkXEy
z@6$@|5qE`b|KCp446#F=*K4rIJ-8R2Dlf3a(Tx7<W-P9a%i-EP-6a~;m&zv+8bRN+
z8>SUKgq#ajP!fh-3;;2w@VdOJqeZ@?s$=K<oE!Y|(&tsI&f-norJ}BWK?aq-Fx19*
z^}cXrWjZ~G`>>xO*!B<msVCA$$Z11e0Xd9+9sZlmU+^llc;kq8J_DE^N#;Yfleu3P
zw$?wxijCSV6a}O37z=#7c>)fw+ArPMVL#7|Ww#d>J^Nun9q~z3RWU^}dwv&%9^DUf
zS_Kb$F_%O_JZuf-)-(775n?B09_!Hf@x?yl;Z!3Wd)Afl50jgPDb5uL>r5VyF`FEa
zsj~wy#!RT@*YC^hc=9wIv2VDYLAr1P1~)t*<;BcAgB|R_NY|C5p52nPPm<VKDz|J>
zz{5@zJ~%rs*M1qZ5Q3#rgNhtj;2|;hiUMeL@HG*Qe>npNXve!UF7qHwfB~#2$WS3z
zt<t=W=>Us9t-Ff7fA$j$E|{#R=x4M6`h$!mG$C%FRc++A9t<FWi6#&nGF{5i50L|{
zu1srb=5aP?n$11j6f29~Ut`&8`q2JB0($o9j|B9>01WXXAjC$lb!fLAx_Pl%yC+`B
z^|d>QgUNa8tGqYCfnyPbbX}}kz8})JesVKo)`gfpJLG_Lt|B7^yaY;AwFVA+k?h!P
z#Mr!$uO|=z0$<ORH1k?CPj~~Vq8p#{y><=>_`1v;fPij~^X@K(radg_Q|X^^dI*3S
z<&8d6pw@sz(*T_xx@q2t0P}Bqwy$rO=Urm@>`WpqM4x8-@h|lsmQ9L0D>`2W2g0k3
znzmsV{tuXdSauWSv4kgj^lhzA@g9?}whsb<<nQAK7EKz3)Vv+nb$!-~FZT;w=rp3w
zVN90$yn3tuw>vDeaFUq;c0gJQ-<Xg%JE;sGwEi;ocP5i=a3jCXIxnX)_=@`aeZF9G
zth{(g@98wn?)!#?%f0^n&a_rY=B0p~{~;bJq@UCP$n?!AAOL*eUc8qpmS_Ljm0B1e
zaM*k+Q(nqmXYX_8>a`uV=qhUkSWk%gl!G=`pN^LMSL_|ymFSR~tM32PJ^0$Ckfe5g
zGmwldG1!^vd+y!l^Az{{9w0{*%$WnD&Bg0JglzCuoH_vxLw^ekiPM`iqIN`H8BfCi
zy5QN>!GK_;a2=&U;d^46PD2pV)mWby+D|iZh)$xF@7<aIvN<BXTcaF-a#(#X1L1t|
zcI}M=;k6%1IuuB4DsyrX=ZpFH6MG~^O-jT={2BX8-|HGQ0>}bp#QH7SQMmWi9)T%c
z=MRaAew1z{AOiB$Zfv8b)skMcl}$W2V9wX$wba+dm`nsAWiuQ_D>h8K6*DzRxXph#
zs6Ybz!XSRzFFBSQ_hPRvVs8_0exm_*RF48KjFq^25Rz{!3;7(Q2KC1xksUmsj&|{>
zxZvs0Ts$^UP)GlWXOK}7r)3y3fgKYQKU_z^MR1(m<pajgRbShxQR|DjEPEGa4oDY2
zDXA+;Wom(5#jC#Q?nw;(gC^($zB6D~#)-g%yn~zF6Z%{OwY92r$k#&$zF+M2KK&8@
z%sFZemTq-kUYCCi)KjpbC3wzH(!a=z?GcR_A6}iXCSdjoSmZmda$K;;T8JXVH6NB<
z=L1fNJ;c3-JHCxhzFdgiBXu|8T&+8%J1)>p1UuZ6IR~AH12rf_?*rgnk@2E5dkj5>
zmqo6p-c?pG4YgBE*|<9A<X*wiadhGvX>k8j9&jPAqw(AEQo#_2Ohz~T;#p;Qe1`1e
zStCwgh-ycJ?}livJM5@Ua0OoB*Zs^|1<<(kzKOzzQ#HQh^4~#IfZ4K8nbf{x#l0?a
zz9Z^N4SksYZJeMO<LSqDKk`K3%9*TSqb+Y3gYI;yQkd7>PB4=lE=9FA)F2gTNPv#@
z{<4c%vz`mal|JX)xOcPTCgCmi=5G#cqMcFY{m(I;T3#_vGWwi!?vBO~2Ay~B>P;6X
zCX=xNw(PP<FNY4-WYxH5>t+0pXZTk@i$>H0=)e(QiBwZt_3w=_(JoVAGJMl{p2{&3
zkba@GKPcBlJdt1-)UHAQVjzZ{S<JwJgn#i~&0JcA5s+G<i=njFHR(wLo;z!(<vH}A
z4woGxHj3YA3>il?jUU@>1>qh8`XL?I!ge4$<^!ARh;BvjrXcNaPs+-H=>_e-7{>Ir
zoXSQs$vLInn%)@v>mOx$G`}4i1jZ^hc(oW}V@oZS8%|tuOzxYjwTXnBIGh{FR2$J_
zhvh}2+G7-+hqqpbKg#H%S6-O(%K-801|6kY$G(>r$pygAq7j{U!}NcI^)g%Rg;ggw
z(-+dr8EsYa8z=Yru(n_9bO+cLBM)Td4%)E6->B)CGikq$(7$FD5yJSX56DQVg#PZ_
zR{7$3Cgd`_gpHF_P8261;Mmn9-&2fW{62jZ_g4XAoHAgcEi_gMJzyUwpAHFootGh-
zLuiO@gSaM$Uwn7p|9PMZsc36=Oy$HsT9DJFR$RJkvR!UbTrOW(s%fwvG`*!6%P`pQ
z&{A?bU7%v#wNEd?+-H@C(0GPjwuO;qZKt2GtU3Ok>kcAJpdT8Y=poNJ_-dGE+FN8+
zX&?-?_=*5-`((G5TqiAFbDu?!vhF|s?Tu7f>{TqlwfJ-w<I_wH3}MPUKON_TFgyA}
z{gX@&o_{gVsjd`U)2x~AzD!-$qrYM-nMt>Grd9vBRJ%L<X_kN#j|;}xoOkc-DN4Zo
za_^+NtWsk$w`JY@`Lf4N93lXZ36Fo}ZvCndXweuQL;tyo5G`4H-3`LPcb2y^JV??s
zVz~T)`Gv14BWny%HMZ~km(#1y`M6|eO*c-M%zThs4WZwCQd0{mQ+^{K>O;u6=7`k%
z44ac+q8#TsKa=1*87C%H+!^PGc=aRg#X@_dOino~iLB+UNu%wa|Dlff;(frLhlk4F
zE3U*Q^ZH1KEu*%{h4HY&0Y((mHtHWpI~E^bI1TuD)=#o2P{b*oP6`gN4oZ`k%+GuF
z>(%U+VZ*iy=PS)t2HW|*vx~l5j_Q$}j{d1Ee+eb=DsQ>F_*G^3kJ{j4YknQLjlPOg
zgH=@&lxXCb&Rc$C=<@7~Q9?bZOL$D&a^Q+xr#tPH<nLWmo6CH44ky<i%1S-1*e)Z_
zJ(!(NxopAIX&d@2r&>Q^o$&$Xqtz2aLc9V0>dh1(mF*MgWiHfI>c7fA>xXv_^a8p_
z-m?!ElGv`X5w<3B&Hyc?MnkkAaTHXaHUTM$(VT%CLeHhkWL{g`ca`O$)fveA-1wN!
zGOqWAUjQ3en*$tMdd9t~TCwsQfKz~GDo2TslDjv(C*)>cQE6R52wc%UX(EdJ*uFK^
zAN!vkw&Di27!{3m2x(bN?Cqsyh{9m&k2cqNS&tOqR^%q;sYO=nIzl3)A3$<Dm~7tt
zJmz%rhk(hvg5&L7Vv8Fe&@wE}e@L0Kl{lKIwhj#>uid7!t}FmUI*ix+=-hcbM_d2m
zR(QL;KmFmo<#=q3ywz-Cg1*OJ1BJO=n?(E`)~kL3U~<KfgyrnrF2p`_A`LK?Lmh$Y
z_%{=rl_`AF`o^|Y0FER0+x?Ao|6S#I!k%zUqPUB%92X%<L$mx8JgsOw`JnC{c~|4Z
zl0mCjmc>k-Nh?XtIL_{bO63Hn*D=gLe#Su!yCMcrX-dZ&RONUn>|}O`vebSBWSrfW
zwWIfa)q_ay9$49UW^U{nj<6ooia&4u%fLR`cF#S)-2V$;ntFGRS-<@U#IV*?`E=9l
z<}}Y634sS~{~0K&xr@@?<@IbT?|qq!z=B{2d&y(R_lF2}9&XB4KPmtGd(_iCsTK0@
zfjEy597xuwXK|{A8^81T0;2zp!wQNPI|nN68<<xzlC)!Qw!#Tkv9L3Ws>dSPhWUCh
zU8_;*C|PA|`c0eI@cNPA@X4&a&jAR9djC6nRPQzlbvQ?q8i;`bh;uad5|Zk)kD}h+
zeG!GeYKmUAk#gZv#-Wr1P=nA`!sYNNk#rCPNg9HeQAY30*Ii_lE`F0;DPYwS3pQ+Z
z*Vwj9=IjGnDnEiO7@*p57RtoRP3!$zfvc<7GA2!bL6>&FcmJUJU%PYvHp1%+q`7I$
z4-^e{Ol2IPBQ5T2j1h8tu(p|obGwQ?@HJ(+&`g)vp2-PIQ2g&8bnH;%O!JaS>c26R
zP1K9EN)jkWGG4_bRj+|`GLxvMobce?v!mJAF$)em>m_=+(gBCbEE;0Y>^WOd89vH$
z_jdgHWsp9K*i%ND&|8gcHum4l&?k2z54f(+M9i(9VZZiswF?Y?cUI(ToOWK8rMgqp
z$P^}<%e;=%auH?&din3J<F(@3wVQzo3ID<0j?(c${fzGxG7JN@f_}{Cj5Po%Aq&}E
z0SbyYlnY%=3Xui~In0wKb?`ZMxf45>n;t{Ts(`+5hwMLIo>H#?=I-m4`9DGv62h0?
zohPAx{o2pG$U{-8@RdH?Hws^@w}ET%!kPe{jtoFE6#n*GB3;TwZ&cQ~DqVi|{(i-v
z0{ca|7D2MiqREg3-Kh<;C(-0RL~sJ@RU;4Ujd$#3ZGax5qyeoeqW=`(j)F@>(Nt=f
zy77}6Wr4ICLd#m>lZQu7*Y7j($o8Y3jpT&-4%pLo6|D&B*n%dT8q67Ju2CyYprioO
zvA@yM^Oj08{*Tp%)w{V75l!D>#9YoaWvAK_9W_?tu1uxS)Ym<R5;z2%F>G~Yb~iH*
zUi0^zxBdBsUa5^pyAMRb_3)g@>&)LNaSC^TB{5;Kq4}0?_hW)9)qNwi)OIGmIM^ZW
zU{pw2H(u1gqLZf>8lNr~>>I8U%Vr1?!uN@TRxLvTKAg*&pPeVq25aw$TOk&l>UbL2
z{6A!O7#9@bxRJYlI-_F;kWzXOr->MGfj+H%N)|)mik_6=z`?_O8>V><WH_WA%gOZ;
zJ*<on?t4C|_A5WkjA60JQ#{&72HG)xWRf=1dT5thA#HjJ7>Dxh&#un)i!YMctJuLh
zN!1@XD7vDpC2KL(em0u`@;_X&Di>%Gq8b&gY92%PgqS^ER_wS+T8Q*52d~nqlvm(f
zhIpv6B*JyzIaG$!65=<i65FD!l!PdcqM&3_shRGPwsCF*#AOjEU53)tl!n|W%xuSV
z5dS!b4jMk)07an?W!LF33&NfTlsGz3GHE96NK&{;d{Vj}FW(||g4$PfQ3cUhV3>c|
z{t_q>*h7=M;BQXY)zX^v$YJn^{U(IDp3=nb@&e8Hwa61zGolH?#)fYG-h35<Uc{5X
z6M5DVE4iHqH~bsk*>Deft+M<Cm`PF4tLhq*=~A@|c3fE1g?wCa4^<EQ7Fv&FI#ox2
z(wx1RO{VM37b&MJ0R*=CvS)XZa|ujmoZEGPEo#$z;fN}zUojGUEz=Gq^UpF8eL1|P
z?$73zH&u;&bnEH-jlUz+%P~27E@{4yM*M@J5)GA8GhZ`&jahdLNIDf09q6Ol)?gk|
zkXxSdXsW9CQz1*T(iY0XZhByn>nNE@dCRnLY^4!Wfm(+82c8>K5HDcKI+3ob>6h#P
zIR<a89k$P;Ra=Og@9b|QR@o&NvqehVUz6!m-=L?|&*RK7mau>sXH0e@5#&Q>gw_8R
z0_2UFptj$oq!%g21GH-*Z2X+Hy84mFV05eXyD*?)wiMp4(Y?n2_tLBdo#V_^d5869
z=eyHD_Op2Ej?F(W@Hcd!Idu^U-+oR@mNisd{$K_zh4VzL2VF})|5|BfKaRkIi=jG|
z53L-YZ{plIN5%*wu?gm+Ha^gkY*y`i{$55<VD>!8+RMy&wqQJ!HIFO)FG^)nq&nfh
z#y`bntW2$O)8CDq$@<!Vx)ETvq5g$Up-c`gVbF=RvkD@E^Mr3KPMo2%bp^G<xH5CB
z1>s-{*&5e{3keRoLh7zN>Jy+B?^dZ|K9uH#N52!f4XGU?9T!URBEd(ej09fOcW0h7
zV7(j1!voR2FQDB4G=y9vbm7w5k2I*+<lUrwIJV<M_WkSyoyx&={$;za0?FloNRKrf
zeOqfkHEU($WqtaWOP*l?{-Ego!?jDhufNr4-Gf~z<y0|PZ{OV7v174wwf@TRYhV-O
zDKBfxDdk0zN#jVHHCOm~Nip$2+|hQ&@-6oE@p`{Wr9V@;{K^&W8$zMZ)w>qHK4Xg@
zpK-4L4pJ*`?NSoPF05tiTpD~Zn0uQE!e#6oLTwiqw<r{fU;z*8pyn#frBJxyH|d!^
zUh*40AJ7!M&U3y^ri9nCcp0?hmlEGBbpP&E%|HYm#@FpjNS{cH*H(V7RSvuuuKXx8
z_QM5k<kqUYZ*G4x)r-#N8^^x>NT0qx$`Gaex~3)}^rc@mxK>^2RPgJceJN=aq&yX&
z@H0V7CgDm&9o!WV-c;p@sKenZhm8`B3_(}H>5XMzg-hy>sh(&v+3w+;e2BD^m*r&c
zs(^k8SO__l7%mo-Jmv9y-z+$UJ7RCR-1mOFSWiA=8~>U+Ffk(F1?weVCA_Ig=FM}s
z0rqI$Mw@WIh*^36t-n(8wHFj>79)3Fm@m#NTg0>Ay#6J7W@tjVb2j*q1fOM2H`K7=
z>d}$s@dbyI{l=$e!F4HHg1H)xe9KL_nh(NvJPij3H=!MoF422o(X@(M20RB0XZ|xS
zy;%7EQ8`4&!O-cjBe7G6Nk!JlHM4Z#<J)*Bc5?}_3uzz^-efbjDY&fk=g3C-EH9<~
zDWIv8#Us@L(;6{5L=Xi#o?tjaS4rm#4`sCrdq1^b1APsCr^<4bFA6^_Q)^BE^^X+I
zrvlR*=TS&gP7;BEczi81xM43#OtMk~@f0hx4kun{GNpB}npHc%4$u29r_V0W?FR4q
zAEsnWIhr6YJJ!VF)lW53Lw}fZUH;Y39@DUp1GX~)EQ7(KY1e)TN<38G7n6MiV%83p
zbUO4Hjnw6uygw=h&o9u`4)%auy;`U%%nU4CgulHRnEs<KC<c@J0qcis6ByRN(V^B5
zTu4PDOqcNQlFbQwKGFY_5cm!V-%Aq7Lk|qL>F<YH_2jY9qj9#eIxi*A1UqJbGpaEj
zc~&l<RfN|q&lae`8frI9p`ONuIfqv4=(w2D#Kg<R7pC!2$SB5k;-<uMID-jIAtK`4
znO7R%Vub=#;qJgrrFvO8b^g_uhdS#&KhCiOU9%c&vttc@jMaNcr2V$yEKj7)lh)P_
z9zj1~owFI7BglEFhHQ>5r*p^0>ZJ2Z^e~nP?oC}0XM{N}jQotVBVNJ1xF4mH@xQzL
z-NF7g7X){o(*zqYV2Dg3(JQd@J!3B@Am4r*-(h!0v<<%~_sN2^*hRETM5(DOA;;mt
zm`k0$_AoYZ-NZ4}D&sQb*{G|S94!Xf5WH0xpDgt6Ao0-HtnGb&vR-B0+56$xe7ib@
zu~vhBH5_um#EgnZ%`;})+d<w2g3~cT@FaZU9By@<Q6<`#TziB1cU#^wTqMLupTFuP
zBylkq08*Qg`nrS%GXynzp<?VHH@8$P3!&aT@ivSN^M7m-<ruZNd0KXpjc$!IeUH=f
zWXG*ul-Pf>h?3dNdJdpv`s`ZAK3k_-=86HozZ6$dSvm$9exz6cBomtG)ino>yyZ<V
zNJSAd;}Jtkn*F-ZuCmdNydba?3QO66V5a-9B5Ixx!nP$1LhRk$&ap3D4v7z0XLLZe
zTOgQ=!<weM_(ajc;#bP(#$CFh{#V4S7NKuhy_1YMshks~ocP%|;EVpmtQ-DxJVh=Q
z*hj;%tmBYia|G#5@$xQO+}yP2ge)YIs_JD^FRs3hsP_?^F`gyC<nC4*QKrvxA}%DY
zC0rx*Fp_EbI0&EM+1ahz@aoYwo^}9m$JU)7*iUr6yRG*L;B<H0&h+`HMCq-4PaP(9
zI8lP$zg<N<1_2yRnBr#I<5;0_O#O8KGq>G!zYS#-`|~ne*U|H)g>!t}-OD;Srx0Yu
z8_5-VQsEUfT~e@3nOo!MeJ`v{M%|yWRd-_mJ!meoczMOWo2!+3;c{5H?xifz7Dh3i
zG7ph+qYI2{Bg$7)YpfJDBe$gPd1JG8e)2cVi~W!koORV0$<DIF3=~zoVd4emf(zcq
zKayXC-?Dh8rj(k?XD0`O3@7Kz2g>kz@A6RIwjRmGMni=&Fj$@@m-&u^y?{CBKtNpN
zl*~LFaIr*bGug;A+Einj8dFJI^hNA^2kHHV_w;0ubM)7bbAaZTXPHYh>UFQJF(T5w
zc%^*qE4Im%=dkk<r)A20nc`*<ehJGXqA>P4#u!p%<_Hf=ow{~CsDKx}7x_;a|9=#Z
zToa72^ccTV4kfb1g+lfX<lM<@7!9w<gcWHp#dNmK+{G;FU?-z5EM~uAPyg0(p{pa^
zHhrHL^6KK@$6e!+6s}i{yr&dA@<@~2MT9)u?lu!JOU0?miR^u{mtOkfGl>!KoJ1V+
z&6u_A7XUtIa*5BTxTJR)5dd7yP?$M-z3%z&rifgc4QHLo?b}bNs-68U7we<;U87dn
zUjGi-@p@H9q|kU9SDBU_-wD@RHwF~a)jNhb-e9c~h#Umr?-wZMKW|j@d**GURZp1w
z(3uSLV0-OU%$J8DQ5H)(cD)xi9v%q8@TT9Z+)|^Rq?m4jA=N(XCvQ!S(9cvWuomo8
z$2gdRojOJS>jGL5|0@z3{6lHg-7|&!A#h`+HZSvNyk>q@K&wh+$z4e<Yz)iO`)&ZU
z)1N$hBvGK*6x2JgoNslxCz0Vm?bCBRjdu*V9Sw;?_s{x@l<S^{{}C*-V5f8vRl59p
zqSHW+d*yZL6|v|xZJpw?p}<c}%&T&8Iu^Y<^%Judk#*@Y-r1eC@4qns=V8d@!Jlx!
zVOfT=*9)c#=6m2%<utS49@72%Ms`&<TbfJ>f}PM{*6K#XPC7xYlZ6!or86;$XzPbS
zbVKNcr3_X$542ZA2Xi4YB3$9E7-eU_(o9@NrVl@|J)(do^35Up+Q{GhsP^~E`mL4*
zCEj%;wLD%sUv0gPDLCC+OH41T-FvUxhFviJ9%bPVrhUjI6Eb}X4&bID5u?!2`+$@~
zl)JFC0Z~B1p>7PP02S-`gIt_{7HvFw4tM0^6WUxRJRihN>(v00^aXY)H)3OOfgWCr
zQNv@P76%rl^ONl-!?S_q?<CA0mPxQgQqqwqG_e0=*es7i=_$0YQH2C`JSd`gAFKqG
zhOW3HWJsi=SYw{$|2bx?ZM_1J?$d^$4$h#A&5;(fw7;(G;<PKF+Z!!XXAMkStiLr_
z2VB*!k7C56XUPN?NoMSJd^=Xsv=M&H!=IETZB-j;<FZ?J+T-0`8(VX;J*Yhdw7}+1
z9|XnSq?JrtNbwW8el)@X7j-J(yTuLrM${(9v#2{<-JW{)4f=lnTF*{B+;MfrW;!%J
zyyN*+x{cyrKnJvwoc=agiCJBYLc<ewe&Tj5EgY-ed2ryOez16QLRU*?Ce)+uhHIRA
zq!gB)2P5h0)+YR@bEJ(nmZ$;RXH<%PmvQy+wcry*9n`E41G;8){>AY3^>8g*;v|se
zD0F9&ZgQ3EG)cADzR)r;UR*C!Xmht0>F)9sYkhbVC*7hi$L;N;0*A;T&$Ihd8*!1T
z?o5>&dO4{XFC?jDZ#eL9<)XDB2<q5+O}vIs@Zm%Bq%w|~R&pPQ)B4UPO&xkmC3byc
zEI+xybGPJSz2Ay-&&R3NYx{}or+h`s**RZxP*c8ly>2NO%s~xU;C$tj+@&Zfp3M#K
z>}R@kBj|0e=x*FODw(js+(7@MG2X<%z0WPp&DvjPMwp?B9)ion{)dsif<1__#E4D(
zsxG-c%*4f@#O4fFP=tT!dq4+V{Q*ZZa#t&}@)?<VOB;c&8wsTDKRy{jd}kCNro*wf
z7xDA=e#$Z>8ExB{iWom1+_e)%S8cM_zf7BQiQEQp-Z!P0!b+%R&At16#WQ>HjhaUD
ze6X9s{c|5x!8#2H1EU!pQ`B}{#RREXJ_XJi<=^-QU#Q4fT>|eT^c}d}GpXspTXkZ_
z^|eEJl_JE8bmiuFC5_0T<E@-C&DkfJGoZly#^T>Xs2>$fKeN4;na<;#8pBQ*+24-Y
z$uO1>VYmW$DBgdFS~pW@=W+R?V~l8{aI;CG|2>+(Q=O>&j880`{c2oWebYGsZN183
z%XQ;W$MZN1m%UH;b9_!KC>mC$IqMO7!?K5GHU}kmd&2O8=p(K6Xt4e#3pV(<n7CW_
z{Y(CvQv5|+@}9d=5ApRz3ag@i1Y25Lw&Q|yd%FS8id{D=nLbC(W%PZViTc2(oOcNB
z=Bm9DM3#Q#*57^M8zq!5vnNs{7QEKI>u8Wb!+sfN_+yvx$9846<fNcWeZ{|UB+kjs
zU}xTSi4Z{DD+=-LhMV5#xGzhJqn2R9EU{{lo(>-W9R8BaWtfWO0j-nWRU%VIcchui
zY`4mSOCbksFMQsPz#<IrH9qZ*R7ex<B%??_USbKQt+fIcla?O07Jz7gy{{$xz^%EW
z6S1g2!RK4t{VX7P2ES)o9myNX-`ymYb=4I3{2l+TcZgi*cal%_1@2R)tELL}mCw|+
zmQSu;riqq+5Pbrn(w(5V6D=TCLGSx_HZAm(afA`}!@N?PSh9A*;m!KvrzQ<8|6)XQ
zK7<<H?q%R36wnF{dcUXf=thB(aV%5ue762cCeC^q03mbe?3w9Z=M*ha)#q7Q`({U$
zq(yojJGV!KNZ1lCBruBM8<0u5c3zgZAG>b7`sgfYJ7}WmtXi>JQzF5PVWLxs_0rZ&
zarF4fY|vAhTl{)Jqn*eE4=GVqg+tm0FZF$pf<C_2EG(T$pBCR+9F90F2_9!<8d2MA
z5G6<w`?Lbhwc)CY?lhn!SYLg?XBZ&G>P@E+w?Dd8{y0jWH@Hu9#$YL;YWdpo591*$
z*2g~-;6eA2W5`S5PQ=RWXbq|0`)t?Ei?`cyzx5I2zCb%HDuFQk&&#kgAN`SAuwyk%
zw@^K_*b%Tx{ce_h9HhG7AX{{Ty_ygSmmN7x8At}vF>!lGe-`DM=@L~v+#t`~$@eW^
z(IhfG7ck%SFrfE$dJ6cVPFrB>WOVi1Zt;#}eM=IT!_pN9Lx`tT@uwAGj5X!I9XPHq
zzxK&gtVPS{aT(I>xO^BY-B0m9=RZF(y#5Q{j&c^8^;RbcSo)OKLKt&3qDlV+Mpl(&
zA{TWG!6DMf^PAV=AW8=4wI!1w<rm@s`sj}<Ua(iw=q+FD^&&gznAR^#y$5QG*Kc1@
zFS#+i-T;$+=Ly1K*4pHFl#Xm}8C*wFNJWg(UAGYk`@e49C}_5rm&^I}A$%@InMO{Y
zjQ-;}>b&Y;uR)mSBEatf9Pj*GZj)(W%+DP*j3nNMSEP(hMO38;!mtY<;q%3HM@bfJ
zRR*-i4NZ5YI{LND%;ypAG}m`r3A*EAuS?|R-FCI#_217ciKN+v=@*20De&hqF@J%f
zJ&~~Jmz5+`<qFj=R6do=qigP!+}puhKp<|!$JsuXJf`iHN)Sg~L?XwiCzny2MtTqb
zc|n}3st}T?5$q<l!Ju3}P!Ie5O|soJ=h7T0p~U_C#X)MMmf{va(PTIoe7N4}$QO9R
z4jFpCdVdz2!yNM4WR1_kRHYm$wx?=j)Sgmv`;#o7!{;5~{U~G4y8?<bay3r)_rgMw
z@X-i<Jv4<|_K@}Z!FvEFrm?#bcmOlKc2{gO&MP~vDiS4!bi3Qn0}6ejPh89}_9pAv
z8BaJIZve9FlL&Cm)Cbz9mJ>8lC=^@5<e11PXaRUO0vy_pB945->C!gHxp_PXlRRdV
zuTV-v##tX|V8YU|rLnhDS&ZF@)hG>1RM`?A87wM>3FiL{ne}}^kN7F`qSDMw_#$0{
znLjDfzKcf^OpHM7h3%qw%;YzQ92HbhGqAC?Rh{+O9EDGWSD^=BoWcttk|BBI9D8kp
z^f!<nUj@EAneyCuE$KZ82Gv}VSfEOc1mqjDolRp4i{Y%;rENWa4~laj^eu|xi~|=T
zU5UU0&3i0lyC&esd-BQOk-DtNKF8K?3x3^Frs~C@!yHlg0mmJjDX-x>etZq$N23=q
ztM@9x<G=G8wCoif%`m8QS$ER`*lu?>8mK$K0LzwXbl0Zs`2tWcWPj%{`igzw>?F5X
zPTjS4QXRlW>_%}_v6;AvVMpyV&N)T{Im68&pPj+B-{_18qH|Dc{VC*8(9fh*uYWad
zQDRuYD8fLv@|bOe!cS%;Ixu2vQDTX(zi7a1wtjoSkG7^K@nf<mAxe=V1reE$oLkM5
zZ@LPxlb>I9$QG2g0t9t{W?A=7xCUTGuQ!WMX1fx3*N&j+leLSS+0xEqfTlr78MB_J
zx(uy10$Gmq>!)<w@~vXR`3i}qc#Z1MT9i6Jo6(r*=N{RfBxIVcye`*LULxuV^G|DM
ziGG+(cl|^?v9j7nD3tn3V@SNaBq^q#0U5|HJM}3rKLBc<_HS!a@+#B~@J&>2=|9wQ
z%^s+V(a@;FM570K7M_)v2d!W%+nG5@0^+^GTNx$eF(VNrO3<hOd{q_3cd|uD$Iq<#
z#G0CojMXB^ch+Z*ij=p#Eri#{bn4SPvu7nidyW|7=5k{;^M0LjvAvi=N+$5erD!Qm
zqPSNRGEM*o44)0p;4U%I`m!?aeKXANg>g(*reU;c1YuzN3aPlF`av}Pfc5^&+<jNh
zi+PIOI=zs!X-c$qk;pj$t}FaXdaCh(A^&wE_Mq#ZZyCC;sD~Rq@2Upu8-t@7%n$6B
zl+|ZOZ9!_qo>eooU3~?=D*-xAMC$iar{2DVL|*1P|GY;=h;4vni76@)f7Q4OHJ|gS
z&j>=1SRD*YG^@De(!vE;(cP<Fti>`epcH~PeCC<h`lw#GFJ!O~OxO%`i~m&NG=m)L
z5sIFb;|BEDgzwm9%_V)Pj9qAoBobE2E56EihAY3XJU_;~TSTq47XJYAPyahkZn481
ziQZAbzWs&-s1pVWOxit{%JTaFN#iasKID#XwIaom)z1&)w|r3r=U2IW8*&|D+dg<^
z(z|ZJR_qPV(U&eG(Ve8!yzx?M#)YPh$v*axDG2cPjQc4g+V662?&DH(uKEoQK<`1G
z_r5v`t}>3zBz}C6ng;m<>FOi&($zl@`Gb>+ewU0u5^u31mn96Soa`l>+y8NRlj4R>
z?y60Fjl$#?H0S%OU>#9}rzx}Q;)6+zuwpK)v3STG_Q+uQAMG%<=GL5tRcWs$Zg2L0
zEBUAQXN3SY!f#9(JaltR8#QC+N%}9Z<j<c24>JM*@||u)n?&$n_I17qib!mS-y&-}
znPa@>N@tyNhdchoGc!XQ=#YxI$I-l)QO`GCeif<pSe>evFJK?$XBiac>}%c9NgU@1
za<8$#W1qMBp?L611e@WTTa1!uQ0?+%Q*Hmgp{rC3$c<_zqwf=1vAq(WQL&3psd%_a
zpm+wcU4p~mU$_Dz+FOk~?K<xQ75n~}YfyVxg-zypnbGsXFQOpMT)dRctRibd9R{M|
zlfOH(UspK)iQcYlz)>(+Rz9`lCCBVafP4G`#W0vRsRJH5BzQsZ0=N*&?`r#p9y(iS
ztLVL}!4T!N99iQ4M1$vFPDP0HT45vc<_$TszjH|Pa5j1UnFF^aFG_tE)Kd0tNAA(~
zR#%D&fE(vf>Wj5e$n)~WLE<C?22xRrEll2R$fkICR%7ebgwWp2zF76aSioQov}$M3
zNE^W=J3{WWLGQbD8@+f*G5=!_3Pt?x(!3A#9wZ>Ey?QuiYC1+FNpod*lJ3E->LFeC
zJ4^U;jiSi-yvZI5W~iTGl08I|k2J=2f(5F{Dcp2$BV4AU3CFS_tKr8*h?mGE4Tq%m
zgOrksB5fwdN3Hvs%oQ37$o<MIFfiWIsXD?T+~QXzR6W$QcsyynX4dptvFg2R;f^tl
z#V8T?D6(Q!{H24Hm@JlqjX0fOuK!?<CFoxVYzF@Gx!RpeY}ou@f-(N7py6Eqx3+$*
z4m$BLeh)QSa{ux{6gJae-9a}$V}<!2Z!_H8>BT~t{|YfE&W>}%E<SDYGe+rqH|%$z
zeD)Cm!xyE|f)`mMAH*|4MWh$TNv(X|W?~0Pdj2`i7n2YG<_pKDQlcjJT^|@^+UD|-
zdNolKtko#7rKg`%RuWydHGk==Jxj-O{3Vo&QHD4=J1%A5m&E{>D3&|4ulW2nv`-wW
zgM>7k#<*(TuYvyytqv^s>qNN>tqv!kEYj@?-3QZzU3fDngDUci*CUW0YOtM3fbT~r
zp+6m(P7t5R^%8gQmwV*(rAxP`LfR%g{jIQd*YrLPbiYwdkss1UqM2bT1svY%aq>jy
z2<|`lG(x`;DLeu|1ZtHzYIMBCqMo&0y215c?Gsna$~HJ-95K}Q;zM_;=<7QNHN<Ch
zQ@Ov)iR`yq97bdkcSZ3|uR@iEHYGuSg9((wk50N1LuPAWa;Q4z6o)SKXEi7=`X!;<
zBGNv8lq)4-YH{b)G|WHf9}(PWJBEFE3rM&}>@#n!4*pD<!7=UPsd(ezBepJyCgd~-
z`fz8k)-dD+;>UQqp#;8z@@UMQxepXKn@H8jU%e~LYxf8J(hDEq1ECxD^FnFKRvI<;
z9|T!l8KALetNf^}B@6k>T8f;@XRQn8lRP|+lA~Yv9_HE|xy3lGL`F?f*`to6pd?n_
zN_E(3r;=SSyAkLjSU>~ej7B)nFIC`BZsSo2l*q1YLF@@~T#m330FT#(hw!24$a>#t
zJ4s%OmXHW)lo#qX>%ibmTvQ_d`W-zm6}(074NDX7OPOV;U;U?YmQ5O(nwyFgKIzj{
zNFaOduZiZVn*n+$-7*HX9JRf#F{#xs<n{z}x@5;nq9HZ2I{EXT_uB<?pE45-kX-e(
zC&Ip$nb~-m3mh(ywn38s=VrIsSkwpIhblx~DvQ+ZY|{?|G7-veaHRp)WZhzsoQ%tX
z?=<9_2Sk;rS8iIw{}<U&id131#&`V0Fc9cf{jpE0p{8k|B>1v)n4u%2Bkdn&881`w
z1=+gDQr%O%IY;H}d@mhNOlg_uGyvS<i4ql2ZV(cd27|u(c_lRXl0t$4kA^ki9Jc54
zYHE^-&KjewfG&&*(KH8cVd_x!iF>T1rcN|vrRWx@H-Nk1+Da^qix^Sj8!T`XZ7Iav
z2#wjv*~sM=T$y6Mk9hf5#}@8f%jG$fTlVEuM3|kFwvzD(8nehh@BI;-?Oi_q$Sf<N
zR-8Po7IT)ysb=oYrIV|W+tj{0XRzS|WOOwEqSW1od5Yf4r*Ibk>bC>_c3pVRLe1O9
z*3$dpSKR8d_JiXu2zqy)wp$0H+#HnF?MOwKX#MSN(>k%-$2scX*5ZBI0#v*8f4;w+
zvd76yqbcKdY<GVjlizXfj7tr1<c`$}EjPR-`GMKk?fu=y2g#+N(}dy=dP`B<jUzo1
z#rMy}UMThII5KF>R#}rEC7UcDo~x>PDwQs#>6~M6Ms9w9k48;z@859TEmK6(FI3VZ
zm8of;rLR<eW&~Sr@Tpi~$vA7`Qc+%kQYG6E$(6U>h2hVUQjZM3r@K(H{i&ZSwM!U%
z9G||wtcE<2W<N8RZ1&8M{ijM5mLvbz6lfmp@2RmGV4pB?j+}BjdSak~35%iV_j&nI
z@cI3eN6hb-=0HpN>eek8XHnr7mELHtDqxapPZ&3~DHdqQ5fB9=hWz`WXFD}~L-yQm
zf#w=M)w8}`4rFTiG6oD&p5K@<`X{ISh+h%7^YDo8OVK1rY18&lLSZMr?&czx`JRtx
zQji_|ZWLoR43F<fZZ?r(iO_)XU!)O&AMR$kphi1`gyUjS|5p?SX{0Kw|7giARfK_^
z`ObQOTHMB6^=PEHsRnxaUVK&C*?uY(nVfO~Yyz|~sHPZ9XiCE9U{(%UU+$x>Al?t9
zzM)B$6wgd<`YYi^{M{w%-LDQFz`l{Izf=q1eo+zlF@g!#w(FhTre=XMxSCFryR(^+
z$qbQ?4E<C)_=Ro5q=B~Vz7WWEUcnL67pv7v?zoxvc=;!r<G}Uw2hSLXNTgm^+STp-
z)uiZIbFn@G^g($C(vbC7)45A%k;HgM9O857PM^<i+}^ImH;1z&IIjg2P(;(shD_YR
zO12?^^U$;VXRuCn5z%^$Ce6*uC*VILKVdzj4_5tG-OfU#Q;uQKsd#rkET2S$H)6#8
z%BD^<ms**8)HXdyJf+g9ZAbkx_j8nrJVm?&?3y4gr^FXYl8}awKI_@fzvMqlaefIP
z0KllnoUv<f|CRIVQuRY;*9?6^0|}CUYFS6ym@=*~vY&8u1)C5b#3qFh52+y<KD^?s
z?~2q_O0edS)sso?AkgT-3&humgirNEiU~xJ6qE}h`a(#Xs`dAoAy)HsnrI^E9d-jU
zKvKKQB^ty6F)x#IEH=&j!EWcI=`!68y-=?kgsg=;FkiI9@DIx4JN3BbGg;2eqrd6U
zQ3IJ>xV>)?S<N-gsr%`P9tiZr+QTwWr2kZ;QB>nHovJiKBGYX{48O1IHVCrLel7yw
zHi^7=ms9@vTq;IcGDM9L)>tqnaiiwW;7<G#{3L&MJ4P)9RH+U1@H;^m*TO9b#-_Dl
zSY(u=3-y98N=n2$C`;V@-BMpm8`d7jeB-mg5SWU5KN^m;xYgBVe3sa+TDnn2h>C~b
zIat?l61hRZNws$j=2&NJX67}h)_NQ{<T7~3m<YV*#;faiCahZ<Jw2hi<K++d<Zn;Z
zm6@DRvR#^yBm8<LY$!rDM@q{2>ceIWGIkv(3#7i!5$g7)4Vsp&$hT)&sVU%MKl8j*
zTuXPFv)mx#PVtRmy%`lDWjQm~{xL5>sT`eDPUU_a!7wtVf%%x7*oJ$=gijey(GaXo
zIgQ(fepjNl%4&vCp2Fq8Dx@qOC&Re*SCEIE7EbhAVG6hK_$oUIL8T6gDKK0vG;Nte
zsI)yl)ESH7#}`3ayqYnMUtF{cmK6Cx$ITSQpIU!C?G^e;e-Ztvznz6F%7-duN7>?3
zRk;qrG4NN7)Py3lc}^{iS&#C5p9c=-mH~N6c=wD;)wW~!(*qhtAdfjXr+uYi1^TeM
z<1vf}Rw-gnyP04SylWF(^O=RCk@P9L40mF8<JFPT0U7pR`=mVrM%M=@`HrkBxuqLS
zK5yVdV;?spQ}w|jUN;|O)egOoz&2b}1>7f=O|)LL)$HUp33~d532i*4;^2mGVfG1j
zY`Nt*rGZ<D)-P(9<sl|9i2t#4X}rd(&r$J}##UqmbOA`6ye5iV0@=SNM-xy1VCLK<
zdg#bBle4$9(7kg^1WEOl=LM>o6W}+pD^P#KYgqhhgxj$OnNmz&-m|J81ki_!1ucJ1
zD~mW=6LFPAujK_HCk4&<NKjih?&yBbh+6X@J-YH#HJ_Firu!D~+{bd=w5(;^f;1`c
z<}_9B=MesW6KrYREDs*d=t!Gf3Z8x{f~JqFfAs&+8eLYm0vPbJ-6!ujz1%hb?JN9A
zgbmReEL!6IS1Z1W`I0Ra3awJ9mo!1wAxKX+tZ5d!=@h^$?5I^TjVR0svl>bNRuk;1
zCc~k|;-|qOU1It|@#o0ZT%qopfw0!N8eyM7A|rYX^AdXY928lDK5TW2>$|}ZN&R?i
zNs=*|v`_^R%1Ui1xb6C;J*%D?tD0eIl^on;#tKDAE|gaMm*(EZ5YlhsO2|0WjJ`5V
z-G7^gm*(Zr)iIFh(3naNRgWbHnbV7jAzmHRSRz=ybr%Ckn0<FhYmfT`tWDIWCq)vR
zF5wpa`@4V^cO&kbH&OYAfUQHIWd07*iXFmAsIBn!!ZFI|mrNCN2W+3O(WBy|V9PD;
z5&jD4*&6X4hYDPZCZ9jtZ7UX)i$yuLMeYBYq-55dRK~`d6c3VWEEg;WnS~ieGdeTQ
zmv8?og(stbEdntXk<AUnDa9aYm+7@u>{3YhkIo97XZhQpaI$KUdX*LjnOV`&MKfts
z^V-A-I<pq(wlD-6Ub%fwYgv}inxUge`<x+VkZC&@8Uc8p`XZ#fw6bRR2X9hpWUhk5
zys+m#VWM3^C(9W+&O+EM{v%nhtH;PZJ}(2m^-Ei@b~-&E=vt%qv1s66`lBuK3B-8F
z#x61lEf;___-*9M*_iwT7AU>j{Fz-X^vP;CC8A(E#Iq;igpPik#@u;&);8j6$Cn5c
zs11t-iy0#eSSWs~O`xS)M#z4f=VQ`Q{jQvOg+V;8eA#8ZgowBWr-UW{sc>BTD?Z07
zrlvKXI#*c43Gd0@ZNWVWT`5J0e=Iuv+O$>u6Ti{%BI3UIoud+|NiS^sCpfe!u!p6Y
z$7G_)tCj28syJ#?E|?ZYhw(Qz^5Q9eIhKlvz`$A;8k0k69KIg#%r6qjp6A!zZtJ^Y
zs^u;0;9eoTN0G49k)xc)#gE$;0((66BjvozP=7mM;<TpI%5+@74~fgSMn6u5Z}$r6
zx48B%-jo9+HRV$Xd_z}2lWDv|FinO6H<noX-qH*Y%EcbEI-IGDYm-9Y#cT8m7gY}k
zNXHI+Sy=9^+|_agW8<ubcWIIaw4FLe{tD{rx*<rJ@?a(B6S9_V@HRJx^$r#gvB5kS
z7Q|##sxXi#M%|Z>Ocp%fGJVGQ#UveS8aFVEi6gm*kcK>B5<3t{tMMb+bf2^e^Hx9i
zV)m@%-`$e7PNQ~IR7$9gTB%xnA`f*{n#z9x@9|`O^p{<I0+K_zo#3_=Pb>W8e^AH3
zU1z50P#&;k;Wdd7cTM14b$W#1_@i<k|4c?g%fEOnL>T{%d6T|ybs*=S`zO7OwvP#s
z(3lS{cDNsYc&D16-aJEFCE{;Zx)=(aBH_{eswA)NLM^iWOZIp5P4A6z!g_sKTqNj4
zSZVAdtuni7Ax3;Dkq!qbmxwr@kWzVD@H|`P52KRSJb!hu(eCP5S5d<0948#EqF2FK
z{7O|6Vi}}7CdTq!G;^_|90<m%BGK8uM2W3m8xATp$R@(TkGUMUaVfl5&DfSm-B`jJ
zc!aa)D8gz<67LcQCr|a#<&(rNvK}7#v)e&Jsj(Cd>TJ_=5B%%Z2#ZWP;gnI;i=~c(
zCH<FO!v_{Du{RQ-`hv3ZT<%7JS7N76^%D&5PusX+24miv6rN$M@PG~&^Xcp0X*wat
zyR6ZVNhQbF4;&1NBeJPh5F?nQ#MnvX*P%&h(2>g3vFRO+tmXL5eVR*V{C<wos!V^H
zNmMKdl&EeQjH#c2K91#Y$0)xF<Mo8);qa-+%Q$T&mXdbYZ0jqed&<2sa_JAR;S-y$
z@DEBMYL3lySc1GTPhVYg?e>F=_5L%WL1Z?c;I7ynS2<o#&I#v<FHNmwXikb_H%*59
zi6O_WyJQGwjm3ezvO<wGB!vz9<ct_H5cwHUXcIPP6Z04*Mx)G~eQQlO=E=d!Dao4!
zLyq6$LpeRLAH1BK&m@Z<3eBcgVDTLd`<QmQ>U)7+TwT0hduFbR$tYh_x{t)^#cT_E
z)KcvJ#<SUXdHgv&+NF_m9Qk+<G(CDwXSrF>$fjB*(W#XCiAsLf0Nz`QHjaqXz3kZC
zLm4OlvP|`V&OU{3&)nsGlVL_#T9Wq<nK2nYc9B|>j+L3{y7N8ndc)~<IY#b#9_M>}
zDJ}?63a(@l=rQ^9$Ecc<u9YS!cv^KDnR;6doyx&7;LiK*TvWcc5sqG<*NRjJZV3l<
z7{Lpk3i8W>Tk#wK97#zIoL4T#O)C1~uIr}n;-b*sfSox`iLGrr<cAl`3c~@+hsq3A
zjyPWJG=S$w)@FXIU+$np@P^Bj{?_)7&YH7b0ruvcP20!vj>#3lJ4<i}&1L^T0G>c$
zztE_xa;)_<zx029gGZh^!Q_Dn@;JL_4PsMR-ULFQZg6boGW3l)r&8agfQ_Ce#C0iv
zW6Tw2Qg>-!6Brs4ZU^f)8d7>wC6Fd)*Ak^w8n(t*t--#T2G{SN;QB)oTz6=K>Fo^~
zQG(hLTJ0*Q<|1BvUN|vpIJE@J9q6Qx7wU1LOya3U!tRM%`N2DG=Z5KT^6ww~U9!5v
z)YgjqD95>_PxCKqCxaK1fUULYS?G07P^oRFT?QXg0Dx#e5E-t?lo~e!>)ujq-4~!D
zg9xaMY`p15I;E81K*uh$#VI_YOjL|l7=u_v#2_L>Mu`oKPbiB^Z5pFfRHw=gUX12K
z+G}yFx5%rnJ%hY#sM#i?wMoXB6O2?Mtj+19Elw<-;Kb4rwfZRIhiYV+4T&pXxNlU+
z=H7g;d84gdwgPO1B~iDaOZ8R+8!758D%$sL>~}n^plOWuDws5;;_8f7M%X<$#tk>m
zaQ&f4u0JrwuI*!t)@!J%v#?TO{#3-n-?E&TH!QZ4R!2#-Z`OhsMU7%A5bGc*Q!KeE
z&(CK(bF#<v6Zi0w?-}D)zVaE65vaEMoh@0nh-BS0VI&6&xnHFkg;}M5G&-0mD<c#g
z@NJBqCL^kYQ3iYoQl@yH7VEHRo0sW|X#c32a-dWpDpM-szyx9PFkh;~ky5KDlatDc
zqZ$gy<p8LLT25Ry#PuowR$^T4S?MjX&_0D*ad^!z1}c>b(+6g7xBxc&KKIZ95m}!G
zZ^&KYtpYZ(ac7AQfQ?>&+D&wEk~wl&TDfc#Y))75*ZznB7>V&|jPFF)v`WL&*)g__
z0|$0;{oZM=J21n(9ivQ*H%Y2>);cjK<_r&i+jC-GnQy^buW(JUU~Q55Cn0rEADF|g
zP|@>+bxT;+eIg4YN)!vvF1Fd(yonFp@dJGR+n*zvw&c;uIkj(v!t%vLIPDNu6fvhA
z4;`q(Xc4I})S)U#e=;nrRj_bN|0!W8<yu!6(Sr0RgKXRwZ0w1v0X&QeQI;`ajgmx4
zts;!pgi7QFtl!g=5w-A}a+-k^qB=xKuv8}QztZ7CZOWX5XLE+m%8(Go;2L=oz-Ftg
zT($yiwvcIjrGm}tmu7h}TWgTKiti=Rt&sQ{W622nrlz^>=G|PgcPIOIO))t=My=MQ
zml~E@!V9y)H=gw@uPJL?CCdw_DDIjP7i0J$g;tg6-(*$8qR|3qyskIeQym)2RK;51
z$V!Xpk-K=u4Q(EJ_6yh@6&$_uGQf=iryZ;TV-#Zo@E9vW;Hod0HRLT*ikzROc_Th7
zK`DJ`3Z4x`;dwwJ)S>C~@E&78tjER%lPD(k7#pH4t4b6>ln9l?GoC;#@<`c9()Day
zk=GAKs_JQ8?1dke0qYX7j>DyS=)xI7aoq|M3nn(GRdVP09mUsyjmi+^<SN))nAq4R
z%u-!C*lffvXR{)kLD+1KMY9OsO^{xdNXMD1Pjg`BZm!$6i$i<2v1jKb<5MH3v8=2K
z3(N4zE5h=MquueOsp9?m5q}#=Ur)SrP>@2mxc}FOi_Yuyt@?wG+85Ic?<>|b)<(>C
z+U(u_E@l^x@zSYpVW$~PU7m%MDb|wvZdlwU*Uc0Q-3|=vf|_5^)^=KStK<xv8|inc
z#GlDUYcMv@?_LSmxX|RW9*w|S!A9XT7!AebI993^&r}me<6#-|^DR;hY1`>nX3vr>
z_L!`UaKo<M?3^B@nHVzPWv$!c)anYeOG~V*<m3)AXGjaJAd@IkwfLx<H(Srm=_j%}
zF#6MC?>9#{>moX+R{+>t0N}_5bcip+q>fEBsXKixMb-)aRB>xDuA30$qfC!(W8dC=
z9NM>s{d;z>YtJNO6HUBAYfU)T5}tWZSzC2<yMfVL)-P0LC=FSsw%LzZbT~>;EeDE*
ziqB<DL(pQ?YJo(-0Aa8liej=7WGNQAIoBQdFtbZX=&qeW8|`ztnu<|!%`mo@XEKHM
zjX)$tbHA9M5>F5|*Yy@KGGvlBEF}s-x<ZC-=yF=G!I}Urrj*XGg)*VlpnnquvSAb{
zNvzZ>uy=dP&Y2AJ!p3ARPhZTD#Pm*Nj8Wl(cfF5$Z@iU>#u#yIvEoS*PrZ^7#TiJO
z)UVRc)|l_KICiSV(W6Vec5IQ^xfaVOGS<A3CxTWCS~a+&a0)%$LJV^j7RJSx)NRmI
za>HxzLTt6q2R59gOSJ_x9C<^0qqt<>D1gXU$rtO?bQcHqUc;g5_HbbTUUu!=#^`7r
zP}W+8`Bix3L{4WF@>K9nijffMtMZqr&;VQpX<6AI3jePCWAA1CHbmCDhKDB&s=iMU
z)P9*>hvt$7h2dN?tQqBP*MEX<J^7z8RmI!x>%d0)4K*eAp?GXevA_$wGX)PvheXc<
zp|A9o(jjTl01T7>B<m>w<%olr0fRS`Z6p+{1w;%c^4J7S6o#ve5iEkWki^1R1@<54
zG5Sn)Zp)O{)m#cG^E9G!vdh~K-p&1YzMn>AnpYRPyfm8z?Hy~d24ZWeCJBvrl#$vF
zCdZU(r*rPUHl;e+!&kesdn+uit#a(-D#u<~<+URnW{<6MYOc%TYRYPwkygM}BGQWB
z6Tz!r=S44^UeqtswKvPk<ve2V8v>h+xAV6^)A(`%oA9d0R*2iv$jSt7zwut)_u;p3
z;My7D7+Ooh>JrSplG9#OvaTb~z&leY%?Ykp?0sPIGN`wd_P6Clql1pLXBdozYDF@*
z4G#B223;wkzac#n!$<o-Cm6bUo3XL$*}wapJpbCCP~92h$%^XeX`Z^qko!<mGDboh
zItsub{ccsUG)iIgf{)W5$0|o2`b0tPJ2;4#qTpOItaTtKiUz<jg*2$~m>8mp!6ZI(
zsB93)iXx#>fr*M|W^WsbA%5N6QqEf71p}=LX2tM{yS|^B4&Ke;T92bkD?~OTHkQ}~
zk1a2XSA)xg(E3USCsrXo8j(Z^RokFhRYu2mFfx(xwrxG`y}3s;lH=nQ+IhzOLXV>_
zEb!tpOB{Kz#nB@x%rEw6=R(gww<6?KL!KBi=hoMo`sZ8vYK!`YgN>X$Zn-3|@mr~B
ze0fGTx>RE{x{(k5zz_5BpP6B4UO4`;CtY*&I*|2*ECpXoJR1aKq^Q4y^dfX(%Lryr
zOHq}f!tUUCkRXgzpw0SYRit8u)4CqzNPl4lH<VfpcToDNnud#2jA5<YVgJteF?Z?+
zt)-VR6M0drJ&mwtEb6nMp%ZDSqm;4{W=Qd_d~X@q6h&d<hlViw?hG=h{S;uc?i}e*
zN2|PsEJ5@t0uz^izo;hxk%d|eJI8Vwds<i(A}l%XJZY3-j3GT`81+p)_U<2Hd}JRl
z&#oXwuqFydfdmD?C^EzfRt2X9ADRB#jwuud*F5w(!a~<zPDEI(k%&^Yo<?(q@g0td
z>6E><X1x2p6sdLS<sBB6TFf79bL6=WuRXKGYcHK*{zQlQHAf3b6GOKe(WzK+9pq%%
zuW=7*e6ROIzs$j=lpk<rt9UqD=^Mp`gN>RnyVR``r!yQn@I%~n-!?{Oa=!ZzbQgrY
zYjB0RTPdfo-anh6&PyR-IdnHyWS~`5q&kC$M~47N`=VPibON;yG539^0_mTtvfks1
zw5^{eXi<1p(4uKBUQj&VSGe)eM|kwf|Ab@;ar?ARPUuLfb|K0!u|;fg2Ql=)M~4be
zW@x5LTxn@M0Ga+Yc%Q@b`T}kVR>QhDCNfCuAp$i;hbju)vIr%z%4jSc+Si8Z9P1+@
z5%QrZ>P**!m59!qvMt%p2k-bXlu3>(E@N$kIKjElR*ysq9r&`8ZTjM1xbSbeQ&I_>
zAlt7$DOMB*WNKJz8RnjkG0#_t4b-Yiz2T^iI7Vl3ZrGc1^BpPD?BF$Jb*aPr;Wdta
zca`JMEOX?gd5#@lX1<lOtcI1y(y2ydwHW7g9SF(L5b0)vjcmXnV&h;l2&~Q4N{n76
zU_(h}Gx*gy2X=j!ZrY^NOF8*sjPHeo>m9hf1er2&(IL<YXyS{GP5FEo#hj+#u<j1z
zy${_d9R{F*X0Z&*i<<H-Ht2qc9oVf5x9x{hu2R2P@rW8y-=$gK$HD#Y<N3qCPqH(?
z4~;ei4vUiKDL(Q@5+QLB<=8^0uixj=ek3bHliy|G*l52fRe;XW3|3zqY(255OczW9
z*7`8c5EW5Q5p9{MQ0=S0L|xf;umzDt#1;j0DGKkeza}D6p?#vu_UZvX^7fx*Esa_0
zwTNs??##d)q8#TaBRDY_YfuATlpGDFf_*FwbuMcZ;|xXu13D@|$QUrjlUeAgu-s0N
zRWL^c`)#Pijz%M=IpJu`IQH#T4*W!hG&785tSz@Vb-2aJXBK(w@sk{W>LkaGtuecn
zvS?#g>vg*In6ya6%mrl^8wDG=fCBM(z@{Wps@bd>j@dwA=rS;=a}fy*>d7uT=>ji2
zHAAgh*wyNw9-_l-q#+(hAAI~^;g{xbg_d}~PEl~*3P2iqZwX?st_3c`DODlpAA+)w
z%BU&QB{u*#R0GH<>!!}N)C(3%H*2$V`W>8_f03nyXR(tRszcY1fO8HXd5DVvsv^pf
zr~p5II_Xc>MKz_g=wLXLzPy7J$5Z4C;^{^Mkd|pw3?>PVnKlW}8LLDFs#U|Tsg$Yh
zZE%f2q;wWSStM1uCwk0O_w&BnKgD7@qL+6t65+h*QxN(9Qbc4T5{|VEva8+{fL4+m
zq3;%9d;lq91UCdW2t;B-OW%d(Bdgd*$qhIw^wJ7TC&3(r_;DqPJ=I!HZNyWbnqcQ{
zW$!0*-tp5t#CKUazQ)OC7CG|R94|e7jK`lm&WmY{h4BVG<uo4I)|u2@>bmw@(H6g4
zeWSehL@Edd=Q=#~_%hetxC0aUVOD#QLdZ~5vp#ewLs%^o==v}5gSw4ZEz&6+ij;H^
z`j-+2DyW#@A#+57y1gmpn#5}8>=?l#_?}>#$CdiRWvhH$;ju`!)RQ~q!2S>N#8W4c
zt|>+zO2VB9jArXFHn<%0W0GMF-?E%pTJicIF)D>$dMQ0&biFuLKP_Ar)(m-3*-$Vx
zQ79DKJk(Ka<gsxeHCj<B77p&}QmtjUOcC+x($V2_Z6s#(#2VYG*Yd90ewvl8kmg;i
ziGp9d45zFi!g1v&gN42tm<2C_7D|f4Du~7uQBGk`<19ob7zv6%E`@`r3z1JKjtkak
zAAq8Q>y!y})w0r#uq`mJDbZt|N~F}9j>a~}=mF*0d#~lt4<&q`X>;<Cr+DyRKFxpm
z;xUd)Ms#gFnCZGCJ(~-OZqBo=ht^;@u46Vo!r6M?sEd^aHCD(pCG%};6mk6Mab9?C
zgd1*ZaJ-cd6-8x`E)7|sDB36N74k0y!F1q2P)0P~E8e>z%2A3~WWc>CNMTwq<Ocm9
z8;+&~6LJ#;<PixAATj}1@?PQp-M?!Tb&USsE0?$>_Zju-F81%apBG;FEt1`F;UouQ
zikT;yhlnQ9eotH&EFh7gS*aoGUQ@V)nsT4Y#jJALb*k$LwnH_dl4ximuob8zo;cQ`
zh7<TejS3vxzS=(*gITB7gH7wi8WVOOci;Gvw0efz^$;w%AApS!!5CB2%ZdochV)K~
z;<You=Gf&y;JutXH70cE%19?Nq3G=UK3fAlA!|ZrYE>|<7}F5QtPqz}gtEJ52DKq$
zgq{^vI~IEw;v-7!5y$9wm$4n59q+%1AN?2CQ~z7v;-CHgALDjRlVR6KI+qF9ur*e{
zLyC2mA=rR`b$HWZdG%#RM{mN|SswZ3YaG1xMn)!t<=((9$d_W_GQ@K!yG{MO_aLe%
zYdKzhA8-b#R1w*fsnifbUi)HPf_PiTCLyINevl{}*r<@kQxnD=T(^uKhTGyYh;Yge
zC^5aX$F`ZfSXh3Z#f2w`r?O(z3!W@QIJJ<{kc7prT9EJDV31nNj#W7YUMd4JG;Hk$
zB)^g`)SuHbuLm26L1K@I!o_AQU@D<q9@&t-?H<k8F`1IP3POy-6b0VFxsGg=?n%d(
zxt6<c`V^hq;(V_d@|6BumlP&lQoh#&mZQXAs}NPgXY;v)4pvrps~6q2k^*22*kVW3
zhik^@z&X_DKwZ^oc&$+-7s0CHG{}IIVp2v*n!q4(vKDNlq(C>dtelEinpX~vogy_b
zRlAcz+Yj@|!b{l69YaLYO9UI)z`*JSgUx2iQ>?E7UY@>D1zwnujFT(hVx)PHN>X9z
z)I4AL@+|j%a2xIA9G^<Rt}?h?Xul{oEcKu|m}k<VT8;N%K{~H}08)l3%zYByKqEwC
zIMOLPPd*R~qdqxKh$OU+G2qppy)x?ZNC9$Tx9!mO0}8lYIk5jDtUh@Hx(iTk0|w`M
zsLippf^ZiJHZBFR3Xg9iefd9;!LX(&KC$U@0fgZ`%Ihp)3h4`qR8j0u{ibY(7ar&~
zf+P`Q4~KT-MAp#r5s@?G&f(Pe+r!ovvQs%tvzxbF|C8jJkojJy+2}xTao9!FBLVOt
z!BhxCp0xnB-U(TzWGSc%V;ovAseJ*Q-WPVt8W_?dfvZ%eTc$`ceIYRBghJUc7z`RM
z3d{_mu3)!Zu)YgndE*3=7Deg`xVqpwV|?j1Px07eD@-)@peJ7%s%%`YU?ZC(PvL!t
z6E9b=87BT!bJkiXIJNv;X2$O(k52H+cV1$8y2dTHjxg8D!$Q{~Enfyg=EK~Veuv7_
zA2|rAlm>RND(ZdFtkyv!B<l;(VS6T|FWwg|*>I7&ytv>J#Uz7T2^JCoR)s7BpA9-*
zs>36wB}fQf9kqBTyLY~q7he8N8vB!QMf(V~E*Ll!gQX@aEO-l#@$!bEW~h!)dW$o-
z`@fEMC+la0ONk08q8w8IjV;ock_TyvVNDZ3)588SkLy{aVjxp;H#C5Wkk3OUo8Y#a
zehhDFWO)~nI4A;XnQoODJf;Af5Y?EP5Z9HY9wI#NAj_0qH+Xb0TnsPUyE=$Moq^m3
zu8=jsD9=c!R~REWTTZ+ewK>DORJ8=CAU3900ax&TLL^m0O;%8+Ozbjz`w93jUp~f2
z)sv~gn0S*lh&LN-He<BmKHxzH0$j@L3VD~8l?y12WE_soeT#Z!2iA-rW|40^_yRk2
z-NMAqh}pxTIO_dSZI?kyTMG^jp8lMXdSA>q1+WP}JACmo>xg<~9jE9#NsyYLc&{M%
z0(@`=$wOKZB|31xOa$VPIB6?HL@uLWL@pW7A>3EAD6(d*!_MvZvbgdpON&o1vaJd(
z!WmDT0C`wRwrGu;Xh^WygmkV<m&{P*$-M5G)xK_Vx%X0fffvPMQ*@_HGWa{j7KP%X
zTV;UBnv#g2-A$<0Q&5Akb;LwrhgWJuohG;3`je;~rI&X?+q^$GFci@gXlD#a0;V1!
zo46i+R>EvtuOsBC;_?B{YWO}~0*;e#twgrqUD+WpE>b8{q)xtQvl~A&&Ote)AEFy0
zK_l6S_UlAWisPe7V+K-zU;V9@Y4uhaZA@@@_AoB;!9z@S;39n4fX!K&N*5q@bB0!z
zTru{$K59dAnZqal2vJXDE2P;1pa0zRs5Lakipgcs^&P6d*p&8jcJ+!c!N&XWv-hZX
z1yRozuL-&~9zCtj6W;5G<tTi)-GUpGL7s;1QB_EqLefy;CR8RMZa@?VDFun7FnJ1J
zDxnJ&iZK=ygZIk*y&p!>CV6iZCn-IjVJcy&UE)wjDCHpnKm=ecN-$Urk%AOn3Z-e@
zaP%|atPFjbq3^MTsBMV*W8(mJCQ@vym{{31s&vHC^$DsmLWGlqD6UfRRoqII>#zS2
zOtg(o)&{Ymh+B4TiesRqc(MUv!Pbgn*HEHnNb6h<y$<wJCCeet36tWvlDm*5J5_S8
z<UUOPI}f=Nau1mU=OFjt_wsw@AahEV3z-Ysb*_wz1y{b$m0C!_g(GYW@?4RMGO;t_
zH-6^`&%g2-m1@FDZ-rOqpCTC@??-W)r_{HZV6*XuIsXgH8wfVCDJFH%h@&U3F}wH(
zNjydzEAyw0@#QbP!uSqDTq!J5WH82{!?RGsZRnxSlq&$pmB4daZO1!50H1<HSf*j&
z`J%{}E3UZM^9-_Hxbu3TIsw(m@VzooxJ%Z-R0kavBJfuGVTBY3qGHKhPHbk_zw^Vi
z=2q~|pc3YoBr5Lw5rxzz1Mrn_H!kt4KVn$USM^1;%DScYqna?JS=LMl;8;dC1<2Uq
zZyE^z8YR%E3ZtV!TMU^-co!i(WvSDmyQ;KLDc2qP1hx8JdRZHhc!&ULa2T8zeDOil
zNEo50DW(b0NO1Zz)lk^&cA?vWv<F#MEcSBImp>Qh#d*lR25=}rB@duc0#feE-wWXK
zT1Z_KAmwD;_MH|0R>+t*0$V*d%8qMe9(?c=-+1T+B<hjGF)tqfHl|)h<77(&&o>Kf
z<N{#l5}3x9uWyt}PBIg*aN^t4*S689?nWz%Jp1&EOmDAo=Plbg{$d`8c24{AO#O5P
z!4>rquf8Y{YhR(S|5X%nhtn!wFpCE)*@7%M#GEq%>O$HA0zHs6L~W&pP@NKNPca=q
z5)Jm<D}g`a)6mZC`$ptLWI+r>F-9^D?t3RaJ;e(zd>tEy?v&3!V+});v0!7x6*Eo!
zbjlRNow}~7HL%d47}+obpt6PJhS+dL8C!x)sNa|ZB&`o^=1LXfx-e3JV8<DH&f;?$
zMiRWG-8S6uwjXAsc_VAxE+PqDbjTUgtmFKs(ExOHu%i%<L);8qDW5^w4Hn61FGQ2L
z!YFb`K+F%-Wwj9NQZtYoF(_V2wsEM#l*QvP`5r!p(LuTux?Ulz3Nj<1C|@=&as&IX
zjrr~q%lz)=pG52m^>~sKi!X3u^+l$xy>6&Muvr?!8!(@|0I=C)iP5b9o2|EUQR9fG
z94F@gl>OU3g0&4QNt>^K<ypoWHFj+qW%g(g*Y?GLUum`EhJeJE5l)dZxzicO<$uoi
zmHNU-@Wtv4&v+T?WSLNPP_Y5<@&G!WRY;bU%7mdgqu3RNO6Zb!3$!3#6X+=FiXv~d
zsFg&4D5$wbQqS6&XR`S&tbH7(DUyJu3Q34Y;y9!@L>jJw0%%NW>tYJe@YmhJq|aiO
z;eRajZNw@P7e(+21-OOoTkH*S1h!E8tJR?=!E2(Y5xG_%F*swHn!1beiCbA|^}=!D
z_3|Deswx0J3CAKDfp`j%2}tTe<EOU<-8JZSL;9-4jV27}f~X(ra1Drqr68Iq%=|o|
zT|Q843~Xgn)P2+_w(M@5-byd-H&zQ#c@t8p9oI#?dTfpV{9nF{V}WKgLYgo0!ik3&
z-Lt3PDHFLo!DjQjRIjrcyh2Rs6tvQV#wtfneU*JXK1^g1ysq&lfBX!e{Qf%`nT%LE
znS(LmBJ@K7SY<ji9MKeW4z8@zpvBx(8RbZSv>^y>>AKTVrYPPI97nt>qJvyWJ4$;Q
zs>`0*G>q*6SrnpLAgcM}VIy(PU?L@o!VYI0!`eKo&SkV)%k<I}I@uzfbP<mu(-fNo
zfYG=ZO0;2uTuT>)vXESIX|w>KVF^)Xples8Rb}0ztkXylO-VVzP}uN>2*-z(vp^Ji
zY$Z%_ry}&kl1a$(auqyHS{)&CB}q~GP7|f?jM`9-BNj|mu}z^e4b>T_j)wFwTY^pt
zdaaPQ=8j^7WO!(`(6rWphnA{_`jrWuTw2t)ltGuuma|T(s2NO7D~gxEz0u-0_6;SA
z*SJiW+->OeGJf^5PtoynRHK;43eOz*3YEzQQKMF<0GP`hY&KnhOD=ogD1<X=<k<0y
z-pOMeKlLs4Y<nNh=d{-5`0}4T!$&@F8`XwkZH0Ah@Zq8{LtvwQ?hXAy@Iaw2q)x8i
zoGtE-r6g`KCK1@GMOUS7oh!J^<GVs<8Cr8-ny~G9VX6UZ%MjOuN>y>ILfVG4CCkDI
z&&piJ+VUD}tBZ8A1#)fSd>2(0QYDI1BnfpCE!xqs4XG7H8<(i)t`sfZ5_C*)cNIO&
z1XqTLe&uXdQgqmovfiZFiVPyCA{~hmsEr7c2$@&9s&u{Jd<4A^h1g1{VQDI%9i0()
zR0T<|A66uSR6`dko>Y?ULTxHIMEGt1n;@<h>N7ztfI=}KbfMf(TSN=~OgZYI6u=>a
z^Ef;T)4zF?@s}A$%=%%@PI1f}fpj=JEi|SKzw*n^vecQQ8YNVtCNIxENFJq3ZrhFX
z{tAd}F06_ZUF;y&WeqmNT`SG0OjlSw_6*7LC=<=wi0nMaj~?c0->CE6dk@j;<z#7*
zk`&5)>dRvBP+?dH9jWp;27~5(*GW~yi5Z%kk|D>(fgY|Fgfoi2X^UaXyesrt&{=_f
z*TLi%yml1UR)kYWVD?pI@noCU;u5{iGA>;v&)a=18zYr4S7gAL5mZdSNK70Uu1OS9
z9hZPfhEgjV#xBaqaYKl5&SW|%R@Td1!~p;(`8P@ENSUYrIW0xZL%SLqI!7r&&qL-d
zq#k61%v+Y1QoM)ys8E|IYC)p-qTA%WqA^ex>;xp+p|%ZbBOsa3np0ZykaiT87OArf
z1FG}|$9#XFwv=BjvfjP|qRPPTMtw+$%A1ps0iB_sspAVNS6i^Mz13o*M#(d%jluLj
z%WwYImwEa4D<oA%-EQaP(!;E#$C$e2CcOGBjBI3s>u{rBqZ=g}UucALWr0n9u+yYe
zw<XM;{05O7qZVz)$4fl_{4+G0b#A+HC*5|A&(^E^c?G9F6c?Re*OAg;lAsJ^MOD|S
z!(dL^A1!98)Q2=7N`y)i;)W2{z(xkwF|54m@eXQ<GP+afin8osErOPKdM3jq4&yB%
zqZp~8d5-saU(_PhBq{~BCoFW0wGdHP;*td%DL$eYY7At+vc_$Pthh^mc^x)nwIPC$
zBy^`p6e?1raG|zj3(ilZ!8sy|Lsa5Wav&3>htS1>H>lKE>YO4!{&jE_k`v?9Dibss
zqckQeG$#$C+d(Q0Ngx^r(-bPBP#+J&q3vZ@d`&|t)dS767-J|J1c7L^&hFR@kr&I$
zUIt=@MIkvT2imd#TnyPNfw!YFkhoA=+;GYiy&!qc?2Y)s=TGq1GtW_}rc{|^x&1OH
zTi;=N|8=MgPvKwgU~@qwoD1(#U1?y`4?&WQ%6QDl`LD2h=EI0ou<<J2dHg#xN9ydJ
z8RO)Uyofq{LFy|>ejZ;;#rh!`(0;9^&s5g_=mJIxLV+o|A%d}nD2b@l3{f?3MQmj7
zIb<zp%{tmyMmNuKu`+TpVYO%3_BN=^2#uZ4NtKb7!F6lkgr1MceHU>t>QcmHlsX$m
zEKtFykW?T}z{jER8B2(Aq^RNe2sBc(Bm@?^ICf~%p${~s0MkOUw4XvHA!U<(bR!|s
ziHadk4MUAK0aFQ<G%gQp-c*#H3Ypr_PNq%Qb#UIZ=8v)H5=^&AvOGcU#57}L<J86z
zMs^!^?uW@;P#=d%1zZOf7r_<Ej+%$go_7Ioq|YuJGA$(tahb9c=CznUFKTY4B!!0V
zlrM%%ec{NdzKnuGO(?u{0A^ZHn0M@p_{KwXeD&ccs8re{GEOgF;I;WbW@7g~B#wuQ
z#9QgEu!&%!XL9M?1i-l>!Di^7n2`*dc}^_+2|Fi0gu#+A&qEJCO66Vm(ipF?JeLo+
zfJGfg*G+=!5TkfKs7pEg2^ckqSZoxLB!;*WQLRVV$k6LLI;%OI*_>`WrPJxqaVz9>
z$&G`!LZvxEc4`cLzD8P!*w=&|yCLfey=CaFTJp3KG?{&b_bK8`XlJPhb%;b5Q^l$w
zsgyc2N^BvqP%VnN#NZ0B(P-epDKfBn>5Dd(@}v?tHqzflAo-PplBP)6qByj|#VU~o
z^*x(}ni6UFxEYYD&;@$A!TErCVr*f&8~{8w8JU@<O@}q#rl~V@vIeXg5<<$fu;y8N
z!Qf|$N$*OCMw|iL6MR;tR=&_Z8i<_@l<Ra*s?lMQ_`*lb4+d-d>17!e^=m=}XxqV{
z>yEt<PrtOxpM33c;&_#a5x{X|{!bX0nIWn-H!-q#gTQ91x>Q#z*bIw80r8}zJG;pI
z%0o<#--Xj2Yn{V<;~~R)-~MiDP0Q+1UUZwn$}4B52C4r*i?;N0LW=n$Ye<rqN-ZI-
z#272&xstYX=8vziy4qr`y+Su%A=Nc9-@)S$6Jw-?*ebD&@u?$S>#=e&!bFzZ1njy+
znA#2P7PMC(?F7(KFF|-pEt+MhI`BEhM2M*(-h^?2DEKbLR;XC0MBqvip)H0Kqax*q
z8QA@nQH@I9C#Ia0qTtw&XfYWczDJQ_V?z`vQPIAR2yzr8pq0W4JrC^LRG_PnYT+dw
zRZ%<ec~WCAaTSx)F_k*e=p@Ou29<3VyIpBn==I>#ca@WmX4sx1O2OoY$SaYAu3ns2
z;zUqyQ73q(IHv^w71z2bz8qQ|5<&BR$Y*|F%`qsT7tR%BE4@sooDVGGqjN33@JHW<
zXc;RtY$UvT@()Qy5|Z($Azf;-wO}J`nEbafu+ctAc#}lb&t-dhp}tWYB>$bwEkZ8D
ztLOEsN+qK@6VX2LB1^3rBem;sa*FxIr+MV@3isZ5FKKFMt)?h>Xnpsmzsu-mh;w5s
zQ4~|HR!C|wCNkuiqucJVFu%xJdx>^$m2SF3JD(?aZNzw_p#2&WtW*$^exudric1|?
zC&xsN*1Tu-DMLJ_%p4SE4ne0Sbe16RTGUm-FppYPBD`~`bBK*FrVh>!l}z6RDpsgk
zr4m6}a(p7i$AaXA@?dFy?1#LlN`dbJaIht_I9y2*hZ>OB;KX1Hu&ETXsznDIV(^LJ
za>ZM4g?@3Sfraad5EG%L#9l#FHc1Uz9U*FtQk@#1u`Oomkf%8luFvITaPk>prPZa^
zTEh31q1VNxkZ6T!R40k+BqpYk#8j#=NfHqy28i(9fOCOURWt{NofSNTHoEU?ofP`j
zTD0hk;&3^6pF5bGF|2fZ{N5M7P3ljQL>1zs#*x`CK{cZ`vu6Wfb1A-27Ya7#@xKzz
z$TaqwCcw3>0xg&5uCP(Ckqv^4Y#3|?C7qnwOof#bPk=xrnL*4Nhfh92{M{<IUv~#-
zuS%AOd_T`~oOcD+#uCLb)+WSBOcWcOcXT=(7MA8|tu3(Do}-&D(DMtVeg&1h_!JRV
zs)$q(iIAdStOd<i7})5l3k+G8db(?#g(C+0BvdDq(J5i#Ags<p))t(zVX+VumN7YM
z9AYg|Jc99YaJQ_4G$<)XvLYM4e4&KrBPlvr+IOfBGbkX7DHosid%a@lr%^-$y`6GU
zGb;3ev7t*PWwA9<G!B2$Wg)G~3ed^apb}Cl#6p}PaRpPU5;aDtPL5EYw2ba?jP42@
zu+F@4^ig4L+2QgG?^0aW#iuPgc?<8_NH+_kR@A7NQL6Dc)o7GT(x8&msMadfYB80>
zAZl>AkmsPe58bLl_Ek!OHu^2BFql~|1xqaO4n`)0R2+Z!<tON-bHTPIu5x1jtE9{`
zx$`Czcb=NfCJLUPH89xVnmPm6Y}{FVBY<Nr&=>qN2b;dRT%1vvN?2KVoDsQ=$Tl(3
z;`w8LfOl<nP2EOoZ2_^0rAm^FP^~qHBj|LytgbDyu(C|2+oIiFpw&G|J3mh9=TXhD
z)*=!kQbE*W`T%1~LdTFL$iRA~@3*9Z4V$MPIv$CX#g~N26qvhUayP6V3WT<DC=hQ8
zftCpM4r44PYJkSXiINoaO^H<^A+Ub!V8+U)fe5H>(6$L&oZ|Bp{FJ_3@z5wk(7zdU
ztc)E1T2!=uqM`{#Bxoc7aN;oBn4_c$x%a3hn7EF_0YoKE3b1LCj5VoE#*FTP@jZ&I
zE50Ypeg{@gD!opI@AV4Mp-@?j5iFjR%(Y2%ftDUdx+zv-VlzU;PE)bd)Z=mLwJ|Ey
zD%EO*N)i**A|e|hYS0Wccc}M)LP6;OQVjhT;||U#W8;R(i12$~ew>Bnmq-#r5>Iey
z`4QH7uP}A+)*&&qt+sO68n79z;cTvJgUT5f{pNzrMr$?~3pPWh^a@h<#CgQp$}7~G
z`>_$UTE}_l+0SzA%%dFGK1xK)LaR%w*Pz?0(@ncL-^H<nnl-$%@pQ<27xfO27}M8%
zFhgzCf!es1r$=QFK@RbejRxs&_25%aZWL>wx1!8FEhN**j_ZVN*9mLO8VGHkLY7p5
zkgl@<;7k?OggAjp62Qe8A+m)VLBD7WE~ei)_60-MmaXHmRAmPC#U<cKG!Wa;xNvHS
z3Vq)wbj7?tR8F23MP_p8k8R|H36C5=s+cGMj!1+g38vm48f#LWjHvHarmhtl6M?^U
z>M2-yRY)^W*2~Z=#pk}ytLk?XG2#4_bO{_zJLGPKj(aV<s%?o@8pLLjs@+CC*+xAX
zqh4#!sMo1gt3+{v6%$ncFsO5QSMaiokfTgb!RQ!#@oP^qx9}oSl4GM$mRnD;w)PT}
z2X6`_!F5dHD-~?EjA^{JU?b-odDtAV8JxTDyB!t8WpvsvvF37a-giBJ?USG6eRu6+
zq?%yxq|#x@ukifK$9U+OS9tpH5-+^E#L?q(tag?VG1QWTO0`O4i!`ZkkC!8AhC*f;
zC;^uA+rHp~4BQzDo{qZERmoDpv=tU%?iryz1C245z5&uTAx{HXpo+1A&%%t5jcZt&
z5XF#0f#6pPMkSGwSVBv@$X;9=z)M6hj=s&Wc<pOEQ>gZ7$=fN~-@(~4%xXnZh@gxu
znYckP-4qdyiGf}q$+?1oTLO+sjKoz;Y*3S6sx{(foyurLeOj2<uZ-;o^`Y74;rP=U
zCcrz2ra77^>SSp0zsTu`5OJXSzz<yF!qvgyHO2Whsb2tniDeYq9wD*gBxaICCaK2L
zR4ZfDtK&?Jjx*Y9P^l)=DiKK%%rP2uaO(KOKY5J9C!P%&&Zfyq`vn%3A7<PB+mR?b
zE7)whZ`7884O^jU{MG`Sff8TfP9!5$)|OWJ$b0YS&wS)(sEt@2e9h5b4HJ?R%`s-i
zr`W&iAa~#J9!5udbmKNhjxF%Wldtgg$6w>A7iT$gbdlwy9^i<RoN6^8j%=U$u4S|!
zrEsV87ec9htXjA=NFgs;s5H3@vW{TduzDO$y$I25Fg7D}uY=B7sQ2LMtI(lfD-~>H
zNs?lSGAcZlBy_1NF=WL@a7o~-;0Kf7LJ$>~f$VcJHzlYEGei;>&qaeN>c~PI1*;XI
zFqk9!Zi|kX78#%~8e<N~JUEH4Nd*%dyscmwHR92T+JrE&2WAcmNex!#l;htP^0tz;
z!Dm5NLcR1yRM3HuVbD4@B`vZf6yd!GitZj@C821h<8_TrwnCd%!cC%Mh)jb<vYV63
z+o?oNl4Oi}GETkPpb`r!OS7Dqou{KGs5Sv#r?vJ93rmkNv;Rg+B`Mn9<_+_WI=9Ws
zrGm|t4sTwp|IHiklXJd_cM(Ngg|!ogANc5>;hwuc#AC-CtGzVP|BI>Wg$!O;$}j>I
z0}U%|Yc|=tV~mf!^AJDvF-K;*oSa|aJI@{E8xOt8V^1CB#lxpqSm<CRr&=>qD=~3o
z5M%o4f<bGh%=2W(!iIsBjSnO_&B3)HT~%hE4N=a-KBc)^sLv}|OZo#`S`hY<T8t5k
zk+3g55)uQkg-RqOLtGrm!Yq{PKm|~I;a%0A5+CwYu|++m)Gm%fbY*QR$*DvpfQ%v}
zr5mX!Bu%9NoI*o5mryju#@M)qsm4eW5jP{M<3fFxGIL0%j~IHH=heqTu{i61?}0cU
zoHR<=iIT#grHP5@15cQ?JWUt7uTSm!JgdOrG>8~P9A0~5d7HVFQ}i-Lonu>VCx^E0
zXL2NB?{16P-(_{p^7J#yeD{Sp;?X9{?N^xGd61|+a)!v}a##<SvaYu@rMfuZs0$9|
zHq5oT7?+4}kP<(_>M`X5@BIX~-uxk+do?dy7Y*u_UIu9zbWY+}h^tCo5tdX~TvlFO
za#WsoG-G9Yw8GA*UEF)kUcUd1w}a_&bYY&yo<Ghvo;b>5-#y8TFE4XyDI<zJwVI_;
zt%Vd!&5(P<V2XJlbW^md3xz;ggWgg|C6X~n#$fW0&|3~80%C$at>jVwjzMrFF=z~t
z6=D+xIO9mrD72>~3gZaAw8gbW0ofON!6vk=w3vt%Tj(|<12;`6#wMa-aIq9AEC*ao
zIRY}2Mf$=F&`Y6$Y7=Z?u(b$Nw^YWVwq2RJMrceb4$skNmDN`S*Yg2za_NUOI^@F9
zuRr!B#bhu^S{_>|EtUsHf5!N}FMOW&=%p!Hriez2HO4r!dxl#NPIB+f+qm<cyEu4l
zo#u25O^b|;ph<(y3jD!;e29Pk4}TYD8;oq<Mz5Ql0c_q#E0>K}|H@h0-<P8HcR?xD
zKmzEk0XA0atR0Ja?>!&kmRmo}t4E6qK?YREa)?L>S}L|JK>$1sEoMoC%)knUl@;Zs
zMa4d!(X`6;k%Yb5cJqO^?dQkt&&f=iS5D3I=u;>7`nQhq?eEO<>X8m<uSt@OQg6gm
zDskYS3{5V3SJ3K<DPzfk__wq}Tl~axu<ve|+z#n=!hAO5w2(nmGgvEBBIp$ge{reA
zX(1`V#ur87axTahB4H(awiMtJJFsG>6e^EPEt~>yij*xfWhyn8M-r8R(6|W$rs0@}
zN&B7)?v+t3B5D|-QK-$p$Q~Hm9sqInHD&g@pgr(Cfvl)8`9iGPuLtY(ZiYUjPD6k$
zBE(Uc=Wx!ErWw6nN}4&WL`*d&x&6=-w_m@Vx8J&rTi-U#{=HSI6Bb4!9MCkybsYK0
zi0p+FZ7bEODnIfU-_Kp&cN72MCw`TuUz|hsOcoK2yv4v~lc&Wu7i`YgjoK=(3D6ly
zmG-fOcieFwci#3PPMmaMV!Kb~8@8An#Cht%)Ny8%-db2-aSWA;64k=2l19R+K&LCb
z`mz$eoH7!@j<FgCcJAZH-?@*U{7_EYwRrBeQ+(^;lYH~xd7ggy7_)N`nIEItn55pU
zlEiW8$4l9B4g4IzbrrLwtQ-~QXEaDz9DsCHSj~&#YZu~15EYLMR122|Q&_uL6Y4B3
zQZ!bq3lf-Gl)K9&TFDD4Eqn)5{-Cl~8r_wWrPh=ta=~wF$et-2;l9e?fVmvxSC!m{
zmU-NOWK@X9p}A9-+zXYOvbqe%o&dKBc@MN8D&hlESiOIJl-T!dcE!j?5$l+s0i8QX
zCrwGy9>!-()D!MFw2M1#*ulGQ+s!REPO^7j4LhOGC`d`24A=H#^A)nCgx<*!ddn4Z
ztz#N7wqi(6Iw~)A+5f&>{L3%?CI0TmewFVWTY~M)b5r)VRPg-G1Dg#2jxYGHZw0Us
z1S?fK$Lid1(|fq<j!$r6&J|X{2D}F4eJlN<YoEnVS?pD8Ay27UxaiY1*i}dpC9Vod
zRfvj-=~RRsu(SfNtSTeVE8`Vm*VHK2?HuQhA3Vfg{;8D3m1Q1(_9S2X)+~=b`Wi31
zG|R%m3{hn}^|2XhwHQ+=)a3FU-vhT6zUE$q>NJdQhlzt>5Htncs*;QbInhKy>$|T@
zL+Df)6F`$Vklak61>{TFjj~`IF;K`ef-Nm`3$maoIXyN^qsLJZ<rFU~kH6`UMg(Bj
zqK2as-vw+<h`mr973$kza-Y(i2%qoRlaS2^Z5*E|nwOTy0Tly3CV-0;U%`eYjM929
z^m;j+?h<+4p(2jyX3TZh?&R(pcXIblQ`~g0&hG6M%&0)6@bt|(WT%AQs}<7KCTj}~
zdMi~@7va4{k|2Oz84)TIA>wn+l990XaK_|qb$<SLe~h2~zW>DG`8Cq1X3@0J^|g;T
z0BmFf+qf{WDP!_Y8Er6I;;yifZq%lOjj7N%TII%r@8F(y{2-_1f&_#wyvfT$7i?QY
z@l%I|EoIn#w=^>{L37vz6}N7uFnNoWxC(Jyi7SF8VKJp5Ea$?BS$OIMj2UIR7O{P5
ziu(>sbKl+9gS2_&*gTJXcbRWJ{31_2@ggTqjFZLNi6$ngPF1i8h<JR*<5q?FmzDa6
z(3~-}_jy**&@FOnK{2or8FJ^*BE_*1+SJwz6^-*C9`3!67gT%o1KkbPAo^{ha<oAP
z;|(SNPAR5t3+rMl{lORv8Ybv%=w`_}b*e#4Cu)S2eRWzH-7Ac45A~qqFNF@B>w@bk
zI0+G-^LUpcKEr4hMlvFU7em$)I%{k6I!D2+QjZKfW-Qkq8sqLmH*x1p+qiyDo$cFW
z7#BziMf9$xcgoONNmyH|(ps&v)~?b`6P&S7F~l_`st@+tOA!3>OCh2%DkK(~&4~PK
zDKmFf`KSN&2l<;H{cV<78EegCJ-_XW1e@WlZd#X0t}w7U{UC=6zH>b0!1kNC_Z>gV
z$yp&w!)?|3L9Irm^n_OOg1A<ulPUuzgR<9MQuRxPKRoyx@~$Fl5U(mpMM!EwTv6f*
zM3s=1t%<UNFxNF4KB_d1E2FVxTcg2_nFc@he#ejfcuuFg%2Q7*@X(*W%%hLI%=1TT
zte%{rvVR&oT8B8e5zM~q89$g)-y!r?A-BQTDy{}jkS%=0Z2_Wz02sJ5TFye10#zC$
z9ZJFUVy>}oe_NW}1y7km3%T^pE=C&Sfj(D(CsH)O1{GS7K^;d-(8rOQQX7HBPH5~1
z0$xkAuy9z=uHw3i_5|%{QNJk)(>B6qLbtU_Z*2i_ON@{9xc2&-TW*=*&bx2t;K(F5
zc4|z-3i}n33_2;aGunqOolc!rr_Rc1h2`a#)>=a91*r&8Q;0_CTlP8x-%|1(xJ=88
z4Wj{Q<0z0V+l$It6w^KFIPkIU{L|m~A^!F!f1Nan$f{-_Gx&yqjhvT)av@-&o8P74
z3I&_N*7Er=wvXMwd*A!hEG`<lX+8iO9kQ;Kpkdpehsi_AVT=wmVRRtOgec;qQ2i@f
z$pwE!6tbS+Qs{Mp;8l_YW45RQNj2!xIHU9otRkGsEytEE^<@}+DPpP~Gqa=0-Fqjv
z`>&;7Q;r;6<vWio@c5&PJpFvciRT)uUNcJPwlVCEi18hP(9-sbX(>JqvI?;cQH2%l
zi$n!6u97hvipMzZ+unwO`NC<U^bao!>Sf`#03g$^-9TIzz*!kMOc)vVv(kQ>y_93{
zB6PjN2vnOex?8B!p}h<zUr<~Nv;*QyaM&z>u-j_Uo_`JPyvF#*GH<)aaNFC)c;`Jg
zaO>?e?AbGh9jz5tgo92__sKThXVyr239GG17MCk5uEwlomdu0^4HJVIp`Q~vg>EaD
z=!F@p0Lu8mzC|ManwiFd{q2q7t>Tjk`g>h&`qAzD+%JEezx5-(gB%zkjm)4cv*}hY
zTMIT9>JxMEHZfNK*p%U_Uz%hh+Qa+a^C?zV>U2A4xW^B5GgJ$~r9%8%3(`~B_$Vp*
zBCL}x(830!oTwIG3TPLL$QO;;qVSsM5T}ZbpqB_qHFUh<Y6)zR86}ONB{1Ky9D79=
zJrXe*M~sbD*t5UMo*z{{@zXhL^J~2D@Dh*y(Q%&pqGj<rldRq|N#phrqU&RF4bBDP
z9Tf@1;)3HGbYE;i2+TvlJC1`Zq%WIOZs@S~Z)ByUWNA}d4tAEjl@L9ZWuCIpRr+kp
zkiK!BkAsq1A&-U1l#&-VFRrI79<jlew_px*S9-LMF5nhU(Xb2Ly06D=-<NR5UE8_+
z_P4Qj{{&{F5<Y7$$7ea&Y6mh!QjbVX_3ab9wm8aH{xej^L9GT+_DI(OtLuPEmHhwT
z-k%0pmY(;0;O}|gbIx6I&#bJitE=|~=*CKb06~xqE;21@vBpx<p%~4CN48?D&@vj2
zEXfg$01+D5o>7FQ4<3#zX=F3Rk-}&#BblVc6=(t=8t4WZMDKg;OYZC4&N=ThAKv$D
zH>;|%s<XPQnspJ0s?NH3^WJms`JZR`FR9|Pun7xE422`2EwZ_Sx+Ido1#s#?sqhOj
ziWzo@|5cCAK6wv+^Y1^w-}$RwXY!+m*vYb*h1<dBM%`4fQErB(@y!RDYxb8n05&2Z
zJ2P~$Lwxb4{}b}zG`-#^_z4G~sh>;E$MT9R3PmZE!J`oQnnYe5oNFyts?7Q>mM(sW
z>}na)xSDBK=0Bh^fMHLGBM&%98(Lk^mamv1<9R8mfn5h{X~e{GOlR3K`NN#)*@)@m
z37`1!DL(NhQrH=C?)zK3{;k)!@T_n?o?v%wk=CR0EOufP7y^>zXdWmuVR&2UN=*dD
zNy+?GD(#dM_$;+-DpLW6pk+d55RrS}6|lwe1R~T6It#UV;N>{0q*jO)Ei-osok_U#
zrm}Hr#M*0{^xjxvdbGi#$CZyi5%aN6O!3%9AK{*pvoO>4Z$s*E!;Exe0J+~_NoG7-
zI^<`W1lY=W=%<vIe+U;&37v`HK9~z>s$`=87I|T&Rb{LjQ$_tcz}Wz<VQ!iSV8{6j
zkf?8ChhaXrmQG;)#WsKJ&wZNn7yA68|L!|<Kej-B<gOtbxJAL{ptn>UU?S%G4L0;A
zV7tQ?e*Dj1+)*~S1{h-km7TJcYNUgQ;i%_HgujO?UhWJ-Cq$tVahNg+M8^sN4NO;p
zIkzjhW`%8~|BZR-XD#UnvObJ<ea?84Kzjl@UH`LbE{vSgH;xFQHH?^8hKV(0;+2TW
zxtNI)ZBBfAiW5J33`QB-FKlr7+ow47{5!0_I)OgEK=iqJqI=qOLe(+Kb8;KzP?1-i
zo7$ICsWQ*02z-oHEA?C}-$waL%1SlAu>r&qgccf-EkP1PXVNgY;I~^_7l&+pZ->zv
zyNuo#a9jrb<UPtK|3aI`KK2kN@0rEShH&x`xIs$3;V&eT3z8XZZp!haiGg;QMd1@P
z2dfU2girsZaOzEEuqNI;F;g$ZbY&4&X3rM6Rq85z7{%c+r4b+^K4nwX1F+2@mC8Ry
zaIi6fe6`PC_)9;|<+s=Q7ytSdIu9%c6EJgg!A7|5uHxEYqX!8%<_ef|v%u!+mKFP-
z*@W=9(InZ%1V8a(zd)z^0Bh?#jJ4#st6ghrJ13PIA*)E5EC$Y=4d{%PO6oWc4tga+
zxXMiuX*$JeVWf=@mork!R#Jb`X^<{t8Q77Ze++kE&{0}#Xm!N5UXiaL2H|Vl2#H2?
zHzFptl&LpzCKhtq_ry#++UD`k9_R5qW&4H8oc-N5Is5B<&d)3|{kh{ze{qhPlPyLa
zA4QX9xlgdPUh!Rc^ZLxL;E_{$XG$3pQ&u`5tK1X+f;iTPK#&)S7e>gfr8@<-4Lt)J
z7l&-V+T+cOJ8ZnQNw$^oV<)?O;_(SS_Gb@s@}4eCCH{A(;077#hHs0-c}BHKeQzcv
z08HXr<6MP)t_-(BuJ{o8L+JMm{Q;c3S6Dc%y!w4dt3_GSltd7zEJTaQoU%o(*^rjU
zM(c_c3FhkIXT36&0e(Qge5ph9Z+rYVf9GepaB72RUtGbSn5~&{$!!2O2hB8gm4%Dk
z@?aBK#BPHAa*NM@>gQRU`vjMldKjrz-&F%t41sIO3tDZWRHTe}A+%w|wI@yez&VZz
z+ljGHU=4YS%AgSERMyB^IqC*4T<3h%W3Av~Pc|I&p||B{ElJC_T`ljS?z5~#83KKU
zZ6Z3CEi-G5?u(9iIwQHqGWGD?eDssY_~@|D_A6UleD*At{$KB~EfIr9=deF=l=j_|
zB<jQCMq63%xe?!LWL4gh)M9T`DzGX1vc!0xF6LjYmL)Vi41s)g#D(vzvHJZjw%_S7
zZ7h!*?edX(5+48JF&=z;3Oked4_{w#Ipo_Z<i6b_7ffpXaNC4Dt;B<PZeZa2)~?@!
z-GR~{z;L7hg+O}0q`^=t9r;Z6JXhor9DNX8e8z)38f;KSD=CBt^R98)eOb*Gu`zyr
z*Qk1&XNzZAwVi2k0g8l6?{qowtv>(VFa13K`Jee$Tv+Rq&v#1O+M5G5at&9%8wHyK
z;^CA9&OYKs57dMB294Vd3H?ikk3aI0+<Wp1T)foBh*TL;HEW8>7=0|tMXStdSBx;E
zGTS!J_wSkW{F`E+thL8CQkilWvmKS%C$<ppm?}!dQMFwqxj6N_9%~^>h0y>8J4zHo
zy93=xLL!4tu^c+s71+)V-Jzk|i|DTAbYD(M7BcL8ZKggs%hV_D<zctO_H!4w_?xGB
z=NoTvzB5bu_#(4Ea+t$+Pa=KT-N-x<Qhm!{!dE$OH#H5C`rtO3Sh_PX)%MoNZhgob
zZ*242vn#y(on>~<<eV^u&mW%Q)1NxR!=Ibu&}Z5(38daxG3{rNf*JWajLD>&$q=|h
zniz6|7xD;(Bk1*&-5v~w%5Vf}>RYHh^Y4{&LKZ4EM7VGc4j&Tcjwl<Kd=;73wEPaO
zT+xF8nJMi?r6i-fvai;1u^@z`&v1N<A-Dn-VT(XyxbO!p?w^kM@Bhc2<In%XQ`m08
zs2w#y=avVX1LWbzewfC$0N98ahL>aRJNijJ^5D;Nd1+MIK&n;*zG4GauX1YCkVXtF
z_2MOLpIq=YHsVQgsq-dMHmZsp7q(YL`hhc5zw5M8Upp68&_cORH$WCl+pSUZTo7?Y
z*3XaBhO1`k4b|fa+8w1cB_v6(oQPl`unQ!qrIT4E2Q9kG8SU5mL<@>J8Z-5y4>I+m
zkMQtl!1{A%dGWW;^UQzy7O&iOh)@3~_j35bIaV(_M4itsS8wo;J0%M#mPsq3Jq4`^
zi(1%N>+!-fYn=Xr6)wNF!)R&55!>al<5T>fAH0{xerAS+BZ)_&K@RH~8&CD<-xqP@
zCj{L#m{BN)!e>}4XyVfs(o7hPl)<ht7<wAba0r8ulBOYLGxbh_dBF<TV&kafAzDMl
z-?yI%cYoBdbVi9<CfI|77CE%pPAWZFncF3m%U@abD2=w$XJFOVbhcvVhFvM!vE}sd
zD-Zwd-F*4){v3bfulyPl_b)Ouc8v3N5QgXMYhHSNU{mP#-Y=%{2Mjhvj!(MQVm`Tt
zPd)x5s~e6y_g=zfK2UYaS2mthTP13lQ#3|le$!A|sjHvElvlz+f21L^+td`+;+5N`
z^qBE{lX8t-FGN)uR7*w4^RRXg<(A96B*DgB$Y`UWXdXdt%U3?F4opr%rweHu&TE05
zGj!90?n**uBd2pFC!QT(j*Z}Ci@7hH<R|W%<zwH>`1OCg#XtG;-{$V0pWsjZ<u4*x
zL_W-L>aW_JiHL~_?_aaFy2B5?z051$yTHm@J=&WQN0XS39G~P*KX@+>|B)#UEp}kS
zf_2bOVU#l1P_{NB*0YF>f#HSk2%m2WkAGT7H`JT02le_WGbO<E21<XZ42Pk5$sx;x
zH1(~YpNUDR!nCR?6x0<|h3b>AxdDeCFeDR7Hu9~ZmZDQBF9tRD*ANFB-nM+qTdkm6
zlpTVW>h$8`T~ttMNc-HhF{gfO#LxbzkMkG*$~u4l?|*~2kKWD5<+nK4RQGc?WlMES
zRyKn6yF~pipZVgSVRtyeaI}LF)2w2o`k+<mWR#x5dL?K4hDB&yTjhTy4=siiF~K1;
zEs8^ybf^ea6=O`99pNK%3&LBV{)g-%sW^p2*X03Ds$|gIfyux|-YztXJiB)^^6r3x
zU9as*I!bp!=yV`$E15tah@GXQhVF%gh1?Ofw>k5BDL?%BE=#KkOFG4|#fSLLul#`J
zH-3Y^^$&iI(PTt_;8*7t-&*GPzj>Lrez3;Qxg8F*g-_i*%V$6P5RZO*p6R0<fBc3S
zj4~LENH>MuzGY+Ea&a~0{JO9*Fl;->tdhpUuRY~>;Bg_3g<c<qsh__LGY>X{fig-1
z$mCMmt2*`7rVCX~;W4aKMqFCRGm7dpe0FwsVQxV<a<6jc1*J71<%ZFev%D$*u&9<i
zUyHJ=Radl_{)cl{Q>z=TnARHRqWDFDI#0OFOhWYUQ~vY+=nK5`!;AdRw@xwfz)@UY
zXPO=a*t~m0)AfLjR{n`MnQ45$U?cmmsJN0RkI@!`Rm+cm`ah=KI?3whHpZB8Zc`I|
zH#Q0N=tUimlPS0qLZzlsZLYt=n$!iSehJkM4l)g!9#atob5{`K!fZea0-2P4X~q>1
zvUom_DbhYY+gXjzQu1394{*8hgJu_rcigkS4HyjkW~R64$%Wl1U-fi4{%bcAW+vgt
zJySgMk20S5jTPGST`uV=-+1%eENv~*nLNrjenZ*)^V|G||NEEN-OBj-KYxjH&yDyG
zKK&s7)t`KfyJli$=Q=PKgU$RfWjG|?HSDay`g+95j%9gASndn!1L!FX3-1~UHXM<1
z{sR2oujf4eS<BM0mri(~@f*A>^?&BBir>u(F?jgXIjv?SP`1<>Y$^&?M7gO}*xXW%
zJP2oAC@fYhu7hZ0MpkH8q+T+cT3BK+h$~v?VhE_!#Y<{J_B?ojIrVM%#kGj&TZX^=
z*Z(MQzVXkvytIQkbftj2TLWxvqQ$6QvC=u{+^GGm-Rk!>5;44Fxc9Ela`^CPSXtZg
z+XkAOgi4lBt5lRLvL!39seq<>eNusqRBc&N0ZG_GX|A}CRb*{o<!Z70s^wLWrSLed
z>^uea#5Jmt-Z%~B+tsSNbYM`$gupk^N=PZ{H#0jMFxY`!7ba(vsaZJs(TLyv=bQZd
zfAtPW=cf7o<?r$9um38Exr@cQk8omfk;fm1dHLlx_*;Mce`a@RFoQ0i|LCXL+Meg^
z8wrp7sVTB#K)#dXQm<KCxd0b8gv&i)BZq+qDeAMQM9ZObmV2^Yp82(TK7!x-9ml<o
z8Tv!t&h&OXhPl8CDgnh6g-W#%E5IdmA|+?22rMieD{2b?Be1=t%r6R^Imd9vGr?VG
zlT8Q*R^yMqEm+c888VtMYO%JSS5*O08JuT)3zksPB-AL8^FmaO;Ou$f(V0Vh`LF*R
z|LK4EPnnx(lg81Q{Neg?quzauEmt}9t|$M>+&oX?n;qry?!XlK#@&RrS>UmUf1b_l
zyabP`s*x(%glglaas@DzDvwD`aT${8hiafBB6}((aSjzh#eYDhI02j=^jgu<Osm*{
zNVp<u@uZ3%`!VUPMLdYvS}<MVTT^`MRXl(d`knxG8hQPc%R_aa!S*KH_h`hczu)8E
z{%@!0c3Zr&bBcfQ+CO2w^-(_Z$e-o0Pke%p9fMEb4abiE46B=4yzyejum5n9-+bmb
zdF{f>{O&hC#`7;6<8S=eC%N=a&hnaYX&sigmA*n|lw5>dl{61){LFhaXT|&_5bf0Y
z=X>@o;p{t(xx<#_%YM_8yHM4*;x$*TQ^}($0H}Bm%b8o%MN``c6f_9Lo0_SC#e3k?
z4~hYKc%Q-r$XA>`(#E=qeJxVUna_g@Vtoo&R6QZLJQpPupNL__&%rd9(kozM!;3GD
z_>s>(!e9J_FYx#N`O_Tx=%b_siXMmu@iiO=WuN!s`uR9!|7vk_3xQ2>-dncUc6s=L
zFA^uSq*+QeC26klWn5yVwHZ)(kUfw{p{c5S_)@WkskH(~?ZP8cwqHIL*w1d9Q}WCY
zHeE;)C}$2@8M-^wk}Ou-rzpf+Eo#`g+TX*8R&HQ&313Q<DOu(R%IV0<F>)39Jve-q
zu)CV_Pk-qYX_jGHE&lyG|B`len1#8|F}?T*@th<6Xv)rg8R-#t;B&Kl{-+P|^MCXK
ze)O|{hReerl67C;x1QVLSHHH##1YG-U1hhc<Xy<EpR=T?=fw1Optq?Ewv^$Hk`8=D
z<5EROil!ktCKG<}t&BK=(Xaxh0-W;9bA!|=E^vgL3wpTVOYD!kAKn)2RpC_V?^_2V
z|Gw?)!lC=U^xqYa6D|x+E3<c{IF^OBHT<`O%;ArFuB1-Losc;{H_BB4a0;1&G$(+t
zkmi2WHA<mBR5G!=^rGX>eg2Q|(Yx+ub7`ew(ciLQ;|>CFcppRR<hmkhvYs;AI>E`i
zzrb!k$9mRT2^gx)ZIfK(H|Uk-;{jYG%vnm8JJCI2#&J?;^}(+@S^Ba+%^*!fo^=3>
zJY<7cU?UBe%u+}h1fb>jgTcAFz%L0KnA}yefxM_HQh#!%DNM}6!ePr(zkG&M=g-oP
zyF7FDn`{i$nQY&UjTY!_^jJFUc>Q(Z%}rtBi1G)$od4-*$N%=skc-P_h@uXs*1tuk
zJK&%F(<L_DkjWWgdjry;2aD0r=b#U_A>H*`pgaYa3ocYT6oXR-S*mo}hSz`S*xqzR
zMNnQ|9}ZV7lq=D?YMsGXnGK6*q@3Y2K3BDG?d~ewc|&JT$W!$|gDXMIgT9vUM~(-W
zJZ!@9z#7kkrB0qfn)`pt@~TS9)Prc6!zlOnNi+Z17-hmJ71B&t?>ja(V*cz;{1m&Z
z=dozbGUrwU8?!GsG5alo^nC%F>x-mGw=<3}ewtRhg>!yMEwy~7Yfh7-{;KK+T*rV%
zN*aGvifi+M4dnp1e9We+X~jlWe?=Rm#fBwRK;g=lJAbuw!SdAA0ZVJ3Q@g}!`Q`6Z
zUPZ%)InNarHadCkxbNYJZ~Xf;zWe>xnVx8IYWY=uaOqc>=*(l|dD^Wxj5r26j`OF4
zb8kT27ry!1@SSfDc<G0)vAXgmiES~+cUT*Km(BG7|K?vVanF5zeeJ^5ChaNtP=iLv
z=WJ>2w@K=#J^vsd$-UR|)_TM{Z)CK)kdB%&oBCG)_F8XUYT~wXzNXC<t0ICHq|jhF
zVc^gSVK{O)7rxY$?~^~iT3$e0!I>(6KfEouiU<7wmYE||J>de7*8xYuzlZNRzue1H
z!<h>yCubk!*whJj*DqJZ)b|87a=>6C*NG<kOm4W9z($OPG-77zBq9b=Rw7cJ?OK$e
zQngFt@0HX@UNZKas?B*&j!U^IkSnAQ*5}aGpt`ofplGu^0Oc-hUGl2TcUoP^^CHcm
z5qC0npPZ6!QdB)fWs~Qg4V?!t%5%8qVZ+5!DgW+Q-ym)caL)3BrC%kAlsK8D6))0i
zO``^~k;5A0&=L5-_u=IqI)?ofMx)hWo|O<sQ(V~jA!cHW-}<c!><)+AchWHG6QXVW
zFti}xIX7l8?26V>!@Am6cd<3R_PisGJQ$TNW?mbVUtz6L99ylWHxxQKY6Ih9y<Oek
ze-8S6SUBl@06f5G+3x1*$aCk9Yp&t%{=ajlWMx}ifm7!EeY4PR`6@;k1@K9o2bkh3
z&6QE+=>UUN*-e$6vmBlMD1+_Z0aP|uNcMcMU{mLC98`s~zp>E!my@GTFj$6z9ISWI
z69kLFs42ORQdB5~(y&arEdJdD)~}5BMb(C5EV1*7x%0JexKO_9c<M{-#3)X%+(Djc
zNxd&NPfn|frThveP{mc&6+Dx?*}7@*@5Ova{d{2Nh|=v^{^dV=ovr>wCR>MjWAj^V
zq^Ie$4q?p{Nj!;-A_U(OMAom=Uwr{qmqrW+{m{aBwp(Pn>}IQMq;JvN&H0VrT;|b_
z8FW;&k*)xY@SO8<-co<gfsm*E<ZX9^3va{jR!*FRnN41+@)&O|>y@C^TB+K$N@<v=
z)sL4q&xd|b>C6i4N#EYN&?;54xIBEhz_#}4@?vI}Q&l-x*s7Ia6IkgZC!w<OfRhIM
zlc9s569&05$Y6H_Oj}kR42KaeceU#IX6C%z;Cby10B~F_fcD0?HaD8Ca1Ehos7O?X
zY;9g-{qio;^D*5SL991IuwsIUP@2+=GHlL-wRa`Xl!By19h90tq_rVqIWMS-_(}`T
zf)O|dlr{NrRrQ3~OBnb%)dpZWt*-ES*;>@*JRx&Q%jcry%%Z5Ik_kBZP|R=r>IL3B
z{WhI;o1Nhbr#8Mpt2K>{Cb6bNWV^NZ($H!NyIZinqV#rBvV2(bku<zEG0KJQ@6ere
zeC;>ZS=&lEeoPn*J!7{3S8W6-NHyzH%As%ZT1_PMb}Sc8<xEWbL2Pl1>+9`3Aq}o_
zW-KbB()(x+=vTw~LYSJ4{FZ6*u+J(l2hbW?tK#n{xpTFaSj$0jrlHNkS3Q1i<L7F=
zs`2!IGyu^kSB6d*g%)d=!4Svf$%t&m@ZIM(SlvAh(QvPW!@Hh)S2no2ajwlZ1f}LZ
z%y6C<o8agbJaIlKunEiyoN<iuRhG^!v3y~TiP?zRLlLd6!H7lFVzA|0M;fV{V`9yM
zoHf=G6?URh2C3C72^wYj*wC^8R_v*i8f`$iJqc#)nP;iG8jv}pYAswf=qx~{DF2JW
zb1_eHA&KJdha+D3!8YH1<_(fgPGY8cedXWdY)%wSW6d;1+8%I<v(frU-F^>tx0Ec+
zfs9<8H=8#Rh!UAL+oN;r=I7Yl-sRW+?K;O#T3qgd*RQPomuQoSR|f&cj<2<bw_nX^
zx9aaly@HXZpOIET>}qYQj?u0fz*Ad~yHM4RQf1*T8>++#V5<96i-F?b%As;?h@1tW
zNzoEyGA-IGB@I-8qJ<hcMcYFAXhi2^%%xtRul~!|dFAvgY>eKa)t&RNx6YfmZi|U`
z=gi%hm$KX>6ZKmGY=WRJnQXD%dy^xxpXBVD8?3FYa`@O0<_=8*(A&uw_I#Rxzv?-h
zRMEvH^+m>>%N6GX(ya38V!fKtR(*rz<jRMuu22`6_eTqtxNtI<%5>aEj!RIk7ZsJS
zfJ$;J-~yY_1b?3SqlVqxoL~RdR~flW%$P%5+<K0c(d%?N^H?*1kuKJ>v8Gj49fIfb
z^m;zKTwNX{1I|OLSj0q#MyM!DJ1=q1%so8w`<M8{C+C=(6P8y!EhVF-XR4j_j(W9I
z9c!06l9u7zo5J>HP7)i^H1Mg)fv}d9X>%*6<;9@R$tjSyobA+DzXfm^<4J}KcSS^P
zA<vw5XEZg<Q21RYwAckN$khGygY3nI7Cc192LpR4y?mlri914j(vox`b2)EaUgNE|
zmN<Q832`ZX-ePyO%(2-YEn|A#6W9p*XB+PWY!1jo{Y${pRd$Eme6W#gt?)#ea}*$+
zGVJV};{5t=adP30vc7hK)wT0XO)qlf*ijZ1XPBIc7!6^t;~4h+5EBY1LVeI1KFp3W
z-Gfxr-x`_-QX4`x4N~e-3aPy*g_cVi<ehq@r9qqT#i3HPP~n4Xj5ewwsWImzP?sf`
zP!Zhb+EdEhVasp-`kSn6oTbxllcqi1+5Ao7qzz)Rri+*eYg<^8RIZ0%GuPYksRT~*
zFk{lv$wy3#s3nTKtPfx3sD6Qb7oK@$jn97e2usTuVtqO$HA@huQgZ{UgK-5I#wa@*
z!o_zo4&U2ixaLFjw0ujXVG~<1j|*PTIO(DKd@5Hqw-NEwfyr56a^A3cIVDa^Fi@*`
zSBG}o6w$zyB)9}l326)_JU3CrS)W_ho{UI3UIpJDjX1Tk$<pODE?-<>V{-*GXQDO7
zfORgd{eZb+_aio{naAB4U~_Y%4N_;?ez0KE&^zInI6Tdzi$4U{;`q#uvzw=^ub*RM
z{Q}+Y9CHhcEF4~7daldVe8iv!{hiFGHmWunrGn&jr44`tdVDdkD|A!{4gbJW?<v|~
z`P6wqQX?e_F1W=N(ZbaUP<*&lArEV2YpOP?sBlau7fKmVI0?i$4xNa3>4g<u{Nc+a
zNk&T!@#f~gCN%>RJ4s~QSlhu!LL5zCZE)7Zcpn_=ximiA!r@#VS_lIF*>j()Nf@%q
z((d;;Ht_^MeEu?@`t%{DrVXnrT5DyrY6G>|;?yg@;(OK@&b~e5<YO&Z4?fB|MmMO>
zZ|ZX*r{$cfd~aN{!7V_mPEmK6KbCVxh1K&)+|p8iRla|Y(wxnprAW6(w<yXt=X?-h
zt7~abSmLf1%<b;(aQe&!7cQ=`zP?Vczm1X-8AqqxCXy-EdarS5>)T8nI!0&aXt-z{
z1lZh+{Huck98;&~%1w%Lxqh%I?`Lx+kIiuT@*l9(JI|4sPczlN4<{+ZbeZ!PR=9L=
zg2{<#77iU^{>VIYhdbU(Zr3sBIr32<x>GNZ)XE;T1Qi!_=Gp`oM6P+AkgH`xhn}V3
zB3D?&N#U!!m&@adO36s@g;FokDFmLiE!gBC%l77oZ$JG*usgKOBCEZZSRQ_#c550D
zLu9A1(!rP*8?`YuD#<M-Q1tVxqGxOEgCWKu5@969i6OFWR(pTIV)xSwwv_LGe~phk
zy2#3MMilvN4ULtylpCr-#b35oVLOzxE$2=tqd|_1jd$rQVwvmPD3!V|K&f}rJ?}wH
zs9XMwl=mrq_i*6bsyCk>mB1)t1HMA#Uy#mo7lgW2u(6@rwREQ}Hip4y#L~t(OK+~Q
zva-s~&KAS04<;kBhNRUdk!f<*V|R3pwccq4`6cG>dXV<?(SR4XD%i-)NNu<U!KS#`
zjLG92hFhz=v-WS9N$z8D`r}Nt?;(pI&3D+|InUPCCC;6lU}|cfxkK|z&rUOUxQhV0
z+n(r_Xa2*CXv2<Fn#Ffjq15AL#wu26enLyxMRlF8snu%+Tv9Y)HDX)I^(phBD&R3f
z?eY9$ClkWNjNx~G{S7vER%x}{<oSTpTfc^l5>)(3+e#OR5Q(s+?P&txtMGryGAb!Y
zozo;1BQYYeZ!2tz{%DPr-IqAr{!zaFy;I!(;2cvk!uFP*k7yo%%T?=eYD#>iIpZ-A
zY;72p&ZW#OcG)TQazVOK07y9ll09)Nd#Y+3YvpPtY(bL7aG*@hN3<s+@{yn8l=idr
z8K8q4gRzEIJEGN%Xmtf=GY0)07tU_5bZLc+jWv3MO>#HDSS5~Qy6rBp%#gbwqv1MB
zgO}JCzK%v2)3f(7H}~VE_w~*5AU+7NIq)F7TNrH0_9G{mj!7ok>~39PbL|bf<`}cx
z$C&LtL^nCiP=}22ZI;*8SXzllY?s;DLo6OU>cQtoLY~8*=NR;I@>D8Y024fO_E?ho
z9hhD<m{e#~?e&kjj=kYyVQ8i{agchWr3EO4cB-;^FHh3>V-c^uyu=%CzlDuQ#LRJa
z>o*y&MJJj=B*qwD*%ZJLM=gx89&Ahi915*c?NTmU&ap(o7EpW;jE!QJd(U#H^Ktsy
zDKEdg#v>0MW_v5gSkJcQDx|$}VP(-a8;Lpp)`-I=V0){;j7l}z_<IeQ%cEBghijxk
zssB=`)33ZWXbSP1FuiD5Iqi_7lB<Xstg$4mh|WYztL=}~R<Fm><`Qe~tg^no#%^z$
zbksu`Vk1kEbeNDitO&XG7z{43HagEvdX|ioWMZD#Ll4uPT&%6{Z**q!et}KB!a1-l
z)vXOSjpt@_I`eI0Zi3<N4i~n6mrL8<VWImGraSl3iVu-QT~aq7%{N(I*<@w)JV|Sc
z>DhS}4<BM?cACy)LY~2}?-=zRSz7qtR6aJ>O2=r3%Nt%^vKMTG+8|rXfi`=)*k*Wq
zm?5~a>S<;nW@}@}v(LN$c7sSJ*y+E`%IF8QS~Gs;Vq2l2Nw6j+vMr*hjTjR^M@qnP
zxdw)B?ZruDN#L2@5e~uH7Q=j*jnV7OCLiJD7teA3eTQgug>+l%30{qP4GmfWCI1Dd
z#EIqdImKy)h$#t?)Ok5IX1J??jTBZR)Z4i+gQU7KTWtW1frVq1%WtPx1(Ap(NoaQx
zS{=Zo^m=QYKfA`#$_ncntBgiHL~_JtL?)rrP7sZK1?GnIvL$v$7uXt|Mr}%aa*mnB
zM`?EtHO%5vwd9c<JlGs`*xpU3aHKgJy*Xebat*2IJ{<>3znYw6G9j64;YPyR?hjes
zc#bv;%(fn8s&hY6(IPoHLwXF;%PcJ|v9i>r-I`*0<`9P#7nzxxW@aHG%V1|SXSC~u
zhsB8}W#3<$4Ky4rq%zkYD{P9;yvB7xs#jF#eN6eY)rL(?Rq;q|CX`J1P`#&r=Vf~R
zCE_^7sNwwf*RW9>a<MH&T3FM;+7`wn7~}tx;0;|r`CVSWc7?DzF_h+)V#A8uVl=`;
z3Cq3bn4N!!?d=s_e{+TV?+aB<uwT`&=F*kmp-ppF6`}|>mtku)!$t|C0b?K`6+@v`
zzDTX=saj#Ji8za)S9Sc#`vp_1_OvC5CYhPDfMYo7v9x}XjZ@2PZLQMl?~vvLV1yVU
zNxH-`fx%)_7-j2hkKSf`bcUgB5Vz*&PA{@J@d;Y38C=+Hl>m!3T@$&{)%W`iHaB5Q
zCGSUNbAVtoem|2a-DC<gXBqVdENy+4rM2gnh)*z`+(SD)%2cvQZZn2?kAAvL@A4{_
zFQ1~_nqpybk;6w9X-`ZrF%#o581@{afwxB}EG(r#JJ$w#M;b(J30GZh8g5IiuMlZ4
zyvs=8f@xi&BC3X{mPDDEk9p<A^ISN8+Gm-YSuSk+7Cn||MYG{B#U5b9e~Bbm+s2r<
zlCu`of~&SmE+{R9x;`z!sKto&Kd%`v9d?Ij*&3c^BEFATUp>XidlzVRg#NCU+aj%P
zsnCkgAvGZJrecnC<TYR?A8Rw{`Sxs2OIEieDH0V_YlC8GZUDo@z=i6~ieO@Bb(JU)
zT9ZDMaDDeY%e_^$wl>+_-DH$*q6~?mh&bvHM;$~b5tox?o2(6AWNUa4Awx)MO-?g;
z_#}tApGKmjd?sFrUaM}!aC38`uBMH8?_eVbWie_R%#(uxn`^gF2MIRK#HyUQ8xwcu
z(A+TWFL8GJb=<Zvmpsb+<i}}8hk;2((U8pb=?`}~cXpWz=Mq}2X=dj<_)O1FF}V<t
zkD#}mGu-jp9MPtTbkFr9Bmpq4ESIM4w7#~jw^;T2mnw;nnmM-^v%bE~OFw)W8x4p|
zm+j%3TpoOvc6-V{nrUH73u`^e&zb~dJm4Tv*_ya;#T6q#Zs7bE;4}~P0aLEUi#d>!
z5h4x~MJ(@rhl#n9Y;Ub|>YZioyZ0zNTbU=)<poJmD(P$K4dmIoMdhKY7;Cw7Zpi%~
zchD$GgmJo!Ug>m@ae8-PJ{u)YAZkI<QKHy;7VWM(wk}63UtHsrQ@=?Z`QK%&rIoZW
zO!zi78`00svpsx=es+P3O*-)epFQ>nk1ibMsaL+q?BYj}q&4Q&CQX2RpQ2oD4%kQ_
zcpP}P`0Wce&F?E>mG)$p_GFhlRd%;7vaxa&D~@(N#a!o8Ot$XBMr|_sjC6<osL$?&
z6)s+Qi*9#@xrId*7Z;eGn__Y{CL6&h%zW~cGEJi3<Xq{qP)m%h&1;&2;JSXSLMAP<
zXpK=iQ+{yyy>GwFFk2;#!MPFVHh-HaZh=II@hfaA2}TmcBp@*+%y3GLmsEpQ3C8WN
zrhF``g^=?r8u=(md~1bd#J0os;B9tBXPHRu<&D=)bN9(bT3w&5WlfdYq<cca3K~G^
zeohh#tCyW$k4LuTOSy4`srij-ofuVAYJor*cf2SyPW)>f^^}c^FxXJ~yUK9rn4gDs
zq9k^Tb{vDIsOympSLtV$*vZZ?$k$PnRy4`v#2mA&2bpir^HV49<LGq8zj|45I>Klx
zw8v6kJ$@*_rZQ1K&@GkRbg+?qm<7Feu&F7;f<(e5hMC2A)_NB>G4&bxy2gc_-@)v}
zOeH6o?R<o8avY+Bk=-SAeR{)7^v*4F@mz;acbeI`1r`?PnO>M?Y9S_1p}&(e>iM>d
zB1U)*&n&Fd!#t>=1lI8!G=r&CITGXxHipR=%O5=Z220Clv2liFii_L7!;lRUJ5y_=
z5=2@UX=6+qBMC+<*0#bRyjpuVY(5%B8&VBq#rU<jMxoM)5XpT?L1bC&J;(IieQa;7
z^7h-8xc9!hSUQ{6W>tF|qk^1QXM&qZ*xfR0td5vkn4sUwtH4to_lT)1Fwl^B9tV(V
z`{SICV7LPt=ak+iWFrl#dyiO=Rnn2S_;7BQ?fwcoqu1$WXHd<t(KJas%}o0q+Gc{p
zwn?Ixu8pyh(P{NKawOt#cafoqeWux%1JnB(<#Mwso4O^;P1sW19$>T2l!)3%rOuJ+
z7E_($+~4_AoN4_5tNqv59K6KJ#tXFU6f^PtOt&BQ;A3M_dZfC`?r@u(^Ow1BzD2t|
z#oYWM4jnnf)ciEv*%%G0_R+2*AJ*n#MylLuF=H1#ZJ2^-&ETt;;}i)Evx_n3&#dy=
zt1n}dA(k#X!?Uaoen8Tm25}e@V@!mRHr8}7wjGAWQTVqc7#;_XjWNDBC@dig9lH8f
zN()s`Xs1LX-(H0($7x0!O|dn6lkMRdI`%kkzJ8kH_Z%kaTKYR-ZsF>36=mF9s;Yn-
znp;*cq%0hV-E9qX9H~`ARk>s=Boji^@{v8c6GnYy^E~v{l~K=&E6Z&lidaf7QpM-T
z_tI6)Z2zw$@g$My&~Bd~wi86AO=Jv4!VujkEt}9yI!w2O!)?pLF=4LLVp*cvsdy`Z
zja<c$?gqg|Zwe1b_whn+AF!!EMzLZR5)6i%U6h=O_ypbf7^A#LFTKdx@D!K(&(pTk
z%(Nb4y7e&K_$X>4Qqv>TU3$YUcF$kp!udAc_AE2=hd6X(ftkf=I#Wq#yK>T=;?e*%
zMY=*`Ni$aY6a(VW$yn=SV`dLq(saZRo_zr|+ku6fabf2-uu0+p!H5SHN&Gt87S&DQ
z;Mf+%L}g*DwSkiNvvHL&U8_}o<*;bNJja8MU=fKuNLs_v?lasw{ioU9Ug3?`&hzlY
z_p-a41;E#4lyvZr*1C2r_~^t@#OBg~$mHHkeaxiM#zNfot&#|&LuGdz`oZFKH1LE&
zV-zbs$Ez776DE~`Z5~G;;%G-lnVMJtjSz7m(m3}_ZIck2n0C~m9e0?BTg)dBcO9Kz
z`awsmS((=Q!9=;-WU#q;F)@62!KNI~Mnt9)uKLEy1~kW*h>7HGy2)K+u17yT&&udk
zmiphPV`iCd-Op6}Av*D4G%}<*BxgV`y-4rk5|=Kt=(J{-nqBbHibFF@&9%J8ao;iO
zd+;fBJ_W#-rj>?-7?LRV+NOyGq0==y{Tr{a)4z;~a$=@9zxA68*`Q_T!fUh`iNc_`
z0vjWqVH`zmKYJ-mJc`+jXiX65D>9K{!&c02q5wRh%8?ksVQ@IfNup_XhHtYyI!z}!
z%v*1~&e7wG%*;=)xsrPZud6AJMaIOjTJGbbNLXJMMx)$IFi_%_2N{XHVb*XLww9p3
z<*OLyss*4FPdN-YOXYp>dkO$EA*4`((VJ=epODPYzl>l5_b9drE!(0Uw`fNR-8f>g
z)#9#C&R|XqiPQATA$A`~Zqx@0HrE9>4HK&m9oSR@OJgk7Bv^_4=Ehmj5g9|26k}`v
zpA+QykU@5t%fnZ=*nf_;on<DukD1mZbmC)RBQiT6bpv+O3+yf}bNO;Yl1wr?yTFm-
zhnPJ)!_;&e6h=K5^)g&qZ89nkFY)sl>rI~S{W#3dMf}G9`W9y{yh;@JiOm!{gSXij
zzC_ZV4O=M>Hsu=Jv=P%nNDxUd5)(<QbU&;#J6cn3OJ!zOY~Qq~aH626vN#iANx-?l
z5LVP$jEz|7e~S}S{}JhMnO9$YgD-sXlMHsfW~s2-Fa>E(OlYq{JLmlOY;4$CYq7bR
zaqPZ??e&~~PuX3D{wDNy)SI&7<9G}qc6p3cSl<|yYJaJPWJ+z3<iJWoWZI|-)<jsb
z{>wxpwnfV(v~0peoG_Wh9G{6;{78$X79^$H<cAq-4p2+wsC#%^Ur6112OF+qK)jDP
zPUITD(Hjhi7^29}HzK2@Yn~Mgq$nelA*v2BmUeucc6^LndknKnERWt`Y4AhZOfucN
zkLmVD=)^}M7BW&su17!Jq<8rumo9Z^CzDLh%&~BIk%hzaOdjg`4bBMCeomhHL^Tsu
z-|-}T>Zc4R@3#EP|8R*{-*_49Hn^Bnw>h`<o7iLmV@v?7q{g{PFvJ)NqF*5UNgRyg
zEn-Y5(@-?bnY45~FPSo8N()yb5l$iu5l%7>K;)=VayKH0r`heFVQcsnlgWKtzVH^W
zzP!K#58ut|#hiQ;2$aEfuNd|kBP1<L(lSJeZ|&CB&$E0vq0{cNbXw`}`pO3U{jH(o
zK2=KaarU=1$=+HSJ(`*Uh_!yUV~q!D6s+;!YQ+-UnAj%7Hl`iLbmEx#$%IEvcrP6{
z$S^iSi!ieH3^wm2r0&WT0eP2m@7i%rV>T`auBEzBi-~=Mja(hRZfF~IEwH)5{nTJg
zOl&(uwo}?-`u^U}DVzu@Cag$PloZG@5;M^{$wYD=nHw_7R#+Lm#l^w*X`2aVTlX{9
zevFCaIL->G9g%9EzFVTdzRJqVS(4W#nVFquesP}J`B}Qt9XeAnoenG<g~j7Ae+<?y
zX8aF-;|<<A^*U<TAq6opXV?EV&ZNZA9EkJnP1sC%;7I}xCn>)QE>1E0E#7b4V|wQ8
zHA^q(Mp&2ezBn#HBts;_5Rv2jV;Ut&x~%rU%S3VyVn@98%5$g)ci(%0;Wp%%^WHwj
zAjS`DjfKIW&)UW^>l>HY*<NR5?KB@xe~RU^UT|xy!A8<leb)F-MfYc}Y0X<RR|~zD
zgpj(}8X`M^HSJ)?;dNAziHJ=?Vj@~LqGe)c+X;^>#>{rTeBTWRWlLCSx<1$_m+JwW
ztA!riSODJsiGM*;qDJ>vX5MaKBkxjPDvC80Yh#RU6JfnWk_^#&6f(etT#e@(7;j_h
zt+R8`93{gVp_3e?9UmswUDAAmwe$?jgBM9;f|<k*oIBAGtnHFXP8Rja+!`yJ>#VGv
zL9|V0a+=w>IVPt%Oum!Q?ikirM!fOLB}SYAvq6?RI(CsuTffP!TcXoB93&SJ#zctt
z)=6wTNEtf8*{@oM+o&DxTMGmXgX1jq2Jh5X(A8SpU{t(tQzI1r<#koXaMhP9NixSE
zTV|#A`z%iU7-_!7D=$C8=K4pt=ia-Soa>+nz3l-z+q-OUZ?L|;!p7El2BTF}heS~a
zMTufdmU_uWgY00Ww2Q6j$jeWy?&%b2i;%iFuGkzJh^!^D9U|KXRV+dzmRMrnN<|TE
z8*!+c@ZfyHbSz}4gJFv64{`fu55Iq4Bi9ge-Wb@FUWf-Y!!bbqVE~(VX~~L#r5KDD
ztc|@BUeqPZ2Mn_wnHwT%aB30FFdE}DL&-p#2OrIFnxdidX`5qo;uGYWlIClyW#?Jm
zeg%Ut6P;kD{Se*Oy>#p%YJ^d=%P`wwXShl4(k1jl(Pl&#0}}1x@-19GBC%5}?R<@m
z^cC9e#c;CNAiyjtn|3+7u~K6gOH5?iK60l_voH<OXc6zCMF@9|k>iD%F+v`yqX2OD
z{1*{FJXR6ZWwhE0toNQLvI%qT&yeXh=Po|a#fxv!ZciZM7!G$B<vlV+zz|~`N!&)H
zjgrzIT_(>{&?^NRYR!Jr4~3}<VaE&Fn%`0Vd@|x+uZ_SO#Twr_sq@>dSRxV|k=TT(
zq{WfRgcH*d6A{5!U7(+l_Z3GJD&kup%H^hk%|WikjT_6ey_sNh5Tw2v0~-{KMwJ4}
z_?@XBWz}PCn=~7c<$W?YBG(kv3{h_`UQ{|xQ$!;~V^qWU!h9$(he+ZDR7a%wHrwec
z8{1!l?VPS%WVZbf)5*O|nL{{<$t1;@5xMS=>N;tjVMYmwodenB^7e1CH9AM9d!#(!
zym5S7&Tk5@Vr$wB{gi~Zs!r@I2E!_q+o}ttjg(63;01&66F#*epvMww0KYc&*6&`N
zDPiW-S!B8QEb0ui-A{uI$=xzL{mZC$HMmVWL?m8bkqsD)R{h2=JH_tkG{fPaWU@^o
zg4r9RHLDt}ah9~6T3L7HtA!a>o<@FVWlfk1NsHJdsQ6bGn}}}QVqv1gp>D!dB3P*s
zQd0+-8}gwra<*P$U1gziJA=(Qneiq|8xAhx=KXvQS8C(^W!+kfwI<9Zq-G4|FgBrO
zTEuRW%nis~pDZ7c=c52N4yPjoi%O2T43#W^PN;s!Q1v}ZY^O==EQ*rlI}Ec8&iB5<
zx!teRGBZrrqfEqiGZ7!B6-^MSA=f^+?y}u~jn%;qaFWxVIO%^M8rIWZ*JKObQ~@@o
z<xS7Ull`noFgC8@al|x2M2s|z>$PU{&}5(o;34*cMTz~;xFicY5bFo9wo7*+VXgl?
zcC)vcj31zFk6`TtMlGr-qv0h6**W^z1x9&~oE%JywFz;uh`I#L3E_uDh@D<RLlso5
zqTUfv#@i^ZBpeO;fqz^Zh>upRr%E8SZOnA5%WS*FWMZ(T+r5WZSGX7E5qV!pokI`&
zbN<2Q!M)dWE!ux{l^nqOd%qRSjjX?~w));jbyHp&{Z%cpep@4jN3Im+<UuK|7SRq7
zEu729vLRX4CwIe;mg#)uV?DU|swWS?Qv;#mztv$(n{MkE(mICIl+5k0ov*MycpL4d
zSoIZ)YD&r$D$q)f(T=C_4&@SdZ6;`@>eWr#OBtkCjYk;#`d>^G1fr&qNJ$8WE5WA7
zcq;T(0dy*BFmF#GE&_6d2%`=skv|nRRLYVg*3g+a#wgujC4B~y#+Yy{9hv`m<1n^^
zZFPxET)SFZl2%;9I;}QaV{d<<11nwE8yEeMv|xf0VMr&n2CNaV-WDUz6-z`n>ClPV
zOvNqQktH@&TyR*#;|MX$7)T9iABL)hMcXY9<-!51zu&DjJdg_KIs}%tG}!FJ^{iNr
z8WXaH3io}7bC$u#w+eCWt07mq<#otiN}31YaU+aNapb7Wk)pbh05p=}Gz^+0LqmI}
zc%orq=4r(XUb(Gaxt?nu)DfFw7>WEEAHR+A#5GfT)A-F)C%F1`yqv+bu%WWCCdNid
zV>8w8J(6Y&j+Ay0MOL>~zJ%i2C=)6XaOBSUlnLisGC$DGPz<V`<(R~CB+-no{(?cf
zU*${FEwSY33f8u1wOdG54R;kk+ph?GH3hk;XUHpRD#do3z;NIg?kJ0ge1(?|J@6R7
zMi7f-c4C3Ki7BiqQJLiGc|KC}?a8&s2RD#f(xD+MW@5J#*z6;s>AKEAy%`nG`v5lb
z?kIe-z(#9UPFgZ<tH_qzSy~;#qo0^#cQ@t2nQeBrQliKZ#RgSBK()5*tDbyFmiKWw
zB$v#$SE16u_`$N#tXAd3!Hg+~08W0z>n%28V~MmAPTH&yO<37mRJta=_U>S%gWyG)
zmR4AWC)lWkv8_P%Gc`JHsWYenOcg36h3uNjQ^U&{Tu5<<5Oo;wYjhDUBUDOeT}dho
z07DdVv|I^3g%KE1fSLzIqlP%P)l)1Lu3F~5*R4Vc2J^*d!<1rBB{B&wzVZrd>t}i7
zq0cdQXoAHfN)idZZN<ipoo&ZNrxWI4VMZonxrrfsFAv$^!^{KDXaHHzQ0KQyl*>Vb
z&HE*7xTV2nKV+t{`>MZUmFC{HJ*qK=G|&0cA34TdC+8T9Ak7AxdSi{(URq=M@&Htb
zi-Z*-5)%_gU2+|gyOi7w$?^ft`4&p0sAxRM_{~<a<?<V@kc#I|OfsKZ9x9u9o}?6p
zTvB+`#I+et2P-WMNtmr9r2&_SS9lk*5JbxPg#_Snxsc}$6$iC>1vLOE%{L_IsEERL
zO3MwA2}9;GA_l<}Wl6D8bw$FHHjIBtK*b`~RxXP*a!uhqUGQF_*bzlSo*7RJ6b<Hn
zKFq7tw!HKD63_hLAJXeDadGuU?mzJa_nrI*C+}-9IUTXGY<TCLHR3o5A$g`D7WH$Z
z;2)$_e)uReup{iQkLbA^JDzj)p#+-)BmP}M+HjB_#J2+2)IQuU#O4+j4OR?U?wFZL
zn4O<uZ7l~?qB!BBA3x5cj~(XRnN41Od6l#8Y%>@*lEe}hRgW4XIyiOYd7nHVkh_fB
zRV|bUnH-~;U$JW(W*OdL4+%3Mabw}Yc}c<dl}*9^je@aOJ7|AewH3MdzY!CvoBD=I
z#BZLodaqs0vH@+HlQ&bhOtqm3rZm2#s{DujDyV4M4AowzK>R!)M`gy<06{FqTCBC?
z1);A912lrmeFYL(W#w{4cfzu81V#hHu&-s>MR!8Dd?Dpq-}x%T;T98}qpYu==K0NE
z;mn2mxcludaCqSaz5ZEtH#X_UoxriG_i$C9UIxUf<j&`~XHH-kG3bXVA9uBG;r)(s
zxtU<Y!P!&DRaelr8`xak&$SG=Q&+81v8X7jhE^-~GDsWNyw0(?;Sdpy9$Vn<d*|5L
z*yZ(C)_C)^Ew(m%yOqSgp)k4i#!<F|YEG7?WciR>{e}yd;Ycygw^J^(TNqca-mA(c
z=#Pq%vur;qf8nCSv69rlrub@Or0}mXl}$$hKvJ{&l*Sac$jB>Q^F(ZoFQ-8s65Iks
zo4z-adp0))6%#7As#4Q%ysKqWWo2rO4O%9HSW`+72n0Q+o|zm)%EdE%o_qdZGdpvP
z$3OB#x-$`z(_pP7Y3Hn66u$G_UuSjm4Z7_ksAjYiFWTMOJjd%h|C)1W4>8@D=g90m
zICXw@GnQo@Uaij$cS4K@oYWbHX-qasaOEi`A7Zf4>Wz5s7Nh107Na){Y_7q{xrtyi
zo;c_2E=?^XlG6WHYcmKNRDOeg#&7@=ohd&5V^e(c(?d?5-s1IF*133Y7ndqYVtufj
z1Jn<7W81-LMy^>oXm%#WxeN)_525-A*_&a-tc~4TnG+Rc2Bui!7Lta-mcqoPhRU}-
z%?hXRMy6&IR){C-p1~r;hAOOgq}W#3(zx7&HMNFh%AigPUk0Zpu#jCD2UFUpDy4!_
zL~7bC!5Bl9hBnRwPa%cK_`&qKxBGnixqrsF%iqA9Z?U}kI*;7@vm8ErKgUlx2EBym
zzVi*vT=+KK)*;Z`lOn~7Ts!S)B1!1Rv&>E%C3krVc7*g(HN~-!kQ3$y#(D0mozw~a
zo@Hmp;TqF-`2eF_ZenG#|CE>;-%{O<U?bOjj2b#?MS`Q2K3-Tg7$XgAH{pXn8s!WI
zinS3BKCs9`56`o7d7D>WTIKE6x9IOW;zWGAg~N%(|F4D8!MV(XPMG;PH}XSfwB-4e
zZ5A|=(MxApV}d$74jwq(QnZ}sm@Y!pAo?|5Yn3{Rgv5s8R|eI%aYC+j119m0DWN(P
zEs23zteizq&Hc()3|4Ib&ss~RTC@Ev(j{UXY1z^kF`?LUWiqIZyg$(C*Lr;OyZ;MI
zYcDa;K8oPDy!;w#8*g&g;*W6r>}S~OpW}_wU!xVzU`-qdi{1duN{kUhVp~j4E`~O-
zQky#oEq53Y+aiiSR9JZ~WFlnF(C@?g<}d)x2b~*rjSKF31{*0^-}@+VZfr~SVFR1$
z`#I`d$-QZ2N6D2}fHf|L5s+{a?Ckix?d<F<KlxL${K#i}y!F;PZ@jwB>e3KIXeBnp
zktpH}##$oV3bqU>&W-%QSu@mSC1=Mknq7kjLYWlobEQnl#R()o+a`*-h)qJIi>cP%
zB_CLtR-!VNcOdl|un<X_+F=pDX(}hUQVx$534Er&O_HecEDphX2Jun}lVF1Fg=)?y
z^SRqXiaJPI2CQLg-O=hQu@z3g)aM)D`NynmzD&1u2&Wkk(Q36pbIvV&my2sJqAIlF
zsZjaF7$Sen#9&28q7KvDLs%P!n#3@keW+#g=z+!oxq6LVo(pMi8Kw!t)Q~y-fTLV)
zGT79<b8}48Kcrw&u!%Jg!qhnm=9?5V4XGkcY-DhGPLf182YH^C(IbjC%2I{lAY;&n
zB<b>rPjq?wV~06=cAM8<UE|#89Y#IhZbea%v+X?^tojvpg!=83^O6a5sRyGHc!Vk|
zCQ$z*fR6Pil(lVa)I|zaxba_Q=9n~njGK&G%6SZpDH6>pNkS<@0irIjm1CdGpn2HN
znb20{fgNp|tY=9=MG=P7F2%^mgR+4%?Q!AEkdJ%}qIS;KQpB6DZ1UU-zrxzq+jNt|
z{`gC$+TLMFqB+D^tce4Rc#)|Q<4KTWiEP4DXPziZN)k_Dyk6T0mW_5EHk-Ngtmn)L
zIYQ<lMrn)O#kC5@eBilJSC=c?IM_%Hgw26%sg&^ylbf8b@P1b|G`w@A{!_J7Oy9$M
zbMQCby2zPR%PbzA;hvKV%*{<=1kx-=UFDK)!s<59bGEk>F^0R2&vWm6^K5SI^2Y1y
zy!q-Do2w&?F(j=BBZ_l{cFD^X)FxPIdyom0fokCOkeAht1j8p|eL{mD632*%F||z=
zHExU6K_^HYysvR!;!53pk1}mj3-)j^=?Wr6uWQQ7186aU+?aWPp&~f1;0sAy19cOI
z&Y?Xs5ytdUMhFoucf9xq-=V{wg0#i?Gne?zi~o%6-7|EOBS40gsC<rs_v<Mg2@$M#
zu(8IQXvMZoWIM!B+Y=Nin1mHSScAQU*1UF#U7-t+Gr2Y7YDjZKZy2#N%yA;OnBn=s
zgUw$5^Y?0^{=P=J+(fXEYY+j|&j(y_&{WH|s-)P3A*R!ebLUp+^@f~1wZg@7>&zdT
z;O@KUIeK)KB#Fo}N1oT>dc*8TQTqLqeott%I{fHoC-~H-N1Qpe#VapuaPe%9JcFcV
zF(x!L;Y6>vD^hLMia~Nss3^tu$#{*EF{b*Sm^~3RTFVxa+GYr?<!)<Hf%&%0g%jH0
zH&4asr<ER};TH`iBzu~0GTZXA-xx?EHIVlcYhz-ZMxYt3WQNyYf0osyC1Nwd+V<Ow
zhC@2ZVwg2|!kov3lnc`skQ=eYQ9F1ZB}6tUD;<%hbfYpNtG?%?TGCZ5m7i(lF3fOp
zOMj5CljdXLeji4#kpt%87_;}hzv;PA?=RR?6^$X!GjAGR$D)!;;x#!@B1Cb7F_v~a
z!ex%tl`WQ+H<+60aMy_ijvbq$+iByRBhOu<j55am#x!-TujN>4xaXcjJov~QE6cmQ
z`qDbDztSTeL92x)-r*_#QVUNj<}Oka=mKaI-oxPvFJdbRg4ElnCg4h;kt$j=74p2E
zk||@uYN6up)_|f`1r&zr)yzl&&&gH0&w8?7Nze-|mEecpF7ZhbG9uC`mRH}#>4+qn
zr4`QvAoQ=*nz&r|d%*E7eUWVu*${6mw)r_O)?USP4;LC2z};y*qYH1~uHpyD3NEx$
zBY{zF8Ri`ZxeItLWvJkX6KwbZn8vph*j#Jvef2lQ+g!TP5^1y9D)M>-TqZp9@L`_+
z-Wdk{j3_q5i64UQ?hJYL<#U{R=Q2l*&T{u%3(U+;plZmnEJW89ZH!{Wka>4IL$_g~
zGr><hG0o?n81mb{cA3*}^+*z1%do1K=z4|WU7ay(t2sun9BndXYh0J{)Q>_X?=%3g
z+q2p&orp^dQtQ{@T5*F4U^4+sO0QtGWkn$k|4#{8%a9?X-jBwa7<DF`@G0$NzV>eW
z_NZv1j9A1(MArNL6y879L_w)pPdzPKLW8Ie0i+f|tU)Igre)#1(~ubIpL-r87ba}c
zG8Zw-BZhf?i&i%KnVViuWplGl)NcjD^MeGNqB)U@528{xjjv8tK^YAlM-I*M(?8SZ
z?NiH~JH5f~?ua-N;y6OYkY|pwr&qXeex3RGY3@ET&%)vqNfeW&E)1m$S%U8}6c`K~
zy<NxLp_o7Ur|;sQ{^K)jZ;d=Ksf>O2>a!-PWsVmE;2No~lp5~M#jPKrV!>3*a9kc*
zsj>dNGK0{XrmCJYVJcV(X`WJ>h%|n8sh6t1Ia(46y~=&)*U!#|N>9oGc~Q=LP>C_N
zMPyr{k}+jSY1N+AY&B}JyNZ;e^5Xqhs_L#F`bk+4Y596xkyW7<=OTtVjFp}BU(?^)
z$59DILZlfXpn#;*Xi({v7~LZTMvhLA4_(p?0@5{_(cLh*J4Sc+z3-oJZ@=&He(#*?
zI@dYp^?F`hb_0eh>&?$9>~(mvdO;x#2maGu_rDb#u*oiQ48V%#I3<iF7>;^^j@3H)
zqNg_^!fwX|BN@6I2XmlWAeI*R=cfez$iDQ-rt1E)EyX+wAxaU^!HOKH(}InobN!;q
z^&POMH>;$SpM->-`u>Jz<z^mR#q=RBPjo!N!O+0c9F)iiQnX>3RI2}aLP+jgFq$wn
zsZfZJEXV9}-`FWupP(h+Ch^zK<&0~sb5SV7S_@DQUVo!C!N4b;25tYs$^%vHo|uK*
zaa7h0xc`}sC_l(h{v8_bO_w_<9lvCD<2xhl$gkPQ^55bwkXWZIai9PWH`|75*+_-E
z7&OP0VU}_fr<XKT)0o0nrY&%Ed2_9oPIpK!jt-Pc*Yu&pB7&fjm63|Mhe7zE%>gBr
zct^@^V}ErZ2mpvkb*6o+t=1tZf>nvE#wU)PkLV8m@AX9(k;!QXF~~9<N%{h{?AMsy
zy_=>7iXD<xVIA14do=9i#gbvy3cVJ@Jbw8_e^TBGe-<&U#vGh4iMA@uJGlKj?R;|y
zUMh)x{S}FI-5t21juu7FrO#n8#i|Zek+o+vu`(U{TC8%Y&pA{v50ka|UHU0gQSObn
z!)g2vjQCdh&zGw1WVtAnoIv=QFiwVDJX2z-_8jHU$z$i8bX#K>JmF3B#P`=bR@R3p
z_A)iK)YrlQYg~7v0DrR&wiUn6<~znnHdsyb;4ZXSuccnn_YWbtI1zaXFRB5duS-N2
z>CDZ|#<ioHLjo(}<zapblpjmmR!++1vqBMkGQRh3@Ge`~c$Vq-cyktig_T~a&cZ0G
zIdd`gHuLD|c`PSg>Q0h(UcxD>qhhI^J}}$U3a5u?Lj^YVLyYq?*7}s%Pun?W*qrsz
zT=n$NltJPThjHV;!8b|kWUC9}`BR@6C?uFh@B@kEkw!`Q*2MWh9|TH(Q%Un?)ENZq
z_B6Lms9t+SM9jNlB5;2x?piVaffM9LeuK<iCngZTjwY_H#Y_`v?di}<qz^*b*^*RJ
zI4QTZUa1jIpg1X(E;Kt1PY;6ID2ZjGK${M&Ww(|!8IGD#x&iVetB~a+BQ%`B#t~x0
zXzZ*c7vE@Vh4ycpY%ciVag|gzuHj{aG0)MSTIwCK;q~tkEuQb)1}&k7zehKPvuX?r
zYP>Z;(e5jz%>#eDno7#Q{#$h8eMq$iDS{(G@A$>Pqezra7omxUg`hr$KH*Brz_~Vr
zz39ne!9E7y3Leq$<UNHe1K9K*jA&?|x^7IBCN<IgG(0XR^ijuFgF<SS#K7b7r9A1h
zK>F)gH7cbvt<AEHDkq^g?isO2@*GMXl`t%t`Y=yrYUJ6t;5MSXszuZ^$(>v>BVa(P
zc)YvZ_*Gj-INMOldD30KmM40Oag>g3wXBUc$eOkTC{@!{!s%eZ`y+n-At&zZ)G(~t
z<40-tRRXaDfn<(mws`V7PiyvS1!s4R2h`N+_J!i#toi&YCopJgMk^+urjFdxM3RoF
zhPj&Eli)JCo1Ls7%27r?R02uT9}(l~7lZ^K@M(Xy9nsM%U$uM?MM0=|V1>>7?e{$b
zY*pmm%W?nt**FVVsz?=^h0qONUHwWl6zoi%7+iEVi6nGIa0`s}Z2d7K&+!R0;`cdt
z$EY+^1+N&~t=eZTw}qZ9yVLB(SbQ=RA0(`#=1{G9(M?WQBSUJ5tdD2Z;1wSYZKYRa
z&0ZWh^k%7%+ADw05{BK*3)Cp8At)Yw{jb<N*5fQU{1QqRA798rCu3Db5?`_X8EnjX
zNwL3|>DO=os*&}ZoVT{Ae>;t5G*%1$y6-Cb1uOsi-iL`2^ZDGmueOuJ=m2PyDnPV;
zvEUjHsCjcdpUT=3vz-&_|K5vy67+<lL=2{jL;)YVx9gIVzEl$`4=YQP+co(_tK}yO
zxIiLf8Ieip=^sLIcbP2s`w09B`#+05-4JOX!Fs+ZR5@xDnFah{nymSFZrK@Ub>Ojb
z@*+V*I*Vr^rea?vB5eGpuhkh7n{&zcs`hyy-$EMA=)9jOypkG~kaTqlK$c#h%8?;k
zswuWo@UuD3Q<8vlE}Nxx1Nk#|UIJ4QZ+)S-&Sh6oHJ;k<+9+?AGQlUGmJNVNdGUCg
zAkfrZDPc<{-&;R^_z(-|sQ<SLkuc!3)8145k1fY5zoDTJ_%FR%mYdR4_+nK>;y-S?
za!yK9pAVD(o#{aerPk&lICn8C<(~cZQW&KGmwZguKkX5w;j!qtk|Bprvph`9IuS7`
z3+c=_ja<0J5kDw;Wy<czxu-_AvF*%IMs!xqx0Y@7bImh~a5<5(;W<U^=pV`gKk8$Y
z!wtTz07;fuaDzGqu9{0KU%vr-v;RC#v@?yLz+<Ix6%&o^4!Kd*+yH5MrD5+t<6(2$
z|KRk)fx){ZMGg2IvwcsV#XBBFDfle2MB?8o2y#j^-_6T|3*^exy{W6BPj>uW9aj3q
z(^~6MK=XZw?FB&`6BlY(7!gQdw?pmGgWz!4$jqdTn+omubP{cySYaL$1t-W)-MQRE
z(pA-MHI^Ccrf4gW$k7xTP<tz2aT1kuaFpJb<-EQ7T<ZP`)Hy8&7Bc`&ZPCS(I<mbj
zk}4zGYdMJLGNky|<X{~jXbR_4(conn_s9WJ>u3&lSou3ql~1SxSR9{)6+f>#)zl4Q
zygPFc4CGNH-+a~36B*5hVz)+Dw6;jY#$FkQ`NC+Ok2O~{i9TImrJAz;Hy0g1BH2H&
z=!s0AiW=WHBLl;?k0h0rMG#wqx=oKG@2y!HUoRU}qe^;X&nm<qK&a{b$}Dn;7ZF1E
zRzb<>E3JHU$D(z~zv;5cvL=k|Np%w3B6d*ChVotozRF=}`9`S(S!CGcCp^{8xOt6%
zNixLz5ZtsR<;zx2J{;q{<?QRJ*T06PdZ*xr9R`GF*^(>@fA<*w%9Yv|wS#2!N~RZ8
z8H6Vdl$#ri2KC-zNr+=qGn*Pi4!`{6^!JiLVkU8^?Q7r`3iTNczOpK;Zoj$th0<*r
zb2{Wa1pX!leBx|&iWsvGk}*-Giqjlu{{rTBl3-J#n7D<9zO5o(n~lbZq)aw8GYhM-
zn9*u!5(oALgXM`li}T06Y?sa?@<Xj6#Df@7e+mY2JMYW;SaWjK^OaLJ#iamcYsP&t
ze~CTHw0WTq^Y)yRg2O92)S}AHc>z5As~154df!M!g4Ypl2`Nui(<vJ9zbCg@RV|#O
zY{sr+J{QgG4kVPm(c_{{<RPI_iwu~ewGuW8V6H$z>8EpA4mo;uYTyY8S2pO+ZNWYb
zvMIRDK4H3JCl6BfKux|?!BMs;HbT{FgLbJhw(k)e|EaXd+f{#`6!<;(_->pmYi4lg
z5HI;yfoq^@?>|me4cty+%(kps?MSL*3s2X?2@4H=R~LUDG5Sh|6Z<CjnSd&5y$0CG
z;sd(tl5;R&FY>o$8Ib73WF2xo?e`=!c|cKVw|;wHjUL?g*D>IQT}?Oh2t(;Dxixq^
z3p}hQBAVC}nXeNS6=An0?`1R4Rjrbx$7Wzwew#fx<5Yw@o(I$e>;sFyrIA1}b_$Jk
zRVU+!X_@a$@6583-lHy{O4mpV@xG{x*B2~tQFk>x8&#E4^o57K!e`fCn|=vEBkbjW
zo7(xdIy=PC9w$<G5JkI?uWmG=SM&MxcCYD;E*1F0AoT7r+{OBLub2nEvezzw=-rJ&
zL+l%W<DQ>M#u7hk=+^rxE2cL*5zWJIIWphAi3bgit%ihWf+ZK!Rw#)vwRGHv$JO5i
zury5OaXLz><=$~EVobS7O5iNJYWkRjM>)&czb}M_m%pZ-AGJG7mm~SG>h}*`nZI_W
zmd`{2E$Z-SDe@?KD!YaM{O3!I#u{JqbK|~UW+^|l!^Mu!!ZBRYR;2Sh^(D~p%P;69
z!N`3Yz!}Zx+&0wpQ~tyeY}(UbhVEEBpBz3YYvQ&Yq1bYJVfiO*MB+bQ)pW0KUE4W{
z=->ch#LlIv1em(vnM~|7HtJ*!u{7AR_9jq!#6Bs9Y@I)QLAKt_A;QO3Mx8LKA&tST
zwWq>T^(+-iE@>&KmpmT|pWh7^(ue~aizm1JFtCne_#s38&HVWOFE7&%ss$oTk(YKQ
zE>`?9Je9Dk@O*1VpEc%e9q4+oFE8u&R4=nB7S6~X6Ju=qH%%okz0%Krm9W#vHYAY&
zu>e{CaB1^^`*XWr1SQj~dXzcd$S?W-RW$x+sn(CnCTdg38OCO}pFAE1tB24nYq7P`
zm>tkLL|VJ%T&LY`PQ``Kb_f_4-b>L-CkS-yP}`x9&V?(=1oV_bj=?$7NG;u^^@}-B
z0{ihOjhkpB;vXAVhsgN0JM;(*Tyzp+OBbP9khBpznw0Ug)YJ+uVITCZisyYPkEu@B
zEy$S{d>LqO9d$V3_F&67GbVLEQR1L}l`ZdZEw!(qt4R9ax2t+`%&Ypbim1T2*2aQ7
zi7V>X_rKB-&e=*W3(>oOe$QX{rmlT#$Y7=TCvia$Zq^p~3L|yTy}^G@)dBE(xJGWK
zm~!z%NM}hFxXGHx*NRw!)AR<{CH)|Bj?|#LaN%mXA3kq7TgS#1=0Uu|XM@4`Lk4N7
zK<0Z9=hHXt9Y%k$vAHL>z3w(9E&@f^4VE_-=h)1*8=M&CH{Ge*uvdD1dQ*wu;qg|O
zr?+Vq%XRJC3|JqSCW`dV3MFf3K8^otHddJrPbjqW3&rlp2g-D^yknc^w3K?Bu4iLb
zq|2C28oTV}5|mo`JT7j{s{mFhkDpOY&RqVhV>#zYf^&3tAid8OLDBn~S7HqPT$->}
zd8_1dIZLSd$BU|H-Pe$-!A)P3)>y1aps!%XoaXVH6r56cmM7qsK<q>i9CnE_vD7O*
zs$+16xeXUD8MW07Yz`N5JEG%gwGZ(;%G{ujqFU>#AV(*|TOuQ8`>!KJEP0%jQ89r3
z=&a9QP1xQr6dA}mVNVjk^3y=bZ~v8HsnV#(w~x;5zp{+uL1xY~rs!GtpOsk)fs%X7
zFA68!d1`2D<<bq+w)gvz<aCSmPAJ0izKJtq_3PjcSeL_yoUGIkAe>|o_URk$`N_DD
z>0(^+Ore<@F;R!9smF|c9C_^V99OkC<3vyD)Qwr$!QvI~pwbJfNF}c;!4dyd;;pl%
zU&AkK3m2a<CWBr;I<6Vak=i<*v2Ot@Mn3D(4(6LsQ}ODuz)<O~Q7hdvwPi2o__`In
z?OA;_;fH9{I?6505=n+jrEPE>eafg{e72QV*&Lfdl4kNUlRj-|1oX;)ZAOZBWi3U`
zz`2rl!(b1jM-Q}%(rL_#!^YI3h7<vZUPS}Fz|6{~Y+#rAj*aoYZ%jJ$p9%SD47z0}
zZ1XFYsTsH9RsUmn5Y*INCC=QaoaZ8bQSq*3x*CFk=%2dS8qNX9u;8rg4AJOpo^m+3
zpQqXz?_;Ee?>OPdTRq@&@$G4#h#7x?JXmowO0dGE60T;qxVM9b`2ZTmNYXy1U`_}A
zU2(G?<DT*LTTv5mZrwDIs_us@Aik(qFcvj`*Q9AG>os~SvsjTwx<-#qI>jzRV1~@@
z4mua_75{tS_~jZx7FY1PUTLykQ1LvdIn1IkvqXoUe!ApSwN9s|O)QJ%ai#P<3-0Z9
zy@r+EQj6<$*K+T_LW$B6rafY1-q_E1l4h)m4$m>~w65{8qxG`3x}@d3gN>5INd<gn
zggLyeQ~7*h!vm|H3QFk`Z0()%_SWPXD>yKL0yg4f<Sz#yzX-hz&eW)}jO35IU1|Ey
zymm9I|EVnZMz2k7O9?phC&mg%XWWZzNXY0UL|oFYJWXpq4YzuP*!k>JO;6X#zRx^c
z9iDeSX1>K<NLid}A!H7Bv{Mbm*6)v*YA}}t@DB1eHT9A=Zv<%%PD@*dFL`iPCeXS&
zcGr093RLGm1H|wYRU@oyC~|7pblxcfw>gMg^I9y&1Dy*pPwOeT8}G*V5DuB09YxZ`
z+txBa7sRXA-;AU+bm6ynCZo(oS~N`qi)%r4V@?77n5p~kRP~hu=#Q~x_43(vF8y)u
zU#6~m2>KpSCyX==>`vv^Kksmi%AdDUM>I?I1>n~brG9D+l_UZOxR}aLq-h%HAtPpH
z_+22OK{SG0A+ZxqLIfy=ERVGtHmQD00^5`pp^9Ocwf=uRwhNjz{%u(!SVQs0(Sa;Z
zr{~PLv6oy_GFBlZYo<=!_S5i+82^;{@A8kT6HQA~2acwY7CN(3kZ{uHpf*hx+!9Yh
ze}gyjfEK=jxP!xHc^5VJkX?RMUm~gZX%r@w#=BpJ?jT3(6UTPr5e<5a4-89%8(pO#
zJw0cgZ-IQ>66yFn|Bmk3kxTePHSG++coCIuX9OA}O(VLb&#jA9H#A_=(3XW0%SaPz
zbFG$vwiHLvA89MHgZ^W;=L>0Kb;AdG9go)thhq`w(1`O7-f$_n@&eHh#!s{LFz<29
zojz)%p`>aOv&GQrH99@X3LfMq9b0#1M|~=_>dJ$^0w1WAOB-U26}C)yM?@1iJF<Y<
zqt2&41z4x^xLSb08a8+X@~o<*APF6*%SrAUIq;W`eI8Zoui|$BJ*L_{qioUUuPU9s
zE+|wqowK1_PW9JM&nFaRKBx=!zNzOcgSH;Z;E+4&sSzw&H=px%DT<=q?%1eGk6lHB
z#+$)K?q|lNgGGc=t;CUsM4o?ieKpq?rM7yj(XhYp&S1@G06{IEwD9%8Cj&R*<PF9=
z_f<dCL3R4yrI3DZg!%~7Zn|YbSw1W%@b9<12CP!_&|I2|BRGU;;hzYmx*$?q3ZxIx
zTW%Bl%+(Qwlv*Mlr)TyFkF2=fOQk1Y$edD~+NUcVn4M6kn}$(CjiDMNqmrpTC*W)*
zHUY^EI)sO*Lx9bCHJ7&fH@zOF<7ha+p6cY*$8j@@8|Fm5%&oqqOxjSPnw9f!((opH
zBYIxKqtu$*1}aq1O1s&FZ08;5IK`SZ&__n(8Y259N%^_XKLw8GCYBpP-ip8V#~{rk
zmt<FuP)AO#Nqp%kp8^F;*x5nv()G=^brzurqU%MG&LO?jBZ;nnutvR>QO3|c;na#-
zS${Lt2}#n0gr2{(N9j2=8k=%l|H(BKwg<>N3t#0HkukHpZcdpjjG>tHPOwJg*hYcy
zkj{{fTu<QEWrf@!oM$)YvJiTiw%^rGF;?#4rN3%eIB1`;p%*wo^!tQ6hD6BURm<R6
z#2kOAcXDy*Q^>{iU_?x@P{hiY*-1GN*mfjg51)AUhr71|8)Y6Z=kP$c#q2@r&|}au
zzqDW!ETb%@fjWsS_}z9VVp83Qk0LNlG9wz(wSoWCZhRW~XFHST<ZKWygmB$)Vv|pl
zuBR-?HMZIcRY#}d^J7zzA#GzP`egP;RSm+tl~9VtvJuoe;#bk$wG<zMJE`5IN(!+m
zG+!A!j@RMU010!ANN8xj664btlLbTTG!64`&lqZ)uicIeLB^nwU1o~e$@Oi=^%a_J
z)w7pIdK$&kls)7n*o}{*+DkqtBkVPF=cX6XPhDqVJE@2&<#cYTle%|k7+{4QYFSf9
z_6N(#6>twfO^!!yWMh=Q+g|=|PwyP6XTTX%$w#u(4-!Ut{5A?U<HiGXL70T>025R7
z_}oDeb=pY!a9*EW-9caGwOj(PLh!8|1`T6c(hCUBX6g-ptPXZPk1o*qTX-RS_fS!e
zY3t1-T);V}v|%!<rzwFYgtzxX!#Rh;5}P%bgi$Xu+4Ef@@||{Su^U?_+Wtb*cPfre
z)R2WX5anwJ=f3%|t7`wQF-dsE)cG0%m6h?9E-lSTQN3&qR|bsEkMuGhe@9R{O_m4m
zl>Px+w)-ib`z$vZCTk1#Y#tCybF_Be<@)xm^($9>xpY_MmPC|BZ;R6jzIF)Cx@1Kb
z9k2@9g-&-L>th7di5q*Y&XwrEXQ%Y42V6csq#E0GPkf2P?oVgFw22Ad0?K|CE#0A4
zRVxp=d>{^-aJEt)|Eno4J`2wJ)X>YE(;h*95MXvz%)(_3T*4z=H)ci{Q#>4{)Z}YW
z=6RTHW||-A=KUD{DN-aQa-&r<yZC(>?CF${zV;a+wBFU9nYW}*mWsO+3RmHyfk>$1
z|Lut0-17k*8`@6R#Mj=V1Lk_qJrieC%I9q$0#57SFoi@CG%~<8yFrx64|M0TVgo3L
z?>VnMefY<B@9BuUgT?(R8e!LQs~nIM_hmW*Uo{-F8ilW=fn+*Y<cbqT17Qqk>WcEY
zOzY?s;afjvK)c<<OYtDttn%p|b}QDLCg6vbN`FQDoxi+M8x*-(#eU^LOrR=@R5k5J
z!G&U(ODmnnENF^)Pat;L9)0SisiXS&JN*Mb2PN*V&(qp;@AYasM^11WbD%N@Nv-=}
z1;o+>te_bL&Dks>T?FvclsP;VM;douqK&L|a#;UeZZ(FSXe`vZPY;JV&T$~jpN*hY
z<>F-zJBR&mA{D&?m#49}HGG4nmfupQ-_k*sq<7$=uj)c3i0I#BbIy{z!7<^CFNaxR
zllJycA~~tuoFEpnuvl_HS;BB+IE$rIl!}|m?hgxssKd9_J?q8zmgVTIf_NOb)Y-*r
z9a<m4jtI0S!~NnI0z8C+%P~7}_pxp27fjj3dEbh!4rzL4%!N!4q*zFdytBqaT_?`W
zQm2E3L?kEozW5%f<ZT~a-W77L9ovB2TI}8*i4LDjNbq7E0H}o$E*oBK7v>MNw(L%f
zl|h!Eo_@oguNPvApO>?(l9Q4xOsxEdBi=SOKM}<)T-!U{y+I0ISLE!Y;;>6nYo=$G
z#02uGgXmNWUO(S48&?&h3e(QBOA!%?NC5uh1t1*$#(Ui7D1LIu$;}QQh~{hz?XWLO
zo>Je<y27y>7*Ob~Okd1!E#Y*tEvsr8tQeq<TFd)o(5p((CJP!a7?h)B*YOMgL^noK
z;UY7E>mr@MlWWm$lX=v|8Ho`4=4z64Mx{#icIr+X8|bH9m;w%Oxy{gJ22I%FJlHa$
z@TPHtrI^5YR<SfIOmk!uCoeQDVyddC;$d*em3r-DC~89S$YjQb(@}^_v7$C$3>^%~
zjV{`<y;lq|3TI&>ZQ5Mq$@~_(HM9Ba=ObBytUT{2(g60Ny=#0__3)IV^(-jY-9#pW
zULCq!4Cv-#{isep6L`#4VG2n<?ygpR`Pbt%MB}SC+0)%aQS@^Lc69B|myr4wod=Zr
zo!kfJi8~5I+^##u40%T#Ql&kD=?zr-G#;=*o2q~-PqeiB-_q6YOK>mgE~UxEL|b_n
zJj+yhuDqeHXB%WlJ46Fd-Gy(Ils9!3CqBIiTSC~IB72i%lq&Z%`p>A+YGKtC@39gp
zt-Csl1?{K8r9=Hne%jp3RqsLm?C-r=KV8z*#}Ea|*VSgcHtu;j(94q4Fi{Vj`1sGt
zhB?3W&V{8-*}u!p>_co`MpHD6MjmMOL9gc)9-fdu<kQWzciyV&6vAs9S6&IcdF8SD
zSz+)C?=@N&cjiY+WnQc~3WbrY3jK!5cBCMC%P}61`MvB>pb&h&^{6o?@j{B35@U98
zQ9Cm;bLWkVYX8N6N$COxq)g3)cE<SA4^lE2-l6cA;O>p6KX}q5Y^~h`x!e3)w-|T`
zFM<%#ImblVDz>!hFY|PjrLao8&oM;06uM?je?PrSV7Ut)jE_kx3N|b)9qdIbMEd}4
zdfBXWWsR<ObUUjOD?qfs!`CyAvxfVRhmcgg{38;AmmOAHh&M2@^*7n#iNq%5F3B8`
z<sgyrg%;XnLY~KRfM;kfBqYu5&A<@l;B*zHpg?5}^kdEq+ps|ijLzHg3QoGCFP(Zz
z?~fm{J2Y+4?OPxknse!yhTdvjlp68P<3+lHjN4LnSf_#t8#-y#I+P-(1elNd)0#eg
z1GmQxrhD9!8INzI9D>pz$vjI82rR9Ij(L~WGnwSpP0e`&quDQk%$H($->JdHCKA}M
z*evTSG~L%d*{DChUkn~isPEBfvhs>!QM4(FeZp>Vn37^jkF5LA;3`+@%vY)thJ0qj
z|Ft3P{tm-24XK5aNoSianC3WR?gChGS7^=Br#D}QaYu1;x@-15mwg3wj2dj3dmC(e
zKe0N-j(q+`YypArDz7{|&Sb1Sa#^+ft_P&73Eysl&nDGc|Aaln^GOboHVp?i9m7@b
zx99aDETAG&!|^m54F*BsD|IG))k3k=$4}_~%Xo<inc&-pYwffLVW?W>rz$oN+j!#!
z**M$^l^`Z7u!8yoqc$R(ZJU!}_Vep(_uX%7ymm<q-4f@{M_Km?W`AnFj90WZ7*R%&
z=&+X-7Fgfsij2Qyn^`pz%H@gAD#F!IA_^qc!C1~>->KJw_pqO<@M0x`Cu90PR#;};
zl5~!d1Er2f2iaq*Ns~l9IMgP@BH7xSq|h$XsBhnGOX>ICeyHSlU-p;zz289U3Gp>o
z>rXqkpH0;ls!3J5RYp%yb>HI#*>F*^XGA&w+WgXIrNwgrkA;0bom+-MT?8sYqKH#Z
zuM5+`f6BQPX8O-aq7O}M0DvNrV_!lH%{QgDWTY`cIybg!oH|^g%?DY9o<%iG#!9pd
ztfP90e){TU5uh62@3H+3h0+&_7;@kY{)k>D@Y!oNUyJVeLY$#A4<PK_M1riK%S&f^
zkDT)ooMm%Yr<4L>ZeDMWAagOv@nnj@T<oXsbiS`q&Unn(Neb7_Dl~azFMYQ=%op3c
z`68r@h++Kjesv1d=>-DF6@e_2uszQ}n`m!;WD>_!`I)RycVAEI-a9+}xB^v}AQ?p!
z&A~2b#8S3YsWla~ij>ap0I%Hn$=_~J5HeFAd#io?IvL9&&w`2DZ<{m@)3cWRLl!*$
zSNBix%8k0UJu{aQt^)H9=&)R19!YUBG9O&Qsl#pTYV1u_M4p(~tH3M$rAuKH7%Mu)
zqib$+^HSHp?!$YAyeR1P5MumjgfA61#e(B|{A)PkmtyqEwq8;2;|sl1|Ej2(8#TPY
zD>O}3HWrFq>;<G7eOLrrj*b4q%PWOu>)%~HB14i9RgLhTv-vvhIrqR$R2g#7mEWfr
zmZ1xdv;DK}4VnBDDv08AamUe7V@?DQs<&wYfZz7mczPrvHxQ#eqsc_miJzCy2S3`-
z%NPsi@f7_T=*S*dB~}d{(BQ~V*rWP2!V6SVg2pv5RdgsYV0_@T(W(6U9YqE(D}MHN
z3Cy=QmuPJ48|xI4b3NOcJ(+Po&h|(fVZ#CP(WBfvzi<np`!)sjKCQS<*%f3s9R~#E
zoR~pR*EKb$J$A}lnBI$Jr3khy&l^Es8G9bn&mJTnPWE{(?FuxY%%rxZ_70b+ddqk0
zVX>KJE_;OaKO-|1K2q7ln0eDJe2Nqz10>$je3m0hX;Iz#-jc*WDFe>g^q#9>^;u6C
zPriuSis&n@nRL7J$5dm>y;x<9Xc)Lv91V`QiPiX{R`LWoNBbf9UFv5R8Vjes_J_QH
z!MdFY1LWC>P2eqN`VlQjq;GggA=r<THTO?dxW^kKD7Y;8e{v|mJMi&idJ(_1E^yG*
z@S*wmu|M7wKz1B<bKOOll%Lt-_mC3o{t^`LptghGb@DL%Diz>CHU6)c)GH=rS6o4f
zCa<n$V0@mN)$q=ngh8wqHELhRguUwsm@_iUT_6DP`|t?ycokfyFy6{K4qgL(16>Fy
zx;TMd<7hGogE=h#owQ7b0-78{qmJ<+sK^TE$G~2JmS>}mP+%h2e{<pG-zQnBr;KwY
zXDGAH8cgR%9@n&|QHcS;5mRlEB<O_SoA3LZ$(C1@g=w1$DOe(H%L@~b(H%wg$mk~E
zGa-mJe06h2Xvil#?D;CqByuC|AyNkUuU>C4;eXz?32%F&iJL^7j@;n4rPER43kG1D
zOV1LBZ`AG42CITMW<=!pgrZcAqJ)dciG+T3K>%%0+Oym~c2Lm^3kQuaS<H^?=q~``
zMfNM;jz@elpL<PJ`&a)JghI!3`0cclO?eWLWgnMRQkQPT9F<4ZwhyU8$s_o~d#Z<c
zY?8mGf%zNSw%V-^B1hiU<tL@J26d`s7CihOL?62g-1V45@L>Y$>})5${l@(;yBLwi
zJ$8Ix;ZvoI3MY6g+BQewSzz=H!HP!6E$Y1F9@gd-r71Z9)B82DDV*Mqao3ny!qM6`
zu(h3ZC_J**g<@Dlav24w)GDT2!?aUBrhEvU_Za~{=>2Ot(^Y<gzE2V=3YPkbXFhP!
zpGo9V466{9sG`dLSxJ;+MNp`EV!*@kO-A0#<wi8V=0CpJ6X3go&b5xTp3xZDhB2Jz
zufA>>mrv&h;UjC1p3TXnMdx)3OIKvd0)cbx320OBY}f8H?DiKfV&(1Zuc}%bM?Md4
z6X%on1;Uqco5z6+3EqntZtH_%=ZI&q3GpCN*K*!c4*p?B0<bL~EP4SQvd3I%UX0-|
zZf<qOu9L1^>tP40JY_p`@{iR2YaR8$q)#u3^*FXMP8d-Ps!HNY)Z3S6g&lG^bo3*-
z`aV89waRKY!+L(!`xVU?!ktj|78R<g14=!(N>R&MOk93S;PmHnh|%y55Z&&mnco}k
z2(vb&XS0ObmiC?#Glj<Pj<G0*%~=$kP*jP?bzmCtU%?ux`HXc}LX#^jy4bM5)&f-z
z?%KYC{NRbok=<BaP4wLk$h>z|7Cz10x!5&y!II#8sPrqZ$D+Qmj*^`AQFiDj7N!yX
z#gqt82&rdlLk>ih*0@KZbw05J_U*=2w9N&5P&Q&3<Lq-Z@qY3KHpk(2baWGRp@Lnq
zGn%5n9ti>yRyt0V$vmMIGi3dj*&!`~=FX96$?-9U9+wIR+QB;%aQCu_#Q>gi4JDH{
zsL@IZQ0>D1)&5>KD01je5-<l6pWd!}@Xs!$K~aY=OhI|2w`-F#Ji^KvQs=tE!uLnn
zSKR2FHrz4#k%k_A1umc+85?74y*fZN5#5j<p*f>bJN+;HdC$yGTcpdMd!QIoC<a6?
z);<Y(Y7ZhY)ZXx?c@BZKwOwVEdq&6(J4r*PN#!|{`(*AhuwS2sp2V6k+|t-4Jc6*q
zhM<?qP?AhOLGX;{6QY(3XIe$^MRyAN_Sp{s+-6(ZN7lfvZRcM%EO_K13FILRKl_Q;
z-k*7eE$`UWN~0<T4cU3Mp`oS0&90@{`l(Srkc$Yip$$2|zanH*wE}ixgQ<Lq%6^k-
z(P-#-H<$Ue%i*g%tl4sQWCTsm=-~)jf%v=`dTvT&cy5=3FA5q#BW4_yjLzAWtm$w`
zo0u#eZg#*!9KszvJqu|oH=y;>{N!Dqn7I(;Kh;MjUo$5UW6Xt21!Sx^89IVjY{@wb
znA|gBP&k|5&BE<Abn*n21v*VGf04N__$7wH3PH8$IX3eJS39`N#<|zb%?CUxo`HpP
zo&r4Q^dDvGPIYQVPGTM*gkmK|Q0{C!JWL2h9A309`pIRv?~)$v@|KahsdVH6{Ag%s
ztxn>=7;!@c_ijUChA-Gj!r%kmkLE1l(`m*Q`!Dyc?bgR>p@-7RyP`_t4FDA7O7NrE
zuk~#@$pzH%Q(0m-p_H3JC{BU{`~EuJ>SsJo!hf?)GN!*};(2r}HWOya(~T{hFadQ*
zX-#2;bN4@M@>9R#Q%!IjrZ${>`#pS^0C4_el*1hJmtEH+5i8T@R=#l<C*oDShVN7d
z$0okWh3{iG)1H?A0@EF;=);0Kn^%Cr@kWL1VRO<fnqh;)e&1SquaK55bsQ$nzjv?v
zQGk`aDM3`<a(X_LXbJpfI}oH`XY`GQ{M`XRr`7}=kV?n=w-#$kRNon|OHlqSd4~DU
zbcl|AgWB~M5$~A#snW1Vt5691o6SNH24uOFDbfE0;2Y@tV@8E#!)1Ja=3}9u*O_e1
z{hZR$hgCQFcxjqP`STHH18%x=A9`BH;#?NJNB_Gu%+x$t0U5S51<=kRYekKF;Mfs!
zMY3_FbBwJQU-~AK6vGb`(O*4?|Lm{ub$mp((WkQ`#yLU%1ImS*sslX4hAD~w0k*m`
zU|>9^3tfoVFtkd#@*ZDenmy?CUd7k6okTS$@o5YEP99mN&F8V{n(;VSvtMXyJF4EP
zDG()m;d?I$sA)|zdsOI>aBV|2JM!SYhy0v<1odc7p#c%x9zuz;^TLC$x|e%964EjU
zbkXUbY6*?KGj6kBfEcqzoO8v%TZ-g;ur5^tVNi0K;J5rnGB2~9H}1$D!yvuw{m0Q?
z!~eU-BbxnHWM1lq;(_iPx}$;vezb?ge9_Adr}n<!Kosvc(VCd6r-#!l2^m3IehuF|
zGPkCBjQ@fT{DevR!g}oM6%&ru9W&D-HiJ>{L~%;j5M6Gkd1zOu<vJ6*gEB;fG8rE*
zyI6)2U1LDd^$Khg!U3W_^i#v0FkH{^4z=4({O8M7qPeT*q-}r7u4O9~_8ENOeLPEF
zqbZ(#dFj6<Y1rH`R!x@wn^y}I?TS|%4OG{|%$l=~>7cfjl}>-#oaJJ+oo{`_%WQmd
zwlQnBPjxD}<$evqA=?K``uAcYj|Ye+4nEbTCeqCBejI~@M(m<Z_f*y~%0hgO!AZL0
z5K|hdsbgHom8aRm-*%+j(Ab{#07%JgDkTSzF+4uZQ`(9Li{5uid=O78J7NFpE(ud1
zoh$3tf4<F4??#BB_E>Y8Ep!cxZ-XDnj+bW@*Ua2g%1t%4%0VGlC(F19R8`#Q`vd<y
z<acMLj8@bj@w(Mps2h#87Z&8n{+D9>fDs79y}c>sdArps?aA$R<y*CQa%dL7csMXG
zCRhVIfp<>3h~={nHudaH4@BJA`{AORAKl}BjB^zk6LW*X9XmRxU~~72%T$o2h~mLm
zH}-+E(&y`Ak?V=)&3?wIr*V$MD3BLn$qHzdbSqlggYfsGALo_N_V1X7guw_8u{NnP
zIb&fa7`$a|z4SFu6K(hvdg?XDz*cR4gva%a12OEhbn-t3+nbIrI`^lIM--P$Ihi{V
zbb;=6zczeNt;-*mY)o%jHK!=Ut>;e-?QG)~FBS_H0FX@v|A@sGsoq;s-u&%(>`4S6
zAcsav!8>T{^S!UteGZMcDyk-+L|aAk>TXZW(KLMYL~OF(?@znXT~1Ew3Zq7JZTmXt
zmTU>Td}D<3I|`~p2t;`JZlxlg5AZYH)~&~UFjDv|1JznZ4p#@q_V#@5@6XRO8#zK7
zGF@!rWR1L+?%*npuZoWMZM?4rYv6cyPxq_#jK^nWGc7CeG{?<Qo8?32CepIu`*gr1
zd+$yg4x${i6z<)lUd5CVGVZiNBl@_AcsOLtxY4<|m=KFU75%=`vMnHXMqlmfDrLyW
za0|)6cckxGRze-T+HyKzLCW@>7kOZC!Y#*UVE{#iOG@u)`0)6lMGLBRfzMh$V<y+J
zvn{lZ4Ft_NZ$9?UC1t#W7VW-`w$T-vfoCu!E|5YtAJI}plI7~iXZxsN@c4FyO8wOB
zW(%y^=iZiwEyK9{3=dg+YzSU`M^;wN-7LNDIT-#?*?*`ok`kQoug=4EvVC;P?&a*F
z>9N6FFSv;jwswV;y1>Y{ch}Z49|;;x#CnvE^1To8^{{MZ_o4X_ptk5k8&p0|YH;t{
z^nv|RAi$Y3q)=1vtZboRff%xh)-EOb&xqc&Ef7#}v4REr<}5N;`+QU9dy}7-;dNGg
zg$f;p7fLS#4I>Ra9$S5<>&Fl;_JP%!G)^c{BnANQ9pvU$n-t2@bV7>;fNzQKUDe&?
zL2`buo8OKgyf-|b*IYCI_dA98KD4dmefF_vSgR~^gvxHCV@@~Rp`N0ZRK<H-SM7H7
zr~}~ob?UW8bO5~HsPlzigjaBT;H!%dKF{rea+HbPr{T^iqN(QlVrQO+$7l;XhS|k`
z<VxqLUgI^&r*Ch2m7YrBO{ouoHHQfEIVA>@LoI~8E^3C_8$n@(=zRE)o3Cw1CELlC
zHYred_i44W_Oouz(_Q8b@~yAeqZILK9nq@WsQb8Rx7saz)Pts4w8DcoSl3q+;i*%f
z?=_3s(xW8j|I(3IuYkwmac^mUqogn)j_{at8FmvJBE^{P=I8#JiPi%FAePvNr#7@8
zogthyaFow&IW6)y^xc+wN=VWU-s~cs5xxCVQ?~9K$kC>he!wVJ!C*;xxVp2D>zwcH
zMU~-0FNSX!KcC&zaEtG+^XlINiS5EQXYqD48P6drsN<f}L)M}^B`@se#c3386AN;c
z714ltB%drn8JG%)k*@1B4V36DHth0rfyx!RhMs5r<@1S#K6;Pv+o#3lUhE(#r;`a~
z-%pLtPptwImWmHH^vH6wP20FIqfpaBU7>-kJ<4QMm@jwk*W1z}(-#X;<IBEkx#gtj
z3K4vE4?V+oxj1}AHm*F1L8$)ettDWkos#U+)7%aqw4z(V3TFb_QvBOo1gyBn@C7lx
zJ)<^cPqQZ~U(%4E9&l<g<zwgpIvn8DYkB2+d*|wNCWK}vHLSTD<c@oMtdr(lFci(0
z`B3D&70>akR17_0Op|{uGGdoj;d@`P4%#l_Gk5brz4oWFIF=gWI_}xN7bv+-SA3l*
zU0#uu`NtRyVN$;|MCH;mgxh<KvE?Z}^I;@bxd<a36<VUJ*g+zB2WU}ZPlhyOP4}eV
zp59vPN>AcCup_$fbyDz^Z6`e)kYcZ4@M(rU)O0zF1#D?9qV;qEEA`Jxe95DI-zBFT
z-j&)tFOFmBPc8obwUId(tL!sH^e?BE=2=LZXPbj!v-Jy5G&^NuQ3mvhlwhMXLM&W`
zorY(Y(ll-`h!|oUvdEObD)F(>rGq{Skn!qCESj_RLU-lq^wY1lQU|`hZx6<pY2(QC
z5JsOd(Z>tT%9n0kr;IAM$^^H+E8ZxnP3FGvdY2{o^XZTOa7%axN)rkvRCR^HRU|*<
zF#qPQW$UT#uQI?xx&|C*>RdeeK0h^zwPLIWbr=rdtL{G1Vx(caHIYh7R{0!Mv_4{}
zoVUJuN(z1q=4Dfds&lKSt91ulS1tSWdji;(U!)4rI?sUJo>1b%scYHwe=?8nIi={p
z3U3L*pyEW=T(gFJv%YtYE4LLi37sK~Q=*qdM;fnE7SQak(3G`FMEf-lS)wxUR5liU
zSM9}U2lB%swk6l!ogiPn{`^<z9TDX*S5o5@j<|df@Ut4%Ke=j%+<MvH#4*l9zUI&}
zsTF_MV^kl~nHMR1SditM%wbRWN5`7`5KUqhvI?m#6NT_#+)`Dk417&aBo^I+koEdX
zs@Q43u_hOKJY#0p;=orZ;Dr*j{-KMICO&(K*_P&UCvm%!A+zHI%nxl1cGm;ZpxbCK
z9Q~$a`2J-lgRlXOpt%EY-HIjwP-463(QZ3bEw^vwYWA#~%mOexT)DX)=v}*G0enVa
z!2=b$K@nZo&JW8NfA)jUQ@%pu5nX<oeD8}cC{f;`$ClSZQrU^b%NqG&L>IRoty)h~
z5njd-n3;#xV~H70F^$B5?KG-wg<{8y5m+>f@jvG>Z@N}ehbz-R7as;mqzPUS8d*p}
zL504KxT{~t^!yoDTYa68Z8cAi%u$v&{M*k>BfT%xo+7+O5EaLX&+audo>WmaD>I%o
z+g~q*mk(W0ZZM?aO4xiWK<#;hBFg=-b+FZil=@swtoFK@6hyo$Q`R}rlcbgqY0B=I
zlbchz^0Z7dN9h~Pk%Qb<_FAG8Z7R78eI7aV|Jis`<h>rkA-&AMQ;RV!R3}syLw3Iz
zYxTbcdyTu4CKOTamGtekj|yt#;C!K_<FQNPR%+M)rCx&TpSs+fpk^`tn&G6bHwkpx
f<^TV^UwnGr<(Ik;=y-BOLw#f=l_bi(8~y%2@J)$0

diff --git a/apps/desktop/src-tauri/icons/Square30x30Logo.png b/apps/desktop/src-tauri/icons/Square30x30Logo.png
index 8778d57072e4c303d652ad6fa47afd998edae0b9..23cc203fa6af53ca2813b8009a19a01a38340e70 100644
GIT binary patch
delta 2027
zcmV<H2Nd}73-}L^BYy|KNkl<Zc%1E3YitzP75?s>+1c5b*Zc5e*EW7(Fqnr87(*aU
zp%4NMi6JF~G?X?p32O7CsZ>xSs#Yy(Q$o|wk~S?;2_<qwNTL)%f!bAhg<|ut<wwC7
zu#LfsvwrM)cV>3x-fGvT*p7{o{;Sj@jjql&bI*6qz2|%b{C{s485N~u0MGPzr1i^|
zElOaN{`WL=FyKhil39D7J#~ij?HgYxANu|F&Fj|n->Twf$uzKI^gQowWN;UyWSGBb
zTE(UVD(Bzq<_X*PyPYq`@rq65KjHik=lmbMWAD@4ZE~51?)ySk>@RQ+^`~WR{n{rA
z=g;>=y0iC2qkrGOtn|jofAjJ)tK;uKcx~CH$VY299Xy>cL`eoSES-?;;IWf@^W)2x
z#{E3U+Nqn*aQ>L0hKfE?)cgLd#U{V4sz2ybL%g+@KRS7FzCa1SQMPEo=i#9v0nT}1
zUHg^7)#y8ca92yWOtVZ&f4aN2(jJS{9^sNBL};v+!++Bbynh_xv+0(|@4s`fxlk;2
z?mm6A%3*PkRF_v6TF6Knh7v*(4`X`5pOcpE|D^L~#}iL7BQ%H5jy8a2X^EHSPr=Ml
z0$JcRutXA9mI2u-7{302K&~CxQkUXzPO;9}NaEei7`r?1Xf`WzVQyaGo|eYTZAXNV
zyTta&cz>^<s+zfzP?t@>wS9`H27+4N!<o|Rq%d2%JxR!PiK0_-Sn4~wLy55>1k5l-
zBaSZ|-sBu<YEJo#Lf_(teD<=(s9?@D3_H5If_S6KLww#<lV@&uw?1?|(kFL`vNM}$
zeP?BR?coJk9sPfAFZDk@FDEq>4S`ej&9`cM)PGoX%!0&$g@eLQH?Fy)dSnqD*MVRN
z=+|N(RyC}PZu^(=_V2u8?D=hcMD0C<nj-)=QIyUHy6W0P<mR_$FD-fNcy1Q3Mg(kj
z1s0p82<DbUZ&&Vl?af2mj>Yf$b`K?p;{fAf_TiyFzV*n0XP)}BI~wc__gcYh)SGIP
zlYj2ztmoG94QjG`g_sUVija^9VVo!zc{HebJF4o;OG=DMoSkjb!bTsVK9?k?dt|vV
zuedzYbwviYEhV7fFzyf!CV|seHayK?Et-+D>YhNbN9j>p>A7YRr4uKx=oF@hYE#nk
z3k@x32dD_RrZ5-~^@i&iCHlf%C14W8)_;HXS*=NKbcYSCFG|IV;|FVxUR;?NNygbI
zM@>X9uA{TR;<@pYAFW9*F!U?!b>h`l0Vm#YA$>zOb@?Z1<5L-JE{H1{XZe1P?f^&s
zoJ^&|>JX1?Jpre<ACn3w%I|$p@~8Ol>fz<nZ%+&#LQIB&{^SL|hwrKEh%u(Sl7Be!
zrxNN*1MD<}K05<1CCDi=qqWYA{xFa^H-@XN4DF2srg{}~^Lvm6f@>#}AXv;=VXDP?
zw(ZFFRlm4@<IpA^HcobPj#NJ9k{X}6m=;kaQKFJWsa2vZ*(D&;%`h#8(2Q{*RGhzr
zyyAT17$O?ZQ_Ndwf-RY%rBh(-?SF)x*abMK!Q56|TV8CjzjNVN>$ZIO(r$qWFt{<C
zc;19vKb~FmtyhA5fTnA@VZ;(AVU;K>A|QaX+-!;N|I02U=g&i^qZ&(Rmg8Kr4cRkd
zm@tnZc!M*C8)!di&}f?spO=d1RzTMctlw*)jK}zAB=hv8=YLdr`sY9F?SHupfycyT
zi_Gk@8H}0GuW&e>60K>f!P$-jNJ*K9x<CVtHXMXMowJ+GF=pa`#YP~A6gHoTtARGL
zvf(s-UA2ANcPnQ32S~}-$|b-m6uMv4iAdQvUx}XPDWX2F6)^_veD48dW<0>=&VG@e
zs(zDocK(&F`SSaS^mA6USbw8jBrwG!G&MD7@4frF^`RN^A9hvmc<L?!a=Um25N7yO
z=Hf>9B0Y9tA0+V|WM@o3SLgyvHY?Ix3!vzLS;(Y<*^ZCTd=Hw&sU`P0Ow7(jSmlgT
z5swrv!@}t;d{;Ff5)*VD8;f}G__;tmsUECYzZ%U=OHgyR5iQs1VSkbek>`03W=jT*
z83q_k%$qcyhLk2mSP&Ws;qdVT=)BQJlV}R=%b1F~rt1mKj8FSrDjq`57&>kQ5!b~h
z)|H{IZW^jj24G8;K&b@I3=kqfGWl7$tpIT8^w{5yf$I|7j&Y1iGP@CB=<AmI$GA~^
z_J0hG8wQ0pC5eT4qkp(^B><b9#nHs{6T-ma>2Z=sf*E?;V@}&7q<IRNB-x-Dj0H6T
zT~R|B?S4lPa}W@4#CY@7bLSgtD9y@ARZ>$dx~3Tkapw$-(74_XTuWSZ5^~E4HMq{A
zn!+?gS2Tla2K6DJwlv<3JkmxW1Ii*03-QapJmmJyy?^@5aeq*CHGK7QAGO+SqHJ+e
z$u8h><1t344#L3*zzC5THOY2?SiyA-YPhATzVpdREYVctP7jSvJlq^o**K5wrK29t
z%mRlq8Jt8Fo16sMX`)TFRk|P=j6<*!E+s<6VgZE1HCuz>k6(`%jh%OkO~!`rWSDH3
zpPS)+vBK$`R%Gf;%ZJ6wP<yfxghrriy-?JqKlMZ_e-=`!FY@?EjuGc`S4`qUIb;;9
z;-s`R_o^2Jn)cO5<YINd^3NTi*trXgEB|4O|8wIuJOTXQ@Ncsubm&tr*J%I%002ov
JPDHLkV1gW3{r>;}

delta 1505
zcmV<71s?kN5Aq9;BYy?CNkl<Zc-p0xYlu}<6vuyS?S1b&Eyp1r(?cUi(xy;J4XKa}
zLM$w6>;d(uB8eg@3W6}BmlgFPBBK`(R3>FF(6EPTYL1drT3u1nD6^bN9cyZwIcN3Z
zoO|v*_g?8k2QKH{z4zV!y<Y$I-$LaPz($XrH753M4(K!xRDTul$vaNp;!x6Y6x1U~
zWgQ++ycRIitzc_+?|!Dgj8O&?SR$}AZts|RtDyIZ_zn?|h)X_Hy>s8SW<EJs`rQEh
zK0%)NVb`)}VTr<06X<rZG8)w}^985H8!-bU7MvxUX|h2Lkk97A15rJOifU24ZzUQY
zc=7wvqc?T)mVXm~_OUZ=QQ!ES#nF(6dJ!*z<}Ik+l=KjR2SAf`sl`+d9)m{3!pK4#
z4J_XA{nF*qGJ4jSM#oN7-v)w+*U*v>R71-{;NT#Tt{1I%C7Fv=8!)p&;@nx<=wz;H
zq5c1XY62=Ds3Y{6h*LAeyQX%D-CQrYsUqGmv)Y(x0)I*wRBJ%X<2m=1*Jc0Fawts1
zn_yEt;vx|zU^z?6@u7ONVAI4Cnyw9ET1l+Rc$OnxMB>P+IuUW0#Wn5?Guf$U{`}d@
zn>UlLt_ifYwQ_85h+hvJX2bd)c;od={Qld~e7O<0pWsmH#FL#+j+4F0h}Kq?FTax+
zGbRx}#ebrwb3_xJo#VLrn%UfY_nU0|VowlvmzAQ5!;rML71f|l!$b;e^RBxV)qqw%
zEiDZ^`Sf*+9otqH6iIR=37?|ibH!hqy^c#RIX4Hg;?0dLxO5p;EqsbkKiQd$H#Qcy
zeBt!0_CsUBSgSa^YI%_3W^Z$ILk{?rm)Eg>|9=rglqL7S!!JJ{1_VLbxA#yAtSO&|
z)+er3JZ{9u$rq~@&c`qjul2Zj`t*s6A3r(+o;j-%i(%-Paq!>(n>YQ)md$(l^2>ev
zxaW`5QlD8EWVtzQRI_-aS2WE&sY?!^Jo50{oN-16C!ahDfJu|aasQHq01OTevvbFO
zzJJ)ToA*|IOaGCf3W-p~;}%$a!pN?RRg0;`PU~@R|ItC-U$u=R{r}M1(nx!IE6ynZ
z-YerePGr`3r*qkYbJ)J^7kYdDuI2OO0ExxK8|Ad|iyl+oaIeL2B;s7iNLs_a$y~8e
zWa7lJoPExzEVyDCQ_dQfg<)6eAU9mQqJJJJAW^}e;D)2YWj<-*mB8mf#W7+07`hkD
zPU%zV>-~$@UfoQo^gE?eAD@1_o3-n1&wx88orL!V;z;tnI_GM|OA2TrHK2;)&p(H_
z{)P)uWs%lwa}#S;e~0%4uDEh)F5{0J{+l==10~1llI*V@4~fMpQkQ!V{V~A1tAD;?
z;gywIzIpM5+`Rb0x<vB9d!@SKKt(Z2awbAiRn3z}AX~}|^!Q_|+3@);{_FYpqdmOz
z{PtSV%#%K8Iw-!<3<z3VzMmc&jJe~s70kJ4GV|tl(RFqQZEei}^z{z#&DRH5{oyXQ
z^&ALPOPZKzqX=b@;_-^NvM8$u8h={;`MN!<U$?imkyK}|l&#c&L^SJAs5393g=8`H
zo49C|(96?c*rTaxhf<|j$VB2`!Gqg^frv`oCY~dDUtuJvNS=BsvqmN*-V`h{Q@2H(
zYgz;Ln@SN8jWcU=qM*#Zfj8=C?c-{*1T^;AOl-rwv2R|ZrP32e!7cT^Re!-nBARJ0
zt?H-M+<Uz2t@Z|qL9ur&D)@UgZ94y`gKpQ?_hL``sPj%K7Dmo6Lz0CWi#QXUA!>><
z#94Z<<P-iDXW$YsCu+%sKuyHqv`LHpL_Icq`1$o)=RVZkoe28u3Nz)*2X1v*yic^y
zp%f~XNnXm-Tv<}D<YSxYYFe`h5x-9?dhoNJIWKp2n_Ib3BB_+W35a!dJv>IOVGb}2
z2rglsB>jBqRu3A~s%q7o;ItVL-8x`Dt?lW#zCXP;#Q^^Tco2n!n<JN000000NkvXX
Hu0mjffjs?K

diff --git a/apps/desktop/src-tauri/icons/Square310x310Logo.png b/apps/desktop/src-tauri/icons/Square310x310Logo.png
index 331c0028a5408078bbb0ce4805a9c8a966e5a83b..92efd64036411abb7eaada8f511ca970516a6f5c 100644
GIT binary patch
literal 90992
zcmcF}^K)g*_jPPdFyX{DCKKDXZ6`OjCz{x{ZR^I)jcsFM`#aC){TtpNPF2^bI;Xl<
zuiks@-77*-UIG~b4*?7e3|UH2R2d8m{MUaE9L&Er=UqMJVBlb2Qldht9$A08VOPkP
z)hOS$bn5q0?+&P~#0#164lSW4q@3gppOI}0Qz_^L1gwm1AQ0&hJL~=?u#9nnwbVy9
znnBYYGbf0%;mPH^IGt$f?QVT>akxB<3eDb*Ub0y~EN?Dusx7KHWMAhzf$^PdfxMO)
za~`TJ{(lbjt<EPNJTZ!!KVFDO9@wg$$b7J?T9>_-8dH7HStKR1ez{z>JiHfxZc+%)
z<sYx@Z<1Syv^>p+d$t-irYF^k|IKbSk_AyaIK;@Gt@HkJdD~-nZTsc^Z799euIrxu
zv!fQPpI|<3>5fES>Kt4L<n_q9Qen8BY!mvi_vUAAcyliUdffh~RGA38p2k64uBiuG
z`S)ut;J?LpLy<YqU;l_QwfWpkKjs`&SQw!9&C0Ex*jK^7D<B?bY>;{Uo7_lP_YWne
zxhm`>?0eW?`_l@!b<N4{6uP+&L*FO|{=(SQ!IR{u2PfOwriXxP3qJ4oVObY0^e8#G
zd#uo9`}l7SlyIX2R5z_TdV`A0w;4UgeM%Eg{j(aA|8Ewenb%ZI={Ro8JtZikm>UnA
z7(3@6nh}wq{3+khYe5I9-i9T}mK<N$C?5>&rWKBjlb0)KP)HX$3B@f}ZnVkY?!@y9
zxG)s~=T}a51i^mh78W8@ltbpds_vc6?w)Oj|Gw_FE$N#qSqPCz%k?QdW+**hL~?TL
z)<_<K4OQwepNKIZ6pkIZ2s_|sCHaOT$={x1!u-R#^{SJPah=ZclJ3Qf?@gb53EEt+
zj|f$mzkbOgm`C^C?zf9D&3ve+nfP__h{+^>bAs&h+)wr^zXyutVy(@okOvLfw*1bU
z4fDaBu*oTKG;4)6`vJaV1cC04lFxIA36b`~J2ts#&fg1f<rdpq|81cDcSSP%>8lM*
z;8E_~&<>CD<qY5iTM=oT8U~t~JbVv&0q-un0H#Ri&9v}(@{2cz*Ui1SKC3$eY`Wj0
z{-CkhX;Z<TTcp6>q@QgUasylxX_~E$eAhxRCw3_c6_u#czH5it-2TPB_U$S1zx`tR
zHbXAm9(^d}zFd3Q7%d>6svoRovc6Y-)1163EHJ*YoA`lVDNY`W$WFdWkHSdwc;&q}
zs6*s$I-#RMVIlC7?RiGw(t#J?PG&u>0S#0Nl9RT*)M@l0fYiwKGpp|N9l`R0kAfa|
zHsck_Xs51q-TaaI7zvrXeoZ&D7u>pJ&9K^zdH<KkjL+~N*_nN<oksdBcQb6HS7SgZ
zAvXQ<zjT%GfAB|(I4$3yNgD`yq01s%nxPY-vgp&B?3b{&oiQZNMvP0p7Ax?%PFLqL
zZnSp*UZ+Mv2|rO|2|6861J`Jf?a{A!V;Z}D^l~>-_JvMRq_U1^)#RRZ1Qh8OLf!cS
z(%VwEI59V0UdnAiI2(R_-OX=TEx?t=tE`7VuzcR%!lHg3C%>qE^7U?E=RPG*VWhTU
zXFrie_XXM+HBx+-)9l}<k7XVQYcL+XuZY7U=0L)rHZTckTMHMdxm#l)Zhslb$NE1w
zxGynsI!~$bWNPre9LZh1zvwcmek3QwaxX^VH(bQT%bhPrE)sFRxsu+7@@l|91Bt*)
z2@O3Zhk*nU^saTgKGUETt#FQ}>5sSgK>k$bi$(39p3N)e?g#gOF$Hv?d|J2DueTp|
zg&U57E$lo+%qE68{&>wloLeE;?iwyTk!whjAG5Wkf=!*{5O)0DPgf$U(fOVE1oXwm
zg=+Ac<hUY0@;@y+7IS!xP)ojOe)!t|VRH36@6>aknDC(r!2v;5;E{Ak(mT_8FksU<
z>hks=9Ed$}2)+diGfo8q=1g*kuqX#~qVb<lz}_cG`ju<YaZsAXVX@lH_ZG8K?!0jS
zcM;rrD~@NccOOHH>mf&P-9L|&-^Wk0x)lr+;LeS<j8IfbzDGa|6BxJ%Jk<$&ciS0j
z4B+z(9xVU|EJNS%UU!B4Gy#Zgci(U@B5XhSPuKpXul~Ft!ttL-RY#V^gxipZzAEwl
zQS+mB&w{c$KC;%!pP)TtGPwuV;{%Kiq6&<-NSrRfY=<$fgv7wx53T2u>J`7Ta{cpo
zwUFl*^^70Zyq>)4`Nd)mpMxUeM}*;^=N<OA&x6{rowoypfhLx?Bb5HFhX+gW1`UZW
z%x@%H#eT$qEXac&p}dK3IzYwX-S;8P^UVRYfjdEcFfo(^2vaSDS~O$(C*k{-+!v>t
z^nDpN1KUmK*^e+nE<rRwq_(Tja(#tF4DbEn$ZZ$>u5-3!f8y%wr|Fd3cCP8Sx4^yC
zxM_1{F6c31$#!gdZ<siK;>fruEzSruqK{^+jhotuWS%Tg?$gR-Vpz_{3!k@V6|60v
zw|-s<Vo4Com0j!ip=ao02Y-X9DY@r(%RahxIHu#QT)J;cmzHt)%wxOI5K>U18NX2@
z2uyHjAao!ip4%d`?_8r&9?9^n1Cn|3G@%G!wK9N+J_|97!v>$}3L$J^&|k~L*_}Nd
z$1!gPRwy{0DlG%VsqT*Zq5q|n<i^k2y;gSX)DO+GQhl(}14peD2&huXG^oUVFd341
zA~e`QTf&`v!S9e$w2Ih!CSNZ&z56Ae?*6B{?i)P5S5&mgB~9C6V9UX6srLUxhr8<q
z@ouH73xkXOO2%!^;Ws>c&ePU8Nlr7=7a3gC=|oGg@DZF}Rj}etzy_!zi{kJU3Ia(?
z91$E=-ChLVWhir0PR?4EFyn0&Q%DHgJjr750IoRP;C-%e4fVNBzukGx`)lQA4#d_h
z&-K7Jca__mfFm9&+Aj)rjcD78QOV1*zKPE_^ZLV5Mt=wO&K<sbCSL5S9l*f|@qnEn
zPRJl;05~(P@8|#+3izs#U<)uyEzSzjQWbdS_}VVO8^!eHOrZ;Z#Q&uE4piXvx<4(<
zPE2TC{mGZ+?fAbWmnkCB?+*KHdR^mxVPdo8GTlN{aRVT=EoR{K#BP_tb;6bu1;fKY
zI<`IFqykef0{XJk94SbKV*<$IN-gKja2VM>gE7z}u|ktg2-fjNz9pH*A$tq9gAKEf
zsgcvP9Si@;+?zG{DqHbhw|z!Uegl2=tGI8L(k3z$S`^9$Sp?#)TDEWVlwL)hw@h64
zw>wsFI!?hhtc5NE3;?l>ydfLGf^E3yCWbh{gXGk!qpE!-gvytYgGR)ep{8QY?myz1
zi7Q8TiV*k8GYg(4{Aa0iIOF!vcy4tRhC9D*1uw4St+Rc$FCXShtxykgdjCs7+k16!
z*IBH&NZWU)A1l{ejUXTQ0YvqeDRKx@K1@b)IHq_@Zb9BLz?8UQ7$P}(n*#IAj7w-+
z!KrqQq7_FH0sOAB-zW1x^an5yE03R{zT6eZ$P?bU3GP5fP@IJ!7?ULJJeXo)Z*2QR
zqW;UKao0e8+jsZ)amy7nk?idK%Yc!nBW+v(#SY})4bpD8OjSocES>IP#lY@ih;XXZ
z6*wgEm<_%U3p8ZF!T+5^R&)a{J`~(S5w`+6Y7t-ygT{WV1MZF>3kY9B;%$v_p^<X;
z&kr5pXBr6hCL^$8+<1~b2W}I|p!yq8X7G1yRFQX!+=u9(u6RAlp}<QuA^pPYd8(B$
z-h2bCJzh#{>So3!q*R!PVuKG&P-th7WE;2HV*qksMRA!SY53d8>v>Vbk@Avoz;$Aj
zzJbH}UNeKPTfT)>_Y8hgz#7vGy&f=oSV809f)N;~eW#Gdgs%)wYow?@e)=Tc{Bme~
ziB-*Md)@DJ_{>0F)%V%cbFkq*HgYwZdWI`uB#KwLGRP(B@w+R5Xwe(5|EQ=^*T;TK
zU}NkD<0bD|<NPh7kEbRq0nUXKmMm9V^{ZRl*>D9h+$7EzUJ^e*7K|U_NKU8-iMKj{
z2g?+3;-=m^rT(~uzV|r(I|_mI-m??0j>w11U0-~!uhU_^&Y9za4Xba?f9&Tw2gCt3
z2uhr;J`7%5E<ibr7Z=IOo-&#WCeuFHFO9f=G~k<bi8J>+F2r|qi7d?s2tk9#WILBu
z@IM1pCC9r4l65_8^Gzy>_@7k;M%Lc~SyMSX_MBSLO}gq0!t=i~b3)NXpo-tauRBin
zJqLNbK7G>i-4;uKnoRLIe4KlKU8ta7VU8Yq1@4&hHP46rlFPx+f2T4l{Ti-kF+4|!
zX=FN@eQn%Wz(@2slFs2|^w@!vhrbpFUxLj;8Xg8mO2~zs#vPOzr39l2!IS{^1dDSP
z?0_(JC9VwmMlp!{`@lC&l^g9FfhtL&WO%zacQ?~;K2^i}{uB7qX5y};)84*;!Rx&@
zzN5;$c0<nke*!rX1$y|0?7{X+F5>C%HurH<t7>Sd+wTYU$>L*D-mv^Dc8KzUSsd7!
zO$gl+2)VIck)5=py+Rp5GbK_v3RZAt?p_MW7sDP%C<1ElD2!a!Ww3!oXf&Bz1t!O~
z<WQW5C!r{AK~GFHGr?rSCd9!s#Nm{o!0orY=TQywKmPU4D{4gE2R5yoSrx?~qK&n@
zUtON>ukSXo*=|BP29J>KYZ=uj??S`vbb9cqG9$2ecVMTLEPEwNM3!L0uyuaSGp|}(
z8Ee97wz~vq2#3~`%Wg<<kzk&7TFA0Z0Y4#5a)1WS8(wI%NywN_(avi*s-v3WVFG-c
z&-2^Bo$lz)+Kq0P<!bUL(_~ez$EoUNy0yld^UOg@z=yZfY{vFl%fmmRn*YOyEMoUJ
zW7j<HxQ0?p6bU|zeq)45DpOn$n9?#-Q5zXV1u{HIk#u4_l`s`Uc4rdx9_|iv9t{{1
z3}LNQ)!h%<TU_yR+?Zmns=9|0osG!JOvoVKv?9|kRR-xeT=LhKSA%ENp7T$~i;-TJ
zwW(R$S<kQ6!EDsHWAR#kqDC1z6#1{4-9;3?lc%thZvF%4^WX#Ypwg^wq-@sS#kPc=
z`cTT>fV_~J$ddFlq&3sk-*z78;^y<j;fJ{-5hR94i^vr#X$=##5b0$Ce}X6AgzMz}
z7)wM-D41FhOW_>F+mRoBjzJFWwWcN7d^3GP0&9KLKFR%$BWxz<WbMm6HEFhAqbU!|
z3&SIfNcdAY^v6yR&2!DlT$DFx17<n_G7y2B&`@MC8NkAbL4M_7dANn}1fvs#Bk`H^
znJ=h)S?0C{Oa&tw5yKU;6L*~9H)wOEARU9Sjk$T?%+H<bMI-9!0&9_RVzY?a&-UEM
z;^%>3|L6Ynr+t_9bA#Nj^Uq@$=+lz~at88*)*Mdau6QJZK<hh*NaAj!QBOl7IKtnf
zT?9Ld&nJ+RuqM!w^1IaW4|s9(P>E1J0|8OQEDl{i$GMgJ>tV$6Ep;Ia;8?8##o#@%
zghX*Y$VoEL3n-y0W!mJ%JP*PpV~RMgXiUClnQiL|#UIPCqxe%FglDh3=XINB`)z8^
zWEh{<hMTb$mufnP?L^@%Vg^2@2!=S|uSrFgK!C^ZJM5SdW(bAAVnu=$|1wF(F49@j
zV={176;8ntRMw6lZZLN)ksa0pK11d>>f?a<SDYGnT=z80=<juHlPm-vVtNAT*I{sr
zKgON%SV{fzM?sOE^;aDJJbZ3CDPQx&VN9=sCav4mysgK?H*1P61Hg(ve3<R)`;^74
zosi|imR%&8Taoe!&v`SY#8Oi5J6z2^SSNlo7(vZ|B8VUj2+mm*X<CI65#`$rX)tXt
zPfO$P^qIl3bb{KDHtGT5KN`LVvMW=II|u7(!WJ9>t-K&2A}ytg-eOrCL4CTP`6eIl
zCx3!h|Mq=71N${T9i*|+bNEUh0xsUxewIaJ*6`LcwLkYfsC44#aP*E<i^7+pP3lc3
z`4mFo$4S0%x!E7KaWi3-ow{4&jbM}Qq?nP2lFwSQ6hY)k%Al8-C3ul?rA9TV12}h_
zD`HraeDgqw)CYkRZv<I#tP)6FTc%|iT;g*W0O@%&PvbiULFw_ecuKU8Vqu_TpEf9*
z@9R)uuJEbh{fqOnd5VMY<9Z&1y3w@U;%C_4a|-nA<zjsGx3x|SDYbL0x5ADbc5Acp
zqerHZl|7F~kWdS%Lkq$}$Vfp?0uSSDZ`dn8<)0-jiUJO@#xX#Qk%m9@TTciU!fV9_
zTEnPPC|blJW82dOggc#1%Es~g5ML9mT)iqV7Ny0c#w;An3S`UVd}fMFz?K@+5A1mZ
zy?~FtHh38@PRCVv=*vX7M7(_5&g<TuY-5~4VU2&to?zgSq(n&u9xsp_7$Nm5?)0GW
z2@^TfSl(5j%N9b)Bm^V7*n^0aKPZodvCu~G3*Ye|Ee2yDAyUZ)asT9q=AuSn;_B-_
zlo0d_g<@4ysB^(2kO^ABP$NN3b4QoZ5~x}60Y*Z~uB39GlLhwQh@|O=c<+Z8VhQ=`
z?uB_d&VH`&^3L}1r*(PgG2cGU5A?a)<%}MOf#l|qHDGRl>LX^=;iV6hINF9nU<b~E
zfxzfCD;GM5tb;$d(n8o;(2^-6Ix;)SVxwM=WmJY(@Kwy=c(9c`0BvxT9}^?3yy&l}
zMC0xAj_4X$CjQQ(UVESzb`(B-gR7er{iy#qgtPFc?{yB&|6B#5m_fuM`$dFQ`iBN5
z`X!Xa4KjprRQ_<_)H==<>!6aPlvQvHUd0N_&-6hmJS12f^eIUM^p`wi;S_0NvY=|~
zOjRy+=~$)sKn!5~@=*omcO?NuH;Pwb!-~lpN~ch2BM^>3QI?*XA@vq2OB>klLa@@T
zOc5**Z44neiJg=h-Yot{8={+BkEZ&k-ph~4=?}IMJP_hW)JfsgBy?b8G-M&<vV6{?
ziAAVMFZZaTu5S;Syf?@&%iyAYl{6$#t(m1NE^P9+ub+1(m3vV|yVV7nR3E029)ga2
zR2!)!DNs!h?skq8d+H_YdAXC<@!Z6SGjZ`4JNu*8hkWf$L85X#IjVxm3wd4nfY1B$
zpOCpyQJjFaxigv8xxz!>uoG|}K@~5be1XRRh!Z5~Q|;O&l?9tPAzn`_<;eyN6&2V^
zLMj_rfxD|0)1I*#(_{=9=WS?{s`ZxM*1)Y$_bg07RnU$j*Tt_XOq+~$qJIR6##wN7
zP6G5sBRcx5+E?+ydK2;l{P0$15Hx#Gv#NhBz{!oL;$m!ISu*gY@n1*g!V_)sy#c@Y
z-xn)$xE<SGeGn0v2(+FWGKa&QQ&FmWcMA;9zN&sOpg4Gc0qkzajnf$D1(!5j=IYYI
z{uE=iJ%IBDkfYn%fR|N+P0)b_t_6Xma5aP?GCcs^4f#K2Qu_f<RluJ)&#~UtsGp0v
zzQty}oy+16bN`CaZH<!Jk3f#Im^T3z3!=<5*RAxcN|xU3*f_vF*Gcd9>lSdiv-1t4
zE;~#d3RqF00@YbFAWjY@@VFAFtP(UQu0$I@s0??z0OzpA^~(z%9RF|)ZXpfg*T^jJ
zdk0bvmC}8nGO-dpSSltLBQZoB<L}$mKf(Rd7>A}rgObR+L=Zj*K@Y8w@WODrZO97>
zyad}1YzE^*nb=f*U%=j+$H865Wb8H0ufO^Wt|GzhM5}<$TnG2J?bbuRkLLO9MI!Tw
z$hc@c92&?}1VKRtEHSuVup+t9BlNm92vs~mF`yP8uBz=C4<%=1o5=qJ@$h}tV>e$S
zgJZMK{RVdtY#XvM733wH$TYjs_?dnCk!znG{p|1}8TW9p=J%?De+}E8BFjbBPHg~l
z&;l7hU};IXC7GA<EiGP_!w5^ov%v(tjRE4UUNvB8Jm7alQBos%ML>C*ZN`8&alSzz
z{?vNWG7YMPOFU;{I9sUrxS||R216)M26`+;y@mn`5I{2^O%sM^0Lzar{L6$y*_x4x
z*RsMRwH>!%LCnaw(EsyFZxLte4TC7n=c2ms1ClW?<6$%>mZqT=Ud75Am686J|JRs~
z-?Ng#3yAP-{ctalsCsz%nmUe1^@J|-n`EKXpc--hhBh+2HN?G-UVxHP(`mm=yT^Nk
z@N2Jt-Y8Mu{jq)J`&|f>_2Wvu!$n9IQ|!MeLXp9Tqi_+doV$?ajf1@PuJhvY_Xkf)
zPxto&jh6>{@r3<RJupm=i6s|OAI#2~k|FDU_<DvZcM`evnVsm^zX}Mxq#r~dOiT$8
zm~vFZa)w1AAqN=(&RY;T6a7jq^%4wZ7%K`_At}Ht8%Bzj+)I(91*7l<pfHBYlxxx_
zi$>OBq}>sd!lf`G6oo}li8D)CZ%8JB9lD;s>-9PtnPeSLf95aNekro#nlzy>sm5e>
zwa6+{q~<F}9uNt*tt;?rReUTC`0Gp&budJ3?y^X7po+50kQOkgDOkVqOB3U(eqf@h
z!P;l<Kf5q~L^3^w{i_=uGcCRj8Q2yN)2t~<AM5YVnh5K<B^$R^HLa>#^k2q_cuHM{
zI^Uc>L}diT<c!I?F0)^jDh#+x?(k`gKN*bJ<cJ|*`&QA5Bgvr)uQkAHabbT+OWD#V
zQkvw!45e9K!H?`pl1h_jjPH|P$y7+jcKt*USm&5$5X~=x_yz4Ft0Y9tB@ZUSmWXlt
z8ordQm=p5{4M_%hM<#xd^zfiak>p%a%do@&EFvq2P3DCbKK&<jg4XpxTY(0E3OrgL
zhu^u`f6TwPt)7D8vxi9Y>2(`U!~lFT@}^>Jf*hcuX&v6{vA5*!&uP2m10n()R?h2>
zPxz8wLaoXY@8ht_kys66z&C5cE&P~a(7PE5>(Sh6wEF3PHIA*{s#r@Q%A@{!C#U=G
zzd(v@^vf1!^vN?d#G&JBv(|GUxA(CBT)@lkd5sBk073vuWTw8~#z13S{_A<zwYD5N
zIxE$|oW*oBejVms54?#Wj~yXP06Gh$92m7nKkhuFTu~EPO9kBWqSR&}v5ru`BX*Dp
z$$>J~d-}7=<Z3+uk!4q}Oe{%U3KmBLAiLDDy&(>z6(w+hFpv*O;}!4oATjLH#pKi{
z5cw_#Om`(dU#Jzclf*<}6e^L~p%+?{WO2PI`q$>wQ{|c0d#V(u+YL1UWu9s<!E9KH
z=uWeAE6RPn0vR0EysO;)P77onRxy(cdb0l+Iu*y-g%TD`C%&~)e+o&2+LJ*&*nf*<
z_K$sDYnGsMW<Ps+x0lNH7g(WjL+|OZP44x3tMJ)QA^NzOYW(^HF{SAl;B|TVel}&F
z`~=TNFT551v#hH<>gMBjv0@gjmZ%XjMIPw#<Di8VNms^8n4p>@)UGnH8p)F811^YN
zOeW+2$$b!b$?d5M@qlSr!tEnFcBh<^@tc-lW?MW?<nWv!j%H^5g&iv)VL8PTFu_{#
zSrV7hziwVtS>=dm><`&Sv1r5`Xh1ZjM2$djK@<`m*7tpsjI^OQK$XQ2A$|A{Q)*3-
zruWcq|DoEyRkqU0{?~T+`d_(f<qu-2Q<nJQ+`>C8{`NI~I`_{!x$kEM{(l3-&rpy>
z5Mb#`q6_yT7Rn3`0mj%e6CuxRsNW+aeYU^6Y(H<p9zyDm%YCV;VQrcEq))c%-4I0?
zTQO58?{;hM!UnBdE*Vr`5=-H#3kCc?hjrZ^mrFyZt*Q*3U|Mr1M>)fK2~T=ac0LGh
zzyND75qFT;Dx|uF{gf=f;J`0s10?VkF3FY16dT*wA*is7l|7^y_@H!?bmqC(v4XTw
zV+iM^YCnHLLpwFWZ72gWRLySfEX~oQp@?hiaHTeuliC;(0b_}iI7Add{$qW!x8xqa
zaGLkTc(|I0uS`0Iv;^e0HNm#+Lkj-;q8?)kcGXqd+HaZ5H9dRc7tP(*A_l>kkI$C|
zKChRB4{HNY?-RDv&b|;v0&$MT<^{Z?;UY~wfcOD9)b`IC>orb-?XSMA$rO#@e+rg#
zlG01!J->0O#+|dDlA!c&uIoiznoH<5k1pQ5f$iwst<&PKl)Jq>@31@kg6i|_@j}__
zB<W}sC~Kr?v>7;P^;$^Al4)WHl3_F%xvM;abvuR_iKJ3Wp^ND1sQhGWMHMHTKXEor
z)(Blc^JcrbBjjqPf-;2VAYdOfv2Yf$FyiB)I8~qwZYM`~l{O^~y4i8<?WG+Rq($nA
zEa4*-i;<M#_bsguy11d}J>wR<rRr@9p}!{{rv&m47<27m_d57`jK$j9XKiu68Gs0R
zyy;wX=AJvTt<~|YinlPm59+^Ku43>Ecu7s%Eg_UWyhgsY|8m<Y;-Y6d++(_O`>1fg
zMvYaMS3QxQrNi_&{*NFt^qR@HT>M9<`rOSlV4#;8(*%bOW};|RZky7sW(!}AWkpnW
zLbtb<W`he<N|;s$pIA$HkX$<$zVS(~IB6ObDa?H}^fbvBi!>^Ybm%2YS>XOrxQRO-
zbfEU;!NRD{JTxQ(`}CL&8LHeY4>jgg2OnF-pR=wE2sS-ZwTW48%#-+33BgrkgbnH|
z`5p0XA!r2aKea978OWQ7uV_+)fi&>950F6R+}OfH$Lkl8x*>v@0!_S~@!-N_ii8N*
zdYqf{uYIdaimO%33-nZekJszdN(1_~)$_&qoBUdNrlQ%c+S+I8Wa47jbhtY8akGPf
zQW8S1HOJU0(^Hq%lU&W@#2nxMfw3?d&xMZiBzH8<GxCf3+i^@L#Y9)ztTV?&T-xN)
zd(~B<V8Oe+<KlC;|Nb`i%V5n99ltt~kA`hy7SZ@ZA1)C;I;uzPEOy}OhoI!gN(G{_
zqZJG6PDu&SPmMaRKpaak@k`l?zOPLZS3?*h$T5dyT4h?Rggl}x;e(jJ242Wj)4Gf6
zVFj>3O(c<%TjGBmg&9z`{F5X$t~|UZSyJewMZ9XQ<vQd$K+qa6L14IP7`jh^IuePo
z(>MTh5~?(#29T}(1jofFdqta&`#kz`ftl{Kul5G-v<E$oU8q3WGc7c>=&#40{k@f4
zdjE^jy7*2nBAXyCo9qrfd){Vwdq3R`XXEtfJYpRdQ~s0#A@%19_8fd2@uzvr1bg4X
zDu!7qYV{u#O7i0dn4G(fJBPoqtsWRx`pd1Mls;X=#wQc~YR(W*P#o{_Y0<qFBS%k5
zK^tvEk>5=N3tixu0WC2pD@B7xB=Fi&e|A(G!7x@*Aq;9DCGeF!t<{oMOb`}EBU!W9
zRc4D?BriPUsg_X0)S|4f9=2(p%qvRHw!Cc48b?(UX%$k%Ls5*m>=T?Es`O}z<--)3
z0?3+>({ol@9X0oM;$qW#l&(X-N2O5`oOA~jtXK~-&<)22p;OK;-~0|IUFKtqzIZ>^
zBwC{!@H|+!I3Nb7rCE+A{qKP$a;g@@8$MEj)V{T;ZE4x=*E`=L5P05Gqto7Zb9x`8
zwNO{|^OPdC9yot-SMoFWkce<<yQ`1@%f59U8qM1*7atoa9${Z+_f~9O{|O;l)4_+Y
z@$V&4_~^&Yv@c6~U9QX@{%J|vi-FTM6V8qzg%k^B^3!M>%|Qz9=93a&1Fc!60!Qt7
z%Wqb}BY4<@v=gohciW_TjtL$*m8&!h#6(erlYVJptWyEu3nuCrN+h9r@fRvKLB}0a
z8s8p;ztgErNB8u`3!-7Wm5|(k7!1`}lyMM92G&R-x(7(U_p@-$2LsUqGa=KN>(YXo
zseif<>o5jU-+g^JTuMufyuE?U9NO&KejX?#-wt77nh#AvN+_6myvF0Daw&vs&fq8&
z3qH+|jO5l>%o;oGv|J4`Z8bXB@fmu9o2Q@Kybh1sY~;IFcZv>IojAAo8fH;`hX#zB
zd>(!ok#jdT-IOxrY<Sij(Z=hdzQtf8hTdxEUs7fAH#sh{C&%Y!8zl`I=0|S0#l*`b
z&#@=?!CR!|gJz3#xM5?9fXj49opk6Al6gYy42cRVId~zV!<Fde$V3snlwy>`rj#KJ
zglMBQsMF{!SO6>Fd<Zl~%o%#2XYB2U>M;aOaM8ET`)$=MNvLK$@M_fpA*e4X&b6dx
zNl^^wdv25@9Lg|qx7ee)IHF)S9x(djfKd)|KH3K-=2K$3IOAG?|5>Y>_{U-31y3-?
zht`hwpP(Dz?urnP&q3jhEZ^%GX}HvL0+UD)QTtaQTMvHZnw-q6ZgR>+NPcbBKY<UO
z#&^I(o%I<ghcDdo(!rc!8-8afX|?TK8uc@V*=-E0_jcQC7J4tMlTq7siOWT>G9~9q
zQlT8Cx#xN#y4_`@+Gd#1x=PDeO%sI9s2lcnjvHE=1Q3pC1ID3Pv9EiPI(9+xE`ky2
zg3JFbno}-pp_Il@I!t^n!6ZEUPF<mEtsQnrUq@0#a)b_~0aefQFM@YoR+Nzrr;p%4
ziP6$57V~j9=f*9IbI|^zHZ+q&7tfX{_%0RST*SHd`*!2(w^oozMXZsj=3e|5T4Xy5
zr}Kbdvn6m!4HKz6Bh81LJ#@@(`)hT3Wfcc``D0Yf*Wqh%<_Y<k_vy++$hxH?fqrbf
zm-j_*SS&#X_imSiSJj;0X7C28-1{%vw~JAIoYz0vs4F?8<tz@$drk4pWb4@vy}nC4
z{hVoV!l#MiINvJ8iC6KMmx2U=Am42?|M@pzKip~mYgmxSd96db_WV;cUojKbfeUog
zj>8F4L?j`><vO8*_M3TYe2FeA%CBi=mk?EJZU$7#dzm4O!WmC~n8(F{53Gn}$qFC!
zB&ogjijw;#Wb0q3CE#*WL3CbW)d6dn)qdIl)*)~;>X}*^;|j0nI8cH+vLaqXjaTk1
zQefI3B|f((MURe5$e^;PttfQ<+{rH7bL#hyIbq}oEuK+D95BL+Nux0e0RHc)BVrvw
z)4xGOm^n_I^nwl4b)IUuUn;#$>Lyv)pP8xAUFX<(%bwugxs`nkYW#0w7_h99Oi3z)
zC<wSAdl7~FF{*4$fIXBqnTP**k@!#>gF;k926i)@G<=LkUZ8s(qQ&BexR`~J(=`%i
zHgJz8wUEcy!f(y}UO;x=u0Dr)EHxZ2V7I?_Ietc))P4*x9Lk-GBLo|fkSkrJ&b?PT
zTjz6JqK;QOTuju`<kY|Lk*45E<p#zwN9jTylu)}*&rs7H1w+J|_t$Me9oYy{D7VuM
zDMczzDHYZ!z>DKipd41aZmRlCIW1#eyZ(XVeovx;OoiuLbb90(aGl?;D(kNhQCW-@
z^yEo)hD<0C{mueyy8u~%DWojUcT_gBueldNc`b$BUi8QWRvIli3ck}9%}+ZGmeme!
z7?QE*OZ*5lHo!tBxFk!Dt-s51{ObPlQ<>6Pd+)@K>3ZSQRylYPjNffCdYuh<!SsIe
zWMo1SH1F})@tBPcu~cn1wa`C6-DpfT?50uM9<GYP4qSV!zv=HpT=wxi?%2)N_&hU&
z^xU=}ghy1yxF^nr)BVE>Tn^?zj9W!-m?IZBmk@s*o+!ar@HtBBy;+j$eLL7v>-BCz
z*GSp@Ta!ZTKF#^|d1Ux-L&bV)tj}CsI2f9RFOXwV>7Ld8@?{lp{P8og@9hVY0ZI~w
zQZ9uEUy`M?H6;fZoALt54)ObLhwC4lhw*sjyoICu(?2B;tYm~%{W2M5d9F*G7NI@)
zx8^B%m1r?Emw0Lk$*mUaRikSc>M+75g{nL$s==sLN=uPmYF3+8l1aldY%#GSGxV4S
z(x2gm(nlwuVAlk&>m$&YSm>zLsDQ0Yl7o^Tqn}vB%Rw%z%<`)sq^wTK7%`85MV<bE
zFq>wDcaz)rMsf2eUe>3FupAq|(r#*oL8>DS?}yE=`__@^l?VKf<b7x8o1u}FyhNS%
zk(XjI<E8sso7%bu-UEjY74E+P>(~y%vnadNyGDV|^QioX<<CdU!n&Fhgp_@Hf?)C=
zep%uJK5ArG$n7CMaFXsK;&(r3p$S7Orx6;4Ry|%$|8O>OAeP2@T=tA8^8y^AM(|O)
z9(Ic}`4>OBw?C;8&wdk3bnh<@n9jq3c=lm!Ugk>b;>mZ+V)`ZmXAuJj%`{yCC^Rax
zdJ@8KqRQ|SI{a1dB{hq0U&tAfR%aB0(Xn7>N?g-?@Md{r;{$-=LtO}VfA223@a2y7
zt$9n~l^D{j8fwaMDl6#EkHWs$s7s--gax*vPnzX@8!qaqHZS$?LddBUrH!~Hk@^TO
z1s|y41(*mzns8dn1-`{dMG-+xdv%2<ssi861y|;xOy?ZQnz=}b6QQO7O7BZw9U?v#
zM;Lo~UlEI8bP5do*lnxZwkBUOjUx@qyiL|}xDQ^Tr^Q3*`?uTEoJw2`&+mTAIo(<R
z+5rwmIU|m1Goj_q?`-}r_ZtTaIqq@+GJf<?K@km^FBEkE2!N&2oH>AhlnZ-pUCHY`
z40;e!&;`wsQLu!NoQ_%>+Pyd~hDq{{N@ngk#^187_k$<7xU;cWM<X_M{+J)$rQWdM
zK7|OOpxWR4wFBQ80|WbabW;fZmEjIVXgyt8Mp;uh5*rjNf1GDUvQmgO?T;fIL$=&C
zdw*6n=}l01pj`A!AtS_L{V9TZW~DhWdKDt5{I@b=Op210s19;7xgMnLxJKbqrQI(&
zp}dkJw}&qN*UUHBK-N3pX4h{FK~Dbpouh9+DJXsw(w1^q-2_N|h1eg4B`_P#1S<el
z!#5Kagf93}U05IE>tTduhPK(O#Dn+yuea>XjZJR_0&bvy=k)HOMFoh@Q_sLwJ^7d1
z(NM|xZc+2geZ0Sp?c_JHHj8cO^N<1%>xdDjFW|02?r)TV_EqfH^ULuO;O1?7c7ei^
zu^T8C3=W7bDu1)0<-)O<OL8C)9Xp`I29pwT!uLusrGqHEv8m=Vq!7}M@KiV1uzL=g
zSeS}A7R`Pkv{)Fu_p$ncoqH&T|7Ab0K!LE3Q3UzD<Aet`t?hRJm}Wf0{NSGZ&wO<Z
z0Ju<qxLiJz?zkB%@+qaRtp?YrY$*x7`FN5oWY+D1hxko9INh8{BcW#IrBQJ+mhst@
zqM<p}VB)OBJn30b-uI=6jDm0&&ysFY`9-wQs&eviE}?kssHI$*W0~k`1gQO_>e4`#
zS_=Xbu|PR8ph^%)xR0&ZhLAk72Q+L{62B(In2V)!2$+D`d++;w@(t+YD3t?d!lAcX
z|9Pe+<n`TI7jS<kQK>)#oAar7{IX@Zf0gpjv_h9f{p{(dwY~V|`y==D<>J`1?M%<o
zw#S}edIm-ynTtYTDtt%*qj!jfxy2af@H_EAfFU_2wF1~JvE~P^p&3lq_j23>V=3Zn
z`M%T)I8w$K2JC$%{v`LW!$4w#r>9SGJ2RS>N8~xY1?fJkf%f~2bqQF7$fat(Yy$-o
z$yBo5K%+fl;Dqx+F|fX5mW7N-wA>tQt~e{B2uvl+x5Y<jG){VRd9`{xpN}1o=x(x<
z*eC{u;YM3092Q<lIDczR@{zt|V*{zXZ1RDBlGJ^JLIR&2bs4YCl-ROQ?n$1Wm&z9A
zWGC*Hm1MtYgT@8pM;HAZ3`}OMi|~?`a*Jqy!5!(Kx}z>(EW3#2!b~ZNlMRp}N%%RS
z*uL|5oZHp)*x2iNx0>1Q{%N%NHRB&;X*}f&mb|*>hO>Yu(CfW~C}wBElh{^v#V+8y
z8mj023`vxwyWwTldv)OKmw^nBZ=4=NiklQdZ~w!M)!wrwlQWOer-dtsqC97~F<>|`
z?-e&9jN~ays*`s@H82~@`Z*Z<@@}W_WKy!It$XkG^_;)vn;ULyZQI|<=_m`mK=c&0
zy6%qp8=oV`do6Z|!NdLx{&yv(dT$O%t8`cfEFL<YXeJ<VFkVtmTt6dk1T#oFdxe$L
z6iCI^&dOR5Dor!WLsq1iZ?1u*qQXUtIpg{epp821Wv)IZQWy(9VsFUCU`^}7PQ&@|
z&+}tpc%YS_B1Td^!KoKY^E9jn_x<E$P+pLWGr;@IbJ1AL$m)cq1CMcvO;_Ya41R;3
z?3)_-w2!FqnN+Cpj4-2Rkc#9uR;rj>uzVt>UvF$Cp+Dv8gFt6()O*gC$5X$+`}Q%4
zl($=jCdh<MW2uYiR@dgfRR1l<c)!U;+Q`czbi##@K68;Ag8SNPt2kF>KN%-ms0Q{3
zCe9wNZ36E=TgGtFDo;EZ+&G*J!YR;cG4Oe#JOBAP+x|2C^)@iW`wApy0>VE2jtxhX
zD*@dE4DDL}@<lPpbhq_YAUn*j2;dGzp{z-wmbD&=Btte#pNYQzVn7_AU9AYDdnJoz
zD!Lk*P~I(kk;Yff(ACmO?r)KfcQC`>h=x)sWj0K0Z2t*qtv3Yu;Ct3!NNGOz+WZEf
zP*vSZ*<{aKm4})0!P(r9p5;#;2cPjyTY!8?J0n2@2lhfRIQp54);Xu`Rzi3<;RjcN
zi-4X_6n<cC;M8DO)+HHhOLSPuQMGy9S?%t&F4*|Lg7&_$)O%jH_>wa(-|Pc)YM-zB
z|22b#6MiN;_S`H~=kj+r-p$0n#K)I_ejGV%Ii)Ag@_r*1h1h4m1_sj~0soL6pW(+<
z209WoD9x($rechmK-f}>HO6E3zZ9eQn&ci69ix6d_dNIXYH8PF^yKoOil`05Zy*a?
z74KhhA2+!#Y-~tsN@?!|GY&JF<7i5_ARBhTPcF(nu&HEeiybQt{X3Zz%!ysZdfwz{
zGgbbO`s3cD2%*Gf%u~C+On>f_TA(FjTcj*X|G3D)N9IunWlEPqa6D*wd$d^2ct!)2
zES4~%2YhP41rux8aurI<DbBA7)RYFyG56B#h-b(E`$&Ee8(TAN5~^|8!6=t;5YzGz
zRpZ}?OmHSUsU=YvBe}5acXR;~UY0*(u0Ii(Zl4IXqk4Qm#jSGRV`{ne{hfA`p<DIE
z9)>iTFfTet<-b#gfe>rDOnmG8Cx+QkLf_b;V%eEnXd^~AOs%%Lj~dW;DXN*$1F(3n
z3s8kbSokV@xTO!!?igmmDI66^^&W>Dd`V-&6vCg&oY!AEk8?cc{HRv%$^&A)*LE^W
zf<EWcZMIc2@p?IR<&DD=g5&j&Y#0?6g$W#_2#Q!7P(;q)^8dhKdaYe2p8VMGu>5Ty
zyGR((ThhgKn}-=deO0;7;)qp}^EZ7g5tCQeQpz7)R9QX-P*lm(gpuOr1o#7KAyjFj
z+le4z1+LAbtsqRULZUXG@}pc>eg$7m#+UE+j~=MIGz6Il^gS=67(~LksJVdMGv4dh
zfc?H?q)rW-B_c@mP5RkZa+WkmC;DJ2jJ5<z;-db{3f!`r09pTgg|D$~4&V29iw4w-
zis8srx>K=aXNuCL3Ukqv%Ve^g+<z6a)~__W&cwb7hL5T)U*K3SPdbx+1MQ?9w>lW5
zdg+Rv-i)U2VckRmCAQ3+U<~9C7^_19Z!=Vs7Zj?~^CFo4>#6SRDOCbst<!VDWd7}u
z?<>Dee2vHbF$2AZyUFpnVK@buqm9n0KLn(-F<pOy0A#B8N%%;wTrU`e>7)X|GG6Za
zeW55rN6?_!al+4=XH|}Iv{6`I1*~oXDUqqMVaraL5j;Htueo$NKhP3z?o|^xZ{DZq
z>0Q#l2F~7?N`Fxp`I%2me3T=YDVXhH&zscIIJK;1G~UTY`!w8^!F|Q{@P0@F$Ok#T
zWq~ca{vt@m`N$C6W>s{O%9QV?3c&cY9rRO9Y1ErDeD!4H>m6gL_&NRS!}Q$2kCG%E
z<4(qpD(Vr;9Y>$-evL?bg2VUvxATDr2gvuPmwmsil<|}I-xV{}MU+DqLh3CzKIkb`
zfk{rco-gZl$4j5zV*iwt?@J&$e8X_K@pM1nN-&zWw9bVq*n={dXTlLwICTH?$psgC
zXy5zVa|+x0_%4EjY|Z7)isQK5;?U$Wys}#QL478Cy#RfC{=>Enf;z@=K{S-=IDnQt
zf(HWLqQX*;%1=Ct>ks*<`4M*6%)-%9RVcnuqA(o>Yeqo;1JX*JvJ9$LMd(!KsZXZg
zbbzMDqRPA&l4XXXx@RB^b8@N$G{ht~t-=&08XWtgH7@hK7_^scH5?vr)MlU1@#$w<
zJgfxAC3<W+O-<&1a4P>Dejx$$z;3WH#A5>o`3-mI(1$uQY=YymglKllYe(Zu%W?1-
zcIX;W2YcT+3>Yat3$HvI9zjHJ@*zc!&LBL_<EW>q-rXCH&!hI}+V`u?7lGb=B94o4
zzWQ8M|74quMhB~I{aMCFXM_$c&Wh-i4Gw|E+jK}&|09JMzl$zV6JhUOAMDKY-&%%_
zXtQ|kLsrx7Vm|gWVh6Z77zy2{egBT^5NFP3swWWdJ^RHEzT99X=QiHb(a@}O0bM7J
z>aCs^Jx9nWD&78Efa<dr;VdnIw?#fL>e>0^T8E_@aT(sWeFfaniz+q(4#m#Ni>jqB
zJB0vL{##X(O=(JFHkA17+W~^524XT+W>b6HFR5itqa~e*s7WPh4n3`AZyj$Rz293F
z-u`xa9BVKl$ocT<9R(9w<4Hf6`NGm1=Zsa*Wr`>yl=o?NN`TqO5n;*^Y+*R+oXp+O
zX}xhq5s(w#6iJ5Sq9U}1l|Z^h^n-mS47z+R^Zx5Y>v#n{7lrr;skXlLc=p?$%gcS{
z<!Kf?T|fN2FY!&gb}Q;F-?aR=FOhOz8vItD>i#?BkG9Y#Q{am)d56|2K98po4sVh^
z$4jL#CO3&+b`j+6%10`}?9sZ3ao>W;czL_F_hSjB0G!^>9QS!!#||<3hNMr!2Db+%
z>!1xE6X<_+>zrzv2nwaU)P1Z}Jh}2e&(+Xe119-fqIP+n{S@2TRnvY++4g);FnIGX
zAWbof-0$KV2s)_+tsaq$=G{_8JWb+P@t(EDwMuyy;q~2_nhZB~P-cEn3zm$EJd)rV
zKz;N6b^UX(1xB~O-Ilcmin$Z-Ns63J{`Z^<A{0OZa%G}8fjh$$rvzlKxiK9<Nj7>)
z89yaXDW+Ejt|_^5Tbeue9DCuD?S0hI)0U*~duP~2>%sC5ujv!bLK6pzFRoO3+|zB>
zX`QYWSDoEaOlPXw5A0KursHb9)PIO^$>zqoP+Nh5lK2UE-8^2Gp8L*;{Fvdc-kKy|
zM(g548N;DW6NP@pZ`~AOtJmKjt}fN%esF=PunTLK_CuESgFW_IIcnNllqVe!3e}O8
zMp)VrjeXdm0vBeXBTmJ*zgd!Jr+l|o2qcXis#wR9A}%-e1Iw9<f&k<=vR4W|1kftf
zu=VLppj*{S+7!9M3%BsK#k{-Y18p?|*HrNv)(Qe&ZL!>1s61B9qTNdcW9Dw{z*G_w
z<Zgr@8*bmZ?ex90IzP>IBr`I92RFA$gU+oqRVgV!(W>&gV*m{d&1>>ot{qWAPCwkb
zu0SI(<|^hqc@z(bt#Di_id|{S`mUWjgN~!>@_lHG!gu7}{J@h#Og%K5OFACxKaHP%
zZ{5ADzLtbiowt9iCmFfce7zc{X`C^16U?=?{<9N+%?HK5BKRKHccT(KS$yp*fl~j>
zD)YPDeh9Y|;bp9+nVjaFg1J7e5H+KpiJ5}%|M|Iw`3W7~Hx6c2qnk}q-yWy~CmoS;
zpk?i$bYbWh$Wgv^%i~S`L=cjyQp&#ea?45iKIg+kw=4IX5dpNI>FzqmCbp>@YqbL(
zNMsd)kEXO+dfV_*2^$2#4E^0sixk>z+?yQCCecL!f;|zF<D<|{(fYh&HRv}qhf0JU
z(=t1Jr3|9Hue!Cps2Ev5$uGsZ#hLx<-v}~ORWOUjCET<)gbpmKx)~`{^_&p&y?wi5
zUJUwLQ#e#yR2jw6A_X*ad|R?JBN{J6ZTAJ@ba<a3YV9)9UZ1QI+k2@R-vXE3$oSeg
zQVs6<BHiV(9d~1sR7RU?&{$qMilgNci+`AGt(5sHfO?w$>sx1ZXeSi8(G3JYNcipV
zARQ6CI_)WsxGv>g5}<~eLw<Rvg&*FJ>M<Q8a@{E<@qCqG%0HJnc(BRoxQhWj{pbeH
zsslg)(kjMZO)1!<S7aBrO$$&?Z!2ERw6W%0zs~!}A3Y&4-G~uAWuV+>ZP}rrFj(CX
z;4^O4?I+HZ|IVn!UmoB0oKbt8SeHR_PC47$9dW<3xly!W#Qe(?0ofm!)U-v!1;RGa
zp=+H*cB<=wJ}s0|>6M}CBpBK2jrla21*&`0&BpPHV2Neb-z4=xZ3O0Bqyf^yiV74T
z-=#}qU;r1H3V?^<iOq?Ysu(SoM~ld<v<$L0;rFsj-kKOVsL*k-<LbiNm!ZgI`<F!-
z|77-!9u^HReBwknpMESJM%tZ(cU*z|?fJX4p6q{^iQ(vJjh(M>xEC~VtbfTEJnN#j
zn9rw4r;tt+zgft9`k1^-A9}c@r}+CRivsK17g3K^)`<8`_IdCk=wBle`}79t%whM7
z14>Ax{_^#s%_7P7@sN}~%%J}$(FQ0#jf*52CaI7CY@~!@DcBRV738sSx%JZ%&eRQ!
zilRF1OwV5AjeGII);Bo%OMW$rgwzUy7l70MDPH@D?i!RKeJ15w#2r>DB7f1YWGTBY
z1{}uSKX5$Fq>)GS&q%2^s-R_L7RsrhrAG5eJQfF&=ual!Htk@`$TFg>U7s``HR+7X
zml}e?+sI-mHdy`%9j+-zkOk@Y{EolZvvGa)?WqG*IrbBgC3EC~7rPQ>_^vj+?Z8z)
z(_=Z9Bdhtseft`}VYW5rExi>w3RU?_z<q=N>)t(@UBA_Sptjd&9~!$EQI8LFk*QsK
zw<DGjQsFy$>Hqi?{k1FNp865VNJGjqJ=n94qCOW=`%`M`fr}>j^`XIi7>{G~8Z~oC
zPX(X4>PaI32gf{ZgM>xZlr$!wdmbn)LhFi>(V4E~5FjsNB|9qz(J|6+zMpI%sQYUG
z10xDve(oz}%Xm(2yz}g&F+K)WPQc1r%dR=5MY8CEl(YR~?3EE=BS}15{~NTu`7w=k
zbi3fno-~h(TK2aRg`^w}m8=IZ>tEp)HqDq=w|m?#+-jnhD&m&3ox4qGgI#`daMQR{
zuZWvxJEQFosow)Y3jxC@hNeux-uQ|p==?N6mV)0!HPR!Dt8T<UTK~3{J-R<p_VVWN
z9D`yx2s!V4sEMJ>b>2W5nt#F=e>}j{a{F5D4I|qGe>UpR_iJ$+;BTGe<%XR1Z73PD
z2Jt|S?(u?hx%xqG?vb<oM7F(bs|mXIhux@Kc2C7y_<U0wHvg{e;>}SD(vM`#)HL6g
zLEF5ymv>B4LsCuDgaWhDDi$x_ygt_179PM)xhM!no%#7yw~}gzdjBjZL}BDx8#WFe
zFsr;2KsKUN(Q13d3(DQi{<TP(iSy7Gb#uLUx7NnfTVy|7lwPd(vedfE7{{aCDRiSF
zGb{QkPu#xeKD|;h)gI!SpHD_ETfKxROsH(PN~tjFpF$yaLk>DcD90=*|D=XAHi!A+
z6uP#RO*mLZsM0@sZHl!+BZRg|y7VI3_%-#YgQf^l=1Ct=v%&f1^kfQbCIsk#KU42p
z>N3?mmi^wKN=C1@=#~hHB6$1Gs@w8u>^J|pY24!WX#jPJvD`X$)Y_G%HN#WgblyKf
zRnvaHC&TsY3Xa(`BV1x>gnf%+N7`Zz)J4O*6f0Y^h-BJ>vcUy5TXpMtrOm*|$+B$u
z`O(sOi!nsh-Tiv94O&iN&}p+6_R2qzVdj=f5H%d*dwzT3J8k>ARdD^>U2pfd4e5+v
z^R3lCYp*Fl_r099f#CPrwW@TmB!_obQ6SX>)p;S8(o)7uOA{0zP&+Oz%wR0#@Ci0T
z*v3@r!P~{B8Vk#1fXe?sm@nx^2F_A*(~>JX`1f;$lyi^Oh{!RZ+9z?S%KrgYvCZ!k
zsnZN_sBA)RLMF=T*UbBwb#d!l{8fiOEr@lINoaL;T<|OACP>0;NAGn#aZo1A&%zJM
zgW`<9<c8AlKR>2%QByPSB)UJZ02r5%S9p^`9x3nS$Qmco-8>2!`r)Mc@|E|pu~V1C
zOZ^`JX+W00)KaD<eAQ{@LLyLU=G@n9+to;t(sjeZ8SCwF@y&l}eJsfO$a{C37R5LG
z9A?gbbJ7^w4uNv$XC!}2+Dm9?jW`zT6O?{v9)P9Ck+qijIX|<>eaG*PHGcS_v;O)6
z12;Z)W&dUGDCG*ze+td_f%QDLmtZzw{LIQ@kL3D?e(HaIblo30+!Kla_>Z2b9ysys
z8<_P~J?~8hzTEm(>&7mO`U~s)S{#Fqxfodo<XwgnD-!$WOoT;AZj~n&kR+L8$I=^V
zANoshCQJi?=`1iO6aBMoNt!S~P9Npz;gY{b{ggUm)^_Z4&pgdU)m{?emsRT^sB);;
zU4@cX!9#m#?X-AXF;@dtr*L4rJ@Y-vX*6MK8xrWV=!;djs>4do!MW4vA8k|POjT5M
zR?vFTQB8{|fl8w*XDK37V6k2x0ic?%DnZ?$5d-dVfJ-^UC7!@?#_*+03?t`Dh+B0V
zFwJ`C-p2h488(lcgQ<ag#PQme{|9*BzkI9T-2NI(@8I8m_3INqRrtA?vFol_s`YOU
z!20_*8wfe;&ja~kAe;r<1ps3Jrh)h{SX$+*QAf%OV%63C?)W9Va?ZWO>$d#$*gxfN
z@BjU;BwzUdQmQDS7n1gB#xJAw1;aTys#aR_&ml$BIm{>WZ~gI*o$+UvZTra@Pe=T8
zFa<xI^N~>o*9DG{@NP?~@++rG0hXFqK>0PJ+Cd>Dox;>kWkM{ITILj<QqGMc8ftG$
z8&aq<m`+Z5tq+{_Q=W-I`VtuvLid%@Tm`LKYh^W*Pi88kwDt}sbnWg=Pz_S1xxK53
zsXQ&l6`ope3<hYd!ifF`?e8$qC+nVf3ISaSQif9W67n?ZJ2>D5x<{1yLuoY$v+USX
z)kjLLS3bp=00O2P<|$D|?N;<&pXe3pc}|V<)JrAv3_lwH=Sz}6lK9IyLv=Sp`BM@L
zdn8zk)PnWA2Qs4btm^Z`V>4g#|Luv-9h(#XxS<v=kl*-i0cIk<Vb!>|?Z2KkJoY1R
zzao#TZeR_kxa_AsUD%31UmsAMgmj8v&3Rz)Ah1${sAW{?6;2iaBA;d@H(q+mPk;W`
zn#IpoKHj$+EyX>Vqn^k1vf4^(UQHx=Zqo;S;0|z>4*vA;@RSJTup9FPe9Ym(p~|Pk
z@)AR(Zi<nX>q-Eml33bQx<_G0#{(j%GfwKV$}6G4!wjM(Ay$B_sj_Lps%4O1qq`Ac
z69i;B-_{u=r9rGclYlaCl*2LvTm_#-qfJpX6m}_@aPk}5`8aMQj%*h~n{aDgu69a9
z_lxRH(fL0DwIE<<tpJUqq_%FlDd=;!fR_h?0U#Uz{1PLrPc_YowvSv=#q=PLk^WGd
z&~8U<7cQ*!92pg6Zt@s*a7F`Sa8(ZY+ffOBiorht)J{kxJ8na6+F$c^##aw+i9+X&
z)gdOwYgjn?T)EW~jc1O|xd(rA2^)T6@v|5H@sWL#Z+i1j6dMD>Gk$u6bO2jmA_n6D
zurLSARglfL;8k15nnBuJ%Hz-xo`33@X8x`t3`h9vA2yOI1>5Kq5qiM(vf2x+P6d3p
z50afWQQj1jf-UctXol3j$q`pGR7q0YR6B|0tICTi6t(;(g?759oSMZcwj?iw_-zqG
zR)qpIqIRep7ME~!T*uXPchYPldc+BVV1$9?&46Sh4X!*cTPC%9G|N>pTWqz|>?Uiq
zT@$WR3XH%_dz4*8hR(c$cF3yk&6k)u2YF?_#}q%Xeh?4@@+~T+Xl@z-QnCm%k86*V
z)O4K^5Do$PK?Z*SaQmp>qW78dcumTxy*>0dd2%MaB**Ou7q~SKycQg*U4hsKj^rdZ
zk4jNpU`S%^g{pX5GBlDD<GCSG4vScBjGjy555D~|Ko<*+G!;0w^7Nsl!m%5pr?2{@
z**{qQ+duXT{f)lziZACPa8$IY-b@5>T*6&(#L=gU;^s&D@(&;H$H8i}=Xf&rZ_D!7
zXOA_WyghC!j`XaTV|y9xg<dHc^1}{y`EYSf>Ui+8GUts{4cJ5)X#%On3<>F&(32Sd
z`pt^pq(md>dt)G_$?0`VO4aE!lI(HFE7RdxyOJ8kL^9R{5j7x%8pM4DD(bbpK~*3%
zsAj64T9?gkK&PF`dP170tMADpQXw08c}DN8Gcmpk&=km6@kx_2r1Tg8H3wQN60+6x
zJv5yvuQ_b0fTFq}1d_T$s|qxxfn{I9%QLur65#+tILP1)N;v&A+gf{5YLu%fyqF<1
zsyIQjE&hc>Djgc`0?frgfidLD0>cx)(ftg*QXSErteThM1t{lo;Em!L06z0vc`mEY
zLHlT>-jp|GU-}&`u3x|E!;>F)_s<VBWNpcpMImHOaB(DsTMfk5Z}0a%a(jv=qeH)c
zLf-x-3#}7JmK)R?(cX={?3%G2uzeSeNjK+tdGwb`AjR={hojj5`~XN=4roLvk%0wy
zWex--x(TgZhpD8$V%9f+tWFct^<!Ej^caGWW+dp@n>6|}NdV%)seve=Ku9SX+c<BA
z89NSzS&UNxUS-h~hs}CuMmeNS#5Ei;YFBFK&5Y!?lJVBf@kFHUZj85bM{UIqy(hY~
zRZML|t&e7DWK_{LRaUnT2>Jj~anM?zoEvQbSJTCmqPR!MBo)axStg}+hQ=Z7wJ8Pn
zejpf<%Bu^8^kbUG!}0*5;bVz_+hRy+z+X9l69HbN8|Uf5vVK_N*fTDtE(J>|$dQy(
zj`6&gBcE^Jg&YGE*Auu!QHJ}2yMKD}!Ry|5(c|Tzbz8hNt7JTzNrbm7#aC}1bpQJH
zWcK0s=8N|&?caaWab&{YUdf<iJz)E;n3)^EoK(U`F_)oO1ghkf#8S;JpfgERA9Mwf
zF{*<y)z6tl9C0l})&hh9GpeBG3P9c`FHMI^tp-Q6Dp0FOXf_h088vZo_=OPtYg_~&
zEz@ahQh74lhuG~=nThUt@_W}~8oSr6!KT4W(P`VfHuZkf!ezWN)~)K%mb*07ShcPC
zO~h#<(E&AwiUVE|$c+Ql{lNSab;J!CvO}oM;cyqO=OOSt1UV00&gCu@M?B3C&Jrn-
z7SLJ->W9IV7h9AF`WU=^sIb-R)6XRyL!3&qX!NKAM#~KG40(rwuNqD;=ms<bO9=ru
zoT20~4CE-M*PzXR!SSFKSU9n=5IrGJ{PrXF^!@SbGu%qH*z)~_2=_ct5`TRgiyutC
zdiMS$U2X54gw=zzZ?qn;eHV>6@p3Dcs6^9zYG9HV$TNr;8cnH&0h8jZ>MEj~S3+K#
zR6r(020Cd;v^Ol$JwuL?XF?#ZbJVK>mE{yG^#+=06`5!$??M$5;3AIlaQy+4*E%ZH
zvtvEGRc&FRrfU{xJD1iLi!{BXhVG%cXgYtS9xLX71<4LLDloL*W{jdqtK@6>YXsO7
zc&qht7;?i@4FF~zYoJ+MAQmB{BJnAjni?inm&6J2;W{CF-$$4W5#)V10ap{OBp1rt
z$|!VSW=K{T<T0t#c9ooXo~omoeL}o9#g`iZ<UBBXS%gg^6`Z&yK-DG2imtSd1p-rj
zOIWBAJ)?E#r38ixa^b6c_U7=qRt`=ygZc?S{_tJp@_sz@RsuCEGTHOazP<H;?Ym<7
zu#CmrybrPX_~FO<cWpW+EjPhe<$yy~pjD+DP*-?H=MV=1750#4MpZi<-cg8IUC6Mw
zl%Za0p%FI_XAKAzgDIk?{;3&pAk@GBiD)H3A$CC3Q>|dz;bvL(h5GL9d{}3~RGZGh
zo-OyS@?DaOi#h}~n`?7uZB-BR8Rjo~ziK+L{CqM+yR%?RqxDL_(td$vy`hREY8td!
z)XwtD6e)&)Jjs?-Pi?K{!C|3ry%27YLy!wZF7&vcbF_3gHNR&<QDH<Rk*w%K1MMai
zz6Rt;I~a~)Ty#kj@;-qJPhW;J$WUb-8ZC~AsTQ6(ei#eO37A`XNN>f9n~AU}=8x<>
zmMqWD6~b}9lz#m&H+*ubzWYe}=x4q?FS2Ld)&sUz)H)44DuJKQ#$(0mKRxoy6F>3v
zS$os<qg(xSAx7SJP^E##N)`yJlIeMr%+_HioySy}t1L+@E~luhv`}p}(M;>e&{7G1
z#^{9h1cR$`_qvDF;pCRkYt*qINUA7j$ggcsv;ChMSZt?(1vs1kYB#J~WezJMsY<se
zkJ~d%rX5f--kPmTn1Zk7#F^>Kbnh5K8>5j~u7u+WG*@V1yM*JonxL%8z=Wbyo1pEs
z2uy@GC3PZFxq^gZ(8xut;&Ru`!T0kBL+#ah6uJgnNr+SaQFSp<m6da3i9ocF;k_5n
zBfr0e`yL*}>T(McP96R0E67R>INOHt#b4g<Cy}T%^M`ip-};3CkOiz-w%pjeIRD6@
zef~v56JF!f4}`^8asQ9cRcf#30GU_2^?>a=4q#-RDFe0-fGo`fTHXWywUEE~-T&~V
z59L4brk@pK#R(oZGYnFmjN(L<H|Iz)J$z(gMPgwo!Ad1Yz0pJ~X(1JfV&exCemR41
z9Z$HvqHzh4sG-g-l|5^sij=v!x1G4Psi`~~&X`?W9U_`hd8W##b7Hy+frz?xenDG}
z!}N*j%~PO89JY4hpaX;^thF7L#^Yi{N>iN-+9Oo+TNFW8=htYa0j;Z2C4pmxKC8+w
zICG4jM}eB+v$WMj6suUo5V8p=Q>ulk$5Asu)L2oU<v1P!FM#U?2y#BWki+#k@=RdZ
zk+^ni3sYqu|MICJ5b>|x@KLMy7+qe(*e(xy9yuO;^b?Qf{le0Rmzzfwm+{2_5N&rY
zYRcu}i9i3?r`BI_bHN*Zc=6Cj4kQoV)$`U~nDv0|Wd<=#mN*%}tmXUy^I17?Q7n0~
zJnUm|b-p>WjROnw^-B3q|K*R;otxi^(enAqOQW1mh7`4CjD_VC%N2oUk}1!`Ax;|e
zh3Drffh`z|M20Gw$zfiP=iIDW^^>fLR8-)4eq-&>>)f)tLCm&ViXx&=LfvUl(-_*x
zlPPD)gqWSYnjP#SsWnpzM;elDyG5$|v33<XQ>>Csey*!+N@&W2DkLc7AFbbJ<c)~`
zM$f5zA=T6-<y|V*iXcqSJtePH<>Uy~6f_cC(cpN7Lg>IZ?N>^wO(Zm&1vG4$kezaL
z#3xHhO@(?-Nn^d~!U<f2MF)cghQpN*kKK_+$>$gf1(sVJe(IqV6wwl1`v3m=$LS)&
z)BIikO_1X6OZ2P`x9<J;SD#^Zkp+{};;z4rlGt2odiH#+2W&617e*HNIpq03P+%h?
zz8F~NrNuKsIe1PP!@F`}xHVt!iv#5nisd4N1I*XvacFKneR}#B|LhZgfN}pKOcpLg
z=uaY~QYV;5W0|rvLqLQzuLX&OCt1~R#dExs&7vh1kccHDsL;t;gLL+RCx;|!m1NDm
zdZqeUx^vUdiP6Fqu@onS07j)k>t85eN6#B==iDr>%ucA%K&Bf}HQ&VWzf=!^ZG!I<
z8B9J-mv_|w=5C^{8M&v5pIwu$%r3V5q1w9?3e+g?rFuoFIfGiENaCEnofsYjaf}J7
zQqsUG0<)na^;sPdaav9DxiSj*LFB?B1@>+n=Q$0-i4!17h^ef@SPQ6BoFRFqnHJ;A
za}wnc2(pa0e;|ps(N!)6&X?k+|NLX|L-#F~{lcDiOxGVh`cgbA`@Tlf6nm3fK6CPG
zJ$oV61Gbmwg%!ho9<srFUXD%XFnU@}3|>%lio43Wp`Akm{evUJKE_9VtX@;Z>h)!e
zjfUw!jyFm{ULaQ_KZB=BEq{5ji9ORR_|)xB;HwYr!QREkQO=Dah{}+{rH)5G5j7P?
zWirx*1t}X6=|RDoj|o=0Ba`zFq;lz?kjqP{th7Yh5R7@O;GTb$-#X*#2c|#op1FAo
zZ%D2L7TfJhs=rfH7bqv6n5pin@qkEhZIulZN*W~(C2>YOfjk|;My;G~6g*6~YMUlv
z2)K+|u1s}Q?ap?8s0n>L)mg1HWI|C2OVun<DY(OR(Su-BP|<-2O${MHVrnjEIrK5T
z@?{)6@R`tMWpEb25ArA%`Z3TqjQ;XiTF#HfL%|R{w~q%d=Sj*G*ilzTmS%!lUp+2G
z!DA>mocFs9)(rz2$E9eN_QyZ+d!O*{d!Skl^M`-raO0+bc{wSvoi3JdJmz}#+|~m&
zWnD7O-@*$kgcL^hc|HdEylikP6vI0TZ1949Z}j4!Qr~G4L&b3Q>O59$EMe6eACu#S
zba<pt%jW~Z8Uc@L9$#GX`238EgR{(CUS_Db93GQQkQB%}5)*yv@czqo;yo8F<EBR*
z#z$|xOH>;tT<*uW)zjmjB$N?|r&CecpNf^k0`*EJ8!aJML`D-#zNt0kO7_)<2fV>w
zsMm9U(#nq40(a7nvQ)J`DI>o}<*QV_P0cG%rg(HhP=`Z1@o!qCOeNEJSvFiHYDOp5
z)}eP8UYkNTySF=Y0_<v7(aN?kWk=P+@Y<kyTq!?D?O}#7XF!d^q25w15xN{<5Q*u1
z_xNxccQ*JV@0Zfg@p$0O<tW&BY@u)kW8PVw<K^>V0mH>r819?IaCs^k?i))7`};s-
zTbVej_*(FRVvfegRzxK}f<L?UZvUo7_7z(Vw#*9mzvfW=Yj@yfwqB9orP=o(uzf3U
ztOH{Cpul|I@A()U%wgiR9Hy@I<iJHCFKip_E00bN7qM<l0b93}uzqtN#-?&{f6i-o
zJQPxtc(vm2#Tkyr_BsCSJj3*|gGvo(CLAr&R5S9fTA9OW-V;E~0KwA|ljUKYx90WO
z_|`4>KVSa1I5az7i20L$Rf+c1pKIH`(Fhf&R{Hp-LOJ#)QR4&;@{=IRHnsh>cb;{5
zNVc8I(l~6sjn+}s<_vYi@YGJCgq$=dRQIx)s;E}dRUoG&tyMNms|G3PvIPtkhLQ*A
zkUwieQwKtYqMnt*Hp7$&inX+o@-{t3f~3jv#YXHP2s1wWzn7!C_L`kR;-4S(-2v`l
zpy*^nYZ{IIvleUnuiST{aD~tNHV0k_#juESp^S3QN9a?CnxfunVz#n?nWbea*evG5
z`X5!@yZ&Ige&{)Vlb(Gy%>DlI#=bG6q{?I78*l<P+!tbeizlb93dQJaLtZ{}uv{D*
zA1PwP`U19Y>chqj16V&<jE3@g0Vj{R>GJB5$7lCBeD}2H&n+=5)i`Pq4gVl6trc7}
zr9%pzOcbRjUYRviC$4Thr!?{YC4r~sYS`4bmVe;NA4~u8=8x<=IRA#nGw(BJ){|$d
z`e##pOI_C8D)8**>Hp1ohDMZRD{hfml~i-R(KRz(mkCV?cvQI9)=#qy>jnke)1^$C
zRJ*%?1{YI7z<Op%G|tjH+FZGIXF``+oT{L<rN6sm$`yWbt*F7NqC#&s>#aUb(_!d~
zgzHE(@x8CaQ7UBW%Nf!Iy|4y&`o=h25;2x4z%xY6pxZwN?y%#rp*}AgUR$Y`PdipC
zZs9VwHWTTvlqu&tIWACp%ynvawVcDd7aGTmG*vIHe=3^$y&h6N+ZzkL67%^`-V?)9
z0ajn+iSal1S?T=#{NUR0p%T_j^<(qeK5W}MAU3TVXbcRMgwJw3sk?k(nen6hq<jAy
z$IOz0l`2CcX3F~!?fC&JGo{LMl>2GV<CG59vk8dRu0gD$tZm(=HeUkF_3-3MjInsg
zed|T<Yy87)f4$bJ-f+9X$IojfCuqpr3(CDnq={s#k%(Hq>m#K;P2z*-y=Dsp#)YG7
zJb_yqpgO7?C-r@H_j_8RZdYDSb(fkPonqg1%ZRI{RjqBN96(|PtF}qKHoB0Z^}d-)
z#RKZb5IQVXsAsCU`ol=+3BDr{_&^~C6aocm1ZLED*4_)9Ek1egw9@&kh51F`sYL(}
z*^3@c4x`0WQY9ekYMAOwf&X^0hTl9l+q3Viy~=^Dla2XiA*JiO2;BiUaK;85F}{r_
zqu07};5B`GaOcQCzq@W~3>()CW6SD(teY5ajE|N@&JTH(c)Zr+eENiRAKeW;vm{C5
z4~<x&nJ}b=>p+PoOG(h;6<YE~opKtyI5n|r%`eMSHR>Gd+%`gy2Iy=VQc3=kKBD7d
zw%J6SmfY8#`|jFj@A>EsH-7uy9?Aat2U0<FspkW3`gI|rlrg@NX01UIup|#iba_bH
z8S8wO5}8zl*ACsI9ddSa*i6W&*T0iH)4imf273Fr-KM2NP#unIf~{H+y<5$Cs}R$8
zYRnbf4YZD2o1S8vH(EtSe{mUnA3PU86nwo57&ViA^L_Hoj-}2%rSt&RNV+vcZGVRS
zlovjc-2~}fo^%iJz7yuYdVx%S!@-dY$}Dupik=)@?PL=dIb!JQoE*5g?Del*Gdze*
zYlg6C?HJZh4#(r8{k1}&1j#+#Y%so1<Np17Gb~jEDs_owtcRvhGqlwwYp()@a#RGA
zCSRteA{mKnW9B^9pr!scGXPAhl3r^gbl4{6>l0sdTeb2A_4UlRT6{2E9bUHMO|@Gd
z{Oo(j!Z&>JSmU4n!Sn_^uRSNJ)+y7OOg7hRZWw`v1`o{*vuYZ))k&*P=r?zb+*68|
zW*lCpIMCH&YUmzRt!(q#x;Sh^xU~feg@~OYGd91bK~0CC+!3IL3Dx4{(Y>aAsBKVv
zTe=&=^B8xH06@+WyyQr($i2_|*y?!8&$XOA-tvB#<(<hsM-EIfk(=P~LfUx7l4a(!
z76of8$6|RU7S&cgSrJ)AEnnX}Wzg~ddVu$R0&MJC0$J!6na_s{0b8@p%htZZ6(iT?
zF?``*sUK^`hp=(g5H_zK!MfFh(eTKipf2dB$=#JE<IgN3TscbQR{;`<h+~12z>Ee6
zn;5apNHT3cI@~0{F<{l6@n$JlcGjcyU`WN*s91D`oceDg#bZIv9P8Q#=m4oE<GNUk
z>KH9<4^LlzwDIWP+TZsFXWzQqdib!0f^X+J*nO5r#<PVqYtp1Ep`t8PZM69;CC5z}
zc#{un&oXEaVo~>c0+p$HngWA%xMWvxz*bAmDs;LMx<cP?c->6IGKCCPJRmNvE40kF
zBe;?$G7ak#g3>0Cj1#p$xh~D=6e#B;267oZ?%1E_WypkeKB3@^y8Z6C*XHELUo1Ey
zSM(PO=qm-tdoHzlAWCC28!2k778+5#(#q=3z>9bDFnU_@%Hxrod%P*<PsDPi-V*h+
z9@V=vkx%~4lXW~gzh}>0wZQglA}pz?7FozA`U9*!)6K@Na>ej<IX-yaV0p-2H9m?>
z8z!)E!+5-EVmL0BN}O@VTM6UUn7K!1g;Kqs1CBJ$5*j+J_)2DaxB(mOL0MoixiD2L
zw4sz1du*?j)hg?v)SIU|+n_3-nlRRWtt~oBbdN4?&LCO`#&zh*xQp3(1skWX=EoMF
ziIcgDJ{LL1&xx|x=hWBN>qIk7#Y!eJg~tS7sbTe7Fd^@ayq~roXtdJ|!Pby(MOU7!
z!)<Fn*9NYWq>s8nOf3Mc9Yag`Fog@QE2JvCB(ID-NHw&^j)>RZ9dR%S;G|@nXdcS5
z<5E>bLr<bFFEHAdAV*=V61jY-rY|0zlV>CDWmkIH=06_|hc{n*#x|V4b#t_Oa4_vJ
z2k<y~ml>E#jres`TXnu%tK_FwR?ePVYMi~W5MyDniMiznE0qSSwaTG5tvw~(>Z1`~
zy1(Tt?uoE?q>05!GpnYpn26Zl%)9G_v#&y6>i`;A&L46LZ1ZL}UHvAWjJzZC`gaWv
zj$!rGI5uurh4pL3qp`7}S~1Ll`P@we<Mjys^sL~`YKB$>#4U!j1*9a*D7aE{P|0or
z9F^E_4_Pwdpk9x5`N77O=5GQbyRKSGONXL%DecG^LaKVwf}Wvx7+_S1CPlP0-(^76
zwlrBrSLa&IP>C{k$Huorwd&t(M||xs9nJpnx1P^lB~L=Q@e;KZQO2LpLxrB?0d)~#
z%^a8ZFQ9uxb-1ZAh3!Iu9#X8<Tn%~Ycx_$Ns7%GP(|@XD!fk7oi9IdWtK1oRX=aL)
zt%|A%T&m+hgPN`5n*J*SHKo1gxx_aFhVlaIH#d<FBxEg(U)r&#-OzHdsXT(~{yxXX
zZanYIt?6~=Ua~w=9uK29<<m=Pcz7`rR3-5phQO7`hy5t$8P@b8-99DKTp<!cF&4sa
ziW(ZcveIym&sEnRIZ<DG_;BsI69+3;m~LRX8le`|kHx4xl7uVwww$GVtC)VgCT3@w
zV!735k$3ma!r7C(yYKh>-6;la9nT~0j|T<5{l;8&+HaTr)f?Arn8c>jCa`YpWHdfH
z5toX2&Ry=NG2^v{@D~>{G#eROvG&H&CV6BuP~_wm7X?Ztfloq#x=-4MmM4RV85*am
zdKTc?*Z)plybJukA*Ez|IfE7^2iF~v>d(?%QKyb;tR0T(yc>aKA|jD@NBuLmUR%5W
z@#r^)f-63^(7N@ZZy%BxPgIJ<loH|&O+i<Q!uHg4%`5AKiMmnU5^B|22sOLYJg>p2
z-B#5BHG2tAg$L75YB$D=ZLk~PE=(9C)s62ue`eh~P4^&z8dDl|BqgMCgnECH;x7T7
zrFs+sU}PXgc}=1fd{yt)OFI@v!pqMpi1WU-YH0P~8!o(ddCkZcf3e!iAD&-PMHZJc
zMLBU?>e;0k%mA+u56^+i7<ZY2&@J#nP(Z2JhjJ;yKwpA$*JRN}JB5&8BEV~?rcKPv
zSNZhe>cr6lt*PUOTd!X@9$|T=iKUg5My0v(Xw{j$t>G*_*b1t9Dq`kvHJe+hCzY=J
z-Ltpi<SgU&3)r1Pz@`r*-z%{3;%jbjnwvgU^2Z0y+`a=BUVdg}-KG)lhun=DjMrBX
z&MhTq#zJ{yttQF%0BNi>@O6lye^OP%GiYH2AG-f;gNgE-EXZgXX!@LXYN&fz`xz$p
zrd~HWa8=Q?4A(YL8JKJzRNYlE1!`?X(g9aTOW%I4_9Q8ub5T#~7#Td<otoGe#Yd7`
zO8)HnYW(ElbA_amrAtcZpNOz3S4H~UI!07gMkRNozpFFD#UQu^wf1mh<JY!z*xJ-G
zVfEas9-GcPn(en$QtJ(>U9Pn`bl<357aJz)-Yun_W{U?djp5R)UizJ>B1)mDPgD<A
zVt6EiJCMMY9Igs%U+9sjC$<M}KOYNj{AoX3_rG>-+7@4N&h@oS2Kl`+RY3(M`You@
zURS&ssq|8}7s<p4@`hC|mYVVj;fbTzVyMIpW><W;$8+!*c;IBb5K83BeJJ#|FxKC~
zrqh#HUM>X+DWs^0S|jCiGpRp)sBz(u$CfTU{L~7jk49LUt7D-$zq`gO52az_k(Rgo
zSe4B^Rmo;&>e+IuR<D{p{QVcoo<hJzC3_!Jr8oaqFWK~K8`hs4Uv|aiwR0}(^P?8a
zFD+*f3mKw11OZtbF(uuc+F_FI&)}T;C{?VYs+opr(FPi=G|>T!lf9(&Pi+R5bV5)w
zn$B2vIBMM*<>ho$MD3j(Dr}b5$kC~mny{)p+_-CVY{9|i`E-U$Ltnia@y%<lOK0bg
zlzDW`C!74pRjH_-M0<U<Nr;N_Qh5r;BW-LNm2TG3gwIyxqx<l;TVlu>M&ZLM=$g@b
z+Vi4W&Rwr{4PRDc`K;I4X{Ty?b2iUr9xD&h41(5l4=N65k4;@f)PRGIZX1Q7IUgwd
z!04(Pgxdnaj>G9)FC5g0{;FWyf7{1hF?i!OyRNEjTYHf^yWH?wS%s!HE4b7}Uq(aa
z)s1>>X+3C_Gsy&jEgdt|eBsiCQ;j$5NI|7cDnfR>>3}soI5T-t&!ZtS+;=iJ7iK69
zw$L|~V8d97O_xNmc->SgokT?S7MAB@clvO1`|*7%+ozwZy>H=Q3v<&AEG<{&D{}F%
zdU55xs=Ijif|!1|iuu_{R-5&xCK4Ke@vLLyd#x&aiU6BF*!%olS0=UoU)#R*qU8%O
zz9xU=J6T9$f{xtIkW_$HosrTh7b)GVHYBCFue>BvjnmEodlsmvlU68jk?lIA_Q=|(
zX3na15y1jmcMk02P)|KHVU$w6FbQ$}V*4!BRF5v^gj!E}Kp<m3O9Q7GMAGfpS^k>^
zVf#WRQ}|iY-L~oa%0rL;>lMTPb?=^zKKapaM*-o;R!Hw!vKF{kpz5dw2m>T-a+qEt
zL%da<l%{92y|uOmTf2imNrGGK?k*tM_3oBJ>W0fUZLAZjYo}3?XQl;zT}^*c%?W05
zmAbboyQJ5_fucw4XfcM?)G;S$yrJqL<u4S}3f`(<#CzA*eJ8)`wdcL9Ha>ise{i;<
zd4Ht+X4=Z=GC<Su)B&X$S#=JT?j1pzB)Y*&A5Z!?rG8e5AXGJ%{-*6v1E94O6#*pm
z4?C%cY8+s$l81LlhuVRg@mxOfi-QSDqp=ttjWKzqh|akp5hx~*A`vUIEk6HDeQ^4z
z`c=oDSiWk0Uj?&=Ygk&UHL9)JQ?;<NdpW;w%PfxFu_We?Rno;qy;)Pt%#-&;Hyh#A
z2Xv<Zu<0W^aECoF+xpL|C(eoo3)kceg9#s*bnws}Ovz*?4GJ~&G;^ALsbfrYVm&K4
zMes)H6>~*bPL8H7Xmsjm{8J35Ne^Abc%3fp8aGF#+oFs|)kYapJ?)&G9U_DMJe!Pf
zv*pcFboC~H%SZu;4tnds>CbL^l(c$!fGCv{IoJ9b;Be4N8yGB|=C5CMZsVCF>4!`H
zwy#v<$LGIQzD=^EBB{~KNrcn(h5$x$6cnye+n2?7ePJL_)97jr^|n}~Zp+ddZRSK!
zQEgX&!GxLGL)Jb)XAkM^w36XnznvNA!a#AI;}CC6AE}bGDBHlMiyj0Nv@O0b(dPlH
zCYx{uGhj9V<-XdINY823Q(KoGc5b|>oEzTt#`E7@^ZA<a_~N2aqMu60PJgE5rO<b%
z;*<T+wd<>H1a4|3tR6q8X@Iu7j!7icxUVL8>9^2l(engy6ymz7$OB}mCzhd+F)Y_Y
zxQ#q~8r&=eO+avSxfF%I6#20jh4C1J8{>4-g*=rxCaAHmIUn))eKmh>Z}ps+C#&a7
zKfUt4*(1wXm|seln=8AQyviMOa^@>@^7w-lEY8)kN~_VVeM1<lf&ZHoE>1l=1%ORk
zf$zAn&s#IRdi1*5%+f*#UdH?}2hC*~6-*}vbpz5^wXP(7SEgQjW1UFOkT}}QYWh{@
zBswW)X2Poug`*8Wnl5X*2h?jF&Y6-LGk%E?OYEB6*~!G)B7&(Q5QEe7MOxocA22!x
zW#}Q6z}r5QPA2tgFUvtQZt}IOuM+ds!$PiH`RSH(;<7kfG?dws!)1Y_Npz2tD<Ly5
z5-y_>B>5HA{b^?v^}4oIIBaMwyIQH9)kkV{*eFk?Tcs3mna@*hb(bgCReU)K)Rb37
z)lm(!>Rxf!bQnslRW?LbI&w-~4QiYqX{JrCt*ZemQdJrBb?mv1K7AqR54R1K*|m2L
z<R`bh>B1kXNeuXNwI#v0V_Nui!@bV062Nh!s(_)lgY<dnbvj}d@KPwMc9Py$m6vPx
z$>`9Vw0|ubIZ+D5I%h~To>eN5@{2Txt4&y@>$%XA%v6QhMWyM1H5i=ZKtP_Im-1W~
z`&5O^kEAH9&SUMmfpqP8B9$RE!(<{}j<9&3;?C}=oIU%*!r3!VEd1n&gNs<0Z!{L-
z+T-)y+?QrC{pDFX{lro>yHsf`wY|DmgGBi$0Bm${2JkWVf&S7O0a0{QEaTYG0v4x*
z()L%=ux)ja4iv+gvSFlhDQq&wcn7))cyf`T4QgGCf9t*JmknrG+J*6)+AdzV_hv#=
z&4W;csdf$2ewI!xbuQ$Z24cJ*^1e)WK_`5+>)8chCv__*r-Afxg*{(Y<3r-OTh_fc
zdhoHii%0y||H6sZM}GI@)7fUOk`}cIWwghL;A&|Usx94ANXaoVDz+!7-nIv~*scS8
z@ldC*^4v^Fj!uYbki4rB+J3Gb>Ztw5x_E4KZj+~Fyh%k#A#cshp|O=w0yrxKOhtoy
z$S^vPU}%g6t?G?3aGpM&@N*=;YgGwXK3>Z8m#^FT!?jl0=U1bux_D?zRy#+NkGnlj
zdx0{arG__{b_mL;(V%OZilslp%zZHLRWnoV)O%HoFrJ&F_b8sBpbH3nnL}SrAg6^q
zmB+2BuS^P>2TQ-3(t>w6Z!s6u*n_iB<ld|l{*w}(pK?DJ^ISPb(4Qb2b;Z;~5mRqn
z70Vxpg%DZVoNKy^PcDSh4=?UIv3qvciM@-zIy=+E@kaHDqs9489~Mvl-TunMPZ7WF
zR0p^3GO+1G#6ixHl5Y*%A{S}KrEKBA(+!-lgC>ofJgL!!NK|^W$^Ev+WUbA;un}2j
z1e`MK(<xWUvi}W_%y@t8#JvR&wOm)F(;%g0aTsq<ov@biYOmBbI<c>7@KE_0Rg`4N
z$S<<-jIO8}CU1LoO6M~z2d>SbqqeUI1%I`_dg_AOfkW}{^!pcnaxuDd?>B~|S&KlF
z<i-_q-}1<8*4}tRW*yr5TYZxaJ1HO3olCRNn?2Jm9JFf&y0WaoP(%MP<EYF+C+FK}
zX%%j&s;#bq5|{~(dS~_Xlp9nbw9T)%)K15+dc1`omjEdtp_L!`c4wakwSn;Lu@bI*
zs+{ZdUvut{G+JrFZ^TtKFh&ECk(n~ym5!FRch%0vD#3KaZZ`L7z%~8Wc6U;4PG#LX
zz@{aah!fc15z=*1fu4x~R8^Qs!KvDBE-<QxRy|LZ3gi7z;UcAw)&QL&kUES<Ov24v
zAsarN8i#X~mdm*BrU>&1@&gIajmK_oRUT{39!b|+MI97Kvu2E?1B>p_yPrDa!OuQ^
z#)J2*{pHoAogaU=^|>FLsU51E%HVbicx+@!dX@5~G+3N8TrqQO2?w7pV#{_9wIv$M
zq!l1EK4}o>WVX7<WbLAX4c)ZaM=F=qnecWJw@i6Yrun&3k+fcu_0mpGq_)4ijXRoe
zri641@M_9cr*(<EBsx$vzm0O_Qd3pPfm7UJTfAsHr^fVZo3vqPy%<9jH?V5_GIybJ
zB*tR;sfN4%>?oZ%Sp|e6kqIGL%4rgl0yQ(=&gS^+uwvy!k$0%xPBjg!nyZR5x=&OG
zXFBXOl~En^Q<YNp##;4V{R`0ftJXxZ11%@S=&H5bx};EK4h3>V?a&jWRLhjZ;Zg6X
z^4Ro#)uE_B$&pw+PSR+WZB6;7XS2AvO@n^HTUX5E@(1!kpMS+U|1OTRyxWW$YJ!5A
z#jLzZ1z;2jb{?yrUFSxXhp9(>wY^|9=7G992+V2P80{Gv8g0PJVmj?OOLwt-uat+Q
z3TvB!Ll+~nZ`5<<V&V#hjJ{igqN-%rRy0=upRIB;#7vTMy6U}EK<WVv8e~KB9U3_}
z#{lnPfm|-(h2aE+Rhb`dC}QliVT^9y9H0F|yV5H@_DK5CKRWa-d9ZZlW5rLMd7`#=
z?o<W0=Up-S&Y0dI8JZbny1Skb;W49PCnQ$z&;xTwQ;y<*K4>)SToXduDvh0w(SLUT
zZKo@B<<czOs?#>r4rz^Etj?(^Wd{N{^_YN8wC_87xQ^bM1w%TitZ<~w16mTW!ZEiq
zphPvH6UbTespW5(Yq}1m^v$j>0ZP|3-{j$F5*4YAFn80s>r>AgIHTXW@)ykBYVQxj
zOn{_$qvY|>{<OKZZja4)0y=~?{h*|^Mp)5RxwL|iRG{Iir^9-4oi%J1hP&RQz{}>?
z?XqT{w5PyZng{*#G{}X3%@gWx-HD*RHX?IS)9Y9{#Ylf$waDpp)L+29Y4yN@+WKN2
zuDhcY3{PEh<`2bjl6UJ-L&XpzZlG=i9=g1#a%Wl)fjUNP!N;`AnOvaC{TW&c<=5y!
zoe;GnWk@rcOa>&WzENLtlIiEwGU{Iaj!4Y1Y8mw$)Uq^^(Y_YbOj-In1*gwXQmI~x
zQ=nyUiMhq*M!Zj=N<~~hriu5Y*5^o68N+<+<Je3QhaWBD*q0nEeXNe;mU)h5=x=`K
zCE?Hf)RmPjQ<Gz>+-q(x1vE>oL)|%*?7IwXWOR_kkWT&PO6{mf(t4`c+inZ<v(tF=
z!3z2Z9r&TTiV^Wv5m*gB^W+LZTj0#b3!O`&t~KcjXq%DI#wH71)<aV)eaqI@j}>s4
zB7y>5J&&7i*0a-U9|quTZqA07hH1}e{cT7^Y;`-sG60xQ-K|E-M};V)f<YNI)3l_U
zCfg@%M{kz!#^Gs}BJWN5t5;vpaOLXX>I*L1qW!<N@EZ9JY789>3Rd$oee&B0ICLUj
zc}Ny`&Ad_dR+CWDc{S~=bwW|&adnEnIviDUL>-2dmM1drwaa!Ba*a2n@_rOcP~2sK
zpZ1a88N;WV;kgdGXmHEM@h04WE<WUn(kxZiHl^}!S}4eE9~^StzPl8z-*NHw4>U5_
z=hou7qLe7FS%H?maM0h1kJctm8!)5az<6m2(0u(n(t0YdjdnNzR~L{GKq<f?u(BXU
z9vMAW)p1P+p&Q9#sn_UlNw3ooZ4J2Uu>w223@uBaMc@`^QjjW*{rnbzT?Wz0AR==k
zK#NnRKrf1+hD$2|Oo1qqs3gE_)yJ{<5~iOTfIJW(TaNg`@qzr6XJ1-zox+wOZ^sQd
zMeURTHnK?W|9CSw&X=l>@z9~kOc^{U!bA5S$MGX6N`p+Fe9p;U&B?%KKhxyG1nHp>
zS4{;5C-s8b5Yrr{;@RNV0Xz*>sxm6NytcMSXYP&HW&zFS%rf&Coo)rKb*6f^jZy{4
z?a<B38E|tb6jPIe&FCn7=IgD}sMGBeNu|?4i#uo~4NQ()<PHpNOv||Bi-9}t(R6e&
z0g(xrAZ0OUA;1Fz6ePDzVT(!76MwAjK^f|W2BMPztt}kc&0TA^Tj>b5tpuXy@U;_u
zR*Kw$ng)8h^k|Pvd9uc<w1otfSF;|a>Nb$@s4p`ov2KJKfz1LG11g{}A$$8sqc;l-
z6wc@$@!tGo&L3WT!S?qxfIby|5*jJsupYA20nk(-p*%HHAkaxIl}FH_GVz@Wc<BPA
z!hE`5D{o41E-B@wMMw4LQJ71>L)0a`45&!Pvy5|*=_!B;{45ZvWeF%dkJWR6k>@4|
zxX81lT3e#MInm0bXbCA20=i5Cp9VXLSeWPN{YsvT6mEc4iy>+P&89@7B|(($igdw}
zJm&9k@#S0USg98Lslio(WuxzQX>fHf6#ZtVGv@Vl|8$Ine>lE$Po5!(9fa!OX*E`G
z%S|)LGLBpyT@h&_xH;jB<W9#E?y#gNQ)4~1?!tmTAG>l`Cd|-zITbT%3Y!Hl3u@io
zS=Zms_TAdl5DRAZK&H^e9@wzqiasfn*XB#OA>ifdZw)e}tgYQBO)W5Ot7bcB^Xv&o
zCo_S(UM3ZsuV3@}nDg@bA?NzvR+>I4luc3<T0?tmM2k>BLExq;kR;Y<z{GfLdU&y=
znLhiH)G3v8K&>nD+0{v)a&d~DU?8JSpE1P*i{B>cZgYUzb2B#!h-Sa}o}<)1Rt*RY
z=V?Bu3q}Dk`K2@~RHR)UBD575^8SQB<h<?<hlQi(ZF_Hnd&7QHL|nKY&lshth$?8j
zv~Ew$3W(a9V%QolErj~*$XlcJqO<^YzYxJcQ#bO?v?oTNsX|-2DX`OzHE?Orp^!66
z3FN>#AVwY-y{0`e0>kdd8Wi<sr0VlX6<CL%I(*gNqrpvwx*G6=NN8ON*ywpRl90|o
z@-!Km5nV4N8Vh-R_ERw)I6jSIl_t;o!`x$it2y(#DnX}?odO=4HVTjG^3k7*;womA
z9zY=&RLNG?Y2nzx!?^p_MHI>|f}+kx=^k#Y-_@prJX`F#9iAF~t#Y@zXdueBQh7Dg
zc4b0Mg>DM4)Cs6#L0wqrfR}FFGTxdETiao&$;+8M9etl3>t=cg=>#S04ya*}!42si
za0?pT9D3f@^bSRPwIQ`hby*Z3=BN&hwCh7&TP70Z{Z;<zRTno95C43hf5|QlE{-Ig
z2Mr0P>xMMFqBdWp^v_(Q`q5_hQ!zw!1sNun$*q~Uwg<knr%!dbYVG`*8MborMaaCz
zP+;2LoAu7D$JUki)1I9ko=oe>-ApaBc0f=)1Q``ZNQ;TMj^w~~Nq3Xi8n}bbnDf?u
z;i7cLxu?CS=6d6PGi@r)TiY8`R13~i19A%J=*AsRp{*)vkVi`wgMh&a8Qi?~w(0j&
zgj@m~l8kTZ9%c#;QyY?+V?cXb`knxejz0xb<UJWMqW37kq8yq9Gjr?C({;d)L8OeQ
zCf7#y`li8-yfWp@k;i6oafudFC9h5`M<J{QIkg@_pgip0mb((%^6*jAWD}J{VkJ%>
zc~+6CBBD+-oJw}eR7I87mOMS554Zlr@ul3K6?3a=p4%U`;uUy)6T2Thh|#G4+s`WC
zM3kx|F&zwa1ggZ5D#dHidiFlH#ew!~x)NXj$5uPP5umK6*5=LH+GyKtBFM9y0k+ps
z>+rYfAgTe{u!MygZl?}>#ZMy6Qa}Kyy(1cMj)cJ{{u8|z8CplG6SS6btSK+n+11ro
zT~aWf5_gcKO{^Nb%w1gBABzhAR1iG9Ub48!Q2;4HkVmApMt72{bs?o%m5e7wsCC7R
zewx+PZ0FKUHI~Yk9igXZ6K=cA>>IlmEtuJ!P*oXK0IR)6<*_NE7Ihow?5LW1N&xJd
zo=nM*cY%RGq8@oD=3F?08iXz+GRbprctE}{a{j10>HXkGdDj1?9jCve=7(#-MqE>#
zu#S)E8reBV)mE9DAMF4gj&~}bDwjqVqMTIs2&AB|6)g=c1ZpY-O-vEV<RMJKSnm?c
z2+}hj)c5K6t{onv;>FQIred#F!Q?Jgi<VVjH`Qo$A&{hLqBU!DyBC$C)%js_w|a{e
zzs_7#nCc4C#Br6oq`aQQ_!P&HnG~P?>S44*9X|8X$kO!K;$b(Ib9W@!OHhUSe(>1r
z*{~Sj@)s#)zH(stD>P~|R_P;EQm^2)o1Ve!ObY{}t~&4?@`4pX>RGJ>I@GZxOe#*9
zwklikG*wHZt)~C(cv>2;tjA?5ocizfKNY6hd-@z3km}F0c|2*7a=NHWt{{a;Hm9Nw
zRJz*Jws@iWn>>Irfu2sB)5#9<5>y__x-K2%2-{~Qi6L)W2-JZIzG>|Z!gmLz27|Z!
zWxlv!DwT~iiW8nu2&KYKO@?h33kXQsZB;6u?|4+E>Zu*5PEkP7F3bsNy)|36vF|fk
zJY5vE^a$O7p%p!hw+PBH8j1(eJ#1)7`$4UvOQ{F~K+Sm=DhTyjHFJ>(@<yo~>43Qb
z7^k=%Sw1(wSLNUT$t)?qee32MYWe(@upZa6$7_T<_04#`=3cW^?5IS;O{3#3v^NQt
zelN;bdN$OPB90-_M2aj`5pg?Drt)bf*`IY43CQ!Oe3~$Mvi5saQ9<7*??xU!dHbFB
z=^UK;UTU5q&XhT>1TAYSyXrlrKw)!q>Nr%->nf}bducg3dI{7DW0W)G_~fUKV|soT
znatq(dCXRhVZL^p*TtcapNe7VDF$q0w4>{?mfiiHD49-=%-@Q@A5abtg&=Wj9-sg0
zVRb<+lr{g!Qb0PUIc!}{l>w(Vy{W_IH=d5Bc9?sUQ|r#XsmB%s)n}N|F;;X^C8@Os
zX+ctlvgZBjK+~UT!_iLPt3GMNk`6(=g4FkA39pYq&4BlmLXP&YpH0zFyUlVnbSNt6
z2FkU?aJ?~iYVxvJMEr;I?gf9Gu~w92Emtx5ZFQEwQ-Pc5#WX-?`B^6sN{y$XF71X*
z-(lbDISD7NmM%JURY5g(PgRHM^EIJW36)EaB)(avv%pX&+Bd_^qSpzOU5{b7%#b=9
zG2_TgHI!T!>Q<?zF~V?Qbh7xC54IZan>KH_x;8LyX4q`i)c&%H=iT&T8`j(WWxH^r
z=KOW#)bf-zVBiF7fuVL#-l|2%sR<L!@2h@uHBZ(8m0nietD99|*MDcv%DWLDs>cLW
zreI({N9W!QXxit50YlL_X4?R1zeiPC4M5uOHAQ^-+v@}RM_qjJGjn)i-$8)4)N8Km
zq<fD)6lQGs%PYy#dr!qM^b`t3t?5vukv_8!`m5fyQuRMu&abN#ifh7Vv<%M|SeQMA
zuYM(uH{CFWRx?uxQpyP_ov|+ZhG9?|>#+6pGKRv@b+dUhn}F*$ekaLPc1@JBA8iu)
zrWew71X#AK>6B5!g;iM5A<L?hfbueQK=}m<C3IgPCsi35jzo>}bkNorL?Ss)pu!!M
zL$XQwOh*$cl(UK=TEs+E2jV2c_~1pn);JK)FYdp>L6}l|wkjTwsJJ=;^hrxVq3Wjw
zM7otD+tdvEx21TPkh=SteNtnABI24{sA+*x0IXa&tuCUuU#1$WJTmQ_QWHE8O0Br0
z+CMHpic9o&!2wD|pd}e%I7l)FlH@W{fjCOtT2hOBe$Jma8uh95>#mGPM=uWRaf5P=
z?aq*H^0TU#x5G|TbT^lN0$fmWfPkzBP~o1^2viAG`BQ3mAW(}a@h;V4)%;)@AZ)L%
z)y%N7G1Trhvt8B2gR5(xK1|dxV~M+Zf2r;_E3ROM@3aSR6L2vImxL9}MTSC9MWN(f
z7bQiQvJECWtko1Mqdbxa#@D&H`|HcN?e2ZxejRa=VWiZD!*dUb<=Px?cu)L?ByD_K
znXK=oonjsvnFgTc<gR~9otZyAzHoanOIIS_^&zqhf#1SYk3WNZ@0rKgl%qVFHqlgB
z=PWb&h;5+DXq<`3+K{M%N_ClAhqoq)<xM$?&Mbm<_}USqY*Rw4H~0<Sq4o4EWki?w
z?Tx%Ob#-r22PeIUA?Rc9i`sh&%M3m}9?}H`s=C=~sXozl{HF&5C@08ta2a7k<&ki>
zo&(p-uzk}Fyigd9^^6rwc%@L5@-M=uXONfVkw@YgYKQgQY_!{^XS9bapH%tOyT7Z$
zqSGcNI2VFDI<(b=2{S^kE&FXeHM4!TfI!R9g-hksOkZe_BTts0M64igfK6~D8FA2b
zg_x4=l7)yGa$>`(3!{yzujH+yrDjJ^6`5{omY+$QNlDG&y5UJ(Gt7Qff7AY;{htHe
z5&;`i=>j(|l?SKDwK0Jj6$@yBtM;^P*r+`yiVCzxW$*Pe#(Sfi@s=oMp{twpn)cER
zfme-lY;)Y~drVlW-kX6ZbUkc)b%qB=USHSpmSRcACH*S)7?r-n)J7M39;@TiU)Y1p
zSw@;>$ay6+TMO~N<B#T3_wX+)ws!A7RYC0(1vYKOw_3`+{&N{y+;epHX5Z&dtW*|2
zN~saPe%pRL{Y(vmBQBi)6v%Y)UxpoTz(#S|GNHk$!%s75I7``JN<WJ#U%b<8a5DK;
zW>V0Nj#8OY<f@;eh1CIS@^Ni&Ylpa|USXE8A%>u`I-Lv+(wYM(51SiM;iw3TQiNq7
z7zTnNz$-HF0yqm8RoJ;b@uk{!(+UQ275AA6lfprc!k`20(JMu)o4S@Nd@7Nnlk=ML
zr9v#_AsGO1sj*rEiB8&^^W3yP>9KuXz-BzVZa{0(J=(x$2C;OPRxPpBvh^*e&V-s&
z#Gw45S|_zWrno_QE}Cyp0H__C9Na{K8})V)3VGmu4w>M5aOli*-Rf(2t(B<Ku5MG)
zWnROs>j;P%0ZZ*oYH(8|W>fKWOOzha_imY<XGo-~JZkY%Qw7y|E)zmh3c@IRbdHUa
zZx-w<;H3guELDM%2~}-dmH|TzOu8bfQW{;Mr6m4lS8k5@*z{R8MAZag`YcuJrVG5O
z21|@>^l<EG3m^N$9spZFq`$;sL9rEF<|FjH^ogT)<x{?L_gr$@AG|Cxa=w2;(UZNl
zL@cFManCg@&L2Ipcvrk?=+d+nuc#I{m#yHIoA=>{*Kb4LfRDw6RP%yV^;umhmEeRX
zS#~$Ick*CuqOPfmDwtCmwe8N(PB%hk2yV)ZR+(UQyqJ)s6Y8oZRAR6z)KPpBUFK3!
zHq?hm4S>Y_t^-a@!Y@Ds{XlV)p;6V`HYgUmc~6ZYq3>zv15r^fh@L?lIHDeyu!w+?
za^tO<M7^0JX~l@53R>ifat}!wDYXp6pHn@TrXp!_Ui6u?J-V<UPYN5g7Ntp~)BDuD
zCGd7g$n7ez1vV?4Zo?wwjoB)rX=?B43)QV=<ZTKHoZA!>Re2ONW>1HQ3F(@tVlw^h
zASL(8G|Fd^Bg}2!)yM@^@2ucscbAp@Q~i2Gt)chYb)@z!@{*}YP-O527~Fo!g%UBC
zK}Mt<B1Ma)o;CGFiWHq`&W3K#>+~A88E|GatGyuDeW%t%4;WI#6_pMl&syy`EmUe#
z4Tdajg#~ncY5H0-)eRx3F<ynUW>r)=T9Sa9nr}gmiOQmXa|-JTphwqm)M^Pn{IMso
z(wv6tQKFDxpgbU+Jn>c3qnT)h-+Fx_s?U<eI`!-n1vWAb6xC$Uu^^myYg$b|8Tx~j
zq0$*)BVJZNNUgGfTfTk}*Im5@`2yqBL^n_?HIS|WES+j;*MMSMIOuMPvWinD<=al~
zKecOS$rau0S^68kQD;m&Z&f*z%b*JlbTyYW{;wqwRaE%Nn-wX7K8f-Ofg6L<)M2P*
zcjyD00LgV3S5;Fwx-+K0F<R!REdceU6s>w4t*nYfRuPLOw30fKtfEeWlm<f>uSj`#
zCig`pes$8B#61B{yK35QR__3o+Ac$1unpqv{A3sXL${FIHnEO85`7PmgO$f<E1~M1
zLS^zGZ85`CN9~Qsxdh@$n@odcN*6*RC#&$%aJR^t%93^;re62<P>QY}M*%GT)3gf%
zj1*>a%A=JS{6WC$2ZEABK-~o@p--L~k;rv^O@*MeGN#N*-oIkh817^zx2B^Cy({#3
zSmh|I>(@z_cDgZ*a;h3cty=Gd6pFH8<lX6~Y>PQCy^h+$)|z`d7pE^y%DXr1ZnVz*
zYk(l&`0zjO$6RF^fhW{7x52_F4lUdl&n+J;#_nSm)|104r#h&e;=o3x5n?gE<5Qzv
z|NlKcch652f{~i<_J>hiQv-4jA32P>@6Y4HovRQvGfv@LTfMg3!qTY*b$11{y9c`I
z9_@Jtrr*;_TH6AIY00wTi`BlTBtCQ0sc%_cCO>V3f5^kq)it_Ty3yoeQYSNKh?_uT
zNfL3EJ2{5owG4g3K)oj6wRGjwqj7RgBA+r9y4IID7G?x03lecHL)>hj8Lc2nmXL}H
z66(RFaeMUb(go)^FqTu^9yvDZOi=PaCU-~RMyHYCk@1%HM73z5x%}IX+b(G$wI|5i
zGySlpp-uf?lX4B97`-E{S7zoH&^>{h0X5~l5xs+YSxrNQZnHAV6)xZhKoFYh9spue
z5#>+i*(k@BWJp^S`a5v*F7iXv0B+Wl!n=gHfoko{A*Q#<CghcuY>Nd23AbOu8>Ad4
z5adbqm~vp08wH{&w5JxEP*Qgj=oF7FyP7sLtMO;WDlKrSO0x0r8D%x7n@-cr%+A%z
z*r71$!*!uRanzMesR4K$B}mcM$D<2_*5}eXdgQtZ&Z)*in@UuV(x}AngoDrg^Kl$F
zaTGrF+@=h9ZxEHn!RYYZqebS;e{d;z;GS0lsJ#k+O&c}IFQm8qr$PSu^AApcZP%u$
z8zP4VZX%lSycQmR>}lll0k&@)0TFqkS|`3}16;d>s;dgx1!^bJIl4noTWMuR;L#Ey
z%}GpGyS9*|S>NuQl64lfCuiInqxM0ARTL<;bTu$;Ft`;UDgccdFtG+0=wqm?04tuZ
zye+OUEFT3{=7HK$f<~>0s9r(bT0tCFkflv^hAHq=?oH4Rs~ID3%R>tHq%n53GD-cH
ziYQEBmZRDI)SaNb7gEh=tLz%-A%%0@#ALnGEwxbX1)Ec|L|l4o@@fQT<ef?4=(W8z
z<1N{N$yBYS6W<mxXnv?_Us7(G`u$WWs<~X0SJPvn5(4Y8O1{@BnqlbYq1*C&$}^gF
zC(4UOngp%FI`UF!z4A<P)Z9M68wC75Am2xwFbr9XBduhpFGG84)a5`o-Os6=Fq569
zkEDW?m3dM(Gwx7dC+$!gGhc%Clc}(4y|<3GLkA2yKSS0&&h7DL1`8PgRUnw@?iG-_
zggMTY-W!3}pupq?7hn6*JnrAU4{ojrnF;t#iLScw)6;hr9k=<(ne67@>>h4(s@tmo
z*i61HTSzMIt=AUC<xd}+`*Ly3=o>{6HB~{tacX$rfu~T&hgdUSLQEVG(l_g(YqSTu
zw0pO0FQ@7AG%Z!_eyes2+POjrB2}oF1C}<@k;m0@INP-RHoZiLV>VH(KcvmoH_8=3
z5eTRXN=a%uc}Z<y5oq?&C^;a?F;r(IDlLX;DzTUV)mDaj+CVF%aI>yzy{?-VG;mJR
zj7igVZ2{QsOGfb(jrLV!SJU`TfJT3-kW&gu&{ID--BT`36&ReZE(PN@=%}uXyVmYF
zFyWQ~HcNXWDuc?^JK)+w(_tv6vaJdSn(AR&sr1BmGlqe_Un_?z9vJ~HA%&_QQsSI3
zY5+$psT%A;kW1qAq0(4FD?JEg0UVKs7X-)^JcLD#uuq~es%abKZN)KD{heyP0|{Pa
zaH(+9r;9qO?Ty0PrsS15hKMFe5VfPFdo@*BK^2osk1!)Wd&~8cYF>ryuk9QmI&vVt
zODkI$nJ9DE+3B`=K~qWYOsiFlO+7Y2zlqbgGvj5e<Bh7rnu4URTWTbr_AaTaJGIHh
zgLl_(%UyfHgSuiKIPeiVx%A27UknB6yBD*syeG*{{k+<%4A{`VMm5vJE3UiyDm2(*
z(~Ec3#`-P@o2^BCffVz&=iWWYU49nIgFY4`l6W&$GUIXyNhiFif*J~k>IYCNNL}1D
z`?Yk%d=?i@%`4D{Zl_08c_Wq`Wbx2mi8ZA_W1t2PKhG7Id3mb(>BEJ>qxu|2d_sWb
zBuW!H)M-*^O}(QfhIkoZRE;Z1uquP!@*%Ul^30MbQfizOa;gm{aAQhAO!uYIim9u%
zr?_6a=hBE0s%cevz_Ie!NF2lTYAPy-l4;fB<GLlpb^geRCE8r0;kVh{qfR<ibWkT7
z&7d(AS?#5%`2?n^oq&#jOm`UA%BWp;2&L$uNV1F);qA#!X(m-<nF2gk+Dr~I>K$bq
zjbs7K(Tt{za35}3h93>UU+PD2q7Qy9M84>vFaU)80>we8D$pSTT1n^bf&xcaq;1s~
zz{<2lV^Jb)f@iUsoTk+~$bGWPF6QE?M(vpkrQSz6eC`mL^~F(9ybX|<$%1+xsxZ=c
zW^J&enFwkSkqt3B$FM0fNE-!fi51O#>l!XZ`)_QWi#@v|eC{hxL3)eY3l|)@+@RP$
z_f<60*{Fisu86X^_}dTUKK1NX0&HaZvQ<qV-W_-o|KC#OvH#(FrCK?+C2Y2qRD!wQ
zIEs7j3vtzD+th)&G;6M$?aF8e)NDRY(L0`1A+=XiGRsUiO5NscR;RX&vq-f<lgR9H
ziq%Q7)(#wx!w(qzkip5>LV!RP0gX9F<;s#ILnJb^WQ2rfe&#re4IlN)K~*sHt*4|l
z&_AJhM<t>ZG#O;<B1-~wLQyzGa*vF-9GSyub|@o&v-?i5{~hJA(ZTDPT$0t!cN~(-
z*BIs-kIf;kh$^xKB9?DvE1D+6*IU||8gCt4tBT$|{MZ%?bQcAMxShg5yCQ1A%+5P7
z#AEI-?$aP*Rn0YX6sQoQonSq-j&73ZADYibR0&StZe}JYS%MgIsAcnt&*q8(JW)oN
z45QHML$H*GTi_^+ON`_gMu&jD0qSz0>F#<m;_@+$v@SZd3(7kxa#(u+k8Z(a>Kf4n
zP>Lw4UQ<O(dqFV!PJx-q$0|=$d3x;&l97D2;t7tDjAPG&8gn%fQq7RD@7G0(&QKt=
zPF!MaEyvt!3!nMY6KJs$Dz{2rTsa)U@ufTCYU4n$iHFauCx;eaZJ_ol12(h|lcns|
zKN$Ajc<JoY9XEPTx#2qlek_(%j%aTF0PcS{kDX_3L|DpDqxtBT($PiXX!mor`{Fyz
z?rpgvDvoOf>ThU{wmA&b!KlDY9i}8-?K{ZjU4#X$Jd89Is!O6iFA)(nfK*Id31ZPe
ziaHWB5R)7Q5%T;T0u&&Y3&8OZndc(S0b}cdp<%<5B2mBriKOljunAIxpb#!o<W%z3
zVpD~+bvE5cMmaX-bbw9zOpAM%{2GB8&F7@oQmgP`IBv>AYHRshe79`&PGgcjdAfOR
zrZHRfx_0tw<XEa)ngTi7MrAm26pk9*f8{|Ma8x3rt`rnaEANMrYqYKu9+JnVK#g*3
zT&Y$l)ecH4sf7vDO;>?o38%;qixo7o7OGhlMW-J*zaN4Ja3T&j(h}QI&2SQzf#wlS
z>&+K{hzb!@nWfLFlf!J}jL1JE4^AC3M)Ae=9Vk3fA_ziFt}#~uGgGmhpVJ)$w9l2u
zff=f84ntKq(7NbKC12sbx=7mr*t|VK%oIkf7fly|p(&1LB=DKfJ%wg`OnK~-V=RT^
zSgbuBEv`IKO!(7pS#CYN+Xl<8HhYx;8yTIz4Y{1&^3Hzex<{rLzkb@P;nzl-du}R-
zSzg2bgO7tc70%eW8cB|d2^~MI3*JsH4s`VmYI#D+LrLS!*<4w7Q9=_rUC)K@d+>8E
z{Ls-Sts+ed)R$v4Y8h(P7NS;!M9{5{L{veAkBp_N^@(#|0gmhE)I0-`q)4L}wMFeB
zv5<ktx`Sg3gQHO37}qIrO-;`XY2xW(gvu`^3YjS8ld9}W;kN-cYC7d1n4o(-Pr#9q
zvT}kz#p4VfqZzLn*a&dQvog5d(M6+^#yxo)pY6U<>tTmTn|z}hnWskm8DO)0ukD+n
zm(V(J%Jq?_sQ7hMrPUsa20bMiMC}Ku=8Ab{u#d{IX`It}Hs!d0anFnb)%*v|_@Uob
z$GRk6?6`rtm^fhpGFJdE`H*>zq#%(Nfokfg-=w)LapFEeE-|<ykJO_0FoVMd9GWFS
z0tSKMpJa5w(d1h4=#(dY(g;TdOgeSZeE~2pwmmHMd+Ko3&fL;@O*^I8)Zi&~U{qG@
z5I1hUXEXOyU*aSRLtI^aKl_EfSgajU^H|Br&jo|1wVsKNFWg(q`0<~gi@*M_ucn;Z
z_W-bIpP-e^#uawQ#btKs)3eLB<;RAu6q!i4ki=1#$DXI}N8a<Xe$^Oa0*XeLJW+c@
zihbOvjJ7l0-8D`<E>q>psDIJ*IRf895PC|NpI%MU47HUOnvDceBSy2;K(n=iB&{Gt
z6)BoZ_|P7(G);x^5Keolims9pAhI|^%&CzxL(>(g9&wN(VrY&kbHLyv$>J~+2;iDP
z8gXPPWnHvVgD{hYSxUeuz?8x->8cT+1zcv-u3%^tQjc$=N~rSIjK}754JFYX3MA#m
zHHS(|pXj5<&KI@QoSg0pfhi8VU7nt8<ZrizLC|N@y10%4SZ-UWNb*}@kQy+oJvYaZ
z)GV(hf++l^{FVz&A#-Y|A2f4Q=RI8=LaT94^!rf`$_RH7pm`y<7l8SBxWzKU!6JfT
z2c>bKI7YcmhFYQq(c}1ThQ*^Pl12oUByfa)lQ=-jfs^Rjq9i*--g-ctAC3dhbHHdL
z2%xB9n`XKjAhpWAx?kkvqpeNXH2`JP8^l-B`8Rd+8m^j3o0{T+l``VCzN79fP!dm)
z+R-?^c+=B3I=vTRNbAFtmzs)&=+Mkpiy52yow@iX(^>H9sDOTt09yy#n(2Wh$IG9O
zbm!A^%l9>gOS}9iX)1+SA*S)@Q}-bZuEOYW0dsMTlrH6FfI!E0GoRP#AMa@Hn!K9p
zc?bd@Vd%pP6m>{dUTd`m>a_+MjV4;HD&nlBJhE64%YTLDml?*J0u*q{ZxOhdvs?4p
zIw7tC&{QBJTuKBom$+#eYD*k^KZ8?}O5P}6W*A(hhH~)wilj~hp+pwdGy+;@2QsGi
zGfI{bK<Z{zYDptjFQuJTJwS_fDi4XkETBQX<OrFNP%+-ERuNG@h~!EOP=d&eq_+FX
z%o#nYaA2Fr6-Ug5LtU!4Dm<leAh!Cc+qwkh)6`f!<H_hyl)5`LtDYQA)gxj)*9O}v
z-$tZd(*vo>uVz-AT4RNh<W&>h#Rv04I6(nUu7IE~55LS&9OWoa2;}>9Z!dE)%s<Vr
ze4J7W8KR_xq*+1Msz8w2oF(uiM}QE1D-VwsL62wzyr=T34#Lnw;Jfew55DSC^~}_&
z%uJAYHmjTVqt^M;d0<L4(t)ef0hX>oOVa3Tt?j4Zqe4`vjsVj)tbZWlMwW(L+;-<t
z>^-mte$Y}R=71_BycHif`qg5JrH?G6H~;61oP$@fxArOqHZpx6)RM>d`~Jwg(M&(K
z$lO{vzbR~{BufL-lY_YbiMw#YwoB317h-lkMXIje-TXB>RjNZQb+`vlfms00cQug3
zF{<?{8nY1^%{p4m3SvdISVk-t(aM&QAu_o-%ICNW$cWcKAyHdIyDeJTA-^deS=W?$
zrQShN4XK|}R{{yo&oDSo0o0X1s;%V#pf(PbLyT)o5tDUms;8U0B^}zSVhyY6sA>&x
z;Cgx0JV@aUHIlou{p79D1ag(f(z!MQ6WN}?&a7udfGd<2WI{We+_wBRvTkrw_+qs!
zj1-c>8^e`rPkFcfr;3Oxg{xYNOh<%nHPWA<0a?|hl|qqg_-LBermC1!K_sPE0yd&<
zX?Z#dK?%^*xGQka2M=;^az*&%9D<^&Dxvw&425CC0ptReL%_@vl+Toi;|xTlp^F7^
z&1jbjk)e@RQOl;4Y%f8m$2|DF2)|WE(CkxSM-^Ge_24V8^O4JY$Q69}4r$2gKH-Ee
zW?4sZxtkcG!A%$Pjo5)o&*`+j?N?JG@lf8Z+RbL4`VxJ^F7AJ58oT%GK@cV?MCR&3
zC(=VFz7k4N*}E+6cz-HRUB!;?6JR6L5V4fp@$nJ=x(jQK$A6Z&td?`f!z80-ONph%
z1GxL~8qVHu9r}uSM6CeaiIqA+919gfk{(q+xiXJDD#vi6TBtQw5G_S$HtUF*D`+Gu
zh|+mPVh(Ax0u}bQ^%6ChF`|=Nu}ACubsr<PTxgUytfyw^`)#=;I=Hih_+<iUNW`v0
z^*F=aUcfC<r4AUJ0BXxXT%oEcc^J0gUJt{gc#YHvC25+dFLA+%bt+@cSMz9)uBKn8
zMsor+0utjvsY&J({!lK9BqJ!<r01cu^F?~jWrwO@s|uYd?^cD<DtTz~E&VpCdS~)%
zc2J9+KxHbmCe+dbzh;WMny{`?h=THV)Zne>2IvF>g`rBPK#f@UG|^YLFR0LznoJd_
z`2pN853d*^DEkW3ilY*RVcmC2bj5f@V&+kXxJtzzfh>uUWw8P?QX#hUEXV^V!8~dh
zCo*{?t7wQ>GuxCd5*`A#556-9-|2_X2H@}zffpc`^AO}6_&()meRvc;QxS-`hAEBT
z=^Eq6r6T$&%8~WROy8)^6Kl_vwIzD>z8#tJ@YtR?-1FdL2*RpbZ%T!DVO|`W{vuD~
zrF4beb4e?kkG~f{?Rx;&v`Lv@F}dac9rRwau2R|aX5JSz93J?osHsq7xqd$$+*d^@
zSfc=njtkEvkF11pX&il}34}grmo>1sGLPlj9GdYGVhTG%3yEAoDwfg8s8y+Idj4GH
z*->bz6_vH@tmQ6QmZfSJR0v=}OrK-~J{=yDA+_4M>xvH|$vfhy8vQMiHW*p~uylaI
z8<4<eroe4vEkm<P8v8~L#|UkjrcVf(0iaG44Q$|nQt_p*kLVs=qN|l2Nfw#bC!1rV
zo=JL(BE#ANQ1sYd)2Z%3tz@Q%U`e9dpU|xdW+=1~Q`7RhN)pLdTvc~Nr*D<2v#!I)
znJ}s%y83LeP&ehPbzmy5ro2ki<C+++jreQS08cGs+$C<G-WL>tDqssVsJX=uUdaOq
z4-_VVzDXcg)S({LVCEj<qPZ*(#dHx&s3gs)utR{O`H^<^t1U<ASewCzt6WhUCKDma
z8k7@O%MqZsJP)6j5jcYg8iR0`%W#l~=LHA?SEW7jxe&QrfG|gKHxZ8M;zcwQq10z|
zh1In8nZ|a-z%`+{loDPjFh1$ynIp@%_rXWuh6`%H&=Hak`o;12+eO@3%s2R>r`O{B
z^WQ6=_B{e@`eaH)T`VPEf9HU6&DU!yPhSv}Rz<GE+&EdmQf&oMBg4Sd63#nq2t#FJ
zq_5!E(m~8DK8U>sIacbV5Spp*)A5Lp*nmI-nTU|lQEsLbx$S-+bJD8fL#oC4tggIm
zpK8}4EMyr<i0x1?;pj<WY5Q-Tdr|BSl^UXONY4SC-wOnTI^Ra%HndI`5$vECE9qeQ
zW7I-LKuO`L@>-~nK%SYa+9BK8Xo?)GRmgP?$AArezm*m;g;tfYSM5|3R%TT9vp<K4
zr&U(llo8r_I#V=gf1U<aX>w||3fi7;+Mbf7g%)+FYG@*+YurrQYu}W%qe-w+aYhk=
z6)A`0!aXqMt%Yz31Z)n%0ful?qC7>txw?mx;@s)o5S8PZ>H$?34FzcQV`!3Yhsb^M
zeAjlDNxKJ1S7#l%kf~#X1}Lv6pj)94Qq(!aLgmSY&L~263<2*~;ODwNazThNA0ij#
z;JH3L&xcR^NXi>hK9)e1eh+i(Xz3~muOKkF%EiGWOSt`>M*(Naw09*U2>UU&bY~pZ
z4woZ$&-u%(NA`R#f!g;7uywUviRGlq@42>wOYe`H&upl%fYhz{J1>7N-v7GGan4pc
zaLijMJo8f2oe0O~7x3ugM{w^`hw#+?1%Bvg9Wx76M6HS-F1sHPrNf1*;w8;`R1T0b
z6LhIgE6VUt2elFMZ?`ga+QrprsyZ6zK<@%Sy;8;#Fi)xqn)Y(2ua8Gk0hn9@=Jzv%
z{rZjNVTR@!%EvLT`WDGiP~0vZ_K}nmC6x&b9I663j_P?-eVBA6m~n<`4T$nV#RStz
zMTI{CJms;`zEc26g#_wpH2P}fVX1-6rcKRmw<V$}eI+|E!Ssci$DQHPy3xL)y=Fe!
z3>{J7s7>mb0){Fibb%Ueieg)s_DE{2`2X4a4{*!Q>pBozC){(xyDx`|C{zI`L=qqg
zFq0BRQdXjZWl0t-_q1inQI_oKv8QM3?v~x{k*D3=j$hl;Ez2WXvMi}(i3(JpA~Ohr
z$f2rGIlY{24kz@t(|`W^08NkGwgpt-0I%MA_uX*rx#z5Z@3q%nn_r7Tj^<=Y3L4dG
zi0d)8vDFuV>B9x)56Q8j*WNl8VC$k7fRZC_HY6`7<|lF;&cc3YW%Wr%AX-SvaU8|Y
z_StLyy-ir)jtwdz(QPTRtcPB<i%xMKQBXx3HBpV`Q3>afbmo!l%ps1aP>JiPRO^^-
zOk;j}3iU<})p`XnISuoZk&w8+R3k>SndAAFw($7#Pa`e1`Fy1GxmsNaclMs{?d`oV
zlUG*1b!Yg*S8g>>yM=&_HW6X=(`)Ui`t=_k_V4_y`IWHum%ih#Ctvf{`;b<FPoEv5
z)6Ov-7pTx6km(SM^9?M|P2-#1c@p3CweLevOR-n<aPI0ho_*#9zWB^VJa^^>Zm#a3
zJscqlQkHp8wJWAoQyb!~p^saNEPOHHs_O(VyTENus3^|`(3lvuELO-8shpC8gMx)I
z5cI_OuzeHQI|MA=EkH1TBw%gZm?Ag!1e1`0FG{OO=A>OCZC5B9RwYD4JdRox8JLLF
zg2bm%u_O^HgDXX8G~&%HzA0Un`Cu%`;3%rR)+NQ}9#a*r>LeI{euH|zQM;7LJV?i8
zHrD!O6X_Y;tZ!8hsS)K2YO+iGJI&Fg{Fc`u)*O<tTM`Df8se!K$uvd1Kz#{Vydz-8
z5c=%eTLIQz2#^mDQu?3M@ndUR?E%%XjW#Jv{Z1?aFZorm;ngCGK$xVE+;_!MzD$EO
zp?4y79&EL=k8!rE`ooBOH>0SITC|L*(NVO!%h=ea2(E@&y^i^r87$7vW4bxTG{W}w
z9-e!72RAloR>3+`Bg8>gq9%4*FAny0U!KX6%^%zve*V{PMNqrNfK58;W~%oug`@lb
z;qjA4N8kTFe>t8>mhk)MhiHw&M?cYvnkbMpB4xH&@{3xSV<rI(O(Q?L*bGk}oz36*
z$M3-pe$V^R@AYtLYY)%8vVkX`zJ{k?x```ScCfeCX2O^vx>~J<3X4k1=6i2R_cn{-
zL^W;`ko>Bsr4@2v$kocG6=V}ZLtwhVs9s>>e1PgaFnb6{YQXeypxp+@)}QGe<@U($
z&D<oSs*uy9;!olN1D*UHN61OTMlVYj2Ssfx{B*YAtomnCUc?g$+NL`oLO&}Dbhi8a
zcjbQsHGMm9NrCB@N%6vp1~N*{dXiY%t7)wakSOOvv(pM4rp$}jik!O;NPtT@ZY1uR
zK&_I;jVP>4h0Lqf<_j#G2rxYxvUN9gD_naP7?XsC^nsLuiiU(fPwr}R5jFRNn#Rm(
z!a9#jRkz}}L7%g=<e7HTiHw9N<G-82UkW|)Ua7iGhM66tqkW99j_&9j0~%FXsXZ><
zU%{2Db4Z6{BvFQ1GD5e16UCS~f*SH#h@?qX{yDU|XVaaXbIrIq`e)nYFa88>;q4Xy
zHdzs8s`oEf(+|FI*NOXA{^WQ6`B8h&2(N7oxzb4&4VBDDStepiYW`N0dmLa8Mj&gn
z_3aSPuOY9W$uU#QusB`d@Nxr3j!ffwzUEGR?>9e&H0$B=<sCfp;wrxK><v8i!ZlpD
zzJr}@>U>C1uT7y^jZle2)ax4PwS9(tu_Qlo!-gHl#$RG4sN<l#a3ti^G$%XpHqEjG
zHeUf6GX+BJPG}wz)5;>1fthK*)Uxt{<YiW2BTmt1NndC|UT;+SR~w^R9PsTjcm-gI
z903vmE6*b>!HPxwdZF{&DFZZ>W^m$Wz{csV*lk-nDtcK?19Q%(v<k}m!iS~c`JtlA
zQm5jw=*-`>Xy{VXlr2Q4S2y7vV#HA%Br(E9$a*faAgV0^)5ikLtjKgS+L!Au6zJce
zmbF5xjHvn4Mw{`AE7Cg2PRXSjkQq>E%R_mJ8rmzsNtExaDQy<5{9XEAWd3SQ)oE%F
z%_4RnX?OY@)y-5Yxc5+uhaZ~4TkdV*^gT5!AF3gW?+;tUAisE}hu{0{bNJlj=P|5K
z=k5GP5>|%4+bTZ)*Rq_X%(rH=c8dU;T={dg2NxUJM_)R8WO?B`KlTHI{k=xK-yI<$
z(wGN}T4Gah^^77Pw%j33DJhUt$udXnrxT!0R?}IC{Z@dh`vs~OfkrjOOfAPkvx4Kx
zNASnre-z*K4UZyA2e`Pghi6}0#pBQ3z%wtb;_~HfZ0+_C#Zze1r@6WnRY(#bY`3Y&
z%LYr|t=DE6sSzBl-)4nFl}}Q-4+~`70__c8{UUJa0ZBLKjszI&7wFJ=t8HI$!50Xq
zsWFK;s^NY_PW>dc6JARImw}%Vrl9nb2fh&6aNWTM<k;a<3vA=n+{AYcx9q-FFtCDz
zftoeeGmpj*uT5nVTF!b>ZS0CaT-atEQvsCwch$*)2d9vc2t{la%0MH8wUFmPBs0jX
zi$yqfD8S+ojjv*0^?HH5S0uV68zM^KEn0K^p4>Og#^|<KiHy$ymgffJne^El4l5q{
zn=Jr>|8zdmVn}IghBQkt8s``d>4g)_PEF&~(Rn;{Y7y_fe;Mz1`(fPmzyh~PfoJS0
zhdI}zX4dds#Z3OafAbsg`Cs~K_z(Wpucpskm=2@Gogd%W-Xga;?ZCM;xA;~7wW;Jp
zy^(*zSC<!;7rx_L|H7c%olaVv5tHQPbSjaNl*COO%Q7cDJ;~O2*b^Tx_R^;r0@Ufm
z-v1OR1sF#KdTEHQ{Rmg~3%qorKs_q3+{m%A6yxxrL-?)_AHjEh$J>w(2ROI3ji;Ym
z!<V19iD#c*$JHx4=nm?rB#W4unw9EnME#sL;ax6R*(XUsb#R>k2fb6e(5R9~Vp&Q_
z`^2ji*uE}Ch)XAhH(NTDlcf&7w=rl~hdQv*s6x`aNh1MAWz5?}B+wNwVGj_NTuAYN
zN5d)MFa4<H_&08f=Zc*5`RFk<N>N9`aki>vmNwhK(o`3<X@thp-WA-`%#20EX7eLW
z^~z&fA(CeTv&su()I{|bGMx;FL#&3#sx;h2Y=~-PPqa|vvxhl-XP=h6UEt>P0rGZ%
zlzjYX(X)mPHtp2tO1^Xduz3K<0wuYz+Cu7h$FjOmmWbSpXf5Vs<zpx^Cb4gy+<ytD
z5-d$G;O@JZ@$fy%c=X{zc<8N5IC&^RZMp(9#K(>nAJSYB7;<myFhqW(o9EpD4bnio
zQo{$n`_cR@UvpplxBv4`3_kzcvp;j^?B4TN_P_Gdtqg8&U|^GQp;lRnXNzzA)rHyl
zJHPYW{#<7?oK0G7a^;e=O)8Yuzj$z#q&^E>1SC`9v`Zoxk|L0Rl}Ke8Nk>5EA`41)
z0$>;f=ni6BzYbJy6qt&0EHnxnUP^H1(WAKkn~vk-e<H`Q-Nl(pTln%btN8MlHt@nr
z8(80<bg+(EV;=R!G%Cb>F{h$vV4_P-@pNbDcb<9_AfPpuM!j_lq@4hpm%(0Q_4ypr
z3&7}3V27eM7TyOe*&x*ly-AXVkW_;zpD8z-3#VnrgCjOg8&fJE#Cnkv(Cc-;QJ{M2
zTLsr$%SQ6+6Ea|zT%Bmq{0a2V$wT&oHEUjMWBaD+iL$Cd&`6?TiO8uVmb;5`12%Fm
zNyz^$2*ar&PiBDnVuYC^8K&kKH1kmkTzx4Bvu#=6xc^iuzGCUEL$qy-l*fZQu=1vv
zm2MtV7;s(hlpJ$`hRxTJWdoko+3WXMpO%CbEKN`2o%bHbqxT=fqi;Ec2T#x7_>n5&
zg$StA^H61Wh%BJ#KOusw0`x)@dld|~D;T!w7!MjqQ}W!4SerQ27$I5S!Q6Z2@ee=s
z!{Oig_)q1(@o(d=44Umb*E?snZdGuL-^h_#wXzf~gx~pZW*f&o^0ANo+0J-8pR_4b
zBUw5p402+ToeNz|mNE!8QmV5FJS21CrJwmH>ZWFoFOwfoy2=g?64|juG@WXCQ4)98
zN&{@{N4VT7FmtuQJg2QW78h%H<md@J@_l#W&;REcc6VBM@eCPbuHh?BY~kFw>)6<;
zBaG%SHNAq`^b#sb!k%KhmlQS7imZl}+$>KQ;0TE6Vk9f14si1#aN^;D$M2EYbhs~3
z8maNw^pRQs$>L}zR5x)q)T7N+Q8OUa=|==^xtFRE$g#Sg0IzfhFO3bkzsL@GS&0p4
ztf91RI+<6*g$T7XBKJnuZ6L(~t}(E`kD!P}i1K+!fkygIIT_@+S(Xh-m0G5Hk$pH#
zY>#MS`!u-!v$>LE?vOZ#&|_|#DKMgLC^C%X^i#dntXYFSg3LV9j3bpsP?UE=dTc_n
zrj`7*8Q|&I<t+H_4##X`RSh9PcJeshao-9ayMGxEonF8l$EdA@QcEI1N63pVi;lw)
zclsmmSCH*DFl^T_Y*#VZt6<cLk!BSXNrZShLUkcvvrIbv!=QnJguRasQF*usfAr`6
zbY6VV&n3V9i^Yr44BmRPb!OvM1h@E&8mUz)^WkFnJwMy5t$f!vfAjZuqTq0{zfa`7
zfEq_SLh*3<ks=hHyrecn_FP<Uca!3oyWu`!)*X>e2DR&uhKwRQniv(!^lvhcjH=*%
zODaHcTBTq?mOrB)Kx-6XeJ4hJ7nr`9W1*g7ZYIRs{5(Ez?>s*6o_pDx?ef|lo_Tf+
zPdvVXXP>@|E7xvdKVL+3>M$C!E2!4%B97$@Rm*=o?Uv*SK-vSMet{n8+inIpbdu%*
zgqXd9Dx?x+Py|Bq4MG_*xn!S70xNBulC~w4RTwByN~+xf++r)&xSLU;)R0CpLW;@t
zZrulxZc;_n4S~_&$ZShQksBF(hDAPE5j9TDT82vgPSr9KksDdIbM@CIHmRcsrJpph
z9aBJcJ`5Wx0HvUnL~NS2t^%!V2&ouDyc+kz>Okw#A)cKH7_eN5sQ@NJwne_dzP<8(
z5EK#8@d*7<8-r1o#l4NFz{*Sm_ug{^kKTI>kG*9D_uoB@Lkl5Lqt~E@*A!Vm=5GNa
z_F)Q<_p2E7su*_a=<e6iZPhUvB%E^FtO%N-RhfcYcq`O3NBKF=)F@;q4Gr>neu!v1
z2>+{}`Sx`GTRKZ$`2CNatuECcytMW7>a7NDZ!ln!3#Jk^gQfVp{+CLy^j+WlO@FF0
zRXdt&Zw<L|In9EQQzSFzQ!<-sgAsQU`=VHj+MFiIDtUUlvRtYIVk#*M*zA!8<Pr}>
zljv!B6#3y(RF_k=RfpSB<~IxrbYhL>S}_`}0L_~@X5t*P^$auf5l$Xn!pV;=;yb?m
z0Sr4`ynKEePk&_>U-|NRoH=_2+gr0JYKKu<IE3ol3_{XeF-WV``B)rv!%=|!HJ~|L
zpt&T2OB%;S<V)A47(_~Y7Ee{Lkfpd<hX<2_Se`d&GY-g;O{=J(bIx#nu>xeCx`n`n
z4n99#I}MoZ_lzdlt;0GHwBg;Ry&K4yrr*gQw2<r<D5Muvi!T}#@@GyL{8WHwsz5Xc
z7UIqv0qSI}9swQd13gbXWszsYFw91z{VNr|G9a7E$Aoq?Z95Zdd6oZi;Ykh<4?h_V
z+Zgutkf$RQ;TZMm7<bNuc<}fMyz~C!c<X(OIDKRa3yYLi63NL!aJlca7%3HyM#u(L
z3|a{~`&G1C4fF`q#tFvM|62)V93V}hPpms50C&xiKz#tv_=`dT%?5*!jHlknF+G)_
z@l1}|gYEdg`?)_c_$%M=Z<?>X_$|+5OZ|JVZk^dL7x*{+_67nrUA4mqOO<c`(J)>3
z!LR>g-`Se3-`&{U7;(9coK%GhDV-(^*w~v&qY&<sG}~k^#nC8DUWt9Y^s>^{9*QiA
zOqvRKA`zvk0|9|J$(fHMfTLBD0FT{s>0%|$M_Yy3L5^Jj^-+ZSI7FjUU}mkrbdq7F
zk)t_R!`qG=!`pt~D8BzkfbGo=o_}%^U;gZ6Jp1%{Tt44GJ6=Mxd<cz0b4Y3xo~A?v
zLaOMI3&qxz0C6qjN##>Zz_2Yr2Zco>*~l7J5f<KuK*y?%e2h(it3GTTwbA2rWFX(p
zy$$Lp!40tzCEF)ugMKCQE5)=HX&E>%pJvrqm3dI?VDdM6K3}XmIc;9r*hDX<1tN*!
z5I1sE=K{o3Fjy*3o0SJ<Lxk(+gFI~)$Vk>Pl-^J!S*2}?7Xvc1q)<*s{tEG0Va$2;
za4^E4vyWkK7g4c>rG+8h{*HMZojZ!hmX`32<I6a8yn(6Z3NTG?ddQ>Va|#cKIYJ`&
zQ9(LxqTi`ve=k96N51!Iz%#vxYQT#aeU4_8PMVlJDoCsmk_Q7DS+cPyrO{$m0CnKC
z^u9`Z#TMAxuUV<&bGtP(Kaj=$<F9<*;D<l*(<{Z*kNw(iWBqH}z1{p)0k=00u+dgv
zDf!r+49CZQ^y|Lvn_GvM-cnm%C*mmL3r?IZbmW;fWec!rN<%F;JR(gm)?l(4Df6dP
z%t{f8yl6R|R)}B{X(}bB^CB5c1Gb(C`!uDTth%M>KxqNFMevEqtGob28W!jWJlq{S
z;{b75!Bj8C%r?-xQeb8(MROs=;?Ze*=%aJ^(6`-%QEPxp=UaIC3p;rH3u`!kImF)e
z!-$VAAwDsK`a&%Xszu%%0;`u(ES{w5ZotNgB>y0Oj0l@?r!<443M9Q7BkV=fD;EW!
z2&>`ELrr=_5u`cK9w3rk=3?4ZCa-wF0HfCAu7asLK63>zBT4m!6MJ%rs%3xVb5qk^
z$B!Dg*^prw?PuU7l0T}O&;+^aT!CaU#PqW42c07u*8=o+11S`Y@-Sy1E>%NwaWP?j
zjUra+FRdaQXBdyV=(g4|>~5kOc5!Gq#C`9Z#yj455)VJ}818xCFpi&?7kA874m{IB
zdT|$7M(H25jnM1G7_{qXw-dDX672Wt=#CTg$24I}WH}7}bvfSD3(Vmb(GWC6i}qKh
z&l8a41kh}9;0nZYfFk8c+0(8fK_^oVBq9k5Wc>#6KWJm=8<XUJ`t|SW{FM*=><9Ym
z-~Hd8sr-Nc#&|sTsF^qJ_67hpTb>IXs(tIXRmKnf?7QFl;m(N@@2{=j9LYR4Z!j_w
zy>>a7-7*0RUkMVXF;_&bq7=@TH3kdX<kj?X0)Cp-s#`2qEY)4XZ3JxW&n2lJ>Ex)&
zM(F{i4K(77Ds+{a_>ghxKo=nCN42GC5CARajYCvhRZMrPm|e{=_i~2%Y>wJOg!@h`
z;J(KW;d_51#pbmh&VHqX=e~3WPrsDn<`dPtb9fe&N0tyjGQ;hS)KA(V<H~-4Ath2o
z7q#SddD@XyBZ;h+Aj@PG1<maZ*>ywtHSuRt5?%R8li*DXOqCZ?zi>D7Sb?V$<{D7R
z>s#@_jr6m2HJy*C<4N7;#F3yaM5@&zY0i++ZQ|JG1D*>ywL)gOH0c4@TL<=6fqamM
z1r5Yui*I?~r1XaZ0S)BtZQsCf?=qr%9fy|3c=tPJ@#s4b<8ALeiU%J&goQ&iYK$hy
z&`LE%HXd+eI;WanGlk-z2D+c^qJ6eNrx&8tt)MfE(HTZ;U(QY}VvAmmKcvdDxQ;XB
zK~cC3>!E2}0=hyCaNUPKrl9=HXkkb>@+D!fD*fUBBjz6iS=?ybn@05MHjaI4ruJh$
z|1G^A`eVQJ*H7o)bK@2K+&>zR(>FZ0y+MF2$4cXyKT;Vy_{$GJ@~+P5yFQexuTsS*
z44F@$YMtqbtZJpJmjRH>Y*Z^9O+iNlIy8dLCY#d-Pd=+EA#fVn5?gJLq$uIK*X=nq
z74nK?1SHhENgzij?ufvRr@G6;DvGEmf-`_iEaC`q9u~4c3b2`0(Ck&v+$b=0evEo!
zjN0J<%crKX{3mDefj?DXwAIDsC-?B&Z>{3F$1h{!%TwszdkDqXE};2H6HE6+*slTI
zEJxH74u(E_8T27TU2Gnx3=+}F@RUwdq$br&*HrFQTEd-Ad|JX+mhx3YBL_+czN|Bx
z>kJ~MbF`UEz&h|412}W%Rm&g(Hkp?kAZn0aEkJDnArb4eul;?RGDRF?fovq+|1?pa
z0HnXuM{jK#y{$Eb;|&~H?Bd;TPw>dw=JCio--n0pTfxGSrbJ}?0gaJ%hhn+TE+wK*
z3kWD%RE^FNFUN>KIEyd;{T%!40JWy*&Pad8gOZI!RN!VO7nYn9NGWopdIFuYl72|V
zTHde}!z9Y)87|z0uZu|Nw<gm<Pm8#6rPNG8H+M$}E88;&KedYozWr$OqyOT=o&V>b
z&i~<C=D)Z7%;vxT3F)YK;{w~H4ElAqiKt+y_Q8j0<M+LA`o4!c?|JOw@zzEfQjvg(
zYAeOt=FbJy%_1xJuX=ph?NrT@K2Pn@)Qd$<8jUhsH-N|a$UnllAH3+4TPlARGTyin
zs-)6nsY=acB-#LO&K7JSO+XhQ;TZrqM>UNiU~OhS%F%43s5dht^EoPqbKrOeOl4H5
zz~*ypocsMfoPDx~wX}laoeS81a2f4G3+Sg2KKvfw-cvc+)Z|UwSy6yl?S3G^%npSV
z6hhKKV4aM`1Um_Qna`03f(wQeHtU7pj5AHdtH)Z}tW3W~$DXW4WFi%kA}47^QYTYe
zu?w#x0p_I}joZcP2Z}DgNV1l_0w9un0I;O1M@B6HrV^l;07s^QEBnCb)(b4&L9=p1
z#?x92@^l~QZ3BB3`skkD#&}~L@o*o@GXvapGQ=Yf&*E)wU&ezEu3-Mi3`cOhbtxjF
zW>{YO%Hb<iTc8jrEfCOm9vVuO$dId+(NchmPiFYkKM&BHCom=Hjx2<<PbsC9oc^k1
z5*NOlk_4XKM@>Ct0cRN1B99e*tmqPP8p^K7p$wa$-d}E;<J6QEt6Er~9tW7I<d{Fc
zgZg*R;b;EWFZKSxUwwQgU3v14J-_kE-+m)kO5@i%s7+VyU#yKEd;IvZlY@6Y^6_|Q
zGYiL5B4Uoz+K{Xy=hxA!$G|G2B6D@YoJLnnr}0cqQsS#<ROeXms_NMjiC)PNP0R*m
z2#`Lz3=xq?PB>@>cI=2tzl_zTR?QXJ@2e-jGr$oi$DI$_^*|%#vVwi}WAbD}jxH^}
z8IZIqnCir6ZUa+SbJSiOqq3Bta;%EwN1Iswz#+W9*GKP_F4msd$HgzagmYWK<)tO$
z>0!iEGnieea7xT?Gs`qeDj4XBiq6ec-!qChB|4UnHOPZ7jYQ=|x@P0goUBWuU|T*}
z5~Fvp1w$@Mijw8CV%e8UXY9T->%byJ#zA%qk(r{_Y|m02O7STbr6E#Di0Ck-p(53}
z`pgh(kGIi2vx9tf3$wvK-f<$tqu(}<$KH1u_rGNkvr7#&-{dFmr4o^GWGFUN)X7rG
zV-P1tBpwwUsHnp4n*gvzT`M}>p3Vn~yjFAEbx(-Xj{@hOr(r5oRTq)8a%JjqN92UL
z@tG;Ooq961Ryg32dt^S&Eg)7LBM=vGWaA`0Hlod>(2l7H6d1A{y|&$5n*)BOjgSA(
z2WvMj?e+fkKN^1e&bb>Wuk3y0igfAnxaK$17QCK8tsdV|pT{46=FrlyyT0yye`(b1
zR^#3<<<s7cGV^5{o}Y%@LOx-9A92wLUo{Izr~60*S4K@HeNX@tF<7Y%nRvWKY~sPD
z4^{Hc(!0Q~66*f2PK+fZ)R0eCEg5<TY~NFD0F5RMTDAyI0LO+J^Xy?1tVN@#Zv=WI
zPH)Bq8ubkIsT7rk4B@c?;T=RK(lhjto!t#LpW4R7uk`bqSAp)~S=8RUf`#|bW9ej_
zpJPB2%qZhX&7w6X*eNxlh>ao)wNc^%0$U_W4nFxwl%Bf2bCc7v`Gb<_7}N_?sR~G1
ztO_tg_t60@bWzevJlzGh_DPgnVAuh&PC+_WG~y5ovmut}f%z)%g>wUZ=E;5FVhjCC
z-LTQk^Lvkkc;ulf-u|u`-2dP#<_?i=LPzP1Ql#t*AmkkbuC|IXuf-Kp^`p~SsT^?<
z5HgU7M;visbX<m11RWG?-QJuH(CGrd_~T?R9&+)j?79-4CFj3u#T6+|$*5328?XV@
zDwh%cpH-FhIYNoGn7gGqF7b_|zf>0$t~~QJGK$*7^k6m~WB%bTDj#a3fAjzHv*E9P
z^6chD{TJ@r>0j=?5hJ(Y^$Ti;lcn%`zc@2{=+TdU?GN<&-T9=`9ZV4Rb{YAJW=Uc*
z6Xrn8Z928xRz~YT<X6_Shd_qfjm&1*Z&nwO5<6^px^lS2#7StCSe+<j)5y(X*H!nZ
z5=bXvj6CFNQ2}$<EFs~P45-!um#$LU>||S%rV=lw=_~bqQba>(Mk5Z;jB-rXb5s|`
z2$pjG3YTd7JNf4JkzKrr8^6DbOP}7y>P~{<#4#*>?IA3GXb$0tgaa3<ruKF-b`)Xp
zs!F>^Z@`sA<#6OeRWmfVuo$41y`$U+uMw7W_#mE>1kdyyX&7>~KrIO{r*xKx{wZz<
z@a1-aoh}tvB1E)53?M+dH$?wt7rSTnu=e6EI;#VmT(07MkIvz3@1Dc`4>d4%jM@+s
zxrZrt09Zt33mfmao8u>vAG21Yv^3IDf|PC&uS-BS8WkAw5NxSjj?w_bG1-aBZB!vY
zd1ru6|4fFnUzN|3A~h`%>seolkZn<=X%0?@Z0DBqr<3!Q<x5(<=HD#}4wcRbty4x@
z<)o`a9E&3YHHv@*+~%u8%)hIT{QfZgbKm-j+SAXiKE2WSx%Y0huMgj7;1;|-1-LWe
za{PV&TO(Qe&aeN_pYKG`(b~>V@3kMHxby0CQ6}vv#tD1I1PPx_A@d|&>}CLGpv0~p
z6<HPCoJ<c$iGMSPZw1D%e0<q(Z>y`jaH!g7v5cOKLWGNCfy}#k#wHI_62CIK1Fz0;
zfhuuwb#f$;B7{wr;(4Hy-rCS(0y+}4hd{GZV5&koyA07(is(=d9IhZFu_&LcZKUVh
z*nDaWmmlwAeWQYGxq<kxB_!`$MCFbtj!=esK-$h(P|DH|&)Jb(M^v@%j=vTsXp<F2
z1iy4aakOLLRtY%rAz+IsVx!KE2$*H?AZ($5G9hz|PXO5M0OM<YtiIUB)hD*G@p1=o
zC&bD51P?t>!=rDT!h?^_V&yJsJJ69;ZSrW-XiF{7`Eyoo%Ye*A3R=^?;{i!>LHm-@
z*h2xb-jJ%NjFA{qXNow7yNV`9w3?D1Iuc;#T7gf0B4hrL&kY4OTA*}fi$q`CBqsER
z128+Uyy~#<YQnt<uxTMEC;^hr3mI)#il0e$D8`~ZUxI;+j(5EhV4=~&!Us~U&vZwB
z_M888V`F#YSI=kv@;f?x(y+X73JR|yV6%uOz~S2W{y!4j`S(8ZfseOlrys1XZ}&O<
zG)~Qr1YB#6$DcV4N7GPt{?U=55|j}~quyc03;Fzp4PGG`g7!<g0)e;3R6P}LO;b=y
zGaW&q9G{$IBwyDkQJFyR{$<5a_$D2Ji73ty$E3Tk*B6T+0zQi3YEwXsQa36_XoZt!
zgX-|(SV6BrksL>JK&?hahY_L~isXRea23I9LwTJZva4Iz`20;={+%7%xID)G(M3cb
zxC3+VTEXneDF(FuPL8}!l{gt5L+KT@o-tqKMWoJ3-9BROHjn}VE9cn{PVLD_7L(|B
z!A68T08Ddi30&Ol<CUj3@tdF7#kDW(pt#n-R943$Z(GDizWos1_Tfbwx`QIo9H4>-
znZmP;c?n{H8;qbF8M}ChrI3KGd{I${9fP%7jH0mNs6d~9Y#?AJkr@|Ics?hm<{Y^O
z4&d27Tu)B=%$Amb-}_f7_SR_VwwXx^Xi?h9=ah9<2;ou!o3*G}2Zm=FV4x?(0|PdV
z<hY|lB02*$QkKN#qQdE^02@VjQ*nTWW(SMkNWO&E20!?nKieEtZvNdf-JkleY4Esg
zuYYh0UUwDH>PJ3Y&mZ~S_dfcqty6b?uy$>&FV~yu(`XBF=|;>$#(>iQ&o#D}{#Y(G
z75y3m8-M%;Xe^2pMU()OXOCmUM7U?t$g>HV0)v~ro~5F~m}s?B!A@USG)t^HQ8L{G
ztff+4l&vz{#6VG^97-uD6=H3faWWK{Rq3lhwNBhzP)2f`t_nEQwOZ8)RK&^E1E3z}
zsMW_vW`~HD3t*{&Vz!2$L4N!soN6O|c^m6b?BMK|T6p<7u(8y{?0XO4{tw-O<s(&e
zcYuCd{Qa2_XP#MkB4;+MpF#K<qxcBa*j6awcBh$|9GmX-Hr8I)#|vL=;mp&!xN)|H
zsGs7kN9XXKhnDcxhvsl{WeT&6DvMh?l&T&JG5=60skV8jEWzOPQzJ|ZDs^9&T&J{G
zikl2n1Y|U8#eMOlD)}4pX!PB{j3PM$GA*o-)39mq=ti<bI(9t3^%qlo^;0qp%akx0
zwX1cAH!4CUExe|A9W(-nmU>!+RL%+Of(sSY<Y(d6tRI(CQLd<p@1Awz2)GrPtpfA2
z9n62Mf?xfuCjf3hk-rCj>qmaSnJ+y5CtlwE<S)KaQqtgc<$zmx`^lN&YcD-?@B4a>
zyyZLN)r~&Q|CDN`lGA)|;?Bh5i}_tECh+|xWE}@)U=pyozbU7|0T+p81!l@3p3Rlg
zsLq?WImxdnu%Y1V!<T+=@Fm00a;dBd$!^6Cd%=lR)oX2%NUp5jQVPMVE=Ls{?Qk<U
zpYXEyBB=n?DFZm--DEHepU6SrA~^;+>LH8?;K(&QMRj_NxH(2J8=zQ@QOs2lCJDc8
zk?!Qf=hpE2Z|~s`esde=+Ev{7O~>$okDo$3Q^(F)CN9O|0PGoN3Ozu0LJk*nbDV^T
z>k;bYkJgZnb$7LeGf(Z{%$HYj>BTl$H-;QNJa}jU?|X0=?;s#M(L}9EY`qF%hZ$EE
z#UM1q-i-*`OEFG<2Z322mOhj=6ITYmfnMB7*uRbD%Z>vcu}5D+>H?r>j0Le8m5n7D
zrRXdt+b1n3Fs0~$8J}nDuP5KFGSAipX@Hq&V5SLt`d_5ThoSIwW%MOu3>EDR*nG~+
z+Q%e{JHWYlRA%V4sxfF8mBGL!zZ<v_pow#`P#F}x(ZV;I05c11EPPuX|KuNkdhp}_
z_~~Y^`RNBPw;n(9MgX_h0kFvjUyqJA7VsUH?l^Ma!Ux~^7xMMJG#qnnS|>u4;#jxR
zG31&2!sG=ms<PPw)<z(ysQ%H$emZ}8u^f~k@y1oi>qs@#3JbQnv8dNBWJ#2H)pg+L
zz|A5*U;kF7(vn_Gice*1okFXs_vy>H6X5_A+*A|C-?`_L<R-baMG?r=sJaT&$!L)y
zIa%Q&FM1<s2dAh^BIl?^IVz1Y!lf~AC=0PLg`!f)BkHhT9{`skJpH*Ye*9;y;N`&v
zzWJ{{h<AP4L+J0329z4a?c!G{Lr`$TeRYabFo|~7*7kAsg`0Tcs~foaQWxo3fyJ<b
z`|hmavHK3;;d|zB_mOE-oAf57?So|ZX-dty6onRCz!-EQw1y#CS%m#wh!<W0PJILL
zq3;fnUKg&4*F;S-35e1xU|wvX1b?4WONz*dC*w3yQ)|Ib5m^%#M*x-<IlIRgkWmn*
z9WACh^4-Lp`;zjlcij`<E5DZE^3wroQ|c}wQ`?m$@v;GrOXJU-_&z;<Bt5l=P19GS
zQi76mE3Kd;H6<+NC_W5%k&L}ml^ZXpm_Xo0X(?q;r+S$FaFYLD|H{wfcYf>KV6*mf
z$G3Wy+OKzT`y&Q6L54V-4i<y&`sMklW8eDG5B{}YZ#bRwhU5yW<SX6P>(_BSnL{}9
zq4zXX_OD40C{nV<ZO7*+!B60&z{c_rFHJQeFW<+;9&5RrWg(v6C=BS7_am@L-4^pC
zj?>c$sr5NpncwlVcAI*|Io+4K%bMiCk;9UzTE(jbcx{BP7DyVTqauzCs8WSbo1`fP
zsZzQ^f?&EYRm%ceY;x46_YmGo15GPfeKN(RFOG5TDzKhK*c(*v+@;HS^4yd7`tN%L
zKlJxLf=)Zbs4v4*(mcRaGs09I=xlXy_W2Dw^Y{&%eRcyo*ISq?B0PNJ5I*pZ<9O^{
zE4b@;6R1UCq27qb(up+?_p+*I5$XQgtpHoQ0oHaRY;{8HjD?3I{Ti)GyPG-w%6}W;
z=rN#oQ_Tv9&`$}x3a(mm#d2H-=}#?7Y`HF=C;XUHJ<VT|hf&jQsdf}IfYEntl6AUD
zlOkD$!RHQJXAuu~_*j6!Ht?CBreaQ636)4p1mOl~rt@>)ri-BU*P1-U+=fl+5tu`Z
z6%s5Z^$QAAKv2^GJCE(Vwqx=A=Hd)T-ZI4KR6qUr_x)7u()BB!xsIRyaCf->x-KTX
zE`V(%`Od#u!(IRAqhIrbtt7dpw%hJ<gv26HUm0b?P`qc*BvVHQl)?YxtAq?{rrPlS
z(I`)VjX5~K1&Hrv{Dr2Lu8ToeM2dpg#FCIv5)hGe@Vo&r6|o4c?CC29wy6fm3J8jx
z?xJv&u-A$Jy(V(`*|-w10pk4B3K629<;aqBbEK22lUA-FG7>t8>F>5;(<)9Tvxnb4
zz^Gr~>7U%kxikA{r5S>19czOTUfI|~5mb;?hIrwH3;5daI*z~bPd|dKj-+v9XZ!SL
z&*F=}d>Pv>6=;MJ?pmC}BPXZv?njq#&)u^KDd(vOu|?CR=tBx=h%mGE0ml6Zy>5WL
zc8JY(gw0lf?OuTWL4htkOpP)n$)zYYz}{|w`ya^hXZ~u48y6^r3^C3!PB~L5Do_=Z
zE13dpO#Z7yyY(G2n0Z2Ds+RJ7@?7xCQcas$W!7!_xk;9xz@{_@JufXPE6W6I89E!X
zzv8qa&q0wJf4B2Oz-dBC#NA_DK`+x&5;5C385oFZL}#g}0Vs8_&;rQOngO4t=xp$*
zlnb}`MZip$;?(;xywtxu`2Iih3(bCX>F=EH|IFVexy(dA-Ro%kBLp_NiszDdK2T5J
z|I)i3{aEMJu@5DyTOGoWkWW<CP~eQc%bhk9@LQ<7f<gHz`WB5}^Pa>F;qZ=v6&LiZ
zqRF8;Ia4HXj&{>(0k5zsU9gkW`uD`T+V~R_>rO^-r98xo<h<{Wk8=Q~&E?*1I`GmK
z8}6reZnaWyu!eCNmSSRLEj-i;)an5mH0*@5a_W3?`aYmq6!@M0VFPE+ZE|z>?A#1q
z+&_;mT=*PzI;-r{A4P}JXq>>>MjPMsCr;xV|I8!U-|XWLe*Pt#`%)W^-S;5=%=bKq
z4}M@qy!!V^3n8EDIHrg!=S~Xh-p+dg`a2=EHh`^Gi0whh{j#lsW=;SDN)c6R#*Qi!
z9r4IRQQWi5I|+<8GyIkRGC)+1&~8hbMb{x!HAmEs$+8T&zY+h^y(AHrfSN>XeB_L)
zmDjM~%mJI&fZJlJL#4I#DTwTx5n0U9;{h&yIm4OH2^T8og5$_^A>_}D7gCwCs=%eK
zX$)?rXR}Do__k0f2R*0c=kh#}w$W1ZVeNk8W^Ba;IiCyWVmWfFj&b)l$NA6y?&n7T
z&5wSjS<F81!3+DJ{`~7TYWpJsHaQqmm6MIR;+xJNKJu3N_doXMvAx~rx&WUj-0dsd
z#9{M)(NxXrs5)?;5-bX@nrf+p|MvOyh>zgHgt7QE;oPd8a<Z{krPIKbqF&aT>9nUZ
z<y1o01Fnf8fu4;e=qVQ{e%lVfN#rX4Di?|yfUJ?7HL_c}V(AAxANLDdB~@>;2(Q#P
zQT<=4s?Avfx&U|H3oI`N_~ei6;JIh7pjIic(3r=kZ~ijAbm@zjt)9T#)IFG;K8&S>
zX;kYOZmzE4!o>^d({yvhsA3xLxc6;1wr~<t)hXP6w1#i{#(5lhtiZUFa(^ey5*W22
z4Aui|uamVpur&y<myz&9cz+&%OpYDYTS={Hng()50s|Ax1vNV#A<Q>dfv@?d6d(Dv
zglAHatb~dH1F}(9Z#j#`hzoQ-3lGbmN?8!FHI&lS+z}d1)u_>#u_cb%wR6h`K8Ha_
z1&F!10KowG{LiK`4a|C!UH5_1b^Sh2mwFnA@yq5pgO^76OgnJbOd!$^)4F-)q1=(c
z3$}n6b8aNRAu+J=a=b8V6_t257V-v|YYy@|KN9Ev#oznc{FguV0!Gunabm6g^7iY|
z3FMEgSCp27neYSuQyespyyN~q-s!gUB%^*gk_5PqSvLEv9Bt-tY_B?=lXe_7_mQ80
zX2{Zs>xxxgMMA+#^ld)gm+rc%qsy6B(fjBqIA-YBTAIgL`YGfjxJtq-CoHF36d|ZC
zqKr$GtC2oex38@HCqB*w09YDL7bzb%y^S7_J9pKb25r(~#U4k*r>dcm^oqDSa^J~-
zPAkC5bb-0~7{B}TyLj^DHRKpzAwG)Vz4>eS{fobZW6if?dG0+pdHQQ`_p!sc|1fa>
z9l+c)_22K{#<eysTpHo&OFew`%nNww>Jzx<(0lOWxmkSai7EW8|KdK}{YV8jFBRzZ
zV;*t1xdm)>bM%Ru)3JX<%5ycfkYa=wiAr@+q$NV~bG4FFNQt&ch+D6Pc<PJ5`@cc@
zZYfeD*JI+)2m~3}#6q4hlAHK5vIUaJjP!}24KlW9OimYqO^M^|)N|jx8~ocWm}Ajx
z5TM;EaP)A1nL|M9rdZ9F<Axa3c+H~-)GG4Aqm<4k@|;H3$nPALlguR4{#ng-jP8@x
z(9+7w4U(Y7d-X1K`>n>H_Gak0H}{h;`9hAr{R7{MXP>)LTig8FpWCfm`TF6w@6C~X
zeQXoGw*P51IRK65{v+wQ@fRPs=YzdQ<4~<X9Ex6{ygn!6Nv|i<LjRJ4FQ54!Bzk{P
za)LhZ1AyjLE#<{aJsfjyZU-j$J=(NlOP7bV{g5TNYMkU`Dx1bNBG6Q&ggFUPZOT!}
z)wmg+c2b(DrKL*t`g*{a%w`@)tjsxzVPj4CVht86;wkzO;1JCfO?a2S(72N0$nh9Y
z{Z0?R_v`Bz<^#;smvOFh2A{j~DXdJL##G}J7LPrOmAejO_GF6a&M^ivDHawoy#2ik
z_}Cx66F>ajr|}oQ=MjAO$NnUiRvy6F&0j>+*u<6YKK{WcuCl{ORta&FiU8vR`;7wW
zbbzcTLv+Su!A>+ARWK>iB5`c5K))l7z@rXLYbSk}OqR0#Rdxy<2S^fNa}7B6T!yJ8
zS)dD_My*Vyx1-}j1_NnIV+q9T%+lF(Ou?k2o_0)~9#R*(^7FCOQ*TpHGAW3iuPUMA
zt^|rckK7$1B?*jKWZAzu^~(Q@Wju_?@Hk@iZnvomuE3G&`_zb5?x*KU9)xmRSr`#1
zPWeUqX6KBZ%hVc{79p<Q48q#>Li{(s?_-_eu=$at_}w40Nb~iy{Sg40Y?b`fUz=$z
z<L;9mLc5pJ=($jYvgILSixxvIRfm`HSGhSCiLwd6u~XIuC`7#etSOn(j+pdAOOjG;
zmA|pZO<%I)_Vjh#mx7d@z;c2G7^gIUp#&+dq=iL687|HHq@V3^R#}@Qt!Z<;(uTS2
zVp8za=z|_8>6zH{fUKP|o-0bu`h21C2~AOpicRIhpvWj-&DI@vN7!8(;TM1EDz^4_
z5QkM1afr`c{&gf_6O{@LmpO^JvW$K=Ws9Tac!>O-09Td*tOY4HqcL92Q|u)vYKt)r
z9eEdusDYQ)ehJgfD$ZSQ<EMXi9V>TJ+irm&MN8WGMEfwxXm$kwfXq#0AZwHDIgk!y
zLKn#|7@!o?WDrZCP5Cm&B#A>j`MEJ-3ezb%(~DIu=wPByz}%U0LoQR$QZ6LthGLaO
zb9~H|i}QmOH%)qy?RDub0<>BM7EkKjQ=QKvxTCW*4Aks3l@m67pbqp1ZIQFcmU+ia
zb%Uh6qX^hiZ<+^UX}kiUoU6K!San#VWBQ%H(trysBz+;_<csHr_~1QnPd@zELn#LL
z{x9`-MuUamb_F&$IjYgodYmu(<-70vnzWKMVsh*hLqUy-oCwV0E%d;NHpmqE9<^p#
zH5>nCK;);J23X3cxhkU@@KR3vwe&*;w(@sMIK98y7o`pk<m~kobfo&GM76g9Tbh&Q
z1ad^}m8-Ig&=k}Tf*m)VJGp^B4o(2haZk)gNfgN`8{O<?7pTt~d8|=&F)MK7Zm_$?
zCx3bk*VfmN<~<})17EoOS?u)JP_Hf_j;9evGZ=Q;Xl;(MdKGx~i2@hS10AZY9S!jE
zPJ~ZB9^zL&2R!lgCe}8dLM5uBJ>I}Z=XuOFYxuQKZs5fWJsiJ3LT9f)zpv3GgH?f1
zpEPRnJ*DaFR=MOJRRJmaT>!@1G9<E+i?CUXaPdrm?ahq&LjyH_{}zE!1n(|#D;jvK
zmPaA*Y2?Vw@~pITOg@G(W8kVdb)YC+#y4{ASfJA>P@AE2G~ftY3KsI^JJ-nhrBT0v
zoJDPva@)Bf`>s)1q0yIiM7U_o&IL>FIc*mT!gPBSC9@$goiD2S6OfaIj~2tuAi~;4
z5q|uAA09Q5+52b0hrZ5TVz+a|Ru4{nuu)lV9$kLhV8n)z7N~J)#)PsHhsq~cy&E0j
zKDm{S9O6{!-`}zRG&wv(RD=ah5qBV3RwDSh>Hi3!fSL+<Z3XwA&)>5HK*SEYX%LQ5
za2g;ft3(8D1?ANj9L2el)kSi8vfIT=uVLYvHln)-&+a3CVoylplsL7>i(GmcZFLvm
zs81I-erJr&{YDF4efAQHsDo<I#D&e5@a+1pqgt&Ys!Sscr%_GjkyL2TM8>J%&NguN
zc_7NkdON_EK2zYiXER*7u#WZBmoXmg@v%(eS={V=5oxi7aX!S)|KuhX$TKaL#&Y9K
z*&b=2k(fqdGPI;@xR<eir6s(8k%62<QdIRFbYq--evHO6MS&_9_9~nLL<T^FK(sL=
z3B#llxU5iM6atS8)bq?~)(#X8Or-17;HI^t=romMf9NEo+%l9ov+q3CPX{%d-8?T=
z27uyE$LS}jW7z1ERWf`5<$Mkqm#Ck;`;yy?ir~+m0gcjf0W|i#^wUwj4|ihFVo3gW
zYa^^wkB0XhyEjL6^na*EO--n8OJLLLUcUJ4GgHSf)tC=yE+bC|*If}!nH9BPO8`;w
zVUAPt7f}yvOjhAPg<zM3^!~GXQV)MkJ^)%?{O0}@7ZGpOHlc>5o?H^q6i_$|57anX
zD1nJ1E<HIV^(aGp7eu)9Nx2@n-Me5*UPn_OO}m&ol9iq-dtyi^)z&-j332ho6rcXh
zE6Bnf8P1FlPp$qE!f=4NQbQC?BT1GJlh-y&EOO>@Xn$tsM7jT!#|vD!kYhAxq1(QJ
z@wmfS6$TYl;u&<u>)7g@;kK_QzOstvp6lYFw?zVCmI^8t#y^`BL#|}L;)VP2+n7rJ
z(yxfq{pz&{FFr{InlzEC<jQ0*krdRpGAG+`pS5>R8MAH?xhE`|tcIGJQlG*9930Id
zpJ%UEVEF{KR)u0X$#qW40*qF$uadVbZ!0-8w!~ABa3McaL4-lC1hrt2OJl$ykRz~@
z$c*?k<{kMwDFKZlIiU)Ks~nDi{b3lNTzTuDf|a+|!lNsb*XnHpZ1RS~pdQ3Q<88F+
zvy`SnU?<X1wc9vQQZk@1j*J2)aiT6k#{0WI-ehiqOSYs-$9#EOmer+Fc&q<;b%)8H
zxV9eVG~wL17CEC#^5l3r<KO)D8#)OoyeAbrh5wVq0;z<`g&KHKh$kTRIXA5aIx*=)
z^kNsRrlb0^f&!oHOhzNev3sZl7~xlb;Tqb#4Sw&9WFBX>KZDlzCaRTbRN^M0sE%r7
z4iz>{Q$MniB+$!80&J`SFFy}-J1P2|{hSspDm0=f$P*hu5F-w!u-1D4DTc_<!!Q2)
zI*y$N4$TJ`52a$~qA}ycG-BmwR=_K_h|4WfKAEq_fufB@EyUW@fO}aR4Ov|5gYb{B
zJ>DZu%g@py-+hN>`E2EP2aM**pwbcfD2%o!7f}M)ZWpM|1ejV7i*QG6cpxR8S<YP;
zQsj|{PBeJL9n$Xtgf{0T*UwqNjwRwW_?tg-=G>HbBLH(enx&uwbVQ+$b2ERJXpTBJ
z1_W#wFr=>_q?tg7qouqWE#`5sboaq4<~B=3*-3F`oQ~0L4^gRvJaAa#Jo+D7KPZTq
z--dyfslJ^1pPOIgxH$nh&kM*!P(sYoCIf%VW_VM1t6%b~NMAn*c7Wxou53nVGm~7z
z=2OSz30_`+yke?Eq$I5;s-g^@UU99gk~v<bEIxSIP|5vxe`5o=Jmi7}4?Zb?nUw-d
zha&veFKytJS1zCkdZ<MU*dK4;!rt$pn$!@*6s<K71y#gxwKV2rT^DsLh@;5*D(S}x
zboPfBjj60ib69EMn;u7U8;PgT8eYbJ|0){I1kXRci|1bI;lW2@Zdm6CiX#^<z4YFL
zrs|>njX}?b(OdDxjx)V#M0{I}3onh)m?=3nA^*$!m0z;(Nrl-f?C62^Kf^Lo^N4es
zl4ie}>Wvp7?pt6`W^pociaD@&T!770w!QZt6>b7D1u+7%%r6pY)M*rl<7R`hsNlrR
z%FQ_d6Yydg4HcO(@GOxm3qtz40Uo)hj1&a9N=*f$l^ENj9J~88B$cfCEAx0AZT|^@
z%`UmDNHOfESqq!%8yF78n3{>%>4DlyN^lcEv%XN-4BWhDWrAM-ssxlWT9XLQ5o_M_
z=+Ext^j7VOytPa^jU0CA1l=v-9i5EmCV;QpFP{)LpyL#PwN+LuDbrY&=D3U7h;K`w
z46wY5k|QxGOiaE9UJL}(^gc-wxbxlwFFw)3m%e-fsC4+kilYQ)Ha>-d1}aAhgHaeX
zXetV#s9L6CDt{qI*kQlG-WF-aatsC;@;sG3O51eN5Rvm3tKBE~GtToNe(|UFv2c{E
za)iIJ9$o=(1!s3G?0tKYnt_Q%J94bc2)R~^@yZLCG<+xif}qFAj<NR~*6%qPartMS
zekN89ebwK~VnRmIJmHdy`pWa5-vbtoMXW<)-qjTZC<>GRoczPRCrd-61;XwxQMsg$
z5~UN+S;3$zBnjYA<fa7z_ZR^`j?narfK3V&#03@@R|?GB6<}Ngo_e;0?ba%W`6f-`
z*v9K<`%fOR<;Aeb^U*7#Y&TB_yZQC=t4Pxn(+e@CW@U=Hz*~ff(-)fvB)jVPeU0Qw
z?U{Yo%T7~*gD0D%39RPl`;~=>GDY=)#p`U)6HG1!kLfczUT^a~cgvvBq$BqH79FUQ
zgr!~%M4eX25yA#c{ImbI-8-<`Wp=5&E^}!t4dC}cH&=i=PKRi1r})j^yn?jY<Ht=`
zS8#LhtJoe~KvJ1T5Y`Zd(*%Qvf;ytG=IQWc>>L?h5~)m;J{G~IDS}``on;cO@n@)h
zPeFz_s$q9{9-Z+zl6r=xzPf{Fo*dxh=@4V`OtXc`09~Xk!l*kl-aMxvJ#-s;nR%3j
zzc|s))g;8mDzLwuVyaoTNtF@pq!!JAoY&Q2QVTo&B<9t_J+T0Kr;7Vz++t{-i}o$k
zdnBH1YCb@<DP0x*e+IC8K6qT9OHn<#qpY4=byW_OMQq%Lrs8D*GnIt!Vktk%--8n9
zl#`>VE~B})%OU3PjnPMrU;Wf|T)2J%Tch*wC~IR}Y@M6D5N|WN2k|a>xchIr!~HNt
zI~{boc;$u5*j#IKS~|ZJVP-*GD6FVp5uE%-T%3)BI$%>|DeHvMq>nfTNM)6)B<9P<
zI3V-??nQGGjR^+|2L5gC=L6^}1=|vsTneR?OO`fRG~uN>LI_XNkmdUlzKKt0u9AA`
z=R|Qtew|$=AF~j@{!2HpzI6=<2dD&77^Q8T+xZ<-k~)o*K^#pZ3@Bo&aI{9>Wqzx^
z4;|??9t&qg04Eo-rc>I48H6!&Y_vsTf}$8<tNS7YBZ2B~{K`J2W<yL(32^wncXAAL
z`j;FqHt=@ZFBu=;rQ#*WNzX;S0^@#+i!YB^tn0T(xoFHGlpZU$c$J{$xGN$KjWcr#
z;3OM6LDL<m+#Ar*X-xXCN+ZI;(HLWzMDIXM7a?2VxX`O$=1YwZ2)RpLTOndyy^jMj
zPC-lFRd_d(jz}d{s-!?lc33oU`dEaSJ7NsN43B?h6QB60m+;cra~R@gy52sU1Q>m$
zpRet{`pm!0TB`c_xnHl~WM`xEmH5=+H|4GFMtJG$KGvGESU$9frR7;PW+Ps``#nlr
zLl$MK(Kmm%f?XOl=zIg}Z6i{jPb@1Qc#)9-fN7B&VA#J0wIq5Ub_QWI^<qQ~_dMmt
z0a()^AgYCPG>q4L;wGqDTNLZ_G?LU_85O_Cg&;<~I)$OMU{YY^LWVi^P5=UTfGLj|
z2B^;zm_HQbsmJ&6@|g<=;|{Vk!%VG#m)3t4<FJETG|K}CqOeY$9}G%SNc<Z4Pn0@6
z0u9=SLBGJLN1#kW6s4gh8!x&;irQjsr6cdqD6V6>cLs;1--~KJ!3!^M;M^;-IC`Rj
zmtGKekr8|UD`=a|y9Z#xC8_m*e83dNdF@I32PVyvY6WMW?&JQ)ayAU*b|o(@bWh+0
z0LdcaNA0FjD;FAjr82rJ+wlxybx+L2s4O<n`Kq!E;Lsg0uD(2S5gO4})<bMNN)M-g
zPIDZWWnX|xtn<sE)KF&}3TN4CP4|T#tIo>e+APn*=_>UiCk6ZF)u$s=YP8VixVG8C
z#f#gxeq$3I8n=Z3>eU20{g=|-V7E31UipzM8@#UCs{RuLo175Ce0?wuFZ}8C-RzSy
zwZ+za?a@YSu!YuM8~gifxN&11D=RBlTA9PlTm|_oaW@$^F!Lz5l**AZRIvm%`Ve^p
zhl`(F@0$ZS+lz9#xVJ{@AIs4#E>&@k9_8C8pTE4ny|RFizM4bXvOTXn^>uG`yqq<^
z+mSK?Tm0<xf>8VCGD`G9IQ;`Vm{I?q^%>Hf1Z}8}ss$F0hS=R4<MA)P0)+d>@)XU=
z3O3s>U~}+1s?`}@K8RBb8O%b2VWk8%-a&~dDPrRYfhI-qFqB-rJn4fo3T1C4nu-!4
zifS09JJ{=;!&38Y7>!!^+#l@VJHO{Bj}Pn(w9(r|&Lxj#5f3e5_A$8+SdX`}6jIqo
zLh0yDptY5vR*%u?IBx@$b9m{zm&%r@sx3ywW0ogFSv#;)R)2Pvx_2V#YjAV1ni2GS
zIc5)25luw1^m$u9vh)j==M96GmuhJ{sh-bjrjUD6)if36p+p?=%lqPP6S6)^0wj%q
z=ba|CkcaCG1}Uzt?PGO)7aMDPXzlMHOS@uEAH_6m3GLD4-rDYqGkI|1ziVYLJokD6
zwLiip_yDc^$zNWG=KnwESAY92o?fo*%{AZB*dJ_%X)!>zy^c$*E!@05joG;+EG^Gt
zZgC0=D<NxW2Hgz99u1x)M%MIi1z8O7&;Cgl6dZ5yVb54mV!W6FBHc^=&dtz<Lk`5e
z$jmwve1t30Qa<x}fpig;OHa%(S66R2Yxx{I*uLesx$>%z3t5M8XxEomqwCIytDC#>
z+>SHWX%rzYnm}`r`awf{=J(EGfB!lvl?-t(#mC^n-lq}M#AfzyqXErz1VL3mElLo_
z4Vzx5VF3Y@q@xsF+b~|HzVghaL9(%*gnTDTk}kF=!bbNA%r@>rT#4|?D?3=bv4o>{
zBzXD7tZZ>}999_~OI1^E_rcG&KNm#_0F(1dIt+31$_RHqlAzO;Zt`;Ssh&IP|DsL@
zt}sD@TwXMMIgM8|a-TE-lamx#Qmpia^OoV?^~4o%^88$YsX3svNmH!!Ox8DEF3$8x
zn@T_cPe9GQ*fhf^yuH$snfNmK$jAe(Kr$7fF(XkKZS7VcmoBxiw!VX%ojnZtJ><m*
zQJ5kKM;ysjf@vf{Bi-yhKU&@Y@(jYAU)W7Q|F?zuJiyP~e!ylS{|I~d%n!{)A0C}u
z|Lq?+GFa^$ntm6?K`j|%9U$ssoDQ+MwTG>(I%@S<EH2GqVQCiAvr}l!Q4|+o*eiIh
zB&DiC3VTV2hH9pH;|T;>G$`d8Owd?K-pwqaP6L~FVD`;rjCC;Pk};EdGSRuOGlpdI
z=X$eIgS&PLk?!ehDinF<ePul91gLy++R8gw`E)<<3P0f$!dpC5U}ho4vrlf~{P|Z<
zt)$GUG?RH;*!g7)v5RUn&Bu&V&?pjajd?Yyh?3MpootQZrvQvLk*yf;`+(*OEX>&j
zITeJ2K#QX)`okO88=S*J?I8?@yLjU9U3|m09%A!L8aPZJ0;%C8Tq%1hUBs#poZton
zynAW+PVOBnR7E9;aQ@{!9(cD-wYQ_@Q4)@ybBEF*uTrz-j<iKm2O|HnZ_-<0^#MK%
z+S)~nHGS+$$71ZPraW4a>6QayANiJ?Y~P7pP>($o{@UCROD}WD(|IAJg^Z%IdNV||
z!2>VC!C;KF?Okkc?&e#YyV!5FFc|j{V2m&(l9Pr<)6tB$U{nn&>0q>%UTl4?*%@7~
z<-yvI?PgE>*J;svT{`Lhk=Yi}!ASE?zJpKywVCLBUtMhtKC#_Biz9Q7^%iOmB8!^I
zDDQyUtf`VV==E{^$_7@iRWUU^kENAG%rDMjW{!q?(5jbX(93xmkPO@~o{I>bG7t6B
zM#p=2`}7+3D(4eeG-pwP2X@}#J!v0QCOCGpJE0HI)h=@LBR*MhE!~u;F3&iVAw`<<
zItQN2Tu3}JJ*WaROEETY4DjTaUqTcQ`4~0g1?=_CVzu`rRBO{H0!mU6L}3FFv{*pg
z7y%p=0Nj4cyXF)}I|M9kmcMG$;VjZcpc_EHf(Us)UP|PQ`!wdN_alxnymV$2Z+-g$
z4jqYb<$~Cq^XyLr^+2U6Ub&JtBjBidtd3A6_;Bh~pxTIW<4TV9-UvxGMz1fkA>8NU
zb%5Ay_JK*%W~r;U8o5Z>el8^<rGbN&l5$2a=3Iu*^xlTU0?T(qc;y+#nU?2)`(Eys
zQ5fRaC-0y5NM69>fL)SnjS$W0n5)+G8m&$b*DtrijrDEpZ112qAbHO)45B>eG_#_~
zKoM~vsS-BQtmviP(Uo|$ccIo9?Vu>y&kTZBexRMc_*Bk=WnX`w_D2kC^6}*PpxDcQ
z?_V`4cl}0D-1pyK+1&g7&E#pU%set!n0iZ^hx5rWYlUerRIj!a?N*n$xa9H_nltm5
zo1eq%Y!lOSBqSA(>vd$s&ogT6lyHiP<+7maojwOn98O8~H}=rdd-}5w-1{igQ%isR
zN%50!*|#<?b#7&(<@2xZ3Eg8P)06~EWDt|wj&oOa$Jc<aKw~~+5c<;R&!f}ZLqu~e
z3z-6ZasO8k#loG5V`~jzNI42E8e+v8g#>KWaUf2@oD%7P5!x5#*L*VGrK`fNi7t^0
z@d(f?og&Juf%f1cT7yfNP3}Ukw~ennxq+|y$T1{0Qlw)_BUzTfyt(lAC7PATP<TCk
z=UjGh+OnYJ83(->H!qEF^i;x93-|GP703yBMkxu&$<bDyFZ4&HI#BZ#Mjv#&PoqpL
z?X~oFlF7_2#;DdS$jN@)=n40XWrXg|EpERPu8ydKN;O2SS)m~@A?fvo!%@DzyN8YS
zU2JY_q21X>n)XlxBalZmH~Y!!gh7$y)v$>uh|?k)<^ADSxIMU5+Z$fQDBA&|;ioff
z{oQVU?u(<W#X}Zfub}ov3~aQOA6svHakC#>{j-he^naUWC;rRM&gx%WZ9R_p#sgTW
zzoj>m91h39FdpU|6k&=m$S}?*Ro%wsMvSCV$L!oP4jo#-%tDh>E?Q7VgA9Wqwd+ui
zo0{xtvB9M@WZhg&u#$=Hwr9@qwgjPajW16$=DAo;Wf6;3MJHBtpEuEg&F<cQMeVg2
z3%Nea$_1U8hJU65DHH8-U&%#cdOpJQUtPoHYu8XoM#!=;>Xmt1-~D}b^9|Iha|%F|
zZc?O{Nb1OL`oyJ?IJYv<*2aTFXoQ`r_(j>_U(NnW?{|{eU{QVNQO;c3baEFel@u3V
zS;Jc&UdF;=jJ2COi&ZR^G(NP?MzmxMWLkKc)EvqdlGPf&C^h0IxN>%YllPTppkHO3
zAo*WIrc<VxdYd^TyC_n1lK$Ck5ueZKl|Bu8YLHB3Za%=wQiSar8FzD(Dm5>2Q1NvX
zh0MiO>oMw$h>y{5oT1Ze;rjX>ws*GC+TX`;*hQ8Ofp9GL@fB%DV}3NKA_=RAqcF|V
zVLljMPg<jkwf1loLz*d@w?CT&`=3aIjZY2Jwe>8g;jHBu|9S<r*8#BErWa+AqMN>a
zxr>+oQaw8HH?!=-_xATU{>EDCsZ+DHyK!jxt%K?6op}}}@gQ%7qr8V8pbw13vJJ7h
z-op0gP1Nesn3-F^!r}sE=ch2&jKwUkmti;%qd(~xl!Qs#LJO8f@MdjRZkhGvCARr|
zi{rC6jFFKkT)pJ7gcT+HK2<LPau-IK+Io%r%FC6zWt|Ta8LF+mleA0}GiW8J6m&7h
z=4ubmJarafrG+#bAqgAk4X<E*@HmoWMnEkjIR>SniKd?s-$uWas5W9P8r@HTjc28*
z-i$@V>N4U^c=6FECPCked74Y~M$bWA2vnqKjbA}8T}2~a!eFqEXP?=_``^EU%?<i&
zB^o6GvqvL(pM+X<TJ_t@L5+l`XpbnTYAwe4HEOd;5mWQIIioP{aYd5)QI)6jyG8gP
z7cKMWr9)cm{K%<L<%$bR@SDC;iw%<iD)*yBmfjm-J*A_Y*Q`Kd2q-hCDsjXW-Ntl<
zhw#vA4~BiLZ?|xBV*@)oJLva1$nsGhV8m5SE<{&kbYa0ZH4RkbnLI9vG|xL|53eM9
zgG;sU=my65PM#P2UoWD;PmPL=-yIffn^`t|jdT9>3uv!1V57|^n+x=_tGj(%{pXc%
z;m51NiFb?#`+se3c>d$Hcn)**yD?ik-D}26ROyUISuY%8z`p%K*vDYhM{jit>+4n2
zYtxutoX6bk0%qo#406N=jfUhvQDCI<5vAlNKD&}4d3F5sDt^o#H$x<@NQMr)JM(ut
zn9f=@<5yW76|Irvfuw}1wAys7`z<_?4SbP4Nm8}b`}@-8UqOGkfiR}g=rr)9ip%@I
z%ZB)2M3dhMeF@m8Sdb{UM(HON4q|SzlH5~^00zQpPi^kA1|}spXqlocBpk76M~RK*
zqDXL@^|0N43XSP+L=+Ej@xl!}@DMFbAvV^^q0!=c;`eG<>yu~Ut)GGWlw4*=`nVA7
zJ(9bOP@Qg|y-$c@(b;6B^WdpjKCi~aezqw9r73Djd^)<o^Kp}SsbpV`O(QF#*%f*p
zLZ8sRDshZTHD*AgqC$Zbo$fBK-rU00_6}O@eGCR|ZcUS6+5zI2PCn8ShKP$gVwUY>
z$nySZnB7Es_(G#M+DeA$KF0ZeCrA5NGVFX}gpJ2X#cnGj6TFEt-S+zR4`{DLV0$fq
zBL(zMI?i{V2!rHLCDGx(JkE}Otlzou-)y$Oa=H;8#=_Knd9!+NuUR<~kMdzW$h+*(
z&xN;OjQ*gH-nC7vU9Y27o5tMY5*8NbIg*>6i+CCDbu#qZB3W>iFOSIQ>rzCb`nPh}
zikyBvr{Yo~A+a@zn}kQ1A<64$*@r)oii)1jO_^79ig%%k*IejE`&qHV$a|VF)C3w+
zF`jwyD%RI7qf*JaZKn|}VYB@ubkiG1YBO3sqX><@C}Jat2k~rHIEXntm5bNAK;3Fk
zwtvab7KxT=tGsI~BFGo<ZUyV&a#Z3vcKR=3dFq`=!dVQ5J9y#6O}z76M-XnN?8!z4
zl*t{d8|Wc-Bcq(4mTHD3PAfgscv4xIhea0S+AAYG_}&KF1@T072U3$@=u%3r7{H%7
z2m5w@l-wHKF8d_2HOe!{_Cdrs_IcZsGM-AG0db8Y;sjImghwROL;Hg+);3qMv$u(M
zYa4@MhpB`hkmNj~#fp1#>1C>1^htsyr<n!D=#AH~KRg$AhS%e9zK<*zzLI13GX?g4
zbzE${Jj}Ox8F@v$!NKfx4s5RtaHOdjq*wO_xcbwTaPHsKqC4I)8tweR{^;6&R*k+o
z*Q_4KT<z{ry>cv#!bM6><559GX^MdOilU3&poh-2O{`w8q28Fr;vwSX7Eqh2BWXme
z!x|50;IEM3madi+F40N(1qb#OAw{YhWSYQJPvrxk=F&_{EqNl6yIeeA)HKswT|R?W
zrn3GKGAd67Fh@18xcTO_HqM?ok4lA2{85c&Fc@#(M(;DIBsC`sp|q1CGX^tI#HN){
zj^c=4lfr@js>V-=6_ULRzN|TPbit$wWf|bqhL}5~f|&XOD0SlJAB}gg-FpT{r$34y
z>f-Xn>$vy6MJCnBHH3>Jo)4QJH<!J)r6fn9CF9Fvuc@(sWFOZq4DrBwsLB7JH(z-$
zCsIZa)Qk_ED9oCfq~6!S-DlfekF9A$sGva+R+Y46Kz&x+fx}9Qt@Z}mYuo6wTj+M%
z7-wyupaNRX{2CcX2!Ilj#;Ar3B%sA-h~D@nwuV>G8f;LMmM2jd2jTdYQLz5^$JqGv
zFx$E@%xDf6ZYeN(g8-XtujaMJ`Cc~8_nrmtBT2aOe@}78dj`X6KeRo3?z^I5Dw(aG
z#7gtgUbAs$!e0Ja2V8U@`Z*#hZH#WOgYLym+_+L>PHuK?fh8mq$u(y}=5<Cx0y(m$
z7Hev5A#%1z-hNp~;-{tuhR>AhagY3#e`G$Six9o{?XT!w2w@ZC{S?%thU#F^oFntX
z6i+>Q7I`iXwyZk~0$kqzRVM5Mp2=r@oR)%8+9D~aL~J6?W!Bl=j;3`ETQnV&b|7aP
z>)bua>qFjC6pDt;I5v7+YM7_shXAL6o&IxJXgtcq_HeL|GcRxA-S0kz?G2g?FP#+J
zB38DN>2WlEZ(_u@13U}yD7uT25IfridhHZR60<;-wZj?(($qx)d~z9b7yN;)5&tuC
zpQeWmGW}g{w`1lq^N1W#3T}L-sEk?x$%%OV3NY^GICJ@T(CKU;3aP54Gh-w50AO$o
zk&qlCAfheDDBVSG@Cr6Y7tu+tV4U|cl}zKol~Y)#A5EXQb}1Q#m;S_d|C#4+WiWe#
z0oxxQ#nJDhd}A=mH~t_DqCZH&!!r?<zi!yy{Nb(sg^x5VN7C8aJ(x-Ez*Mw=EF^EK
z0rL?Q)lkWs($-G5g?4KlYd0EbOwD3pc@YbXbC{lMpgA3J^w#fY7<6eWl0lQ%C6x)x
zf!xL8-Q)tWDc^Pt_&T@=ZxL12+f;hHM`?b^Ka_1=3UEC5wgMzm1*WDVJpTD}*xkN?
zN{ynTF&gn4Zni&*Zh8&1`htR_0Ss|zBE;n{)|yEgO7ais8qgjf7a=LM=$?pp)&#Ed
z-9Sx;O=}d&(@(YHDpgmC;Nq}`LB5Th?$bCl{WU-|!j(%m@!*5YT;<+clL{%dmr*dy
zudSYGe$B*=zeJQ?K|?KK$iArE39xx{h@&SH4EpIr4D1^92;e*&i5%-P-SlD3`7TUE
zXj&nqA=W&Y8mQF8vACcCDT4z0>p*9l=ADw;Z-D6;dbz$%Xs3!t%28PbHN;_^TM4tg
zhyLgawno>{8ehX8-D0h0Eooq(c`RIN+<^z?j^|&0<Rs3v&xD`5^fX4r?oLS}7q=vs
zy@7%450BzVEI7z+w16AG9EFWvX~Yk|dz3YQf35Y|_*$@?*W$TwvGy*^)gD5lvc!Ni
zD!LdKJp|M?647ejMyu1pe(NT#Uzx(x)GX!~7O}WIhvsYpjp>+q5H39Qb3QRST~)1{
z*%H~Tgt8bhX|Ggr$;LzZ<xEw$>*Gv-YpF0@ZQ}UriDC8cEV4`}1&wj}!Vb=#yM!ni
zAx%fjVRc8VSZjY7No`hlOdHd!0_xIF;no;*!idTJgOQ1=5NjubINCbD4dEpj6iTyC
zab2O;tdM;nRUw?EkzgLp08Owncm|78kMV@8;b<2xy|{+Az2gLSw^B}dc^-jTUbx|f
ze)OT=U5;5UE^^<T3H6(oM?4tXiDN7{b6l!5!%H8p(F}fy>O{L9m&YR6sNliV)Urf?
zMo%*y<mm1c=<Wc6eJWmQ!G(`wfuKfX1L@H<gal@ETq2q;*26g6;9)qO@pW{wRb<70
zDS~>uh~>ups8?oCi)*My)w~v0(5U2?ni-+VGe)M6GO_0$k6U|tg96+CFOZ|IgI+Pn
zUjA|=Tv=UeK5**L>{~}yTEB;l-j}f6{SxZ&3Kkm=W2SmHn(;E9u!Ew9ao*$5K91>n
zY@^fZpxxTQjcZlZr{*xXuz<xS>UNl7b4;oPvV^2h+?-SftvAzM{AN)jX0M)8ZyB-4
z#cl7y>SYtzrrl491^U>s=%B-pBVcMKL~Cz|r=EBbMM%61HE<TJNV~ZITRHKKbV0~I
z8Iez5R?CT73xY~0&F>Vs(dj|JMz?#T5RET$)9w9F!%GA$NA`Lo2|Nn|%pz7AU8}5_
zm|Mqj6N7XcdxICT(s(!GV1TPvuH)oAhcLTX!S05>f4o|ZI{|H0nsv+@H@oGec%WCR
zR7m#GXUlC;>c6ID?KP^Q6Q`Vtr1_P@LZY&I0dBXY=cL&HJz!^}KzCOne$rOTk|IxF
z?kKb-kjVpqT_ub#q@L-)Dq5p+=!`ES&Dsb<vSwezRP7Gb;wIuCK}>zT9PNgPSx8M)
z<{b3|Se^xTD;3Nq3mAa<r2KgD*4}ObVDmTs<fE~6!(kB)adi6KXeRe!vws<T{a3I%
zcpev9zlbQPU?#Z>i?z34I=Kh6c#%0GDmrA;%0*+BqEypW0=YHZxLQSHY6kO*1ab?Q
zS(w7ibj*^9Q9t9#D(NA4q?$4`+?-5xFOz_1v?V|xCY34ya8dys_^k#NdS5T>v$TgU
z3?|jX0<~$f=nnDa&z(i5zkw*ukY*|B(R{w%{vx{RbyVw%F8$?h0EyCaPDQEVU49O^
zkia@N;>0R!3nfN)3TCw1+<R-Y2}(h-k>ny;RTm4hZD*N;a%_~Gb8(Tt)!K6+#Bm*4
zy(h3xdkgO$$r;X`y@|)(c?zxF4C9eHmrQ`Z@2ugw*?N^*i@1nqs|4um0ln4;)mk0>
z9<`E9nvK$(%_zfX7;J$e@S=!}zM`re8Cu}Fn*}<%1%@s4r(+3@Emj6(rQe#^7*KVS
zPLLee+P{R|)+PQtsN*9^7BLl_L>v*AQN>!6k|9+^gA5UM9YhJLl`86S74-@*n?#tc
z7nq$2F&kI0kyFxs`)s!uu$3Fx<>f^&5E($0XL&CqvFTKD3f0PCDnOt=T0?hy4STI$
zrYU@ACdaYVcpGM__ah9K7~B}-iV;^=sai!<r*4Nhxtq9gWeSZ3f!q@2m*z0LFopU|
z%qKoaax~<3D66!lWE^ohcFejOG!L@B=o?T#vl~49fhQGUVmYLtAi&IggqNPaiJLbs
zB8sWIAf<jk^u`-l?|l)~YSZKQ1hkxXO>Mu)rbtrKnCI~ZkrWj4qNXb;BtFdTgNbu>
zUZzXuT(z)t8@9<;Hm8CM3DjnV6gfqXMTK=*Q9O-)e+}FH=do0KH-eytYnN}}<f%iL
zUT9$JCTZ~weBiESPA2`7&G4?AqsN$>N5sf7Pb=76ALGb9b#z;WHbYnx>Q%S%GQFgz
ztfDC<9R^y!C@Sl%0sXxKgRV^3qF18VpuzyrlWw508>cA0hNMweeO{78+`~%(>Sp~I
zs__!j0tFL^!~@a}k<3HfrAaUy(?Sqck;FAr3Dn{WrYpcwQpLhbgnAr>Remfjy|>SH
z%K{spibZ7{1w^_MDbAxuP*BO7IF?`<&Dty)$!XC1g?@S+z0ozivinI?!V0F7JFt*E
zjM?fvh$<@>7h{aF7P5eh!YJ*FP!wZsVd-|(ar0UO^{E+2S68U;Foo&mij2I|>T24T
z=!P#m1|*$b>QT9VM(XB0xQeM0k%+^GwlpQp9P^76Y+Uc)<rmK&tPI#TNFEX5dh1gN
zSiD@7NGg(^O)-8<a_crwfD0YJ#utw{dKjrB|42s#0U6CL@EwNrPDX3F5{jm;I(UcE
zZ|2)5YGda|`I%)RlqybRtM_HhCU4=#r{g`m_~KQ(`#twFsEqq2C-i*T+&^4q4#iGf
z_u1kV9ppl{SK<mbZ;Wv2AuZPUwJGJyXwirp0jHNFe5GyFE3mf)^!9*ZM_h2r0;#ru
z@s9^o+IF)RUdVIP3Pi4GlozOki*lZZGB<(+GF%~*A`E?YR56Xi7?m(VHA+y4DyT*k
zGzi#|2#YiIaN(`ZJiZ*FLdKtLC3*X7w;-??P>2>x1g9}q-?=@A*mXXg#>k5?^EzQ%
z#Z-I`8r8dyX8RbXH_;hi!+!gdh&we*CwF4L{vevkDa7F+q{Rr-&PC26bkS4cftne6
zy%sv{HLPB3pjMwjbAAqsEAv=bXku=eR$k)bsPIrA9nd1I1h}Q9UctfIr^;%ZxTo?+
zaf$?3fDD9<9COPN2Hg?9`ov2lXy(WwLyCGlht>9H(93V2R$J0mEL#56ay^Vg1~l#q
zB@@XiUB)`zFvuxYr)VHJI1NnZO-nSwR@NTwDcBMs5O!y*QP3^}7?@cRLF67GordfT
zOW-S3AvEr<m#$-X_#75%@1SmCtlzkbYu8tB$B_lBUn387Zr|26DpxWVup=;~x5(2_
zl;%@cMsCtA3Lg5rxk{6t$ooxfm)O*^0>pK&@gwazMcv(fBK(1VtKf8#sY{KRjU{k$
z69qXj&EqyLsis&>Nk%QZDyy1YQA<0uwMx3q(X{l`azRJOQ?f<AMr*VHC*+eC(f62v
ztrka^PZF#gP7ppki{J_sA*h{-yq|8L?G^+!+gP(C{)&-R{p2Jue>RC4Mm#r*QXo1N
zsc$h3??%0H7xKK1LArtc@fB?Dy@X0o!)$Ul=BxK(x_T0ga0MAvSJ7h$38f4{g-)Uo
zdczL7H`lR#vx-`+iMjbjtQ=mz{K^z&mL;`I$!dutBs%rnfJ}LLC*^RIJ-5uri~-{H
z$zSc*eIfdrAwK_wbJ*U$f|yd!JVg>W(I4H!R`*F%sli>PDZ;B+!60F7jSB_VLdDUV
z{7g|>M4-oMV_5*89brj?mv&kcg58V3gRfb!EYA?;WQQYyu{aC^;x6U$5I`efr|5**
z10>B&Dot!t)K<L<D5&VLi&tK{fWwDpF|!z8Z&TVk=mFw9Yy0E3n`=t%bg|Mzo>H-*
z0M>4VXtl>!I#$DYnDKpB!#F6=-UfQR1#8SCk(1Yu#l@RTsy=ZRn_97f(oC<0q1>hh
zw04_AMUB|l`B?0sII7l^o&Mw3<pM#>{4hmn1ZtH~K`kPxCBkei!m$$}aEw|PB2)-{
zC4j$ewp$k1EQMnUfmQiPY)aw1mGs%~j8?!g51Anzt;k2nDHP!7sE&Ga0=3F9WJL!f
z0=e`WwpuT83NRDjiTUbVFjKo5alFXS+s`}5iY^Lr9gXM&9iTVdL-)oi)^0Y?s7+&f
zZXWZ?bC_G6#?)*L(L%_Bhbb~h2c&T-b5qX(#0gP{d4Rb^;6vXLV((^%pZ~X4abxu&
zf~e1+Mqor~;+4JMKtPThF}-)YU?`<g%^H1I5M$7{-#LmaWgqh5+8V{_v)rT+V7YIe
zMyiZSRM1>RA+=ADK90bXE;s_V((!{UrFz_jvx|vq8{Ncq?<p+S-_QE4_Wn)0^xP62
zdB-UX`Wb_cRfx4FS^o<F0AnjjL_t&lL(b#cm&!M|q1L7>q@K&TLX+tubgm7tyWPdY
zp&Hsd1v)zcf2XLL3L++}agHyXE~=}C69ii-Dw;hLR`?@g>=WeleL{a&W{9+CNmwVT
zrU07&9P^><$RYe1gBo#cVJy*FOrTc5bS=h-<rs?#RQcjrdeq&J7F7Pdjka4B*m%>1
zXtB0di)$|SQ>Uh+qdXRrj6Dd{Bz@t?fpl@wNK8a^&ZFlD<m#0>kQGCWvR!n>YuIc3
zD#CVzspJ?IYH!6{^&V6zD++QwkXa^iaUuJijnNsl&|Y1`+G-6+(!|X40u~P~U}0qz
z&G|Z}W`%sF)-J04@dzd|J!R5bi0cy%0q^;6gv(C>KljhB;L??ID55s<bi`L3O>4il
z^D7wU+eqq5dT}a%aFe@q8Ca9M@NLrUE;5fwE>0g3wXsHyI7;f}IXGR5xgr}}W5Qfa
zR9<O#izoO{u8o`~Vm6x$Wuz~sp)yuZGiI_GO6IWJe-_i#2N8qZeW{Re7PWdEcb`6t
zaZ3E9^h}cWi`!mxSg`F04Th;qg{W3TnJZcV{eBxedwba2eF6J>58>*WMQmS}2#^do
zIXc#{cJi#R5>WFvL!t+0<LJy2X6p%90HQ!$zv}BOWYpWs@V4xnpz0<)A6rCmYn%aF
zz+fh6sCeTMpwVX(2N4oZK?&R<9G!`AVu=<rsy1hNHX6}t)}xWjxQ(`38rTRH=%S@?
zolX{Vv53^eo?Uf0g&~ed=UD3HND&)f%qF~~IG#g1sm4X9p%ETKy>bjWfmgc2Qi{FS
zCmASbD#x){e=BC|51<hrLYigV(lth(9csf0314%J^8vPZ$vf*hs^=SM&dgzUehxG9
z6xG#HYbFe6Q!~KgVPJj*SUN0K$bb7!d-&~7zJh*!4H={<nxf8Xw1ADym$5fEi)w9&
zFAhnetnu7B3MyVyCJ`-rLTjazKu((BwFQbxhGsjYFy*E)m2wI>R(gybmu8WhMp7EN
zNxDmm2R%1Ye>}h335V$!E0rl^X%E}ICvbH78<CQYPO*)%FF%bee*`D*If_9GNJkl8
zy3*Jn3OSmiP_0rU7cd-+vA4U8&7C#u?XP3dC)33-y2A}r>ko>(d}>!j>Gkafqj-8f
zwT;So0JV3vmA-wRd#+#AwqlUK8K=r(njBF~nlu_tEwr3~nNHdbHCp4(hEmWF)yN{Y
z3XaWGaL1g0BY#|ZiflBdPsDP7+h)6kfsNIZyh=q;l7~SYl9Yi?9PX{sMr_Jk4BUh#
zqM!74KAk9%qqUo!N<e}Dgj!g*Vii_VO^zU`EFv!kNb?p3=_W3=e*<CbH!&3-#bS-B
ztEa<8bch{b$N31OtdBexA&AK|bBvTG4(zqCwRs%@s;D=~5qJ*M)6@ZxpfR1GS`E<e
zjd9^z8#`O82$D67i+yAxYP%u5+6sEZOIUAz0ZDa%iy{&U#U8gNphn|}q<xA6o?JNa
zfKD`KG)YSOMRmH1caic1Du#0yr_xJne{rIJ=eD8J5bZ)Bu8o~^oiCeo9#FI?v_FBI
zR7mObsMZ$I?w-T`=nl*zr!h`Dh@vf=JM$FwcU!pYuH%?pZm@$a3ta~^`DuiHyN`|a
z7It=b*>Sly*kVe7OiIO5uBLohz*Say52iB{F3u)>Nwj6=q%OVmMA8oYj7jr4N&LS!
zfOn<ZvLed!2_kYZCMtl=ElGE+Xh6|f%q?y)5>7!QBw>W9IL3+T3XV64iBnx64F(;I
zkdNtHb;ew`&34NIo1TCkty`vI6jiYYSvKYfAjpQuII<9sqra0xT_UuY(^3X9F2fON
zE<f{x5LyrEykTOVO7BOQlcQlZqiheu@j9+_KNE(X-$yl?Wg>j3`VgAcqg;s`XDPRK
zWf(FqSMUf2>ILjzw6%k+4Vzpp=^Kx5sH6xg9gIh9a&G`l_99RljBnyv`_~XBQwV9`
zG2^sUIsKkc65Mh$rW!Tj)F}PY)RcKJx(`(;=)w-kPoMH}neyc-w*q1mDajIIL#y>?
zcTJlYn~b!gQUWa~BJZF~i6kBZYT^naX(;UrgB?wquQsvX{ykJ?>!^l@k>&%$@gCMU
zUc%PKO-wbXQJ<<a7!7+p^apK>(k@2q`Z}QA5*4$Wf15aTQcA}hTsC>)n2U=9sU^EF
zh2V1P*rc{lzk787n?))?YuQyY0dhKNiZXo`ToZ^zLIK#sshH#)1Z<)3Yf><XF;|Om
z$4r9dhRh+Qs%p+--*ccdK$cRX9}IKpce`!2TNc<PjHkD!XB(}|M1+uIs`5>hN`kmj
zWB1)rO3@b8@ijWj$#sHGdQo@t5MYiZ#Ku*M4K!ko9DM09dJ*cpZUU5QxPof3OjXi6
zP1{^yT^)QCtKG+WAn{D~4$Rdb!gO*s;%JGZu71|WFzccS25i;D@(Jc=WNHwdo#T`&
zhzN{_%m+5&Mf66OaDD%G5yln73H5^V2z2L%CTXa281Sr60y9`elu}XRY|7y+RDf{9
zTXd+5O!JcN1KCt)Drzh@O3=4f*Sje~(0~LT!RIx>OLbaO&%o<ym;O<SjN@dQL7X&s
zcg%h}>d`R_vlfqrE6~PnE5z<TMV3@;r2#;!C1%Qjo`WPH1l}>~yr1J@2kqf`bOx7@
zjy{TtjW+bqNgR2lYeXX}Ge1`+_M+@8F%g`j&&syA66_5G&6=tlo5wN}lJW2>(W2r-
zaty$dhH|kWj4@NIVqvO+g(O6sc3z)W1~3P*7>-Fm9EMqeURJ!RW4mQG(O*R+XKR|F
zTrBeCridHF!>EcZt8)ZLcF0*cX0DB*H7+24l=yUBQ&EB1Z|DLNGMAP}kxS9pBwv!W
zh`^HeB#vh=70qC(dWvNvqqG%n4=?BIz315&aJqU73)TBDLvoU6g$eg@F+y4lX_63k
zKoIa|IdM!8DyX9ouW*vQ-TMO8x{sq0&mykP^ZrUNr&S$e8d2=hP#(;pG7l>v(8c7M
z-#JaC$j-#HrK<;zC}fG6wPOnCS>@4H7WfY4|8Mr#3<J*5!_rWS+GK<;J*`wmMfjhp
zU!2hRNo^UU!49tN{TdE8KZ0iUZlpyYX+{ku=7cM)S(ILrIGbLH1UVG3rQ=<6$7j(Q
z-M}#0LYnW2PHh~bVsBAS9JjgDQ*INu@ljhNE-EH)Rn!MYeS(Q}^+0qdHyfX(F|S5u
z^kB{|v<O3>HdRS5->6}}UO}CBL<VsA42+>n>HN-O1vX%u<^3$D5bpLN+HTp1jW#OS
z6HgISgScJfOj>xY+QggCtVSZUV=AB5k&zaRKqV6($#UU)1h_cPXWlI$;9~;|;^ZWP
zW6v)=#W>kfE{-ar9PM$+F@<_Go!62h9EFV27JAth_S(O}d))}<(X8Bo>B=cgCC5>Z
z7cdpgA|)wGE|DDZd7a@IZ1%p)RzKD1VZ@cDM4MVob5T*LTl2iu#4Q)TORiU7An=pw
zr48LJ<r_|@>$QZHnl=OV$@{+gXVJ8k`xtW=WJ3ic0-{JxXG=5q<*3zHFbemv+W8IC
zhew%ntH*~Cp@9&@71HNJR6&YSx`zJf8hYbv7-svTSETnxTE)sNDnXM?F7rI5DOk>+
z!1aPSHxNHYEl2;!@sXcJVN&vF?)38I9ejf^lv;q%$;tFkiq<Hj;NdyizQFJwMyOY+
zm`Q4wu2xWwg#l*eu^X~2E(;>vjO1$^Vl<-O=VE-Y$^Ta0Zed_6ilPv|<Ctbsvi${J
zAU2!3R2j+nDX9U8L&HLZs&QOpA2YK3VSvkI#;M3d1jIOU<5X05H@dJRmy*hD0&WD3
z%F}UcmwYFXsU}OP1<N2ih?IaX+rv(J0h_~Tg<lEkNP;<;%wFUe5_gwxapwaSEgIFk
znKL9gi3vJof{cN=Kg&QgY826!iwEo1oW_k(9s#z}S<#!b>g;)>EliG`*Z)XCt|V;E
zXi>)5QGKzT3?{V)GAdB+j{(dU1c|dG)zvXnA;}kbDl@9pdBkxI!_g+z`j=UXlY}$u
z{7c*>@s$+i(ifK-qbjGeGz6NCi4%g5zhp$Ro0wXFH8?F>$9#tm+r+R_{DMgUE+qgr
zMb)b;cv-C%!BU-y(@keZmFFU-p(c15!zZaYeGYU-YHDvLHExxvL=?$MWk#mI%ZpL^
zDaTkeCk02i5sG1ulVoU|r_`~G+iAOHflXIkn*OTYJR$+$mLAcAm-nL!GZGi?kZrEj
zb3s8N(lj;CMw$+e5O8`*x+}UUxff4?iy}AyE+6cOJ7O?o@<W^%DDrZ=TtNUxr13PT
zl#S{Mj`GrsytrE2!Zj#%`2KXlC&^LNqlV7^q%Bi$QgdwP<}4K@#zuNVnMVujAw7;N
zp#ey<W>(-<V2IgWms_i}>%fMWaQ5xRU8T^2k$@qM;i(Xrmp6`(+uA6_F5G_7XCk0R
zuTO|5m#0~O6IUr0G5t-rEGpJeRg;{Lk08&DZ=}jFag)+>8ih0BXJ&(A+@~#{k-RsN
zw9p7UuIgGqsT^1o<aths_rwInvcI>C%hbMI=rYMG4|wuXr$U$)A%W;<NIrhVsqq6?
z>PKy;v;YsN)hn!Fsy2;Ur6Sc&(zkhFXb#Ro+iA2$B^jFU%2w?m*okuxU_`^iCz{@F
z4}iO6fsM9;ib)>9!2vu^St1~z3sp(#C<19)M`KDUiKq^F^|V=;bjI_PChE&88VqdA
z!*QCbT?=$!=|#iom{n1^^+-UEPqDC!*a%1r3?;?2bl0NF3X*u1fsTEHD4pfk$=!ud
zDVL?4zMHQCnpT1dv_#So1T_LVvBcruHCkhB6!nfqh$`yER_H`smO7}Y${Y1}K-|R#
zirv>-s3UDlCihUuuEsY6IP$)U1`zF=VuE^bxVTV7yaKLtJOu!0<LELbj!-bPJf0No
z$^ER+TpB{@aSC=Eu~m>%Di|85u|V7N26ow|StE%i$O2V=Q=cgpsTv)ZR12(LA8|Bx
z=xB(A#VWFKgkhgRo8T28by`sIfF9he&!Smxa@C!UowUEziV3B2vmPzhaZ{VS*ddKF
za@i#=ISNN9iO!?f9^icoZ?`P4$+~7!FJ%)BL>&_J^e449@em6u3GTdW5&L^XT));q
zdvD02+Gy~Huyta0!%<CKXTfitPjPxmQ5?B3P*sx$n{f1?+!{wxT69p^2uCIgb{yTg
zqC;AOnx<y17~uvC5Lk&aUs5*teIk<Jv%l;!R2L5dw~%{3DIJB$I_S0vVv~B142C9B
z2@r6U#o>ZZ95<D`420H;inAw8@3l>oj<2*`+iXqQN6`ryxY05q;#_$z7Rj-$jjR*N
zda8_~7_@B0D^US-jJ)Yz?q};1)oJxkSges0M?Esao&~V%EoZ5r?6U#5@O^5sscEK}
z_xh$Mj+66_5iOq8MvmQ$5U;%Q9L9MYdG>DXZbg`19^>foDr@@s`#Cb2`B2TUwK_z#
zqPj!fKdWlkL^96&ZC<Ixp;QemfKf*CSIML(;)rc9=FeerEd6b;-Lk+2^{iKE)Wp<n
zn^{1@%ye8}@o<9g`uJTKjb&g7rHEHA?&76qx3PM?$GV`TN?uuX5$jM5HhI*xmZHw-
z5T!*arA7s%M?~;j#{$Jzq>t0c&2dQtauTU<ip0E|MtzP4l-rnuRv;8Ht3`F12-*ef
zO<cGBP6jfyAmUV%A~uqzaBrw}0jS1}MY{%y8ey^4qb%o16l}8&q(Pj<*ohiM<WdtB
zMtU_)Sf1;|DyewN{@cXr63o(&RP^#ValO!<^HK^sG2GJxuQq7LC<P<zC&_z?-lGb&
zl9@Q$OGQg2&WU#IO(luEaS|rmVR59LMpLBit54+^_5-|f?kt{u`F};4rdZv026vzQ
zFnXN_(A!IK;&hJrBQZC>Z*NApczKugY_c1+5P1E$I*7Rx%8B%rzDUqP{jDj18_nj}
zEAn<{h+&ZqwcqQu*=}iIbE_HSKxt%ef=jyS)A0!RKRA!Upn~1)F^@y5Br)zjeF*nI
zxQw-%Z9M<%7B0WiLa&=5sZg5g8Ut0%L?Bl~fhuC2ghX=&sMydKOE7k=D7A1Fp)trA
zFK2&O(XX7yl)h4$CXot@fH~^3`632@V%2M{ODqszlHB?YN#a3~8v&X`Y|hDJLgGQq
z)@D;=%2A&MHwRp@YEpA+E*h|{qXL^zIg;)>-Gg0N9>*@-n7aR*N=qt68SsRTRba?X
zQkM<}i)MW@PT@CoCaXIKRH@;9k+($EU#gfBkc&c%U!O@bwUFW)%3(0#I8tD5zlXWm
z2y=@yban~g<lG_~CjvoA11nYP#wc*{+#a4e^OOAgQ}re6?p?=|&-`l~UcL)=9{n2Z
zY~O>q*$Ns{H4KJZxVg59TD8H8BFEyM2fXRtWHP)Rxxz)wSr{<KmQt(WC<OWey2A`<
zk@XA7>~EXx76vw6_Wk*~ys_;UTj|K}aT1|9RmW%uRO@mfk_FD*PRb|z^vo<i{Ksa|
zes3RV&urt&i#yoa7_h#mS|cDZlSMJWmo%)w(NUh)c*+ntZcxf9P4&hBc?AYGg(T1;
zOC?QN-CkP}!T^zgNb8HL(AW3tNieKGQ?zW9YRW8w3Ypkwv%7*B6X+)Q5ck~jV)BGn
zj{P#rowB*8>@cu@%<V$KUuMwgd$zR7KuY$pbjYB{jS2~VP(onJaO0v#(Gn_;X1mFp
znt;7m^Dg@{9q}#|<BZ#usE?Sc+;S{!(5u?yxwbHROtqF{^~Ml;TLbj>>sUC{$IL>4
zXh?jSc)HO>{i$)1;nJBD&%E?+(d+e4OUOKu7RD)#Qa87*U~~H?aA@IPEYH7{E!|tY
zH!xRU(T)SvL0hosnGe`v!{i0YhbUTOaFcX2V_T*ONGtq3N8aPHh_}&p%L1F6+LR=j
z5u&=O>dNh+8ydnvLN_mk;>sMmr55P*Qgqrh2eOJsA3Kh>KXwRLFYV)nXLoS(S`TTz
zKvmOJ(!+7*3M=)cGD%z<MRDXBBSi-i{))k+L^T=m(D*iWOeL=}<&T(GQfY}*TxI{w
zzS=?{H>9teFQ7b|Yijqbh(zL1&JJbQ4{C%rLrIs`mQjNZaB=emytW``!#ye3QeZHp
z6;(v7ny157IVGi5F-!f_e%6^c+PnvfqUgSXliWymLAh*6x-Q4fQba3U*p7(<t)%E&
zzzJzFQADB{4#v*u+ooBj^w(-F!`k&6*Dhbe3$OeeoH+VU+@F0NT06khJg~S@6~Cmg
zK(&_Q!t*&^IP+WB+<6&|+5&s@iPS_Ywe{K@n=G{U*U)dbPzh^TSvZMGY~3y%H>_0(
z^AWUkT;hC9K`EW4pUHo-2r(vL8&;5xiAxMqJ^62&?Un^LHx1lxbt$hj(hh}e{j60#
zi6qKYN&t?85|m<4T9IRaN2YM!amNx)-L-(7oi5J2yoXoL?4z?s)66MVkqeWH2z)UL
z_Z7!6qC7zn3ExIM9D^LSWVvF4b~+$K#3`pX+*^aVUAX*K{79_~nS}oe%JPY|Q*l&g
z-fQwjTD2(B=uKxGSVS{HxVu*py@!EWd25;YS#-k~$Z~i|jjhgD6e70Ky_NZ*3Y2m$
zb?EgpZ-x5{MRqJDVY!UFc3B}cTXA1YX5pNR5RHR$ZDujgjg^l{&j)Lh;!0(JI7zW~
zCC8;pFXQPmKY`(}jpxtY!0N`!c<X)Nh}pgS(B2y2*eRen3#^{2;^i}6#+4giKqDdN
zVyb}G^tsLOls*$`>zhX<tYfM+hk9+Ehwo59i;uHgw90IrzticUj=x37<td#zAu5kF
zr*4V>qb~CPkYq;rfM-A7M%yh5Y`RX9?P__8FgTKr7CFt&(AFRU4EpTN`Bk674VknW
zE1g{JmRMQT>Qnf@2d44ZyH;@i{4UNsw~d?E`V5k_nzY3*7iaPZZphJD0;r-AlP&d_
zzqr`I!*Mk&Wxh?)O_#dzt7@9+aeNct=JPQcomkpwoSK20wN#0=jpiX705m7wD*eez
zK(kgVZGyMC2R2MvN$)~jBV`DCxn~?D6>Q8X3riSKd%A=r<v1_HD2c8lvZ6f{4Iv#D
z1HiJ7;16!~4~yyXN?4WSQ_<p*bfj>@zZ76OYESB8+&mxQ!iDGY^x034gaY+sp6}Cc
zui*<%egbzKc?c&CeHh)Hqo~zFtZqMrGZ%gxNjxWMKNoA{?4$qb(-*Csc&yPNmZ>_m
z!r3`jT4-@}MxK1M?=r?r(q!kHBKP4Gl)#OQ9CE7k2WWRvbh|VrtDF&ZyKJ{Gu+b*o
z%{I`MZ}E6+S9#(qR0T_VQTUgZyL1ZA=`;v18symS=7=jX?z{Ie?tfqztJhjwY`A*4
zgHAU`QVltZlXe%sKu^yhMu9wsp&-JT_&AE<M#wpuGhLkO;k+cobXr>XE8lUMbn!)M
z(Sb-lgi{kxv*}dS5Km4ZBzf>#o~(FaK5Au)k>IL=sYW&gTdpw3FRzjbwv{OLb&|$v
zrB7xNJ27=oknGSL*^DcrM^W@jtBUl2N*bveH3oif^)f-Qi(Jb=&~zNLf)*Yz6d+w8
z-H+^`22~&%sOxf092rfb8sqxQA<mxvDxQ7iClD45E;ev`9F=6qiWecS-FylgJ1<~m
z{t-s+joq`TL{n@(B;ZNMT_kbRLKT;w7FE%lA~VpkyF<Xri-cW2u72`zfEeK18KK1k
zDqLhmfN>h3PxejZQ-^HyX2f>uY|2WB`=ByZ4!qd4fpu6KG<XkWfo5q`FSmI#y6Bt4
z`<_lPa$Mctl_+j;aUS3Jv3a!HeY|pR8!x}KhwY6a545H6Y8=3r5u-{HIAx<B)!dPz
z$4H_!0XvE0Sm&m_m}c=aAyJyh9KDE*fXxgfEiKh9gn-(#s9?bAc1a6MFC7zrmcx=Y
zq12b~c%YKgE>ouo$%OdZu|{62dU8q9YnnWRE>GgyNC#r%zi8ab@96=ffl_v2Y#yiF
zmRj@LEvS%YeeL|9<c+{d1laV|m<=!*1{{4>8)O|m!p*ZW&R_Z}o;~*y+(S$)S=<f5
zDZOh`K%+{|EIHP;&N5e7tIRubbjfLIGrJlmPy|+u$!l+ci#L9n?;lXntZ6i?e-cTO
ztQ{1k5#~!e%216ok1@_-WO;@8wo#U~aGPznY{aH(edd~fIm(dA8b?kcHyxF!oZXH2
zY~sqws?>NauCTP($~wVpk##fM;{g3ZhJFvIBvriq?Z@%(+YaOEm3_SU{4Q=@?O-sV
zUPn^PlRdfiLQ4Okr-PE=9c0eNGaI-7LgHWH=1lBsmAo=#)JVw;64i!VCUl8!KKFyN
z5Vyu(EDN#1fCpyQ;9f$PH}KejpR`1YSDk-fUt6XTp4Y5h))*}966u9Zbt2=<*uj>w
zG19g)fjcXrsGiU!IYn_U*5@>Biy}#@8cUlTyVB;=#wKA8CBMT#A6G68aqok5RB8ne
zacS+0aOwFNS8sj^FTV2gs6?~e;UH-=>HpNDPTvFlM+T4yb!>3K#yUT!V57zY+=nZG
zM*mUz*{BPsnUthl>{LwdEx4|5piT7xY!cndd@HSrDhHWTMKq=8GD4n{?eOij-Lk-@
zbTP9M?wXbAsI&(0opj`gh4e%gQ#hYxc<JTq7!6V!IXZ_!hh|YtVx%c?ViMuWX>DY;
zMI5SQjY<8TV|SP21i-Oli#T=HBKG#F*sz0hFYlqXn{rdLi9IQbJIE}RnlR$`i0J2g
zmYO$C@}!fY<l0J-*my2c)>G6FYi9uoam&VcyPx(=mGS9>tA|`j79ClN#6hbBt|ix{
zSE%X7q?1XV9L<?lBSATmT1DnZiHipfPnMaZ+KT2(EOn%vEdV?dl{zItZYGycL_c13
zaZ#Yx{Z50P9zz0|D!b}lxp)RM@p}*@BMdtc)-G3Z{`zNd_VO>F8WEqS_Ufh&RKAXn
zhd+$QTG%v7b~J#^E#O%N#I2IM2(`26{&G92z5jB)mSz8rz|fx!-ief?Y0JU{$mC@P
zwJhMas{RldWHgML!`$0yyJdk*Hk%j3D<IdAG!L~b&|{=T^jfJzIDcUi=gzINw&?oJ
z9n8&4;rNMp96LIPX0yiW3Po}HK&S0;dMT@@lEA0{x*d^>)a!M;|9yAhUGF}Oix>9r
z;<LNBd2PU*4Yj&NRg;bq+{0g50`U{G`#lK|cm$t;iB(kn!UEsdHN#V6RbH6l^sN`D
z$vAAY6x2y1y!WQunDs7-<ib;WXy2ln{%-x5?m2BK5a6}K4d0hIHtoWYzu7oWdLH?F
zga?eoFq4)cj`X;6p~u47$gE}~MFom<I4#U7?4QTIwMC93nZYy9{3fETfl7J;$UC^U
z{W#8D`4VcCMQ(W#8z?oQbB-xq^;lg|<h4co%i2JWj$;{-7gu#CHMO&qty*@RozL3@
zCt}hXGZ}Dy(8x^|2T4uE(4Jm3%_EG)F*^MaeVT<4h`;fxU*Oi=Zed`Pl!?R@Oq^Qq
zL*v-^2Lq&FvM>+>z2S(pZPc?z&(rM=@X`x6aPj;)4j-MxohOzsH`ipCq$x>4=6ZRX
zy%x6~%akelX*kT$@8_sg0-U~k8TUW1h>gt-UU+5~7tXcN@6g{O#1-?~C!q6OA{18m
zyZc?gt7C>m7VeMM=V-G*O~7kIj2)=iyij%V@JL1D*z961H=C{L6&oh_KGVuebR$uj
zNjJ*W+uS##*OcisZ5`tXPHlZ8A~Gt$4{3x)dkw!c$J0sgt;joQ{JPv<+T5xb4^w>Z
z%Rk8r&uBbEJ`T~SEXgDJIm#%^QhS%KJJU>CAPLk6$m*!XGBZNF)wCi{;Wb&TYh-L)
zW;_^83&e6{wS8aL2s>IFt!V*<mjf;+P^1<(=CHzTRW%ILj4X@jc#%K)ZMEHkz*eqG
zK@b(B>d(2SN>enisk$5$XM>96EUVWmEX?Fq(~P*7fM-w=Kwi1LiECH4vAjHk<994#
zd1)F+wIVzm)!bRXb<p|2QVs%6s$3P=-X`y~0L|$pKKhL_c<<K?aQ3A=y!8AYw$?M$
zYDDOpi<v%)lX7?s+v?9>LY|K-c7acR7aqtgW9>qHm27R|dE|H*S61q4iMyg>WmQr~
zX==1&wOrQ;p;4I6wMn{27dcb;oKkWBDhZqwh#l9&CbbrkN(5e}(N=Y3vvQtAUpCFl
zv0<W~B3stN5g?FmjKF6R>9EV*Zq<bB!;R`UR}C}aWY<z{TMNAimgGGNqPQkKxm>7`
zzv{6ezYTp4au7sIsTC6Ki6xz19v0S)t3zd!O?1b;bS=&&s-j|}kmeD_S%P7dVnn<w
z(mrmp?G^;KatqmAO(HgHdkS<Mq`Q+z7kFM{hT$N?i4*g<aA_NZ-WWA=_s~h>6vc5#
zf4znE^?l6DRB`P15{@68N4-w-6LO>~>M}=&($un~%?RM=mR>hUr=6izkMYPOhw=8u
zmT~4x3!nY;7RaVv{K!h@2#XYC(?rdMScXmp1D@A4r=Ip$ZLZcPYe~xkTJ(8LW=X3Z
zhz`BVs95{hg(~E{G_MP|NwiG)qxYE7ZB4(*NR0_lmfXlbl|p0xomy*_Q<}JaAh;n8
z-CjwS1myum93k(SxJAy)q_Du=A}p&RKeTBDW33>ocvy)AC#n^0QCih_tRn%MPLHD3
z;P*Wt9wRgQve@7)6dKb@|0lmKmYZ<1tc^)^z0H!gi;~g%bO<u@JR<9(02%c^7ZHDr
z@{COxiu_Gry9GA4wo@b1P`nTMR1?=}$-(3<=5fWpNJN*W1>#DA4}It^y!gT@)^6-0
z%?gg#sL5HH->H*8_>^9EgflPSz?DlIIDB*-$B!;zW_F5CKyq_%T#81DzJ`wbN;w-O
zsR6LDHbznn@ZR^&V{s|LFZ|REX)v-;BEqFelwzJd9#2>zPzh+xzT5F>25ff0y2sHK
z$!4&Ys(by{PPidW*xplEmxc3(D?bBy+hx_(@oP?CT3RhhgrupoPd9mBDn$d2vhxz-
zf?aLPPt(*o4(HW>O$5nQS*B=>cuCLNh&_Ev&p6*=$qXxrGb7{CSO;+PED1f<IzXBN
zP6k#1ROx{$<7kglD?@SjSCb|=0j?9q$RlkCB>%3*Kujhza-?)Uk2q=@jx~Y~@n$M|
zt88lhLy}9ea@MZmg9)1u@{%Trr4TS4k+8Og_rLdU?6*6(aGnIWd+7DYEViZDk8%o&
zWpx~rAhN*4i<`K5c^6A7O`N!65sOPrCXOjh<>}%aj3_*KAji8HkVHgUW6nH3#$ESL
z;gLrd@YTn+QLXcIEd?}N?N#G1%)j?U@=rOWSO>5e5^-MV{morqa&=pE&OMd08ZsC$
z8HhAQ*~Mk4y_igvq^0<VdC`UH2#x)+=XdzyacDN%Q(jZWz&hX4eTcR~IHWal!DYL`
z`72Nnr<MmpHRu#wp=}aXS(IjbBb8U~&Y;S)ikpR}EO$Z|h!R{mAC}L^AiFFsStP9I
zk*hxYbgCXx&KAn!uZ@3J-RDPS<ie}bFxQX^s*F;Ngt8U3?R*p1Zk>&l>14vpzH1?A
zCA8aFxV4E>O_xVGgXpeg-P~?vs8*VI<gHEIdwPJY*LHB_@)q{@hwSb_f?GPJcu@?2
zYC`QfIo8+qIZd6Nso}`+1spv*k9v*l#kG*(wZ!n|6&)yIAWCrUW`_IjpTcub@0Mq~
z7wx%}W`Y<qknk=X&!<tAe!ckI6{G_NCU(V3ms|$yKgQ^}Qfp;R@D^F=7hi|GA8N-g
z*Rq9EWlwI&!<Bv<7U9WDdO)K4;`)F+>a>jXbQyEUPEueVH<(kWhjgII$n+BEt<ot%
zW}Uyv(irIh_M<{uD9c+&DJSVAw?IuC%knhy*ApxBlxL&b5h;bips30l;tJ$Y>YLRT
zK=Cx8G*pgzrVbxtcGacZ-b_Vrp^aThM|2MGj7Ci>T-wCta?vx<#<n=h4LN^#QgM%o
zcPqG+=H9!G;_g#RxUsf}OBZ*rv(rbA<w(f!l$9mal8n5njqvT(0J|?-$E8;`aOBuL
z?l?A&+1UohV|is?Q)~Gb6M$iW@vva`-fAPnuxFL910kM$cMcX_Q9=JkZLvl;m*Qf-
zw#hHbV8_qS6*~{W?4OAhz`H;ll=w0NIlc~PCV;s_XRBPwuhytu#?%M)a^n4o_nRMo
zTL%Xh9CQJ*XSVwY-N2K`m?F^DEK50^S%A!dD5Ek5eacN9SUlW2C>M)zYN*dImP22p
zFL#m+HJzF&BlRp+3@forz)nnL^zZZ`OJo;#sp&WuzBfnura<>r+0?#<r&Q^cPYOow
z?|$myhe94HZjJF2l@&R<JtCPy99dq%vBM;|?cmytUEH{_kKr&41>jVhMa@A`$X`@Y
zxO!y^H*Rd>_#N}O@APq+tgaD^cX~VGURr%pns-@=FrevEuA=D^Hm?RV17`!BgQ_KG
zr0o&!K4?rvgI@e(sgD<lFl|-(1Xv};iDJ3L={7&)^iw_e$kP7YFNS!j>%_eobjo+<
zqEpdhl#%Mh%L`=4T-6!2kK*AttnCxsSsC$`M56ShS_QP+5Bt}D50kgK<lVb}36_4k
zX)+s*)~I&kosz;uT5DA)&=sc>Ih-ug)#H$BI5^74WRmUX^*XqHwp+F;Dsu($F@0y@
zs%ND=$#s|wke+5#%4eIQkUJ1a&qhTwYG;y*r@(M1T-;1^8gGAi7Wba+;o9{bT)Vo5
zc5B2E1)7&&mj{6xO_rj^T)4P}daaIACsr`ZMDii$p&Bi^AdIv~W<#zQtm}IBE<HAG
zv)ddXDeq=LXzRY;qvJwF4*~pCb~1(XQ(ou)uRGy7m%Q{cGlM(3jX6f+n*6KQ0N#AZ
zgmZG1-#WXq+{H2_7Cz3~Q^yb*?S25-y@HAP)E$gC?f5%;CgBNlvYD4o10VXmSg??y
zf&JBoX7^U@7Xu^SWjQVuiRpPM4YdmPW_X@YjKcDcIWN9sS)?+QBF;&qG)To%K_`CS
zR@*HLY_#P;wx98=&WxBPLO4G4`NT8bmE+t>z{v6p&pmS;-F6=<D@`0fzJRGl9ph9g
zoph~{PZt5ts73A`Rh+*27*5`~g7x)1T)w=Eovj{U@!S_0=>#Q`n}!iKHuiDqPExh|
z#Qeb%->U%nB)O&=@)+;ZvFDPedb-G1F2LP9^xmDXwtvCtGfdoWtxE^8PrK&y;&O!#
zt$O-tGF5I3D$3w;B7Qosl|8!?$H9}hxb`9gGIhY1kf7*g&L+HG^i%?zJCFzb?8;-|
ziZjZS$;*p;L<%*GBOGtL>a9wF%IBGk(Ow-nEB7}^H)=$tf|x8I??|NwK-`_QP)$T~
zLL1ZLc;K^`H{>Ghjd<ZC5wbMM-d@`+4QvI*J9(ZVqoI)^CRND?+w}Q~j5|S-YK#k)
zcW~+A25Qw1J3B30xVVnPhv#wU9m|-TZ}Lf;QePD%rWIjL27Pjx4{_u$Y1)>sz0<<g
ztJ_##>tHa<xapmZdO3h1<3YW+9I)91s*!_TDZbKI(k$~TnqZ=B#9SGTigbgYha3Lo
zRh*>X=pG%uZhv+^n(RP;jDfMBOk2}3w|kZpNtwV)0sV<llb5wcWR_ydjUqu4FfI!O
z_Fk=}$k*&mK&2p&f~?rTJ86oG0w?l#Khg8vzZa2_6hu@aqVU&2$$sV2x3sdUReq(|
z=N>0h<8pzJA5GIIAP#S64Mlar5K1wjoL*4wt1Qsk6kkvQD#R!iC*}e)>HGHDZc$*<
zkGdG|Qn6s1QCo>PM#xESj#lchD><m>-9lh6kfAP=PExc*)yykbws7;t9#&RnaOa(i
zSUEJ!y@w>_U?V_<4)SOt+?t)9$sc`m2K~VR*RJj1%9TCzIwOqo5l$ao)<UE=Z)tLH
zz@&oTrC$tOas`w+S78p#jl<D(Wi(^yuKuDNl%|Lx%FWeH!bLj#)YJsPP8!w@6wtIh
zZY}pPz>CZblxae`L=Nt5x^G5ymk;*Jwl0b~(3<6^o0IS`5rpa0t-br?BwD^WGYtOY
zRnafa>^`WK#SGDt8D&@Q&_pfdK;-O4rUsj3@u2kM^PkNbDfkD}PGK3+p~pZT#b-_)
z<}yH9zWB5tX@_uZA-%UT^@;KW-;CI9sjWcX=T(g2bT4QqL1Yq4j31hwsqlm$RAm4y
znSs=6BE;O-Y+++_A9M2!oH((Bqeo^@tC6?7RG>Ib4FZhEIYy&`%?R(k=P>R%wS?6T
zvc)QJ^w2y<aZW_9X{3o+dD@+2d0N@?k;wr7&sC5Sss26eLMkhFjyUp)2j1n#^Ft@4
zBJxTc22CC#dM)RUBB6{-7_@5hYkdx7s%5FKrP(Dlrx&)NvrkfKBr0jS2cb&rm-n?^
zSScC$qxmLkkQ4oG8d0j0g00}BRZA8=*Cys2f6oHbhbBMeEMINnjkqIH%3Qop%|+nl
z<K+0TmpyX};+`vmtVOh|au4kpB~4pK%Mle1#%Wm2{<yuiTQp*mEeP@!aco)M=Lt+Q
zBF>FdQ^!Md@sks6FvxKH_$*#oY+!G@k6Jxq9h{u_>eE)_*xT)4d;1D5yi&*UJLYig
z*gU4D>MV*JQ=OevP0|<I>Cn)S5J#5CDV3r+0=1H?mVNU1GRaRwnxatv#~Wp&Wl@->
zJz-D|LnzZkw(HTBDR)rx+r*HQ1DB(df0P`T98Y_0iFl2JV*4ZyfD69x4t^Ha*k8Wf
z#5L@_2EPZ3NEHFyV&p`-D(~=8`4Sggp6<P?13ElMKa{DZofjg@5bVwhlDJMrbbMqi
zg4V`hU)Ee^(379BJ3ii&h*FSjAzHcUh&VUou9<-PN40ZRI0oxRP%*IDgG*5&6kxMq
z4#;l1s^~3khF)O2O_QO<d0!_4xjq&8hp+h34OX3LX?09veBf*D!d<5q`P8H6O4~{0
z?*%wbCB0g&H^fUXuHti_IfJL3K99Y<F7tHsCHo+S20Gyeqm*PJo?(3%Jvtnih%8I_
zhKr^2ALa`)Wes_kd`oG4OP0dg=2i42g}wS`|8c7PFM-lhWCcSiQV=-1b)f{uP%LsM
z-i&*f7M&i5g!p3DMA)y&20WNT8lB|zJ<mFCI@Uxj!{Z+H`IIU1pWoXtPc~!TbYiSq
z0{q0=;p03>8OWa{QgZraeT;t;{93INBNNXf+4O<?x%a3X8ozNVNb%S`ZVxM)<#SyS
z$LT2K(T^Ct*?Dj)Z8?TJ<lZnEcX+tU1cmMFDf|kboa2;6l2gN@?>LG3@9*L2)m>b@
zy2pbtgm+V}o6}V4IEYvpa`nm%Zd~8T^70(+ymKB)%QHwKax$d?hS?W6^2Ft2Wi8Os
zFuQ0<150^`nJl{9<<;DRJ(n8UV|b-kO_Ud@`1j?1ec-f6&?B+S^w(==A_;_sHOl)>
zL?n}lT0V^!YFdzHDVcFc(g9J*R%D@({ZQYx10d>hTNlk*8<}x!2F6}C%}?z`yl(N}
zSdC+2QZSZaHc3@X$Zh<T(*q|CoOn_h?~gYmv~-l2+$PTnYp8Y6WFAsYUs|UEa(7_<
zkNQ#h`KXnOWyZv_6(mFlx@kYmiZsuQ;hO^8TWKpW?ob>y81G}YZYwc+Y`GJS3x0gD
zNx!mPGUSxoY2}D2Ros8yG2C_c60YCa!{tl6*xT(gpiyJITsT71n}6Hp#y(3r$oYeL
zxMTCE))L|2G7^NAG><Ec`ke*d_3ADHFPAKPG7sE7LF((p?SRYA&Pw@&ySfkXPP$8C
z8o<{UA2RI+(;|aDRJ0v-RqGxHJ~uYm7+V%Z%)wY2$h~4{DX}X@C{Cty8Vyq$lQ<oC
z@7b>o+X8lQL750;Uo#3k_$Qw%EQ_`_CskUX_^#A9=N<EjkIEbX{9?gG`M`m?RV}0l
zqvwKkAlSKMyCx~99qW*Fb;GP17u<bwo6X+4)j75tgBDE`>WntyBW6ME$48|9Ny+>%
z#hgz<Y3)9Y3g*n(?F?}g;naykIC)|b*Kh9P;)PA@Z1*^IsS>~uO{*6#0UkX~r#-~;
z&tJoZi<=B?$B!;xdb-Y>R65qE#xw$wc9n88AB^00KPvDpin5_o-$9u+T0|#qAU^PD
zrA?(AGDjegA_7UKyj0E(i(2iL=_wDU@i5DXedgG-2hzI`Cx^h4C}vTd?K^{<Mbo?%
zmBXz4)R=25A_1W)px6x?2zVc|0iQg~Iry?1#L`aR*|$7CB@b4v1SP1tlc?<F7iG8~
zHS_CPVa3x2PDGIhDy>ee$F~qliA;%08d?sJVc#KDNA*cUil$?7_b6y88ZbyZbasuT
zkLC8-ZfRi4igvd^y4CJ)EEG9LlImnE(zO$h5{_O^xK*LV4@Mp&`;e%t*BNu7a`ez5
zH@5F=w{iLMHrCfW+*6vwl%}eIC5>>4NV^vD?1b~@HgM_UCd)+bI=PJbxh4+=5sPs%
zL-cb-y%;9Q9dogqwC-`&kfktoF?!LNjF=axhvA#F7kcS!A>|czy7pW*<apSwm647;
zkK=#{L_GzmhYb#HOW>F+Sy+sfk%He|@<7@>QOVUC9Tzp>mh176ei-N;Cb{jw*B4Cm
z2CI1YFMDwh9*+{#$}R{G%K6ym+_`WtMl3DgCj&#-ksvQv+~&XMvLBS+fXG^S1(D)7
z?E_IR5oq1)4ZHLq?~~vOx7l`!0-KydS<xMb$e!*DH@`kFMmZ1V&BtnCWOog)z1_!s
zAuzNdAzqu0pL*y(Cycn55MW_`mW8{WZWos>Z{gaNUG#b>DsjwKM&h&}7X^VHWhghV
z?_q6qAM^7K96wHSkvYZ@9uni1a+D07WU5|+w{mS_w3WhF{)>X513B)!kjQPaYUCTB
zseX-i%DtvPv1*c+lwrdM0!s(JC0|quj}25QIxN%8GCHDY(W1yn%3owLlgw86SADOp
zIAMTo3x#JxGFgr-r7#oexYz11akxD=bRuS(d*jWCu&3~jN%@XSiHQY$lb^7z7R0Nu
zCa}yhlo!yS%L0Rq<fB0tVMycmio8AECuQZ$tQg*Qz;+8)MJWX#->t##wMV-c<?TEP
zr}!_<6tT#7{=n5MyBLl}?505*#dR_SrEIA&^x!O&EUP2Zs%7YOQY4irJp7hB@!^l&
zkB8rW47Fy$gK9^qE6BSvl`5$e#qI9)@YK_n@!8LvL$^1O=6S!F+<2ISSY}|Q18JQ0
z%T@1;OH%*0iFpK*sj7RFJ(mmn><E@T+9b(T9t#6CNgqihFHX9XT0z}2JAVFo=S6e|
z#4bv8uTcVk_`7+UH+^5B^%hO+t38$1CE%r#4yxTyZR5VYDu8!y`NdDsCptY;S13ap
zT(#34M}woa$=y4;-hKQ^sR1)*qB+$F2;hWcD_ce6*q5I>TOfxu?tvYrDSD$l6hV3|
z$8hou-3Hq&3~aJx;ofJ)X&d{at9d<YsQg?9?oxIZ73j9c_|g}yqA?ZnRCkK9Xw!-s
zRTa4!<t}pNP6*)Wi~2{~?J<h9f_qLK!G}L|8t-}comgC%VuuBid9dh~(o}h79=+G7
zR<OU<#j`J5^MZ&{yy<2O9pt+vgq;@l9JnY;d0zR0iyF$!W0Ab3@)ErK8KQRo;#K{T
z2ck6Fi*n3+8BtA$fc?dzjE?O!42KMc-FtbBcX1#=_995HHA|mcLn!b5Zm5>Kuf50e
zV3q)GuQ&lhY*gxllz$I9{A?HFQea=^TRxA0m5zkg;oar4>H9Ol=ZM(`zr?6iYTUjz
z829u3sD~gNUL?uK?Y7;bsc5;S#l{QO;;wwN{Zg{fd^_SG<hCY_FnF#2%{4fGb|2&M
zD|pv?k79OyiY1NXF*|y&YlCcMqq)Nh1rTbzqEoip9djS(kwc3t+TGb{<NU=f+`Qhx
zASL6<7&K&#Bb%&1ts0}->ti&g$yhYtw!9b^*tCG_Wkp=Nm0hxei0+%u7uhcg1ab*+
zFrjMNa+ar%^d&(qe3e!-JqXa+@x*c9S94sqsrNl_Q_$5>)uJgo0I+{px-C<fCVkmT
z#A5>8Mp>1gkGID@fVjw8KQzDFz+TMWw;U4biFE@qyr-7^@)sI?b;D4b9jN<Mg1O#5
z5AwpgH*`lGkLOZpU1;o$IG&I`J{5VGV~t5$kRYj65f%|zqc%o)kB0GGm^?PO$94+?
zn|z4lVxwI|y-#hlpZ%7Ti{COxf<`<lNY*25Hxk~bs3jq;T-e9zwSC-m?<^jA>k+p2
zCP$CqfB;TXP>F=R3&I08+N@`^KM-I2W^)>ky<-~P`}$mHxORPyixpI5C4l3|OxJKq
zfu(*W&reRej*;e>4W4@5QAG+;-Z|?`DfPZ(WwI0$l<bU`O4$!(SX17nQJY0g3}X6T
z9nMJ~I=3=T3RmrEy{-s-oe3{FeJ*)FWki@CC<u7i@5MNJ+^ANlJtk$^tnbvKEdvDG
z7eAWSMa%JEF4}rEHTNn-n#VPoOvPr`9(2nkX*CrTUezCKG8ijl&|~~&c^$jwERN`%
z>cre6Y4A{>un+9_H}X+7L=p8~#BI3U!oWrw@eU)5ar6J(8P&dZv-46u*L;xY5b%fY
zkA2~2N(kzgpWngxb9=b+?m0a0&@z?}&2YcyXhg<rzME|c3O<MAE?_D&jB*V7Ige#~
z@PXqvea|v(uI+JS{NC;mJ!;`PHjP>>;kgM;3Bjoi73xVWOeAs%C|(TWqB8cfaM79h
zuUU5I@2eR`>a}5hZeFbCdEdT9+Nbwcr(rkQ(5dD9XwQrq-N!+9a|Q$!E!rlwp7N6)
zt(4Bc${p%K7w-+*cfGT`3!cfv$Im8V`yAq{K->dY>NQZ#QJov@4ZHMuGTHSW>uw@Y
zV|!B9pzbjZBAk{NqsUEVG|JJr&$xU?EZSk~w$iuGUdq-MvR+B5Q>aZB7`KXiqkAdN
zF~m6EI*Z$IyTyS`wn1^}i3rCpthK*%=XC8fHE}agk!y!sXL7Nyt}+Zzt5GHq;`|vJ
zWW0lwBMm(8&<al7wTMa*V>HaUNnQ&0>MHxH>X{eG(0ubON4G;Z<rUV$oxXP&TU#CM
z?Tv7FWtN9;2nVHrL;|!-%KNV#ZsHgx$BD7b!n^q7KJu@BQ91pZ=U6t8$r%A|=@=$c
zBa0^aW;G}=^1W<lvZ8~ER#iynj6OZi&IGmPAuGYuac`x^tmD3zqxVG3t^jMXmJO@{
z5$~41Pe!)>agqf|U&8~a2{T`P|30HvHb1dDl$=E3{HO&?kHfPFdNL~%8HnDG^=ajw
z4!D2#z-niK&=Db~ap=xEmR1U!d3l^~4PH)yVt8p(?Cjz;+-`ATlQSvJ_tPTY|2tcq
zGyiI3`b;m5k0xy0#}}1~KP}!+Yf@UZsSS&M-n`kx>b3J&I=qVe?q9*(_bp<oS>=&=
z!o$&HJfhqp1a}e3pCidC(CKCf`vIowGnkzUx$&M}or?>u(in0dpsDm75v^ynGklx~
zhxE1G1?4r->s@pdQ+bi`?GsUz>nd;;F-0*p^3$G3p3Cho=brk$saMoyeEQdLd6<+Q
z_p>ktQ7;a5yKE7tpMrZmlzsp<p>rz-$LPeu3Bcle_>0fv3wV_Rk8_)d)cj4sKO<ia
zhm^ERdOfcCz6InJ%sj5qF#zV^aex-%30MMx@)(;=A0p1Du&_9fhu$6I#<Ll=yX*Ph
z@N$T7@N46AUrSK855IO>R7GtY<Y)f3AkR8iw|^(j(_ud9Q(v%%WBnQzUqmWbp#D#a
zwBjU0qmf{5XNWI+_6mOKXJ5n@K6?r6Ru}a~j3kMb%k^arN-$4cOi~4;;WBh~4u(08
z^kXjOH9iR)u&2M2{i((gIj~dGsq~?BS5m2Zmk`U1>eHx!CrFj)rvQoHJ8BoIU+0s4
z%yN8bS($UM?#V>FTfMB-Sv9%)xHQsxPkz$vm3cKsm6ilee66wG-J$HW)d}n6zUUu(
z_g()hlrX3~PUT*gpM@PWTTC+YaVZxXOULEDWmIWy&1M2%G^(?#a<`j~(Lmfj4T;id
z<Dtz+P>mPx$Ooqp#yKvZDX^EG$%msZieUE_Y;SJ2?G}&NXp@t8ly443@wGoa?vFpY
z*7<|pp~i=j;i!#}`a5}?KuH9baf7B%G&YYor6@qX5@Rq(@$A#<IP=mbj^8=MQQXmE
zbBMx-C&|+(u5(X3Rll*<YJudrS-8Z~S*^*5$d?LhRcSi2c<9(uvFnnx^KfNS+HCld
z+E6Iip|_EXuESZqRm@r0!NQM{{Nq;sCZU{E_>>CwXPsLMl#5b5(J!ZT=BK6({vH!A
z0CkYhE1O2`kofVR@tNYl;f6m=?70C7F%LYb-aY@p*O|y;4}?kw6ed<dwpX%9kW$ZF
zERISHRp8`-S_WJSgbsAe{c!r@SM7m!gB=GxrV)~89*2)Efa+mi{8SrTTWP-5`AQ8)
z_xjo8FXJ}dZUbP0J0sfJlfOI@e)wnB_P+3^W~+Dgs+HqOf863hxK`n_ikO^*<xEEg
zsGQPTA>YZTjZRqN;4Yls#meDn+<*TPPMumnvzcHt0#YhA7;mM|S4Jt5n}J^$!AQH8
ze~NQA0D+=dCsE4{Rbj>EobxTu4a9{UQdqFaje`*vhLus7YqVA+!K=o~*<O}Hu5!OE
zQsO5oqq_3&v+;oTqRX)7SH((}1=_PZys?zpi?ZB|3O!B*4R*4Eghoy3k>=X6Jb|wI
zRh68i<29{!REOr+3E@&&|BRB)!QDk8D!F@zVgmIo;woiA-tJ4H?RtdEeVy!Godo_M
zh*1sZFw<B-92EG<=QpvvzK=A&I@;>K*ersrzcb9XhOYsUx5akbq@uJH#R%QvD?b3_
z>lZhFKFQHdtML@lY>12oU*wr6yIs1+&5xY^5hv_slIDdgJXC8js!5FP^&UR^2UqY*
zzw|P`{N<~hrV{wkFc;dm-sibgNZey?48EAQJPqkF4lw-9t^mI&+c++Ljf1|GhDVCg
z6Dt4LOd$`xrV(8pU+4F-J6Wv)fqwzZfEoYyQgR_#borbv$#!-|e)mNg6?$2r;<yLI
zz5%6MSge8HgVO^cQ7D{P*-G}RW1v>t?(Z69xy8ypQ?D!IKzD|HR{rhuuR@{2Tz?+}
zX@sY!lUJTFs3HmH5JwGkdTpG&bQw2RuOJUbxYqi7oM!z|zc~LBxQ(~lBx0kD^97{&
z_Fxb`_l_`s>xJ`cKN&x8{QFbH&A6BD^Tcn9aBz^9;VVSOX-M89|B7HMKwJrsP%7F>
z@$^^M@zRUiIDUKv_ujjRqsOLEsl*r#q?*bXy0eIt$MXrSLvZZ^kQN->cPHMoG_VM{
z>0F%`OH)ZlZpr4-RgGsTTCx;xV(`d>hZ|o(H0{bj#KD3mw>m(=X?n|6>}sf?e3I`H
z<nYHM&Rx~jKymWU@)mU1i}z_t>aJ0>IQ~2EvO^}vR;tb9!D6#cWnW8V;}V6Y<>g{=
z@IEEK=d^JLOfKE;WK+q}v8CtUo%|@+Nd#@tv&MJ(Ozg;n2n!meT~m7{KoX73iFspB
zJh5%tys>TD$;3`3b~3T;WMbR4wb}g(+b{jx^_}{<y6e<AyE=jzWD;|zu5)<UF<#$;
z#HElf&U03U*^A>bbnBmILFd3X*O*1yZ;4yk=WIjY7a+=x-XG*#kC)eO^DMsin@tr{
z&XZ`jVErTKxT%`!UsSQ)_3zcZ{Of=+#{^H|S3U;))#2pvw={hj``3Fgxon-Ddlf|1
zZOc+&gXm!O$T8_mI*ecMw2c;~-@XW0GHVp*514bcJ_#W<fd;WZ??|$4TL;F5kFun6
zebbvVHC*c<dcF8jQC9{p*uVdOmnCrqEA|Jfbt}Bjkldpi=CK@|<SEOC>JuJiIlPdU
z7br&g7GQbqoN*7B_e1p2d`v&*sdvz1;f~^5ALg{*7GkQ^@o2q7GqL5BPX(t4G(!#R
z!dL;scyaN{Q3$+lf%m72c7r|JTI_zGx!Y`8{|kg%x}fWe7V2S1<oVBBubrXpj;HD(
zJG)6)-gWbmHSC0B4q3>f5h|#v2MR@dp8&L0jBJ0$Q3VMBeEts|Nt0)0Rpsvc5Ih}w
z4$ol(xm>-zg#I}lYa&nv*+?w^q>&iPH%0PPPZ=M32kGwY$0RmwTTBpfSfE`6@&b$`
z{p+pJPv{2sgh(tBSvmW}D_3<j>lJ)hEDuL+*OB6HiN9o2cyR}@0<R0{9~T4?Oux$S
z?XseK$bhcv$>3a_Ul8P~8LFpIv@HZ2EMo)*)9Iu<^^UW~^x#Pc&mB^+y};PhSF5cD
zf#hsJ6L-<orr>KnU5|v?_G;xVdZBmtZ|bCceCgLQmTx7u>hpIX7yiYsu$>n>$%c=c
z3;e2$;vTWgtmOXpQ!(80?nYFeSN`0s=Rtsut==ht{_~+d{?tI#jI6BA4+=|aNGf$Z
z8nXRF))r<SQL0^!X+eF86N=m%RE0R>f9`YeM~@CSLU_`&$}MN}beBAQL5I$LzCtFR
z7M&6f2-Y@8CZAMSx1dLGKk*q4#4kAEEY&#o!N8~eISm|0H7an<Oc+Y>aUj_X9L?8r
zycQ+9)j1eIlgO9P)@~k55Zk)Z%CabVvs)m3Vz5{Lljb9DONZ#0<xsL|xp>gcGYi2(
z=7G!+HKwRSLE1-<ZcQu~7eYQTX^xn*e*ib5&5~F?&SI05ILC|N8Yl56zcv`VtOwTv
zgl`c9WUP!P6win6mxjt#Hu9~V-P2DJS$>$a`@FoY5zL!&OT=vgGXn(_5Q__%{ru7x
z-XSakFLj<5r=0ilwXFU|8rH=zmcz9W125vO9v2&w=&4X;ZW}VD#%bbD`=<k?a&R%~
zgXmrGSaDHf2{Zdflbkr5&EXn7Lj*702Rq-L{Avf~5LqV&o@qCEKpAVU=T)kxOF>gk
zX4d&MMH5T`f!4O}lGI#IJn5Z+R@=pzlIR<X{^}4+G?O6Xl;8+jplmfU{{YU43h>i;
zQHtFm-s|ESW}Ld=zvEjqVZQ;02@7!aj%&Cjb+p(NdH5YWCIacN$jy@$t8G_<ER(`v
zrF1zetK&TM1MiUWLn!zSzmmKX!ccm2++2?zIVuDB&#ekwT8AhBQcFub$v6vP_0KLy
z)_ZN&B>wS0YbjFe#;(=1s}9DX(k}+>l_Ot9TF)-{b({8$!yYkhk00{|%EM?`pC$=A
zGs!Dq&?Twe+<^QXYh*j3VQfVSP}@?;$O#<NAPc@}>IYh!N6Bji{~1^bC_Xx$F|cTA
z3`Akpl8Urkc@B&X4Z!|D*|L2VhtdZ~l77zL{wLvim9e6%%`<7O!c@{Ayo)%nJkM!V
zkda_dUt>?*j7G!wu>2_i`NzCW_(40^{Uf-w9*z;msY4_yt}_#%dk>Us3FYi4^B@m4
z)9ccoQR{ou1E-E5O7rPKQc#TF2;2LVaq(^|jk3PCmHo&tF*ad3X;yCszwY0#cejA}
z)|wm%$WrAs<lAEeWh8b66bb1Hh`a9e&(wKX2dMFJciB_wV%eVyK*IBnezniRFKs=9
zO^9C`n-FZxqd1t5lclJ9??-(`JGn{d`_J#to-E3MaPbwY^Mgztgbg@&lVdCq=AI(w
zw(Ed_zecwW0TG!3e|)5vF>-XAEuezd^~ywWsncA??P4<iR=aK&8~f_A<_lOVrfsSA
zbc-+E?t$0JVSabR%4$LI!rTz78&^<hpG1z&LC#Xcu$gKR83|nzkhn%>`Rb#^B$86(
zO_--hW>tNWMI2Hb0JXu1UTJSb6+)cqt7-3K7iO544Fnwl%_1kJt-=sIn7kP^t0vI2
zHPCv;6wO^Ug1rCsG{r(gotcT%o<guFBgSsMCwhR{3}Tcm<v%crM{N1x7_n>O9^0nL
z_bLhEBG35$P369){`K#`DNA0<?0F0mv!hhE?CtbpnC|0WlR(-Tm}qv!ReoA*dqH|#
z=?VlXDoTL!F6%LvNd!v^RKp=yxmeVp?_on#bifK8p$lGWc2;5_k16dKx1XKW8ti#|
z=d*8Roq*<y>~rqU!bs=}ZB*BW8=67+`jO9vWpuC!b0KT+F$*)_mxKi_Cp!GWR_`2t
zG^jC4C0nzO4;=^YgfigIwqm-yy;cJ$gAz#i=b1V`Ft)>1(xf$9+Jk}SiBWt^*n&r~
zT1}pu3zIV@wB=IcxgIs@T1T+=Wghm*>_TZ*tf0Xv>c>QuOTCzdt$bN|MhuDxB#o#L
zy!a|^&Nz2}R18>uwxGjKf9Lsm1N8I;doz2$#V@uv5@aLRKIkpQ-iX}EyPK1jA>G14
zmaX`q(YilLS4Jv-QA1Jt@<<NcA-SMwR&!2f6(-}e>f!*rD<^b{qI|u6np(&7atyLc
z6?kZ|x1H1r=r=Vwl~7t}GwDNsjvzf}i*0h8iUC4Tyy+^k*jktwjcEJh91yQF^tu=g
z`D8PnXeff%<yq_axsVFJT6#EYQZ`5qsbS~7)QW{ujxMDThFo#jf2Nk)sGTqQb0Q&g
zNDKRwD&SH^Ohs|}QOpN_>3zI!%0mL!z}XY5sNz@ilb{=n!v0#^&X+~@z)r9(I8WYS
zlF#~x(Vc}yVKaehElRiVjeEGccP1R@n)E)#xiqAH>hBq~KT+g$K0X2m9>Z+O{Reh*
ziZFTab43U5zwj{xZG2B{f{a<V(x8*mP58CNweD5crOjLh7DbRIp3zIL2){LPQZYrr
zLdh`eeoKlWmtlm7dZT4fuknKq)H~ujl!`;8%<fm$xPmN?^?`}|*4K!9xer3%0j%H1
z29Z6HV?z8nn>rD9mtmIMMwla)xv&wbjPMQ<wGvzhXK4X{c<eJu)wE8Ju-zCo?i9xf
zSy200_jba4_~`URm%v1tOJxF$MU+rN$ai|_*ys!Sk|I$+q<$&$C}5*go+Fr4i-`>j
zMuCt7jN%)#?Fn^g@j(rqqGt~Zl26x9mGX9^IfpGJq5GgOf87ZBp4cJZ(y}Ax6x!J)
z{Wn?sT9PT{e-K(M7I^t_P-XCA7KZlET><E(y8xQuE!nmtKgD2zL<GYN*weB1#YKEi
zEr`KOyiJ4&L~^tt17eCAQ;<?HrhY6{25S0dRZB3=#25(aKr+<?o;?N%#6+U&?Nhv6
zBq}*j2!_83ji@R@HCYkXK5%0rTHx;xmB5%5xNk>-5;hlSuytV8wxX}SM0OmOovABM
ziu6G0(5q&9zl#iqK<DWMxt3Lw2sG`D9u{TfqyWODqf9}XL2xJk7X3~l$JG;~!)1+J
zXGYJk4D|@)s60w0k_p>$`5TssyKy7C4`JTBjn@DE8i!bacVv>E#>23+uJ=~%<MhVA
zPBE^(a6END#_^zESo&eln=`z#g8Ybydj%)n%W-LvNn)2bMx8r?5v)i8Vulr#t9L3Y
zAwYGj_mkE9@BW=#Vqc1`Fw(Zl&NrpxYH{b|5~Kk_EBPjpBP}Nz4$e3DSW@$tAcEI3
zysQXBni9;q22^`V47-HaL^GGPX(un$Y>&@LLX>DGqCa*ve7Hd<BX7A=$`Dou$$+A#
zqeJ;+J;{5o7eRIY{h;n<PC2UT1?w^6E(+~H@!khS3I}#UjePR=adae@V|yFz$s396
zDmJSMDUFfJ3{h&Vb5_&c=Cf8+?k2*p2RwC~+0e>jT#WtR(yX^nGrDm%tohfMwH?@6
z_Z*vtl4^gFI4#GE8`!*Wts-YMS_9xj<`+P!?M07c#C2gqrM0;>Fgy~0aO?074jeut
zZD7n74JTXfR>H<V@m7+M%S_t-m!C>dK=Lp%)B^CIQR^-4L<j`X^z?lut}(g7DwLoZ
zw8WV5AZzUYRcFF~5UjxwI58dqVhU1~JZOwoyqU9|6$>9CEf>-RCCPzkGHd&0hIz)Q
z-`s|Wh++3IiK@X9vvi0WcS)s$2)MI~T+@PdT~l10<b4U*&0M>z(HWc@;0rdBq-h^D
zS!t0Vo0RsRm7$k+D-*t50Tovj-SL--mi5;&WA~?!nsbLoo*md~_xK}4?T44mfuvZE
zYRsh%<It!d4*E;GnU&l2^0_#7<14QugH>3kw|an#Rzqo^6f<hnHUu|aAW1}+nvkyO
z?E;3ZI;%Z(`Q{;e``ZcTjcx4K+$n{bj+#n5ReU6bw^b!1q<Y9N19;OuH58*md;bHp
zo*`9(yH^nEQEnxurmR1J6?dYZZ$62I71>amDc9-W*9_0pY%o6Pq6HPonQMpQ^LC!J
z^p#0lrx8m2Sx2X9P~Q+IrJ?)<b6Z==W-LfnC=1D-<4binvBrrV_HJV2rG>FTLTC>@
zDfZdNW1|M%wg|;V!GO&gv*p*fJ)?&Rhq^hxhl3a3*vnPhM)6P8FEjSs(<#OgJzr{s
zn$8-+ji;GKs;}XyhujXod|&?9$<I2u245}<)65;lEweWy%f>M<tsOMVXBXTOBIMS@
zlV@U_Mztxn3_3!4`BFCjab61ger6_?nX;{1%}{zh($>8E1_VbZxUn00Ox+nCH5_##
z#mV5|%ZlABN4|h1juRDt9`orqOQq`gPTurikKrIYRwuBytNOh?3i<Sx^sbyeB7FiB
zMXO9atKs2b@jw#xo65)DRVN$+G(<%cVJMe!^C^g^@IB8AQ|=SruZqU0Ye!}p*97Q~
zR7ZqQ&B!YG*vN%U4@2P?WWrANX20C;+xm^aF<D(S$L-ekb3tBw=Uls@cLT6;zL$G-
zug}@Y^Pu4Ceu>A$GRiB-y%rtzLWnY8&8cUC+v^Z1^|(t$JK}NgmTsi<MTJ3f|ByxQ
z$End;iAUArfuDF$Qq%F2P6Y^^m<m4}A*%l^6GqVDRiR00Hh*A32QV4?NdIjHGfXeQ
z;xKutONRY`w}q^CHq?-gYRYLX=3KeYcAoV4y6F?9^Tby=y?F2&jiHdVmkg1jOC}1G
z`QP|s#kn5_4s=llBu!~PCfyIS3``I1i#Ym))jitAPj>=~O+0kLC(2oakKEXX2bLPS
zU;2AK-L2ms|ITwi1OM^ckH29hzO-<_E7`vGE}O=+S4!>=mSMGwxZ<#qZd*p}PWF}Y
zr9Qz$G4uh6IRsGDQB((eSg`5>sbGcEwd37-SGp*^fvYHC6!AZ)wnl-7j`^v~x+R@H
z51(E$QD_}rNbQfG=br&`jaWV@j?&P*lb`~yGEiftzb#CBJ@_MP&wWw^Zp(q5q?a2$
zALSM5I<@6R?aJ7Z`SHe+9aQoprjb(|F|H@Yc3=WeC4|dN<E&K76<AKCAuODc&hwHr
zLl>WeS`3|$iZike1z!;)%Wo0rXY#Rk7yM)k-e?n_!nSsf)?dBNqZ(9jK-$LZoGXN=
z7eCC9g^>QaxX0LOANZkU&sp3m!?Y*t?frbz-Ihp3GJk0fODFs^Rd$~^j)Sg!a#fV`
zkzcZx8o3ltPRR;O12)rUvq&sOL`w9#IS@-7HM=^mV<-j(mmu)s!aBU*=bPu8u{Qs%
z_V<`RWCp=4??%znCL^J9)YtwPxCs@P_-n`|Khc@-dcf%EDj6_U`u`%W28?RKE|-0b
z^Ql?A6~LrFsvpW~um|&SfBZbCDTPsl&nyjT@KA`p`?UXc6;031Rfvae>NPU+62i0m
zcH>a@FzC>=;_<+FOA-GuyuJz1^mQDjCb!L@Q>_{_$B&-($gdVep$6RI*0S&=n%onc
zm11Y2_oSI8hfYW%CqZz8@SGwM7wO>Z8GUjjs_Af~roGV>MS^qwfU9J^(Vn&{GfPTg
zOv(+`!5}x_cIN8oOF&80qpEG*G&30gb`WxB{JjgBa0K&Lc7*!5N=c(Q(s#h9<(v!c
zxmpY7fwVm_uR&NB$=Sikppcfgn}b^dw^wpuv4ACJ;+;@+F6)3=sM?$@K6sL+c;BgG
z{6h9(#v__#HnZqx*8A-$w(hmep{tejBeTYbucP&2`1_&reZIAQSluZ3pX4ojHHQ|@
z`l^LE_~|}Z=4CHk&iL$!u1z6-iICaq@8cgUIm$^Q%X5(ANRV#buirQh^ucLgWkDkf
z>F0`)WpBF9!kh{0y^Hgx5pU%t#tBefvn#uUP{c1G50OGzp1lJ;V)z;rh~?jopVknp
z_b-Web?_X%N5{tR=acd1I$7JloiqhK&JiXkN)S_h8}wGWW^x8I#muS=3Ji*U&5|rA
zkh_${_kVA>1wvWQ(5W`gv2Mt52Svp!UJG%^G$&wu#1M`6(j%|(^G?+8CS!ULW^}>=
z{Z#&2j^*Afq*l26Ak2)5;{J4uKHRDroYTngxH9j0$@vSD>A<iCBQBcy!iM<@#dK!}
z;W*z$o}*9k6we8`g`<GIVKt|?UD#>s@<}+}CgXDIR)#6eu|Y6dJsWdG{>T<XCG=zb
zc0BXHo9@6}R+17G_laHBk;ZTeNc-Cfq`T{_x))<0WrNQ?2Qcg!POem3G5BM2K-IqZ
zQ}}BWvb4EHX6@sM21s#)c((XkYDh;_W?#n9lX-pI!D4{ccd&y%@h2NTQ4TG;Q%t&r
zCgt9JZEhwHjJT-IylwjVl~<ou6Yg<XAVVa9GDd>C3ZX*?fd!)oN>q;gFby*3CDBAt
zKrsp;2^K&x0EH7#M1glzL}v^VpsJ7|A$H1ghEjKHZMS-#!~5rR^`)=Mh6;l-+jNys
zAf>ME_EGIfu;F&ac?6~kykZPr-n0n3Tf_oy`c#!?ze4IH*GT8jsh--PYQ)M%PA)`V
z=)c!nlcuHRKwT-c#K4OgC_H!U(KO1O$zRy~r&Mc&Q$bSQ@Ma^|rUfvxBEXY#n3<j2
zzGi|_jOx9Mvp9Cq!OUE!BL~;bBkqzAJn1;EYb`(4vBD_$(I}_tbnt;DDa9F68A|c!
zdHrUtmpkQ}DZ>wpn0lC4cS@G?*Sa+v0}TKLWg6&+0n?gv$w7`<a_9G{W17&1E`v6Z
zaqTuS^VK<?+MBg5IqIsp<bt{4315Dcfo$%=uB+&RLfOJ_M{KEdQEp>()3IVe5<8tx
zL7ocH*}a)ZV{)g<+HXjXz;_WzRGm*9P?6V2sQkxukeu_68P$FDL_yv2S;w?U?UOK;
z|B$8S6$q6xy`3)p>%K|MfU#{A&KbH*AfQ^NYIYN+OE*~s8NN6a+QnpArIAh3l{rCG
z#Y9ChnY(S3W0#uPt~IY%CtKrb3P^@K6?}QQMD!25$Dv?lae|7IhAl6b@7rO>PADIm
z<HcK}cWU|%=SP^3-2?DR1||JM6{YTiDG<IBe4LNl9eS>ppyj};%7aJWCOdxBDm?%6
zcAd<&H@Y`Jkdz|;;^;*=u$D&FM5#<QY2oCJX8QErf9HJIfDSD&t7`Fl388}%N}NBm
zHw_`@H7Zok4Z@%1%?QE51AS01FzROpS+ClHCb@e0V$fv9-uTr5gREpUIgZv%<wsw|
z-6YWVtPt1;_K$ZnR1epJy)?|4@BoJcAtC+zSn$@{IIRmRgpfGB^UwCgM#u>dnXH?3
z=6mJSxGuEeRbaSH+z*|70<9avkMX>{b|I#3ADiKQqdO7XcgTcN-JCPS?A^22QV!7=
z1q$Y5Xmv!C&Cu<!;f0`(TL=1G{I9J9+|4+=M!Hr*lNsEenK-8raRfqc>ilkAs3D9I
z1jK8(OD1V+<>47>{sR&I&{EtNQ}8Wv+mx*ae)W=dIam9F*2OAb=fp${<kS6^>l8cy
z*rGqmC_);YN==q|7lOqMq-i~p@rqBzgJ1U9Qf^{KC<qqwH<Uh68!sAYy9bEhT}M(2
z2V0Fji#&K9f({J+xDqe;NDHaKhYc7{KAHliY?mBi>ynHQ|Cp(vX=nGUAz_~?$f)P5
ziYo;qliV3xSV951l6$4)J+Ggylq7~o+cO0*NF|1=hl|NpBX8>+GboyvFAB*B+*}sO
zoPdfa(fftvkHv$-i<>HhF0?`w=kim(V+kiISUW^v+{u#HQ$Eg<4br;sqZcr#vZH(V
zk);+t46Eh&t0ruj-uRX&U%R{Bg73f`3C}rI0Ax?7Qx8M7NO(^$U7j_IVRp2y{a#ZD
z04w@m)uRkn8zg(%@z^IeIablM!=jULzsLM5Ce-Y6U~G8gd{ip<Y8E!fq+0bYcj7Hu
zl670CDXJj{RMeliLH;7we$haQ$1%I_#(`J_p1vWpgj?}$m^9kIJZaqgw5_f|xJFy(
zCT%G9%zS3h-5k2FP*U?^lkG=@$hzsMPfr$Cuo1XM5o&^A%3K;kcl@2Zt3ApxgOYli
zhJZlUt)Rx!{xDF9me*E(@)TfC92kB9M$A#xEcT<x_w;T-U(A00adPJRZR2K7kh@E+
zhSg4Pt+#E&V5Bb4$)g(gmIs<*W)dZU0e9OF2AIqeI-o}XGzjd{h0`4q(8+Q!ol>_Y
z#X4QG*H%mFz0t-VAQUhY<|M9`@;8i|{+YGo3hGJjU-fG09#40GsY<`%yj5xYxOQ5t
zrKjBW;~D;9e^!>E#PA~%Dhz~=b%1%mNRLH##PF3SOYUnC8)yd^avBtPlN*5Oryy|j
z6ta0f-L+_9)3z)iJ_8TckSx;kG#$3NvnD9IWzchkRbXYHe^%Jf$VK*p1-<pe(8d@|
zq?}dXnHi=AG)JH;e9ifaqRbS4#Lm6cjz^)a;$1l{jN$;Jo`rIqFb!hOYqh=eri}g2
zMsx=nUTaD#mX1gyE3P%RBXVgdDYrBB`}UcWxW2qqf5UGICGYj+)-G4Y<`{TwJx%wB
z=?tTD=n3z+(h#F}OR_JD?DvTX9(1+;@1=@$BUW4fsYYMEZxE8C2_C5dAdy=$2+DoU
z$q2u7o91T1#{(u^l{r*(y`kgqbI22mm3BS87xP%cs4p?|YETVpn1>zvdw^BuNbN;S
zse!8%B#<%iF#u-K4yC6tG!^jE;H?TY+OtG(oXLKsK1q`&1#<<PnRDKq3@CO>(@@#<
zlV#EpHjKR5k*QWTCp+BitV*Y;B=m`Nl#M8q%^m6wYdaUUoaiwG_7Q<Im^EVxe_q~`
zfgzW?bf>USgEWeWHP&c+uQ5Eyb@ej}%Y_}BxsT;kH&}``<<P~@TkD}vv<osEOF0%_
zdw(%BKJ3(RA&rz6iL|48<=@#jM{Hsd5JA$wmYBGu_;V@jr=j?0S0Wsjs`;Rup1`ma
ze|!5pXD!?vCo`Iw^7>hwOH2s$4CYja(5D4ghO?YL($c1-lYV^Gmmi6BD&-7rvqvKQ
zAL75u=L}?4m$<rX4A%Im?+@?B?nf4#BZ9&&0*5t6E$NJi`Q24|4z_-wc#}M?*7CRs
zx1sCSXx5S`VP8WCGu))XNf;#2OpS2{Bj<cfqb47b?(78Ou8)EcIl+oyxN<tCxC)jz
z-bUb!K|ZduWUCp;w8-|=CMl}t%QA2}G{?@byQurgb8fJ%<4)01`m6DBPUvrUo`;xc
z*#r&{gW!EgrEhpSzz|u$2&93bu8B(7XARO_BX!EBHMWC39|<q|ha7i$mU$@ShCqjy
zaLP}xNn~^P)({ZNC^=_SVUbR3kl;46H#&RZ`jY^bPbzFS*9N;UpTqZ$V`E-qoLv``
zoyJv)q2WyzfJgPVfSxRkfPYq!y62WWMwi8YaYHY7*z@7Tr{W-q0Li%zWkb0qvoP3s
zc2W+MI^F$Yl{LWL+Y@B1D;~>a4LHOFum!223UAKUyGl)uN@?S$m2mAN6>Uj~eB{Bp
zdlJ~f1X2W7tEVub)qpqY0HUB~kSv_Hs-y7qU0`MnfJ1gY{6@P@qwX;yhVT{~Hj-n>
zJ`oHMjG2bySee)d@h^(QWqZ#FzDSz2wktF-ezX()hvLr&in>NVAJ&j=|E}BYXudhx
z)6RFBVo2Ntg}Hk+WN6Q+zP=YC=?)r^$wiW{xdNStdb$S}PgB?QN2?0x1$=f9wVVP~
zpk1~6D&eiR?11Y9s~jQPm%YIGSATq>cq7F~Cl}!`6QGkX&f)_@<ROr8krc9WZl3f{
zB<ULP4HG4N)@#hCl`e3wlr9j)CycnkvpS6+S8uZ1xavvKTHunop*x9K+Fn(C-=gQV
zjHFRAe)DZ$3hnW!tjd(}=?%<<4A;JsgjEJDwbM$7;HS~Ny#5c1I`FaRP~2N_R_QCZ
z;RzP*P#Ts#KUk6`X}BZ8H3<ECpROx#Lb}cG{#z8E6>A^}ZEOFFw>=s101fmeiq;X&
zg0KQbvk&LGXPi%C1U@)rhU-B+2AFXT-EGF|aJW<UsgRvTG$`($8aA<&%y>hD_$gPM
z(k-f{H>a}Z+{AwXJmxI4De&-Rdd)0eSyQ5ADdFn{WVi-LO2)6bJWhyBeAYk=^APAe
zjq_AK?fK|o{1ySu&|mq+U(r@o7m=X4<`cki8GRE+7KvNgoPC0k`B>R+0jf_7joZA?
z9Z3t%l0TP9)i^sH-vLY<ZdJuc!uRfKA~QI_X1Os#43}r#>kO-d!G<7mHyP~A$`8tS
zgx*d}>T5$(04q2b5G)QokOwK{w_@`a>77cde&N3WN&7UD00-%N0Y$~z+4>PZoRQT4
zoC|uP<+Q?w+5<p=kM|gi`orRwo2Cgmtm80Rf(zK1W7|<-J166q9@<2luOE@1zyyC0
t1KA@lJGaD%P+%ay0tEiA4RorHA5=}~GXg~S%pc@?Ns7veR0|md{s-g<W`O_z

literal 74510
zcmb4q^;aCv6D`3dKyZg3!8N!;2<{Nv9Ts<o06~LGaF@j;cyM=L+}&aEMfdUfzV{Ej
zb7p?nIcH|Ot8Z7=y;T*dq9l!uN{k8v1A{Ir^IZ)F<^#`vH!|Y;lhgLjGMEoAFtXpp
ze|W8&y?Un6EPHQ6zID1%&HkyWzPI%8c`>$RN9^u)4*T_m!3Uits)$rpRz6++SWau@
z*_xmiFt9%Fe-H3%+^PQV&Grr3jll=bSjNkEi(}(1t!ckvR<fUe^L00CcpRW^pkXj?
z0Ouy8>|v>8At@E+y~}y|(CK8>TDPX{z|8xHWGrTX(B=Q{r#BqSb@rVw1?TqT+Vn#J
zXp;}!fqBz#Ea`ff+VgJeYKS6Gt*;`^N6hgomzOJE*m668MriYYf46PBn;<PhT7#ZK
zg0*@fqD}kVG|qP`nEs5zcdNT~M1R%OTh=zhw}Kv}x5fBELPLCSCuI;u**vLjw(>P4
z!QJC2^puC-mGxz>SF!zeb40RhvGH;qtt+mz|6zK}u1p_n=9>PRM_Aon)fdQmnv*yS
z73^4(Wg_T|m#>`Azds_{3pQ|n^l!MhB3Wq`@WZeNXC;hfai%^Ax?bHgM3g2{`+eY6
z>Sxo|d-N$;pRaq`IPAP{jAJ%z@5IcMChrk?<0BW@afDgDGx{iGx^-m=2{#L;$dT(<
ztARA53BkA^IjQtVhkT|A8Pi&9{mF&`aEZ*OPu<L>x*Ga=J881j^6BT^4);S~Bf0jl
z06~^M7|Vs|a{{`bbXX^5DuS4fmEf~hzCI*ChhT}T^D^;t<5R8u*0aHOTb-pITV1wG
zYe&<DH;u$931*`H$)H>7rN`BMR9XuUf>1d|GD7^Jq}POR0L6<IW6B<hvdH7ZLAVxp
zn3|%=(JdZlqjqN5sbh;numjqN#QxUy<IWesyPl9UCJl_Q!IhVm3YH63!ft)};&&A}
zYQYwHr*w;^+;dluC~pwu5{Y)<QaAZT@WsW3Q2(;P=;i|52%^=Jwy&mVSM7A=C|Wx5
z?^NgVHMKR;;9irO1nNMgw~ARAiQgDF_lev1dw)a(`c)ZnImYEH=`ip+r0C(GIXCbv
z(BFl=J#~oux%BZ!TJ$!oVq%2k)3p9$NTh^g8}HRi@=g~fhi7O=31$6ve=iyDXPnl(
z`P#mj6+GoZbp2#1t(P{Y?4!QZ1b4OuCP_|`4)EgR$JS9aXu<iiK36@5%IZno#<-{6
zrM4p(Xo38cTU4vN0yU2@7^_Z-MzVj)U@FMZFg}hy#fSp2^?eu?&ogl%2jaJgwdXK-
zippJPKPm>y3SK@Q=?&2Ed^b15a>wc#54D1pD7m%HhI)kJ81VRfHAF8R!8=hW5t#8r
z1}!{BuOkBfj=a`h)NS+!wA|-;wE7zylrx%Qo2h+gp0o-z7TKPEwVmJT5`w;L8X<b^
zC1BFUiM}<jIUw;Zudm)mu$)>w-*@;sT1Mr<1*}8}Gt-xo=fQB)mDcWCTXN>nlJJ#P
z6NAjn2s-U(Qr2Kg?QOa0&GKkhoho_jC_GR>dvY)|tA3SijfO-~M?VJA`qSh}=WMQs
zhebzRp}*NWAze8n-<{fcCD)6)@6%YQ8#;V9o7j|JHb3nRNuG&-f_w<jswuxFRmjgE
z(mkaphpoc`NLZqb-oAI?Gi2z)t~R9=oD-Ig@Q|Kn!!~B~Ef8GPk5x;Hx0jnLn8wIn
ziHM@TZ0amLcNzK|L-~BS8-3uGv}?v9VFmafxA?ekQW0KVO%wf3goD|{&Q=&9^OBs4
zNFW|vzD`sXoL0N8+l=p=r@<@uYzK-#D;Nu?7QeST)$^LR%{oj}+O{r#s5%cW^{1h3
z93JAnJ}-2>c;@<D7ZUmLS<1HofB*aa^E{zQK@f-`atl<wSsX}P1^IRh9xqPtXs&e$
zsI<YZZ~vuR@S)rF2w53qZ9hc?xHP&0V<cl2aX?KqH?57j+f6|kcIJVl<=7vpqn>s$
zPhK~@pIW<~FFo~cY1_<6;K9Ba8@`#q>%a&a3Nhhw%5O>Xh74M%1@`D5p1H@hlgI!T
zfn33~0((@D!!&;rP`0+ta&bOrCF2XM{uit|FP66snfq;E?i*ADt;=rv$y0gauBJFN
zcpnsm1T9!RA^3iV1Ud{YfA}1!ukYR2&#{VJ`Y}m-|EpuGT9HRF4jF4#LS~1rV~J*S
zQr@7(3_oiZ^cNGy^}@yAgo2|!OKF{~idm*u4B7kAVE=42)$Mrm{5Z~ll~j7L@tng+
z`&jtx9L;m>YB3N|1Xr+xf@d=yOAlF38gqjq`(&6cs*XbK62?70w#iW1?sR6wVY|$r
z%ldpZ2IvtZ(5BU+-u5=LB5-_CQpnwUL|9hNIjBp`aPr!vrSpWQEc%Lh0L#5cJ>dDN
zHq>WjF9>OqVOSK$%u&NgA4IrBTx#F2>KOv`c)uEj8Vw{n*G*KCm`H6kG_GXTnkNsZ
z__bd4T&G^w*@Pflxw5%lI~4ny7u^eVt4icvTUH1+zo`=Yb#?!~MRpn_#~SpiuYN6E
z-zw|a_5$c3HrgMS*;{8=+~n~<vdi%oG_j2b9$yY~y$=E(fgFNuC0V@N0$eDx52BEV
z=sMAw6WG(o#Ii%BpDXA&|L;-?A`WR~vFcx$)^-X!Jq8ADQ|BMtH{a@V<Lwc{l`5SF
zf+>hH-zp!{;mlaGeX5ZFnesCZV2}sBWLuB=GtW+$Jq>KKBDt-`r(7DvOoA#SpM!Mh
z<J7O=^VAyIA&?=7%5yDv3-GlV3F=rkGF8sz!alNpYNPjM^Mb1sy(oMy0}QHWd%TY#
zsDEF{k!qwy^z(50?Xq)Cm82evf30RLKd)G)=87Kw9G5jyWMn^wcfl&_Lh!)}yl(xP
z7Z}+B;4QiVn$2PnHmXvCpf<PvYwQ@3&uz(mzUSTmmy{u&b6<@{nZ$(t)_XSLyKy%C
zq~Qs}-x({QH>5yWyK8D&@$;`M2Csr4cELc}Q!vP!gcg;xv1-w@U~AU6>s5$**(GNG
z`q>dqz~051ePyL?qbxG`ZlMh;C&Ny><^tdaAjzIw7JF(fHtWELk!0UEluYE={3?9s
z6urg{=5yo<cKC77t^A)YBNYQ^r}=qc0I7Uf3v^whe|{J)3eQMZ!vIcmKmN5hQ+wZ*
z<~X6dEWyNDu#FR>r!2uMl0!Zr&)ZQ$KAcopE-86~JU=rk(Euc(3#kEJgtDlMjCQjx
z%Yu&3OenI*4u$t#-#t2hon+3+8xl09@i-Tgn_HH5;Q*@iZd7>BW5M`$C}yvd2sN^J
zit@JCAf0k-5O`<Awp;jIn>^0q1U~O#ia@Mp=YY9jM;K$@@!p!Y5jf13N{*3D)pKC3
zi^cn_F_q8J#XAjZ*jZQKA^Dm|tEJqTQehpeU-!(g_!CI`{xpe+tG$}H^sZTr{p5G=
z%IL#cy3g}SP2g_e^EI^}A3u>onuqPp=V)0)GM_CI)n_7f;`P7Yazp3|!|Ofjt0$42
z8+C6=*pX|IX8y0k&6%CmdoHTQ<q?t`WV`j!osZ*ee#d=&OMd1g7IEfn;w~>o!Z<uN
zezN_fT6e_#pB=%VcbIOJ?yWjv=BzA;+y7onsl@D#^06%+^nFNF^u-L=C4tWE#Q)%L
zEA<9PAb|Fc*&<~fVoyj95S8s8qP|}Ul^UQcD|W_s0Ty%p+B%t*HQzTKQsdFGZPpm7
zZN<=Up~o+u{Pz;NEIf5$SU~f%_rl=ADn%%O)LOY|RK3k7L1x)&eeYl7_ffo7d6)V1
zsS4c4<e2ZAdU%n^ETpFs3#gvIW%lODPtn1kCWX%RkIME;c}+^^`u$!LQT?%<Hh?Gl
zdS#)jW>F|%mtF2&;XkyW=Y5C)GgIS2Ua+<zQGl<Nv(6#F`@#LPsxD}!t2f~9WEDg(
z4mc=@wfXO^>vvpwsgEO#x4GpdHHH7nOKvWdJ#ENazs8mEsR*V?1`<x?!6l$IR(()r
zfCZ{XP>wN}Qf~vOJoD_A*>ov2Xw)B__NbeMdjV2;@VXkjAHICh>o)m9HgL=qd?ekX
zSM3_Z;vxR-UT_ABE>+KM%j<4B(7oYmtU4ZyeowVHlQumOMPgy#F-TA9VtA@EYVtTS
zjBxYiIIit}Ce(vCm?W({U;I1m3nUcTBi~IuzdMOS{hXA987rrlBR1{~!eP0puE<%r
zz>jRl_W`s;0tcHz)9WI{RWbG$90k3SAE3w2ko7<au5y-7LQ;$$Nl|!HIdG8m-79sV
z6qNGP;%PwDs#N{ABIyK}w5VO(@UT|R5WyhGm}w%;ZCl==5sk}`xP7+i`MpbO6C?J2
z*!4)?fpQ;|o%5AOiorJm7!?{=0wKz@Lf7h>192~n{va)vld{%+BZoU}$3H;Y#b{uY
zdR|z+RPa=GV@zh-`J_=;9ApSm+PY9y+AaOMwB1(neIi%u(%&s<1*UXFBjWog_g<Mn
zw#;5^k|S^TzfGr9`RYXXu0kR1Rz#u3yST>wa$RbISViF4RXjC^(Oz{p4hAVP<@pIl
z)cdPjWg|^00!^rZ5T0P|%Qo^v(ZC_HF7{Vd@|!#t^q_MNxKfrAXf|ORQv2wa5#_cd
zU=!1DvlbeF_Z`MrK%NXehgSalx<z$dVA&LX^JZtbu0sLy{XFR@*+H4Jy*J?0(}T^k
zQnK9>U~eCnvS9>2Qzd0@SuwM6)YGi+J599uggb-CF~YB{UZ^o9ohZ;Z;=3VQ4)Ocv
zB`%i>|ExM_6>aoB!zVF%u8EG6Dzm+MuG(1oHNMa8UZ~N%tueLm1IplYb?_@1CE$7b
zPXSN;yfup|lwg2Hed~1q<9u=KL7nI5dE`GM#m1uuUOtb|ey3XQj_lOgoVwOF^vj40
z7XLJkPu*y{`^<nG#jc5Szs2t&jg~|lZBJ#&|8ziWRs^azNL(IGiMvyR1Q@dNZAK5B
zN_hh^i9nk&_456`hgDU|dLvM(+Tzj)yDz${&6gXrX`<nt9J;F?A3b>APXGciXm2$Q
z*fh8l^5Mqz{Ea@4?)B+dDc-S0Q<=qXpByh%se48c^%n{ak!02`n58$T#H4>rg~6+E
z=xOB&RGs06ruRO9S_&Q~I8G`l|B}*|R^Q9lK%Qpo#`LQ1wyjknmi-qb-)%Qp+e_Yk
zam8jJ9D8laH#JZllY8PL)@-XV&EfrLtJ5U}`Kr=*T6{_Bb&YC4<#U%y!L%=H&cJ+U
z&=#S1w3>PBOdo=0N2_?p`Mb+&I_Hb<Vrg$|^w*6RZAvL+SzeR!YiJ*N%aZYa+Sn>P
z|0T0Wk_s%*PBIlx9Crz=a|=r!F^gWLTb?7dFokD!9cSqpv^}&;7w!1w$Yo|zDZx91
z)XTG&2J|R9lA-ZpQH(_nCt&gHtcWQq;!~GC`hZY!;st?If9bJ0NXrB_tXL4-Au6Ar
z@I`)Ui^+w1dz60sbMdLxf2mvgWv{b&jb*r_2M4r7;se->wH*8#U~pd0#r^uBFe<js
zF8g@Y*`f2*eq3Q=GUp0032#XY%Rvxc`eBcYsh(L==_W<p3bN<e*{_xBm%cB|U*E{n
zQH|E7SW}aeVGYrg{<_`IF{Ow}P^v^_gX0&hEqR^XMv=YsM<QvwdU6)EZ@o_9U)y+e
zv$C@Nv-tVWu}R&A6(eoy!=xZIye-$~qzk$bu6l#j@A&YkJv1r6{A|mJAgP_?4x`_$
zCcUoRWIWn4%df5Q9rlsm9q>Vk8(haP@SdbTY!4fc)C#fWJ@XY1fAT=&D6HZQ*XWF_
zlO<R)q&Ct(uV2!EZeeiGjLd<>L)NSD%3^JYtbs30=|B&neH7e2FEVmFqK%tyVWh6H
z9b2UMr-?l3ZtwPrcqRIddhi;>_*}+Ub0U)R;{f0lhzAt_r{$fcNQ`&qefV-l7mz7k
zOQ$T-x!&!e*1G=(z)}Gfju+1RELAOa{q*#H^my_q+xw0*FA$DjlM`17uLTa7kqW$M
z3J6QoO_^;}9qD~Mehu!><Ks0WTujcC@`W602$3mpA0BvKZudMW&-ypXpQlGJ5Hb@W
zlqkn_G*Kn&8~)Qm$E2vb%IS)yj=?1oMje@m00pTdBkbW}tgr00ZXV6(9DiNaf@#GU
z;@%JwYMhwS7?qcqSB_JD0kiq<GX)kdSuPh0F$*0({BUej{{AKf&+W?1urm3+>)z3m
zkw%1h-^k7IkA1}2BQ5;m%~?uXdHUqw#|8T^5<(#I3m+F|FN-w%eebbqpLNY3`CP~q
zIT!pTS)nw^8gvQe#GuwlKpFU<K9r<fO`jxT_<H^dac#5W1}?B}?A8FGS|E%|>9Y%N
z5rzQfzu-kIfSK_9IZh6=24S6+*%v)E@{CK_9w<rGoC<8(zQn(e{Hbm>%fPq}{px$M
z3#9NpOFd6gHq@!H59#JH+b*i%#e6GT+I#&pH;rCwy(pn<Z|0enUF0^5$kkchm9v6a
zl({gYUf&cvsr>ag?q+LUR9071Y{~*eE?0M{9>o!a(xV{3>ePuI8s4z2LsS>-PNJ}+
z(U3q*jpsKDUq=ef$xKTxkM}!pFQ;}l9J`?p`yzPq%+K89ep9+#h4$wX$}nXhs=Z}L
z#u@OjYAwj=GYpCSv}C{Lm3K-<Gb+v<s#QRZ1jm84OJA<>lC0d&LG0cAahZYN`53<V
zc`u2LO%wCvN(Q&&TW{-fT%e`pK{a}DAqjkwD2kAh|Jn2=76-5Ru|=)-dt}zFzG|cL
z+_YU*1qT=`s^uCe5}btde1$I&P>hRy3c&+h;;gt+@-v@xEl(42n;Z1F3wQqX(P%mR
z=^{|`wKHp0CiRN@H&;eP)poYY<|}VK^n1v`;gp&z^OOgt%DR_s6UwG?LShm2M&MM-
zeiak?2Gs0N^P5{x%>sMjob@YfJX|;Vcfe<RW4sqCwe)U+-kE1+9Ctow86Lo0xyIqh
za<)b)YB<bKrYrkB_8*uX$*5P2(Js{eF*y<NVw5HHNN*?hYt|v!`nn~StkZTBaOX(P
z#hL=NE4pv6@60`w^KqQzwqErY<z28}yC)j4-Fdco;^x*#vz#T{pYVLe)lH}M<ez_5
z&$v|8EH{oryZncOv5?GZFm;^;r0@0`Zm(@NX|atv+;1NNm8;ZMK*}W<=V2TW6xIWx
zJ3M1Jo*oG}P^Snm+N&eing9u&`M8Y8oZKy4wL<0<ewS0om~XNJT53hhzY<ol_#<iw
z2&HMnhksi9u)^w!`f<OD7rT+_dZUO?Rl`qg^))f0I8*F`l`p4Hc1lCW$C2Wlfe>#Y
zX8$#>PmaB#UUH&P`5^T$-u_IHD+*2UfIy|I@t4T!!9}srYquC2_frL@lC~u0_Xb~-
z&l$xOdEfyqc!<p|=;P5f1f|~595nL2>GZKT2W<h^vo?RJ3O$T^ho4hYXrtGdU%;v@
zl3OX?ybjvwP7#&T=zsiNMDv<UbMn&n<|i?!Oi@k1^Q#X_LnQ=<n(Q4p-*1Qx=G1g5
zB$DJ@@Pjawnd~q?tS{B`sAmLy>#W=2Y<>?Ccmd!VT+(Oq9y&a8b5i>?)ceo11PT5T
z$vmz2=2$cM5QHDTG8V*#<!2p|-bb(Q_c0|3S!G{EPRo3dc4mGI&)cymu9|F4u`tCC
zYXoQLI|P4+2a%}TM;v<oxBSIJ<ZaJU?mTTXPr9zR!xVi>54Setj^@IR74JO5hSO|$
zz;f{0-@mCd8>$zr&qE1MAH5d}eLQ=Y9vHK+OkOOvhvIrvF>j<E`wOgW7;xFzF~Qan
zN`t}3jzsEqihNqpUl&f})9`g`sAwY6yYc=!y_qQpa}DkhbV*Xndk->6ZnNp685s$(
zG1~x^Y(GA)IJu62V@HTDeIE!nq4f;!ex%TOX=|3&(wsuKjcA-Q9xj5kI}NeCQyC6V
zh>Gbm{|^4l%SYO>ourVZ1P+X@!a?CU)Mip9KANz)V%CvX)(N~)E#~zfPK=xPd#mp9
z$baAXDNgJ(Dnxwm*UpBZ#?<aj=rF5#2sxmq;q5LOD$jxEYHx`f&^rNjF_5IHK~T20
zrAm<XWV^fnaMAWG@q+~E2#<eWP>r@z*(MGJhZimImj2AyI2s(9a~;F~`JF(Zpu-}n
z1(AP_bn={&;5I2Hv~Y9BlJ&K=hxbF^z&GM6pBqZ^aSBea5gKYyev~>0>pma7&34&5
ztJ1!(1+FbCcs;x_h(feOG2h%qvqkNQIy!=DVhUn}Wp>$%q{Z$BaNQ_Wq`%K__iv*z
z@^7ztednYR3~52Yjq^nD;IeqyAa3pij`m$vTy3qAtoc+bJ>VUUd+Jnu$p`q8y-x{A
z*?#wyOe3M+%l+oiGVrpHPWb}Q>l#4a<k(ZEyl_$t(F;~EI!SJQXPp5F!v=lobL_h2
z|I~|q&#eV6h7+dqNwJNUWtFl&hUAzklv30Sc_jVa41zoO@mTfcsG2d9u5|F!cuD4G
z6!LH6@bccEjM+vMrblGz^Be1`pQH4plF?ge%I;6}W)I4BhmkevY|KWdkhDLBL?GN^
z9a*nh^uVL=637U2>Z9YUnJ*tC)){~#?bN7Rs$_EF+oSZ83q{uTiyN2ZhwyR)wcrv5
za(W8paN1yxAR$t;#c$U-MV`dx<2!-|T%JYleGro|Ma(ZkZqng3FV)*wyylj0=s(G5
zHVxlduoQpfw!PF312xCaX9_l!S5xOkY7N)|Mc+$8HPO6x4bsvJpr4Yn(wIX2PsDPN
z#2))BD~A{hggZw@mrk;~As85Ob+y}2pLG)XtM1aX#o3x1D*!@x=1J*L7ImGDG2V=O
zhh2ni%6Re(CY<}*s`#vi$UJrcUr;*Mkd2m=$+0EvVb0*hkAyv$BQ4z?JcO7`imm=l
z{D7@KXkt#qwd16xDo`u!`J<Bn)wlKTwg7f3JHJ1E9`Le4fHs){v0_A7JQ@UblqoJ%
zPE>)=VR~zvw4UETb0qFQ9@&5o^R<IbQ6>c9Eo9h29Kzf<i*}tVFc$Ic(DGu9Hsb2h
zvup<lC2D#fZr%kOeTtlw!71+#;Sv1oA|hWAv(V6gjXhH?#c*K^O2-O+rU|5_-;Y`*
zQfb3~4^vt4nwZ9;mt{H4;*kNeA~D&SJBrOv<T>BV;<*V~Okng&UT<_fIc@-$k5u~j
z1NW8=ou8i$!@u~}ZUZJ;yZw9>csxpuZ$Uduz0PQN8Gp}gt!tzva=)G8MH7j0bA4=Q
zDpepWaGrwa%zdRox4DjSIQwJhkR}{J=V+XZ`c@p=G0&>l7JWWpdN7%PIN5vcUDWmy
zS6-$L)=k_;EKDX$?bl+<61p&g59+nL$~bk0j=2T7j=tDIs&O^?q3dmf=_GC14a305
zuftB&?PgKYzOI)lSwp+3zuKvJ;vLlgn<A|iI^eH{3KO*Zw=9z`#7LO;xvfUOET}f0
z(#uGNS1S5vSE9^bN<VEgD`|`K<`h%?c#RT`i?6?EbI4>}f`5mqa3c&LBJm#zpXjJT
zvtRrx(#E(P@bhx+EF^E|Ud)2R59-W^ackOKkK|W?u%44BNVy0DIO%=W`0-SKzLVU9
zL(K1IFUfDr+^i)uw;Su7T{3$ES^<I;e{-mNU4Ali_7=bS6V89tj1Sp>Uhp0RLZD8T
zc+>>ZMwAj)8Pg*vHAN~y2H-X5+I~|ex@T8w?=})+G?^#i+yG01i3w4LhPfTQeJph&
zD~)}>hYFFTO*q@$VICjSBXa|Ru{)9GzavwOu`R7%4SJHR=#$wt;5&i}zbo&)R4Xn1
z%YQ8g%uI!UdJU@g>gLTlauU<@uRbo5W}7j+2e@d#jK&;NF*UAt)Edq^#%JI-60@$u
z-q@py-7*6P-FK~YSB}A%sEh;Eimv4jTu9n+yx#B+L(t6Tg%TW|V!8tEXzuAiyrzds
zi@H8mfSi;kTFKE7WFZ;#6K7)TYGJ>AkYi0pr9qX4m1Yc^fuAk^s}`+d!w~6>r^rH8
z81buiia_qX+n!6wTp{3|NHd9;t>HIcV&LQJ^bI(wx0P#qUuQ^O*`hLFU`{xlYCd@e
z$80G9wKH3MLBda|C08&{tSDmSmT?FFb8g6j&|j`NR`+-v%zAu$>@&HTMI+LEt-!!!
zqc^)4<@R!+Q#4DGKgGJCJRbCF&lvk<_P1>e?-8VP^}|`~^5*j^le<(>OqptVLT6YX
zM#u_xzMB)C5O?(l<(N}Az$fvlpvhR5o6csJo2!TE6Q8qWi`!@14p|#s^i5BuHLE<5
zxiLm?JC4XAq7l6gB_)D8G0a3r3$lPA!#++l{lYJtD}}KeFH})>(^B23;TEeN3S*!A
zaPU_y(%~K$hlO32p(P2?Vf#SNLuu$FQ0GoVL~!wUw4hG&s(%SnR{m&G)8L%&e!imz
z-_<;R^SbK(eQt*3^#;RQtImrHi8JgZwL8Ir9a(9?0F@hoi8qSDXuM7wEA5g)R5b{4
zr_2p$q*F7T!Kg4pV7mL|;Sm3gb^5RaKN+Js7}%sC%+1PA+t}!1BFezM`l(K`eCQ~F
zg2R+zq0{qdVWhb&1lZ(^ka)?QL#%DneMXMKOR?9q8kpvBai!RI^xVCHevZ}WxruUF
z9VVlwQi)8qwW#Y<a(;~W4G426mYwJDsV)*p<J`7Nmffothn{MTKCzdBgGTeJ?C%N*
zunrWu$5k>bSxhAJcQ7A;E0#PzAaCLbX!wPs?CKg2)GCI2_YK>de`QZ2?Gk0v4%nW&
zpp$)`pKF_-X{#X29(n)u$OHD%s+dL(O&;0NM9(Z0vu8Yi+$7zSN9g?;GW1M~_7N()
z@9p02`cKttS;vKK=5X8Rowf;FgR1dC@Shy*0LeS2R#UGRj-7W^frbkebp~bLpTR9W
zQW(%?s)Hr=@bj2)b+dPYWt2P3pkJM{Bq}%4oVFvW?Gn;w4!F{=7GVTkgwJDbpL=#c
zaDDqhOO=1b*n4RKc4I2aJtuV`7*(l;(LahUz|MdP_}pKrX4##eZu~tR0f5IxuOgcw
zRM+5J$d#%KaU)OEh=)(WO@O^Lxji5{!66$IZSGd<1M806u{DlSobvS%IS!AdZyy_G
zSDKWHa)gik>bT61@<rGa?#EVBE8J?6@kPPcGNFtsvl^W}<$jxje(gJ)^fgTX>B>6b
zz3kOzLy$paB&>W65N83qNme>{4o_x7*8|`7k~~LzI15SSBoU$}+(kVzfF9_6qMm89
z`Tha(N>2d}@St8zLbLcsXWAFli}qLPqxW%-5c!8&oS9g7e{Xr#^lHFrFo^yDG?s*@
zeb_vr_x>P^)T*8}_o?dfQ{y&l8WCPr^*U)JLv4z2oBcoVNI&O17pc~m_5>%dj!D1;
zd{X_?&b?c0qn0WsqQ^&B0Hl4gjv^rKqF{F&y1K|GnsI$C7ZB-oxnpL453mEZ1-|Ix
z`FcgYY*r;+kZt#4lJ|7@VB2_hKf&11yZIaeVwqu?{`eISvc0Zw8D*S;Pl`;6twK<1
z>}t2&*6%<qtnac&9a94?3`>(LvA+4C__^*oBG^j5XfB-sXet=S%!uSg+6ILh8_5x1
zn3bo`&UY0(p;)!Mx5H)YbkUvi$DmL>rEXtoysUxkE9A%^y6kOEGHD=*K$b9pn#$!j
zr$W|+4QhPIU%}C>!!NawKg~ZF|M+FZI~vC$j6|xyOLo{Wc>Ur$IN1@AIT^n~+JaYG
zXk6a%t>smDL)mw^4lKX9(=3IpR3#9NY<L$nv@#SHrV4@BqIfux-N>UUY;g44ZZkx=
zTE!O;sE`GDAXY>f$;zytK(DSiI-ORWeK0F;6^wNvE9ZjR-y=nK3k4(zWWfXYF79`k
zUvf{c_1ywrEtYb5AG?FvAY*|CSR2X89HvQQ!MpFWhA9AdDxrv1v5I@Zz%wACs4lg7
z4|LI_(5_`YZ?Z$^H^m3a-g4S=R-E#Nn6K8YTs62@6Uc4jUPfY~V`YZ@)AfqI#iS6M
z+|NV64UH$59?4%1aX>uO1!o#qqiN&a^N@}07FIr)EpamZD~~@+^TT2|_;kMA7W)jH
z&Gdet=*X1T?cKh@t%*vAA+tRXNw~ghCC<&BdQYR|^l6nO6p{1Ps?dw+VHkX+=|G+8
zU>^*8{JXzqKKU)@Ry@Z31NXACN?YgqLANzF_<78Ze6|T-*-n(Ra>vcN!H}cds?dbJ
zaVP990@)Pl7To-sn(ko_=L68&Dyy=xBy9!oY=-C%?@r=S6wC-Iu}zh&1D0?6RTPk8
z3c<q-YAm1OP~n-t1-+LI$&XDy4Y4ut945*9mTzzqV<C$lTChGS@4Ct&F#H8)9b&Da
zY9BMKe>8Mp=t>WrYC`6u&bdj#Y2g1QoEsKVrX`j$gy;PN=;;gGC*Qd4!C4apDsbD2
z60Z)|v2LDbT^GCks`0msO%<6NJj)h$jfdsZvi7y6gBXSwJ@z77ec7$7(GR0<7g0X<
z$s{sz%vpI#pW3ei)(|f(oIO=wMYhY>i}MVqCfS-=j>krR*Hr6MC>-6!Vfs;FuyG$G
zL7Fd{k@3OV9cQ)Hn{yW%)Q!7~TaS0acm1lMv?<FpRXg-ieG}7RC7%4(18H!Fm@+Ji
z7QCTT*ro%6D_L>2M8(en<QP~j<jzm+aCg`zcEkb&`JB3)7*#5F!A$U}K}^Za;fDDQ
zXxbym9+;hLY5^6<35FWRmTNapOI#gi?3PVYO{mt*2@aT%x7f!Xk6WAVzn?dJ(%LNZ
zbvY6Qo9oQZxwEcZ4aRO*x5p?lrB69!EQG$>wH9Rm>gV=82^GloZ~dHGX(vnLvODC1
zBuTZ;D6Yu*1-n&s_hf>}_ELt?r*GWrCRg>Xru<JI4!Wg-68oUbX&WuS0A;l5GCcJQ
z;NB<#6wNa{sl{LS(6%gkqq*Y!;rS!ZCel~9$D+gh5U1gAN~#!8v?G4lrVamryvoft
zwvvQN6jnMZJM2?ixPRe;0+~MO*+`ft-`oyeoH__w@#68OM~z#NvN8Ms2m#H=T+2R^
z={aEp!25*82eYa9nd)CEH7S(du?N8{q=68Ei(M8+kzV^TxeU23oBDizg3W86`kpx>
zU6U(~TC*f;#6*H=#p%isx=uq2N(Su+ccBgw?0}T9`I;fSGqdq&$tx*#&dwa6#<6zM
zjZoUg-Yb81T8u?-^~5kr%PV=`5BX{oWprHmkR8A5LUqSoNF8RaF5gQ8`&B@`3yxcc
z(~fnX9<z7;rx2Wdd48eJ6YUc(UGIqUzf|;n0t8gt?eO1hu>|uu80YdM6n9)vyfzp*
zKj}|x{oA@p`y-G)r>^NEx1b?16E@{rt3+7UbJTE{K0<UIDzW5BJuRDuR_S%*tv{ur
zyiNCZ$a}Mu;J>ykFN@tKej<?-3xlr^ntJ%_P^2v?Habrj^E|kLi8-fU=n5d-Y~pmG
zb~dxlitWwf1<1?`8hPR>IgeZVUahUwM!UEAU-EDK*(}GqTZ7L7-n_m0kVT=q{XD#+
zMS>(6G>aZ<Zyy6hG*(3C)v|JYC3g_LGIPrYTK6vb{<>-lHB?**RNznerUfU$QhtbI
zuzkZcDkrTolBe+t!<sy@r4xAqhQ*W@WQ$zmm&T=Hw6IRIuwjZmX=6==8$`9^6MTv)
ziP51yLgwb0pDo^8_yW*-bb%jCFHy@40zOP^r9PNhW?B!4X~j2vZq3&Ynu$78ev5l>
zX&0F^;P|RJk6vsOJbl85CL043nd{A@_4;kgq+8^7F1bChPu>yL@m|Owkh6j(#?s&W
zx2pRdaqc}st74`%5gpo{Qa=C7OdDf;QIb(Ox@zY-S+5JqxB1%Cu{J}39<Ia&oM`0U
zoa$_8=4c5;G+P@tXbz0fXYMSI?wn)4!>3m(_L1SAjR1WN(n5n&SwI#NXD{e0_#3j~
z@#Jzs#_&?T{i-3P5jOOaFf8s^AhK7`T<VN2%>^J!1&n~(n&{c>iI<B|;JBTlRNa7T
z?YSlDzLiPdkA_4Cf8V37?z{aGu%{1qP8<Janu9P^g_!~AUi0x7`Zh7{CdDVkJ;`Y=
zb}hhKaretHpjgqDhnfTN9Krax_qY2$n@}Z6TWu6aW=^wetoQ6PRm0y<FZ)b@UE9=y
zt7ke<D#B@B(OO;C<jmz?!t`F6xrk`v!9lOv!w0ZR@nnJ=9-azrAwe!Z$<1r~)@#DX
zW$IAr{k`j=y(os|uWv5In7Wo5A6OBZDTo`V@v<I97gxYYXrs%2X2(+g;0R#+C5_Uj
zM=c(fI4KSNhE>4kzV8adLLpd`pHsq7fR;>iIcm)+<tCX17+&4-&1;PxNN%3{?cUsU
zeYpz$ktHlF^2H5<u(Q<>k+YeCUo^^taXMzJ1TV^aziCwpq8|9lTJop-Ea3!Pdw^$y
zT``|*rCfde((F?Dg@#Q2)ULPLP`$xn(WPo3;p0m7e;ik+u`0>2dCR?R-7U@$>0RjH
z;>1U>QBFjCu)rgS1QFlq4LOa7$IJGU7aujG`<x<+-fO9C%vU)Dx+c%e;Ij24p|~7h
zF|~dx*Yyw+EF2z%_guf1F5|kNb>~mfW8sXW*TvIK3YMoFOCit&?@M}FqO5qQ(H`MW
z$5f(fi6w+s1|I|uD$%ok{I^RjUA<R<Coz*AwvsYfik=eCP=fG^Jh>m=+<k|eilRen
z-a321xUOL1o&p7hrvBc_cN!zNxQO4@<K#?R4jJ}?;XS9FZX~Qy%eoP|-4Y3SVp|(~
zTP8+gyj%Lz?iVAs8{@Q$_Io{<pwr^&PB=|7258vS-u^eZ3_aJd_aLTXAKlo}@7)iq
z!T~bjn;hQ-k*DmT^I7%ZoDt>pU`;76NI#8dVCe^kkFs<>QToZn&$vQsTu$S<B6Hs;
z9<DkgIW`u_4>eDsqlz=q=pCv^4$IJkGA5**Z}1#M-}<6sNP(FaKVo$(MPMv(H8ZDW
z;gIaVs4G?VrsG#0$T4B&Ex6X*5K)MT*!opT>afj;XjN6#U`4iu<QnWWN`c34Q$z1s
zKmOHlGH^<t9m^v)weR?7DF}8Hq%=^favCDv->3cqyjL`xoa%l-b}OH*68mFXEayyn
zD10e88247EXVb1`R<fc^trgJf66z|as_b=Lfo~-Gb9RfVCT<2#!V+;OJr(F_VDw(l
zVvK6h{GMEMGpH}7gh(ThFCHAth*FxyVv>AuTp#y(PYHW0jJJFo<6dao(4g4&l`esF
zZ>F2v{z2SOq8?E!C50(>PJ7m9N1b~h-_G&m<yV<X*U>yVL_1+}C(fpg<Tl5PGfEOQ
za4<r`!mpslwUTPxpMG$GbPL*8@sE5Md!zXIgrzO}Yd#|wh0%;Dy*5L<x(CYnK#A^F
z$G^3k_5-GVdZK7rL{zao5|#Wm5MKbnIk_CZL2Z2(R`i#PfVf<PD#}l*-rUlky!n<k
z@B$cy-}wG?yD@T=_cmjfHkB)M{rLoMBi8=G>Qf!0ILnuuZ@9ur(|f;yiM`5v(x_7q
zxD9PAH@UJH%DiysZNGki*5|J>Yj-4@TvhXMTH+iZ-ffi`U~_`fKwj=_xx&y@XhA=1
zwS(sEd$r82C-r&X<c8F!zfOvDi4>$0Gmi7lIO&@-M@mR3sd(vUz8@G=_k?PG2+bL)
zqJHtu(39-;M=Q(6d;+~JZ&|N9Nw1g1e|`u1H|=VAEiFR*0|HP@;yo(>X?g$}U92DG
zSO=`2{qjQqp&%<W<9H;ZcRuM~{Ue+BX%BKClaHe*C#1zMDrW%zN(qDM&$2Ymv&NrN
zLRT_BzYc#)G4914su=ZF{nZImoH`7qYx#ypFWZhI@74lae6a1lWfTP-B5}$yX>lLC
z`aVTf#etEFU!)!8Ly(v?JzsmYoYi$*kI5cbJ#?7EujnCmykG73;&K(Et6c`O{^e~o
zSIcg|NyLbjqT<)!Fi8}Uwk-`vOTrrBd?x{JivbSCzE^D^A`P?o1?pgCmH|nRxm%{@
zy&s<6_ZN_fOPR}Qr5l7%=z`NLv&Qv1VkbS=9DdFpp&5+#!!|;z<er2Uh~p5Lx7FDf
zTl4CNqi57pMv}<b4pDNjM-W{#F9|?uCWBH6D9y+&JsYOA>uDoQ3KY{(5|0V*!2*zi
zG>L@oxaX<L{wxvF^V^gM!_$21L}Yx8Q2hP(pyV}IUQ`%;mO!nOoHf2h90V+|W^M8K
zRN@9dQltR8+~TmMApO`3E2{CZ#$~Cqa`~uW;%()b{CbF!ScX?L`{8Re&AT$_9tM4w
z>Imt2Ld)Gt*+)={b90(BqE%PP3QwsM@XpC6k2;pyTsP=?C%}t~uxp5NLwJ(bi@Uie
zCG3pL*Of;~*C3uB$Q{ITNP;`h%L*TPJ&8%jm@mDgLoeTUeV3rastS!#l-$v(xJb;f
z!asmPQta?ER`HWW+UXJk{C^vM3TEdY3Z^lexL1#`1-6eAMDl05ps0|H|9lEXyfdZn
z+`J(S{V{AmIWCC)O#bO#_c3dON;|R+W)?zfSdz3qeMV~E$tyhz{!1}@L;hlb;)DXV
zb|}}60#=oD(?35ocnC*{^`W=(ox{Q~A|w&2{~*-`xf!VB#U;J6L4l52!1A275@Qhp
zk-)fZdu6UAPTSHL?S3~E_0J0l&B8b_zq%d?HYSXobIIu(^(GfIpUMu4V;djjRtN1}
zU1laMD&Cp%w5Nw?u~~)Xab|mUGtSb6iVtA*z3|F4?+@|z{XHRt*CI#f!&Iyj#GX3s
ziKE>oOEeC*rl1v$I>P&dIc^HdFOFpXqE{j2b__I@+vvVr&BWs1dN#DK`w3N%t24eS
z_mu{qrqhOzPp&n%iz{1J!8VF_{Ytu9VKyatgqQBjU%mz3$gxkY8p5T<iw(wRAQq{d
z&VO}N^N%in5sQ+M>yfFc%jAb?5|{W4qc2t=p4uSlFV=wlxe}-#DPI|Hg0~hee!_?i
zaQH>(dzr6N%+QNQ4_)aCC+>yw-NI3V^oD?^fwl@$#atN-gC0G&goS%I{Jb$!U?^lH
z9Fhq=JY4cs;is$mtv36+Ld0T7*Au1Kj5?2YQC2wy{k@(>VV+7(%08ETHH?956NM^)
zfCm+~^zI|wee5+IbVHnxnmq7=nKckw8^K2=<6CiT5uOZ_wVFgC7ARJ%30}UYPYubx
zO3dhP$su&}afc9kz}d@r&N=|`*32a8_{P=|PF?!NA<Hj+GE?b=J?4Nzvpzb(mpQx>
zNdeDLCv@2Xrg2T$2v(zAt34?~bS0Ib7omZnEd#p)?I}TXTxTGhN|d;#9G**b8V*}j
z-|F}2T>is-CL-lLDX1EDv~2L75u2UnSNi3A*op$KPdRE3I{HAL?_SRhU=ma#U$K^(
z2lS-hh0%*lG_sg>u_?dK>?Ye{*L!oHXE318fiKv*(x=QehkwaL*J%@Es6S-iVQ;ng
zQzg6~-HTzf&c&xb(g3?m=R}{vOd`h(*-^dyyJZWJ=dQpMq{~Z{8h*QCboYUxoL<T0
z<w(S@y3zo=(#p@W==L=Q6%|e;Ka&t1zm1B%t)m1S677#4QT@In_f|b2MDr>0XOUwx
zyS21k3pf%!TlHmg?Z{f0_#+XA+NjDmAI3SRQl!F1AAMhSl`Jk?LGkrb+@?@ee2W_&
zigch@ZXwR<AvK2Bt5QV!Dx)~6!t^tZO)nqzq|i3yV}@7XqYYKQJ4si2+_nC`rFYOD
z)f1{LyFO940897{9-Bx1yQT1Cv)tM}$&f3lP|$5{hMCN9_9&zfQ>5RuhUKbmN=Wkc
z;8(TlDVI&PA&r`br#6iXXI>M!lA6|py58l#1;wkmrVTv2<)42B?q=27c!V0a3!KO3
z+2k_=AyeqQP`S~bk!0%UkJ7ORr0s>qmmMf2CeE%b3UqzS3;7B8B{<32hp4x>!*Vgu
zbFECj9rNF<$M`qGn4#ZAl{&aeKWLWUTB>6x3-wP(Z;Y89$UNx83Nb2Ngx|36wHD#h
zDt(06kUEjVrDa*9Q0x85R)nb_0I$8{F5_bz(VH*9g<vqIp7dA#1gQ(B*As28IVcJ_
zfPUn6aO26&{oYmKKS~vD=d|yNUXFUf&NuR85Fl(|`El!)5TFB&9Z8fjQ+3L0Ls&U2
zO-4xbt)bSN(d9F_p_hNUV@?2ieb?`Y(Ue<IQ?I)Gcfw1&2F9@JVM*+R%tiHGMgU+j
z3OIQ1UMt#|P>z1R6kD@jSM@#=N8g;4eG#((FG~_4I)l_hO+g`1J@7ReLQP<+@gu|7
za1O1Rr{b38icAfG8u14mmT4{2Gt<$bH{)pNOAI;Mvu64!fQyYB#K5|;xIf>;HCfb}
z;_LW~^4{}M;<QB;7UKD>LM11YV1@OcS=3fRuGPmJF^kWz$8vA!x5XU;=(zmfitx#R
zazE8g%ZW~$ZK=3Z#QP|N^CBlgKGfJp+^Yr%c6`Sx${Hj@WmXNIiTYT;6c-OGkId%d
z<%;v?YuY-TJG{T@ZvU@hdNr<^cq_!!ikl|ixa&5fz=Zb0;flvE87P0>tCz*uHN8H2
z`fXMB6;<IGdKMdOd0c~7Uz=S_>dhX&poOk#Zt&8N->Fks&s9v<OHF)CPf{TNmB*=1
zd3s*>?S~o~IrOAmJ6ocezl?m#wie&QzjQv1k&X8VLt?`RFx=1@ifJms)N6|U&Tevw
z>o5*i1<c`H($5)&igndNZAdMLe=rl?^<E9j3trMz!H)@D>}cl>rAc@WDywQ*lU`Di
zOOSsrT?eYX6X@QEZTT2wKuiGSNK9j4msFz37cL{BGJ!>{0X#DR*uoWE`$Z28LnEKv
z#24oTXLk?GeFL{{p$-QRaj>~1LqVEK3c)4dQN69T%q@MSgSK9^#oDZ5H~s8o4U-zd
zZlhO;OUhhjqOlAKGc7Goa(VcDf5{%bxZ;=FuCBQ7OY;2m$DX3mrkjDiME=3|WS0Hm
zp`(SSn>@z(YBA8`OHPJ99Ov#BXFc~uf;<AgL`1MsHGS9Lf|tS4?M0|Ys-vGBk>K)o
zE#cYwqw*btlufUK-kT1*No$T$?y8E8k{>TL|FrifaW<7#mL#-%qu1^Ee7dNlytgaA
zHW%^Ld;o=s(OLV4uaM=4l&ZqJFz>%uCO-|15dWM*lPZ9vm#r*3&hy?vL`PsCL3BU{
zhh-oO==<Kl<uL^*w407Drhi5dhgQ)|qpYh>^i|rZiV12}hAjRAU+MF+f2il)o|pbu
zFCDs!&x~KYmu!KVPSfs2duVUwxbxnR6?cC+8ex-nBzZVqQXGz3&b{r`)+ZraBD2Hq
zLSq8UTLf)dz5wc*TFN0lKL0D*Yy_#dVJj<EtLUzj9rU2*5R-6lF63Lwg<DB=fQtuU
zIWxAPk^3cWr_nK5PUoz$i?bqDkQcN+lcm*)9E;0~8k|a(mHUt$>GX`2%zdTFqjeOz
z4cK{jLm^<60X%jwz4@otl+WLy|0&SR$#iKKOZ*6T0m&A&CEu2j!l8!WBVA}9aV4M$
z=7g+dRLiQ5&6ID?NsNC+N}$Zi9Nyxl#r~-n5$2~1N7DVP>w(s<IY(?Bne7g@tmjRj
zJ?E!y*VaK^b6)fp6_(%{SW~aJ%3b9(s7UA42~nr}llv0g>-F}5c+8O!Cf&ar=}QNf
zO-v<Y`_TkF;}xr{BI5N1j|{(x#h`acsF=a!m1IVp@K`^7T`O48QAsi|wrppxFGJ5d
zGW=p0)0-4}xQy3l70?(-k=gJ5F@u3Er=fl2eveyJB}LoHh{WtDCnSBQt@UvlN!wm9
zQ6lWUn`TgYd+o2wwI58HskX2g-#l|~2q~8wd_oW|tj?oKku;$^eJIUynME?CT94rI
zRKkf$c_dS0%U9f<&@geLfse{x+4p|4XEpt?u@cQ-rv3*@gZYjbQ;B@_l37Zho0(IP
z*LGtLI4USdb&@PRg#zy{gUJla7y`4^J5x;}I>fJdS!)xKDQ5q%k`f^I4@-sQ`}v1_
z;o7bpFB<N4XiZGQB&qcGWoSv3o|H>vE4%3`!+TobgE03}BKt|0_&ITz?^%(|9`}rT
z(!_Dudn^i>y<GIdY8Dv%tq2KG7WiZ2q|IjCJjw}_(pHfMf=Og3;JfsT2MsS;9;J`@
ze=DJdZ!(@`2ZvgCZ7ZlWu|!!rA9f#p=!dP9e7tC{tQi2gL4++(kHt~XnRYQwY;8}C
z1lF!VCTzovclCccRNk0{PJdz-81M84N9LNee^$aGFeG6kBp}A$`BGH=#o7}Edpq>r
zHnbX<RkvEj5^b0<Sli;lVOaEY1IsvGuN>Bd4an(V3Wut2zjFI|HgmRv`iz?d!fSwj
zQP7@VMejt$jdfEm(p!|t)A_Df2U_l3>E`-YLUXi>)r{FzTCI*ScXj>$8b=h(S4%K?
z(Cx16^MQk5cc29=fu*c;=jAQGs$s}ZtA@x`rZA0tUX{R9PFXFZiH8iR(l?w_2i?HV
zY4M7pZ%OuF3c2q^ICc0h4|%UA?&5Wn1UXeX)PYi|8x^f2p)?$M+N*S9iTU3+2UoAS
ze@mzZRNBc3y!p<hoy#jfbZ#^JN)(|g_jlra#r0GP;S7kVJncP973DQ#m!kkhn}O*O
zF?~LFfOTEPInmYR6XMsfTM8+o(b}CT8ZL2kg|+X$jUkMb^pfO=8i6PK;+&>}R);4~
z!_*tFY>CED9nSIE+vfJ;vgje|UF^M)6o9Q(B3aCzAdWjCa!5Vz)hkZLnuuoq#Su94
z5s{s9qakO-XYr1kqU@jUyLqsg_lY3^4p<-_ZbO$VW}xfnH<m+Ba*A!FHx-;sn=4Q{
ztM1iR#mN_%67)PmwH4PKy@$>ue;m)hTP{)#9HgR@)|fed20BN-sP%C32OIG1s9;h!
z<qIMb)XWK@sc2=$ZQQK1aBT1kUb{#@pqI}Rq&eh-w7VzqcB=f0TSUZls6`vx+&o72
z<)*k1e=_AO8<Aj=*=NK!wzfhqDXq1hPX@Nl@EU`)DQ`?nAHqq3hM#YdwiZ(JU)yIn
zzwO}SDCR1&kOV+-q#xUIA<fbMel<;mNma8}!;^9S5oF8}+)Q?QFrZ$0IbcPis7(`=
z29t*E!B57Sopb14;z^Nb?5qbmXSEu6;Vq5bjL=t4lU={A$#U*ibX4=g0{;4U)7o0@
zG!d88RZK+lz6)1$EQZq>_{HiPIRaHL;c<*9Is13>AD4F}+}wzWs9@|h2o*70OrZ~d
zS8&c$`w|30qr$C}8LU#pli~yZ47kSNXq}k$tS3{7!~8CdAnLK5mSLwo$<ulAvG!NP
z3T6-oW|7i|3y0fUNZ_E@5~JGEldS+H;G^V`w?78u;`8F&%^)x)hJUGU6PozpuILsW
zDaK*})Q#u*X*1um=<3x{{^ErmU{eFW#_XLj!q)sl$?%PC;WKkJ{@UL|%?nW<G$X+W
zmhpi4gZhQxCQ5TF{KvA~+=B_IBDy-3!U_zn)7Ri7+!O$_{5*$ju%2I}ndsj*(XT9P
zx5`?Npi}}#28ds;3=@6oqCsZQQXqF#xpUoNxgZA1ZO8!?-eA6SdM}Ljw#KHR>Aib!
z0(NzQ`PxN8Vg9PP#@z1$;Yjg-8Q{47nxFzqt8salp)jcoh@RB$0SSkNsP{6}gLmxu
zqi3BvNc|aya{L~RjpI@=2aBE>*-hb#of-4K<LBq{$nobJCfdoD%jbrdaLgy?3lQ6$
zSYr=0Jk23VFaW%ls^DeaY(wP`62Hr+%T#`X8|$pKpctdE%jNixCu!DTg+Oimy%zO1
zBBQ2PO^_LVE*ajSZhQxP2RW`1LzaqH@p}CkNySw^lTjg0#!kNxJk|b8bz0WV6f@`J
zP6g>ncJKWPWPw!b0LzBb1IwE7iPX(VOcw~2AB!fV*j~Vlc7^)8pWPT3@~KbD&bt4!
zr!HSu#i=q7F5WFKY@`gnaC87p?~zEqw=8%8&iG1G#@fwk=J=_?)}EOzFuQckDg$ty
zhc4-)%Sh{JG`8;$yxe)*zGTnkm8eTutFB19px`1mQ0PadbT4`S9{|EYJ-^^O;FdLX
zKT%`^<PcC7j4DnA@gZ$3JH7o$c^$f+4tMtYl#Zdncz=m$12;I<rO>2E07a`xtr`$D
zp9j|sAC}gkG6Km+OuJ2xG*S(<K`$C<9}$rA5dDcLPN5fN*S=X1&KTjA6y7@mU%XG4
z{FXBRG*}NNf_JN3aA@Kdj!)jq$<>!&RJb^33;$WFkMikWk8l2p;eAh7e)2;#j=W_a
zw=jnsoP)_(sGot>IXL$U?tBN^D$uM7-BBiNg~NwOv0u%hCR<RO*=>4iY>=n6-gTuH
zcpPt=x`*sAsJ$_GYTIXK9R4jLnao@$R(Qc{YZ9_n#@>B5VV%Xz<m8Q%l{U26O1mpW
zk=u|qM)~X#U_6SL^5T}D=+RMJOYo~eCu*u01uOX3kd7sHDA=<0KNy!X41N~1ghDD7
zr_qPIoq^b^ef_oJPO1!#Qt6=LAu%_orlFR$@{-V-1K$h22q@SpRK}n>0d_*DPC+^j
z)W9VYKGrEN568}w(OnU~YYLoC;NuDWF)KV=gU6>KJtS0KS6T}a6hsQhou{2y4vin<
zg;URxjHc_<TZODz<$SfuZ?1S|f3eGt|9F#!zPpWkWdWlOYKw4w8GU7iWHzIF3Z8mt
zA76iIjIX@9z>C=`t?7yWzR@j<M7~jYYFBD5%37Z2&J4lJ?$%S=7M>bg0JY8ee(KQs
z^-AB(C8#ghJ8~SUKrt$GJak*oX+`NF6mLW1R;ph}oC!4&1RH$@#j4^uf@F$Csa66=
zV1lE2HxH?#TTtpwpdz@Q_7y-%R1@Ox`j9kH-@s)^e@#lUNw2|aYbcTvKfL#1>MR<i
zx0E!2&UqzYh!X|{SR0Op??Lx0w9j}{6kCVtgixD?bOx$>gmfHaMDRBHH1x-`0`S&>
z-%FKSYQoLHJW5`HI}a&KOM(_5jdc<vp7u1S(4rtUb#h-^Mo&%SF%{;;^11OEt$#hs
z<eqU(+~2~__K=$5U&^rOt9<Qqll;3+d7kQ}ELMbWbst5;QaHK1Owt=sPwgr|O?OT~
zSFasUZHFlxTL-l*YD>x0-Qmg$J~36M$ERpc2#adz^`Z%K;c-4l5RpXYePXa0#3OwN
zik4Ee0?#Y8(5xx7QLw2+6|!Eyqe{(#fmSzAL_{I6&@1nkav?`eh9(aN#9Uz@C@GPm
z(Qh1-^QTc3w?8y5IuyMLHWvO}Hv*<n>IcB8C7+MO`Zf%*IR(ue-P6!Mtzd+trley~
zomMLQpgIHT1eg(^86v?X8r1xwDvaciwG}CZz0;oab;H~eq)|qxS`o&Z4Mglv%6(}C
z-4cw9Dl5H&=jvnp`hQvC=iXFBv`w*?k)HAV!Ke1|4}M>HWwg#}+6e26sk`h7P}@#D
zwarjEWCM-5ZP#Pl?Rsk4z*FODKy71@qih0zjWIZ>GuDL32E5jWEK|}^AGu;7EGvuh
zt|ervo}wE_w-qCdRfXmVR1%QF&{~A0l^(5DMwU6$Sei3+Mh+UfIpiv#_>YDlO@^h6
zhB}}c3-mgOge0b(X1G}pL9L{L1R`z;Y#O_?!HZQ;j0lN|>$ggMPl(b^f2l)fu?5~?
zj3rG{(n?CTUZGM?kTgW7McdO|_OxCFQb?Lmn^dY(LS<U1ObE$XNZZ@pK-@hzDzwiD
z<NGrXkJZT9mc)9Dfte9-zK2)0Vc$=U9of00$(K&9^6GPjqqip{XIFXRizEEv<A#&d
zBeaU7zs`PN<_*VFV`o8a6OGYi<2+uu^hnhWp4z5CZ6kNMHJ>etv5*(Sa{CO&XO1x5
z@|<51@)eLuq=vcR#i==nchnPT)S%HcG!la^ptB5%3kCCwEmpfL<h~sSevCm$$$R6}
z#>PmhLS8lo%I1K^i!G*)>ILJ2nujT;3S!zh0JtGVk0Ib2$b%0gOmx`fSv7Pp<LBFk
z(3mv5^zj~xr{*xW8?5zI>Gtb%DT%F8snlpR8dRDoY1LA#1S1x|s&v~z>vX8!*;KJL
z&@@Dli3(@Ogz*mC`u)r7J>6qU#>kAp3EaQ0;A7u>ja)ry%BYhKi9~v@obzKm^K8nI
zJB99R1^?=^O<o_b(Jqofja4>KmiP|fsmbLg6Ld#is@~{4HFl1tb_M0Xjc|4@tQ892
z$VqCJufFtk-tne~IMfxo3UjMU7E`sv8d3}OIy9<6Jq?}F_Np?!kTJW^Wx3U&=h`?j
zL_EfLAVElwB*i;VciCb08}N$lJJ4&N0x~=*#ZZbl3~2pkfsX*-<Ix>5c#%j6kqh>_
zXowI?&lCt<&?1AC*&ZfUL{n5;Iiio^Q0>wyR_NtQtCe78t0YN-O07=4UZ>Vfsn!!r
zB{W#P^Z0IPmLwG+sVe7QFnr(J=9x(ge46mSx6YAG2px4y-DG(356)1pj08pGb$vfC
z{`sO!`1-Rs-%XQGf1|>;Rt&A_dKd${&Su8DgQs@6kKb{Zs+~(ew;$AGo5;7D6wDJg
zU}k*jSwIQ2*FbqN+BXYP1m_*&`;-@7e3Hk%`8zyv?*~Yh9IH)F;Z00eEye_w^yL-D
z?Ae^Tg^b0OHtk*qM}bWe8fk+hoy2O2^A<;!o^-+1QBCl<l9W6!=?^4?VRwdX^E_*!
zueFgGL(<<v?^7LmErYsStf!%ZA*Qhci7^=Qn5t4_0o;%zbY@LCWNruMFF|Aubve#=
z=w=IavjtXHDkQcVBD!jodc8_oOQ?)kYz-<N%rboUc$@Fp)8^y<aT@7WC}fpAcAh;C
z7kuf}MLze{(~KOg(V-Xh)pP@9#$m~8h9{nB^Nrsa<zruTtTdYx#f5>$7C=q5c+OuI
z)V3lLxfwdg<^NXJi$HbTflan(LVP`pm)XW`-5Jx`zKW?zRD>;~jsX$2Jcd>hq_9YC
z5bGJQCw%M=KE~XFa@)c8A(E0>aN<~QWy~%(=9WFJwj(ccP{o=mleHSg6cm0H=TGB{
zRXRlrMcFs;AYKkKm$!pJGC?HSnBe2tC(Y^rnA8tPXhXVcKGx9sCNB(z+=oV~M2CG^
zG?wlLnr8x70gOj1*or_Gj9AoE0`Or&q$z^IAYw2oB$80Cl*%eS@**R18NTSDn$hd@
z=&lNhsZ*;|sa8`a>XxHZ!cF6bk9}@G;u5B-o}xX%-90eJR{5JB`6#(r#Z?-C^nA%H
zO)k@R6Ed-!k}>|qKXbI2DV?fa$1(Gbe$H?6XXv$<72UNwwcSF#l?y&y`tD0Q+`5**
z5lbW?EvndF0vV)v!l<oNPYt7^6{cp!G1V$_qw_p>w#To3^PlqgH$TfQQy*l!c8s)I
zqj1n^d-5Vf(u``7QMfi)ah_Ioo}NET*PX#>4>47+8Ch?c`IX<|zT-d7-pX;7vW!H^
zhDBuQ%K)7Ef{0q$>qTM7q1sv?(?vd;4<ue49(32ZUwqgb;w40DaW+(Zcs7Jag0Wx|
z(8ME&0aJ;?@FqrfhQtVoKqE1XH#+3m>!h~A$jB76>Ifdlb0N#2-BYrx2%oKCiXlyf
zMQ8Z*i-yrE?5!7coicTx!swd~f8`(i3Sa-m84lbsMb8zR_Wdl6`C_Gl*%zBV3@apG
zXEWpL&QrURt>+HRiW-J0n>!9_*Mg_ERZv@>($UvtDCZsfck9UZkMBsSV6zHIR;5<d
zX-L9oC1vl_2#0PR<M6&JM-Gj0=-4>ZV-=b<C9RF(ZH0WX$KqUzubn){FMs+geC}KS
zf|JW*Of+Wj7`!?P-@;{Wiom$Vq=dRuMX4r=NetL7NI}ExW%<<}ublf0ZaeYc&~c`p
zexe%cToTel?=?`?%EmxBjj*QkDSg1x;WU+!q#K7<;~bWhSGJGCdV|^g0BRCQ#WoEi
zPGSv4Z0MeP!HU7g?rGh?NW=5|YyXUe*{4a8aVqI3W6en>$7h%rnPId(!@kKwG-`ob
zQTU+vk!9iY#;Pz?hXdnq%N`|fzR1u0U%$$yzwkQyj!)Aw{;JK4OHkWxm5!Y>Gu~;Q
z+Lg?rc1S^2uV97qoyb#@KIce{4sn;Xf1*^A6kF7wmq0Hi%~M89h5chq4jmffro*G$
za?=P$PK+}%Q)9f|M3M%b<&>qll(P#dFTP+|oD)_$ka>ewPcwmo6Swo1KJZ=q#M@uv
zUwq=X_}nwk)0}Klq%FW=ttYXHwczQk9nE4`%Y2^3%s8v_XK;RwT4kCX7cxd;Leypk
z-O06$fl?1`I6@0xrCy`_ko4y{@c|%9_OKc1xN51~A(37ZLCusYu~j4ilb9eZX%r(S
zM3hEI#nY^(h<%-f#TRJqA0@3O<XMY_-W=!8K1K0L4=bLr+CHY52iP-ykbRT;*)uuC
z-jOkC)>5lLA}!9gPVswBeS^<F^#Zv|*mG->OtPUu_I8;We<$$Nwgc33aLsKSu=QK5
z@`f@q-cC@H3#Gry^dgR~S!+pL1(Vm%P8I1TG)<j7V+{@+n&9@ECb;wH7{`u{a`50N
z&Cw=BR$+Cq%G_d=XTD`Pb559DP?lDOcCHi}W*#+iyMlOz!Kw1pf+smC938!hpLqM9
zVzT}#{MI+WOyfX8ZdUu>%U`sw21M&}F4I<fbhJy+o28OYQy2ze6EPJX5{J}&b3pq;
z^@9{Npp@|%z%2r((Sd|fNCC}Y#<XvEP&QBorr*YbSjDE0I1@$L1`50(RaR1~jE;lV
zE{Um8X&Ah8NK#0e0#vXvg3BP!GG6OE$16+E!ixq&O1)AgO&ne`I$4|5UJsjAnVO!U
zI%>#VHdH#;E;HjBJhhF1+GZf_YJEk&t$Avue-5i$0A!_)Clw@5(Ow<tCRC|0Ssmfv
zo@wrQ(=>P9Hp%hh;~d#L%6M}GuT@qS6Hd=o`26RD^K-)ds$r!k^qj{9GFVIlJ(7YQ
z();%s<~xH@d*HQsg=ZHtUS5C)Z~ddR@;bl&^ye8lFh*flB5)bj@-qg;2c=e7&|k}N
z+M<#U`3=aLGGMF~>L9%w?rJ(NY7|I0J30i21|4cbNT04zj(!bX_9Wg*4aT^TP8V?-
zOys#KSQ9|4T2aPFfWl+c2dyO&XIWze=ru>upbnBYD{)_@eYdV|p(vK>_&Cjq#ZjOr
zc}eY1U3;O444oNr1q#CrJ+&+H)Yf^g?lj%w+kvNcsS{!?kPV3zBBV)zxC*XY!L<^S
zqRME}<iO+}j^A{MTMtii>#;o?JvheH*eI2>PA5w^zaTvERptDgGPmMc?h3u=)?sWJ
zjred4YT);)hax_E1yvuerx+Y*>B55IRk30z@O=GTn|p5hUglb>Jb&gn()|SmoeSDY
za%qZ*0AeY$OEZl@s0^M<O*QF9u7i=OzJpXbNuX;d4P;28EeLIxL8Lca-%*gzHRv<v
z%Fe8$LRwJ@=ffaBQ6fBcZPP@lRfJ}ppaN_(sFw6C?c@>{TmUJrMfjo>NGgMlwWGM;
zywQu!V7+WVQy3nI(k(T+-dJYFSI<*p1DW8C(><=n%y>8O)Gh~PvAAz*NM6Nvs?e*F
zYKX>e+P9Be-n@?!NA`2%;1tu-6Vw__@}4liD!h13`25q3rIym^K{xk77p=5iGKw{W
zi!02Jo4#WdYes2&|F!l_*0ukC;uL_7rhlrAlgo|=Z~HM;JO7Szb1x&)y*`cN(ww@;
zaW?@Bytc7Pl<N*=O+n}}DuNJ4tLSUHMe?oFp+<rX^whlcyPkc$HzGAebdcKi2giq%
z_k-h<wVos~Na`_8F*d4npcqjS3rQ-Z70*Zt;yosk=`Mfa>m@*LAc<3Ad0A$t*b2Ta
z<lP)!1SJ+@!KMi|HIM{qT_GOlJZmeia>2()|GVl9p4tXLO)la0wd1MicJXPhg<&!m
zR>%4~HIXXXOYz+*CTmiWF=obRxap?-+<J5$Hy@he(7_2NrYG=XSYCzsW#Q$QmF3mI
z8S7;-P>+y7I%Uj2@WQL~m9j-jS)q7AOCY|MUZN!}Bm_I9CEnm?s^#mF^k#54ma{4k
z-u^*;?@RxJe6@i#Tm4$v<vUq9ViF4NVv-PnNng(_sA-gvKMeVQ(w_+(N-xU}s1Bv8
zrKj8wf32jB^rsGngf5Aa<i-j%1(W!o>T3m?D#i#>C{_fUK$<FPs*E=vF^;qh*EV#{
z=tZwJ9>7FXviTg>D>yi|heP`&nI5Z>h^OnithBn!t*o%Hv_d=gB&1*rE&)<ODgssT
z){qrzDIz*t@6^FLqn9*u*{yuhYs>%K!BliTOSs+6QyaW9F%?{=f^Szby*g<!#>~WC
zj@)vPn~xme=9~6&@bDg*BQ=}~tv0;g5}tb2(^_?OJ3(Q!G!Rymek~^y<rN=`^8==S
zcwbp33m`VwM<viI5<w-5Gz9^%VW11^=tpfjh&MzmoubP~dVo7ld^cZy@?%tMO$ysy
zS3A#pkBCzEJTwzbsWuyGQ`QU|7<GuKiyH#4vQtWk;LNZhuMS0sI@D7hD3bS2tuReM
z052Qre`<V8FD0g;A-Xc6SgRxnG%CvUNWu6-kE*?p&$-dsQ@qic1h;7D&UJayvE#h|
zfwyq`;iHUHYau!`o@&LBrd_;r$lMCc-4&KvZO$*P^4eUR)2CKAeR_eVvt3%fj10w9
zEi^1zvuH)=MSZDZUxtA^hzzl-<bs02wG@fGK0LLJ(PwsQR`d<UQ-j1e@Qb5Jcbt9W
z(;Pl=fD^}$ar~yk?BBnKk&%=l7dl<x%(But<!P@#-UU|#=^!^`P*NH%c`p%QB6n*j
z(d+-*Yt+df8n@I7QjIuUQ>LB)=nSQOu?_)QA1sHGp77C@<!qG$d)~tFL#H@-{t4{9
zEYy;Q`??})(lQmuHAfP~I0@;ek%8Pc7y1>*8nH+j8nF^zO7<{_>SWj(VZfRgDzWvU
z#oD29uE=APG}`T%7#W%Xj5ZM}iBhk^{wc@gz8;AxML+d3>(m)9K0mEb>74Gduez7_
ze)sqBrkn1emm8ivmEnAj7$FfMu~19vG^?YG)%G#kRBqnmxc~N?+E|aY(xzj&%y(Lx
zJH5bbueW&R)m2Wvyu!J&EmqEZ+BtN@k*A)bF3?DD31qqN8<Xk<(PdeG<Pv5wyO*c7
z5m37lV?uX=$7Z%EQoBApwYnY0%{NH8<J@`c{XG1xyE$>^K}H*Oik{GJ3yW>#^>dC+
zTgf_*XQ1B1*~Q^Vt8{&mSlllk+K;S;yJV^w)5hqME<;h)P-R*AW+cPu$`G-)Wc^2v
zI~{UqF9E|3aSl6KkK2yFm)VuqXfFceOY6@0iWmwXxndG17Dl3}OF32*w`rhu>tjtV
z&^v<6cc`)Tfv~I!mf$BtqLeXe3kEI&d8BgMKq3Jyj8uX129tP9RQ^aruvSSc(5%4z
zy&1Bnz<P@_!P8-5(M%|)*<OS8*$(#}zK8cd^g+^OoM+Cg;uKOVq{fgM!I@yenyJt#
zl(`PrMIk+vklKVsrB1Up&e(`&azeR%Z_a(Ucd?BYl6F|}1xrgS%%19T>SV^N&o6TF
z>2sVr-(_jVvE*}#nnjx_t}Ya*(9K=H2B;U*2SrVA6kFq${zl`eU8#8@*V2A(_w&?h
zGKtL3aAfQr9{tfrdCQ|SWL=@xHoSH!r?cY8I?(M#W8r9kA~8}5g!v%isGc?8)~`1W
z|E_PAJ4h|UH9wSs_IqywcB)>W=FtZ^ks(K<!Oui>AY2>Q)tB!ULxIC+ojZ<y4`2M+
zf1*+w!&jFF^!^L?n=yFjF-h!1+PE!d0B)D=FKVAt*6*B_d^H)^?FB;>Wi7G~t!K!7
zPo!*Kgmly-U{ZtiQCQN2=+GEQj8Lrz6BXEZxW#$xkxCM*8`jj&<g%ShFxb^P`Fz29
z?s*UQ-SS<`uXgF=%Or`xU@2S>3oZ;KCP*APYe)!yCkDJx3Q;;<=yimpw&C=wU|y(_
zN}XytL9^)?8Fh^B$vAK%=l%x^w9y9FWp1&>{FyGVpKS5kvrC+Np~ackTFlR8wDO#`
zQM%QXZq4GV24{pU^ZlEjuBDE1!CAA*d1_aRDs}ty*siUa@%Hi5ELGZPlw0<_iTA$u
z5A%ILlW^{A!E4VbuI<Ttg3AS01a16*3{RA(MuI`GYAk@q*Ks^Zb-3##L!c)yQj6<Q
zKd{{#N=FAd*wDpy387*s!Eq>R^t$$x9Zplr6s((f7;oOmu|p4W^7Ln^9IE5#UUI)#
zYf$YVX>0)4p+dhgA#&<Z4GgJttZ|=`H4_RlG+EG}m(}ts%W$x?)|a%*6Ou4WB?+<4
zX8O^bkuW504b&6m&`8eSn^u{7MW~9<8B`uG0pk~>;Y(GDw&#5h{QyVy-p9$=RTRY-
zi_gOvtOT_YYXzSO9>J>MF=$K~y@HKqF_yrwa|DU=TnxPeRu?R@3xav2LHZS?ntEzA
z$LN$}Vqd|DeHphslA}M8A@wfZc9;269nQSa;?z@1oOx=I*I!s*{#=LE+_9VpD>X}}
znvhj2S$_sqF2P(J-r>88r*_2}{N^UAwy7&BvaY(=_2Q`&%Qf~i@8H1X_felv(u(8M
zb5Qi+BLi13sEZ9nV8c<wph&NMSMxPMLaCV+OHlo0fyPK`D2*L*Ea?X@WumucxMN7`
z%ZB^0^QNEv_CGnMr78x+uW4imhHlp3#F0l?Zk=Iy;YDP!+waQK@6d*a_dST_DH6M*
zK@}(#@B6^61A^_49-HyQqgSyTDi=)TmGh)B7^Q-N(M$jM8NnEXO+pkIkiv%)RYL@6
zC3Hla72)W?E@p3zzEp{n8oi>ElQoun&X8mkzV~fE#%S#XuPrQM1Hlk+(jUZEV?qq?
zB@XSIzCnyDX)9iEK<?w_N@#)@QIg2HOAMs3>ETR}Twm@c%%7?7`gy^ALowb{t9nKz
z93%TO_8jVQ@GYME-w)JsT)WHSsTQ*@wmJ3mGN+%O<J9x#ICs9yLc3rd=rn3{YAM~s
zk~@DvBUp#X#k-NGCYSl|pu)JLJht7*Q;Ux2nnJtAp_|^tawlhLCF9)5CPlBHRDX3Y
z098M-iXfzYfGdms5wP4qXtCco7;fPYMQP<#>ixhVKvgdw7Yz7x812&xN;h~SQ{M-J
zO~i)_t86C7h0TLV0a@FG@Hnk-%klT}m2dnjOb2{@<$@$7<cx)PIICr@6^^<Ylvqo`
zi42o<qZGLeJ5CLQTiI-olASkn!x$DRDk(B%I0X$rW|H{u;W;!9LbO(^!FU~x9Bn~G
zQL)kaR@Tn%UT_{Irb=(t1yFnFk5Q`~<m~Da#w564^A*5e%JHv~Ev)@fE|Un}1p0}K
zgz4z^7a}#HkEs!I6P^>V<Ps#)LkBp_^A<Klcw&MKeA^oq<}29w29+n3s&!N<j>cHd
z=t0NWp`1N$_T2ucLao4eGgi(oGyBW}uYYZx*S|K$tIwb3%<L+2E@iRVWVKmgg-F%e
zl{~detapfiDtZm*9=n&P7D1#iq^3q{C&}C@FTY^8^HeiLXioYgwOYc2zpx&o{m2ZB
z9-S&{L9E{eWi8l6<6rN~bqpjUbvWx3KPae2P%5LDlGEFNR<J6#A?rGoXy9@I?PEAS
z1w&SJY1EEz_~665_}a&*A8g{Jbx}>yITxgXB=S3KG=>QQ%-Sru?_W?xY0|H^nPI+~
zAMn&v6dP{_eMSrPr98sWyT%%yU{Xj@FqM#!qF~a2S3+W;Ru%S5IQAWAgEOo-AeULJ
zRLEx`&FXyjoBtTt{hVK3#+n4@!pKD#^odFYt}?AQs1el0(Tqg;T;+1CtUr+!hxn}@
z4D)*<6mjI0C<~Q%FfKf-2>=)7WIahDs8MojFlt#|tb|ndNu^>OsV%5A9nHOt(Zdr=
z-g}4>?*&ORviT14FD`QWYxBJL#gjbo*%x_ksm9!%5tgs&8oL%eHMtggY<h)Ib@%D1
z`A8HsYEUv>eQAN$PL49O*U(<n!8{}b+C-m+F`Sb28w26O^*+8$2C_Wb?|z26w#H_I
z*Rq4D{qCh+Br+M&8Z_oEWrP#Elf;@*7`PWKLXioA4>Xg~H*_d19!{OZ=NP)Z7Kiq~
zo%!Y0SUvv&$^J0;P<}6CO|a)P1x6~Ub#XF6)}WclfRomzc=%wdT-MV}U%F`RtxzLq
z+cHAakWLQBY4Hzi8M(zstqMtMFwTdXn+n!JVwKbgM`yY;M=~_8A-K!*`Uc(K&TK}S
zjq>jM{{$wTVWGW(F$vy<NDLq6Rwevjkua-E0J$}~<u>diUj%n99R1F&MA!K~AJ7Nv
zwUHwz5%3BVdLm)=HT+HB6ACt0tT7}u{>~_Q3=7+8F@?p>gPDW$Nu`o_YR#PH-WsFF
zM>%-gVfH^<<IR7j&3m4Cn&1C>-{L?1*VlM;%&=0cT-vMiy7Sa7zOHv@R#djdq5WFw
zsTnKue2>hpATmOh&GXeK8vLOjJ3ysT(9MU9LxxILWo)G~1Vn@1`3pE_Fi?N>3f}t&
zZY7ZUq54{=ykEe0AkcYDFh_|4j-ndCEnY|>0brBToh_4)B6)w2;)tvnKT%W-;P9Go
z^Rf5y&2Ro|{7M1Mc7H&{7#r$mi3^7|I>eW&k;rQ^B}=|9E-7o81f@lvDZ88zv+&a2
zWpdGJ6?twE%*xj`p-=TlDjs$8CnJJvIMfrv@qMe|hu(zBqFk7MmV@w??rec{Qr>po
zk7Mi%E1ec%Qi^yZ^b&^bqmFQ#`UrrgF+~p35aH@6O__ZGT9lz%#OKJhGx46~O*E<|
zfEQ(iszRZP^<Zt#zY`Q^1_bFM{?5o?G);{58z{yqc_MVhveLE8zXsLQO5>|JV`D3f
z9PTmo&J+B=-#JcGzRchKFQ243GfK}^STmY(-FRwS@gLdl=D{xGsa>)LmlmjWSz39C
ziSaj+R=b>h;S|q5J<f?+8k}ww;bdhnSgu1}nZrsB1N<|kt@;|$EYYkO^&xVLV52eQ
zTU%Qj;<yd**Cd|IeLvzdnzAL+HKbnHXhbs9!Hv|mfioV1IvnNPsU+ksr&&3`;Uf?8
z!pUE!Uaz61+vjzt=BRa;N=W}iHKcxJjVq>BYgzIGUR$4F8~-C*K*(M5eTT{@X21d-
zj?^T6c9I4|XLVuB%Ge-)X$<Te$vM2IhjSGS33wauSY(Ly;7M$Se9j{61`ogK$4Qfe
ztaMheCJoWOn10<-N@A}BkU<1Bv7r*prEMkdStk^^;`8Wp>IdU=zLbTEe_wXYeH`GI
zGAfL+P8w5lS4Mbcz0L;kO9tiB@ZEgu)|x>YYhqMqQ^*apI~A6CRmPX99GjV?)iO*~
z@8ynTukp#3ze4rU@lZ0k?mV@P`j2e)tmp*_y1QFXO;B~1X2H4TFEKuP3sx$4Y4e#+
zzRt|v6O2p>i#<j1(B&$@ZJ0x*QBuPXy95tWDnh2Imw1FUwCsw?P;G6ku5L_2Lx|Hi
z9u74q>0_%&2Kz55kD3U*a=c1|H$Vx_rC?*fP8f@IqCzk4aA5D-Sy(>F((JQT_PJny
zBEd6Lt;5#C#cR}HEF@{TP{hU>U?1K5+QXqy&U<)DL5Cu;VS?|FbW)kNVFZcF9Fhzk
zB%!wElSmx4fiP=Pj_=E<SE1(<D&7XJnfe%|#$zc4U9xDW#)EhN7}e?_TKOu8q!c<J
z372V^(UQUuNY5sbKA<HvFtq@_-U&sa<ata(`%@`VgD%$URMt{)yeZ3yq48kiy~}F^
zvsiERC7+J~euWM^C`{aGPQZBWHz~@`6c;<kiIP=8Y8F<;`0RgL=7}d3m}(xz6yJ!Q
zYqJY@YHY$(X}f?;*8-*NdOfw6jy7{vTW6VF{u(nA599n9mKM(O`0q4$|MwrFK332v
z%6eSMThk$MjEwl0J`8tDQH?|G8VS5U4u+SneZMi`OVE_4#xanK4PYj*>(*Dk5WElk
zI*E~st%SOdl}I_UaSpX5Xdap+qCR#_hX(3J`%@8R%hEf`u_N#28()7NzwD9GcKB!q
zY8_OAoSCGGNd%h+Hi^m_vB{$G=4pm#cs6#f0$JDhg(DeKR1vwLYCAj(KcpsN((t`a
z(l@0F{-TMHsFHeUTH)p?htCaE3>4sUk1Lf3N;30mO1`Ard&dvaXxvOITMp@`4h`&!
z>2IZA@EY{i`cYa9k_IHzuubYAFO*&nd=|RwG6ZTe5ETv}6(z_+jV*$Ygs97uqMAl1
z`st+!plV`wJdUN65nxE!<KGHv%y*2Del%!f<7>}B;TvB~_>Uhyi<LG_Nl9$|vh?Nc
z<*97|)PxO=RLO>Cr8ZV$yDV32H|VKddV9R&R3|K_=f6Rxcb0?()^>UE*_Zk97Z;g6
zn2^*Jo6z@}(+dxtmi4y5Y$QH35%3-#XF%0Qfb$+zk5?Z7Py3OZ_W}I0|E&FSEbp~n
zpX)z-m{E<^1tj%YNUw$0>1c2_PpV+jPy@n*lqTdl28}YbDh3sUm;|RiMrsE+eB|A<
z76fA&*wiAvj*5p$WcWvrNfJYnN}m{OE|l($HMKBG6&nYU>QFWt`pUR*vY<r6KAR+_
zQ2i9NtYek3;5MY<HiaY!k=;Z?8BK(CCq)VaPVj0GTkR79lU9R#PPp^dA7-R^EA4Cv
z#14(Q30}?M|6&5YCU%8Q6>LpN8^PPuG(ssLb75Mg=s})qh};S&+~ASNXXhbvN>+qN
zUWA%i;h>0rlNaF;{x4*O#@`28QtqVx`@DR=6EY|CoP^IR;`?&Q;(B{IB%?}Ug@602
zr<h$?0IBl&(mXxwAjYhbuv(w>AY0_A$p(39S0AZu4%lSPJ@*>$)Yi|tWrN!Qg0HUN
zs|&n*=J!IHq?WYO<%^$rj+b9-F?}$BG~7kk%xd<v{YxbajorrxRz84H|5-Io80Y}l
ze2m;;%IX;gK*jm^vsed0V>C9jUhl%Fmvf<5oYVubr41ozLS;N$c(xM2jf5eIjIury
z0Imc#OiEsKIk^9wOi$fIXRb<GohC23WLiKqfC&*;tO1i~zy2j<WH2NdUJ_YL+q_@^
z6Mt8B2V=+7Nckv<xaE9mkRb}@Gcj6=)Q>dQ`I1T?w;Bukno6dYZc#yf1=M2F8e$rx
z)r2$~rFC98as2xjAHSE?Yy}k??@yt`;L93Xf8WHLcp{i8m^vg4C24?ZgqmmJgSt!B
zV*qAFFq<iy;#4U#Odu3q$z2dnC_H`hm=f^HpNF3*t^}zFjCl!eMR>0(BR?O=<<5mi
z;f34}{?7RzEw5G2^pS*L`>k_4`RuFMR3J%s`TWyROZzw8;d$`u##7srOV+kTY}?H{
zySBPd$wWpwf0;A$U!a;!#B$*hzy0ga)9N}#ry_T0xH7J~R-r=!FRfo+D`^})09Zfb
z@_uMIen9)^gJIb{jSYno;7Y|@uZnYucRDy}Gbr-#NNPfDT&RpH)e)$SL3J|L#L_|P
z8qg)wbNcPcfr$WK!X5tTf%igB=qxEtyW|uBB&}dl2~C5N@o$GitRbFOB%}6a!7tFM
z??-H9%_y?=#h6HKh@D6yLB*pYm^1)bS#L8oZhi#4Y856Ygti!R64WQ)4S5mdfU0?e
zr8A2hJMu2}&OAuFw;Jbv1E38=JPk^S(gL^%nh+*1>X3}YsJIzYQs)Dp^*WH}C9n-Z
ztBl0F4>zL{gu-zS;M9-gTsZat+$270A0P{-aedkcKOeb_ePE0L>O2%GVSVxcPL%y8
zQoi*0Wj^_-=TNgsHK}uU@g>f#yh3ei@9yELZ8KhMTHRw)9nD?h`>B#s-BV}o>{n<u
z4^gk~qsJoc)wBHeZ`AqG$8Mpw3Y|g+_1}^^6N~u$>4TD#JCuH^D$e_U)K<=QmfcY8
zcT$HtqozOFqW!9W*^JZB0c2=Uz8lh_w1DPxpnW7gFg+mEFz>o5q25zSFoEf>BO0y@
z@h!ASaL!S$?BkZ3eu$@E{8fZ1#)gX;1+}3oYSTcL4d61UuZd`%b5#z>qYUegtm%dl
zBRwTVfka6nY#_Qy8r4P8Sg^NYq{^oK%$iCyD2a?2p;A@aYRJ^$3X9~PUMHiSL-Bft
zV}~B)(4p_5)$1Z+qr};ekY`y(i_xQ+SX-=sX()Cq0$VHr_)IB!(CY|Urno#%V$=-}
z>4tT=I9Fm!tc%LpF*ffNCt-*`bcVyeG#YNOq52Uf8BEFfW6)`pGALK+kJ_48pEZQ2
z@yLmkS6=P#vH$uE1xr-0V0t|B`j;4)nh9kJN?(lY%TwEk0?9QnbCF%@`*|7F0tKyh
zNG5BXp8FKX_k9p6DV0i>S6_aWPkf@mqwhS-nNER=Cu(`(>l$gISd%H0ZR5lFwZvR4
zBeZg+bhw*33~n+QFVa|dlCo16y-AG|iUPDJNJmN9N-Y=adxRucOc$sGR=+dg+k)#2
zT&BDmk`i}ujLQUt*J|BhwcyzJ1FUw=^1@4>!<b+s<6WEzNMda(*4?ZP1#mG#T{y$Q
zVM^B8HOd9uPx>`BS<8{LiX;+fCNV0rHcA%7`kF}$)kbJaj8=nmP)~(kVR1f<e2@xR
zZa8%0%^W}SewN!s0JV##=4QYiDBGeIq#EjI$rz+#kc<dvP0<3fOv&0p)>Vp(NXn%@
zKV15P>9As2>`?o%LmIo@Wu?ITDC`*>$%d;4r2|(9$jT5+#4Bn;*VaaR#B$EK0QMa>
ztghz#n}7Edt?VqRRYs~4Jp1~m>9Wf7^ob}dzZ-dK7lWE^GIG0$k*b{nwGHyrHlr<7
zjwX#3xZVP<&wiRC`yQnz3hMQOZ+zu>rp9aBe$yV#oyw!AWK^q_Ff!xf)WMoM8KIWe
z?|v$g%Qid!A4t3Xi>f^PBBRwaU{91&3gM3IG2VugPeQRg??QJ4(nX~@W@yeRW(BAy
zq=ZqQIYl~9v|={x!%U;8X&6mP0!_j74BCUNowKr#QLo$u@<j^G1Gp3ek;f!~G%Yh(
z33H^8nqm5c+TbJFH(Ozt_$&kBtqk>|B7<M7Ac^(?%~Zm3QVATk)SGbeC*gAv8zQ%!
zK#tJEl4%NwMJhFn9cO0dQC7MkEz>yV(WmN`ipsGdSQ3&=Rj_p>8HIET(g{c#VL~A5
z#z?Ib%#~dcr%s$kVSs_PpbpEu`?UlA(V?P$8kEiO5?>LC4dw72HKE&V{IDz)G14E<
zYBU0;bISPsP;32{|NJRtmrjw|oUz&rXBNN3*_G#+x%t*jfZDa>sclqNX<LD9cl&;>
z=g>Y#jvVQfWA*GwPS1algVXPzlP!`aT|W2eXPF#nGCoyj?o1BOgcHeKptrWBfl$`U
z)^ga&(JF>g(n0#Ob}T#4F$ScFKK&tzTb2?^;($Wvb(C}&ddr^L9vD9uL=J5|073yU
z9{{E{7F^&H8!oWCZD`HI$~i}Sd6{0mLeDMH$rtHn=RrKVW`Tg3M<7ee=0RlK=R*?R
z<#XxaZgem=Iz;{J*NA11M)gOhhPY~y2Dhk^AZ(HV#KwghAI6{t(kf^YRC05HObmr2
zK&)e7=wx8T$JDJHjncK%m7&onsesfJJ1SK6KxG=Lqe^O^Sb?k!omD8hq1Nf6iOp~!
zw$z*(!tbE|0T^F$6$dvn?We$ln}Usg6WR~yB1I=oeRv&2ZEILqqG%!1Cx!7nmjCd}
z&+*E+SE*KVYIcm(-Wgsx`$Z-WAAyP;8aB8VJhhFIZ`YG4-yGc|*?j7`!=NUc)plP8
z*)I_}I@6;%U1#phlQgP(8Ec-Poh{PK7Wu^QKg|c<cMpwG%ksPqoads6i7yGceZJZS
zG>##9N7+H`Yqpimg8r!(Nt{uZdq8gsSHD;3gPM`ZG0Q#L6FMu9&I1joj0%$nptY=2
zMuPcCcMP;E^je1YJe)h_S)FxsR#s@W7U}dBD0GR!_fXBEl7*nu@e)V5Y^-x7U}Fjz
z(nG=9z;Ba$VE9scADDgwQjSpR8eao3gAoN28yr*!#wRfi4F<`Ar2SFX`0%8)&^S;6
zi1$?Ks*rmNxg+l=UM$t|sJ;=mrN{)ImpXeIrHFt;p(02POcT;+C7luKlOam=8RR`^
zFGJo9gk0w%-_Z}v#P-S2gYNJ^xFzf-_0n&;UUbcB;0U@{x9ry`<J5wQr2!Miip@~8
z7r9MT>Tuu|%kTX98J>Fi6{>Y5@gqRabEiK=b8?z=bYw`jYB%xJw&1<6Jwx!@)g-uD
zP}`sl;APTbQP4_<+GK;*XFp3?86}Z%yj^B~?sY!-sXFg@^bYDh$Liu>pxpO6qr=_K
zNX8wC()zWvs72PF&MJ*vhGd1LuW3J+qg-o_Cw+pyF9xGsE?4rlkhP(;1XFuq&!lkf
zd`OX6OTz3Km_O}Un$1{UTBg@oq{x<Vc?(q+R4cF`^+@D(7-@u0PfMSH$YZlH6-@|4
z-4rCze&-bv#VO5Dca#B7tsfmoNMS=*7stiQbw#SmKwL7`+)VuJI2fN)V{gNS4qy)<
zbCCN$(Dg-%O~+`rGK?hHiqIH`+T=i%-St9h>0D@#Py^Ex(kUg~1C42@kA!*H?y9mn
z2i+DFSsa}zLSshai6Ny-Iu{r|EB#V}`jED3)RMytxs3JG&l0$FP>hrQP+aI5Ym}}s
zaVkcl%1RZE+?nwCPcQJPFFj4A-bQ?dYBI|6r+*bwvy2=#fLA|IGTvx9xg8>rR}E@A
zprE@hp?1^cTiHaDU<<~sas@&2@@=CXZ0>mV?8iB}{|_OWlB7Led-VlA|D`%_d*B$I
zuA^9HK&16U${q1%;&edgi2StjAe0^l@rH_CC{UoXmWn?#V6Q6S;z5vVAc)!~R7W7K
z2}Xt994uQ{s4JD5KvQ8MgB4Yl6qbEKn-00{LaHQ;AXLyI2MwcCW#WrCgleeal*Riv
zd0+%mtE6f0@YEy%!Z5h`lFz0?^58=?EgA5Zj0tiUl1c!!RM4s-k>(N7Pzg<gG-iu7
zP-SdQBG3mqOaWvfbTtgodY_V;DzBaYCTI<-O{&QRjrs_Uks6K3gvKN^XB=vyN=qWx
z5keX|3AOP6ux=HWPAQ$m5Vg51lmq%o9!hX_Er-(kjqQPJXkQJu%qk@|rhM5<h&O<k
zyNeI$z538hz(jx6enYABwg{=I#!;(-#}l4@vdwRO{7GzO1)sx6b%NLDKSNjNm^pNN
zP@B0Tr*vmTBISyXT34v4?Tmu%?&hg&bv@~n(mA!jsq>%Y;GXwT<QYlY;hATiWMrhl
z9XHQ#u2bMU0~aXo2P0Hr%7C@bQ5OhFqHE!O;Aa|DSfgZ-FFOg=VvHrJNSH2YN|-DV
zC^AcT4wf?L=8nQT8heG6mSM36wf)fCBP@5Iv0v%76I`zjUdTx(w1@Et>T|pgT!n#a
zl>#Y7g|tEhu|U+dMoD86AxRXUfF^=k4fP>A(1<gGnf-xMFaxP4Q@+0hwIrsT@!3`a
zpoQqrV2tlajhY1DE63WLQ@nwk&>_u9an9njpi|6}yCOu1u7b^)Br6ltW~ZswCKwxU
z(ipc?r<IALFntqLMxZ`wLJFFD&YgtLypZ=oq^1$jd^v$K<T{~43NcRUQ($Ds+(&fK
zT<KFoqRUySQ0ygYj2r1o&|5Qz{Jlmuj#yxGUfF*v;nb-vAN$pB;*vRxhmmv-XP3Xm
zT<b}uZ@LX{24V|uES}mmRQK3zJT*2@=eyLMKq;v2t<pYol5<O+WoGnk^olNG7WvxO
zzs}gm+nAghVeWJhn+WCPrynSHFs#SMK)H5^-qAn3O9`J?J=fAv-3Un~q1H&KHchAv
zc_lBD_5yTUO1G8K&D&(!p-T^MgrrfU?nmh*b-IaVUkxVqMz(rS=q)LEI}MWyIT&a0
zK1ZF2^bE(q#6S?KViYRXz+FocNG+sBs92>Ei}~IPKG6{I#IdXL8n@*)_5sbj4pTj1
zdKn3@B!Pn`F=~@Etl!3T)EbX98g$7@72%r0<UpY~8=42X2t6S4kQW9|B>ZZ%^vEKk
zOOLa(+#HfMneR+9lI)?Dj?!AN_zA<IDMM~N&O<&6zGbL29b|#o?~2ek=-X9zSu4{%
z9C*i@m5HKM0Zx2K*&`vjAIeKWDKXklKh?)tn~}bFWnq*gru;$YQ<*+!SncKf%5Qv=
zo<EHhrJl~P(tCyTi(g{;@NrC9SqId14^M5~R91J?30~F#wd=@Jy8_6rC&QvikNQl5
zm2=NhwNs2Vj?gO>$?`LN?h8-w_P4x^=6H>z*?g_H=a7Kpny77HILBJw$4DU|L?V?+
zO0}Mn)+}O8<e4eGm4fA^jMddP-K;~eSS53-6w<*-fk=wjDrt2D$qjk8%knuJKxss%
zHHFC;=(HePf!?Z6WC=x43)F+i&=)M~9g2%YVS_O>j5pXyNJDKBIAp1Ts)cG2=n*cC
zSE-F>kn7L%4^mJWL~#Aungq}yjh)C8G|q*RXkQ-5reWyb8o`?2;hCCHSeHsX#|sJ5
z849^VPa#wAY7kpRjqi7x5y8Y3t0Xn3RB@FGdDBvxFysxP*Ho6&BW+lDU77ugkaj#a
zw`c~20!ch+QxF&DQVWYK6kkaHd?-8N(x-I{yrN1PNZH*iN!eN|qn2IrSZfQw7wd5v
zI;(01z8Ygwp)BxU|Lc=1w@;BKo@z2d=Fai@>>n_;_b{f>+$K=F7L<<l>T|L)JholU
zQ`;h__02`9U20P`<`<qIN$Vtb6t7DxuRhNcUopJ%p?A<2Gc3;+F<Ns#Sy%IMOlsJ*
zs#MX49YULg*~Mx?rJ7*V;B8kFj?QXEyVaxJYO~r|pxs-f@XI*q;IxRbfJLN+F%1NZ
zs6`#P+>y5nL<($@QhCl&pM;s?Fm)I@U7^!bx@{rtC8(1qMIopps4Myd`N4p=3f=^Y
zMH0X*O@yius)<HDxDcsf6>kMeBm$e3RqlR-fgSR7i1dYFdPgZoL@7s<2#M98CSoN<
zi;DF^5{bN8jYapE8akCg`A`kOMwpaWtNo^hil8>ZRBD*CiK*79OiWPUGseh%%lHvb
zWlCu~paZXe9Ts2jQFJ<(Ji}&!&4kn?q^TjTBvdPw#0p7jNUIiu#W_zA6-Mwn6xk2l
z#=^cI7;JlVAZQt}tt9de$Zf1u3{j;qB2?;@-}s$xac1rXs#QqL7%FW}p8YKvlhdRV
z<3rkaZzP`DrLJq;ls<T}dqC~#d1_l}8B09L%t)7{NSIst0yE?9K-7YCIkWIBp7_QX
zZ@uq6@}_5b*?|<1_!%XMhLX<m?r2R)rCOm<Nl7XR#tP1Rx~(p&t1GOwmS}b7=oSm)
zewAEX6xt45Hj`qdhDZ$|MW`UywN6@I@wvxYkINjrj%V?#!9E#OKc){0GdDqdS!m6J
z>qzi=@PR<)DNu2E7litaHJGG<I71TC!8C=64X#R63u(}CL=89_hwh8Wu~R|akP`0D
zaKV7oRZheY^Vb47H&9GUP*V~sR1BmNK+Tq?b`m06XT!F54@G3#7aHazm85U9j9A15
zwMwbfu(c7Akx^<BP3lv^_+gkh5Qg!6rkwkxuzVh}BB$3|CGRfayUX~zi}gxMg{rBO
z$_N!|RMHx?T8(NoC9NbRsU@u?7)cQCLzAQMAs~w;G^NzFCkRM-1}<ilx^#YM-}yk3
z@e&GcX$3~6ET8<$i@f;Sb5tt@_$sENoIL$;Dx(c*d-iT1Qrk^Dwe_#-ogJx?-Of|n
zB&e0|HR0?@Cxk3pWp?Qgm>7Rc^p@=L;+aojjPj-vZ>C;P$%_t&IP%=#^E@h$TGBMd
z+7xRNObUvl*Xb}fzr^zD60PnmootpumvO96Xd6#~Awi^qP{G9KK9KdrBBjr98{{Jr
zqLy6AyB?O6g_A;MLaB~HeN33V307wz?*s`X=Pjxhe1a#(m@u&|){vy5;L-qU74TId
zH4^4hB}8m4l3GpKJcyGBW!h&h=*$mT@=?^kRLZpy2VO%nL1TSQqU%!<RYej5sRmWv
zJQyZ~zfD1NiC`Ae(Sk6L?j;Fb*QhV9Nd;4>VyiWhW&pL?gr&J(89Crdn+E4Rb5Ftf
z=asDE$g>RZa&R8;22mk*Eqd-e%f5?HU^OK%O=_!SRP8twJ4Tu`saBda>J^&J3bneW
zDi&1}=6Q?Yi%@phH3E;1?)JXqH%0|s+`vc&Rcu8WpGo=57hmD&=bxfpQ@pQ`R8n3$
z^E+U>jPAb!#a%E1y4!hb>w}tZ65f(cO;V{`15mq4p4yfM^~*t*g36u>-Ls1<u6&iT
zkvCB|kC-K%KmF?zMT^OiqqN%#7%L>UPQ5zGNOKRhnjy<F7MB-T>CDpZtkBI`bn|(-
z#VlQamclOwWnYtEq>7aqM$(X8Ua*Z?b{8cQD0F}rA_HLp^@__q(({OcZUyF^6Vhqe
zcLz-Fhn1TH56cx{I2s=S4iVG^{WxPRVj8HXq^Xi7fj&}6qVQqtOqOaJzC!2}Cegw$
z^7f1$5Om8Lk{BIygG;7=5|uklpnYiBFer7`qIrpp@<>VP5Fh7QO)B^_&?X9$3<=<-
z7HjK44AO+6o=Gd1T8*U9Bps_$8&4QL2$M&Y>ZpSCv`@k8lhErz*2(c%hARrZ8<ZGC
zY>31p#d}YoUGidyR`vpd!<s4;J5I$+Q#Di6k_oESF)C?|daXvSmW0}Bt%@}U3WF~~
zRHsqnubj%zC~k^`ed#@<HD&L?l&?Q~im!g_t5oY<oHx{}lboJ?oWd_Kb@c8bf%$7_
zX1rbGTUqbDvf*?z*^ZX%W<(-)oTqk$?Y)vqmYRa<o)Nld7g=3>k!o`q@4L(|pJ!$H
zSGeuKA#U0?L6W4*F0b;+VnVB3r`65zz6f#~b_GlqM+>Jtyf0!wImMdDehmXa{U}WP
z?Ei8LgPe{;>b<VftO`6fiCtAK6qiM>&6d(xhV$PNDpSgyL&Dyhh4%lSz5fojB+K*r
zu+Q(D%)IV-Q{J_oHsgDCXV%Ovu(MczyAVJCToM2oB(+39qLD~Rl!;)7gcuSjPzps5
z0g)6*NdPG<$Xy6n5Wrv^W@l!1$Mkg1OuK1c-aT)x%gpoBALpdI?^ShGcU5<FLo@NZ
zURB+?@7}zb-~5@c*-`Q_fi+(!u`Mn)zA8Yxu1F)I1X@A#9)(n;DEHqJtdX1zdx%0X
z9|zfx^AUSeNXiP)yQxI)L;>8amMy6U-ddq@D24CA+sziiFo`0WH`P?*E65xls*(#R
z7Gt|UltwKQMM%=Zc6vlJU0U;&_EBZ#tawc&FxYZj|Gr_g596^T9ebZB4>*<ifvVJ;
zZY)Ner^r}EHN|PlFuO)yFZ&yq80=n;#4OS_N9e@Mw4)i?tsdP@n{KyDD`{cln8;Wn
z<HLDe=G82sp3|12w7QN{rxIR$`zGJ};fu7|`#6PGtIO)fcNmXuu=vnZV5QcAe#Cfc
z?<%RfFSbSZBFy;CEybIUem78)I|_EaljuKHMdF;!a+l%iD&xIvhIz`*f9|LG%fIw<
zeCCNGbRvt0!^xN(yU&%ID?I=51-}2z4c@xA$Azm~Y;0~Y&ilksM7x!c#0kcl2^xqC
zTrwMio~2CAs$%X;ZOvT>p9B4~25v4>vJ}inkbTdVUwcdF%t5;gOOFa^Kj<7Y!omPA
zGs-;e-6mbEZ4t!~SwUkhO(0_nNswA)kq`KlVk;Vjt!iFG@dalKR}a_>GzAmfd4pW5
z;p|~N#iXd%OyT!0T11>yGdb%yYz3t(FTT_uQ45K4j7CVDU^;E0UYBIr(p?Z{PAH3~
zl&B@7L%8}wVQ<Yb9tqjdL7L-It#raAKhdB;;40!kvszYc5ZY_xWpXIajY#udhFoF?
z#mY3Xoh32zB(gxuF3^hSXtjDwb!M5HnPIBeChEnsl9)JDt(`V>I`G2Fm-+6?&m-2)
zVv}T+we9b-v;QNGo%=jQCV-l`4<?a^TvvAiYH|l=lXoV50GB{$zn2FoF!`fnX6H`|
zhqlI;Bmp<(fAVL4g+KA^Pm;#))i*K*dpYW0wwJIx+vUjIQU3IoKgqxP&!ouIh#UL6
zy#B^bzV(B5c<!YuynS(vwe@|*X+{)Vl9mw1!Lg#2z*2oL&DbVvZFvxEtR1C9ND5tP
z?%DBKUoc(Rz64XpVDVv?nuqy^g<&7Ek)QKqgf`I+cd$tdV=YNYhH^z)7&0zfp?xf9
z9xnC^0}_EWw2C30um}V$1D^`Px$$zKQurRg%>)bZD7fX;T#YJ6-T;arsNDmbctUK3
z|4P+(FpC|k5hN{4w?jN_Y0nAWqp<Xl(CT@>y78K@dqv2`kPZ}03&+pG3SKH(4ykgu
zL`+q|h3`F=F~>K@xnD~8o;YmL`wX)^hI-k@1Y$ALrX3xj8=s)Hu|T^uMYlc0RCkW4
z-W2UPW`A#k8!H=Z>|VvTws6j1w8O^sD{Sw+&XIG^Agw5zI_6_azLooBTlCT7sokAe
zUnppmZflBeG|gZ5<$r|}OONrjw?_0c&#6kR-yCk_aDK<Z<(x#6saRR;#GG1M=E;*s
z`RQjqNz_SMAMNwb#Z|uh@@2mJ{8e6g{Teq`HW`kFL`jQoC!&>@paqnscUTcPQko<l
z7V0cz+2V3P`^xuV)bST?djY1GJ;-&pV7TMWD3!oR3wQ3g9b<^g$|*|<%7w3nTCw<<
zTBx@2u+=POWTu+2;U+htg~?cGOG8VGts>(hD?SCi2n!DL#JFyoW=eeb*i*c9@#$2#
zT8wS^<&DHhCnD;4QG9z@SvV)mEE>c*RxZKHD@ryjK+W^X)D`}Db%J66ZZ&dsS%OOA
z11rhewY-`loy%{FZFuf6%78(-MSuJ@!_<+bj%hi;V&^D}Gs=l07Grl<Xy@pjaQ?~`
z@yt9#BR03*;n?XXh&sJPDz%RyPmSAaMeo1S<oy7(`@~bbD^T<IQQe*)PP_c`f9@~Q
z?wsSb%Oj%5`q0~483vk&wL%;zaZ7M5*uk)|tGvCXwBN~@N|c2e!|{b#P9B}-U;D+!
z__zL4%0_>Ww=S;o?Uyg}-5*}()wkAIS?MzxL8~=Qx7()GGKjILv!0@%6GyU0TX$a8
zRE8Gk-fAfyf$YIxO<8#zTGL=#!t7b-Z-(-w1O`Q%A!)ZT;<@s1>?^a#`VD1*Unt~}
zl!}AG?N&87l$hWY94a1D2cke$72~NL8i~(QD5^FiHE{FG0xQKxPAa-b05z%MigVsE
zI8#t#h~gGDF%U)ADdRW9%gXE-VfL7U$=ToYEoi>4q<tkDh3ZqQfa~g*Ye~GWKuypP
z(A=aBNiAZLQrRJ4(<#Q!<FY(sG|oxK21}ROUXQ1b_4w=)NBQDsPV>oU7C3#X&Ge#0
zW~QOjVQpLay}$n||F6IHHD0`MjUy+H5Y5h@>TUyS9~GV&_r%rX-bkt*IG);jkN?x+
z#M@cKj(Ys*|IxohD>=vY8)Kp<A|GoAM)z*D64;U>JWU~rJw+l4O!_<)c8y_w7q0Fp
z=0Z+_vd}dgpPS*#@i{*KXCCK&_Alma4R?6${7t^~gUdYk!Wyr=zQyY57MYu--Cm&A
zZ4t#W1{)&(yi0FsjS~jk-uMt)CP)VPNRhs<c}+>)hGS2`%mR!b5!OZ?#IxY|syRe$
zgE5B0DC5v7mH;DOT9sKPkGyU)k3yWO7J%cQrzoQe@F`qOv>>;cf|x5|##U=brD#1p
zan<^%7FH`m$if|@(4YD-W5^xAV3P>jHb_fIW}veK-J`H@(sRJZIb3{E7~KqR9peD>
zPU{(qWuQ;tq+Hm<3jw@CjzbmMSP0%tH9HDU$YYn$A7*6ZoWxj`W|nyL>=K`R@)*y4
z@+eO~G|Ra&JzB?GFdG3Q|H0;l+~v?uS)85W&;Hv#%UAy5XZR0)<-g;1f9n#RC1v33
zgaOY-lc#n!@qh3i0DtA)`LW%9P`md$wRZ=#P+jcLqWdj=@lXDFrluZdWn+vOLzZdH
z&~H+2>f66`<Q-i-YhOqbzn+hSYppRtD#Bn0H*YGh-Bdb}W4;R~7G`<s<UC*ei%-C>
zq^xah^3rQJ`2FwQ;Q8mbdGqZ(Ha8P&G)=oZORLkt#!*lr22ND&TR5DrJX|KoNXQ3@
z>?!LPh2D}fe_B{L4e6e+o%<bZE<g%V$9S6{<6BU%N^Cs97=buavdEKjwFof|Vbdy7
zx=|4LSA`Q|p>0%(SU(BjFy6G%6nUZnK#P{Nj6<MGlP`F21i(Z*aWzLvKAUL^QAf~_
z;?+GO%$-u&JzwEneI0hr`*~zO79<lSFTCD!G<Qw0Z|&|U<s8lT{u(MggU?+RNyv4?
zXyh352c+XMiA`9Zo#DwxkMa2@Pw@Gtj_}lDGn_uthUExi2l)^*$GIVH)sk--#v2{d
z{T|t{O+K>3k<yvnVD|G<{3pNhuk(NTOMi!7`)^;Q_2e-|&ei6C_aV&qKJ(Px9n|j2
zj7>k{JhgWRH8Y$i-){5Af8m#zpM9K-jWNd9QWlj5XNrb}V4+zKVYUv>?q>|+0oc7@
ztKCwPwv<-a#6sV|0AaJQT-p;lmmLc&<>-vz$l?-Tetelf@{`Yi4!CrEljmPr;alHY
z;Rips#Ko(Y(RhZWbBw9kBgCx)W1|r09W;`82pbtGrVnmkxbe2qnp4_y!u&%p-j!0%
z>4x4(#Drx*A)&IRA!Z=VS|N%QVxOmw=T)wQ3)N%LbXT*b+MG>oL9zuKo3K34GC<1)
zm4Sblmb+k6oQ1Y>y;Y+jvArk~{bIs)4e^v9Q_x+4nG-Ox>`ge=t|}XEfQC#^O|?>F
zctRfPTv@%TI-0>3IYJf^xBOxuSI1~PW;EI-&m8S2=IHD!k3M>m&px)qvrjDZ^kefJ
zKRE@n0<Fxy0N2O$Bl1B+w$)|4-Db4cX1Eo5^8$&mJxhDZ5-<A-Fx46QFO5kCWB!-_
zk3WN|<=6h!59mC7ltHSc?)Smssoe>vy&Jw16kY$`{{7q5Yj+52=C<Rz_ZDXSVe!-s
z12sEZV7%Vu=YQ_caCG^TtgenQCL+)M%1y)6S52ri!oMw!h>Fy_xGG_@Iw4O(HMg(W
z7+NhMY6)>m%b2^|KyHPR8aB3-cXnX<lCsc(rRgq9%U%B2FP-9_{bMPE@jkD=v%>Sw
zuk)R6UFX#|ZnAlO4vmk}T{ud6wu@<pnYQ}XXFh~%Um5QTtC!&96m;hevuB-ueL1*D
zNoKs?TFZC`kKB069KV^Aa&wu)AgPqCXs)HqvEp7>KLd0w%r0%w)B1|7*oNAmVkm-Q
z{1#S2q^YNRnBZ4dW)p;khZ;X$EIj{Jd~QKJEyPn0FM3d$KjFs&{axkeYkskkk2Kg2
zQ98Hy%}W+4vApmpLdio)R`7yz$~a3I^tZ^;O?r{#<b01O9zVlp9zV+Go;=2rkIk~Y
z96>wx<*-Y^?cw$f=~~QqXPV(ooBm#h{k;yOQGy!lGj0=z7lowfb00_`&As;63gk%)
z=N+wd!2jyM{0bYJJACaoFEIVd<LnL6=C%4j@YL>>(sB4>?}Mc3R@UGjJ)YVms72`v
z`!_5<`{h5u>64#j<wlB#Wt@RJSGlbl-)fo6hx#6RM-(kn+e-@@DeT0(?M*riw1!AY
zT99-hY6;pBa;u~QLkoQ;tPKno2Qamw%)REA?+DAwQ+(!VkI($`XZV$Walq=<F0Z`4
z!*{=Rfft^Clgrn7?C3FMeu>WVEK%Ya{hH?JK-s$qTXVv~8Atb+x4hP|-*mctA2k<Q
zhyqd-)sw@!ZA1nCA`Jdr?mgA=GKeN5(T7&9u*|M<No(qZkZ@%~;+2Hwk4({)>Vc)I
zEv=ulv2m3EY{U@HD6Iu(EyK(SA?bR&y8fmx+*I-*xDnp-C^Kl5qgjULBhU<^c~C_}
zII)a}%HG~Cqy7~lv%yqiIXBninNKY7*@qwJGmjtRkw@p4oi>o95RZVNw{6<9j0Z7;
z?J4%w+w5#6><!wCTuf#xB;vt%N{L%uPUi48oBeHXH|56uAQ};3fp!8@Jz-`oW@dkv
zfB$d%DR%$V-{S}0zfR}zMFzt(%z{7aJT+;o^@0rJgHs-S)IwK%(vM>EX?Cv}e&X3L
z^T^pRaqU_fTv+{Gxt1aqGBLfYX_omGvzqx-F(I~C-Gz%%gCJZ9d@=lHH6MGB8}^kr
z5t3H0y>5Aj+|>FDduU-`VA~mP4h$DAL+^?*9|?2aDHe`(_}R}K<!66BC(HVre`Avu
zzO%-2-@eK#Z$)feU%;L`M(^Ad8b@dh>(@Y&jP9b)J0au)FO6c?n_3FKHH^gTM2l9?
znkw@k3id-;&^=O0fE0@fEqs{!6~>xItKq-#6_^bhP8*{93Sg_8X#GE_D&oSiqX5H-
z_UG_Qgx0LmT@*SeAer{Sx^@}%S3t)?K61FRphM?D!})wpOoW=4H1E^jS!LYcBxZ-D
z#hlN7A?B&4&hUjV{sa#{a)e{9!^{=uwQ9#kAY&Nkq??A(pv7RX&F-+v&VHMn{fPa6
zWt<zF@!{6dlp${U*Y4CO$@fP>Hd6Ajw`3|@i3RnaMX+d3V{b_{w3hKkk7YCBKmNOa
zhJWW5{(D}2XB&=pf)5_=k$3uGnMB_1wcZ!H$H#@IR^$sPv72IWt;453`4c?(<e%Wi
z&CJK`xnj#$1T|7_K(%Ox!ona5+D3Jhd74@e(-HN)UByRJm@XF4Zw?rTc6I2%B2FM~
zL(~r6x4hUqGv05kZ(!R9Ygt5RSLp4*%sY;SUe5ec%VQ_nJoYag<)8mcj`fv2Uj6<a
zFMj(1FTJi@eznc^@mZoz&12>|w2#Bo5s+cd2w+diVlTUjLg-4dos>e-WV}zC1Rpkn
z+eYCrrp3(B*20rb*oYGH5dx?cn@|Zs%8~Iu*MtRuDHG(SRAhP6N-Z_MrH!@`Mh?cI
zjcXr)=_N1I+FpV6ON#4*_JJ(qJp|HlmO1)c8w@uuV$y3YFAVtXr(1mXvx_|Y<B#&x
z)5|O$pN4iE&LK|+9zO&5YZ1ejhKvTVvlp|q(_(8sW`FFLMSjVmK1D3{Cr_r3jbSkI
z6<L<4?|_4Z%c%3=$x_TV{kX!J%J?7?=bcVm4Bt|Ywp0G2U;mT*<)8UAuC0&AmfAJT
zq7T_5@;y;H<luEJA5>uSM~bIb{Vrmf!L>GzKJ;lm{mEZqWhM8)9%TYm05Yx3&;k{{
zQqL&kQ6&M=u;$mAjgi(8(ZTzaX-&)Pq)r_P+x;A}REY*Kib4g~l2FNorJ{q>D0!?5
zjIyo5+Fs1`AZF@H!c3GgHIuP;HsPoL*aAQOr<H7{&&3~Z@x$M~#Eaj4o0aEh*!$!%
zt)H4>_H37a*H;aa<>1ttN){VQ2`7s2fE5QxmD=FQ;X=e*0Q`FPMoEt_l_d|R3TG**
z-lFw11u?hGP6(h{M)&#SRga)^;xGEl`U<UmL})L0&>C(lTUP{^`r&94hc<6@i{Xtm
zbZ>>lsck;<gz~9prugi$pWx}Ik8<SX479^R7^LLm443*Ak5n;Zuo97cW`?U9(|rB^
z<FgVZI1AIQxYS~N&`dspe5_=tmcn;x8(-tXEK`b<uaN#;@PJLQtBM4*!jR%vw1|FJ
zS^nc~{^MW$6Z{*$^!Lby%5Ga4o6?UCPwfy;(+^5g^%3K#6_2&jVtlQ`spF6FV_*1l
zY^^J4S|gU$q9V&*onnmVGZp=QaiOIlV=|6HI~2Bbrl|PBMe3;9ib5|`489AZY_WKA
zIb>sBZKOk=3>C*7*pfCR9ni!ZJeojp$OXm%JGrotC-hblI;)PUmos{EO7G}2k37@m
zkw3D`pBZJW|7e#t|H)O}{@ZV}E*-8dFR*>$2<<ad9PRmHa*#Vug9z_6GQJHJ@f<YG
z!kkULJ~S_EHmf}7ig{mb5v4LyEUMgsPEwap6&Itw$b<82al%Rw<rji)g2XGekhhf9
z5urD4alqDfCEbOcw|3ZkZIx(!jit_jXU+-Fe7VJ^KE1@#pZEmJr|LkKk*67MlzCvy
z70E3otFj$@YP`UX<Iz6~uf6EF^rofP@`2RO`5Q%+dEY#j1p;u;`WECr2_p`l8s<kG
z)=DY<FHI&@g0X-nV;hA`gb|8y%0}9OuVy^{&z<1k`+xs&{<nYbA29vsEW4(j?fTK-
zsmU!JbnmCT$488(R<Os7F^q3?SeQD-m!AFeY;9OZqcqt6P}3;M0l!Y?{2E<r7psI;
z$UA086%(gYL>YLXnwS+7ErPhZR;UmYc+hmBWO=x-jc5F)V<qkTb}LHMyKwZN)%GOS
z)Ip@eNF06RL!?^$nBEY2YfAU^oT<5p)+xv0nJ$a}?h;>g8Kd)ku76{L*MD%CORsiV
zyR=B>$Cj|4ou%D|7LbvXWWHi^Q6S<*gn4AJ3s><O!i7b6?O2tcYp6V`oYCsywjx1h
zE@gmMP-d3T)iFY5LQ1*|Hw+7{Da+KdpMA2Kvvq!#tIzGT{rz30c6a#1!iZ1(c*Lha
zzr-`2Tw?juG<3owx}TGea@=@?V0<c68ezj?v?xbyBG4{|evmsD?l{<jANwPgi*GAC
zJ3^Kcyw{x1gLPp}S%~_>(AH~f!@RJzh?3eIu~1gzA-7emKezH+$ch|Vr-(W>bqe!$
z_V}59>2dz;|Kun6kN)l7Ve0AQjHJ5BKG;09+g;c9+ucL%UzqXz;Hi~ZFNS=5o~dMs
zpZLkY!2W)h{lU;DgsbBq?Y5R#poLq#9(;D^&r0WDJoc21I3gsuQ{U(KXOw1(R`}RU
z0l(^7vf`?C0U5^*Oy&VD%M?5ITe86}w7W{XC*B@9g47B&44xB#A;OM>B#Y>7L`-cf
zQ*Y&TXLFLXF|D&b&i%?F=g7z}?{V!LH#q;_zQc|GG-C7dBP{>yX^uWS!@@KS+ORKv
z=x)T5b@RwypvDEK+n|7GRKLOdU+UWaK+G)yk!{E&RjO1!KdST>W|k>==9d~aF)#;a
z2BO@tyWQvaU)bWgZ*4JN8S&^`#4kSD=JS7PnkPSTgryT*=tX`!Hpt0_89EAw*%>4=
z*rKX(0a&e<p%pJA&As$$JW$4C7!IL75c>PV>4${l4=X?XeI;oJLrJA(H080y;yIBX
z=zP0bDmSQ%4Uj5#v?dMqb6}rTfpJnEn_>7F>)TV9|8AFG{^e)6`OZ53#b1Ac#b-`4
z$npup#s`h3cK5NK_uN7Eqry|GvO9sDd7^ZNpZ?jufXk1vySI<AzGa}sJ*(1iw3?J@
zW&S56=~T)gkGh~tFp#JIRvSl^Epr8vAv&!>+ggiS0jW+nhblnsqyBRB#8_*<M&c`i
zTp9I)Ge*m|s!2N}nOh-qN}PGyp%Ji;VRvNctVK+3JEq>wiKZ2E#1frZ;`Co!=Ja3O
zW%#32ZvNpm*Z%(Zx%g`xcyx~B3k%58^CZjG597DIf0#8svj7vcszPb|<N2aeRUx%>
zcT=Xk3kB7!Eb~J8xf-Dz8D=7wPQa|e`t?07zp%;5tNXMza*ni>hmRTlov+OBxi8Ff
z<aFEX!7woP_UUeO9P&90CbJN%iHao=#*>B%zqmAoVX6#wp+EG){?S+&r@qY`k0Bik
zSq9utPCPC=|MeUlRix&UvLXhH;*8WjVXcC1wE2NMZAQRouxBXwky4B`YBx{yijej7
zDa=3E<KO&ue~!!Nclam2d70kRM;VN>2b!mL`|J9C%-9N!kjiZq1rHWajndZ)>~M~B
zuf>;t;!n|vPO-MJk1<92=?-zPt+_Ka21PYjq2ja)ZI=tn0V9xQLZ15!&d4@n+44X-
zm7@JE=pfRpa72T+z4mj|g`cB-dsgsCT}YGC$os7g_x<ma7PNaxy92J}A3s*VJxrb7
zu<m4r-pJ6~h-qDObl)D6EM&;hi1x#0Is0Ubvy2#D-C*?_*SYk!-r?GsviImQ;-5Up
z>@y3@9*Y?7z<4Y76-XF<=LLtYx(84jJ(gNhYrR0;g;qAQLbqc%3QPeTz}s(c@tyCk
z^Q~`e;(oM4vK#UAlQaC;KYD~Od}V>-M<aqB401<4%yA<{)bDh~8O%5Ykmkh_M}m;w
z59po3D2KtGG91ES0E3}2Ooef(VP-~9T!eNrxR_kM0!NO(;t5!};BPENb)-^xx|t#o
zzLsX@YRZb@M&|>QY1|CdzqPVO&qH<ZoZqw-vpZFToS!24y*~ek|LZSt?b5IE`a5gH
z=N3uRyvjj%fOu-WYo&JIY>PfRJheJ+)?{4<tIC%?_s3YA|0LH|`o7&MkV~~H&x=`Y
z9o4ipC#vZOy`w^CCB&3Na6jDjXM5(P^fW65=M~wovi~j?6ckj3VteY!ED!%{06`O4
zl}t*Vw$HpAhseCh|HUX*#sla_&}u`gt>sKESHb2!1!^d;XP_;H_EwwjwxfGJqji3S
zJvu~=#w5p%a`Mj~<>a5=XZ*@KH@>yXkN)8gc<sN5*gP@Ixj%N6r=DG6+=uP;%mW5h
zHB_XYJLeY(N;QbL#?YEF#4{mlVVJS{>J~rv!3J-Ce~;^L?z4Y=z{zgHFF(A<r~c$|
z&K;j(ex^+p8}`q`u%pDY8E)U_vXUF@C;(ZeCCM7&`F9$Ema|+K_hC3z24fhF{P&}g
zr(~oB9V7Rk;&Pu);Ae|f+n9}^y(gS`M!5c#CuD2bBpc6IE`iDwcf&xbF=0a<jHJ9R
zK{1=vfON*ITgpFFAyUXqZMLD6V1LI7_D5|_%#8V~fBl#Em;daq(O=&~X1nDa_rc<+
z-P`}YxA?sWnx|Gh-e{ZQjfkfo`3cUP`Z70G`~C#0Z3ZNqINBVqHPKNgQbKF3X|)2B
zQZFg^LAr!xfVx5mU&Pc&xoH&DA|tn!%Nh7?T5;ei(5(PcRLkMC3p9w_fzABvt8g9B
z9I`$P_Jw#Gl9rP6lvc~TvnH|MtPXSUeYR^1-BF9~dW+6hPUq^FcxoTBD7fP>(bMNR
z`^+Pp`B%62>F?j*2Y-K)um9g(;-#ZqzVxp=%+V*7*<Q(s<H89e)WI%PxJGDoES)Lu
zM&2K0+<1F~3qRQ4^>44SaejxmA8~Rn;d5t~_?Lg;IFCItO=q?h-fRY=42DBYYKU)I
zUjI(SslQ-YToUrtAcYGNfRcDX%S1>WjK;naD_YA@3Te?=hRV!kUMZ3XUZc|x{RtJQ
zxoR5g6gD^E=s81YE+^gh3YFZ|#3_ZgxSBnb^E*=zoNJ?xS`IZhB`?Mr+VtcrqYVS?
zCJmMFjz;ip<;)*F%K!1N{UZP7zx;P;B{8E;@-Fhnd(Bh3gZMvzJJE`od)bQ0fuxw*
zgNuBqJhf0gNyO;7;l$#jJoWgWW@UXG3=t{QyGv?99j(H^R;01gYj&knp}<;O4iuvA
zVgN2-s)iFZ^?FHbt6?&Mrcuxt>SFrBD5GIp9>P9cO=hI!zpWX(y3neIi_=8DEw+(&
zWX$%J!M@kMw%X8}7COBEcz*Q6I9G-uw6U~zI<)tc&T39_b%a@5A%EClk_3sSdGv`{
zFv{Qg$2a&t|M{=-Gr#f(fA(MhNk+RlS?0V6WG?h(BBpxK-%q)6ah)H%w8AUTU1jaf
zZD#TwPo7xdmmXW-lRy3t=ay&b&cs1;8r(F-16=0$gS*?7mCb~ep<zdbt2c%Czf%6k
z|DJcIbSh*aFTl^kg#K6=jy$l9QojI5i{ND!MhKbTIBKmTb7jCWwG4!&ZMXpafluu^
z@wnlQZ$Z0P@`Xymt*aX(Q|M|rcw?<Ah@_T8U2pwDwuGmG_;aby>Pk3=oQdIUBYyms
z9_8QpU;h;U;eYU3EIxCJkra6v4+u}~4ggT@pM$P>;CX5Vl_J~h(u?MK_H+LNTYVwR
z)8NKX2pDTx&KfU4wWc7r#iF?^;tq32EnCO1ED#^2EO?Tp<{^wYs^)-R{^F<XYMSeV
zl5JlQ_iI{ISDPai+*eogMbqL!3Lb4HNTFhDFrwtSw+c^(%HF1@khFV3uLtc;NPjZ0
zkB~${TP(e`9!D1)`He9z|Gh0<d48XborqNzF^r~p{PZ*Y=3je>@mkKm^;f^l>ULG_
zy!pZfUisQ8S6<%5tq(ai6Z5B^TH^D6;b|U!e4hAN;s^eN+*f4T05=x0v7z6$Z0@wU
zu_avJfYpJptDeW@1mdo+_BK5CHOCi!%CK_LFF=PQA<dL=ri{ig9x3C@6QT1kD|2}@
z4^-zDN_kG%+PS)8abXixc(hIA({66TiN}REznkMSQ#wfasJ$TU4{C`rMKKR?dq%7B
zT$N^vKt*;e+EU|lNefLbMM!lqqjNr=!nqdaw?_Q=KmKF9{NfdU<9~Rag=fw%%JN&P
zb3PoN+N~d}_fJxFzZC`Vm(o#VaF3?Q_F}&H6Tgh=B7@;B#)P1Yat(D5sq_G9X_*dH
zU$XkA2sN2D`&SjAzU1=!w?GvsTG-TA1STp5>&6p$@opHV(YA!Ua(ERkfSVf1P~F0@
zTB|%_@<0`lBK*Z0$NC_b(k950K@q{FN}9r`5Bpob+URtA5KOo0$*+53p?ezA_7uPK
zSJ!y?hucgo_t=T{_|7|j$oZAGQEAbhJIk;BKcAzY?eZu8^0Ta7-sN}x=F8lC#qmpD
zdYXUZfBFf|97~ABKri;avrBQ~5oRdl`@-IuVPoC0x*xH&FKmoqa|C_oeb@3pc_^qh
zqrPGi`0d|N&OM^6?D(5pt}qzFcoYb;c>!txY=Vr=1)~DAsMLa?LD3@C+CL57yF%!1
zs?%s^2aX<rxnsiCH6?0Q9iyn{C!$jQz8HrXEpJAOS1(j!-Fm;|D|<|^TAEOK6kF&>
zt7=mX+}uovzmf63|DXRey#Cr2=Pzy$ot(R6qSXh_Q@a~mrTZ<ZdSG~J)$b$i(qB<N
z@z_r>J@W}xH+C?_)J!;}ib&O(_^DjA>qOrvRg)^!j7%HR-IRY;0*zGsH!Z_jq`LnE
zcDjkcn%Z4B+}X<kpwyVET8>-FJ9JSgY93yRC8Wt0_SFG|)$`?wxu7jFKntO@t<)5G
z?l-IH5c+)>PAR=9;mB#2J|X=2f4t7~-@U-`xp`h&e}ljK+TTXAITmN1WNGd=Cyq|@
z@QEG%;MZQ_pZxj@><@$~JI{|l^;y=oX88I)N%@n1yvy=aIit-1HWku6L;qUD>J8!M
zHmr<<?c96TWuj!NWI?5=_{8_B>hdxrgYeE}<>i-hj-83v-uA8|{XIWJ^8hAghG*GM
zhD0qFw#|i8u5<Nsgp%4r4Md8WTOkX}#xPFd$V0GxS&723z^hNBBzs%q9e)dR&BAdw
z#J*zEKw7qkTqDJ64zsirsao2?56}4<n0K4;nz$?1EZx^;_z(X#zrernum3l+_Y$(H
zUPY>WV0db`12uEMfK6`CQ@hQJz8^fb$)(0<!!SE_l21JJ3v6x=z3HA#3<~8S#X>60
zdoj@}sU1qq61o7l#-O9_@G1?kqp|g@?$D-a88iQ@4Q?JLEFr4GQ4gofXkCq34OTS|
zT1DsGM2b_y)hR3mDCPn1T(IRX@;$>a+yRooaNuWjM~+4O-mh)(`_Erxy3^*`aD~79
zqyIZGOFVq)D}3TpU*U-pJwAB~o;(S5ddStQJG}mC#_zte$v1!SPk8Ohi+nHn3}64o
zH2<f+@&xls5f|Q8cKX8gHCXQ}Lsc@Xo`a{pLd%?xI}cEKkg@sds{$#9f-`*Yn>l~(
zUxU>ZKTk_j4}Q6;xqst1fX-FNPy^^`jWJuakksaBT5n6K{av7t?CvPb=Y%)D>y-yZ
zb)OeYB~z5%;oli4`~d<zL`!>DazD3=sGBVK*NGAGa9(BMCTP?XowLAqQ(L`O6B}N6
zCF9v=ALW1XulzLshrj++PCWAo#&U3c_hIwY<bzA8x&!Xn2h3BO1U1Q84EBcn_>X;s
zoHn`JD`icM=g=B>Ron9hS+el5DrdQ-M*TpWfJ2RpTcn?d-mrYsMEmPXvM<5G)w?)|
z4KkVnRKtMRni~2_Q)FMZy=6%kNUz$&baBBtC@(e>QU)8lklt>bPk^`9mkwzTk}78&
zjd<w~`uv0c{t7lylGYS||JDB*)ecK@pJn0rvrHfB(S1Bc&cHAc&Yfy=;_)_5Jq$;l
zJb|4$#&3P|uadL}T;BaM|LNbj!hi7ZpJOl0xiMDur$X@Y$dg_@kO`wq$;R5?kogwT
zCu9{>R<3?F`1(tZ^_vcB4e1cFAic_i9hH`Rufokmt1UM)#tTKot&LQ$YSvaiCtdiM
z`+b->Cd?fdHZD4BTgq`lak43%w`Yuh-A;?Nd&<8r=rXGQCgqd6v|1TCs_nY*z+a5v
zY@i1@^&9h|t&XCImtIWy7e4=UeD$ff_~E5%%$z-Ws0+vk&r{<zUU7O?)DQ#rn#1<t
z@!ba7BaSaV#j&HGq2C{4C2DR}bW$``DF7<bwlu4n39yyo@lr<&skM#`=kSS$1b>n`
zRa`+kag~!uo)^3+4}5v4GZmal#i0rV?fT|UYn^m4JoeQG<ztH$%&Cy){yB07xvO|t
zc@F6)fC&Ee962MT!;D}58|PWuy-6>b<NG&W;QH=WW;&;_tz%>(%jV57H*XkL$HJ9)
z!}Z0SSI0TO{zlHX-*#*d2DCfJcxV0hNjf`x|AjvP@VC}D{j{aO@8@8}S2~7a9|pV1
zcvndW-pbpJ{VXca1(ybs+pHifD^`@@j^Wi8QaU~3-$!^~<*_Q?Z>=SDwG*SJZz}&z
z3qq|NP^eJL!cgZoz{4>tKV-;?c^&>sYdU&YR>o5C5ySbBtN&aw^_6CxdpTK_`xZ8L
zp#lv$(%kt9Hp|3QSBl@~-pwS<h0)lbTRS6R<)-i}KmQf7!5%Um9bf?5dk@AB_Ib?R
zFAv_0r*@Ys<HLGyxr-TGDJf2H`^wpqUqZy-!r()&6T{J}T5J3`IpjP&nBC%6@WxN;
zOJ6ZL<h+oY*MFgrl&apZQ%AH0gc?i-$3aM~<prqZD&(%X!+VZf!B%%+yXvTMtX!xd
zi@vhh`h^zEgIevP2=>#?c_H_BsPyI?C(c-Y{lB@!`D>SH#}St|&hwqi{{y}D944Bf
z6)j*<hPxRzuL#fmK5Sf7qDc70H{l=uj^kV3zQV<e--mn;F)>$mze%r~@pt~#3Imrh
zGcD}xY5CgIq0f!T$3B?GOUDAZhx}A^HTp&P)n(95EH6FpKyp+nP%EmndW^v&kEfod
zRUZX3vO@I`aX(V?P*C>wVc~=jwG@~6tWu|rJY*{P8x-MJ|9uwJ1et0HaK!?|sh7rO
zxi?2BZb+F^pUxFN!_+BhUV)nb@|Ab$gi-2m3Ky=8INN)KXHI>B&71Gk$ac5msonit
ztt2<eomOkNTT<S+7~Z@WB)vUPP3|*KZ89m#ztMc?Xv+c%^ACGgy$SY+A|c#DYSoua
z@MCHWy_)5;)QGfoy^|gqlu?=bN!4^rASZ`@FvaGpjzP{De|OH*S5z7RPOHb|&IFo*
zlowgOdMgC<S_c8Ajcs5as+j`Zau-Oy>ceZ!JsR_ezrD|M&%H&|8ep`;b65W^xoi<9
zGsMvnt=0l2Hn`l8r+!3kV|e~M%1bXecDL5p-9C?VBg7;m(L8JYR~c}X8*4j!_3y9p
z)YAqXhc+uD+G}9^7ob+oyj+b_=A^7li;ZThBiy(otX|7$w}m{_3ixs@kM-n7q2;0|
z09kE*T2{lZ_`YacwXC+3${u|<g!YUuy)2Bzio>DmJW!$4&B}puE>z80Rgp!OgcjAi
zmb4iUYC`6G^_CV@nbQDnK4LI+O6vR#t9Z;f_oU>(SlQ?cj~x9JqrG7Og7<0?DffV<
z_HLkdcg38!(}(E?rYMlxg4*Qsl$)tsN#Z$->0n}S?q>>!QE9Xpl@qJ+{3EHuTLqpa
z6xR7f(gZiH=fX{PruEm^nAue1&awm2nxjZ96e$nYQ<iDjM)^vtMpr1dsl{--Xmvu1
z;=)+1u?ehI4E1(258J`aInI2-u(^`*kN*A}sM(<#FY@;GbF2;Dq}y5~vOVHxmR74*
z<~@vu%F>d5-QWL?u(LI0G}!Ugil3xoO`BXD*Y{tcGv)Z|SFfR+jI*Z<qk)ufK#NK%
zyw<!9WM!MJ6VAuMs(oyE`^AiIFA#3EsMu=0cM~%+kBqfBTupMPwPiv<`6&LpI-XLB
z{qr2g87!VO;j;^XMe$fio;&g^C(j(YbAG#<s|UK`Jr}RFxVhEaPUn{@S?&qd<J^<0
z)6l}EPCVJ#3FBND<uJ_r*T@-m1WdF{%naFZ-0V8!c3~>-$4~7xRo%NO9PYxs$lO`@
z-YwqPUGvoBo=`dtIusO@O3K#e4mN_MTez_rj873M!E6$`L<?7c<Ndg#iW-+{uts5;
zRxK84pjlRUbuytGIF6G*Sp9hgtfh-X2|j_^kk;fpT0Mp^rwQY_8VJ-bW}2HkEye!D
zzmpOqGY9j>V5(>N|NgD>tZiMQ6?GYAecssoO<GAC8}%@zM;x`o@eQAm^IFu+HMnur
zvAaDY%Tm;ZSi5jcY}8?;{{wQ_V{2{1Z+&%>r#@|wRI53pPR<M~?ifyLz~1~fPNCH@
zy!D!Ym&W=VpVqdbTAQ~veoj$^h1S!R$5?CbD>QuhipN&Z@2mIyeP!;X!9<W};q^He
zKu&SFYgB8wbN<)70J1P|D+C3B@=~;`S@^7cWhP}+mKEPSW#p8x3+4y8GRk1!pmjWA
zJ%#Hldtk;PEA`&we!hQ7$KjRZ-KY=D-P3dBHaxZaOTN7osQIm>lDb{C*RHa0V~d&j
zn5hK`KJx}E79*y1a3(54t@Kr8V_NDm3jmW6%*sP7)nlvnMjBz_)lk2(wP?^n4oh&A
z=4RGkz*4r2MOER->O;!vp}4pU04yJa1aY>MKvuU(DuAIq1!o_N`Py%;^2R$Cv56zG
zQ@pYEo1_e}(G-!L#!8#W_Pk;us4JqxU@dH|D}#MyJjzfVmox>$pg63F804$0^k1bn
zW%=rFtg|=FIC4Z7kAkI>)(895XH-vSFVrFxk=4KNxMNwrF6^x5bf=0<Doq*(6Oo}M
zl|!0<TC42psuZn#Hr0(nOGV4D53OmTJp*Z0TO1TX9M%bbLt3<(F8tmDSss4%q+}0d
zd8p*lKvvF*`C9<GA~<@aerb>fn#|Zi-cc5wh}g3^-}u%FH+J4(sB73bskZ;OEKoiO
z@~zy3P5C{ZvE7b*`);7tK;63nH8~X2io(YxmQl7tsvE3aT;bY<HR85qemP=lR)``&
z#A5IjoCG;-{rRP_y`(8PZqP-fUVb&L#Eaqd<Q;tiM72=~HdrVJs=VUYf{W&IFNezV
zW>ulZ_OvF@*80Y-Rt0LUQf&0sRypx##2YX7`Q|s?M3Oza(ITsRZ*YC^60KwgYo{<~
z8Y2mj=>*{SKR-&mLF3L24Eo@5uMu!A5A&x8F`ir%+cs<cmvB*^m9;H?=c~J%I_E>G
zjjeqSApn{QKyg|Z+SE3g_;xfKSuVVm(wj0tz%I@AU!P6ZZaziT)o}2b;BPnh*%Ovi
zE+_)B%<F>}PFm8U5_PWJkXFlsq7tpDwEExY<rdWcU8YJJKragmgz|f>mI-O*Th!b_
zv|yP!6A>*NUVUeqzxAuHaQ@octPX!f6nBxh)zqWj^^)NIf|}ejP<wCI;2#?KmfNIT
zD<)A$ayIr~VRq>pSKfJ>jkR@_k1nxzbdIUHh|$2&-*=>=FpS1m53ZbaNktVCIVAkx
zkoTxXV6q<icg5|y^!sn@WDnOMH^dKhSLXr{!-+2vC~4|9wN;~Mf@6u6;m#$H8H06N
z>J*FjX~Tc!j~Yfp_{ab7O@`TZTCqjlh}Sp&0a4sWOzeS85{zkKZ7U4({e^2Izs>FM
zLppS*=2hw!iWq}P?2Q*~m;KRAwuV=jo_d6DeB%aBJ~PeSEUa&N?p~ftQ>RI-Qmym6
zXo8Q+9Z6z&^W~H$p3Q^*UZn-5Ocj#`6{q5?Nv(pbQ-5kAV=CTT`CFCRpZWRM@|lS9
zFOG5QKOy6)^VbFXbg@;H(tK2_CA!q@={@(YkY^c@-~uA0ADgv4bh$kh(eC;0_xeMA
z^vVYBoL}X}%?%=(fn8^F{{jogANEkIlqvFePrkidp4z+M#rpuY_vy#>Ao;R+d+*L-
zo7Ef7GuvKdzWXd&+gI7zxz3fV^Bg&PjHRRV%r7V8ISlq4qrSI#7Vom(a3iftt(t58
z3HbtrKwWB+vfAn&J@BE{-9Z{&xl(II^+3Q-;IkE$Mp|%eOPNq9&k?QbCxT;0MM=n|
zB8-|4w1N>jQ_8|o%h!MV5-Y2huyIDmEOCDGA2HH(5<7=TjFmPb5!SY_CMf|zRS>I;
zQ(-*t;G!<C0Y;&%w1`HCMqpue|A)*jKEnFOCf|E*ho_%eU~N6aSn+;pjZLpqGN_4Z
za@}0YIiJ_Mc1_q?&1iRG`uhr#X0;O%x;hO+U9k{2#CoH)g+>~tR@F?}db7&uMMJA2
z<e9@*#bNyNT`Mhey;d=`ALF!n(=0T{1>xES69AuoVQKXYQR3UyoxK5Xy}iwiYn!aC
zuF@ZDVT{sAW^s~papQZmdTrYCONVGiKP;Y_e6W6Occ%Zmw|;83o2eZtfKM_y3q9Vx
z`86I|vds5B#m;z(-Q64P?X7b4@(i<cODrE<WNvYasaeZ-WEt${j0cW9tBZ}bN#fPo
zMIqAo$pv#=Y9jdR{FlQgY1J*hqNCJ`J|i`-)XL1Vv8JujP&6>_wU(ByQY==al!BSs
zEYFnL3m%XbPer`>+BQFU;T23Ypk)@=9$w{o|9O(uv`?yvx_<L)V*kBu)y(7s8;1o)
zR=hihb9qTl4d!9NC=KGM!_N41c1D+J$0vB<dn<hM({oJE2pb#C7JYKIRSME6q7tQH
zr)@;ZQsMfAlt(|;Vt>zv(MWBRQdF}Ql|-sJTHtYLT}L^=c{|96*M=cOI##9^gx;dC
zamA5X6P{B`R}QHqZkd`;-e~2vOU=wco!5}YZ9}VTXis@COS3VnoBLe9zRAkUCOf;^
zjMF|M8OEfvJ8fDr%kJm~SGT``i8B^XeIaCiydR$0ol!d8fBc`^V{7on9O3@+)ZT4T
za616BQ_zwwZ>{_eOT9}h&pgX?vcOpP$lNNc>zk~vU!~KYW`1#=#UqQ%EKDI-(jg4?
zbH+o5%T0L!I4Y6wK?a@Haj&UDDHa<#aVm)3hPzYiN2Ts4QWGjmjqF>7S5|{<=lsub
z#wVQTrFg%p+(heE-AZrKFxb!e{oi|;T(^lxFe<#g^&6Pj1X)*$$b>djVytarZB$cZ
zm@-Eq&nAg3#e27iL=b)ziExZr*?*pg=1#D>w#G{@9^>rUIaXIQto7|&WhW&y`bF`3
zsk^tAAmtF^B;uVn`+VZZU2_&zTlSO-l$zl|#SUu9d8#^5>kw9&B1rvlT5$xIPg+(l
zWmWrGH!&y@s7y#VE6%&12`zq#u|lV7=}t!^9Y1s3-5+rE;wGyr>uhdqvESb#(-FpG
z7z<G=p(Q;;bH>>Qm-k;}Yw$YLb4Qpx_GD4we*k`Jcjo2zep}G@sTI9{eroRr)XF#2
z%a}Pi#n$?d*t+=^%TrIYH2o>!<TyjuCw2SuhkNuduX5vRo9@&+i%W~lFV4}MZ80?;
zlaB((4Lo<MFqJg*_&urnwjHwMDB8vvxvg$#RIl0^l_wSXv-lZO(}q^Sq}38dtLM`|
z5wMPO7FP-NwPDGmsw6#OYR>Qnzx^ib8#jp(Xq!2%?))zM?keqgF3fg%80nONWKH51
zF$E{k_$n|<gP)l+l&b!5#&}Sa7$=ceaztG=2d{Co`z0bX%XhzfnbYTd)waLq7YR;l
zh5}l7r8Vu{tC<^Nn;5q&H?P3XW=fL8jK|u@wQxGI=y7^$<%?A9d_BFaKBg!Z7u0xi
zqoJ~RBF4rk?iSTu6(*$QYP`*q5t5dr-HYi=8RA4q^OUuX4OZUTU~O%ko!w1F<9(0}
z6DigjI<}3K9@bg%Y{2&TO}2+`&`)pD?k;ic+~<h8GasOz8h6H1yCe01xnF*4A0DOS
zj#|~?_eo0c#0=?P&W)|-S>6933*E<=>pep^If+J&vF?)T9y@z`Y;Rw~TxiqlOtXCC
z2+PNom|1F(XD}Y*3<utlCeO4X5h>cwx|8Z*uTg3dL{igKN$ua71MP3E`<zfol=+i~
z9svzTx>6TXU}PelUct0r{%FKIZ*1`DYj0zcF;+V4jjnLD{|6+kDL?QwZLH}a5(mDY
zC5l>zHDx7cLzkHsYJp;YH@OoRTW+Xx5$|>^yR7t|=giD6u(rC&Yp-u|?({snyE)eS
z4da3Iv58})H5x}@3t+4x+l#n)A?3uQEr!F~OXBn(Rij?b6?XCUJPc_X#8ZzXsOQnv
z`(?rBD9p?oT2q#^pJQy*I#<IqAFdijmbe|!>PCJMqdEQI4%aSiv9Y$v*47sN{T*^0
zV67rni4u#Igv7Lb=yEn-FTKF-@CtjQ>p1J^%^u_U+)rRzJtkP^AA+CSdyW6Q&lTH;
z32Jwfy`Y*C_aNylkPUM-c3$D;$`6@N&avG46tkU&Q9I9weNuLDuFuZS7CYNFxO{Pj
z>DdJqmll~@oMmpg6@1Ek6_<{Sd5m{<tfdpw77A6Cs2-x-sJpLD4z-(yP8zh(lHaQ}
z8CNYgq4JQ^DkDLv)~b9h0yB%2VL#<NfA}iSY+_uFHE?0~A46m?(!!VsYugx;U?jqt
z7;9S<Iah4ihI)5cZxhrQ%!`)pBtjJ`Dp;J1h;72==tYj@UnGiRUjE??&Yqs9-Sr#R
z#;mR8Go=Se$2GsQ0Cd*ITsc4F>{G6+%$!P-m!?vy-0DG}+8Ad_jRalCxJj27Di<TN
z6ylyRcg%9*&D>X@&eMjBF(mDnPB*4IZHO$4#sfAs*SK+Wm5t2}27_I)YygsCj6$Tu
zSR&J-Wx7}#qkMy{!CUN%F4E7g617_Nrcbea{Ij$=^R?<;?_m4+pzze>J%ig_S8VqW
z)Z|?#9q&C*MkU8~px2p$)G*vz=ltG3Cf?~V*M69p_QQ0N<6t93(kEv`s_U$8Y_hg~
znI!2kH@CpT!Xh*Cv&<f8frHV&F&Zf8NXfHMm4)2M#!ONh0tF^Z4LP_xZ8-PJgjZIX
zR$3&-8yZWGf_qSQp!MVEiab1}H4W{q;rD;<b+&h|Vd9iT=2_c+p1u4kNqg2CD4G}}
zegkT3j4?6RCRp3@b4_Ebw%T|qhRb!rI$N7d7x7h}5lb$DwQYv^78}EtIokUI>+9Ef
z>-=#}pO|BBH}~%`Z?bOmfYw$IXnEBsNn%*JqNL*-W2^_=+A~PqOjIlCM`J;Bpen2B
zNHvthHOrym<1cKpoEl~p3|BKlyJKm!Vv<%&lz@^k8f|mq!WwJq>um3AG8pdS+{jZm
zti{GcByAGuqMDNC+YH8Uv6*c!Og9<1ZETXzn>)(f^v{sAXG?lXK^!hxX_5EFQ{#Q}
z)c8O^?XD}fcjLC)Kc3pV4HIu8>6+lX5i9NaHl4XCvQf&`&MT~KJWt0QXRiCW2f1jG
zF*&K(#nC6r2CS@XvUc+_aWc*9+#-uh3oIO+Wo9vEJc9m?W8Bx^$Wf>vYJnfFE+o~m
z+N!LS^pH|5%+o{<nlIGfr*qZlA+%8ipsC0qN?*_Wn^}l?{YN)B|IVAlagLEGvTU2{
z`+q>3bUiyt5)WjijgdA+5>NRsEsVsC6^PTyxUypMyK?hu#Dt`!K$aGZ6N`}uH5pOV
zVs-F67Q3Is7|V}dxy-54b0i(l;`gcTl@S1FgZ_aYSYqRx_m<n+6xOb%bY^4HJr9)H
z@YOzKYpqQtZbMHjl{%qL&nXrN)y-YKOLCmknThDMTJ)xJMroh5jhk$2t+2hb!eF$6
zx-4uF6cahDS`yPEBF5>6EFG|&U1N}6rk`FRmjSKrBHg*uEOwv9#7T`7<f`$AX>Rf#
ze4g4J;LH6@sk(P2k#{yvd-qCBZabSZwGmB*Z5w*+ImjYL`vY$7f14Zo-=Z5GV=6h#
zZ2K|V?Guc3#MteV>wr-{;O5F2D>q|0@658Ww8Y%}0#kF-%*`ff4#R;X9jf;aOKWXO
zeF{^fh17`(^=j+Du%>)}P3~5isX()Jnvl4bn_3eoGYgiT?IACH|3}zp1PGBNytVV|
zxM)mdTVdEA`4-f8Las3_-;UZgNYoTz)Csa0_Q~PuFEbwy3>HUdUrmJ3nB3)9+h&xl
zvoUy$#m;9~U%$b{izhjCe1R*wzD3S*IXKU1%s4%#v8fVJoU>d#pYrq<VSmR5N;e3#
z6H)@L-G|EU>7j{E)n`_?s2Bq_R$5)5GZg}p#gL_a-nsq?<7?{-_XlLz5XT538Dhc4
zZ6fJne9RWk?J*p^!`AQ(cGDHw*3vRDnY1}_`g7RUOwA>kiG;O4Bf4Xg$aksK?wHPT
z2hV$#>GSWUZi_w`Gr0Rt$b0XmcnVQQYc`=ZyMRlD(f%ga_TJ(8-nW@+KgnF@DZ23z
z&}A$mGBX4Q3`ZlbTwdYo<%Cu;%lyI;%SV@(S)8Uf8>2Z4b{)e#B^~?fOlr(rY4F)Y
zD=S*jLuxz`skL(=71f|QhofOArxQ*i5&~R0Gtg=qzV(eCF&M66qm0B(v$FRscCzzy
zIt!tVim{UTIh*(j%}DG)&bET?Q%dXcGFq+-St_)U;M4_&--5Jd{1QQJSSEP$fhcOR
zw*Osb+fQJO;q_OqaQ4g`aT`WMzbUM1H>G9-P^t$SiUEgHh-1smt0SIK*WiZLi)1ZJ
z?0V!Khxmzcz*RtuPk)cv5Vs(TeC4{grR=OZEQYPkZLZw>9-WZuX{;fU1j`f#18&SX
zTV-#2nceXP#`zk?I;Pu8{P^;x_!H+o&DXDdmv61!#B^pV;)zz4^i^eMKIH4_eqzRb
zrh9xCJheMc%96XWEG}aE3?_!o+%(;}dB%g3-Hj`3t-b}(fNs3ZV&})`wa#H}hl~NK
z*~2klm=C#jeU0naV>%rVa!bpL%q~vTok_xW)iEBZUp(YeijM0vl1kCgD8MG1dj*-?
z&S{moAfh#)y_PFcW0a_^%+AI9=%p)Mxq6W}86(6D#;aW4{T8j(Odz*Lfz}a#Oj<z-
z6@?jFtG4*4k&A<fTAkMXVygr&DO^)DM6!nkg8y<vw!>h2o$cY9EOtN5#^y~fTsXmz
zBTL-4l3|VK$rU#Vtu0K-U~8=;UVh1-#ED^R1qS;mQ5<`nZEc&{ARJQh{tnx`7BV_x
zmAES;ZHN;OWa9yB-%tjdj?o^BQ?Cy_dJMX4A+htcYyz60Iv`KC7-Splr5D-HZ;<Jb
z$aLr?^USqA!Avs8R5Hb5a|=9iY?|j+4A%L!-f45g{@(r6?l({EPRX~oiPbD=2=|hp
zTZAKi6hKYxY!G>%c$Qk5stS@4cMX!aNnOm@g`ekI|2tgX{VH}hVY+peh0Zf{lH-W9
z7|DP%+Vhp%c+B<d>)g23rrnulc5Z>i<ppLJXPBQ$a5)V7j?um&AA1WPsa;rFTaOm=
zk<#o^Oc@Ts0clpfHLa?rB0)(EOwYyKxW2<nKX{cW8R48Gjw}~;ehVTHllX0&En3hv
zLQ+;~rp93_=TL<mR72CM)h4c7qL_-$7M=%<!h4Dk$w3TJ+-807JoB9=v6Az~YnM2B
zVu4o2OSKxtpC$N*O3hIrQ0+Jw3*$Y@+Kn+s&a@csWZ|Y#C-ri`03<=%zJZ{s4n1?$
zCXjT5xb2g`@)3;oU~^L$Y<pYvI<Q8Oc&qS%w^@e~{oxJv#&5BgzD4Txu%=5A&(rIi
zpk;fsOq<BW#5SU3W31%F(U>DkDaRJ3n7%Oxpr(fqe(o2jeGojgJ9XB+uVF49GEeP2
zg4&&McBIT8h1_N2vd7Ws&#=(_9M|?=XLIlxo5Pn_9lk)z&NJV7l-brN=q1O%v=}oW
z*8z?l2I)Ti8>`&7p3rJdF*m=+(vc-*mu8qfn)ti?&@t*evZ12Ic2$~rl@bDCn(wuy
zPYeqKspl^Q)H6mgM(NIZ3d{@Neu+#sP%;uT!|L91?B|zA+KVBz+=j|5w4kPqm?SI?
zY}k^<;bJ%8XNU(1_1UOZo8)TTui$7LJnsrVo0oC>@14tuqAB{rD{K$nV6OEf8|y1v
zytvBgQ%AXRDf8jN6Lgt!M%GANsy3KT9YzeRS5r<sM#yi~(s)!G3xEnYZS3v6lQx*x
zD*?uR*uDn+4Q131WaQF8S+T)#si<59C5~Zpf0YY6f0I_Li_jr%Ez-4Th)fSFG1e$X
z6cL9tN)p9%;x64-SWIFTXN85um}%4TnW}dPY9Ae*+O6<KxXZlc_u%gF0P)oB2dLGb
zrzDeV44RX<0Y(hdtw-o3ry03j2IFh2jo#+Q{&TeK4D;<LnQ483PJ9F;B9$Sj9Rhm{
z(><<VU*X2}7M+&Ytu7p0WNvwe*<&qS3d21|I&fs8Lh;}$17n(5r_I@q)^Zz~npO{L
z(4J9dW+T4)`){zmb(JVi5p6Tf*0|aKCP^|~Z7*$vHBpdFwE~B&RRW&1EyP5P)QGwb
zlgop}QW<bkD;<mPv6W^NZzH8dh&YrS6SY{`|2EU{V<2PR_|XN9o>(O53d6nH2uw;d
zZ~t^|!ab$%qRW*yj@Y`HV#%unu)2$i^T*7#{Jbpo-8Sh+*xOVFJ22dZbl^(Xj1Agc
zSF22Or{!j~SUw~z5K>xpnYr#U--e?|*b^I*VN6715+aF6Y@2q}p%=H9PK2Y~4vUYr
zXkCDayasF^4N$vVN=F0KJ}7sO2aTt8cc69$rj--_HMB`=m$ByFh%e7ja;)hv)q0d}
z@(`KZWsqKFW%vp=`hQ5rEHK~t1T&o{>BdW_z}O7QWrWHe!+gMSWrLNKgjO=e%-kY#
zOAE{`%`knWgAvb@8}F;n0?@kkQN@&!LgpiNzL>A}Y~(cpanG@MB<8JGS9#~{H;7vq
zd9FkvT-p6cRSSw@B=TP-@e~i!LZpQu%-jN5w?Q9}LM~O0w=2uvl1xl#$!-Hlx2WF2
zbK?*q6h{(G(;r@AYxD-Q$z$y7T<7)IuJYuQXBq8hl^Q@zQw<;$O-37Kn2^MV{cXc&
zkYP+rHuj=;8ws`pwiVoVQ=crqy#j+RWi$w($TeS4TL#fe=?iCyS#5opV?r=>$oaIU
z=P4aJs+KV#7%^D!z}B*@@D<aJBIe?lW5>F*J~NB`ZN*4l-=p7?FyjY_r*>;lyVoN4
zds3-=5InVaW6`|(>yZNzcYo2C$YOGfl?ZFvUIIf(u47bEBHLohJWMY+L+17vWh>km
zy~@?Ww`kir=37rP+j^XCv;@*(EF)YrLfL1S?K8N!!OG1RanfUYW}fAvi!2_SWA1nx
z(GW|wmwPX{Ov{U=bTO~JjmQSWM<AY7PCOiQ`L#V>_}&k|?&4fZJDO!>=MNa>*J-sE
zQE_2@=Ka!))IcpP4LqSXBDO86M2U)1Vx+PRDi$N9j<h_gL2;l_*^U~Cz$7&~zXRil
z;|^>6KV&LCg_toH-g<*mr<a*O+GXQ<jx7R%wPBA|YhAQ*6bbnfyPJlU8yUwRX))N#
zk;p$P8^i7@>}@(m`(DJ4R=is~VPB;a7DbJ`Su@clhl<)$K@zNKh3AeiVuO9XAu=(E
zZPBs`tth4w#dPC{`Buc~hhy~78LSGC;XZ^JfA~DLThHw8J3&_-aGsjn=9zEvSdrTl
z?-HuBupKmha9%pQ8iQi}mWwgqu%=5ld6;&5mdx!kO0RQc_yex@J;==^k1^YRl1_XK
zF)c=>PiFQ}88LRdtgfxFx|+~_eTvz+dFGcFnL9Ge^jwdgHDoEIgPeTiQ=BRRJY^X3
zC>4%A1V8ml5ikCejBkJAWd_*|tfWL{iv9E|H}}6w(wXyBMd`Lt%+iw5#lvqz3l3ZC
ztEwPqFR~uAK?^IS`r05=l(RLp0VHEoB2*&Zl9>o`4uivy5=YYv(i?0IUty;GG~@9q
zuYCUve*C9DLuW?l?`X;Fmms$!=wn^YGTa(N+%hCBZ&P*S`WBCVw#VM4vb!SeZ8%0l
zL4$C=^0lim2eqNFs<>;D1m8kFSNAs(#hPF@Br#T6-mEzA_$&r%A|mT=8pYC}o5W1F
z5>75goH!nV0qcY)iff98y8$(MfO%?@JXm>O)Q@{$H2I+O)b8f*<Q68D_!BQ`V@*O-
z(4BHA=R_*0cRy8&(+uY_lniS+^x6;8)w4J^WSFnBI(mbf{TE2=6f><ym~TJn7Z1{9
zWcrNlE~+~W-5!J0Rc@}dh~MZk)mvm~d6C8A3rsI`h-V{Q2I(kA6{1+_^`JEkr#>M(
z^I5|m{>Fgc_|;e09bE<)p=xkC<nreKfFu!OW8c0KW@;uWIcvUhOAr%dY*JPmzIqdk
zv52u%ZCkjRnCkac5#@t&s+2H;P|!(IZ{UX4ojQpT=dFR`WQz5{bM%r&F~+dE`Zg~<
z-{a}eJVxdmgI(VvYOz@k3XfJxXmui@AdVQNefD;@xVHKR^E<O#d1ILyZ>w*g^I$+=
zD<w#s!lsj*ZZH(p!$|3RFa|`_6N0V5TRoXJs_NTM<MTKoiHJ??t2PtSj$+zT%#rDc
z$BxCsZ39_~W?8USzl+GGyFTY1RAbqD?CxReauT^eCXx4#r}i%EZMl;{s3EcmQ4ZF2
zaB8Z&0B3;Ar$nigiCCTmYEW{}%+I`}L(iU}o1Dhw1BTg6R>!ZhGJKA<nP#r_D0A&+
z=tajtTBM9frH{&pOh#<&?XbObjY}6g^m?;QP0up7Jj?X_6jL)T<`*r?Ct%?y>~3fL
zwg24;-+%5^NLI+*5OqRirnt2A_edF%#EU^TWkVYpSG+aT^0Fz@Dz~6wB8+WgY+RCR
zD@DFE;srfb!d2iVwGbTfHrD<*V(+9&1ZCBxh*(q|aWum)U1ekVJV&}eMV4=K@!}6i
zUB=^2KE_-(s?woqLIBM(_V>5Adh;f$>sQ&^U&XnM?VSxioqU1u$UBBav6S*CshI=Z
z$`xOP1EJTGQY<;-H1#H(5s~R)ZS31pF<3D~5)qk*#Kg2rM9W$d8*`+W@W?_;V!|;@
z$7E@W8uPK^sc{#hrF&Pg>FphK9~_?Ay#lqmNX2;yM5s=TNr)pqL>Dt6%|~QTJmFLX
z)tYmKvnV+#QHWy60?;{(iRmOK=_JQcO&RA~tc}lebMPW9nPaB)5Hrcc^y1S*W}3|8
zqzuUIkc=T)dt0n;SuS5~)9p;tZg+^2m^hBfQ(<#sz$jZmTC0rHU0m+yM8{a!`5Jra
zWjfuXVaX7c0AtDutpK#Pw<{9QUo%)D>w!*;sog!p0>SwCT9y)22y!3<MQSanQHu+e
zn~|tIHX?qB;7x;b+U-TQ`ahr(Ezyh5lDQqOUVV|Bt!+-7I?4R<G}ajQcE{}Q?6SMN
z$@cCR`~5Ytd<)D7V<56!B9mZkOg0YIN>-cU*+vfdtf)5q^Qt(Ex(l)#dU_SMR=!#@
z-mKHMOH#HqmRKyYjY(`wVk5dy#EF@NbF&eNc&jWO=djnu<x&&ef6RDl@A5P5hRXK7
z9dtj6JheLoHBY3s6s)O2$gRdZEm+$o(v)%9C(Vc8jGq^2hG>S`9H)7hzvUpY2RhAg
znuaV#gGigUIYB!<Nv=cEe2dNWGApAW5)m;Ionp507*nlB=-Opegt7D)nmv>q23eoM
zuHy14Q@|L9Gkwz09;l;bd#vpKF6-l$=yZ<+o?HN!Vzy=y#I!5^nzX&7%6K7s)rv~Z
z;@ebJiWFI<wRxLJLuBb?OTk5#3~{z3>Wbw4Mxs7h)k=s8v_jmP;@a+SaccG#=|pG9
z*kh;v2CuwwF@P}Su1~H*)Hqaf#AHO)Vwnks0DT7e8>H!D&FZV+WLLLsuP7i=0$6>N
zq)mWpkf$qm6@wB*ev@iVLL@P2{46gLOKc(%8`HKi^W7Flr(%wDE!KGcopT1w6b3nI
zZqZu!(ET@w{D63BcXeIga~_*~?09PLTK1~1C|uFw7=t)Rp~i@eC#*(!moy)e<pXk;
zdSKHWLxxHY<hTH8p08yQ4Jl4O4%hRyB%&otw4w!^W~BKJd)X#iJHH3|+jOEM%(Wk3
zE_sw`dlV%hm6Tk@h#ir-T{1VsWlBtkjy;0v4%c`7F+1rMI-L{2KTa!xti)c7F24P=
z0l>VJDlV4^653H3);H2nY-j;Sh4@`-+&e8s8h$Qmh|usQ#SI~F*`yxMqB&7Ag;U4X
zo!{hm?<@3L50hyh><+m&a&puVC@LMC=BN(Qe8?bOVK2SHD8J6u_zec5p9(mnO}W%W
zJdD&yZc@<XYSmeNQ(9lkN(F{R&1y}s=QIhCjZslABr_3-iI{1(S?;x&ZCkol!#365
zQZolGw`l4YN4eOh<<$evQ+xlQrgsT%(cKUFKKeYhJ9p}oGHoM{ERqN5kg3jS6-AsO
z3PWLMdt^E!a|7~xOqQqNa>x<QaAc@tsQQXU#kXG$hme=;YH?RiqB#$8ZAX^vG0rx*
zK6sw1``@5trkS$G=|yMhB`4{`3$)AvIYa;D`fT-IWqtSp&M3X^In=0sErkdj8@8V<
z@3B_sLQN8QYe63>QD{SLZR=?&g09r0Us6j{FXZ}K_xm+y_(H6&;KCw7%A_x^TJRos
z5#pfLnkTdST;Kmqx}y_JC6Cau%UIJ3?!aSQ-lsplz#zTEFk2&aBb+E=+QdnlBs&RA
zk*5_MMGIbsDigjT&C^B#S50b_TD@|sOW?vkFyg`97|>j?VzI_wcCn4<#cgKWZDx{)
zc2wKG78$W+rb7e+VU#*@l@Gxr@`K>1z5hz>o@_-wx;!=Bl_pYGmn%wS1#3*G*oyUA
z*#4O+Z3q{U&?BZz=2Eh3M4pYv-3S-lEL3AuLc2<iYVQ3pG)J+h<fujg;4<%NrVeY{
zbfc39CviF^b$je)8*Gj)z;KMwB-q|qGTmpaTc{Y?$q8EVtZ)6q|BMpY#D+GskWaNr
zVy-a>hNvWuTAKt=B7j=cU^=L)s^x+60V$4JT9%rL;~Z!v<cK;?K2?X4sIW*Zon}>2
zl6V?xTMWl*><=$urHz$tNWvPUWI&1->l5qEoaf1*7-KM|ORL?YD0<4O4LzV0l|tT7
zc)J~vLRI(Ci>#F5e`AW{As8!I3u)#s7|&H}B}~U{x=~DQgK<GUMNGYON?y4AItxQ#
zm^pIHd*G?@fb-Pe<8^&+ThaU1etytAwRio1Mf{8{jFpU-aK|>~a>0nfIU#orYYbw%
zUNVvhYg)J{!{uXAHzdzTIL%Pa5V8;`9NN^{7vwncpoci$!fIMpb0U^jv_LyrLQ!u-
znD2)<Q;MNY*B--2VCrff@(OI&Oq$Z{QA{fka(%9WF`ZDwC4LiHw5m1^W&vg*m_Zt;
zT$P1f1s0XHP@sBfkWd+ian_%T;&7S-`boIZgGG~S9_TbFA`$J@5j63~$7zny978Jr
zwN&I`(aIN2492u*wc8<SzUnuP1fxtU9$Nj^YUV0oWLUX>cmPxS`x$ey24gIvf%j)K
zk*9h@7GkkXx96Gf%@P4gSh#qT0#jCgg`;n-{ws9`%?&byQAQ;qz8jv}U4hz%%~O;2
z1!{Nc?(uQusolZPC}cr_O>Y9bUPBd-rI56Q>2Ac<#)x#}NMcJA1u0J8hedSB-Iy#N
zk!2&Cj{G7)9O8UiTDGB@A)1HkE%T<18sh@!5gw-j0IVdKI0BtU$^48dY#9~x+s`^B
zAyjJwC51693~huKh6F3^lGkQ!jE!1|iGw4rRGxBD&(Esp9$FdAG~?9E#477SOD)bs
zn6P#5Hwyorw2TWhI3$2`kz0_5#fSBA*Xja*xsZ!aIj54+!8gK?659xCi!4vVC_u{7
zT!P(t;nGorzZ3*FnXq1MwS=pe_PKuTCZ|uGVs0L$=l%TEyDB?O1liay-J2pdF`~|&
zOTlJJY8J^FWLmj{EQfJs$a4#6#5gy%2sZvW@YFu6z~l#>r*=F2=bfAkhuq~t61U5n
zKKLQtfHV^pk3{^!pFD#~!ruOX^KWhN)~lOrZH}?lki>qIl{>+h7KyZoZBDKu@_gtW
zL^Q>@G_<3kJ=H9<qOq^w)X(7vfA7IfLsb$UFS&2sBq$>4HshtPwC=7EmIl%)D>Wew
z6pWxg2$n@9cP(r}t4Kd-Y|gzL$%Unf)&@tuigGHoL}wEO@YYv{&cn4dg6bs9wu+FP
zLOidfU6C|y!i7&+&5ScxB^jGwtgQuKS5;YAdm1f6iH#AmOlysIwGmZ?R!`a9G<@%c
zf5?Tazr#bTU*X)TpXTV&G0r}cvv}Mq8g_Qz>g8QpiER>=QD31+m0?x{Ip+$QQ_@_>
z#s;^QvpY(0*jvT^e8hQbccPrQ-&)a+G*9hLK45K>&AHan#*3=OK%Qkh{pm&Gq{G%`
zMz1r)k9}#1&pvyU^KWhOqn9?gakY=j9Z?)yIsnxeLquddIC5XfWqn*e3UZ*ZXec(O
zntM=F|9$cIQhJZ&IQ5l)2b99#(bc$CzWOv_zDCf6+7Q-aO1Ipk)Q6gKfe_a?Xf;=V
zF%{{ypnGJ5Ad$MKwlqnRT0s^>0m!_)QlS}j`0(HYgq%tV%#`m73=S1nS&&a&2&VAb
zOt4ll*5HCd!5C9!H5A#g>L7`Q(Ky3eWp+NHzblN#KDy6}k~<-3=ZyO;e(?R@=dH_M
zr4>!_&c$zXW91dj9DkP8)gR;7(Id>xw%FRd!P@!;?YNCouX8OoEkzX=a!M6nt>sS0
zoRB$#8ynJ{oc&RXlkROU^!pTM`~mRP-hHkn_h-g-Z$RzA;;FscdfT(>-9)0KDZ@jO
zmZjV6FdRahz&Onrtt&Q)c<9liJo4BQH*f6nqgU5B|K>J>eMhThiDD_kMvPjlNr-LR
zFBx1$mW_QCr&+mGHJYQY*s2y4oeTP(%x_i2mCmu=1=cmv%cZQ=yn?=<b6AsLNJ__v
zg0L$l4q|v)stgKn)6yTV>Ex^RkO!@*#UcSp#GvX^s<d?Dh??OePHR4qe(50MrT2cL
z>cXtC_`!Lp%bes}7D9YaX>r)dh8zh0EGEoPoqFwUs|BNxa`EjATCqjX%+sAwOl--=
z9=zK<Mbz^0D{u1h8^1v(Ud9+9juKq%c<bWtaqZ@F9G(9hz4i>_;RXxcW1-qJsMd6~
zW!j(jaZ6RO>VYj+$W+KuOFp)K-d1{8=|_a8c4y?<JDS5A`5?kv9zalgFO-g3eZb}X
z$c5COnwxMjbT)ol>bIJHh-`x0_ufthz~bT@U-^YOcD~f-&DS@1^R;a@R!0~S;v~YL
z<W5myA3$s&vW`4Y$=!%NEE}ArVdmy5wqmPV03Vu{7rgh;sYUYD17QNF6`N5nnM$w{
zdqc@m@L$-1CuJ6BVUgtR!=-60QX{=;u+J`8swIOraM{FEX<gU=Qd;uK%A_qVkj@jG
zy;Fxzb26m>-JxP@*_q9FX(LrCmbDJVRyhGh(Ih}FwA#vOpuF??4Zi#0e*p-e+xv4I
zKlV7CS;x{bORMeM%a@*8=liexI)WjJLaG-QV-woR4B~P&H{PUgdK_DPD1f`xmMl_b
zy#{b|Xt^|S>Swf>6UJG@cqn9<L0k4?$5VS(P?Nj!W_!<D(T@#J?XbtnBpaQHM9+E!
z<S#y_b;le<)L^Z@aEHU3;ZTX9HlO+INj~|Rqg=bP!;fBB=kobo216xDB5c%jq%aZ_
z(GK&uG*ojbxl1cx(;BdqiwCW-(`#<JGy^}3_zhmM+z^Se5@Sr8s1&`oYmT?l)P<Je
zEvACca4}Yv-9^PDn800gxS*re^0f(3`4Vl#jSk1d_*AQ4HlS+CSikE1xyH@B8u3@J
z*}DSg<e4E41YH~X8qnoJyXzS28s2*KGS9vIU$M7;0};bFpZhO)==6_q_UO;Dzjllx
z$Apd5A>aG{-(@)1rj^WknOrfZ2zEqK9Fv$1bG_pviKnDk6P2P?t*3ewk*{IimMeaF
z;Dpo(qp`5NlQSIWNPF^}{5bH`Zu8h+LnV!Dkb6$h{W$Q{ZbJZ^d_9e*aj6;nxpLU7
z4ZnO7DhVwKpC-tc^4zhr?Jy#oJh8x;vvX{0?(?IU)_L=_E%tYEqDV+uzM9EZ!`R$l
zY)q`}(mBKf-5BRaUbYn~wQ{Bwwu43XKt2Ahu;VethW4yzJ);ncTo879h$PLEQS0EQ
z9-vC0yZ=dfuC-$#rDeIR1riq~k!9#`Fu7Fqr*Fyf2UIMgISy|uAmV%lSH3rbvq(J)
z!gz@oLe3~?P;Jn=hFNFuv(wzro_6%Nh1XuX$aAm!=L|=E+R2<3<`Z%L(s#MB`U6fM
z`6;H(pW^EJb8K#3p`FZ?+u34UZ1E&qD?+C=L%Y@UKpZMX4YgfxS@M-xZFyYW9C8uz
z+>krNIJIo2Lx$t5md|lFJhj`AULQoBn%t@zzK;amcLg>1=<w9uWn<&dwJgkkwBg?`
zhn!3$>uHkV5G;LcC`b18GE|}6>hYzYn&xxQ4!LlCo7Z1k=f>4xnDtn!4bBy+fHx(y
zCLvM{94^02%?qofqCHg&^R|3)ULQ;<eFarH<_1}l4PnT(>s@t?uj;Bn_vA;awKv<0
zeUe5ps+Mh7SiO`WtVDtOQ2?Ij4q7zGik#Pzx(p<*sx@(qg@j*pv`SIEV0@LE30lk`
z!{^YOf!%FC(`wJ=jJ7PV|L_9eefh65P6xE&8B{Y22`WOTJ&U@O^Vh!VTXfr^)1F5H
zfO=pH{};hZM6W$duQOMyK}t!6N|nIl3g_Jr{+tIHnh_y)rUbWf9^*72bz0pVCWEj)
zHas<%7%9}JiROd!V|$SKH1F?clyi}ybx>DP3dDrEtyUyiA&Pu(rLmBuem>U>7xDR+
zprm8Rc;twqgvXya$`em6apT4=ul;C~i*N7J-_MC-OB7pQ!?@skW&n+_cph35BuLI>
zI31%d^VOZWCc;XQLT^e@zZi=(ahSKYFj3b7gw$KmTEbLgFjb>{7=k}rR!fP}2F5o|
z?y%kTbO*0KaOI3R4i~V+1Wm0q#?KdnSY9w;4jBC6NC^JqzIt>;fbb~H@&s^Py*S|9
zIXH4w8SG`;yb$sB>u>PG*Z(G2p3{!!P$eXE1$qo1(xD~(=M^MbOB`+v1`}>PB8E<D
zhHh)N$?>ZNy=o<s54&p*vQGWR)`@s1c0#6>G>Z{U$Q|YD`Eb1x<wN)xavv);k&ir2
z?M~)um1RvmTcFr9YS?0FGay(!&Ee%2FR`;d;P{DoPM?~m+il@;Nb@ZCg;lmQp8nwp
znR~k#2rSIc@JD`bj{Z*!c<Ze#-gtG3wHqS@L#t&mHe9r&;YuJ0s85zcI)Rv*2T!y-
z&@U=Nuar3j9vlQOnUVk$MSJBrUZ$dXXyB8To@!Ffu>_3xKw_x`qt#SLY)P4+ykP{;
z48wELW`upEpY^ul68!EYs5<=SR;t`m0OP}%#e|rcyzeP6VgB{z8_#oU`IE#Zp}!4p
zy#6vjeCuzbPH067fDcwFW{duH*s_)NwQgwRu^!aK5Zi>vc8H@6v5j#-yjC%RD?mH!
z*CKRUMQ~1VR>;+o<%Use8K#c0=Cr~Tvbw>%$8-LH<Ec%|)!ucnaIcmJ_X5-&7@pcK
zRL&eU+4R?_qc+yAdb`>kIEpQso7-Htu!=Rp*5*DJ-&y78iCIpcnrC5t8dXTsJhWxa
z*IsN>M<d5zkdwqMKK;q#eEL(%T)nc(t1oYI@tu9rzN3{`OysqRB^5;i*omi77)^p}
zP~b=vl!%%Z(pwkV;L2(|(1|U9teEH26RDb?rPTgkJ1?XbTC5%loVc1{xReA{#f2?t
z^UM+{(yxp^@?uNTya_p`MdEyEhblz?bvQ28d(NrzpqeBzT)F%Pzx#WCgSpNl><_MS
zdF6)~ZDFItZ+q!rj0s>?<T->;=P(!a83o=ACAJAs)CzpS$jhz@7m(sTOdLZ3bI;Vr
zxB?Ep*f983G&2%rYzgC`Fm@S<RPC#LBzS6fX<IJx0ck}=4$x-qSD5h!%~QJ_sCnZ-
zznaVP9Cgve%&4grk}_PykR*P~mu4B4&aZIg@+wP9)0{cI%;M5CNgR=;K>{QV%2yf4
zlIM=i4Tm*w^vFDCesP}d-F;qrb(1$=-C=7zr`5LDD5OI<N_Bzn9_zmQzUrv0GRq8A
zDO2MMP!n&I860w@o`hV)^r|#z9N~C4SKEr#Dmk67cdo*IU1+VetlFx^IV=FAi02EV
z0MUlJ!0Sw<s;Y%r3cVlXtHwc^l@i+-u3USSOZpr_LML8Aq6iHYR^=#cYhg4Vh>iHR
z-P#V3Z4-sy=z`x^=JFX+J63*KAc#*NESFAN0$Nd#7N!9XAy*-FV4Y!{w;8yIRMSwk
zeoT34ayQN;AC#o(Bgs>{eQ8|?sq-wa$ftE?pBB}YA<uGV=ekVIcG%k*(rH_)6{5(K
zPjBAXVdds7GqWvDoLJ<<i3Pfy7Fq7dGS{${*6?$!^}pNOOWE5M+MNzR{^LD9_xUkz
zzrD+MzPZ6@m=jrWwV|}s!K?1WA=DDmrJSLavouUC*<Gr_lv<E;!x}qO4z8%s#2ZaI
zt%UE&M7mR5IZ%neD^toMDZWxP97rz_Y91pM*|h*X3Av_%`uUsYs9G%GG^L%)Bg}=@
z7V=Vy_a53z-;PVD#Dd<}B;Msj?8LmVqLwI90e`8SC^~Zq+ulmb<qCajttJlPTjV07
zYRI(3C>Js}_U~G1t?0*vr*=2p+6N}7`Y7?#?f}$ETkFuqNkMw8qKFQ(=gxt_^2INm
z<43Pt<L32U^2`y(24f&eEGX>lj(F`ySGag_g`>w8ICXr1nb{tykmp&IhbfgWwFfwS
zo7&H@k>Rt?F7nW$J%07SzCxPi<-D$@?ymU=NsXX;kd<Gr+N$s6VCOwC(-EymvBreP
z(z()$O=~U~I%%vRu9`VEn0BUiSesHTk;5)bSCDLiJyP{NzCcYdCi4pwym4sp(|pTm
zYFVeIOzeuH#JeP$By3p=$egsQo&*?ETNV_AWvT6st2We4Za2eLIL9E)SC7s`q?uum
zx?sU>ZezUoVTT#Zd!DD=D^R;*VAFS#RJ~`O+WQMLz8B=%cjMxfo?B?mE#i=*j_^yK
zIg+H!m%jKYTid(5{q`DHFK;mzq$E*96bUvm#8|Rax$w>kS1xX_v^>qJQwuCEO%a)h
zEX~QC!x%y8nE?Ve_7%d#w^B}>YxCnjy~Njk^Cs<%DT93{B}L7#LS-{#sH(L3{AcpS
zQlU9Rs}o_RhNqz_(HiZefoNJ+bVxZTlhQTAP|LC}{n#Y9V3eTWNREoa0_BhisR&lu
zsElw%F)j`p*wE^VDWSzzWg+ju78=^nj%qVTuuk15!<nVJMx>T-#zgi*aV(uSXvF1G
z$BE*EKxQ^LXGopUPZd8jlm|4-_+Bpw-n(A(j%|x>9rpEMgc;urPwn>duiF!h3qLP!
zU1P+Qw5`hH%Z8KEQ!$M7ZCHOVr`ww5v!9ygiN^+9y1dS%OB?L&jEG}PD>fJ-w2Z+y
z$Ia_o+`O^H^jw=0#}_$%Y>rN+MV{wAfLNL|BLSk=uzDls)TuV@t_>DRhs0mhkDtiI
z(n2NxM;aBWAmzn-yBma<TF6NKXKSUityakHkZZFp2rpi%)^~puh^jaD^v)P{oq;xQ
zHemo7nFQxrfhJSQnM_G}De@eWunm>wjl2LYEgI*#(WEpMDOv}7tyPdk<t9>6yUP(|
zVa6GrIS<g8i?4{Ypc@_KE+|~g2W}E6heZwE7xL}Bp^8Lz&nEeJ@zn05Ty<fzW1VNd
z*UJ!X*z!>2YATG!8KV(IHsSF{PjT+-GS_czbM@*bo11+!ha|QbV@O(_!N0pb<kj^n
zT)eo-vEws5eD(-Yl+?IzMJ1r6b&gX@t7GWzx!Q$WRcDj)m_|shO5;LSkwZ;IE7MIm
zWKpio3%#*b(MF!r!9HN(&&!`t>N*<pG(T*26B(aUYiTE{Q}q+A$o2x=Bn_2Xk@H}~
zj4g203KFrHMwFh^D_=P<xM*yQ3oG<ORbWI890i{bVW{7;{Px&S9}7_P2AF=4FwXMw
zJotF>)b1Syyg#kzN1CU0hnt{)Qf`7O;Q_ARqEt81IP!yKmqYGya&?UNb3`nsk00Ue
z=|wiT_PBUyjhi?2!tmc<tq@0sI5Om!<HGqhwzm2_``JgE$w{hJoTmy|s$P&@@A7KG
zNl|G?sS3Lxtu=jBP(dM$qLS`Ny`l<j+r+U|q~ykGjhySs?1Rb2*Zp@(-`Xm7Kx86)
zxIT$874XRfSRVBE4lJ|?8%>wTt^q_+qwbV90W(pz3AF@=12m{|5-8OIqoM?RKLQs7
z`GtvQVH8lm1r(a&-1(VhE+z>44a02gb+%$YhCH=**O}k@_`TaA>W3X>{Qh`q@Ad)v
zxlTrwrM?<cSDGB6eiK;?$VCNfg$ozg+1%Xa_|X}bkIWEB%t-xGV4S9q3NyWFKKtou
zb{`vX<?<$1FK@BGJ0h}%q~)sv+e+Bn9I&>&%kg9Lq<L0eh{b@saPV+V75<^8g3zRA
zlog3KySVZqFVabBDuc4=EA|o-0l}pLLo0%_%3&_LP2<KYqOT5fa_GEwa=|0F0<}YA
zLZ;>dBGjt9f-Vw3!!+x`^1TQL7cljOQUS^uq*2AfMMbIwQ}}yls@8MzO^SGz52Juu
zoEnDt7!?<`sdvd!d%vLef$`LCcU|B2Fqa3Fr*>~at)eDnq*+Q5g^M;Ihic74Q9bu;
ze}BkJFJDHpoU4~tnVRWv>eLZVo|vQE@m^iI%Sm%bHh^~2=84Bn@bI}K+_<^Pl`ETU
zZH`bC;s`YN9&BQQBY2Hopbfod4JeG%=0Z}VLNuEvZ7e`)QFGKYWUE$hvTxKnML{P1
zSxMg2dOSdx)?UAHP$Tq~#IH#}Q>iT&ZZ*|00Z3fAWT;nX)W{%*4cv`LeOg!3DarxR
zY@Bf_b?5L}RXQQkr3!^nyyu#$*lvw^r37k>I&cQ^97b7MleZ}kT9`5S5!CelEDt_F
zQ2PKV9d}c<OE4hJ@|?&@NI2J!93{0}N&l5*IXI==wy0WmcSgMO@+B@^T;as21<ssa
zpx0}Y=bqY;J0%@>PqI@dmN|W9(JK}%ZE)kpE;9>lmXA!6=dQu$D#5CBgqYZ5mNRm#
zcxR2!r9u`}w5@f!ZY^bB+93GWDzSRC*C^p?|E5+&X+yP883kyg{H#E+$@UNqtY&LJ
zyT+;rpN$-<*VmG7MngI$4I3t@iS;><#8p`xRLyK<D&BZ^G|^5<i@f5HSNBK_EvqL2
ztCKJ)5OM^kep8(0S>=g0DS&@q!i?_~Pwj)0RNWI$doXxvcX~3IV4<Do;{Xbw1udBJ
zS_QsjS<cK{LejE~h8aoA(n>thG#%%>^~QBBURve&u{qA3USxK*3mC>^sPj@P#xOHI
z#b-Y~&Hm#f;>ZUJdtfW*1NCJ^HLI_5jWuTkIpou;TYH=O1vxQ?YtTcqF&}B@6lH?@
zSCe^B5Pfw5fC_qpO07t%@=2SHA=IcJhZPahkoZbXhpLVCuCm{5tVM#WZ4rFaoa-H|
zs2WRv1M1=cZLTPs3sCl=eOKlsNM%nhrc@^Qt!W{vs>r&zgS4pF4)MHruz70l7t|(a
z-uE#u`F?@g2hCG^*E^gTl$<o*_ryq@X#2{$v%@(hF)^Qe_B7xB-W7&}F>!2(W8+hi
zY>dltF21wIl}no}E%!KeYM!G<=ZKPs@z`_M#;Id879ZW0sn=N6FIKH2OrpiWK1ir0
z-+!nut4*rh;$xFqK6EpqprSo!37#|=Shb8!-#+;w><|m<0&r_Br!@QOrog*)oV7WG
zYVg^L7FVcmdbO+utEx=O_Ownm*4nnY2u3dHB&GJVrkgDQxj}`|GK{4FuR1@vp4{$g
znv24pO=?sd37Mk4WANZMO4E>2G1(e_{CH~e!8zz2=4JOW;HkX}zekLpd5rTttoUSP
zt#1$2Q5&l;8ab90=J}&v>2c-CCYLX5vb{a@`p?L>e@WsE2Uo6dbL09ZbMrk;pI+wp
zi8<Qsge-UDxz~}FGoru?&_;8lfhSevcS=K;sRvG^$%>?=t~#J9C@Qn^HHc}Lx;1K+
zBJEr?RBV)5(30#>_kpa@Wu(>;8mX$vvN%<3ym}6_f)%;7;iRWD1n5$)U<1&Yuwkt}
zMN@8OkqHi<)=0y}@p5{=9$gPKz!hoP)LcjkU1;5IU7a7LN?}0hBxKgYARPvGU3dG`
zrjH~~?KbLzTa#$-1+bYzoE_eaNu=CEP`k4=^d0HoZgDbrUYcc??liby1wd#Z=GNH>
zqhW@K<=mO0oH?_=%E~SmE^e@Ta|d-UaMy%5@s1jMJ0o6s=?d?>bCcsI<~V(Nk?E-}
zc@9~Ym!*hk{i3g3T-sEGQk&iAAtc?pV(Y*lNu`k)Pz|x9VSQdHx2j=Q@%t)xxCW3R
zXu94`Hp?Zc*%pPWOKO!_<KJm>o;4x)(gyHTRzQ>Vk+M~7Y&L4Lt%iGxHt!Qo%MT<_
zxV>hgMwe-*|D|pXS%+m$*fr`6npC}$NgmV|HV|@irwsFcC4ff{C+a?cCXsilR=Opq
z-9N3U;ocErdB6z1w|^c-hOvgd;d-cWj1Mg?98fdIXqbnMoNKf${r(sc;mFbg$B)gi
zy0*jl^Q)}f++{pclAu0_B7X{`ql|anyvgN@8yq<{%gK`qEH3u2M5Jks(-2QrM#V{U
z8`-${>*HlT<V3Cjt8kSqdnRpG9Oay8f@S~{U4jWNBPvbNx=e~i52NZ<peBXOtm?s^
zRimpM07%!s;0pev$(JkK^QGjSRjr-W!Ch|A;+0gEDsWk9Gs+TA>$4@*a^X@@W~%nu
zla9q3gKFSGs(2ooMq~~~*&f!!|CEt$<^BgI%LC6-yG!!zZRZiy_fgzpZ?sCDWmu7t
zL<x}Pj=lbvBgKU!lx%rxO%Sf9$Vix*o#ENf&#<?<&*iI|T)nczpg$&#3{hk;R)~#v
z0=aT&lPi}uSX}CH`t%Y<muE=gm^95Qsgc%cCx?JVwWuuJBo0W+T~oU$Qnh5Nbq9~?
ziftUHGH;bKPO#KODm4vfbDmbU?^*&&Ie!v4(A4Q98CM%yh|2p%Zq>q6)vHV@IHcn3
zHT(i5HUnB)R+x$B*G6?%*NN74s#+7lH=MvUWTqC|QmtsnYCvLA2m7OajEyE{h4+Yj
z`#|y3<XuNg_b`4>o4hCPCiL_H=BeEV)QXcnY4_OQ+$3{*SZOnIJC)}daP!74PkdsL
z;YhK@)OyAM5y6=wOC8x5y4@b1dS;r(A3w^aD{EZ3u*LTFh^Q2}3rXxRjE&Vj)>e1v
zO|?0FdWnb6E(aNvHiqu1G-g&(T5{hyW=FO1ZwtXujX`*&?UY(2BxN+7)RWc&r>_ho
zp$>3br^OwpA1lDqns{C&D#WUsD=+FIGiO5TRBAI-CfYV_9IK|L^bm`)Mg{9ia5G|p
znYSD$LMMyUiZ@rw!l-%C<ticFD!6@UwN%LQmg&~C7-bpz*%nc&eL%DEap0-l8K}u!
z4bI-PgYIE(Uhaga_MS~5?>DGTyn}FIC+!Zybc@~b4cgIEl{M;e;#fHU<_0%!Y%?<(
zmqTb{4m!&k115qzckJ(H;9?$m=p<kM^5Z=Fg)=N1nIg>`qfu6FIpf&UZY7KcDKGxu
zBCox14Qp*!`1zCD<#i@iU6*((v&V@P0zG&f<gl5oR*6$ZNu!g`R^zdGPc}y*XRfT$
z4(Uo|q780<w$z{EKxKMxyD2pq-QgiU^(3(a=Y}>CSqlfXK*^|NVUw~8W#akDRI27-
zsJrHB-9<Ot9JI7tY7s{X!_k0Yx<`_<Z;dJMnWuISKuz8+sL5?WO(v-2_X^m|oq^he
zViGC0{h)3KYKI@5C`k~Tv%dElEz|Ki@LHrL<*0+-{jCd}e`kYE$Ixm=CGZrEuBH&j
z2P%%SK7DD>Pf16@$zx0W#FrlBr+(^DPMw=4M;Qz=@^F<{W9W2ZZmw*R<yoVx^b#gh
z<EKd@&-1Wbjvh#EpYUFrXrB%{$#imPJ;9kPC@MPPmeTkqa>(af2ZLIRS|Ml?P@7VF
z4gg@q(2>R_S8KDf$*)o&Q2v>eyhYVw*Q*ELpUMOvHqA*JS)z@fsin@=ISr1;hB)pJ
zCzjpOE~C6p(w;i>9KNG-{(bY*-Yfa`PC)JUV=nn19CSZcJhj`to^Z;VoX*q?H+R3!
z>7_qLB3%Y<r@X5gql^YQzw-~?=H!_!PkrhbXU;ByfzdE8Q>B`8ijV~mLV<@vALKGK
zGt1{bGtJ(keJ)<w;Of;a2KyP-n!s%e`I#XAMa0W(v=-1(aIw%@W2v<UrjX<`Hlha`
zMAgIHIGQAlaB)kMJ1Mowtez!W4??FdI+&1T>E!xCE2oc=k5_9KWwHR2X3JYjtS07<
zRef2@o|q`b>cCZ3Zd5i)&5O8RC3<kLZ(FsoENRxxT7sMyMKq?<>0%?;8m^GK0dd^B
zi~00NjHh->0F=9Bd)y7M>ARR1eROzgw-0ze{AB3P%(HR*9oBbVquV>j(Cz!XDxl7%
zklR?edTF04m*3*p$s0WO)DmaU&eQ28jK`jvCXM5v&8iq>JWkOZ;;6$@Pn_YgN0zv;
zy2G`r+pMe(ID2BAD2hq5tgHl!yS$AiF6N2PPMg!7gXfdh&3Cmrp`@n8yv5Yc(_)Gl
zTgCOOC$Tp^!o&KtT9$-RDJ`Vd_7+P95uMnwN|9q#wSzio8D4u|1tmi#ojGco(nf74
z4FYaMR@RsYQrAk=tjueRiu$g40w^_b`9uXHJ!Y3;%r30#yp32PYE73ixd$`M_&xH}
z?veQYJyvY;K!q9K3!d7$g+&yPk2(n^ZgX|#n>^e)g+Xu{lGnp#Pz}V1=e@05?{n?S
zd1mLY@c2{9JpRNHrf1ruWBg{b<^s_ij|*bKIY+<muqNT$>0_KbyGVaOBen@?numfd
zP)=OY^3^WBS_MEurCBphJY?XmHOrmGXti?KEFVG9>XtbRTFr>UB0z%wq${Z<&2*&#
zY;=NtTY0R}@Mcrhnw^qX#b&u&tu1au8@#-bHy>gYYt^APqaYepWz%_&GNMImVKQ>C
zqG;Z_Chf#4|F{D;nSv0QwOBkk$GN8rul!cV>flv6omtcrO}F9W%Tv4C?(ThSMc)rc
z<-z2s-BGO?+P|6kW31nNmHF-~#L;ooX4EN~>Z+nSii9|c=<jAc_Xk&a^~F^ldTgG@
zA75r^c^c<nJkCqkTPZ7%N`xIY`|R(hfM9KlG;<+rxtKbeFsqT0zMy43gOp~JWk^dQ
zF;cC$yVex)<poo_8K^YW2|B?FGg2jVsVlf_RlijLV=>QbQZ1AN%;7^%xuTM**@ZXx
z6$d2iTHn~p!40u+i&%&fz-jc%QpPaWHMr&ghfwMUl4VSl;DYIZ)U2OO2xckMyToFN
z=(QL5{Lf7@Sk1Y%dX=5=W#*P2Zus$i{CR5fK^aYcJb7yGR;?8kLTkE%*|c2P_(wdl
z@E6E)2eGMnmxT*DBzdDCR%yjv2l~<rEBxq{HBO(I;qgx_bMoXItyaW%l#>Vbg48Ow
zNg=yacWB|7=T&e@eQ+*y7Z7S2z>+Mgw_f>6v&xfOdSX;Z%9x1_q3Qwm?@IKp%}|#B
z7!%s0x)0C+5Nq&&OO9O)JXH>uk1(mu5S{RWn_zkzGIJE_$x}69y*A>ws;alj;A`4M
zHCpAMyuc94JZBzRBJHRA@b|~8^j~0{@6nq%Q5iFQ;3knDET!Xa+w6PNihf*pYIg>f
zb#0_$?$`-#Tzr-5dtc-9+%K}9ZXh-eCX@wh-T4zXECz6jF@{#h=SH4?dy9A8*<ks|
zG>?B`iH9Frpx0}WrI3!Z(&0iT474Z1^t1##Js{nw(->qznV_|ywvkG8ptV$YnfR&A
z+1kVzpj8tob-k8oNsaI>-P*XI>+i3kUmRu^M59`hy78Ib;%w4dD_)nL)!N3&9H6;j
zQJr`NstqJ^W#wuP9^uAEQDmi>hTWY`CVz!v50+TwSeRZWALe}RH&z+!?sI+r515)c
zify$%#yqvVWlY>NcaQrGYWK%a?asrUZx3o^<B<ppM;>DB`uFI?ODxQMiJkEZq6TAv
ze|~Y2yXt*7S6sIt-vGnL>VQAEd5M>PxWdDa&hf}Yi!3cop}=_LLtMlhG&`ImyE@lo
zzQZA&W=dlPsdWIT^T4!f^RzzSl0)2hi$9mcJ}zxu?31O?Bx$22##hyYdxgWyCnuK?
z2RLyYVlAYH<Q3?I6l>yEBK45y>I10q3YuD0Rh@|G(~0W0Ho0?(ip5GyVy1~rht0hW
zF5O%wPldhl%WU<}bN19Plp)J<=yma7`l)eGC>{3-)ZV+K>H!He{-8mvxJo;-Q_STj
zxV-k8n8+~KdzS6dI!+zNxYDji>mU=7*#$@L{1t3th>c-5NO|%5E4=pV2B%KW@W^BH
zoH{j4JBrE1jx=)(3vSgilCun((MhXqno=Xxni=9mYp-P<9Oe8?#Z3&TE4KgSNn6RC
zDm|n~mFubMYRU*{w3yP^-4;Q|+Q@B{2474YfKvpoPY%b6_uKG9gIj1|i?&r8#N4v#
zle&vY4M=nK!~6p|t1{uP<Z6O?sohw7ioFnHG$Kuh^s`NdqdmxSI#JBE&95^(bDCCX
z_V8TQdj@JBl%LxBT@>6yKenc;)_n%G4}_=o-axGm3cZCzz;fZ{KjirQ7Dr~k!hXKZ
z*bRKRuGoh0qvDX@gj!s)#WvHJ;JAx&@xm4tE^IQt(Bk2T7dUrzp1JvMZP}pZY^SJ%
zvfR;Nrq;Z9>RVB*DYwg3R|-oZsf$7;K96Fd5yU>CwR)?{6?GaakcKg&YtU4ieV87?
z+;3WGH(WKU;b9HD>RAMpKD8bUA!THpHfCOB9s?XYlWVrHlRMH$MTVB~dXuv{Q-3dk
zgIEOYhzfb0F>-rkZivfMG|TANX|8PjE@QXJ$&>%g0n^P7I?VWf^VIH$swMJ4&^@?K
z-~G|!sU1cQc{e^yZ($xAM_j$}P5PsCPA~i-v0Y{_y$O<IO&cR|n8kQk)zXH$oY6R(
zGpOc>2vO`Uezv#9Jonw}y!g^8r%uoD$RqO{JKCe2M8Q@(C(V^^1bh2qKWCGJ&K$)Z
z$)UAbP9Y4fQ$DmNld9+xb>oAw>eJ?Oq4?DUb@8|w?_R59cxrTs$-$sZP%D~6=!9eK
zL|fhXu8ChoR#qe3s!5Wq+%_n|{;<eFZM5tn90<2L5J)36bw{zOE|w~qk>-8UJjJ;*
z$PpYZ(_?l2J8bR0#)-3E#3rqYbghp&PwkLmN4X_)?|s@9$;X<f_U@o|`17=<r#YTH
z!`k(?c<uUs&dK?oXR-G=cJnocZpVWgF$Q0eNodXd3Q<Gil`C^7{RQH%))2=Q=Y;cb
zZgKwYUFH`O&Yhj+^yxWf=UU8mBer%&y#3}baZ~}%AxiIw>C&XYvhqD^Y&#2jMs1T<
z&jTo><y!l9S^$}=EX(V|GI5P5S7j1;z?$*EJWUVk;mbhlYO!#bbWA2_9NL_}Y2~O<
zJVxY@y+mCwFLh4fA>#T&?4mp+D942_)f}he%7jyeSQ0k&zt6_b^DG^Cir(DG+Fb3Q
zLY|s@U@27}Kc3qAeIDD2IePYKcGj-(&g!qSF!%wF9QkLNmWSCK-@xe*OpIuRVEr(<
z9@}1ym#g_f?zEIf#Vvo?Zf}iwVSSaCU)g41u}!ZRv9>y<-&dkYaJeh<MawEtD~{Zu
z*4lL-DZF$FVk;Wd1bRR-Sm)xa3miOC=^hWy_|!)9A9a<&0Y-;}Sz8myCgoRB7;2Uk
zpPSfZ)?i$8B7Z@v*;+01xf#|~*P>~&y41#YqXEkzRcou{<SxT$<|{Lo2X~P0{7x}y
zF}bqY{}x;Oud{gcNfwShbqmhg|DUIJe_PRy2~X{oi-NnE7m6~we1h)O0_!X1dFk?h
z#*vxNvpDrLWMbIQSI8M*G)6)Sxo=Bdu;Hm&^fZJ)VXh`v>wVi)m6aQPoO<_<$eNN4
zQQ8@atEd`vY^YNh$_i1-icz#Q<S#jSB9nI9lR8kZZ8X-DlBi;;CQ4&zQGjF_s;q_c
zh|*Z>O0$*LTdn|_^EaI!sT7)8CLL|jLn_0t<S1r|6aS`suUeZeHWoM4`qzuxGgLEN
zo}rrJ0+>mdJvx_RoWZIk%~sgj`yr!zjpL`j!1Us|T701Sr+}w+dv?YB(u&Ic2el85
zr*_Xlt#<I^ZkuE0o}s_B!PV8@XKm+YPRx9n*{M&`cS8nl6Ol2N7KRv=2&C}d&l}AD
zLTE%7e)~}591$goOz4bUP%oH+Iv~-SbcX}%`vWQL^*p<}R<u@aNo@{SnpdjN<h0R2
z>!0$XpQyI#sq+;#R}aZNp4gh!GgJ==S)PCyWTFLcP%ldN6;pY^h4pYfs!u11PXA+x
z99VY%03yjrL_t(t(?_7J-g0u6lWT_46r8J7k`C3(|CtkPF5vdr9$jE>be^cy=JdI*
z(CW_DDm8OYcxoR$sNLmtb!&W)dj@Q(q#q5Q+IuJ8zPHu$L<n)YKy!5G=4elSj_tK;
zytVb;Gu!_*M`wPHh0YV~>o#MzjcSHSj7Wr<DCm-k_-|Lcc#DC*md+ebL(Y*D6_?iR
zhqOWT(uT8a(@9tB41AT^MzK~UO;SxJD{K)j^U}t+Zo-{R4(1)mL_o405_hKu#r(y4
zZSec*=~vXklC@cRmE1h7yIyMT<+$cttTu0Jww}dLaX582&BOdGMag^+Pq9?d+yh#k
zVbu`PCeL=*9iC@Dy8_m+aO@f8mL9EA<Zm-myD#M12Z^V4TYQo9eFNLi{0!#nU&n!b
zN5uTRH!GEoHBasCmmr6|9$$Hw$S{BG6w`CZ*j~TDJ8OT7`Sw#BoBN~mT4&hL*BHA#
zA~C8lVj{#u7#D($O|dzZKq-*g2+V}&x3G*5&yn+Okg56iPqtKYKq93zk@-Py|7MtQ
zNywENLAT(0<wXi`GZnqq3Tk5$Izhpo3?^>86s?8lG<TqiJ80!y(k^r|-R9sQO{Q(t
zoReK4*jJs1*9%+T09Z~_)aA9;kpnq-?&oR7SrR%#v>2yrY>!@HKf4UpFt_+P3(HTG
zmfv-Q(~nM=@jc|J-4b6^jYNoX-vRi&pZPt**Xw87dum0UzMmHDBgIp@E4s?9+E}So
zHA>WuSUUL_qyB)6wYS;4`Jb^o^%;&#f0<5niaobRrhQBvA$g421Z$HJW9LF8S6q9p
zK`7M;pD!sNBjw!f;5kwoiq|)zMjD2yQutNhDn7Wzm-8<%=tB?5VDP7)Oz1CllEF41
zUZ0$!xyq?i^$_8^9&qg7fRwB_F3lOC%A{YLE2}|QR^u+r#&Qp4p-L-lF4f_1s7o<U
zX}LBLUD9lyLHZWM{5pedg`~5<(vi<GJ$o8kW*F4z93MBH+MRDdZ;vkm&gi|%JP@-{
zOgJ8VP`iV9+WQ1Gd6(JT;omE*ZinM%KE+^no3-_qSlfG*W7A(?Y37TJqiOcj4RY<H
z`0bgAS{M@{>MH*r4ckr$vl}&KCDhb}2G+ij2?2*6c;F9hDy2c7mWbTifmIF&(I-#T
zAb_{Eg#+#o+n=V5_rc9$Gi#x6{wRWKnjBeoQ0`Y7xryq5AeSOds#q(yx;LF31W~QE
z@jg4&F9KAvlG0Le@tkJl`55CIE$NV$S&Yl*kFK$iUSybF$Hv0+?87Y1ewuc7uA0kg
zl^^k7n?$}>N{8I>67pR@O@cMp#`^}guYdj3Kr=EwR2))@<sOVM<GUx{a);#GI~3}_
zE2tf8`2?jiJws>eS$4NqxVH8UR`;Lh*vuE1@BJ8KW7*4Ba5_LUhchwOBz}t;0F4RH
zSmzXDT#a2{(>P9GM#YHNL;t=Q@)tvOZMuFp!<u~ziI*-#{;O$=p|$MHs?{xr{8Agp
z7dA>FHBF}0SR+BM)u=X`1)*qDa@CMU6}C|2dkm@rZE97k#eysOW=``k<8-0j2i2V1
z4Z%6AcIcXU5`i>ZWoP^fd+8NMu1|0J1jmp6B;DzwVZqb<AVlN=2{XR4>*~IcZ{PK?
z-WEnRLoh!CIC5lF-$%vvl!i#PJ)@e2`|>|^Jhgk3fhY~Zb<Xts5>qov>}+1=!p85g
zy7M9@W`Byssn0N!5rcdUbz^ePP))EVMy#z-6AC|W=i}RI29lMDrA|2NN?j#c8>JQI
zj?zeLmwJY2kX1Dt{G|x5QNKV4gf^Y9=`Jm@L#25@P9=JXG`+Ud43(fxDBy*f4pk3$
zg4C2-T6M&({(h;FvBFY9)o(S?Jj~LHW0>RI7*&VWn6`FFNKiMXKYo+7;ad!{>$JNI
z%pH52si}vEl2%QVTP+1d?gtm`qkdi8zW7n{6sLOtPd)X|y&quvD*@QH-$bYPMeLkv
zt~DCtoozlIIG);F@@Xa?D|hKHe;{hE1{_wHT{_P6+;O%xuJXpl-)3g-TO6PLIhMLl
zGGL!ww~oulIG145&)=+x13jX!(3UFkGSEOMBwIBKiHH`yhYe}eq}6o8$U-Z}+%j8%
zrhT?pDLHpF#e0)~RHtf)gw3HI^e7S+teEPLuK`S15bA`CbaEk~jrm$*il<sjzVeCy
zG{w1W;*oxyhUVDZ(q@XbohEmE`s2&2jNfKIyFnDUnVLJx(YY^#R<rJ69FDt@_nszo
zUt7=*pQm>FF_fy2$T&CJk#z4(fWPurct61ACl^age|djrN8S;!pR0iFpFW=2or0R&
z!AUjwuWTeN9y!h2{BgF{FY)Hu-()5}#i_YJ%F*7_?6__E*(SNB<oO6|5^U7Qn8b6+
zN|I}R9(Tw>BTT}p*_mkqPn|?7GLfDh(zZ%~uE?ljYeM)?>D0H3r3SQg&25rzi}tT6
z0n>6LswL%D4=xpoI<z4GEu)AlXAP}AM`66FE-V3DO|Xxjb83dD(2@>qGmU7<XndWO
z{`c7%U&KU8Z{{SY=e|OxyVy9hDhu<8h0Mn`%=n)1)DB)(ii(LvT=vdhw6b3fCEnNa
z;Frzw&;MHb*kk|3B`}{WGJHPDJhk@^YVUCgBDV)%MX_<j;<1OBT|CR?+S|Oc@?SIG
zeuAU3Kf_Y{QTE&p1Gh!)##onPO^YaQ1wLHZ?x`&=C=JU7sR4`>i-q6}tPNnOCz@+B
zumq`vEH||PCa_XmUURmEQUG7)kku{0oAg_)Id4?0XJK_-7r^U;RZ!(zq9yUR615jZ
zw6N90g*MYQ@&y&oLo+JG^hit>YaHo#h0XEH?2RvyGG=P(Bu9^Zk*VopRsI51mF$-R
z=3^FS{6X;44u5ZosF9eQ!KLS)|I6twGj9W%{k;R*&-~0&^7XF+$k#;VPphg<ZgBo-
z;;G#)P@4=~iQ<Um<4-U*{}5YiZ}Zx<|D46{QyiWBG7Ig8*w;PA`8K&5k-G$ITG*(A
zHBqUtRIwF#x86P$m0C%k0H>z%4l8~53+<^iNAg;avkH}5*jxCbr<T7^eAVVy+=@F^
ztLn;X3!3~lrIA)ue{O9^*<A&8MHPt);G<<D?VP7=poT=cbnFsVB1YpCcK5%}?&v&Y
zw@$0Gz})haOwXPrO4<$eLX`t<?_i7117;HWpzzdgSAlx|tP#Eju<|p@!q?v?-J{ry
z=DB&nm|Ue)YTs*6`zZ0$-XEyR9lI|maXaD2siznZ9%gI(9bRAgubAsR#p29Qv6wu}
zK0EZ?rmx`gF~-D1Q3q?2O1&UHe7A^|Gt{cMNeiJ`&`W7mR2#G(^th&Gw-kUzY52ei
z6IMoAfmUfHj(VMI8Qe12Hcm93TGKUX%^s;yJ-KojfEL1Y3ALH0ZA99pV;4!JNA7m$
z4_{+z_!j;2I!Sw$>7{eb%zn8MR4g^#*)3@r!adIYe1AN(_YG<v2v6-6KVQ`3Zmeo}
z;Z8Q9ci4*lngbXNhOb%M-u4Rw)d}<I2ZX0~Z$Rz+P&(f24tIC6!fF7WbUPgBKF#?5
z*WS6t#&KPD{D1D9nSJpkQlczB>L`*dg;MRr@*{3yQ+@zNf_~_SuF#_BrzA$2CIy_J
z2oM)ov5gBPMcV)Y+$2t$rU(K@Y)~K{S|fFA(oJhyifkZ`S<6yvDz+ty5-E!0E_WXH
zo_?6wCm%bzJG&&MIe?!c_jPCfd+t5I^FPHsn7{lM-n#gG^r!Y>XWz%MJ#j1Yya-z@
zK(h_49Y~pgVWc3W6~MfzJea1m9W8GqOI<`vfRN=8ZxvHYt~H0`y0<6*s|O%6a3z7R
zb@Qc)c_i14X7}@|Qj1h+i&>tuRpHM{=U=rwtz0{#CScrDK>k-;MtqAPz!x`z5=hYy
z60#RsFQHI;8?*K_3eI`3X`rwFw=g_#7>Q(GozpNwkf>YMutz9}Iki?qEhro)ZO@Zl
zeggo;$FsVTYK6o%a$;%e@AKP-KKgMI)@{s6Q)Ryrxt|&}gk2l>skO2Fj8@c|Ie%FB
zxKv~1?cdPSFp=pSMmlo?7K`uV!u%v``#gH&4)iB(0f^vo0a`oI%7a#ZW4#oj+@U~~
zjwtvkzNid6u5!&SwQ-?t(m9a;g#UX&_;XNq-9`|SaN%tQ<+@<@;CVKb=lD=7bTEpK
zs|p=l&Z;U|qb~QwR%V&%a$%v=OpY2v!~b*5K?M_Dm5@1Lb|64VP#=2b4kVC-<GhEt
z{3%>odI^i_98$g8F|_jz?A&!2ncf><7>TNm01-@wqQ>V^)Z~#%{Wae)KQ)Aa$UEz&
zMj>89{qr-EmNG50cAtIW)F=Ka2NshJ3J0M(4@y0wn(;G(#P8Kiylwk1apO!P*Zf&(
zp%mX#v7(6r2w{b=01Pvgz|NZw!71*=)yr?=%*;PyAh`!S`tHL(Y7cBUD5`n5o(-*S
zD3yd^CLx4bfkOqAeb4;!AqKPX=P6LV+eYQNH8TYJvk6!Oh6$v4f#MPXugbHme*9h)
zhEbVgz-6Zlpi00<2fD`PYA;uv@s&I{SSvppEsLZspQlM!NKij4k%0umb}r(w^DE@-
zX*gIyPkI-Iw;x7N-;E$yF~Ii`8d1ZWHNK8o7q!h`5=jlt=32V1LYvU8C&0{tBuMbj
zfW|$dO$poN<d_Bk*HzC5a=u1HCay_Hup6*p6pvHk$*g3`KZ7go!Tj8>apv;BpwBvh
zq27D2Ewv9eJQVaiTyFtd6(NKLAp?<P(=RS@bteH=^#_RZ&Qny|j_XoxMIe$$_7QH{
z15CXr;1<20IiD&`_%%)Nx-4Mj?PidHaXI_)g->%Csjb;^GW-3QT<QoY*G?4(fQ23;
z<p3<QV7nKvSo}XM+S9Q43R0;Z*mlDq^!DBa!?bFrbCrt#ViR6t*D2IaBt2blpyV^Y
z7ENeG=*OmkoH%!G?DTDW|NK=U6ZdNEDu32o%&9f{mTRd9(tuqm-+aM2l$A_k_{M{9
zoxQj^JB{hfKSbKP3B$b~MPF(J4m50@hwCkZbP-DXRaC=BLc$Et4qes6DL~NBEd5DO
zEKzOU;rGl-xD4F#A;MjE68`rm8jigTGZBDotH82;kEJSCCs9?=L@5I!joR;I-=@j$
z)humYRUnMPtO!aWBl}^o0qrefsqi}9x6h#9yysUmhxekV_W>AIs_HZ53cj*J%))0I
z>z}K|oLZ}uU1li5OiRzpzxu+dhfn8nEXKwtQei7?M?EI`F_FBN*<lhQ=G2-*I@%Yt
zx{IOi49v8W*uLuk1_pOyZuZxBYxZfRj2keNxf|Ouhv5kW1)hcHEkUUwlxM+^DHui?
zhP0|of&#O0_A@6D^i~S4v|4EwFa`+w?k3D!0N$T=pj82`ts%^GxkW$+LRM-VFR^V@
zu3DBdHs2|Ow5}==s6f<Ikm)fvC=3XgNQpsYWDh_#7K>+bIsYb>-HRa8LSNsl*wKGy
zO(#IPqAAvEZ3-i56mx2kiW;rDG4Ut9(T@S*iHYZHzg;8BCj|g~VD}eqV-v4)i2~h3
z!;IT8iR`YZMOEfsJ*)I@T>neQvmMOOy@kd3X(Z(i3}x;?U;1{Ckwg)T@URSm0U;6)
zK{taT6Oht`5CSCpF@hvy@R%jX+yoM-6mGsdi4S~OVEQE&XHP94zjz+ZfMN9j%7$HB
zgySqgvr~m#s6gOU&EbD(gX<4D@v4@D%T4J70}1Ly0vSknaMb%)u;0XjJq;!onanL1
z7}$$+?{JN1Fl&esXGSf02u3byF{jqxahPBzk8$wlCm(nd$O&L9a$$r2z`(wJSD%$K
z@nCs7x@kDI%>m!Gysd7TU0SQWUa`Sep2pQH?_lBT85p`3gXudk*mD<zxeZ0m!_kWY
z_2Ew?H;e=fGY!-9nK&U0-wcri1X++~0-0?o^b8Z+We->0UB=SFWi00}1@jp)zOcH>
z@YE8Nx9m5Nm$#$33Yt~HUoIH_){=tE%>PEUU{Mb;VgN)y!TAjqmQN$^O~ZqYbmm6%
z_3uF@vlBv!I>Sg2Vy#;jwT<W0A`-QY<kVIXHD)NoNK54vo}WB9`A9Bz3}LsSO%HSN
zx1(bo@WrQy#Df*Lg001=wJ&N>acWVpOVqFu#SBP8VsOW9Y#aI@7Uti<%<M~;$)CWs
z<N*w(??PYVX4vGRsORD8JhZmqdCPEY6GE5}rZ09<S}@HFG+fMITE^@J4bOGKx`5(x
z(5%lcq*w-#38fq;U4&*AI>0_Ob8uef`eW$e`JQvc<*KM43l{YvCHi21U^^EuTYLqJ
z#dl$=t4Q?>VQBm9$YgGWG_AU(^OD=I2!Zc3)4aWvIkip>Gmci&Dt{`$;O_!sdSc>;
z5q2Bea*1wa$LBKMw&YnNIqWk^jSMKejdX-OQ`kUGZT)kWX3G53z}u?czdsN=EwH$7
z9#`hx1lx<~vG!nF<}UQ5MxYH7%X}4{E>;Q^Bm%K8{0vT*!T<Ni?>WvAl(zlMOS#Zc
z5L9ZbD!FD<s-YCXw3;<E+@O8SL{ju2DF=`s3%2_{t`^?Ff_)mcnuC?vhW`G2=<U4~
zW+H{Uxg0ATXv2xxI<sygLOP;b>&?xnp#@HDjRZjpksz(@w{ejUPD~%Mi3mXWVO7n}
z6=mSKoVs*$Y2UzO-;&bIDNiY?G|6qMVa6SUZ#%}RHFKdibAh3D!W0uoF!}~|VPN29
zEa$Iae(o%$=Z+&~4r6=f4)moDL7GEw*n`6bD0VBe)HR^A2N0l?4cA=)>!4wsJs-t@
zh9WO05>)q9>cC3LznUZ^kP$;LU_nAb>3J;Kr|{nLSromCFwGwH4Bm=e{i8@EdurW3
z7*+me%`%DI5w&Y)m~p2#wUr%9%*=*J3Rm0zI&tp7;*lfI8vwlMAd+={=fHtK8`L^^
zT96nFwhz?YdBg_#sjV@mAaoIgLY@J3)MKmFZ_Zj_5LK9i=QvncIFJ0oG_>m?W9>#?
zY9D%&`yh>eIHcg}Wq7&(r5z~kR=NtR_&R0<kgjw9aA}~igh3W8O2ZNvSd;*C5e0V|
zOUv&d@1BFrSCB{yp{IX0GCem2J({TN(G(#v^Y!qZW~+UzZ$USUpW5oe7L}h`o0Z+#
z*TF;v0G?w{ADBFKWVX)CuVcan;J5^is{Q-EbW9qloaYrhA~Ir5t;r%tOBZ^h3#^$k
ze|6>)G<^nV8_W4QEG+y6`Ni`vbP^fs7WAZdqu1IEA^M@1;phTf&O>Pr9&G5q^wNiJ
zJs%e#6BcEVkQtc50KtasT|(ae4VLV8P;f86<03NY8_?5tE7Iv*Fq5gewi+%^xDR)R
z6kgQ2!l`YEVaDC()Yiz>yoA|rIPUz|<jIGRWwR{D$4Nzt{jR+u4YIb+4{DuyQxI+Q
zvo@lw!Kt-x64^CQt)rs0@^R{CT5828<}YJmVH$<}`w-eh(ilW0u?rdV7MOAfl6nAP
zfk_Aan-9)HyHI)=o?e2ZW>K&&qTrrKQO&}zGRXAoLMC$y(&-&R0ibqhR;9PK9Z`!p
zwap=FVO)Ux5qr#hMY40-&rUuv*Gjh5W?w`pYy0Bk(nx>R^Ol3NwwP1vG^f_sj;6^f
z*D9~6)FWEGRaKtCa^W%xOXra<T!iN?gR}`DQZQv20tP?|2;672cKm_@0K-heN)8~C
zxdEy4Fp{bMvUL$^W<gN%;@*;|T`QbgH1O>PaccG8v@*?p>A6?`a^mDePqdn?wcGGT
zK#oR6V0hlrucWZ{YUOfOjXmbnI?kyz%PxfxwRN_tHM0{4p6kMOm*F~jC}l&dqThQe
z1f)np$}}u94Z}=BnpV{u(duGC)ez>UGuE(c-6>8jDpBhKr`E2hbp+|C5j8DklC*Nq
z&g3s1%4V~kKi8o7Yz-|`Me8c02gTIXQD^_&zjz!%9tXL)v8ctIS`?zzayGN>I7C|Y
zJrdP2aV7h3X&R7bFH-5g5EnX^g$&>|?6X@v6yNNe+GZYRyiuH5{d8KP1zCn7=kckj
zqt4XSaS0sNt%{RCTX9rnvsroi?B9+nUHmsGlaiSgHQ{U#-cK#ON#x4wyB$ugQC1h0
zQ^U$3zoBPAhU3)MdX8{2Uc-IXR35@yHNLLe0=(wGYc0R2%)(K{ew>=A3O2je4L*m}
z`xBe^BJIRluQm6x*|m;-?k9!FT-W8)))+a+%*rr(4OcCUPo6k3p3NSY<KstFJId6i
zumR)aBMdMxdtcUC<%N(`nF!J;POVW&P3?1P)QD4SY!cZ%r`G7;I4qD!O^8}p(7MW;
zviz5*`FBB7Rm~J3*SZ;}i}lvJdz@P5;oD}`x*blfQ5OrX%c+HgZ|i?v3t^G+3Nud8
z{d_K$6XWBrbGy3Kwy^n4sYk_`Gv9cNp}ru<5{)LvY)0Rwjd|Y9_8ixnuU+h?w&C{`
zlQv{pD0aT^;xB)9W@_png>7{2u&@EZxEdYJ8K+Nw{d-E=<5H#!X6?1kskI8<(i;1d
zsNh@b0(?smz_(=+?-tM1>R(6mXHV;%3sHzIR9N_yTKF8A=G3SQoEo*c)}0(?Op$SF
zHGgOJOta6h-TCjmaPr~feigL6EojuT9k6Xj#mLCb{aPn}A;{RRwWEW<Y%!;{%Hz-m
zaBAJ4?kU9MH2pb54&Qc<Q@cLk+eQ_4sw38*44INzyRR9=-unjjzghH$v=B$3Mj|?4
zBL+rzYU&^6nAK5cT_7?DHLm&LkdF3EBB=|UT6;hyh2hkw)oi9)qDF0r8nrEI)ZFK=
zLGW!uQKKkKB0DW=)CPRJVl`L@lNel3O8xPF{qn>4k&!G%C2BzEDOF)(l7XBtJNq~9
z4h`LVUI^>=*>5HkR6G3z?Qv?<aZasu_?9{h-%^|KZI~|*YN?f|Sy2nesZqx{wbtR=
z2s#QHa%$1Qw-km`>mYnvi-`$O%A}#x(xWf@;-Q~rvn-!{l5~_x6tS=Yz@$EW_)+t<
z*S`76;Lv?!8kvWba=nTJ$a<XG^#tEi6Xo?5IW=l?i`H>bqb|U=?VJ@-#B06UwMQ+i
z_1YO<bD3-RIJK(J!L!Uk)Ag=CHhJ>lZyi4TZS&b@@A9Hnp$-TeaN)u!Jvy2*PMvz<
zxuL;(Z!(O`-C8>y`37EX&;49!Nz*LSvHDgbT0b?4+)r(-=jasD(YB~H#i>yXYu&8X
zPN)3Ts0)5-v?=F)uKh*2%ICoFOmon5z4@mmPaJuCbo6=S#TWm;>x2doIu``w2pH2J
z+W(dBNSXeO=jA;TWNf&f8p3dDo%T~}=HM6`z^OI9@hPM@w#TVq!#TBU!%r=o+j9GU
zYU_#GHpBH6o|-su|D*oIDMWg%*71z35)%NX<mK6K|72+Jqc<65UFOzwp<um>y~&|6
zwAKC8&}OSt`(FOxkdAg5xSJ8S*iWt1R;g(H)K+<K49_$N4A)zHYU0HGk7l#S<&#ey
z?3k!^I%BKBK!9=eq5WU^jx;i#@w|dd1hZ2}M|+&wR`XM9hf_lrI5o7#sdd~WvKxMC
zXq!_*M>#cgPSgO`GzQFSQHv7m*g#=hDQ<?@`x)is6~JPJhufCt)HaK##hhB_k&f%h
zB(gb9&2IrEov;R_<6iBmsC8j0T8c3MuLFR%Jp0w3Y#;m>gfJcgK+IYZ332UkYE4wR
zHa(|?m{V(MtvfNyc<XR#%uqrYLW-1dRsONb6Zb!!%dzP6_7j}}bi)9=W1K}+PQCG0
zV@kQ70?9=w6Ea}ky2h!sXA&6^r$)4aoLYC_+n7^p1mAX%Q|quvWL2K#88R&i)}pHm
zpPD>z|2MMP<8o|_x+ZE}+=|x5;lq!br%rvx9ohGldq^gJAf&l3n42IgL)2oE$kzST
zqTiym&Z%LOnnZTbPwiS8X1w~(GBcC5%zmkq^Q!ADefqyoJ@U%v=<~+p<bz(fHAZfP
zu$4HsU%c|wcZRkf{2_7j1JX$SHnSoySGJ~Yb84L&X55}hWaA5++AxXiw5Y9ZIM8yV
ze%ImKsMmV!B0+O&-K<Gumqe|GQ>*(~W{-p=4cQ}<cD`%Ni+}V#Cq8*@qeN}PGPX)&
zB`~f4U}XQXFOU#_Ey(Csx~RyvZWYZH3ZfZi+#OC08|<eRj^(15Q@bvP8MnfzF<66%
zO`}&T?VKm@m!5n1V^0G>6lRfI<ctlg+8y~7)0~((ee9c()je8!|0!isk~Bqd_QtXQ
z)>eI-Ysqsi_O+{??h0m4ili`&9;sCEY1>)4`?;4t_H-`C0$|!mQQHI=TUG9c<8mDS
zhjH*=?hlELF(DGSX<dZY>=Cg<&Aji;%BdkTKed=si#fH;#i@arp`<VjDbvu(`4zxV
zl(Mvq+<I<WVe=y=asb9Kra$<>FZZVsJ&ytOSt+fZTHDZCdx9WWu6o3x7ISKCidq*r
zwRS}<=G4M)YML2Z2*WUB21*rX0P)R>i|>7XYU-$y1B)@Bt5we}CTv0WR<%Drbm)nl
ztn{A(^jSkDc53ZFYfn*m9$aY^ua#lO;gOEbz^Qd^?&tM1%$Oor>&QioIT-vZWkO1k
zgz}azg7{km`yZcs`H_p8;Vf-S30vv4jgIEz<m8wK0Jq<s8)nz~91}hz$ha9`XzhX-
z9{E#!#nu>R9QEAK=(cE`;nZ*)4>RuK+|Ot@HDAmKOhks1X%Hl|F1`WaN40{+a(tY0
z<qSL)HZ<FgH9C5%EO7hxf34RPZkC8X&CK^mBPD%-bD5bG`Hq%BCKq#RF{ic#h8b@t
zr{?o#00&~00tpk!D|!(0JZb(xVsP<C&ph)<yK;_pL~W*R=N1*Vioj*F<Dxq4J#^@a
z+X>=NnE8_gF(QN+6l`2Dv-VSICZZBXP86P9!WI~2+(}LiZHrnsq+_Fp8Anwl*zCiM
z1M?tX!~hTzksy*niX@06T$NV@@iKw_oxuO`+=&OKD#t@C$H$>JyP$1BVXM66Z1%XQ
zZl=xRxIA<4+?|^B1AzVnLw{HZYlz4Mput*!p~0**0}KXN85owJoc2YH>X)5bvmK)P
z1iwj9BY?P7PHn5&4mBF0B0?1k8V@L@H8{1#!bWRwcWd)<4c2g7UpKCr?aP8l5RoKF
zCWs7x1hjUb*_#F9=O8&D!9T4QGe4Pt*vwnbYf0EpT}2%og(z)POEEI?cY~6PAA!Jq
zV7e2K2LRkCNcQ_feI*D4CV*M5LV$A>7tf6c#!>`lPt|>ey!xbX3UlL=Z>AFVrlSV7
z;MJc=<H5O|7q*tY)YgECo6FQH*&3A>i9)S)Ge}1$Q7gZW)t}S%b0sh{7z$e30P8D6
zbQYj@S>pu)ziJuD*M9oa@66R6{Y=OslSlLzqMbt!3tLO?BP&KnM`&^qx_;nl7RTjV
zhp%jN3Uebu$Rwcd(OMWp=m+QyCT1|xYP@o&EG6gw6QMrh>PHkS6EhCGO<U6t1!C1@
z73&SySSMQ(s{xt~Zep>@uhzf0>Rf8Q_ZIwK`5)`u@aypA>uy0sh?}AG;Zof*iBPxK
z$}Om9;<j9SJ?rvKW&#n&1@j4_gkpBD7$W&gPcJV~X8W1R$&bvhNDp!>CMG7tRu{8t
zQP@_V$6;K|jJ{68lT$n%v~9%^M;!i9&dkgX8XmsH-SS6^g{@=nlaa-^Ko*#pdA<C;
z{R}UTXyTZk0mL7~hQ?HOoMvWrl&|sO;Y$nv*Q$uc5l0+x#1Tgval{cv9C5@EM;vj)
w5l0+x#1Tgval{cv9C5@EM;vj)vE}3c0YU_fq?;dXV*mgE07*qoM6N<$f-&z)=Kufz

diff --git a/apps/desktop/src-tauri/icons/Square44x44Logo.png b/apps/desktop/src-tauri/icons/Square44x44Logo.png
index 835e26bbbc672a20db3e2cdadd33fb0a31c72655..2deae72918d7d833ec5f4fb142160130a2a09f77 100644
GIT binary patch
literal 3799
zcmV;|4k+=7P)<h;3K|Lk000e1NJLTq001li001lq1^@s69)wx}000i2Nkl<Zc%1E6
z32;?an*PqY>wE8#yd*CP2_#_&5CMaYAc!KZD7GkwrMQ%KJKAlj<&2g()r-^2IBGlE
z<G5Dq=!_fP_K4l62tBs68%rcKO9F@qB!oah_V<#!^{(fiy6=e!0%{M{GhNkx)vMf`
zdzSBh=lhp)fWO*bl(8?jurIf9#_`|}?tJEW@Bb{uAbs{UyXf|LOKL8i`Z>THC`Hco
znGh)oQU8l1LC*d!Nz(rfSPp|<bMYWOw2z1eh}z#<wL@n72++ROy?oc(L>;vJp}QXa
z^CJBMSOyu3=EZ0;5nbDtivGOK93~<fYHf|GJlE&;3op9VZM}zx>d6(tBl<To-~TaP
zUOVsXqd)2-gFHO(=L^g`b${nBljyfrI&s<`ENj6=$JrE3C4A65O&@joeTqT`|EDWw
zEO7VUPDJ<6z!OWHg<~gA(iJ^B(Mf}Q*fAda!L9dx88mQq#YgX~=_7jIN+)J+vz)nW
zEo<JJwzGJrYwbz+pu4Ey&41r?xc}{!o^>9z+(uQ>sQi<K@k?NRqrvs`;E%q4T{sxZ
z2@}AK{1@-Pw~lC;l}Vh@U|DCpXIbaGX*=KkmF=9l!m=)HcdZ@$W`cGfptpYX=r8>-
zWrY#tqks4z`Ogw(;3v!J4r{8mZ2ZX7wtI<aD^c_*dUDCN|KYb!)bF_Xp67@b>@$aJ
z>n!JtcP(f3O4FLX+_L68YguPMWmz*{v#f=^uJz#obC_OmY1zD=+~|)DN|9WM_=a{u
z+4$Q|AQXkd^1{=~YnDGYdDr9j$Cll>`uzurq*<jm{jk30<8QlWXVQhDagGe*FbPr`
zkP;A*0GI(}%7DOp#&6ie+$*1y_4D3YSY6-u_C9|NLk+R-&0jeG>9>FLF6RtF(4P+Y
zX#2Zai@*2YfyPyz^c)<%>GA<G7Zi%!gXy>)QgmAa7dkk%0XYq!qygCh6oVl!O5&+%
z#|@w6iJLbBgS-AVj=P%jS!rm5+R^ZsrA#Qs+%b2QZ#>Z6?eD6f<AXl#wlF4rs$YT-
zUbgM2&2KID{}#$~Mmr@%=-LDx84QI7+W`4o$MvQIlprBn;5^Qt84PZthpt!SqM)`&
zH|GN%)VSuEGxPMCo(0v-gKJw?|MGXg_*PZk;_kSa^yfY?zu$miO;*|X;t9r>;+ip|
z3Z^afQWq`T-q!v?G`_Pzb7w56x@+<L^kmEAos7#FKuUoZlyO9NIAY)Ht{RZ*>VtC4
z<mpq!<Xw2$ha0bY_T0IL=jM<h;6j#U5K;CgNPIKE`JoE!l!|$iYAeoPIH6?jHJVyd
z>yiP-1LA4G&ZM!T?(*pehkxHtVSIPa^gEZ=4Ms9a>7cAD9tos?;xUXzdtiGTl;E~~
z6~S1dGsD19pq)}&TTxRK%d`))MVq5ZGxb%(9!nCr?FV%B&$l&yQXH(Rv66tD28NPA
zd=SVujw#8W>)0L#Lc#M-U$gz?5At}5IuB}jfSln%$&k<l<DN}I4*;G4%&ZmY9S%vc
z1aMCE&u>{&d-pRV^MT?bzrGko$gth6WaFE=57n>P-uA~$TlQ>g?-=N|j|G??od_gE
zg7JZ>8sT~Nq0UsiH=0fkCsU@K8M2w1mKm6ySFWlVD`h&KggN70TkWxw!Xtp@K@M0z
zK#<T}Knsxwj%56T8EHflUDlYqhi;uY_U>m|VvgA&%;ct4JK3;rgxlO+EC;*`uK3R6
zWiQ=(+3G#bFLzn@E`23i&2i3;%`id0-!2cGsaM{(W7$ntKXHFSST_6mNViQ>q?{CY
z31DdnqpO0bzC@Gvtaa?Ml^0)};+T$+E<#aRmRt|23^2~PQVNtwoR<zHF{k>4^`3jh
z?ENv@9Cr@nbRT%4&qcxzV#tJfXpmg_pb#SqVQy&+m8^QdsXvSBD6t#?-;cSz_1I57
z@cQpx?6w>&&vj*YIOB353~0PmXnGKxO&-G40wb45yuM+N9XA7Id85e9FCYXoKv#fZ
zF%T?cC>;%SvJoyRr_Sz544Rc!OLCw}M)y9I+oU0BDoA8xIc0HOkySZCp^~RoKEJmi
z`oKTt0Mm)W8hxha-F>%?&ir?*bHVA?mO-TKw(brdGkds49^izr_ovfv!Q<r!O)f*M
zRW?VL3Z5z9h!^AlyM+*uV&bF;^n`TmZf~>AT18Hb&BuoO_9Ec)VML&eYi=pzq=68F
z8_&qWE$iPvWB<*Qj`XYJ0zM4dH%pY14Lv<|M*jV>3b#Mzs%;1Q(RR>7N4Ji)W*2{W
z8kl^i!9RX9gwckFM1;UbF|JA^oG_sz#E?`8y^e>HDRX({-v_bf5ukZzFD$GB(1eKL
zVfrakv1s99boND2|K2qU;AQ3M%k(S58e<$p0yD?ocm4UZmc0~9x~8gdxulRpSt;Y?
zWq`_~=<P~lTXPVxi&XTOI{xNn1>PZ`XR8az14Ni%>THHXL5`1K2U?PZ=3O4_m4ldG
z+k!b0(wL~~s2npAL8AyxMt7^rL;9;5Ry=(DLs$R!cnq_nvm23z38gp8y<o-*>j&ee
z&4mYDlewmn@W(Pq<|V}(6RLrl(H6qG39rNfMho=h1u-yaKxBYnCQvcSL3F^zKog-n
z9~hGsm^MuY@(uXpz4kMpX&azwekddqspMXEt`dCo!^iKsf5n}T`I+`;4YQ-c76hgh
zE;+L?YB`oEgvmiXyFIERLDM-8s3iPi(3i3lU?_=57*{}i=C?RxyBiO$+=bf9r(zt_
zk#7kMwW^464U2D)(KE=g=Kw=ThbJsQxAhWldl#a(gdwB?h603TW}kJcYTWSB(&_K)
z`fY>6BxL>Oc#^noUYr8K5f~coOL9rm{XpW&gcBExF|NrBy2hX@Boq$F5<ymFRFCKU
z!3Q6~+@)87+cCHYyKwQMg;>2=AlgefYZ0M%Jdha%B)=#V1XW>t*Xu4MaD+67kOUYS
z*;9&C6`G{Ze<CD#lop4pM&FK%$^iQMK8dLe2<Mj=x)yR7Q{ks|0dN9??J=Y?K+0m=
zbQrg7AX3QridC!7CK{pZm1x|b!hdc1HJbMW2AD8(LRS+Zp!y#Oc!J=%fG2Sw7kU^@
z+OSFGj;yOm3K)MJkkpqqZvU)mqZ6g(wM}P7_H^8MV|Dor|5;ElMmLNSAxVnxJizrc
z2OJ1ua6JZ72w@bd{Nt8Btljkls>`o{V*?rs!9p+U8rPzB(gHq^@I+51@pzQO_PFqz
zPdAnmB4dN-YqzjJ)`q_R4h*MT>JLWWd3eBD^A=$H74;F2zX14fqe};p&pm%&?{m-R
z@!7Mg3a+m=@{8>9;u&%{uL_!~f)feh`pzPAKk%$s|1;<YM}BB39Lh0RIHE#q-m{!n
zS1y3As~GC{#9+6?i^mI|P5`b&u%Z&WyZ7U*&HrML3>OB+<qbUhLD!479J%L5Ivqdu
z!ClQhIlOIqL2we<x^`gWj(^3vt@okvla=Tm+|Nm6ykrdU{zorjz}|$C@LZv)k?euN
zFAWWSB2S54)bCh<@Ce39a(Vl{ZVVlgaHz>c?_N&~^^iy=qA-!cqSNN!`pYH_`|B!P
zJ#Ha+%*5f>rrDP~pohcbF-9>E9c)L+YC~(^2DEgqg`t&ztpf(Et%yWwg`rP|s)w@-
z`=}KjMp1YQn)_cx|GH1m9ovQ($|V?EaSKKSRCp307y?F>mt#iRd6-*KiQb`xY=tJ^
zM}=cooL_YiB-{3I=~bsf;?q#Kt{wYYJCSyJAkYODQ4|JeA*hvcBQOq<qQhs{*So|G
z=xi*=U>J5=V8g+v${MKoz^*L~Py+$J?t@oxM$H0@8&xR=k}^8t-24hWCk8Bh$ukDi
zcHxOMF1frKcB&d%xAvlSZxpUDA&`M0YtRDa*}i_rWQ+hQC^SjtvJ^sCnJMzrB=7C+
z!^*Z-u%mGuMn<L}UmK5De;VNcM}JB~N3WCve1dZR#0)bcUym|p$fO)>s%t^e&~WaB
zl^8d11lFwT5+m}8IY<`%jU*W7{#qmmjBAkOppaQXR*m7jLL6vmfx>m1I`Jw<OcI)+
zW-Eq_XCY?l=uJ~PhnM}S3_G6Zx!D3EHk3wweh3ohNGC=1CX%?w79LC@&Nu^z`HJu(
zhw$?wW7(YOe|R?ZNAf3waanle`-lh2u^^ZXS7M0U65>`Sdk{U59V1G7UKd+l%t~dF
za4jy+n>S7<s)R$`L)g2w2aX?;Ny@Q7O!(-T%yJBq57xhBV7d8;K|m4?dBPQTR_8*H
z@W>CM1k)oVTm^9}75^&0$6?rq!69JLkh%UhAFe4~+O&5#J^Re@!HE+~c`}hfBI$n?
ziQFkSH!62gl!csyDtz{H?OX^Ze5U=kK2X2WA4dX0=DMwi3el6<(vX`$d{e-mv)mlL
z`$|HnesKHgvv%)n#OSI}@~pEe)p*>O0dY?Vk#(}1hy{T-2>}6-s{#BE%1VTDB9>*<
zFD1ZaTad&hNi`Hi^v%0p*w&ZYbTGU2agO*|Qt&mcIPjf0WrerZF{uJB^AHF~aa{|j
zjC0PJ0!7xL1wz~?($KuKUU=>hm?V9+_^0H%9I}9{8k}Ufb`nme57ES1-|aWw_|@l-
z=zjzFixV)6G?p$Yi(LPP7Muu4^?lBZOI%VlImor3!HpsnO^x+J&~SF!g=f1U;ez>>
zRx*bt;8;CKXLddnOTYU_S~O=_{krzG8TJ!4WiwFjxg>PeRb_?Oy&BB(Go0pY-Y$sb
ziO6_`Z&+RDau)T2o8dd0ALd-A2bOi<cSD&Ef10qj?jU3<sV~ia(f}Xso~um{Ym6fj
zxa7jJ!tcKx42=sGl~+OV7!K@d0cZ%WI|SG6sUOOG@RPW;d83Dvd*sso@A!H>34p%{
zoFBnTNS;z@C}-Xb<j>^N(7ue_{OhE%tKOx!bL2>WTrQIQ)$sq&{s%u_ANiR~Bhvr?
N002ovPDHLkV1gCQWd{HN

delta 2321
zcmV+s3GVjS9h(x6BYz0uNkl<Zc-qC8Yit$A703VQ%&dKl4SqnCwsuM(E-kjPNEAoH
zJW9hukVI9K)+9{=Z6n%5sah%NOa0^^s2UUz($G|;P1UCTPz6Y<HkC>UFQ-rl5Fmya
z+eJ2z2=jEX0b~2#ozoBdzPrA@CP-cB>aKQoW`2A2oHPG3Lw|@K<o*i)lvmBFW8v8(
zGzEY#h`<bh!O#E$Fbpt*!A^5>?*WnL$h!{)pq*~u^hID%Y!RTkmC}3L+t(d;+BY-s
zoB$-*fL?0@02QBY_!dDu0YL*RD@9-sF#rW3at0>_f_Kg?kn>#ln$s@FdE^>Fj6Fzf
z9TcHgIy+x@J%0dSWx~J=z)YyBsj%$vzagcY;Jp`-0Z8J5Pz)k~Bmf%ZT0Ht3`RDN$
z1QBUwE(DW;G3IqvgHN}$t?%`q$%8Ka+>A1nE_#cV)gZ>C3B*Lq0F&3L*Kq)=B2e&Q
zmHQvS22d0QjT=G;Yyc8VkJq*tI!LUSw6(SM0h<g1O@9o4bUO7rrK|=q_ArAjB32{9
zk~iS3g>}avB3497XEFoBT9-74F&lx+c2m<bCIG1T^gSz-wq7&FPBWARqU=thuvspU
zKWr!l5?~Q>m%xoEtyQs=k)dU6ZOxk*jv1c<U<k}0iVo&mks_AK2NnsiNOXfNSPEZf
z1|VeUhkrmb)5Oor`VvTvFjNYZ9rZMVpXLJ_e!-FMt9bAxS(}s)ct|pGCxfs+v6XVN
z!PsFb2h1mfRe|dP!d#dl%?q?MDJTH81pY~Wo*fMqBf`=rgbm^dLc*j0vZrVer~R8_
zfQ1Vi4WQ9rN66t>un5CC)1+${N^1rYk%GA0z<>Lco&~dlE$p-L3^E!l<pmpSBMcG+
zVMQ9O9ZQPIg5|tm#}yZ0@#4GD*jS6&+Q}#{E5U@)akzGE5WT(E(A{+bJ9i$(?p<xT
zdUZH5)8zw8P!JHn1U9Zp3ADl3Ec@*zmg31L??+i#39^r}vSO5#6=Uku+pu8a4D|Qk
zz<<jxZN(c~4nc(ShIP*2pR4f`?pR2q=KvxEX797+f@M;8e(iU#a^+H_QU%E8C@i!v
z@5|FMY0?DzyXC)m1Yp=`N)#8e5wn-U+Vwp(sy6T}+q7&x9(-^%Zsz!UQv)7fF?$rt
z`uW!nZV<U*)i6kr>k3J*91E~V9+{sAGk-8Jgzay);`HfDC@Lz%tj1}mt*weZxAMF5
zux0ZR3=i3fQZpK$-oFE`9XDb?WCYlt6S(Kq)s>0B-(0={?d?6jFxv3TZTQho9>DSy
zb0W``mKI?~T_p~`_mSTxC5`QkDZ!Mk*`G}$FKs|z3=R&Xpg>0;(rFvr-4_ED=YO_&
z^|vi3uq@wVo&>*sJsr`?fkvU2z6KG<cL~=G9JM|=ED_=8(JsuJR~G@cEQK{c{{~+9
z)i#_t-RrmM?;FC}U;Ha%MT&^0Y}l9*BnC;4F?8Stk{2w%*tqd6G&W9$)+z$MWa&&S
zSvnKv&-dX(+gY4w>p^?_IUH|2i+?Lu2J?oEDLvQ10E4O~KlD7a^;40I4QMqQtT)J_
z#dl)$nnzJmlFBPPbah?A+gnfIZ+~sY<x2y}urc}SSr)d|CCX%m)~X3*(-#t3b0846
zB#P%midPEVT^I4@n}=a+K~-f1ii-<#0+*MM!`%&&@zB?1;^M{YIN5nQFMn8fY*Adu
z0<%|5D63t_E-;8Wp1?;gYX%0=cz54P{OPql*tYc;+CJz(&)F*&9=0)ld<unyItFeP
zD9oE*jiX1-qNnF-BCL}LRM=3$s*pv@UMEWsLr89_2J>d4?(WMt)%`L4`Hxm-3RMbq
zb(MJf`(HuBJ(DBQ%!Egm-+zU}hk6oWV`<e5ItF<w8VrKu1zTVLdE9sZU7-}^{N6iw
z3cGi8_|J&}j<xpSXFvWswzvEsX6fqcN%_HMRUbM?Ba&CaXxqSJkI#((ELk!GogEj^
z)6*Y$*=b+AEzzfKBZ;ucf+hbNxoOR%7k{S9UEOxHpTmbAUdHXWPk)R6Oq^7LO>aDf
zojclb=FG=1HgHGvr?6nrv_#;x;}=4(6bry`@QXN#lG$DOa;$7}RJY{+8zXq>#jRMk
z{;?RuxZ(ml@YVWJQ=Bn^zx=s16x1pq6OnIOA_b5$ad7Y{RNgh%j_oI~;pOc&rPeYT
zgVoKu(b3+U2#XMpr+**=5yVc=ky~+$rC|KSt9x+zR4<-+b`dJ8%JYK#;MjR=SpP1L
zwO$wzHeON%Ya*dF(?E%hrC{8(qZ51H>B5}3U%;%!shCk;iSmkZC@n35Z5#CU4dTMN
zYdCWFEcXBBBfNj)e8^{W!BQX-ys6n!Yd(a~O%;rpw4i0zNq@BL>dGo>;=!9gEQeqj
z5Vt)OG=l~H%#tN9Z=ztl6|i1;6j5x>v%*AdQP?H^&#=gX^;0Vp2yAH)?j|CTI8{^N
z<k^+;Xe&0i&JALV<U%CQE=D&iMLUeK2Z=P1Th~RvMu82c&d`?`5mqI`VkB6%H&$dM
zJ)E&*2X}T(?0+Pp_nA`w*p7qcwk(CJ+sJl61UAQ_AXKnl5`$F$*w(595P4_czI~m}
zz5($%h9Wpi^@$66x!oYBxRcj}DPCCm8#>Xpv04r!M4DLf8eo;-CN!yzju$s)%+MCg
zDzP9Kjz%m+^K_2tmXgJH!p03Hw2AivLAsz|qE4s#{(rc8|Gh0uO`8-sHS{vBsi`Ry
zV{g^ExWP_e&wvz>Bj{;N1!E4_oGuo$7w=0KS`{i|4;-*cZ`|A1xcJ7ZRZhY0?}OFU
zJW~Nv_G_&Q9(III1|TvdB#5mIC+*MWTA~fZCQZT0`KGK`sbVl`7?b|}b?JZhz=8Yv
z9mA4@Hh&g_&AZy^s~=XZzbAqQ=7LnPl$Eu*KFVsmx4;<51_@s)$Tk4P3<9)UnAf%J
zpX(|t2R3^r)V=W>dEoW+FVvCY*+Mjhj4c91%z>hcZr5gA_qTWhsTyqYhMs4y$V?G|
ryT$0eEr(_w2Y_ZY^Qx?^+y4RlLv$jqb~`Ts015yANkvXXu0mjfp-Wgx

diff --git a/apps/desktop/src-tauri/icons/Square71x71Logo.png b/apps/desktop/src-tauri/icons/Square71x71Logo.png
index 19f2b3315d709e1bcf5d5aca2d051c007877da60..def91e691158cb5ea4d57f2a802f9d20417fb9d3 100644
GIT binary patch
literal 8308
zcmV-)AdBCLP)<h;3K|Lk000e1NJLTq002h-002h_1^@s6Rj^tg001C6Nkl<Zc%1Eg
z36xz`neMlTGu-*sy)`FQmCBq{fFuk783I8?d4j?NhgRtY4xm02hqi5fYIj2mP6*nH
zg6#mdATCfq5W_5D0+~bR)Lf}bjkoHKXWsj*eQs3@tC1lIuzZWX)~!=@?>+nM^X-57
z{{KG(yfNMwZ;byR2O$)ca4^b12zfbYgg>KNoPPSkPu~>Rlf3%w%Q^S&d{9bX{BuG>
zAXYRlm|fX>w>+-(_}L0n_5Lwk2VS>94*gcAoib;2!{@KKV8Q#}SwkCRLWmcYAjSwJ
zB;K;T?VaWVDo#IP>3LF0aP~Uh&aoSRz44VbU;V!yy~2?<{#MF~2PWmd`|k}dIpzGf
z&PdSV5GlZBK+B>gviI)KPk7#=*0u+38cQJ?{p<Je_d3X-8$2=dtsAcVgp}6}*!hnS
zR*H9ZT19WX(~_lL`PECVxax%fQe#<aZqws8T=A^%ejC{CNLh$GgGX<@cH5~fD;5GK
z{W}JRhQF;y|NFmQex;QEJ!t3eDm%`*p0S-T@AJHYv9f392lF!U<+m@p^3&?OoQL)n
z%bOOp{PDY2KU>~=t(5YY((#8J&kH=;zSoiBn^N{(D|h_(pS(A<t~^P7|7dMc^{U5U
z5JI5z{>8sTA!UG$<Yzx|+`GQ=wKKou6i#iV(Q7-U@FhX#l)z(Y6YrJrsBKM_KKHYm
zZ**<j`qEv$xJAwHdX8Ng9qkoEm6MSg2Vx~iqa9@ODS@4Rc<xX7)V&)^KOUGG>r&TK
zcIoe85K`TTcJs1#eehBtzq{8djs~uG{fO(W+3GlNd&2Q9c*6BQu*LBnDF&XO8xJb^
zzM^z<@-ydMeCgqHElo7kJayfB*2$s&Bb|{?7UhHQmOnW6k~`yQJY;uX_d%wuL1VJs
z{Pf!{|5x=6eF1Aoz^dQV-@58OZz;=bHaW$v!0~R)xz2fe9B0jX$651;<GuMo*Sqj>
z*Za_J$Jt;9o_pY+XN_$v`jgMfOIE)595sibS3z#n>!N$_`P7)#eVO&p<saNfkPI)v
zsan;svB*cIluQ{*La?B|uIWF%ao*QvMH-SqN>ECk2aH636g#2q^cA<QpYtzTWz`AL
z@0}#LdtAaPfCgpIz##}6z|I4s<G?LLK6cjC!yReXgIuL_>n)#u?9|p($2qPKQ`a!;
zj#Ym7+x~Bpi8^}I!<|=46ar2ed?AmSIvo`_z6e4)^X{`dt};93xHo+H{kJsejd3BW
z;1JLd7z548(-+^dW7em$Hd`+E-NS_5KPqA60lx?lSOmgG_;SjCJqiqsLi}*l7klS5
z(5Zn%daRPD{OY=|Y@d@}+HAXCD4|bm8hGg7vl)H;P|s6JS^^<(EC)H_lL$e5ENg!9
z(lsCZ!nZHI0jdAxYVv-)`1DrX^8L}ZpTGOR-v-!{A*!7<=f15gKC@==@M^~$m5kf!
zd`BWELC6X~T~KL55Eozppqvb^A>gwl+FF1QBsp!nKj+Wp<8=LVou#*5e`Q<I9V*3*
zG+)-Z{Oo7?o_a)W!pn6GuP!)5xdM&+{8Lx$x$H9y3y~<nF&b@sSC@Y8%_AHB<Dp$2
z+BC9fr<6Wc*4}dGnvZ|vJqORQEB%7%ejGvspu&M*4xz#l0uDeuf)E_9IzNdJXjus~
z18uFqJ9JJL-d^@QgfMSgw|3J%-gVh2fc-pCQPQN;`dE!4wp;`RwPwm(no72Q>GI=m
zS@Yresz<+r&bQtChZR8HSKpZz|I8;Z{J;(0E3dIjyDVyo6ok(tlvzSR0GEI$FkA_$
z0CJ%I79q7V6|)3*Eg)wBvswvVWf3g@zHhH|%=l*?|JIE^-u{KpaLVC}@N(feYr*nG
zv+C<x?|6Fc!-~iTB6#h=IegUc+Q|M}KUn#~4>n)+(~VEwuHMVAGf%km9c#BH&L@RU
zQ!s-BrJf;$G(bH85gH@`5I+P2nhQ{+S{}gEs&s%T$DE{;)k)AsDKc$@t{epBe?wGi
z9iF`E;R{aNmHWebN*Flfq$Qb6-h10uH;hl@51jpv|GY-6BNTGH4hETkfK!S|f86@$
zw|0K)FFiw#tM?d^`e_|EK9W3%+q=7j?&k@DaVani$UY*-6d)>6NC$wc><`rMq0OPL
zk|e<J0MjBg<^V<+!YBcS5eT-Jz<swgpPPXDj(K0Xhm!~sGQjHgm1{QK`Jt&r=gn<d
zeNn?XcYW%;_oei-rgZd3UHef*$PyC1sD|nH>{|OHggF_C*62B>H7;3MyLrGW*e=l-
zkv{W?ASKCVg>Zf{0cnE}3J5>6Gn9pDRaG-?06a%vbxRNy2y-?Cp9{g~O4`YRn&pfR
z)C9IZwW6Uewz&CVY0JQ4`!_sx<v-c0@A}c;lbau%-1pGBvD*R}NM)Q~LvToy9fwDR
zI(^6pN*{p)3hwY2FBC<p64BEhH|;5)m~&Ao6(LiGpE@xH4*~U+t#Kigtzj;qRM{UN
z;0(|y#XwgM<pU*ZnlT!UC#hLW{fP#+eOX`p%aTBd7K`4z%Tlt30KWXqwyl4<<A=-l
zUvux4vv(JI4<5dWuM#-qP^v(=neb9_`f}6POzKH(c4l_EwRYaz=JecU$>{7ez2YPA
zMicg6F84&<IyjK`xBe-vx1Z8n^TkhaDqQJ<!y{mh4AqFZQZSE%c1RO|5fku*F3fl%
zHRyqYQ~1;Vh&O*lD%T#JTbIO0VB>*(-}&Z5W#34ZxvPLw;v>KM{c&Y6;V5-i0pXEb
zoR>7n<bO=g5oL|3_Dp;IaZ47@I^nGL#${`=@wO99V^-1)5-5~7N-Bm4Dt6!Cmdafl
z-@nuf21eAm5!#eG?S$v1_yx&|lNDU#DGjB@lS0`V=7&+Eh$ab5))H*J+jCP^Bud<0
zKlJ3z_nvR^8a-*YHzdvG#^J*5o|4-&_F}6KK~v%_0U<?rd?ix!5|SgssHQ1(Qp>`Y
z(@tI3@}>*g8;(CW9c^tQA_m(5iWabM6tI2Y7K&U4mWoulCnORzXJ*zcxpnOyc3iwt
z5;u?_0$K%JPxC-Z>e~|BgW#T0DG4eO?zKh%BLVOzLDmE^H1M9>32FP2j$NAUA1!U}
zpI`Ilr5B$5&08{Yo~d|)`zEaJt^K+E+xjPZdk1p|#-{8EM`aXW2(VD{Uq(FiH^5O*
zm;^^d^oomq_SnhCzh#wM;IJ*ATmt%sy^7=5A`p^FWsen|qJ%R}xnvx|6`(Re-kz*9
zHN55crQ@Ib+K%CCzAE5&Fdd;s2vvq$1`yl@xGzN*8LOQofTj~@34oZCwj_b}Yz25^
zMv6H-d+v4LdGoTXuQqj#m;o$G;jG#O5R3XCd<u>jc85z{TlyyUuiJZI_tX3O_io=m
z*fltqAFc=y;(z3lGn02|h+KHt+?KbmDwnL>@PMl`5E=yPzA0yfQlXfWA0SX7tCHT5
zf*Dos6_kNMa=qe}O3T_m_m!diqqpa*b)C}m1&dHlZ0T~JK=VM=QAth6#1wVVB_cHh
z)TCIpz(bV#S``>d&T9YOFHW5Qu@4Luiv^7lJ(K1r<fZ5thaX`SaWhF%(Ttf%FIzQl
zAy&QfWL(X(3M$?(hD%*rw{~uL@TOng`py1)Z~mpI#tTc%^a*y*we_jT_h9uoZF<De
zbl(*SB%z8}`o0j3=TSfKA*F(efdmAm$q~&0K4Wku0U<ojc+6cs=i3iIx%+|@B3ka@
z2`tb8An*v)g%rGM3>2n<aivaxSp&qAzzK6)bRGyM)t;R?=llP)u=Qgf7%Alo1~;OS
z6oXy^RPs_t3*6OI*d$T(U4OI;*BAjbPJEMd8jrT=>CD{aSDgQr<(*ryXWzX3s?%Re
zwO%j?lwkl%kn^5+W_S0mAK12SBpyjmN9h70@P+U^AHL@b*LUFr9^Al#7x=Kt62v6P
zb^u0}L2!fG(iII2r?oAuzxFq-ZtF%`3e!}!MG8#<T)jvb8B?wis;2-g2GrI|S{v11
zSw?nF@|v3#wtf8ayjv>yFr$bwB-(+JE5&3^qG(GL%D_~K(qfs?f<<`Ip}ge5%zIKl
znD=n7=oG$jbFcr@u6>(A4S5NF^fwK%41WkYSozO)Z-1_RBpN%1w`H5e#8|*RU&8Ty
zIDrq(4<G_51XXq?fExsm2MOk{pd!*DXwTDxx_M43MaxYl&O8?}A6i=aW&t2Nplpt!
z3zR^B6N&_2WC$WLAk#qT6r|7CinlJAcfwm;>e~U+O%kI>ohaeDLW~WmbcX~Z0y<;x
z0s_wi)pa7g05E(4#w4;?E;j8ys6YJ7+S0z#FaG(^J-$-OnSqCZ!V%+@-u!n?-nem#
zIXE%lYg~it`k|D#o*zn#tE{Wg1Z5Fuh5_GY=-=Ygx`hOhWei=zIqdD;LHmb$Txx25
zBn`w;fEiJlJ-{#kT^*xJ+6asqAQA`ktiS{~N?y$EFYK{PGS5jyqHzt7S<Eoj$5FO9
zwE{scH$cVpQ1*OOJivBAZ3nbuNl?zwHJbAu{qq)cfBvSETrpu)rA8jPE0@#!u;_2!
z(>M9U_pxo{j+IN!s5n7HuQ(1UjUZy^kdc78K?Qkx6y>QREZ2v#FO9LF4GS+aVLX!%
zw9o>>j8G#IK{_dg9|x3_s1yZN>PkUb3LrI7#FC(iC;_XHV$zk!yOa(U_R{ib3A5Wf
zFl$~6TmDc%xxYvw(ttr@05hrD>HtD*R%qPStZ74|!{tf)$!9jl_mAIjPQl;RRZYT)
zqmPhfI0?n1xAxA?5z^+%17BZr!r5-r1@9Z3K>t`5a-~7FBxpQ}h+YTI8lgv`=zYdP
zYKe}e|68Y<ChLTBBEpQi$ix9VO5i4|j68JX41&ZZkRpi1AmSVpNkWTL1Qv<Gs9AvY
z;yIXiVGR4$2cmP`2$hxHfI9}00SPmUWUK)xvl$Vdp^hIx#0M&V&fVI*Io>sT^GC+r
zC!ct^z`QJQ)Tp{V0cMQdzvhh9*DspeA`IQd$%12I%0ce|iq8IV42}R(MXnNIh(SYK
zXXyGPaQr7FTF;ZT>n>BoQ#wt@A)FXsrB%$J0Fr{J^mq)Qafw8P(g;^63lhdv9#258
zi;G1U$EjZlaA2KJb?OVLnbZ>uQ<Vc47~c%bD!||z&DlnrxOh2Mp49H{>mG{k==s@o
zQ}Vu_5W>O`<>ii-1cyvdn2sDb`_gmnd5&q#_V)dPb7~?MOQSwJ52vpJ&R^pJVge&0
z<Ji5wgq^)59Gt3Pq(6df4>EN815oHCG?k#J;ey&R0;>jL&PzIkN+v;K5G)GBxI{!<
zTUYt80G<{>`?)|(n=iKgj8oqVP|63?&fB1(jM_BANefzW{G2#eE^Wm8x%H?|Wx!dI
zCbAuVM@Mnd$FE(>g{=6>*1TK_@uI$rOp9PlYtLSE#zO}ZvH9GwY@wT+YFsIsiZ>-F
zBh-vi)Yfs#ZU$y$1!BC2Ql)~f;Q-rm21+Xo<XHqwDGe8109ZMJu`U5?QYE+)H~>}d
zJq^^g0+|%>hc2L|pJ8$o*jon-{n-<_Cq0@D#xSpO94nSfteC5#si4EulJJnkWWhwS
z!eN(H1ptU}-#>Y|ZvOPCpa1T2Klt#)gox?zMjj0~B%DB}wUP5zKG0R0IjPR7lzhTC
zSD<NJ1$-2oOF<Ptq}n+`H6Rir$Yd#6n<!dqJ=Dfs__TsC-N(2=kZ3hfiN`Qm)FGw>
z+<esraFf8OW2l|0qzAaW%Lm!xgZmz=LV$Ueixu+;7SGj@ZirSd24MT+z=OA|^r8e4
z5}XR5>`;^wBy`ZEF6>iIjKr_`{nx*7<2_&gB4Z3e5F9BuRbU8odTz&Ee`#%c=c=+b
zS)okR73x$#5XPuV3mA$Asi>Ao!5E>OKrqG2bOPOw)Ql3;q$y_AQ?%6uXv|t55er4#
z#(>K(?5APYM-?T-RK<lQ9VCd0<fMmEe}INW6bnu@P#5Qb$pM>UEDsEi2~1216pCtN
z2zERmP|1-nxHK4Ga3I2fh)xhUC6bi59m{z9qd&XyviqL-$?cS~=@iT>=2lhCv7+T`
z-&DYqtXzpwZYtVOq{{0kk{Ae2p%gH98dX6T)uj|tMRTfu#s>l)!m}luvOs<!puPPB
znREor4N-I~mhhk0k2~)83zochF0$D)T6_cZlR&g=!gUhR91YucFnBS7xr>0F0f9nE
zz_J0mQoXmp2aE`4au!8yNK&S}o*+~z4-!<F5D^4Kljh#te(CEMedo4)1G_ix8G3qW
z$X66Ee7TY{V`pk(Z(92HlOEaW3%4K%iT;&_R7s*#^qEo0BvH}~$|yCoaL0tEDIHTK
z20+)U%|;rNi0Xt=F3~hkL$QApKltfwn0My6_|#>s_|cDdqCuy)^71qA_-28jyrKdU
zl@gH22%K{%#pDzasLEZ)?-Vdngp@{ASZ&a~4+mhNFf^6hhR}&bL<eGw(73Kj)xO`B
z)#<*8EtQYlzNX$4MU{K}oA!tPEx6jU@46}$*X%$@u7FTEBPG77;3gTNY8BzM)gCki
zQo`{FDh{aSfVw`Ren8;5fagm1zRLY5(PNkxD&wcW`3>^13X-u7Y@f`czhL9nPu-8T
z>vAYt6y?zXv<w&m$PEG`eImS|2nbaY6M`d1n3fHE6^{~VNr8&(!}bE$o}iWwTDC!p
zHjpa`6dgtfCcR2s;>6^v`06uXs!ip8exf7-!1&bO9;@h@iG=A!BBslUE~KQ8f`qT?
zsj7&k+_6fzRbx_L5I8Qvmm7d8exrc#d{wTcRA>SZKD-V+rFBR~=BXL5<u4WrIUAlf
zj3?G@ghAE!0Y8vJf$sVQgPm0etmX=YI;w1AH9O`7QVEcV))LstczYfyjyeV*l_(1)
z%9OfO1a7w#B!B(v4mwuu=?ic7m82|YqQ`;4ufG4MO^Ky#jTe8ou5K=(@q{p#SrI<d
z9WS853&N7UB8$pP&FH5(su`5jghNRfg$O)JvuTbk+jru*p8G(f91){A+zZbM!g$Jv
znAp7kQ7mjf4W=1GzNE-Nm>U*@eUi2wFO|foBpakas9MwIR|p?8npL$z0Z-+XG!2qd
zIK;zLrJ(0WbNX0r5C<oA4)*1KeML#`>{6?Jv1s`P4007o0n6_x-}sT??tA|&dvMK%
z>SAYnHe0hanaVUE8m;loNSvze3Vcy5;1fCBi&v#|N(I7jOG3E5q=|%vq0td++P)SQ
ztqW=WBp5~l%7XfiQhf=XXE0gbjV-%3;KbwCKorBuhBB`xOiC1T0!D(-z?I783DrQV
ziXRGLwS;&*gAvzYl`Z70A&gEQK%p><Vx?<G!QT0cg17B=mgw%0@Tc9>5fe`mo@~jU
z0|zSq^=}6&cU~9Eb*!u#ddIJlu{kZNREx-DT4^F)2c5;j6sH181VKpp!e&?n5K(Pw
z3<0sQW$Sv3dw+&zrePY*U_2I<b^JitbSW5#K{FZMdtfc*ww?q-PoSjqLP?h`#OMJ*
zTRV8D)<h+LSTzR}dMyWV9f`gDkKy3pPPk%9q;$et<9^rghrhQ%NTrZ7cXrgoQ%)bN
z4T}NFZXtMfeUo;^6M(q9duXkFU^q_WktU>5ZOCTZ5Rccvj6}ouM=e+eJ_sd9W+^sr
z+K#^QwGg@mQ=cz1EdxpoNJ6M`r(x-h8qio4MQ0y&cdo<o<IbbR3gd90nz#$&$}37x
zjf7HbR{*yp;aY%asZH=PUV0i8F^+g7ixXxopr<Y@mGA2d{IC~sy83VoiKm#ZL9j4r
zP>i=GwgeU7!52A9SbH#0-iiK$NyH<~s7cO2wyqWFWIbZ>C}y=Y?0Rk&c6Y6X&3j;I
zjl$6CVCY#eriXK@7bBc98imGc;G0Es9((}V%sezT%~w?p>WKnIhR2Z`o{jPZMc_#h
z_{!c@)lLP=+!Tlz^%T(r5_*j|b$$by7TVrSt?gB;c#05n%D9L`vPgMt!uGQ;w0d|V
z562%z&fSfP;hpFkNg$>-A(?2x=B)w;N4BF#w?We~!q6I^>kTlJ<S-pVDleuYH409m
zU^D@p*TNAa*u3ZGXdXWWsz+rsw->RDz=E+aLU>B01h`@ks`Q~sq^hJtd>S>fFryw8
z)YM>6Hj43rk}teA<zU7j88?wg*P%wQ$HdqqT)#98QW0K|hv!dWO6<i{ZWn^Ug5(Z#
zrdV<crru0Vy-sMF%66#;fT%Pppuz)UfU`u{(Ihp2ir<C3qx(a5?*?U<+G6Mihb?^Q
zhE9d@=}e+rD#FkVnyfKV8>>e=LQ!i1mTRJDt9t5d1P)YtnNKipaR$p*HKA)?4qf|m
z7&%ygWtCy_G6J&%&o96iWeBPIxT@{?8jn+hHNezrDbu1=!x(y+stq7S2d4>0=2dMF
z(I7NCEN~GwfvDLSf)R=8=<Vx5rluB&c$_}8_NSrBA2<I^U^1$BUYOr5RdnP_^tA&=
zgxM()Hcl(@ws>hB7I)O);9wE^_vSD#P(Z0*!C<P{rh-7Imnw#<GKmROuZ5;(t2V6K
zq7w#kL_N14RUSGDPDB_~20{TSz?cb#*q|hacn!nm_0QpvM}LBBO$%btEUc1^n4ZG$
zzzDL58u%b^K~S)CjOK{-nt>w&K@{U-nnrtj$I#O?hNVlI(a@B}td<0(rX2M5<<Zrd
z$K<#Zx?9!$raTg38n_+{Z&uNWu=pQN8d@_!DTkDi5Gc-6x=WcNT`;Osjpvb{9Krp+
zy&FB<yAY2xA@Dh@Qh<g`2O@eL5lsv2mrp6&fTLiW7%QtR^=kwUNVUf-@B%SwRxJwo
z3N~%&hPhiuOG_PES~FO(v>uB)GI;FaAq@6gLXSkl7+Q5;QB}1I`HX@^vH$5JfB3hO
zM)esN$`;KyUP6e_wImJf68gHkk%+WF*OD-}GT@pLGe|+<c@l(E>Z&*h5JlI(q$RB*
zZKQk!;E-^!fp9IzDqpZG9-5mnSiEEw1_yKK>KwtqfpMIC;(R1)45ZQ~2KpTZi-6)^
z>KLeaMzL6`o<LJa$k675AWS!O&$Q}RqwJ926CE*gHdvHbK~{WM-EbAY(CZ1Q+D=qz
zRe=Rm0)~pGqM&Nr{!06FUa{o3K_&0|e%P*GDBIY$p&PZ?1m@3g!0NM?qFA(`=_+um
zl0?QBrD0i}2(_!>o>tpJRO(Jy9F<6%>EEqJJ=07%%*9X%Nu(f>P)dv$vMc0t*MX|X
zNYy(Oc9~VxQ^Bu}wx_^Roy|u!UZLawj-MNnG7ydn(bn3Cn7IT!ePh_XsT-Q1Va}X-
z7>#;JC#w6d3a3?qNE955QlfG|jL=Yml>DpAVkiaGa~KIBQJJ+603{g;MI~op8%r48
zkSZvO*fC1g@6`}k!c$TN3d>_CIfbdi*Z=B(BdbfFvi58s)TjNu1+=!MQQsWL$@Oh0
z7MsxDKY^~UVRUzoV$C^=s|%WLD+!mb_^GNfPyZbXkosKhxJsB+;ZnIFRZXlC*ifrT
z*f%0b$TLE1oKYpEoC+Y7Yzq?s;TM$@33$3DO5W&TxcpZP%_{&$PESASY}%G9Y$zCh
zhxx$0+x?dITE1{e9hzsQ(6O{Bl$`O2VtD5&-=ZWS#8oveDs2e?P>IXw1&5SJhW*vm
zJ(#f~)3+4bAyCE6)jQQBgKBq~{#<4D8KWwWR7$2Ml)gaRNFr9l=tz0{ro%V)Rcf`B
z)eFP%_l#Y?+H*&A6}jx&Gid+uf!+B1{kyS!`zU-bz^vvp41-l0DXFBY?xlKo4z&%1
zbbb0z_2pIdQhTnXW7^DCdDme-XH+coaMk-2el@>y=oJQ)#Ae7uH}1M;An$G8UA@99
ze=gz(dQeGtsTg0{(VD*ci9}*qZ9oItQ?U=#cq$!5Yiky*Z7FQsHi@Z8FLcF9w>aaf
z$AmJj+Jh-HrXkS~!C>zICdax2A<EEKRcr<nWs6kP)Qs;^09NsxejHLL;>kig7P7Q3
z3#LcQ#cp(tUpvo5Z}*Y5Y9C<-I}KxHiipt=z4-HWsdrv$L}x=%zaqe?l#Fw(gKLIR
zfXKt19an)Kn+7NZr_sQHu72cmJ<3u{=MfLTkwfBkD1A~*XNO)&wITW{7LZcLRSwH{
zCr~VJeqgln+Yh_);PBD(updQxKb^i2Kqrm0^@)qFsZGA^DjsQ27NSC_u2K?Qx%@Ej
z3)7t{^3}o@)pV+B22zb0`u6o<D%UH*CgkZkt2ONzOE+Cd3lsgS?4kfsmIWpW1Q%Wz
zj?+6@vbTP>;BNY*E&31q_4Z!1R@;{v)n@G(eKzTwmWIS7*Jo1a{sS{>l`@nV(<z~P
zSS4kQBa|qrz|p8-nn*Qi=-$<f!epONEf*mu%B+ZLJ6$+JBkif$vkxLUmE45yz;{Pb
zws-z8?`-^u73|*;He?>Qwxa=NW`<)h$n;XGi;1!Y^Xd~9U!P8_zC?@EgD_rEB$aWU
zGiE4&DCY)D1<q^@o!fg*oaz;lxR7BLQl$|U9}9#G%kfHuX_N?oAjreA_WmyKZ1~Tz
zw|iZHLgo4C&!cP1e*Rq@(?OoMFa=Uw{K9L}$#dSPN1DMj-PX7+m}YQDlQy*_P&=1n
z{ewNQ?H-|WKO#`=!>%8?caSJm9?CDmvOE7$bT{8rc6UDP%CX7kUvuWV$M$L9SLxY(
zddPODVbVEm+34H9m`T0)Dl;+%dL*I}TXw_Ttgy;sbf{|#u0J9~U~wsgUab;Zu-v}=
zWqZr_O76CMY%!poWst9yl)TV*mH)8;eI7^}smrE~v)-4Eo&L#KeBnYVP1sHWgj!JH
zjR=acoxUxWzwfr9v-NjY(AQtBZN7GZ96ny7|N20uIq}R*F&1SD7Du%OYdEV}B!pe?
y#puS0*SX#ngX*cQ*A0+2#v9{}@y5XGH2xn;k~o98`8(DC0000<MNUMnLSTZ?ve}~m

literal 7858
zcmV;j9!=qiP)<h;3K|Lk000e1NJLTq002h-002h_1^@s6Rj^tg0016&Nkl<Zc-rlp
zd5~S#UFSc)bMAdhzt{Vw)-KChY%7wtV4FB`9HThPkYR?%!xAP815<>h3Ifc)WKtoO
z3PnLN1%wHyOie+CrLYAPOfV$z7$O^-U|U{eS(5G6u9kZ5*ZtOe&-u+C_x0=dUcc9p
zfq!Odx~kPzcRlBOe*1ESxAtS;K9d}dDgT%J+;PXC$>%5Z*fBhO+W#}Z{)mN78UCO6
z`IJfKbL}6wj_U$=fZ>UI_N#D@z(GL{qADV$={5sKkj85bMoi;an(w22pVaT8exF%?
zA0kNo*ffS!zfYR(!;pMVFbH5#A+i!aD_-7o#E-x6#^)}sE%;Fn=syCSPnlH`9GbZ6
zut9%HMIICrqy+&LMAjy;dMvAhUA->#NoakN(hN+~am!?-F}=p~tAI9LPe5BghQ@W0
z?};RY;(b&A`wj5Fefso&eWHDy*9p!M3rAh==KaH=_Wq6$`+bN()g$0QR4}qOk>*Kt
zo@n#L)=y*=SlfC|q&qMzz;yz9Z6Qz;F(P8DHEC2mi1|Gz{KCnT|7{K)vG9<)4sa4+
zhBw{%c9rmtj0yIrcODTHi~*5#6K`3;ra^TYXcKicp6Log7ogwj_gJN1R8_o)ND$<V
zbMfn5D?fPp^lv=d2_RXojqt;pZo5+@__~N0M172ypz}bbW%Zf|)jIKZV4BV~O>}kQ
zEt70NSO1<d231<*owR|!evE6>rYe!O=}?sgukm|No%)sM+F4B6g>T>1n+F2d^PGs?
zl>lP{X`9&f1Ji!J8!%ni@R}6UPJwkf)%JY1g-|rMHXEpSXE1W-i4!csFDr<yzGao2
z4B!Ko{eqFO2^cy6WByrzF&M-o=L2gK#+A;%nEHKp?;hiZ;ojtnV%7`p#u&O#Xd>eR
z?`pBNnO%7O0({yZ;UUw^Mr(3r{Py=436H2cm#`9T!qaro64wJv`#?<t7!?v0QE;xV
ziW~3jOff(EBLf_M*GO`&ZM)t+25F|oI-AztDPjWWD$d&Mk(+P+%zKV<)E(gw+eSH{
z#{L{)w1wQ)v66J82-XSLW{T=0d<B!(A*8DV92oitAAi?R^JDiMBICd-*yc$fgjP@$
z#(cz~cl2=gJ%cD7?*wbQj8VF=X**RK73Y5r;3!7{s9V0D_oG{HyAch34G07yU}R0O
znd{RMEyCAqsFf06lx%4eci#R>?Ej71+4{b1{PYKQ@XotOIezR-=4y&H2G!(w#gK`V
zU-?*u8y`H(_MKUlPt5cDnQGmJ>cmQ&>?*TH@yR`cdc*|VMn)facxL8vbMPr+6M)Y7
zOn&?K7#n`CsCqEwEvwJwL1B_duLVqbgad~@!TWx540crc`)OroZ<^Z<ZRWlA9^m-n
z&vT{Zu*T3A1pMfG`}pL49OSMax{ui3j|Pj}|A9pg->CE~R(SbhVxiME-i|g<s}>Xm
z9|S!q<7+Qno&B2^?z`{Z*1$?4T2yWqL=ywAU0q98;oJE-9n^W9l{5h+UFl=rzF*+|
zzdpjD8y(M_w-ie7^=gKtMa$SNyZG<_<7c?3FT^Wkt#DwX%ASb@bm=8<e~Yd>4bOcO
zPF<qBtjRj7Tn8}g=LbdwQIEMDU}a@W4BX)BBJcnzvflE&9<9`B$EY`5w30=QVrnUF
z-28Fw`_*k6zQys!Q^Ir^d_{O>D&|p_Ct55rbkhJ|_~H*RkqVfuDnIdi5#Rj-6(+xW
z7E^hY)QivZTc67Fp)d6D@W~K0?N+nt0?c|<FNmnBh{yqe<Hr}gSu=9PtyiDsEomiV
zgp>q)@?YIX#)OD5Sk?rx3TQ0s?)?~deRd!3xijJq=7i((im5=Q0+j{fE9YbWIvAvO
z#k2LMUVi(t_mcI=_fD77{NiusFjs^pAItE$GkpYsv<UCc2BldKR)>W}jB8WnAYuf}
zH4Lt1t<(yPwKmZtM)}d7-_PNLqoCkdpEm~ej$QU6yzQ6nX8eH~zdvnwd|J^Zh>L=&
zKy?|4Q^Fr!i22&!7>kqR+_rx=zw)EECtjTxUYvn*-^}vWS91hbu_8D&(n_YyZdyBT
zo}XYqO~Wv@aEpNxn(N*EQ4zaKP(|tjxs77Fv6?XkMHtU!_{_%-visdfc-K2(_E6x>
zNo6tes4APH5AgPn9bxf(HJ+a{oLN$I5!^EPa`H=6aAhTm;M;*Gzq60QSF+qOIzp-%
z@${L?SZg_d*6`vLVI>wY?RJq_4@?K;A*~dnMp8yKK6`cM@h`zGCTR8^64LKZG3$k|
z!J33R##0&o=s)dY|A#HL+GF$=P7}_QDAzz$=`G#LJ>UOPX77nPcM)7l(JDv@w4_J{
zq$WsB>jt5)VwFFzF^hK(@y<Wb^5ZxEYu=o6{KdtSJbA%2#%GPeIk|QuAYqZt2C7m&
zzZM5;qMThH6=QcL!xGb3D|HaQ^%baj<r~k;a{0+A?mu*%qn}&mXTDlt#l?ihP2B&$
zFH!q0;q?U%2(F@NS<s3=O`ry*3{nB>5^Gr_h#XAjJc~Dl*l(qHzd6WLQ?Ih<N)1;+
z)o|ptkSj|<IR+!$oYqcGaO3}KY|4N;du94-UxHiAnuTmu`EDccx|6Sz{EdKfW%%NY
zmM?#?kFT8y6Dz$I^7j2dPVVkBZ=7+MB|&F_1;H<YFDbsFPytf|Qw39jpaMZv2o{Cf
zd3e?-PyLYRc?tR6@rMWzRAD3yKm1*3KKVNj@}c|EgrZ4+tD`w$Hspvk8PqP2TjD9#
zR@a@JNQ1!|;lDh#!nZDatORUHzlVX__wve_8nvqiIWL$O1$kAF3TOqWfK(HzF%`i?
zLV8h1y>7{#H}uX5G6lNTviOi=s<?w4<^Uk%tn#6ERFL%Z{NQ&iu(#KtUJ!FV6w|8q
zr45{*C7Ppc_P~Zt<l6rY77>f0c!d>W#3k(0-#^O2j3SjReI+Q*L202#a41FUMxj<#
zY)!Eh!BzxQg)jql*>dr37tmTveqw;^&XA|}d-msI-v9Q13&;DIoU@!STYmP}t9<&~
z$NBgpV=UPWViF%ru4DYG3!AtoW-ZFt3XVm@plDZhE%jizkwk-eP44x8s82rR9izEk
zMstIV=0?af&C03c)aHf7;sVR@BpD8oGj}51<Es!>5-PG)FcE|yq_U1;(GXTsET4KA
z_hydXr+1OrnMH0o&l|NDLBJZzbS=ln|5p!7VWOFIRk(Ig*G)2}jiQ>LX#>Zs+5wFh
zn~uS2sq?y`ppY?H#(OuhZD2b)hITUAJ3&u+6lH``In7G7Mi^Y>`Kw=~l%Gy)qH07g
za~D<T2&#slLP9-}A`U_oGQE)L?`2yUabe-lS)@uN!#sI0&BL!<B22H!NJ|x{$*OR!
zv$(a%SONT+Rovb3r#}BKY_%>}w9Z#DfHIWX#{O-$v2}1i<9$2G2IIJzP^!Z8G8E?(
z#S=#{QLKc)c5d78F}`*2H}F9jZ)3s?cnq$r1XT!Xf^~{|2rXm=AnbvgHdiUs3^OIe
ziY`J$IlSY29N4rS6D$#%1?H+VTq!Pbd8xq6a)n|H>TNyevPv<uxe>I0rA;XxfFrHo
zn9d$|onnkwRFxrnD?j~_Pf}YF3Jb8jqRdttQS5L|QT3=Xn7|NZ3~>d@agiXsg&p~S
z$z=JD(J&(D1t$>35LT1FQqLlVA%p{v?t!~*FY)Rnm?;U_IM3aiKf<P=ofIO+Sg&QG
z2j12Ly*b6CmnbpKQf-#0`B~0P&vE+lJa1enqc($VWV<OXECxr`z*(~<{RUbIv^2!I
zGci5Zv$CWK$=35!v2!>VC$^7Ik?9vwp`|jPq862y7`~tBb1zU0mXLlhp%6q$%0cKA
z@yYALEM$g-(J?r<r$WU$q?Y5r*uO)A2`(*_85;|ki)&0>giHvzl%*%zOJC0b!~J`?
zb2Hq#8%DNAJo?oq_^rQrkswU156G_y<oa=Q^sm)I7HI^Q+JR9NL0IHDo;r4b?>c-B
z=`f^Ra<~|3wTMcsidTnXG0tFnQuOVDC~aB12o7cE$oDh3@F)ya>FEtA38Xz(O<3NC
zkm-k@A9hR_daXxG{p`qn51QJ{V!6V|wvcdKm^*9G8dPJ5yr=A-Sar;=fLNs`2*^zt
zzI8mP=QTS6lf-{$64-5a4jm(Str0cBBAE(j7yq1Ro;ii2J+Tw2HAkfuQHvrfm56es
zM!6PIm{VeJ+516ZV4p?u5kBlClRlV$(+}wsgeH+QVG7bcLTW_l9e}|Jm@B237<`ES
z;k{HeBHWy!?^b1Y&NH{*D3oIgC1r6%SXvR5N`^woP^np57XIvSUg7V~JwuSnki;}h
zo9)x&WNULOy9J!pfHPfVzIE>%?VIM?lSg^+#2LbrA&MY&G2Vkp3TyKOK@LLU!mCA=
z7GlQkx15<TaB}hli{&ysLjipQ(36Ku2GVIrXCN~InNjHLSK=X<bA4Pb&TwJ*4AHP>
z%Xb?h4Oo~8h)Ge6gkm*jxe~Kdbrh?fV#T9@@QveVdG5_8$c|>~t^{3T%+2nGUC&mH
zAdq$rZLYpl>!ESiH_3~qAEsP+Kcl&w6iQX9&f%m;tV>j)0+m`!HR@$@W)JW9_&8hM
z(Z|a4UTk`fzJ6u258{Eked9qgf{sA%fYP6btAmc&r4;kE0$0jH->sXtyzDvsm5YR>
zd2&IXd}^59R3A1>CRMILZa{fy@*>}S^(&;uJwn(RcPlHkX)kHbaR#lq&rVr{4t|On
zjD<?>Wn#8+=k4QEqcW#2o#3@IuW){9fl_&ZFxX9Ret>WpPCn+?_d|xcbA1%ghYa@z
zjP!bn14#fZ@CqqK2cR!+$cGU3!%{&oxqa+>$0%FwNb$nw%Ph~&;H#&It5dkR3@%MJ
z7-PKu1`h4Lfm2tnaO{OA7~BR(rVfm308A2%SUa~)Ae%0vwmxuVjo?vkn)o1hz3ro1
zDJwl`<&HzUx&Ph=anUTZb60rd><XvPIIb2doH-8mX3MS*!-YRfGn9jo927<b2M`OS
z6zPY)jM8Jkr(s16{d>mQ{vpHpZ@|(ePkBYDE*nyTGCEjh_ofPm_J<tWKhG_@2C>-@
ze(iq_^AE4BV2#0hHejW-a7I_(%Fv#S@0Ows@OU<7@8-a^ALh!X2ooxy6{apKVJ2j-
ze=D0Ow(`Nl@NdEbE5#ybrlxsyCQWp6ilKLA$Yle1dtrFkQ;HHDE-AtED18R9MhJQg
z)eMZk56-_HbNQPUHVw?M@1Sz~ft~ENH!>9Vlg*7#i~1;6Eay)^e^&X-hku0s{KtR5
z@iz-id3Dn@lu9E3Y`R&<rcn&kIdEhF&yc;DTekcJ^YdlADz;{Ep^(i8TJ<bUI~He!
z)2D^Ofjrx{_HpaphzIgDuoV{e6!BMuIL^@1n;{>jsLgr2g`m%p&4bq%SF9pg$J@N;
z!NHhYKLa=J8m6aj8;Ir7DfrXhh2o0Gs3$EE`4r?rWo0_#6Yu{pKl3Ml$c4GM?ikZG
z#@x7OI<b{mb=qu$^qS4>1bwB)k8@!APf;qD@HkL|cQMWxTx?0Fg)kIC1!_>3alE$Z
zn0!MR7|619Jjbr_n6XNQo=SyHD=Yl(lM$nLZX)G{!np$eyrX9kK6u44ysw7?-<bwy
znOinYUVtmpj)jE?3BYBbbP4i#L9F0Ccs0xvVtOXCeB!+y<mdnN%dEt915wfBTXho1
z8zuc4o~}!=f9%KbCQTf#)F~<PN}Ts-46!q$QigO&Nd*vE!PgX=GGFr)mpm8F!@zKs
zx9!XGmw)sGFHM)ZZ+?Xf->&h|!#A)rpXdBs!1;n<?j_}Y23D%d(o#em3Em~YCJ=HH
z%9YceQcdtdl56)4#0lqSB6i7E{{5Zz^4ov^6cW^JoeuRs+7K?bvxS`8=-UuojjJkS
z={p!6x{;;jrMlPK#G;x+6IGRJEy-WUfsjroMqaZg@2ZgR5BU8*e1=CJf0FO}55GvR
zH{{{J{5*p_Ir2k$Ir&Bec!~u${*<!)pdqRyqf!*_A+9R6Pax|kRTQ5x#0Fdp-YGqS
zaQb4zzKPq|mO07AXr&&OVZEQF>jkoD)mE%m;Y~bRsjQ$*>Fvvr3eyQ6tKj`wxMS5v
zaVpdzsFa}+3AGra2&z>unUL2fukw|@dzgXoQOb*H9{c({Rda>EeDVn>gN+jvFCtu;
zgjz*$9%2V^OmZA2nf=tDQY=>~RcjQhj$#BWaX>)>X0bf}dV#5h0$|pHV6;UC8=9<(
zZ-p2{wF6%!nZzYd@U2&Vi!H<VGBmuKOeTj&NE9h?6ysIvg>h?djTIzb)dq?LmSR-l
z@h2Z;SuQY=J&ac+Do5mUL!6#^h7)gmfWE#R%q~TUHOyaCmggbN8ER1y)=*6<F=D6W
zM=Vz-9cn|IF%*1->BS;*h09!>e}lQwCDNlIfdq91GMxo-S39T4JMCOV01{eC;cJ{+
zI7xbT3w^;23=ZyPpno&@+!#hu#4)IMpq?aqT~E`a#2$JwhT|`Mle3FoC*QY~Y-R{V
zh+Rxz^7x>@v#))f`|tj-B+95ttpYO_9h>(V;)sTmSg%>4XT(s73(Q@;%6#D*%ga+#
zr3e{M*pnvL-?wooU6b3?QI$8GF#HD96&4XC$O)b+%*N+gx_pZC)E2^YmeJw84EFCJ
zpC7@RFj-plfXBs3emKR2i*NGEn_osU5j~k32*Ny0A@&Xk$Yh2&H}@o$uN-Eee<w@J
zRlHYbr#zeYgAJ3>I0sQ#DbEEg%q?*I)bCQREijtv<K7(uJYDU_NZ90HYWFm;B(jq3
z0rn0lmoC*42|WY^p`pKbgp}^&QsFt~mQN9y9{O|J7#iHo$nXyO`^N}_6vJasSf1y(
z7ayf$U#B;{mrQCCHt0cD<+(|bvZGYOle~E9FL>A6f0A4-P1VB6!V1NLqq1VD6_uz0
zK31%SI4UDyiQd#0cWmFy1NVh|^RMS1sB76~XIf-k%BflIG}!7$i-k-bLDMm_*&02o
z8=Gnolcqm=1En~o;%10+mYLFPOfSDecp*n$&o+hzb}}%X<ITzEn5jKYIy*upwUtbI
zoFK^HG|6&WNfVfUvgu7sm%hb6yfnzf*iFnXo}<b|#&7%)jL!iMV+5Nvgdt=I>Cf(B
zC>-EBw~vxb&!P27cq4SFdv3FqWi`%hHlUnql(w}vYbb#=1gRXGw(g)>9%pWDj<j7O
zmPKmuEVI><%v}C9?pzHGi==x7Nr#)rrnizw4}*j#f^!Ol1g4MB4B@je7YdJYe&MS`
zZkfT+QH&LAU`VG@ps-S0CW@7TOqQ(!+u72SC1tZL%`GBgn<B-X3c{r=hAbPgm1#Aj
zTV6t!7boY{8}7J!D-)Z0Iq~foCSRXrW_p2|DWaKWBELZFS5S>H#*z*O$%dN=!#>2;
zvl-qaVzH)|P)AS%lg*-9#YQ>uJzL55=UG}PbK>RW?AvpYr=I>Yv(pzjxci;t(*rmh
zg>nir6EyjPbP&GM68!|JmuzihA&Y5EVO+D$7rgpLc(qU{^R`<zap<;9oISJ1n{Ui>
z`C@@erHt4L&Q(#AR4PX{JAs&VlK)yAg9#9mBMdxZ0#bem8)WcK!IhYuzslb~`B$7d
z^E@YBeFo8xf$UCJ7Rv;gEH#AXYKqEAs!lnk5sK+pz}=F^qETbiQI&UkN!QHhY79gb
zuO4Fz7pLZV{`e$YwhnW{?lE@l9$<dH#49h&ac;6ikV~vnYeQ_1t}ld5j7J5LAjxxE
zLm2k0Wj$~d%V&A?&wdXf#g_5A2_!={)kh{sW33@lsHw1A&9GR`AlMFCiH^WDs!LYK
z)19r>GMinC2$~E=t!FE|^W3;=oK2$xT$x_rsV7e|v3ZC?hqkcyCgt4O3SvTx7>w9N
zn2TwUxc9CB28|Whq=r<4TxJV`5(YT}6JqOQjJ;xj8iIIbB@S4Mx)d*UEI4n|Ufr?}
z?Jh&d-UZfN1rVHfxH!=suf2AOayer64P$KIIzp`$6Gu?1Dq?LTjV#u*B-I*4+N-8Q
zeIlY-@1Jr6CZ9Zy;5EsISh0zf?6skN%CV&!xq88HJ)0t(luKJ`Mw>zEU<8T?D(0Hi
z361_K1Cf@A;u>-6`Hs78;PuyMc>Rqj6d2z$L|<RF;nlBN-=e~*pCKkGZd&!pR95S2
z>i%Gz-L#$@QcZI8UIBHe*wt1A5TO_a6l)O@)cYHxlOpMmnrXzdI;nC)2U6=49judP
zU2s*I$N6Pme!hY+%I+IR*}Hd?%a;nAJarjsm3+@YePt4Y)791skwy?sy*BFFz4sts
zP^bfuv<oUm4C;kdU)QfLltS!0HlL$htkiRD8vsK)FwGQp4YulD?zR>b5|WJE%+fIi
z+<W-iW3Mqfk!R2Tac<l_!n@zSAFpukY!OHVx2Po94-x7)*!t_Vp55?ub3z+`QEg1r
z*C95EWCx$fBz2Gt22c}I@Ux_3pzbkrkumLdj?ii$ugiG02;_~LESgrqSfc!S7D|6h
zK7A)wE-!O=s=zBRU1sO55%%sKrBsPgNf<-bW7bHgF1{31*JSD|UbX&(hA>Ki@oN<0
zT~fuBIJruxT;<s-57WD4utOG8Ht5HyvwAmyY%p@oo~kav=^)JFd#6|`{xvDTk8Ex?
zg+hfFUbxJulk<eBEY{figcAyK&SL`_G~&H)fI@>lz^Sg;U>-y~icQ|*71U9SYSgMz
zs4SA77{-`XXArsp(`+G&m382#NKM3`YOc|iL+5mjwa_P2YcEqPog*c?$>w$wIfvFN
zSewR}FrlDCI#aLe#nzqX1{*<At<l`L>s?*&to9yx;@TqK&0tfWbbppieh1P`UAMPN
zw#{j^IaiQc1DreV7&OO^;|%hGh<z^_sfcWx=h?u9NTu?SR-($w#4G0s&2A*O3nd~6
z-3RrWVXb!%*TbImhAXX8j@LM0m(^c<(wh}kh~lf*Fec2U$m9mFHeauhNGj8$;Xrl(
zp_~5*Y9z!<^#y>*$psVS^Akyo&dBMy4KJNp$-JdH-!PMhjH6b0k=pVkq3k4^+k;6d
zMh(u#fW@XDlNY?BE_Y(QkAOG{nqk1zh~gQ7ASRU!$n^9iep#E4)p{;}LnpdR=CjW6
zD4Yh!=lAMr!?*6(@e`ZU>GUbV^sb3{(>*189d*7&OoNx>@(OXehm>q5*SnuElgCJw
zE&E3By3EPvCaJ}jQC9`^h$>MujWJb%jFRf<A(b9j`<~VVp2l<ttC(xbnAVU5Dg+1=
zmC~ML&;E-mB+k)V8{?imKl@jK&A#8eszZzw*{Ex`bN5N7;zYBmb3~|BmT{#JtDDGV
zwiBcVDHdlzi+Eoqs!b!dMv(G^Jt@-J!L?G@dXc7))>4_)@6m;-+eJkacPMcf_6JeC
z{3lO7`@r`fIr4}-dh{XJlJPXg{F>q)L<}1PbN!X!&B1F_NM#0)jNtqXmGWg=p&nop
zk4+hRdQ+sb!>!*-%;tLb$86|bUz=iNU9-N5pz81{U+B_To>0%eeLwf5!1n&zI4(y<
zOnA+Ti|efOT|fA1^p$H9=v@`STVbV6yBHX}`Z$vs32M>&=Z`)6z)!AHO&d5W@XNA)
ze{~R*XN?JWc~^_YH20Nva6mg+)uuB=wSl2Y({wAFiZo(Iox1E=CbtpWbQ*)u(j~0w
z<1p+CysN(Av+g^`#%9V#j~?+I`pT0NCr|$BoDx5T>Vgfj0ZQDxt;n=df@zslXJA%K
z%}k^AS;VY4qKz!a`qrTJz;r2N>j+G1Kh`QR>ivRq{s)g8yMN{8n~&(47u(i4oiv?4
zVo#m=_2*(AJ&4!WgCG|qZsF<%AJ-dW-XJb5o#H6hICtI8(9suM)k-L_f={Q01NHue
z*sVP9<nedEa^%P(_S2shf6ZM`j_`;*%0q7d{$CspB>OvJQs0+&%QX~rk~E7-!)p|?
z=9{cKdfIu@j<xG=Wz&vst&|-$0BDmd_3N7SA_g|Fc|0+q`nigo`NY#tf6sEWoO#Rp
z=Nvfj*~2(~3gJO(v+0B^n_73+NN~0#2-|?^EbPsOyP0&~?W8l<MnX`<xk>>OJc{>U
z`o^>GdII26sQEPF{}DScB|^Fhr2UrEJ?c3q;tzUNsV96B*R>@k)KoRqWbd^4W^KDH
z8EM*G$*xs@cG$Hk35L@oV`u{oNYXQrNak51`leU+__1g1zX*^}%bM{0|9f`TK{;~d
zk$;vwyVkMVefK2`d+gYW>qh)Y)4%_;nf>D)o19!Q`TSlzcI+E(X}7ok19q)ztxqfT
Q)&Kwi07*qoM6N<$f}V6cF#rGn

diff --git a/apps/desktop/src-tauri/icons/Square89x89Logo.png b/apps/desktop/src-tauri/icons/Square89x89Logo.png
index c1641b858700f8af1c63122a21730cc4f81fede6..0f29e78c6840f85f2a6f19aa1c217ade4c91ae7c 100644
GIT binary patch
literal 11928
zcmV;JE@#n+P)<h;3K|Lk000e1NJLTq003D4003DC1^@s6RSSr(001suNkl<Zc%1Eh
z37A|}nf80mx%bwsy?XC-I!R~ggoGrJ0EVzA0TGC!;Lf-!BRZqbpyMq5KjSi^qci{D
zhBAl<433IB3doMKg(ZQIkc4dANqXPAYrpF`|MQ(&MSxih&@r=cc#29@ZdKj;-tT<N
z`@QD`cxAjYUKy{9SH>&jB@I@4yo67(=yPv6`JI=pUv$<w`ZH(zrJctA#KG`<Fa+md
zF9PiPu?B2o=dZ3&-~P<!Zl$;Cz#r{l;J*RD3bOXf6o4;7DOKGPrINq<I|xjra9pZm
z{*slhEXp~j7%E|etP;=-P|#m@)CT|W0B}=m?c#H~zJ1dtPy6kGYu<d*Q}15){y(<S
zU=zTc|L#kmLkPw<ownoy*1RM?{-mbXHFH*+pj0#~{?`r$p`W`_Z-2)nr%$L)d|j!p
zZ&GUDj*3!yHml!$=f>$Z4a*nPF@i_OzHrbD;5>2(T}D^y!JmE1_x(GoVR(!Gv(JC#
zX^!}_A3Tzq^*<8eMd|l_;Qgmp)gRyB<o|ZETK(98s(V9k;LhyWUkt;&{^;Y6tBbl%
zJ(Z3X;@=0F#_DAEf=B+}hx)?m*L>HTa$WcCs;YcXefP3IziW}Tpbh_PEjWGg+upyv
zs{ZI&Cx3g@^}jXgxo>;iaX-7y^LwU3zjSb)>v@H8b<ckF-qokQ=7j+<F5>*$6{nth
z<%ci1ZtS5iDkZN|uGi!Ge(3w&A>VbbsVaGc>VNnf>V{8W`ir-pyy0yovyX~7|9-;j
zivU<5#GLpAXTNUsP4~txu}g1$7wlGp;~#pY49Y-)1Lw{+_*-lrL3v2V8ao5tKa}{u
zg>O6KdpkBiYzhN@7~sUl6-yuZm-p>SpHqR)WF_$DaWlTc02TwPAF_H6FtOjUT%N*s
z2KW8S#D!nIAz6~6mDvu4M-Ak9dZZ}2ya<3>?9)#?Z^bXRTJOu2Hojlk=cEL#7*p6X
zBBkXpSYW&<4ZOEYV7+p<<BdrpJ=c@_4<z392X9$@OYe@S4f4^7VNLV=u8Y@oedyiq
zocn)T*K>G@R*&aaaarmC@7)&gt#SLNU-BK-KYHM=ADY~KuY)P)s9=HrLRm!GT+#Kq
zCAS`EcyDLr^h>4j=A7WSmVh6ONCbIERR%W|Loxw$HY<F1zJabnk%zKh8o7mDY5VrX
z8(;syr4Nnn-baB<$|${CneJ@4;j<f`So0Rl36g2a$A@Kjudpw>y72j{cir>1K>2s)
zfiGjsx)0(t3trQ?s_O%1yz8%jSJGbxIBv{sJhSs(o=#sh-&^^9X`G)E{DG>%Ez?qZ
z4y5k^LBQa;K&1=}%|PBb8epm+E#c2WII`VHpU~jkaQzo|EKMzJCx8uZzz`feiUZ^C
z`rI8S4?L9ybH)R4fLUL;DY)h8UAKLX02b`U6*n&$liB`4R!f=AIr+HP{lnj1_@#tO
zS%k4*|6cSb-zOn>Dz>imyHB=Xa8hFNrGY%FRq*>O3O|@sa<T|`6(Dp08357;+!9bJ
zFzlOxymlf$sl5SCrJINQMzHXlHh%p-{@<NVqAeZB0A$Pr^qx}R*bP4z_@*fu6MfrK
z{99X|{1_1Ef+ke*s1_u%3i5NU;gn^K7dEbod+%I#`n#w=3sv}Uj*dzM!Pho_<Mt(I
zpSPglL$0&1lN)!;06!d8a-sluWpG&mS1#kqjld2ZpgIFMGr+cS$m?c8lovK)rf|Fw
zJmv?dy?$xq)t|il2@@HM3Kpf9o=vwr+Vii$fa%=#RC)8Dcc7nc{*hFS|D`}CYY0P$
z^E!@SxAA>zHcGZK_{VGBa^1(zx#;6_6J5<Fx7p#_5&iUW*}u7R<+=}SNW9l8RhqeV
z=KyfexI&=>I3>U@K}rXbz@>-s0O<i<NufLexHG_}5hcH02~k?zgptx}!+%0l-ul*4
zy1#t!<-Z1EJOWzb>A^$0c0Sx{Ke)ei8{jE&62FfzE5A~=$u!TH7oU0N#b5Y`*WTE4
z@_J9IQ#fZgOEJFPs%|lH*%zMv#x;-q=+7wn2QtKh<Oe@;*1GTfbJHIOrNQ~Irv-y+
z05T*%l|%(xRw0=mflJTy;32>iz)XN=7*Dh-$s2()Iv77+3M7A3#C&hSu^M^mqgQ<I
zTUTxR(#N7esIa8rq!Y#}{d)`UX!Y=!M-`uv>ZrJlSpb=)qJmNu|K7(wHu>($7vvBh
zf#<~?q&p3MXlpQY%Z&Y%pXRT+Vf(hvj#T?6l#*zUZ8+_$mA`m+(TC%u{)MoILWUrv
zWJo-N2d;cb;V~{9C6%kd0)P>n;{zfDM+nIbfX5l<StVobfXV@{?qqyjS)l#<4!Zqm
zN7^d&#;^X(hwnag!!`dAp+v6aNK?(1hS02i5ywd#-AmWCXHLK9jF!t@`>ux7err&1
z?nx!ye)<0Q-Z6Ur_v*(cjm7O}b>BI>>OJ!-W6Pznugtm1DH#|*NR}iSM-5Q;3LxvP
zS+NE=V4!G4AR|WQ9l&#dH3v{x#$Pp;;kaRr<=6XI>V(dalTV$0<J;F9EIss;U<Rb3
zUr~|M;tZjbIDhHc8#WJaeQ>HgO}BGaEqc~`GGz%{hW70J){~pBfBiS^U-RuN%Rgm>
zIRDYF%a7hM`q202VmK2pSkhYCcGaWDZ|w3aodNIdXPgH>m<Lb<M-h-^NK_T1_Q6bp
ztO#HafCH%<B~g3LT!2vtQDQupV4RnLCq@-EcZ7KG%>tXIg<*xwmCH}N@-d6GBtsQE
zYg;;oNQvXp^IE@u?Fa8$+|<^tjsjW4XFEqWg@A{${LD|cTv~W+j=kx?#J`Yza?n%_
z(Vh8=Z=876>lTP^-`mqGxT->`0)QF)kSH($8?p+Jn~)woB9IXRTmp1cxEEPBcL3os
z2#0|cfp8L%mzC@t2Zm1o`rgTnhXz7)x14CbanWC0L+4pf+dHyz5^p$h-MSmE`sjn1
z^{bsrE<Eio=>~){oYjyxs~}6I;D@31abwQF^d<ka{cj#T*moP9I0d=}WBmzhSO58k
z<HviYUHh5kmH|b;Oeu*;Kn((Xf^k#;?Te#;C&?efQxYzuwq8na31}a%6@%@9$32C(
zr(~?E!14euL(WVCi_d15K9gHp`@Pa>T_1dBQ*7me$S*UTxAc_1_~lg>JbLoQtxJNi
zh)XZ;{P<me`QfMA?Dmu{qGk!|qtY3v2a%ii-u4B0X4FelKzH-SpE0`<!OlUCm#Q4n
zqymF+3TT$g5tINg5yCu!!6zK(;n%H~ac#Li(?Jjt+@!!a22}eQ43ooXR)}>1Vm@H1
z5TgtjY+}fq&9Ln@DYMm_T+;BG3noW)TuoKp^_y?~{NOtd-Ff5JSKZy*b)WT{YYKaR
zx!wJ?r@VkJVYaOKD1aO#{`8;V3=&f3&NP}bi7+L(vA-XI%~>D<B~exg3d)!%%pl~<
zu)DLcptz)n@2SX5_)2o0aZv-9+y&h<BL=WgpgdkezBdokFt{1Ff>_Q9;&TlnxlrK7
zCh#s6;KDU!E(;C8qhnT%&LuJfiM#r@J$lEj-FK{NO#Q+6S3kVk!=ziklGzG=FB9Yl
zOwCPD^+X9SotlbHPruYdu&kA_hGy>H({bQb9A_<)zGo&Tr+iH2Cy;jr!8nJo7X>O*
z5Ud8I&M*|Xr=KPB8K)eX9`t)A-N-ahoDASO0?HJ0tR0qt>WF~*6q9C*c}<JCT)ZmF
z*@9kc`^^vBLT5y07<H=^uDz%4iXc!|5Wo~ud~Fo7mt7by9aN=RE}g!s!{;QBFxoS7
zGK*Rk%<Jx0wst}5lGB=#3tp9scOK{YobNkyDA>CHalUi-$<KOfdbh9o_qgi7p%`yj
zcw+8nTcnW=Ocrv-gVZh}3UC}g`DP^vV4>*e7&jSU*b-(UE@dJvTQf0Zdh)uvr;0o8
zY)Y>@FJ~`b-=12SlI0kF@<cy=zV!?58J>A!CuI*2XB?gPLw%1wTE9AqDYHF}7-aIR
zR75-<RL;_7M`~W<vPDZfPFTNe?&@<F%~^UzHr3fGSOcnl5;GNsiGoDWgdg}JkVuK(
zq~&AQ!Q$<^ho^q}<NEiz;lNXYJTPTj3!AwLJQ1>5Zd~)lWWhc-myp{2xRQc19!oGO
zYyr~>yp9%b4~^XSo&A$P{K@`FTp<uQ6IMsg6qY?z-8&3~G(VoDKwmiM+H@O>ZlbEs
zNcH;znE)oN)5emfuJ$#nmn~Soaarfu^X4`$S(z}~5rzV#Dlk?8_KpTl)s+FI146*y
zO7T!CPT9v;(J=&X^fs)#`bX1`4eptAAKAv3LEq1$s7x6anhinL%E)@beI*6?<B(j1
zipuGz!w(94W?FGG&LnKc7qlrH>@|%ZCUg}V%Bo-VddBI*J5%es&tLJr&&<g+%yZ@V
z&}5}==WyZRQ+*Q$_6<)Dj!e3fCBT*8zhlYI1)i?q#k!Is06D7fJ9Do)^TKmJ`OT#Z
zPg-q@W`sUatpKC>(5se1&vQK;i#TJPo=pKm(X`|dAXK@@P=WyU1BaVds&Z=gm+!fA
z$D8H_N_Qkw$STujT&pXjkW^X|zzP)bgjABUj5^57po{_#Nx({g(}z|qb@0qSPpShU
zI1w8<J+Z{;^FICM*RQ$kQw^ycVrGa;LZC4XWKu4;nMcJR#Z+~u|IoyqO}htnKio5X
z;K|;>1N#TYho&kh`u`UA!<@&<2DwhC$FOYPThG1WfejnyV8<hVWwPqXz#+>7XJlcD
zS*9U4#fu=IyDjw{*Kvh&Xe!xc2t$rAq;E8M*(;;9`LyO09e@3u?L&Y09)d3v)q;@%
zxDkOVD0K@NOkIR9&=2bKqHC1kh6R{OfZISS4xG5EgkRhnoqH&KFvN`wi>~<j`r|(G
zhH<AfGf~akiI{;@l_Oq4U@I=;Ru<WKqt%dEHLq*QdGFY`HhhPXD8s`fCX0iGgTp;f
zJkzuD?(O?_JhXk^o@aUry_C_bS+wLRQ_RIytQ$NCr)O`)34M`(jPlaZC!UzV0}nzV
zkP=}KYLNA55K;z%AghZ(hMe=DsHAosFs-UzE*v-iL+>8VKXBt{`PRFY5%@?%XT<?Y
zKG+N(4H=O_Ohp!?=?6neBf)q)3y3(w+?EiFyUGXxLthg^%s74i*Y8@n@RAK9#eBgO
zW-4Y{fW@`-S3Swy0H{cy=m!`p1&$bjv`iKxESslOojjB7N}V|8j18||h7D%A0-2h`
zZMWR{z@L8e@{J`mTBh?k5}*B_f?StJmE=?R_Ydr}n|B{4moMtz69c+bfDD;7E~yw~
z7|I|BxE}=ibJ0%=FiC9@1F<yYi4+hr!Mzzqb}K^#i<@?3RoCC$I==Jarcf02^9*1n
z6by@|k#-X>mD0hE`YvFQnpz-NkpLo)IhM`wVcQI@A5ekL*3bXuT}u~yaKl8UP%yb+
zGj1XlXRw<9#|7LX*#HCi|G3GyXDXP6;sIwy=qX+)Dmh+sJ!2Ts5?pd-V9|<ZZ&~}>
zU)`PF^pUOk>#sOc_U?CBGBH&gW&gnVVDZLJ8=F7&rEJ!!H0GME{J1ZfV!A>NeF;AZ
z5d^;UWx(m~Ml)MM5LT{`uE%(04!|3L;2_tX4aE%ZdOn&OPqez5KJx=2*mxR<r8u|9
zS~&p>81?Ea5_M{7n8z8+G$3psk(TH*I7iinRLLdXxzB&4d*L5#DEh?`W3dFdfR$uO
z&8O5`$-*!+`9%4+!2v%2?0|70AWaj98BCf!U>J-W2Dl?7av6(n-dmKn+`I?lLH{;=
zb!wIZUo;&U21+;mV?r!{^J9;kebR>4#62UH;MH<~AY?oU7080UFhmfB2sQbwJE$O*
zi!cdiIIL!%?Ib{DfU#$|CUlIrZ9s-z_x$(0VL0|M!lVqWB;%&7B%K|BK#`P;mvJQ_
z7-unXo?)<3K+FajTPW3wS;f*!(3-vIYxcr(QF5z}gkcNv9tj}16fhfr>1TjynVdEi
zJro_d_W9JLwG6-u0p9>(CJ?zPg`{Qhsh}L(de^?p{)sy`4VCY|_r=hmN041aAS?Lt
zQ0dC^tci}XO^+IK{Yk61EOH+B5h>)$2w?KdGEkCyHQ5|vAqX3KSr`#$c7f&RNbn^1
z;5Lb=foV*Sjr08YsAnw}RKamO3B(eBvKWM^APDGsgfJC&f`MfLI|Ep8AemDr<pl~s
z3?jBLKtcp&(lp4@locYmj3IZt!qiqNr^f*mfQvv%L1~^KcPDh52o>X|{*b;0(hR_3
z7Kdz*^7h~EMeo2iXK&%^3#2Bwk37RTLKaT5tZ>5N=|hFDpE}Urli0Fjr)R|ld@s}>
z2SM$b09TTeB?}{ln4LmA5r>EgIMphix~q)QLkg)Cz)&T`!Qp8+Rmj8f8D~7sV;PA=
zT*+h_u;U7r1;i+eAgeaPtvG{~WgrHEEZMe!Sc5{z3Q_XYm?)27*T92D-_%~r@B-|m
z3=1{@p(l_ZGI<!9Jdl7RDey_SK?o-Z-~<Y8Kr<53^#RY1tlLZq-22#W@4%r0c5msM
zCpvPh5cMZ#DTRCfpjgLI@V7oOTD{>zs`p*ru?(xynOkm^@;){8VF;?cOfW7GDxbSS
z358N0ij^5u91ngdz+x?!^cLXskJ?yzu8HzQC!C3lWI+*@QRIoFL^ckDNuZnnICbKv
z@}r+O0FeTaQ7}@F@i^m23lJH|%7ntSq$=D%QRd-S#u3lu(6}sv{!xjZTMJ;*MZ~0q
zI8VaT$#o<XAtGN<73hajNeX7v?*q>?8+i1YUCuLm_NDrZ-#9n#?b!2tz4WYud>H6)
z=k{w&o;h*z(|sRxx<;M0#yLiz!ZB5>AYU0r*&Bi{C!pX#DFMMV5WES7Xwg2lH0<K(
zU&XNUT?}m}2|n~#PRbw&!?2J}E19)999uyp0p&y;5Utt}q=HcpNd}%!NX3}e#;FA3
zUV^e9Kp8n$*$k5Homg~U1F{PwwtY9mWZwwFQZJM{4g(?LRtlMTE7FNJWb8JiV>zm4
zI0eH%0ofF=Yp6Hav1e~;xP0TEj5`nB^HKnQ2_PRHLzSO>;?yN4{^7YBI#V4@SsAi2
zADJrgy$27;J%{?yKU~6ek%Orw#A9*9?IZ*@!6hf3h>;yYb{nu{BST?=0+9tXnU!hE
z0%AZV0mw8E_~63Rg@_J>)X!rHMd=tPHxlFIqXFLn%H;U%CKwGdw5)AF*J&a4-pVl3
z=Sfag8;kK!n4m1rsT{;qse~|~wo4pbHX>opLr2phEL+fqJ%dBR!&|pm4u9aYBb8tM
zGhQOVF9GCwXBt?$=u?09y0bo&8!5vZC~za4XhCyhmwfG6r{hftiJ&r$k?{fSIW&x&
zJtZ9IcQKRqNX&+`GLVc5^gR?J-3=@_7reKqWFlqrWSk)rXYk@ckc#M1=}?Bjxa3MQ
zav=%8j*&bTh|zpE6+#235Pg|!K)O}P?(;)F-V2OAMOj2h6}e8cC9@Dn6P2m~&!bu?
zL|bDO%NEUG?Qt=ja)OPe3ql~4!_9ZL;nQDv@GAXLofG5egB<;k#H!9ueEPNPzVufU
zlYzrjU>F9+WKm&iRLOk?xSil=YHUM$Ya7nn0K9Eu71h!V4)#rA>z*=p^^aq;1QZU%
z!G3FC^*eylC^+vA(O>~_4lOElQ?x<^x`RUfJ!ODXer(u)X+g%h;`CSaKV<@*1gvHQ
z-KSGtqh#O1hHlc9%OT2B9)d~<F)@v{w2$LgG~wjq7UP5^4OraSj%==poINT<3zZoI
zM$F)sy?aH_l#c!8L!bY^s{%DueW~u^h&wEd2`Cj}ar65w*?9W3*H)ac5c)D93=y$m
zBs5`=Wa&{(3r^`*EXk0~3A8nH%xeZ(Q!Y%igt3_tb__9WpN?T>Nepa$5?-%~H(m<N
zwSei-0EHo-N@`ArOi=q|uoz&FCATrOw<*{ra7Q2D?gv&Vfd?mma51p&c8Q5cJeV^j
zv?hjd{1O)@t+lXnMG^~r8**5n62viHvN1l%P^t=ql7UG@On`PnX|94-t+(xO|K|G-
zee%jbIty^f=e%eZj=dOw=ceEA`U}?o@K!%C3Sr<UqAHhb3pWjhSd7Y49iIts2*#+`
z;=%;17*%o#=?q6}gTVYoprgS>DqclCs9=}}*jF@=JI+RCZW2yBhRP)142N(_Qg<<Q
z#%?H02qoGX+ByW10=RPu7<pQvy&Pb7#e*95&^lSg+Qkejy9K%zB@k;!Kr>Z-B=`Eo
z)e`%5Qi&;b6M!o+4kcq;SA0mA3~3uYZAj;oQ|;8{KfB^zzxv}(y{E23dNDw=BVK_N
zUw6XBb-#QHs-YA}$JQi1{XI4D7^eYKaKxy95CpQ4oHI_`fCii^NtuOZF&?K%EeRyz
z3@tf^xlLr{9&$Mc)v$mWgcy~;0F`RZS=h`%emu}Z6eB5MWPva(krY0vqg6b)qk^V9
z$BHE;+Oq-+n_@^bQNBk$1fZ_?bUwsXA=22n9#9$s9{H)%=Swrt643%SdM1!<0VL^W
zn&24$XZcAib;(tq{PZt2ee=uD)jrPx$kEiWc}K&>lYTvxO0V$TYRTY+p#zC-;Sk>`
znWP?_7O-%}E$SRoS*p7ifDlac1jK#o*Gv&-qzN56rI3s>o=P&bWPrJC3~em|Qq2_<
zN(J2dqbf$aO`LN6B6vlKk-ljZ#)@cAKzjvfV>YrnV~C@=#KwvZ9PXq<zN|1=P{>z+
zQW+={xFlK(sK|(J@V>hh3gbX5rX&GOZjUV4Bx@FcZ8D@xdIoPv!f9IMq%QpXKRj=H
z->>gF(lvy?17yl12xF7Kdg%>Y7R|r-gmPut<A$NjRXu2$NftE=s6$QefxssF7o1bI
zW(cK8c*^?gAk!Ss7A_cwT8NwAlr3oMPARlD3v_izJb2SC{PgiBAngp+UpNPSyCwc$
z`9hp_assH>7@slGUoy}$DKU@-iUo<cz6VG&aEy&BIIf};5MjuOmesSI8npzpo#K3E
zk3#Qb3W)@CD~qg{+#P{zllv122|)!9Rj;9(-@v_bekk?UD>lxVarTcKX&~hPc~4Ja
zZuSjtT{Q1)YpPDZqyc{ZK~O}q)rbWpSdClP5?V<Y>3R%4m8c<fs!F6j_4<hUA|lBT
z6sn$*)MX)I_tZE8sjz<b{ULnqmY-uHF$W*|)LZbD(@(_skitLz<S`898*uBc7=FBs
z;ohAA_V-CtXC$gqz+?AI%;XgcdBCYcx}K6`xisO3$Rgf5R6wPoWV{vNF)FJSCt`@Q
z6E|R}dO+1xRO;(TnW#~hWB;%;+Qkxi>FJmMDzd7V$z4#Oqp`64qCc}@g1Y?{u{>mv
zy8Tmo)FK=wPLl$j?!O7fbw7-{`T?CVIQc;@VBD9)+L3huR0o8#Oo3Wifs%!il*zP#
zollJ8=l9%#e0&-?YZaau1b(^ALf^zRwjTN|esb$RB-0#0UI8VNbTRl9TH3?Vw+ARp
zMO14@Ei6ggUG!Q?R-<6SCAs(naUf*zfhM?IpSTQ3fOFzf=)B7wP;eBcs|sZYM&GDk
zSv~i{Qxg2R1$2!sT=)H=K(3Ecp_t)J2AOP9n!*C408!{sRzWqbhPLK;$oiuTk(8;{
z3UR3zynw7hX{!#U20OB5ZCR1En=zA5mkPM+o~;-RA3@UYf@vC*#^H$vrV)Ci$I9dW
z#~(p8PyIr=aa6D<83u}e2E{zX*dWE?$p2D&3TqGY7q!<ipwB2E*+l0S!XuK%58(L{
zUZ~)N5=Bp<;LtP8E|a@4BN%3(cmMuDNG)7^nZ-!m-yE3u*FVkeSbbk(+dM1NkSWEC
zxDk4mLF^mp+sH~Hvp$^EL<IX`C7G%{6Z=KyrV}7aKm?P40;l(AU5A<SasO|3;n4Jb
z2n>n1HBYaLrcOq+LM#!3VI^>2Vly^x-GHw7^Dr~xOG)xq>TVOw69NPK70-1<)uL|P
zC~{R1z!7a5@#Ms~rP>9T+Z_!ooo^^POeLVGn-ddM?FS|11Vg2gF+G^KhX=>)orBk1
z@2LHU>T6zJGRXB0&-j~uvt{7pr_Pyv>$T09Q&#30<|3I*1*t^FNr<H7d4hX%wmv~f
zc`T*05x~@^L%pF9(bAm$M;A+CGaXln*!LwejRv;w+>4%rn~`U`kg`_7GBYqtBeM38
zIB5!^4Je46cw)yRXm6hbGsbzvRXU@hILtYdV}lBwL#=I&Adn!n0kw7Ot)l3Oeiz(I
za#$%2rwqg`6Q*V8^@L?r!syI2pPtFv`N9MWr6J5zo_Q$mZ~D@-|H$nxrkQ#~l7M2k
z^|4~%sS}1O$1iW1e)Y$*v9%vgCl;pC4NXXAn}Srb0U{aWfyWUBQgg~0Rn91@leJtw
zl3!^fkMd}OnK~z_q=~WVG3<EyX-vt7A<QIVMl&oc1;dCyrm0R}CRiN8G|)f&Aod-6
z73Owyp;RToTx7*eD3lAp%(z6lNl+hB!$Bc}(s>m|H-rYw5<A0?Zn01<Iw<<%7@C>H
z<kSfA#c_Dvgy#f3ca(!YH<rR(4>;lI<dFjVB0-LvJ59Dyuw!Q_*zpmw((vc0;)+){
z%$)tjxH)fCDmh2y8ajA3*NPNr8&rb$SZ$$FQV&#DfK;4lfVFl)%LTv%<#aI@+c)pT
zr1K~oHi?Y645rxtPNZ?IUr3r^t-)soEF;IO{z2^CzZos99WV?5*NZyjWL}iPjP*-o
zT8Y`v7Oc}uEi*8q0!ep2JO#HbFf_Us+jnh2$fn`?(<G91*0y$}Hjmu==Dy12Tb^%n
zM~P29{G}A|6nr&Zp7tNUT`?~>F7@%dMhcIXCi8LIHd~NR&P6)cj$A_v(y0d6BB|Hj
zQGTirYOR;j0vJYZD&(3C?AW;tL*rYKm%9+Nnqiua(lT>g2wJNUO$Ew!sPN_70%u7u
zlVd3VF!~49qGQft?ohXr;sOb1l#)}UAty0S<j0vN=Lu-v1-zN4TU{-NNZ1A@3fnPK
zz8A@45_UX}Mxz}Uo!E_ooA^*)nP#9-TOy}kG{8p;^5GG+`lFTn3MNmg#^ef=!T{B9
z62-6=#p!)8W|FW6+K^7pLps}zY-2NW*#>S~NpMB{7<m$j&cz(NpXo*K{--gc9t9VM
zw9H1BMiV#8422-=W%cx?LPxvYnB?4sC7R#_hp>D9188h&Lp+h<<!T5r(}ZBsEqd@N
z@l^&&(-M9e@T&l=Y-Kefi*7Z^55PShw;Pd5v?6XKG2hN$_31fSTc2xWFI^M&5=r~|
z9aYM-l89R^;6WUok%b%P;mK*Z;XdSNb|Y5EA~x8LWV{{OhPh~HY(+Yg!Q6#0^o<VV
z$t_zj<v#+Sl@T+WVHyoEjGVNLEVvdR*VLCfB{v|r%?*(zY7U`Q!FY8OcI@cHvgPYw
zC*!D8DkxM&dA`(-xd+!k_>BnsK)Wh(9l}uB;`KE|hK{(|0NZSWZDf&&rSYnHX>_!4
z>cEq;Kj!*mWg2nB<1H{{29B49DH90790FN^FN^SG369!>LTNW9N@>IfTVPu)*!qNl
za(Mz(Y)6%iAf_!i2g_`RWi-Mv(^@x2D3D&bw(AfW=>b>*jKyJ!MtJ4~4o?0G`7M2j
z*>P07Nt7#t2+c{HTwRVNiD1lV+pGxY$VBQHkii(YjW|+P6WY?PSdvSiBg^4T`S5&N
z`+AH)CL^O1i~AN#W`V4_T*<-|4nh>*1w{lQ{ke)TEW?v|xN1L&-d>%=hP*`c7Pe>s
zxqz720@G~LshbdSUFbw>wYe@hl%iKA1W$mhSs@_*4WCV5)V&j`O2mi@QYOaCgiilx
zR|YEGb%3Q}gm@EEz;gngirYx1fs~a*XTv<q%cYPoBq{-=bOyXx5-YzvOIC~#`zAwy
z<tH>^$?_cb?w-Vfo@wN#(lCSzg$n$z2tO!8swRYr)`+=~ssaJ(Mns!636X>)nz_Xr
z5VLaN)czp8n%FL_e5atP<(v>a4nw7(R1k^M4FPHRP&&eriip}%Y27)e&zdm<qz|!e
zgPIF`d}0!}-S%xPT6hvpJpKeYWrj>5qpQ_GaX10z#Yq8&YVBFj+`mkBp)|F{IG5R6
z0=dQnPF|P5iq)+c=qsRi-!w*tO5lDDwnegmDqO#SAS^>ElG;X#Kj=mo!Up+a%g8~9
zjD9a_g-|XXRh9ZZWk|+sE;wZykrbCP3sSEOrtc%_oxw7bP#j1kIL1b%apzs%#k|fH
zSatj<xc`BhQ7TPi_pXO9)jxucruj$+t~(>XRH%j=Q&R?9+5%=4#>)aZQr$;l8p;5i
zY6!RLBb~Led_@ZuE^frcXbJm!rZLc8LZz5O%5Ky>em``hmFWbuQZS4dEHecw)&ff1
z>U$CCw5+bz(OCfrvMtGlBsDIlV8~fqyA{DL3XJglGD2?}mStjMat6P?;~EqSgD4iq
zuy5a17$Sz|+%lxB405SvJ!6Q+pqkYS8Jxh>G^(eos+VudFV~VOB_;lXlb;(M&tvoB
zy;!`c1@q=MA(Km?qce;4xmlD-RrK{0(6cv>nJJ$-BsBn|CAeIW|BPvX$&nHjLDXKf
zl8Q0`V)zL72z(vMgaKhBC`SNek*J1b=VaOCY8kiu;wDszML5+8a_PkoJO+c?u&pd&
zG;>Uwm^rc!PHh{#T#$?<urN`w;7Q^OkF_N$U8L$Nh-6xGTeIk1+J-|1#&F=k7}{EM
zm^Z%}&CO{f;&Cir9>a=N&G^mTL+CqLmR8IlcsP}V)M?<H+R^&G!~1elWk!X}vs8g5
zM|5Grm?g=Aqra>DJ!8@kNlt!!YH|XWkw7-N2!@eB%pifMDWkSR#Gz<%NpcwwGg!NM
zRnOwniV6_o3H6m8Ly!^p)ZK_!wP;bx@yq97S$7Be2Pe^YXq<1}ykBP039MK_IdU2?
zCeSt~iGv3#5m>e0MlxKz<VNo^Le>~@c<kBluWO#`+wG7qu93r}1<|nU(wS4Im8#E#
z)uvqt-8ib+bfQAlqrP{M97`(NaDW0HS+OSa;2B)goI%Z!k7?iwrCag+K$py<y%-zI
zW6S1VEL}PW3m3Iu@uF5aHd?^meZ!b3l+oIj(|s|D^nwe{bXvtUJ58IqX~$4&W7W6@
zJx!jw3Mm3OTF>y@U1%e~^>HLS=cb@MyGFM%?GhrIPQOPpA^Hsp+yQ-Oz$Bx_gXGea
z0%7Pusz~gPV+nE~tCb*hwUv>($mUXLX-Q-E-XZMWJA`@jny`3r8_qa$nI_PEF95j+
zN|hppC|Vb&anR(^;dO!<V1k20{MtzC$3`5kw*DF+5#0;2P<pS%5@}HNO^YfSJxQVl
zgMLXuLv7YI4K`^m=uP4`0>NF+14-MD8OU|3^5o166&$oB9s!uJEv#9y5aqIiLwyq%
z7?{L?gX3sx%VA+x3mO|pk{M+S+U{tFrJ7~3kc6Sye?*Asol40j$#-gLm_D{<&ygZC
z3cUo6J~HZf>0`7EU9&>^M$oK?(rn#eCbpAiPJO!o;<gENqB<m_633`GWk<pdkNGYE
zo|>2{RQn62Vc5OB<0uwAn5IBBo5ZSB3vkwk71|dUixoWh&~9vf>X7bO>r6rW#(JZ$
zMuAJRr<x(w@zHDN>KigeU<lp!qHajUNo)FFFWQM(U3#YItsm-(>Fa(yaz_!^5&c<T
zCm$%qBfl&Wsst|vBp0XV)-eOQ-azz&q5R#~ncTqGK;F6KXFIUvu|DMU6<y9I;x-m9
znu9aXT#l1ZUWiQAj`~57r_&Z#PYh~3i{}Ly{YsGQh`K1xDj1@kk|vNfi1ix~l`DG9
zO7wn20!4o$Hxad<h`m=_5W6SorqFI2v>=O$9@^!sxvfD?ID4Pe=NRcCj*U;Q!!cO;
z`QJ56z2>r1Y8fvVi^0~-RpXgmBbe9Ki0-8=XlqL$W|^2jzg4%8f_hU^lkq_$xTcJl
zQn9FUr7x_uR!?^?h<7HYQ|n3e42VFi@4xaa{<W&5t^<jHuN|Rp2>pRPg+Ys3qh3Po
z2Gre9OLng3hE=;~{PydkuRn$$*VmE+YJ6(n<QGp{%0IWsiqC^WspPuS-t){TdU_@>
zrz3|YOPVluZZ_f$j5-TOsTPBx?HFoJSf%}Pedlg%MHI=Ny{UCyu1&Wl;jITQ-5{@V
zYr4zzTpwQhTs=3YY^ZLakraw@H$kq(o6Z*#+n@RI#7yw$ZS~*%FR_~zol1<&Upzne
zC->$ur!EK?bC?Jv6Q)JoC&DV7O=7|P2F&eDW82d+$WQxPz7^7jO(fgUg@}MK46X|j
zQX)wqGwn8~r4S<r_MuvxkR-l)HeGv85fVv2B9NmkoM^9&!)=UccF?q->M06(QGQPP
zaF3=`z(STP7M?+0{%ea|)qminC^-Kkgl1uof7aSov&FvPBW;<te8Y|}LLkBlDG^Q6
zHgwV-l2prtFidG0MilsJyARSPP@0Dj2B#96B)LopG|aJ4s<;^L*$3B~l$3l#K3FFb
zbrXF-^SA~m4HD$&ZlVTX#{nH-Ltjc61WJWA3qwP?Gsu^>+&xyk`Q1Lo$7T!Q=xk<f
z96l)n4UH{{*I(Y6eZwaVyB#5u6)sF}5W&kV@`(}8KwLzvqe?*2``V%jWYZ)KCz?89
zC={z0>fH~Ql!SVPPJPR<T5ITe_&)2Dqb<p5XzS#KR>6j}^^H$kI@m05;W|UI<nH)R
z-h1rIs_fYn9Xfje*O8gk@!W2%#X9D-rQZ1Erp$ToH0)L??kZeZoC}*D<|=64<S43<
zmD5hKOb87!hlQ2}7N)1F80_tlo;ykV;b?`7t_*b#y|!0Q9a}wgil|)z0V_i<(ErGQ
zVhIxD`Q9X|&Ys^C{U^U#3ZA(yM6vvQNM?5<zN55RWi%=4LBr-<i`!EdeLa`i@OmC=
zCM|Y}^O&Il*L*OkK+VXN)T~)pHINrtm>jEM=s=J3ya~|a%V_Tnou5RSJ<T`k=*B5}
z(oPp)7zXsrnUSImO2Qxy$L-l$a-Y7U;6L?qUyV=vTNsYcE{8{XN6_b6MVv2Q-jcfL
zpBmC<ZZu*o)X}IAy~(+0Xpjk9!y>n$mz&Z0-nOL{#s*6m>g|!fHx8viCTpf*jGlG6
zpk-fyBv%jw96Ui?aVCAZZvSx6+jeEadGd#@8tAJz^xCK|dOW)S&dBd+Cvf%xu$L@v
zNnY^xx%Al=nejG?myT&#(ll*L>naQa+=6M^SaV(+PyVKe(Scs+yW_fbMHPcmAy<m}
zL%viYtsP~SV1`9<BhMRh%Fd2!ivG6is$tJgt$KT&J3IQozVPaQkApq$;%vTfX_Nih
z&o*Svey5$74`$h(FoYMgQU+MuXzpyp{1w1sxAs$?P?k%BP}1R{bb>H+14fJZnPn5O
zK`@4@yZa{v_sOfu!JbDYs?M<l_Jvn{jDA)<`^sc<I-24e{vww=>#{_m8^TI}nU-h8
z<3TY$0nZ)RL~jt5sY0_NDP0H^7ErG4y0_$RyRsDQx-US!c=#6%>otxQxQEZ>nE$+b
z_LV?7mA2NLlZ~(Yc*<UW4nq>5uI#7}=n^GF7F(#ey|<OTo!>79`yUR}ByA#s-?yLr
zZ}+b=;04(Ty<xKE*0|_eYl`;c!Bk9!r9M}VJmrM_`z0#X=YRUxx`S87E8~^%%6MhG
eGF}-tJpMl$dyM??x|^Z^0000<MNUMnLSTZqxw-xT

literal 10888
zcmV;3DtFb1P)<h;3K|Lk000e1NJLTq003D4003DC1^@s6RSSr(001gaNkl<Zc-rN?
zd6XUZb>I29zh70owf9ChmL>p_AXY)#M2fOVfut?TvSrWM5;QtGa%4|@<P%4k*fUmU
z?8w6)u|4+jvBxt`>?CLGIP!Q28O6&;ktI<yp@kAjQ6wc200ClO8r_XvU%#!Ye!n|^
zRQ28sbc3{VCiBP!`aRUE<y*Jz^1aJXc;he0ehv%&)xGvB98p03OB~(6p&<MF{|~Rn
z%%MY%1@M@;St;DW>#)u5uAlp)=eB#hq!DZtYqo$WXui*YV99rbW%~+N*?&M_*Sr0~
zd%Nh*g?|npUA$Q^|7W`7-O7E6h+10^RULM&dF9NRe>;6W4Bjk|1r8f{!U6PcxpyyO
z->)h^D8ikB^oRr&1QD6nATp;(WYO<)pRZ@T)wWso`SSg(*lyWA=ROw%MG#%sZtnZ4
zf{4Lu>QE*{?8^r8H!6Jg<jLPYu>kfHem$y0)~6cq0KHq^_5-N-M*{B^8x~LnojZp3
zg^LBjECY^>gSY05VAanTzh4#j)ow&4x`4^|Yw}|QSR-N(2{B^vnzmKtPmS@ved5G#
zy)vgtZY0%mWA*Ta>+9Ro;R_wVYOw!E#GvW{((F{k<bcSVCc)&p!Yq|SVa@&B@bgtA
zdJclc0E38`gGTf3cm)-)fwe`vOJgzi-=t~nQ?I}NyEAh*-2}+l7rVB;^=_+$KQJb^
zTYc&gQ7~rilHYU{@jU~0;pvhb=w$$}_5`RZUc}fSsNh`koS68d$B+N!DR|t%huj80
z&Lw#BUH7SkUl1`ps7nzW%s*m(#{e%?Ip0fwxxR{#Ik44PTME?s38&2;JbCiBo?lC%
z&1&unJmGqV?md_REIp`mYXfZ74X|8yyT!Uu<^h%!0GsO?xf`9!N`Uk2<|TO1IZJlD
zRrV($Ht;TXVoYyft6$i&=Tisa3HR74Zk|~w*~etlru|iM@+X-Dt3#|^0N7+e$RY_?
zC%{}6V6zHv3&&dknClwMwa&%Jf>F+HWWL`e+vR5?i;g!3%W5~w80&rFj08Pa%%AMp
z^U0259FPS!c2$rwH!TfHzab_(n5hV}4B*8V|7HLzs{*{BHWqm+Hwo~ZyS4zZEMUhf
zI(S}Hal>mfVy$zn)Y|gFfWrUw1RrvT`H)!y<jn8u8@%^nBf-z&(`7pN?+W0BJ*{r!
z7629uRxDO5M$CpJc&M|;-+y>Fc+Iyni-25yE$ah#{;b7V=bBDT@n;Sk_~rYa;0eE2
zZ7f$8s)m1(>nHi%0KC*cT?^p3_g)pJiZ1d5uB(Gh_Pw{?Vfo~zZl}`}5iuF~YZ$qW
z0Gz9y><n!f;OsvK^a#gfImiZ{aGN&Wy-PGWr0Nwh=8XW%x&dC$?cBh~mD>I6)pzo6
z-<|YJ1=R&}x|Wd>$s)K14}iJF@|NudK(RLpRMrh}E*N5ry0(gh@7llr*LE#7g89`Q
zG5|gZJ|H$I18%7wym5fn?+4Eb&RW|6>e&`Q$U}#IokxG;AMh)m`UIc<w}<(O@7sm<
z2`bEkHm@dZc7vP~4i*v~{jot*tNi_sY(i5{>RIqMHVm*V0XY9%RB<*amcf4j;ORpd
zXgRC$lfY3abqxKAh}n@psAj2~_ICxaS#y6P2GlbYzlZ(r{W!P$vM{<gq1F@d_5sTe
z{N!B>)jVJM_8C$MF_QBUBJ&adJspPMJW{0p!S~?wR&Kv*oS}y0*moP$ykBW_*9Gum
zHMZE0ii%hf@1oIb4}JRlc@&PS&AxS1H*Gpp!MI-$q%!9uZXDp%IExzr%&Oi-2C%X%
zd4xUR|I^(6sg%7tm1kau#0a~(I;b}49DLuy?AI1gee*S92??y=J-p|R62I_Mz5L@}
z9Aw}f_v73{80jYUr+CXFF+YAN;Qmc1=U(%SwKE;9HwEw_{hj}>N~M3m{odHvkv6Cp
zcuW9XskvRmbYyhp9KiCX0&I-MEH(pcL~?=wg@M+6?0)d$-2F=_KXe;>`7+Ep;ZjX`
zG6_fveKe;=dGzN$!tZ?IQ3}3|^V!~R>+!r}&n)HgFmCE)@JCVo20Hx`Joi<2;WYJg
zP1?@fgape9fO8uns$Pu=IwGR&0FOO}SQs#HOiSf$cN-J_6sT^T>{;Yjidj2UR@MQq
z1(dGFe%^Zj|HQ6Oc|LXkzBnyBbxko1@QE;*c&a@G_KDJLjIjIBhuAW8l_y`ijF^BI
zt|<TEKed^CrODfO&tR&T@$qS*7f<r!|JBVWKHbUVrvoOFmB#wU5`0}|PpvJ6O8VC$
zV_!Z!FmS-kyKrKHWK}L;T{_q-@;%p35d!xNY@r+!a_4Ym7%Q3qTxx7(-`<~N%O{nO
z+^KxKA^g>($G0Jlq1l9)8R0XR6P}H#6w(UKk?->3kG+?lf8TCY6&qNl3kCl5i&cK@
zH!8@K$6US0bAQ#t&wZtvD^aE*#N3Poo9j@gl2gn!S;bGD6W}+K?8$C`5y7UyZ~ZU#
zarcgHKnMd_>VByOQEaP|{X@UNwtrIOhu)#Q*f9LTxMyYt(gwIhNZZh!fr$y>53Z!V
z(%p-14ADAsg`fQw4|4e67QBPd8jOKIdD-*QHv{aoF8<}wDz2aebJwbCaNF1AOSl0+
zWl%M;Mld38vKJu))}SivDp+oNxWrF>U?(_FlCm_y5=Gk~`?~)zTR+jy(8G?eO&k8*
zh-YF7(i*si;9B5Y5Z9r3O&A%2-@BUf+O}S1C-)JbP>%f5L%d^iABj@}W58Oz{ya>d
z?%;(Pi-_QE;;CI9z_Nncv~a+{F)erAdaDuhF#(-7m2c2ZGYDRVuGsRMzqp6(@BAQl
z+}X!lyT+-uLoSawn%-yJLIS(OpJCs}@22_glvA^YSEixefOH0Y9kdPF0%Cy#TwB3G
zP2g1M*}kJfaH50iM2kcBZ0F0*Two$e5F^y50xn)Myfonvvp@ieY|!Pr0l*+?Box*3
z(<5VFI(y*2;RT%>Y#>x#4_#@*pa?(qmI40uiMR34&uk@4hl$-;zW;$~4(~5gB0vzl
zPub#soVz~qATtjnoE{ObPATnLrWRZsTvKsP#kax5ifbvZ39ShsxhkB$0)IG}a_qrw
z&dlthdvZJf$A^A|sz#uOS4SP6ekIKS&Q*lwxesKG{NgGA%MB>jg@3barGVc|x-ts}
z)Hz;!@&xx^Yf*js^Vl<n-~J`XZ=Ieb46|eQwBE)2Kk@+@52TzK5nKnPvEm$%fQbc-
zK~j(eh(QuTR1sB@$?TfW8u+sz$0I*nVdf7*?u|F`%lCTz=jWb4LOXBdB##JfDs)AL
z36~|=bxl%#vDdUXO||mL*7*o|EvoZP<bzcOV}!ptF~v{+(JUYPr$X~Z<-}LucTW3x
zfTQ{?Jn+EBDLs_(`el!62z~~13aBYGz_mb=3~1UQEugJP4AKT^Ksq6qYr^HL@I`Sv
z_2Gao)C~7`zk?qgd<ey3CF774!8`cyJ1w91KsC!w8?#E-Y&Hb&@(6hqNe*(}m78GG
zWL3Hn48~-Dzf|}9(VrISz+l2wmU3@~+`04P3?4GPbjcALK~hDVAW?QMUO-gQ6ikv!
zb_yoW>HIu0mIRmr6DSiFPVNwTep(p&=Z;6V{wU8)yvC?bAtKyTfgiYE`3JxB5bair
zKmXEKcx|FQAC}*Y1TW>bubUZpqkQm6y3%_P6^w!3|9XRe_01e$@7Wr>hoN`e%4;Jj
zGb4gdfgcv+j747&WI9s~8fPGygiLy4K@x!&qEv`Rh2n^%GGi#!g<=z?$CZKog8LE2
zcSZ~cs)z8-fkICZ^Aqn$DfC^Suk!@|=ihVeh?05U<Bb8F8Pvt4J;ADFZ5yU5S%a?3
zoOsRm*TB(m9%Bru${pM9=4=hdMwKuSf?=Qr?U@!Dg@k<>lj7Qn<kD*s!L&2LjTJ&K
z%pUhNuGERDLUAadaH|m94qw;@L%mAat@LvX!F0w?d}q4Ihkl{W7yVH_{{`iDzp{-n
z6XoFoZwTP|pJ0vJr#F_iXG!8wFc@QS>KC2-oW2IZGdc4DgI8{+;)=9tFg4z0dUlLf
zDipT&Q8pp!6cVs8*jO=b$pB8lhEVD-Tx+(tdUBjF2q+)xpinGP=&}q~Alm8p)T6>@
zPrQa36|5MHz<5~VfB(aN{_~kKlM?0?7V?Gxp2tSl(8-G<ppEjuMl52$`?>vV4zOT7
z^p~p)b@wsUGeBRdkFL@HGd0KAi(lmA<!j8k7O`Bz2iNGdcheDllt5C_L@=>nV@2A6
zi4~h>y4Z?PD1ZqAqVi_?I}NSb{|7LHvs>B5PC7;^{P9<h@tM;{F*cmP7Hi;-PjzAf
zL6l{J@&*B3+wgHyd~l`?KvC2S>Kzr+$zbOo+k19!Yu^sG^lYVE7(k?tMp9sU7Dj8H
zL_J$?X*1IP3&xwzB4RNJar-2NNWcizDLxi#Td;{{MlZ?jzlEsii8>5XNf;VPIM#li
zhV@Lln6a5M$7d}KKaDYk%!=9&$@6>0vM8(u6PRop05vGOvQ*#(^>~`U)9Zn}QNmpX
zG!D6?{|<I;+RgTXJ#6jXPAM29iJ{(vE7MSGI%21Yi7_ZH^(5Zmys&HAN0~T1%@{9d
zZj<qt$YBF;PH=6-#t<Zuft=Uhg#uv(q7ES{344c9hOZSEi(8nWM5;>an%vv{ecW@)
z9?FH7lxb?|Bv<R>4A*A4R%<fRh#@TC9V^PU=F(T|FL<02)?jU&tn2b3K*XXbWjDmf
z4u68pJ-cX5Lwy#;r#!7zN|HD-m7FC$1DpAyI_FEq0;J3&b?(^wVWuuzAT3OzqS#7G
z6j|a%7K8*b1WvJzxxk;mKv;&L0;K}ndsm%jPdSJ)TGb?mhc^9p?B4b^loVqvTf2n*
zDs)toFq*~LaVA<Lj5Mxs>DoBwhNrkN-e7bpCbq>50=y{nUQ;Kp#YU}Co2F#>oj&sr
zeSNzay^>Iyav06{UgHI842eRTIJ~;-23o;Jf+>P`7Uz`2#{^L)JG(x}so6h3#i3=7
z6aq}cBM!n80w)*;Dhe6zL!lFb4%pNS2lvgQK16UxY`DAsBXo7`<NV|-<tQKtmHG@^
zoKOnJQjN+~N)@^~ce1Ao?%x50QbOV<m}*|(a&3&yf8`|4oNHiAu)>2_DtwC~zUx+2
zuRG$)=pPkjYW4!p9KFIlcMZ~<%5I<s9D++dagvgzDXKmL*#S1B)Fns}rpGKA7icGK
z`g`wVto|LQl9!MUhph-f4K#tkL#VnC@>&RrQ0#`VL)fu3VN18C<rLpC?C<#~h4L=O
z8+A%y0oy6qPN+|2(PJS{5|mjF6RniX;}8Wx7#b>tO;pN*+;=Aonmc*^U;TSr$9ij`
zSC$wq)S+AE@5EYnX>p*Tx$deLUgVYU+(virJGiB<pUIIFRB)-1B#tymNYVtKnUO34
zY*_+l>DU3jWSF=hq_H7&3EKxgK>flbNqL4+SA}E})Ig{ZXin?o{7cjUVFwgCVCR4#
zZCYF_V5s=RRJ-<4i|d58fawt`+l85{N@H3HjL<UBPK81MQ3%CQh`kc3r;#X4XSwu^
z7JvP@lW33^#ONYbx>h~jyiO0+;a#kweAQskC}Ar365o2ZoARNzQYv;aGn0~}&`wg~
zG$Bb-yjN5#Vm!t>(osWsyRiKbxMzj>6(Nm<xY0>Z`9WMEChCS_NpXP?nmmja5DQWg
z!XBYeh3;Mm#zV&I!eHn73GAKJ;}&8HguT#tCp0IO@lnvWV#O0$L*j%uP$CC$3WXGc
z6iShyZc;w~w<kD0{tR{?$^>g&0Lu!6VOG=0OMShy>w`5<Be}{XBeP%P8{c@1CM{Gg
zah#I4lq7Ye&e2Lz+KI<G0TW?tz~lu>R1kLmuu!jf&R)61@l(%nb!wELGo;iB<th|P
z5JpfaWPe8`h`NQS4~iA2b}RKV)RIn`MAWoK*lj6ng)NT?rOlSBXN7vx(~J|EaY{3G
zG-FRA5t=bHW2Mm+S}lQ+;mL2F=9RP0VESa9R9c?|%i8K<snc!N&@-~4x^iykNyk|(
zjy_57vU1lQ_v7jT&b0wc5JUt~gc!kTN+TZQTD?yFa?07U0Ur3-9?JWa+RGI*=))Q)
zRsy=JO3(?l3IutShk&gL^kn+DT!M19QZG9uU76wObBx!|(b0c9d+)rBa0i_ETuiH`
zgr<NAL)3emI$F--RWl=^f_f--TE6!3NnSqwb)>(J*i!Dztd*K$Sz%*l+k$lmBTK4>
zuBWTPSc~sE#p#PF_2wvhx86lNR%RM0^<;`xI!fXvh|>nn8Ps=T!_7o-nV0{vgSY&I
zVf1tlqu=fTU!`1*=&gb+gYU@PIGg6GqO3?R<z10*tt!;YhAC%|QXeKLQQW(Qo(C+?
z|4qWBXU<?+=Lt2TTIiy)G)QNupK8!e7-Ry|PM}(aSI(d1g;&3h=^4dFRb&yVzdFFn
zi(}?&){O|FHOp6J?ebMM5JFsfot@k7;-ULPj7hjUF~afluW<6*Ij)X2X|_5DgYA@y
z6^f=zWGy4#^>lq(*!80@J061XrrH7B6`(96ouFQ@sUj9AfpjR9ilJ;WFQZ*nW}606
z*-E*qhqoRsQ@iZB{9=r1o7l&+;wwzmU&Ogt(iE(AQ?gsx+P8~?yS8y^WQ3#7eS?lI
zv)EGSlB~)40A4KF*Wr_IRKB_<NiE<L<(>O}ihX+?<+U-T5DEP~+xek8zK;(U+qCN=
zTp78{iE|UYb{ejXHkchxD0Ky#{#(PH`#iV(u;<L<0oAI|RZyr3?e09<jRmm^rA)#r
z1*K#qiwq;B(KG}-1Kj=|OHfWZ`?Mjz6FWoP4r#Rl;=~dfWuP-*-)*zpwQq`h_KmT3
zX8|eq^GE-26MylwWWG*LZ<xJjRn>7F?jr9d+YrEcNvm_bb?ZmivHAPCe5p-XFf>J(
z8c|+94dqHeU+;FdZQjm@-U20CV|rqOljqxf_wp4^O;$Pfr82jDFrw=L=<b9L9Ignh
zE=b6DWfj4cASgpMf)a|&J*Grp+uJRD_ZVLNjA7y;v___hT#ap8+T77w<!#%0xN~nG
zLj(O(O8q#~MPoK(=Auw22*32<T@>wK@aIR*V1vRUc5Y?6oGhv3V^J`2UG8G7^3}Bg
z7BP62u&eXGW#{1g7`@uW7()^(Q6xm6V4M<9dxmR{(aUhGYUt_iU}#GRZ@b&^zIQcA
zT$6KC<6O9`oY`HX5|jujQtE-O8r0h<8c3D}2^AYa*$4$J<qAj{W@Aryz;WSg4Z6l!
zyzT96?%oq~?^}0r`>ul&JBnQRtn%HLEa!)X+1V_Q7@!obQnH>)#|=OGt{-E3`p^0D
zcgL~D;JvP3=VVDG)M^Qj;5y!g-pI%;2H0k0t%ZlVeai=#oUDU@bBZ{@r3M!n3Xxz%
zF?q5wnSpDw2{U7Gwkq^=SJ~WKW#@q7?sA)`qeVTr#>{gdr6P4Lv1zD6JPt`aB`603
z-4K?b*-WUNYf`x6*wmpME(v?yY1sAQB2iBlm=He$W8<Flmz47ko;l_zT8OL=ic+vb
z7=jBeb?f=g^Nvrx`vVM*{Sn8nrWj)vdP0{p>aa#Z3~TG;b+^(Y^HrB!ei!?0`R}PU
zX0sN*jQ2#n#~8(X#U+NQAOu0qo8*1>Nh_<jNNNew*Wkji&|NLErLV~L!A`dH$J`pt
za{0<QpL^~K1Ml9#z(AF2SEiXbTc=Mw)PzS`78@6-ysgU4`z*d@xHbi&7abGRDbq91
zYC*dNr4n@Y!pv}{c1$2R4{-uUArQl)cbq>K@V~zQgZ#t)`%jo`o1BMV-fyxt)p-Lx
znHvL~7Z2K`%KjZcLn~>6I25zc1}tPz9v%hKh7d)DAcV+jR^qA|$?qJbsSvjyp7G2~
z!iCGqmaRo@9W3&n{@v3&d3>06jor%gso_90!21vNF*On~JQH%N7I1nTn%{N&c&ap<
zV`@r?V@Q)MGp!z6s;CvJTVV9O#{>rT;4L_tpSps0!{sz3v|aoU@A?6beEx6Hppv_D
zbD0y?q&j68X>V5Y$>zEMGhbw_?Cg3kQK6sIw-K={>Y~kDEu-Y^6nItIv8UaFb~}@t
z)Is8uB!$!|aiTPv(42*tDZ^}A`Tc+M0>A&%ml=BdyZLWE@O?B#%lzKsPxH!!DqlEV
z;y=F%FPuu58h4CeRKE3$XLc4Ebs>qfo9MlgI>mWtx0FIZNWs&LJuL^#6dG-)x0Ob$
z%(kG}Hk`bia7(b4cMjYN>M>TX3-AI%xm145;&BE`E$7;8T&mzwM`!sqqJm;HoEKmt
zizMEd`Klt#A0_9Zod~TKv|@;zkh-i|GmSIQYjsbdVtL`&OMLE|k5k>W32AllnWsE2
zyf(qP$>;dXFTF%(0o+WMmhvq{R5*V^iCc<ungQ%|{)zDlX#!Fd!Y)s%ozRL?T5%Tr
zH4<f}rA#(FlTB!N%axYLvXvxl;#IB-u*{Q4W{Hk4OUmM8o#PP1V1s~j7r#oQR;N_8
zR4OIHpa2A@6TDyGSF^m|e6KqykZJ~Ooa8`zAypxcAu2}<PfYTqqhF*JU8EA-Mi6>N
zFT|wHl&I?X>bJkj<fJ1A3~8z)E_-?=Muh2Wn)i$3PfL>BT(5#ta4J;$4ecbQ?GjpX
zk^!AUOh`Kjm=ZYMnB}j(eUYb*KSLOn=X(yWR~snvlFs@fzO}0!K}^7S@GReYWs3f;
zd+6`qMYW@gQn?B~%=KY{s$#6Lq#<;UIRv~H(z#Yf4_Je<ZNC2W^IUE`MWM2ZLez_j
z5Vy1BY@yK0<*9G+;wvZEb=v`^>nT3B_N@ktT=Z-|U}!bTtA%vQHKvJD?l))v&Ktr)
zh#H|uoAKHhQ!^8cPhIBP)Op%6L2;mpkzg4OENhH|xPjr@XfwEtLXy5STxy(Q<lJV;
z+(LKfZn}B~>FC@<xuXO10WN_wO+l2o7D3TWurq#3Q590BRJ#Jc`|7K_KKun-G)pPE
zheDx>v4(b<W>2DYqTz8~dhIE;Y~4)|7@D!ptE|yWo^5-w8>mYDm@9em90jWV0a3+J
zo1S5Oc7n0VOH9pNB~HfBFvS)j94ONf4K9N0#?`I5F+O?y-S)ODXnBm8WSE)ycL>L}
zP>crY?A%6g?{>PnH&d!~AQIpca4rRW-YuGe?eSDA5u?|xaO}iasF_zOhubMen=rPF
zS8&ductj!!g>J6azsZ?%kFb6FTd23v>;W;#<fx-wbC@8&D;T4>(E^`B(u8(fIdS$$
zE?s&BCo_cBasNOcCnSKvrul0&Ym~07jZL<#T~(5UVBG*Op3t&TGHS3<ghWs=5#j?b
zjD3~iYemY@AYGk9^!Dwbt7|i*a+SbF;K4hOI!C!P!UuI;e(71p;;&(&5`}0pQPhL6
z1yls5nVvDGKp@?;!*d)v^JNAGZ>JEJXtZLC5t3#|V@l{50^d|z3e6hCH6>|5(pI9-
zG2VQhmW<F<>0_w8lOKI>kSpIFW5zF3W-bNTta##A<1%E;L~05WE-$#d5x@)4kBVe9
z$sUS952au?4WDL7$@C19W3O>}tU{%*na++K^z{wV+q;EQxs#sWh^|d7zWmu|xis|@
zX)sMC+({H}A_{vjHq7G}MZ{uFk-&CPh<X`oJj<~Y2YJhZN2vr6sq-|N6ATZ7jRu(-
zOYvz|6JjKjbQ=j_0m_Abe5pi7)Wci1^t1Qw67E|*zdl{cvWct%V9DnLtW}>JFkeBm
zF@P7MAJxpNTN6+!_0#3I(@J_s!hRAzL!3@B<xVp-eu~T2N|eLRbd-na>g{G`<{DSV
zzCkOvNFf{~iZ)RU2Pj0{7#n8ES(hExN)c;12uu&YIKrvn|41vIq0-Sst$vl^YcFB?
zAEmeYUR>g^)@FV?iZPPeSMiji9!#;!uD*Wm+FF4|9f!@O(dOj<tQ+9PPxrbE-+Co@
zB{L=1AizdNO1_U$rI*^wG=Z;E2xmy#EU}v*_0vqdGtA7M;?k7jsiR>`WH%87-4w$u
z6vAGDpbBd8O3=B9Xc5*_v9?Y~O2Q;(CjK0~W|1JKk<1|BgV+d2lrRiP(wHE$Bymc)
zP@t>R&{y6>F*0oJ2=G2&cB)P4$O<}iaosf=Dj!})SiMnzSFb+usW7y&i@V>kh0`Y|
zICE-(@oTdLNu5Gi$LTDIn<e#iyw*{T^M=ZRDCj1#nd@eP;(P$)y~|=>2?%TjPdBI{
zfyLP-USotJMG6#(9bh0RL`=?1FwoaalBRs_^Z%O8&VCNwaW5fNN)e>aQ%?#^ja!^9
zK&l%Cc)>`nO%UnL0KBp-*!!%IrBp7^)m7x)`?hl6;2;+-Omq6=1jCnWG+J$nQ4^<i
z5?9Cj7D`rD8wOR1g#p5_H)HxRnNO`C)*voIq)cElpG;hY(H0_tH3e`}M8yi#9(d{K
z^L+i8|G>fhkI-&6nV1-(RcrBTEn={HfD}l)p%EL#t_3*F^K&-=@VtL0Yt>!AioP~(
z0$>o-YZinU!^rR~mo87Rd-rB`?e68a+j|)uo#p(wY0jUWVP-0(Qu26>@tOik5EO}`
zZfsBlu?u|4oRk@hp@?W!O&Z$H%pe9uj0CvkG?&g_WOl;w%s2j$Vxg0hCtso%b+fha
zAeBNl)nX}&{>bVr8cBqkDda(oS;VGoY_7+`l#o^Y<P->(HxJ$fz}chi(R}bnShS2?
zo96PRF$Onxvt#=p{R3472CE#rYZE7qPx75_Pf`dw=Bt>D4X`Gh??aiB5cRp_N|0BR
z8Uj;ZRQ8$$@|DUUCyyToJx*73Cxx(+LRclVMFI&h#*(Dj;I&i?ZB^<?fmv5rw5yE+
zd_%(*%=e7EF@W<LE<{X5B2`N~{O|!L#%r88JHm6%pQNLs%)Y%t^z~P{V|NcHj@NOC
zVywy8Jd+zcoAK6p(Bi$HkIAzZwkY=mG_Oy}HZ26*gdHUUQ^cAGYr^??7+&XovN}Dh
zf_P}TfOeY|)4SF;Tx5B~w+_R%pi&kYHsOW<Oa7R7m*P@S5LiY=rg`zjbL`za#C`Ye
zqScByb!wQ|Mw33N(r)>zPs2!7NG>MtM9KwN7Y;s8RnJFVbLHj+5zQ}Av8ITXawZ;T
z4qO%ioe@T;5a*ZIc7{fxORF|F2=HP)KDd5;^78tNHO6|a6&Wfd+QxfFl0r{!m7(o@
zyms;u$B$oN$Ieac*|UvODZ)9wKtL~<8<DeFd4-agMIh%Apn%D5hUTP1Rz{Uewayvg
z?8&k${EjLqKD#+SQ%S8fpcyBaAYA9bKUT*kKW=*6`sC%qK{o(!)(-}4Hv=fO=@x~^
za`3<qx7|9x@bDxTE{t*J^eFxPo$TAYEzh521d);t2lkR1cR}ZD-kkJ7-ldciLNX`W
zdBfu(zg_2&z?uah2F;VAc3zZH&2CuiB4(2oCW=-cy1LGOMqQ=NY(=x=is7K^mEcAC
zsAVSbOfh_MhNr*uI#-8ll*$o%_6+jigZsJb?wz#bnDNOP#+nRNS;&#isfav)%mQj*
zz9B^<lbG!0=zQ8}u1QmKP`!Ha%rkLba_TeZl${ExSK3KRq0&KvI%2|n(w4cohS7Z6
z;ChMFHKwnwYwDEb-A}gUxia}An>yde$zxYJbLJY`ws*5@_a?S&>t_2cy=>Xqi+7Hh
z=`?@9eb)1b!CIZ0P_<AuEuflJ5UC0(KJTK+mB$<*t>EXgY?3!yW_L~yyfKSzh{53L
zC~Trw37AN)P+}1E*DsM>`E)P!t8d6B>x$u^Y;3F-ASNWKT;bZxQMx+rCrKNeetnFy
z=O!2&?Bw=c{oFFtO;2wTV;mmMw2fx;=bSVe!xHxl$t8DwUSTH1x=?euEYFr}k^Jnk
z(K*=%Mieg!SlVsntKa%Fg3YC+`gmOcFJ|Y=Lg_%TicS_0Wl;)c_00A9C;vsoDv3G6
z`0NDL=w6~i7it_MBh!qI*7;6#j2%0APy(Fu1lG<2sOs_R5Y4=XIiu&j%PaQh(#ms0
zeIEQQ8snjAvItRhKE}!<I@90Y#dx29Q^sn~5cMiibjt>YXs>Z2WG*SOP^qy9WI~pe
z#4f)}8=WK&6{=8h%+#JDoY_jLbPyYr5UVtsEna<flpu&G7K<4#Az53OSC4p$&Sg@_
zh<Ei1B<)<!%A$9fq|WED7N&Em<`Sk^WQlY5q($7i3_+dBU?0WOrt42{S+gOB6{^Ev
zaY(ob<o)@X`b*$jMr>hja^OaXgRXXhf>7+}#Fej6t3O3BGeo((AEF{*C>X0ammns{
z+JW=`mRM(FGu4rMA(<K1%#y1|aSKr)bNV+gQuICxV$?yJkj4`zQv^jrWw3){X=vWa
z8j%~8LoA)^v2>tnKFdzLrY*%?0@%O*um<qY6pk=GZ7+0pyP8N)WX`VN#Bk8n(liR#
zpiIyur0FGU^<l!+4vMAS_(-sU%OB;;fEa5Q%8WE4+A;Yo(?yaCSvpF+n^zg&@#<0a
zS^Vk+pG@K11VIGF?jnWC5XMIH869P#055;K=iEqC2t+lh*?Q>$z>y<pkZG#N%-9%>
z?(WHBBH_Ex#Ao!^%?t-!bt>!p7D3QS&;?0ymRkJ+ws8yP@*Yg2Xb@pcfD?mAHf2RL
zH)}x_R%g73%cR%4>~~F3)m)GJY{doN#;4;*m=aV2ij`i1pkqnUw4|(RLjW%mDw&`0
z;R9PR&bebpk3HRZ3^hmcaEC*OFmS|+%IA$((JYsIlfyyRninzWduE<M6m?PT=|DO!
zQENX%ZSpyi`Zz9W;eCvA30@Q8wxgpLdis?#&aP3_p)Mv(o20IVb8Xb6m^3DBU%|Pv
zn8GNP!3tfQZ=u??H3N7q;8_mVh5=>;z<GR;%^$*i9*+2@4?S(>4d2nD*%A&;&1Xc@
zBO)eR&%h_SZsXuu-S%cl2pUG6gprV>Bh+fcNTZ)haUWr^5ARDD>uLKEr(PZ=X^rDu
zn<Qz0wzEu{Drqu~H+8}yRJtn^i<=i7={aB}Yn?J1D5_i=;ME%2QN-BPH``+6GXO^)
ze%f<%N&J@$z2Ck2fBg4>E&aVTZ8;HRSGY6l9}c=mXWgLNe$jqY*C3f`LfS<jgA~iR
z;Jl&LnnX-1_vP9o$tV&e*eE3`7b%qbmyGoFbA}A_CeBt``&v{<!>}tz)7qzxKL6;)
z4j+EpKJi4hT0^jOF)2jE{hIU1M?|b-Dr=7XTkmjCmJNH}z(^StLR%&5&2(qnJWs9p
zI+_I8sk#)g5EPVhSBa=JuykLU1<RT;<>vU{jRHIuC5f@(ecKt;Ujvo>`xjg!S#9Zy
zJ$pX+FT<en50j*kikRTWqZMV9;h=KU^CDEu0!Xro-e*zy>MC8LH)Bt37T}z-Nef|5
zkR(&T^YrtN{`_JoUIk<o_-C?bPopAYpE44?&AYY}Gq*a!hKGZ`q4k?|ZiJsKY7AFF
z^XV(A8QeDxFsl@@Tn}J%VbEcH+I+Tu=jc24??0?Zj^yF!8uiHv@Y-v?S@Yh0NYzgo
zTd=C?ZfZE_h9{mZANrqHfi8YB%pAb-1_73JE`f0!fK}7LmaO`8GSTECPdsthFUIjY
zi@6-}aM+$a`KxE0Pu~kN8Q8K_)pWzdK{q79W{vI4^%vK=X@J+e9LGv^C;1SyFzg6W
zGm*OFy<hv*yU#rK7;@x@_;sw91Mq}9%wc=-<gY)kN$dL+_hJxKgE{VeVc{v(zdX=J
zmv~!slFZ*Fz^j!3tN>V5NfD7K><QGRUr*b$2fp&Hho3)u_;I@$z^kkjxbQm0F+I%V
z_UOdVUFqsN_-ED>tBAcP2#NvfB|n&EGsA`Jdm%Ri@b^lBS0ln?5i<#@#tYfPT4C5}
z5EH9!|L%<Y<Bxvx#h)8nZs=}eJ-&tY=JxJ=?18{WzlitmwYFS<Jj7KG+3H>^E?$=}
zGPqh*=v><9hSfO>-&a|npyn1SM7Zt{S6%G}Egp!f%L?7a8j%2N3K$7VeY1_qpQ=xP
z`{=hGd1Zbg6!J#a<6FGl<7RFtw72a3)x9RP???3q6}=Or$J(M@(MWh5$y{Q&mq@Bv
zSHYt!yNOHP#y7IM8uJSmIM;H(q)70x!TybR>1U6=@W=^(TzcQMl_i%+^_+3cUiaSi
z>s_r9Tdj?@h)Z<w1nlM7C?Hs+2R2yq{mOMrS6^3k>BqscquO;HFIZHkEl$<i4sntU
zM`?29$rs)|zeZ{X?yDPGBbEOWtKahf$<==U_ItJ3?`p3sfH{2lz<*`yRv%{n6X+3^
e1{OE-`hNl5+A+#FNbTeR0000<MNUMnLSTZvlr)O~

diff --git a/apps/desktop/src-tauri/icons/StoreLogo.png b/apps/desktop/src-tauri/icons/StoreLogo.png
index aa60d969183e69a7709c227f1a29a4ba4ac926a6..0a6324af04aa7dcbaa06fded6a19e8c3bd068669 100644
GIT binary patch
literal 4699
zcmV-h5~S^kP)<h;3K|Lk000e1NJLTq001%o001%w1^@s69zTe&000sqNkl<Zc%1E7
zd6ZmLng8AU*4nG9_busk_60g2Bq4#2M596`M}!Hu;W8uQsAoo*85{-YAd2JB8D&JB
z2+X*EC=O`Au;~#rBq1v#orH9j-aEZkS9f)7Z@cf_IkzeeL=(FKo%v(@&Z*O{y576@
z`+e*0eh>Jw{67&w=sDjNdhYkh|4~A4^~wz^u3Gt)74rIg_f1FM*i+L0Ap}Pdb>_VA
zWpz3N)aU#hB?$-=m4FL@zq)S0C$GPD*@xw|qSE4T|K~!8TKwB&zUPV$-jej5dXkBk
zfBIPGhKpCsk^ff|<(&KHgyZq_>F-!W?GI;XM(Sh#i;9vdK{V*^yYkjMxwt3eS%24V
zPh<;O;g0r-_piTdnfzT<6x78l%ul~(<29#ueX-N`M?B6C`JD&9bmp#`uKC!kL~V4c
zz20<a2_Y^BLI{Q$b#u$+TYj)(%V)h@Z<68UAPGJ?s@o)%upj)zPhWc9+KnyD_tBK7
zths6PoUhMW!e%k=MdoMrxU;Oz`b#UzKOEM>B_Q|{2svw^m{F$bia|>8UfPO~Qn<u%
z*^Cc-EF<<>ZvOsp+gZEcajyEc>uuTZde5e8$IT`4_UJM3){B=nPp*6G)hoA%!B2?7
z(>IE18kVlbpITJ4r0mx}@z-D7bm__^uL3MNHHg`<E!Xws9~x)Qy&22eaKv%e{nl|d
zY<Io4ZFjx*9d(@-#%;&zZ?}f`ZFd$m%&RJ`py0>@A3gQoAK&t`l2K5sWUp7I6<X30
zjQOZA!}@z}-t?inzV^}k-?nVg?64800vsyJ^tWF5$o?6huQz|=di=poO5GITX9#6^
zz)J%|odVw)Rk2f@i3+xe{_OUz9I1-dhXEfy{AucY5APk=D)m>W@`hq+%10<ImD0<a
z7tell>$UAQZ(Yu4CZ)b`_x`aP?tW%gf3`on@uJ6`nE!>%n_h0Pas{TEiX$L0;36+T
zZ34vss0xr8p!#Bh8-(E3Jnxv#?|SyYRo}aDHMrm$J_KALOYo%eE|ibw)pM#F<YIEY
z?&MJat^d63(!uRN8a%M|>Er9a_)t}Uwl}l9;a_gM_#>M)9cNaqFresSjB_>)_yt1Y
z5K1gi<bmR67#Mn4;6a_J-&tzp7AD@c;&YeW{S8kPgfE;Ti26vSxoO$z7P+r9;&kP8
zJ8?_PinW!I#FDMMez|o<<eF7mKJwV!)Ae>bNnnyNrJe$C6_ofWdO|CJE4B<7K#dY8
zRfO_-&Lb_LSG@$g_HI3V`|j&jwI;XiU)?;f>7H-i{DbP+So2kzZ(q_joXkubb1G4%
zgH^hj5(<S9Jlfj2lY;J&zg)EV^Y`@-!P6(H8W5Uprx;ge16Uv+EP&V&1fkRhbPW)#
z0*o+j&Q%%9b2hY;@$4*8SbpMTceajhyLvpApNJGX>%0!AGvn2>+lEFC6+>(q2EG6g
z@`_tI_lp+s1&7Z|zbX`>DpX;Hd9UXknuEZE8cq$j<y<eO$Eq5r!T~=oxM~B`0;net
zG*k?B<d8g^r)6;?7^#e7cb$QMYypO6w0Dw|6emXd$N%OtzrAjBB0G94-8Uqw*JRF2
zZSHAEMW`V#vtm*G?3#;~HdZWNQy!Xog+glP<}Dh0sclc|v#0Oc<e-0|x$HBap8dhk
zf347L<;a+7Dwg2IME5|;8wt+r<t{s=nu8-Bd8cis24==quhH}~z5DvU|BUC`-ud>H
z29?pk1qbJ6EjhJEBrX9}3DCt&f3b8y!}@nLRjt^Z2+m!jp$x7M<ZK}20+#J_&*ygI
ztcK<F6HhH{A33p;(ZQ3Z3Al^^1;KTPP?d?I4rTyUi4)#Dlhg6ck%Qf-L&HP)Ck`#B
zeCM)T)<61Sz|6Z@)^TVs({`jgb^26yvMV`~9(H_Qe0)k{p94hJap}p8%kH`Nz1QA!
z(@+=SSio4?cWuvMj>|Y9f)ZV!RHM{)nd%72R?PX<^ZjExLJpFBS_DuT;W94_50GKT
z1z<)1ElTLh8XFx0ih_P%!`y%W^4j^Ix=mMs>T;kwfDgoiKp^PAQ%6|V>22*x9p8C!
z;K+`>Z7=NGf9j<{xz;p1Qj+08JJ#9hxx#XDjzxpqr<5~a^_fSDG3!%=Dk+Shj@*Fb
zYI;I%Y5doFy9<v$KofvofU0;vpkz!cRB$5!l+_Trtjfj@J&VpSzvGkh8$Weh-*`S<
z)u@=BC3xo$c-Wvk93V6ntkV<G#^nnuE?>TGF+Tm_jRjouxwp*g$?iK%i2^SC3j-0N
z6k137zj9Og-X+(rTXnhV6gV7Lz_J}!%z@7Z<e7=571Up$00~1+wR`T28SlQ4r4w&M
zxy?e*R3Ut5(#tBi2ofrR)HG04XRbS^>PwHg(QB8F=50ICtcBHT@Z?cWDF+xM)MG%w
zV?1rSwxJ5QJ5AVAJNBBxxif<$J%2ycey8K`B6ngK$m~0D`<jETCxfa&x$O#S`;7WN
zf#4<w4Z^WCr22d`UrpdvG1}JM=2|>l9jpYR364MjFbyDJ0)ZNWa1}wc21t?!CFaG;
z$Ne$em`~N}4JwiY3Nn^XbB@47!RO<7j$8rA<|$>GN`LcWN8+g?pS|1`{W+<hI8Q<T
zz0i`}N#30GUpTP)=p7$-oLje6$C?Y-oUP|Q3m$Tmi#$Bvht(Cwm@yBDH9Fe%Rzg)&
zx2i&bGGHPG=q^A^LP@pYWo4k_1s}-~6WwFIZjYN+YcF4dBL^}VJKj$thKYz#P8Ax3
z#|59r5=vvfd+<bW_{jse-H;Op4wpdi>F0<<EKA;~`}6NwV*STkmNhN0+yd)3bA+Dm
zIfcQbK*5>`%?RP;XE;_aRxtlB%Q3hwjH(y~aR6QgsypDs5FC|2B0!Og0Arc}i7cdx
zuP;L(4;<f_=3eeNwF+JEoCyTf5E{#y=$ea`x;f$mx9z_3Z!>)RBLoTr&drM{ft2dD
zk4xtK(+5{A{p6zlaqb3<Ds}0id04l~165KOPmQC!%fsoxJWf8XqUOCSErW^5Fra!q
z{2D-VE$D(PF(5_-bREbGirNiTuxAK<_}f0UCJHp9Dp*t(!Qxp#ENUvl+}X8gsL)Ur
zuYnS5A^-N{$01M1%zqsXQ67?HqRy}V=;pU9yKj5mvTTJC)zBqH;apKEEsLwDtpyrt
z7~)|I1<S*5LSQ(gVBRVNKG8AOt$?RFI2AB!70g-$9315s-sfY?^<lNSnBzFObg_-a
ziwtNf1IKp;P;hkQ^Md;pp%LA8S6rk8@7VVDH~!Z%cRwU4zR&%sflN+68p^J2*|_xa
z!!C1jf(u>7rm8A5U{dIsC=x(fxHN;HEKX@-4bW8Wqqf?CQEtO37kGJ4MLrNhz*Ld*
za;OjZ$aeWK6del}X{gi)Xh1`1LczcgFggb8ewcw}IFAN_hyjFkpu!~fqIqic<_E4{
z{cP*Dy^~%3f<Pt{DWo?=HeK@ksAg1fpE(p%kxZ6LkP4wtHA-do4rt)2Qi@zv1Iz%S
z@i4)>c?!Z}1ouC<2MadM2F<Eizn})GAq~T08is5IS6)w$XTZ=fhh+(PF1T(0nNy$x
ztw1b7psRw1RDy`kQ5{xTC^8Xz|NUzdy<;cFCk=j1I=t$Q5~hXqpSYzgRtL{3*hLo+
zAv1{z1(YkGt|xe*0OSgUS}v%hEzAR4OYn(|;2m8I|L~PZ(1irT!6o?K51+&H2eUZP
z8^Z1milZk4o_pHINJ_wwq>@U43iymrtpaetkg+*31wqq!PA3WkJt<}jJ8o}YblW#e
zx}GPmCod)|^XT}owtOzDN5W-s(+n|<>P&D2(g2dP2}-Ce(2fTbY`}5}bvy#w0Tf-O
zzufUG+Q(Z_9-W0<dn}~f0X(t$S*RXBUCvbs40Z#aEsE5|^GZqVxPsFl1p*A2f&<4V
zaG)dY8~Tu=BpyGWG=FpAg*`=G#UH3zGQnklb*CSAWMY5Mnx@Kkf1$48^0&ugjWF~O
zBT(V{k~gtp;}nq1krb)D<8et>=&7zw>^c4uMB}reDq%3!K{!;7<GnjEzhM&;tr9|Z
z>`{*ND5ZLsaMzJq$zv^`n?Sh6Kql?NwuX@!8bl`3IoO}x_s~%K`3Lgi(9x2ve5&$W
zf;#T)*fTz`;~mEbW>(fluKQ|D*%cp%$Ld*GyjcyH<)G5FzTkxT5WWw^)M&veVE3V)
zz&Fx}1m}S$Dm>qUri8giCTMH>uds5-jdFC#ZP^(6ff-9QN?D2WFh{`4D;ODT!=7VL
za7A_0IwOB-SO0ffIBfU#eQ<%$dacOBm({^RPm+oDA2FA!FL!Te2any4BW*uI-_U+o
zY?LYnrQtGz#%m~EJn|%ltvv__=W#=?<{+|E${^Gc4Ah`w_}3Ur_8=NDs9^+<PWrG5
z9NDD6SdT!mi(%}H;N$6TOt|fQc4alaVdIQ6i0w*!CdW<}k_&Wp={lwOu&%}em1Qlk
zd;;4a!bq+iLlZ}#^@I=$HKM9&CJNRdP7XbZK&YGt&1RTJB?P7LivxrJHPkw|`UxC3
zaW7`oy&Yo{-87OXsHpxB9NXoD3aGk<P!xzq%h6bN3Dz~uMk0F3;YA|*I?p5L14M}6
zl8RiiVkuIoEY6%6hQmg|#0XMO2ZlS2!WVg%p#)65o`%gPXnLfWL)_;eLWAu20lfiv
zZvcmTw!(HMu()y^^Z?)!m4<^9T|He$CLIK61Pdx=BBVz!o`myi8F~{yq!dT}ih_%l
zS0fsoh5j=+v>hA5nZ6YARu&?h1{Z~5u`ska0%jwqYL<XVC8)|38iNi-2{Azf47MeU
zzzlH3$FF|<1H|K%7#{3}n{zO~{t`s>0MeEUFRMD!LNPrc(knnZZR6DGA=FgIu;J~^
z$YmRG>SPKXrzgM|0|<wrn$UDPe^$;8*Z@K`P$dF|YS6WEt|%sgI-|*<B)0wh`$#2+
zkr}fQ4c4NvIsq;yJPu?X1F5Y3#{&Z4dz=fHhKAbOIL5|u=<Q9Rp&@}Q*3}jJM^{II
zn*p5?D7=`M#n)A((315;p*jGKtHnmfp=q*jcyK+Srs7iQiY_Sz=RSo81-9VGcp6fc
z94bw3>Nq73&$kPlGcISpeP_lHjRep*qr3>rbxI_Y$VrEE38hqCgOlQ+Mji)BU08xE
z4cbVtb_)cIsuIfv=kjb*n(hk_zc|_Cd8Q!eIQcj4k+T-C*~m!2vM59dt5(fHNBa=^
z`chC;6@h?umT1Z$8UYccm=?tuj#S*2<wm|plXXe*H30}BFSrC%JkZN#DCbwQR#Qn>
z1OykzdkW7u)<j8}68JX+Wb!zfagTLRWKZOFJ=bi`UNG)1TvD&knOlRNo)mn)q_@1c
zm=7g5#eHSf6cExC{I%U!5@#;GcXoaGgfDNVluF7X<WZaZt{E%~j(evMmtagiZTtgW
zMs7jDM4p`-y>nH1tWQ0#HyM2R$1mEyeXgAwnu%yU1lRM6i7w9x#m$KHj5PXWKPp=O
z6%Q1{O$b`_q8!L@QT#ADo%97`oZA%fc-P=d=osDh3%TU^X!{$OG?v_IDl;k?%5J_t
z8eaP@P7Elj$dy;dbk|i;ELxJ{Qyr>qP)apKE5aBa?84Y^2bZrDUdxY)!A2;R*a*N#
ziKv)VP@TJZ<nwLE`o{0u?1;{u>4eoZflNBCq)5zI*-{&S|92yiRhMyUK-Eb`RZN`_
zg~}4EsRk6yq-E7%^!Ik~v1AwIFt`}1;;h#=m$OJNDAlP@bm23&&LGPd4*zGy-nTW&
zjvOm-?dgGd9Y7{;ePvOSFxRiCj=%fc;pmE`svef<oKsbuYHC1L)c`H43!$&8gO4XW
zOF+2G1!s)QxdtIYnfE@MK;Am>c;4FoA6fV4PKLB~f&KoNKqen}btEH?L~--VHC53q
z_e5i>ml?qX6jgCeGt8P=qUw<sPV;o?1Q+lq5s>X3oaJD<9S3suOW(*jt-o~m!1!xd
zC&k2`Iw#&Vkn;hOU!(fUmWt>*?}$fMzbhP{0mbw%I?!LVI%8?L-kC!=yY;@jbNDgK
z?;1YGy{`=2#2Z!T&A-b2-JzMO%&LhRE3Q>hzmX`e<FdZz^4{@ZS*+`ftWSST<^L>y
d7X0bue*iFf7Wc0`tIGfY002ovPDHLkV1mqd2@U`N

literal 4533
zcmV;m5lZffP)<h;3K|Lk000e1NJLTq001%o001%w1^@s69zTe&000quNkl<Zc-qaH
zYmgjQb;p0_-tL~q&g|~YKD4`fuJ!Z^$zWSHeno&W1QTOOkjo(jRLX=DMTLZ<Oo}`(
zPO3rzR1xC}Pys@!k^luoQINzq0&GdfCYG?VWLaA4X{~l8tycS--FbEQz4_4d=$T!K
zd}OM&wx_$N`=0YZkN-L6!c{-J9YFZ?`3UUM*SL7qa~7ay@V0GA)U6iQMdy?#6etCN
zLP6|LsrqsKYVEsf`+n7Xb@Xh5Rmu|)H3s(J$&-&AkM4U!!K1dmzN-nM00WR8yy+pq
z`4GY`r93StM4}gqC<Fya^IZHo3PfuES3ci*zqCBNd2e*hgnlT>IV8dtM@K*Rt(ZV&
zB|#KmI@gTkoiP1nrMw5gf(1cBL@ZVzq7f0W%|(ip*n(>UprZRkA+{!fD57Vy9=F^R
z|7|3Yh|*dq4?%<2Z;O;ZdhFO2X5zv~Qy@#%x}DwHPyUZm?k;OWUqqCk6rv=qp{C}f
zMYDB;Rzj<RL<|K)p_O1v9p&iR)SeODqY=b{7*N)AGEQhJheSEQdF&W-@M%k=27o;Z
zM3nD+wI)PWM7e_2h?4lj+u>j7IDU^77p>#hr6GhuVT_ImuOr0keiR7-C=t<GL^(lF
ztU69+7h(972#p66k!S68;E6E5YS#y~_C9HC=!+<CxjipOf;R0-%-)4)K~{)NsP>Hd
z@017@#oaslnVhR)4A|Pjr3Km6cPgc{4Fg|09XtAZ?;4%D@}-w|?|#Hl&~KxVAs+>-
zAnK~l+NOQE3KD{jtTjk-L;g-~8dwcd)40+o(O9c-O~7A2yo$kG3X4Wb9Emm|V(X|K
zSddS^BWnNtV^+g4+qdS88$te7KnYqA(|)T@v_+T|P!sEb2&$Unu6KNr+dum@9)0iz
z29ibgzc7ZXX}!bK{L!9Oyyb)U(Vto5m80_%OD1kkEBIkuAg!<lrM%wWKK-q!smG@^
zKsvMb-AcLd!CE7tl(dA{m4zT~Dlv0H1nXyb(><T$!N-UB??M@q?BIj<?qYqyviG@@
z^rRDf<xf2BfB1ST;V|2_yv!ZR1)e_wvlSH~vkVDo4HSrRblSBN9=?3}r@zzysm$7U
zE9LA4Ye1`Cg@i)kXb0CgSY1D_Ycbzt*G&)ev9E3BnPQnEr!^PK!s@ioJ$G%SyE?^_
zKfl1i!-nkaINRTFm?!`0H9r3J1Q#k!BWkULL_FGoGFl~-wZY-bQ$N|KAc|Kl_J0i|
zlqjqSy(yQ!{J?gs6|9Z2w6T_v>;916`tk@*1r_$5(YO_1`XYR3!sUe-%Lm^7W*&Om
z2F8~(pZR8*$tU2mdvnZ)8@=OKAt5mz6@^0kwWtN@?1tS+Id8^dL`1PdyceQKBTA7^
zdp!K1?Y#dJ?_{Vj#xIZi6hp)2?g!cWclYo@uEGmv6nYlIMUaB9FlTtV+hdRn@5`>^
z<mm~HO%*tE+U4Xtpfr~DtiQ4lQTmGzF(%kIIkopdg8@YnwmVr{f>Tj8zP>Nbty>q6
zi63(DWP!z?%uwPtxc<ZUb3`hPjS5T)!2*~9gar#%VB)2K&l!gwtX|Kjc0R<GR6jpE
zZ}6?cT17`K%PXa?DMU*OXmCCNRlCVvJJ}f%eShxU68C-NEZ_djIRE(E5<1+-&G$aU
zDXHS05u8gxFk=aqfFh_RP>Yb7*A!2}*RKoMcXy88>3ts>kCbEh)8Fgk^Pd_f<5)y!
zgyI%+Y7hIWPBg)3;g4;Zw@y0{siCGDTx$t<_(>nF6vM0E%_VWE`~utssI2yp?I4Sw
zOQ4EE0wFjNpkDzyli(LO`)u33p6f1dVcZ^NOV2a|>Iym6QmWLHXr+y=NK3?QvhJE7
zP1CX~=LykR8__arEn<a)W65`P(3|XGz%6j$=~r2touV{j$-nD1!q7qioF#B7kj}!{
zm#S38X373niR0@w^17{;DJIWTDJJ;y#{;wx=5-RM<}cL9X-k5xM>SjjP8^Zi!mWw?
zAcjO_a*)s|2D^t@(>2Usc9?u>2+!@s_p>aO0xnJOWk&rcUbdf1`Ywv40JUiGDxiEz
zGG*u<%A(8>#uvX&b*ziW$Aq4)ENik3GnF!nL8Rr-5KFWxAt8<R=~mN<eqh^@of3^P
z@WyTL<(AF&K&clSz)}&W7olQ85JRaftRB3d$+2_H`mf<;AW;=m(UJ&&5WI|#AA)VU
zD&ITk;OI1W4n4@$RjbK&E#W#dRAidz>J%3X(~M2eaQ5;%^W_zC3Q-D>cGIF^|F)q4
zp=nMm4&$m`CTGj|K2$0p)u4(Mhh#2EGAYbn_F3Ec0L9Wbu=xc%vN)BH1cDXta<F+b
zY@VBgXL9UZ^ARdG&A9kXPA19dwe)qZWw;w|7=&ymOc&4b7ytfUO43B4VP>{odFq&t
zs93owP1~y{zk{d#jjr?%!vjNHnF=UZD-<hbAVDZ;*1X9<F8W+KK0v<X9&~?&WF-q$
z@H9wDNDsk~wzxCv*wB3^C6ywx#izU^T)tc-ofKw^!uTAdJt3EO`0?{+SqdyVvD{az
z#OYF_U~Z-A^;}{R6dLK6W&e?X=Iq1*#gZ^r2=RjyM!763&2#$j47uA~Cc-H$&IEK1
zB*^z!I?~XQhV*L4uK`wBE(QIJEnG%!3{V?{@w0}iO;QOHEcqUbOCDCc{N#nh9K7@_
z%5%V|*0LcMf|rM15in9KLmOo#RzTqpX2y8-_+#9E+aKU|6gYnVCC0}lDOI}R=yv8Z
zS%%-)%lu`RfgXpBjA5o9JPiz4`g205BurFYD(gMWh{OJWJx6K$Fq(jb>Y^t##MX7I
zIeO$cqf<|l&ZV2VO(d36q#2OfqgI^1#6zz_gMh~6=AHM^(K|>!+0CYH8LHJQOwW}V
zJMVJ-#S+dAMgP0H=<9}@gs=u21*#AF67X8WQ0?ty(*vtGzTYrDx<F@Qnzi`}wr%jZ
zVM~D<cceLfrpy<A=wMC6;cQD{jGLBTo=0d9w)VI!V1?K9f0#~vGiOd$NG4OH6KT4;
z*05;}-0}Jf38&10x4`smiq$Cx<9VnpF2N$uXUJw0f%s&17_Pfg=8nx3ZoDtgmi6yo
z^7$0Am%9i<7(Z;eb?pZJ`0f;6*!vu!9mGgYn3zDe9)_1it*DdHgfZeg#=yqT_tKNO
zmDz=bD4K;98!D<*%gi*KPB`@DvaDZaxe1>Ew@T2tz~18pavS?eO@}0Z>a+E<V)eEJ
zn|8WX`~*|8dB*49_$-|M-++9lr7Ho8GnQL6-^y>_FvkyGJ{@r{ORKXtOW&9vHR^~+
zED<?aYw1h8p7p)=Q7F%%mBw0&Zwz4xJV%jEg7z&_Qz3J6!mDQ;wq8kc=$WTjOlRrn
zo@Gb2o5j>RUOEL`N8#dI;nJif^nI)WrwiP)p%f^TfLP(h69M<GeLF{A`!;757f_Ad
zQ47Nor%??NoF)-#_=-l*IHns{Lpqhkagrbk3m6O402Yfvp#+sc;a4q=qxspvWBkW~
zA4BJj{OrXGeB;MYb9zcMT`-&;HB6kfxDIF~Q9a`+OeSEiP-W5AEchOi6^G|vGZdHV
zrmkb1mY55)Iy=xt;Ug>+mnzRvJU-8=uA9ksZpBM<qQ#549t0R`2m+xDsHA3QvCI?C
z{tKNwgH#qZCUh8`c#e^a_mWHuFf&`_@|a=hdWUkw*2uSzUF9-;zQV%ndFBciD3mWU
zU71987#ufQYk)ejh$^+hO05*NBu1TU^@t-Z$tWimU%|VwiZ1;+y1E9*cW)xoF@U2T
zlvor7FQs|r;P;rRo?=V?TL}qKDoG$^UOf3DZrSnsV1+9e6@%L%<%NO8%qynn&a>~8
zZ?Za@z)Kqn$sCEK+g6828?|4_+1sN+EHNq^#BtDRAE%n-#MsZ#6Z`1wSVeDc6MeZY
z46g3y#JOh~z3_dyd#)#$7$n4EjUtm;&zY%x3{KoiXJ#W8C(bi)ehq$6<5vu+q{GtU
zEPk-SyKcUdDQAYKUJX%7V=e71R79jkpA=}-N>Q3UqgD+_J?V%bxa7Mxlg<xtY3em*
z7RR`<_%x>`p2izZQ7E4!mF=N3wSz<=PiQRGDiY2hesYfIPd<hwiI*{Ky5S$lB$B8U
zRDu%S*&H{nxs7ePe#R!R#G(@|LeOSf%MfX8?<_x#@`**en!DdVf?wIn=&?yopP68O
z@e+n9vR($)=_H%lgyW_$)`Arrog*z9si=!oDh0YT>qvBH4!!tOT<vn=)nBrC)ed^Q
zdbu>?F+Zmx^;ublM3ZqyY!uN(<7u(QCg+c?({RjUsY0o|#LgT0*?Hp-XHL&?;?-G#
zu!`0iFOdVOnT05{&XRHyq!L4@OoA|&=0{I_lc~u`IugC)IyO=%DM|^rw2)%9=mCD4
z_NApxY8F;)TuY?2CT@*jbx6S&gCGQ<<@|*ivY8~e+&;k6bimAXNFw1Pwdi88SPM#d
zD3z%3IE#c(F8B=g?ZOoYEkb~%7+9{9T}pvQblA-1EvD7l7-<Q=Y8i#EBOx(u2*w&J
zl@f`hgDMF&G=za=so>Y{so^L@h&0AZ&6irhaXQeh6P3dfU`0puIf~hmrD{UZ5e*R~
zZ6!urvCC+@Zb71+eBv4ag>^$_3+FlcN`b+FZZ>Wjzz+iog;K4qrx8s=S*)!MibOD0
zB2%*pV}!tj7#p1rEcnJ!H5y;LRII;3dsZ#;SrKWcC~8?v+&<V*qOk%Ca)`sfNHBUL
z$A*nvY}?jHwlhsNSioX1)}rdL2$6Y3Mp>Io+J^sy)`AE|M{^QKx;a001d~=c(&SSs
z513ZyqD0kb`|Lwner)T0lnyBCefUem96!35Q>PZl^`r@WjVMKELc|zc0gJ)f5Q_mT
z(f_)+S^*U`=BWAvl}jwxBe<PHN_S&dFsG~3?6x6@M!8KV(rp@OB2@p=Nx>%05tJ`N
zd6?O$tt8S}l%uf5G_)>6<`sPnu_mbbNmS>Al|{mE8s%2-I$YA}{Ic4d6^1<#ji)~K
zavOqJtIyR67FiL-c+a&qX;LDPhR~cKD34Q}UrQ=ALL!yJSkSH}(IJ>Xu(pb^L4-<J
zCJ3i-+z=-zq&iY))w!(HZXJv+?*rRfbg`CmF+rRIVdz&yY4>VK&@xt#Sk01x4zT77
zh0-{s(hx~+Gj3v-;)MbxEE9$$0)GbWmT{7nR4R>jvdx8ARjXRnwULNXD1}mCSPmt0
z4#aj7jMy!k7Y=Eie1kE85mCC?OIkiBSw`fnZZyHIwS?u6u;LL^Esh(aJn)h(+RHTS
z2~-VPVia9gh)%6D_ga@Rbe)U}!qWZ&hYsAmXU}#~Fe31%L7dMDTB0#<+bH>(4Q1V^
zDzOSBE^azaD(8|NNRsZ!kji$Uy^d({vDvz6)IIg*>19*l`pl&5-B!dEME^~F&aPp<
zfjxS9`l~PJd)~O+b+bFd(61_`^wousmik`eGxYitx3NH7>mNr*L~&oY<q2sUuC9zk
zgp~CYUXNQ17QS)d(3>CIv*$bdyWf2vtWhW{@M#$tq1&49Nyka=3jJb$D5=d9C5{9w
zL{2TwJB@CKzRGTfm6DxY-JDPs#0Uz{%j+OmI_Q>*Z@K+FZ!10eD3)3)g81H!k&%z*
zv0eY9mG>YB*7#T?6trDltH^S{iA{O0vL$0#zT(<Qh!U+GokqmP82@WacK*)}9=vy<
zHg~WqY^rJQ?HC#P^zSOXj{&<JozfC7Gq18y=BgWR+KA}#L2KM6+6bZr6P66(JSCXV
zJ$-QZ-li3ay~Z}D$js^jZQuU)*DI@U5hd%yT5GKcD!yHbT5G@FP;S-;%eOPBCdJcg
z*|w*)KD2dIQmkRjbDZb*{``(nfJb;lJzCp;^8ec9wP(+F^sm>(Gb^<<t@!yrTl#Wt
TDo3VF00000NkvXXu0mjf1*))2

diff --git a/apps/desktop/src-tauri/icons/icon.ico b/apps/desktop/src-tauri/icons/icon.ico
index 24989c312a7e8339bf7161e65b4ed9b7e1e04240..1236e0139da2d1f09885fb2adabcd90740cebee1 100644
GIT binary patch
literal 161653
zcmaf(V~{4%vaY|jZQHh|F>TwnZClf}In%an+qP}<%-(Z<-Z*DPRMdKEMO8#qRA#=J
zD**r?00ICJ5%6~q0;oU$fTzDRRMda$4GI7d{5>!+|1k|X0FVg@0N~^QWBI@HA^5*{
z68_^bC;$K*0{|c;{l~vx0D$bjYm}7#I0NqQoE89JWc<hY$N)ee7XZM^`;W=60e~GT
z06;+CA2Z_t0AQv7fVlWS?j!*KID!BGdHH|5LInUk6afJG`u~`l69AZ)0Ra5{|M8hR
z000gJ^dI;;2mv8zK!6(qAV7q?tQZ_LHuT?%a1!Feihs}l`2vWLf8P&4aQ|%p007@e
z2n#B^XJso{i7Odk`cAt|tsYK{S5-BwPPo)M$4HJh{6cmPvULv1dyq>56`Ac8ip+ac
zQj8N3Q4|8z>Cse<`>ZiBX=0Y9V`Itwld06aHZ?W%+NC}bj|9obue%ld?3H`%qnm@U
z!!U!IJ+fR$If*|_^PFtMc-Gkc3l%KU=sW#r4JJ5l7$J*d0Xl=Y&&AR4`7F8?TgZ=z
zFxcNj{bf!4lQ~+6P|V^or!yFF^Kj<IBOuNy*^I`Tiute`zu=2E33Y^xr2p`B=+lhA
z&5_scO_Zfm0TDi>PFrTH>A_=MxAaUW|H`*oE^3sJR5nklk-4ei&#7aYZS7gJp2yvh
z^y$RURNWF|R!BI5+Rnos#dqaDLpb(7{FayT2y3S})6`4U=h0>UaJ?`?#u)?Gyf{fE
zaqcL2u)g)-^(uTwROy&kd+PV7=x>AVoVEEi+#S6cK|#?f&L5U@4_4{A5n5*riCAk$
z+cF_g6VRxqiWxV@I5DoQLOTgVnN5xf9B09s2%jCIpiD5@P34<ds>fZ&jWP`tk@51k
zrx|qk3J6R6vT6<;JcuP0`h;cKhVF|tn=Kh8&?}I%HEc%n2u`B~PKX;*7-0(8QH_PU
zbwp=Q2OilH_Ggx#u~$Ks<{d9>BwEoZeB<N0XJJO{Tu)0(V0nBn`_oq;m-9oc<<d8p
zJFLSWF@Sx*UoI75H6&rDpHJIoesS&SdeH>x@9!OTOAzR&G5{w5a#M54>$`p!oSsf2
zSUl=~)TMOOwGYqQ>aC8A9oi8!OOXc36v>l<WhU8tuo9_iCgfF)*X@Y}48{W%z7SiP
zg2%YCtKg=FXUBm~1{Yk{fFdnEn69~&&6djpSkMF!V}WHzU_=)jpdEyw%>V~~<n;+>
z?n#Z$X<G3?e%=A4ute2DpKQeQm8?gfGGFRn?pj8~eFQEbMHIH{^t;$X+Kz2YP4xZU
za6kw4%PF^Mf?dzqsuk{B{dcO&+C%pX7=tuLj||Dte@#t7L{_*;NI&rZV<`V|4XFP$
zl;{Y&zxE9J^PizKDqBe_i(&Gycs*YwnrPUEfCYdlkopJqBHM)j#<nUr9k<MsFPB*}
zRK&J0l<<3qXK!MgWiMjN*F=#?np*&l24gzUEJ!ND#ICT`QWtjXho+4+Y4vJ#E7CwZ
zn0*jS%pqXe_D;{b_I{m$WrRpd5Sv|qKj4P0WV!a%Zrk_xP`jYCs;W@pbZfPI7MX&0
z;%yGO$N3N+OwmCYPZ$pQMxvRkr&YRrx-|R2HN_>@iHQFh<fMDQ7yw-#kWhPmUAB4)
z1DhC}hVVw2xf{NG-<9ZX6H3QE`#Lq24U%>I!ONcY9fB(R?#pW*?WC(9ulr$_F|r}t
zm5Ax(z1sFj(175I31pa%d_n|#whzfm0-dYnpL(Bi7K5*;psTcBUdg?EfX<2<Id+6X
zzFG%os#9hnqdFL0ZlmU_xbJw6>}p4i#=9@5lRM?TAAG)kc<yb}$$>y{j%Ra<Ael9d
zMk<^VEr+}DbaB>Pe*FlT0Yri`GOI1-HP&)-*OVr`9>f{7_Ts9$-h4jQ@7{Qk$@tn&
z4>~v=-+|h0b9z4Eq#g(G@K(+kY^F7Jw(K%gyJ_FS!P2D5F(3x%Mz2scNLhrmdbYCB
z9w(m*zm6}x`-Q5J6|Du-uKPP7#U%lf2pA+E9ymNGj)8!$XVR<IQaJSNO-np2`NE3k
zF;48jHP|bq=gnx94ufd}Lt3RR>ggmpNTWuQhszFCzenR0Y6+_GJ*jDg(09{SOO}V`
zQX|{0h6dG<jrN7=RB(zWhzUQ@=;p;NN|(j-$6*UQRrE7>h%(BY_j_#=bmKE@JG{$1
z)kGd+#x#`ZsS;X7^Md>+G3OK%q8csL1Ct90L*|OwCmDy=^%3Ypse*`%8X;pbF5aMo
z8U<ChG)vg7Y*xMvRn~Kq=6|*>HhwpfN$?<K!a0a`mc)~#&p3qW>*>(Fks_6CMBuh#
zF?Igh;TR<h7HX6-Kfl4QesIoqd|qUmzR!;*&r~XWj&a0>Hlf!g5lx4(q`x%9S@IS0
zd;S2hp9#upV%;rkAlfZcn_=6X4RiYn`%D+tSBOE)N`o(q{EFl-vhXFhZDT0NKeQs{
zX;O$rgiB0|@jV67zBD;GI}<hPuTFxKTuEwo7=lSZKw~_VAvd>iMM<bjDYRcq<UDRe
zD2kMCfgWm@Kx)Sd1b9}yQm4_@7-yn1r_r;Da30!oC&#7vP5Al2$~TI3`U)e9FcwkL
zDyEUtSpcexz?np1B4nY<);M1%3Zi2(vw#1NA4lqi{y=Fo(_`S)yB0Mo9;KxcHpZrR
zVjOB6!-N@+LQx<y-3N`0gn>oaNxedVp;*seV*7RiJPg=+o<}DQB#cr1LV;1DwRdCv
z2@RH4wx1Svoedww?u!~n-{>%Mzja4DQSqAyd@r18Q!`HG+I7g+wbyi|MwT!oj6IVl
z{2R>=Bu#FD@=<|{`>$^S{4c)eKQaXKzrJV3jql~JHn{uedpeaZtd&(T`L4S-?6zo4
zQmTGxS>}fX(xL_F|H<$VhZ#ZxikB%>F6<3gm`y9`)kj6MNg4!86fF%97KX*vL<<su
zNs!fQ&m$qGGf9iq;AXLFU+%!7qh`bQbNAbDTXx!V>$=9@A;96_btH`aKEEm)zgB;l
z#w6)=+{o=Y-h4Q9nl!^)Z#_JOh;B7Tz8M<wQe#>gP0{1`QGELFBL=$aFx{TdWg0U5
z7IzuKwDLS}Y#eIqetx~iTA$h~ZGVyoFb;ZGV<os=d2m$GC^e2^$bRVSyW}>4@g5al
z%(U>ZwW2nR<8|4O)HL$@Zqvf~UfjO(PVqWiWGQA^8aO*vRc^O&y1#x6tR3~an>i?I
z&~8^zEw+{%SIdzW1Hp@;W6;&K*+6nP;9P@Ie);?fi6GfHQPDPYVE%kQ`zQ9qx&{<d
zL1bUY|BzPySAeLKN9_d>zMCC*mEX!(<8|jVik;TSx(UvfhbkhdxhA@q@aP0N6gyLF
zE=#Ge$(;B2+f=`vEl$1VBaAio?8FaAn=AouJF&bJur>5$^-Y{D%1p`#z#@>ycP6Bx
zHNL@YR_YnwQU)2hsv<~E7%j+V*AfVUXLXC|*M8X;sUTyvG?~pIdb#6-pW$>)K`n}o
zOXII9^(IS32jgvq+rq5?`{VR0J<m|qPu@g*XLRPS63>l<P+`cIQawRUe93ldvPmTk
z7CTe@V^^OAxnaEg+r$?lL@Ox9?c4fq<@I{EMeRG~!as;5t_xLdRRBtQ;E!8Q+imrU
z;z!O&M9fhx9R8K<n=h2d`y#%2HbiJrVknWw49DQIL3*;s#Y30FL)C-dE+Vxk`7g|6
zw_#&uT)5AZd)0HvF>=Zx(Z~lc&L-0FgPqqSDUaYS0ppk~q|C~O>GoIc`EpNDO~1DG
z31~WXd1@!M{ey?g=t|56uJ*-0Q2(GTr;F<uLAQ4=HI#7B!{Yg1C{f(3C6r$$!MotU
z=s&Bu{1Pi6-f26f%cLHf&@dymtQ+Y61=b3kH!5F*DBTi3c+gCU3MxsTIJ<v{cuGXc
zgCW{V6RH#@qM39}lnh2bvCX(TyS|-BiVI}ID#ch{U@+Sd36T*PuOGNSkwBWUQ<rXD
zg;Qb=GEZJ|P<Ul@qnuJ8JlZdSnAV=8PiWm|!CzR(!%1A0!M;zdP=*P&U^|9k=qOJh
zTc^|U!af8DBblzUU{wM=R)ogF&fDQ)*?gL#H(zoP_gRQqRe`bR&iW+~16!^HM#0EA
zd<*#)uDFhscP|agwWn?-4Ic_?ZRk9?>2ziO_K^@+we`#`v}-GPfM(eoj(HhxZ+L^s
z<ye4ZG;T)p8*Z;X*DaqlcXlNYt3a4)Rv20Qk%n#y{DQB|eRTdkdqbdu4&(=Jz^tLA
z7h%SU1+3WWFFm)58OdKmztBun%rDnq<rL`1aKo*X$=+l+0?P0cavck5UZ@MkqriWf
zonF-9%9eGd<N$&qF!Ih;m$M@L_v>WMr>VxZI*;f#JjXxtI$**&APnlK1T1<dNo9Zn
zT6df$1m1hJAj#KfH{U^?F1AI8i~G|Qc@b`%j-mw5ShbS<A_<M$cS;J*N1oGaT`w<R
zI>;gezA#D4;gpvJ1WR-}FqNoHiP3HoQ;tkm28G7f!JHwezzaJJce26=$VXJInA0&6
zq<IsdWy1Ol6zUYsxeJ3Cg#=lKIj2Cgsdqd$TzFuJ9C1}NG@+<ef3rRUbBu|Drg$vg
zgy{LXTwfJJLTuP7G|U@os#3zzaWTTDr;c)>MJe`su*oRRF_R&am|O|;#nw~Vk+)uO
zbRcaeg(*?iRBbD2dR|(V7h<+$DAStOn>s}!`(E&r1dJt-nDU6x?)3gt4H73`!+Go1
z!dFV?e-tyr4A}W78qhPQ8TC3y?%1F?$DM*2!67Lqyo8ab1CogrO!46%8BK|<b+*C?
zdJ<b@5WqD!{qTrK)et?dQs1wU(LsrEb{RahV;??j>gUG6ULvxx_LI5(UhoAIChoqJ
z_ZC?BKSITSGF1Hkh6*0WssaE2660T}SXA|qS6)W@-hAKc(s9LD2?0BhdPQxRRV4z$
z9x#?JBzhuYi(#>`F)XskP-SWS9w;)k98O;&w<%uajKSu%oD)7*j$T|SDGek5ZNv-=
zCoG|bylC^L9lz?D_ToX1Co;@5=AJ*j&UM>f?>u&!zRvQR0{Y4ogbW~@iGNIZJ#;cX
zK5Cz2`}1&*gNq<E5MPYu(Uj_oa%RJ){A`dh&i3X2>m#Gm#iw%a7xIk`i6ojkQe#~{
z_o_MN0e74w2ExlUB?1KrE?aq&)$B0!d^dmIy(vxP`$KL%3*Taof$6}lnyMqk=}Z67
zzU07%>wshQlfbEbQHWO-$HZp(Hp2zxdA)>Fp=vtt>E6%g>vB3r&-MLtmEgsv+F@#(
zA3Ch7LvK;ijapMA8yVVu>XDBE^`4(!NBcH<u3|&kTUDOha|VN^yDskjvg3KC4e0*!
z_LXftmBaBzCp#|nTCt@`J8I=eY$Wrui-^Zf8FJgwlt+K!;xIoO!VjP+C}F{Yq35Zt
z?lQyif)5J6^th~teT`MQ>33hFN?uGqi6q25eL;U%ASglLW3b*PLrGFZk6J@Pla04Q
z64$n^Bdujx4cjU^vk!OgGEUl8OEG&!S4-`aTpz;N!JuTO#W|n>%;3mR+^<3drXwT{
zYMOu-4o!wCZf!=l@3lYYTU<*IQ+j9g&FY{q&P72^zJ7*bi!%4~V~Q|JG?LJB_-{p&
z=*q%@)@v~+<7O|1Fg7s03)Q0`q0~*MH4*+Q4U)@Sup`S}=%(cBb&0qU9R17h8SSA5
zgzs)s;rrR&uTIMh?!PTWBq8OE2}wZ|(Bf3`4t`bJ^2>9W<*<zc@K8yaewVZJn6cuy
zpHU%ITbCgiw?y8hOl^8`F(?UY2IfD}Ob%;$H$u?6WOF%P>_O0Vf&iIrVb0$>>^V6%
zl!z1nUVvwNW&O78o4a}XqD!##^2TeQ7?M+eUvE{mb>P9{*$V?jAZNtEOpJD}sm6bX
zvHj6lx9rCc^sF8z!@--|(Z5AO_+7E~b$)%-^<jM)a~A)b_@QbT6crcNZV^?Bv%Q3D
z=%B?GEU=7_Yxf-8yq7m<s2F9@&vB^kqC=fi6D}D=K)RUK27R7HM*{)Va|pbxM?M`I
zG{fJ#V#*dQJtxt&w%h9pd{gyvqL4hbSCoWN$SwgnE!jeR+o{bk^58_sRJMByZ%bmD
z-EN?WE&2voX!JswYaFl8^nh`o7>V@QJ|zXLfieL<jf>LD2x{~0-EXFw&E}6-CcM1N
z%{slSUjBO7xM6@lbB3a~cN7$7RQ#e5S*9=M{*-`Wln@Mbf<Z0ltXEL}@et$hWLYMX
z%)TR{6BwrfStD_PJ=1)|fe6^%q>tc4^^AO)Kz!nq0<Ti>tt$uo@_D=fA|hk}Q_3nz
z-CO=C&+^pN=a%PpkNto_qoiyYz>PPKExDdHR!C<QyC}s`dl^#m6S>G3vWC*&;Z;~#
z4k&?3@Pn0S>Jnn=8bWwf-t4#f#p$U6>UW=viOO!UyuB?oZ)isnT0I8(XKB70;|_<D
zXmGNELY^#4ng}5xrC^<ufWwdcYkWS~T1FHTdWwU5Yi)v=TJt~QR-3p1T2T(!vrj+4
zk+V^2kz;wYtYYuQ-neO+-HW!IvRed=`W4V39CC~&0m{jzQ5Kj9T+y{avY672kSjM&
zS|=*P##%a@b2TXAIqqN>nq1byY|^8}h&=`}c@sZGeh2xWW{B^@H`zOHpJmB+T_H9@
zlubEjdr!w_KTJeU{2r|K+IU^CkTW)IoX0}k2kl%#>N#z)QCHUm3&h;OtPpgwV^Bm<
zQrDv}*Ca9m=QL^S3AO)OZBx>ykbfvpcs*I{;tU&2kz)@X@+@5S!eI^n&@?_gZCgY!
zWv8#!9utK1xl<4j)L6b7L!%FGL5+!t8{?d1xdAH#_2}x3bYjeUf|mCPOt;0&Cu`kT
z=+xQ%L&8(;uuVsNPHEiSV3x$(ylf~e^@l+JA_<`oB6xCqaviF6gHUpzxIL<o08bbn
zo8C`DNoGm>s=)My$}QOpq|A^#u2;wzJlFX$0Wi#ov?%u^=Led?Ll|bpVrME_PmIE@
zF0kG>0#%8?%^Vq-Z0D+eVse&P8~kWVA94G3hq5b3O?o}xMWeXWQ9(*Jj7eQ=e24K0
z&O|S73}B3hoSd4Idyn|k)X4Pu$lGI`>>71C!mPd>@Rlio2sqWz$t)%?`NC#%r=J)b
zwJZ~&{hTTqa>BxPE6mJ<HSbbB%_brJ&{B7tJxJAV&JR*q5j(<W8-#g*!o$#fBqU0t
z0k*<Kk@QEdUIM*&%vjhQ>hg_->az`_S%ryk&Xt{7dYr!YfHrKi=`mSlG6{by{GjLw
zBiJKpQBJm4OLP!>AsIAQoq($IwxRF|q~oMk6h23v{SvK@FGZ&x*xuJSLprmuZzM8w
z+pC!@pD<5J$`OK$#_+_o@j0Mr7{jPDj3UONvP5U0`tgLE7f~pb{Xr#{-mhSKClz+T
zNn=;L_79AiH@MJT=1_;nQgv=)tL3CKpoq;81w#2OB<3coXey?c%YLc;0wtFWj?}k=
zjP$<W54hP@LlBlzWf3N?^TFO*ubc}eZJ{f@o&F{rysuQdeBzbPJ{5gWCI|Ig6A%Z@
zKtI8R&ede0T*jSAlk2hy+8|;2Lb=_nJUUwETM*@|)vI>q8q-ru^2Juc-i91Iexj;i
z;dDslT)HHu_{`nY%Y_<B^ZMHSZ^in5Nj(Yw>IuUC>Io-L&j$biO7{Qh2{jM<q(eO4
zt!JKR@w#>{R}{xIdn<o|z@j{Tg)(B2Em%vJtg^~s%9DjTSIycbkm9BlhYGaP7<6aL
zu(DZ6G_w{`R8TJ15YQ1Qa?|?f+wAN0SJxn@@HK8(v$v1h;p@*QpPcQ-uPv}I0zrW;
za}p9&71fcuOxv&cdkxgnW+~C|G_O>7vhDVY>q3NFuXmU3@oXa`5u#?-$%{}2-Y0MZ
zx+^UpA`jrexQ7Kh*e}N8j%cT;{oK2_ZqnwLv*{|m(Mj~-5szU<-^(Pd$(ZapJK8|l
z#9Y`vzj*Ipq6rSNrY&U#k8PIrV!-h)cOpp*L~Tl&t<H4_Zbv>pQt!=lFWt}%f<M(B
zoYie~N`yS_)5X+cb=x180s<bh?!m<7MvKt<t$k%Us;%Y|v$QtWRtk=NF&?P+y1Qfj
zSo|b%Iu?{j{~%N`b8Qc)(Y1Pq7`2}TE^%CO4tf04;^yiU;V|ni%f#R<&Qw}HdF#XH
zvv6_ry?Aot;F(r^wc`Dbujj<$W#Fx}S{fT(qT{^1gHeAw<DtPG{(5_h^vb|!#FrHr
zAyPm`@lOW0<5svsVy;Lnyb{rgqU&&*d0f^%KZv%^8%atI7W;KQyz8AZ%HIFbGlz|;
z&5{8oBPaa|`h$H<4QRj@$Ti30g`^e(aLMFh0wUID7*q$b)PRq-foOH{ko~;xUtkD)
z_Ku?Gu~k8z{9K78p@48)Z=!%@!^9pDbK8Y2t2CUm_cY#)b;6qXsX~95fv4)d=~QYi
z|E3pG5iNm1web^=MCPB<b+PRa9yEJ){#)x?fttc6l2CY);Zwr_Msoz_oaQ<9&$@7d
zhgYE@gfptnR@8G@4Ls|4<&Y$mN1z<R7U0C~t<Q{%kSbB_dKPa+Kh%`ulT}G~Jfg=?
ze;_Dm>ueMk&xBIdbDf+RYAZ$ix!M%7*;$DfZ`@s)Nj?QS>)|khx8Y;LkjYdEIlLC&
zj2=$Pl~!V<T?Z=)9Fm$<Z#3Uj*i2gh=HH$wuZAw20JtjN>$rEZwvefB>yg9I-F#4&
zav_ti0F3kcpG^Xc_3c(Ro}Yd)@O`a!>hKgM$umyf0cYX6_0@fSCi6eE61*2ynUT!?
zzFKNzWs|AqG_?#cf2SpR-}P`hx61thpkeb4lWMTpi0TBlok7~%4OEEC>*^L;anMFU
zq`NRynJ8}J_99ErQ8|t$lQqI6qcy_OceUcJypD}t%xi;&!W6RHz1-W`XgBkvJAj3P
z(|Mz#m}dZmJq_*Tj+&QI8)R|fTf#;M9X>N1#RKHn1P8gY20KMqk<+^dvT_!ASuo$)
zm7DX*ENMyRwtPtzF(9tqHh=lqUFtqY_7Ar3B>*2N?ojTnEPCx<)S9W>r5`Vr^Q^IB
zLwIqY+;&M`=(a%~fBg<F!$WDj{gW3j3BL(`P|sNo%d{p2%B~Dw=o~{_<#D1Hp5>14
zB_w(tIjoU7nQ`vpu%ChO^tA2rDt>x93oL5C6)c9nl*0x=H9mL5&QPSLodit6gloZq
zh(D&k=0jgQLD8ck7pIJ+ZNxc7IcUHjUuRsf@}3hRai}rTQiIwEEzePfnK&Gg#%6<^
z{jHzV&vh>AN-~NAYHw@gebaRGtGL=Wn%r56FsfCX`Oy<HQi>~6eb6FAPfX!Yj6O+k
zZ%cSrOJsp!3^7@B7kpqX5zrwyVueCHB#gTcS=^*OIcAf?E$Zre@>aLcuF|||to(hv
z6X8y}roG60m$0f7c@G?#a()7#Ks=;2v4LzYCAFZ6!0+fpPF=5aJa=qM2U|fP^Cn!c
z7)RO`t)4iE+0`jbCCt8dOc_^4&~eCn=9IRIEfjZ;<24fmyB3RNC-RjEe6Gk}2ULmL
z#PWZ~i6h2%(pU|qm?i`=c8Lh2NhqAw(M7M>lD-uGAcc)>h59E3Zn(tCrpV3EHYRu>
zJEVy`Wk56Xh&nQJ5p~fHRL45}z}&o3g#8Gfw=PKbY-79b`U0PU;cK>B3Rp(f1KI+k
zhDvE7%{nkM7T%U($d%o7Z%mGw{b0y>92*yW$hO#bgccGk=!(8wimWNKb*}{T4xJJr
z3(snNldc0{mzj^AcYh(1(SFV>RbJs4f`X6Ma7-0W^_rLc;uzk$>bMttB~xE52%<1d
zz9U!ya7W{%AnH3giwb-IBxvNGQ6_vv=(bo%x_#{lVIBo%^kX>dhEaXWCW4l)1&!iG
z1did*yO*r$H&(kpGFa64P1_ms;GmO3OFP&l-*n-~zL1JJb6<p99t=_xLl;mUFl@ho
zgaHX({6+vAj~Y?@RbkgHLLRv?{Q91BN<dMD$3u#S%gJVk>LoVz0u@qk%Oh7YrzSwm
zH$X`7NQW5=#%I5_z7YXpZEa@J4>O@0k*#--@<IBytcqq6kOm}?{7SG~VtY>-P^?~W
zRTCcOOGRde1IT_*;;Mcc39s=XI|U||upS~KGW1Ft*or2m%%tE%j#8LklP?4xpF+z9
zGNnrp7tsMOFr9IoCp+|Jv_7wh)|PhIfIRqDAQR<nlz{}vuPJpX<kgSa;jSkk;Nlb5
zpYi_6bA}M`4}vZ@m>jEc{pe{WEkAPivK$Zv{ZFJR_By<X3egwQ>eISwG8_bjmI_X$
z5l<$@C_Wp0Ww@U$e+)tGuk7~91=MGb!^YB-K0S%XNwx}5LNsF)Y6INX5`yBhl9~Fr
zFd<Pu!P@@x66+gY5tkE=YR_C8*zdijiuofTg!^9p>9$>62z<2a4^U64IXm+g6oFrN
zwUxw0jBsjo0G7nsrRA95ES6PUjiJueV#k0>q)v)-ITJV&FE$XnoGtuTPL=DuL6Q(w
zcE?xGAH(2N*5yL41MX*}`<Yiq8)18ffWGg(?K{xNCmly-Z>oU`43ccDU_Ty=WWEYy
zJoo;!fTrca6E-D^kUwi})-w`RhUu7$LFcu0o$1!zTm!D$kPaybvj{psBDSV(eN#d<
zQXt(z8Kl6-1FysL<v`lG`_<B9L-UiIV2J_fwd_wvR0pC6=6==9=4<&}!YhLN28z7O
zb$@>BGco=t=&pwP(ax;8>G++n>-jo3!Gh?u<Ivf=ClF?+5;@5vNgQ$MMEi}UO1f{g
zjcA?5ej*0)(3P9>yZhZjbasNhc=zge;y2b8Tvvpe*AH3;fxj~Af7=20k4z)|uMFD-
zq@@7>FpB?V*k-Dqz4EflaQAap^YvxdX0qy9avXX9V#14wF=!nVDlFLWjNygh9%;<w
z8dme~`L@$EcSDx+B3H$AiOiO&b%!-pTSXz9tf92vHBiOyOX4v*s5nq?7|^#*r$+wm
zt9KW<<4a-?@b%vkU*^{nQ(b&s+kClRQ?18YFdu%{uou`^X1w2Yw|#Cp&YCy9$yUp)
z(~-2F;0Edj4l&55_2sUeF9^BcN1~_5utuqZ-CwVZ&t}}sGt~-AAl*WOx}m_ZKh@v%
z_OU!=5eFl}L#O0R(I=E-sOgit@4{%Vh(95bqG#6mJukeZ&P`?MDqgJs`>Cqw{y@r4
z6tQOuBEsdeMMDHXQlwg>SvP)Gt)CI2VYBhe3iFc|T*uXZBE4+{4!X%$-=*TCFeHOV
z{@E_e)>4T>)831LSbjptCM%#YOjq8g@7L^@Z^$`kQWQof(`t&9o8aksO<cD)2I+1a
zCoRqUsD-%Fsd&CF%q&s{C;!r#cYc|~P!!JnbzYkJggsQ3o3V5^S;Y2jR&*Q9L?Y4;
zb>`!06~^;?<<Y#<`EVNcHRPj;`sxRxR5MkaVcVV@`V|x2G~2~sWA0!gRor<uFvKS;
zbD1vOkKeD^u*qoq9$-N0vC5dzWsK?cj6GE3PA|w4?%Q#o_eI@}f4@<4HU6W;kW;p|
zZ(S=E-$Q@%SN)sr8<g$$ksHQB=npol(INhqrGO;-LY9PO9_ST`Ar0^>G9W4#VS46^
zGlMO-@~DHmZQp~@ZMyZE5h56sc;;yyt?tf0tUJ@!PyKx-+=eN!XdI!zHTMa56r{x!
zEuS}^!uuQ``<?zIkfuQ<LcnUsh>=q*!~iNPLOInIcjcAtV|y;A)X{GDh4CEU9hB!E
z_jU+fUkleC`+R<#?=yb(S5<NZa0h{i5$6fh<<?~x99B}(ud_GucOS1vE^`&FXGO&8
zky=7Bj3eCpWJED;9K|i0#rHeTSW>B}Mt>H#?5D>c72Kk|iWVnU9rDjnk9l*IBOv!c
z-m0wfGa`#-E>7--R%dyZQp0RpV}qOLhzJsDL7Ohx?M%DBo>ono8}JvuN@^v#<Hk$5
zkEJ2T&O%o2bGHP_J_i}HPrS~wh)UN8Ai*Pn%aZWMoc|2XF+mWp97I$|9q9XBhKl&T
z-SFduKLSqxD`M&E<1zx&Q~tnER8;DA+)q3|TS`B7HWw$cv1?Ev{{X3DBqAk{*8pL)
zSXDoFg{imvQU6x8I&E7X0X(P)o+t^$ce=DZ4U6x6ztS4?j*zwG*X3qC(gtpBcydc6
z^}rb?ds29d+7W8e-{8bdk_=J&l5{I9+Kl3R*(CA(VW^5DK?T&43d9P&y8?ib>af7q
z$8RZ7d&$x6w!f=i4<)o_F*+8mp4L(rJB*yUJjak}_4#}Y5m*CP<z-??s+lGy?;}HC
zMdC0U`q~Te+n#N(*u=9UF8%%Icp}O$gA|hb*a0gVVN`M*fB3<r(nmYusYi>-T2%W9
z7}0m=S6R9u5}`qZkHNW&iW5>Sq}LiSvQIl1nC#RPCSs67UC@srHPVI=1ivntlo}os
zFz~j!mHGGG1@9}CWS*@zusLpvLL;tO0=fI%2ayK1tiCTilJE+X594e57#g7VwhUoL
zP|y#7Jn)hdB6T!U*<t^}(Zbe*_kekdeQ(<2qo#vorIb{J*wT%f#*vt#pDQj$Tg(F5
zb20?ZSOF|pfpbq0TQV}`Y9ANsmBwkqJkOqTx#xX7@@SgPRReXUCg$$e><qUW1y$OF
zYJ)Ayp*7{=((sH`5CKH>8@4Yj-QE}70pD-4NPuerB^T*f<^3+6rIDaog^nf9Vu%qa
zaQLyGK7^qgJ?O^$)v_uCI!-U@v~VSo;u>=`K<BE!_!gibd|b}Xu}0R7V^U)skmb0^
zEKo`4+SDM_KFBei08J#pA<zV#;hWKRA9eXIL^cuXvLZ1gsHBzTKl6vX4{ccdzVC}l
zwt*c7mE*&{fr>}i?-zA~yYWHd6iQsVMI(_AH<ZZ4gSd^20yZY_`FU`9(Lk-bqVIVG
zSW2P$PK;a`{UQ78#3Hx~AZbX4@-!cqr=Yq%_>8p3buxyQ;p0-7E#BATG{v~y&y~6n
z680ml><F8i3u{R5Y*V8LqRvpdt6+~K$j=^F9r%!(05!}pkf`aZL`I5?-ex@?h}mQo
zMmd;1I|zph$l;B4z7pF5b1pF0C!W52k_QeL+b5Rb@w6L>m=c<~jzk)njoUtF6VgpH
znXI~JD~)*W_TNQy4l(PHWBB~xK`^o#sKLtc;$~RQSo_FG$W&sm0|9b&Z}hUJ6uT$B
z0oC0PN)66d?&VrT2w%xH)q{f869L0NUk&lH`Vhy{G3A`9GO4d+p?K02YbuUP8QR|{
z+9sa^5{6E1`NF#1CSJ@jSgS02_2i#CS;e&{GnuTQPQc?Pkd`G;yQ=?y+3fQm!Exww
zn(hlcXP%t0A=1SM=h(+#q3s|CTL6Uuy-+xfXab;q-Nxi29b#NJj_a+wJ!|>SJv}&8
z`D$@4lMgA8OnW~rjNJQaR8_S(X}<n!AM1N0R%8x)?})@Pd9B-jmIxp0bz|j^Hg^Xy
zmIx5L3zQ(wSZ_9b4HTQ<Cydzr#a!Jw7+}F<s|D(4jC;Li7!##CBbj`q1|REV*S{#T
zU&ibF`WvVSlYMJNhP{8cX*sDg>{}c6)E#W|C!IFqFDru~H+Fsy#r=W`_fo`-$`5qn
zL5{-0W3~s_s9XKo2?l3Zk{>-UJ?-p<Itk*jaVNN3gy>7seb?1c1k>#iQp-v6<+QBv
zwS2rI<5I_k4Rt`r3^_fmIq+Eo)`9|${Yc<*d$iOfx&C_P0qfkWO>ouPaP5?#o0YL7
zsgs79m(mk<p7>-$Xi%HrOo<FtdO<2|$>Eu1Fl-Od<JuS}%xNHD))k$0?AA`;YcbV5
zqfbtlIM;z{5&7ylLH?@aDs}^W?u0~yQX&N-PAt=77zQi-C21S}z0SZ82p7RQvX1e{
zX?QjQ#K(hPn~qI+Cu^qrKm95BU1*C);;{ukWr%3iTOe(0SY}-fVeuIRQ$BaD;Dk}1
zM*a|@{t<s+gfsC?M$o?KYjW!b8BRiim%-TGV@xQDFxU*+YDs`V=2+`%lb91pXbH};
z-Pb;be6R+OZcb@IM?!vvY91wCK7p+Ph2n@6*9JNM;h!k)j!M=mDjh+O>}yA5O^gYT
zvL70yuqmx4cO3={h56eIuB0rot&N$oENZI@Qxw9*KJ~Z0Z7<d|M?S3{0mX#g3hc2i
z(3Hs3oB>x+jktgtC~`_*QaXz*;>f0x-~xu<=j!Hq=&T2Qc6oJmgH^HE&Z2QM0{W|N
z8enMmsQ^)^<=TOR0rf0FO7gX99SN45X$3x=^dpdp2-ZYPPTGCX$S9m%<g@i<xyuk{
z_ZqLwX}@=miFJZu6zn6iToU~NvNyavx{W6@tshLhMV9vWcOXwXBKv*<+^E)oI8Z$%
zeD>G+<j?e@AIr<j=iB^GvN$&rQPS{yub~&Muk0!`q38k`0S+39CL)jbGrtX;bGXRs
zP6fs5K#6EG1FVNSu#d|wa!5(me`Rgme#Sp!>Wy<=V*HTYhSRJ2)!D477Q)emL~EH*
z?*8*;q%X-tMc54WHZe@|!n#bZryrG^bTFi*QbFC+&x!W_UPfYn2Pk0Uv6`iuH|{_e
zZ~GhVVImis?sZ>H=uh(o7HyT-t25YTSZvQ2oFFHa`jNR8@%vLMO6zC44K_!$>Y?wC
zjPp>s0m6VPfRZ{ZCVZ8zI`ZN(iX80m#C&F=={UX=?73QZYHWoS^WAs)EkA{{IqPCu
zJm>!*#sAaOOZi_Z9`)5?^S6`M;GYyfREKd^Sxo<W`Z4`3eKpxh%7G*#)Q2PF4h0z;
zmRAC1wp#m(8y?JbVfJjIjHNKjRn-Q|s&uW?NXx9@M_WU~*+T6l;S9K7oETwRSe#IT
zkYi%p@Z|ZAsm|lZ=ZZwcC}3iG9;>B{?~3**4YS<(XSeU~@2>A{h?j4JhXS79IGAN%
zJbXRfF7vgs)$wE4O_YIeJaf>#*ZSaOl&{05b_|=U7C;niZ1l=k>XpxVPo~_(8wyY>
zFDEqrru{piUqP5t&aQXf(I&h~+=#hc6;-D8fYLjs+2Y4I4aRhw$f;c5eL~LrJsXtn
zG*>rY#);2?b6c*{)cmD_4q<=3kK4JAN|xPz)-dOBa@KJ3O((+k@@q&yelR>xK~fKw
z=)2S7$5M>w)GJI|3gvp`IodV$k)3BlFi2gy!8I77U%TZIa!y<7{qxej775CDH=_RD
z>p@i-d*jYw*wuG0#ju(*Z{2%0a#nYRRfI;Ei_@uWe}#KLV=7+b!!!6ilx^evS}wnr
z`@ySIHUG@pJH+*ep`(3pFueqE^7re(coxTf?nd*IVD1HhP$%PY^0oEq^ef(}v*8hv
zj$Vz@GDdfPrj#E0gb2gw+gxHwSGk<r4GB}%{*{@o)0PJR^UxnD$s^fLY~0jC?&JPr
zGxjPU*TKhAIL2*Z^=I8o#y#tf_v#c{uRR6=zMZB0Pl$*!Hb@hwDO$KZs3~Ebnb?&V
zRj_!TA<un1n$GWX1ljYiOQqo^+wL6zqWujG&zWS<6e>qjC``_}y^_{!VKpKLoeTd>
z^nB@CYtfQ{rm`c<f@}~n3L=|;v_BL(At=-Zu)GbI(K!#8>;2Dywzuq%R=U&v&5(R;
zmu)*=?dIF_ZS5D^$5CC1zu`4k!9c7B3D{A0*p=<6f#JpW&v2`**C#|Lok3o6WaL*6
zJ(`$+0YDs>6pGv!GFe(EnOxqF&4A0RWKliOYOxulIas&a>8QnNHR~}1reTim{K%RB
zuW}mIP!Lgnot@JSSYNMYJK1u+qwd#;Crb2X8hmTL+?5r6@b!|RLYA$TYZeO?oMa+y
zS50`;87cRc)Hs+3erwUfc~=#%y5j8SeW6-FrQMZ#1pQ*L-Szf+Uvi(%Dxz1CwPq3z
zkKGZQRCTsy&5cxRz}<QR)?hBC_<nPk-$Q5F)irNc$m;7acD3f>DmFI9(D4FzQC31X
z-Wdgw@!RKp^OH0T=sAs7F5lVv;f0tpVbh+Djf^Bk#vytzd(QQ&IN#Sdit7xvub412
zV>AWwpVNR_*0?4hIuHuAG;vNJ2e}x14Q#DvxNM5yOl-To0>c1iINEMl&UMQ1!O2f|
zUp0I4==4_{bX(nrjouCc@VfHLAg72mzDGQWZLZm;-Y|+nxLS4ZokDvb<UEilCmbM;
z#VCsAiz=xBf2U&rUm*oc8`Kb;q;N!A9ogEl6|*{iquq`1G7sCYp~`jcJhP9iS<ik)
z6kt9u;S>-&yt)sLE6SyhPfli@yLrE^TI+cuY0#l4AaC?I4A4Lge+HNucVwgC+kkKP
z_f|jmgGE2@-2&VL@0H5Wp`150z4ajec8kA{TAE{59%oe_nv&O20;mY@x<K=}FlLWJ
z$xPD4e!Rnz6tkR?d+46{SHPbaqk@yS_}4~MJ>At#f7v@4&x6PWr62qTiz_U~VqvSP
z?*uIa9zRAlZ(1kQLab{qM4JY2-$kZ9BK(=k{=~MqTj|}6kDohU`KO0<zG&l#Q30M1
zDN%qI)a03J@3cynBt5d?LA%f$glJt}WN#;oCQM!qD4%OT-DQfB78B)d3<P9gEXg)b
zC0iogg<6?|j421*M5g#EY06~w=OBS~buYs6<{mygO=sF5uC=*;K1*Z0=X{0n-f70(
zh%)-GL36vZu#6dfr@W(4;0j+$?2db#2ZTqibaCN4U%V4|V0s|NJ^@aQ9q<`y%BB27
zuZp{BwQ#&9gko2=8S7NwSiFF&Cqn#U+7pPg!sv%fqf81QK8xa`Sk>6r(Fw>!7u@p6
zQM_<^^*t=DjE1PACGxd}xtJ7l%uYU_k29vw!|yWU@BUF%xyHD|S_5s6GDJp}0gbB6
z8Q<jHEP8`GI+}q#oX!;wHC!FDvmSY{c-KPGgfOktin=11oRcoI^P<doPTvgV+0kdI
z+7}XXo+jI^Ej?+P$`?t!u`%QK(li3_I}-opM4^IeghmQf=On5V*s_*WQ!o$RJd;>B
zOZyu_L5&c9a2U=;ypmK-&8?=L%2>nRKJ<xO97<?2qU#Ju)V)T>`aVl5yZ+s~b~9Sz
z34ChA7;rt{of<m&*VE>4a@#l4X#wp-FbUUD)W8ueqNKME;z*bPDiqp-R+qRqc!#X$
zfVjY=G=e7h0kBYqKj7TcXEW`P#L$cyfFYS=pxDS51pnnO81)@#WB;(#C7FBUXN~$M
z(?g^BF@CBIg2Z&F{OILMTEE*KeNRFt`DDhitRf{<&@%YMv;eLOiV<iiN@)L-X+p?x
zCT}}0H1ewK7^*r54RDc%U|96{nj<UZAJ*VgO+eY%=t{hKmF-*?f;9sEJv2b{wq~lb
zZts4s7lXqDK34Z6vfraqG~<*Aiq_gy4h18$$rtki!i%k95r95O6v{tk(s^b6#P;M!
z@CpT#^hl>o#a*#?i_L;)tmZPs_Ty{oH&aMBrGhak=RjmQH7o$LED3rcFKkRr_|*}3
z`4-SVVCY6-T^<&qJ?O0)X^j#dm1QYNyo7FrN#LJS?_Z*ZNN3N-?mktt@roRnB>JEW
z<N|+lLW{r#LGvL{xTElg<#yM?RZigQW=ucx#ha&y<=GA3gOVgFV6kHYt`6H`V4xzU
z=sEo=CQxz{#x&r>GRJDN_VTuno&9f}kT2);of`K0Sz3JZk(~K*a`35&ER}?J47o7i
z!||YiTl;pOpM_0eD@{<0G18$-asv6$bPgB1Up}ZuRp7h+)E)+f2=7*Y(XC2LikYjl
zYa<r7xJX4Zm`IRhpc6O=`ZQ2k;W+}=0x)ZD<xP*p&%C+2Y%+yxCa68J>hpH0OSm@W
z+DKP#b9hA8XKE%Gaz|lDrTJN>BX_MtkXfbF`H`?6j>r3mo9uyGtBiOE>Eys)$gUl?
zX3ldhjgVkyq$v8Df$|b{7SuqP4x()ExZJJLjn1NnGQW=Y&EMw{bR=cy=LCmA3;K?*
zKz&~MjOx$}yB_Hp9=m{>e-p2(MTwVWr6fuBZ54J4iJ3A$-`nX&W*m#txb*EQP|WDk
zM0PGt>pvw$H`Lnj*I5-AO6&6`+_EZdQU?OTFX9YD7EraA*#P-EuACaacs%)bWVS*Q
z_SeWW!;_)X51sAt%-WZM@%c=iVDtW(dVx}AJK327IQBd3Dw!z`qWKSI@fyX6vjcxI
zJO6&lf84o_V=SaR?)G0kW(BABEc%0oj={+1_Jampn6#Z4qftE<+I~QK{0Kic%A`5E
zfA7mM%Q7vxZB5nr(K+DgAt;U&QeoFg4is&X2$_?g`Xx;ghU&J&e>s?j4T#I=?&ck&
zeTLvy0sj(Aga@OMHP;+H(j?u1(CLmE$jmGe1<n-f<G!{SE}4jdG)-;*%VY>=M>j;2
zy?ne-0`KwjSpNh`AWXu6X##Gju+L2i)7ue4Zdlc-`~bkQ&a{q}42EjnIOAeyHI3$V
zw(P?akior=n?T$5r_4P1$%xQEf2sq~(h5SId5TB^nM_udv*3_1+ld?zNmj<CV>|*(
zWFk;l8MNP5Ja7V+<Gcx~k4iBm*fzW9mdbTiCeZ+X$YoR5JPIS&{<jNAkp;=pWT^A4
z5Q8k<seQt_gTIq2yVg_#?#@)Y5UNj2+9WIuNM`!P9xk_$^-RHuj0v+EnEh`LyoPd1
z?zIBWH(lu*X0~a~mJ-wy6Tx|A#Fn1W9HS{g%o9cdiUDAvh1-t8deGptEXK_B394B3
z!k=`RgHVc177~i|;Iqq|4`S1P!>_PJ_*XD4?Mil69((1tL4MEoMvKRc4v`#OcE0(z
zBMK$GZKWtQnNG)E(Ij2=NuKTmBWa8aYRrf~9_YfD5g}M0&0v!>qfkZ+NBGmkciqR0
zp5eWYoUAwS?nhaMVqkpBL!m<i=@CKuB@;9fAcaZ=M8Xp!O;*ADR)Xd!%F^Ob!O*~p
zZ*uhfxvLr>k+6`^7!H|Ra)RSeMXk2Gbuw$p%6`~<(g5Su)_6?@2JU=@39B&~r-CB#
z&?5^bk*X+b|2Ttbw=a8wtdII3K)Tap0W<+j%8_3uP7D5%KP*Z0dH>7#uqnx>;IO{J
zOT<6dy0`zzh2}2kS-I^qk+7T|5}2(6A7MPRV(!@uze(SXMHUZQY1U(smB#@4vip3Q
zx_KbFaF`3$x3!fYqi0+OU0IE80^#csM|b)lP~bOYq+I`L8$z!JzqJ#fXw}D=vGX|>
z{PCxkO%CSbaICjphxg-)Hb4yD&C!xozL}AULF#Wes@dvz38Oo^O^zp>#S$K)M()=w
zNA`1Qi?55+mtONXkSd4d-{NhV<NuMFG5%d={BLHa2K*WZ03aRy%gin{V4QVS{*#%#
z=Qv%laI|`GSj;y-N&NCj{6U3kgV!5?jwXzUFXhenW9UyfGc!v|Xu5+lqH{isOGF6?
zy@#7SD$OFWjpkc}MPg`!L?Zk32I;fMmf5w&d#Jt?Oj3YH<ze^I<RqWjwomtW?f3Wl
zH^_&^6uQs|RxX+dmsPZo#jelK@i#OaP4)`T&$Vx;S^2S}5c(?8JTod00Ype?Dwmsl
zo~Mti)a^CmZv;^F-L3BoL}suic)!LY6g>wKt8zrcWthFWS1Gfx^9L97D*3=N@lSF0
zRx{zi<dSa?z^GPW^-#1`_md0}KB|zm-<%|j0aP!=fJ~~le(%HDn7UBsy^@-))x#ED
z(Lpfda2JiQ>pNUC2dQPD-J{lZ8zM6r{Nc;^Yi@^1IMOnk-6h*(icQmdz3=ja&u}th
zwccl!hvQ}_ObTmcwjPGiNA}HUcGdOg2wGSbO8@g`rFp4_I>j>ObrJBqmI#Q0D3s44
zw~`u^LC7;?N|KIOAtFeQ+4oq(MM%4i*QZlVyFv5*mH2wovCNv#L%381hN|54yPO(r
zt12f4%<X$@c=RA$`Rz8@oxOy|)q1ntc7yk!RlWeDi3eKp8k^d|06Wn@wf4NW=SUO7
zmhJjEJI_@c1@3c@81B3NR_&mBwS5d9#o73|;k?%i4?msm*V^ReeD3Lb!-rN?$`ZPe
zKN7Ut9a+4zNdm$8%O5fx9@$5n7$QjJyIGZ=-d7}Km=PLFTegyq5(1;hlCT1`Kn&#W
z*0q5=dx6!w+!e>3>k2;eE&&y6r=K@Ra-WvN0bLaM+%=C1MU3{lK~A?<l!W!*$GBGK
zT1THxv*YWJgQ>tL!=vqP`it3G1t6_m8(|qdvQw`HPBvD36Nh!u%Qis9JtDgPnxK(T
zBP4sOz_)0ixn#k5k5MyXZSc2aex2g!l9`~uA02|Z0k@O3lH*cb>`P7`EX}-ikX~1U
zXB2XVOO?+kP`)aILC+n>O-E~+STttNG?w}aPJYNYa6$$slG5@AK!(5pNQ8}QJMS6#
z+nvG(W0NKiUyIYc<b=8)dib=a%hj(vWfuF{u{HM!`jnZ@zPFBdaZj%=@5jnZ)^W?G
zp+6jFLo@AO=Ds?TnaT64MEs>7Il;mi1TKK>Wo-l;07Xc_IzrinS#~<`oiE_aX@5I8
z7Ny3jthgAT&iT$6)Ms8E2(Ea453%{EU0#jU-j04azjOt$2tb?t-MxoKv**2T<XNt)
z52@E2+$l+f5sbzx_KxLnc!2>E2G>V#F-4M;5ts*Z6zWm)#?Kn&?GEv>O7+nG7UlH4
z8|^*V<YO7jkTe@u%WbEhv_V+jsC(a|SaZFOgUIL(0Y1I~0I8S@vTQ%Ypx=On`DuoO
zgHY!WH38M`*J0gC&@r>mK+)itlGR(bK*YX#^rnM}-wYsyqcJ_;jpzB9>C(vsFBXh(
zvM-yzjDqiki0~j3LYzp$8?)=QcmA=X^|+HSay#(u$qj?>PfO8{PL?vIO>1;K1Y4w`
zj}=ANJ>>SBn8-B$+`rGBcJ?y~h;?Wtx{KAzeqZJ3%FeVp8bO>#Q?gGF2nW+#m7b}O
z=Fts9KO@+7t~J6M^&lfy8vwDfVR-!9N#_6+6AyrN?Cq6n-f86{bV;9cx9A^ErL|ab
zw{e<m!-;@QWvS|S4u}GRr2y&&c<*A@XWE*Vjq|pbcwOvv;^TOcp#sx}0l0cqQss}J
zuHJWg2`Tr2ITnG8T4S05l+}(xdMm$~i`{+pyLA?uXiz885})EPhlii9c)1r`e>>IC
zq>mN*ocdfh)cC-F74`U8>zoIiS824i+!Mxe_*<uV7437zTsjs&N~(mEasO$J8dm(#
zdj{j%dMxb7GI?u+7eFlF0HsDNa1Rs$a`zm><R1pr`9h4LLqdIy1yq&wy#hjmQ{6SX
zCm?~UuHNdo`DZd$kQ4aj4b*va43A*#nc&?^Gk2ry+HKvf+fn~Q8#*hw+_O#bwh&L?
zhZU)l$2@Y^_^wx!lbRczTH}2nm4ajt8ujE6?avZw)hX{2C<M{)6rc>?A})bAn5wrt
zY#?B$ypq6~#(Ox}ScFWMcsrkb+o44cmj|3u>ybLyjG|ki;`H?;1G6RqS4T1Ky{(9=
zGx0#(*V@eO_sTGi?M6RmRd<~LF{*0CR3~?Vv%cHA9*T_qX?_!(Rs)ZTi~H6~`?M6e
z`TAX_?j0&S_1+B{wD91fn9e<($450ilN`n62*;S3(X<;M@h3sdmTE+5w35m~+6ige
z9FK4OF@ERWQl@1Z8^ib=>zm!|tU4i3lrgTjXPqCm_EJWDSaoP0Z>1o$y&tpq5sIp3
z95(<4dz=8M_Qw;o)X%O)HM&UZg*vE4?^MTJ|8PvT1x{WH|M<e5IXP<kF`c&K89|E6
zlUjMQ=SXB+PsAA&!V(})IKhUjycX<}dlGyY`ZoIsNsV0?up{pzgOirPiqg3(kl%2*
zaz`G!QHOAnKL^X+9%2Gk>M!-wcMR2+9)(uDKoG>&-$G(WgwMY)p8WRNNxl#5)G*jE
zM<t}#TH$0NN(nVMbD|e^iK8Ge^oNE3@c%>DSw+RcL|eLPtQ(ict#Nnv#@!)=-~oaK
zcelnZIKf>LBoN#Q5Foe*cMa}3|J-$-XI4GdOTARBI(wh}9WhZvQmx!0ZK_wK0dMk2
z@n9SHrE;&zR)J@0;*>kcI7}hO;(=wp&X&Z}Y1rI7h?AW;fqJ~kmaC_S`ra~T@=|-<
z=P+@2axb^p*vb6OJX&STFGa@xQ42-;S#Z6+Zg2jl{eF7+SjUW~Kco1p4~P*Jgwaky
z9l-7R7P@`Ok2ETg0b8)p(j7!-CUzcyd0^*Mg!=8mzRGiJA;oD@O&T8j?PgYxKqmLL
zOMZH#{wuH&ZWKt40OxM7#OnNb^T9f2xe(Rl{&7F#dw0&3@_r52n)$y(UxwhzRrz}R
z<JB%jSRTRj*5{jP^g3Jd9$*SF38nn<rWlrI>BZBT4&U0i4PRv;8z|}{)jI;1v2-C?
z0u2-kK@XY1A#^F5WrH8owHsUTki>>rjkcFIIOS>p8O>6j5({EDQbuH|t&k}?()Qg?
zY?9_V5v;P^xp64OAs?GF{d@nK?w6OT*h)z+!KWv{or7OB`2!x>w$!sCQb3a~XSXsK
z-2!W_G3zar@|ITk5evX4r^E%#Gqu!#z1NUX^1ZkR11!A^-v4qi@~n^6t1bdzMAjcO
zQ}_^NW<pj}@jsM2j-zs-!@F+J1)aL?E<}S^$e0Z#*EA892+=l+83G?VSU=?1PJB%t
zXjR$O4dD()@j&B;qOr%Z#mUk$v75U)vQO&nntv)qerMV9jeapmTSfp+icXe0d8~l?
zh-P(@`kU>0&!h;=V1OKH9G%o1*o+QY%qt%|Q$phxdNa<u5T3O68Egw5sk+{>b`7z`
zekf3*Jug@lh63?QN*YC~b!$!5Y<1WNjYa<{Y0LUMACkyva>Z*KXBdHUlo%$EnGkhz
zCySs1TLX}vc7&##+b-Xp|42`QDfBtNOPLDxPI?1YZ6o6I5#<|TPWh@6z%F#kXoRoo
zlPP{7vY{}m&`1&~+1-kG6it)UO0uqHa!TcVuCn5tI6e_^g!fC%>xrXya&_OLRjKo$
zzLdk!kW*1%6#C9zw_H&Q%Mg!-TT=a6Lk$_c-=NL|)@O1-1{6ofgqt-_fnndDR6F>H
z2b~gi$WL~>w*)1UnGtM%e^D>64?e@K(nG)!vt&z%qqbq0upNX7Nqn-_)$b=-5bN?n
zJN`<ot7-P=e~o=+GiDV$ElWcgFWXXvB;HFv!t(`LUQ^oYXPt3R9bkrf))UNz9!040
zc%aig01hJB(`D~T(LiKCxj6owSS*X+KJLQ@#PC3rwo?ZzAd6AevG*Flfl@@3-!L;!
zH&|I*Wpx;FSOT28qa$w}13QBCa%j<q7c*QxU#?Llc6#3{THKhv`N<tVFVPQpfFdoW
za~`=(6+aG8TYlIsfz?};CZtw27TaTV+qV<x(W4i#Xx-<<jwJh@oCT7qkU9nv&YJmB
z=96z{5|^eP!k2%%r1~i-9K$|(A|d`m+P+1?!p{5nZ~{eP@Otxy{@fKM#Db8%&Ghf*
z*zyfD|2#che>d^SS~ORfD50tKW2@h4;N~3-ccNT>p|q}xhI3`3b3ok}c?v4;)6z33
zuoZ41TRI#$!Cu;8Ag5Zm?f7^9`{pfQk)+KPK7WiGpj$dh#Xi~>z{XdgiF)t(d(oz@
zXPol3VgY1>(}Afo**6H)etN_2m20+{e#QCn)jKrK;7(&~U(VBZbU*A@NC4uKnOj%{
zO&miNpGY;>+hw1Y_(#41O;a4|91F(|QkWl<COG-P$o*O}G^Cf0Wt5MU6^%w*dGkH_
zp;pKacSx_kSez$%Ue1B^w0K`O3z_qA{OHxpMmcw`%D7hagFUmJ1wFl9Y4w*TWb!vi
zL<7Zv#y<p6LUus)cUyVSH^5(%zz}a2cI;!d$r~O}4Dh0uPtik!?2|h%Na*}7Q*wWs
zm{>ygrX+ggh?6GUg-$M#aQ+Jus<JW*H)|ks&F9bZYKNH~B4t<a%>H6)L!^bxMdrVC
zf@Bcmg{F9s665+9!-%~^xfkoPB`%p*D&-Wv7vpwfA@GavTb~O>nVB^bYkkM{xi+(2
zkc3(%nwbxnLh&NSDs=Z=`f~#m87Lr?V76RtB5L-y&90J{vihq%G}Y)F&f!ecrZTi>
zZ+2hbta>LeDs^{8^S=g6^-3Uf7>MWtG@(EOJ+*Q}`nEv=q}Ngek&@%5mz7~Vq0JmF
zEb*4OCO%KeUyUc>-79Er#vioA8YNwiwBd@g%#*(6-KJoLX8S0E<s)2eR=MHAHw26B
zYU0y}zRwpuTx}xLI;Zp!kg||U?%$0nOd*{887Kuz7-)KhD0n%{+;H8<gzLM_NXdJI
zWDASBE0|IVf`{8E+QS$wL|8#aq`KP;8|K|~<|f<6LP}Q6C6*(t@C4Ws(A|oOPvc@w
zurNkRlr2t$ZHAL9SG(Ox<8!bIrR~UUhesewyoVx<vV`x0W*2G{f{`ud_VXAwSkR)*
zzqsgG{s`QoVBPRdX9lMpKiD`?!K~!Suhw-C`Eg(pv~E0U#PqnE1qHI|Gh%(aOiBVf
zI(j;Iy_M7kn-WOUy>>ob8{kCr1!l1ic&@pe3PKw`iPR3+OIKPOD-VZrAI%^8`y*_n
z3NiE@vako4L_{84N&)~W`0D06)bO1nJnAG|s6`EzZZhxR%19;n$P=>F&Jtj^>%5h<
zH@5Q3HQ$ZIH4n$R6*h0KxFmmcjmqdWia0YSGqN_5%bRFEYQamRhW^!MDn`V^K!xD%
z-@(n+Kyy9wCId4R<V?KnS@f=Juw<vNvbD=^dz~lr-wo1eVVYmLN{Hb5qH+ZMg~c)o
zAIiIAwCV<yFJb2P$mEnF3QqPT){%7<PnHLMcPDiMl7TryLmw+@F#B8r6vcS<iJ-Vk
zf-1Knx$V2A<5u_QeYgZr>B-RD@NWb~=a(%xKxs-u6)XOWnw0iQ3IDf=-Spb>iQ0@S
z->ibEDjS(4W53xAzbrZjoW3!=xnFuiV2EO#J8v;dW|dY9K)EWG%lSwsS*F&x><90?
z3UvjjRGSgFg)4UfP}(KlO-C3a|8=pGJBRfcp-$D*iHKY_$gUmJm_{^D-_@alEhx7G
zP}lQ`V9rvGk|rR91=|+HsE=9?PA&w*B_@(b;(7nfPg_xP>}zEd1uKf63Wwr4e?wT@
zW6frab6EfVs8jOKe^)I3zb7vm-evBgcF4|ol!VTt6UO7WPi(>06B;)KWzVMQkFMd6
z;GRaNhq|TeD5jFbahXJL(OLw-%cM3cWXp~!!kkXqT<Y1>T|al%|EuL=ca8QmxDASG
zO?iv&(<R{_$5hb=tX41i2t7HBh(3PTxI2&D!BwyP!d)WG)ic_AlPv#tF;L~NUBE1E
zv9<2<;rRJK^GD9##{|*H?>H)0x;FQd&O79$WW`ep!Z+7UKzU*NrO@ZNByN+}$he=|
z2q|}JIh{n3PO;srXdOv3EZ?IBfuoYDT2E5ptxd=Iz5@H?YacIOFB;gz)8KDx_dy(Q
z;3b-ye##8J|9Dyd&lcMM%i0qAA9YCNdFekXiR9#e)gfP>)c@3>GpDnL3FrN+A&fL(
z>PomOv7)RDUJnX^N%qjy@Z{mU<p>iSBLV2xm3R(L9d4;1pNh>SQz*0vgsJ!uFF9Cl
zuQj5CrE*qm_2Q59S@Ufx0Uk9NOkwmADJpzCE55(tck2{1bN1AQ`E2!UWz-`Di@LmJ
z44-b0P-6y91T}08PE6zqc^P@fLuxzMr7o<=T#JCxNKU3;A<6Qy)r$e2x26-?_|aX)
zN6OgibtEou?}+55)R%3{eA6z+{zQqZZR>P(Q?dOWd`5c4w|QOU9P~fT->G;lT#~=P
z7r7$znZO2e?M^V2Us1_HA#o<}p6>ChsR*}@72rayJ$Oa-8TW(xUH56t`Tmh@>CnQL
zS3g0g^B4AnjF;~%FImTLgl2F2xvyrZKFh8|a}uw=Bm+#Ntl8{$%EH3?`W^DDux>2j
zOi@E;kAq&RT0NKREz?<x6#1|BW9>nH`VBa>poJTX_4T9kzQkV<j9ndpH~jjq#;F4`
z*3MlAhe6<R0}7DO)9dr)nYd8UO_ibJeQ5UC*tAVhR{g3^@9meEitO=y{Z+4t+{D$J
zw=Q=0mv;%3X+L!wO@;prFU1b%a;|>_wpTcvBG|5nK16i7f0DZ?hZM#8cE2$I8H?Av
zKW)8zdtF(8d#}2?lBq7V`_^t7-L!2RwfEk1&2ITBpsR0Sc<z;yP_^BZ_#SH>O0sp`
zvmB32fEhdg;yDG#i?v_2>Dz0XUhYQ#Tg$-W>fP@D#@<wW`_3;J)g$Z9#iZU&${kzP
zqSh^QR>*3OUuydku96srTDSOz3@?(8joXJ^x;$6B9vhmhy-p`UP8s*p9&b;3I_tN)
z_U~38?yE=tI`#)oK`b6VYFcaEx`z*eAzGx5%SVcA7h_NF{2S_<3gsh+Dr4m8(BS7<
z|8c}xb{>PC=5pFs{Y}CyI@NpIX8^8n6oC+H;2KxqvMAy=7d?!_l%jb`$tTXcfYae)
zqUX7ob7QoD?b?5jX@1b*`K~pu?r;PJJ*H6Dvkw5DgwUHip{8rMN;IA%qcyR%^`E5V
z%hV|00)2Hce3EONfy?jDC2QckuCFNfos5k}6TUkpq7>;lIxqz6{GSsRyo}hfc6v3$
zM=+#9R_ti6_c|Q(dQ^=*$Z30xn9#`kQL;&(*<Qx}PDMKwXhKJ2eMe<I<g6~!C9CZ6
zVeZ!vV^^o^Or&ET*WBKfL;s2;hS++nMv&X_rH4Y(w;4@}r|R(IME(_i_Q1OFZQ&v=
z>W6UV;0`1fAs0{ux+XT1r9clyc@P|U2vM#T|MPId-XEyZHuK)~O^tuGbq^t;WUCkl
zAO+GDX}%L(Y?WX#rC#5D%4>d|%S|LzKVF~caJ27lqH0%=bU7RJ5kDYdm^?_X)aVfN
zn3J>ei*opc!i0~qzrvW>g5(U?3dJLW3IMRlB{nd@;}ElkJ|9Q4Qe#9b_ocJy`$UP`
zMY4R~+bj}}3Gc#0Vr0?Ij~@r>QiieiB8`R1@%P-N^ghJZ*ez@BpRa0kKc1(Vt_Vps
zaF~C4m^k&LdoP?nIP&IqR-|FtxdZz7qm@#QcKTB!c-Pk11ZU%&RvI-nx>4vmwqQj9
zD(ci*oVM=V?a~4Gi)*^QU_~tB%j${K3pD4T!r~j3@=xnP|NX9Abk43!bOhf#thlcH
z#cH0IK&Ri&eO_2=9i^Rj*xIYCi_=R~T}KIiZMuxh%j%dsG(v3va(bf@1V>;WVPWcK
zu!=_+RzXX!IqokuWcd(Rar8Aokh-I8oCBs~7x&ErXPgFm9^N?sedtft&wm-s!ZVT*
z!WS>KLGIgnGoQw=fPp4pWKq+e!Vjp^hP-0!K`#^PMo#42N29dhaIZ!YqtYss1iTU6
z9A))NcG`1W+;2z~LU3&|s6+uS)CT3UQ=pL)7{KGg9bObJQ*E;08q{Du!SuA~p}=cM
zxiaNp^Cs9;ZrWPb_%>(yTJiF_7RS$28Yn?Hwssuy<ph^hIXxDt>)>-=$VmEv3&cB@
z2{_smJL-^){)!S2*`~=AaF9~<OsqvMRyi1|qW}-4cg6$A>-H*+_tr~d^=k5`N2S};
z^I$rq12Y7<e3$uCUpCj56Lq9FUG%>N1iZCfw%ecinT^_eB{I-C<&Rr^;avmC{Ar&N
zOgm_-aW`_6-rcFkujb6sG34=Z;o&ha+$Xb0pu%P`UB26Dj>t`4|Ju=7tlI5<*chJp
zmTa=0%|N8e52kNI!sNn+<P;Pom=!GTuVxdoawn7~-mP?t5Paon;E-?{m_3TAI(?p5
z4{%&)rV88_gUE$69^sR37>Nst&cx%J(SDPrGF%e+q`dl!jH!23LvAQyZ@?np*@46S
zo>FQJ;qfZ?pI_j&Wb?k3CT<7R?q#~}?7LLVsy(=+><ug$xuPbu2C%!~nw%wHkwhbw
zZsx9PXJ&ca%P%QMx~Sm1&-xt-77(bnSs5ZzbK(-T@x;X1dt}d8mcl_2`f5Nl1Ri4e
z_mYE<qO~Adb97m`VAA#Y+BS_my8Sm(XfxOV@WZEoaeKLD|2`DNC10^&Rzo$JW3iMn
z=<lgFp|~6p(0Lc6kK;^wQD7U_X3$&7+C#26*t>hClu;=MNT=cZibVLw`TY5l%mti6
zF~nHlHKF@uXQlSFq>L`a`<E17a>$ryJIdHC1w}uq;LjUM?_*~TdwYem`rh8Yy3vWk
zf}S-5K_r!==^CS!vWFikWrZFZ8@JZ~I?jH3qYWZk(cr|PjqjuwY2skw<iPGHT^$A1
zg)XYGJ<Ci@>_vtmZD{~=0D2rvao`-IW(xrK3n`{JN}Z6VDI%Z1hYwJ?3}CDO*4^99
zv~BbHU!A%?xD%TMr5IEG^eQAjZ!ESlW+$qKhAc9GY{_AVH-A@U#?%~Mp5`4E>kkKr
z)_pzvn1Wmq%#~OMUOU;t*uR%mP6z8?#p4kYm}TvQ7ZXs2+%|<cj51`VKt*YgQ0{vK
zb4~o$m54}_A{wpn?XuyIF=ZfWJ#4O)4HiaS`rtu8r!0(B&sj?*_!6G74f-8gk1fs>
zu=20@_R|mBY#ny(LQ;l;n@_;M5;pBm?d(_I-?6SYP7I%}S!aq5G1Nn9I-mbOc&$F2
zJG|99$S)10E7x78J}!~avB6-t&@-x&*9?tRLH^Ii{)eez+?9if&g=Nj#zYBcG&s`+
zOqy^Ygo%X|q^UgRrCFYL_UPfE|0g%8{ca(U&1p#4yrpWR4Ql2}qw7p<3Zb6VM&i!5
z_>8=rP&s8wfc<Rg+kd1d<Jmi#iOZP}!yyhWH<Ue?^N`<ske%`96~__^rQJt*HB)a{
zE#q2naQuESc6%3L1NU|Uqo3or|6RWy98afOYqodN&ym{@NhnCz*IB-+*!HPo&oE3t
z9mO=;1Eck$F|gBC7^^aEnT5?4sH7dnDr&P%sURoH0@RRoeH4dDk$i=vN-&t%5pPmL
z4SRnbrjR-s4|uFIw3Q85Ysr?QU6T_i?h9WwCFYDJaU=ggmTs6Xhk$+%7E0^i59Y2C
zaGpKBc7~bE^nUc;+b^4zb5x$RkPOtAIW>K*-?ecvnju)f5c2<;g^N-)XkNiQu1kU7
zGC3s{hnVe<YFtz><mFt_kd5_;w<cZFM=5$E8e%33kjXGZpam1_!RV0bMv!@Mdn0oz
zf^5uUSMzMGUy%~pb|L*k%$Ejfu5#rZ`sRK>A5K^=*sMJ?tEnJWE67mA^!aDmPfia}
z`!jJe67%wIBcwm!qwRkb(!1+bgq^40)zzak{9@KVjT;}FAGmJ3QEE(s_i>SmAPRnr
z7UuCGw)s)i3zFfiOmbp1#XMjnW}qOmLAtJOa4Mig^;|bjb0owcsQIM#9{Np#p4g3K
zpr%>O{hK64Kb36iz!xqSTb>VC@p7=JjWV^0tc^g!bu;&XnOZEWF-dm{qP*1KBugOC
zerd?RuT0Jlu&xPTyWPu2dZ+R15dU5lVh7_V=Zb9{-!|UgUrP%tX+COU`ofELy?{hP
zxWw(!GDGMDiuA~w8i03bOsTk4BiEXb$?y$6xi7N_3$%(upg9|)4-cw;IttNzA&cFG
zJ&2rP9UgIQw=OM?C?N`Tf-ny|np{Z-(h0PTuDZi!_JDEPEAgZh@V-GMk?0Jj?GVq`
zg*3G76so}M&7(GzRobvgyd+X1F?$gSUjx87bzF(x<b2*hAuYLaKjCAd%ZabnKqDFK
zDz^$L?vg3;E6pSef;leQaP{_vohq~tU_fv_3n0Xp<>dDMmjm#l)Tu}znkC<KRzr{}
zB{m%9YE3Xd<-=?!!&m*@?ERxdK3gcje?NngoCAKvAlDW2$*7!SKu=pS$GG8K(2(pX
zo&67i>hdH>F;B3xvtBV@+Q*7&<iT0Mup&ZDT7P|D!YU%^A32c-BZ_!lexokXf$g>;
z)ozYq0UQtK@E1#nQc8$=;>Lz!j16O*_~2CY>i*#k$M<)BTo!$xJwaefuVz(Qf!v6>
zFgP<E$coKG<II^?DE}5Pvu)pfd0_37{Ex(-M=~XK_>d!fDP8mTbZp@3bE?bRRmzg|
zd`YTpa_5mqT0*4C#`Lz5&#;h@wzQV1#+2rEF~e>s57}Wwq%_{-k;nBTu24GGSC+N}
zZ2rN5d4wB_ko3mLPN#>88~??3!Ag$7!YLqz_=N)cqD>W%JH!cbGzePAtauG>LQBNC
zqHUispCI1b{OEeiKI%l!Kf`2el_MYZU=2D<bVmPu(FVp<AL}*JVf=8CWI|jl^{>+W
za=;89Zm1|t95BWRK%g6uZ5dNgqbwz(7yPJ<DnAmM>wK{%kznM2r^gSD!`Q>Q7dQ&Q
z`pX%d6A`UaM9gb~;Eyb05R)fW;MAkwD;r#aL{W>5L4}YwU?r9=Mis>q+Cu$BJIZeg
zgZ~v<(%9qWtV#TVY`FTtwqh?I!10b8F^=_R_6O^p#7oxhrv|7j2RGCb3#3jb#i*OE
zTv?_~oV8H}9Ilj^#1qqr?ocn*3Vn}}x%AtNLNq~v(vO0-)(!-|&XFbI$TJEZSI2xQ
zi%FLVm8GcLAuVXg?r#K4AOkf%l>$?7TM!Ez$dKZq+>L^jkrOMBTnM77L(}D=bF1pM
z1fQJ`?`aW56NgiiyJ@$JgGP!=+hkK)bxt4Ta6m-T!~?eq6?)SHTGYk~z!Ah=hm2yg
zkPiZd38+WD)7wC~M{wRK$k7nP&vW-&16v}##)g0};98sSY|MO&*U-5@GFtzG?q?CY
z$vMutX6Bv{aq@JzjlUbzPS66LYd?;PWIE^+plr<CH~27g&mp7(GwUZP0o!+$Qt7^$
z<Kb2(`F+gH;zfHDYDf*Un6}j~qy_%|Qt8csfiKb=gwrLB!t}a<SVAGYz;t9Gi9!>o
z1LWMl2NUG)EOyt&dT?o|m74|E7X&!u`kaWgfz?Dsk_ynG=!G_cHENS{A9CohVOCZH
zcRi)TzFixk2p^(hy)Lnl$FygltomMF4i|K^D?{{Dic?-fc(7cOMh=4W#i!uLo59z1
zrz4?`)pLK|8ih>4XyTeOVrY((cWCS+Iw6_q00R>a@J12zmq=DQ^N3r1eWjkPJ+U*`
z`y;t7KalqrF$7p>xVYFz?eD<U3pG+%o9o?dl}=A;*$?sS3ii(x+xht(IfU%~%XO#@
z0fNpKf)Gz3QM}dJ>73_bR!OQr&mnz|Gy-?mtjy<{9jOG$<JO-tV@_R09-jx+bu&yZ
z(yD$e%|+`HB+4oa%fUwousaJjiYbk&o}(iKTei`&R4Wcn4&`R@_Iu*VKl&nOR`p(4
zO-tc$YulU}Cmybj;>OQuv+ldJK7W<!b)yaC3G2JsIaA>z?Na_&7EMZ^dzIwncA$Ru
zktu-utC7OKv*W_w#)g-#K*>hao+RYbnRF)&6|tR>mj8O_9K|nIIgTqMw*%tcjz6-R
zD$@<7rKTq+7}z2f$&*0j(uC_~h1H`~MRtB6>Bjel#XE=wCE|ABM=wGSeCc73-;O|q
z9=%cw;lJv4jWzvNSB@A<p|h}M46a3bO+mHtUySA?0!F&nv#dCowq$;ZVzEho%<ucI
z_tP>+QK#(*v09A-8233B4z33Po=rQ26+aU4(VIF6cqL|R{~pG?CIr;1k(3X=rx+P!
zkl}#Qyi><C4)c%v6OnAyGygs4*HltQp?q<ajdrdMd9pwxyB3;q@nk%YJI1%6`>ufs
zwtUzXGM1W-kLPa%3fyz@&>n=Gj$kKrq%PnDr`fMH4r9I}+U+{mCGV4aer62pd?r3+
zOcA%;u-psvdcIrFRUSLt<jiTnd(zKAfR}K@gVB?awXf1VA}G67DViU6uspW$7T2fa
z5ETM34J;Gvby{llWGs|GBxK>1&S+MAD7kut1s-M#h2`8%d+eG&K`1{IY@5WxF53pU
zcn4slkIExfIgw>JS#fcw+bD$dx-*A5d@V-r;4vI8oywUf-@G({M5<G8%I|3Sj(f8`
z)+G1Dp~r~@>no96D;zetE|cOYs<r4L9HTWBEroNmMGK+zHbT^<??|jZ({giVg%;{r
z{8|bdYd?*wA|)QC>V-4U^mL9|8AnyAA`nUFXQEWfR&i<K)++p@9M~CQ@|a;TIwa<B
zr_NLS(aY!Wy#(2Dqx=sELY-0*BHvI*CoTcxRP5h2;1Wm6O@~=A+f`VY9S}fOId3B@
zhgsOV4>Z&8zJ>xtLWtse(gy6=VRY|M<WM2w8!ZAXEX9qLw&>G`fqd$DVKFxR$)q8>
zIvAKfE7*N?F6uY7o;AUU<H8mg{5MLvy2Lg)hGDdk3X^}uqF&e7$QMGPK1fBu(9ckp
z3bu#}6I4BRghFMIkkIB-_#gp2vYNbmg_$yod#C`LjUCBH`W`Z;SA;QkLvDvln#RV@
zs9pj0{YZ1e+K0V9z1H7qO>c}3!4ocZZYXTeb>TW(#wY9E|0O!<GetUqGn`d04KFN*
z@3!ugW4&%Kb&)jf5N%prc4U?TdW(b-d%5xf@LZpC8-x8k8v!Y^g;o`-0S30^d7sl8
z;`hiVDV<^)TZ!Q0ds(`XQJgtlMdaHG;Hdso%G5JH9wCu#Y4~|*{}ev~Cg!e<?V*&R
zA*Y?a3b*-3dI{Ho_l?cgb(=pWYV6`7Y#~}gdNDyV>25M8dJq(9yZS0cK1zXRD^=9Z
z2oq)W^yq{p&(!iy()#$5CBmSQT_^7!e@2-+EOS?8D(s&eq5c;Lii^DTrPs#!)(uz=
zpFe}<ntuKydb*<+T4}|M8gS<_PGW})i^;TOtDJ5|)>WIFsD;l#4qwumhx7c?@uUz4
zqHPc%BQd#wU!3Dh2o!~tS&kp!_%vqBF(o$Y!PtPhZ320^_Kz&#R_!)+b}|MA82Ajj
z|Ah&Hxnp3L;!K6{5y24U{)SXD93Fg@;Q<>Fnz^!;Wra_C(}lRb(KwCo9g_I;6%iwi
zBEK|`M#Ga>;&kc|QPy45j1+q;`6LBa^9UC(pQU?usU9bVFfiu|iaW8}y}aP@-$`bU
z3l5XM*bWbeN6P~!9dXj$2=E?*Cs$$~6ci=t=+pBn0cp%gQL3~txHm}7ONFpS(7Teq
za3lpygk@{4@1Z9Wi6ZPS2&7v@-baFO=k6OzpRd~bPt)Ub%}K0IJL=#24yew~rxlqA
z7Z%8q!0Kz<?Obdjmi4PFrmE7mkxGvT7P7t^+*x0T!?(5L>HU%mm@$PmdAPx_jg~wr
zwbVyp@^yU(Mk^N{VKK(1#kIDp#SKoAZyd%xYBTe+O94;q@fY|k2iLZGnG)X#t5DoM
zhB=xGjF57EhlZ?dL#mqHg&6TMe6TiuKfbq_DV!8aJH|O(V!GV_c*EAwBiCZ8tjRLK
zzRaiG=a~cjyK+~p5Q`t+l<tuy3V;hG2X2TYT2s|<yihf_3Y0XAG*eJc+g0hfAI(;A
zDS#`tZG6IAds`coka?QF6jbtIk0Ua#Pwi+IF^kkYYsHkJkkponM=q59Q<h`=fsL*4
z`eXB{<Fnh)LjFm!KqtxGvGwLedBW8quB$6@%F(kA|1ep;YAN9#JhT+Q=1cfdR@sqe
zX@!C~AH8cv9-7=tg|u!-RS_{MC2YMuj9m7U^E0F}M~LXV{@>bb6CTWT(N!V1e9L5u
zbsu*k1{OhJx9_6y+f@UR)w=k&o7Y06os8|*`s<^k*%AJWUpc--JS2gaXxw~N6}rBr
z;17CyTxB6Vx#@HA+>`5(dBtNnza0R@;Fyi%Z#hNj=7JJpOz@9T=S|@kruTmNBO*>O
z1shb0<K~gVXAfAHuU+mu>;L_KMh;@SYZPB@Xs7P~pvk3;X@0`%%PgwUwekhMH%DQw
zjxDM!CkhzCx^VW2UE!tSHwLD!B|QD;LO`Qu88h^xP;K|I=v}*T9$#%3?{_|Rcf0RF
z$UiNG;C>hT;cq2()E4>iVo5KC!-98|SI$B;o-3TxCX+&8Ib=;Mt*NJV6#34d!(T~y
zYkCUY4H!CH)OYrhO!n}UI6JQi@#?<%6MlO~x)Ts^Od;uFXP?}ssS;nhkijT<0b>z%
z>iCoz%rh5Xs{C9}Wb1ymXYt!=xs__C#G02589xMl`S65yRb29q@N$qH@;`;xj-$R{
zF%P4j)wv+F9GDi~U;5b5ZT;1xsIg84yy|c(qK#Hs=sC{4aEr;E)~LgS!P?SA>S6Ow
z=ih&}`@+OL`~l0uv6Sy}ehkT%TU2cyeXHhw*PV$YwPNPnzWeiA^Ybk&`M4--#O1Z=
zA>$$=#Q8Z0`zyt`iTNDH|HmYP{kISMACsuc)@2O<Ab<E@lgJP3ZZwznuj?+Jze-tK
z=?D98I_hT&G7GVfikT8_Pz;K|AUxo6#HVK@pi)Y{x>uV%A*Mm$3>b`a38oJDg-K04
ziPQ5713X9^*4scon#_-_S4z6>z1|tLs?U?TZeB-n>G$2Jma%fp?`BPWKhNz}_{j({
zh~&SOE)@k-W`<M+<2{CSdyN_BuT8&O&#Mp*+vwha20fnmfoN-oX-nzipN}Pptb>kr
z^e!8uC0n-E95nrlWYC!Vx<CCIH@MNi`Y$a<Ci!wxOZ86DsS2lv;oz+p`e2~Lv~z>M
z=gFqQuKN&OO=v>ArZFsKFp=-`<)wRg<WG0t-BB(0;$OUUoMS~y-yYEbzjeT7(cihZ
zZ%D#;QOC6_SIwdUZ^)tx4{r6YM_WGkwY<Lr@flf3&pM8?oIoyKy?HGi<sZ7dYIQss
zUaW8}2fS)qF7^=BOcFA)G}ZIE-KSLUjPBY%d5{GA<v8)f1jkmx=hbi`qxuSucMbA4
zlBQe*XJk<&T>QMoSzR~j-JJ$eKjq53-{8l2t-UU_%coE6S2bs<7zE)sTQ&dHoHyr&
za9Frf(9M5HGP&D#)W5pXmW`dB*r<f&X}cs{a@l>mIUY}+BQgyooqQcQuHPnXIERXM
z#!TC;MW`t$ykZOkCM2CAkMru+JSGB$ubht2pS1_jPWm(rqF^hY!+HxNXG}4n5AizM
zK|y;}oEVb6T3-{_afIeXjpjWnv!70bh)hjfx8i4Lzhi3a1*I1<liI3y&UP<*NZa9O
z+nTtZ?sqf&dXZ6gG2M7r!1R6v*S7xW&KSL2|I7<olV9i*B)eBH+%dFhAE7xQ5X|xD
z-N*Ky|FM^lUdUL>-bR~|ihgHAmoV`k+)L{>4Es<;R^BvpUYFr<)X<4o5Eq>924x#g
zBML1v5cSv{(K&s*`4M!@5-FH+kZZAFcom9{ejWf^Kv@Ax2MPAvTPS0M{>;4X+8psZ
zZM_Y-O3(96_J8+lw$8TEdS_m=y+-G|$kk9{YS8oZ{oqZEcJ>fs4L};)f+JM*({_rR
z$YU~AL*n(bkHkiYCx!Ms0Q{rnrDaZXebTq#W94`0Zu?-f{uY=fN+?U=3JMUl4n3G3
z?c3qq1AZk^)v15VO+{M%O5k<_Ygw&{rKki%`eLU{y!)zIprU)}$KAN5<9`k;V--Le
z6dJt!o4Mgb*Udl9*H8t?F~{z=*zSiL_ModtYeGuDB8Vw8IHWQfKf$QMW8~+}ni+#8
z)v}DOwR$iCLO00S5c(yOHVxsu1<dNpMz6$R{y#;tD9+j9ZJqD@Z%>AXe~+;8NkIv(
zCyKXaLC0Ng3XW#wsfK8r>>K@-@aqD{GCEa74$;#%Rsl)3oAVC*P^@*obh&TePq-%C
z0`x0*rV6>z<|rfs%uflflEvdCjwy<mGLW#5YoSIy>v&?$J&1<quvcS*6)ov%nI6s(
zyo8vke|D%2wH()hF2fYrw8{)yKUm&+-R?|v&MzGu`0bRxxQWb4VI6$}{`MNP{j64-
zmt^9)WL>`Ac2sm<bmR5qRmUmlQ+-$t`<dbNb(o)e>t5FA9Y@{w5SUgHAoKYnjOhZj
zf$$5zfCEMme7~U^Du+}64sHS_2}tW(L)iR!t`e3V<b&#VH?18%cx~Fo&>&%Z3%N1h
zj~t?l`Xk+vy|l|iOH^i8&MoQz+?5A4Cq2JjvYTo|_wxnF_5BN%o|j_7-a1V0Zx85+
za@^PWGpx%OOOqtz%B_O;|C^TM4K~V>@WQ2ZM%W6)uLSx0X4D09saJ|3b%^1bts=*~
z9%mYg)E~N)=ZI_{b%R5pzx=|PGSh#{o<416n6w>qXc+%#1w`G$L!p(s`@-ozYdajC
ztd9L6^D_?ZQ~%fron|h-uI8TV`HDm*(6kUEDpDcHgS_Q}MT4D@;D}hv9oU++Wq^L_
zsK0P|hrY3@4KYq{6GpBYx+%;Mr`*}wpHz%DO_osLx4gie5jFdo#!tCoycea%M5~W;
zIvQ>A&c2fuFmVX7;>;ByJn2DSG_O<emmlzt!{f@E=5lsjYxM|-?~4oUC%`H6xG`Sa
zfqpZDF9@ZAvI4J0EQtd!hI9Z8nInR!fih>nf>?;0x~+dD^Czc)`Gtbp9wi9|w|k3O
z9>;#`E8a7b7x+|)*tJjpvXU5^ZubP0Hn9l_X0bgD*{37kqTub&Z%3iS8A=@){pOvt
zBbwpOQQk3zFz!)Jw%tu6wB)ZM^2`;-irqv;H7#4XRo(#N0x~2#In?#vQi}-j3e&zN
z9B2*ETbqwP?H?I>r>q|yInVy2?}%ld4}_65OEh23`)I5_FUIbFV0wrQMLzP2QG?*n
z^ax|?i$lD$d$ss$)K!`ptOdsMrsjpLl^D3~TdVjuvwwHR73LM{N5rmTXS|%|<{ePw
z&7E^%ll^y_dc_D^Qtc#cY+my=QbUpflk^?(NCgZAZM~ZRwq!Kk{n*XXGImuS`t@gz
z8~d?&@brFuJjq(Hlix>f<8dg^uMA44AI<YM(jQI;mE|J2XR?hNi<<b&mMPq@TVY`>
zNab_c7$H1F{5MrT0m7D1q=~?mK|8<Ez&t<W-ha;iHYf*GL+<kaXFDUbXP1vYD0VQ*
zpeZI*iCu&Av*){(rZ~7pj=#23ir18){mwq%VZX^nSvMX_P>#x9{8)L&K1wxKx3lOB
ziC_?D>l3H)^()9U{DmJb#z^$<MN=x^P6esqgSxT*>@)AHo&3z@glc8JS4m~bhA^xZ
z?OFps5Gjmsm-)>r3Mcg;<j8gWL)N%Sp!<-qq@V3sT0UceS&Z=)2@WRci^&C&e(3|R
zRAmk=f;$BiS2_(;=vK~)fpMVxh7>~e{+rERdb(=s{mxZJ;BH9ep)5Z2!#52S&-m1K
zfq&TtD=l81@3O^d{ZJLqiU}B<fzgo2&j@hE+i;7`MzYt1b>pC?I~5C<E%3Jn*O15O
z#D`E<90I&}xTc=6o^<6OWojTAk}9W2_{d39EGPNz?z&H=o4x<FEu_wQ9~>E(huTXN
zJO=mm(z_}R*k~ho0NW7QMEm;6D2y--s4A}S4Vr`AbgpXK2g4^KNBZnlo96^&6U00}
z;U|c*V`XZgN{kg9++btv+<iMEUA*0D%KOggwA9ehF1l<e#DpBBl*0Y673+KZK={*t
zq6#MkBu&6n1}*rre@>Fk$B9;CJGqUNCBI1sp>(c6g&U}RTEASJwAYXe$Xb?30q7xw
zha5??jQ95ciULvMz+w?Th)c1sJMW00$2C;t3>}fIzYX`1=o^daauBG>#R>>8H})7g
z`M-CTK~A(w%@&cOng3RX|9xg}j_Rd#_uqYv3!Y3#Wt8cw?--)s%QY(z`j#pX?oEXb
z2nQ%=oQBkPJr3<oQ22dD)n^aq(SU9g#DP!!BszMErynf0RD_ZF`RP6&P-@wje{tqK
z$Bk~XkQ!x|97)MFoaHkc1Y;^PiOnh@B~=t11?NEuz@fLy@FrO>dB!}&{P|e+{&>sL
z*5{wP(|ojfInsqCA<<IGn<2hcvUJkMy{%)y%IVt}J4pJV%t{u%nLL>A(;+8u$?FG0
z3_|-KorypsZ;+R;)4wZ2k+XKmq_(3i+C9~3)i^ZqbMT!QN}`W5Nf?`EiJ;~{q-nuq
zHi4=*>A9c|O9X~7X#CT7%MQ(e!BA+)1P!=~SIs#dz;jiK)}qQF3*kBfHzJwwvHJF+
zEyfKVQ`yJlOuct?P{84}6Tttq2ij@xsg^@X1KFU341q8b;WgWKa8i+qD$v}wu)BNo
zmkWjbrweQfZrxNKr6mbX1}26eY!NTh*S};Mr^~CnRrY0l6oLhgJr(`LH<{QA7p<(t
zCeY%7gv%(Pntt7e5pa!(E0wCRCLmiJmGrt1#s;R0o(1NKm8_HD_SitVreQzSg9QNF
zCP;RcCdK7G3CWszZX&(2Iv}>h^LpxnBh<#D`-(OM7A%E1`q>{+)jTkLq|&TDL63O3
ze4mGl@xVLAg;6~s)C{!PbG&V<Ak#z9YJskc4vEy!%G9G3PvI8L0$Uf^EzH@tfr>wN
z3?~TJ*Z+EF?h-$K0})3eT3C%3f6|u5k6HlFGE%1jc!8OFJ7*9x0bsodGzsZ_%!OE@
zdBNnd1Bt)Xzeag8%IcmF*!sJ~ACvp4AW}If-=a~^E%4MgN3^D(s_=4^cKiP2aX+VX
zcUhlX%L;Y+0u>=lEDjaxjN*_p&?)WZ??GGfey*yTxY7`sz>i(6)K&BQ4#+zt_%A72
zlqznD+8QPELp{>J3ATe9vCK8uJ|+0T8xb=`1YH1&J-}8-$+-k6S!*&AT*uc7M|CdF
zyM%}ARH4-Qnyre{zeijytS6_b3bCY<(W(DLH!F|yt3<Ds;iIX<kl^Q+;-#-|8B3mA
zT=kM=6d!1il!P=>pBGFF7G1|j71*7`sM99Jh8pHxr+{sb^7XYrz$IynynJ}gSH%O7
z7;)H{ui5Pq0{gYSk^YfZMu{RTj2Rh;qcDcmn;5hO<Ws^C1gjF5aZ8PMvBeuswa`WT
zlpinNI0IPi-HMQAFIbo$US<>LLPiTAmA|Hv^AdKi5@E~Nd{3)aWH*AS-Cn7QxvOW4
z&rd8cv<bQ3(gw$_&3l5NplMj1@QXoJ*;c%bQ*I=EEI_Bar%7RIA%Eyr9eY)VKy^`~
zNz#5J3K_yXfy&;6!6zH+tH%=DlK~EqVX6Q`hp}pfw7?b7KooUIW=$n^8x8P8FSo4K
z!X6LdpFa><_Nhs9xc%OtL^hKN*#+Y7joC^WmSNRfBECN6q?|uwQ_+w$IiQ2dl_)wE
zpl80+bo_{avVC{u{zEGsTN8}_gaC~R*&(5${!&`Z@$`^JKAlE2WF8MnCQfS6&5ut|
zIj=vmb$u|O{Af4M(%%O?ljDFn+}?0T0>C7wU>?zdBA5$2?}#iC!6cv;{EgJ?EKDNq
z0<DZbqVC=qRRvq0Yjp~D<_OjZ8JS~ZNk=PZ!{_c@&PGnOQr=s7bG}`15a;yJ2J@R=
zc;cWzQ~ES&CEvPpJ3fznn7CmH*(ej^{JI`R&5yu=8HcBo9IA~O#mJPEP2jGIP{!X9
zWrsyR(_6;^D`&!q*NQVh@s<mh#D#*88kxe^q^G74-fwt66Hw_40d<9BSoSTn#E1HX
zSw0xj8)a@jw+R3fU#W&!Pz#LusQ0x9q7IR`(=1N;;-3yBZvHss30S!ou^Kj5zV<?3
z3_6>G2Qk9soIzzN=-=@`>#4uhS~ij|(pa5rAZ;j2Rl&+ueP|r@22(H({HOt@EFL5W
z5;J*TnIGfQIBr}CfaOTF$tK80T;x{pf6abHO7~Hgh;_K3%x>G6K_w`1X<rjUKO+#2
zyIQ)DhZh0#z#<E1sS!Q2Jdv6qQD~WHU%0^Tc;^q_BmUYtkaum|^6s^~!YwIY>4=lx
zp0#=k)RK79B}DNO#}>r9Ri&)_2%$O7!|mb52FisjsYl86Q%L&E1yx8taCD#rl}K6C
zIQ-yvMiA*t&lWA@x_c^KG_VaEnLCx>%@W-|2H8`aGq+NMI3T{rA%_X{+6G|?h4k3G
z>+u9kq*<W|Sp&1AY<^-dJ|ze11~adhqHz%5=z)_(Dr%6{LP?SivII|quBie&4t<g*
zUUV$M0sBV_*YySeB7#)uiRg{rS<0pzw@X^55wk&=3eDAegqn>JzQS90_-~{FG<xn3
z@}uiq8>=_Mxf7y!dK>Jo?x)$ir3!6P)I}Yco4SNTA}M|F4Oqh%y@t*g1(3<wLX1U)
z=EVuj=ujbO8#Ou&W(KFD1q@0AYPZF4fF?#WUV|8XU2<5T`2cl=uWmr`3`ef;@s``W
z#@rzPcxnALLxiF|M!FOumqJSO1Z8)<bRTV}LdPBK@cAt6<iH}?Ht2IO9RCaJE{`<5
zF@ye}JHQbBInr+Wz<I1fU~G;^+~aTZZvkpUc}YBh-MhBW7js%R2y&WR1vOvBBVN^e
zzAKNArMhV{dvjGH4I-K0*f1lE-kAHTGRVx{BC{LjsJ{myXBV-6s493E@x@PLl)&pl
z|M4y%?YA$Nk*!HCI)Vheq`YD}iQcIdIN#(A!_}g*YNX|U4~_I&1Rtxhgy7%jXihNd
z#<IAt#@2q+_oUdm_^PQ#&@Y~Mf(hk9d*8gd%aw_Ow+jqr3e|`U+aD@f$E|~*hy_0+
zN6;n%ll}-L^5ZS$p)TKT)Bz~V&npL6Q@xA3YP*HsDX-qG$X_L{Vy~DOZrlwc{<55|
zt93tX9(6idUP_m^YfAq!;!`=RD{BG967M6~26Y6Z(^QlcmX1hw)xDF`8g@i73LY*)
z##b!mJ6UTWsy%zegdfs=YK){FxU&)}<Qfxd`ezvHLy;drqSntb`X^0u0oVVVX+d#b
zUy4!+#z$$&;OAfdlkZc2b9{7yC?t7<Cu~)%p(bnz2NnYq{o4a$l4BwhtN)71&tMO0
zdI(O~)R&+CSv*{<zbSY*Zg%*(-B@8p&t;Tp&un92^5Vn_XzOv~-e>NhBR<$v;d~Vv
zE+%x+HI^A>*_soaFH-d?7=Mo>qY=V{_RJ--Ihn@CP>1Yv`il6D?cp;>%6vTxQ2c`M
zVP8ct{j<|zYFZsuVeqKLH_B3`Ma18`kD85-{~=~7^vaK?sGlClDApE+Hs=@r%2XmN
zvd8ZbbXh43{Jq>QYQ88ue6`}d!>p~Hl`GFWyjGnpU&cwaE?_P@(VAPNz}*rptpc*+
zZKPq=nzgiH+0h})WTNP)z;%-T{BXBbwwR1#TIIcD6LGCJ&m#Fy*<zHX%gkw}k31VC
zjZE}2?G7+OGs`+^c3|drhRBqLQfR{<YClfX&@J|SCEnhCdzwLQH2&YAe(hv1&DJd`
z5yT13QG^8Sj{RQt<2G5t3gAkxY{ab8MI|NuYum<wD3jR775qonY<o1j-ueLS{Qb}N
z<0e-lhF%(o2(D>Moyw$Jh)ZmTU$q8kIt?VPPIv^;Xob0Qv{<z>eG2$BgU0fs{%9To
z{inXis%xd`p?;jKlLVtxf6q;3-@Zk<WGr(ErBjo%G=&umKH+E%@J&}>@AY0@Ift=5
zLla%>$p)(pr$jShG}AHet|+92Jd3N@LrwqeH!C{1u9>;6KM~9G>i@L4=Oba<L966L
z(W?wIf5)ZyK6as*VQR&nSb5Gxgy$8dXeL3%Zxq*A+%y!c6fZ*>0_2mn>B}J;EO@Bo
zBW$$s_K&2^cKY%#qVSi5Mi!)&*aNxYDppEmxj7HR19pP)i8kxSew=#l$Tyo!d_iLn
zM93sKP)148M9?u)JZJbI<W~ux-e!u1m3mA<P)#h!{ao$qyu^U&Y(k%btcRChRCIUK
zm6f`b?euUCs+3c-@Z;+VXBjaY2bpqWu-e(kPN`Jv<KWL8Roo#K3HdRvT{LZ;)=6ZX
zy*Hy#HhNrIp+peeC>~v01Sxcg9JboJu3-V02UMH%tIWx|s+4<$GM<s*a=N7niP54a
zJS1ujsFoPv(4f7RK8KaX%l!Cj<_&9z#o}T`FUt0i3$saBrqHI~qsuKfGYsZwR@@dL
zYm5||Azx?ag8t}>e(*P~|6CKCZq+}_?yM!(<KWy2BS4Nwm;UuRNgX0jVEas6H>}Cw
zu5L@7#Uh%G2BE~9VEq;RZwEJih#nz!T|59g^UUlh_2J<7U#JxA!FBs&>bJ;06h_iX
z>^4kkGHS0%f8I3FaByVP(^8Lqe;Qrv3IMo$5-bjo7ymS_Ztnj_T0;Xte3kw^0To>N
zi0zlV%?G}?*JKzbZG&oF9|<01dJ+v<v{Myn2B?={AoZWqh!3{O`hU|Qt;kBX5wvLI
zlX`La%88(MbhvYk&g%#%xlMrI>BUU#R2j&iB|p5)+e}@SnE58(lNJ78<Mzl&k?#mI
z)_fnAE-N$ryv6f;KLXSVj07RzRi3|YEd8#(1!r*5`k$$vReYP_tns5X)t^Xz#=oyu
z<VAT>D5&PPoQ^fG(5jf-*i_g4dh_sur(_lrq${1|h4DUcBajVk<I;owq^N0EN)JN*
zRQbRJsX90z@Aa;MTd7$0P4dgqh@4cN1dlM_m6{(%;;ZW}fve|m@fJ#@?TxLKu;!)P
zbu&Nz9?@v~fLhE!;TQp$h;&heftNR6P^RZ#SA(39$HEhQAytNLst&oTKuu(>)0Vt_
znBsU0V0D%D;D}V-&yO~p{TPI-$&VbOIvf7Wy!DapmpvY#rln-rh<wpE=5;&~xB>Id
ztEXSfc8VJ~dHSO_=7L>1wWP)=!>6Y-;@_E4KK!5a=OO1(VZo1qf+vi)9cD#+-UJB*
zTHDbebs-mO6cpFR1<{DSJZ`>E$p<zQ(4-huLKWBe(#m-|Bw$}@k2VQ4n(ByYHJ{8-
zL8$8A?mtZQvG|VgYOo<KpQ56l%aTTUOo!wO!FFW31>}P#iC3s{i{3u%3Jt9t+J;Z{
z*6Ery3s>7~xZ}I5I&Qa5hzXMB66x&O;3e*(6UxAB3*iD~j5MxR=u>!ll=c;qbS0Dz
zhh}9D|MqWRk@cHaJLfmloi3P<A7*kZ+{%E&PxW@uBbOQB=X3pZ2>M-83!riixkxl<
z-2*+IHgEl+OmC^dT1=#~IAlC;8E!jsbY8iK#1<JYl^iL~OQ|k|;gj__6whQkL<XyV
zUgZm4d<Smm{A)Mt03&Baxxq7pszo|wd9$UYXy*oYn;=!XTp!_1Mlt*r7|A#|ipsH~
z@Iy%%?t#z?f7(LNEpA>dVWt@nt2tefI1szp!4iA;rT%$YfJ0?glZk=O8i@s*&Xts2
zEu>Tgx4L?T7|u?gWF0P?qIYY>raEPJriyehAX4=JhtU;#a6p-7AvWKv3v|{eA9CMF
zBEEzzKFLX(=Q^!&e3?wI`K)4kt0>lG^PvDV_<n;qrf{KjTam%y_bzcpAVpTo=PDf~
zXFFXje#MWaHNv4uh2}evqOH)+JQ!WOTqzP%5#e0=Unam)(h-SVP4L;YSzYqDUN?De
zA(uB~xi@U=ZvDe2Tqan;Uv!W=JHGHs?AO@`FZtpIkD3vR|I($IRkp-m^w4+URx1oF
zx^j_4$GUoaB_C*rkEmoFOJXAp2m5}C!@y7fmA~g7o?xC?{kdEl48TIP|NN9S!FMhu
zPp|N+tyPIZH&oUR^2o;F+n)3k<)e>Z7p-f?W^>)DadWXMW(!k!lrfFbIP|sjJZyAt
zzw1@BDUp?ZJy;hFUa=8GO{&oIBiuh>_e$BL^`gU}-eG{Iq1naspt>n&)i<r`Uzk2=
zrTz2G?Y~&R-3wc$XBmoIwC`G1u;-jpVwfYAJRZdy=Iu6@Uq;Y#gUFeuR<u=-g0R)f
zv+QVAKNZy410L$d3xR!f_^vYVaFXK@u;2fd3YMq;<MJ-l>dgPgNmro$!1613zwFIF
zgOl}ZXPc++;X>ApRmfD%{~_$0f-~)+bsO9KV%s)4wr$(!IQe3y<Bo0H&L7*hZR_;e
zb*j$gu64O?*IV`0e4aUmLqxW}zUdau4trr^(Hfij5&;ew##GUq6$XLi(Cz!fhtj0G
zGl`wkwez$9C8n_Of!KhdQs~vCSM|Ald*QzQ8}eV|lkK-<WUAMVnYYnlKFs`tVYPMs
zxBKBmoYwzL9@MvDz@v`Y<!pEFnq)of@qrhJF1hLyp;qG(!MlultsaI;Tlc{Yoo^(W
zFV95Ody*87e3oAce>`YKe(|eV;y<LjeTFcNn8It6>)@uULr6iQAh_gq9Uxx1bWP`~
zZ%+Nu>fd%iMcX6FoxRDr8sW4_$$dQfq9Pry!eMd0rpZ|Df*5%DH2PGZxOopIczg;-
z6#4nLp0-<k7XW(g^n^gpfob@^B&JgT?xp@GF;%~6lmr1G3;BPEsV{6Ag}T?Xk3x2Z
zu19aT!i(FC+)NJ(9WnR;!u~T}yf{U_7>0Z@@SDYp{ST}Sy8~?GF_jH-1n6QO6gov4
zF&r3rnBTKs?)5*=Nas@ZRn~)$;nJ0J9}F9K+R@#kn#W9cYsIwJOl!}MCgP{Xzf%i9
zz|X>&>+e%|$a;0nMr>@n`KcCq2MZ4TNeO28maTREo~RWF06finURN4E4DaXMT$KDb
z>E_$L0RHMW96hs-NpL69q%m5@6Ixte$*8m4wuc{<oS*FN9RIJ)_r00EVu6ika}^|B
zsR(%;@M=UAz(@5HP#Z9VIruIcQ2Vr-4gQ``ySdbDd>wi+?*lRaa1_V}rTX7FyAVsG
zx#t3vIpBNpV|$7yAaT2RCA8mAL;9Tq`M1kG9enQV<44WXdr7wclc=b{8`Vd41K~z(
z_V?C1_}{Lp3`0n?*tG(IpV5=rEyg3iz!L)M%5kozlkL0h8OwOZ-GFN&D*Ne*uuO-J
z>noiA=Um;c5!Y_pmbUGw5p(86p(C#)baVacQ$@YExR+T=#K8#R;@XFfRCmAkEyv!o
zRYf7~rFX)sQ1O|UFJhSMa_b+Y?uYQ)>yLq_6<-JSkNuj{xE})Y$n0ZsK(xB4^fUNM
z?}tsbQ11c*VT%7Pm88H;lqLU-zHayKw=~7qTz%fLd}=e^siML6#!XfabnsY@|KLZ?
z+*a;<$1}?n#!o)(>kQPdIxeTu9+cPcn(A{Zhs9vSkBIN=6vx*u>y%F-7A=CT_VQLk
z=dDc9ugKD_`}oJ;PRh?+L_UF=h7o}qhRm;B@Q*GdNBMsug!n2iGIM>J3!#p~hKV!1
z!Ck37lfO+fy03%C`oC)hZ$Eeez2(QLf)}APT|*b&ug&i-9R{xYxC}I(9yl#h4RMoM
z!`SbWZZY!~-Ph_XcJvp2`1e!(NHKY~p+RU8+y$)&9eC9Stio?U<`H#0ISaiuIxw9+
znC(6hAoHInX~*3xY1Vdlin>*Ih{dySIe$6s)cE{J`GoH%U;kXXdz(8vHT-q8XBs1N
z!SabxZ#?nvKdJrk-2@I<g`Yj01Q(JdVAFLn@}69mZU|*L)vSYDlug_<vlPo<md!$%
z_3d^7b)k^{2ygL_DBI;A_Tp)bj?fu?ERXz{>YubvG%ZWPpyLL9->wk8?<QOom?==I
z20U!t&0Nx6ty(5R^Gz8&h_Ae=C}0HzQ+B#&EUY8m*bQD_)$l9IKo&2#lA3{y920~-
zJ@j^WUV%?tH*nF^H;%vA56U3^1<^Lq<B6d|&I<-{p#roZ**+<%NA6d>b#;_Z$!vr@
zR5SVc-gIpyrW*jnYW!ssJCFr<?*)3P!f&oOUNG00%Rvyo43XoBLacr<zJ22v`b1Aw
zJv;UubR+9`?z#W<;Fxk?CiNN2%Qqr6HJH7NEyeEf(Uvhp+aDvD{;?M}Er9V<6+X2p
zmI~Sg5Nm^Hu^<LOtZvpWaTWi!I{)VD;)9*Luz9`nbvJW89UZ5KGA<QF<ZE&m{^BTe
zpI;Y{#wm9O$oeZ9HGK{j14=1dSIN|I`b6|GYTNVgt#CAo=s}QmDdI@}(Gu!KZ#z%r
zQ^n-bEBuqY;(OAKxAT%iN40aw+r3%G53hu#RHIQAbdjL}1K0)S2k`{#1XF-^#yW48
zEQRsJ{N&Pr+Y14Z_;m0;_=J3HW|}=V+a&VwDLt3##7R^ieWICg68^%WL>Gw^4mnKt
z-6XBZ8??>s6$k)#;$4T9r9V;?k+;8E745!u%ka||bxf3>OBB2AJigCW_jJF;zfpe2
z2PTS$LdOh3w~Y|n%G9GUgAJ!614xRAl=wmG5R96^J216YhF(Ld5a_=YhH`ax%X`~i
zrX2%*KM?gEyt$IM*02k6Dzg|SseP@3@VYy}w5&SVeQgree7t8mPTGCW?d<OUgTdYK
z=i%byb6$*d>G_}ae$oGMYOh~6CTE5u(g?F6R^w>FC?tyRG8+abL3n|{=TT>yVC5x&
z%zzdkW=$Ds@xp60XB$6d&!5TZw%h)E4GVeJy;OQ6%E&S(PTL;@r9?C8_g;ese8+D5
zq~Sxa4L9O2MVC9GFqD(E8ftzm=(hHJ)KvfR4K|Q9ad<ew7Ub-B_0Xl|<EMxkKw&LU
zA%9}+A4`?Q(jx(j_y7_=-RDU~Q5Wu$cA#jbI;TR%a8egScG+SLj^|QyoMhe#B(tsT
z^wyg$Zg2_zmDS<Q-C11!oT~MG?QhYRf56Iq*&b%i0@^LDNzKbD_#jTR;KcFXd<@hG
zc@=ctoIGi+WoUEl@ZIdEpYKK-4xvszC2M#i%zlC38O>q}FXfG1$5&VrMa9A3gN;K^
zqWoKsNMaP74`rReEhtzzgkU~^oBmU+=3BK{w%xW%*1DiSM$+~B`%P2uuG#~!w$1lD
zF%`4qY0-WKvC2+=_18^~yx3QR6bfHEA3l`jD4wk4znG-dXBaC@p`I2Jp#+7sflDUE
z_zkO%(}p5xH^UB@!2j#kB!vxuxE%Ba5d6$hrBPGG0~h%Q+=1=!hZOaWRv8hpA$Ib4
zv*(+cYIi9ZCUF{?cQx>v(bTlZ6;P_&d}lhyeSK~T-Z@P_&*a6UL9>K}*|+2GAi2uS
zSa!r5B389&NQ+OICA2y$X<|@^+?3AKb5nY*plzovwR3RNw4qi^B7l6*HY<|$CI!;>
zp+OCg;Ky9!2BQQ~C26NY$`<pb`8dLlRD|I=cxI1zJoC~tljVenL<H>gnm#Dr2s&QI
zg};1n`$@Je7UNnLo0LMLh-T{=165eTC_2_?UTo{|s?tN_hU3E4^cmiGY|Y+A@&Ve6
zGUl#kU1|uFTVIOa9Vc40#~By$Ev!^&Y7(QwB2L#yjU)$Em{jo?<&5!@;3|nMw0#PI
zsCH;ySJF(>BZbO(s^IiSdTv>;&)2@{0G#s%OI)z1P3(oX?_451-g6{{M6t@hDBL~7
z!ZFH4Ris;SeYHFP#DP`Q!;oxPQ+ho%zees6T{Ex@7t=CZmzi}`IJm$^*p%I)ulshL
z?`{K;f4<9pPQPM?wmB_Jy`sC171QDL2%U^y6Kqei`baR7GL}mbhT2k;m>Wgbq!(_o
z_RMoOy$;rOm{(P$7!76<wR<eelI=U55+nn-)x7SBr=m?Nt*ng7mf3#w;%<U?iFJ6n
zWsxW`fuNk(R`FWTrKhu*J{1f#GPZg4PjWcg%rLE`HS^i^Ni2a=()9`VY8U``1BqzM
z`5E0+iWY3YR%+inYyAQ)GLL<1iX;*Nb&(DUAnYeH)Wdt$<`9SdfRlVEsv8M(Q(;o@
zG#n^8$jNNfeH;S<=b*qSbc9O)wZK2u&x#3?eUJB$JXabi3VQRlC|L^n2o$AH_(-Lx
z0*t228~lopK!h%77Bz)8OY?^!Xa=W6V}?QJ@%@Vb>CH(?b|(wXItc6{zEMSi`j6J>
zYhWci`wGJ5Zj5WNcB*~f3r<rqwf7OTuGW^n!OGN5z~`zDQ?USoG99eT7T7KIH;EG|
zc5Ocg2AL<d3Ks|)Cg^|mc%Pd`9G|bw_AwgVT1A{$wYjbfk~>}RgSpmINAc2NZ%rbU
z`k`iIX%$aT$QpkH{mhJhOvA&G>;;ws9&aP}dLm7f9u*<&d2a>mfd%MIVUg1VDcC#B
z_6I|a&Q7wYslHqYzK{g7l&;f#^!+#@tW7FpMVi#Fg>-On%n^?UYF*{ypVJ;)<pCxS
ze4VA&pCuL!p_V4Vw)rUjG#q9Hq4u~%_>2*Q$#D>VNcN*ZbvimDJ(MsEsk@cQkB?fz
zw%4y4d}rEXmeNUAoPJkzLdx_|H<P%fwDg_&hPVCJn%qCFl&nqQNz_YF+32Q{IRdMV
z7ySg`9zreF9}64dS^f7oGALgDu_4N%1bk}ZCzt2R%N9}AVE+kA%~SLTE0MvF7r`AI
z#-D4;^fe)n&npEU^OxbuSldI=msMr_lsh8W{fxc%3Cu~Jfj83VnCQLYmdwk{QeYg!
zSc`+e!qcvSDA02Dvh`hZA{z)7!B}2c1ia;#yMEuE@7*sZTa&Y{RRL3=Z33~>B?}M3
z(_BO~<*dwM2`L$d7s@4aq+8eZ*OstryKc{;9or-ddmV`wzYaVYxcBV%c<mhx*_C2`
z!yu?P_r6%&_+>s{;xn1S=~<8Eksm}&hJ+;MtNHH^BKtwGMg%~i8Rr?7^fxvFVw!d{
zGH;WQ$K1ksOTTKrwa@<Z)tIeojL9sa#Ff{EV=mm39!%4yWj8tkVS}f4SlCPsgA*ld
zH5oo}FkpQ_uFWY+k?Bz|a}y!vLBHi;=73eRK`;+5RAUpP$OHeq7A&BlUf{9#@ba>l
zW%;{px^ae^?2o;}uVKCW4C^T#dDsf@;^OP_&G*#9Ye>`dO-LIDSw2chk$FFez@Qsw
zRObBTdi78cE^@Oa5GFh;zFc1+=B^c>6Jma{#>0ueM+)v_&zxfFV3_Z)%al?AAC*Z6
z&^Xx>Wg``&3JPm2PlPO9H8rj3)Jb_mlE}us&BA}IvLl8{WpZDN2}H_#<k=dN8=@}E
zn)#I^_$nA4eY`ObjU?DwIjh*qHK{MP(6pV1|286^>i)sU>bcZKs}wXo&V)$wSw4q4
z;BNoFR7Js5t-oc5Xj8x4qkzh{>Jh>+AtVGDQbf~5sQOBZfHKU$AxEWTtNZUOxTL{@
zG<@6#@azUJ1sXp1)pBkUOf+VxAsF)cX8!Ocm{lC&ow7YO#N<zUN2_)-LB&3EdKwJP
zQF=%hSqzDs*$O={E|GGWym&d#HSsZ{a_Sq=vOLecIW^|Dy*ZYXz;KTfB*iW7e7bNt
zmh#eRdh9}U05@gVRA%SM&Fkrc?z4r=uc4z!ej1)%01=xCU2WzmgiAB10W=sl#E)G1
z{a41wFb;fh2jF#&G6yHen1D4c-$=rkRmvFXZ!{@#U<hOyr6=iNyp^yU3a}iiS_ZaS
z<`>e|fzMa4=*Ex|GeVEB>GK8fyhzw<@h~I(*4T+@(P<Dw0Wbhd-X%=O1fuu1XyTBp
zx!_~g6xua><fhAbGvK`(8|(y9ogPYB5)jw+<K4(J-?hC;px5HG{N~VHAzsFfK!#|{
z64Egs`%OHagkH8>aSH|tKm^b;_Prw?*S|JEjFY+UJv5lu#gwuNo8rc6_faSo?+3R;
zmm#LE(58U9zz$dAdvZW>P(b<)d-7D}je|8+8*_UCxPSi;hp<JG+Z9!T*|CkZlbrL_
zs#9YE7U~$1_{!cgbJml1SYKya5thEMDw&|BqrpPFeTB)7>pWJ}mvZ*Wt{9r#ZU53E
zN|xX|*VW>M|G62`vQC?%Q;D=NQzfXI#9@{P)rPIR_`tPwFgsl(o_(=GM*-00vM5P`
zHoGCfz~;v*O#($Ef{%c1iFXKlStd@ZF-d!vXX#QU8TE(b7G^paExs%2)340Pm6G|N
z#xTcZ*2M|UnF-B&@fh}-oVf7~iB3V~PB+(A<=Y8FKW(+oPeR!SYZIweP~)l>)17T@
zdmTGL<}^)AaJLoFI=kNbfK#G@{%cVDt4d=lgfiYDPW-hX;o=qHnItrQM+hcFTFl4N
z1O?aaconAwgenwSq@>;TSvVT7P>_OTC}uREqck@MXzH0#wXJH`gKuQ_4%BCPeCDQ7
zSjqtjK6kT!j2uDug+f0kCa(@|y~P-7m0_!zwP^I!j<?;b=i7v)I955~be9-V>x&f1
z=WBeUr`3CmNYA@z#UuSV$Q5tQ3|AiU>NKkntx^+Qx-rDX8bdM;tNx-cx=>UcV}j-~
zU^S>Y#&lb^@8ibYO3ubiJ}(1Q4K)66n7Zz8S4tEXY_v#BLb52G6;zWA<GA>BV4?|k
zb<pdMTJn@eZP<^H+gz(EBn~UExDw0g>XToCF+0-BRVP95B#?QiT8_l`fkO5{Gr;LW
z{LjtXTmZ@+3PnmsrkK83-{^You}-JGov#B(Izcy4=kapDK%IPa2VH?3!?X!cn>iah
zJFb=EN!peOX9*N$Dhu<q@d_}IED~b%oqQO1-E(k*JJkcM&=0K`J!70dN?PI;xB(mm
zeber%lGu$@HhKjayhIzZfaO-=eys*EDGRf(1(`VJ(dtY!HTOZ2N2f#}gO;>l7PKxn
z1l-#ECvNS)8tG*(V$K`AoGJ9atnL%%xIWa5T90lCiINi8oT@eFwJ@?$`&l`oMwb$0
zGI^Y#+BLzDM3!KL5~h+&=rqke#I9$hm5j~d)HK69yHqf1aBGZ<G+q)-2sw%s=w=B=
z!3JwN02E>*u{}Hi9W<-M#es9>u_ytCNB8A3fUeVmhHU~*!u{M8g8v&A2ZKLZuft6Q
zMkURZ`a|%4`auq3#ze3x)Aj?4K<2ST$LF=?9YP#b1I}9of1gd}k9`GW{Qjx{oN9ux
zBTjc6dl<NmWpsWIIcK4*?VcW($<ctIK$QaNjq9l$NuA2fC7m*A!tz4bGX{9f8WHTL
zpe#7(CT(Ej<urHG3ByqHnCkW{b&2WYW})#J_HaN$_VV*jO`AqU`&sIZ?9p5;(xeiP
zN=|1$hf9EaERm6kBF!RZm~~eMp?$`*#%Oy`<Pb)9YJ`@flr$!qHfwfCL}m8r9q-2z
zCmsD|4<d30OrY#n@3=`POg)dE&`8wev?`Fl5p?Vl)1n$mA`Xh90<B#fGLlKH#9`?{
zDXDQN^0=vkLbK<k)?!Xb>i`xr5XY15cmH*7wOv_CI)6XO&c=_Cauvs03R+m<rP`7y
z!9K>om#tB98o(hS$;K#HCszVh!S$$?(QvF*t*1wR+dN*+OO@tRo7c+`_rsEh6~P|T
zJN2jZy7Xkf|JC1Fd$jcEy+9i_BOv-Rk>ITfaVeT~hj(1F19%C+$Y5~?s@7_#v<F6M
zBpmGl7iFZ2MaJ6MaTEbM%F<Mv^3E0tmS}^-`ek)c23d)>^5~iVtbrRnAFA|QPAsWv
zh?{;Zzp8BLb_G^y1`akby`%8KRngS3Z#_a_*nm>5$x*x(UK|Ik<l}#lz~tyU5%sQ=
zoxrEn{Rk7S#lr+MlFXzi+g811tM%GnJ(#weKI>n0dS8efiz%xkVtw<aygTa489c_s
z39c?O^?Ub&QLVKV!3%Wc{<B#6Kxc0Pt)c1q3zq}UP1tr4{6XSL97qfyVkr3-ega+`
zr82<oZ1w`-(EHL!UCf=qw>*%`gG|;lAhi7tC4YJc7bg$))lD)$Bg_qS1Bz~_k<+k3
ztiWYqVN|DAG(m`gFg74qXyhMDd#Vf~vfF^R9oSsA?V2l^HdL_eSyg%vyVY`^D1H-3
z_Q#=GG9}t9f~xh*QHv6-Rh?0aiLk&}VfKr4Vwu~ZnxK08mj^iDCA~#G65?QjB8!hv
z{cjIi7{H1mUSNEyv%3$CY$s9Mix~PS(zb*m)X^HX7f7?X%3|m3f_G0Txr+wSfeb8h
z0(^}G>ZBA=9H*0&lRHI_sx;wbY>PC&It7E|5ak_*--^IeDG@u#5VBx`aTvdLt5jP0
zjAI#njys+3ILd`@6<!y<IBq$A<kx8bWf<q+AWo4|OIC=QRSm+0B6Y7kz?3!E#Kqo|
z1xUmqI*-fN$5IH3(Q1N<w!p4_9unf?zr#+t5yH-4_~i(beru5<@;AS*(4Tr^+HHuG
zlm6=JF}C91KoaCBh__~y(vh}mLvYh)F|lAyRyxy|4)!C_q9&n^-=}Otfsx0;QXUj8
zw@{Rm*8&d~SY7)m7E%J#epd9|d5z9N1IT5zYwrGJv1$3A>f5(-eTlmcR`9&};x)Vl
z$!OygCkM{{m5~{W1S2=zCpU$_U<r!p@~`@l`4!r<pi`*C?0l-l^_##GhGQ<8(w3}B
zj5l$Zc-D;&tpL?@>1wsb16qT@Fuc4W28O4>D<7G|P2?_=LE_QN1)IEoZt|=risZIG
z2@?D_Cn)CZwN-LA+`EivSu*8S`8+WtE%dXzy2qwELhf5!rQ)NIq@MvG&k!h<!MDHT
zF><=9*prjZYiZuE=V2;(tbQ|k%qy;HN;P9{d8<YX&T#Qqf%MiyLWLHSg%53Q*u}lU
zs(cr<T7MudcTSZc#Xi`gLo%tR&v8&RZ-fJg1o7z%h+Ava6xNcyUNMu?arxIr>d^R4
z+RZHZoaNtp+D{q{&X7i;!XFYgB(nKNp_HK-2>D%|aNd}kfzTSTr1~}J3|Y%~Z#f{H
z3x^gByf>%WZ0W{u==5LwI6FBBzY$_*?^u%8mM_Sk4GkOC9<|UlqGC1DL0PGYNTN7z
z@~1GVG%gXb^ZE@9HStFzodoSz&Rjb-%lRBb6yrIGCbB#UN>F(#aB$?e@mT@<p4yo}
zqFUs9kyvw)Q85HnkdTdN6astj4X{%jvV<Gy`4b>O)k2nzA(dhMlv*79y5e!wQ~l4M
zi!mtjYm}zBiVd9FAVUxqW6gz?>?nVElNDj<UFqIO8J{<%XODe8l9T=Lgmh;$(zhqn
zl2seVLLw0F%F33i&hLT{|HcOb=|*BbtC+qqG?TQH8@<V`z@<<_VEhh(iMTF`+jAeZ
zX-X?Zts_zsAC}ITc1N{LA(VKaS_f<Zcb5-05U=$zNsWRHE>ZDTjW^V{1e0yb!fulp
z{>Pi$Iv+6N$b=z~ODS9mh6zc4u?RCUNm6>!w@cIJ0_M*hH@1sH8TK-WJ4IsNQW&2Z
zJ6y6hdXzE8!WB8VMO9}zGox(6XPn`sWx+-;&I)fN;xtdBqBxD{aEcL<5NOU(sJHPa
z+lQzx>gcbC7H35>DG@GD$m5;HsS_+Mh2fkDPGKUt7q576A+?k|l|^48go_6H@-%&(
zEoV5B>54NY1FWT1=E^v`eUUhBhW4&MQp;M5aLR7DDvUZ#(me>J<V(IIJECrr(Z=(?
z-5_F{VG`y9;Q>1h*h);;N}Lj@BsbdeoQU)oJ;FxgI(md_kyX(5f0OC1CkQz@SS~=n
z*b%c1RyUr$3+$1f@}R_Htg^SMcw<xB%t9o8j2xJ(4jyys-0pT!h@#plP8^$q0W<X;
zocv@K8@MnXlsDDxySi3Ekdit|87r7}*rK@FA}sZ}v$Q8l7bsM#a77A=eH}x^nUV*_
z73G^SDU?(;0}L5_xh=6S*19;x;FVGh7#E=Fh%`ZFhz%L2HZQU(3p24VARrkpeKO11
ziWw?~UL_IQB)-Y3L}LSS2&)hc$!iPLI^>{s((}7UXmYo3F7QE<L{>DaYmIR!29sUM
z)8+u9iC3qVA0~;h18~u66@bXH_p{^ug39=(_GJPe*&?Mx$O*G%Urc8Q4Ytg4L*Y`k
zA`&4-NvXBPopJC%m`Kfuo)?1@@;l8n%EX~R>j06q4s?wbw&Bk2`wwup;6CFHrB7%H
z6CY)QHm#jZtWw-;>i~YtVAXe87i=m?HMgbz-=Y{|Ns$6IcD@^NGalv<^$rQ1#Ri+v
zf9IG(!pi-OE(aLqa6?*ACLT64pnn(3r1A?OgQ=7lkq4SC%UC~7OMIMeZx6U#JY_NT
z$fvN(s`#@C!o|i#V4!lxk9zvUN6InW8Wc}bz#>@WuhXc-jg4M%(5bQY>9zkE)Ry@f
z+o(g2Ds@<9H3#O%#1W8{l58<%eu>xQsx8L#?}71pcf<=9R9Gy6mvFcHsc;l1l}V2l
zJs^tDOS++BQhC^|1#Rhim>TV(Sg<pNBk<VK{SnCrZIN!75e86{;|CVdhKDAw&JANU
z^aO!eE0ri169p&Z!edSM^$7TRzON0ATBxK6RN@e1$DU?vgg{2){riRiE%xb3zXvEq
zWqu0Wf^Z55&4;v^*K!TXqYuxem)iE}OY%;05{gX_XgYC{&<E89ez_Xsgh-K)sQl}t
zMF=S2lPtX<4ucQvvh*bc6-v}=ypFFE%bR&D=F4Q3=ZVH)(jAMTUf&&%aeG>UjKm=y
zbh(}s&ZdconkMRbK!8EJe>x#eVV2QENg4C9l)#e4?_b9D>{C9%^hUf>z=eIEt%jMq
zGLJ^1?f$1aH!QvflVU+Lyq5s+CU&KaM<lIwN>gqMyp;hhazlClB~L@9_{GS*%@%Yp
zGQu2SKzGb!HB=ye1ps74bs-{-|K&!E!on;jDB@MNlp+t!XyVvM#|UL|uiKv$DljlP
zhmCPEZz5Am=On8-hZR}8k@(_59etWkj_*sPqO%`|N4)l$*Yqp~4Z?dj_KJGI2~`?*
zT5Hhe|0{d&dS{G(LnvWu3kr|bM3N%2yf%`CI|rda4ifX6jIM;rm@FzT{&u?W&V<FZ
zMXXk^QxsLpmQ5&UshC_gY$JIhB~2hYr%Lbc@&|Zu%ORQv@xotPuve*BhN!jD3vE1f
zwIzvE((9;_PC3%$HMQF2OvC886f~;AfA`-nyY(h)hp9>~lcjDOeOxJ<GWn=Ug|EB$
zw9BZCZW9aO9rYbW!rY@6s$X=CsL(6>*8{wN#Wth#qX-7;Vy!gPx+Yvtlh+WF;(t$d
zhE*r#Da0B9Mb>$byP9|pj-F4~)nDKLY01;;EC)^VKu%s#i=nZzDECM9IFC}_W-{I@
zjwrh2t5R`&k#@^v+ay~In~*B1xKW{7&f|#p4e0=S2{WIi7<p)zKx+?9noK%4;w$p2
zm7ijWc5ucXaazD~IfXj}Q;h!sVc-gDzdDb@5UaOF!f2@!Vm7Aiwdu81gKBtUtsJKF
z%6ZTk=uVlGrBFDwt>tI3Brwr4x(bHGUggkJ$nnhH&u|b2&XPG$0;QI-#TjCp)hRL-
znqo<7^V3x%Fqp)&1z`z_`_IIZE}--M%pQAcv-!_b;)xeMRPwR#(?2I&ri5B3a=VQb
zA~M+6wGKr^G3za7n2#r|W8&hb<rag`((xo{F<ZZ_ipvr3yRo!$R=J0Cl^pkCo5_#8
zOSmXobmlzH7o)$v$K2=HOcI)-7uRPq=m=;H*(9M2_7Y56FL7PDetbKq@8CSv8$0+E
zw64xt1H2{n>;ov#VwL!-sBM0hgLGlxtJz%2mhx;k2u_qR1f9X5N+sx$@I-(tfnoz<
z4PzoV`Tu^56sT1Ww5m&V=}KXjP9sEvI|Ab<SdlObv{7F(I=;!%RA>m=(&z=hiNL4z
z|H|lB<Twa?Q-FybU~@HiX=>^od-N=(^&Yx7n3tnhfH~->z-dt?7;5-Y-0d6^e}@aR
z%F)@VO0Q!j%7bk|$K~sst7j<J>6U6LTnPz;7Ds$fOCBPUp{nVG=9d5@>CkjTzR7Kx
zzZB&<GJhH{9Q?{^A}kT6A7y4->fRX+GA;g#;;3$~>{S`9F&wEzNXw_o+6dxR<&l<O
z{FV_H2Q}83Q>2v3QP_~;bjIKElT)YjQ{Kju1{spZIGQC>a1X}Y;edlEvt}()kVecd
zU@d{GaN4^5HL`J6oY?#2p!tHf;(K4!2zpYLyA(0P&VDyVw|9M&61jzaG;w0Mn9=)A
zw>J4k*G$ppsWlhIz)rSfq9jJ(akHZ9FD<%%B0wtXmk1T>A_!KRGpd60E3iT(5!arf
zCR9F@dFH}{z;P$r-0?ya-|LV#lyoN6q@?)na(LqPKY?0B%5TMOz1DmRpCzHghLc=V
z@(3O?%xQEHm}tC#{RE6V2$xuCa$Uf)fUBBUvw_vshzhy@zNCC1365uje3s~H3=p1b
zcM)kz^}h8}lw!44T)cVZ3^JQ=#kb?Y{3i+GvfbXE-!dn_*!4Mz>4f!SS!;~4K>#U`
z46Q}!S0Ym<^B>{&)n}<ca6#zt4N%4W6ckT;s?=kuhr`YE`NxE7YR@g(DzMK2Xy=jh
zu78!0M+~2zx<rBnkjt91>N_a>)^?5?FAOayEC-tG0T$!dm!n2SFA%j@vbVv`#mQ88
z&6uID4R9-bEv1)NuO>q~Poj#5NI&-i27=aaGb?v+$j@C8()ZqoW3e~WMbo_`*;#yK
zc@0f2eQD4o<*vODGgtlvxP+e)LmTeBl?og!y@X0Rd_RT@Ml;}1)HOv~b+i=6-Rrw+
z+A=)oJ-GhMuzwsLmTp%AD5!gJdT~70hJT;|Xtbbn%!YOUOL<4>-@VfRly~A#@2f#T
zXmbC5c}Gt@{n=-_UH7WHv@>ZsCq9G%7G;2z8h~-A>51~!`Oz|dPI>r_XeIs5<8eh<
z!h9H#fIu0Q0JBwDcr8ULo&k@AB)fRw%+0&{y5d~t#(Vn5_e2BQ2?b3!>+bH+HMgRs
zL*0GGr|0Rb$2CwW_Wzzz9JwFouS+c`zo_A$mZ54#zcr3r3zU&($e#!352jit1!2N1
zlquJp_xtD_wQaBH^QI4%cipuc=#j$S25e(yKOPyO*4cCNwJv-k7aH@2FH7iOXESVB
zttAgn<p(G=23>X>-P1p-pk}*D@yuSf`;*%jf&oXNf7Bd0yj9PZUpCub5|bFc5XVpg
zALN7qdcrcH;=dI~AhD-=0h@gnhVJ7+vpy<wmOmSEFE1osK(gZ&gNDPN!4+Sn@)sd2
zZ>}#&D~Jsw+LQn>zc)w0`)maKr0EZP;+(1+eChA0R{h`6cAJ3qYf-kRJ-j7b4SP?H
zZ!Ks(FayVD^=P8W-lv=7_e;;h`+Vn>PK(wPdz=cN>(OhR;*zEAAD2N<eSYJ)xBXtJ
zf_{Z@hTMRMot~rL9A7iz@XuWQj<hgAj-2B@j%q|cgNC0E_m|Gyz^R|pJ~nOJ{r#aA
zg0Ax~)(+<)<qeG2emoD)?My=F?%G)KU*;9K>QvBlGBi)Oe|y`jHOVivQ;O^TuOsRF
z--eJcYx%zwWyY9jm^|}PA!3PPKKon)a3QX#@G8D(FzvtMI}X5qO6N>|mmcf{eE**7
zgXh*#rA=0mbZu$z3M!s_cz1Yz%95Sdue-*r^;d2+_WP|iUVv<dae{m-ir>mjvhu+&
z=IzzxzrL~Ebu1a!d8Z!WH?_9F3NuC-#(Jxq!I-Yf);9`>PXl2Ur{)%ZBdN>x+uX4}
z$hRLJwa+a5nM!fT{%M4^6~z6_y3TY6xY$VU_#IHlNdVdZBJ=BZ{9jcl1=)Lh=;f{d
z2>HF==h>?tNCerhCRp(oiCqfq=Jn9hKQ)Xd=QI0a<M?Ikxo5&b)2Bvb`_Ko^VDBb)
z_j`pMO31Ugqv&OG0!ODA@yn5G)$TS!cXj!%{wywZf3K_nKx+ZE%Kl^V@6Nq<v0%eQ
zC4%Iy+X)?%uIoH(y}GG~>77$A?9C%+?5zuEP5yHqBAn--F=9B}@bKW_#pNiK!Si8{
zpRHDI2=pMLgl`D6{pH@?d+fPA4~Xq+E;Y*9ubuP7)F;cy?~Yw2JMM=dfZ8^~^Ul}1
zY|Yo{#?E~%h6BvOStAUXB2DDcTJKjU`i$?+2Jg<5CX;r5))u4FK~wUAImI9p3ZyUw
zm_MS^#O@!(U;d4N{JAA~p`GJbvX2VKx5Hw`_mPR6=QHZW-K>5LFhur(7yaJ58Cg;7
zLHe~ZrY)79=i~W7WLyYV0I3)I@e$zo+qV}e09(XSnPki8wJ_kiK9_+scq*mz`CmJj
zjCk7LuKk9EW&eBhc8~X^q?P_P9n&@vrXwjF7@MpK-nM(dUqTcw;cf`_sJ>uynQgV`
z*|eST@mZ6R9WK?c*%8B+oXY9Xhh7qtu}8G{ucN&=Xd-HR_z~7UkCqoh*<Sg2Pkgh3
zUTh#7oZB7KjlgyC0w;cNjrozz&#<DN*GEMv=0hNP0GwyUtVNFd{TW^FXJJdF(h(Jn
z<pN+3c?9F$ysr|(SYG;UxNqzjb&<q&L0AdQpQYk(N;zb_LJ$K=lY7rtP3U8<_wy2R
z!r<XtNdje^4f<RY`R~nEd*k4`A<??eW8Bs1$O9(~7TRZnyQSXkSwQ<~seq;4e`M|P
zx}UldZC}j(PlYJ8o!1-Hs^5EPzp~L}I}KYtr|XX#Zz>hD8De3bwo!mlz*$w5rGF%0
zPmn~xF>qigFn$*$o*$gN14k@;0Maie*AUgJo#RhUs<a2Ip`zpKt<Umxj=vFKdgS%v
zXG_gv7dj!{#$)BqbS3O0Hr(t90`Zz%F?UVx{Z;19+Z|>pF&F5LqicH7f$xau>NogI
z_p@dA&eKBoAAi31rO`v4ld5f9q%4;u?W>``5H5Y#5^2h;`@sAD6l5CyVKPmbR|tG?
zc=ohi<0`sMV-%jgYjt5dr*Ge3MI7w3pX{it9TntOBJSi(r>|W1l%T-R1w%HUeu_IU
z8REf=YYO<~nW>z+byx50fNxzF+rpxIu7Lg;L*FmIiBe}J#gM>8RbI!ogRB+(b`tKL
z>YozYD(X@*D=^eGiZSjCV87<Oa_|W{5CH}=8&qP?6>OIQxCUOwIlM9hu5pFMeMiZ~
z&uENexa0q_yK&RD?>UVJYD}SCbj9v<&Ky-|{MK%HlXbeo&&gJ9+J9n;om+~iwkp^Y
za7w4!;(xP0<DmEQ<@oAh${K9zC~(UNHiPDz)x-T&gIp7^mV$Sw+I^oRx~X)CZvm3r
zuMBF2h~^I2;74nugewJn1G=OXNg|d&*FpKkkz|<Qv-KT2@8+wc`rpw`tg_Q@!DDr~
ztl_2p44#m^g`ktg!*mH2vVC0PeeZuSJ$zu<n(RZuSm(5&@6jU>@v9a7+37l93MV>k
zX^|)BiPqTqBhnPHpul~Q{KvoGO0Krc2N0(T1;dU3noJCfpbkX}HlrHv_Ie2YNFu(N
zEWyj)2Lp(ScQ$}rWGBy5zV9Pf^24cn0ptFI@K40}Ctzjcq;%SVEM;+iCFxqa`yd66
z@#8Mw^J=i#GV7@4q2fVs&cS?AYW^d@2&7mAra(*nw>&<#=b5`l_dkd2%mN(Ss)_v0
zh{J`>U!<2<DO<{!J{#d=O(XP}N<ReO2xp1$!(d=iqfuZ^5(ZSvL%g-{RYX5+5EYzo
z15~;b<|J?5dHfKZ)4&A}5`Fxz77fXa_UrV_+|!(UQLNiX%1Q0#KY`Y3RNodUQ_rI3
zQ}s>nxMORFN|Zov*6Ygvs|#gQ(pV%WJfpx%e{f-RmUl5K4l@i4)ZmHA5^0FL1%y4q
zzIlA0QdSpBAl2x@I}j#KLmvw?44fM=?A#!<46T3ECH>Tt`2>8~1o*__|1OgE-YwO!
z!|BDb9?oPhz<@s5(Bcl2xKBmYwmThdn85#IN`(6{iTp0vQ&-B)e<_*s9-IIxS89Iu
zi%wtyKWUHhK{ejg3svs*>Me8=)*d`3(LWt;Nd@TA4EIOe`1w#n3xPihMi0`H+$*Z@
z;Ly*Vn(UvGkv_UmqlWY+lZF*<)0h3<kT3jqCo1JJvoF<HEZ39z0GB})>-9FDwU{p0
z{SI?zAaRA{&X@Sv`?=G}0J6|+-v`Lo@&n-rh!NW$#heL?R@C?Cl7Ka$?xjX$X>qHc
zf$dIEO)6w%_d9`unoj03UiFj8kRrBC_;YG-b}y@Zp}E3^`ro7&ocOFF1)m-5nG3qH
zv1RecFN83NECdvB`~f?0(!D-}a3hI?B>Ja;nkEyHQ0}?}L+0Sj)_^+#AU2!>@nTEd
z-tx%r?@!B(mu>l7*kM$fw-4y}AeDhj*uI?6*~Egu^qrO>kGD<r%D>O}9>)VU2h(;F
z^t@}#yaX%qh1VNp?dBe=LP5FwE?b%}Q=6Z^rh}Ad4GTc$w!Gi11_Vn*%b3jsql+0q
zECZpC`IS(nb_zcST*xPrX%J;!UHQ<@1i)AH*>pbF<lFzdFU~$wztD4h8!Hqy{Oa9s
zc$>F63fwu3_C=F2?-jltE42&7$`SVKF`jG$lZp($_kr8qr+3h1w|uHNa$U*kG@Cxx
zd~B)a7RbD0=}Sy22QQ{&W-T-$gSqIz9+!gTSCOVO&fU%JJubYV=WjTOUWlCn7aNl;
zF8XgV!nlDkiV|Vy)vk?npyXYKq8-Z#GML4o7?f?um{(=`0t|_u0*P~=UZ#+>#lEY-
zdE=6UuWFFT{hFdQ_^m;S2#;=&5}v}b0yG47iu*q=o8JZfb{5nlU=??h-{SdXUhDUb
z%RSHMNAL;(>WUXpm}g?pW*}-6eV*E3(3AxoMC~E0nh1I@)9s)WCisCZhHy_3DR>rK
zLbm^yCf~jz6s{ub#Dg`Y225#jEshPSLH`_8`PncBq$;}&UYPjI@=$EByluwtJub$;
zK=Axko^c~5coK>!l*`5K-j4VAq@9P9&};!IUQoMABnvsyVLU>7nyU>Lr}sYa56KsP
zUS?iqW(|BMwShz-+s@oL4sQjJY5%r`p3@-Y-jffH)+3cPZWy)k{LGn7<5P5lNuU`N
zcq77ao_va0e9<+#y|-Bqm{xh(nC-8%8!I6OAC(&+U;B$upYIrj_<?K|6|wMNl@-rD
zBuxSsXo)oT4r35OCN8|1<bffuRXp`!v6-e{l(zu-?|F*cw`Cr>owwnR`}59WzjSFh
zGgStw`i+>D#c}ZmY<n%YJ?V27K6S}HxHQ<|&A|omOlYJlKcki1>kkja>uu-V+gUT|
zX-`S;?HdTE=RtvT&44B)H{aTICwMQdu-#3gNwC6u5*moPGdMAQWu*$bhDT-5zB<#H
zGsz%H&|kJXh`l<34*g4x_}T408wX3dn~d^1<}_$oTKcfuZ1eqWC#VNz`BEECnmTX_
zsn#ePx`F6%l_IqHIMz_IS&g^wt<?s;PjthyM-5}KX7lxV^l?y04F<3*+K75SX!ES;
zP4c1^Xs(`|Y%AK^{_AU{S+R{*@B_$F27PkeDmy)v8%#pqM>AjQKaX*HmJ_+LmKAfU
z!S){ZUc0;LCpkM8RP=)|U^K;M@o@YqF;?_v&?Lx(%q=PJgK%;zFp_=KAoE}qszEC3
zG${>fb?24X0hg(taj^^}Oo+GieMvHK!Fc>?hxWzg$uVP5+#4#C#Q4N>A}Z8%ZLNWE
zSz?38G$dvhCx!tN_ivirq=wlvnPDl11He(%I(DUWV<p7#(EcRK7@(-PT)!)(#iwu_
zW(pl}mOWjLLMJwL`S(FUx7pPY-?gH{)<Y%Nj52K+2f1W!<RtFg+&i)$hudlXKbm==
zL`BlYEs~qmD76|Z@mMq%ju@yf&iNukgh<FQh~9j1IpR(fsb`mIdQkJ#O=QvS48DHu
zngb$7g!KC46QEg?^Mum;VLauKZ@tpMF2Z8Du?{dDGKSo!lmhEFE7FccQ6l``X8*%=
z%;?&lGW^8~lEx$wHlr3c^5b6`dK42Bp|}YRjLZulwC=-n9APf8`5Km8=WGUlCo9CA
z;8I32o|C(-cc8YQ-$x{Ie14xFdvK$=+~NDPZviTNuk{}8;uzMdl=W9RW@r^cV93Il
zlQ)q?5cL3I8MLK}b1|XuFnEcTG=c3CfjM5l-cV<cs6{s8GN~|GEIqHcvNj@RnJ|qE
zys+w`UoG)gmB$&bqSEHf3N{W$fGUXDbtvu{^AtMc)eV;+#4~a1`=|{k3N`{!m{kH{
z3(VaV47el~k_ptap*m8=L6l9>1vIcgSZishLGqj0**Od2i|@fbzdx69H;jG{h$^8r
z8hC$ruuG8V!eze;btNabdK@=W`yZ{0$6M`^K6>_li4F6CNs~ZU7!w!Y$l^et^5+_W
zcXbF`YvuV+4Bo?o7G~bLXbsPv`d{MtPreZQlEHIZ|6`)iXZEv?9&i><gItQCcVYD@
zfSqB5N(2>RaHBk{l%s8OG`1L<(?>AoeaY=3q~HscDOporzoT{u4<KUb8RlQpv4aik
z6TO%D2sbNWtsg>1dA;O(JeNYl?Yv$D^?u!1g5ThP#{43OJqFnO{&dt2RD1CMo8fh!
zsrgOI#jl4I)x1Zbu*3uU8`z}C=TTAvg_l^`8Y3hf?~I?B7j*-J58UPcR{l%>c@$l!
z=n@oY)2G2&3XRr)_MqexC4+4#kX0I1KIh~>vC2ess>CDa*vN72--wRvQ1D;W8R|_r
z{j=?8)Cf46j%j-RA;{C+O8xL6>;ovV5q-%pBL7Nz{D%D)lrx=d*8+Gi#mImC-(v@_
z6>EfWZ{tYgb2va{VmTc=W7DP)?Y40y^_x%eTd!HjU?4-J`twsU3HuQ(Jlh3hWV(Ug
zg`h&aN)kwes_>}pZYDz$I3-BG#|LuAJ=Frur*F-8MQjuM6+sPXOKxc*C^0RN`dHnl
z(`AA!<)Fw0cPTKU63KS4&by-S`a&;_BCwqK-7JBhgJg9<P-ygl$tl6s#WaHU9bjNg
ziE>mh2rbt4xRv2}M4Rb?S-rLk{pXrBf>;?()Gm8%`t)k%jssuk>+AVrlJaCbuJ8BF
z4QhX0XU$MWML$^72}R0q>*V0$mf$wd!A`Dt6D*a<U$)TiCRxE{nZS0G<)krrQBrAK
zX^1V^78Bt}5zDx-if$pt)e_OmtclN<i>NoHfh(#Am}p3ih#Iz3>#0wBArp3!2(;}t
z`M5#%)X0^h@xMSR;S=gyMk#p{WT(Vs8=zqm4rH_=BI-Es_TsKKvJ)cZ$)GD&93zsk
z1(H_$kU#`c^;QN4-wysZ3wqy$!86&~O25L6oT!v2QOn@t%NyMU!s6ps=QD%1AtG%w
z#4Ds5MUhp3eF<rD-_eF$yJ8TvOOA?B2Fry#$bqpYfvKfB>t`Uaqsw5@A?75Q;R@Tp
z7dTPY1@h{vHlU|E9nMGFF<!!aTtiZcP8P?Pq#s9dpoAt-FCy(J^+3!Z5*rngZG<mP
zDE7T`JRI)bDfjs7=8sAL*jD<g7bK=4vBmwyhXkt4<*h32ABGZru7))V{(jplpC!Og
z3Nz=GD%E8!^+R3Gg|p+P0y6_u4Q099HvDhej|57RmKsyH?Fc>u8X}Ak6029PfQ7RC
zNN1E+c-f*W6(SyTO+`sQja(^1CQ%KyMMMMy$-D|G4`GxSawDDoI0wwF2Ii=Sh?%i+
zJ=&GY%u0={EeD<kyodmAWF|K_DYeC9E0RFVeG{Ml(m|3oAvi@p2oX=^eCnnfRxkx&
z|Mel1Of3?>7{p2ahVSPX^B+I7u~|n6QWeSBRS$ZKH>v0oI}$@uH#5*{OV|-QzVW<F
zJsN;tZaPAO-Z`w2HeJl}^VE`hY6bm|r$XUP5c+AH#}D^vu3sFD7>*e6kH`Z~;3uqz
zw8{+?a|NN`64*%y-f#jRbED?6t1*lhjtdhNJgSqFwxT&O&KbIJyv}Vb4&TAMZd`}8
z7|c%V4&4kFYJ!jT=ddCr%=xCq5VPj>gAU7k&g{zSVb>BezP>HVNO=R#&|?p0=QZb~
z05>duuzi*$NIoCx4Y|f_bF{w=1#SQ;3qzD~WNu+-ZiQwp$+ce#(R2yrYY7D16(2#7
z!uh!v_OS&v*#fw(6r%G>24YIW5*+0b&mPXc8^P5D0U3ikj0hUbt8dUCr2Guz$Z&bC
zkiRPHVt+A-TtO#g=(7hSzMkdz0VXqGiuu4*%@&A2BcPT{+;0L$6MUB(@yWJKktDSF
zcEF$+@Xk;Qu3mvkm_qlK4KiIL;&B|*Xi$G0o>|mXnU8?qa4i><q1*-%Zttp<TF?WY
z?GM|}UEZ||7nZ+E9tmS^HRj@G#&hf;mbQUPoNkwA)0UP>cuoTyss=_;WJC+T?Iz}2
zd|g}53TA;Fp9x<?;(TI&eb5VAFDJ%KQa@^}wKmAyI|Is!MGUF_!K@y|yr7f@FmHRI
zgv6vy6U%g#s-WjCVxc5JNQX$tD(<~Dqk1dn6AE~s>iM|la#HAcBENso0?CREWIc9%
zVAKv+VdnBaPcURN0<4ePiZYRK{GsG-g$OopNMqT1<Zb&WKbGMlOvm4Bf|Uz1!yUE2
z>2N{tBY<<|_2ah2=FsTRHwpPJM{uEPCNXwV!$Z9<#vSMr?Kmzpl^CF<bGs+kQIs#V
zjD__S!7eI^LJO@BsV`7s1b>2>Ed!5)7@Vbytp5^bg_Xf}kFkzy(_G>Ns9>G$(jdM3
z$6@hKz}55ev+euS>zj4_;-<FJ2m<JI3at9NPx9yGF8#`S4&x$gC-y369UZq>7N2fd
zdKAULLbtR`pGuA?iYJst<WMb@;&l&8sOytvO`^$TfPS22sq-`jh6i*Y8-9Lsx@9i}
zAIw|?vY45==SK3RMw-QoO|`PjG1oaJlHAaBy~~TGgT57rG$VO32H((~Uy|mAQ>!rB
z4F}WY{Ww5wgt0>&ZK+Wy&y#{c2AfhB$xoxFiZKRyuXGWAtj`#H&l3!KY-1<=6SZ{T
z()%?wd}IV<Y`7aJF43Xjom=_jF?4#%P*v<_MW~fY$%sE{{MT+zjlv@wSaFR+>{Zeh
zN9YHILqh{@b6`}ajxnhhB5z1Ih$!@qik0O~vhDe;a=FD3>*#;NQssXmtL$joFVIOr
zc`n>e%OPvXK)dPjXJ9@FvgAG^I$4HB!48#!@64ep0yinytszDiCsHEC*?ee4Vak-m
z%Nq@T+_Tw&<?L<V8KLt#KU&E3CbPGL<3i$Xoo#J!N9M?CU~w$TIhDzC&@fzCteC*^
zSxjGXp0rdvY7pcP=u#C6RbGVJt#96Spbw}gN)WV|;4Gx-Om6L?DH)JnvskVO;nLd;
z?#KD#&t8iPq6f$Q8s}y0RKJlsUCr0JA2&B7h6VX&5JWAT5_)1h0yrPWxp_gD+XwES
zGC)~qs54l+9DpNKsz3fRNa4hnW-koRAL2TE7m-OYqMn8W!-nwydRTNVlb_Jmr^eHk
zUagn!z;E3HAjjrJMwgDb6_OnvlDtT|cnP6yM&{nIL_hgoxLFpK$^y!Nt8Iiw8Myok
zKdK2V2<4RhyU=i(%x`klQMo&B%t+yXh_C2FcS%}=$nR#qpc52WE^*gGz<uDPw4wBD
zx)4YPm81*aqLUCpVH>E5YMhaY%k2R}CD9-;q!i^%@ux;G<f!nVdbx2h4n?ytn6x>I
zNTtW{2Bu+ltGBIk-d$S8-HjQ)lR<`4Dqx1jrvn3i&Tqd(*N8KIu@-Ntt-~@bK&gsU
zhH(l;k*5w-DtK=~a8PQP#=clLmoKoJu)tR83igqWwWq_@J0CFOQ*R<#Q0)S?#Eh+*
zHE4k-IE!n{*Kbc6_KK!UWLQ#-ON%;;lE_NJC`>UHW6ecLlqf(s!&D;bbgPry)DY}2
zr$Q75fK4hTdBX&Iu_axA%+ja6>cMjM22#_O=SM&YIGfO?TFf{L^L*nKckoheS9gcU
z>0VB~tl+|2O9#cqdZ-)kRf!4?jyUYZ3k9hVd8a6X(9i};xTK8e1WM_w&bKwFbaQ!f
zHQ=DgFkJzh&*SFTPvD0#Cb$)gVz_m2AEe~&NDA9DI<sBe_nuGv{q2}k@dmRxLQ@F3
zE+P`oZz<zFY3Fth7;74wmAMf+iC-{i!<3Q@`gz=>3358jh=EFwWzdkx(G-<xv^vG(
z)KN!YgA|Srz1Tq?Jt)BS?_3@x{|q&U=R>LE;9NiZj@xL*BihoeHBSHM50}U#Y;#xm
zcx!9;#&iX8SL+&5(HAyoV?Zs2qs9LLd_aT0ezdbnXEL!&60juSR6B7}CZ=Yluw%y-
z6xD+;%{JIp2dr5DsY8KGEfX+}9Lnx)Jl4MzXRNy*?qi|shuT0W<SPK>qJ)*CNK~sW
zEg&c0$XRJMBQiA!WV;NE4OP&nPNH0$M7}UA>-8dc{X;wI;qI?j!`-*l<-vne1<ktW
zvy%$Xm<v-pNR@|Tu<1TJ?0R>5OZlv~woab?am#86TXPGHTw5=4xlSbPG&sz-IXsFu
zQ>3J^uZf+HW>{ic$?~w{!QUWXe*gimA!jaxWwwC{M<XBCXNeTy(%=~`>`@Gk{}M~`
zYmi8EaK94JX?k*=D=|GPG50uw03<`L6`V9eP;FHLfvZp}2#k&%#MZ~}1b7jCR7S#5
za(#D~_2d0FzPubvOg?$uvD!X+Ch{zVDlOpbzFiJaj!#c{cVFL{ZZ}++$I#?G*uCc`
z*!kGcuz%ksOib@Vz>2U^5{Zn(orJ}?(2j-FibtVBrd?pqp4~V+@erzPzoxxRvmK_H
zlN_du%W#zHkasu1m?H&mK_%+Pp8Z?E4M~oS6UcNP#iQg*7+2sXRqu3_93F){W5Cp)
z!o)y?nNcNYss~W?A4X*4kxrXf+O`-MpSB1I%k*iE)JHtK0q6y!vt}#xv4apSVWsW4
z2v`<nK8iq2VanTq>50c+Pqrgz_aK{{hg@4X+Q@FEvT%f@1L%2+fyZ|aVDH{XF@r}T
zL_*pcymoFH88B|daXKMR;>s*ytzn85L{<%h6L+I?WHILTE<>#rFTM~FW(s9A>H^hi
z0gt-AJf^ouP&P(t&V_=JpfamK%IQW+at>^k#HyYSEMJ#~{C-HwaqLvgv3F-_)sm)>
zK#C>wI{7jUPm~eL3S2pZx<7_uekaU)3zAkha+yA)vvbhdlfg*7jGf!Ipb$QQ$cW&W
zov@5{m`1y_%pBDO_^h4O#RO);5J`kG2@CD;<PdiD-v&R}fOIy8O0|TksR8ih4EhdU
zfv_RSF6x||3Pl<Z`XlShC<98tF*}enThN=z;<UaDH<d>viP+|;7pc8X7$z(;i6m)D
zBMZZ>B2rZZQH9#b5UMIXIfF(xf#UQIn9~{T9Y`Vws|d{zgk~MKXop48XLZ6hTVYVm
zQVG&e9vumbC{j;Curwt1p{ziw;PyR-Ab0{HXu<O6=;;9GuZM^?a&bxqG#SE_G)xmF
zGxer0$F$I%nuA4cU6`K|FuBQVMURSOPi>a@{R7B>NT8)7jb(GXaOhwOrD7EZZ@@NV
zAVb-XP}UKt8bVcrloOCvgJ@(Vcn+L9u#IkRiw-yzNgpLV&0a&jX@=4WqRniWA_GN?
z0lj7!@Z}ge;<)bv5u8L01{JaV2&TzlnF6jCz;P@-FwhSfNvvPD3Wjpf+tQ0%!U08q
zlv~$l1cI1$d9eU&=C={Y!o}@4`HU`1PsSh~I8eg$WDSPzLeuG}!4E44qdJuGsEdU{
zVJ#g(Bw!h>utX~iGpFreypxFnsAlp`b`UlMPeJH@esbjo1W)QfTc4srSXL_}A|z8L
zCi7DmKGcts*PM+)aSFe<?^}o>ABP6lqm889N`QitPzhNJ45Ki`{qV&FFb*>qV>*=Z
z8bCUez?xGNSaEzOMh=%Tu&;=*kt*tq0G1Izp@ASGDRkrRRr+DWf@Nl5+g%XUF{BMv
zoW&3!pnEzPmDnvXawJq)(B%cYxd;M+J8)3}M*`V)6C(#^aQ8i5M}BGmhYsyR5Ckwq
z7A=V^!kR=Bb8tFa@fAazT05t??(B(Y_M!ktniLV~z{#skO_kBVdko8$ccZ-{gGEc)
zFn?hiiiH}6hGsB0P)50whU0WXDe9q#w6sv?s9`1{jPw!d)9u0<rl#MgU{2pBApx#9
z1h?W4gBel?8=M)Ovpi;s)42cMUt!Ol$55@6(9yOW<#HL0)q;*}4{S4qlpQ-g%3^dn
zDH$5R!^^%ED&1T5+{Up3$fz?imLe$?l4<HuiSXb<dyvZ}v0z~ry1QG@+Ll6VdkQD6
z?!>O01w6K;0K<yy97$WO#)bxOHbl~iU`zlssWald<2(jTNG7OscjP*>7Fbr6H{2>7
zdE{Os>=v}7m%%iWuu~}rVN3c33W+F(){l(wfFztGFtAZ^siiY~@c<<FVr^rbc(-)Y
z#!Jszg~D_d1A`OTz56iVyJuAP&F{dXMP0BR151~+;_=5T)R-wL6=CGP6_c9XA(n?`
z*5nwq6VW!X8GF)O+PToCx+Zm|<w%G3obwcz-HlA54}w|X!h*rcdpEDQNs&<1CgN1z
zj-`(pKWXDY#goMGym$ag>c1k&m)dR(j(on1?c0a3a^+l{dg>DLesXYN5~E{9%<XN3
zldyEUrP*u2I7tn)ztJvf4FTn@x`xT(TCnCewW7{?l4eFq;5AEE8q_8<OvGv6ksSkC
zG4!A`@`zOHi>Ga4Owx5w((FrtTHrU``-=x)==-(0GNctnkxZo>o=BM3ymbJ(c9~eb
zxC={{bz{Y<xrhQudGQhTjC0~yiJG-{`h~bm&?IY{q-c}*Zg%J}vXhGXFbM`Iy?IVa
zMmrvxRGQLq6|)$cpQMGFEn3WW$7`yA7#c3UP@v(twI^n$exCr&ez_kt!orwsEM4Mz
zfuBlQShsEo%H=wS4&~9`KZ5=}qnJ0Z0}JMNAWM~V-MAgkLC=GLqjXn`l<sMr&E51<
z@`<sk#zTWm0WwX0_Id10nxH*#XQJ8rZE0^FNh*ACjkrcVW_joriO2LK6BWN&dX5e_
zzU*T;xhWB{SnJ<pnT8xZFddGMRAHC`9i17hUAq|Pp0^5%7tg`iSP{S6_&5rMDujrs
zCYrPsmgWv}s@CWp=%)0|rlOiC(AyAnaf&P^j}+BBnlo)qR}-eqFVysX^E&nOCYee-
zwOShW(c~o+iGf6<5-59A(tqyv);hMma?Oh!t^WM_&@b~!$qn!L=`P%N&pwO{mvr?i
zlSyF3in(~nOIBjdn)z@NX49)4Y1@sZP~XVuh^u&lve1!B4Bo8%J!Shr(_A$bQQON{
zJL5-EZ~~8DBOX-=gZNuXWrRq#T5@U*C1(@1_oU=R?XgYqk36?+gU9r#S$eA+Y}+z0
zapPSUPiBKCsPF3^$L+W6)<^&DJlsZrRMNtt1zkua69__04(J?J$ALr^XtYSU2#VMY
z#sqe}fl<Q~xA{oji`KjX{hB6hsjVaiZMG&87Y<|TjSEV#Ly43k3D&h3U9D3BEy+F{
z9DSURRPX!GC+7B|?UhsNQ1#1~aAEztv*p$2bK%#e3i!xK$rv3iqpdxSMGIRoe?c3%
zx{|RyQo1h8W0trneS{?S^v*W!#nr`FI%)Qr){dR?tfb8@BE@&45M1e!LDMwEX=W_A
z@f|v}HH^<A1?Hh*GE%BKJU-a6fAsVJ8e(kxSlZcMpxv5Bevr3Y7yZ?|_CLSgwEKuL
zsWZ(q2!mGHc5L*{%^?h#%;$a0$Hf+jT0acv<`Bc=)KyQ<>9t(1gYn@!3gi1_B<n}Q
zl_yF&O%<L6uNl^8(yHloV|zC1fyu4YyFo~uT3jL-`E}%HZu|N~<L0a5@)KTc0G|RP
zOxD%aox1G0_S`GpB<yx57FM}wTa<i-k$^BPNxg#cjN;NL#cx#e&_Eg{H9qJ7xOJX`
zks$(bpNuHRZ6;t(j3;Vj@fFP8<|p>f@n%TfO&|$0B?GF&Csio93}#So?A|`z_{F=c
z(PJB*``n+3!t?wBe#Cw_eDSiL%;o>qk~#N$Znr@3s45KGBI-&f8%?R31ySe2+=P}u
z)8wYG(bi{TcwiFK69XDR#)yT{G(MD!pC752Hoejj;PjT;FpQ)O86pdjvQ+3I@DEoj
zjcs471lw<D$iac<6FC3Z`M+RaqmKNO634IU&b{_aEtxY<hm|3`s)E}F)fTCdPzTdo
zzz`+`0muz%_vO?c+&16B!95cwP9Bg_QXgsr%KB(%0CllxR;%NbFSeIqNDU-H3Wq9N
zQ80z7yYpLRZ`)Vu(caAx4cbiC9LLs$`Xb!DO*J3mXtfsY+BQ(wb!Mi#=8VqtrPt@O
zXRIX_O7Wm7g<}wlLUI`C6qr<5w>oHv(lrqZL7E<0gQv-h`2V<eNkytqN>WiO#W9f-
zidix!qvG}7TWM^$z83cXGDMMfGCfVD?S%pF1;70rjsU4wSXIL9zpj+FpPH$jaz<C?
z;(yJg&s=9XZBQbtgV~fM7{m`ogkMO6s6w`#+BYc2C1oY!Pb~+ex<rKqv@^=rcX$F%
za>Xqb*5UdGc2v9_U#j|#{m54nQ%}97_`a;qHB5Q7@q4{RFnj7=3zjxkuWwIX^yyss
z%(Ly}95BOjO~aI?lQLB3@Fl0TBbjmW$Q|SG!%^vb1+Jtg!^jJ1&l=}Ol1af4(H4qB
zV^w#@7c2g@Z@Y5%&{J&4G1PUR{~TY0!F~(Kgjlw+BXQwBWz*-pCXwueupDsHag!}6
zS(rS`1Gj`o16SirF^5s>6(aclNVVqeyrJxE`&uI!=%;<6e+bZ?I=2^f@Tb@xi*?V*
z+3PRQCe~k*Oe|R;rGZFM3BU)__O1ah7#*m4{okzxyMI^<_wSCI=l-yuJ$d|r?()rl
z%aC*7@cBy;V)1&zXk7;7`=KoDYJ@}ETsd+$zLVhW1vk^SKQM5A8h;vp8u()v{~x|O
z*g|aOs`&r_002ovPDHLkV1kKIPDc$28VUda01Zh<L{b0%0AK(B0AL6P0002un0Gh;
z05}0jL_t(|ob7!FxLj9t?!Wihr%b<dtFClauevO`%9gv0jZLwQA%KBA1Hp72B?*B9
zLVyGaJn~*hfB>QTQB5y)jAaZ4WXp1qC0SON?$zym`pl_&zi;g`BZ(4lk-&V<+u!(T
z+L?3K+N=GmT;S>T^m=+dy`Elwti>49$IDk;bL}&hUw8e9uRXo~+r_|OfV23)7{?Pm
zOMJBX-Jkn-<Bre$XALl$C;P)NLEukpF>okIC`3@|*WY7MP>=mwj6o@dCDy#&^&1*a
zO?1dEV}AQ|babZm-l<;VPm%ZrOIr(^OD^n7tvEwC)3XOAw*Pb@+&4nR=Zr%t`Pj}!
zn_K}`tX_Og`_d$`W`=KEvEq{d+IRH3oB`3Pr~jYMVlecv!#?kf=dZeZ^6f8=)EECr
zskwifQ%Ambr~12V|LO}lbfoAr2LJsk$!MxA8(H!5_rGc^ioOy=(GP=L-uu1-fXz?*
z%>Va`HHqJoxa!LPv0+%f>2GE9#%*5Zy(50@_WSA;?~#WpD%`Gq`mrxgtW7NL`&~>R
z2|2z@yz9d2J|YL+p?rU5&G+x91(RP^Z#@5{?`z6O{2da9|KEu}FL~7!f4+WFz3Lra
z<-Lbo?_(7|xM`>BeQGocM)ntj`tZ)0lvB~b4>qfdI+yqVK1o=}7PSA%buaq7|L8ka
z5PY@a`(EI=yMiG2T*E#3RrRr#zy62o(`%Oj&M6fG_EaanLWIu5#hb2Lam!ZcijHdk
z8<h3DeuIB$NXn5Jg<gl@WlIHLQ<&pCS@g~95)^*1)w%J;*RH)|Y~NmDLL_C=f^b~6
z^6X95UUvH1uDxdQ4gJqZBeWO0N?j-z>i|%P4F3z9O@u;Zoau+=@X(f#1K<75;V*uE
z>*kM0c#p@%KgN4}iW5I)ow4@n<==j^?dnDKg|Cz1RVxhs^Rkj(A67{EfWsKpb%Nj2
zE4Vc?F3qeV4ZA~Dwrq7?bi*rF+%+|DNN@w8j9?=pe(=sW1XsU33uPCjAEc|yTA1X?
zen2jVQZqoX1#<RLV6IrV>rNJvS={_xE^qqs=j{mP@bP+DzyCf@@gki|?%d;Y4-tDi
zX>&#2)&1Wa&R@Q=-t`74UboKRwE+0&xRf&mfO!lyz;j99ss+IFGlB=@ahPcla<c=o
zn}1?G_oc7ueXuk((PF~FM0fT%EBmj%@i`0s;lk%7`@?SOs_a6+GHamxNywoGAqJ{)
z`o2!<=AU?*zrFk5haRr(zc)fTI2H7H%1Hog65ryzZC5P%=Fz^(&Uf1065{3S4c?`I
z&y*DIn^KTfNHoBOVn`)`jvVmfMZm>OaJO&>PF{qt7GdB!-*K;d<=guAHpXX8bWu}C
z8m~Qn<10V-!81Q+E-tw$-z!vU27Kpa_{i<^o!8#-@TCtHAN&Onp3?h0r3OYYfr}Sk
zer4LsipR!prim|j#y-FIKkn~2=fbq}>OemKbc1&T_<mjC;gUiWK!!dLh77(B)apQ~
z2Kn6yh24gdR%WSmC#zi5cgp@3otOUXN8Yomhj*rk_y#jzaE2P{(Z6o}`RCvD?!9k8
zrPD!q)Mrx#e|%e)^YX84zv#i@eVX{hv{uCYC&PdimeMIYvS0tiTkpK$v`x>T=XB%0
z<6F>C5d=T0>wo`r+3DA>NZjPRS8X&z4}kC074DjovR+rxb3sgijN)TZXQ)+y*)rsp
zCnF4{8CR**@P-T#%^dMBeAC9>Prm(~586nXk%~YzS(BA9{QK6Qe)1<jYz!D?(h{Rd
z=Mz7!-m<&0?Vi|!Vp?KOy5&993~1fl>W-e}Jr{cJb<a5Mt@Jv1BXncGxue*z*VeSZ
z>ocoYzvcq#M!$O2CERKg4Bsdz+%YR<xxwHyI9GLW<ufh=Km|bPDYzx@Y6Tc6D*2fS
zDQ7wiR8wo<9c&Z9z)bzm-g@5Z55MfMZ)I?J%OY{cAQ8xK-7)lUypa~82NL{S`}X`J
zT}O;Uocd7sq%$DCDWwhX^DkNPHjz&{FMj>G&$)K-#%H&f@asE@HTC|Y%&Xph=8C_6
zb>;@Y+IA_NhGh84gu*Xp6e=}_Mol5AE2(@y`hfD{W8?#V1F|s(xHVv~2>Ge$5Y<Hj
zGr6@0_RY8aQLp;8w_SPFTP}a&f9Ng33G0cO{<B>Jo83WEKD<Ag8)zIoK(EO^01l+-
zb+S)L7f!_gvn3m^{)=~Qx-ksTauZ9}_&0z5<^T238(;IKE7x3dMOSiO^7y_tw7c1p
zc-A%NEcxFbZNFYs)rD}zstk9IDjX^SZk=huhE)dX0xbqeUqMR&{o4iiD?n`usFxJ>
z&q026HbQ-kiNW?&kbC+Zzrd;={>zuV?geXK^=>I;9P2V*urhS$2e+m8ZF?HG0i`fj
zp???#oMh|5uqf5n`Pyr)c=wzCe&gGcs~5QnmkOv^&fKr~qEL0PJBORz^XTWku>GsA
zF}Q(9lCQsE?IlZo_~_C<>#fS?D(8se@Ejl%Kty`pR}vmTUXSvWM94JJc?d9iL;xq}
z#sHWN7;TIvdmvd3IIR=>hMa-m&H$$!n1az$bmwNm^mQM4-wPfX|Kaxt&Xy`dn)l^>
z)T+KL1jp@BydDq0_xLGxQce;FCl1=2+duf%jmuu2gi;eS@FJh*77H2Fr19XR*zqmX
z`ls6l-~5w_-Jh#Rb1tbJ+nCpO;ezjtue$miq+T5HM;n~i5=ur1AY!z`8CM}BC$f;<
z_oM{<TN9t@qY;54gd}+;2Ji&qMw^m$H=r`WhHl2MN->z<S2%rF8O}nlzVE<P_F12L
z&AJKq!95fqOPm@4|9;w?#KoCl7c5wN_PM>O%bs<1{`FVh(9s_)3|-U&cKnAWUhu_j
z>xcc_`;L7cwsG$KFYVfJ(G9CRZ}9zHE*B+JNtps71BCbkig82$3s~%u2dYVYfS5we
z;E~3TC20<3X^0an0q{Ivbpug`@zc8*HUQ}T2C#OwD|<Q&dCSB1%fGnwhIxUSti+Na
zkL`S|9vNMu$u3`d(Ph6Jy60|}to>8j21pgEEhD=g{67zD{g-P$efO&OzklXqe9Cm#
zVbl5GZAbrxh%dAk6a#Fl+TQu;)$3ofcK+2t{YZg{O0~JmYk;Z&r~$IBDBwC~a22Va
zF!p|k`0yZ=t0W_-&{7gVK(?a7cu-*6r~|v_6z+q<?&mAqpSSt$!(3jz^wQ+3*L~o}
z1U!>8p14S&$(~)g{EYLy`svsFwB5`l2o?QRH1#R!1rd=w)T0mGz2$H2y~`Rdjwa>L
z#}0p$jGI*C@kHoxo^|c|74LZU;%9p0v4*n7Cm@M%stTy00;_<tD&weX1FH?LqDRy9
z)Y3pwK>9xd(6kAh7|;N?OAkipK~w;Yx{@O$;L#+*z)cMMv&?#A)UUpH!z(UW-}b^A
z$#I}-KfWw>W^Q@^zkKjT-_2j1cb~m_^|PcTrpTwh7Zf)A{Q#BlW48=`@U|@uFUZN+
zcvpq6Sx?&;eINee(o3y+Nh#;>5YxLhDk`apO0o(AN|3C^fEt5rC`r4YcDxFR5g=Do
zlHMl+tkqHL7yuS!c^TtY1c(MCFGI=#fQpi(3NUXGFn0sTfrfI%tEj(V?cd&P^R9G@
zxJ%M2`|fz}+h(@h`|?BUUi6G!#rpY&K6Ay_UvtqV*QG_uppC?y>QDsv`*e}t-+k|A
z-}tSswgGj?RQz*GGJo-p3)h~GQbJ<iVGczqhKOEdJep>}QO4yi2DJw;0&q>(5RieA
zylHglHQMzoU|c`Q4g`!loN+M&jspzVm_nimq<jU(2W%e*Y6^SHz*QFm<?}iAPs%Wp
z+<^Y<mDgy3FpjCl<m3;3w&S0wd&m56{Ch5&{HpA(AF<x^;!A(9zH807BrQ+05a17*
z6DErlp)PB(Uedu2)A1)?(S6=EUN*v^VI^e55z)PP;D*oO_zbchK`O=@7T_#lP&S~V
z*yGU#Ic5kq$O~$EL|l>&00^I<Isk+PiAqgLGsEHZ8nEUAa-l?`5AsMI{5xcv7Xpzj
zMWw;yqPDdc?J43Lblvr+6nyd*n?JViz*#$Q`_k$kHwGi?Z66+e;|~UJ|4Nz7R_HS)
zOBJ0W2E-wj_Db~s$e$;o(tApV#`OM$(pWk@sU$%zB9b8)TCXHUx$0S^S~-L%cxFwf
z4$}k}r+9#LJ|nf`D;N>u+BJ<OLUY?N;u{iaV08Nof>NCuh5@nLl&0;tR@M^9E=xGw
z9N%FKFI-&1^UimrvY6a<%WU~quAT#TP3*mU&pnq~-~Q>LPu@JZ<x~32lk5kb1O_zq
zA?ZajvV@RnAA%y{6EE0c8KceV%64XF%lC{Q*}FvcCC-IX8E0xX#9X<EqB{ytjn-3k
zcT(6JLKPA+$`D56{Sc$T;ZsaNE~%0%WL)ch;w)p*kl?mWs$L<en-EqW282v-X;})E
zQ8f`&80trv-<LyZhDm8I$yhVy17hp&onN4<q-)mKF6opF_2$n%bnU*m13!)T(a8_U
z*c0E~bVUjj(*Nd47~RQvxh0(o7p_{c@{Io86&KCVFTEh`^saWyZr<=E_75KQAKX7G
zwhwLpPaorVg=%&%z|c`Ynl7cq`ist4_WirurTKd1YFIU{Wau$2C<bV{nh2CMB1XoS
zgh*1nU^zfX7sJf3l81jBz>r*arYtcx^Pl$?tM`7PBfIwUytDd}dAZd~+fyCLITAA5
z?SJLIf4+94cGqT#%v&JbvEwO*Bp$N_5cf$eiQvDwyBSNedFj6Pl}lIjuHUp~;c3rY
zv0&B3oox$yEYS`xOrum6n5!rZP6vL~i^51kB%I~)-1T*oqG55*;3vO*;%`-hy;~zS
z219fR#zJt(VT1}iBtr`rq>2bq4#ByE<O*DIB@HkxOu$M3To|wrh4Z_(Gd}U~w}wk!
zzInKWn*qjc-knZb-CaugQPDd%M0Z8MOR&gq+&5#|qtlYn#JOmlEXF)W2E>VySo%yO
zBbKx;?mqLZRf{)Xy}EDxGZ%KPJT0B*1%rcHLnlWtcqDYIbs16`kQ))jFak<(31vwR
z6zg?9tC)Mvig&+ywlXumZ}t=az?rGtRE0<>qZ$g6af3r@sDZp3Ur9qVfK(58K8l2p
zw4bCSr5i{J%oO8>&7{SFz7Ak8VF+Ey$QdFTN>5IfJ$F*;{B~<q&jm}be^qy`t<MW*
zrzfi;duFO*2gV8`BXf=Ea;PePs149>u2^E4Qqojir+@)5FqL2{=5Jc}=WjXlv`b#H
zuzT&|Op<^WhI$>Cu0;O8WaN9UOL2fO7~={|7={vDP&^-NI@)Ja5)tA{RVuP7ky|}y
z<vZRp@zAz!7ySoz#le~vM$9cI9NsPr_~h+Gq0&2_9%OtCsfn)%ubnFam_%j*<C1`B
zGnh<Z?J^Gsj`*P(Bw&LdgT4WapFQvOe|P;^fAxVy-F-+}Kq?`Tc0xFbDgri(+3HAj
zxG=bDcy?gR{-X!B9vnOJ=-BM|_*^hs2YmVK5);P<aT4dGFram@Hr6eF)62el@RDb)
z#K?Z2R0!&Gvz`n+#U;6aiqXTe48|i#Wgu}FPm!adi{j1gNqjIkR20!$oCx9tzGWr5
z>Sr(g&@b=a|KgrV6)5hNQg{_31!92qrVL3spVSWHBGO+b)uVTwW-oa`9GU?l1qd5F
zrGWM8s<`vM82ivh6d@Rr=H*L2dg~?YUUQYJ{PLdhs&Gt(q+`gmBV@|VB9~|rx%5is
z{KdH7>J9P&J5`6ziYWP$7@ZwDd}#3Cmi+?<@7*(aVB4XQBZK4aR7I(<xwTG~1klz}
zz{2#4KVn<U!|^e<IzFV59Nc1Hl6G9E1EhF&M~We&T^^}8@j~f5Mmv>a00w4gS5XF$
zq1{TUNP(NY?$@!P=i=<D!e4%N&(uHMNbf|vQR9>~umI*N4L1`5j7Ui#wf93Qm3XVM
z*n8nttp82&j4WV&8d$ZmhA7hUGN~VMWb8|q{o60kUUB2biE6cMFeB-h7DB?PEDqmL
zG6*E9L4?Ul7+RAEO@oDw<sg-qhfHR^Sk|$z|ICY3zx{0g6%u8X8)Fz6J92o(fk*HB
z*6o{bzHem9eUH^&{oM>`p2ILh_o4d-ke@ftN~JB-%khm9p(#Kjdq|$3jFb$+h{rxZ
z8EgG1vWR;3nI<3-fNe5FB|}C8uu+7jgz%(SUcLAY|6{W9^UuyU?)rryY7+xYfEyG&
zFm412rh*hokr|<k7N?8k1Y`=jP6aE?kR+{V8(6-eigcTYFe1~eAXwHuXa2w3y?XJ>
zH%?W`Wg*NY3_$@jk_iTtfVN?>!5|C<OMp9c&0JYtq|hMy=0<#?5cz`hP=LvVokK3y
zZY}CLz5l|Sp5K4tb6)xSXTR#LFMFu)-LF5EJi_mZr(@kcQTx$9S4zWT`_?g;&Kogi
zMZzJquIKa{kp#%SA%hh}Awn4<jDq;zVTdS*5QPlfWZY>7>`um+MQM6NDrS=OIF{Y!
zu3z;2+c`S(k*FRtvVfI@B*SWGXc$tEB+zarm7}8zNYZYC7?6n7kC{}k62O{X5>Fd}
z4ChEeZCv<&e!hCyO`D2twHm@qhLQqt17?oF=>*&Ws8s;hXQ($o4_<9BUUeC&b)e!h
z)IEk8McbhiHL0wEudI>Tknh^%`ValWE8lu6+<fBPH|nkT7;M4slz`Y+F_ioryGKjk
z_;|Gc<!^55u<9%O7FyGzfn<zH6{%R|1PTEWItpYUqd4*1^bk0YQy%b?^gPCMy@2Rs
zkOHVoa*b|A%-~_*qr3Y8r+@12e&|b<Wl1INB;!6IqK1-W&y6PGTfn8_jMFwCrD&!B
z!-?UDd|o1#GzDrF7|X0*o_*gJmM?kLdDXB|XD}TqPhke<A`c|{06$Q&TmYhm(%X)H
zD~Oo%BXB#6y)h92fq*0xrx|XLq{QOi*=z9!2gdoGcO7vKmGApfynR~+{|PeS#5Gj;
zzkijsRz7FP1LrKxq!M8+)4@x#q4sJ5$vC;2fsAzZ8A*XQz?z9<gr#=aBS;>V44745
z-q{Mg4e&`$X9;8@ZQ_sx_xt-^cG0wTKV({kA_;CKAVUMN$cFGZ{YXUOTuDVuGGvix
z=Vut~1Q8SHpdD@5qTVQnnZ#v(y=K`JsQJFHU|QTTzyt$t2huA6ZYmV_0}aYUP`m*J
zgE5!}v`r()HAO6S^jxE?5d$eUBTzh>F)=th8{W40fHPa(dSIw}$CqN){rB5}#{lVR
z0FBDf!o$UXzog-gh^_bR4;!ihVVc|zz{y1<qH88ZQXAkXlrjpWlyr<pIwbs1!E+T#
zV}Ms-Sau%6k_&*;Le6C}#7t=#hmP*$hsSpN0W*A_2J9peRl#wXwjqS~&{6+e0G0)5
zlJB1e%vfc?NdQh>p~N_9fem3V_F2+)t&GXdqz&e9uslO%14C*FWMNv#;vCQj!RZ=(
zeXSB+sI*#g13EJ9`_K>92lqVix=Z3{qG~kc5AN72i{$~ar}(LhB^pit^rSF=7Ksr@
zBRV>ExbTT*mP*s<E%)#6nM1)Dc|tNKd?*n`Qt$o{iqmVMq@BQFS~i@74JS<onc?uZ
z2(!Zqxm66ahQfiPB^(_alf_CAUdTB&lH4K&Boq=Uz)8~H1uTkmi2;Os3UFaFZe^I(
z<7Nt4_ge`ijW&fcSExrR6lx`YaQp!=UK&JQlwtHpbZ!I|ou`YscyWyLzyrK6f*VEL
zBL+wbKZ=hoY0ro@8KfTqei$E_G`O@v-1f6wez7#0JXrdVO$|9R6_fR3ctO8~3FTnx
zPbR8gd!JM<dfx+&K2Y7T<UGeM1W-)IZl%`y<nh=LNn4|lRE_2aMa;~WP;b=H2m(km
zi;=<tY<f)sOD`t;rcKH~AgY#$Dll0MiIhajh9sg=lAbwD2!i$(xm^@^QBO=-fuzMr
zF*p`!GV(SdYZZl3WO5G*bM825b0u(h9(p@gptIk`*cdRnHK0@l1Waz36hx3W7jbe~
z>3(<^(Y;Bgn0BX?&S@x}SS6@?^R@@w@$sqjNclf+Ecg#?dn|hY2{Hgpt};xz-}^^P
zbZiQS&UzLi<+i8Rh`L(`V-5_%f*~XVRl;m>6y@3ks%`<E@9FnB%R!hOu$Y7Dq>J6R
z+Bo|!IQlN&yiv?ZAC`=Q283bqL|V#R0%+Jkors?#&tJu9NFAL)GDiVv#(7dn#{n{e
z@yKLkKj8a}mnkUZ8Hkhtr=tVTyanicMgpFY*#4ss#lb<S>KH`iA|Vn;J9(s?Ze)^q
zm^`74u{Jw0l0ifPjnc+9ku|X8k%!%(k@56&^_KUKH-7vT?NL9@>WU}C0NQ@z^{-r)
z^J;e_3bPkqvd##TjwwcqKK2d`VgI4Mn4B9$s6r&1EYgW~B<v0dPUR{IFh(A<fykGb
z+NW^fmkNt7W|$oY=5{-fkwu14W|BaP46Ln?Oarn?x5u~$oBkbLJ(Zz2N>V9G!eOw<
zMhFE(-ctpj>N=P?h-?N{=R7R9Acc9WBkcVSm&Nfql=Sp&_kwAZ>vI?{R&;Ne$sNsz
zd}<NeQuC3rySO9L2m;c35gypLGdwgpkS^3We{H1pt@r<WEzv1rK)fib4P`x8ylDQ=
zORswqZ_B1&nhJ~3J}x(x!F5l=_|zo!9vZ`=het6y>7h_;z%VjM+5!p3jM3F7F0dND
z56G<nmOPX3dQs}aD?5`$D#>`#h7<{gY61u{y2(Yu5jxB^n<Xeoz_Nh^*$ASyL0L2f
z-=JD9Dp6^J*=EZ2wF$obQi;*+z~pYpSrj7jnS?U9VWeOnAbbikDxw}tVW#{j_PJDc
zA&_@^v1aK?TzF<b5*bhKIC{_;9)IA@BL9Yt-2Xrfh_hVe-=Dtdou7QpW&iw&(b>oy
z91jKg`lhguNG8yg??lhM)p*`=;H72*jruehSnSwe!0tl<#>T5C*Aqx2Inss+vjQBs
zJHnb50}C!@e9Q$B84D=~NZX7Dwn91qgc<1cB{7XL#wAyh?1B!!EG2D<TnRp=YZQPo
zsH#PAo=PL#$<Tj=l$8SG!}k)P7uzg@5!!7a2pQZUM5FGK4M0K|STVmBr?2e5d1rKD
z{hBT;>&qkSWMJ6s@-44F3xEINM)2>qwCaeSShDPKFd$CC(8gQa`{wsP^MVh&ajp<l
zm6VQY89FN^$!+rjd9<MT@Nn!xW-=DKIu~Kl;zihax`e4Jn4X)(?n7lfd~gB>$34u=
z<xtsg!`W?M*(RVqC6Op7<V<QoB8-P2O*)-Q(dkmG7<*zS<5USJ2m!Sr69gX+<UsX1
zCWXy$3c>2+SbPR}s$I!PzE35N2BMInULTD@0|*MpBnnuOQ#fN|FE*~pW5cR;EbMH9
z<K*FmDU>S-%p4FH^9{Nl(Uyk)Z-4iW=cowZ`S`cr{Q`yX2}!|YPsnJgkFX?v<LfTp
z_>uROin8i^kwZaE;Henrp<Sm_le*jz6!nH>iR!Gx=m?NZGqmS&=*#DD$=MN}cUc{t
zEaTAl1a^*_*uB@pR3e4U`XuC00}1kM=$t%4(orxR+OA46!8n0$1nv>&rsDw<oIY!)
zSOPdBjEEsL7~0R|FxCV6?+2gUA0QfSAmz_s{jw>Xv7Y1XvsPmDstguI3HXO4id7Sn
zWefL?2$ai=qI8PFbjs6El%tk1A()ss&?x_}*S+=nnL^>iU%%_a?<C_)G0#a)Nis%>
zhX}o?=Un%k3%>RPshn~Ugh|rl@%yoKSc1W_DT74O0TnvM-U?$NKE-}K1xaazWQL(F
z#W6q2u^=C!EAInF6_aiQLy^S3IU5VkNuhmF5;AR~G6(qM61AeFoDIR>`s%3?g4+sa
z8<6c`n3rLg;T(4#1uy_~$q)~f0=SbtoC8&y))QgFDvot4Y%E%s2Kl)lXwN0!PvRHf
zQP_4TgJDtF8>6sFN=Xoi$pC__Z2_b$vQG+qS?2bh<)vTnp0~a6?p<H_6encxw`A6y
zFauhCZQeQW?B|~Qtp^RGr|O5Uqko9%V<e<bLl`mQW10+>MJ0U10HuL4gWe-%a0>Au
zg;209#uFLR^%QIYIh&(9$I;grp{K)#lWAbKR>ZUmlx+(WMgm@2771a(osAGsewe^G
zi^I-wn4LhP8^}fxb`LeM?ZG-aD!}RvpexC-vd6~ac>>4~zHMlNhb~a5MJU%)47OF7
z4tMVUa)f$?wV)44kc8kd6k^jR<A@VD6oE6vmv%CjEt*L`_itZu<^J)X-1WG|CH(F;
zV?4uVeO=d_^Mk2OZhgH`s|sNV$`Dd5a<lk{2u+YA5t>7gG?+}QBu*(s0?T+ay{J_~
z+^%FWaQckxkb0trLNdvaPcU?580Pm#wD$&3yoz#I#lF2h4*PlZZtB*$lcc>+^-!ub
z;8hzi3og3LKtAMHAWY<P8Cd5ekULEPv(!l=QK>7G8%iUarD}|RHW~^+0Qeq|NHI+A
zkQm&-kVwU_H_cC>$eRdH|E42B>PZtwnWX6yRxe`iAU~YG?maJDT5RkYj8(RLG7N}4
z9w<j#y7G&AmM(hH(ptS3a)U_LG&K|*(vhS<tAu7nF~y0TbHdcMZ7`J7*{Yc6F#|}g
zLQ8}WY)FsWRER~oJOv~(KpQ<AV98<*%dX&_TgLF|A8kkStTtTprqeOA+r?s-$ihQ^
zX9gWc0%7Q&5SlnV100$H%8|lLZqh*;=1M@hsx;K>`%Ftw80dx`-ET&yu3>S`8^Ep~
zDUhTJ4oR6lLOtm|G&6V{Z;&cV3GFIV(ps+TH*xEMJIinQ%*z%k6sR)w_X2YNtr2c{
zJj*+7`au7p7p<szr79PK;?5IdGJ>3mqKZn$HM<q(T)z}a8R+~k=cZuX5){`ff{!(v
zOc5<3-W?Mn@@&YHVp4{T`wfL^5vcc2$zq5fe|!kv+x1N>Ip>*p_UZ))HjiQRZF9J6
z?IQfmU#`Wz1Hk4(5+fCb**bY+F=kz!1%7sy#Hw=)OpL|kAfhWO5TNS|W7wP+K!)9~
zE16C*p6ZY&PXWr(3Dx)-2^pp9rTC+{w2e?oT7vUk`vd>kE1%W*=jZ+Pm%p;@?_cy-
zoTC2*jEjjcSVv}k|7+hFNa<3}w^fAIdgxD*BI0qnkqQrvzY)g^gp87SyB-KRB|wV@
z5kV|*`cmIi*vu(}fENG_${V;0ZbJiW_`w$jvH9R;xal;yJ1@cV=k{aWmFEKa1U~+w
zZ{mx$6tH&|I5;g)EC6ANYFn5-QW4kw?TU=IK7ZgthGG0$&5|Y_NpjncKlde&na|)8
z!mFr_Pk~<ZCF5SCuTMV+8Kvv3`INk2X!y)JJm6PfcIInen77ui(lw;N2k-o?@3v}x
zQ+&l~ZP_KE!DXlvWz%DKv=tL*z29uKlDeU`$si&=XIwTdINcZBr0X+IJChg^N`2#;
zm_T`D>ieaZQ(}e}l5vzW+b*!<{&8%1cq@jy2ho|`fbv`&4?Ps&W1pVJ=+G#5Y81EL
z{Qy$71or^Hst{=PqIbHk+L|3_m>P}U^oUAaRP4r*6slv@8gV>JuLnMm?50|m2!0sB
z4<dLz9SQYSobn%Dz<51isQL<J7byC17iYm^JTTh*-sFWZX>G*E&48BF__A1<8b2zm
zMC50)3E0BXE*m+S`l~u6+w3;f9fzdz;^+Ei$PkfAYHC9I2oYQdR7C8Eo->k&SQ6-a
z(7Kr?(k7oS&Ee;F@55Ml4}{eP%V<L)$xxa#P@Jm6(!fuIM~~izM|PBu&TxHh6)8#o
z>FNwBq6-<uj>N{Fn4;C4ihq-US<Q$h@gu3EPxVJh27<#0q7GyjGlCwGf)^3uFH!X)
zR6M{9IS&kzdnrRsz;kciF<?zp4j=jzVm>|_5T_ztb#U*#q0evj8n3)6)0uYL+Vf#H
zowh<>aNnbxZ`iC9YnCb=s~T%c(lPE6W11x-v<vC<)a8OWa3X|<^1UP#RAFJ693ti8
zt~>W(qH;efavWXu<=})naD{4>JQ__o2qTLs_Tv}Z_Tbr9ov#hO7pNwY^)+b+VC0D8
zi`U2djS_ZReG}u!2Ap_}O^MLacQ-?EHUy_c9Zl+@N^V`rVZbuUTQCrrp)3TIurO1>
zT%nMh8ZWdDOyBl!QEvHWe9KSJ2*+QJ)RD@ko?G=t-Z`)MtPf<;E0M|Nk#5V>)2S>{
zMph8yOX3+)1#KiHMW2+VZRw&|R<y}&)^N7!9Ahcb5C##S92HJ#NFm=XuzlwqjE?TZ
zbaWqVs|S|Z2E$Cm(Jht1=&B3K$!4I$01l0A!NA}uWV4-UOp|L97p)L_P3>Ql@hTT2
zoQy!|N~*o1_=W2(1|3$DN;<xANJ6t+0&=gflQJeZA#6+kzA}7X^k!sntPmDT1*cjq
zTlM-ZD(<0ya=7gyGydJ5m&$DpnRvnsXzgY%ob<l^!CC(&|DLa%cYS;LlD|z)tXi9J
zx{%K0kj>}ARI(i@kt99NeP3!YEAB*Z8f+F5pSpl>;_J|!knV}rg<7FPHfv&RW*qw-
zJ%~AZFC>?+%}$tR2Bt~*2Cf-EJBy4zhYfBdQ4DtAk-htH;RWaGpiq(ZREoSEeHUaG
zriUdKuh%=AE5*p}>kYw4O_CyNsv**qp|6nX5lCi|`hG%I$4qSkvxR9COS7`kD2p(d
z6}}vQxDxETxf1UEVLco^O8r4CsedfE&|@l1r2j%ytW0}%e0kd2{MD4PVtJc&&MUK}
zvtMUV_GK+QE8E-W@oZZ=(y2U5kwVZQeM^WVO*f2dyW_6IIB26tnd#HVgrq0Jq_ES)
zuC04f_IIHo2at3Y!W3<=%$&|65XGqcg}k)5N?X7(vZ$NG7@E2dOD9$!m+669JT3)s
zRvU71B;tK*V#ztS!J07uc^4#<6pt7NI8~F9q>Rn(L1AVR4Q~dnS41P2lI@P-Oco9v
zseS)qH=3AICyZB&{f=L$%YU*AXqnKM5#-d=q5}tNjRWtRXx#qM<=NLyctMVr%DZL4
z>gCB~H?nP=`jJVuX=YGuf8bFmcqED7giC1m6-}&&Fbt)TY7^MG>tW2y9l~t*5Dbxl
zFxsRka$KKBe<==bh_Mokq6{#efWZ^I6g-T>htI`XXLnFVGbdxL??6%(OQAF?(Wpx>
zLx76pbW)89zeLkEh2XStYGnntOlm2>@Z>KsGqVqd6%ob-!%oO&EI-Yvy7hq_JH{t}
zo#>}9BX(k~yrEeUp;XQ%m({uGX&b9P<h%YODEkbBQWxy8ZX^<&$h37K-`<H-DvxA3
zt!I$L?k1@zs-PgFsL<VKVPxzGh6WCyAn!xOe56D#EHe)wGNfi`wt%jYr_UcZC6wH;
zxZpXs#uSF9wxMTY3A)=Cp;+`ep|ccc(N%jj1C0_ubxFF^p1dB9MjKF-hN5{BaX=O~
z8A{U$c|#orvn3omgS3@H0$HqE){Sv*7}(LukH|lChfHhWhG3jqaI8F1RzD)R@WWYD
z!U<Ho0SGUNLb)50ni*s>^2m2~BA4kvGDjIGQzN7cR|1n0)7ZIvCu(vhs&W{P)h>m|
zLKt~&8gz6tDjRQwIQZkF?3n{$Bp_81rpln?Z^yy?%aJ=bk90btBVuO8?Y-qn6;qQH
zr1E)8k0=Dxt55bsX_ZLMjfO;Y07aQMrr?NfFxx}YN+M;Y(8H2A=iEFtKT6H8twxSN
zT8ol|X;?bn>-a?kVGYdWFpMlB)j%jKD2GE}!C_co8gu0iOpbT!BG*)=9qG0_dgeQr
z+gZnsZM#wN_F*=71h$>m=}S|zLx`+2DW^+CrPL_VR4K9JLc^C#7(4}o*XXnG)hwoK
zTd;FS5=)n_hiO`<RLdw=#xXg05N7vkWSmWC)Itc8X`N5b0huA~wbE@h``W1ZIAP@g
zpAz;dv?nq+GjC&FQo(D`)S{<Aj~M5MG(-Z)L>H85hwE1m$TIw(29qZd8EuG^hftQ`
zMWd*OM^UQSuq%0(6CF6T*MS$*A;k#F(S8UkP04#{X~RnfJx?tmaUwsi0j5fk)~}QL
z0S8rEBz5nqCGx1r0gM)ZjJfUmKxHwWEFx5MDAtc+g-7+co3!31xzLP^gZsFSujvpl
zrF3PSEmAO@B<5#xSlX6Adm@x>mBFotwG+o5|B)D=U<eL_AWvVw;1-gG1=mf(5*{K|
zg&&p?gmt}3mFPeuU4&5yHB19?j6e)TqK*g=Oshkyd10hriB3)uU>Ye&Ma)Xu9f~kw
zoJ#5vBqE&vCnJnB4PT-#7`D|3HynX0hoJ(J8c*Zi^gE`ViV5C~&&en?8}qnfG8y^Q
z%_n#|&Ec3na!v<Q2@4$w0l}oMvIxBd>NVXu{-oEFWPmns8h)k>_}QC!(cPQGfxXih
zJW@iXlt9ADBVl`*5q?<Hs>u{t>Vknnpc!K5EIS!8sv#8+Mw**OCj`sEHnW@<z^I;6
zdm9XroGD7rYhysIM>Yhg<Ry-MsN{uk<aoe0Me9izoZM9lwv*7nA@wboW_(V<`YEdC
zhTuQG>$5sKzVxDNVe<$UPr??|EK5e)fE#htN&>YSS&u(D19UEif*mP@fzHk}+S(J?
zctHxMo#Eo>U=ag{OPHRhfguIQ3aO3@K~#euR3TLZ1`T(h?rU;XNc6dYX(T{~ml!2P
z?EllYZFQ$>C_}riR3}BM$<iu_Tusdr{dsB$AmUTcnbNj`D&H8lboxA<b}%+NiF>ww
z2kTZ}gmr5-;GV5_VrX~|Y}3N6Ke`zUJJ+H;MVlptH3E_)$xx}7s8*@J|M5?3Kj{pJ
zYxQEtfneU)jRTSi2WwB8hZU<jF)>!b;e!Q?j#S__NGjTpbbJJ117SpcW%Quk8;<}W
zkH-`ltx71$jfo#)H7)c~Kd16|QccVPBU~s>LnD&J5Gtjk7X+wuf<7PkqY%PGz8l!P
zYXW!t<g+MOMlm}(h~2xFpjs~?pIrir+sGw5kxFEmFm>Fk9CC(0aTF^iN>v(^_T<--
zW`K_7o82(NG%!9<#PHD>EMMM@wtPyflm!d(Sg<gMaygcYBZtc<&Is66Iv$}Xb!TLg
z2^5K%5Q2<liqt~W{fvkGwcNwl4QfgSNda@3txyIG-8xSQpDDRPMw;^|YQQwhII#Bs
zqIwedZoM78-#}ZoUvt%UU1Soya6}5WnL>g(LloBuBN{}c2eL>8K@6xTQT3$v6kq`9
zW6I^}()sv=f?<5Bi1CRzbarI0XmKaHyW3z{CerC7Hk_WsnsuERAFtw}`)5%r2N2W(
zbL^Blov9f|4|*O$2Sk1XGMcSX+6^U@6o;`f`o|>`iC8V@ff{i$IrXz~L-K^vfsvu3
z7(B8c2|J6Fvp`FmCCKQL3bV<vmDIdJDo5uCz;q!VsjWcL7#<~yZi0Hqo(c@0%Z#Y%
zHdaAFgr501Jo{N2aOChLhK6Ra{ow&*Qb{c6%VWX(b~p)((v(=fq8(Cl-2IaYNr^PQ
zl}V=)F%{)<VguRCx5a*9Gyg+4e+yWRp>XXXX@eZ&OZwXMyV`2d3?q<TNyBgq2ySb&
zB&hgSIH0k{H0ppps`D8-)`)wbbmO5We%zoz&}!8;sEV#0)8NSsu6eR<sG>w)JVPO#
zv)^d=a2o;Ety_o{E9YZud=5tkX0U(%7>*p7!r5mnMQ3*w^=bse5HL*YInzBadYla<
z^IO>)+U=Y(a*dksb`we^Y~fh^AG0U!0X}iuSX`s8zeaY7G1z8%>}hGc5I1fgOBu%D
z^)ZZAO8}+1DN3WnjRvgZ0)j@w;7Zp$86ERakO9Y2^M2@-qDU>I5e5_!Oih=u?Y=|k
z>+3-OvTiJ1)P=<hyD&3T#*x9P7)GXVauV?-$fsukXmuMCk4A2_5~Ix~Z;ic)m|C&l
z9xsi>G<RXMFhfHNai+A{Ag*PN=&hqKJvJxq8IFHbL(<JA>o}tq6PAdtA}twu18^!M
zrMZCtLlAjS1r-DpMD?OJ!cxj0h<Hy=4l7s9$Jkf_Tej{;ds_-imULl3Uk5gATCVf0
zfgk8}qSD^Xu`u+w?$FS1ygOSnL7H9Y@>n<=*CoZnKbyj!|DuvER3O*5=^|>T=x)|y
zztJK-*$G|9du-P?1+0a3=|*#UVo;)qlMNts*$Ajk)zx!@p6tkoC+!8*y~!b6S3{vG
zjh8V@tXtcM{{C(Z56@zR?7;Q`95^tJ1q(Z|a6vm#R7lfYsyPHh*BHgyIZk)!=#EOq
zV~3_$=NJR~8VzNdDKQGroK2*A@}-OiLum;js6hu9bcsz_p)6SQ-z@{*<e{!XjQ?N>
zp{V-ZnBg*RwNhLt!5e-ES5{&MJjwNh=WexhXVE*fm0I*=6ox}X1zm_m#IP+Bt5z<+
zrI)Y4+2<^UoiMR~-za`|_a5v&Fs?IOvZ=*S*qp}<pw1s_=ES=*)+X^BpSXIV*@GEZ
zXXsKese{7U9%#ZgM-#_Pj(gSOub;4On;xx(t;yxoQxsaC*VP=7x;sOfg{QfhKqCy$
z2<K*T64n!zfYvP(y$63(Ym9x|u~K}`t}&E~b*x_BgZT?G8t~%EK;ME+^v-X`+)M>W
z2BuJ{H8eq`rX<x_G<EL@CRL{sTMGJwLL{A&IW{&%>xXz)N6R2KzaGzbVRUY?p>bZU
z^%dR67Q3!33DD;zMpAGm8U41-J<w-#;HUG|AriTaaJ>Q=(bU+n-~8jKpty3vQ^Q9G
zroMOY;+`8fF%`N;2WG9|p#r+*r?GN%Hx@0<!?sP0ySI1b(AkwmNXgh^wKysc<n;C<
zsUpvt>K5a~K2xM>nz`DR3ZevZE3vF8*F4WLJ~h)dT1>Tn#C85RwkOBFb0UgKIbkLY
zE_G37s}U=%HPgieQgO>j%cU#kTR;2d?c)(<|F{xx;u@-c@%p6IKb31c%VNChGcK(0
zkrKv6%gD7Sv0_CR`j>Sen{%4#Bh(dhGWIWM*iu}}(+sZSo7a&*bHes<A&AWcsUF>~
z0JlI$zu1ZhB!O$K+Lu;2f%bA}l1r<rzE#p5zkLkah)2wjz9E;l=~HXf)`~WCRE?zF
z?(W)oIQ!_>*Z(0_l#jnD@1(=gdI||<rVkeWY57vTeMc^HZrYFPRc08LX_~xTYT&^K
zhOl?f6c+U5u&loWU0o^I7T3x3mjA79q?w7*QLOfBW8bg&rshtwf}{lkHn(&u&ECpT
z#bl$suj^2oQV=siLpx2Ev&oF6Bc+SH<2O%;AL7RIF!0>*YAri4bNgs9-14Q9H8txb
z%^!_#pCOf=pM3G>=H;J%12glKqO3xgmT8zY)I)pYgzdC<q_JQ@2BTxHtW_e;4c@Yz
z%>b$SFsR<029c2yWIzak+yWcpLj{zkj==Lu+5jAf=~_fN-nXUIP_t^URYs}fxK`q;
zHN(CYHnc|TD8(b`%P8`wVHiA=$wGPC@L2r|XNHQ@&&e5ae-ejxAHSfav365$`h{Q1
zWzJs;)1d(dt`N2*Xr_S1kEod2fN7c1q=5^qZK%aQo-KWh5khckuc7Dk+5934!$%4z
zPaTFIl$)w2&L#Zn`fbFCiQBBu)9xmz{MapxjeDf%57c;}q_PQxB>i;=zcGrr#xFlq
z@PGD?5)H~SpS1avC;jgS9KSFwa>lvOpO<^#r_<@v+ofTIk}01ULCxG?rfltWjpf8?
zs^-`)(z%rHB|y#qH%;m`fNh${^$Cm|o<m`JKn8xfnaH6Ei{onOH#6m}+dNiF5gYhs
z)JtPTBI$-Q@<W}6R}hg`M%_Jpxa>dtua#iuH^O5^_vHR@hm*{J6HnW^NZV<*E`D`S
z_WA#sO0N}>!F_5oHq3+|96v6q*6QY1U_>z(5ns@tC(Qs-MJ61ZBtT$r-z<tVgU1;_
z#b2a~$d{Lt1#2da_4By+OD|oT7Zaa86G=amG9dR}n2I|xXu$Wz{F=Y>v*lpdryFu`
zZ(KrrBB@Ru@lQPKDOo3a2@J_phx3g8*_*rm!&agnkuZEtQ>R2y=!Coe<IFL>Pt1sS
ze+-%#BmstrM8ZVdA_D`vXHlFxDg(cyLCl!oaYikMMVg~@k0p%s{4@=jOXW+78cEp;
zWjdr{qF@Tu#{Tb?gNOdL9vym6qH#jSLu>GcIz==(<?C2QoqlE@+t%Sc<E>rUYu;xk
zmeI5_pBqMKh*Wd5WGoGFZrFq&i1^Kff7(LZLXJZ_XHY5}m7!PElRIKyv?&St*z~S6
z6hX6#d>JX~LZB8?Gf5TMQBXq7-TRA@yZz(!X#ZWIZteJWvZy}*b^c)M*BQ~4Zzo1%
zu70nRTmfY|zCnyI93f0gBbT)6jpl<f8~H8^oy!gE{P_%Ol|dPJWhnSMqjrq=G)$4E
z7itv~hSVisFe^;~l?=*g_(u*@y<MNE1drSjsHv&nPL5Mg_+S4;{IM9pk;!&Am%pha
zebt8&iPd1XBMo8Jg-BYausIhtNddx!g^kb6(Qd{)Kbl1tjmk!27EJj(*87z3r#~zZ
zhDt>tQ#?slgeezp<LFGq+d)MCzn&UBdb|+*)T@}^PmMp?`gKO6GFfZWOS{rne>9!i
zkYy&-gBo?yPC!@*VcBhb{+b*{_8moKwge?z)EiTj(3fH4g-QleaN!7=btnUP{;*$l
zANg!0*!B5FG_X5vM15)y{VBqL<CkzEBgkvY8mC{=p1Sh=+4Na!1$AJXG$O`y-9}CN
zegR6iwUf%xGY_4(o4tW3nw1szkz1<X!=J841NZ+Sjp?5-16r#Uksi|y+~JFsrmeI8
zye)a=Yi(n}0&qKql$8&r|Co#mFB}=Dc?Z8+_4j_W5gmO*>Mr0D&)Hf}Ey6zq8SvjS
zLXVEM*u2G#(YM~<sRfk&4`t<u7me@r)zk!aIQ_AW>C@}!_4Imr;ZJY<KN`x@QsgH6
zT>t<807*qoM6N<$f{9R0M-2)Z3IG5A4M|8uQUCw|fB*mhfCvTv006^2VaosjSg}b&
zK~#90?Y#%QWmR=Q{@wf3+wbdjdSfbe009*Q1QA7JZ^WP2jZvdXej&d^|4G!SiAIyy
zVxox}Yg8-<C?dVX3=G56H#6_OdA;0z&pl=D|7Y!e&U<exQIVl22e0?OJGY#B*4nFl
z*LSTAJas&EJas&EJas&EJas&EJas&32Ln_01DW-G=k>qr9ci97lYe>Y_&qonBSCXq
z`GP;WZv38m<Y^t}{sBGD8OIapcw(K+W4b>1lG~%ZD(Um2l*pkgcka`&=Xakx5}vVj
z<BRCuBqW|l$M2Z}uvpk62C?L(h4N@Af?oZ=hFt&V4I9CwWa6~#Yc4R5Hc2raZH4=7
zj@U2#J{*bQ0h@JX3)Z?VX{&oM5cBi%&BG5gF)~g6O2Q){{WeFUQ0J~&_PYL!HiE!u
zoO*h;d%#|{V%Xn%P+5p4h$Z;FPyjOXw9+}tSgQ*!efNodfB3<beH*d4J%y8(&0@;f
zg{yA6<y+sm?K|%tlY0;A_dGHoaZ(^ibg-VxrRVp&hV`d?!wBt-PtV|4ThDmc7w+Br
zN3kwGbv#zWr^94jg){p<{?J>`ZpuG-OVIp_FSV+l`hKgr?{oF4f6IM!IdrqU=@Va;
zFX(^%+ZNyZo0)2Qy}|YOy?)(g?{D7uHtGA{tT&rK4T9kF&6_{*PjUcjSJA&4%y>e$
z0{;83@@>}NamK($_no}@?VIFTyjFfmWHz4$cWyh}o6mOLDZkqeMdY3Frj51FedkaA
z<<Cxg^`}xu8MKmVMgQvWVGAoi5(3Z2pY^Qwyko_c#)fP|%JsHk^g@K3Kkc<${(E2Z
z(jT>>zb%rHdOf{QX9katGVtGh;rF(kIrxtUHZ6ZuXLwfFi2i`Nr))Qn%`!1O3Q@~N
znBUNcdb!_Zb;HeWTT^-ex2}Bi$1Z){Rav-(kiS|9R7fc$T;$A`FTdzbpZ(y|uV4KN
zvmxzMY{r*?u>k-s7jA^tfBd91pLyr2$Ik0G>v{BgdY_Quaq|g}zYRK$!ne?sJ7e%4
zA3kB(tNY~kz_(w?%olED5GE7<eK3OM0XY+R{wmJ5)Fs^75K;ps1n=|gS~>fbx4r+m
zKl<7iE}fJ0fRuoQ_49{`0W2Fld)3<Kz3k$Re|h1{-GS68X-}A2O=g}3hJL-y<h>BV
zod9!$X{7nwJx%k*uOFPe`ldZ!xO3m=Rr?#e@APFuB*E%qcddTs4t)VRa_;tl4?nPN
z)tlDIlOxZ4g)pDLjbm#H_{4+|d!{8af+5R*fjsyXD@~+leC~up!tCmUkQvWzl(OG@
z$A@lt?Uz1%-kfNJi4v#)kx4j6^LIY$MgRS(w`_XZn#~5%Yb*rFHH7T4IbQ*W<p8qe
z@c|4&iaUYU5M&q$X0y<WL>jXK^A9n+<Ii{f#}{{h;|el1zhx5g`<w-6;WMPot=)fl
z{g!1{tTRpu8}`d#U$Twk^c3);x)cYhfGHVT5kN89M1$k{*$6M`a!?;1K(0Cop3k^`
zx>$SOC;sA`&j!`2UjNlET~?A!r36Yqk^)P|JaJk3%eHQ;A+jsJe>Cu6<ZPau1TxbA
zn*gv%sUxEMf#4ue9tCFRIp#fxIV)_8IOf5zZp^j9{Y!ttV|m4XM~>venQUvvmES*o
z{gs#S&AcIBDedQP=Qt+~jEBG{rv*mmAVdpb0pm6YvNq6}1upFco{=_rd8Uj)W)_jV
z3{o=BDvhWA>kaSy<{Pj2;!9hI<kA$e&+f@xFu4Bm7oOes=JTGN+fqESh0qK=nd>lF
z`*KKgnO@S3-N57_V5AB*ZiLgjd)y!1W7odFclaM~9^3Q98FAns5Irte?QuPH^i0=C
z{?-T|eZt!O+dgsj`uD%x+2qvZYovSLDF&XE2ZRK^T9>$GTB22lh&+J#jFSm;Y@j_2
zbmxIr_XF#h$;(qyDCDORrB^~kcEg@Ml>LXx-}{OG_v3H9(`TWQ|5BVF&C>jtJuA1r
z`I3`9d&%2+w!xkDWIAWEt`&fYASd=h?k@>rB#rB@@3Q~y#}B{duG0NqXvtacQMr(h
z_{#kb1$~3*SN_G>>pt;;-1=ON{h@TvILp8#1%QRXZ6WYKGZN*RM9_qg4FDnIh6F4F
zNT+~e23Xz!ysjH4`UYC#qsX;SAWHXhDT@t0vOD|USA68dAGrIQf4<-f6!c39rvGST
zY3sw!dG58Z{lMz;;EsDTUoaUH5POb-4>{qtzt!u$=f^i}8g4!Cus(M!g2xLPd|cB&
zlUeL#TVL_M6T446nf`txz(^weZs)?6oU!u#A8-eAwdh6C-FAk7XB2=i0(J`Envy`>
zlkfwG$XAOJLI7a^_${E>1ZtiXBPEEh%>$t=U~~_nHrWlMd`KWX=!#{9+Mj;%ia)!2
z-KB3+!C-8?bYMu}4#&J~1b=bOHP89>zf|`ztCP!eNkpX@Fe|(rw{^LH`I9@JMZ)KC
z5sC!=c*4SuivlEq?vP#GAA0`_-uup1zT_JW2K&t~gcg3mKJ(l&SAF#B+5Y~T{ZhEA
zpJCw4f&`C%2P5D+^FqwjrD(LI2z`ktj1?f#w<rJtkD=i)R6StNJjB<lfRmQo?_7@h
z(SDev5@c=4O>ZmK-v9A8{L6)1&w4rK@0=$q7>J}$N-!g;t&e==C$AiPFlQs3_E8Od
zd9*YAuQye$+TXnM1_FM>k|NaOc|1M}z_bdiYwumty*}`tc47Cbe%3QU&;R=Ma(bPB
z%h#+vZSaFP6uLJw%uA)+_6&}*x&VhU+!<)$Pd0#t&k?j34_gc}1Q#LWG9)(u$N&gi
z5`GP+HzleKiCbqSzE+c>SQMD=UWNMMepquM<aopFep;sXkq^G%E88;L&k{l$bI!^d
zaE6`rp&dWDraWSqZE4hGxN~=rUpIXJmCD#Z{&Ii3U4Yj8r>!1*Nvhqm*Pfl_FFyIK
zKczrW7j1r3jb01iLQnf?1AqTufA2Y7>H=ZrFXVhnFAzxJhjriwvjUSfiFylYd6El{
zf%)LlXIk(flr@L~333a51Mn+A-2++;DQ+l9e7gyB^$3jhtb%uB0M;CX7?Jj-^Sc@!
z`?I&-y3*RZNm+te3F7DwKK$s%cZ__cHDhwCW~8s#SwAw?I=E-?*Z-a>0GUWyB?Yv(
z&%0##8>9AiUuFipKY8yNfBcO6$rngTV9Wnz9!W6-<@)xfp8t2p^1c_j?%4v_i#fMC
zfZ0&ud$SU^%?gwn40Vs8)dV6>3gJs30?-Y~P0}r7>T&1;ts2m(ki}r|Y7jq|lj3R*
z=v&3Hzk3y0hnK@HyF5Ay^BI>8djH>R|M=cEwyK-XIVn6rYURCS@9_6W53x|r<-|<~
zr@jU>gystTUMc`nreFC<*z7%LU-apxUD5AKxmF0V&g{RW)BCS4UjC!^o_G0IPs*P7
zv^-XH{`~1J=KAZ~-g(st{cl|7oEUn==fW(fftjYn&EvpO8ECW^8f4a6K&TXeLHJtW
zwE9JC0b~^4NFiF_lpeOqKyx0bG$g#b#CPT;ZfFVgZf4lgw;bWnAna0>N0TOA{ff=z
zpI!Q=4?F0|lJ(L`pap!SIlSY+9eH!l@Jf64-01g~D#sJ$c+Agc1qS=xanaL1^VWYj
z^?Ak#>pdyYGda)jD7;B<c3)`DTkiDU62>0jc*h5Cy8OnmYrnV%!RnxIMfQr1oVn(s
z?@4WOYkil)9m{c)ZHbl%_yoF9K&Do=q?IjX3!odNgFFJKz)$)Rh6Kd{f(i9JVG>+2
zDVPoL6krqqrwzzt03*Zr%R3piaA5SO0%z`>0qdRxxaSKP=|BF^)pz{+y?_7o2=#CQ
zC}Ip-+s}J(#x1VBXZ(jB4n^}Z$NC?4C^)$o1+(3K)tMK4_=?w`^!8I;v<#u!^rVPP
z#`i<Yg5cp1L`U|R(Rj1cewgQX@99LP6*TEHC}>KA-|1ZVs#BK#)q9-fZf)>oaK|l<
ziMm7(0ih#>Fx2Yi2pRczp@gmiJ}Jo83ktsjfKl`>nEH3p7%Ip`QrU4ZB_G23!8wPh
zbHe?l_-_XO+D?YfvpH^VbmHv24vgHK&FrxD!PmX;%(1!o&wu~WCtjmIoL0J&cyRV7
z-#qq;$X`k!`)!#>Pe==(QXVOAPS?3_yzXl+{Y+}pIKtYrCuLK>PT8#30cqwTj~)cS
zuM+OPvCaM4tH!_h{jptF)^T7o{uJf+v*xxFpT6qzJBou_YAY|7Ze`HG{)$AHk-~QX
zVNq$71WN*DT!au@t$N1clQocn%s<qMXG%^ae7ZLTxFqEu1+e0q&A>AfMmt~@06PU(
zS;k-0$&m2?d6mQ&ds=XcHE`Q+92&3YU;N3x`QwLbU;pPsVINQ7J|Pq!F?a>5Ep^f0
z$!|V&Aa(xfCs-G4zaVG2>my&djEk%b<Kbrb(EsG!E55exihIj9{>LINu7z*2-uAOr
zes;QV@M3T9GHJ5SoZmks5u~MvTp+Rl!If;)#b$zWse~-SLZ<vYLb)JxGWje{1DRmz
zZy8C!41jLRHab+j1sJ)2HtiCuG~-U1;l&+5Fb8!153qG8Ldt3)>oV`UeFw6C_|3O&
zp9}B0CsBf5WgS<h*LHCOe5iV0^0DR%J`NFyfexNeT{^JwRe$mBE&sOWoH<Xz6wzH-
z_wo<Se&HLV-@Zbh7+pMFcH>ByC-?mQ{p(l#(FtA848yK-n0eP2P_+Q*5^5)fFoB3K
z<k(#OG$m}k(#gb=GU&f0Sg=G10thnubTQO|B?YkJo2`|A=NUJOQW$y0tqg%gz&SY}
zJqs-RPl<schLjVD?yM1h;`Sfee|y`Tx&w^P|1yE9w2{s?GWoav?+41$)ykc3_~hSS
zkWk8h=dyr=HbqjI74yyi9J%dtfByHo-aLP>+l?al_wKa$wWB-Vt6zKU%2`$TKc8LO
zbH$dzNuf8eUGfJHNKtQSb1pqV)B(cw4Uci|F)lq->=9B${Sty|H!A9<{9ixT$^m*T
zK#CDt17#8DMsWfuiLZ)AKobyE#-kc#6oe}Pch-T?4u+jC<T#v%nDRLGO-ug56E5Tz
zEqm+tDe2Wq?AUdtYX<@%lK6xEvtRn$xA$c?ZE;r{(o~m-P>|m_1xRR9>Prdn;|y0%
z?D)5@{!eR{>1Ey9_jr3M7(c3COTyRbRGW3i`CIzm^M5kyt=gKiguVX=!(1iK-@W+O
zkdQS%*0rEygMraKDL{<$$xthTf`4hn3vC%x^iKue*czz6={^>|x{tuQ&%iteR7v5a
zkS!^^7I2^e)YbyyuVH*FVtlMF%_&bdE<fe9XAL+PzVa9K0nlY|P_!@WKl8GWeC)ih
zh|X2DZD)0^dS2hj=L?}b6@I6YK&1$hAwWZX{`!aidiLHG?gNwcTY#q2F_Q*+47BC8
zbzga1e%WAS<<o>cI?i!qO6ToS0}wSSPzP9zf!6?3r9dNAf))_96!4>0dvZ^!TdjU_
z2l`qo;V-?Z%mFYW2177z_<+#@jD{4v3BjtQY=CG;;e|jp0(wsY9=?cSw!tw}7PiSd
z8<%Z(>wg*O(D*=%6lRQe=dUk)!#A$`*SC!P*EKKx&hi(X<4bv}?QUA;efS?Px$dIg
z)6QqG*zbHbFtG*?mmd7yi#~ksU;SkGzP~vZC}CKcf5k@zdoSi~TY-vi@IAv?kb+9N
zB;*={tU_=SI$4Ej20ll^VqB$qu{l>jPbdYaRj*P*NmfCSWl*L*Vw{DH6CRLc1yoCL
zIk+1zqy&(XQrHn-kyU5{qy%&hb`!Y239O1Fwmny3auYCDWjI(7;rgy;@|D?VzD)lb
z{kuW|W=8%Ar>*k3-S+WXSl-LIaW9YNALPr=ovB>&KhOQ~hcCYTHude4ksN1t@Wg_p
zmgEg4Ys)@k@XOVer(Edy>m##N;%GwW`I74#UAb-_0Ac)1Nr;~yH}9MbE(WBCNSG$$
zWL6PMVN#hU(h)x?0gqR?&IA@OhT{M(7^?e$s4iir0jom_vmLN|0M<=u4blCW0*vZu
z@N;_@u1Ev_^c_HcQV72lg#{~>zTv<}Z@6~k-OpP3+i2aLo;~dupL)mU>rZ@fLxhDQ
z?A=r5p&Lzp^TEvSs~;Zwk8kez=|_e1<?jI}kb*<)7j?9(FOq?L`||Dq5javz&N4(~
z(oF_I@@j(1CSU~&S;^Ik^@9ku%XovXSp{%bF{<&aRZTYv0F}`Rgn(q6hh*Lt13w<~
z{8Z~$h9Q^$L{qW(P(LgnhZqdUfRzJC5v*<jt6#zy01Dk4543;}WdL7FEbj#l?BQmC
zsAjp|6Ex+7psM5$xT|*8P4D_Fp8uV#+pbRMXDUDVkD_?@)pwt}&pY@aK#1XEb36eQ
zfPzD9=v1dJ`AQWfqm@mEJPpPV9}d7QQ)PsXWGFDe3W1;*h;qpj^R)_Eo^LwYHsn?p
z!5AqJxDsj{=usNTBZ%0?3ogJDbFW-Q!tUWZ3#2RKbTACxI16vS0>fb3G)&mG1KV|B
z*sieiCbx<P%pyU>5%vcRn+g#wJhjZ1BQ1LRxY+lTISL!a&k@)-aNG3WA3wbNl(|(-
zNBi5pcgM-Y!LFV3@4uXa{yU)nafhz{pXS4;GB6$Vn3gN8k)u=B?fAz1uj*QT;@O2<
zSZ^^N$;hwQr6`vKpPKi~YQwiB3t(^qu9f!#pYyOKkTRH#?6p}rCb%O|NP|Nf07^0e
zrGUiKkl-dUep5hgMxa@aU|KF93<QBd&<cfDt$C7FU`&~&<=Cd{INZ%!D7Xer+1S9`
zq=9p{G(53sEPwYG@B1!AoJ*Tdlag`Bs=-w^diRG71jE5YI|v(~*F09j*U~u7AFsba
zOIr!|7akUKP;|Re-97!q-qnMh{agDx22Q9qoaY=E!+^og5goa;yxy?P*-9OLSVe#d
z_&B()CC2WIqDFCf$IG8*X3h-#?hxrS8LagTwOXtIDzBG91$@fvYqk(4P)IP&g;W-R
zh#X||J32IoG<#TL=*JCMoWp<x+pt8|ESp@+^Gv!OhLJ)TaEOTch9Ui~EU>H{7)SwU
zZ3wgfaQ$bz|GND{y})Gomlc5=wAmp-5uqAB9)%+Fc&=_;*T<rBRflV&(NpNn_YJP?
zUA}qq@^#Nx+rR3p!M=el#Y{KnD8LUh@LD!nfk3T19qv4|hhKfqr~R?Uj@L^*yDx|;
zM?*P38;bdcBx%wQnG;{$+<w|C=fORLNmC_Kp`<m=)e5Ivo-z#W^94naOg*RkJXHi$
zMnq|-5!VBZloW<-E6l<W5M6n0kBxtAd}!j+FU`2idyDCn7j~pKoZHv7`Gl^*GCOT&
z6vu3`egyCQ>eV;ic;L$~CE+vWR7mqQhj6KoTbQRXHa;HvdV%?930$x4nBce|Z}R9}
znQmv*s+C>qwr^Ut>DilCtvPG;;L2s4`A(Qd0nH$d*@}VDIq5%eNciPiBpNLxA6l5U
zWiCf=ab5VLvo^b5yzQ@ZM=ICee(V_-)RKvY82TYc<CUhB4#Aj7SfUO9rJ!OEMgJ<;
zBV`a&2d34pd_Sd!oH5c?1=>&r5X2WZ9R_A_7#wg-A-cO5pPnf_R2L82R&P9jsRq8K
zYI(zL*%a^XOWDO<irmYs$wLC8qsdjE^ZR*9oK}Ve`u*Q(22Vf*NPa-f+*wfEjFo1~
zy7~+2PF&Z!>D=|pHebAE;Dl`h-OG?k6%h#sHIHF*CiHd;iLhK3RJo%CXfjUlICIGc
zn>GW{wds-&=kCya&CFWMy^FSf@SneXZ*6|U`@xsB;1`=JBk7fx*#b8xY$V1mr<JS&
zL525|+1HUjqa0FwIJD`H0}nko1~9mUm13~c05=#+L%_Bq?=Ap`s6GHXSzUC}5zJh*
zA?B(L5BnCck;O86MNi7i<c0KG^`KmCp;8AL0e#(K)U$Xf%}Xxl(s<#Cr2q?|n=<Dv
zRt)wRx1PCX@Ra9nTygSq*R4LGy}Q^0$4#N>0du9u-!~cg<qFUWTBeNX>cM0TCa21q
zsdD;wG6#V+Otn~3+^joiX$3M={idBx_tmzqdH0vD+r8`hmOL_{S;6{<WMf_$Ef|(w
zy_9$*Le|13OQ5*{+V3kLr4&F3Gmcm2u|;KIDgZg)ro)73aJaU_ip~&2nUKy*m7N!_
zM^e9_mCn#@J^fi1ZhXx@pS|JCO&vK0hT)+R%woPiRhn&1>^U-h<gUXL!#j@7jy^bD
zn><p%Y)PULkh1^W)sC$N9mfQbkB<Uq;aj}T>9sF@!+B@D<o|BjvTdNVH~`0XK@^W#
zC8+Hi1)B914+CiuUlNkJs+W!c99r+h`y<RdUgZ>gsiw%d949Fnj%x=5_7G1H%tS3{
zn0-BG_*>`SeeJzte|`$!kx13$2qUjX5;h&cFyd4$$p8fTd=2lasGo!`<U$3IUdI#v
zZ|W3{s~CW(l)$nXPgzWCSnFZeKA%A4B}c+kioj5?Pwcqj6EE2QM{nxu8bB0=jd@>+
zlnvyw>-n;7mTxacXJ)d&ncQli5zSzxI*swUsmhU~!*@SCbl~QFBg1!(&W!AyZ_P~C
zFxQYWSjdrnnNs{V3Ss`{UAHM~OV?jL^p5wubxpqA7So5r#>}h~)k>2`0Zc^9Ri~!}
zPI(m;SF_N9SHe~IvA}hFq?Lf4BSnd`L6VJbzMxgk%~s@l8&<w_+xYzbe{;0?`M*rk
z7%77~Odm!{=?au}!Gf?=%4ftYpG&D}U`W_T8Wg9vfD?vbF&HjjkTTierU4XF4C~fc
zVBbLD;nJ(3E0-pE^5?90-+kw8ea)JP$<l$Tx@$ATb}a_SVwi14B2{L-GXde6wn*EK
z$YtA5$gDL_8$kZNZNd3gs(HT8swg*SF)=rdgNKjo+OzM_tp^Sqx@Bm5_<`Z_@S%Ck
z)}#!NQHtM&L-1=WK=LIW&iVgm-LhA#Y3mbnhadK`rBP;6tZhm|b=s=M9qFo@Bq1w<
zsl2ihqNZL^ycO5(RsB;-pHcOc9x5z|D{7Y-o)A-YNd5dMv`sTxIce?NuPpDr|Le7A
zhXPL`;dznaDZ&O!sg;1_N<pB)jVS<>qy&l~q*gzZLRITjeOAQ+Dt0i56G+jB1DNDe
z42I>MA(pSDny@8)ZU_YiyPm%4?{=QC>1BO04X*;Qw8?F*evhP<7Xu~(57qUNJQNb1
zFHxG8m?#1E8234BkxIEDn<<2u>~eFUGcq@yBeuNcIsO({^*2@PC5%r@;NXD+dmh}i
z|ECY^-gCq5;RAOZ3WkqHXg=bu(qCHvk|?!3weg}#B^3AF>Zf}<Gn^ShXkQ(_E*82H
zJgs<&=9L8?A<@bw{~jwq0{sfEqHS^ov~sy2X-RP|xWf9Slw>ft;%jk}`(ev27T0?l
z`ri4I9i#6Wh*-&!1pV_6gxM(jPf=uSw@CO#NFNKqY2Zg<R-`V`De;rispwzAa2U+A
zrhu6)g>xJmR(ddUEkv~V;((2QhlT#mvsZlN@YXe#xii&fgE7P9+@#TPN<k=o5f+26
z$zcgq%%Um}SrrO|Yzy$|u>szS1h3bmY1AW_(;W6*!?z48Ol8s{o9#kJah<*9taDDd
z?9$c=(rvzZW_}7k_{uFK|M-<JT(-Y)*Zq&g68r`hKx=y=7<(uT=U%X5M^!xUvJJ2d
z!3A~O&_Bk4CyPLCTU%Q)=SuJ*iXu({o{oaGT4}U>ae^Pwu?)%r$a|RJqRNEt(bAze
z(mlP$<beqMRRhm&pDx|`&%?D(y+OtLMhL@YJhTM387mVBSz-NB>4c%qZXxjFbbd-B
zVk#J;0U-`J6@c8db^|E}Y#gY^#Z%HQGIK;zTh@6}-}`p0TXC5==e0a8xJg5zbQzB$
zqQ~S)(iDeE;nQ{U^~f2M0##x#(^u1PCJ36UjRvFVxygahk}wTs*Q-=vlrYB`%stGv
zoK%==bH%_3dA#ZWtyoq*)PLV!-|&{smK>k`O_ku+E(a$cI@P@CGtKY-pFdi~eRq$c
zt=Eik{3NGg@r6~vU+nwUfheL|q;RiDX#6V_AtL%a6cBVH*8#>!kaiAm+8O5#CF3L=
z`bfH&6c4zDnW~+z^6jtB8Ygd!P^}4C=J|NlrlBq}U0BY@4JaD8jtR)rtMm`CLXc2m
zLD&@hX(*UJhg%H2MS<n*0`M$qHnr&t9iuCEO8?*O-?Zk{J+;6Wq2P7|1EHi6gQ28L
zg(J634JK60r!7w+2pN1IATmkIXS}IyfV#D)Aw{C$L(t=DONvTE3i`Vd68%7mCIhbv
zX^&1w_vm5E{qDb(OJnn0VNYhmX~|MOPJ94uu3KW{=z*!PypMA~eedlD{fU_hiajO?
zF6oWZL7lSnQV61B$AXt45(@$s0wE~_{TnHVBxMi?Ln#8n#w@@t0;vul)kQv;b7^r%
z!-#J-d=c91#r6K`-aq+)&DNe8FyBLpn<PYstO!N&ObS{}v~EfG$_l6+M2+~VV38iv
zYv}c9a9Z^$m9(`I3>2w!Yy-XxY4B+S-PtW&@4aW;s+Sa-Vap4dVMZ_!GLuKNb}a@o
z&){}a$ykbdQwUncBy=wTS|OAYP~%D?Rs>Heg;c3C3BO65NiBvZJ*QqvT~44jH&LYt
zCm91H6%YUY!x8gHb=s`>69<1I$^YgGkQ@wC-gp0QboQD(wq@AY|LDOmG<>A9go!7C
z0EwDVQSI|d0hF+n@RPq|!IRL{J&jnC2m`73c3w>}aFHKm$S&7PKxr9swB(2{B)P>~
zGUTh4UAC+{^MY$zvQDqzoP0P5(UMxQjQnjJ6fU_LDj;B-8=L|*dLK8^Oj`j*D?mCY
zQEX$VL@6#?Tm)fe+v@zg?p(L}b?aL~5+TT>6;J0QIEN(HQvlpv3A;^m2dkx6_|$qv
zzmIMqSp$expr7}Ba4%qJ1q{sqXa-WW==q3gg`twSVCuD!eoz+p@Beu)Y<SJ=!Py&c
zDf#;jYU?YGCk~*kfP^0n*FJx4KDBbf4pw^C-|(RM>}Q;cW<5ecT{sl*Mc|<%P)F*O
zEwzv-n$vNB8q6BkVU^PW<75dqC;Am}@9JfV-c?*!of6Uk4-PTjnv(=0z$Wv|EfplD
zr0Fl~yukJ`0hyM9xe`uFQUosyGma|=YaqWA*Zq^~AERl22IEOL5HWt~vu#ID4#^ia
z>7yLkTt=P%AKbET#W@uF`+nq`oV10&Wx_Hk^C$qRWk9-@TFfM>bAU(519hxYB&&b5
z4h~g}Lf48=F>+aSZ2*&;5?4u!Fe!C4r1~8c+E4&f95nEa@7^ya$LB;#91?ryzw!bd
zX0yk_0%%5yFUKYi%>LVR!K&G*(RuHV`}QK=Zc)U~LqRMYZ2^?|M`Gsny~+ea?H-hi
zplhR)BhD5=Z3RkW66MK=7Y2d;Z46yofZ|Hd^MfWgGC-wP#nI8j*gdq9kIoJYLD;YI
z-AoD4QmdH3qP*Ua+Q;jNd*QJ`e_Ptro3#3g{X>dCR=@__tVGL_s7ez)X`$8b!)^1W
z%Q$yU2<ms_jMK_zc_6itA-A3ZDTvA}M6E(*pK)I>9!Au`L<>USXjKQqYf#TK_#x*(
z$hdwE2m)|FknrQb$s!a7O#JB9eb~Kk%$K~9-Zk~_=lhtLeWaDdM_3Ec$W0}>>+1c}
z|M`J+-EX>b_d^G2nRM1&)ir?W@lXqrgimN*6lt>`ulxj|)d`gbjp%js1o>xj&?*|X
z3^XTz#<bw8PlTH4H9iUqAF5;S=p?+#G(=ceaB?Imk8~7(L&CIeoyHjsAyWF6>KH!e
z3DCi{uU8EqX$D4tV_H%sp|AkUmMRV*l2J`?_*9_`4L(~R1xvLdoyj1bqDYfa@d#EI
zL-7P4+XhVCPs%HGQz{iKg`n@{hLj?iDyp&}NsKkJecDYWXQr+Rt$fK~Gsat?K<{!3
z_wPN5yYD~fWm0DLp`%~?v#Qwf)1-OkaVZDS`B(qd=v?1Ly@ltVdiT9|d+D<?W;#<u
zdEQqmo`kMfw+4PRM}vI0<dolQc^fb-3vS8<SAia31|jCB8yFc2ab(;@UD$AzGoTv~
zDFa3}4O?`IsF6{eu#j8osyP`A;JB6)sT2u@a&W0zz0?n;W(?i9DLFW$oQ%*zD*R-~
zYA|IvNP#Q|f~U1Lq9m{(T;2=?j!fT;nR*(AQ9!oPjrN`%bo6Af>_nh*8PFKvXiSl{
zk7?+kiibH<3m~B?5x0>tRKaOv9o0bMWLty^k<d5+=S*3F&Tb0_#%A!N8+Z5_$H@*&
zef29-!8ITGZ8-$Lg#sk;Kp-ZXUq8<_Iu7SE+tRn(^;7ZmQ!nC{ZKKts?u<p#PxpGZ
zjtR%HVcIsgOj}_Fe&AugGKO+>9`$Aop6`QN`iyiQ8Lt<?we2|dl?K*q2Wr!f2%7B>
zfdfgM8X^EUsKVsIO_2gfk+m2yE)duf5v_3Q4kl%zg<|Lx$W5+X2GosKK3NT>e7|b|
zzQZ_0@#LE79H<e)m^)ykWwwcy;iDxh@MIfUDub@9L}`fO==DB$B~<KT8x}0r;!Id7
zK#RhNM`5H^KS9*0lEH}zr|6D4HC2TSg^F_FOSH9{m~51B?TvSau5G4A=dQkEr16!@
z6B#^C3b3dIp`5FZ)xUJAWxVAOc(!rp1J~JSZoUk>l|m4C3SPBorBMSMH&jf}3hS7!
zjH6PYK(#rAW~+iA3SbcU&NDE00i5R*bQ?7Tlt%(Q{9}$2UkVJIE_rF(K<H-$L9>$P
zGrBemR^e*(I!uj#bqTd6JU>Ovp@b$YI8npRbm0ss$bBFM&S|yVQmua1WZdOI!;}!I
zxD!Y)PJ>({=75=LFgFFu&BAHxL&pgPEI*50101-Km_#K6m0`$61tfOYaFB7@kW010
zu?tA2(xg8zT&@X=<RX>Dkc{e3+Cl{axvYh1)WkJ6-ySj^nN#Jvrw&#B{aFIuqrxD1
z6c|BT2|RJ+@X_j*p532+<#k7ACcJCz7&lK`aVljDX!v<}p@~X$8m(v!ftW@!7)2-=
zN+}p4;iX}i1sHUJi54J<1gc@;$QPp3jQGTEAbkh0@*IZglO%kPP(~L~(}5XSU`&W~
zN-A2nV`wuDY8<8BK}RnZ#RpIqI1Ygw<sJm5${ztpL<Y40hvEYQ9#f1*3dEtd6*{F1
zxGQ0#voH$n$S%*L|5PB;A#vb`T+9r6kWrmWihIyP%b!L$tO8|EyC|cGwB3nZx)a${
zFLG`tGENqz<*0E}#AMQ970Bf*nCSpl-+GJiqb6G35Du3<cT$8}^SAN)kFo+RW(Kur
z*N;Z$zx$R|y%&7y@=LZgPTMeGlfUz14Tpxuuy10N@7#Yt92}WMrAnn<8@8Q7#xY^q
zj<OEKzSD+L@8?5~ny@-rg*3!z<Srn;8dz~ALv@x0JV+5%Iii*g!_I*GKCLdtWJr^6
z9UvqnpdzlxxIyMe)fjcvP*QB5YX6e51)d@dfieREoGG$*Bq9?CIMKIALRlDT6K1Xm
zw<m|5lNtIq>+_n}B@nd~Y$pWyFICVWWJxGGvXFH&!^5byc4NHM0*8Z?)rE}Hjhx$y
zLUtLl=}tIS7HP{yeWr{D58i`@sEVL<)IB`^=?yK6k0+f|kH+yRDL`^UuDN>P?5Drt
zdG8F}T!G&*!r_=eu>kb0-heG9L0o=W3!XoRqtg@Ex%)77>>bAb;R@zTbrlGu(;1{(
z3zkViouPv!x|k885iV%W0z<a}n_mF*p3cyiC*VMe$m6ixG<O`S%C9L4BID>H3{UB)
zARvU1hDS)s|Ce+D6JAfqBdvUsno?Bct$eZSIyQ*G3$#ejtu(A`N|>E#6gM!w@-(14
z4UF6ggbf-@p^9PZKLv-Y0z*<mpd7@2rAP}LLD)p8xd&tOJJdYG4DZ15u5N7Kv<WAy
zPoc#;OgAUPd+r`_=lQkIY>1(KkJie66cu1$ZV%tu_s;J<|HAiPJXbfp@wvdXC^KWg
z^bBywmWpJN&zR^c_Mx-ThfB^q8Lxa!3(a62M<$Qr{ymep_n{IF9<E`2o<7k;D#MYc
zQW<$|YVPzHDnk;7?+2EX6*z@s?mo$>gV%O!#oS5Rj1-S&9EmW-_9>84UWJ&!RClCI
zLlS5dmwqYgw;*hjahrgqC9UEF7)2bM6o5G{>~@CSN`__INt1wsHv#^<?nI7@8JeX+
z6+tR<tI88sEo!YuqS0s~B-Glru&lEmTh?^o^i%tA@|JdN+)zMUR~jmE<sAqO6JPk!
zE%?j#-O!}=$47gb_-{`NRVQS!b)9ed%thy3d2z$zwU!sUrfF(DjSDZbr7C<V)dZ>~
zfe}LM93Yc6(3a`NU`H=5e-7}bKd528I*;84XK=^PGIs2p!1z>%uxcY!)Fz&g!r46$
ziYq0SpUMzam?Bj>Sz;wZ?e#$lL-l|ZMfZW88WPdsp_u}jxdqb%mo|h+pbp)e5;mvR
zFV%%nEOC0h2_6~{zLcEj4CLCu2Tp=0^h&Y+7RKvGW9m8eqR|jSC2xk%rwL^(w4xeB
zR7Tneu%auEE!zih+WIWEZ|%W`b?rzMsD_<_KX0QlX5+|%7DzL#tbw#E`4w+?p5I>V
zxa*DY{G$`+<pU4=s=*VFkpd*bmsnAF?ME+p=HI^FZ`qYbBT5_0pm{u;d?*D{%0}>b
z0!P3Qc;G>eA)s2gD^bh(iafn*7$~OG=*wks(u!rc;G`BpS;CR&5_Sw7#a+85v2Qew
z@<ah{I)lS|IZika=sratC`qIpAZ;+%MC7FS&XNddb$c3dixj$|r-i7f#ZpV1D+aI$
zb-v`X=)J0VM988lAu7O#69(^eNVE+AJ?j~tJ}5<LpM(*aYU)_%hiKMX@XBSda31;0
z9M*1V;e=v0wht`BY1`YdvO5L4kO3kWb5jNm?X*#DxbQ=A3#K}!m=gikAa}%hVI&Zj
zopWlV`o4eM`N!}3<CQf$eB{wmf=8?Xn$9fHmwxHHo_*HeyweZdN~0#yOwxQNNeo{E
zJ_S-bvR39)Pd`wUEY+PIGVV7S%&G=oQdugB2+Vr|2TKwe!$7Cog~9eNy!fmTuX%PA
zGmQ#%A05YzAqzWq88}kUqw|?r6izY0X8_X{)XA%>eui%JBr{JSgyQ{$B*?{z5R2(!
zWSvO(G(Mh?x+FwU?4<a$O(Ee90@)K8ye7xke$JZ}pf*CY|EtKcNvvNzk5jf;ICc99
zY}&L91Iu$X77y6d!tgyF9^7MMYR*DEGKs*T2g@lb5NH&sp%y$)PD4;8l6JxC7UTYR
zBwlmr+1~Wb`|kP6e|gv15M$*>LkS+C0>l%$tczcD;TeDbQEs$Xs^u`941`h&LM<6k
zle!Sm%AsJ(Bq|mmp9u+53c&~?r$$T~*9sVAoyWTwAj|<C1g58fy;BC-oi_Al+i-ec
zhzmA(@I(cNrl)ae|0E97931g;aAxyx`YaXO(HIw5BbEh4`HcHg7m^Y#AQBc(9H$W^
zpcFutcNAuzCdH6NA;7T>Fi!xg^?*;^R1;#TgiUS>ThEu+w$Z@mE!`L#SOa8II^d)p
z&xU591{+ei`$s8^k1$nd2z{Z3R>Y(1h$=?4Ay^6qhagt7;<XDXXnG!&ec*dh`0kfo
z(mpm>x%cDWc+Vz@vj5vE!6Rr5(@|*7IQ{I4w}1MUVqtTw)@ZrOc4;a;p{z%}R679j
z#|D{Z3bg1dD=?U_(by;u6--T#iCqQ}GpWs+^7#~$GGvPkZc4&7Bpks|Fd4eq82bA|
z<a&L;u48ttfuo~MOf@*1m7Ngl@@QmjH9f?ir9MA}<ftGziK7@<CzT3H%J7itVCX0s
zC;}J)aQiq=-qQk`@R4scFhB2OZPviX9*&J`EesB(ft;g#9O1=&Ol*<F{-Od8P_F~6
zrbKxTxcc)N9#)O1Ds)!O3nD376HCaB3s$5It_h?Rw9U9<Nc5+r-}}sF`qh8-k5_%?
zo)5o}u^?uP%f~_iwD29QUHR-&K6j|U_pC;#)G!Sq&c~;auxwTOMyhFWP9`<kQ_rHx
z8~L~e;j4lgA-VBuq)<MPLTLrYsKOAp97*lpN(snSWJy@$^EpG_pf+rY&H;&3UlW4Y
zF*oC5YPgD{C19qj6UK@nItnftvjSd|PAg_8Q_z<&6my3rfl*B$)o7t~q=9=LEMxj%
z4=W=JTTjbl!+Hz-eJ-p#jU+S3JW+u_%^D_-dBhmJh@nQpt^m~r&}>jGfuYp`3I*W)
z?+Q!})BXesj@D!qvOWoKf$N?IWsPXj#K4pqRzU<62CV9WXKtFyzTl7l`eSz;`L{nI
zq*ZHyJe~@W(87zEbJl$P@Wu_V%$7=Zk}d&Uf@<nXbx+j@sQN{gfP}9pHxyGTA(OsP
zT#%SvV(lmeAm6L_!*K+zT6^NhT$gjnf{+QNnmzf)bQVZwfLw}p?Es3VL`Szo+cF8>
z6(B+r)B9&|`?W2Mb+u#Nvj@N<1A!-Cr8%g|R&IEhohhR}=0S`#&{hMMr&3tm;b2Wy
z3U<mtDX<ZoXrOBq5KQT+mKHeFh<Oq=;d8XwN$A9Cijr~kWOyh`Nild65<9QaR*hnz
zgo>uXr&tk4$YyK}==YLEprWJ08FwjGgv7>`vN4<)$-nSj?|8*X?dq>;B@o9;0TO)D
zU|YKW@AXeR`LE8a)?1!rG<0Keh{-~EH?ah<0wfuOCSh>3s)>lBel*drXw@&cf@CvA
z4aI6}pvz8*-$#v_6sgC+jZFkfn<1T%AZ5tqfkKKQ1Bv#uK+l#Y_S{;>L$`SN{7)VL
zUk|+FV;3sq=kVQA2#(g_k5#d};9~RIcC2Vm!=-YfG%;S~*gqz4Xqr(UAdyn=y0<e#
z0VBR1s&$}Jmx}P=`%Hm3B<L{E1tf(%B=@T3!#FAGeczJssZeCb3ZPfLA{uM9aC}qG
zGZmMpT}=$e6--TmZ78s96Z5V;d{_30kGy$9Q$Dosk+6b)eFcC-k9*lWFFND1AB&K!
zg~E5W)-3@imbOd9E<mm4nE$WauT^t~ny;?du_RFC7SvD&VpYXc#9{?diW9SFVgiQ-
zS9EqkCeo(t$<(9|Wf^inz8%=G)x=$&KZ?6<I)EE0*CUl%jh=KTa{WH0>mkCCEZ+K}
zGjZ9A^D57)j7JzcEOBUBVxqw?*Mge-n=swVGZN3dNMh6J1|}yYJdaj6@g1~~Bcj2p
zRj<n5B4I=;rgYrllq)cP^e%zXT@o~KlB|GXaH@jG3a*1eQUsOG((j~RMT!SF<0?%x
zrEn~8Q%JG(Btv}QTVJYu?3#Bi2TC-(=r?i&=C5!1yE;x<^R|y!R<YJ<RBdkAabw4#
z&MkEIB(w0y!xHu$@25f|z!EK`u3gowt=hjBCpHfScnVb3T^lj)L_fFmP_Bcvdm*BQ
z?k5z~b4Zqe`T%{J;5lI8mhVmAj=Sb@OX-^k?9F)2b6$%VUI?sf^KkDy5`Xt!H{;4r
ze-FO(LTufd#T`3=dGgnitHzC>B~=Z9wv{0^kMtOJ+##@hqeP>o20kGS75P;uf#RJi
zp)YnrB|Q=edPmlxxQt<BHxXlr7eOMA*No!PGtj28x`~E3VY+9I=<UhGAk{7xGFkw9
z&qFeN)44C{ylKa+AGvqpbAR-kB89(_5|$YF?$k40H#l&Xpq_n$mTWRoCAs~qloH=h
zTshh#Kpim`n}ZV>Bk2yJTNr9~EYY5bQl>bCF}+L?Of{)S`&1G}+<g=huoM#Qig@=x
zy#nMqOiWFd@cnNd#>17{G107}x9xNs9Sd>KjF0_U7eCx<qUpC#;kV<zzqL<U1YuKP
z2>4}*)|}oqz^?<o7pJHOQ~)=2hz1L2W-oO&M{52MQ-ajNn5M>S)32Le8TmYdlRaWP
zGq`yoh*Gu?Go&eNpuQ3MJONG=Fv=iWzS`%A(_^|3S+qeEaz!R(n6C-DS+*N5I_WiU
z<LK&4zW-5EfF#H4%$)k7bUH)rFt%hmR8#-a?jEu9^_DN%-!C=`kOD6bjaVF<sTdHt
z?{8tx9mRj+6fsi^Cao$GzUCMb!BqcEdGo@)KSECm4??0(t5#H`G7+x&`hLuKN3eV5
zIux_(U^_X~=L2{p1J`~h!Yw!L7q#*XO`5{KvAb}`Z8PZa<!DwU0#7Q1B(kPLch&dk
zl^q2fhjt59;~~qSp?@5c1tlY1v~p`D*9shG9tK0choR+1iY!YE>A;T=ghJmGZ%`|L
z7;51Yom|nwgZLH#HD9X0bFwT&KEFle*+~~HU9^vi0>lSvdNrqBtBJNA2NnV3gsaKL
zl5J8oSy=f>^Ais2F(0K-fLJjIGfct<^}O0tLMuR^lt8aa8W^F*!qKXa6+;OnzQ{r_
z9{7^?t}^kHAML}~(RqwEZ&uM_%IQ-KVxoJ|d-gum0%J|ZMUc`)h3~*kw~itVd{sYC
zuyI0CRX4IWq!hYwbaaRU!C0`dd0%{O91l?ScYy+@K0`#2YH<@}InrIayNJFg5D|hX
zL_pN}L;)l{FX6{KoO%jVlC<)vk%U)U0?mkn<t$Y5z`a9MC2lSD=RC?WfGqpFzB4kk
z@1*v=o<^~wn9cDNyoNxlr8|5U{XiTDEO8O4?K|cIE(}13Q$pQbee99^fRKbwu&%1l
z>l8vo9F#SXuhiW~f{LuPa(V_V>_0e(`|lk_3wtr;4WTW2A}k}PI0ckB)T<oT5-n+8
zDV}Mj(TEOWcxn%By=5iVtm($|v??5^o<w!Ni;QlfXY<kw!`!5RlQ-0kBzi)MK4%^I
zYkK$6*%?ba`-$V1>Ew#M>W7i)qSn@fzK(`t=*l6*LVA|9nrol}LB}y*q_~2&>+o=3
zYC1f4YYBUf{FFE3p6iaif{%&<=wr^m;X_AeHon1cJ%3<)Y^2uKSv1?by3Inis7zt2
z5g`aj?KR~_VFP3m=&>#f9up@ln5iW$D~>4_{?=Dtvv?`sB1NL8m@bk6SXEP(R53y}
zXMnncZ}`arYK-TR$_;RwJWL}Gi+Z#a1C*)G8#1?ocJq`Jb?Y{us=OaN9@vWID~oVk
z6MjtxaH?jZnn)M=@I~M=K6Ws~hBFK_8#*YB;;5hE<%ANS^t}HpP)EYGG8~x>hS{Sb
zs3$@D5weKnWg~UXR1+ypKucM0X>h0|Pz`H1G(9J#=jX%H%siU4Al>jsaJ2cQ7x{AP
zH>QXG8VaC)h(OglSo!RRS}^wSeVGei7Wo61o|^Gf8QbsZ=(G!kPM*$XRaLCnh-h#l
z6$Z3RNV-Awc3=zJ#w8d6aem?fN@`Wo-xO3W7?dQkCbTVSKGK}NIIa}Pwp+OQmYwjb
z4b1pAqs1yHn44f2Sy<HRNf8*)$BEdfsOf4f7#O#eg{ZZLFh27z9^TV~<;(g}sfG(a
zU0VR<ZWP)=LnOwA1=gMxZyu>!L^1<eVIMK?cM%m`RQx#Tji6fUrbdW5rYYi#>eZyE
zrU~1zh@i>^d{Ju7U}j`m%+5`R^#;vhh+G*3b|5BDYCUwzRP#q~sYeHPJra)KuW13a
z5=5A<k2Sye@;UG3zwU6)_|uN`(_hbmb@oWPjuAH0NN02C>h3XfxlW$Rr&aXa@&p1I
zDwI&=_sL~gVhtok$jV4-TanBQUg#K(y^ETksD?}E_mehJQ)y?Ph5d(yap=G(1RKG$
z{~%naO9|iPt}^p9OVBX6iYwGifOsT`!EA8mAY=i`(Y<*1;kD@P?||c4s3!wEi8vCw
z0eY`tK$K@Wug*uX(-!=e9(Jj6{slLuunfHmNvuQ*8bEHq2MWDZgZ5RdWLYj!DGR0<
zqS2~hq%?!t=o~8L3hMP5%^9#c(?YNN`|q7^J^Z;!u;+WejGa?(CSCOIlQ*_)b7J$2
zZQHi3i6`bn6Wg|p2`08}8z<j6|C@7j>Qvu!SFh^cz4z+cUAx!wd$O=~0KH%0{a*;^
zhDtEUn@QnM1a^e}1D<!QPw3}%zujBEO9r^sI7rTi70ciUaBdr3_#AA`#C7VxQpIin
z7gJJ`Il_9>Lte3edT_Tekw(eYE9(oSs)!M7j&B*1z};w*5sO(NPldpqHa-F~hFG<`
zV2c0zXI?&g+QL#Rt3eWfFOb4NsHe(T{62#@o0=~4gD-I978#N7bf7-StaP!gj7y!z
z478D=z*udYRW?o>o3Bqf=oBEQ4^=e(o~N5U47scM^BroERuQ@+WNj>Aybw8zkoFUN
zSX!l2ovu`k4*CQ0XQ})oIC2`0V)?1d+i^dNJzy)QyYTf`*-Fsa{hI6;LHAuaNZD(%
z=VapU^M`@ca(xQ7&0R&*l#~PAsNF`xq%s#LJJ^U@{0~zl)$y645FtD^WstIPQVOZ$
zMTquR81ZV7ZIb{~z9})fNKn&NF8j6@f6?wZt1HAtO&FR2R{amHG;{fX-pM#|pqQr$
zl83WQ=6!~kvSh*Lnqu7RK_cPmxh*wtsb;~C;Bz=~eE&rG7nc_YB}4iUZqnd}TO<0O
z!9Vp`7!>S~^Gjl=Pt#xVYiJ#>k1wbv{}Q7Lh%Sei{&@a}@5>x?*@(8v;(C?!x!9h{
z<-M(`MGtZvCt=V#z03;zFHs^)`!k^@{if#2(Btl9so89iU#0hf^<SWr9KK6ZLv0q=
zC<dIR!<BgV4CtD4*`a)o6bAbSN9sICVxN-C4VatJ0~a?%h;T`$-`k^!vn@V};7_eD
zlA(?gE0@MstHcsBQ&lo)fYup|!M+>DC(sp~>GG!-B~^tI0+D!`FRXa%qfxF0MW@ve
zS)`r{zTgZ9T2vmJoFfxL0h8)X3Fs;IOO(!Z*-*4Gq&LHTptx8+ofKO+;3OK@B@m`;
z#|WMyMy-Qv+0U*b+2O_KGpTNGh{!3YKJ4#~_ea8}biZH*I}!gIXamX_ykWzW<FVN{
zdtp4h1`0;0+Yr%+EjnX8@IKEbyC&QmFXAJC^lL~ygQ=7u{z{3TUpdua0TFW+z&{;>
zDs;*}?V(AnA>(-*^k>@~ZEqoSLDs;Uo_Vq}_jrqGHVcnN$i-W=Fa3Mz1TL4%w{#~Y
zS#(ueic29c6qj}f5g+GN!oq`7c1~;pOSJ_#(eTQ%7`ctE262-bN)k&7be9`Ub)7U8
zRPGCU?~mjJpo+(gh?$6alkhj!X+zbTV&tJ=CL%src=Ae6<sXq>7EH_b{ZlJU4sM>M
z?q#0$-~ssJLk!vwr%BBSP~1M;^aWu0Y;oR9LDJt+iPosb1qja5&@FPav>-FyQS@8t
zW{<prDzq|mr^8(BNfBWoV@{zuupn}~F38yx<d*ksc_u=ma(_C2dgvrvf1#QJ0;PDW
z%O&ib>=0=BBkR0ZWu=U7ar98X1p^nHq?aP%BeC9QV6X^8R;@Xmb`naF1+A)*4+gTY
z#1Z;xsVpc#Fq?{g%`4`GARpDga%*U<3r*A|#`$xy?+J4ltd7(kN6S=&1D~$w8KgR0
ze03~Oj%(Rh87T)7!Md8;zGD<W+-ip>p<r~4js7|!IS&L?mi%=-_ehxy0tY{6NZ0f)
zVXG1mpoidYPKC=Ddlci&^6FgJM~AbXz{?IiBKrWOt0J&kV0$8`jo@G$-4|boW*up5
ztRic3TMIiY{}W!8wcwqX#2<zWC60Jbh#LOeSZbRgM5q8ha)e?>OodwF$>?4Yk7t!v
z>HJuv2>nDz{cqt8N>-Zaf;2{f2?f0E>B!&Okfj;klzIyPEhe?mj*zK8@D%f-iDN7o
zL`JQ(ZNc#D<C<2L<I9>oLw)-LA#JEE*W`+U6m^!SI$B)nnHl%<u&2KWDcS<<4wIcF
zaY`3!ota{|zj8CUGbqir!Kmdhl(N%DBHX}FY;oI+@m5!(j&&{#-39v9w$>xdZkPin
zO**~lY+FEr*J$He5nkW%;mOF70g8}@mfZ;~xwM}$0H8>wv3)SysjM@xDfF7PNS7OS
z`ZY1(I!&GTN96J4sRj;wk!jN@{NY4FT6#uryQ*L@;tvtK>`Ewv0BI({1$<P8w|cgW
zqN{~m?37vpy13C2sr}}5NY}H8;<~CeR2s~5q2SZR5eNPAf^v{33n|Ja#h>!&nDo40
z(=~l@-@~qQaYQNP@(B|%RyygE%p!V64IyFF4;()i)kY-Fa**({hcuC}J?~s9i6Jpu
zAtV=P*6KkkPEu|YNcSPb6nF`klN{K^Q3EqnjtMR{*F6BB^OTGv{?rAbvgdN?OG6rt
ztdQA{gPz-rq4isDSQ{|H#TgcE1Rz!Aiq0h}TI2Tz_TWGUsPpZJYJk!RD5l%?Q|mkX
zsS-=q!J_~dkjL0alLpxB(6itn?{F#|8n&@X`ZKnT$Znxq29w4BGq&~vOqK^_RHGQC
z(QLX}fkf=vZ|ouYQUe5i^HWm-^q0LXF39~F<BCzV)SSb+998(b1*L!6nXIXOSWCrB
zwh@~iGH4HT7Zk3j;D9x(p0Jb;-;Q_=dTr!m<VllmEr<wYhP9<JqM*W%a45{X@WpBt
zH>zipg`P<CJ*B7yeb(1Q(HV>eFc#Yqbn^~zM|@P_q>>{Dv8Rg2N{K6?iFlM~zdpd>
zw3fszc*3irqaIr+%EV60w{!nRM5J8r*Mf}YiE}Ak@ehGmyHeYwi1nelf$EGFyGTFJ
zlM;rwi7KHbz$YUuR?H|}(_h@m>I6X5N2;?0QCkWn_9G|EohlV4BL?$IU#BW<rwUyX
z|DY#B7;v_NS6xS{Okz6#s20T*)*QVki8SXmhs&1*kZTlCh9^#Y$gvH;upP8kyGZVe
zEHlYMrRGS`E|htF+*`q|0mxIniH*rE&~v+%s>0dM^rrQg>?qF0tQg7!j_Hw|cC?2I
zEW~Ri(nb^cpTR>3#|qg$OyGZcsO|p%3p190waDR(kX{(*>te+ws3x&=ZdJ#nDUoBB
zdNm?2S_X=~wacKof`I;%@=Iewoj9MLrg_Tq@SAxDTZM~$4~WgoTAgU9jb`J#i1yA_
zdMzQf*Yhgefsc+1W!{rD10+Kzg5c1e8OHb1F4p>|%l#|qKeL)AxBxA!qn1yS`k@0S
zkj+=Mhc7MG2PUY<2eG!p#)T*N{;y<b6(Y<3)TP$RgpraGx7=!w!|GS>?zyS7S|%Go
zrFE`8g?YcQ?oHteYlQTcQ(j0x2~~J=EL*8St*sgFp@lV9Z2)FCVyYsY%Z#Dm$P^i>
z+%u?9E<zD_f+flzI^DPPMTybEO>ThQa0=WurtGg*HArA_&TvbiNxk%Wgh_WsSWuF0
zhSd{s<eGKxm}FgI3N`ds-nkH}1uza@12z|z;NeLda)>*Y(4&S4E-3k%6tx*VUR7n#
zqf{4gqEp@dx|Wu<im)cTcY22Sts~WO>vmXX?k@9?jxjcmpXTZei}4PA6!%MP1L@LM
zWddsF+6LwOHUVZ@=WQ8cSf|E~*T(#?xs`{z`5V%3ZHQ56TIC@b=t!fr$5}%53Be&^
z_erVC<mruBjI$ECe}Ph8$X4J68Xe{xc2oQ`P)=0~EyTt$RP|12+<b7~$>JWjK)cY^
zf|QaLYOQL9_nuH%=mN1%D|h*gE)j#z0#UDpg(S!nau)C^Rn#hhXb_mx{3m!|0BL7?
zMvwYXy^q+2EJ)l9@#V4eP?Xx9SP2>1GM7ybiL6i68gf!8m*`_(8H9!`6+T#hnL;9w
zhT^YY5+yD>Zm6l@MLR>K_FC*oBrW23&cJm7ZHC);PQz#+i}gYROGrY^4?tg0Av|nC
zfkLr9pgbStJ@cm-2A0OxthKPOz&PNzMM$I%w^f;uxpcSE#7jsdc#Pm*APD<ama@1^
z(XT>~gwg^S+*`xk8F^Iao9o~=r;nH%HE)MZEqpFtF!5M{Tuu2ESu9z___2g$7t0A0
znXwu8e9twXA%0?g;*vT?NNWVVl=f?^BhXPQ3EVW0BW59`g<%>JY@GC=zp@Z?8m{?W
z!M0@KN1?P#XQwpz9=Q?LO_4ifX87v{!{_7|@OHh<&b5`Mv)EdIU%L@Ac}l|CG3d~^
z=F%Ib?Gl{MQ|-)hcN0nCXhrbjW-jbLo}fJuGK;ji1=)_)r)<y+%`~}1dLe4mWyxzL
zk9TZgi1_^(7#R4g0oW~DcW&6pkGS)i;vLbhKc&Emh1hsBF#7RX!G3f6HV!lYq)d(6
zMFU`!nIkI&|Bz@p$-him;q`wTC1~*jqq!|X)}0=hdwxFmMR<FZGj#3@d7OfWgyfl7
z_@mL}VT`6Uk!rWH+*yQ0WqaPcFZvyn%;a2H<^iY34+_3<s`dwYcEP%&QDx`FH3|xZ
zaetGUK+oxZk3iH!nC^a)R3->FPe6p~+^G=R!3J%qk|r!ywznBBE%Q&`Qum_*t#}=b
zXMS(ejIcdzHE2=(Js(UCeabi6@GFRmoK}P-IcL65X(-$j+LD|eLHbF#6mn2Pz<<O^
z8mvH4k%Ig)sv76t@M7hqdWE}jXLNzY5i`4%cwU-#Kmf0|&uaWwo3*xj0cI&;Zgw_6
zz0!JMR1!z9+naQ%Y2o2li)R#PhN30mw}=~@`Md&0@<v}YicgF^#-^?ns%za%wWb9r
zcX~$Xk25Rtl5oIp?_fnRBCAXIC&RL7B=-GE>4{`eMS5Y7l!D@{Kpfga^3QzAloPpA
zHo-uYzY}HeVig7$$q^XfXb-(Ybnuy;^)!KjmbCXN5vWcaz<cYZI;YjL3T957q0wV{
zO3HC+4ZdV)6E0s*ajoFKPj~dS*<U}--cYoE1O@d0yrJl@`Dc;Y?Bzq(%8yj(K#Hc>
zej5e}<(3C9ANPdR%R{7vh;=4Mj~aKXD?lhd3epG+pJ?&v3uJFdd`W<oj4OuZsdKc!
zXn%y|Y4E7wu&0{^-QXutxFMG}PsBvlS!=wdy-7|(z|!nn&TLzb$K<%e5*Gjsp2V7M
zoSCiMT3U`2=?`nIzr9lC%w(e{?_S!9x%k+Mj@K*H-HbL?1=tnh1;V8VDcMJcF3h|+
z5sSw=%Qr|Vt?8F<AU1b)x8Uk>wS#|QlVZwyT8(`BNDhJ)LuO*4Hnn2KZW@<sL-|Gb
zlO`WXzLKJXD2hEb5{>Ul#jnJT*`H>ISs@Q__hHT#lg>kp{UfC(CdEBVk^>FVKm?Gg
zS<|9Je0yPacznUf;%AF~0eK-`d1f{f#Pj0&>-!MDv!QR_6h=jbJzC+f$;PVwpLVL!
zs`3`Jsp@!Ux4}!zrreRgb%XrWlS+rFjS;(T6hfz@$3I(3NSeFg(kF}s_k?f0t46zZ
z%wS+LB@>c%1D4Xj(qA-NZ+^*_){JqN(vxw6_WyY}T&e4uX-Kk)Emg>r5uKMwRy@wx
z)&eRcM3`0xzkx|IKnwxkWI^Tq?g%qtq@s!bNN6Y!PC%~yTg)E1H6y^rwj4OOb;~mp
zHo5_@a>A^R-k*t;MiNGPElK8dM=;a<enmoi%;4CF^11r3{f&wV7!d0(Z)S7C?I4yc
z`Z0b={_V*XPVSkoI)Hh6CG}j2GCJ68S*RIcF3S{6)ioljF$MwglWj8g5gl3#XhM~(
zi%E<gqcy&=;HJz%9DrD<xd}1C!OX)G_wvFM7FO)&>WWA}fCJBPCaj@>xUm7TkSfMx
zO)oDur2Lzop^B!DLHzhNLZbeMm6*Y?@+_i04d}r}R24P-;}hJPM#7bPkief7LYJ;*
z0yy!Vv{393l3y9ZbGds>+4mfSFGbSgCj4Z=8MF!%brH@u<w~k{+yxd|2@vtu{n}PL
zKH1Nhz#KzjT9v9?fVn$$mxipN+AoMy1oyn29t4#+40xjS;dNVry*;zPf9Dmc3;!)`
z#ddd-vRFYGVVC*$?Uz)%`$$=d)_7MT%Qnpo3Z+&L(mfiYa+1^OM6oqv{M(fU+h|3F
z)7HvLo6Dq^MS!5}QPxULYbnpsu?&(HV01^PoiCBM9DlQ9kXpCM+pOfAROVe#=Exl;
zN!&2)PoeB27NxURy)kV7>CWO+zALuGtY+ybQfA#uj_kX0{k62V5xaQ_pgrITQxjM0
z`)iBP(BOv8!xp-^Nvd9R8fG>(vzW8R;g$!g#$P7h^Y31Py-2zYo~BQjxH>fZ{`!Q0
z@PWpOTT<e2l~bijBH&!v{fgP1WD%aUl`1E3FlMBaY7u7Prl3*UCvJbHJ+DP9xltnf
zv`E!r+^S(geC8)sDrM3VVcZ_dIreP@QqZhxSzU`MGwlQnGrv+_>|1Pkf>SztUo*TA
za%uLPunyr`b5*aFf=)OZ$0JFm%Z%mg^2fE(`6fSX5=X=@&@9u?@`a|tX<L#C6}+V%
z>Ywv;CO)0X@?|uebrcaR+%PhVHIJHQ#?w{52AuHo?VTn(>USUZLO8OaIs6G|epv?=
zZRLtq*(utJ@BWD1!(^+<4S`aWD?pjIYJFsi-MgWt1J<kdJ9hdHlmL1lMYKsi{=Qvd
z4?T4^;dKyY0FlGWDebl9%h2){e$AVs;4LEURyHi|4B7=BpOqNJhm@Zv#4`IX@Fzd-
z4B2N=yd9P2;f=MCTVNoC$Le)c?$aBCzlv!GvI)48yv4osTUt?~*(6R!X`BM49fY9v
zq=?7DuHndx=UqYS&C738($l#-BG&X1<xTQOS<%;EeK+yKs4VvUL0<OjKwOjGI|Kzd
zeDExOLZ*XTXHC4@6105WGj+dJg*z@043w&AJL;h|+m-QjNpwxG_t%^8kCWPJZp8&=
z97EGb`n7DDQ?$j+iSi_pehA+%W}D(-1>Ae$Zpan>tk21_7CJ~`UVB;&(2AJZgTp*>
zal+Fy22Jg@F}jARdi6{qzm?xVOUk7Ev^>_(fs@nCTWsp?*8k=!p68WySOXf$skS`{
zMub2cF`$|Gx!JyQ0yJvkOpBOsgDlHH6+@urZGNo#EKyg#J~FI3eth%uw3~xmGmzQz
zIMnf9mvhOxb*k(yO5BnOx8|kQ$_xMqjADQXEebm`>nesJvs%wZIEq6EI8>9KaxHc*
z211#J>uw6it;E!r{R5uddFmqlgPZCTnUd_mj?y{5;Y(rWxxFoyCs3El*Exk#8ki9(
zFs^D}5T5dXc31p-Pob=f_nkMwV;9oIoov60Z?~H5N*B7mL91b5hcj!xM^@ebXm<0(
z$*!t@eCC~E&RUm~=Q4ZCo&O@JE-$7K@HCPw)1MjdQPIW_af$5HW7=>gAzGp{&^w~2
zHetSw%aK%;Q=47V{h&zRGNBiG_vQN`hbCn_sm1oLO3HM6)>bZ{Y$82B2-e{qb<=jH
zG(->(x95xBVr_^I7h(0q`#U0X*h1Y^_lD=v)k|M7NXnMWsth)}hzlEa&%`V`PA!3v
zOS3MYphCT=pelyPhufE(oeXAbuglfgh_N|-4pP<W2oa%hmQKqKtzfH|Du#X^^{4c>
zlV__ba!M@49?X%<HE93s14lp|X}OskwSMQW+Yu|36(N|=$awJ$a#g5wiCei8IU2?X
zR6?A%Y7q2*_DmLaEPMCOt77V5+|j84*U+8^eYS6ggU^cLCx(F?W0nwjjdsWkhZPrY
ziqnF=aC^Q4AKz(n69JmuhE}DnnrIVd1b+uztsO2>o~#+ZjLrF<@t$&0$@p4Y7)Iqj
z^sAgldTE`}r*tmw+F#;k_>-sP!mG&^PKJ~HCk(>XQKcjVAtGlbCK?UTQxIY^4>Xgi
z$~j%RLNL~40F0Du*rp`f1bN>G>U*nSZpU)PajD&}ebTOHDNfj4>l7g)(lA`GdU{hY
zL|0>iU*AqH+`cDEg`jI}w({VJO=hybHOQ<P%p{VvVZ<E&0Q;GuSIj{ozk`})Qdk_5
zsFE4o7`fLgL;G_hcla@?K$>ubbVc;4B}vDg{ZI0B#xc1MIcW}5<jluI$z2?ci*z%J
zDN76M<%Jzd8x$#+QRVu;C(DgEe7CCEpNxvVCMRrmgK7vI`iNZY<0k7o)$E#$eJoCY
zPCx83teO|M&m<CF5SnEa4@6p`V1a$t0AxhvL)82jB5mv-4uRP0vA$QWBtRTsu|h9u
zrk}S=Y=}Q&Z3L)}%#=<l_Hhq`-An64oCOq{$G66a*#;=_Vs^kklv$Q%09@}2<2^kj
zjag0>Hc^$(LmF4*`esQh^L7Y?%iN|%tam;F@XEWC33bZ&h7Eq}@&%VHx5IU?PQS=n
ze5TVG9tj(G3UJ!$G`Ubz;+w<JwouY(2fL41@=!d6j^>~Trg5Dzqj1P&sM-Yrre*tp
z#hE6aHO(M}AU~-O$G^TSGdZd?r1E~|q0uvYWkpZQp^IW<m+p7WfaeR5%aN5_MUW0T
zBBle6nOG<LBYdi)=5^lO=YQ%ERYmz}h*@{uPwN-#1>lbmUt<x-Tv(H5I8Qf8Sc{yQ
z<8gKs^LqRnS#vou{U-GKD?T9%G;`Ac&>D*xho2Mk)9ncjKuj>1IzyM~rU-ujHOqSe
ziptEDX`ya5gjy3}n9q~Xk&j6_hC|o`qiN`Y{mfRPUEI}5BVdfAc^W?C!SQf7xQ!J?
zgL)|QidGj@s=?s`N>PvgB=Kk>Qf<dK$o{u6aeH<5P#tAiPP;^p2RTnS&Fk*GOay|+
zRWtRHDD^*o@(v{_3A4mC0mkR?GMoui22=?~^HB~&2RM|DIpQz(u~)T(x;Q91hqJW*
zc;A7rXSww?41&n73qP{%d8q3Drq<B?jH!b`p;=@}N6TTIYXtYunh_ol#8=lw^3TJ(
z{P0kSU00ACsapd2U7Psb#JxO@+&r(q#gAiFv2Jc8bv^sFokv2;u3@pj|DZF|p=7tr
z@D9|*zo$6VxA+Em@VOH~%B}5&Sy6{EBA7}yG2^dmi5GA%WISj|uEHp?r;*1SpTnxY
zVv(^$C2H6j9x$N31DTVo3eGXRSXA`{W~HNML?(#DHnx0J*gc;MVl2PnENf~FJ~N4W
z_F!^BdY<!{Oku@r-qt!?et+6=G(hATy|5XNv*@kWH&|yPSr^Qu2iGBk;1&<jc&a*q
zxrP2SBs9u%35CJM^4#7;&4_{dS2<lOAd;VUhS6m@MCG<Ss4_U$=gKD`jaq6bKT1tb
zn2W$UX<2e_h=~!f)Me&yB*>nhX9F(HD){w=8L)@8;|ZYYWmE@`^{q4f^B8-1K6FJU
zhMbBg&T=b9XO@YH@N))?IC({5-0+7Km0S}Yx7`PK?aI%D#AQDln5xB)>(hpIsDyU^
z-47ou72(kN5$QZR{)6-R`22UC=oxeOj0&ND6!V?IdrjLxaZ5k>4d9vi{VPLqxGFxR
z@<DoJQR+jp+-~vO8?XYXe+wkY(8=-MdH!{_9hq{r?p9O>K0wc$mb3#>vgJa$gW>e|
z44;94Q1<1-(Z!+#90(-*3zqp$323?!7i08@r~;EeOI9HKM=9X!2I>&3R#_?w7FP|*
zygLNc;vW6~{oeC==)5!Vy;RuWgQ*1RnP=a39+q;jo6dUcHa72=IOlWQUu->DZcf=@
zLmO43A$EhzG)xH6RUrJ`x!H##z#4N>hfAJOsx}Nk10tFWUgI-d&<e(_iq|y<Hf1}P
zSUf>t=jDTaa9CZV7OY3)FqYu+uv}u`o2`(#C-ptrvMB4St6V$vvGXrq^QpXDBefl)
zten(Q4S%vumT~04$gK1Y>jcA@;F-F=h(m143C8&y#3w0dDza`}89A<?e_Uo@;{S#r
znp{*;)#0tFhV1w%!XaqW%GZB;ana_hp<25kR}M62o~5T7TGC%X%zD{u{>xp`UUq;S
zMnWpun9^Xif<xPUovS8+t(H<d)@h?UrSgwg1#JXj&6M(D8hndLqOEN&R=f5LZPN0&
z9Xe&@>jOW#b0kR-)IS{=yFv47xYKX<46f|LVXT;=J#`~*nfr&*!_QKZc}xan1j8dr
z*0v$tOv<*1+PvB3jGm`g>)NZW%$=DyGJ-xqtDkLKA`s78;CrnMM0^xB4&ElinlJcE
zgy$TdN(t@r(Vz?V`r$;;7d2vU0h&l*-3L*TZ=tJ>hZ=s5SBp2i-#sX8Xu1fu0Xc!>
zXns&8r#8AMOI@+o80W>(aTo9vT@w3$Z(CJ+Ur=4#sOG=r<VyeFq+`(U)1V;#n{=$}
zTx$Nk5AuIV$LC!Tt)@$El&@EQx$-+^r`?m*_RNiGW(ny8Yes3Ey`8;qe+MIzyvD#O
z4fv!E<$BWx>%hz<ZAY4A>*>v{%Y-KV(qR<{mf!qrF8s>N&Eomdbbh!I`4#!RZMLhG
zluzXce4H8drtkfAI^=T6;-12{h-Dr5|2`~PWKJWZshqOY(t(wpit=M%Y#Q*ZQ`r8#
z+Vd7SI5-;{hq}8RPtR2<6cpXd=iVF~692ycZhQJ`r1s+*>qv{>KHU4~fA^+9V!7-^
z8l?2P5q#fPu)F$7>hSk|ET3r6^~7X&le_y4_HfQ}0<nnwy-sp&#(P?&(`9CC`NUo$
zU*48jy?(!UP#Dq8nQ~_qt_xxYY7y%Y@ITQB=?@W_ehaBp)v)4g$gf6i{u0Pl>Dc-j
z=)qu&w=~_Rv8;&Oe{T|b+0gMN3`w!O+$P*f%&HHDog!}2)OA|mO?nB|%rCtt!94T!
zqQSU+Al-DX$s93l6EbNY-%&;laMrA?N`^#GY|Egu-d5g0F;lA>*j)NS!u(G>A`9M%
z$@!}nr;0`oy0y8Hf|Hy5Z6$l~<?-{dJGI#ghCPh3w8zDYK-flP%YBM;VqpL8ej9J*
zxbJqE`C|`IsVKfLxZF`clj;8>Li+U?k@H07i!gH~w<eo4E1ooTk8s(}X}g-7&qiZL
z3Q4R-L@K}EZpVX9M16^SKRj~cPkM*_-5=grJD{DmNdK69w|;!1){R_pDIK1MW~#dJ
zmv?xJj5ElUlK=joblwp-VDN7}!GAp!KGWoP0dvig?s8=@uVNpDq}`<SxKOa)`a_N5
zX-^9V9Fp9{_B&H{n-as|yKQ6VBpCdB`om)pU`=R&-#fAVT$Fr_G_|%E7xn2*+;TD-
zxiguDtse~9lN_zV$Ie_T&E3Yuqr=;Nu|hT{*!cYdWh_pAPANTo3Z_>RRcA=>xIwcY
zs)1(0W=^fJscSYEJsInj8WU&X2SOvm&Z1pjW<o7!bbBw>oLBH&e->Hm{gJNOQRSWD
z3jDoc^tUixCk4;B=4-&n;b=Oi=@GUPm$wAh(`!Woy?zVJ*^PKV6{d(1a=5_QO15k#
zbieKJ*H_VWrO%UwK+7X%?9<i95ZG=|Pli^8eGV;TA-m$J&#rCTg-5gAg6d1ttX!uM
zbP2R2%n5+>_TbUx&tda}jXOS{<0Ar+`qfK+l;38_t<x}QXC)%-5ymTQ2PNculY!or
z$IT(Zn!OdKi->)p7zw@t@sbVs2d)wr^?cx`B#B0;Ov#LUi|uvoN%`bt#g?Lz;44*d
zKzqQ|t3iPAZgmA=ruTktlpd-iNp9ot%LgyRvH+9++Dc1v#<#Aeoe4VE^paeeygx`V
zqgA7;9slC3;BGU(*72(SWGK{KT_B5FUf{p($-IHW%3@E}e>zWH&@j9kUORI-g;W#0
zW^g0+fNcy1e-#JWf*{NRj7z{_BaADCQYNxNW<>Vvm800USL%M<2k<gAU*-gV4Bf1o
zc_?i8F!E1C8A+z!AZgHU4&BxVv>!imoo)d*QMe^rh;YrI6Y5=1>k$ZiE>o@?2f_vT
zxti;b#<$+-1zvLUV&Hf&SkhHaxaJ@{ac}|x9LJ_e{N}nFmNroBR<6fuSET*aqIWiS
zfqJlmAHemJyl^&1s=#;k?K(ZcH2Mf}lK*HH6pp8)a*%EjcIP7!W6b6~6c+mylj{P1
zi-P`Fu>O?E-j_e=SwC)1PLikCOPC;cfQHpwXpIAvG#t$xSRm`S&Mc6W7!m|WXac0o
zU(oZc12W@C)%~L+Dx9Hf*_C_B6(TzzYYar6a#&Ec^)x@|{uF9z)6s{k`PEo;VA*X1
zKfObZSgRz#8<l~57+_djU8lN~3%PwAG0f_PHI%-fiN=xl%T01i;uJl1ZG7Va%%UQw
z>A?G|rs(Qho7A;WR3h+pH$g{78#TUF5lka3ENm6(%uS`w?|IizjlXiu+VUaXb&2rO
zJ&u)kcLvG~e+(NE@#6EN964JY70Gzg>|1%gbu+LpXyDOvG?q!I+j$jBEiD%=f?VuK
ziO01Eq7OMNsM)&PFXZ<C)-n35p%*QVE#>f6?8ZIP^^Z8VWV9_L<XfON^t?sxtY`rV
zaX2ghZ^`Oh;f|W2a@g<_dG==@GB@;=5Uz;4eiNPNfx%%#!Pg0$;M^6|KtTH!nV_P>
zVh@!(u?Yzioe-TYBGQ3<+4}9$Z+TnKBf5YpZK7qu=W(|pYB^!v3eeb3P!J^K59E6I
zLb&)gr$QsGOWz{00MQYn%O}RS{s`XJ-*FO8ALD&1W!CC25r_)A_pXo@ny8FUdqmI-
zn=G{UzV0LK8lhx+zemN<r976!UQ&L7_6+^(O(p21Fxw8nJRMs>kAb*bq5$3Z4LZ|+
zX`5W&@}22hd7#;UD~XSV0(L`__?C+HJ^0PX5yBCDG$|x^Kko-UeVpt}zb`x6QG7f(
z0*3cPDd^G*bm8~ChW`A%L}YmFy_BKFvwv@E)nC~MFH1%~Kp}1c>!r1<1OwuLq~9<D
z1>wk{{=V(m2U>IP3{f$CT-!d^1gz5X-#K=@xOP5K<-q5>58kAt4|8UZoP?r%Pf&~}
z8DH-YCao8}u@5a`CVL%b?9qk1$N9IkpiZg7&M?beBHO=Ek!iMLi`AzImS&i@sfif_
z6XC$cXaY>x;}rr6BmyU^$VQRqNePGo9dC!3RFGmd#C;yyu1~h!9ZzDz5&d?bp8R(a
zCLT_|j40#Xo+j(c`Lvg_xBTat4d*(h^f?`OE;WXhUuZX6e|6^^0wQ*yUG2#x0RV4Q
z;pml-+^0g=svMAcA>uzJ=F}m)Fc?GEi8zHubgOTnVPDTwDQ|z#796L?Z=S9kF1|+4
z#_GZ~5<|7IhyHYKyQY)<mwfe>U)&WEPH%ZtXZGr7Hr0xg>gVH$!Q&Mm4s?oiQo7A(
zt=-V2s-@v7q0{m<h3vI;JY~Q>9uQ8bHap-hK`<^WLQo2K48n!TH6)&*$h`R-$h}Aj
zYU~lQ_9oHgOH2=)-@#|u^!v@ubl2tcyX<#4&1a8`?4w-r@O`_?$bNZ?9bT5_$jg!H
zyGxBr?Mu1)9G=X&s;4qIM#MW;W5YOh4|aGjQ|pUE&Y~%DILSTh%n4h3H3%(WpPG0C
zR7^AvqbL<KX$1=F-OoU7y@b$eJN-irUkCmwV`M%2u^8!V($=Ipa&G^>hy6KhfY^+L
z6s1A1%;M!&>-6y;#V+fo<v#NS+q;&h^aDn>O=i2DG`<)}-t^kb;^?Rj2Ez>wp#cXj
zOzaq#2&P31t1C$FsHJa`cQ9^AGOTHnlV}24&H^aJ0JhFp!H!Ij=x<_O_$)!eKJjw|
zY&l$f3@(fu6_Xhg(mwRd6Gzo}ZDDC3={}I@Nb`O=52#OXcrn!awL}j$^Cqyy-!<JA
z-U4QFk=BiZZ%vSeWkHU?;=u|}xj^np5iGlqdX<RNp=N1Cm7yBpxIPq<F^EI=1{G=L
z=atE{c-9}|1Q5RHa;*0*p)lh%wZ5JgLl=F|R7rq-jQ@SDP?*0%1lT!Yf9u}v%JGJq
z?Yn+hhm1>X3Y}m8cXVU4<+nTaP+L+lc18QKV4sGy{k-Kx7TA6RBq8wacD>~R5KzYx
zFx;9bo^!-ZmoVHqNs3W&?5UT*xYM97?7&mJdtK1jGg2)ce8Tst9tOXYguSoZ>XOd`
zH#j<(6OTj~(=fM%V~mz=?>USduM3B#r6pZtYAt8IG8GLPnx<>w4FK`&jA^HDvllS=
z$Em`$!DeD0zN8drH^ecwr7Wm-SRb&IR&*6IkuqK!hzeE~rpzX|EyP7ADWz&tlppH-
z!T+U%)cv&+uHR8|v!H+qT#l0I#E)au3;Z2_bF{AHptx~6<W}&zYO`}^(VI>+h+Y!C
z2I}_6lI;$FWd~(X4JHNf6gJYbaZ?Zx2?getsY8W8Dx1++fHsoM$by!X-8=xdQ~Y`z
znTMjsO{~1YAThIrczED;st>5?3V|8qj!=sbc%Ksr3l8rWUoYicZ7)|_T}KU9y5&`+
zSfp@fN=*teo9*rzt66*wG$?TTBzj{)9SP|6fE}MeA`nDw0;2fG3Tn`NB-{_=`M0Hg
z=&(H1e({>I>jxN<_Y+uA-OyNVAn(rzQsP1#_!a3~TpCvu00P1wHxP+LUL5)4QEGd8
z;^jNd<zEKahMYGecxktuL*0UZUu-sCAUvp7`gsCED+0HLV`i|Hn-N;;09=v6^dJ%-
z9!-HmkYW-sA&CZbpv04-L?Ng%FbNmn@2Y!_DtmqS^BAD}k~BlM%HmbsFbAhXr9pg!
ztix8_xvqkdJC9W`lmUAqXPob^KK{V%h0rapM}tkSp870*UaELA5Z2q7x5tf^%Ok?C
z2J_lI7PY6hl;r%A{0(P}KZeXuN>d{HcR<C!#|dP8oOm}NTdtX4$vXh0F&2a$u9Sv2
z@7N&Jk`XM1R?!Az65G;B@k(WhA}bZF@m=&s`TjNx4H371YU|O=@%Em|NH<R=-vfqA
zG2_*JPAn@$FO6TC^~w|Ee%f8Jf~-1&-$Gl*rmjPgf4p=|zZq(%4aTZhq}^K38dRXJ
zwY2eRv|tk8tF=(AB5%eTZt%VXJQ^(iJ-mQ~0LBw_v<*l>#gsgEOb2Lr;9lOQ5vAFm
z{T2NAi2rlesT7suN`$uJp-FnDm9W1IsvoT9Q=y2Fuj4t$ga0Lg$d*Irb&VGkC>^v>
zaCFt(T6@-oH`1xc+swP{3pzi_u<;jRxZ5(E1%?dqof-o90M@k*slNuqeuWE!0iu*X
z0)!oDumRW!!uFf^l>OKnx^i%yIItR~)d;a&OHsx}=zcy=_$0^=kubw*$I)-6V&Zj%
zh|o^pvCTX4Hg9h4zm#y=^T@)d?Bx7<x-op3&hfb9J(W%k24{Bu%{8i5GII;D=z!%p
zL9HmwhAJ~x1iwvW(;HN-Y$QV#O=AZo=0kii%19&P2!WHIjzIkiz%VG-f?9lp>8vOJ
zcSMUr324HI{B*?Cf5BFbgysSt#NkycQx1V)i(ALId~1qJ7I^-fXYk^n;C~ngZTl{d
z?Gap*-$2sieK)+mOgDXn_mu#*h;**$7CD?zk!9}1ud8Mwy<sn$_?tE*P#NNS;_xsz
zuZ*6!QBVsq-z!%DsgfS7iDU3rm_F)^8kGEmh6}5Z^OA{Q=o`|$W3Ij+S3&k$lF7~-
zQ8tpoU$#|?)j*3_mEB`$kC-Eax1_yKwE(Za>K2V6LFEYK0>_}>_eoea2}9eYUY#Wn
zFsYVq_mEx!6vw4s;@H+=LQJtVuQtb`Gc)+0L8ecRMSY-ryI`LC;DG{2rTgse@RIB5
z@s1&>$wEuNDZ=`Lkv~|0MySa1iDY03I8S6$iUF5V|5SQzUi#m%y?6fvyzCzd#CK&l
z900O&z8$_&HY!Fq4P3;mF0Slp4?G;Ynd4#{aNxUi_bFZAkcClXpz}4sVa<Baz)V3!
z?Pva>&SXJhVg;ojYf1*0VaXp0F99AF-fnM`o}exp9$uj2k1hOPM18h4;9{(AeY^VR
zNFJtRS#f%4ys(pS=sFKC$acq(vRd|jEaW!QS{B#+y&}$!6R!YIUV`p)BVft~saxoo
zfZ4`@@O2d{SOnlEh%bkcD#lOjH&THS1LK)oNhi5McI>@~s6BxJ@&$^3>Wif13u$PH
zF>CS}eULD1sK7k#(OITsO|U@cdvscq@f%cn{=0+YK7$wIog|6J&v}EZmvw_882+-)
zX8Ayay35T9W!S;Xyr!e|&7OxVhGlN&&FUN?tH-L?4^MMU;o^8dvs^{+TZ}-*Ahr<u
zNg;X$;TpD}7xXlbZ8km8Cg0n>fHNe4H`%Q7I6~inh6jnSrcL{bxs;D3pR7e<LvbPg
zrq=Bh$7zHmwfiBW<+=m42Vp0*8A+29dq>4KDKdJHA$C9w*`5Nsu@8#MoV7TdZzz0^
zTv8V>4f%B%9~;f;#D<pK4KTV34R_q>Iu40y60b`X0_)L%JCxYZ08H`yk>n2*b>a;_
zEv}db0s8}3ZS1Pwu3hX@4%w`?opXm5)BZWR&1e#N-xcTg>Jahcxk?)Jwe9i`1TwIR
z@RV`>N#JpLe11sqO7A9U)uDOId8{Um6RHLNZR{_pD{IL1eP|~(GsYTn6_0BdgeqD@
zIUE~5oB8{GjQ}g^x<}>BesEPl+vE1_ztD59V=gy=C#)l`s*#|W6$|6E64W7&r^oK+
zSw=fO50$R@fYhGELFGz!W>?-^aZn58?Ns*ORn__%Ji<<(474u=z+6~vn_!g&`?)|_
z_hG$}WnQlc;wyGk*tLK@j{r=mTn*bsEe>2=yBA9bc4TY{we0n$YSBlv_B{tJvyM{v
zin3%Z$Z4z4K7T0NBa{1>SKpKYcZvU>o`WvVnk_#Zej+Du{o`$g5b;<VRun+PMALo`
zQRmqO5~GHo@AMS|rgfBGBrhAHD6XZFPYn$6>Q*(_B!{9xpc&vDKX->J;O>Ov%SIwK
z=hOQx_<LrT*}FZrsBvm1Dro|vKKM0t_}=!rdeTAvYqw$qcaQOq0|~KEL!i}d5@Bcg
zIMkm^zK}5WxI;@Q8qQF2JIoCi@8q>b#U*)y7S#6#<Rd3Lo>LTpw#t)2nd;iSf#dzr
zMD}XHIeaCUBrqx996SPbOPVbsK|LmZH3E=hXGI@>s1FN&q|yilrrP!3XbyH-LWlB$
znt(t}@{l+SS&F{)wEf~!tjF8_d3?Oc!=U*!>jyYG_MOj8@Dww}cs+WWPH9Pi)A3Y`
zAh$->ThJ3d1TAMgF|{zK$+0^g4=GAKb~}y`+EL!AFo*6#S;u(mTdlpo>gN)jLM46U
z=yS>f#P`bJAtLe7%kJqc-PdP{!&{!uruXF<(j~RNBiYCMP{QC;bbyH$IOj%>(E|JD
z;A(}UMkG2IDi|l|ly{Ig&T<zhmk#vl{>>1+5;~Nl2Y^q1iPn}*EsA|L(i~Yo2mNKG
z*3+J<!%T3x9>f}LI1*?(5iX8LYYR4l+uI|Ci*f@;d|)XxW*vaz)`U2f9GBb}vIotg
zzpI`FM6<#kldIXFt$8Ve>t9N)@iTtPaN$gP@hg!Jj8(O2Ro;C*mws<iG3a>dW}Ken
z`-m(~E-;a%LQL|0o{VUmjS)S;kZ7|rAmG!K6?g?A^A&Xa&g~qOQ5Zk`dviPFnj`?4
zZx3uPZ>NqwBfanE*yi|+bhwMHWmN_I(>QnO{+b|%|3{UR2@iSj<EaLx+j=gHy@j$$
zvMpb7m{D<=<{v%W`Ep^M2;hfI0M$TA<?AN6XKuABt7@szy+W?BH4JS`azT$FDRM&K
zGE5r%TVXvg;b!EIEYO)UK20`%bCDJ{?~y%__gJ8x9tDSn_AlanL8O|axn8dP2AA1!
zvlMulN~tz|OV0zn?nly5dFIF2V>W-C9XoH(RWAN$tSX&5;LY6P%)p-Sp&9DaYSBUM
zLo}7HcuERpdmgAFvZPn2B=9=;;TL+80rj;sHxajGGxNbZ{52UnHw9`cAqFpNzfPL6
zH~EG)MFh>bUhh5E+TeZr=7U*``>-ys!szh1FM9CPE|asndS!l`V%6_JJ81U>s0rR|
z3&}9S8uJHC-}dYM6T7uWsH|O_pJERyYnTds0ZnL>uN8b$*?&9$!!-3XNj-b<rwpJ7
zTzLYE7>^QaMjk#*Glsn%QxK~=u~>Hgj$&Ujr@!tKrEzZ|{*L=t99{}U58GK<s9eCi
z=tBQ~?`(dkMv$&eTJNJ*bW5}Mpx5IV{5Y!&pIF4d@Miswf&g#8_6hH45Vl@b<5YUH
zd48@A1D{&&CRmWq*0;&-!$6NX;`QH~s<^pD&}i?1HBQ@cnH{QGBHTm^1NGrT-MiDP
z9`~Lo|D!`e>|6J4<B?a+MKn+UbL)LZw9<3P3<jol(ALUQudp0zzjh_s&n6B>1HB4!
znSylaM&&;7%))qDOqNOSuQH~SpK^Hh_gk*u%k8C1+gnPMKvq`Ys51PS+%PRNfck1k
z2aIoBwUdT4xpC>w8fL!I>-Aph{6+Ar6+Uz&`!O3fG61^gBTyCX>(F2oRqrlC4{gc2
z#kagh(R~!gw`4_qQAo3LX|8K*o{0b9B}3MXo7B2CmR+<mPlr%dRkr(DQ-BMT=%ZtA
zlFa43#iIPv!7IxhF))%Pwl~A@9>a#?Ek5W<8mCRC2Gcr)^B(S_=-1l^Js9MBroUq^
z@6qq+&D%ro)0AMv5omWQcwMLvMC3})sk||bUzhzxgFPgHjN!cnrtf*e1I4H4RVEaL
zk*}uN=s2P1Fc`gT#Z-kH29sB|PzZlm0<%I7D@p8R%2tPAL=(1Y`qgzRtaY3yuN~w<
z!z14dz-fcTy|6u-1F*+#!S`ihh^zVK7M4zsFiQ13GRnT%x0W|MFJE2k+ew~I0|=>~
zz8q3?r;Dfr+MaGOF_DI=Rp=cjgU#u?nuCkDq2ln>(&TbJ9h~0(@TSc@a8=<0-I?Lh
zUpo;(Ki4EU3Z+S%nzWsl4D=Bhm-%Xqk~&^UUAC?cj9ibyZkIOLh#CC1RxG-TE-@&7
zDmLxdr((CI3s-<pvbjfFqFaWE!I2B^ga8D#z_ZJ&948f){H;Mc(ntel58k3QCHrD?
zslalxd4Gdr68{YZj>DIl^%8)}5rC818L@y~!b3Nv0O@{`#tKyw-IS%05GaK)E6+oV
z2l5XTNZRbh!-*ZogTUQt<|c>~CV-U?zB#<bTs*){Z`=%@jn}+<tHY?fb*LQk`FUMT
z^B#MHpfZAJpC~d2GwWlQhsdBzYaPt2wuF5xub%G7eADqueuLF6Ex#H%uZ7+8ANPh?
zt59hx@1v24+=h8XSIBg^Y^u;h_JgSH`jj5K{A>Qz{(QH_(Os{9xwRc`g?Fh9Mb?7S
zp$2@gk(CD#>7Rc$9r0Q1?NJLNGks4GXGh6;RauK0Sx3WsQyqLd%4E0Z@O;hw6BzUP
zxV18Q4@cv|1Suy^PU7vCR1X@%wkR3lntXd#CJs;E!X~f|$S!zNhmlnW;itU*I|E(I
z1j%gk2S`pL3`Oc3--wT%4DEluaiq=}XXkTt*>88n@?#mxzoy}!Xu(`X;Ty&8zk7*^
zz8*4>#sM0y@4OY1r5j!H)svzg{2XgB`-R0NPX`r`^3UB1FTj3pD6oT;D&;(U?@_3P
z!s9J-QFKX<x$Uid`<KV;2g~iR=O_E8m&|bK)7x;4s%{E=9PTZIJ?P8UsGUrRpGw5}
z+`pA_6>i-olOKJ~dim*aW!P4*tPVRA5AmF?HnB^7MV!^p{H$PG`1QHRvnBq#c@?9=
z^cR=}X)4HC6ew*qn7!ZRCLt5d3@XM47Nd?=z5scsjr%nNKy<PYHrzv=!FIX6pP}C0
z#U9j!;klRNM}r-m7gH{Y?)&jR-{G;ysXp~`;X=2xDNEg@bo}us@u>B8;)PM*)e#})
z1v@s`aSgE?jv-s%GB+>QZ+QJl_Vr76#A**@G@j<CElw7Gx1sCqh<kS*96`V!)+aJj
zljQ|4)%PjP;BFvu(awKM&P3x&(V&QUG^|~wLGJA=pa#fv(cPN~J>L4*{a~^LS+S%W
zDxTchem>rJ7BtI~`v)x|oUITu%?8XTvloo6Hz<Qc8`Jjrr;4-q8@CyjV)SO_s9Y`~
z$=-09RBkvA$nZDCV5T0Fl|>Os>n{%k3|CZcbl@i?i4egodhSt#Wo24+jx=)BYMy#j
zGE7J>+X=j6WEB~%O9e$XAz_eiTA*enu*Em`0Ea5qkDLy0HvFq^`t!&ogZJ0c`&wJD
zhQZ?>9#9_hU9>nt0erC$B%kil-^rD4%PxwL5;igqiV8%`Pdsy=-+$>E9YMsK)Pt1Y
zGT$dYFZ0(Xj<?i+v|%x^omqjd>SR)+s_t^_SI;#AJ2oxnuN@xnT`yA;>Nx@S%sE(8
zb755(!yapwF0{@-gRdL4kKcByt(PfA*hSTk6to&(DR$`O5T_W{JtzqhJECaI9q@lS
z8rgj(B?H2D*XBBopr;>tKtXs<x*%R!H!ONAEN0eVaszY}Ym+DxpNJ`eGko&+03|)N
z143p5Y^`iyFi1ZK)57fY5po(umym?v8?>WoO0b1^7|D@DpcyR`U+#rS3xVVgnf}aj
zx7*CeiNPk0JtpU--_&)AMNd51DDp>&YhCxeX4_FOD}(`tcv2&VC=ww}ZgJ{WWr>W@
zmESae$q7?@<m&LV%mJ{o$oY<F!?mw{ZThRu8IAh6pDbZa05v)}9*<;$CZ$jYyZcr5
zDg5(P^DgLVQm^eJ>Oi8Uv6-*YVA9VRW)iC0`6T`2{yKpP_Q8X9NpOGtafIw8%3-DX
zMQ&2EPeCvD+kDALdyN9ZS_~mWvc!E$TJoVQ;ZFVUJDG9Z&SfUsCcq2-f#!h|F)%tE
z6inwxMw&A1!6ZPur-a{YUAINP_i}QA2TYXFc#nCIghCgM1{H9hHfCY&XnO$cDXar{
zLHCBUT`%%6rGYg^gT+~aa-NQ8jeyUNle(6{^r1-%f=MR)9louXS==4vUESGwUuZ&d
zI5o)Nt9_sU+cLLT(15Upa{Adna`me0IVo3jVUw>n)CCm<aWLgyD;E+mC%O9eweP8g
zDK(vQpMj50v##Fy&S)=qRq3Js^+xvazS^td41^6}Wt$3$4+<#`TNWU0!=tV2e;Cd!
zOlm|TQX3)Era$*<jTs0B<MSZ?Zj$+xci}^NCYJWxB$j$CJJzn_<s%V+bIoTaoX5MN
z+H*l@bF5Mu(0G>vw*f89C9u7Q#2F}kP|spY#PX?%>^41P%<Xm+=%bi*sFQ$1_GnZ&
z`>%L|$~&KTLxZp8Lt=RPtC{n&+hz5Ad>Is412}U_pdkVd0`rh4n}Y}4N@xXR3EmyQ
z3dWHFzKIDU5<9q)g6<OsiX~W7>un8ztqTcDvOPPNb}uXjlhsH3GS}lj|8ZQBE%03V
z7RQT)%X-t|?a+`Dhd~L&d9+#UxQAe(nH}kPWYW+eF&kHz<M1~d^H=v5;mE`k=)M0n
znV;V#cUyx)TVv-%*V4KoVb|`_uSrAaUWE;kh;?mC+t6gRLModuD>pr%4Y<afKzn+j
z0;KAkVCMo+A<FiQa#xaAfya`u>wvf3f-7(O*X6Ib3r04uR|Kr;o@&OfU6~_WKZ&lI
zugctPaq3IQ+E+Dzz93T-+u;}@SYSQCxT)AxJ@#UA#W1z#9>=o;dUs;xBc$=eR+17v
zaL}_6=dI}uM0d$$zr=CF3FMKkX_p#}_^2-shL^w?0r@4zp`WAxi<r#gHc)5A(HS6*
zc+Ho{0Cvkw5;@e`1=2}@jO`d$f*B+t!Oq~v*H_*~nbpT53N#r^sM2Xg08I`)Zu#8L
z?*C2bd!F=moySSffjNi8vadE2Q}OGjO|ZJFwXTrpy(09`^+NVsP);WB+!%-U(Q9p8
zuVy86>-lX-m#g*U)Z@|U!R-K9Xhne^HMJ6G68Nywq^~ZVOaV08OP(Lpl@g991w~;H
zW=EeL8kMUk%Z&1!?UxZP5R7!SPtLvzjqX9s;@6U9e4lMbXyJgO&3yMpC;67lp6Uep
z3Nj@rZv2H^s9Y5h;o1jhIaYGfq|B(ULqYrC{!j<MM;RM&yruq8f-2;qZg}cbC98@>
zwe)Pdo=mVDVDU7zjewz}=O8WsZ_)QYl^ut!9BK|7`M&^LK%~DP*=+JO4<w;T!*>sW
zk4oTeIf?Cq3X8G81Bru6A1YyZ-htQWKsrr+0aOxj+jSBCul>aC`qE1D8u!o}{^CLZ
zeLvAACEst8&Yx&JcLI3scMx^2f-{l-G|T`p<6m1`H-1&|hI@CPUtV|ho2A-*+xn(6
za+aUcBr46Tr$kRnA!N=-OryfG(v&}I>S#CiLM$Eysv)qXkWMK$b1mq_BzkIU!2Q>U
z`u)%EPjEnee%*=2vq!#pgfbUw!CzAtz$^D|nz&_T<NDhaA^zU5gUQzm^lt(d6X3a)
zM&tmAXXw3(jNj8rJ15yBGy13uFm*gR0i~#4PZ3)xBK(-z-?slc_si0HqXN`p==8gu
zEPzXZ-uq`ZXSKsA^{01GID$kvCF24f;1;1|QFCS>eGP~9Z+J9nEuaD+FDhufK1cHg
zz*na<f+>v)9#j}!j*%}mAl%TD0y0IKq{<5%9E(=MpZ~o(D+jCh|JW1t5C5+h!UMWu
zB4>cV)7Amd;k&-Lsr<S-|KoqU<jO05dex%mrG+%qu23tGY7UzAVoAzlJqYPQQy%LS
zA!Hvk(QLzGz~XTtoI{_8p^gD=OQ-|;r240?2f<xOUCbuae|$pS_q+3r<4fN>GFc^G
zw@(f_Z~W5QzH6`9x#_K8BTZcl2u$84F?cpW)3XQan%S}`MSpez#_&@%HgjRq5DXcQ
zpgDe%)*A&K0_SXRpX+@J(#-p(saJ~dCmVQX@Err^0idpvU`Il<2g){5P0)jRUb}Wr
zWMu$-?+Hn{qx7Hz;T8n}r$A1?-~!|XJYS&TYpH#Kodtn6)0Uz(aL261_)(2rcL@xH
zF-rLsT&E2<wB9>aNfN^^y14J~@#xq8;@;A%{=((YRPVUwbXd~yVjM4v5+IAhzR0=K
z@h@02wp^8mr(M0gpj=AvRU%0(m+V9oe279GC<G7z6|XtKT``7RodK#1=;;LdU<$Y8
zsZZbE@BZ^Wo_wnD^t)%$$KEqjCnU=}>o+%k(%17a=-v7UBf+`X?AY?!W+T;pk_RR(
z7Z~0F9<DiD15fYK(wkUmMKwRC_GEZe&lAj^J-h(`mDIu_`sTiD&@|bXWd@AqYpIk_
z1paZ3o*8@=>Dh#h(X)YDq`zZZMwri(6xL6$6QJj^UV(u@{(FNMs%FpoK<{&=wIrbO
z0`ifT=ElSi793nK1l*++oQpIze8t7!N(udi99);yleFOo5AFF_?w&Zy|G!?_4FBLC
zn|Ds+PfSd;o}T|+IswrW3s0vK;$`6gGKy$3smI5negE<Qdw1clue;2_>WMsPx8=ZC
z7?vke<qT+7uf$R<M-Y`3WM4qzY=B2pH$d0xz(NdlRKZ<w)L-6FlAnG&S=^5=UA1@R
zsb{k1`_{mev6O+}#<x}EIlp|~<~P<8Q3xVG#_+`sR$XA~_`?mN(Q@6d;#4!>*J0=x
z^D;|2cn1$N5^XKt9pM#PcZPaQ%AbADUpXVlC`*(O@G=lGer^M18G-p5dMwTY*qSL5
z(9#qVMsBQY8>S3kY=E2#_Xf@HX)71~n=t~y7}ynoZi+VeJ+1}*9t!U)06Y4CCpQW>
zRe|{Hw6MfSCFjD|u5?rc2QI=BiG0Jk7plESm*qd*dGlABx!H49+ViAo{5>&HeHt14
z%eDld!*d**mEX2w1Y_5a2Kh@SOTon(hjQE2jw)<8Ut{wt%FW!c<EOLp5VRk=KY%7F
zTmr>rL!<{Z+*x0J<O@Z-_ueQuC_cO4z{0WFEJnN#=+~dWcxS)3@yUxe|6sk;za^-p
z5lY)#ob?JIR{@@@0*C6Fk@Q#siKCVFO(tLs#$*8&{IlAf^xPcjPjUnd<PqX;BQqOx
zPlnKQ|4s?e+Xl=s1Y24d+a_Lt+4|8jeoFgUq|d%g))Tj70i8E}&*{H_EKo_%-R4Dj
zfa3|7_W+d>xTpZ!nv=MDUZGJ3wm+mXe4oak0~CZt4hcN&3K+_wGl=MC|LNm}yZ7J!
z7l-uU|8zt{4}ARl7_6`kWxOz6xH!1_x0mJIgZC}p^}+7*yu6Q>odf7SNcg@I6r73t
z!0`6s#4YC)R{id-k@D&be<&YLUK_Z{u_?24rjK^edBEW|oP)sLJ*DI~{~-vT#OHVJ
znSb`_7fwAb$KP9D9u}`VwqxyU{8g*3lq*RjgGmpYUIFw?0>>K~`xXTvN7H-^qy1F#
zE7#QiiY?H5%_J-7Mv=R7x%aU340xBJ`PKoPWbpQ{EFVCeRP!5pFn1ET{g>U>WD9&B
zJ`eM?;|K_xw0HpT9wTjW$FA-3?AL;k>L*TvbRivIz~dGny=H+eIpBI9cywN)&<56i
zRipnQfO;|HlYOoErqTq3z*WnIh49D!=EIeP%Xhu=x%NjtkiFmkJ{P}$=XrSR;9EcS
zQ~&AqS3UdC6n^)Ef4=TOd;gKs0e6ruYX+bKmYdCV&%*JUj~#jNeg9+n%Nss+^uSMi
z<`2VQ-xr&aGh9)+9)V|SX`sF)khXHshrjLxds};c#Tfq!$w}GWeeR&sr*Hhsx{*su
z6O)&#Y8*><*u~l_fq`*gp$;6Fp}`%+{CzfHi_G)n9tE6EPv00Or`Oabk7>e>r~J6@
zPsYp9JR9)oo$|BJz|`^?$G<!N+tCuU4uLav5)UO(5w-uatbmRVd+_9&SuE0>IpA~R
z^Ea9U2!-S+rbtLl^8-Xzwj;|#0(`2aac8WtxnE#8CvfZvfw@fr3r%3D1=M1pR$>RC
z_Ay)2=nuz(|NF*kn+0|5``72M*lxy-{v9q|Vdg`2me0Q6qMgI9I{QaTQ|De*Oji4&
zXJ?=6%l&v+U;xiQdeihwXP$mEvs{Zmuzc@(n`h~j<^R6<LqFKB>f>w6K}ww4RKtlJ
zJa;_j-hCiSj;D|R#S1@^xkNlSk0Jl&KN<FSUAcL~?e%7;ec30}>Pvy))f%-XaA2B+
zIynL=X?Qq%uJjODJ#E6hjl4FpXPJOqu|=j&HF_55In~dwyDYlfTAo>eJ-vQY^V=3-
z1^|-aUgkI~CAcf!uT6X3@TAO1Sc$EyJm?w;tA(1ffH48Hc_;%S62=G2ge7etdNQOe
zL1UsMaNH3{uLaU6pgpTq?9*;TO&w9f1LT3}7?%v6?Y?>U;piXk4Zl2)JG6GGeLVU<
z!2|e}YR&T@m-*+v_wu*OB$so`gTtx2raX8#YWVc&fD61VGk|ZVGoQ`((|?~i_TYyf
zt1kTQmp+g$rNxnmE;kh_0<w~apY{BiWbvPu;<;M(_uuNs2**RYYhG6nTYhf)#y3>s
zIPeosVQja=<YqHdzyE|ry-C*__315jm(_ZVxF1D-&H{+c(gs8%q)ddAw7{b)?qQg-
zNj9Kk27WlY+tFUb`0Ek-usA_y9Jtd0?1|_d8nDSKIvGNbgjn}ywv6C&vLYiC{j>XI
zuYu21fE0x|6X4frCKai?r(q^n2|OJNoM3h#aC8kYdz(P5UtmcCHA=`LA#0>6CL|8b
zD*29cUy<xsy>_ge-tcakIyBn@zWc*m2j;WAA%E#>ZoYc;`RBZPFmjxdKYUhOoi#M{
z>cGoe|Ml|D177wHp!diYPK05Khr-8x>7hrR>aj;$DGPZ;JK|MMCQlv9VHwBYOJb7W
z{=+xXC-1JUc*&*@ZC`hLvk*+Mq*wpB5^J{56b^8BUSoka(~_8{H2|jUW+^{u*=09c
z-9@)pSVJO?jG*lw{Ci@%35t6iagT43ruR^Wvkn2z_H(4SbYFWT&H$GaS+<eQ3uMDY
zJ()v?DAc)G{2(hy$iLE8)*m#=rBoJBcR;skSV<`zGaZ@A4PIPAe|sR}4PK0iES?R-
zuM#rK3%Q&KN%H2TavY`t4XrS<lJkH1idQuI{B^%R>|T7XDFwuLRTgH~0R@EJgS*aq
z&6dkPe$B52q0_(3PZJOR+NgQau7O<}y*2BY2l=A!i}>Cir<DVsBh#hdH-BR3(dMCF
zz2lQfpjtX{+AeA<eg3|=G+By{Jn|il_sX*D)0h9#y78;!@X-0Pp2jkFmLu1lEl_j?
zsCRH|&Ti|qQe8IED|P^U6DGQoVY9d;MNLhD|7`GlqgB6j>oKm363hmk8Ec0sOj!V>
z|Av7_|Lf9yGfOw6K-MY9Cj3msZt(%z9mqNjRJWL)n{0%Zgb+YUH!^1aH?<Lop-4Ce
zIRSdTZK3FO(a(&7gQ79!OuC$i75N<PD%Y4fABZj&SV@2-GJGC^Ca#3UR6SBdxi#`l
z7hE2B@x}jA_Qt%d1^hxs#!c{ZE;jb99en-pZNK^>JFa`=)_0|0X-iqAVh7Jo$V$<@
z;Ef~6+g4rjcO(6M4*AXRM#B81cDyVxfEPNlr2d)k@eh3d>l1%;)2*doas<h-89z9>
zvh+|ZU3kItpN_J)^yfxO7u~jb&F%GOq63TqYc2!^3&8X|uz#A#FoxexwwLw$ZEa7+
z)l0eM+TYg7gkcK1$BOUHi~vK;Q}ig3sQ;D-o6YuTB%Y3qTf^@z1u>D|Dg~J)V>kNq
z(_{o8`$lo3=kqZ?<eyu6$iPT04d_lv6D`>;EU>SGFb&FXsOGo-Cgmc!H(?>ffgo~b
z+ZDLo1MY4D`!55=_Xs3UXvB_ypHj1dxDW#S=9Ij0{Z-MO`wy&ncIoP0tl`6d@Is$=
zA(t0xgRNWolKzXg4@|!1>~*7Wyx?-+qPOM3{KgTfoXryMD7R%)yW)=AG8o-*&&t(H
zAHDvc-Y>uS19OXJgYe67!tgY80OrD<Z_m^Z>FOu$_{zjvf8YnB`eO$pxs<Ft(oQJ+
zeyhV6V#(Vw5n$_kwyk|-6*>sge1fr^604|&T~gR{!US(>>G47iHhw!yL-lzA#Vs|F
z8JI=ZY|D*(gVSsHCQNe>=f|QU95%d8cp^ZLnSL3d*Kq*G$a#LiP6B3izZnkd%^te!
z`p#Ie1t=L1%-9KJ*mQPe?7g5Mn~GM(`ItW-N5vUU#wVZ^#w1@x%X%CsiTON7jhGy8
zdmebNkZ8R|Vf{4Fm?0Q}q{PhQr6f2~5Byi2eR=cXoyUG}B-s4db0IZXztK3epY1GN
z{mwUEcE$THxzWR#Z9c}%YKHEpm$>elAf?5oay^vlgA{p4IRKr`xaa)Bczt<k@lE3M
zH%@#udi)2TZ9R9Cp8Mr?ynJ(;7dYtRAT7OlXW#$(={r;RfBl6T{@l|9;GOsf^ZRf0
z*3iDX9Ev#iPuGuLsrm~W-8y1f+9I)bQlL@O*mGR-c3w*PsRfp``IxJ3%K-8Yq-Lul
zTkq5N1eg({j;7f|G7|c^fD=Jd3T@{7d+L9q-)9B~J2ii|kI$sS#G?Eiq`#{KbTYta
z#)q>mLB=oOq{6l<*#}t%;%LE=;B;esk2p*DO&P=A$C`g9V{<dF2M}$GA6Ouf<;P;+
zO9?=`nSR(yv9b|Zya^zZR4p|ch_y(gr34PIBv?1FBiTB>Ugq?!pD>@wH~XZ_Pj##O
z`U|%=aKWuJGpl!;sJlTZb?o?QS_kwpZ5x0@6GB%x1=8&kQUopkn&02l{13mk^~&G4
z;Z;Z8HvIa(TU}h;pItjIm*eI0O8yUyb;WZoblMx<?&KHmIMTZBv)?)cFwuB0ciBb5
z{w)t&w*6=7D(&}^4XK<sPhzAD?3>b<uGyiUtPL+IpVu~ebChRd4@W>#mYY=Hfnr8r
zR-aRf??KXhEoA~JZQdo4u8qo42(m{$csR(G0rYczK%1U(W?+psV*#2eLi?2|!d(X;
zv>gZT$pVP;Bc*^N0XGLpyeX3dm=s<+hVM`3L0J#oh!{i@gUHbuArtv&c!<82G$cSQ
z?3|FUuR+6^?YzJ*1;E8x;j1z5*(r&Q|D>^WzXn3BsJ!5=sZ!|kT{Rm%>VM#Y_aC25
zKd_+@FR}`7uPewhfYpVKlRJXlpMB*nx$CtzCm6q^SeFGI=%D~&U>GQkL%VB1b&6>2
z16HPx)<Y;!P;RB1B#8`<{i`1Q&EI|Qs~?^J$aOKvB)?3K)3OA3{&BeR_(Q<s4}mNH
z7h2<0Kn|OKe{5){%Aq1#<rvPG%LxC$8DPF@fHzj@wIjVO=wVY~Ld)3+m_l2U(UV~@
zyDox6O(R*RI@z#~h*{^X2E>H%5*g2j();XTI)WiogJ(vY_5ZVY^}O~Uod-FDOfcjm
zZ2)oz3^f?XL`XP2mnSrWJPD8jttrh~{NzAfQU)pmxd9RhF(b{{I5V#wPcp~XEqADJ
zaaeBvDprjD@kHePK5&5)xH1PE7y@Q@3i$hg>M_maLnclsftiMqW0lR#vGTe#i_5Fl
zG_ZK+`DH-%{qg2=#}<>B^Y%Zq?V5)Up7%d~_|V9<t6sMlisr1Vn^j<J8KSfdv{rzr
zqfoOAc+~`H<RyB!Pc`R6X==KH$PEU%U4fT}?8q4h&@)s1oy?Q_Vx;Jb!ZqWi%}JU_
zSB|7;Q46c4u~M^WKh^yl4edZoMy^qi92sfumJEcfEQCyGsV3cMHrNVVNQVJ3((T~#
z!LMjIMJx76cd!FP8HmU8gIaLy%~qCW5oUOZhl{gT9^(&upH9T*6E?=5IRRS(b-V}Q
zQxqrS<bEJt5~hTq79W8eWYBrQD+68y@P`Bn!$8mnC{hvPjEDtGOh>~4lB8q6oCYn3
z{Db>FflKoO7djF<@(TC$13Sk6F)t7`jb0*kJ(4s<s`3~skE^{aW4nPT4}Gi8jy~U3
z)JP9T4}ED_?LTMb<JbM()cl%Xe&df7LNQx+N#g*t%W$y;bu@%Cm#F1Kz=O{W7aln>
zgePa04j!l;{@kJT(RZ~I(t><>7(X3n96)ca_#M1qLg$AAuj~#MCh9s5zwS#(<Grnh
zKo}b49p&4~F_{2o-5f<tR!%iCYwWjxq^_APLl?E@P--n8D_O6agfAg^TCk}hY69LQ
zkcO7&YfreNerPiQj_4L><Y?K!18fVCYIZ(Jn)$bYA$zOd$Ls12@b{q9U&D0;!dc==
z*vF*OpvV=CspCn_cwVD1qahAxI0YJj67YtA{4n4R2?SI{_u2P|U#M|v8LmLH1@D&v
zMXhiw)L0}aq@dN<q{e}#1#;Z0q>_qD5;;`pm#!#X4B&&`>J!XBU;1yUwGw|$|Lgyg
zeD&t?=)~Hey5>!ysTSJ4OdO<#W4N=fdgQ(l|L?yN;eqPmcb$mu{D<Xq=2*2=&Gxar
ztU3W_9Kd&cWO=q*DEJi&_7@Qaz)UF7ZrOr9QAW6v5?t4+=~A6e_7)n0Cw+Yq#-Nlp
zM*}i>keDXx>C=oro9;(UxxC`vk$@4U(L|mhClNbBGMOklEjH4wyqDGcHr)W4AINY4
z$^tSVkNWl<An;_+uR|ryjD|gmssAa9Pus>ZP=|t6ff0}w&e-e)g4cLE+`Z6JhgyYA
zjph_krN7T<n;mFgfI@%o4FV_$2y!Gb;I#!->KeaC(j;wQFs5xp!1@t|Bd#lXOEAqJ
zIReETP%h-*=zt#O1rEalATJz-3GQ?5`H%nh`My`5e@$_yZ#YUwo!Fg@)V=qP2k-ep
z_~_k@&);;Seq#RQE8t8U@U%aKaN-mW2FnRT1k!0L#1Tnj8EHJzzax}eNJ^KJmPFi0
zxo)POdfpW%76b~ULqawfNz`T)R;n#Dnjw-nCBZWIr6Ptl`pEeLB#UR_S5J*^u4zu4
zjnJp*;ddmzGd;lW2r%{0&D=jn{cIzUO~-pkLD?K4xBa-%FpN0YJ~0`8ew51>9KXMX
zaHS5dVqOLANEe>x%UqB{Q1GRjbK%gqGvOl5RJBP3=>#MJgkDj@>jMj;k_ppS${MJQ
z3L6?UrJdIj&1xzqH@7g6E2F6;J0eF4j8}wwdbW;O$J9Uhjt&Ag=$)KzEVdt<nf`-k
zAKU((3vYC*&P>gH=J7!O*&XT3*Xp0XYNjz;f4)e_%PI0_$C(V^yF8@RURtR)(P+=P
zL!}Z1ps>6m5LdOC>8JFR(_z|(OGcBT>;tsKw%|$Rh}jzfjd@^kDaLZOibhmNqMI<*
zY2fq5VuE~m5V=*3X{&W8xm^Z)N72Vj*%%}45OlIKpeM5PBwtpSbccV;NU+5Mdg8x%
z67%<&3;;*pKp;OTar7$@YIDnwPRPAN$_x^vWxJ(OUy%^PgXiQB1O?;@d3b>f(){y1
zA|om2x<=dt!YQCe9R`vd_f5Bio+k|i8cJg8);6}Dy@cptffYB0Fm>TL3g@h9sSiDI
z0t)SC&B=bJwYj<9biDATr=Kn3!s`Xpe3E?d-hs-a?FVip<EOHwE0gr{J<d3Q@94;4
zfk2G8rC2o%K6K#04R5<{UAQWOOBd{7gK#9O#Wj3K!t(_3MKXE;p8&8JsIDkXEk;;e
z2~ls=5vdk5GiL~rHzRk#itR}_2x}>Fgq{&(Z+~mjeY$VY?0--C-$~^&)nBIZW-|lI
ziidRM!8#>C23Ta1lV)M3Q6Vv1M`2KSx@hvIZ(m)AKr9|1eCRYW<pOUEF=<Dtn@E!t
zv}*#Q<|-)yxL%$eLcWlPU+|F2JD^gD9-QQiX{(X&%&vii)(0%ac+H#Vv2-Yh)e~)8
zu)c<7SpX%4hSS2nzg&jnEPsvXCcfho-P~th%^!Mre?5Fh+f`2=7%kj=tbX5g`{_Hg
zIgiufIO71GcRYXhpMk2n>0h(Gphkxd{_KPM)Tg(uU#oVl-;Kgbie`~!Z8CbC!}q53
z-AgM9vr93SRzj>aT4={1Kc?gQD0zL#^*rUkRjG2NhLRy_Qc+)x(g{o9rFyrMj&r2$
zN_89H&kpzW4(xQ&eCrGhP{^_$q#|sbMK&YQBP_yqV1SU@fu?&PjP?h!{uSJuT_a9i
z0O6XgiPGm1fZPO^CFII<N@)-@8MbOcsW#eC8|`)#wVDq{dT=>I$RU@@!7sRQixMvF
z7$9gMRd~}mHH6Q2cwp}^CJG7S!*vWy&Z2NZpx*nwr`%(+3(M{NfhV$0>pMBJ&$6NB
z>rWqBe(+15Tyy1D?vC+n<G~+XX*aWX3#Y?z8ase)RHq}Wd%HS3-NSPO;pl?v>Qcei
z{R3`Wl(bOQzyIvt7p^(Gg>@rWb5TobxQR}&(ugp(m|(G{5Vi>zOxTotkw+oOD=8yH
zswUI)gr7up*-D#8RTD$yoz3CGE_b%wmQ<^<!I5!VHQsCh*5Yzqbl)1iLk&hE@z@n$
z*)R_uJ#t{Y_LEtEU6!$VCkz27(*wv_-Wdi!Sqd))aSb3y%F4p=ZH7SXCejAu@93*C
z?m(j8OL$VNRBM^27;zFINkYaAl#bA9v=P=^_-=q)&PR}QQ7JjRT5M{$gvSs07|JW8
zp@+Cy#P0GcJbusK@X!CpJr(2+{_1jTno*MP#%OuHSkl&eTlc*2xBd}-w3r_Fz*PLi
z-qR`ipEgXuZywdZ@$g(9zOHx$j11(|z&cO&ZLPRN7YyY`b{EURmZAQ>;r{-9BvNB$
zX(rlpVn*&;nn4BUV&lLKDCH;N`FYajPr_EJ63YAC&=oTA<D`KonL}I6p`Fg6t!I#^
z<~*RDNf91}R_7vdcWj@0TUe>wAm`h$l%9mYUZUk{6gLBvvjvNb#57#fBLb3%e-KlS
z1wJfw*X#wfr7Zs}0}HdRff4QK*8c<?nsz0(EG=P&I181EK&1@K9sz@T!jX9DqivP6
ziM=GG)Y420GHFOE>R9+fV6aHUp+hRwZMReyh)RV)<#?V<Qz7F>$W|g`D@+*^U=2WW
z8m>U#36%?k%t?WvyvDGvFzyOmzSBiC`AqXC{_8(h4jn!E)n(_CH#DP_Z(sqQIZoRQ
zpgZ^d?V@_lEs7lagFuapmc+!iiaT;qe{S%y;r{*$CMQNGR<FuqaxB1_wH1u5s-WUa
zm6t(?Tv4Ukk;!7{F0Hh1|NayB@Yf&0L(l#lRJ|YN`~Xrd0~&r$Nns>xAyx5Annuqm
z(b}U#^}$5XKb+{rBTCn*sjkHeP3_82w<K=*!z0so{=)f#7d7*`-%n_3PLJ}A%j`MY
z49q&fW+NxT16j@AqxM6A+G+u^uwBOg=Qet_9xQuX1R-)A_)i()P|pBRCI*~21fuxL
zRMEab>YqzZGUP%ES11~trEY;QHTv={W~={(!-xJQaAc|J%3`6A??ZoO5dGy5^cP1k
z<c~$=zR@J-xk!~m#fPLW0Nrv9R9{}m!91{jSgJKcN%BzrYxv{e{%U1vX5q_K=ihGq
zKQ(^QiTJ0d0}(H;H2#}M_DXKd^Ymb!tA-|XYH(Xw4qh}?8NF=H_}DpXC;LmA))cT|
zV+G@DOBgKYR6bV>W929HIUkFQt~{~m$@w`Ut1Ch_BPnT1FJ;;lADA5WFg&O+HGdHA
z{o-fU6NgT?A~*ZX)p+k`$P5!zolDe8RiTxpiq?UA^VdOVpK~`9`qb^m&)NDz1vhs-
z8fhZMq(n0ZRL&9@JQt|ev<h1!rERb_O8YaNzK-Z;*3!!~0~K!y=&Jvi`%&~aZx}g@
z%#m<ak;#Dz=IBys)7LLhrVQXX;0I>b;qi|u=oSqnnsG;mTZMwseH0vExL-$)KKbXR
z#m1fQZtBPWK<ZLiqOwM!a)GP+u6Jc{W!@iH)1RNfU}XZM{i`rGID)}aUl@oW38-sA
zv%tFM&QuQu_wRcgPaK$rmM4C3QGM=DoAL4s?hZV2ysR>SZx-Fnzp|s?_sJZ_2YfxY
z$xVmPF1o|lj+Vx57#|&)*s!J_JJ$DM)7moDt}S6`xRgjI-)z-9RbBSw+_W$EJPJ%N
z3U_H4ZoMTCrN-E@op_ncBzrm0(%7?<!gmBV^limYT(cS<3_hmr+;iV8iJblORy_4h
zw579h<oOq^K%%FcsaUu>YR%tP%<GWWXPRQ$a&sAA>@xNYk6%-*ExYpI*6=&vUYG96
zc!2JLfD8n3SHUm>jm=x-0LlVv_rbt{1Oght0Lff``T<d%%<JJPLBS9pd`BZ+kf`)W
z%9B14J^QIJK0?bE={5)8VJYQ%T{Y;|!oI$R*5KwtOG8)qhlj6no&NIzue3Vv`+<-#
z(lkP?U002;`lygA{{Zjc`<KE!GueA~#`s^h4xk&|yD9w1WDMWU3m1byPOn<$s?qZc
zV)W_(fBgFKfzd4+Ru5w5mO-4gsSoSdR503C3SBp^qR_>{f{#N79QXeFB<7c;zub^$
zCK@rX+ok%JS^R)Y7rW-@$lMyH)^<1F5Ic@elGM7MoNwdcqAzdQ^^Pb^@~?Q{x#Hu(
z`{en}_*i(djP*B`BiW&K1TEu*Sk<`=#v{Pi0=vpoW>ANRfjR>}J>neto9+ASX$kfW
z02$w6Z~^`~8NYQ3v>w3PznMxjBL#3|$|Znpc<|5oZ&(vl!*ys&utvEE^p&)9sElEv
zFx{IPiI$b56e7$g!2AMmU;)6ruH*f&qbja!7X#5Qmb8{RA(B|5QB_X0*-olPwYVn`
zd}9)ug@iL%!Ar~me51iXKf34rLC4i212P#qJBP8WE6&9AqkZF-t{Y$DZ<-vymUY9}
zw6-5(gQc*PFC<Fjuu^yA@gu^0cuu+V%L>a4piTmn*|rU)>l$OHgTO2<m1$iU*%-$|
zQ$%--zvlwu-WnnH4w_ow$+^Vcz2#N)<z{2sb2Iv%W9I{}i__|NFhD{w=1hv8ja3N8
zH{-7?uG2{xtg#a4#w~oU9O}Jw7Jqh^ePp5^cKny_&WbvjJebKKvhm=abF+g)+|w5f
z>lq;*=HByOK+yQErU3?v37Gc3nNDN}KzjiLD!u4^A$WnLP<iy}d1czklXV1|CRj*}
zh&t-u_zoFwsA;S7cWmIj&f>e7`Zzs~7uf-11lMmg_?%x9z8EPuYGl&Wt1b=X=ye0Z
z=#`U$6Pq?oj$zZ<F>F{pjPcR_sN7en3%IJ@l<s0xx(D|tcd@G6dJAZ^88l<StfPNI
zb*)jpW1C7T+-2=Dwh2Bbl7=w<F}9YK9+?xMEZUr_`5hUSM5q#ZyygU#?s$E@878k$
zE4Td2RQjPm|4wUFEu!g^Mg(oj&C`P&G~Tq|>}gWHZCiPE`Y+@4_iPNxT7|~oEk)TH
zd{+vLSBi9ei~${cWi)xZ0gkKSx)Rb?Qaf64DM06CK|-1Va6KVClJ%x6z}M1af>T#$
z{CThTd0(?v*88<9&YC%of<GudJ<=~!X-sOrWHO|<4kuhuXw+g|ZN|EuwwWRP%_+Pm
zcZT$7>lj`H2avt-ClhRZuOM7KSn#lVb55^+Wl^rab*Q}R(#hd*xoOQ9&YB#-hBZSN
z9_<fZ-%pxtA(tCM?q3#i<!BnzY8tJOc=@DA(S0WV%Kb2kKW1478#`a<cJ)@)U$_6}
zpIH5?u8yYJcW0JkS|`8(*-p)oTopftgSJlLCVjz0+iz@s`N8==Yv~KWupB+~?01AT
zi*$h;0D)}Oe(PxQImW=aZ<krA9r-oJZ?^hmEj>&BHSA*ZR?AK)fS#Fw%rW$+-*#~W
z>hRh0-VwY!NxF<Yk~n~LY0Q@tj#DT{Yc_r=T|75MF_0K3r0^xd7~c)n{Cua-UCdJQ
zCi5kn`=$YB>;E&+ziQXWK$#bdlDcXbw^3`hvD~PtrF!*nD{4HgW&0V0<)>PD?y)u&
zj>f1~V^NP9?V4F}3jJ-Jg1r*(az4Iq4xp<vXWn?v4dCjLvaeR}^swgU5>~%ruz%Gh
zt41f>4U?;I)}~chvt}q7=<kc9CuA52*=P#+_>^#~)x>Qz6~d;K*|tKIS&E)L4I6xq
zk(%Ed#T~<kF}!ngf>uG-&e$9O&=JA2fwFtabe8W}BkH0QR7*Rk#SQfNXSrL}Um7;{
zEqt!+p4ie#rlJ>e0vhp3!X<MG$8pRy^DGNsHl7vkv<}GB{Q9KzUxxW-c>lc&zs?{K
z=i+={3u>Aop!;E&E`XGrfJmMMWHOSZ-NR;cF)tElaZ>x~nkhin)yR3&0@PSN(nckq
zr=m~kf9EjRNzUz){o;z(SH!lzK7Z4W{u|CaADhR=!*U^?crKLhCerm2NYR#URd*Zh
z`i8|uZNp-<b^F|61IOnZn3}0$es*cOR$ty%l}itYYU#n2Sa>{i77j*oc_l<OYDa`o
zo?h9)_sIct4YTO4Ef<orUz<xe{78R!{JM#WactVK9-B5yV$JH2sIOA0(_7t6gsiuv
zJ9{Gan^h&-O^qayZ18+D>b4xo%<!8vb{pOK*=&$B#%t&E*%6qtGMO*~UZy{uDcM@D
zz{o$Z74HTAx)HxKA=VM&?M{me;bJ+e%gOPpqQ&aWx^$-cdu{QLzib-v-~2tIzfE;}
zIZ+7_=@d=YQ5%jOfHj9KDd6YIc>X-kpUHl8GXS$?)H(rv!PW_o5|0J@vR?l;>;trL
z08QOx4k*h+sQ*v=eIsgW%M<>c=8<LE0Z8PX^;<#|3p~r5e7Dz2hGv%iO@009hL4^#
zboLE5U37W4b@kS2lsf*w+1O1~>QX`DN)Nv4qTm-$$`7M2FT!<|RGqyxR>i>xP9cQW
z4Y`suOEW92i>Hn(UwrgP{ilu{YhdPh4fFH$<wmpiconl>t)|oW)b#Y8rktONoO-*_
zuJM5PH|yG*j4ix09m4m)0hkZ7lHXX#r|14+S#J5yTeqF(UUcbpY}!5^_Luu3+Je(g
zq)QS0;B?|Q8x-9&VwycqrCByXyp}B5X3>}X@g@Lr#J8!xiOM$Pu-|t;yl#SEyItAW
z?vz{>)w_=Cn?-Gdn49X@77@<_3Q1cpPPD&c(@pio`phrIjT=6<5Pjhb-+sAeTq8|^
z)KStH8Bg|`Ou(k&op_XycZf!3X97B{zs`(6w`FMGF*`MAFW?^J-~2P<0dSXrCGkxu
zVrGUJ3*bedlF9)h{h3i=V(>YX{%Zs|V5A(QZ(U@Z$ahr&bl>Zd-1WOlxcKvzZ@;8+
z)%n*gLl=TQQ_X-rZ{L;h=y@GT>1fqT1?n-d5NbF}1eZ86=Qs$w0L7q;N^uDN{VJIp
zP|5c5+seH@RNAkpIBB`_t*Ep(A6`9oIK2A!p%BLpR&iwiOgOi&_{@r~Jv<*By`v`P
zo{V#~sg_)+w$ySIhBVXh?XrcJMyBvRb^zv$7^_@%PM^5$fmH*${Hw3OJUaifi8_RI
z(@4mL#WZNt$>39jEx~Fzq=UtmYDzh$x#)SDi#7Btoj2cG<L`~`qW5=Mo!?!xZSIpf
zi4Ob4Is@}_^KDN(nt_And9q!)o##7AlHWcjSx=-R1n!W#dHogj#*@pRkG!ezTKwe9
zw{ilc|3mA&2)A%NQs6X1H}1DHAHREkW-`#$@tHJOch#5a?HjqUPKuwg{|w4+N`cJB
zbtS<phQLp0-hVCw$Qih_NLiXKzz%f-%(?K!aA~#x7d?T|kv4*XCM1vUI+Dp0-{JM*
zJ0&sZzxo&Z-LwDOjpyGGZCZ6+b9$*&h|{_$iy#rFMiq!42$wVkY2wm_qLhH>k_4C%
zWjoXwX<MQmIhbD5(m0L0^qmxiU=XEBit?aRXAOtp+1Er$zadq^Y06fu?$6AG=gk~y
zop=1X=8qoTzl_<#bu7)*X6I{54=l;)uPv+DhiY<R-?EyWZlW56Ve=cXh0M`*5e0p^
zH~{lu7QD3;KR)-N4eKt)Ew|lNzxu6iaCm<joOqgsJ2aw@w#Q1dK~}Nay{S#DU79*R
zOZWMKJG<*`EpHNJoAYOKc%5`VGf12EcFKcHJC7AMtzQ50W(GPFx2(RIJ+lD_&12hA
zp(m~HJZI-A95mYvIo5xHTs?jyNvCQbX*q|lPEuk8ev`~XBrTe?)v^ug7EP*c9aiQ9
zIu>g{z#iZ)a{|2@05)sr*#XE;lR3iYEe1Jh2~LkXkQo9pO232yNCqQp8!#(RBvGu1
zx34j|z7D6*MvkxnHqRG2j6?LDvKaB+_-8};tv_?~`ERHW_OJJkEL7cW%94UZ)&}JX
zMMtvus+mc&K(Cbyqo6^J5xVijG4*vML53QUa?otKJjU%Dqp_y4^gU8xN>L~$s0_uJ
zm`K9)=SNCkA1mHtu3PTPQaC()FuZ;G+4}9r_AFy&{}QH-E-ub3Ej_lZmmaRl#fN5b
z{QgBff1<9I!*<ll5T~BYimuZPNY*dk41g~F0xtNIiGlOovB6g~S8vmSK!Ta)1fmuY
zx4NsNZTpJbS{-o9MlYIku|`Xmvt4FkqCH8=v9h&w3Ynkis$=mV8VABopr=Hjl(u7p
zwqCY<wvOgzM#Q(#kex{inPCpSe`^vByZ*;=^^JgsL>NWxmi0G;_2%4_as9e?%%z`t
ze|IHt_s}|S5g`apEQx|Eh>T=UhU;&-bvXehrSCO*BlE?GzghLg1R=AQq>~Y3Pxib{
zeAZ&@WC_`w3<yYF0A5zYl3%pb1FU^W@@7N=qJNW$&#Fp{v2{%l55qHEfETC%jH}PN
z19HfD^?O$LpZhbfxbTftsFC3KBF*~~*g$xtVH>jYP><R&??#c-2o^L;z=4DfjIx&0
zNQ$wnIsF|`Ehr1Hs>F^2Q<v#0Z7^=N9W1pSOfBT$9e|s2l#(Kq`C^LlaEkKkIN3hg
zR@*L!l`c{F6r-`wtjr$>ubX|gcHPvoRh-zrh^fOf&6$O{N9V$YuT4cKzA%UBr|M31
zsiv0OahouS-YmhaDSt7_h3}CAFy1`xtQ+a`cKqn-k?X>Rm1V!(?!)XM0`lyhDx*-_
z*<+UhYrOg@J4`6$VHN(?Zokcb#{jr3-?K4U{rpSIl({FN_L(@8xsx5FA^m<%zq7ux
zO@ZyTrUVVVSblxyLo@g6fPl7LXi5OHt(TpRPT`1(ziGqu^~Te4e;@frzq%4Va^(4?
zfJPjrX#yGqVm2U6){t||Bzc&fU>u*R-Me{9Cler7nzaBsY(UcnG%vT~p=`C3)&Jdc
zsM|s{#-H7cQ?i=>ObIp)h+b<hr%~_)3wIQTA~cj|5E9KU{@Y$F1%JZp7q|WMWdFIZ
zzvbc|s76UKsJ5ysF_u~~gmDw3p4ibU<I2KBRLN<-BI$8RNjpd>Tj0q@?tvOn6GLb+
zEKbReKog%rkwYMoBRL8xZAhIckx(H^xqGPAeazN`at>(eJ6h&*34%hb3jGPnYtm%>
zWE!nMH-RqFrxhVwZ21dE8kf)SS-kxC;|srf?CDt?KfF?(TAF#_ggo)7Y0Q3kUd|m@
zN~h}~k-j^fGW~LJ0Om!w7{9!fA5*R@CAFmLKKFD9K~5SW35(oksdv_Ex1H@SkkXS4
zWNWX@Q)Iwi4<^uQ_jQ3mHb~3n%O0<n#m5obf@1tfB!SVh2Fq->vURrA$mb|%tLiRC
z;N&(T7ubA_NyVeC#1DvD=qqlPtH#eyqGPo$wB4zlVKPm-b9&ynBuQ0@R4NdmhN3M8
zP>#Ab0{2Af9=2a+B)GRE$QFKfQvEK%(J7ZQa#8nz%@;G9XPh3<e_gKsjT3NtoB%8O
zQu?10=r00m)-<><XXJrDj~<8qO^m<fugML&uldSI>8wkyJMV4PS}Py4;s)r6iKN9D
ze@14?TCLf?Not%Ime}12<OCcOFbGUFi%)EsVrMDnJ<6DksU)nxC^OSX#v=|&O3D;S
z!I>AKNKJE!{NATNR4S!x)5eyTFP$3T9iuEFm0m8DK|VoHPEZ)DsL3@tntaV<a_&2o
zl4;wm9jh1So>{)`#G`Z99eZ*C`<^|4Cr?a$et&TAclS2${#qD?`upt!zPBZScE&vE
z%QS(ElNO$OvWE3rhao)$-RMLao<%iRNVk^fqZ75et-K7JGe0M&tm`Pu&kb0}9Rnkf
z+xdAHi0L^PbTF(y?sMA=fVuKnx}60aDnU~)0fw`VY}(GKT=Q;Bli2i>6`jn$c#w9x
z<*u2yI$T^iu_dWq`^zEz`S*M83qi}g1yY?z-l~)B70BKe>npSw+&41|*@d3cT)xQ;
zxD2Ln`8@isJt14UcbAJ&@{{4Gy=jHaoB(A2Wbm}8#FvD=!|_PI*susFo%UTq|5Hqi
zQGG`<!A2&m!>{_LJ^mr5U*7)N;nKECuRQ1N)q2|t+DQ{qx*cU9(__pcxcRJ1@n(QY
z0|pppX%><g!WZo;;H|~>y))&5>87whmBw+IR;L9!>3x)1appivPqN>4HzP6p!LMIx
z&~npQQd&aaIFNA;auINz)6%<7A)ibApc11vo}jdTDA{=V2DRb#9Ob^KA3N+m^^u2O
z@wva-`ii@bZ~mu8<i~z^C7g@CpHAR=>Hw6Ejz?*zNC(D|F^(UZ#o^~l*l?DQu*!@w
z#gjC)hV8uMEE~vrbhhr#erc(>hQ!i40An(43c37Ex94xXNSD2L64Ym+yzQo$Az3PF
zO^VMpXIpUw^fLRRDKpn?5&+eTT9sY!uUmu&0yX({bsYim*j?oPjq7i$hfgj4*FIeI
zv6cA2y`~PdBpsgOPdM^Yirt|e+n&40=lP<Sv|5}aEu$md=--**vtE$@&1P@tJKgud
zTx?n2Kf^rOwf6M?GeQzM0E+&;OR{Fh;OOVn0U$eEJJdoxAF^g3sD$B<Nqke|_nbc2
zCvN)N!NTV2F4^(6dMnNaQPScXgS7!!T*PE#?8q!p!vJWe#_zO9EiWN;G>=q}bEfjL
zGc08d-ue>bGqlMfIq|c4h}`}(PM~us(C_$VvLm3ZKrpVrWkW{N$}&U(NXcn<KqLfO
z%7s|=;4T6FJ|zpKM3zU}sElj$ZJxlTzwqktoC^+zx&QRw+v?AxLr<v>-r9<4_N?_w
z)dAS3EUQn|!+9CCt7gTzSi%GMO<}|44JZw0RA=eEGSQJVVK`Cjl+|7F%1$qyuXDQ(
z&o<(0%R9rw3{aTTYznu=JJPwvKzmw$_B{DJ`m<~UE}u6oz_j<`4_I)o*_QaMc$KZb
zN?In`*c#ek71olw)k~(~M@qQ@Z57MD{3dr|^#xJ;$n?Lq+(SE}geK$oxd`N-*+l8&
zv?6^_BNR;AgoH`CS?%L_8M}$}T$p5Ozawn>uZQSkQvWQIGXJKmx${7l*w4>t3TLkQ
z>3PWtNUqSy8RKU`5UQ66Wf#=(5!ke<Y04<Nw6f)gCxL**Yv=t@w@<wKABXch-gL>1
zchuWS&X3a;HT64t5wmt`H(RmMpFv3z^{EVTa&`wH4@l7lVa*OmB^KMUrGhbRlL?s1
zOLww`j0nb<hh5T~p)*ES$y^ikyM&wsWrL2%xa?I$r<MJ!%(9BCbs9SwZ7I-ddssf^
zqi{@P=wJ;)uc*6jajbOHMVBq#H$DA|>AACSJBGXe_4{M~-?Qz&=F~%V>_{s)^vqKI
z3E!82a=jGuQ!}{#t|gTF9Tt~lRat(MyDBs%rvj$lrigC>TUI9Yq}IlYc`X)4e#Xbh
z=*bC?CLd)4RFl$IBR{2jZ#w(E{d>BAEZEp7KR690M_@SdM27M5fFzx7S4b@>+h*0w
zPDx?fl35rvR;BpTa1bV;yL$YJWT1cN<^g%rZ(0#f&QX+(6D1=l>G6G9s7cH_WBdk*
zw~^1LwHdJ2CH(YY0~vPM=@#@%0~*(q(Wh*BY@_7!E?_b=2LI?B{Oml;iZi1B($~>S
ziq!)#RO-Xwe4KWZbeI;M7G^#-;!Ff@`Iq6sxo^67$J^_PD)?>E2!vx+sb}px+ex8f
zhR&41RmNaM_dEh~BVGbIZk0gNZr7AHF;f=6tHcEFC!~cdw8N2ZBuS=HDf#}iYK(6r
zYi{pnZxrc?b3h{|tW=bOzmHNNOtosKT19*VqQu<V%KW@d-_zohwpsW>JeOt*XtXt!
zg~Vb~f}G3YzK=(Ee4ig|7~P;8wfe_g$9<`n0LCXKs-~KH|Ibb@KXgZ5@vORoeBirn
zJo>;<jE?3pu{yvay-TE{Z+GH#x@Z}LkJDAtPV24VGg6Le#~GC0fPyCF<#BnQ@9$+~
zb>GyE6prPwTabYx26NrX>5w7N*VG0^E*#1DIKFYDA>BKUa<tKh9TG`z8!W+;Fx`@y
zyU_f)$Q)_?N8Vqz_NHe2$+>s+d6$2DIr{n|l#r$=U%~~EvxXO0<F~E240tn|y$tVn
zjo(K4P6?1@LA~Wv1|VjU|9J;Hl`IReQ8vp0xC>&#24f^N{KE>sz{b%Oc}l|*`k#i5
z$)HFT*nR>uB;^Dcc3=5FithSb&fET`dMYbHl+g5}XXpO-bIsP3m`)0#GnS~8Mg73Y
zle>Y5{yY!W)@ajOc3Qd4a}Yh5q)l!*%Ua1XNX<h|oVA<z2Et7k&tOa?bAp!5$o&QT
ze$r!;!|37)rmWy{i5w1ZU*)G@%|rqlX<mgp4=y<ojgfJIy$=@fkvondFC!_$fDF9B
z)gtjM#p!#W2Yin*fbP*qpZroYn!a~x@!>+==}#ysr|}}ba>rqWErq^O8ZR{w#D-7%
zmnVNUG~TRRz(SW?GT1s_nTTy>^XYqz>YND}h>`!q+>z$!&0-2W%WoWrDG{=4fHMO7
zSQI_d#8``@3oa0xb~<^%n{51wS&T_P(+*_=-B8L?g|<*6*p9mnR7FS^iE4vNfw75;
zq9DESv%WjxYTb$@3X;y9qM9O0r!0w(cSrJmK1#pY_%!vXY5TZMTW#vvZ3$*nV0)2f
z%RTJd+Tj)17@c7U42WgXKXW*gVrM)At4-*ze!p4h5%|FBG8v%D^leE!G>X79cufkT
z6m6UU<KF9kz3goLsdKixxehrHP~@ivO|9lJIrKzG#xu>$q0Gvd0cAn7KQR!zh1jEY
zVg=1=>=e~0(nb+AQZ;J|W)YhrdD`=pvI0_iiW7k-&hA55f{+~b>F?s68%1`$5A|sH
zxp-$I|2%sxTI)tx0DsjS`6GUOZ8C%Gu~MKFQ|73VdM^IqQ?od>w19>ZYOdKtqG|gg
z8NdBpUb-M)mIX9)O+WBDu~L~T<i=Hyn}Cwbs4h?AD|h7anm4UQSTjb(wRFPOcqc$p
zYHMcBOpTkh1FfNR+Haz*y;;L$Av{eRb9;cmEPJpSMrRU`BaIco$O?Tcw`HD7NQ(B7
zCk{2doMD%-p^>xpY?i_6#pwbzAXKOM#TbKi1~w<jiiAkD<+|0^CDr<gv84IR{~G%b
z{3fb0OcGU5RNL~_9uv|{x@|{-d&x;%IzzXNx7>zq>&&+QdMLka>zrhnd(b}&R%2^r
ziu@i2=Z@hUT>wk{wd)ILR%0O02poZW+ed}^y!5EFCy@4r3#nY!#j4=#zm-q7zI(^k
zH`awe7KCww$zmCzpPge?>t|#he%~lS_{IUd1<ejX<cStwL{iDPXoVUP%NYF2#7`~W
zk&Qgl=WGE#MRSd&hPObY6*pl=Pqh&j9!7@5W)I5Yzp>;hyFbAM4)fSdn(AR98pmv9
z)fq3L>qTL3t%omsX&#S0bJT1~k|H@Ye*n$&=)ba>^h+BA%ntLBHsWWeJ#Xx-N9Tfn
z-Zb&rx)grk=Mp@({}Ar_YJe-R8bzy-^2N@?px$g<^$gzF;U8n@mI!2xzZ0>0+kPC)
zdm4W>+I5^lX7BbM1oBuV9Hx=*)o!=fQkfzmv%r#80r^GSETHF)3@FG%CffL$F$sC5
z!9K60!f*zVod-WYsoVJO+R2-u+OtQ0xmX%;>b3StI}S%_I|e-;U4k5inSyK6aJt5r
zwPKZxYzvEN0!&`9>8X7iJ9Od>x50P}lc8p4zg-4OU(JRx#vh~wAhVKyoe-tS<oGB<
zpuwGrM(j$ow2P9a)WyglMq1J)Ab*wjnjiGqo8G-;%Wd@_zb**ls%5}+i?i%Rh!DzU
zh{X?Ce#{qe@)~ZD9Dqsx$uZH>#J0w!m214E*i1)uCLc3|o|OeG?;+zpIJUH)=O-|e
z6D4V&!)$6YGj1kXN}*h>nU!qHgzgX-p@94xq>adzj%ibpgaWULC#N7aR&DU`%+pQ$
z+n4r1qYl^Y$3lI^om$zi8tT9Y@p2pouB8ut$Wy~_pPIktRcj`044cui8w3#^x^F*5
z$Me{*ri>E@QUbd=t-<clPj`xs>-<hx(Cz(YPQc&*Hr=-|zrz9OObKS>qpT*j4uR2z
z4(UfS7}(n~qzjQ)x+Gcc1Ab9+#3AiIN!=@<d6RESfFWTTso+)wgHhb-FclX^SzD7+
zbc>P*h1@#1det@2(b+qHL24aop%Pjo$iyDo1t7hAc2YJPXT^R8yrb{Afz)Lv8tz2)
zx@~l)+=c^HMy9dYMux0g(2v@926Hfzeq5$`HVYtwVSv&sJnioT+VonqgEVCz0BM-`
zEA47jaxVMxMq6CBX~Qd`N@aV{iYW5CJ>|JcI|vmqpr$cO#yIFJ4Ibq+oD$%bZQY+E
zLpQ6|+bw~1Xpnz$0Q|XTbh4i5$?SbHH~>3H4$@?xF_n5;+8F1_+$|fm>EBE=I;nqT
zfzoUQJFEX~IhK(s={(5y6M{_u<EnKM%gYfy^wGTtlSOzA4JWDS$zu-}+WP2kRHMU7
z->>NZeR2Ti;!9Oi*PMIa=7i-Vh3aTwu(UmCMvJcNRPm)RJc~EK<!lU&<ghT6&`KH8
z63p^d3kjLF9@mMiG-rf5v$~(1gXsj&5C}ne_WP3^Kracn>kK$ZcQSx%3Qiaz2^lth
z!W7g<s+ZPWhXUmx!55??+0TGvjaa7->5}2dQ)WOJjX~lK(<WQsX?luw7D>7!X@$*e
zub1s~E;>?sO!8JBig5H8bpEy$r=b_VVr@F!JC6WXK&ijq?Fv``%to<{JDdSNR$@$L
zua!IgHqXtt{u%qPb0Y=}_5O)hPf-m(K<mrteIPAB7icMgP&r5#1e9!$iSp2Hmap5s
z@tSaG@O-x(hQ|1xPn2TX5`C_wF5%%V%R3MSz^MRkMZlqr!htoc5Qv&U)F!QntnA7L
z$9n1<dnqxt%X|fcZ|IIFs-0-Gz#w-5IlZ^IiDfeJrlXz?6{}2Hffg>&=)E)=shvft
zOfQoLa~PU5EYc6WZ!Z?BQ*hh_<=lumGWVE2Uw`iKvV7nV@qIqNPZ@xDhr)EK(eNI*
zdTy!wWZtb*z1)zD)23`Um+-Hj-jCP4YC8&LiRu!i#a4xvTYy}1OViS^Rdk2(XFNVb
zenL}#v^=67<Ihrl0~_)g(S7Oe=GtS}&ZL|CjWWj17YgmcvuPsTh~d`Ma2p!Ax<GN2
zP)=S!HaJa{^o}wEwkD9Yv_#v^+@Hi(u#uF~X&#mVWTKI@fpz1z$P-5ou|OtW{F)Yy
z(n+!;m<ctm2iE1!=)svY;0%Bf6w7SuW&d@`fDWbNWY(Wm8!;_50v##!@6vrq50Gkq
zasZ?YNIu9VMyCrF0F4Bt`;-Al#8d)^6f)-^(XJdDyCfVRy;!a^Nf61g3ktjE)?pxK
z+=DD5p%RGF{Sx30Q1sUf{4sV?(>zedw~!MK6aBL}6I=Ip9zXkPi+zsJ(h{od$ho<0
zjPv2hPE=tg92rN>GfCOw7!D?P5cph82EhbWdVQqV$iP2cUx`L>RG={6;2%D)4@XWM
zf#*didIP97Pb7!t_7v*!foogIeEj{4{@-U!K$A?@;>VxL`K$i#;|qoNtR26xDv=9(
zKavYGCvfMTd0cztMud?<Sk3;5$n+VRuS@y05x=Y0+o|m{9H2`L=I>L(6ELa2d1#~f
zLtfh$Sq7k)pJmT)4Jli%m6)`%RRjF0hTpGIUTx}9QPU7P!%0^&hEPQ3Mp1xL=^!WI
z28LmmCK9b>fMhJAW`a0uA#B&tifg=cFHS=?07BWBOK0nFG7>5Ulwsc(ZGP^J+pihP
zH(TqSUEJM(+hO=+4uD^4*775#lJWeR_S^l+48WA6znB)oX*4+n0!7II5cnC91_E59
zeDbtp$bsvvaaWoGaVIT*9xupNM9i_}R-ZPJpV0o2hCd|W4*`D3C=Mkxt*Gt~8$e98
zf7}6GS-zbZm?jJA8J6lSSGCimTrLUj*ch;`OAs?)Z5FmHt-J%K(7pr{@XaiXP514>
z2Kvt-&^UWfwdqz2t#a^*j~&93`}QNqNAPqW5Uudp6L*!Gc>K-PWY3}RxADJds=&+1
z*Zx$xrB@uAzw5S*V>dNhaq9bif@hySgn|Atc5NMzv&{r)Y(cC}q|a_<Gf$WJ(~b7r
z#<Q%zZU)eO?o7xt`v)V?oweAu0o`HE*|2Y+VY)C_+=|l8CeT^|ycHq+eyu7KrY-2!
zO*@dTb&}5(0|p49OEPW%tz`#|MWC@5qrOr{D_lZbEhAPn#Hz`=0eBdQ9wAG^>7t@`
z8(&ZqolV=+r0l&kWxM|`3!<GGxGPCvUzNEJ^WRN`>$Lc6?N9d0R|oAyASaad|7mK5
z&qHws#LpYTJmqXuA+<pcfHnlXNZS!BGD|NtL>*?i+x|!Iz?JQcvP1FAdT@}WcoFc1
z1^i(k*QZHrM5#z4iH!qpx4_PrT6;w7>Gu1L)9ws)Q8{O^kdA4a^jwkCFt*!myYmAP
zG0mz>W#tveA<hc;dL()h|E;ospaEFz{DKV{#8;Ty=Hl+JEZ~7Bo<pucJ!Ka`&WoNs
zaYw0@9C`l=?)~tKVf-(G1L$cDs(aq7o5km*mLBRK8@NO@+so2%Lfrqr9u$i?tQxIg
z@kC<MZ%*IsG++<%-|73~WbVHi!9979h(Ryo6D*|AjY8b)b2w@47{^IGgbn~{vH-dW
z2^6A>&|T0#9x~_?7#;`Ob)eY<{2WjVfW|DaG6$^80Lya`TGa;H;WEPZB1qvzYciXR
zZb<4mIY_4jO=*M$+%ho^8a|<*&tte0nO(stI2$MBnv@lEbpJ9+aHpx((J$-_IPsNj
zGY2+y+hHIB?3wn<@Bov2*s)-OJV^fAzE6~SlL$BU!D9k(l5FZTfRl5WFOeh8MBaF%
zBqXIC!5D|#No>xaUUObR<^{Y#4S!f57y|Mo!Nek}`<qo0{ps<!eN5^=b}gEHiL@!n
z=pWei<{d|v89RZig0mya1SN~SbTTE|7Gxl>XI!$A!I*Y5{jJqUHEq+ZMV&RWU5&L{
zUF><XhA-Z|2Y#Mv6&FRnKRG=A<)9HB-&d3O{zOV1?WAJuWt{;SC(ufcHyrnY-SaE*
zpzBwfmE0yjjhCQQ6?c7o4{o~gJXD5qSeWLW65U~&%n4+vedlKu`R}v=`7^RlnbrMF
zC$?ICCKu+EFjE8VN&WcOwlM5u3D%6r@L2wu(p0hwibyNK$S5!{4jerJv{GQD2~5vu
zEKMuamm6p`RuIQk@*uPqN771h^AVVH%@~eS6rf4w#u|P$?82-yLGs&xvWBmzUe88^
zsYEbbS_=(yH31E1)h%tTVwr6vW(+%1YH$fpQJ*>w>}X7;!DGOz|4%eH%fUC~M~=dD
z850iBRzv}Ip<<E_8$hjIM|xt>M813ug$fXqB!WK8h&~a9sE#K>4Sx)I3;K-!xj~>f
zV5aYs5^`k`XfA0LG3sx24pBFNQTxsuI2*p?fsl;j(Yp-Awti)&H)7{DvUZ)K`3Nf(
zYqBb(2qx|5DcJ0ZQ-7Yx%&4TD>xWc_)^B$)J=Mm?{&f$Ov%+su*&9={wWl#(+ZWcw
zJ(snTnf8kn{a?hzAm&Z4Cr=-8+{*1U^X{kpk-oYs%YhPgG+WcS^Xq$X<2C1?P!U*}
z%>+HO2yfGSj{J)2dpqrCR(L(Hz1Pze<4mA;Jq@R9R%4=jdYL?~VW&}~^n8IFwV_Ie
z0K?)FsYHDms4glLmyI_6$VPyeoS_HA1wd6a)H2ny5^j)#Kp82?eThJ+IF>q1m=>HB
zCPa)e6hH&Q5q7|RcjDTzOgBlY8wVilSDw4!)}UDnoaqEGH8oQR?g8G+b<EL_5o*2)
zEZ|3m&klf?j-2`%?12G5x*3v;qI`+Yjb~(td_xz#(qxm8GXcT@QirjCrPfg_MaOu)
z->sM7FAN~?1`y;cC{}VP4M+t2K%tbHOo0r(0%%X5JRsrvM6U*_a~joYjhLhcBcmpz
zDf8i#=u8Hs7jE|+cF928pYLFc=ELWX0PKv1{ml6~;a{4|fQG5KEaZ!Z{10Cc{2nm*
z+RS)KIt4q1&5uEB!lAVi)oO|lee7AZ^(+s*=A3?2506FDOAnSB;^7^&m{y{_c*g%C
zZw4|(T1_ANjO&j4^@)Wq|HS0zE1I-;%5_^<SU8CL9xC9<-CN)_6Ev4i-g+`^*L+P)
zWbdH==Fz(da0mG7=wDOlH@z@BRo=-g=u>q(7ryTxmv=Zq@vw<2IbCfp1Jwr5j$<^_
zHrkZJ=LAZNKI)N&r4$%g4-8HSv}2$gQSI+Qw*y0sO@tz}OgJ$_>O!jsf)Fet<qOIR
z1X-VwJYOIAR=$cm1_t+|pHrue3^whVgJ<K<_5#}4HT%AIqS8ixGt5KIgCf6`9|I2_
zb<=*%I;;pt)@AS<Aw36*+Mzs5M6_62g(ML4Hpz%vzYY&#X+iS<R3^017IifAG@x^E
zlOo*K0E#QaD3vSli#Zg>CC2)J@jjq12;`{+NR5{T(n~g^EdHzri=lY~F8x^Th*Np<
zX`6!;oXGyIGvN7sOX@MTy0(*t#wqf6uwnFcNK<AykTMJt2+aL$8`0jC5+WO1I1{Oi
zn(XYupWK6`#t~kW;)x29v=$wizq8cB6R)erPwsiKjsKL`4M;U`Rek;c8j!)oQ;T<=
zH!*NS7^f}Qb=x?6<QbHT1#CZS5@9Q)wwf93wFaJ*0sJ`D_`5>B%*8bAH^b(%wr?k3
zI)axHL{)dFwdFYo3NC_z36)`!QumZM4z-&p+U+*lNevMiNYFM)G=2bIm7tc(z!4zv
zUFf2~=p-<@ico5S_K-$YcaX$6mC#;7>KB0=02x2^t%(V5<`x8TZwUub4tzUx$iTd(
zS+*)i_?R8eF(93}0tpKsE99Sd0Jg5WuMq^#I1YB2(AN44DAMD224JM`dD^b`#=;o1
z{L_Gut`t)Gw$7pihJZL0!_tVU9Y~-j;WzMT-I?`9cJRv1MZ_{eB$m)Z8%@zd(HlZ6
ziVzJ6p8;TrYE2=j0?qvrqM`Ub0WkuJYCt$ZC`>6pnMi79KP-F8`g~5$Gv0?o9C3@}
z(~-?T&^>5?hj1b@Q*E7T#+;;VDWefG&X{R1+O=txI$RnO$oD(=)Tj4iX8sUzega1q
zh)@(BnYptRs{QX;jPL%$sbKu4fCDg5DNYxYnz-*89pw%#)gCJKSI$-KWLXNif+zPp
z2;cFrZek3JQA`?)J?y^Tn!gwHvzRv_%N;b>GR*8%;rT9tz(+3d;N=|d{n89x)JieC
z*g~V$LbFvzNCvMOh;;+0qV2u(D84aLH*bK*I7J*rs4tN5I!q2Klm!ZXK;Hxq)&)5e
z6-DF(d~=1-ti10i8k^NTF~<uuq>w&%4p`Gt5L*I}pa(DAkYrBCQR+`MF>%X#qQ8X`
z41i~oiY_6jNBD$WZU)Ps)ZeW7vH%<x`DX7Q8$PZ3ay1Kn@Qv=qYB;pO(T2QO@`^Cd
z03>8v19VHsNce&LuCg*ezY!OdUSMuP5l(Rc?qC7#kc1ot;-bbPN##WvNAClgM`L&~
z;7}(aAwmviOEg_bgIPqspe)XSj|LMU{)U|nwYY#m?yLqycKzw@NTh3^gbsPi$i!tc
z7n#VT$qLvPFyPk}W2F+YJm}z#uN=g4NB4o`!JvHjIX5~ob4RHW?|biJdgt$U8K^J*
z@uFt{S#jD*j#Q=lz<IJIjyPViS<0>V+sOiyn#E&J-;HAKMhpy=F+UwyfG@RF;BH3H
zoBn6aKhqJW2=5`6^AY4-Dl+(fag?CZY@;>bLaW(C*lwT|FQFMN(kL@WF4Gex#<&m3
zBG&<g89ukEXo@sSIhv6aWpl~H(g9P`j&2bc7&TLBt)`HznpR0j7pTtzG>MK0g@Z^a
zaV9JyRYH0YbVXCYJ>%Y!ol?uqW&pm!>Qn3lI0vT;z>{PT9Kkx1q*+G*J=%hF&=-pG
zS>NAckt{$;j(}Q!1axwCU@!nOdfyJUu&<%#C9#r3sMMwX00v(n#w7CrvW2QVyK4s_
z$XLh$I1YrHgOe*j`UN<}GIB#D<VSq;uT!Xun<1lED=h98SUjT8sy2}jIV5gDMv5JQ
zuL8J^kDM29_U1_eKPTZ+3FlIIB|+$2n$j>ooshv=*mzIkBZw@KVc?Jq+wcRronXdF
ztnm}uGZS6Oq~?jY&^PAd>-QbU6MLROE{LF&hajjVN9XP+tTdne#1g*tQ;BMRU&ef2
zLJoiq<7OMlvqxRO{}szM_wy1?-F5o{g(h0@G2H*eJ-Fh$Yth&5V|KpH4j?N5y10Pt
z4p<3j&(Fd4eYl>>A6$|q2*Vilg=IAAE8L1BV-M2>B)X1NN1U3IaZBM7P{&43dv7|l
zyNp@OoN-GkNemA?jTPE0h3dS7cpC8fG)C78jI0LgD*}yq$fU{0H3?U<00zmVYf!tB
z^z+Dq>3oYU4aliBA@34w{5~0frekNh`7Fsrz#aW5Ax&hAbb--4e5bG7!~U~u>TKyJ
zr{lC;Cu{u?n=LbZs()$Oh6Bm?1A(C#xJZw~o`A{^!C)jQ@R0G7t+5&xFHFs7iZ%gv
zJP6kVtq_*EBD{PVeqRwmpM%o4Lf<MNC>S7Z`8kc5J%V(Sk<#k$BxEO$w(Cff22TRf
zV3sR=cqkx;B7C=uoL7R+pFLqY<nTS@3C|%bO%)Q-DX^?Tol(F#S^<O`SU{1{Vxnc)
zR%OP+u>5}`XlsaM{i7b9d}a<0KK>NEAY!Le2nxyc(!K6VWADKgao=0xlyvY;9pgWR
z96%2!7~lT|&nx}bQZ4!IzP|J8LgWI02+OU<@%6_-T(tFO^jFGg6T&7F#IZt@q+~)&
ztMyzmTthb{Xex?ZSgtiut1qG6TtFk5M?0QHqHDZ-Lu)cXvIExua1`lnd(L1=J>Xfk
zHmh^aqC2cav*NLaAQodyLrw|I>>;KgrG)}R>w)@$;jZ&+I&;?PIY<SE#Qg}3qrm|W
z4mkiFu{fn~S$0(WG6#U{)TZFnZ>Ej}5t9^Y6_P_>48TI4y=%d;+MgYOMZQ?HhdB)j
zj^?%?X9EoWnXZCK{Vmi$|5oG<ZH8r4c!@Va$~q~Fnd*)M;Mse6Fk)P@*Ki>`55mvE
z@pEwVCHR#h@`FB#V?cRAgZLDL(Y9w&Og{>=stR!{L7GHJ6B7I8e2xb%l#ZE85ymZO
z6<U<vgD(Q)oC-W=5WdsLw;-2Cu@E4ici|Dh8yLwl(?y`tfig-13MxUQ5KT}GmkVV3
zECg*)Ki)}T+lcgaWR-_~M;39{eUHJ<5w}Ca5Bk(X{c)_UJmEI*;HB+!{zYx~y#yS9
zIp{-JPVW9M{qEIgtyG_SXQgs>lRDE<Mp$gzkFP(mg#P>nL~XMsibN*z`62XIR-=^5
zAyq9btSn%qF^y(eMLTLC(#wd_MMP==sjBnykik(pZz6q<{H|RdlC26iGxP=(vfHxx
z$h7Er8x5<RXoxtKNt=K?Lhpg)LjwLFAkGHLeZcT$!UKrBLTI!ZZ{~4h;Xx-3bV}kG
zEO(>Gc$jNIsW;W#oCz2r5dDlYgNzH1wFJrd?X&|MbJm*bI4nEkknI8JP>HF}PuDp=
zp5VbFmi)@VKkIPJat+oHG~F`dBP2#PoK}R9L!#<~#w9od;F*LxQ+&0pXEF!i7K-pn
z1^E3Qf)Su^twGNzw5IJ8vyVyDTuu?T71F3JbsX_N37)LXwj&#6E*x?O{F2B)glMV-
zG~(wt;~-*{C(7^}{m3m3!uR^&IThsm0`ft?I8Z*wAt-uqsI((6liQ1_WE{a}O`WMw
zJ5<FPfvYev>0^4ahOgiI2!uP&17*H9kkp%plI5kRN=@;^IraF!?5Sw{r=SDKn1U_6
zoZS5*gYp&Y>eT~R2j!74ifisleF;IIkF!<@>{vUDe9p!6$~=xN9mdh=`|<FzRaBcT
zW1LPCju%3@w4jneHk0N#HqYgLJL3ja7t&vtpZ7-jtV>|zsXMcD9YopmnGIin&z_~t
z%vfpC)XWN;-z$(CArTRQp>cuwMl<xo835(WHnn6ydiq1k1}IJDEk!2fCoqkpuaTu@
zN05<&s12COb*0t;7=0>8C+$jwWw;Y_1+t+ho+mKjt)u(LWrbi`zLRAenF0}+lvUtn
zFqG;6>O9coBViKs5;*OrqQ;aLLgwv+A)OEn4)}0#dAP*_ygm=XFi={pF|<~|cLkC}
zW9o6OswYyO?~mIlbQCEhipR6NS`nGjApyAbY*uZJM|eq^iRqEtW^L&yH1r_`TgfSS
zvIyT9LEafh;0`0_l#$C7PzZ_$@&)*w&$oQRg-hz6^tmRf;hfkta->Z#zRJb?(h9!(
z^+%D41qd2w^opw4KAbEpJX{Lpo-3E5$DTM<jsFyM0KHD2mM)90-8`tSyK8xQ;ao2$
zsh_;<jq*otzXFpJ1r~uI;|T%<uacsr>o|O58c!TLj;9aK%O?)ZWB-9!OwX;TRuaLJ
z4uYJIT#o3r-G!m1ZD7%|OvJNuWP`kRdWMT$E18omBI)qHt(XNxkVGJ+yuCq#55W9B
zf#MLc-+<w@0`0nxbpDD^F7`hflG=kbEkonBK6Mxzj{0;~TzA_Y1!n)A0RjmGWCBo!
z5M*jr9$I2dKuE`kr<r#)6WQo62Qw#Nd;d%dV$e@X$D;qX|KDA%VKM-Q^%zJr8j5WE
zcDD+51+z764%Pc+i70ggq#wX3=HZn*<Oc+bqrlKQji6{g&xHd5^9MAdwi)yxZm~!R
z#3TJD?&5S+L^>mkR7x2~-YLsCn=~LXJ1%%;N>jy%k~xI&3Dm?>aAW{amf_a>;fo>o
zPCs&9AM&|DREh(rlnMxf9MjW_MUUTm%D{3t;Lx!p-2L$V2osXGCcZ!(?e<(WGxzmU
zEDpSWF}nZjr?T;%q7I<v5RI^%rU%DICeHtfH~dVpbNxp7$XtrgKNoSmO)a>*2UH3Y
z1I04N`ucF~j_r8!wF;sfV`-(Po<1;z`yV@khxbfj@4-1tO)sMw#yrvH`3kw5$E8HJ
zY_vlmv(cox`__P2CKE7vx@J%$6E8978Ucgs1guC%+5&1*!2CgAe7oVp4{ZcmbpvQ?
z+AF|w>UK1hm3CZ4-H32QXf!Fzk|ENvU<&T!7?=!{rTwmuF-31%pV}Ul(b6X@&uF7|
z+0Itnl##5geP~;WruNTz{`8z(1>%e@K+q+9W#?fNAY09t(e3QUY&miO<On3R^p(g5
za7&)d^#QqIU|=24KWsV@%hMXuj|<wzB~vQ=sFlEded=u(btNYJP?2pekREP<$<#O#
z=-m!&Mt6v<WE=v2rj+iR41r39P&J_SiB1>Emlax7hK0ru{KW!%w*ucK$52E*=R+k8
z%*{-r)@;BjRE-v-3J}Kg$^87oCFM;2;$n2~$4_<RKSdpYdDDEiEXug`uhy@=@QrVK
z<Bx<w4!K|1*QULf28|{q6*2-TP;UUoo50g^DLkYIkgB0TVD)$(){YP0k~i&yUrAAK
zHL-tc4i7zk9QWRT1W)ZdfukoDu@W}nx<2xG$x1)eTkbOGZLVM=el|(dofhobyJx!s
zMg_<q^F&sOsv5KV1PVjIz#5HwpFn9H&|IM`fRb|BzGEY_Qt<Ph^mz84X7IV!FFke$
zh71(ALWUVLkH%v&I<VC&WYEf5BVY4GcV&~Y2Fr?e_Iu9rdz61!d$3FRVahMH{_IQ7
zh5|Do5;nz52qSX<HbbB?M-nLOI#8~w1Z7_(2YwmIjR;gGjYtNOu&CBQ`X~@Dn>qia
zZG}Bp6e3IgyOg`m!WAoG$i{CKQhL{M^Z$GK;GH2cBR<YK6RY@85HP7znl59xv4Sv8
z5k+lOoI$MZ-+;bRAL|Aj3=U`{n<6YOIe2o<0uCNoL2-B_S*q^ywXA<+S>5{{yhIN7
zR5bpa*C+aL+j}R5cK+xaUj1XudTYR6uC?J&KZ-9d(oLn%#xN~MEkes#tkV;yX$RF1
zICco|k0=yeje#OCI#|HO@Ou2f)f@0*x1?yao7i_^4i7$c0{1<798d0@!|~%)w89pA
zzk*`HhaXUn%=DCd$BMfH1|1~{b5YrHfUYG5tf*8W>hOxj)LtOhZv-x=-9=-;q#8sq
zHWj?f5+at;4_tO`WB~LvXF)(m3Q1W2IR|opobuZxCB)e`;we@`FB2uTn^TQ2v8nyD
zRw-);SSm23>0Aa_z5tcJE@J^E<u?g}X<T|jgE04wPqh0#sC&wbHmn06P5?Oo5)(n*
zg;SL9$^y9|tx6M+Lu-tpFpWMReMX~oTp*=#zr~Kxa3lC!jm$~bukSswE{t&k-RPf{
zbKTFZXB^t{rKJ^pp%!D5Bxn=hm`LQ@5=Q#_u=%WhT(V^ZyDwRTt=s#sYCM3`=RlNm
z5|uKvmsfL#8~FHN-G%r5`Ip^BDwAgMv7d~qjpvV?oU(^|su@2KJNor2|8Q*ZoF9G7
ztA427Yz+j}dIZODnW@M3>>%`+$b*>;r`n#{Vl<^^mRATQu0Wl*<SmU8$AHHUYviRu
zU!bvSAdfW@>+vJEY{HMfIYF~s$1_J~asT5}xc`9}JoWTErlyt<r+o;50Tc>lZXvOf
zZHIYiSBz)NOO1tb20(prE>Q^>YzWlnG)_DVtT_)T6@igW0+i~KkBFIRYCtt7qQ<+K
z%4Kj*ne^Yyz<cWi$nXjHqfQ$ezwP;FQJHCNcE??|^@a^LQ$)67z{c>qqMuCE>*(Q|
z?^!F4FPQFlZAUIQQ}LmxTw-5l-GG!FfCDFRAPOYzArKJ1e+1}XtyR8kI(k!wG!~zs
zRcmHMnAx62*x8n2oQHLXd@>BCBkOG6{A{;;kEf>UpADX~15S~6b|{Jygi*@RRm|nF
zcBl{A){WtUontuvyfJK9Tg1d@9vE_f61`9&dL&%d=z65m#hMgJgptuQe)7M*7MH(j
zr+U{rKjiK`7QefeJMkZhHvVF4`+bQzfNrhSCvN`nq007Oe${R7tft9uP^}S)FS&JQ
zm|K?D-Lr9$l~_sFojxYgiDO*IOt8_)YRU|Ff{*E~MtriBXe`VLJTpfQAwhp0ST$J2
zrqvZ(@Y=KRAKn&YWu=P8_s`(I2kEwieS1$}X^u!m6$FKT<O+GX)Yh`+!l`Cz#Dp_$
z02?L&f;9i$plLRN#bX-dn+5ttfM}z@q7^}9O^Y_*65W-ezmfl9N-OQK&$jGQZBF|E
zQcDFUgH_avw`y2~Qga#5qocs3ij}=JyDJQDfDGR#4O<y7`*_(NJ>FwvTVIS3W&=i6
zS;zp3RAQJ0q*ZNWZ9kd^ATLG=z9<Uml%ev20+rQ3d5BkVtK~&t>PaD0!=(MxK4AHE
zlGtKLn(4sV@x7i&ziisibaJ|a5ym$u!(IaIUq}&#37U-twf9i;^H?`Bh;ufs!o@pQ
z;oP0W*s`IBfpH(`x2u9F4bdS|8rYh3kSw`~=JSYZ1w>IEN_mR1p?nY{7+J)w>$l1O
z`K6zZe&yDG{`q8obnt-q*n4_KXHV7R6mbCN81`TFj-mV|e|^iX@2EqJ1~oE%N<1@3
zZM&$mv*d<<m~pvmf0pZLb0M*KPt*3WeT^K6Oi-ynq#8098rh`<jzVC$sd20+@YD%l
zFsCq7kQf{3$K`7Wan%LefdA0OiJ4_Qx@Qjee0>HFK6(^~jvT{Es{*eufnwh%{2bN0
z#E&(mz;!Aq*BYrD#sg?8^4t-PU`V4fBG5lc<$=Kqm^?%GvG-@Xi&dedb|5k~0vV=t
z0?H%jX9P{D6JTxLG%Yhcvm=yYHXoDoB#lo^%t0<6gp`@_8*IR=$+j7Q0sgu|mn?<N
zg-bUJp!A<5S7<25Z1dp?+bIZ$BH)xI`~i*97%;dB@QL0PY8-z8P%DDB`lJNxCRT>s
z=(yS89wIK9@$XL8rjv3}YcI8;CI&Z1QsNJ^XcIHvtr7&-GBSp37jDLdTZVDo)*)<J
zUqOW;e1Rq)X`Y!rpb%-zgKGJRSITHF1qkaov}-=%mJ3DQ2EvJGe0hkn8)6>hS@2VT
zCB*o}L+&4Z{>}AYx?cW?IFhD^@aaE`Nw4e_b^@n>12AvSaPF0F8t^ZE|E;&atr~cf
z!SYg@Yi}-$nVHGCD-ZWjRO)?CGbtuB<;R&qXWyMp%ra4G&5;U?X+>K{kh2ogR&0aX
z@YGrhQ;GQ+aJV5*KB~~?35=9;7#beKZRd{TwySp_P8-;JWFC(`vVgnqn#NPl%wl1>
zgw!2FeqbE=z7mfS8<p6U>B1D<<A#P{CjjKjM0=G?f{9yZ=AEG}0uZU3;n82CgFx9p
zrcmp2x&Z_Z2*i{f5#B)ALPq?tLLDYb8r?fHC1<q-jlLj@n6d^RWdaQP8FCP>u;LM9
zvr0Rgg~=MDSvSF`>zX=@r!ISdK{61pBp^u2yHBGyF66*kAXnr`PIY`Q(4K=-ZO!(_
z89GsPIhY&nzSIe)?ED_`3^1`JZT(KXeB${N#XAlWww8djih+C{XN~t^=h}6+VCxvp
z**1br8!9OF(`%#pf_dA3sv@mAh}%BeEB$D#1ZdRrXtn~h+cdyLf+kiEaX`SMZA3Zq
zx`~LYLNgN(xf%sO0PYJhaZx$=-A~?H|M?r5f0}FMooDfp_r#=ha*7@=vI8*K&X9lo
z^+lZjp&PD$UA3HFAI#6QdaNX+Bw~M=h?;F(F&7v|s}4Q42N%d{UyFEiOdyP%m+l&N
z8a-~Cme>-QMng6Q&5J%gpC<G)O|&unmey6)AuyW?91DT+yheGi!ayDv87^Sw=p=T&
zauweGrZ$#q4Lr4f1rOYF91lKl07s7Gv675I42&WeA?BIO7ZUMfN$Iz>2rM22M$b~n
zQ(e5u?6#xBDtj3UE_FI6E$&(U#l84U2Y|<S4R@aM?v(eI8#W@-fXsk|6}Pk{RJK<j
zn<8YTp&n@~PU+1q06K>r#zW_3%7YAlJ827PCo^DCqmqW(2lyjEX#zYUNls?|7_fYd
zNl_}Hb|?{wm<?%{xU$Z-+4MnEPMpq54@n%M-Ad4^%_C_aLq1nSUy#R+;WEzKv;h}v
z8p5tEV_3VcXyn65p2Q)Pr3OSa7~~>q1!yhzp*kO+y6mCe42*yYqscVlP3KL<ZX6>k
z{G>pm1}KtzkIb$I{v3!r?f`|nLOJiF@`VQ0Uo+(Ymyf=t`m3*W{zT;)2cM2V^~qBe
z6m(x~<F9xZZ!YKyzj)o%x6}tK+x+S2n78K|32;;Ib>241)@6>Xm1)lQv-4rK0{9}Q
zA6k-4ruD}zz*1#dNQCqm+nQ5RDhcQV&oTqLc-&m3A+PD$K}!HjT4FYoID8x^99I}{
z75WPf2FC(iv26%fTumn);^2WLJo-Qt58OS2$Dfs0nCeF~F@gO03S46P`M}ZwiR&jQ
zj|-GW1Zch`rniO3MCNsHBqq?Wv-i)o<uV?Bwkasvdq?V3CVMt^P0`=-m(2tmA?1c;
zX!825V`X-s%>w9g={d9ZA3bO1Pt2*A=~#O+5xLWqW5+<y204I$bp6JN3}ybPu>{N=
zl+dB#C`ty!+JIqd778(+!Egvt#E8Qcw5sz^?Ijd)O{`lbu=UCu&OYxvTy)7AtX?&Q
z(WVFQU__F^z^GMirM-PkiLg~bvz9}(RYbL!L#^SU6**|9#7!`hd|pAqC5bayHKr-6
zqA5<T2zX8+VOWUSbR{hcVV0!e?hJ7-XvJZ?q*UnVk^E}|=e%K!|LzapQvXk{O+K+Y
zKYiBm*8K-gMJM3Cn8x4dpTD-0UibK=m){mnth&UVosM1l1Sp!BaxdFzYqmz2eSTRF
z-dylJEl0JlRdwxD2AwGwI;fx21;|W`$T$TSa7;;)0Gt_651LYIqVDqcS#k!xK<aB=
z_7Mq<wgMUsup%TD5`lcpL!l1z9ZE4!P#74K*f8c}!<$C%x*yh9nQLIr<25{S&rv+~
zw8Eiha;OehAkQ9zC>A;TQx-t1w<a%|)M$p50xSpsw1Yr)8HHWntsF-)iq5S(v-FZD
zgz09s(Pa8|CoAM;?K_?bv?ID1*~e_pF`}ngC!n)I$YxlbC8OEy1kvMkd7+13<0njy
zQfJcjqY+;}Cy4xnnS&Z}O-r&-x|7++>ljiK8DQ8#bKyAR>R|-#Jl3pI*txre3wN)=
z1?R8ArY(ag4w6(*roKs|U<uk=eWXvi2=}zn3I%F44@)&4D-9R4a+PKjC}U!!Wm@p+
z+3Sb^SgH&nVq?-WPpwGHpNyVogzXk!^ImAh&QQ|lA|#(PEsiBNBspaUFpH2Mugl$U
z-st|?|GYN(jUQ?~oE96KryEbro@!3OebFL+?wql5a{aUCoqMg^u=es~b|$8ehChHV
z>7zU2pRw}DV6z&RZp0TS5R9Bac7gJ?XI>-Hz3}<_p2;`@=#1{OT?3wN)3Gf)azZYt
z|GIW4CueX2HxLXWQk#qZJ|^tI(`X5es*;#*I4B+RP&%eirp+&v1bu5<TzXAEF1<}d
zH9{PDY8g*_;RGIk<RGRVEupb(1j$tcsBA5<YVOJbn4UBZme?q4u2s9-((W?g*KA7!
z!Z65ju_kDS1EkLrp6K*WGudFfH8^9`X4?7umhkFqE7fm15N5|g&t8E{HY*#WF#3C`
z)Sx_$#62nc=SNvPh1i>F=@<}JsW6jlh=en=n-Q8P=Fpy>g_q7_a<qwE*SI+M{C=Ew
z{$`xDc^IW(LK3a~a4SYq582W1^G7s=X|^ZlE~((al)`<V5XPxy^A1M8u%q$F8B?1K
zpY}XZHfRjql$v&tC|x7wb0*!7Y=Dxl7b2r&>;&r4_|!(_9S)qG%H^dBoR6%?o8Gh|
znf~o+=}+ISo^S`S?by;&OQ(_(_&z%T^Ntn$^~F+h{X^TfUE=QAc4IU*m%1c{!D8##
z7Le{#Ye(FJ-ZrXhJHt4c!VS}JNi5S)O1THlySUAIr|eO(sV*AzG>acCHjqU=))p|T
zLCk3<!x929Y4f$n$!NF)AO;$Q`4E!L7nMo3IqDIRNRh9m1QyypO0zzKIfe3`1f@QO
z!blP8Hw9RK`4C=}q*&ft$G$JmVE-o$Vm{4bc4Pq6wWIJx`!PbyK?&4I6qA6yP88<U
zQ%V{?W*oq*lP7*3F#stUAhMJdtm)|FWlU!#3T3iawlmO~bhBD{YydW!$ULaY1gsOV
zEkR=aWuHSfE<uK%T(b+$9RvzP5`IylI<FB?nX?pO?#U%Yhh|ZTmau9t!M0rv&N;7)
zb9QaQ=FLMWjF!yhLa9s`A!&rhu@MJ>qH;`Y$nEdxbupV!0(FI*w*k*Sm16FMgF@M0
zA-p?)R+W*#(`*6j0iXktb^;D}K)M@+`8}{D5x<d{M0mF5jc;b5w*$dii1Z%S=t7&W
zKz?G`eaA0e86H2;9R1K=CU=JAr3>e4C!$lu35f4I#n%~-1NwD$oVE7y>n^+Go%Q7<
z<wwNt&AL0CCT}*d)BS7KdguKQ-HDw}1Y)fxG7QuI=ik|s&19zCM>=_9Z0`kZwBj<M
z3_huzHCil%MM^n7FR9=ZGQ$jLTW~-Eo)%2wt>IE}`c6T}*Mj*ZMNgyXrYKfY<W?(q
zYc(*&n!1P&w=n(nCG2}(Mebj5Rbk5rhAtg~dtpDkK8cF$Z`UKur2^>y#4X!GqfCfX
zSQFJ4KqdH-Nyhed_UuXM?gr?t{?7ISu-tcGz|kOY#)JFmwPvsi%{VFGzGWb;lHMVp
zs~VyS<b^<g$-(3Zl}Nznr-1?@x%^BMN5586IJ%5sG_hq(jPuSb;k*lmv3ctd3d2-y
z8NLm|1PM>x*^UE+T>3fPY?pw~m$w#KezLIg;x$_F08AZ~_{86vDuLF9n~6T^7#NT^
zllvDvbDq5J`=oA17wqitA?)XC+M_~Jm&CJJ09|`Vz{SY6<vopxP#D?Pgm<eK{?c1M
zTKe4Q?)kt`{{!!&Hsz^66cXQ0<M*7h7!+^#+sW|@e(1_ef4E*-^8I!~Y<>&TeUlT)
ze56_TWOv4MIo8PoY+7n{`*~3%eGqovJ>Sc&it2g%jyl#i7=O>>+Eg%8i0yp%gpSju
z9wVZu_(Gs183nqLELEoB+a=IY1{zRX%+cJ_F9?C6m!j+|6e=maNd<R<161faW2sLx
z)zm$+IQX?i96uott?9?WwQDi4djPo+3EG@SWkPdV6XwY6GZq{rK+TZWItscO9k|Pn
zx396&$G1)(TL!|C1O@}4Ooto-IRMVUZ5c41YCJ$x<~jjjB!D2<`H`M#E{@TjuH)f*
z7qRz=Iwpn2#&J(xa86O3drlD>&MKlfOg%L+c6uS!;4?>_89aCWOh(2ZOSS}sDUl|_
zNbG8GGV+j?hBP$7w!q{%fzN+X;n|1H0+W>V8nS_{=iwQ`L>Fc1{ESGHfuCImkj+Jy
z>%d?uG%Q67b=GSj`m`jcV0I_uU5$XG&5>Z@!WP=+M&VD~{=w4yPk#NEk2)X!V`^cV
zL%*CIfO!f>`WTXL`2Df|3x4&wYk#EPs8xbSvt|0u8KpA=?RqJm*(J;PJ@eenbQ?FC
zvlZ9f`TY#k%4%Znd0Tm>Y&4W=y3W~|G=NW|6a9Nq?QGYc`C9_VNE5$X_tFP$lyix-
zXXK*E0g)5PQG1ba19Ap*KD5-ss{2qj;R%5PwUDGn+0!VM5_shVVo1YXOCob*a&?fN
z#PnVBIR0pYg_;MwVF<w`1MtopKsxAg4?S7};<}->a+I{Q2-(t(j7()-a~G-SEFhZ!
z$aDdy6-HeUTF_xxl>JuwnjSvz9jpL&Fa^9i&^R9B_!BEQ@<<i&(KgCaf{C)m_Ok+9
zdifBx>?ono&twam(kF<?dKq|>oYJ$gv$lAT*QYiHMR=>%!XRy=(F(!0kc^(PpxCtO
z+Fa9{e~+&cSURThZ-1LIenam=7ST->-)()e@n@0W{w#9>8Rvo>fCWeSz8O)9IyA=k
zjaGxf2TW$*3gjG(z!B*4+nBsE!qL)V_~WnsXz57p{&(zceC!`y>{38{zv}*B|CMha
z$Y1h-8?XMMs#cSQm0Gh~mu3iZ&ynGPe3GVkH~Se(?Pbz>^J%fhf5!oI&}p-Emofn|
z&`#v<rv9`V(vk>_1F*`~_I?>a#w)`ad0@5Jo{K0e6&xW*445+lb_UF=w~RfaBM0Dl
zclt__-jpU9E{;G>Qbr({>RS}Vn59fXAt*=44I~hwfV0K}3dBH(k<Kk*_U<_xy>lKX
z4#%ji?uWc`9m?ksQ0DXaakxlpdW^H9l-KYnOqSJojh)39me9l6f^;K+QDbyYK%096
z@<j)eE-+xWqhqSt#$%5!;d5VGLjC?ZM8_0X59G1?nj!4IZWvoO=TRolR<yNPJ3&lJ
zNxY8BeoBnG6L@EgGrLq6nI{Z^cm(8ds2xYkSX&yc7SN)lpyUW>7Xdv6wQ`9DP8m>E
z9@x)jXbAZ7-=|oaH8Ud2T{25R?ezo8eJ~dmX8@cTWf`9}`pf~?_m9a~S$5#`7{AqP
z^yqqEsWmgUO+10Xl^F0^SaplW12YH0pMA?GOY`nmcOR;K<^C7b35f4YyU)95N56CZ
zQ`cYq_G-DjGnid$NV3}u;m^{0R;9}@mY$lub7Y_Z)waFB6r<vdWm~e0d6>?J%-Fy;
z*8HToXMd780G?{IpFMrRrgZ2L)HJ1rK_NO$NE@`AoCRM@^x+#xZ5u(%{RuY+IIT9d
zHGzo4@S`a^ju@o*FHOV<s7#Ow1wTPhX~P{=z=RKHI53kzs3X}s&(2`qgLUkkm6#u^
zpmNzbwq3po#k|DIY{~;vM1EpH+)T}YCg8G}8K&`CK$V;&l`ln?wG2tXBqxF9d<%<D
zFXO;tH9Y(1GLAi4MbJ_>cdQ>5>=?kd4Skp#FC*yl5EccT%^F@sF}I&0I58UqG5tcC
zcC?+AEc>z!$Owv%B9JlgHbr+bc8d7K)v%GCfjl;PQ_FL9Lm)8C4rEylJx&CSjSHN3
zI>E!AHM<4PDlh(UJ3GXsHE8axFx9-rG1#sPe}*<=FjB521E5X-X9B(2iJS!pNq7MT
z0>@?oMCmR#0z<_nMqe$}M?Qa_`ki0?ioaa`)T$HJCuUwOCm_D(h`+mepdYs!x$L~x
zxsz+J!t`8|uKA8c7vGZ{0EJ}YpYdYG-fFc2^>^mFjXXpTI&JSm4y2RHcQOJSb?Aek
z4}?Zw?JMU}z|aYK(^n4wXac3J3p)#ivIv^>&QE%-tSso_1za9jZGXqJrGsfDNy-Aq
z8RUurzONAwkVrKy*Olf**)M5V79A=TQUt{aemRC55YXcuFyg}%zSO#@qCLm)^ylaC
zwL5A!sPowR`qkKV(+1RQL_bapeVX6oj3%r&ZKjXG%ehQTCaNpd;f<9h4nMPur|+J@
zv8R^Mm`+fZ0^3IVaoN^koV}wTlj9`mO|OJ<?*wS4W(>IP;OLZ#!YvNQw*cuJp>S3v
z=y@zbF7;C@n@+|~^*kBBP2(dAW>QO*#)J8*)daLM0o`S>c3vpsdr-zx$O8jq;PZb&
zX^`wSZf<i5n|XE&-bVE7b9J8YAbLxKEGx)VntOy(Js~**AaKwG22=L=u13ib7$`L{
z@)}3|@t@rx|K@*w?eJXiPdk@dQ|%W66cpcE#DCBoP_KDl*I757bN0?RM>C5gW5Mgz
zta?jlQMa-2&Y$)GKQ<N5L>w{)kUdWq%(LZyffBfHYY==pt!B4@vFFY>>=_WmDSpN;
z?}_xi#(h%9p^E`@tA_4;c_+i@NikVhkFx^Zi4t~hp;IQ5Dgt@J4TyVA5rr@VBLITD
zLkK$%IEu%a{bCGvIE0=^r88Qf`BvbWHs<$A-0}G;{{HiO;cjo^hkyHejI8cQdnw_`
zKT4@7UCtLA6w9WqzO+!sfqe^j^uD7w{KO*kg2d{43A<L8aPF3V>{v5|wPQ3m<Myn;
zrJP$axE3}AR+e4NwH&M{iK$tExme=|f6H_(lByY0A`eT9EIQS!e$S#jMf`}7dUH;c
z){{P9LL?hDeA4PRGYvfA@VvR8Y&<(-jPoa=fb|;%9{H@s;YW=c6FLTL%K&@LWwK}4
z6eO!6okYLx!3Jyz(7^=wzUF)W%mnE+*jWl&9?)k`{*uc9tue7GMCAq@{p`<utnh`e
zeEq{y-ao!2Buc8imR|A>z>yvX^sE2-+R@8?{>t6|p}DXEpZ4CHBU{|jY3HAOoFw3q
z^$5DZ%P;^I>+Jlo1qf{(m9f_tAF#-+iR{+nTV>s@17XPz8xhE1m@=ccEoAO%?~_G}
zj&taylqUg**@a^x0beYvwMTWoUCx<xFL*YA7;~hNN6rA88PL1}fl0hQ+Yts`))E7L
z3;A=ZXwE4-^_eF2KiS4y!^fPag`B_>&pm<AUBqv_?>4O2IfB_~1t*Xk<z}9n!_!}z
z!7~reW9e`eMWL{BvJbnrkKw#?$FOQc(bVuXpAcHhv<m>EwnV+<V18L(YF=QvDzF$y
zYQZC>GAM`tzrFVWvh=#n1HV7M*!?>9%=84LK_Ea9BnSr46hz6^D%fS0w7Xu}TjjFL
zL3Y{Ju6Ii=Z`oegZmq*^sjOW&N|tPyDkV~Zv_z4TD2XCSfB*pu!VD&-p3ePV_sj47
zaqFCO@BQ!V0p&zMXs|EY=$;q<aPPV2eCIpg0hRfF@MAf??=QG$T@{W5@9t49fF1ok
zR=YgYn8p2Pm!1rOwlj(no+MNeBpZXlhl~b;(7kmUS?-^3Ll%}CL@nUypG&!Eh<JXA
z+yey)EBZ1oYBucZzN;*beq6Dp3&YNaK(QvZ2SGbO-oOB8oIpKRLxwXC#u(kRH~N7;
z|MT_hTVMXco6)EL^;;bZIB%BgKkI+ncP^B_?el;1TmN!r94(al<AI8v%_d(|^Jz1z
zJG8354<0HnEG2QN8GVZ0rMw6A4T9_0`F*u01t#GC=$)B>FWn7R!%>b7B?KMTZldin
z@(;6Q)Ph$nXLU}QIrMt_VD%!Uw4-IVsEZ950G8oWxB-EO9E%D$hZu;J8c?mNaDmu}
zs!=D^6+QZRj=kG4zVM@)SZ{YQH8+LzXcu3;@gjCRO;l=&XtzUnwG{v0r@jjd4=iKj
z$}T?hZ(hL0xiP-uu?O(ck1pVz*$Ph2QH2xX3$&tQWZbJehZ{MF+CX>DL96Ryx96Za
zaIrI>9u7ITK^MCqiFHk)qU$qgXZY)Xn@VPV^amnL7{?BA?AZ&UDn@egbv(}^T~_(O
zuKtzBh}BT=7_>1kCC{b<7++gKfQg6{01I=#SAH%<zv*&Wc(Ie`D(}zPBUdQCR;Z^K
zfZ8iCSyM#?F2KOzZ>9)SLo|g6=<vWLIXA)vl+-$9fht*wM?M0a>%TtuOF#IT>3#3F
zA7AZ1{qkFB1irycK!NM0f=3oB`D34c&%3{804$aJ!wx*xqy67BWweL5`--DJ0sq^?
zei>A9N`xSe`E55sKTkLScYh*qix|PCN?5)_0XlkuaVuLRhN)Xc^M7<72)6uEK2&ts
z;eS}EHQs}0CsPxJ7=fPp0N#y^c!kollkev?RCJIe04lqVfMK-T(~d~uq0B-I98~H#
zre>rz;pDp=Y^~+^<Ud-+&fYGT8guy4?JwhZul^p8RZ*)h!;K;=E?2R-+QMJ^o_~R*
zduFk7XNaZnG(PtDN3poLgt>ABr{5bO^M*)!L)OB`h7RIgANxBFc3KWL+b(v-K#!V!
zvQz<e9~1T)$NgFeH6g~G=pT@K+}Z)2{=F0*{tg%2fk>H;hB@c!rEp1hZF<jL{T&(D
z(^6~vH<7#b9&gF8Sp+9FR}v;biG&(`7aix)y$&vKWnAe;-)ru(BRZ@iyC7JC-X`c)
zN}EBULTiwa?Y{a9IUw>riw`r!ziJwj_zH`hP;5%)!YYs=lzQo_37+_lN5jARS2jlf
z`2TJH=0bJt{@uZi-dlwS_-_W;r<#56GiOe|zkFih@xe~3&pRCJ<!Kt_8+ZZynC<%O
zJERdf)!0)&cVz_hL{M)g5Kx}CQ-fwftLj2(BQ0;C8$z#T9X-`llezCXb&$1LpF%;F
zme3}3Xi`oSd<9+<L}pQa=oQwWPl|7<GCtH@SW}dUcTRtEJ8mlRRXI=UTO>X9WZ@)D
z2lqTAlkgXRatjxCw{WU9kLPxt#iuX*TO6ysA7}3Q6L|3KlX&z*6_4FRrK(-5?XKhM
zl`gIv&vE|tHh$x4pT?_K-iuHD>Ky*WM~>qM|JHE~Ix*T!7oE0)%?)6yo3pYxRcWMD
z^T2XiBK1XadP0j`VG82L3lcBqB<T0oz6?C^l-$1|$)AznC%?Bq@A<mOW2E@Y<;V>5
zSzdtb_{DXWMX$kOJ8aat2L%C&fY7D;99(@t@FzV|fpcY!XcZMT$><lA`m%Zw%^CV!
zMf;Y50L`UPk1G$*$z={Q$H(e0tm!DyMxx-R^ql~&e=&Cd;<tZ1dG`4mOTYK*xBhe~
z*!cc2>)s#2T7ZiC$OlXQ(uW^=@Vk1wA<A4>VpwQ;6xwv!+n-$chO0LDK0DsGy#)QJ
z^<K>@q$U>*DN2}6v@E}T1O*i??c8}xEuvN2MjU(fT1`x5B7!riLNp;tqJFdkM>jvU
zx%OsWs$-#PrLrD8CzKH&CLH(XV?8AG6*M^`0t$1?&HDJvzuCd7=eIClZ(w7zjnCis
zB<5@PVt(!k9KZjASbC^}>C*{U<2}4Eg(tu3Az%;KxCVUYCE(|Oqk@~OpT>iW--%!N
z{S?O^s^ELScLuLrNU@*gXjdfXPw6yX@C2lD)g-y`%5|q5pWp$t2&LPR(kILugn@(2
zJHYjeDUO{A(b-EG-Dh$lyZK}=ROGH=efb>bXb3%AEBLD2U3Z1PYw;VU--7YTYK@fD
z=;l~nb}+RFbhoMWTi**u%_Dh_*di6Css*ljYBF!^ngQAMSwLE=HKio(YKM&C4d~6z
zQ}>q}sj6#5=hccmcl|;T{@p+QCwu2!-TuDe=zZ_s!80$u6`_FL1>?VRQ0!HL6QB4$
zA2{>DtWsO_$8iM5BUnVQPH~6T%W=0mpbOO$uC8Ky)7{<r4CV~z7OnOWqK9=<7URwO
zY9%#bbrO~dNs};692O&?9gT~Ea@vu&zR=~rjr^R7c~#7+ZIVt$Wfn-KcQh>%#%-r~
zp>P20vQSBuX9@MB(<nG~5TYHHM6alzg;4E>e7y9f4u0!%*O4JY5Y+L-+n<M%hbWg%
zA*`H6JaW+KBp8<+3|D~5GbuK_1efCkFZL1)h}%E^Fk<+)w)-1s%#`qnPi^34bA*MH
z9{R+nQz3|?<Oukqa3lvc=%tQF@qj46x#HN1F<>!IZmR_)ib@N_#Y<1e@O@I;Epqod
z)|am6ay|65q!MNw@9P_=GsfCTiU4jvk-zO#kJ}r=#H5m)HclL>w8qkXo_HRtnMhVf
z?cS=#pZtiNSwT5b_m7TSfs=B7Bts!ak?x&5&J9tClb~Kl-$&0Aq{6SEe<zahh!O{5
z7J+ebV=Ka9aLoTRAOC3L#1H*=$*(G9N9QmY06EAICyzHu_x`anr#}{rNMc2;Jn5l#
zkl-`<ZsFbAald8;7pcPH#p<=JcP~M=E)UYW0L9CT_p@%Dc}~ThmVBQ6&ASlYC?=hl
z*O>*K<}SsC6xK=jpmudbyH^X|fL5w5U;oG(oMIvoeV-RT31P~2>mM=#RNO;=**%Xs
zXl+OMrJujf{qI7zg6CGhjMerf)GNo}c{A|cDn|W2_BMg@F9I(<3nY~Ot2+4Hvo3z|
zbHMLDy@A!$uOjq9w8!h{#FsGcrTD~8ZDHYFDU&5mJu?Vt;*N6eX_yRE(Ge|V?t7q9
zbfV)Y22FJN_!=gpxa;ETd7#tIM7CY!^65PJTF^CAUW006##oF2_bdahvL&wG?TgT$
z00dPAz~#KJ@+|0yUJu-UjKVAK&Bz8g<Id9B@Uu~3PfwN}VF$dBbBFIYKdv4VgHH7b
z?8V4^Gxt*rf(~`qYf>ST{1$IY8wW~@riq6uw=@6SANf#pa^{{VD)|FX;w>28Ko5W_
z-d4V6e)<8_tFsBE{J7bItWMI4S6Or2Wa<wZg<mas`~yd7WdJx-7Cm}_=?;VhD()hO
zQb<O8Kw2HcY!YhW7n3Ok?fPW79hVtsWC*OZl-`M`jG4UxWjLf^g}v}q+^AKnb&RZF
zYYlek9fl_bc>*Nuqew60hELB?t$>GL{=^10_HLsRl+o;M<AwE4p;QjwQumr*0j1J3
zlbw=?T9xP6+m+&=7rqR<{CtY7^=&kFE+I_^T%X~2HQed^KEhfbUww85ub=PX{`)<Q
zxsAO@Uy<4k?dG!B6|FcErAB>j?8zuMNM9TJp;T+X>*Lz%F|+X~e9*>GFML|CJW(jZ
zQt2CgKX?XcJwr1o)K0In<`y<!{?>+AaXN@bOqzi8d0KGN7Cg-@BcK<)y1)8|7rXXO
zNRLJRWI5>|J1!e)ZM1p!S4KcBd@>M}_T<zjRUuQVR2u`n*OUqsU5mYTf-I`J51x2;
z7UXCCwolybHyH^01{nZFXhGwtdi4b9w^65V!_7DDKfhFwdDN;_dG`asyuJ7pV~Zc3
z$Qw>v8deHAP!pg(O8=z|gqbL^brUjVR0woPpmuTQ^^qYUmyLE|*|{_mO~s_5BOvan
z>iTO`taZF=rMGMedmSps?yo4V>=w(;NIxVJa^HgizVx{^UORsSL72dE%6Mh_vw$-~
zIiy8Dg>q>DUJ&qik^vys`ow8qYa4j+IbhHmA{y-?O(W*jP!&+%PoooUVLx6)>WuJ9
zpWMK`4*^qU2Wea^WZvO*x=xH02dKizQ*E`idbja><a|njhf6PJjIHpFZ9mV~S!Z-?
zgin5J?@MNZxjWXiw_3A_4U+7QMK+^*&Ol`j%&)kDL(rnnl*?~C0NTxo+$01i_7doC
zB~i|pg~dK(y%pLhC^SqRSB$rGMB-ha%9FVjygVLfIZLGzCnCxyEXj#LiBXbcOh2iE
zcILQq^?OlrPJOHIP8+o1ZSMg%2x&)Ijw2zZg%ts^q~2N#y#AM7@RAeM^{B<)YExGv
z9(uh|pOi0CyA1zn1qp_mZ=}HF$R+{->Hh1Iuz;kKcsH@GLvgXiKBygwc4E4jWCWCM
zy`Jc@sI|c;JPHo)^#bQOx4;StXs4LaJP9p9655q0zkcQs2e&Ve@wwl)fZW?hEm+2C
z?`3QbUq!jpfale@O?nVi%(bNjOW<p*?qKZ}uzov3uQSY&gfi-UAZ(&p7T9sH(R~4x
znuC{LY~k|FJ|210M>HVtO`WIo)KJ&M!Zfruq`e>gx8UY%%*th8{U&h<QkG`tI9x5b
zgK0b+PEDo+3zuJeS2mf<zUFo|fS3dF9x(!gJ}`IE<^Bj{%yP?>XLmkLktWm{j268Z
zP};!-qbOdh9Xg#A;kcjX2Q7Z`8i}}+sYNbcoiYw0mBzci`q2x2kT`G}9`@n5oh~BJ
zEiJe?(ZCK(2tasuG#rgv*uB$Yh25zcmvh!48SgP5r0e$e!ZiP~T0F6fXKGeWY-e@k
zJ)jF_TtVFwQr8ct$JKweFCkPx&dms6<X|s3{_iBmuh?M(kfRu`n6$;;#uKo1eF3e+
zD=@F;PPeuztJ6>X9LKpdsg~~{wvdBQ|I&5z$6IjS5OF%d<>qf83@WU(<+*kC2nd8#
zX*9mIL>wXvp}Cb~(9JN8B9|L?YrYb@(kXnegx%2v43Zr_j$i)SJuIK0_+4CELDUOy
zQ={RmsHBm3{i7Fl;q0+I_-N>1^;&|dh6<;YvC!!~{d!|mEIdZL|9qJawgxaOzc3b*
zS)ldHi&Zs7rAtC-Na{#js*_7DPly2{10Ze4I4n@%03|3)IH0@)!369d;X`ov#+X2{
z<CF1V;ExT2<C51TyS`un;sp@dGDG>e1Ap1aORx5_jrN)!VW%To=^-%y8R@rYg9}mC
z%sQ=|Z0*K2!itBPB_HLw?DkIXaW5z-)wOqY{V9duCqJyxZ4>!^^Q5ZoQh0!o{?Pw1
z3)AW;um83dw{kHi(s<@`OemsT09v~<?-<en*Gzali8WenWeBv<nLw6RYSD%{9d2+Z
z6RkQ699!}5o1fXj>c$;TU)6#+Ty6d~B6Q&Ub$DKb+fsXOm0MkNH(g$J4u=keICnca
z#)Q}t7?8)V0Hx$zNu4wq=L{ok^<P1`mf?lxcX9re5l-FfGF_LYv9)n!sd4%eakcf|
z>KT<;)h)W!Jt0{>-^cayDT{Lmja%adHi@S|{3mb}jipHFA>V7=uZjC+oW#QH^IE4Y
zDwQ8oZT>Qa0rD>Ho^F7@f{<i99hDtWZAl6*;GiL3&`^3-l0h&(mLXsdfPSlVDz$a<
z=Uq(QA0Vw~_{^{0!pm2#XRYyNH_rCH8s}|A2FTy;JOEifvAgpN-O<+H$=q(%+DOnJ
z3~=nk5@u%Vn3^UFoMK2Vph%vThl=W0pU>3ym|Si_5w^d}C<Pa2V8P8%4=K_Rzulq=
z+r>j~a9Iz0s^pce7G(N4aWB>Jt9k^=3ky9|W?@Q?2xCc6U98##2}8sxP*ohWXr-)J
zoEOp_1eQ<xIQLu^&pme;j^9Sfokz2O8EgF)QLaqGaZB)>DYy=Sd1YSEI={>}HxPh{
zh%nqv-MH^UVRT$-b4KqW?n4c&!6h88f0)x_pZm2I{=5I-1i~QYG@8=URG5WyG^Ub5
zor*Jt?*J%AgW~8?=yJ1G3Iobzm+Si#`N1-}a&d$=QW$Q%;u){gmifSU*ngY3V|fPJ
zn9~A0c29uSi;;YoDiPNG9fiy%{T`X!tVBRHzRYAb#rEX;uL{6~2SlE$`diIo&3TYO
zGiRy!pyr^~@VNB4(;ea5^DSJuyovUH6G3T^H2b&8iL?7pQ%bqK;Y@wo82~xJVRrSE
zQgYw3o9*BG;F-Da9kp9)VRwHE)#+I*A794&VgvOV593jWK`&>CXhM|9!V2Mnw=OOZ
zmM*iRHCt@KdZp_La3Hx4eTS^)Xc5!rsZwM85@Q%lF_KI=sU=Vb$O5NK#KGUCQh&?@
z6rR71XPIiOCy0Cw^Zg1Vz)V41wMcYfT128upo>vF2XiMJ4Eh;<_jfNNb#@VO4Q-0c
zt<S)tx?zWkda7`#^2YHQ1E8j*69-IgFSRG<>r9<>R9Zo;EGdj4bx{wlSH?Kr!`|>Z
z7HW^<{Dn<Cd21HOPLy!tdd3VzG6Ztm3N*ELYf@q^QgQ4R6kr`W5gsty_i^)5f-{d)
z(C;ULB5HQ07!LNOl=g<Xtp@K=o>sA<3ta)T-<tw4{o2Aaq)>|F!^i`muFomqpqlEf
zZ>?VFR*{+*2knb$vXPLJ$XGG}uI8^Y9mX@|g0qr?Qq^PKNOHOc<1udE>|%9w8yg!t
z7>x$-JQvk+5Z&p#QXj^vU+v|ueI9SY_=Zw}(|nK*@yegtY=@hnTX&B&o{Bo7-Egn9
ziv7JURBN-CUtGfC;tU$|<gNmv0U3h~@z|AJmBUviOPX1r5nwI^(v!m!6{s6x7<+m-
zE0>>sGool8shJ+;9mTsW17dv*ZwyS%(-W%LR*DiP6%HsoQ>bh@Lt(-QG6;fs(5{+t
z)_X#UrqTeWW<C7ouU)}ji(LN{74JA!_kIh*you0jaOC2-1p4{#yb!)ef2)0oa-K@%
zhY3yGZC3yZVeJ*65E~7L+OE6sd>=dguVJS0Fp?z3Ghc4ukN?RPtlr8wRyAOq@!eFI
zGqHx0Yj3WqTqn9NB-?%a@(5?&TPo7K*6yZl7c&7V-){ko`uQR(w3@`)7|;ZUb6|#&
zbm2HhZPr0;7TDj)7^5nfsD<LOv}v2%8dxQmFf3&ZbjYetLsyzofmylkqCDks7?z|N
zTKhfhTyA4~dk?MseT;{FWO<Jnr<HPpy55ae+t1eb1{ZrhJojBm*3aJT-TxbG0OUpw
zlIvS;P<!llv-H|H8e@6t$sYVh7-e0z-(SO^zk`i63JK=1ur!C+`8wv0hn(vk_EO%h
z$X(S181kvQnT41EvxC|jKi7(>zZFwZ%imj6AmbV6szGSAVcskhsC6KHh~gNCtIlL1
zfiQHfg0&kd+=02^N>xalmm=FRY21YR%a}avUO|r8<329D+{A_RuOskB2%H)8#_L!c
zK7%l<ONijrIPPcnpF#n@LUaq`s_;Z59X-XqlWWHrPnDij<&0d?D7DSxMGVGwus^zl
z+0wgk`SLb)w-+(L?Bn(gDdsVaT5a@Qx$K&hV@!mJ?I~7pTmmIGRtbzuQ7U^FE7`IF
zlgPQ?hmSOKGP}Ni0uSKS@ML#r4Xze5Mh?>24oo_bo|`}6VRtQN10WMen-u~Zv~rR>
z!mhp2dysHVogoR05?z~=s4Fh2b)Pi{s98uf9%FsCh3%a^Z13)&+vy;tj>AsO*)c!x
z5xC_ngrD@IZFj5lQoR>lzSzgPr-td;{#&v5--KEKx%j>K)$^G@T3PS(KeIQu_QbKq
z`?5ym;X&@z!zk~$Nxp}@Ru}uNHI%|C8gmP53>q_aOgB81e;N)FCZLdE5S^|ZId#IZ
zEG`YLAY}Uk{2G-xFsWcG_E&E-|29~G8O6m{JbiIK)vl>`7~QJN{PzGBLC2EjIjtM+
z*QGo}4HFpeLw020mQO9Y=(J)y^YnSZBR0Oz|GT*ND{wq%J?=OGd{2;n@&Ft+fa`^V
zBj^;X5;WlnuX-tHRe#y}W%qX->SipRZ*$V?avkjSUcyZIVT_0Sc;=ZMJoW7>SX)h)
z<;T^EtS@LeOWM;h&XcsvC^!|W*P-vC-S)74E5g#r8V0)whZcPOl!KxPRr2}j-cH;+
z>pp4l))=6okjK8;+`OFrP(b2nlr!b|%1Z~S!;{_!SC6VL$Mj8P)ag}JBkTt*DpM|M
zwCF1YPG)F#d$@ID&)weI#opc?M&mxwwKK;{8A$a*557~$0+f<08=^nDUELVn3VY)%
z#QDu1?&Yuk=s4Sp->Sv`CN&1pp1_s$*xUMGl0WkO!{*k%nhIZ?Tbh0h)8&VHx!dp)
zzwgJ{2;+E&t<8OGZ-xwPHD>29Guy!I>=a6K9&^z9os?rY!3*R&7#-jnuc9u6ESqJm
zCk?lCntbfwQr9b1+T8Iiz8icwa6cye1pU3n<2Ab=A1?12va!e_EWXc%6;Ym|l3y3U
z``Jrqcbn4E+?~OC=S%2it0;xD{4U?EF!E2gkLXt(En=#3)kzKNYO9KwC<I_vTJ=p7
zo`g04uEGF(xS1!V&t4Us@pW{DH&G8y<MoTT@#uRNFuxdJdqcDi6Cwc>*qkN0E@z@1
zrzV6-{z<GOw+nXz+`Kr#$$N{dsINhhCe@eKGA#UZN{<$WT?Jfgeb#~dWFE63JDN+=
z^FGSe07*ogPj%d;2c7k1?bUcLf|7?)B_O^8IbMjOVYa!qhwV#y*xA{^px;4~4v;$$
z(Sx|5X+W$vr<R0Hn55YVqw!9)Ia&+b<Lek_o3~P@{UcGn`iViZx?jx5w`TFbiJgJu
zO2=s@i_@=uGV~Td6UC>#yWPC<zt{ZZkIz&d!EEi(s2(gtiIarmY~ZHoqd)AT+ug+a
z?GUwE0}D&XFuO2|TBCxg8IS3blu4kPa^j&2;KRPN<n#rapV-ZfGSFSFeQ~7BRTlSt
za+fKvCjEY;XJF$42aJk{OKLkMz^2p*@Z93=Mk><O(JT#WQ$Bml$EEW-xN_|}ykG<m
zB@E*YtPQ?|Ae`cb?K&j}>}cn9TuP~W@VpXyHUO^L)uodS4cfJd#U{tA-KGMwpcJ4k
zrZ6NeH^uhgIZVyogJ{^rOXqg+EgxCI?slU1`r3stpQ}JWenghj0fruzSZ8p{We;1o
zh^m~hM__2xvg4AgZ~8duTR>?%9R`^Drc=N63$5OfIwa9hgMIIb3Fyx`m|k+Rb1P-x
z4gvLKgJGD-ap4CZDzyNWipMf-!#Ku%dk?GIO*C6gbUSS_0?0_0-Hk=<DF`ypsghP>
zLMmtpdhTd^ySzKT6ZYae7^izT#_7&a#Ch|V6KD5ooV0Dh_P2ELzsaq^ic21)JL3pD
zzv{bFpNW!{cXc~g|K?Wj#lJLLJ{!(eA4IjZGRU17M9#=hyrG-ree?!H^lmh<db@&Z
zeFk$2^H^AzLA_Bytr39ArALF5e`nO?mA*)vYq{wrRrvL<sXZ|yv@?rY={!hLirRh5
zj%_*8YJzDUKz>B23Qb-M>Tkn~Lm}1$U@6|r^n!<WYmDc=dI9j;oT~Gk8m@Of&kZdJ
z=wmXKSAs`IfOc)(y+inZ8J_10zrrJ<pjxDH3Qm}820>@qwzY|Bb|y0drGP!~tLVg6
zF^D%%D$U{Am36%9ktIyedf45TtcURetdmuruZ%$fj!H_8FJ$KXuG?$VxyC5fD(F)$
z1Iz6<OhWr}nS`S&>p8sPC9BbT!8X;Mv;j!X-LU2Wzn*GzJz(*qhpii=xS(qiJOqJ{
zYOTadOr+K{9`&%kyN{jbE_QZzFdTM~=Sk*rDOdv6_YiP>Z<zUxpSbWdWaIKMUN3i|
zJLpEMh|-PcqkQ+@W=`kxakh6W&JHemeSmN6;(rTz0~Rn1jU?-42`;_{T>Q%==j0EM
zhS$Dxd-S#cwdNgva=LT|vz4=1H8?(i7x+;=^pkvu6#M9O+vs#QuztIYYHbFy^NX0D
zpG9M?!oU=ls`gWi`m*C`gxxrpT4~st1bS$fPtrCfm7u^TRg1u+qoPfinO_zd!QKc>
ze&gP&#jW3?B*Dy;(KDVp=`<*3@8ap-zlgzL3$C9bbZ5}&zlv^r8$o%RKSUNi83OVE
zN?goCj}drBD59>butQ+3E8uNSw+NOeButmo1WkPQCUWgjkoVTd?(jvNZhRMp!xmn>
zu!Sd|IEmez#0aJmu%`n6IVY<=!ruN5%!w@Vv35PegCD3M-Ir{IUbyT9NOsMl{wfnq
z7F1UX9tfa{k5|{2#XSmxVD<)ueG)iYnj+3sfNCW`Sn~Ne;&hBoe+R2uJJ{QAqStL>
z98+IH(lk#+RF>~SfWVpJicF5@<JGV=z8&_HO+;xgOY+WtNb~)li}Rf?##wVS&PXxQ
zx-oaHk#}@+&`Co;{~o7z_Q$yMi@sa`WP%e9^?FzS>TdtsU#JDA>oe8+F%_PU%I;K>
zxsIQDBR9<>#Ce2vr-%0b7Vg}tpjMy3!tw%^kI!Ldv4o_d+C&Y-Gtd-VHU*rt)kk5)
z;an6Ws(^ZZaK)ExnAP#Syuf8StJfJXfS%*@&>MuOik~m(KXWC-xcHSE)3X6Cyt0n<
zJ2w#oWJ795lP=bJzXLxcppS42TATsr{R#D_-wgga0ec17I%&7Kpw()RLs)N|fnXz{
z;m@M>f{aO?`^*>&f+||0*RWXoApBqoH?QBu*#{RfJrkg{E4T`01}9jMleFHVB&%4a
zbh%01Z1q}-v+vg_1$%CowO-5^-PPATVj=x<eMJP6_#XO|R{eko{YbMGLhPwWM5&ge
zI!!x%j$yoyo%TNV_xI54HZdCSgW`2Y_g$C!J4i`sh|sCP$x{rY9kiou45KFC^bn)n
ziPO!Wj?w&uC~KZe@^(L=(BN&j=>HJA1KTIAy@FnzWS1`jmwza57k+pcAAfSc`^sMn
z(D;F}w;axuAHmGjqfyD9brS*&^Byv9geV&#+NYbghSeK2HU^EkdCV`)p+Vx7RB<)V
zxU6+N$fRYK+6ZkAz}_+K32Sz6wjlx#nxmE;0xp9NlOI-`r<MoTZ&E)dOF+01b^n?V
z(A??c!fO}d`w<(hzz=YB?^8(q2);L^c5GVwp;`Qb-iOK%l$4iaxzEA}whC!vqb}TX
zb;guM(DZDUa0rl5s)}k3oIULJU&8UJk7G1y<I?L}_`s8=(b^R+z;p`LVlD+HYObQ@
zV(7mqKJY^qtzAj`2B9ysTm$qAv(8rPv4`P+O+2V~clHi4@)AtgK-OHfX(LKHwQP$=
zIXX=b?cD)hyZ+mRRUxPD%1#DC?8#72IV%@fIW;zpaoWWwUdMiP1Ks!*$U9vq&*ELn
zOUcEZUOCFIeykOrd*$u}(^vcLv*`a24Zt7l6~x)@IL7YNZstDiyGwtipDsML7hU;V
z)&9AUPlsossnUvD^G^VN0|^pjF6C7tM9C1NRtwGDJGgVBj;Y2R8-m$|88oQtEVY#H
zXZ%COF`AdBJOL&BXCIGt{f)@Hk{Y*V#I-=BJt>uHuzr7WdK2A@MU6N|wIS~B3(uWL
z6t&>`2}=GHc6!gF6W>6kOsK!O{<7PLaNLlM0UHFh`_pq8r=Z_V_F<nxEh1icQtToH
zFRFS$$0tle@LUQ3G>}NI^ZhDX!*iIgK8_%m!mXQYc=(ZJ)Eg!2wNe2Zsh_s;1SSAE
zv-k_*5w~Pi^4No(gWZiWmQRO>6cTS1w%XC9Ouqmul?IgMS`}AS8#+zw4ayE`R4Y}I
z;~-XTubHFQq{b&1DrNfo2&1UUTK<kt_nFdkH3nblx$$@xo%m&R<8_RZ9Y*)dVHNXJ
zEAFZ3Gx+Y6N3v4b!#~{oMGR9CKhw9`_(XWSk3U2M@b$d{;`Bu6W*6A}HP5a8dVt`E
zI>Y2g+R;m+B=3eZ;kz+cc^vi9J-iTNXMn^RAoa$G@(8<4G6o?^ArX$q7|dgKp@Er2
zV#^6;FzTm>hf)?QJE67Xn?sSsuf2KINYsE&Dwt63mwzjpp^bnP8rk5aBIuCUUZ3`H
z?rS%&y}brMjJcb_C~jsO-7h07O{v(m$ko%idK`a>5ujjJgM<9-woZcjE?w9nB6pK~
z3E6FB!8<v{9&DP#D{zSZTfzuCXboQ#FJQcf3$L%^z3;gf?R`PnQ%cPV6lk!3iTi5S
zfwcS954s4jaXZG!19E{CW;wCDOFM@H={*az)w%-QhcR&AQ+K6`wCE<n5~&z<cXAB&
zq=mT@0Erh=<`(Y`LU*2<w8H6QoNS{*i#^)KAlpGiOg+~}$)Cks<vvt{2C9AqB`?fs
zL5P`pg0PmN=GU>G`>rXLI0Os-ZDaucAY(u&tX>|wYfo2#WA1y7|BY;Kd>!kZmvE!~
zs~pSDl+I$d@)&C2Y2=QN2m>TUpm9cw88lmMG@Gjk!aC|xGniYP$Gq|k=)RAK8AkmK
zF}0~yHR6&kQ;W$iPgD&)j4|LHU-dW?SHM+rWkUGj#ib^MDjMN<-UAwQK2~qGaOwQ(
z@I!L_sVujG>-(QZ?h~_~+St(RW%qZSaz@~vLk7Srxvob>f#P=Z3IqUTu#8fL4AK=?
z08jae->$(yG$Dv91L=#&2;^h{q{T2@x4qFhEL7i*zzeZ@a~1d8e+<*J73}Yl>XXsY
zlZFshsh%<nlZI94?-A&^bBEH3M3S)xMXHjpAYNIsLo2MXJU1=)96^Ozn@M~h4;>6!
zIR<TD)FwPgVK*As5$$hIJw{{d0+C{vT*Y3rj$wQU!*rd2zR;gTxwMRF|33I0(XgoX
zxewp<xMNf3Io#xRt_n;qdRVN?VJjsm=Rb@@-aE<w*rRaC$%9PuAwsW=<?4swxGU&J
z>*$UzV{d!|JL6YTa_eXW_cM>3j6voGi1Pswe?U3~AkxuZYY(m6Roo7$s87#gZgBx~
z3p1$AQ7yg8JcCg$K{OBvEQJY>z8rTVDv*CA_AN$$Z~#N`<s(<U1t-D^ZWbx;oSJtL
zjbog9{#9g7htf(2y=m+Y&SkyiCQ6k#hU{ebXAdA_#NQ(hfR6vAlFxNZ8Fk%NEo-D*
zx@tm5R8`K~D`QpE0B9nzPG*Y!uxJnqFM!g5<bji97y(|*!8t6~K8De#gG(3J@Wc}j
zpuH!240U??-1RD8+hA%YifXznOEZ@^0R6U$QIF`jWsIr&knyx+@e7Me9%cHo4+ONs
zm!&xhu^h*JptA)G_rO>Wd316OBwZ<%$Z8^@f&>yNi8BIPKa0?>Aq*GL@ZJrNuQz2|
zR5MVeKS}eW<X2D*DyRklW<nS96&IBi&#hC7Crh;KFpamd0nmf*T<n0*Zy!-M0PzGo
zglLrCg{jiRly<=|T17LuhOOZXD0?&P88k`{p&G0p_X0#1BJuiwJ3^fG&}y~V7=%F`
zwdq;RFD+nhNsK{#)<rZD0Fm|Z2ovM(xkbxxJ~BQuwb*qPfo1{Ppr7vg<K|rBU#+`%
z`gdMOr@sl$PsshoIBsFH|9c2S0{x`TA+?d=IA8Jo1pq9&%-*9N+x0VI0NO6Ht(2=3
zYMK47m4eiBn#jzHUZ(_=5fBW3QiDG7EMYHTclZKkO7EoxFSv7S6{pTDqdq%@y{$wz
z@=_Wr`FYLD=RSgOkkjY#W4f+BI=eCEPn8)HU@3OXz2}Cm+(j8&MoaIdu&uKV3~7h&
z=PKKyJS)|XOLB;M`si9rskxLUEz-0#$x_sUdr>J>r6@`j@Ur9#xBH@9pMC;_UJ0RJ
zMkOer?t54$m2muY72{Jm0s<Hu)0_BEjYD7nXymDj5P@4kf=KOvW28BeIH>b&3H9;=
zsFm(xt4_vXXZ#wrhR>nm&Y@90i$<A@!7_5!N1Tx{7$NtEi1RVp`)%y+-NEgvHB{@f
zn3<nrW6+qb!uN%N7!6V-gDr$%LGvvUQY}YjA=%vWi+cJo-<|UPIc66Fy!N#<tlqu`
zKTNqy*LTXe-Tigs#P#O|O)aTp7k1siWz^p-!=c4b^k3rb!^;991+j3XCMxMZh^j_i
zRq&}irDFS8d;oU+CI8Py?Gg~^bDE1V0D|{2Cq+PBK)i+4=p`&xK8z@C;{2=E@sU6B
zUX-g2H~Wx68J%9#*%Q(?pz<vt@o0U2UA0Ky=JtAo<@;2Tk*cJlMNfJNbj(sDmSeaE
z47;Q`r8+WM4Oj`olxbq~9VjiU*p?<EqZFjYFLI?$-!sH0!X=1g#n+G#8Cm=#KSaqZ
zq2vcBdp_!+kEL44U4C*pTMrU9NMlvleE7!UFaWB`gv_>^`+Q@_C6+cTl;4X$Jb~O1
zd8>N)e$-0$GB10aY+-A39_xc=P;uwQGbo=$m9hy=2{9QGcZeJV#Q6~Ib{qTq>sY->
zq$8puFJS4|ET-lvTrNw-o-hN_%gd>njd|iq0K!f&s#enkG||jx9M5t5-T<$Cc^|L5
z@-m#Dhct^&4rZ{^`6>qKI!fhv<@z%!uXy^UObkE>GJ*~%129NOH2@S2=nkhvA&|zx
zIU}Gpf72#i)&T#XbVsEUkav5R>H#PXD1{3w`>QYv!UCqz8h#Cp(t~7_u)BQ|t2d9~
zzI&IkaZB1?ut&tZu}(z_&wye9E%3pWoaC9Xx~7NQSAoa>XoC3@E`yca7JQte+X91k
z1mp=&t4eVdk*BB*EO-G-1<=LgLOhgvp&cA$APiq4rP_p$ucIK2<XO2&DNc6(z@yzi
z<liMPM8)?}FL^jQ=Vj%Gt4LRS2*uzY8Gtu!5RaDjJOaK5Sa$=_zf<bFbi;CTTd9#2
z8G@XYR49I}pz7X(a(D`9*2Os4#8&hQHb>8)>^9H{9zdh=Fsi{x&ZS3rAF(^&)MAo#
z(eCb|y}ydv*Q%)18_F}7#mw9ks*Ql%)OeI39+KX(CdTSCkP?l|fU{3H_|Uie_`RPW
z;rVA?MVvR`<Pie5j()U`&E8iKlqn}j{}<O=7=N_jg>}X|KQsR*15nB&6F|?4J1;d6
zns89$(N*}ZgJ~=7XZPRb+JQV^0F|yG|C@0DGAx3+F=$6#fU}9_;CU=mp90Xs<qH=v
zJJ&#Csf^ZUQtZeqx2UucR2j7D(#4tpr4ngHx?HHVz1PBE5F(E%*xv@a&0N)b$YS+8
zZqO-&O^aMupew2X#0dHn6`&fNFytUM1d=)s6epL=3iBw)6nZR<!vAByk4kna{30XZ
zqY}{K53w{A;NBAf^3cihD5FN8<QpD^0B@!R;AyTbGFfeEr7eOKWCUWmb+qJF%uTxq
zHJXe0hi*EFXH>&`Q48-yl8+E2P3%Tjur+#-bH6jC`!QE}m@DAmRxri@<E(?+?;}DV
zaj%8_&Kg#4R#7cCFtad^#ba}rS*W8vN8Sik-pO2~^3bW-9Q9cTXWr%E*fQ{IKe3PB
z{@eu&(+%YLSjmQsvAXveIH3>6rv<H0e?|Jygdh1g?fhQmx}i&9g2o0Iup=6;$DQic
zLQs`$T;^W{)kT_J1AWT6s&GTThsu5vagB+8z=}$O^OwRI?2pc4s{9y2r-9*U11~;z
z4)6ca6PQ{I(AlADEg_OA38XkabXf+B+<N+`!MKZ7w}qXp4Ggn8*x&tbbnb8qa4Ekw
zts}I+p;T#dSVMxTdP<n-F%ftaQ|1k4lCVO_JM*}MZ<&ErWkwYUC<Y+ljV7RqK6d@f
zUVui$$Jr$x(>1!d8L|<vRC88b#33AqBLomgh|^FcBt<uj`>d&F6YBJyQyyK|IXM{u
z#H##`5N|3tAp<Rf&c0KEAD%=dIEggtW0Y*78DGNg_$7pH6*Hv=FjIOIHUAXF-Ha1Z
zMj`VOWKJ9XxQG7QHn!F)D1|jtYQ!;^Vb5TyQAWAup)v1adN#x57e@H;|FDVMw=Tjh
zwUDG^R_qDADcs)w6~q`J4CZ+<3Am>yzwGLZ5#S5}r2vWb=LE!#W`p4QA_GRd7Ww?l
z1~jxo-Kj@YYi*^YB4p4#_q5?5&qQ{AYDktbc}G%&M5C=D^@rH)e+4Vk-^(2McIO(N
ze>TO#kG&gn%cN7NlzEj>E;m6<BJ{gG?5uC0*<3@fzl}5<vG7Y{nGk&!W5UsF{<IEe
z?D`2IH)W(otg;2RkmMVz`9k5xe1bY>`q;pyg<j=2pDDvE?L{E~?ff2BSe87G7e9Fb
zvy~7J&W4x@rH=z``srv45)(gM$-l#90Ej?Ny?VIilcy%XOnll69isQ~WT%~rV_T^X
z<|-|bu_1gwE8<W`d#&zHJ8d;w;UCh>i_#XF(JgEZ&!glt-0ARCHWl8B>EK>?!5k8Y
zOv?bNJ3`9FppDM%CU%--luI@EKBel2pc8OojX{5e%xm)EkD?AQ$f|b?TixG5FJ48t
zvZO#eiR;A(P^mBdP>$aKfT{|RJOY}yB?*Zn<)>u6<#GuL$>AN9^#C+U$)eU4JsKqS
z$DAd0{mJks{XjARWSF$*SDv9%UcjJ#3(es(m@j{T4P&=|1LwXrz~aIR=9gzsDu)>L
zV{|$l^m_Z~4>}l(_K>9eaGWv6@a)mJW%lT}U09-U6veYp%tocBIHCDmj04I}#j{#O
z#HMN67l?u%@lI%m=UNKU?BsNxPgQ}+?GL>GW#7kgJ;Z$tA5~9e%{k;7P~l1DW{ykE
zoQ^zzH*ZM6iWYd6ns-uW2{}DO<*<HIL6r27W@C9Rq1jntCUeFtpG4d?;=Hp_h}me!
zu1S;KL)krna<GCFBP7XwwjZx!yZ0LW+{aXK0*&$mm@1t`C0OFwO2nhF(?f<n#@P_#
zh~iiATzPSN8H15YJm9k^du42Oe-o|fJj&H2m9v%@z9{&ionLhRX@WYu@Ks2_-hi(F
zK#}qy;SH`>B<`P8k08AVj7pF4st;V(0|tQAftUy+V%RKpVkEfeTII}B*zJFn4b@!b
z1BkL7qU;XttZ(7Y8W}F~x<*JT)FJ&~>Y(TmKug~+B^(21fL?M9y>W^>{eBTcHAh~A
zF07%bbzpce&@%3Z(PS_H+jlTL4YTl-$&(bJOPm5v831m<r7FO<27o*O&qv7%FjFaG
zspey;LdJkEwQ1~1LW${^HU9@k2H;H`!mCkaQC={DFzaqZw3~z>m2;NZ#b)<1qaB(+
zLBawOxW)@0*EV5{KyuxQ@eCwX;GQr1*~AD7{aJp0LR^Dn51sCpkavCuWp5s{<@?YG
z&!X<HAV-MANs%H(<_-{LT}0`K$v9L{QuB@>&Gxa;`7C<z2C9`4rY))L{FH<DGl}^H
z>?;;MEq00f&GVEmlga`E{uyUiNm<d(ujSMXN7)2aDqP?k8h<xm7vTj^?5}VD{#$7>
zGPszrAPE_-?fzFejX7I=zg$me1h@lm4Gx)EHeeN{uRlbd4ls&#(2qBWJC9y;6VB9q
z$YS~)%l+5o+lEu5a~dN4qC*1~SDC;9EJ5f4yMNI(PDo3xR&RDfWdIZfN`Ze<r84Gg
z70i`=R7lQEaXKhD%8fo!svUN@k!qZz{gkSS4jBvZ@Pq)W3^(vyB#Bxq%yYK@pPW#C
zp~mK3m3JR90tp#|G%_wN?P65!>X0#@-Htr~`kRb^3KOIux5_FAuod_X1pX{gKEt*0
zQL>NC(JNRRJcE)`Ww*ZWpGLiO5+#2gp)<?9_9(@eWNqyBUqEa83Ilf4>ODM{B@9ti
zTomQLQuU_{0Oh6G3()C5+WiF-EC@VWov`S-WRe1EQi=w?US#@x@;6};vY86{Pv<UG
zf;woBLLwpjdJLpfQ<7>u#NO})bUT+Z6+D27e*(Tc&Gqs*#>lch2H7eG@hami#J^x^
z0#Y#!>L}v`!f=V(Y>USvH`5d<8KG4T{cBpaQh`zu0U8SsJpuVkuSU5J`npJHKtwL0
zW@Oazm%>Hm0T9)<7L+kvqMra2pN@-FN=;e0(nIHr2@((SILAmjuHZ0^Lty}N<x>-(
zhIBzChg0an3SYkv-ykp1C*~lLhw>_tG)9t)*fZb-%?cFc8KiIs*kj{B9)UIjYVk88
zPK65`LP$749eApx<8VqRkmZyz>|>a;(22i-d>p~aSo~4&h@AKZ9bUxc(h7WknlT7Q
z#}qL~LK+3a*@7Pm_><k=Hz_(T1R^X~EiYy@M3q|QLQsRMtGK^iA!{bZdxY=n7+Qn`
zg%V7=J{?O&+T6%E4XN_#DzqW`GBqQq)K(Bh`)J0`!-;73R6Bkasf8>|LD#P$2<P}Z
zNLWGQq5=G{##{*oL6uRLwXZ4&%{djIA1gC6r@(sBI5?`=2l+LgE7IaB8$qxT@A{t0
zwBjTYPmgo_eu$}{%rxJCrPoACT^N%}9F!{`9q#^<)6$7tt|5uCIL^&(bhr$`p)dd%
zy4AQ2i^907HLX^t=SfMf83B8e3Y4ZGv{*<*w}dPsV=!i~fYO8H=H@CqU>8<p3pi9z
zi#>N!E*jCGA>jsvkr3Q~!i17f{C!$j5z>^fh#`MR;51NjPpRrX0n%g<XfacX{{{S`
zoxjX<UviyYx57ribwW!2sZ^j3&ktOO$nfO0=wzOmcL%WWLYknc&sPmrnEU5=+yk%J
z-Kq2?Gx>5ZB~WQZ3O^+EsurulPr`5(LC{b}HG|97tENJmf_We*O1g$pL`9)S7*-LM
z2o<zQJ5s<yx7RcXQKv!}hrt7i<||g)9+m#2W9;`5%+5+mkGKVd4wK#VSr~*|eiu{a
z24-sw_>Q9pJxbt(>kuVXsu5NW4q0Q-;mi|-0P&auCn;n&gyWDHfP%Whe=A0tPC0RJ
zJLLq<%m?Up#?00u<r(^s#U}iD5_w4T8nwtacmWj)NxSI65D4{%j6fnrK>bak??jK)
zSOF9;mYYT5!}X^TpvJ%>zhCQ7%M@1fqMDtjig1X4;)X6QdUpF!qV}E&`Iq?LcLSHp
zf0Y0z)$sFgRs2(2tU|h+zm~T#Ap)2{Rnuk}7*j+l%9yy~^$4eq&PQ<wB%{bjpHYKR
z<#`F~P8%~aP=r0Gj(WNex;iEeMDn5{jsfEYq-iLn%fj1{9b5N)FzjA+KHOeb)flLU
zB;YCF1C&AsH?Q`vv$Km+Cr@H_F2~fY%Pv0E5|G>O2N~CS)GAXTO0|=5mPr)>6-`Hq
z8V0GW;2wVo;eQT?08uRblL=M%Lo^PF0T7H>Yfjk3C7cZ)jzB5LcmIjgn4YbnKa6na
z);=zsZ(?V2#BZQoh8Y1=eo8K`PsV`s++vV)6J-z5JVu_yNO@<I1x^b%GmBV41@S}$
zPtdr5Y_&A$nG&cv$;b}R&zlLNWy7r2=Sq%?6@R(%uk4Bu5C))!&}AJu!U8DmNxv2Q
zuV4ULRAfn#b9#*_x7?{Pr=mu)zzl8Jv|1~Qf!MR5c3~M+1e$)zENRAnOoSYgLDAsc
zWF}wSXPuVRLlzpj*_6&zQ_yzjRo#HbGPGMyEJ7%Lfzf0$8~_O!Nb0M#3B2&~ui(zs
zSMWgVJ8}BNN3l4+gfkDMm_P1t8gDdmapPteVW1l&>uWiIIv7f`6fwE{-Q510aEq>!
z4LT8qSwbNI4&yi!20%|V-KtsUw?t=T8^*%~4?Wtz!tykWR)(b#-u3R|c=SDsSYPen
z{3}hY-soX8N;%$S7g0@3uCN0UL8{W>m_mevDh^fpFeigS3tbrmHUJtkkPL%_2YRQZ
z&!X6pfFj*V-t?B0Gf@jvYw;Dle~t7D2B3vMCO85_2GW&$+GSNADlV%9gi#*_DhW1O
zG#ytLopTI_U%TmS1nBjY&XY($nXp1z&-7@cSE?5o<3Q&v9?wBRF9GS4_r`n<^3Xz~
z1t8k&#r-b8JO^QrV=#;`Rd-McLkv1(%(=pk(|Odaq*O^U=#=on%fE#iYhOS)n8uYG
zzl-&)S8@8plW6WfiRI-5%rr{q_xG{Bxs5QCmg>4+LXkgE_>u%id|c83oZNrvlSr~g
z4)-`5XYo+AOFVSrP#6H6xDqRC3eOouliaR@#!MB%fpo+rBeCB~Sk!T0c@BT<d*-mW
z-@~QXo4EY?9y)sw0?$KOlH@akV>!WV<Yo)6AWNy;IfV%n9!S-pEFdumoIN0wSTY(a
z!yvmy;T1?KOQ+z9MM$G)%%L>-8Qo|8ze~Sa0!)d1Y6&pn0|=I&^!v?HDY5`I)6a;2
zsBe}K*#H8%fsd91GgF?6d%4*OElOo{3m&l;I6Hh$9m0!+Ba2^pA`~2bZMa$6i?a-4
zCNoJB6V(t<w`I|K!<mC}Imdo8!TM?o^K;W!T5(v>m-|U3)TEdis^pwbeC?I<xOnxm
zsD{V*GXg(E634i5<F~QC`5cbTJ%M_49>c*Vro(xb^)~HhRJ@^Qnf{?W?^6iCM!-Qz
z28S?!BtRTfYjuzk0S@Ch6b2x7v_=f;TX8^Yiar!E$R~2Q<z^GeLvwA|PtZ?+a;1uo
ze6)`DKY0w-ukGW~Yx~$*A94u?NkV&6Tfn=exYS&4kXI0-DUvK=V~`PpFjK&xOSfG9
zCXc{?go<w<-hfV9>D8wfzb+cmjZK6Eq;>vHu3s&DPa6Y@RXN_YOAnO`Y@~|h{0$pU
ztB@**5+fU?uAzVt$|aIA9>c1iFdoK`(d!kdiqC=g0*W+b+PI3>QIPMfomCk=s_1kn
z%b;ku8hqo9>FPXar>#^n>^Ff+uV28+m;ODDFTMwl4Za)Gjd@HhB$!?B;RmAmckbm)
zymIN67*`<RPYjU<-zT=;G<Qke-MxU0Q^DfwJxunIMnfk4utZf!`Bkzdq%S~fVu2DC
zNm2>}Twoj^8WSeuL`9{=;Tng+04SYUQ}$^vZAscI07wB|@}~^Zk!MgRjx)6Ps3<7F
z*$0;K&_fH@-R<M`*IKxKwT(eHWo|g9q<F3?V2k+Tc_<*E;t;SgpdZ2q2=P{7fH4A`
zGSrL0-WgQZ!sMluOUz`ZNdq9eKNUS`79dHOkwMV7w94gMF|(+fTl=t*2G{!drfpb8
zn1k%xYSME9(_*1guN)atPoW!q%I?pg7ii}r<0l=!3bLN^02F&rQk4Z$S>pi`0&vGb
z2Gz(|3i7T(6rxPmQ?xc+oPYHtynOkmktRdjxcxMCTG#Q=z2AZ5?I$oe=3-&d#oDa_
zUVP<O5Jv-qoNCpLy2;qcwe`X}Lbr^m$`TiJC0WA2ptO50+PgF1M^S@0aMOJrQ-C~w
zs&tGJhx<_UdYt))sdV}<jzeJp^ekt=2@}K8L$uJOrJdb9mh0&i*k<Be-J%;gr-$g_
z#?&;P`u1r&@!<ikUfjd^S6bNHCBYGgyVug(pr((aEiY}kfRb7CVhHH>m{WejBhXlZ
z-UT(KR_~{_AuB=w*%74%K<d(^>QU2ziG8QZD0lr>RmjqUTtRchvFA%9uC%_AqKczz
zgFHGJMmW@t!INvMj<c|>t~x(KFesJBUXUug<zch<%=MQni~y(fdh%q5BS3~gNpCUP
zQ>qEe(+Qe)JiPMCb9m+QCpaS#`T^X~K@tsc?!u?AF!wA@HlIQ%n8vNmFQVOBL%B4g
zm%Y(IkTPEiu^g0xI;xe1%Iv#RO{(sL;`ng7Bhw*>>Oo1D&x8PuizIc??;-1SsTfFi
zCOUlMP#6HwvLo<KOL5ydAV~qKuvR^$`_ft6fGo#=^}Rq{ViOGdU`@Km-m`*tJ-UST
zI~~0KdJC(!x)=^}gw)ZML_Lh2o|KVt^|&Vh5_tub|CcnPt}md8u2^*Hr*O0N(W;!Y
ziitTjrWOik1-y_o4TwZTtAloJIb8*$X?~mG!Q0LF^mk2O0PUa~ww>;;sL^~LZ1mWN
zcewIS)PcC#kjY3CcPsFdGaodKbc+OCKOiVSYZj;~N0#(Tx}0{^b(=J*H4^qDmM1X`
zfyzvR<}DxR&OL)yuKYXrE_Ff{aFtE5@1o+D(e7-a)BBVOmn!8M_DDoLh4>6A+n~IF
zG6}<0=d63+s<^)}$i_q~qLKEZc=5AHE%PK1ryj;hfN@HHCxasc@a7JlkFuD=Jr|A$
zDNhPUtvTUp&2eK#LWgOP`_C@g0ggCLZHhOEJk)Jdc;I4XWgchlo5kM#02eRp;p*i!
zx_c2k4I1)ps%vaj9{?&(233?1I!-@C9uh4ANh1o&P;>MrQi8nukc%pH{Zjlxi$@l}
z<53r2qCPA6ZX2!E=|mk0SWbb?t7|Y%r|1+dST3ZIF)Kt&<Z;Q-a{(30lLbmXtH|%O
zTdylDRhm<ZnFvquGsh{pbPh)CSFtP;>YU3DCY;vm?2{xLuyl%g1&~T}jN2D|T)OmS
zoWK5y2;6B=e_|Lz0if!vOW}g@mPjl`a16PAwD>)>@JXoILAg{%tum{-yP7ugu=)qG
z_oN=yVSpz8a32&(t!7efnq&czgw8KOlBazf(s3v}07DHmO+17!BEEjX5M+!n%MtiK
zHa7RLMyT=P6jn~mqEeBv(<Bk)nhBtQX`}M*{xAUsL?)@?Lm#f={U2Dy?bSA3e{Bz&
zcZP%`u_2(>vsWOE_cW{yFQ<tY0$xS!`YJ2Hv9k^lBs>tvQ8cck6jti|83Q1~4^4a}
zQ&lYTqWEWm`>%HLf-H5AAEXSH%6YR+f~gJAK9zP8NLWQnX9X^2KKRNjb|kYUC3C_b
z&xT7xOQ|n5yVLA7JFf5!)OQn|+a)?SX$}w_w}RI09bCJxi<M&w$kP;?H_CYB(id=f
z^;ft*BGGn@jv%K)^|=Zyx+tX5VU+H2M8qGTGdh7+MG%xsTUT8@jRX094P$ECpcA(`
z4XCNW^qbOvqsYS`=5X&&ssSAu1E9@5PbCrJ7vVg;qcWncUddKE#)S)O=ydv6TPKij
z8z)v~aO&hN8Z$MK@{${;IWuPP4&hQAeTMd!y5D%X@18|G^x!;pcYC;Seh=3!_0a1i
z2m^;(TNPbt%oLKmIR~}0o2nR7@ypqjHHJV5dFmaWxT;1IP<An<>6=N*XIV^MR=O%s
zY$@?oAgLu(Djv6{04orY8GG_RBc!V?uk5kJl97~OfxAev5;k32j_hZ&^yv5~FwkBa
zBLwW76`27MN)5SIf{)K7FfGQHzw)!V@A!8xvu>;XGH$MY4Ha)rEqK-K*ifcb2&77v
zxhbmhqFCRLo27;beBC^i!U5&ssGD8nIH2L=2?JniC^+VHECb*mCcGx2R$)E{qX7Mg
znV?5h;5T*otA?;CZQ&}$l~AB?ZS`ZcQxPhiq#4R3iVYn^QH*O>w{Yv$4i=ZDaL?&Q
z%*{^;H8f6zbgtTH@#m;enCjQ*)4LtHzx7HTPkq}oKKPLlu3l;5;;Vbu*@$?8hGkKz
z)W$$umBLLo%U11VIybIP(75(GPhPMDWk*wfz2&*6Pt;sln=H-8K_no}1<(`RMnd%W
zD^Ea|+0x0YVk^-C)0O(X>k>F<B(x=x;MxMg3#{yf`JWC$6j?}c4k~3P&4vh}KZWM*
z4z_oGLQ;)c36+q<QFT#|uq4G0sKw82y=X)*$j71{WdwdjvL=cr;c)T3g7a0LR2sFb
zhRI-O$33|4g^wWq8Djy;3o!9NO92EJ#bt~H_aUv~LpctG2OylY9BD%28)d6`wd)0|
z7;b8ZEr$W7rYqRm?4n+gd@%6@=$3A*?_qPJjhUG$R!+|1_%Z4N6S8qh2<f>?T1v`C
z>A}G$L%*LQ3<Es+=rSICY#tjMJ-qb%K2~pxxbdXM)-_Q^=eLXPMlJn`FHwu%?DTra
zvkZcDU<Z#+|5iyxQ#DJoT&~SQMxOqyJq8UPD#4WkCghJPq{emoaYM$k6nTp7#0HOH
zFkL(~F;)~xP>PehCh~6RYhwg{4FM?2kugPEl!VpJ&&Nlhk^Ea0HzE3xDPd`JUlFA2
zz>c#+7UzLP3RJ5!@kSIfk~vvMG-*B^!#0s5qN=v!Isg`*Rn;G^gE;dMr6I;d7(=2A
zKmkP`mT@QyfbK!h8;urV*A*fvy~hu!$Eo+<d*8Q$mtMS$*3Llm-?)1V5C*dQw%Y^j
z@Aq)?`Zi9Sn8S&cdDQDv8;~(5sNHj8Y^08dd(e@`(AuGHA;7}iH2%z=pTU>ExQnNM
zdlz9@x(SNQuX*<NI@NWnwxwZ_n}Xu2D$%q{Ut9+DOS!Ua7K{^7fOtBr(bVb5wm4#>
zikM&h)=WhMlnRMPADfL42=87QOI1stHG_zD!Et~Z^tUqL#3oP~4pLOsdJLLFAdUvR
z_A0g)!>8Jp3%JOc7Z&oQcweRZL>icb65WN73{P=xx}?{X4D0q|Fo_xM5t!gg*GT9)
zl)G6%&IoZR;3LgEj8hjeivedx9>AM9a)#cRqN)hj2i#!(Rk+!-fJ=TEPkrnxws+dN
zdUXfeTRm2<34NMGM0KHs<|B#{T)DP|o41-+Tx{Uf={d~J)uaniB;kQAuAyf(gN6>!
z>tq;>GJMO&7O=h=;rit+8-ZMEY>TX%kP{9ZuZ84mm(`_Cja}n=9bdRTCst#lu^KyR
z+}I~Z)3~v1Hn#1gX>8lJZQDG_&F|iS;Lf-CGW*$k?e|&l%&fhZ(RY3mKhGb5#s~s}
zti{R2+%E&EQ}s1e7Obi0bDjuZeArCF68(RFUG8BmZjuk0&W6c(j$6%H21~fjnG1)n
zxm`%FB*c0p#xHJViXWKevhc6q_+gs;k*4WXeIE<XwICDS6jBY9mGn>Bq11Y!!T?~2
zpPUw)yvr%65I}Ig7ohtlAYuCXr3Nd?=CBfv#R6R&f)nbhxEQaCYwnWf>a%h%CvPv3
z_4ypD>zIQJ1M$wz?`?M%7#A+j44KIQlOkL2Pii*>rp8|7fsv8?V-sq&J9~stv0cA$
zS@9&(jFuv4_IN|dQN?(iIoaA?`DZ`-@=+%QRvY?MMx8b2IIiyfqCk0Ch~>=ZaQ1Nd
z=E*jXFix#)eq6$C>z@_;aL{RKnV%BD0kYx4(<R+XHHINYT-tNkW2{5MvKwW+)HlU7
zmckXP+<*aEl^rUFQAs7uw>{{i-B`<D-|(`qzH2@P_v@gsiitxCIn6p)B_xk-92y@x
ze#G<b3_<BSDk&6D9m-fKWyUNSn-<MP?!$=^F8jnSeV(BGH+q4LUC<xE+)ZpXp;|np
zd)7QkR;=ZyYEgFy)6J5pWHFsy31=kr*X#iiln1+8HAD*wD<oL7!_eNYTrV#28I(wH
zJJ30uU%S+Lw{KW8Lx3k-x;cV-KGVL8hzTRo?ZjC5+ba@`QdG~kZaUZ3g(z!*UcO4|
zLWavid2ugnpL!DlVCE|mw(kVe6->pdYI>j>i2z4>r;~h=1j)xjOS)Lb?<g4pJa8E&
zqxoV%Mv$>}+9D`3=%?B;s@YZ^n%D3lPG)pQYgK|&wB+fV*;w}ow5DMHPO@u97cC)+
zPRZ8N3fRd|X#luq_m`x&e=_y&8mSzpj}~#_s~f=PWXNGh@5r;Bj(_tma)AQd!+vy+
zaw~eqZ7w(1sQaG;-?TZgK&yZ4Ba>n4@<4gI+*y54*~3wD!PQxnJik=5*e(=Th0X57
z3F8L%$c&z0oJ=ZIBF9<$K9QbStS}GWsV3K6Q4F=^l&?;and9c{;<Qb?S{~6;&j5Bd
zn@8AGiMN^TeMqFFDu~N7aav7Uh)RG9AHXS;8xYh(nRHnj@?(K6eDQSZ2lZ0HuTXBQ
z_*~d@?m@95S=#eIKQL9Z6R)dP&N!Y017A~Q%yo5MG0IMjE8^Lqr<o@1c}(}oRU1Ko
zoH&TNFzLFdX02FV5yve|!!UU<iZ@V{$TrY+64xNMkVVlDu7^yH`FF0<icGr(n%+?1
z=89Fm))y9jReh|*5Vu!6al^1}{tOMRzL9F4vkR9hcMB8(i(h^De?%aS(d|RFNWzr0
z+iF6an~UMQssTNH$XJN-gF~>`r91;tvwBNjvPr319O;)e?a;jB%*PAz^4{>^a96It
zd}d6#c!M=hE4Z*gE5Yxftr`->{FcysWYQDn`C1fxWz72rv)Q@l5v4@BMQGzrXg{X?
z#LAHpqy@jOJ%{(AyH3whq@U_Hec)BvG3KLZi7PHy`VfDShKWUuQTTocw?;FHTC@j_
ze}CR44DJK;p{Zt3N=3w2C{oY~aaBla6h9A*upsMrJ|kOiu87s|=$pCW7b!3r7#oM_
z_Ig4X;YLH}rlp%3-CkO4oh_rO*)&!;o1pXxBV_|bE))*+_`*;n(4?{Kbe~ThP5FUw
zW<UHfS8-;mHI|HV)G4nJh#fQ)enxV|rJ$>;`Dv^ya&`N2Tt~Jm;u!7JT8`Rp$=s#O
zNtJ;-`{h$qy8Zyns&h7uI%qvbiczcW(zy{JdGM2Uh~Y45#_q9tf9sUyzLL3D17>@K
zWC`<Gt6EMJdtSBs-%na(jAupwSQ|mt0Q+8qf~QS6jjhD;u3W;;4+=(Zn1^oYVw!u&
zQc00K|Fr6Ud~1o|mEc)n7jtL~R@$newmntDD0O+Ls+;QKH^HuI;)C8KXMrWN1AWGx
z@sVx(#6uBuMMvSQ@-06{{#<}*OJr1PmeL`W5*2K1Nww7q_i6&IRj$RglA?r`I>kPg
zR@}p7=w~jBD_@)(<!mDg$5aMgTwyA=7W-tC7Dn@7n#T2o@kOhyu`FYFXWYZh9}o9#
z*npK^v1->AtZ^}uPDI6VblT44(m8o3&<DqpT*N<(gfBR&F-B)SKMHVibk+9&R1?vi
zS{oc_w?8$gs>R{%Fs{kXTB*9i$Y*+*PsOEzL}z@Vj0s2n>jEeqm?h)ekgXfbmAKll
z4lCpwN$Gwe7rxTdb|?KPfruYKX>BDs<7`byE&k*<w+wE90Q=Ce?@cq=9sNYewPW|5
zWrVt2#fdyHkd4l*8ax|%5Mh1gTBagQBpk<>iq%WQW$P*3ykB>)G|b$T#Y~*L{SQhF
zbmTB;{x-(u@Ekp0e<Y#iT*YjVv{V^5h9g@R!-W%gcUgdNWpkM{aDka%)I$*gNuZ6f
zOMUTbiLieS2Vs8gDAOQIvxZZOo*xwUj17}Z=rF=<ZlKILfjvodiO#5AZHrXGt9mBE
z(=R2$K1-owBarEJZ9!YF_5Yy`;!7nzr#{vj@atvJ_y;Fp-Nsm}8W74PFd@JleVC=W
zU!KedG+0jb)Q3ce|L0T@ZK2*^cQZ$?re+K(RV{WF$TuKe*_RTGvGy=@$G@#*%Y*0z
z<Y+!ZU*u5LGooV_>Ub#BC^;=tjOcKqx<LN?JMp~5To?&0C5cDWfg8q5of=2>kGqN&
zJ7{Es(#gBi7Ta-TvV-`f;z*3AT9|G(#|^@~8qwGQX!G*ZDM`p#-`bAK6Zm6Is!T2z
z7u#B2+cWZD)p(50P}V<=-whH6dSG;WS2}a-Is}V`sOX7}0|V4OP6z{fGy@5PN_wPD
zP#n1jKYut$2Rl(qztV}%gnbx3bz(SO?JD{wVjw;(*dW^N-yo;Sl`K&76O*Q*0*;z_
zf_hnWe7qnRE3FKkaRXsTQ&LM=qv@$uSiBtK?0Hxg;mjsKNXRPQhqwK-jya9QB6;TI
zt=r$aEbfgmG!k4sR6XU<JT~vOtbbFMd>8+vzQoNKs=kz6V#XYA!d|>ry6eMgF>>@R
zdU<D(Xi1Tpk8~B37S*=^Y8BM4Q1Y()ZdD_}?B*R$D;Rq<9jf=5c63R1LR{CJru~Gf
z{`ZOkb0BXt*YtWesuvumqOnu0Px;-}KZJukKi__f%jDm2(x7Hg0Ujm)$h?`Kmf>}w
z_`3MWFq~0Jc53%dqb%G0<3Kq!=K^oW3S!EFm>7l1pg3MYLU-qVJu)_Sk?qMHeG)do
z6(lhWhcCN-WgsN~bofSJx0;;)$~;2R+=d^+qG|#)O>M!;=CVeMd;Nr;MWcE!{J=+p
z2y!=uBNzXy_9(#QFII{DG)GrX*5X%AJZS`P4zXot581Mu2{|GZ>M2Ka#iy_^mr6Jl
zPRG1=FH}Ji-N>WoKt!cKl<`6Ho~>`j<fRj;2ryJiF`T{8g3H_(&wF0O>+}xxB_pWF
z4nYyqK29b}-4qU49=HRBTvQx17ypa%6@V2qxasJHdVamp#r4BFTg84KFHR%Ts8mWk
z-deUW%`iu+eB0}?e774`qRB2lbpEFtk_5}Fzf^+1`GiObZ*V|nCUQgLswq1ZHMg^8
zQh1=GSJF46aTQtvwOSZzbL)sb=jwlZD5F-3AN5_-Y{ZGJmbO(rQd}03Q{jc9zlCX(
zenSOz75a@xU2XQgJ}AG0l#S0KBqKJEoKIj-=UmH^f^DmVTFhYVaCC(|gu}?0w_%Q~
z)>+L@7W?9|w<P{u{qT3df*k=*@k7*6vTX;@nk6aNMhF1>ipnIv<rG#RBoI*N1tZWT
z_>(Ge<;89JjamVtT>&-+pdNyWs~<LXGD<2cKJvd@5sgi=@;9mPiQ=C)7-`1c$RPXC
z%tn*1ms;gNm5PTvbXD#iDD8~ZKq&#O1tp;mTVHFFKkB-gz4LUf+|CC0Ci3I@EjosW
z$wNZ!iXrKyRz3aBzun+CDV=WC#>nyK$n%=P(wY3s7#Vbq<?`Ine?fgiH#PxM%<-BQ
zD5kI*0{Hc~^yHkmwc<$J6Q}7IDm{N;0DCQ(T9P&Ln1xGK@YJ0Oj*xfcoDljSMMC&g
zZDg;3*gscPejx~mMh4QLvIc2pZ+35+YxnqmZ$SW6Q0|+BGNc^RJCb<<(PjODh1nCR
zSm%P@WB%(`riL=NW%hug!zB4iQ#9dEL8e`1o&2oUO~vm@DoW)*NnY2rqPRKquWkQ@
zD>e4Df+N#gm)4JK)1@;FQc8A0PZZdrY|lrq)oi$`MYp?$q3OpISm=wPM(B&JTG^uR
z7e!qy?at4OD;S{gAmkt0W2;j_zK5Aygw-S3$yj}lC>?7}JIe|hD0S8eyN=XXO#iD{
zrnWG<w}V2jwhFfneN$at`{IHlVQ7>U20=NRbIjNF-FSB;#R2WIsHyFxECH=59_H;v
zikUgz2Q6iivOCa6?Abe3J{h?O6WcV9M9oAz%PFoQ`(Ri8A|hI-i_634D1*3<2x&Ko
zAnAZv5>^}#Q_!|}S;vB}B<GE%m=R)Iguwj8wqVY|G&gF1MP#2kifOBFgg$MYv0~lS
zz#>1G0=@nF&Qts~P2e0I)8Na1z(v`)p_v{2rOzh6wAQLU6H3!;e_8$qHgt)*!YrZ$
zh7r=TxCawPYu-kY*uYO!NCnK}B^kvc@koPCYXtL$jp2kecD%W44nOTG3#P9%6>af>
zMZI1DbGQD(Yh_b#T!$7)!3SfXC6%arKoI#@iM{jdDb$;j?rWj7Ujhp^=)u-EfZ6Q}
zbrhfsC#E%(&NV18jSmhv?udq#-9*Tx?$Q|7+Su*0odWzcIkDnbI<unGH1V<Vtku3Q
zNuA;yW=WK9$QKSP>U1RVPRZ4dP4mH$P(Jq+QZgTyQdxvC;Fi_^C(n2hd+zA)-Cx7n
zK5SDyQR4KnC<d!WOp1vBNBkyP4b>~H?1_OM^A0mh#&xM(&0AGCslH@5dLOt<sRTJk
zNgVxy$3$`yMNbtF7d4%W5X%X`s`fAAf-ymS@!^{!e&4?~MCEE=#$SY(|1eI)MRZpA
zV9t6F<q!S^o9msr8K~XJV)Vl1WFzv9d%~L2mToYp-aSc?qR~bSThZy%u@YjgkF{<H
zByGgVPhG^ji0`=`M<Q3=wObk>Wd_(Q#(N3|&4TZ&AKMh1ZUshV5pSvTUp~6JPa;1(
zXk~D!or?mMLbar;m#9V!)(Xw@S=h|Rdh0(59+V&GT+d>apPmMZ2Rw*%h3m2PFbhLy
zaSASM3JG%-iRG;)W!05(;)jdEjVdY#*+~*KWfwLIJTC&2O%3w!iI*Sl$7}lqmm9Du
z^<%eNwVld0)Ljo<emN2N?0yhF=_I04CT@?BDwo~iBeB&!`G#gb`>N~R(uRSw)jhHK
zDB2|>fr`-<$JStX9%nE(t4HzfesKe2=RW|5!O0O&FO_9+?vcZUdcSM`CS5?1c&N!`
z-tDv_GpGGf6(!;i40+c+vHBQ2*y_nXMP95?0!bvq_LT7{{PK}1sBPxyvhg}VNK%-;
zTJnh6olC`2%bA|pTI*QR@?5c+TXXn^O(r4~#`c({IgqM+yR>5M0B`5u(#1Q$jb05>
z8&%!|ke$Xh<~T=6<wA`1&m(sIse_e3E9>aqHE*1=YG+^5cf)GCYpRk5+WmbH;%Pf*
z3gg~r>REV6vi&vX@oH;Hsc(Id8<~3a$6}(x++SX%2!M6hvp`+Y3LCm=^(u-lN<Z-{
z{ab0B>5gZ_OPrgUvdjFAd~-<UzYdjRtwC*`*YBr1Ma0S@v#G&K8Y0Cz`L&y)EBQo5
z7gwdwwL4dCfX|ndA>6~pjst4C#fBE93?6~kb3BgloCo<Dnm*vYS8T*a3tQJgrbWun
zk}bdBgR8D(=(!WhzF5hCS?2nK?++?$0UQ!HguQ-Ook=(cb~{V-FS`QPo7RS%MBBNr
z(RN>eE`5q-HfE&1R9-Q8ld-I{LiB`Zs{hu(OUntzN;_a#{!kL<^mN4tv4F4sfhTD}
zC0jt2*r8V~qqSP<nVR|rtz|>hiA>-+IES0@UA{cfe8(khd>C5E3+`@8*P<#qFHITe
zD*<C5)H5s^^8AwwDP2DYh<}L2!9?d<xGs7Mo?^`xi1<?v#Vxi2>{J^%N7xv3W|ua9
zcf6+e7cI^Zu9yQ4-G0)q|E&a+Y>j-HyT^xK{_VU1`?u(Odz9Zn0o+d$3`u2>f|!~o
z&JH0aovw(LnX6sP!8q4j<l!lq<z%5<zdLN2c8~6hUZ$fBXV4}UX%)7sT{tvM4f(Lo
zg);SX6wsy(mXoM6-LCcanC2tJFIC+C9(UaFMMnzdyjYee7j66weKQTnTX&V8G+Su5
zH~cMJ9bs*Zo&KUz3&ZZR+0-Yd!J=s@BCfEFXdDYKsFf@si_a}Sx1PZB{&}{xgE6VX
z-!mbq*J>a~fHB>>&{vZ7kHI@|xFu!Al$X4ub5O|$9r6&{Pa2I^3eUHB0bRUFGvxS~
zr|nb(sFpom8@Ul^p3&$I|Da|UGDzA5pc>@vd@tTMb*P$t2ggWin8{uzXO$_D{v&V(
zX$Td!*>iNcrtB0RE?yri=yc(D-y#%!^n7|jgi2<manfPT<=os6_u^A53L1vmp1>>Q
z`ZHcu^NG<-&^zn4rzHGo&~$6j7vJvw_iK|K7-Rb*fBH@L7mw+;mpi(0*Q|TwaA@n9
z_!XIkRcD$0j$=#}BWx-IT(6)77p#<!Kk%G+`g!K}X#G75*uPomvAN3mRQr{Upezm9
z{g@HVmLxNzvn7e-|21WPrUeT}{oI1m>L5Z`n{AJ;+e?3MG{pg}@Yo()z1w7NPj+~D
z#c<?@dnZNu@K0zV0JuFbK1go>rb9@PwV8@%>(8|W=ap~L%YxITK}91hL2FWjzDAY+
zqXssMc$v0>ZR+!tWL=w`l|<|$g}Ljg-f(U&W90dgNkl%?PanVPhBFS6uc9255L+`o
zg(|dUycms1^qkE4rRkFDmz*O%WBZ3&Bh7uuCUHWA!a;_x1600DNJ;Hezl)gqn1_;%
zwE)Z4iG#V=>D)xpr@G<5BOC%IvG?*e1cxs}<A?O6PNpxO^ZP1%K3>)f^RqC+8g)Ak
z9Jw+>dV$>>l}eUfJwE9X>-`-iHmV7G{`#ruhAiy*uVmjKQT6bt<>{-R9@(<b^&Kv?
zX1?l3oLGMRbIlHBdlxi<@eNw5@_v}9T*zFRTwDHF`*@m~$tK`V#X+ZDy%(igQ7KL(
z62Wgj4pk(Z-^gf!BwEuv*R%ExD1{~F=4Cn&W^qE!gV5*Cr&d;jjh4Jr!Sptr;D?ky
z36+IUi3yj^a9V{q(pT|LgvneecTv3+8Rw=?%Hc%fyt==yNPQ5p^qcA#l4?*;bh@9g
zK+5sjpWnnzEdt;^qstHjPV2=Ugc0pc&w3EB%0?t_sKShb?QhG^dJE)~sl<t^=5I<#
z5Q&;F|2lV9z<vw!ldMr``8tircOj>Ng41lZT&ug*RfR#Bp1;WyJsW9}|F+`5y|){K
z2f&+CG(Kv3!^z}+JBmDDTK9NZ$|ky-^_IMmr6A^?ewAaO;eXVeik*WdG(V+;$zT1t
z+ibFE`(96!Au!t&V1iTCrfniii?2LvGHpCsa2@t#4apu52G_W>%&o%RBzzUd<xa|n
z%cf4R8!2@JgJT?p@!oI7Pc#&_!aQjlXcQXZcFiBJ@2@F?P)8qT%<!8M16iX|JsKz1
zUSB0bQ-v&dpmu7rvLY2hR)uogs1qs{%&MCJKd%ui<t&0uG$@+{b1V4lZK_<3P>W1&
z>nx@*BXUYywTGLGdMxv;F9hJH9B`U2{q@42y*`*d3|N$G*`P~1xb#LKwJ?f&d*LJb
z#TOYmZ8z8B!s{9Cu=4V4ZKOSXbCKY$wOa-<_xYf2RblWTZ($v}>Ib=%%QHPXK4b9L
z8Sei5a5?SHm4O-iFDMzA-KlJB|5QaPsBx*$l}k8T`_VM73v{52L$+;;6#yR!<2_t!
z)s&X|2cFU{y%lfu>NT|9v1~JFW%J+1Adbs0v)Exc-&}Z-Aq1=1AmWLt)!W_2(D9}h
z)i>0AO)&;bb^4b?<^K=~@0YI@D+MLR7m7g4y7t*?(SPynkx|5rnR(ze4McXjQ(Z)k
zW!&+{h1}JQ`EDma5??^d)5UB}7FJAqhI^kATh`D4`bxRV^d&<kyK&-uDoVukv+U0!
zYQ{O&94=Q*i*zI6Hg+HB-x}M~1a&V8TO;O9o#$JIq1Dk@d*u5G#kA#XFxslWBTG{X
zUo~=m*U+^vEU6A<D<Ww6c;}&~m%Zk4=tbSfI&!9D_n>8P-9n}Q;e>}zYQi90YnL9W
z$?y(;4uE*CGqigA(Wut^?76<2wCb-3*Z8}T9n}oLvyMMjfV~G#WT?Q$8Vb8H&NP+$
zX+&5z5hvpvsgqZ~6poR!`}Z}k8mhs@`AMmdMorRy8IHyH8&oZa3P*%tTfH_GCp>wC
zj884xu4M!TkrZq`yZCUqVd>+1!Fs1w)cUB;w{e(Y??=Ht7`+}iM<tUhBm6Jkdp83L
zALEJ5g5OQ&HZC7#`F%1P${OZp1a+wXm62M1FVVJ}?+sfHq<`6Jy&}TN_x4xUUG6`{
zd9;0d!n|np!KR}=`IjJ4j6}gNY>f(0_aKh(MbH&f-*?o_)H&9PummTo!dUqgn;fhb
z%~UGRy~qOblaW?=K0yaEkJd$F|7LvtM^?)WeOVWD1YP;M%ROHIoHuz~L}FArK>CY^
zD?}+fGIwXUBMRqPU*49a5)PEw3|k9?A`TdnR(yBHbUg;X%fMcO=?eXYaEBgOn|ZMk
zXPDXAD{CO6R#M|{2B#z%x2j`MC5rPycD8)mI58pBqD?0T_6I2!fZga@p&K>c)-$m`
z+uO*v@#~>UFpi!5LFch*!0f(!jUP8b6<Us(^4jIZnXed<#XPFagAjB~f)-=)F)Pof
ztZ{q7oLG4lD4&_ObERk9@yC3=_x|*Cd8J%{Ac~K?v1Vv*dGK|BIWKieZP>%l_|&|e
z>_II&3=HAjcZ5`e@9fq&v!K7GNWN{Xub~4F{Htw3dz#6;(~1?~sG5=3!*<a}k!B-p
zGZva!+d2wLdF+hM*RRO>odHFX+4b|RNeI#VgzhhJWT%!bHfa>&ATFkZ*g^oI+*g4@
zC}iVmM$hCU^>}U>9BcjZ7QIWv-tpDZb4a|pO#0&3(A)cxDWR>|rrl&aS}gqDM(QEn
znp^TwmBAMm7~C?h)TrUkWm95qqUdv)=9eeeXx+TeN+W6XWAc$@9<KS?v{lTK)J%c)
ztSL`0Gb$g&d5TqO;m3k{B=^1H8iPh1n+j2YFc_sRsm`L<Bn=k<rPf4S<?k;`ZK<i#
zhnU|YqP@s*ia2(x6E%Dd_&CSEbX#ZQ*8z7i4pVyi`XR_0&{k7@<H@$-radQEX`&Q3
zLbUfFRJA_@oH1Gn&!<ZrLJASjS#ZRb800>;zov5#vZ*Q86e0ltEFmdTVU=Tn0qxOA
zGrsj4(eyC-fMgHb8NTC4#^0~)xAQcuw=V8aD}uu}M^`qlmwb>p!Lp#q;^yCvu^$_g
z$sgw`ZiSv@*F*tYPcf?!qr`<)$NYo8%tbWc(u7M&16+6D<7060+#`BHg>52F5XC*V
zKvcVaPX$Su27&gp_IN^((VrYh0_#X3ox0eKOE8nnR?n_;kEf5c<T2CXP_&QLw%Nf-
z>%A|9aO>76ZUUn0sE{#LKs_|XL^F`@Mz@yMyJvc5WqESaYDQJ-LNgZl?v5JEr}Q@N
zJ>YMD>L0*259aHy(Cew#dN1*3aXSXx3KXzmr)8(;U5A<dZAZlnZq~_|@yQAO85mdg
zOftLerard00%2S%BQ~BkOdij*@m&+VhJ-h$Tc?3g;IeG*^Fxuxr^>=!aOWbC_1l%_
zy*@ox)=6OZbyaf18U?YE19j6}Irdzx+T~M!59XC*AW~Xc&$zWDrP`k#p=K${Y@ih>
z+^JitKzcdm@5duD!qFSh)K@)uTY&;0tgsYnx#1c}PKzVtaQ><xF7_tp{%a=E7UKqs
zHtBsg2q4hcsf?i3%4<LFO><1os<qS)&TQJQ(ie>fWXXRjh$+(XU(sQ)!UxmndI+|B
zN(u8AwrzUw;vd))ecKdTAL@2ZRJihHOW#To+JP-DMjh*O!!?dEj`_Uv7f))qhpP(F
zH*|u`Bi5TduJ4x#*T}bkGez0Uu*WMA#wf7LaIw#*!96^^EdTtdzt+;Ev-S>V6*b@n
zu7I}CzVmnR?@OWFK4W#9!8qRa8c>A&D{UEwvE3E<Vf&~}r`nwlyM`pPlB^-ICxL8@
z`4915xY29L{T-u}9xtb74SxD8r|o2-vR~3uhp2kK*Es>MbE8TXIkL^?V!2s{qz14#
zf&_Al6qLIm1g8eqKqNJNf@ZRf#ccD|dlfpN*UG4Arxr!xY@iwnAi;<PlT8Hc$+U%|
z-l<4TAv}F9(<~RqJ<9Xl2#Hne=?~JgRMK7i`;&8f@>(wDZ6f#T(`oP9iH*rKFXZ_L
z)%AbVZq|3djyv3V)`)r)Xjmo&i&{ADpIyI5)T9<uOH?QS0T)Q&2Mjrwi=FpgO9Ca&
zCo-@=%Me70B{x%;qD+nTz+prZ@*KL8G0%pujd>&N+|bWdg=h^XY@*5&G9vf#IVdcK
z0Vmn=Xd$*W`}w{JgPUVo`uhu)0QY`0%+7H#j@9=1A*x1a??M=o@czpAn7J$u=FA-A
zk&uuSTSNQi<4S$>fV$f_WT~*Y?!DjMVc6dEh}k%8ak_@<a7r#w%?6|6d`~pLfju<x
zTKc>#suzQ$k~bUm6gKbe`p(D7W*ds*0vpZYA4C_xrTnJQ4&L4139rq=JqJNfqAcz2
zoM4H#;uDX&ST-cs<FB1Twa|aiKtAp>&}@j~Cu*h68yOiA^~w$gqk3@tJqaHK-*!Z;
z+X2;ec#8P%=8cQY*?i*&1OD(;$$8hG-d3W$F+yX7ufMpn0_y2lg1`bw`#{k>AO$&y
zxFGK``^%e|yth68xyR2L7~f_Zw{Lm{#4y36<pCqScBE8ER#a?3d?R(3LdD9Bc-N9z
zkF}WO<<Ec8YF5}KKwoV&Ll$KE?fsQPinWVo`CrtGQ^d@#h}!e)u-kIt@Y-?p**0EU
zCNMJbCI!sa7bHJ6b%abdpOyZd&J5(s(uy%Y4jR=9r(m~5;zFWf%$TQqg09=6#v<&-
ziy2BpCWk)2mC}698WfI@U(mONl%_pccSLDpZETlow{J*Oh#R>lfW-2utWQ<G7xIuP
zy&w%4fkiSI5-fkrs^Cdut?8PCIE=3dfEBQ?)2Ng$W*56d_irxe2!T*?Q?u9k(#ppK
zf_$p-_Xs&KIS>})$d=NkD`uM8hGTt97p~*%Qt0{b2x<>laGV0JjZ@CeijGaDS|(X3
zao+iPL9-zgcj-wf{Hi<f{7@;e{8!_BC!~`W`-7Jc$~9k6cAdf|GQREp67sRH@?sF&
zxw+c>+&QN9wd-cCG3r42F*myrtk{8afh=)RaM*hbM>oZrenMopKl@v06a33PnJugi
z`cXX8a>b^4&xPTzi#Ch;u9`*^8wjKe2e|qzP^(<mZUZo3hO~Cnw0^`x)E^Z=kcB_x
z+Jc>GQNUCdG<af8f3W{nIy?2!s8}^RYLFL;6GYQQz+c`K!`v0LvTfo-YEI=*n=#67
ztAgxI;?OfF<ehu19dlR0FZEIyw9FRXtDy)4@eB{;lcH~I76L!yPJl~>H$lnm9_njv
zOCQ*J+m#F|#J$zW(O)udSdeavaSQpkQJP341BdGQAhh)GJQoPr8QajVK%{;*2nG7O
z-Bw(K`m})bUztlGgb<ke!BSF6*zsl)fyqKYxG0nlo{;4QPDrAN$~wLpvg49Swc_5l
zY7(NvP#H$Wi*@L>g7FWP24wNRW%4ezcHV8KV4kqGwnJm4>8|9g7xERD%04JHZd5GC
z-L#7up@X8u^i&!AS$EGiW-Z$Ie3M@_Q<C!ts|6z#N6xoZBWAwznR<~qJiLp=owthy
zeVmT_*$iCESpx2=s?17I9WQu}_Xppjr!t>!NAFSe&0Y-o1yde*pOXY9U~Gp0Qz*eO
zq$bF$t}2osBLo^xW{$TwEL0so>{QeP{KIwz|7a_~kOroyPj#;hZr8KKJVZpk4?K`B
z_)Ax@ODk^l5I__cWf*YBa^|uG0Ks(?GhtDmqW@Z!V?l#S`Ad!w))Uc5e1xr{Ep>~|
zOKP)*1AY>1&$||?`+_c#Z-2j%sF;O-2%gz>LlC@2%}YvLcaPgAzmq7P*YP9*yCT|k
zJoeLXe&E16d((A4WT_c_cb)899{d#jh=^>F+Nxc^-z55I+(d!9l)&xW3r`I?_?$h~
zHRl7zAS^sZi)z#?g?boZ<9eK!VStM}>G2_bBo6_FO8Cav3HDz-4WARIw^U02y<x69
zk<#m($5)r>%Qzq|IsSbt6(kbuI(^g-BrYj6YK)R0OtyMOUB%5T-E<HgJtevDos~NH
z3l+BC{Y@~s)KnHwD&DL)58@9y;@a86juqyhWEuaC6*mo!YQmb<56U#fHr0y(m$i*2
z>^#fYWvFtW#J%##zozG)u*ZvH@4BmVyHB4aAraKPy)3unbfyoZ{+~}*GjqW#g7>+?
zC-ZOKD~^U#7|%+!d%;)jtb{x0|HS0*{9AE4)(LDO)|8RNPV19Mr?Pxqq5s^-a0<2j
zp<QO(Vg7@B;n5>zGTD6+$dVW0E64(Xg7`~&U!Ablq?v+2Px4v>xC(<dH?vv&0u!EE
z@buj9W=9%M)f6yJO!7)%Du74HYxs>23}t;lW{Wo_^F}YTV^p~oUh&#)ilw-4+IKu5
zC|z}53-7ERz4P+Xb}a`3@m>_sV>5mWmwz_`J-PlubK@c4URn?SIIGJBPgNhI7&g2c
zF(DZD0;>^bfirwNPibwyNd^Z~0JT1|?+>VP8q9^XsHfvr_A7=84u@?dT>0wet4+e-
zpQ)0Oalmy;)ENBbur?m`@skc;^X^aqo$6BTOMcf4=ZIfbz{?U6zAdraC>wOJbh;v*
zA6Y+*CbZ^NTm{>+yA`q{a`sBywEX2f`s8(-T@AqlO!8>^wOmA8Ifd}0$riHD_ld?%
z!oyXOQ^~Sho|W?t!`&gk8#S&!`>9dDSt660JeXXw;bw0fd?2`b;d4Ix{1VKp{2_#L
zk+(V72<E;dk0f_Ru117>62OBvAy2k<V=DUMAoq2~305rCGM0)yfeG_my?{3}!)QQM
zvP*?=WsrV{O6Q-U8G~;zWK_V2sJr^2zPmoukRB#2pOsu0kq_%L6J-PJ52#}LIqME=
z%fhxc1G2PQN<rTgH<e+K__Bo&={Losdhq*^y_=6CQEy7g_n+A#HxCL0OJI9{H9_j%
z)Te9F*kGS`ZdSm@v|>T^Oj~kM(_O}Cg%^#Kg12ka;#;-x<r+r#{iA-zgP+dcWUYiy
zUpoD5Od*;Fls5>7l{A8!`i;y_y!{V??7DGe8VrL5EmXnR#D4uLRB~qc8qMJ2U}XQW
zje8V&?erjKeHWE<W$3Hn+Xnm?Y?7M7Xv;$23*fxL)Ke&HmT1Cs+QI<&@S@Nx&eu&I
z@3)Hpo!dOc<O^=3wff@#SC3AcJVoZF!Y!CsuKG2QV)K0M%fYcB_a_!I1F^s-1^kCS
zGUyx~fu4R7gU5+@DfdYUnDcp`j(LxV>;4y57IknJ$?f5q@Wzc)FiALhfe~CAI$vc^
zK^_^*!Fc8uh<cWy6)cguX<k}7e2WBaZV3E;Y#NzTx%+S<JS80SFl%ZPu_9d1B3ixK
z*v&+{3K}pNqd&QUmpd~G-BG9YDZyuVCz|^cGSiXX{QOB><B;~3wKcq%&2DLt0|fKs
z*Y~!l>)qVzUIP8^f-=)Do^hAfCeKf&d#C?laQ+_#s=2~U#5?tst`l<@v=g3|b&anI
z&Mi!yrp509V{;pVk^#FH+^0{9(q4PyO=eKpd=Q;T+$S>*a0=N{FHkD;rEE}py~<X8
z=(yA?)v<3F0>H-hy{R8W$_F_rkPt7fTDBBF#nWJ&OKU>A)<KR5WV*5Vb0KZsL^zzd
zd_sHCP90hHv43V{$k7uG*meAsR`iJnC5~iCZA(M5$q6KQ_thM`&&9b=DLu-Odb5W!
z78JyvGZ&Q@d#aJ=2w$i3KE$Iw4^%`lL%DGg{H^qwb|~tg{M<--QysU_rR|3T0_q;<
zwe^o*O1j})QX0W_3ld)=d2kfGkSIJrF!n89{*2(55B%_-W+?rm(Kq4y?Cnlv_=79}
zLV8y302h=F6z89>NWp-kXQ2vTIGb?qwh)rvx&1+;K5KE`jLohmFx5jUR6$Y4UR9(V
zj=88Tk~dYHe>P4bd_lGA$a@x9k<dCV7cp~AG3x%oD14hu{d{2|)nT%K9)%75$r6Rs
z#f45j)S?--nC*}`;!<#Y?GpLD^~0t1ap!SNjd;KSEE1s9v=dd+K#WlvBTAjg(q;*@
zS!s_yJuaE->+B^5ofKHKYB@4cd23(88;`R^%O%Lf<2o6Sj9<%`_7m+UVkSYF>KBs{
zc^++e=4vS&BxuMM2SzyMCBC&{d48D$WM(BiKJN-~d=z+LsU}VtI-A9d+o5KS!eoeP
zLn`)af_?@*W#9B5ok+*_SJ;Ic^Pu~W?bw+8JyW7@PY(@E&OPGK#yljz=ROOBS+C@g
zH@zv9Uap`o3I=C)y^0%RNfCv%l<=res!%$Ch%t^440w>%(0ZsI18{B_^3QfP7*Z#C
z&SFSi4!VGsOqLs067;6LVJ7iEiClLV75&VJE9DpHRD8g5(xox);@V^~!pN=Bi_82!
zVO)u->%|nKFGrEqD(StY+aw#p3FiWt`j>-BXJBLhOt04E!D;J{V6LbTA)AxJM5&AK
zszrO5ZfkNT?-iG_KAW=piu7}W=+N7t6wZ0J87_siUzH=^=_#D`12uz`0ze6{wJj`*
zq(>`|C|SzlP8I&a9c+E6udIBp!?=x%oGf3hdlAjw+=iRNx2xjO7*d{YbEpLHBe@WD
zy=878h9@l;y<<O;H$|sN2fh+H9L?3%uq8er-^**1Hb|%oJ-^Vb>yF-RcYZRKGQ2Za
zl;n4t&QI3eP!a(dgjJu8eaLN^y-h}<yFn3$ob1EKEjhd?F4!rH+S)5p&1n1kMhJrr
z0_l&1Ss~Vp0_G!n?6KI2q*M5z>n;nHI;JHm+x<-IP?FhDev^cwiBTY|NF+t2YL(vJ
zKqG^yZlK0yb$n-FjH}}!(B5j;BBx5Jt<$LTP0QE9E1v?4h<aUJ$cME)bPpW8dHOf*
zDOMFelTsvvHdcQV;`uh-DdAvjx+LT4cigD+yKH}y1Qx9Yu3!wS9LFl2sP~|?SZCZn
z^9w+5XPKg-&ZksCFp)6%^+}Jw`LnM1e#0z|)Qq6OCl6i0{gO7s+C4WEf~qEz3u6X3
zWfMCxvqva34v(nN{Me!d+Q+Azqv27eX^!lhyrGzA6qy-6jj%RIsd$|6{GhIB1BX)B
zv?uMIKcReo%)frX`?U5z*^k2sC$){{@-*3p{WbS)J^!<8GHEkF{5;eThq0OEMIaD%
zX3D<~Ask(AhByI~Tb4tZm^i5<y35JrUG7bHNos%&Zy2RIR<Y*unHI13rS{grAkO|?
z`QMX6Xg2RK_XbjH{;2+^VPt?&JVl*1GVYse#wB0+UitL;q13MFc4y{)6|(9I6`t6o
z`O=ik@!oOC==tx{0<OQ9I$ru%1(T<OVBae{EE*TnF|mw?0E&SqiCoH%Lgi*u<!5Zq
zjGG&SUpX5fEo)RH)`LQwn9R0^-tkm(n1R}?LH8oc`sr8H>0<1jNA_sugrMBCH<fUy
zMH9q9#uMb`ii{ikd-#9jr{h5^7W3qKobX!<Jc{`J{BWq>D&YO)230=-&W{t!rieNm
z{Iu?tTvs19buf|-7bHTX6GnGOdZLzY4#94dG?<N9gTPwb!}D|PP<E23+sah(_l&r9
zZC#7DX#wvc2Mx<(7nWyFPQ5NiV0&$t|86cUwyQfrx&I^;n{>O!3%sVmlMc2=78Hk%
z_{%YG69(>3@qJR2Q4<(_=4f`8H=6U--MRp7V%%qo<#i5@WTYRt!Ix;L$4V{LX^EN4
zb}`gaD-ROWYV|nlqCTDk`323HdAGwzy}I(%AD=wt-08h?VM=)LSux0g>L5E$7yac?
zlaHoDc5mh@<E(!#GXDaLKn$4?-!|;`xG7869WkgK;xl$UbJ4!Ljm+%oTo{!RLQ#*h
zTn%2!H)l`z>-Lgth{w4w7AzknI~0ACnr(P;3_n_NMCOZqAQOFVEGzzt4YN>X)Rw`E
zN9J4b(8%WH_xE@|uE@B?KU3+#TU=Wns+4?rM)fx#zq|7ag6&$OY0SunVahSvnF{1T
zlI`n!m_%Ht$32{j*FSlS3itDw%mk2)C$9e%iRR>6|8+7=jz%}zUI5p4U{lbwtXIUc
z8hy{yg6>$EJsCtk+=IGx(i-DG5-xf0FW3H?_x{t1o6`s~XfYtqG6dL_ar>(KSZhki
v@RV=I9yKt{jW4llN*MY7yZJ)6bNvBXdH(gEe2MQ9;Pa9alNYV{q38cURgK%3

literal 75036
zcma&NQ<Nq!(=OV!ZQJf?P209@+qSJ~+qP}nwvD%YT6@0#JC|qee<v47rB;%)k|$NE
zsssoK7zhFg2?^+5A_AHN0Rl4nSHr^kFI@o!1jG*dk3;ld+6Mv%XcrO)h>7XHbQUrY
zkQM?EkbuB{=>l9Jpclgb)c=!+fWj_-fYNw?fFc#-#NlCZVE#42OG=0+{VV@7BNEiV
z@qh@Qehh(tK++^d1XVn;b(Li$&=t|XXFJ@@eB@<)iB5yz9FgAzl!FyuLj)Stz$JwQ
zrRar_v_$+xmM8PUXa|TKQW?l#Hk+YSp-6%hNKm5}>5!8Iz?Jv5anEL-QsJF{u{xje
z0C@J^8Gwm^TFaYj6`kc^6YH>Xrhot8W%3E&Lt;aNOrs`1DG4ttyNd^1)9jZZ1GLh@
z5U@Z_lL-)#8F-$`d;@Sjt41?tD=Kb*X=rxZ^qc&sqrn(wiY47BU`QZp1G>$z5?iB=
zG9_?}E7WL}#Q%WyJB?pooKpgea7ER`07+S=mciRMTbj+?KsjI}$k>go(3UCa_u=-Q
z9Sj}gdD-!geMG*O|H2#9k~To5mga1l+Sz4b<6JW|HHBww;#X8wj{Anhmmq`rZZysl
zvFNF2EvNRKG!hk6Y97gm^PBe77MeQHLc_!)B8WEhj0_PJLp4NF-5NZ+NM5V$FB)Lj
zzTk>XN)n3ceTxYV-OHdpzmBM|F}LQt%8sr_WAUUxnRNf+WG_)@DTAv}S!{8BeKwx<
z(L_lrsDo9tShcrgjtn?X%I>2l9E)2W!W!+_MYgGC_4?3SnAf;9dc7((-q#8U#R!L<
z?*t)ORSQJ5g<n@p6Yw4bo}ObYs^nfgK02<OmMFsL$H05J+mLP2D4O@QLozN}ia7gQ
zE|a>y^h{E#OE56pHF8~S60?A|{~O6b7nyl7{*JcY;d{d$VHyP3VhS$-o)|8OI3Pxe
zxxqX$UpNR;Ofy_YF~R|bC})*h9Tyd6$ZH(GbW%5cQ}g77I&S1UZY6wj(<51wjW|e)
z{lM#NeJdE0OdO@%P^ltoh2VssEe(BwzBd4fO($#CAyAcuptOPG^Kz!ZkxRfI2+gL2
zsl0f=>K{;nBt_*!YK07f{(s>7p96#SKXBf6=X(PJ0(1B;oPE`FWpqUU!I{h1J)Mp^
zElIRtwHXUGD6+UYqV8Luh>D}yGKQb+H}=sS=qMzvC28zRGx4U#QFN?-<b{=06*W0<
z(E?kc>@tSc0-Aynh)PXM8hToXu^B^`x4R%^#`L!H?bqov*B;jy%C-bd!eXR|a>=U-
z54PSM5-5fd6%#8Ea5Bg>D_R8kdJ~8soMQ;q?%QGEw};PXO9mZ<Dd$OQERRMv0ZHAY
zuLwvZkO|=3ylrujSkqJP?p1lz#4RrFmfxabVpHGmrBqyGWH+oKE$NhmX_Ajo);-He
z*C9YcB}CfbGgMrB_O)C1Ve(WY=BsHsu?pxhBgI7U5kqR%h!XMY+7_(7%9+^u0BdMp
zKJty7hQcr0!K8(GWdD5v{1$3&_OdbjBnAcRh!$P{=1L}<<j9stDGcaH4@x@%osKa=
zxZ$ViuAcZ24!23Lp&V|2G~wrm(D`7deLUf00D~nV1|+0<9>Rm%`tq`JVPhj`bQD)n
zu>mF{X7u>j9t#g^;Nvb=z-yKf2=UNR9We~Pq8~hMX*>{e8LhdQt)LCy7@^??PKu&f
zUeU2Sv%0E%uW=@*)7y;|l{x|w6YR)kQgnwNxMfZ2;>wo*%I|K6^P$HT1zPuN?Don?
zS=CD%c!S7+c_JDCM5X}5MI595N2NGHBISh6|0x#unUMeHI1fI~=qb$#S4Kuo55|ck
z9TsD;b1V3y(kXw|z5t7E$IM|L?Y6gU0snrm7J+R~E%;#R?BVGg9FNNfMr(_7FeBGE
zF*@|FnX50uROR~icSyAVw4wG`4HbRt!MAO!-6k_<TR^Y;-2MwFrNc=SgN%%ZF?qT2
zRqbAHy6Q96n;5EOf`zC`tVm&bO%DRDb*-T8m)5qYI{o28InQ|&Bjx?|(iqGYiiUTk
z48{vTBdw7)KDhA{(Q#qaBTKWLtwRhDRvz9vFzHa!ug?W0IRx24bNehFgQv8X(At(I
z#oq?0ARrK$3H2vWPdM_wThJdC`xjfiap(5{q`dM4HD9MX_x?HUXtl*1ybj*03WAoe
zK<7w1U>D7TbJ5}rXC(+ssF#;j+i>wNUdTNky$D8T7r7^Wv|O$CmQ-tWI!g16&v$n`
z!TJ=tgTjcM1%^x9)tac`%n+<g{zu1c%5VEU$TB&3uz_c&GfHa-SR-TviC78=h$Ag0
zWec$DEl(bf$`f5p8mC65udSp}HKN8~YaSLQgChlt-7IfTeElZYc*4Erd+~l2F&$JW
zq+4`@7ros^-<TeHh(lVE(C=P`Ub&VDW23Kgjf!(n=?M-pP$o~xs3O54L$&)QJ*kjO
zAY5F_i#&37w5lYz)g%GASU8==VM!Ck#Y)t^OQUD*5m5jpPt`QlP(I@8T8BD>C?gJp
zwA{3gQIpQzx6@Y@7EdaRzmjC+p((X>d&<-iEy)Eh5Ti)mw{7I*cdeBWebjMRb~E3j
zOcJ8RDv!E2eg41MT=rz#+YWZRCVnu31_butC`5h!7ePhzk5BYJg38&;>lp|LLioRe
zDpuXnMnx6v`?kZqw1fyeDkYKKh^84OK?%(PctD7W0!&#F^pBV*$`RpFP>2Ehcc28B
z9h<;l5*GP#Kw%)77STw6(FWRPBem!S#vl}Vq3Led>2}++H|x^m)buu|`^RiA)SG+;
zSS39W+b<5=PNEbmS!9w4Wg;rppf_ERAaRiV>_jv$5hun6oIom&0#hC8N_#syzELbw
zs^k>}j5n|VDUjVZ$dS?%n0Xvx3lK#SC_$tkMhXE5D2YE@tdIWgJ6X=q(zOrcS0Gx}
z^da2zbUoeghnv0xrT4!Gv9dm+iq9d2Ld_P(ofx13JVQbv3=}RTh{3LJUe1b(ZG`J<
zy3*M>>vlE5@E0YB>?J1XkQH0z>$ihhrbA(A@LY=}h3ebM$F=22=lQB8ND7EdTbo?~
z*QKS1mtaxRq@Fd8V2aI9T3a#|plD!{LCTkz;>FS-=ejUqP~;y8HK^uI&S7#&ptXxC
z#Hz$oUqAiuoWu_CT|^#Ed?tvueu8ASIrC(Np*uTkWl1FL=^`OB>!+X@{a>&;O!3Y~
z&;_i^tnF>LNJi3=6zgp1U!vT2_3x&qys1}RE1pQ%09=TfF7Hu_iii|97h{$As#!`o
zs(xqK-2USvNM;iWhQ_9%cE2wS20aU5*%?b8z>T9us|2vTVx(dbQ!6kryL7+qGT)_+
zROqBTt%BY+no{29C-5oHSA(NQ_pxO6>m`San@dT>G^l&=0T}CyV61+!TBhb1W6zt6
z*!^-@K2g}*s=9#F^OFrJIIjgio+$dyFA@yCOP_<m4B~u`PmESOu7KB8Tq-)8$PsCR
z@RVZ|W;9mw*r9>Vr+-(kgaEf)Xbeav^W@X>^o2R{$0x`zsJG`MzVh1NR;#bKU+DfL
z_C-DmZ0@QC!x6mU8Eg*nBn(YL0u2n=lHbLU*uBLiC8*%wLp~r<XEMVFf1S_IuURl{
zH+-<PISHZ5nS$3r?Iu@8KYm$OnEVle;5Sz%RZ+be=ya9#1tG}M3iyIlD=0a^$;8oK
zSY8iHru-H-+HfP?mD!KO?erApVX%kueJg*jifl}?w$%o)LxAeY7vA6I8u56#d5;(w
zyoCCFW6RlKIfS_WHM7BXpWs4N9nmSi8F|Y-3dJQXs2vEe7a~ot*>;Dyyux14?g3ZI
z`v?>j6=tk+z;t}_@&t{Aa}}?8HzUl3GctS0T7X6{opMhmFwC)kIkFyrsTYjQP=T=p
zfrG<v<S~T)bNDfKY&<gQNtMexNon!`OTPZ%TI4V8mFafsq3cL)JXpzWAbvJ*uk}1{
zQC+8XxyGPn-L2DrtzJ7k(=pXI^6+)bN(=(Ax3yM>>f^xZ+?kkwZEmbW2loobARELD
zpz3ugK$Vg_K0SQ{QpKgM|Ee-RzitmbAcZLKQIs6V(DI9i3>X@inF5akOQGJyvy&x~
zpcWun@EsFd`ODqibf`&4<fhM{=YMoT5c?2qTef%^WKhh`(Z5K68m7`{aZX%f_wy)j
zv*`fEfh)*3m&1ec`~4is3ZOsR-+^k3=YGt+)CTPIbFQaswQ?3--*<|4%IJYbt}I5%
z-^c&=HM+3sO21jJCo(MWd$=}d=G@|kNA^q)<dK#VVZ;u<0<74rJ0IXPdsHI5R&RF`
z*nFR9#d*O!mxA2^k)$P<%u>?SFe9^n;6nh0Sh5bsE#K*4#o`2wS)77|1}IXwFVuVV
zv<i_11$^?cx3w3!(K0Qv$cZF!*Vt-9*_kd*m3KiP=CbeSu7uBZx{_Ju%(pJP7Pt7q
zAjQfp?Q@XcnqlZ)g6pkZSBFkL=C@GV5?63Hm5P!SI)U5xGI2bL1w-3|gWJz2HOkkt
z(#t{lbjV1P`SF)~&3BCHnl<2(u#p$XNTFyB77iExEn<~Z(%eAs{QeAg-DYqcD=bGe
zhsG#4@d@RJxrxa<Yv#F&HPd(4<*O^f&KS2KQ%@XUO>_0e4rX;L=fdZ4Gp#`3D&<OL
z$udR0{28=M+byT)%1^O_+Rk=jO;Syk_*C|Md%HG<)6@OxK0)b^U&~cre0$(p3Qa4S
zkGO{km+6BC;4Cb2Y)c=R)va}+f|)WSI|f`{`R6(=6Lsu=eiM?&w}J>r#TWlCy5~Pu
zBh&xr9(9oSa3COLqyOrjnM}_FJaykO{=1&vr|TO#89S+JU7dBQwrU)WMvz+~#UVq;
zHpvQ3q3uMX2Ut(y-w{;#6673Gf{Jm};rlwpG7=>yQTs@7P8lii>!WD{ERE#SV&SeD
zS~Y4_I~jatZsuO4UHX@<a~)dPkAzL^TYSFV-#dMGcK~aRZ&HKw5&LoTwOUB}d7}>J
zDf|=x3%9?2?Ixhc`UHvW=Y?KIDQ7I9S#~-6v-p}Ue|Fq#T`IrYb-Z#a`FB2@kc8%f
zxXDU<&xa$!qaP+9$**Def&%$q2oRk*W_AW=Zbc)!L+isz6rc<Vh>%YWNp@ij3Fx@v
zTW-X)pH^%?kQ)m9>TGycJK~Y@TZpajmW>7L-^MGH<7YW7bixAPMCRsa+i2<gYE!=4
zYJ}%QK(I5xk4E5GPg}V`xhW`i?U_tlNhr8U^juh!%!Q~Wu{faYwOLU_T;kCd)6%4n
zLt4~*`yL;Z%LqJMa-bJ#Gq0m?#Y>Xrpe;>Zu~tJ8(vXzc$ojH}wUg>lw^K?5V0ao+
zh+^(6S?prOB%T|s>AAw@iF`_uT34q-xVK#ohcV;WEI4Sz_H159V<g7UN}9!55PSn0
zH=)0OknCk<srtxeon`WIKa>hvOaSLV{QO+u>PsPFO$(^pEz269vG$tOv~XXf6P1A3
zU~?4Fx9)`t2IFmF=ni!$a}{gdF7AiQSdRv{he8HT(k8OCGdtt6eFrj6UGr+eZv54^
zDtW|4nk=H2+b*F;d_T$(Q*gl+GtG>JsH|=4;y&xOGu2_2xy~zZl@&hf(938r0PW1^
zXPx+l+eA^JL0Ki2o%c`K#={xzyT>KV-dEjS)15UVQ7URpN+Vg`=g{xp521)p%WeAm
z2X(yzBEN|u$aYSJ@#Ac<P_&@Lt?^IkDc8N;?t8hM#dubZU6r&zk@@=4X4Zsvm7196
zs!iW=w)m&Q`x+DTreOA(oIWSae^SJMKM5K`9HVf=`_c@2>2Jqi{^~xfMbYn)Z))K2
zlPiwo(7#|KC!Z%ylR|jwb<Qc^gPGI1#4S>=ESy0fcF&AWY^0~hvq^~|C%-f+0u9gM
z0X#<b>Ca8UqEj%?<YI+m!V(a6|Mc)W{K%C~{my$2huM2ylwObinNH60j*a(OI9tw+
z8ed3sNSmL>$Pfq<TBj<ovoXPNp>oFZwqAD)Ki1Yp-ynM~vH5;1vX2%rXm&7JbGRA(
zc<<-eos##7FPo*Zkx$4A@W*T8(wO&oCheQ*>1zvwh2_xyYnC)Yd0?MAsfa}3xMJ*|
zvrikzId(aXZD^fn%|aCNJW|J$^(zDVZztYw*E?6A>j55*H)HE_cT`1&^~^8hR$d2M
z`8NW2yyOTF4^derSWG|c`xBp_uU)O*fZi_8yV4ajz8TPX>c>Dwo1^2{{Cb(jt9da}
zLdm`f0UOV-`LMs6Go`F>daMbjr-`1!Z-{?9iX<igSWfPaGrsN*nfJf^bp-VG=Y%yv
z^2-fzMiJk6@w9yWJ@652`qJqq(7TyRD=b4-qg-}wOH`(i^w(riov>oXfy;pvH<Kfv
zqjOG;zr!h}NH%^>LEL>F>Gu9Eg7-cig3zoF&jS3jl?$bAV){GD?qM?xfHlB6fEvLj
zxJC|f?_Xkn&)v>G7JPfha3(f`yza90rxUIVq}PzrCaFvKNfxqVAS>@igg$_a4dyuN
zwb&u46%&&epwayP>RX{Iwa5AfWq`)L!!(!+=F}0^fh+{8gmY5dC%KpZTfQcUspHqs
zG}?N#+Tdsu0{fRr`{NOA(z3C&^qM}DJm<9fO0bCd0|Rs_pdrGeNXeGXAZ-y$E2*As
z!zI(NEnd|vF?udLU*%6BZ_&igJ3^3vFmg3`J+Fl6{&fM(?mIS%d<s{q8>&5S$Fz|V
zoc+Q{Q~cj@1*S3-jYX4(b(>~AiV*PzFKAHa?3$t|a_m*4yKyw(jTbn8jR{p#qK*^P
z*ln5GRK3D$2iq4K_zP(EG)$+`ok_zrsWi?QsOAz`5^;|(w#gd~rqqw{iw|RbF6Q%#
ziAGKXwTG#c-{&?IXUmpPxM=g^P%4f^NEycjE|b^OIDy@!7f;H^!f!e{p<XaOtN<u#
zb+92}cV^FTJl2(_b=`e6a3{s1%wNa>OXTD51Fh9#?g$!KE}mQSgv^aje{|+RT2=c|
zJs(%7DWW`Q&tS8Ac*k@~@GB!qp)>ZZs6m<aILn81kg{SGiD7Z;P5F~q(XH6aJ%HK!
zqA)NbZGuFEn4CLCGjF>zsr*56vc`ymPrwszvdFXPY&Jl&&Cd4U@wU|cQRK_oiL7Mg
zD9)9vvCcJz!t~nx&`mmt`#j?M-r|2sZIVp8IB?9+MXSP~Go10|@brsQ_WLXR%P850
z!v=^;%Y3>k#|qVfbwCo0Ub^UpMPe_EgP%+6#cS>*JTlgwW!U6kl!Tdz+1w22ue|Mx
z=#pJ*YZNt+bb58jO+)Ib+L>Uf#S>;UdA}AlF+Pz_GK*IVs}2ZffHtATawLoCVM@$B
zUR(SRuHSg0O$TfiEQlnjY)>&yfBCixykcZM7(_(|$=~Hm+X*DgA^R#1C1}G}FY7$2
zJNSLG7=_2{Ft$5z6j!2p1WpOf6g2PWr_RJ95S;cO`=uC@%Cy>J@H(=vyR1Ol|51RO
z#@XG0(q~4+5d4ex5$_w?wd+Xe);ZqLAguF?UvlFrv}lcaE7fr54#4WZVOBp!vV*Rq
zAy^C?#zxy1<fO@@*YdE+6|$zq3$Q<<(*G4RIF`!yOdgJ<$uqsM7U$^m7h9?4LgO(J
zx`lX|3MTR-d))!EnM459GKk#9&8{!m<%h;8Qjf#_s!%J3f?xae^UusWt!cI5L==xV
z)_G_(lmWZO={qRX{$Q4!L`z@ZjC<Yjx-&6m+}zU5sb(^+`IcAsRU5_zbLQcC22A{S
zKl2-$VUir54F{1(HsmskVe{?IjjJUnaIfwD@6Hvu+3Z&dvZUf|v>v{yjcy#fo`Inj
znrWV=<2_<*IjxYm;BBj;^nkzwne<^yc9tSy+%nqj&Jp7=e6H47Z^C3o@{EpcVWj@h
zq0FqcYVm8i$2R#NIBg9_B1=ZM+R8w$1=|Eu)IICqCBXdJ%hvStoVeCvpcrJ5m8$ai
zkmXt-f0p5n)J*I$R&&+c&J(X|wS?OeOwxP6aJ+R)b{d?$^G5g1XjO;I%rQwB9|vfe
z|84Ts>T|mSO~0(R-Kp@F`TK5S6S7JCAB)1!U;9{S^G5jup+@j*mGrWGUBRwj?h4h@
z`7(O*nOayVDFY2;6=3C=W>z!?ZfXvP)g$9BLFsuv&?PEiE_ZN68G2F^EqL7EeBy?O
zI}VmgsLNK0xeZ?Za-k`{q|F+wb=l9Jdzk=-=k2y%%5<v(ro!_zT3zt5I6=4v%Iu8w
zLj*S96($f<QX+6T&{!IZF9pq1RA~cG<Smt>jcAN`Z{$DkOJxP#kc{0<iT1o-aAjp^
z??&SnN5n_w?5*IF0v7c1ab(wz8T4w@D`-!u;gWNQC7i+-(lvfc-Wi_YDdlTmGtoxu
z)C`^<n!Frylesy^o#GDLb}0@}MQ(}m<-$Jt28}^7R4^ql^0z<gogZoksc41<jy|8F
zwK*RA(C!I?GO1H%!eO-y<sOPlFv_qdYMaMnyr<@)f9Um!&t(<LWk{9`wiq^5U}eko
zA=7gVU8r4ZFcH!W0*$lj@JDj=B;#>P%FNL_c4u5lARAIb(I{F%eo2lzLG}t4ctzFF
z?#ikZPJ#87-%sN5AD1q~iz1tP2{l@2lQDznqs~e`HW~AN{N==+ZU0q~khB$k)QP{-
zMN2b$(yvoRV@+Eb8fvRqo)WJ*<M8-7r*Jg4_-{skH&)P%nra-qfeGgiF29Ga=T}|f
zL0wUUV+^Uzq^n=7FLYI-_N86csHjKAaB(%It>xvO#1kPSLY85f{QvAUd*jW_gE30s
zlmuoFJ4i>@5FF$>?(8=ja2J;*<m`9b#H$@48qV>O3Qp>jSyo-IFy*7UeLQ)k>TL3i
ziy|JbsH;;bA$(P>+LkCSqqOwhHy$+T?AnBxHGYxwECGtxpOlLklZ}SI7_Fx2_sb@|
zyA0RO?`aBkYKYBT_To)6n>Y+?lWNy~b1lo=$Z<bTNlWIV8ML}2CQ&g<p|-Bcl6Iqw
z$|0qbYX%i`)D6(`a{Hd5UR|q)rRa=(kH$8p&X2=YHkw>g{_=$BFbK{~%#yO(OBncB
zk<}Xuw*p1<2wCezk%E`9{L~tB-YK-OHhT?0H#}j#oW0VLDb4PKX{4y}IB^R$${TD9
z>LwGKb(3z98mGwbpFZy=>{-~kBsXs;vvxz&(^7QX+44-x7NU>_8ebep6I%j1IuVB#
z`Zg5xf}}{{>;}!ThHUxgV|3{fE~Ffm=!0cWd|}>!)>=rFqe(NEiH&m*lyJh?D%Y?!
zX-06WApB@2o28(9(4u?II*pWH(W#u>%NSdwCVvSrFcWt*p}L7Kt)`>^=c<p&YK%7u
zKpLWnVnnt44Zie>`W~6t@yfT!<?N%Ujcu%HzefArsptLY%4{;zs+<&V*`|iBX7X~a
zHC|>jyIr-DU3#+f-GaxU^w%hE9i}Gx`c&ym@G?lAQ3Kw{`S>v|wLZ?p*lz<1#G*qg
zJFu{Ve#GE&jdJkbFf9ux_2m><RrS5XVjJgk1S({7xhc$7W`?L43%%ay1O0Y9{tVNv
zQi4`nT%x6%!ppfVE{WrI2!!GH-Ff?OlA~yJd>*l9_~~Axkc9+c!$`eRGksE-wW$#V
zXS>k1v@hu$6M+y4Qu>>|W^TioTFu2WlDv}E`aomxHiye)-i=-~KUq;CCMZx5EF<yZ
za0}bUK*=pL_#qM9HZkQF4xSa9UiU~(U$8Rqqy#fG_ZMuD>Xit!s+wXnaL1KzpDKNv
z)C}lAx48p#20>FkR%O!m3b@6jb136srMPX4u{axE^>9T>CX}#5$Nf~OAl}K^!(!XT
zi}I#EvXHhc=b;cB!8D=dK%#mCDa-pX!y3MV7EF!@l81aD5+ySi7nDAyz{_o|qzP+>
z<P9qCOrL{NaI@JW*VOrD))<T+7{7$EM$qeGvJ5H1iQTs5ciIq~4d(#3l>rD)5~$~^
zG?>zm=8u?lZZj}xoSM_R2LV$h%gyHNIR(0SMFzw~hgO3wT#arGGB_GALF_&?feivT
zkfaH+w4Ei47m?#nMV^NmbJH;Dnh<FumD2O1y0xAexJ1A^srKt_)AclHZ=VLL(8d(t
zEPd3>c&<{l4aep39Sj|_566fL*o>U#z<}#Q%@S({Sf&|8UFzK`DgLJKlpEBoMeXhC
zOmFvVzgBln<Av=bf4#jS$&v1%TV>V)OU0Kpxzj4zJ0nhWTEe^hD#dJD)vkGLORVM7
zYuGy0UVBFkOD$d_5HPFFe}8+}>-!Kw0V8fc%ga_4+6y@olL3)=I5l1D*Mn>=4GYmf
z0vgedzAM2SD>=IonQlv;BiF<nOuIFyaqd6?H|Xu>a{t=V$vQ?#!TPW@MDWjE6&7#4
zce8%3YTdDgHOv|dqcF9i_hD6;H>=MNtvh17EHZW0x4wWie0^xyFnUbE7FoWFU$wZo
z8udlmGp;Ot^(7V}$2-{kYF+)S%CE8hwG@2E-Dp17w$kexR!d%ogGE7b_F(XI%75i{
zGteUx;howXJ|k1P!l|ou>iTNCDSJNol=Gp(9C|I1CxXp`g*oVFBbeuP+#eV}jeAJw
z|9N|&$8O=H#i$Y!!<*tr#tB7iCos8No>rXuv}vWha;@6RBz2^-&1WIPv>BC1&KNcC
z0ZaxF5Hf9bK=4S9(DQa^yD&w7Sa{MqPU3eW9{q-%z84c8$)WDObNU110hGf@#L;o`
zzqn=u{_zF=$2C)F>9`97glqBtxn{Cp9dy<__x#Vcy#cqN(Yioj0trMC3TTpwr4kuQ
z*PD&lTn#4L86KBVkIHKJV^W*ErL9LXx?PIfWXAD}E)+-HH6=3mJT*5_mNe?Ei)@W#
zQfW4kNfL?3`Y41bk^vq_8U~o_J0ILR&bJKpj0(+Lvo2iwzi&Iva_@Ndj(+$MbT*_1
z^>9b&zWe-RHN645)<ZpyQex4Zy}v08_1E75wnr<jab>e1VUA}$=3f75-j(xF_eG}b
zackM=((+;jD)2*sj#mFQ>AAAUNh3CvigJfKc0&?=m{B_adEpni(S?nkpI+Oux+{G3
zURr<qnDkZq;QgEIC*sRc@Dtyc^<bvQsz*%c>nlVOAN-|)rum`g`_lVV)2u@bIyw#S
z>$_G*YWUM2v`tJ;X$^s^$H7=>IpC!z#HbvwxOc=%rP-y{RrjC;+myzS8^-2e%U>1v
zhO_iS2}_N~YLE3Un&3}5yqGSR{r2}4uf;&l0XmbxG}0dH^XV4YD`!b_cuEx8N#L$y
z(-kwhEu4n$0Il)X-IYU)pw%YXsE)PAC<|-MByFGyOhIwI&6HFDi9ZR+-{DA9z?Uzj
zBvKX94>fi6$I+e&&?3w58pejDVGS7PjhgNCC7?zu-$oHR^UTsz4Ar=KH(EhzY*h)F
z<}UYWtnX2vifml%&^z3%Zwsle5J`nB!A+M*U8GM@J&SO+dd&#^P`i$OdPh;pYRU%X
zBemhhoI`&Jm%_GWkSZ!@KCR-T&HiVwi~YeEepiN#N$3Tz_X}(DG6887h>BjWQE`v^
z)*vg;dTnWCSyTeHf=r4^Wk<|K0hv!vf2~Thqcuv3P3qv0orD^%08LrKjgaqec=CNX
zNH5-s22ZJY)wr5|Dho3djSYn!$Hg1W!y`;YI(@Vru^#Sn#2=5XOR`rl0^6H|roPU|
z#9jtx-KeScVAIG2z-pfP1Qm?%mK-9?h<b}xjN`J6pKYnH;a=F)8uc;0l&IHPi@fE=
z0K%cRw>@dE;n}8Z?=5<M70WpLtr|<BELNZ?L6=ZW%^6yd3)X`*pxW@`w7KJUU8$)c
z^iAx=^4sQEOiK+-6@A^^rt5px^&^H^#Vd@jbpd?uJ-<0SX4luq`p5a)r)c2HC6CQd
zmwLp@mDbxI@Z0as+P{DAYec-m^$aOdFSlfcm7tD3RmovZFS5(?PyBWR29JVAFEgNq
zd(TW=Ygwf{V!m||yUNN}VXw!0&VC)GGsav!C@b`J#?_ip4S6p!&mQAL46Z(N*7~r8
zVMyVPcKdatYvYsWen=Mh-TnFicke6xbCZ4xS~%2nV_m4;I(VwDw<=5iXM+*BvS<4<
zP_g&xF8uv|hJi0KHRtvkn!96Z{Zw<ZSF^A0eh`}6(7)aBXqRj}M~lJO1>k)C**IKX
z_%z5djOfufPT%)~ybE{;XgWf!lcDv~xE`dON$-8I{OviVRw!`*6&>HF>i{UjGf@Xd
zCm_w{8HWEdZ}*Ls-;K;uZG(JZWfb?h#)d0Zyx#5tWJ$_)HGG4kml}CkL#)2mG|jq0
zaJA&DrFBz~%W?==&_|Ec?~ZH#j8MLx^8wGHqld$Ss3LzFpyUFQ-lCsAtLpq?0DDX!
ztE+n-xpO&pdB@v(g#C}bk`IZbK96g*w|{8|Hb&mKHjP>;bSV#y=7j1%iNnpzr>JGU
zufan~%Aj$+94Ql;HfOcjVg1%-)E$>B^4@JMuWSh{EqVS04%qGA&+VV4@?brBE8px<
z4N?n~!Zsw|rlNz6T#od$4r%?pU^(rkGrbYf7e5EqI+2br{2zAk<kgc--79ibK+i8j
z;MB2}EaqZdAe5{ynm|I}94r=h%xv}?&tf&8jR#)d5O=wz@3xy@#WzOtFMve*xT3$V
zJppCd@7V_a%!gZbf&7q$ibyE~jQ#JdQT%yLzp~dOvT+Wr^WMS5I+sql7;}^He)6z$
zf2FgXZdf(G#v1Kqyio{aFHvw42_mCz0w24$xi;V~b}?tmI`8rCjknx+;@*AkXL&r+
z3UANnMH4E>Iv!>53!ic}^73Im4r@m8!x{nyiJE?Qi-z(;o5zLw^w4;8{?K%$yFC$(
z?n<vZ-jj@&_nxroH7H7u^gy_RbMGOutd$V^ZO|UCiIy+)=n(8)LRw`t_VAC~9sqei
z_9=8AJ*59w<{CE*_E+Q#^-2DWiF;T!NUf~t2_UC}r=S;tG{RNF6o9Xa{xTNjtygw1
z9K+f5ugvprnmTBL{0?g>u?UTjNOXKgV<uf@d0-db3n9T}7PJjH?+3aptQC%!y8Mh9
zSV#=|{#?)S^m`rw@qew7gxCT5c~>zQwUzr)cH8y@WyGj@Q;i&_66!e@2xP3Mfl*vl
z3L41yo0N?blc(?rum(^50kh+K=dioWIt~vtuP<REI5cjnHOyxm=<{|MUC)z%tg5>3
zfz_zQy+S}CI>OrV=|J)5A~8#wH-ZLy&6}}Z?Mvh}w}s}k`39ht&_p|f(1I5DIp`si
z3s_KC48G`tvynIo!E4c1*Cv#}GWj|W^XG=YjM-6A#x)?NzK!3q=)V=YDrg<wJCpl8
zYt3Q}|21=oL%W(t|08FrR;5LjuNqSew2SjgDrTE4D(At+i~;=gL*Uk{RQM17MZyDF
zDmK(0%<PBFXRgN?z3gX_fC_OU#+$gXnS81QBBi8W&i->O4CR&cidg!K^blGVrN_BL
zrn~Qv<7`ekUX~8(5s<9BcEB<;eC>P%pK>(Ja!iyMZPmFCz6X{F<^{D39J)L@Gzv)}
zV@?TYj&Xl339l1~_3pvqHkfp(X6I@Ts`{~lUO)?2+U|Q)*g=#^`iRnq@m~>%(`T@Y
zybu)v9MiW-vZAfA4wpyvrnIP}&jmo(9~x~B$25=?#WP%I)EPy~oHtX5^Jb$GNqIF`
zOVL;j`~m9D8wLnx;h1C2#$Iz!z6;_cH^SaM;R+lkX3tzuSj7Dj*!{oHT|5%wc!Hva
z>EvpvhTbqB4mD7m=FIK2h}yU2W*3@;2K12fWgf@(S5%ZSq!I@XyQthwl{ICp%s9~&
z?B!prHp5x_9<oX)1j+h_0>Bd3xCS7%sxH5KSM#tBHWRZnvbN;>y|C142LJ{QAgE7R
z>F5x^s`7`W?)A=Jx_H?ggf@@|3<umGb;b3xFk`6e1wv(d+hprIK?T6$UFfCql2I~E
zD#+c|OCReTOcADYN19F3DP<iRbPk3E<1!OPI8v<QRqJ(Wo|i<xo|P)N&&8T&E$g@f
z%DQu7w{Oaei-(J3bZDeB=!pCZA%+$d7;&+wDH5iN)o2&9w`Mnkj1J5mAQ`a^Yz59i
zA*<f8eC%xMn-Ekca*ejI$0)%3T;${Bc=nq9oW8o&)DTevb^}_NZt#L)V-AsAl}2G1
zi{uQ`vQ9=uQD^$}3agU5MQ1fM+vO<maPxI15_TK#9NRW5?cByFPH+37ZZ^6@O4LH4
z4ZtyjNOOQlHu6BS)J6#a?Bo$cv|h$RufE~wvtf`6G$rILxWwE3<pVc032{ca3XnHT
zlryR{*a;d>7{8$C3rmNJ;SNrgGi=n_RFn+LVy!4gDrNcwd0uFu;oE%IzI<;({1{_)
z-NGWl64p^oNJEyb9ub0>)t`J|j4^fk!ecgmzGq#h4t;am*6585sJ-ZNl`0j`xqf{<
zUOEYgx;70~17=5&eGLRsKEk4GnuKdr6}-?YFu9pmG0DI!SiZD;``xqa3*xZtEvOqm
zn!vFze2!Eg472`35JoUYg_N%dBXR>DxrHTC&*OKl+~3@>;}_Y&;W19J$dewm98`3;
zhwrZm90W!UfBX_D^WJ|e!>Xd*tMKk2>95?aL=ZVaeS$q<(u)CLyzHCXnfxOsI>1FJ
zq$>$KJHhNgP~@sVD%gXT1M<yljCKPPt{j}KAF>13?b{@68~%9A7!{x}>%V5`!)0j4
zP^E!~iiRd3l$B2MJ|EpFU(mS9m9=#|V?abqnK|JI#M5V-I{NwSBb!B$M@18tkPDV8
z?Q5tMVwXmVb3I>AUGJ%r`R17HCQUO^NER<W1E?SQ5@v;H;4AC|t!hZNKsS0LI+|zR
z4tc|8`9_uvpsmx7&*jfDa{5B*SR+_M8+C;6CRKA7UH;IhdV2gI-ZwUBs5Sb2;p=)q
z{(JnfICnG8*;^_)B}qGr{*xA{Ik4r{6AH_^gy(<5WKJQcOap7fCDeLFGdcI1yhG4%
zMaswP%`B{5JGki+G6_r5V_-d%qf-9+Tox8aNkIZS&4jRG!7t38Yc6q&cedvZ#?1u<
zJIzr9NBwo_q}sIIo)1<pG_U)Uw6NCsmtDG}W2u{SM`Jchm9QbsjzPG_RuVT!^g73<
z+pErxo(cB=J1C#d&#9{l?UIaM=Hc}fLD`(-X_}AToA$&@A0qB<7EyW=)_A}gEmf+(
zUjZfJ$IVA!u8<&96bi`ocf%|L<XJ)}>U2^X*x#*R+&vpyVqr--ea0#7*PEj9`uwo|
zy8CY)m}zn7G01&BvW*Q&R-8BkSUgp;6SAnHW5a+ho(;aoEg3lxB2W~yq>wC%JX{kK
z{Ox8QGHMJex)d%?!>A`p-C=FrPG#uMl45(LYo&lk!FB_4BJ%;CNu$A_<yee@qo>DU
zf-hZGn=Z9_@2eFXwYB-YE7BY-VG&Ge(NN!s!`?2=`}e+YgfWJcSluXR<k;c08_k?q
ztbxn)ciW>;z!_+DlhP*F&2;RN^}s5{zCw^4*Cc#aufV=|h+>5823ax+XTetn3&>G>
zQZGSPBJw)hd7`{3bQ6IzAMvYK7OWvkT_#2L*g3mz(o2@m?5syNKi*=xLNTV0+v{MO
zVwR11lEh~B8>xp&o}Ob!2?+~_3m0;cH42<f_E8h!w>kwT4zqx<-cmy4A&4ZKKKbVJ
zqI4b=+X-lz@o8y7BSZ*VyJ9Y9%@2KLE=dgU5YZeWlrZdGI+;#n6<-WusAXO#mj^lZ
z#np|Gi9mxRlYwo=BzM<1fPhc*wMO{4gZdB6K{wet2fe1gWaGyxS<jkQ%$!tQPS`|6
zLMZs2$_LG6V0r;<jc(4acywft_~hk*^Ic~w<M%#tHxsgSQ)0;Kwkh7-G7si8H>k|R
zf`DN%wq9U=rUyMdvCYLhQrb@N8Kx}7c)bd>5J@G$TOgT)z+(Haz!O@L@;?utQsBQ{
zI!(N(r%(|I_uoor?xbBG+~a$u?fv$}^tkSvS`8fCNDj|^hSRdpl#_c00Nl&)pn*p)
zEWyaiW2qGy5GcuF>d+Gv(FEEMoKFQc_NUs6eId=&nUdBaFE2G|5Z_noGuLOv-_7Kx
zRu)pw*Hm)~KibG7EUg00YrOrHvB{h0G(!<1jRqAUD@+jd+-e$HN@BX-2MeS=R}bRn
z8&0UGBk(>y7nJX_sC7<Ot1P3el_K3<8qEAP$@&kEvKZ7LbL#EZ&)vPi0wYr6pGw2m
zg$4ze4sHzjj4v4Y3B$mNl0GiAil<uv2^N5ySjh!}lwa?cKSVIRN)>1mDmdB{3W*3J
z&mii97CB@qG36dXQu#m4)#O-xD*FeNeZrlTkSlDAJ-?z;>6(7}jVZVaF{?8=6_BQ5
z#_E;S1E2NFlO?!4CSg)=8&w`2QihYEF;e!YjWWjc@z3~ge;5*XG+-?x@;OAq@tuQM
z5G=S?&TM~O@edzQV2*e3oX_<|+5rB!;qa)YM2r>DmLH)XV#N4_M2WxyBRmc%5m~PY
zjf>BQprp00<~5#|mgXD}uO+>_+msmozV#X$>WH}23_q!<m6yqtl4pE_Et%7#V9YYB
zwhLH3@Rk^0<gwVv!-$vVP3LkPvso`(OF``n0%iJ`)3zN#XNQO;{4t~PNvW79lguF`
z&%!QfGe_m?kS$K~Jc=F?;2&(p#JZ3;)r}+Yj#H-~q*&q;nbft$Ko0qxHcf;A45{xK
zqHVXRO5Br{kO2!^w5D0gUX<oOP$i;*i8m`taQr^>6Hq^8bLCdiu1n_BLnhKmkH5N`
zKEKUtR_CK5>EUAM8<|1Y(y%-cL1!|_AbmoD+JtzpiT${Ny!xysYd<H}sF|}~e}NnD
z@O0*R@CHDVjF)+|!lM*7spQt$L@C}OW<bk5x$a2E!rm2?4C*7Jo)M>jR?<~?OZ@{Z
ziTTg4rmAvm1zhhB^|AGTG1AqeNw|OpG)Uv46xb?gv{VLE4-Jb^ZD%V*VHdkpY!nae
zh!AcpyMds1ETAQi6v?0=Bqi(|cZr?fZB378hLei_U`9WpZ5*2^-9kl%gyBMP7)+2s
zTL)NK#Rb>-WmWo95(6hYhfl=s$}zADA$d@oSy1XE;jo!PU|sg6wZ+>Q4H=|LX<T_Q
zyGGFx_ZGoKtV7Us#hq3wXq$&kNNE<c^w{99k328qg@#IpOdnQRmZrryIUXPd>I=4;
zvRuR#qZSn>3v0MdG6`%!7ND%F#T7Tj(O`OhKj)!ZMp!_KY)g@V*GgbP#Ki0OH#|L;
z{(FB6rMZ-9YWO#adAQ~9%n7CV-yWpwT;_uqVRN)@2B*o@K`<hVMX79>-rZ<FR3eYX
z%Q;^jqotd{hD4$i{2`6NP@ox3W3Y7RvnwPtyjaY5z3VJBGuHM*$+V!u^IpJ`*Cm+)
zys)a%-9IK$Zm>1xjOBVH<W3W*zvv2cCmI$Qv2x`Q#e_sEsj~>=MAW4UwxC&C#&ctc
ziJZkK1UpvaVg(Nh!H1HkGo(^s&|dc%(s#YWIljsSDpQ(gbZZD5Ak*a7C6n#w*_3td
zwxKp{ItiFL;^WJ@6BpYq7wX`jtuJ75y-X^WQp`EMK3h6XC^kmw(db!pilq63M{byC
z_pdJGtO0zvo_3Nj(x>d|$w`+@6mg^B8)&epB|4_3F+5K%l8+y;#l$~0I(=co5oDhh
zpTLzQw|Li+;v_4sayTm3g7N8&xajb5?rUyB-8_jI2|RL}x2DE7-Ho&v;#}%WM9Yai
zimBeAr3$u?2HeioEa~p(w;ECn#_gJc8`_8c_G3F6VvwU{GLoD|SYP)ut-~^CQ-1kc
zMP1cy2{5F`EUhU~GF)bqXl2Su7c9Q?cCOS$mIodp*DgtSmJwD+AGCBAn`z|pg%gw+
zP}f8G_TbFSudr-Zk$G5YDAY3LHvn2oE;ogIc-0QY(S7*yt7s*$M7uv9xzf^j!@|6b
zpUYP|13xy))|yxy_2uYn9UYas8oYMo02mq+?}alW+mfZ&6mX!Q5{j{4(t)xQun8m!
z3;U6Bx(rh}WHn+6%d%kh>meHHSo+h7G-_P_t^KZR@JAoW=Cd-+$AtREN2Bb&+*%>v
zj_{WSW8K=g;}&n(Aow1-UqUJ$PDXJp5s}sXNQTh9ymew1E1s!f9<ISm(TBgn#B4XE
zjb<2nP7k+s3<%&ywF?}o*4xBXRn4P1-bp`Qewf7LW1GG<U2QfN=g!ab?bJ@UuT)tV
zBfPf#T9QoThMrEibIei_VP~qeI(4doDb{`Jc5pAw6}I3^ljQ)+ntmL5?tHM@<p6wG
z(kcN%WWZ{x=7-y%x=t}e5Z&8cLhbE9Uwa@WL+@lk@R7}Kci7Dqqz28086`U?TNoR>
z)G2dkZW%QDpssctLEGU-Y+_6YG9&kF+n-&88{htu`>J>%Z%oOAE}5~*D88z!kFWsn
zA)pc^p^APEi+W{$fhr!$H=8oll%BJCnlp*bElnK>hx>i7vADTI3Z>G!IW!p&lbAoH
z`a|BN*os);oeyn);9Cx>Evl8re|4|43xX5(a>`=KCQo0fY-hHXj?aefP-tB<HO?$&
z0t-R4(U~|38R*t%W2tQ(@JI-44Ux5G3AU4COvxLkhf7e@35GJ{o*8R$%bp@xI<79S
z4R1WFuDC9o_xLS2J~f6{P6&Yo5<O!=1zXaMkuIbbc3JBxd+%Pp^q0n}C~cC&EQhRA
zbtR|F+FZBjdEZQ>)@b_!BG6`65;s6Rv6-!gA>kWZ=Pw@FNciRs50%FcwUTb#P$v9}
z@iP$;B(|K3_B#I*Xx8+NjR=<bpvsL6T6Ss>KSF(K7ORd*@|Y~@YRnpldu+-1d>F?4
zqC77YaWMJ$)~5MulepbvuC2@Ehu79T@>N(9J0^=>r1qyfJ0!+c<}M+XRskW;sNkOL
zB-BwTnP=IbSWanvhm!dM6eK8L2q`6U5C~o6ehO9O8{6cNME8rMqvdMC1<{DhahJdK
z)zw#TW~F5q?7`hPL8$LXV^5c+rYc-a$ad>q`$}b!k2*wV45QtT;M|;V26^oyW+WaS
zVfPSa@@}9-Owv?r;`Iet(cp3$e9$3~iVhW`sZ$qh44m@hu=J63vE(YLbgL~)b4yE~
zo9y>iYynGv<T&}>YwPc)>6)WVw*?OkqpQ`q&s1B}TZADeBA4OC;-4zyy=&~vO-r0V
zXR1;ns^R0(2j0YKH>5RCw8(~(sO=Rxtbr}nc3m_a?*1;T@7yfalJ!c0Bn!qLf)Cms
zd0i)Yv9Wv>H(TyymZ{)wf6&Tor{=^HIjK#BrX-)mh8e5GaUWVlS4ZmIu!K<mOq!qL
zq_`jouH{R+<&O#MdW>Zu@(fcB;B=|th;}8<u6g5Z!E_}y>(D}_Q7HQ8Ep^)OO~vLE
z>c{QNc|M=_^+YJRLmxl|+U|d!MA*NgxZ+<glN0#I!DpY=m^y)^Ez?i3Lv61{_G(FZ
zhjRDPWq6U=nobo*2;J3wLE3fv;%Jp0Wm`(Y&G*Z<_*l_@OF1dNT@!~aq=I`k3~t|D
zyvE?U@i|lLR3lNV7qcGjAQ8;jzQ5$&J5RgfjweY;v%b3LhKd4Q^WR4!#>7%v@BP+2
z(FhcUXY|dqn&$qVR3{*+?uHx=IWoC<O9{TXUdoYrq2M8xIk)Hz^Q<%6*tCZ@<It(<
zS&M5WcF7a_^8O_F8F^a1)9&pvl%X%e{24j0_Kgvf>EuN|k29)y0^vf2C;<!)^RJ8e
zKtf088}nM+9L+jxwR*2@EdDhnKE_XzxqP*S-;)V+5xrJl8k6ht%phgU8SYix+1<zf
z>yaG?*TRE1)X4Sg;{Ak?&-s4!VKt|Z4)kzsl6WYGr;l5vd{lri2mSQiCg#Apwo&n#
zN5t4EwWy&gkESZt{*QE7gO;FXaGPSMR*Abdl%tLTA3E~w*3UNmzaBe>O9$lb*V58k
zIkMqpEiT#HEq`LOuD<W^g1$Epwc6t71pH7zLF>?Pp<|&5yRHu`Yp-4Fmg^Pe-~4|q
z{5+-W9qsnS>pwia|G<xHw1`Oz<6`{Z19ZUu*uX&l6QI*^D*yLK_d@o+0lMoi$ZWC;
z&%JQ}J(wKIvY7`vMsqxb_XJjf05XAuQVDRS;_oE7sYWts4EO~W*^M-ljI_@(i3tqR
zC=kyW10d*x@dJnUfGI}+$DJGk-%>-Ro_{XDx2ns$)cf!j{N9ScXX&7(vaND=FB!DE
zwdemK`^wu#-St>2-bdb*TzT1gkJxZpy=mV3F80@7$?{5_-3auN8fXvuI5s3>1PtqK
zeUsScz3x-H-t}-+K0K5?`vO`bhN_~Ny0xGJAOT(o*N$z#!ou$GWWJtr_H2NV-abka
zkRW<Iua`eFfb~h{y7@PQCQ_T1^^10ktPdOB-|GwPuUK6N#I0_hIWv?yJ{+4tMB+)y
z3~N_92tnV+%N0Ma4Ikt3?V#8}_fh6jbtWMB`+9`Cxz)XidH3OfY(ByKS^$dOiUTbZ
z%wMsR)c8XEihg}>Pa5C4RlUc{xf;iuy}HdZKBKQ2?Vh?F+m~MJy*mEYzfW$t4Oi`}
zR42U{6vwW7_G?$t{AF$BXP%pTH9gi<ee0XuGbfg9b(fBaT{FU6IXktd#?~fYOdqzL
zb#8ra@=G5ZuKpBJWR}DEX>7wVFKA3hp5Mk=Rbxpad>&^x_U#^fzIoRM3VE-;A0o4s
zeF45Ko+VNcbs`}9nh(7*7vX@uZy>E6amyDDv^q%NoJXHNc3)@f<XP?PYJD6p`~-FT
z9N6-ws}|VCk6!C|%Z5JW2o8|UkLp&?Z&k`$uU%Pa^{ctj{W~}G9iVPvM{Us*@Axap
z`c)tgZRcH%x22h<6m#gRGLcCIs*?g&p(GLXl4Wd(-Wu08NG(nRkAu*kE1%A@9)KVB
z+oZaQZf|38kUA1D(!xbAMhPBapScjE4^!Bka;7`g+?Bi_JttlSk4NC=12;kDW$(Bb
zYQPNUCdV)Tbl<hO9XPzkJ1-+=^nhoaH_aa%uWHm1m$4o;JaOxiRF=btIuRh%z(md@
zGA$ub{Z;OF+c{W2z=rt`;L!@bpo``MGZCn`u~P75|J&Q{rTJT1>MEXw@efjj^;5E2
z0A@b!?z-TZx1&Z2{C?eg4edQAw;CnpE=bw#ad%G%XbbqhJ3#@!NBw6bX5J;kJN~J%
ziv28C#~;>tSK&n&7xlPy&Sb~28dxD&BWV9UH=UWEQu3+$>^;wtElHot^-}-$0td<D
z>!TDHBPB4BbZ@%S;6aajk2v++opsIbg=cRaYOuRBx#+Cc3m7NlqMFNh4PCP=aI>3=
zJo^#*y*>D6)!nk&z~1|}Rj_^y&uQk71-*={L?8?tbHtICF!c+rlxN@HY1W@D%uSR5
z`>4sv9}r|9(p&9)`EA$u#~y!(OFl8I`WU?!dW`3)UmlDPo<*Upk?Y;$!Fw2(3hMXv
zwzG9~vwdC&TSuQeXFoj%-*$~gV;wE4!&22tdaFK(=jW`I8K2v%awKoVlzvP4wgR8K
zWI*(_{47pmy=17Lb1;4?o_^)YzZAnP+#Eg_0ygghUyeU}Fcj(_ThSBmCNDp#&Q`oX
z)t<k0*VbV_d*-^h-Z=Y4b!R-KM|%mJcl+1dHnKOKGpfJ4t#lC46*PqsptPU5v(wMp
z3!1;(W2wIL<a7R}E347JmHjPAfmogzcnN>)xmA{`@~`0a*QdFpUA9`=p#}N09<zn~
zteShpdDD;G-vd6oYj|BnL7_x`>&>H#%))#~>I3{|rOa22PP{{awsHH_3wwRt<3qUL
zIi<k!P+lag@v*NixL2EfiEQQ1{NX?MqO<#6erWMNo9C)pRvXSf0?UM4P<+My4+mG_
z71hH;>5^`wO9TX@8>Bm>Q;|>_1nFHu=@5`^kuCx0SUN;XI(GqKX_j7K<Ky?8^ZtPM
z-kh1abLZZvxc~?6<p5=$fDQ&1%n4;m)$0E~n?L5Co!RW#WO79c?BW*vm5JZ|t%Tbk
z2y1ql0=t3Dqn4-bO<-Lf8j!P#kXzxJshV#USat81N3WMJn~RjmLXU>x(5I7FfH-D|
z=?lzXSI83i0OU90LvSpG>Jb;#w9Rs`;M|dVLqYW_JA8@BWeoz(t?_D>2L0`Cu+xX-
zrC77A_v|$bsMJ~oY%)iICW4o*?&^aCt*Gwo=-<bRjib+UTmY!7rIFEYD=rKnTr_NR
z3Hcq04|?9eXvMRA8b}jSWE);&E(~8H-FWuZt_%Wo!T|+Un0(!LuJu0-;X{-$)<0;V
zV_I-St&U@QX!q(R{4<h2R4%{@y8v2u{RW3zzK{E`x;#J!!`J!bK9K8rav%8IJNUS(
zK-vo*QRgFzYdqS!h7UY@OeATj$FRLSF2XJ4*Ll#w1OaN{T~cs9j?!#OX@))Eeg%kH
zYB1{#?|e$B2JY>O8Bj&L>;|39$<V44%{kd&qie7bb&6})#<%c<7LCVf<!O5ylz+fe
z5>DJX6jDSUqkT<d`!Y;0zlCr|=qv2p^*{X5&uxeR#^eJxvRgtt@s2&AA-hqar55+3
z%S*mJM2#dv={KU%O3FLH7LQl^DJwe76d&~=zS*1_)4Qr`h~p;YH!vVgEbmn|svD4c
z-8t(v(v#?bz7Jcu$v5xHkdU7CjF@jcYgOA9Pxv*F*ed1n2^W<lz2giq@4``(#Y5kF
zbV1Gl4MT$D!~ChNKU5(u=^<yxU%;~1@Xj;<>ajGSzF!O!{nhfL8Ai3tZIZ%6{#1+x
zom5HS{ax$_hbRSrMoxEHu~3^ktwg9g><{K20mBjYC-jI7!c)(_v)%yK7PHBhFTNOk
zyt9A&1=C1da=NW)?cvO<JPZpM*-6Jvg`Ci3f|VBriY4KPEZfrhHxk<ARncoKv>8iZ
zM&b!Lko|_kb7Qn>GP&6^^;!mO78xpGInz~e$uHAtUw8McXG*VdBa=|??0h3C-U|HT
zOT4@gm8#ZtLqY<K3Q-OO3r2mJr!izt+d>BPDt$obO-(LstTwa;mNo=ypMB~F0T5<=
zpsns!k{^1>&FpYVOwGrtYVM(Z<~;2fCESzTj3fYgkpFAhSrqL`M(Y)Z8~4Wh@90g-
zU4quVF7ZDV8h0}?hUXZeBN$_}=7Fc#$P8R`CwK)H-eos%@3SWI!e8-hb#(0n=>`E4
z#OBGT+kHL>p+z+DS~IF_rQS_TZo&`VUY-a#;CxcTNSqZS+(roT2}zafnWfZa{bJ$j
z!a!H+yk?a9d`jkV-L*;f<3af-AN{Gnp*1M1fop0y8M^+M&aKO!^Ijnm_!4;Ow07w7
zheXMlOESeM==nODs;J#-RBDrb_vebX%EKw*hX$O{><p|O=p_ULHk4m^(jlxnM(iMG
zVM%#Wz)QE#mF9aJEe&K-#Z`6T$IW}u1K}ye%G3Td@3-IyeANur;O!3don(M3*)k#K
z%X#Nx*v5{JiXxG#7!nmi_E_;+<zWG==%?@i4Af-dhAB2M#bxPy@@Au<3m=56r84-E
zrZ08!CFh70*xlNmZiOXF&aAssz~#z?wh8KQ*Zp@G`Iz@W<fiRtHy+BI7;4|sfMg1e
zS7z{?{nS5QLx6C{MqGfPADFoTUzrV_W&oW{Fk2gl++Sn;q#d2@3E0el00;fwki$Un
z#=&imEkt9TB`YZD((C@XQ$8!%Wt(^MTs`8p``Xzq@QRY`n@}TtwsFYOe8j?I$f2#S
zpRF#h@uusSE=?J2cg!Atw4w{QG<G4L;yG5><xUDZWg77G1o^^s!Y;zYII&0^Jz5E@
z`c~wh0^!C}?7~n4viJR0VP&B9@*kg^+Xz4=d3+I9pb&h;`xH-?H~k~Mez<5njgYda
zB9ACAqT<KP4k)hD`V5E-jCg_mcH+LqhEZM^BqHLoBr8X=UgO`b#n3P*_`c#XZ!yq|
z2*ifV!yzVUl^ec<{8cC2EDP%jaXTC?rmyBd4RWIe1LKcQtD3!D7|dJ*2Q^fN0zP4)
zHV;*@gqa_R@RH2g#=37u7!{HF2L{jal<MU$zuLJ}4!u@<XOO@8R00pCPUgrDIlDvZ
zq)j*2slysjt~@q=6%a{iaL46chH|hX^VkDZ7yHPq3w?fU$9bo)vda_iFqy^U2ReMj
zCn~O0GjBd4puu}+*!n2VGYs|HrNIz8V3cwX4Rb=vEI8O5eR$S}jY?AcGuhW*Cjo0H
z`peH>WPflq8*p64-RD?3+&&kI68O_G(c7Ww6RIi<_?4KfoTeLnbVgr6ZHec?sCpeN
z2o&xU%KODKqh-ra)4Q{mrx?~_LQZLoVV;a3$L;bra2!k%Hn?yCTyVVZVS<2Z=r+8C
zKPfujKFmCXu6j?myz$Pkk@)%EixuH&4Qb2UJuXe%zTXk<=wWYsDvo@cyiPAdA5dF#
z#sF*Pgmv9IkS2yH=J8yhWIG}Ze8B4XU|P(VNisSio~)cktaDnwk!X%c;7KdP&#tqU
z;6Dr62e$H?fTrTxUn%C35P^T=e^R~{<n`rEmF~$$mQU`u@&~SA1DD)Z-cQ*sMT9ZW
zVzzY)D$zW7E)=DG$OIDK-nY=)Tu3uBCr2E$orD+JMgo!I?iycAv>&vL=bob<JV8k4
zh`Zs;9{WK5qA~zPx$6&SXT~Y5@6Pg53eD*Qp(;007DB*Tf@N(F1M5WaF8evNez3o~
z=D`Qksad)cCooL!ST-;_&L$4~9VYTldhfT;#r(mgTmT^cV4Y*vrl)lLX0Z<>?6S^;
zc(!W5AKet6cfYmI==$7t=ry5Hss5JcSl(u5iUt}^z3}p6YK{NKDFkB9C=b@_Z>WC>
zUqby_$<NSElOm1WeqU<zKn`O)>$xqux4$Er6(sC4cjvb=KtC>yN#yDF7yH0rU_rY1
zb0<m9#gjL-v{uux0|Mco(XqNm5D)>hezh9@`d1$--MCP)cj(!gbkmt9(H#I!<E>at
zdkcZ&v7)A@ACnhCDy5)kD*$jU+<Q5%Rz7<4XX&V3cO$swAp-{p6;3vT)CYWM8WkPd
zd`^^#Ma@SLG^i1Mx1-qEXWXh)CrH{qPhS4`=8wgDg&Q7_iRJY`bHqxG^=2*AtGh}7
zQLjO^(PA#y<I;B&u!lC~um69?Vzx;P>mq^KY=xpcOWV}fB?2pZlG`4;mBQIxpS@`H
zss`|yt<C<HFd9Fl<dWq+IeVRuem|<8w>^M;I~uzp?sjtfL~q6}T?lc{&<mTGzR>(R
z#9-^iY-C?HROmPFO~5+s2(JRp{y^VwXo1)I6iLT9XTE0U5rQt}T<-pu3;DJ}*3>$A
zeb(Q2)US5dMNHNUA?H0dJX@1Hk9*=YN{{lHQDw8?i!apTdQmwpsB!KZyem?&o7S)A
z8h>G%HQhg1on!(|$q}w}5J@Zj6lqU9)YN5t(S|zImTa{k(*6Vs;kpJnV`?zhCSGcQ
zp5~$W$`C$$Na0xxhwqZShmz0L!TYIqKS!~>#)Jzt5`I<3|H!r;fo`B7GN>bTppfEA
zg{kY+W@JNBL(h`Ky5kgMIQS#z3&W%bKl>R9poYGtXnd;5Kv>K=R%%KmM0F7cY#7@>
zB8ho=F+nfRufMMG!WRVl8b0Bm>>fPbrqoF^9l+DqF@?8wcV_b#63Y_o7(0v4Yv*Ox
z<IIfG1R{VNXYN#po~{4Tz0BHU+Ysz~d_eu{A^C0Mx4Q}>rE48K<)Fli(GN_qW2kV0
zou^+mOW%;&S<Ktizvsi}WRa2RGY(T^$JBZjQ=cUTU*tqA1Me_^cQ-2CqIo=j@E!w=
z2PdJs&XvBUydwcNdAz+0YOhG!dH~aSuT>m!*|Am!GSxi`$21Jl<Lr={5)Pevsd#=F
z6UZq&q9*B|6G=&5vp7WM&Wdn{=}KUubC1>>!KR!NTziavf)<v1C3gXb0b>;np}Ws|
zo?v;~4<t!Ci*+k8R@5A<cX6}%FU8184?gBiK~1e<!|Fiqf6!hOCOg<*b@0vxJmMjV
zAP^4YigC~e(;03y&`VXfp9YU*QMXh(zg3%?kB{3SoF+-0wa90yysIpJwf@IgCNMk&
z^}zbCp?e31^+Lsj&11c;zy4PKkOXj<u(Rv{OP3sE7`Aq^MAh70U)F;fjKYFU&_)EL
zQK#7P#Urn1j8KmjyP?$EoAWmGF#Q={&^oyqwF)~<X7=*jCvARf%>SBW7dF~#Y3)9)
z-pZ@cxbQ<Su2=i{h=B_veVmjq90y&jL5r8dSC*`;ap{K$X1m7tq@lhPZPLsSmsRS*
zY}qt9wh#H7G~H!o<B|sfhk`dDXKIjEEI<HjekauQJ}1^|H}eSaxjfv(UipAiA%QBF
zb9C#0w9oLng@tydcnQN`nbYK5?jG!#rQ)8Hax%k^pQc+kv$AT8I2m>iJVzoj$e5w8
z@5mLeNCM4$)&wHKaT(F?$es@i=%u7Mg`)25FFS5Q4cjS>Gi6a<yVPG88VCG7k#+oI
zXq9EO`6Bh{E-WMl?gjjiSOkZ>WHrW=RA<3XW7%1|+&_t%IVMK*EUuaLo!ywqVgi?>
zL*kOT6d{#o4;m)|`^?nT?v#kAitpCqO6m@1TOP1DRrl&0!mW+vodoR2Qvz!4>yBRR
zGkAii{yVLC>Fn8kpb?u+sjEs1DAEX0T=!Ex4=XiHrZIRiQfrb=Q20tB0-qK#VmwgD
z$?h`6y0yRl<ZA<D_dd3im``@#8a<bCo}~lQ-fJt`l0<wBu3Pcl@K8IZdqta}@s@k*
z=b6uKznoXQ<n-j3eYu~l?)EJe9qFq;>N>LT^LFO8cJ!94m4tF$M9g|6&#6R}z<QDw
z5x~Yjd8`FHIf{1wN*bmw$Erl2nJSr2ENP#x_*`gDKwa|eO2t7Q$E*6^h(ztyyJ-S%
z9`UKcMgX{#u<x66+T!|qN<dw13pT7-2NnQ*Sp&FBD4Z_xMFq1Wlc?51cX(#2$>dpt
z5yHd2mD;bZ;IK;E`?jZqP&!=rwpdzuQhasnKa$C!NnSvxoHP7Ya?XSXLy>}3lVsEd
z-i%QsQMB|08H!S|9*~4m42%Fas3uwH;FvXFPF&Mivevr=+elLT&RK_^2C9rThJ+5N
zFqlXw)jk-m_+a}E0}MmLBe6m5l$D_vCzBCBa3m`X&zpy4!#g%3*5cR0YNq9z)tn0(
zF1FJN?U6e&Kopz<sx9rqas}vhoqV?}0XLUVWex{MUANv?<h9$k%zh4~>}K4(oS#pZ
z$7FDK#+c8wE}&96Ax0b$MFA%(^f(Zm=$qg8ifcHE*K&8m$n{TaWE9RZAFhTIL)R;U
zOg<uoi^x*AKR1qw36o_AEbHmIe1Gp+srL08Vyt#~-Lx%_6c&A_wpUIjA{UbDSQ~p0
zJ!>>a9)Sd+8!oiY(Cqg}m%Ce^SM#xTGH<qVJ2$*0OFBo%KyIJOQ0bIg7MMbeB@Sx3
zq`O&$R#IVj?~5(J0h*rAB9n;NzzyMrm>Yi3Mx?OGC04a1k7ewvQFM0rET_WYs93<}
z%D)Tnn0Ifj5>`xS8D))tT$kN++fGL}WnU41JkRz!1!4GOZR731#(L9?{$)(%yMIl0
z>$`jDwI^g7Qp++L^d-vP0~=9o$=3BV#o7x&(Ue1&Tb8|*a;K^xKAOy{(8{B<-7hD!
zh2qn#%l4*lTksL`X%HGE0%4|PipPA6rz(pb4~#9llR@f0weWPF`;tqNyctDr8o+pw
zKq}<TC4z^Ba$y)gKSgCL3uTKy8IwHX-2yU0pA4xgCH4e9n%NafoFLc}2uTS&uK02j
z_Ip7k->2J`<kR0>oA<RDOsfX9seV&z`X*XMJL<pAo4$na?&u0i&M3`IPG+~(OTmMN
z!@+4%JmPxGQW(56i(yCHPqRyjnSv(_$;FFI1K-tXb*<vU7bG4TwV*DDea~6V6U3>l
z5UdOTWEi)p`Jo*d&05lce(I|92Qn&uCE&gPb9?83jWvSa%Pw}y+?k4R!qAPLsgz?2
zi%9r50mtw+pZbOOPy0*ksCXp<QSq}m`;J$DAG&EEJZ5~&HI2C6bCZ^Wh-Tnm1Nwj%
z)I?pXR%bz#!y_Gi(V=MAZ8vCb(C5*RAnp5F_4ExhjhJSxLoDp=PqO=HqYes!=$TD|
z*mDB{0};a6p!YWFb$<r_as=1M7aG7a!%VmhMC>8MbJD%Y#BDdIgMJ-#_Vj3N;CF=|
zLkGX3?0Xy@@w!A0w%_*(!Ylt2MO4aO2riBXJ<+kt(?(Z5OV+&bQb~9S0L_PizUO^p
z&TPV9M@*<c&n0ayk;J67DqmuI$?oRs=X8&6;k{voiN#fH#;`IXlfzu~ABnr*&;Ep^
z`(JVRQlG6+H(-Rye<r&bguNL^TQ&IUooOhqlh#FBCbHiiL8P&aP64JF%%hku?Q^#R
zvObSm!76Gd({SF-<Tl{MyA;Jq!~CMUM#Q|j>rw{2W)n9B8*#<AbJXNY^sz~vn;7Nr
z1x~y-!rYdAuRE~K6%4=>XDq3p0Z4Nd^227RR6?&0m{J7ZPaQqeDfw=tTVM_}>H|wZ
zBjj6Hjn0S+X~$RaNNKITi7Il#$M9f9*z!E^VS*TLeOvcWgB4bA92w@1$t9Ul1Uv5}
zU(XU^v%<7I7p~5(;r%Lxl(2-GT8Nu}VB>c!2Q~R<sm$9<0!^cUAn||PX@1ydPhmr8
zdl9)D)Z@j9Z-wPl#i(ALe1MthMi+i2x$g*Lx?=?<q7OZGx|_L1Di-km+?WRM$wB@5
zkks&$1U1x28>hl0F!SyPZRhmC7Y7JdO3R>^m&M<;tTbSR)Hu@SivASAzD#(z!qu_A
z)$p$!u}+RYlvIazD0*FVC72eDjp#-zm@ehD(uFVZ6a0U00ZsIB#0Mz}=1rbuc_|=2
z%$Ww(;PiE381-ZB2Hkx!y#c*}oJmVQBrSD@$^Hy;#{*otTr>SODE$51MO{kx=IzaK
zn0&%y?0_}RJ?YrlCA`Ef@s@0ScjCE+D%wlH?WvxgX`j&6RU?PiFQ1e+f17ZI355&S
zf$!Z<Vb@K29nq#_7g2;yHpTZR6if<no+U90#vQ`T25r!y;8FX|ciFeZjvnZzROyR_
zz-rpq*IIVUj=e4UyI}JexFp$^P?U?%N0iP};F(mMVd<_@WoAhS&N=1$-kY}+d+)CN
zVnO-4=lB}%JMalKh4!63nTsV%biT~OcC=ta2I@iwaWRLSb#As2qZW=P7qtHt((S4E
z<Pm%?>ii&!)5rWrl=z?1F5>9cR&v549Q4pD58cH5TyVDJQfxa(yK$p4eHrJHz;q1c
z$0zOi;`{n_XsN-CKp)HSX!3wk<6$YGk*?b?ls`A4Gxjz<nj8Z=m>-jXJ@yOv*sVTg
zrNoI_73N1%_)h$uF)=RdfKgEp+G^gB);5G9t@%0di&Q-YDbwB*@P?%qz0Ve~=RUK4
z$o~sC41X@9wM(NsQ_0U#O$TprRkTMbR!E`MQXqXwlqF`S!WMs&-_e@#4l0w#m!2On
zu!Ow-3Pi?OvW!2|{lY$}$w4i!UZ>v7JSAiu(BX7#kSCnRkBe&208i!5i3^R`f!_vd
zl=KPeH>;_H2+h=FOnV8p3x91TMQyU#NZyjv8;$%sXQ*{1G%p+T+(o(5AWnSt3i#7<
z{?JH$?TFbKRd7_jhM4JryQq&%yKkQ}85vSMBpKHR!tOfTZ(ce8IsXo&s&lBdq+<Nr
z{Sje8^L{z2a%&;lxePCT0;WMT=|GHp8!4IVv<brV5{apwD$c7g(xuc8_YJxEcstz_
zL6&suBS-EQuKN5_je;X#W!y6{QpLbe3jc2BG3=4U(zN<FJ7lD(FBWF}JHm;A)oj9^
z0(svYIu@c~Wt7u&jDLm-rDIH278RB@9tZdT&+ga`^Sj+Oizj^DTs>0IPuh{vq>iM$
zHx6b74x+F&joQtCYbYs&XZkYgdekaxbKzZZim7db&$X1Bwz1={(Vns>1d=tBNAd_W
zR0YTC17**dO52g!*{{>?x>9<XTEh&Ecbj!KA=^9iRBAWDdgurF%uz^E%+?-xb=)_P
znE1$PbMfgcDn61)-#Oo)C!ajRg$|e_^@1#w-^gQMxJuOV{j`a3rP0sW`beVpEsz-c
z?)xmqlgZM+EahMATZbP5$GLoZbiwCF3UHy#k(ihVskG~vfdlI&^R_yp-)Sz$OA{-$
z$M3?Yr*J}%V11QOOl4sus{5Ly6M7af&CDl=RXY42u4)mLSeH|S3Yo<Yyw(fd`D*`}
z4uDLN7Bs)B(Cwtt)Y`(UVALwA!DBLrSz@UdjEiY8S=OpF{%39K(OSga^_RD&2f7{=
zd_%uPxZ)rWNs_!hk3v7_t%qDH-7}V4kKT5Z9mTCxgC(UJ2zN5ut|^g|N9|ifDdgNi
z2u?yy*30*&uh)ZhIeD%5Q+wPS?|~)dK@OITu&iPF<$2WsBnib&zE|29#PE%YO3W#>
zWldAe{s3kcp+V@dZPs&jU*U-z>=zPbTlQ1M{KE5Yfj$N8>u=zDZx!yF8=wOJ7^q|;
z#@UX!hL0Ld6Jwg#Sj};JuaYeF!)oFrW#a2Uyqlb#fJipWT_0oE%P==v5G{Elr%uWY
z4ou~5Y##vcWakC<*8OdM%3{q}bDc`WCG~+r&T8`hPS9Wh^9YFVrIT&=LtDog!5?G8
zWY%{1x`ZO@BJErHgc1}r+NJs@M}Y(gK<<v7y29b?GX4_N7s-s`oaaBx_L{a3uu4o&
z`{uW;y|fulp;9ca-<25A7_lu=f!N<@m{kR0sePEgcamf3iT`~uFV1fYceT8P>JhR=
zH}+<CG#dS07=*vZv>N(C!;VFG9-0*9#RPdk&oZwYO&EKROK;*$4`^~;NJdxq7sjBx
zF>ROmm4@hd)J&&@`&bq7o$8BY9cCXFF+LmeUK^VQ;YH%pz@4zJf`CU-!KQbu;Ig_Q
zMD(Db2IHvdeqN#vtP{D+2RAPY2!Vi%^TD16BC^@zAOGERC>6J#3Sh=u5|#*k;q9CZ
zih)QbXqBeDa0SHXrG&-5Y>o*o8He58ap9K$h1M0=I(tMYVREoheweCsxs_yu&pd}3
zS9mgYTy~VMVK@eu5>rK77m_W}mmYuionwdt*F=E*y%v_Z2W2eE(em=z;!PDjYqGSW
z!tV<NJ7S!}Dvc;JFYx-aqs;cmtpO|xy>-;?#9J)16CdCg7JcCIkUIqpg!hZ+(8+bX
zWA?1GRX*e^X6-~I_*Y8@WX)&%w{-#C0nH&`cBsAo_T~#OD9)P+%dib;pqJ~FaoK-d
zyjz^fLx81gL_>Qy^~+CUBj!59>o{H=ZrP2w@O-t;C!ciMuuv^H`Yif*&i5VX5FQ44
zxqfYWVT4lAx<3(6`Qt>kdcwkHRJt%?R;1fdKQY8(yyMdNwvhLq;Owgdoj%Vi03F%a
zYRvB}^zTZ1&KWt#7if~oMO5FE)mNErk(rC73>jY0yxS4xxlJ^-m5Wt0RZYMg_{Rtz
zdaZW~pP^U0F!$QZ{qogeit_j55F}%HXTEmyK!ek-MAamD#y{mu?&u@Cej<r#tI7Ex
z2`VX@RDQ&R4zXt8Wvz3t!STq)G;~^RL@en#oWw~i6v!xosCj!fl7CVV$lksO7JYif
zyu{!sMfp|Hg55LT-aY&l@y}<Insf`laMr)BU&n(AQGnJtTMB>Q*>`?UCfs;S>dNN~
zlV`yWP?oEd?#Aa50pbR>SKqC7?<q^awHyM>f*EJTXpx`WOSGOUzwk>KZ2OL(M&kVm
z^C9n&Ty=`xVnLNZx3d0&Oq{Y!ybcX~k|yv6uQ-Cb^kM6ur&O$*Y}<f##-DKV+9-)!
zp5eTZReDH6(NCW0*|?a%i;kQ74VMyiZQ-QpL9j(*2H*$WMS7x5A9ud#L%6}MOIwEc
z&zrk?=+FsT7GQH5#4os$)DQMp<AaBstuY65!La;5#dZHRiT_x(!}xG}iBh4`cFUM`
z6pA=8N%?0A*WtUXlflq!(9^w}U8bB`@`xMZA?3P9OmVZAKjrHUDPWR<f8tB}+$$NB
z*sEl87WHPR^JGdw%-%jShPK#d&LsCYJr*O$>_Z)Wk){&3T=aX#m|`hfW8i>!G;6H*
z>S12<xpCBke6`Xqju!R|_7~eMwexQPYL_`gauoflq<Ca}y<Na>dx@G@*!!+{ri5(2
z``rJKA%~1M(R)Yq_Szw2etS>+<T$4VCwwIaRmd_w2;P0xicWA*Da@%?SwwkKg_wcY
z3K$-bFkDVOGSjy$OD*@Id4F6=rEe4aEd>(Xoz|2sVJ#J_g7Ag<N4qgn=Lx{lIWFyM
zHSt+@Nzo2#D$})mU_XoBdW>h`&Na{_vMASn`xfQ+g=g>?G+jn3-_H+n@Mn16hc$mz
z$nv*HW|;hF3Sd55AfU$K%C3@zdLk@0^qY6EWg}N-2Zl*LPGizp+v9oT`;75iz5FRJ
z;?SwFEZ?xf_qN(Uh4Hlgk~uBZxxI&#6Pb<UV**#X_Mdi@EN0FG!5GTmvsn4h`+mQL
z>-#5$*by5gC2$SL^TKnu6zt^pD$t80FaC@o?mj}ZUzpe?9vnV+4F~JVGy3k?q)&*J
zG7(J30e-v4R8z&d%_JS*K?<V&A9fl{)B^a-3X4FZqqrdaaq>6!*7myBUw{1|%Al|!
z`6mRmX4FlgrN{i`$L9;uh&DRg!<`L9AU^PRZs{VOCpyra^B>${Y|J<{(W0h}0KmtM
z_dTzDE7yR&NA{y`^X*`KrF~;Im11}ME_K$#OZ$u$79LoU)g=5k8fj3W&Mx|MRV;E2
zw(p>3Y)vL_B9sa4PjH;|3<bUmmsnc3Y$n3v1%K|uswR$qx=`_-AnqRcl9_w!mUvV=
z{ONE2DKW%$GeL48#cq6O;Uibei=56;FhW-H<9Dyb605}p^8HW@+GXEc&bpkc$4i4`
zv5~^PaCcTMc8iTc_k|)4j1M|TN<BpVAbEy2Ym|MRgm%}V06SmU1XxT-kT@(^jX~kB
z{l6H1bK+JTG1ch1z<wX|I(6e`p6Zf9U%7Oc(DRtdK<}?)a-xGdE@DExkn=L3KbI{B
zA2K6zcdR%1g@TYuL9A`-aL(u2fgzkX!1+N|BO7(jQ*YZ*ghwp%^haI!g)Qd5FFQ}(
zOomXPnP&tl=!&gV!QI}#0-nD1g|tuS8dO72(zl0rFLZdc3I52;)dt2#F4`=@(BI+w
z-0dFJz5X`m1s7}q-H?*#z1iWXzuo@UiqTI6AqLTV`l$YCK$5yiIi=W%y!~xxvGCqG
zKl+r*9^uZKVsFRBBBF#F?Y+-W3~1qmT{cBM4g!bTlo%}&%c!XxKXBVe-P?CPe)(Vw
zMMK?r(e*7l_{>^N;H3dI?}qSaef9Guo*({BN0hqN)ryJnQ(tXlQvO;-->4HO2d%>-
zCQEday^uxR^i?hWo6;`4(6Y<Q4t7uJ8$yv4;ln6B($IAtpr%h}IYo=5R3q2XkU}i=
z3t=Q)o504VZ@~CDouN((^UhLMMD(DWb)@x(_ROP}Lfb|UInP!p(5KfW!1K0-Htgqa
zUwXC3VMHb7MJYWpfkoF$9P}N+qZ7ZR_Z)Rh`=$EUXJVWj=!i)ZFGEgVCnlvJ@*9Yr
z^ZHkWT5AxMw0S4|;TJ(ePsL5nd}vWZ(Bmy&r|yzI%~uDa!A{}!J;xCHX~Bk{I5RZM
z4QaK#1>PtCmS+PQY)W!3==M<)j^5xge5=W{V8o|<bospHv;IgDb#V|2-*ho;h2cm4
zv;>O70itW(;i&1P3;tVZC7H=;FH)T9a*R@Mx7`OFbHJ*gWU6)y1opvNyq#B;r-{=u
ztL2T}C%Nz{P*okLTU{mj7&zb`hdBMfnmBPv4D|}{DJOlU!%PmV=vQKP=!jb~aPyFK
zcWmP2+2d7-{g?Bt<ypg)Ts(Rys_1#&#tv-3S{|XE>}Joz!IK)IggZU`x0}glNnGRZ
zz(DNI9(WBP!WYYU?n;q21zr2*QrH&s#0?YCGkEu(kN~;q0rsH8cqkRvhr8l{7~1rv
zgeK0Sf205}8qWUh$28%{JhLnO97t(k%05<%z+l!4yI1<Pgx~U{vO{z~VZxhlB=0s5
z(vJx^L50WA$<fANnnZPqcGR}wYO33arSI;;9+qWqp8Yl&D!jc*+{DWI-Kt&`ZrAiK
zY2Ndx*y{c5Kt!EpgVlD=F2aMY!VE~Yzw;fHxK&q5ps9^x!iSn@)b&lO!QPeXX=HD&
zny4BQeY_5BRn<R#GMm2$1M<L@?rGXij6xsuzgSIugz0M91M$EOTXz)WWzSf<k$84;
zwmasa^Ova2&r)`_dc~K#2h8E%5vL#AS`yfg<R@DF*{_rTH^@AyZ~QLUfh+wWPi5Pb
z4q;P!*>YqT9Ja&7k)xmiOX7~*gZc7T)?(<Eh%(Io^s60La-Le$vCLO8Xeic~`0)6B
z*Fq`hj0THRdAzR~$>Z4Nt?}Wu-<^yFn|Od^qba>bUz`VENAjfIM#AP%qB?9Foq5bb
z4<q7BMjH~li<E0#*P%~*(>?R7ka~T<LtIUzB6W=N9T~eSZAflFb{FU8;rtmr``DCa
zHZJmh64&+(ZYsDR4T?Fp=+vAk4+dXkWVa$-mR%Wzyh%>vIW)u$Ya9m$FKu)Oe#lW&
zyrfQyjcsJ9w8lo?L%aB#LSDma9>r5f!D}?|CHu+4Ab)f(@_OWl2O~~#n`R>o>~=K(
z3OU0&W|3S)9Ox5t$`c3iAfQ1FztLCCbR8dneW|l@qhwA}ezs9@vVGI{Tu?fgMiUoO
z9ENRC`+Zuia-0}_lX8EzK}VN!U@xpBN~`L&_tn{Q>GEorr~N$ltb&qXThcWdG$%?E
zY%uAj>Kr?hEf&!Dr{bJ|)VrLxZ4TG?w7}{jqxrC{4r#U|X>BFi6!qqpLf$(W+M>*e
zgBKMZI>W1%vbDKxja6yU&)?hUz1(Vk3b5?A7wj*ShrxQ{*HA;H9bd~7kJ9y&yW5ov
z7Z7Buy;*bUx5;$og0tUbocHA13TMk9_UKUjYKo*<jfL9)41fgYjyl983v$*o)fSmi
zbBg;oGn}+sZI4*fIeo%Id0rkOUm6QG?~lrn*Tcqsm3x`_KyXuzK(y!4gVJ{BIF67_
z6Sl&fMzeMYQhBPaNq&XfJ`A9D)4=hVNK2=liDk%1Rg1Nn<v^K_XU8ek5P$+Gx1HM-
z1Hb#6o}Sk0w&TJ<mEm%ijoA*(4%VslXj>8Km*Z^<$Op%xc}M9U!m-<4lgY%r`hER6
zj@>p!z@L31kt@yDJj+MW6tEt`ZqejKlV3Fe#Mrd{>_XP}<SYVyE4F}JWc-!0w7Jqb
zJz^U}@$#JPLK1i_X|&?>RB4T6=B~08i;I;pHRuP!`OaBKa!jG(1gpM;4a50K_<ukm
zuc58}|KnoFm0&ZbHU8-gXbs<9cJ}5+y@>+Q`r8UU!g?I)Rn)R}zWQJ#{_6GRo2P+X
z`tZ7CD4l@@0$OChy`s2O3Bc@?+U7(!rF==SL``6eKhrU-_NOE6)+TN~(^bz;8*5ka
zltDx}#)o{k5|_RaEJ8JYb`kpEoK=@<aB)i#Xls~~ip5nj+J0M`U{Jx{J92Rr39wQ?
zlfoEh+C(vARU%9)xY(R;#waN0xaO-^evJ&TR+8>HO;yd9a+k%<kT}WFrm1p`%DkRM
zXxTP{aMEM8uDUX+UW)a6&u+M@<+7X-;<Cw-AF&4>$;Ju>J7$QnXRKwK(H?HaSv8Y#
z?`smgUVObSZn%q&USQdTcLIF>w)Is7_S`s~blSEgA8($Rew!*+sk3f*G-E(b-P%TF
zz(i&;E~^>s$C_CC1oQiKrnR8By08%4@-Cdl!rZ#v?9+E4UH396Gdpr_H@0<EYcU)S
zjX&lUlANoGEm4vah%3#pp;-kE-t@UKZ!{HdVePjnQZ6$ldyV#EdoY=1c{3A37~P<X
z<m(&G<n<%bR{M_^X?quPT+x?p0W{%xY0?+J5PqrFZTWZd1<l@pr9{gv&H(*VWa2^Z
z$&r^9R)H{vz<9|eX`EZ}&d2+_b-Glkzi#PwaWk9>N^7$7L%akO8IA{+{_Tnl(rM=1
zflr3AXs)N-?nQGWBMtH8fYN(mF=tziRCI7e$LO2&$X4i6%jSCB6$+}7N~y+m2)5#?
zf#^;nP+2&C$i|MwZ$5$1i>J&S_37!0&ZL#Vsf}S2OW-O7|Hf#bIS<{N(%Ykc5Xz##
z5f*@QE_=&(AHTyw$4>~ZAIt)}U=%QZ$yJ`@k_-G@>a1;8!MT(_q1G{^gUPw_pLPTJ
zLL)a$GLWg4^chsFg6AYyWF<uJmQsH0^Ofr_@1^SYZIe+Qcf!96V_F1)bJOsHL}s?h
z`)0xZOqW*<SoybXBoq>Aa?G<oDOFv$ehCg=aZ^T%P-@0t8trZEm6k=M(7$xt<RFYS
z=P<K*|6E@y5m+q!p#L0X+4%MOUS2#dFE^X#5N-;{Zz&`jb`Sd;?Ebu^15BLMlyBb$
z;z@=_$X=`?&2P3J!kD@Qw%;uOWJ&TLO|9Em6Nmzme3r>N(;-ILje>u-eldhhsnjrs
zgDwZ`<RSK;G6r{;L*?Coir$p`_wx*cpz@(P(OmWSvOBfl4c@<#;Xg%2;y76=k~Pks
zO^QqMXVQvK+yAn$=ORh}!ATK{Rs9?{iyS*^o-;h_j44%94T$MP<VnQ{>H9Dkx;Dg?
zfhAMw=@`8ITPG@V5oGevGtcT>ukOPTObUsn9}BfoebqMqt-O*~Z_?yP6%LW@ye<&u
zaH-!9cP}?r`&fAC{olm<yYrAuop*d9w@a%}JLm0mnM3tC(ul@1YWx*~ehxe+GH)k=
z9b_0tdIbMPNjlMIezL4ToVoXJN_t#cwvl3hm>_3*^T850tI0SsIxt|>#ofv?xFopk
zad|`0o_sVHAN=}K(?3TM6@_PHxQ#GLZJubP81G?mC>h`>obsOAGNAlCxQ`^M59x7{
z`bXu$HNAO=c=ib#z7b*VZhld%qy3`tsrs~p(4bQpUUmXB;Gnk(;DtohkN{5L=ubg*
zH5@;H8@BsgI3t1Y{Q=mYs9yeHg3o~<IuDIk+#l0$I8t?W&Axx*YQFqht=9IB`VJ6y
z8WwK_awsXWcu5mSQ$d%@#Mqf5$=scHpUC^NR}jE~v?jnBc}m!(N}?eA_aAGh_W3)|
zOYQTK!J+Y%eMfS<Ti7Xj?>Xy)fhfHyvpz{na8Fgi|Lbkf(&1ub699aQ;}j!-5pooQ
zy>ke?tnr8heKcs%g9Rv_Rd;k*8;xs(qGaP)16xx@4K%)Gd~PaVwg>*%!#ZXSeNu{)
zY&MCN{#4;L;KHg<R`yr?FWu{()!dzexQ*VxD2XiLr5xnpnr8P^fB<*fw}i_q>56PE
zQ3TVdq(k@Ir8VBG%gv_*By?HAyd*ldN%g1B{I%*=`j{Pe;|q7GY~1DrlK!T-LFL@l
zVM#=CoCo<!uvBu?j=1+}X>Je5p@tMU*|4DSHV_)u1{*Ukdc{qsCuH}osF8}vzW#y?
z82XJ7%=kBe?b&kH@D6#LLbO?k5g@Al1}Dsm_^ux)rwwZ;zZ)3FoZ2HAQTO5IM6{Bj
z1Zvwn)2;DQlZ!AKf9yw2>o5c#!Tja#m%GB(rhr2zH_ejDtz__@CkQSTay{>pt=re8
z@%?$!J1Q&&MS9uap0!g#g>0-G5J@ji4;>k^x<#v{-{l866jJq<CDt!rU_oi!X+~Q}
zL!;KjhL(t_y}6lDsMa4}_pp8(42%@NCq3&s%MH>D!}h5Pi4ahERxBx|9-F!Ttxub{
zkior-F8zqDjnmM%K5Yu^!FoE`Z+|Ne@+LDWjNErybYnAC`zE%sCfQ%`;03k*c)LS}
z_rd9EaU&yTVp8Uk?ioX_y(-ziSr>dwyr-288}vF(mseclf3$8uT`5KFyX0Qz^lbFS
z(UVX>NlNrtz;cJAh1b#IjKt#F1P1EYm6f*|cEqCX%%PTtZbYzQsrgHI$VuMFlRtRk
zd!=}M<bN!T{I8XppdSRCq!cck<5$=-Z`J<AU`^@vcStk(@)x$LA|AH2Kh{3FHz#ru
z{cSCO@)#H3r^WjpRDD-J!ES&k2kI53s?|{7{N3;KQ?HWji@oxAS0s$8^MBH5mv%Aw
zYr%y4{g_j2{NMb>0QRrpV*pr!gck3o={b4<*_yH^vlkvDn7l7u$Uo`LFhcwwV`UB(
z>eWgGYQI+CvF)y-_Is=4<8Z9c(vA4a?Z=Gd{TuKE8HPA!6}Z%}H$x<yP53<ES7>Sr
zeZMVIBeDHj&$+KNU0VKoL@y^!qy6B0=34SMc=JP^;RW;CJ3CAuG`ofavo`0LU#bY$
z2C)~vt%sWKv)N|4t?G9*!}-|a<VNC`D0R|%-==hke4A(;GCN*z?R^$GwY--PKen!C
z(18~64N)?(y=~jRm8{0%GERLF4SN=HZxMcM;w+l*t)@a4S+xsJOn(Ew|Fkm9fS)w1
z*pgWx&y6z_$6-Iu<)n7UB}T`d+U@v@8w;D9RN2`iHH)bV@MUU({Z~#_qZ7eTy&fes
z{lPY@z<_ZmNzP}*%rMgMToV(w#SudfS9KyP;?KxG8c)iH&sSY|;+5o<N0HS<D_~EU
zIg}_A7E{f2{*BkQ66zW#B$$@(34`ybtfQ4P&+OcNwHwH<N&HA;?RwPhp8kjBc_3#B
zXxnn^fHISYnNSozKB`4!DOt;HsTNnUZrbSE*IS~*o1|HK!`fJDqfT4X7aF36?Pb)o
z@6+lTKjfOmX4Y}b&l^4-2}><#j!UJ*;W8Dj6>yCoxc~AH5A7>h`!f-{$9o&#1WIh2
z?nL1@Mn9MO&|gm0MiQ|{WLq1-8hOUc_d53n2Oox`#y0^3Z$^}hSjL0{p)SEiCcUEu
zO^1(~RQ-9h65ZS~rqdze5GLY*ZEHip#?zJb+HK_Ky?*Z-*)Itlf{e}#W7nc<`NOwm
zWPSJD7#$JHpu!24yIn<VXLN~@XHY;6-1iGaIjW2YA6^EYfZZJsUv^+k+KjNMcr|U>
zDZ{*yj6Q(_c6Mxx2;cBPfFE85ORnDjZryLS*2e0b8b$mV!{NS3f_5A$IblYokt|Y_
z+VlUcIGDB2(j8_#zjYBKb}q3XM@MMX;Z4lxxh~Ly$iK2)yGOs_V)n27^%akxr3q<;
z_lp0*8vD%}{d;$8Wnx{TMpI#3l0h-zW%`Hwgc$}5HNA6@+;xIl8%+xZp>Ntd_zFto
z<jyKo49gb!l|@mw8O0a5f5`vwu(geHGT}zEn|~I44`7d^h~us7FG<aAt`K=HBz!nx
zNO6(Vw@UYCFV+M4(Z@C3<{}5d284fM@C3XIXRZ5*NZhtZEn*Z|kG~euDm}V+J%2>E
zG(qs6aGOOVy-mrR+a2T32^%P@>YFb7XsTg^1%!d_2KT!qFx6Tp(n&HIW(NbC39r@2
z;_xH{8i$}lD5Sc(42)=B2ig0<UBDksJ1w4LYw_JifJ&!M$a3E<)kj>{d8YJGDwr=R
zdy?ix6H^Ej!n_i>n6&g3{?P&GilLhxZR`e;69p6UiX04l{@z<GeS0G9XRLm-T&NNR
zSITsMrcwWu$NUe4a~M^=Bf)@L((lOMt^-(bT*k?Ljrf(?X;g$vz@~zMUvT#BOSUWO
zB~qd0^?dalM;6Hl@gw#Y!m)}mvOwSJl*e_+Gi`Ce!*oI@fLBGns2SHVQM^ed{tc&R
z2lIbIFt5)UBqOyl)(szRhy5Tmq$vM)i>DorTI+&_hoGg&4TPn9%p{BYQ|#>cY`)m4
zA)3MtIG0x!Qb1RN>e)p6ef&Iyu_LyVl<nJBsplnT3omS{eLPzS1}=!ME0fKH3#C@S
z%-scH|2YgzM-<P`H-C{Kf$G1;UHW$)fOkP}q$qx)=0W$CpS=>>{$L?ku(v-T?Ue;A
zJG4nXUyNX|kCsuGcU;(~S+_?)CrFDxIhyTH`Xn7M^^<?`49eqPv~3lB$Qvp|;tz|#
z?VQg6VZMbn`LNbJIs(#>m)jqM_e8Q#uQQG#zG~{EE-X-*L#c#U<9~3NV@(xY(z7r@
zo2Q@Wa^gabZM`a1{Caw9?htFAuIugq36>GoH&_-g+=+jj*v{a+Gv63$0r_L!=q!Bi
z`lyS)p!eF*JfqrIB3#P(eabd}3NSe;<i_`Cx#bTnF0j!E^Sed!FRbP{y{XBC9D7$o
znw8C{#G+D@v7NXYfhh>C^zYy=%Wx8p){^!$<5Mr9pxE6_pN~(1vwrQQMXb7p`&0X?
zKa^ERO*+ji`kvL#2eQeNDW=mSL6%e#y;rKl=kh*fcj~6X%|0!|{>Bvyrj<fwyh8Ul
zcADglW4lfNE~J~n*p;S4ktCadAKIrjeML6(JMSB(gn{u}OCJEcZ7db#L!@cO<);wI
zqJpF5v|D(OV%4RS;^@lDV&2pQ!6@Gl$fLx<9t5bTg)c1V<DZhOPHDMcM+QfEA4&Q=
z`fc2&@}fXtQFGZJv3+?s+fW9CN%W<ZWI`8&dF)F6Qq6;!-WK|XB?Iq5(EM#@5A>tz
zU?m0fA5~P&P%39SP6tBFD-NuUV(NNwVU4<=RM)W7Sfa`I5$6$WQZHec<%|>&XE|%G
zp%;QImAiXK7%f%v>Dm|{{(wZ`3{l06xKba6gNXj}OOC#b)*=kbbmpc-D5(>q#9Vyb
zYyOK_cmtE4US{{T8+&Cp&#FfsTk_hdf&VaxuSLBexK68d<&~-UTfrY<|9svmOynG3
z?R4Ng3R5~&@Zoj#Xsn`+Gr&kP=^VNBKy_sGQBg?s98V50P+@n4*2P#Y5L*#F0s)T%
zuTjngJ4FE9Qp5N5EEQ%vl#h5iGjz-Jr0$<$)GLDVMn51|@-GAMdmj{%;68a<EX>;#
z60fGedhCsjVq)jWQDLh+yBB5Jl<eD5DNQ7Eq-T1n8pD2>^|<Ez7X*071CA6apv3Qe
zdG>{fsdzZJO=2ydX&<VNi!_1~Z}`c@V9H>e4bAqms`2T+S*$KU0^1TjeNeCb{9X@&
z?@!ho(79RXlJSy#wAVV^n2h{0nOyGkZ@QjVrV6fG!9vdoxB^QCo?weg3eiGBa0)rj
zLav<5v-9ssp0@Cn4dAFmh0q`7u_;RF?vqg7n*|G#=ndn2_oyi83G?>u+lfXJg8c7w
z5MH1QZoHf8IoO&oZBNeFq3Qe|B3N7drj>QuNO4|WY29jd=hmAV%dotyH}dd;(6$c}
zuYMNvVjKwtr;mGHU_3(F|C_@?6p0zH(&A%zOTDtnufFGN{X5TP|H3t)+Spfeu9SQ#
z;IlpU5<i((Si$7GAs?lrhzWm?^Mo|5vz%ZL#E2$bj7mSTI~9EpqcBo6F%7G+zkh9)
z9U6;>HQ;gvZdGDE19NhYi#(%vH6{3)KafG~ZRObU-yJ5F-UKVFBn`Rn3lZ8dYnd0~
zh!#Jj3D!%qQGFkf3hqAJW!-P3Q;OUWwzTkk9&)<k&sW;2#a=zwqzLw0RGLQJJrmvD
zX$3GeF=Iqp(8fKNNNs!Scp^z;6PVc8AC*X!Bs#NXVD^Q&`TIq!w=0Smy(>$0xnHG2
z%|pZ`o%N=L1QvkpJAK{SFS9}mmt?v$js%7n_mOU697F3OL3HDRL49YRgDQ5)!ET(2
zT|SK|wC6pAJQbJ3yYWm<kD%}pBTqS*-{KE=IobOaCVWO7&XzV~FPpP>w|F2Ii4FjY
zOh#c63dNR${d7;oRZ*Y&9Jaxdh!D7&7btT&^irYFCNRQVbE=@clB+(tcwx8fedXf7
zTdGLqg4MrVc9ax2CF8w%gYNQ}-Wnf%nu(-Xz-9SR76C=`FTC%2s2FN%W;R(3jtP>%
zxo;Hc@LqgY?>md(K#i7v$x`LZg}o6b4JK4k$#tSh7b2#hc8H8*;(mAb@wn00e!JrW
zTTb?t&5r5od9!0^$D+(ar8;-~I9<XO^Eg!w!np=iQB$0?=D*Oq$qT2E#Ya~+1Vm@>
z6QZs?mKzM2`VI#@aS?}3xS$tr84p)T(;BPp2At&6#xx|cM3NNlqX0KIB;JTI`X%Pg
ziKL}OUsxZ;7Y7RFU5n=rHo1g>hq5fq9}VmI__h=1MBBqvDDD3_mT-LQW1twfEg-?H
z9KT+IUHu^%E*_HgMC-gzgfUDB$R#K~KNXujnj1c$3?{}9@G<=RQY<yTlLRZHguPcT
zM5|SyxOut37c)0rdFo_I<f3CaeBKU1prlP~mHN+tK<u;f6_6i~0F$7J@HdWNP`PdP
z%=FCCKat#i%yAQ49WtGEhtbRPVI-7-*7ron-yyc_FN3dAW`52uKU`lLqrY$KT-GpA
z$*m58xF510=GN9;ZYc|mXQ%YLr~P1LsQC-J;x)p>{K}dduP(@$_}ygR*;OHFpY_H@
zGA!+DJIl6sv!j3N>^cU%`iPVd1Y?Osy01U1l=%9V;<I$Mc+s5`d}=O!+;S4(tE|Uy
zHpKnxlpj0r%kSk^%+kHQKi~PDdzjgDbr-%CBsQc{R{TLbns0d(G?)a|xbC`bw2;?J
z6Ka@UGaI$DkR!}Jf&<2V)p>HQg-Q;e?|NW|s9xzmiEIr;Z#Nq}iRxr3HN*NUTeA?q
z>iV_&Hfe22G!>wHEJtXb38Ex@ks86ER`gznAq3L;b>Yrtck@?Vp6+vk&WZ=V6DqAi
z6=CQ2ADnzKT-0TMjWr^QOeerqe)_EkpCp%R*%#jZF?*EvARg(1Piu*U_3~$jsWol3
z_*iB58&kL*q>#EupbE133DgVQu6pP5zIv?vS?NBR@TTO{EN4i^O`k%&v`GJE52s_3
z+F`0gRkbvzIPf^%xv{ot@m+e6*J@;!x2+=d@T@C4jCaYycG~0C{;1(wdD>4q6#{pM
zl$GgFo}ExvEvjk8?fN6|bQUWrWnY)(q%GmB%`55J{z-panf^~oEVj$0dYRI!ii4iy
zn-vyJ<~vk@n!JtHPyMAL<eFgp+s_^wga9|>ZPbvaRBw<_gkqef>RUV!%gLWZXqUg8
z1a57~CcBHKGT=~GKk80ye;l(nFZkK#gW@eyLk~?D^)mTPGY<(<4}SjmN_yh>P5hhl
z@RPZ7ge-gN4fD~ypWp85-~enu%M+LvHG!jtrnvxf;K`3xCz};<_|p157gzON;DQ{t
zSN3c~50f<D>kdAd&+)R|2v0OYGsB!rmyMB}G+{yl;lxDTNtp}f#R;Dni^q7Q0jKM0
zABDP>tZK@%prsCouCc)?bSlC=R_U)6&fg|XO#Vr}vULi5rXZe_qC4yX`4&@u^pe7{
zDmNFONaNi=m|kn4<6(}W?GmDt^Y^qS9_4mkC;G41o4Re*`hsj}Q=-5CuQ}>B<LcBL
zJ636_zCht$PbdsIFyH%@I6IINO_metAKo3C$=mZh8w*MczjsU@413p&p7h!qQHj~l
z3XDkn<?2R><L|&{^3>^fi_@O@Z<}oEf9qd@1gF2{<hdEvtIu=kDqlPkQE1F&C8qHz
zYEz>(;S;FeEqpYV#Qgia+f_q|s)xRpALpkeTG#0gl<o&Nx`;kW;8t(akOm;0k0!J1
z!TO_gj~UqW2;Yn0{9_TyH?Xja|DXv9VNb;Sc9MJ7^wM}b8?#Zmlg9F70(a$CwPyqE
ztZW4@g<E;527dp0suT$da{1t@-hqfXNfD4=T*4EwlKYxW{;r=3v>=fjf5OIia-l4Y
zm#J@<&C{Drd%NcLp#$Nv{a)HY|5(HaPQw7A3aoapO|6nux4HvRE)JW(w(EZYqCj20
za9@mu(nJ*sS;fJ<P3B8Ad;AWFcYnU^@8T7Ox2XBxE$`#b>+V34=k!d2M90p+m?f9V
zQ_7FgpHqzV#aweB<{kYtviS<lY>nkgndyZ^E?ivX+}R~ATr4v)*<gC1&O)_8E!0F=
zkERfXjHChg4l8cI?-F?Q3Il&{wdJJ<1bP`cf9PlNmxn1dj_~Gt-^M*}JHhBgk*J=q
zH0N=7CZW94q*2v08<Jyg167=i-sZ;6a^5Oz;Z9^ZwmokO-WG6Esj?+Ywl()v;$?>l
zV1H|g3)VK^^6nd2bIs9rF!jh8;@ULiq~=%W3FLij8j;F=0z#E?Vj%*p>NalnPF%4e
z!fCi~JJr{U_)h1y{k>Y%d{X^AwJ{i1pUdqRq7&vkJc$L6^LrwFD5C-tGq8VumF0^O
zfgwrVS5W6#k>H`mER3lM-usphGBSLKGjkQ<xI)JF2z^E9i5FH=m%^b@#O#VkFbCl|
zpIlHPpXsANrx_fCiQzie+*Bv?)&}G&Xs^OzHDdDoJg1(U<@5_>&YfLgYPQZw6_yiC
zHI%pkMN^WF*3=wokt$mlp|vj7uiYyRes&4|wYts~D+%^;gTMVtb1uXFzBls&KmHN!
z`B0W;A5oloCNgpMjfN(YT6894RwCJK%B<naPMo(K-Rb0xd!{k`Ez#e}h?2Bo9(;=c
zIB=&KcpbOI+5u8^z;fC)7i`BGq$-7&5gT!xj5orGL+|48lfOr1zrb8#0oqq=I`^8|
z0S)}DmMC0X9mp91TQlht@jG;W%lTb(9up<#=Hn(~2u0^@PYs0TjWTM7oKp&*7_)>S
zKsHGz6TqIlX5W!TUYJbC5YRCCXYc1LwGt|m4UYBQ$UATUD6!6QdU}b#4+xY`U0M{x
z5CxubBuYARVyKYBOW0Zia)xE8CAeby4EPuF_~gkd>y_vqis>JXIWpGZmiI+?pR5r1
zRaWZD%*|A}aB`Wm&(3l7*;y`KtS~(vnQG0;A*|$lnxTkVUdwaTx(Xvbq<3cv9C$Y=
zy*mN_7PlR_0bg41ul_0>qib0PxR!%^-p_S+=O`~k%$$R`s)!oxj=4s(ckZq>;M0cp
zu4rZ}{@nr~Eu3qs>R3(QN&{^bz=+5x+6|}d$OCYW>y+D?zJ89-*qyEYpe<d<67s1v
ztBjA_#-Zg)oS*wT{&2IyVxIct#Rgt;5`a_;vfy-0Z=4$7IJk>>Fd@Nd7GT=xH#Pn_
zg4Y@OXO?ubx&~ny0xaOyzHonQl=Q_ds2~@>;n6zzLk-loGe&IR4E!sTO>P>$i`QTO
zA!aHuQBuM8LetGi;v7Y?FeXunTvVQ^6l8idxC}=5T3m=ifC5oR(x50$6Nyw6E6Otg
z7iR*zrzJ~Kk<Sj1$;I>!Ck*Y2IB-{;H@~lr4ja@PHRdm@FnO}fx#t!*^Xz3VoLORO
zzRpx5q8x_Qav=@L+Ug8)bH>x2Aly|-?^eLS{&)L0cO40s9#FlE`TRXndROus*z<N)
zY6+9)o8+>-F-A%7jkw{AA<gLVZI@hU&pRs#q^`Mkgsd6X($!t9`6R9Sv-()B`j#Ch
z$8|cpvCi8l9uqNV+HxnxMAs^?k*Wn&RhA$j>o9L55r+@FjoBwp(WqWP<x^F_`Wj;6
z2#nB@RvS9t8*ZHDBsg%J<e<(fK&z#Jmc1Zt>zh)iRW30n$Vh}@V50#24jX{P1en4g
z0hIC{M~+mWPm+KF7thfB`37VtUs~bD@i*|g>p#l$a@E9A_+G|@M#m<&$#xf!%WIn8
zB#AuqOcf;gUG8IxsEM6IausZ7f{_%2AV@l~QB%Z7>1&!w+o;TCkLfaaXL4jzkz6Jr
zUrgv5P3SuivFFZ++uj}HhgCxq7AF_E^vo=09+~Fk6PG!6c9BapkEt+Axs)X`R$zVQ
zQ+l@y{*Gg=<+WEU9eAtY-#kWo6Y#GaBb$e>Loz`hE7b*__-@E;cSu@l2ZuJTvs-b!
zt?yF6x42$A9Nvykt@dtz%k}N&G*~!Q3oNG>5!}WBv_aJ_qG>{PwG_E@rMOddB2_os
zW>g6iEf^7c1&$tkCr_Nbk8DnoY3i$d+Y%(>NxL0aFK}(=9_!b)vHmGYgfLj{?|_}+
zT^6s<#SVtwI#C*DARv;!CINlU8vFu@f5<rZU<f09aO7ac*;b6$)aA(uphH$J*SLP{
z&D?za16-P4u@Z&~Oh+<XfW+QcTL)O`A1GV(SXQf8_)V6jD^s2lJ5f<2HQGfi#=f#W
z3Z+Pq{3hkgW9uz3Qi3l<Or)%uNDCg7iqHHROBBQsknv)&xjssx2?P80a`RmYx4f^3
zAJkc1Y;ft>86NqAhxz;;U*y>^&vIUpyVs}#yGiNY1^By<yArtoJ5A~BvDfM`+ezuQ
zfD{X{gpfY@-AS&$`3RYUqFHy1vN{-$O^@vq|I_0MM@=35sje>Z^p@+3PuX&OOEnC~
zUY!%<j^8fbE&oh~9tjdM-&qzV2|JPG!As%KmRCU}3pb~h*TJVART&z*f&F7|=Hkp3
z3CG&^NYZX)*20A)gxS1YkdTSoOFajU;I!O-X+n>)YuGg6wh170+qI(U3<Z<xkYn1Q
zC*%8<nElWr5F?<G3TzngzWxTILlx5|%>?bF(ol!dOyIwCagpOAZ{_-<A7XZ;V&|fK
z^GIw_5gR^j4VRuR;1M|6gK&RwMM?sZ>z-t;%W-}qB?z~7^$}%WCQ{K<P`1R-5&&g-
z7x+zUgbaj;Sydk;S%>D*J^ZTA+*t@tL-5UnTq$8-Z;7F66~}Jh&(Zf@!&^RZivQyu
zf19tY%+M_MwY8`#n$@=*&c9XOze5RNJqg$Z{HoXZt%1Mm_X0$(!E)sig}$TA&0gfO
z?+$R!8%C%uiuNd7;yT=Jt=DR?RMJ!}06L9<j^jHb&<XyQA3t5#X4R(QwAN5$LViU>
z6!(~j<+4ffP8S~_IRPmMZQHSST|p;bnD~H3)a1avH?y$#JoU<Hyn+qrFu4IVtQhXf
zgbNUj#v$iy_0dRmeFuI+hir+jmX&|q^Ju6332@Th1E~Zc`hO?|Ky!&91j0d0%CGXd
zc5j6+lMu&JZ_nNf8<lA(X5eKgU#M|t;7y!3@*(C|D$cbi?l^l-Y~F-t1e-*8wi2=s
z86iA5M*zeqXj-L-SEo&@Bw^5q|7qVuqZL{8CoN|tmn0@1`QAh_C-$C*geDb_tuw@i
zCZ)CnD=k<xs2T?>UDQlo()4{jV*k79?799J@3}j}{h#|aqI@20f+JpH@VDOemY{dv
z8*qzVdRI-PCxEvO{`KRmY$|o%Cl|ksN*d&{n#aC<j!Wko42(;Hif|Pt!**KtWlIEf
z61<bLZyV-kxv&t8#OUJ|pb1GF8~rpEi6EBmMKVb2XY<}R<1oGVqNM%atZilVbXmZG
z)Ws_a2TikTB#vHU|67Q2kHgB`avYBWM-IQ2c(H^^MCrF-urYO%gyUwFd6|Np8K;xG
z+JNchr{aFv`6mTJEBepnDVS<PjtH2z88bxzk7WK~N|?!CV|+C4tq3jRe_tWt__#z;
ziC7XCkj5>Wg3KqRKHXsdz};Mb?4v9<B%nvec!nU_9;KEz%2gXnzYsGAd`T!0f+H~x
z;@N35Y#c|NdI=(sh+(O+Y}%`tmo);4kx+UQN{toyU4CmwiLyx9_pzdGIub#xX~)Uu
zn)^;(m4>ZUT&>z-tjm#NT4m7-eSG0RlzHOC4EqO<(_EGi#<k5=Ujp#2lajZ-d7Enh
zZQXM-@L$Om-K}G-8|NmTOIV6evrvAXLO4RbKF=5b<h0=&#bFU6-9k<Ym$L;Vt<UW^
zfYjn2cW{0&02nnux77^`__eRtN(%Cu+20x%rF@_1Lnpd&P7%nfV9RIAdlh<CuQe{F
z)h`18(TS5fgMHUCG4e(#la{I&KY)O_Ai*pm8e2nLDCaTh#1_y-4DSHDaJg3UPe%>G
zmb7o~OWTcT#cB(FUvmG2z=$u-F}Ohd^I6Lo4-6)zmSLmjo4N&2Gc}qD_w;E@*BH&-
z#ED}cq7pUDeTk)2n%G9Pyq9aXGcp2<Tt^myqU|{#_e~;y#kE_h*}nqb6#NGC@;7n-
zZpuqpz{__{ZK6M=U3tABf3+FcXbK^)zsvWvhBo^O!7zW*V+lcMD3gL+tt-ka5EeC0
zKkM^f{`fMdD~m+BU<vw~mELQes|~^5W6auPc3@@wnDo^dkFn!Gpp7o3b4=$~YWsf6
zu6j(b^CpCY3Fqd%K{gyW<)f!ApW~ZfDe#^T9-zJ)kw_i=)#d;P{C3ZK+ceX0aRXor
zWRU^{@WSccj;;S&MnJL5rv?Ex&JY;GnWS}=wj4~jwd^57q_KuDi6trdt*kDqItWy%
zs<<e%C~k1*z`ZP#&yvLF2}9rX3J_-7^3Mw>#UG#g=fz5H-Q_My&<6OVMLq0=w0-{8
z(B`rTUGBfxH&`3_X9JHU`Y#ZGigcr3Pf>z&LQ@6FPecOCqXfaKPGibv&_BVo$3I4`
z8JS2%QE}3zXdRojps3OJg@DODD?(V3zcwndUXgl<5Y?^z-zsU=LBxzk=HeVgub1PB
zN?=xtu}jEH41dZ<4}r5)7&XVdZ%0YWF~quW42v$u!eo1T+7KmG^!c^_`~vfpGMQ|N
zGxI0$hqGPLvmOUq&Fb3#FB@W|(?pf#mh3<R2(|*+mjV2(H5@dE3)7sN{xTjRxxC`Z
z$6w&#hi4f%Ags$7;W|X#l;yYDW;<(t3;ad`aNORg18t&UUsgSkaUwAosUdxtV~QT^
zbXDn~V`6y}nUW&ghkXq@&X%>=gu?LzNme3|1@EH`D-YemEpq6<d#NvEh;^Q7V}T@8
z27sw8AdS^;We2)7V!{MmYEE0pa4s`v`L};92(8#}K_T4T&w7R%i@)Cx83DZ^4BEVk
zSxtYxVo5SBlPoF;hzRjBS%P{%E;-1x*M5w;`1Xy`?z<#JtM7}%W~CsxehYrT1YsWp
zeWK=A4ljKaBoZ*?>Q<cB#v2eN?U$*rl-O!RsdQj}6VHLX()~pWQ0^F3ov_uJ+&=Dm
zIgZ2~m}AH|PcwQb;B$X^fybYDkz%pH<l=ee8#DOXyj!B`Wd(ot&%3e#tleHp@UK2^
z=b2^8^d(gEv&=0$NhTO1o2l{5FF(WN^a>*rR{Uuh`CXm-mgsNjfr}MLr2wbv$Fcac
z#ZTXs3`81;rO=0w7F@=kS#-7%k1g_POMQz9U<g1}L}RPVO2-_jr=K5{rWv+BfatcV
zer?@)?iss$d#yrh%{u*s<Ln=O6DzYzD5(c1ghL_$1)QQQw<7dhEq`Yjx9^<=q{THm
z#D6p1azAVEa^4G*=p%EpVaHMe%t#oai~P%2DPXYQsyG!%-HoMcl4iNG%;H=FuQI}k
zYd=Oz-V{fb1GYqc(fy6FPzZrbW)PJ^z~66QBKiw~HQZku42}S-0_Yl5K)z3bZ1s8R
zN^JH0)i3v5i<sEYLOkRp>WO)t&dwmuyAdZ$91nTm!CAie)n~|LW1_gq3zr_GG`4S5
zuE+MlzkX!b<8;N!+9Mc~^p#Tqdg(J;jqqE2oHg&)T~IGd)+N^3Nb)h^sL%A|{p7QQ
zWV0iz)aUv9=bqu?AHR*#fXCvT6@yYkU<!U~d~!iRDUh9QAm!?*YOp#C*dDEwGjFWx
z_UQ|dY@<%+FRV$>k|wjP7#ve}VJ~X~U?DE?tU^_7`)qM*8P9;I`)NVWj3Sc_5$Igo
z|88byE)d6&;f$u9o)gnUX9Tnb{Ov2XU>luZfNr#u)u}mYyuZB$3&a%sUWe{)xxVS|
zX=?gq@(J03qOT96Ls&KTX-1)GMPw6%hq(E=A4D@utx-cMDHxV+rqZZ0gt`vG!uf^k
z4?{2{I=1aE*r+NK<}2LaWNeDc)G}ZS32}A<7g^bAm~6bg8p*CsoZsI?XSc#9v||iu
z+4Gk8FKU9^$}|T;VlSGSeb<GYI#uR({@`)&%jCmRUYvZ8W+5gk9)JxZ0=JUb(;NI7
zG0N^3Ssk8y6`F%y+1UP_f!}T-LM8;m4KB@nlY`^$A(tt#v^dG1|M_#g@0~YNttM2<
z7TCtxY<ljcBD*vEnW#ML_G@wdln6Kppso80?A=OfCGFXY8+J)r3L}fv$lx{U2&Bm`
z!q9PyH-H6g^4McvQ=3yJ>R%S7F&0Xkzb}NqqrL>qm4sTQO06E@`+JDu3rOb>si`m0
zgXra<s031DUx<LS1&GLQjG&&22M{7)vEJejHdeuXNaOnr%7yc5=V`EEz!CtIG0i{h
zSmOfBD!DxB%A+9$4&$r$DV1&jH9@6jTL!nvdb$6sd(k!wRgUv#h84L9O|IX%=xWP~
zl`=G{(3CF2LKscxwu|*}&nY$b8Uo<bqQ&Ux96Xj7$Ze4r0vCv7>XIsZ6r=W-n29#{
z(*Q}iR1yD2_JzzWRQa|09;KPgGF%vCX7O33YbO~wc8yE#?u-W9ZA$OX!QcL*u1-zB
zR}T2)jT7s$4U)n%7iPc3;qiBo&qka*bCz#ERO0U24pFO$TrR$QQ?kBo08F`krx9?K
z&c8Ybz*Wt*?>iPuD}v3{6OiM{q7=zjdWl!duskD+9EOicR~$vSBq@yoTn$6U0Y_AY
z+7hhH#w<>+urxnUwLV89S){2eR4NxJ2x^_{&-&vfOxEh;=7}16faB(_taplU8#&j`
zPE1vVR#K7M->4<VM$tZxi3boN-i^x&mkuSwR%o1}E<1|;UDqaDS90-9q@g?|ckffe
zWa<hS6-MC|G~tLMyU(gfVW5Z>G?hgm0#=n0G2Dby%bblT!%AIgPQMGZc3E83aF~V&
zn=ZvJ8q?f|G*QZH8+HvLF-AaFqQvELi05En%)>7x-1n=`u-u$sAluJ!?J{R(A7J>X
z1;6F~-j2bqt{C{Y#`$+q66~b~f3JO4jY$n&0}0j3r<t68n6aU|2!lBuee`LHr2^L+
z9A)Ob$jqwk`ZKzoHT1Q(e2WmYgM!xB4_iSlW=m^`w4#99vZYz@;trJK`-<u!l&8fO
zpxAc=>dPQ@qnSi8dm3gh#>`%*voy0vtujZWF-M}St%L>TW$=9|x>tw5M&cPaV_>uK
zY<#{0aB5Q!4x6?PPdx#v(idGia2kpr`(~|lA`IQ@umPl*f1*~13owx$hdwkCQ30SX
znU|7*+039q-~8t1eR3t=^!hV(`UT7lS2|7RE4>egAiGCX+@mOz6mbPs7BB=rIKNSK
zOyEFA9fP#CVM+wjx{D$uxTrvrjp?L;*7GpeEUw3P^rcP4vL20A4MU}k@vqRY7})D^
z-)}w3<idGM`92dHa(e2U^zS{03Nu#;{A-u}cBF<YmJS@e?BHLe7xg%A`bjMG*>R7V
zOAq6RMf!5biK1EVzyC1`h1WAOQex&p)baq>SpT-ZFX(Pd1F6WrI(yG0%Q+%oLTEa&
zu3SW+OGFZ1d63ft;sGd0lTc_bz`|)59@G>^pgIL}O}M-SGjmN=YKt_yMRXYB=^UO!
z)=8Hg6QUZRJTVvur<dxy5(Ff10CFx(#uU1++*^l2bS$?u+Dc-<n`Q#8y4{8=i#Nh?
zeo-ZIBAUDKUq@IZ=ttU-OM?(mH=22CLlGld9Ysx$XEOKtSgK#*<eA4H%2CJ;QtIoY
zIGCp}B#A@fii-_U#o`|fDsp3xAF}Gy(s|9&Wlg=Nh@~C65K-64+=Txb0wCr@Te-<Z
zeRf<=dWk~BZDgP&;wC3RB*1jRcv20?N<Ky<aJC`S<}9|k4x<NsKKCbQdHU1~6!MaT
zlH<(mpOGCY5%%?M0Dg7}{*4TN8(^gS*{@_WQ1?k(J@9XQ-nF8S^wG<YhD=R<6Mv*g
zCK#gDoZ=hb{4Vc)`#t0beU_$e0B#!CBT_)B0<^e(8~dwj1Q?>4CIPu(fi{s(z!;Fp
z2V`<0){5Tj8er65=~BW<BciTjif4V6Dn5JfP=q6pS%N}YQ&<Uzn|&q*zNw`uP=h3C
zSTRCGZ*kK}2%v6QFbeo2%20gMK4irP7m8uf+5#kb#(>%u+HG_H6fG_sA}#r41B)C1
zarOnVGl*&-=d(dZ64os4K`SYUokP@|rnD@VI*B?k-hg^iW}zkxO*OOi4Bm2)%+xT2
z{0M_XLzG6c6!&;c9Dt#{kRR~K=Abg2ureuXgl(FtMFKG8+GOsIg?B_Xrd8Y|@W~2a
zY4KDW2ql{Vy<2sukv4s1$}SqK#<fbM+aRd%g8^Up`b8di^hxr$h^!jn()|5I*(Lgi
z4|N#*R<FS;lG3{^@OSxrojqcgHh|q_^<CW--K)Nr>&`UEjQC6~e2slW?;;E`l$XzN
z|91+!;qE(4SZ;k~wZYH+vkM`$G8>nb<NoQ)Z51Ee48!w$f-t}jeX@m+OxCB_OsG~O
zlao+ek*YH*)S_jYG>E0bO|eKp57G>Z)Up9b?#8GCjf$c^Cmn&aCe}Tca^*=K6<L$M
zG6<0P_&lCoF<=+a1p-b1zas##WXl;M;GS+u01SZIm3q^1SSB$h<@`cXM2avzeoFuZ
z_^Iz-qzuW)Hv}MKjdyZ5<Bn5K3NUUn8<-$fe2uG5#&~s_{uC?85{tD(N|ikftPBt@
zdSv%oqw4%5tUT)(dM9}WVjB=q-4p_m8V{lh7-Ot`-nMXfn^+r9hWs`57mM~*iBsnR
zu>`!0$w-2O+M|rbB+q!_V8El#%<zrxJVrKKB_B*MSALw8<TOJEt~D;<)ttZk%Dl3P
zJzH4+>#%YKYyfLv-t7b%0(&>$@A|&S#ixJ7g;S71pB1K;zQg#?J%m1-zw{UnKN4`~
zO}EmhB_vUrk>3vGO}T%XqGP@@*b~5eWJ2G#<)pZ%fM1T#sKzYKl_{5(D6cF~Z7k79
zDyHL)S!`a`05_mS(#+DVNRD|1{|TSM2<*LHF?s~5OHf@_H0oI+f{Oo2N@FJt(K98<
zN%Zih$qO*)tfFEB!u=IFA95koO;n&ZS#vF0K$@bQw*Kx+{g?04N<S$9XoVPCHABRG
zNoEp(##8{7{lo?!1VC~tVr_^~O>08{BzA!yM`GEntKbu&G6lSBk)VH&aH5agejk6Y
zX32+@B{=tW&C;nFVKc^WD1umO2Z&M7H}_ovpG2?GiEnHI#*<_6FVZH6t;lsttW&OT
zuG1z4Ny@Pau`upY+I<mSV`Vw!@ZNxv7Z&-_*F}|FAs3FaP<e{k%3};4zTVml)`4HW
zg1~Rr@8(eeTPg|G+3~hJRoNWan}|CbUD&$wcC&b{Ar9`whl4SV*$d2-A7ik1BfhuH
z^Jng-n3I-X$C$j-B#xUM;7`kWTj@X^au8+-1L5vj0#`GxUaK=dJIm7Y94ob1YK<kT
z(E`n6*#+Q8O02Z*&f%*(%E;8Ra7C<5XjWtVAYy4c=HjD1;h<*ZfTD7(qC9KeUs?*C
zCLXbtMBNODk%OfcpXk5~HjB;a<p%t|H3Y_~*e^DKjE6E|vyMBuejV0r={n}Rm;vK5
z6awH>0FeT0wx4yMiHebtv}V(b(5@V@Gl*|qigXBhYDf_?V~0x%2)G~vIZ&9z%asU=
z1LQ^qC{2WnUJHHWwwTJ)Q;ONMnw8~c8Y{Etnz#TOgo#hqFOUt2<h(rjT%KGmM<x@P
zv}CzhBmIkkF}8+AE9BcXAh7_cXP{N+P;~#)JE7X$kR>W`WKYOUxx(ka^bj#K6vGjg
z8yC2|_y8k^uWyG;chyf{3E=Og8tha8=z64Xz<xPebgv(@)=-%p4yjyz2DK8C%O65{
zi+uO_FW{;7ad7Mi<rPU^ZP<{|W@KDLp)Y>xz;(ctNU}Qf3zIA?&rn{uM72IcQ!mlf
zWfCRzYJ8LNCi=O3g{JO}u}h~MCT%X@;sYdMrnaJ)I|G@=!~kZAz``-8&O_V~w^fKX
zRWM`+<HW|-MU*NT0+5knA%QXyfW)<nlp}TW(;yxJrey8467yXAjp2~3eg{sOHWGu4
zE;Q-If?tWI7OwA0j=iMxS^*(Vc@|<J<D#YwyKRWu%ryP95sb<g>%Yw*_Jn{I`^XLr
zP#De9e^ArE&qfo@J_{Egg<7pi95v9AFcdY36H%X*SdvgcEv3doLRBK?_mc|;$z=w~
zX9p-13ls|(a(R(Bq${u!`9(qyqR=vWw(7aHQ^XS+C?wBhaKvXNs_~~^ewZkpC7T(b
z7ELob{WXRT9!CX%1HXD1QhGN4|GMw2I&+1}g13WTb^`vc-){^2YRBL=w?ReZ#&eV}
zKZ{lYVWyv$X}<O3uW_pX9x|e<nk4!x`RpDB`bP*7DKR}qxqg{Sb%{!So=S6)T0D(L
z^4O&ncFuww3w8^5CvdgwFK!}feLfe7FTpHvJ*Fw0b^^`JbBfFu9JmwqT(4N3wb^Ti
znMsK(L0MDO0UN}U=z`(QB8JN$r7f3$Q|ecm8kWumAU=AVIAf<`0$t2}<i3bM-#%9(
z1sKV}cKVSNW&yX20F;{l;$^VL#=w>75<;ORqftBtb*WM$B}~N#D7Xvp!xBm)5FO%W
zGx&uPnZZ7CBN+yc!01s)^wHF3VDb?~WjUcyt&>Qqa3o>aR)7^^D$h;Yr#JNq4L!qh
zLt=x4=oJXP0kYl@h0G|q>=1?Q0EK*!TsB8Ommw=Y%UD{#CAQ*ohl>}-$)iX!HtG=+
zG=KWVhbdRikk6M$k|t9#_tQ7A4?mZ`y5Lv40Ds3?TOSFy>&76iuF|@RY(Rm!iZb27
zzd7)G9jD9hUG}vLJRv_;pgMJ$SWQr_EivBT&s%R<<aO8Xp_I!qxxB#Xg{OJy`B|Pk
zJ;m&Ng-U%9ycM$9giIzR5It7%z@2|h><88|y|x~lZRlx>grteh?w<=5k}%h(u8r}}
zThdHEp~z3b=ph)t3F<4Nk1E5NjB%=A%i$!k6wS;N1fGe`GaZYBI~y@w({Kesj3H2r
zg2v9FOp{RQRhSkHO$(s5xqsVcAiBR6-Cuy85&-$l`O1wq!59gxmEM%qk~n$~BEwuW
zcwqrgnuv-zl*<$JmB<cfDD8vMYc+ji%2aPY_Yf@4X&Tb)r`|v}1^j8il?{%PE=m$g
zY`ymx+ssurN%S(6XqIJNXQnDi#Thc*5cyy)`CyzvW|(4rh(f-ftn?Hp=E-Mm>8>=C
zI1FHDSnNABzVNm0GPiV^Y%WWzYfR64lfuXdnf}2w;O~ZmwczhDX6^eeU`1`RZ?`e+
z|F2+cu+1jA`p?Fo-75Gu7j?F<uLO)_G})nmg~=Cr+Z*1=-~8yOIC!XJa=Rrs<=TGu
z(6DgHGUb(7E-f$c#Ea8>=ewtP<e76^ye!>lB0R4_HXD-7T5#9`pzd7hUnSu8TYrrm
z#c*#s#+K<4Nx&7jSW&21n0m(g!UrZ4)$5f>f)Sg6S*)S~G{tb~qvN6p{S^)?8FofY
z_pA}HDK7_PAp%l@%-kgx<z~u*wVIN+IDzz)CKRRRz9qK6fj^}arsS3>cA8cQ*1}+o
zDK$!8%134LCP*m}18A{CW*|dhM42eap?y~ExcsDI;hd&f)5Ns|6^RaS4T~)i-PJ}=
zDl$YheXcFTzv;{<c?QDSD^!z3D$$F01bAYDnJW?cgOsxS7$_X1zc@&tRHDDsPoYpW
z_wV$%1)e_j9E-IV39}(l)MRG<0kZuexuM}#JotMa|4PRJyd2=)=q7GC6Vc>}2h^4_
zeB^yU%G+Q60lqt>`Sa6tV-S-?E^+SS-YRDDO!OaO-|!(mc(=!=-Wkz|%UoQX=gAi?
z^1x%~`0f)IdGXv7bBil@e#QidNL3;U{IS+y8*P}1{H{cY4P-HO{hb~vi7MhpuR**F
zb1!NN6N-H|!{A|95LH0bUl&5FCFouh)_T^u@1!VaA~pa~1B3u5>XHj!#CNGjVDsZm
z3G--mL(n$&cfs;00Wd_s7W*__22n54_Fz^suvcV@_L}LKj^p-nXh>Xzv<1nC-ft?E
z5cG%SM-=@>G~>sVNg}%VjArU-d+kxxnBOh%&CAtoY=u^*jSsAj-y#4eSWD_crUghu
z6%(Q>CP}%_Wg<0CBRa)$;|b2sXH7AYK5s7*ef!xz8ZbCer@XXenhTWYmdFl{uv|H7
zaxzL|2iF+<UYX!uf3B@>+bas%YeH8Q{Op|byT5_Xv3$wnJ#YPfZn^30Jbqf5a*9z)
z{M4Feq)f1ha7+<0%L_5jOl!htFm0&D2Kv}PHpE+RKE{XckqSU7T%MWbk>}5I|Kk^V
z?Ad9~oLORFrD@V+^ZAf$E-<z4Q$wHtG3|qC-lsq`rNjgTz#>dOttpH_aj#<dTBt6#
zDn72rhY%P=&WP~_^alKjj06Koe7@-K0f@$60(sKtMFF_ut_Hxaub_#MGyT1t-tQ_5
z$@n0B$swKSFM_yH3S~a7Jig3J%5_PuyeWU+1q7J_ejy+%_+*C^#RD*QjUwNtS)7OS
zk0>J1`$fu;Ac8b3(@9Zjwt}setUA<z)v8t+nkgLG)L?X_+?r9HTBAwSkotdFhWiFM
zdZ?e<uNmP@cOT~Fn}^xAKcsIo0|Wicu7rI4cb?||{^x%}xv|9f4X>jvrGQ%Jy4v7p
z7vNvLuidUjAW*jnt@_h#%-Z90-*+u&*WZAxfPeLQ%@R=|m5VvvcF%{n?!?<Td%kJv
z%gdUQ#cH#-+U_w)tP$5*#`w7vQdFo`hI8cz^}I$5&7;KvhenIM^Y)|sz&m3iZ<#aG
zQ#|<8W$u6IGLJqs&xMP1n$3Q)**;^T4l*Gs4W%>Us;z5pE8I%RD@c@YZC-QXDL6U+
z!}}Dq>tMENYaEJIUkI19I1>+;iTo4ny4ZKI0ff#KC>4X!@?-|+l1AInEF~>LXfP*<
zK+bq5NH>N+lTK`da74YZCISh}ajU^q#}Ns_7W1^#kWBFmY2uL!2}>S+zoNJYhK^|Z
zMx?$ToPG!zGos!oV?!{-6jsM(w<;&MW3M|JIkYMP+j7296w#<RsMYH<qlAnXGTuMR
zb;m}z<Aw?Dx?>MFT|dadeOdg843s2+p$-+F#!8lGHbZ~5z^8ulZM^lvH}Ow?_&0g%
z%q;8~+?XY8E1!QOM!9-i&$ZtZ{2O3%cLYEvpfj5682svG0>6l?0kw;HUVq!Wx%tMo
zb9veXzPd78&H<cK)zn=q1te<9>gBE_w&_lrx2dmH4=&U-moI4ib1{VgCQ3z)>^;sW
z-f)~Bdry<4c!_7vP4n%Crg`9@d7gcCiRsx4S`Cvgjv5`*4+7hP*mdWXIZ4@YDw@iq
zV)6ye!8>8>xT3kFD4S|D7PtZ&(+yj)2qXItC8u3<b;+cQ#Wo?*j2zcx#+g7k0ey-i
z=b|@UR>r&LA8GYpV*?Q2o31<7@}JrYEn!Vj==uscsX!|4NDz|bKV<q9nGqN`q!`+7
z3C4vdVEK&LU9167jFUzpieuxlTNR4w43;JeQep~?@y}*jO4a0gqi(<-5;IaPaQ!t0
zx$B0#+;hu*Zn%Dsy$3=mO8_}ZSBzmPp>jsim<^~;6=|&G(P7?7DuE{ZOr8C&+r$6$
zg`eObeCRXWe|iQrYUBNFk=f1#wtk(za=@Pk0`0mpkmywHCW)^O@Vf{oFGKZGfje$|
zC%4@4KBlH@D6Q=nWFx~&^&1)N!bEL&xV>Uom^OP&(Gba?EDbO<nXDq4SA;o<hqtM)
zQVjO&$%N7=&0xl3|L_pk>>1(ik6s6#sxiGV&m+%GasPv}Jo4~qUOYF;a(#@jI6-lE
z&=m79#y9~%MH81{;es;ufU%=6bd5)|l1QSRjd_=3K&8lu-`*6nXm`gE!=w-_(f_3w
zhRM2faWJ;}Nm|0t1_VeVkz^{GtiiP0SI}t(XsZCm{nyd(M2LjkN0Cg7G~w(4e%>Q9
zsL4Cgf8>ZJUsOz=QOrM=plhBX0EQ5o+#UhG{UAEMt=eE+lA^N2Q9?70sMeQ>>I;VG
z?&;5P;@W-Ob^U%`che}>AIUK`9)i?b5Iabm&@4w(E@r4L7pN?hs4q)pqQI6O&nYqk
zikuW7DcTA^bse(!M8v>}96$fNALnns@4xWOOoe2)xLTsV>iPV;=loma|J(8cyn4Vd
zAg*4@aKqs@apxT$V0Ky(erz52R#c3{mv<5Ycchkk%<1fgLyI127OXPGDI~XFV(_JF
zk5sOa<R9_LFDb=J0#mc_<g{i$C5+`V>>Zup-Nz<)@9U)9b(vF>3q17H65oDclBb`}
zFnwW^W`2asL_ftraW$HLSj?S{DGfkrEMeu4O^y+e3ndVJ-$edN=Nkh~+Xy4*2+%QA
zxJ)fRt38{6wy$|hGB9Ab=6zd7AgzOM!grOiGo<>z3!-b;5Yk{GOL5&x#^fP81o;Wg
z;1NY>NU^*Km!8o?D^l1~qJ^vumY5o9brXvr8Hr-)mpY2IN}bxuEGoW0e_w+`g#tGn
zALPz!k8t}<d%5Otk-;GaeUkDg5lD(g*<<;9$kI%X@=~6aTAoG{l1M;O&Lfn%10|Oy
zpcR!W#EYUH+501*&c&inZ8~D&mMs7LH$TST`S54CxYD35t&d$;bGLP_b_xFV-?1yP
ze|7H8m97Z14e;|4iv6j{wmwtf=)@ho{?6}XYSPw=6PKIK`*wS|!kN-U(r`NG=QhT+
zw641em~os^a3g^vqKiw^pt$d<Qr^qj3v9y-Y<D7w$(Kq$o?^ZMXD?~;mtfEj7%L95
zXU`Bn^v;+c`oTJjOA9>x)DjPTdya=5g^Oo~sg_5mdnMw*kP8=K;+lm1{hDY=3T-Hq
z7$ywIxBc%dKy9?15Hu0#B{f)T+)41eNC`%|5%FI*wP2>R<a-KU$JH$nkYic<g6XEy
z3K_8N#pJIM$(@J5+62t$h%?&MKkPpQ#ZjwnPd@L_Tu6wk35lpW4RPPeHF(q`MQv$?
z#_}XyG{;bXjhk-{x%HMIZoB;mH{Y?B@nRo+=QPYM!${TC>aNTx$|rLymh&vt3zRD%
zmAX$O@l7UVC`DIF_SuQVQ(e(S^Wt(8W{?((wO$TUokVh~mo-)2qc$CK=v~A7^WXXi
zfBS>?F)iuKc`>eZ1Lfub-cd^LjyZq3;LBA@2fiBl{5^ra!M?4{mAQ`RO6)D(!aZ;J
zVdfS*>J1SqQ`eHaEv|I8xUh_5978B&q9p*v9a%B~ZJj)4flobXX<-d#xHiQtq;`DG
zab+oKos%$KMVtpIlh+Is6{T6!K9dzVc?$YYd5jf9#wYT;;pixDxJMe-RXKB}#$yj%
z;-Lo{JoiTd<pV<m?;K&|?i{1HL-iS$Uy4l;4q3Q1&DUnMnO+F8@I{Z8)B%%8lcqbR
zM!;6jZx;&e5@lRPptO*v9J57SOm!U>%b2SDX^u@=hFtEWCp7_pKFAlLG$G?PGpAr>
zI>FZ-f#(@RVP(ESb#@-FI!S*x#dU|P+<AK+cfbBHH{LqVfrEokNXu+X)y^i({T|H=
zSx)|TgN4O_N))hM4@~&61S6T+1qDlp;-;on(de>xcx=5#xqegn%h(fagoYS7O&o)m
zyM##u5?(E)uYhxZt~vIBQGV_}et`e_6TeS<aKNa8mP2?~IG>+gfWON~bwvY#R!{0`
z=JT&T=2p^>Q}F9@KZD^B-t?wVvb>a~E}a}qfsVFO$r_cNQ70|sBT}`iBx}QJUFRTI
zXWqD&(juV3IZT-;TQ#=TZcAd}g&;&)a7<0&3dEZr#Gqg+|48tTh^vx<T1^y7RmG)q
z9;LGZ1AfBbc$UM5HHSZ*@R1*0Vd26eC%-$x(+^E@=9@nCql46kM@aUUj75FWgB5Aj
z?c9W>H=b+eA>h|y*vnYgrp=qTNibHrardqz+jo=|7pchf4zz#M+WM|wv3;M`(RT#H
z=>O7zSEPnP=<oB%4J($XG%IsZo@}uE`~u$G0{v=<Ye(wb_<E1m-#x%hx8B0O14B?S
z%??awj<_0;Ojm84KZ%BvI0j!)IGQ23E##5kkRq!Zq$Yt#9THC=wNlEiDNAZ!FloE4
zPoUF+q#vLm;GP?kW(JxPQMPD^cx5HB@X{aFx&7mZ_#ghS_wrAF`p?K+H$*Km9VNRn
zs-9Tc#`@nj_&W@c>#%Z#Z2(t2pMTX6HxRAXfIq3^$km2<(_4R-X0@McMXJ<^4?gAH
zt{iyE;ad?NZZ4MXn^sZc6BqHfU2e8zCv*Ui)KUw4<Eauim@6@6xR2=G(t*a4vfzsP
zvZf*Gfz%-oBcc$5tSwF|+-pT?7PQCZiyozmn*OY&Z_sD(NFR57AmOg>uhN`eVd}{W
zFFZKK6SF?qXqd*EM(}U!GvdBLCmY2?!okG7=4$tgVckX^+C29(i`7)UNu40A%E0M+
z8}e&y3oi06ExYD!OI9he#_I1(#2JsmphscCmC#;paQ=ZB7r(wt?(!1HGt1m~E!=fy
zKeya|l)VQ_P;?w#09%iUXGNTHo`G1Z@A%d=Ddowe6O!DoO9?mM1}7hZ^DkPd#nd1)
zH56R=vkqxRc1kM%J10V`R$`LYD0Jn&#RegQK-0upxcUix7WI2I-uojrbMYUS`Gx=G
z>*TH*Glt2Y>;EMN|N4D5z{`$p02}rn+w8*DPiV{FZ;3M9_Owq=)eHE`gS_cYKaAGn
zEG<_Jm6x>M_UO*qerdL}{ocG6Jy|$|5CJi^rJ}TnDeJHuxG5O=;e6<}wxlagDaUbW
z5y_)2x$@0aO>phBGf*gMaz$mqD-nFIE6s|hSd109d7t8<rvIs!z9FB|@e=#r1^Yi-
z=ib>GQ;*DZ=Cj}B(l5iMYxgkrro9wyEt#_8l^igepc-OWvzC5aCfkPVrEb8qc6>?z
zjC#{)2XGyPjUbseG!?Ic*}<pSXYB`KlBg^+xo~!wliyh4*(b}405|W;aO*qs+<3zT
z`wt$)^beDB*AfGuWKIeMf+tA?#;)MouEJu}3vJ}T)EAIop}OnMw>a-nD8aGY;fV*O
zE@E4smr!S!Y?`lND+O6QPMZ2}p18RdS6A4nf~IbxNPa0XFiBK4+H$Uz!@sY_kN?Qs
zTsk?&XMXo7atB9UMIbq%_p*Y&yOeyTYye#`-wlvGCfx<V+XH|1^V%`e`Z-T?uE5*w
z`5_9qYnYu|vEaAWAe_<Pj!kb#+sG%$Jhp1AQ3=fAc10$o`>d7_VHbqcA^sW(AnhdU
zVpP&xb7OCC-UE9sdtQ?zCoQQZrzesMH`<gcmm(KpM9kzNCpGq@)}FM&@+9vN%5gw(
z7Wx(v`ksu*^@n5*Wf*_UAmi`eOLS?G*+<G;{PNSx|A9w!qCn%;QNn9S$c+ai%TS+-
z@nYMHAZ=QbrYN_h7)Jzb0FWyWZW^XoP8s^XQ90yV#2pzeHko>Ck-6`dSvgx}#1FW3
zB;a-X1OCQO?cvyoJ}A0qBNOf%k<3Uj6S2HnkzUMz7Vx&pi0I<tu9p^Im8xc0RH>S@
z9dkYWq%nwuH!s5Yn4&ZcGZ(aVqngKTiMgrlWGeln58Pd2DghX2$W?T18AmPnjfUrn
zkBS5!RgT1tGQF51{DV6G{Xcvs7tby8t?ypO-`k%Shul5**#-E!;G+kCc5VaMFcNS>
z@Uu(suOHXectUDZ0dKhF!we7I$n=Z_zZLt%`t3NeDI3)h^y7eOZ30$oOgnv><2qe2
ztww7y;%qv;<(b0uTV+7)mJ*0Gh{foa>2FS2v<*lgkN_RYwf9~3pqecLQVng6zi_ym
z*bcIuN$ioz`b&u-9|e?_1B%lLg(sUPzCL@+FcTl#%ftsY@!UK!U%kM&&pyhTYL-g}
zMhI>nXV3MclmaNv#LgvXTbqj)K_=ab7IalHO>e!7N7(OC8np5Ml<S;6wZdcHo#&|s
zrYWCkvQPWGWo&@EUO&#UHxDv+n~Zcl5*rfFAnZFaI=tLqU%0)T$R#Spo`-k@CE`}H
zAD63|l@(1*?uVopyRJRrb&(u@<INF!Mr8X5>^lLMPFW%<7n0Ip;rL?UGsaCv?QImc
z9b?B?^~gMLWAkyP$K|t=fUI4>wUG-I7td$Oe$C_Oe*V4u<sbbGE-cnyKx#Bz0r0C`
zfPWp6?e=-c6@hw9WUJs;R~-ClC01!XdE?=GIk^ALOwNeT?*d#LmriT>t#XO9ihZuB
zj_VeVsk>()=WH;L5Cti4VWQhauXfgd%jMmI?2t&zekS(cm78`gx~#rwU1$PABWemD
zRMJYjHPL|5iMDDJld^eDUMdP_At!FV5UM^b#U9y}EPeGXrRj+LlXb!|O?a@MiH{94
z@iC9vFVA!SYv=g(XP@BV-^_F1eFwPaP5W6|08g?S#k_9}q=`x4^#YGv(Kk&?B(P_t
zQsdP9i@f;gG;`0FX<lwHs`A{lr=P!i<N(*dp`Sqst2K>J5~63Doc(UX;0HWPCC@ZJ
z^-PSvBdj9%<P`NpQ5ES&Qu=F}s`N~#3*fD)WO@KdXtWSX6UmsCaBsI=mq#}@3u8w;
za(yvT!`W<H5SMZLbsBtH61pSyE+<2`mQ`9PvE!qQt}+C{q-5LNiZjpqTvHt8pZ}{5
z^AmsNKB8PmEHT+u9^3`^*RS-ggTMRMTV>x-96)#QZw~xkVoI0ayX?FA=D938<q^$?
z>@D5G_1AouX{oDi>i1a?s<m3b)A!m{QaVnNMxLfkM4j4Tn|-7Kl~PPXB#Sgn)<&qA
zv!!k^*L5dd2DTZ88<W=MPxFCXhhlRsXDcvSf#Q2NK6;6+vm8&<1hGd*#oWFD$Q7)=
zIvZ%?a$Al=iVGq6rG(<Sm`r~S?@*24M4lsWJ4m0ZQTk%Uul>yPs9PT6Fa6BD3=J1p
zUTlykpF&??><|lc6;3`m&ohr-=E9RRgo{3hOa0uux4;d@4srZ#eGH9ep&;y0L#0W5
zvB|=`$K;~V0zRkDDZ&}};lHhHVN>C%u2w)@#CqwFRFf9pBG%ic8>We>aCZTJWP`O#
zkdhGAj`RRid$83sS?ULX9#!l)=5gu~$VsrC>kMqLY#&BSrESrZ^s!rtjeR*6ap&4_
zAJYnAW|&9^B6$Qp&p#A%!`lz@>7RKIfA_!pEPdDSCvK%GuV26GLG9kJS?_Df#6~#S
z2rIJLF!L+!1=!@mHk{NhQ+m^HL?5qaDMVx3anC1MtO&Pg+B94T;x=V(Kg>=WKzig>
z`hExHPjz;?K2nX+`i`YlmsyY!eHW%(frKd8hG4Q<OsH<EUpq!(4)02HTUz59TBH*(
zVukZU8De4M`6bIw#9LE5BvJ-M60>gA1Vym~jl2Y|h!?;k)9@IY4VXBnIsc!R`1WTP
zm|xCux>+YPnB)1c&F~99^(TD#KYf6`NAi@H;PG#s;?&n?s9kCjE=An3ufUJJ?mA9f
zH$v%P7P1~xVkkFhl$(_2V&=;}mlr}V&SjXYD9RE>D|G_0u=qIK@STKfPk2mAdGA<J
zYiQ~XsMf53)i(3ATs{T4fZjA(b>YgZQUX#U;GU03h?4GVi!gBlPCeq(0#~okFz~cJ
zvRf9Wv55Pe5(n)<!p&x4rP~H!<6TN^MXCDdjuQnwPk$xmUGKV;zxLyo`Q=}Ki2iH#
znVN)aD+ayP;9tA+uUb0rR>8l~g>5aRclCL_BqW;8aM#^G1bUcyqinOnT9&=`*5(48
z;(n(G!0lqJ#3}W6hNKj%Ch{#U1nG)tI4g46lH2sQcK|mGrL*Uro0icUoCw=uJ}$7x
z+6?T%Gxi73Nu8)Ft}Qu-0AG9>5^K<GDAO%h!fSH{jLkr#15qRP+#2xsmpwlB|DPq>
zpXIsc6MX%JZ?IIYGB|jc^N)r6jSv4aZ~ejRc=3@L7N5-WzSrH&-~7Zr4&N$@xvQ`%
zHTh;ER^}D+Gai>`GEA=crisZy6IR5#;mV}Tg&5ag#p>*T`a1~&KdG3ORAx`~dfVL7
zbXIm<eADX7De%+mKS>BOfOk*FCIF@dThokTYp7i=!^p6rG^$M*HPfvqeag<NpY}m$
zNd_(k#54@W5*KlErqtLxYe$g9aGNp^)BRaWhC8EZtUR9oiso<s;5&Hy$tfOuewN&x
z!Byqpwg>*z>wJ6QUq7<V#<+rkKsy3Iy8{1O<6~{c<HW(YG0=Y<vx{Y8^h<wEMe<Y%
zXmR<@d(lY?%m4@e76D0RKHK=id?gE0zDi<K9^8B-i=Zh4$;RIs%eip@y2a)i2Aa?A
zbT0p9RbM_6#FGZuxOf7?71PNYqG#<2M)ELOd-ft4;x>1!u|=Q0>28mUFV^^ff9WLs
zVaTI1-{6m*`yCFAe2_QZ^*(MrGR(Dm8(f$^$x~mSp>c75TD;6xAAgePpRe=79~<L+
zAMa=8Y|P41z@@W_^RuuZk$YkbaYa9(w3xc%<fb*Zs4x--tl_z*;Oyyy;-JsMyntWP
zjC339W?w7Pn|tPhwQN@<dk@m9PYshP2Tmm=qvtzfGJXUWCli9KB^WlvyPXMVii*j-
zbyblJad$1mwCM-tsyVs`B(V=RbF#hqOsN4EN^Oj~KFn4X*$49c%wKySKl~4W30=#h
zbGBK++9D#W7HP-#>xslpz`rr0y`n0>=HS1wDZQQFCv~5k8sfU+?`C-=wuvz=Dl=^s
zVcT`LT|O-_+ie}ef9=n$uD>a3?%2Whoo?@M;_5A@Fu^3Ir@UQUCb3Aw(Dab<U0QU*
z86#Jji8@+XxypU*F1n5|7#Fv2GFN`vEPm6r%9i6YK}a>t@PwodC;X>hID_^Arka!d
z>8amkV&GPeU-uENz55{7-UPRg!4DjhXdO89DE!+$n&bCB|L<7LT;gB<Kd)!cv1=GA
z<az8|EcHn!XN9ZVG+!y4(vX(jreB}c+igcBONi1NF2PTaJ&<tkhkYu`)*vU>VX}Q)
zxi7Py5$)5M31{C)L7v{9R`jOb#~OiM2QtaTl+=JDij$%Sq(x6t!*ALbz!BCUb=4S~
zkhSi+E-x(`L8`796`*D4b=}xH>z2rv5YAkVxTS9&f9Lz(&;RhBexHf!PMGE;ZA)Tr
ztZWVZ8!^h>*lB;aF~rxmHtBkhmmmDH)fO9Ed-NTq?_U&0D3gKG7PHsQw}aKUOaZO)
zx7&NQ0s>u|Y5Tsz&DY9$vx6)VNLz{7g(>1~ixbM{RHQX}y|P^0wV*O$q+4f3*KHZQ
zI$M@oz(`O^sw<mwxbG$U%^J>Z_ujn+eSYUZo#Ta*7YQ<1zH;{SrWRhYcs)@w$IMj3
z#g&NX@)2iB5f9Bp{OOAcbqZv2V_aDNGLg5!zyFm>gk!NGHpWON{&%NxR2DV0B~4>R
zK%Pe5NvypsUMjT|B+WOMRXp>sND(&X-ozfH7JYXetzsp{&6X<UZIeyAK#+TOX|PpW
zIWT|4n-EITkx`do>^w24Avbm&7gr_RyyUrwuoAiZ8;Lq2*C|9Tz2}Z#S$l>2Ce2T6
zf|cACNnonhO|Uf2oQ`?hwXf&4eTP||o3`t#Wr(`^;9qZK?|iXa0?>VOFE#i@Y0E}K
z?B8=I^`^M$Og>tg0Ni2lNTb_Yal0L!fi>rE-6yGD>w;ohF$3w4j^j9ez4L0@Jp?V-
zO{2_)b7Ki1NC|+pxdXyU4e(R<R=Pk_ZYUXtjyjkOM$wx)7OLbL$T?CDT(2b@y&>Q`
zU!CWx-*|@pVvYw+f1ZoW&r!_pCk#jNbYhHmPd=<T`@EvwRQ&!QdwlkD3q1VD{Up%>
z^(10ZKfrTOF7wrI%&~vJPkF%tHL8oB-hx}eZp3$axi|?MbDwqzvYB=BQ$A--#wP4J
zwf4)kq%GMyZt(!4KwQ5nwXA)2U0b$x5unxkxMwcJR_^K8K{=1~07!_F*!F!iuQm}d
z_usi;O`QZSgxX0ba&OHm1-|VLY}%g1TGA5?5fB1kUP2VayU~PlEn#lf<1HuN$kOZu
z8&uXQdhS^4-wF8B8|kduo5=WEmH^bt34W!B>Iwb1L*(*9rU7Vbb+;Ox_4}m6z%uKO
zTa(7PyUac-;dil-c1Q&4Y3FK+YV}d4&pHlc7@7HN^<onO><B>`QD?+gozB@2j#SJP
zJ=s~B4X|1ghBKfUmzlhznW+WVz9SxsGZDZ4+s}~8C(Ku8d1~hKl=A%s{Q2Cd@$pBE
z*wpne^}{#5q<Hb!8nwzfqUMq*xt$3HxV-!rNp6<U{_aHvMq>I4F0sZX*O<U4N0?fb
zg<9ZG?};UZzUTAYcVknc%w9_;(dz(nS^#*BkuSZ+oiF=c+S1#FbbE?wRWo!z6nrOL
zIO)ttVsYY(k3tySdl}<^pE!xizAOO{&xHlK4doWj-*7~rZeyFwX9-}cHm!s-wVY5Y
z9VVX)5{r*=*Wlk+=U<JLF2`Bb1AZ3-V4WcG5`(|BPz>h?Xfz^n1<z)9*<e!VuCp^0
zi+q~d;%ensNx>v|w5#@}KDky*c&D7uq89C$r2?vJ?$Z`cyUf?N7jp(WNkuilv6*;Q
z<aZ*lTi7Y_uws7u`%c$a%E2svtWhmLpcx+X`R!kSj>Y9ka+y9JpZ!A<YM9B45C$bO
z5@RfaMbpL)$a$aquBJR+C6*36#waHlka?={5@r1?=g(Go=)3dWaAQEd>LMFmw;e0h
z*d(A<A4NAOtJmA#C2ryTNh$0RyYS~!<nPe!Q^}|0=Ic1#Y7cJ97Le-S=|1w9#66nn
zQ{)E4Lt=?z+UGHjW7B9PiesWEF~rjl0VC#XW7L$trjCISZUMeXa*48lkL_Rc*@0h(
zKrK<!VojxPGdq((pXp^;lUY+%yi;A-8u-}-_}Bk#53x%XV72tH^Q^udbN-HxVq9xP
zb6h@m!Bl@8oCr<pYSTSN0zXYB*wy-v_32tLcUF^aecw5*<M-7fYFoW%6{<8Xs5@eZ
zSA_+q=W9y?(%{4B%1+E*1)2^n)FKA19)Tq?s|l2KmD#AYqc?_p`SX`~`uP{=EA?|>
z@iAs=FObWQ;(H|muVh-B8TX<m?YEVw$h$bJsn%*}EqxK&CTqE-i^~s^$u;<c-<c&-
zOejiS10hO=tEK=JuY`4|r?!jKeqlQ*+m6C3i#}85V+wt8jFg49voe!zz)rt&Qd7$X
z*zyY4bEK-12^bQwT`LABtdY|62rwMp_IxzG9-X+Kwt+W<N?UcnfFEZUFlw3=|LsfL
zG;jA=KwpcriEWU)1zl7OT^I2DWQ~WPevv8{@Fm+TwI^NCl-^$8?>MGAWt%BpEgQfU
z%;)b7ek+ojiH0H7c!o-OiqlV@qtUD}G!`&091=<kD#PimT_BYS+#x!sNN2-|l)E@j
zLd(eHwpEL}vtspXBGVe)<IXuZv=c|Ip6Qa;+Kbsq2CW`;shDd-)iyCmxr!WX&(VMv
zpIzZAUw)E8K}7r}Cl~&lOtz1}8^l*70>5Z%C23B)R4rOr7R$K+AR;lkvJeM}YLe=|
zSymdCsi@POJ-fvHUt40|0cm;e+-go@68Bh3Jux<uv~+ieXTybSpL#kmq0B8CK?+=#
zfn<qVDh)Vb#%l;edRtmaJ#B((T!@k;+|Udk5C@(d!|MN5a&p8V_24+7Ab?L+iT+lq
zX-bPTLjY`}Qv-aF1VkN(5~C7GKgR56Kw*DCt(fqIZ=T~1KlcO|R~|JHoSsyL=~xk4
z0Y6s?{H;&&L0`c@piUsIo8o4`UjN%xz~4DWy4}X%G7Ggw$pmlW$%nqn(AXGz_DwLn
zr({IT%5qFYtkaS-l3LPQ@c<py(Ln@Oo!i(E<YUUqI~3FoVnm1M(Ds(MeA?Eq?@+(e
zXX32cCLf@Kotc6f)@kj=r$=%NTk`T9Rgf@Y*-0q&z^E;2{<%MTntC!#(HrOanct_b
zmMQoX_<qr}<O%|tsA8<_?i3O{)T~;AL}#r8Ap+9ETL{6_%2OOJUCWoga)}@L(LVAy
zs8pOwt)qN@3gni0<W6EPFP5@oigVAyZEvyp4g#{){c8nhxaiH);@?4V+YhV#J`JI^
zCvnU{2tX71#{;rO&oo{YwIe0bHu=Y0XZu!TA~-uz0K|A_qdV<$l}%jD5_^%6LZ?Mf
zx}Fmeadv*5(~nJY?(AhMD>2zzg_-5Y7??QRG0)BOUseJ83V>f-@j#%i$JlOSPj^DF
z74Ua%`H?K=FMq|fi|)_g%;d!vxqSH?!$aeY@10<9xSzhE(BzI+mLi%p%UMn4o_WwV
zv%lpdb`gJ_GqdqPy>HywC25vz8uHiqed}O$l$<%uS5E;h+)fslsjlNVy{X%oDkbh2
z3h+!10SOJxYDV_^eC>-bFgg7q1I1xxS57irf1FIN4^LWgd3k(4OX!RKZwqZou?snt
z+#B05S0sRx2*@y79W)3FEYzQ4Pw6t3FDagXzRaGzgFN?K+#x`vT)*>u8~pCBm{Q{_
zi;CGxO$PR4DNA61%bBpges_V6OB=~T2&IddY>{nu58LNhv(`N44wV`sBZ}E`vF%Lk
z3<xIl+GS^^1ltrh^<4U|JB}gH5^N=PA+m~mF(fNB1w)%0b!lpm$*Fm!XJ%P0FOVcv
zN|^yNxhCfqzJXuz$qkIQ2+g*@zi#YCW4a%6YtjE#BNA{!@UtuMuNvnk6vj)Ooctnt
z3QG)?ZX#9zbMt4Joj*@5H^j)uC?n%T42(*ywr31PwUx+LqSYoz)E0<PX_=3X&9NSf
z+m0u=ZcZuD?L0!-4lEtt4oI?j>K%w~=^$1lZUr+r@Y`_YRvG^mF%Ym0?Fl&b{2Y%w
z@;KRy?RtB9=}+;)tm%Ug`u(PJvAlvX--=(5ASIKUFSP>g$vebrzeNB%FGHjjnOb>}
zz4;ID;CC+ZvF{%=nUE&fr$ent37NfT9Y(Jf2e*(rd#b_R$MP&LL`F&LwDzZoQHEo>
zIkldJDdyo6A15KKCcr5HagmuZ4Da=rJZ)2$Tg1&207wfSSRx?y0PTXUj5OwZWD6mM
zl24cyeLrTQyuj?qS!Sl^m|d7RWy!@_kPUOD$*43cU8<gDs{A0ip#cW>+~9~*XSn$m
z!LN1!{+^wMuY?4!Yw)Wp1OD_~s448ta(V7s%uYSdMCncj`mRNLIqFfF3+HFJd?7=z
zG{o@eIK!hu^bHFTJd<}{Ek`Dj%>)s39N8|$_AO6e=^|?f0;NSKQX@~NFTgEODKxTL
zC|GqJ>3P!2l|>_ZsC{oE3=OAhsUngJtLY!{XhsoV|I(9auS(7v=j_5CQ)P;rKZNfU
z@V%mGRc<ALj1xm`;SD*jgzmPlIW=fXTt&vbB(2H!3(QuYW-NaX7tU#(dtrgm@j)(}
zi%eZUDUY6Bhb^?)8LZP0vMUvLvp(lfCEQ+X8jz*HUuOX9jJ8ZU{@TT#hHbka&699>
z2(r6`Ll5tj*5qQ`Oz*clinAZ29s*epUKo%QE-#{esHrupT%28GYI>I0*(sKm=ZWKn
zQ2}ycp1z#qN=G!BWu|M7v(z|=pDQwa=z7A!K<oN<27Y!7{@rZBl>+~EQhL|@-V^ve
zj^ihk#tNp&%=yJHF}ZR-!}(hnC|pM&J4}-%%as`xUcAWZ(>aRy0VXE)Fg!6z|5)Ax
zu1L;(trD5uaV?R}waQAv|I+!U#UxgJn_jLFu{${YDkk4~t!ezh`iGj@`h}Ys&Yv2)
z(mf^LAP@axKHvD#GfXdBpj0TbP&>(F{UI{he#5~<_xDuR7()X;OJJ<gBK~_Oamh&8
z5^K;I+>{b7;r?kyV=tu1EYp?mGM>Aa?>>B%_q|^lnAjF(E#{uyh>kB-`}1vr(#nF*
z{8U74AaC4)cHnBgKQ$h<2}#?4(lS1#nVyDor#T$$xilNlKjcy9_o*$%rfj)+Hb$86
zO)tn?J~S^echs5<7Av#NPt7tnH^<WAJk{!wDF>7ZGvqQkLX|_}C7X>oW-Avc*Uu5F
zCShri;fY%b^L?%BZg&sbWc{Z9Zy76H-gjL~y@<sX=?!@0QhK)!{?*^5{K3!rCg3G$
zCQL6rz~z|-8O)qusBj&*?6_(B)Ql^XmoKukbcygxAANlzjEs#M$zX6SZ}d%R!`-Mx
zM3U{2f+Ni&>zL*$hTdUgS=BbG6Z}qmP3;7h>)YeE2}t{JY1Q4-jo5z53Bwa1CtsN1
z>1UrN$VTY6$@%3k;DypDIK=m@*zXx*UWPCbJ3weMCB+k93TB7^>niNn)42BL=|3R?
zDlp=`5RbX~V~iK?Wb$&tnR81F5A{>MWXtBXahHnW9R|FXM3v@C1WcZ5a_u;*lwHzO
z3U-qRkxCR+9cbBAI&OH2D73T;OTpTSRpM&ZrmJuNxX1E*M40sm{0!M#hFrnN4-><^
zFVD?0H8ai3>@@ZI3P~c3Ng(6rDCDFSp3N3&Hl|r<Twtm3B7_mS(kO#tC&=UnJJLtm
z2ESfw|K$NcSE?dVw*$YF;O{XaEpICZozSB&I)F|*D%I00t~^7qm}4+=9sPxC=?h0q
zA<KHQ%-q6BX6H|ndod*j;|vZDGBTVq;^FdwbgZ>~>eD$Irqj|V*Kp3Z-q7YyvX5&z
zk$Men9l;ds&Jfi>VOrirlS*h;S6Z8(G$Pm4;5*-Z6y+_G^M;sO`Wm%lnoMTUi11eL
z&*OVS5Hk2d-irQC?@iBSTx=~XvD`+ngxR1eApjyt$ag_dpjKaCuJ$y;nLByv$ur#h
z_FHTUbSvk!Gf*kb?sGq+Lrk`$;?n7aYwnO94IMTDhaz*u9kCY{fGNUKiOUg(7Vw-5
z;0QxY3iF}RFWkF8-%vs$YEWL8;@s2}i%T;sFE3JWR7hwN`T^OnWP*3(xN%%zrFn+s
z#%by-5@rX;^^Y=Iyp=#oC8gJtrX<@3)?x754fxlO?0TFYQsnya_GSiGv@gI8Q+m68
zw@tBsHTc*5?rxixkS*rO6>}s_DO~XcvrA8qQ^S<P!xS?I8OZG=@*?Wd3e$6^n4UdL
zCMYsAGRF9xF$$#t1_yFRO{iBB8Z~WV;ad$gTNEH&?bglK=?O4Ip*8gmgODQ@?eLy9
z18ozQ4#T3<qbx}AkAQD}^(j_Xrpe{{snjnpS-YPwTXftqgXai<=>AG&jYQB2Na_G-
zJL1k(Om2ry3;3<HAhrYP(dP#tGu4L}%HPD~<;z@{JiyT45Yv~PN5Fx!)2rG6Y4c7z
z9nx)ic2ZoB5kU~P+<~brrL9f0b1Twky2iKCp%&SA0ZGM{Isj5(St=<7S&vAsaCYhx
z@zet4@)EWBJaJMp=gx&CBQ@$cB94|>t~||R{S2OJ;^`Qb&r_T@z);~<BTco>of?N-
zCF;&~x6wM^GWgXlz~4(!-gR@(s~6k9>6k5nf9-kOmn;UJ!f?M~2~oYq^zs8-Ui>C~
zE7vfPzup+l3PC@SiiwkDCMOq|ynK>O*vH`DIAarI42%v^8q6BKccpA4gI0e*<Gy2+
zZf`k%8|3M9TlR$x1EQI0OETynE@=&WF$4yhk@1iho;%Ok(=QO_r0__@xuwscLWzEq
zSJ>kIqW=qc1^hw?j7=dG&D~sV^jy*+0%?B)!~Mleq5{)WJyCT+zd$XTX1@9~{o$=V
z_taV5_O>BgG}F~MG=#CmkKH?SK5OWc0aDOJx-HLLZZdH=OLL{|Qnc9WAf9R5MoL2s
z5p$}A%k>w7ru0~l{D0HZO;V6+nz>8T8r)}g<~%Q){VJtm!CZ@2?R|>GNtJr-GAqrC
ztTfLPvqUBcI5KpEj~u&$KRtCn=YtWlr9CZjW5s*3qB`10bOV2P5UyIi8-Typz8$Dv
zi-ZmKP2)?t8KSR1O~6+s_}idsaSOAyrBFmjUvA8}1*`LOT%7w7UZzH%N(|-hqAz=t
zATvlrl}576<>>_`r%sa34KO%3W^4un!vmCtoMcc*s7n{$rsD*rE6@5;WGV2?a%r>p
z)sNYLF9o6d&SWNP`iFfM7ArjZ@KX@1nCQMsBKqrjvc4s5srBB1U%0>61LVDFYS7ZR
z)B7h;f%31d1juH~7a8$i+<|7X3$i4jMx=lTjTA6FHOa-vIr;{NS(u4kx%5s&y~CB7
zJ^=TFNEVmRH`#Ywh>t7H)#)zm5UN^1g=sSr@c?HOK?zd=T!>?{uBeqYm3gQxN{s?3
zDw;5{M+&HBDF*w<1x>1r3skC?sm1fuk~v};Wc(t<+%SE)gY<<1Tsttt9fwAF;8KqB
zlE;%;B*h@w@!Zy~_bUm0b%ns+vXFJo`>J#XdWpc#mchUN`%cbmOF<=M@;+g$pBpCr
z3g?y{W_tNyF0FitQn;6)+)WfRhsb67h;@@@vdHD>IWA9~B$pYWe_)uA@iB%+2N@pB
znc$Q9N<vh%Nk7)FY>R?ej_$a8`o1IZ#fs-Pday+V?3%NkY75F(svrEyW7L|{WWzkm
zwe!r>#OmK?jwHrE5&b3b$NcqkP9n(Qi?S}8a4-pqaR6%@=+d%7)|Mi+f<#GYVi9}A
zVkpF*Nf;EV)u&jhJx5<~J<mS<B5!=_F#dvM2|80;r`6sW0_`{L;wa)u6Ao>PWu!$`
zQp>)XXJ`C?EwvWrmFctSN!f2n!dZcZ8BJ|bVml;+*VSS)bpo~VIEaz6TAyXI_NVw!
zjaocqPL~ZvDQ5SR336mqNa%;;gB)4kC+9bq7;SQ3WPlegIV0fO_4Ja1pB;n0>#43p
zO~97}{A!2bUwd9_sTY5{Ec`mfaE$Td>+t=(R750foa5}uSMbUa#c&Tp`J2gS_Tz<p
zL^Nr{A{9(CIeC(7*vG)&7^4$o42}-cKa@A=vbAzTvyzw;+7$ezb8f3LXnOxF8rz|w
z>8iIKcY};(cs$_I2VY=v>P3Q#)uk_%zla}NBb@-&SpUW7=NHUN#9guCiv*DN^Gyki
zX@~AI4Gm^G;sDaLYOw>PK|xj}2n|O4Aj?$c+mr^bWqNXw3m2vs860PBQi`&)*MuQ(
z&Ngd->{-ufA}%>ab<v}~B6fg`;n*#r<m@X_09Eo8#AYDp6&Gz~Q5uPA>Sb~BwS%UN
zRN(3;rgjJUPMWLKlS`~b=NK&=C(EeqZRolLnJ7O|A%YAAF%*Uw_T+Mm9}Foy4VlYn
zcvq(jXeZ$BzVFt-zdfCQeL&G>+W#)Q1HWY8?>T|3JdE`tO#p}zt|_gjD$*RDTp+2l
zqbBI19?w#3o?~(8PYFZ}_YX6Wzkyt4FDhFg(si22JX5oC%uJsqlPNJUIKt5A82uxI
z^zA8_Mc=3<rfQD#p6_fN(YhTS;5Us%eA{eOb{^Xwa^c(@&prJ#ex`x1`nbIOCF*L1
zj6Z0u#kl*tEP*fXK5P6l1i%Yz4uIv&&S+)NpVlR?EZfD#8ezqH0F20M2ta6>t|%o<
zFk?c$L?yb+V(nQ<;Wa$<#B;p)-Vw4niL`Y62Gh`LbAf4fUDs>Dl|^qhe9E&C1AB9(
zRkw6R3i7u7mLX6gQB^bxlT!T&8nv_xnDqk4GfSf*-Dz6U*7g#u$nNPp#c)4ikZ}!A
zY=W3bMWMI_{T#V4M<K{E5QZEWD>8QXAi)>JHqogXUA-E9_WxdNdb<X{&abw}`ghbB
zXeZ$BcATzbdH{Q!#lOp#UdL>KtmAuUxt7c~BP#njbW%rY2@j0Og#Bc~n@E!5G@^OR
z&1vS!e`2^uUwDZA>@^g_gQ&1bqM9`0B_^k5nVdR9CM?m{Kg8(x7^8cK8Q5DeAZSWE
z`$|kK;mBrM?Rs;viI3j2tIleU-WD?bVwDHJ@er{$N7gS=shwf2{-|+F$!4k{Im^E?
z#=o2ctVjTIO=1hM1i&sP7ctk$p%*UL;l47uZeSt^QzM`jPk>|*N*<jjEz<JL)V@VA
zbAY9V^St={X>PdjIFn~1Jnfm#+D>;^8op~we>vbrA?MCCIe2SgIv7hPo=5`qX;@iE
zjEHYz6s&>O$R!<%+G-7L?q;CcD!V85H0kKW;Ny!rV<aVc?;D9J<7deQS@J=KVwhzh
z<8$;#4o>tD$UI%WhwX!(U4mcj82oK)uEmPF0&xK5j;gIqVhdS)y9fW;Pn(^0typC>
zQxR)Le3n2FTS~@5dp?P7U^>D{`fM;v;184NV>IJAmZD3{FMol6kiK9){kdx?WR93Z
z9I<N9NEVrzn`C<WB-!Ws3^5oQ8)bBSl+s|4APh(vRyv5A(wERp)7O;7;jJGDxcoxQ
zZ~xh2tTfJ>z5r2N<$U?i@WX-uZ5pp{M1OJjIU`^i|1aMgQQm-D2t_I;J6EN-9rkl7
zAqapIIy?YgfM?nZ2dE@t3}<1`N3}W0eC-JavNv<`xu+Nz9c5sAfVs<2+umSA`m}+I
zv^euki!%vIT%4;jJvmFQl4nuef^$;S&vyJV+`T2%yTheVts~aL%sZt4Zm2EIV8sE`
z2HbFa35yn2sI`>{0SJWv1X(hEhI|lG$YeM;lHuq9Yw$Ft8{1-NbxP-!z^`6D@OM2|
zukW@i0jw&c+e;|l4*1z6_&3i-Xcf5VBA%s&uP~5M*#bc%DYJD~tImqTVp@`0qiLXZ
z!z`{$Fi18WGRDM4yu@;Iin;O^%*g(X7!Yr;#2_3Y3L+YMndyajX6Daw`gsXD63Jkc
z!I2?~{YCPn423+5?1S+GlHv>B{qiE8{mkQ(YiChjjM4?pFZ~gbs*nkXtjkbDf3f%*
zHO9L8+Arb$A`wU~fLIf)4WPA@U67IZ_){Og&51~(6veF=nBEK8lSZCmZ%9xkYcL^`
z>1VF?2&K%mMq+yCJKy5A*S(Sc@c~mPH0?1cw_o&lk#cIa6=oNvSSn9(`QmvF+>l}B
z!V#v<HjU1o0^j1g?E+}SFEx;MgkE+$&Q7dZ;7b%^NZ>mHpcR4g2n_cR$$A-ben8I8
zFwvLg#JEp3=bJcUsgPu>k1Zi%>)`L0#7htU4H)HB?+(0u@NYq+?~x9?Yw(-5HV7y1
zM1&S1P%>Q4IJe`vsn=)qS7|n434+#A2|u!yb5Rqd)Rx~*q7Ttb7O2GYEG>W0r2CeF
z0}N!ZAs_BHhDNEb+e~UKR?e|-@;p4BA(!uGaA<`8ue~>owIjRl1AnKMyS{zp-Xzs*
zv3Io=yJbtJWy^~k46-0}93(*yWa0s4;slO?AV@N3aWFPK#yH~-`4TH|GQr5mG(AY-
zd~ha<-IV2)#8#_Yy^!7PCc8;KF7NT}%Ux>;{{M4Mom2PLz3(oMo5bpVeD~EoRduTB
z{QmngGFrsQl^k+82MbqsuyFljAa@;6)Ii>u#htBhU^}>hVsVZ&Um4a*^OoX2r~NXg
zBO5@D!OJ!QkCK420aqCT$yZM0$#jHc5<#c!BIJ9ZA0H9-8ESIvMN$EzQ80q<jj@g7
zPURf-jr<g<^&5EowQu0)k*Bf$&@B9N4z)@XTbo;)F1xyR2OC=ps5jTx2GFSa@cqNm
zy+;v=G)0}3!0t+87tu_gq9v0U%;Ys1RVpDBitx~Ne2;YfvP_4jlxxRf%YUBrf3p7j
z*guxXiAf)n{uELh^_?o$4^%ow-{8+yku%0*?9ay2-3LEyyT=K(P{V$~-}1!(;1_!b
ze%@562iA*8KP0i&gX0z9g>{Y)48j@*#e@_X6H`<ifj>aZP2;JGPJoD;WDEH2B)gd6
z995LrLWNX?>NkO%2FmUX#`4E8LO=c-2k+FP3hKcMZr@o(belqsInf`E7XbbaqA-B(
z<gvW-4XicaLZLV-;|$b1h06DLlGy)ZBKng$KuJKlCZaTonMNnNE}yoVrK9eo{!jPq
zko3cbK$1ep-yf+&sQ~%>6t;FgguCNowtNafw1!I`eiK)&l;L?E=U$N75^{fSx)%q<
z+$ewEu3kp9A%lmc$Zp<aqN1pr0PP{s0ZjI5ObCS%_hp=cv=7JzuF}TiyLk?J@*NjB
zM-qU^ViEgBeH<F~xJW8RB~mU4C}o_~z$7Cho$8&vmU>xl!>05O0)A<O>4h8&9|^b%
z__N2|EAY49hoscBz-1gfi^XjGagcM#g;qc_tRo022%;K-xWVPKC<2HG0D(ZnO^BHE
z<PZ@{2J{^T&6H7c%ZUB`2;(Xm!6t51-$K0e9ps!bjOPww)c*tu?mVaWIXU99J7|Pk
zObGmlq>3#pZT&ZFg*Q+r?UU63wULg3d`R!7Tz@Y5QQ*I|_|Jhr9KLG83KO16b^zw`
zrU;1qg88g;{}B;LeiH$pwz%}$1oY6o7E1Hjs9r*}6=RZIsScIm+T=>PM6B}p0uxD6
zmFkUk)S9cP#Vc5=zK_RhKhKqfb!}EXHwn44-YugoEvvkp3ShfYb&N$Eu?j#|f6j(f
z!B9EJ!)UI6*>VX}C68OB(-zSkaxqp)4W#TqdPXv9%4to=+6~yEhcTVja91h27w~6Y
zQ~x`3F2KVK{`Tu?W|H&Bm`3Jz0+#lOQP`@BygS0;V~9FS1C5}DD6Aujo18=<Ii)X&
zfhGX-!%efAGDruqAV<NU=Q#8r+Qv%oG43=j!h?&P7(>~cL(Y{IWJr}*3vOX6Sb(6c
zw9-+&mW=k3208{mfu2Ks<qwtqVhKk1|7D*<x*_TQlZ7^<?^^>X$-meBGj5EjtNQ35
zASnSjB=M*+rF4(d)8L?3+K-+3RqSkigrYl-f;-3R2@yVu#cza*XhfS#bf|NQ@0XEp
z?1!J5RjtxZbfhs!n%8ME4fPk=W+C$cbS?suFBNY=<&=m3kb#wqeq`_~xIV_o-=EK+
zM7BOvz?6tys47Pb<Pg>z)TyyZhbA*w>#992rpuU4=S+Te#>npAZ^ue+{J&2LAPw2O
zk=WBdzWrs`UuVrL`?Gm4@?SQnvnx!C%Vx1r>1Zl^LFu7hM0SEQLXrx?Dgq(|QA4Q#
zBnfB&pzQ?Ge=gMqQgj<EzUQ0?6v&83MLpvhf^ZWn!8L@<_mcwqWP$bz`&o|%n$+)C
z8NrBH5y%U01d04o_m`h#*e}^JJTITp{q4u3lP6jHR)sZWMxH4+DhH7P(c}9dh)@MQ
zl|3LM9AoMBqy2@#EI*TKcn8&JiHnTN?!7J?*MsLz%EY4Nd3(qg%IpzfTa3z&;NmB$
zAW9OKWD6-Otyu4*_<y<&YM9Dtz~sT@YslOHs%tQkAH!6690i9Ae&hnwt_As9mShuL
z^fQWF#5+{wSH@(-4_HcXXDK6#Derk8&@Pl|;C%i;z~6q|?ho4DqXkF9`DpRbVwHtF
zRrXp8j8FL3+Nz^k4dMIbF`)Q*4_;J46g62YpdaGwEEQ07-H2=iBn5<UxZHNYL;^9H
znTR+Lm}Ea)SCrs6WfcAWN`)YAgXXk!42k`+vTP#$JDvi55e|xQMG>Cz0<b&N%fm_Z
zf1Q9}9!EM$*OcNh-T)Z{MEXCu0bL?qBpRzKpgMiolq#oV19@$dM5uu}RpM10L%4$?
zUtb6ENE<`Wr@311N%v0F^E8ptiHqOVTacZSDZ%N|r5l)<8ppnUV<?Z2twL}?Sl1<o
zW*(CxldSV|qfb^POba+B_Y|KIQMF%c0OE4<lSU|2!qyDLdjtOV727NLd;7c>fk1nj
z&wnq#-yR60+leJzWYu@XJ(^*JpZM}V96CCQjrAI?U0ub87uT@1QkRA$-{E2##Br(V
zMi|xEPCyZaL=3`+#D5Z%3DnJmgGQ_#(0=+}stYpBg}_eBoTLVdR-^r-x2m8T)@@bK
z1CH|3IsYXHkiVZ6IK=?u*eJ+G!XyJp8UXDkC$i%Zi2$<DxGiDJYDDr_jw2u&2O08c
zp5!Cve0%~YxfUsIK-(8|Vo|ydo{mM(e@PF9B%~_O#(-XNcv)2k@F^5Ha<~neteK$w
z@-gzo9Nu~J68`wr-@)|c2|RJ^=kbYSpTJ|sU5rf#tZx8|w|0=vNlA!ZoAN5gl99A&
z12_E$8V(w3O>9$X;X*dk+8zAuBl`ot7#RFwK=Aib5M&te+l%7fg1_6GxdxxMHdDR8
zAj0Hy9)};B;u6@UQW>BAY#GlyKaZ<d*75#@Roq(GMzawjm#6BvE}Ynf7g5P5>NZnj
z!(kW&k`NHsSrs6OKpGFV+MqckiPK!1ln4R?O!eB*i9zh1lX?1V1JE7-W%VbWn`{6w
zDv-FpjQ?j6m&nqlS`8Bb^6Bf^-ihX|AtEc2k`Yi72`O4jV!;JKle_`hfk8?=%7{lc
zg4mVezm|ocL!DWTiQxI<Rgss}CAevR6!J^lo#wc{5o2~PrUpmc{F9|K2Pl;t+_<`q
zS6}-&qNs+I)yp`)@h@@p`cpV|`SUoi{}47duVZU#2L(zS<l14@I#88}*|{03j>nvH
z;GnrFPzi|G+3WrO<?{~*e!Fl2hD`>-Jx=M(-ru{i&pubivD($7N`&iFSmFw$VxIlv
z<ntywz{Wbog?Ko6Y!1gyOk;Uz3-4WA#nsDO+=IaLsF<X~z2hnD)N{%DO|7UJY%8D$
zI%yvuH6eh*(tuPCB;cFsdsSnX^;A<LLlP$fKZ&Nw2*|)UR(~DNOx#t*{p;9&eQ)w^
zQ;#O`b(=-P*?<)Lpz0dRCg{3km`cK7Y!HzMRMAo@^2r4f<TGVrMiGw5VBSwbNisu`
zM0DyspbB(qB0%nUkNWK9@cza3@bSX;@TsT2#HHTz<$!AuQr^JQjR1f8>K|~WqGEnt
zP2a<v)r;8L_z0IT@5fkS0<#l`RLq7fLaJS!+{}o~wyL3MM6JNM-IvGd#bG2<q0JL(
zSw~&K-@d<P-$3B+7b~sT6MJO?c#y!KHNW1#uebIN!0pE{PE<3FYK1KS0#j2HIQ5eg
z*#2A<AAPim4=%1^d9lKwuN2HfZl@@g8G2q+mK;BBB!)wh49Gq}dcRQtR6}dl`z?2y
zCIE^+v6WvX0Lijn68zEySWu#_PJz}$j<&?yZaVU)XTn*9kq!Wo89f9;$^Cs9W~;$X
z;9<3ixW0!tqOfVo29!oZ9>YQSS{kqjF3+Eyi!_o_|2+~`DC(A;ou8vZD>=OT<_Gxp
z8^4FG$^w>G-o+=6{~V4Sd;y1#mJw_Lum0&DVR`j^l=4*DAxOL*UT%_0UlqMkjE~GS
zu_Z5nmO?lmK@l37X-J7+y7e~%>J0~58zCA2MNhV_$=<-<)%G<o=N}OKnaA%%HsC$Z
z=Wji>yNG3v=yY8x_(i9y+Hw-Rn3OJRaY;_;rJ92EkUP<m!R?u+=W+6>DcoGx#KpH)
zuyAb$&0559@2)Ewagd4t6yQf8*B2lIB6$;}@lZw<vT=~PuCxotWIdgxr`ncLG7IU@
z?DCU3zjOyuEP(3&r==O?{xc$=%Fj=10Ll|!sR_F0pxjHx+u+x(!dP)o0)B{yf~bfP
zFobjg5Y;x7&q)dbNhLI%Y$(zYDARHICi%Qn*(YxLc=L_-@U1t$hA3!Yw6q`f#x~x#
z@c-ia&GR_;(dV&My@7?rH&Dz^OLYPz8FH-Ll6kL)vC(}@S#$*?k}#O)S*62u2WRd9
z7?MmT&}=$bT@O%iO38*)gw*O92>j_k_eSjRo%8Q;AW-|(EBM8*;O{W9x0jK1O&QFh
zt54VwX!6@6c^@7XoTJ6kB(O^9mkL}`8Lh1?S~?E)?VrZs!;@HFui(QER`KDb4Q#A7
zxe*6R1ssbn6fqzb!7C$<nyd;0)Sr*k05%>fdjad`t?9!mVv&D*LjWj@nT?Vv_CGQB
zSv|>8k5pFykVG#j45F?fee04CkO5GO!9<XZ2SB+jNnz&>d)$IU(g}_?kkyH#MB=jK
z(`atWW3a=~h$G{`=7xZm3lY_Gc>8q%|G(h60Xe_SbE297IU%sIeG8jA|DGkCLVkjY
z3g<ki-q7^!@?Ht!Won2@?n^_uRQo~MZAf(irf_YSnuw4pAn3<IJ)k)U+ys>J22$&7
zVDRr%N^dXVZ$Gw^ygWcMkUqH>4E))%94@7|SMX<K1j@pba&gOg^pZu`oq)K%y(_S~
zvc=Z_i7Cn#pr#tCnI^@YxU$Mny&6#NAWFp&KKCOdc;@*!u3y{4hwrc9=0b&wgAgI0
z@x(cq5D-U?^Zf8-S6#9NP;5b%cnsvDS57x&45Z$D#C2H>pzJ^fnv>G~O_3252Fy3D
zjh*tWcH?S^dI@@dg1VI$&5n|ZRBJWqo|9s~H2x`_fW><XP$E@Cx+`Uga9Ms>HYurb
zh9!jxFI>HY?R8*s+QafS2jBbdTX^e(uQRYIFGEgUb$q6bOm|!n73o!Q>3sY=D3q5f
z`%o$GF=<;+_bnsWlY;DQ&CqoOxLY%|T4O`7!vvraP|SnRQUS$44hDV<1%8uDFbMd~
zv4+iwy-Ehsi^G~|r%Bv}e17aD_*urcQ$1<Z-8^-O5QUQpY;08Ut#4oAqvmGEaOm(f
z=I2M*y+pO=sIm~9nZ;T1@Kg8L&4590{P-+RJTZ;c)oomQZyi@IZDDI8kTC^5!zpQo
z!TxTFUICTy)-#Aw#=#_ip96jfWU}7BCJb7Pr)8~!dXlH22m~ARlq#bMA0I&?v#RVT
zRRJO-B!$R=A<`qjcgp%cw*^;ad1MU&RXvD}f(mLp1=7K(_n`wP%rTMkbECL*>k|It
z|NkbYOUH3*=>uH+_&+mIbUo^5ME9z^9z1uC;}W#%)}vepE_t4lL0bGn#6guFvwVxD
zZ-7|?tQK&r2f2X-0xEwVxu`dN)EeN<!1NYmrKGfnWY_g(ui-(!k0HR{;c9ym3M{3?
zj+eOG`TSxp!LK9$Zn@2c|0Vc!Lkk|y_3KD1B;#F-Qo+O0(kAXKZD4e~fJ29-v48(0
zippaUl1!^aU|l7+vLo~3N6I7k@h^<w)1Ry1%H<7Qy0DJLn+^6JaF-oU1kzHDPTG;d
zxN<JWnl6ioXy3lh4X`+W+jFvhlJ?u?JKdEBEnNr`ZqF5tg;g0>#v*91gqEO^I){84
zl54A@5<3Q|Epbdhbr3}kzW4TjgzHd!K#I1Ul)Vc$f>04SO|(>B10n*RSK#`D1bCK$
zw1JcbIHhV)bf11!s(1+Bx3UM&8Ce40(r^^SEkHFu>&+s9<_?;a<H6_ZbG_{a`1@j%
zEq`ZrA;w<C0c5!n#r@0Y9|HXHYk5Z@p;tPgdA}?>Eya6s0ZvVpF)~)f&So72HtY%P
zY}fJbJJ)gL$|C0XjpOja8H|sY*lrL6WG9fKwl*L(>LKdY5T5Vj$tUOW<daiaT&mz(
z-&n!wGKs`83Q-5`m`yv%tvgV_myJF&SC?Sax0`;liYO$(|J>G&1A$U~_;dwdP6E=k
zaJYqM;y#m%)kM>2gP;AblkrL9h#{`7OVx!)wIL}6+}MQ5n>(JAAXtiFI7>T+Y;;20
zUUogA#2#6rU-tI3IddZUSb0Pm^wQ2KD;LwNCedI1E!BXK2RmqlIn+b4zHns{Q>5^|
zf*(DDztgdMLICW-41<9m4-EL_5L(R*W`~A<ndYBt@TQ;?$H$NT*l}FGvWS}t>)5GK
zRU8L}f{(Bn;@Zb|aO=h@re?-*=)g2)W=C1aB|AYFnn*rUiRpYBYfYZX!Gq)Y%YVIu
z-~YYqsBBZiOq!JzU6tr*CF;m&X(>P!`H=IqQhgP(m9|3@_+t}p$z+wZlT_8SLWKDc
zDgN_E4gRE>vHjeop)K{kto4{gSn>%d0+0YqhEHj9B#~VZs9Dz0u@2-RkRA@=_6&L^
zL~1UnKpX9!P|}MI^H)-UR_K_%bJuZ!P_<+;XP`1>bgYMF<e}1}BUFKcHn!IT__5dE
z@5a^B$F|A|o!Iu?MgsN>elaBY+h>$HCevQfeypsJBSTMFq)u`~^a7EIE(BtVTYusC
zqd0NAimTUGxKQWTW*r{2lFn1(O@XDw4J_T-z}Q3y`wvcF|Gr5S^Le%raB__DDo|N$
z5)AGvHZeWx<M~fd;2ZyK2?dq{MEbt8VL^%Zx=$YK!ZMFpu{!%nv_22BN4hbk0W1N$
z_IL6?xnOK~OTwe#bNPz|WhP!BN!8WV$DBvbQ^J-~m#NW+jOCY6KqSfN`~xx|%9;jJ
z#js16$@|j@Tj@2BCJNGnp}U7^*QRW_uAiN3B}Q=o6yg!8Ia5$jl~RFKE=W)7ZO`-h
zF$DOtu9^L9Uj!gk59GdqUknWXOesROttMZ+Lp||A+D{>%nvF`moPty+xrI6cQP9oF
z6Nm7LV{=%zxrQ4HYuMbZ^3a?wAK~^^6&K&x#z&Wzu<yVG9y>IRQn|?LM8c@4Je3br
zDiKCUb8y)psCo}eR;Tc2699E5iJotM+eAPEK1Hzg5c-b2b|(Hm0lXzaNSQg!&$vmd
zesIZS)T)4nnz5y7j%_YZ9G}E^%AKf6o4hJtuCo|rxU;!WeK|=W+PR|P{u=m-7$}!t
zA^|88!T(vrl7oP_|AO3z5Yz+JC5gARn$ZjR+qZtf-wi9ffxjDr9y%1*%G$VZvHcyW
zT?g^0oBAN@;;C%4qy<g7&9po<Rl=1zIsv^_qd*>k!v|(@<j@S(H@0!@`ZAUlx6!DD
ziF!a)Z5OVt;`Z$|yzty7Ffma=sC@0xMj)>f1XK##aLF_gQ};{Umgj34Xs|%8+K9_V
zuVBx=Oe4_LGgs;asUrGD=?Nq;{K;cV&MN1t|LL&6?aqGYRV1B1lXpb_QGErn+G`Jj
z%viABqh;qvxwBf|sJUk;t;q9B1E5^3%*nYtxDE(1<btIEiUS}CK+rxHVdSD3P%&6r
z)e(D;(wng+MGs>-oktVNU9M%`<DLfs4GR7a6YV*|FJnwk;BPqtzt<RH)IboB?_I43
z-C!aKijiu<Tkk9&Y&LQD&=e-8M%hKy3}ocn#MmgNpC856b_LgOtmD@8HB@#Q@O_U7
zLABPvjhoAuo<7P2D(n@_3z4ozMn@IEld`cW-8)gJ6%7_#xI>-Fiu9B22OAK2l=UnU
zPlp!TrFd+tXC?s3Pz60@JJZkR!1}T3D_X66l5twika_xv%8&tk{S-8)6AGkl8!cR4
zzfyBfdH)*Zi3DYOd7C-MRF^?{2H>L>P*DM+|KDryV^6`ar5mvq1R&l6&X1wOdj|)<
z1uFHC{OKgx2Vux5rvyZYD+24V8yNw(vbKpUmlwHi+`^3&OihjA$l+P++ds}?f1??4
z<BvkFh?9?x;P_*+SiG~2TQ@eawpK%}(S(=NVXtO>lJlBQMdp6AtgaS&Iv7wMot#VS
z<A&!Y&qM__v3*MskL2{$BQc>5+Qwiy>?DtlzfZb<T2hh~w35P>v`-j7+Sc?Wu-MdP
zRM#`$Hu8r&GHzMSEjN-ZO<hDZ-3^xoo}`nA0ktmr5m7=AOGZFlwsW#pO~2sBP~aDP
z1pe$Xdsq{&fACu%902^Cj&0rFvwMa^T&X~2WW|kZ34q3sby!C45lD%n)7R^(JN)zU
z)glfan!>>Y6bq2!G-6T@NT)q~a2|&bO=D$w8><^TIC5y3zt{RLLyT7_`NQq|(bUPB
zwFaDiR*5cdqP$I{pXH6W!iZBcfCjl;53uEN>7pohcXL^<hfi#QUIr5-YdX2OCSc}S
z>ZrqZFH-72Wk<Ai{Ioc3|7G8Sd8Vd|u#QF0Ke`aIHYSoJCtZQy+ywf~k{wGS>P7So
ze(?Z-zg_6rlbV3LgTEEh-N4_CfY|5C0)HEC>^z_3Icj4YC9qH=UyW<kku)F|g-Xe#
zIDlq=vGF2~pP0erOUqnmu8{Yc18;BF@Xp)U@$uz5*ne=G3BlO-2q)RpYs5u>$;mOy
zOi#$rVJ?8zx@yTopkSd5etN+sATwM&4ITwD9lmVeri$(};|#lJFF=yHYtCbXH&bR)
zqDWc=u!Qb3hSfaG^EL}HAtPpv>K-^8Ix$LWKCYdOir`t?UXuxFwKw5Ry5O;WPu!J=
zG65}*3daMmCjv4afFyt>y*ufa)bSi`>vtgV_lp(#LOtNAZAP7l&Rt3ezW3m79og&4
zQ064+K_@~4Q5CL7HTq;(ZezTXhc@fL(@!44fqfIWc6|klx3`qBPcSj4*PHm@{oDBX
zqb1Dmo5YbLGnkwzvqihnpv00e)$}55UnU7ao8VeH;i!J}$)YzHws4#7d@OADp)wGf
z$0Y-J_^Tu{P)b6!zOJvIBu8mtqQRepD9Abi$^E3F(2O-+&N(fTC(yS%7Kv6tm4=da
zYit<_ht~_52&d(lXft(Lb`JRnNzKy%L1{aR!#M%6I#jh;vr>Vz?r=ZB-+tEiu^o=h
z8a8+!kTuyo0Y8QWf5wCE**7b**~sNrYi^>LKdcy{w214_T)F;Z)N3)uMn~}cb0gS!
zyozhr*RXJH1yu?P@;wxbzU<n2V-2@&ZD4Y$gu{ntFgHJrLe6J3gU)H&^Af^rDdcj^
zYHPYB;_H8Han4c;G}jiL9)YGWs!X6viM2|B>A)Gb1|~X*(Wk9oL{sEPPF~dwF~WI*
zbUT(_OEFpUr~*HKZR+(U20#n^{GIk-nD784ZOG7NLr5*jNslGsqM`$puE9}&4ykz5
z*N_N6u%j{@(`#&S@MB2u@1jPxovVfOcT)8R2?g%{O~2spK(SIII$gCt@OM1cjj>f*
z#^|W07LXJTNtbUn!&IXR662|XCH0km`s5)z_SiHQ7FKX`VFTM+HD(&J{v5EjvW=DH
z9S$Mhe_$Mk4o;z5C@>M=<ROjaRM~6$MQQP~HN-{h-6{r1*)62|%f3CMr)NE7ZFkTq
zvw9+ye3T$vSL@YszP6JjU{18FRt{~zY3@QMK$)58F2WXQQ*KRb=2{z4d*nQ{aZx=T
z74Vb3Uq#qt#aAop+YEI0IG?KmRU6wJhHO8Lz1R7>fgeMFKYeWa^N`6vhFSG<L!J2i
z-3jmQ1pZdTlLQwvsw`luwy4ZoQvWBP{PtD@^;&>@(POT_5pUE}-jlj!r4n#^=_fvM
z2#+6|XRH6!tIJqfuJS{oxB*WHRJLk(|J@y2{pb$n=g0Bb;W><r7SK!(7^z-_Y1JU*
zV6$$~@`iC18)4TJu1Z*^dFe?(Q6pLCc!s1Lcn0yYU3P{C+oDIOx7UU~%NS`(04=Sz
zQ^3}DqLPo2>zhz$>vob;B<s_X3Rp`}CBXPdMKGjY!rX1h=k~ce@OEPzZXwrx@*csT
z{%UVhdV2?dw^ZWpn{DpwybS~Xz0T(!5d8M%T%nAO+5#8hkY&86^;N{8{iXL8F)~Ww
zsVW^-8IQQ{1WSl98jU9Bk{{SVix*!!ffql29QzMVaKVXcl`_hJ0;vaKjH@3n<4<3G
zk5hxm;w%@i{%u<)G-wjOs(#zid+8_1i(6wu>&+azC))ISeHxt)Amj4Qm6Gt@)U^}`
zwP}T_9<0lQC$q7DDII`HYO&8{gIJ{`Tb=*RGf;cX`E}(Y>l#U3Lkp3&9FUUW#j-Mx
zK8Alwdq5Ps+_0n>gxGGZaSQZTcTBI~*LISD!H*%ppE*wM^Y)}3K+6Jb|En|j@c@Be
zpR!OK!TQn-?9^@}@6iI-Vb@U37kKB*Wj^fb=jTx>=c#EdXZo=o&;Dc5f2F8gr=s#P
zFgZSknHMIoy|aUluaSDN#&ra#NhP@otJMZ>F0El^c8nJrm;SQKa+yxl23+=%(2{Io
z0at_~WgS<K%<x;ICMY(T5HyKvTg=q~Q1){*?z=?rSBAmFW|6+UC5juVBbiTf4?0y>
zy`6-<nRl3Y7h3kokGdt8MNn)alsrSU&4CGnc7?KMB#%O|gv#~~s=+3vatGA&h<jUa
zZR>KcQ+j&@e+GlrPbc0J37~E3VX~PP|NG1N^+qB+3IP^3-ay_d^FFQ-5L4IS7~g;G
zHvaJCck#w+*HN$6P%L@yNzYG;cxacB)X4*i1*kTW&lU0X$s_pU7oNb=&m2H`G>3XK
zLcK}JKr$6p=k=3{kv8+EXQ_)7nOm@xg%+-vd~c0W#y450)9BWkck64kKGvjdSQ2h*
z=l$!y_3BFZ7SNrSjV`Rpjw#@2#OoXa^U0dI`XjYZIV@!KqFma#_=m3bC&w#drIM@k
zXMMaL%aR9m7IKRympyD$@1P!5kjsxLVMFu}{=TH-mcKg~xd#P*x3dfp3M_sgz^^e^
zo|wU{)z>gH_9Az-X#|w5#<h5m&k58j0lxd~o4D}K9UM76j*};6F*`rT3#ieMEwF6v
zM*onpkBo?v;Bx%212}$c2CM5^SYD~&$iW%;osurOKEH}ZPB@m$64i6iz3S4&F^el|
zuBS-8oR^c>I}*t!DR`=gn2JF#m2(V|W$Q3`Zh9h8>agaQ5CyA!cOoWe4xhn$TDURK
zK?MNG&2;9~5{NG6m00n(#-g;|uw-NrQtgs7$-=tQu_0Pa97rW-<S_l%D8{B@+<g5*
zh#ZwBr(&q``E^}yt?RN2fO`dhE4;Hl_saQG@AIxj0^TF=cbiN4*Y3yKdRn18j^&lh
zxV`ahOq4&(DZrY?QLPZl7tQ+)f<}moZ!O`&_wL~E(Mde<<Qxth9Eaz+Xw;RP&$=UJ
zIzX*K<-r_GO-y5EQW6a*ekx#7CZak@m*2Dn0<8;c&Z;Ba%uel>vxMQqAfPQ`N(oT7
z;@AVF7t1QW3TUmhL)Bzb0z&e^BsB3~y2P6G*tKS^i*nfB3DZQxCStnyNULGenuqnC
zZMy~&G3`R7y&T@F@(MJegH_>(9!BJ1d~6!ee{mEay$amgei!A@nUpcH<9f5#Qu55(
z9#RLawEW$ZYrGfmXOHYf4%meN$jGSSz>lH8pG`=51%H+lp%02MI=vqYOMil#GY7{X
zMeNGH)x5YO**%8z{(M0i?XG;dhL0|<V{Ts=C!U<a(Z{A_IB+9kH9#BE2&gV~3!!pT
z4QVHkIX`ATG7!kPwGtrkW<qGwZZ{(WOJZh=s+|^-e6*aCz?iW(ec~=wf_vf;<r!MV
zLiLu``wbm1erNp*Z2Lj$^VhW(^!4QR)Bo~Fd%ntVFS{3!^kmIR{Yv5kv==~sPOc%J
zSI(KlCr-{|<wl5$?_R}LcnPy(&u6Tme!!0*!7qjYe=mmiJ&^zg0l(N|@M8$@r@zXN
z6tS~)2RAnUGmg#t6;w$LprXB;BOo~^b4)TLb6$X~!n3rvgPS)u@#e%WJbq#tk3UXP
zfF&;NUnli|ON*%tIL#efEb|;9tc77q>`r6?B>_mWR{7)=>(sii>iC^x_GK@N7V~`4
zjME0U0j(KoVgfYB)|_9@NnRw)vGqOZV+`0WQQwOBPyR{7bIW+C?m}{VRqro(fyRw$
z3r&3OM1@h$P~V^9!gnSxS(?Mr!Y01|?QPuJd<F1B6h@{~;n)3xzZ;{xyWr2hR&QHR
zp}?JQsP$$#i$j@5_Z{KaiO_T=6sd77FPE0q^uA+Qy!tL~uKy7Z&i(@XgF_K=bs8OS
zBAKKL(%}}=4qV?uWxIhlUcZTp7ngD9@HkF9K7#`XM&WvHA{A)d(w3;JT%WFG%Gw)X
z7o|uDhgGkDPiDEmY(kiziaw+pgzzve_FKj|GYu2HXTon~^&fjmNeXeoz1t2q7gN$u
z!rN0ePeYvSARf)O^}R_cK%IlTeYK+AmXJ(Bll8>e!$Wo%A0;jUc6042Dm$BSQOE7A
z?_lQevxx-JW@~9(N22q3+jUKfZg@(6ZU=t$_>Q>K#7qY_4qp^>m<Yd&F@uEnwsHOL
z*G)+WB5NkH2HxC}lely39f;)+`=)*l)vy8FAtT<2MpWT`e_Da&g~4L9>@h{jB@{fA
z^Qrkoh%1-ZaP^}N%*+;X{P77qc6bsaBNPQl`af0UlnpM~2TiT263Mky=e4u(%pKUY
z!Q4uV!kV=GQjk*>bB(BP&Kt84QieV!@c@bYOV7-<{p%P78Bt_n2qZXLpM2s(Y!O2A
z=SZ~;Hx$;oGSfa?WYpZaCVJ+a7WnN4<VcmuloIo~@>4a~z-IFn8jT8y&IoRAoP%5N
zQ6AeTufE%w>;ir~NZ@b#yoW}>{=qLEQ1DyVbsWqcc@lSST|(vd8V*nWIe7jwwwsGQ
zRo^YC6y8YD0J-QRjxmoo>Bsk_SbS$`2aC71@%@n{9DZy9$B$28cBaHeLna2~32><_
zn9LkBBv$@b)dH*_8B_d|EbH>K=HikF$Rn-$QGRYsLg*8xIaolFAU0*NEYEoY_Egf3
z)lbpJwCZwTXWOfyqZWr(wR&v#U?S4%`6nWRu8?ezKF$F$<;rB4a{X>C4~o7&<uPDs
zhg*PcqZu?1MRl%DoEK%RY@f$^?L8d*<X2i0m%+d<9w_kJu}s7E1<0Z#ea7|=2Yw6z
z{uI0HK4&M!?7<V*SiXfzi(kY3@t?-j$fr?>w^5I_*;VKuCwt^2;yEoGk^m$)WD74@
zLx5BOYAOEVrA^Gt6mazDI1U^f!}z$5Teo*`<N6Lf3N6s?tyEBdI&$7p-W4EhuCH}p
z4K`gCOmkBMTAHU!e^&c6*R))DG8xGt2#E-8*mxr8r-BqMbDcVw2~=u1-ZJ1N@eXPT
zs~on1pg(9Mrjia?vjFvcWyBwaT2m@^z|t8tXoYHB?jwh_oj0+%^%@QxI|bLzw=9&0
z9Q;<iM=w%99}<9`l%e$PW7_}jrh}W2yAzIqIDgw*x*aQ5+W5=?l**I1dHavBUAu@Q
z(?5rzcL3Yr8iIJ6n{(=>m$9Q``>6sCRh?BWsk!i_!$n0%#kg~)g2lxu3dL27jQH5u
zA@?Dv5T+MFqK{j3H{_qPOAjx4J>7_|r%QFH=sYWaU;D8ozK!0%#75;IXm)BtGwB+X
zGC0^Z0u6D}uhN($j8Tv|dy9&Y%poBjn#^coWJG&gEwW95DRo2{`W(B`68Bo9F3bUc
zRxLqztQ+|dQ3LDSZ(_542?vk;1d5}xR=mXBNa^h~rW<y41AjM0*^L<wL;%R*l0{uG
z1o+V(_%l*^J6*Tk)o0J8`>|#pb*wGnz_HI_bLAE;-2OdG6`sfJ=ob)rQ>cWi2%;L7
zx+aN$+F|j%F(+4DWmGmDa~)15;+B>OgAi*gAsY#)^mQ`Mo@<KHYoID2TXSO)o0%?H
zAXS{(bhkEKo;r_FIqsCT!Ad_?s7pd*jSbL*&8maaKETv2>pX3}2PN!P{A3FF`Xol(
z(c#8vB48UcSshT40DTVQfa^R`#S_{1Rfb!0MdA?fA_w)xO>9&z0$vk`Pkb4<{74Vr
z&srZ@tEm%!dk4SRBk&vkuitO?yx^_`fIMIAAj_Uy*U1i|^Jks9Z}1N`XUR<?jLqyr
zd3+XYOCMlu>21u9{3yoDpF_iOP>a^!#0_rLNewaCbx7^5tl$%UG8I`XTU{{_rJIi<
z_ADTosaU++;<T+#&u~lmS=Ba`c1t}*6$23}-k%qTwl8S5+G3<L!8$3kerg{2FH3q)
z=4=d*@;TbE`fSIrOpK-;p`~)zHUP_5s^bFq`LT#ETds49b#)Hr{80cm_TWVVjrtNc
znpe??mN7Q-IHqQwOoE5RuHY9#fWL>hnT(Y=5coUJj3YgD*VKLpz*GF#o6Tq;mkX*w
zI0cix(I@yjOuAR_cN6J%2Y)XC5-oGK?vUGB`5tBto<Oa#gQey3Sgl;Z{OBo6jC>L`
zR8b2z;Y2=SA_Uahiq!$){JLPL${A2G=Cn|`IuCIuMHCYEQ>xO10(jD+Ps7cs#V2=~
zyI}C^FVe;|-4R`HTK!LmLB<o(W<;a#8>rivgee<=(I@1L6W?b_NKkFNT4;}QE$Z9@
zO(+uSgu5qe(5uQsv23wUt`#RF9X}5dMrbq_vC{Ymjd%?s<A*Un_p|VlY(E)6D7TEY
zIuQ6VB>2VP;BU{kjfHST7&WU1q6OOV)Kl+fN&?-G8bAK{uZ#iF$HH+Z<Cyx&v^ah<
zZ>W88_Y3^(*V-NYne$P4HQmbg<|;N;uAwC6F+cW26pP2P6K|mrl6}C3>lV44wJ!H9
z34m$n$u;qHx8I~EpdPEU^>n){H8U&v&-4h?jW}iV4%t0epHu!&`Z3LW{D6b<q=Ty$
z>!?+>P_J*GwzH0~S><-$#(*b5)gr`OPeOYFG@#Sv%u<G@6uRxW0u6Ab*NZd>Vfn%0
z`o!HytdBw}<4#ePs&g`=j_<?{{3yqjotuqyRGYU@i*5ip7o!u8VQl;{ZZ($b%g|cx
z3oWq}_amR5e+>ryjB&9Lo`~act+sai==l%-#%4xa?A=v>Mk8?jyc_7{_rnQ(#if-@
zTOOT4d2|+A>$h=b^$#$<bqurPKZ;`h0CvJ{G=fdp=E^N_=Nl#jyvfC^E$2i|Su5xN
zqa;gEa(>&;Wf38#oj)hk-;UPN^JfrJe?pZH&?3@n-QA=b%Q40-VUc_eS5D{e+X+$0
zdGuV{)C0?gk!T*ei>I|esZ~JSo*J$;RmM*&IX{6vis8jM6h#4uc2KQf#b)DUgw8ff
zqjQ)Y{|rhavlc;7Da0xF;x22cU-08W0ly)ofCzHM$*!S5od`e-yyRTFc4qzY6TfoF
z5&moxH|Q<6KYZX%kCl%$!sz5YM#ko`v3d=cm;WD3=AXsf*pEXHA&Axx1e<WEe?4`a
zC(iE@0924Vi^dTm_Soq~sSEk1JM&1OnHU^<is?~ip(pya8s~bXcIfNK6WNw^!>o1K
zu7)oGQ5xp-`L%^IAvXzu&}>`U8aPEtM-f`;LaTR*=bW4~Qm#7!z65=&h=2@z5Gce&
z=K7815?1P$QIBuHFHK>5`V$x%Jq$q>&z2-36X0`qQ+h>*V+R921_VFHNkp!jbEBYo
z>6>r=x%HP2J7;v!hu$TC3v@Oj`-{8Z&<`f~+czzeE2ESvFfn@sW0Qxlv3ecvE&U73
zmOqP`vCqTxrm-0>quyNS7y=hX+5D1%hj_(PI3S%%Me6C~8=ab`Yx7z2OW{9NR6|F@
zNiJ+x1fq={4hcq0n=yOgrHgwSNkInFw5kM&Lq5q_kQRCUb?dpbWMRJ7UJGs;P9Tq(
ziHbpz66^I;pCR&)7h^;}(P*w<tMLJLf(1CfhmpyHn3?=}<Z`3dUC5i`XJD0F9}N8H
z8T@Vg+O~ed-{qV=gu}BdSj2?g_yS(;SofnN0XTK)DRJ%`U+Zll#9wL+{l0hL#}MFe
zKe`|AXFlMRyG4S8+<H@U$1pZ|5bG-+V&(StF;{*8Gvhyoz?;H$u!^9u#!W^&w*<$_
zvkor-q`lenL%OZ9H?S{Ve<w}*_I!*NUB~*Ve^a&ug;P(f9YoLR8k!)ePaMCHl|gQ0
z-C6Mgx{iTOGi-3TkJn;`?u(@35eVqgUB{w5TPi8q(nUdxz=ww@Ttl^a30sXTfFGbV
zHjn)iKZasq%6c!Vj-ZN^>?N)wy$(di*wz)$9sJ!v+Y9(H1o&Ie5XZE>n!ww%XX(_e
zz_~sNz`1i5v=sFY*Md(4O7{-_><RV*elZ02#U6vd_3Xx&L<`&VbC}upNd%21R+cZ|
z&W+bGJMyEL9Q_PJcZ^koTDS@?EW!6ma9wIKu6kE-1xur0Nd~Kk02}kH^c?~Wzh@mF
zqyldw7SwAnrE=KoAaP~@qY9EFqJQG=w`>VIwAT7wM%f#eoW5p429&gr%vYN;I9ie>
zKtQL-5FsMBshpV0QF^2B1c817^~M#fH9kf&UPoc{AZGS`3gz;A%9UXnct|OVrJ$j}
zk0HRH@qJ(5@4;iWYY<*yG$sQeNkQ+>pL26}GCcshr~qgApjyrQR<RgVgb<}zMumue
zz@IIq3<G`)0e%b#{?5e6*4w>Y4)X_|L9<rF%JQ37zIh&VV=tmS@&bfY!cMq`O1J~x
zEyMFjHOO&b5P^%hpX_#{^4F=HmtxXMmk}M+=g1P`ntR(8{3PIpYyi{@g|R8c|D-LM
z4O}Jar@4H~-&VaY<G0stI;FEK$sk3nSUpgYd3+dg{*dJy67LIc86vEp(zuP~+J~rx
zi^vs6F*bh;Bcor0>-mYrLNX&OL8}9Ce)v;*#bDr<E<iVkY8AJRZ_$pkXR}>^yLkav
zLoE~ns*<??cu&L#bfx9CiM39;s~#?P8`DopZ}($UM`seLE<{GMl$PstpR;|1T(O9K
zho48iR$)SL=k^<z8Tk=Rl%GT3jiW-GE~vnx*4bW}<I=TVol9Y{JCKaHDwsxP?-5I<
zY&!N$Xb=lkJS$yDP_{WQ0kx_sL#DZQvgtekLj)w}R)zE|!oao*<&RITDE+<Vv)ArB
zNpS+@Zsc|x@Wlx7?kGf9N6=iwTI2iJYJ3c@P{7#iQOu9Mz=TmhM@eI(3y(suv))fH
zYiai&AMAdfHul$fd^_;7$9G-BJ*pVVU$KZC#}`r9Sjg=(mX(1h(*U@u8}Rh$mz}d`
zf3bez#IO9B<9JU*0oT8>Y9{vzBx}rF%<Ah5{`O;cpL0907--H^c%)Fq+@a^us8zAD
z@;a6lzlquMix?mI6k;X>o2WIG;RZwqM%ZsnE<uyAuT%{kh(q}Ut}5@%I<ry*v|CPF
z{3z(ii%}Y<h&ZZ2phb3N?dQ-z6MHQC6>2W7^?XYb;9p9FPgD|ZRFq>m5l4aF`0HbM
zC?M}lz>BHb${IH7@3UU-<~$D6IW+bq<Z>g{bJOaB67RE~`5uEG4?Fl(Q8dTNIbl@)
zv;XwrFVs&XcF&srsQnRuvuDrB(?;<h#%}z#WJ|Vw!7uI`_&Xij^PKH>(eIp7yX7Cb
zLJ{)^pF^Ws!TQSESYAAjnet~aI`TY(H;ZZ{34s?D;gdw*=BZMpF=h+mqOy;n%pz3k
z05`v+G<boCl7uMhPvr~be4sQAtlySZNMxj7qWLR{z_Qe9uB`}w1hndKY)J>UionK2
z>O9H`3L!$W;3I}FO2~^T_I#3FU#VTfcKtF!r;75(0qooVB8sIc>tX5Ihw3?YG0tVL
zB@6|A@sNW*`M|aj_Ye86(`Nw*<3W;v&a&uGZN%q`Zm=nYGsbp+41-|nboLJX>3eJa
zH|yBch@rqQh5&zB3NRyL<clTD9eNgx`VQ7t-of(X_b^d>0aGK-LF8spAwp1JhAZ;$
z{1QB$h=He+GTGK#z)d6sYH-0Iqqu(}0+Mkej9iS&2%LCY;Qeohh{GlvDo;+|D-qvV
z^fhOfarIi?mg&QG0T7jLt2w<6&QXMeil`Kw3FN5yPPBtc?R{+3uOJlL$d{)vGy5#c
zBl}Z9X{~zwZi~J%_{9%7_~Tdz*A3#@X0zEmPkYXuJ>60K?<F0W1A?w!KXdcMiNE(}
zj#K<f9M>}gg8Bo0r?K6}^$Y&pLE9PpoyPP6{@q>}!;c>=Wu(m=_!OFrD%O_Y$LgK$
zV50CW#><~VDYqXr?4Z_IgA;6X2b-Ld3aBg=8PTYlk!-A~s|`~{T$yU?QLs!P@Z^gE
z2j(0sUaumgaOJpQnF}R%*Dg7oJ}a&CS``Q_HyaTI<+o?zAb%4vDmddPdZUP<9n`7|
zSgv0~HN1^nX%yr8A4hrgAYAfC@*~iMM~61IzVEDOXalNW@OK|8_9&&d9sIql&3?h(
zdCnyB`CiElg6%(h^^Kps`O-_VbLLEE{lBMr0H;p9;+#82lBM%?A@G&X#V50Fs2kYY
zZy-G`ixanw-{k>|;lST{p1puS`>xEfDrY~A;pd8&JNPV`^$Iptu3+`fo0up(jmeSE
zVl+38MqEd;v4Nnu&7K37T!>x{Zk&_Zh03iafkj>es!8Z$@~8uM+QonP{ScMSO+E*u
zFH83#;hq3Y9AAQ8b9QOu)9L{2qj5A_qu&$Z@kN;%tGEaehAUXDyn(IyN1SvsI(;0o
zW6vcCI4t{EReek{PKS5*K!6_|#&ly~Z3o>G@Y`br#MkN5E3dqwe9WD<PAj%`OguaL
zKaWgK<Sz-w-A{=@23~hNpWptbU+`zlrw{OVlSGDdDYcAM2{Jl@FK7l>U%P_J=536)
z$1pYW859dg(V%u@@fH`n@SHry68O0?e6Ik92m-mwI5jzsT&aYKL*!lzv2=L{o9j2x
ztgpj$%N&H%Y;L2`+(H=E0LrLSDYn{h$Db*bgb9Eo5|r%ZIb{?nGLK50H<z$g`v8^Z
z6$sx)dHgU&M;~L!M&D<W_#;uDeg9p-uRae1{!Z_%SMZCT!Jj%~hwFBCRm<lyF!;Gp
zbWX%^^A@(3pE!5nuWU=pP*#VQjx)&KPMvzmJ9q9(aN@+T{<i0p{y`8_0zv6UJ%GP&
zApH=6-`;B~)5^k~>uXoBv33<jF^j3vr%)=MMC=w&kGB!UH3-M&2t(KP;rcmFLdxaJ
zaNHc%0Sp_&ohbuwm6K^W(oW<MMGXXDm4C~`8v?r4=bJJVmm7#U$T?#uIAd_)5J7Vp
zmBvSG!6$=bdF%kj#*ZRjm`L4Q%9v*X_`wGM9%S|17w|Ko4RZd3*9_MG*}3yS{cERA
z{fT$(+?U7&gP{ok*#Uqv(TNj(|4GO3zZb_*UQJ2dZSbeR|G@^oJ<ix#i4ert+PseK
zwT}@uJWQ5ez{JQi@N&~=pvishA~e~;PvDk;MKURdIDAv3{c=hz5dpT=tHK)0@nuw=
zE)+_^NUkU#?~WiRJcQvUD)p;auUteRHc?{GA5)Qe_MD9|&wexgfxqQ>^#T55+(QWd
z-PE6M;Fq>Khf;u>5rP-K@tvQ%s6tD-ivJmB>%5&lecC;H_H6jX6TkZVu3P-2FsOwj
z1!PV35%^mGkoCBGG%lIs9=X4|vxfEcj}TP1G2$J;Xz585@`vEKV`vI;!PU4fUZl!o
zML|uThY1O_KMN5H$?0`M5dq#4Mfgq`d65UA8XApdRGQaN2^J7I4dhFc7#%%=(#X7(
zY@`WQyFUL=g8!~$_1$&w(;5kL{+QcruK$~JuYLJ%o<9Aud-m)vcJ%!Z)ErcY1PI~$
zF5>vFn%sa#;J;hohg}j(Nd(1_DgFtA0NYy&SlswyL>mFda*v~2JceTKAcQC*h?=NJ
z5keFY#?<(feZx|$M-HyYA?KEmqiV+@Kp3v0+PH$1`VDM1u5u-$!pJ-(N1sBeG?$vQ
zvEV;o;KvUV_|X&iIR{h-5r(z86N}#<lK#|F8F^j9N&s>@?E+`RPoDU-mt8l1Itc3|
z1sIoL+e_<qW7&iw`{C`ffZ7(C{n$Fc?5^|4xc1<d<-x$;MntTty|$=L-h=I}>)77B
ziKr2v=+9v!cL;fJ9<DP6;p9}nPXxiKw^TW|jv(AZt$7EP<^menM6NJ`;>doCln<g%
zm`JB0t0=>66?IbY<$i#F$b9}?33p%M?{=PEz%P0MKfM>l{Wt&3xz~QGFYe!GdvH@L
z&<UIWBy`-rNaBFif#NQK9|MEG)3FZ&_&Xk(r~}4xkjs}bl|PB8nI}=NZKGPbjg87>
z1eJFYh5^?pltDb9I@IC985Cqx7@=NyPoh|yfkVMY>bkNtf#LMF*nd~SkG%wc`&l1c
z@S|_=b3Q25{tIgjCyx8({uyWQT?#mH;@AGU@0I?SFsz0;L!&Ps^$dP7F!(d6>rmj&
zp3mI?e`@YM1eCN@xz%4$-4U_{a5f&D%7^3nvK~R(e00E%_8vKd%~|w#Us>lII;A)L
zxj*oCx>hgXm-`0?zvvhITumkCPq~fe>TjHT?Wh0A>C>@$_N?fc`)6FCmyLMCSH-hO
z>f?<<^qvsTELCP#Rp;&j_|?Ayfq$3zJfz?^`z2^~zzt^;X5N=xK$=<T+JE*d6!!)E
z?c@3Ze|r26Hu&R+YEQ;-`0)<>7rye9AKgB4#!l?$ZR=PnsPje_cv`%D?KjtAgumiY
z#mOYvs2A|#p#gt-*Mkmz7>>>EKvRsg{d!uT*VT&YuXg%982Ir+34Yu|@bkL^BG)ZA
z5gPyK{P`C*FI+ggYtYXg5dhkLF(hNdrAxp4av0UmdTz;!W!|SX(GK8OrK<E8^KbUC
zW=#9BX1p2Mb}n;p#+c66O~!Qrzd0g%KH93>bxfz{&?eUI_N>gkrpFj#p}8y3@mTv>
zJ<qx2*g@x<elP9RB=t@*o{t%0?{66+dVepXbxeorX5XX!Xeu{%dk&(@vG#ucH;x0}
zpY-a@&3|?7{7;{iqJQs(KYMF`%6+N=Pd&9c5ru`<gm8|<af2FBrHD%ErHU-d+J$Ob
zFSYg9L9G4VEUuYzPJzFDadbUTrb{XNbK7(1+pyGIwq?ip^z~j^#&mfvgU#6<Cw6%!
zecYpUY%lLcbU5}NrSx`O1LX7f+>#qbjkmqp=;tRsd8sBd{`%+sLr4HT9lqd&3;)+D
zMEKXFsL6(<cyGavA;6FO27Wx$;KvZ)?{v0D;2#$JT<p{FMU1c#hT&iPFK>Nn=c%Vo
z_pSHaTl<^qdwba>mEh!wfB1JCukgDOIih8{uvN%K3=aNep$!6lao@n-7Z+_gw*7j;
z0jYoRXWx5o;NP1$x1O!r8rb!{h=-r^Lx%eXu2b-XaO-cKd+p2rdJwDs9!dauBi-XA
z@4XLx>uX_D{~gaOdz4OQramb6#Sq{ZLxA6&bLNPad+PM!Gv<|be=WzhUoUIUVhHey
zA;6z~Z1(&HpY!hTBz?~A;O{i1(>d*9dwh3&fnW3tetQ*Dl4#DK@`JE)hQR-s&wSS(
z7W{ie0BAcCQpVu>@Bbga8U{OG^SrX37zM?k;Lk!*ui($xdIf*hF`X8WJ+xmSwI7>x
z-H!VP2ETpU0p`35_`6#12LeC3j_nTq_Oo`Md#~Wf5a91L=kz&KV`2opH|aN;t6w|!
z+E0CzGW}kE{j-#=IrP?P1_Pe!B|%w(Pd@RFf7kU&e<uicIBnS6&>-ONvN#@stiF!-
z*K%z4arYbi>feFDe>cSbUcukPyF<pg1_3|+DFz3>r6#w5pVNG|zV^!bFaENu^3%V+
z|6ULP<r(-zhav@^{G=iRLA6PhsXH$Y^Y<h0?;Vgb7ve(z{$$)h;J2^$u!EnsCUJfZ
zei`RKxW)f2ssMVUiM<?AxbVgIf8&?Kpz<}}A0hDTN|O&2_&XhIcJ~XU_G2GR@M8$@
z<KYEA1_wX(6#P_rSA;o#=B|SOE)W2l2)yJl5eRpF$8mBlhp4vICx5WP-<hHh0{-@6
z?*@=EVca+P#Sq{Z!+{?|fFDDGUkna@F(ml)Mt*)FeBrqTx6$1Asuuh22Ket10ica0
zdL}-N)9!_f|NE~-QT>;N@I%M(-I%IU$T1HA_%Q_dJDjcW@ZLedFNOktr(^HNoXy_O
zAbc2GbnC5G@bkZM98i#tKyE9FYJdBc^Iteaod3)j)&K1-Y@Jxno^86G;L}h1uRjjQ
z{a22gI}rrckV@Dm<u1B_zvBab2vT|<R`44!e3vmp&bc@6x1OmxGiZmd7y|ra2=I$O
zIKOP5nDZyxFs#4P40is<KYjhn-y>JwURnF^8v&s0G+uVkQn1j;e>Clg!asL~|4XtE
zWk6m63Lg|dXy9*~`@;nO<j(=-oLv541V3#(c&zp=u_qRB6gp19bDRQ|aQl~ackv&*
z`s!cU>b0onLqPy&BX!^`&aw^Q>68E4F9{)j+j0B@VN~O)CaKCoUBRE8c7Nb+9rpl(
zU;P>g{K>C}5&Y@#{ei#JwH`R|$8j7-ju5WzjU$L^mqZ-A^vB=%iGNGq_FL8Gp&$Tu
z0ujXuJa_!p=ED5gKNWEQC*iocC~8D(`&6~A9)bUUg1>cK@8EAA_waz9HgR{s&;4A9
z+4=4$!l>F1vHM#a;m-g0`s+WlvDZHS2ao{B&8BeAoqXw;(D8oD5#Cn_`%zdYOK2dd
zy^YELZCTWvUQ)&)Yg^Fi@!2md&AoRWlUih*IDdyRt)IJsXqP!#_uBWIy8?gsIk(MB
z^f0E=c|`B`*be-A9NUkidRr)j<N4kw!jOQEuZL0a&(3}KOYhuku7BSNfZSqn8fP7{
z4bWfDoc#5lfr$Su5dXaE7IINkM-+uz#7=N^3oEy%3#A`kw|w})-_x}oQ1I{iULG3o
z$5f<^3+0d-+;d9^!kvZ_ix%KhLJt+xxp!Ru0U-c((~++xV$X9YfBl)r!QU6L_#YfM
zH_tulBI;BVhJu?P=n5A$!a9N9{;q%Un>{~l;J2^W@0{&%KOEpsdUC^I-JT9~9LIIt
z5`Pm$wFL<8-^M}x|4wuKcgbD8Yx9mDZ~|Z#8>LMe3ZFUl>+>kOzW{+hk2w00>*mMk
zwNiU4*}h73!{oP3-%uwM+UT=>b6GE~^>t<uh<;yw_Ob2P>pY*q2tfMS{s=(!vF+FE
zcg`8(QrGJ~w*8v+g?f2+9me!+h((6ZuZk_oM%)B+`H52Bh2uI76<f`5<}S797P0$^
zK=}XFJ@4PW`sx?99wgvDfCNBqFFB`AKP_y1=-Fp~^N<tcXW|$?5d%MhIR2#T<Xw>C
zK)O)5gDr2|@+u}nOaDMhcJB@(+48bG_|2G3=TVC(sf^YBI#g>-Zs@H)r_P~hpt+VF
zr^oOjZ5bm+8Lp_unDaVnygoMhjwh?T{F<3{dY(LjI}o+Dm2L;Vyjsh1;>*ip+s9-R
ztz?XKtho&XYGGHe(dV+Sr$4Lx#Miag+HvxH2CA-1Ez`rORuQpt6(atQ5bl4BV*mWP
z^Di#wvy)rzC(peSoq0fj{{RyJy~X0xsjs@!n%t(AL_t5iaN~(cL?`1Yd@e@#oPaYE
zBYH~2jtdcwIc|X{gE~SC2>jM@_A1H>@@YR`XIn+@9JD{K-|60Z=lbpQX?X@pRn_2c
zBM@z~$%^f7c@Eu(WD2yM?ytj`w(Dj+*G^o&b-#-stb_t$Ge#Ub!n=StTo%H6%Zc5$
zyh8rF<NH2$)6UT+tNw)x5cgBZe~1Zyy}jg|It6EL?&-LbrSvnO`OWc0BX*)l?DM?h
zKB%5}1NT7L<(Rf_yk5>vV}d^BLfl5*uDk2V{;$!`Gx7R9#OwQ+4=|qr&foP&H{%*%
z0MDJE#;CU=zj(V)twsO!^`F_uI-D33MZKIoOLnaXi`zfM1fad{0I3N}OYe%gb5F--
z@!;rGkG3C{?Il)KmzHM5+}uyb3h=UT+e5THj0B*=raRevm5Iasp3S4}2XA}o?CJPS
z0`Lb@q<^$M+8%9>wny8e?a}sVd$c{;9&L}dN86+A(e`M2v_0A$ZI3qC+kXdXB)5K9
S6XJXT0000<MNUMnLSTY-Y|<A1

diff --git a/apps/desktop/src-tauri/icons/icon.png b/apps/desktop/src-tauri/icons/icon.png
index 390285c04b37e35343b16f30479d2c032cc72faf..a0e6f093d0feb04c0ec6477a9849564d2408e79f 100644
GIT binary patch
literal 233530
zcmd4&<y#zI6EzCY;4-*NU~q@QCAdQ%NP@d-&=8y%+}$NWkU)Y4hv4o`fIx6}cbLQT
zyU%m3_fL4g^z@gWu3fde_Nuk2BGun3U}2DB0000iB}G|H0080j76E{U^7?b-HTwVn
z0su;~QXjo?j@nQ&EOk6MTF0BeIc-;tn|=2!U}RFFi|u9xryweVc~D}w7lhUns-Y4k
zHjWaME?y`UOu5`B77*bKkhC;7#XW0kYd?o|#cLdX?0!=5GcgYiCyNc?b8lpBDQRgr
z_)~H4*SD(e&tFM$yP`z-|G&KSUkZ{g#9!C)O?!P$Z2vv2NEgc&Al*e8oPzJoG@!FH
z@62`<SOGGvx83QosCdTtqmLye2MbX#Ddc<aQ-u8A%KFtHC{e+S?hlpEAF1f(TSkBx
zrh~+kvo1%zw}Kr3GgEzZmse6>(*SlkM{7*aR5SnQCDV8C7^J@wf62aRZ%1_up|Vv~
zaOv#+IT_@P%`;=?Cnnj6>N<!XA2quC7iex0mIM{SR@}5y&<FhI$)^x=ExXO{QOyU}
z*ME<e4_8_^ZzVdO-i_z^?HY}%I{*7vI`^G;*lqjIb?6(x?_BES6Y~GpT6apm89`87
zWcN<vpL9{zo%c)a_clJ>U{YGDb&rl(REi0=ob3a1A<If{gB4fZVZ{HR_lkyhS=>R3
zAetxK^2WiPRULajlOk1!8oB^>E;}lhBpnx^lZGAX=v2-<Pn5?!&uMN+awgts1n}#E
z6*rkWTZ|J;>cf3AU)rgNotEufhq5VKhgB``BGRg#pQMZrf~oJn>-`EBDB;p1XL|d8
zpA!asTZ4uLIPCQW9-8?{|3zd|#6}|(LW)zM=?3_33YY8atOu~kGVp$;dUg^)d9_#m
z|Mioo!as><8d%Z?KHr#?Xt}LW2SHuQ+%g17MG{;N*>544hyqS0+;m*h@nWAf{tOk>
z9P_=m|Nk6i2n1O^J`QW!h4&QhWQ_@9-vKbM<uLqtjR*c3`HS{gW(cy{=+uY_dk88K
zy>9Rc$p5vtIcj0dW{~W!xzfxD3#qwZY?qbnC6pCF3v+iF7mgNfcQQaOPFl|%#JSmd
z=$|HGjZG%A119{RZ{$2@7)~nhPM0p%-Z@!qh8^Rbph2))U;t6HcCmIt<LX^I;Gs57
zB`UBhka*kl?w^7^dPcueR2|^IUFDS)tnO>I%NDreH*~<uIxm|`QfX}AQnnld1E>&~
z3ZU+>$&k8b5MeqrUb|Egf1B5Lwd)u7@L`Sbz5f5VZhW6F5^2<WdTXJ_>~8<GvdL_6
zc-pY6cZ4jkiGYC316n<>_VFJ7b2V|=_9XvvXkcqgNeXI0zf#11R?N^YKp#w62#)l`
zFS%{v8(v(;e|?9zGThQnY$KHar4<Uo4g2IS_qh8JkO2@h%>bPl=++mLgc*5eW*Z1=
z>o$vd^Uo-5X8sq%eipJQ`IXe=?bpA&%@zLccQCzm;fVBg`$e;h^4FvDRkk>zHrdYP
zPh5@OPDcd>C<_QicJODE54<d5@=GK<QG+7(XLR7`q*a=gG;^`!gGllDXb_6>Yewp4
z!4vWDOlo<5^gU7P&q+Op@u<7?QjBYGku|;)xcCsIVBbfI<4RgbIZLkbG!`SGNb%LG
zcAn2vOss`$!+Xv7i=Y3E*;olr$VJdb_f!Kd{~~9n;F0p;g^C|3!@m0Zj7|7|RwhIZ
zt2|~)dvUQhqfxIC5JoL2@8k;@Rm6nxO$#v;BtM{Ak1rN3Qkwi~Fs*1^khiJ|?8fHg
z4bHK0<1@6zUE{f8SpHtE&!1)|x>I}a{HJi}bhc+xjh&ClK#4nn7-2$`S!w1XZ|?q_
zjW<BR#wPgT!963E8L9DN?K^sxB8p_FUQsKclfJ2|vzKz!eGa$%DN?4A;5tv(kTfSl
zUw6S1ADb<9M)beE`#!K&jbxzmEO+$JS2>GowI%a4M#OQ&wdS*K#)9etOww;%wcmi|
zS?-E7O|lDgG!Gn>e|C7ws@_a|3QF!%DHFP%VmVEOi)|i5%m3)dUC|XsbjDv}aHG&L
zgt1vUER*|N@NxCE#C{j98B!osBGp6bQb~g2u_DSN1L|0C8#yAhu^h(9yZ>Gzb9*n>
z>D*K_pX2$iQlkbG83(k$36T{y2O|I5Wh7o3Oc5P|o_}tlnjg7p3;YsE_$Dv1Dy?MS
z6+huJ4i~mEtvcLnMePlxkGhS^_Txh`!@>I4WwFTIZ9*(@?^Pq4?-@R(dpS2lUdAh$
zuTMcWmyK$~)K6p2^}bF&z7Qe&D-7a$IW<?E*dt?DbbpU~ck;b$I%E^E5;5arycIy{
zLPDfZlL(j;1(*r4g)E2#<#}#5-Jj!7p`(WVc^P$SJ`E1HDH#%Delt~cZt-90?#C3k
zM-*$uYHRz`+@TNA?qIqynr%DKWRbAX{bkN(BHYqNw)aMQe7tnOh75tvj?+fwDiyS{
zM8~a5ENX)UIb!sTC68mD*f>$h#rIq}|9Cmsg>06&eJM!D1^=Ua+Ti@=GxW*<H4A6u
zpDq7va7kz<ypOF9Kto@nhe?5PxWbx^a(e3C_kf8M!enO64pF|4#|Fud66NEX@_g)-
zbg}|;M7me$^>y4OK6Bo(+LUuv{JuInx=PRccdJKU;#0&o{d!bNA$Of2kp1pPbx&_=
zA6U2m;-Mfn&Xwz2Z2E0xwe9Tf$-7ueDe@!(*(nB>@WYU53=6oJ)W5*GsKSEYfE^x0
zZTJ%14K0W9Cb=eu-In1CeC;obzTJ<fBBbQ4x`SzNMio#c+=W`<9n_^_H@dZR(^jyc
zrVp}f@H_jyGx*KaT#q1@(RGmo!{~@H>pepU=^2>Mln_(W48U9-$meUPic4xQ`I$7L
zw3k(?NmVxXJLGHX-P*)I2B!|Isn20qI060_yuOSiJO1NdJ})zOzi3l|-xK>WY4O|I
zC51b_)zqA|OlU1sLaz?63{bQ$M|qvxjQw6F775tC(42Ab>C-GjLaNEUx?rPOkZ8sl
ze`1w^9kP)vMj^qbA=Ra@ecgnx5bEZ$Y^?=Hpf4xOX5-5Z>t!SSM#N@>bIB-6T)Qfy
zQ1E!%<Z&-r!Rg^}jI9BLhc7jhm!wXv=G$i;7Vzhn%X_QCw^$RLTW+}vUl?2=fV3gz
z2x@KPLwGSd3-3X}FY>>bot<-^96NP;iv_E;<w;w}I-KYKyc}0)UqZ>riYg4rCFF~o
zvtI)SlzKrdj{frTF4Ux!R(#f8J9|^+?dY*V<>vba>UI)oSxw==#7s&qo{U8yPa(-P
zPCyigDJ}w?USw{LtoSb7DLc)F@-F6<HSa7UB(yQWG+s3;@nGr8Ql7t|-v#s;QqHy8
zZEn&`KPrET`x~Cx_~vCLU7tgcq41gMA3W3IQ0LzQbbGVnUOmU1<?i~F+Y1ec(F5Kr
zD(l2w#E+2=IKzOkg0X`l$zd3{nJ^QDSw{?B((cC<zecaUmo#SVhZBww6GM3KxeO)?
z9we5UX}U%%md_Y4v<l%RWog^m5&yF9KYGhn@qK=|`Mmf>_%}4FXHTl)fbJ?%bv%#~
z@qw%t4J?4LfOz%}X3I4xLai%`DpV7;Zkt<(f{4PtAWVR=oyQJl2bw8o2n1WXhIo*e
zxl?iZ{L_E&&4b1^??zFT@W0h-Bxh_eyCtb2>p0PgzDFo@667!0r-zDAhZ=?*pDezh
zx?t5NB$`je>S3QCko_D5b<z{&1NwOY?t7^yd(ugg_2f<8qPV2W-$^6X@HU;OvNhxV
z37ulUIbl9|n(^z>=nb6hWQm3U4}^%WCU=-w2zhQUjR+kk2RO8IB9o9D`xG|&Y|#EP
z#0uSI#U%~o2*eMjOv23uG*Bcg(YLyyHzM3wfsatL$^wgd$>MUxs-1JpR(QG+5bvij
zgHaHB<>%kpA@RfY$SJngx#p(cPHs8Ff4@8HUlp7A0-0F!D{Be;<h^=bI1l$Op0r^7
zz4VzfKM0b28UCf+YgzaDKzr^}uKQOjY{xTPBtWAo8a5hTSsABYU>ER1t7D7q0e@=2
zPxL_1p5{+<X#S4=zd|p$$`<DCiw|t;Ua*!P1#${0!J49iv2gSM5Qk`0a!2sDqj%6^
zu%LhEr*ZAeFCEVt|D1QXbFoUbjpPUklB9${t%EfE^e)()0`Ees(DMkllUTCvrvcSI
z4Arg-31y12z6{p$h^X`2DjKK<_(-PHMnM#mkW!iADiNkdZwgw3f<Lq!cO;FQU-O`1
zCe49wr;emO9IQ9F{<Urtn^3Z1TM{v?@x9n8<-<J?3sZS9Z30@G3HieZnwocsP=fN&
zcZ8yxX@(M}Mx~~Ys0HW?5nvcV10uu&ktBoyWNRDS@d@vSK^l^?3lpR8T&h)U^6$TU
z{$Bp-a*O{;3$c6B*}QsYQ>BaD^}Y~{rKA{MxucM4-&QjiTeOFob$d^pm;eL^CW|uP
z?hf<FC#AFwcFk*!phsv#Cj9sd=ti+r3c>>HA=W&14&#|#>W6iuq7)!Nc+o`bhr5f8
z0&P<xzkZLgL-L;fAn5FpAlC*F8kHs%)sd?HxZ7j!>FKCs6=pOaC$#c(eqe8N^ixOG
z5MGG&>=0(xR-w=TIqTO9{!E^m_y`xp^5c|B%CX#5RN0E*+Iv?rO>)z?3$ubKj8W#`
zz@)bfP}-M73NR6pEYj$YDOd`Y;(K|ika3p~7q3-WMCYdpqgLa$oUDG^e@U(lU&7O@
zN`J|SU?^_F1^z=9x#2^r0`L5oZ!aWR&tgwM@$LL9O#L*DY|}=R%iMXbZ>s#z*Xahb
zj_g@r@47)tJ=zzS4U@7YQ%8}-ww1?^##)>5Uh}Q(l)<E=B7pePlYj5^!*Th%+)L|Y
z8Y0HJUYbS_cCuq9^X9m$k-bm3BvEqG&5Y3AYkze$Vg%}%9(@1fAwpx(=W^Hq+pxxG
z0@*$qMvh)RV}Fu2l+pC%X=Bx}OUL+deC{y4qrkLMxC48F2y&sPKb~I)AEjM10VZvK
zteGE$D&KuXnp9pBrH@6`1)x!nvIb$W(HTfip5158lbj{xEt$SoqpEOb&V7t~hiY;q
zGBevRX@{544_D2hf@Z#Ad<5kevft()E93ibl=9H;Q#loJx5sYdD-ZU3(kOUx_WhM<
z{oAB5QC$^Z@%;)zobl1)4;hoTpmM`ZnyL47dJT`}?kIEx;vZ-y$Z}eG0i^O-omoGl
zbC(Ha&Co?D5M(jv1El@{c+$wRCdVbE&}0ac{3{?|14M789?w%(pB)D;{3-9t-90Z8
z8w2h;J>iwwRU;q17Uy=p+#80qecsscbZiuOw)1Gv_~)AYY4z$*;FcSQP6vfcH)jya
z^8v-}5V(Tck3wUm=L>)YJ*R`W>0xq`qk&4Ah(e~0Xc6`aQiv+#5!T<$i2M5#0*;NB
zuTxuA1$hj;@&gW`zpZY3p}&@GqX@3)UcEt0#{qaP554go3PrNXAYnCv@KY7Orw42Q
z$`<=I_T8h3Drt@cv^fl2Y^B0`1VlC-r@S81oNr8hcwJYFh!emsT%D!fMe@c7Nf9<Q
zDP##W$aAQJq<{Z)2%>^)VEy!yOr-rkJF~Qj-oFUR{sNxJMxZ5r0aZH^Pgl>1e50>d
zB%{UfTWB_>eEHjRckvs}5Ax1)PKzoY*bbC{rz><^j5qhmxv~-ik(|`I36&zhwb$HF
z&!s<~`}}%&Gnc9D@o#6a`5r2?HcnggwQvi^Iy)zUFw+3ht^#0@a`y<#jPEEps6dHS
zlH~juO^6A*>RPB~1ffKm){XtzmikBm;pw>xH+e{Gdi>4N=v@9$gjnpR%5(0-@3Bw;
zXUvm?>D5VB{}l{g?Vn#VjV*+3hdV~1)&=<;+^-{FYIBSXOgOUICF$vlx;|bAMp4Q~
z(zr8j?pTBKpIvikAV6b;3pzgIok0VbC4$u8I)5>mgS6h5JBt|$Az&~gXV)<@I*e>G
zNyv+`w2rjD3{P8@w_5oU7n$0nh!v190r=9|pv@p*rBi4RT=%VZ!`?Yr2zPEh<Skgg
zZff02p|Tgd{s#5i!gMyNoO}O+799ArznH@<px<QO7yaVRP7YN%wykZqMm$P~=OX@Y
z1t<x02os3*&~S`fea9Ir54V(a`Gd;x4nW5#2~6r284c|vEHVTnhoGo;R{@iP$+k#v
zf#Tl~C^hB~^;KO8b^JCOsXITJ<lfZwh#}7#=K2l$?%AAt4cIGlkLHg>$&ua_k4+|E
zL4D;Na&dT}WuxIdT#qoiu$7Nh6SF$Ed51a8$NZ(?N#RN2_jZ9?otQZyP~EqrjRMmf
zx<9@QBBh0tyAbLCQj>a{=pd&1^v<p<v}#~lLYkr=Nm{f(*vlKmDKv20EVA})U_G7W
z7|M5LlpXesDx$7nkYy(gBKl-#6yCO^f*kCdsYCGF>Kq<voIMFoy2|I@^OsXVE*rt@
z>#xlo&c0(=Y^&MslwVj~5SSCEp|e`<J)QRs0?ti#S3gg2TG&i#K9_5+x<*=c9H?Pb
zkG!)Fb0%azi$S+`#V!L_$N#t&PlR8UuYOc{ul&-&K(}KppNx=+RcT5ojY6I<Rdj<<
zeQ8gVtWnoRiK*cNs=EJo-L!8b|H;{>l8VEMjbfCy!|&hlh<J;G`LlA%JpKLQrW#!=
zA@G$;*bSWJ8j-)KdU?jrzJngb4n6z~6dS*Zt&*e5A2)%Ksc=8Uijv6Vgty6D90_1O
zVveub&_7WjhH97^X_$se<-$Ahx_S$cevaV%451AlDje2zL=oyetR<@<>*qS&U2w#t
ztb9i)f_){2qOIe={EIBV1l<nxAWn}3)6T#&X)sV$9&#OqpbUv3!R@MZtizsI3qQR_
z9i@sg)F>xxmw23XhF`uozZlm~c}dX%TQ*B{RH$zcUb>!Ex_DO`1Zqz_3q%^NdTzP=
zwYu8(IP_%KX)`i`Tp1tpT{Sg3hY=Qu68uP2cEIQtHr|p4Zvgg~`K)mfV;z7=ZygJm
zuwpYPf;__(*pF+PH1Yuu^4SPY;})E@8?v3@b(GEjw3PRTa3DU*%nYmpsd2iLtUjGT
z$?#t5Q6RRa7`oK3g85)FPB6#La7;@>UP(oBs1H8MglUn>%-dnd%RK(W57*}}?m2G^
zjAO0h?^aUO$x6BTE)4Y^_1^{_VKcuGmO2f@YH9<8;>CTn3gkx#?@@f@>gz$sI7iyC
zMwU)jvEutUF^dNK!7UjE#KuEW?GMN3yl#`EP8XUs6%s`UDaB3o$!(1ZS4(4dqjyEu
z88Mf9K8nEr1XBhxN1~;wFo(+p0wxx4-7%XU#h}rf@eiD=h@rk|c~99L{#Oppc_zkD
z#%Q&6a~uSFQ>nBAtp4MA&)JnrIbxe_aXKptIi81`1Zz5Qzo8r<6R?Xz^@TTt_K8e|
z?4@+eIbKpfSmeI2)aIoIp!A@^|2U5f_`!*!4=ZwlqIa@`iNSJjV$=cKH=-D%!4Jq-
zWu|6`HG1Kt6P=^VQ&}7vOK?aywVyRBs8y5;i#R83M)Y(3{Z^ht&DC8AwiXjp+1MX+
ziX41HFbC@Uy#F%eUF6fEl73%s;?tP(F>fQZRO4%9{PnTR7f0VW<Vf=$q_=(8L?<%0
zh@(f}cM21rHGfo+V}J*Qt>CRC@j%{xmpG?m4~%@I4cwQ@Z(ygP(|?Bv!6N`hBI1$&
z1ik?nH)X-gGpL4HGZ*lE6c-nLb6k`#;@t$nl0a!dTB@WlYUU8kRbRwZGD!xP0rFEj
zCA9)bCVwCmvn{;*cu3tJ=$obL>r(o8_2L8kspK}`1Z(8F#Y^0&=7W)!PKnyOrAm2O
z430C~C$BkKr>8e$T!K?Mp3i=aXSc2NHmCj-!76H)H2iygpj~hM^LJDjDopTEH2Tx{
z#V0+*i#w(bYJY}ilZ(oT<CHl^?QyU<uPK-o{0-<K$wx$^KFx6lApM4ZV8|uaf@#{0
zIpqj*2NtS#ZUqN6J=4v2UH$pKYHyw6$YK*!9=>S1Qx=|u3cvsHH}I6QY)nPRU~DhM
z9XB0OdH9~d3v1fTiT1w(o9T>6A&j%9IeTT<;pD-$QQYJWv-6knzt{RJ;2}@NXU6^J
z$e{_CsDcwy!V(9b8!G@d2z)XQ3)EOUz=t4oMq>idSx!hO;|1y1xga5xNXKXeqVLfE
zru?-J1KE6fWscED%$Fg;Zo+E}ZIlimsT^Jv&Uci#W~2>)?b~*QG2YeEXj@IJ2q}GF
z20HWNvMsy7OG>i&!x9QFTzNn(e>CdqqsA}z<7K558RtLY#?w>yyo`z8q1)!Y2GWzw
zzf;@hc|9%NW^ady@1ErlomS%}6!L3%-BF~IxaiuQ-1Kd))dLjiDxkFpWJHgXC(TWh
z-oVO^2;hLWCZ?bEZRbS{R&=S2LPwi_a5tBYz(ZS%+V+5gl!Yq<dS4^SjXKC6*#KCV
z)|6A|=yNkgAwp;aDDgZaLmrw*!1nc~HnfV#(ai(&Cva(1(W`%<F4me^(}O}`7M)fc
z?8Bjt*3UoU-~4>@^0)kLBXr2X$;ZsAyIE-j_Thh&dhVr!aAe}fi1ED5(M#!kMnxKi
zLyp+n)rjxaUW9TOH%xk&Qj5*t#KkUkQ5{<Fsn-K!ocFE`zpV!}e+^(`z9+yR&CJJ!
zYGe2<AzP<2h}x5*XU^}n9ynqFk>P9;!kP#!(m+zCJn9}4?Q~KnW>-tuBKdg*Vp8ig
zVU#i4=Q%RV3gkh<A`Aj;_P%I`y=D!a13-|7;TV_p4>}AQFEqBC{@~N+w@2{tR)^a-
zA}T}ihbn5nBQ^;S$ACYAgL4VkS4_D7&^gn8P39eQ#8}HWs%-T;Q&poHrxFx%?@yy&
zWwpr|9*I_&p0o=Lu$3858WRD(u`+}QkR=^f=Iy|%9|*U&hNj|2{Zlw=bv$0`(i7zY
zAJH_?q~g_bN9?=Y{A8~@@bDEn)x!xdVdX(eBuP7P+7Np0e35G+h&ytV1`JJXuoRuR
zB_RMa(I6aICjqG8F2B*qp(W~O@b1WW0gK7T@B|~xA`ab-A_AA4&+7V5sLR7U1%vQ*
z*E;Vlm!4~->;z(9iRu4}*%GJ|eoyhC^Pbf%bj4w8K6*UE|0UBoh{+v|`JMu4MY$Rj
zE)~7ephP%P99xYaWW9qOP6>Dj4<xz9JyQG9+47i{gicPrjL)-dknECfOI+1|sb48C
zh!0a@2B?0GOz+Q-1~?`QVDseil9jXf2s6ZCQU-zxTDx37<LUl%1!dC=kIYn8$SDq>
z9u5WCT!L?*ebzcuH;WnIQYu}sPvm%t`hje5>xrw+sIPIUanRBx#75$6eBQP&`F(I+
z7*75Xi9QFm8w6fZm8Gn>vKG)1FcvkB>!|GXskHpYyYMp<xBc{Xd)?{pdd6EWmMn^i
z30et47d$>Zd779U<gG!5#9XdKes%~ij@?aQ17A{}1YITyU2<NOh+yxX4HzA~FW`}-
zbA?`92Kl_9X3Q@CTEqa7O>59;hDb|+jLbtb-%))65f#^2_)$h_AP%xLi1x0Cv7ivl
zJC2Bc9$nqgE`x+h2Kx_`;na2)&z^$4g|~v;bm7Pc981>nU89ztLNakNr`DnEp7)O(
zpDn%JxH%BsxBU-4kH5^)hbilHl+HJu83efhILT<cS^4K2w$^qgswR9S2g(sf0bSgh
zaA~xvOaFbf7gsp0l!TNNSa}3g#Ct#VRn(idKZFJ8JHYQ7`l!aOnxC`&3c;=!GP3$S
zS2Go&3wrV(>?dyitI{(-&r2KTnD%3;+n!TWj8Pbs$^eO+a{w$&NF2u!OtFRjk5hUf
zGW64iSsrsts+Yz@gB4PjU&gwI=s7BN|A$rkrdH1;7hU${$H0MhpP^vX8?C%DS}+aR
z`c3rl$&zc=pXo)YUDWWneFgHWffF$$UZrr)`qIQm_R{#+W#SxuwM>$<TbHnI7jT4(
zHIPjcSxjL=Cc_GnjPK8QvghveM~x0Z_;FWF!eSXgj|Cq9CVU5xlGr#+HPi%%!XyEB
zZ$4N`_Uk8T5UKFZ3Q5ucGysf<R)exAQp)m*VYt@F!`Pac0-=&yfh&XsT67S^Fqf{(
zDr;q_xz4LZv~a5P-pyN|ja=U+7yCdu6J`>9zw=0Hc7Lmhb8;f!kJ_~#g#T$?6GM5K
zve5OUfBrkg5*TgrGtyJ7Ubkw&R$*)PqV=I%rb+JM!P{iz_4wPDqzOb($JExOLE>RA
z+;L?ic=8O}H(qWPC&r%eRS?#)36bp_gS6TKqk2VZY#Fj9l{yf%K&(siCkrQGow9*p
zs2V%1hdT|mk_$mw_A7I+RmRg@5bV(PN}+P_PaMqV=b9Wrfnm^=tji2C0FRQtyrMMl
zKtlNo-Z_PCegceX_0f#7x%fa{EI1T#<><{R^zL2y$=iUUYey1b%Oz@*UbvC4-@dPQ
zCdJCUBa%3KM{_`los+Pjjni^g&l&5GcRyk`8ZdCJVJKD_TU2Hk)%-SDI=BVuvqFDZ
z*gX(fw4snRm}LDTCsv|k4FBx9(G9~FQ-#-e^gv@Qk#GUvX%nqPgswDmT2n;L1cvI8
zq>dmTOEgYoq;teQ>8fm6%W2ynd0a9`&s0_N-)na86C?d`8ZJ<UZWdW}r1NPV*W|g^
z^}HBr^tqW=TOWe$zvVlV2Ti89V_`ZY{GW<w!~a=9XXvZ1e24dTFpnd~#a!D~dET~m
z0H|^|*fqH2Gbb-d)VWiaL%ms7+8SAQkcJX5AYL+nu&Dt@SMG;Yf(4}xewQM~#TAK~
z(%Ncvr>0i7dvRK1^p}<Sh#F;dkjh{aU^2$N57`tyZYZ(7vvyY2nsl5EVOK;FEaVvM
zN`r(wp)4B|{jC&O@&zgEL-?L6Ea?3gdu$GKd@vF9uP#+hqzJ`#lw)hmH_s>V?nLTY
zBMmAR(Mh3)a|z$I)m1M?Cq^%UXc*E%hnxAS$I{o!cHO+}tR=Vh<liT6C`O4K3_HJt
z45#SfdrYL9dG~Lz3cFRf045~8IcMZ5j$;|pFuEJ-W`crVhDO6NfT${r{SuZ_is-_|
z4+NJCdv-~-u$LdvOj+lGz&`*wU(<R5Q*=;nyErXjr`At^@?A=ABwA^U|IfRtBL!FF
zkAb)h?O18XVk*3h`uC$C7dz<?JXtVU#^)ziQdm?x{Dl7H*kpNfpDlFN<Y6nzqMq(@
zpLuOIa;u8(RX6uaOM=qWy5^@FJ&0xXgo(SHXG-+(-gDQ9ng|d5cv5t0rbMJ5+7ph?
zQuxvE%%TCsQK#BzYSJNiL7NuTRmdD?IB!Qj!6GH+oV6$&H^Co$^KN9XeS=-jpJtov
zA#;OLvqyQA4G!r1Fjy<QV(L|d9Fx`A#NZ9SYBDX)TVG4*%t;(jHv^RipxM^hHUNYu
zgA`#YPa7Vck>`2Ca#vW1Tg*&)Wxq}u1CaYq;XmA;PzTE1Di>DyJnoQiyxb$2JZ@(e
z_c5~|ytnRFN`jhvvyFLs7+}}ja#XcwDkSlk?yF*)Bads@bwuN`6lSIQ4L|8ik~OJM
zf7L7*-|rG0Rsrd>l!#4@@ETp()t82GgalQq-$gs{k7&3UlA(dp2&K$m&HOoWHDy{1
zY6PW?s-MpQkQ3-}X46g>TvYPSpY;b)EMQ|xjYJw?dsG+!#=y|DK-CgTkWF4u<O{%6
zAxg<H_VhtiBuI3Y_EHV#3$;4G=4z0Aw@}=wRq!MEFIPhU54``SD)Wm8{mpx+!=KJs
zG${JUdnbzzD76c<#A9iw^6$(tLaK!XFF~Yf%to@j9tYKAq!m}kzzZ3K^qWLJHM-wO
zm#ocVV-YO7(rdX9>$u<Ma%YX8t@(_0FH64b8{gGSIKSrD^-B7QArv8!i_KW5D`U`;
zQ{E+xOxo~BZN5m_5`6m=5LZ}>fcYNJ|CJ|w24~DovwJPgz5ryARK`(C=#yhwGFe5K
zS<rnc%K|q4b>H<!e8Gk~{|s=lx?X~s9d5tm{ez#L>X*-jXrlHG`18=RFtRS@n)eSo
z898b7aFA3%n%g2w8&JxafhLlZ)(q3ryhF%^bZCUSRpY;<fnEb>k@&(KcIs(uS6Qsh
zVdRGprBNt3rn>oebJ~;1dK5(UFo^(1kSv_>b9hvgPb*<W6pWFc!G{%T_B}uoc&Cg7
z8$=E%ArRGa=Lw3Tg`}>bBSeXiu%a<{CC@^Bd0_8jN&eOJ7v#xjos`{kwdA2(sp<O1
zY!Rl-+&ajBMjQKq`F}#So4Spn|CfI9A<&{=00Z5{5=G^bsKX`OSm1hvEua3{RxXoW
zGtQ=UWa2i}urH8dH!edu;>V?DSl|e2r#|ECt}lpqAl|YwMU(wq<ZncjRn(`1g%|QK
z&by<e$m*-CQt9oei^f|7o{dSaec~nNl005`M8M8gF4smTm%u^=R9VH*zX){xowEh7
z<B#h2K(AwP(_)Zi^k3uztqlb;HM$lJseFQRG#NDan5w6GIAix7*HKTSs`kX8-Zk68
zm-@Tf@b-t?K6@<^Ad?*^0gTSE>S0AVdld5_bG4D#rD&*cgHW0cF}JqMZXGXi7xbEn
z@y?mY&rzBgf!`}Aahv5PK4jBKjV<mw7!t~U#Pv!z*yUp#+^aOIaIWdH{g|I5?s0-N
zVRQYI3l8AFbS_=h`PUA{0Z1b-uM?cdSI*S>>UV-)GZl#_fF_Yhrv4-oU%cz#XDw43
ztyVbjgD(x?;2QS>#$8Ofs*)$x%qTedP;QKZ5PpSj!WYc5+Z>7*{Q}~~`(Tm(e}iJb
zw{^NecT;`+*Lg>ywR(qh&eO4Vips!S;HL*pnAy)01M(yTZ|ucabOkU)lq7}llMC4L
z9svfB+d4%KBtz3q_Qy?_JcG`#IPZ;eS%?Qk7UnGwgT_*m^YwMz&2Ov7Kk%1XV_^MJ
zP$BoTw_6JMyu|`2@b#9aB>+4k=FcaXmvuGs&_=<65U<h$@4bP!)UxeVL343IWK>9b
zh$_kv#l1T_NHr9$=(85tpx1!<<y5`Y=P8^?yi5vT1Q*U-`t+}6id}}SNCd30IcMtW
z3VAnloxA5baI|1{UG2(`IIOr&;Or1LJoz#<UJh%`YF!S-;|lB(VRQ;%_4)s6F4JiK
zTL{v%ujfJ{Lc9_qLP2SBvHWf-HSPCxNtrAkU##mY=OX}Ve&!j^E}<XrISv82E1{XU
z@YISo_qnmtib%7!55NsqnpPm8h09S14Lu_KeEN8ex*u+uvS*iDDB>qJ9ykFm{e5fa
zPKYSVN&ijGL!XUu>J*KD(M<cvwv6QVeOjO3sasDWFZ&V8Qt^O3PJ7wkpHshiuMvep
zX&L^H(5>`np_~NI=TGu}PIs$;N9kKMv>eB<<<ys%#B7V;y+jC)gF!C516`=3ZX`+z
zn+RsTTGDkRFj9o^lU<<^1R=X~t(Ex`m?j2)d-49cl#5>_qg+qy+CF9epo0c2obIFU
z7~JE=CX!6Ob!26-p;npMI)ObQ1+ax}i%XLbNC@<n0q1Qp3sa^qAjo`oqQ5>(*h(lg
zCfFN8cz?_cvcZ-gVq^iD#v%rZtTmz8>Hw8^;@{lS>U*+x*?UG0z#mQ4_nw#QedLvI
z8yF=X+I>6D`tOSwTx+6W^pO>ZMtaRoXT!d{JQ8><BbWvaHb?H9<Co{EIW~`4JUfZI
zKad>I$blh-hZjRCf%1GQPgrh$5kG{&I8jWk!Mp-RX2IEdMj&RMd}Mh=00UI+g{~by
zgb)Ji#aGViP^TET<x@vSB7@h#O0j>e1+*A@K94#CJ%0A1DLO<nE~R;q4EkYNMIhmK
z5xa9xb_Jpll{pPNV^C2N=%#e{K*XWiY`RpE5#_TBiRRp0bQDM*QKtO#@A=YmBH&cU
znDFNVuLrWI$Nxx{qGuK*p)VcWN39zc-oiJ-J{IlmuGf9zX|eNB_f}t@kS%gR{viEB
z1C$G2hVpCKm9#oeVu7Is1=ySCPO5i7YzrncWB7Z<+modA@Q=wBCT#fMxYizf4b#zV
zL-M@<=ek0A2=w?>0sheQklbWY!l3IGx@i*qq$z8<l`5?0<e-cp(G}(zzCIm8TsyUw
zVTi0mBGJg)e2O5JCfndmYW)obw<<7=G=q(%SSr|qLn-F@WNs!R9ko6hFoK%*Ohfg2
z93N$YV`WrZQuW#Q6Z{c=cf!^Bd&>3)#YnO)lH-vHzsu01HymPqWwKh{C{5=mfEtES
zzGRtA;h6$y?b=v0>oQaKeB+|@uYvxb*w{JITPb1IDTk8Dz#_CkO8`0Df}R#G<OEjM
zhCXX$1CG^9M}Un6x^cTE$P01mZrqh5L5a{TWT<(b(Dh+Uvo0OfEK4TxLwTLZ2QT}$
zb`xrn*BBm8C|;&r4*Im8BiEgOT#u<v^uNd;Ncb(2+)`q7_gqK3>;G!_XD5tkmco2}
zMj;#LdFo|*fC_#8IkOvHV)$S2pOYd%cQM0Nt+A^G%^Dc?<Rg#1)++SPF?#EyT`h6m
zA_w|?iGWxIu^dly5m4%zNJ2q$1&(UO8Tof2Hvppf5OWJ;N@nbs21rlPgxZbcaUV46
z{30QitV~E6<={!tw~7qN>ONg}?I{JZhaT1X*owFS*ZC9)!1*2f_XMYbgux6DcKYB9
zekXg+m+;La&^G`c*+Hoc0R+;hILWI(jbq9e4@<RI?(2*dHI30IDH~2gdXAsSHs@ia
zm+~mLCdhc9qPm-#FuRfb!>?T2tz%97bdR(AIM)%kXZf{=ijM`s=Ms4{=i3;UaUKQK
zMuYH%7Do5n$<=wQ5T2>~du)f`_nTU%`}k*+2=!f>D?3@qJ+UrM)ldw@89=SAs3~j_
zrRi8wokmhI;wzBJlPN85t%x??sU!dTemX+y^#hw!%CCS1zE%zzMjr5(29U<ZErn$5
zH?!P?BngH9<p+dv78(P-Ml;t7CbzuUNq*cqA&^wdG>DOeeYuUg$)<yvDl^$ESugHb
z(IAUTU$@nrCF5c5{Li<E_j7U74iA=yIpfc2bN_JxLg-Lw*#nBP)u(8&g^P}Z*yaP%
z3F6(HT9XM1s%_o2<?#NR@=nu_q~*1Nqt-#sk(l`r8>SYZrN}D<EKAXNwHL|y#&!W@
z+G;Os%Dhi#qrdT;z@dll#^6yILAylL)XspSB4xDJkL7;oj2UkEI_Z{|Im+GS(@a08
zW9#e)^OGcE5zXoIGt8JpI=!(6?B7+q(Z1~yI>-KuXQ~v(Ggk7i$5f1?^Lr+u)Fy%c
zg*<AqA`TzwFELVe8A7S*2mGyXr|T=XPZY$~%Hmvv?$qK}&uw{rcaM#BmpREY7)Qpk
zd>=Wp4}Ik)G6u1X#O$@4n6sO|>e;2S>)gqGcxWrksapP&ML@FcJ%NO!p&t>!qGSU;
zgApg*bdw@OQils;QE>gt?Ti6}rDzcY2==0qH$#!EFym6l$<3ju1}3fJ&nkL4tJo~%
z7rsNCgbpV2Tri?LLlFfNd{TCH<BVcUMUpetThwELxKW%m5)~)frK_<iacnDxoean+
zCVcqjsl=iJF)!2p{c*O#$7dv~{Uaom&5tqvHTWe@%3%{#HrK2+t(A@S8@4e?nB_tL
z7&I|C$|^Swq%LPYnMN$z93$~8F^JM0O;LWWd!g%mz>8zMMDRX%DsD)zgP!paS3S&~
z-Rl^|4H)1(0c;<nCv}F=>v~o3KtJZSvrcs3Rcp|sk{^dc+s1!I6nLRNgsHuDm~U*z
zf%)8$-N^Y>mUyH5O!*1OtO7m7!f_bf_e5Eyr9^ecgWSIrKk~#Sts=SO1Znv}!UcBJ
z5ezHFg6dxKzuwCkBB=wV@ur&o<;XO_iI*==CZdbCHA%PLoHwfZJ5T6PwLPvU_oL?D
z2O~(M@lVY!HiUkY=H}JjGy3&i$m{%Jc~VVvAvL-dxaL#g(?EDel+EG$tR=R$YR+cU
zuAX5@jKp`CP|*_h5e*NVhsugp3doo4tTUS=?JNoc&u`BvI0c2E;I1cI`d2DH@Hk52
zFReNw)Qe=CmSsv5cK5_~8Uj=+dx7@jY9v|b^GLMuWuJo8DC^J1eit>J;`+twSqq#B
z$upiEX51gub-+(?=5dx?TLla-ZT%*%+uswwe^CEd5J`O5t85kQu$ig$9z!%P+u1!1
z2smGq=n>Q2s9O$4gCd<?QX<CsSG>Vr<SpK?L5>PVt)>andSwWR0^R5dO(u?lo>O&T
z^o1q|;|wQQfd<+1kIAK|_yJ%RrcNer68`y=(Y;#HnB8M~boyyy6@-+a1vK<XwRDI*
zQi2Q697*yRO?}9OVD%05mTDw|-pX5$Lk%ch2#Eu;e(t?;{|_|V2g=$J1cq@9N6x@d
z)UF4lE^>^A9X|w9IS%i_b3_|788OnmjCFNROGr6OQ~YY&Tj=v@kA6jn_DU)AEYbO>
z-D*_^Rc(jdOba!^E^$M-KRS7%eylLH#(!m)pCor);(SR)6q>ls+w|`G`zJ5m#u7_s
zzisdZ0ZO+#!SYa0G;To)0Po?K2uvP<96f<Jk&Xir?FAr%M2`lR>tf~O0k-$4n-g9!
zAy(gwLL0`8&(F(rP9gw;En4bRrZckyl!_ErT%o!*A(AJfJpC-xz-akKk+3DKuhx4e
zu3Xz)kJ207wUZ3>Z58+SYnHPFemzV60Iiu!<;#U95(8d)2S7<swJ-B`)&9pgg^&YY
zOZkL8uJV98sX+!oJPn<%+xA@1zoZJh#Bs?r^$w?Xl3rqCc?@;7N+)Y_7K*|b?pxl?
z`;*$8vWQV8cj{zyx&i7CBGcTU#R!t!m~}^LdYuGGloN0@b^z%-=EL5L$1b&Vk(Qh!
z4@!R3Prxh2H+7FxDF=b2P5%^B1a_X32iAhfRb5<=xm~V*^P8ADDHY5^)Jw;uH<)!9
z3aryZb^s>dbT%8f0Un|S$*@6z1$A-Y@^XCtX8ii&=}Xq>Z(;YTC`O61Go9OIkFCfb
z$>B(%$E%SdGy)$Abh#HSa^H#v+*D3SdB%)fuzk8PF0EhAl^zuA@ZmS{?*ZeEf-!!$
z0J{%(*7%7q^4VBe5gd&`xLhzNODh^xR224z3?#)GnXLPf{GVff<Q~<Gi7(P<f=F2i
ztu#O@6h)&BARP~0GfDwDhX?D1LcH!>$!T5h=Q$9jHxr3oy$jF6ZT4e!Jp6dQct3P2
z<;QIxe&pwIv#b}j|5vGWO@^L~5(V#Id0sLf#3G!Sc<oTAvUT9+zT<?V#P22Z_n2yv
z#>`3HOGiS=W>=!5;>E+-xz`>L2AHEIwSR|g%*u(}4?x&|pp?F2vYPK`B)ysXGB24g
zmn3mf9?yr6zXdIV>wKwF0!~uZ9~Qu}Jcd$8Bri17-gpI}sb74*he;LnA|dA!bzxvd
zGy{m&bnzQ{)M>R~SmgrE8&srqc8cnF;Od1W-Jb}-%aYdK_-h|b#qbiWFuY+?s2PPu
zj8d-C#Y2kh9_m!cQ#_zUw6qh6u+z5P5A6}G@5hpA;diqfBmthQ{*Uh~wa(!CB4YAN
z7_o+&!A3H4Y@B4e*STY%>n2;4c#|%Nn>Oi3936FJi*AS-9+BB(aizwgj{Hk57<!-&
zcz_3GYw4|2)2R#kHhSg))>z9|<|#O1-=rc4Zz-<@E{~>-s{6t2p2ojM>(5Z0cZlJ~
zvwLSHzkMgJ7`M3n1xU$rFm*ubmx<pv9BQ0(c{4LY&vw%iV*hJ6>L3)+OLa4NKpo4b
zhR_Oc)g#<Kaa0NVKFk+NjrfBqarMkx<?eU~V8h0d3G4wZdW)cPodTXw7r8`>ph5qi
z6!8Synca0(7cFHa9&MhoC?}2>e14Jg`P%_oPrC$1)Ec$rHZM_k3acMzaF@E-!X>Vq
zx1XwVUhu0rEeUZYa-;#JfVE)~$z-4sx$T#4fHaQ8T9_dUsf&=Yr8@{BRU}!z3d8P(
zblNyb7WPAI(H5eUVf=`H=w@4doNy%yKxe7S<nt^DgKSbG$Y_KR&|gO(RNh)x=2Bj7
z<LYzhWDV+ZsqLlO`_=ZxTF-wz^GduJKKgqnLIK;G2VieXavVdxUk@?qF`w?|i83$V
z>v<j)2ds)e&U@z9^slWy)k#AwleNzTx`w#G7IxlXB49`ea{)L}W{@Yt7*7+5J8MFx
z!<;__IN<ns1-9E+O@i2i3am=`0cTjUSOj%*^H$Gy18S&uQ_0I5H@g^E4UlKA=Sm&X
zy1TVo{eaKioFT7sLE>ZoXY2|d)zMKqy)S6u7L9kFs9m<5*L*JjyTrN8_{4(zYcn)5
z5Jx%XR?+H^VtSe=xN8qNss}_u5{NF#dS8a+?<)OXJTFzNDy5q2%&YedT;UW?FFO5z
ziE^=B!e6fedTjKETXev&lMTk6wQj3oLqwuClA?{N2)U4x>eM7p>C|s4-dLsnqKxcL
zkumN4h$npzd@s2{Y+|b9N<vzcB{j*-eMO{%!Ntv{g0yYcd8k40iD9gY4jXR{W=k!U
z_o{nlLD|p@!(_jH+|4#b^!^@Go!Yf_U-s*^v5Mz;C&+m=1A2KD>e=qKv}mKQ`5ymj
zDCWdaDgIkJ!M-^x?(jG2jl?+<&Z^r<PemsDO=?bexA~v8<N4FxQAAZUY;15r(btjS
z-3xn4I&?;Kf(FJRfxUuTpzS-;Pe{Ef^;}jSZE+cXnZioX`dfPn7vkoR255&UlYlge
z=errG^~QK`sP(DhuWB$(z(HCwS7nF$gLvxGZ-0_k-~Vr*0$!&6c)4bYG8S;y59Oux
zb+2fiTyEWAb@#ecnf1$iH$%UWr@*+`8eX<#B1{4aAIuA7DI}F{tL^FRlZ&gLU1Yor
z=sQufe);8SGWJXshj<s5b*o_8U*oJi`8f~izO2}3cwgtVS<TD!z?WzKn{dN{<@LlI
zc94K=C6!*We(~Tueb-&UwK>f;d)dvP`c&7NypI~d=rl}47?%o@-ihI3H<+?;<VFVq
zN+o;k%W}|-7%r471AP=G0@m3mpwW)qD+IdmH1rjlfa+<uqY3f9jo$Jgq8TvuSL#Mz
zLZ3BfjB<m2A;GO=Nc^0ahWXnjwDHcaCJQj0eem4e99<XThXYQ~k>si6RfRZ>pO0-P
z#~t^O9qJ2HtgAAHx9mCy?okg#8iLeF2SE{Q0XS%ir)t^HhKfNi$Wkxj89ZMmMW9*t
z4oqgsFDSA-Fh|8%eWF(Q2Vian_rDE*@<1OQ^rj+{tL<U%;<G9q#Y}HrKNSD}z^GBc
z`w}U*_n!BUPei)Vo$no^^8WJz<h9oxY@F3h{apR{i`8y%Fr|>*A}-!)@q8P>;5N;-
zHAypU9xwe6m-m62pzkr~8{-mjUi)uo&=Q08gzaNC!^IWEG`~9^6#RAzYP~)#I5{!;
z1dG)ID4FH61HTPIedg6r?e++<c-n1G0UMY5(vpSPpA)5{6wzpCmC82P(Xn-S`sBb&
zJxnrd3Q|Z^4);YV(#niYDdyF(4i2>34nnl-mAEw;ga!Q;HU^BAy-4wCodp&!!)c1k
zt0?LEH}O#b9!(zJ=Lo~F$aKf<#STBtstGCrs|hln?S<%e(dilI{obeL)^z?PS}i<C
zn|k!i$vXARa)1C_N2;IM+pV+X87dn0_gr*z7;I?^+xEFymZ0x=!Br_GQ1DSbONfG@
ztj%v8?)QDC4a67M(occ}R9xz$wG-3ofVceb)@+J}T1=Zlb4x$>LicXl{f`_@^=<j)
zUXVlv>vq*PC8Fy9La~KopHB`@Kj;raMc)yI*%eMSzr5+Qz53+j&@QslxU^Dp!#LZ9
zn}g>a-MU1tKF#Kb`5Rz^)wNTEY6F&qCBbhHsxuw9p!y7DG>;i4)Dw?|vJV5uC)h}g
zh~E;-X<=+osPaS0J0_x>7wAL&seWUb$m0T*I@A4lZ-)_~I-XRGjPk?Je8m$J5@1Sr
zT_*1QyKP!A;(TG~Z#1+_P1>fEQt7oofERPj)dnqp+T=uP6A~R!J_{Xt!lQ~Sq3sS0
zh2dDkzPu({m+U)m7IO6Wkd%>+0j0-sk$kFO1%K<1ojH2-a60<WaJru?OzmU{H|@?j
za6XnPe;fQ=5tbJ{DF+ys%IrI%i~n~YR|2`E5e$A!K2y&xrz_FwX*9eHTI#<XHQc!g
zG4h8f>V~)qXkh}Znp&h7F6N(o9t4uCxn}PNu%TxvNOQQ_l@aj)vFnKz-}AWiLx=W$
zbhLarSn6n-{XDl4LU^LK3Fn$dSmTSM-`8=oa;SzRuvxlAfz$e-q92GJr`bl#XYzb1
z?(I$XK{iV}Iv3=^r|LB^3N`E#fjn!Daq7#ZHal0m+aYfW*JJQsITZNE?s=%sPhp*G
zFMgG(iyF-??qw378h$yIGV=2Wx>DRNFC<Bbn8)Km0O5Vrzl{OU*=Bl1!Q;FEbT|@~
z<S6naGA!4VDMHeXh8`9t6H6n_QXq*T&9HZ8=*DnG7O;l+82a(4;igAkS{OY}8}>7z
zT9;YcI=suiL7>KNN<c<hE&_=Jt)??|of3DPRY7#}uR;AJEGC*XLr-?re(lIJH~zS4
z#fghD+rDz5;yyFIs`<z>s+rxlG72VOA~TJRj2O;D5)?1yJ;0@w8Erz`r?S3h!P9zr
znirx+HEEB^BU4kGRrDhYkX3B^UXq?xHmZwEqrN!cJ(s|*M}mHd#FwX^Aw9fz<NwI~
zcBQCpu0=wvypI~F#{zcK)3Ym0C-7-_Vn1+AdvunV(Ie!W3pgJgz1_9(iH)4E9voKY
z6$+?6@5~de@q&K}yfBpbCzJO>bEo{;zrWc8O@CypoYyk1_PO3xnL--LzOt(6P}uwi
z@rDe~=Zjmt`PXr9;_op$Q&pUv=I<e@XCjNItiGmiMD`EGfV4L|P%sbS{sfNF3DalJ
z$s`H>@c2vjoF<RP^wHC$QK%|t&k^Tf<C)1)s!v=I1Nl=_$)pVfYEga17G3@q(u5!y
zafac39j?j``x)Fcn_8hUJ8wXDRH!wSq;s9H3(|a~j0rT*4Pa&tt#vs#7XmQIovA%@
z%>S)jgAOUpNAI$F6BM?$97O+U=&}4c9)EO@&XLpX)Y%x+L6qs~Zw>W$91L5%`h&!q
zw|pCm(^Lu1safI2H(mQ-arsih<JopnqHXA<Q@K$4(5^Q6AY(H(n(FI=H#!mY7Fp~T
z2brEJhzgaCK8zm5?bf}Aj6<`xr4%1HMZTKgI>l#-g0GN{c{eC1oybKz$+v5BqTjy#
zu;{~o6wq#m{yGR?QiRrNM;>SO3lqioYGqF7QYO=9XA~nw)sfS8J8d-D>EB}GE~6@y
zh><riYPUjM+PB80>P<sc(^tdACcDdjORKg%t-V?ojm_rQGdzN|sDm+>DHB^~s$$p)
zWaz@9+|!6T@0@&GZJbN%ew?Q-6qAVWKMnEZk-`z0=Ho+76}mBzGM~`m7vNt{^3e8<
zW1*}YvQ^?wEU1ldeZL+JSu(w9lFX8ZUUkPo7D@SxI0w-!?>*pQE9|5rpnYk2IW<V%
zyH{yTB!CtzOuTvxaTN=eRfAHntGJ3=m{)k@a`oCI=9mAMS27H(QxnBjS9z6FG)r*O
zmR1{p%SYAF*`0MWz|`M5oMdU9EVrfYx_D|d-e~mukDj==j#x?ECYMS3O;n@Jn~P59
zO(HBrM~V`IhmW3qZKWiR)BoZup40A^b{kD?)As9uV%GLL8^=Njn@W=mdWf`A8p<25
z7qBlNU<;u}=cmnAp5E?FhFx*s31lYJu)o|khU$W_@`NidO)pUeMe8B;DaudNcU7<B
z#yQrB5o6lv^W{cEg3l5s=I%RM&Py~a@Z-FGEy1cQhfCgfhhLAW4d!^oi^Mk6N_ZqE
z#;<)S1C?Knv}A6GJbw)yMj}MGH@5d}WzrxS=kxG;^u<t~KaiDcNlplZc;4~4fon($
zq{7_f)>M*w2)g1<^!SJCh;;;~k>E3Tu>S|cKs>*Ghv2vag5gdN!gH0!Kip8N*}tz)
zVJSk5lE)BzH-sN|@`-z$`o8nZ#a+Hou7L4-Adw0xs2^QpgIEnf2|xK>Mv^P;f!Z`k
zk5Bf!u}VNKrjrP191uv+3?QhXp9+E713mIqM<NZ*7&#F#-k$?XSzsyx8om91C;@dV
z9tSABAy}xF7$x#MbwE+5Wrm8J5UNQEV>ZIpqPY6KSK*AkE1dabv(;Vs9UpkbhHKtk
zEaaZMaX_rUBuWPDSop!gr;dJe=D}AWZ#ah@ZG?CK%VC(MKE3QHQ`E&*7;k-46&)pa
zCfaizx+wVHP?EpEBS*#ze(+=-x9*GlQqC$I@}7AAL-UW`p*bIE&!5JBEz$zuGz*o6
z7{dx@;xfPLVbhkpef1lL%<Kw-zxn;w+v_(P2x`JvSJ?C_lbBnlWq}l-oZmj!YhHdk
zi-MBt3;(Q5Z!(?S1U%CE8+x;!q{TU8X178oe^w&Deg-An9|UrJ66a);1%R^hr66M)
za`q#pzbXPqV-M}LcTfVidr~xfps9Dg=<Yh!;nUndjFZ2b|I@2U<T*v4i;Dn~8*0^D
zC&?=^Ucv}ZI0NzcAj$bE(IywVPyKt8@RK4#<==S2px!y4F9}gy<t$ySkTO6O0gng3
zk0`+zNo_$#t)Yuy;!D`TBs0+%7=R25K!Z2|7SLkgYGDEq;%Gq*$pT{u1WDvbN3RGA
z^eIMSNsC9}9B%ld8!*1T-&veqs&2G4|IzhpFMGQ|#zcBD@vKG1yFtq?=~>d_efRhy
zUq9#`{}-oR$ldXY17ZDm1jE*gfOy7HuU-4ZtAa~cgS1po%}!cc@+Sim(&K0aJ@~gD
zcp_tEY*#KGduZv7-w3FPcov^q8mDfYexLAZz_BgXW0cSFy}H=2v%n2w7JfYhvL5zc
zI%e}$<PX~uFX_paEZw)BF4_R?#Fo#lE%aDd-D*Y{X}G?-bHi)xQtt+|NSDot@vo(N
zRxg7wD$%nWuqs?7a+3R*13+d#Vt0;Vgg(D%jvk}zQ8y1yr!;a4#$jpTHeZUmFVXZR
zTq4`iMH%pr{yvueQ4v60c$~C#=dZ6%bo>b?K>xh+?Ak>^%rsP8b*u)!(|iOHUVtD-
zKZrNw#p-}4BJ}_jA-W(Sx(FqG0!CCJ5En1xSm^t}-66xh5qS{Dya!b{kjxMmEmO`D
zm^3qR`vxKXJkX*dz*Mp~x<g_aG9tr~d@iX>h(pmubYuoG4mr3ni<{p6QuM8`ou!#t
zbpy8i<%?GDxhyGspVfGpX%IbL-Sy?2i~D|;XAR6vMY#7%hrmk(NWyzE1$E32<eaEV
zPflNHl%U=i0YU#J5Ydt!hOFh_jwgY~r$ksT*!I!jp`V^>EV?Jt3OS9_E7AhsG>Qbw
z&sjMuXXLlocI1z*qaANcuxyi)+-m!I{iqb-SJ1nAC^t0H@sc}DjDGAvv)8)z(`IC!
zQFrUjEo)w4jtuM)4RT~t7QbXqBVm>p%weFso532^T`;q`LIn7L#929pwX~!yHjGKQ
zcx~7px?r#va7X~(cLf@rmeW!4B)30baQI~R8_VxHCO@&PPm=-Td>F&}s?(1<$u<RF
zu?zL<PyPaJbpU<e@w(O5CnJz#q!5z|=?RjJaLfS+RT0o}4NMSgRkWxgMJokVG2;Wb
z1;8Vr6ed$(H`yI4(jeIkkN47TsR+oyFAo6CEYNZwTnmDvZv=n%A-JkA0$m8GF+kEi
z>w?BGEeKyC-@Axc{pAgCa-Q8<@S3|b=Y4(q@TOHdDL;E3dF}NI@g+I^4=o;k{J1;!
z70W3(cYgLr=q)j!wgEc5fJMZ{ZXQM=w}A5ar{oV|0ltM=E053run}f6xtzxqZadI;
z^jpu`lS$*Wh_nDW4WpDP<_kt)ZBNehhgXK2Ntcr^dng=?oi)N&pOF#F<%Nm-_(ilR
zMxG{Yf78sd9{Z~QY0L5z&E{ft{n%b}-HMA)cLPo^azxI3H22Q~Y(ye=CSZ@n<~+n)
zF9CcA*pg$|WW*hIyk?fpAr%93A+j7@EXMJa;P^hx`)PhoQab9UDS=AOB~Y4srTbU1
zJKc#ZjlN#`qw<9k@5cndg!!*RWB2XuP=NO5#)*oQ2#Fd%Cm`MRcM}Ub8~}wp5G1XN
z4UH}+>0#7mN<>YoDqi%3ikT+)1bBLD;dcXx!^$H-szWA11fdx@TViD&Pz@tYI(c}-
zL7<)o8V=AjAbqLy@I(xxLO@v$21yZ+Xea47BW^hv9yVM)I1%ul`oPP~fGzUKW#ZDx
z6}PP@jpS(r^K2IZ9mS<qP}G{9e5iilPgvH%<bGE?cI!NhVj0rPgE{3m$?FA9>bZnT
zmB_&(3nH*#Ba0tC0X#G%L_TNm$>`DdE;Q=V)0g_Bk;Z=|(gNT#jGj!X-+|Lx?zPY}
z%1MX>gV<Km;^sh+Z#%DS`ffuETPt4GlPj913%uBqx#CSZtbSLcwNM=`?{GG+d<mAD
zL^M+i?$qp_liY8VA-fYOtd3!L`dL;00|KjZz&83kkGp5Rb*}@zlVK2j&T}U4Xb612
zB~TBfpw+(3nDD24{xzJgtm9+GKauB>Vn8Ke8U@76e3iW8>pSuSN-FVYz+~*uT_eO-
zCi!0fAW5hiHAuz?G3t(xl5y-7r1l5IkTr1<^u7S5%z<cxL6Su(jv5g|)00>T8NL!Q
zOwzVMCWTM;p*?ZX<4CORXIKydQ^gXzLO)Q?0(A#QJp&dPIzh%u35XZKX*(WS>L!wf
zm{eg|c?63MtlE{q8~)@*v(=dOvr&2M@}aB$t&%I7x(Ik~QLV>oNA6f=wf&M6?FYVo
z1d?ThVla|Dur$@VR<D7Ah)C%eJN`u(M4kyR%;M|!H3heFwr?&xaHR3%t@<67rvEg4
z{74Ic(=Y~{{w-$2`Os(%g+2o?Y%tC^H?;NY*7M4yZ7;gHuzcx?!srA}=`n!*2<>t9
zo?A9{{eu@Q)GOHu`^+<5sUUf3lu7ERO!YFl!_RD#sGPx6qed%w1ub?P0tSk}7Wyog
zQYCtI#^UZjN&Xa)aXb)k+~Ep%l>B|E>~!0NKb8FBgi4NoY6K9o{>jo;aK*@1WW9v(
zub^-Z@3&{;vCn^eA-?<x+J8OQ@3;UZbN{5{Pb7tHwSgkxGeqi1#|4N={vCoKjRX|2
zQ5o6Mwn9SfC0gWZ-~lrc$Cm<ud2K?XkN_$IXw)%~2Zk#QGf{-e-W<GKMHK;p3IQSq
zDmHxFA=8Bz^0Xi)IdN^nA_2qBBAA=QmdpC^+TXw4t}Y#~_wv!JUOaU5-;{F&Bk9hc
z?MRB}<F%#cw3zw0nJb$6f3)l`A8mo#<PS}o0CjOgz6uZ#XJG^u(NZM?QDDG;iKnI^
z9y%t&Qr5KRqWym{RbObOv;Q=nX`}_fX%zHfWZ4FWoxzKZKwxYlW12b1VcMLCSPY(;
z-HvW{FtJ{UX4TJ)XUAV|S;i^aXK1Z|DYIjuVqN_0AeeVEylC#(^m^{`91je^h1y9c
zRg$MgKGqtEzHQo(RW;XCKMeqd60n{M0h))m=l#U#BE<mB`!$)899@6p3*7GuN~VHj
zex8sjQO1&R&Ghf~_^10(TlO^MpDgrA*8OT`JbkaTHB<gPN^htxOkd)~Kzi1%E=fTU
zU-Xioq~q^05sFoJ`Z~s`JB_?}{6M1!bzF438Zk(=6DpU$P?Eu)8hN;ZMC3;}76D%&
zr2`q`sRD@#EKPbGEiv?#faySDs<#B+r~pej$Qq3VGRg**2b>n>spB#NfV*)qKo8Ph
zgUn%B1%%TxIQzyiyz;+aYA;P6udXoG{PY!r*Z*~;P%@qqVqna@34#cR8pl2@9Tv_`
zGwi=(5zKLfBr1eqYG=T<rjp1XngmF@5-eEw;gc@>z%XGnj~#A2@wt$0n?@SXFwz3x
zG>PPct~Xb<2aUcLn^7o6*JU^?LLxJqv4AtV#3h%U4KTjrg0kJLE%`%i>@7pZ-kdgy
zJC#rXt@STvHVq9}SAL&GEgPYMb2h)ll=dJGB69ho<Sl7yEsP3>v4WxZY!2Zt8qcca
z&#5Tr1tu~;k>qf3&Qx=L>TH#yT_`8KI+V;0`)KK#FGbT2RZ^sRIl<wi7D(iD3i_9A
z*q_UYk$Irjjw_cxBGog_BgVPpoC(I6qzjKViV3OgX*&Yq?!J@hJGGs%C|2;kCJgEw
z0h(=}JgzQ2xZV@scZ`CRNsuZMl6?kxj6pWWK?tEqjZ_3M7{0{e2>7N?d78IPi$wf8
z6MYQ1oW$`Em>Mp_=Vh?vJkZQ3g@B-OK**IlFdYYd<%HIFv2T8)`3+Qza5InK_;FnD
z>h-w(=g)KIW~Qqv>@(hS<?s!EJ<wBmPWJ{pRh@dQDVh)Zyy!gmok>B^zaUN|*#oQb
zM%N4PODeQD4<)Ki8@D~-icHpasyP11ndbDOzQ@yLIG4t=6=?x*n#D-2f3z57H)c%N
zA6jp5CVb9JQwh?ftihn6HRITJ`4AuI3H)48UVBDq^<JD(Mn8mT2;?%W3w`#r-(}Jm
z@m%Sjz41+EwlEGa^uY{68U2t#%NXF`V-o%6G8hG&s3`f%9topgVucM16AwVO)7lGw
z5NehDiFwB)CI!RyJm7es4Ro3Wi?>OCEWS|Tpb3Bp>t8|a3E?m4%#(!PHM395fZEFh
z+DTqNa}DQru1k0W-FpCZqVJ3q+Qu?n8wLqQ2&LfaFhZu(0f{T2;sK~pfc{G7DeNi&
z2<0GNKqHid4&Z^1h=DYZr$f^6N>%g-iFE@Ec1B>5Gfb^0BVa}FMi#P_1DZDAo7x?Z
zlE0e8sFSTn1gbDdkO11am_vB%7_R%dZMf*h4Y{eQW7Pq3?OQGzx#kahiiKz0C@4wO
zGmT|$Ud(?!S16c|-?bRFW;`%E1DIK%{2`MQ5RmFZ7dRQi;Ex>@cycxnWFIi=9sX3)
zBc{daK+a9$*^aaTI87q?FrO%nUcg;$R(g$aU=%#^8p@=F+Bfx)!hHD1p>Lyu3oh$3
z<+3lf6t@0WrBKk2=?feMNQ{0Qd&ugyulbZMt&R0&t-fvDP3Az~X3_FIaFc6dA9?xr
zGGIiaZ#Q7~#YvJn{}SNz10xw=+)7w<v3xs50-|^r|3tuWYZI6wnV%<7_hNTHmGCL?
zYlEM#8%9r<_6fs1*7+woaa{;#*k5!P1#Jp?xA6aI3xeVzA@LAs7XgY6(Yb%cGl&U<
z$$UNG0wmvuK2vbKIxloRC4be##>Y>^k}?reg^%z^B@i*?5kN*kKO~8u+ATn94Le>5
z7Gu~jOp^?ONsEer5&~HSQw0F2158DdqpCrjqlkmi%3T^qgvo`DNi87&ht0$J<M^px
zzff#FXT+JCS*Q-M_3yfD<<;-ZWXLl3*+sZ$J0HRJ$KB~~@{EbOsSpPrsl#vzklZ9A
zgSgP6W9DjoFzo<<ba2~aE?j9l5t>iVxJMs&)($d_(=O5i;53S2!C`B%V{ecxAERqb
zp6PEuM6O!5N*}wlY()weJW~Q$(_QrXb!Ms1@CUu2^LO@dI2Wgg(T`;oSa0Uq_h(SK
zs@9yZZXSP;J+WdBYMuwfq|Tq<eF>w?73r^XrbKom+0sWw3KCX7kj((2<oXx;;;Xs6
zLeZ(8mCD5JP8YbdNisj3{HgO-=01ASo0br&xw(wVezE(WBH5|jB_#RyD_s3)h62jr
zPe(G_SKT`$!Kc{-ck9!iE(uV!`tiS$EpjIy1YKr9svw9UG$Al1-BAHRU2A;Inv@@}
z4UP?q)brCL?)IWPFJ5zei%)KWdJjT!sMOFqmc;rYDv$)G9gdlyG9tGC)QgZxA)twY
zs$16kft0T@6#*=wV!!|+Ha!&w(g5=^oYm*~FaGKEd}2-BnV)J@N1`o%ym$1X>)YFq
zp5>TwXCL#?sy5xc{qXGzfJLIn_`OAriAn;f&z}LN;Qt>U@WO(VHEYr2#}?iBhI)O{
z{y&YA5NQE$8U%G86l=<(EBa8mOoR=0;@qq$Gc6$v8gSe3hhJWU<c5KOjbiAmBF?{V
z0Pb8pJiol>gZ-tlk_0~25~`EQ_UDF$Ui+$F$ji}RY}Dtg;{$u`4Qp=TH8+O+Ny5h&
zj3QS?KZWfQ#R+ZOt5)_pfYDDaszk3%2DF;=7pu3(;6|OFV<B)`U1DF0DHc4*;93gq
zk6rV~=AE|t5owS#|B1_O!oZL9_DNT*_Tosj1W4$vHg<oD<$kpJFF^?sM4)Z#)1CYi
zE<kd?$w(k6D!NdCgdnKA_~ZNRxCN37P)h<;*H1I}pi9Emg$StPs4Z!X#{q(Al>oU6
z`V!v`fV+g=hY(3!gwbN5o*cuPVTM{Ha4ctHZlHvySp;fDF!Bkgn_#342&rq1_47o&
zpn^pEHEXg)#9)&Bazh{=F5n%1emyVuOM7vlRbR#Sd|}(*&h=ETJX;<C$uwm-s4h1}
z?IB@j%zM5+Cq#qxO2p}0olh!axEhgIRtAqua~xYVkh5*fc!xhnw!f#YA}5XKI?@8*
zG>GKGXLD)Q%PpVtQbmO0=Vg^H%g7bA6p2}2yZ~nQ0-^z47*yTdB|p2)tPJ~pu{pT&
zis8NQ&>P1(q{0_gNK`VHTvOm1|5wvptoD{R+1u9N%&V<H6-ngnPaUX{2kZd`X9Li)
zUUyrnleM5c{$&Pm42G=I`?FYTPtre$Wy$bh3%I+^u;g{-{fRD~WPMZsBpQE(7|={S
zCeUf<U3bz?XZR<+|FjG+(%b#WTK|NZejBDZ!62v0F)$e?Jl*i8yFiF_e=+O7V->9K
zQ|~cuZzGHm48;xb;(|qa1a!&rVt$(%14Nzef%KI)5Ht=UGUUJez<p|FFBD2b>Iqi>
zLq&%1L5Af>;&8>p>~Ik>D1x^L4ah+%B)|efV$&OtaWTM@WUzyp&?Z8|un;V{7|1vA
zo)27aa;I)K8`9sNz5F|)r4>c;2;k4c$70g4FEr}mLbUiTWGue_@#S#xpbIl&X}M@3
z<s^owPsg3Xz54<oqO2pCH@)ah?W6m6A^zp1@%)Um064`%yU<CDlq>cb&Z>6?)mpgm
zg0kJSnq1g8XW3rBEP^pB7P^-eDT}ctgf)chn1^eAWu0BG9%*iHHvRFXE6=`CeVj?s
zmc39uijvj7=WXrb=X}}om+HC9O8cCxuj4JXsxIDmK;5##U<@(XXGrvJAwHy*sYND(
z>;od&;{pbU2!ce|i@j-F2^{ko?ym!fT9WkrDyfkho+ic-?5$buYSteoe=^chgunI}
zAaR53GWkgoaoq8@_4@jDf-c=Nef@px8xSYzj^R%--|xWs9Veh}```}upzRG1?+!@r
zvtuBXEDmA_U8!g9u|Gf}XVlL%9&@N-NRI=&xCjWyC%^~3<Vrj&hyxH4<2h6ju&Qie
zv=6EXIMiograuqi6~R1OAml*O{s7NX_PI>)0ZefEWkLezD-k!8n-hm&+VB^e7#|XN
z*B@PPwu1Q(Vb9p^^7a4HldG8GSwaGcV-SWBX8qZ3&=$$r1%}7&@qkQLnKY6GGb4Rz
zV8RF(+#1KdPr1U*7~GY!U$6R$Dg2+tNsY7sIK?AL(dP_ocu6nvWBHut?t0}22XBHq
zWJg*CcpiWqUwQzZgAC_j7P1IK6C17pE`C+fUOYP4+*3T~tJkhM|CRY%MlU>}|DM-{
zfcE$=WVQ_V7<+FGgR0M2!8~W{8_a-}c_<<-OoK-pTv*^ng~1$`=-a9%BZ|aEML-|m
z=XA2;)SyK`EdXYHiAk5?sV2kzCa~;j8{8J@`@4*N^fI50(o1jE)1*IbwnIAq7zH2#
zn}W|fV}K6n58#Q<fA=DvgaeRx10;~Wy2Ncbg(@T{Att%MTQV4*ul9Ax&ViU@7!ntu
z^H_-lP=D3m(@bA@WNJgpev&M%mkQClMeh;NMnOR!=^_I13LtbtnISRd5wJf3Y%UN9
zuKW~eSHQYHhJjvSSx6il%3!j$0O3**P*xH_=4zh+>6^N8XkWCguA1+taex7nJMbs#
z*t)fX|Mt6A*^7%u>P0zm?cUy(|7%~NSGxs1OCOKN8k6^h!e8*ito`V{OMq2`G;JZJ
z2}bUJE{EY6I6BL*Z{8D5MxZIDzvYofK-&MOaS|gf08YV3(lK@Dl%&T>{n@ihoBqtJ
zR{bq6?y(2YG*riB<jR0mQi)$OO8!&~^h2^9O$ZC7z<b9KwdV1npC7^{*Yw!6<Fn0O
zxidfUs&!X=aO2AHa<cyP`B@0)t~qP1$o28dZ(&hb@<T(Mv-wS?;S9nHJ#d=)6WnYt
zunGeok?7wl)l`I%H$nSh8St`dcCFA6BDZ;hVcuhyYys1r#4NG<{Y2hJoxUanCaZkO
zFQ2;J_WqifO`mkin*ANm_S@Zg$M~n+$tT@=+|{?ueBxJKDLJ~l{X0ay1kz6wA>G8l
z?nED}4Z1aEWLA^hpPE_3g-ZOpnzInkujzUFXmbK+ypa$C>HHDjK^H!;>5(b~^hkit
z4<pH7#PO8?I2ZvLuBRMIRtaGJ07sz+Q~?|svN2Q4BWjj_R!OM?q-(47xn!afQ8!J>
z096FU;{YlGqy;HBOv8bHcpm3pyb?e6&b`k3{IPl;KjWrL`d<C1;hq7DCM=v$XU<OQ
z7+|(FTWg8xx3X5w-uG}dgjWR5kc)&P5L$?u42E!U|51T?H-cqGs0C9$O5V|Fq;aw$
zEdWl%AS*aEtCz@FCaxMe_r1BGFqX{);aRU;$>G=42aYfuFe4An$ZnKS0QwNh0jw7=
z%8-!@$pWzc?TErzT>szK;L__Wc5Q09InLJq{3}-6aPYNfUG>)WqhtA`5YP{=z)V#T
z{N!YVI{DjXkI`>l{Yjf;&S-kByKUX8&0=94T-O8VG;P+6wNc_=LlS*wN!S&p5*4Aw
zQ2}ssdeyC3V;kG@5;L9Tdo<f$@+6jBhNe%%zK)lRBD~S<iR70c0LeC6N`!RIl399e
z^(!KU=EohrX7qP&_v<X|Nnm}Q@Z0cytPf8%)9G!0@pUn=FfraaVRKC)3Q#}q*aDxR
z98fn(kc!w@FrM`%W<z=uAQ5=F2q1R8hW%sJ0R4<O6^UD*Ahm$@K%nzUI}w6FU@-zd
z=Rvs!Doy~nLQ&{d-895t+7W6TIJm;XT#>d17J(L-1vy}z4H;Of)7OMV12Qr@=Te<d
zLl*(uL2!5$*Sum2UiGH!&eYtIdY-L*={cnvKiFF=bAmkdyZGe2kExSij%L4{&*gFO
ziF!CQ4e(+g$Ph?Gj*z}7LY~JD57HiroFk3qTs53Me9{gejWps&3xHEFRO(Yr9>WzY
z&%JR&Zp}Nx+2#60Z<sK9R{0166O3F%3`+JHy(A7LaBhN0n;U!(;1$5^feaRbTn=pP
z97JpZFZuO#c<I|F>~MLq8BOuR7P0d~uUK*Y<2P-1(VJHHj+7mnOoga-iVbDj8Roex
z2IB30MvnDc*S^nTm20c5`R0a+YwXeCv(fNdFev%QZo0JE*BAnNcQF)3bYi0GLx;i3
z(*im@UspswC1uk@wuTQZwHT@%)4KlH&tH-K)W0<npsniTg*kD8jM_8uB&o)UHA%2)
z1VG;>Gj*LjJM(ucEaL7uffN$>pCaY~bRYml>}bmZ6WO2U3MAWsVh6zFb?WjAh?g03
zcmeSSLM2s<kFPBmOvV8|v}JJoJk;}zZ?8y@k>*0gd;r??E0jk-s8t1XA@F$*Sdh91
zP#!-5$QcqFMj3oVV%cFhu*$@I!Hx@noLV5nTC_r!Mger8N{)lk%0?;#gwZaHC^#(m
zM`!W6x9-73m#lD(&rH?xV)I+hDqa7cLN3b`>+z($GxcN6_{Z-s9gc-XhDYydftQ9M
zI2jxnFqnl!w}6L_$S{}5@{lilx9Tl5^-Gf4|D<v9A}s(;v7q(68tIj|dhI!vUsT!s
znP{q6-FbQ0+;Vdf0U6yC@&G3{8`?xh^I(GibCd|U_GPbd#`*!H2xb)^{3*z64~((%
z5gINo`q?48<paCybz4K>%}&*EL=J6mw|w~8(shSlI&$5|UOal?n|JnaIeSfI)zCnp
z&&k>(mhUbGp3R6q)VYcN%(XvXVC&vhYt2_DhAy(#t-2Zw&sRUw+x-Bez+j93<((3h
zwc3?WtzpjquBF}jv_xDdJVp2mfriIWBV!+exs|3rUh^BX+}n$NVgeu~bArBOZGT&K
zr{#1VNImh_S1N#Rr#=O<>sh-V6U6g%UFV&k?<YxM+rz)xD4=U(&~f`?ClUqYbEp$!
z*H%I05(G}%&-j((2@=ru2k3fCr2?R&Pj<gC5}+l6F%m$^hpzKO7sU+_5L6_QOp-GG
zu>kl&3#d!3{2OVPLQ^vIIl%f+hNc7-bHKh;2IjMb1QZ~e1?>~i%z*he2v#RjpnhTX
z_k;*A5f=mG4H=jSr|0p@zi~A-t<Tvr^E34xvGaePRk`wY+Ntp5#$qsiQ1I5AkOk+?
z?;QiOWrWg%w-my(@_1;<5R*#?^BEfrG5f{3N4kh~0FcJXjr1LL3Pm#W&tyzoy>|EY
zd$YSgXU_V~v2~Go-Cu3z$WDW0dpWncBKq;nI0P-X$0#IQsmlk|8WLlAR!I36m|TPu
zi;!U*+@1jE1q8ECz!DAGfs3bZU%=yEn-&lMsO}#*BJ6r-+L6hDtPNqCVZ_8_lT{y_
z@sEA_XzR%@99=#%_w1epoeleQS6xxz7k;hLnyvN~*E;8Jdn>O~64E1Wo%}O^y@DaX
zMPg_dgBxEjZKjOo8is(d7&r+e3{nK>t~&&e&3yDMz0Ju>iZANUyCC%hqF2Y(X5e=*
z_ti3;WX*1;i`J03?#C(d>!m&VcewKX@4)ii<A7v*(7v8}`ZjSdE&>uh0J_kCt`3z7
z0CoS#aqBC)&a-+R+KPxqJ;b3P4+Lr{=z9|MGYNw>DN<Q!13bf^Hco2eJ9QxwJcBcs
zrUY41m?mHv45m8Y;0|Sd+rSzNxWN%>P(`FbQ$oowpID5rZ%U$Ia`ewc*swoBo?MrV
zI+)c2az0?wzauc}<p~HOd`g`V(Kb&aOa3T~VDvbc3oX3;E&n1G79GDgpDP@Y|9;lJ
zGq>GCgDouxedb{r9DDm-{vkVD`xcMSHb3-*YwdNtM-kq35F%QIxBkfi+<(jnhbqE6
z;C*&{-`rEvT7sJ*0BM}ONDF{dr0Y*+z?EX2U$OF>x9-ku{wrhJtB<c|{K~)BX*zw&
zs>3i!WiBHhEHeU_eTw)eu@;bd;yY=tJV`ur0$dLQVn0AdK)4L)*T9T^7}?dd-34Ot
zC`_VbNe{KjmN@)iP3*s~E}nR>6&^myuw1jb>sodoE!)i7kdE&j^&WZK{qwi}lNb20
zuuY!y1wWPSIcM}5S3eqfjizn&m=|w<D|cBBkEmre2+F6V!r+Vn&U%T_vlv2${9~9(
zR1FR+Q!zjmzm&*`Hx?HMO8Q5HzAlNrqz~qH-qp`YeIGB@(TScORCn!qG(sBw#DABy
zJ7(44Q^Yg&#EeH>9~S_Oajwi8+oZlEX?Ns(Dp4e6KygA>(0u}CbTj$260&24r`mgc
z-0jeLzRNH#E&%8@wCRZcr<1n6AtiY#2;xMqeoiV=y3o%|BC1Gmlff{hQdSTsWl}Lf
zUk&v$`Y|#lgP#G`84@=;B*CQZiUKw`vRvT4X^F`Npa5WaQef><64_=8%xnOT51#b^
zD}*#?rmh=lvKZDwosO1~(OAL@U=J1W_>_-ddHcsgDf_vTMg0Nq6B`aLJ~4MPihyK|
z@A{rCn^$Kpe|Wy;Ee(z_=iUEpGcN`%{^282`0o9UW^cLN!<;AHf6wd}-_`Pi<fTa?
zjguB>0q_D2-K}*}==RZ7!xs<ieE%pLeT|%~);I0R@yp-0&2)-O2!#c+cK|YMaavy|
zX@Na`BC~P&*o4|5M+E>)1R~|GPGBn_9|h!5AX<bBYLMQN8X2(cda%qeq~CyS&4Gz!
za9I;-kXx0g&U4JqnqvBBDE2?l6nES<=N~=J!d%bb;A8HsS3WR*>(@{2KJ$3HUv^_(
zKfnH78DU6-hPZggTe+PbLn{n9tzA{g-;~IVa@cDGM$Q7P9)=cmyf#OJ3Ct2KZ+8;E
zOumwzJ9Yl_bDg)_N<0yxFYyc0an5TO0C7T%-So)Sj}ne@+Up|F={wUT1VzYelmFr^
zeKZdzk$Q|2=(WBlGWX-Lfs*X09rFnSz_|K7jU05`{>W-rPdH-VeDx+sMg}Uq>-U=a
zv`G926p>G#29@;nInv3V&;UAr<h-b$DXl!De-rg2KDSf|=nGScnGgU@-9IP(24K*I
zTp3Mp+hnBh!zNqeWjO;GArunhK&a8c-IKsVRU#KitT+x#9FCA}y5N=zBjW<uKotRm
z1n83y&tP<Q1=eM35O_Z96@B8)d#CZ9|NiMPS6JalWAXO8svmjLLTfHKIh{CD1l?_w
z%YM6r&A(G^z<2#1%-G5-is$ngCo-mPJKXxl6;st|a+OY#e;Ow}(gNTG7>OHS@{us!
zJCNHmu=Vv@3me`it5FZH*XkF(e8|4w7sen#e&cx<1EY|l#bH(;Ei$&}U~CXz69BjA
zbCBy#Yi-{~NkM<m9|Po5fSd+`c_3&g2SFM7kgNc1SHLau1mF<Ls5VptHu^v{LO0Gp
zHX2KI__5zV5Ps#eE)Prc@mrTZvZvuMhbQTbsB=-st<LosFT2f(j2+FE=bp9c4d&3m
zHn^S-X&5|Ffn|mnGOK~Xvw&<LQzkyJ0M`H}J*hYSkqFFSiYuV3T3Kx36Ys8935}9|
z{2C-<fH)m@x$t!ic)E4_Q~<Q0f`rI-!Ztr$0O&5hTk9XY#U;;NjRN91d@RSL%pB?T
z-!1^?mzB9qyJ+Yf8#Tr4Vu0+D+i$H7>Y(IsUBY-}J`~?XC3}_dV~0pGR-$5n@;<$#
z$mCyrm8zJc0)UVJmGmt=KA_tX5<tdF78M6{QH215X)#VkfnkwH4#PGRc&VeonNV`%
z<3&P0I7X{;8468_@kxP|R0OylOv{In^}%TrU=k8QZ&2-pOelqnS(oaZ#wbY;1h7{O
zh%bNbG5!bd|C&EEuqxM(Pkr>h=BM5?UtfrxITE1XvpGA<)|Ym_s$y*Vbtx+2j4@jn
zjrnS{?{AMZ?)by`28m5iW}%!$8l6ZBfEQ3CAN$FN!TQ0G^7hKco7ZR8|61NFt#y|c
z-0^iBSG;wtIewmi-<ScfjDq*{08s-V(;s`K(m?|yfUQ#GKO)7^-g$yylipu{A3%yp
zA#ofK$H0PVAZ!7F8&kZMjw{*rq7#T=2(lFh2vg^JR8R{Qq}!|(!ngm_VRx!kEIl55
zZuQanV@FTc2Wi$BFb160eBKF**VdcM%`Fo*+N;Md67?Y9hG8HyBtkA>4RK_~B?fnL
z<i_;MUfPEcngT~%0iTkjK}CRG1uUruh_|$=+^iBmeWllcwg&2>*G_`^b)mu_f%=n$
zJqbLorD$=9(ACAOW|UH5{Jl!bN*c&$8BqKDw&DBax$EoHNmK<x;?+-!Ws+IHJ}Axa
z?}Gnz5zws&=)A)cv_TQzH1ki1J39l8_y`g*eSAsK097i)1px5@DDkW7IH$K8j0{2i
zYD6Fu0${~xKs*XyhDHGrJ^(iur}vOegnlXlY>Df$q?hOFDHfPOEdp*mrr(}Db%BZF
z5~BwqWTQwG0cOSp%Mc%ckN_ftXojcez0f-BgwjCgFjB64R0RCpKi`TEfBY_g#n7sP
z$DjJholBqm>Dk)6IGHo~O13wXH+%aSH!Uw(o}X(@*QuUvBQ9yA@hk)t(P_K@BIyEX
z-oLhYw6e9l{*~kQnqRZR;)FZd@(22t>X*ND$l3L>VVH#)eAk6Byap_nQQZx9NM~Gz
z0Lk=7@81KU1x6d|MIMZi9chdJsBA(`F3SK2@^>L+1B{$qLKiY<fRTGkZ2rQiP4*(l
zrb}OmAt&H*NZ$Z!8RXvz5wy?}eQ1W9Qy+G66ev0gk-vMdb>(klg7USE=3IU4*hS8o
z@rzM&eM&c^08<J!vyUUQ0_fic6i2juueujQV9J#sTVNuoB^JHP$S%&kbRTLYK+jn_
z3+rS^bNi%>ZnNm)5kPWXTshD_A8l(B+YTon3!yQZVc%ZRlXT}gxieY>6cYk<VonMU
zRX`|qTerE-iMLb5M|{5YcX1-`()(-Y1`SHI%Yfv5+7`i2GYwEz$I`(VQb>MBojg^=
z#MP5}c&>?yq=X<>9}T3aM^#e?x(#^%$9n&c?;RB&<Y&ma^0r_S_fj5bz)Ni+^l>yK
zN7)kCJ_!8iI4un1I65R?x*P+C85~zHbTWxRsYVX*i^lc)U7b%g7D&hrw2jY1cytMG
zdCf(boUGa3{N91;X#biwoZ0)5!?y$<|1FOeNW~i_pXvK}v9;hWV&V9S*QT9+8qaQ|
z1;Fz>I{t1F6P2OzuF8&|8#7kDLwNSk@_f@B?Vqn+{MtVIf|spua^vKv)<l>s!yFn@
z-KmsWFr%Or)u={?CGck*jAr~Q>DM7eQ9$P6f77RPl>@Vom;>YjctrF6MW9&&^J9bi
zP^yJ1vL(S9Ay5w?n*!36TzV2jH!!3rY}-V=mcw6vt}c!(WlX1Bf28WpOwu!ZX3(a#
z`R%bUxHu<Q|4!3esP~mOI9txR0abGDA&8!k4C3+?I5I;(|7MBal?40i)MHt|5f7-*
zN?TLw^ff(9{~jeFH3o?1`m``eGx*g3DB7g%=qYiK{cXn(De>Z`Iesj=qucA!Ac6PW
zM1qb<kKXhbzwUY#AHyV+B{kfwl>u!&UdJRz-FFvffWD8%_sMk%yy*4=Q1=n@6yp2S
z2tlWyP-=ztS?_eds>q-_R67-7<wAUB+OMxZY^s2ghl-I1reJ>hImraoD-st1L_(yO
zNYxPJz)1W7f|@AnQw|5ioeaow;3`wV14lIiR^))ie&DfL30`J6GN#E1eMcCamiAY$
zEkb$pOQ&ilDgxBs1dTc3gNqW$fJ8W5$FKd;b(op?xbx7H^VPocmfze`deN<SyI=VR
zl?l&0;-cw<Yo06FY#OI?q$7amc_dxHj{a@uoLxHabKEP8G?y2fBLi-D-Zf?WlADUW
zyoMO-l;H+p<Od*3TX%Adx_!!M4a(AS#-Q#;>;A#A;F4%m79<=nNm~IkF&w%?rlkOV
z4d=m{(?GKdkd8jtXX{FcmVm5Fpe7;f0#U<<Uk|{2AX_S+;pcGs12+EoHt9dQ;5W;~
zV*dhv@XZg*edEK=4BpfUyvI3fUB7w7qkd5LE#719J@XfM#3~3#Y|goEL~Rad1w(NM
zFtVKt;<(b2+m^tz4;*jl`E*DNew1uYZ<I~ccnZEYq!3h45j>rAysEKpL;Cun6Ta$H
z+w#8zvX8xUlsA83suPa~NY<C|16U0Aw|}2T0czn-yC7&M>GnB{;eYKBpzbd|F8#HA
z+it&ruHqws{j~=Gk>X+mA^ur=<k0n@ksOM0os40B-O1~YUX2GRiPJeUK-HjnP1Mgw
z8c4H$Qwr0OY7GUATeL!e$b*_VsPeSp1JL&|C%^<1ZrrpOB1_^@6S&M`ptm7)G&uwK
z;WTi(3gjb+%DlkDQHIKq2u>6sYeldOAM_?=JW$026#!~+ar{ClK1=*03AHhL49rT7
zxBcoz#Bwzw3fa8*WbmoYPcGfLpNar2{7fT_7gnSNzzZPxZz!+daDL^=$J`p4{gsA)
z%`5xtbFZ;^X?4J9#c5=%g;CzjndOi|9YVN}ScVK20I>|FOxm?ZOZ)XF!&$unP)Y}k
z`~a8}n*vb*KyK@GFk=7Lr@-7A;QD~;K`pi?2bQ|fiN6Vmri8ofLe@Owcm}gx3Ez0c
z#<w3d!>4A9P-cySl@HKhhkx(!rCWZd=F-F#KV|`-lYhZp*E?w4{HTolo+xDEg6%(N
z+PPKmJP*?15NgKE;S6yUHcJei#Z-MmWI#$HOA&CWMqMYZ@=eypYlxqA0}!*H2!GO$
z#BtQnKNSH<&Q*lB_*p3AfVxzbgt?a7b^GnBpDWh9w$DxEemaY4W`7KSC)|N#Uw|^}
z>m>f9IB0*L6aeiRe%$%TV}WGG-`0)jwZ5HMze;sUHNs;Q;>4ms=f$M*h~GnPGD3VF
zln;Pr^eY|&{aY0VMD)|AM!gMVxgewZOuY?h_X1PIOG@;#DNi-lBomAa2pY}M?@$3i
zBtg>xEDmm4fG~l*Hp9ha21vC8{kr71Whw$qrJO*bZx$GTN}xoZJ5nNRhOi9}oRk5a
zAclDVvOXE~RllO~xeH~8OrL`Xk1ybD|KneUZ4U9A6D;lv|7FYmg@@-)rbj>;X*^ev
zjsTv=LCHU7W%=gfSs$#|Jb&XBJAB6n&UZ>{42Y-<@(U+Vf6g69u>=+zg&@<Os0xTG
zSVZ_deGr>!PRcq$ZAfl_aZ4`&qMyrU#RCA#sSh$W9uPIi))bi6R6ecnJfImu)+4=*
zg)9J?K-A*!8UY+>!IdR^?p}_6y(bKhED4ly8K*o*rNq=%k9ZIK%8}aRj|I<Qt64I0
zb?iZ_&%XAnh|u5iLigN_Z?f~bRj852zhNMvB*Y06;mEE92DdU8jwbyPZN4EGj#gs=
zpX&1TraG1U$){iCMm@=I=iUUK*RvG$A2o_PE$Za0{*_1q;u$+-zP1{mizq<IbIhfW
zzs5;7f!mYB9RH4110)u|UA2?CU1IecFZ78!{DijG8C7(=0or>75(XbVetZ%X0-y+T
z3WXQR3SqSZI(Z81nLt}I*jZGh<_x-kRUCu}f|(>kj3tYjU8oBYwMIC8ZK-HW&O_Y&
z$7+40CZrKfLLN}JB%dG2@GSrhNL)cCP7){?0_P1fe0xfu#W>~$gj%u7nhau=Oq@7!
z7K1H(Wy-@?2*x6X1~4f_l#B$lsWnVkaHm?>HZq9c_?c_?|MP*bgr+$*w9dTo-y5an
z3#Y0_{d8uZ#tSXd0^oTX$%jdQW?;;ay?aewt^f3Io$r)3^}<`qAY%n!;Za158L(gu
zhN!7eURo=wKD6R)PV1=*)d|z5DKXv^;Y;bRENF{13yf^>(1KJSqvVy|gmmWsx2_kp
z(@dQ@|3(D1EEPXc);WBl5lDeTu82Dyvhh#fb;ScyVVKS5azn!sEgb&T;ozzFAFe)e
zXSLOcr`|tqx1`UBWoB7l=Gyn0qO`l}&ewOXd8s`(xDB<2Uht!q>XFX6!jT;p7}&;O
z7YulzP_BMN-8!@+;pwrxp8G2{Kb^UFagOAInBeUKpiBFoT#`iGZpu4z06}AbZe$>S
zO*#EU9bL>1XeUh7M0ezVZ3H1c9=+wSLk?64H|7AGVE3DJ=3Pl%%L5Z7K<BtSCPncK
zx;<iuSK+D`iV~vg*A+8C6&6YIPGpJdFk>^Ic99Vm6!f@lLSSN1tjdX`ZqO`CLSQ_m
zl6*2%SL%Uy#G>t!_4y$qCb~aDR0L<7Y=z0t_ZISKkP=sA4b&omL5pK&A8_jo`8sgS
z3<(%6FdQ)0vqWRDkhd5dZoo7Qa6$s;H78apIRz<#AQeNAI){eHz&%>W)w?$1=qr}Z
zzxd?$>MMFy?OtnL_s7ebkG!MhDL099cAv%zCei}nc^)>;4h2DE_vE>#hy?_9?gR4{
z5V1Nq3t=dDKTb|<!<BfjOG#hhrF1dD;;#xnrSHiRkbAmFkcmT!tB?X2ECU`9{ybd(
zsN^pIO8$!yqR!wq1Z>lQCoA~-FG+my?$DJPr!X`S+4Iq{4?R_X<PWA=M~}1!IZ&xd
z_oL4gDjmpP^Tr%o^@~fb$@;qCz0UfH%P`;cAxy4Ge?%rPF=R$0dN%<D()ve2llcG~
ztr3u+GYwh$MoQ05>w9V6y@vQz@>eK8$G}Gm+vB-#+d7w`1Fx&R-L17(KTgbZRD$H%
z0w^KFbuHdex9OPhB#GXTj4K*IYzwSz8+ZLGxwn(OO4c2Ns6^+Vs1EcCpl$Hlg+n4~
zNH_~^`5)I3#V%*UqyUKDYHi=6WDRuk@A&o!5m22Mt)(O?poag$xZ6*Psn|PN9flKo
z36PXAxdBxL#5*NFfLLZpb%SMcGOpxiBo*|3dqAEAAugwc9|5a!91Fby4=$2(H3wEo
z$bg}rwiPasUxG=}RoI3J%M8Iqpr9F|fijUe1sWO|VT79*@QzmTvsdrMzN2%_mu`Qu
zInlG}m)6=>-u969xlcW#H+C9nJjan10MGMi1l1!V@A(I3TlmaBK7rT0v6tqi9D$>H
zvWSd#NRuyJfJd=!J@Lh2moq8?sOz^(NZVAt>d4q&nWQiv0X8*yf!da4a9e$_!mF#~
zF9S;cL7e;ru%x?xBKl<=3;Sow_~2(k9GJ8HQeUpnkjHL&xPJG~9<1$q)K^e{f@Y{P
z<r$m_oz#Ykm+dJSJ3d@*&DIA?>+M}<yc|`J;9IV>`-EQ*A94&RZvrYKTy2`8#ABJj
z;kv|9QzsPF`BM(1ZnERu(}C+%(vSJroowGmzLj;N;^yg0r%riSV$?Z3w)gEK0+O^Z
z*}JE26nD9?EKV=|=`i;R)rlwRNpe-7Lc17<A1BGUNk>n-0)0H4&Oa^|)D1gx{dVyp
zh&)Im_YRs76A3km;l%DgCPUJ((yTtYC#{I+GB8rcNpW$Zdw&h@6Tcxr59rv407#31
zTslFlBN6N#IV4^S@ljD?CT|5Qgy^lGl?*>roC=9cGr+tM*k0i3t$T1;&<YGpPXMgN
zP;nW8I&laX@`8aFG$z>&3bK15pTS6V|LSoJ!DUEA0S6NXf@2N*)@xsaClCLfeROKR
zIhecfldB8UTMyKK@NkL(r13(Dlmz%Z50e`>x3c%WL&lol@S63xb9ZL!y?YDhiWQ8P
zizd%yB^=uYBf)bl@ly~uEo9;J0Y-*B+5;c94Q6pj+W>P+@C+3MCWJww0pbME$bdGa
zkrI$r-FX1X`)UHHN?=w%EHMO&5po8{eaCw7ho1~Z2uBpl(m517_MZC}e)wmL&8o`$
zC+~w$r-I)6nJX&x^^f{))ijakm+ksR9`b$!QGmeU2x$3Cjv>1OC~p8(Y+_2kA5u|}
zVVLxQBQ(0829g?5>TwkTkmQ1zLat<JF{53?q&7Vs=;FXDlp$vB$H|DK?d`;`yKbd4
zS63#4zXWzqo>h`$W5S+RplSX=JHaPpKzh7nWYEP2NQwaM%-2x~7@QmeJ9`M)UjOki
zbjAk>`@gfdK=b)@@{R!yefWv{U-Dey)1kh^9{b81r`sMlaS9}LMNA4*w~0x8>Y@yn
zItzkSw@*6)oX#!=bs)-GSd$E?STIc@2P%Rg)ws&YickRCV(={BVh2hgKsE#!#_{zz
zfo4;}5e(%8VEBHC!U4eYB}yhk&XTZA35(O)f>sXs+R?JTT2Vk!)u=d>5u837kGGca
zrr-ZZ0ak)#dh`3kf7vqG*thsXE&{rx$NIY$?sG}w|2xtG-~|vpPRTyM_o9Cs!uYF$
zh7>mZu;ehmkdH*UEHT(8`S3_&53d9t8Z%HK1C-tnu=M6SWdR#_Ktz%!`jq70#FEb#
z;En}Bs6gz$s&X1-AX;wU@}cb2ssLMLkVFYs6v#@B$BvZo>z@n+H%*bth4w!G?knz@
zx$j$16#a)C1t%l<=bee%fb+_G5sEc|C&Np(|Gb&auR=5MAyo1QWQLMILtzcDYO6LQ
zB*mhck(luqo?6s;a;i>3O6=4=D&~Ke(NAJXqik#SpNAf=#Lr00v*Qj_omfiPn))ZZ
zwf2d%O`^9?*!M{`jf(<J5Y)fT{tx<m`LqHdA?|5tUbpJH<0nTvsnh~g%IRN@#}VrL
z?zw#zPavNAs}cPPl0l7dXupBD>sC)Rf#s8qza#xS!P+Td|0mo4l31#QpQr?MQ9wQb
zssK<53qAK&w~HMFjjZ0?5Gx7P_w*j7`_r2Q<K;qzcCw`9L3T`U@lA#+GQfF6Z=vCq
zFY)zxfcXr$5a^!<`tO&>9hI<rpk!%Z0ox!nLBNpo*F#hQdQa2k#J$O+49HKE@wIy&
z!ms?pC;fq*(VQP0|MDa5M{cP5%i@KeI7x94Dmd`OMDfCXMrk}f(gNUl9?6GD$tf6{
zOB*g-VXu5m$t>=6q`AV9tj7=$Oc}vsAu>kb=Cgqq9pHR?Ju_FG?O<f14U`xnqX0(Q
z_$nFugaC~Il#a@Pa5NGi>C=<u|CF5k5VSv6E`?y^3ADiB&q5jh)Ehl`=RbO4+Cx|_
z`MJa4eHY$w^uF(RAMeR}_VjUMn`J(ff6XT>ly7d-YxVOsyvZ3F+(k}*1d(X79t+5f
zab#CWOl)UxdH|Pz50iGu1CPv*&Oc`P#|VHn2@*ot{U&y`$xJ$yvZ)R>E(&51K&*UA
zKxp+3&6HQ<xi&*k&)X^5r=zo_udVq{@a^{IzP7!uCcec!0qw+{$OzS=Yra4m#6Lmb
z|1`gVu48#R8h{gui{u%^>ww$$P1_BX6_PFs==sOcy@vne1widNM@$rm5rD)(S>YlH
zLBi-11Zo=*eXl$ssl(^G2q0;oLIUEkfll^XyRRgIdVvtPv_OHj2^y5ZEww~QJ?`ZW
zu*>8MNI1|ExNBbf1LOol|CB`U{Xp)RgzZTbO{Sa%=`hG0!(>zl&~uK+3W8{d9k)z6
z_bfzlZ7<&c`7h$bU%S0IQkf{t`FFqj5%*vIBqE#a7f`xP{&pSHX1jXNzF;iB=K2uL
z>f^NsKl<q0lZU$uFVi?hA}s)30MTui<JcyOnY>-L3+28{X-$uvofyoPw+&h4t9y;?
z4l`n=^56G-H)jW8!$#ZQazhDYyNW7VMy3H{aR$O~=;UuQH4=bB#6W^(HQvf7doG1)
z?#~t&q6GtPO(19Y;eG!c;+CgEx3^amW{rnl{oSX2_=#r+D5MUNVI+6+uVnf9Kdm)q
z>YGNdwKuQ6jxQ0SL5%+x!nX%FGNZugHlQ*Zd;F7&o5Aqtj8ZQuoqwRG%F5@Tx_)J_
zOY`Y?QH>^2(g%C|T;dM4ExT{G=G{uX&Tt^{hgV&Byj8E0#A6O#yNi#XWlZSncIDHs
zelj}fE&vipzXR8|J^T}*f=d2$|A`%6;yM^VPEs7S^HZGcy9$8hy0*$7_995?6%7I;
z_PP3sgbS#yPDUxJJnAe^(#2JLT9cwcjR*9()d@ZxAt;Dncl|WG*9(Po$FDMUVrQWX
z355U{hAsf;ZJZ&QA8|c6aIOvPusHb*;elm=V|6M5fRd1?90Mx%1I|$(6H4TWFCsLL
zfJO=?jh2)OKua1m8lcxL(#6U$WL7%j9UuA#ZhQQ&KTsSk9QMC_#s0?EzVSlw2S{FZ
z(=>3+*!Az;z<2)9Qf*lXLvp9b@^4-I%9i_Q9@^J2j85ZJh_nEBfi42-4zk+q$z;ue
ze5tabJb1xcXYh@~R`Df9Xh1eXH^&7w?#`HJ|5OpqxPuTGm`l?T&1FdP!qrRH!7?0@
zR08DI))c^e0J$W=DEZF<xl9IM{ZRpb@fp|e?>BQZ&SSrM`{ZrE*KCon?&Nj`$p_~^
z_R{nEtcz~1wPxzW<?Z%4Ti(oTL8LVP#0Xc6{|cG?F!XH#hSqX~%EeVGRAAp6u-MX;
zz&@i{y)GEqD}LjSG$K9#T^Dz-df`tD-77c1II+jwZTq<@&3??Ri`Vq3xqsUuDDJ0K
zvLysvsoZr3|Ma<hauU1O2gm*b9Tr>%icrZY8Q;eOv_u}*_UK7+j~Xj<j{xFvMdBeK
zbZ6ft7V4i1A_S@h2JzbA#8)`s?zI4jKzG02lkvGq&X?-e6(2zVEJ^<HRw0ER@Gf(u
zq-f~O`;%lJO9<(0>1aeC*)B-Mf*K*H`)8aIKPNJPDgY!bgR267iUgMfXIc^$W(<|I
zZ(op#2$+k2JZ;A~0F>{RFsGo90Vke35CTBHMB1^K3IPVQy?a?zRRjy5(8p2l3GnJa
z`b*3&M`776IZp*2Uvsp1&!HDW5s(zFyM}gbygdJsN2Q#cyYct0a}GUx*uCw4Ki0pH
zt^MVv4}I*He6j#f<CKY$u#hE<=OVhj!IK3o$w#j5hnT6=!iT4h&3@+bdq4M~C%=2+
zCui=QIA~A*xjA4uJXdfY`A+12_FdCr?tu`d^bwW^fLsm;e6Sz_+yK&zz-Z?!b%^wp
z?DRbj;WAi4Vxi{X<G0kpV%Etu_{<mYn*QM*Q1Vw+uqXA|>JQ9<y`jIy*!y+Qt2GPO
zxOw)*SE5FYZ&HM*HLeUsfx#IxP+83}yt+e@qr`D|0azjzWSZAT8nR7Hc9aHRQUANQ
z>~-1S#x}fhGp+1-_3h*2+lKKw3w3lu*dg;J8}*bik22DUD+gtMlN>|mnA`uR&OaG9
zCk8<Y(BJmyPl|y~GEdY49X4X;qPGzyMMr`V#P6W?_3<`ng8Cy$``W-KDL#^20bL+S
z{2aSbg`_&7^A~dmbRqII1EZu!={^?;Dxr#-_}s-?4QXmc`>A4+hxYC0m}pCoeo8ut
zC7uB^De;9=ue~jRJ6+&AZbZ{A>?moXU|<3@1~euZ>YD(smz*#J>Y;=iNq8ZH7cfPM
z@grIZO_EZsc3uU-L_mrFX<>0zpyHMAzBjxIUQp$(6k>&O!#8@Jm09gD!JhZYznshS
za|bT?8+UQuzv8D?JLkM&v;ERv*pVAu3BMSXF6_(qDmKOQ`MIR=UyHN=cmWp!9S8c@
zUWZ^<Fw~l!yyNhp!+-vx@BYe%kK8`^ggpLXb0nKvY?l2`|IRTnzb_O<SQjGSCzLy&
zAAtEnZ}d}%UqX5UJYe7fN7$6G>>R#wXM{uZlAF1pd0+L8H!U@qB#P=JoRdiUbF3k|
z&${mGh{9YHn&R9|ujC;wA&f#nq(8;VcbKyIEv^t4U9Wey(Ad>5IgTy^Q?$;2@=HV;
z{<H&K!mvMqk*^XF=?G&zx;Cpx7RBiVONmIy`QlEReip{t_~`d2L4_hI0*G25NbgT+
zG)dS=QIHfIZS=e=u_oj3q=-n0hGZu|N1m5->4~2}XDp$Qx6}RWB824aPka2NSkk{E
zWTcNgaU)a-Ha-`LYM?v8>+=y8A92FgMOMe+SU*muC`y`VRlp>Ug~@%X^^5T?gxD^b
z)>IP@PrbJzrqr&9!d2ZSj2Aw{ubm#zYb8Y_=yj*0O-r(f*vD``5doVLqYlUVB2YD@
zDgu^GiRwm%>N<v2k<ofAGy<xN8QhRoUoa5}CcKEj7aXDF2qcFe8StqXh-@4?(85{$
z>-aBSeXV)4ddxR?dHrhZroS)RrFfw9d`+DCxOR{3xG2{sUer6<^3S`e-==lqrq$qU
z*W|+zthE)VTvE60IAEvo0*|x+I7LF)>%<VX=3nVQ(R+^^nf>5nx4!v1%a8vQ>o*E5
zR`Eaedy``Ma0J7xLYDee*Q!ME)bS^mP(t_&k#E9e2Id<MK6hu;&u26CbhPge4^@xM
z$DV^HKl$5bK9qUMhfFxTYVKll*ZLdmd}$m_-&a~MHJ`T_tRV(xRAP9Y6okwAp%jK0
ziMgf}N2aBap%g(NMMQ}$vG-M-Y-eL%JGmlG=!#JocbRI{u}*#`5cSmcN$0B*xk9lC
z&px4pCyl!5NY&#fkb45rt1djb@2)ObqYho!J+|ge;QLO}PkjE9r9+y{-*NnFtJk`U
zg^n*lQZZ<VzssqwO?ZeUf$f#RdIqk~TU>y4NfFxw!*=KbMjHyn&V}vsm=pyGAA-(B
zg0LjT0+A-#uLV~{8jZC)Z6rj=Uy{ZzN&c!3iwiy4w-oBcuNGG-WJ5~;AN7GRwglD}
zIr?%y-DL1gU@pVZ+{#f~#Svt=+I3ZzLNo=0tLtNULei!U;nGH9NlOfgDbIKy821B<
zAAQ`%o6dO=Uc70eeY|$0nG+MQS?yf^=C)bV^RoLF80qb`wwHGP_43?&c=pvLJ3CV2
zs${ZUUKufv;jA>^^p2}vN+|%ROr!<CDHyr|(|@Jpn$~oEd}9BdAH99~u{X*B3P-1N
z{-@u+3{edsNa|GR6*3@tyfVTEr%y|QS_6*A1x(w<j~<m`a>3?SMvDEd$N%Q!AGK1=
z!!k1%&Rz4184SOv-khtiAKhzDjP5~=MhzrW)E`>H8Gvv`Bu3XjWE`n%3us(i_azP<
zi?nqwb%1eKsQBwDnb6AKxD%!>Svk-#`XpD7w@S#=X(ruoq`K2Kdrx(ziBS(Fs4kSC
z+f9f>07)UCj)mN0<8Jyy20n{j@ZzM}zD=S%)Je8u_nR>EyQO^HbNw!|U-GjK>fdoF
zJOKqr?mxND4qV?!?)ovit%y(bFVMeFMnYYNN9}~)AwKGJtk)tvO_dOz8+Gngk)^FI
zI_Fd!7ndRD!bL3q=%5`s@heA1^|~trKwaXOCZ253Z2!SP;@fV7Ed{0wFk2Rb&wzyz
z(AWl4hX60b(25vZwD>Y&P(^@R45aUe7Gio4t&nC)Zt4k!B^OvY9^rqy^c5H>W$dMJ
zv028>znLiPS<_Z-JdYwNOU@nIaZRpP-q<(b`{%!+NcM^_>>>v|^sUSzBO>%WJv-4&
zgiYfGAJ4CMV;Uzt=);iE0K%fbbojo1dZcmS_l%NRc<=$!z4J>_m{Ei%Qvl0k^@lBe
zs0M@xkQ9(ZdJ!Vu!YvQ_p>1WICY$-pjC*{V?)%x$I1d+Ie5oC+{_}=EQ|~LSwYRLk
z5zBSG)F_$#o4pLV6%3<mA&O-nBtZa^@But^Oz$m9I_YGFuRHK~?%zGD*4|0~aSk1K
zm8zpukaP^$>#my~jyh6;)wxP&2}hv&_hX1VK?K@~to^+%B-)*MSCUVzJE0p-ey%qd
zb={`3M5t3-bms4E^B{HK@sghoz@R~#r0{6}s@CtRbx2*r!~}InEQb@hqPkaAz{Ds=
z8&T-mGteG)Bn3=7$8U2g;w41wa}>XT;fdo2g<4QyNAJ_8p&Y76AxnRi^y&EZ?@<wu
zOcp44TM=-NCvjgWur>#@3<=K$8U`>w1T=OsG<rD#n}N1P)5;4s{?qUU1JPzkDI2Jf
z0Np232my@+rWZq0f*$<N4X;7fU*-XTin!#XMY~UVRX$&4=$xi2QevoFv35G!|0tZP
zhL^r_)GV*|A!M&wss+))=xPU!9bka>UG7-627#U*Pa%zG7-<1;8iX=>VGPxVD{q^9
z^nJB({)a{}Yk%`gLewYoU?i9>^s26vlV(ae<uGN*YKFk%w1tPJ0+G*|m<<nq&<hCo
zJei*Wn#w*{I(y8KJHOzCHP=AVJbS}y(F`r!!KvM`5=N23Sqb#726_ho<$@g3(hnS$
zsJop6LBE$IRz+s(<^ZU!F-{;+SE5mgpJw?TI2s`YLC!4V91-KZd!8Q8uGJVInPbPi
z0NuTIPykg>w0Q)bu2#e0$^9js{0VU|o@<{#OiT!Qoq0T6N2~+l9q6JWK?F{;AwH29
z*o_i&41N-_eo~|)#f47HPb2chqY%X<XcPPBd}u?d_Sl0s6zbf@bAEOE_*}L50-a(;
z5%1$dO5Klw`eOr!`1jTMq;Wv<I>m*YMsYfv1C0QYZMIfm5HEl(7C7z=7#5hsh{I4b
zfmQ~nTEOyJpmsLUC_xnlO+(U_47ifIeW|+tIO%gr{8R*xIFJeikDGXE(#HiWH{-Q?
z_L@hk$6d!9I)BK#<TZGnMDl(xO^)lvE_{2XRybqj78dS(eJ_vbNo7aK4_pZNM6flB
z1Cd{f@)!2y$|R6@-V`xuJhMm(fYT(DJuTzdH#^sOsCD4KnNEb`^SSW*UkL>_97I-G
zz{m<gWHy4pX@2U_vLTK~jtEf?a*mY^=VrX4cb?oM)5+hldyOp4{jdnVT+5HdS?gcV
zGu9A-z*mw#rQRpf-#E~-LSkT0I~>#VvTTW?bHLoPP9&;eh?A3IgLfrh4N1p|whKDe
zNi$)jCy7R1^n6(-A+AsXIzMrNpiq;}?UH|M)Icr3X%|%8i8Db6+R%NhF;B(-?GCvu
z!jFp=y5AF+{~b7Ak3EFu97NilFqz?ZBLk`^pi@A%Ns@g0QJ~d&9p|G2_ScGlWJJ+f
z<=ajJ@o~@y0Nsv=T}p{Ix`JdZ63_j+3ll~BOL!GAGLR?()a#cJF!d!-2PlG|KBq#z
z7Wy^lLOR+Ci8eYE7i|yt3_jPAL6^KEETHCaG`BJyoXxoCWr!U8Gnd6hK+FkHqX5a^
zh4ekiOc_yWP!}9e9SiaE7hI1m!~Nz=Yo^&_?E0&b><(H-^b<{>ROpdnm0tWy#&_;M
z+uHKSXt~X+e|0U-4%7f^1Tgz(DTDSo=w+B#W4jrTk4+TDHvhy9JdKkcX#sE=L=5b<
zNniKQ9k_E=%>1=eES7Hnjtr}ZNIy;OfCEX`CViMw5+m7FXyc(nkpQzz7qg#U@)jD;
z2K=ArXJ2QE;uZDQLVe4`<>qkzW;9$+!H{ZPOlE~Efx?KyFf}LiVIHXU2AHb?#}-Hv
z&JdAIFlK>wL;BrwV%_m~LGWFYJJsP*qDwl@WE7xy0eX(#MhD^qqaH+a1v=8gggxIL
z9dtT=g}Zkr<gOWgw_d;P3Yd66C@Ew7nsz1A<kd(Z`L-!g*GM6u@^$9?-N%zCA(AnI
zzPEUjP+P*N%Y-gfLKi_W88~P(BmP$xHz83rD7+>vd^(cEB*`cK0xVue)MZW-&vH8B
zlTIN;>wqIqaSIfWLy!VPGNQLABB=K4(a)os8$j|v`Zvw^9}Ob7vG+ryjD`f78G&#&
zAh$4X78oL1&Hbt4=Wa+}NhT;2A`rxC1400lI6*SZHU<2Kh2OaLRXmKAxgQ0&UUtz(
z3wEFRlTrof*Hk%R;;a?xSG~CRye~FqoBp|P8{y;UQ_=6hD6R$PIdJJJuLjsI&Nwg6
zGYGJyu>K8Xwv@5}PK`(lfYT_ne?7-SttsxUKK4gOKA4=Dv-yv{)(ExR3%TXckd!)C
z6NWHQYi01r6oiv8G3y=u%*loSb@!h$SC)%>)8DxMqB~gG>TF$g6{@s>&@_2uFfI*n
zdz2$P42+Fxhc{YMNFGKt7ubJ1{!ml0ulSM>|JnpJr56{fBab`$Hang=;kNv*n*$Kf
z{^KOB;OjOlo%jhWc_8l;4{;*v(z7QpwuZbr$^8UEo$87^$JDLW*VlF6`E~+s7YX{g
zbqM;&$8(qA&(o!v@!bA|q9ML-orDvm1Q`T%?1<aP6&DkoJqG%A>LC+Vgg%(gV{~yJ
z+LA{?2@;h6Eij_GLlsu>IHj9Rhy)3Ex-ugk-H?1WIYvbih>JU|4A2Tir3Q#mqFDSw
zuNwghbpk#ta)gwKC`DTmwJZ>v0|aXrH}af&45SW#OMU<Z_p7xTL<FS7ue}H8zC(4N
z2A-Pna7OPcymjw&e7bqGZn6H0`;EPC#B<*9$9pYemgq$j+s=H+;H5tdkNcI)H<WSq
zTe3W?FL7R;0L&o>kmNs9rc1O8YixJX99x0r8aDjqO?|6|^jI-XA20MsU%}HP64e(~
z{`80Y_`;E?L*aqnXZdXI+uyE-wZo*dqGV$b@fR|n9qCydTe2{<%uLgWnse^tJtyyo
zbn>@&+2}W~_&Aenz~Dvf+W1Po*fJ<ra%EF&NSJ*b<_P%E2v8`{qCyFiX0oBg<A-&!
zrw%nr=DZ2>zTNT1Nl?rDH0&KGYdzaf6aiHD=zlA=f0!hG{aHxYiGbvVXcr86rkxPp
zVm?4jC~PMn1>G|Rx$D_@hoqN~;F84E?GmUEg?2*gp1pUVZB5ck2!b7-fHrEN_6?j^
zu&It+N&hs2(6;c8v%l`vlfode@Y8pk==wGKp^r(q<aLcFIt0I@7)q{>Z>!F=MoD-~
z5@d|)?S*YJUl)Q97b{7jpwD~kO_1;{D8W+}_vt=~Oc+0(_;ppc(XX2}j7X${2^A#1
zDS=-3*p66O+A?~vpo@Uk5Fl)z&ZHs*lKx*20u`}P7XhRQP)LA61ElbzA)Y)Mir4MA
z96Lug*z@jOy~wwJaKPC%s@W?i9|btkD6FlXfMuE3JUrg_Gn-!WzN<?Y-5pJ}`nF!~
zh|AttGNbw-@ZuP_P4HTUHfs^vUjaVCEWsMf@ZHxABiC%&H&0yjca=hptIra(^D>PW
zYNQ3gX%zZ1QGbwoUW9w+9{yP1w4QwUFznmDT@{?0B*X(r0+lS#%;CVS5xTBzdvfWH
zxz_Z8zMp3b0LGi}xQzkps^8D>zH3@utGRRC%eZL`BZ#ejBPPId64nZd-cgDEJ_eu6
ziDE0+Ck`<*J<U`nt#_h1*PVaN98b()V#%1gE+m0|l3Y|$Qzk%^m=YOalE_t}i%o%O
zSG_VxO6Jc>Es@OnW5gio*5h%2>WteGzho93cjhsNp+l%k5<5v1ySnWzPC(*kkiZ6s
zgP|r9c8Gy$8(~-B5OW075JS!WyY+!Fq@X+fIN`Sc9Vc(Sx3K;CCBMqMP>5s+5#3JB
z{uKi9G^t;gd{OTjR0|ck8XY8^f4r|C@d{A$05w*jA|T-w@VFr8C@i>=uIkrCy_R%|
zcP;4mf#w~EkkK~ZSQ@H%`AH4uGp5!IZ*%mLqJXvvl02{v2+sn1ht#qREkXgLjHQ7L
zKJfq&UI0CWfC!0417NNpus8?&@?|%1DLEHX@*(50f6iGYb^1<L5zyJv*!j=042)L#
z>`T_4wd1F^zVy#t-gm?C(S=pNil*Ou@!JN&>wkT~l;L6UTt8>|l@Q26up+>0bz#ir
z+%BkPVjEw!!d$t5xhony*Z=I!tNx%|%rQELX%X<kjkEwb4MVSw1&&lFmnQuKe+Scc
zzW%iZ;V;_Yb`}P+A=Mbb!js1W5i$eyX#N&Aq>s2~9?81k|Chc00JH46&I8eP_6avt
zPMs6F8)#&L1V9oDV5UgXgeZ!VgQDYj{OnIp){Ok#glCWC8IP^;$kvl(Tfs_J4yI(0
zqC}7s69|$Z03yc*(5bpB*NrFbGv7-4>{|eBi3AuLwSn7Jb?><+pS{-l*T4QX9o_u8
z799Su?a{{O6?@;199p`CGz&s(QiQtvNdVD-04DZYIJ76AvM)5kh*Ugzwt|g5TNO0^
zn$x97&X1@iAMcCeP{i#Fwx_l4k<A$TXTz=pzdH9%e_Jxlt`=RP{<`dNOd~*8{wT96
zZ2daA_v-K!Qg=msuA0t=;JL)j0ry@?LD$6`2!ZLj3{D7tULzkz*u#HWn4e*PX3MM6
zqzm$-8IdL<oMYqj4Lri3eou4#>@3K4buDE4ef2|~lxmSBY}~-YOOi5BQlcYI)*Jy+
z6eK5rs}h`Aq2qzzwL?EhuLtu1G<$<Bkk13aLJ08fE#A2vRs{gS`cZ)FCTvhdy$1;X
zN5lZLW~r^{XJ#vlyZ}-kL=*sZ0w93LFQjl{?kK$Xn%6~Z!`>h=OK;xOxb5xUiTj$L
zDZCEtW&;k-?{D33;M#+?AA7@_?>PRxfBc<$|MK0hDc^cu``rE?PW!n%_2#tq{r_fP
z^xE(3n4;=}K^^Vs6HrknrZ!YCfju}83!%SB@1k`8V6FkT{m98A%P;n>s*e5G_h0|!
z|8;gsoPgb`fN#lxbeG-nG8#%f!U-cUN_e*S^zUEOKJ>pm{B&R*yw}33Ue|$gG=wV6
zpx>|H^fHFV5e&-pdt80^*EDHSA2n!22RfbL#$O*4YlDgAf#imx-vPamH6cd+*qIM?
z$QA==FII4HkD-V%O;M7#f@hWiE^P4Ki@8?Jy^_P=Bjqfh$G@YopjOAy#@2(#Yn7aO
zc`|ZhA4w?<jlYWL$vWr_?t|;dm5z;1%W+v9IT-@0`^|)E*P9KkE7S8*03;?X^!&PP
zke6}6JC*FIlOu4t7rE;ieeD*N9#&&6ZbE%;(8kfAaMV9W6r|m$-2*&ES&EG@<%Rhe
zIQ>wcW;B}ERgYRKJEy2tSfnn21aDxwUq2PVo{Lizbcqr{DgxRvrv<c4Gf79(1Pi`Q
zs$okN9k?ax-$XZ!XfELf5Y&070{9!Tfi_t9-~ixa3^1qwrfvmjF9S?JDA7JTlH!zv
zs(&D|&rUTFfg@|+sq-cL<(uCGcRu-WGAKu*$?&G1oohXK<@)gK=xcqh@TiZ?ADz5q
z&+Y%HRnERU+bXUIyD&8|2w-v|EcP8Odsp7vf@|K`N%o)269|V;R+C`%oCHYb0m2pp
z0mA+VP>WN_LKgtc1%Pq@L6}1kF2KUgeR$n}w?FytPdvMQ{OF;7{MW90<HT=2`Pu)^
z#m#N3bMfw^-SMq3b{&A1;qV{N^MebgPqh1YWiWgDpMGMLz3R1lO_o~-MkBbi1@QEG
z4pAJ#&~Bf`<-fLRil>Os#4r`U{(lW1I+WRT`;EuGCn>8Y6jcFL96}XXh^7Nb7An}c
z6hJ2lV3gwb0$AOw;LNJ9wTTrUaFqaq+HCV=Co$iyP$=g5MU<Z=dkp&6$a7#!wgTJM
zdb_Iq?bV2B(<5i#sg12b^kiFjVVd}*%b+fc@2h#{hBcKnCLpBT`4nPjY4;Vm2)JVa
zw!L=;=Ckb88E{b;Z=aBDaZG$=zPhrYz8*L*iX*}y!3#BVp<M}mklHyP;vl)61C*Po
z?=bz2ItXNFHRNYU#IV!Aod8{lrk;gR`z|nvEvPE$kgU21?s(8*V|PH@Ji-2Q?vT$x
zBu0^}M&Cr1C6kHg)*vOOPE}YD3A$hao-Qpc1ps$U0Q_1XU=5@CX@LCp3Zhkj<QxzW
z1v^aQg$!NFL)!*xmY*1oaAvE3*DcJ!`(JUJ`T5WP$*4Usb!boHb$?@h_?tfsU*ni;
zbj&St@AwtioV%lhmC>uNjqK5rjo#sF+HmlyrkOudBw=SrP*7gA!E_eEOzbt4nFfFc
zU{8=LI0jWU1=xOp#|!{|9&G`nmyBubwZ*Ul*L+|Kh8uIqM}F@7_Thy?Kl(#gzWtgH
zKlk~+dH?d63-z_%bp*Z@#;ybKvK>4%ZH;>6rTqMVT$nxh<~#3Mv+sK}f~yX;0GbxQ
z@N5njdqp%epZ5m+wKFf)b|<2%kGIXCAK4l$Zy(?Dwq#-Yl-Wu%Y)OpCc@wk%qP+pk
zECw(;36PDrH+y$j!IKwRfQ5u_oOX`<jjJca%Stw6M5#fN!2M!~X^xVpo+f`a)M7+k
zfQ-vhkS_*MdhZ6F#im~O#AhI5W~(u+U0IIS<4n7=Z&ZE23J1c}cIY=A6B%$9$<uCY
zKHg{c6DNSR{5A3>qgq4pcy9cLLry(VHm6<wTq;4Aqx0c??ix^eZG+tr2q(ac|JY%w
zyAYyXq4R^sfQHxmo)YtD8IcL5&&2Hsu&mE;n_riXiDVmi?zD7OQ4n;@@Voe)?hkH{
z+D&llW$n~RX$6O}FoAHjEa5qWZGn+bP{F%f5&TvG(9bQ{0|4fY0E>Ufj%AL$GtjSa
z&=aSTI0aH8D}@Q+(X%Do@v7Ir2Os)E(#tnT6Y;VCZLxjq7gq+S`(KTFt%i27b>LvX
zJ9)=sYi;xY_s_3y9(!#kf+-7x<YzhL`4B3YgP<`1CT>9x;*m9p?1wNvz!X3*N$wIN
zN`&l$O|W(WAXo)3n^5&12h(1Hvh2XC{`Ouoy|>f+<9~l<yLEQ@+rD$|-S^!%bM9Y$
zVfD+u_|)dv)vRE}!(BAsn|thX0A9vJr}Z;~Cq5WP>1a^3%#Z){WA;lA0{r2<75w7I
zHbxVzsi=y!KfaZ&b#d9R{(%<Of7l5oqnrL|S>@1-=gqYT-VOaxNx4@_!Q-U9FM!r8
zz=4GTikx)%VKf5!<oOEvm~%&CPl81|>iad<OUiLt0#=jlv{?`5^_k$Oggz|`<i<!W
zB(qa+Mwg?!KQ*HX#y^v~f0Y$x11ySox_&u*PMn8Ns?_jdB<V5jm8eJ&ItQ_wMyQQ7
zA_-jXFy3c?75fB^R{EaDIpBQ1CjqQ^cqG%gJ*>ruw6svQ{<R~VzRwO+UCX~yCqO$@
zx=H}ASAqV{(LSF8IuBYNsA&Q%!PLLy+EZ15*KkM`0adJtPyxB-uDhWpYpiO4+Q13L
zlm<3{`|)qg^#=i*G$nj*r-V4HVA}-Hy*hy5wE;9*0g(c8OsOFc0AD5k1kwn=cEZ$3
z7@KQV2A=B{5EN~A|EpeawuZwjfY#h>bp5;FYa9`@=C`{;d*VQ3j?HhH;p30P=-IPS
zTwH}R9YAO@FwqdeZUJPg0O>M7z6@Yj04i*oxe5U+V{>um;90u`Rn^nFR}w?E+fM^3
zCKb&|IPtzI_@SRU(R||vlEJLWCr)$^|I6=~eD6aaIQqW-{nX;Iz0Pso9pAKL_xild
zhsGQ?Ex!JJ`{G-FZ?)G0TMS1yDL0e(=2R<$r;9tUdwAvEhrYH10DpI(`G(idM7Mo<
zd$`ei<*^SWN0;7gdi@lzNjoyGqeFoS_X1pTFo4MpK#okS0O0Y9)~@z}2w2*%52qKj
ziWpVW-_$7(KdW{1DFVe<6FCAds`MgE{Y6lKom@6YnDc^US|<keAy%$)MFMpw#1N2v
zXO5Y|&a@0vR4hPX0PYXjTrtprsiS`p>S3CoOvK_0gt#>|thIt5iQG8Q!e`vqX51M~
z?po;Q;Jw_xR32~zfmRe)Z(qFYuW1%RMHr+I$i2q?8IY-q6X^N{p<>K}02odSps(bR
z4ut6uonZuk(lywtii`?=hD1CHyV3dy!a_gsGXUhX;q~C{5s#1&gBaiAWlV%p6Cs!=
zFsSd0irDl*IgFUU|JUOHt_~0ovoH-6d@c{+mwFX6%K#2MUBT>!07e%9`fC*=Sn7$w
zL#|xWOVx--0;XE#;{c8v$>1OS_D|R>O_Nq*^r<KMzwnkpzWo;_*=m%1VB+xN^{sbZ
zvcq2Q?|fUsy!%aM6i=-{fu7G~8_Z${V7ddQIRVf}Ac!MVMjZ&^Nq}eqAe@8>S^wq$
zRB#9Y`ViRj0M$BF<q8DZ3Iuu2+B^lD7g#j_Hf(|^``8o%`cId|Lmyl(?*8C9Jbosg
zDCax9&-6a}%7<1SdukU6_~sqE4#4i95r-jMHGT8D=FBxeRYCJOmIOjIxaU&&<-h&d
z<~?7csQPO({+-5w#!~eDyUG%-Z6te(ciiwJQE$kRQ4v-U><NrHXkc~$;NV_t<;s)j
zg>8T{>lI>((iec5`n>?jK42r_Osh84)At3?4+4vM&VZ=?N@>%lL0RxVbIxmfjLSp_
zkMg8W(7!1A;r7{ZkrQH3K!wn3QN>}Ky2FV=BUcCAQa!*RI6E<_Hi+Bef-8pE>rz89
z&>D#oAx-!I{^b(muS7+cTJSmqN_v4x@@fY_jTmz3G21;pX{gaB9t9bDZAWdu7!Que
z&(IiC&RxW5lrN~x6*?ojS%L|;`k&U$MG8zH#Lw}55$B2=0yNmT3|<#;04TwU*C-5#
zSc>nPIDjz5`-dHYC=O8t(*)!!sDr}m+lm0*90UBd5TH?3L||-~3VwfN;G;c&1ET;I
zK3PHdKmcp!EtoC<cK*RKOUH_LqDgXJA&($0;O3(Z`0x`Sh2Qw%f3XK<7L&8-?;pK5
zxbMtY>tx4K1h1HR?O&gTtABnt%;CoUMejS`P?}qA4NPmQFgb(}bea&&Mo>)#2HG)H
zjTnNY4OL?TAen+7nt&>30t9o|>=+;zKw!H7=?cJT10Wwkg>VM;n?O(?Za~oJKnWd-
zik(5z+G3>%AN%R22EX--Ycqq%;A0<I`<-`nM}rrodT4jN_+ys?usdkvWeE?i-~Hjq
z<k72JW_BKp+0d@8^wKUq>MzQeiC_I)#!lVTFD`Ds;>25;c>7`V0W{{O4Pcgd;%zhl
z*0w8%uo<Zh;L@h#x`pwN<UcgDLKtVmtA>Oe6{lvyOnkN<2BSv$jOgtI`a0tiQq?zG
zF$J|Lx<%&!qeda)5&SSz30gMvm`V-XU~Einf4O80qe@yAR{c5Mys^n04LbgG&V@AP
zQKVi|0PcH^!cdd#2oeYa7ILKA?HJ9#c}NJ|W8Zi6icDb8PoVZVNQLMA1F{>woUnHK
zqpO6G_)Y_*2to)!fV{>U1t4UDNS_#4b6q`Eno+>c*GZj9{#?=>gq~>Hg6Rz^?aUew
zlGq?;L;3{}r$hQE;A*(0&!IQGKTH@T^d^?lK@yPQN;cOILY$da7{cQgV9i)KjEDoC
zu(E=;wg8^WDp)TAm_8OjaIS*(D1fal@&MRXR(%A%eqON&wi6BlcxKhY&4*qIfArud
zilTt#RCMwk7va92|7sDoyeQz_jnDqV(aDw19G<@JpFg}k^&OA>ZeU;WxvF=^TW6xz
zymc~y<_L<-fic63^fiL11fV?tDEbhTJ%Hvk1o0G97K;)}2+ASAa0Q^Z3V@YCsLqK^
z4+_j5g_gbW7>sQ|RW`8X(Nre1@A$qw?Fa7eZQu1seA_~EX|X$c=Hf02@Xa}P9e~~8
zjR3mYR^ElJW&gdeh4-)DpJ?uj8^IO-FfF!<iT3{F!0dG}7!(kM2!B@)Eg2Xk0W>47
zokqixn*dfeF@G9jcN-_xLN<)%ZHZ7Z(sp(5LYQ-9d(1ZHL_5AAPJxt_>Fmtf`~pLV
z0m8!MWKc)cQ2@nuWwLH%EmE~m6;N4ZXjvK+wT+GUR$vxHs7G@7h%lEZzN4M?1UBbQ
zi>Qr8{vO7n#5qUGBbJ1e)_L%~4n!hY^Ii_x_cdHY9If5wEg3p5^|Gn~P_rQG@6%e9
zSm@OdXqqGl5Xe`40Dpq9dqhz-M%5@71CR{@$hImdN0_5$F+yBEj4Fs40CA^+s1-nr
z4q=QDxu?!7wfdS;AdV+hO0Y9V{)0Gtbbj#*asaND5*I>l0IEMBY9K;U<XnhT$tj)y
z;?lxq2=K)U;ILey(u6P*1@Nv8z^{!e80`(9Tm)!u2hg9aAicz#2Iia!*MR*PcXiSK
zT<Pbqe`yX*?Kx#0y6`Y`S_j_O2s^)!mLzWRRgI!7;mOTMAG<Jk_B#(x9=-nP^vVC>
z>FuSz{O^7}F!$fnAAHyM&m;@iB#>`!fZ6I{ehq@W3D8N&=m!=4%m9)}`V9IjQ1vz-
z==A^wIlxF7Cy-ot2-PTpG7ZsDFmVPDrX}`ZfakV`_Q?wtqIMMJ1H$ok$2aNNbpUpU
zH#~;7d*^F0{y5keG|b^+#x`zBi{-%;i*Jakya`2?gK1QdOaN3<GNFfDTa8fcMh~Dn
zzzLK46rgo;&_2GXoJ+)Ayu81L!DIw98a62U!uumQ07=i5RAkP^388(AR>`&wu>84#
zd>g<b4+=$yEar+a6(M!wf-)c(&>$Q945m^LK}Ac9jCCqeq|`+%zQb@iroCOV0gZ$@
z0n!Q=586vcFhNZzyG|9*hwp2)K5tUG>IuQlG4b(CNH|LC9|LE#w9acZBm_Vq1d@#v
zUuFCfBM*blGoNeRRXnFL3d#}u5<m~j=1@x#iJe%duj-5*#)Qj;jS8X;Kw}y#rmVvb
zK-9vVeL$#?o=V3v4=|a-=!+sl+LwX7B6V5#I1p_>hk*_V`2l<-Sk#Vh7FxQ%`!)pl
zTo}Mj6~L7)#bn@`Ccx2V0jIM7CiVnSod%fN3vgitAf|H4Iz8fAD0>4XwUGL9^`0xE
zd(PaOO~T}>+tJcwTAtqiYNKW4Y4o#U^~l;IUp~`2{R1awPyAn3Prve?J$8EO-9PhB
z*G6~z;3VAe)=85MM__s*fT9Orn?!yLsuBXcC^^FZLx64%g5Ch2p8>INdj&ZFwvYXf
zjfsLuix(&BH{i^2WuH2iWlx?f>?cpBuwBl~rHyBP>cvwJ-5oE**mVGQ$Byx0KdNj=
z8nEY9>NOmKJv4I_6uFYTDhOu+=y8Zk6JwQO{=b5)KDYd(wV;6+Z;~gXI(7b@>exLB
zIvc;h-~>-OOD%7c;2E8bIF^Dm%y45+)I&tH!cM3h=}XY4Ec&1fuulO=3b3i=ZKIkT
zMShnoB$Jpn2#BY~PJ(2F$&vBoamRyrSJp?^yb%4U>55?b)R9k-0<Y7acf1?~6FlxN
zCuc^e<dB^sDXVjJ>RPwXM8P_TPzwgtj)6K=J|)6ao#&K+d@V+}UrOw@&sUJI1rX!_
zCH0z6);%lpX|9~o0z*K=1x70YbYn&aqP92!lK_~q#=m1sSEFtOqC@Cx3DJ}Hgq;F(
z0zydxkmDt4e|RmN6twULC@DnOrDi$=qX4?0fsX>f$q28Wf!tb%je!#l1NY#f(?HU|
zC(vP;sbI9q91-DwdhowEr=$bH4(|S$Ly&|~W~*SK9UVBnk)FQyYkhL*_^`QAI<ogJ
zKX~6W?Pu?J$Kf~py*6C)lmGGGuaCZG*o4=-XVPSY5<>Js!W`34E`<gLp?|D-%mBI;
zU>h%>fpQDLb~9)O5v1t^Ja&G@e(A|+`_MB1oY}U?dJ#7>7((0(wzI}lKk?=DPyWxN
z9Q!1GZ5ZP2c<IKj1F$<@@)3m*gu&$XWjTO$G#Aaa4?z#32}Idj07aWs)q=#3h<b(!
zYbiJVQIZ}{;G8!mI9>C+IMBd*u(eamL*wre)aWyeM$s@~qah>|ZUf|;2BkJ{Bp(X_
zJs31!OAA`k3t$mEg3i%!m4PL)7t+y)2#Db$uBQhOWBGK5nQ>`KBpC=t2&4SF)CZ^$
zm$U#o8+9vSuCGVOK&uDp(l}n1M>88s57e!NxvL;mOmO=hv}Eels6ls8KO0Csiy{v!
zp+CXe&LPt6inc#jMsURfLjU4y<cOqf02oXkBYa%S3bg5x3OZ;>o**))=}+mGUIoEA
zN9xESh$jHzDS*Z#03rlPVh=hMgiTDx@T^Aq0aZ;3Rk9-^4u~gdr$uh&MBD^{Wom;(
zG*M_q7Vd2We7ppBd(0BQxSnZ)cCvy#I(w}O25AL*4goy9A=gpw9WCW_jURX$qfrUd
zld~|_oPb_2f>yZal>l(>*Xn{h@hkanW6&*r=ZTN}>$e_Vd*te+SAOI_{>tVch$f>~
zzkAl?-7c8^5KPSVl+;lP(X?I;!FB<#g$@9wZ3>7}gy$CEllMXKr}stn$xUb%K?bG;
z)=u>A2UxjtP+a`@%JAZS=Ql1~7^K)CVRw8pk6i~~cf5pyr_wNJo4~ei$ZQw(Or3;@
za0+^Wb;$ulQvq}<FxW*+#Pevv%&E1j8PA;(JKWhkeovI*SUW~r&oYuro$|;i2|^$u
zFt%Gkfkp|9b<Rdg#NotHaCjbJSt2pX#n5T(JHo?ACd+s`EQ70h0RdDaHh%PUiF7R+
zUDlg*LA#cTDI(#)8<fmf$zo{$L^MU0ulHK?s#zIR66C0zz9%JwD1q;~<jHmvtgc_W
z0i`XD6BKtqFk<|<)RH4eUJjY|%5%Up3fAnGg}<Yone}9mSqivrhU6k=I{%n^2C!)W
z=>|YQsUT{W5Vw$oSwTFF>7;;OC?*vmLVylIf{09w8d0?fZH9%M)T2S3f_5z=hej$V
z$|08%elP@>wH9v1b%KS}vV!fRf(cwl62R741+O>&aQ<n4tgoU(f+!F=rG!q#Y7h@<
zM+wY!Ce6ym8cf8KSI1!td5Q4IS2uj;K^+0i`IKb|fAZAbe-fU6@4jOC#^3s_U)dU5
zapi2ZaB33Db!*CgNlr1}GzA3cpl?{HwgB?25}Ggt&z+xzU;FTOcJH~W9ZV(wbG>`I
z<&!_ZJUaW))!y23o1<<zM3Uf61<2j;O*?iSfZg$uj{q8>3F5tZIfU8H9!MGhVO&9@
z6M|_4CPi2nEwHs*gN-Qwngca@rfGz<{m@bq`Oi%)b&Y<2R5&UnW0_u_&_u0nSV4yH
z{-9#`S>ai-$;>p5OaL(w&ti;VDKp@b<QTpA+Y6%*g3!VUv0tCPkK00lAZ(@>BHxT1
zo4T0~9~XwWs-UMvl}UKxM!uHe)qH~2{<kt%W565+Ru^#VQ)yw>Jcro$#P+A63%@sj
z>xJu+2W3Cq`W*XT+w=OI3uM2`{!7jT75m7p+5n0Xi~7{v5(TQjntL?XxI;qd!v;(w
z@I>hWqC(K$<ZuaOuZ|rt|5J1@q>wUV6aXE9q=OCtK%>nFfgzLt4K<K6fawB6Y!IoS
zdkXiTI0O|yEF1;}(@hCgzk*>qfd4Q8c(?~J9|8Qy8bC;mp|I<ovE3A4W~PEYOBT+Y
zj)Z6`=Pne)MVt+E5TnT2I5sfZoFSYlgx0ahG=jXuHj^*jASFn-LqB!)zTcU<V)mz}
zdk6mBAOFVY;CuhcQdBik3&TD+SA?J-*>9^fuvtO6RYE(Sga_`QgMa(M?QF}m+Tot{
zd!J43|KX=DJ$u(mcYDlRsnsG#p7Lv^5butccI-L;yW=Gv2BOde*kTZhsrEcX2|%+M
zKx;C9Au6cl$oR+Tjw3Ua{;jGIDqFg;EbiVW>2azfuj|oK0Lay#Qz*|&Z#xXIj|r5c
z3Mi-&l{#OcH?%l;2asUrL9Ht%v_KYSzl4a1<YFMajJsM`)GmUmQDKD?eUYX-iFA!v
zS<<*c+JH&}hHR*LNaX1?DAG>|tWa6mI^3otw5ZpS0-#2jOd51m1>9bjD)-c&bM-?I
z1XAZOA1ExY-itqpJ5)j)5hwrW_Mak5CSdUAbpDtvh|U~dTT)eYJHm%;S`{Q6L&7{b
z36%)-_n8|&>W!+POnL&A&%4kYxxYQHm(>2$H!2KWb4)jkMEFPf0}(m|Qvj%YlT20+
zb`Z7?h=f|<x=}JW2>@bgGfbp7Zt#PDTf8?hB@qSi$2kD8-iHCS(h?d)Kwrhw6?$05
z_Ed20Nlq!`RYjyr$0d<8N)yp9;-CPc00!N%APAbw98u=Ri)T7DCD0qC)hEy2^JDMX
zv*$hc-Cyo|!@a3J{K^*OgT9F{<%Z{>TY_D$Y_^d@GwhfzKQL$i%?AfXH8s)RvS0p3
zUs%59U#$&#&hXc?;aV%C=3?xQZ|1S<0PK#JevmRuY=a<%BnqM31enMT#8F@{_m8Fv
z%fcvXZX^6lnlnuE$G*Eh8I97nqVbRAdPv}k1vbwsGWZDX+W|LzsXOLrtJ#3aX)#8N
z5kMmjAVy2YWPP!ThByeLktJs&&ro_;x(9_7G&>a}(}oC&Nn$8EMd??+nU0rwMrt_~
z8893#Jqx_Hx{lE2Bk<m-<EWb}AQ(*0PIDq3D1W<Fz6AAaRlPFMcH{}PM9zr;c^h^7
z0nhNeNnW%BT*;q)M{4cyJYe~xR03!XpCf9bV-y1<vs@Y&mH_?pSaD{dKr|)yu9*o;
z7zP&McSKyms6q?_LM$s34+C5AxYozwI8Xs1miMI=vH?JfO1E^MR1miUat0bx6~q$(
zG$#=q2n?nQNCT&ZQLtqmL1YOjpd$^r`VG5JB0_-2I2=~ciUFEPRxPY4i@>6@xp&?g
z45UpG5Yu0sG~#eT1+B<HyHVkNXc{qCg9rnAg78ufbpp<8uJoUpdFme>vd4e@u8(bQ
zAHHP?opW1aH_oWS=pVARA(%3R$4*bcPyXJZ2&Sjn&lI2i%b&h*_iq-W^RMgN3G?q7
z{coMI>j3PImwYggALmujFlo_)$p*j(OTloi#rYJ==tN`%$?9kzN`Zb^(q4t?B_EHH
zu1d<o^g+*((MPD6qgiFmvoQ&=raKHELF1jE>M(a6z)(6OwYrjwc{U1Q*sEYLL}<T+
zw8+60h(fSR4hFI&Y{0M=Lwi)g<h~Hi5Ag&rZ6OEChFMVtArdM-LF1#bVoR6j_6U0-
z-a~7123N^_vYc=T^mzT{-F8$=$d$r*Bte!>6kbBj^!I<VQ&Xon{7MVw7C1CUTJ}m=
zV}QsEI#%>M6Z@$0Vg@5}fFK1}d8C5wg%WHwf-=WC^nwj0<;yV*gNcg>Efd5@CXGT!
zk`TfK%LRFT<Xz#q1)V8vWo*Ujh$;-kWWT`Vk}?>rpn<Mv9SuYSI!H)Gr=TPq0*r)%
zCOe4)D4|b^CGdn$RM58o?GC`?ObEjZ7EGTs4osMoFh5zqG|J>Q18Ab-Ks_tuo<M=2
z1fXGnx?D~-0aEBm8Ec8I=1ch~Iv?|it<!(JzjNh<2OqSP?_CaU(nw4-%xpC*q1enJ
z9OkAwnunkM!(o=j3+?UV%m3(8=RWtFSnaYa>T~&wT?b%yyyT;*vNEvMW*oN6rS2L<
z?GrH=oJ5lfpj82Mv7;I~0P7V10-+731J98+@%csR4_W&eMtGPnV1+<Q5lHJ*o@`?i
zKoVEbj6<sD4#gNDOiNrstTq?`40-|dyA=$F1!P4AX*qzR!q5%tqGjDGzZ=95l^qyX
z9V$a>V#{=*zd!%D$zRdmweRnkfvzKLCGM#ofOZYL9V_B)o>#UfZUpxYa8bIpp(R})
z?N9Hbdu`q8I}XBZc%JmH$Fx+kB}4sIC4<L013I&Sq)+Lt7YM3?gXDP`u}P4@-vn5G
zw1VEb5{i5q@(hJ&(Ag3PK#o;-kAx?rl;4RUG7X5L7^1jAh!P^`hzg)FrwA62B<&O_
zu)8IvKq6N37!Y+rzCp@m?-e3K$o*&p&bdH+int@30lf9lJkxy_5U0d60$4>A-O@lZ
ztRPM;EFKxcbU1)LNgK9HbXqXIfb5hyzz<CY9aF*KP6d;Vky-1l*vLds*zR&!A(rG_
zqZfJTT33f_Tlw7R6Km_u?>X~KIJol08I$$b!3+%)TN!j<5`OMeP&~2SY|by9{iDyE
z|Mb7yHU5|1*mVGQ$4fYPx+!5;LNI!~87{o}{OU#9%eG8AnL=rCg3hO-3RZ`r!iVK`
zDgRD-?jo0iMi?V6?((Nlw-`f0Xe(mvV{SFU7e<<tLq;QFksrq5Js8D}P~)V6eivZW
zuOQ6}NXrrA)ey>R02LOiYffHd=h!4+tr(Ul4v3?WZndE~%|=a=2&xU_lj&*#UEOuh
zk@2;xK}OvbPoiqCmR!kw{JWC-v>f93hyoc;($)2-^p5CPWB0WK;+GT%3t!mWtWCrO
zOWmG|8<7Jdvb$O)s6_$Vy^oefC#-46uohbYTjvTW@*(7SBXEyjiu##gSl0FPoU?$+
z=G;`N>_M90av_)?hA>2Dpan_PfTR&Y)G!vseoSPUj2N<zF;|TuagsSDnA>MkDM#pN
z+^arz_T%Fj5wak%(<Ek8^B_^(5Ub+sHuksxBA8y$%;4}1Ib=@`;oALu*n%dkZ3i$c
z41@{uOezwavar}F;7BKfv)MYF+gvT0VFwDh@K{!)FU5oC-5PuV{Vc7zcI#7Be&nw_
z{<yVQ-ZBkfdSH7MH1Y;Kb*^Lo%L5jsXM^m~-k1LV)^JEN(8|f#9hb-0bpUq9OFRO|
zixK3(>RpLB@V7PwXYG?09yhn0xD`fO384*OCI(n)0$k`z(-^7EM!^^&!ck%w<@+V#
z#nsA0ge>l+82$!EaOgOoD34|6pM!G)d2V5=XQ8(ZkRpPRSCCtb_WO{PLnwpX86ECR
z?-@ffcAUT_!-@?4B8O~PLOzTjn5gk}&gFU{J$?pV*y~Qq-&GInPy~`Le@=);X<@!o
z;SmI#u#he+-zOTHq61^jf@V|%xF72fs5Y(^1k&6wr8cb5Ohc_QNaRA%OmMAz#dlLA
z1Pw3}`jC_t19Xw7*T>Wg(m<(u0H<1<E`qpSDmtK530grw*DHe(owmG!EDvD>F@&aJ
zjcI~O5{Tmjq9lSO#*)s^n%EjN+*I?4q(vi!Ux1OigQT1n6$H`}Qc*d?`?1OcDA6B8
z(V}Jm`MCmK_udTRgAsH;QNi3y2Ky!put5mJGKQ^T0R7w$`p{_>FxA?InZ*!3|HwJm
z9u;QKR2$awRS^MtX}R;1n6VZvrk6gKM5pXyj||{F#Wa|>19`s>tzZs5biXP3Hk^p#
zv;XJmOJ|;OH_Gm~tj4YbusdGTp}=q+oWCo9SD3^!%x53D8{Tlut<dUNNQW_0WeNK`
z43lnPE)^T5sO+CW*3?-JBQK2XBh2YzE*}dF<t9eOJp3F>&<OvnAj>M~^(*N0EcAON
zj8aQ_=|wq&tV{{!w@^rY%T-!r!dz{hm~J$1Sd~D3av~ce)gmvU$U;IIIHw@T>@}ZJ
zxL?=i<a(V^(^`Bf!S;+08~3_0V9X{clHeK3vB;i41T3U;2R1e+SFfsmB)(Jg6`c5x
ztNc@>g}W3Y!BB~eV@-Kvam{sWGaz>0Fr{M&uE#w0a2ue+&T^9P=R`iL`bm>#F6Yn^
z(E4DVq7(NZWG6u?7=qN6RSJ2&4FNg?K?H$mLL4=~L<uyK1~ifg;smP?SmyzA{74Gr
zR?^lJn-U=(MS;X&pj{26GQlF!6hLnc;D)&j-u(6v6whX`^+X4vMg+0Rpxww|VPOb|
zrb8I!2C^aYA94sfeQ4~RhtK@MQxKM&C=SEXC|!Qo9qNnw7>-|iS^Mhf(z8oRvHJ9L
zd3&%{*d%P4C@<jIl}Y&1M|#ohM6~@}|B-*w9j4-H?m7UM+t_sgcE?LRc+wb@PoJKO
z`}cOrsT-fX_(=ANM?M|B`<B<k@LUF#YOqS!KN-MW6JUTUfGA1sk>il8hirXx0H~*|
zl-y}_iN#ZBcyc6Ybt~BHS~C3UsD!L2AgA1Z3Yi^2X)`7f63GmW9rv0IAhZUdW{mJ$
zUYy(Z5mIkLFvw6;$DqRU!V2QbU`tsdiE;j&*Nw-dQF5KL_s&XP)-U!=NqcqcURrES
zB&cpM!)X8!Iv7I+#PMPShRs{02Hj)$<M&;&objFjt{Q@nkDWU9BBG<t0~$(NxNdMn
zM=zzB<P1>ir6S>{u))_Y#YzoS;FEQ_4h;;y2yv2~4@7d9(1~?+e9}->nirui093c<
z)<V~|l(azx8KUZGXwqQ<CQO(+fUhKhC^D@1fX+Z{ur{CXC(?u9st@Z`oN%cqqEVdQ
z7<B;}+d15E!x}U$b>ZBTQ*d^54rXU9gj6b8K-SM8oESlC&O$55p_~pN+&2l!XM1qx
zXP>aMt=Xion;+^G=hpbte|-$?X1ckZHMbr*y;{C*`AnW2oG*+SCGf$!N5ytJHPN1a
z<R712J##?`p1b4n8@mp`?s!QDPa6ih!wdO=sdGOC>A_!^NMifjpZpCtb?_)0*mn@l
zT*$x{n8oJ_7Rv-33@Zjl<l<=%xeO=b*g#QQNHYuFK?U303VH(z!=Z(|Kyq0|q`usy
zP*yor77#(q#AINRC`YY&4Yv7-D5orvg6w1%0|hoFFqN&s$OI+^w58nC9`_e{32ao+
z0YUvAHF^kV`wV$$#3SM;oLOh1Rzvj6)+frkoHbDZRHN^s2Ku|#XhxS|0UGTlNXmCy
z7N`t;(f+SX4E^+j(C<|DSjh@_jx=F`zf&hc{tQKcG|iz%fbte71tVlU%*Ue>fY-53
zb>n$-qyuiuEWHd^cYvKK%GnbsR2nCRNJhk)0$cW=9s<G`%o8XfW$8g7UNRyf=>?lZ
zk&d7o85rU<Ck_Fo3KD3<5yV)VM<s^XYk&!Xq!5UHA94rj9<f9S#FD?svV`xtp$j)&
zQ^IqP%)vchm<5|8Fxav%j3SsHrZ6=!(9SWpK7epBg|a{$f_?DIzxYRRVQWwvoS9Fy
z%lm$LkZp?#`SmaWq(EE0wgGIVy`pPZK5R!zw}0dly}^I?J#*&nCsynqf2oKjI_B{Q
zw!ZlP?+sI?=6oIYXm@=5$F2jgJ6@zwv%ztQE}nZK@oIf^*Kf{EeftmO>(v{=Dl2~S
z_kP;^zwY>9Sen}do4uTfT|+F#6XF;ts5sbFJI!H?ZV4sW>RQ<7R?zKQ7>+FDSpg+Z
z@MQE0C`zPrvB^atwh$wDgoPo3&~RCq=7}SO7D~+R8!GwA5nUi6;t0~RfE;yqh&|5L
z_oR7`3!oT{)V?z=&iweg5BxaskBz#P1@6dgyXHQGaHxQc)cx12{hD7;e@~V99BS_o
z62%d*=)L$n0%0HU@XG}CO3J$H21^3h%NMk*v1$g;F*`9OEVGo|6v<s`x})Skr;+d4
z<q!-($N~54BL|HMpe&@Ps0Ruwx&0K9Wi4J*fTio6LTOV%4Or<>&YhH&;C@(C9kPfH
zjUZ107@;~}*kA_{iG|1`Kn6de1gKg_>dpm~uFixOj!av4%XK-NJRZP3PcFcNk2WDr
z5=g2N@=*x6F_6Uu25Ag4c?dIz2xK|L*SGDXUpf!};a5KelZ~Y)x7*w6#RDJFr|9c}
z0N~jyiV`lRPygQG$t!;R_wOv=+_~=H(bJ_VlBtP{)m?w@-1c%`oz~rPd5&ENV0Zk5
zMqR(IrExf_9lzHD8QPdzY(_Il4DG4enZa)q!}cwsUX_dnTkx-b^C#i0*ZoyExO6?i
zu5pqRp^w=6BqtjZVF^<L$lTxTX0X0(VY^pBicy%gP+FYy+4x(?xSWpa|2eN5ni!%e
z!Tq4$(Xa$nVJ!@ysx}}?x1cxdLY@z8Rpw~iO{=-r&Q6>(rfR|<D{x8MFG~`lVaJ5U
zXgL2YKZW(Cb?*v?*XNBLq4BdQ4Srm^UN*MuKu~_00x$~FT?as~xs6v9z+Xi=ouUKc
z4Adk#iQH>VdM+W<>nUG!L_mcx^lk00>=7F)uOLvt6Cnjs-ki<_I|gV($x#wwCca;p
zkjR}xz$DcjC0imgz|H{oFV?b9EtTYY0X=?A0bz<J4DcGG&;TPL=x~*Ce-uRyMVayT
z$f+smTG8pUmOi%?-!o;FKoNvs!VuyJokasl0<bV0!F)4-Jqsb69|Z8=XPU6Oh2*{f
zCeb%RVj-(NLt-N;NesgXqHY3H?G^-`1^BVQ|F5ApDzn9AHIW6+{?umnEXoy0>#CP_
z)S}h_oasIF)Wp=ncP}(v@iU)!(Cmwo=4dVa(hok`{lcBTOSn5O&#~(O?2fN6e5o3z
zbiV_xl}`gC<8@3YnQOMfnVDudxu+RU9ch}`;|()$ED9#CjH<~i3mffAR|dVwsIaKW
z6JzH;yA2<@|KGyl**Cy}>32XQnuEaNq+CKAqZQ8~FH0Ea7DgEo`*4y*qmQCNCB4wn
zah<h+1R3CD1QIR}3o&nBK>=OJ%k$97R_!1^3xn*O&58|M+SKBw#J?jrc_^<cYBvv=
ztM+~mEKOVwYoi=3n9ZmGphUh}+Aq<#5q)`vsf9i6a`$6r%o$q8ZF3BLPhiKRUb*)q
zx38*(jx{glQcL^mE`Z8C@OcgX&UohEW9{poN(z)tMx+72{bf8+BQ15*5<ssa0TCPe
z&0yMwiJHo!N2_g6<5$Rz>Np_bl8KkH7IGLQ$`6I0L3;Xzv>r%u8A@oP7C^}2Kgi?I
zdlQ|=ini0?-U5gUAdFAtmRN~kAulbFI+2%vTf=t0X!s*kAw(WRXh<@;*)TAuQ2jB0
z^<{u?*-({1yFo1j07d{EtV#(g6rx0RVyb?qLTpHsL+jQ9_8<SmufZqpe%vm#_C%%G
z-rOwj`e(>d`FaxVw6Y`3Gq`W<Qy<(r@zlpBqophQ`R0Z5y=N}g%k7TKdF(m>yW_uN
z>~-*OF*2#cPS}a3n{6{Y-wb9BwWHZ9I>ExtEttDCtdc9N4VUtwfNWHNMR6arHQ3-M
z$ZcMYijhrcdUl9ed7D9DLW9jvVmRNu6E2M&fThmsU^aRM#4rn(b0-uaV#(JCjY!N!
zjGE7oacM#rMbJPEcVu#7v}Z?<6>BieF2bO=WQWDFO^XYV+wB5^p|NHZp&WY{G$0Dw
z5Ms1Q1_EVe8(?h%pvtmrc&_;TlRpvNcJlATZ0BZ@fs4uzQZy1o3iQhPyiz@>7-RTa
zh;f`a;F38`0mzx%LG)v&+K2o_VIM7)BM9<#vB`jZ-HxXR<frH*&=r+7$J}B77pLY0
z0>Ia#LUlGsa7m7VOg7m?>R{v$ALTf(4uG`M^_>VY{&-$7uTHsj$()cRFnIye35W^>
zn7&tY36Po3EtRVZc^XpI85k0EVqz$(>Mc$u5J@{*O!c7ihue_uzmSzE@>Eiv2F6Gb
zj;MPc;4-KN$xus8s6+<>OG~-812ZPDzX8%fkguW@oJD3Jk1Xv^iH;6Q2($WO92U@;
z$zbnW_u8NN?GM7g`;VW5rOw`>D$0poc+VRz_8#B(MzHMt?Jf7tZ!g37`@XI_usgot
zW7h$A*^My~+OKHrn{hj6gcDIGn(a)*ONXYDeK$-;dtckAre6bjd?e4S1=8N{7u32I
z33<(yDLNA{n4C@Q;=(NK+dl*I3zMcj+cwRKHuC07I?C<F$~HXr?3%gv^aXhM=`--$
z#tH<`gtpm$i`|dFCHM@qlYKDRItG*R5;VdIKx2))0T2!jDN@fU*NehEgM15C)2_{m
zt{vuEwkUgGtDdRs(10mT7&H>f>0%e6Dghfz^Z@LW6_lrKuzi09=O3_D|GcfT0TzZw
zX7P1lvF{%x!Ng)54o3Gr{p;o}*B>*TXdWFATULR=hz_kCcZ>5PU^#_oF*WC}LV=~N
zxRIS`_|zqQUNwM9^NOK&WIjo2xR^`~yq2o7@fH%G2nlJA0J`d8>>Y1_)<_^cZx4xr
zcs#DBK+VmkggzdscH#4O!x0^YfI!BZtUET-5#>c`e?%MrimcJ@3rT=I1#NXq+6U+e
z2=~CUkHwuC*$5kg`(sl3s|a3SoUh=*rBA|{3y(rs<Ti<8Xg8-|va@7nr}x6b^gfuG
znuaJ&h`Eol&BF{}l%Z3AXcF^Hu&flzNXc)()B*Aeog>8fJm~@<L6Ax;14CL9<RDnu
z7b;IRz~!j{s!(Qd_*4K3H%{0e|M_2opZWRE!fa=MX3JtCjUK$?T<@+g)K2#|$E@&;
z-k06+^&7hmz{`S^_d>aP9vIZM<0;dOrW!NJzNN`%&xv+4e{#Ysye2BzuQEk^xU$hy
zfvt4Q3^HS(-72!VY15nA+lB*sC*i=+8FS!@S+j5NEX>U%(FC%m$v{$emRg=s9EI#U
zY&AOIJSk4R%bNw<{n%Ofr9b)%eDUFP)OcsQfdsxYaAD(VxUhkUJKm-d8ib;v);lAE
z0x%W#^)<H2vF}@Apb1fcdHyzp*w-{}qh-2OLjHJeyI(4+mAeYN_DBKi%Y|Lvv{f&+
z)wadlus=c*eW8`y^cxL(`|r14`sTFU$evmKq`C6I`=H;$CN735=*Yl(DF7yx$=Mf3
zfN5@&Yv%}_c>tVwXQND!xXabMdVHCXvFD%H_^0xsf45y$HkQ)-n*CpM1nTqx|5TEn
zM!+>Q(2@RkxQXsN(nir!5#}7dCoV*N7Q9pf3GY;1KY$>x6?Oq4Z2;tBF!8Y#BdSv<
z4hx`2Tw-^O{D~Z4VP+<V$Ikx|JpSZ=hKaa?wSmcK6h-S>*4nDf0s}=9cA(Rmjb^5o
z%;NMxvoN;^GwppaKRF3;(1bEKfNksx5+f`~gQ6sdMs~c$PTX^Z_jeLj7W+#iabQ|u
zKuAPvut87-Q%wtdW<$98x(-}wp0oe(fBaAIr*}V9EKVFoKEgyAeEGZ25C7~B;G1OZ
z8vU2&*mVFdlTmZdcTDD<xsSpKTG3?Kj^<iZ$<p5GWZ(5|vv5`0%-v>+iEDx~ITYk3
zDF!*^RO3cbOiks*?2_3&ba(*{9-WQ$9+@%+_D#V2bP{!1u?Z0eRr8YpWPO0q`4aL?
zfMG9yG_44F%_>ym!(Q(Osv>~6Dxnot(CNhR*1gxj>;L;};qi-?;6tB%0RHIidtqfG
zhuMh*T5(ns7R&f-1x@OLYXXQ(3j$~pqrVKO_us=+RXkEwgGV!1dBRq`C#~(Rl-1UH
zQLXlha<eFH{{_#SC$>uiiG{t<7nY&X`rfE~{e6jPz{T}P?Ujd8gJiHWr)C0XXO~;D
z>5_A%CODWiM^lQ8Y4C4fPDPs)vF@Q5^SWH{E1?1*CDm2mU;E(l!q~!=ZFwE}>;BbT
z0+%A7_0;@>+R!Nxks)%C$<u5H;Rce|8802+?>lxQ-xu7#x8_TPP;!3*fz|nNB-MdA
zbgCJwsQrV`{9Gxa!tqqc5m{(N5#+@NJa^_Um~J&}RfWw8;8A133sE(B1q8{Vpt8-X
zN@0{P!<h@u!s&B&Wf0h+5usBsVdke6&C=9Kvv>X|EKco*iB^aBBbW|As2@=qOg|CX
zv>?g=eTI$@$^_s9+5oT<81+X0GZO}`*c-yqYzW<Q9e(CdJ_Y~j!ymUB{ixVCeQY8x
z2HDWu{q}Q%J3s3BE9^$xyW<-)b{&9k;mE!=_I}wN=IUcKkU=M&Z?&V@nRYn0f5I%D
zYMR;WW0-l3v8|IqVfH`|3*nKBRY0dxW%El_wr_7VI(&T596ml5?KwON3rlS?HIXzE
z#9VRq#pSWh>b8a9S%ASNKzA5HzZ=8mpb6c61ihhw!N9<16vC*iAg_?p$N5|mb0O6}
zOu}23P70W41TftRU}@n9{M~mPgAcsnP4KIq_$2(^pM4JEsAVzY4l2`wWa}pe>BiHR
zS^<^avdX$;)!)eN)>>Y!Z5MVkFUc49ub;o?kNVuzbUV~=|Kd}P@Z`_6gM}X+jV|<h
zqjO2KaRmtrVM!pt{C?9MwRETwN9I+dX1{%^mh5TALWIeY6YuSYz9cV>U<z>^iR357
z-BpaMJaXMhkVS-Qqpmi_bqi!qg_Qlc*8!Icj59%q@`ne>EsDk(7|H$yJKZP8AgC+H
zRTa=wC?f3Y0F?*8PJ<-UU9BYhICLth(t;~0xTXV@9`RPRFgX#!>c%;+#UO)b)K07J
zZw|^o`x`~RnMT265(cwVVX$y0gsCedGkIe(nR}ao@HkX3Q<fR@hpVvJKMPNu|I)}n
zVq4KXOi#{5i_-_-!0aJdnqP#usYRHYoPbs%0aSx3bIkXXP_sd}AG=FpFM!D=cKIs-
z!T~(JaRz?*Q(uHnJb15N+3FQjlMBhr#Kc5eF8}Ff^@$(6G<e|r_`SC~cE>kn>^cD7
z<iqd9&Lu+6kL(*!JD6$hYtJM{j&`D@t0$tRSBEfpbzmp1vt@LsOaoI6xCAPSOPHFr
z*?|L%(SgIW_Q;7jbMV-N*|%@PEX>8p#3Uv$Q3fsKR=fQQ$~A!ARs`K%1ikGT`dtGX
zy#&_!F>DV57-kj8oDNYRy|M(MD&w4GRAomA1?Lhe)L@6)!19ngrgeG%QyT!YO$+-b
zXW(zX{{3+4u~YCbe(yKT+IFvKH>ak0qpg)o+3){mi6PjZ<IIhZ=T|Sh@bYSX4V2{o
z((tigZih?%z~&?94$i~E>=gt(b3M710dnN;8l@<6o{HV-RT2+Cq-|AyUp~W#mm3XG
z#9hn!N;f>$+=m7=L6W@|WI(C~$D025je|UbAm!JQi^%&V+vNQq5}w|7yl!{Cgfk$=
zCusoxG^-;(lFjl5QwUjV7u`TY)wP8$m1CCUo`k~xlrrFx$0>k{CMyyX!u)y!FgXdZ
zy45Gje`wk!&+q%c2kBEo{8k2QBY<Z{0B{Ka?g>rw>rp-%#b$0YGE2u}n7t-4^KWT{
z(>FyXJ`6UTu|)=Jo6o?d^=FC)o(eJ(#ziZdFw^ZBGdDd8a}%>LKQ#$clPxouL>602
zqm=Y88^PN4CY)VA56@g&w&yo46zJ$qwr1M%(@V{=%vby6{Xe>red1U9*}CXg?i&8x
z@r@t54!}3naNzHbvb)OV>s#@ZnTQwK&2V9<Y32`4$NO$c%-n5JHFHZ~8wb*13B5F>
zy7)Nm+l9$6J9wmRj~$wWqgTwr(JN-mp~JIgVNWZHClf5ILQ6+^`E(1QdpdwouL*-;
z4E<pO{cdPC2LWsiLf9My&>v#=yZ~|}01{D(_Yq-Iu6R?3Tk^zWV=#|h=NZLVN<f&~
z05*mI8v}sl(7?IP3TDm@;Ml@d@V|cG@52A}hyTeuy?j2KY#jgD#rXZ5mFf@vHHy5D
za^KiF@+Z~5=mfjNn#uReYV}zNip>D3_F%MXBklehR8abD@ASndL4H`SPj~5eE#IrR
z;D~!J_s`$gXkJ_6a%VqTvqK$tgJLI<zlRd`p4+JF5qO`M;dACrm)u(dx8rr<E{NL8
zpk^r|Vjz_QoZL_fy+b<q04Qo_**+@&BQ_v0;<3J7I05vPLi!BomsQk<e=_Nx`WbL#
zMOcY;KN3y>CZ_?SbGZ#F6GcG-D(GLTJqhh@!26C`5v5%zQdrplc<hS+@Ws%ye<cbg
zqS(w&M`q7eiJ7}04j10hsyf$4rgaD^(=Mw5)_W^(se8$m7Gr-~*a`)wGvJODC7lL~
zwJM=WT2U*SY0W_xM39!fyL;IqKR2iz`R(=56I*)k?;8Kz@y#-J9e{5tDBm}d$S97X
z8Ba%($^QAa*>`ffar7PSVBvOCO<Ysi#zLA}Nc$rg<|#x`&rVGZ2FDJ!>=nlr&54ss
z=EU&@bNt9mG(Xz}Lmf}B%btZ|R6?;{!S=HTM*Rc^{SdagP1xE_V0#om4_~OtM_tye
zNlT<g;hxE)in(Sq{I1ar+IT9}!jIS<i6Qb!-c;hmAp>IY_^8?W85R``vI;hW5VrCZ
zj!Z4U55Md0z)yYT7o#UHoY|gjUH_96z;Gq|{r`Y^@OA$B#fYeOIsy1+p4lqffS{U6
z^R0pfXE+zF{pKl>B|#ZPHhe;WcsSg0fE4}I+N<r<asY+pHG<a~{~ArGqkg~juP+bm
zqXOP-rd$CnSl~2*Iuc4)<l=cw6HqO`$o@M1V4bgKroQ4Nb=0qa^R8$ezDD~PxpUPY
zohME1`};1tp?(#8P0A=SeV~zlBSE?70GdtwtYD?#0KEz9AIa$g-*Fy48TBabpekXI
zr{$$pfJasV;4@J;`R`&goh0F&r8t;B8JXFu8jYD-65BXw!sdY}Xv|h%o3<+P#gz_J
z@ldW8MS9K#!}~_%@}H#k+$RU+vri9;)#CXG)9%<E-yCDt0r<L&+Ejfdl3qKR4JVTQ
zGi|eUxMh~E@5KAw64|L+Ow~M9=CK)WX0V#&U`)T5Y7YlT_D$I1S1iHt6AR|}$whPg
z=zO$yp<_bqi;I>iD<SRY(7#|I-L9bDZ@{1*L$4o0zaK+)7(zb{pqB#-vH-FY#Y-$l
z_D(*PwbBCWwxWe(e%vkpVuv{Vo-)S8U@!%&7LB2GdO?sn3Yuf)=+i(Sb^1mjbn^-h
z6;tqoZ~j~GGk@}P&2ww#w`ZF-{(A`Q;L_-KfAz(mPsg2rin<DvT|`RqqKl=B5XJ~*
z*C~H5A@8m<Q{*Jw;nl}GJfDoPLi1wq333+=0GC3Se7KhUdEaqW17hp^T5=}<q`e26
z)1eW!An(E{81oqv8NeP0JMAbT1E{7$#rQ7}x!23peo8<J0^Cy9KoANsP#q%t5&`1^
zk0@G#x=K`)QPB%Ud9V{?BSGeUMWnkZ#D+`Qm={J+75RVr+U^|Vs83OLtD@|t!~E<S
z0KnJBLeuye6Esb1CgaFVwgYH(0xmHLD{N&M<Rc6Ht)ko<<hGX=b~LtrzYb@2?2d1y
zvFiZ5B%{uwKA)A(BZ;uiezwsL_bj!-y;sdNj=UoY_Pz(o=9Oh0m~>D;H^cd?ghpdD
zTADG%^;a*NlZO|gQ&%p)wWk)N0|%xcMivrApjl-`-2!?~S1{-XFc^j~7{xFePC!2k
zVJk%lKO_x(Y>S&B%NZHXq%Xs<Tg}DN7)m31eor;Q>&PD=YOHBvkyd84<GcJlEnlnc
zR!vM(ZFV+7YU8{XKol~Euz_IfRt5*54d4IfAAq0v<DYJB_s{ianm7H54F+dc1|Rw}
z-QG(vtj)_Xic=fJCNG9iA`L&RyZUJ~D`r=m0xgx}<Dg?<IGao0wBe4o&$R#IM>q${
z%jf$6ZEgG&9niD@nOADsL!h)q?R;J_Js>=T`VJ+qTq_SeWPxRaz3qF5hTH{M2d`&<
zmvTA)(r5|aq<#v@nXnYaqk<00`Ag4Xzbm0!dsZG2A|SPa#v1*~wS#V=+Fp$O7feDS
zB@<ihU}5QBbbKY0phlK3-Bdzq^Ky&&3If2!e|x>Y6S-^rcgHv9*mVG2qUfG~<DX#|
zLNl6+TG5`_mf3$*E8KHa+w6TO*ojvJHa<`k0D}z+-Lix*N=FORNpbw>G+cdbzq#u8
zqB(JF!5rN`olH(NO@e((Q|x|M+Kp!{3^8{<Lg+k!UfO~_GVt+lis~!q4iUx&ND<D*
zMk!=un3c}8)^&pyg77_~?O<QBKY{{iv`EWhj7Xd^>08gAQ7?6`#Vd7cb9T*jh;gB-
z3yS6R(N<Lw*I<L75>Bu7Vc*m=e9s$y2!83#f0v~BMsFd0{YPzU^UAg1XHVC8-xqh-
zYE;^)*f2p1=m22u7sFXpB6JA|uLyunX)V|9>+lQXoxTnwvL!vqT=%;>5xPb>ELjJq
z4ESvdmZ`abTgw<5U$Gb0@<-bHl5!vA_kF@*joQ?3LCw!|YgDI=B7WUhbx_<fy8U7J
zA2pn;2_vvrz86Gd_*E)`T%-E9(Vf%E09D{)CqP7auxA8v0jNE%a!F8C&@mjohAX}!
zpW;UFU#%pmv6rv({pWup_;c;auJf=vUb?aC0K90q`+79uiJ%$JHahXXy%W*?Yg*Bs
z*P3$iokiKWzR0WQsF%Y=Q9v9HikWuO+rM`Tu0DR)oI1YGoIJi{j_sRCraCQ1f+oq{
z42MW>%FXiAB@D2?eQ6-KO_PJM!vYA#?+*d`BW#UZk(f@2a6ZOHA^|Hln~7V3&!RDA
z16_B8Q>9mp@D<D!(3T_p7nqvJM(u$0olQ_H;$tGtK#Iwt`QAT|5@}M}IDo7Q;JJ-1
z?3>;X-|?F7Gr#khUol`)Sd8BNXQO2Ks($wLkdc5F!wK*s^UPL|T?nu?+~zh23KNA1
ziN>&ktrz<{oSzfeS}La}w64S_F?}i#5XpLRpkz(H6M&z)ssPU@djLTlEZ2EvXI#cA
z0QBpwi-02@R<aUN7Ua4>zci3a9!0NT90YZ6@T_yg9^JMe5MumI$PqsxCnmBq>kxGj
z3;%@`sq)68A4ThD<4@v0_&I$yFsRf=hCc$EV8IHeA^1p8w@>f3m%wcLYkdCNUwC^S
zS7U6s=g%2`aRtw>yw%;YJN~?5*8%u*4UJ~~2e+=dPr~W29q*f+hz?!d3isaJFbl6Y
z!Ng5vX^x~BnEqA)WtrMeGRzLlPWFypcK}Wv-X9%5x)+WgSWIT;C!p18lE_N0Tfz2P
z0T-V`GF%3u%9z4p-}?kcWdLagq*^viQPMOpnHqZsfYyeDB6FdjOBz{eTs&n8Q{M%M
z^bb1)%IX>is_XdDLHT01^>a0HY+6ua)>Xc{<;JH{-*76FPtvqBrBgRIL?2KM&=@$k
z)rW&~SHtZ${iWn%U--Sze0%SqrR2RobEf>+A1cbhIKkjW897v8z7p6rbuXx@48WlD
zi(nj>4$zjx%#Y+Uw@|clf{L2SXlg*fkh(lje^QQLN&v~|kL6lK+(#1R<Pc~YqE1J!
z-K5$&hVR9w)(U$b{I80EP8Cojf5+MsE9$>Ps!$ONNpH~ga!3MI3$XmJNJo&40hI#c
zf5xH{!0nwyb{C}~TzP~x3=#x^N(Qm^A5$-=z=wMK0VIJn?Eswt+!2&}rjzr$`|BG$
z>U3JYS8>>cB*f~2P7;|U;g&;qGElt`TU}*YVTVOwM`clE)hHYNHyj4v^{fBg9lPVd
zHFh0<KZn8RhmRksW-=8t<GE%#I<S8-IeJUe?71zhrfvn>x<1c>_F#~~AkQH*S<#Lf
zqoaGK>~*i)Z?3!YpgDDNui3L_q1j5>n6b2@44^+K;q2K02AL(5TolZ)5TSSuq(xvx
zDL^`^0GCZu6d?h~3u@-VEOOdiKNRHmx$KUo1-2!18`b(K>zu!~vUgLwi!^0QsYA*!
z!Wc8f>-;~zS34aNPP*2#@{#MFqbPtR2^^5khTppuWI1t%Lb$NmgHwB73o9p<n-4wp
znchru{|_uC@BGMx;qU#r$0B=C29`HMHCh2P3#A=G2}20Xq=T;sQm+@5z5wDsd9843
zxZguX9Mm$N<M)QR3yQ~(s-ThzjT(7%>bwR*T<h;3epcI4{9z3G_ev1e8+7b{h5yCa
z>vd&kW}NiLha^pKsFkxGKc5ps0k8_73M(X1TKt`tt;qx0JcrK?I}sT5^EqTj3Z?;~
zu!5$ksOw%5lz{yn5rObi58rqbsLnE9!s+J0WF|Rz<wSV!H4U?HYYgohtc{OWm2DX;
zZp2(yg>HN?h@xOKjO--{vgN{#&KI!#<RD*tbYwTrX64q($ZmGivX_@tZU^b$D>w&r
zNimPQtK=>xVRz`*bpXZ;zQV_~F~hE6?Rcrti4Pr~jE}!1G5g;Z1~ab)+dPzwD%c*S
zkQX^L<22hlJ=weV*pj*S$bNI`iaqAo{-tQ|{%L5m8fK6IZ1e%1TQ6Za%ponTDJ$%+
zf(2wT6jcCOjy>)H(qRRo5fGH0qvo9o&&$5*Oy}ZdF|MpH&xW6&eND}31nyaQiQen<
ztxo>+=NkCc+&%RQWIyOs@poL~co*f@215;x_LA3#(e<#etKY`HuTxd+$}kZzuTTJH
z2(LZ$ZaBa8T(Z4=elQbW_ly1bsZVX^_n&=nOn{sZB1z`!NO>=+5{fE?2z%HEg>;LP
ze6?rK^)gYFn;Jnq#<7=w;Id7HYP36`q;MGWM`E92oM279i+XF(pZZeyk-WyDj+0JE
z0ar0PVINPk$-BZT|5KMWI%fcpfA&Ia{((yTiZevQKXp1l&j)2dLW^yM#rNdYhtN`(
zXCdpwyniT$AAe%go))U_wNQNzOEPg9(`3pwdW^^7vyCff=NmV@e>T4Azc*Fqrcqiz
zFB?K`Q>em0k(kIPCa|O{QI<(*i)Lkm1zUz!qRe#|O+pgQLMOTcrlSB%Vz=YCI2(q=
zGd37Jlf(AogM96wZocyLpjcn&7wdzx=$9x?^umUo(|S7*gI%ZK<vCua4!~EA@T0I5
zw3DS)Gu(5a6CS#`8SZ&~2y<_PvUTNXP{MYK{YHki)hq`4=4b5j8;+Q3j_xz3jvp}l
z_boOjJ1trdwvR`n|L7%*?y;vmZx?69q6%S@8yKZ5sFRYh$A07$l&F`Fjl|&v>gc^F
zQM$^x-yMJ6``k_U^rn)vSuMtgf0-ig-~bsa#pY!#y=~UZDBIn0H1tr##yjNLs|cu#
zr6LMmIzj|++*X|5!TJGMs@Tsni25yf(+%%8AN=%BnF0o8HopDWQ+wepX?ZDsvEo2N
zHiDvCVc3eThO3Oay=hY%G-NL6qB(ufN1{A7)zw!!?7b)Eqm2I@XaJG*)Zlv#0~vDv
zyXu?yK#*5f>E2hqhu5`m4C|+0+>_>|mdkt&_=%}K1T<KV4I{UTH2RUeKi^aQ9zS7h
z>A6Hex(uR0XXydra8lm^8-^@@%-sVS6~In=Bmo>&L;~!f^lqboC_u~%-81!^zLBH8
z=cbb5Qwzzhe`6{<@ej+=99Y}z7E#pg9pAeLt~_+g9N)KS4ld4`*~zA9VN-#?Vl!$;
z%dF^+hOn`<1s6AZ_TuISTv*?>tE*kR(H)rWVb!!nc*@x1nk1fuPO=1Z(J5F=08BGK
zXM_I3S+)JhsMvgDP;NXqw3}yA*k0{r>)V5Ts~BcO$41$??>iF-JIAh*aQTgwkprMH
ziXD&eO#<zBU#Ddbo|ufUcw-VSz9p`vZ>y?!X_O-AE(dHF+G=Kl1M_qCilYb3HOCK{
z6DJNvd-l#kyP05%IvAvZx!5n^^kz=Ec$yv&x(u<c4nR>=fT_F@vhqg^>u0G2oA0QB
z*L{^#FCqjq1QM@}rRLT>LfuaGzDolrL|?0}X>>jo^QqNRXTTX}wftVccv{r^t~w8B
z5Va|de6_ZDx=&t8LKdoJbmbTv`AiL$*2syT5rnWY8o^@cu)XEfd(9^w_|?H|d;jYf
zs<;2hh0$;RpD5DuwL1a)eOqOHv0}Ec$N><zn<84Nk5CewGyYtaK+zWV0;tQ~-Fb0N
zfR7010a6*Bm%A4&f7hZ{75+5Guh$rv^HS1RUw!t%s6a#DeReJocE<bE^0rjXM;rk~
zEYvjAZYiq|lAJL60z&F%7@qU@1TeS)2A2v^5g@7a_ihthMk))r3{Z6e=yxmuG!>El
z+A+Q=m~4$;VWuSKDherAqa4<+^U$+XK`WXIm*O{l_jGu}zb&DhS?jL$W;@Nzci(z*
za{G<1NRI8<3+-4rB&fN84+}an7I_X3CDt^P3YyId;-oTILRmrqX_3N4e*l-Zx9z2k
zt!!<z2j?#K?aJ!5U0LbFMt2nTdgY#c6dizS{_SzJ1aq;0Br*^tMGqRIXR>Pa$go_!
zXHc#`&@0!T>f5yoy?m{omV+`aP}y+&%t;?c?+WQ}-}nT}?s##=%fJEfy;{C;Tk(9<
zj*cE`hezMkF#FyU!_1pZ*_;~<3+UzeAPkF6+w>0ZTeQcH>@!y$Js2H3dLWvgn}H^F
zAVZBE3vjVpLcU%|y|aWmVF+b_q`UyqJ^-c(Fin@G6%^DBuZH4ry22TdA2G>$YcMDd
z0PVS#r*(GHgZTA0>jXwk4D*@w&L~rFdF|gWihdG#YaKQv7!-~dg?JU0;mNu#y5j%Q
zmS}HznKZmILR!Ytwb$W%6)&3gvk7XGobe$aj*k_i?@QZTaAf~$;K<rz$%P9KY)>_=
z`tecn+7GRzpL*cM;saDw*5g*cmY`dOvz@U+m>cue__pZ2VY_?XGRfac*&SC7)YsdI
z@Tenz9)fGFTa(Dt8E^)jzC)BlbQK7s*K4Hilm5=if6T(D`w!HmhjdL96&gb(WKX4K
zuP#Fy<6eT8r?)0Vl4d0lyYCmWwgfgu;&Z0D2$EJ1BVQ+YIFm%RE4&=ZE~8p?WD3gv
zH=_zV2|mLWEbhr+?-2vWqEJwYbl7h|8lZNKmRhg9aw&Y{&nGbZ`i<erAPLLO_q^&2
z$=h#veRJRJev@YftZig)5v8TjU7_Ykcp@XxR3a*%L6RfCk_fd9EX1*aPAi6m&IBCZ
zzi6W47NB7PlFC3-!Z1VUAcN)gL2>5XR&nX<rhWG8nmzOE7HqB$&0srE(zLn`pmALi
z9sR&k<4V|vr4(_#ZQG-#3e&xBSgn1bo3B39uhyUG<*O^(+4^Xh^%3)W!DDt;>;-Fr
zcE`8MxQrcuaX70P&xX_SHP=o?SASP*_J1HO+NaVihf&spKJ>FjlJ^eo+Y85!A2C-Q
zKWvU1Ih5>KoCWNHhb3Qwp@sEc2}Pb!NfJl*I6E0?5t^oz&4yrx{R;9?1$i1kS$HLL
z4wkK3yORD1Jz{l-SB3m(?sd^HTgf_V=jJo+Pw@<VbXjxq>HxSJZg+aT+G}O}>nS7a
zs$?&<37SLpQ`ZXj*G#b5DH-4QdTBpfToVc@a#b>+=h)QifEPSogs6MH9A16(cbboE
zU5e7ISIoz+|K&mX%xj0mnbC`p3MlQcTOp~fD#6;)G1DoA6Cz-3*y_XMfEU}vjCpSE
zI249=BtEp~B$G_)N<#MI+W)$iUr)4LQ<7d*R=$S=`CgN1D$wGpJXkwNHLpN!4d;Bx
zyY3$H_7&I3t6=ZIZ;3!0L`6S5EdY9E7}lp}hfYv!N;uz8@>`Sw2q2^?3e5d;`CpP$
z&`tm*lM?0+WDq=*vLGQsL<nnqT?e0y*mQzD&2RhOx#*@}wiv08E^J<Z?3(0`+uqtd
zFn<Jk{S=-!+oRMQp@R%spaVc{kMX|e7oYPaG!O<ML=h?<8YVslSn`MnNC}NNhelFD
zdoqW1$3k<W0gF>H>|bn~SKhGb8arf_h0X08E-Y`ubI-1iE<UklpLu4@E}!ke=2jQ_
z{URx{=%&ET-!#?O|3izd1XV5}=w$0fFu1=5%YV8(x_JLqaq+RO;^Ku~x-lA-1B=bL
zUdZV0R5sW}3cmTrW$FOblYT2%N~YuM-!Nrv{P6@9UXu<BRR6Xn?DiJsr|hxguZT{a
zJY<d@J)A5pEJ7ne!51{>7S=YfvmKJXIOIiy63<v#R>a6hk{*`fA!#p9f#7^c+VZ-k
z)y7})pc4IS<j29BItpTpcS7g2$g6V%SYVEj0ufI0%J6nrQTH&qu60_iT_gXzs7}a!
z%78!fiGEIM)-MATD<drRdh87QeWi9q5<DFMXXE`G_gJNY7+h;<0!8>TDJS4{uXw-t
z=-t1N#X<WO3(33w>G|@P|A(@|5~{Dw39!|u7a-BB3L!%TfSwxO4+>HJj)yKcJ}yjD
zXIJ$6*Uk?|_xKO8<w^*o6tGt2Q%%P4#z7j%^SU+CcNl?l8?hCy-g68_c(TJDdBE>E
zP$NNgDIjmIR)^5*LPx9IRQd|l^-(#bt0o{tKtnnJXxMAQp?Ako^CSVDvG*>P{}Bg(
z9e^le`QKI}fKEGy_Q8^ThKRcba@*psGvwci4>p&QZ~GUW=*ZvS9<FT9G$+jWzw>*V
zHypna1_OX+FLt4{0ky?OtwIbO@EGxdr7Fk>tTvaTb72C=Xt@eZjzmaAH_!pV@1SFV
z?<J7nx!6F5$U+jA&`b(wHB)G{GHAAQNG1!2rUO`*jA3cdBHVb(qM?4q*l#1PU}LQh
zXU=Tdi>Eh67oXU$r=Qv=E-epW&@H0T$WB#N^5%))#GB{htHC4{l+Dp4J2^N#fYncI
z=NG@&uQpB(VDs#Dw!YQNx6<CQH>Tq8l^lazwBVa-TxJeH{a{Ws_a#&DE5EZ7oct#N
z5%>m>RV%&ydk@2PH{2Xuf8)vI$Q65`(`f-Jh!45|Tm2G>&731V5-&lhIRsSdLxCNH
z^D{L3DU0nOq_6dJra~B0OTJiuhi-O+`DNdzfe!wv4uL?es-UOCp|m@T^u5U2MeSp(
z`SA#mo6l&ZUo-f8B!Qg;&+5u)bjC?0c2)qCQZ)5Rc90R-nUR&bE^l=STFoJ#MgyK&
zAls7~H1~T4$ltEqPDSRW4<Q<{&_H+8hlQCF=9&|4Y<~IiKiQsc9{thz#ydWBY4itw
z@U^1=WhN;WQxsX90>F=a#=DZ_3ED*zTV-v%Q=+-@F=vNPxJ86PQv#I7_mCqxNpcO5
zXvo4o7;5X)m;dS;3@P?wS^~~Jkhd^0uNwo^PNJhV>h|1T)<VyG@e!M6#y*kx>jD+^
zBOEy&&q+vPK#U3?q0dAp;Vb<H2oOMHk39p~AX4t1mNiuWj}Aa9w$KU#n3_rf_Jo*4
zhlr2{E*F$dzl5$pz4pb{8?Kp)-u$~^5T4rXUfjI#@D0uPzVSWKZY;uu^#PPv(O(9T
zmxOuHH$yxVaxIA<S_GyDD~o^#tsNUOu|^cjDPxros!l3kg3f^D4w`8WV6qUxFoMW5
zAqpoT3My#CD3y%eKyzp}b7(elh&vg?QzM9`Gl(Vw*gqS<{yozMUN=V<uq?u;-!EZx
zC5208HjCBM8^!Xo+r|0Q+ji|jKib~TX9oS~)y-`GtJ~25Fj#%jibmB$c`-M=FK?9>
z{&XWdf8Vyf^i;pt+8UN!L<`C^O}`@L&>y>K!8c}HMh*Z!n2n?Zd#7Ia+LpcP=OAxh
zGaPI~2xag3ldp<yzU`ICRi}=_%mVhi$0)ymwao%KIHaH+#T=!OLy%%gUO)yP4S$IY
z{gQ=VD0=5MaQr`)R55%nlPxp$eS_~sz3zGN^7ysN>X`9&sHXNv9~Xrq5?Ae2i$me%
z-pBLp-bC*yx7D#&Eo19{&Z*#<1@0pnK3?G0h}QswhYnByf<}^pYKWuaB2IN`d}qb;
zR~WTG-8Y$1iHV02at7A7`*7`%H^ceW$CHiCv%Tr?=HJg78`p27pL+PKGYh;AD7IXo
z6Hvtl^&5f^Y3E{aQHaL1#N!;lgS~a==Z?kif8<5=V`RT^_PzT|r%EThQ>PKINsl5j
z{9Qq6JWhebb~ti(Er<AW)YntfJ+-68RSdMh9^sKsKVw5$EvR+-+#*^n7gq*Q3IKr)
zX$c%q-(dVcq8!{`h*^bXEL}+<3jQDjj(x6Lrhu7+5kRvI7OO!5gK`0$2m4YDMs=F;
zbg-xK?cYBY-SmrTwrvOLR`0#H-qF7G)SGNSE#cB&NGhDj6C!j@q_Xuw<JrR&M%WGk
zFBtkd)?ni!wEUH&w#nFNSgS}Z-riU)41g-icup~uP~y2MDq0q+BO+ODQ~>l+<P}5^
z1#K2iicvkWgg6;NqnSdZkwV-ViDQsLIBj5J(!lh|&>X)W(Sk*Qpb^<Dg#JbWtE;KK
z_{{p~+?SW_>4z`bvuCzo<6<uwbb~`h);ux^C;rlOassM`9R#g%#kBIr^RW9+T5UbH
zRb2Y=Mt13$?R0H@E8R#3qe10Y`RE<z|McgMUFYDX8<&X#z>|BcF&!M5`Hmln?eU+;
zv&^QWe(&Vb8=_ae>W#_aV@IGp1yGm*R@QQeW6rNB3_ik|dt~RQ9OY*jP;MV<@Jlo{
zTqox#w7H(`)CI4$RJ9SV+4z2>?y|IFd0{8o<8@{mOB;(}sR?BKrh8xnQ{}l?8nKK$
zMs;aj4coi0gAFnf_*9f-{QSBsaJ9ogc#eg;6u#%75j+_+Zah>=0PxvI3!nk6f4n>9
z2wI*6js#h7Y5{x}P+lLKAl-cR9p)pS{dcCYgJL$g{X?VZ*{g@ebHl%QzX08V66f-P
z0W*Q^;L(sFEK3{?;(@3>zT?daYNGPX%$gtTwc|%Y+7!?Gdn{u2;&Lw=PmO(cmIJaQ
zAuzu?RFB}NhT1t)dZO!ekNenNQ=iFE--|BdRsx`;fcO>?@g6b!m?}Z%8kciA0sc+n
zhzEj_2y%koL-s%B{}KL2R(q$B!PH*t$rID@hd~5E5JrZaiI--m%=A>_Xmf9J$4@uI
zgMYm{SRG6?+vW$~_P3M8nG<kvV_=XHjN;McxYrlYC1#uxB~_359E241({;j5la@*-
z3BBV|Ond{4J60SaCjyZHyw~t|_9%Exz`2SL8u7dEJLo_JCG!lzK?_1?(Ya-!p@ldp
zpwTFy(aKG;lR`W>glHy(Xr>RrL;#&hfXR6<$F7?-)g6l#u!I>qlb##E^0S-SrDrza
z+>@KdnP)cb>iMDRZWfE_c6h|V!rNyW2VtpsBLt1AXD3HbXRvX1w_Lq{Gr#n}X1@AN
zFW=hOPS^Xrv}=okn~vA#T<?7CLb|J0@M4e4!~sC^eFRJGxBeZ-4*tZj*xrt->Etc1
z|BmMItFE^*i;>xTMFDgB0XA0*^j10M7>p_?P-Slb7L9&c@Pmd?KGx!wr6nhzj>rY(
zRwGEpU*;__ytIfH;j71A8_znLALq|1u}e1Nj;zk-?(~QKx_gc1T*p5DUo{jS$xZ`O
z<`Af3;5Bveu-q}In%)w0LJn5D-uY<=miX2E<To9MK$`$@Q+PfG(Gk%4aPO3i8Mk^H
zia%)O0iV}?+J~9WA-MMV+oJm)`NM3cx%bFi{LX)R-u~i`Ru<`ae-R`=wi}d1fL(wB
zlx6Od$D-wFs%FRVel2=HM}|pW(OA$U@SE`XWqNW(+-B7w;MTw%YJhD8eWy>(y}!!}
z^DEy(PECD&-J!`D9lKv?gX7MLyBPH~tq}@Yzo&n|l@VM9$PNG-elkiV=p(#E>;<5G
z1k^Vp(jQLwOfuy2$c=xH`H%4b^yCQIdysU~AOnZ_e>9+|2M908VB<g6yl!q!{N6u_
z!q%%c`e%Db=8h#Fc=KO{Fq}gMK0QY{!i1Vy5l6;dI&pHDII2QX9x`CXQNol#2o`}R
zt`uV9uXUGf`1LZ1WVWDBR7ol66jphXc!ipRFsV}c8X@j#5kfc$xrbzl)fN`wsDfsr
zfcA6-t?3LJ6FEeaDTM6-Kx<@zi3*YlV-H?42?uYQF%X?VMq^?J74+7IcJ=IrSw6i!
zxb(<6oPTo5u3Q+x>hdreY?*7C)$9$ea31z0S7Q}JR<*N>Y1IGnW_Ib%*7D`gZ{{nf
z`^Dz^py&;U#lQ}RgXeJzb~?(t2*JzR0pPn}DtX1VL2=|~hQ(^H6D>90_NMPQvvUVw
zYBn|3y)J;gS442`Sqtkc6_hBci^hLgk+iPGDcxeO4N2Y=8-0cO74G(ay7*V#a{?*u
zR`p<WA?oP_FC;LW^QiXPhw|l{&VYJl*)BkG(XoI0N{$n@z8^l<&dAu8Y9~VeQMlLD
z`;Q?OJ5mDf&Dy$X+Ca+-3D|Y11LZO9l<F6;8IAtEa=@JrwU_qbqxP5gjx7j6*z6AA
z<bl`2#kHrCwY4XDlg;D*a5jG3udb(`xbLee4XmoX2*7qj2$srnQ0M*0I-#K=@U~X{
z)63$lAyOU$1@O<l9FQ$BUyr}zN|-#N#6T(G6DZ%!`WocPXPO@14cCf+iXyOtu%3F?
zcu1}>74z#k^{}71J+$|>o_Dq*by~seIYEyDhMjsyv=D1URMa4#UO$(0%HL%0wM(EQ
z%0XlRn#L0Qe=00tX<r}0DSSvvz~(^sc|>Z!FNFiZp2<w(y1B*V17C!oJa(yjw)cu7
zuWi2TmhZO1EQH}`Ky9^iN`(-sfzLeGs?s?_r-n}-pHMX58s($WXR%L3%BY;wlm;x`
z806Q;^(U}NARM}G#Fa!*NG1vr@Zfq=;5;N86w<0-433-(ELFzsl+3k2ZUVJyCQYIM
z`lAFkM-7NB^7&7&G!co0?GhRtbP7_4r&9=~h7fdyP<1Q>9e|02$V?rchb!K+6p?Hr
zikz+Gu<~pVmY-TJmY-P7&ONqfm!I8$^$UGS*I|#zlW%XDBj3KiaT1^jMcE#mD}&MF
zL+C!*w;K<w=PO@c$(A3#)L-7{WnF7|Vi|jk`M!DKxnp-+whjP42#shyZo#X5BhPz<
zDdXr3ul{~x%t2(xz;(C9u>S<WU|`|QV-;kB07@#;11M7==8>^S!yg#Tt*J^Lv9aZM
zPU_dhEVX|QRQ4ciVOLwKOmfU@8Qi{=f^JWfUFGs=Vt2ur2gka(*-hS_=SvZQ#}aob
zg&F}EGoE84FWqOigEe63BK>+jIvgd>9hxlX39_r;3_DW63!oSJRXK}lq?{G0BYhwK
z^N*#5!Rx)kbAfG=Uv=es;p6xG`zS9rM|08b|9N1aJT=PCj{c&l09$29&F^D$g}veN
zslkYr_JNxI_zH?Lk;@H2P646>a!7tzCfh|qdp)D?JA%Tt*L#q-g%yW*j(T985AjRW
zASVZ`7lepstnV<^2*^9u`mU*+IlX7<{Sv6(`w~7Y0y5F%3`zWe%MQpHKu!RXYU!|8
z7l4+<iU8_cz(|00P^3r|Cn${m4L~QZpdAM=+sI(%0Ltj%my!GyU@ri<-Ck__&&M#;
zxMpro^L=*(L3M1sdvS34b#HCncIthwzFk0WM`ZlDxAS-!g;7GiDdegfMEX%tQu97_
zas|&1cm^B2r3z1$YDD1NB%Bv%=*=h#r9l7+Ie%=_Ie<W?KtTq4is-cA<&ZbgDL}3T
zq739Phy#IICL~}bRT;F-VF=+MfoQ#ja?GX~S=&f*NE$gr%?zS;3dvM%qL~qx=?q||
z1egMd=0iBJe;N+FZqZa#gj$bKY^Jbvu4`AGUbPn=Um2YL@^Z2KY~QS(8%F)j;y|7@
zj<mz}+n1UL;EHAh<y6rd%x>S)t=2!Yp00dxWpv@8&3ygB)@ZHY%X*g6kS~A~>^cRP
zvjf0mGP?OM$HByPgLHZD+H3!20@W3;a;XPbT-$=qEKefm9_PrvDlHNEuw;)2eJIR>
z(LW{LI6|j9GbMQIiTC-2Qimv-@x#wV?K;-t2+v=EmkJp7Rkb^x<h?|K)qOe^y?f+B
z&sgy9QhuOTMM@I!*u14(T|eh4(WZEO0$t9*1G>+;KKEOV26zo`G>f1!kCb<FK^o6_
zbV{TuO%`^_LN!|8?W;p6bl+;^)D3sug8;HJgHAjTuekaSbNBtfl1;ZJj?6{x{9l&K
zU;3Z0mj5r33ZTZyRXN1pi+q5EA>5!wU}_%`Kw_7c18@%8vd<^T0OfU^ViT(U$#qb8
z$2(TvF~Bcj%1H@=equ=1fuD=J^#bUWcT0Gh#5)3exu5xBdSt<xC!m*=<aeyQe!f$K
zIsm#^3<5bNz!fqTo*=Jb5-q2ZKR$n|0w~oKsJRhG0F4Bo9ab<mKZ4Fu38Nx_7<)31
z`DZfWi|YYM<e%KIw3NK(;{fK$t?t_3-M4&a@~SJ|1{c<bHm`ChP{>a+Kl%&`F9Y2Y
zZNE)-9H;pSz@bQ7(6(yN00961Nkl<ZApM;N9`ARG^o1ZOt(?ioX_GIyx2k&GOgRvE
zUq6?KU(YqZN7V#!ZRori)*&JCB{d{eu_w9Kcnv(*EifgeBT_6U#7jAfz>E?IHam3x
zMO8(7f_9^T=0pj}^bq3N6wJg3g6S^6RAFEuw9txS_S#7^fBgcSf@={kjLL2X{WCqd
z^w?Ule0rr=dwkPk3Ssqp7q&M?QII9Kw}Jz=?{6F<ZbBL7n<G1Xc&l3b^u@usPh3pT
zeR*ZHe5s#z^GuZuy@_+Y9B~&V_!f5nB>E5cG+V)y|3{W~v%^cTiS{nu3>Pk5g7!q4
zCLLtIuABkruJL4qhL9kB(VORdzp(pxPIk2Ix<QVolH(KmToXHCY17~MyJX@euP0yB
z6sKE{M(Rq+^JPrvf!?X-;zw)V%&i4lys!LbUFD}GfwfqRJ{aRU`?_`S^B@S{T-FKY
zu~xsedn5ZHjejuW!~-uiNi2rn$r{W4xgPVbQb9K6+3ET`umvIm>a`jc9a&z&80Zgs
zuz&srICl6o$#ZA#-kxfm`2UWoH-2z^^s&$XMN$D(Raje<J+xG%E%;VIG8;{hEN&x*
zse!iS!b6I7cV0Br#;;L<@ySUq+w*tCySCEp&lz<EbU1LX=@zoQ-`$b;0X_-TtL9)X
zM_tX~?swI9aMwd(P~DDHL#UzAw7%;jB>8`O-%kPPWzg0Wa!(<votprm_J2i!Tpg3b
z;=vT4Rmk%wPz>KNWyKHg*EsYZvM}F#^%V=z+dmNmu&3MW_P*n`zml9fdaJ!~X#i<i
z64Rf~3#ZpTVylo+#X;t`S)E6KM9JsZo*DlZa#}!633Zkx?}&`JsR9z&=Ff%Wp<D9>
z$IzL_h~7B_Ugt(7ZxR|H2n9y^As8E}qNKEGrfY>|h^3|#gl~Yy8=^B&VZj3Fa&ol;
z-#<ZWz>FGTHUo&ycSy6K86(Lsg+_Y>&Dk8n=@FQzA(-g_zyttH1Q0YEFmY-crmk5u
zC*WERgN8ZuFZE&d$t`>F>5HS4ht3xl9$U4S&Ua03vuG!2eA{Gj@U|n#@&D1zly(He
zr+TLMrER-@_eQq<@Je>!;nm^AOB<ur6iJ59zuLje+9CKBb^v%xMAyG73EBs20KH@T
z-`-sBrchQn<V8WnTUe{#+u%xW&F?EQhY4090E9q$zj^CTqHMK;aTt^%d0V$d73Phb
zBn6)L3>dvDX<enh*9!jfnEQ}DKey~~J8R2-)UdzQ&btC}FBEn<`}IE81Vxu`=b?4=
zvi}-Us+u}&S%Y#aT=wjxZ=F;zkXimBgG7-WDa7%F#L9_SZt15K#$|r}Fx8zJiKgll
zhVOE?6oY()ubOvUQ3$>M2(CHyE?8cFG8$#8qxtA{f0QO?PV}=Uw*K3x0NHj`R#i|8
z5OOZd0xDBlOENWtv9d^xT1Mdn(B&jGyxOqo^+QHh9r<fZXAwK98$LMMUeCzm_o%?m
z5kgdjkmQ|ZdstS6clMam>ZMB5uTxlBwIXCYHQht@!^y#WPN80R&ydq{Lii)(Lu@IN
z0L2kf=OAPPC86HZ2H4RmghN8ge=*DdHlhHgCJUI|!=#-cq7Hzb0j&zWPVhAiJt7Nx
z+HbpMDti4V%W7Z-{VcoVHGeI+>c~xSVP!y3e@3Rb?$)TzEukl#FGpp540Rx!&&a+K
zA635Fr3Y$)Af`B2hlI~7I|hM4YpazsT3+bfUQ&_tx`PW6;0(Wf7|L}mg@1s5<913U
zQxfVRlMrf~NLeNm6osTn>XiK5dMc2aNgWQ{->9-#Rha=kCZ&O}*P&N(F)$6NY#3rS
zRsqRG2F=+aBnvs1*#T6YE<mS*s?AP8^FRzoj_fr@-g*E4Zcd<|L2tPS>(6b%%2Ss{
z%MYHn=oGA;?MJ=M{A4F<pWG8JeougXTBa<dQ~e9wYW<IvN9XTc&dz;lCB1NFGu;@C
zvf&uP(08O>F5_F&0T6%Lw1bwp;_qf<-_A{)j2g*4*y?T21Cy2`*xH(ajZ5rxV_9FB
zBNVMLyX5|Na!g%ay2n|=P@i;Kz4AGA`CZvwEv@Sn$gzPMo5<CeDU#qBtQQaj;;+=p
z@%}hV?7qV<fs*}j-R}h;d*-AC)XJi9miNdcdQh}}s}_vm^R|<3g?VuI0I^;?PSdPK
zL#yM7gE}4VV6D@Su}Hs8XRzjv9;@yTj}mcTL{sH+zgSHjwW2H_E;?}IRo@Za^`)Q9
z;-s~(5WV}C3j3elpBAf3*&f4L{NvISg`QbCLb$ms(fC)$(pH~}EtdR^>~|CmWKy7<
zaTgtWlfB%3ZfoR>GK#@Yn@sFNMs*@XSnJQ^dUxVfm?!WY8iOJ|9ubh4V#=`)#L6K+
z(%8uDh{FEfB3`6g_aGL#M8;px0D<^5f@JAmyc1L)p$^<Bco+3M=j@PC62Y4&pwho)
z1MB}QSePF{dnV(E6ukp>rbt<joae8p8zA3+ctahSxZ|Cj;FW)z+VxR3EbVu^`UjIE
z`)`Evmqw7;lFL7(sFl$!uV7QEJZk@4(q6I^Jz-i38_M@x#LsrOCQmB2XUAR2O%rN8
zjIsMjoifj7<FpDBLY<>XL|sXzjco(h3r<Xm?xkAJL20F=>4Dql;tOnPJSK@j&pMHv
zu?bcXpw<DUAhNK60r?LJgjsCOS{vf^X-J-{AW2Gynkgim5j3V#NG3}NrUp=UdH`*J
zssj*oVrZXen#mIf;K*AJ8i1Pswo}+X--Ao1SF=lBK4Z_{w`wn(-iFPKebet(``R$`
zH}}SS{w7Sm2J%^ZX49;FYPmRf=Y{^WpE=ii=JaasVpc0&cqj5QAK#)50FNY`p9q8I
zO}Xva>CV0gZ#Ys@LwG6=U}LR-i)WfJJzJ8RAGX@nvNbK|(>y0@rTRC34{B5I^%_2R
zpL;d?{<~^)MbCc>%J&Ri4RyN|fTY{JFj&QcoS_stTy2}=`}KKopE;1R)(vp!X9_hq
zKd7_;A{S9x0zVBPc}Z7c;FXej6O8VR+aEXoF%ujszBpelgi5U#*l|*{w2>)Y44?Rf
zM*rONDJCa_CL=wcs$57*1_2C)eOQ>h5{?~tL-Ne&PxPi*`|g-c-txVd?C<^(BM9Tp
z%+68KOjh)QphfC#l=_GQ;x*7NibZsjyxR|n$kg~bF9#=KJR$x)qqA?d<L9_Y65XT5
zU|%BXMxYMEjvLXrV`4rK-o@OMY|K?!x^$K340x8GBUim6mDo6b6_ioV_sKXKK#?x#
zBuLpLweuC{fO-Kic229s8&h&*6qSm80K)%Gl>Ut@>{%KC#P}fB>=`@}+&{r$j{K{f
zwQHyG@Z<-+vmIRjyJ@jD$Va95_FI3*99X;oF0A#q9kh3!y6;I<5K=U>l0scrN(!pu
zq`szCy}}7csiF`^fK&e7^C?!f#NGj(P6%@YY6OloHB{6|bNw8x7c7_T&>VWYa2eSy
z4m{_%=Rgn_fqt(nQUR#OL3kQ`9}00(j?r;9L<2(OBqAA7vn)wTpk9F>3kCUm*5*L~
zDf*5nata~{wx%GuP??yTBNdRu1w>7hI8Gs&Lz&|O?92!%tOjXYsG1RUPA$TTQ~S(`
zcU@<Y<()70VDt1ETzX<TJNLj@d*-oKyY}3s>1~GxLTLTfndJJvdVKl@*q+?H=eg0-
zKmEk^y}xsQ>vWgT50`#k?&Dk90Wi>>1TYI#l@Hp<Y=RL!J_J;fQvxh64`J<6LJEKQ
z8uc_}t65gH0u}lH)QE*96%W?)V|w@Aj;Y2))*c?MQ>S{AiY(|Do33`iwVr&OF5pG_
z>O5#{z#FU4I5m!*r=d2*V+8A)ZvQayps2J?8q>rkq9)qwot+zw+yn@BQoS_42+K&Z
z0*Xs%vf!K|$7!1L_gDm^WLK9#P+H%m05raLT6kj)neRC1^>b%044~ib!&L{~3@d9-
zC4=G0U?RNcCx`J<AKgmtIfv7nkCW6_RNtX6d`Jepz^?5Dm?&ZRUX8eVI~2JI42-(|
zl>P`IKo7{3R<h);tLXO#k9z9qB?y7$d>vQ7AxgD6B>!HGO9qjlm*PNS*`pB?H%<ww
z6rt&NDVo+>SndIh_&NXVJqcv+y=Oy=Kg($28ztxQah9P@cTC8|#x^7$jA;PrVNgex
zJje;a{C@%vCkAFaDa<dVQd-K*vvB<+Emhm%uVGYhaN;}P)2?p(-PEr3vQZGd>z2P|
z_Re1e7dN_??{?3dZx);brk6z=8twEbAb^AW@%)nN6*<eol@SDmoFPGu_*{x}r4FQP
zmngxC1Tjt(Q_%=_pYe^UybL^dc+s71g_N11)35iKE=#@(B43orW8MM#?=|dCD3!<e
zplh$_gE&HXoVb2;E~t&SkQ3=DinCX8BWMT_TthAi9!-ev@_I}bLqJ4BfM^+;FQHaJ
z39WVx&B+3i*$l#&Ap~=Murn1@9RtvAfH|-i77rbO#W&t)u0`F%%|2|OTZfBJoiCof
z>oNPt-Ot&lAMZji?A&za^s9d1(86{9<dNp*|K7tJpZqVwY*4)%oPcjp2SDQ5Dr(70
zXu~kEWm!;Yge-3~TI;I=ICriMGm8xf<B}qf0tLjpP)0m%F?+~S9<$1BW_f;SF&=S|
zk$m1lo&({Gnmk=D@+H+i5!m<F?(-7rDAmFI4(V6NK$%E&iolsN$;B%(Uoi8Ul;lpS
zX3_bLF@j7TGV)KSyIy<x{0mMnUSgZH-Z>S(s%=sUDJmt}R+!ujBB%MRbDp!@b=r9y
zJPyWK@aHT--B}QE^P))L+T(u-KL5baV+1}k9lY`1jN&ujo#rbNj=#{uj_=cClm-wH
z0)YDS)DQ?~Gqup6q?Ag5>lI0%!3u~fD8qeS0&E5^k+yegHRAV6$mI80=1vT;8vn71
z2>*Re+qmn)5vucnX`lE8G$J}J4T9(s@#xgJ(c~{i$sq-(puy6=R2fmRyT{rH=vZOg
zh+!l_{%9dYM@jM+94*SRqLV0*GByChE_e-m1r_X_A3@S7DUBDzHCRo8L5wktWtRT@
zgV(jxdB<y8!7Kl8WH)+QYLaie^#@^T_7tpc_i0PqXt+iSe1uR=oAmQx0Uk2K)FZ+3
z5WUBquCOR6sG+7(Nl`!4->Edv32@e^CGV8D*kXY7K5=)6=5@sR(;!8mdYTLHTzhij
zM8H&Mn^K>AjVz)7<j(WDN#;SE1?F*RYQW<r5CUchHPHu|481stDrrp1mjM)EXbh(f
z*tte{fYV-_=0b!5Dj3o7A#8U;2)h9^&Igc0C6yy4lQ}eIGKl9gF!Noo(*abS1geP+
zz|4N=%<PAg*Is8%zV|kB`-NxWxw{^;pZ%>zv(MgnHmi#H#cOBY^am4jOFwzv)`xy<
zYq*+S?!16+Q3pUTNSTudD}p^3QJ~_Lm7bfn8o*<Zbm91^7}{-s)<i&^`*7kGXw6dO
zN&z%oW-jN|_Pn?W4sU&|zTO2{z&(^Y8F)>9g0U0>zsY1B0ZAP#xMslbJkt7YK0e(I
z+IPRw#dQ?)>iboCKv!H70Hic<43m(b(yLxVP>w3Z$#KcW`gAy^u_U!=I+h1l){1TW
zuqPc)@CoxVD1t$zfFy5KDo33e2|T<MfEs8A-*|?V4z3ny8q*wLVqTV~Fxxo}$B(`x
zdh)3|d(+9D@0<(X@`KC8Z~pv$9X+PWC&S03vRIpK4H`A_VI&oeVKi4h;K876=W=~#
zEA)Iwt7d8LCg+uN*nVE0YO|DJCJvHg{i`S(k+g)|Ck_+c)>_RWM%q#sSLYkJK%+Jm
zqQa;)gdq>f8S7m^<%>1DjDL9P0zF10HZTan_5K+Cnb1;0AB_C5DG;Ip6ftUb0e+oS
z4jHB<5@1kKbDLIB!T!Y|OV>GVjvBEcS3~#zs}lLS`D6!f{%BTi4$@H>z3bK=f~C1r
zu(my*V|KoM&AW6CuR`7^&!B7Mg;?+x9a=5TsGBVDJ<W@G0fwZ==)5b3M7$;9&ywS;
zGQeJShfG{-bTy~X&#SuWY{->kAU6sM6lv;=Ao?05r1TB`r)Y%CH|$JGY75&Nle!>p
z1J})EhwRp|(jngx_<U&J3+!Ql+f}}YD`)V;tnd_|Ft9o<RJEY|O1f|O81kS(&zx3j
z1`UYtbqU+QTWC!b(3&nFna?0v?15QK!A`_bCNWr?g!Y_(E8e#cuDJCYbNeTjo4@n3
zj}@Q&!kNvb*{gr}l~WTZzXZSY{;lDq^m29rUNY_Mug55={w7q#y0s7u^9>ZIAeAVN
ziVHBo2-Yuc!DA1OAWlNcDYhr&ZYJ1G<jim=k;f10{gBhgIc2CoO`SyWhSmhTRo0Ta
zG{xzJ>4e#RU4LGl;8`_}Vpwo{MBE`Vp6C_0{5Km<otJC0K#7PR$xtPYtDWtM$I%0K
zIAh`Wc>Yrz20Vw@ww1$uDFM`ofTBc>^5Q6fFyR@=U??b0wZe>K(23PvZ;#KiSX+JB
z$_9i2>w>ON-Pm<>RUcsp{cK>4?z<gkXO1U>Y-7-YQ~!1{x$&Tn_KdB7CQ{-^XQ(oW
zr3_V2xVm<okXQ^za;)^GC`w`ZmzNXQ$*ayVX$}`-aOv*n41LY;u5ZX%Cjh@u?<?nr
zxzW6Thf+&jM*yrV3mjfBhAgndT9@*<Qa|_DXpO#>lPR2_(J|)wMUGZTfY<^U-_yPT
z!~+N=zpdv?&JmthYJh{O0wNF^Sm@+1H$8+h_YfNQt9Vl8s}%W(Z#+B`zVTDG>YCwj
zVBYeI?=y?D*TCvlpArmM>c@|TJinB}5<w$*Zlrs&IGub(xy;xj4eK+4f2xkJgyI;u
z5K1DdfAqJONNNWSDHASrn^+DY&B^dpV5x1zKly!W7$h&+NBo@n1>lRHDRfl%Z*mlQ
z8}#fMTGp)>c?7a8oPP>hKUb}ws1YvX)=`4N<#4@)R9<0E6<Sw`?*Zh6k)N^+Twj5m
z6Zt#D*(w71Ny}N(_TU%la=PDfd0f_3gbt)A0%ia<Dgze>F<iLRhUF)xVC}w1=-(ZJ
z{bB~;gWC{4w+`XvHWWqE6pKgU(9H+nhyR!NnD2P+E$xksOPj4~|F>T=@t1zKolNZD
zWnEt5TigNI>f0)NDh!iky?@?f=@A=3glP+?YzAT6g@+#4fb})Y4S<>fMW8qgf|jnt
zi6RgbT4DCIn{Zzc{~u@3%dE}Qu-q;V7WeY@&iKn4RK>2)o>xw|!{AdYPI+xkY@~*_
z)zEXQfK_%_n@p{Hy?^>$PmM<MT=gWQP6MY?#L>{Dl&q!O*L)-y*ji=8wak@CP6<e=
z36GOIvE{w`@S6PO&XserY79iS$%+2w)z9m9^t}6~u0-}6iTQvzb>dydh9Ro_MN{St
zzYv8}l30G>2fYH5F@qYX8gu{%JFN|u7%`66G?$9TQ=o1^NvO=q3z+pD8EdhtZGOF%
z>b`N;yc*gKv5OqSvszk49-}&x_06kig*h7aHLLGsL4<|1U7uHhVKlN6kJ&|r%KjIx
z1oQuOi2`x~FwcwEp5Y%v0Wh~eCZ}9K8D#K@H;6AJ0R{kv7l#lwu#Bh9r)!!Ay+^(g
zd|3X!Hgq`))5)u@n2X-=xd6)P;ixR$eB%$9y$d(M+E$khAwukeFycAIDBmR=)Ddv^
z8OO}>B#FV-=ej1*I;xK&kBkc?VJe9o0*2P85fG9OZT&(6$wpm_JV}>hy*_?c8+<a%
za(+nvM82aA3@=BF6z4>!L!k~18g_CX1bIL*Avy;1J^7pse??A0N!lv>lN<oqXWgFe
zFMf{O!x#E>Z1~xjqf?L-RqYJm@fPeLprcS=x*+G}&>5gti4KLq*30Zvloe!U1;es}
z?JR)RUIG`ETX5-#30S|k1KIrvn8$_?o?nJ22_WCI5BeK@^WNKUhWEbZ=H~hB=Qdkr
z|Mwl4c-{NIq5-%J#<!>gz!#*f`ehmP?@6Mz+1@^9vvdeih@HW3rYKRv9RN}o4%gwH
z&vhYg7-%#BCZ<Ixi=z!rxw(v79dU^Qmka1T_T7#YfR`fhv3FOjD~fo2^_CiCjm)K4
zjy`zYAHG)OBUs$!1C$h}6#<$9A2-Ts`_=r{+5t+btJ&1GIM7aq!eeQ>{Ns4XLQWTu
z(cqXx3?4JO#V63NaLNkDNHC_KBp|{GXHR&DAW1A;0~?|PgdPofB;+=^Hn!?CFbliB
zg4Cf|tTKManP<H2A!$TRG!DUuE8ddy@{Lh5TzLCz^!6X9uiv;aVe+Fz@iXTbX&D=G
z0l3snqu8pR#2qTYHSf+CyWFWV?RmWpNvcae(HJ8fPw|>_1bjSN_f#WriugU}R2>MH
zj!*$1PsE4xEzpVB`GmQ2LtP=@99y3bs76eZ!=zqo0ZS!ODF&}O5&p0WfX-J?zeGrh
zoBA*#2G3VS1VMo5q=duR_=mO@3DB&b79ujP_I<nn{{=_w)GW4dzhO3d&;3CV%=d=2
zxc&McO7_g(1gqO!GKje?Ya>XPr}oLzopO$VA_L-f5u~LKt;g)w`%*FloGO#^rmd36
zDJDl+XJ;u9BqJ<_-D^wk3^W>5*&jB_@*WysisV@_kd3xD^X_@qZHSZM8FzIue5ZjN
zhN^ZlXc=(?=yPvhX@AH$VKvgiR<^7v%T9xLT<lh3y^SrafFxUr%32g{EiArY*&Np|
z4h}gF;_%@6Sqbz)rvY1cq9afgnDz@GD*_nh0R7CsW*)-Ys7c(g!TJQ4jS#AhEfY2a
z1L353?upF2;riE`8?QLoJhypnG!vcrzh_$eumJJ0L;=1<9RM77vzL(CGrt|028@ae
zcD?r`Bw>?baMH2HJFo;}hH(1HRe0*Lj3h<T;x|xz3NRWW*iBLEdg|9d<Uyk$-Rm@7
zbBtWsA7;kaHwxvw`5pQxOVviIPJMar(uN$ZU!(f!1&sc<Gr$dJ>M}<u@$ys&)sgTc
z{hCDR^Xa`(L*EI}z6rV*H*@o%9VSo^uEKh-{G#`2Lx__cy<+48P}qsUi+24K<HGq&
zK0kgU-M{|)p8gx`{M`M4ihL-7&-;r`z-TyxLrbrLx!IG+Fkc=`$2b1mWaCwb>V#xH
z*m1H2-cy)bvKA2l>P9=}2;eah*^MGyHgI)>r+E9Arm<HxS?4<C_M_g8%=Y#SxmJHr
zgPHOAdHsHUK75C^Zt%n>ny)AKtnkqQzK678)0K@0EYGc*1iF?g0EHGDY%S-4Od%p5
z!~qESJv>K7oIlAU(|Ym#P)0ensujm^|7-!X6B!vWwvwLlN98<$-w|i=uf9J|jK3;4
zIQ{NhXXAI=Yl1TAkILc=*L`oYZ~i9O==Erkvf^StHgf(`q4!n&%qrAR4yuPXsdM09
z9_RJ(`6CCH?h$c_qKeK5-$NMrE1_4M4{864WB_tDq)j=xhHQWt`QhhUV10570{)KZ
zN$|7J`^*6ce;1>AKfOUlUw8(%96JT7oubR>_r)Pl!;DEYJB~W!Xu$c!D27GDt_}yH
zxs@$!DQO3BKqNI$=u6jO>y$(xNCLHOFEDiwK%Rr72oOmCGXAIolcoT}w8C!2Fboq|
zUu{4+Yyxxvf(sd(eLR7)YYjMeE;qMb^9F;o;ZYhKn2WEv9WK-HE$jgB7}zK7Dyz|I
z7*@&o^-m&k$Rb0O!+C+a%N(rj!skA@4&5z*ppyWi22Z9`rsSDnR9kb5;yP&XMs2!l
z<WXv}IaX7}bD6;F8g(|FbuPEg5lR#&p}w2*<-yj^ouPI{n+<wx#1+by=$<|+Yi9t1
zXodI12w4C7+RNNcKJ~;>qYCn#i$eWwfRg5v$qk7^q%lqt9+SItqNCQZ2|$>*oU*Bm
zAwD_9fyg6r5JJtq)@``fy38i?u9I(JDMDnojG`}&7?E6olftQ!?}f^=07XRSqPPB5
z5-lLTZ)_cSyd~J231K;uHYejxHVBPcj3sSi@bRbK6JC0NQ3A$Dm=jRfd2{WyMwKq@
z>tbwmZkR42WDQ3Q5NO|}t+aEXj{rzXnm7~c+w!trO2Ip48tJ>baxE?wl|CjKin()e
zwx$JYM1&1qUC&s5=G8k&eK>OjIQnPD9N^F*a(VD{u;-vHq*Z)@{7||VN#gSbW(eQC
zws3gv+i#u@Z@=5xVKx}0_SL7}A01qJ6>Rj;3h1+-4y~X|6d}vK<L(I`T@$wpaVls0
zJ!#-N&r=H^Y3^T~q7W4&#W~{VgmW?UtWh|O@HiV(CII?EWDYM9en1^n)Av=If*L52
zte_!cs0|FpN6IN6XrGqlXk8IW+P<C>=2ts|ukb%Q9qL%1;m$Z>w;278MfzyC$ss^T
z0Us)$<!IZULs0rW2amVFjtw^iq!b56`nd1PIZz$~rU)`1XQ0R{NHatU0!T{(L*xul
zH^dMs6NBj+*nA*{hwdrh+*$_bR(jC1ljhL;VKYbz+YI--DI^H*@=FDL3p)UO(~pV^
z!;yXFpC$2Rvf6*V*c?6q?ZzZCinT_CCcX^T*EZnp&ul|$0;MM^XtWJQp)68ThyO08
z>CYXG4^T(mN*Z(zpaf4Y_v{;e_gx=Ms#(GMew~B&x9N66)4O9)y2AA?0+26_!T)2`
z^SV18df+YNZ(4VZ6zLoi;6?uUEB7+>iP?N2<h&}YS>awP>rp9K%=0$b3BYA(A{25Q
zO{%UwS`l8KTF=pmZkE}EnoVa5gtQLTD6fqN=bDQ$gNeprIC=D4(J<?dVwic&T>P$o
zfUq?@?_3o_=L}Q@IWc6U<o+S$V?qLCe<_E}&ZQFHd|RMoJD2hhnB7l4)RYjtiu_F!
zR*^KmdO~tPDuufit#Yd%Y<>J)EC8hKNo3DRKwZb~7e+Ye!Y^yn)D8vYEQ{>(Imozq
zoDiR<&uEQDdQ+VM693_II^C||&}>1uUteR60U06zv2g-a=kvIrJBDgy?45eu6`ks}
zpDN1D(Qq_^S6=n)(UJW(!$z-5`^impYU7VP%+YTBOfvmMo>k|5)rFo8!}BUAsC>hr
zCgKQ36_~i9`<`_YSX_#te<{OMW2z)NLUF_>j%9e<9H7KR*;g@`9Er1GMX@n9@M63<
zKS6pMybQmmd4D#zf*26|kISIeitrFze!u1=kds0OZVdNZk(W3S%27}P9~~b??~cHz
z+ypW5f^sMlKpX=^86-ua#6>11)_ekT4$#<V#NBo2gA`K&h>C>R88(D+qYd|bvV=#^
z58&K(7gqZ@^oADZJ9|xKjftz-TO!l^7PggNd0Z9;)h+M+`JyU%p^2iWF5U@A17*^h
zV5-QGg{ray6As~#ht}YMdxp@NMEJ0RW(OypiiCo~s8&c*xY<DgE>}CgZ3p>LS59U3
z`{v!tC3|qTGt4fc7VECLLO&1h;C$&ks1uSrXmvi{|F{0H2Fi8Ps@)Q0FV}8^QV2a{
z!R@C<W>lxev7<Rs(9cUfg@^)BK3t4H!NVLa<0Kfw6$A+o8l%w>I|dxpOCg!N2Aq%Q
zmkajCYVFt}xg%1;ud>g=%OLTYFoxl92nY7O4ko5gB*ScV(5|lfS5wKWui-OOv(#)=
zj2Pj;2`Hm|W+Ym4?h&)V{S$tJqScNKk2T>AHfKZXB77<bWH_E*9%$`(kji|Z-yQO<
z%_H<4)0}``A1*<*IB@m-po)t-9pBm!(VBDaTkkt8a!qAt3E9DGrYR9TFWUHrJ{<2U
zK%Y^x%TPEwO9sL)gjkx@9G<UWDk+KJrH&1`EGXwKMvjb_J_s)mp{bb5OzYIlbnuo>
zTRSw}!N}fl^4-yq18;zh!H`&s6zw8O)bI-lqeT!HlCZ^>z~%0KcRT=n2I@NhI-#On
z5#@eY&ImpOgnStn`LnZBCkh?uuVnHY8Ag3+9-oY=a9sSnyBDW$>PMh@HN;BV^PqH`
z9?4)Ahz@A(U%w*|yJPu_Q5K{@VfxxBpt3v)gz5?e;Rz_A5FIxqHOjuw_7r{4b&Cc=
zy)A+M*<m1V0KRx11vOB_K%D?<$T^^<Z%7hE*g>AjQ8$Li9*W>I_YUCPXbUd(da#w3
z)akGhx4{H41g0?+5WJ@o&gC<{#T@`Pu*2ePcT_#|qm6hz>GscN=T`5vlh_BCG}N_m
zyM-zrLRD_U=RSQ2E}ko(h0P|g)#wCIP;tV}fKG;@6(G$moFIp(NbN)>Z&y#P4Bv5*
zmXl~56VR<6PQrWT`)u6VJUiIV<?R(|sAD+(m%{=5L}L*b(|gqc8tpSupzFn&^?G@h
z-mTBC;}wwgQAlxT{{fwVxa5awpEXj$hzBA5gd-e$nV2Kz0AJ(`0ECSS3_1ab0^sM`
z=nXF)&HqC3(=>osojNn&XVCqLxF!f{St6+qsuO|r#)W}XC*B2R6`Hc#E+*`2f49{*
z*g%j{mGn@91Y>WUaFqjqrGGZELgvDnZDD(eb#`6qStv)K^EwwyNC?hFL|T#Lk?63y
z)UmsJMA6Ml3Dq*tdNI7bzaysB<)!W}<A9yC+ns+)-+jKbtImNMSFO`m#6l|}*g23s
z0E7aF01%xU1|M9EtWJXxB^4b)kszv?2q0+$aCio1c)YJ7?%{#LOH>adG*C232y4Hv
zIHxoI?POmvAHMsKzy^D^``g8}SG+Acy8m|A>JRDq7A7zyu~hgz)5u=)-^A`m$ADoJ
zP6vqL)c_i|MO+r&F(5)HBODOnOFBnN+KW*D{+n|DQinqMb}{y7=*W;!NgOlc)d<s1
zHR$xWACdEV==qd>!7hrIGCqo=m3^;O079F>k{Lo9!~m1Q*OES;U`U2mqkb{If&%dR
z#BnOwu|P+n<`~q3KKHkj9AeoYue&0WU(E|p$Du|>hzuxB03Hkf6o-Wz0IoE^Gy`%F
zu)+X2U_lJ9IZEJ9{-g(IHrHS)>q0LtU{L0eR+uhOGBH*dekFYATYG$qI{@|A%0B-K
zh0Pvq#k0vX7d~zCY#mySDV{Jya0Urn*wr;pH{jDB-z0bl;pe0U5I1>ItWT%OTAOB4
z#8^kRUaLMHF4tG%aoTIZr2+VTn&?Svm+SlL;G2GO0U<9s&a!u_rso)CWJ&j2Vs(kW
zJtClgtJbLj*)LbZ=j9FsHmv`yorV`ABTA{GKoNCYWqI%w0(87~A~`A4%Wx+X0Tm8K
z2O)sCg~Y&$$#u#TP<UN(=Cn^*UZ|m`PqNau7+dj%RDdS$^MuXZL`7&=k~YsWm~I}2
zW5?bS4f1XlLi^N2_@*B*h|MZ-E{tq|I|UIr08~m!rCM^1v<y)8jihe1q|GaN#BGXQ
z#7oW%Rn(EB<wZu<=a12a<l6=B$;fF|)LQU0@Z{)_F4C7%BOPFBnuK5D&+@Z;{dqN-
zI+HA#iaiNi-<@(LILbcr-yR`fMQLOQi5Dr=AsQ8Py+3<2hy>ui%rpUJ8x}?xMs7xo
zKdUd2bEBd-bPVDtjyXDN{P)Cr;}85!6J~DP9;^*c9ez`C)#10pR)0WF3d=~;t+`#A
zNWFi3{?I)`QZG6JSS@U@M-KB;=tURYOW?SE2TF?MV1tZ*BOnBc?xCczLCi%e6v<Q6
z&*Z*5=W;jA{p)k(a_T~;qrbTu5<i2YI?ZIkIs(UwfX11Py+rn7(Y>sjNPmQ~7(DOF
z5klwJp$JlXSfc}eq;An-QlYL!=I*n~XYqTehC>@<znlhv!vE|LkaHkG2BQh;2&v=2
z=Z_r(<Qvr026zgP_Y<`PNH8dA8TjnoLwM-fH5ley;zyL$KxP9N6c#Q~4|(JY44y42
z>{PI0?!OGiW#9ntq?MJcdB42(`@*o5Sd$iyoVgPkQ33{MUNy|lkZ!@+>LvK>o!iiv
z!r7;S_7p~*JdvY!E{$ze_)_suN|kYtP{-W$uK2OD7nKNKPDwHfv*IICiDN*~xU%eP
zd|f<uKiBVV**DaR5{#u5>V2vC0d;r6x)i8hUder4_E^#Zbu|QKRLP-I)^TlYXgPYI
zJ+UGT3}y18axjJZG3}xxKoSQ6NIF_6;5i4#>2w|E>af^J<M{=gbsqv}ku<7fRkraG
zEsjJDjM5<--Ty|InY%j4%B@ioPX72r>$X!=C5?v5gk=DDV?<CCITN-tYV)}x!pP(L
ze@hH^gvOCCpcx96tq|+Tws8k^@1>HQSe17{y^m#x(RW!VuS=ZASW~%H<^H*w!P^F>
zjdUYEFTulCq})-3jnok!C|igH+RaX1bh<q<BrnUtQPeYlDh)V#UTQP#FDpWtl&uZ1
zH=T!UD6s&&MSRX1e3Q_5K`~nk6U_thf#mysyKVOVrOnY=@7RIYCD)#Kk6rJLXi<gH
zUBv#pXIJ`FXfniq{=`90?Ixwg@Mn@*L1zgGelbG*QuRWPZ3WcL7!5z3L#%T(TpFiF
z4Wm?wVkND{aCV&^R|vmm;roVKoPIxlU-OG7caFxJM2^Ub@|+6M1W+CTiBl1|P&owh
zIUxgRXjNxmTth&OxJK(d7ci8fFue*JxtzaLT=91Oss`DA;XkkwBk2PnNvb15&H_0n
z%2&{N58tl<8WnWr0*IOcJoZEepSt@J42x|(&*A_EVFcUh04{DVTU4za7Av1azR=}3
zE&~TZM*v&d7r)rI&-@=r+@9F%KQwxF^={i~PkStSiHJ+AQ{IFpo>+x@Ki7q&Lm}Nn
zq!LI_Ew^-~T6OF=OC{1Zl<)r4+^k5oYQ)d^U9y@2So+(q*P#z`O)#n_8Q-|Gfv=m%
z_&I)d5b6}c_)FU9s>|RRcioPw0C1#1B|)*MiN>Adngi~n^Sr{E1$4a5k#G@9-I#_V
zVS@c7`lED!I06`4#{q;*15vY%nq7p+ZONRqVG_7!nmm0Nnvl_u2<zYH2H<?=6<PBa
zX;~~GGH~kT`yfar4OE4l4Bz$#Q<JZlWhvnplN6kvMQXA3ZWr<z%eFE+?$9ESyGBv3
zIsmMBZ?)|$1IKzal7p|C_Bi{jr$Fxk<_&nFLvl)-WU&72eXfmNoVuTU<|+ZS><=9U
zucDz&7pPRP_63kOa^wsN!Xr5hO1a26pgMmatTA#w5PHDJfsKN2`NRM$P9Ri^9pXaB
zZ3LwyG6~(6oD<?)gFzNIG>X7PSTREGl&uPw?i@_^#y{|%W4rf`&Efj?p1D^xuRZyl
zX0@Liq7gWJi%Ty28vYvE*IYk0%EE)I<&|nAiSHlh)d>$m=8~9Ue&oTJ*op(-mydci
z_yO0*=hoVy#GYjIJYj1S$(j4idoAnpjJ4GHI})F81=PqYuRvNSGE^>g{;tf>Me=M+
z)tOM1zAL-*oC~d*s13TL04P7tX-zjDct4e&pkhm`VZc#5mo3&rMGh*wvP>lhivEF*
zE@)!ZT}!zKQ8u`<2#_=?*xa`8$A7#6oBa(KrKun&yzWM$0p~WJgKoM;X{lau_7ncx
ze>siI!~sx9I)}~dWB)j}-Fur!tNG0GM~i;{qHQPB)Zx!XR(Qh{IaFp1?)tL}@YKTt
znB5!FO^AE|Dmj)2)WyP%`3~cb06)DlNejd;B0dg5_ac90k?$<+^K+Q;uY=@yI3}{Y
zQN<ujH#H|s`a%kU9!tPE8X9qW<UW@skOjva5PerB0<NSJ6hf88$VZWUpnGYP9DabA
zY$>f_V{5|%Eav<XeIeupqoYm$0h(J84kDrysS9AVq$Omvkc_hKxicYOWNuQgL_z&s
zwDerTx;PR@2&Afj9NLZjaN^jvnY8Q|VG*93Zoc=oXXmeNa7>R;KnZzXK!Fw<35;U&
z2;#+k(aB%7OOgmeWpqe^p5Gl2yaNYhVLZQRa#TlNYyFwHC#8WN{IA49h1+Ynni@%{
zs}Q){Rr&eUx<<~Q_IBV+X%&Yk7&;_IoB(3~W7~LD@)L(aGyq)Mz)AZGfl$#Mahg;p
z3h$@sW(A!lzzE@3lBC6)J0bw+0I(yVDmp<FV<9iG8ltd)rWWR>jwXAXKk$2joq6|m
zcD^?=bw&FXSAPI{BYA$P*1sl%x>TLV9jSE_r3PR40ebKFk-qBysOc_ph?v}pe3uGy
z{Yv`76eI3sTv>Jm<at$DUCjCCb$(t;-^P^rgcYwOI^S?}B2XQf8vXN805+;hV5}vE
zeSx1^kW8e3^`)P?a$_a>X%&SRvCF)K0zbMA)fS+1gcx*x?&I~#{=2Gyy1I#Hp1K;t
zr9j8X)O8R--@x|p*22V60L>O^QiSlaKiz~g7uI2v_USXMY{2^<jAHuyv2*tpQ5YmS
zbRX>I&pr&7>9|ZBfU#6S)+;{$fuITtV>0{rx&LhAForN{xya1rJ<Ac;U=u$42dgmX
zmoPDJs01l#$|Q!9x~|@fywqqq)YLWfs9qq4zr(<L=)SYbf&}=vc>w`x7~QMu=Y}9I
zvoT&R;HLn*Mn&W5e&T(5>4q8xtqTM7Nv_wYXBi1MH9V&b?Gia{vQCOxM914X22>h=
zjDLpvqd0^J;ZY?;QM81PKn3w+00x(fy?SX?lp{l;d3V1~U9Xcz%5Y(^7-(8vBwan-
z0$R!hFdFt@Y2g-_ow+*7ij@Hj%v-10@BDv<t?9|!W`HsxIYtZuVY`lYEG_LKKQ?qo
zY7^ro=>jRaqnvLoqgzMDR6eMXx?JEI3D8b|;&3WFFCssRG;zz;G5X;1P7i(8DFQMK
zUw3_FN~2e?PbbWZ!$4F&Jg^81#DSp_TGe`x<0S%|o`2EpaT*BfP!RmB4gycq_$<v&
z@>X+%Z38qc*ikNG^oAF5$5vGa85x+Di-N!eGgEua-qv^hqD?2heUPp6I;{iEo3H<F
z7@|?7J`VMBfEU3T6{j(vX|ej5_MHSZ_)09ToB7m)NIF(>aQP={j!@no9Y(sx@pl&g
zQR79%5KGl^!;-g{`$x9Du;uHV_YNL_57$d%UUPCZwWo&No2O{CH33=Ykvfo2<15I3
z8e1j%DP`3!L3a6jdH&I``e^}&P%tW?6(*XR)D$TNNv=e(Ht>XA2$_$oKfJ)ma{mFY
z($RD!6IgJ6;wgZn9YC{b;O@_M;fwcQgsj?x3`qf8vqbwfH8BlmR-b^??XxzCI?=#B
z_b&$dYUXmlm)W?C8~||Ush>aiRKI%iha1t<#2`DDJ-vJ<bmD1xGHLQ56ike)?L)7>
z3V-;!YtW{NM;riwB{4b`@~@*^J8#vCjrpgCt9rG(V>P;-ZSudX(yeUlm6+s__q@L~
zp0888-hUc->pHxge@*Pu-*qymGnf=*s5sD=GqK|(s$lw{JJm3qq^Oxk%?F@~04Gk%
zMm=s*Wq>hBWv~JOVSlW`h#H2=0$Tvd1o8&3JdCAvtB?&3rSe5jfZC=i{4Y#=>Y(Jc
z@bDj7CmBq+W~Hg?B+5=fHVoj3!`}vA+EG<?vvRxh!>#D>ciVuPml|6ZVjdYKa_W9w
zc0n88V0j=R>rx-@46qtwLCKj>uRAH7_#CNEK35~|b!T>ID7hchu+xz$VxWl-LUc8~
zAnbcDMWm6sq6uoK)u?O38sak`TT$BfYU!WmvqN=&MEJ>lU-Sn2>IN16LGmANznK6`
zPqN|1G)^h(MOC<CQm^zqtgxoLGO5iWFVno!o=o<%zx^L(qlv$gmX`)`Jkz}OhVO-}
zoPZLoE2gt0r>+i?KA#RsA&m$@inP4XOAF|Cv?SF%BjgZrH4%|qg~*EcHafJbdWjAI
zqFs1D_|o4<wqwGdFxZtxBZ4?;^cni*T6~wb@QAohtVf?uh3zGf@QrNkOz<+uDX4{n
zJfyM;sHBe#cWq#`;gCxo2+GIhd^MSmYx*s599$zKNnvoLuL`5$<ft=4PMVjJ!OwO6
z33l)Zb~I_?3<IC5uoFOM&Oo~zz!Q&*;Lbn22pOyq^pD0L|HEx1F_Mu=xbO6*Z6j(%
zRW*EkD|`5NFVg~m%h3Vgfe&Q2y!+=<=-oLH&rDq0{6ewOea3d$vtn#jL5_S<h{7#6
zclHu|^uz10@0g*Rx7p?gi$q*hq}HbaC@GNOZKa$kqaG)iTE~sPDhzv_Smeze#;K0#
z^`Wkn`n<@+ll!f|T*C^_BMpur5-JB;=RkKZs|ipw=+1eN{2E4p4&L`BCI>@OowiIw
z=mZop@lw8ym%+OKuvJ0WWaA%VB}Ru0f7ryyvjWquz%&^~#k2uBV?l&Uz8XPF7dY2&
zh^>rYuTJOOv%0~Ks91RdN|8r&0G0ll;eI%I^gSlCr3oRL?Op1>Au?fMASTyBIU>|g
zo%SVUL;xpx^(#<bTns-AMJzDtb!J66C<tNPkpY!HFjlHJZm``@M!(025Fb>aYF$j5
zvhPGlYUDuEDRfM-Ui#GW6%-SwD<4SC*Y!gXwL?$m-^m~=w*Y(&0E;E502GS<G^qfS
z%IYX5oYTF9L_jG6q;|<z(`6w|OUTIqu*H;l)Bhf%NB?<I4o6ir8Qpx{_d;RjAj>h`
z7t(X>9$p_g62(2bA{yOOuP#9bB&|}bN!Jd(p6puIS0a2g`o#7Rh<HYhEIPLMH+TEv
zdV85a@~na)4<rTPv*QK&m&%*5oV!Nb9+!s<qRcn7VdU@Ns8u~_ZTMJv=>V1C^{N6q
zNS$9SqE?gk)FG+2?@EK6o=KhJ@OcG#4CBg$>HyRR-s7;2&5?epfu}4Fxe*5eON*x#
z0%&&vSYIpPgCD#IgK`zpd>|#zBq>Bhi@B+3c<9;BK!3Piw4$kG7(D%B-Sphxa*h5k
zQwM;iXUNNqqF;XQui3!%T5$-^T)fj(Rc4c<EhSC(40Fp?jOgNM9q#$!GCcg{EjV^{
zNDp$WBOatgGTORV1%CVqfR)s0r50b6&yV!Sgl*`}9Y$Rj9Lu~*)0;6E-!IkE_0$u-
zeoiDouRB*wGORlnvf^3&kd3Wxr?a3@g8@_GBu2`I0sq8_fmlDvu$K0p8ESsY11_ln
zoOzN?08tBxf7qoFz%(m}Tliu}03Y56>vi!n)Mya0U=Rf;=kMz2w6aghKE&amNjj9d
zPNQ8Z1N1_0zM^%m7grWWA>?@q2bW$A2bNw7X_lKfXc(+3#8N;!2c+JH1tu<oZfoQL
zKO@$=CAK$1-D(IW!|W>MT)l!L+flikw~Px=Yvj8|kj9MpSV@NK3-416FrYRe5fHWW
zpJl0LUI$0$@<r`rA?!o$bSRYydOWJvphjOpe?HH`{#W$FBNRqaNJc*r=Z>7b5FG&C
zHfg+L!UZ`15JHI>4Cn-q@kd7hbv>*lsaGt_w2j5AyYSa5h%##@%&V{a0cbW4LY8Ob
zoN0L*H(O*q2ZsRF7z;D|(V%JlKlk)t_enVeuAhVOE#y34uAfR+8+h*;FrsY{dXYcn
z|09lc>G{KQzs!*Fr)Ni$@pjhq*JQt)=|N@AD+!OQi8RWt^WkWucjWM8s&c5EBk!tk
zkP7cGgP*(n*}AshG4?$p?9>!>4y?(6d{|h8pw5eGlCY!asvy)caA?Jj;K-9X*0dNq
z8Om>xx1$QC_8BVq8x1S?o!?%DjqVC$WsiyAz*JCN*WBbBtoNRS$1mJdw3Eqp5v+fF
zJ-he6z-2xzLk9o{6FU0&;}?6?m)~Pd(uQE&K6&QD(2m+R3?qw}7Ufd$mc&~jPoa@)
z!H56g0<12lu&_5Io%&{*o>8k2iYS^mOY2iubRtoIkqvDfb&#20ZEn)KCuhLT+XS=G
zi{dmjzRKJ8(*PLidij3!m~}bzr0X1=^cLF515o~f?>xxUv$JfFn~r!ezath2Bq;U9
zv>mErmIy*+J~6t<SeKhcPM9)@Fn@#-Wz6C)sLOy(0hZ|?G7upuFo~o<shbwVOM*hm
zBA0TsT7*Ztsj1Y0*GyL^@-8yg^a0b>Ra=h?Q)x@M=ES?8*<6GYV^Y)>K+}xmJR-0O
zuFfSNPN)u@0PYLG7Z)LOBtNp00kTomabd&jy4WZR;KTE(dEi6!^ggeK{&r+G*b&k1
z;4QmW#Nu>NohvI4^5Ik0CRda1*ZsS8R<3oeNZU#!gi~=;LZ6rK=gyl>5RjsOgKdE+
zB4%U<KgWr>-DD|OCj;xc$+2PL`%~nc`8k5Bil___!fG^1b93u8cfjoI5lHh9DGM@!
z!Po<(5u9=7N)e$r2+JQ&pEfV>o@^)2=#>TvACdY(a5bVBe?+dt_&21|g~YJxz6oet
zi8q5?j!~J8)a`0%T;|OP0a0`Kk`|zpo7d1wo$We;uH}pUayqUgV1&c*2|Uh#k^}3A
zoXh_zL1EmozFe@M5>NuL=H?aZ_Xvz7McW>V;luWx<gi0NJc!>x`<f1reZq^V9T{nz
z0j7{FOz#6oqzv;9|MMj{ef9#Rc9Y1yn(hP}K)W#kQCPy=kNv4lOpMP%wqAbj`-b^O
zA&MPvxsJ=!0l>kAcRT;$r-pF$e{RIn?e6HQ?3s(7hUw-EPT1VFQ)EXeG%Ao0x(&ba
z>lbJOip2p4L&`KW?Ca9}em-5H!dj3+(N&&M=)vN`=p79GlAHp1c{z8=eQ|M^XSgL?
zGgO1Gv8{T&JD`7d7RGhVmFzQa*lWU!KHRLUt~LCg+8EVL>u2KxN6j(TJOCjIDf<_l
zfRuH)ow`}dlUg#tjhR9;{!MfQn1>OgBhbdrEBZ;F<Ah2gDu&Ypn4%GdHAMn2GoZ!j
zY?S<1yUuZIgBJ}?spDM(pwS5+X`-%63C%_auD|-7kY$w!5`<7<vetvPy(W>4?XMgF
z?V?B8ICS~Oxd1z<Bb;-ulSllPm;cu?JyD$|D0<Aw%jXIV2`Zq5SoD3y$pcQGphgdf
zOR)2As`v}W9RYO2oI?Xn&5uko3H?aUpBw^C&tMlr(nb)X97+J=G82gUgc$WRBb}Ri
z3+am-0fBvjnrUYM%m1)&FogavGuNMZE9}{G4fF;nYBxBj+4s}yly0r&=aMp2pu9L~
z<s7_#BUW=xTxUyF_Cu&25v-;tVB$TBjx6$uMC6Fo{IKj4Aj{D?#sGx>CPzn~AyVF}
z9dw^rUmH!oY*=&i@~o;cc7$Dd#)Svr*V&Jg1(kTH41Xa5)5_TSa*TV`1Q6n%6Z6q-
ziV`3Y^kM@;io+g*zwQ&@@ejNdf$o>%9<b5Ixzu143+fa&1cO>+^1e*%LBd}Eji!M+
zKePt-J#-E#(}R-g`LQ_~DsH0iRsyq=v+$*-KLMkByNIK9vsXR*{Tt~c=Pq~Sf0;V~
zJdpXjnSbh^XR!6@cB9i?Ucb9o+j<<PTJs3mVnG`Udb!9sGy_;)Ux7dV&;^*9$9!-=
zeFL13iQEucAFpF4QAFJX?7CG-6L5+CUAH!+sWDAVBYpiY*6>%XHipgswai6?K)0`i
zKrR>ac7!J<ta~JPo7h4uG3-qiqU1rJ2V8ILCJ1&?c5nk^26X~IV+cq6w?+hGj9ktC
z;|rDDQh;JaXn@UnR4ZnasmhwfT9Z^3%L60i2DEB!Kr#&wqBu;8QGy`GE*;!}MoY*T
zeHM`!VU^dvD~|3YojF34$vc_|0L%YdQwCa-0mRhdFNE$OgPHb8II!;~809Ho3c!}7
z>qx8B2owoA5@0R*LyUYhPZ9cbj0~_ikmJ|$-`aUkjJzwkQzdKS3drYjAJ#uTnv~q9
zdTa9bC1>p&w?^kXX)Vk_P{?1_rxCwze^uI8_5VGDfEfK`JlTNaGLh&YuoJ-C2yKwW
z?k+&PO+Dc$H-Y_sw3Zu<MuBC30iHxIjI7Y=#xWQa`wC)6v(g+s@LF@|;A>!YJ2h1h
z8sZTsjIRdAMg7Xd5qO_6;wZ|+pM(L=3%t{QF2xfu!s8Y(EBYPpqjmscD}aCyfB=Fv
zrn!Uwh@25g#o?2er=0IcvMlBO$0Bc!z~`X+ugu%2Qv>x+{;uZ?5Td}dQ%#zyIRr$~
z8*?n=Z<QGyb2ya4<dy76FvJL-Hz#;KNU$)*1r4HYppiQn_EH-Yc_^dG|Khh$qS!C{
z)5-@z;8^9bITJv8CV-?J!d;)<gg?9MIjF)dLU~!9g)u<`1{P)(;OR?Wh6@`{WbI_C
zJ%Z(5TQ5KNTRMwh?hXJo!o7Tl@B!?0xmA4nee=<`oo+We=Bee6+3Sxjn07n~{cIa&
zB}8q}z>>&ID;dD!kDi6kFC=i|_4Ba3T0&<kg5G9HlOgBUYZftYiOZ<mgNXMr!FXDB
zS62;aAA42>_IFp8a7l#PxN6QzCusRTmnnIS0i3I>^vjg>-~(!?EPxl#$Pp(1C-H-%
zMd1R-YTR~ckCd0-dLPIx$c({}rG~@&)RWje9w2^*pem&TDhRRwf(#(cEJc9X0AON~
zBdG$(P$_DMgN?(=V8<@3xySzSc#g9kOV}aPyef!)z)lsWY0${wWTCnMUeus5HAQQL
z9EiFj+hrncVqOq~`{B?+KE!%|3t5UAu`n}nHC$ME04hkKEZ6~19)eTfQ|^JH0P-Hz
zzhjh(Q85YBijzY7>oMfX9TifY*800^D)N0=wx<`$ks2MUAX3h{oZKHfK?0S^Rl7zG
ztso`54@!!ZqCjzElpBEge#Y}lNymuJJ(WC$fC_4KDufb&=i606xZ6Y#G=K)C0x)_L
zf<H(9X#4{x151tpasfz1n@AWIAdX124Rr!c*n#=^SHODL8srKvDuv6sro}ZWLQ_HR
znW^t_UWA<n)^m`HONa~NbyBB^l_}E12L-G!(npjEH7r7b{}Bzq)DJm@a!@4-{2-*B
zNxi?6`)RsN9cOjI6=GwfB}P<|S~%C}^{4mU-}2;(gt<C;v^;;nK?7?%^U0Dg@~ok0
zOuYUQw1}atD@1BXlu0)nr7IZ5!4Ka{2;no+MhSWpc5wl%-pcqKQ;SPI<(#I#XM}?s
z-Yc3;oG(_FX=C{)eipU?rj`OoVgvVosS6+e(`O+MH>u>CNZ&N!8bY$>Cg-6yyZ{e9
z_c7Z^+EEF^C)Vu8|3+R8-OPBokIUQvz`<SJ`uUTq4Ril@OqrWMYQnAUN6&n?dEK!)
zASoM=m)P`$bLBXJl>m1@h`&Wf^`f8u>{-}5--PMu4&)<iT2q1TZ*fx(BG+LH@>)cM
z+W<R;zn5oL=!ya{hSXgS$`itHDF96^cphk-qnF9Rv26MA9D{YWU%2NKDEr^J3Njg1
z&qFbI@*{7^P15xw>hoch4&mlVO<CxN>X~Eb8JrAoqCh-1WoQ(Gx2ORY5rMQ1(4G$<
zN-D^4(i|a)N7|%1xLqPOiS)}%&J}K}pt3X+A?JylqU?Z3cvOZZZCBX{VV$*wVq^fD
z{APW8m5>fIuo(g;*l&U24amz3ilT&GewK}0P(YDqVj%d%;DQh}HS(ou1aiE%G#uIC
z<Yh8?!$L-4WH4Itwg2%Z6sSn$f;FY&enB(<*DYEGZerImN4eI{gsI{6u3{ba(?pE^
zpmej8Xx>#b@V*k{tu2p9k3l-zsUw6A0PVkJWPp4Gl00Db0I$yh!BS#N$pL6cYM+8U
zzDMy2aGef10Z0bKZ{dbYw{xX7<*5P~r2tJN+2O&cBSc0?99x(Ak<;i(`Q(fs&L$=T
zGbWy2$9xiTew2ekP5|Zi(fDJ!3L}32gQ=@V1u@>^*cDOIV`a`yK9XWF7_}La{_tMJ
zmqPQ>=!m0S-Uo&Q<!s3QY8WmTwKn+t8S*5Z!F9+0Ka-eJ5@X8TPp%K8GpdeR?QXab
zfM}_FXNrTV{-D78fyaZ<lgIj~b(1A2Qzh7*+f!;Fg^swk?XG7f(hi~C5#&HoDpv1d
z6$52nMMb2)nSB8?5(CdZIfVc6p{F5(O#nMm%+yuKbQ+Toh6Q}#u|KjAN=bleZ`e=2
zV^my3PvK=@{9h&x01m!ow(`60Od3l+(FphbXg58-{p5vDH?Q3PHrVd3(@l>zB;CL`
z31uS+XYTy?S-9i9$Dt^ZO==)-m1L~&hNQA&%aD}Iy}P`<hkrSgpxz&c1~`J>4pl5K
zI#T1V@c)>jK(+Pt2J~Tf<y(%6;FT(lof>)AnIA;e@gyvR$UIH18rkZ;$`d5{NL7r}
zeX1W~MFd#=gC1Zh5yZ(ZAF(PR=KHIrfoy0YPAh0lX{SH~IX2*pErf_1U=@JlU{u(e
zPbPkJ#Pqxe1`T~2Rg}v|Qdx}ZYatVlaN<RSKkNeZH!2uz7m)T!C`LI=4yfG^rT}YF
z$ZZdX`8JI5Ey%MW<mI*#5<(J@rU3XYiNid-dnWgZ{4c@A(kYNs2WvG$&AW?=EgNPL
zo_3{*Bt^^-EZ%HxI(A$EG3I#ngh9#*hxNVh)~Kk5TvwMa5D0;`M|p3*hrM=XRE_)E
zIpA_XITw`RXZ8viOsc6jtPHHgMcM}E{K=`ns4eDufeBoqQYk$FI1PZFogHKGGpC$M
zbG#hZ3~<y~KVfPgH7%m(h@5BNNftpTvMY+5=sBgIbtMPG|Cs+ru__^|wz-Oh9D$}D
zlcCdu`<ai}6e8S@_dce=2=<qX7%ii7@H!u!8c)OhLh9$xc{G~x8*Ab02Ox|L;5l@q
zq0&nU9dZUT`MYFmN#&Dg2~Ahhtw-0A10B_RuCOg?5Kt*06H#l9i8=vt53}JW=cGo)
zkk`R-*5bHoPMU%n*0Vs$fy-S9Mc13u961xwgZV=NG#eqTF6Z#UKX?v?#THmIpd1T1
zJpw&7q84=8ZMgf1--9CGF51y-d%Jq@1KY*J&v<9>Wieh>4nS!$*vvoqKh4JPdQB&u
zxNUX&%Y#mHAvrMr3fSteBCyO|11V30p7;nhyPNRwPn?B!zVj$-U9zUtK*MBhSq3`q
zt4(6qOEy=RuK3p9u~zGcSRQyM4J-?Dd5ZisCYR|ip-^F6zo*f+t83POoeG#@B0fYR
z+tPNq)TUM*1bL4iNait;EP{MpjeQLxiqnI}!7t;HD3>JMi3`9JVLAd6G_6HPV7Lj;
zKo}Ks{|#h`qbLt5%?4nQxJx-ykq{LW1qp!A;t3&248#fQtp^ZbXRpjcKCm!Y2k38B
zFzi;8Za^mhAy|a`p~|5Q`;b?C$ci4M*#L4ofWi(rDxvfVcCkyKs3OWk7bOzhN<uc=
z_4gonS1|%R$aQE;TqIi0u4G*FcM>HN@|mPhSlLgmGyN_(b}tnp6gD>A`o7Gx4jNX0
zDw=7Tyhr^EIG)q)#g2^Veo_iRjJ<Za6XyUYUJCZ<Rg%ITr&l=itElgWXMp8yLJfxy
zTPar-8sbQBRTm>EZ1_n=mP~s|Q7UV6I6<JI<j!#9SxU|Y*F(ZN>R|aO2P0<uvj)@!
z>=rx2PMbalcs|LoL5D_^3+X47`&AHP)Q`rW?px0HBY%ZcR@!(+9A*oU4k{?n_+#Xc
z`<^qB=m>AF<%hH<79(nd3fm6)3gTXbUR(Zp|IvtI!d?3mND4{rL0*oW67lkDe}YSs
z9QNUG2l}1&hb9GvOXPQ@MTxT~r{A@hkl9bKEy{=!0Kjudea@-siS|kmN_2WPy(mZm
zU(@>f;z^k~7(fThwucrz^5KiH-rIsIPO+tjv;k+eKb+&|rsv_&b034X-qYD^yx30R
z;?HfBcl{2$49CmF0l>lj<)~Q6dggQAH67gka63wx&tCk5oow$j?dBZx2ip$&!#1Iq
z>os8)o;d?>_vc&inpf|E)#Vae9b<aPHX(?&R<6>`)Fc_nwbJLBfAS5sN4Tro^mu53
zC*<Qj^zLx<iS<eVHFxXt1++v^z*zZ=dmc!5L(5?)JCY4KBvk}KT>m<T^wI%>cBrB8
zCJZ+IY@~?LgdY|Bpc6ccY-n-<445I9Dybj|1KZsInBC8pA)aJbc$Olgnj<bXoCxis
z$PmHrl9NQZFdrHiYykAvEp*o{40>$vl?g_oA4LjT)rV2hg*4xUtn5RH>VDV=U0~vn
zqD<78SArc&y9Fpoi})%sx-~i!VLVh6qY6Yv2xP7T3+qUfiAa;`{Hhb6d3Vkahyouk
zuh+CDdJ4)wNDIG1%S*V16ghXD1kUBlSHu1)-ouw!Ext^<Lflg!V223oh=7$4s7YT+
zcQ~15rkl73R7i*}Z>-e<c=0R%D)^I87VjBPFT(%m^KmbDZd$_)Y1qI+fgb|o_)}PU
zt*H<iO@K5-<Erb^)5Z`q#gOXPx{_XxE1`&%k|yc+C8ZIT4F98pNkUc#_cQAs)#gyZ
z3iJP1`bU`^YU3-<G<NtK0u-qs1dNG)QaK~q1FD8cV5B#fxW|4>IIKp0G%v2s4tKqj
z@4M<nnF|zF5T_muHzlp4^{FBRW5|(PpF#+nR;e8WLK4tH;lJ=!F|0elwKj6+1(l`y
z&eHqjA?kjQrCYpcN7xOVHmF5b`8;825gGpn04Amah(iM(`RFQ~KEDFc>_L$i5IHVP
zK+eGY)Dm3Sco3ex^!Z{knN7+dJH1)m^}~ftWo~=<ME@@{2cUKWy4m9w!^YD4I&j0E
zHB8!j{LF`vR~-Ky8^?*suvU#`UgibZGKVPY!~OT2g^7s-PM(~F?s^HG2_XfJA?o8f
zaxPhsY5?ioUK{!GTKqa4pq>46Js!K)c@}k=V7&T3*ti&~D@{@BXI&H^5rs?8X;(aH
zuS*;{F0C0)7O-F72m2mSDyT;7nJa-wb?P0liCXJ2M2(YRF|uUXsbNYO7@S-OTL9Aw
zyw%y+0D4_48^qimKoVCp$)izs`THIke1Ptzh29oGKHvzSAy$ki3Mh&c(!2|!bPLjK
z8}fXF@-ei(p^2zu40lS!oN7@f#;TG1kGTn~H^<4Gwd=(g(TO5Lh?K|Gku>qeI8}f$
z0v2Ic)PN6ioWMjJ9V6?qX42ESm({sRmab@>TV*6b&$md?>Xp)8NEAg0f$sLFGCXIT
zwV{pJLzjwBL#;wT#N^}30Qy|>|62JV91WKq@SGF0og7I^Re<LtVOkAy<-W0I1e{@D
zR|Y6L6e<Q3ke7gl6xZK`FpOZBWzcL#&>~51t|p)`QwVlcW{1d6&Nb?sf@TLx(Jb8q
z=Ku)@1tKIJ%C*CE6jq|3@kjU{1+A!yr6mN*0U#pCgZEH2svsQ(Omd}szm&&1%?ziS
zSA%m7A!NsmwfsF%VhsWu0atCc@B&;ds9TM;Id^jv5d+bd3xSz9B@WfBn4_T%<(QRL
zL(S<TMNbr#*Q}&wqTIcVJW6$|^;W~<Co(NV298@K&IF;4(!LuBxwQGvP@jaUeF1c4
zD`><9KJ&>9xc9;H{||fr9dB8Bl?TGljwjz(w^HZss?IqmM?exF0Rjm`HYV60g3UP0
zV1Iv%$DchO<ImY(490lO3~9(95E3X$-Rf2cbyrt+S9e#AH{X-@+2Q-G^uGI+2$qIF
zjJi($s_WLh=bp3A-ur#mTF-jc^8l@F6#0~oU5-)kiC$|3qwEr%IrT?nH<?2eB-jo<
z^|s;k?9ft;SK8whm;lftK!5hg$D?@u$6C=1|8`Pr4UV4q!}RuRzYh6q#&hrzBn8H#
zn<<X_c=%H%(ds5Ru-rv9D$(i!gKee8@Vss<d#w>#>+im+HSh&(f|_T5W$U{WVh!?2
z=-)Lpu=_JQXukGymq0MutCfRo6h_UiEpCBsZSdR}#c~V^B09Fc1rfK8TWf<;cl{Ox
zIujJ3#EAU@q!${^sI@}X6ZPf;-o)n@#TvHL0fv1F>cEJY;sr3y18i>tgVhSdtw5lC
z>hYH$@}NLg%`lyfF&Ph#W%Or^ayCI#%>>O2VnlJQ2u=;Qai6z--_SouAS5MQV3bA7
zpPtnKNgqHrVGe3;W?n^pbdoG4^*tRta9##tVkhHvbZ$7Akc!Dw)_Q2tA*gW;YOpOm
zY~!?>N^~leoM=x~!6LgqT)^fHRx${8d`h&mQAJL6Oy8d>FXbvwyF+IERgb`gf0Qp^
zI!&~}dwF3c3$op|zCHyaYXfK(iPAG80-9HYDBaP0By9jP395n)lDLJ*FvG>6L?{w}
zX|zJLx*?h!`kQt;(xZrw69JSGL>fuW1L^`fy?wWS4D~SKDW3E9V}CS~8dBx2`V>*C
zMA{bZ5M#zu(n_C;5>ny~(byj;7xGvg-TRgloAoWV6?G3_enNf2;5bI1nx|H*b?@nT
zTDrT&MjbY<`9ioLUi+F*v4CVNg{tWid(AoBf@a%mL-v@ds0mh`PoR1cQfMeTU<d@?
zBcku%)E9I=QQxe3f+6`1@gJ;7V^s-rT`IH|q)=!k5uSK-fRB9q41(q+X8G85JOpgI
z5Tcp%XlMjay!bmvq9~8UPJ0kM{^pIzlP_If>b#O3udoDw9&+Q6-urg(@qZu1ojV%g
z^55(aUmTsd^qKUUl{cb4Sk>OC1?Lh)F=iO>Q=d4Ecf8{!G@=-3GeDEZ#`+3#ayD<(
zx+k`92Cw26wWQuHV0UCzE!PNtLJX|81*|V<Z2sDUrvK?G7eXIz7ye1woa0SK*iLm!
z&F}v1HFvcKFN=y+a_Wk8AHyK!-F<O~7-(C7#&Apn-X`)Wz)`iF3eSRnpNM??+a2KS
zpu)}w7!E6pNmPg`4boO`3Y<EbRv1sF7!Ajmj>pK!wT}b`sseGGQ1C9v2D&V>kl=oY
z$Y@`f&qxjNG{Gd#nkONkSWQr*O7uZq&m)V&2!v1ZQz~95>-c$0Y!Xr=1sIO`3dxJ0
zklss#l2D-I%18y?Yl1+c;Ac!a5w3NN@Os%*Z@r5hmH{@d&CAD5@5j5ozNdZ$AN;Ka
zpuP)S{mW-y!5<wBG$ABsEX2V<ndh}$G#?AQDf)Y}x=i+#6@Q5Xpnmi$2E+kHCHNQ>
zh)^;1-ar-Qi0JEr62cOr%?g`D9ZyS60%(-CGZ%57ZY>b}AW1GIp|i2@Ls*>3uDji|
zl;E(^pE^`hz$XPu_O1}<ztI6BQ~WzzH;_aT-H!#gp~zq=SM-5e1N4E+Go$XzX$*fG
zueC*9AJ63uMoo8|o-1Ne*1qs<0|mdeQui;(1%UB+-Tfi&BYG5)<jF0e?tN|y&{rgc
zEUIiNClQkG+c=;m1#%oVIPLFCcUKzZ<W)M^<)fC6;j(eRq@#WRc8HgcP4K}FokbOI
zA<swhIhagC=IkYspp9<3hbNE!3d(YnwUg!cusZg=>)EG2z8lVX<vm`32>?ChuFs2p
zwTVCe(WUV1w|3LHH=bYrSk`JR#f$A*F&JL*&t(=Zu>yt+JAeF>3Eujq8yU`O_JC;?
z@b_s`Cv6?8>OG0i7M`#4>(#&00+2+3djK@rTqh7ZV4*(B=h||{c$U?sP(G8!MHQeH
z3`{b{=4&m)8Ddalmb;dQwJY3nEVwH-K%qrj$i6@Ad-hIn#}xi(PMQ+{g;{CSp9!2_
z<^}RmfUu|#9PoYPW+%Yrki66b5NDtuen0>W^9qA0aRo}uct$@!l2XN9GRjcqIoY0+
z+)R$>`zV8=&^=Vf^W<|10o24{gn+D!Mm_<mA8!F7R!CC=IPX{rjXU!kVYQds2B1Im
z%JdxiT~fO-t^GRNp1ZOdOod{tL0ztwRD2dpm05q8Dqwv=z~;BTL$Fp=GWu0ok6v|i
z#QMrP`bn$8_5Mlkp12q~QfXWO*AA%3{xTE1CTc`IU{1Icc`#!q4t^qD<paOn^R%WI
z4X{5n4hSSPBg*shB-oU)d*IpgN6~0>(QKrM&_*105d|%TNHN)=$q(Xq6r%Rnj?nIr
zOB_MSAv!CB8dOXwB$GIX>nTV}S<5W|67!L2Utxdk|Fck4i;lzY9l0JfIy~AI?TXoy
zyNP1&t1g*hB&P9`MTivIGZ7u;f9@vw3OYpRNv13evfo7ttOaNv)|e9L+X7ZqyZ_5g
zF0-_rGax8{a%^;@Rfxdazju0M3flx#$q6O*>}6dWqGiga?gVLpW1qpu(ehrF&-$d6
z?;HBnq{70%0L?hSg;Qkka}Kj$4MjC{`=htUO0eA9hv(1z5w<5MvTnN29^=G6U!Q&C
z7wTFmuhhpYGy$N81gu%HKHI@(-m@6J<3ua&#3#=GVcEWBZ`f?iVLaWg!QCaQqTqS%
zjkSyT?4vEb_ElG5HZ9Se2R5g|=CzlWo?I<Z+ut?$+})#qHPLL1-oEc&=K$D4iB-Pr
z*XmkY65RWho<ykPJ#K!tUb*|@Q|=$_0B*M2DhJ=w7izDF2FXjgY`|?qrufEM?-b~p
zwCTzQ8&kzkbN>2k6!fRmvnM`4CC-4&#Q<}Am82E}y%k_Gk;<72gf{zxya$+3;=q0Z
z0pd)c)u1GKSmuZE$Q;K{`kXX3NZN3GUdaiEpj5Jm^^PfA^OzWk1yN(-Q&gL2bH9qD
zUr9lbNod;dr;#_u`WMoZRdRGb9NXFah?G3X-T@jY#mLAKE^iJbBzI{Oh=7ku@Y=?!
zDuL{6VZ~Gp0T32^t&;QzfSUAL&tFAyoc*s<_SC*%#KU^x%(xdM!$|?tw}{=(qkxL)
zFzO+bV>T8ki4uSI5+wFSn>#_{Tx|<`MV#8GMJ{L-$3=yc>68<>iw=klbgaCL#u(3r
z7-ZBqD456@M=hjL7ma8Mjm8|pu#Er>Oa}po^Sge&<WbW`D?oQXL~l=k?oxpEvW)ey
zi5A^6W@Nx-R65N<_SG$*)eaFQ-Z7lc194jhn-!+ix+1>HqzX&A2Z?Aaf<Mf{<(SX*
zeU|mqu2EH$Wk5^@pHztWPra=t7hBMAIlnvwVXdOe+Jn}{vzT3zE%BjHpJY292Vm9K
zus}`MA)+Y)YyS!DNM5T}aOhU%j=#S9%9@i(!uCQp=BMu?Xq+OJsv6nZL!*2Vw$=*#
z#&4~nKV3x;?r^nlsz%%*sv<1(4&e0qqd2$qxvZ1Ux2M&{@2}53`VaDAQWtA~#Xera
z2>?ChmKzr*)*I1t-`WXp|Gl!>8XP<K+s)gqelL=!i5V+M3HhW9NF-*8I33{h=`)z?
zq`33W6-)*Nx(fkz)@rlemWtN{ex1=@BLf<luU?b8-o6F$U4h<$vq1osJ?p2^=hk(?
z?EAY(i^>(SU`LU?R>8Q%>#Ba)<!OY=jZ5>w)MO;09w<qnQs6JS9~zS@nlg!4>1+y&
zwkV*NnCUDu?|)Pk)9ii^D2P&_PH>Z~!VZlB&Wp^az_%4L`kL+RDsqKIgA#x|LRE<M
za99wzFjf&JmJTN~KOyUp;1jDJs)j-!0fV<6n;X|_VDtAbLbBMn25I#jAW|a{>!@-y
z0w6t{dM-b&Vn~?!;a*jbjGg4?La@{Ec~z+sGadz3Y)p)`1gr(1sDMHKPA$&EzUE6H
zBZPdtRP4tq{_(w3lQI^TzK&bf4fB*a&+ltm2PXc*AJ`HB@llX_sMZeB^OZOYWga1<
zTnrT@0?J8e?|8lUxB({`In041^qg7qs`E^Jb}`IS;b10S(&r}ArUF^n$0Vmj{sMwY
zf+T7qiMnW|OK3G05XVhKXrd@0Y^?*EYt+K2*qySq2y_;K?lREc8=|*dqBSQ3v<dMD
zijZZg6G~{ccINY60HZ#T4@9g=rUA6#&x26x_v{0T47uj34Bq+jz}kqrkwCQu^#QzA
zEjyy%Wg=a&{{21U_dmWzcvMM-Nt9$)tJKY5Plr@YKi&kB+%RQ*e=_vYk`uYz{pg<C
zTk2Cwc4#h1mCxvsV`BX84bbfcm`+Ok&Iit8b>}>gY%<DcGl#sF6%~5jeb^kmgcmP<
zIB%t`w5YPvTlvS{mlZo?WD04@zOo;$@C3jwf}Q-~-%p}FKb1yH?;q!vM#nCEFunQU
zyD*!Qmo3u)g%n3yO+Mhh^|Q~N!opGm2lvilIxf&&0Cv`-sN&?<QBig?|96l3`J<o*
z3y@Q$Q6u=-Z)tl`33s-5tvR3px?ZW<beO`4x}yrHNhpDi(`Z1@;BOm<lb2Ceu|)vE
zcImB1<xHIXs7FfGJ8g&|0)k6<Bdm}OX%@f2WLRQ4HqCQkXfrb|C{Tn23S#Teas<-=
z=_p2P6k$w0=?E~cfG$k{bjdsgSlSaXlX^(R>~?^Zj8rB8O12#)dDVz3Lv~w>NeWto
zM+qU2sLXR^B7LlsB<5GK8kw~N^t?LqltjHCh&iEPpp;q|G>S+;P-ROgpws>n6BMdF
ze>38t^Tk3wCjDD8FcL0+P622DcH9H2z*G*J4S5_d!PSCt1K9>|WGuhmdj5d5WjMgs
zX7tsrSc1Je8d^I*GZ|+DRGW6-$x+e(&=El4MfkuKa1TPxH%SDWwXsO)(nJJ3ho-!w
zpcI!}X%(=7E@`~i+W;jEV~VK^CwJPuq0+h@+X8A61k{U{Z_sN^%Mm8!2s_y-!cmGi
zZlMv+qupFUr#+8mQzi=NgY}2N&ICyMKzpaa+!nC7FTlcbiS`_|5lVE3Tu6u$kyy#&
zA_s=+A+kPA98e3YHo~c&%_Z)}cC_GZmr;W@-)2he^KC!t^NVhwI8b}_JW6E^32-%n
z&J`NqZ})<&a6j?m8Tgh{nwXCrBYy^6MzWn)H1|8IaShz=syzwUDRj@31l~|gzArs9
z*(C@v8B?LV2aL8-b^pN+U%;6QXAvZ%@lQfOs%FUA!vWf@CCth#ym03C%T|(>VHJhj
z<tN`X&d(|1|4Q(u$CU&?R~zZkZU-Ox+e`5~U)N50cMqn=vNIc>jIUmL1Nt;r?kZ`S
zC7+djM8rOQ;v{-+Jd8%1BCaYly1-;xB(`0z-!<v#;oqkQwp!fx0`nB8f4>IL=>k?l
z9czm-kZSMe*gm_%1Pi)w@u&=NH}a$ZHULgHRbC=I@<#nlvd9%RM0Vw4A9tPm7LQl{
zo!O{hu@m|;8L8?S1!E0xR9zK8hG{WDmSxC_jG5hpr^k&1X{(8Xpa9|kY?0$%fKCKt
zmw+XHU+U?HSUEsCFyf`q>;_EU$|seOxMoEDp+Fs!<h&*`>^hRj{cxG5s|b?N=qkNl
z1rW6=mVl&ZD2x%%I3QU97rZlzu@9XC72gran;qh~uWo^kM**EHpg{gym203EhP)D>
z%wUI(TT3UI)>KqN%VG!by56hxetmLi_bek0Htwd0fpH9k<fg&gM*1|@W3<5xiJYmD
zxBexwBvMbLIeC&@=0r$8n@P1Y?5_|(7*=6I<WHIh*95?fl#FV@W3x*1;z_@dRG#_o
zkd1;g$a&v*`2eb~<$KNiZ<D6>oD^xr2>ijev6vt$rWlMj5zd-u%{pke=Fw_)5I0*$
zx)I{J2w@M%lK_Khh}m|@+Ec9@*d}x;775}OI}!tv0_e2?bO8boCB?LBD-b;$Fio>a
z8_)G>$evDHchVAc^ZQ!P%g6A94lxU3;Vu;kGG#zZ`@G1JM+%HLBmzV7N|aD3c~AER
z(r}dLF}^Qjcv`2}PR6&WlNEP%#4L4Dm-J;ZP)hR@(Q?2gYlL_qAWvw~0!JrT+DkyY
zN9!lTpL}!`FTHdcVY-c3K9%1!Iqot<E1hRAfX83{%`%K;SsZq|JH_YTu$>(_@k*Ta
z|MMPK5&-y{Ei2Y${pizgp9|jnLOYpjuWmh(H=~7ksdEPg(=}Z@Qq8biO+LT~F&=&-
z#%o`Fm;*zD9L=b&J@kv$2jSYSS99EwhiuY38dS@o{j@+0WOK7T)<RIZjhalDOd-@B
z^{l+Ej^;9S^By-qk9zf_r5`aXpKLXgrp)k1RJjw8c~&5slnm!jMkU6hg4xtW%o6o2
zf!9S^cZ@6_Vm2OOT1?3lg@b7nr-%}&x|lP}Gy6pzF<KB1S%53z5KRg$mny7WEru{e
z{@=R~I8W}L)B@;KAOdhfNC1(n%8=9=S-VA;)-*y!r6x(`h!vt(ifYeUXW|X|x05B%
zHGLLJ04R76v>dXSIZrQ8K;$?~NkJhbz|i-)nK!3;095@tJ6-E2)ExwAE7zdF5~wP=
zD&vJxuhIL;9_b01B1k2=4!m(Y__zKUYK>Suh8p>A7carJBg}_ElNElSng9^B@NJyW
ztdZ%Oa+ubt)4X%&Vd^$~9+^}~IvSch(REV20DhL>0m?r2Bc{X?VWS|Hl-3|>vzD5L
zS*2UYvBiyBMPWEu4cXdR^a;pRC`Aw_m?6Tb$dJuKByoVoH02;(HmQ|Wq1hsi3XP~r
zvN+Cw=}yVs5@A+ha2klmKqD+!-(Y?*K-L0t4rou{*P?`meMtQ!u|!-bClbg+Lqwr|
zCH*^q<FZyAEjeCpgdWybzL@?P(x=lwqTr{<Uah>)WW<yMnUAbodbtVoc+@?W391~R
zO`XyMP~t7%u_^h!=!;lVBCum^(2x&@?kTxWMj)p1%~KYw2#-9nji;YEgP^e`!QT)v
zx~HlLNz_5R-Nolm{t}9EE9)dn-C^<E_pePK{**^kuRQE=B>`{`xlM=JvDLUS_xf(|
z(2-U;8=cwsc-cx;!e%;$$!tp_v#MTJBsIB?t$u*dJ)YwJd#}fA8lc&(cxIjCZcTBm
zKH9hIEo*5(P14^(gsz*W(*i1p;bD1m+wdF${+-&|_UdNVm-Fga@*whBD3Csp^wLOz
zKUH-k?aGRFQi_sz&$vHBe~@9gGs9$*b0scSGX0@;Nrs}BU^*KjD+kER336ilF`AGd
zj#All8OS9@mCPa+MS+0S7sCR16ks~i@i02}IAo82opy<Z6(Gw*5NL5Puy!s$qZ6=>
z0Ku?DUU3td+YJQ;Y&oCO?k6wsLcUfmLq(GV!o+f9KyJp0ItfQ6g8qq79MTklim9_V
z0kaLIcdra>Ry$(>9GY|2z{dyxolkC`kU^4?7I_3xd$tZ<H>h0+Sc>C|KELUuYtP?R
zPHqo($sbqnc9pHfa%g~7di5T^@i}$M&W^<<73h44DUK!vx=C|YS0ge?vLkMgwBz$w
z0rCB~(&O+P2221{OqgAPbXl<@jaBm6*H+piqXMd(#EF64yV9C52O5*rRt!RepCCI@
zf{Wa+5g6zX^>PvfoQ$T3(iY-Y6G^9mq(z1mA!b2^G39r8i6%k}veJF_gw+2cVD$_z
zychtZ5(V|GNK-5?#SJp5kdWFXSp+u%RIPv!t5Wv~=A%;5r1uts1Y9l4iHK<2QKweq
zHuKyfF@}<Ix}-C!lR<n*>-U$N9I^dDK7*YtH`OCjo{m$(36mof_+*3wKO<^2V<~Iv
zYa2(lKd(yZkSXm?xU|N+1N;H;z0n|R?q+~?JH*lFcJT0{ClNF^{H#AGII3hCG%(j&
z#Per<2ZQnH$y~b99am@n`P%H`Kfin9z4EZfl>}hdL+-ro>F1se8@+e7!rOko5$z04
zt$sMY>A=^8G-F(pBVBmXZ>-80X89$oZ30K0jd15}*CU_g=yU`0w?yenUb@csm#G5R
z4)A5ZE&yUcd+5(A0D9=p`gpY9>qJBA`wHBt(7(c>+<(?!$Y^66AxUB+X(T%O4M_m3
zdqL1W_1Y(s9OFrj$!LbjILB;40aPmnqAP?1;}euR#B?f}`em63JQxs6oFEP;cuG%J
zl)|K@qrPoO>TZMx1hj#b$O-J7iv24q_0b-^S|Mox!xn9#G=3@WZ=JacgQ3ii)Ax#T
zRpulvlmjt&4p3k&$>Tv;R;n4#9cN;8av~tCVHvHG<08j-Pv)dk9CI50Wg^js7{_Xm
zLsdOj!(wTs?0z8zijEEifk2P|71ohzSNhT-OY1jBmh?5cg;vKRo}d!Ih8*$cYpo{j
z*_+q|Uw7vSBz=5C4xG@BG5ReDP*p-VnyAwNa>~jopeUvD{S5W9po54<bArRp+74Y%
z%N{pRA1j~Tk_-;|!DVWQ8h}{ypMpM(0fs~fr9UbTL`a#w2q$q0Q)q+BB~A75R3osm
z8WVjdrt3-C5LEp~+*=Cc6hYEN*lZzcH4wKGgq@IiCgd^S=vGMQfg%C6#bAyR8@jIB
zXMn92!6*O$P3&J066yqucZ!<#1l<cI(iljaAsUSkX`5<nN<`HJNQYCRnm&MN1*m&c
zZ5qHCZYe3%aR@Z18u3rGLws;{`W6fa>cqcmMVPg)A}@+M$+>i-MTfT3r=9pn)Ml{O
zo$}&VdJIMkWTdfnOq?L9^)-`;Y09Dz;_SIG{^X-4QN<g`^Px9IlEuRr>-@qpUcUGt
ztnWNC=`~ln)AG`PU7LOAC-U+N<NwckTuA`_)JK5r?2{h|llG6a!fXG1R&0z;t^IL&
z-M+VDnrEygC-H&Q-wRa50F$!Bne!#u%>*}HcNOxiK)V}Yuv3TGWOs8K9;&M?-`5+u
zHU?DxJ!fvB-<FXsh3q_qM;EH>$aT0-)aL>u1nDOvVnpz}1bi}Y5kLBp#~LT&0@KM1
z<IxP+gzRq%*2*U(1h&boGUOmAzmHi#0e^_1%)Jb$!sUr#!=^263JL5%LQ7Z!8~2x0
zE||!Bgd*g&DN$e@g)FW!UImW<4opL!CF6rj`zmB4txLAD8IW<}LX>eC52V*5PC%sd
zX6!o08zOZ9)M8K*5!QT=kt*h+Tl1Ft|3MV86P@DG)V3%zYS9+Xm5>#cOa!!QIFRvq
zjfgf&ZFaaqKd5N}P<RzXy^?}}ASAls@_EwD+^P84g*L~wI{YnnhVH<e)L6ha#Xkmj
zWDng%^0WDVah}#>LACv9qvj$$49Xy?n6@C_laIh!iR`IBhf;V6U_}9ltyRU$a^OUS
zW1QMXbCTq$Tgugh3@9UjA_~O5095fZdPVb?beTw~sg`lr$Q;A}W+X$%Ow4e<%yA|{
z`it2*5>c~>xZOnDi4k=oB;62=xf0|{LE=9&rJ^iaK5ubYVzv!zyex9m`Dn)Ol7xK3
zjCzDf=)ahbEkZdZ=gS#J)0~rJy4RB=K%<qQ(Tvb+#7Gjt#Uv@9S#_2TW{nU(^I!j(
zb3wHLchX(fZn3WYE)J0@ayrF8n||>~61PlD7F&4%(jM@RpiZW@mRQ((OMdEkCSFcU
zcPck1W!G9zNi!-V8c@;((m258PKH1D@Ns0-B~;Zwr(t~Sl0M_o+=24k#%FMD^;21|
zvC^Fu8^5()eCP+VV#grTKQjovk{?$RfIo{ASmoHtKk`#S@>SQQ$=?4t%TJHaZ#<kH
zTz)NvIgtW&hL?Tg>24ojf&#}+#b`HLxN83rGoxv~c+^)yi)m}wXpK+TcM<+9llMQR
zhg3LTtj80Z?EeOt3eio*^(e?wmCu^%ROu%|=%XhS<ep_Erjv{n^d_Sze@%>hM?MHC
z>`yVn0K?f9rn7D21y%Sn-V8`mmvr)J6BhGRzv0O21TA)<iwg?j&$Dzn2u74aF5XnA
z6+k8_3{MizB47g*Y6k?{KzL534f;ui9wh-ZiyZ-b_5&AYKw}{YX>cRU$n%HfUV%8L
z%~YZ0DnU`H9snh8G&dg;Lcrj%^sbrcN#~b{gw{uAKY%g_W?a^>gE#>KHTaxkw+2l*
z#SHtao_cH^2y`B}O0F@k&G<)q;Jm?d02aX>xzRMBS)bm{qwDzAq=0vIS>5g9|6wYA
zwL4zS3bZ{@w*giSe{N6kJ*B;U6$uJyqC#5%riH*<2Tp8!Pu}hdLPcoPA*Hs8KVL;+
zelp=;i3qnt#AMFY==iGWNSXcNk1rz=dS0YLc4Adl9l9Pk9X|#A7!~<HP|#N|;*dB1
zDM9`X#H|={D`bVg=3L36fE1A0WK~TaE7kkpc6$b_zC@fK8Al|+u$=zOGZf@EK?-5T
zOpF8(Aw_})8b}&V7BixtN-ebE&O~IzX-&leQcBd*2+d}~qE^(NGdo)*&hfabw6gf>
z6LFVMj0O2xG*&;~x+JjNR)Quu4PL8N)IWlyzPbIcx*+y@`g}rZ1T?CRAO`^hL!3nO
z*sI;oI%rEzWMZ!JT4+*-*N*9J&|(3SE{#_Pn9d4(@Q+VnXLKG2x21S6K8Lms=jQg|
z(%=Y=pZiGGZ7j5BW&b1V)knU4lCKl#=SuMZa~@X`fIsyiJ4jKEtL^*~|8ODs>Ic(!
z{;k{N=dxtG7cX~j$8fr#Y+AJsCSp&~M}Kk}FTC90`Qkl$+Gw^ZpoJKZq~BKa{Bt!i
zKWZW^217eBZl~gFy<n@fy$hh`&1`HFC$xFc#zECS1%9faWez{fa*PL4j7DROh9eI6
zGm4f}rP1s*1>JxueCpwkkd@n*<U6c~z(N~b<;4u^lbHqsy<AwD`=A}L!PWY8%`K3h
zO2NY-AXl{{h$4f~yn`^$lE$c{4H0A&f^mRg6NoNQsn7cX=2t?@s4v?VKEV0~pg9kk
zKnSA|Apm7rnPMD?$(JO~6Y0hiAmC(&%5rWtIEgj^XOtMo7&!X?gu>WnL5Pq7Ja1|S
z<7*?6WsX$`Ur+%39#2qe5}?tUrOH*okHdW|#6+vaO9!W#pSo@2x)WQ^yavmfovW8}
zv9V5dW249@Jy|N!IC@Gkr5pp7kVplma_V9eZS4b-GnU_@sRwQaa3W;d26T6D5~O`-
zJtA&J={?W)gX$DW;MY>0|LrSxO0$Uo$k$EpGWt2Sbd0(wz2>?KlJ)+n4Mne|nHdok
zS%*4Bm^6fsl2YJrAZn$E8)WVipfLxu7pMh5Bd8^}pjgX7Nx<~E){Y10UnH4dpwyXv
zP9|BNnUn`9DaeuKW8||bD#}R9oD=6p*g`XEp^>zard`AV8BIw$Y&e)<Kz%IsTcB1!
zf>tX<tC4a-Kx><uOVm2hX&4eLGIYxP_5^XXJisUCa&`2+^IMQI_tiZ#U`i*8St;Ad
zCkw{iQ{x{ePNeWYr))e;<P!@+zI*~=_o+EC3K|r5iSS3sT8TgUqjOl>AerAC@l#g*
zgMg(adfmMkWEb(`nGcrjv>lgK{^C~k>Gw?Xi{s1P46Z!B@Np#p_%k1JL(ht>VibP%
zeM$Tkry6k@u5Uk5#$hAuG_S#UwysqPRgx-rU2J1>d>lt#Y~il(Ml3HT2zmi#vj~$Z
zL7~>ut26#;y?&<vNZ+k7w_OJAr9rumACb5T!TAIoDtt(AqxO#py6^Wh4961;M`KJz
z6Xe-cSx54x45rA65yr(Pk2eympBI_iRB7WND3jFiD6G}GgN{Jt2u5}1IWJu6;722l
zc?Cn+6?kj1SuWZ?>AX_lQ9C%&QO8&@^Yi4zPBFPcOd?G40h2E07J)I1X=Npva}{Po
z+LXhPrvh@>s03o9Ndl=$rEM=pBUL0uGn9;Q&)iK}NSRJmA`y-F`zir!61Y;`>u8|)
z04Q`S@l^Zzi~z`UDX8*>s$+ICY-KEcPCj^S%Ag?03k5zEA)=b3n;8)CX?1>Uc10X2
zt}?G8I3s~lj3SL8uG|3Q1z3>h;@Xq}?YNCNsGnCu65lHXZS%iLF2S7K>YKkdhF#xY
zQHPQeRkp@;^BDYp!DoaMptlH*k1`q1P!ktO^h}rvQbdM9^0n{z3+&IxRoXz*Y#^p;
zn|LtIfOY<xb3oiKk&>ZMSA!U}ABYSX0XwIG%@Z_!DlUU$GDH^Q>=RLvoKeo|p%kDA
zvX8kPmdNo}8T!)!w#ylReB#I?Q3H**gJ#%88g~#Ubgzje^>i}Dcr+EWs7MfkW~+r}
zGv$_EOlzOe42#rs5A%9r{~(qiHsLD=?%C#I2|C~Brbi%8;(LOj4%MhIE|K0>ez#P#
ziW63E70&k?9kcly7{a4SCVgMf8*M9aCx(dBzz08k9_KHfLlF0MzYy^rE~JVAoz4<+
z^zr=h-zpn%lt*E+yIFktYlr!%O@AV;JpR1Ll?33=eaLM-oV~oBgnQoH!CjB0@nm#y
z^JD4$rLRPqbTRQ}^O8M>0kZre)`u02yjbD(8*fCn-9)<s%!&lFnUJIy+~i>I`)u;J
zX2s4@bGIZgRWmdTOMQD<_(_@~Nhkr3-=_^|G@@WXKz}gCcs!BHgL~g(aZJ%QLmo^x
z*iVZsWcfCa=@Hb=<Uu0r(fjD_;pI4u(qpt9>$S>p+Gb+OiYF!3odylVu5%fD50MW~
z)eo5r#`A_1v+d2mhW7NqS<zrmh!jYQgDpz3fTd*`Ndz(y6dI808&&y|>(I&OVMDH@
zb#9n<77`B1rLU^NONdccZHNv4Rc$3f#k8x^Ybx9yN76vx&&U0Lss2T+k9xnNipQWT
zs~5`YlY~H<`J4dord=|zQ-%}e`+9zPY|Kh28+LOfFvD215#%n1H3(?3LEu`x<M=Hp
zTnl<dk0@Y_glc)6{g)&}tq9f5*XM1FG-z+1o)?7ya{*lILGv|JSGHcUBZDi!P%&T)
zSPGjU2x-Jmd2#MXqK_e86Q@q50qQyc2A?S8&#ZrA`cwN$s{b%yb0~x<k^WLdtr$@=
z;^0r*lEyq${T1Rim;*ov0$pTkkI`D2tO2XX0v5Rvl)pmG!Jm>yg66e7NbM~r1Lzxi
z1ldzUK*<)hq)5j;n{8k)&D0h*K^k?C#&aT6l*}PXy1X_i`J7B<7>?+<vY*6p1FcpQ
zoo<R&tAR!{M$D5o+K(@!wZ_VcdN^i5tT2gRzPcD|$(okZGP=m@ew*b`S!(03x;BM)
zVCXvcf?7fhwl;#^r_3{v;GedDb|=C|KYkuBA3u$lgnrxzq!bWzZkr8CkSZK~>DLiq
zkf*^?cThd`_MO=?>h5=?=l|dHxRL<;g%7#2x2B(cEN;wye<Qf+=i+F4aB1^n&4Vj%
zMieIOHP6T;tC7)7T3|XmgNyw!s+Tj|bl_%m+D+CBuZA)5Sth}Q;6X>`vqH~{2g$6m
zRNgUH`4qA!0U!vT`unshbBx9#OfrJ?2N(_q$fgq%)szHPMdmh`VO9+>EjE$OwpkuE
zFGrq{t$z10;p(-joDzS>rgqZ5^7Un>=dyZ0`-`=)qg@Z%1?u8M7QUPkA8lGH;6v-5
zDBuJGQ{Yk;!R?b&p#{8gbZAU4BKcox1<>SzFt>BkB_LrSN-XH?vG=+Vp9pJbra7er
z6;)b91Y~&tPIkDCR>qMK%~Ax_RQlx9mI$dr_sV<*kF!<+X&i(C0oyFRIRmoJkFh>X
zQBT=`j4V*tFaaL!m#PRm6DBnwapP5f)XG(EZic#kMKob>Fuua(%KkS_f_MrzD_`-C
zFl$_f{^@=+ZC9_`;zl3&KA|d2U&9GaiVU*PA=R6}Do{%Z3?^Vws>&ZL_l3v*Sj4en
z9SGJ6AcY`aOy*=~pIcxG3jP-KDO(F;O#s3aVVWXpB#0X^;%1Db9df`==SW<NlFACr
zIdQF&^(kHv)dW~Q3MT(i<v*jqI;D1%R{b3K1r?;=?{qty6u6}@f^BeLyCQ@j5xMG$
z9V;;|#u(-oMg5Uy+?!~|b7-c^XeEn?(heem!pH)<%(1<_gPko(2tuTd2D<GATAc)~
zHWdj8^BQ7W*WyJW#zeL3O8kZD&I3A`B-cb1J&(#T;-}1tTC2tWUlaL}`%`o!TvDL~
zM7s~Ud6@#e<p6UF0Y38ai+J|A(})^d?Aprr6CV<_?kYw~l4cVxocK)?#pa|HFLo!v
zssCjod-y|Fg8vuyxRL;T5s%H;Cx3n=ecOFe(EZ^e7z{3MKGNK~_*$`ug+b=Tl9z=&
z$xh&6e}o{I;kvzdqnS3)YD6d#+VP2|P6l-)_qYW<6mbpOpa{li@*cr^G_phnBRMe3
z3XG>Cj3zr6O$I!6H_Is4s|+j8j1|Z$g7mjAEjBR8*N_!E!aC-$n}jz&N+cYlU)4x^
z3ZKasnfZRz|IkCycwgz)VL|Kl*O|SJJ>*dWgT$4UED&{71_cr4s?az9oFwV16tO_A
zQ@V5e0k%#MVTdZ$0<E^Z7ij{JnNTqXCjkt9Qm|lDK?9M^lJl6Lc+ETX#j1W~K1pAh
z0!qSWLwt7fpd=VLw-$g#AF(&4N}qzi&SNWVOJi^|h0sOdNR<GovL>&3mMWGY?+kX-
zfrXwUDWR&gSxZP+qi)PfCqDR}HRm@O*))YWKi<c|U8^wWFE9bZ3k>myq?+Fd!BNy7
zd2EkAXKi%L$dEOpp^gT)765ZV<Ta|YVii{*J%%h4L+gMEmD(<|a49&Ok^tS`%15E&
zU>=JKU2+0IiLLk!Gwe^wg=`B=uz!N6(LmIQ5H}*ER57<pH0COF76P`LZPDKiuZ1rL
zH~}sk1IFv5I9XwuRV5)$$mxD9gqTO}lT6U_Oy0UZxU?&@ZKiw&SupZHA)rP?2VtU{
zkX19x$~8=<=dd-U)0H3&yNnJrlNGd*Wuyt29km$ABGhklbApXcy=HNQMl;buq=jZ;
zJOZ;Mmevc45An&>wu+(Xmcww>?;kE<s5AXtzGKLM@>g8lAfJ~#Lg-#0vSl|ww;SOz
zkF4R@qsI|7S6MrRupQw(1tc&?G|I5mUBJs{KY+>P!laWfb!Xw`|Gl1l^q+IVv#Sib
z^7xA$R}z3Pk`%Zx``F)Fh~Ii34!hr!<(q@`?Pt=(`8#OSqN#2UzRU?=XpAb+^EjVB
zf&f#@_x2*6(8%0~E2=n(xra}L!GwB$%^v?9lEs~lxKj3;WdiAM_jfQHZDE>kBd^9f
z&o3e<T;-QTHa?l<+n5&HT;-Ek5og!|L4s7_+jt-?N<s%DBnTXr=m=0PxL9A+6_;im
z?1Q<l807mVE$qHlNYJ~O8LQEw0Bl?AMjvE{=RSE(6^)XWC|Hw$5Cz?7g=i9Dya8;T
zEU|dAya(wo&_1xZ6kysHL8g?F2(krMM{;A9yQrc@N`$lsliKF4^=MhBpO#8O!(DFE
zBommN(1@VoF+Y?4Wu6&5n<JZUb~Umf_x=@TC#hR=3gmd8`T%tS8=g#{Af&2;l(6tA
z)Jw-nhLbE%*EAz#S{uNT;<W1CRc+UxeN6~VK3QG+#0`+S0RFkg{O2~iavx*_vd%~F
zlEsW>>4DnFBnRxGBB=%^eay*$R{z`q((^)O1;4U9{7+E6j48^zznnK^lt-lYC&8a*
z|D%Qk|1?I}ND$CCY%}C}bL#sy76KmiYc7z>pI`lCQJqF8*N=zjpAmxUG%vaBL~VhR
z|Cfg>Fv<OY=}#El$4PzE1h@=t7wK&i7n7C{E9CJqpn^hv76v4sMZ{at&nPj%Xts@E
zc9OU92pu$%c{Jliw9-XR4x+HlC$z|O^tYzi-q?|3G>On^w9srd&}uf&Y&6kG>HIJW
zLlST1!^lNo#l@O9nVguK?Y9#bswFe7_hX}~cGIf9e_5bC7b0zvze0rPUfjgf&zwTs
zSjCJHO48O;<{v9<M(Fky%hMM>g+c#V)=d_>c`*Lt_535>Gb;vH-2J|U$CU)&zxyFK
zZdPm;+rcNkZ9aO-hZ<4)O_S-x!On0l?Y0iE`kg4siS=n-Oi+;4eLlj=XIC-JNDxG%
z<3fhpshVV8P^57aoz6VE-4)Dr4`Qyn#5et5tX2MO%ua+dmPaFaGi1dWvvPuLHo~kN
z5avK2xvN|`Fv&!=5Z+8z&9&;Sez#EL5dfD*Ym35-CUP}i6ZWVH$eUuFp#xG$8WLS2
z3D*BJ=~MfeR<wkk2IQ5_gdg(^*SQImq@7L3$~DB!xd6#L(7OhhkPK@_j%e{ffazE^
zFVY2&S!oFz`q6}kAz_5!Wf6DLW8>j-bwcBL^GN%q^tZHN=)=(%qRBd${H=_{`Aw51
z225(0TO$<Ya^VD+0-zc2@JN>i4^#hRnOKPo2&gG)N^g2^%EX1;ss4A2yd^)9DGnR8
z6QZH%{QK6qSOD)%2((Q=5nOlyCJ>~EI}deO@UB(;d|Z0RTLI{VfF$ozwLwK0m;+)x
zWdF4mr5yZ82uN}{I!AO!DI-9%^dteY@jp2r;>$1!K!^a1{G}<vCjCu>KY{(jPJv`D
zVEDhWP@y~L&2(tojjr|Je1NqVOQO(#M@&h3g3%>PFqvtpf2@tCYe$pXx|pvg0?Snt
zFD~MW7^g$8qy36ofR?;UvcnS$N<=QPgJHgg{*)Yv2tjBfjpxxw7toAW(1;h1L_GvZ
zQO<JoCp+kG32H(Lh^<Bw?QR2|b_*@iL!cyy?s;lUagrlzkrQJ*bddq}!zgvtAxCe~
zOi?%-+D-~e^p=2L4`?S5PMq1nqfeYb5UpZHMT-ieRU$RWh)S=wjEn1!V}0X^tlL=X
z=GEkp&EikKZZcb&UD5de(jHe5fG_GHcl|V9&-%f`@0ttV{JBQdxM4gvo}tRpw6(-q
z_OuDm2pv(FW<`a`IN))gtLB$*!_^D8@xU_nEzR>xet$f{#nnxmTHnB>wH>UjU%>IR
zPf&<wc%BG7bDbWV#EuC<P6o!aZB90*&oAsYDOE+R!xQYJ!k6vW2s!c*Y%brNxRkJ?
zUpw1Q{--w-67bIqR%(*8wUI0Pw{H$u!r+;~j%HxLrSB)vtws=p1!U7r)D0yUS3%+|
zl9xM0*Ub|Z6SqQ|*(QGgQgBUyh5ghv5nER3+fx81m9|{{*U2lO&}!2}c?6o(nRpUm
zkv&Lx05S$iz7O1bHu+l{lcEY)Es`~UDni31IHG+dhGj13+IzZxt00i|%uOgr+6iJ#
zz(g?>YiAvFJ8902RUv#6fwD@x?n9t~ohm{`9XwFr+5*!1H(de^RrLNU=p$0cKG7h~
z11B-=%FD%;Mw2E4mUPhTQ9!XaLM=I=YTx|l#k9r<fSOpk5m>qiL|PS+q9iDGVI*l2
z)jtjX4fzugakfb$QmOnY_|w>5qgSD~NbMS(wJ%AU8szR*o;_NDmNkw1vDzfvPuxdm
zMjhR!(x+0Aop;xi6K-ZyE;*qQJ{I9oIUOFepdVA!Z=;R1hq+gp1hk4}$!pTOjSvMb
zL^1IYauj7BgKQl;<W9t`zXsBH39V!gI_ZA2;$=i(N4*C!3<e`??-YoL0Gtq!uz^mi
zjb^KfG@)cdR6|`MZ&z3+Y3(>_PjJ`H90}=Oi<%W$oeG^!hya~HV!vKH#B(oi;4@F0
z!gQ*YKNlSo{7o~3To?CXedlSMzx2thoy?_WRXn$ikG*{~JICXGSKR%+w8xbM;ER69
z4L+Wo?MLb7-rNh{@LUq*&C%#|S%p~`MorAfl_o0D?+>xqS;X64`)a)F)%W3{yY}PY
zN=p_I<G2>73rvC>{XECHogJJ!a|zEreIAcJ`x1`5d<N$?&XBw~Vl>feG|(W@5()f}
zpb1&#n!ddo!I#~=7HfU4-m-BAzt<)ZcuK$`gE4sP^TQsxbf==m2eewx(e<5$uonv1
z#Y@xRrFgdz01e4=;s+u{$~|6T@G~4q2>`|8X~4n08UULofxW#7(<ud0@h)g}1N8Qa
zK~XhBSd<l`vm8vwET~bdwdmi*6`%;sD7s;rYF<PTGO5VXhH6GR6bz|btFXS)L((dU
z`{C*bP>?*V5&_u~S!IK{@h;W1Y<h$$C?u{nNlfo>SPNfkQKPhWO`U1a-|_<&K6%rL
z4jc26d%}XeR|)hIy7n^_3UZ`B9q%&e-$@25eC?Y;UVhjme0nHG2aoi6YGNSCh{#1t
z;%BWJX#prj!)XCT1oLx$NXW4~$-!9}RsTZ%W9LF5{Us#%8zE|l#yrjVlY=M!>6MsU
z4mfdS7N!nBP||qnnF_NVLXwE|M}G^qgn2upB|-Nn1ua4Y#HvsNqZ_+3IY-O0Wo@`M
zqZ}7$8mTtEj;Y$hkznhUKYfBAoFfq=6BtXZts^91OOtzM(jv>xU@|+2%@MT(duT)p
zXe5hh#w%#X3y6{y+b9#UVK5z_zqP^lJ$Yad7pc|ipxtd@zTHNr(_oI0y=~5#8q%AQ
zy+|m&-0qCYSd7IM`A>^lF94o+W*v_|a~zZ65^Il$A(*IZvNL*7q1j$We{=$;&wVIw
zC7l>ywbKti{no+c<j$2@|NnQ7D+$1t^pG8FkUf7sZp^=>72fq&jA=F*UksDx947e`
z*(k?XKlE07_g8#9?!RRj3ybu7ImV+LJ6q(2M;S3e!(<XdWTOhp?HDW9?ZG{_?Z?-D
z)xF3^87{65@Z7nxICktjo_pa!`26uToIJCI&Hj{Cvf?;H+AK>dPDyQ!HVhg?Qv6m3
zVv5IFHDyL3Y$M=4k7<MJJiDQfZak=7y?YW9iG8@ATX=GizDW}6f3@Eg2(z}CY3V1e
zLu0gSqQZ0fQe~*{n*blY5d#%TeWw8iYe4G)uy_rP0hUOb^3l2r0j3k4e#C4Rgru*+
zZCYhOTf18ffG7#j03*eg^rl%%hL%f8umdaJ(cVXi1{1ectdAjmGe@blOxYQbNP{ZH
z%d`R_b{b)wZFNNsmxDXQ+2*_#@bNiHhQTA;Ql~OdCjshy5LWH0unT{OKA7|d9714h
ze0eVo^rq9##6z9WmdnPth=>4*Z80GpM0(_FVwcx`O%n*8Fu1$YPahEaK-YoffGKdA
zNYbu5Q;C2zQ6P5Ivvv*zeO98hdsU1HDCpC|pd=tj6aIsQOr;3=uUz$?lEiPfLU%b}
zw?9D|guOww*QcMUFkK5mBIi59sTuXj1MZb`?}$fBm>WQCdvo)Z3ZJ!)Tna2)59I{N
z<cq)|a_Ttqt4+`t8&vcvIJx1=%403g#nStW?Eb@_g<sF?!Bh2QptY7^G&_&c><pW7
zk;X+7%GhBeqNHGv-Sz1Fl@;x9lw5CNYdglJsDWm)gSk!z-A;>%g;bbOaU%p)I$pUU
zc?Y1Rm)1ZG^twWV{@gR`c=7l-jEghOX)+k!?qNb!n$4wfJiAz)I{TrrNh+p6j6NQH
z{nq5@1%1|+wuN7L@Z(AX@FhQ_{N0*<_KCRF`|hN=_7@vzHR_Ky(q^-bAOFt3jW^zY
zKU!&tev#qQYKZMoh0!>~WE!%t4V9u)6}B1y7TN*kJ3zZ#q1~LJm6S-60tZ?NuDbIO
zzVg1?5i~<&nBn|tAI}^+ha;cAh^LRdjHi#D#o5g*46_*%&u9iXO-UHU2zy?{#EF17
zx~`Y%5s?k4e26&Z>vsQ{MF~&c<Q$eSfx~+iN$IKizZ0GpCa?v1ea~9eFMJ`<Kalt!
zC87MSpTporst~meKzA{b0*h(D;w){l51k|NAdzmRU^TZ46jSkVFY=Jcg(0~H@@sJd
zpc^w)bXp}#U1o`kNz2MSIZqE5j31SpG;nxTe|zHs_^MnWYKE4hfTstTbx->DbPSS#
za6pvtM@fWO4^o3FZ{o^J5SKRr-Xo4yvcWSLs=Z~|h|Lto=o)(FDfwe`!CYcorsCm#
zonLg~K=fRSsg!uwjK8*?M842-5}0e?{N;@VDN@jeDoD@2=2y?01bGF{3G_8oWy6yq
zP4KQHIa&(zWFVlyls}J-Z3bi`Ko*x0{6m8M8{#2B@PF71k#<U9{4WB%1$hM~8Pd2}
z5@40YeqN?b4JfBoSY;s(@X%N)2Y*$u=3vadaXSNg&q$P(9v#_F3%k`5Gj}D`Ho>SP
zp|y6Jv;-7dH~8K02-L~a9f&1Q)?TyKYr4_3dxVLrbgt+<Ncppm$&^@*wEhVtXd#Yz
zXeP^O)A(V$gqYd}Rfx%W8>7)WaETH^nks0b*X>}w*Teim2c2Gwl%XzBOic-?sY;wW
zwS$xAH?Y;;#<V<%qUy`>RsIH~<0C@!EZe}T3x7~1VU>qruRFri4{l9A|3V$5yz=<c
zA6F89FZm(iA&I(Sj6L@zNef%UOW`#Kuf~sm&;Nww_ElKjnIi2)IC?U`&J@VFtkjuS
zUYlY!8%=;@AT!fR7^0PgXvGzJX^i=1iTPHJh29w5xr%$0*X`}$+UxEtzxJ*70Fwf1
zYXdxc@&cZC@-&`!>NK8v@ggp)_OU&s=vcCZC?y3nqQ;9~g-Xot+e!KILy2l`sM^<H
zqKrqRA!WiFLQp3%>5!0_6nO#IT99$1AS13BAHkQgURh9WLoI<}DOL@h1k*DTAjtp)
zcoG3xKMw4>Jz%+DCMS_{a1-b*6Jih|ossELg@_s4)LO9N1H~iE1IPlJR`?tYNr!<%
zWM~r?aybV`I*htjKg<7WV5^e?Ni%?g9!uqF`#{+L5|D|fM<{@`L@bHmOhB?WIW8x!
zt2bk=qjaXXZtWR6^%hv99(C5e@<VG|IGo<y;#}=pfYPt6=g;haYYUh)u+5ohb<5^I
z9{2Ibr?hd=F)|9MSjh3e7#Z+=WT8WlXpZ*+$l0#R6e?BAz_Kz@eBe>VxD1HQmPTRN
zpq5XCv{fN$2S{1vkEEjmEbI}pCY}_bJSP?pkMl<ZMvg@0S5P4t*A*QC6EbE{!h*EX
zZR&sP^{Op1{h9BHnTU>SoT%x8<aWBooR)wk8Y)0$#y+-QEmKk<CLxQ+5UCMDg?nIV
zgbnZ#k3f!~tR|QheN6N77)(gGs43_`x(AJ9i3x_JSV&{Vbhpz4(r5!%UnB1VLI!$R
znD1h~N2J0A&JWgc=FB<t2NNbU&x#EM<%Hj_pcbYg86*cu!bWA$$H|L-LdkWW#{0U{
z@aVfY$4`9jO7Q>7dt6BXzNCjhPf64ZR?=_yr_JQrzq_$>W^(7@d*dJco*%(<r-zGM
zQxHbHajryG)a+7~IAzJdNWPKvEoq&H6wlG;0K|lAa-c^V#^@#$7Mn%6)ULwCZh_u>
zj%K$&(h0EC3-G4<4&Y6%x}IOSKb+wB`E5M=!bLpsxl?%J>618dasyjC;*F6sB5pgd
z^)Dv`zGufV*aAVFH|VNRI|sCR2yE$}YcQiJ?D^tSK5wl$s;U23<yhw)$|PMac~G+$
zYiBwnfY|*c6Fdzti!1h8A8Y{esS0}!Q-!En_Ep7p!Hr3Y>9j&TA`zD$ta8bM*w};u
zGX-Kp0T^jetpExsq~Ab9D}s~*5@xBWo$O$AZtE+1-o$@A&s(a08vD}@h$p-`ZGeCc
z356e~Onj^4=tbCgfMT_kz`oK`OLV<Gcg=D7;9nE@kz=UAK_>ls8Hd5(f2+*J^-sA8
z>N{WwjwCsxnr8t|&zlk~)m}z=!}ggK#<uAMp*EOTfRW!l7r@A%+G-Y@h7tfyYOJk6
z2SMKpfks3eK@pFl4ge|rH5K}&vA;QBVQ+|LlaPE>f24p^0;ir0kZ)7#NMV0Y0#ryx
z-dxCkqV?dw7g6}M_L1K+?ECdK;GCUIv%iLvc_Adh(mV>_*QN}bXzNa^dZ*m4Z5S^x
zZeWAFm#jbiy;{C4%T3OOv<8SoDXqi2+(I_l!Vb0Fw2er`PcvO)a$&EzhslQdY#rxT
zM|kd~EsRNi92qj42Vt1)poLc2L#y56>4PH7krV$YY9JtiCU#sJ;PmQe5R|h?94>Ur
z<ih`FbNcXae`)*mmB*j;xRL;T(GOXDY1|DK(|7%|c6|Nc-yEzB?z{cL^sjx#58%>z
zieffJUWOR%h?1VR)*U=&#xT?m6LmjvpqFRJCMnjdRNRVb%{Z@cX)8dqj*?W+I&p=$
zPKAYDg~hoNJz~{%r>tN`HpF+|yo9@N-;Zy7&;6K8G8{j@fzN;bEFS;#89edqNt`;p
zip_1(B&fJ|*B}=(>YK9KmQ@z27H(>VE}Ypcw?`OlhTnvLY{bu;!%!za)zLfaQ!_eD
zJCj<ITGiy*3c8uP*j8%^P!cc|?|^^?@{<5N7X!5BfyIM5{--4<eQ!7lkc^=!fsBQh
zPLi2mU0;-WA{-|G>?Rlz>1;-G(ps|9&k0;9nGnEmIcxZHg{<d^tz)AAGd@PDZs~{8
z_vg)?Y;TQB$K!zd8Tk-g%_h~U8=Np=7_a28ELlRv3$8fshZ!2#_boBdq{`g>H1Xq(
zjkXI|+E;bjt&C^bcvpfUa#B9o(TNI;c9+Wo`%!Y^2h{rhN*Ji)PBJB7BY`qO!EJWc
z!BE1#oJYF-7-}Jn<`4n(q{$46k^l<)tpHI^Y<<b%x3dDYdSa#{NLYz5sc`xzFuD*B
zY^PfPlxPOENk45kIMiJ~n1NiDrtp0$nL%BwSy^tibz!`kT`0a=J8ojoeWAhI!TZ`h
zuT2+<{gb|mzOHydXbEFPgqod_djVT``dX$;N_h@>J=nSkK*R_dJ-mpWtcA5~nJxe#
z%+PICIJhUp^>=l#G?${;I>6TAgaE9sPqBJ&2OFz7rqomFNLvbF3+?U-&RzOEihL`J
zvCxgv{vWLuAOB}LL3~%B|G(77l?336ddLE4Bn#nE@-_dW6<z(~oBgwcdv3iy{q}GE
zf$-8=gmIQ*It`hr&f``5d)_{W{zqh4B7c!2087crn6kjhEG!eaO+!@HyyyEYq+&O~
zqzbSz3~+t~#H$tBM6PL+nCpR)f?lUYw>?9%IbpKXZTseN+t)1PeP4YqMmrf!UD(0V
zV;AuFW2f=>GcV)ViB+s^4Y>Skv}m!COIfNTLbO?E)u2$L3H+E&!0rM<dzdw;U%%nW
zE+j!-OFrcV@OYW}o^y}e%~1PI%UYgH9#gsCKqCS<29i_)4`DQct<ylW2ecLxx~1vB
z2GCuBv;ZbFzpXH?Z~)3eN3twdmadoz$&!_a|4BMl*n2Xn#7uaa^*3RhC}5{RmH1a9
zpa29Q(DjpmrmZ0B;3@;&1bR4mB4V7KXCm71TWaN{J3j}1J=mD%0qdkauggHmfwyDu
z<vDW}>ViOQU+7Ja1ll)JhN?-h`(G%!|7t62)xLX6ejn}mJE1|dK$c`dya_bmE81XI
z37ilaQlV9_X#*6smH;gpPNMnTg(Y1C8Tku&I)sCN%5kMkS_s2#g|r(m^xxunf0;Jm
z_bf_A2`*j&HckWxsclD9KM_s2@)toV)`{RY1QFd#0m74Cca85Ulws+;-wibVaj1Yv
zXY09;RL)J)?CN&A<XPKpH14bIC#D-%GHYHN?jN<Z$|Wi$-XkqILz|=}sB`$%93agL
z_QXiJ<(1857>!HJiWcU=Hm;sq!lBz1aqrFhao6p8as4%I9Nd>;eklT4>cvn7VHJdB
zRs^`XGsSaHoyUhh@Ekt==@+m)nxQq9V6gcj_5R6+D2^NX=`4BTJ4ZVk)|mU^w(Kj9
zKlgDZ0r+Brf4UIvO}^=0rQyCG+a8=7+<MbJ&2N79-@v6c@~$p1nkv+$OkY`4uCURE
z+{84p#D*qhEJLO>lw(ujl2p7Axul>rF(_<rWkD;ctO&&-bvTW%Hm#6s0BJ}{UnP3&
z2n+2Boo0z{D?_VOqR{|uy{d;>Z&<=Ne)V0L3^N>G?c>OEXYts>XYly5r*Y!cI@UHf
zc_${5kw!B`949hzMWwc}$rZwNpG-wTd`93gPsbFu%E_q-*=MUs-07z0Tmv0muCHtQ
z<-Bq8fCayCnE}D1LN*l0ckOtE{kI1QSv+3er`-moL<$^-4DY(RGQG~~#3R>84qU)<
zQoD&FR#6jTqV~k~y78>L5!p0YYO3S{q-(>gx*fy)T8UGVK!2Ac-O8U|$WVL=DCn5M
zof-gHFW4nUTGh)JHh!m536}+Cmn7);AD?y(o;C`oEdvLud))#V`IF?7RsU+qghBnx
zmSE^!v?*wY(ca3#0iNAoPmtY;vFABOUF~4g>uTWS{y%#U&_qHkqx2MLi0w}tkVb&8
zQ8DX3ZU<%BL)hpENpyah0-D^5bevIKp+5r79}5tSgj8CwkA%o{Q}7o>JPn$xUFoan
zvUcmp{j59~?f3EbHKBAt+4h!NkT=~3K9ej9Y*4;$e+bi}CN#tuko2rP8PeX+2mbmf
zVl53(fguNH_|6ckRK_UF6tg_SU<Aza3~5kdU$2AL+<p~abL-W(|DLOH%dLype;`HN
zrT3;xiQF1z$V1AYNTa(EqDLkRWX6=@s>TYgdBY8O+qd6~ryf3zU;K|B4gcr^&!f{@
zDq9QJVXeQGhMkwb?%ev(RUtE93I2cCk1Gkl7YY0COW*U4o8dJ-wlO$6xar#4oA3L^
zAH>F1fbq1%B=h>`27gM?t2@4u<6PCOL@W!6ydYV%j$4>SUM8nG?O}SGUAM&5yn_i*
z8eAy|5rK(D0teF&Yb2AgN{WCX+EI-8R)xi0iTPfEZf}Z4tK_-d+pcQiwi|B8d*5|8
zvMj^N^ILfOx$}7JkrR0A$>VtW#0FM3X`^kU-R_~?>at$}!>*TYbUtv`X3b3<&4h7y
zbj^f5w0~=nQN=$@qS%zg3`RBRpNkz9Y^e}ZMNTTFL~|f*fN_Pa0SvYStepl{ZZx=F
zAn*CbK<$F9FcN{>fHlXxAyE(nA)^dLQi?-n`x9zIy<pb7r@*f*d8(v&Bv1pSu-GLq
z@~Kb>VC%Kh?^2b|#6V5zm{_Qvi$ee<HMMibNQVY~n?#`VFT_7dJ|xMo#=JLRvC!(U
zcsHUKpo&c&s)h!rI1g8mn!O6_YttRZ574BqHbkJEZH?iAc6f7WlOk3`L-`1f17~eB
zf5QvaPI)BU(jggT)3RWVf*1t5kex8E6|Vj%0nomGn-YKuX(uR?4#M7&jNZzT$tc~d
z1Wq3ViY=fVi+B`ENE_@=NE6TX*CeZb{I`2w=PYW(mYRKTodj49XXc722$@TDYU0g4
z^t%_ZeZz8Q1!@>Mx%{bWA<d`TuBV$KkZhXn8!9N6Q(8ncG7I7nlTcPSNw9yhi^F#=
z<AFo_aNq6waK{bvIJlP}HJY^zP$rb87MQYT2CWZD&WJCgt-odjbYmcm3G6GWwV9Jr
z>HHk-dFLIt_bYD1AO6=z@lXEYuZ5diG4^)%5+w7z+wGVB&h}_6zoPc{m;bnu0Q`jy
z+4yLK*^_?#kF<gt|G~!K+|JbpZfbtZdw!_g8Z^S`c!u%RwmJI^XQ?BLOZ(8W0F~%d
z>(3c%$QvgS(Fk_WD<ZgSu#ov|9&4k`O%n>*1Qmtk0K@9Jgea6E`)a~5ln{)o0NaBK
zXZjHuL4vuY#C*5H(tLqVmq>CmG#VLil!veC;qXm+@J-)vFUG?uUOu;p&p&krpZ&~9
zJayzOPMtiDjZsEgg=n=qXtd^#P-9j726VSp<3F}hk<Y4|jyDF;hn^SL4|NEF>XGZb
zvuTbB2~Z7gh%;of^JI6*_#{aM13?SezCc1RCFT!m;y{8vjS}<J3YgfYE)py>6hPG_
zI|2t)Nt<a%ya1{Y*;ZI~Njkhlt6u(N1UbDfM)dS*iGDPY+4Ls;V$eTT_)Jz*7eK3o
z9ipNFGtyjlToN~|VIIE*;j&$;25~u&%n@K@f_WN}J=jPdCn+Y;Ys!Sm9T0ZCf<Agr
z5nLl5R}vv{R<zG-$pU>;>IjPru#J#94S9zISnGrpZFSm!8$n!Ea|kpLNVM>npOR5!
z&Pfsl`~XoBhE-IR<PI67RQbb={jtkmkG`&m2U4~>)WqP<7TGND1i-l$1B}iC)sR|A
zbRTKYpGOZAeRCGNdLQet)hlNU#;grt)wEUkE(5diKIIG4T3pV@LHQ*DHuymAUPhb!
zrl-LQh>QY=2!R}yF=mxUsV^XHDM{p5+PWx^O)CtiBBeav=;4NyIox{VA|AT!YTR@0
zUL3lyhs6bgC24b_NunIHAVZagthUIy5a#;G?Sl{%trf{C5RhNOW}kRB+)^O|AUaKy
zoi+-j$m67Z#}B?8hwr@}fB$=a8ZREpvxV@cAG<F3s_gmnxBmW=4)97F;4k%YB?0*F
zdQ@0W-}W_~=(c~mIXt&>aNkwU@A&2)#$epSXgK3cS#&@g|JH$PmdQJxsv0@UHUoLS
z$XObxi>f|h_{w;bv8K67V?vog+}tkUo~<a8F@HdNh+1gz`x5yquE;!CVBI_<UxN@^
z+rZhK5Umhsrxhb~i*prvy#mel1W}_v+6r*TwR5=RmizE+-})fN+fy7nv4$reKaNj-
z`Z%6><^qcojmicZ(Hz?C1+-dSByp4JKs+s=#yA3tY7eqb{Bm*9&P|Q{#8tOGO`|5G
z2Bt~QTmX>>CRZLF6{K11NrikUzq@`WKzkl&&WUDA8HDIA&^REllT%xxWXE9>+~Mmt
zleoyDaFlG&YS9EtdZIGNF9?80+RAvJ21SPlD>_5hO(y|7{BIK?ddFzrpYI%+M$mi4
zcnIRlKv7W=qk4kjSzfN6?hqJPk=xJsn_9YCqM+hD+>YP_Rzn>l4VsCOt8uk$RhJNU
z*H4iFBP!NlXX6S8Inj4`?4$bpkEj1R38RS5!aw>t6#7|!kB*1M{zOB8`~CE%2?UJ_
zAshWv>=;QCGbHufU0@f(QbzEqk`#h3UXbxojDT_?&YLE0OGzaMenx`yy4Hw{!r-@{
z>&bZaVC{^qc&cPq6nB3M>ZM4CA`I@*y6ixn%aa&3D#%j<Gksm(auRh=QHqpvPDO;Y
zm1cQ~F-<p2XoZGY?#$tqYnO26jeGFWt^07-ZA-Y}x(+(a0nnB#w3y|XWn;EI4wC>u
zgGMk_b&+RjMUO#}T@}WdhA4MRl!F-4QHp~9L_D>_h(ohPvap4CPl4dtd5qHtH@@a(
z{M?8CA%5b0KN~;s@Wx=@(p`Ud)*d~7H2a;Ot2MH&JpK|MR}z3f_aWQXQsedaEF`b~
zz5eLJXwTwO^E=-AgBWKmj0Y6_sf>_kvuKIhUK#<1zh586vDbCZS*|OtL9y2Bv*4lT
zCsu9JYNkLgYHR}eCzJ>f1fJ;ln5#M!f#3>PEoEXEd!x1iOWP2s5EZtw5SP}0bOY#w
zA-b)ElYzPU0<BJtv^_%5s*pB9nKHQJ0RGx{ydGPdBRu`mc|7sRS$y`<GkEsMDlT5S
zfD8?^8$EQob7(fYNTZZ%<Dw$5Scz(;^v4zcE~1j2DT7*#Xl0j1PY}Vut|v}=Fjwgm
zyeo$HE2`ugz;py$I#J=8JE+%PA|PpC0CRh28lYrrS2mMTb~mBDqP=d>TS;IuF#+OA
zRSR-Tz!){q1Yj3sOM9}8JV}Wgp%kjLXT(4Lnr9X%$P?@;$%UOBIJ8`wv-A(U&Q>9^
zPM-#uTCleO;-<iz0g%}pT9q$9GXWu!`*r>QnyQ2G8O-az5CE+yRq)Av$HJ1obag!e
zBOCIk5316V#k%io9nrQNhs~Q5A*1YywSUrpoUY4&)&a@RHc90#;_5$cmFO-C5tI=h
zLQ$d$gJDo!c#(`Y=zcNMUv1P>?=Rzh2zgbq15U_T2~eSa>&e?Xug&@UJw>gi-G`%3
zYowOClAk64wd6?Yld>AZS{scolDu|UciE(bvZB5{jlUL5YNTto(q6zl*Y3rAHy^<L
zckRcWw=ChBgDuwRM=TIpjuB5G5t_yc7PY{rQs5h-<_Hv1BB1;nYMtyvnC`@wZ6wGC
z4a{Z@6lII8n_2II&OIgUG?E+zXl><ao}VB&lc9Cz7}Em*=C0m@fBAbqiof@b|DpNV
zC)NkoF2CVtC*AEAjt@Te@ftk%=WpLv9)IEEN&@f~1^?!2Ze32^`teb=HR<+x_}2Hl
zA6YSn;daKOejM|~t<}%DQy@|Hyuq-$Y%&cQa3gPCvCEOUYR|P`PWz0Dmt0+nlq$KB
zF{@o?$C*G#Fla&<zbtrDRO70Q0uW6i=)^%rJ#_6uazFzx$bt2KhzkRtbumOYjj_-n
z?m&rlr$pM$5j6Y6u4Y4zH@@m1-uU_(Xs5x2i+wzK<UBt2@OgapvuAMP#h0+U9-)fb
zXm#e$Y|kN0=YgP!N-<|4Vo?Lb#Ux$c^@>t9JR^)rRV9@$pW}iY{fG}BGyEhKOi2Kn
zD5k)03s^l1tXvOAn2J-Nw^v#L^gC1fHuH@Inc)_ICUhZr1<(eXS@74kj5;rh{JcWy
ze9rZ6qit!z#n;V(r+EPw3czy5T4vg)r7QEb56v%D>!-60y}vJ9#cyha`c0C<FBw|*
zdi#z5XwYzt0LYUEObYanJv$uQ*qvS|dpakn#@(w`w<7&(8WDzwnP^Y#hUX-LSmMf5
zGj0X_su=^-(4w5>0tJzw@lPUp2K+~=|F{`|JhU3^l3oA0duT+~4olVwRr+V1qp|Zq
zf<GmV*7sLOMpIwpxqMrs_Qw(W>fuPQhr#*oZuL+<Kg%t4K@PY>Q{!p4R)F>RH25>p
zpcmQ3jJem&KhIbnVVdO_k0+STa->0o<xUTG-mn+<-*f;E+_@hQ+_?`|A7~=#(nX!2
z%x7#KlrgbJ0zPpmywL+4lo4;VZ$cNPh*54um<=OLw_;>lF{axo@@a~keilYdQYOff
zt_|%=G>S<Uz)W)HdmzHJY@o_YB+pFIm`spg52TA-{N!)`F#g^*{=4*vPwtEkEx+?)
zK~%l*<?WAu()W+9Bmw_#9#;~8KR5Wl?$+hxs~??YTXC8+%J;qdM`9!^*rDKGNG2;8
zzeOuAf9f^_Q{Su;b8G}oHv#z_zq9%JSD#!P!xj@Cx1DIfsI$r?8L(*r(lV!nfEF_a
zCkk3DxnAjLle2H7EMBS+k%cGTK!qtPkV^M(7GirRKywhG6#&g7MYlzQL={@S0#PeR
z&>HdrUzuy-tKWJUU;VaQF&h_n`OF4B|M)pP^0Bjc^64`;edZ+AW+E}#?Jc3znnyy4
zEMZSH(X|4UDys%T*VtBW2A<EER%WzM(#B0%0F(r10#Fe-lY({%Y+j<#K+=8ph$^)O
z+Iu8Xpot9O16U#=tr<!zsLxD9Ck8UK02dTpE)I{iDH*bk0vN{QOmQr!pkz&hJ)=g1
z3NTkh=I`zJoc;lu2B`v_jRDfV!<+$w3H-fbA~8nPqn>OWGS<L)l>B>I{fnn7L;fMR
znVi58ADc)XC>OwpfimVOx)nz0kogdsDp!c#D(G4}L|}xPBBA}^-UPLwy@ZZS1Zr9U
zj1bU|2>wrX%A+CVzbHkBW>_Xf`lHIfQ=z#~u+%RbGwHRVug@F@rt1_pE0DRS^!=r(
zcTSKz2CHjb*Qgwp_V^9H*AY#D?k$)bG*wFk+~}Yf2+60>pz0JiwQ*QO1f0W$x-Qzm
zk$}-G%aKho<XM469AZy*9yi=^1Ma(SFYdqN0PZ-{!@<2xG}-}>N^79V`zXfh<xB-b
zGg2i_O*mZ8*U1xdN1R5e1{CZY$odH;;}qE>!7PiBlf<@i9hhX8=slj2>LS@Lhdh2s
zlNt0RHd8Y6FA)Wl3T;FubHtMgszVhTi!J=*Z~kcb<L~^B@zalPkFH<%s!t>f@mD>+
z^(TKU*T8EVUU_`+k1Gkl7d(WXwbXju%?t6@JUY#`(=dwiZ+`a=#m&}!>}+KW`&+Q5
zha~{K9;F^5YZtfqF?UOQyheg@57PxV)ZQ##<sUjRKtJV$!oamx1LMj$6uVsUmY1Hg
zj1TeH5+MVmkQb^F8udphAs|Sb7B&;yth)C5FeMYzBA^?DBv)s|87RT6f_@MnorY*+
zln?-&G(j&d(P~#rwoBS1rcxqkWC&XU_ZDwCv=`s}-n+50Il(i>F5z<zU%;b}p2Q1B
zPT<mc(g*9J*<3+;eg&=05)%q5@+~i8FHqu0OuHtjU234bDQU73TtbyxCKACxN_xPo
z{)df=KtcvEP0QOtbe6zYuVqedWJ0E7H8f5_$lFASfwZX=6l`b{=GlKC)md}cneM6T
zo+T;llBd|YBJ7edD0`3*8j2xm1MIDEJ><=Ir^zTQ<SaiB+FczE7UHC}Pvi|nub;mk
zO6A2RCw+WAI7jr;&tVn5njMxUkJ~BfP<al%_pgaTjpC*^xL%?9!%z%UDfEBa_vv&S
zLDK!MK@0XijCO^H(u%Jy1sbaS17iNSgD~v{e4UeCfZk$R(mLRCL*7vluy!8UIm=07
zSWJjFA_xq(cT9_)gTEyC!e6lj-2%Co-iS4^Y84vu-&O89)ly3Wq>8tSo{0uN;5(rv
z?|~?jBqay#JfC1RonSJapv((&;}-TWFX7PP{dm<a*WkW8_u!W6df2y2qmVNYd$r7_
zDDysRkI=dZm9)pgRn*dAQ$P7E+#I9(hZ5*KLOG3*^;3+tTNrOQF&WZGU?OWo1*3Qk
zs$K~d8$`g2nS>c4rUZ@5%1B5nCiha8&AC00){=0O=(Q3A7Xt*-A<A24Xe~DJfBZk+
z8~*Uu{8W7G$j;!Zr8j-Jxv%xkBkLdhK%SF>>6H<|FZFRH0r*pb|3dTrYZl^nJX+*~
zW{Euewr_fW+*`OB{Y?q}qM)VKw^oae6|B<rD&$?8$JPG5LVMEx+^vdMpGEgEZ+CX<
zrg(i+5V|c@Hav(dl`tnD3@rydvPR^xm^{p<(l%iDjS~W@nl!}f-Xo@@s_w=WlYB;6
zw<K$9a<IgLPeDEh6}GYntr5`L1llp_B~)lMb9PxPC?QD4K(j)p9pZJbx(2U%{q;cp
zAkLm2;<;y6@wrc&$7de7h~qC^z=ew~#PI?;3oB^P?L(urfFN%0$7G*)>up;pdHH;>
zq5(XCkV{WDoCOF71(<;~0=6##E7#f>9oPbvPyw18;Ok3KfGR+0moSGyqF_Y*P;EJ|
zcZ01UA7|xnr?~4I7Qzqkh=v4ztA_OcpdYD#l=!IEfKJw^m0rET`qrBk?g={)+P%Tj
zgpx2BOl)w!5c?F~u)rI6Nnt1MQ=9$Q+=CNPK``VlVIrhX0a!BT5;RF3-1iL$lLW#W
zK<$PFY}FW7K{+vo0@%|?v64P0!T$~c;I5Kb{dP3TBhUFIpwXgt6t)f#X!|?B>PeXv
zq2SMY|HK=ipr-~=20J)QUp=>kpZGR_1aK!!WYT+D)ywy4Z4N#JNfg+^w<3K6bN|zk
zMmOVMATLJ9W<yM-Gt4IJXN_K(;Krpn9KP)k?z{CW+;#hY9KLoQdzTwX+5~+~QRE{O
zWzPBqG)lzRhjctN*=Og=s1)L)nld4akdI?z!x+;+1Cv35@vwnumLMw<Osj}hNnHy_
zy&>o|xD`X=$INuqkzA9qR$fk?SBU6%Y|+(rU6#tG=M%XwB01>@!B!i=vjfZyjWNHk
zjeqg0-xvPC*Z#Y7_3UJ@vharAzk6TwwNG96{XZbrz$-|=m-e`l09+RQ=NfnIU5dZv
zQ)QWTC)s53E#LV4>GJZ8<;GfuEE9!4hw8};KJkf-pd+5JQcV;8HdF~2-c-0;*M2Go
z8AtauDBI?9T@zKAzV)5YAVy6NWG^R1Guv*7@QP`DDk{m0DQyv`yIVA?5Ke#@v)ZXu
zprR>6Xj8%$ZCu0<roRaq=T@F=>LgPv`zPWuKwqojCjB9Y!%=`%7^A%oc0_D60;HV^
z>0E`XnW2nx1dS5=7h_!YwyW`#Z@U`fof(e3xP>E6UBaWES;x~)J%<Y?p2B)HhsOK?
zv=<JdHMfkY*+m(rOw{A;lo?xku4=timmjbLV8tVRInDiNz;J{5!4-OY#g3MffNqHf
z2?WuY67_%Cb;b+raHW?7h*<!J;xzdJm>#^hzO_8gkagcqu!3C(gAM_pfUcu|bis^w
zz`=%F0fg4r_@s@M5s}hn#zP&w(gc)~ib{M3ln_Sm=jRa3%1{q1+6}|YU#2Obu)kz9
zVHHLt1*|Bj2-J{(rQY>C!B=DOOJhmyCmUH4-lEql5H`Es)_iVi!M~PL7&_r{1U1+r
zG>Z&=Xxy)~x&L-W2mmW!wiimYd#>#kMqyRXGT_2VARm&(KWjRaRUU*qJ;J?y>GyNR
zuMU6ob}awTnI+vYdCgEq*@9Ntt3sqp5?J-o5&=mV#F>vOdrAOuc5|ZFtcrq+#W5Za
zFqv*5DkoTKHgS003huf78V>lk+_Hp22YOhb{(VgHxKotHHj2DJHWnLX8P8Ofs7sn9
z(U7){F!YOYgwZg<c#vW^Xkk1|F`g#KT!k+JST@;f_W}`*Nq2$uBUl1cuGfs#3~`Fw
zD6Q#W2**Nz5M5iEU=jEsQrUt~k|lGyNo3;)>1GGPvzwURw1Is$?<xO(zw~|h!LR$N
zxWCgJEX}{>1NR)vUi<jzKYX}OGQINn?|)oL0Qe!hZ8yECyA-|alPIfehNJ%IU2p%+
z_^PXJD>v6OWYdT<SlM%Vj$e2%MSVus%iVGvP?rZ6BS7gH^I13YnjC>cbD3@Sh4P;?
zlg=9x?|RnnHDBM_M1fUR{38=ok<dtj9+be)EAs>ZW$-hqY6FJe2qGmo)e{J1#LDs!
zM~X8CI~E|4ezmZ_1B}ax10>lJ6YAa!1GMu9jZuW=PKmjV3hh>fxK$u(&QNWZ$de2~
zW5yNR-S;iv?pH74+x~ipjg1+ed-f8Z_{2GU_K`Dq>7}DsJKaE(uAsee6`D)?kj%{k
zX#)ifb#wX3O?)S%>b3<Z=0X7;pdheC`T*<+PtdB|2c7v6*^p2Jkz)=>7(n~(+yY2R
zR4GD8lLXYaC04V8-@SFP?3v`_ps0$qSFBB-0ZsTD@+4;GvE!guRAd5`{yryWN;*^X
zA$OA*C&EZ~JS0%N_Z(C&j66y3+-$!WXtD&r+8K_&U`~5gC0a&i18l@WMH(zdUp}$1
zOZK6n;6$L6s=KO0q{-HLF(OH3-K}k+M5YTs??(x&&ij+*1DX8L%)ib3x8{rlscM7>
zuyziZY*jGWpP_$t`Xh^9fnLHgLPhN$ZU>Mqhh~Y421o)x$$-r8TU*L{^|iKut!Zo2
z5OPw@5MY3coc1Q07!5X2X7oGK&RCpJaO;grxc8bHao-IGaO?H^aqYnl<`xs6K?gKJ
zF&!b#a#pgW08A=~Oxm*(&gUouxgm>*Bz?{p)hNbrC&FmEf#FVy{!W7NG(uL!C`gFG
zS^`E8wJ}j1x0F9DajsJ=G>s&d&X#LvD@k)C$(IC$D`wjE(7i3@<WcSuQe>owfGh;E
zJ}`+ZG}Ef=c0x3>d4$hzU|MY8@IyD^U;W|_gg^Y=pO43bh0#j*h7aDja^dEeSD&P&
z!4*Eh7x}o70BEV)jQ7Ti(bxS>gy8VjXm#*aZ~WHg&4(T+S1-)M*({+7lE?Q;(z0gA
zwT1-9-mfv=mc0Z6(w27>i~@h02<VKpn+cX5yUN{&ZqjS48SF65V3m=0ZTouHdWYH*
zqaLs48*pvqROINhP*v}e0o4_t?@`a3|1B(e>EX#HK;wfV0V|0QW%|@^m)0~92t{Ln
zU3w7^w+f@2ZnO$%8DOml(VhbBeuQ=yqthsPgfUKM2wEj(og7tXjGzn5t)zI}JFnwE
zKeUzOrDI!o>a*wY_`{d*^i$8^?DNlJQqG~dybsO2dyp<JBka)5pD^Jshzjj#YI3HM
z!36cvhBO%k*f?8Z@djbMlNbsS{o0E_P9tG-oum`Mze|dyNU55lADH=3A;He(?Rk#g
zu0<^f)@5^TBv6qSPP907NZ91I5>xdmmjsYok<<NGb~!8H)9><qXfU$`P1k;?i^6G;
zHA!Yp061|F=-*iv>#?igkGl9Nxz8pSlo-I1C%fd1b@#7<Sb`YUd@)3*!riqsR-JDX
z)J71U%%J|;f<NcuI^_~JN<{4lNvA^G2@rKEkmN4~MWaKcQCM!Qme{$(MKha7$sg%=
z)7N}hxh0IOtmO#3A~q!yN`V848V`WJrb=Gg0Gtf5BcUV%)W<LKF{YC~M*WKz56`2*
z5X<ct_ufH_{1q%Eb9mKN2XWtZE4c2e1@50C9{|+^Mc5b7D)zxp<b^SFy8oD@;zgKL
zT!I3AnWY$y5)5_{^!o{h!xW=oh-nrh(@|L0j@P7)cL)mfR0I%vU&W$We?#{#0;<Hv
zL9QpS2u4r@Z6h)z37K)BPb~mNrzB~V^}@F^dt4BIfC$MVZO&*zhLSWqvh5O`Zh*OL
z5pl7JELp|fUv&%q`7eA&_~YOCU-M*iuzPL$Ykp(1bN(%x!;6%*Ur7SKh{r2D0g#P4
z4%@+U{O*6#2<G3qF*-eX<3nH5y!Wm*m+R{pX49z5@*;E<zxD$i55WH7c9?C$x~<s^
zwfWu~n~J)BMa6c!Zf4(50IMQvn&`egpogs)hgqds8-T$%6AzJnPhny43UHh-CH%p*
zVV!kmW-xJvcmzmb|C|InOmv8*2q>_o6$+kFmvKT*P?P?$Am=jL#-r`rI$)wT>%-HC
zA&u%$N3t^w(Tyrj2FTE;krv#?jM^oF)g1Z!5LKr{(1~#PfkhmCXb;}|y(P9TPH^<d
z2A=-Z1w8ifIlOr6C9J>LMm)EK=DxjX>{~&)(nH#b7#c1}yoXK_$t)8YjM_ON(BA^8
za~0-DC6G~4F^g#}0b@Ncyrs}FOYtRF*!l}5xTDD*Z;Fo3R_nj3q%ol-WeqwP9|eJi
z=)7CYMj&qq{5)|$Ut1(H6u^S1ML2_;Tp-urZc1^Sq-f^q-rr<;z51ef3JF(45(dLk
zluW7|0ZsyHVpIINI0;mt9McEj(<F%}-~Y;|;OfuNBwLX+5lEL**f*`r)I@}YfM^Gc
zNCTrCu*zSee>dkVG&*h(AdN~4cMz_f3(Im+G8vS|YBh;xjR!W^P$XbRS`nf+D0BX%
zz*rzC3*`aO-;`uZhR<@uRNV(O<Tyf+4UtWDFdA(k8w`;|W6bvg+<a#b_uTs`+<EUc
zxcA=cap;z1B=d@qY?PQhyM^(yeS|wX(q4&Rkq72^4YCd*pHpGZGb&YvC^HK75hf!M
z+!>CW=uc9NCJDw_h^&-^i2)5di`?p~@#pE<5mAp-{X_|hr~G6iQ<Y6O5m?gtCNdv0
z`N=VnEBtz^(ngD2W6q863R)yO7qq5mO=PO)z{xJ{9crJ=Qy*kWGK(-bCHvq$rs+0b
z`|i8(Pk;Jb(*OAfer2>AA9~%*jrabmC#V1UN2fX2q+Lk@{(B#<-~>Q!$|!7LDgA~Y
zYbV#ef3tsj@W5SfNniKcZ!9lepx_^}?JETV-YjaSJdPBkH@qSD?g?6@)W2nfE91Y+
zW)+cQo$tHtZ;m_e1aNdZfS)8Kph2U)h2Y`Suwv0yx06~s!UYMfB;BmG6D1N+BU3-4
z#ZDwQ%FGGAW29g#V{mapW_oG!wPT=ALK_k<VAU-kk{Bfgq@Wwo+`Sp-&{P4%(*oEo
z0^)KZ4Fa?$A-dxj-9FIVDA3^6KnZkn6mw&g&4OY0?oy1`zGE+5`!xsf{X02ceqkF=
zJ$w<5f8r9Jf9?z}ot?+1wS@M8J!l+QK(ucT(cU-=n+b}vDrZ%RY+CaB7Hh&<?k;<0
zxDG+bQ}RDoFLtU5DIuV7B^|lsaZ0P0RP~PA?>6dZtssAzwR+Z!O#{8t^k<o0CCJfc
z9fc+JYz!%o*9msDoWz~a5FzzjaFDs2YfBdRIp!;%2jqMM97b;rlzLB^r9f>u!1N1@
z)M#7)4ex$@(8^1_?dmOjd2O9u(3XZAlQuSLoCJ>==!AoE)=0ab5F2Kgw<rmazms{O
z)ARm&bdItqaOr%2d>n-3EG&7>Um5WM33_N`G}T-;Q6dtb{s%5YBaM4H7c)edA}F^}
zOgAwZT*9!wf$4C7G%B#N)W98g?7@Q%-GO^vvk!Maa1HkF?IP;RqA#<I8TvCC$0J+Z
z`2gt~<`CcAMgIH{(<9qxWI((`{GJ&iGesam?<B@>K(^y42E!EnL5$%z!ekaA3t~p%
z1m%$)j6*I>#YwL_s{`uA$=Qjt2E4Fxq49~RC@A^dQIeE%%S8Ax#7VJ~)3`8x+i{3!
zX?htfMp;VVpZ>v#F}tKna>K<19SC!l0`v!D*_>bj9Ynzh*&P+W;=5jr|7CqU{l|az
z4+aO8@A~0Gt#5ed`SGv+$D9QsJR*AK@n=8cS9b7kVkP~izcm-%^{=-F7Y2t8J(#}n
zP2Y}7t20a{fyjYY2nqIf{_}QE@z)+-WsUMGU^5wglHY+m4lH`^b_lfp5JR2F%toZq
zYK|9;-#cZ<&r^(r?8hU5z6Z?1f3*yppT~buRYsooit2K?rtEf~qNt>(1_#RS&2E=1
zZ^^_<*uAW-N5^g61e6f4EU}vN7?puOufp5X=abd|L&~zYo!$VoVW%N5DuJymKspQ1
zibAx<G3JIqd#gmVnImdts9IB0tr_xehN=@HXe2oF&@v9ab{X&azFV+<Zi-`1Z{pcc
zZ{z7FPvFE8IX1>klyeJc-?)hM#xBxpI>4SLf)0I#0)vf;T@o8T<w-<9XCdJB1;=A1
z5=x)BBB|KWglH5l=O-y&K*?@)8H5|+&aw<~2Ne<0M0Qt){s~obfwrb4&k#RPY-#&Q
z+W@8y<n9&eK{(?j7l@r+y+0_M{g(jlD<)F}^h7{;6GeM#Qohz^up68{d*QqS<i7Ja
zzZ-3>aaH6F^kP9=?YVY9z3O+`canH<0#Jz~b5o6f+7J|=1D1SdGOM+w$^h#ZDol4s
z>!GA%HmnFNrUZate_cby*<*WYQD$WFu97EW>a%kaPrdgo<l_q%?_9uO=K^M<O*E4d
zdzL!5`+;TL|KP2-_ra@i&;18*;6NK_OTaItIm&T{ay1wALb}#EvB4S~MZuMM&`r^N
zXc5Kja~OSc3(0E1lMUOOCB}mgqhXBUG+_tO$t=R8@D)Dw=6PC1T{mS55GPB{uhjI(
zlFyu;r=QbQAZZcLv~OQ%+l+=Jn78CwkX|8?24(|Ri?DW(n|5LOBx!$1buUO*P!ji%
z)({hENoA15$|U&PXHfe~mhK*o$i1<Nxij?p!*F&-h4=pWJ8=H=ditOK&F2OOSKjc`
zRXE*xe(<}$Tu|bC1qt{IAFr?kz&F|BxP`sRdw#SN-ukZx<MV^758jf#?akkbt*rvn
zQNTAp$3d;MWwg$du=rt$T=q}h-t`|fB*5nYuIR3BZiP6JF|)QN0OP7gKL&95Fo4d*
zThCvzeBb-kjm>Yh+@lr8dp}(-2QB?T4nqF3xS4O-2#MiKy*&#0Br2qw2n4h_D7lej
zR*5%2`~eF7HX$Li>#6|98;y;R@stve6cRc>34!njDputil)&Z;=u9JYhGcP^qLsGL
zh;u}Z3{j^5dAt|hF{*Bbs-0lr)-GOi`y5{L4FzWFGn{yNfagEEhG#yuQ6ByLSzP#Z
zh{0SN$)Oc2+`ku{yXKHy6Z0m+`UQb(dZZH&E)YsV*02JBmQAUWOlp8x{4VgThCZV~
zwf2poEqY_nSycI5bp$jgKz^PCU`mj<sH$z?R*u<d9LqavR?3N-3PicY!!ffw_`_sF
z6D6{0P$gI#2~gikg1n9MsaaJ`{+EwaRS)gu<>izRsfQxDhDtdr=}SNhtritm-fb)G
z6APx*sr@zGKis0{7F5Mbl#E8H_J4CO3~BznDA}xtr&xA2N{qHt=!sbWM4YGf%@<Kk
zq?G-y{VU!Y>3SrTTu_uM2bhg7VYGD){f)DjZm%N50DG1by!OHUc<_PSaqnxd#@+Yq
z$HDy_prdO$n_)K1QEg25dKoJ|Y7u>2r#rNrA`g;ltWZv<g*M~XSMMFmIP<$>ocL&j
zycuFbNerV<Qo+;VlB%Z)6N+k+O%$<zh@vN&^qE4X+sjl^n|k&P>2m_4(${>eN`QCC
zoN{VZPD-vR|CD5$?Orp;->XuZZ-jFwHen~-Z#dTT{iG-h@dMNuk&zm5I30zEqE^^D
zO-0EN+3g{I^q+lmc>csz`n$h<a&Tbpn|>)w%F%OMANU<Y0xa>oA{O+gKVD%806l2a
z3bCj0b>Gp!ZU1&SK0jDmx+?vuw|*CfqZku1_aSVW>Y1`)n9AKiw&A*JNIR-^O@G7X
zYbvKcK>MDsp!;6_mw5ptY5MyL&(H?02n1Z^=`q`JYulxNKdlxm0nvKTND5p)Iybf&
z%fP*tgJh)&;7yq}N1ab5*pHRbsEWvCcGpNr%&=G8a7qA#+$RWu^5~?}Q0Ul#9w7s!
zsZ3P>S4A>S#4KYHA)@_ySXD?0pfQQi3?j6m6z$CtDe(rHGsJTR%B2$3{0MoAW{P73
z%K;AWo5SJP^zg2~p5fB5AzpfT2S+}!i6hUvh)d5N$7rF8{Pz85JhXz@16{Olj1ew|
zi0D}3g2t*brl^wuIRzU*fH_t)49~1H=yzp%K0&bj(~>wd*5P=g5U2$RZU<<f<^ol(
z6e$hTc_MuRo<gweYs7iG50!~7x1W;t^i?Ry(u?d-03&p{d42yutPfACL0U~5Kx7&~
zocsK}<Ls*K&i9)=%?&!C9JLyj`I}mM!bTDmvewR&Pi)j~nR?iC0F4e^6L969c7rf&
zNiW~d@o1;SV4Z?LNoEWAlX_1q_@sfKlP(&atAK>~79{pG8)3S$hW^Gy3^q<<+`oi&
zIL6+U827$v1@}L2FK)YMKkmBkAg;NJ1PAC1bClD94Rf$YmbgUIl%$^e>P{t;xE@Bp
zq-vOvK`Ob0j2IS#*C`RSQ=({AIQX><96LF~%TJPPr^tcPaoQvhtCE@?wDzGK9a#fC
zUoYOnbbFxn%BqLd!<T!Cc@Pe%5iTJ+N7|%=`8V)(rY#%`?tGE;eC`5pyc(r#O^k%<
zqyfDa1EbakQ?CIYy(FYfIS5rmQ<DJ(J0xMyM(22rAl||3R^T7~?01J7mwqPw>}S^o
z2ll?@x8ps*+n&1kJ0EsRqF1^Bf9j*&l6%Ee|0}Jpe)B@~rjJgt)j_M-N#FghA3;^^
z!FV*oguLV>=5g>hsa^;9^TR5CTV$8l__Ynt)PFS36(+T>vFnB>*5{0=r)ehh#u(S1
zDcoz$!*09BuAi&;Ozp7Te$Esbr%bGSw+}W}`MEPz>%mHIxYnA`Id<z2N9M(D@2|Z*
zRs>UH7H%WxMrBNI79>-rJee65OHtYwwd=sdGZvi*CFvmLbK3u!G{27ujac;t$h4@F
zBW~qDFF;8%;H{hufr!B$rX;zVlLa7l&Q5XaNFS#j-ocAc&hYX@U?*)LxM>jpU_hV0
z%~vmC{#A>ZzovyDB5bSz)727_bwNRBUioXknR?CU{h()23rH#eyVjynLe!)Jwul`)
zE6ZRO(o~wl%)&7+xYfp|xJ^S3WmlVC0aLJvqd`|g`_%^ba#CUcw(QbfNS$2Zh@_~4
zZr&Djy-1J*S`h{kt^FzrNZMUwV-tj=yvHU~+{+OIrFIfvp{Co<W8r2itbJvQ!5<w0
z{V@=XE1tNJ;3wh|!9+-+VHO}ND^9Y~utFLKXeU532D&`u0sQ)t;AAgZ09uPd$OKPm
ziIr4EZ(j&7?UTx5h3T+DPVE~K{>ekcxg>cc?o<p$n67VNaPb2Am(F0awT8HyV0k&f
zjfa=<n%5k}gRi+7x8Jo7d-ryLmR0yU3hEQ(!osIS!loCD@aqT>Zar$k&H4hh2?Vtr
zru$yTij<7I7$Ir}7;lyM)&K7d{jC(Ou8hvf$e!2Mah(>YR9aUo6$t}s-$|u!Tn7_6
zq7g;i(L_?3D|+6~baKRCe`WlLf}d$c)Y?WyLaiqVmUz-%q!|(g)G{r1p-Sv>D*Hi6
z=oo!QMohvWOz0knge#PWCFbXHbeH=m56=+YI**-8GyL_h`S<zhQ(?YmVJ<ye{_aE1
zUiy>I3+m~WrLR0*kqLm*8q3W$-o6xm<r9-~n1@jnzWW_N95&n6V7QZEnh6Px$gXNS
z?kjxf)9p7{yT$A9(q*1?js<JasLTGkjM_P)S?gBdaY_VaPPX2+wdaZ8s}IutVI&+$
zckF%r`}^Lm(+!ZfSE$!2ba&J>IaX7OlQA^;9h1M6*>SNa7K>s(yDbu-zC}RE0JS`%
zx|H+E(*jCb;$T6>WGXq!=Ys`pN=^!Rv#2OIuy_~;7V42Fkth+iQ&RUMy@3*8D@WAL
zQ7#n#p#)9RL#L{brsx7-GDUV~jEhh9ar`qIIQ8@Z=g$P#M1tz-Ih6PB#q927<a>LV
z(5&<Th$ki9`Hl+RZiS4_lrZ94`-c1yNT<c_A^M~=1+mRWGX!l=uv6<|m7iq+A~%n&
z3Uq2itNb%g25b_A_D-2nu-1>IasD1;N{P*>)({E_Qr5vY?t$#YM#wYq9kJSFv7(ZY
zogk9nPc!QYc}?)iC*h$0tpu3Y_6NP3$mQ5kg@{0w)W9b=0jN+-2$BzZ6pz&SxB@2g
zCQ`3t)kT*0M@s6FNq{EJhsOarVl0W@cp50X6*>!~`X`E*9MB42<6>1#Y085%{tKd*
z1H}l)HwxsJMwp%7!1&T73@%;3czXlQXo`LN8o24!1>Ez%0o;Axe%x}$9_(Lfv(5ku
zZDj=t(!|ztYQkQY<O$){k}i|NbJ)BjIjk_L-=lNmL__qsbc0iNOLn_V3@wp21Ktl_
zex$;0{U`F^NLh=5TS#tOFcgwnAaeiY*26bGgZY5e3jx=2tZf*KBns!qdssNU&=o+^
zI8^BVvV>9)9wUS*mq-f<UDL#wQhop>_wpK?0B9l**1k>x5*wp?A!OcAGc2&MkfXJ{
zgYvEb>1``G_So6-`@Z(4^VxVg?DWc=lf|#y^YYr`7cQgZUU|H-5&&76z4X@Qz0o&4
zRUu!VWLf#HxBbm{dCy@C`%?Kct5wJSN>+y1P4W}6ouOksq-w3@dRZ3cNj^k^u+p97
zg<P6mU$hn|?K=jU5jl_+hT~4v6;))MhD(oKkgL;B+ntcOpJ|iVdUXcT)qhVp1Y8i>
zFFW|pVSCp9)#Svzz6#+`RnKEuVm#xBV@xUxkWvNNtdO)sTtpPp<UQDFPvvr{BI4Jh
zjes@^?Il{!=i~r&QlX*(VTC4Dj1)L18EBAU(F{Si0G2CYDMZzdS<Q^jLrkU7aEx+o
zivF1lt4|GZ<}-bqI6B6;VT6qXi<sQM2hr_&5$$c`eP0`4z6o3^OH3$$X-|_rf+YZT
zRYF1l1`M;-5&*8o#J9oN)uKl)LBcj|Go~TPmWIy^of3GLVPxkSXy?#yaOX(p`Vb!O
zxBG#vpAfX<T1rq6As8M9l#^XD56+nPNyXQY$J2;6LDsG@FlXE?C3J~`o@9?CO+g93
z!y{m4MDzH90ML0LK^~gC2uR$9xF(bU6ak|<sRsUL9I|XPApr$S{N{5&I0rOIWikoK
zM2M^6;Ru*+1Z6Y;$}J$fG)Di#7S^6$!{*CpFkM?i8ceXV665ggd+?e!T!s5ze-&=K
zeHnXJXdYFW@6#E|Nx{cQ$cb1FTT8<&L}|KcChpoAgkKY~VG|@Yx5x^E8aC@z%^dUt
zlr$E^n)&+Ddar~f_5A}f?!zDcT8U>LkFc;LeRzfg*<x3MJ#`Zp+Sf$U1{hrMXC{h4
z@@Ct-yKiL}fJXpoVrR7}lzPCo0KRJvv&vsl1ZN&4MFq(KaB|7(T#EqW7tzKeh@f&!
zxHu5`@gxj*Iw_$w9u-(zDA3s3M|ppY^!nxU;om!gzws?Um(4W~w&TXmqt8wL&o{62
z&(c8il_cPmmjK9eY()Fg1If32Jc-&5?Tj`?U-{baNw2^DLF{nlFU)U+Q917w&s0B(
zhc5`MzGC-Ve2w+Y-kw#>QI3)TvjeT805y2t7NjKv`mBT)vI?Dhih;VwsS#a`XfDB8
zQHotXIMi0Yyh%-#+XrW#90bBm($J#z2F7wz4-otGp7daGM)dM!f`Ef}tf&SB6=i)3
zVnD$;<bcA-0Kv*uJ?LlP*>fFh<BdU?#cEo|NrLJ1%U)U{rHz8*Maj2-Du$>+D+ROt
zqh^k<lk<2X7AuZgRX0M#Eew*nRYjPc8741Hap^N#IQ^+joH#KISMz4MwXz2*4=v&P
z*Y>b-=RA@FDJBs>F>Ra|Xq6S__?S%{ucBDTQw{>>OJ9=}(x@j*NC3nCx^d@}KGtT`
zIRQ{Ld(okxxhNU%Ktz%*47|%^hnf&GDj>b*>N3=4*S(?;HFLOYXpSUpO2(p1na&M;
zpLi<lGD$&Kt}7)8G#NqXcuu_x%(%*#+3FIZc=+gub1kmUNsgB__~|?l3P3FZBFX2}
z0wBm=kR3_@T1ki`rE3ceiweK{Vuf@mL}xCf8T*i?>t-7z&L7FJc4Sbl9ofYCOY0b&
z*+!BNuy1dHTkq`Pz6bZ>j)(T)jyw0@z=4)j_@sj|Em)OLR5e8I*7bI38V%MeVP#A@
zk7kyk!Je+A_CK^AFO|HmEAd{SRtj700;Ns?Ilf3`uS2K<P>jXRk|svhE(Z9u|56~L
zyS^$hBZ+IiZ))5jCF$ARkc{`%_#WCWGKp*3Z<x?utMu!85drCT)5t!hBtP92xLU6j
z3Boz3@jcwMsU`5l#v(rg9ii3xPbz*%5^RiE#!fZaCl3-z24Yg>4A4$XEc9kb4h&Jf
zIzf71vHb1-@Jal{-}>cj-@;AZadiA=j`aV_4~;X@2)IHBd<7){a=GJhF5DM?`!BYW
zec!e@JiYU#hu)Lka`QVva`v0f0<y5@d(t*a{AvE)?yFrjmOZuhHwQ)=1>6nIar3qQ
zT0R+Y>4W2Esf4F)oWu#>jn?(*eXn1|HH1sGdn}=L47!jlF}U1o!2V@MFfPpNXqony
zJr}{)?IvBU=gE=Lw58yf<YIlxhyV)<X;rDjvVbV~RE5Wc3INS^z}BUd94I*9CK}9q
zh6rf1aoGEDnpG)3KsO53G+`TLK?}$;hN{#wp|L*-U?q~YK-iiAj0^x+j)AtA4>2Ym
z%@C1G(AF5UlcR9s$Og_oIVn#)4V>8sFkR@Pea`}x-@Jr<ch4iaCP75PE$mrOQC?aZ
z6!S+)Y?ELw)j#<YaNuXDVukz*GI7!tLaj|;It|P%py$~QQZrYn-%o}BInL>>1W#dq
z^Q^A>11Qna_#K=CsBjf02CNcEEdaTm^s_PwxgzT+=}<+Ig|x`QlKqakD1K}Nj3>&>
zrvOJ#H6;KnZLjjO)DI^)X+m_U_Zt(M1GE|edPM$fhWP!Hgp?D@evGY`2DtRpPI&f-
z4Q#)hmz|=(zWp=Ye5j2F9$dsduU^2N_by?1nQkyT0VT>oj$%w1m7pLF?Qj*oeg@RP
zr@^0L{D9jPuC1dw0agmQnp1;5Atw~bSw_#i5G;A%1W(W)g6_$=FV8AAsLCdC42vt$
zcKG;*3Ow}*pxq9U5t3x4MN00Iz%NOGjiDOU@1{6v_lpJQDxki9y$JE`9LY8<@Jo{E
zV1Gs5jOZs4(~_Xu{b)&mPXM?;2wj3tdmOK6Ybj`3KobMU8H%VaBxnHbCzRZ`(+YF#
z8ItS!2p?#a@$x)=_8<K|e)6AvFuQ8;aQD*evp?|s;8%XmuZ$}XADO<KgMZWu_b1=_
z?>gxX@81}l7~FT~ThdqE_bpf_b04ZcXyX-Xo7+U|kiI>Py?Xhh4*T=F3T4*+y9T+k
znM&;^c8qm^-Z%qXo$L2)GiAoS22lHqu40p^1d}SNUD*29_4lw(YVC*JN`x)}@U(;4
ztJv%8PDbijh;JQuSTL%wyqW2rR3&TbbDy7K5*L^_Ss)+r7U}f|B=_&#@^o_(a**F#
zoW6jX;Zf4WZ3x|r2s)IX36W5UWffXcfF@P5Bq!U<5fC!4Tyl#5odgv_4o0n_O^}d*
z0gBVx*nVmYCqFg7v8P5jyPBZr_0YYqhvlz0h^rr5!pikA;zq=U;b4}dubu;3$TI>!
zeOeV7VhL3v`>76vji_l`fRO@)s9Yjo{eP=czhGH=et_M7EC!^>nIv;wW|ymct^9ey
z!FntN#m1p%KTzN&CAx@u)AW4`Y7r+_J@Tkm$!Ou2$$cT-!&2ZsIsm2<>HC*iz#IV5
z#3&~ua3gGemT|6tRuZ7sj<9C|SZGN?u(dY9=N?<bhdw;O#?cK-kM|L0G4||<ap!$4
zyykU_xbyx++;Qg|mKKQ+LPt=b7#1kWl!g)vt}JC1zrIBH-+VsEebP>$iZqdlmPtx$
zduCUw(2^{TSRC+Uapg4ITnqYaET;MrBnp=2REz{{zfF^eJblPNqkSsCbPBBOtymg&
z^*r#qKTkHl;)=+V4@_Pb-iRe%mY7@B?(`mb?b`6K5*7o3DEw51wfO4oK~L=SXrJ6K
zf;@SdXj}V!vV{LIdS~~byq9u%LV^BGQB<rwm@i;Ps%AvQZ2;|*)RKU1v%*|wjQGY8
za7T)?H;;ex{+}=Z+b=(vT{Cw}_iXvWx4ks@;D@gy0blkBfWZE7)DHHg-}+Cw$)TUv
z8lN59a?^e3n_l}p*xJl78dk^%>O;k9n)N_zX@ISvUHvhKwYz62(V916n`qL91=HO`
zLH;*;soA^v!6~;n*FK38bkVowDFN<V8=<}?_^uV6Hz+awm**<jFV-)<zNa7*wV?e4
zBt~avT;~M%BuCGKgP9#7z)rqqN9zMBkC9Ojq3*51&gM1XI0M86jshkSQbIsIU^gyi
zv&b6aOm3IF2Y7No1#~P~uxSD!6cW#h<c%pYXav+IQZXR1lWi3Uni<d|oq+=A0cEF&
zDs3^-o9nuAf~eRgbr$5ucd+s35GOxA#PJtKSl{koGQWcE-Ag$5mPK6unmNoJN|41g
zJr0Z}1!k<KMw$~+_1R21PXaL0U&kh``d1zRqXL=;nK+emSL4#uUo7kY*O4f@-g1GA
zuvV8K_LaX>!$Jb&otXX*dP8j*Mg%A!C^*m&5wb%JeWztXi4Jw@)zn9iiMS9CQvyIe
zezMml1Z0}?j6O+EQ}CyxtC5805{H949R@izPVL~O&+XvZhgWgp$v*O(A@<L;ap#@$
zc+(q~asTU=aO>SYEbrm$P6B>LM8i@{b2x~QL5|&+PBz=eNxo-HUqK0lYG*5qMqlNB
zK?zL&2XS`dx;co4^f`Is>s@i-k<BE@BLtF?0UCE>oqd)Hhadp_GrAW-mOk#ZD(u@Q
z*Z3p9QQ)~pE412l|A<eAEmRYtvNb52BR_=iNqTZ#2zaO$224IS1d+#(WxUTmvzhpq
z9JLz-tXJ!b9LRb19u>RDf`kHa3!v8TSCvVTix$rd`90O0&~^Z|g(#UPB!Rwe#3j0&
z3f;~S(Jd21H+K+}34Y*x{}!MA%xZRU>FV}s_~AD{yY`14_b6_KSMuY_FaeM<F$!a>
zG`{g~bfdd}W-vKFxN6_c={vsi2gAWAz-XtycxozS#)kIH)_P^k-_hA;4-5EFIR6s*
z8kfzRaNpc|u$P_gDhfiH%dLOg`nMh@umxtOEe5C4$P5KfgB)%2P6M{nD-a@<E;z^P
zb;&?YwpAwc{HTuW0orG;9haHL2)E0+y|v@!mIOP;2{)>?@NHKz&H-};P)h)a6QEoH
zBa(6Tq5?ZHX$%m2Pvc*T3>X4#3}c2EwP$DqB_1iV%|_?pT_wS2k?4;L)0}(>2!*I*
zbddB|NrrfykbwkYn=*wK%Ag2IS*9vSWi;CX)^{*DIl<1+469F1aQbMD^BYa{=ep?J
zHID;t>S5)c9y&L4kVhf53t-eQFq;s1A@g(9Wr3dyentbNa+GRce{RN3g;)|ZGEi#=
zSZ=nfaaGeIZ~&F<)MP57UyF6LR<l&)YmgI@7*&B}M4*&*0og!D6}tNS%tp641GA+j
zjzn4E(?d#vD#YYQSp{U&BOn8{1NsHFS2J9EX&dLB*uj}2+gN>mjC?!C@_dNfZ*SnC
z2NrPGs~2(agA3SyEsd1OYZsFl%AFjn^hZ-3IwHdBgFm!7cDu+VtaL^vR7#K9F&yw|
z9Ejv^nK55Gk+i0?q0PyJz6Yxhvc|3QJ9NyG{-$Jy0{)bsefl2RIa8&tq&<fI)sC1B
zgQ|WZg?a*?mCk#Xfo?a#siOt{@D~ei!}t*oTdH1!$9nKOks`7aLfB&sNGkqKVbXyi
zI+<ia+p2lj>Qg*H82s{EgxXn^FN%>SH|>#5pWNGAh>!pY1#puD%CQi|VwDaLWT09|
zs`7Ih3*=;8lL)#D)Y6;pm1uYRh;PpkA8KQ3EyK5e-M=a?o{sW8iwo^D!SCGi!s;hq
zpbbYf(_gudFS7)|cC-?En(z3E`S=ZgJf5xXEOZx}@A|60jXdv#gK>s2jUTZdo04Q|
zGu$rL)nC#cm!oR>Uh*>yoT6t#@Tx2WQvxhJn&?V*BH3H?-Gu|#v#jIh`)vFSGh?Ae
zN0pdv3_b|@@o$F+I5js>^x{!3*YdTzU&eBR%iw(%M5@b)iguh%TGp*5Q-t$qqE;35
z*=s>Zn8G@6U~GT>L(sBK7$^x)`35rUEj?%+D<ou~VLS<6*|@PH{bN1^wwW-5$a}br
zCJ|wfdd|c!rcopNJ$kQFlm~k`!tM+_@ZO71He!@flV|0rd<}vOA*szw`pD00WBbSu
z=O3Tq+%o|#t(DkLLd1s_(0kny_T0CK*7ZG9?T7`a#)AU+SmaiTMIea)-KQFy)RC?Z
zJ$tgCc1Togi4#Uk==6e#e6(B=H>0jBZ@#Y-&gHw;bO4yELDel?n@CzvNhxgr?Q7d}
z+Hol3k1PvJ#d5?L0K?iOu0cl?g?NONd;qkG^tV03)~N|DJ-?0fPxSH9=Pu#&=Xa0|
zLM$${ao0VIc;jmqaPLE1+<JEhdzWK`9lG!(n>$e(h4lmUo+F6fJ~uB&KWJ_$w_3%^
zlmV0N*cX7#vCVR7I_t_{(bcC!ht3HR{Dm7~Vn#YOP!bbAK$b~`Pu2c}AbhIu3HDbK
zC{sfy5zv2=dLOItDQS>?ZX=&e{8WJ~x~tPhg{8%q4U0bXi#gWM0tvZPx=qRla_P&v
zpY75QF-1<k?qVgT<j2~CfcEQ+Z)D^_Lv&cLN&!6^2i_I%Ye|J8#MaPEgZv!<(6yj^
zvcL$Q76_!G&EGd&5G5Mh=pb`^8pH=E(dg|UzPmu<h8~`Kb`{_K?th&lTM8RpoIg4H
z)%(wG9o=}PPX>IMB>=J%=hFvoSWe&dY*uaONtndn__iMn<MaTww`bvq`hT>jIFnbd
zo{jhMed`HQuGn{H$#a`)TtRtgz*JUkNrb-|mLO9B?)7x!Pchdj6e5f*)Ow;|eLE+)
zsTsEI>XwDGv!KrB^G_W-ubY{+AT^mNZT5bbdWb^+e75djVmdFXGH42Ox=3YQNY&cx
z_qhtv^WwY;YJtcRtPE0An9qrd=q5o4fVBw-X`l_j5DI&FX)6eF&}f2P;7F*4&WY?#
zRz(=hXo#(B9Ly6?a-pCDf*jChk}BDV5(GjJsNc=XgRKG)sSvd@o+c=J0WePtwHB(7
zbZP115q6v*qQUn57G@{<*nVaQmmV47%u^Z8oS$H)86moD8Qs?(z{;!lVewEGWg0O-
zF6#?~O{#Dr*rFS+CIGAjs4jL+<i)B*3xE`KYc4!>;L{xYEa3C6==pFWKpNPYzo#Q`
zlmt-K&(j)=2<WIFQ6?hRUlJ0Z+C>w?osa@bv>GU}Imq$h7bZCK<Oa@udKKrNx`azF
z43G`TwKB!c_srv+-*NzVKDY;W-MfIjd)!PMvVMkONQ01}7y(f`f>4N{CX1|PE(^fu
zO=n3fll64`l1O_2pG&WVxeM9jF-SUg;X_c1BQmplCO69Kkzo`;`qZb-h``72zCinQ
zP3Y&8{IJ=L27M0j>Oo+f548i}#6a9R>m$b!_;{>xR$^%>K(`m*=)*Z4`-2kgcBH0|
zo=9WDJ9OE&)RCgYQFcrpf>Afya`b+&Y@G80r_JG!L&^8O#)lG-J>+i{{$)f$F9GcX
zypa8bKOpF>CI>atkc64dPP=YMB~w909+Z|Jt=o2^La$Y#vAm7st`g~?MSSdcj^O>@
z`?L9c=jvt<4?cNp`ioz+K73`52YwkP0J5>Q<7+#6llOi$h>}CoY@C1nTi+iqtsKJE
zR)+p42pQ{A*;#(rBA@`Rfl4Y}&iFNm*B&adS!=qh<*H8%#I%R+T%9c7joW0ucM<no
zb#AXFGuX~gz<Re{Z(Z2R{%0O$BVwD`3)lSvcAX__1z4u;6CKa}aZsIciDlQYri65N
zb#GPZ#Ns^%*cy@269)B_tn#;W#jv4K9H}C&@f~a|O#?Co5%yPS1rfK;sYR_`OEr|E
z+4M#;K(kHAfb^^R<LHM}LlT`o7Mo(3H>S$llamsNV;~^~3^@|491>qZM$wX_K-?@4
zwhN$}kqQp5kN{m$Jfi-D2+)X)D{%(;z{Un9FZR*@+z{tKyMt3NWjMDP;bOam_?9K?
zecfIhc-1l%Zt9{)BJ_8F=}xXtxr|>*)lU_pNJ#TXw<!VZ^VZr(a?5Ct)N3Y&QieuZ
zM&}KQtlFgj!B)Q-1jT|^d$EMjuwa!W)x9{to-{x&3|S44xOeN*0>@5_aOBBLc>Ggq
zIP$qQoPKtM$<7QdR5;LS;l`VmaQjWmxaG!0+<ngy_8g2+5dn06faX<Vg<I|vh}d7+
zGsz5gH<5W)jnhqSeS2c(v$&F0xSS*zdU9EX&zutycGAR$EprtiQ>y?D;^d9Nq&=$c
z#Tu7jdm`?!Rs;QAQYCKzU-Td9i5e$vl)%-tB5@vdQ~0}tq->L*1f!J(SlSa{IxO)=
zzmTDtq>KhSYiMn4*!5?VGPkMJx<9pv09l)wtUK=qUuZZKK#>Cr^t_(*_7U!Z5&wL0
z;M)N;et@9^=8sSd{H!8c6Br^eu+AS)q9DHjuV42!t=j-;P@vZi&}-&M_xBOq3ZyqJ
z;lKRk2k=k+=^soEE*<Jlf|q~xh0!nl&Hi}n6>A~<Ws(5Mh8Ksu@Idmu|JF?Qe*5-l
zb>}Nz^<B+FhhK-S?J0JKEc6p{Y<8-CCSa}`CeQ90)TKl{T}+NI;54`GeGUCL44&uF
zc}=qbkR}Tud1dK<fFsS-g1@^E_I@mrS^HM)Qn|jKTf`P*bxvO8cm*c+{DfUPFg)&4
z!}0mhMWIAVfTpM}P%a}H%9D^iL5r(8lAr;jHU}Xs3;P_p`M6^+ltMn0633ObF9&7)
zL~Bd%g6EMTsrW^S&5<2zaHae{69QEgP)LNtT33`peePL5z^Z@iIVx9x1%_%WgDf;e
zGstRSM0x{BNTY-$5^^hSmm)MYR|y-ASZpLdKxHz$3e){bi*|}=ItEq;n4TD6^Z7AO
ze}0JPk4*6L#S&}H1kKx)al@NdaNVo+V)42j!_>nq9s@v3tV$)1G3;!Xt*&acGp;%c
zHPaO#4{Fk;(*Sb9SX@}lW0Wt!RTdNc3<02VKdqN|78~fbLmo#Xb=*ag+TWhx{L5n;
ze{ly-KCy+TKDUNr&un4iLZ8p$fw>m$xN#W|+_ndI-LZhf*Uw?!e2fke3TGuI!wORp
z=Bgr$i4)KXG5<h}g<ArY6S9etD%M>z*JktLN~9vln!_fm%n6=9C;t9ZR7-pMBIcxx
za@DNoQB9KS&mk2)oo@}|6!00|x1e9^>2oEoVosC{SaN0vq$6+|0%6Ld+!8SN(R$Tj
z`%cKOOI(27e1JzknBmyNAtM6xo+jIEn}-H#NdR13VDtHYKasz^6Qp36Dgsn%k6Lx_
zg0+zXgWUu|XA3MqivK-pVNybE`=^=!Nh?5GbaW3Ya=@AaB77!4*NUHyR|^6LYHakE
zMS@DqbpmvnGo)Ab5#1Ib-MfH)@I$|dU;E7?*@2aV?E#*6|1%rE`qRvzxsm|<ReV@Q
z7h@&<#=kq?xaB9eM;Es4z4aaKS3mG>Y;9-g(}t4Ec)nxuJF^|1^+|SMH#)P|lqBOx
zO_!VaSO#q`<8y9-@!b48B?VTfxaTU7sD=di(q1u4mlM?0{yb^HXYW4H@?s!JHn?2z
z&7U%=;Q8>iFCg6ysm-Ojug&D?qGo!Ss~!|FvDDuLOw7}slLfCjD8ane|F@(`iGWIE
zl$l^gyM^E**0~ao9CO&(1hm*`@zadD2?f<oWf1Wwk&ZCSX2cMFOEd;pXMiF+JL@U@
z>4Zpjw+=*xSb{$H9IIMefXPQd!V?7r;xtFxE;$)Mi>TYBV&gi<9;D8YB@7Eh)U?h<
zz~&YvC;GT>WQ=D&+sDI?4DkHf5wfKY4!!9Hy!M-~!ELWz#0()Woy(c|O&``x4QMH;
zERPz!-5lA3$t~8^p3qX()&H1<EwVzAWJ#c>b6u!1U`ohJhnyLS7g=Jwo#DdEJ9y#A
zbv*ajDvloA!toa-tX<zmit7%xaOd?s+;!s|ZoXv!w_ZDsgG)_P?o$IDk^?TtYhIEN
zI@csL#5;L_Nk72(Qzfb!LR|ON34&CNV&wKD2%usGLCUKFmfH1<!#cDtycaD~P14%>
zVruloLW~sbIk1bs4*ktceGdHcJY(+D_c++s1e=(!Ny&j1ZE}5lH@a!#k^1&!z2eue
zWqY#DzOEr9{8H;-eh%2PFTnbl0)PB}7DyBGA+Xk$S9D~TZd-FT1hXE{jVvftfVea|
zmq<&%YeYWz6(#arR;;+SsGmuc|LVwrD>Qab251o1;@(+P#{ne(mYDeG^FW6tZ`=Z4
z%@3LKp}$*+Bmu2-g6O&tns+x)AjbE7>(Aivr`9GbOUvC0vk$)h#mztY^eeFy5PaEa
z{HI_2uBGHPzdM|qA6$3UJ?UFt_x<RP3XH}TrWw=yIKIo`^MP3&)B-3)0K>EA2==t(
zm>(`*a0!49+G6ACGkJTeu<%85MAqizu%3tNt<Ue|h$1D%DXc95Lt4>W!tU7rMzE_B
zY=j*v8GMah5bUnv<t>zlzy=_mWGK?MHZdR*)8ZLsuceFIn2Ii$P=zslKcAp@0-%Ev
zYup9TLiWyMwc~Yj$8udfjL0nEwBp%ef~tv`EXjfdH~N>fIxXR;m^hVEi=as)DpFe%
zK83y>Zy=&Trsq=80h=r!&L8(2DKTIcvI!8CtWuUV3YH%Z6B?7F#$<(RzCbV+p(11;
zO%PPHX;T_Ox5b!!YoqNUXgpx!r2<cXbOR56;vyb<Zi=nWA`ZQ232*(bt8wp}58~oB
zu(_5a4r2t&82iF$7AF$qZ!^n(rP9<yQqUWbWTr%cs$Av)kc@IOLc0re=v-9=b~a`>
z{oFR5d+ZXPrRx6K4V*tY<!Zfw5C``sxbucZJap4C?mo1P+isf2o`n=)lWxWm7#Elg
zv^tJTXM@ehrmYPvbmh87A(B~y6E6f<n+tIFcSQ(W6+)I)4B0q{XX+jQ!QIm?kU0lU
zjVuyir4>kbv%vY4&fF7IUs(B^5OAQ^aXhZ<l`p8(Jx@DO&}VpGXto0POIwhGKc8mZ
zbF8}8<sjEy#e7_mp~vqCo4Vrkm*_YeafN*cL>l=|{;v!hCnCO|rO@!9UZMA0h@RIA
zt2z8xa$iH;oB@~ybz8=+@9$d-{%d^=nQ-#0C`l%~-js=qaE@<N2Rdya$+!6gXp2+F
z4TLjbsDVr$$Qy`!F!NH(H-ObCfiAU^k`WrWPSL)njq?|V_|EtKRJpMplyj}5e0lt<
zH=i3mefE{s3JAU&g8y9nz~Q~gyIz=-8>5BJQv9yB{+)0*YhgH=VLB6N$L67Bky$Xj
ztgmfz{CZ<@0&w|gfHBa8lIwSznrV+)#QbAt$!U)6weEqRwe_*N7Nnz)IRx}D)YZdq
z{+H^(Sr5f~yVqFkKA`%`UVk0pA=e3yEbO6+-lGS0-n@dKBllTw{eoljP`<lz2HQG9
zWc}rRztA73M>FaS;`(u!5fKvxZG=ss1KXTL2S8H@;|$P-laMz7Pxi6!5RnM^wcPpi
zi2(<HnNL>8QM3d&`0LO3-ysDzaxg0y9pLfCR)Mlx0=*p791twfz<Y}Xj45f6LUGhb
zxv`CCSRtIHz-EM_Pi^D(f8zo^^3*0)iww8Ebs69O6L(?$+9jMnSD?YYPw_o-{THof
zT_ABb&~mM8oSlP@23-oqB+Hz%LKa`53Tu07g!3oY@$!*P9Q)iRUi|zf&K}E<l~c4)
z;F>-2xa05&?mbL>{2p$;s)xM`EhIcHP@tF<GSX(7w!4<}{<8V=F|hid5>9nAj|3t|
zS%^_T#Bdbh@go&F_g472ABtElFCLM+A_Zy-t}5cA^Zwl4aO+kAsf^kM0^Jv+2LfaY
z-?IQuZdE<$G>EVc4_|2Y&Mba<j*abc@DF!cba|q&Z@Vbx&m{qJ3)ayJeodD3b}a$Q
z^vS8XMmtipjyb0L_5#Z*0ggOU;L+c!(Cbi}sot+Q#ZK`ik;GbD{{)qj<MxTVU(dc$
z-<=ppvLN@r-A^2>9lxOF5#Wjxc}Sn%yCn+ON7l6^_l6Qgmn93dZXMS^Q992hP-%2V
zKP4$(#7?<9)DGx2DzsW7H1EpMysd{PK6eIx?c0AQ?<R{W!of=~On&j6&GDJ>D+vh*
z{;CK6W^_$=U;HgE1VOc2mRb3(xBgFY+Pn_^(FBu>K3>84Jf3Ky>8}ZsJLbBLwkQ$M
z5##M4!CH|#pEbK5`(W;^I6b`11E+>C)FZ0O+wQ&+O3q@pP1W63eS!L-^zA`?z9|LN
zgnS(7hv6|9t&_ttSkDIwHZQ7G+q=gAecw+TBaT>Rn~Co``p<2Ni0CcW$VM)3>xSTY
z+AejdyN~%SqgJV?KY?u;cHVeH;SE6B16&bkPm(qS{RDE#lvG)pai$>HB(+#_eQgVe
zz#%P4XmYZr)B@lnK;TD70_Z&?36O+991KNts6><&h}s1LvMg>7!{9&+EX<M8Us+`t
zB8rxzNq@0GcDBN3JHjN3vAR~_;YZi;p~qgt(Nh;t%|-a0zyBcK`W<)S(t3%sl=tK+
zT1j~ljB0_$oE^DBrFcM+zJ!ECob=GC*x8)m<neVJec~*he)IxfJi39^Ga1S<!92P+
zbg+ke4=>`r+ZJ&99UUAx(8FBP-~@!CA({Iy3~ugkni;X50C6HU;c#MAbowb^QuRF!
zF&f3#8inXj1N4g!<hD!J!P{gS6az23P~cmBEW(3d5h0(H2)3y2FKbrAtq!~U9=q`*
z2+k+zTnhM1*wfKU5oNORJSFfs?**N*(4Z~^KAj}A8Gfg^UzIH7%zJ<zS=Gr*2Ozrr
zM}N*#SX1)jkFmRrNJ@FSUC8c7C4Et0t{Y(Q0cw)~ANbEXqA5*is13Ec?70e@ct37W
ztEoWRI^0!UC~{!y+DN$`Ky;P4?I!X)Kd~e);Z*@0f>#?YcH96%04%vs)J{+XCmkHp
z+7j1MNwlT)r>KFA74w>;<eWS`bZs&xpu$`WXfF)WxV1pz@H~F~7azgj{|CRC?OV9I
zJuF`S#h0f4*LRPzVf9L}5dJHg0C<i6z47~gr4i1(cQ9EWz3nxBBR+8O)#3K`7!#^E
zc)=*?PqSfJ7=9(~7RB*Zk|PP~RDe~fUQom!Mhlg-bU_129cQ2bUiTUB6|xHTSlggR
z;2}j%7ko=uypHgvUw^>@*6OLI^66FI;4^0l%C)%4{b7L#Wz^4RsV%FQ08I<c82|3I
z4c@CAAA_H|3GJ%(Id79*GFR=F^C+}!Apg9qPr2)TZ3DBuq<?+>-P)LtxDV22SEVtj
zHbSdn>iL*dBsHA?A`dnd9catEwKE~oiz$|+Vo}P9g<6rQcph&+CR$?F#c`OU)y<K#
zvaoFSQ7uo(Dy7N)2Bw!PtR2m;_H2dq^C2z`fQyp~I~kK6FwAB+a{dLpeD(!w?#%Gc
z?|cwH^iSTxfwCCMhRwl?1B&#lB}j!R3Thbuy}1x`J(_5s3V)0<$G7mp=P%%yN6+KA
zBWpNuY#rlbf*xA9VR0V!-gFQT+_4|`+_#9^4=rN8OLLag!Y`5cD^w%7tVSG^>m`kP
zx~J)Vyby*!yhPB;^AM8}u-y-^u^nThA7E!pfnVGc$zZ4qD<01$;Z8z!218(HtHA&I
z(<Jv=0>cW$mQ?BdS&0{+&^`T|s(4o1Q}~`Le@+M-w6Dp4ov+J@d*-UAKNs{wCn^Z?
z=hlTLTm@+|8LTHpOtwHB5@{8Gtu>&F-zNz5@7qqLNkHAlgA&WV`vY{lz{9^&;=~gb
zPrk5(G!N-pf^Eb*atNwd>GgH2($BWX=*X|E3BO|*Vb4%F+ba3(>JtTSZR$Q?XT_le
zTKOv~;5Y$BB-F3X<<p4)nVyFc9Mv~K#)Jh4Fd;B=6g548P79cClxXc4qIq+P<UkMq
z+yD9-`1xOYWO8uvs_w?@Gv9w~@Z0~{ybgRb_sjF~S1<vvY&OJ7@}3{>1ULW7t?9|F
zhwgY+`@Xy0gSCw*rdbu{MzC>n?%D#tWl);Es!NS`vGm*wJqIRB08~PhA2n%BrxD;P
z|C*$4L3@dZuw~Jh*oc2$3zYoQJl?!}L{XxZRlBthpp16Es72b>W%(B1bOWI(m%YRt
z0^xp3-N4Mu#rOMcGJ%i+mp;{Wzg=rU|7`)%yBLa@j6@1e0P08U&Z+M;S`t-n2e|fz
z`%GSEfRDR2)9#qZTCH<SgiS}hvY1>(ud(1@N9`v%0D>6*)FL3Qfo8~NLKN_w$Po(*
zsp6nkFT4R!Qa~I54*W_`DuMZQhDK+I^1uY)N`$hX;Nrt$y!6BvYv&5|hb2aNh%o}}
zWCb>+1=e?nEEghb2Us1S!ud-t<I;ML*S_@@{Nyja9Xrzy{eeo+QW9K+9N4m1&gXt{
zAx19+R?qC<`NuEe$<JKCvyY$0*<(XYvI%0u*t^)m-G`U(z~L3#e&Y&my<q|SmK#8a
zPDp_~FU7ow6IV^*T(U_~+V`;y31a<xN<dg7C&XYFU~4DD+ExIjJWRzYk;wb(luW{W
z484~!fnZY%6%i1DqfeH2*Ly2`!}msvI84_nWK#;tBAJ^PrDNxFFxQ|>X*Bijx!<p&
zdE%s}2?QeoI^)l>yaMNQXGIMCYOO>=0eq^T=fcym+t?9}bsurMBbEj!8N<)}|2YYO
z-m?~zxJ{A+OUuC0N`OnpDtzo$3N%R+$mGd&%ka|Pq@ZxQoVOpxtG5AIcfbgIY~}3t
zMK=Y&>qEw%cgX@9DOfk3U7i57ATMnQBlG!of%yc;IwZ9}YDdzSioU5%h4BQ`Uf7FQ
z>5V5XKR-E2>#x@g&`k@p4-V13r9zn`_^$8$kL8m`FJ&v;<?i|75AHqD|KwA$f@?ST
zm*FG$s|x)urf+)nV)T}W`{T1a*Is>B`i?jKNVu^z!+266EBGE~J4}hIwO~}U`f)&j
z-n>2|@O^R_r4u+$VudVrBkKM6Cs2bj!GbC*!WFu*bNLy(QjMXsI|1Ntkw(5+3mXBj
z7OdTh^-Nt0oZ>q!lLWq!Mm_U3V<9I>B(D{*kdY@2N+lpu0;&S0^NbFauPt8sj*~&~
zQJ~&0w1cr8zP(Sas<sw`KW@7$lIhp8ILCRgsR)~fFc(8*7Tcz2On)L3(cfAUX`)dZ
zXVOtXf9z)GDi*ke22iy{f5<<8rHd)}d)}fZ8{U!7%u8Cc5G&mol0zB7eG#TF1$h3~
zc5vc_0S0-FDGFp%z0z1+S%I_#HzyS~hXux2$pNm6BTT9-oI7_Mr&fn}{oAj?zx(B{
z$AuwD4dmRHW+r+7QI4C;@YqLQ#3w%RGM@X)HpXiSnuu{=rHjKi%;A=+d${@94sN-z
zhwBfL>ki!@8Ef-%|C&bv%{9+%agBoRI#&o;Y$rfDi%?_%W|IKJNr>%Xi0x5`tzm@i
ztN@wtQ4pRMC9*2u;7{!V;qzI*lz&@QN?(&J;A8@<o-Ocy{HKV||IT`V;Yb2%QPTMl
z)Pp|1v_Od1sMWp^`p9unXZmII&c^gSchcM!xs4zAVDEeK>UQW{0IAiWTq6Cs)FL&q
zk3*Jg<HfckDMBE5Mtz52h`UyYdzVM@uUOejhDyLke`$vCDp_mmWzqeFlV1zQoN-V`
zQrA(<$<NkR7_ysXXl)$X8a0uY;}+u}U2CMrFE@Ry9l+Y+Rz%3rI)S0fgM2NCwrPR-
zvD2EO762mwR`J&+2!t*zgV%x<n9`{EfLQBJguS}W0PS#w-i;%4?~Kah=eF^_@A$W6
zp7qd(gTa~dS8qK(IJ*Aj&IkA_mH^0Y*p9ECTZ!NITwaV88;y4Pp11$Kcsg6aU^K;q
z(th@ABMNQ}z~Qx2uXbhOd76q_E%KKxTKzRwA-Zh7mP**eg)v9MaRsoygDz*|>lbyR
zw#!56)PP-I>~idLVlMu@HTX)q!yEHiBA{piJs8d=T)NgPl<ym2Tk}1z-{geA69#?0
z;xqg@Kf<>lw1;m0<mjpaMEL<Su2<6zP_)2*hB`4x<qfTU;69%nt@)E%;$WXm&R<lC
z1DSacxMQzxDz2v~ym8xDO!kyp3S>mm(DAqyDFrG_S|2A=OEYQ}(EH5?6|T9fM7$DU
zbhO0dKevgKr$!i*BTTCt5g868q&!GE$0?3&oyN20U&6-D1>|LcIBFq^=F#h2g=Vvj
z3+oqg{M1Ff{%fwmzx;)FVU)&L?~{`rkme;G{=;MVZ~yMoIQsc>=mkr-_ol;m(}UOG
z!PhS05V7=I5mMsJ5DmV{*|L{l3sTz)==0D$Qk5VCnPZ)zDGW2|{Cz=WygrbP1B@mS
zwkHvGMgjUHgqUlEPtZOEehTdLw`$*0&Q2?r;dLhe`SmVvyDmhXxM??mXPzwajo((`
zYu^*$(gjKYe2<+XFq8EZ(x<UKb{o|GyNvY7$er}_rP|fh*6Hbptg?#u*z(u)?@&G_
z>uJl2-nWp1-z5s#=JVA5dII7119NlaWnin@ag`XcbBY?Z4Tm3lmcTjyM?PNQh0l~|
zHdGnVwealT=2gS3KKYSfdsacKM!7flskKRc3L<P%rvspR0h9=lL6p3n9|gAcDk_}5
zHBevAHgaeQfpL&j>H$#|(o5GSfBb$%t&l1d4im3!MiuB|2p`DSEVtkI)-KUV0?fB(
zSh#guw(e}<BY*fD{>I<_FZt5^{&tRy51h#U+c#{F*YYptB;c=50w4<^4!gnL<h?(W
zhATfXoDK$G|CS$1m-igT#s-Zc5tJtBdl}N$AN^iUwC6I)y$iG&q;}=o^}he*rM~-j
zU6)?(WPMMUE@%Sama&=h*vM8bc-p43>m%#k=k~+ev6qAn2!BAyJ$2@yJ}>kZ#3lyh
z8T?9`<54R=@@CI>fm{lb(98qs!XmcN>#t=Sj-e->RHU$<wKH4~Uj-7_yWD5~cE0L~
zkZ=gpD9Ez`cf)k{J#jZOv*+E)V=VF`v&F`9FaaQeJf+gmE91rzt?KZ-f0;OtibRr?
zxS=FMRw4A<1BN3xkXE?y)&O(O3gffDr+#4_$B%DgT#PZAWJuB&F*)J&I#``;;g4VV
z7+$z=1T%`TRmRMDnklW&MpVtC+d7Cwa{;ZSjZ5oWxasaWyz@KmLDWgHb8du3K70&M
zedaW}aSwMMz7-GNdNW@CnuECeo(AT+^!W<@Ps|8tjYSBPNM=NtQLi4$JSju#i^zTz
zN`l<S0rGx`@pg#q9YQFyhhGI4k-UKk@r5MpQ~LROow=8uy{s4t*36dQHI(W>SPRZX
zvZKS=-lQJc1pn|S8yJm+8$cTTf==jMKeYpLwH{V7pb7GDl;+^iXo37wX7?N?#R9oA
zTeN8do+hXvR&KOUUz1Tk`>8A+2RZ6GG6zT5UpztBpnu<H^hvaG<6K@&i9Vqw<Px}N
zPl%0kz{9_uAt=~h%e5;n@Au2NuZ@h#Lu9fg1#pImwLYT+W<@gPz}(2N@9}G!k8c~D
z#;E_S#`1R@Bd<K_%CUM<AP5C9qUqOV9qr}-u#h;VdoD5OL_zh~os_X69l|Lfw^(xf
z4zRS4m2<aDklwb4fBwJ!2L8i;`9yZr;?>>l;_)9jKK{-BkWo_nW!eV#E0qAy1>Dzo
z_h0LVxBbG_<lN3(x4x_S;GOTr=GKH4IQRW2ccwKc+PwO!auW+kbXhca$UsfXS7L_?
zo3?Iu-vcg8I_Q%v?On#cyP}t7roMp6mKw@npU=H~tzfQLB%3Q?l@d0LpBYzzjFN_d
z`<yjMT|a|J8vFX*_vvfx2Aj9lVCH2!{qsag$tI{TgWl_7f!5Ke_5P$<wvEfTSgdd8
zbpQ+&t@ZjfixN9hW%+Xe)@{Xt_%39{@R-^ZgQ@=+JKX}gjUsB_lT>agh*02`ecLz;
z9&(g3D%Axi0o+#b3}rF~BB-Cn3TcucA*}%_Qvh6Z7+78g#-{^(@>jR<>{DBq72B9j
zGPIKhZ+6{o8&7OMf!{y!JDAO8XvbY7(HxqMWi%V}{CR1_HBFir%_dmgSVd4}m~S<Z
z6&Ysv3~|!rsy9hnSnBS@^#=~&n&oSeWm6zev8OwSo3Cr*!TUNme0_-UngZcc32f!S
z&_lYs^HN`&nD%`j-wu%NgcuJ44939L1lXAb*qKq4Uttymj37|pXAdLc`*EdjL_HSH
zaeZ>SvB;UtGvX!K3Ym{ud1j65lnz<dImAmZWcZ<<0B*l0#pXIN7|V<}i{+@mPBtck
z9zVNpuWe`nCmFmx1w{5^laAakx;M4)UN_`ZXY=cEmql4hHP3x(_nF)RR8cCM7BX&;
z-DHL+IJ8e!lkG`*`^g=szeZzkD=Q%fw@?4Z4BKa9lvO|KZe0NB|BLR4TdAU@;n4t9
z+OxG=LjdggnjC0ftQOR3Tp-aA@EQR12_=UFYEakXa?f)-1O9z-jg-~sOuaOq^9dx;
zFGoZ+NpC8Ur1}?mZ+TPG^GKoq4U!Cx%5rgKf`wZO1p6BJ_V4;>Ja+U#ws&s6yMd3q
z_T{aQJiNPH{PKDH6-fZ(<S)10aNB(KmS-pB>ZsGcCVc0cemtDy5k@2ORwwr{*&QsS
z79zVB*Ku&2&k6igo=4yONSzb1_%jj!S1s$}(g5v}`OA_3whE>)hJ|l-2Wx#}Nm7iM
z$0)uI&w1{jgA<+jMj<1He!!tNTBw_kn3&Yt1N^mg)9oDDs2p44%0jE-jAke7Si&sQ
z=SL7Nak4GTeHaF|00961Nkl<Zlk}|LZ$Z4?Ztzf_KcSjHx%25U3?mLvP@=x0gEi}n
zK|5?!5p#)%wMuFuN51mV#KOddgx4gSO>AUMpA@<FfXN^0n4^qZs#Pw19S2B~3hkc!
zY~QuOb%z5KW8gEtJHTf?(8pxFj>%*jov4jQm}0)&#bX<f;Mb4*XLRB=TH#)F+c%-p
zz6xoyjCOkk`xf`&z|tHJU)ROLLWQ-Bb-Z}$6rMeP6z4Bp#Bf?5uTs9&RP_dB1HD!k
zt+0u1V;@?L1wD;17MmTs<K8`Z$6M#ny`@BSumHA7QPrcmiss};0Vdl4raJ+~{Q#ST
z3fp5~Fsm@4mOp_4VZdyC>ap|OJm1T5o~TNde!TeB)9oh-yQ~El_?b;lu)RR{(uY?h
zfIU1kStL2+D8!l51rFbt<NZI;#QGXA8cW4bAO$@wn-KIbYgu>!2I2c^+Z6fup(!r+
z@##Gk2_S;Gjqgd}Ueg`m`_0xfa}bn#WC^|(m!UxB+z54%I6ngY{knz-n}soIsQ0hl
z<1#}p0gf@8yu{){$R<J0ekRAWpD598sqU3=k7~QUYZr1*xBA?3Xv~a+ex=TXk+n|7
zM1F9Wfqw_a3ButChPuXTqq=p~KR&7Ud1`zF`JPtol~*9O_MI3p*4hn0ss1MZJ=h=2
zau~A-*LHyT22@C8eU?d3V9!d1J$HwAVRHlT{_cNKRz)N1CGpmI{PwNq`_FA!E9A@R
zVK!U;13%;@YQ#%X2lxGaQT0n=A;0?0_k=;vKsKE+E7>K`wHY-IbT-mgtIOpkt-Zc2
z)XRVY={H(2;1dN|hr2V~IuhVA44WFzS1YM0RU0mKNQ1q&Qwa1ww4f~O%0pxJe*8V1
z#W9kiOFG=fLKRlwgKkA%^TJ_(mE!=58<`Q3j78BlCaPL>MzZz;nAz_Gz1b?e&8{}0
z=wrG<pZra~0m_qVBqUd5*_pTZsc{^b%0x^L9oVT639a=Y8@zu0-9m(ViBt+#H#e$s
z<@mJr;Ms8r8WhZ#1gGBe<|{;}UL<&H_W{4A%>HxbT!om9E6nc!=9dCY2O*9=I>4hJ
z*}|k8VP`Z%BZ^VvL}=^cNdFo9=Fy)+D+v)*O>{cc=U+k+FJb>Rci`ZGz1Z7pU{5c^
zVz0o;9B|vU2k?$pA3#vP8e9D#F0Ku5VRei%Yg3%v$Z+z~CQe;EgA?1wki<{m(Ef+8
z)VUtTY=ZTCh@bzHRUE%`9lq~7_G5wO?a~O_=cy||M7jXuDKN>veRhKScgDb!`u8fp
zCx6tKNF9rPh0h^FOm1v0U+)M0H_zV7Ib}i~2ho~su~qH0fE{ovp~B))j3bZdxNy2e
zXE|gF!(<}*@Fdnl2>|!7oD8qd+S`3VUd1}duzNON*Po#hRY00V9Ipg9s7v+w`;2e>
zkcRCXwcoXm_;a}l0KYiwSKYteeQs-9*PZcW^n7!G<V2Ug6JkP0M*-}=KEkobXdY1l
zo=q_99)0$0Hb0f1$I9zK6MOYFv(W}Jq~fH~y;i--@l#EFjdUbg)DYQQ#bKtpz{QG1
zIUkDD>-R*a)CkQswcryfUAOvVzdQM2Osf?!&oTs3x_PPwSuuZw_PqiTE?tTd9m#R?
z{a523|JeKDAN${bChNpE?p+Sw@NYJgQ-5tTqg40H3kmoukO0V|mpu3tVby-kV0w0N
z%S~UE9@uwtI2cY#8t1WFLPRt?^lgtCh-T^F?f?_~SzH1AeXSP#RF2OD-Tb~`0WPtw
zy@p$S6wqx(s{TX&rCayX2W9-<aSW^|a6wT_QAn{+Mg?`kKob$aC>##x0;C%y0AN6$
zzm%U+2G2==*sAKpgNw}u-|2C=)2N$~o<|ccu~R5((`$)4ShLnw^r=?uQdn|hi%l~K
z+E8dyU}BMEA-WOxJi!tT{w(zrM48pfnQ#P8PK(sjpoY}c3OdS$bRP`0|Ez9tB5C0J
zs5XDkbMG}fSAv}zX@#Zb0M#VK=~FX&{MWZI$;Q|o3=osmT}3gsjn!fezxCYDA!YmA
zE_$7-5yfqUVHXE(xE}|uJ%Cm-2jUVr&&LO-5<(hsEbpn%z9z)=)OW}_C|7}vv%s;7
zz|k`~UN|?wvoD>-k>kII&!75j9Nzaj?Cadk2icqt@P|(xN8F9^{vY1M=0?#xaPfG>
zo;s6R#Yq4W`o=Ww))0an!}1!~awYIFbZ^Okay(6wfLZ;@tT#nHQnWMk8xC|Dp!v02
z(AK-ccmQgu(@2477T}SO&G2>K*}||dPbiJ_M;Qts5c<2KxvxEY4on>3#RQDo%p7Rx
zKQHK|2?1dO0gu*PW*=Oi4B-2z9wsD+`fyq6@yiEs39?&q)&g*xB7G}YSSabxn7aA`
z)CQ&Lh~83&#r+}HPgG1!HF;=<qiIp$h>D7C+55R*ujpV=M@egYqcR(OGF3Z%O9o8#
z!;J;9fRS>JYVu#kls00b&<M2Ha0!a-BkBO@!9dq`WX`5iig-7o<dItdcJ0MPjFOy^
zrexesOA^pA*4IKbpPk^nZ+#s;`sruV-~8AUql5F;e%EsPz`s8``^0DQW%h9LvHxQ}
z<O-+Ja-5Wh{zX=9=FQepeD5vq42keJ&4ZBLLG?!PWOE;s4L+-j*XR#jc#trt@-TM)
zS~Bpb9MNv<PdvI^Qo-LcB^rarjqqmZn9j!6U(|ZgzA@%{+q)oj)5~!mLjGlBJJ}0-
z#q8c*_4Wl-)X%9EuCbG?+Oe{Y1Eh+lh@Gjib|p#h>}Ps4f9`y2_dAE*^t1{z`k%g?
ze2f}vx^{A0KIQtUa&4tS>)G3N_|#XK{@Co4iPox(huP+?Z5jGr5rjM*MmeQJHcTW&
zDodLer>SanS#cz9{zE&n^{cBA%Lh3r2(xh+{_!twV6#8Q+SUkFl^{-H#Bl?0C&nMV
z^ef!IPlI{1(*1~{9+G$-%lqy_tG5?rm?I^JvjYLT*8`1fDqyh!+98T*gmM$e$0f31
zj#)87yEDasy&0~(w!$?B6Wnma4LEe&S7YzO{do4m2XVUpS-w>XMe8oa_>)J^<BvZ!
z5S;_%E)cPf$a_@(l+6HfFGSEFwxbC3i0dw$KWaCqxQ-$xEU?3YzC@mtm`zCSuVU|`
z*$Bud^fT2gDC*~xq;AFTn6CkyOP<#kJpr@qqieCa7~$cM&M+R7t_4HEzv6q=yYtnm
zd4JtqazZ?TvZO!KZcu#8k_I;pSaa#C-8W7+Oz&|)(Y>N*eXZDi@7KP+Jyp2ea}(SR
zB~P}>+r4hB{LPC1lW~A31@_$-IVC%OJ=;6nP_QNKelK!Wv%Vy?b9TMGk|9N2+Anck
zx-Kyzv}YH>QTxo2FsewEOlwKPVaSla7bTa3xzHa=AUPqZAvk>Q^*CqsL{rzQU0Wyk
zWPfxNv{Zp8rwEA<+k+768zE*FX81eb{2naMHN(NUpD*CSpK8VnjQ{;<apAA(<A3l3
zKpxHT@Iz6M+&#_)liP0kin!TY!fZwxoZ$Qxfa_yyj+n+@UzSO`r})5aKewK;!C`Lk
z+Rv0=<SJRS%ygBl249t^tl?emR}9Lp2Y#2D*8`~a*X@|<JBQ1Fovwhu_%6fu>5UPK
z>{M8AuhS5G_HLio%eC6Vn-vK2+^Qm}o}_}ZWQ)&DSXLn|TH=nY9z!kA*8gqieb<J(
zTe{Y@W)xPmQ)wHcGmdd3*Y2?m-e4Fe@RgHKc8uw*6Bx`y3k2q+*in|`fJcljR(F%C
zk*BDo!ekQ~`@X%Gv=3+#BItZJt+4m%0G$qv2}bzPuW#bTV_R6?*~Vm2N^dkKD1Ql$
zo%;+<ZoPnJ+(i(y5yo?f!Y<mK>yb7O>KJ3d!8V=?(7P_c++m<`2pAs#E_N#n=>8<d
zp;m>m6Cm$Js5%kaO9A#@8)EOl2%WhF^t!iTsdp1zxcJ-Hn!ZdE*8HKPR*7H!?Q?kM
z=nU;WAtwNIFHQ4+nfz3_k(4fz{M7M|$#pzhrwV**ibHnAB=1{cHYOsT7#>pa&!_Tz
z3I-NfwZc~W+=_pf0ytN2Bs`?gHFAL^1C#*F^&(t254`Zy49%vr{S19EK_BA=iTIB8
z@$I_t{U=kyChaTtv|o=Fzzfpqci*$yu^!Eht6;aINdjxq;ufK;XMHcLz<Gnw)@5zS
zvioZnvS8j;wuZuhIS{j1g+14Vh}$9a9<2Sq$%UbHTHTvU$gUu5=!hmYF5$NQ(0nAc
zRVE3Lp$9%Ok$XYMI{E(aQy=W3z!|m_7S?jKy~egdLv`iYbOcpBo9ow?z9)&EX*x)8
zW67SVLTYkwnI1$z_qHaBc@<)HGsNb4fg9$R@&0#yL%fl#XEBx@SWfPLJHE^w|AQw0
z#13tt8Qk=Di(-s!`(SwZ`Zr*l6*AvzJ+XkP9o8NeVIT8*u{c|63;68Y-CF)Xr|eg6
zAs7;EiNWqzV+g-rT0UcUe~WLfAqHZ9QJc~Auy<{w&}Aimnk1!199$((M+*EhcR|iR
zNUiAKmCX8WOg5`JOWOixQBo41^U<21SWqVhwHeIFXXk|<Qkb)i*H`HE&ma|wukPJ&
zpnn~O62G8=lAY0QT2{r#W}$5f+mP)8>0p*62d<*1Gr6^5l#wnEU&}WoSO^**$v{~<
zMox;Ts?I8O7J%MDh*mSg(a-Iak9}ej{pl8lBL>p>_}l3mE{)dk@TrfZ)9CW%lq6k*
zQ3FBLLlku}9gi{G8DTmGMtxx8T!pm@6*jlQV|RmAh5o?+>(@kB+Y@4SF~pfP#uHmH
zp4<rV;&zCa*CJflB%&V462?f=6*S^DURwJ@kn|8I06~QQc#8k}bLTL~O6<EWU=IU2
zSJYq6NUxt}{wevP!{?3M5+YUIqvuR0;8)0o|9|%WG}f~0N)N=oGv4XVFUE|VGdU+&
zq>3!Erj|-lNv(!Tf-RTrwgI~>!ELw!{b<AX58Hs<wqUev*ha%fce`Opr7m@ADpg6A
zL{_OpQXGm*<~$FPkrA0OzWKd74`(vgwD-O*C|g4?L9*T<Bj0rIx##S&_g-s#>s#My
zILfCA0yf;v;nI|yZP;Y!*$9x)7X%=54&AZ}B6n+IL}bubJH_|^`HXJM`Q?lz=p14+
zz#I<ue&LPrd7XoI|K}_tQhwpsnq(JT5d;1u6{{H{r{3fex)!Wk)BYE6<YjJ>PY3w5
zW+?`{g3wW>zs@N|GX+*QfX&MZ>mP*sk-b);?tpI-Yy_fX6r?NoK4eeuuTw`yP7sF<
zhLlz6eY*WapSyF+<a>kVMYF;4Gzf(=?FEO_sGyT(hMWKs|6hfixa>1nv(~f0nmLtJ
zP$K&hJX)nqos_&v&hGwEgp=U{fA;5o9-n{glj-sFu-u40{U5iIwbY*ZPs0)axL;Z;
zdi>!$TK%&{F`a$v@qa6AwKh>#C2x|R)aG^QO|YjS9e~q@FpU1)51zQ<jJ|ra7Gy6y
zYt;u>P6bFJYAN6kLxd1$uqa(x?FDHFUuWjf27SE*!M-<vy8$0U>z~4yLFAH8pKs~S
zx;O=P3`fcnkNCF=eag^yk6n7A`+T|?aE~GwGQb-^OwNF9BHmb=>Y09Cum^f)Alw-J
z-$EjpG`I2PWBx_v1lmp)-M1OJ$WO1kA|*uKq$Gl&x5Xm;ZV)KHSBg5=@G%DI!!~+t
z)@^X<iHHs2;lUig_dACemB;mHHbhMs^P1Sy<V>{ijd#C}iW=J25z@4WH0dIVTZp2Z
zJK)si42#(e<HG`zL5)ElxOKh3tq*D(9yJ&q1M?w~_9||FeLRTp&WAPL_z-yGUErlx
zYrOqlfqQpPaJcs#2E+HTD2C{?FJW5jV|Vxx(lkR|RmkEPSKk}rxBvPvRvwA5aRn@0
zJfBmZSvOW~!OM{qe^ud~1*ISw6f=pe+=d_2-%ENV=G?!7_f2;{SW;S^=hHmFk_w(E
z>Y~QhdWyGREpfD4pw*U&3yyx(xVy-cjgvy-<{0bT^^Txe6f;1^`d1@tF>|oe45<oB
z=6nO6z{&=tf1%)&&KoB)Y(xh_Tw*FoW$`<r1o1gVkyF(zg46<W9jM##R1)|XpYV{n
zA$opIO1|9IXNY6C`*F^8u*U74)p4eyI+fmVYd19f<^WkP-ob1puk2--EeI1nhNhDg
zW#B#!M$T1af%K`wdC=Ezg^A29E<v^Duj|&3f~pQvoIX`R=j=~o939tK%QF1>SN>#N
zFuS7tx$W%pe;PkU$B(fCAd{sNJ^kwun!J;rD<8Z3<(QPj$d34i8)offaY!`oF{I@Z
zJ$td7-<8URzq3wNrV$@R<rc%c^J-LYM$bj^npblu9o7FSk<aPWYqOt*m-5nyHR$F3
zqP7qCD8P-4F2$wVe}5~ypAe~u2!h%JU0&u<40(Te|58aC>LG+1tt?W{51<W_NSM+N
zRWCn`q;=7{jhl@t@iv-R(E{DXEVpM6UtkC<s<y~oqj|f@a2m+(yb~e3g3xfd!F5<=
zn3|~2NQYM<u&DuXdBv*shTk=Qv1$QB0(>rojLc)7iP7suXtx@C?Qb7p_h5k0d?2%`
zE>YGc@@y3^-uW&*9K3{f%FTR{Wj!(e$dSdX$Xjd3QkAPlgZa4O20EirjN2bXxP2Ws
zK9u`@{BdA&J7Q$u#&zK8TQ%OhT3~l)j-!J^9PQu0bh?WM6Yj$vqlH$!hTYMNnAdy6
z)kjknNb&~X{AVY)`oaQNJ{zG;odU@TAP1oI8>&4ACS?|2c%SBj<<I#UX>`w<Ge_al
z`qvqH_pBxTBT<`?@PgdC%fTy`g<yM)-nyL>qXAU}EYRu2h!_b_C)4Ihka`Luey1#<
zd1W_GB9A6&$*txIf)tcFyOuT#Ljds!962T=mYUSDEp98_^#Wo#k<8dSlc?-{+Zfzu
z`84EgE`p9*mx;qcj+h!=b81{v?pvix(Sqk3SYTk$vqufA;zL^`>wVFBrm8$~^y#Y_
zcfL&7L&ItjG3J_9(Nv;;R^rHn5Wb%ehGMAWNe(zKPg%2M>_uS8nmd^T>gE!sO2vVQ
z)ydb!Pn9~b)Hte&ac~r2G$`@Rl~3WBE1ynJru&Ot^s)bQD_Ki|daa-6<Hyti5Dzd<
z&S$OY@?WgVak;tv$+Xuw2SkN3>3!^MkTp|poMwMm4Pbxwey&FkyrJ_&DuFQ#qWY!g
z982Bmmf<q7@*<q)Aj07Fo<5*`&nYE9W?JN~c*j{<-$A7Bug%x_yHZ7p3iu2x=n?k!
z@VfqC%E9SvpB{bNvwS{Xq9c<&3v;BDXN=+n5i-djTCk&DK0|@bxD_V0&&7HTKtcvQ
zA0tqHQzyfZZ*Y+=S`2c8T<@+5Ya%G`3(|v)Eyw{aa}C^U{3a8Yj+J%8X-lc&);P~}
z<n>zVwToGU&5I;3LRtzjp8wVaufKMJalMbKT5yz2n@uO_VgKYdp8eqObCtlNo+3$G
zh?6#=xC6vFl5~Zgfh0+}^s=t0y|t7T7DbJ+h;Xn6?A)wbbZB=c!fVe*c>5LL+SLZT
zy9LIx1}7)SI61tHc`@SqPRK&?vridqm{$Yb9ld}!CC6lnCaQ2S9OHNYRv-CFjPsWx
zkV`_Sk441cyx|nULee5G2Of~;jJ59^1D(<#60;mWn!r@J5WGVmj-~<9lIH2I<ap_O
z#Qv+D27^SDn#ysLbJ;1?WlK8q+)z$dFni{495qtL&Z<-1{dW6|o-;%QEmE~HqSLU0
zpzGLn7)wc+>6gp&hDD-wG0b+jSlkA}*nN&@E3(H_{<yl4VEvNlA9#+AAsuSW!|0xk
zzT$zWpnH3M{(t)H%qZJ3bAf=28#_%b8^Ek6Nf9bZ(5goajiB#&E-AUsrRVhfk~ldm
zMQzZ&kpb;o*2GEn9m@LHwcBSI=fKu$t#j4T0Cpe>;h;=rz|l#KJkIemSAHQbn`+iH
z*{3(MPyalAN{$~>2SAQIx_BjvI?t3<GdsWiF;-`DL9!aprCbcFMvx&Ti3d*<vBTsp
z9Q5w~s8OxXUf-J5jI^W9`Uu+=zE8dTKU)#NsYu#I4i<^K&y*8shR>bJb>Gsz+rqo=
z16_Y@!{EXVL&St^v$L=yWEHq;@&KXx9G~-Za2qS}vKp&=oH#4GhzJoNE9uS_FnE1r
z?#IG%y>d>K)N$zpyAz*xwddx<6m)lR`=R^&GNj4BQZX5S<Dt=!je<7`OL^GlXXkhA
zW`z`J#>0By5KhY_f8Cn9v(YoTeZ9apez%Vz+Q)o824aCr(kMrk^zi*#zlA0mO8Csu
z!flTH$q7i~9`dZ`XKs|R13;g}`FBQ@q?_HwIZo^2<QUkw*WlKN6~;p<%xf?iA7eDw
zK~auSRTI?YwNU0fBCWIxh+4?f4)%txU|Q`9f1xbU<THHtyN7u9r4m;@0c@>^_=*Vg
z_(+;|Z$?0Dd==7{NZ-cNJ5>q0X$A}HJUfNPgy_uDdeg@xrDgs%6y<Jg<aqyDjlFvn
zvRqmnyOKjYQGfzCv`YULIwA7-E&pz%uVGHmES;Z+URX~~EW%@M^*bF3ixV9F5W2mF
z23Yn$-|VVn{N@r|qw);Y!Dscuc>{X17avJH881Y{g1Ex36hrs?vk4Ia=M*UF67Dyi
z_^1JcD-ZULymmxmq(BsoB!F<07NKDe_HX-VNRHf(CmAwYryK!mgH3-YhoO`e<Em2l
z_1Xub3aV9TZ(~xRrlM#*(a&SjzbHyv-h4DZxBf^vD@$~u$Nq;2DSh3y!~EnOKh_RF
z8lC$rO{^?gt+&@7cA^m$mOG=zhmQtAa=)e59E+X~Yi1j~$Y64peKN+rE}A8dfXlIm
z@O!WWXpWE9hlA@*k>=c4{Ch%J$s_Zcmf+u7lZ|EM!k<ra{sD&J|Lz<J-JAmFA_N+|
z@eenKQ?IeTlp*}(Mm)5LS?}FSwgRMrVMEh;4|aNYPL*P1u0RNX8Y~->`M6J11w*@3
zBmP;-5m!?lmT{>;VMN1@U{mzbi6;*kzsr|FHMOM(_!(KtRMfcgWWsHM=?%a8J3|a7
z`<Tr8{`wGOt#cml96gJBlef{y+Nh&~O92xi{>5#?Q449jiYzBGpu)$bKS1e;l28Ea
zs2ri!1-33k*trYr?EtrKH5d&AW-n$$96Ul4%@uB?IyX_yqK<Eb_QX+&ByOXqN7x&^
zgCtE+G&4|tzQfS~U;R5L=$wyn<xyb0tw>9-j+`-O7Qg(HNZ;pvmpbjqZeB-}8w;Mj
zp)($ewn%Up3btgNMdB9WQ5)QHp5mPs=jgOWw8`soNRHX%#2q|r=#m;OXTQB1ukU2<
ziGOC~Z0B+7CPXVjcUtGEn`5Dq>(X2Hey`HUNVRi<!u7Ho+=TV{^n&?9N-xhnoN(7l
zekP7D;9-APf)|VlrLX)m69c=<k?`oARz@tPMCA3S9J;`Xll92o3qqif02^MtH_peK
z!4En$N(664Thm24&%%lWAJyyMwbz8#q!6A!NrqpAr>Mgwp(RolC{3ysb<ABksT$|X
z`p07e?~;1!PqdN^6<YquP6PayIsh_J(rEn)O;e(st;bQ+6V*ss)ZDN|_4LgsT3X<~
z$S#O{L*p7OHu*1Mf7+kcA`5-C219u#BQ$L04EXEzA7bJi%h7@ucV)f@uXP@_o!>$B
z0dyZ|()&*gxdGuA25~+m2119!dq(mq>L)<tx8Md?q3aYTz&{052@cM82Gm&eLXN8{
zY0%^#;E>fFa0EgpLO1L9{^zJ0c9;jW*W2%c)B^|0(%Z#ts9|*JoiB3=v`?CC&MrEX
zO^0`5Hf(}pdUQY}Nz0<f#m9y5-|Z&&gWntB#s~XYR41ygCg*BrU5w@jcy0Hq=;l3!
zHIq0;nzRuU?4M-(HBCFnvW_|zetfH<<_LwSA8qoNByyQd8r-=F?A)PTeT2ol#B4U^
zWN9r#6xrNe<Y~?_IRY87w2R&G+n6^K=B<#Uk#^?zgYWL+>f03_ekR7{i=w{fO7gU@
zoW*Y`du7IHiEZzgUxHp(o|xUJK%qq+sOeaECow#iFNgKcsIG##!Rktm*Pkm<7orD1
zTJIbJx^o6|DR4e52k+KJpekz4d^isslIA{N(J?o#?1g@DI{?mBtXmUueI~~(&Om^m
zNr1alr4%|4qQ>LPg=v4JQcbD|SlNit+lp8hLH06_8hA%Q(>AuM)nVr`*7<I*y5zt-
zH^$bR+`H!(IOyJ$49d7z^@q~}&~fCJU5XIU+A`rNS5|6~e|1V{f&nNgK{W@#Uhj;)
zmU^;S6@S$p6OEDtsl=Hp1VrzGzbD545oY8}kq}lL*Xx~&L`$DVQSY%<e10q3x_?rS
zA5#ZFHl?I#KSI-zHp1DQJkgR^u}IQ}`>|WJ%Mw0*9yttN7Mo&a)~${wICYPb@IXYS
zgNT9+zm)M9vBr`8ba5|{dtH)U&gGiVxV3M1V-Qs=)%$y8Jwm{xX^0mQa+?BQi!1%r
z!->`|9oF+t?mmd7h$9e1F*QnZq@|@zRqsDQ0+ulk`|3BFF!Fa0yXN_L(GsDC+1`ON
zpJVifNI+0Rr=KrxIi+l<o9<F1WqC{&$piu_E~3}_Rj6@E4boWw-2%h>r^`>PBASl6
z*+0G{lASGT^tNhjU5>fS*!yqI@CV=B!=l_pQOu>gAc*FXqtjZ$E4yDs*$kwi5h;~X
z)StAG#AN(4Hppp0h=6Jk>vc)fDplaCgzdh*K{fYa5tut40wdDwpVk<Ur*%~nbtU5T
zC~4cY8{%>Fku7ln;<$}jwTGkWdyGa9gi6}gC*v``_P0*Zy#ze;2(aFzNZZJir{{Mt
z?x)K-owLZZR;ne%>D26UXi&Xl>E^XtFPay(oVI=fMQy9ADel~?v3IxN_RQ3v$#vb+
z$Xblla<Cva&rrL-4{*;sNFUk5_#uv>f9>*`k+HB8mW@TA0kTB4HT6-o?E=Z`bTiI^
zB@u!#a;2(5WSdSKqLE<xO2loKm(zY88FbIeH~{uN<=nZ_#d8rnSuim4_ItN>Jvw8E
ziwPXjWxL<$GqJKfB5~6>g-dInVPr$&iYUoXn@gE9Kt3LKm}H)S^q!FW(cdcv$qc?|
zSTrtB;S#`xIxC9dr+<_~s`CgFM3~H}I)>P#QH>^#6RezH-WPu|j~_z^zy_3RU-Au}
zG;tLdvw1z6EV!RK{fgS8#|bHTnhKs8YnIwG1lhXKg?0F@o8}T!ZpPm{bVC;`7sW_}
zp2Mm8SsK8R5>4ti;2F4Z-JFl0RBb7`v7G<uDBd^7F?;Lx$dI_`|JkOyG&P;kv|L^=
z;+o!|q4R&RWQayL?$P*&#UThfXr9<-8<Fj#0_o90Gq}^v6B6#ijnQqqL=fan;uJ$6
za00win2VTBIS6|3u03nG5nAcOGQ<+Xm;4#JNk<Lw!XP!u^a4es>a@a@kH?^pVKS)j
zwSTye@pKon`A|$0&!H5n-3z!id=s}vFQAp>sGE|}gE-9@_6OzvL6Cfcn7rH|!nE0I
z&y|cmwHqd1ww!}Y0}l^s>FPVKP|Pb-L>kl%nd;GKpA>PH9rK)>-h{id?F?Q-&2f)7
zaIId2?|<tU@4Y+6)}sk7pAS-OL9*DFVp*hWj<_e2Sq@s6;#>{F!g)5I)Tb~gDnxbs
zS_zG_tw(uHo|7|_;_Ax_<ZT*P86Rss>|6ADHoTj=K|WmUxx6++nf%<6rLw%rg7*eM
zfpZRQy=d+}z$2CLXTd<AN1zCVLk9Jzs-|wJ>tIExDC){3X4dUw5g|a0O9N0E$wa#x
zo}dmKy<J=SIgW&I1|*H->+OBiE-5vu6!4|B?tV>DI27Bm<rN@?vaTg%;92_``Mb64
zQ%MHnQ-tnO2x?9sL}IB<5TYMTRo8?jNY4t>jxl7Q(h@=ENN6Q5r2s&JQtb%Yc7lUR
zT@Qu@N+#gaE9pqP_$fGk3>^SF=s^_=dUR#IKv_<4v^Qi=lx%E9Z5+GOd)j)pGZLVU
zVvK^il#yHN_hXxC*vv-}0bRMyFd2j2HOSCko<;)fvs@z@OG|{Td9MQKgKiH`I>68w
zuJC+j*q84j{5}8%U7vOSTPVjH=n%Ld(5{0wAKR2dhr%|YFt=%WP#>i`hag}V`x<P`
z?K#p<xJh~+X8E4@57JQ7JrEI1S%R2@uU6(4=>9B6m1<DTr1E{*IH<u{j^332r7D5;
zdwOw_#h}vED^I0JDw>ZGzVX##+}+({=wI@zVuVR_r>Y9PvGY4fQ*lzc{W8J*T=P#%
z|CG@w;u9pK=^8wm(^wDv)NV(-N~Tm6*caHhEGo>Vh1TZFXKS1-El^JTnJ$(jXC}vR
zaTCYW>&VH=7VC`htiV71FGuKH0Jbjx>np^T4(6ctWe~s5=fq{`gLxOus8iCo;j@(W
zXEV*<-5*kG?jlULP|;n>@YX8}REwG&q%2c(${|#qkZSW&ct1;dHShGg)SPcE?Tx*i
z(?jav1=1@ScH#LJyv9v%31_{yk6#x{O^bM5vOWb>q)I$*BtSLh%cujD0#Zp}jJ0zy
zIvZ3C;1&K{SuHyr^j;AT7UVNX5pXL56&2QXB=@K#yRN3+I0R0dCrB|!+R(}d*|3u?
zR4^~-6TE}w*S6DcFypTd2ebT@Gr%)ks*PfTQOO}-0kS%ZCHfBtf>v^D4nd<1kM^-(
z^G>F{)1Y-O!mNz(!MhWTr(=xgBh;9%UPsfA%l(so{1`g`)TV23!fpUbi8V8fhyD6s
zcZj@2<p4k{kI`L=krI)a3_e9tTq+<=0JnhfHM~ngJ<FcEbqMqe(=&R5*ZIITFxr+U
z)XxYOvNK-}E?@Ez#7QxyL*HeDqvfsMZ<ZF9hnIAEN4L-RUjl>f20>B+B35!*g4im3
z?>9N&xEVQdDUu0@b>Rl>FGq8wTrOrPiS7A;Mt|@=S6<1YIj7DOL|SeW4sOL6m+)Gg
zW8+`t94<ov3<<EiW+WmoTJ-0P^eBXYx4tco=-aPO@Y-t!sFM?vRmHh<f!!mlw72oj
z?(bn%9wCXlj?fY(IU;8NXG{MmT_D#f-jc(Sc<xAa+v<?qFf{5HiCj`3q&n~lRm_Zk
zE66v5%JECA`=LZ(X55-&fxE+(5G4YxS4D-Sv%q)0KEZo$EpYy+1m~%-k%_jLdM2OW
zjC;VmR~1NeVrbKi8xRzsZ9HuTaSle@FLUG+ws+Iqt=&^-jy@~moUC*+?A)tyc&|je
z6CtyPIQA(4mqgILpeiU(1LWvf^FA_<e3~LeB&@2%$^L5Hd$?*sK^~r3&fzhksepbI
zu75t4_l&J|v5TU8b0AXA_f8Z+-<%ez7zx?DKpYiw7rYpkTKHfMIIuo&^!?9{ClCe&
z><svM9<F^dtVV<ugMPZo$0B)^>@_4Q92@uEK*7@j94i5|_R|iPFtkEQej-<`5kEOJ
znp3F*a^`}RAy<HOBSPyOko15zUZswjqj*|O(Vy?4!XzaPjSAyK{1hBNh7N#5krcJe
zKA=lnRD-&x`$*CS_V4cCWPgmjLmMZU;o4n~kac_n$-*6+aTNnAb?sF4q)~nlW|}YW
zOo6x9?(c4sSR(B;_ia7`qb)DO`(w7i(Alq<Rc*4swo!-PxPQB^g3wp$1-X|vLYsFC
zY~xzmY{PRACx8mpo$>Qe!tQaoqoV)W`X0F-?7iNDQZm&tBiz^Pp3a{JQJ9N<L{b>1
zBO~ij76^X$DAfOKsD?52mrk!@G3LnW;|?4Fepa!;nezFfv_=M)y5?Pef)ngGIV|zb
ze|ms2K0;B<v>ml*yRUaH;b3?TANIeGJnOJyz)hK=oOACnLH}{i+!yMyL!`hc$-LnS
zszi9~xz1fuVPx!yXE7NIx<XyyWNZsE-&C9!Q(d;89(r)Zu0J`?RnAY{2?w+HF)Vi2
zsjh2c4@@zb&GAoubBv@5tZe|@u6(xSe$|<<x_^6~Vd*7x)0583O7$QI$S%Qqj?4>?
zMt4%j?aY>?&+Hj`<ISg0z>P$csw%^^H|A)yVnzUbC2!ygx(VY6WFF=6^VggO;S+h7
zK0KosDvR<>2AiW!t`@O<;goy6L_BoquO9-Hv#8P1lnj0jo#0@@p>?t#ZH9)pDGBO`
z%<(B_Mjwbr{lYYzc{p;ff&(m9(JVU)iZCppKc@}3l>^G@U2VSY8FW1c&vQpfLJX+8
zq=)uh1psNNs1qRTn_lZ14GG#H2!KWZ4#A{0-VvQwnpssjkZwmvHi4CMKxZw%bKjfb
z?e`Bcm<&)f6C6!Hq)*OEOz$n4qy2C{{7F523>^S}6gYk*j&fAhte!3oKr|)lUw-ey
z9UR`9AZ^9m`HJREyBDFe8X?WBub+_hSVz-E*&6-W#;ovf7{SVSF4kK5tt~$L-bMTB
z(Vnj4_Xgi!<)xg$eMXMIE=m0cuh(-~sgQ%cLkKX4FqV&i+aMp}KjPHuEXy3m{(h^o
zcUjQ4oU4=<dym>}Y_7y9U`gw1xE@y<fjF_DV3XqNCH;j828mXH-jjzRZ4B?vBgn=Z
z5Cwzx$fjUJ624Ezf?9^_n0n$FkYr*EE<8b!F{B_C;hSGQ!13US%jx`<n4pudA&nxu
zzVnZfB$c!$r53>Cq!Q~tBFvFm0t+I*L_o9<NA#NTM)aAe#8XQ7ZR*BHL`!PdJ0$@V
z>4YcOYw;3oj#iCflh}x`o-oRu4yU;Yd01d~_!{UkD@wza1>)8S&;G##*WX!S{d|Ir
z4NuzSE0VfI73A{s!xQd|QK@s1^?*h2)y-R1<|(E`UMX#_{rlWh^L;V``Dgl=PB+85
zuP-=FL1}<A6{R;np#y{GoD@Hsy^RtYo}16%->rd=n`1#5L|P?_t#j)?c#U&FWi8k+
z+8*L0vU$2M8(A~TVeq0%{n~K_^f6P^Pw3G0LkY5W%n`5~VI}rC#mps4%$xz$chIYI
z9Dq|>lzV-!=xlv13Hs<g2n*li3od;SI6_9;T}mgIbD;{8uA(3;3$%9BYWRIxO22Z8
z<A|F|q75Wu_|HX1dI>fzB)sQ*?H?ZC`IqnDpudZ0(Z{gb!O{43oyDEFZpPo9SBJAx
zJKs;_@nh-$$U<8*d#~_Lgd`tK?=T~pqRFzD;qJ}5`0)KhEan1n5jQZ;fZlq8-dcl{
z_*B*^mx9~aL+(~Q=z(_`2qE-YL>ffRu8hy1V|kZ@(Ux+DKWsuQryEZH#yjr*ztXop
zjHGqb;#F@JFEr8`WdsH<G`4QrRJ{XxP558GeEm52GY3XJ95_9U;UAb__nnNMR}plC
zB31md=$t!pIX-|lB#!>4LM)n=Udnvf^+~W5q+S9<!Ge0X>8L`WX&HECzl+FX-|*2s
zTPsk|U}ZZ(cZF*06TI;K0p5CN7gc<Mx?Z?EM${x&&(GuP?zhk{ZZX+U>sAoODbko!
z|HRl6`H%iFdPO_{LIZpN<`f_8IkFZB;pkMxM2&hV6`&gZp6}sV^KRa<(N*V|N&rJa
zEk@50t^zn3zlV7_U=|%mf6WY|$pruWt5dXk!1^XN;SpoUYlwx6%za#52dC@S<#*zx
zgyZk#pcql@=Mlcq3_zHUu~Jse=TaJ=lj7d(1_$>RZ1^(C40=vZ;FyGHk=M0Yo;%j}
zK8&(mYASGCglNYMda}m>0WjcR1pnOcbgml85JuoGc@g@yZZQ1?@pBE*I`lmuLbFAK
zm8}RH7c+JS#1PwciK8feuYGXgIY0jMEP`K3o!K~?`kjmT9ctsp&rkp>#WM~Dllv@f
zpiY5x5cFb3=6rbZp^z{rdw@E18tmCM2;r|rO^!1Ki<=Gdb3kh~LZ_D?%1XTU+5ms^
zH$TKHZ+(ctbPtp1F{i}#CRZ_AjLJM&jpw-g*DI<s{c$y){|blbf&SPXG8yOf?foL{
ze=SS8zjicyZ}!-^U&=`;wW4M~MUBIq1xAArw$E*0bGyTEA59u6!=l_Mu{lW+lOfSk
zz3Xs&GxX%;g*a9+1LAF=R23K`=Xwa(c4~z>!4bgh{9|BP<rlK}TpX@DJpVVa>q0oR
z&(ysp5E_wRNQ59ekVJcu>aaGT+I5h2XDfkQGR;5SWwF03D-1M&_h3dgNDXL?#MMnZ
zLu{X>n+^}3IxMEtqM|_*RnbBhhb+k3>a&q%PkbigFL=^{6Kb;OBA_zY5NHn4M3~%@
zaNWHvA1c=%0itf&flI?KNg6Ywno>?{=ORpp1pP1Yy+62vCLW+FN1C-K`f-F_XB{W=
zn|QDPP2^d|&z2ln`luwz*!WYvpOzvSeK!1D0g&tS_UMBrur=IYk<cz9e^Zw}k_9do
z-0n>Cu>pz9ZRMVECLQY(4YOR1J}Z(Ro-g`19A3kv^`FIJQE)0CX^-*Tvm<=z7rI#6
z%&@vrVt?FlDI`CyU?K2$1zjbL$Qc+7l@tn$gqwff_=XB|$|Ylelc}C8@*-4LS0zJ@
zn9>A`MT&P`p5vGQT+Ystb7g~S0Q@kx-A1e-WdW{5U9OICUN*f!yZGt4_Ipbh57^&*
zHI4WVhRm5fu-+vtF&i{pQ-P1*-CZ|dy^}y*hcyb4DI76EM9PR4A5O4)JzV9g&tZ;5
zkRmdt&SDPA-9)^gyzrO&-S8TplB9WHw{2HvS127V{5WwbsFFrSMvJ^|G3t!ZSu+J4
zJHun>x-69|&t3JLdH++m-%2m(_Zg71BcyFGCxra)R+}7PU~sa)^|$)C{=oppha*(Y
z6m>m8QxVUvLY$SjxBnK}Nrwcx_a@b~Z{erp_%U?==%C!=9Mk6N|9(CBxj#QI_HpOr
zSv+;&SJ59HbCg0Pr0IBq+miwI_g1mFwTA8UtLXMJdFWNm1i?;EA|!GIiiNZ#g)X$D
zNgRvU83NrXrMsSwfXPiZfqiP^6J{V~fh@KCbJ2oZ>`M#R8z0M&yPn`~gYj47!q?!7
z!}Ud%Txx0PNN875p_kCpcU=q(=?EngeSN`cz|(zb(D1}wXKPP>>*2YOaOuV)h{}yD
zrT&*XJAPxfmbz9&DVwDa!CX$1;2kw4{0wbegA3E`hs8zA0paIJYIN++h}xoEaaFSh
zy!2_%F-~-oq?8jGlZ}hi5sxCh1mFAaJxpeYh?5~3NzNOfL7Mc?Npd`U=kEjY6d+^I
zd4KvxA!!CmaZ%K7f@n+%WM?2>j#S+U`-4uy{Q$}ci>Wl}AsutMV`+w9j#g;2M61H)
zwnY4ll2P<uNos%^9g(xMJAM-v);}*u18H)^GaL;E`1ZHD_%nZg6Kk8m;i15_ylNfC
zFksq;q!>4|#F=5~T5}52p;ZIHRVr5f9&sxoH=A9>xuRRO<lHH_;t{28w}rP}nc_>o
zN*liPWuSU*Hkx6+Jvi6th+3m%L*sd_dGzcQ^FCOf;!p+~Ku|7gnjZ32OFwvmu1{GR
z8t73DQ$IC_He7!ppT$))MAq*fICmvM((?Nm%@Cdox>s0+KU{AzO;o#q=Cv!Cl+{lT
zo*^g#l}NWfPoq+%u3ir9lgne}_Zr)uJnun*4RQu}Ki64p;%~J>=QLGd(}lfjZl!^^
z)$lzNB1~Km3KGdC5IOSt`$K&2!2tK}9b-JBCS3%bnRsx)9XMB4*Ku$70>-o5axFjK
z9pkP4(X`r|sau4f^yA0a0g#C?sos3K9X<7rI_cW4-Q557?853(X|Me#29rbGsOWVw
zOvXb@CkNO+Si|P#CbrJ4VQsy|<$?qW(x#oaHD9^_<`Y5%WR?=nYo)Z}Ve0Oxm*Li@
zZdzt6Lnur_lAz{XXL48%?cXOmn6EtZ{Rh1NK(pILJ*Pqn&s(tTuw<ic7Ix;aw8=IM
z)?ib@lQ8)$4;(rHcBQA$3%5=9V8p)Boyg*4x4hN(SWg8Hqx#L!KX#GTwK1Uk;zDte
zT6E}(jGsqzmLiuW<Uu#`u<@e<93pCn#|A|G2!@;ul#nRHcWkA+KV2KasYE^{Way38
zj`6|u9mLs$^W?62qDipUeh42NeH%yf_t45$c!Tm!j?z}d^iO&Ah;{`j@(~IkIskrH
zeh9Ba$A~_XHg~E7U~wSFHSvNiArc^`3e;GfKo+If=rc*RNjCK~%`uzZ#bA01Ywagd
zmJ3k_%x8G@g+6}v%ROveNO81Z<KTeQ5UI%!l{E^l!_6s~kIK8&dErF5)LfcVDvh<x
zyvh#GA`Hs|;E08R0d^@8m9y=2Gwj}(;NW(F^$QtB#J`|6;^zFgVfEK#RThlj+s_tB
zF8MKHoZLMHkBAW<_gYzBzVt6FL9{5^)J#1@E>4OeSNcvH217*j-j@{xLWf>bpGDQM
zH1Nu1g5Fw+$w|TJk>5?!Y3F^xqHPO`mh898VO!@8P4$tsIZ}oOn3KcJO<j65oYFp|
zaDck6Y;b#+TMEK|b$e{6=fn!J6zR7jBx?AxBw-ss%WFQbu=C*<ckc|bvwMPmpVD<x
z#MGa|N(uGc^nIthiQ(c_eDmPt#Y(>3o!5uo9M&)YUHlXsKjsbqd6Uy-T)+75XYnuJ
z$kV!h?dIRCfAQ(Rj9zO!9?$w5xd;)2Hs1o(WP+XP2@VccvA(u}t#hl`*z9oWAUOhb
zUh)8`Jc!iHIBz-!BCV0-o>gv<DfH!y9UBOX<U?kB0L%xz`~5+?hwbd=(~W$BJ#7i5
z41qrTFkez5jpf5_(x)lh=>jO#{Z?yq{k5Bi?O!REESt29gI%bv+x43dI~5Gm`cLwT
zhH@Qpp>F&PdJJ|!=SNw2mnjKa#)EB`L?{915=0)hy>RqmC}Q9!*hjH*5DOUXI}*Bk
zVwjxL;NqC%9iX=%H75JJb3FI#O(gk<c`5P%Vi-F4IS_I6>e1KGBFvGZC(i5J&{Hab
z)vVn3a4S0Q(x>@<_mn&mK#?{p`Eb5nB4)Z)A^}>nCa3ndL{JO!xq;KfrHCwW6p&<v
z4@1I0h-cUxyo|NZW9qBXX1Ty%IK}hd8{tp>nJsK>H#j~CDmv`Rd(T<nW=#PopTgMS
z;v+L`yOdP5x#h!Uy$@bLbS`TPXwZ7#P}JnW#Hh*`H{PD&%a3Nl-C%^ooNgPBWicT=
z75SY^s<S~O!JSC+fzlZ-G*sS{=_OMwx<f6N)?0JGwnHdbWjl+z(hxDwb;Hlc{Vbot
zLmxnI_KfMd%%>Gr*NEg6VR%5%u%?Nmm2ZGV`UxWFhg_TZ-y{QV&a^5l>H-vlZ|hNv
zJ=gg&8YYWYLA{X1xwN0LQy)+u7@wm3I9M};#93ES`WqSglng#ErH09#X->U3#4(<X
zN*o<ead+<o`v*fzMgs41Z;WWcJ+1|@Fjrpy#cq2YvvLRT?tG){65Aa0$)NfEuP^GM
zl9^6><Ug6mkFf*br|_h_wv)Fm|GVAj>ED?b`=e*C{TKO{pZuR7?VPXsvwdkNrHepn
zk0+?6Qyk3uI6CT})7il0<|?+%b+NKWWdouQ9(N>{OW!X@JAEcCO|1@{CLRH@o;fWJ
zgqX)*u>|qBk(MM69+AGjyo%cNTK{opS&g8l+eCQE@LN;f)lad*st^1x47RhCWTAt7
zRJfTKIuI^Fi=;&3i@Kw__d6qfN~y=7y1<jyFu&Fg_Dtb+5tQDijHYcY9?tWdqiz+B
zJ}t~%%Bzb}UP{=yl!8k!I1Yplojl>nkqHCix&+*)51~#J5$-6*oi<oKPkVtxxZnBK
z2bfI{kR()qubW*%QE&&HcmuEA`wcYFj9dG1qeHU{B=SS~e-O+sxqlY_VG*Fz^#b5)
z4b`j+TVa(_aaOr2q4DU0sMAMUMnp3*U@&JH)28P@oCKSTguIheAaf<nGW6%yFqqv!
zH+uw4RiP>uNb(upe0_p1d~uzP%IY3)a9}7?fCAj-gxGa?cT=W|Hat4j<SH<$OQzJK
z)9^K}v5&>q<cM{1y#MwTU-`EM0#4?hD5|NmC611V+s!Cz389W5m5|#UVX~h@uGT+W
z9U9}Tn9J_^`2_1&_yhhX{5+I(Y9WTt#XD!oeO9m+cyJ)-lBh&DYHCB}ny9gTImXSm
zrKPkohI|;~91uUwHZSDyIR=z-pnOTS%zyqn8&qAV0ckJ<LFf=-Ww8Hf87cF2l(cQB
z2-`Pk9g;ttbSTnqIJJ}0bJZ&5#iGX1;S76wLpJzF$3raUGZycOqY4rKBbdK%RVG{#
zt9lMelpt?+aWcJ%>-*oRv!p1asM{UZFMWAh-9G$jGX6gS4uBmIhQ;&$Ajx|Ft4@05
z|2QlAgYRAYFY+%u_TP`suRMai!44Wi0L=SUXs)g%Kr_X7Ji=t$#?EdJtE+3+KDUbX
z%?{d~RGOGX71~{D<4V$};s`9J5jR|+3F^FRE&I{9GB9~R1PM^@-}QizHrBG@L%1N=
z;<SMrA`;-{39n~X?v0k%@j2Wg41H=P>6ka}#EMQw;uhha{(K1?)%gjy5AKdVtmj=G
z|2-RYjkq}$b-sYXu1k;9ZB)yshIs(8VcDiE7olhXdH>Wu*gk;Mm*J)*C(vt_CQ=@9
zacF}fB2pr%o3^l$93PG%4vI85D%cVyfZ+M(zrTmuH*X=&Cn(C&*=ZVq)z&5Kj9$a;
z>~(ZnRP*mMN@5_%$hR2kC!_E3{#*hme~XfoAE!A;?!6{?trElnwTmpUGYU3#4Q=#N
zIOP$4AzFH~8kPb2&#2uTA;*Ne1ipeNwjW{wZo=a>!*PFvH(r_I-})0P*uGHX;4pCD
z6io0n--Zqa?V;7MxwKgT9E6S^zfPl7xmlSfJ_0xAt*N<G)Tp^tgO!yOcW)LL9vA4W
zWSGxt%;)MLE1YexyK{&QK@$CEjrMK&(3+N;uv;S@BDo16Vx})W<)C{~spq_S5}f`e
za75%f+<gX5%2V$=H$Vi57|Ra_ivLfkPx?oC0BM_ufkbGv{o#J@k9VvDzBd;}d}%}C
zNP*WlB{r9|S(v3b-97uqX$~QsGjVHJ1l!~u<vo<$<yINFrraox-w^@0G>gHP-%vik
z#O}!iJ3D>s9rV%f4^dV#?y#A}6(TC+RW5-%6jlj<cZy?VQHE}7gT&|RTgTtR?(pSB
zp2qY^-Es5UpXisbz4Fs${C`3m0GSe1Jww0v_J7=Df3#>PkN#hZdNO+M{lAfZ?ED{(
zAKv;BhO-HVi#|_C&KFZo-$)_#6j4N^jxi1ok8yO^MXSAnt<5!To$Fy`qlL6Zz1D^J
zNA=b1o}dAY3Q*KwIZcDS0v&)5R(Jp9yq9n0ArP-g;9CEJVDq!Qs4|ajrG%V7UTDO`
zN_4XcqS+9}4DmwSRNN-wa@+<B_(gB8x46JX6v2})BjSin!N=*lYRSR7Bm(>NvT-W3
z?3@gPjD6*Td+K^(vfhL+_$XFCg&{?4d*pUpQI9bSbjUlCebJ{(g!m*oG)2#bDEM5a
z?n`>TR4PR9Kc$Lx?oILH^Vg8&V-!Wfd2c@I7_D>-bu+`&!{1?DdL}lRI;9%_h(vx^
z{71-t>;%y7O&O2{fh-~qjgo$^JVK7%^*Otitig=rP1cQ#`%myxwbas505s0ldRb8&
zx{f5xF_^xKN%2R}iqC`O&}(WE5RdTY>wSFo3tg;k0&8o)(IG`|a(>oFuryH^q6Wq$
zcyz8;fT0F%eeoKgRV@q$o2gbA;-9rgm*gDO8z8}ClHh}@GkoUfGYtC_4xip#bWSe8
zK;c-P!Wx2-LHR8ETq{QmUE08*wR9OH3YHS{D{fhU$2;$CMJ{nUmshBvR#X9CUb>O!
zSX;j&0(8UO0f`H6a<4>AIJpH&t`yX-c)zymQ}^oiJ^XfOV;B^b@Ci=KrPDVudF3*F
zZxwz$?FFeo`l*ulh`FDpBK(#lQC!Z;`e=WO!=nNA_xl{>Po`6p6*b)=gI^Nmm*WCK
z$n>9<fs@g%C}3<FWKkQv_6E`<#s2VWef#*idS30%I$3L@YO13#UjI}5;*A%Vp5;%`
z@e|+x_}Np|lcrz%^Z#p|{=!Z>e)>0)Y*D|v|JBL8;p_R6=l*!S*}H=Ae2jTH5snV0
zH*HZ1E1J5SH7GD&3~}$?KKA!oXm?kzxw(O@^Q%~0rxZbqa$X^BMJysh!AH4}<{HEo
zAn_VrF3Jw`+V{(ub64WVD^qfZ7Uj!fi&)R2uD#pq`PR)tw%nq&?F>4C>Dvur@T*PN
zn$x`xp>Q>#OXM5<ju`MuqklS*2`#IWnlX#M907$Or9hkZOTQV~3;mxwG+}CpmKn8z
zB5ALy5g0pe3II_!<~A1>8QSJ0+`+K*YXE7ur(vHLD;cgWYLnHxL6bN5?zcWbgFZL%
zk;@e5pElf;Y#VRx{a2Xd0IjHJ^ku#3l%ao;_)S1Yo}hk;{w4Ym5+L;eAT0omsI0M-
zP6dm$NcX}$c&&%FdM<H1mDRsgIbd_hI!%(Th?w~=PJoml))htlrEKc_x|AePu{V4J
zk8k}d%92n3%Gl4bcX)y~-`K?Gf3}OYtr|xs5)x|(HoJd1!0NAfr!mkFS{CxL^>E+c
zEKXIk?Z|L}K?=G>+AZhZ9B;lf#pix;6-lb;i9nOcrHMlS$PwWT$q4>tr#Ak9L%0lK
z)Au`r=MfJ>DEV8LUNC1qsDv?xG$4-p6X>i9s%?lq!jk>EUIcm5fl#q1s)FinB{+XM
z!Qma9yFuNix@|gFL$_!7@cW4$Ki5tu;PANkL=8PV%FM9}n{5g5Nl-o+d?IQmRH~Oz
z`YA@7MKJ|m<Iw{BqbUyekFmFZ5|75Cx~OJoqJp1i!$#knN1G!?iq;AP?iMJBMl0!}
z(^@5IIh>4d;P%Pu^>}t~k!Nw*NqZYb)c;50`qjTQDnDe!zn|9QC&U2=k$`D)viSPn
zT+RD$cks;b^s==_rp3+4t9O0_=U1P}pV<Dlu+hGZ(PE4li<s0(8`Wv;>eMA4M5Tt~
z!3g925q55Mu(Gkqj=;u77wxX(VJYHC+6}T6MOxH+MTmoSA#GX3n3@NyU!&NIm{^-m
zU5x=6EelRxw^XI>;6M4<1^U)2K#iy~Sgw>#UvDKvOEJ2|eYQCTu{#Iop24e&$0sj&
znc3BO0;CVuqzuub0J}z)9C5*dMLd3ElSte{uolf3G#~7QOV@0(f>I8w?8zIN>IK+6
z1a;1q7Lh1GVPG~*?kfHMOoBG_L(-tPNo7<GdYuF>eg6*j?%hS)nWHRfMKpwnx}IOe
z!T5FD9e*F~yu(d^i0LmhE6MSL+wMx^ADIh@BOfu`PRu?-3>>^+qvgNSH9N5tBCuMo
zVt!QIxk%q;S`s>TI;QOQaTF;|2O|?G7!EZlZMuGbu*^BgaXfw(msY=sJYGk`kQg~0
zL%jOR5uSXii{2`*x(W=Az1Svo?-aF0y#gM8VO$$B<=Ec#U$uzxJwm{n;eG8Ha4Kgl
z&oFc<=#_+wtgf_i<Jt(rlM-2;>beg~Ms1BcXV(m<&Twm1tkJCSjJ)-e>o?IV@1)2Y
zRrG4vt9Q$sm)vRKAuJJgKEtW7;XcQJ=P`G_I|X34Yh)3ihPnf0h+ZZbBz&bILd)al
z-51-7e6JFhT66XGrY7#I0?gTzw3>Ia8q(5e#jMvtVp0V0XL-UzP5J~9csn|r;sAj_
ze!t*wgv0$lj*pHpnT=63b5Q9{lvH%L?E7-ThB6F2r9i5>tX(n9?<`(Hr`1D}G+2~J
z*z3QH-Qk<{v^remX{Wu?T3IQZ>8)vV?Jp0@H~!J0`spJ4{e(LJba-PnT)gmNk>34e
zH~yLbMV_Af-(_`)!{PIj!{J-;#kJ4Gk8b`FHdY_Ow47o%KS9|nL>_}20taVNQwW-%
z6wOqqni-Cc1~@)yq19T&`o=mow^p#W-bU6+L^A*tTJ4Cd2q@H~GAx>`lqzVbhT1{~
z-n-Q@T79cYq?++^b-T9o!s5b!nq)T6Z8{2j^7jEcV72isx)0ue-*yo$e0BZ(PJ7?H
zH>Rb;?79iN?KiAPw$z4?WSABt`+fikc!wlp=iBBX1>ODv9B0hPeYWjeWkP^BxTsK^
zB8~c4`&)X}Ip=73bM<Uvk4UuFrQ>88C%AWOfLC9-iKMl_qU4U@ZYRv+9-_L$)uZ1=
zmPu|jX2BmOQ&L>741Xp6u?mqf@5Shf!$Yqlr@@?~U=vjeiJ<o0v8)L7r~(GO8!97D
zEwM-gBtVTlcOfiL6J%C-UVx0VAQKWr9%6s=Iv!d7V^}OEi0c$_GQ-a90p5Oh6F>9$
z9#%IhjE2gc(dd>CB|fbVssz|!X`J^X!!j{*=tB5de-uZ+Q5E!#-9&QnCmVpgm14Y`
z;MV(7JoZV7`htZKq_V91ZW(Ft?y7fgb^QiV19#Px0^3vT%o}s}!!iuG6iK^@=jOAL
zBSYgEyxG2!3Iz||g;6?JxDb23A{A9&^IU>fF98Ww5}DNGu#L*=N|l#Lg8o81KxZpo
zBpdwHlFAZELCJX16iTxwCPPn%TB{S)q})n<8z|*U$(_-##PQJ>d;0?%9`-RB_Zilw
zoJ|uK0`D{0rELJ^Su@UL)0=i+hW)t-R>JGDldW*Xzo<qy8DGWT_>H<heZQ<Rjq_}!
z-ODyeb?e@&`S3p)Rd4?0q`Wur_xsap{C@%+fMvrqEALL`(Y^numwoCtTG1!}PkDOb
zzZ2C3cKXjxb_Ori=enQHAKm^XT<$)NX<gRC`9VA{Bt0OzfNk`qm`C%rL=-JBUreyO
zbAY|QHuBagR@YXrzShP1Mh~qHMR6k66{S*1&>}}**03Opkq2!7Qj8_mQ&?S+yVOlZ
zNi=~1fhXDox9s3P4&1zPkiQ4K1dEz=V>9C)VgcUxhUG>!stQ@Fv9;gYg{Z!syH2-<
zyUjD?5qL<Bjhw>$vTg(2gupn^;lw?{iUxg&<?f}bfE$@Ep|{oyNq-V|Pd~%;FE9qU
zLk5Cdpz|qWl=ot^S4EbL;QsG@_Xg@{f`*#x@b!!RA@knNHgNs$YnW6!$g{RSBQbJf
zWCa08N#~#Eo<#o2nb#<Zh)o%%0Nk_S3sfm<wf{B`4Eh%3Kh;xTVsoqeuoQg;j)ilw
z<aMH}KuU}{j`SH+H?N){UDv_*C0tthBH}m`EqN~Z9OLy@5Ad;%_t0GhdMnhL*!&er
zyNM*NX1@beY1x<=twXpPL3$=Y2At6eoSkr6AV<~83AKqWC0>xXTDbPc3?F-DmF0@X
z2?&LE!YJIM5AyuHPQ95!>vX6tzZhAT1~bUncMV)3w^`(Fl{Gfk15Fu2@}xZ1^g4n?
zdMd(ql{GFE;{73qWYBZ1ga^=BNwB_^;_!CK{ZxEP>|bQ;Y|hxqGZa$MC<mn|+GEnt
zqzgf1d91ugk$%F8gjt)GP9stN(F7;QWc2$uIqqXN8KH`1T$|7J`K(Pqff}^~VpSnw
zVq0r=8GRD@s-v3LPmWI9<29HiIm&W^;p7IckKe0L<~Pcs?o%MxZl&EkO;=H2{@rQ)
z{{L-Sz5lzD;@<T1e)rRU`~*4xcKF3HTD<k)G`{iQ?IfT0EA8az|7|<D@ZTbq^1=M|
z+5WB9%GK6m>E(?t#^+Z)kM;OGCW{fK<q&nWaAZ8!R74x6up%{YL{m(s1B}NB_IEP0
zT0N|9ZsOwkZLDnyGC+JNYVy(|N1!c?Y}RI9Xk!**@dpdZjGlu%Eqx%#TSS!DHkdNV
z+lo01Lg~Qh`t!+RT;|k<<K{Oq@5Sr&1yQg?4zkcsafE%xAMYqzG^IIo_a~0LgQ#SQ
zGvK2PBkI}tg9Yx>1!AjM0M-j9T77baDr#ae&U&vNr({&znu6F)={Gft&S>}>78L0c
z^uMUFvYO)i-@b*zgA*jJIm&9G?OLRvN;}&|e|iJA$KOMiw?x>7h5Cg6$dNyl_;HyZ
zMfdbOYh7&wF8Q8I07cS441+1_1y7KTm!$yA-~^Dh*mE=gL4>@FE6M#+`626D3heJ9
ze-cL0UJc?G(BE^+=Y#^hfy=93!JL{NH6&V8;$ZI>SKr;lr$4iXUa!K)`XTXq&6v|K
z=sqRp41p$RL#!RJl-&7zm)naKIj~k2!octl0zZ0|bg^^+&*Qa~7H(b}U_P#q<zQhP
zCQb%OkSjS0Pyt&Zeqe*hU#msjJPMpjy&2AS7#Uv+OakkyE7H0tx)tizs4qeG!d*)x
zlx{uR^>_y`r1IGMnioKCwZ_(^1berH2M~U$TN|f<K-*uKW2lrSQw6krgXR(m3{e9q
z(prhL2zeSYB1R}0wc#C(COEk@!r@ULC;b6t6B5vxqXF&3CF}8X!7l~*6fY5&7Q_e)
z;qu;8b8436Y8K_llP=on3bHuEydL6Y_BIYiSL@;IR$11gIEu1%mXOikK!wGPDmwg6
zr`5gRnpSsi77X<-jTHW{96!Mh03CiaqjsgE`js~(@jJiXjvs$4kDvO>?RevV8YRuj
zw7OltvwMAZegB&{xB5)_(Av-8LigdgXbOxL$5>Qj@wPd{3W}x}8K7OFQcr)5*=&m0
z-4h({?xE8qp`mqbZ1>RXwK#`Wlj<Nv{aQ&tup1)-b8!YliA=89uHBoUpk9qhgR)gJ
z{4U18V!)*;Y2IK11w21CKSVrespQAw!WKZOjJ6V#!cEX$vnS*E-#Nk~ZJ-KqD!>2K
z_Nm_mIeCLAUD@NQ>t!c_E0LBVWB#HMkOyhQq{PxKdShfKa37`)0@wSCaqVu<<<w}m
zQry1T$2)J_LeiR|s3t^56?n96kVY+}ag4W*zJ{2T<_PRh$%qSdF3om4!(Z?ql>(;w
zRT3aQZmK~h2Y}H6hY(n5Ks*5!MhV-HNVw^`DcZfs6tlJ|VMOEqY5e9&$c!W7QUEHx
z8c@2BrYZI(FMynBsbU~snIbjP1sLLq$Jcn?ciPmR*hpU{=*RG_D_&S8iJJBHIc!Ng
ziL9?<yxVg(bU>N2()eY`5v_?BCr~!f>Ezhkt8sX5fsIRTOvV*TOZ_<b-M93%-?K=L
z{>|6*hq-UNdd9nJ4JbSp*F6tkSs^ZqaSH6dPPyqC#(U<!&TRX=eifw2J0_kg8>Zy^
ziZ6*T(g5ckP7uFr_ZhAjy(dFEf;DNRQ65tjuA&-zDkmhTDkBmfmFMLm*h9To#^Zw7
z`bQ@N9G)E3qrn(uIpe*Q3_UT6B$rQ7zRg!jKJc8;Kp=eHv|jS4gLc*xku8*%ERL`{
zcne3<>*Z*1tFACelem@V=~|vg8z}1ei;Mc+UtLu9ez(Bhtwq%jyr0wS;}6gA6Yc=q
z?+DcO43qku4<~r%f8I_W{VVO{$v>Y*7yoA~+3M%2W`dpJ*BAE&-&<_8K9fJR{smlE
z`$QZ?moQrNF)0Tq>p2?AHCe4M@dM1fu%Ad!RDr5lU^E(GG}^<R+Z}YfD_GxJ$JX{L
zR#tLu_(IBqNz?F#Naz5S6;dw(`bTX_!|RTM4M7y{$QoH>swx-k2P~UYCce5Hs42Le
zp2~iq`%gWM2{_PR>gL0!XesA!!3Ia5Vopui%?!Jcl$bSWo0owLOGHOywex@3_wt)R
zM>=5{oc_%t9DzF#SQ4xJ)J@HGftQ4_#GisLdwkT!)J{n$9cnL4KT;E%?|=6Ons|(o
zBVG~^k$FIO-0f`P&dGN$tUpAWQ)fRRLx}-Xd0#~VNcNYber>_)Ayg3nVi{lxpMp(S
zq<SPpz|ogjYw;iSsaf<NiUBR50rr&b8F2k}02K!hmL-vi7sK8r5mXJ1ml9cm{%6HK
zoXp?Dx%M-dmn4D|BTnZyI2hpCwM~5DQ(bgdD~!k9U^8l=tVL%;wdsxeFz#}_QMC(P
zj!RF!-o4M=c<AEFno6ic7+U!7y$LQo*+xXw3M3uk&^OcU(B?kM7p1aWJCj>yVcFpl
z&ZY*MH9u_5in%A*X$Nl6XZj!5$??96UcbU2A>Ytm=NvsF`8wo7$7lI1{-A6Y=>gQh
z*2NgDl^E5O_PUT{Xlp^-Oz)`C`k^k7l(U!WsJs&)&wZ3nl__Oep+A^m|KJ2W2Z!iW
zls}vBzDyNZ^cpJDYe;iHL_auqQFl$pP12^?oic8r9rw^qJ7}dD^R<TaUECYKSDs8h
zz@)lYHqAIs<E)(~9kh~jL=OB`iR0gzm-oIpt?ztLRD)CE{n64)`@?wrlsEu(gp;_z
zth#wJt8V^{JURDYx1vY?NQNtaDNoM-dW2@<Wbt-=xcl0ycW?>kRz8znSp96g)w#ql
z)o6Z%MKM7`vZowH37JdmkcZsFTo$ZRFdPms7#!fv?Jl~#6>Og)je%8kyTmUcNzxi=
z-f(?uTZ1NFO<?DhU6GAcs4?yu4LMZ-AHN%#VEe{WLNkQ&{5Ivs$ZuTE(DU9DsOFtQ
z5Ug}?IY%oU*~}pMkC4x_DAScc1<r*(|8hyB|1bYtSl^B&p*hh|=`c8lS2#Q+cBJh@
ztq#LD69ytPI*<b0b)Z@_==BnO_uIG8KRyQX5$duK0TGQlJJ}Xyi#^;KehYclVxk)f
z`B?NUxqnZzlYhbourfW55|A1oi2&tp9vCrDoQj~TLmBp#V-AhJD*+3ig_TI^^K$JI
z`S04AICv`LXp|!56g)e*CUOAcc#gyIOE}m0gc=-jh8A2J`Sx4Kc<k{mdTSB-Ck<v}
z0~9>VR7shBGv+@8ggg_UchJ8tsg;-5jMTmq0s3Tfl+QtiI2P3-`nl6>;lpba{M?@+
zgf2wPj8JP)v=a*SrL6(k)_d3H#0CVu;9TM;`1hQaqSkjXz+<w(qF!k$a+#nIu3dA&
zouj~el!wJU_~6$U=U3_mMH!*D7Gr%Y#=(b_5)s{FzuE(`GV4H)o_;J5zWt-0DVx>Q
z7*9&v+auMzJ`RtLF&d7jbuLHwtXRp8qu!gyqiI<-S4;W(<m)5&pGr_;Zk63mR?yB@
zky1Xt8lpeFij&#Rx<9*HPO7~+ii$Le(snx`!L9tLYNo$G$KKyBiv8~v&Eejn>Z??i
z9e;SE{XYZ_fE~+*WKkUy3mp6)iQf7_);#pTZbwi4g)F}K@3+#{7ivs!bM*V=t>HHp
zYuS_O`ITql&6TIIl3zkm6__ptSk%-kz;C>U?+HnVY?E}4isC7nW`yDJ7^6Xsd$-zH
zStZrM4Xm%P@CHO3*2ozkMLB}a(37rmi+P0kq7i4nbm^5e<g)p$`<Jv{wL3LiC|^B`
z*^fbUUu1B9W;1XUma3LyLkbn?)W(=RxK~j-?J!tQbSdgTC3)<03IanOh%ITV+xGwn
z90nstE#0k>{6go*?%RnF8G*|+7@`!tTpQK<)AJ?5(tB4A@&47@NLnK-7F2%ZN0P`!
zS<=OO2mb&_==moc;al|1&&oRNnaB^r|MEI1zq6)4k`5r}AyxvQT$e_Qfh4N^-iDjy
zPAEntzr-~H^3Pa=pFBd;EE(M8XKE=2!Ms9YAQ?<S#mIQJFkF0y!TcsxvPXoeT~~<H
z84eGQaQ((6KKUss3#>62dxy(Va4FA<NqADx8gbl~ASSh#&fdB}H;BGXT07XzUFn<}
zce_P0ES*jZ_ip!D6|mjOFdJ8*>0$PcIU;I64G~el#pHqAd~rU94fb+0Y3r1oOP00u
zK8k=iYNVYrW94c(BBw)mBS11N;mM26`EZ0(KW03Af)OGkPoF@V05s)#n=y9ZkI`!R
zdS5;VIi=M0I+ixVR-%`sKt{Rzs>0Fn2q(uU1nXna?_)Nfp@y{2rCffJ3Z(B53a$U=
zNg!^Z3nZ*kpaEKOi(&ngqWox%*<v4uqn9z5-KnRG!?Gqx-#G1NNtSn#6}p>yRXzLq
z9Jl}0qPq9&ygoQ4y_kP-lz(RQ{}4C;Kim-@*r=+m@6T}kKhKl%e>KO$pUUGa|Gjp)
z{y&JK<npAvj`xq=ou$WXSZ_ZSUt0Z{c)j~55S_=Ym|$LvP&AYx5NE(-R;9E|$f-5!
z3lLmdps1!eJ{sWUXb)-HLw98bTicu1*j_=WO}SoaXu^SKyFriK2(Bg|DPpPHHGR<#
z`VVvcVf5?_W5~I3uhIzHYI6g9FM~;)zJB<&AYwNJ#OVbrc@z$laL9nG0tln^aJx3v
zbSMI(kBu1qPFq|zOt}XCe&If-MtFdn^0udygnl0Qky_de=<V9*C+&#p7;UhFlQ~{|
z{yLIufTEbXKI9w)lPqv{9{a;r(O+CgmglIMrSHo?-Tx@UraV81{ul{RqkbU)(pQbV
zS^wYk;l0A6D=Q5Qp$xgYY+COu&mcZkh8jF1y2eHnFKxS*^QlrLU%es%CZ50wGpT3-
zaMxXOY*IAQ1bgFGuzK!c)*z5aQKE^4c=z2SJo0E4ot|iCkdh{kyg6}!BPY+^B6lli
z_1q3`05zg^*L_Nh!r?_af9$VZ=_@Eeo+UUQr?`E6f~S6FUEp+XG8I7cVRec_ifmSe
zPDmg!BZD1Ope&c@#+DNb%IZABU)B>nn!1se$4kr|0~|FyqhWztG!AVDkil?25R^%!
zdAXkjm5hoIQo9#pQAB8QjV1~2L}-)2r#yZdBcZRP=2+L5PG{H~3~<u#qdz>vl-T-Q
zq9;N;!rh>%5Q1Gqde=ycKAaIxi{=vjEom}j5kdL_?GswCs1D=d>=q73@0Www&3aZJ
z)`%8q68G{}x}L{ar=0&=bu|3@i~8XA7WK{>^ZIa5RFrR8-tW$gKK`&f0Cp^!OF9<S
zezB<bUyGvGUd!VP|A$WUu|J(f7yg%>y!+**p5u7-VtF)vb<s&L#2YK0iZ87EOuX5>
z#F5*0-p7>q0+dALvOMj(Zp{0p66&w9gQJ3(<5cEya&&;!%^p_PR<N<LiOsDpx@%Ha
zNE<T+grtU5tq^%ILP3teya}X;6}EOekB9C;*f01YARPvqWH2&X<Il~C>~~^p?5zBG
z)_%?9g-w~xHf9&>OVNMrBXN2E=~5<_1_<`~WuqM?s2$qr2}>c(*`j$l9n%**sO@1<
z=S0}1sEvL|@Tap%Nla=ZnsArD#jFn`Q)h&^Z8UA1$vUcXfLr~qGnCBg%rUY56|7MB
zo+Ey4^5b~`5$gbu+KCDPSxSI70?Y$YfgVnpFJm+gy$H(DPWuX6uBLx6r9yK?d|k-t
zl|jEz(xFCbGH>NQOhhFXCOywuxB&zUpG@Dzc=5Anrx#II6(VlCO(?)VZhW|fPkfA0
z0Tqt-P5N31YR*{`7C=}}@8+_>#pdLkc22{42oxm6DYq!zqZ~?cM4sok{^kr%e|}w1
zA5nx|M#{n_JMIy9s;P+W1n7~q`!W8DeP)=pIE7Mq#LEmNJ4o#Psj!|;iI`UuJ~M~9
z$@vpkIuev4@?@liO?CL9{m=Cg{I;4M07kBom|^{PJ4K67$%tC#mN+^X;$(1)<Nh(m
z<31MU5VSW^4nIy};k0V$sW~aqgMxlTTZKFe>D*|lfC=)b%SOKycNuS*H$xnZ-pBFu
zgLqutt{2roiKu92Q41^SCY_+Hu=pnhcK&Wr?|-|f5AH7N<3%N#;?i!i4DFvq`~Uxr
zKO_!-9ruT~#PXk4_r~+;-fw5g=09xXu}|mG!+$Y}H~+mfPB+SWh`ar7FYfh!Fze-)
z(sR8}rx$ylLAQMw^Sa=2!bLUY2~X`Ptw_&9lv0L7Uau_jf~AUQ`$st3+d-Chv9`H}
za~HR8?m`c(cFN^R<aIM=parz3=&g*HFCcy2H9in=VQ1h(V$)X?I02z0sN5S<Yx*ns
zO+Akb;KSNrXH+Cu(tLwY$y;P&(5Wd6`f(>g9<OBMoC+^e<2?wcq;Bm=J#wKNjBe+g
zx8z~=>WaMm-DfNe&kb%+kre5^+n}>1s*cnk>g~7puygkw($+-O{sI-W1PNNn3f|fK
zZB+39DMjrh_~V=*dMFx&bMBsux@i3iA<#GgmIm;t0d5a$8@>0}43}M+!b1A9@ec=E
zS#`R}+nn&>ww>NMA0n$P9g~gmE<{E`3n~@@(3E|Mi^n-i46rwN1y7v&b12KPs9jJE
zY&^ny@9g7|M;}3V4Hyq1%(=o^<{`Iq6<l9i8CXQ^`0IL+fwbFFk9uEQVgxn${||w$
zf+3_dK)ct%?GGlH3@XlP&q=^bx>YPqLzg;O%E9ZIT(-*-@R%?ee7@tixaUdp)kFD9
zhf~SZ+*-`-Yh0P5eTJ<Uw<?{{^{s$Kx>-L@$(K%RfOZSwxU5o{UV}~#SXpUdrAvNq
zfs<h$qtOZaqX9<4A?8HhYo<U{FrrD&zOs&4ebTR8BOYsW9iA=33#k#+q`=oko^+6<
zEgq$!Ji%!89`4QWVX`>Dydqic3R#xcX%eTc^kQ10IH~I4-&r(wetTZ;y)>)#4ws{R
zS&#ndo;LPp#{XaD_(SFZgvaU4qCrs|S4DOFdK|s>A7=5T|4kk}@`YA>`7h@2#=o1y
z$;twEaijm<?1TRA*6Z1$>1O9s@kZxqthOFP*+i@~HK#H$iWW>w&P`4$&5>$05p$WL
zs7UJa2uBCIxOsgQn_FvG-&n)ST8Cvz=^UJ4&V)12tVjg`69|bjP>L{zuyg~cGT;xn
zNc)Fuk_j(U$`5KQ0Y@N{F>?9l)8xVcg;*+y5~$uP$Zh9x5tNDiSaicszk&wF;12<N
zL1le)fZdOCN{o|XgBqMbQDZ+2PMJ`~fp{1cEoEJSKhr3|(a{udzfO$)2`W?jQ@4rq
zA$qNgxHtF#juvksr}mKw{hQbW2XVaX`VM~-%}f2XIRR?)8Pe6Ln_t(`T5^rlU7k3Y
zt?C%aT(T0%&=>@B&KYbre@mk$-)ZfCLdISqed*p#LJQJ0kemQ^yR4}S3$xIzrd;)K
zJbe?F7GFUcucM+Ct0cyf6gWOO#LXL<`1q&R&|9rAo%jY=(iMOwiK0q6pUh#kXXw-|
zP50l=OOI=K_tYYJi<_<R-sUB#e&+3z+ZG?}6gdBA8<SzlrE#vpCKS@KDBiA9|FC5I
zwNs=G_i62ou<4g0FdE0eo`ZwVq^yV4^Bnf?*MTejb55X%6WMhJsX%Q$mSv)8LB%D6
zR?!|pim0R>NlgBe;SO%??_e@J!fZZ5T`hPaGF(R`_YuMM#M&2+(|1j@;KNF%MWK(J
zN$PdcidtxAJr=$qCBJF8gPrkJ^k*MpQtXg2D=}#p5$Hr+thCmN$r49Vx>qN6|5AVc
z&NoPr@Bep{e`fUmO^-js4nTM;n--eL^Xl$+j=SF-Mag&b_@V!>9X<K0t@y%!(9O>O
z3Xxp~)q6NRd1Ds$d-Z1P<LTwKFJgP;Q}Jqg36o-oc`-y;6ETKV<7B}*Wj5U&q*E2O
zl9kfJ>2!?g?S0(4-9nZTe7cJ5bDLN{*F&cz403{6DOX0(3z<G@>sibwO%S13NW|i{
zM(#vMcO<#Dr9j&tWezwJ%{?xUgagt%nLwgu-LOtCKSIctv$CexB^Ex4Oj^cBPLxx&
ztvq0b+f}+KIEdf_D)ll$Js@d^!HLT$hmH$45+X>HBcZOK0clp@g&%x?vKXLAC^R&5
zgx*tfr@vXbkDDi7Lq>9D9ASyzkGoi9_Af>D9PLXLK;qH^N)FUi0I}=odpD-G@w*^L
zi=@o1@yDpJo*91~Q#RO!0@z?V2Ab2hw`V~vjMYH|?xJk&4K)bj=OlmUUIBW6l=hgT
zkNxq>cxe4kqN-*{X{@RWO*F-O?;hcaC)Utg0|qCJ$YoncJh?TB5tnNJ&8czl_L7MY
zxG+m7l}SYSDBPj?t_EM6Z&F%pniO|#OmXGOwxoYJQxc@21Rhf`#VIMqjX5jk9E6g-
zj+85NY1v~7)(bB<U5_RO9tvaWYvVYM>pCSj$qEUXj$!j#(38{dJjqW}$s>@oB4nKg
z?Y0_yT3{tGIHG@)e~+*j*0_G>SuBb@v|1FM6G2tgCE1@<5}$9k$>~l9BoTj!QbJLN
zJnA7&drXc+RH9h)F`8Y)$>J(Ti@TUr`>2|!s$sU#jn}Z2ZQ${Z3;4w4$M8>H|6W~G
zb)IGA-@7yV`akx2j#o&%-{_x3`TwTJnFH`Il_I#+pI5hjD~Y;)KTjUI)QYeCJ8`q|
z@3qslU#goqPG+x{N3%C)?V~H{xs_+q3%$>wmtABaY`*AYR*l#ZVDg|wz(R(SsDni?
zc(>ugWFVSiUW_r@Kg7}AE;`*F);88~?%WpEw>!vMw26_(P|b>4<jK?9nLIcn?tsV<
zTL|oIXb@S48AT~7@a%buuXF&M5jOQy*Zt2)lyd%342lci?DLeI6f*NYlI);Oj?M%A
zTL`>bgkvmd&m{BEu~kTLG~!@VpYU*uf40$*52df|75RO)lj7wUKE%P^J*4fa<g{7y
zK{jq;>*rYqZ{7R5Ks-kjwGky*fQk#*Pa=QI`P0wV04UX(eh~s<!k{_|{5R?VsLf^^
zM#1-?O=g^ZGMQ=mUezi?ugjSliPq#Xu|rT3Gezc_{$5TZmF`0C(9Tr$PmR7y@c6%R
zt6z%t(;P>m*Rb9D0+Oi5>xJOlBw672@E9N7*v2P5v&vk68IiM<aW4RwC#t#TJmG#H
zjE1EO+^uSPEa#cMr@H)RyZ<E{(xBDOaO?UEU;1OzW;Q}eT^_YC!Yz`(6SMOZmy?Y$
z5q%Ze3a9%L*T#9Dl&O*zxX9TVe{&Xmnjoy;iI_oZ?ZfV?LJ%oFXsd>_QMug|d8Y>J
z<1`U#j|>ig(Mf~hQG;?yBtT$un-BpKO`dT{pOA*tc??iCKT#Ck=e3$3OER=bayMOJ
z<gBU}7|rjXKfi|l`~!~ot9s1ke$-(yN!sY9m$8~(jL)r{ub*DKj8Cmy!b9CI#_0h6
zupZY<lww|-+#x}%Qo5`K$ko~Lqd3kSfPV#NplT+~w7hn2ifey0jn{r7iynF`i!T3p
z;tOPP{yCcPcTb*O>>R%wchd{l=su3^&XZVAwzx)oR!^`fC#YyqsH&TTXL%pcssh@v
zXaVp7uP~iWFu8k--Mc$zcS(wP6<gaISlc4bfaI0QWhb#A>RDf#Gcb=(P}HTGSAr61
zzK*PZNKmrP%fXS}V0%*3vM@=QmUi6=-4DS=xOCWN=d9H-#JQ9ru(yPfjv009<=|Zw
z>xL|Q>Z#H~a~=rsCiSwoK~B(r3ho)dvopZkZ+wU(pP?*BmXsnLLwzfBTbJnBVlcnP
zI^!IU8R?UZIggP=_vBF-0Z<IRt0Cp95=TMm{M8}g20+vx$d?bgdowiH<?;h$B&@2`
z-tK<P?aqB!n?>IOtJ8H+URTQ}Yht1Eb;i_4h2USh$BIR%sBN%t1LQ2y36b#Sd2_<0
zT34t^5XrxBzP)7eq^no=@z@iqSXl%5$1xLHEho)BQbi;{|ID2OXhw5cHP_vzSXMu8
z-JLEm?l>_n3^eCR)aZ2D*u6Wzcvzy<ilu+Ysld`92!T_j$*PzLa7`@{xVvVz4wP&v
zN_pHI$mXi+1K`s7MmV&TfG?+&$XgbspT9~ip=UvDjWaR&d7I|3AQd&WxEVD#z6(tH
z@{g2AiTO`xJdylbEkeB-b`IzvG&R9t%JY!^&EhEXgQyXc+;fz3<etS{uE}qjIcDVn
zjwY{TIR6miau@Svz?%)1J;o{WWEEM~K{wyPO1_1ad?Q}XSFx66@k8zPnmGMYG-r_@
z?itb4sG4e45>#>j#&LH12#zxc;9tubXi(OJs>I;>6z}}sv-rY)*2c&Gcq@78ucT4@
zSyES@*SF)_qjzy<5~CZR$7cJJ*yw&58|{mzng)x4WM!wQx%rU5iH=+Bng&sXyU<{a
zUNpgUKE&+q0ru~;khfQ`zPX02t#xc{cG2o&3Zs%y6J(%XB|UqRA#PN3D9GEJQ{Z6D
zfZH4z;Gkqn_EgJbI+<5(1sp>52JOpvqy|46LEH3w&9>7GFr%i1!6GKVC-}T7I}Ot3
zaVcXUP^q;Pw(zXsMlei7qm8g5TQeakFFgAJ8W8D;+d8VYgKUJIY#o#NK5n0Ui=lsl
z!>KWje5Q8w(-yiW0Az+<qI}Z=kbi>8Xc|C-{WX;!H!T~n-~~Pw^U$^#(9kiEy*hwu
zgXiYAQgKr52Tpw-0KShVts7LVL+PKBrZ?E&nL(4^C0T;Q$?Mo&`8?8iO&yU6NxH!C
z(GhOkIFBcuA{3y;@xF=RnS(}_M~I)?MUGLIppi}B;5jaezTZXPfmiBnwjn`F;XES^
ztvtoSeu}+2Gd%L~6?TFQ>JObo(;JX4dhb>ZVDWdY7Sm)6rMAKK>j>qojJfacZ5eC`
zO`f?8L{K%u&l>x={L5Q3?()%8W;r|rMu#<Kg9gQv+8_tDwU#U>g-;X{xtK1O*Me21
z&|@eaf<xDx5VRk+SZAMRBT1$Y7w>VDKPYZvQ6I{BiAlpEM~V(w(I%%a+u0g-;mgxD
zQiA<S&5!P=D*1DX;M{ISSYOEyH7&HF3`IkT8Ziyej*sd%a{wNIGf>ofv!dSnYTOyW
z(!v+stIByEqf@8xB3|GSgJu__$yMALe+R4CQ`qi)1{<9xu$mHiu)w?+u*N*g@N?kj
zONmUKoXs@T^~hl$BU50pm|_3k2@da3Q=%@`Hde8HVGU~=J>*0nWYj_yJMq=%9OU&c
z=E57O3Zd(n$dL)y`jR<=&4bc2E1G8G9~k8&huwsV9F%EpfEq6&7aC9>5Er$5pOl~(
zj2~zf*i&$w)U>&)MNmx260LL*;qjFQqNyYIN>aaMF!N4|=bpWR<HJM5`2r0|G%~DQ
zi3=7bH3{Eb-TN)B;NY;8BOss8aPYt7{Vn=e!_Vb^ruL^IKq17=ngHAbz(ec~#W>|S
zxe*Q{MvMN9iEZ&{P}b>ZujO3=<E{)4CM(v7)}Rp@U<GBC9iV$s<v%OyN@!cBu4{c9
zP2R)hwJ)PA<}7x^W7&*x{rx>$erOfFUW3U<43vRG(khtq>jpl%JiCWF0@7#@%X@A7
z)Ay&^5aJ0+J7`NoaYUQ2!MgSS3{QS$#p^@=5XT{yasF9YYC$4>O=^g<>5aW5kAgYw
z9H;=qF(RLl1vy<MQ;8#KBLB8XkVkU)G|lQV=B7sDdkshU^ATw+5L?)%!l)pL*1k#Y
z+Wiz708o(4{l-{%Pk{C~B4fXTG@<8AB1r>G%G=l<-^66Gi$!&elBxpYiYs5Zvt@K1
zB)v<bSb4h2a=qjnbF(1&WG*713MrBbj%(svq)Ci++Mw5ou(n1+5TixtLe$3CIl^bh
zM{%5u_P^0#%UJrRE{eV5Rx&@XqVbh>e17qzNB#qRaPkA}PhUY%^$|65jLWMSo?JuJ
zZ(%)u66boK!+QI1bQ5k^!IcC>HPhxqh6pIb)(j=*aY>f8<Sn|!0<*;gv)x1N@3ztE
zbg{O+ijA!eY;1PW?qwXoaA_fJChZ8#s#X)siJYaq3Do#T6d7=`KhOaP^6qj;KCele
zssfrG05C{5Xyl>Ic~7Mp^c*gy>cvv5hS^@pVZOlw5*9f%LOYN9s@H2!D?_KGY7#Zb
z+hV;a61;Kk0Pnx^p_Kd)RAO4>T=QRGt#dKn8$4eR3xfW;oO37RPEnHfMbqeC;c@;x
zt2wHY8bj*@NDOC%_bKn6Xx^2eaN!8ZwVN^UvAdAi{O8E;Xq-f%+8aSL{Pv^4xyxcU
z40i{<oT#&j<~s2N44H`Pm|N?L@wc8BN<7rCl!dFK9CcFQX!0^HtUQB=(ixmDrtXFX
z4iENl>-Gga_Sh=gs})zUNa<mC-Qju)exkV_yv7?~vFy$va4^3bxUk|S5RBr4TSE|d
z3%72JSdyEfX;R0N9vt@B-tBUYc!HG664v670t@X=?-4@c^Zv3D?Fg3F))15>O0-s=
zpn8e&sa#JD_W~FnH~eoxgvyC_8YS|o%6D5EZx;FqN-MpdfDlNjBOu*xQ#QzxHqyL{
zEN-z-T2UR~aP}ekv-dDAZlP@Y{4B{~O5zSOGVoCkN!mr0^!WXhvzK(3x*0?=;6R3u
zGT{plPavhA2`xw(w9^RPtj1awAXmFXB-msH1*Id-j*sj(8|?>j*ycpMeyXEcpo}Ky
zwI0FKn-}rO)-Pc&yN7#&H!+#tK^+gVsE0UM`~U~@7m&xBSkIrrcJFi8=sbzF_#ze+
zmCg(>Z-_uhQNM(+j`^(QC)w94C92VuzToB?v&k`b@9iRQwHX=MI=6w%trfI;R!u-#
zyXp+Af*k<j4U~>R7?kX}C{bGk^S%?v4W7;z=wYQvavs-jfb9;k7F_y2P`dLlue{8w
z6}oakML>j37J|RVKd`C;`rh<(q>G;PV#qoag+v$(rg-`JYlzb+_j8bO6k=vw*L5pd
zkLSfnee3w2Axm=>!l9-lLPqrZ`QpG>=f14woImB)tqUN(CaKv8VC6p{3W^wzR1%1@
z;87PRmSY+Y>^OKD0hNkr1*Ph%hm7<f2fmchmOQVC)wq{yH%Zr*h2dcCS4XBxtK_vG
z1~cmDTGR<(6`Bl5lcSjL;Arv|F0OnDi^WvxI@#x&<Nfz`aQR_U!vq_z*-*%s=H`gt
z5KjtvQe3BC@HzLUpl1@)wmOad01t5Ys$^1^Yo~m@LiY4CIl|N(@MwRI!O;S(m6QpJ
z#sl!f=XD3HI>8(dTlY?XGg^-3@82N;DQCW6U!G?MpSAXLSs|qRF&}~ZDU7M7!if4)
z(0IyvqEn<iE^@Kl4bn}V<#J=YQd^V!+KQS25&Ck1$zlhi#chn{MBF<et`oT&{Cv{5
zizI3ziF-)Xb+poT<^sqX<k8f$LCtH7(gyUml!$+1^b--dqW|SdgiQan6QC1EXtyf#
zx-q&b^}*<3RHZ=*;D>A~XU79Q&K!V$<HJu<7T9d+IV}iM|Er=gN)}^jV=ey}u(pj!
zwU6m+7XxC-79XN+hA5+b>=*mkKY9syyp7HLNlp{2b)LX_yoqTw#jG5mC<%TG#B*%Z
z(XgeW+#Tidh^|aZU6^697~x<~M2GUc%bbCY?R9K!lQTfXvltbL-J~_zlny0moJ5C+
zH=zHtd8?QwRsV7|>ii!u2y|E;)dQfq@kj$y$&E@S0WqYc<GaD4{2$)EC8r;z7|0n=
z<76Kz4nwGJr=RF_7Bt_?f;<vkbyjJU635`BXWz$S(Fd}bl&+bukQ$#nU9aES|4m{2
zCmqDJOB)YDZ&n_Kn6NlbxgD&q+e8Dvx&TVvU;gIX?Gjl^Uc;wjNkK_uFo0@;LQ5@K
zt)$H>*12}_21aW%Z0T`@s#Tlb^6FZ6=}Ix=Dams(O#`}a+T1NIA!T-UE_=ERZAUG{
z$sBv*=Xvf@>O&kxnp+i)4-fF+2V3~qC$`b*YDItoLQCX#odfI++$X{#S7<4YKszUJ
zLVf#Q`7v0Z&S9>RQ%{aXj{Q4RRs|dotj&_RCjQg>(0Qg8;gA!b0aNE(+aKGkck4zw
zIC6;|8-2=yli_cez(+45j?QQw7#$ILuf}2`jC~;s%O|9?Xli9jn44rw$pA<R^*ikP
zE&avoA|;o)z>ULyf<<wiVSGYzD7}?O+oDQIhC6K`jXIjfqPl&ljAD+5-Xcp3bGfUK
zTAAQXvnR=rQG=_P#DG#{2|@i0T4{_<7Nebz7D0{9d8#M?rykNe;y$TM1ATV<$c{4y
z-~k>KXf#c;F!it$#GGyFqMj18AJbPfIokO{$n$fUS0BT?*u`wILk)}2#B)^9A@&x#
z*quFxEZW9;>v3G@J;R)VG(L|>Im5gfpr|QLK+&rC0UlZxP9Ep6U4%-=z`U4XZ|4~M
zJ1yjS4=d}d*gn63we21{os69ZDu1K%#(9Kx95EU|ENPM?7KB{mGTo3&Xn>^5%^?w3
zUgKkp{*9sUH+gOWtUc!f8{~Q|`4osb4c-t2*;RK5q3W7MSmp%quT!A2PMc|iyp`b1
zm+xY4cLzy6L0Qh7(c|l=D{cn0J9-hr#k*+d9Z++5N%saUb|#Kl!yha0Q}G`w0i-Bj
zTm4#TAR{mlYC>#S#gIb4u!l3%c#}U7rURVw6O74e7MV+}_@Bk-nPi|(EAUU+`q%!(
za=#AdcCH(<L#!v0{F#V?bbrb>VA3khpEeeY9UP3`z=hsduvm<Fyql^(lq_)l>OLNR
zc!PBprkw^;LIGSVNF!-US8$#o?0D$zhtfXs;A?JM?Aplc-Kj8-%t3_%_!=d04`Fyh
zb?#iB;WIzCE?`XQ+4$y6EFC6%Wll&a78Ld{FeHJZd@}mEGWIjc<FnwSb_Au!zCUO%
zIsq0#aRTgllHLa)RV=J)Z4|}s`!RF(<oOWXH$y#gb={;rx2_MWd}-yB_9)OaQ{*Y-
z@V5|0E6Cy%F4-f;R7y#S??DEi(j&x=QI$wF^3p?s^ZU+$q!QO8&X7`hYm^~N$N@++
z`ft!p6RhPaItkF-im}+rkkkeLJu0hNFyQ~PTkqNNuX&s~01xz_%v)SA<6D{U+|HGA
zs`N80rUG@nV4d~^E%fro(Q7>hn)kEvh@F9=+Cvjh&@_iQnBBwP<T<pHZESWvhKs!~
zVzu=c>Lx)^jfFG7a-9-4S~oKvQQHP;#*2PA#bPnR!QLT`_oSMjN4*KQ*RgeO1zlq1
z##Gx|bHvhF1KQL(d@gB%Vn))$0dYzUVr+s(&H>O`XP>#Y(AgqV-o&V3tIy+Vs$hvK
z5NyS+62WN;SlN|z3{(P`=0zDgj~nzhrR0z5`S*86xcb%yNLy1Zin%t;@jQk+UdN&w
z;P&A6n8i#sl5(KNK)3un$LSow8{1#_0TwNB>s)OBB#L_SK5GIbxppC>nfAVM?8%!X
zjTO<F@zS?ecENDICUwoeyS#P4AF$7qJpU<4LFaI2=RX%kN(z9}JlZZ;82X-5AeNfu
zxf%y{wsPh(?2n(vR_AlB*%fgqXv_wKV_bXh5YK$}0@^DTX5<g62oFcdLDa4@g#-yh
z99#V(C519CA#hJ@PKC19p*o^P!)i3Uy$*J7^|^Ge)dI@`i(lp6r{0FU#}L)h7rSZ!
zz7{Jp)e=4GrbiJ!@n0x6&r$v{FdayV9+l}*2T&e$o@a{e5Q&fSA<ThrGJvkvgH!fg
zs*_ZiUgw;93S$(LLm-;j<dh}c)vrK;O?2}uqzSbmlX)zvf07QPXD;0b)!}6{O;)rZ
zKU&JF2p7TrV*F+9XT$-B5{>?2wBrUVS%$S%8=Y2z)kiw$6S=Xjkn;X0t)tG4kLEaY
z03PHayH6p*Dh2>iNg2JM9gBYDJTNWjQv0sA(aEl$lU_#IQ0KvY%oq27>WCZCR5-!T
z<onne{Q%wMB6TaocIR_g&mTb?pU1qKV^)u_sI8hnAwY+R(uY{2r6fY-3{bvyv44!C
zy*=E_I#?yn!1;A-o?k_WI0Hm_qm4SR(9RpQR>T1y5)vZ=R82q$RFe=5U{_6Z2k3<5
zD3_H7Y2$LDcj7_#$ls`lVe_9Ly79ULBqmB)^CDCu;y)GIYcX1F*=R}L_oZjAp^isd
zf2?$Ni{=`F{(E?P|E~e@3{6bXcJ2USSCJ63`xRTIf<Bt}7bsN9`yvnlP;#Tz`Ojc@
ze!Z0xI_Nnt-hp_G)rLE}t*@y}4bV)TOAno%po$n#M?jXpQ~rWt@M36uKLBY|WaX&d
zsSxMQsxnM{kBDL!nz)Nuv4?~4E4bMEdCbe9@EwR6lTC5s`YtYC*}zIK$Fx(i5oBRJ
z7J{N?Lq7UuK7c9gS){9Fc!DUI3Xn?q24iAX5j=bfl`m=OHx1gI94E&$#wR6n0!DpJ
zcbGm#(2Y`ZQr;P0*(;T8W>`N_^}RO9?^2^2xt?lX3wdt<P;aUExItC=Zh}OLqx&br
zF3O-b&%9$pj;z%JiGQOaQ6cdrNPEOoQ13w#zZS!}#r%wh^ZVq)k(0)vJzAcswT$A}
zngEk>E38$tv?ewOm@qDBZ%vUuNB`subL1Z*j}qibj7}P1C2w)hjo!Hiy(hb<ZuF%y
z2Is(dr#U-5qT|c~cz}nh-Pa5QBSR9kcv7?Ur{-J9C~<c+CS5Uj2GU;<$X=ATVzkiB
zA7O`}Y{poW2fV39)d{Nv&Z4^*&#&X&^gHO_GPXKT<9z35u-17DQE~yZa)Rlij{*~k
zlBf=l56yAX#c<RupD8UpX~EA}z3cd>kK=<KWY@aVwQze48%!X~k!FeXP^T8gEh(p~
zD^gPvXMpw*Q>s(;pXA?N-c&5SAQTFz+Rv6+aJ>gKj&qxsnj77boj+i?cq98+$$C_C
zlb_zI@EoW#@(16&fzjX)Q9j|wj{#OCw2=<_N`3`*hTq1hd=GiHDhz#!irkLMWIP_g
zsPW9aIHLT&Lj6kW6JlSg)s-d)M8>zN6W1fa6atlu=Qd~~ds!+)Ar8YSw1Ob;k=!9F
zwk~_^W~Y$?yi=$MKSlZ6{70Ptb*#83RR&V@bchJ(N-Sj_Iq+S}F3DL+>kJ3e7qHcN
zMk*B?S#gHh^cZiyvxA@g;-kztVbw~i3J|~4KXWBoO6N(t*sv&%BlVc?#Y$w9fM-)j
z=_P>{fNSc^#xu`pUS!zcnc>k-2`;Y%ElcC35W2|^%CpECP^B%kkESR;&BVE)lo^%i
zkr>Z}jQ*g(f?`@uR~Rbjn_kdba>PMJ>r7ya`|bEyr&M28(khBiPOjRZe_JW0)1V(D
zijlP7jfBhd-`1QcQ>tU@K2e^#)8^peW1UM~bDHm`sGloal<>#XhQ5!5{jd4|ERH$<
z-)pzfU5(?7r`w1wb`iaMSm#s~Lp%&3<D4BI*>UCoJdh)V1SKkBQcPs!RO-*GDx4$C
z(aSl{O-*NH=aGG|6yr?hB5I@CdK8`3LntWsUmRgx9-yv|nVeQ)4|ivGac}Z{wBn1{
z>^_YP-OpmZeF=!RFfXT=F=t>d`$eeD&sSkZR;0p3STa={%y<D)TH@qrfRlp*F8gWs
z+Sok5fvxi^==G>y0Zku*HmP$Vr3#2MAi^Y+E)dqTRt&f{^%AjLuq%jx?bJq?3dw}a
zd2VB#3*7Dng2>0A@<qWo2?=P>UIiO}YM9h&rFie19enuyEhL>8ijtb1h_1Qx(OsaE
zZeUv8#m?~S$g>qaFNrHTWkXAm%jXcYpOKz4_O<?G(3SlkWs*PFQgQhjEjb7b|2t^j
z${}R{3~86m)->s@qCs>FtaY#B1i18xG$mrA;0#DePBY}fH2%$5Fr-F^T`UU2RSlB+
z7iUOKF%L(O9N==X3{~91qBz9i^bK6>eF?LIPyl)ka~2KSy}g6oD_eNzp%qj`h0&o>
zK19$`jJTGh@^}T$-c$4JK8Q=wkd!sEQ^HWVIrUO0dldJG$Bc|wLbAYfJoPyt=#h{i
zr|ooJaNh*wZgS(tT>5Y@kuQ-*zL-@kw@U_pJ^&We1|>PkI&F+BM}7+P5Nr|!l>s5)
z(Oo<LXoyi$JLN-T89KJ1e3qZ50s0Z7gN!rEJ)MO{A;djyUM1nZp+REUePxO%LdZN6
zBug9snG@9Gg2=A)kM=yO0-&g$a{s&{q8P0t;@p2XPvZ5>7~Lm2027gk+(@59GqgI>
z{{0A#GY8;-9%8nQZ7mS7MZv=Ojw*uw4aSr>OO_ZBY-EeJ9_+I7l?>I<|43;o&9AUC
zP*#+`K1NxcAg)Jfq6rG@;O_WC+!=ib?f3$=I-kS^LI&EGn4GqtYJzI0Is?j%5A=Ku
z4i_0vX;37KKS$ZjF&ah~_K$Gq!#29TE;hH<v3+h8s~c@5*3q3L3AI_3^HC`ir3p$B
z9U_N76+TTHK;Y<rykzm88Uuznt>KEL51gG6eSbzSSizR+ixn27=xh~ecVlEZZN@3~
zclvnc`Kw4;V-)2?Oa8pxIOQy<NBOm#|B4L(9dSY>e=eoL41b>j&}-)3C4^SXhRFs}
zNq`(#YdN6i{F|5zmE_f_wJ;e>ArE@)L^u|j5BK<k`-2RMLC4O1Xu}4F8hFIl6q7{Z
z)jrEw0Ju*SJ%9#eB*YMKNgx|gb4%$20vFSB<OWpg<j~J#RO>p$;pBO2cRntqXXND4
zdCC#@pTGLfU7Xu~8eOV7ses{ekUpZkHzN*9%m!!Pozv#-ls}jJIf;sGO3PzY1F6lg
zd0r7WL5y^gv~cVF5oU9d(WcTk)+k^vPdY}j5Ko)(`jHCp0JAYLKB+M|mhU+YrY)8H
zV-RQ6LHm}QH~C*f7o7fuAurBFV|Is?_XYm5qAIRYkw?$4%wq_izti*(*=HLcG2Ct>
z17fQ^fBR~Vs-Ob&KAGnX`|DS72BZW~h=Hj(0~tBwS&SZ$|FQ<>E+%L$XLYl>!oxv5
znLMrW?D(jTGY8-S9|pfVXifXUOYe7y%$R7S#*b{57#aD>eYAPs*V4L%7~}L+Njc2Q
zr7gRIPOAqr522(ggYpDLc>v&;C2beY4(?9w;O_Vj(1|Z$i#Y?I!fNLV5?sQ(TwvCW
zxHmx^QHMbfkJ3S~xbLz?pF0<1BOzp9gh4+=|M&p6Z?w=|k!phN3q7oDwvo0{-9Rhu
zwwHD3vPFfE2!w<TF!{@JvKDw+)EgkSrWVL!Vtwf~z_reVl;U7J8#QQm8?@FUq@4&C
zt~5Bl6Js=<<Js?CMTH?6s&OWHWg%XuRjJYIT*0lwZ(vsKf|UQr3lIq31aJ(QFb+rN
zmHkvihyDq)Z;XF>KgU@5I#UNUW<TXU>GwM5s<ZD0#84xz4<CyBIxc|A*$1~IFLLOC
zH=@Ssk5z|3Q3-Wicz#i4TGSB59c9rXa@s^iPfV(hT+LCD*0>}A+(uoMSQH1?pS*;N
zE5Cr*V#H%ZWr1}x!ti(>*Wcg7r=K~Gs#~*O{hWHoXc--o-&icjEAMy*k^2)a6$eTi
zX6uWrAhzZLsNBMM4K_BUfLG2*p-%b&4Eu9*H(E&B6?fQVG9Q)7MbfpC^f9I<HKv0I
z^Ff38lpFz%Sn&sFrGfb;E-DXvHtDMP!*nyW<Uz6aCXxosVWHttr$a*uj0osZ8FLc6
z7?u|%4%Q6)g;ROHSA~@d^6whmqnyBx5t_wyWqBw?066kz{)<)sIO8wQ022UHV5OC?
zLv?N~sn^a&akZAk$g`R%k20jFiAcev25!WD7?I`dc!0;51Mol(-mtj5UC29<7h}j*
zBP-ejnNeiII_3y)BqfWCY6(O`({kVv!PrJGt;tEvLly_62|D>@wDSunYl?7>QItoh
z>mefpGu*)K*)`mqe4BL!#2NS;R$Gr?HQz!}FEA^|SWx#at7W$Cd)&^1(gGp`Q;Fr4
zjVy^lao})xg3(|PcRwIxpojHyYpgS{O8p7CVgyNHE^RkRTe53$e}YBC$bi^lxfhN&
zT?aI{>#^LmiT+ECoYlTlB-fy~9wBL`SiM-|nJ)sn*CU3PUwrO5X0sDC=>%ml(|A{n
zLtSH~bqOca8`v2=%XQCW^vDUIaTYFv7T7D<&$RP2y@Ow-Z}<J3ZQJ&huWZ}aWP7r0
z*JRta?V4<JCO5gBKKJ+c{14~r*!x`jz1E`aEXx~O6ttTyUg&dsPo8IUiVGf&3c-Q7
znmM%c)F1*!ez{z_dwuGhfKN=yhGDZYP+s8l0|%;wOeE4Khq2bGe23l(5-7uE(<_v>
zfUiJ+`-h-@S?Z~w1jPpO^eCK#<v(I2d4&y4$gWxXgDEc^W1#aoiNVOdwZDAoXAABQ
zotR_iv_uUU$`IdfCBtbrm8T9{gvpQgA0E|8hzx4zW71`h(EcQcv|g3g2u*qCAk}Ph
z_%_01?45_}WXq6Q_Gz)>JmMoDOGkXCo7p(&iQ*#Bza3uQpVRej@K6xE?!KM4&!A~1
z!m-*pPd$6}fOoVc?9rI0fAUqr??X{!@Y*B2bPOFwPX9~*8Cv9-zTo<qj=<-VG7ida
zI-UR$4+8U3D$Bs>C67cG;zjj^_?)ph;ys=E-M0>$uREv7gThczytz-N(-=-UA}V&s
zbawrgobOxVg!XI48A3H}FHP&LN+cJWr-i=l++n<ED-RFV<e;7kGmwMqqY`?Q+g@T{
z!oTR1!1rDf&wN@VB@rRMg~B=p&>;j^hOzPt_q-svQ_U4%=8Sn=!e$%3Fsy9E8}aW*
zXs=caaaTbnL6J1(NTBqF)h&#Yt}Lc>o_^P!(Lx0ayngs@bu38iTp6YEVCNc+ysp4?
z_8<U~VM<PgR~8cK$d;nRenW;KX!W$-g4%+!CmF68a9<}O$;U_|`dpxMd_LEKUiWS9
z1#_Wwf8HSy5dA4q7^A^vBk~tf6Qj<R`CL&NanTcehDP{Moz602q%3%O^>z}e-j6?P
zQ>is9^hSSDPUVxwbE!><?REw`D8{l#_>_K7ydQ*!qnN8a4w1dLdg)_QVlUJ!|GFl5
zHGAHgHPZnT4$Kfx$@%Fnm<^V6W*FhGP-SS-Ghw`J0B=h})0qC$)T^3FUaLb>MT$hl
zygxWeEGo<oW*ziIOUOP##xt5#w>^UGzweZ0b@eX*zzd3{Z3EpKKt(2nN@^i|Z7JD*
z45RC%J^-%;C`?d^iYRvDXe@hDRRsCekNvipqjD|?Rs#gcv;<8?L{!Ep3<6AxAac2U
zeeHN_)_J@|Ru&Q@#(mH@TA2vTtwfx^buyDm-xWjhGhrk69eyeD*IzdQXaYIO1g*pD
z?89Q6rUnhkMcELzN;0xu<PH@u=q=7$n5*u(gy4y9`w@ABV6rw1@652E;?wUA7PMXu
zb&!0WIYuQ_tHlg6rAkZ5UXTTa@89)(U#Nr@Nd3VAgDA17JH_mB)_pbf+2yq^N>VJ@
zwVFwpEhfUVfvliYuFfeaBh_x(Tfged-oRUE)c28s{~ngdYHSG8_XLDZeoVqfT|lUB
zTQCM>x<Z{i)${ryc{T>Nyu<39`4L^_P&Z@>#uaKC=@7VJvnYttR81fRi4|wg9ckna
z<7PB~R<MWwWdR-D5j|bFcRr9dHa6Tpoe=T$3^GV3OcGH_5SbzA&yw5Wogm9I1M;;t
zxO`PfTAr;KIX-G&oT4Qt23|+-`fjN4eQu{v4PJtAc3-?P4LomouC_a(sfdd*P#+B2
zy&U6yW+D9j2e-5RkyV~0K-P?+JBGPIP(vMbB>u~GFVs)&gey@>dc+SW%H1lkJ<fzx
z%KDuVvVWLX8eU5wy-<M-t5Cn60VYRH2kE4cAA8RlNg%_I2@OH(D-F&ODFk)Dc_Sz?
z@}KwmAIdM0`99FkjXz<kDy+onCX)9v&hD)iGOn_bWQLgBzj{NL|4}c*F&C7op@}|2
zR#wIv3yxkgmpuPs7C@rlh(2N&6;c4v)nE2;obPlr)qB%PWl4jBLcdTZjL`ESEpAP3
z87CRxb2#I;_Y55{n$AwUJy1soGwdJW-`k0WdQ{svEq_%o4JY#^RMr03Y&sNrO@w4a
zH&Lfe9Q?z}qA8WxXr{7yHO$4FU~?eV*y|wg3M!B$5$Kb|q02P1Of&R27J(moIuXA7
z5y_38Qh3<c&JdLPQeo3SQ^SCn|BB6i2sBFE5+qe-_`-)j6ePzWiCc%YEI}mNkgH!H
zPgQx;J0DgLtVB^$?jQ?9ng2$t1pfDQmFGu=&?S+R^ZyAOb|V|c#06h)E{oGAfLvM(
z5<gO$n2%CUWF=xdGbN#*w$TFt2#qozArzZSnT_Sw5}P`Hv#k2fjdn{jVB$bAZ6X&d
zV}iulevr5O(|TS{BG1OSns?glOJA(4p0b7<JrQMf98GY!DFJjaNJy59-xnKpn}s&X
z@&a)cqx8bcvySb8{rd)C4A&-ZzL>h$D_S1qZ3=zpJ3`u0_PM%wbZCPwTBu8+UE3tr
zqYRBASvaU|L|<C5%pb~$Iv<k$jH6GV6A0Ia-ozgZpy_WjC!!VhFl1(xoEIuPUq|>j
zGqp_(m66?IGpNsi$x-T9$7*#pe3!~9wZp&0{-3#at%cwsGDeebXiKv2(@ZpA6~)p~
zq!FD2Q;L83rnYtXt`TG4h_%&)@-dBCr7ViOkjvn#O58XVXU^6x&plrog}n0;K>r?1
ze*9!`iPkEyjp+b^<$$#=u&3h25sa7Q@<&__LP6_LsAP>SL?`$ITGyL!0B`7tBd=1#
zR}d!8jxE-<Q~2Xtlr&E??hvh*NZB9S_>MjlTw7w8ePS<#gXPyOfQP_{g-@c-Kj1b(
zs+pVsX-Bf^!}Awz>NL<<Ad=!NS@m<iY$UNuwbXe_6dxKF-<_OdD-B;$(trao`<e>1
zZNdis^~j=Hu*J~j1XEgP*vsho6Qs-=ZEX$KVxYLOLJtU?ilYT4(x{}fe<1@Z4>R8M
z344;>7kPWSn><v~1Jan{1xk_6uvZd`p&PQ~G!Up!UJtHRKno$iw0&5OaPxm7(ML?o
z1Q3J`d&Z(Y>blQ%qM@tFOQzp&moD)OqQiR>eLpTK3q2{`ZY#x&OB*yQpB|b}r`V_=
zH=Lx#UT+0UUy^=Xf__s(e@<Clbb1P1>=8B7BMeXU59XZ7(;4uH`f_bNZ}8>nw7%s|
z+O|3GL_+-V1-5hqR>n*4k-_4yj8YfM3dTk#)*+IHbc|GDA;!_iIp$M3Y;%>@(ydF&
z&~RwO9Q#t2(9|xnwgiAYQK6EY0@E`Cg|7=h|M0p*oHc~tWR@x!K<>@m8}ZlKZy_cy
z`uT;ISshPRkT!w7w5(T!M{!VD1-88+o;|%YaJA>n5IQ;UzXLz6^3L7^_zCAnDpg78
zFZ0?YAs7f1koImB6<`bE&HCUnnwVYyra@iNvL^RjFCn6*PuetP{)_D(=sk=Uq>h%f
z>5tmEUir@Wcv$Wt5JIhjBvG(JK8hPTXU_Sv+9Z%F>Gr6N$95;CYi1ovdga9C7nA+I
z#~o7Z##}y4#9!*BAIdR_lpOBY%O3x-F#Yy5iBE3%)+wPyXt6Z351U`DV8AOZSpNZ+
zAA@7#CJd%eFcn_W35W>yBM?7HPeu~ln5!EAJ%TfAu3du-znJmZ;oa)9k5iE%I{Q<z
z_DV8lUJzZw_~CzNbN7)D@{=z$ChT)D1zTZ0$ETE`ryzFz>QCC}E*n3usWMOCQ63Y{
zM(~~7vd<Vz$X3cM3xb*0;yTr&t%7>Xf~ddrqm{yz{2YC@I8?NZMgh@mgwf=5v28sc
zSTLZ>rs7gCi|k}si44~J7SYfC6VcBGJm`mlvQ^DE7ytw!7cwR88F!DEj1?-@D~KFM
z)BzfeD8^O=I3PBIM2)a&aAPu#q$q_XpqbF>Ec2%!xaO-+^cswm_{wqI-)BI5$#p#;
z^;qQ<@Dz1o`EH?LAktKNz5gBA;vu4~Qc>YfS;w$r&m%=t=U_8|i3ZYlf$9KJirlbc
zjjWmV@F=t$M6rLSqhhcLi`ds0$c$SOr9GRcquUQin=1b5>J!T+G&Si#!XqdSrHA68
zEk|OUcxxZWn$g&{Z%@(gh^srcJg0ahAj%{x>@7Dc1TNl0zaTkRQak=;U|&!oQwd*<
zjJlQ%edF<`i(?PlC&mYQ`p{kB#@O=ZyNz$($;aWI!{|vHdmu10NfVJ9LT?d8%$^A?
z#fDX!l5+&3Mnyp1Woha*w|B?f9Onh!wR&aXQTHfY5SzVm09#9^)ja)6vrJ3}jNWM>
zwOQI(o6OA#3r4v>V}Kp_B*|>l^2n0ZJY-hw+=q#EpQ*b`l(W^p+Q&0;+Is`j%Jev|
z#?e+)nv#$ji)Jg~g**tI=q525zDbadIXVOh^?`~sF+h;CAZSd4P|~dxrP~5Y=bp>B
ztxQ&MBD7>$hH++?=wdO9xNtv}?S&ShxwrL~QXU>(RW-Bu)N&Z{Z!l#1(OL%qUH=xo
zI?xp<^jg$tClpv!E2n{pJ|fxBx>bNq_B(?2Q5?uyK|yr3B`Yrui)K_o$oSUODk%4i
zP7&~rjOs(Y_*t@EFcE~j+8mWgd!{~D)nAe{E@~;FnaPye%^;tOTIkj2Tt1hOc=<mi
zbUv69YA5bjmmDdv!yN*3Rf7^C6V>cI)Uf>ca6a3xM2G8+hS-lBBdv)h8LW)mJrdn@
zQ?VS0mJVF7hxuaRD2#?%Vf=2o(9Do3b<BD5gkoT$rD%+KPk-S>(~3|m;KDrY@Bov5
zpfBpdgYa_w@SFUj+xg>DxnnOlZIPvk&JcxaK7xTrOHkP}&%+=uJ0&rlgLb(n4tO|t
zAseve8d?yZHSK1<&QEP?*H*4dCY@8!Fdz@N5~u;>PO}ii)MqFI4`H^VI*R}Gs-|I{
zdjDWg<IIDrF-6zj7~SmZ6Snd^*UtMX-m0w&>McsGRP9Qn@nRnLFLr#)ZdvL^k^tfp
zzr;%lY$GHP>>yuNl&pxd^Cj+mY{3>qppqq;-zsvrd*8gn{Z)~Y(WFPMwiKCt@#pk=
zzI1Hecf>DEh;33c9&4pjI<)8$DIYQ|vZ?H!I`#GaMGmC|_!kdUvdKG4hKQdk|CMB9
zd6>MdLKs-|Mr|nqh{>#$GiK<zpFaS#e6FaPM7yJ-kV&y6PU)E9mUAYc)8_p?DkcDf
z@2HR;d;|r8c*d+m#s&y$14W#}6mIffSbzTAxoU>;QM!Tw>u9U4Pdh|%GTRq4GNRMV
zwIb>cD5P14aef?2u<#D<eWKvZuiD7-yCL1{hClY-)Ecm0A8~=*Lr>rZ>*`J9ox*s`
z^{21HNs=f{EwKtZ=UXBHB?n(vD-92pn5Wkp?*su4M=(mYd1U@PKZzu{S7#ipD8;!_
zfiixK@r1YDTG!!3h!v&3T^j63k9eG?8jSqE8#hw^(;h&OLybFHpic+XF_nBR$C@!C
zNX!&7_YXTo)D!m<BSVTXHkT@_YH@x7^XgB<>#_$i06U8;Vi*5@wakgof#v=7)>9>+
zCp2;sQQct!CpA-90mkkBEe^JCjVtY#mPpMByu+cz)x1zp>cuC1+!fyV>S@O|tk&d>
zH>$d~vTY?Aarc2u_6nm-$BxUWAGcCfNYtIuj-A9Dbhq_TP&lzH1Wt}59GkpRSE7wk
z$V5-J=qkuf`;n!}dmdUG8ZtMl1a{)XT_la^T3S@KcRsChBMyY|$)hF*ye&4d((E{I
z=xx@yirE~H=gf+UsAqj;fS?HKQbOX<8F4I?=1ar{OQhDW=r|9xG)KaO>ZJj(M244I
z9shu^mnB#;ZYERHU&F(Inv8d&8~ycV6elxP`PDG}M^l9aC^-7IhZ1-B@W_9q!`NB!
z3B^er*|cz&G^OoH_?<R0Dr(agLK}H_&;9L(i-L6lK}mnUIe};s*b=oUiB5e)^6Ei?
zhe?e_yO$1}FpYY#9cOIBPC1A)FDDn79bZGgHXXQxMKwF>CPhUGmOg9zlV`IwQp?Lr
zl^NVN9R^g@Q$`VcJ!o7GQdqOmE8RwYKXS1%2VTWI^0^NSO$~T+&1dj|A`iH2E|S~k
z8ygtpf414aQ%Z_H$)00U;Z`+GA$6YXt*zvXi6d#mJk<gHrJ*D4`%wjpV1>A%9i2GF
zzRk0;zr{|ZZhNLu68sNodjhk;tnuXUtE=(S;CcVw-ETg;#^&<sWKVSJE3zM161K8(
z<n>&7WV>S+mE?|~2Am8!Dlxr0BpY1E0}Tj}lf?=!)-{=iw-yRpK?9*$y>JfBX2AIH
zo(*@gaH1q&%@g8srF4!IF38^DX>>(*yJW45s)VH~ml7){0`Ra5b7afy4$R!P&Bx9f
zcYR>Yy5$YXJbkP8@%aqoa;N0eQ=pZW1GCYvmpHoplmbOi>TDL4^T%T6#IQX$N7gkq
z9i=flI{9P*BBIKIA4Q`~>;{x=+*cHvmL>Xn+h2%smxM$vBBqTiQQZ9hd<X_)3X~}C
zC)m`$iCyo|D+{ehoOcY@7DfK4Vg$HB6idmdfGo0)Y@U&jVN3K-Y%oszRRLy#!XWZ|
z?coHxPWM=6_pGGCWn$E1%ai-YZVa&s=8kMUgcdk2`?2h0q9VHyxV0+7;yB#va85d7
z``9h1H^y=^wj<nIzLG6cjJ@p48M9uxAaWDxrD@Ey3u_Q0Q;h&de`6G(0?{AvymHwk
zrRlO(Mz?^e?C~8-ai+}^x2goYZqdz7N_Ql@jsVoXawqvwfAXVPSm!^6VRkhf92R82
zQke>taMulZfiYXao3su;s>!Cc9(XK0r1wMYzz}@hwi1ZsjjjxEEfQ>_T;RmaO+?xy
z5!}cndo-ZRXBt%5FYNdu7RK_}ulm7)=PQx~RPA5ef<pbabVHKU8}(_vt`ccEW{H6q
zf1~!25D@@R%q5mijD8jWTSTY%KRil@Yo_q>;OlaDwHr@7+BSuIqY=)Z{<m}}hb*PN
z`h?D-y8KNEH&`|vRj^`MY<jv~7+8(8Ki<oZp6yo;n6>#k?48;G_BuI4Wyucb=;$%M
z3omj{IHv}H$f+^NeFI#_O&+4F5U+p%)}7FqqSX?~(OX6)WR5gmgZsK``Hh{^JFj2H
z3-TKQ(})GoSF{a4sEeUy!{)!TiqZx)1JFLf$YH(gl3plFxpCjfBA$<l&b==@dsjO9
z@mH36`U1sWA}H){wajWbR#WFotk`wfV3%m3N_-SuzQ~?zC<Fl~OsjJp{&t{$C<0p6
z<KNb0gc-ja$V3I&Rgd!A3I_RXpU0F0v{6#tlFJG*18`kQgI=iwk}?}vSvw`%hGVR)
z{|0Q|H|)aa1=fj=gbbszHOmr$+dI&&X0-8SaJf*Zhixx3@e!qK_#yp3vns?+tj7>E
zWIdte$}s(<B|2GN!t@dUB_WXu6P2W)yd^@fbheJaD=yyLZqPH*;m0bY-qhc{HRjk5
zJn+s_dDl17#^i;JSJPFhW}va|qh>=?L(1d*_-YA8&Lq(Lg!xA=&`&hs3;RHL9;P1@
z@wJHhliB+xYasYl;QJ1$_IiK~ox*PzH2`V2*!`gLU9p(Tza~#noA6O3x=e&u?6thi
z=La3ym5G}&urC+7WL5Ca>-r{z3U0&Y0iG0gli{&^i4ds+I%{)vaj$}Jw%qMM#_5?P
z5N)mt34;HMcL`RDuBfnFOU9zywZ7U}0&>#pgdMb4v5N$zu>gNUip<N{N;jn_F5npO
z;tRH^6Rd1;==u9jjHC)D0dY$S)C~tiAXU$Jwj{Je10!V_N1eljl{6K9Wd=j?p38~F
zmvF)uzvmsUbt7-o{W|$Oh9rj1D+3=Z7K=I~jhqQ^G#8ojN4%a%_Tz0ko{WFR85$^^
z#8c3xz3aT7Uc@?u)XEe8Lt}TKtE(@TM@OnwP+{J>j_oCWEGD*3xHPW13<!4&UY?OG
zrerENJwG)!`iafKLHha&Ek7SZ0#EHoDB@E#%hi%YuXp!1_p%gyMiq0JPi2`GRGO$g
zRY3A`hE;?$cPd0tFGGR}SAm@M5J9hki&~5e*)}TWVwyF~VfDCM)&2R6MYt-tLrnwS
zkCovyLcesur-D?&lQ7|7;z$Bpp*WDs!wI~7*I<hHlER@ql%ny;?9^Ovw3#HAv<9qE
zI6?ZwrVLEehq@o^Um)Tg@s+r2*ukB5>+NjDoKkhn+NQ~G9G?1ldltvW#vRdY{fK0G
zZ{|6910BUsf$L7PZ$USZ9HA&nZ@e*q;p!?Zv#L(<`Z)-X(8Gbv?0Finkr8EB9+j>f
zfj70gVVuh*smi4NGB3o5A7V4?vE&bT2>9DrUY=mqzr?%X%2ZP>OrE1>6eB;+J8>F8
zrDT33q>F5@P^+^u+n9KM69WI+i_d~1XC$)WM0kFz-~>%>Txbm0P!Q$W6pNFEWMWut
zA2bVTGjcnVN(L-~7EdW$A7)yzW?ta1uo_u7o3)ts(-K=}9u8imah9}7h58$Xt++ue
z)ds*ct~saKI~JNqz-Msw5_oQiq}bneR9c5MW)7PH%cWBjvIB*kz{l=w+5yjW8wzR9
zhguH)2w5+O)m;KiV;Sn?!dMyO$M{_dtsr)HrVvsd5hDp0NoDdOWP^OxKN!107-kv-
z-v#Uu{fVVB?{;aPa@{!9Pc%72lY3GLEaxc|L*=W_3<{O1K$I+mc;7r1^JKo9JyYwj
zP~rl_zC^f((bO)jA7X2mN5fPOFIGK7etCmoB}9YS-$(|(=7jI-uum0n^zbNxAY8sg
zddQ5F+Cm}VCY&JkVh5`WDILR=<W{@Ji2D^^qKg_6_}b)VQTs%>d&A$a2WTI@6`itV
z5${jF*5#)g4%;@w7m_B@^;m=*tT#s_7r>?PeXg{JWo<?drHTU^L-KtW3TUEX6{xsa
z^tMJ#8^WWWX&CGnY0KHK3M0G9t72fogf|RUK<ZT8&V${%pboogy$de<hqSVSz(1wm
z90L|T>1^aNh)j-|JVE_pJ4ywNw;YfKZ*U2<m5Jiug>C<Krt6#pe8<QhIW^~%iz;G|
zz@^=3D5#(F?CCQ`E!Z4u*`02!QEL`Z3FD>|j}s6(rBw4Lu}c*#5tXQpgOW@UgHk#%
z!z7Z{SLrB`vE%GD9ZLHA51({&!t$4-({41xL)RnKjH>i>(~4KI0j<K%ZA>-0ry$7S
zv#G>)C?ccIXIeu|uy=2su>MU_x=I(kWjs7J%p?jE@+^*0Y#r?a!N|b6%=lY&5k&l0
z7FONy#UeUHZ#_|yq9|5Cel?*K-}25S#w6hx<rXSJG$2Ce5y|PN7jzr-t^`(%38N=M
zRt<H-jvpNT3nj(vP<4dVlR8I=PQHDZFZ)tc0D@o{+;BOSWl>IbVR8*XyQa?rTl1+m
z(8?3vbLBt^IH8f)wxaGZkj@J{>6>__8xtacf7Nz*s-1|}a4(k#C;`dFsQ;(JB5L#T
zJ13V%^A-2~iqygakewUUGb`!Av<BbD)S}d6+c(#h8H6uxB%#8lljd9hkcmQ95gQs>
z%IQ$?GXSz7jXcdZ(Ec8&0A@M|54qNMe_TZc{O>H*$-RKeG@zz#e`BA~_OUl&X0|Mm
zgE03{jIV@G5ZF~pFBF#dC5cJzlr@D=vCCHzn)D5Xho8+|nRKoVxH?5tQbCTZc;Sx@
zx156j61l9H*f4VvIYm08LZVWs<!^O*jCSL=F;<n!w2lLN>dc~YPRK2h!EFBhNX_;_
zVs5fy4eS-o=Pnn{-K`ZpjvYzzW(q_V`-}1#Vex)nWD>8^Yq2!sBv4#bI!x1h8(*QJ
z^2?BVYTm}|?3gk1mH(gV?^Q?o9oe*OjVx>=B9x;F%L{SgNdKMwv);K4Q2&ts{*C(M
zCA>lwL}ZJ*N4qTtMw`Xvj(q;w*=x?L1*~w}P>iE;p601SaVm2GWhO(>6a&)YPo_d)
zN}&416<36nX60`qQ(PmH2MEAFb5Q=KWLM8bJ@}NG*=KS0sTc9?tReuo7+pyzb^IN6
zsw>ub(|426g%-4Q5S5j~do2U~K9J(59mq0^#~T9eopG!FhS#U@2O3=Rtu)G4x6R()
zpcZx4(u~yaN!5Wi3@AEsd*gc-aj`HtunN=4@>*tMczVMFxSkWwmhkd#BJLrpI4cg)
zMFLol1wx<J$LX7PdERf)k}v|hcf|Zd<WHuAQmOM}3n*SLT}HeA>T;j6n`7)~&}e3(
zi2%UviaCoKI)>O}LMY|Q1{LXDgle#>d2m(YEaIT&uv@OEKFRMRBZHzKET@c8)0fp!
zPW&hrk-c_wtw%b>(0toA@oBKgQ=(y$OyfRoxg6O&k?7ZdXxRzID!79xH&4#gnkY?<
zoct3}&Igu`5Sfo4QAKyXw^YAPL!+98$uR0lB{8L&CxP#c<tfn{Qi{w34jU)EIWEcm
zo8TvF#mLA+>T8*FyXndePWgOTukbwXV^bKrrfjCvdlUXQnp=hn<rxn%o(Bp$oGAi0
zk84awv`mBv7tizhjiRk=<cG*woK<iu`tVV!Bb*(;ps+AWvoW`zplZ70{$0IW?Rk8z
zm2+D3nYd`nw0=gXSe!*(7x>+(qJ|~6ogr#``TeZ;{`aihpsYpHFb+bLjYuqJh=8%l
zZKuOd#EIVYga>_;+FAx&6x@$q03}0Ul-g>VsVwr3E<mj(MJqshkSIm8*_o&P(>G5E
zgBU`OJzH*(Mb9@x^&JsXebmQ<=8lVHTR<aiZGtEwY7+D0Tjufb7ladCld3_r#8vYw
z{`qMqi?WCgnTVh-9ix1B5mO&(7F)?KiA1?IAGjS^AzN+j$3|;?-FpQ{JM}{dT0hEC
z2v$Cp;aziUi|0C6p6l%we!LZ7sUEO7XJLcf&G!m@B<(0;3WYw&<E=%%;~XjC=cUR^
z&$)WlIN1I$s#6r@HYT$0LEul&#!7k{v<8XG&CnVds*&KUF6I1TU(fk_Ck2fr4Cp9x
zNn?^+pohLNi+&ZvA%=F(q}xi}8yTn^C%otA^io-+gi6gex7vPB1_Vnnw5O3*>kaz6
z;V@l*TeL*fZX87d5q=tGD`;FyLa7f^F-ak#YmSMPvJOFbKpC@RqBJY2lXEwow^5Hx
zYv-sQ&uGGE(d$A=-HsNZ7C{gzo`S!Cxtufd4Bd3gnRHPpmLC<{Feu+|q5{k2LC=#R
zP7HTX!zI-DWpWpPl?Yc#gA3G-J~C$=rI`tPm{28#cLw7d9I%VW96_Ow1ys=p)6dLH
zyTrZTi=D8pdSnb0&gH`TBZ<5GMaId(kev5&cnvcl^O48|Q5#5ZoL8kC-hFYli2nb-
zjt3SuEXsZDA82;B*4xe1F?mQ-A=)gXfkV!}kv$Vpp+16s3tB=0C+WGSF-cVP#06j`
zP;XA?Ll~HnRn)m==B-?1``TjlWBB?+WCPbU%MkNKG2Q40ScT>p^uyf)*igxc;5M`<
zC`s|avEX&sh-4Wlq{j1qh{O7+&2ovRCS}aQaHNMOrd)$XpWxiTf{=7*U?W8)lX}Wb
znw_ZR<yDhSaRTp>%N0WP2>`P)JFebt>L6*Q1vP91VYdo@<Cj0meWn2~;#Zmw0Ti$4
zyPo`@*J?0yB*OzYJbVmvE~BQFFTOzyyqWEvcC^=*BnWvy3+45-hdRTadY-}lS+e*c
zrwPAEF#xan#|f|%Mhkv{6izc%<cDaEp&i-s$24|K$~k>0JCGrgCsk6o#je@Y32j_B
z3k9Db<x&FeLXkk3KhEn^Z4fJPc;Vwp<oFWMoiVKq;G>DXH_X|TPJ@~}nrg<11pG3j
z&56gu7WEoyoEruztERy<u!=WgX=#<`()Al@(O%$~R4sXnO7k)h!HE6*@cPUr1Z!`0
z*)J({gd_4*)yx4;3?rzj0D3nQ?i?w|w-i6>?`8S`Eu4mWC=b<%^+z03B1r5q^N+(h
z>YqfdRR0Vishf3Rt=7b*i`B&aJskAZgjS4{6Kym{oMu`;zmMjU9{;@#ua2a3%=`aF
z=YATaALx_pdg946`ECZOU(MM8H}ctIF269tDC|71u9i(|LGV>4{Z&GSm%(*fkDCuh
z5_rBFbq+evCJn|`ZSX_wcko8EKHAi&#|fp|MApli=X@B38PTy(_c1UD;F|x0vZs^E
zv!+p<oaD;~cK*BYa}%F-Nq%Zs6G8M4ff8~aDsEvOB7d4#AWCO@p;=3rHFbET^IZhf
zEXfLv$h-d{FgykfO*zdb(zZ3gFMy3f)_3}gVxyfy8Xd4Qy&Jk;Xvt_6Ntcadp$tv0
zZ44ZaY3_}fBM7*2?v|YVb*WfKPOY{SGcP(&QI!EHJ{|UgPE%N16#8pQQ=alrUvG`-
zT`z}VIwq?`iHWP>T!>@3PaLsJK+Sk0JsTA(!hk6zodBVVv=pIdvlvTld^x;1DFjdY
zZ#MOKLVGiSP+yx_o2oLKZVvTTFOZM9WfN<)r?7XZmUW1it90p1*-tj|g&lMZW}l}G
z4*T>OnneAXO;a?&F!5&utT2mTY@t$-?KD4@iOK*N=}uGDq<jlEV~KU4+o4o)^GRn7
z7ORe^juE{TgE}}u7sQ3uWb~5c^6J!Gqc%x-WQZ6l-PJ!UBh`=y6_oGYvfA;NjGqDr
zFE_7W@qhb*5VC&B)3V*0?`o@5G??wZV^$g&gn@5N#W<7yNh4$}W}U}lVT<whI$rVc
zsN`(NT_YB`%ozw<{)<o2>ZyFz{eClT0z+9Uh8GX6=%=}3s*^n)C>1q>LVy)=hN_Sr
zRAi7A#ptj^vw|U~$v)Y)#bTOP-cZbX-le!ERcJQ=0aP74BCy^vZ2|o^&T6L{72rj!
zi>TKa&7Yx&2JfRwf;w%Ei$l<AE0~5F79$lbE!&U4Y>Rbl_32H|e+@nW!oh@23>!M|
zr*mX|EOIA-bR;P9o<XpBx_P$9(5x7woZA=EvD2C6k1!ixIUn>d*}J1y?#lkU!>EWL
z%EvA=&6F!m;w<TXF=;{oya54^q^(QO)r^!bvlmdf5DYL$XPOciVR2&C-qmE8>rbsD
z@TD$d?S{0ZPr9~~?F1bFk-(ADSL_D~Tx2)f2IX`Wh78S1LfYZt3G;g5yttt8m{-V)
zPCj?D&ng?5$dHi7;L_+iGeE`rGO9I4-N=FAZIf_Hl4$qo2yStYS%=A(>lO&{Wq3Kz
z*cn6dC&L4oCa)lW(BXI8p!e~syllfDviZmYzZj_AJ9*D}1}in{4jRwP3DB98o`9u6
zK&faCA}`edNmA20VEI1A4E%SDISZzok`pyRV&j~~;cOt>xg8mwNMbYNQ`JXz$eC3I
zJXFkr_86G?Abxl2!pQ$k9}kyXD@yBt9jMPFB9ROzJd21>!HCUBp~qcOq3b?>YNqH(
z$&wgA+lHU6=mfcds0V?+_9&G!QV1x7*SR-!EKfL%NT3N}S0#3pvkvn4m27lqy((;I
z`83J>+cM_of+h0uET6_CrbI6Z?Rb5Ls#(iLZZX9IpYVh$)8$4w01#IwVf<OO#f;Cx
z2;cnb|7k}yOiu|uy7Y7V__gM4i0w891%+*CW>^cG%TU(go5lec(|$xhr;ZvN?x4NG
z<oK7Q(x!pUFLG*Pl_Q~?mM-726M`K2BxnF6PpZFj20@B;RFY)Ct`W2<60yakj;fCx
znSLGew2z^#@%KWpebg>D<UwQEb-lXR&0iL|uR1Z8cf!OV>L-fz!#;sImSp_FrVZ7A
ztzUT$|9utJsjZ_BwwcYW-<M|hvm`5oguwx;^pv;>-RM3*+Gj&xZ5ip->%3;P{hvEA
zbQgN@f6o7bV@a>}2PJ6wOF$Sk2Nt~9Z50~XoWwF`zDziKDwV#P-|8%HOy|58*9^!B
z#2I<x2IUxq(bF;}Oc#5a%btAfFoIzE2P&?PSGF1lhyGnjplhqA_K2m*YQpoM=d=IA
zer<z1^OW{6(wFYKvTTsd;bkLT8Rmb`=|~5?R1f>~3hk6il@6O|ur>8;Q##{E_R}=P
zkz<p){KAQ(j>gTNp)*K9r(QS4nx_?G%iC}rRe7-kDx9;Cln2;aqP?(%Ori4HVGJ9R
zkTcL3HiAa6<(q+_nN_Ni5ODnF!bS>omBAptLTHZ0Shg~%lTfWR2hj^DX#jU1_A5Td
z=;i9Pyn&V&P6bu~%rN>z2myPjQ_NI_5E0q<yq=|fWFS#!V#-*OON{e{e(rD-7pK?S
zUK&$yBYUF?u=6RZdKo47eHJi0;Uf-7U?cF|)|-G`*Mtz0;&EJ3E_3^$R>LqC)z}Ii
zT$64Naie>k-=K>>gS<aGwz$|Pf4vz~rck}xXZ4PFCBZeIsW=J6%9*<Y^6--%2UUED
zb~KBo&Pzy;|K?EQbBSiy^3`Z30l`>5RmN(`q-%3p>e?L#^-rv<n{AZ^r*`n*<|u?~
z9#^3=AWD3;7T5T#<4<T+3c*A+a*~dCD)Fjx0rtIu5?|%QU0Eb^8+>&RzAS^EJwPVC
ztAoX%X0G9kxbjMaY-#sty2%&#*Od#2jF^Cla-mF06;R<2KDUjTZIm$Kj3`zb)ln4)
zx**_@lC(IN^rmLwY|<kcO$Mqk38s%JV?YocXtmCH4A@N~(f^n?nysoUY&)kYt+adf
z>$O&U9@|5*kAR8h{*w-jzB_u&`qu3sTa6z-e+E@K5FgCW2t-K-EAWaYm4F@d3Iih7
z#B#R^^GT2gfTop~l;Yi3DzgpgG!v*swE;^B3+5v|P$@mk^<DNS-TQbAb9m^9fCQMi
z0Bvb~E$sqaH@dFHs{q@q>Vy7fX-L>a!~}z)9^q<(oooaw%Z6S!^9Zpag+fbQc;cX!
z^28znWAjOaS~;`JX=*LdkKajv6@E5PL&|pm94ZQQ=-!w@z(wiUFer*^z^Gm&#F6xH
znG*C&O(&WVvC}VomnMpKd+ZPTm$?}#+HDDfaHMn%TSrp|<q970*@^jwxGCB5#|*ao
z&K4C8`_rB}@LYDx<_i>Y<YGQ`8Jv>G7BrPuqcY{n8jL1-PI(Hx70zMM_<pT(5w)g&
zZ6|*shsJT*CC(*`?s<??(3*CE^ku=dNX5%2N-0-Opsm)+urP}t1MdCP(B>yxAs%dJ
zrwyMVbw3TQ^O%-|NowA|T^-Q8Yy{hp^ToW+AJ^|?+<lMixi3d~11F>88FR9FT|9%^
zo47>&m7$V(wzqtQIZNG|^OC9Ru{HOoi+qDQS@78p)Z?s_M-@efk1{??qD({dOn0C8
zRVy~qXNVp&LhO8MzcX_JGP(T|n;V#HtX48sGSt<UCbkJrT7;y&m1)=i$wzyTsO2RP
zqdA{V*=Hw1RrM1lWi-A5^!09lF~fIa|7?s#M<2DK?a15nIk%foW`{#Z|FBhqjj>G!
z0ux7W@ifYDU9=XR+*NKN+0{Kx@h&8*ivgg!0xAl4pCiy<0yBEw0b?}T%W<<<-8*34
zKXPdu17*0351by_bVQ`r*kr+GdJ@4&g*_$jl4aHQfy_Lw3VokvZsHV=!j2|Xd72{0
z`CJ=XnZ9}7#9%?NEn5)2y+T<9XlV9lOzMJ0!Q^UhZ1uY9t0CD4Z9oM~Y8gBV(h4aX
z6QX5$IwHr~Ui629ornGt&u1_<lrTw!KelB2u$~r@2P|%b48j~^VjDCayQ|?vNG1)&
z^{y~aKPlQpIjrWeRF%%Lh!QJr2*oHlYN>}}AsS8cJROTQGu4QTGz#;;=CMx<w-(M{
z6317vxXA0uvOk>U*_~2qIXIFz>}qm|zhpx^B2U>dLnUXLaY=?VQq=2ln*VB`^X7x~
zaf3)=r@K^Qc(UHX;>$zVyu}U>z-Yc&D1*Cv;#J#=(L_Vq>(isONj#tKzW5s{6CKQc
z!e0ID4IU%<KofYpH5@ou8On&k@;HqJAh}~budxyGJxE10#sH|PK@c@o@wR-rM0z6X
z{T*Z6tA@P8(4Czz>HHLRypZ+{N|j2BN^o8jA2Dz~PpQo5ct%GJ7n9X-Nww#n)o~Op
zmhkv$FFHx6KmXsb2qYl2J@5K+m(CM#5nL|KIW^zKnZYqw$Z$jL|EN5T4Y=AWp0)fg
zNf_K~7hZ|0Z%8~;{NRn>OZPu!-SPc^sq1zP=;D$NCO&gzrLY>rXTY`9?wh>%NygN>
z-6ihX4BE)1bh^RYBPOi}nzVVWB8-aQ>=CxY55MJ*SakBt@pQHb9Yqo`@Y|;k&rRA_
zN^bxuRHUkQED#l$aDV<8`67k}!ETt-0wF`1nWZ{=NU{r!oo>1UHJ%Td{BNWS#S#DW
zT`$#gqkL8H>a2e)!u&kQBms>{zkEnJyYeKz{L2D~uaow$@y#;Xzf7|d5v~CSILv^N
z<1t*XQ#I)X$>X~YmL8+Vej-f3+P~%|qh(ZtNZpMPUM1^+{K+>~*i^&nZY2AUKgsYa
zU)P5}ZaJ#;9rqBr+*|)elTg}r5IoH(Q3RjPP)Wm$?T|0@Egx=->tsr_6CAlVk^eA-
z4ZA+htPz~^HLf_nY;vu|^{LyCq%l|_3$I5_>*C0EJ$+KhbTM)Ljlya?R1;~{bE+Mi
zo=aTxd+IjU;)_kr99m1iqg*czhIs2!;OeS7lA8Dn=yPyuIBb4O7WM%)=j$Eef{n)a
zZV7L5Nh`T?-KSo!_RqC9c;6`IUiVZv6|7%YJf0^+c7pW7fkxc~ppf8|=o<5$Q{<PK
zl~QTSqC&t)_UW>D%nAxe1_@FGjO0m#Q_^N%@jd_ZEcM?q5lC#Gj?EEJubMRwBU78m
zFFI94u_ms(w6-x@-?2S3U=YfOJ(N(4XTRLPU>uuVghyY6D)1Hx|Gb6Gy!USg)xgUh
zdvymmVA(EImFi@Lp4=)Hp2{V`_=0@lp$^`EylEW5ML`Qh#k96omE(sg|EQc8rTHWG
z(k)ix!*(RFUvR@G8Lfkc^De&#o06eMj;W>yGnt>*W1l3#bB~%#f&vG5>DIv=JC-SD
zLlaW;bY&tH9Q2p^$JdmWG(_HT?ar<=Sk-Hu8;q+SNChJ@2V}9Yix(XiW1b~aMhQLN
zgY{$LD5|zZ8TgW6m=aGlMC($^m{Y#pvjw#szFzFL)S>zffnZP$oci5w*Vq#OZg8n5
zDU(+!c87{U5Z^tAGo7=KQXib=z?Fv(?wFNdbC=@WEiz2BsWx|n^o)aT4NWb_%E)hZ
zk^Ha?iQ~UgxPF#!gBIJ3Kt|zZ$kiQxAp)He`>MHumhUx!x3>W+8mfBjaw3xb?Ys52
zO~`;52n%}-@qMFz5L)XXJ3jUS8a9}9h9A0XoBr7Nm)OdwYPGU7vQeqCp1luGwZ7QI
zTRxzQg8%M4?h*~f+L|JRw;_?P80YPmrJ7)>Y=E7oc-=S9%tf2$9l*V3sFflyLK8tO
z(oCxg()d^2-G!6VJ9X|0YO<zVu#^-Th~Z{SDQK9c!iw`pb$xmKJFm2@!Eb@+f1wVa
z2?~6L&86t;>9^VjnmpO(hK#4*9dzo(HeKPRRA;qdEiylwsreztxKLRLIB<|;&A}b2
z>-JVZ2jLXrusrTtz`I{B1md2|x4OEPsmR4+xyN^2&6yel^r19uUd$?@D+(htAvH4*
z)a7iAlXfwymr}kE3bDcKJUz?=@ko_O6g+b*Z>Ojj#=}cs*o)oBOU6O)5hpgY)Y@0o
zZyX!M2hk?Z+OzNq*41}RDMeh>v8`h~yiW<bG(fpa1eZbQ#}}l6ik+CdK}dOJUh-Dn
zvP6YvgQEC>u$(>M)G<FeM?cOyy-zT3O;98j(5%+E&(kIz>=gyHo&EGgiGD)XZr7wB
zTXq(}dduKs+viX-wvkEXl5K6EU>Dolx3eUwA_QHrp9ECehvchjz#4BMq1QFoXuKGg
zWfjaaJmsTAADVi%^e^7pzDqG9*9&hcbVn|M5aLiB?iXW>v>X9V<3bepE#BATQyz4y
zFi9t@^?Xlp4vhng_$0pCL&tIr22M%{f{W0iBOhTF#Io^xmESM`WSxyQ@UT1HMe&Vi
z`#Td&9+%q=#x@^L_D(q&3J^7<$C?kFx(wfCTrIm6YI~7m{zUQFZ*ZO4jP@Km)+02P
zq@U-4Z=918VA!opE)UFR^(&m(%aTLmJBo6v2$Nj2Nj<SA0h2TkRv?F!9z-C%l!K1q
z!(U02!IpXGOO<gfPdO5^dI9kV|3RkX`yZBO!=ASP9;WpAFr&p0uhJ}|W6n2pHYI(9
zVJwyN0J)yOO`MS(>oraM`vxv#f|$P!M4tyWnGQx<Kn=Y7pt%Hb3TdsIb#YI5^&yy7
z3n1v5m<w-Ca2^o!zrj)YVO>3r{&5huqbgakYG#so!RU5wcA+A14Fok`9V}W@&XoE#
zan)P|Ub{{eCQAyI=(`^FhDWM|tKfoh6_7l7w0*?D5-5gKJebxDYvSKnYFkowpDOoE
z{PWKOXlY<+rx@X3yQEM$xJEo6)f(x{_$0M0tusq)q@1giwg^X=<00GIwmfSe+~8%i
z*@J_!!_^7s`+k3?PzZsuCnG9H#I6YJlKnah7vnlI6GrwOie8K}s4dmP3cr@AfHg;|
z;7q>7NI^h)kykb9aKV7l)q5M$S?l7uydg2sEU2qqxyavT>NJRI2@;Sl?8S=V-0DP0
zWt*;(U6Wf}7K?>`v&))@tEXk!p>2lz!s=pLhWcjEK1+EAf79REpB=GJiLFWPBr_f;
zkNevbt%b(xqtWZ#0vG+s39id%4v}x);r;P1t4^i26W#D~PQqKPPDl$XGYP7C;Fm(t
z9r`{vwrmB%|JKA8tn!S_-52)-^G)2`j3_z=7%MJ6A>Gurtv#7}{#eCTHj+zCO{-(~
z8ve&+5E25up{)Fy<_Lu4M}&c9N%>SUlg+B&4+-AkzKbhw_xDTU?|&3<evf??1-r*{
zpQV=iLd0)-RMww}`~a+pNhbNm;?l~$pH&NCwyscubW^`}(q(4t#LD~2#kvsrK9;Bi
z?$_nFx_C!rnF;nbHpg(XF~*w^{&M27O|Z$l7|ch?vABP(1IpExg421HTi8ey@ZM7X
zpkSbVIHlMW^TVTjpO;xhRwcB65DKyZolQ<hW;}2z`XsT@7?AUc$4QLKOnRIVlc@9F
zEQ^^OEO7T(R29@vYP~;)`8n>I#gp0kDSa3Ws~G+CO9CVkb^cKw+nF4NK9@PRM{U5c
zm~5|Xg<8_}Yl3N&zJ7+$6O|%mfPOOXGm9_<pm80C5?#3maT5$&&d&H3o|2cGK{a{X
zL9(e`L6@D-aMAOCsstKTAO&+{px$HH_Ud|C(o7C3lHNE^TcKQDvLmVK3I(vcDH3R_
zWc|TeJaOf&UQks+8mDYq$<;>a9w*XWFCry<;8Nx=y#g(%11^(~_WdSz_l;f66BG->
zoW9I@9)0qIRus5{e?Izcc;Marv=1Ta4X@X|DC|Hl35Zu_t_Bma&+_2SI{op0T>8AX
z4b;g&+kM$_$lpFEiPN<#KZUkId4)q0W*sg7^vV%E&1>r)(`9~6K;syvUw&-X5b>gQ
zYu_Al=0FEO%2$X)djCOqt1zXd>kCt36PdySZmh2IsP_wHg}gzq!&XKmz^kwxDI{`~
zgjzFWIJx_X{huni6VbdG$Asc$Wd~k}wbngPu~e>oGt%u4OM#o4?%I~Kl8S&gv_9a_
zy7s{4*^tz~PBwVelO!&<(#G@L<bMS~@INN){ul-9cs!zX{VYQmfwf8yn45f$$;qd7
z#W1Y6b2k^OK^E`v6o~_wK*lBrjd-uehDy>S!3~9Lf%}3{u7l&Dpu-Nz9N{h?zvQ;S
zZ=n0~+`wa7Pv=-!Lb0qUe7EJCIxU)kx$mlekECB$8(p0&P@7#X1An-tL;rK+H^G9E
zsNxM;uZ4n-MSkz;oLcvS9JbySR*T*5yh;3|(qRq_rB%B;@;X3|xo$jk;JJNujz`bR
zlEP|cWiF-O1$tdNxmVT+dL&}m6b14tO@+psLQ&fLg|96c<ittYm8N*M$s-vf$>SiH
zA4uvRHIV)k$|tDVZ(iT&cfCo6Pez86jw3Il4+CV(mgJ0Dj7;`Jn++^sv~*XAG-#6y
z(lvQUe_+Wp9BcEt$;-D4<M#N=xYhmP>vMkpC9lW*#T_<8TidfR_Uew0EVw?pp%G<5
zR6ucqk2tFzsVoQIeLINLV-R=U^PEK!g{!kP+F6NHgYp?tz<Fmo?1>Q~W06&ieSm4I
z4XwR+a6A2*Ne8zC$7<_us(`=4kz$#gm3%ycryBIiN#b9eJ2}%W%kFZoNcce4+Pmiq
z%{%@{R$*=SX;mh8als;UKVoYy_jjrPmxgeMu=3RWOEs~(oBgKDOtrY1W)(r!sk!YU
z4#@0~n!lBD&DUzf&Iqrg!f404W#ib~CG?YW5Zmt`SnrMG?EXm&fER3a=kf<D$)ZtE
z3_B!D>#-#ZjfKiRbBq@wu?uSJ7OuFwNLp2*3Wj1tz{%S=@$%PdF`L3<0NuL^`djAM
z1Q+hXoLQ=#EM)m&-gxC(d182@IaH@!KCbVwmDA`>d|ylsTT`!iO;NZNWq`y;(ry{A
zVz5sG?FTGwLSNEw-SLO|eO`na(RYX+$m=hS7t~A}!*~Y?6>hXU+o4|=L{pKUC00ev
z;6bs{XOWMqxckbBWj#uj+}z0wY#AL`YJ&NQkxSzt1YlL^Z2BMys}Zw-q@M?4R$P-L
zBBy{Q0d$jg-*jmg>medsSsm2rz=rDX?pb^v>{1>rU5}<T8Q9UydAt>`{Oo2P5K_xQ
z4a1Wzjse&f(8{EkKFiC#e_N#AsfGK02z@T0zZ9|7&MC3iaCvaL!|Oiozaa8H*NBHK
z1Ro_6OKiB?xdy)73GsZ(-~UoNYuwmQaej_Ud!Y_U4V{fqnmaFy1O$d-8yDg!(NRF^
z6C7D`(%-B~2eqlqP?ka>W>qoc^Vd3B+UqAz^G&2gf!~WBd1Q&bq^!2*ss)b{*U}wP
zc&l^~6X038Umbu(vXC%YDEw=@eeM+P?~>by{kQXO;XjM#_b3^X;$QN*aA0ypA^^AA
zlQG~wtU1xu%>$`g|2ZmO<T&NP<FV8@o(b>1K&*)}|ArnTi6}7y=850#+7M3tHAtrr
z2k#EC<M9Jovg-$0{XSe!MzOM0N$1q^Rb!#?DLEAVh%*F$E)X4(&m~C8GGY=ol38dM
zzLudxvb&)156gW>>Xf1t=#-0&h<GLBQN7(@Hd&GSnbfA6r{+LvWOT<OM1#meDd9Dz
z$Q7}X+-Cp;j?@Rwh@dD;vv$IJ5mvLz`)`O2@w`%?QM%FGq&%klWjhtug-@ubuOM@Z
z<?-%CkY)UWOkCzOB1Q$iXY}SH>$%9?^}oCMh$v+w`aLm5sVhwZIaXD=o#Fb_Gf*0n
zx(vVAC_+$7aT9VnFh#JhX!3pO$iRDZD6@(}A%f$*lH3OisX+a{OwY%wG!#Z)e2TC2
zsjY9<#R)V`EGa!yLvs1-1r_Q#UH89lbk!76@{sFhoA|wN;i@(&u?EghlUmmd`mUyG
zcla-_!+}Nai)y>iCp^v*xt_mER2P@|TCY&Y2Ta#bY%RmhVO}mj;#GS-<`{o#76n_Q
zF6Nn+sV9w*LK-a1k~PI8BH$0xs7fyljkZKFm6J;#)_^N4P+}uw0<$RWrL+VNM3Dk9
z2j)b9W?Yii&r5$qOvvO79So#4Mk{~NmXxumC3&pR(uJSb58}Vs0fHP|xApT5ohvF)
zO0vk)To)f-DOO8J*d4)v4Q(e027i5R4o}(BXCOK*q>nYVogx`A;Wgm;T0;uSy1JI~
zdBm_cgxT*H%)Z+{Xw_h640`odOAfzzlhKsX7%$2zE9K~A!|>Ql*A)YYiU>K>AQC2=
zN>s%1dx~(Gq7362u?IY<S?SB&2!70DlOl`SP>XVaH`2bGh!)cC39N~?+lOFKbBg4O
zS4#LDgwaApW`g%WerRAOFiAceUmE)5NP}BMpmiEjUPCT+?aRSlt}-fK?Ae4Pc({%A
zqj^dO7~9a@Bb>}H7Ce$GIBWXV+SO+_q2>cK<Eck`=}8fmLbZ{<f!&(G6x<)qG$|1$
zD&oB+16Siy=ZhYw&J^dwns?_A0ciuQ=y{EoZlhEIHKA|&i6E%^3k{1a?PWmFpp)^-
z_Nr2jN%so)<Kh1g)Icl0aQ<3O$I5)$5$dAAtIrM4&epJV@;v_F#lMD5cO3~bu9iti
z=*sqmCdNu{1B+^e?>zTk;?nu=;WJPD8LY28g~hDF-pzu=ytdc3aP`i2@XA}ii?!8l
zuH8=p?t&wf+I&%Hh+e~jRLUh`J%5^|G&k!Q-QEVWw9O=3syYbgA%78-E;p`PYvG}O
z-?o5_d!TQms+{_JeJ@A<iUM(866G3DGay2w*!V{cCS@rOfKqktPkNmlKg#3G0r(Ld
z-Yk10z}Wy5<uO@XXE3cl48P8zH1{U&c57d5N8&P<!^z`&et?teT?z>`x=AI97#!Ca
zoK$GFBRuis7C!#zE$rW$;FTBm@aC(BI6j)9({7>NAt+H>nJ#Is2N;AA5?vtXg<52F
zTb(_1Osb_R5yAi5v5<@?kq9f^uw;zX+%JW-8olu810f*p1)u?h8&l5}@Wbb?PXbg=
zsuW}3;o<PBR0l||-@&a~<8Nhud~cL%b&i6mF$Uo*f4CYfZMAA+C@;0Kl^s>9<$|c+
zos190?L*0Fjmn*HPCzwK11f#{LPt$ST*T3_PC-(mZ_0%-l3Kp$rXP)mP%(M9T_++t
zua<`LxM=~5mA{#R)iO}dsB_~e@6L+Qk0Lp$6zHo0L`K*P()e)@<3}i#C{2>nDaI`f
zFm;U0$sitWDx%NsF=>AYYqiTGKytd5BFx7Ny!yQ%+W7|V9DNVpd-4Cp@H!cP>8)X{
zvNbZN^VKENm{|IoI5>J2-#&U9k3IZlJbdBj(Q9vET8;7M>p#HtThC&3<-Dp+3b9Af
zCvuv6C}2}c1jUGhBB>gdqE>zb4NRxAhIV^JNxi{@vXqRCanQ)exD#$I>-_UFz`+q#
zw+3_7oI-N~JaIWfQBxoy@PAQ=5D;mRFVD=g<41j*IRFp*h`0-ygDV?qx*0I*?Fe<o
zZPVr--O|?A*+Mk3R?z3%-V&eyVso{|T8*bOAe`IRNJ+1S2!JHzI-50^-dV8j!0K8X
zzxr=Kj$ioYD|qwu1HAs~A@=S~bu&q&l#pwCb)`E+L(B78{NT%qWaC%8c&>Gp`fH2c
z6G{(gUxFx+T5^#Ew}wYPN|ZZQks<C$pvZ&@8L|3Zki@i-#*lmG{%RO8L#bx8ttvna
zyJuI2?S0i@aL7Q4D5d5sQfBF$hOqJ=NS&yrzt4{=k<Y^tdiB2Fdg$A@$>AdS032{H
zT;9Ot`+%9^2E;n%nW6Va)}LGR^yI)s(s)9QTN)F3BPxFCpsJ*?PpcRTpe2OdK*~^s
zV2)_Xrb9lQqi2_)9sgX(tUh0Ufjk@HYe)kou}Wn%mubh+!`jl?B703b5lr67Nkucl
ztks|{Ow!gjlQLrI_CqN~hf}=z{XTk~O?<HT4ZQIBU&q?oHc+?3;W7Oj7K$>b-})3w
zTjpNp9GYf<5AQyYTlZc?nyz9|&iH26)=1?q<Jo8Gl8$3y`TYPJk{%0|`zIo*q~U1i
zA=ZDVv#u$`ut^f_N!l%vg90tjbtg43CDYDuOWmb-477Ben9UK>d88e^`Ev*nunHKK
z0;aBj4N#O37MgCTQB6c6<m~vUjxz_~0UuHaF9bCf-Enel%h8b~)*K0ke`(vis_p5f
z$1hh=05R%jU{0Y7h8(z+8(x{dH!Ka4LIgQK_bH{kWrO3R3de^fdffzH{L*E7=_{9U
z`{od@zI=ddSC4Qqn6st;{S(JRjkMz)Si?};7_>aWu*R^X8xz%ps08GEJ#0`|XMnb6
z;tyB@m|#4u&R>5P_)*7BBYzK3Dl*}sMH4;>RQR;m+ePm#_iu(;%lupwfb|McGGIc@
zSBNZVx&T`07ecrEQC`x|BBH=A@Ik5LK3IpvAXK$Vy``sX-)QGH8cu$+0XfT5l!D8k
zag(M%;)pWiT^08{@zj?|5=vt^c|~ZnGClBB9j2^oR8xl(3V~j&HZtPZ%d@nWwJJX0
zqFiagW2rGizC^lOo<SyRi-BRJ@>IEP`l`r<bFK(-R$`wz-xQ6~RknLECPPIV__DpG
z<@V(mgS`pf_`w*P8(X+~^Xqu=^}m7D-ZrA99h7qFeW;^Nztir)ZY9z>L)6AfXHA}R
z4YWFIoHn5L!_L8Ecs*z;#ZbSFOAstD8bz80Z2U=oH%2EH<8OO|3;Y9vE$>yw#N1T3
zFg@U8&(`frA$P#`J|+6;6czW5n^tNY^D1JbuMElnt%8NlQ`P09qUUyYd}PO&1MmP3
z-JCdlu?W=;?u{K7b_Z*_60Gn%KAMwA#iB!F*@h})TC4AH@$fA6T~J5O2HT=_w>P_k
zTM?^un9dtaZk0%L;M{f(f9}7rioxI^yz%-mUVHVBQw7wvxZBBDl!$rcTF&Q4VoP3#
zhm<8XAa&IqlID(jl7H4_LiC!7VO(+qgbYYgf|Cknm|E-nc_R&6CsmKLj&qWS@DYu)
zOqS2JNYvm|YY)s3e`1Yogc@jsKaTpN3=wf0SQ^+pG=HuzRbps>$<zk?09SgY4ucGb
zmt_r*X<q@ZQK=G4eCo-XQCQAg=cYJUL6a)CQF{o%2$6P(QC1{jN#fTg4vRC@QA6#G
zRb)!9&B-#W;g!!K5g^UeTlYT`o^scu{TNJY*HR3eG9hO%M;vD|_Vk(Vnd_ahthR6%
zxEz&JP4wU?#Xt^>&leCRKAX>2Ub~$~h*yBcLR9_8U=hcHM5{J0#Mrqx!S&as*xDA7
z-YakZJ*=)?1S%zkQq=9pczz+%HCl6IaZbHO6|E&B>QTcj;>-x)PbLJtH(qi84BD57
z-`DWFeV|UzX|JKfu)mv<P8wN=du|zOIx;{RL&F{~cmK2Jq?7@-XV7zE)6G4>1p24Z
zW+I@H|D^haDiBh30IG`SjKFrx3#zN}Su22#_Be9@9{dsFw?Ra-{MWFVDwSGUd6g0T
z{Ml@k**Rsg(OORuC0`K<j3Xt#v58Z!km-F_7JNn^0CE~B;Al9L4fW`t#v!2sy#zn^
zl}q^9FI~U~*9Um%#Xa1-F+w>f(qPIWMsx_FDu5~3kVtK~gL@r{L7S(B4+dL1(i&}j
z)U&)LIb}r#8s`*9b%6B+U_xQ&{Mb$xWWr50*md1A<L~;QYx$q+7HD<Wh6D)o&&Wm6
z@=bv(QdWrCD(Ec*<ThR#+xrfMii0%8sbV*E<m7sm;bx1Bm#2-JJW4|K)6h+*05J-Z
z4cub){weL>;q@EjeiIkf3mMWo2?78~s>f6&gw$!hBBbcwB`lotAci!K(wa0Cq@^;!
z`x!Z8s#2t3X3#pBqfkYq$f2wm4xu*JQg&*!^V|(HNim&_v2&-u)_RIdPs%AL18QGe
zb84X71>S#sf)C$b;QYmPymsyXgE!v(DpppuIMTLsh+!52ty8B#eI^FI^EfDc!*2^y
zNmiz423^qv9s_Xz)U|ePtF0P>(Ji&w<Q%kHYiQ+E>#x^!da5}G+%9pM9O<5TsOW4d
z0sEOrk+QZd6{FRF0TL)rSIYnVS4txh5<vX`NDYzyPgN?Qe9hVMQ66Uwz=J+?AsSyj
zWGnl>ivgDkX(tt@ucL;-2JVZ7wqUht{Ha42GxKXqsHCq$TL0APiy8@0J$)cKuiqF`
z-Ys#<(^;@+h%PT+ZyGG0$J;xJ3LwFB0*uB5S{d-@BWrm2;~O~GpW?Mw5Ag20$LLdg
z;v_|@P0^V&Jh2K0iQ3Ij3QX+CU`!ZNK-2x+hRoQ{6pg1+)}@glIRNsH_yfLIyyc5c
zFWxipgUC22gK|9qY@1bro>c@$K3^q(EzcZh>I|p>bh`b{9dO3m!TtOz`-{BFO!ra_
zU*X*_iyzAJ*zNew!4Ex;gUqc&Q#ljjFzHE5SyG{3iBJv3wsEuPWx52?+SfDgt?Poq
z`$1WsIcM@2_KY?1SHmw3qct6p^a?58#c^5-;^Odx`;4kJ;aNg0XfAO_NRg^xq|7DF
zyn~XaIYxsc^iK|f`6W(qJp6Qw^-Zuq&*-qmTi=;*SI%=6s5bv^<Jt$`#QGZP=<Cxp
z)JLOsMmS6jl7A(J+Ai2j5*tC#r<wd34f6hqJlV|h^HR^F&O(~B(8@bV5-RmGKQw?M
zoQ6Y)$|;8;m_w)MlZ`r$qRA|)v*=}$wVFT?9TxtPrqI$WK;?hABOs|La$DdSvqc?~
zk|?DKYLYEHJ3i9m%mH|S2QSt{33j$HRBB&3(*`hr7z<lY&dho9L5H%3t^B5{k&{@+
zaDrD}x{2Xvf-Ft3y|s$R9^b~f3oD!hEQ{LL@S6^eGd=-R#~FMlPi*OVAq=V%o0Tg{
zK9<cNijumWRY=ncYnv_ni9b#4iLc<jcTe!r^Lw~=XT%U{yOkr!7!Oo~;<pzE|GQ{6
zT7v1F(O7DBCo!Z%EGkLNe`y8qwg?Nc*pS>zke`<Gy4qzIaa%4`f2&P>ocNET05QYP
zbb*EhC@P@*0ZZpN2-}78;rR`jurxz}d???;V<&1LPDNHBfD>N7_vFm!^RR8`AQ;*t
zr}fBDSh{EBbsjkOCRDCiH3mem*|{^)Q{JL`ll%2phIuEh$kABm+>*Mb3X2SbJ6#wd
z<XH)=!0I+<UD`uaEAAs=(b}&_Zq}}akP|+i@N%LiM^(>p?dl)kkN(oHbEJRgT7+J&
zK{07?uv4K}q_}*kgO}g^JGl1Y*Rip71$AlUP&2NI?2uBQmQvbhQA*A84?-DV<Cz5O
z-ldJaMuD_77U#esZN?8`bCjsZN7rcuD4`-OD-zVmV~%bQlDNXl{aPx@bOP=N4{V-F
zLQ@+r`?A5H>WA)u(gN&maYc)i0hU#alK22sg88DxoClLiXUzeyD?K}Y)W?|v@W2n(
zIz%@>Izsl0Zm8nA`^Dl?`kt)gJ$E&IO0|0Rm0LJE9-@_}m@gK%d3z6c?jB-G9f5})
zT0^Uwvw%oZ6r%U-2!iHpxQh&ogRc(ok?3+%YOm(~h1(4S#|IVqM-@7~7@z+17C!eg
zTex#;f|p-9z<ckUV9=kVou|lKnREkO>i6MurbZ-W_|$p{xFA$WYBEHwnX)rY4lXuQ
zpDMtaBOnnc<$^8pwdw*L6NbFK5D=Y+QV)%T|9v#37RcvfgK*qOdS=ZP;<j>4XT-y2
zY(uLC#qz^$gnZs#KUy>Qn&Me%cN>%f2Ck*09-LuUTtgHIgLj+egJ~(aIT*OAe2yfj
z+isSHqHH{vd}q1q+LKNdNr)rjsT1ELm*z<%h2uO>n-3nr5vgd8BA7#J8WoP`>6$^Q
zb4KUpE`_3?C#Mx-Ob~Q$<s4pn?OS;C@~3h6+-I<JYk`xy6}QvgTx(%g?c>?k{%hR4
z_X^fmALiP8@2rbJl&_@FXg><)g=8z_Clf=`l#@D_Heq-zG(;>l2g9tfN2N#+Fo|=H
z_&GJAECE8mq{`2prFck^d)Lo*DL>^6gaCofWhYtf5;VH*JX&NaBar~s=wJUiL2;`2
z=g8he{{sJ$ieiE?NtkC;G&L7E3KjC~`2V)|AJCSi*;ydCkGbaA@FpWOOh%f@$}FQ&
z37HbIgM^TwTiv6@z=DRwh&8ijdNs3pXbo!`X4YcpK?5|f#x&D|8q`8S3kiXw1_=Zb
zDv&9eQn~atBEv^Kf8RC7&f0#T8(G3-MrLK5zbZ1~-FNS~=lthC|K9uC-~RT49K8eZ
zwhxW4a3e)1)V%GEhEFWtqG2{M$i~`B+$C^4NZ@c$!2bRWMk8#-gIeDi<U_6x-rYTf
z?cbWfOD~M!+`~uV!o_27<j5*LR%L;?b5Au`km#;}H-b^ZkUr=}(hE6a`cWFPPz6B(
zvq?*73G9k?^293q{{Q3x?C(DW&wYLyKKtoyxN~z(8{g{c5L3CXy{a3MIy<6-$7jdt
zbw*;;P(yjf8eJ_7jl3zEw3JNf&`6hI2kQv&Sc#q)du@UvXhD$owVbVq2)POb{VotU
zB}5fiI67Ez{^|WlfR%)r5s@u9uA8`agy5&5ITYnHlN__vQuX0!0cES}H!C90xdt)s
zM%3ezHQa`KG_cb~O`FV_;W=h3j4zmgYfPUcDEY)lie8VV2FPJ0NvO(<q&sc~gxkED
zTdF+*bY3MtO~lf+xF10hRll?y!OHk3{OmvbA^6ZU-vZ}Od<2r=3KY!*p1bxEJpbCi
zg2j9Wo9kz3&GP-0Ifzic5J#D(qiZ9iDy+gpoB}hg-jqta6q>e#3j3tkvm=8+HY5~^
z=S|OnjVzHQ>0Zmaqvw*3Y{uOmkPeCz>9Dd)eO@CfB#ycx0peVcaaTPK=>jN^b47g<
zuoRF>ha0Q}Krx^ygGGfj%}QjYS`=*P#{(R_1Ms#EiBzOR7O8Hjor%%D=F0RD)BJu2
zjFrf(fw$)2>%$7FrUexB^CT@lnZqnY?GQo*UU~T@yz#~zIDKXVE?qhaXU`m^ch2W1
zz$3X_gW7pW0Ats}Llxk<GOhBWMTu-UdGlKoE!@0O!eG$C=8+V>_7i8|cYW;{xN>C=
ze)CgX@Wx9AQ0zCvT|m+x9al99XcKV=obtPb7)TyhTGVj45tHvURiRFbi|goh={Xx?
zPGEj^oXq$IzJ_k(dc!PoSGd+-U2WPEksF8E3Hp|3i5(S}ShYY+xdR$qS!y8Mi%>11
z=33!-E0m`<sdEs{SKh)^fdL5$@6)nKU77k;n^!Y<oKi97f)XAr*G`|H_cz4O6V3p`
z)xsR~UIbQrMreQ9psDjq#^_e&h?aoz2PE$=J`<Du*ce&kC@Gc0qv4vty7S1)_YQ|#
zf|#dkkgjC#>CgRR`267KV2}@?s0wJR8dgWgVSVK^m-V7?rm{8{%5?-vh@x_?(V<qv
zATs#xgZ)J-gW3JLMEN;n80iPC|G3}aiLelsihrmxsns<qA1uBf31>;tNtmdX1dM$$
zBIF~6p0qh6rJ<x&6msM>CeI}O%(t+SR^zx@un8KTCpHN}2cT&O^rxiPxSe?2HpLg+
zTKn;ijNSowTZRCwycvoes!0FbRm{2OShhzq{_0C}-F1x2!yaw|C@G?u0`ckw;wgP?
zjf<M%1FF$);Kq#|xPD`s(*qYz!XxL7!FV_zo<Kz%06E`H=MkCYF@LD>U}(6*dOkq{
zIQ*BKl?<yBuzCP>1qv9iWbnwtN8s^4as=+&UXbMQbD!HK(jXcK)D*yo1vLfatIVk3
z22N=MksMXH-|23WmN53CoDIFd=`yrwjx6C}J6trj{1s{?x*IM#9J1jDcD|znvCK*d
zVZrK{kke8)X5u;BbK#?Kd877VAPHb;2Tv$_Cyldw#=54WN2zc2v<089tk2*iDU8g9
zR$1<P&g_~gg2Sm~iq<K;kE(c>*Y_@pXoRAsftSRoL1#ZjV_WVq&(4{qV6?ro=u3p9
z%1(@+1tC&3N#`KB%-4Y`l(H6xFgS!G>j?2rp>9eT<s%pju=*rt2UVK!$O@OzOf~*`
zuUP!Y(Iasb1)A4#Qf)*P*BtfGNJo%kl%EaB0ib4~au58@hDp%fge4dC`pAWrd%~^9
z{YKe3X=-{nu=$p}Usl^v8j8Ci>bmzm!1pr03hfGrTn&=`6^2YDbA^r=>HuK=zZndm
zKrVnb18eK~eOqfk-qF!J0B`S*0vX<fsPT;^*~tG^h#RO4uo+F+ocMPk4W^82+4!rf
zhPAa33<p?8%bMOD#zD-3%BDOTu-YD_2ksrf%P-!7M=qRzhtD0OW8r78GZz_>bUD)3
z=uc(9VuiRWumv4fodWucodb#%+7@Qh2Cl!+z;K+vkrM;>J-_!6_{8si2wr}E7e4#h
zEx2}N3e7x)m6Z{T*aU;+B13MyELSY1J>U{%*qES&HT=Oq2E*Hl-R1BK6YF0J!TNcq
zvG*E%g@N6f5JRt32>Qkdx0o?jgg`zUIxI%zHARH%Thv-=zMqy&x0f34`M&9EPTeXb
zbT)~grxCq0NwUr`;vlGkqrgOFWKDB`W|Ptk#M%#1xcECJ9Ezl_N+FvPAmbuYr;d#o
z#+{<CKvB1%BnTL{4gNkuy1$h7nP`@rpAjudSAt=1PJ^g(r=(YQI?1u7I(Do+KnL3S
z5QY$mBBTV^GH064=SDp0plYs1%Sk<r<M<9eBM9%OsHK5i2+rvnLStpDO5)=UA|wsW
za5L;e*R0YIfy1ZwU9yjs4&;mQ6py-6=&W#8PIju?3E|TUD3>4|9ORfICrW@!_N0~%
zl&U}{Acv~O7R))64R;LXGc0HK?Wp~DM@R1fyv-va0ZxuoC~7q$pu#j^1ob{e3G{V3
zmO_dIyP-fy14oVx;h~3*z-zB=!N%H<dW6$++(cBtkpndX1B`-@G&nEe#piFpYp>jd
z)2ENX#fzum_=z=0hZ*w(Ff(hgU-x|C-_hLjcNo;zc{{<gR2;z@M^ymayII4|-3rz>
zQh55qC*bLio`7rDrts-s-+`B(+lQ=0UPA^A%Cjv;#GGsBM6hZ^9IFmah|Z-!?Vght
z;5$<310J9ooI~kEGBh|;%dz}BBf(Gqj)i+MYT`pL#ej<5I@8bKehaz-N<>Qs+12C(
zsG^#$uy`%;6^?{s^nL#=j$QLQSg_Ro>)ergphoQ0r$VpO7XwAIj)z;vLv1eAC9c_w
z;98{R*r22~=9dZKR}!Wo1`4huDLX5ed~gFxDuGh^XY)buv|cJkuGpsl;eDHJ7s9ii
z5G?1TWqyKt$T5YqNB5bDe)RpMDJ4QumLg;w3FPmn@h9yGbH;Qb=qlx(@eF-s`txQB
zTF+W<okaeM(sTMj?v3aNupfqV%gzEiN7yD<-D7<O7^3GEP@Jt`#E?-JMF(|lBY&fz
z>L)D~#Xl7ZHD`33hU)%vD5y-B%a`l6*8zCYqjvz_=8+_c5bm``y=xTdJ(92E4N}dt
zL_L<<jghY+t_d6-R`AiUI0M&i?!jzP!rFKsWG`$$5;tyza4nvs_fdKv!~9zfH*Rdf
zty?>A^w>IFxNs8AJ#+-dgB*&YrH+9LY4cF|K)D7pL;-MCm{G6Oa*Mu^S-PT0U~d~6
z5fw0AP2t?xRe1Cdt-=e>9fg1PGdE#&P{LrCOWu_|9G*+rMD<#YkQIS%v-sU=0t<VC
z@|jJQY~-OlPa`=JUQ+loIt+#(2z07jrbrxW8bF;fOB2NJGp7lObeK!;VhLK&rT38k
zA;df>*VOCa2+W<yXmB|~4s)W%7o@`HKt7@>jwa7523I;+##`-j$LyJKI!O(upbC;3
zcU=a#r{;vj@-abq<T&=aDb{sbAcPZ1IqhuK9E22bsT}>A<$+m_O86y`%cr$Trz@Nk
zN_lJ9p>)|pAuCx2PTb_EUeg>=G)k|F{|tz|kF0$}7p%r#)-)MvtctLLp%zPexl%}j
zbX(Z647?iDjJiGj>LF5I#%D=Cqm7&5`eflC?Lx{3BRT}6f+359z$Vh&W&*ISKHP)w
z`Z1u#HIQ+I1*0AbG?}J4MZ8R^0?L|%y>uda65s<Ky#w$z4k|h$FIL&u4Lb1+3X*i+
zCvcjT+=Ym9$%&Wa3Nb!`#jJsiBSZMk?|cIO^(U{u*4;xG<N%`q656Q9j+MCt5;prS
zhK0z9l$lFlJVe2e1on0h;j`Nlc=eSrJaYadJo3nKSXmuGQ#DYOyxB91X@|1NR&%t5
zJ_c;S`2r$H6t9JhI19MU4*_m1N;rEyf#3DDYjFJ7CHV0ly#fcj=mfCnkw)MKR8q*+
zWj9MXbBKrp&NOtuFkkzCx7!o;xkhe*17T%$Vzfh$>UT|GTDn5Cl{^;>1*IJ$){Xpw
zjkceigcmd#R1TPG&Hdx7t`;e!jsXN)8cjfV(Ha^O1&Ors!hhFM2@ETM*M+K2x>|st
zCOXd%MTicLoul(vJpPslUl))O7?r^9{RJ4!2>J!V`DOSV%K^nfLHjO*HhQ1*x9uV|
zYP<ywH|JW2rviN|Cq%U%yhM&AeTmE``FwQ{IyXhGi3yWk1jp4Kjh$iKlZe5&yVMN;
zLNQHPYtnp7RRVQos2np9a#grWnjxt`7N2K8!aQ}Lr$a1G<Q6nZ(=hDAYqrg}g9kdf
z(g>&$2f!bI-T`>fqjvz_&OuLHGnEIN2u~g3qi>`CEQQkaZ*LyceX}1w%Tn0iYhd%p
z2)_Hfo`kDc_TYsV?!c{E`}AHU(-CP7BWH^qv{Wt#z?y_-OJYJeX0sBWd;U7S`s!Uc
zd*%pSyl?`Jomgd0eNhpqkB~~)sjZAq!ipH3A^t}xk4~T+LKbm~aP!o1q3c&#Y7Khv
zQV!qoJ?G&c{Jl3i<Toir5@xw^;bmjPQb`2FmE9cE7YeCIS>OPh5+I}GLl<|k8grd6
zH9$)0GIU1GnMcDE)bWmo;`fpi4$DNr3#ms}gQdA++t7pUG$T%q3UA^L*|X+BTrgg`
z>DR1L;4)eh?X&($V0Cw-qOv7<Id)eqy`eaWIZN_gG0ouI2%Q#XpnG{4zfTQif&pZT
zMzW)Zs7{LJpLN0{sy2cxX$|Bq2&H-j@&~I<xMQEvLZ!kWH~@5t$|Dd6iuEg0KSI$P
zBnM*2o<RGAKE#RTfAIYeD3A@WbU;pp(CY1XKI1;yrV<f)Jm5Kz!zg8#){#=*qv(n{
zUvd-8y_5Ip{qX*t?uu|k(LgQbs_0ay^b?&eIT83=Dzb?#F{S`S2&e&Al=vG?uQYAd
zO94ON(K`Td>mVq8K^q5cLRfF7duJee*`p-vZea}jo~#k7{ySRH7V<2C!-E<YvjiS_
z_!wNid<^c~JA`MSy$x@^u>-}lfzb$ShQ&~7=Z=u1H@MmYrGy&$<QXz_8@O_13*Nl8
z11C>x!1;^E;p~|W80I-w4^)UCXk-wg4?3_ygIXpPSjFrXxwwh#i&Fobws7kjZX6X{
zetZZY`sfMx?O(qKD{HyX-kYTeIYfJ5n<O-ni}{x}*Cn_)%(3z|%m5&ivb;Cbp2|?M
zlc2QrKSW?s@@Fx*`VeMhrAwR#YepLM>IS#S+O&wHO~=0dy?)`gU8~c%<b3)kVtOgW
zo$CCk5ePqr2@5AK^CjH_eLm!Tg7^@b*a%74q7Xx9UlBxz2#r?<%G>zHbJU|ze*pPG
zGw1AVVG3smbyZW_TfQ#j9|XKan?%X?ccgdm-$7tXubIh*%rQVQBYb|aQITu->vakF
zZ>jl|VPYhR6huJ-s<d1I5SI*}cDx_5vxK$fC7inM^m%i)&X(Zv<DyZ%v~t$-H&sqc
z=kPm4+8ne0B7ddd!xF$Tor$H)m}Q(}qb6I@Jp%BcNACc<t%H1ARUDyJt%_b^8!5!J
z_O9Ax%|g8HX6*tuQQnnJUWz5v0Mxn{P2Jk+3Vh?&UxvL8&*0^k?!l|CZNb504#Qzi
z=>ZO%g%qa-gmRVoWv)Yj2m%WYwQ%>|9^ARR2b&vXc=(Z{@bLL#^j%Ha5Gj#!tY%U|
zq~}J%Ob%@z8pW`0WWN(91o84aH(Ge;VgpZqXak=A!nSQ<EwQ`Q(5VyUk+Ybf?xtw}
z>>?m)?b)u#nFMA$&pDIAG;$)Q7*8PjD$KM-;&-@GLwDp}b2JuCK`JUbUDym5(Wp6U
z8ECYtw<+X#gMH`e<F>Q5mXv%N-(<E&V>uS?>2Cay>!2SEJpzJAjJ2|mH57lN{;Tz<
zGCW#SQ!14l6dC2);(VZ>oRz3{nCr3GmGT9&)Q*!=dVjNI08LUz#GgsCAP9mwvLrO3
z7gT_*Fd$oA5x^3>NaDltK_>R;)2a7Bjw9C^C71Ooc&(~Jp<lK0H@qiraNRoV*kkfQ
zbJT}Xk%oYF@o5k(KWJ`f?qALdy8wzqY59N5-D@lDuv)Z-7i*r&8nD*D;*ts~!AJla
ze-06f3e*0&_h5I0emuz0I{<Ivpwd5R3*sAV*_=25A~VZf|J0x}o~(;sylmZw<o6xP
zI5*e|A<_*@01hV&9PHOH8V%uNUvVCu`S4k|dUXe0eEv3UZ)2@Jz$nL#YPz|He5-9x
zE+MPsh@+fyo3m*F&p&qqUVZg8oH=`xNQ1|Zt<fe~78O?yWXp|NVlF=XTLUV+ERFXt
z_m~0{CBS62ffFZlIB{|Ww{Fg1FiZf|MBD`mN(yRB#Xyh&6|$CIp4wv_R_++eyy$hj
zh2jJexpFDT%ECUPsblXK&{ImR++fhP`c2hI@2r`SYFHuw>de?7IOychQK+SB#8CtN
zuhr^XnnAzM?u<E<+Af*%yrB%S!vl~(yfh|O>Tg2~Zc#Z;fxzlkJ*mi;Rs;m2@4b<&
zgQF1<^=G>Pxk~#eQ}|+*hnr}*$s`9L9bn5@;WVfQzX34*;Az*sj`Jujh7sP+*!Xi}
zD7okI%&Xk9=lTtX@b}3fQxR>#LIETI@?5DlgQOuGt9uL6uj@LjE4i13ziD}~pj4#a
zZ*v$VqODveXi<2;?kH6d++q%hZWp}fG_8n!G3x+upGdBVLTyLot?&o23V_!+w*4-9
zA)p65dI#Wb8D=$cA(xVUC%6_-cqSw#scx>!gcU7%b=QdjF0f~e#{z+iNlE&BU35Tu
zftMw~_ErglJb_0qoQB6PpMYC8_u)C>2^>IEV2jfs>71MHyl&)6>co6_-l|d9C(j4e
zBK7LkdvNXAHXJ{;PU1pm&TPWUK*WWrhIs;3&4A}ES3pjXB(6n?FwPziOho|9XDzI(
zq_BB(2sf@zDdNIixow(;%Pd$5m_zK4<CkMN`Hz2&ygPZN`w@LTZ2G)`Qa(YbSKUaT
zKks$g8j@>d$9raibZW8^?6|Nnk>#(&$&2M@@!kqZ97-RRI}pBdX%&Vfzm@FaR;(g8
zMlO@{_t;U^nK&4pLvh&1m#9Mhio0m+8`h?k+QsSzH7Kz|qh5#8-L#s4`v$1fAeey|
zSvTD1bEz?tdl$M8T8b+ju{H-a1!9EDQWqqntH~=`@nZ0h)iz{89|{|Z5}?h4x`tX-
zsq01&96>&!1ca5}X-X$P(kifJXouf{2;eAs;vAT`>f}>)Xous4L}PNs+~JQs5ffU%
z_h6R>S!hVu!|0wFeF5RKYtlO}C;@vn;s{8?A#)rs)InKbb_7Z!8Oyz{TY>}n@c>8f
z0KBaOS8`o2LC&FD>HE_)?DV5=s!^fN#9P9q5jSZjA(0T9%Wj5E9ZUU?T)VeZ($B|_
zZNj&F^AXtInZheCZ^4^y?!w_5Tl%IXD&)C&I(CZM90dO{{%7YzxxhAo@c=t_p~~L`
z?rlvdJwUw&E*yvT)fJe{swKjmU#^xN=~ZbN*z&ZXBZD#kt7}ppt(&aCnT*=I2ceOW
z#jHpOM8qWks9gs^!)^b5O(Rgm99pMx`ZwIWPC%xpf^N(FKa+E^z>L3N<Z(i&oZML}
zKNM)#PEnBnWu+^+p+vffFU0lb*Sn-Xu{7CwA;HMR`xNYx<;4ZDh~=w%4`dCQK74dk
zeI0SvL?;9KbSt5-8|5xvmqfObmG|@Wg`h@R929Cx&Cg1nuRx83I#{AhZHpz^R>Xi%
zHSV&<3W8|D_!%*GN1=L6J*lBKc->VWZ5f$I71kjAUb!Rs8h_rL{-qh{;wH-vPFTNk
zEI!qEyzW{ik)9X?SmlPccj|rtA}fI^*g^YPc{8N?mF%gcSV0B!`tVmpQ--2dq#3_O
z5Ymr#Z1fJm+c_|*Pm+>0=n6gEio;YX3-eBYN{e15MY$)fuXI8K9T6ZPJWc*>hY@2V
ze*M8dlfuU1G5oHNpN9{B=nP!Bx(9Du*@B(jDdd>*A0V`uVuVdB`jo{y{Ck3NP=Ikb
z9FS_?qNw1Nmv6z9H}1gY$4<lLN6%6x!U$f{sV!ZGrbBd2EUM$FgvA_SgdGG;?$AYK
zoJAd+CvCZ^40MakY<6_o&H3p1D0X)`KPxP&_2tW(lSN{Y`K}uwQb5R0a5X$FtK#!>
zx|z8u9_9rTEBppRmO0Xj8WY;~c=^m!(XZnKs1s$K-T0U+z3ZrkI!;36l(I5a#}i|1
z`~@b~NgT*8a+=vtD~&|$YAxDzr>=9aLJ0{SP8<`CFZJ95I$_Qnd8%S;B;BB@j>!<x
zJcp(!MS+fK9n^3qL)A=a!b7$HS{b5gGgixC1WKY@(|T~Lrz?&cAL$jS6mZ9#5e38O
zCz%5#A2R1F&V<jVp(}CC#`UVEKcIa|NMvwcj}<sV>dcZ8z+z46tT>Xzix1H;Zwc(!
z1eW{h0?~%uR1`zc2hM9|8~_vz0_09PUAZ3*X!H)i+d8mthYDNe5#bHly<`V<Ew|rk
z|7+1}*C>T3vO`oeVHN(Zd+Qu|&^J*T9p_20NzZ&y5i#(oC(ghJKX?Le-kiV-FW!OM
zxA$p-#4<uGHKYUu=G^ad$2D9wd=v6Ch2hGGzU$fNZV)-}gC95#<pRZtJWixf+a}^N
zv1&qfL#JFK_6;vY^F6@R`qd%qH;{tG-#Xq=ql{=(o^w@34pn0wIObXn8a85I01K#b
z5l3|HOt_=qOmVLSV949^s~qUL)myRwW}G`=E>kX@*r#4u2lBUt!JBT2xn=2`xO5L=
z&b<91Fugfk5}9-4F9c3o7tZUjoW0ze;G#)7CAQ9WsGR>DIWO)E1zH^e@)AqR5(wpk
zR*ovUXq6upXxhzTPEB^q*$ZSfK7_+>+Tl-q4Hp>_Q!Z;x4Ybv37=RLxAN8Q+EE=gx
zRM5a@Gk(&M5!V1PM@a6K?jvgK1OGvtwWvR#^Je$VAuz3);3-hO0~L3Q2_NOSx-&qo
zmgW83AvQjObUE~@0DwhZYWXU1X;>4u9}jHw4#3+uYJwHpk|1De*utb%HPT-8$M08C
zlx++Wuyr6$vGkoBHlmpsKt4=K!@sUtsA`6WsR@~Nb#vI2B0M=r-6XKHTM|Fv^ogTz
z?pu$-_Ra)ee)%rEd36_NhXrW^U`ZfD|H{}`MYk?tjR^9h*ta$w!)veIg)=9Q!m%S8
zP}LP{`}1W4l5mJff?@R#od8;>k*#e8jvLOjRLdn-D8`(w-E3f}cCbx7<cK?^YWlNR
zA}G{uC1x?|7o@?!1|<q=^B3J7I~Lsyzq>MSu-xJ@E1QE&on85(Nq>rFkr3HZWu$fZ
z({f9k1QNWXC`>e=bc<({AhP(mB1Mhg(mFFoCEmX-5llbNw%g5}kNe|Sh1;Xg;>Jr~
zP^>`QLp4e)Q$xRW=QrFdJ)qn-jfC|EsBt%gXofN5+$8sHRXFq)d5d;_x{lC@^DR{G
zPMc1JkIMaZXNL9%BK<{=D^?M7v9nmw8jEgKfQh{^QtcB2tfK*;$koz%vwMrxEqHkm
z&X@V%XP&D|_)aQn$$K1CB*~p3#R2pG6!zCtLJCQpG}sUlnNj$A43!p?F|DvgU_ni!
z`td+V?*P2bqfN>Kel9DhadG2|R2;yRtqx2X^ZX(Q%WZ@m(N?R)&n?&V4~8ieRSmaq
z91>Ay^XQlw`(P1GRaI7CXPa~=L9#qDHWz3U*x#!F_FGt8U4gIus>|@q(=&ME$_~8t
z$`%~#7nB|t4!FdrAqKU=+e+fn8fWt}=<jPcSVN$wu@68nqOBtmOtuP!!8+w>wC91o
ze}QeOf+pO5517p4WmP^48i||n=RGq-o5Hq}T7Ur9MxzoUahicx7p0co^?Okc(io31
zgW8SxwS-aqh=2^xG%ds2%2iMVK#eQU5l8-S!Rm}U17c`9$cjP0e4o^LS~fWGu-ynY
zzzEibNvlpYqwUCvf3Y^9a^v68Brr$Jx*my~wyGfsBGZXz&1n#4ARrTF{6l%4_Qa!)
zYsHN|OKv=)x}H8;B-+zSR#ATeLZD=0pgsk1@}><MI~s<`=%60aMT#rh)gc_gQKN0h
zl%Pl*=gu5s=MdqF_qu&@Ljw}z<Vs}o+wxWdsV#N>2Rllf@}j4aoD6MNiqCz5Ox_fA
z0E&8s9zITX^%gm-e!Rn@cL3hD!H;3n7W?=Udb1TF0v33Qn7t78lnE8GvmR)LvL`G3
z<E|bU_3s|c;WvNdD$J&HszVzMGdOqdC|o>$9F81agStwgz{WmeY*jjzHaI<&oEWnE
z@x|$^fyrb+_5V*jc@{qK#3{IOV;^36=^os@Goej|<c3Ams6!Ccz*w#XNr?OVD2P~7
z6C>NKLZIc*ox|O4QFLZex%mp5Hcz3ZlH^V#ujD&3pq-&5TEUR<_pnl*YS;@onj=j$
zQA<&MD6Qj2Ug1$UmbNJe<Ey29%dwon&LQ0pM2&TpI-9&{7nm1$Kh^Jx{;YyQX35;~
zvej$>ZGhJW$w0&5k*%uFIm+d$T1jz^_DE@c=j5n5Mv;ULN7U0S>Qk_~968AiNo*Jz
z<wn|49<pYXrSIvsK>QTP!F^G86xFgV-&Z~Y%>`-q+by$y;{=70S{xYThPfjnt*Vif
z32<lAQYjq=vFjQvuWr`DV8hF$s6l6h_ZxR+;u;V=0G)2WUD&%%NDM-w<=5SDVn5Rw
zY<HYxzTLRtxyAzfu=;yG2SQ2Piue}|w2PK7fqp#5(K`Td^Jv>@!f`+gB_^?@dzq1a
z)Ho2Xu1scyFhzKT4y2oxZ|u1FVTs*y&)tH_WC|-H)>D@?yz=TTc>RsraQgHyxOCwZ
zoI15ZrE>+<=%W+R-8QuLS6@X(Aj=YJz_+_y()XM_a~v*QJWdY4%P-x58`pMWRx~gk
z<}g5KKyt0*&?wPNPPRtqUm0R?FOz?JL}gbjyNcwv$v(NJz_LxZk~Z6TlrJD}iaVsi
zzm^g1lKOd9c4-3Kn6c`s=JvK65O$;W7`4*5QFoOXHA%EiDo{%XPYnzXR84nyL8qgW
z`j?b$XuRYbD4mzsJ4PqOVs?Um&*3Atf@dJE2fYrhHqbfOh*>vq=N+)HiyHqWzs(co
ze!pc7RPmmLcHE@7euBA$a$fR5xe+eSOtHTxKDzRuJ5>rJ1+;@4ji@W22VJ@ZMMc88
z>8xLEmuuZU`IsbF)N$%OLf7XbiaeRq8PFvCD!+GrX3lo-#iWjp`t`oBMa9u77Th_o
z$C09Ro`3RzDUBfaUDF~05@5PXg#Fps5r^LphEDfHB_Im2f~hD)1mx748s&fi%7#k+
z)1;~9Ep`6t$AcWb1MoJF1{S;cH?H%F2rldm(}t~^oo>Juxy5KhHmUmq06^Z-Y+Azp
z-VBDAOA9&bmEjQTwuKuvcHqX%T{v-U10KC}3LbiB69!nLUo}uuo?Zh#Wu!YYO5cG!
zQ&Q~Y1+c$c(*C)*z6ziC`b#jKE#URncc>Nd;e>etoE|{p4{pb5SX&s6hC~jWQ-JLy
zW4bxIsTSu)gi0*<lG=FsRF@$oFsz2Jn%k!!o{Xtx3Upo#S&(y!tZgs(^XQA;CiQFz
z74t;fX*lvAn>=40g`F0?N!emdy&9O)TB)K#(AxI~bEUY$>NT?U)~hwnf;o=SnbG((
zY13MY1G<i1oJT2RQ@A)@d#D27lF-OmaN!(NwUjy0gIlUXU|_#~afE}!eV3#t&Hy@p
zIDZD|=&!w0P;5FX&vNToA~?|O+uCp^MH%^;Qgec4$55;D6Pzu(m-PL-B;;CyDv}&s
z^4~@T6(g*(;29iulBge*&6A{;%&2+*(8X9ZWhA#a5-P(z?Qlne-)ZYkj<03JN|4o7
zzn~&M%1sbQk<kpL1R_w7An`v{EF&cpfg3H!y%7h9WVXqH#65-`018hQ{7OF_<merM
zw|O+}Vxo;Ss=AN|#bGZT9)D5JOLT&%cU%WHw5V6%bu_eS<!VeVF#Sk3R`R&98PH%r
z$KKhQz&6(CZ>~^%{`m_hU~P3sVm)OgFr<_Tb~bSNe$o}n`3xr$Ob?(@&*7P8&cV~q
zoQCUf?!!wjZ^NBC6WS;S18jB59PQbB2B*(%NbW(NX}vBjfeVBqE-B-l2+D4^xzdk&
zP-w@CLMilL5(<jYy}nW3FKCR}GIbWTw9V(f8z0No9K=?1^Nj58*l19Uw$(s%_zHX;
z68VSP>yQZOqy^NF3M1QAQG}T7tmT+={O)gvcBV*3Afz!I9j+vZz4)AX+hBH5BUfFo
zNoOsTV-n^c;OIagaK5KHB0fRJ2Mza|jiDPORj$-ddU_uC60SrxIC30$()g>rK`uF5
zwl2iv>UD&<W<@=jcX3cP8jeUv$f`upN7g{_L&M5a<jbpK;_p4?j~ItL19}Igye<$4
znfBnlIM{Jf-4HL~jNjt!njBAVpE^&DG;pdwk_FOV7!euyY^bU*At0;(Kq+)-euam}
zAc<QjCv(Oh`tcw~?*P2*gBx04b!^kHOsENmENuzaN;krIVbik5lQPo$;El$zVMz;9
zgR?FF$zwD`sZxOXyntt)zfR12)bYQ3`6O(tt+4l9RMu^;Lr$cxrUz7n_9&ukP@;E!
zr-0!gfpZTXhf9}^!kxPlc<IG$xPE;X<_nbbtl^=DH{i)9Pr+=8%~#YI#7Z>TPMq*>
zn`wLp?LDMMAgy{WY79oe=bisb-RP1`uSTsJ6N<4Xl{g`O(d*jmMGr&i2el1B?Qba_
zvooO2qvo^Z$BjUz?^0@&mqGGjToo{0yuB96;B-Bxakki7LTa{KYQ(W2OQ-hF;bcX3
zrJx|P2Rch2z(Y2tVzt$oLL<Q{l-;6+V1fAaTAdP%D{1pY!(z^eJRQNo<u__aLWj4t
zemyGYyKxT=icC`{BNLvp*szL?q^uKhD9F9k>#~Z6z$vijHh3(SMbI32xD%vLz!e$F
zqVF1EH^grG@u$e!h|i3dG#avEzYLBXR@JEEECNWZPU#<HDQ!6qq6mcR)8GIjeCZ94
zsV0S>ZmK2Wa>|mj;)a2i3c>r&8~}V%UA~n|+mCm4^bWw=JWvW)Bt%mz1Eko*n%D3<
z_%C^=i6!psYnP)o*C<Dg{1!G(WH4SC!olv046$#7JhZ-Ew+$@i!+brK>AmvGEx2;^
z9-KXM6fRvl38zl2QLIE-{wRv36m)9*O$0*TqPd@_q?@sPr-hxZ0<x@yjrBG7`mf)F
z$>9Qawr7;4c<9Uq98M6>^Qcjet0FRSqvm<AIJ&c0a!yj}jhBNXH5;9>LO~huS0usf
zy8Q~ODzXwqaFT{0%yy{+(BWc_9$nm?kIZu}@TrBFen$+M<sBMJJ)G|#mXn*Z$kqE^
zEK$7k&JFq}hf1{jLpMKmHq`>?`Pn~h?L{=o=TplkgDDFBPS?1Jc_Q8Ccs(Ac+GjMQ
zcCP&$0058ONkl<Z#ZhDEB_MY^azaGnxx<R@l;p{b*c`b@G%f*}FT0Kq-J-$jR57rV
z=Z~YVC%Xn)J5Ad(8TNpR*VqO&f2WjGuGi=o(KB)pCM&58a=<Kh<c@=@0mS0McvqD&
z7@gu^%!59Ko~$`<A^oAjh`AihVZbs57BO2YArL@?oC9nJoXh-iLm`d$S@suyuBq84
zYXl&QN!0+@6;PW2Q3{}U03P({9e}rcB=tfzleDN0_$B#OS7mLv@s4cdnlrFSSEEFP
z%h3DI;PMkk;WvKe09M9hs{c2>lRS{ZA@gWS4DsrCNJjbE^)0w|eH%`l*nr0_pM=wA
zH(`*XBY?H#9=2+9h+(a7M0`OxIv;>+|AzhyM>(80ew0pqXN$?aO!QKcl}D1@n8ps-
ziF4FQ+39o~iD=+7qV)1J&+d{FgKmuEhC@Al$d|HIb2NIPlr0P`%d{XiM1bxugwLt5
z)*~bFQ@32@JP47D3)|&0oia0CI#S^;zt1RL%Iih1xm!j@DFCviYOJFZBaWh?6k-vb
zOh)9zkm`tJx{yP+Y66K@#jvmjKi_{7ERwYp{I-q`22ZUz3&`t3_*uQcNLUSg8RF4;
zlpKvQxs#TX2tHJN&AKx3Np(66Vh@M#9ulw#;yUOMm;qf5@9A)Iw%X9BW0LjWYIUgU
zM7Wz8R-HSod}e0!xfVe|2~QNTT(3I`f}uI8WXg~M-|w6o=U(XkQs<zc{XyxJq|1Bg
zxFF#g<U%lE$?i)=(?q)iIs;7&MOA5)$s+hu{dhp5cL3h@QO^OIIX+$U>JT?!iYiSN
z<G$RjtF}eE7Mq7?B!(&V{p|{#dHNJwd3_J=-I~D0+Rz|1e2%nXhnXjVQ|Z65VG~cF
z0l0T>0(b8sPhbq^FC2sOj~s*5l_69WRxo%}rYM6!lYx<*b0Gqhix$cSKFlmq#Hg?c
z=GaAfB)0sdcbU-+XEs<Y>~9Kl7T{vTAL)vX(Qk0I#!eQ*aPHSw+)CWiNY2>Vc1j^)
z4Ut>O-z!|~cWg;V-E#i=j(`xzxi8I#+%tA6NJ-d55A8kZQ;^PmD8mx--btX_H%BK*
z(gn&`H*=ylEIMDoDbvGPxM=H4qDXX5gy5!etBGM*J$h6O?7D?|{uW8<Ia&{dkk1a}
z5R1*tPjzFYeHUU%z-EU#F)gnn*BB6_#s#*BtrPCFXd_Cof-loBTlyfxR@`<^R0ca}
z8pyG&6>qq^;S$5o(ai{4lFk|vXTcg5c@Ktex<`+MX*U)L!ga_cy~=ygyoe(?em_Hc
z$siW}E_4Fe;X#qFswtY3UaJu^^f&k8fsAgihkpDAj~0q~3+)si@3NZU!uC#FYSm@W
z(n={F8mZ_e&^ajoDn%5ah3S3*zvtU7!^Ovs!L+DhIxl^Ll%jtPjI7y8*bp00*Bj;;
zj0PDT9?szlpT7pb_zTa&Z-4d;*gH6c@k#>YaW0#Hp9F8P5ssC@`3$QR62K;F{4&Fe
ze4X4OO!>-cSrpbKq7V@vC7Li6zcY|K(fAUpUd$Np*qm6z3v4=sLg7pBcCFicV7qJ8
z0Buwn;p$~B^#E{-V&~yymf<`DNzwj<5V*q>7so=^LJTVXW$y1_5V?}P)hq=P88NNi
zauNCYvF(g;sm`R_izvcmN9b}zJZkq^e<dCyEo$H3AC}nBBk}Pizz$B61?J&gwV91c
z?3fcRXA>&~)cC0bWAmoyMYo_JvJAB@KL8$h?xDD!U?hBUJo4A)*uGhfuSgb(Vx*p$
zf_wBHMUrg(&3#(B9=}-}A1|AEf421wF3n<y`n&sp&J#a(?kYq_ES?HJF9hFf*CRS0
z6Z-IV>w^&10nLFt`xt<b?0`60hyavWcZ|+JQtj3dz5RYXh|wbeZ}X_z#iE63FHMr;
zi*hnYML>!+rA|CJ#HNXEzP*+O1@@S;o;jC?^1ZWp1EVH|Z~mssuyyYcUVLE--n_aE
zi)ls8bMjmbt324|2<WjS>XM)HG=sq?g}Scc)mLuA8*ki$Q>Tu?<;$nw%-K!IP)}e{
z6EdKIrEObc1Z6vSJ%7E<ARA23Y22cg+7bKk*oDfIIz|G;MRdz`;uV)LN4TB7RA^=~
zM$|}9kEk)G9?yYOKONyN7zWD6^X6`Pz6uq1?3r{dedn*v^)g)U#zegZCj-jX9fDO>
zjTE?6T^m=V#h;A>;RaisjqdmRmxp^H>U|z%2cv6cWQt1bHKQ^lIVc*u8pf}=WG`P-
z4^ADPZo`>y<J|C*GwqiZt2gMLw37cfCq<5Jx)H&=g;F?k1H8{~AmOR6u)IEm4-(dE
zyu%t9o2*`p<aJ$ZR2|6!wk|^oOiC`}z0?`;SGo>oXX-i#fvk5EbaDs5PQs#hxr&Z3
zl6;;beZ9(-xB%)1QR2Z!oLZ$IveYDumY`NDl-QY(9Q|UeZOYyOc)+7~0N%Et25V8a
zNqvBZs;H+Z3`C4_et>;niVvngXI|!X9}0lZgLEH5`Cn|8yLG!F3ExkA;sQ)QdKzAR
zWgA|9Z5t+sB@72C<O76ArJTo3Q??4Ty~@bt*H?yPI)^*Acj3;R12}$k9nN1o2In3*
z3ajfwD2oP)5*dTC!wVK@FrwK(Z*y#E@mS`hdhAA$bJ#NM_a>U^(dY7pCqEm*N%k+-
ztO>c$kk=MPIj*Z0$DnaSrsbM70@Y)y0J1<$zmucGqWG>-V2sZ7jm$z{DhZ6sN63YG
z&c5B^zqI~bJP$!jX`|H?%~Gi;pR1>S?wdDbvpZR>%Pi-}*PIeR0B5g5&Wh7LYTSh3
zE;(?$Z(TB62%m#zq`e*3==i+3(-KSH+{pTW<r;|p5U*M$Pth#l9|&=VDF<fbY+a>T
zH9$+8==1vh&WP8w%-7$IqFp4%BWedFqLXefvV+{TjTBaNswR>I-T&@gims=oTR0)q
zm3R(jzjGhCibyIW;zgN%LZzH|@mLpQg4Re5q*{L?A*<d6KTqno(4Q6{C+aJ1gwhfi
z02WOFMS~r`GN{_c9##bO<H3&J0eG87+ZI^3wwopcD9Tw=H;XiZv2TRIGna?Z>Xq3|
zaG1coX+5|o&dKJ8QRCrZ1CxUq#;XJP@JG(UQ%|3U*WcKIS6<qJz1=zF8Q18Op`iAs
z{)}5hV8)syyYV~6!vSsN`+HOP+-DErrI+r&!;c(+OBavB#`+2=d6iWyrCduH+_%VE
zlCd@BGk<S%f_!2^IA_~>_l!0Au=iQkM4AJ2u2M&g>mB-4xK>-fvJ+s9-8+hA{DBz#
zO3P)@aPS5``W@<NMf~A@yn~H}6oYkOYH^7en&!}64x;3Hbu^;ga(FyW16~r7=8WjL
z6eF606%Q8G<jlXL(iK!mWUd9F7yAAsWhwa_r-SY<&GYM**EFcMQ*dO$@2#H9vcs&#
zGC0}xACI#2t6~{$=UT~jYPq0@R0TGFY?<q8R`cv~zXcJ|x)#<m(v+BdnhGMqyzys^
zd>F5V{Q`cU^8RCaXma0LjwpaMtkPKB9AD=qnH)lgYY;@Nq)C-`_M`7ZDQ0fY5Yl#v
z9I!(obElmWum=d8W(tdXfgAwHlN`&350@52KOVs79e}ra5E7l#w-XpZSsy}CO(02E
zp{)W*%S&?jvGbjZ+i7BS7dJt|0)ui`h%(6lr3n;^7G|>ohQkCNzkCWFzkD37-`Iy2
zU)+MbcMbsC1`hI!YPL06j;%|yAH1gw_-gVz1<WW^Wd*Okd<(9=eh<z*bObIvdJ2vo
zU!x5SQ32winT(zq%0NvD@U}Y&{2h7@EFJ93Y%(08SYi=YXJ_j=RFZ~t#9>+ET)#&n
zC#i6>gSdS+WM<hIyXU46oSG1IgF>8VhSWD-Lr2I^GIM}la#3jfonW(;P9U(wn&}8%
zLDM=$0wprp60{I&-R(6OxpBgyv$^etiPnVQqiCIjc#;|4Zm_L3OoZP$<jH8Wt%8BI
zoH(<>#s-x%oYk+B8ooo*AMyOy*<5N+r1ywE7s@=%kz01$B1c848X^xQI9B|TF8tFi
zof8qGK<}ZygDwVrszK1)2O>L873|Uu^=BnZF5PmmxG_EF?z696*OEZp2wmG;<InKE
z68U&OyTn-8E3izEn;yyh;P$1fK2v0a+hqnvEQPXJU=jcZ%>W>4rroRP$AcKX1Ms$w
z653?(dfKkRqMpEExd)rWGv4bwZoX!tTr3Ao!gN-2H)D$iJXgzg<2vwn4e<l8takfu
zN$mV{XO6&y3rFDg?I}F}+-;Hxt{2!mC?}a-H}q<O<Uu#auIKVo5f{Rr-@JxpggbEZ
z)FxcKbP~>--hg46Ls>FUK%r{43$8%dt-_LnF9n31A2r$vJDEj-&Nkyyq{MK524ti0
z?sQR&PeD_!7BGX4{tVSETg?^EO^gJEHE*Ah&#_UG*pdWQ@UGB&cFr$$A+&o;Ie)q@
z)GpPk1N4&cNLV2!Yk;+(A`}uLKe`5SAPADD9>M0SI5;7qJfV=w4r1a-d@a`9jZ+JP
zcZegR2GbA^N-s3s=0Sctt@JO%;J66sbu}QY@+Z1+UPwbzEr7C4rbYE+jPO6<`OxQ$
z;QTffen@bpf-}-_`1p8=TJd|tWOk}Pg5zUoNGP!kX{XKup!yM<r!k|cX@O;qLPDj7
ztZ>NtiMN?H^rs^n6`fvp8f*nvX{<b><O86S)S!~I$y(F%){s0kuS-#2w7E;#G)ogA
z-SXWMeF}9{?G9(;9OyYOszXefLXxaw`Si@6{w0s5AMe=c9e}rWU|CiTbvt<}OO8X+
zEUJTIJ3lhas3R=W*DBe$sjqzyK;dVQ7yjWydI;bHwVcP)5g}H|)6%~aZtQ~(;qDGQ
z1xGj5;Tykc9kzES@bZiIh%k6KFUX+hTE}M{$>O)f$cdwT+#*JUAsL^0cMnJk_{fnl
zoIigY9y)gv)>cPQp(9Y@)}48@D?2-1r?T(61iTL9xl}0UM6^i!iuvmh>C203O!1dk
z!|mUqOl*y+jTaXKd?8(XS)p%CrVyvT9M$)CQ3ow|q*|wx<4Y78ijmjSH0#au7bRNd
z{C;o*xoj$|0dYp~JZkN#&Uz5Ed;-VMWS4{U<)96<*XuZL?lfuSu7pTvm?kgg#Xu|m
zJn8s}yl%T3w`y0prDOmbIr)Bd+O&>dbp(RtvFa2xer60qG~Y3XT*7B_>)Dy`d1n;x
z{gqb(Db92g^n5yCLY%WMv2Mv(bOcMiq)^_daDL~JSMNyHtC(Y78;Xc%4~j57g2V(}
z3P)n-J~dg>W}IfShD(7LqW6w{6+!Eid`b~MdLxJ&IFA7LI7Bh1jMdByp#e0XvvR^M
z#xrb{SWd!H=*I&Zy#w$LjJln?qD<w<>>j`>noahu-@5ctB1^2BPE(l8SeehCel1UP
zU%C@fnUM}5J(2~{{z3wigA$tk7FJfq@Vmb15<LCPS$O@mE&78kfQJKY>O;{{$lN<r
z=mt|6y!@L%meb}j*<ZltK6?#beDM}M{K!$b{OCzIvVm=hS#Fqk0xAXTpkoAeecSc!
z2n;7ue-JNIigU*HfxRiidxKH5=*M#c9`P(qpvR%^jPS-vtrV?sx~B!q8IUY)cf;-E
zQmG`7>^3vhb#!_MEFl3#f@6hY+f?bl$f#mfJ8hPLs&pDf3fH=0`j#VI`Wg}YF$W`x
z?R0YF0bh_v7V8n%?WBfAXo@&uR5)B&V3u0fAH<w=F?yX%0$xHW8yo>IFO9S7<!^ik
zh)WR-V&{J9&2|KZ(q8fv#IYq{NL%oz&Vw8N=q$QZ73{RJ`|&(HwbA*2bm9yyr7Qu%
z00LUTLpiQ#!}Cq@$5CX%*!bcEg!9t*@y=2_TPi?mcOBI*G5XgT4$h;k13Iv}65ZF6
zq)D43L%j=W&ZOre6k!wyK?gu+PSX+*09{%2Ugz=d#{(I?1Ms#EeYg(al&)dv?)**4
zzw@@|vKhJ=ck9br$nq2pCJR^;WzeHnqwbriMgwg46?StBllMUO&eM$DkHxHoIq?K?
z`0z6i!!u8vhBvS6!b`7gQR5&?G-G!^IzC$$A)qnYmm{GN@yO<prwQc49O{b82(Mn*
zf``r?g^L$Xz{!*Agalw2A*u{YEZl{3<v(6FCdU{17S-NtnjLfX55=T?XJ_)5Tl3+*
z4a%D>Vp<B*Y~xOv7Nv!wBeGOY*Yzou%IYMtGIJ8}<H-1rM<M7z$deic$1Z!?Jj#fY
zv@Y%kfX%3|OfE-*(ccgsL#NP`B?F5v$Uvc?Oto<i3k`<swgJcHGT6V=A&Xt)+~Hvw
ziaDTGsu}v>b$r03<U#nar`6PmcH8?#ms6ntb0<QYL6IhRems5RhYNSkEGECwCDeru
ziCWoWO?sqlG>b%c9DhR{+$AwCg;ht;y^2*5QKLZDf7f8ktum(|mWQgGuW%WK^r<PS
zFs=5i=>0)js7MEE#?u}{77Nj9!0(tW4y6wPssk=|;@$1XgBiU8@D7Z!*}c^!)g*(#
z_+Wmkf~2GnPN_cf5U?rKhe$SqEKOlLDPVVJ4rk78!0fQX-t_kwnn>cdXRu=^W%E+i
zFGLqe$}0iX-q_tKVK7MG@}sBVu_sQzt=rht=MG%IzDI@}Vg4MUISX@q6ZWWubA6@(
z012!PM-(|;yS7bSffL8q;r#hiaPFZ^SXmvyVqV|35qH?wfq+ORIKJ0H?5+`x|Fk)k
z$Y0^<DD4{oc>jz<z}8oR4TpWoB!G1j)Y2z!f$aHuQL(eCGo=x*s#-T{>i!UkR(!Hz
z9H|U6UUQ77g<~Mo6=7{P0tO7(ejReZQLn(}Q+q{5R;9R2ZfiJjrj)x2E$N}+sXCt}
zPJB53u)1l@GC7cV@=kh{(o^klXQ+!hNEpR(IgM2nMB}D~a(4Zi&-W9yrJ_!PirWNN
zMis8nF*Cxbeb^m7i?jtQkE<?%KW1r{N07FrT|-zSL>5e$!mD?NjCqLs`LMG7gR|L9
z^F=2`Qah;pM=cWh?3CTlgabX6AHlAf+i|l4D1e++9^jj@1PREws5dfpbWowqZ&Ku^
zG%($|e**gPPLJLJcv}aX!m8bwHR=2dd9wPo2lKntqCS8;8AFEsE`$rll~MAb#e6L0
z)0zgZT-kw(7dK!&7h+L}T8wYbHE3pp)G+%dCS$35O1gVcx5Az6iW>NwJhlnvzG)M7
z_YUEO7w^FvZ|uMUq6LGT$_VM9ZQeQ(v%iS7&!uMLVNTA&&h8=H-I~CQFRoAnq7OWA
z3aUyFhK?f;_RT;ta-20l13FntCnFw}|6YSk-H3EEH`^&Q7NUOpPHXPs&QzGf&cD^I
z;D|~b2YOLKX8yezNRF%>K~dwYkUal3NX3fbR_BH-qDNsIRCaEPrIhS_^c7tr#8Ign
zoQQk^6Jv>Yc+aw<sX?rUdP$3rG!r0MidyA=b?Tx<f{4lp%ua+o)0uaXC5>`1ro>}M
z6o9)kh7vVff1TRDP6SREn5;G9(|60>JA6w$_l`}sw#D)+%JukajGP8`JfwPV87r`f
z)NAHikAPy)b8Y2zOV2b56SRmL$O&?(p^z<2sk5^rIxnfZ1GiqXS{RuVtnY6qm%@kQ
zw2IH0R_w?<KxEH#g3R#ij>U61gftn-CPA$%U{Y-1StHlBX<)v8|JnBAogTdu@H;S?
zcHY)-@N;Rh0*iX5+AXfbAX|Yf8IUL3Enm`zmh-mwC?GlSrRVR#-u@g`R*~Grn=R{%
z>%$$gpdC6g!~JHNLV#n&$~Lx!>dEmT-QTa^?wu0yYz$xh)feG=e*e?(6(4^XM&k^o
zvl5D`;XJ<eEqCuf#uUza=60aNd;lxM0Te|EpZ(kw__a^H?n;I7IYUM}aUj1&dN;<n
zizvskn2sEi;Z%N~$J*Y9USpe%<*;bhYQ~++7p@Ok{_(qP!{;s9)oQ~=+5HyWEX|l%
zQmBJ)xWKDMtLFLy>%>kA8&S>Sve9LkT}4q$e?c7``M07P`h(j~5viBXkCvVg?ng(t
zGF-nqYS9VP*YzCbb#iD!OdQKcwNx-F`~}3KOREcaLEsj<L}JLRbL?x(=8=35Q8G|T
zN2w}dXDT?J`cL9wbe%y)dz9DERWa;F-l6J68K!zIs+7lE3O;Y^F`=mkH|n%%=z&rB
zE<KV=Bz-SJO`3mqr&!q`;m(Qkz`le|6ftk;1Vp!AQ5-=Tv@^F|x2;;A7fnTAoRg&k
z>VJUy8<hao6&%iYn>5Mu7V6!mU10x|emvmOI{<I{;0LR0w*FO;<YdyfrmsVm@pek(
zcf197KG|xyaR+ON#a}EM_~gHQ16J3#GMb1pVUx74Vss#FQFk5x=#ABgO48&WXp62~
z*bpgZO;Khzf!VBud$$XyW(j=gsfXaZzUwLY`mehH$BwVUtf*mDl)PzhZ(z$Ys-l{n
zpOyWJvBK=b=GqvpUb_b`ymX6r2&AlTQKlLfpF_H4Z7JL_l5wi}%caS#cb^M6=V-F{
zd-yvY6_NKFR4ZR4Z(#Y-w_>cDuAKeXJIYBFLdey2lw37BCZiI1)Gq<f9iz`pfqaN@
z(}Q}Yz+0dtc2Udc7ue;YizFdF-3bcNuW}iLyc(iEGhp;~DJxsPS7xQ%k&D;|PnUE%
z4Cim@e7Y%JLq;DF4uoHW8#J@G8tU7-+<A3_96%pE2Nle*4vgVz%=bw;Er#u5a$mIK
z#D9<8x27mmYrxNho9?OZhocrToxrsp(wWfam@kx(m8B|$&I*gK>zm{}+O$!mBd&ez
zk1UV24V)5EF%TD-FIh#b&>0yrk|@GiMODJ#d;%$z$yRsjcG^1t@51OEfOlxr$-QUM
z!sSVt-#vT|8mJ&^Gsx4NkUosQIb;!^oay!SZ_L53j0f<>t9$TE|KbW9J(*GaUF?i!
zq#kniealR+x;bH8F$WDj^0)l4ZZNW0c=tQmP^gSBgQ84e>s|q~3BZMmC*j+_{R8lA
z-~J?AxOg0@rY5Zd+;&t(RH0c>eCe1V+dP^ERz^d3^V&8PWyOMf@ja0cse7Jmy!O6M
z9$Y?STF0>!auDCqk}dtHZl(c{^^MaBf|@%gFhNlTZY@kQ{A^e>O6F>HlHD~_L@|vp
z6Y7{r1~-zgqVvQ571`8S+!5Q&nPv5R9laE4zT#K{k5D_m1fd|xq_l7&3+fjUnbhpR
znBFCaW+~2hC(8tY<Tb5xkIsq_13Q<8KA_MFHNXxlT%D-<szlVm2|pPb)Ehg|z0wxk
zwod%a6(;AksSdi#ZMasRH6>-bd8Q~jsBqJas}ywS8S%afZHnoaP%#j@UYfv=9*rFy
z`X9B0g!`R@Akd=@lll|xV0E7d<3+?LLLz@hSor$XIW`APe&NsruB0Jk`3MF>PJiK?
zEb2K-%Y9M-Y}&=ux}Av*aCc4i<DDHn2jFcVynxI0_T4s_e_@=gePr+O_4%yYN>kW`
ztj#IXZqSfu3~e>RtyBzTw3)1}jp4U{^ET`sEZ`fy<sxhz8^P=lJ7^(FkXg5tjMHus
zspuoCa-VMGqJo%iYC250Odw?3B(Wl)t^sy-O41WJvbF}__zfGdKbe!Bz-zB<!Qm8n
z0vY6}GH9ER+6gV2Vq-`PE>B=lEMPHTz}os6i3df5UpEl0Hx`9KX~*g(D}N|Nis*(K
zK~!9D>&`|zM15-1JA|z$ek4%tGTh5nOJLu4w?lq6k|cGv#N56)A)%zLizQo>7@d%A
z)qoy9Y9z4RLw|DzJ88iZtU)x%c3mv&6ED%7Aw`nI;t9rqjk%te+_K;-sCW!Jn1LMG
zK@>FKE$fnv5!Rq#=!uB5&tD+)QDjR?LY>DhN}xne%e{BLQ^jfY8p0dCnBCEomO5!c
z!$Mo$sw3uxI-me-^~0QmAqU{KE(B1%UJUGsQ(@qY%KJtq#`-H{%G$S9*z9yItzEtV
zaT>I90R9U9tvVp?Ea*Cof@JhBLL>Eo^D<ImA)werhg6F9VhH&FnarH}z@6f-+JmAw
zY{uCTAf3I|Hbrmw--Xd50PoPKo5QAttsl*^RhXCes=EizQS^^NR*HTXK6TQTH=w-k
zMdQO=Hzcg{+DrTJV?Xi*`1N0T1A7g?(W3*>_^%NWuw7UlTI~qj*)%1p?AROmjF#&x
zr_|*%@LgEuhv$7bY2e<S3esi>AN$Hj;Jd!(gYfaMx&W)ILpYpa=^`3)%pyDV>rpmu
zS{O;A;lWm*cnum!+9_M=A|Wk=rtWI!v+O9v;fzrSCKq47_XF^Zgm>D*!G@pV`3_-9
ziC*%8A~PEKP*s5u=7OUWLQPi{>?#WxJRkGR(b`68y~XVTiWWaefe8CbJ+7RG!q)et
zOAKz0)f6E*4sTP#V?@o4qvHAsou)=Im%*jvm$525I1dU{TUn{PIwB5(R8vPZx->q%
zy@8WqH#InS@+Sn|ojHzCyuR+25i17txM<YGNf$>a<b8sFrH)&KVIm^J#!nFu?JkL*
zj|9%>wAiz0Yb)GBLIE`h5M;sJekljlC_m1TB=4<i!p?K4`h>n8)&2a$B9dfNZ@de+
zz8L+}oFNZrL_q?!3&-~&A7Foe7pivNV9%5$nY~aqeIuZEWAqNdJ2LoDTELZ`MCHFW
zZPIIdze+N}m?s+`BUZ)bbbHXJogxdhZw)kc4XZ0Tv~>c%@vm>dkNwDJ;a~sKYfzL6
zIC?CD;V6Tq#<W3zWFf-EzNsrL+U)_re;ZR<<4-RylW-Z!2-&%qFB;goQ$TT;z*A42
zf$#qAr{J5v;WC^!wGQ*5g!uxcj9W-B@vnHJtTd^CGzBy4Y#3J|ZD`U8P3@(%XeH=9
z>_}n0Eef={aSkH+ogU@69d>wH$x8HT>p{OvY7^O;prP+kf4~6()a;SI#moGO`=V2=
z;&5UoUor2lo+i-LL8!0S`>U@g91u=D8hA?+2tm;eR-pEEDkQ=&^fnrXERk@qiSB?{
z9N8fs8u>N!e6X9shouKYBhcudNu5MW3WO|o81B8yyAb|51-J4)vPUxU)Y>;%+WQ<}
zS247Svvr{kn%Cyg-yJ7U0STW6Uw|$~#VI%uFCrl)y_13>ggJ16sy_krK7!1|S*>f{
zK9=_aU3b!UTAfn9t+tW_KByk1_ngqi716oUiWHqk<07cj(c&JpLY+xdjC-Vu<=w*@
z(xo!TvgyzGUGB$&9DNGl9T~jH=k1l($L-U<ILg<*X>0OaaZp}Q+vYeu2zfSu8u9g{
zcDOJU2O~j_UrLD+fDhHi#wva0)4zTTp8xz^c=Cg%;KN^e7EYaB1?139Clx)NX{O|`
zZaGdDPUXQHmp=AUl*l7@w}V2Nl9IKu0@%K{AcEsVXO6*zOUGdA-UOa~?hf3%bpX|(
zgi$_#9J>+9L9m(t;lQ<Zlnm}d_s*^IvPMJ-#DKWmu6`iQx8|(<65WV&!st-W#n<H6
zH0Orp=NNfM%cxZsF?zQMO2aEP;}YqGrby~+x!Ri?T8_!zpqsF6sB$kcB1Yh%rvI4n
zv@3|31o}B8!HM#ph4&qP18eJdX^!3dU^@Q-WfR}Stg!MP#28w-11m-ZN)ATGjAh8*
z^J$CmCR@YR@0LO#ih?WirO0}5PMY60rKgALiQs2<=9mqYyN(_x2M1YHaj4``j3K`z
zJgi|2)0t^$Uu-!oZ{WG)99OIcF-Hj#I6~~@uDWiJBjGbXpIX|Y*Ff{sl42mr><Yc#
zB%Fmiq{^Sm>o{xxd|up>NLQn10nmNcxwiRT(g{GcGabWlG=zMFB4+?~*+89FaPRQd
zCZlFpr~<I}>e9mN#{(L@1MrTG1nOqm6zQ8kxC$TmmU(rny0!n=;lrE12WC|T`4GDW
zmQZ89U4>1=C1=CMk75J0Z8$Y*>!KsDHm35p&;9moc>dYDaN*G-@S%^Kfrri?p=g4n
zggdHxQr}JtTyNCj`;tSS7KwJK%pt<HtrnTR4YVW{l)%nz1Ica+n;Yx!E#I^O2h#<-
z{`xk&{`w9a>=(3&<NK!5IehI`Uxd+k2-Cxw+uEuL4Mtsa-l!hfRn3!aN;jO&CLGy<
z;r+6Q#z2}c%N+qXyJC*;2dc}~qp%_(ArxfexgLv;j}xI=b@1kb<q2*^fcs-4xQuD=
zG5Brjm|$B0jU_`jK!JIcgs5d>syWb5=_zVUFGaL5=Ifk5geaDj`Q*D;6(X1mtJY9+
z?jlL*l<4=^(h~nc9X2k?Q*|LS^C^d&@*RRokhHXRN%VA&1*Ue(^nRz^_0C4JYv;TE
zm>iSX6oRaU^oF}<ZvA-8XoIcbfe6~tNd|<bim^qp$phj2!|Os9K+hFR=%Pa(IW5e_
zlgZTLBFT_7ITCt0qCpC|*?qUs)t-<O<n?Eckv}E$2`#rwkc-4f2BR=|9y#QLF${(o
ztQ|?9nAFgg&=k!9>`t#XqjWH=VgB->zI`j)xqdvr(K`U|@R&Dmd~%pvd^OKjE?(dL
z<?7s#Po!1Rz#z+r$cGR=^^(EuR20y3M1&Nda%DkdRE!VU#`>5H<m)f*!z(Xs!|AiD
z@Zpa>1dl&?9EQUI%%%-g6&ejyP@@9{Q=}0pZ@=C({4It?viF5l3>TxSAin2dzk!2;
z7S=Zh@Uf3Q3?Kd28Mt<J4_?1=Kq`QbJbVr=T|5bs{i+kuSmbIVE36rg=?(e~@5n}y
zW1AG?6)hu-A~70fDoaf_GZs+NG=xXFGAjWlw<)vwYmttXnr*&*RKt^=0KBWpNl8-{
z`I-Jr9eUI-NiBbbU6!f*7FknFD03Ei4+X2{C6M8GG4u^a(C@!~SY;EUvn5eGS(s4m
zAp()h8RQsI$J+2EMY-;>lJ7}d*0%F}wSx9tUV|zCc5e*bd-NHI468jSq`&2TQLRW2
z`LqPbfTtqxH$wjklk!$Qf_SfO>U7Q&5$fClcidwBHR*5^sCkqv2X$b=de8u2nSw!k
z1Pk_g*$=mZl+MnM!qjH&9sToruCIjtA^`!i_X&}dD{maD;Ab_3!C(~z!!aB`m%xcr
z09QX#H%*hnUi%tM%A4o_qzxSY>#{lM2>|cX=pBG}Z1CeyHh1P#y7iaG*~P!UKfhYs
zKK$+U`1mW*!^HvQBNpq>yf|+xN>b_)h=>^MR*JC!X}rC<I-r{3?YlGh`G4{f{N|^|
z@brhy(4WmCBT5e}7Mw<K_*zVd?Lz#JYjX}9-I62Sbh;Yk#zvN)7D>H$(8DRWHC`E~
zaPI60xbW}^Y7Vqm037U!@u$5dYL&+@O-M!7|G;gFo{<@Z*st6oH5V8*XF&IAY09e`
zs2{g$(CA9^9Qk7Hyrc?~-ycu}i&zz|Rw>^!Nu4<zjDj6o|I>}tyo5`|9m4IBUo6{w
zY}?B5tF9g85vajiDxA~xMn)r+&#6P|&I9Ms-$D~X#C;qFRy9Q>M7oi&h&x2GX5`}9
z)az4~$MA*T6fY#n?fDRnfim+A8}O1iJFwjkS<hNFXFQ0mdSvHoZ0g);<#|*Cxn!*6
zqBKR~&4|Rql8%7fK@yKa;vsQ0_z<N))10Pr5WgW-nHc)u#$Wj#jM6Z&rRzeU8coT`
zaY%@okLw7I))BBDq|Om{KF#wnK)V8`9v;E@4*+C!3wv7?r0EE59XtnBGik=zX(-yQ
zf7-N|3+%_cF?tf<0~qu6mA~IM^)ycg`5X8CIV9NvnyQ3yzK~`&@)(J@iSFw5Z!tn9
z?MjSdw?4?A#TxtZXaJiVD=?eX@GGCZ0)PMSd=~!ozkCA@CWmn3Xa*~5M7!rsgObbh
zpiDQ>Wj2(agKjXo!HX(dFcADvJ`Rc*VIVVK0NlA<!p$2c+`U`D9!CCp+!&Qaag~6H
zyF(($YT0Co=R`?JnUffah5BaR@I2e9NP<Po_Kl=z>f|%A4<=Kq$D>O(H3B;|Ka`*g
zQHanq=e6R2a|ae%(ii!B$B2>t=yt8glJ`Y|UROqkjW1OV1dqYvML&JdLb$06sDS3>
z*{Xz;iSY>Zxb7@?0~?RjT|+?TT2E8{rqaJ~ih95F9Q{SP%3y(+6A;}m<sGQ8i(eMp
zYPmi+pq2P}6t7>vKQp&3y5)La;<TG1tT$AzGZ<j~PMs^hc-Hr~i|sxO@fAz?gm%C3
zHX%>?+#%XzN{Biwh7>6ole{ml^Ox(7P9;k(^ZWdHQU{AU52}TMYkQE5V9>6?#^wq<
z@sS~n#{m0V4eaezX`3(L*8a1Qr&tV)NW|8!`)cpUgC4yD@Qx0Cgo^t5cG=$ke~q%E
z!^7#7=H||?!!TckVljuRm<yvEAMBcQsp0d!--<FCZ8n@EB<&B>4Nzm%AS%#M$<5~G
zDmDH2^lx5=AOE|bhoAkK7vSdg9avdUU}c>X?{&pAF5Blqkje0$!^#>Jm`&42fq2>C
zOlZD024o4qAWunCfYb)DGC+{@SgNQSi~hyNx4S`0VCRvccEl5xfE@-Yt&Hl55t>wo
zDi~7xLNRi2?%7xc>m|*6_#^7LK_g9U<#M<ZTF-;@b;OI{V2w9V{eC0obyiLn?l97t
z_+A7t+i82*mtGQ!`UEecbL=P&E6sE09HO|sewXqK+!?U9SQ>!U{j~pq=lu0Mf`L(o
zM-6RQD_jDoQo!Bsp)_|y2Na=@`cYkLI{$i1qG#xxWNT|^1V`y{Jt-kJAV8!zpbnNB
zakk%r?wDqRdve5+up8nEfWG3<-)tKE({ZBc!ezY(6Bv;hb7TBwm=kDz23ufUq1Znm
z)doV*Inh;$vqE!fNQxd`=StQW{V~1dFu#T`$#L<EQRr*{gLDnDbRC}h$}w!5#H>sP
zS6-UaOdhtk)2+iRFi2O&O;WsCG<UA~3h2j!9=!wbjt_jWYM8?-f3<0oYMgDt>v#Vt
zl=W@MU;tHFK)EP5icttrqhm2L8XaqC7U|x~(QVVR+H=&;Z=s^ffdtmq#xTfpc;&@i
z_=i9C0{r;j`#ik#;%yiVTUbAmL!M#1J@+73wiN2sYXoRee~8j-JMMT0OQlM>Y3Yt)
zjeCqlexK-$MJyKaajRIb%MV7G1r?nKCFc?ysZN+3s?uV~mdD!B_>u`g_@4gUAE|gW
z=cSf0hF81lHR2s3An-w`4D;W1^2>N0p%Tyn^{9j3*W=eH6mEHsf47C>(VqB>+5GYa
zFqc82&rp(RH_A~8{|?o;=n`A`Bd)Jt=g!c$x5Nz&r8;B5q|(=uBqR9^9C5RQi03F~
zTQ1HBpSldhVYL-ZU*Hp9C79ML=dG$gR9MJ!^d7AX{I2!$v4?^@4^%t9T!C*Vtq5J`
z=K6CMChxw|SUVZ#8*sUvdR}hiqw}N3B%DK$IoBWWUN@x+g)*Cv>4z*EK++BY+BJCO
z$u&6r7{Fi%aQ9jT*WV~$ypqAqy%%9o?N)iRlGd>QV`a0`<NxpC=pBG}eDFgzuiv;`
z!u9`4l8nbyyI;I~@26leknCF1Kv|Wtk?E&2f@OoEn`TT6Xym|usU)W~gF%80Ap%@R
zx3ZGM`uY&I?#|(#{p`!|V}Iv!@Tp(B3X6IHn@4gOjdQ9TsHD2g&O%w;k##KZptwYd
zN?{wcze5CXAiTE-&^@xdsfMtRdjZs)dGt59Q(-y*@};cN+l_c+EB9!L{1101td2Sw
zK|UYrt>j;;(6k5H_I^=mF+Yfje@pEdm#CJ?VX%B{=dB&5M4bTTWtjoCU0fL3Mi}gt
zcKQh`v>%Wa_0a+{)1B|`dNT*YoV)NnYWO;p2ZAi=zs(4{FTuHSY609y3Yp=iuM&oP
zm?T?YDw5-2y1y=Jd&cE3GGHWoy3@wDMvSrObMUd;dC)aQKN&1<4@GxkyI>Z{8R}DG
z>73xmp{ky)C3;=d!*vaJdnX90WN-9?=`?7s=qPsNkBIIn?h&FCq5B1%qTzs_=YX&Q
zDmO%BvK;bc15TXTgq0PPJxO8jRt3NL$tjdY2~|CX8@r!|j0B8wD4I8al;?EWsqV*v
z8a)Z{0S$!e51UW_6-bZ#XM=40$(_T`SGQIkOV6zTZkR82A*oZS+luns843ju<QZW{
z-T?`YvuvMKo(Jn>P;A@ne~#sb_{wOQ!8jdI3EroE`6_(&)7RnB<rDDCGiTwUbL;e(
z*<r;z0m&h25Fmu55FHrJN;XM13LXdf?_wSDlI8Ej;0hBX7m8$wHC86Y6xo}6#|~$p
z-y!^QF?2?PQp2YXf>?`Kk==1Kh%g>X_Bu9Hwq-H4x{nc@ujgj6v7s-a5#o5W<zhD9
zq@zSDN3`MoM?HN8%YFK~9tGbo?C8RwF<-Tmf%^IRb?avkNJ)|KrKpe3A=@K0dLq@U
z=g&?|a6mNIul4d`@C^(K-x=VZFwa5>6&YzgPp-`DA}f43S{b6eTGctwWR<TMUALCA
zT5=ZDd0}T&>*yUd;ad?zfCAyL;{?&khNwRf5KXU%DoC2fC5H8RR^%(nLE9p-a$S~l
z_H}>%3`WMOx9aul^hYC-2USGLMZ=`LKpiCeHY_p40{;vK$vPZ8ejHZEDKte2Z+yOh
z*Iqb)$=(9$vVgtzPP29RY&A;P##MXp8?)xM7vp;E$Acfe1MolwZ#+ePZ;>XS`F(5f
zRj;mON2)ir{z-mxd^sHt&cLibphpvP_-$K~%qKsoC`D>J10OBorm`t3``tD-jgIy4
z66la%^17v5{QCMBs<MU`p1TV#y|@JrJ-h)Qdge4-dh{5zBwoxLC<@7$hN#dQvIX|E
zMj*~04;#FE&Z2l1{&z$}1YV-Vu6-`<SPYFK=GcWgk<K8clD?A$w81t<hNbO%jJT*q
z1+P~N$b_A)5t8Vu>;9}PZXpGdQ$jA8Z~)>t6C6woKy8epVnF(q?j~qvYsmqTsd6!)
zNMt1Lzl+4kjqA)|JS%G!N71kw4ssfzQ45i<o||`<;seoT1a!w&i>GWnT_mx7u>S;w
zM}&Z-bFsk{>jRiARn~hncD9rx=w^|iuG3|r4ffo)>Yg|Xx+JvOkrv8n)GR~~=E^HV
zBx^D*?NB~S*G9)=KSG@v<&d}}vi2~LwPIC#sN=vhWNS5~5crh6eqYbah@;XVz@1+~
zcnr03r$!f!tzGxl;w;OrwBskLNDW|=9)Xq7CJeI_Mk$cdzjbFHiuoL-i``~rIEJhH
z{|btFx7iq;O(*S(KTtJ?0(tfhz`Hei2jGDXev;<Z%WvfQ@&9ZLkN@Zp=93q0{q6Br
zKJq7F1S_y;XROMG4{gnCdGF~hI_Pc(Btq1OK0tbb#-yb}s^rEfrbGuQM3^SjZvZ!u
z+t;UX<Law$^u!oG@WIpY)Ke$n=&=!$1;BiYdIid_GDF;nE(}?WLC@0pc)nZmhbG1&
z8$mc8mN~NMi$;^-z~Lh_4-`r9&TKYMF?wmgZiK$DTlyv*oCQ6fhW1`{vFzN!DTe=c
zBQS+!nT@ZxR_{coqs!EDvl$%}b7*2RU-xIZ9PRwa=NcJw!LSLg9$Yc|9t%1}+dVoQ
zYTd{NhDr~+=i#jNp7T6vD#Y<^{aM-ab`GMB<K=kKEXcd`Yb|Z#-fg#bLY#nvx;EO>
z*|HJD#nS{Ny5mNbZn~xkcn!D@85ThVyL9==3z}+h!y0=I+`oQ2Qs?_c98T_y;3cw}
zC+My+hHW~Pit>GmebIlkjMz`uA18jl>p-|lq@X+jbClJN<$hH1m%(_j3Bz=i(7K{n
zz|FfQ?CejVsHQMGoYCaX+gosL`!`^mt&J;~y*jU7|K%_h{dku~&jEPgBY|oCnZH}K
z+dn!;HrC7P-t^g9KLVq{00w}yvvN}?q^(2>mwb470ImHd?c~C8$52W0*SKkM0lhQT
zHGQDfO5qO<g4&xJ#-kM0*GDkN^uVuNhrj>#J`ex==U;)_clKel3b3}uUG`AHm=m;7
zNl*SA*zl~HCvirUUXw3ZBf(@OXKULLtr6^!<<%de@u3JWNUU|k7DGj>bFf;Yj!{(w
zGj%u|o#4%0ogUA(^JeKAb7c41<RI)qxqA^S;xIJ`@dzoKPA(XKn=g@tjy#N@Rii|V
zPU=7>I5fXe5Xp>G&;xM9Ag&qZfCOC}MHOOhTg&6@dp!FexfgnE?qGQSyXzJOKW&K@
zfhjO8KjZTchH$Aw!LBPfLneL|T41XWNDdBD>9O4a%4caDE{jGGCM0CyA7#u78Ig|5
zMLK@lqF|Cb4Z<N%6oxO89b<mJWu01;hnJ@6x(KUSgs!~$#Tr%#I>2*D-Nz8m!i!3i
zq+z3O2wdk$Q{EB!1Wdl|I9O=-bI4!}qrnl#(lL~E0gGY=_jY#R_SRiEnC`%2vJZ8&
zfZ=EiSGRu|%4$;N*?L~I*Z$8%vt9Pl|GPhW1mJ-VjzyYw(azG}_!B97{a3D}$DTfz
zzcP95=HD5A^x_|fgGCGTa%#{sg|w&(BKc+81aJewPHPr!MSG~mLyRipe!@76%xy6h
zq7AN&18#jA>qDvzc>cL<c;SU@ICEwLo_gv8JpTAGSlbvtf$4!#{1B7O<q=fU#i)iH
zebgE=F?Wp)L*A0+i3yAy4Rqa>0u*XHJZ@>2!Ilk75dpVg8XbDQGyT`{_8!$Omu%?=
zF&z`r401n04Y!ID`SpwZa)U-i?+kMlL+B`MYB!7bH7Yde1v#qW4*u1_1)#arZf@=v
zC}Gd_1;f;KJgRUWX1Vk`yT|h@@ah%Aej-Gm-=|Pfgr%dyW4GEMdR*zL_alhwmy`ak
zk-`5ZhfuKb7Uw~nl9&UJ`~Y)~7~m)Udr`fhP6T)ieU4lpNFOC$P<{oh1rZ$+z3vXD
z$6%M};OhCH;l^tg5KH_0N~%nq164hYg#q@sM`yYd{42jgl@>$FfT$zNwhTf-c03FM
za;)};l&Y9&s9>MGovJROEay;FGid6PP>j)F4QAEV^w#dDt6{c2ESkfYr_GE1C@hM8
zyo;kp03P_@%yC)Yn@{1_zphG)m)G*m_5JDRi_g9JKfuwIO;{PMQuNPdKuq#MV~A*g
zm;N+N>{BbJ?0+<x^qgz1TeaIY43nM1wMz{8jMW9ycK}*gUm3#ccnJ6I&ES{*<yH8J
zpLhX2^{MM{a4?6pjSSY-Gn4IQL#G>J*wRC&69aC2KW}0j(aFjBh9(gwom~V7Vj4jH
zD017$6zCj;C?-a``o0ePUizgQ5F_mC7NL@+Mp6d9N}>Zu;EKn`^toKQd^ZQo0e8V0
z*I@~Si!eLTy)b?$oMrk}2Ato^?c{|BXVnee>vMZA@pM2JH09#ap!^*a<T}P$&<FYx
z46&tm6fqzqOK0EDi=*docMKM>FR-uE8PcPu)UqNo)}>JzCvgS4)}DkyOya{hx)PsH
zCcL*zjVS~ncUZZf`JFCG;e<jpnp#Syw?@~2o_$P1u?~QuOYZBcSe3{R>GNbxyPj=F
zKj|&XX=OgRVW2!;{0B+3<YCZ!*Vt{q^c=e>4HOW=SaCqcpY;F9;Lo9`r!X&fVKTo1
zllg6!7F$qMhtM`9Bv8R1ui&*i|Co}WDGY{-_O<_A(QFre^#9%%y#w&B4EDT>`sV&&
z`<q`=Liy@yc5-!h@@(-Nul`lo9E@Odbjmsc>PFopX!I*`2Ke=*P1H)XxK#_=BiWQY
ze6axOsgR171iR5dxnU9~YG5=-VQqCt>4D$;_1o~1|L{flC;#({aOKK2j8_1T9LZrY
zU=$(NZ$+NDIvRdW^0)M9wf88j+yxe7<HD53QZ8dTa+JSgRBlel(gx|D4$%^Y=iLKh
z85C{Q+KyLCy)0%|0h_=&5Bjy1C14Q9<9sU@<ITPkRoZE}^JJxB7DT&%K(~Z&DQDc7
z$N-*%l!U%9#H8VH-Dom82j-{=yw9XJ|K14i>#fri62C#>^H7#)RR~7*W79;Bgfu(y
zx_(vY)495zuaOb16*&oU?fB2;+6bJ_o}Q#;^x~qkwzNhCMC+VGK#IZ)I)dc)Q`1R8
z#GtR1bzzG~`i2OXM}?*Mr|6Uff8QF6EnT`@Gs6s=hT!+=WttX9i%tOFBis|}dI4p9
z2#ab5X5}s{sza!o1+-YngdKmH1&l{)aBKh9U~l$nHA;`Jm+j6!nKdu{i{+)&k9TkM
zDS&rv@Do<lH+CRxKMu*)d~$7g>Lb&|waKr%_Ls&VIsd<bV=HH2cY2o}R;(Bne2)T9
zDUV|XP>WW>L#r?&f0uFhRYp{BaATs=uiO-R)PlWhBr1o7st1q@faA@p2k^!lyKoFi
zgHN1<#~wcpM>bcWE&&#Elqa@R<0Ez&<b_R3S@BUECIKi)QAW%?a=IU8jyte4CDF7&
z$jdV<Y9X1VLm0i#BbnhfK_+GFb8FRb+wQBh(4+XjJNtY{BP??WLf{zgj~y*&4+&L5
zh<XuqSSszpW>L_f3@n+jIOQF~9f)3jEIGF*q(mPI&WXJo;Apdp!T3tm#Ql{FZmhL}
zMdA0($*GYIeFtsEVpV{RSn?^Kl_kQ6gE}%nZ8M&iMd$J@#)uE-h`rHE{4~eTc2uij
zG~MC%m9Pj~TYTOuW+dk=>4iWf6cU0HXqoKiC6cN~AUUYe9~o04(zR*nzB!1-_uEOi
z`mm}q=cxfD?6UAu2~|@-L$$&Lf^o1SK?lPBE5l8gRd2$TtzU$dYy(4y`4qnJ$Ln?)
zl1BY_w?~fvyce8+=H}j{{gtnq*E|1gl%H6y>b>IEU;l5L-NP4}lk1N(!yKVEdAJnz
zM}lBmLfsT1mg7oi4)<#0AX`p|`UL-Uf>E=iDyV3oA_-y~*!xH0Uc+dV!RpEg4)<&L
zwO_psKmKFS!q5HFm*DEnUC37wSl`HCkaM(5&H!!PDm){~;i6g3#}*KsDy~wPEx4_*
zb|dF~$z@1`)%N*RXq1Deut`cJ)rl74eenCSq}gK<%-#IE82?!MowjL`B_hX)`!BP_
zI5i=k;wA>>{zNMwP6g+y$pC9ES<hc1%q7tx)1Z%9&EhVZv!GJa`m<lMR@oC=?wyU^
z!fJ$AUKX38J;Vc1^J|1MhQf`CAKC*ukHQVI72F#aq<eqdB~j904B3NYW@w1A@R(zX
z5I3d+RADoK8a8L{%?Jvl-2l}YKx$xM#oIct&&N~NlVjwFk+o?1T*#WgN=o+Bk;ICi
zaKM-<GA$0fIda`ng39~`6&CBFUY%@^`ZAifi~duX$EGQvsAn**5b{4H_#gKk+zY4|
zNn1gi;NJ_91BPq?FWmeGkS9rzCd2Upu6+NZdGmH}{NG!nM*!aS!B1S-+?h_2Pk!eL
zeDqI^^M`*hZ)VeHZ~Rbt;mEh8mrs6IGi!_VpxlABE$qQoxl&9iC&<c82SSMQP2Eba
zB<j^D+BZK|IJ2C$ZYd^AB9V?^&eEiZDy{k4v8~72+6d|f;I&ux;FZ_*;MD0gc=Cx8
z@YrL=U}JL#Rlywzv9ym2K&W%}O^_oNj5P8A!0ujQ*FnsQ<qccT-~Zw*nh^q;hsKC|
zYG{@C#d%L-)@e+lqAqr=hMP)x7B*PXd^1icdof+9K$}UoOyuuaNnSuEwBLg9Jv7=A
z5twDQLA84p&33<2B1f@}$n-`dqqTkVd*vpmaatnk+4%>ANDV7~LTggoyy+)2HKG?F
z|D>}B+>G#D{J#V;yFZezjt38VJ@&nNPt=K0=T{^AfDo9t6rDfab4v%1nY4^gh|Z00
zB5*tD5m4h>CKgJC3f-?zso-vbf8I(b=~TPQcRG`7r#+2l<)Y$La4vwKQaeA(fpjqp
zTi$}IiBpUH0qjd7d6QleWKr=$(-mqesH`H19WUe=S>Gs$97qVGX&{3PMxz0|bo<Al
zt`CZFc67C9cmDBV^Vz@qR!?s~-rez*TWUYvjUih>lEEnX;5V-(AN<)gY4d5dGhZ7#
zI{d)tKaj4kJ_ZMiJ8)R-lDAEbPPE2fO4!mgXJxJkN7G&*UAs+wR~w9o@lkOQZLAXN
zgdHXi^0LAt*Vjx^gh0y_$`Y#t8tOoJ{`@99{@77C`_LK;2RRgr8p@Ktg)vT*lx3s<
zjsJKhfuH)B8zfyk9%f>kBc`h%O00QTI9u#U!*$^Ndbbo&j~9EqyODE)F5U#eyF7(X
z_Tp1lPe!-S5Sgi#yOlzQJB=Cx`fn;>^tqJiIHkEnWymZebY$~1!1~D)Ds1n3*uudM
zz~N+0n{$hhEJk5<2}N;8%4=;khq|g7;&ISK=mxIjJaGgJvPXX@>LRHAL~sIVDuRd)
z8AEMNYgg{8T8(~m03re*#+;03s4!GRZfOcNzLo?CEq3kwokuB}R$T=8$#8YFG<==d
zakVwFIyKnR22yfR<(S+`OPoPNNaX&7R0Fs2_7s;@oisJA0rsQyq=S2ux}(C*SXY73
zKnA;8(XHeE5FQ{ZM4Fw6zt>x4(-$&S1nXlyzeNoYBo`}6;0l#WRwOD*lff8E{_g!W
zOlGfFqwEMt08HRlADdNI?)B0CdvEj(z<X-APd-W?du%oR@XzMS=!v4)n^a9TJb&c7
z(o3g)ACyf3JJV}W!XYFXLeskOs8Bo_)}fj&KC<MJ-EK;P-o*L&`w@CK@t{~TWu<q)
zAqe&Hl<&1%J45>z4OC4FixP9v07s7v;qv88xculbIC5mfjzWRe4FTZH0ajMB=JnSn
z@C(0iD;*DWH~zZKg-y@G;U!p;9RS(bLq3^5C8~bp1i3Te4o<uy%B-h+eCjf-TDB*M
z3fF0xRIU0d?pX1>*yb&Uj#1xGhLuXYK}sE<8e{@#hH+~GM@|E5oJ^ry04ydg>~FX3
z0JJ5v<Oq~dEDovux~&Rmssa%rQb}Zk>M0P_I<N&G=!7~(o~DRmP5fG9K3K{rhLm(X
z<)#R*E%ov-!qk|X9Ut=$%yV@IfW>_@=WTb#QV@bbNVFbv*X$fy0gil!cTbetf^_^2
zGUk_nRW5`8h)9GcSNMSLP^qKoPAcmT2qz_0;*#S;#rtNw4I41z!zcjWU&3yKI$`Q?
z=sC;xa8%BzC)JElM^9%aNdL0pD0kJu@?TEx;2ELwD8`>}rXUf)o2VNS1R4%TaP8jD
z!@=x@Vw9t-_+WJo&wj;0^|{aX#{a!JdI#V=Id}&cq$gL#=|_HWl$`o602a-(+?|gH
z=Y~(6{a?X}^^d{+Yzy{_8_=W$8<*e!u;D^uf}$N#52X=X*q}Tjb_YUZEL9Nnh=%{D
zVwf5@HHrpH$IS@ekBvew%|WO@3FA=$XCK;t%a@PA*>fwfzBYh7XOW?*0l0DNp!wu4
z-h}xqg<LoUlzXKe*dy+cgq3UH+W!u7oNS!JqUyN#=NP?L1VfB{G%x}BmXb3uLhel&
z@?mqO*5Bh*IzMxgJbF{PS!D<$NtRMXtQ-Jpw1Ryi5;%5_5rAR_P#i=D0Hgm>+DTXJ
z00;trjLb?L01|>$B}TJ;p=2{IivWl7Ese%sR}4A{-gHTcm*x;ebv@FsaJHbXL#)sb
zQzX$cmr~Ma#L45i(~>^TgCILykqkuw<TaXa=T>k)uf*552>3eLntQ(rM~f7R5F)Lm
z#q{HblXTK0S~jT2li?O2^tQFpAjwoxOJR<Ugy@AHLGwQnTce^P|AiU|istd-qr^d-
z8$rwH4;p!NBDvf+I)m&mYWZeLGUB>C@L8mG<TbYZZsGdYC*g2*r5NTbNLe1w;ia#e
zRG<B|-uS<FNACc<X9qvnX@WZ2Pk!wvdE#esNKcl{-n3}v`MJ%nPoIA155r(^67C&b
zfrE0J^73qVI5Ne-LMh00$3H465;h-GhSP|6sqsiBDprWvc58z;?VJt5mEfiGSw;qM
zqbW)zkgcxfaO~I!j-MFQhQE&*;y0#ERi%_Jpb%ct188|OY|U#CI3Krdl157x9p2RX
zY)eNQ%E8#E>iP$H-r($LH-LyZsJU;E-e<Xa`q`=y*oP7uB?gEZ7m%Ks8XqC|1&4rx
zy0%FXf-xUTq-e5?cnrrL0a!ngK)Fa@anQovU336u*mjLj073%l0*Yb^b%hQ<0nikP
z!Zft8<7O^oJvCrzyi{mL4VYF2Sio)TL6h?O&tOr4WUw0$jeeC=!03}|?<;r{O9k1~
zD3q<gRY!!HK&0%{DZ(XA3092IwV-3d@wDD0uO1OoYTfyywJl3g3Ob~7poUW7^XPPX
z*+$nv3a|5Xq)L2C!y<pr_1hJ9aC$wg@;YQ5!~F4ocrMV@zt7R_AT*2s5u}e087hsk
z$VG7Z1og4|fq?+0hcv}O(n@vBZGh7ST;KksW?I}X2H9wg-N<L~{3oXMbHDwTTU$Tg
zGoyC^-qXW(fkAqDV+0@iE5qc(_b0HZ7VYkQkZz7Yc=r36i^sn$-Cay!>+mWRFgN}Z
zYsFwQ5sieHBVZe+Rcv{a`A!dVi#~J{^Qc4f@h&`~B~IPQN+W0M3P-<UWC9OT*9lZr
z4RysVd$fPU!Jxs2n%f#{6BjWIMz{-PE3e3M0h>_LXxB;m8t<9}{##_la5tm9fd`-_
z->%h;$Qv+b=|#$zr(kJb><q;KTFOC@<X`~!`y1w%ql2LrokE&tlma+$9$@VlI{>qN
zfc?89T?1nrT+`i+?Z$S}U>n;u8?+7D*fus!8l$moqwywbW7{?xJNfo`zrS$row+mT
zoSDO|glVoTD$Zj26ol>niRQ4o48L@I-hqtY?&VkC6OY6C?RqIU4^G}hl^4wM;o?D-
zGQKA<8BF$UJ;@Tsi{P$o+qPsD;A>Wl8f)IJJZH=-T43@|BnH7ejzaQYGM9rCdBCdk
zK)$`8VC=eJQQS8rDQ!|gepF`PIRy+M3T$z;?C1pXvn7q4bBkXL$4vpT>l9f`(prq<
z=5rEN1Wh-%-6@$;KX0s|cGP(cR<&9`QzhwMfbEe#3pWp>P<`Ss@+!}Jt2zyX%CknV
zT{;YSuQS5V4n#lM8~7H)zHB^0Z>+0u5=<2}Q_^h;Ab2kkZ*yu>-k*`?4=C7)d@L}3
z*IXnO&LSUmH_|^B%VLSE-)*`sz6nDJeReFUo7)GOIFw#n=F0I?jae7iYQ`UO<pZ&i
zK|#6LxxINlF6#_Ki~LdJ7nWG(Zq==Er(>BGv*agjS>G<I1N<;acq9s#E=J^F_6pj~
z)+xQ-8nd0nKAqlM#eoD4uqLu7q!}_NOXLEHq`$|UygVjRQGnHP=-TBcTxo$4FePks
zwO&b@fQDCmw+kLn#%QkcBoN}HX0!8ELQiQ3Xz|erh1jklYLcx&%882{UCtr1vMNi)
zFN)#$%bF(=C-$A!Sp121$90zcWcdn>NLVq-jpAVu2KL4j={D|QA!`n@EQINpf^n*;
zE?oBs^c$B5&YKXpl^`?{Ra=11PaB*~c)(SdW@CGJuuC>&{8c}e3<CL+(D-N0%C+r}
z@Cb=3Kl`6(BsfXuqQYbFh#?VGzCv!PA7MOs1^!gV(46>wrPhZ=Q}`eo_=LvbtiA(d
z_a}|SBG5#_)PDZb>tD<3v<ued4DZg%_v!zzmZAuR%Id<2mm{Fijd=rJu0=Dw>9<`5
z-Yx<E(}(+BkRUSR9$9J&qMCT#ClufL7Nb>W#9g%1fP&~nbVA>Xe=xI)%&TcEL_Q&m
zMBk9&zk(N`qj}+Dxh7Sjs%2lutkVuJZ@q7$lT~AO8FZH?;We7V4f8aG7c6Qr5h0=A
z7S+>+-0M7<)qR@Uku#yXeZ!g!{iEYLBJoQL<#8G(v_%@rLvw0@T5&N3R%r~eM99$q
zt}cJCHXuy!5YV^{aJZSs@Il^#Ap_$qTTu-HjyO^Bdl3dbajH2doVOi5bt7Js5J%DN
z&^quRq|OCDWbHF1(HMQq!V^5`3KS%1a}s!^z*FJfM2uzK$VbqhSeh@LA?>VTlUQ_N
z`%{H!K1A{1x8#@G@8e$;??>6=3^YIgwgM;9pnmfUOSsa~8lE8|YYkD;$jdR!8OeE!
z$-s{T2M>SfV2Lven<O7P(d7K}(l`EFCkW|%@>}i$mUv)<FZR7<IZ8rt-qV{9NpI!v
zxmDp88~xAsKZQt&nWFloouA+RCST^?o9q}4O<D4kUOj4{n?4>ANZuTx8wSXU7*yXv
zg!r$*;%RlY1ZQaVC=7(Ivi?o(^Om?KL;M_Z@yDoS*{PiJmBVZV1pxfCx+10O$-apa
zFT*Yvp`uA6A%S9HykjPz9D>d`jM43IiHWbfN!>&yRbR0J$!wbyW`70?qU-NHnKbN_
zGSM2LSH;L<4ACie1L@X}imjkRDm0<|$nfAs>YJo+zxfdY7OnZd5!r`M9QYGbD*<YC
z3;-b0Qz+ze3J$jtv}9*|VSqXlbO<m)$;Cm;1sBU8=322#kOb!mxnB%Bm;b_gWo&Ty
z^!?WalZlD|D)D9c5BfQx)uxGP;4_{R0j>X;ioO_GC8Temik~sN{nKLRGurRMrV>Jv
zZ-mcdWO~~~NPlSEvYY&Sy@^D0@{8HN`mwiZ-;mK`6h<l_2k3GivQ6Q<ZK<SGA|gQA
zI#5e=|8YC$MYc|BJVR!BI>l>EVnf>U-(Uq66OiKcq*TI5{AzHpsExjfM`HVb>!T#=
zWBd|QE)1^fJJ>Y3l=)R;`is8rw%PWlr}tia$ykGE?8XYoJ9`yWs%f~bB9<PN==ij|
z5Vd(pF_hSY>nfN*aI4b5<H0EE|KdH3YfTZB&uVP%h=`IZp5Xb~*t6P*SRM+PUk!U;
zoUL!4(h1BVRK%84uTN>H)BXV-pAG&Z(7)D8hkcG*8bGWSdjn&EMJ;6(>D{G4qqr_7
z$wgQ#nEQku{RKqi;2CX$F3>D1bM=tNk=1+4XD>60)6^FyqpsAa3H#zr-z|LrtYB1&
z;Sb<crLC=xhkPH$fV_1g6eFU3Hj*TBa{(~V0#i9&4B6GnqLIPV=rVNQzTNRkJ)^W(
zv;H2IUhzev=BIb9IDMysDsnive@+YjsJ!#A=cDTrwF;4N0r<4G?^dr*u(hvKJ7<`?
zN(cSoR+WLLe{2t*8zL_yC?Zx*^pEv-)=*x$)rV6ZCtWYB6?qh$C6?r8IPSG@jjGmL
z2_gFxVS!2}yFW_-d%8mt-*H!DHS&+VQ*;?lDUNX4hjF{WTI_GHl@lefsF1|wnKRg!
zCy=<fR?r*%&b&q^ZnT1hta^L6=6J1JIE3JRHow))+|%%QAf+EFLt#G>fBJG$W9(&S
znkw|lfaq}5EuSDzm6#>3O|dT<s#=l~^Zw@Ie9Oegf?1}YtBhiyPM{R+E{ExWLHv$H
zEhb3@7$0aio(GL?y&#27cSm`$k~q(zPP&LCdc9NflS&T&*<uH{1~XOlyK<<McS!yb
zDEv9bD$A$1X-0D{IrpfYi<m04yFIS_eaZ1H7(l1#3Ql*;z@-nDx9x8KEc1f0!2lii
zR+2%&Iqp_tAQHNvg;<ao`K3ZkN<yFtWI!XTg?fJLHZx!!5XXmQ4UkKb8^3n4m+L$k
z&zx+o|1J?s**k~Bj6@Wblzb4P0EjelErqCpR((devN0v3fImOWiao+&%VBSBiVzxV
zvwN=bFF7sI9({{GkUtB;HvF!Uss5&Yw=h-Are$YW!h=aqL!yr`lD_-n>gTkKocg`k
z#3x*JQ^Xdy=9K5&63Cus;a^qkZmHX({mF^&wh{sFHF+~xAem%2DO1QQ;`bXJDpe=O
z3gN{s9Wd>YI=}?!PjWI94>4_Nepc}vkA~yNDSl0s2a4%|uMZmkEqkC7rT&Zx8qeVq
zRU&`xA&q&-<Lbewt&;y{-nUa>7;hl(C|oPjf%g2DjIZ=UJn^$)w9d8@<jqnJZ?|8x
z9|&RQmWH)(F43jUjKobl{6O<wW;++1fT#C~IH4L2ra|9?Tn*r5TsAwIFB7}%tKgET
zvVLXm=N$<nNE?^C3?xqs;|h1cosCeJ>DK0PAw`fTz{{mers*zbN>yVUKtfR*EvML_
z%Up~jpW#GfnU#mZ6pn{Dum=3aTLdnCMg;IW1iugg)o_fojp4<P`U8m-%7}9X$a+AF
z+F@NdPYuixh#X`@f<f(`Zc2CqPP^v{Yb`cG<W-8hp-ZvQiJh{eRd?=U9C>FKRw;4Q
zk(1q@j`W%R3d<6zAr3Je33V4$hv)7b@^xo*hN47IlyFifKjG@M!u!60#EIZ~oPLXz
zIz4u7=BanRj~zkDnvb?YXAR5aH3dm!e-wrKVRE;HM5}*`x54b#WGQ^c99gO5^+l%t
z`>QxW`j=^tV{+6C^k%9pYTl1Lub)I~mOD9C2hTgt22w_$(Q`lc?~F-N2b$jg3^@P(
zw}F=M%U(4B>bKleXnB3vdTSptGT=u++ecHYxf-n31Z%6W5S(|)65>IG4k3pPj8mWu
z{t~)BwztCCcCS@>5bXJ5!HLNak-E4n$)Ictz0$)O=HdSC^`_t&QRo{LEhlcKu_O6O
zf!&a`qlwGR+$7tn@u&Jmmk^um;reqQm2E$64;0IWBz9{A#!t$~Z%TKXM0#%+`>eV+
z;I7C&MpL!4gFrc>-|1qXR2ktNYJ;=^s21{wfcA#YCRj*xyzX2ywP?dR#&bKJ!E~55
zEc3X;!l!@XYi8qiMx|q?jEE@t)A6)!ftmjE#xC9zuVe*Y5sh?JePovp*M1%6kDkkl
z3*QdDz%FS?g^hlU9t^7ybpK2mjgy|w_;U65!(^g5LVzY$RNa|z8y~KRhUeU4fmTC@
z-+<%Aj~f3HbtutZoYK>ZIn3%U9#1zOMA((o1pD)DU<suvtMf6Vme(I>HW!UDT|Sif
zYYwjep|f4u`&KlkiT%xE?v$$HH}A_u;(yZtJB?z=)g=X|5gWpRitoM{J0;5|^P}aR
zj{u%9f*3!+Ou@^lNqVBwF?+EorCfRIb*Un$F<xdNmShZSW-uu*;`jqP#CWPrV!vxh
zUr&Rjq2Q3M4_tQLg%r`=fc=(yG0hB!<@vxAcdsi~)xY;vWcL;6BxLiu@Mi)1_A7V}
z;uEGpN9v+42atUk1^ATU_%<dyX_;B+I7V$n$_QA%ze!vswEjga{(zt?eEJpcQH(nN
zB)5=CIbf{>Rc@OU|0aTS8!27=r4b@T^3dTg%#rm_p-TQl(Okrr!YWUbtPfOp%=*)h
zF=|BAh7*teL%{=A{EwIod&1a#>MawRx&kV9h0lz)cU#$q{EV43Rd(E+P$9=#Rx(}!
zDm`7uIly6t#x}EnR&-%LE&=BJnDGgCer0JTA>pskz*wF)>QlCe6=cuR$vlsTMfB0W
zNJ9OLXK<jHEl>9;On)VbF1J|`BsXs)v<Uc`Y}yI?+@ND@{$|x+(OfQMd(A?GnP?Jx
zoKQn>Hvj%(s^iH$a=$-dqqCOh>5@(uiX@Fdum@*$`W&AEE=Cfa-zS8IVtCIA(|HrW
zb9-BO9PPS8%A#xNxE%cbQ1L-q%|%mf3hVJP%wwU00GVVFbaOGsNxVWSmf<;f1=j#B
zrbz6rpXIf$3(gKDz0SXfMee8B89sP%nKf4?p8qR{o48mW;`gyCULtx;Vo#nH8J-z&
zw|dK*L13$hvR(UCbGFR|G_Jk=bGD?8X~z!Hfbhv5kgHPZAR3`+0=P%b!vRJmJiCCT
zKd`zi7))epI;MT<6#MUb$8(?qthwh7si11kN;>;#LI#;$#l7q<m7C?8+RM~D!5plQ
zX%2*nlQ2lRg&I|pYM+R43!LmC{;V2=U~RfQsaWI9eJlBz&p<6?=>RZM@0U^OVEL1$
zH@;_`l^geh1&`GtmxWqT!TdO-fj23pOy~Wzw*(0we@09o*7RxD`<Hj_{jaz0>Wm5*
zYD5&rHwSS&ga}6hXw%qQwO~C@bd3F)zRE6j?z4`e=^m>Dw9*6drPFs^c;0vYDT8O1
zxl_46HSV3zkSX~uWS+M$&nShPIOK9(-l#Gk#eFt2+`5^|E$c)&G7b4+Vju&?>nzi+
z@I1u&y2wpM@Ge0m9q(!`a9juM7uflf16C{}$NWaTXw0;KFvRetk^5B(ekfAG4H}>|
z&;LS1o9BI)EN{v{aFFeFp1c~vp28xLAcjYfcS!S7im0ts4UdYV9Q2p-U{sbnS^E>v
z$N?GGxx}PGO8|b~1eXJ*@yCVZC3wUT0Y>izsEJt!_zmz}Nibsb{>Ghv@^ZW1c(t{1
z32n0aZvs-MiZY!)!nH}~J2>qua2x3D)M#8N{PvUE$qsrI-jg@|hf2dGvU&u^Gm!4r
z=kxjei?hwiI8sP|%8@pb#;rO>FTjg$u6EuICZF8OeIw(4`#|C$srjeYIRsIF{`+rJ
zWz@5fg8-@YM!TF5uC(hK46(tJuw!&r>ZJ(jD~kI7hys?75YK^nxPNLDRn&%3{4=LN
zt1!!YY5865P`yoR(T-36Rnpn%ZGP+R0l`?td#TlhO+hH+%Nf<HhkrD*si`OYw#cSB
zVH1@w(B+?+`RJ^dUad3M(@{FIfA~=LQkS@aDyx&DbU$Ld$Zn_E2<b5Sbdz__UyM14
zJc#rGX)hpH(F$($j8)7rGva0Qa|)N;rsP{DYS!rs>k|eE%j@dYr9Wy|PxY$e#P?rf
z=3b<D%@>?U#v>P3&!yX{x))@4VAWwDyf|v(QY1`|!h>_rZqt5s3*=h7mzy8bib)HG
zjC@B}MKmf2c(jROO=5%>)2Pu#j(kkY_1}ii#Ro`0lB|+(KGC&~j4~3b6dC*0Ea+;N
zFi5T4I9q^dYTO}-n>M;j#$w1FHnVvi!tfI!Oowb2dRDI|<FcUsKseXBs0Vhld&Ei@
zT1C4;?Mv*+=bRiZInh5SjWlVk%?J{8<AEPPXr-we`>_udc;?>?YY185lIHtVT?{m0
zNW3JGL0ZL84Cm2ixOInks4O{Cc~@$?J;?43YPhbC-9lLV8(jFtr?LGm8m%z=ou<~G
zPNco}c*|uXeD5!apttZ}YgteHP1P?>#Kk2^=q(3xy1}2v)>xOTJ+Zv%%Gug5%RuOH
z?a09g0R!KCvvxIr-Z&m}-RCv-Gos0o+SRrhwK6E&FGhgL>fbDoQj%iOQ3fgM)S4#_
zLn(|^fkxgD<Kel~Qt9`$*lZ-lF7I=z<qUDq#bdkh+o=FiF?#N!pCZ$5<6|Uv#~KQE
zoJL|u_1CMnZ9X-6aZ+$t&UZVAPjVbAXsJ3kbwc_9{<#?!F_#ISv+~{C7Ep->LKH(+
z1V!)vh^YJQvGO%2P8icmz$?ZjNtc+A(rWCl_ke(T*UD|imF9h8s_v0guNuhcKD>J-
zsUZ1ym&P+rf$Q&R#z?`hv`k3`rp<@K+6uFh3I?|1jo7N}*vg=of3XsX5;KW%ISL%o
z@v7EWbMdv|8&O@D0ty8(-NmI8$iAL|D87T+8x{zu?e_b%qW-we2kgDZk7jedjYA1r
zR>_q`mKp_9?*#Cx&l#rP2PwmM=NLzb9e>GA2cG?*3{uM8p~zvuX`LeM1H_P|nB-j@
zM!KQ2r5KsEFD%B#*=uXD1qxKd-0k0Q)~=gAXgK#Y9u$>7N>~N{!Oku2T=ku#bA&x5
zrt;TP<aElFef-Q8&Tip2tC5&R7*U2DgP{L@wr7EHq2FN^Z4DO$O8d^z7insKj0cA(
z7VQ1t^&mCIohOOt9vTkTAKUyHbi7JvC{_*?f|Y%ud}IEBxY;|CNt{Mb4Fhnf)fQI|
zhXsd{%Y*0gneZ2>2@Su*MSVmC%B#9_d@W~W=+|Nqls(bcDB*q@VZviC(tK80V1SdD
zSg3GZSal(g2kEda5=Y0Ku{!yCyv<RD7Hect1xq@s?WW&=l4%I8GUx1Ea!`*^|GeX<
zGt~6Cb4jLTsz`K%Gq$rT`6cZ(wE=jZl5nsC4evRmDrIB98xi+Enfc{L0**rT5_=f+
z0_I*Aqpm+F!E!fT;h&Bhguec@p6ghbHesDe`1R=y%W~zf{jamNZm8bRuQ;%({cHF8
z{Ij@dmygT^z()@gv%TJhm8^*3p;*Xsw+1a?N~iIxLr<%HMrdh}g8z#3kw&)rLqd=G
zqTy<Y<Sf>pmLw#)DIx*KW~>bO!?Pk@i^!OxblOmOC^enj*bi|<7!nCpo<xkt`EJZB
zXN`9$y18w1lD%<v{QeSJ%7o-q@)Ho^hm_s2u;h}Tk2AlN>P+PEk$~kLy(lX6exbkV
z#eN4L2@w#=`qd}2+u8}71ps1T0d*;nu|BM#lwPW8bD4f(fCGGi#U)aM`@#6+qECBJ
zA}=IE(i@D`p$ShI#eSe}Q?2zWwq(}%?UOP%RCQ#kx5eE9pUn7)GQFbD_3^KK9Y!eC
zy-^3uiwffFT$}(aVC1S)sjq?@{c%gOoSqx;FnUBSxEU!%DncapYZ#Gr+0p`L-8)u+
zH~Y%WZAs0}LHKA`t4F%%S83S61gfZdbls5{vH50Dja}dP_AfL4H)57!5_qvJGpLAb
z`uijKDbLuJYVuGO1#`M}w{}yzVz5X~o}Z5=Gz%Td4qy**RuX!gwmW+qvhNQ48!8sI
z+21n}7*;`_pm_Z(CY7rac67H*Jen??gh?|`oIzhUg};~*2iQX@b?e%!CO*3Aijfji
z2A1|g4)*Bhqn$_B(i@D<qAt6a#V3^;{8fTiVHIkw8gEoMwe(@gpJ9W|<cOOP&3h+d
z_$gQ;w0bB$qnsuK>d|NCn@(9Q&T|Y#;3~;^9F8P~WN~faeGr=f3c4(DyE@{^ZSSXm
zTulfPAQ47=f=nHZu(bC*m}|~9%I#AEv(=8W`EJWHDZ`zInwo4TvMVry?ke5-cH~>_
zjhq^gi*W!I_tx$@Zx!NZQ`Gz5l@l_udFB!nJyS18pN4`cmWAbph1VA`9wM0C)1%Iy
zNy?qFGq*2zu2qLyR0Y2Mvh*nqA!w_;u!&RQYWf0qa0NSRnx<BO52Mcp%~UvGZ7H(W
z^#MM0p0~U?OFPJ>G2K*B=&LsG-o)qH>po}_N;GvgudpOgobt23dG3Lt^-n<iCVsT(
z!~&tt8!}0c2loA;;Y4LYX<f&z<m@4Kvgh%en<;xRhrChEZ{W2XrgxU&J24L|vz3hR
zas&(G5s<1~y#|1Nv&Fn0H3-Jucc&FYE9<==TmEJDXPO;sUG+6UZT-j7zZc1Y@W}xX
zWnt-rBE>AdI$XDlib)|dq7DsH{{ZoavKTNDec7gJKZS-$up+^A$D}qhP)!5CBmkt5
z0(huk-UHk&=s~SvOn`*vkn(;50O}UNNFS^YOhDu*`18|?><6By*+tN(aK;!$A~O`S
zITt4IXcO`kYeE1bZ~E6MRT2A{4rScfm(bO+%PP}(3}tZ<Z~&+ha0Z`|+S8qosOzZ`
zy5T4v2%NNGDz^37B;(PX2+61-#*q(RxTg<<x}PzKAH79#mep7EjX5ZsVRfsC4#Gpc
zO21R|A0bp0${yV(9uuFA8iHRRPqgPwx#g455kbS3S<3Yutu`(1R!i$oNA+uMON}#e
zUk(di{W@-;t+k&|JRMcInAdkMIr8Uq<Euf#@x-k@?RM=Cb3HykJUl%vckg@C#%h9L
z>iQp988g-z$JCs7=;XCV+D9Da;Xx!=%yDd&upso!s&C12%d{V`{4oyeWL|c)N+V*p
z-<*URJd^R&8mVdFqIOFI`RZ=#NWTofaOu=E6kQ;*PrBz)@gh<xw_ewMqmg~^qJ2s!
z1QhyUB?tw$tU`*+b%QPI7kbCD@G)A5OYz}n!59FUXViVb=z*H19$_;a+aE|R1~_p%
zFu59QI;p{^U%zDK26omEtIDscx%SY23|X3hZ=$LUFmB$Er>#z5zqS(ca=RXvMGv4N
z^a^x<d8x?`<cGz$-Dqk1V)nj~;x@@4jmvhG6i5IlotFx~soKfrQ%UE@&Cy<D_^u!L
zeeyuPu*3|<HbcGh4b)TLiJq`uwNjr(z-#P&snKTGq5k34Es_4nAui?`PezS<uP`)-
zqGod(GvzE=Rr_pw`^~&H_6};v24#tFcHDJ|yF5*fhJH~A-Gw0>9d)Oc99_2YLo}`*
z_Ya4*if}jJ85Tqlq&0iaw*^=dvhXeeXWL<qiU;5V^-;<RENr6)<8_EOv2L^kOQlmF
zDHUp)L$t+3FPni%3Bn?c%npSd?ctOiC1E-%b{~ZYfPSaq5XKwUj1R4D62JZ`OJ9|O
z48RH-B_TFk1a+O>1DJ#p(}HwuH@7*7pgThWYIiz|?-r-lN$=7afX_h6q$m|&WUoaQ
zf8V*nZWNuV6(=3<nj`$$!+=&43hXB*oQRX}5=|$Wgis?JTE(l*H7&6hD&ktTP^?wa
zcRez=m+ZsA@&;fTo&cetIETzv1%ga$5nokAEN;vYSBtaSwtOds$|aS79ET(c5VknS
zzlIOhE|4&|lUu|i=E}kWqfC1>$L+>8)b^Q$^v=iYxegh8f6meATgT+e%}%!TyMGkP
z4)^v+XH|wZ=~b}%ZXLJIE3tkrD*vUK%ZpGXT84RqqrajY3gmC7o*V){|K!&*|NQY$
zbuTviA^T>wU#GV*t>^A#3~vQfvyW;U!9&ro;z)&)nPS!eRu^YbCY=lcA2xxs)tBRC
zM9zhnu>8}9s>f98*ns?R7$hFDz}+UJq#vl8d$UrbJ0EGcRD#_DPm;vGqd;OVj!@l!
zyY8zpU``xMn4oBUHb1_gazN@S%;|a$GZ<bg0mkUI1&5gl_RqfPE<nu{Je&CgJ`6Hm
z*O$!?kf}|4u8s~8P;V~2>|~p0#jF;u$%&2YuBLYz3~Wl8pE_kP6ELW3$Lt$E?{$9&
zkmRdjwM!$jqU{Bo30h%Ax7>T|*9)e>Y8>Ihg><2O*>8h2LWyl7uQ~?K!A~B3?1;5>
zLrhwr=p~M-SGH<xFTGD++m1GKzk4*(|5~%$JlMeXWo+it9GuqJO$o~HYe`e@lSJ2s
z_SmZl!&9O&S<yG!|2^mp<FW^YM23<D*&*BwQH6=OjRd&)5i@HI9{5b%$IX9bGyYgH
z)qY%SY!|%-j${g{oKY2KDvBd;A7$*slBx6@<jMdlK*k}J6h;#HwHDiUC?5-x_Ds(n
z?+&`*`A%B_s@eU`tvzM@Xq{RLCnlIA`~K!zP8p=pldgcIF{Gz}(%_@QLlgS7^dD9L
zyoNA952bGmfz6*Q$SE7L&Lap&v~>aCn|!5)ftZ3%0hE|vGC&8<>k7$bX`Kda`I*nR
zO&M&!YYK^dLj4>Qor&Sq<MJm5epe#}w{w?=*GZ<IYo-?)*^N9KLtyIMnjAd=wj++=
z*XuT)GoeEh=@TmpN(7mQ%nV)zxhZsKqx_vsjme*llt<IoPo+Jg!H#VhJEur<=LEMv
zrJog0;s8j$mm$4G`q?uf_S(c1NnV3{Y)kax<~lT8tU-4fwBL6ah>j~mKg!DsQ7^<?
zig$9we%>r`uk%BY@5?(#N#$)pUSluP%zAp(^lh?#VUIxNt)!Nx3oa~DSmOgrVw$v_
z{ui>!8a|kxNVTO{-G9-Y6eUWibXeeoN9snXiW1fv{>Y$c(Uefzm$QV!@$>wa+MUr5
zIzqBXx8v$fxhEu3hxc=^kk6MII|al&2_69t9UtF&Ly*Sd9qG7=z+N&;f`C|mX$(_f
ztuKit05Ed~pY)3l;EFt%qy~NVE`UO5ko2o=b6LOP@`--ZaD0{GTBw4XBc7I1@_EJs
zr^>M=qS)s!i6e=@6R8&jEV#Z8>adaLDF~gJ#phtT<-dX(5iqeh*NnGG$E_asGVb7Q
z<V(j7<>sMX+sdDkdF=w?Nb$zD1Df8Vnhyt8R-@h+i@bdK7}tZ(mJZY+yUQ{xf0^lJ
z_bh`foh_ChOMbeY__J*FtLmJsk@$A{iLMVpQJL2VOkIJlh}il8_L$9x?j&>Tjg&@s
zyt(m?0Mb_AW5IyGC_fD191khWxx}yUnBH%s_Ot1R1O@VC0i*~-2oh<hEe6a3@f3eY
zfbZzh-)`>3I|itKQ<{(DBq6XN%vndb9ugfsf6}v+1NbZI?1)8$>|H;?Xy2vk-DnY8
zW(N{`CE$MEqHzV>5b_J66wrhNc9UQh+m?FIzk!eJfZDBK;_G3p^Dun?BfOBcRRVmn
z0l?(<SM<1dTV(I|7M|pz+8u6l3ZvW2Baheigx$u!_70#yATn<zn~2opWhmj-O*LUh
z)~d5A>iZZT-3u7*eK&IPwl?R9w9<nE!p8f(jdBu*-IvVd$xmvT$VxqGL*zJyYB9X>
z#&J=`Nn`<z%?NRLpsbD1wMRuLI^4u`yrP{jZ<%curMU>v=3qb0>Q<-Md6$`5^~$sJ
zmS6W1O8xIxJxG$VE-LlflB2FMeZ~OfkItULFU|O7pqiF_06!MB!*;u|>kZN=d-EVs
zX#$RZ{gw)N$M$RP1Kv<zI8s#MNgCma8Z*Ne(IcdP_O&_L+4|wjf~RZ*HB<G{<L&L&
zkSPy~2V88}h*KJKvF=3mU>0TC(S2I+!N-q?VzYpuh+HiI$*T&gmk+u&paHIbK;PrE
zkBACzZ`WAsj=AYz9>DL<CRyMkS_BZl5R0tIAdD6OSiMMU#T*z-wT=H`rcux$J%0NI
zDzS7Ay${;&mf3lNC*~(v0lnDpBPJg<ZER;EKO084sT|Hui@mXy(6j}Ll8FRT1LH$#
zFu=cLtpudhV1_Q8ov9b<)Ep_4utCT163a#dogWAfGC;%g@h!+Re{C1j{DE%x?7Wf3
zD!(M)^*HpEalcN$z8r6q8(sLbtnj|~<hS}2SkgpvGhE;9WI?BFCu3V2nUK{%f(aOj
zkrYE2oT71kPZV%caLa3!=@>I%^WF6RyASR?4i8wQNrE7z3-PRat@5xK4RNDZ?R_LQ
zL<t3SMwnI8cV{oLk=t1z>$tLj7O5D04|6Grh&!SN_qPDwSRD$M6f`&5KzUN|sE9Ms
zO)ThH9X;*=Dg8R-4Tbpj<lgEScID&d#exdgze7%btq+i@3iQ(rMdLO>h9K1?GbP|G
zJl<Yr1t6{w9}B?aGzzShTSjvEMsw<}m201fj&U*N$$9o{%J<C)=IP28BcP=s#yUI=
zd;M`7+PuT>S?kFlHLh<oNUG4z-cqTHCOnl2*$)BhliErs8-vxoF)h3eXs?RmG&|n_
zp`h{DUW;1sds_qBp7T?>MG>E_v|kGqaQK$lQ3ICs5(8B$k2PGN*GrUU|7xp?PJ^Zu
zRNI#s5~xkk;s2g0Vsau4OwjHNXVBf2D5p})D-`iIT3^j52B}Qg_}Tj1EnbB5{9_r7
zL{^GqEyYnnH=+WMpjanOAP6vMi|-@v7T<+RNcI!q%2M9p{M$4{s|XIy+;IORPUTzG
zQ}Vfg`glPD*(rj4QF7qJ0a(iKp<^iRUsug{lO;%648RqBb_Z!lT^c-VIi$yVzQ_-j
z%~r~**7)sN6x!L2JbH(}3#dKBY=Nz2hNe_eF(y)g20%-Kq$vh9p)Gsh-0B}Z|ArXC
zEK-gw|H0-XD_Zs!3{fn=Bh94>%RB3U1Zi(vpjx%89-MHte-6j<w*-m>l@x2NEaYPd
z!IxuVjZH|LL5d>*mOQZ9q~{G^w?Y&Ue9vp_T8kXy0?-x=$a++CxZk`6F;#!C^$ri7
zpTqk+s9u_Jbt|y+NMh>!%)tEn-fQjjuR(j~*2O?O&wqc_#b*8XH$G*VAyDT_546A~
zKs*|D2P)-NVia4}$7e6TczB&d@g=J_B<R}B)TEYNh2lyY2vx)GRb6Y`)v$&W3`jWl
zI1sHNa!PB8LJ76evIHL74wv9&<ilJ0TNtxuFi`xpM<K4~Gb^C#RI$}pjh4Xa7(mjy
z<1X(WkPFOJ0dz-g{8b5y0GJ}rvO<nV0Ol0R5wH%=WB6`%uuAv)YC5Gru-9cNiJ^o#
z3lea19#RgQ>kCNT?Pr7Eponxhl4VDCx%qnX@Jp!VdT*D{R8Osglmw7=tihKny%_jM
z7s5I!?+7>)flJ8Gs@T6!7BQsucgDv`*9i-)(ZPMFmV_XQNqL+mg(CzE`_a8uZ)N&r
zS3)S)Eczd@2@fhPS4OvtE(L5<b8OwrYq(51H%yL<Qq52Jo42Y~{+?*JM>=(gs<*fs
z9v%PNc#pa%pt$%?O5i61rYnwtSaFQ9iEt{gy*yIcyvZgJTinqDJ|00kwQ&mmC$d@|
zAHus4?^>Nzm5Ro=7mrOO3wOTycA{SxW{=@-=(8}o$Y6;AT<&iAON&)1ANCKs4>J`g
zQE{>xL%#sWJck#W)Hkhm;36z8fn;)ItI~)2gq8Wy4N^cc(CPwkCyE1IrC(kg5+;h|
za4dnbmml!OzOmL9l`g<s;~@6bndSat9*Z7QIGj0i6%5uKf3t<m_z!W~k0psq5x4it
z#_XkQu5vzC5{L;YS}}UobflphCk&PvBx%ksF<iIDaf8xG``wAeYVuoh0)NuIsgCsI
z3sUy~>ie<pXdz0H2J!UiQq;SlLHD+No>nHr<RM`>5@e}?+}*UA+25hKjr~cSxOU-^
z$yS)*N~~Xdeor17>;Bf<l3lU#+7f=VLwg53%k%%vvI8{+f<g^LLEO7XL0Tf))j(Ch
z*$KrzU-E8i<k`vI?FjcUOT71>od3BPyz~H{vr$<db0WO@cfOH<Oyb-_b?Z6WXv!R8
zN2=J<FF{A#R|5;bsRRDnQCDot!KCGe5qGc3g1ecUZ(SLBNpYw^8hW{fA4}=g3c+*0
z%>^Q${59TjVTi0~I^?o}Xp{hb)uSooEJGI_9NKjP$i>2P1VAN#FWt?s^wT8EA1&1*
zErDZs6`!QdNBDf=F|j~NgTTqbbt&Iu^cAPh4#s)ukj~ugkK^$?u1Fgd!6FmS6(;Nw
z5>kPM1VwI!a^5ejHnXjNs}&JyDN=Ox0aFN}4^xLVeF`zdJ{2zGGgktqDuxzr=Iq*$
z$2`R;(=6Y<C`0>Q){3^Y7Z+g5dwYH7t+lrE#lJV#8t27Wzm66te0j6;%@s~&373MT
z@2_Y|3CV^w1Fr6@U}7QJzWG8oz3;=Kd*R0&XHXUeMBEdx+=PwQ4V~#uz)!$wJO<zd
zSC6d?SGyHw=aWajk&a3vnL`#pxc5=QNEii%0Gy5}|AV57S&A~#FT8u<u0C^kvN5n6
zmiQ+n2KX9KNrc4%9M-U?$IpI9hl?Rq%!TUmed0d?i@i0=FJ#yJm4Ip|8&<%`zxkH>
zF>iH5SVa6dMc8s*BV4SEqycisuHP<&Q&8M=4Gna9yLcc|W!e(vQs{ELqE|3nF%05H
zo*4-MX>;*>Cq<sY*L?|aG49+ocWZFn!Q(6Ot&dWh&Xd|cD3J8CaVA;NTn}~|L&GuK
z>8JrX>!`s&cfAzHB3<a4-dN(N^##wFQNJ#5yMMcd{hP$x`r5Iy*VAPY-~SS2#4Lo-
z`}AX&!zH`v(cu^UR2o@;ChX(TZEOia%$tZViD;%u1=%9|d0c&N@Su&@;3ReCDV@6|
zPcX0uAyj2uv&^Vw=?9G}zHBQjYY{G?w1bOSRYub>ovOq%Jh7wIdX5@!>tW<xk2+{D
zWEiMM4$cMs<PP77H%2x}muQ~uMeG&{x?~0%k9It<K;~}|=-V~ra9My_WMFtaIw!zy
z5=v@7ILc<&s&2mHyxiBTtt_Edm6&Tdf%=Xt9Eq`<Qn7KI>kXL)3=(~r!M{O5_i5g4
z_H-I1MZT*mVj-SdJE}FG{Mg%nd~FV!L)&$l{4Qr4j^=06ASi_FDFDu2?iKJ2elV{8
z{kh3@X?KYdikMS15@~^+Tgy9Nd57=DyO~$K@0XvKPuJbIUJnPny>2kXMAu;z<9Nqd
z*5qW5_G-u=eg1ZFm9Ol%Oh!|uN`U^OvfG;B35sXoqo)UIrSfmk)02SK>y)cMNP(Xo
zke%TWg0O#Kqx3~~MGpBfvlW_fgj}XjySjpQxrOa@$ZswdI=Vk2rbhj9`YE<dHFI$I
zaS3R|Kv}@YH-cN50ry#@`QIo5#~^~PEW*F(1O3Ie^<EQm7`+(uJwA9ST0Y{WvMqLs
z=im=Uu#8K^p$r;Cn6)~NUOkW!G}B+VuO%DCoD}*-cst^14moE|AirFZtTxzsQJbMC
z{552oFW|k0w^`EHdSwo!Ki{L@6WdiUs6Ge8!Ok&3_61Wzdo28u?Be7m7{3IRXZ7}M
zqc5iUBHZoQXe)DC*PDPy3r{=~&@M@eKb*d2Nju-x{2IF@IKHd3Z&-=FANyb0J0J}Z
z5>AMoR-_nNxfYFMIN3l1h2<}0HQORE=!hm8^1XS_%*`o+Di}a|t3fc>z`%zP6WK?%
zu%*ibmWc?KaEt(?k)g@^a%!W>frAb9g(sRu)eDZhv=JEZ<J=J<2NkdY@N(m@!bFAo
zkBv)uTo1bfSThzV^!AHsR~JVY*zrKZYO`juY2*#_7_Mxi>G;t|37E7C$lV&i11kV4
zq^fSJdEL4{1Lg2)ssf|Y2$8@6xVbW!{;|H8{}w&gTu6tqp#FC|@$L7-lPyw54E$}g
zYl_Rgy3fnSI)6R>Fy&fLWn-|;9n8G;{@_C1wMFo(N7%8Eym~VA0(ApdA`gu0FP$_O
z+NIOQvWrjp(A08EvgglUO3H6G8BXrz86x-R*NW5FrJsEZH)7de|5qhq(!iV?fjn;{
zgYI5($W2cCLGt@*vx3epa4}VW(thXAA~Cv2Hm{U971}CJsYsD67Wu64Rp7B(Av+*b
zp`KNocN5$C=DdI5hpVd><A*Dx5d&86fHXXEMqnR*b_7piA#B0LLGrL*BX}v>5MZU?
zYGDBSeDCp4FEv;YX^Dda=4Oa$Q>{0mCIB%mI_>~00APgeus9CH2H0Rokpfr{ZIYw9
zcjt~W=$6g$jTR2SkbkR|NV+W~hlv)rtLG&Yd!gUM3VsnKG7~7?M`^<nrP$c>D?0!<
zBP_~eU*$71691eTQz}hNZh`%NbufhVS*?)4kS@EY@i$Pg;lRlJO~0Y^{IjM0UXY1z
zDt!eXyRzQJt4G%Ab9{N{eOdY1a+hIPH}BK`Q|!=CHI$|NrW`s%6MHZeLP1EEv5`aj
zA?em+ooC0)_vPW=YMp(+j<u@f+`L2WZ&=h+huKnfKAF?+xg?x;a)hH)4A~IyG<@;C
zxw>Ep_Sf=kbf0B;R5)2Gshi;|9dqy$a;%b|ocJU>WWt0ofMplb;{|ij4YOHb7$(CO
zMj*Nd`Pe-N*)o9FbOC%;!$O{UL4_pAtB<E!)fq_`6<`4FYYv|7=@7;CeBtzY=|$75
z-gr5%PwjMRFK+Mc23ZpbuCnzlbWlz9#L9R;-}7eIX$%99BGP3XxFlxi(-kIXVaK>T
z$rSIMteOPJWBP`TaId%mq<u-w$+`gTVKqG0$7b*#)dm}(@fmIzmE~=y6Vj{0)Yn%;
zC=+70!uIRrKD3+SV&{J#M1mt6h(S<pJe#EW;C+{o{~Gr9Udq{9M<vN3p#ik0yNh<P
zdficzKxvQ60NFFlT8lmXLspNA=1Kct)0?O;2QEe&EOpkhkrIx6`IGC8#*;(XH?}Wi
zft=3=D1RxrpegCsL@oX(MuyEf&pXIbnh2+2Ah*>k3+UPrMfmM09Hjc@0;`j4Ys8b*
z=i`rg^^59g_{S_J>oH)okc9FYaEt;U_#1AL(v|ZDDWyfrdqd+jlMlh>sOU2`V#)-6
z4?7a9`o}P=Gv}3p7_nIQksV&9PqC%Q<!a#q@P){b%PyHG9$^mqEE!2#RK3XRRl@!w
zb={$u1jz*moSXRs?>&9az>D8pvoxoi&O(EW(tUvyLHB2FK~b&Vtel$7_1m_zSwow#
zTWINa5Z}GRFd6ITbBWDs9GqKM0+}O$=DByRLV~wpM&B1z^h8a6D^s<;Mz0@lr)LDl
zzRw3&iUVD+G4?*BD15MpkzZ;pFc$&&mQ?fI^5<Cc81X@EdTM_G#8|Xw)WMaWj&|yO
z!!A~vl@-~pBrZ;rozfX^dbUC&+&@F$Bh>ENXn_K&z!%@Hbja`&+_)j&_k#n9H*^K$
zx^)?aSe;n3f7H492gl8A!72PNzJ4~49r~DbEUVx(7TL%AVRlwu?u!fTAg&SQLeac6
z`CT@S9>q1-Pw?VXevHye0?Iyxe%&)476sUmC$KCNU<nH=YO^VVe%at27lX65wHMdl
zg-$07%F4ZJ6lQEv8LTVx+5)_gYw*vq-tY5UA91zYT?;Hr6r+*a+F+soWlG=wc%F!;
zYAV+Bik8UzV}I^Zwzrm@-3Vx_8~c8NsD~VRxBqhO{w7-6<}Bj>aM;o_)Kmi_H{M(L
z8}-@?b6H7X+p|FDqk6>&|NfM`u0?7r)kOc5E0ddJUV>1)v<q`;L38gt))F(OaPkD|
zac&#nhF*J9(-+t&!&C2ZGerzpMh3_FRfZTN)Vh*v8ewj|p;+0VhKDw?l<vmAV9*ce
z`Cyf8IkZWlaT6KT_%j4mlzT~)U#ENS&p6Ir?26rz(wb6cT{Y5G3$WghQP<eGKKBae
zy1>O_OESppzyv$_o~Y!W!m6|yb$6=QBUJS5fQA=_JTq7f!blL`Num7}w`r%QseJmu
z&@kVGs@NLOO!?aTm+QM|3bvJuoa&X=4e^*3-j~;hD-vInTnfYdK6yP0xzMA%$by?X
z(VV`0ivDVM?FK`<xke&W^BL!i4K#C}E|D>W69-+pzK*3J=CV{_wqOx9RIO5SLrF$I
zF%xkYIF8B|8p-jirposkGiH}dO;fSH>IMjA9Fie?6x@uN3QRIfe!lUz09+87ib!_P
zOt)aj#j^pp&1Td7)t$BDUj^&wg{pB^3u38ktc)Oq?c}2z9booDIgo8Ik4oOi$|6V~
zAh#Tu&lgPz7_YxK>6AIda(aVV(j>|jP_O$6`bQP0i#dPVjv*?DK5zU_L>u@LH7k)j
zWzR`y_VGW~*19h-&V-w1HNg9s9WuV_Jl4^+UMN40R*!DgHPfuE-8|#}wI}P{5ZV1r
zd(Dol7Hj(Tq?qFM!Rdc6)O~#JB$CWh(SQt;Rmo^N@yAo#03Cms4f`MfgK6ud>328C
z+e;~kg1GlBb>3Tzp{NP#pT6Jt8mD6{2{zSewrMzu5xcu1oYEHqtEZxd?7i0^?8&d9
z6zq6#p%+p|hAsevxC8!1c?^;R4!&n-q!}n|y|f|>OM(rba;z5Hw0nDc;D(Rj(!CUN
zCJ;Wx#eU9ZQ*?q+!!=SjlBW~^z;mN=aEtLSGL6S30F-|i626q94fbzHyP<LCIv==%
zJJMDnW1?cFor4A7g565l{4J;`_q@ZIDTx!B_>r$G&18*PMP;1pOWlmTpQvqAMQ4<L
zE?}!zARKvQ(pfV#(pVV3LEq4wA=}pe#KNCVcCYwsznh&6(EsXsMOmX%kt>IFp_hUB
zn?wKjlB1*IEbhoBqx2HlFw81nXRrOii%=T}y!}0qA_OZNX(hLBU$78E#1qM7Ui~Y{
z#k7p1mSF}NCN;!4+>+=92Oq5W0ur_xM^#Z_j|@#d)WHN~p+&vv#Gr5e*&)jOjaJ(R
z10sk0`YeI2BdXK$T_lW201$~hJC~F}S@dxgi^&ohD7GhRg`%aL*Fz2rgwb6S2|Gw#
zIGn#r#Quzuz5kLXH6#M-&l7k5m^f=wnyk@F8BMu|H6>oFA^MDAqaEex3-{n`)zKg#
zBtEFPHZGNR!8vAdsi3(KHU=VzzBUntCp78~T7hnzeub6;G?Dvb6SKB94J(O{PgAk}
zGykhRCu9h=$;@I&NgyGjAUT!SGOjTS>)H*mR?)G<f}^3^n(+xcA7NKYmKAuV;ctw_
zR&t_5uHWwkr(z4Xl8^7oqCh0_OjMt-9ENh|o+52PIr!8t>+Fz81e_`H10yjc$Z$Vk
zUIpD~PYQ;Cy$D3gRr_p)-eO>7<fqna!xQwlMUEHgJN?dJx$T3#OdrHDa8Z-jgCM32
z)D{k_*W;qajZy(DJe61tZVcD{_>re#X`}|&MKa)mDJ)bg@OAI{ny9))sz8a<gNaCy
z91*D7%&Wj-%qoZx#1dAY)+>IAaLS$?6tr!nJuj%7UD(I6Hn`#jHuYv-IO}=;+JjI0
z#;$cX|Ht*gyI=!KO}0lt)h7cfAvAF%CH<aPgS_aQyYG&vRlZ+f;gfEA@Rqgtx}K(9
zPN8epWj|Ad)mv`XO1bu=Eq+YtGe-Bc6p@<xBnY2YjD#@w0iqB{RcNV#5g@;iCo6sk
zqeJPC8-<YJ{Jvxa_vnE1F@vb?J*)zGw*X<^n{~7q2r3a3&NTL;FiT{$VC<g2_DMIs
z5&doljJWvzNRa>+?-B+ho{5kfDnwfwG>2*v9PvV+^}2fKU1+!GlOU5T0z0d$X12Uc
z|2z?O;@lK0@ecOAS;j*E1*?a$x~X#Q_|R2lNG|3Wgm^bha6Lz+q_-_qbKLk&j~T=K
zC|$l&Svq~igz|_NT4!r18E!S8tbmr^3$KSzGV$zxsDiIZTR)ZZ=NTdX=Ra6%Zwm!4
z4;1pt{G%s9@-zF7{SOg0@iZGq44*~QKg*-cd?zs*6XB90{FA^Jx!gqmE#tvS(NGE7
zM2~q&C<QlPGR}lQ<+zB*^<GmJMn3eAkuo9I3-E|U7y0-#QW{n{M5Z<PyPw=YA(^+o
z+gLbU=W1!r@drO3q1;IY43Y-vQv-N_SE{_MWrb&{EcU@mtJ^@CJ0F%87F_rf75N-N
zz_Pv`9{%Cg;-+T6k4RfLPQo7I%7YRk+s36vdGzPM=!@BY_|3%=KQh*s<;%AyzmS!H
zdN0;%GL}TEjh@4x-*1i9*gV`snYZDi5Hwi)UY?;ERp`qoE1hH{qEE>trayRB%C>vU
zqlK<=!KByzR(ui^`M7keS_qw&M5#Yz9Ib#&<!M)=L$$!co10SdQ^2lLK(3$%Xd{Kk
zGrWR>mtITnCqBUIw#3@J15Nk^fqyt5_wmdIsLDY_o^)JtrxhQ|HA|0)SoYh$zRC9T
zD{NYqy2K*|Kk%c(EE#F40=V|kul5x<pDMdbD!n5fh9(u0VlN0}!FwKAO*Qjfny-}E
zKtD`Ww7jhe<J8K;DGE%U+`n*&k7f<R?=UuGU9+PVE85FEaRqX!%?capb77)-ee)YE
z%kAA7EnnJ|H=r8KSC4`JUHwQ$utO%=jG`*~=5)@)%-lPzJOOk)<#o9}SKq0epVe)}
zG$+Xh)JP5$T<oG@7g39qjE(ZL_WfSuQ)uro!@THT*AH{?WH|aaz^jnS2MM&tGQ0pq
zgfyiTBQn9hr&+?1VCjH<LmFq(<?HS#$^x2zf&4e`X==jQ5INw;KWjlF^H*79qnMjk
z95Fvdet(X)a(|=m!W>fUad<diX3a*8kgRLdbHKlP5V#T3@p+BC@0QF?{ymy~?u_7&
zIYg>5t4;gfXvjThZngMy5qZ}y%Dl4D^32l?t;YWIznqL^-<hf+9c+k<#Y}{@-#z^~
zVlu)IxZz_5l-hJVjGW;K@<)2Ux~IHGWkjf{X1Zr5swqcerWZ56|2&M*rEy*AF`Qa6
zL=bpI5%o0n)9D9wOrc~02}dP23yRrILpr%2aJ4aP<ZLlFa+*q>JaU`7v&Cs$I3J$n
zm1OocwXo#O^Qc|AJIByr8~{tQ+MJq|h=(u~r+-?FuF~t_kQDv4jbK9|g6fVbiav8?
z^{dg8TS-S}#s%G(c2exoX-?_Q4B6d3-|7N7fQ{HmYA^b93I0z3P(VQ@MHwW1_peOc
z=`t2$dF<UbdpDLU&2H*+qM|sU=|#fNY{z<fhQtu@W5Eo_9y7zT75>@_1$}ti4bM}O
zK{#l5udWXdd<b7Vwx9*$uM(@q%dNGSN%(HzgPmS7Kk&d?ckyZ39LI2>wBb5;?KbLB
zH3s-wy(AduPOqDc%~MZ_E{`nt(S+k^3869<?_v|FP#)vj3H7en5bPb6V|zzX!>!zI
zab*G;P5dRKjF9@%BQG$Bf_24PRJ*T}pu()B!(Z^&`RTulf=-3~*JEJACeaNb^xdou
zAfC0pbExukVLI=8P%1Ca`Vi#8DcW^acQd-r3yHs^vzUf6yA>H7_ALcOHw7LBVwC=_
zk~&O6q0EAgkmJBh>;oLQ4Cb9n%lT8*UC|mi?xfdLqeb)_$B#bd#dhg9y%o2WF#F85
z>A1YZx2iE22^JrID0mYgelu=Esd#kMC9+FsXe@0uw!fo>&h376*6lQ)yCtp1+j?~^
zcPh>Oz0im#`nmUv0t%N+%$=QIP!2%VFE=~l|5G@Mu3yzT1O*EPsCyknh&yd{4;$?~
zbF#oH6{|HP!gCdvv393s>poj}+3fUzh{*>sd05JsSkj3UuH<fF?+o~W%ea*DqlsIx
zKgKFwQ55fM*@47Pnv0rxWbxD7uHAo@U#$w+Ji~MOA@$xYLc0zk_~`ZF*nxl;a<#$@
zGZ3ZgUuE4f9!kZ~#Smcep6#Mx2b_20Lb{%7gXMA`z3M;(QzbS<zGWnDh1(VG2b<Tv
z^3Lb9@->lv`mevwZe+Tl$$|I(pV)i<fF#X65Us(P0deT>Mox?DyHq+xH&0&|>=|5n
zTV{y^8c%=9^bc!_z#kQ=V#zg<bF*q(nv5BqKlg%3N1XlExUNHT!%V%K8vo7-c>g&2
zq7k6y{^yvWNJIpUca;h*K;dB#aWg6?65H~NVa&sdjC|y5U&+uk%aCzum4^4)Tn|F)
z|5bOTUrirT6a>N!3K+q#c}SrM3Q}2=C5TuAL|GaNRSc9Q?5JoUBoHuAr7A+es%5VM
zf}jD>Bti^$%qb9LsRR)cMXR!zpp`{P;Ac9~(?6o~X=XmnnKyIan>+8^r-9>XmQMiU
zjW;SC#w5W9i(#=e{DjCOc<d%4>S<){&B_;6_F_-eQT`_c;jU+QcjU{Nb}MkMfX*lQ
z9)ng_jNp6AaDq8q{*pAW>QRr?<FY3KMWQit6LidG`VzLYV}VG?ndi6pP)yoWcig58
z{0Nj_8Q9s5eTMGe+~~tBEQQx@8I>P&xYl*;2|1nhSf5Z2F-w<C#{%vS#Td$Ng%HQJ
zi_*lg+VMJjg6$GoMkBMTPWbA$IyUbZujZ+GE)GAMTnEt`8C`ZS`!GQs@9$dCc{7ij
zZl|cDdZN&7S;v`T9;a_^kpONsMEsz1Nx(nzEPtQXt1>kxJMUA)U?>u=-cmT-Mdmi8
z2Q^8|T+~|PGD-J4GVD>EpLeG+W2j-IOZh86e<7OSyTEZBTetbcFsLak<zfGPbitN}
zEOh+&fzJAk73Y3~?!T_<97e~PSTl0GD#(r_h@T_qIV`iO7U!X!!mTFDmeOJ7!$~Q6
zyf!ASahcVe-dJi^Ix{EoC_taF&y?WhN0P6vAJP^BkHU4Ae7aqf^FlTk0KjR|{L5Wl
z*YtLyIXF}Ik=`ZNR6)~vm!XedF>ATmmD8>Rb;*nfq+~`w%Q>C1%e!+yb=({UbKo17
zB3nYAZZ_#dG#S(-+U7r3-6@MWrUKFqW?5H4yR2yHOs$RQPz|u~{)ri9>M6DXJ;wqj
z+kUBi(;gihS55dD?k8{ij=P~;R@|J-u0$pYy%0>iK*!g!XaD@zpcLaK`1EqS2q@yS
z#NsqhO#6FpGC1w4;s31}<tI1I9zuvm8wI~c6ucdE#|!R&BJyM1nsKtu>itg#8VSW=
zYu{Sn>_%)HO6n`$1pM9Ck2A&h`ajF_rTX9s^mBun#2cFNL+|pb8xt8Z(=!aD`V~91
zzH;;SGg{FuFzcyD8b2%-s%P6?l$^}pM9IEwUkT}mH5f^I2ZXF`d!3^$kNe8RXcuU%
zaRLbCuu&LSF*n4MtV?&Y1HsDDo8Sy3ColiV_BkAxn$X%P@Gz@4#FzpmE2<`Sz16sH
zn9f!ST6A-6>Bs+MJzCp9KXaw#Y#7B0gQz}tDigK<(&u5l(SD`~J=JCyso2MUnPyaH
z-de-IAvzn~p?PtuqDyFgRUGO@MvEN}o&-3;-)&YONcGmrcx!nGm_7pC4jB`;Pzr&Y
z#YkUi;dFIPzFGlf(KRKzHrp%y?7_mkO~~Iz%DB$3vl@K0%0bSHvJwJ6hiKPJiY!A<
z*TPky<m2uk`>W;7<l1mfw}}l&+R&S%VyoCiYm0raa#h4SAY{8zb|3IS1%J;sfhASw
zMW>Yp=}40F|7>-0mN9T#NLOFVJH|S?Myz@%BPk=f2erzWhHhmj4U=pQ_lJSEAPE+*
z6DR2DEyKS#D#R|`akN0`r`249TT2wd<(5pnCM{7yn6;OICBmYhYR#zhpHN#D|K&mU
z4op+r1sde^?Br^Ot}*gMNCjtLN-|qa0Xt9m@*<}^a42~W!QlGDid)msq@}2l%SZ46
zxlFyML={_t45U0rE4MMj_5xPZDDkfm`j)o*`pFa#zU7x`%X?GH@C)vU>zETF84qOK
zN-|wiVuy0`6c$4aC2*~gzuLHlsGgUgc4?Eh->Notq#!gv$WANPFVxt!%8@bi7FPg6
z2N4yZTr|LnNnr_gZKnm80R!c3D1qdE(am?_epG0-#TV*?Ni=yXpamW{?9cRzrTz=x
CI|7CP

literal 121756
zcmeFYWm{Wa)GdqzcXy}I;#S<fxVvj{w<5vaDFq4?EAGWLI20}J?ykj2PVPSM^ZtbM
z>8$I@&d!(Yy~Y}It|?>1sHw<dppv4(z`$U9l9$$ifq{eG!oeUTLci{O=bm9;VPHN<
zOKAD7oW1#ES|96gph154MC97*p4BAI&WZ>ek|gk?%95aj!}KGE;1CBS!jqHbg^5K?
z4S%zGGFr;qf>%L8I<piFMI^JtrbeU3z#aAb`H3`vr`}_qLdSRW@Wry4qN23FX3lv1
zZDVm>S66pYrE<YQwf*u17VH0w|LX`ODF;7FZEa5xU?nMHo?wMUfy({k-7%4cwSJ%t
zkAiFoD0O_Xu0;Rx;bSGmowo<6`mu^JV2S#s!3f`sSnhkh!s>2--@MN8V3NiTAKsEb
zga)wp?8^FW4TR{b(u5S=7Yf)i@NP2-zq)l~CKk(A3H})MNCIa+O;cV|-fo3uO1NLa
zBJHHX<-zzG!Ewk~1C_RL{M#LY5b%owE7=*3Y^@Gs8eB_US?C6)4X!pp3Io$(Fg&M&
zXu8!r<oEK0N$Hya$<tTkH(!x;y64&gI<duNQwaK$c_fvKY|zx9Xb}60xC8K&M64y}
zTF&aH;b7Kg9Lcel)mORryDZcDAJ$<>VzX1fWhrZIMe?i$7X6;w@YEg}qgjX;3ysy%
zYf0(aDuQ&R+iB;ASDc)>uKL)$Ccom3Pl}dci3Ozfz2tz>p8-9)g%ww(lvfXDey(yQ
zzbBA=Le~;UU|ko>zUK}Bns!9#_Nza=BoPA6`B1I)G(X99ZI2!URTct9f9zg!Jx_oh
zfbNrvVp7RC0&-hMs@MiEhs3N;g148_3%;F`Kio$~K5Z_~)+oM%HABM<zL8g~JNYXU
zy3?)`$5gf=^XDDMCib?v_Jb3LY3%OR^f2X1ahs;;Rxi>f9zI2AR4x_SBcR7}6(KM<
z>ii0*bndqmOniakRjYmn3%?kX8B-Wb^v41&A2q)V%@C<2XPc~y(?KMGx8;WFFT<B_
z!(%HhBMz9tv~)U?tM8+8i~H*~09!f3s=SYn>Qh3?Tf1_iE-goyzuT!Ub-el;TSsN$
zgHeg;EMlc4ex7COS4|wm1CroOL${`?noNBUvP^@VAGN8z92IPBNA)toi^5(l$w~li
z4z!h-zT{Q-Gt*+h@sXjN(88U(zkoeK<cqo)y@UjoWS2QAubNurIz1$4sggNC;l#G0
zxb$nJZvN2>iI$M&<>w{-=$D2e3YJV#;B7h)8_QxN6TX}Rn>3ce#QK>&xy#b?$ihj(
zX;DmCJ0;gvp3n_l4b!Gii9YR#nNrfjQz26ZJ(}mCL%|BW<(;Jhyd59E3>7ogO6~jO
zY_M3|)7iY=5@OEZUmvLIu8cSEgDyNHj3{jD0B$gMZVM_uYpWO>E-~Ic9-Q_I+?Bb*
zUr=0YlE~X#ElafuV)uo>zp1|31Eb?TCJdRm&z~;!DDEWY)zMGq(^&(!g(r;tw{X}T
zSAh+yrH9=GHH=sBgpVz5tESDa-d%~_ug$p+E|6x(N_0gL^l=&t0PCop@G_=~Cp0tB
zGjdRyi|K7qlJHG;rxHTwYy!PV0NhsnL66wn&gShXSx=W@{42GE^LrbA!Z`tKU7bf8
z5x(gRUDaP9J!1BMc}_Y5i{@tuCten{|GMx*=hjvL)54N-F8v@3J_=TN1cY?AT1%v%
zd+okVZvj2!v3TlqxTGn>BkJ?R();EFZ`Gwgo(CC6^U|XzzbpyAUJ2z=Vf{xt;}A%J
z*_SB~7mg!H$rS~zbb4Wz%b0$5CfAjV`^(&a0A8U4tHMm)2Wo3q;h;#<axx6G@kl%c
zzlZF{lmf5&t4OgPrJ+bu79oJMonuRhhJvK$UK^2HXiCcN)rB$-U1VN7J0@QiXGPZ~
zb0G}PZ|seez#@rwuco)IaTl`jmqi@H$va=Kin3^cgxUvLKr5DzEl?!Z<gt2~(x3lt
z4D|8BDsfSv8Aw53AI@!7nWjtpW8Ifu%X=U5V4#!u?<JS?;5bGA_&LZ!nX%EtRTChF
zK6ZrO7GPHfa#j1G-y<M+?Att6upz}`n4y}?{K}4?P#PkTd$pA4`;`ya3rzOz)h`#K
zbMo5KTeeq7{p$2i-Ag$H;<=cwtsNf&XDL}V(GC4e5rO7M)5pGAo2wr;-3QuG%CyF>
zz6p76-trRMdYq!X5~<FEru{$}PfnZvuDRovl2=*_IImL`tsjQqhomLUXseXP=w!j$
zc&e{!QLvN&S0dYVNu5*A_0V~?=B&JFc3iX#65o2z-ZamY%zk6Iv0)8a{{I)E*#(Y6
z9-uZ&9Sx72a{zjm^#c0gdqC8EFboHM8OI86d3gt88NwwW6Hr^)Vty^1bF-?Lwbd&G
z;y(Rk8gLs_d%HP#3y#w`1T8y3a1!$bgQ?3%9U8Qf^AtUvo@{?S*~WE~ZQ%tgcARX!
z#QMbCh+2+&o!n4XiV;8lb(}bRmK=NK6})`l5@WyZAh!-WOe%G6W|mo?c$~WT)pjf(
zEi-p|#xDfk{$>PTNd3=W9X*N?_s~6!kLUV-Obn73=&Y>UZuY}@#93HMeE5%EP+PzY
zjuU}>PgPW5pAaKC5bOa;J@9~BW!VOK;fP`fXP`d=g5$nzU&dAkJOo8iL)4Y(h%%PB
zj>s0K6Cb!h=RB9Da@eWL@*8aMS(|=j>AqQ1hTNB?r(UyUXmbf(zco45Fnp7)6+)`h
z3;Z0JDAD7#AZGkcFB_&@7GS;bu9IKCPKbbOBErJLk@pE<nQP4+I3Bs2+f<vrZ<}w$
zNK^r;$d?|2o0Q$~uId1Y+|5C^P)!04_+!cztXEr_Hp=44>NOE)5{Q?1U~&kO5rib*
zf;%TS@xV(<UUZf7aG}@$uU(^?!|1o`VJgVs=6jUTwj@p{b2nHZT@T%wTHu7}ES(7t
ziN4vqJ45b{jib)ZvDape10T-G7xv(B7iPJ4hCG*`0IMJ}j8~|OsrZg0@zHZ~GUfpI
zc3m2D0YAvU)umA1yaX=>x5PHAzHKhlba?SVI_^TJRC(a-b@gxs9mM5@xOfKHdN{e?
zsKMu_wUCZW)>fE8cp?d`P1vnI#a9N*H9-QaCLl9|Z)y9Q2LJQO3KOvQ_CXMWR&cxd
zetYWlwWa19v@AV;TX1XYzX~~9C(_0yLi|hZa}3l{hAgD1f^V(a3GPsOnvuam-fLaM
zG6xR>;SUvK+|+`W+;;&Zue{`s?08w5G6I(%BdZ{y?f+&f3t>6schUacS4XLz5iprK
zX-MUNmT{m^p05gbMF%q}wtQ(W)bNt%Z;T%xF|cM>_Zk%jih_<|o4E>F+<iZ0KHQB{
zqqo^b;|K1CKA~z|<VVaNzoB)U0GjOOz~L^Y=_u)Ot?ga*-mKNqjE+f&1^ufr<^QhJ
z=_}vHJyn-Oc?B=>j=1(=!Wd}xRP}9k$}b}L5+-MO6oR&VSJQFH916M%1BvlcLWiL;
z=GUH;IaH<c7*Wr4FW}{d9HpP>g%B*1BPKlHS^vu?6b^`Fe)$P`^m6;?CKNe^L(ufU
z8_s_~vTnP)9iE>IGf$GlB+%Xt6?fxp;lVU_o{M$8Tu|ZRy)kMl+Uc3=d0c_W|JO;~
z|8rH}j$iqd9#^{sflKj)g90f_?;q)5pbJ0K3>m)=x)=mN+RL8j{S-~1QEL(!X<vN%
zTnxv4=%W<hiyL%8bqE?D%5AKa571`;Lr{QF%3AL={i7^U2oFkJphrvvov4Z4I!c`k
zV~-*r5Xmep6e99aF+i2d^*C0s#qRL=W$c)e(|zm66hM1wa42-6+z44K>OPzWPBw^w
zt@$VfhCOmmGk*(+j<v01xF<fif2U?3^L^D1x^U!EC)xIzBn(%1VHeO<`_>>9w0C>2
zH0(HctFthFZ@S4zw%=(y><1chxY}Q2J#BSf@UE_{J_kk)j~Pt8cp33kQd-2@p8&FE
z@^1>DEQV~rUp8W0Co|f<VD>yOKJj|5^BQud*T!V#9)5lHE6QV~d;Ra4^Wu_ub(j#;
zJbGkXlnxoRylY52J>WU4-f=Xm2&s6}!7lL;dp;7&eK-vdgsV&3EmR_Jb>bSSpu**R
zs4+bRU0YK@u`)&hp4z>*@Ib@Le+1$U)Y|a^uLfWFT-<(2o?*<#<<9`tEF>=mZlhhE
ze}$Y9AwS{ty!YjRQBNC$s3`f?R!nqFZua;0?^;}=$lp+xZLFHqLrA5m_PW5}K+?xB
zcf@MQ+>ee;2c_3VG#6mZq_9|e$|{&FJI~qk;y>(@xNePiU+=6hfex*>4%vCX?%Tx3
za$k}-#@4T1?;N#{Rt~OhMUk3ebtQTIFQ$+W&lg<ZE%<EwIBrk**!X4*=>CJem{8Sn
z&hFsyGS=3HNo$d#*zlgT!{N(G(9`Sh2jJd+A*$%h8C?*5FcqvT@66`iMF&t^>9MY2
z!nAu*ck;3mNZ|xYn0#q-^aPXTKKSQC5J=J;Q=r@XEqF{03f7?LDeCK~IzM$5r`w+6
zOTqAu*X2#WqXH}dme^T3>?2N3xo=WP)cU}gh%QZUZAHa%^M5uyJZQ9OU-q3@<7wWo
zHgHNCOYBwUfpTMa_lGKsiijp9p6^Jec#zb9Qiz9p$;K?{3fQqM@Jq?!^4a}ySy604
zqw3UOqr;9s!9pW<fZtmC-nZ-(Q3`c70Sh4$UMbo(f}+$0BcE(RCVkCS;9F6urjX7r
zS--XCRj^~-Ij~(*k9Y1~>~z<fBG1qDb+FuPC|q-4Y18+pAZpxFm?6LWCE*Z;Bl87P
zkh^01B7-L_mj4~A3Cve<yBT>4Mk~BUs=XC^=!Engy<Q7KQfh?Sf`!wae%@w4Jt);R
zciuf8?NFOAR{u~4UDWU}mB5n=<cP)@lXBPmF9po&8WrX5(ucJ-8_PaWF`L-L+J7|Z
z4~x?!!8Ta^9hU#x;@o*b)qQQgVMnzCAL0`D0*E&5a9&Nx8r4O}LYSAZ*z*GW=0e`p
z-e#OT#+?28aX?J>;RG&busm?c{&bQtuc~FM>x;k(ywL$ga1_8bD+W@W>6)>VBgXKb
zW6Q8;VjgOni;y@!2_6-TcxW42rxNenyS$*n#uJG@5U4x=uUgkn*^HGmpIYQqH-1|G
z&g5;ZUFNu*N(x%C#hWy29>85@zt>M%a~WevsYcnM_F3l>0YAP#?r21@g#)tKFxrjq
zU|_AFc?CwoEqmMu&76Jx#v;^1%0g+Q9<%u5l0FH{PEhEagwQ_x6*Cotc*QFKv~sx_
z2<Jp+olcBZf#1@{yzpJKnmeetf<4^s8-@V71q%ed|KQr4VE~Zs8rdtWfdoxvKxmg9
zSR!|I*Ay^pME!XW$KxCRHBu9c3L<6t#wI35&5#I&*Xq*1_GwFR*cI?El=W<{syl1$
z4)#Oy`l-R$ds8g+zqE|6#>veP1{b>Z!e+>_T)=x`Mu1M=g;SE~v+9p8SWK5vIhQa-
zGroB+vAY>EO2{Yk*ibATP|hhc#HqyHqERfeBSGj#FTSOZI4~K4*H}VbhutmFC>w>}
zSNkp=aJirLZ!L1G`JM$@%tsM8p0{7g-s<$(;<D}U=r)c@*$Kklb4jO2w1iAg2~dFd
zB#GbZs^f!XvtIHpyZ|UUicZ)%o9?$0mwsr%0n2{yBi8r&5e_vmCAuZuv_nQwg6C7<
z7WqSvdf(>rN+~qpHD(ip#HC#M_#M6S1!{5ic@YttgJL)tS#|)qoSno!t=bl!Orb=2
zMg|@V>f#%j(blv1Gfk+hf$wH#m-nTSc{0eZUA|bK7&9Q(J`9LKH=6A_*B-5`EUH6-
z2a3J!4or?f$5^Rm9sCtAhj9hS-_q%%FW)<me5w;|<B)Rah6eB*T9^n(bD#J~uyvV{
z4YsO|3$#)sd~uXn1s25x%G%{Qw+xE@I*tomm<O+Yy+1~d^OJQP9`jz0soRD+7kzoJ
zXI+ha95SX`*p`iyo1~yq_NyOaubj@lJ!%3rneky@elx?yx5Z99+wj{UJffEz%?rj;
z<FkgyTx185Ym~z8<*i$nrXCZUWy0f&f8F&7t=RHTAc5?)U~6uhMW|DAF)LalWW5*g
zSv6g{8x(c0&-;-_-F&dz;5dEu%+eX^B@#4o8`Qkr39J@QpA|D{dVFY<ox4qLftX2S
z`*1QGQUI-~CQIV?fBl9!fySk%3DYw=x+_#({|yk%kJw&fTMweh`LP-_Gq%$cD0jog
zve8Ul*N>PweEPKckhV+!5A=&0(^lT5>G?(bolBd%Y}?inh2JYbUp=_AAB$Y~3-7T-
zu?4p|RzU96{<0rdfcYu|+hgLF8=6(+{HDm9@)Ex%)OxVDk32u5y66*h+&4p@1fcU)
zl|8enYI<?MP>*q(EVEK}f?&ieOg;*hk~8Aq7f_=8t#RLCQna*{cRs9p!XXu+#WY@}
zJ^^SkcbWHQK|SV>{ZqX5S@hyF)NkhOc2fN9=G^h}h`hC%m3#NA;I?}YPOBCRIfz)A
zJ&LWzIvFOQ=Xxuw;5~3r7Xr15(#Ys*wa>V&6BsxepTxQ65Y&|0z|AQ3Y=t<n4~VVk
zD#+TElgFyC_(m{!Fh+ar!09ZPMk;(1XYpKGTMMwMf*^1?QV<A@RKl6=C68XG*3DZz
zJ;D7+x~$)yxoLTdGAo_OB@D2M<2j=>YdU<s+ZdI)Axd6CE!|jD5UAfU39KHjx<VM4
z%RDjWTfYPI;Tr`jt`cqCP{T4okSqWaeA%7%H@tHUTsCs_u+_O&eD*J%cg<qZjlZ@n
z@Jq;qJ#SN>pv4W3ByB@bVFd|i?-EPl38EY;9iFzFm<?^87Ml_;_dTToY%c(VgFxPF
zD#4P6(USC2qe|h4pcnX;PT@)P;zZ=XIBS9bWQk+jrHih69#UDsWD(CFRB{9-d?o}#
zbZP6qbg}05Fi%~(2yTX28QW>|!xp0NH_Xz}ck35~ALIjPy$aeami?`x%GXJBNU=ZS
z;92Hcy7QXZfN<FbhE7C$#Kn+X!+!@4wMh>GYC%s252hGcs}G%rB14QYL===fFl^|X
ztP)!AO*w;!_NSiU|AHB<|8*6ICmW8{lR*BxVTlO)xqKVaxlqBTI@x#eNVk8u-)~MO
zO`7t`90G?db&eoQnw)dE{TM!^KMSyVLr|Hv)XM1B0(>Z1)~tn@oHJx6ZCCT0N^iv&
zw^i8y+b(JJskDV=VfhCA*UrI7foC%bY1_qyN5U2lmmttW{e|3In`Q+>x$#rF@<#ke
zi>*z;?78ZCX_HNpJG9Q+i_Ybjnssj<Cqn`>M1M2%6bG{z;&W8L)B-<rQX*J&O=Q7%
zK8r$5DV-)3>)fCjGo6V)vg;}>5#L6jsk&5*8aA?jHHRiz8<@cO4>q25+<;tzg?(nV
z>t!}+z||tto{m6g4fPP|d7zw#i=6PKb&(-~9M9u+!0L<huXn%hxaoI|DnegJ-X0)*
zV*Yz6dB=pQJ&IG5{GFb~K&;i8cD`toTAhim^V(r+^x{$aUW<gzbhEPQGS%rEa@$V9
zNvonytbqA<-&Ps<>wR<f@r>;;ZAylY5*f)GnE5Ni?w@1=m{~SJbw#kdagkwsduOc-
zgYBreTCj!;FodgaMs6PIr!KjB%v0ms3-~%KL=es^{tl5k`wJztwlCJjw}@L|&~4B4
z>Z)H4YC}pbB8*s{sAG2!cM}s>%Sm#tTC)777o{FMmIz;}N?(3WzvCmTe$~&I>XRjW
ziN6;j{=7iPExTrCK}5rqM!p8bd+}NC`;oP-G-p4D?>%R>iMa%t<sz&~&Po&Rcooij
zTJZ?DZjj@@KI59@{-_eq>cMiJ&opvO4EQyjICcPaqNi@`Z^oDaNjf~|KusbhICYFr
z+3Q(2S`yweiwc3-fESjew==kg**;Y7BVyB|LD6_<jw2cusJAH#N?>ag-1YMLuAa3c
z4M%fGvlSLZwl(-S%k$t__oLTu(RZ{RV@AgRDhXqBu<zBp8ZskDQxVA5{D~Hg|B_au
zf4U*x8R68?BrUMy)wxgl(2({m#vm$Yh4wm;m)vvw5QXaPPulC$W<V^S2Zfbs585>9
zu;F?JBP@{w9Q8hjWoJoeFY2O_K+v7(UbrTWk`e4KU*Rt-{+K=X(Ci*h!z%LHo9?LY
zp_G8E+F^x`qW!}Ml%C>DnBa;O`MG^L4I<-*y)>ZDlLk3_rlRL5)vr|00&xRb&S~jg
zM#AJjv*1HHg1Rz+OF`gd*rXT-O_QV8h2D5()=o$V@N2e90Fp(?=XV0jt?$IB>G?=k
zTB62{N$S;5+(_|sq%tRe598ffWtCsE0k><7C&Zqrk$n4wyk~{sT3Q&}{Ok*<Uab{9
z!H#-|K!d-n$g%F0GIll6Ykzg5gz*a9FqrVl;$gLunTU}P-D5tVDf|BQnKDa^B#*Zu
zW4&*~hQ1QCy5WEfv=wkkC^N7PJ-M*|+C{ik5XB~9+jBMJ3?Wl%u?Mr0ZN#x1reC#m
zR{)E`LATm}Ym1(jIZ%!)7+-VWe9Y)+4K@_p|5!uDC)V7?unJ3tcHAZP(2y|^UD5Vl
zXtDr!{W0X<h{DgJ&AG~P_-Kvjg6)Ix;tZV|EPcjR!J7})S$u(Un}LwUOhJtzQRaXk
zzmy-KgDa(gS)q5odT+ZuMO;xkPWnQMgV%KpodYW^awV8>q<4`m%d|pTbI94~wgGz{
zo!4>>0VhD@`CX2W2)9lu+^8wHN{<~d+7Ovfk7UIsrf-k#=w>%YY|EVDuE$LfDi2NF
zF1t|SH==w?>%Z*(6-9fBf4~r1^z9q(-I6R`0^hZ4T(PxhCGQDr>jk%c+JgNflB^r?
z8TI}wEc;$c6l0hHfQN8)2GAmPYD|@)`01<$zu+x!Rgt^))O;#%U)(>}oj#j`>ifHd
zUw35JGn)aX>j5wFs)FAvK;VEvEVp6z89=06un;~<K-~}>Ph*vjwxxs3oj6v&mCnIU
za=j0kHgCtd3T<!bu26+xy8ws-U<tH*Ox^agA#ZuFzfI5aErTDP0KrZUZ!ej=Cqkxn
z^pBh3FY}OynWtJWjEjSR$%<3ut!<hYxU1Y7p`jJ6<L8?9-|V*MKRz?gjCw_YiR2?n
z3Dfe=QgtEJc(GZ4^5DqO7z7NnHaLa~j&+RaQ;J3lPMpt<$U`T4S${GU+RoY6<lP-Z
zUdI@hx%Kz?6&PEHNxa@}Wr<$mMVV59ENIs@!;R%EO<st;3V}M5**GPNLg()3wh5xo
z07GgT`4}s3<<ty)UhQWc-I6nrbifPZY)t;tL#e~x)`ie)D=v_?^c?bQ5l787wDs8i
zrJ!gSa<_^l;^}d<WQkR&3e)_~8}X{jA^sflN$Cpaq>9=mkhlEMZiC&S$$K5$6ryh9
z>d*<(va)D8395yZOw=qw3yF$1+9xl?Dy@x3#?5PP6RXQDmlEGPP^1yFkjpw(dW>T+
z0M(Kl%p=m%?J8WEm*UJHe$?nhsZ;^xvQ)?=yby@s>+{o@aQW28s8e>ow`|B~zN>nD
zYB1s!`E7xIo7?G$#^G393;Dd5@Iekwg1Ym|kn4PXvZ0Cj(<CS*RTnPQhN4<o;@qC2
zL!wlC2#4z{n<P<V96%GB*vP)^xSN5|^rY@?Feip05kZ~HFo*R(sj=eY(o4-#`!a{>
ze!$Cf!*Ms5ZW*mMth6u|BXp@uF^Nh9oPu?^=BIge){w-X2ji$1V7OhMFWCIpKx>1=
zpPq3HnQEDyDvSJ(ZF@&|YA;}tC@V(xQAuBJ)s)xVk>l=C%|2YQ!%gu+i^<#i+3E|E
z&J18DIG;q#KY^xI>Nn?7iCUXRX6DDaA#`Hb55$%G3F1rKuu%-*L^Hu(TKcSh<j(^z
z;D2g_)WwG5sP*a(hb$V&dG!6dvz>CAc;p|3A2#AMC2}y9)xwXz@lDzBDeKXrFcHJ^
z*m4bXa0$J9Lc+8o{W&dOfiqVdX~s^gNv)ax5j#pAZA3gn0v$I##I4M0?f&G`fr-KP
zUWU-Pia;Y9i}x`ZgYk;2*sn?TLD>~>HV2b_hJ<!KS&x9OkhjINnDEOP$UO+q<DClu
zsg^z@T@vhd<=5kb+?Lf=fn!jTuH1+Kp}B`3lYm%UU@HuiZUryDFnMpw)-!_bId4r*
z++XH5$9@FX7N*l<BWAiu{neHX=tyO59FDk_a_z@lQdj3HYSjJOSj=Bp7J*Hp-s&Km
z32n1Z(0;cY&s6-wF9!!dPfRba6rah&tLeSzB_dQ)R`)ofNgjRLN&hWk?%TF*^XK|0
z604xM9@Bust)JWA9*(~n5v!Z;J9jUI`rKs5yh3C1|Gr@x$8e}4LQtfY+%P{Q{e<`I
zp+M4<=|dz&tLb;Db;3TN=>B`?RMPQnIkztU&xEeu7#*4YOP*zYlH)Kmk^21N(rb}7
zp(p=t-%&38TI8kXRaGvj+x}Q%2NsaA@(S8mdXeRv?&viT2z#rA=7sU$VzsxXGLLDQ
zzJ6FN2Wwv@9ymG<wW~bw=+To)3fw_zZHm9~zYRwmS7Km|BQKH^AapM2d^^C;CX&>b
zKn_MXSC7zDl~7YR@zfqlOaAV(8;Twy$rF!_^73ksVOZka`8{`0=Q!Y19di&vWx%!5
zlCx6pCcE~Q=qLJfB?#02>!Tg+pn}{$dQ$>o5q`uYBt`v8s)0~_5jvXQL*GX~imoOj
z{b82oSr|sJ%n*(nWf~B^bt6*~7~%d_?M3*bd1SVZog+R0g;#53x!jU-68E6x!}ewB
z{8Q4G>bT$)>N4$-2B_U!GpZUX2nTOzWJ7d^Yabm#I3KX~fEfjo!2WQtNulk_(4*IV
z=%y`a<nFOxFYt3^1uJe;Sr^FYe=j0lnN1xcaS}Q7Cb@6&jz}*Hx2Bb_+cxT#E<xN4
zMr9{QsTGPIg(H|-oQ1<S!hn8l8sBlx_xFOGmBL^Xb)8xQ4qnk`_3iJZynH-Z6c&fd
z7%O>S;w$?F*<*Hn7cJC0=N$uf1tGJ!PV=#@GOSxQ96R5wmog&O?iIFQz`RCpW{KQ5
zGi8$R!cQn0-LX?Xnc-$iSOt_BV2$#%pf?8NPXoNrkO`t0lBtJmNQ5vW)?V&Ed7I!A
z48xs7(b)(l<`T%U{*p(|!l@F<<(wWu1`<ggina5>uIe3%JvY@bu_0R&eJ2<B@~R4X
z{Ku4qSBT~IQs&z*?HTI{CY^)rcNbbq?*Z>uS!7^U+*M0`g8S)e92=BxV++l1&<Zvg
zjh`X+_N9>^Bw67U)w9>_Jl(}=GrhKWT^ZXlxuW16wQL=W@Uv=vZ)Jp!O25^y1-O$b
z&oF$FYp>?d;BL=XgCII=;!M14wfQ<w2|e6!lf*1jy_3XVJ}%LZ&$#f)16pob8XY^>
zLKmOw?rcr>n5wy{kjR~hPGBgq%D&utd|nD~Q4d*`Z^i8|_~z~<v=dv8>eJ11a4tsT
zF(viwxr#2yA=3td38T>)rm(Are?-L$iFTG4@2d%7mo9SLk7!RE4Qe@~$Q8?IL)pR)
zN`ZXe5Q)vFs$p9|A9iB1$uTBk4kSbINahE5ClW0Md3Y+4V^akLxXoQL!a=NdFJoUS
zz|$zeY@h1d+7r_kPEG0fGLPv5KG3t6=*@_KH5F{#+X2L~qc#&|unViK^OfZa+KO4d
zhqhua-4~uRG{o@Kj>&r_Kj>2V21`Y4j41Ghy%%SS99>rf_Lw6GYDQMp;&j`ReqS(C
z=NP3k_H{FHBhj0;K*=W@_-GmH{pEA))gq^>GD3-cGIpJ0nyfwNGMpA%H0>YcVhwLN
zbT-Y34y?M{W~Ou1fSA*;Pb-$NQ*0%f1txD_yuczBo4yFn<=RUi$4rB|afKe`#lg-C
ze~XP9kXGv(1<nLBIWOvTy`V;=lr@qTW^fi$D&aE5c(4+7CbrK>w-vNS`L$6VW+1eE
zhhj-aK8f}_tvbbyTMkb$ztu_p{)(>9g>RSZt<$%4Au}cP>CO<#KC68C`WbDHA?`1y
z(G}2A{K3Q8l)e|s!~{sleXprnF#-wONZ}R|bMT{MAQNP;HZ$OemJ1O;1{xOKiY<B=
zBj<{(s{BuC>j^&m@_OtEj*X_dxS-3{#JuQAJFW2-I#)pqp>7I3q3C;b5SRL_N{VTW
zw#i)_zbyGjhkG<lAi##?hF7nWpEZXICZ4d@R9&rrsqW{W=!ifXp2}qE#-?7qmbiMw
z&#aNulJtn0Ru~rOY(z{QwdTVV$~u%!xVnmI5#P6;ioc5MDaVpMwUcRqUn*gJeBeuj
zU>DaJI<NgLyC2vWefv8kG1u7Vypd~g3lb2ycoVfsQhfQOBZjCLMk|201tHk9_P)#B
zVjouNU_8aiW2NdMm|!9TC}-&8d81khsQcA>Bhm&ml^JSXTqhhD+AceWS|60XhJ37q
zZzIAvxLI@~jI2FPA!AT$zF9Jd7J$@~^pBCucJw^n-k_1xUK<om*BCumDm<9DH5>&q
zt=rd`HIJ=c>()^s>Wec5A-iSJu8wo-#mf=BU%_n>#<g<f^`idVdpkO-DVkv)WeIK~
zcg}Er1C^%$T6!lLW0Kb~?-r)L3S#DHRDnNDl9|0kx?7`aOLpiT-xCiTf_KTybPw(H
zGNX=Rl;E3W%ybFpIhKsdH?O`pLl|k2-ijc79iFiljtT4(r`WMI4z(3<O?s`OXqmC@
zK}UzSZQzdtWwQC9O#&8h^gPihy>sIBT>@-7;xc2+VB8AA6il^#b=Z@)?<2&6ZRqoU
z(kg{k(FfEu0gMJiu`naOY!cpZH{{dU(RBmjfJy2$OZ$bZd#YO8YR{*62sQ_=&L4Eu
z4*h9Mf8&T)ZrsRkcPd+W!-;{$uWZ3iVfw6mWL<ryuU(Un)aj>;vEf21q$juGvw^0y
zFa1KtCCyu9+UV)0`A=WaXntb!Z&Z?Rw#{<b8P_-JkP~Q&W}{8D;7{}j_LdjgW0zW=
zb|AkNCc_#dsh6;LZ)p;2J0;NaTx2zN@(^*dM`arL;gV6weNUf}P)!l<2_f#a5opRb
z?Vo^TV0S-2_T{qZ8%7sZy*VvhZPESN#cVWWe`hTvQ+;aPe;H~8dnNxc8i-f6v<TzG
zG=eKHlz=Ho$b^}Pp_hJ#_%T{b-CmrcIEF(9VDAKzMvUUh1}hT7f#pnjM_&<F=0wws
z;78UZu!R1bdt_A14l_$?rjtK9O9HRAnIKzQIsuhC{eyc?n`0S@kb%$!w6AJ-2x@-m
z(rlvyp?~h!W?*FkbV<fdfPT5<LTrBjkCp&*E_7+yG48TAC~AF$HLHJTH9r0r<P17r
z_w-P6!$y!^>|M&nuaGndJFY}`*|f{5Ppon@j{=bEju8naGY+n8+N<MK+Dnvp4Aw5)
zZ-n3tpoE0+N7)LEW>^dd5+KLd`OmmJb}JB@DhD2;@Cb%#F;l1Q-%P+sSh?z}{EgK0
zIQJ)C7JK~&PR%_4Ws;hTOb^O`k|d8fER;!Kn@n$|yxQ3vv&wVAODc6eL)IZsLX?23
zmpH-Es>p1OO<<D8E|Ne{Lik89FsDw!oC7{8)Q~%ZiJe8Qi~a>8h;;#I6>w!8V58GV
zOXdBEvZ74$o3nfeH|m(llOO}Rxwvj8x*hu`tkdG2BBRf>DVRERh0BS~j9oTsQx+cL
zo%)mzP@5|Gw@(=+NjS7W4Q81E&?C3haCp&9_lPuTEI;L|^G^q}Dgv9#^*H>bvNr(0
z`%AIrH*DHxA3=_$F7Es1k8eX*WWKif8Fr^vY29Lo1qUsE1ol3Vp|8ad;hKE{;j~8(
zDw&#fYM4#M{|rZiNEpw7*Y}kP7garf+?K%NM0#1cWJN{^j}ylLb5@%me#>3XdXZ+R
zroK_^S-`nW#e*L|vGGQOf@9^<G+3o3ei5Uo4OLalJ|+w?!A8D`CYt|e+O7_+XE}T>
zuji_~hSpiCS3do1%w9xe5;=jP9wfHt2-q0cQ_CoxL~~ES7njUV^BcFME54@jPciSW
zoW4{UB61dFL8{ce_>>5yUiXAEtAtXJ@h%o<Zchvt5RVnKP*-KF!sDT1^oQ}|Gr-KB
z5k|w;Bzk9@0EzN(zCUU+!x&Y%N0A1WBRJ9$>4DS|jCn_{pdwPu{&kY7_LeFJ;7Q{N
z&hg2Glxfs1P4vWYo=g)ztpBytV;C{UOiwlg6<iZWe5$KAKTF;g^7(+I?oKW4_WmQh
zs@~&KtcB*g-{IqgE5On%mNI6Z=b7v@EMr<?nq-TyJde>-WZfZH0_{RQ9QZN6g!VWT
zPs#)#Vp40|t>-*u4l@rqXd_k0Xx(O;PSw>oFvmr3*vLnZmVd>|WBkL6nkVNWS)TLt
zo~=R7Yvj8+n)zHWCV%_PFVP2~3<C7V@|vzBJ6zIEc7IP5M1xs%Aq@Ef@<i5@(}SVs
zd932y@t%YQP4Ug`M+%WF`kw0My}cU2hVh(Z+CN2x>US*zPU;0gw}&6WtGdhq2X)qy
z#Xr-&S!!GVMnFFJx@UV!^x_DuPbn%Kijhhfjb)_j&5QyC-FN!YWX}Ag1L0gHu9HKC
z8#&$fb7eyzO|4xR<S_p<UU7j-se_`2(60Fct8YflB*ZbV?NM+BDtxhnBXgUg5L3av
zq;L3uixmD6v64-&TyBNDO|$LfA5P}FXK>LuZ071I{n$@9?vvhF1?D#NJdWE^#ktc~
zP|2=(o|jLmXIBVLrP~W}rDj_}Y|^VM^fU@nu)yYvl8rO7kJiF5Drb2wERc&)X6#32
z>3^vIG?GS6N_OawRg`|x76_-q`WYv&*p-L(=LD3lIl?&}d&~mEVwEhNW#JP{yGW#&
z*Qk>b(O${L(X%@+Wvu#O)bB)>1Zb)7#sk&V&L}rBJf^*kMCR5cPVYt(5?KU2Lujwq
z<wo2A>w;6Fi+f>tRX3($B-iD(l8O3?{w$^I=$W-z0$EX3l}wNXw)-|CPw=k@L5Mo4
z432n0jODwxE(`80)vP#U6xSG681dZPK4M|vRy{_2e8b1k2s?VOHIJ8$axI_f35}n)
zxM!g&WaMXTp?<DvzWvVqUi`R>fcH#WbLQv)v>|kMIA`3<dn#^B{FPgy8y(EMG+~Wx
zwtBVz+z*5ZB-APts*UN#)LYF<<`hc2TR%O<Pg!QiK8)ZHzwl;;5!>y|(H8PE0vLu5
zIJsQ{7#A6h&)9>~sWydrA-5LU#WO4;3BE!f;o^+-&Pb(C#(Bv7>Gm;|j{`(^2iZL{
zMUPsa{D-o-fVeq>&4QnQ!8IE;O9U$<N|TTZg;$Yd5W7<Fm_`O59JBS_xN}~bPMV?U
zp(Hy8J0M8sM)yN2b64Cnd42|Zv{5!H4#H+C<}~Gh(nLm>oT7$h{Blt>AFah5nbEes
z-1eCAF!)wiG;|p*d;fXrkAQxfXP=T<5g%q2pYoo#k+h<9@AIAZYYc;eV}73=Tj|#?
zyOeU=%f9PGomtC&*-}P=zd)mCE2^#aDbBsb(|K&*r7xdpO4c8_DNL{ZmI~0LhcPgK
zeGrDdoAYsu^o4!TD7}n_vOBb;^;s+8-QkE={Ih##+B<p!$#(#f)3F15iGdx*goD4j
zxGL-^fjb->LzTh{%|CTiPfvmEmO}Z@gqO{^B#GV_NyVJE6Uq4%N84<}V#_7Bsazhn
z=+jCBUa&vkS(<(bfQ%)uhr#s~*1$jE(lgg}0@m@rv2tOxTjZ0`ohMUQ-~6uSebfcw
zUoCA1FZlMY0fb#>Rena+P%N=LByJ!454{|rSt?JEUOj26ea?ytxyb!?k_qa!o(v@<
zacRxG+%HB|9JqLFrV`y-t^4hlHWoKJI_)1wkw$*1`4?N%Xy7{h=^CxXLV3vO1uglR
z>dgUYSzz)`BpJ0eDt}^XAbl%@&#$QpQl!o2XT=SjF<Znp23Cn5^z6wjaluKz@T!AZ
za5qdMILUP|gh)r#$*`@Eh_lDkTcUYD2`IX*zlc&S_|^41_m?_<gIho;7qLZeW2W2e
zrkuSl<fpFg0?cAl@+)UM&FgU}6;>nxPp&-~B)eO_=}4rkzf`^XpC%4lZ-JoDtW(DN
z_bd95&MnET-|Oxqc(KzXWxWw54E{LN<l-;ZXIkeI<mY1BAtWz8^+cV%UT471$oBo#
zA5-LUE%(!Jx?~0`B2Bi<`M@+|T%=i`Z4m&`IQc?nXXfr`_0PEBT+C)sfQJ`Wj?Zh*
zoFAlq5SrbwBqvKv=<HapI<?PEZ_pMRVA6Imy69$hS$SkdLW<DpW_}h_;4MVY)Vki+
zg%q(k7%TXJS@9f+n7J>n<m$X;<`bG!-T+}Y<U~9-AM@vH$0F?eJs7F4ubQno20y5n
zWQeFG^f_GLhxZV0zZz8Kj7Ui?Qkxira7gqKN|Jr##Qr+a;m(qbbk-V(nq8Y5ctam`
z&+A*2n_^?oj*wW<dYt=EQpdvv^rYbwZr2!82ArvAnmmqhmS84w1}S6M64Vn`$w+d$
zzM-L;(HMT1gCAr4TsrcLb`0@cy6*Ex2HEQgmC98N<H?>7*AHZPm8G&P61_36hW)s}
zNs**YXd~Pmi~=;|egOJSe!wN257=J17JE9k&C4b59Z!Q{XQ9OPm3FYyef>)8QH;I{
zGY0LVwm8;L30MXFS8Muu)pF3aNA$T~b(6)X-+x+8>4&Vm)j~}(_Ra-tY8naB{o2HQ
z)P}6k*q=W=tp!0?Jf<k+$jeo(V-o$@%nJE3)NGp3L4P5~<do-3>wp!VPgTkLA{*KH
z&E&AHlFt0d;I9h7CU#vbjhmUjq^Ltt!)eFStYD2OP;?^rv3KMJ%q^K}R2n<u(O5_i
zkeT<N$iJe(%h31i*PV9T2`VajiUsAAXJrl>Hv0lk=_^jKRbfJ0YNa^{e(8qy0|lqf
zoP>xw3PU_#QyKCJQAPpc<ew4skpzwPF8X3+2oVHn+Q|#6nIIQfWC71v(E+Maa@7Ud
zNW>zu6_*|@yZ;{$zhu2%KZlF4^;qO7*GY@|bgEg>!ru=}?^1!AOwQVt-g#z>AO{cd
zmA0NKxwEg_+aJSHmHN95Q}{EwY&}<YN2z>Ii%Xu5II^*R)egl74?x5;LBY}?msQ@D
z)X+IdEOZU*>&?I$(TuGyjaVc64m@m>hclW2$d3ZC1mQ)jgB$i2b?OB61b()q8jiTj
zrS`kC?Zw>8*W45<p?pxfs-RIy)KAnM9@z=Yd_r~#J0RJU>+Oy{p-m=YMph=s;A=g#
zr8Ijmv=MNn-}T~7*G`D`YO!zfNz)X)HyURQMP!}bN_h~Ib10C|%L{IW{bbVlBpg<S
zrcZW5es1-7u`jmJsh15QoOj1Zba`)9RjXcTMff}7Pru${T^yjg31M^3cc?<Fxp#Q0
zHz^_^?OBudSM8cSZAQzaX>-A3p7Q*YuB16o&6c5By_{6XC^5(U@bwwW%AdEFZLij|
zN7tyc34v>0Zj(~>Lb<n2B1iv@&XEC_LY?|Hq^=IyxoYw)p6!yD4L7DLws(!KKe#n=
z6`YRJ_b}Cb1*;=^J(I&6TjRjX7`ey=cdwCt*7h>yx#3jdw=m<vwNacD7a^SEKlnMM
zM~K~Mz;D_6URG0UHUHD~#TbH6YrItL>hQEnjx?ny!}l1!ZYNcUq0y`#b2R?&QC39o
z0gKXP?@SzuZkHe5B!m375aqaV`u9|6)*~9wp2J9LZ?&{^ZZf;5=n&*31#vr(Hz_-s
z2kZR;-0!2s37MMP%>dP;^ZZ+?>Qg%<>Wcfl1ir45#UFw9U6W+6PGKK=cD<*p%5IV*
zD)!km*j%6$54A(~?2=n7_*R+Hwpjg|O}>OqE9BE}2pJd{hzsS-OB%Tl>c?Sc#H`9c
z(Iu_t-|~9CBeuDzaS!M+@45gO!W(Ioj1gS2f=L+PN<eT~lGJ_XTSYOJ1%~|lO|0}f
z@=>9{X)sbfml?PtHN8gUQ|Fz}8v11iC)eJv%V>^7@n#72mP`mUt+^z68&g8;A8l)i
z;m^&~pS`B3<&>`nBFX2S+w2z!2c#!jpOujWo{v85xUk@;==v7q=5caT`gx1o?Y9`<
zaN~X3o5q}2_wrt!9`I_HpJ79cVtAjKxQ=do)<;{1E5-ctBj3;zBq+j~>xUEan4f2)
zjHoT2-^w_(H#D@*K0L0^g;sr3Hl77axteEGAm`V+wU<U`&cPW2$l^+6)|`92#noSt
zmPqC^Gb^u~sn&+Yo=31;r%p?<MC~%mWRDP6hYUCFiQZYDX4T@_g{`{0qRc5Jcc51z
zU(;mzcA1r6tcxSps$Eb;#TY39A%(tEqa+XNTSdm^HARh@ib7#3m@(Q_+EufX&$`Xe
zxr7QZD&=>%8f?g<@d!Bx8DR~BkJJtLmN15%M5#)jxa1fk1_5B62m<mHVt3n2r{Fnq
z_JqrU{aFsGKGbBUy;uV@zsQ3Ksl1h7agXj(TPmx?1n#v)>a~{2_U%o(sS7>8jnPwD
z1nMyJXlc;7U+NR`Y$i+$byI}NrUFg2Jb5Ev5fjBY0V}A!x8(rtV3>um0a;6=1H#pb
zgwje~W`YZPRvZ?P8y{K`H!OiF81rv4oXT!(XFb7|3x6En`+#O}A`@G>PZey+xEzKM
z9oCkq&0Wwu!GrEU+}4cnCg7Yqj@iwbgnk>x%0~K9DRpD+bV*W51gQD#W154QK9&2n
zDA+xqF=B)1)f2s0s+H^vY1||adJbZn?rfhX2`gZAo#8wUv>;vd;!$Y;T?WAZWUw&V
z72J){$Sp0((ZQeJ`MFYzA%}uj1?25RH2hWC_wgS-ecT$kb5;_>h~q3_{WFo$xb%~e
zP0lF=v?@$pMIUe}24wxaoLQOJ=e27NnytgR`Th;;U(K_XosKx%oqN46CK#LbU9yO?
zPDU4i^!<Y;#&=l&@7_Q_0v2!(J4q-p+kT2H=<d{}UwZyOUFR+IP{kcoMdc~&Yu96V
z=x5|fJR9BRPs?CyXoiQm(Us;<>->wZ{99_%`ImZa*W0vK=OGHdSB`{dSlsO7D8yxi
z38aWC1$oZQH`ghZ)?R#NcL0}m>aQEIl1Q=hzH3ZR?xVekHFo{^`%>h`W;rl3Gx!IZ
znb_mQ3Pgm&tZjw}RyQ8gQAcZNfhmiCtMaGLk-?Fb0yDe(ZIahltWxUYRPlJ%!Ej5O
zc>bBS1UuzzLZ;T5Z!W?i&ISrMs84x{1)S+uQlLls!V1@Z$&p0+)&dpryj8Wx5SIg-
zxR9%eO(BJaa<d_ykaGNakoE}vCn<T$c(UE3?)T&_XzM6a7K40b&=XCr*E|XAKPU5`
zG&xM2dvZ9Q=c*yNzep;de6L@j^>DfM{6ae<*r(;>i(WT9C`vZ}gmu|~m0X<rliApL
z1+uQh>r&{T$%FcbgxDWrt|o*9sbkEopRIKef4=*;<xR0KkNb5haaT|G_@~U3GP!4N
z@+#%6X)LBVZ{uBQm2;d9+#9e%GY!`8ZhU^m2g8%lv5i^IqprBg)jq<Tp;6O%knmHF
zt<Y7eAI*azOL&31>xz37sfVKlyNw;(LB(fW{Hk8($YY!Rs3{yAM>1~{lB)~gwSj%e
z_Pw(-H<zt|hg_wFzbU(Sc+rGlRNjc+HZybP?+<f4vGC3Wzwwo&=xgiwO?Qh-iGF5r
z`p9x`jzI;Ntk5lq^TCw4ca;%l)j^|y^`E{fyKbrU0cVJrMw8d-vH+Q+mbwsmbOLLk
ztc^`5hR+SEu048<8}j(`{hhH&o6V)eQpe$ZV*@@0`bzk7AV*L`@_|{Y`6VTkEJZhx
z2ex&^n&)^6S1G*XjEUYSpAW;b0!(joo8RWMe&MODJTL!3y-<WjTV*-c9#)AXY`sSh
z!}l_X$EvdM=zSMDMv(2miCL%MoK7F+UD3!T-!Yo!MUhvhmeLnrM%qs>du1eY@c76!
z9`k`;KS~9;T)Z%|CZZ;6oCY_U-Jqtkcrxj=uhPycQD`RGW-w<4MGwiZdSIHvij!0L
zIYl74@-wzn&0vTU#diRJ_kejyFp&lIDYGs|e$#*ZX8vgm;m_09)1Rl>v@PgaRjj1j
znei-4%aV^)mmgtqBZy}Q_Z7)IYkO-%1T>i=->05SOfuQxsB<Zb)}Cc|CsfwHQm*j!
zBZgL@%o|3Ozl6_;FK7+j_j#q$Qv2Wt+K&vF%RISb<~a)Kq~>@RHhReC%y^+!1Th8<
z0nKmGc9f>?ectt+YYA;_PX>Q86`~k{^UsCRO@&J<3{&$3Ah$6$qchk|ryN;D7+($J
zK30Uaiw~ntFr8)91vIGdN_+72#@OlEi}UprBQ7G$syCkg!SAD{%~Nf?*x(GhqUsLy
zop#GuAgPVYmb{0?H=d_nl#o5tCyhj{N`#JI*;0j{OSfPHUSo2ENA)<muP?Xpg2$@P
zLF&0;(DnvOT;LZKuMT>P3X7${bQ$-!O#CLNJ`u~#8>ihfN9`rU%5PNvNo5x{13$=a
zDSSPr&&Deui)wvZp`vy3tFNzR&~lEXsD-8NUC3|7a{l}tgBk%hf_(T_A0zHI8f)>q
zR~7xAW*O`CrWxBq!^+m2!oQdJ6HQd(O{FhBUsF3MS3&d;yWd2Axb8dVi{K4KL0((#
zy$tX8dL+Lww=v^}@UY9ioZ}l9?_=Tmt`VTct`OQ}_nn3BlW~7MV6@@zz&mos5QMdY
z>Nt!;@Et3NX@B)QUHHxNTt1TVrBSN1a@+qYL$r30St!wG_aKK|DgQ%R>Asg0pYh|w
zVu(SVNV23=8u>PPml3}Es!DRb&T;?i0c7Fyb?Vb&+Ih>8t-}g9hbR{kDOe3XOBLh<
zL970!v)?@N133<M=6M_yN3_zOeUd8i5n#abtm9?%T!ovQ_Z!5b*jf?Mc2>w9ELxKd
zd|S*4C^wUiKEr?do&1Gou$u2pMnf{^y#d~igW0phJ4a+Twb1p^?h+0f>r*Q1BJ$=d
zM&_#l)J7o%p<?O{eHt$XllX}^lE4qknrPn@uZJ=Hz^kycre2xIWp4v!dTdLosH1xY
zz8ifce;8yK#kmLn%EGGDtH>*|hdM(m{OOy@TO_PQuoP%7rQz3+`@gdU$L4bZa;1Ns
zNLMi2vO?CV_0=BHZ6n1kZs?pgo~0JAhCsd|zh}Q?7YBX!e~xarEI75~#6Qr5idu}&
znAGc;1T>B8IdE?x4$+4VVf{n~1O+BY>YD^1O*dMTP{}6Sr(8%o8Y}c@x3A-VN$1X`
zNP6^fV%-BJaw#h*4|chEC?|_H>EhY$M={>t-GhjHs=RJ957h!wZDkgX5<$Ndwkp<w
z`c<hV@R;q)?>vglpCzIhBgiAx)tq{y^*r-)-#dMk6Y3kz*wQongey0UN};PYQ_c!s
zk8ldr0QBnJ_T~i%Tv};g5&0{eZW3_ynv|OPnu=cvd@+HG;1mB1d-R^|gGuG0-$+jC
zvc<0RFsdEmt?_;fp6>?1&EU7NN^cZ%<EQ6I!Le(V(6lrJ&N_+${b&ZnR9ccA)X2=&
z5nQnwU6-wk%M~ebmAjV_J4*^L$EE(zAFglgL9cq8kPHg~nDTtT@k5ZEIJy&#OXoS%
z@Zu^NUAMi!M##AkgHQa2GKXTcF^8V#vo{+aT?6BD@XmpT7)tTw6QNqYXY?F|4wY-y
zQbMiUu&rR}kzSiMcK3v;!1}2#?d+l0YBGn}pBbPSb;MM5$lv0lNQQQCJdqZ6D~?bs
z>F2Y};cJvOl6QVZ%`+vWG}T#&N!?RuvF)C<d@`)_qZw=P<IL7w%%0C62z2pwG5!#i
z_N%=Vgw!K2x@GE(kaK??qU|-0*t;zzQf|J$YUOW_RvR2jtQU`vioZfaPm*)=9+dT7
z4nLlgz9*prz=xQ0QCUxZPMw(@Ifyt@PHh+d6P7;o0Jaro8rk0>3v|!z<G%Z*sb#`(
zmcYEPF^DtyQsAIAmS@x`X^`aiS}A}wjIRDMbPoF+jUpp@QrA&5se++$-i%+67q|#V
zyTt^WV8}goy!Qkbd9wz>ZEe>V&x7Fac_eG>k&Gab(YZc4^<41jcKL`l?1Os&C?u7)
z#z6Li73S^xr|1svkL6nEU4tBjrM$1aLdWPS5g%rBCjSor$3Qs0P1ig`bMhLJJi&zl
zIt3H=Li5UkJeST0-5Q8fIu>4N!&58p__A`WT?Ed=Lh6LHSM~Q={k>U#E>M#GTwb>6
zSNZ)H6~6Sg{<%{Uh0+4JX9?U(5*StsI0^+pu7wQHN%1EyWQKVMG!<-C{yUe#D<Fez
zs<bnO4CWKzcT>ZHbBHt80B+hPbjILoS2S3XodokUuv|ww5t@XMhDcJ31H{E>9uqBe
z_}l;B0j|1sjM<|#uB_DyrHHP5XxL35tyY;kEWGrbLC2=B-5Aq}c;b1(3riV6y)aes
z@bC%1MN;{18=e1#34d$>;qOA|{MY8$E~Vz(DO5tkD@~J`v5<RyWU^RZQ=0~<0TaLs
z1Xlo-Jg8B-at}ZH&t|##hJc%n)p+~lEI03L5XS~JtJmJIey1Djz8EotD^n!P30Gb5
z7Iw|tO*ctU6F^fKyB8*JfXoW%gwn1SGyL2sU8l^aaJU6?U1;Y@*9nPL5?3SvS+DZ%
zSMH@vuk9`R8F>C{ug%|M^1GobxeV}5%Xa@T`=1_Zu=xJ)lAu11pd2yux(Im&X&YRk
z#dsi7GF$w~%P~OP7T<q9ar|}{R@9L>2tv4N7Ut^k*ufetH;p+t0n0V$Mx|Fkh^7JL
z0fvaYW2j{*fA9SdFg|0LIyTO}S{+0%XS$`Gg?rP94QT?8f5ky_51Lg`+u*a$MI<WN
z%HXOx|2luX&VMbugH6@>U%Hk5C7A%ocGUU9dDr=mb~D&sI{#DKr-nkK9!7>YPE2xO
zA>!44d5Vc^A}n=?nxGY63{fz$55j$jbjTZfY20`XKmN-HdGMhsdsdXYkJfl)yUq;~
zvp)=(uEf-$V5qHY)}4Iy-gD5NC7HAAo4uDq2fl+&o`4CErZ9FF?6{{GX{R-4RUx;6
zq9nG^m(RChIUP9rb#kSf3rR*l_~&^M@O#z2vr_u?_mTnax8r+BLQmsAAo>+w_m=^c
zvwr6ay?<d5TyzckZGS7c(mR0O^OmMSY754G-Vtmng<n7lc~%et(_BbWXywJK;%{}~
zza|CQF>%nW!F4;~g>m@$wJ~iwiOfyHQXT15A&rr=sQ$@A#KdGP%1kZdXa3IzNYf5e
z$D8b^#OSGe`9>JMt%yP;;B%i?f%;B@L_nK-{@IXfRp^=vsPh-E^B?*3H&y3<mgl;J
z_#nZhp!us#9H<3Oep*CotABfIllrYK0T|&CGAe^~)HxIzOaMl^sLn0_VS|<bnQx><
z%HR*wYXNVaoZzM-5%<4)irfB|DXdm7wFX4HKz5_Dt0+^ohDeUcBIHNWs7W}!i>qEW
z&W-mOCdax|T1tFUh~`5YOAW?5H74R18#xkZ&vG+8JL6vj!fcl8M1`5=A#S<;M@e%n
zw(Zsojay*%Yd~v|hr&`tNexI)?4C(2v@#*dm0X1!$W;m-epitE3P1lrKps^5+F$dl
zWy@d6YF|_^jv=F;o(*t04p1p9dv(wi=#L6|Yl6!zLVrVGe}8}uItpcwRV|W}o~v+w
zbBai5(Omd51PUjea7^I3u;^$^)B*(M83n?Sslzcrt9UO$F?J|+B^ywKAtYZ+ncX|d
zu0u^e^hZxK9W?0FQ&Ov|J8<VPYRa52T@85tsV@5u*0_3Kh2Q*xoZtU^&iF3nMDH`N
ziSfU7new^4{nx_yXYGvt4PEQ&O8_?Sn6a+Pf6croF#_6EvA=xm*q?Ucy%+U1!0^%{
z{K=5Ymo@AB*M2g}c?kS$u<{?hiakpvvyPj=TBUx)bM)fT!HJkVsd3<la^H`SbN5e8
zVyR%N6^Le0nFQGl1jRa80ND@bC=xE9oo|xUfZ$4|?wa70ch2yNg?Sd9S>m}T9WOm^
zc=k!h7e3RWzEtH~%>|ZiGPK@xwBMl!gl?SdL_jSb=Z+hGnA{l@i&PA?>tOc-5Htj9
zV8JM@UOPQ6WOkV=bpKAI_@i0`Q%XI5&&R)4y$`YYwYT24ObT$ta~gVWe!&a{c`fCA
z;tIe1Vl8lQC7|F?#Fa-ui=UTragaz6kW~whg?>!5<@1zY4GtxcAzq#-KA%!_AY23$
z;86qzyt4{z2Zv^acBVX)3+7<VHBXHbE(n2bLp6cWf+^-5iX|{rvKLys?yf61@z-zX
zU;e8{*&R;s?aDmXYPldx&-yzw6wZS4HA{UZ=lwtPE&lVt3QvEtL#3Ir7)7{T$~8jg
z3jD0AiXG+p7%lL#K37E9VBlS2;9uLQgbfn@Ho4G}OG^+D!sTHEG+N+iT?Rj_%h#Xv
zpNt}Fn8B^}V%p&2N4=O=wfqN?^gYd(>r8_K%fg;X!yEq2IM=_Uf>kh;5TY3fW`Mm2
z<A}I&SGOYCz_Aa^NhE9`-IHkNIMz%R>t3S@Q@8G5>W+}x(!%cbrAKpq?r+R-VyVe;
zJy~=06UsQuO%gce_G|wl8ctwcii-`kt6|rJ5bYE)fjN|=959NtMWD<Oas)MsnsQyQ
z^fvYBpt9E<yMM^V&z9AFubp2m`H_;n->cGfc!sY9nXkw4FRJTag|Gc2p*Q%K^5+b!
zzWK?(>`=A%OlC+hrX3+f`=m>ag<Q(xCW;uSSmkS7hy=c`;^;cKX;xTq%2)RZn#COa
zMw9ANMCjU3Ng&85Hzc6yFcOfx(B=EzatB9`ba?o`KEt6y6MQRN!dgWzoM~zAAgBw=
zE`Xgvt?l^6a|xAcrB#V&=VtXiU$!WSjaZFuUDZDt<9+1UKOa@UY_L#UbD^b|93$Wo
zOaMGCrml^a9h*IkkSnFej>U*8sx|I<ONCec*d&bujy$Ym8chi65bQvip{OBOfO<K<
zw<rrh3sr|`2G${22em83a+g+$?OHU6u`40LLdKqENOQVIa?C(|ZOOfn80II*yD4|x
z@T1fl`$+Q?S20u$3A3+-`tG8ozo2k30|_B77xiSe=nAND#p|jRMnPpey+_{DGSItn
zhA&z!>~W^g^cU?p5NiMDReKe?oM!W1N&YL3|DY>yYO9|z2{=UyE`o{{i*rmFG;GNl
zGy=Kc63P&(<w!ut%8Wp=;;mN|z9J9`d|zzHaNIsCd@P5@uQY_+nElU$#Lf^k3<Rd=
zL`c#3K?=7(`%;UaeAlZue5}P6J~PKPhbDQ_&KJpyjG}QDmYrd_s)S>XrCj=?NWI+r
zwmmKzgqNNZpq?WWT@T@p^W65o(DVNFwEfpU?*|wQ18xk)m^d0TQGvT(tGww)VrK8#
zg@oheaRZ5JWkAXiT`F(>ZJ>&}agZjEfWC<8bCA9WD@UQd0*OUBiY_=fnPKNrq?J<*
ztF)Hu{QAdoKK-?raHiYuN9b9`NJVp95iyvhDZ0xoZanxlrgz*-tD7JuAe=GmdWAB1
zK*$tYz|oFk1I0NZ&k7SC7k~>(u7K;0-OE;auU%ib`H3sP?gjYXN?%vV2>b4SZot~_
zB@4YdzaoPK!WCVU9@Br2Kn#+A{`Yl2t&?73!6;${HA9;O8Jhi5j3Pt}M?+Wm>GXL3
zMbkjBkx&OdD^M|xw*^I#boVTL!ouU%7Cr!bo~=={LR<-otw_eAVi8khKx#wW@tl9~
zSKrJ}pZGn#{jHqc`<fiFD=(W0%2}2+DaG$*b%)?Q&HK+++h5rDynRFS{!JK_$OidY
z>*}=n1i-^%(@-(Ojp;bM@;a}4hvD@<SYgkdO{8%HF5HEL7IE`veiC)<qN+85m={3m
zKm%nAVH`9^IS$!N$kL0@T7p&z3l1~q$WB5&pHORMytGi`Lr*mM=vV7Jz3d347g>ng
z#iATWb3_Z<J4hCk1GD$Af6tp~by8ep2%5swJ<9ksLhcM*<9K0N$p!L~t&oRh<*%ib
zt~4m<1yI+U+4n1UJ%s~MR_tYqez4p}`;LEo`JOA12Fm9V%4C8fiRhF2+#vX?D_iG1
zp8#Z#2=s1>mZAfoQn315FU}6$8zE>~@D7WrT``m#2L~nsS3asH$|nI+h1XLo4!U`V
z@I{3uZ&Jt%JD;sHmPS<K00~ntIVwd0U_^0=rK*O1^jF@(UwPjLaW6I4vEOnc>x?wI
zRW4`mJ74|#4!|XMPM>eWAM23%tvwsvDB<sd%>7^XrLaq@Ok@>)?B}oHo_8KXG$hXw
z#I-TqFM?eFyNEaoCI%BCCO{>GAO=%KOcl&nQNQJL=<-X@Z5P4+M1~%P<V3+A%iDE6
z@EODJd^zA)J0u+M!2T{rT}p0sXv%knDnw1W;Afg-K47|ekQ)yEAl)R#8A0lX$-7|o
zcEJfG;&^tcaPf0t(IM}#`xPA!@)-nHSCan*Mm#-I9(^uAe+00q#V<qJ{ekJv;O{c1
zx!%;fOal5wK=hxha9`|o52Qa@kp9n=N6Pfn1mzR;cnVT@5kQe7*tGCuHUb943^<4A
zVAB&-Cwx?e6@|A};9wJ$GT|`+bE83)AUj%N%nG$IBnVO@upkaK7DGt7kg;!Ug7^Qg
zujg<6-yf!Va-8mT&PtwPINO%U(OCHBd+xu{%KyC0{VzD-Z#{GWQ9G?%vaW#P<rMfY
zjLdI?ZK!p%{Wlu;x329!O!}j(jPHOuZxwj#i`dQyj9Ub|j0VNLmp~zmpb{Z*1W|-U
zaq+z%g0PMTD<A>dK8kdfi{L+(qemS1F{L6APrWe4zyG6<uO7AJjSlI)C61}1o4FB>
zSy92pjFT)>sYXriyy=JOs*s6=YQWg_u;*UTsED~QEW>gtNTB2nav21DCxy$Aqa@^&
z0l6QZ%W7ZBin$-Cdr3g443I)+S61ug(Jd1JwK}j;9%}3NI01rEI3u}%JkW6pZ$SH_
zfP(!`zop*i3s{D}F=WZ7MIvNG(WF1+C=#4f8d$s$!DXd7AXEOlOb*^22i!CX$8*Q?
zfVl&%{4^vdBPOaL^&ldQGQ?zvSQJN~0o~&XckemK-~QoO@&5nt=S-VPy5lFYJ)7fI
zX~1ah_)AOX$0ls_yVwYS>nXG@{VvHR;{y;n^V9Tv07S$m0NXnO0H}vxPeA9z<6Jr2
zqLNum7GW}jNfnbRuItcN0<CW0kdr&4=RQM@YElsXvK44A7e6<b!4XUTqN8FB|MSaD
ze&xT_IBFfsGc8^W5|(mD?nXNw28{nYx;Txd%KbO}1SX!PqZzJdXj~)ge>KF-qS}42
z4aZiB_?iJ$v}pUwpz`gv&>7a?53&4J20_;K=Kh7ge~=KY*75fef!^~;uYK<ZeQndT
zP$@eF;!K|a*n95Y^GjbLP(G&{umPlO?e`71hG*?%rZBvMp_dm(Fr*gf69kK-$d>fZ
z7c8^_xHb~@RD@?!SgZlD5Wfg{TQCwL5*B0%3z8ee2}VP*g^XLTImpR;fiHaJ1XGPF
zt+0EJS@hN>0H?i*eFAV1B><%lfNEDI_dWpIGac|c|Lv*sms4h|!f~-ok7s=B!!b{N
z&aiJ*n4ZenJuB?KB4W>#Fny&WQ{Xa(>t>j=18Ih7<hXi-#37nzh0|S<z;cEx2<b7Q
zsu6$m`7!?GhXclDTD(wcaUyZ62wr;5gsEV;8Hu1ZO}CYB?=?S6t#N>rEP+Z$?SQcF
zei)lBI`c=`%Hbt}0CKBXRV+m^;D#l1Wworf_&<iW^Y-L?437hP+I&}r6MKqHulD-t
z0}jE!y=)-&>pKJXlMC&?Mt=-YY6k_=A0x={jK8!L);?8U5n~Wnd`Egd06l+#@@=@J
z_`a$2Ox22nDVHK4((?CGRrq8Z0(HE-3inLIM^C^DS3%Gcc79fIU6^zMRU<?Qq2`$0
z&SGcizL@a0-}+|0@$3m6{ni4LSJYTAouNcU)^y%(jJ#I-{^GDmoRX|OMi*4)Z@kWb
z<hDOU9y5Lf;Nh`h<iHa_!oHobkOw?_#4`4hWBLhYIua%-mYusYuDdVfhVK|BzG4h}
zauI1S7DPE`p&mo%ilEibkp+i65fJAgUw^jAzxh*3ZRZN#tYpk}6w{O1jrbmWZSSD7
zgU&*i8}_}GojdPfIZbgvK(rHf-L6dS5v;;O4$selGg>(MQTp}^{kgcKF!#X}Nr02m
z&F|D3PA?HahBW<Ud%qWyd#(B&iEpR_(AW9vAb5)ox(odcNqv_<9b_P@xB$bl!CrA+
z$o<3(nWL2CJ`o1b4QMWX?t$s45l~Eh;2LPl`>HY^6UI4wDk+}+^;N^wO~+$7M7IiJ
z!F^8AE{p|+SYu)diPT}7MbwhJoa&K~fAT}$&yWAgf2MULroP+KHtBiwbCI&su`d+%
z&s#E+a%{4~3#WPvczE~(U?X$?mpcJoXrrHvwxKR|qn~p<-a2?LP5Pg^S{KGcVOI!O
z7}$GMIR3lv)W?^(_Xl#W{O%d-Qj9DfD`w;ls3~Fsr0vipV9C)+>ij={YzQkUhif@=
zts;=QRh8d4KC_l{|7-{8oMZpgEgahaW>&Hc7Yf0ou;Y4R*Hs3@(RRwSCkywz+&OZJ
z*VABVwQf)1XG-V2A@)CLzat^^40)vAKJWSTgPyY7M~6s*!#2I8><{`*eSL+%(6S#b
z<$68Bp_GY3Pd?}hjbT9oEb^A(eY&B7NI-1yS%-sv;TKSjFiM+Xj24{$z|?yx0m@@h
zeD<s)2G&IQgo6cVdCOS9@zk-fqEzkx=?L}<N}dVDbifd)As`@f1vz11!LqwD%Rhei
z_wrN!_5;-CC&+g!kZO*cYVEQGgumV$X(BdUKiA=b@3{tz4Ila4CpbCLpp$W)jegGc
zp3g_+zg>-f*7<m!0Blb=i`V&ISe?JDF~Lxvn?N^Fj-h-Fm>r9_ZBn>-85VxN%bhPC
z=kC8gLvF{B#knHDiJ+liI!d-8M1=hA=ir%Rmd^f!!!5U3!Zu>d7EuD%Bs*DQyt0Fv
zuXz_OXR#>K2$;N1*ncYo0dyUF>o_E7QT;np1il_Cz8?tHfss}0cVyr`&}%#Bs<$}Q
zu2(IW_zV&AO7dRuy}<}T$^@d|1?V6-a8m9I7#cMU*#q}v2+kE96XBFZq}NX<y8uO&
zP;`|0E`%~9V?+zKk)==$*y3@T6>WTD3VCN=31Nz4ArFMEg;?Q>4iw89CWTLC!pU4Q
z_kvr7^y|u)g*rk6L`Fyz0t{k8UVJI#{wr_fuYAV?{L=6JIlC(poE)DoNrC5w@OQ}O
z?3;0X-#@vY&dHp|{^&8r5IQJ@m|`mf|7k27S&PQ~a@6_D8Abs3ZGavgn+ZMT_9Rlo
z6#<T|D1UOq@msm$=-!w=`(5R8zkZyc7NJ2EIyu@^ByqTo5M&`sOEvz-=N#Eso9Ap^
zj(cUz?<$fS%ugUrxc$Z-BsW#8TBsZ9R|{9%t^~1S)$;T)Wqw7;t&%$}it?UyZ?DCk
z7S_Jxir8{#kJW-$XF+Vy+GgmF_Wmvx`N;6XAIGYdzkRu1uVp{97^we$Zt(TsIflu8
z!=%IB7QrDhVvh(o<W0~YK{)B#6ZiHKh|^*rQSUQlg^vLaj1wdkq$@}cnib=Fn-wNP
zHdj)sBvz?7_(}&pnZr%f&<TZOP2u>f3`_eBOL;MVS#d%;7ur_nsL*u*84=%nCgn$N
zd=n4cw3qoKIWx(`2=nd@-dxL(#=Z$*YQDoA-|2`ZI)tXh{yj0xawepz=g}zbbTe!}
zgt%N`E<Go}v+Z|2S2lT?$G>d9v~2M8&%L5}<TaaT_-rp<ley6y-=pmN-i*EIG8jSk
z<mF`|aI_`-_mzzKDfqqr=y>6iD+E(bRI5m$m{f5cgVBJ`JSn_1AFw=Ti={AY`phNc
zKdchAW=Ps?Zn^4vs8;rpWGNCE>Ia1bcPQ0r5ujf<shnIWjCiaqf|t6U36B&+09z&m
zdHMZP$RMr={QclL6!_Ij(e^J_{HiPdrf(6feaFAPeg7$J{-Sk1u<7fu|N9#P`v-i8
z5ZE&n(xK3xs||y219@Qoj~hxJbRhKaZ7Cd1K&1Tq>WbCD+ATkKZ@q9{97~&Pu`J0I
zoq*4Fl*iPucN`Xg6FcF=D`9zDSk7VD!irNms<bV1awT<!l^l*7cKn}j`T-^<mG1G7
z1~pW)e|f+Bx*PSpJp<XbJb2e8Iaf@F-2X#$G;dIy6lQltG_#~weJy4kguhX@`i*kl
zn-Q*WSp(Z&)~_}=<Lk&-+y1hl73%AFyiWkOa|*DQ3rN<`_LmVZ#<d0OwYB}%7`QjQ
z<9o#9X~TQb&zwA|3cZysCpyaKY(`5$KJ@<!(X4?qry&(wDriU16~m{WGT2Jaa$x&O
z#mJwz^s0|LJ6V})b8ydVn4P(oRyRdWK(tTTe-}(n6oKvNlJflVo>#w=t9u6(d*S|5
z1U76L_%jM^U`j!M&jn)zu_YU>wEC627bvAz;FI^Bb2y;V_W@8ha0~3M4K9)q>H7i{
zNyCuNf2fnNsuiPPO3k9U!Rt!tK~QuB%5H*{{`f%p?@utUunQJ9NOVN$9}g|}`lzKy
z0@9&QK`!MYB*EEYe?q20q{5dHVcx)49Zm*t^jesIP*@ogmW<Ly=ve6HLMIp6Ib;MJ
z?dDX{DSqZn?_j>WLO5S1kluj9jCQS#c-<7HL&EhFaPXw#^*>%`;@~*BZ6b{}d#@8F
zyIsQYbml~(z5eR+cC)Va({u@B6YmvgyzXQTZGRczem_c~wVpBUrIi%;5rD@<GA1Z)
zs!uKm^ApPBPmJ-@rwnFd5@#bw!DNnw6Y%u$3T8rRWox}ui=U3{I4dVwOivu-h6CS6
zC&^JUm>sbDHf3g}2$(C0^32g9&{|s%8r2n5d(p!01?^%3pXSB#oPK+MI0$Ci4}6jf
zl<jabkW`C+sDm}Y{orl2tj1+%2Y?KA1L#n9pf{g){XAzi_1+d;0;9#T?okwmR}J@)
zi~*rg`g4D=y$(Y8zU<Jka6=smC*=r45UWUDjsUuaOpsimJYKzI$~ncl!ca+^@OTP~
z0(qpgBbdJjveyZ&A*=|jSfQ0G?HpP;Bv#QN;HkNcdw1Q&U%2aLj-6Pd(Wz}Jy{k96
za=^}}<DR(=x4w3odw!&W(*p!y1(6Q>ZwuHH<V=`?87bb0*TW|Oo8@G^mdcZJwEaiT
z#@E?~T36fuT-o%w*#0Ao4c6H9Utjxl#O_H?Q(i8wdCWT6Rl`UBdxow!a0b_bz{Wgt
zEarF%lE|*{GnZ>>3CQLQp{a5EweKQv1(RPU4AZy3-n~V@PIBd`!==u@*ZR)~t$WuC
zUPE*Ie$XEZ{JrlL!M_Nc#be53p;v8}<AI`r?*;gw1wd}~{(!;mfPrQoWwlD?G)aIN
z;v5dXKUfVcI{3cnI}{f3K88jCQaTD6Eoc2&)YzvQ4r#AT(mOs$(Fve8F3A*^7yoZ<
zv8X4{A+^d;1sfI%mAVnMUkQ4*kcF_UWfEYOu2m8zq^{V<@YFHOkKgxp4()8PcsQZr
zDnkpP)>iqMGBNG_k1Oqx4~*x$Vqu<x2P0nle?~|=2DKXzb*RnRbx)m}udQ)io)oX`
z)-qz0H7I*Vxz^7@_>)b#SFBs-KkB_=?QQ=xKmHON2lx(v$HmhHC<D#$6~{|s8K3{U
z^2Db*gmH*%8<Yl59jVgJGFCKOdyhecU||B=6>h%z`!T^T5>3!Cp>~~e;3^?Ra87yh
zMWNLZ)EROsSgW}H47;rS^Rn&T`#LMCd&v~ZwP^8YK&FGSKn`MiOnn(t)K2>qdJ))r
zJOdr9^6gjJgBd<rRL=tfAFHbO0pX$)#A%_@H#+d`@9hKVDFmc9|1aN{>5m0^&o6@!
zMwx&Z9j^KZ@7I)xO@BmSfkYrFJq;{KE@cO$_`KFBRs{!ij4)e;AX4UISa<-^D`CaL
zvV%?zU0eRiizHw%u`Dgu_{j&qkHlJnxqv{-h6t<*)T+XPamTBo4)-2j;m(^Yy#4(l
zwdpRlavjFZf`q7xF}r8D>j!7JCvS86j=~L5JQ>deF9Y17tyW&=e<5`KY{a!oUOoos
zeeb!vi_IcF`1@UMym<m~D`+R=n}<UZ)1_02)O8KV%(TboE?N%md4N4Lcd^vXAU1>t
zlmj;i^`P(`dipq=TvRkH*ZLZ8rD;yD0_=PC2Ri8TNKYbHuHu!!`dsO;9i<cm4*y^I
z*|qnW;ibjBAkQfdfTdio=O#E90}PCTwCD5Rul9Awc&G^Es#@s&b*Mhl)2pL;Mnio!
z4jHyG)>7_RCJnvhrmQkuu85QghE+5bOrS_ye(rv9Vh~ZRRf0fBFodDwb%FBXmh!@w
zu=BM-<=c?XDLFz#m9WQA&|*UW^of+~cU{k$Zn&L~JozLu6IE8C4yOn*&w1VKs)t0G
zqtZ#(wJ7W~jy-#XSNu?wd%nMpOjNP;YmsOI%S0iS4C>h2aNv7u-0;a0q@O*B-95?I
zjzs-2g44Aw_F2!h?sfiaiygX(DC`q}ZAk%Cuk$~TzW$qLuRP**wB9ASkXUA$5ug21
z%(3Si>>A5ioOgWlxWiQ()~@ZC1zMpq=V(-CxbeU{=wyn7g4v<$zDAg;8(gM5H?KT@
zQjpMLb8to&nC}g>=FLEJ-;07;26>U5etyU@R|+d#q~}*4{ZrbNOm!{y2dF4Wx!cb5
z0)2n4a6i!Z7XKJ}BLXQ~_1fPv(BJr{LsyU+((~)ULYTphpMLAGzb8OScK`=!hIT5t
z!ZxUvXeh-l04Znru1pvVr|c0BMH3lPv6tTySFVIEj&<l9-?Z@dNci3c{O4tO=4#mc
zCYb#1kR(d(gwR1S<d5JGzIg(^@0K_5=ihpUY~B*@3Q09T=Q-WmDtJ{jWNJQPSG~)j
z>mshcvBIIdELYs_sLWPz!9J+(LxM4s131PogkWY7o`>o<_y2$PaqOqR#;s4c33tr!
z=yIcf?#fUCySbho8`b%5)Ei;#I{(cnwAMrT8}%6a1i-`Nyke>1uqSK$<_A-L`rT7}
z_S<tjx0n;nx<1iON4;j38rVGLmaD%X)hZb|Oc=(mf?ZPrsd9WpdFEK*WM^~1N>L#f
z5v<(QCj(O)%)t4MUW-?T%nr(m-cXtZnc{hj6n4RwGLa}vg^)od-8bj&-Ij)ezOZ_e
zALWKXDYp*Fux)S8EwH~Xcu2z6R|k}j8(R9)Pg=^)B?4jw%ZAjHoB;}DfTI1bhxA7-
zV1i-<B120O`YF88a<5nUJQST186q+oXJ}c+=K^?8l(&xwA6Pa#f4?Pq4x&#A9Uycv
z@LMPs87(Fmw~p`REw|pu?|uFg?4GQV#`!r54FxJ8bY58GyS}5rkNusiiT1_Fq(STo
znpLpD1QJeyj)Ck%Wv2MuNEOT;FyF>@o+H}Z<Q>0wkdOZSOH}`Ci76c4s*UjyhBWin
zxQ9;wHfbC%O69+vw*SSq*k@gB`wiQqj+l*)(8*AW`Si&=r8$-G!H+1<J-5QQp9`tf
zgp)xwu&EuP`j2dr&WhuT9e1&F{8m=d48{%d0ocD!2!Od|c=E84tMt5aa44?lV&?`u
zat#=~z8O^hT9O!h-|t03MR6jSQ2T3gC7|#9Uu^9ygQt|N`{Cmu+9%-kT?B`A2&lS#
zE56^pFEgW6W<jTn5C)qHb%^$*{f)n;atfulh*Pyx5tO?GOfSIGcNG+&ApNN#Wuhdu
zY<!qP^+2Gg0m*bQdoU%jGB9ZFaN@`ed@fgRkAypnBd#g`4q@&=*!!H4J`b5Ic^7U#
zepG}fkHYH?y^245>~kbbmT+f4uI?PyO(CUB@-BA45j?$wS!iLa6?C#rFfopameAlN
z67NLAHX;_}D$se*!w5OX&S968XwM{X`R5I8|I9Lv{!WL_e&i%iYRosr$7yB3>b~Z-
zZTnwri+$GPvZ#I?@U~qCtifO%aNj;=8|eH`VbY!-oxf~Doj>O`Ng9F8Jp7eYp&h2g
zqI}~8C5r-<nr#;HbOeP&@r98HvoL|$n0v2%H>zXgfx}#Bm_8s()P+t0-#iM-X({;|
zX4>m&nOr|`y1}2GGoIvTi0!}nrfx(^;$1l=aHja$=)kN-WN7K-&{)KkRrk=wzMwa)
zR2j1Tr7!W5A;TUi$(8CDkp4<_fef#*9okMPLx<9!7%8~$fj|%lQ3O#SM4=FbLKFyr
zDU%z@QG^?GEW{MAZDerC7*i%Z<<%UNt$zW+-tL4_LU-H<*9CB;!v4VFRQOs9J5s?N
zfzC>yu5hkk>bufkVzHYu6*uVWJWn2ej>dSEO!Ajqr>CCxR)u<9c=CxBU-?W%W1+?V
zN=lep-25_Pml0av+KA~OW(o8p=yOQ^9JHQ?&Jx;QMwgZ#hvtEC4!)tujrWgp@{4Vb
z9!XiO)CRWD8`Alog`Iy<==|lp>-<l5{Cewvon(F;u!qNmM%O7XMjfJAVNpA%Wexmo
zA<idQX<4q=bt_|)T`ab8qP+&4D(bGe6<BBqOYNcpwOZ=^OAU>4(qChXDOvnd1T<H^
zPO%K92<8NWi3(4AmniuPXuDJmC{R&kQjwj7M9!2|xO0P6dqJj?VocDV+xIs3>8ce1
z{c61TUQUtg^%n<~`~Y!-QNqC0ulS6ou5>P3?6jY}ga)FxAn)Z}$XkUn!U%*_2x}16
zK;j~U$br1)Utr7HIxD&zh?K{2h<%t98G<p2O?$z-{Jf#?c?<W4Mbh<_8hk5*xoctS
zNmyABvaa@~G5v0dMR;)uZr^)1pZez43P-{^jIuBCq^U8sufiAF%RK!D!mGaA;GI8E
z;p+Pn?29Lm<t1dtGHU0Mu@#7xkZc7OpNILA=u!r4hjzeZ5!foy5hf?c*ts_%e>}rX
z6cSSp51#;RN!$NI6aLoG_TLl|kZgePw+U*Cb+DOF|F7cj%$;uS$+<@*t`p&Cv2Xeg
zx^0N6itaF216dBOL^!!v1bs_ET2tw5y(<Dm$+O2vp?6m^(A+ChC;`IKeXpz7c|lhc
zw+yb^BgPf&ZZ(3;7o;`z7K>sqrS@M}c_fx(v>{hN9S&RCZ|zHeKR`(<>&f<di-C}r
zy8#aE7Em2<1XdSX+TUsz7^M;w-)p@nBqzXjN_k_MXao^NV^Eod$^?W>2x>x5DSMHo
zG)636+gV+8srHl-q9BnD91cZ@y2@jr@Ra~wX$%C0*VG)pF%7}2&^V@?n5XEBXsI+P
zOY4Ph&Q;C5%#2Mj*E&kjFxYYoaJKVa1Xi4Z>I958`TSDK%D>Ec%eMj^d}k9ocMP(u
zSZ<&h63xTP5}a6oxfFLiA!?^+RwHRm@$B<ezVYphuRPb{t0%_EXKUDUy|P{~!r%F7
z`)`!6w^eQb)4YZeV8SN=9v*CqRYJ0^wI+cH$vO#*N`smD0Xl6*G$FJ?u+Fg1wzS(y
zlJ?m6MG{a1y@H^pL#+FPlwZ!s4Vd!ka$O<s6r1Z@yV!y!Du_{xDL3}@?1OvD@{TF-
z4v@N(<BmagBf=_n<6w!8^!5Bw68{Dj{$NG0xB-!_x2;fyEP%xhsRV|fzrW&7h6sSg
z%sw<li@tSKNsg3eKB+*@$j1rRLAs!{4;RNKh#?qLD$`J#7UD^$G?h3kx+zu!JDdz;
zLj*;uNW{<*BS8cB{Qz!`U>w*NLJ}%3)Zm5*r8+LO79gY~M7knja@LaP6?QjwaQMi#
zY0|`!j(Fx3zlZrWU_Pi}c4sX9{vu1M<GbHIja^#6#3@GFxFCi31db{8s1mgTj(&TL
zkA1btmtSb|{F1N`1azVZH(g;~D+8{Dhlfu9MwJ0>AD#b3EC0($=f8IC?*@;Vi%8Qp
zGn4zN2V<nw3~dH<UD06AQz1>YY&Dl8zLM>)<=y}{eC~;2%Ie=Hf?Lp{4c;vRmQe@;
z2qGZ}!I;6k(mLoQrD+dfyMiP|OP#D}Rre}<)uPgtp(McdOnQ3Kv7r^e+9UDxIST`#
zo(!!G?h^%voB~%JIqmIdD4)mlI0agG+Gmh2mK=xPZUTzWYf7$yy5jx0Ovw{Pm!W+W
z7Ap|fi>^RC<)}^z!K4s36=?`s6<m3|3ui^???LE|E+Ui{LiqPq_)C%Fa0YW3j735w
z%DyX=$LFQg+7GRVE|nKM$EL_^iYXH@bEZ8K^71`;y>C6)iqX9dKJ>>6Ty=HCEw7s(
zpI?TmLp4K==GeoQurtO-Ki=TKeLClPb)*xH?reob>MSQg!4;7+T?H3A;cs)V_07}y
zpW}WlmmV4Lk{$tgo&R>y`LA8Mu%6^=Eu#{ng0+^(u^rUwV2!XOLbqGYs`CVFE;w~1
zajYlpE0fGX${=3G+oY)U^Ohs;6oJqfh(aZb3h7uBLlBnM`=z}tLGe8V+MVJQvYDc}
z5C!0D;hDc`3crf+uYJ>=fy|)iq*uIugBe)%4te+wOn=JfwLM!}S+(hJ5RC@vh5mS6
zAP6AumWzwZ{R5@~@i;_A3a7>nxU9!TaOAd}4mian(CvcG0WSz)C<JvSZbCe%L^BXi
zL(l|ifK(NY1*sIl-(U!E)KR`tg@0_pwt==%mBJD5wmp_-z8;b!g>h0b#S!8_h$Cp$
zn*>DQ3=+ti&s!<;uBTdcs^eY$<iB^g?*0Y=9cViwf$XJ}xKrhSd}N9bd?sUYM~##5
z1g#{b-*gZiQoP9eboO57&!*}8R|S6Y9RLrHOC?zp6H|#QOpb$C!%8OP-NFP&18~+1
zbpQ$-x+w#{h`}a~tfk~_aGk;_P!Ou2P^&@|DYXhjWrdt}4V?tqE0#2IMZ3RZs82&Y
zCS*C}RtA3gJ)&RPrq>}^p7u2NFEjV)nevoQfW6T`**=#cl3%~QZ_AEC`Ivs!zzz8+
z>M87t-aKA}&_LcJ5K0mJD?18l-{R9s>sS|;6w(J17{VwZ3<IKA2xEhZK#j$gdkb6w
zX-7y-6g&e{fv66ZNu@d|RCWkK6M}It4bX~1!vRm@B@qHurXmPepxuTYV~&{$EMmy=
zBGHKqG-IJwfl6#kM#uUpyx#h11zxO8P=9`fC%>3*^F1MM+2ZChqGihmKiS{|pBCo!
zjqyTKFKmxtwds+Ehfe_3Hv+iab^aSA{9S0B|CYA>SN)7)f(9$e5)(DZ+d?gepbIv4
zNKG)2D}x~e?Rp~Q3FI9|mJ|WY7>JEhsR;E*sD%&*rEIVxw3cCM(X!lLp_6t|o1?g*
z4Q;9<?Itr<g+!6ib^Ri|SfJDQ8WL1ppLZ}Y_K{TtJ{i*Q_jU*L<$erT_ou7`E|UlC
z69=_40U8<!NNL%NlqNmJD8ZPb3P&6gN<s7+gO~o?G54)yoLxa(Rvb$)h#HIu2~12B
zRj5=eR4O51H6W}OT@fc1?QK-<79E1_g0LJZK}9fis5F$QE<_Vb*eE*ZS)$k$L<-4_
zAv+0;+_C%M5_@V>1g?UsT0&EBH7W)UjtifE;Uu|cLmN`geLkIft@Toeg*;>_8t1Vu
zD>uC&#I~1+7c-vxW}RRER7iU^<b|YOBzZ$5KlM8Q?M3+W3BdNp1dwdPyr1>%m%iwH
z{Vzb<f5Y?s%^a1KW-cbD7Bx70@&u`EQ4gAoJ4;=ar4~pFB<%Ig4K`O?RuIy9L4Q1k
zS{33Ds(~R6ia?uop}hnvOTyA}LMv&LxE4;j2(H*aF9I5&s&p0%-MMipy9G&yTJLV)
zv9G-r<ZzLy(l@u^lv#go@lXHfbTBUHE!trynP6y3-|*`Wwg(Q6A<E}4(lb2-=L&*!
z2-PV=asuX`Z)0^CG%r*G>Od{3g`a<(DM=!%EQbUpA`B{2Ds?Kg3UM_gs073jgrS1~
ztQPBotrPN&lAj!KFC;AXGxSP<C<HmKup+$T#*`h`wYXzfz+Bp3u^V8;ppjuZN;tHq
z%k!Upo<PD<#UTUU;~E2pAXp3CdYz}fX|Y)a$-B5^;Ws~3W1#|zQ3FZJoe-;s{hJ&3
z&sW?3g8TZfz3nd}CK#9UR>1Jm<br#6oa=0X+-1}o!m-24JazbSUUBVxES+>595Xz-
zq_n$AmXtf_#Ss}H2#Ps=C4^ci#Gz6Nixzv9LVF$-mn;iQIh{_I#C6DNqs1z}BB1t1
ziUuS=ObDuUS1hp$3THeD3E=RmSt$eXYDd4p-?B>MzB-BMyZkvpt*-t#hFk-O%z;jA
z`4=+6fecZGyp;k9TVBLrLI^8x;-n)>x&+4HBt%`lnygzo7Znc29dg$qcS4#4tSrY!
zP$3L!#FZ+QN=&sD5mg5x17}>}#wf+;#bts7g~GrDg;`Lx5>T5<`OfcHq5Z9Zv6|(I
z1B(QchGi3wc7?Io4qfT;%_ED9*C)uuZVJz9C5rgwO9>~BR@fak`1-emFTP+f2WqTz
z#kc!Cd;-8$>;Sx^2!HEo`){=J-%dLJEgF@mU_=NTUB)VPKKO+{;I12PVs>H-w~|qr
zF|2eUvE^nqh0q9L2!SaAo~n{(&{}dVEIJk!GgjJNI$06;ElFv@V-N{3^gM#g8-HL5
z_MeGB18iE5_QaGv`NNKA{q253NldS5cSHT-;rYG}ZQ~o({-5S&>F)?&b*Erp-cRZB
zJ1|nz(vLs{F$NP1=Ko?Goh8L77*n+TRm{*T1XGSyN*#q1TKPhos5ohZYm+C7BuT)E
zi3!6haa1FYD@1WbT#bk;0YL<D)j?d`(W3Hw<f+m*Y5CFH=h%B<iBEiNH#Gu+R*T76
zmzgUQY@<bR%PfERpT5P>V>z>jYAm{yHMRZEbP}e4@Z3^|Cm#!$xw*n`f85fIBUUsX
zC=4$6VjtG!@V61d-{y2$FGSm4JPFXl<Dwz>m3<-Y&slZV{9l2#9A|3Rl|1|0VgB6*
z{{uhqwx482BVswpsaK_3KWqBey;W!>j`?L+Sa2*X=Cs-g-Ly-ZC*+y}N@!y0VUx&I
zh@y}n3J@1yb3rA<NkT_k<PsKBbYl<|oGUBXl5i+P2|!V$yMYwXY2g&uYw7n|_iiYV
zmyCag7XFA1kqlQ^@(v!SLp}higX7h+;)OwXqBjB%;}8QuR3-}<2mz{LxhzO97>oqv
zXDIECdj?9BtB0M#xh_sSIL!fvI)}|Vbh9p<mLL)l1R<3uCI~9T)tI<y2x7qnLRFR7
z!12Z#67IYz;CKFDKg;bp&Dhad3D~m|GqbY5_zeMzFLn9lfAa{HN`)-SUS=q@zWx%d
zs9~Z}=eK_^;47bXeCByeXJ3<6;;ViSp8#x88^G)Qx2Mj3D+zytU_aoj>!7_VgU}yG
z5rGP!Mg%S*%q!HYhTY8>zWLna{K^M@g}bl)0VW#<3SwK7V**Q>DN8NK+(ORWlB1JY
zGMj_uMcZ4$BH)J=f}q%JWAjB)`x4#mJXvRvG;8DNQmf9gf9kb3H_fp$!S;-UjFc?-
zV!dw>Y_;!6-Y4jlL408AtE&_P11CRSE#vEt0fx+h3PEJKT3Cl#{kn=&t2)$mFtTcI
zpD|Jde*p;$CUlsf^zsjbVzH6c;^zoJ4I;f{pd3J`5Qq?<#9=^S#tN<g7OSrKV^f^V
zP-k&!u{I;=rUaz8q(Z(D5=RkX%`n~!*gbBTODp{PpVbKon5jF+l_-n|1%l%-lXvaq
zy}$4Qo_=nggL`(+4a((9taT;q%g^FGS31)To}5ql%8M46t+QPAb@Y;6>~pc}{Ll1w
z9qP&X1Yny5|I-@*UHG>DMgzas`E$xH_Wu8i4h8$w^;b2DiHHfa0FwoTNkEW>Xy$Oa
zBa(<pSi=Mrma-+%w1dU+^!(>|>9fzUZ~6^Ph4)eoW{4^gYLqN@q^V#tLkLvDurR>E
zlIJZldz5x^l&*b&u02L#k7G4Kw1SuzCB^9qCtE9=SbBuJulhfjjrXvSW>`v30Y|^`
zH&To#q_i58va6w|O8A_vs^$lhz``V_*DcVV1hDKDX#eM2(W>v801f1X%0TM3${<L!
zzqPR3hFm%z+9H7|IgVliOi+vwj0&PfN2T}q0#gM35TzO#rkjS)bP<6ltYX3d5lC|(
z$r|Lj!#am^jyx|6l!`u$7S9tFONcrM&#efDTZXYJj8`1(q#$c%&JvG14!mZPfBm5k
z@*BVL1$H#2$i}sA0X%x(kh63FgtiT6kJpH&gv_3c>3@;v{5Kr<*HdV1jPSR<w*ToK
z??(V09_O`%KOEvu4fG;HJ*pCGg)of>(tt3D3DcM`S3;wV)ho>GsIzZhliA%7v$G+4
zX2%)d*(9o0u-%;b!;5_FTPOI$<1g^Y7r((1bHBq>^eHClS5nP)QjNxe5bJVM*CDrU
zvTTXmcF1gobqP*8XyHmj5E{Z-L?x^ukszT%Bt+d5$--{B%SU<Y#oy+RYyT#R8j{j|
zPKNw;Oi2U`q+r@x=laGyx@uleU+1sAS$`S0v4ajkVSnrTT7P=7z@B2DSKo+x`63}5
zO0Qi>04$RR)87hMbT5LiFb0ya92o?r-?b1m#m|c=Dt;rxqC^HJ#*`y-zt7<#j}j75
zt&GuZ?qp_iKU0&tnHt|g7>wa;NR~mjv<9}CW6Mo{z4OKxr4|U)NT`MoD1}i_V7O*q
z%%Qt7e)ji&mw)@8KF3UBC*jV3RNR&{B^Ai*#>NUB9zFqJ6di!q`EO61|JfdIPHExm
zX+wS-M#K^m+nC5!h`JFbiHY-wiV0}eW2UBrU3<pZb7hk&4%XPeyTY!i2Gf&usMnD+
zMCKi>MMFCc>COe1)UhYn%hfju-+xEIH{N`L4}bY_KKSWJ`R3urXvB4L&9PeSpI1qW
z_iGG6P{CAcgi%BgRWPANgA@t6I66ZK%mCHdCggiqTzZaH`fX~JtH`@KY6dJjEp_%r
zdL%lFQLywX`GF*`SLx%ltnLRR1GM+Eh2x&-xAJ>_0i}hont^wK=&DtyGPDV}PXv^~
zTH<0cQ0W0+z!)u*41r<-Q|vn^I}}Ex4E{w2AT$serCEzuY=4a>zx8`mqb4qD&}uJn
zZ1Gz>^TMYI!hmX}!gynn>E;YO#t$(&eu#;&8RDSccPeyR_y8ms1mdWLhRHfiRfYXK
z0(MSVzP<bv-v0~#lh1x}j_Jvr1Tz_FWQPLudaiZO>JZ2}+x{D^{JqY9BZR-x{sw&l
zz_xY*P_Ogf@VtNPb^dbNU_ZFX8gZQp6^xBBX$86gbRfzM%}U73M3dPoYV6-%;n0;8
zuDp7J-3P~+nye57HH?k19mB#=;l#56Pkc!@HXk#$9I&!t=%$851&hInqRtUvnW{SW
z&m7`AZoZDU-uim}>!&}?2R{Bus#K^>HORshR2zj>+~lZ9aJta{RBqL@P*&af6)lGS
zvO+W&ksVQ%R=&Z^j;m;8r8j+VXOEF`@t8qynEyX}e;RCAcHQ@ZzqR)n?(pW9b7svm
zPz4YL6b3>BNRTvVQKDp0REv@&QgqmEck~BGxZAS3J36|<?N&!9q9eK$AzPu4tyU;x
zQ-di|q)6J}h=G_<g_`H8oL=Ue-yP05d$0bm_de&`tO8IIz(Uo#5jQgP<-60l_nx)Z
zfBlD~ABekqP1AW_>X(xJVso$%ltV23ZD3H`@2Ay4yWi|J5MH~lfc7)q13DqC98fTk
z0}%H9@nu>9xly{Ng0`s%`~J*8mMP0iaP|6g<aWgP<SN;c2X9eVqK!u@Pc^T&y8ApY
zZ#|00XDH2>@nD&amD8MBKf~$ubDY{Z!P?3Sr7aj4Ls5V+b7u2veEO+p`P}1Q<{Qsl
z#L6;f&aTj`%&Ek^s_m}4fnxbh3(v96|4r)rzuWu%Z`XVsHvn&EA>i@lZ3X4WA|(AX
z-~D}9loUF|x&kvV&}ojTa<qoBDA`yoxaHOnx7{@6wmX)%>#kKUTv%m!bBL&gL(62Z
zVCP!F<Btkk*9=#7EeHF;{=_hGLZcq1f{O1RIk?w^7Q_g1pK&-7UVKUU;>C({qcJ~x
z$IozPe3rleJO6^iodb$f4NZ2$tH%%C=o#KCpy_84X?KGPtm9~Ui8FwekVUXyvJV)E
z<~pseU)$r^{~0~WpSWmr)WZ6T@d5sCC;OxV@X|URc1A+d`r5Y5fuznPO!s|Jl!=PQ
zZt4e<nT{AJ9dR(IDx!BlFDGGr9qdbUjFi}c$7>aSDGOIK5C*_V*U)Aoh6y#yW=FiR
z^)%03dJ54Dn-vW5oIwHB)_850)inpRDf7xv<^^kO>y#@6(`<5l+Bm)(uK?c3#phV(
z|J~L3FHZK-^GFXxrpR(~Ey(-;+mz^}z|S(MELmQ#zFKhR<{@|7KIT1luXE?^o18zl
z!urwx@g>YNc6SXsPg$P)oaO5Eoa+ac{kbryVBRQ|SA5#%df#)q>9q5jB6g#mpM_<T
zFmr|{_mt;$j(Gp+5AnBuc#VJXyZ@ACYlJx=`0Oys3-whB|Eqz?3ywNrLN-d(>|;#u
z7*GQ~7E*lAbFXK(v*6?ZioZ+8<ZoR7b-@u(RD1VjTCPAB`<wg#7Aa5Kq6E?%&Nd7n
z<^x3pz}PMdIanRj@)m5!P$Cm0v!VEpN5aw)Wa2QAVZ?^?!!FjSJ+@wI$U*Xu4Nypl
z@j2>3f?iWO)WM{2RP!3dk>?r9gJm|$5-BZ>shLx~X`TP;pZt$?{%?Ps|7&><%y9#7
zd^x@>Xzdp^_FX|O?SRY=kUGcAMl{omda4*xG9C{(dt%J3H!X9|ZEL*my{EYCrgb*f
zmk?Xx4-I=e!nG$ok6(u?ds%?+Cx%Ha%%f+%N-&g35xv+THw)`<gIC4Jv^*t9>9p$w
z+6F*-`Y%;QjA1T0pSwKep3VFC_y624@K65WzsK&bVm1{oM{nZDDaPc~Zi-}JGodjz
z!0pnL^!24k+LQnJ7~tchyw7)@0FqpclV?DiSl5#cru&k9qF_AzdBFJY-^rn{*BY3}
z0Z1%BYYk#OCMOyL#pJ-`X%MpnjDaFkid+~Dl;r{B)*-mqROt;gI$rhPsvalvVEdN^
z6C$EBVQI3~Y8k+_p$D(_8D4BRSXkv8Q}>Q9#|XeXVDkU&>-^s=;qMLY{pGD70e!P1
za?=%g>6d*W&vFVGU|mTwEvb)$W|pDOuw0HgePV-~?povSTUNN|mNVRTVT02fOO#oO
zZ!(T%!q!F4W8V<2?!xXq991x>U|I>a4+UJL3HosX5sNB#Of2xhU?vrF9}AxLlJtCP
zT700ed%7LH^nSl3*ku`yU)$xv@_qc+gMWeF{=#oC+CNRb_7Yy}*BM0}kC=Fj&2X*;
zsmN?b9cp=eU7h-&EzER=Mt#qJ7HoU9=i*1F3`h*QR*u&T{YlV#G#Qef+n{t@!_Y*S
zZcCAfh7y|qV?eBu<&fn;4Iu`M?KLD4R|ZzG7K$7O1(Z4D*0<}DZ$8C-bB<3UC$|6g
zEHo1B|4Uko=&P!`Z^VNZn*-^!x$+(6_#6}d-m=O6E!q1Y%K(pI|96?rzds)>?Cu2y
z`H0L9F!c~W%V}nYY9<V1z{#Z{H{HC-Z8x3d?pscA>xGk?J+;YjID#hQa3btZJTE`)
z+1XbPrZBAxv&Jy5p{f<{h!cAxo0(LN49*8!S*1r`)3|;RT{Hv|Y41m4eqH)`+I#zW
z`$Vqyt^IEF`Y}1r?HzD_<6}JZo<qL;=w~UjGt9;>(qi1-Hjt_p_-Z`H8l0~|YK+Ze
zF-=7(AQ{Glq`kf<vb6~Ak@|4-CjX@Or-S%41R9C@wsA0#IM_7~@e?E3xd3+fKVqbF
z5;PrG!ALOqu{OvbP3AF$MiO9Gbd5x!papBAW<Lu^z><Z+xP|8D^^(`RRmnH`JexKK
zs(rU|n`6Df`kwB=NaQmFe}tK<@&1*L6R-ANm9+M_p>cTQu>bcW;qQA{=l`vZfOykB
zk;e_d@#Sp|>B|kA{O&_P$j0P;3912ZKA@Qxs>U!bhMZm<bK6bp+<nUl?z{6m=g*&H
zX}p4}Wmdz%RCwZw<6xp3O&cb2VKx)0N~mk0@rwGc@c7^Wr9fK0J`;+vfYXrko>JPR
zH`OVN4D~+YFctY5hdNEKvuz3@yS~>5X#W_fAU5OD{vr2W_+hT@UgG78&yr{B)aCB$
zI4Pt;;z9#ZS9mi+%o0Xj#O!<fbdwzPI<g=1-TczNze6uNe}Kf~@3H!O$Uu8vZTjCU
z=idd-`eX<sJt<*g^k<R%Z(~1XW6XgK4UAfCErUY@f?zWx%alQ;tPNq1EruWQoe~R+
zFz^HHBxiomFrCkFt|F5RBj9|6H5OwsOl~N1!4{TmkYP)MWJ)bcg=bpTulnwCV}$Yz
zyqM$5@#VMyc*`e$c~vpbpQ+COEg=EDKG^^D-Ch<-S1S0{2)PWgehBjcZeppY8I2#X
zG+5%osda9@{{;8kc9uJCI>U*Lb;jcXSmCe|E+4_sMaSW!;b<yU71R~fH8gXH#w|UY
zS!rtuP8W-?rh=`~Lj*dATzf{4y=)s&(0b>UquuUbyGEeBAMF?Xv`*;G;|7Bl&-J4@
z58d@MT-*8oGT&`5CkA*s`xdbOE8h$CAx~I+gV#E+=vCXDy7X27#t>Qf?ZJqRjt|ez
zOU%$o*#L<|7)!Y7E7t|uz3;LRkszH9fb_ub7z!jkQy`H}?q}jvj7LS$=mu!4Vlop~
z86Il{6XE|XQ}Rq14`FT8FtCcjbY#spGsS+B??=%L&|Sy={yuA?WgfV2hC9xk<ie>{
z)<y+J95oe_*@WwRhg{w}VC(uJTe}ku_iLKDL44pT40Fq<%#lK%1WKVcP>aUKARRDS
zkcGC^%%ZR3`~7x;{oew@-rG{=|5{cZ$18y2%R8)L>fq1-=gVw>P711-C6fWmqa{wB
zSm(A|PICLr7r6b_vz$1yPLW%j8jfc0($q6MROXeZnnE>$DoyxvV)lF@sRssrs8by&
zFLeTGBG>3opNLr6%G2VcD*?JsM6-6#H!Y|g&H>S4mt?e)NPo!(M|(|1+c5;>p}l{l
z)$vbVjWKI{;GRFvAAaSZFg#enuhrd)e68<*QM`H@t+6&h@?v5dU^3fDp@9m%-zB9Y
z-h(Pkv;md`XDeZ^AB}!gbs;ji^<<C~11w;A#lDpQcFGPB4WT}9moGMPF${_i3CGC>
zSkmtYL?EpWj0sY~+$v@6St;T4X2qG!V0I*L8N%Al-MJQ+y@G?S16IbCpZVy=_@M_L
z;{3)YMr~+X)R7raQNXZl7!Evn(IDBJ%1t?__Src);_CJR7q1=g;?)^fF3z~Nb;SOq
z3H7|fsv|25qd|s@Gjs^PFjNL=l&W^Ix6xN{3KlJAj?seS%W(tnCY=C|jefozAexzy
zqFzUjMpXNPYb?WI$(b{o+<yB7?!4m`Zn<!tjrCQsTxcp`Uc=VDW8OHbxnn*R<`byr
z(A40fM>~W#SoH}46}<Pc21{FXY18I9BOL8jbB&X3zc_o*)(tOB{32;^yzxZZk^I8_
zm=@O8g_EteWII|!ptmY$$KQ;@`2icN_jC7cpWx}IKSw!Oryg938a{nZpCOfif_Q3j
z8{lta1LSXfcMB7d0BOmI0nS$+HUFubqH72w@g}@PGMsPGfh6|}k;vL12k2tPKo132
zkRtXaf9?PIVESWynEtca9E5;@R{Nh60J(uY6Gj7A&EfnlGnO|T*6Ftx++OeZCU8XZ
zx}?6MP)+&Rd+z7QKKMgyuAF9nQt{PiD;hr!<j9mwV1hMqZY{$iV^|DX9;~rEKE;Jq
z$9rySC|4SERG~U&GC$(V;hYyQ9rDtX+r0G59+xl9xPEQM;iZOoT`{s?201z^XiB9n
zpf*ZvVOF_UWC$!|Fn?2vvty&5?=0c(RX70eFjK(nomu?fPCEa$C*d!b5<6R=Iml^d
zV>VV#a_2+mx%a)daMLa4SzkUuky)Gybq(8x4f9HADwxk;K8I=^;C$~E-R{yJ-Y3Z2
zN0OcIN$?`XF4~9RQ%H@pQoQtI-^-y-&4Eubzc)(p(QaC%54TD`1aCnCn3@%Oq{sGT
z?6vj4ZST<thtmn~x#dUM*?WQQovRe5R%o(=*KjiF40Sw0tu;d%cl<V1RTI|%EW+;e
zQvbq!-bbx}x7(MVR1hz%SAWNm&^F8`<N@3$e3O<|FFi9LOb<0k<V2I;1VN;W1Gdo!
z$e8GrAd%1*Nr0JE@(e}=tPLIOw^Wb^HQ%eByI;@uCYm3K#U2bexVF#9rDcBRQ-6WG
z&pp7-{)|g6?&Fj$jK~Hr29sioCH&uEZOEnuvkz7>3JYcK8J5a;P_we+SXo=+>`Bj^
z@Ac?MYjmkX)v>#G!1kp>o`3d`mtL51^@RyLFIDVq%{jO};b>k_8;_1MST1P_m|Cc;
zGIt*5Z}i7pe1C4tsQYf|{NI{E>$^?(dn2&FyyLy*j#mKhHsD``WpkE#dq{H#=T6<k
zhkoRPJowRjIel&n5~lg-p=W>6P*qUXhS?-Q`gNta27JS!U%Uv;ck;PbN_Rsu(5pY8
zArM&%{LzlRpO*S*1<)q}ri;IUKhSrq>st-KQq|o{j!da{Jsv=B0e(X>BB*+d1Xsan
z1rOZ)GyMJ+{#)GjG3Hc-m-%ZV0*V1ugU5%7Srds)+u|Cmc4=Ywb|R0@+w{nMtu)WG
zpz&{a_PymwI(RJ$#B_>))=D@<5XZxnf^3bZ^goSu#W9&t;@&?Ggg}!gMtx{VEP@pc
zMK=o)z)=pH%X6|bHR?Qt&E68KU#<iE_JG6PL+-!jK7Q;&e}ODt=IP4^)EeZYrnN{2
zO{|MXMH2fk54flhu|@*bLWR0E%pB~`bFLi-*(E3*^OU(V7&wMYQ%1{kmevN`esYbw
zepFypQCp#P#m=sB_2Qh1&+PKzSFiKpllxq~IOpJU&HnU=xp>UD#IBUMk)g_AW|X-q
z(^>N>`4ajH4})Xpg5%4(UIuuq^MB>-m;8B}oh1e`=7T@*!#wn{@8jlsg`-2*y6zB#
z`2^<EQ1It7s4I_eSV*BuIqp7I;C|t!&!TV5W%>;KH05hMy=yOeHvE?)L%a5I6A3U3
z<8cx;{ZpW{yZeQLuf1a+y~Tj`6c5@t?`WU)-YNqU5pj`wFl%Ov%X8dw+Yj>fZ~QLf
zy>(c-{Msaz#zc-oh0P;cp2f-Brg+_$ZYSEaRlf0E?h3i|kph*Tav*sC&>}CbD_}b4
z$uuAl0dEKZTKxJ%H^b=kCs77yGJ|B0<)N9;$QeinQB3jy5XwRsWx|P5Ggz8JBUoec
z3$XWV|K6mHf8octYcM<7=Z7EsBp<r_Q*0m1ne6YOV!Fl(!MHH(ySUQGj9@jOK~4=8
z!6RhRP)dDYJfWz1YM?SOtp#av>|ueu0=X!8<|$20SvHJU=Zw$HSvlv}ytU!J_phM8
zcr)HR4tFc|E={@k+z~H5xyz*|_PO@#jDu@6`-c^kDs}E@hL&b%m=}g4BUGZyYmaw&
z!wR8wcxq9$9tL!*^M5_(`&az+SO)mECbhl2bpCI)@V|Aif7YyUaJ}Nh(vVMl>{od2
zht~Pvk9+oZ9hWW&%~YrkmAVQOzH7o{q&{ACkwxy?=`&8zz5^)b1~Zv{A*VNGFBIrj
z>erpfRDH+lXJJ4MPs4X_X{cSgC}(U5f{OO0XH6$?SzHIGE_(4VyyUdD@X1@igBT8{
zN8Eh!<6JrUG&|cDDTW)ka_3b)j|=ZuEbfh;1O&i^VkvzkfPoO3;}#w3ba7wb+Woec
zz&%6&?KK8q^oC-f3x2<g62bo0rl%&5-cgho0ZbMe7sbbLfQVwmB%_oWU=3tO8RyDo
z;W%~60hFG?2$=}A$m{;z1e*gTua=l@)p&QvkALK^aOe5&<Hc)7)IPjdBGEaKPI4$F
zS`@2^ib%o6Oavbrfbf0?d8wE1IkhSn7km(`3CKp^Mg+A(rHZKps|7M0VE2~EUktLx
zqHvVMIir<|(TSSzshZW3H8<a-=wAdaYM3?bUY&9Au_G=$zQg55_qhD@F1wee99)@m
z*m&yPpu-$DGE7R#L1vi()45-0xTVE!ZZtxYKZAY$>xcc{Y~g=H=lfS3w2oB($CvNL
z_DFN8?VLg~-goz3N3wP9eyC==V)@!<gy}vsQ>C7RI`Hw@7InR`0iXw=CKH+H&D%2g
zq3^)gxd?VsrS=ek&VjGT{HMP*=%yM?ne<{7NPJy??qfP%mqM4OT^}c7A9v)w<r(w~
zqP`MpjRzsDEqbnbqRi%w`|tW$KKs>wi0*mhWQl&$Re-ckJO+=`X@Je02DZG_ZuKF-
zG$`!YwYB<}G*PF_fW+`udc{AI^xE(r?TmbS<jam2A>TA+TlAYd@)=_=8Hn|P1SpY(
zVWK-=G}Z~q0mT|9GgvL)?An~Q3l;bwnK7XOctfi#$g2@YTNSyj`MK}^WmblF^TM^g
zR;ADq8`G&=z=}bf(xxGI`peKD#AE8x=Q^$i8U^D!HH7sN)(43kDH0=(l}x}IkCQ<B
zo2ej`L1sg;y(P*^LYaAT+mPjR2IHF1i8;fw4IAgiY<zr!`+xc-yjrw|gKJZEp4{Qm
zBfDJs+74Hr-e>pXgx#$f`}IEa%rGx3^HISx&p0%Oi3m;YUr9EMh}N;;@$m}aot+B!
zuGRU+lk{u}S7p5C-apS|vc|YMV!SlwrN=#P9$0qX8PqGTjwifCiu3d;^$o6onjl8s
zomhNF-fOS1XopFv8?seidDp37(7s)(_SymMtsU^Md_NM3o$Pd_i>+0aj$m!V>uoKA
z7wm7P+xsW-pzrY$v{MZThFU9zc8&Y)`f<Mc$iJjKSi`Mc`PNfZL?)cCAhPDg#u(jb
zMJQH6o{^+Ej+WOT{o<aAbT0>>P4#QJ0ooEN7ZHTM`r(xnh>kN5WrEVB7A7*FHDKd&
zHxUUiiOXO+a$+z6Qi@U;S>fD;Dfvnbx{MgpH7u{`d($Z{viX>!tqG%i%+Gz|SIEs-
zuI%qd>1TQ|DTy!^_vDli9S$2HixJU%AB2Por1#zT5D-Hs_KsxO6po3NUUNVoHwL%F
z@E#ZwoGl%W8knd+oxwcE92l}op8R1LlnsMn#c*Xpxmhtd=~y{4V(q~tZvEu#@$2B2
zT&>xDcAv|SZ?pCARW3iV!}iNZ>|dX<KbvuAg!yp5Y*aAGg#!^LjfT%wpB<wyvie=C
z^Z!=oTRm<7jxXP9&5$Bw=wZ(K_$HQz?`QX5i{<$`yIXK{p!f!SB7nIrK(7nOkzRq;
z9*p0U)}_6<5B8~|vamN!CmOGd6NvUxdHSt|rWwB5!KV|jwxh1;5&lBKS5KJc`porS
zq@Bbt8;wkFy@4pFy_2E#nt%nLfW#&6U2`HfV_Hu+x%z(2oPC@t7ayj~H)w`CH|z{!
z{BE=-c6gk3IICzz#G->6Qfs|y7S#{*_5A4+r9K1$wL1T9dNqAwpN7DoZu(ycDWo(1
zkA*&=BBBc%dohY>8y4S^7HxC_l#GZ9q~8sYyR}N03!_q59eGY&IEqgoi)w+0D80td
zHb6dGW`ApsrDDv_e*Z6noZ!m-9*B)dQEV&3gl1N>qddr>a=^vH?<Kex`o7Yk4N~fq
z6Q-4FO3XS4e>zExK=_@;NZ@$5sLJr639z29M#zFBGh7|c!rZ`-w`9{1cDh7<#gNmG
z8yA{_jf!G(PI;nc>9nwP-x@c6bQ9$sRF%o~342dp=knLDap~bLu6|>eYcI{&xxUY#
zYd9(g%$CO-3^NV{_U7)`df*rVcqecG-t9X7#g0{6NnKYgt)4-hAf{q(ch2)qj#*xV
zdftuUN?>iPizGSUUxw=qdsl7Ae6(`D&V8?S;`6%TUfa)LOMxxgv$5@K{(aA<UX$;i
zkJG34sOj%n8YKeZjrwWn3}&P^JQ^zz?T8h@6HQ?{gyWm0(FGcR*C>f$I-7Fmg&*Vk
z_H)!bbFy+7Zw|f*A0V_FP18UQRPlL5*u4EaQ5_&1p)&3BRr?tL+D`q38%TqxXF?Vv
zg{iPf&+kBPOgxpY=`peROElI`E`VwB56Onn1~?1r46)K702veo3`)c4jf%AsGh8EN
z(tS?kb$oBi`6`Fk_E{=M{M1K&mBy{HJ=u%sPP(ND3WXkGk{ZU;A_r2Z32(QA29X%q
zj0qe7m)0$Qu>q50ibNN7Bod67d~5<d3Dt>>5`mCud|Z$Ch!99b2jcx08yjcqXpCbf
zVAXOk9bqqx$u5Nur7~;C^NM^>lW)u!oPnh?Lzdoqp7S5Q8PyD}r|ds>$n{6B@bcGQ
z;?l$0TzziB#jE>VZ9Ip|%WMw|uGRV-p8VggI{$Bnv>rDA-)ow;cdgEU;qOiWN12Ur
zjYnzNzJA0rPb_o)2XhpU_i}@$evsX1&opL{mE9GcR<7(9F?j9!?l0b~H_=D4Ahc~Z
z+IZdwO?%-6lOErx3nYyE8jWarruAry!);}Bk%iu|;iBG~E@uE?AsTogFF^Xr0qH&0
zE>x(YrqCgG-S!iF{n39;wmZgb&SGld4X$qztZ$p9j`6u&(brUk#VxE0`q_1oRuJiR
z-stkDtq)K8$VP7vMD#+2=!_P-5GYx60cz2I6IB34FxG^CpWGuZC;>9#u~{$#GSTHQ
z80{!!u8a%erZaPF+2EWZcAWJ2fBG#5e<G00Ryf!?WIR~rM?Ul`)P9+R=@Hf%)JbH(
z2Y&*@wjn)+Zr7i-D?!#75EwOGBSv&O^nGVa7aA<lu8By_ho)@;0+L`AyrGp&YD{Bv
z63myZNvKTZO~%`rxH2#vnkKGJ;=094cq1*ID!dp>onz(&vIp5k$RBkK3deBNP_EC&
zPgM-g=d7JQ&Dzi2#2r8T1E?y~YuCB_`G@)9zy1=R`*(Zf*M<yEmR!y)&bObMcb(2(
z-hi>vaRYFCd0Sq>{yNoVhi@Ft9r5TRd))QjQw*1tY7%#tar)N<LR~CCeVuq~=^G1Y
zYuTF!esN#AAg${U)8S`6lKWcre{Z4=1zuYtpjR>lQV9!GzX11YU}5=i#`PMhhoY^?
zODbeaV07Dff_HU%y*``(ye_`n9__6|EBbM?D1v3)OgXXo9xj}Jh>I_Ng;BYRA75MW
zVu&$%AQ|5I4*IttI47+0BZX0JH~~su>KC7wqh|)xdHJ{Qf7&ixqII&i3J!S{E7~yh
z`wm%4c?7+*!h`~-@knL@3XmIY=E>qZz}nE*q*a8qkQrF9p0lTp0%6g2TXuT`ne!E&
z<<!v43ihsCXH>57Lm&LxG=7=M{0NMtPW}c-O%WM>sbH%K%zhKer``mUqLwvj10O?;
zM~&b_zy<QCy72vIn=MH@eY#_gwkUvCf?B|IYZN2hgx~Zcl2tqPhlvP+^c@Oq{CPr!
zdTNnCK6KbbB{0IoWtjaOvo|Dv0m`p7j8|%gCu;^5_Q`H48Eu^4_MiF`xBt`!`Jvx^
zgkSr6Pw~5da*@qV&-JCe*908z296Pc?~RrB+e+vEW(j|9Y;CakJH|M?6dYC8Ib}Rf
zJ=WG-y|l$+k1X-vheu2g8fN<uYOcE-vez4lf4%j0OrZ09l6)_A*Gtc%w>ROxvI)@W
z5~vH4x3CDs>w<_+I<lbj&3?n$LQEHIqe%~M!^tx#7u%^<lq@0!+Rz*KSqu-lAs+V?
zdGxKpk7ZWRx%K>~*x7l3+4eQ^!4S2x8=L@5e2o>7M|8pj4ujapWr#3)8?D=p=+Ry|
z1_AX8cMDDT7W`p7pdESdo9EZHtCW<n(C1hno&G;*{B0J=byhLC$L5AS_n54U1P&Yk
zLuMRe3}@D-tS?V+O|MH$l`kqc7MCwwbIG*e@ahg_zQzxJ;FoEdB_`DbV-xIeT3cz;
zzSm)@4hOimfQi*pd&k*CC5D(_Ijvp;0kl!P3(Y{^$KRMB2W$&*<OCR#+%FRn6$-XX
zXhF1hHl`m}5sa36bWluag7@KJ+Xf&ZT5WKXwvB?s1|zev*|1O>n5t#}&{9r^3@<k<
zJz6tbI;6aLg5Evg#1FimUv)Pl=JWj1Kl&<5cEnyee1{PJ-U`_NohJh{?_StnzU`a(
z3fN!X#O=T3hv%Dr809rQ&bKt10o2x%Wy${GC0sL)Av86{?(@|zUg6-tv$|=>@(4S|
zGnpjFI7-WC&3+Q|UpgqCuGp(FExAgyGnZ+}bQ-7IU<VlQJ8t+}MtWR9#NTW8|M=eD
z!=GMzf5r!Cod$g`A~zP8q)itq0lLltnJp`6n}l>Wmp+$37rol`hO0!}Sh09j#1Fai
z_MgDf;CF^?zuh+`5@Ybb4v(94S2D%KtC*0Umwfb%ESmnblE4(!)3XB(&!%$|O#e^(
zoizALZ^SnJPn-0@ecGU(-Z6~wKQ$hc1wR0j`}jH}GT*~7wc<knkWubBGl5)D^5}Y$
zg$Y|<?R#U|zuIb<qbn7q-Q*MR`;YLt&cW;m#o&BEZG7)NaoQ1By)Jqos_DV~Hu4wp
z=wz5DPXodEkX~6ka9(K?oDUJ!PKCxp?V(9m6`U$Q{=Wm7c)P|2g-yDB6K~)6_@^WO
zOmXqwwNommRF3wsYNu2xR8E*XW$xnN8>MQ5s)1Rh%xaj${Em4Im4k^>w&#{hyF*@j
zVU_JiRxvLe;hTzUR}3G!`{Uep;UqhkFEWTM9A1r>DT`d2HwOF5tDNgz&%XanobTne
z7Jqpi&CGEFaC~{YtpISCfoED>X7}iE3K=5eu-0*~dyUWi;SO15D90(jwbPHM9cRb>
zm)^t}r+XhJDQ^s2KOi?0%AOk_A>7BeQ@;;oJ^tIPkD)<n`tqoE@lPKDbmH&$808oK
zuWLBM?IP;nVg^APG&2(oceE|ISs~aGvO#pKG1AiSC7Qr2EU4455wq|*)ACrbRLz{#
z(H)$>@L{S+gG|;IPamSFIGmq{8dwOD3Q!i4^AgiOi?+JbO_DuLUyl_i3x3P8@J@7O
zKv_^fL{vp@uuYa8sV%Mmr1kcvCCQ~de<A`VD`3eq+8T$(#bzFBU~Q<}v{`|VG6A*V
zZE)Xv6~rvno}pW3eyt(Tm-zVmeg!e>992hXbm<Gl-z=z4gKW<%GzHqOUpm>P$pk6D
zl!7h7@mCZ3Qy2E|-hp$1_Y#XZI2W(6VEcG=J~SUbHU&;Y6Vb#;zKOr%T~OdS?KcKp
zL*P`Xy~L&?7Jm<whuZnrcnFPCY8MK8<)Lyy<s~!*jm8E*n9YUh3}#a}nk$n`*sTV*
z=?Hz=^Oet79(lIn{`2pr@diJc9a{?@uK>OmS{Z5GW!_#o|JV3j-lWd|+l6)LaDqR|
zd3pN}xaa(>n8xB!@~q;quV3N(g%Nk$Ii#93xJL1bx~z-OO4~xQ7@gZU&C!KsL3;ag
z+Fd{WDLxhLJ_^wH;cHg{VcUNr3a@Fpr&AHMwOF;~2PA!<5Q<h{WTj^wV{=X1{m)YV
zfV4q3ePg3OT&}HXUKZtg#!yu=Zaw$!vAz2o)y@G$v4qbKqbef2PUq@S_=`}4L?kfi
zO@g8Wt6q9hy*+JX=u=!TC`f7Xh{f1oUC2pDYmmg=NS46bN&pu<=F>_b82l*48YHKS
z`;CnCc3mMc2f)VuCN?lPZ8oe7JhihJjaqaE&U+edP&GX!U}!{2zszK70vJB_z+WTF
zHks6u!1h<u5;SGOxuA<h4)RfH`7EjUn@lh{*nyH4#I=RA#!${FO%2{j>lq=DpCTm0
zf~XWA<_6G8NK>|xPrG^zpQ%I$^pOlG+EWk2HG)c5L4<8a^dHb58>B}#l(-l2@pTyu
zYYCh9qarbC8fapFYXU#S8z@RJ^?--}q~Z6!bd5nVrx-1<GB`mst6|jRt-K|KzqhN-
z|Fzuy*a`6X^1X-x*ctg~!2ZD%whta=efa?nrdQ+HY>z+uUtVT)<u;aA4ZhJ(P+Wj0
ziTm`{5U4#lcTj4lv+sg^`tzi3GXZ*g{{;89(mx-j_MX{IYgiif|Gw3}N$*c-D}LDj
z`{+YpVnGWh&!+KYCZ70BAg85l0UL>4YJ(!rYgmVb$lgeRl*Oi_FLgw;r_=BGB!~w;
z<n~*Cim!k5A0yWb@-sPJ>(-MXkN`pR^o@*;fLTNUB<kpG4Ejl$^uz_wj<lW}8jUVa
z{;zC|ZwQc)g&e?zwMXi&X;b~8yI<la^bml)DWfr+9MB462t}^kangl?>I^uOaB~``
zt-W&J^4T^8ldTEPc|P*MuaK7)m{j{<v$i4ZTN{g-wssh3O@B37`nC;AA(&jT1IS8=
zE0;(PZNSw~*Mh4%G)daRFP*H9p8B*G9qkhrRXZ0%V!=-IN)vxC`2vK-AR15g);3<l
z|KU62J@Fb+V`gF#rxFo~*npYzd&!H#2x67YKvOHllJL^=CI8~zUgz1vEjC95n}Z?N
z41wwK$@3k2G4Cu6puF{af8Olg|26EC<n{6f<aKy<cl$0~o>CMeUby;MoS%`I5#D)3
z=Nuhe<_~}GDu`jc8sKnK&>FZbO2=*t#)um3*3LJu2gOI(l$Q?9?@hj)4R8n>P#+4s
z@9q3Mm4L@<n!;P>q1H#BmqrxsN40~66OW(=xu!|glwkriIoLu%l<ffWrSSS~5%ugQ
zYQqJzUBven<Sjc3Z9Q<qj=y#@HpcgI?)*c{4kx(7<@kRVV}^JqNbZmv)M%>)Fb1qO
zWSL-dX>D`^iBDUpSf2?l3+qj3r+;|`H{_L3I%ctBh!)V=n@lC@`n#fUVgL}P#}SCm
zfF@4ZSr#4ejIug_jY65uvd{oDf(bEucnl)>!p=YQCCyc#sT~i!=a(3iw=kXWqhjKg
z!vtYpZ1lpvTbu_k={*ToOk7hG@%<eL*^uygAB5wccK%f@)Rhl=`6j{r0d98@%I~iN
z(r2sjP&uV(!md7W2O>AX3(iSg7YL2()(DM*#`QP_y`MQR-Orlvr}G+rSG)B<<N}0M
z1-J%kFVqg|MkA*nJeOGw`55vg!*70ipC?|tj8{kH4c8|}98?FG+%8CSZzTN5>)w;U
zb$kDBf4=8i?)~4$?cZq_fO+Q>fAgjY919<YZ%X)kjkkY2gg<$+gg^QAU&eM|pCc<3
zwN7~E(r;7d!&qD)%PL-e=><ObN87Ay8V2KdqO|m2a^*(;xcF`&Z|kyW(FY(dMl}+n
z+Gaq*PQOp`3;*^ld%DNGYZU?NBf-k|i+qo%uQ#j}k{OYPldgARpX*hznZ})OXa=%D
z_%k0tHUg7}rXac6CDxou2m5MUU`)KG!V?W>tfi`F+<M{18LypVx@R%0hXQE^xLWbz
zp)j56oQ*KA@li?_NQ=m#*~}u5Pg>$%hje!ge$iL9uyTWrL3&N7L@VN!3@A}5YNN$(
z){y|iULcYblb$`1>I`J@xt|&Z$a`AnIG2I90jZG;V+R;Bh}jL0Gs0aNGN0GH@7`Zz
zv~)K|)d7f!`~H5Rr?r`G_x$nw@Co{ln7QP!@hbxKpXDG0U?l=yN>vl0ubtqUev#Ht
z#8U&H8m_);1_DPQlKecl)G)a8JNhbo0J{5an*znT@LBghtRWV-2ffClaoXb_1kz!h
z9=Gw~_ch24J>ln!Je%h%pZ~&yKm7cQc$wk6A<Ii%+<u8kwF9N?DL`H;;qTiIE#I>6
zi@f!OKi&x8Prl7+^|%2zzI=~ee7Q$4R(1{^<I2vL7!@0+I#dldpYoM2KFim>w9m$A
zOEwTpE)gof!8W&JS%t#lgUn2NHo|ENZ`aS-73Yxhr%~(PkpcTkfVMffu|eqnj&_Dc
zKHfuXI20jUVl(05i8P&HQ{a&;AR9ndDA@q=0hki<CBY7Zd!5ZqAc|!IHca-kssdRY
zfBV;%>#L#&C3oHS7eO7>_JBM;iBi$j6?64yP6zcz)S-2mGo7umBm!Q)86dn?6W1lJ
zMQz+S8+vF#t5@$|1%qixpGgg3;>q8n*J|l@|CxrX32PS<|3Ax;^iMHy@;6q=Eu36d
zCTgfO!}}a1GywtbC{f9=nPF(hG*<`gPj<NX&Yxjz<-Huv4?=TAa_^HKO~pj$z1N8K
zjf_lOsg#NtfGIV+x1}H@m_oyf$wN~^HSbT~y#lYjg6>oE8J<UI22x=UfA@(1*fs}Y
zo#bNE>OEZ(+cp)ch)X2+1w<khcui<WQaxxQCWhywKJpjhWBXonk~k|q_nf@Ra`|$@
zZ~WGa9L;yBy+;D%$J1B78k(Yf@EZ2<$Cu*<;B6la^y;1ID_|gbled2@ou#}{d*9d6
znZ5?;;_?xBne*bcPcyG~$g`!^DahJAKK(l{aQSk@+9`{~y{NH^*?1jIPr7}-b|*9K
z%Lm)3+_w{cI1w%)0c{4s0(>9af`}ye-s5O*mEa;O(8B-mG2Oys6i$Y|fu>4RR4@xF
z$3iv=aBx0U@*!j+rC1F=Gr3P{wSWYqop(#->LDaiKBx%=h(D{E8Kd%6&Yu1#lfBE#
z_6vMram@^e57V-wP@rHVXA`8JbsGn)w4}$rr%>AeOG`@ZbmE<$u4gQiK8~Ubn)A-x
zPGXW@kM$p$6O)H#NTS(K>kOE5|I+aUY-|X|BVjZWW*8a~oLW?EdjRJS<}{4*5!H3i
z-r;5LzU@ajeexkD)lo~jONx%}6WP=BClx?{C1W&jE3yRp2Xx2AM!=M9j72Q|LS0AL
zzlkV7kLmBCg2iiJ0nmNUd|Eff0-c(It`KYYcfC<n5V#NlX-JQ!J(Yp9-wQ_%b<iFn
zL3iIx@Bb1~=0sULCo~QGi(h-0%R84)ozu9QrNJ`KZ9T@`;Wp#7lQi<}bpEdowfv^A
z`!}8ZU*qk+oz7q0`0c+n;&I#nyp3}K-VQo{`Ht)Szg>fI<L%Yd*!6}?;JM4cLy?b=
zz<$CQPt#oCxBktGkU5suLjkbnmEX?<t1pE4ELi1A>+#>05rvbuZ`T3d_niP2eyN4;
z(+RgL{=NIYp&4ks2IBuG$X{JJp?fER<W<EJd}L&mD;jp9D^RWo*%-1VC0mN}u*erk
z(0AJew5+=xL%(-bv3NCz$*7t+H=X`r);I3u@X8f*4q}U-rO$f}M*BFXTf-!FeS~1T
z<l0cYt?3C8JDdN7Qu&Hcrs!hg9|^{nHsGga%%^4`8s((5gqX;tkKBNSE?5g$L1fnp
zo68{<uM(lc(5Q(-KtX1X$-HJ>H%zY>_IHoC<-!kg{_GEOIG>^zd=l+TC+E{>`V)ec
zO>6Aa@?KIym4lRu8G#u|fc}Sq9fZ4d8VY_j6Y453|6Azar)gc{>ZzO3+sWN67TJV+
zHNKm`>$b3``%063Z#B>>@@--7uMT>0LFZboF0O5ir1u=?d=Zl3L?i?Ut!DiC|9q7v
zo_!IKDV1x;vYbW_dF;i{G8!&nS608tDdp|B?|-Xw{@-ffe{2MFe0hglw3v{uLRDYp
z(zVYpF4sbZ^q$PtT-$ny-}~*C**t9+E(JK(X8ljhjpqJs5-kvSsnOuo$Cz60Z#Y5H
zS>7glAI~CzuWb<8tM4p>d&Qn8^>f;r#QKltX&V9O6xTpAhh{D`RoMBO+)}Oy#YiZY
zl)(xVOG3T|**Hv$HWo9<dc{9+1I(gdes4J+3Y7+kJu?OO-}Q4?yBv>QhP58af>O~N
z#oI8oit%v;5!V2%6JPgO3k1Mq4@)m|xgYu0v!QK?ovE=fK0x*@zcH=~68|9USpU-V
z`4?;2HAQRsV?yySN+BztEMR#Al|rphd5d!f?+oGs39xbC{ea!wBW^kO5$?VHCz;h%
zFiXOOMk-nxfsMuAv_wD^TBg57N5!B&1O~+74|WK4C}gE#idaA!p`JlqMRX_@f8U4D
zH5KSMk-Pq6-rw^FRLQ09Mau(_w&2&VKm+3aM8!(t5v2R;uMqltgFeEw`29-jf{2U}
z;*N)#%E{A~-}`sh_}mwtMzRCE3jtdz!)3ny!l!Y*VR-UnP?jDW0C4OB@I49nzq@q)
zuh*(r2&#a*Ugp~Vml>7otc-5su(}2aWjW^?55L69+L(`hXp^nEqj6z6^j;TS@nRG}
zN7nNl5|Cnj6}rOiyO1HD?0Z|4Ku6&7y~x_WFi`ql0Ih~CxVuZV_HBcIQiLmsFejnU
z5kVTL=ZZ`rA1Te$GgyMMgnAy70SP)*!0)DDckop&L*4hDW|UjC*$bGk|IdQsV3`Z9
zsu>MVbJuM@$it8QJ2Dm2xX=K&Shxtq%VvtT5*vU}Sbduq7;XA*R08x7rq+pBUtwG<
z{ak^b&wr<^)Q-wvv|UZ4)W3AKCNwWbgWf#&{Ts5(lMO%`VPwJPO68$Js8y()#cS*;
zOpcfVwNp-?x`+Gj`f&~?P4rce1@8w<QI5%hv1K!w_C0TT5|Q0+21>Rh<V&%U8w3=?
z*OApfhiV3O9oYNH00`enRlCS&ZIcyMI}4~}y=+{3k0LR#RZt|9swW-^)P=~SNybCb
z);Gmf+vq+l5%o%B%;dwRghtF0@&l~tXMhM8#Ul(>lruMFeEv`N`JMmuDaiJM;g<KD
zTsh10*B)kT_Y!NTPQZB3`a!(AbpGFJt*XaiK*yJN(#2!erWDOGFKzuHcVF0`$i~dw
z1iUaPkNCppo?>&Y;N~;S)J+q-+grwe)btZQ(<L(Ol?6zip1rTqY37qbPa^qw7K=S}
z6Mwfp=p_rbyF<MJkq9Y)>P@sY?o4oejQce{h6*;J*v}_|9VyunjL$$eQ0CJB#gm2U
z*NdWiQ7UEyUjcQ1Iy^n1WYo!LMIg+j#6p~>nJLvwIoO>uvJWsCeU+p7N{BPcX`^`C
z0%nq)K5Dw-K3z@cQ;@vhjiKFrm|k{c8vwLmVI+&`ehXR2{l}L!qaaxS>LLP=bpBSc
zD&)RrG-JAEZ7_sJgvuy2LW7|u!=ZSoLq>2`fQ&hR{zo{R<y0<^Q+;Y)Og|mK^kSK%
z<zo<a^JFHn{lktwTN1JrFyl!0%tK>R&6TDRs#%!)n>tMK>XM=*G_2B(aE_g)iADg@
zYy61lgG5uQP^2|^PPLx@y^zP4M5q`ajCoRqMY~S&+DbIN*VY0fc?QJ(w|&o&SAdDn
z%V|J6&fJ#q@Yj#{m%s4@jcg;{;k;*Ke1fC-OFVV)^Ng04$WE?z4dU_T7y<a+B>eFv
zVtrrZ?Y}F*KD>6q-|N1;!J8VpTA|w+PhI|Z+;ib)@vgv8qpBG8`J>-|nxFoO_b^^A
zaK2%F*fRqb>12Oh{q7`tZQO7CwaDUUVRzq?>m_}E^7Z#!E}`}vctl=le=D6;v2^}^
zebc;_v*2AUq%N!g=0}0}=f;M5;#oQs_QTTygXA7l1l-(<QXO^)hrx6vNXha+A`FJ7
z;%b=gdZs(d{Gg_pHMpjt(J9mFkZH9~t#iDuskLU5Ll&cHO>zJ<LS~dKi)1<<Nq~`E
z-%aSrm?lka+PcDZ204q9^o_hL>FWYbB0ENByj1w3O>y#0Fg7&+f>khL5bKc`Tk8e#
zEYx-<A==rY0R<34gQbl76c^=yvw22lJ0j=8{#E;q%%=NsG$_JE9z`A+Dl>p=S;$tD
zY(*$WN>K#0ikpM4h51BjX3$iD{HGBTSKrUE&@OKwHK(aDk<f4{;kAhmo(<yT`;y!P
zqdQ=0S_)Vfi+(f&!fTJD8Bl{1MQnN@Nh!=R1~P`mz=T9dZ+dc05y(6zZ_T*){G4C=
zSC27qTV$ETd&f9mLTts?p8Z{N3!}5A0)aId4}B*l|8KkZ|852QypHqhu@m6;;tJsP
z7XI%R?Ee;jFy)P|4Z;b`l}BXD%S?85c>d}ia@*-2;b^uKrvT5v;dOrhkDlj8fA}s2
zrJ<R5yfbYKttL`l%e-6Q@%427oy%V<4~%9%wC;gDcfc0*mkwg@S;YES)H>K(dm%)$
z4EW#(*dY($1RZvyG{N7#nJcpcD3%p-1jS4ltp`J->5-7vfkEzL1hSYgNm>i}z+#NY
zS5Qr0x(m}C!*mxW2Q}4vLgn|U^^n>fFn9YjZif0g${__WO(6ccF3Hej!5yxR?@eij
z(ORyX%=_?tm-Z(&Wa)JYavc^R(%A>L>3@BGfell?rl~(FA&4ZvAQSB+EE*T@$G7Of
zz$%hOzkUfTfC^|ZIJKY|)WN96<3pnrnd~X|z!<qP=yRc2!6+JY6NtKgDIr@C@>M8S
zgko8P?X7^HhxdOzfodu=RZxfcNWu#QmOi;vBLp8)75iKZ1&>dqx#zPO5U19uJcVUJ
zu<MnOeUM^`#m9s|6C|zT!~5#fvPpaK!>Rbk4%Zk7anR8&+DL4ijdJ>SgPVH()xUm$
zz4<mp=1}!ma>m0kUwPqQ;+uxmn{GymJf<kh8wmE{O~C%I@%G>9xyYNl{kLCr=qtAY
z#|^;o<sGpMSUzG<EwQurI7{V8POiR>{n_;}rI<M{yz~N}`@)cqK6HV+3VTxHlFCoo
z$-0dLPLO|M^V1Rkyw^pR{|!@rha^Z(bST|p^%V{6;NMM%-Ip|l`OwD0Cd42G5xPc$
zMXMF6nKIo4Er3EOmW1)Dl9kGI5`uzk2IUZR23iaABRJZDqw9vfYmV7IH1meKI$}28
zV^;4{xqZB^@ZQB&A&3?jQy^x5YTg$36rBr-$wC#*65~D#$6S-@zy_oM7mHwD8PGTS
zX-$Aq0n&DBl6>r?XZ4FH#!9Dhh|<5rhY;II0+T8N>9PvaI>Kfh5ir^@&<Ip0bA?(>
zAZ<E<Xu2aNr(A`+6zbGudT_O%bxfk{Q9lrE6a6Gp$OGe_Qm{*kT~_RxkS{|qmcXH?
zL-SZoh53;N(qEmN{AlH<-8Jp}Q)8O;`O-B}+U@xb+A{AGKg0KGhe7deZb`7}#dopR
z>bn@@utt$KZ!+;Z)r6Hnl7{+d0G09rB$^|gxCusM!~gjIdx?uX7s>M)bvBUxMkjdY
z>Zdt6+GgX_S?uySPX5Qx|M3do9WwpP8<>{Abtfv{Rl?sJgZ*EBScj^IwHd?tn3uLb
zLs4!p$WAe>_E8|uXFT%o(+o!i?|aWFv~e8Oi4V{#+@AJiuM2Gb81dU9RrTdk+Cv2B
zA^X~w8A=ya(}u9b6P@XAxJ4EygR<ar7aIWIJ(eRBJ6A(J0eb-R0UYkYcnwak3iGLQ
zco25ozJi?{*uMk^+c4SlOpj`&M-%4LedhB6>iIsdnZ`*=5G>Z1MM<O>j2R+YhN7Is
zB5b-m`QV}#V06<<uG380%zC0pkhT-yjhg?C%$0~}3sitq_}fOHLl*-7LBpT6Lj<xs
zkm!;*kQlHCStO*T2{ntWeVTCSof0?z$tBMlytmMR*ODw>;^?5p9$6$;%CRt95wd}8
z{TqUMLveN3F=*mOM94omI@)E()}UB|!3vaxf(z@P`Us|bN;M1byK9J2(Fpx_h7(;T
zLL!r@cE0~2ZPau>Ybh0M^~qyF;%BY*nUoIM5*3U|83DcED<31A+qF*Q4D`M$qM-v&
z6B+=k!LoSm9IS6ze)HF_@W|88Vh2a9UH9tnEL;0u<I?rVSXnzuaq<L;e*=^M_X^?f
zji9T-J5>IEi~t;8Ugcsc><NRtYIyeYZ*$j8|320f)XfnpV6#KM{N<+^FAcc$><UfO
zaI}|P_hJE;E;UUT3Ve4GrF97Goc!o{`L`ogOI7Tap3)KtWii*Lzb00V20RJMlvb^n
zETh$j5F;T@s%4U_30W5Eou9*O7uJ?wX)NqdU~d8km2l)>zflfq<*=SJnIBPAhd4Kl
zoPaS#GSoM%*-=NzBRUpJ^uEu-4mT<Vf<>?*nM9Kv$V`x7nkE!jwNc_`wac^jX|K^u
z{3dOKd;4m+0l}2yloug?jTXS9B5y;(K`!w*hIN3=wDk(GvFL{+I@(=*Hi%~#>6zh3
zAOzMLWPwgIaEfPuW<z!luae0!S`~;d$xA~yQidzSU<F1egklg1Sv80GEQH!90)+;h
z{}L1%kS`16DwIp9$ij42IK1wePlD#()v@q9L7k#5?C+D#z^8()zUOcuU8CCW=Cw`n
zOK`pE7wUK`*PHq~)1@{8s&%zYk6|=4ISI*WWu-Tma-}px=V5$OIej7Hk3YT3=f3nT
zwmif;MYUn2IL)-W%(Gj6#M06RqcbOa-W|u6V+7zG6b|%VCH#H2_Wtr#5n67zD3H$?
zYz&!g&3W$9Z*s?(pQCB!VP8#y*DXH(xhEO?zyoZq7R=|4`9ZhyPqw>W7m0mI{+IC8
zMO)yWhEV$U|JqGSHy8}H;wzDGGJS<hkw&}T=*Fkr3ELEq4-DDZk&T4B3=^#?xT&&x
z1YCvD38*Il5+ALD7J@5bo`DV&H&B`^?6>ox06)YTi?3>w8c_>cgZNlHT#zUt!LKgi
z`YE$64+Yrfv<`qK2LIStWb?R#*VF`<_@^X~0BKj1vS7#5#U%%FSa-Zz;$(`GwHnk9
zwlmT3i2#@{rvD|Uzvv)~CEVVau)>fWyzOM8E*3Y3P$SepgT*_=d4m(!+Iu22Z^n|F
zA%$Njo2^moEs>iMS(!0dhS3^~H(+HGWRNuf(cGs1p9%T0VX)*|RHB-|!DSy-H8b#y
z;A_w(z!TmDQmgkpkHH>llVW={t_3>&Nub_)l^#(rChsLOs%jgol`N|zHBAZ4q9YWB
ze9Xk%koF09HF3=l`3%VcGOhyhaVY*@{Opw9`-7*Eayz<iddh4CuXCQb{M!^o!SL*9
z)Fy6-ye?kU+llb^M)v;l1|R2G2KYT&`2Q?){%^MMzkb;NHGi;ge9b9gcQ~b39y8s$
z%8S=N&4rCma5UeJ+4Bw4*+oA8`H~;}#C?pGg{o5gM0!MfU6}s8_GN(5V|MrV|I+4~
zxBLB=iK?Otdj39TJy_S8h1;~Vm|6sbjl1e>0Qp$RhhS}B6jW1XvM1D2sGJE&Y0@A=
z&+tGvstl6`R&EjU6<FRB4(Gw)ZCnQ<A(|ZD_|{NGok6`|)Zx{FHmEod8zJ~qSaL)P
z@L5>tXOLxzwWdwaGbZT3a~oCx)&{6wZ9p*81_K{8A+sTP62$#;OAU}7y3!rKc1aS6
zgr-Fmy5gU9{)rQi68;i0AvQAqjSG*X(FDju5@VjcBjS~)1Q3nIKS%<dMB^QCWX8~V
zN9||K-C^j)B*$h$3bR7VIz_Y2;Bc98s~|5e`LbiU32WzJ{RAv+1a9GQ9Hf}8@-!73
zUV~~sC_lVYG&)v^r<Jd^T#;VOsXY$>ubsKF_WdO^M*b$AK<gJkWbiM#uXzITPb8>I
zOyBmRN7VHTqQ}s@Y5cM#FARx|oGCqLZpnD+i7CJNdynF>D{;30xs(+7fX6TWOVBwh
zXKuk1MZ3cI?h*dp2<-o634d<@_J7sdajXJ3zPyuBlZZvy^%(;<X8-8xY?aGwj2>Vz
zzmAAUm~d_9IllbWF&}>LHipZNdLD*d=)!&iQ@<bfL(A&->Te*@YA+sGTR;0iSc}YQ
zN!YT9ML(J2o0fZkSTbwKhn8|+$Ob}QSg_%lG_`VY73PORHG#Tzcxq~yF{7fU#v4OE
zFBrNJb4nU(nB}lh!f?rO`kd!t4Z}vL4wQN-xT-+oep#Bp$X0cTt0O}`Y<0u=TTyWc
zSy%x`hVelP-xSi?`WhRGe`Z1hP-Ic-Z^2u^+m8LNrYp#av}Te*BK}(=siN<nwBY)e
zihq_!e$kCElR&UbIRIIZ`q@mP1kht8#udjbfn0)nq!e*#jywhDmBt8-2n|rF(5Q)y
zb_Nf4@xeex^YETWPDkTwYQ4_kYzMIgxvnrS)*0J1azEl|o>Ltfs;k1f7}idCYCP6M
zIe=y#3NZ{u9-YO;Rg%<RJCb)S=I!RGk5EP9tJbo@(>6FlAS5b58mcOY_o2Yk?e2Z#
zaHiw0(Ev!JOtMu4n79T=hCGQA>9tK<Oh!aXDE_BzHf&v~__x3F1ap50D~URrvoze~
ziL1XsQ|+*P>H>B&JSP1euK?bmlmD^K{|$O0B=FIZZ8!$a8dtafn1NZR%uh0Jc4F-7
z5zjvVID@j_-aF4TSaKZh(n^<Fm{VDt_*o?SbsK4E$%wwscGk{l<(1DloIQ;-n8J`1
zmSSKiM>%-`s*dTAXXomi=}|D?sVk534UL~t%K>veq|qukqM3{=ACQ$}Oao1oakMYU
zr2=OS429FT!e9U=&%)&z#+y(b3BD3slSLP~P^G;($P7jeo+dgEDJnkr2T)*4j!2I2
z(VQki)z)fs)C+usJdy#;4aGjd|M5>B`2i|jI^&I50A1AxP&O&yk51y3?mLqx_X|yi
ziTMXcf<18xi3%Y?aZLeak@P0kAX%6`wTVo36&%si9z%oDs8Tnyc?m@0oFth`e#ORE
z)L6t=)aE#2Ir24)n=rIFnp<Wf%yQ5rk1q_n6Hi^k<gzk-S|}Qiae<hZm4RI8OQD&7
zn@6RA2X!WxP_=3j-+g3z2!Tik_y<c2Y4a6QQ)_ykeJ>#n*+<1d`+h`cpEgQDqghpK
z5L{Xzh(uSw=mU_N%R*T@W0*`l|K_)zVSoBEnQbD0*0M4_#S1&X&*bPuRyNO)udTp>
z*8f=N|LxDW`i^5sWbdwh|GP!!|JGO{tF6d4hxn~kE^Yq-H=X)PY*x~^N$~B{YdrSk
z!xUN0Z5K{a4;!Y3i%x!N?)UgEHsA(zKuQ#(PuSB=|DB$xk3YB8k`*~+nNbWgilN0=
zXd0!Sd5(6b%#Iw>qlVe6rf#OxI;EB)YIjKG4spH-Qzkjql!z@cBs4*BwWFTb$dTnp
zGK?`~V`aGHSUn{SS72!q>bWr7)Zigs8=59VeOzDoCVCtgtXRB8kKlMU6hRJ18H#tZ
z))ftf!bD452~oOv4B>H^pjM+3Tqyn~HUMZe3F;XjwlK6Na#~AOkJEp&mhI;oWKmYv
zHU?b?kYr)qU}IXLH4?6>5wQqVOOt`-(H1$=U~}uk``w68sZvEEpce_n-{g4HV|6C=
zhe_JP9I_H)3rtaxjh4w*mMPYU6e||9rsy)vtWq5W1f||nE<FNnS21&txu7$PdWXT0
zNkf(kd2X<|#i#*if)9TkJuJNG$yTGgWoi)G-F!#t)2=OuCPD$-u<f2dHaRVZZ(0+e
zpc*i({$F~B!}}hRkeUk<JSzmlzx|zO*xG%LysYErP+1+F;L85zxwiAQ!1zD08958D
zH`wQ`Dg18;_J5Q6{x=5uzf&^+k5>T4m)CGn1u3SK>tklyQ!ed%n)4@q80Rw7SEw}9
z%|#x5Tp5)g<IIUwnx<iPlso_uF7Fp&`W99K(b`vArn<D4Kp^f}#29R57!(=BAfqVr
z;C-%8S2cUr=gf{8=F^6%s;QbIru9Cx+o#q8921;x;_f!M%^ArsQnc}Psy?v4jmL{e
zjHj-`f>?}Wx@XB>682XDmteRC>!)E}1qZp=6zZ9hRR-@OgzQ6w_E=OhjC0Y5$VXK`
zfuR7x`oKnrKcz3)42p;V6cG(bn)k#5@R6l2HaY?N9-!hQ)U2H~a2Mj-^NKavY5Pr=
zbl9!~vM%n|TEWJK!Nz}Q269oVBtMM21<4f6gOR=3n4w@(ByCg!08I?eQEY4iZrFlH
zV*#-_l9fnaVzL5L49S+p6sw{5k59vBLl~b3$Huu}^?dnJVf(VDI-KEVbBtDG9<s(F
zb%vdr;9p=pS!O6op(qTwwd6$>S5Fpo&@>^%(mO)ja}wUCXy$gs(l;)WzMoK7jm0J@
zr5gH(%7jdS$o?mJ2*hSsyYGgJJWWI?SA?Rp{O+fp<GGigpvY$tg@WbLDR!ri^YYdo
zvb=JZ^7P3YETNAt$18w$tQp|3&i~CICdm?1MiUA*pxWE#%I;@4z4HCcd=(^as!ZlD
z@Bjiq{l3*lM-=b-D64A)O;t0Sg`K8qEOyb+td#;vyUvf~zE;B*_L(Ll%X0?9f^v{i
zlol13&npi04w)QIm`>)*=2IFsp<zPpkEnEyxjUe4rjcfqVI`RE7|A;${hnoT5^+he
zU_+h9H-UubjK@`;`P6f;YcS6WW~|sUNYYN6hpK|%5zP06Vy<Xoz-6%kFbEAQ1}`=y
z%tTvR$q^YMVxbNYKhgIeqhvPh(sR?T09>5d!;qQ`d!#1=><D6#q?7TO8+v~EZCtMQ
zf`vL=e@g_+0-~ToyDG5JfXLV&tIN|<Fp@S1WGFuI70?h!6VnlW^lnH|whb`_4~vRv
zz4M9hiP-eO8Il*+Vi>N&5yjGwVr&?0z|u*>Xv32apsAG1IIceldzS_8JdJCpn;A{D
zkDnjm>M6L248uT%6n;qImYB^4;4Maj^s*>327{b(kW-X75@Q>k2k%1Th|`YH+HV1*
z<Fh15s}WgH7Wkwr=%F62Gy7kV6Kdk<#P=~<5|-C3fAZN&eB-Id$;t`d3#v6sgHueJ
zD?E4U_ZW>f8J#)beWyi^b^fmrX%&uD0LK^J&7?rE%N0dkGCh2bYvimg-A`Q~h5|3j
z_TgiE>5(B1z4rsGuI9`uhikNDF)!o;(9aHtMamegwUp(6ye!BHivaU##{T{x)5(m<
zbi#Z(rEy0zdO)o^%$i*)-N*TPByJf*EJg|p@njv7VzdjrTM)=CoWK&_E3(7YDXvlK
zxral8Tm|!Nunf)yLQ%rnS(qL`xf@ggStF<yyxI_EgC!W>dVEVc_lRUzQ()~FoWW!S
z4}vV{@N*;BX#8U1j-8kWXrpy+Kmp=zKA9{L9$%6IAQIe+EPDP+TyLj@IZ33#WbTtz
z4JJVO!7D&pdtMtSePayP_}~{rdYq`<un`Kkg3r2?JqJ+*5R8}_uQ(MH8+-^%6ib?<
zi_9=tjwuQx55+%U8B&Zb<tmI$D1!~pVAbF&kI99-=as9ELp@chxx+OL>KkyL_|))T
znY$yV?i%XrNMy8>X3W5@P`DMcdd%c#h=^c}AulXNkueyS3`Ye;o?#<GP}iQO4xgEp
zElAHZI5hzzOW+9Y_tXMu{gsdb<GY?!={0h>XLUX2D__6LS08zTqMXIgTSJ+RY1rqv
zmwtmmF=F}bO~KDWk3)WrFYm+#K>GIfZzrAqn<f0c1)c3%z?D!uX04&D#~e%^##qa6
za1&L10P0awb9wJGeEyLs58VDS#^V7;M;541ak$3e8;^6*OhqhNmXT!{Hp>wT#5g<^
z)9C@z?FolRhfJr3%<3a*zfa}2soXA&Kg2Uf12qbf48dYrO?|T3(T=#IUC2tyy+Q)?
z+u8)nLg<Y8AQfvG4|9zcxv>9I@RiS&gpt6~3ap$HX8TG#3HHL?f%S<XX7Fl2U5G3u
zpdvz!`VwOYXk#!&$s+krvW@^~NfUOQ%u|t$@Vbvm09+{IZTxX0ll4~s#8kaD&_*H=
zEG7$LdXE!%2#FNf>i<oMC^n*D-!HyZ02m-kmUu=wXPb=R!e>Liy^jVvjR&V5?*->A
zV)C$(h)FkMESlv3^3OADKERF!<l_OwQbxHVj5cAo?is8`BqM|Rx^nelp*r%+CyJ{Y
zoNMsD!TS(|ljM3q#+U&P?<*>Q#H`w4Pd$hsmx9uc806~|c7v>1!ZJdnAh(9H%o&Yy
zhU1K)$QcYmj<j!}sa=p7`c8$>?FO_jG;Hmz(|hHU1#!#;ZdI~IkX$)+A?K0DxB1NH
zAHx<q?K_;=5oF4<7k`}$W%<l4m?HlslmGXI&R^bYIrVEnKslBHevjJ$AM5<zQcGmx
z$TxG`)iJw=U&ojMdA3UB4p8q<skyZK2bgDS?l}Jt>ZUY)5};zqDe@76!4k#{uu;=K
zuWAks4mg}_b5!k8&F3^tgJX)*eP+!LGk=ZBZR34~5bn#GGC=5bMmnLWns&66XaLmi
zkyT<)O$Z2*R`n1iV5Uz(jP8bw;wz66j~Jz%8cYE@&l<8-h1-Rpf%P*m*@J2tY-QCa
z|AUy8=nWphcoTKmaRtx}5E-DFkr&YmATsc?EI_?!+RhR*9}BBy+BpKICP1}S21xV-
zkQ>>{(ltXiG3}$be@Or9EQZB^<k4@Sbt;Vh1g%S9dRp2V<%nwAG<YBFi=Ci#TwiG7
z00=H*GNI%cTVibR(hsDA46zwf<e~Tv2V|p?Y$>B$vW!o8mQKRb35mQA4-T$AVwvxG
z=5wg#9<6J9Q{x*K4XFZA)A!u`TCYgWVv`g|1dTtSYOb<hJ&7U1+99P~qqLipc7vi?
z;pk`_I0|CO3&U`jGaQtZWl1qA$!vzY7&z28w9!^-*fj(~KeD3RlW7mNQnJEx>Riq<
zFYNOtpL-a|uS9hP7*kS|Bc8qVZ!k^6^4Z(S#)BUD^H}HqS_Z9Gzr7x>0FE#3?u%wM
z<%t1)%d>m%D61>?$JKp}XhYo`@%T%>#pBQZF;*Q*<rr%U8rOiy84OOawtN%g@iJa(
z>iURzeaOu1Q@bN-H>dU!YCXXF89wT=j2JR0;>0gOg+LR{Q?fYvrIkWI7bvL+Oq}$k
zi;?Yh^?|)D@i!xi;3b~4Lostv+ujr~KZNZkAzurQccU?E-VC!NsON!z<`QGvOFPL0
zr#TagbB6aBUNh8Z*c|daX#5)+8TB@hBW=tDu%-*-@kUVN161EcBAKU+pA)Y!4w%*o
zI31&uB`>{065NQ0p+qtMHzol3C_zm51V-XoKK?uT30Ne?-6np5#^)!IxEOL6TuTHD
zT!CQsoMY?&Y!mnx(PmJx49QB&aEKk3WaErtNhmiR!&AcY*^u(*T=3G{`i9}?lBaH>
zI-_aOrUK_s=NGK1g{}!m=#h3T)G(Ke#U^_}^{AgS^)GQ)Js0-z6y$c9GFzvxCn%<y
z93G6ZQU*_oykIyg7>@^xh9in$4w{AVp(bz$l3S+H1k=Zc%7lLhd7)>x>N$J5<mIhH
zKJ)oUA=^SEdTk&K%ONjc{WLn;XZg&{WUI^V{T&nkjxX<$Frc@S&i~C4{=QqV|7*Lw
zsvw19xUo!itzm!fQHINB5u@x+wsDQ;ftw%TM<2YG58ZQ;bEj6xGU3|(0ncB%&Qn*m
zdF<)OdGx7ET)DnW?K85h#F(0_Xt1^d3HoKDp=hV1zi=8folClEbP0439yM(Sx`^Ds
zbr!mm^vKc|S&VSiv@^fqXI}A5*c+HysHch)3fqS5r<HOg)T-e~SiecBXW;7)E3463
zwvG;YCVI}}f-FwF#o8jY9Wm}VPd2-;uv!r^lq_n(iIcTh#YgtP&%*Q6EHo{NO)eS;
zWD@fah-iqAh<|aAGoAbo+r<rsIO4E_utwS@BtZW$rBFKUMne6g?l3efz9Sr}q?BEW
zREuB>947D_V~W-XSxhMY<T<u1v4fIqm<7_`x-#5=)ziv&)zZv8rckyXhilI$O-&5?
z@o3|q322T+sbsRN2z`-7#UdKBm^JIU?e$iRJx!%(j*Z+7=cm-oE(fz`qiu6RVb>Yu
zXBlKC$g4FD4o6tY!~c~9<zPrz7L0}?#-jn{AV+)*C2CwG6-tZD*g_dE!RAKJb1&`k
z`=5J+Np%$w7f=s`!C-}#uYH>7;ft)Dx|MQ$t@qV7ynP6NZ&#iFYq|aL3gCM#5%5^&
z|JGR|OY%V<R^;mg+|D7@{33g^8MmFim0$hwU*Io%^1YlnWvQkxnKc+yZaaOBA9%>X
zx&f&<*xKjO7cTO(r(Wh8PhaElXRh<i3p;G@ZZoT=7;6}mmORg~HVc!QcJO@5WXDHG
z6z%b?r1iY%0^?J$PZnx61_Q|}u3mdN>lz4kIKi86f|d&EsX(dhUlc}XAiFg@{L;EG
zJFmF8p{WBO02kH?t_r$0F9E+W;<4Uh@-bp8c?MY);dU!+@f8BYK97<=XOyNlv1=pI
z9gsHuSbTg9DHy2Ff#{O~ZSSSqE@qgljZr|N4RP`d2!#B|RfuXr6IcEwlGH3QN1zv4
z<RgJm+dP1{9f@*4FCq3&Qm2z;kmZ=X#0*O8AR`|e%2gPw3(IGerOg2Q+Y$~g30vO)
zH-}ju_~YxAXb>iC-)n^Wd?D?gxrpy9rPXwwA?ZS$QtP7X!l9EK!6G=kubH_^OsmU)
zAvYzNU8OK<ab>WEJsM$UNS+M?NpC!6JRUL}4H%9}%0U*6uLp}~P+A59&tp$r=TE=(
z2vheGCOQnNSBB*VS9brDgS|&tJ8?VZ$xQ<JKwe|<Ki2tw``ha=0&sjezN9Ziw(Kb;
zOY9zA<p)0WaenzH{zJ}f4tex?!>6CGm`p>`n)gs-%IZ*98N&J)HkX#T=j7dd_^$hq
z4Iry{`SJmeJ$jYTe)%~*|MeGm>X|EC+dg96)MS~4hM>r>RzkQ?3)A{8;HKxomWY3H
zLxC5%kf3(|s-|UKx92z?r{zeMS1+Lfs6pmnW>8OI_gNTjgm4<0!Rl$Do*1gRj~2;_
z^@(&BHS#Ujz#w_BytOveJRkGkGaE>N$p=19`uqr`Cvu+41aTphNN$MvZ847I`=U`w
zCJRo=fmA3dS+LgxSYoEVMi#sVa-x;C==a+!BhkvZzgCE#ibN)RzwoEOHy%7TYW-si
zVM7BTgAy~$$j3sl1m#)?YFa-RG6}p_>M6YZHKCaZ^<42)h;3FE6c=r*bXt-4g=Kqe
zY$JMv2}qNd*6B}siIT0i1#R+0)Vc(_X%Q1YW8wdu&S;t=Ci+qv#$?Qhaej(%d5&pw
zg1zYodp*b6g5jWKeR-XYjdhlnhNu-@e)%dFFK=`GU<);uur$Gszzapb#I?OIv$yjo
zE9*BgK7BrRImeLy@#S5)0(krA{NF6$?~TCz-)T$aP(LzsZ=K1}Hb42pe~F*|<X>U?
z(DBT(6$h1Its#rW!Wfu&IG6}}1aeKu4GfI3TGpH#c}{P@=~JtG>Vq46>J#@sQ?q?A
z<%yTK`O4QX@x`yaz{8JU<>gDe?9YxsJY|_NC`+tOiGO_uqfV3E0e8~t<5RS%^qPQl
z?W+djk?=9;(1$&~uffltnJPy+!qq3>!h^y6E-#evS<lfS%#Q?L$H_A?@HN5e8q8#}
ztiWJ{o1P7gjLCxGPG)FR=khGvHUt4_+|5h!-|hDNt+`xcop%|)((?caeNbu!LY{oW
z@TFJ4jS0KxcK>hs_P@apC=m+t7<DVqDhO0M8Jkakcj1t_*mN}xR4m43h_z_)86M==
zfgu}8*!!=AW^3~%!(af7^I(OSzoAU7DsCP*7*(`f@IDl0?WIim-sjrWI#0G8O6*v~
znCS5z%=+~eMp->Bfu!&%6MZjSxJ`r`L<EaL#RrGTW{-nrkHh&hSW}SMj3O_|%m&5L
zDPDZhFq=)VG-PJRw7P`VjLeKM#Q?i(uvt!)t+9Xj4Yqe4Wo3MtwR5+Im!#SY$$BT~
z{NIALsJwM+)#C=>`0}p37&3HkmBXDwe)32DJRkq~Px92ont2mc%0|M@y!HVy&LVp}
z%LJ2!pEU+1B1|g7ONUB!1;$Up^3bzB_MBQboI10_2X9^Fqwl*D{+8ol|Bxph-QtU1
zd6_Rfe35TF`V!Ay-sWglk!3l<;fO(L0{N^b?Q3%gHN^|3B4|28^<L~-3nWCp)$}W(
z;k=HQpbnUW9s#*>a7Ea89!}k(I46`#Fggp<1I5ikI1u7-M!R@e4;hBMEWn3=S7VeS
zgUSk7>jMy;e{Ms>t;R$^*E8%fS(`B!ij$ABF^wW~?d8t*)sBf_p4JJm36K~E+-3ww
z-~*(BFVdL>njXW#N^fN@y@=-<`zz@hgGNF=fMj`0NEW;e>i|16*nuG*L9q^l4Ol$~
z!&Q%SAwS{eXOx|11Yh|O%rp-i4DqQ*_o5HmkRR=>0HiD6NP8S5vLjVpPh#9hgQJX3
zx}-%(5xz>#KRy{?g}saz#fk|E77d;myVHG~)@<4XZa?X{?|qxxd;2nX-#OyMsR72k
zm!pa2#Y;2(^z#?_!_Pg<&eXHCvCQ?o$0_qwHZGhG4c4*N|M+s;037T5zZ01VRtn7C
zCcD?S`P3(Vj1NEflRWoAP1VG-K8fo5SX9MB?Id`xN77hcgef`8!@im<kmL>orj=!<
z$#`K81}`e(LRlGAtdBh>R!iP@_7*<)p4<4<OgY+{@aPNI_|jJ{@~2;YnTMae!o^Gb
zOr|w98!;ZQFc@T5V^IuVrQQF&;-$6mZ;>FVy<bu7s#x5us}DuS)ZnL3A1T*gfN~X<
z&xHwh`4mhK1UJ(bZ3v9*_`01SSn`sfJkW4_vbc-4k#%pAzFVL%!JH@T(*x69Y?8IL
zwLZoIhen{A{<|w8(W#Mzb%3@}z#6g%5;@Rz(|;fXYL{BratPyUNLrd^hbpATpqGB<
z>HGj3U~Co=1apIA7AeEzpN+$D9d0N~r-hZ1+DZ#|ca$rS2~5N8-_>F5q)xirg;&h(
z(h?!trb&Ad)G6erP21@*E7Cg2_hfnPYM|X4X^T9WD7!S`fPh%c=So$Bc*A&DaLdUh
z-gnC;AA8_DA9(Nrx8F5lWiy8oFg{H3tIIGRq4^SjwNf7Y<0tutfA4qr&EI^S&B1Aw
z&urlGJR(<yW1asS)%m|(p4V{$@I6}izgGx<Zvgg}x4<Xh6}Ryi$;l4RuycK%@Bi2j
z^O1*smKQJ8%$w+0-tqH$+WX|{*4<NGg&lI1wI**tCvMV-7aF6~9*!E}+FpiiL;fNx
zWuDc6<J5}d)Tx{g+;o8tz3&!&we%bwOnBnyEk66@7x?^_F7xQ4*SUQ83iC=RiY12Q
z4T^F=X0i}HtF1YEHwm{ft<p}??Rvn6|MX3i$2p)@q!QdjnIFKFXCPY&1<MF*T!7|C
zn6(q4i3GsF)>jd19=80sl|Z(Wa6IA~zC{dz?|#tH+br+^T=WcRR}3k<&UG9HOqcy4
z$w;O*6!&-ZrrrHZ=lmCcUm_YI$@C{4vkr*RcE{aH5hWhm$U88p`G}6pKBn6>UgEK^
zP#829>=5!X6f01!hwIwu&?EuO=gJEY3(a;QSo%8n4A4jn@bN98<I}_+3?7JEfd$|G
zB$v}Z<6revQ{Y6pgBJWJLTC_xHL(b*r*1seyrHQflbrSO3h%jjod@nc%Lm_kf(Pze
z<JR-bq2R9w3=G~oYCn%^j|?#mX%1m$hMFT-TIJp!x`+SQr|#mRzxzA<-T(48$gdlU
zv12M33wh7q5uLxhX~N#?hyC9y;qR@0{f|`u#~0p>guiHza(If}tph&tp^x(CKK66G
ze6^veq=j@_qn!l2CuH5<&`P+l3$D@*Icm+bTp}_MRtDCF0-IRowS~DFcBY0a(~QBE
zGJZl?8F@~udQP4!dGOX-c<@8F@*f+|-u8q?9>2`zKl41F`{E@YdHf33uUtcQiQ#CK
z(b6(SULay|-bN6>cT-)e{XR(S+P%F8X@c>NuLV=b-SZL5_TbtxaMSmNCHT@B)Hivy
zt5{h)t+Y{_02iB5qT^if{|^Q{$z`vnsIwX(226?!j(z}fhuvl`x@g1e=oo~)-`sT3
zv)cEeu~GULS^E+tXp%U2RwBz^T4%!41hnwK_KcRLYo^)=V_A%a_R+eaa)Hla3WF2|
zEy0e!j-gl=2J6c5DJTbljH#LDg~trDi{K*TUmHPO@;``0pME3YTXd%#+q)Vc)&ltO
zduU*<(kGSr*4tk+S{9=Lp;1M}Q8$ix)lk)*Tn3z6KF!_toaB9XpXNjNoZx}`*0}lB
z0okb{oPFmr@C~(@gBXmrVeO+He_(ObjOL)EIxKMe7HObZI-)qegWkQ&&;MsX%`JDG
z<-h#v|AOj;LyB8hsk|KL{TyH3eGR~yCHx)h{9o-h;RKk^&v39c<$dpafKPn?U*_u7
znx>9!YTCP>$XL@he%|!_|F!i%SLr4%*M#C)iL`$Bd8TBgV)D=!m|#SRAv6fy!psQ!
zjc|1zp5M2OUV^oOvbof-vFTYqQS$xw-OBfW<W7*9i&yq|<ZD;?qt9LBOJBUsbI)An
z+O+{DUuHO7ryQ+gV<L}FQ=KXzU7Dfv0$lKliG)C@6gLAu6%MY!^%s<rcZTG+)w4o%
z7|rh;I0<1mz7DS|D^m_nL;y@w0YJOE50hnt;H{9^=(BHwRMEL;xYP357PAdhZZI;7
zT!gkB#<fE#_@);MWTFzzM2~*cLj!Ci|CtzA)7zVbLTP$UfOKIt$@VrSK{hUU2AD!H
z1298DMj`2Lv}PEe^enGOCx~3R@~p7`0_Z#{O`52B^NPe6T=hN@H+@Ukqu&7ZKK<G@
z1uhcz!ZpeMBr^R&;}hN_=RNcJoauB<HJeiy%gL2x?z-h9A9~L@K6?K-?z?-HGv|h6
zOF-6uHh6K=^%QX)F%D}X_ZfbY(Hv$>ujN!*1@pa<sxI)hM1~eS6l@`Z;P_(AV0%t|
z|1KZ-*$?vn{GST`k3auw$jfs$Klm0+z_HH%^{z$xGC(<A0UX2r-`#!x8-e}bihX}q
zF^c&)4lmc-efN9#!5{eRT)EbS9cDDt3Bfbk5zcK7Lhsw1wj{N_A9~n@r^4VHa0Y4v
zW+K>JDMAE%bjk~^caA81OEK{%Q-s}_aHT3(-dC1iP?ieM+DgO9rsvGbRnC2KgCG5|
zdtg@a)Jwa3=}#~5**|%iFMaJ9UVIsvW=t_U&3N@JgYghC1>TvK3n1z{UA31G7F2_&
z1v6LNM6e@e>mrmJ%F<?l(pN4(eJJ>7(&GU)3wM(bXm|Zti~?2@NPzu!#z;^GxR@7^
z0(QI)_Pwpmye2E%UcocHX*Z_Ir3`?e0FeGNKX40T5}=9Xz-0Yv%?-t$PJt=X5dt+T
z5mG~g={N!E`=&tgDHakGh@;R1WJ|(u4F(&YwbP*~u~yl?4qH!w%oH~dDhuCea2s^e
z7W<UBpc<rr-S{74skL9^6JNl^+eOYw%1S_RUYXCQ%;z&)0|T3LW^I+b@4S`w-LcMt
z_nzWCw=Z+y)Bsj(JpK)hOsUjkoR4Nt7UM1Mu%zC}IocjDJ1m(`bE;`h(+Fw|QVM28
zD3=W7s*nvkeoAc$)R&Y`HdM2HKJcRt@PGSf!himke~rP#itNHFlZIDa2mD#@``-xc
z|7Q37Z)~`FwN=OQ3gGziF1Vz9XkMM=@UrLD+i&GZKlL}*-geAq9x*0Z-KGdy4LjYW
zHMdr}-1*jdZ!sKAqbA*?-D?u=`8dfM@QvW+ikU`apb%^USrHlnv7z7@ghs;eIF!o6
zz6yDhF`Q*AZ^P>I%F4ho8Y!c-j5|-A;?BQxnxFs0_p`S<;fcqu@P$9U!WTcg%hw;-
z;@Z_QraZ-H<qV_MljMUk?yU)_ei{)1jiEeskOkVQATzlB5|qo3moQv0ES(GCFrpG<
zZ-j|E8wF>-T%fUnkB)hru}<8dn{X1c5*+`;5hwqU74M0Yu#F@`pVR;njct;5LVRpV
zyMAdil*EGCATc!3N&b?1vWY4HE5WMRbon%$xFA{#r)EOBWTIH~V-t{Kf1@1H4q~M6
z0PI*9YzV^*SUY3L3y(-Z%r8GF_(M-KjoAWCFT24@boz^yzuv{y9rqv_%zGA!zJ{NR
zc&v#&0IJlDV>;VqHlLuiW1Jh#u8z3-u5&zi-#I>T?-|~6*BYlzW>7YuHB=Q%Gs905
zQwUjULL)b`)JFp*`#H12A=9IhqoX0SSrLMwGLRgk42_R1L(`iT(TZ7MKJP+-jDY4I
zlVuby4w%>1`OuHu#ozhwevH5KOaGFUa)3QE;$ZGxAz(PZ9ADmbPJqWc|JOJDizsDv
znu9BF_S`9c^56TL?C-&B;^Q<VVMXe-HF8aQXwl%hW;3D7NAJw~5{p_|<(;%y>TO=H
zMv@$1I&}`3IuHoO21#6&he+P61d|5_yZSJxH4r@rl&Qc$16LbiILTPrftAaim1jMJ
zLBrCzXLYmSq5CfI&_`~D|7gy|i~D^2YukL`Pj>k7mtN%gmn?gFf^y{?!;RDAD`UvQ
zi5XldJ{tD=ZVsjrW_z&rvU1|~;5jfl<(VGE-G38U{Zc9UNMZ<(Aybcw=7z1Y4&A>c
zhVUeJJ&kU0YGd$E%#s(PkG$)$=!sUx8u#NV^)JEnt)?%o0VGbpCjC3E224aLI?y0I
zfQb%&CV4DMmlM#&Fth{#?Gy%48DPs`c4S9Nu^JT>r(m$+W1|I^o`q>5{Z)diHCP|J
zsPORMUGUTunrIT`V&qV8?+dAnp^6%UjKRA(^Vu$LKBe(Bjv3>u;`X%x_uqU658Znc
z58S)S9cRa^tr{45paLe;9++yko{=2phWT~N;a<Vf{(!@SA(L6jyv{=~v=yWPQ-;s6
z$t9u#(nTcK!E{O;_?Q<!%nL9;kqg72XK8F0y)dSlZ}F*Lc!2-x`jr3rKm9#U=NWFZ
zVA5*>j&=U8AL*686QCS70LPbi^yD8-{CU03(Pd?Ab;M8n$S<?ES8}*tqhe4OWLSYC
zr3>c{G1^AXdKZjwY&4|lOU}|pO++z?X>T-2<HGcxkV|zP>fQv6Ax(^`wG*W%G@t^d
zkjGVlvqGa_RcSm_v0xpEvS;9$3L|G3PAtm@uyR=$6*a?A!(drBcWRY$Keoz`{pCBE
zR}Ig7<2rx($Cvs1AAgM}9)qjTuHl!@P@F!+@Z>7lAjg&<)<Lc44EzxGu0k<}@oA4(
z7@dM@B4mx?445M!AA%_Y@ykS5T#^SsS1-fsm1qEDB4IF7yh>OD#F$`Xw0$#;4V72p
z@i!3#FmdG~Cc*RxqVMtn+K?YK+VjWaFA^LIC1%spB@UW4r=jBt^b-gJFCfJQYb&sD
zfE194r&u%OYf8DH4A(-VnOou7ML4_+ejfN1E>8c{5_U!nsB`i2+0c>$e1oXNh{0qz
zk||AHGoMa4IM}9|yhNUDbN)=h*;_ZcZTT!8yW<S+zx@<9pBXV;&tOTwR4}h->M2Y-
zCRdCx<i_A#Nj)vt+b=lSDcIjBIoL0lR+d@?3PB1*27=9_sggB8cA3SGw^OtV84@lf
z2fFBK;AopME8%z)nNl6V)OyB+Wqof0sdxBG|M4d|+->;({8xX>$$W$9K#q+8k1y{|
zC%`{@o&Wa=;jd%8TffZoYRPaU{LGL4GSzI%-a&<`2?{FT?OD6czO?&iK_Y8Dkkd2^
zC%p9dqRAwt)8&iym}<$EH9mkxk?6&rlI;T9J)9t219lEJt_f@rrmB1pngVA7i$6Hm
z#UwfdRcZ(v*r`y?3YHIYR<~gMqGvR&8LTx7PQyKSpX8p8oa3+kZ)>(*I^r8&+UARY
zaEUK`@o8TCTFL(CG=p2tv3$!4c9dg=;n~k;j;qfpn^~A>%Ozpyv@&VJK3fQlg0b5A
z17xuX+gN-}bgs3Dq3=Q=_BPlBJ0DDZyr;cS4Muddy?~ERSo9MJ{K9A*oGgHiM)y8x
z8vxq0KWUACOq2nJpM|DERAOv>G#!%OY9J~o1xcZe?R}=TK;?llyl3T#lCQ(ki7u<)
za2Kw>WYC$%SAuUeI4m}S13>M=l<X9B4sjl^7+YYh;^tH42ir^!ujA&s42n7D&RFjK
z=nC)uz=yd117~^Q{tIlJ9z$c`*(rQ=4|lka(<xfH;C+xm=5p$Z<#3WS*(*4h4B4Lz
zn9M9wXQ)CVao|7<f^k!pfhjCDkC_rlnc)<j3BK_(6}Y)X)k0_76zzy22PF7J_^1eR
zCX!00ikoJv&zGUN%HQ}eew4%gBmVop`v_}yud!RS1d&%cC(65k@b~)n{@)sDJ#GNL
zx0-@uo&UFOY($jIFVkFIC$pZP_=&#-a*FNU3d9B;)dH8QZ;le}WPLZen}|MFRrIyb
z<LzT^d`HL%diBo1tYxe9(CbiGl6oMW9MvmcZ3x?Gz*!BjdL}f}NFGcGK@m^~uZr`L
z$Yz8hPS;a`L*Tj>N|!OJvWN~imY-@US1Yphnv<IupZu9~eDddSX1-JL>{qYzmCqdT
zwJ$!-GhYy{xG|jHpuBg5{Ej93&~UH^`PgBNGF$~_N@Ic=px#qlCO98sc$3Ypbgl|1
z(J$=RV+x;(#yu_+%H;lMd&<8=&Qr5!SQ83y57LYidMXAT+dt(1gy&;ZW75kSFw&(n
zCadADcm;I8n9dncOiV*W@Dh+3r;3b(YzgueSUM>b!-)FKVCw~FjzW>td8eq*#)mK@
zA54|90&>Zy-Hh4(WsY`VrkP%1TpV%sY{q>b-Qb}Q-@}6sp5@N>oMh$HI6R1RP}O)h
zN3Ejo1-)|v_wW#&nPAm(u%}E83-%9lcJ~YRXO>wb)JO<oO47+(Vwz+0J0Q3n;zNdn
zZvt_&iBrCMAJ!PYmsu&=EBq!{2}g7&BsK;Ds+SN9r8a!o{O*90UsEKz!hiDr_-VFY
z-sji<=?kphx5mDWX`XVd^M75%UyhA{jxX;5*gw-1+|@PIRs86W{7uT@X0BfglfU;q
zkn=n}Mtlso={x@=BN`1G*R=m_no#_+e9=F>CI2O}y)JPDjm0I{_{Qn76}HC$7ajE4
zxLJ(}ehD3Lik(Y}mM1Ucs-Otdw2RsF#u2^u17gsKG6nV<*m9O}Wm!Ea8E<(;MNK)H
zW7izz8R6bPcaD31Jmaq%)NDO_#N(ge=BvN+EMNbvii>_g^WM|&{impxR~Xz1g~Gsk
z4k}OWglrj_JWR=X^8QE2ddEm&k@lvuR}QZ)z{2W7;E=SAcG|8EywlcCfX?u+v%Qae
zfdu`heSebv(X;zaO_Pbw)3!rp-zTr<I2bJmTcknKXC|Z?IuU9Ua|BjF#*nWC-+x6h
z4t8FK`JU2Dz)u3#4sXLWTmTJJbH{Y=8k6f6X%1ha<T|G}Dt_PxR{8Kp@8bI&y1+g6
zo@9A*7|wbQm{io)Ct($lM+<3HY_0fdNCnP6xXSKe#25dOGVul{L4xWfSTU>ZJPpK}
z&P*xxvAzP=_~203#D>*Jj!SHx4FMuCkv}7m`yq)>u@J5lZ|iBvvYN%lAs+bM{UMuQ
zR;0MjfAtT3j;k;JW4`#=9X8&x!M5|q9s$RfcX|WxcGCI3St-hQ7WPlYz%oL&H>s;V
zKJ|mYz{c7gT)#F))pkT_?>nnhq5(}Z_emOgG12Vi1}I;k(Xh|8Ijwn$m`Dhe<k_yB
z(^`U*=^F|KC%i7$N82egCG7cFbZQNahmBG;YoMtFdlZ|20c52HD_#?bjZRyt7}h9_
zhN#+Fg(Fo;4})3Bc)w(P)iZpdq1>p*H>Q{qmXqg4ocs@l{JH<&472ABc=j{9eB+N_
z;+fxkf#?6t5_|WqQhxs?>+f4d@5nj02-ysZ%waqfJr}|hY0wpgG?|Azy2MO?B+)ZI
zc<M(Rn^1#%APuT^1zLO4dJ75nl9E&MUuw=0jNcy|ZJOp2n?pMkz(^MnXrx0Lk`a&+
zLyb~cP|W=)SHP|c!}Ulebjt1(IJzFz`HDp{D01*K$HDbI4qv`Zb^S7VwZqBHIe+fM
zV?O$^(|q8A_jBuACs{ceVT8)TyrDUmgwI(dHrmp37Ql1RDwqmcFHx#lv-V!g+9w+x
z`88$rL@+~YU7;jJNK0Hl2+Y%j9|(%RNmk80r$q7Xags#ri|@UWFxi`QtYWj4^*i>Y
zc!<uCPK3D&ZL#r!X~wL5u4Xux@?Zb6zrwHl=s)7pGZRkSxx%%k=9|j`z8i$Ux4{1V
zJEHS{EtCJT4Dfr02XL(Oe@(C1NRHh;$>HH1AOGmjaQ@r}+1jdb&PD??ZDId3jrYCK
zeV;%O*+#m+`qy?}>@|kyWP!+}UXwp;FS#%J1$bR>j!S%l6m6Sihe>77bt8g{oWejN
z48^Q5Vb`8zfzQ=c(RiqUqEw2ZU~+IO%sq$~EJ`DRncX1Nz)WC*a^QvhFsGd4EL~AX
z15Y`2<m(Nb^bAfdbKftmbKfr+xO&K?&usI|?_cD(fBqs{|2U^Uw}yGo8S+~<SX$3H
zw;Tr3quPbSoeX*6F|j5bGqI5v8Qu9pF#w-+-V9AIsJ0#T=|XB!W7bMHV<R9*yB~Fg
z(nkEo_b|fJA<{N7`QwzT-8%saIZ7t9(n*c?l?($UQzQqUhxf(}L&UTggBW2xwbXNE
zSb*+2_MY5k@3G6&7q3vbJuaLTKJmUK-v8h__kZ9X?znS<mDOSJ(6522rrDjNs;#k+
zDYD2q)Ij1-xdAS^G#U#=@dJS}euE~C5B#v<*{^vnzhqciiJw~xQE-5Zeh{wlZNn_u
zSq4j5VI^cn48G^0s7XN)GnR$L&?Y2&E?aBu*pMZDtXF6>G=av&b;H&w{NXOEKV9;7
z|Hr?|-}>Y~V*30cE4L2WuYLEOJ=XcZ#`CQnBLK&jcc8`Z?j}cjd%XYtALPzke}Jv4
z6-^UPHog~m+8U@x7n-8|(wyXHksIDOo>Ns^I~@jzlX}Q=(<%fKgxT({NiKtZ%+j}e
zOmW)z2}v-|N%c;m+g=NC$DM&Ral*5L&4N@hCHqx}kQD(D$On)OXo(Eo3AHMj20#7^
zWfrHh%nSPthLvGBF$}jeMla?JmmOxafm0qiIpXZkjye0Y=lS?i&E&B?F8;4OJo%Zg
z@$?@UcFvyR;_eB~d~B7qTL-B&1wvayRC1uOg5-)z>zK#|@HY4<cq4eDSS3uQboRsD
zo+a@CqE~<779`K*6p<5)X5b`r6RJet|JL@oSKRxCdlsP-aH2Gk=^yq6@l+cTjE2C6
zVBJujGAs{;`dY(_pFiU2pYCw*_%?QXms3keJa|vR`+s(m4}SO_?z(T2<r8Iqld4$o
z59jD%$Z9Z|U`iWofn5x4Y6z9GHmyg3SOWB71ye}3*YMyfWxgLQh(G)zmVfm>z-$h6
zBe*6q^?f8CMrmx?baVzzw8TiF7iOCDmFVFRk8#R$SV&PcQM#G9Grsd_@X=XP1hfgq
zHlPg3zJgp?L4R|fTmSM2{_B7Gm-tVA=ASUWxK4h0NbO%4a(H|>UIDy=34h;xo&TFA
z{JjC#|Fym5P;u?SDJHuWcisH}54`86+1jd@Hz_VvyZwAG5Jgjf4*kKqPcrKYb{mfx
z|Ly5HtGR#(WLbdQHA46j$5fThH82&bPD9u${>Tmc?I??rj_}k56G`f0LTs;8N}dOT
zVrG@bE3;`pEAj$H%TSI8ay!D#y>W359(S|WLm|T4!ckD>Q8s}@I6TN1U2>Eohuvu4
zEO2Vf=z}ZV`N6Z?IX$9&e3z?Vyv|d<dx;nRvEk_K3d<im&E^lRlijz(DDIi7#!;u$
zN=yy(PVqLZExg7ZvZnf#Y?p&7qvcXaH}NM{1<9*Fp#rUse+S)*bX)*>MNayNc<kgH
zT|R&@UGkuJ;d%JXP%c?EHeh26Te}ShFYa^kcegow?2zi>gp=0t(YtdV{KXOP|L|Gv
zzITPu`XHROrognO-kt}gLMB0`SlY0L@B&qm(h1a|SSEKuY+&dcOK@O{<Fu>7uD+>Y
zK8Jb^M+YIVV)HDVz1j2B*Muw=Toa9zlBbY%4OYKd>aW`RygOA{D8SmKXe~6Z>a}eG
z!b(6}3vLq?7A`h<4yd#X<=U?-a&Z;@^$s8T+1vQP{=a{c|NKAvb=K?|+-8pNJ6nF&
z2!C$?_Wv^>{K;_xaD3q%O8SFrdW!k3<)&M2;UgdVYh1rpGn@MbIDWD0N^e?7%|Q&I
z=@nn?Hw@C*|E8cArI%UmmAVG<C}B%`&lYizg-3lQDkrV^Oq)dzPn7tUI^RB*)HtX{
zf}2FSxDy)dqajc5A*g)tU7zeJ<v=I~P?X?v39NNZ3Ob=SO6`Tb3C+RW!o)#27Y0qn
zXr_z~l;M^m->C7M6}qahwuJq@lbrv)J30SLJ5-Oo%*(%fm8bvpOT7G#GG4yv0w+Fk
znhT#=XZ_v*qXEo-!vjY%PsTurai(nqv)FFJRIe?$vZGP<oEjI#)d+f+j&qQ>0&V<n
zd`}f6i|q6SM<<!46QOoW-GpMC8OTN!MzLv{I(Dxf@Z=xt@%$IJdGYJJl#TG<J!3xn
z@l785*adFCXUzCi8J^d~<7bX~XCB`E%tT_RZHpjIgC{@}wDZBDI+9XtaM`nc%VQ6<
zgZe<Js!;5!8mdNUyfUw#s)V`@jbFYl-2Ohp!(VXZPFgPvlgOI=&%E#46B9{Rv~Pjk
z!_HE38aW$2dM#+*E?Wb?M)5(88{fTz3W)DX3vB>IOl+w4u-KPY;J2^y<A3!-y!6Z!
z{@#D{r<@y{WpBv_H%U2W1s)>+?>HdfSm*!Eiho{hGQDQlSYPE6AO7p??FrMV>tO!=
zY?6HXUjfIzDy|TV{SAdaviTQMX(Gc+Q0iLnUdXe~7Fe`9QMRyudIY6sA8Zz0-z!)H
z+L7tBM_fzQ&_{?}HSBhMgu`t{FmGv;$q`JCVj(M(a-`&g=-_AK$=E5iLWa;7CG&xZ
zSSids96DiGTSimEXiLe;20N<Z<UamHhORA>zyDrtd*AKc_N&{>p4jKw7xsAW3s-pJ
zcZc}1tBgOi!t(c@AisSX8HEJG>cHdc2sKAefb>T6WQFhJZaBFLrk#I#v`n`?N&9_c
zQhH!?0hAsourK+G7S1jm)&jC+%kl_@70j<Wu0OuZ)1TSqg|F;0y;!j>!fiL@{P_Dv
zeBhVv<GmkTW%)!Ap3t;`Lr=3+#U#PN*RXl;*f$ztnW-bmt|8en2E@YvMVRhwmbxAd
zZj#eb+-Gx`R!}#w5oo}<FxfXQxK6q{Nmt>;mzA|s!rDn;>xHl;YGatw)KBMwV52=Y
zzC*AU=gu2H%hFL>wf}hzstM`ga9+W9ZP#3#TU6M!2tuU+%~6FNa?G<Um_OX+SN;z_
z#<S1w@tgnbc~0MdifbvwQI2)~ukH2%tR6Q2Z@a?Z63*XFI{!CI_<JL;|F>umjF8nU
z%ytS!<BU)JxxdL|GUV`Z8VO`^A0N(I3vheSt-mD%Ci$24cKxp;0Q637lI}mA>U<aI
z<C;*YG8?i4G|Kzh+xegy7wK}_HImZ$nI|n2n<jm;m`aqMiwBJF(IJdR8(!`9u}(0V
zV&ija6q>0ppLDXqa-@`lut(O|K=}shsGYBEXbf^Mp{~`!XbJ<d<ffq9a+E6-`T7LE
z>hbG2te<7@;H_MEu;Rk6?o&T`jVph&&GUcoGB5rQp2PK${Noo``Q$lP?^uQvOMM9Q
zy<l^jWs%rsLSy1d#koUwjP&0hI;X}qe?VIlpj`*FDuLKoxbU-~71r}GnKr=D;hdvK
zj(Fk^wz&K!m$~-X6n9{F;K3z+@#ClY_@_>A_Z=g~E2c9oaGqwr4xb4^OtMMchDzMs
z2N__S{+F6O33&>VMMT8J*X%=nz`PC<{&XIS|GWtWzj4qsife*tmG@!V_bxR}T@So<
z6^a6Gx(_Zs<;n8EBOt96R5}<x`b~%riVgMQIrR>4aC~gvf)wX0G1@tz2XU1ZR5Kop
zsu|<s?bDyqTgRBN66&jJm<zi)gonWlkN7|Ty}!iEFZ@Hk`uWRj+;@h3d9~jDJ45(;
zW3d05S5v)t*#DhJ20UH?yvr`e7r31vMk{{gV}BcKHrU#qMwY*Ci)Ucr`}VBAu&dO?
zFT}#KK)WKC=z!Xu;b|*LDDFZ26dVEL#OeZ+?ww+@gw#sQUVnvtQF~v<q*RbZZi_)f
zkyYqpm<?^iAf4}kNZX9Kh#HvK&=?;`S}v*xtPNUk=RhY)HHC={N`k>S5XSN>*dT|-
z#!w4nqGSf<D$Ko70HuX|YANRfhC803XvkOQm=k;WQ#rakfbj<TT_?D3*Nh9lu*Ll0
zYh3-kEuQ|&6Fl`lKf_ZeR~dceBxir{3~RTnVie|kzHPLc-hk+(bA)eK1lk2NVLAzB
zYRpX3yE}X!%X=ZWmZc?F15N<d#PQ-YyZp)LuJI@T%S9gl(si0G<)+b)`|n!e!B5@B
zd+*-l_PbZeRxPq2lq&{bS2Qz%7k(Z|c&Ur1;;z35&4EUHJ&8?P*d+wQAJN#TQ3(@$
z9j@~lX0=jP0p@R--qm$p3f_h04^_Mm91^eTa~V}6HC(--oVi07tcFI=SZ!s1LG5DN
z=xCpu9DTRM^1YRsXrH7S3x85mXh()MDMZOgi>x_Knbbk4;!S9l)YI`2Y)9Z#3x{(>
z7+}8aSspk1-M|0y{MDcQ@7RBCm!&(_ICR{g3^=~PyT&T-dzZ?7^UXiC?#$q6BW8VJ
z{5#h9_lm9}WXSd=)!~#+e&iRqaQ-1)zB-KrqL{+h61;SwV7JCGUR##8yb7S10!!$n
z|A|P)7*B*ek)Gj6-#t*;y{HIeS=78o#(JkO?@I)wb*D>MgC^-(@+UAoxH@?a*eI8Z
z+=KQpA_LCGvvjb#?Hu%MG!?QY6o9^Cp0PnApXX4Hg~1r|GE8tr1KBY*@lOdWg~AdT
z{-Tr?2Dwre4aKO&ZZyam=yC=tIXWzYB#;Uw6Xs7|;ki$5@%cZT@TX7AnV%c;eLsIM
zANt9&*gRwFvJ3n0M8H#N{Svz47t|h_I20+uS3)viRtWjXQjP;5QWUD)85f`0<<ZY>
z@r^HR@$4fr+`e#bx!~UOBR=@v4Ia98lbbJ$C`Vbq*e8zpT=5uYGvP=Kt3PO2z8TyU
z#F#MQPebvSH04LsK~urEX_F*0s#Gqp@<YMbFzq)&-6&0j_nSJ(^diLXTp-S=@4}Hn
zq9ASI??S3#(-=c|ZoN(T^6xY}@mUxwC5C@||HZU)SLmxJIufNZ(mMS~?{`c}Xl!W;
z;c?Sv+ejA)Ezyw4#u#a10&0~-Yi4UgYGjB|CWL1hr7+6+NLX4vVC}~;zV_71{PHjS
zQ_AIKIJ3;$E3ahTyqk3X-*WO-Be{5Ob_!?i_@l4?Z+7C+OphCY;|Abu-T;8zJH>o=
z&iCE_L)?4UPjlt^G<fxEGWb~>^CeaZ?aRG-JOJ$#cWvc@-3nkKflLy|Ocok|7P^#P
z;&y9>6CLMlIO&<5vm8A}b$jCMGp$9U9825AV(}<x%W&`S!j0)Rt<rNcl-^0WFN?ET
zxTa}e46SXik<cvUB^1Me43q`rc{(|VAvTNt|CvBxV3-MoKw*?Y;V1?*dFhcA4<{8}
z%V24MWO?v9sCVGf9$R0W^4Z_I#&7+>gx&RmANX6h@PVJYot-_Xj~epKv{R!hJ=3MA
zBX^+@5F?a>jC=&;IEE-4Ou6#(Hedgf>wNtWuJY28+vvn{W_8T{cQ5ntdr$J<J)7Kq
zehHSd@ID<ln!3S@4{L?Aj<JDFIJuJX_2&$?{|({vZQ!>A>ZGx!%_m4%!y!sosJ#ZV
z-dvbh%DfIl(%J<Wzi|=@e{2BKYRUT$P?e_S)T{akPKABG#;gmv&$M(Dec!-^3&Q-s
z^E>~@Qx=Ba$9usvDSaN(=eFMr7_<0$R#<cZ>}4sW`?al6P*?DiHFF?mrovB*Y$k>{
z1!8Mz0tTU%WW2V|`p=H}_22jk|Hc3AH#u>3h3Up9_zfI40Pl(hAbaOP8E;pkpEq0h
z-`w6`<4({Xtufo4bMsAibMGBL&DQpuriu0=+PTB^R+ybbTuWAx_Rlo&bpIdGgBv)0
z?S3}4Wu8UzlfDnINPt~UZ%^%2kVesHfop6e`geUmyXs7nlOnAgt=;$cwb`u}E^-i}
zyRbx~BI)hLrM<7tPp9Q17|=Qt6=?!gZnKCOm?+C~N^>O4CbZJR;gT{MLoo=AjYDW$
znDlDG#9G+kIykQ~ipEk-JjK3}U2CvwbIgfDI9=lNGDO<uB^zf7e)!Ly=GJ>F{`tRt
ziGT3F|6^|XpT5rD{J;DVE9X|Ib{g`+;JxBBL<M^vrr|t?<)w^b7>?!s?v%&Bbd9fl
z?s>lcg)3}5RZ+}J?$})6!}qT8pZu*`xc}x&&TS6K^JuQqI2z~i2lJpFu%0Xnp8_|B
z>7ix+(6TeP?AF50RJgbUU;6u=U-`dV@+I&)0owO*;@7BkZyKm-2@`%3;P`p1-IU+%
z@Z)Rpp$P~OzqEy3d&NEV89si1)VJEx*dX+MsyqJ3?v8TqykY&kvio9atDmOS007%p
zNkl<Z@U+)R8Cm4N_*l3Tbf5lTOl!c{#$$Ksn$pQF(``|VChecJ$Vm8iYE+`Fa|~Q^
z(ag%VD4<X^u;&%sULyN<hy2V>J;;*}U*W&~`(NN>ZkR3&TPfmqrtrW1z5kmf{JpWg
z|7*=eIOYI+4*(kPHl05$bZ_b<rq?_xt4loe{=dfdeoa+3y^!|B23F}<$@Dw}LMD5H
zL*s7L$K7#sjnh6<(7U-x9}!4}R#>q5je39I+NE~VHAzsd53KH#DyNc8p4v(RrKeoz
z3<WwxgJ@4?n9y3ItuA{}(xB~gGjRfKR}ImIO`{CUd+<#n4aSUnkv0^`Iq-9#sbIFR
z<fT#!U@+E*421h|(RHvfFmp<7gu)m~4_RdyO*2M&4%J=EQpV2LJkNe+&dX20i@W<=
zX@n}<;QQ`>FQ5IB&+vDC?w{~~`UiiJ_k8RuS1#6AWAILCRLMsf>&u|?nirnj;!B^o
z$RnS-#50dwXTCS%{L+Yz-+h)({QL#p|Ij8k-Lw>l3v-2ik83=Y&co+y09k@eJXABo
z^?k$j9pTE3;o6a5rxuQU2(W34{{Pwg^CwHP?9LDSoO|8<EwM-BURg_TRlT9QF#rYt
zXVJ`nGaL+|k&GgZG|D7OKgcMPWc)$D&`f`TOh!rbgBBA-6G@5UGK38WGsFmESct}8
zX`s8&-Kec=&wY=`*yC;Pevf{**RNlHk=2z|S>0V#{T#^7sK|KnHh+H3`JV4Wwq&?-
zOZfeN?D*Ax+b}zZY8syZH0<&#rK~-qKdZcAq^ulO<%x||<zL&n4k`|9VEuIBSO0aw
zuJ?pH*K$X6?%%ab8kLYYaXj+2yU%^a@aI=u44G<+c^i$aiAKdWzEaKa4#<NuE#T2K
z&CY2&-%R+tG<+D}Wdx%vq_qPK>W4b~-YVEx2dhq>nIP(;vIT0j$em@(AD{5Q{a^o0
ze(=g|zWL2NoPFT}qbzGbtUr}H|3}?k7aV|(>k7b`!Mk#51+ZuUj4P<_uc7sfzxTKP
zJxultdj}`cGB%mr>C)p)83y_Ssc8_;=^v6{gc2JB^~NQU^{=hhJsmss^ggA9PF0X5
zwl;y~ZRQJYbD!Z-7<dA0R4s{;pp~t)`uE0_O`;dRZzPO#A@UT`jS{$Y?GUH_W)<L7
z16kO?(pc$+pS2CIK^<Z}Phc>F!4mWbUJjWVFVD)XCl%(#Hv=1@Y<+DEJ;NLS<%rk5
zy~pmPWQrn1pL^qy>-UeToJEFk_2w1!#s~Z#|LecY7k}v~Zrt&C41*rrc>O+q@Ebqi
z2Y+zH?7rdLMvpIETH)(2tnrIqKf|-ntawP@0<NN}T=c0IQLH*&X{Lth*f2Ua?4MY6
zjttw!us;$Gr^<*B;3thOa5(eA>v*_V^S}EK3|54_9fMOS>zY~V_4ZZpizvhNUxhus
zYov#o$Q_$~erN=meZF&TTyZqH3e5@$8M0lGBt96Xb@OvIoH^@NhX37vR-+ToO)x<|
z=_9Jz_Su?t#boDG7NZNJFYqSu6EGy}03lfmgcXvcvP_NZfUMyLG$c;rR|Yn$)J!mu
zvH}AOt9i-ApDWp4KjPo~xBp{~4uz%9o@Jyz%|<_uYyeawTdV*+e#aV~GQ80F&&Pbq
z;VQGql)wH<{|3YUGu(T464~#q*G^lYBLS$x1P<`1XzQrQY4yLPUnkSO%((+L^1jZ-
zATd3O(|mN8(<I8=|DL)E4T){o>`l>5+-^hUuV`Cv60Km25NcKe;w0*}o$;sx2DA<r
zYSSVCn8X2*0HHu$zhK9!{^IP^@4MCcpdMETm%6Yv@TqgHoY6R#O`w`7qhq1hcb+dW
z5c&g860Dt48o@Z>{0rdhkU#wgd%XN-4>_@8dV`$7$`Y^ayv?_-eVd0zx2dTy<_ueF
zpNFaP@Bh#K8UOx2_#0gK>P2>MpYSjK(X0IKKYW98gNyuIfA25x-~Y9XJpJsz2j?7B
z-XlSvwiOh<*k`@)8jpo?-*T`62M5B#v1NBG9F)SbDx(sn&Z7*K3DdZS)k9#syKpWP
z77q4>-~Y{uzw!5S_KsYX%+=1b_a~D8=R2ZY&&%}MLLMi5r9FR0VSk5nEnFU*CmR(6
z?LJ9qn*_llT_mffg9Es9Q8@Pu+<MJhG&^kxv<`_$iY_2b(JDDnoHX7RrfwUfCh$pv
zw*X39iy@6Ia6`zE<hr1pglCnICKwPjXT58s4NZ{?vCOW{(C<2)``cUmAO83M8vpbE
z#eYHX{t@}bHA+{vjr~tl=l_KJ{tp5B%fbop(*$t*bm;uk!ktexIoTic+;cz6<x9WB
zgPjrc^Ls;ri&CTn>57F~qF|0h1DLD_On2{}O!hiQ2%LYc+L1#gjYCuT6Slgam|Hf#
z)*cSEwp|HGaxsi%L?&q-gbp`Aq+JncDC9oNIJ_n`(ZtAv0G@C?Pf!er-tkT}x*=+q
z20hQfU(7R`NGh8mWD*jjgW1Hd3C3gS^_1a?w<NYDTz+2Ztyq5V|9-%?{^ULt$1Jl%
z>4bms(m&+o8?VsMR$1zwqn9sZZ9!ensP%+{`v?4c|Mq{#*>h`5j+JUu@C#r3C7yr!
z^X%>S`NQ8U`Q;Z2KKpejFDvFKFwDh4CDezO@k8Nw*RXpCJ4c3{F&sMYPFRZHQ<oZ2
z6oWgR2A9Bwc;|v5p{_kFKUK&x;g7!I_)CA?;nXl4d-7*hE0YtLg}@yR4TN)z_kMd`
zcH#TRF1I14hQvPCrX;GQvet%ts4>?fwX~?`Y>%fCWil1cf6j38wK@X$t%l#V-^0sY
zW0JN@6aeva)>>7YaPBpYW_rSyM#|}0$skD@X0TI8t_9NZ%4p1<OyU{{a5U|4^A9Kd
z;@^3J|JA?ySNT8v-~NbamMqoEFj=9=Pl?X|{g4i`XaE++$NR8uiP=Nw^_TeBFaB%n
zA6AsLV#Lu{j5g%AhB4nI4{9gKM^AlDv_%Y56AR!@0#KZ~ALY>3UZbQFEJI?1(q7!X
z#Hzh*v-vk@1;#kA9{N=6Tr<5CFiAbrx#pxn1w_*(B;iAZ8#vS(2bsp3E#%@gvB#16
zpfRCMLa!CQ1j5T=YxPKgZ6jh;6@mec&4jG>Y<EsPe0}~IID66Z?cX})55Bd-xZY<;
z21vipKYZi=$*cFj&C|=j!20rwoH_e5JbURgyl{D)7oG)m$K1SggLiM-=EnUIdnb;)
z<C?c_y~{f{-{9%Zuk$B5<TrmS=YRYw&+zyDC#%%?jPb5e%`BrM;c&;Wy{&AI;J8+%
zR;jF?ENk^?bxxJiwO`k??EA)Kr>-=z@>LaeN}db%Zdl%W)$y4x8;<YzNqstovJ`6P
z+5Jtib}lic4k0}0I!j$r{6lxCk>IDvIo>t9YTm!}TyB0|lBi<^jt(4KmxbQCQlF^z
z1W49pwYrW<#zaDDP^N_YHqp<*BSTJHSe-QvjS{7|v3Q3j)CIzy4P?WnHfge>li;}_
z>Mf3~k?5AF;iR<|9v=2E-<a~h`PYAiKl#pEeD}}qaOs8Tx_p4eu|NPmsgwUtLgx3R
z`~D9D`vbVc0psaD|I#n~I~4f}`$s3yGrbKdNeF!j>8?ZGoAVOr$omp&b4`kU%n20f
z`2Tb-BJ#+G-azuwToBQuplhN<48<T=`9<kgkV6^MA{Ss<heMfTSxcI6pviimMMjzs
zodySKRs~(YL`arvVBcUu<Ps93N!15o+BeRdw1{oIY&5dIRlK~guKeRZcP``gKb`V>
zzp>5n>;Tb>VX?{Y-ulP9_TbOBxco)>{R?cI|1zI_@n<=|<`@oY$l<FOm-*Gd{bgAD
zGSywU@fQ5?TND1pE8BeY<=^6+{eR4t&i@^b>t+7IKY1Nl`wGAIZ!U9huV&|=FshW@
zk#Yn~dY*7ssfYNTdWXb15Exx8e)@M_HdmKHTIYO*LNkdsMb<h0o@bfiPrp&}#h)z@
zYGxB*HuY<OCSun$(|w%aTl1SnKB!694iOC?`X98glu6{P?K$sG8D6#47OLLeQ4mg!
zmCY^T+|!1eFFT51aQ{nT_~e(U`qh%@SZjBYv4lzE3AX_@F;?c|HT`ETI0e=wG>|T+
zX##-|=RXS?(1S)XlNl)0r#h;F%zPl$ox2&UZ)E%j|L(uVuf6^cIJmV<|G7)lq95&A
zRDRt1{*MCo|MYc0hQ;yedsC}E#|QhIJ^L9xbLp2jI4MDFBo>ie%ruqzX*)Jc6JHwZ
zx+cLTVM-Q>(0wz-H~Reu)HjJa;zt%qEE<}hO=E>c6YYKTn-bpu61!i2!6QzQ>U_dq
z75+4^uyd}}daI`kYTWZSB(dh{2j4=COOGZT*K5SX1lJTWO$lc)=&1R<4J+MW?3*T~
z*<m-ThPsj%NaO-k>;i;cm7Y-e)N_Wz?TUZ)|9!yS2m4etY^<E&-O-zT=l1Wj(SMFS
zKhN^Y^K4ys5z}+@&N|k=4uh`<$LlrwClzHmL;EG?pDy{@iy43Am!Ib6U;G~-_8i~8
z{a>Lnp*Ix%KmYAbuG}oyc-k_nl;awzo*+v;xTzE<Rj8a$I)W6>a~UQhWqPd4j$n48
zR5PJ2)ldGl;41aewUxK^rS_pqE6c)LuQ(puuITmsbC0&X&FUcR{_D_0#Mjcbynu)Z
zH1BKU^r$Vw-!=P@_B~A20u7lkZ4i_e%C9OIPvFAm4Qd1bAe<wOBsQK?+Jpu+|1M~{
z7U_IXnt;LfIoCwVW*ztqwYEQ_>3YTa=TrxNX4$-E&Ns@n^Dc<Z-&O5bEM+OwlJV}9
zil>VU{4f9h-(lzQ2t7Dq4#ry?iw5B190>5}&hnA}C6B-NfAoLJ<L~|D{U7K2?d37<
zXMXyxj{M~P<>!Bu5}~RbA_f)H7VGyw7aCHMO2Z0BexjKmq-zJP^S(>cGWkg&c~d5U
zBq1i9NsBZMu=|u_5Q=LqqNz+<l7j4a%U&DaPH(kqh-ZO>=GubWvc_euu(yxhC8&rC
zB)@dZb2_gx*Fb)gSnz#Q08SmXOB(?nK2w#x05li*vV_g^!s@EwxBt;Ye(?Hj#<LT0
zTTmkW;nm+ElOB1thRxT>igS#Q$BYka_V)}&V;B#VhZo@XMZ@l<<<^qn+eemH4}^Oo
zn2KX%<#SA`J+AEjK7(Sw;b_MH<3GHE-Egd(5hhb%Rw>ho*W)+Z`>OVjc{YaWv7<bJ
zY7!C_t028=ig+CYd@8?Gj|I9`T&-jlrX#~k-<mO8GEu^(F1(LUA_73v_51Td6D5GQ
zRloh)wGNhXxur=uWNiN0HG`a@ueQUt3kcQWfn)8Wp}%3Ms}?nK;SWh>g+`7*Xb78v
z-!usEoYAD&@#jMAyj5`>)+kjd@cvw(J=dIHyVS1XS_DL<hSI4=W@^vR@Hq&+SuQK@
zsZcANl$Lj|&G<Kd`LFY(XP#p3-W{x~Q-hFG*ChEMdw+R?+y9X3{SV*!%Llvtd;Xk!
zs*nKl>4p6t<HVBpf0IAViP<Te@7rL=`xO57f&J%-zi~O!;}PdKKhK3TKf`!hf|?dm
zY<&Ht!+>g;@{u5y7=k8He`BpHX;~Id>tuzw9e=QM6^TYA{^F}iJZj7MlN3koGz;3f
zZFBK<=)5Sw%g4fG>H@(lPD;&G?*!*eoTjuhQAwCQB}{|uo;cNwH;nOytI$f#nv1wb
zn7R%Gx#j}hT+|!+S{)#B!C$DiF2hsLS^n(5JLFIQ<Tj-oQI#`tyTmuI{s9lix9Jya
zWZ4SVtdL2cax&t0w`PA^dE;f}^_P_GJ3@b1(LQ|tEz58J34G(5j_>`&LvG!8h2zmX
z411T@8NJ5g>=w)YoY%g8z(4<|2R!q$1}f#`g!uS;VOOdtOi!SkfGd55LlY7d(+8X4
zAI4e@jaOT+{hM2t%JMMdr9Z1s=cAdO)9@#(0@A{nOz0lrk!~hLJU=wb4I`En&mW0v
zmsS$kI$Ng2N|N8N>dmP}Bf;cw<|&~n!#UtW6Y7G?W<pGC3U%6yIE6};T9umSwh5vT
z8iKm{p3|6JP>0v2u6>gbn*ePahN>z2@lVoBG>w3h;I-hJj=Q_Sq~KrwrN70roKWsR
zY)vm7F%G?Nv6K%2`#(;xmB+Z=eu&#Y=0Le<02ar`^3Z7xrQzbapU37B2~5NVfQizl
zRIRKjdp>P{LLruU8o$uO{Am=Qv?RffEpG$k8)C6<RRylq|D(}sAoU8CIZ`1q_Yt0l
zL6iTk>yYtYNn-yRE~4S$+UUexSP?W3tR^H#rF$Pu0YiO}lRD7Fn<+J!`s0PWx$lM$
z7cS(!I0jV0`N`krj;EeA+`m!rTmSSn$MplMdPd(ab8Y)oUb^>N6uCj{5M!6f>?*xt
zl{^#F)l5eoqP}rO*xgo&OnB>6;XB`~xcY9zy;~32zW)}p*}k_WHhokKw~qc0)f4Ps
z#&7=m4#(q~%a?`O$QP3sY*YDZ-&GnQ_yF<O-rXiX_t;rAs7dqUg#<kp6cn{G92)N2
zG~B*kGF&C`?5ADVgoX<38dpI}_Vi&^5($=~iL^Az=_DHcG)21`YTeocBN{`l(s{A2
zecIsp&v?HJ=UklPRULKs+o_vt0zkvhYCPuxwBIy0w5ur>|CVmk*i8E2clzeipGQ?Q
z>Bj~j{N1bvnnoaLM9a`HPiDf6J5ydb`xVZwUu19Rh9@7&f(f{206rlrfcNYy9}|xM
zFrBG<K!oA_34iiflYev6W2G=lY;All*p3<>J`!&#K6Its>bHA;S}WAl2e2_KdC!+h
zPD}nsrks>a*ftie2~XViYpY)-2@h%$=O69Hl_CN0XOlt=#>2=igu>J=ncNdrcvI}1
z;4l&9ZQTT=qlkzFqHe{N8kzxLI6`5G(lY-TVzc3z$*!Gp8$|``xbO^68-DZGce(%Y
z7Ah00<bdTncYgz8CzvcF%a*WqnO<)TV=Wkix|%vnq*<n{ZosXZ@Y44jyAK?**)fMl
zx0sbjsMd(&h{@>X>+Fu-<Y0Cin>()G+2OZ;<ACR1G%RO+2Q8|8sxL_<eu>Z9xiD2n
z<fJY9&FiZPgx{`_f_an6c<s+ih6BH{N+EvNq~^`7Xxbfpf*f@NDIy0znaj4&^c>TU
z1TeM1jyw-d-cy0miL!CQ&|md|MDekO2j-fozJc}|9e&)|yY4EZK{_-EYHH9D*CGV%
z6yI$MD%VIbHB9>wngCDEj1tYJIjB8PpydL1rN+@rsWsy>=U=2O4fS}`q9Z?aE&6y!
z>to-Z_qx4&NPAy-pUMA+Ahn;a4Zx>s1t9OcuYWu^{==M@j}JqAwEO<__C^eKS<}l`
z$%_>)HL}tY^y0*xLZxZ^XZv$85*C^J&?m+tA*xi;1VPbO$KRj}l1i#VTyJ-T$B=>v
zsVR}RF6^mvFC{Xz6v9x<wS|BsxnKu4zpjE$ybF@ZW=HR66W~-6J^;}xK7KDL4;{oI
zWsD~@@21!{&~UBE<mTF)FL?NT>ymKsV$PrbcSpST+I37e!8v8ASm(8!Kj3h7mm(XG
zXG3h(Co@a*duy01_~$#JDjizE<`!hR@b>F){VGhS731T5a2{%}UDepdU`!tc?vH+e
zL$Un{zxA7U83SMbs-UyLV`!vi+7$k_pvC9wf?hq0uT7k9%DhikDlQNtmxq?OUv|tU
zj(*`Y3!2wGl0G}@7vlSvV(aO9;hc1=t=q!ddjCgSe&UJQ@<NhxBKe#fBaFsidxnjR
zhN^6Sw@c2iq>wws)sEUZT<ro1m8?2yP23DMx*R&16#)?`h$|#*rg}*xeT@h}jsN$`
zwf+p1dLBU)nuF58w1!!&OlxK4gb9Wt2Wx|;$z+vkGJVXo==)y>AM5rXWZ(ZGVE+%i
z@0SGvusA-}_`mT`w6%;*O2m3;kFiaIAU-$-NeZoLn-4K@oY(ks67|W%B4Jt<f1=?}
z8;PbYw^FRR<$~a|)6=NoxsPZX8`LuG1t$_++d9TYjc`!Yl%RG^krruJD|OX)#U}+N
zJWdzJdH+4rAsseLi<E&KC*h{>)O6McaXL*%hYdkc!v$UO7yRB@&E?M+-g$M#@BPjd
zO1FcnVVG~SJG;l*`@c`G=pm-SW=mM<V@;3D7KsyFklIzSvgVD2Zd_3g9>VeAl&UO4
z(@{qWr*HlYS+>m1_%%k=K6!4qd-ssv{jEK|@Uxbc!t*Mmk=)I{b{+C#f&g`jva}Mo
zWb$nYp8bL0;RD0n>m^GoU725cUtPl<i93CloEMRwkvd<-CQe8kpQFoO`fqg3FFDnC
zfDa>@PHWCQZEzu5Af88&<mbQXT<zBcO%vdpUj+oEigR7^Xt0K8f1kD_*yj9ent)0Z
zf?uP~aNbO*DfqQhD*Vru4rbx+vi7mcl?pQ_RK_5ymWMOPY-SM2sLN_`ja@VVpQLbu
z$LSKEtTTOl7)qYZ<?n~U{?ei3IUG}tcJ~+^O(}XpZwMy$Xn^+*H$JyKT9Kx(e}WW5
zSU!>A#oejtAPNy-(9j$-#aD=)@7-WcBKhzU7J(f}UJU0=e|R3Di1w$6&9S8W`*z>!
zR3nM336XJ5I|_h?52nrZmSiVHS(i%-pCnC!!~)!|Ka$;aIz=YR01TJ{p8Bj|atOcm
zPj7Q@atEg~5JQm-`N4zV1XCi$kY#<03=k=>wm>9{c((~%mCd|G^1&YL?<tc}#dus&
z2a0_vjcbaiF*(zEj|V3&VJYYhYJTUR>~k=#`1}jTOZb9?w0o~foJ6mmzILu{44Yy{
z+<7<qd_^SVt(Qv%%LcK2YSxrEc#5B|5fNezf{!kNbL*Sd0$5u=jMM-q!vA!LeC=+&
zMR-n5g!S`=d?-{^O9s`1Jlb*tnh5R&0cz2p7Txf?fd>9}fgo51Z;3kIP6AOd{7gU%
z+9}`LFE=F0N_|66hN-`HLC&e(qoJ&!%Aj{1>Vfdq+anG~`&4>_ihKOE=no<MeNZ*k
z;}QOT6tMrJKn?j+Sp+W-fKOHTqZnH=tB)zGJ?`JQN9`QL<&32@A?x}5zlgzz#fS~i
zZ$p%tv-oXe0ozGB`E0mOTv+!*s?z<wK~fQ5Qk;|Dp$SCXS@&yV5+o6Qh=eccjA<<*
zk;n~wJ(M==B`wN{zPz0*6R2OiQbXsYv&-!kh!!D8C6X?Yfa%;`*{M%=QzM*z23A%x
zzVSP|T)TA>$to&!Ecdp!vG*+=j^CxomcithY#A$kj1**MfH9d*w`=BCBNRRVx}F?)
z3Ey-ARaFtN{Px9(ubIES$ujPbzQ>FanRVQ}eZ+77#)zlCXy|8tPb>-FB4y+gJ@%#J
zGN~%3<aej9uwK?S7-U?1%i+qJ{-B+<JFBQh%TKB(Xi)|dd1ptp(VS-qDnP0nj159S
zDnz2ZFnyoX&%^jcDTcz*rcWx=gcH&!?j*{9=sD4l1YP{OX2P!<d*1|6iLQ$f+5T0C
zc&-ViOra5I{#0RoP&uVkp$s8P>Ccs-)Jw|hb3$*+^387@aO3tv_Gh=4={`2Mi)-ux
z0r>bnk&ma&Uw))}|Md2%ipg@yYC@&^Opi~v`Q}}wvy#EGWob?5Eqj|;!8Zcd7>u#r
zW>;+Iai=|V%C_(DtCA+6L&(x3t2dp#B!ykOggs4n{&T;pTU^@pfQZB;#%bSxM??`x
z`~4P%Z<~O+4k>eqIe{aY@MD-w<4l({3X=E{&=R^_Vnf^YXm6)Z6<FR-&OMd!%D0aB
z&bO~4`7zEZ!+edhJm&4)-=ipoU@X=wk;#%L?@5j|1B}?nb!g(_@}7VEqZ62nm1?G_
z)+lvSc<@G1rU@l*<fhNGddTkNEz}sKIO2EyfBWq3)?B>oITXzYuUQerVjG(x>B=>e
zX*flfbS_sx9rOyr?tQp_t72u<Mwy>z`r2z}&!3`4o{J(~7QNDyW~$Kb@7mQwv#LQ7
zSIdr9MZ$T&M;1GUGnXw@6>j5#BS0+bda6;3aoC!ymt-CZ&}7OdhA7nmQHWE&wyKt9
zRZs`MNhAw~qTg^%DumhsD@yO8W$oFFi8_AspWfj+-@n3f{eb(&Zy-QESbjXh-;Y4&
z|Ncnpk3i@D*ip!f2H@jq1oW}c`SX$L{NL~Pc4(<pIT&51C<>1DAM)-iH@JW602EeN
zE$e4sX$|r|9uY{Jfxr_miS|#ENZhVXU*Z;soN5+Miv?O2!mcfAO5W=3{hNRlk@<H|
zJ5yBGnIP>Iv>Q~^Q5%FpF&`k~G$haYJuIn7ObT_Aaw;V$@|vtM+M?8$zckZbBw8B(
zUTj`4+`C!xyT5atN&NulX5f@zw#pB-|2ZWm7+WA>v37{a03$ip<XD@xvbInlMU*V}
zMR_!a=~$?1|Bt>%M93pVF6WV#fmp1~**<y|hr?zS_aE%@N54Pf;?tHQ^F_*9l8EJY
z$KJfCE_GZ?R41Ag!&p+2Nm)cum-E(3Gx|fHz!;%_ZDW0-D^+UY7r7rA8;aO`%ry>e
zgDTw>fOIW<n}k44hhWn93ruHl{<$2JN%Wm?uJMmd@fBKqf5H#wt`}%MD55IBwTh9Z
z=+k&hw2G33ELaDVph`6m2NM#YQQVSJoE27{u`FH4I2@P!@i*`DpZ#ZV@)xhZMOi=O
zsJ_YG$!(UF&R}|jxq0Nrr}KYO!ruqh`3sM6dlp#$i{oR~0`)8Mp5?*e_qe$6RjeH{
z89(6qJNw+fv%;BkTWp<MV|6pbIhc-XCKIKcc$YT8Mkc=xEpgpXL}LToi4JZ@_6B}!
z8T?&h;G-e}MY=>RQWF-P3kpi6_ZZ?M^Xq~%fJo+|hqdir(jwl##F7{rHI9SQ1h!}l
z3yQe_q+|w(8~{=8dEgO>Zb*!wZ9J@ntPs}Df-#0a`h%P7?A|8J##D95dha6lj=s;m
z@%QNUSHVb}_=OC}Fp^_zFYpPH_~g*TO(x284E40xrMsYuZ_RCeUzZ`0VT{G8!P+55
z)0-TZ_gT&_Ve=#Y#UDQ8i!Tn@Iw#z^6+GpQZ<glA@d%@L8lhGasp-_;HM*y+mHr^-
z?bl}f{I58Qo-m!X=S<Xw2y=*1*PXH5({~A@Z4)A`8MP*ISM3H@H9i9=$ARSbVqiK|
z);29m8<x?2MV4ul#JY|Kq3eq2(iF>hs(AO#Cezrp$wx8I!-m_};^T_L#s#bGd*A#H
zXBEkmY$)`GhW?Vl<}jPoymfV->+e3~?)`_1#v?>ZU`C$zxO(vC;A)n)o=W177hV91
z2H@jN|NEiDkS7bCkPi_c^rXQ)AL#Z{(_1e%d2q<v_x~|JbLoFdIr3?6$45sT9zEdh
z-8Ht(oa4;-b(U9q^p~J49n+CAn?OA?)O9EfYJ)9shiVruU^4Fk=;l2ErIRJpxd0{<
zaY<9zG#R}T@?feibj@uf9o9lomU;d{H_)g{c}$Ywl57IfR6tc~@$sxpPP<FJ50YRZ
z*F?se6xMCyS|v<>MnH@p76z-Zwq<$al_TDK{VFCKQ9DOrmT<1*t=)e{k@w<DX-p3z
zg`e83#h3zXvW{<pDv0&abyY$+Z8#1I`A@rhZ4ks*a5k7WWvCsoef$zjo0kz=^5FhH
z-~G-8U;p|V_wH8IHD0@~-F1s5X?qQ+GAc?MNoOMch^PTAbHC^r_8tg3w`L4C`;5m`
z`<Bk-S7|r7YHoTb6yWgQMH8$Rd6>7Q)--S`Aq{r*CK8Y`|GTGCMK)mlg5_wZBFp`G
zYUcJ&nw%99wK(nln8ch&LTX?WRV)daHA1*eN}<LiYf!Km*h0w%LT_LxdcJoVjY@7^
z+vnchL$)96b9A_ib7QP+LWgqt`8xNGzs=Fn9o9B4Qmkxr&<>s`*oO}{`Txj*ecpTW
zUo-%pXc>TfWGAM4hz8>W7ykFz_w%^PSc8(@`Z5Q5H+l2!KjQiG|0XB15wqDL7{|%U
zHYdk>+`GHX>gpC}&Tg>2HDq}$Lswxot(lCVoEYkvmn2D?)ZJXPUvedO(n|3<lhY~Z
zo_4l+)DK9@X^<AlO$u%|Feo-6>FtnCL5NOq;o{yj587t<(iMLtF~?1Mn-kP1R^~$4
zq-&eh?1!a!oO9ao##l)N^1iZm&an5O;!pnYb!xYVgbd-O>>O|J{1c{nK#{Elbi!h7
zA7i|6kCi<9cM;(fKV2JwCs2pv7|nPh(M%&b&tns<)YCc0vL1Wm*En1LJbkl;*b~0{
zt$lvx#TCw;6K>ofpb|RgkI*Gs#@&As&zm-0ok*y#Vlnur#2atV__<%{v-hxzI7M1%
zvdfRKzt7!mQ!0}kyKe|w;(bZWM<7`V%!N;-Nt805k1I|7gyYO5;rc6eSRYB0e|GGu
zG+D2urkm1wDHut-E#{CnNhFU(njj;^WI{0%ddos@XekPq%^dstC)|JchzAe$+1o#4
zJUs!OVN8W&C89OXS^Bb$SmEa3AF+G%GE2)_tX}wR(nXucx(<H0egB8K-hLRJ|NAEt
z%46maEE<5t@i9D<d<~Y|Ikxw&Gb#Ubo<IAqvXXCdSni{gSW{D#6COT1V0X7qzrV)D
z<|bR`R#{o=v$o~KO{U|T=~$_zt;K6vC>z3CCsZ(0>!>e}(7U0tK$nJy-f|sGXOfrX
z>YT0}y7>b_*PlF2?kTjImgm$^C_w}o!j~_EEjde)W=EZ$uuRz9Cy5EMXh;fIG_OyS
zq8N;jj9;@e*buB3{`g<K%ijJidb!t%FXiXi8(-nh_}lb)%ODOT7Hj$e{`cfRV?qO9
z^Q74kuk^5f4N-+)o(OwK@}G9dcSzuaU;!Ie9~qVGvvcxYF0cM=L}uK7u*d7Kp5Y5$
zTH@xd+M`8g&ZRLaxSE_NU8F$cszp=BzNUF_O240R<*f<7@UJ-X0%m10OsCe+nlu+^
z63QeADw0P3hM$x4Tn*=k&UJW+1#WsK&M`{>WinPaE?Tm_!PSbfp@Bw|Rh7om+FNgU
z*GZGCL!==wrY2bt?vQ{Ji05Dw&|5O}mn?bD%YDbADYx(Jv;E+J2ipf693C<&$A~R4
z#v#^!hU>ZnRr+R$UT>L`={7g^{)EZwHp{DLS%2!w0peL43k2X}&;OGotm32TOyx1*
zuE)Opj{^2T^?i%t$Tna});QkZ=KDAP6E3a)0$ZzJM|Fj9eTd2wV-=)kG97dK)(#Ku
z^%yR#u(`Fx*7<b?!ydzBs7uFe?4@Mo)LXxbHro6!wWLmd(k+gUN>)>C<%jJg)OrV;
ze%1+moHPsbub=88xLVCLKld+f{y`E#6k*|1Bsq^@2+sN4xlt1w7`!tgnr=AS9Yq*Q
z$%0M&U{x6|W&GgfhrIL7yJSU8T??7%VN`i*@4vxjG@~F!axyy%(!U%-29jZI?tL9-
zjhw(6Kt)D-oeB`lX(E;wM66c>h(+)+Q71LV_ShZ$fU`?~nL<`jj`+@Zc6ja!OKfbx
zgS-B|jP>~doe1U57(EZwCq+0S1a0$HJEb?Y+`9w24@w5hJtjL<=p(!Dch`PbI(v3a
z!hW<vXOS2|9epm6$-K45Ze^QYs)9x|qiG-}BRF%$uzJR@cdw?%B=JR<Uz~*#!Zhcm
z|3A|xRFd9C8Yv=z&4u2;Fjz7SmJP;wBcH>A5!+Yx*?#bly@LbB(-ZF@VQQ=uvR;rH
zdOJ>X88FC~F;X)rA8>2;n;edBVNJ=_`R7^QdNxr%JRThXVb-dTpXkR=81|P%1F$$g
z83+KOB-!;D%l!e9y)ifUzrptL_jzjVm)KnX3YZN>)ge<iMnuT0L$&1S;FzQRZEoLO
zW_4|YtuvdfZ7k7W%IPgZRXVDfM+M3$RAn;Z1ap|S5!23u)~&$OO&ySy;T0!l(@u5r
zs7uTvk_fwD$2tf7YhpH&lF$51)ixPz!HR%y!Z!3Uzn_)WX@KVyhw)87gH<$UMF}xa
zfno^DYli*pDc|{%x4@j>oF{)R*)v=}_$@~DZF;?R6o-)vkscxgAdiLG`#I#nzL{9)
z1c`u483Kp8Z-TVgi8QiMi;)Z`8KO2o9D<l0)7c>pPhREH%3np8a`V<bUjM-vo_%hK
zo$U&oV6AtWQzy|Lnj|T)0}wR408Mw=2_rr<Ce{emEaS@SW4`)}J?71NyLP>tl9A#<
z@@2<EDp?bCPROPiY1I@lIa9kt*Yq4sC9AWUB1YJ{n6rD^MR&n@)I(yHfOHmW5|t)`
zIIq%C3wdGa4-La*%b@SO-_c3Qt=s$DzrWAJhkG0y?=ve;K&r6*QLG4P9c7fc^ca{S
zx%8OT2keesV(<8M#?=AV6s&JtW@+;&Y;SN{^{_Y=4ZtTa7WiXM`1`2#{_pvm73r5O
zUFy?2>@(g!;@zF!=Jvs#aB=nL*joM?gX|*H>V%m)4ile6M5)~_J3D*q?A)U0EwjA5
z#`?x8n_H_auk>IQW>d#_q?BWDmEdX*Z@YkZ3n3Lww7X+ZE~ahaYGiuhYVE7P-*L_X
zuPGNvLMRKGUR=Arf~iiwVZcXU0!e;*vg?&phMA(m5rCD>q}V(@hcrX`oKK<u+7`la
z%{wxF`<queIN8PaJoG=bYaC9lbL-@fDe|TGn2jm0wuhD6PwHV`FJip~aFp*Ej4_B&
zj4=VJP_)+h8XS`v8<@QLUn2%5twpqoV6&X<(Vuf>_?IwPlw-dC-FrOy+0U`Q0lPcC
z;D~UlsJ4heq5^65)~S3jB_jr+XYFeG{el~BpYXL`gv>TpzsdU*a~m|?kA&U1Bqy0l
z`*UgOZyP)5pcAoVt8@T=(PSB*U4o#hP|jfMsf@S3UnQN0Ca;8a445JnFxdZ!5hOF@
zh2P^3h6bApwX4`YI%NOq5j#5v?C$O{o*be&!DbF)9JcU8&srU|11pxo4C&hyj0n@}
zfP>NN?2oT<G`mNoCk*;aY@K_a;mQR}uRpimczlOH`0#uG$46QplQ-}IC;!L0y)HNa
zAAb)3ec}`I@!6+84#MB#egJ+*vm=61V^?8$d6n{bh3U~DSNDF88wY>P#^6hwUH)0t
z`p@8~8P)rgZsu>ADQLxXddztAfSm^!gWeh&o9Ea%zrphAkmc13S%%rHW;*jLf@<m;
z0uu8dQmMa7LxARH`}F7Izv(HN-~20)x(ud^XblCWYkQkC9hyWAKZ@WOC%&Y?NTh2q
z+^AzklcWbqs}c|^^jBfHY<c6=2VA*!6Vn^x>e5TQ#PZg`Z-FIf{*5R6NsfrO`)we4
z@7<7NZ7(z{CL#dFG||h%Bt$=TH_cTV#~kKuF&+U>6FC84!Go~{lj#n-<5xL5_{(H=
z#J#%@dFQQ*Tz+cE-fr!QdnR}dbi5pB$&j75K-)EYCxI`K@i`a_a<*^5$>EHmpD`MR
zHIPdO`&8c-nt()A5Vdx6&w);UMdKkLi5ex@S4I0^k#4gvw{jX!l=ZWQ-cWEeO%x#-
z-4XrQ{&iL(WY&=N484J6IJ9JicUwF<9&_{dK06Qh*x%n{G&-iPr-)RD)R@f04?rFE
z2AS#6Gd+4)fuUwn?y)m|o&D*%jLIEUYqD&}%H~CeD;MYwH{Qb$=0`>N`*FekKjb<p
zJlX9R4Zz~~<TXeNrXpX3d}S3kUSoE2!p_O}*gkoQ<>DDGt$dyJ!3&U`Vd9RNR0q^L
zLlCS{pk^|Cz@0mL+`B(uFj!@6eUr_z>#VE|Sy{8V8m5zq*;J^fK0L<NjdNd^`K-<r
z1DW$*nV+1%%!d@mg4XQFyB0wWG9b}*Ksvf^jZ&<X13&`ACW?bcHg3skBH+c*ayb3b
zVD&3NJ`|SMEV~aTeD~XLquBwjp5e4)B|FExqd(!OzE06!iF<i58O9VCX`p}a-sp>e
zfwg%wbTY<z1VF@3<jp=gxErcVpN4v*AUGPP&rif6>Q@Z4c;=n8IXmO;a%T87A7UfN
zyz<gRp1wR}c@++JJqqB-of@Bin-|b+s8Ytib|`i&uC4-E21kb(4{pym|Jj0*;~Fu|
z#BVxALdv5}dmN2QC3)9O*#9R|z8LYG$W)`sL*KLJCrzX>o5A`;%gQ;+?hQv~8~%Vl
zKb;FC&B7P_!Lns}Xb=PCY{uT<A@?8ba({c9qvJ!$a_oz}RA3x7_Z>xD*SL`6n42N}
zY?Z?F5gjuwA98o}HV5PDOzLfvG5y{q>zkituylcZu!@?~z6l}=!rx*A@F`gVd@6PR
zAH>_Bb3b#JEOD4243-A;CM%Sq8RL^}-rD^wa`O$=`_FM^>1SBVF94Q_JEpA1enns`
z);N@7M&o0SNB6mNZ@|)Um95PU);HD}t_)e(@XbI~I?9Ps&7dp|8X`|+-itCxCe{w^
zZ{B@?I8mpY)8;}ZGH(_%FYrrwqe>SzNPGf>(|clRrG4ISAmI$i+^$#K*kcjJ7BF1#
zhD(3;&37419w4T~X+>d{n3j9oJ^3biKJ*1xye{8J9{yz5u%|aBLyX1R9wxB;OvrhN
z&)5XlK}U@2?Vbr5R~Bs~V-p8$+O<MxnDT7MsJzGF>>XC~FCa4I-o3kAy}rezOGEZ|
z>wvasvkU2{F%p}IHl<J7M-h#bn)OQp2^d>&{oM&qe~GTIe^UITw?OI-kfH!{ZAMEL
z)P(%kmH&0Dtz~|>76^OMQpi7ss`d(x^)18B6@%oVKQsoLS$aK7f0$A9{LhcZCtSI<
z%l6JL`-l6C#)nkZ7^ujskY#=y<ETBn?<|=V^lXpJcQI7%n1k63P9}F5&2}htgfe5$
zU+2v7SLiRDCGW40CV{8$Ot<habpDUNy)GI6KK5w<`svsCf1twuUbjz}$-RnR&(K@j
zq@KcTbi&T@%RC&tM9*%rHT)7A!!NT`T%^{TNqxku9{Y4K5icvEWOQ=O$?<*e+#1jy
ztg*4V#pc!;%d10%n-&L@Gskoc(-Wwte)8<(2F<BBT6q?oLhbjsrrkMfs}P7=f@bF{
z5xb3~MA20KrU?o#zYlg^wwKDi5|_A0CKO4$2IBU-b#%5+tU!NYc;)-IxpU_l*3LXQ
zAQ?Tg!n=FFj>-&cSHkaYQX4Hs3XJI?rWZT_JQu*49L0FEnPmOp=HPTUmvx`UIU8eq
zf?X5aByC`nHfsS7v0#kw;P}s3-TEwAD{#bXuiod<Q=eh5q8uN1)tJ=tv{da((K;vF
z>%OMlK&ZN|=@*u}S1QVBg~<$6sdEmHryIuB&`~>>PI%E1O@DK0NMc5*N$y1RT4~2J
zxJ8k|YZDqDV}!DF<O4%h8kScx`l}g5&!0uJa>B#iUH0}LvVXYCXmmhXPJk-(T#hVr
zsMg-6!3jn)#ANhkjefQS)QqdUJe<7E;p8fldY77#!Y;G4bdk-K=P3Fc*xn#|9>nGf
zy8M>M+L3>B`~D9H`#<5n|3kt43nQS#!KYa%Fn5BR3Oj(opvPeKX{ynT@$o*l_rJ;A
zgYU82zsT0`ORV)i$H1It%7mFa!cqDZU}G^jYOOdvIpOH|0e5Z<7!23gJhQ>sOB<}M
z59tk|T!!hSrV4z4x(aS*(k93`m)go|g!tQe-gT^kJ8o@?hleF0izRS=YWbTu6|_<?
zNo;IV-vUjPijA3&G}glD<k~a^idZEZ!f=>#_s%gtc<pVhokWY+p*_p?@t?C-zD}=L
z3#ddhg?p>tCiKUDodphn_W+P2C9!SnlIY{`0GoJQr!_dG33YZ#()<{}woOb}Ie3Yo
zBg+OHPTu8sc9W(2Swv?%cyO0%H_vkE!ZIg^wI@l6&#@;)0Jqk?UZby_g4DdY^U91S
zP^l;k2fK!yJ0*kl0Y`ha&#p>Z{+0yTU3;}$kK`qqGYFztO(g_S=emx90!f%rX!H^i
zsWAdZ$#SK?1WRj{rKOy#C^<aY<LLfA`}>C+9Y16;Jw$Z`#`*n!<_DNs9hIw4br>u?
zS*9?3(3-M7;H0|C-N_v$^+Re-5SfwZeKuFWK!5oh`C!faONZz0aIGIlXjT{8{>AaB
zZ2*2cbpAgC<B%s=8zeuIS7d9J)zu5sQ%89+<z#e+gM%wr$yv%Svfg`vt>Kr+iZv$g
zgsD5G(rM#Yi%?VPl%wMV4v%hg=hiZ-tLv<;Z?Lw$%5ZJSV97hqm6MvXRL>bGg}Q2l
z01{o_x`n!H>znRj)9Ji*2JBwRJCP)k5X8D`>ImV_Z+}(hUbis)skF{?M!YsY>kGqW
z!Ih4ezVj}1eSi_gsUx>TCiONqkAH`(=p$A_vtzw4zhsE<hCi|Rhrj*56`kpBp6TBZ
z?_A6X(9UL@Bni(?{1(-K02qV13`~tW7YcihSlB-PbB3GGQr8tCC%pCQJ)XJzdHT!B
z@xFIT5>0$*(-)O4`VyJ{i6_6(T>+>lwad73ZOT`EdBEXr+t@U`K1t+yEyUfOH2v@|
z9lKv--rrwao`{m1OW{XdvU&>cd%Xb+mcSN5UBbzcp(>}mdE@)cberj9j5_CkUTRFH
z!IIfG%ubDub(TJT+s9&1H)UFH^I-B8yW@8mSG!cITv$5G&<vT@mUB=25@u;VO!;#b
z$f5aZ;eC0$>*GS_{{e#B77f7S_!Of8DkY{5y?#b-;{tA4F+DkA|Ktk0<2Si|^hazi
zeU+`H7a3;fQEDdD5i`cr)B(aaSfkYSJ`W%6vh%RO%8=!i4Ytm1vUPTYrPUt&Ws6g&
zrZv+OD94^RP&YEQX#d-gxlG~;7i@3SkGX`LfrKb{3N==Z1hB{lh#3P3DM93Pm{5fO
zwPkiE-xsUc9Qs2T4lLjOvny=x+$JwdoO2*bZVIkE{B_inSi2f7+P?UU$>P*+lA>>#
z&>mZ0OpXgPd&uSu9t8pMFbOIknoNXYH4s8-TZe#V3ie1q^GCw>L>xsv<Y4kPC$n4h
z?Rkt;Jb19pt(zCPcyXDdy&6Jxf|GUvcRH5|k(x8bBs}fDOX?!2u*fs++!*mQzwBXl
zJ>~nKq)WNer*&tO+j*-czON}+wBa+%OINK0lS9#m!IF><g5Sak9BeBG+e&T?$NM85
z?7hsOXM<~FLr2uGJ^@2PVFnbYk5QOaha8k|aX5LGlkyfbcSvR}E4}l4ZtLgx+WKes
z*{3e^U%vLwd1L1RX1EmIQy1g0-_wG7aV(BcYXczjQm{`A;qRl|`#&Lx$CQ|%Fc_{d
z*j%R?myC{%xqtLBJBP2+%T`$%Jk471IhOLXIAbZ@n3@SSr4JdliZDf)ad3FV{{9_q
zTphBqw#LTR78_?)SzR46IAf?9E8<Du3sfyb+sw_fV%kuYj?P;e-}Mw3Xb^L03&Whr
zn?SUPZC4E1-Y!joJC)un7^`HNkPnpQ)r?!W_IdO5cd^+7=NyibVYbQrqi=CEyGpOW
z7Jf-^;uDL(da_?!0c4>Vdm^AUMX>E9*tJS0(1yfcp~;qSWPn{?CW(>IVg#u}@elBS
zv<MdC?SVB%<&d4@Z}ZIN{}AUYR8Dx~2Y0#j)E5}62%|$!LNrmM-`MPSi?Yre1U05f
znl^9#=X(8&?YlLTlaiumnNGC@7Q$%W*yoA~McuUqQ|<cZbP{3Hh^VxoL8(EJv5@zL
zV&J2jje*%nIo^lSbr|o%_{66zW;tBA1a3*l><~e5T7lMx7&3YkW{43>Ri7}LUgQ4k
z3dghCOzM4<nj#x89Bgp5_Ze1;EmnJLJTqM7>u1h$VJSznL~y99!P?H0|3shl9|z&@
zL+t&Zbn^cw_WrVv0e*6gfIhuC|Hp;>pHREoNy<~iI`U=9`tlalq2=V^9+e(&YxEk|
zPfl3PUSMnRbFB5gz*2qzN5xc+DcuOfp<<8>jMmgTW^Z?o{k^-~y0*;n(mESw*4a3_
z#&Ee$f61cGCl;1trJOqInc(V{(4>jay3EG}i=J|bXeM=?lmC&JzYwR_77~^u!?<Do
zOOhSmvi`y3%5cdrJ}&v*x8B0Z5kiT&8F@BfT<&n^@Q=xhCE`L`Y>eeaGK6O8Z%}|{
zBKIBu()hG%1OSr9n~(xyFiw-cm`3y_EKCi1f3koAG;~IbhzmRo$ciBcv$q(R+YIbk
zFcsSm?sNUd1<svWVSHRgSY9L);&iePQ+gU2tva6+)h*sxCQJ`AcJ5Evy0FZ6QhO1g
zq=Z6}0^Usw?C?d?HIdHi{QYZbbD`)%F%a_HuTiEauy<P-AHd{5sY=gjAVex#E7X-z
zmrd7|kx36D1|t=<J7ikj=3so6ae1Fn{eV)(h{@??tE~5*W0<W|WJ3y*lUYm87(^Xn
zO8Uc!t+RdB`b+f9Bs4l7!DoG;^M8!%eVQ1$XaE++PpQRlsvtlrOb<$Z$fcE^<Eiz3
zhiiww&;Ixtw-0}pTl_A|#bvezFS6SEEW`XfPL;7cq0|x1)rc{eOc9w<>x})w1NIJX
zlV4wAX?czH%?&ortg^B;WU!Ta&cM_o1Jy*RW`3P5M&^QI8W=Yz2qc;B(j@jt<P<bo
zXm#^NKOhN0(C2Fl4<|-H7*7WCsccG?8NT%=Z*q8W50h7@^H6OjJ+AHl25L%7wvt?G
zY_k9FdGj9%j{r1W0Am5;je?Rw?|XnC1&jno6X0R(?1r17moh7w{CFi84QcB*h}e)(
z@1=g39Z<<bc1Pdk>9t>_u4<GM-hSgY=l;eQ8LaxLxFG{dfbpf1&CreC)dZiH)Q{f>
zE`)hJ=hoE;mp;3U?sGc#K_4M}Jq<gAuBdenMEtrY>kGv|$$S32uct6RRCf1Zv=7sf
zZ>EfdS4N-~*P8s`Wq^}0)TL5n8FhWgae0U1**hG~u2AY8LPn8q(J#)kny-<Ey}vaE
zD<<?lj!ZHNlT&1dej%*)lrx*k+OW@Bw&q<M7Z;|*v1kAu?F9JKqx1g|xBn1GM#u3k
zX^b5+Y8kOM_#DsMGwco@useQ-qscoQ&fZ{m{}pnx%v$dYZ1unDn}O^sm8qDz6Kb8|
za9&q!y{xce!v4WNdwaLJd40gr(mGpbHrP13&dU0L<&Cx(C?`<Q{2#5`sWOcLPRD-<
zdwbKw{YbZph;;MqeZ2@u1WBTY6F!?UU=4^-iX~WH$$00ryIjA16<bWHYlm|cgKU!r
z$KT^<_AbR>vo#(Hge~bX|BJ*4upt2&?*R}p06NpVAxJYD@}KiQ0F7O8-~ecphM8cd
zBN5dQZS(;)AQ5FqfedSa;AWTS%j`~G;mq*oDP#jNHQNuixqa(Amo9BEKCDpJS~<s2
zJbl6S5rvs~?|gqd=N!EvWBcY9gTq=$vICe)8cb52(|wReizviGRtQ<&!~0q8{Su}l
z*xy!;cVTwo9r+|E2ffr!qk5tZ0|?~Jz!AtSjHkz3+5gW$j&RPBnS#97V31uRH%nw@
z82B7u#Ch$cfQThGmLluZvjsg{Fvwt7SXMG&c@x%_bC$Dyl3nlwpLO|h6aGG~I{)`0
zh%Z(Ei(_#-0vBi^PrXNeS&vXE`uTY>yUx<!dCF>=(d;&d)h!+#yh_fHmEvi(hA*<-
ze;#WuFmqE%J*09opR8xB=M0z{r&A6O_c_?VMRs+WrKL4C&u+1PW|fuoA<G*U1*)0z
z@x>>h8ECwRP3!qCF*0}lGcAwcL~5%zkU3Kz^?UB-+F*@u0`g^8S<Ben9`ou;Zz9<d
zbzS>}MmuC$?Q`$=8x+M7Vr*n<8);npy!)RG4uE0`jL8Br;6r*m{9nXGMerW-Dv8H@
z1C0mRK9#yTZR3?&NM71lU^Q*t049<El`Qxx)EGOUp515r<U3qm`8BHQ1muJ_U%$hJ
zi)##4g`?fm`M{FIBzv_$iVn;bps=G?tvwO2mvOXfn2t({B4<3JlOEY<_)X9_c#dc5
zePDCH!!HJcDSX+kX2NJs8STUP0A`~$2HF^~p}%t4dRe;;q7rf##W!F^mHq$@$0KSt
zVSV``RyMFEIR9t`)Cdlw44e*wH5MxtD;b&XQP>`ZE$HVt1MAr8^;z!;OV8wFh0-_5
zSU#2hG>c==0DLq;z@J{DpO3)2Lmsai7cm%ejP$TJ3q?$EZi2d!ObTp%nIe0d6*p#9
z?J$|$<ZyPA-N_qdW{Hj7=UMB0k@eo^S+<*g{&z=IZVIOMMaT%oR@6G<;Ao$t!@JzN
zHe?Vu16$|TS>711yq@7!U^cBOCtg}u&pa0GE%T+#&Pfyg=6zmGYMj$b5KXjIZjy8r
zYyGY}A1bSB23I=%;@fXAt#>g}dx9EDX8OE)_}}16NoH5Q(!lt=yD>Jh{H^5P{@3`w
zMRITTE7rdjw!j#hz}$(aeKG|*=L?t9r1~a>tZ8gi69>Ss`}faO5;Z^_R|Ji(LQ$--
zJ9&l8!7otA8p@R2-TS=r&RIV9xpN#JR6aU7tXouC!zR(zwl^X*iC<Hiq1?m>=b11%
zw(M`uSijKY<hYKC05L6#UxV$jSRpHX!7uurV&O`doG7C^zTi*CN?oQ&kgeMz&i6$f
zq6MwIwDG5q#Ky8|1k^#_K1E@NVW}}g)SFkCpsZ*bKVSU4(_?N63R94ooL-jGw;4;h
zurV00d7;nJbA4=8VWq(wKICV8Vf6EuNb$l6@Dry4__*l&pOo<T;b8xdfW#vojD#at
ztTbtLO+m{5rPdNhg$ok5UVfe;KgW{$3Z>g&JiEp2>`k_(-=W6_tHo#89Da?}{&SdY
zjgm1lH==S=U$ewuG7C5yGmcLVIXb${?HfauhHI>DY<Of~bBX13FTW~hHM6l&O+ZVH
z+3wPT^0ku}-zosx;%b_dLq8~o*j2w4$cD=Dx=`en@BaBUc6M%I@)C85qoi*)xqtG<
z998eq?`;L?U_-NO$bDG|_bCGW@0tEhTrU{JWMrlY20d-yQ)}ZZh|%CX-_<?()rSeZ
z2Tc+b1(jd|q>}v3#t6uQX5sa4q1x7DcEC)I*cpAB%PYUiteRl#F>k+lowFA=SUqDo
zxEG|8#z))|eHAszE!|wYV{50}suUV-fVBk=ZkL?@Owi;9&jGFdeVE)QE@pjizl`&e
z(*64|I)v$=QqDYiuZgf0=>`y`!Bi$JOjN~-Ei_#(Nc_8bj?~WgEwzgcMI-Mtf#X3)
zjBJ{^X7bN%MqvwblTp~5!e;cXWx1EJJ}fx%;xgG*L0+j30#fbxX@7ck{!dEy`!EFY
zg%jZ7SRC)a0#Fw&ntqb;L^cz`YvN@a@Qr|K=_e;+=$UgAb`#fofwJCXR&BFaU1w+S
z6*4nmwfG!c{jagwdk$+isF*Qx6H1+V0wUI15t|C9GY*fBI5^zq&dnbE;VSE!Yn(Z|
z!P=Q6RyO^<wJKd`20S|8gNjb){Ip>}G9Ru;W(8xxSRu2D7RuULVPG@feC<AOz4<1R
zk34iuP0tRQRoiTz{4u?J)kFW{I>~;%Y04oX{P~Y)7NvobK*Z7z^d521it7#4RPPt3
z&PaSrB7a-hKRg~43|^H0iW;R>MH)GwdS}00zQX?WRkj9SBa>CsO&Fcr<DJ)U^Yg#(
z9J6uF=)i{)HOjmuvq9&BnnXMC$_*c*AzP{gk&IhcrhN6UI`TeHD<+4m2U#CX=JOUt
zM{u&|Jgh(Q`~AkCNm5rxCyASXh!T#`&aDojX%eJOmzoRFllc4n>IJMRFjB-u&qx-E
zzVXOGNPx5^BQrU<$;nJcZZdi{qbDqVWl&pP+cjR?ixw$fDDLhOAV_i70>Pc)?heJ>
z-J!U<yHi|>yGy>@&-=|}CNt+}Cg<8~U(1q3%``86X8y%Y?&dK4vq6h9_y;Q#a!f%K
z5y4Yn%9)F?PqaG&?!bl1a&e_-R;{R?oJbPq5-h)JoEGPXC(|><nC8ZrSnO5CJW@a|
zp?_D`&*b$V;QDsitslB4EU$S(9t4`;VDd6{15oAUqw6@wQfL4973}eEbgi0$YKIQf
zfK!<UCO@shKV<#20?UI|TZ+>~1W{B>DGnm70?hVtE~#h{tZ7UI2k*99YY^qc#~-^K
zCgdQot!rmrtM6VdST)y=#`=A6XCn1=vz``1K$E^iiDaV%XtkgXurcNKGMsV|<}>PH
z<E@^mmCUEnFr11%#j-?UzG3i9VWY|#&mrhXfb<i4U|}tE<B*x$#F)t+Y2UG;q;5H_
z6wQK-E}v*QMH`2Yz6dvu%x9#wrbRUMfn#xXoPr2y0b8{BW*C?ATCSrh;7_&;hmSNN
zH7)iGqyox=f7#4Wi6*6T-5)G$_-};)r(x}F^w4U8z)yfLpNNS;KrUvIJ`juO&13+E
zljRMZzz@8MIthVY%H#=6HV9HTcyqFPzsoWI4p}Vw@7%bf=nz_>s-v||!XVk_-GXO(
zKQ4ngn2G!p4R^qRe{aG8-kl?{E?eN<T%K;PMf+K<CB<s7kfiT%?bNo4-a{QoRCIRV
z3oLgF&s4EYzD;OFynUCml{k1vQ+-@z*!pSyLLZE(H7eY124<*y5FW4Z6p@@9Ao+0;
zzSWfeWfabVeTH>-4>qP|>);_;==}qk;q=rxTgSxPDygW6wEuHp1<B9jcu2cbv3Sf(
zuFN`Y7_(0j^n7UdgH>OVIcoPanZol&PUonqn>`;ArYEqbWuz)_Yp1XcIBW2@_OA3L
zXyP&uX~Nf0e&&PwyH_{51&m+41>%0qn`k+H;w!eej!k%sO}tZ<s=(YzeytP>q;%MD
zW}83vNk)_vZ|@6z8uQ2rCM)hUeP|-L=BaORcB{m>tbP02b`b-rM%ToR`c!Y=T05U*
z`Pd9sigeN5zh(LTB}A>ScQ2y5{|v!vzYF@2#BxGKQ-t|`nEmA5T$Z5x3YfA2V8gDl
zP=NHw;$w7`f%)n(j<jn$pte7<6q@TCP=rJK@s+C*yv=kX4KP=QiV%SDw7WIV79u(2
z$h_CukX*$%{XA2D19Zur{M-GO>inVDb_r&w1t(s-3L~%h=D}!wiQJndL*eX=V?x1d
za^Hsf#iPbR#(%0djv$Tp!y{kYFAFUR>|=q@kpvm7Q%WlhE!hQ*(i7z*F=pJWSsfvq
zu*tV2t0!R8)4=J5OoN^>7T00<4b~G`1H>qJ6=n9FU#=t9ou4+kHD<;&v~>O&?rk7s
z;HzuupRy7>5$ri0mYT)1J;>XeBpE|VVpuEkfGe*weAFDIL%=6suZiZ5Ct!@Zn*-ki
zz*d`WWUAKfhK*l(i{iA3g6nKH8o2S;CMEn0dFCt%I00)x6l@l|L5^rv{q(6i091vp
zrYCJjw)*~Sshcjm#viE~hOlW#rq;#PvbRNK^Y#?~h`!!h<fq~a?=xP?@&_kI^LSK2
z|7pitR%Q+OfSG-z_RFPuFO#ToVGSHWFYzaNes;?;H*PQlUaYf`#Pag2{4{@s#(3D;
zf4aJ~?|>b~5UG?J7RnqVfC5lCCYVY#+J=vHNINgX@ClCM<o}GomN6zfPXX(r(~FsT
z5X|?N4QoWn=sfj*2(xR6KzUtHM;GC%LrI#oG}^W_W`9ldgU?E`IKNMd2}U*i|1)t|
z=4tOYDvNx~u93WzW94L>3$$vN>QAu)xDw7GjZlJK%Ymn31GobH{6pdhOjG7w9a8bH
z#JH}oDZ<j{F{$d0yp^_fo=>nh1p$k@T2rX{rZ!hUlOs#$P7@qlB#xzcWHGOA+E8<i
z)fL@q+s7YlMZsg(;|x}nRW<c(t$lMZew(@E<K&mUHwf0*flWXjH>CP6UANOD-Ou2z
z$#YM;f@f%mJ;X_<Suo`%&7!z1$s4*B*T7-FY1K@^=^CK>^p&g$Oe1##{e9`~4R>|r
zZVUu3vb<9Rs8zN@E<{>Y299;1Fg$Hbi-hcAeiKB_<>EP7-Ojq~w#~iI*EA7m?cccr
zE_oUhSH{*kPCQKMygldiO@G|rYpzYCkuEMI?Pd;830Vo`<o_e~2u@K^F#jC->67)=
zubzt!@1X*{a!Xk~;Otx2W{<tsF5RgJ!vfWAvkJZnskA+GYDET3wfx~TIl$E3aVq1^
zoYS5n(VD`9oIM~Odg&K&ujX64=?%tJ_vFYx|BIyADC`^f%wuXWDGp#LcFUHfyg20~
zPKpGCFlA&_QwE3iKkyhJu@XE9)6qG5@Vz0U22{f<&`L03pP4k8v@ID~wO@~^PsXVg
za-{lX$$R#JezNnZJT76Zre-8o8U(m0W%oh#n@5FfW|voFCKx`62aucD3v>PKE5-OT
z^%s^3Y57yuBnGU4Y!M49R8Ds8gPl$2^>u`Q?3&ufF5c0LO`p}(U+y#<NjF*Vkd64N
zT5b-*GBldY_R*QP3No{{Pl(i{Y2-9j?C*Dcqj8v1ZqMw{f`kpAWV}Db+j3apr922g
zT~pZkh9Q$LUEjihBE||-W%MFtmeWo%ts+9y!5bNpejt;uMM{kFF2HrP$gMuyg;)bU
zA__tV#>gol|L~Tnrf!dHPI<Pm&18Qk_w&3k!Sx$T&cWFrr$-<vtB<t7B1?uCXIWZI
z%xah0#O4K)XD9{_p`FU2bl7iy&-grJtkXz)PG}7`#`JZWt-=o4SFpv)Q<%^iq@Fm<
z9H~$NzU+=!3BEsD4yIqYd5GKU2l>$8C5jK&ZZLs!PIz>rD$ks;RWmsv%3Pg&3e859
zr{zZ;{p{#~G*5<P<K?a<2UJ$7l;B|4Gic!%{14GL_N@yWSv)CjHl3U}P&u+Cvz)23
zxjaB+Z+?tZzT8;J>w9^rWSR1w%2davP81sMq08Jr-l*kb9kvE3+v!?W0qFy&iE=%u
z18;N;-;C2Y((z|_^@yXDf89M&K7{5k6RAJcDb1qncNxP62}V8>uxEc^Ti^WoXcWRH
zY@;)()U>HPtQtnLcLF<h0(VrrU@Jv4j_Vq3<=H*8K%#WF#L9)j)EAwp*s&#~wE^ZX
z78c@ViXGfaow$X$YB$DVgQ7@;h)!^Pa;}TU7L}G6WyOtgHY#DgFk|4v4DDb0{ceLv
zM`4g=LUM~j*e_v>nET=CbT@TObpIY*^xECty>v(Ll<ES^VhMrOw>OU%TJBbnP3#Qc
z88K$G3A5yRdHGBQc+CX(&D3M<`Cw?mR9DE|oKC!&+`JtV3oPxM{!9mkV3s)D0565f
zvqb0s6i!FN=%Xc~+6rQK2#_u~FO%wpwE<$vl}b@A)FsmofuUQns5(>QS_0wcjHvH%
zAIK&vU(9s%PwQswl+mg>YoKXyoDcifCY&L_3X)d>K=LKCyaeM=zA^GZ<rtFXLXe^~
z{Hq%iVzh$5Gq(v$W^AtMzLu2PtLj<_J?(GX2&bPi8|;WK*2tKlDqBiVLw#RqL{=6`
zud6+TepV}kUd=?*YF(53^$Ij}rCh|+NZ86QoOnLOZL_@s^ZuH4KEiV$OgC)2ejh&s
zW%8L_q?TnX9iu{7F)F+bL^|+jsPNYKa}OQCFDwRWm+)l$Sfq61FJvKHe(=dkJfZ3Q
zpc%qb{<JwT?SU?W2QcQi5)Oy2HTCg`+JGWXhan#J2GTq(wUlVNRHU?kcAK_L2`raK
zXN6hFo&uMUD7KqUnFe4z*~#!zNwhR~763F2McgZ<9BqT=1zU$@i`}6MF=I&tyrPr8
zJNIl{G2TyLRSG8TCybHnv_mbzo%EULnfgckHju+i*w)Rp1q-VMjHV}meKsluCBNx`
zjkU~62~@nUGEjOw+#Zq^``R4pbIxIY(Q37ip;yiK@SCk%^lM>&RB&4JdlR9Y<kS+&
z-o(sYGtC-$1+vQsW3K9kd|B3Dn!pOy{56aw1PNO9<xDX0|0med{NnUaZb^Y^7Lyw8
zD5%mAj?JX5xMzud%tK61(Ls9$W>#MOx>?m{j;pKXmEuyYx0$Cr><KOdZwogJ0oy20
z>W(hL33rh2#6$J~auaG7Am|?JOteePfMytMu)gc=8`?&({)u0TOLHFv63jP_NT)B|
z?DOUcosVc^G8w2&ib^^IS^hm-yYQVX6v|!Z51jPWm&K=bO|$?9p2eE2J-+&wh*63(
zfFFVW%rowCPm%TALr|qU3!J6jbsJ%1TvMYR;<#Mff!TiHyiiIeEDMt+MN%p?P;G$7
zh~{o~Ed^iu<h@x=Te1(XloYTUs(A6e5KC_<$R@I^v?=0;M5Y~M)DxYaT#RymBj2`#
zN8sM^=a>==Eq%SgMQmz_?c7$)W*Mef&wt=f<_BXpTw?h%P5!$eQ72;K`>;r_)kIX3
zA6)nLcPK`*0Lqg9*j%bV-64Hus5hBaMmbHQ3R@P9pO<>r?RhL|Th_$TY-tvflqxcj
z#kC=@uA~7vu5~8%Kl-Y_=R=Y2*_VKh<=05Y{v->ey)!+Tg&IvGH<T6Ll0;1~&k@Ix
zQMn4MDv)DF60WEHLoM&AC0D*iRCmPREt{@r>N3oMlyL@u&|b)KF|#NoOY$|QoX<>M
z(A3T~^8A|E^ixRD8LCz1(JFn{L_()uoz=on;*l%~tHbL@UE4QxC*%gPtxEFUl`OB=
z*I{43{@Kf{{(bMQFaqMo51(>{`#0VpkLQ%sFATxVZ^r%SYr;}&m6QGZ>Dx<4NJ@po
zh6@}fXd8c5mJ<$FsEowmg#CtaMCv}?!xVyvdVFmD;!ys+U<~kfzGMqDni_q=TYdn4
zHBSN42flsFtgz?1W)nq~iT>K3?qe^4YsqbV_&_lICvCzNLY2s$z}Dc`;bq*9+%T4>
z-N(;_R6EzC-QhIkanwKKYLY5>rv!-%rqaeg61XO+!GP*bQ-=dT*CO2rh2FM-XP``t
z2~Bye0!gjjNdx7z6L+BaOOX{mtKmd+29Ir<$(H@9KU0J-zerSX-aIP?LI)^*ir#oV
zkSFo~-nPs`OC~!&LEkCa7N}Djtd5MoiE3;SlxZR-#<S+Ss(?$fmHA_le__1)!IWM*
zG(s0Y6p9=fy%cL<hFY*x_2%xvTH6=dArmQj1%21)H5<S4OmVQ4I)6x0U*8}CBQ-00
z#BHEzvf*nnWt%nqN*49W=4=Q~2WDpcI6-1>9`3&$KZ`N=dFJ}>=jmM}aNw|1U9^FW
z%8gZX7-EezddI)E>IP4f2Z5h}b$~*@Ro&j?r7dB!5+pN8<$An+=r*oq9|2o;xbpjr
zOEk2wCFlbrDv{BA+?h~Vc#2HT={UET?_?~EM|8BF8$xficl8b5@pFt)^=J~+D(|r9
zElE@sA=<ytsBwPC=l6XV#s;fkCCQIFE|%g@QMz$)yJD)4@}=acl#Bf)L3U;LAT8su
zvj>$<tZPJU5`*1&!hV_^U4$ur+I{yeXpnKhX>qirH`s~w?v`|1GN*{5#14&Xj4M$w
z$s=e$vP+U&moGAdetu1PT6pTeGXv^X_~c%v6hb)dk^=`-Ea65_HCaVz4?vq(_BNQR
z*Ok_@aMfz!$@imlrFtakeuOT9;!P1V4Iv<XYMzg>ex=ZHQ<7vDbh$lhOlej`I)7<+
zuld{sBlC62ai*E^>77ysTM4a8c6v9SRNcL$e~(y`BZaY?-V#Z&(!Vbd3n`jUQD3JG
z8<LcQ=%@2j;&8~Yponpyv^JhIT5d56GAKkYw5$nGH<_03H`Uj32=JOG+yF8VaSohx
z)4Sc`!|uPs=8U;~=q?aSDg0Ckv=qA+%IuOxq9GY<F^r4m{4na2Q3a0KA~b)Z9Rha;
zw4p=w0Eke7dx#*4al}K1VEu6nk%|B->BEJJayn(i2`4j-y5sO~rw<38EWihAaM|K)
zUu-940zB|Zgy=`zp8ye!=iefzBn(9s=T-vr${LI*6zn0QvnJmz*+(25O}xeoN6h0y
zusKHmthV#$Wb$QtaD=37n}ukd+q*g(YyFqYgvIX{i*p7p4C>D5m;%@3b%^-&ZKGKd
zfn5*N{owSI;xv!EuLaAdwS~{k_^zTw1dEo^VjUv!`g|~Iu%DpITMWtfQIewLD~Oh$
zw|%Ah6qW!7dY9=fS}y0COVx?yrxur5s^$y#sr5p|)wHF_*(HWckZnWG1Z^kF`LfY;
z<|p@5^AGMDKAg;ZuXsCH-?yA>w^vG(JXs$!Lkeh?M=SrHB}Gc#ccx7#v2<sIq;2OE
z*#pq1KZtUN(I56}oYdxV05Um>0HX01+XATYNfFIuf>9-h(p#)3E(5bTG>2+rw5%f!
zf^(z(Qwq^Ma)+d^jMlR}cZ9GBi9f|}vU`b&5|+AnZM=x)#evx*%Fl82M@{FRKRzq3
zJaR+HWxKN%iJI9rDJ6fPM}b~h*Y_m|eD(2H{fa)=Iwum}Z{nc0_cB0E=n1OA22Y(o
zlT}JN&t9`cknUCKvhvk^#Q4Cm+uGN43(vlog)XyD-(v=69mH_3OVzw^w&%h=yEx?I
zvi>e&hDrNe+0;eX5|a!y`eOR$65wVlrKV`F{UUb37K_-z$2Ol8;^N=90Zk+XHC2PT
zz<?(3r2Q#PGwZEVZrg+fH?>kay9(i6l+GCI1${t#mZhoLbGI>7@;0aE;t>^0Du%TJ
z4nBh7Q1GKck?|kYjI48KIIvQO0<<VLSkFq2a%3zBQ?Guuc=A2BM=S(I1Pt0&ASmf-
z7RYosJ12y&{1~>_`Ik{c6z%lxbTSy4Yc#k=jD?Q_rrP0t0tiN$sRU3qz`JL=lZ6&v
z(V~=~i{yU|;pw?`D8=_S#W)>+m12^=r@QmC_hQ@Gtomkk+E+9#o~(hQ5c9=lwdD;I
zXTW!Z%EqSt$?E&P2BwBd08EcG6pjYGqpaFqPJ`2SrV@WqC0Y{u_IDS?-=fKFJb1(T
z&=7FrI}z0V*hV&=P?(5hkj^Q}wgW8YG@rg_X}!7X4N6Q*&u7_pce<`HnF)vCve;u^
zFLC|cl<{Mcoud$juR}psmj&6f_@fjVaYXbfL&RD|AhgFh9sa()k41|cQCvJfGNE<b
zVg>P%dN99mu~>SzOGzmMQdmJl{s~!r7ilK$BWjd|tAB+e6&|2d3QWjd&V^2JWJJtH
z0fxJlJZ#dFR~zkf|7)hI7dstI*6bGRHI{&d+3ph)K<Tdc36fAXF*e1Clq2f;?lCsW
z^g_(R;<d0A+09(mkx@XvtiypMmBaTg+5F*ZM>hM8dAnZsh{9inFkb5)mhzZeNpEYA
zQQPiI;xNrdl7y;ZuG_L<4vJ$X{B{pFmd2*}BeQQ-6xgi+=UkwNH2_8H?30M&gp%p;
z!?<X7GSjkGO~@~wDLBolJ$oVB0<uE1aQ?W-R`7!ig+y}Lr<MPsPx5j*XldRA&93nQ
zzYnktpPqx72F$p6b`rG)w_e(ho^K+}31iXbSASP%xVqma>0N9Qenpg=HjLi3jFu=Z
z9<417O$yjpis$*adVp?DA64<rM=t+D-zy>&;DE`6`!IGn8MsmoLQk*BaL}?4K>Dt(
z%iknBZ(+eU*aSaSSl5od?_vydcZt$z{{9Jxy!SfxJ2}i(Tsj^&4>-{^L_@*g`)2%d
zk#BA>hRHbDu`TG{I7KQFR85%Zx_%G$$U;zSmCiRkr&l$=S5KlvY4~*b#z7Z#QDt^A
z?=NlF66u+4*wZ<N%HMgp*rC%?dV~=Vx<th|c%3FeKZE9LhiQ>skQ7A{9WB{MA`;d$
zf|_eSoP6vLx(~{nx_eM^UO#i0G236&?w6I62t11A$bV0)gS?EkTa~}Aw!`vk;|u>q
zb|1rGajt|7SsRBVO*J7;i5}!u2bbd!^jdeD>T0wUf;_44uT+X|!2qleJjDM%dTdHB
zCfiJw9P>U=WG;abN45LKEv(O>`LxrKdUOT7M}KCH`!$6DSnjCB``u5&z+)t-IhG)2
z;m$L80=WtHXcPwe`R?p~LbLKgxvH$G(3L$iW9OtkIC*i$dNJW6{S$qw0X5u{R+9n`
zJkzSMXShz#Yf(&4A7W8+$_<tO^lR5}>LwIe4)#<UU8LakF&m1N4C)kM@Bd{5H;fC0
zN3ZoMq@eZIET?L!9XdhCt<RBHe!UzdJVTER(=<5_-G6t<P8cQt#jZ$x7bljGsN>nX
zmWgAquE{G=bpKZ)O^1ORuakoGGqkn3glV4p6jv_E?T`??-)(mVok-M={p3+iho+E_
z9*rM3Tl~FcCM=b$Zv9tN_rkmP3}8mNcScv&Eo1XbB1OF?!mg_`gFvgCy`A@ON6bj$
z<AnTfjx@BxXBX#ebRi2<M!~H-ht4`Q*JbS?LqyqfpX*sIX;q7Q23Ulu2{b;Z>7+s?
zGQ>|d^9+_S0&^KJjwfRqYh4MJm@Jm-c69XhW{2wDlBy=v-{$t2*+0C|_&#3R)i=BK
zVd$?OOfI{wZe_)5eVqo<4ivSHR3Ovi$xRnP-TxkoqNLyMgm*O9;2c2=MD9_%o3tc9
zd!z)#CHoyVZ|$6ZU)$!QM~KB+sN>;6V6XZxpa}dcbBN|^;RLlN94@M4Qe=HoD-_on
zE*v~2sB6RFz9r_HU;VXN62tI^RqiuLz5qr9bQb%Dz8MO}MDxQ&7gchx2y=h1ki&V{
z*FM?qfKV3AJT7>$&gs^hcHlL?NylzGMHt_;Z!O+JOgvx1MSP(iFSA&9t6T1zdxu)7
z70`pO!>!~|*VlP9wL;JN?e|_d^}S!Y2_B{>G(83};{!Y&xAr$5PIZOAKeJn(mU)DJ
zh4ey26p2@NyfcD7(xs4ah^owvw`7bd1p9M_nH(vpxS+G){wYI2@CLQ&2`|?q{UGFb
z_HE?zbtfxyhY;)aC}3JM2t#26re%DKg?$x%acD&}$QS*<BML+);ZWBkx^vhhqobHy
zdirMX+b#C_r4!os*}x+`=RFuj*WE2v!(j99A{wh255YTfk_r<+aI|u^jkqq=8bW54
ztHt3aFH}o3^?^P!br4}e*FcrRoaH>z8I<9StZ^g#siUx^y9exGIb4fn^G&3Nkj)HS
zg#7j4fJUC}qIvd7fzl+W!FV(>ZdmjHPmezSK-p+*E;)^-c4E3g`?2G7V{j5oOiZ@U
z+86)Zz67q@n|bkft_cQTtY0ZX6v%E*%um(ahSu5nl`&-?k*?|&Ga^H4${?+TF#d>(
z&9&XqOP}GW!{yTN^Y-DeZ>wESG5vv*Q@a1^8nsvi9h3smpe2dT4c*%Jr>ZFRJ@&fc
z7)Jt{VF^@|^y`Ac?2k6B1b$ud>6{uELbCZrEpiq=2>+-v=T=8l`X($&Bnte?fZ57)
zhl3iM8CjiyTR?6iqHj{d|J{IEf`B%La%-~uJf3)YdNAC138pgy2O~qa+32L75jSv=
zKzvZFK48*7Rc*$Oree88i~iNRC9q%?9}R}(P2W}D?a|Yi#<cz81y)U0<M?883}Kck
zZfg-;fKGZvc;K%FH9Ya;9W}VJW+)d5TI)BM2&D~gO7eyC%`cbyGpX1h+5AWeZZxdA
z^ukGiX%6RLdmS`a?@}}43nP)C{N@YPO1|EwAhR(Jdk^VtTN%a=6;W$1If*tL`C*Z6
zpc$@1-3S2pV|Cw+J}xgy<lhx@zH&43wOfct$yFQYHw2o(yVf2e^1ttL5m0a_Kj-b~
z=%XgRaE@o+lh0_8`1U`Cp(cN6wv%6J=iX)Bd{cC9aSN>RzP`MDGykCH-eNjtR&2eR
z@Y825$fWP*<k`%!e?5s>hGhCeyc&16pH<C;YQMo<bKFcEe88i!kdUavntjLM($v!~
zsWx|zRV<M{x1_Z{A;vF}W$Yp=6~ESi*FbTh`Q7BNCB@0kW3D6j53+rRNRA=*%{}tB
z_uAp5wlT|eUg8pg#hxJbYgi*%zhH&@jAiv#DI?!z82_e&&mRZf4MU>_X;%;HuN~JX
zLhEkBKF#awny^ig&wmJP+<KOXAell7te%iGY6sDj3*vw;B}sNr`Eeb}xQ+Hr<#JLr
z5^|eE15G#GaK(=kF2q^y7GXZUgfr=1tiBIvMltqX2wz|1Oncc){Jx?ROq^QyHrlE6
zNg_sUW}zJcIHLfvjrIX@^efw>XPMnJW|?n!FcBbXp)s{^{|WPtbnKKOwV3=OKFv|>
zGs{YGL-!U@C|0XlloLb!?~-^aAS`!^U*!RTv$;lLwbgCpar4dh+Wt{5!mG#4;Mv7?
z(>=Jx_dr7{+snTo3kg3PXUYI#Pp)ivmYUMh@J;!|Z^wF;)e9o*ApMuh+XMmXtt3jR
zU#%F--?ix_0~<|LGaDzO(O4Oq#omtk!@(+%!ZqVW#VSS|j;c&R9$g4Rgv=Yj9vS}s
z_Wq>Lb>ScT*d@YtLVMWL&yXT!>}PFrSC_0eMq*X7g803smD$sSj;CGtu7{?EjTVO<
ztC}<W^DN3@%A)1zPVvn7h1Nyzg9vHkTtB_?yuotAHv4wJx4Z~Krh2cR6pkWvbV6GQ
z?uy3{==U0EcYI5}vAAxG^So<opgWMUc2p;j{J2TmH^Cb)yr#bE^6hKFu&>+6o*!i^
zQwJs*s|v7`?O2i{p6^Ak3yCQ(yFWKv&7R#~ZszV)RT?N0=VF1V8-R-$7?dBG+sKa`
zy^eY;^YX^9+M$l85&Fu3oq*@vzH5oefSST!+ojgv^yqil@j>R`eCKC$`F(0qlavXf
zeopbdE&(G=>-xk`>%Qr1c<fQEYmlT(y1y=Qw>a)iYo6qwZGL!zKR|Ll92|sbLL0+|
zT12)X_lc3D2v{fhvFe=kp+o+wgW0X#v6e_P-8h-73zl?pMtth%vBkYGT6p+5{|OSc
z`BcprS|R5uB4mUAp{MssxVWI8-kxFhHM}5czfUL!M7jyEv9m)ZVEFx6z)LA!Yp3rS
znEgIM)80<o@i2#O*HJ$_Yb2SC)Y)|(W8GxsD^1%m81Mq<5QWOLBJxkrX1K)9B}#(c
zG(^Piausu2xR9kpOTY@Zbu0e*lJ*_9vG$VN-Ska|A5n7Bd6Re+?;*uC`N4oclxW`J
zNo6?>s((uvSQaK{?Vy56`EgMU)vh35n}S%B+G2b)xEXd^?Xrt~FCplb{qI<U6r{ry
zkIDcaQLqHM`Z;3}Kt-_+zscQ)M6^MxSGAHoLzb-TTebV~SFh{#1)Q{(=#9|nqAS?{
zB#0w9E6$?Z{cLk#2Zm2!eq&?kFInOJ6}kRsV7{^yF_}VZEGwZYAwOYpHE5toWIe+W
zlKneH1WfcjK`$eZpfgQ%o!X}#dPYP{m9@*?DH^+nB@1zwmNTgWr*1b^;|N@s2p)!f
z2{os{f7-^ef@_?47XEey?)TBS3RA(~RRV~)-Qia7cS5BvOu1fctqZ!@<Dd>sBc>V>
zIR8@W?V2M-ePZyv*YerHXSP2WgSP8v8?VY3Zjt?W&(6jmnq7K%t%_!G$PT@bSABEp
zk14xPp~XTDU2cP0*TQ8_+t;P1b0P)1SqVkt3m$pn_J1-*jv^sX$eWxdp7$q})LzwW
zceGb7$#K?ZE&XOWOAM3#2aG3pMa=P4d;UasEH~VrzpBbslOQO(+ucS&o=P`@AjcGc
zK1{wH8`0`(J`n|mt#6l%#{B@TKzX!PaIJ9uNM1LUyuw?BQc}!jf)NW{>qq%sZzoCD
zdmtEPZ&av%7d4`PWqV;oLIbw{15bgW`tL`w9b!YkK`-HSD7h#oV6h(b<GogMPXk&m
zkQ1RZiJaM{6|bCxPkfH4nG}kt;}Dyo<di(pS>cVS2g${T&Pwipjo!ReE%0#v{d^jq
z4@^t-28fXMX)E=M{M@s<U4RICLl(=YAKUR(-88QTx=N!;5(@eAY;0T!{<U0QVypr1
z5t_7YUh<_fR~haPryO_ex_Wl<I+oKBSP|M;OmTBRnuLvsC7#RewrIoDS;u^6TdGB1
zg-0OMh~l$68V#6AauA#$hbkxPv&R1GE*poU?yQVwQJF(;69^TAG=In9ikbV^XcSk7
z_}XWrz22RSN)t}Uj=LFxO^AgII`CcNu*{PM$kGi+Huf|?u}w!}hFgR&M>u0*f!lR8
zn^NI;XKk?!$faIz2eOa&!X&dodT7Ayl@Kn)1CCsVvFfuFEj#H&&x=++lNhJkONE#k
z(EXJ;=>6~O+cPm3YyLRQ$A`w^&1Ozwb?VI;C>n2L7!{3%Y|LU>_w`!EH*t#KEt$#$
zRNI@|yrAq?>Z)dPeV@$aD;^#6+0R(DwEsmOOHmDt7YbeOz_EO7Sd#y|4a^ubSZ5F8
z6@;^`sDA_opglb2Qf1Q2-QBs0;4FFcr)vP263X`l$DIYl{fmtJos^P$L5d2@h`WX5
z(ZgPQdDUOeG@!mSGv0Fh{!B7>J3zAQY#q+1xxC)q#8v+H=os~Rp|v#s0i%<Kpe^)x
zDc^s;h*fVoPdh{@mk(jRQD|h&9hjbPF7^_M6`88EF$zPQ+hg`ssnq{N<!^WD$o^%0
z_mKc}0zzT@JwUgpP*Cm0QtCOUQ0m#HzX*FKWZR6O==UF+LyHD{s;s01cWuwqwdm`M
z(D-c&Dj`EPN%`gKm0Q?iVAGukoR0mk+Tp4SlWY&Zqc@e9QN%xXkTy8&sgGH;kKHP8
zs-^n;IJXH=VQ<jWu34|qZbZ?yE7C%{4&wBMp+hSifG<L16a2ezIE9^Q)gkVBw+pAd
zwNJ*a*4%w$=rc90H@*O8CQc2&K}?N!Y>cfeL(TuWY!)&mAkK{5kDKF1cwKTxrr0R7
z-_xkQUafEt81vz<SY;us{e*&hqwPLU!=N=B(b}f!>a4+>$I~@<!t{4i0Xo1N?d_b8
zseg1$v|||xW-oqkzqI(@=Z>fQNU!&!DW{`{uQgqFaTS-O?1IW3l2XZ@qZy&sRW&v=
zKbnm7>`sf|Z+OxDP@+Ya0W8|&oRZQ5lu!wwNWzb3en=I57Wf-o>gn`I6mMGzsQez!
z1JVY47hQ>!_<S`X?38m;S3ocx;aOcGOP9Zl+a0vlRflZN`=b`Ln)N3c(^!IOhpYCx
zTJ$hx>(lrxEfOS6EO`>KjDcO%I@g}-Yp&%Q@6f(?7uyc5UgOj+=)3|RS(lw3IRPpj
zUpoLWItBv>t)^GzN`MIOy^a+Dyht=SVdm#sv>?v3*eWjX`pT=!gpl-HF)Io3l3zIK
z1D~76>E^WtdEn+#p~9z)R5=%>h@mEB$FCa;)%761Eks8AX0K!j(WlN5zIQxY5tNk0
z<g9;LWiXp5X`T;5)NQQ?YN?wp**`vzK3<a6cC`+uq;UT_nd1vI64evaS|X{HK6-|a
z4?Q|C)Iv}@Sn*aeskFDX$})I;Jv}3faer?T)c5_F^Y@%Ejq~m$dqu5X9k;|tnmnPD
z*rd>b?h6n~(M$fTeJLoSk@~zT>b@3P3CGBb_2VNC=_TIuewJ_Vv?Kca+_Q(zM-;gj
z1-y0VO-9axWL+MQtRrnz{;i-cVxm|~;|~GWG`rGt7<u|2xqfSFWB3iP_IOl}CEqHw
z)Fr{P+AW=<^{r<{8d`SsNc<U(v4@?C4)=3Ktn+wt!AvIzQU_8d4yeAGjfTM3!JHWF
z`gEs#RE>^Wi<(7}FHY<}Z-(f~WL{-t(@R2e&~W`pmQ8<)vZ_a4*dC~X&BUSKL(9)1
z8sjrz8z)TRY-)i6%{->L;7bXUL27eK*O^WIaz^^ViI9Kx*PTlfh=U~u!--B`UuO#|
zq}lWES8rk%I^FKMMsz{BRn&EG%|CO3pul&W2iMq^n+riEp{A*Z=}e=a?qL<Vm8UI^
zR|)+8s0xBCEAx2PCm^wQff4WCKS5>NkS;B3VQ|W{!}$p`v#(u>&a(8v=er2h48lw&
z2S>N^tQ5cxF@5Q^LzHwkkX6aS$VN&bp$K{Ey2xHWtzLij5CXpB!hm(KrZr#ttAy7q
zE-CQb(=;Yw6#*<$i~SHJn5FZHBO}ZZeSts_o(kr~Vs^ds3sHg||LnZBxbWN^Hw#X*
zG^uJPcn*_@n%F?Rs87ky^zB)$8<73ZZs}rSLx5-A@68hh!umX)%P{2pgd2kJkW!dz
z-nDHG>$r}Bj5gnOD%!lv1^TP>-GzvF_;+CmAg2(CQi>9~0gY|W@I|$v`JK@!uiVLU
z+2jX&;c@(Ojv@?XR`h(3J?GwwqJaC5>>+kMvNg?TgxuL-w@;liuWm*|xPb)1)ax4w
z_=L35A>VH$i-+RPKX&z|=r_Gzg_dhB?05QzQkd-^{&IO+_A#w>L<v=qMiYj0`I+tT
z5U9Pny{D0Q{Jw^1>+4`<+w1KQteVcoVVxQ>2giQ|sJDjK>%UrQ30<(}>?SooAF5)+
zrV}X)|K<ATZ(~$X@=KUg+k*CEiBS<YFw@YFvKO^1{+%}^Dr1z7G9P-g^6L<y=Sv#Z
zj`(qLo6%dlt1nZUG*@~@0C{BL?9(*uJ0RhfHhf=&3NXf==SLJ($CCp8IUqbpr68ne
z(>;?o5ox7z*%|e#a$OUTEeSzU)>Gg&HTHX*JvH*ByE-mObZxt!7`Z%TBI8`O^(%(H
zkIm9)k>B>7l*Pd>pQ8Zj9H76<RHjfZGb`#8rqIxIda-3rLiz4Ha4rA;GFY(u48B_D
z&ZkogbxJ>*KaPXT-~V2=T$<l>usUt+2;O9U*AF2ma*f%>*(doMfqJw(RR!_uZ<^Sc
z^c;+vw>TRG>O*SQEz8^Z!`(X1iqK4<2Y!*X(nEkX1wyh$=-Z@$)=tXDTGXYlUCyPi
zlW@-s5%ZZ1j6r>%Vw@pg*TaoWz5bpnZR%7bGevCU>7t>~t-kijZ{k_mHzFhVdBllN
z7czUTkoCav6xq2z*?^NsyVa*eCelM{yRtH+3LOq$nYAOzf&>*M-)AY9qFZ;Q;;2~W
z1R2=tnN%N+IgkL}n{C%5rUj}e73O_Z<1@+-Zr4*rUj-Be+nj7S#}$-9XRH$&s{-g2
zNL9`?@3U9>FCj^@(1_+xbm|#g9j#<imNgBVy7W_%HSIsHu<$nJ(Ge!<@^vjA`f26!
z$4Z&6*Z-+0?Q6lYwp-wTukqU_hXpQ0I0`uAe|fY0LdGZ&3lbyDb2jrUWg)U|=*7xn
zy2_lTtlKM3k^b90@oDK#IQr||y-gL5t<IpxlI%585D0StR;>{y2KxJ)LJ`QpW(gMg
z%Q-*#qgApxWA}qF&#==p+H*AcL?MdH!uT}fTXNw)p_e8gibW)DDqT~7N!xrYP>d%G
zPa}Ff-<de$0VIjZXL0&|xAj8ijO6-PqUX;7=X`UiTtGnEDhy2}Pn(gLO~FxkNLgnC
zm8o(#T{K94+)OX<*z%uhKDUU8+}Q#ZP`o0hHd^*;-+Q!6EWnGP<2tcPknNioeL;A~
zCpBI*mU%Tm`$JqZ>hYS3h}Zt?TZ#JuqsIb-lya>KpdP?Rp~<xTxaQ~N!QX(&GVtZh
z49P)-5P*;(o{A~3!za%FomURd!uV_T6CfLfy@jQiaz^WFPN3Myljif>5%YDLIoGep
zG4$o?3r9!Q5Q1&9=C!_0OGJ)!^0b_Go!+q(%dR}WuF)kqtEMJSgp?uW<z<0d9X#i_
zCO~7&jDAgnfg#$ljGAPxXNGZsC*q^0q00?(md4%_t~58b1WY195>tk6XIqR3*ekab
zRTnykGTxJ7-RD{f@P1v21$2P<`IcEwUq@_WtFPVxR&*2%)d175C@Eog#n;_GT6P>2
ziLGRcOEl-%9S)&UUqVONF%|cndPDtC1N+myy9ZSXV9dP*OLe8ZTEoxxufbT|K)p_P
zx)#et{a)driB(i+ATTz;L@UzP&UVhPz|rV23|KUzuZErYl}Lt#<FmBAKnXREJXY^O
zr2FN+ll?oy?hn1<%OqRva>kDKg;BZxvgy{*(h`_;i#i6m!PW?G57r1x-Wu=>-&=X=
zcK+$#yg+0Kp=dTt@7s+GZo<pZ(yiL)Y8r<m<5*j}-}eOHp5A%z{yZ+t`eX#_#@Msz
z6c*nY9&~_O-KBE9SW|U%^Y{R1nPwfLVn7X7(K%|8eZa6ujdsp}N{V^(e&uuu`Ebb0
z%n+LJtZ7RJEElfbs#0U+y4Y;uC#Z$Eie|}BS$Cqgee0cLZHt%Ax);+Rq+ry#SV*Jt
zLAJXb!{?1uk|PyQP3IWoa$Kc)^`OYu5`PVL)8Npeh4ue^m%>$625W5IPZ?h3QcpTl
z{Y9neAk<m1yy~Jz8J_3d1H=_AVxmzcicI%QQsn%1S|H#6JLePVya}JrSBNjG+pC-w
z{J;47-F~<VwO*pY78<xgi2pu)LLJzhd+tmX!6~M<_~pWr=HV#2y~kYGGx^iwqx<6t
z`s2ly9ZRw&lgdV_Ke=J_9!n*kganM-j>6oMFC2Et(6YN~M{mY3)uh#0lW}=8-l$iZ
zbxu{5mzLO=gceO6cYc5L<TttQyOW$6$D;#S@ZJkYWaGkJN(1;FBM&3Y=dBAJ8>GK)
z;J}h&RFr07n<Plg&Lp8ZkN+;E!t48MY$k?-r|}8^WKI{`ZJKjRQ2b0^nFYa8#m9uf
z-BK{8kIU!OR|nd~0U(EYBTjUKAtY94<voLn<=eH4h2dl4wagOkw;EA*)xg9R`cKnv
z0GVjz7fUJ%)`T$_oSz|bBSq;gpqBj-D=`Tcr6s0x%l~db5c_RVcPzv_o!c&AgQ~mG
z|7;w!+)Qi6Gbf+(?X#W^u#=TBdV*k(mq)0K1;(6<o5#&3tMeVFTHkZzFTZpY4Yj20
zXystou4VL<L-MQMmGh753*yIC_xrC$OqGy5CXkC;qf{1u)a=%n!$uV@?*drDqC2|2
z%K)g8E$KuDOc$<S;__eq>W`S{e|O%K%CIy&JUo!5gQIXzF!nPHRbvjXo7TNkOj!Lr
zb#lJoYuOr~k1z);nlH4DXuQ_#Lb4u>NRSZbo*S{SU)YI#k?KheKrM2`k;wREv@XRU
zmsp#c#U^x<4L1iOXoHqOO30(K7cQxdSQu)%e@WrRExe9R1<Ma5BbNjKFKYDAg2FeS
z7UYq_;!!Gc*Lo|NC?l?LW}kg2AR<JwOJ)dpIgj!BpWHXbp3dn_F7a1dJaYCrN>QV{
z<3g5)g-^Pj5y;B>nE+_%3>WAXp5yJ1#_a1bb`B}+?d}@i`3RcOyxEZY)xJutL%E`l
zK(W#7*3;?fsq5pB$Se$w%GsC1iQJ{qsY<hjH&dw{`lHnC?A8{S(AT)wAoof_$!MK9
zht5HCA;b12i#iXu9LBfAS*BatpDUy36$XH;un+l={elV{kclm5jL+eaSn*xujghI!
zru2@&!)Y8H*B>?b%Hk&MxZ)IE3S^O|QPK#5f_msR@7D+VG!A<nAlD=vTykn{8Z?DA
z`r}_*6K<N}d%I;cJjwuqEXs^R3T5aL1cr0MBQbkN)O2*!Xp4Ijs%ljFdo+>LGIEqG
zaIC};WH+?jhiCyoaPtCmRo;kk^T|j|3FPN<NhwI9lA0q<r=8D>N@|;mB2;G*(LZ>l
zT~OWiubz*XZdQ+`>@RzvHL3;ncODQmzDZtC`pqwpQ^slKw78w0h$n~22|V6unW+)d
z^oRVdCP^fKK3P+icB3?|TS`UQN<b<~Jk8dop!GCPQ=uq4?mdpl;qBYaT;F=T$Oov)
z=k5H1W|3C4W`u4FkG5e?)I^xndsUl13oS&7Qvspb%;V@?i0#eIkftNZtHhW7srD0P
zI@Svm56B($ds9VqS;-C!jdx^{ua9BTgA(otCCZT_)~LFLDR7Rkn=ch`5*BE-#S6?F
z3l0N@{E8LN?Cu08`I{Y3td+xii5n?@S3{fk;FD(4`%kOa0WCA|gN%Iz44?)7r;PE=
z>#_e@qk9}#^vC#49SKu+nvWFv>o4`(at3{0CrBpA(5ln8fQwNU#dO-FuJb-Sjr@H1
z7cvb3tf`#U{oP=+hX;igSML;lZVbX$h8x`xr};?|ds#Ea$IHv>jd>kF_)-|0o3Xd@
z0D-Wi+l>=;s&)}<v{jp6_9KPNFDNQcZ$LaWl0*9_pNMv5ho>toi%VnBA}@>%wm=PZ
zh+9^%*kKgv+WY;Rb9Gkz=1;VlZytZc+ZuFy_u&rt7!`KcW_C23k$(LJRfaPt5I5i=
z$4_}u0N@<yKFV<FCZ35b=0+xhb&7C&kVmc36Uv0<bF~5+lV^KNM8j5*>Ig03ppar>
z^PuUh=>Br70DR+)!F%FQuMn(-gZ&|dz2dtA_XL<NWP}`r`QBg<Ou7_o#+urK%U?Y4
zWdVdo!~$H{UxbGGn);pxOqX3Qu@v|a@Vb+A5CHK~UEdY4qo%y@9F<z(Kd#f<#(MBw
zD|pKVQg?mqvKe^!4Bek%w7NK@>=h8YXUF3cmhQsjD<vnzRwm7-Uuv!<No#}u+}Dru
zUFuF_Z}7Jv$ey~U)V~y&gwe**5Ytk;Ex0fx<x1-KD_nVb77&mw#P5O3^X>StKzo5m
zv3k^PQ_^aF76}(CFF1{OgMV$eXOFZpoC)GXmFO}KWl48b$iu0zu0PhT&GTHisI+Pt
z%fiA<cD`*;d%MAm<=F(%@_|JWW4Q$=N*euqer+<@h^e+~p|8DsmFON6d1^T6gyZna
z9wVZ!(%z%eg2-__vV<?oz$q#c%m3w=`dDHB5lsS|Vq_~21&71CSIwl36P?v7rWVgG
zqyOEbx|=CA$xCtCb@+r@X}GmGgA&biR*k*Ak<?1d%O|b4KTh=3#+-LYtfx?>g$MDo
zh5G|Ph3dBdnVxzes7mU<9IH2G(WMw?8!JDtZjoHCCE<f^MM4p#{wR`oQMw}*Y^AF2
zRy`*NrYi16;mc+GD<jalJhkG(?68A^k^GKVVkkAwS}qrn=xlCwTuE9OytmGlBVP~N
z#wa^-MC_WqK*%LoCp$2cAI8j$r%0y>X8DCAK^hD}?Qjf+Sx&~*v_3d$Xl%{H%L7p@
zCh`K(CaI8zZ1~tqJ|%SkAT{<>;2*8A>w`o?&Y6x2TXc<UnQ&io8}SH8?oT<8TnTtk
zj!E393H={Q&+_Th34}Kr2<pZ_fai*Gs!>xQUqas!Ajq7CKPsiCVb?@)DOypQiRMJD
zhdKI9ybQ@2^GtC%()e}J%5H62Z8)Hm?82eS3X|aey0BM(ZH0zEWplky1bjeOXmR|R
za(-@-913snHs@X*5km`gyMDDmv;58D<jit5K+`TgfC)(`#}#SkwfK7D67JEWo?6D*
zZ?C#7>8gmWe}16w;(4nYO4p0~cQsKjF__vqu#lW9Xl&pl52t708cU`!-Xu@n&?O6p
zLaIl1?Nx1#rsC9@pnF~njq#ge(=9?%Z0pZ0xdfG&O0^E|xdIvQZ^n6}meM#>VkTUo
z%Q$k0;oS_^XEN++IvOMUTOF@tc}D0mQWi0pP7Bo!I}(@t@4g<83lPLeYrlLtJWTw*
zT%$6f0qw>gx}4&T__UdH?<$xDBnV#fIGQFa0^HjlS(Go{a_73=L1~=0X_Ef!ZWt||
zb~(|LKeIg#QSq58l})u+UdlSHGLsBf3NkaFYV(RV*?f;rE9A|o)8Jir8$goc<r?R^
zr=UMdw-OSC!SC}Ng2x_&BO4Osw^EF=C_eh+ONXc&T=kChh;+c4v|H#n+um@_Icnn6
z)+p!%no9QHCD^@>D>O}|y_D$}rrg<FFbUO~he&x@%r59Ris?{*)t7H_J<c+}DblaF
zsKUc&Krm~s>}dWht<qVZp?nu%Cpq2ak%Z7Mh@Ac?&1|D>#iGgbn%+EcCb{UBIdW6N
zCHnA63=1bJ-zwU~qJVsC?`3h7jF3Om6`a?9j#la7_s=XeCWkbtwo$1@aXGDpTs)Tu
zrF#1dh*46U1|B<K9&JhLy7`N@8brr0X)9^?b2T(oliss%x*oTKlA44R_4JQ!id;hE
z#C6XfUx9kpY+{fY@;yK_X9%)Lc^r<&F8xaIfZ$uXsHdO?CiN(R%y9{HezJS4UuzF}
z(gk;;!*70S(bM|Nj54*ucNnV4EV~YZxujl*n&{Bd)oN#b4ccOPPE*IuFGR$g^dRK-
z2&(pbH;uPwyZEw%WW22Od|xIuwGO|j4L2%%6;dpHSakNM2&+lFCQj;vXHM1pJ=$xi
zt1djgk{*j?j>(7I)#rH!6zeU6L>?$2U|c~AYaG>^ztsFpc1lFEB-3enc{R(BP(loZ
zx%0gX>Yi`r{!b64`Q%Fhp*?8cya^yDA_{m<%>Uf<fKta?)mDCbEoMuL-Tk?&PC-V0
zlXrx7Fp1Z9&(1rhc@t7#+$1<ukkC=P|Fx9%WL2#$E$(YnOi9Pb2}yN_QwmDTlKVs2
zt+n;{0(7&V!6;uDjlZ(%Rr#8OvlKee_Ok?lWW|(vc-<EHEHkzzc@qFA)0kRXK#>B$
z<Jgy0=Gk%L`M);(8*PRcOEgBi+&~eWWd;(0y!LK|=+}0q`qLG(>3+lnk<0TJ1AbWq
z!KC=O!w;E0$=|KK0!ZJ)6ai;cTr>%lS$DX+?06R;bGf$^XdtwBj(eLKiC`8xj7ld9
z(a24X4s84mL~S8JARJOP2ovU55vLkJVvn|LZ@HkfSY!uP{}zujO%^)^PLz3i-LCDf
zRf3GG!Rue4oIEZQ<t8C%$GUJFOaYu?XEx{8A8%^MENVm3Ue9dPzB}K!?arOf*GNCT
znpCpxyCcFPYuJPuf4_?=s{XQEBecIX2|Jagvv+LH#pCAs*~GEDeyD6JN!rG3Gv6su
zwSPs?)PjjHofwcY^}I<nSe%qZ4U{&q;ivtZpaPZ~)?)dqSaRV+CI5lD7R&HyzV?=r
z0!lfZhNxtQ11Hbnr!$GDpR496iO$}Dsx&-V3-05oQ?<0yEJ8Xx2GzGeb1%}3so;$h
zs;@@HE`x>f^PqlCvWm<#nv%^>l5S*XL2A&4bM@P_TnshHm6I3Hb{;zf*N+QrAMPJF
zPs6BGS_J&2`kCfFsw{(*9OG#S=ELAW#qn>XQOFc8`1;nl{H~d?qnh?RbfkwW?Su$L
z0_QM6|1slOKWfX4^oy!y24vGP4Jm5Z*=Tp`Nn&U}6X21`qGXoO973#sHVM*C4n)Sd
zAh8E;LR+1BGYOxY1bDt@S{~A!_Ap|GtF#pk0u!=?zFiyen^gmQqY*?VYs+XXdns+c
zQx5^$F29KT7cP!9OK_8l-dLg3(8PF$t3=x&CR|!kem$KSKBl@jNd49T{=Et;$(CKN
z?`9XHol~+oaCcyenVq>6@Z-3n`+H6s*B-L&W)wJeS`Zrtbk)jUQ~qSZR%Aurgo?Lx
zd^wW}SE{$X-{`+kNT_m7f$Ve~1KeB8#iSvC<|L5*+c6!@Mo|f6W*gw7#v-8&5i6)d
z#8EW_hVIPu&yc+q5~)?s8CK5Ie*hHn)+wqVfuA16xW<*Mc(ZLn<#N+Z;(|v<zU={$
z+TdOz^Gj|`s&aN>(9H=bGlkm+RZ_TCHiZt)-7cLjr=Y8E{6)CpO4Gk-^yt9AN{8Y=
zpcoAV$#2ii>j=CrAjtJYPl>9j>rsmh=PD|g&;R?f2y8NWU&rf9cCU{0m<*U;s7gxU
zxdpUcDxf%+Zny=y^I>oRX{=9zEl*l9Q@^AIQS)H@WGLzIpoT`5;rUdZ)WRt{%2Z+;
zGg8`%R+}gocd>!9Ald%v4p4dFOW8KfU*`JL-1J4^JfWzaHOJ}XR=F$2-9QR(!{AKX
z6`trre7rG0UILUiIj<xM$&<Pp1W+7XXWMWnv6ZsZC2MgOyZ)5negho8<uqRT>biVf
zI(ceULOtyhLNUgWjaTG6%WYo&BF;1v=QB(%r77o8Q;=#vtny^gKNso8et4sU^zKC=
zo>q*%?HcHt`CbN{F1xjOpZZ-FQcR<zp>5mkvZZRlF0n!CUEW^=s|{9n&RRcbyL%+E
z>o9~N5a!LhS}H7elVD`H-b6XpDn(_rAs+u>zyLr$n+BYZ9TQWM0-K(~gX#~kEjiQ@
zr2V@7#%%_L6$AFIhwnA=dE@1rV6gum00Ke%zLsNZaomk2P8|~^U@$O8n~1B3&Ua2(
z2_zeHZSxDdrDQ(4;8D*ykyR!c3j&=TeV0Vpi9qObLG%&a#^!yNW-`~Lk&~{I<0%<o
zDrM|OFl+L<i!@9NiRQ*Nkf}v6)WB$VjB_<cvc+|8aV#2u$L{79I{znx0)P1LGMOO8
zayY%`Cls;qqMEw33&P>yv}LyI9BC@u@d_BLA(hYJ#>#Lo<m+Gi3}5=<m>W0uxN&`#
zqr(Z-_$&dxD|W$6&F^u0MTV;#w{JY;&h1^!oLS-N%Uhf~w@Q)cl(X7j(36;6k#-n#
zP7?-tSY=4pI6zX(U=li$t^#yU5ui>wcFJv`ZT({95qs?SdMldf<+M0@4+BYsgq={J
z4hvpW=f89fA#)PMW(Cm(FPT#-i_=Jj(mEn)nk1-?n8@c819P~0yG{wHifA`-H*Fd;
z#sF(Kw`kt^_z@h96wyfIkC|60%w-{_J0zcK+&zaJF6{hUB&PBHZ{vW$D5%)zmUuKf
z#%Ybo@@`|f(D{GFI{!!Ak1iU3#j!XZb(l=ZY@d_qLrQl{CPh+&+v{JJ3HR?Eqprr9
zt`pv)>PJk2Gu}_Vu9Q((lIK0X^u<d&|NL2Q-`V5ccXrr$I7Tq^aue>eS>Ad-fFk#&
z`@`)c9y~Z;d3nI)%V+rPb7#EyifgTgIR*JAJLAM1PMc{ky2_bHUT)%qs0m!GDP@1&
z_O>;uiOG7MYn~>7H_7TCnf4oWA+7i6$~|2v=p&^3s7c6zNs}Pj8Fz(lWU!v1HKtnr
zWU^136+5qW2PsLchtpj|!!3~RIzT(3x^9*4EOLT@k2dL*on}ZouWuU<;d~-vv)@0}
zm$$ILs7C&U1Sf!28RL;2m-<E}#8QpTfS>w}Dg4B*a5US+QDXAmBdiq{$Kv>a*X>WA
z6X2YQi^vD)MjvteN2Ra5*HoT_fqXcB|Hrt!$ooc9zW@C{!a+_x%=Dk!$S6gBnQ?i<
z@obx(UB-qOR$m|;sx?_A>~4>^dhH=As}@%Wsh*LTDbV>p>DmSx<C~4zIgSo1CL_b8
zi|6?7{f!s+Yk%#tTzqPks#eC6vX#$C8Wg4ExuxGL7>{PW`tl9_>|5`&cEzz^wp)Cs
z-OwMMOS@}h<V->)q$?VWMMLIZT{+b%be!`<I*Ez#E0b8^Ceyi|vNmi{7{4O%DU0gn
z9$VKvIB^DSi1|7v(VJf@gu<oLc@4DlIz1w4S6XZ$&hUZp-kSGF+a9%%eX+p0PJoll
zEe{fhM&=b0sok;fGPQZ!GOs9T`ZxEUpMh3wp}0;{(x?_%_P<K1@o$ldmWR@C1`NjZ
zyhX5sqwyYsVzZ+2Y5(Xx>yL5!_uKo6JVuP}4?|iX<M#4iSLnxk%<p}Lmu>{K$f5!G
z#4-WogP+*)7!AUE75>NnFnvhaUq0Z6@i9Mu^A`j8fFGb{N1hM*sMb83yiINjtT930
z<O6%0I-IM?^Nc_H<J&ykIc8-&L!G~fOA^<f2G+!MxAfmcFxLC$k4{QX4wcQdHGcUQ
zKf~Yrl`ru5FP_6>!e~6Bs$DFY8m4bmu-34=)Z_kx1Fl}*@hb%7l>3~z*3D0n6+uU8
zmYCbLxdJ*Dmz);j<oPt@HB15`Cx$pWSBhi~F`19wMcaM4%zqSG-hswwI$DyZ>Z6#m
z-S>dj?pf!&=sFI4s*hCYXv3w@?k>L>{X1w$GdIsQ8mW#?(kMS|GboxLaFNNMJm&Db
zThB?8a7au%N8a=E71m6t_d!aWoNq#0@*d8=ZmI3E3!y(QzD7Ak(I?A<s)EDmo=3y7
z;)gW)ALg_En74ngLE|GIw0;O2FY+F@_+UeeJQnQ#L9XMA24Hdg6duhan)eHGF>D{b
zimH;+^Cy_PxKLMhSb=H=zxf+)^Trzw=na(NAoCY{r%6Iya7LFlaWInH!oNwJ@|DT7
z=IEfNmk;>*SD)cu{@Y*T>woEKhD!w}<C0k!VuhRW+6hjTUST;pI*#subEfjRn#kf7
zkyAL0q@7EWrl%_JX}>!UOKZgIJ4=A1khK$Qhfgr?{V#KC0_|q+q%irMw{OeAh)lQ^
z`tPhU=44Q9vDeeV3gP>W8Iej_{F=Ex5l3q4I(X`>Xqf(KYNBh+j?xT(#z$Z0o@#7<
zg82^GbxZ6%wq%Xcyw9d7?6wpC+?p;)+u)^5Kv?HQQz@0m*=SG<bs8GwfCxCjNRPai
zBSxs|isNzzYcp(KoQhXo9E*dWRt`W%o%ylS`9En)=f^|m|2X%b_bpj($itJ@Ihx$0
zu<J}XrqWr=YWElUn#>CIO!$L;evQ{J-sQ_*JJ07ncZNLAm`ogH6*vN>>n)$^<25ym
z!3P3iy{XXQtj5}m&wchH&pmgB`*-$v_v%A-9*z+8d;qbbpgKeCG=>`aTHl(o)b2EV
zoEp=2cJGEn!q%1Pr7m-AO>)sCu8CHT7_sOaOfHFk0HoA;O(=dLVYlN^*AXV_92Y=%
zM5EB61v0;DPt1=r$;MTkYiy(|*^hGglq0W=$&Nb}HQgd9iLLOQ+JcVXLMWWc;{J4e
zZ`Xv1lt7m@5h;%^;VDQ%NYQR^5t^Q+$*M;+)tClJUwgkUnlmS>h!`a-^!fvO1B;$G
zPO4*$ru+1=WvuPJ2PN&}Px#}*==`6U@b{S4dy$_irCIhV97h*A{~v+Q|FQ009Q~CQ
z_IG!<fB0RVTK`wbZAPg!+0*)qy`QRuVLxN{LCH6M`zkM=d%%}pJjdt0u*uR&!EEBF
zYX`<B{<%kG&ZwR?!xarbuN)uE5QOvRx487w2D`gQT)F;`dv{N$W)5o&C!?Cxwc#U4
zRRaDo(7lkSgfEpgmmVh}+BTsL>YRy)Xc8AZSI9L9*iq?(1!>dd%(2&Fsn^7H(0Jsc
z<5<{PshD6pn+V|Kv`um<;cLp2i`CC{u>g@yqY|4V)l-c{cYC27o28V~;6%HO3DJZ^
zIJbssJQ&>E=cmaskTmdEAK`V-jc!&k@qQ!#rX6#_2yplnlXkKhx~c{}l^93}Q!;ZB
zLjOH~k2yteNHJ7qM~3~;eJ0fb>nrEL&J#WsI{zP?&VOFzA)gvOz(NJEI6l&&w=%@+
z_qcobZO$$KOQ;w!lQXMkaa-CV0ghT6HWxBeaJV<)kACku-~Y~CKKJ}OFMR17o105i
z6_m5O-G7TbV#+2;!P5MCWBhJ+G_FBmWw^>O{`?xVdcutxd)&Hx!qd;K@rBQwV=}AT
z40>ssnijUzjz>;+@^2@6jr(bnBn_r4|1{mM>oO*DjC@Ji=<#=J@K0!wh)9@htbjXN
z04)UHp%Ns;DNfL-(U0mWx}1xkefOfMDlr5}B{c(TB5zaTf8v0YrYA;uVd_FC-Hk)z
zn3yC3HjS8xO-CB;leQeK<uP-(iP1D>Src@CsM<&$ilz&E9I7VCJ(y22lv5rF@p-3?
zlPaCiCL=@E&lRj~Ic{Ce*%`lst0(jZ8*%Ni*Z?e!MFWtMLsVJl{6BoK&j*G5=Q8Us
zxv;!^p2NdiJRHBwa_@_%twWJ;?b0@NR9A4W##%#O<dl<|m%ekCAG~~@&wPG^ul~$M
z&YoXIf$7BIQc@oc3tZZwAoE7Df-$}@OiRaP9|rv%&wuVIzVI1GT^q)u+7~XNyOVZ4
zh@}g%C)KC9;5!#gW)f$(gwN1U?DIvfwW^Wm{Fd(JlbGOWVv{ri(w&qvNE2g|q^%Wj
zyK+c!0wg6G2FN<`WN1+ZlJrAbPkZgU5ubj39k_;M$i_$;&eL!mq$5w%#9AToRcH)^
zI*xl9C;Vt;q^(TT%<~pH!AHqD!4YkXB|0Xa5?dr(iiRK3WEJ>uVQ(v8x~qsJ7b5x#
z#9mcGB(WeEtPWUNUE_tH&p5nYa&kQ5-sB}j9KGS%PZsun;>rJm!~Rbi?8Ap9{5|e#
zxM%<t$4~ts0R>oMbd+&p_jh^W{Ig6aQ*6%!=ClTr6Ya#+HuGg&c?SDnSm2!Ft=D&X
z_w9WyJ-y18zH*kQpIIlf8Plm>4@8Mr5<lDQtcm6>?OwKtQJ<BL$)1b0EXEL-?s4}V
zey48$Qli>CiLT9{^Kro80<Q@yu8(lPOGAG;iFavKZR!!!`V46N*$(}nl?{eF^bL$A
z#5!rY4oP^Crh4?bSyksa5ACkq#U@PV6b~sEK+}{zO{9gQkG#mLq;bD=vK9FMxA*2j
zmR;w4*zY^%-uw1`-P6-OGgt{=un+(Vk`kA28$cuo({^IHDh)4^Bd1caDzTJ^<)q}Q
z#5EWva%{;iDNag%P>#h!qNSi6+ez87L`uXoxR}BK0!aXk9Rx4~%+fQ{d%xx0bH4m>
zw{u^2&vd`nJ-vOuDv+2#zkcuCx14YJEqRD!Au5<xyCQ*my#TnFPqaFckc&jf<f;;S
zNSBV6KXLANS-4hA@%kbu3JXbqg&-y8y+s5?8a@RmVFdSmyo%v5;FWJ%EZZx%vh)T@
zK@EPnDFi@)6af9k0{68?+DE}YTe|mO<9@uFMx{22rG*Q4e|`#MmCvBlT7*|B0c5jI
zlU<Tk=Ajqw(QVSHmdo*5^xQiOc=xS&jE<La--Bbg>#oD7)=CIFKp2{$8y)9e;+oeq
zIn1<n!|2!1k+Uku$Fc_v=TLQbzUX0qGkRR>9d|uN#mpL_LY9qN1t`bj*Ud4YHRa23
zp@V|Sp8E$bMgk{6Mo9AIC_Cp;`J<~yC=wIF`Syd8lexEmqE%^p?3|^X3n-lRLAtXq
z5D(LCn~I!;{5d6iek!I07ws1vH9=2-0cRBNdM~)IA-k5<E;*5M#R2uCLNYsa0QdKT
z3;FT{1x-H4HgNRLChqu<#yc-{aOo^#Hhc~3?lMM4?u7ERTk>u4vwkCjefrt^-{@eU
zjZZQN;sm%a4*tI0OhkQ--S;x#Z!=^6HGZ6d>Sz<Kl?9xe`(xCCTTxQS5QZxt&jTqP
zcYo}d%qYsZ>g<r`(mpN-;xD_o*)G2Gt#|SKv*&Tw-G^|`J>wWXTn8JV(}`f2<8I!4
z#Ln)XdtLJgs|-@&hm-i+TMKKW?7(9}k>;Pp6T2?5J<fKHI)Dn&I(A0KRIE?3pGo)6
z+{>Tup(SPM#(9feu;)t)u7p2eds}CR`|c9qTyY%Hn%{xUxooiD?C1Cu^f)K?I1)N5
z1Qf;b>{<!;$|u?N(Ragm(35VMuORXV#69i=DwkZ+dYJ=UNGAXnRgvWE_g!lOatw}a
z&uS%ITPRW>($Kb!(a|w9hkU&LOb0JMGY8W(I5+=2Xi}&TAM0^P>}TxX$BJ>!6aF?o
z_NN2juqZ14!L~pJg!<Sh<}bAH_U!+M2gd(P80#a7x*%l%t>Oq&<Qew_TikzhZmn;O
ziMw`B!S{W1+Xg>)?gFM?yo_6KAHu!&jpNo^n$Vt(c>+=1S!PUkrlRlas<Cyte|FsS
z3ih>y;Q5~Jkus^9yWS`i9%-klkUgHP^G|+8kxLq*Y#*LJcI8qDGk<(l(C)(t!*S;C
zS)48x;)MysHs3|NX?<9O`>;y+;S?;64xfnN{vw-9XbSa7wlhzEhsueZa7mTOf|Lrb
zj@iT{w_;9}4RP!=W&dq0C16&wFs)G|5V*%Cg$t7($Nt!PA8_FSOC_IF2sI+~`2Ruy
zQ1GdaYA}Lo$-~u)D|qkxRkW8@5b-(8Ed2=8$|%b9!>hR;0)Z3&qVwNwo&QFNg|0@w
zI#fs0I*i5H_wd%${|9%E{VbNE1sEG9-Ka|BZ>k_gV=hMWak7V{v?E8HB3P;VfF->1
z<^taS@dC!iYq<A=hj7R3hfu4P5Qg!3ApOED^0|s5`kb9k+0LDkFdbvLCms+57dqxb
zOi+*UovT-OobYJ%-=)O8{QjLtTPk+*a3%!g?$6U%bDC41p7Yk`C5@9pn2IKtdyRo|
zCOjO%TGm*n#afz)u&RqMcG%S87|4zZfqNFR>#5J_fzCZdJT62DQ#S3O9w{Y?_Rg+u
zB()kQb|Ra4rV^_?44oo?;f6xz^-!@$;=;rt<u$M~DNxWVK%i<Uc@0E1!uuC4VX3`{
zR%;PuuZDN#zYVq)&C$DZ0wIy;{BOwEe}6jx$^<~LjqZSq#@Jz)u!Fg!Y5dsxS2%v;
zKgE3O3PKK(7+KD`z&tt^P6!Pg%3!hUv?lH<gHlYqo4wM;cTS(h^NmZm^Ue|6d(S9F
z57z(yowk879J>a(U)*kFF|Yn2wBVxuz-sG$N4M`hcXrHbsOP$HQ36=d{yRiKb{yo0
z@{k%ztZL&9mkN%=NNj+~ksVS}Fp(vP^p|+f7RY*B+;yh=e`lOQPHr<hM>-WGc179b
zs>79f$^j=1H}??8p93c&m+V+~);3wuR0tPZBNL%eAaND}j3OJNVDId9>%Gc^d^yr%
zE6cqR#yY>3)C7vs*G@xG0EGZ-35%UMgkcMv?g~uULRmGi7`~1x^Dm-S8AY{uG_!0L
z2&4d5*9&m>82t>|`S-Q=zk!6m>v0`O0nKB_Ko=~o%smfq8+VWY70h*4&^0R{rD547
zGXRzCY;(gERmg9rY#bi{fJH*nR|KsUg1|%6wRq`;8NBw&RUEykihJ%E!ELt<qf++K
z?E+yp0xL?SUe1o!azRd7aJeHCyZhB1A;k`LjU>E+S&>67%MLMen|oeOtY9~2$RW|C
z2QcOPiPV<1kU^X^uQt)HJMuhs6YUBSK80+8jEO*8$ONLEHa;~1N{ffwEGZ#r5**jV
z9!5LoE_}J)f+~g(Wn&Usu<$Kp_hy!ds^CscZUpce4uLsqFAfb%R~30gb3&nTrZ(<%
z&Q>!-8L<+HK@kzhazFM!@Bj;h+(O&VBaGTGQ5V)k(5yhZg?BIfJ18g&AGt5)&M;@T
z)H`SNGbrJ&pS}Npo&T2X{Y3`2r&a)>^WP@I-!%^ZwH~w53PVS41;NLag;&rDe+%~<
z`C0gM2+Pq`um%hhm`z58%2?=`G>dXOVJd!++r$HaVPR~1n3T&gsq4M7i+J~)d5nyd
zaOWK(xbx0K7#^vC8R&KljJ0`pOiuTibgGdxFea7>rkpZz4$k~=;X;R>2FAp)J?c@%
zamF++*za;rzz_9|q*ZaR?&g%IWk5Qnx5?RO-61w-y32gz?;QRG*1UUYyY{r%AB%)U
z1{WS1^E#inbSl6_qn|<uk>g?D9^_1_XIfOOZ;Eb&d0<gt7q4<FX3AbaUhNc2j)gOE
zA!;!#z$_Kl9<lbnI04~8ftOSiNx@=F7hMh!nKqasSR0#8u!&F!nm9Z6CunzO(L8hq
zYR#jL=YZ(^Z>-K=Q~(0OKv0@6bnGbTipJvHdwAj8Z{qI5kK<6~IOd`mbnP;T6bv&6
z9+dJ6om%f`HD}uAu7Bx%mWjb8{u$3F`0%i_7~$DxFXD$U&fu0?o4EV<A>4dZ10~-_
z*tG~l8x!XeX<lT3K*vQwyJO%fXLn3J2e2cLb5rorE)lS~OB}%=t|d~pR5M2^7yeVP
zHhv9B;TpO0X(3^4&ZS^SkC$-^l2~A5;kD`0viZ}>qKU~_5;*w+gv{3-D2~UoIw-kc
z#STF(<rPp5OTOnzHr@5R>l$_)d<*;iR9eb;N#+)d>1)9~X^vc!LuPcstT<su(#M6V
zL9qzo%>N-RF1S~$myl5{hcKpv$cC^Sfvw3CjjTc0YvA(o8C;%!9`*7#MsK=*)g(zE
zkOE*;upzCnaXffB|3L|V{fzxL@|Z~xhQ`L>`4!AxK8NWG{|rZlK7-p1{dsiN2<AIy
z0c}7Oll@4=V^Y`o4azw(D0Q!kyEvPS@yQ{-v59|9D}`#+2Q%T_x0dkETgw<eRKgt}
z7{Ui`AHwiR1q6jC1dKIMU{vZFue`pDuxsI0bfF83f4S{(x}$=l-Kyq+T*o@@8LCq;
z{LUSN!=;;3t}myewQynIo%j_n+vHHP*<&jv3_9zCWF?a3HmCyoztHRFmqPWh`z+_0
z{_J5hY+{<@66>tv&qtY-5{1B@+|Vb#?x_T>pu2aBmTbYmsK<d3R1B0VS{f7z4_A$l
z7c`vtBXCj>vin*Vo_l^h8F6RNY{9k*!%<w&Sk65dtVKyRFxQ&K#kudG><?k|<_|-A
z!78cf&g%RJB>e4Ko&WwH`R~gDz}hYWffAkn4bu4!_yMX8H{g}-#KO$`xU~3f%(Y*{
z9f$rhj@CYmh3<K*n5!U707uE_S3@KA4j@M1&}3$(yN<1UGtE8nQNB&uVgkjaK`1QE
zhxoJSX7J*RmvQuH4Y%JhjAKWts5N|OrSSIK3wYs&a|k>IYaM&o9xi~}_2)~Ayi12;
z08<<#bFY_8el^K)1j<Gs${E!c%Lmu@-wgv`i>wI9T?}2)8at#s^jO_eo(M?ncr^4H
zK(F%JadU9;f(7fC02K`joRmNmnf96Zj*8g;ZpWY54YQMCNI6L`onknJ0}}&162Lq)
zkuySTfv3?UlB8A7B8~Qq;(x5kCoXKkY;y00q&V}HkNMUQacS;*@Kpt)H$8+(W6XIB
zqVvCTI{#}maZr)*ND6?R2LnuZ-Sx!6x%V!<Mx;N^Y$PIM4<M+NF?!1#Si0K4((F0B
zeEv6abok@Acl@uy;218p-bI8K6vaAq!v=~ppmcmVD0U8i>zKb3&1!O<n3HR77$5_s
z2^CMlGVtEH6`VcWLZzxPG!%DSbF(498rn;m{mer@{eM+hKTtsw-fP*DlJCed*h#ze
zIQBTVi!HL?@{YgY8`x6>BnLfI{8Ux$XOJDA)^)C-qKKVVhXjG$G{fAhF$-m4>b1n{
zna<>OjB7STjGnOpGUK4!6oA3jO<i>2dC9RaF6@bl#aJep>=~tSA^X^=v7D8}s-;BA
zH{slGAWbGL76cZS4Gc%HHW}|DAzeE0#+k*lH6W|uF)-J94zo)yz}IDr-~2Juhi@((
z{(_x7Y#6M(fUIf1RvHTy5|#{00kETZf~KZUMRy(lujUik74I*?Uq562K|BAg8~b1D
z@0C&*Iy{b2WeAIx&*Rd<%a~jK72JO43mC0`7Htz@$y@|etmQX0ioN!g2W7py%S~cw
z(^J%yfMs9oY(b>+4mSBAlZ;k<Ux7#=3K=sO+sWVgaiL)y`Cb<E<CxTBfin4Cp55S=
z^j+y5tmGuyC1)!ur^B_$?G*KD%#yr;qQW3ghKp~L${o{?pTfZi*N&D7$$Z5yp41LF
zXZ;iPdgnX-ghYj$1X^oWz(wOl+Y{#uCs;9eW~74LklhfbZ2#`W6gUA#g`de@6)KuI
z^=SWBKXPXskn#{<bJHOJ%m&N`)<m!f<3DHD+-8{++4Zp&Fbt1<gyt$PFaHSb@FGe<
z6XUmj4CUJ4BIAD->HG&J{Pj2XAC&O71!I3wOi+Nu{M6JV(Gy^`*O`IdKH~nDq(<G7
zBOH`!WdzkburfD_<+%%ZZRX#gGXEcNNAoY?aOD9k@@1?<R}w}&gN*@`0cjruoo$FY
z+bX9+S(Ul)xru!!So63M#qodkz4!#NHcAYHRDm3p`N+ElLddOM*>wp*Z)fZtH0;R!
zC~g#$(+xY3xUQ*>8xf3NuX`Z2LiSMDbpt&Kdnv(=i^FT~$q48b$#X&yOeZdRa1Un$
zxWe>h4Fi3~YF{OnW@tH|*c8ooZ7z9CiIrRoIs)Y`gP9qT69$#r4)o?e<d4rLX@L3a
zB7Mv@H+)K-ld%@ob~7?xp4Mox!Zf=N8-Yz1h!{RfAQ;SdUc-FrC4dcTjax8w^GD(N
zm8@VD?8?KYBpiTUgX#2Z<g)1eZ@kWbP_BeK)~y{HLb*}L@|8nanm>=1FMbt=YWL!%
z=9h6e_yFdkE9lq-s6>;;)<BV$oOUWnV9Sd2B%Ck%i##IMJ?@-QJCTid=A@iZm)ui6
zcM^7kWs0KmY>M4uZsVTAyiOrRz2kpouu>V3&ha+RNofhWjYvTe!E)UFuZjXliWkl#
zee5{u^^VKkKXPU`luiLGiZRDT>4B^=9em;W^vnyWN5Tl#i!USG@oLvV<eGdcSn$H}
z7I11Ea#IBJd*@Zo{^VZr{6)+%DJV&@Of81veZJ)oHu-ng9S}B=|G|P`V66d61hNF5
z0}vau%vmh7UPsr=!}oj)k3NXu@q3-;sP}NN&py-nJDd=Tsj-&<U>cJo1;7sD#EJW9
zY6<}82SoZWGk1BFQO1sr{RchxcfZcR?`zh>YhnhpuQ7CV45h{p7O!5w)%F{hyZBEq
zR{Io=HXp^1e;4MX3kZ1`3LY#XfDMQgh~kMr+-<2u^PLK`8GuO&g~W|6@ry^2!JZlI
zIBc(M#~jb-^Df>sr9s;Dk@K9$k@Hc{VaATnK_V3+=YUV6cC$QrLiUz+NBY!bDx@gi
zxu-U|J!U=`5ip6VEfD?kWqffbPpj1fMc8%zdtOQ8Yx#7A!p`GI;jwa|7FomCs}RED
zL>#By1zDtXCQWd}c${Sf<iZ7;Mf;-1U@4vqm_$Wk6Ea`I=7-6yXRZcF-WeRhm=4%P
z@DU)OI+#N&ci+WA=XHd39-2HfM~-9o@Nop?dj1Ka-LCT=^x)t8*nd#MUtix{tJfB+
zNQ0F60RUV&F-Dk@0sy;12|!lM#B9&o2d7`WrCJ%K>K$m!k79Z5JT5Q)8Lq6nfSVd$
z#L=P8qpN|1@O>C`K;(f9!;%G*2O=-|7Ecd#o5<60Sy^tQn~(J4;=!?cB_u9|DkI^M
zvy(3Pv2%~T9QW84qK7a?J)Li6Kbz|7DR;{&biY&xIm!<WDvbNt5@3smF%_l(S$~_$
z1F4wA=O*OvI;?+kBbe8c2^ODpvh(Mj@jk8AG>}U^<eu;2R8OCmP_)KM!7Xmm*UPfI
z@3%$cBQCB;VmV~a;)i3MoE8L>b^dXoV5|X~5FYy|Qw;$Hh|Cfey3<(fyoSiOp(wym
z;|`3B-GfqfI3tLz^7j{DH!dxi*~$uFmtbmYngKv5eumkA)@%Po=fCYb|4m)9b?-;z
zT@?Y9;RZ^LI$8^JSe!kNcjo^97ni<^TMj*j!;POn$8@m}U4TId1s|3}z(ydYq2R~s
zfr4hlm8a$1BeN}x*t3HvWx^A!+C`^!!NiVp-zxEbZkEID3W6!`hBKEt*9?z~k-=-e
zYCYyc$U9(4U2rXDJ#fMGFD(FU&#9h<&A4PqcM9NI0+Ac~vnFAnP#@7M0go%1b2cCA
zWUv>M7;d0XZ<KLH4d8;w5Tj_Ol=%q|JL?1sYYZ4BA@)Vd`@|MvlJm5`2-bvP6G9t8
zfGRv{f{4*IGni?=f#vRdFz7&g0fvX~L1Xw1RBFS;_r1IC-@?vcbpHJk{#M_fiB%j8
z?mYtl<Kr_d1;8$WG2BvWjmqpm>ih>i__u%Tf9+LAPO@VFS}W8?4xwBh!t&fzEX}`<
zH)nny7v@jn=HV}6toC6n+j%TSmlGnO1{;gWL{K__(m@iSv-ZoDGw3Z+VsCcrW&}W+
z*|=uXKcYerksJNEYCtLk)-X8%G?a4$va??02OFrsTh9{y3T8p%{-XH5DGf&fPzWY0
zUUJK;LwnXt(cvsNfL3MvIs10*Q3!Cp3L$3-!Mq0dA$z8_$E2TK8U~bOqs%=q&RKCq
zy{-dEG_dph*s&Q-jgoB2<WHr0j(<YT0dRtm*~ElCYY=c50gXa=8l7kk^X(sErTb$<
zXaN8!)x)R{-+@}=7(73~S~-LL`}!Xgo&OEq_pft%hP4E4$pm26VA2AB*8VHjnq?y0
zV7B6$xj&Wy?ob<^@1Z$1j#_gBOS6};y!akox%f3SE64GHkuPJc@&PP{m(j9w$s|F;
znhvaupp*yYm9o7zrNaBdhL5vw8P`ib^@LA70P?UK#|++)mQl~-JKeeGDR+P(Dg@hP
zCc8`poj9mxN3VLKfeRja$#YZWth{3~T7hxt_S}?5+!luLnVgRcqCR%rm)WrdX6vZ@
zxafSy#r1)k!bc8~lAQU1yJtw*_>`?H@(aL@?2>y6n}UEZmUFshMyYf!?($96<;O}7
zTU11_1=|S5b^vSPQwbH-L`hY_wvD;YJ6Pzvigt7vga|><z;NR@>do6wt{y5BDh00v
z!Co2tvm&jm?JU|bdIbO`Cnu~F0K4R*n4dSTW)rgjHL{*gbpAW4^QR3?7&h{lUAdMQ
z_!vHN6Kc&d%wIi^rKPiY;rwr4wEiL7GW;bp{5!D_&7#fo+1tQa3me(E5Kw-i>(58o
zoDjv*j@7lXO)`CusR*6dotz!AYg$uC$zv)Ud~S8X?*5x{5?>aQlT85VnxraMX`prd
z4;9RDT)mwW9K>-kQrv&{IPZW99V;c%4}$A1m^<~QhjJlHhl(M&xy^6y#-PV*Fq74B
zHr^+=BmQDK1ZOIQUTI?<&SMiNKFcOK=xt%YpQi}gT-$FA2ntm+QB^}AiqMYU$A!-K
zvDi6>(6->|5}M6BFf@D{%C#{lhm@3Elfs6Qwm;ZMbp8X4{aqh!B2COZtGi3BReL@u
z0CrMJep1cMoLXu&|Mr_i`nK2&P_Vye0)SukF?RFqSXn%brMdICvivfxE=^;+{t4VV
z{1}FVdvP^-A6;Gmkq2S}HWtQ4U>!iKpm648p*-xe_iaL6Q@Ke_ufyLOF|^#9DbJ3n
zj^iJns|?iYg?UC!q-;D-g#e^9EJqbqC(4V>fbva(DmeS)vAoEFYlr|_Fxc<4@ZnX@
zExktMbhd>FNzdW#8td3hQ=c;Si}E}oN5x>XU%KkCWCl!`8)R-S<ZcpT*`7(<`D_+|
zl#lgokq2PAFs2P<ff6-Q@kZg1hfa7AGb`W0V&^SHya13zrFtty>mNpK=q3c^s-tYk
zCnVDG?|m0QA|K4*n@>+azH}0-PQ~LwDFCqJQb4GwDOiA~iPR%;gF^d)@VD1>{@1>r
z0l5;%mw%;EL#2K<T8l@pF#A3(E<KN#l^@_({nI!${3Tfb7#5@R=-LG+<$<ALO&e?@
zDCI+G-_fqyJdV~Cnx|s`m-S9X`I<|OPwirJ>sc!J3gogqT9xk0t~}CF6|8@VaKZM_
zJ#ff%{BuU@<P;2?1RIgV%~L&|_qp_u^6(wbMRuG?8{zOb*ojWgxe94wpJmSd_}Mxx
zj+{(e)^;3ppGR6eWW+ztWr=Cxp=ApTo7nQE#X`?wBPk9nM^H=%xC~zn!B-V9cd*!g
z84K-KvC_Q+z`*w_I5hHMG@2hksd6ZLuaHA7q;<a^Hu_oLtvdg`NcbDn7lv7p2O>KS
z0H;r!R+xem0K2P7qgVSQ(TL7}=Lmm&7EDz1b|(TVLk(0KAH>SSJmzQ5;oXIA;NtT4
zar5vOaisBiu)Z1d<}BJ+0+A0e5E%oqU1(i`)``t-W@=*#_nGef$w__72yWc#a+ib<
zFs<7ElM}J)$^=uB8@M}i6qD|d9mFagDfc7+vP$fO0a(khHs9yF9R1#ooE_3#ESKwH
z&}S2jv`Dc@C-3?Y+gvrlMJr_PVg9FoW4V_cSR@f<62Q#TfeWvQo4Jtg_hUXn6z}$}
zEw~2e;XUa(AOhPEh!_D?QB~szbQKY|u-JJUGwqkK99@Ft5P?@kbL37mhHgcrei+&d
z3W|oT=%PVC>wBH>w^w!k8+n}iRY)2jcBK@MSwA030ik4Qb<oxVoEhrWnnS1#-H+w@
zBUqe0i+3*nTb!Reja!DlfSZOskB-u~8lFYSEhzH9mJ!(%7^C6oQmh(ah9wo-4<~MW
zIjcP$*~jO<&9?OHy7aN*Y*%owA*8N81YRA=;|TKOgS@vO$jxwb0f4JQ0F;-?>EacJ
zg<X~Q$2|^xY1f+b88~|!)}1h<>4BWH_Bjb`;@nvv3G?Aqj!&!1g1FaukbB|<Q};n~
z)BxNwo=6lAiBV6s*S8kv6)7^us{nKXYY|Wh6&i!@)uCaqVlLux>lG}u-+|#}D6P;K
zx*d(?ZK&3cK>I;qub+?j<tt~Of5|9oyMV&;!2XZ`?xP7ntORJa+OO1faGA(EjCGX&
z`(Nk3<AlF$9{aER33WHbq);C|jA~;Pt%W(v&%TY<uT0|H+`q>ihkhD|hdzal4KW{H
zfI$a}JXmYcwIP)8lZim!WDVpae0B~k*Xt(VW9OssV%qI`qf<AKCU*VHBz391F0L{D
zr(D{`L{K^<EjmXsuRi?U(4Sn|xY~XfuDc-R4tsgX5j)*@{C75+a-@v<^<GtWI(sfi
z3E5>XW{!fX+>i6!zctC<+3b*KHyJ34;EiC}KtZFXMo{sFph;mRd><Fv&tkdr4!U*)
z1VXKH42_YGpjtl)KdAH=!BAFoZT)9`59s^{Cj9MAo&Wl`XIA7X!{KEzt$m{a*iS0}
z22QH;=TBWee)liDqR9KK<*o&wMd!a;bpBhgDxr-OJgRW8C{3u1jG)qJVsY*Y7UzD9
zmoI)DmDxYSEyIsttp1Z|Bg8^<DK--#oe{;1388fWUk3o`Y)_q~-X+~UCHBG=v6~y)
z#E_>zSWEr%UBi3p?C0SG)Tf(n1qGMnw@O}+AN-(<^`8y{*r3oUXV=BL2V@?P%P9de
z%Q$oP<d)a))kh)yFBz)C&G&O{m0h3zY^0xA_9B}!5ZLMd^Yux#*U#?9CgXnFqa8@e
zmKHz+Ya(d&QC34J>jpFwI(7zEmd{|Z{Te#aWf1uY{4tD=eh~Gcn-Em$J%@f;&?v`v
zX)8bL+ja1Z&VNutIA*e1mvj`hUU~Yt|K#$1Apq_x4nRr-RD|b=)MuHQg?THBf%MB;
zc?!+L<ES@Bu{?Vj3v+Mc^-KR3&d+}nw>H0o@!ChRf)I;l1_oUy(qL;~xeJp{1XKx1
zspL>|eCAolPJWq9j7mCEDjEZF?C&2prLpXg6Ulz+Hb-guzsd#BnF1uf_c;$hIcfyT
zJO(&RB~qCUuVqK+0OV|V%g%&@SGoG-d<4heKRv>^IIhpL0g5)s+3h)>Oi*UT!##?F
zbQ)kCKY`@XPvdlp8B0k-Z*1QTw$Q9lqB<)62o#kNMzff2y?}+4m(hwYgAu{^YiJJN
zkNVK9sMN=xJ?-!wa=T~wDml<#MIHeAJg|QVfcvTdNO=Ip;9ErY7m0{=ht7X568>(y
z&cC0r|Hf7&RA6IkUt?(e2x=pTv2^t!7Uti@t24ig+QJ{>=<t^?QhNxIwO9%-AyO?6
zJTNmt8zNF2cq)L_C8&fS5Z{GKjv$@0&@)M$DsTc)8)1ej1QMq!gv@rB(34x2kKE&L
zB!^s|P6-mL02LrpC~y{GoDv+VXqpdKs+eciQ-QRXvI&yuM8V{zSV$E2_qJC`m6H*f
zom4{WMDIG?e?m4)_xs2qc8hWerg#ltZ3rTT0CiOLD9XA9wo6#(zKJU<FJh&80hT+^
zRL0QIooF;~MWr#GxbwNjLRiDBhqiIWx3_fugA)GG*Vunhl~O-JaQUc**+41vEnxrb
z|M!^+Am#ydI{q1@y30gV<DzYtK#(1H+SeF9ax-d&j$(QC5*8PJj2~b8eN;+M;il#n
zaisb&w9&>~bO8}{pvea;5SlKcs1466!}H2<fKWz?Gayiw0^hq$&wTDUA9Hh3ED$Gg
zyX45<9NWF5lvtHxpZN!;9Aypo<&*>%6W%fnfMa`1g^@do#5Qsd>BNY~+8$$`{E*Lm
zfSk!eYNSI7#J0HcccXR_B1O8_Pj?sjR3NqFHHE7fS0NUL4PXHuRaEpis=5gv!g6>P
z=N6~2*!eLcy8@*G)ay5+-nbRD#u0dasbJff2QA6hg`ijdr*vf6%U%~}_S61<zsUd@
zU^;j1@e6m~edJXl|6|Ni4-Y_e{(DX5zv<_^!D&g_dHcS`@R6HPKQxZzt20<ycn`17
zd>z%&H*nj~qZqG#1Z`?#F}xhF29yUvgeY8sF>PqC49}~8NP}2qJN}qVm-q%SIb&t(
zOb$3v3UX}VU#J&){O}#~pu#!W^Bh$G1XV)Vi6wS%ItJ%yI+TYSxt6>s36D76;-{;C
zG|Z@Qz!yk_Jq~)w{lwFLlUXSjNeqsIU`py^8y6a6de#ay)9w>7EDXpnG)k!HF;u(}
z02V9ZS-iLWJuG$JK@=^6Nug31!)WtEs5OouDD~|13xP^o*?Ef2fA8u1*M2_CWVI@3
zYg@05{&4m}^2w120Cpu0;0Zl7H5oDg;-3)dk1>a9@BnC!5&rrZ`|qk?pY0s`4|dH`
z=@xU6GjQY>Y9nJ<o}0n^{9Blw`EAsKn{jODi#S~U2)Zi7Vsr@+cR<RIGvC7%m?-fP
z@G8*c#l?k<V~DffUBzR6N?h(-D_lY>ql?3a(k?k!Bcwl@&E2_>YL`wEV(I|HFA>U>
zcty^fbop)}0pu$Nrx|yxhjY#y_ed0bcK&Ym7CT)(EL;*Hr%}v#Vo**vOy?jRWw(d5
z$X6S2K7+MUvVQPTQBBl>QD}JRhBLU-n!-ZsRdmce0H9hqijmR#P-z@RP;NME{p5Nn
za^4AB%`_(o_SpuV|DXqd|HT)xQUR=KJvE8P&BG_2@-T%+3IOb8KLGUy%=W(*KLEi-
zK$Mfdyud?q{1|G(V_2NMh^6^+c=OV~z=hJE;HKuo7_EH-T`(5SWklSLEr!7eLxae4
z;OR0vzYIlQ-gswmvq|^QobU!zUW8<x0<jShXXL*4?_9khxz2l8fe;rRr7FV<0Nvtv
z1Yj*lsVt7zRS8&!e~=#TZd5X}yN_pw;O83q^h`q&PknYg{K;7-<Pt=a?EX0mVdCVr
zZgQZt5fn5^Xriiz;Zqr1Gl#1yKfrwJMYOwD01yIy2qVKEM1A-cRO^R(x;UG}?FyMs
zusJ9qWlhJBwv)jA+W+sn0wCo9Ft?t!wtRueJDTJIkm&q(R_8xx=fCBvk~Qwfb?5T}
zA0tO@!O+M}Sel!`(%jp4<MQvJGXD)6Y5o+3>mLQf$6|CDp<Rv-7`BKa17q8Xk3cCd
z1i-LL<zr@Y-;&7=pULr%PY(1f`OjwDfq0{pn%)yw#Up#2NCPWFj8cuUJV&ry3$_fU
zP)rzPE_C>rOCj=6e17oTLc}i;=^Yn5ez?cM&pICd&b@G|$2Zw(AT18qAs{j=6#EFM
zhKkpOPh~`A0ZX0NFyDR+t?)dUEtD=}sCf?>LpP&bJG_d_2QU;-a`<15sEU0__!FIf
zf76%jlSqLw+<AZ5bY9qR`+uyxAK%-Un0Qiu_q%_$b@=cnKBQFe5o?VhC;Ro9V}GJm
zS?8M@`>%0(y588IuJgODcL=U^KeUMtP#<i6y3TX%>zZAA>`xoGpX=@XSHI5J{}NSN
zp;D`();tEKYiPGGV|M9Bm|J=g0B|Vy0P5ZtA`TJScB0-#932~VVXT2taS9xfPDa{E
zC-3;_yWadrV}DaFL8|ZXahpqp28swuDX0?R_J;`fepunn7l2Fe7)0$BNGn)tz&3)7
zI*HGLDUj^a&K~R(09kj>Ie)?N`^%;VnF_#-HO_-~nJo;5VB3X7lo%9P#|4?ehyb?m
zQ9)ggqZu4SS@~#(Z{fnycQCW~UCei0h2b`;wVQBg^g)at`!Je^ZbwjVWXXFO$&n~l
zYJk=$Sg-%N+w^CBQ)B;4er`7TzFq6t^uzY2O+M!0yZIXTPaC;C^=I!(o4x(okC_?9
z^J<Ds_h0>o=e|5SF~NFznygF!cJmBiaxxt?PBQb)5wU`70tD#KOCTLvYfoeN@J(n8
zAHmAp3>N3k;r*-s4j1RYg`<s6V!Zx2)ci3lMl<M|1t_JV;KP~~bhrbh0(f2po)<u|
zmmH>)M+hfuc}^4oahI-gbwCo><0b}K%g_oS(l7w3P2k@974E!4;Sa7@blV}UX+xow
znHA-GcobRrgk<;b76jz%>unEtFW>X$A&8vcB1zv%JNoSQPOL8@o=|ucprV_oQWKgz
zESvXne&KsqSa}Uyvjj~V_4>`I4n2fg{RsS04Qre9$cSICwf4VY3sO9poG$zBDSG?w
zRg2dEN>!e=wtJq)JH~8z-LD4G`R{R^{|y+QI>tKM^Uyea4AtRrEX~hgarRxDo&N^j
zUzoz-#-}h={VW>Z9a!Nxba)|~^jq6Tx7$T%G<;owrz_CP&!vKFV2MDMvLb+p3(>kv
zDw!@M(m_Z5X90}dqVS1N0T<r0xO#~Zg&jmu7ZiH2%AgRRn^^Q_#z5)e@8klc4toV_
zUYq@Fww7=_3@n?3&}YD_wxx*?5nFihP}NP;{6o;BvC_GSnfAA_(0UWyXaUR?rP2t-
z58a1)^JbK)%^r8Q#54(R%Hn2;s(WDUKQQ4>bpHLVO2CQ&6`7Uu;X>u<{W$&y_TdTu
zh}Qs5KmC>V=;$XO(z^T*+sM#*X&q7kNCB|HF9nw@sI*48+CX*a7<^Sn6s}-?c^a3O
zzlX@oVc5G34gVGx3q*DWaY$7nvoj%#?SeVV4{}G5!0td&rDJk(B6&F*zQ^)IjruVU
zH-C)KI1K#hHyJ<vQ3svYBBF35KCG1oYeKMzR}<ET@j(rfOdD*W%cs<%Ad~2s%zBp!
zF}mqqKZLbm=G>Q-8I%+aaZx}ht2&zAQH=OU;K5?P^8(Jz{d>$Td=D#~_n=h?&5`36
zKlTxf9{VtAjd6H>8AWG4V8iMjDFCDZ=;N~<kN@k+*v`NC&W|4czxU(#f1geO@-=`l
z_G?N-KeMhHU=I-f`qB9hdhqXco&WagrKzYI@HB=F--P<eQ7q42!Q$-Om{~f5E6dMf
zr1BArH9n8w;1+~vVa3kDQWr}3U<-uSAPn0e<t4^K0kjIB;3Z@KTvtyjXZ&-PLZo0V
zq103uzEz<VC_Md#25){ZL>RUZMoTbeB|gfnhNATFretStozCAD_WCw4-r-Dx4@Uuz
z6a*agB;rxVag1$;;{w7*9aYstpeq16SPtLD#f2BJ*f|GlJMeTBjiI|xZ`_J%V=N)_
zQBUHYT1Ttj4^ee{4t~-3?`Fc^CMA-@ifsrc`r3XS|6`xK<PmUE-+lM&%UT7;tqpSr
z7SZ|dfX=_4V4nf6*_L-tw4MW1UKCiy%HkXr=ikN3@>viCXqNBAk@{y*tKNl>4OZ+`
zMBGife=j%OBL%HX@Vp9qzm!B1`?*7%O2+{T3L44_5LC*j9}Z9*CHMhj?wrBG<rZ4Y
z3s_#90o%CXAXR}<fHe_J)PgZBM5Yb4VdAnE2M4DG2WOi8oCCldfe{ttdX$aeRbm!w
z0HaW%8Y<o>%DN6?R<P803$yJXp%uNGSoQ{})^A6xelsfdQ3OG$$1)h%@7>z>t?2wk
z=YO5Y%xsk|D`VO(QB8kjYU*KwePsT#?<W8;PHNy(1pK#OC-P1*hgN(61l#Q+pcJ9r
z96_Ub2rJ8XU}5$>EG)i^*_CP3%eUcZ{c{*9-w#6`R_rV~SW5Kw@hIO!2FA1zh90yE
z;v&EcpgbQsnGleo_|MvdF^uKe2#Z%Nx~&j4YQscrv|6*UrUOO<8+PG&5scBW*23B_
z4*^0R>JyLi(~>6M<ugpI8ep6F6L1nO6nhxNWWNYtz^59jY82(54owkOqWAIs@)YLV
zuOqYzPy|#fH>1|L71jDN1m)_QWInOu6<}vAWvx~v#kT$1r>7o?PMmnko7zX_KL=$3
zpa9t8$A9rIt^606ZE5xL@J5XN2krbt=f8bp|1Hovuj-=GgDkH#Tg%H>m_3W7rFUR$
z3uSK<W3^A>P~{WQ!6;Vj654zPmP07=;;tV_ieF;cOG<&1hSolm^5N+cv<|?j&wypv
z#Qx7j%Lv0oFq>HZ#|8wBf1UwryD+vJv-GWrc>oDPFHYQxvf!OGZkLMj=wPx?(D12>
ziW){$#UA`C;aSYKU&KP^WptuNC<LekM^PWXHICUWH+tN=-H#+~;lxUG{@bVXA9UZp
zTXg<dd;3os#Jp^5=bmpr_vQ0R?l(&TfW1csoSb~z+;jZD`4`%&{I$q*A|mpn0FVM;
z`w9T8kt`P%1MSul7U$l_^5Q$N(GoOOF;smBM{1uzwR}5_im+@hqifr-EHGucBT)vZ
zq!=I_kM&6b(6MCz#fCyr)Ik(3!y-<|%XjrQ&ko2Wdhy|(j{9vw{v*fQmnlu_GfCKy
zMnF|my%AKsQTR|;4&TM)l^<e$Wg4C63KV%L2cxJC-G+MOR#d7Zg-Jd;hyLI@XDI-r
z0NA<$fSDuTZ+Ky}_<K*E`Ql$s&yf9kM(*PkKu!iEO<!g3U&~hjTe$b%lfgdy>`!-^
z@V8U@Q`+>w-|H-x76Ro;9p%bB7(RRlS__x4H1{s9E<KMc%g<t{bSuUhpU0uf{ovpT
zT6PI-vk1dstjJdiu!&lL6SV*-kWz``Z-j2R0&6;1bZ{K56DGTRfXK!{I<6l8aV9gQ
zBy1?v@>`0F1kD~is-vXpsCZ3iB6Oq6xUldIEVN!lH@phV4BxL~^w399Z{CJV<q$|K
zXRXRf!4fn1w}xrH*}Xq)BgbdA68`$x`wvL?yFq*ZEhGH(Ope(`Af>+w92BRMeT|a}
zIA!m?`<I^5x^%+Yt_4W%Z<*g#cTf9M=GWIDG(h*1%h=-oW-X(=IESVA_p#i156oSZ
zR1-tx4`QVL5Guh<VCA7}+vxHN45Ij1tJDL4VwXJ=!q^V1?K*KmapA$%<UadkvQ#~l
zE-Yffe=OI_H~<PBd<43IiW-8ieAuXs<?tL9Ixk~6Jd3Vb0K=jb97eTz47K_Zl&T}p
zo|ip+S0Uhz0Jg8|-)X|%!I1e4O8D#RyK4)AeXe)-GsAd(RYlSA)YE6a_{hnVtWKTU
zf6~7LGXVgA6DOdireFd7Dv^3PwF(soc7`liBn;M?hfp6rgl_8|tSrr7Y4I#BFF%9J
z%g>_Zjbga^L5x%$K*K)*RzAACf^N8su2}}73zIPTlQf}NdglZOGZ>Uc^1>$Fe=^q3
zk^nV43J|C&0$oR-s_>v-%mS9WFXMdcMXYqrBjjZOj8bVFBh3d;tKWojbvQ}aL+%{N
zMOmOgfIUM0Q{)j*-2I<EeOhIn)iMFt%g>Q<`|W?T6a=F`(AvAl+K^L8py>QX=f4&E
z{{Fg9F6_h8AfQfr5z7k~u(b3ZqRtXD1t|H4(5N2Aq4NDG`$qr@5ZMUrXbBxVkB~bt
zW1lT-deD;s5fYYul-c_dG<>R{tcFnXY6w&XN?BMtkLB<@=G$*zvGo?((N!4Rfu;b}
z$}!Z3Zb7AX1VO1DuOytwhU<^8{`+=Nso6o)`47177oGnGuNhmV%VbUWHC&>PoPPV^
zPV#=<m*l^LQ~&^&(7>d*`|e-*InS$pEix@bAiaJb_*Uxt2R-;j=f8XR{r!wj>00um
zLNQ<>gZ9cCT1ywPv~&)}wBx`W)j+LuE1H!LpzePFz8Z#7WmwjT*ubEZa0hbNJ_Ujz
z4aEdS9vC5*SI~|wVX1Q#i=8*o4lki=TXDQ@&_Jzv4CTr(RBDG&D%F8(8cNQ1pRN(O
zgDoVQ-H5UOp!@!VqVwO2`~GX+53@DC*VHDO`<tiFJo<l5Ot7Auq<u^NJ75I>2slZ{
zk6-nP{2yxN-D5dqf>PUW^dkj;6abrvqGrbkCm*ewC_-!T3YM2HpuKVtVYCR#T`2P4
z>m~x-gs%=E2o53e8qg@ktbekwwhQJqj9Eb^TtH|R(1{ih+U3~37Yd|(l*%Kh)sCW4
zA491!46VJwGjOeVi^*`10ze9Yy<7lTrAlON_qEE^)<d8CnJ<T@P7&|-?jJY+9DuyJ
znpSVTG1<BM?qB*}l=8o3qsXrPeh``8ZY2EeMw#E19YWM=HQXziOG1c7j-oMg6ecq0
zw&&4l&!g3vMYp|(m2eiuUIJP+_vuHJEcsJTfC525sWN=Ojz(!5L1_p<Wf-M$1D;<=
zx_nwgr_Vic#2Y25ip+2Oh^iv<8%QCM8+fr+C1q^wUH4lPY1f`m6{*4^8W$o6h)NL@
z1cbmYf)t6;M35pPEH$7sDM<hepvby_Gyzu;M5^>6BucS`qCp5X6eaW`kdQX>4!hs?
z{sG_5-~2Lj%{A9G&ok#dXYO;~=ge>vxKl`cJ0;sEHLjh5{zIDZPR68kvekv9P}`6f
ziufnyN6G+0QO5h@Gou@_2+1u;?=&7*Cg1`yZi^vY{Qms;x8weiJ(KgmCy6JmFHSL7
z0Y=lfjHCZR-k3dv)0-vF9{9z@aC1JR@9g$OFM<*a0#CIBn^w0kf#Mkk%g0YKbN(SR
zBfMe_=H3z=ufg(mLI2GQs)NlblY+`ornl1X$tC7!2jOxps!JW;-xUYdoioRF<wFIc
zjA2ARIw<_rbgBw>Ya&fW&OjgLI0OpDvUWE&-E~_*yerDd&hD>zv%Y9Q7^YIM;pdZ`
z8o}p4jR|(IZC_cg`m#l7Ioy>Rmn<uuX50dribFkaIxQfNVjf%w8E$PT%PkJ+ZYxLg
zhVJS{q4RiqmEWuNE6;|?(vVPkj*vdoqySN4JStj(hgutkqR~NfjJ$caAA!j`Me{|n
z%9%r3^g_cCvms1Cd!p`UbLdJ*6_aO<)~kEnrv<kHwX<(FHutfMyTOc9Fm+WgOimsA
zTuPVMZ=<<EMF60se+$h|(4K-kZKy`O>?9E4ohq7QUz;b;!dQ-~WO)Pc(9e(Ay$RPj
zp8*PwNer9pjpxsP82QQ8=1i#vZn3bvw;FO@O!4ulb&srVLCRI%A2*4tT^ILm6Dg?F
zVGwZ^=6Op7>>(C5WC@eEILBW2EqQR+mp$+0$DiMO*P|o#VRb2_!5GP>Z_zNwcAj~`
z#wk@N*U+AqX#wVWcv`T<zE=N)rc6p!4}MU%z~!qaB~J`vlY&EbGyOl^;3&k=hb?Hi
z*#v{|g@Je!_^ZR-r>;DyHGyBz4_lln&`NfZHK|^?wI8@BZQ^nUYq@=V>nR79M8<gI
zTCdP)(qFIFYa9zOtm--56FV0#><R1nOStpg^xdR|NCAGzW;e1#R*t)2mSQ5j+O=<&
zKtkd+4}&62V`2GrqNne6qHtUYO@Jc$WV7-LOBnm`VeE}7oNt&KF|i|i+`3W^af3Rj
zP|I!ffd^|Ac~`<W4H>kW^?CDT3)ge*i|K2PM&IjUf4h>n)_A?_uk%u1gqP!u=gF^-
z$oCSq4&!6Kah~sJ#ojn1uN><=E^7!1;_NNHOk-`0IQCG?(l&E4UJ?8#0(3c&+L)CC
zKy<-5+Q+hke31sj61)>7hYX-)8^)+OoFKgz2r^Z9CkC6Me!vD6eo8iI38!y73p&qm
zU0m1c@OQHde6H6zv1FkTx2dUKXpnjO`mYy`OnRmz5d5OIzInKMKfHtxxZYTPfBfka
zzl~o`22ERssqVtp%?At?2Ko~;GT12M7Uj;@U{sZu3Dq_0rNPUA2kg^a4r{Dj({1d=
zJKAF@$JbZi(L5<x;o!-&PXBA#Zz@z@RT7z)y(gSaPf)pBW;>H|pF&9w`%?lxX;KAD
zmh%-1T&j%y(evdCMl7a<?f3a=-Rma=u?IXq)i4lg*cn{jtI%po$MZ(9uwp^_T{Ka_
z3mM%jY)8kmUZAJB!P9JV@mdT62k!OK+J4coP$tgb`7%u_G}yR9GY*|rTa^GOHRY*a
zh&F&ob~WiXxONW>(#{rdmAGUY0p^wWO;D1aX~)3fZTIm#&skX8eAYW@Y3cHkV)^9n
zpUxo&vA=|%F}B9R6^{7vnjB?2k&qw?dw_Kf9-m}BRJ<IA&47n^flj>mYymgKy2hO6
zHa>Z2&;$!n?`VTkj#YXLVY$HipP46?@28MyK(>l%p=4K<4B-43b*>F$qhs&uvt7;P
z5l35e6K^QZP}Dui!O^i+aSwR&-D$kW*w~ig*HG{n6U$qP?ogTuXva2&z+`!g<7eGU
zt6)*g^%(=`?L^~H6Yud)hXyYiCXdFfS`PV`lIi$8{nR*dy#mdf?n+L!6g+sQLjkTu
zkjk5U-;*q@+IGo<_YLnC$jP8P#`)a#$~!8#OMq%Wt?Q#}s<m{sVJowwkTb1^fwLIH
zKinZj{-r&tMw1R<t8GN?Da<9jMv4=R?9FC}h-B=A=8O;AhKsY2=Y6dnv6hSAGrm>_
zQ8^wb21m@}X`9dfm~XU2Z>-T$w!p*pU}NYesEU#ts<NPfYX-h`8n;5-39u!0RhL=f
z2L*7H`{b`o419fG;hB&AH}+~XviN{Jl%TOG{G9>+E{UaU<f*iJ@slK<#l$%AyS@0@
z!_CO&8>(Me*rc_{nQ+kXZ6-C<0Ka6Fk6yORM*}`Hi@CbRTY-5a_^I!f#r7oyB-0_z
z@3DaHefZB~n=h<A-1h&<OKZ38mre=$MN9SqOHX`Dhk+&-Kw`y{<IeeLGdfW%?;8?!
zI4XS>1*@^j+^M_LV8m~91qE=>-*FJ=Gk?RKV}hG~`3eenlk*rTAq>(+%n7FpMcEPA
z3spvCftzxPKFNH7&c`-)$D5!?!TUL`6`w>%f!<E?9EMIBFUo7$QoRVR1_*V|%nH~>
zYql{Y`i>xtyG^bLRM)pU(uq^+^Qi+YY|Zmgq5+gTyfX3c&;)xksE<4g`JZigC{f=p
zbB*Y0c=oVG--jtpLDJ)^A|=nHRije?^>hHfFZFyrMCmh*Hvf*3+&>vH*_oU^F)&a%
z7as$zysr=klL%6?{qH`C%~@;L`V9{VNpDq#L;T^OT=m9#m6rIPkMZmlp80iOvr!G#
zMGM`tapQeX);;V)+^eWk>a6l#i7FQvoc8hZu_}e;AG7F1{?8eH)l8$ULu$t(z`(kr
z^AjB&fw&hyQ~X&V)fsu<tQEHJttK4HC@k!n<cJ+CJlvz2!sO3FYX5t>&txJ5H}d$c
zO$Til;1_~;se{U5k2@4<_?kkqb8ieHiaBzG%N5oxv3vr2@qnHgeRcko(9ElYAPlG1
zEddACV$r~Ocb$^rkD$KoFw$%E7Zq(WU8d9D#w`!yTQ59Yj)XI!YfyzkVQ|C}QLt?9
z$UAs#Raga&ab%GP-eX6p_|N%jk$u#{VRJaVoGlLT4s$_oY)Z6mwlr}q5!FiBr1a>$
zX?dJg=+hx;w}QVL7$u{A&+NN|&uZ&y&F{SW)t%zj{`GlSQ1Q6eFMH4{Pl1DduKcqh
zmDd>ISfj__%_YtgS+AkqRgRtxgT4vn>{nU4cLrHc91ZH>y{Fxp((L^-C2<+CB%`w4
zlta2*PylX~-F5Y-F6Q*b5m)%Nx{h3hO)I%M^t?teU0qnoT}B;xTpGJEwY`S76UXNO
zOF~b`iYn-+Ra(q%i<5_M3c$?0;yAP&7PAX)sKcNoXl%lqgdg*-AzkhhJtGFq|Jed4
z%9syWBK|P@Hg3RB2yv{jt(MS1R>W3(_}#nJBPV*c6ARdoqz}JtmptaVbYRp|1z7l*
zNrVRGruyF4EXA45KlKTck$UtO3~Pa%EE{G4W(0xS)L86?Yr6D`WgDCPTi+K|F*Uil
zd;|;ccSogxC6^nM!su=E#Q8OxYuQ)d2bV36I@-k~uEAex9k<>#L>WLvI}!!tBnf5@
z@0H@io;&OFBMpu)Xozvs!&uV>uLdw2q(Y`UEwQtEdAW)_YfsXMmZIV+3eG{4xyd`#
zqQV#H=p$3us(EfsP*M1>l4N;m!D$|ujzJLq<e`oc+7cosa%xDHTfK%QWbzLR{$#{l
zElt&~u)jsSd#oN6vOcc4lM(Dd)sT=qfRD4{Gzse;&@n`fz|C&v+=J4*zhfwrv=8kb
zDnQIC+ji1&M?%Yw1aH*Zz2ad~1~j!#=Lj8fvpFS|4^50P;nIc16;5MTNdkW*{PK3R
zj6jpg-gO!=fC(AOOK}1x6wu7MHxIZk0IF(se`uZ78i~I|Ua1)W%7G<+&51-#wj*>7
z!E-Y#+M#IvT~MoCagb0YvP%^I;!H)jSa+RA!YMp`Ge;UPlg3r<k*MLLYG(To<~w&s
z`SzY!k8WE}rmffQlbW-)5;m@_e>ijJ-#MZLN#JoHiS!yH5{o^jGkWXuR2BJn0o2#a
zUDJG{yCYk$ciUjlN0fG4ZPkwy$IOqtaBLOsfAkQN>kbo>l8PU&UE!RaZOm_7gfUSP
z87mxh6iz6@XnkZ^AjaL1UxYlhdW>SgQuUROJKus+1H@(ZJf|%)+lSGcZz0y_$7^LS
zEQy*^)w(Cm%$zBu7ys*1t1^J7Gf*CW`PeU{Tt=bfT3Y)S{PI!(4!7dcZA=C2fJs1q
z7avJ22I8smcY%Eg1DEQ4%6lW<%810b{ZoDpC$$m(G=wDg;`QLTZcFbwn8vQZ^u>x*
zUCdLYf^7S~Gu%GJ<abM_5?dog=w><}P$Qc(#8)PQXsB-ZoNQwrKM0yrza~PY4_u)v
z!=Uy>*bMj!-nf`h8eYpAH-zhb5(`(ywb+^+80;2?x?Wfl4UKqF`#f{AvmLZoviMA@
zdtFfK0!agSM1M)<Pfr_RQTLlhsQ-1eYI{K-QC-gI5u>g$K|eux<2)a4W$Mlb5v|XQ
zx+EG`1V{$fNCE`mRZgbG-`_L|%hz18tOxH_>(&966<;d)T?hl8ZIr|jcT)J^epX`6
zRg?1iSAW_eZ0c%&7m$Y_*S2LQQXF?I27dYic}E3Qj+=-A62{xdm{Mg#k#3JeKgKPJ
zNDX^@0&-@&CR;j9AF+al4>fGf*uw|oZ#A`v6~oM%5%<kX0&}h+oU8<`7DdX%-W~*#
z)Oq3=JYK1<ynfbz@W~ShWnrQWz$f}is;SVvhP*xl1(fcsQ&6fwi*-LQ;<`?|x$Yx(
zcN?BA3gG*1^q8v!JcY8SS7j=Wpk93Pbatlbmz={(-=-nkmbr~zOMi5BrXK*j-@_{t
za4kCki<N{iiNW<5)q6)xx2`H4?jp3`IhQz08rel21Uf@aNk@4qO;g(F5x$(KAGi_o
z?H=B^QPmA(2#q-Z8m&`X1L&BT71cQ*GJamQK?1}*aP`dgkg`T0*x_qjPdF~HtcHcj
z>~!1Xu!rqxfPeJndL7T6zz;e*Trx(afCo(rJtq+rR^O<%I|%xGwe_A<Z!MFL(ASYw
z!T*Vdcv*l9oX|PViX@y<`<Y><Ea^uOQ>3_DG}DY9klDXc6)?tqON?7ly)?PRh_|${
zHP*PcV;epB*F`=Rk47<L5VG-(40xD|d-%2x5t8PFOaEY<-Kwi5Dhf1+`h+;O`QAq>
z-ieBa<7U1p9Q^PcxUl2VT4RAwVYze@|EHFpRR4@~Y6(JW3hPV+N!QGK<WlmReE@DE
zG1^6t-HZlT=o8`iNaN`~mL(s2>(;;JNJTAS)5^KI2KApVFRJ3E6%<yE=Lw(Nut@$U
zoV0exCq^$x{MauJK!T!X^P}?|J}o)&MQB_?43`x2X0aq3FA-#=Xu0^rFRzui)!Mst
z<Um-Dd(`uxhl95?kj?Ij8>6>!Jcu0JS!26UNmJ8DLZs?-8Og!B8w5Ah%OO*?U_j5P
zC@1z?8F4Lj70>ox#h!tozLBwU$Bj8_1d22<EqbM;F2WQ53fTkb(%XBYk1O8X_tG#>
zKPu^imMbnP15G}7;=}>7h11y_c@8!J@${!{2~oqz6lS#(d2tnm_I7|wC1nKtyfS>e
z;W^+*$hdnaj-Px#_vB^Wn<$<V+&XcF-`sWh%lt!{8wfJd<1ULaaKq2NZ`<1)XY^SD
z_w5U1fP^^RLja*vjhc#ULT~;}J9zO`$6!O`R7|m&=CZCErnx3&F|Nch^?b+k)mZw?
zTBN@eX<;*&A_5e3z`-B{MdMfX^O{ER5v;SOr#)jA5CxsqANRdglTAo7sctkLQpIRb
z$!Hm!u*}j(y%_z0e;$<ov%_5ki1+-R!rv^!_qKrLpOxqa18W!>?cnSG-~HboK>{)n
ZQn;*^esEyuq!IvcmS=6vDu44#_zxx7;j#b#


From 304407e5232332339e4e4b796abd4022dd2469fa Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 22:34:14 +0700
Subject: [PATCH 162/255] apple signing: App Group association fails early
 under automatic signing too (API capability + newest profile, steps and deep
 link, exit before the archive); console plan/verify apple-app-group

---
 CHANGELOG.md                        |   3 +
 cli/api/wrapped.gen.ts              |   2 +-
 cli/apple/build.ts                  |  35 ++--
 cli/apple/signing.ts                |  75 +++++++--
 cli/console/plan.ts                 |  27 +++-
 cli/console/verify.ts               |  16 ++
 cli/data/flags.json                 |  18 ++-
 cli/lib/console-answers.ts          |   5 +-
 cli/lib/console-apple-group-plan.ts |  84 ++++++++++
 cli/lib/console-plan.ts             |   8 +-
 cli/lib/console-play-plans.ts       |   2 +-
 cli/lib/console-verify.ts           |  25 ++-
 cli/lib/targets.ts                  |  62 +++++++-
 cli/mcp-tools.ts                    |  18 ++-
 docs/api-coverage.md                |   2 +-
 skills/build-and-sign/SKILL.md      |   7 +-
 skills/console-autofill/SKILL.md    |   2 +-
 skills/store-pitfalls/SKILL.md      |  18 ++-
 tests/console-play-plans.test.ts    |   2 +-
 tests/signing-targets.test.ts       | 239 +++++++++++++++++++++++++++-
 20 files changed, 590 insertions(+), 60 deletions(-)
 create mode 100644 cli/lib/console-apple-group-plan.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b029e3f..e4d8c7c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
+- New `storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup]` (MCP `console_plan`: `bundleId`, `groups`, `lookup`): the agent-first developer portal plan to assign an App Group to an extension's App ID (start URL per bundle id resource id, portal labels, answer sheet per extension, never-press list: Remove / Delete / Revoke). Its final Save is the agent's own (`buttons.finalByAgent`: a capability edit, not a store submission). `console verify apple-app-group` (MCP `console_verify`, API only) re-reads the App ID and the newest profile and fails while a group is missing or cannot be proven.
+
 ## 0.8.49 · 2026-10-25
 
 - `play listing` for a language Play does not have yet uploads, in the same edit as the text, everything Play requires to commit it: icon, feature graphic, 2+ phone screenshots from `store/renders/<lang>/` and the tablet sets when the other languages have them (a set the folder lacks falls back to the default language's). The dry run lists the uploads or refuses with the missing file, instead of a 403 "too few screenshots" at commit. `play images` creates a Play listing that does not exist yet (text from the listing file) together with its images instead of skipping the language (pitfall 102).
diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 20dc859..eced4ef 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -136,7 +136,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'bundleIdCapabilities_createInstance': 'lib/signing',
     'bundleIds_createInstance': 'apple/bundle apple/signing',
     'bundleIds_getCollection': 'apple/adhoc apple/bundle apple/signing',
-    'bundleIds_profiles_getToManyRelated': 'apple/adhoc lib/signing',
+    'bundleIds_profiles_getToManyRelated': 'apple/adhoc apple/signing lib/signing',
     'certificates_createInstance': 'apple/signing lib/signing',
     'certificates_getCollection': 'apple/adhoc apple/signing',
     'customerReviewResponses_createInstance': 'lib/reviews',
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 97ac211..855451b 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -6,8 +6,8 @@
 //                          [--keychain <path>] [--keychain-unlock] [--allow-ssh] [--allow-app-group-gap]
 // Over SSH (no GUI session) codesign needs an unlocked keychain: --keychain-unlock unlocks it with the password in
 // STOREBOUND_KEYCHAIN_PASSWORD (never printed) and sets its key partition list; --keychain <path> signs with a build
-// keychain instead of the login keychain. Manual signing: stops before the build when a target's App Group is not in its
-// installed profile (the developer portal assigns groups; storebound apple signing status/ensure names the steps).
+// keychain instead of the login keychain. App Groups: stops before the archive when a target's App Group is not proven (manual: its
+// installed profile; automatic: the App ID's capability and the newest profile the API lists; the portal assigns groups: console plan apple-app-group).
 // First the prebuild (build.prebuild / apple.prebuild: e.g. the web build + npx cap sync; once per flow run), then a
 // Capacitor project's copied web assets (ios/App/App/public) must be newer than the source, else it stops.
 // Finds the workspace / project and scheme (native, Capacitor ios/App, React Native ios/<Name>, Flutter ios/Runner,
@@ -30,13 +30,13 @@ import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
 import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
-import { appGroupGapsFor, appGroupSteps } from '../lib/targets';
+import { appGroupSteps, appGroupVerdicts, type GroupEvidence } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
 import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { parsePlatform } from './platform';
-import { discoverTargets, findBundleId } from './signing';
+import { discoverTargets, findBundleId, readGroupEvidence } from './signing';
 import * as rt from '../lib/rt';
 import { shipPhase } from '../lib/ship-step';
 
@@ -179,12 +179,27 @@ export async function run(ctx: Ctx): Promise<void> {
     if (p) profiles[id] = p.uuid; else if (!dry) throw new Error(`no installed App Store profile for ${id}: storebound apple signing ensure`);
     else warn(TAG, `no installed App Store profile for ${id} (storebound apple signing ensure)`);
   }
-  // App Groups: a manual-signing profile carries a group only when the portal assigned it to the bundle id
-  const groupGaps = style === 'manual' ? appGroupGapsFor([...(scan.main ? [scan.main] : []), ...scan.extensions], id => { const p = installedProfiles(id, teamId)[0]; return p ? p.entitlements : null; }, () => null) : [];
-  for (const g of groupGaps) {
-    const msg = `${g.bundleId}: the installed profile lacks App Group(s) ${g.groups.join(', ')}`;
-    if (a.has('allow-app-group-gap') || dry) warn(TAG, msg);
-    else throw new Error(`${msg}; codesign would refuse the build.\n${appGroupSteps(g).slice(1).join('\n')}\n(--allow-app-group-gap builds anyway)`);
+  // App Groups: a profile carries a group only when the portal assigned it to the bundle id (the API cannot). Manual
+  // signing: the installed profile; automatic: the App ID's capability and the newest profile the API lists. A gap stops
+  // the build before the archive; an association nothing can prove is warned with the same steps.
+  const groupTargets = [...(scan.main ? [scan.main] : []), ...scan.extensions];
+  let groupEvidence: ((id: string) => GroupEvidence | null) | null = null;
+  if (groupTargets.some(t => t.appGroups.length)) {
+    if (style === 'manual') groupEvidence = id => { const p = installedProfiles(id, teamId)[0]; return p ? { resourceId: null, capabilityOn: null, profileEnt: p.entitlements } : null; };
+    else {
+      try { groupEvidence = await readGroupEvidence(await ascClient(root, bundleId, config.apple?.appId), groupTargets, 'automatic', signing.profileType ?? 'IOS_APP_STORE'); }
+      catch (e) { warn(TAG, `App Group association not read from App Store Connect (${(e as Error).message.split('\n')[0]?.slice(0, 120)})`); }
+    }
+  }
+  const groupVerdicts = appGroupVerdicts(groupTargets, groupEvidence ?? (() => null));
+  for (const g of groupVerdicts.unproven) for (const l of appGroupSteps(g)) warn(TAG, l);
+  for (const g of groupVerdicts.gaps) {
+    const msg = `${g.bundleId}: ${g.why}`;
+    if (a.has('allow-app-group-gap') || dry) { warn(TAG, msg); for (const l of appGroupSteps(g).slice(1)) warn(TAG, l); }
+    else {
+      const auto = style === 'automatic' ? 'Automatic signing: Xcode renews its managed profile at archive time, so if you just ticked the group and the API still lists the old profile, build with --allow-app-group-gap.' : '';
+      throw new Error([`${msg}; codesign would refuse the build (stopped before the archive).`, ...appGroupSteps(g).slice(1), ...(auto ? [auto] : []), '(--allow-app-group-gap builds anyway)'].join(String.fromCharCode(10)));
+    }
   }
   const opts = exportOptions({ teamId: teamId ?? '<TEAM_ID>', style, profiles: style === 'manual' ? (Object.keys(profiles).length ? profiles : { [bundleId]: '<profile uuid>' }) : undefined });
   const plist = toXmlPlist(opts);
diff --git a/cli/apple/signing.ts b/cli/apple/signing.ts
index 09fb9b0..22330b4 100644
--- a/cli/apple/signing.ts
+++ b/cli/apple/signing.ts
@@ -34,7 +34,7 @@ import {
 import { isBuildCopyPath } from '../lib/privacy-manifest';
 import { exportedIpas, ipaInfo, scanXcode } from '../lib/xcode';
 import { parseMobileprovision, parsePlist } from '../lib/plist';
-import { appGroupGapsFor, appGroupSteps, type AppGroupGap, pbxTargets, type TargetKind } from '../lib/targets';
+import { appGroupSteps, appGroupVerdicts, type AppGroupGap, type GroupEvidence, type GroupVerdicts, pbxTargets, type TargetKind } from '../lib/targets';
 import { zipEntries, zipRead } from '../lib/zip';
 import type { ShipConfig } from '../lib/config';
 import { textTable } from '../lib/table';
@@ -71,6 +71,7 @@ export async function findBundleId(c: Asc, identifier: string): Promise<J | null
   const hit = (r.data as J[]).find(b => b.attributes.identifier === identifier) ?? null;
   if (hit) hit.capabilities = (r.included ?? []).filter((x: J) => x.type === 'bundleIdCapabilities' && (hit.relationships?.bundleIdCapabilities?.data ?? []).some((d: J) => d.id === x.id))
     .map((x: J) => x.attributes.capabilityType as string);
+  if (hit) hit.capabilityObjects = (r.included ?? []).filter((x: J) => x.type === 'bundleIdCapabilities' && (hit.relationships?.bundleIdCapabilities?.data ?? []).some((d: J) => d.id === x.id)).map((x: J) => x.attributes);
   return hit;
 }
 
@@ -173,10 +174,51 @@ export function profileEntitlements(list: ApiProfile[]): Record<string, unknown>
   try { return (parseMobileprovision(Buffer.from(p.attributes.profileContent!, 'base64')).Entitlements ?? {}) as Record<string, unknown>; } catch { return null; }
 }
 
+/** The entitlements of the newest ACTIVE profile of a bundle id with content, an Xcode-managed one too (automatic
+ *  signing: the list serves the content even where /v1/profiles/{id} answers 404). null = none readable. */
+export function newestProfileEntitlements(list: ApiProfile[]): Record<string, unknown> | null {
+  const p = list.filter(x => x.attributes.profileState === 'ACTIVE' && x.attributes.profileContent)
+    .sort((a, b) => Date.parse(b.attributes.expirationDate ?? '') - Date.parse(a.attributes.expirationDate ?? ''))[0];
+  if (!p) return null;
+  try { return (parseMobileprovision(Buffer.from(p.attributes.profileContent!, 'base64')).Entitlements ?? {}) as Record<string, unknown>; } catch { return null; }
+}
+
+/** What the API shows about the App Group association of one bundle id: the APP_GROUPS capability (and its settings)
+ *  and the entitlements of its newest readable profile (manual signing: storebound's own; automatic: any, managed too). */
+export function groupEvidence(b: J | null | undefined, list: ApiProfile[], style: 'automatic' | 'manual'): GroupEvidence | null {
+  if (!b) return null;
+  const caps = (b.capabilities as string[] | undefined) ?? [];
+  const obj = ((b.capabilityObjects as { capabilityType?: string; settings?: unknown }[] | undefined) ?? []).find(x => x.capabilityType === 'APP_GROUPS');
+  return { resourceId: b.id ?? null, capabilityOn: caps.includes('APP_GROUPS'), capabilitySettings: obj?.settings ?? null,
+    profileEnt: style === 'manual' ? profileEntitlements(list) : newestProfileEntitlements(list) };
+}
+
+/** Reads the evidence for every target with App Groups (API only, no writes): the bundle id with its capabilities and
+ *  the profiles listed under it. */
+export async function readGroupEvidence(c: Asc, targets: { bundleId: string; appGroups: string[] }[], style: 'automatic' | 'manual', type: ProfileType): Promise<(bundleId: string) => GroupEvidence | null> {
+  const out = new Map<string, GroupEvidence | null>();
+  for (const t of targets.filter(x => x.appGroups.length)) {
+    const b = await findBundleId(c, t.bundleId);
+    let list: ApiProfile[] = [];
+    if (b) {
+      try { list = (await c.all(`/v1/bundleIds/${b.id}/profiles?limit=200`) as J[]).filter(p => p.attributes?.profileType === type).map((p): ApiProfile => ({ id: p.id, attributes: p.attributes })); } catch { /* not listable: unproven */ }
+    }
+    out.set(t.bundleId, groupEvidence(b, list, style));
+  }
+  return id => out.get(id) ?? null;
+}
+
 export function warnAppGroupGaps(gaps: AppGroupGap[], tag: string): void {
   for (const g of gaps) for (const l of appGroupSteps(g)) warn(tag, l);
 }
 
+/** Early exit text of a proven App Group gap (before the archive / at the end of ensure): the gap, the exact portal
+ *  steps with the deep link, the plan command and the refresh. */
+export function appGroupError(gaps: AppGroupGap[], what: string): string {
+  const nl = String.fromCharCode(10);
+  return `${gaps.map(g => `${g.bundleId}: ${g.why ?? `lacks ${g.groups.join(', ')}`}`).join('; ')}; ${what}.${nl}${gaps.map(g => appGroupSteps(g).slice(1).join(nl)).join(nl)}`;
+}
+
 const git = (root: string, args: string[]): string | null => {
   try {
     const r = rt.spawnSync(['git', '-C', root, ...args], { stdout: 'pipe', stderr: 'pipe' });
@@ -303,6 +345,8 @@ export interface SigningState {
   /** every signable target: where it was found, its capabilities (present / missing on its App ID) and App Groups */
   targets: { bundleId: string; name: string; kind: string; source: string; registered: boolean; capabilities: string[]; missingCapabilities: string[]; appGroups: string[] }[];
   appGroupGaps: AppGroupGap[];
+  /** targets whose App Group association the API cannot show (warned, not blocked) */
+  appGroupUnproven: AppGroupGap[];
 }
 
 export async function run(ctx: Ctx): Promise<void> {
@@ -351,7 +395,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   const wantCaps = (t: SigningTarget): CapabilitySpec[] => (t.bundleId === bundleId ? capabilitySpecs(s, config.games?.gameCenter === true) : t.capabilities);
   const targetList: SigningTarget[] = [...(scan.main ? [scan.main] : []), ...exts];
-  const gapsOf = (): AppGroupGap[] => appGroupGapsFor(targetList, id => { const b = bundles.get(id); return b ? profileEntitlements(profiles.get(id)?.list ?? []) : null; }, id => bundles.get(id)?.id ?? null);
+  const verdictsOf = (): GroupVerdicts => appGroupVerdicts(targetList, id => groupEvidence(bundles.get(id), profiles.get(id)?.list ?? [], style));
   const state: SigningState = {
     bundleId, teamId: s.teamId ?? main?.attributes?.seedId ?? null, registered: !!main,
     capabilities: { present: capPlan.present, missing: capabilitySpecs(s, config.games?.gameCenter === true).filter(w => !capPlan.present.includes(w.type)).map(w => w.type), extra: capPlan.extra },
@@ -370,7 +414,7 @@ export async function run(ctx: Ctx): Promise<void> {
       return { bundleId: id, name: r?.attributes.name ?? null, uuid: r?.attributes.uuid ?? null, state: r ? 'ACTIVE' : 'needs a new profile',
         installed: installedAt(r?.attributes.uuid).length > 0, why: p.plan?.why ?? 'waits for a usable certificate' };
     }),
-    targets: [], appGroupGaps: [],
+    targets: [], appGroupGaps: [], appGroupUnproven: [],
   };
 
   state.targets = ids.map(id => {
@@ -379,7 +423,7 @@ export async function run(ctx: Ctx): Promise<void> {
     return { bundleId: id, name: t?.name ?? id, kind: t?.kind ?? 'app', source: t?.source ?? 'config', registered: !!b, capabilities: want,
       missingCapabilities: want.filter(w => !(b?.capabilities ?? []).includes(w)), appGroups: t?.appGroups ?? [] };
   });
-  state.appGroupGaps = style === 'manual' ? gapsOf() : [];
+  { const v = verdictsOf(); state.appGroupGaps = v.gaps; state.appGroupUnproven = v.unproven; }
 
   // storebound-made profiles that nothing uses (automatic signing: all of them; manual: all but the reused one)
   const inUse = new Set(style === 'manual' ? [...profiles.values()].map(p => p.plan?.reuse?.id).filter((x): x is string => !!x) : []);
@@ -400,7 +444,7 @@ export async function run(ctx: Ctx): Promise<void> {
     for (const x of choice.expiring) warn(TAG, `${x.attributes.name ?? x.id} expires ${x.attributes.expirationDate?.slice(0, 10)}: make a new one soon (storebound apple signing ensure)`);
     for (const n of scan.notes) log(TAG, n);
     console.log(textTable(['target', 'kind', 'bundle id', 'registered', 'capabilities', 'app groups'], state.targets.map(t => [t.name, t.kind, t.bundleId, t.registered ? 'yes' : 'no', t.capabilities.join(', ') || '-', t.appGroups.join(', ') || '-'])));
-    warnAppGroupGaps(state.appGroupGaps, TAG);
+    warnAppGroupGaps([...state.appGroupGaps, ...state.appGroupUnproven], TAG);
     console.log(textTable(['bundle id', 'profile', 'state', 'installed', ''], state.profiles.map(p => [p.bundleId, p.name ?? '', p.state, p.installed ? 'yes' : 'no', p.why])));
     printCapabilityReport(report, TAG);
     cleanup();
@@ -443,6 +487,7 @@ export async function run(ctx: Ctx): Promise<void> {
     if (scope.profiles) for (const p of state.profiles) if (p.uuid && !p.installed && !a.has('no-install')) log(TAG, `would install profile ${p.name} (${p.uuid}) for Xcode`);
     if (capPlan.create.length) log(TAG, `would read the App ID's capabilities back after the write and fail if ${capPlan.create.map(r => (r.body as J).data.attributes.capabilityType).join(' / ')} is not there`);
     printCapabilityReport(report, TAG);
+    warnAppGroupGaps([...state.appGroupGaps, ...state.appGroupUnproven], TAG);
     cleanup();
     done(TAG, `signing checked (dry run): ${plan.length} write(s)`);
     return;
@@ -469,7 +514,13 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!scope.profiles) {
     printCapabilityReport(await capabilityReport(c, config, root), TAG);
     cleanup();
-    if (json) printJson({ ...state, style, scope, plan, done: true });
+    // automatic signing: Xcode makes the profile at archive time, so the App Group association is read from the App ID
+    // and the newest profile the API lists now (the writes above may have added capabilities: read the App IDs again)
+    for (const t of targetList) if (t.appGroups.length) bundles.set(t.bundleId, (await findBundleId(c, t.bundleId)) ?? bundles.get(t.bundleId) ?? null);
+    const v = appGroupVerdicts(targetList, id => groupEvidence(bundles.get(id), profiles.get(id)?.list ?? [], 'automatic'));
+    if (json) printJson({ ...state, style, scope, plan, appGroupGaps: v.gaps, appGroupUnproven: v.unproven, done: !v.gaps.length });
+    warnAppGroupGaps(v.unproven, TAG);
+    if (v.gaps.length) throw new Error(`capabilities in step, but ${appGroupError(v.gaps, 'the archive would fail at codesign (empty application-groups in the profile)')}`);
     done(TAG, `capabilities in step; ${scope.why.split(':')[0]}: nothing else to create`);
     return;
   }
@@ -539,12 +590,12 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   cleanup();
   // App Groups: the profile carries a group only when it is assigned to the bundle id in the developer portal
-  const gaps = appGroupGapsFor(targetList, id => finalEnt.get(id) ?? null, id => bundles.get(id)?.id ?? null);
-  if (json) printJson({ ...state, plan, appGroupGaps: gaps, done: !gaps.length });
-  if (gaps.length) {
-    warnAppGroupGaps(gaps, TAG);
-    throw new Error(`profile(s) installed, but ${gaps.map(g => `${g.bundleId} lacks ${g.groups.join(', ')}${g.url ? ` (${g.url})` : ''}`).join('; ')}: the build would fail at codesign. Tick the App Group(s) in the developer portal (steps above), then run storebound apple signing ensure --refresh-profile.`);
-  }
+  for (const t of targetList) if (t.appGroups.length) bundles.set(t.bundleId, (await findBundleId(c, t.bundleId)) ?? bundles.get(t.bundleId) ?? null);
+  const v = appGroupVerdicts(targetList, id => { const ent = finalEnt.get(id); const b = bundles.get(id); return ent ? { ...groupEvidence(b, [], 'manual')!, profileEnt: ent } : groupEvidence(b, [], 'manual'); });
+  const gaps = v.gaps;
+  if (json) printJson({ ...state, plan, appGroupGaps: gaps, appGroupUnproven: v.unproven, done: !gaps.length });
+  warnAppGroupGaps(v.unproven, TAG);
+  if (gaps.length) throw new Error(`profile(s) installed, but ${appGroupError(gaps, 'the build would fail at codesign')}`);
   done(TAG, 'signing ready (storebound apple build --dry shows the ExportOptions.plist it will use)');
 }
 
diff --git a/cli/console/plan.ts b/cli/console/plan.ts
index be96c28..2c68c40 100644
--- a/cli/console/plan.ts
+++ b/cli/console/plan.ts
@@ -2,6 +2,7 @@
 //   storebound console plan                  lists the forms
 //   storebound console plan <form> [--json] [--lookup]
 //   storebound console plan play-app-content --all [--json]   every App content card's steps inline, one owner list
+//   storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup] [--json]   the developer portal App Group assignment the API cannot do
 // Read-only. Offline by default: the start URL, the ordered steps, the answer sheet (each answer certain or "ask
 // owner", with the console's own labels), the never-press list, the known UI facts and how to verify. Deep links use
 // apple.appId / play.developerId / play.appId, the ids cached by earlier runs (.storebound/console-app-ids.json,
@@ -12,8 +13,31 @@ import type { Ctx } from '../lib/ctx';
 import { formMeta, isForm, isPlanForm, PLAN_FORM_IDS } from '../lib/console-answers';
 import { reviewDemoAccount } from '../lib/credentials';
 import { consolePlan, type PlanIds, planText } from '../lib/console-plan';
+import type { ShipConfig } from '../lib/config';
 import { printJson } from '../lib/log';
 
+/** apple-app-group: the targets whose entitlements (or apple.signing.extensions) list App Groups, narrowed by --bundle-id;
+ *  --groups g1,g2 names the groups of a bundle id the project does not show; --lookup reads the bundle id's resource id (a GET). */
+async function appGroupTargets(ctx: Ctx, cfg: ShipConfig, bundleId: string | undefined, groups: string | undefined, lookup: boolean): Promise<NonNullable<PlanIds['appGroupTargets']>> {
+  const { discoverTargets } = await import('../apple/signing');
+  const scan = discoverTargets(ctx.loaded.root, cfg);
+  const all = [...(scan.main ? [scan.main] : []), ...scan.extensions];
+  const listed = groups ? groups.split(',').map(g => g.trim()).filter(Boolean) : [];
+  for (const g of listed) if (!/^group.[A-Za-z0-9.-]+$/.test(g)) throw new Error(`console plan apple-app-group: --groups "${g}" is not an App Group id (group.<reverse domain>)`);
+  let found = all.filter(t => t.appGroups.length && (!bundleId || t.bundleId === bundleId)).map(t => ({ bundleId: t.bundleId, name: t.name, groups: listed.length ? listed : t.appGroups, source: t.entitlements ? `entitlements ${t.entitlements}` : 'apple.signing.extensions' }));
+  if (bundleId && !found.length) {
+    if (!listed.length) throw new Error(`console plan apple-app-group: no target "${bundleId}" with App Groups in the project (targets with groups: ${all.filter(t => t.appGroups.length).map(t => t.bundleId).join(', ') || 'none'}); pass --groups group.a,group.b`);
+    found = [{ bundleId, name: bundleId, groups: listed, source: '--groups' }];
+  }
+  if (!lookup || !found.length) return found;
+  const bundle = cfg.apple?.bundleId;
+  if (!bundle) throw new Error('console plan: apple.bundleId is not set (needed for --lookup)');
+  const { ascClient } = await import('../apple/asc');
+  const { findBundleId } = await import('../apple/signing');
+  const c = await ascClient(ctx.loaded.root, bundle, cfg.apple?.appId);
+  return Promise.all(found.map(async t => ({ ...t, resourceId: (await findBundleId(c, t.bundleId))?.id ?? null })));
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const args = ctx.args, json = args.has('json');
@@ -21,7 +45,7 @@ export async function run(ctx: Ctx): Promise<void> {
   if (!form) {
     const forms = PLAN_FORM_IDS.map(id => {
       if (isForm(id)) { const m = formMeta(id, config); return { id, store: m.store, title: m.title, fillable: m.fillable, scripted: m.fillable }; }
-      return { id, store: 'play' as const, title: consolePlan(id, config).title, fillable: true, scripted: false };
+      return { id, store: id.startsWith('apple-') ? 'apple' as const : 'play' as const, title: consolePlan(id, config).title, fillable: true, scripted: false };
     });
     if (json) return printJson({ forms });
     console.log('storebound console plan <form> [--json] [--lookup]   (then drive the page yourself; `storebound console verify <form>` checks it)\n');
@@ -53,6 +77,7 @@ export async function run(ctx: Ctx): Promise<void> {
       ids.readyChanges = await readyFromApi(root, cfg);
     } catch { /* not read: the plan says so */ }
   }
+  if (form === 'apple-app-group') ids.appGroupTargets = await appGroupTargets(ctx, cfg, args.get('bundle-id'), args.get('groups'), args.has('lookup'));
   if (args.has('all') && form !== 'play-app-content') throw new Error('console plan: --all is for play-app-content (every App content card inline)');
   const plan = consolePlan(form, cfg, ids, { all: args.has('all') });
   if (json) return printJson(plan);
diff --git a/cli/console/verify.ts b/cli/console/verify.ts
index 5310af6..f513920 100644
--- a/cli/console/verify.ts
+++ b/cli/console/verify.ts
@@ -2,6 +2,7 @@
 //   storebound console verify <form> [--from <file|->] [--from-text <file|->] [--json]
 // --from takes the JSON of the plan's verify.capture snippet (input states: aria-checked, checked, aria-selected) or page text.
 //   storebound console verify play-app-record --url <url after Create app> [--write]
+//   storebound console verify apple-app-group [--bundle-id <id>]   (API: the App Groups on the App ID's newest readable profile)
 // apple-app-privacy: the page text of the App Privacy page (the Data Types section's per-type summaries; the App Store
 // Connect API has no App Privacy endpoint). play-app-record: the JSON of the plan's capture snippet (input states) or
 // the page text. play-content-rating, play-target-audience: the summary page text. play-app-content: the plan's
@@ -43,6 +44,21 @@ export async function run(ctx: Ctx): Promise<void> {
     const { readyFromApi } = await import('../play/publish-ready');
     const { verifyPublishChangesApi } = await import('../lib/console-verify');
     r = verifyPublishChangesApi(await readyFromApi(root, config));
+  } else if (form === 'apple-app-group') {
+    const { discoverTargets, readGroupEvidence } = await import('../apple/signing');
+    const { appGroupVerdicts } = await import('../lib/targets');
+    const { verifyAppGroupsApi } = await import('../lib/console-verify');
+    const want = args.get('bundle-id');
+    const scan = discoverTargets(root, config);
+    const targets = [...(scan.main ? [scan.main] : []), ...scan.extensions].filter(t => t.appGroups.length && (!want || t.bundleId === want));
+    if (!targets.length) throw new Error(`console verify apple-app-group: no target${want ? ` "${want}"` : ''} with App Groups in the project's entitlements or apple.signing.extensions`);
+    const bundleId = config.apple?.bundleId;
+    if (!bundleId) throw new Error('console verify: apple.bundleId is not set');
+    const { ascClient } = await import('../apple/asc');
+    const c = await ascClient(root, bundleId, config.apple?.appId);
+    const style = config.apple?.signing?.style ?? 'automatic';
+    const evidence = await readGroupEvidence(c, targets, style, config.apple?.signing?.profileType ?? 'IOS_APP_STORE');
+    r = verifyAppGroupsApi(targets, appGroupVerdicts(targets, evidence));
   } else if (form === 'apple-app-record' || form === 'apple-age-rating') {
     const bundleId = config.apple?.bundleId;
     if (!bundleId) throw new Error('console verify: apple.bundleId is not set');
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 2e3f8ba..88b6faf 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -499,6 +499,7 @@
    "all",
    "allow-availability-changes",
    "allow-price-changes",
+   "bundle-id",
    "capacitor",
    "cdp",
    "chrome-profile",
@@ -510,10 +511,15 @@
    "flutter",
    "fresh-profile",
    "godot",
+   "groups",
+   "keychain",
+   "locale-map",
    "lookup",
    "name",
+   "no-install",
    "profile",
    "react-native",
+   "refresh-profile",
    "sku",
    "start-url",
    "step-timeout",
@@ -524,6 +530,7 @@
   "console verify": [
    "allow-availability-changes",
    "allow-price-changes",
+   "bundle-id",
    "capacitor",
    "cordova",
    "cordova-android",
@@ -533,8 +540,12 @@
    "from",
    "from-text",
    "godot",
+   "keychain",
+   "locale-map",
    "name",
+   "no-install",
    "react-native",
+   "refresh-profile",
    "sku",
    "text",
    "unity",
@@ -1204,6 +1215,7 @@
    "from-text",
    "godot",
    "group",
+   "groups",
    "halt",
    "headless",
    "home",
@@ -1578,11 +1590,13 @@
   "console plan": [
    "storebound console plan                  lists the forms",
    "storebound console plan <form> [--json] [--lookup]",
-   "storebound console plan play-app-content --all [--json]   every App content card's steps inline, one owner list"
+   "storebound console plan play-app-content --all [--json]   every App content card's steps inline, one owner list",
+   "storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup] [--json]   the developer portal App Group assignment the API cannot do"
   ],
   "console verify": [
    "storebound console verify <form> [--from <file|->] [--from-text <file|->] [--json]",
-   "storebound console verify play-app-record --url <url after Create app> [--write]"
+   "storebound console verify play-app-record --url <url after Create app> [--write]",
+   "storebound console verify apple-app-group [--bundle-id <id>]   (API: the App Groups on the App ID's newest readable profile)"
   ],
   "desktop": [
    "storebound desktop                 the app has this CLI's version: open it (in an app folder: on that folder, which",
diff --git a/cli/lib/console-answers.ts b/cli/lib/console-answers.ts
index 8294abb..036fc47 100644
--- a/cli/lib/console-answers.ts
+++ b/cli/lib/console-answers.ts
@@ -25,11 +25,12 @@ import type { ProjectSignals } from './project-signals';
 
 export const FORM_IDS = ['apple-app-record', 'apple-age-rating', 'apple-app-privacy', 'play-app-record', 'play-content-rating', 'play-target-audience'] as const;
 export type FormId = typeof FORM_IDS[number];
-/** Forms with a console plan only (the agent drives them; no scripted fill): Play Store settings (the App category the
+/** Forms with a console plan only (the agent drives them; no scripted fill): apple-app-group (the developer portal App Group
+ *  assignment the API cannot do, cli/lib/console-apple-group-plan.ts), Play Store settings (the App category the
  *  API cannot set), the App content overview and its declarations without a fill form (cli/lib/console-play-plans.ts). */
 export const PLAN_ONLY_FORM_IDS = ['play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details',
   'play-advertising-id', 'play-government-apps', 'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release',
-  'play-games-services', 'play-publish-changes'] as const;
+  'play-games-services', 'play-publish-changes', 'apple-app-group'] as const;
 export type PlanOnlyFormId = typeof PLAN_ONLY_FORM_IDS[number];
 /** Every form `console plan` / `console verify` know. */
 export const PLAN_FORM_IDS = [...FORM_IDS, ...PLAN_ONLY_FORM_IDS] as const;
diff --git a/cli/lib/console-apple-group-plan.ts b/cli/lib/console-apple-group-plan.ts
new file mode 100644
index 0000000..c54d404
--- /dev/null
+++ b/cli/lib/console-apple-group-plan.ts
@@ -0,0 +1,84 @@
+// `storebound console plan apple-app-group`: the App Store Connect API can switch the APP_GROUPS capability on for a
+// bundle id but cannot assign a group to it, so an app extension (a packet-tunnel extension, a share extension, a
+// widget) whose entitlements list `com.apple.security.application-groups` gets a profile with an empty group list until
+// the group is ticked in the developer portal. Agent-first like the other plans: the agent drives the signed-in
+// developer.apple.com page with its own browser tool, presses Save itself (it is a capability edit on the owner's own
+// App ID, not a store submission: finalByAgent), then `storebound apple signing ensure --refresh-profile` and
+// `storebound console verify apple-app-group` (read-only, API). Pure.
+// Modeled on Apple's help ("Configure App Groups", "Register an App Group"), not yet recorded on a real portal page: the
+// labels are where to start, the agent adapts.
+import { bundleIdPortalUrl, PORTAL_IDENTIFIERS_URL } from './targets';
+import { NEVER_PRESS } from './console-forms';
+import type { ConsolePlan, PlanAnswer, PlanIds, PlanStep } from './console-plan';
+
+export const PORTAL_REMOVE = ['Remove', 'Remove App ID', 'Delete', 'Delete identifier', 'Revoke', 'Revoke certificate', 'Download'];
+const CHECK = 'document.querySelector("main")?.innerText ?? document.body.innerText';
+
+export function appleAppGroupPlan(p: PlanIds): ConsolePlan {
+  const targets = p.appGroupTargets ?? [];
+  const one = targets.length === 1 ? targets[0]! : null;
+  const answers: PlanAnswer[] = [];
+  const steps: PlanStep[] = [];
+  const add = (s: Omit<PlanStep, 'n'>): void => { steps.push({ n: steps.length + 1, ...s }); };
+  const a = (x: PlanAnswer): void => { answers.push(x); };
+
+  if (!targets.length) {
+    a({ id: 'targets', question: 'Which bundle id needs which App Group(s)?', value: null, text: '(none found)', status: 'ask-owner', source: 'entitlements of the Xcode targets',
+      note: 'No target of the project lists com.apple.security.application-groups. Pass --bundle-id <id> --groups group.a,group.b, or list the extension in apple.signing.extensions with appGroups.' });
+  }
+  for (const t of targets) {
+    a({ id: `${t.bundleId}/capability`, question: `${t.bundleId}: App Groups capability`, value: true, text: 'on', status: 'certain', source: t.source ?? 'entitlements', control: 'checkbox', label: 'App Groups', action: 'tick', where: 'Capabilities list of the App ID page' });
+    for (const g of t.groups) a({ id: `${t.bundleId}/${g}`, question: `${t.bundleId}: App Group`, value: g, text: g, status: 'certain', source: t.source ?? 'entitlements', control: 'checkbox', label: g, action: 'tick', where: 'the App Group assignment dialog (App Groups > Configure)' });
+  }
+
+  const start = one?.resourceId
+    ? { url: bundleIdPortalUrl(one.resourceId), deepLink: true, reach: [] as string[] }
+    : { url: PORTAL_IDENTIFIERS_URL, deepLink: false, reach: ['Certificates, Identifiers & Profiles > Identifiers', targets.length ? `search the bundle id (${targets.map(t => t.bundleId).join(', ')}) and open it` : 'search the bundle id and open it', 'with --lookup the plan gets the deep link (https://developer.apple.com/account/resources/identifiers/bundleId/edit/<resource id>)'] };
+
+  add({ text: `Open ${start.url} in the signed-in browser (never sign in, never type the account password: if the page asks to sign in, tell the owner).${start.deepLink ? '' : ' Identifiers > search the bundle id > open it.'}` });
+  for (const t of targets) {
+    const url = t.resourceId ? bundleIdPortalUrl(t.resourceId) : null;
+    const gs = t.groups.join(', ');
+    add({ text: `${t.bundleId}${url ? ` (${url})` : ''}: on the "Edit Your App ID Configuration" page, find App Groups in the Capabilities list and tick its checkbox if it is not ticked.`, answers: [`${t.bundleId}/capability`] });
+    add({ text: `${t.bundleId}: press "Configure" next to App Groups. In the dialog that lists the registered App Groups tick ${gs} (exact identifiers; tick nothing else), then press "Continue". A group that is not listed must be registered first: Identifiers > the blue + > App Groups > Continue > Description and Identifier (the group id of the sheet) > Continue > Register; then reopen this page.`, click: ['Configure', 'Continue'], answers: t.groups.map(g => `${t.bundleId}/${g}`) });
+    add({ text: `${t.bundleId}: press "Save" at the top right. If a dialog says the provisioning profiles of this App ID become invalid, press "Confirm" (a new profile is made by \`storebound apple signing ensure --refresh-profile\`). Read the page back: App Groups shows the configured count.`, click: ['Save', 'Confirm'] });
+  }
+  add({ text: `Then run \`storebound apple signing ensure --refresh-profile\` (a new profile that carries the group), and \`storebound console verify apple-app-group${one ? ` --bundle-id ${one.bundleId}` : ''}\` (read-only: reads the App ID and the newest profile through the API and checks every group).` });
+
+  return {
+    form: 'apple-app-group', store: 'apple', title: 'Apple Developer portal: assign App Groups to an App ID (the API cannot)',
+    ownerBatch: [], start, steps, answers,
+    askOwner: answers.filter(x => x.status !== 'certain').map(x => `${x.question}: ask the owner${x.note ? ` (${x.note})` : ''}`),
+    buttons: {
+      neverPress: [...new Set([...PORTAL_REMOVE, 'Revoke', 'Account', 'Certificates', 'Keys', ...NEVER_PRESS])],
+      final: 'Save', finalByAgent: true,
+      allowed: [
+        { button: 'Configure', class: 'navigation', where: 'App Groups row: opens the group assignment dialog' },
+        { button: 'Continue', class: 'navigation', where: 'the group assignment dialog and the App Group registration form' },
+        { button: 'Register', class: 'portal-register', where: 'App Groups registration form only: registers the group id of the answer sheet (a new group identifier, nothing public)' },
+        { button: 'Save', class: 'portal-save', where: 'top right of the App ID page: saves the capability edit (the agent presses it; not a store submission)' },
+        { button: 'Confirm', class: 'portal-save', where: 'the dialog that warns the profiles become invalid after Save' },
+      ],
+      rule: 'The agent presses everything it needs here, including Save (a capability edit on the owner\'s own App ID; no store submission, nothing public). Never press Remove / Delete / Revoke, never untick or edit another capability, never touch Certificates, Keys or Account pages; stop and tell the owner if the page asks to sign in.',
+    },
+    uiFacts: [
+      'Modeled on Apple\'s help pages (not recorded on a real portal page yet): Certificates, Identifiers & Profiles > Identifiers > the App ID > Capabilities list > App Groups (checkbox) > Configure > the group list > Continue > Save (top right) > Confirm.',
+      'The App Store Connect API can enable the APP_GROUPS capability (POST /v1/bundleIdCapabilities) but has no field that assigns a group: an extension\'s profile has an empty application-groups list until the group is ticked here, and the archive then fails at codesign.',
+      'Saving the App ID invalidates its provisioning profiles; manual signing needs `storebound apple signing ensure --refresh-profile`, automatic signing lets Xcode renew its managed profile at archive time.',
+      'The deep link uses the bundle id\'s App Store Connect API resource id: https://developer.apple.com/account/resources/identifiers/bundleId/edit/<resource id> (`console plan apple-app-group --bundle-id <id> --lookup` reads it).',
+      'Group identifiers start with group. and are registered once per team under Identifiers > App Groups.',
+    ],
+    driving: [
+      'Use your own browser tool (Claude in Chrome with the owner\'s signed-in session). Read the page as text or an accessibility tree first; click by visible text; adapt when the page differs from these steps, but never press anything in buttons.neverPress.',
+      'Tick boxes by clicking the checkbox, then read its checked state back. After Save read the App ID page again.',
+      'Press Save yourself (buttons.finalByAgent): it is not a store submission. Never sign in, never type passwords or 2FA codes.',
+    ],
+    inPageLoop: '',
+    verify: {
+      command: `storebound console verify apple-app-group${one ? ` --bundle-id ${one.bundleId}` : ''}`, source: 'api', capture: CHECK,
+      expect: ['Every App Group of the answer sheet is on the App ID\'s newest readable profile (re-download after `storebound apple signing ensure --refresh-profile`) or named by the App Groups capability settings.', 'Exit code 1 while a group is missing or cannot be proven.'],
+    },
+    fillable: true,
+    guidance: ['Open: developer.apple.com > Account > Certificates, Identifiers & Profiles > Identifiers > the App ID'],
+  };
+}
diff --git a/cli/lib/console-plan.ts b/cli/lib/console-plan.ts
index ff11b8c..bd0142b 100644
--- a/cli/lib/console-plan.ts
+++ b/cli/lib/console-plan.ts
@@ -12,6 +12,7 @@ import { type Answer, type AnswerValue, consoleAnswers, type FormId, formMeta, i
 import { APP_CONTENT_CAPTURE, APP_CONTENT_CARDS, appContentStart, PLAY_FULL_ACCESS_BOX, PLAY_MATERIAL_FACT, playAppPage, playOnlyPart, SAVE_EACH_PAGE, SEND_FOR_REVIEW, SEND_FOR_REVIEW_WHERE, startLabel } from './console-play-plans';
 import { FORM_BUTTONS, formDef, type Name, NEVER_PRESS, PLAY_NEVER_PRESS, playAppList, playCreateApp, setUpTexts, typeLabels } from './console-forms';
 import { PLAY_CREATE_CAPTURE } from './console-verify';
+import { appleAppGroupPlan } from './console-apple-group-plan';
 import { APPLE_PURPOSES, IARC_DIGITAL_GOODS, IARC_DIGITAL_PURCHASES } from './console-answers';
 
 export type PlanStatus = 'certain' | 'ask-owner' | 'owner-check' | 'agreement';
@@ -87,6 +88,8 @@ export interface ConsolePlan {
     allowed: { button: string; class: string; where: string }[];
     /** The rule in one line. */
     rule: string;
+    /** true: the final button is the agent's own (a portal capability edit such as Save on an App ID, not a store submission or a public change). */
+    finalByAgent?: boolean;
   };
   /** Known UI facts of this form (verified ones say so). */
   uiFacts: string[];
@@ -110,6 +113,8 @@ export interface PlanIds {
   signals?: ProjectSignals;
   /** play-publish-changes: the production releases ready to publish per the API (null/undefined: not read). */
   readyChanges?: { track: string; version: string | null; build: string | null; rollout: string }[] | null;
+  /** apple-app-group: the targets whose entitlements list App Groups (their bundle id, groups and, with --lookup, the App Store Connect resource id for the portal deep link). */
+  appGroupTargets?: { bundleId: string; name?: string; groups: string[]; resourceId?: string | null; source?: string }[];
 }
 
 const ASC = 'https://appstoreconnect.apple.com';
@@ -538,6 +543,7 @@ export interface PlanOpts { all?: boolean }
 export function consolePlan(form: PlanFormId, config: ShipConfig, p: PlanIds = {}, o: PlanOpts = {}): ConsolePlan {
   const cfg = p.appleAppId && config.apple && !config.apple.appId ? { ...config, apple: { ...config.apple, appId: p.appleAppId } } : config;
   if (form === 'play-app-content') return appContentPlan(cfg, p, o.all);
+  if (form === 'apple-app-group') return appleAppGroupPlan(p);
   if (isPlanOnly(form)) {
     const part = playOnlyPart(form, cfg, p);
     return {
@@ -583,7 +589,7 @@ export function planText(pl: ConsolePlan): string {
     L.push(`  ${tag} ${a.question}: ${a.text}${a.label ? `  -> ${a.action ?? ''} "${a.label}"${a.curlyQuotes ? ' (curly quotes)' : ''}` : ''}${a.where ? `  @ ${a.where}` : ''}`);
     if (a.status !== 'certain' && a.note) L.push(`           ${a.note}`);
   }
-  L.push('', `Never press: ${pl.buttons.neverPress.map(b => `"${b}"`).join(', ')}`, `Final button (the owner's): ${pl.buttons.final}`, `Rule: ${pl.buttons.rule}`, '', 'UI facts:', ...pl.uiFacts.map(f => `  - ${f}`), '', 'Driving:', ...pl.driving.map(d => `  - ${d}`),
+  L.push('', `Never press: ${pl.buttons.neverPress.map(b => `"${b}"`).join(', ')}`, `Final button (${pl.buttons.finalByAgent ? "the agent's own, not a store submission" : "the owner's"}): ${pl.buttons.final}`, `Rule: ${pl.buttons.rule}`, '', 'UI facts:', ...pl.uiFacts.map(f => `  - ${f}`), '', 'Driving:', ...pl.driving.map(d => `  - ${d}`),
     '', 'In-page helper (plan.inPageLoop: paste it once per page in one short call, then window.__sb.run([...]) and poll window.__log):', ...pl.inPageLoop.split('\n').map(l => `    ${l}`),
     '', `Verify: ${pl.verify.command}`, ...pl.verify.expect.map(e => `  - ${e}`));
   if (pl.askOwner.length) L.push('', 'Ask the owner first:', ...pl.askOwner.map(a => `  - ${a}`));
diff --git a/cli/lib/console-play-plans.ts b/cli/lib/console-play-plans.ts
index 51978b7..9fe47ac 100644
--- a/cli/lib/console-play-plans.ts
+++ b/cli/lib/console-play-plans.ts
@@ -534,7 +534,7 @@ function publishChanges(config: ShipConfig, p: PlanIds): Part {
   };
 }
 
-export function playOnlyPart(form: Exclude<PlanOnlyFormId, 'play-app-content'>, config: ShipConfig, p: PlanIds): Part {
+export function playOnlyPart(form: Exclude<PlanOnlyFormId, 'play-app-content' | 'apple-app-group'>, config: ShipConfig, p: PlanIds): Part {
   switch (form) {
     case 'play-production-countries': return productionCountries(config, p);
     case 'play-production-release': return productionRelease(config, p);
diff --git a/cli/lib/console-verify.ts b/cli/lib/console-verify.ts
index 730997d..5db26ec 100644
--- a/cli/lib/console-verify.ts
+++ b/cli/lib/console-verify.ts
@@ -19,6 +19,7 @@ import { APPLE_PRIVACY_TYPES } from './app-privacy';
 import { typeLabels } from './console-forms';
 import { playAppIdInText } from './play-app-id';
 import { APPLE_PURPOSES } from './console-answers';
+import type { AppGroupGap } from './targets';
 
 export type RowStatus = 'match' | 'mismatch' | 'not-found' | 'ask-owner';
 export interface VerifyRow { item: string; expected: string; seen: string; status: RowStatus; note?: string }
@@ -360,7 +361,7 @@ export function parseStates(raw: string): { states: InputState[]; text: string }
  * the privacy policy URL) and option labels must appear; the App category's "Not selected" is a mismatch. Yes / No
  * radios cannot be told apart in page text: reported, never counted as a match.
  */
-export function verifyPlayDeclaration(form: Exclude<PlanOnlyFormId, 'play-app-content'>, config: ShipConfig, text: string): VerifyResult {
+export function verifyPlayDeclaration(form: Exclude<PlanOnlyFormId, 'play-app-content' | 'apple-app-group'>, config: ShipConfig, text: string): VerifyResult {
   const part = playOnlyPart(form, config, {});
   const st = parseStates(text);
   const blob = fold(st ? st.text : text);
@@ -444,6 +445,27 @@ export function verifyPublishChangesApi(ready: { track: string; version: string
     ...(ready.undetermined ? ['A release counts as ready only when the public store page shows an OLDER version; a 404, failed read or same version is never ready. Check Publishing overview ("Last published on ...") or pass the page text with --from-text -.'] : [])]);
 }
 
+/**
+ * apple-app-group (read-only, API): one row per (bundle id, App Group). match: the group is on the newest readable
+ * profile or named by the capability settings; mismatch: the evidence shows it missing; not-found: nothing readable
+ * proves it (after the portal Save the old profiles are invalid: run `storebound apple signing ensure --refresh-profile`,
+ * then verify again). ok only when every row matches.
+ */
+export function verifyAppGroupsApi(targets: { bundleId: string; appGroups: string[] }[], verdicts: { gaps: AppGroupGap[]; unproven: AppGroupGap[]; ok: string[] }): VerifyResult {
+  const rows: VerifyRow[] = [];
+  for (const t of targets.filter(x => x.appGroups.length)) {
+    const gap = verdicts.gaps.find(g => g.bundleId === t.bundleId), un = verdicts.unproven.find(g => g.bundleId === t.bundleId);
+    for (const g of t.appGroups) {
+      const item = `${t.bundleId}: ${g}`;
+      if (gap?.groups.includes(g)) rows.push({ item, expected: 'on the App ID (profile carries it)', seen: 'missing', status: 'mismatch', ...(gap.why ? { note: gap.why } : {}) });
+      else if (un?.groups.includes(g)) rows.push({ item, expected: 'on the App ID (profile carries it)', seen: 'cannot be proven', status: 'not-found', note: 'no ACTIVE profile shows it: run storebound apple signing ensure --refresh-profile, then verify again' });
+      else rows.push({ item, expected: 'on the App ID (profile carries it)', seen: 'present', status: 'match' });
+    }
+  }
+  const r = result('apple-app-group', 'api', rows, ['Reads the App Store Connect API: the App Groups capability and the newest readable provisioning profile of each bundle id.']);
+  return rows.some(x => x.status === 'not-found') ? { ...r, ok: false } : r;
+}
+
 /** Page-text verification of any form that has one. */
 export function verifyText(form: PlanFormId, config: ShipConfig, text: string): VerifyResult {
   if (form === 'play-app-content') return verifyAppContent(text);
@@ -460,6 +482,7 @@ export function verifyText(form: PlanFormId, config: ShipConfig, text: string):
     case 'play-target-audience': return verifyTargetAudience(config, text);
     case 'apple-app-record': return verifyAppRecordText(config, text);
     case 'apple-age-rating': throw new Error('console verify apple-age-rating reads the App Store Connect API (no --from-text)');
+    case 'apple-app-group': throw new Error('console verify apple-app-group reads the App Store Connect API (no --from-text)');
   }
 }
 
diff --git a/cli/lib/targets.ts b/cli/lib/targets.ts
index fc8e8b9..227d3b4 100644
--- a/cli/lib/targets.ts
+++ b/cli/lib/targets.ts
@@ -110,17 +110,20 @@ export function appGroupGaps(want: string[], profileEnt: Record<string, unknown>
 /** The developer portal page of a bundle id (the id is the App Store Connect API resource id of the bundle id). */
 export const bundleIdPortalUrl = (resourceId: string): string => `https://developer.apple.com/account/resources/identifiers/bundleId/edit/${encodeURIComponent(resourceId)}`;
 
-export interface AppGroupGap { bundleId: string; resourceId: string | null; groups: string[]; url: string | null }
+export interface AppGroupGap { bundleId: string; resourceId: string | null; groups: string[]; url: string | null; /** why it is a gap / not proven (one line) */ why?: string }
 
-/** The agent-first steps to tick the groups (the API cannot do it); the never-press list is part of the text. */
+export const PORTAL_IDENTIFIERS_URL = 'https://developer.apple.com/account/resources/identifiers/list';
+
+/** The agent-first steps to tick the groups (the API cannot do it); the never-press list is part of the text.
+ *  The first line is the headline, the rest are the steps. */
 export function appGroupSteps(g: AppGroupGap): string[] {
-  const url = g.url ?? 'https://developer.apple.com/account/resources/identifiers/list';
+  const url = g.url ?? PORTAL_IDENTIFIERS_URL;
   return [
-    `${g.bundleId}: the profile lacks App Group(s) ${g.groups.join(', ')} (the API can enable the App Groups capability but cannot assign a group to a bundle id).`,
-    `Open ${url} in the signed-in browser (agent-first: you drive it).`,
-    'Capabilities list > App Groups: tick it if it is not ticked, press Configure, tick each group above (Continue if the group is new: register it first under Identifiers > App Groups), Continue, then Save at the top right (and Confirm in the dialog that says the profiles get invalidated).',
-    'Never press: Remove (the bundle id), Delete, Revoke, or any Certificates / Keys / Account button.',
-    `Then run: storebound apple signing ensure --refresh-profile (makes a new profile that carries the group), and storebound apple signing status to read it back.`,
+    `${g.bundleId}: ${g.why ?? `the profile lacks App Group(s) ${g.groups.join(', ')}`} (the App Store Connect API can enable the App Groups capability but cannot assign a group to a bundle id).`,
+    `Open ${url} in the signed-in browser (agent-first: you drive it; plan: storebound console plan apple-app-group --bundle-id ${g.bundleId}${g.url ? '' : ' --lookup'}).`,
+    `Certificates, Identifiers & Profiles > Identifiers > ${g.bundleId} > App Groups (tick it if it is not ticked) > Configure > tick ${g.groups.join(', ')} (register a new group first under Identifiers > App Groups) > Continue > Save (and Confirm in the dialog that says the profiles get invalidated).`,
+    'Never press: Remove (the bundle id), Delete, Revoke, or any Certificates / Keys / Account button; change no other capability.',
+    'Then run: storebound apple signing ensure --refresh-profile (makes a new profile that carries the group), and storebound apple signing status to read it back.',
   ];
 }
 
@@ -136,3 +139,46 @@ export function appGroupGapsFor(targets: { bundleId: string; appGroups: string[]
   }
   return out;
 }
+
+/** What the API (or an installed profile) shows about one App ID's App Group association. */
+export interface GroupEvidence {
+  /** App Store Connect API resource id of the bundle id (the portal deep link); null: not registered / unknown */
+  resourceId: string | null;
+  /** the APP_GROUPS capability is on the App ID (null: unknown) */
+  capabilityOn: boolean | null;
+  /** the raw settings of the APP_GROUPS capability (any field that names a group proves it) */
+  capabilitySettings?: unknown;
+  /** Entitlements of the newest readable profile of the bundle id (a managed one too); null: none readable */
+  profileEnt: Record<string, unknown> | null;
+}
+
+/** Groups of `want` that the capability's settings name (the API has no documented App Group field; if a field ever
+ *  lists them, this proves the association without a profile). */
+export const capabilityGroups = (settings: unknown, want: string[]): string[] => {
+  if (settings === null || settings === undefined) return [];
+  const text = JSON.stringify(settings);
+  return want.filter(g => text.includes(g));
+};
+
+export interface GroupVerdicts { gaps: AppGroupGap[]; unproven: AppGroupGap[]; ok: string[] }
+
+/**
+ * Every target whose entitlements list App Groups: proven (a readable profile carries each group, or the capability
+ * settings name it), a gap (the evidence shows the group missing: a readable profile without it, or the capability
+ * off) or unproven (nothing readable: the API cannot show the association). Pure.
+ */
+export function appGroupVerdicts(targets: { bundleId: string; appGroups: string[] }[], evidence: (bundleId: string) => GroupEvidence | null): GroupVerdicts {
+  const out: GroupVerdicts = { gaps: [], unproven: [], ok: [] };
+  for (const t of targets) {
+    if (!t.appGroups.length) continue;
+    const ev = evidence(t.bundleId);
+    const rid = ev?.resourceId ?? null, url = rid ? bundleIdPortalUrl(rid) : null;
+    const viaCap = new Set(capabilityGroups(ev?.capabilitySettings, t.appGroups));
+    const missing = (ev?.profileEnt ? appGroupGaps(t.appGroups, ev.profileEnt) : t.appGroups).filter(g => !viaCap.has(g));
+    if (!missing.length) { out.ok.push(t.bundleId); continue; }
+    if (ev?.capabilityOn === false) out.gaps.push({ bundleId: t.bundleId, resourceId: rid, groups: missing, url, why: `the App Groups capability is not enabled on the App ID, so ${missing.join(', ')} is not associated` });
+    else if (ev?.profileEnt) out.gaps.push({ bundleId: t.bundleId, resourceId: rid, groups: missing, url, why: `the newest profile lacks App Group(s) ${missing.join(', ')} (an empty application-groups list means the group is not ticked on the App ID)` });
+    else out.unproven.push({ bundleId: t.bundleId, resourceId: rid, groups: missing, url, why: ev ? `App Group(s) ${missing.join(', ')} cannot be proven: the API shows no group on the App ID's capability and no readable profile` : `App Group(s) ${missing.join(', ')} cannot be proven: the App ID is not registered or could not be read` });
+  }
+  return out;
+}
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index c7972ae..deda4cf 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -40,7 +40,7 @@ export const notSentProp = { type: 'boolean', default: false, description: 'Comm
 /** Every form `console plan` / `console verify` know (cli/lib/console-answers.ts PLAN_FORM_IDS; a test keeps them equal). */
 export const CONSOLE_PLAN_FORMS = ['apple-app-record', 'apple-age-rating', 'apple-app-privacy', 'play-app-record', 'play-content-rating', 'play-target-audience',
   'play-store-settings', 'play-app-content', 'play-privacy-policy', 'play-ads', 'play-sign-in-details', 'play-advertising-id', 'play-government-apps',
-  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes'];
+  'play-financial-features', 'play-health-apps', 'play-production-countries', 'play-production-release', 'play-games-services', 'play-publish-changes', 'apple-app-group'];
 
 export const TOOLS: ToolDef[] = [
   { name: 'check', title: 'Offline config check', command: ['check'], write: false, network: false,
@@ -458,15 +458,19 @@ export const TOOLS: ToolDef[] = [
     description: 'Upload the event card (16:9, 1920x1080 to 3840x2160) and details page (9:16) images of one draft in-app event per locale, size-checked first.',
     props: { name: { type: 'string', description: 'Reference name from apple.events' } }, required: ['name'], args: i => opt('name', i.name) },
   { name: 'console_plan', title: 'Console form plan (agent-first)', command: ['console', 'plan'], write: false, network: false,
-    description: 'Read-only plan for filling a console form that has no API with YOUR OWN browser tool (Claude in Chrome, a built-in browser, Playwright): start URL (deep link when the ids are known), ordered steps (what to click by visible text, what to answer), the answer sheet from the config (each answer certain or ask-owner, with the console\'s exact labels, curly quotes noted), the buttons never to press (Publish, Submit, Create, agreements, help panels), known UI facts per form (Play: material radios and checkboxes take a JS click on the inner [role=radio] / [role=checkbox]), a ready-made in-page helper (inPageLoop: one evaluate call times out around 45 s, so long flows run in the page and you poll window.__log) and how to verify. Forms: the App Store and Play forms of `console fill`, plus agent-only Play pages: play-store-settings (the App category, which the Play API cannot set), play-app-content (every App content card in order with its page and one owner batch; all: true inlines every card) and its cards play-privacy-policy, play-ads, play-sign-in-details, play-advertising-id, play-government-apps, play-financial-features, play-health-apps; and the first production release: play-production-countries (the API cannot set them) and play-production-release (its final Send changes for review is the owner\'s). Drive the page yourself, stop before the final button and tell the owner what to press, then call console_verify.',
+    description: 'Read-only plan for filling a console form that has no API with YOUR OWN browser tool (Claude in Chrome, a built-in browser, Playwright): start URL (deep link when the ids are known), ordered steps (what to click by visible text, what to answer), the answer sheet from the config (each answer certain or ask-owner, with the console\'s exact labels, curly quotes noted), the buttons never to press (Publish, Submit, Create, agreements, help panels), known UI facts per form (Play: material radios and checkboxes take a JS click on the inner [role=radio] / [role=checkbox]), a ready-made in-page helper (inPageLoop: one evaluate call times out around 45 s, so long flows run in the page and you poll window.__log) and how to verify. Forms: the App Store and Play forms of `console fill`, plus agent-only Play pages: play-store-settings (the App category, which the Play API cannot set), play-app-content (every App content card in order with its page and one owner batch; all: true inlines every card) and its cards play-privacy-policy, play-ads, play-sign-in-details, play-advertising-id, play-government-apps, play-financial-features, play-health-apps; and the first production release: play-production-countries (the API cannot set them) and play-production-release (its final Send changes for review is the owner\'s); and apple-app-group (the developer portal step the App Store Connect API cannot do: assign App Groups to an extension\'s App ID; its final Save is the agent\'s own, buttons.finalByAgent; bundleId narrows it, lookup adds the portal deep link). Drive the page yourself, stop before the final button and tell the owner what to press, then call console_verify.',
     props: { form: { type: 'string', enum: CONSOLE_PLAN_FORMS },
-      all: { type: 'boolean', description: 'play-app-content only: every card\'s steps inline in fix order, ending with the one owner list (tick the IARC Terms before, Send changes for review after)' } },
-    required: ['form'], args: i => [String(i.form), ...(i.all === true ? ['--all'] : []), '--json'] },
+      all: { type: 'boolean', description: 'play-app-content only: every card\'s steps inline in fix order, ending with the one owner list (tick the IARC Terms before, Send changes for review after)' },
+      bundleId: { type: 'string', description: 'apple-app-group only: the bundle id (an extension) whose App Group to assign' },
+      groups: { type: 'string', description: 'apple-app-group only: comma-separated group ids when the project does not show them (group.com.example.app)' },
+      lookup: { type: 'boolean', description: 'apple-app-group only: read the bundle id\'s resource id from the App Store Connect API (a GET) for the portal deep link' } },
+    required: ['form'], args: i => [String(i.form), ...(i.all === true ? ['--all'] : []), ...opt('bundle-id', i.bundleId), ...opt('groups', i.groups), ...flag('lookup', i.lookup), '--json'] },
   { name: 'console_verify', title: 'Verify a console form', command: ['console', 'verify'], write: false, network: true,
-    description: 'Read-only check of a filled console form against the config. Pass the page text you read (App Privacy: the App Privacy page\'s innerText, whose Data Types section shows per type "Used for …", linked and tracking; Play Create app: the JSON of the plan\'s capture snippet; Play content rating / target audience: the summary page text; play-app-content: the JSON of the plan\'s capture snippet; Play store settings and the privacy policy: the page text after Save; the other App content cards (ads, sign-in details, advertising ID, government, financial, health): the JSON of the plan\'s verify.capture snippet, which reads radios and boxes from the DOM: aria-checked, checked, aria-selected). apple-app-record and apple-age-rating without text read the App Store Connect API. Returns a per-item match / mismatch table; exit code 1 on a mismatch.',
+    description: 'Read-only check of a filled console form against the config. Pass the page text you read (App Privacy: the App Privacy page\'s innerText, whose Data Types section shows per type "Used for …", linked and tracking; Play Create app: the JSON of the plan\'s capture snippet; Play content rating / target audience: the summary page text; play-app-content: the JSON of the plan\'s capture snippet; Play store settings and the privacy policy: the page text after Save; the other App content cards (ads, sign-in details, advertising ID, government, financial, health): the JSON of the plan\'s verify.capture snippet, which reads radios and boxes from the DOM: aria-checked, checked, aria-selected). apple-app-record and apple-age-rating without text read the App Store Connect API, and so does apple-app-group (the App Groups on the App ID\'s newest readable profile). Returns a per-item match / mismatch table; exit code 1 on a mismatch.',
     props: { form: { type: 'string', enum: CONSOLE_PLAN_FORMS },
-      text: { type: 'string', description: 'The page text (or the capture JSON) of the finished form' } },
-    required: ['form'], args: i => [String(i.form), ...(typeof i.text === 'string' && i.text ? [`--text=${i.text}`] : []), '--json'] },
+      text: { type: 'string', description: 'The page text (or the capture JSON) of the finished form' },
+      bundleId: { type: 'string', description: 'apple-app-group only: check this bundle id (default: every target with App Groups); it reads the API, no text' } },
+    required: ['form'], args: i => [String(i.form), ...(typeof i.text === 'string' && i.text ? [`--text=${i.text}`] : []), ...opt('bundle-id', i.bundleId), '--json'] },
   { name: 'apple_preorder_status', title: 'App Store pre-order status', command: ['apple', 'preorder', 'status'], write: false, network: true,
     description: 'Read-only: per territory whether the app is available, its release date, pre-order on / off and its content status. Enabling or ending a pre-order is an owner-only terminal command.', args: () => ['--json'] },
 ];
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 2e79da5..3c3e0e4 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -676,7 +676,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `bundleIds_deleteInstance` | DELETE | `/v1/bundleIds/{id}` | owner only (typed confirm) |  |
 | `bundleIds_getCollection` | GET | `/v1/bundleIds` | read | apple/adhoc, apple/bundle, apple/signing |
 | `bundleIds_getInstance` | GET | `/v1/bundleIds/{id}` | read |  |
-| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple/adhoc, lib/signing |
+| `bundleIds_profiles_getToManyRelated` | GET | `/v1/bundleIds/{id}/profiles` | read | apple/adhoc, apple/signing, lib/signing |
 | `bundleIds_profiles_getToManyRelationship` | GET | `/v1/bundleIds/{id}/relationships/profiles` | read |  |
 | `bundleIds_updateInstance` | PATCH | `/v1/bundleIds/{id}` | write (dry by default) |  |
 | **certificates** (7) | | | | |
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 9845d21..77c0e52 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -19,7 +19,7 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
 1. **Read.** `storebound apple signing status`: is the bundle id registered (else `storebound apple bundle`), which
    capabilities it has vs `apple.signing.capabilities`, the distribution certificates of the team and whether this
    Mac holds a private key for one (a key file in `.storebound/signing/` or an identity in the keychain), App Store
-   profiles per bundle id (the app and every extension / widget / watch app / App Clip found in the Xcode project, or `apple.signing.extensions`; `extraBundleIds` adds more) and whether Xcode has them installed. `signing ensure` registers the extensions' bundle ids, enables the capabilities their entitlements need and (manual style) makes their profiles; an App Group the profile lacks is reported with the developer portal link and steps (the API cannot assign a group; then `signing ensure --refresh-profile`, store-pitfalls 121).
+   profiles per bundle id (the app and every extension / widget / watch app / App Clip found in the Xcode project, or `apple.signing.extensions`; `extraBundleIds` adds more) and whether Xcode has them installed. `signing ensure` registers the extensions' bundle ids, enables the capabilities their entitlements need and (manual style) makes their profiles; an App Group not proven on the App ID (manual: the profile; automatic: the capability and the newest profile the API lists) is reported with the developer portal link and steps (the API cannot assign a group): `storebound console plan apple-app-group --bundle-id <id> --lookup`, drive it, then `signing ensure --refresh-profile` and `console verify apple-app-group` (store-pitfalls 121).
    It also compares three places a capability must be and names what is missing where: the App ID, the config's
    `apple.signing.capabilities` and the iOS project's `.entitlements` (`aps-environment` = PUSH_NOTIFICATIONS,
    `com.apple.developer.game-center` = GAME_CENTER, associated domains, Sign in with Apple, iCloud, app groups, ...;
@@ -61,8 +61,9 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    `apple build` stops first and names the fixes. `STOREBOUND_KEYCHAIN_PASSWORD=... storebound apple build
    --keychain-unlock` unlocks the login keychain and sets its key partition list (the password is read from the
    environment and never printed); `--keychain <path>` signs with a build keychain (`--keychain <path> --keychain-unlock`
-   unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). With manual signing it
-   also stops when a target's App Group is missing from its installed profile (store-pitfalls 121).
+   unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). It
+   also stops before the archive when a target's App Group is missing (manual: its installed profile; automatic: the profile
+   the API lists; store-pitfalls 121; `--allow-app-group-gap` overrides).
    - Capacitor: the archive ships the web assets `npx cap sync` copied last. Set `build.prebuild` (e.g.
      `"npm run build && npx cap sync"`; per store `apple.prebuild` / `play.prebuild`) and `apple build` / `play build`
      run it first (once per `flow run`; `--no-prebuild` skips it). Then the copied `public/index.html` must be newer
diff --git a/skills/console-autofill/SKILL.md b/skills/console-autofill/SKILL.md
index 251dac8..29a198d 100644
--- a/skills/console-autofill/SKILL.md
+++ b/skills/console-autofill/SKILL.md
@@ -45,7 +45,7 @@ the UI shows. This is the primary mode.
    `--all` / MCP `all: true` puts every card's steps inline in fix order and ends with the one owner list: tick the
    IARC Terms of Use box (before), Send changes for review (after)), its cards `play-privacy-policy`, `play-ads`, `play-sign-in-details`, `play-advertising-id`,
    `play-government-apps`, `play-financial-features`, `play-health-apps`, and the first production release:
-   `play-production-countries`, `play-production-release` and `play-publish-changes` (managed publishing). `storebound console plan` lists them.
+   `play-production-countries`, `play-production-release` and `play-publish-changes` (managed publishing), and the Apple developer portal step `apple-app-group` (assign an App Group to an extension's App ID, which the API cannot do; its final Save is yours, `buttons.finalByAgent`; `console verify apple-app-group` reads the API). `storebound console plan` lists them.
 2. Send the owner the `ownerBatch` of every form you will fill in ONE message before you start (AGENTS.md rule 5): the
    `ask-owner` answers (write them into the config, so the plan has them; never guess them) and the `before` steps
    (Play content rating: tick the IARC Terms of Use box on the questionnaire's page 1 first; page 1's Next does
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 95f7ac0..967824b 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1465,7 +1465,6 @@ that fails without the fix (see CONTRIBUTING.md).
   attributes first, `text=` last); `shots capture --dry` prints them per size, `--dry --probe` opens the pages and
   names the MISS with the size and every candidate's match count.
 - **Guard:** `tests/shots-gaps.test.ts`, `tests/browser/feature-fit.browser.ts` (rotate), `cli/shots/selectors.ts`.
-||||||| parent of ae8d773 (apple signing: every signable target (extensions, App Group check), build keychain unlock over SSH, api confirm docs)
 
 ## 121. An app extension (share extension, widget, watch app) could not be signed: bundle id not registered, capabilities missing, App Group not in the profile
 
@@ -1481,14 +1480,21 @@ that fails without the fix (see CONTRIBUTING.md).
   and CODE_SIGN_ENTITLEMENTS of the Release configuration) and what it would register, enable and create; without
   `--dry` it registers the extension bundle ids, enables the capabilities its entitlements need (the entitlement-to-
   capability table; `keychain-access-groups` needs none) and, for manual signing, creates an App Store profile per
-  target. It then decodes each profile and compares its App Groups with the target's entitlements: a gap fails with
+  target. It then compares each target's App Groups with what the API shows (manual signing: the decoded profile; automatic
+  signing: the App ID's APP_GROUPS capability settings and the newest profile the API lists for the bundle id, an
+  Xcode-managed one too; a profile that carries no group, or the capability off, is a gap; nothing readable is
+  "cannot be proven" and only warns with the same steps): a gap fails with
   the developer portal deep link `https://developer.apple.com/account/resources/identifiers/bundleId/edit/<id>` and the
   steps to tick the group (drive it in the signed-in browser; never press Remove / Delete / Revoke). After that
   `storebound apple signing ensure --refresh-profile` makes the profile again (a normal run reuses the active one, so it
-  does not pile up profiles while the group is unassigned). `apple build` (manual signing) stops before the archive on the
-  same gap (`--allow-app-group-gap` overrides). A variable bundle id (set in an xcconfig) is not resolvable: list the
+  does not pile up profiles while the group is unassigned). `apple build` stops before the archive on the same gap in both
+  signing styles (manual: the installed profile; automatic: read through the API; `--allow-app-group-gap` overrides, e.g.
+  when the group was just ticked and Xcode will renew its managed profile at archive time). The agent-first plan is
+  `storebound console plan apple-app-group --bundle-id <id>` (`--lookup` adds the deep link; its Save is the agent's own, not a
+  store submission) and `storebound console verify apple-app-group` re-reads the App ID and the newest profile (after the
+  portal Save the old profiles are invalid: run `signing ensure --refresh-profile` first). A variable bundle id (set in an xcconfig) is not resolvable: list the
   extension in `apple.signing.extensions` (`bundleId`, `capabilities`, `appGroups`), which replaces the detected ones.
 - **Guard:** `cli/lib/targets.ts` (pbxproj targets, App Group comparison, portal link and steps), `discoverTargets` in
   `cli/apple/signing.ts`, `tests/signing-targets.test.ts` (fixture pbxproj with an app, a share extension and app group
-  entitlements, a decoded profile plist, a fake App Store Connect). There is no `console plan` form for the portal page:
-  the steps are in the error and the warning.
+  entitlements, a decoded profile plist, a fake App Store Connect), `cli/lib/console-apple-group-plan.ts` (the plan),
+  `verifyAppGroupsApi` in `cli/lib/console-verify.ts`, `appGroupVerdicts` in `cli/lib/targets.ts` (gap / unproven / ok).
diff --git a/tests/console-play-plans.test.ts b/tests/console-play-plans.test.ts
index c65df5d..1210897 100644
--- a/tests/console-play-plans.test.ts
+++ b/tests/console-play-plans.test.ts
@@ -30,7 +30,7 @@ describe('agent-only Play plans: shape, URLs, never-press lists, the owner batch
     'play-government-apps': 'app-content/government-apps', 'play-financial-features': 'app-content/finance', 'play-health-apps': 'app-content/health', 'play-games-services': 'play-games-services/setup',
     'play-production-countries': 'tracks/production', 'play-production-release': 'tracks/production', 'play-publish-changes': 'publishing',
   };
-  for (const form of PLAN_ONLY_FORM_IDS) {
+  for (const form of PLAN_ONLY_FORM_IDS.filter(f => f.startsWith('play-'))) {
     test(form, () => {
       const p = consolePlan(form, base);
       expect(p).toMatchObject({ form, store: 'play', fillable: true });
diff --git a/tests/signing-targets.test.ts b/tests/signing-targets.test.ts
index 0104925..b3c6bc3 100644
--- a/tests/signing-targets.test.ts
+++ b/tests/signing-targets.test.ts
@@ -9,7 +9,11 @@ import { decide, NOT_A_TTY } from '../cli/api/gate';
 import { USAGE } from '../cli/api';
 import { keychainPassword, KEYCHAIN_PASSWORD_ENV, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../cli/lib/keychain';
 import { planProfile, validateSigning } from '../cli/lib/signing';
-import { appGroupGaps, appGroupGapsFor, appGroupSteps, bundleIdPortalUrl, pbxTargets, targetKind } from '../cli/lib/targets';
+import { appGroupGaps, appGroupGapsFor, appGroupSteps, appGroupVerdicts, bundleIdPortalUrl, capabilityGroups, pbxTargets, targetKind } from '../cli/lib/targets';
+import { consolePlan, planText } from '../cli/lib/console-plan';
+import { verifyAppGroupsApi, verifyText } from '../cli/lib/console-verify';
+import { PLAN_FORM_IDS } from '../cli/lib/console-answers';
+import { CONSOLE_PLAN_FORMS, TOOLS, validateInput } from '../cli/mcp-tools';
 import { upsertTiming } from '../cli/lib/upsert';
 import { ascEnv, BASE, capture, mockFetch, project, restore } from './helpers/store-mock';
 
@@ -280,7 +284,8 @@ describe('signing ensure with an extension (fake App Store Connect)', () => {
     const r = await capture(() => signing(p.ctx(['ensure', '--yes', '--no-install']))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
     const all = r.out + r.err;
     expect(calls.filter(c => c.method === 'POST' && c.path === '/v1/profiles')).toHaveLength(2);
-    expect(all).toContain('com.example.notes.ShareExt lacks group.com.example.notes');
+    expect(all).toContain('com.example.notes.ShareExt: the newest profile lacks App Group(s) group.com.example.notes');
+    expect(all).toContain('console plan apple-app-group --bundle-id com.example.notes');
     expect(all).toContain('https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001');
     expect(all).toContain('signing ensure --refresh-profile');
   });
@@ -296,6 +301,236 @@ describe('signing ensure with an extension (fake App Store Connect)', () => {
   });
 });
 
+describe('App Group association: verdicts (pure)', () => {
+  const t = [{ bundleId: 'com.example.notes.ShareExt', appGroups: ['group.com.example.notes'] }];
+  const ent = (g: string[]) => ({ 'com.apple.security.application-groups': g });
+
+  test('a readable profile with the group proves it; one without it is a gap with the deep link', () => {
+    expect(appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, profileEnt: ent(['group.com.example.notes']) }))).toEqual({ gaps: [], unproven: [], ok: ['com.example.notes.ShareExt'] });
+    const v = appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, profileEnt: {} }));
+    expect(v.gaps).toHaveLength(1);
+    expect(v.gaps[0]).toMatchObject({ bundleId: 'com.example.notes.ShareExt', groups: ['group.com.example.notes'], url: bundleIdPortalUrl('EXT0001') });
+    expect(v.gaps[0]!.why).toContain('empty application-groups');
+  });
+
+  test('capability settings that name the group prove it without a profile', () => {
+    const settings = [{ key: 'APP_GROUPS', options: [{ key: 'group.com.example.notes' }] }];
+    expect(capabilityGroups(settings, ['group.com.example.notes', 'group.com.example.other'])).toEqual(['group.com.example.notes']);
+    expect(appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, capabilitySettings: settings, profileEnt: null })).ok).toEqual(['com.example.notes.ShareExt']);
+  });
+
+  test('nothing readable is unproven (not a gap); the capability off is a gap even without a profile', () => {
+    const u = appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: true, capabilitySettings: null, profileEnt: null }));
+    expect([u.gaps.length, u.unproven.length]).toEqual([0, 1]);
+    expect(u.unproven[0]!.why).toContain('cannot be proven');
+    expect(appGroupVerdicts(t, () => null).unproven).toHaveLength(1);
+    const off = appGroupVerdicts(t, () => ({ resourceId: 'EXT0001', capabilityOn: false, profileEnt: null }));
+    expect(off.gaps[0]!.why).toContain('capability is not enabled');
+  });
+
+  test('the steps name the portal path, the deep link, the plan command and the refresh', () => {
+    const s = appGroupSteps({ bundleId: 'com.example.notes.ShareExt', resourceId: 'EXT0001', groups: ['group.com.example.notes'], url: bundleIdPortalUrl('EXT0001') }).join('\n');
+    expect(s).toContain('Certificates, Identifiers & Profiles > Identifiers > com.example.notes.ShareExt > App Groups');
+    expect(s).toContain('Configure > tick group.com.example.notes');
+    expect(s).toContain('Continue > Save');
+    expect(s).toContain('storebound console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(s).toContain('storebound apple signing ensure --refresh-profile');
+  });
+});
+
+describe('App Group association under automatic signing (fake App Store Connect)', () => {
+  beforeEach(() => { upsertTiming.waitMs = 0; });
+  afterEach(() => { restore(); upsertTiming.waitMs = 3000; });
+
+  const MAIN = 'BUNDLE0001', EXT = 'EXT0001';
+  const cfg = { ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101', signing: { style: 'automatic' as const, teamId: 'ABCDE12345', capabilities: ['IN_APP_PURCHASE' as const] } } };
+  const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00`, 'latin1').toString('base64');
+  const managed = (id: string, ent: Record<string, unknown>) => ({ type: 'profiles', id: `MANAGED_${id}`, attributes: { name: `iOS Team Store Provisioning Profile: ${id}`, profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', uuid: `uuid-${id}`, expirationDate: '2099-01-01T00:00:00.000+00:00', profileContent: prov(ent) } });
+  const GROUP = { 'com.apple.security.application-groups': ['group.com.example.notes'] };
+  const page = (data: unknown[], included: unknown[] = []) => ({ data, included, links: { self: '' }, meta: { paging: { total: data.length, limit: 200 } } });
+
+  function api(o: { ext?: unknown[]; main?: unknown[]; extSettings?: unknown; extCaps?: string[] }) {
+    const caps: Record<string, string[]> = { [MAIN]: ['IN_APP_PURCHASE', 'PUSH_NOTIFICATIONS', 'APP_GROUPS'], [EXT]: o.extCaps ?? ['APP_GROUPS', 'ASSOCIATED_DOMAINS'] };
+    const bundle = (id: string, ident: string) => ({ type: 'bundleIds', id, attributes: { identifier: ident, platform: 'IOS', seedId: 'ABCDE12345' }, relationships: { bundleIdCapabilities: { data: caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}` })) } } });
+    const incl = (id: string) => caps[id]!.map(t => ({ type: 'bundleIdCapabilities', id: `${id}_${t}`, attributes: { capabilityType: t, settings: id === EXT && t === 'APP_GROUPS' ? (o.extSettings ?? null) : null } }));
+    return [
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes\.ShareExt/, answer: () => page([bundle(EXT, 'com.example.notes.ShareExt')], incl(EXT)) },
+      { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes&/, answer: () => page([bundle(MAIN, 'com.example.notes')], incl(MAIN)) },
+      { match: /^\/v1\/certificates\?/, answer: page([]) },
+      { match: new RegExp(`^/v1/bundleIds/${EXT}/profiles`), answer: () => page(o.ext ?? []) },
+      { match: new RegExp(`^/v1/bundleIds/${MAIN}/profiles`), answer: () => page(o.main ?? [managed('com.example.notes', GROUP)]) },
+      { match: /^\/v1\/profiles\/MANAGED_[^/]+\/relationships\/certificates/, answer: { errors: [{ status: '404' }] }, status: 404 },
+      { match: /^\/v1\/apps\/6400000101\/gameCenterDetail/, answer: { errors: [{ status: '404' }] }, status: 404 },
+    ] as never;
+  }
+  const ensure = async (argv: string[] = ['ensure', '--yes']) => {
+    const p = project(cfg, files);
+    const calls = mockFetch(api(current));
+    const r = await capture(() => signing(p.ctx(argv))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
+    return { r, all: r.out + r.err, calls };
+  };
+  let current: Parameters<typeof api>[0] = {};
+
+  test('the extension\'s newest (Xcode-managed) profile has an empty group list: ensure stops with the steps, the deep link and the plan command', async () => {
+    ascEnv();
+    current = { ext: [managed('com.example.notes.ShareExt', {})] };
+    const { r, all, calls } = await ensure();
+    expect(r.exit).toBe(1);
+    expect(all).toContain('com.example.notes.ShareExt: the newest profile lacks App Group(s) group.com.example.notes');
+    expect(all).toContain('https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001');
+    expect(all).toContain('Configure > tick group.com.example.notes');
+    expect(all).toContain('storebound console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(all).toContain('storebound apple signing ensure --refresh-profile');
+    expect(calls.filter(c => c.method !== 'GET')).toEqual([]);
+  });
+
+  test('the managed profile carries the group: ensure finishes without a warning', async () => {
+    ascEnv();
+    current = { ext: [managed('com.example.notes.ShareExt', GROUP)] };
+    const { r, all } = await ensure();
+    expect(r.exit).toBeNull();
+    expect(all).not.toContain('cannot be proven');
+    expect(all).toContain('capabilities in step');
+  });
+
+  test('no profile and no capability field to read: ensure warns with the portal steps instead of passing silently', async () => {
+    ascEnv();
+    current = { ext: [] };
+    const { r, all } = await ensure();
+    expect(r.exit).toBeNull();
+    expect(all).toContain('cannot be proven');
+    expect(all).toContain('storebound console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+  });
+
+  test('a capability field that names the group proves it', async () => {
+    ascEnv();
+    current = { ext: [], extSettings: [{ key: 'APP_GROUPS', options: [{ key: 'group.com.example.notes' }] }] };
+    const { all } = await ensure();
+    expect(all).not.toContain('cannot be proven');
+  });
+
+  test('status --json lists the gap and the unproven targets; the main app (profile without groups) is a gap too', async () => {
+    ascEnv();
+    current = { ext: [], main: [managed('com.example.notes', {})] };
+    const p = project(cfg, files);
+    mockFetch(api(current));
+    const r = await capture(() => signing(p.ctx(['status', '--json'])));
+    const j = JSON.parse(r.out.slice(r.out.indexOf('{')));
+    expect(j.appGroupGaps.map((g: { bundleId: string }) => g.bundleId)).toEqual(['com.example.notes']);
+    expect(j.appGroupUnproven.map((g: { bundleId: string }) => g.bundleId)).toEqual(['com.example.notes.ShareExt']);
+  });
+
+  test('apple build stops before the archive on a proven gap, builds on --allow-app-group-gap, and only warns on an unproven one', async () => {
+    ascEnv();
+    const { run: build } = await import('../cli/apple/build');
+    const argv = ['--build-number', '5', '--no-prebuild', '--dry'];
+    // dry: warns (never throws)
+    current = { ext: [managed('com.example.notes.ShareExt', {})] };
+    let p = project(cfg, files);
+    mockFetch(api(current));
+    let r = await capture(() => build(p.ctx(argv)));
+    expect(r.err).toContain('the newest profile lacks App Group(s)');
+    // not dry: early exit, before any xcodebuild step
+    p = project(cfg, files);
+    mockFetch(api(current));
+    r = await capture(() => build(p.ctx(['--build-number', '5', '--no-prebuild']))).catch(e => ({ out: '', err: String(e.message ?? e), exit: 1 }));
+    expect(r.exit).toBe(1);
+    expect(r.err).toContain('stopped before the archive');
+    expect(r.err).toContain('console plan apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(r.err).toContain('--allow-app-group-gap');
+    // unproven: a warning with the same steps, no throw at the group check
+    current = { ext: [] };
+    p = project(cfg, files);
+    mockFetch(api(current));
+    r = await capture(() => build(p.ctx(argv)));
+    expect(r.err).toContain('cannot be proven');
+  });
+});
+
+describe('console plan / verify apple-app-group', () => {
+  afterEach(() => { restore(); });
+
+  test('the plan: deep link per resource id, the portal labels, the answer sheet per extension, never-press list, Save is the agent\'s', () => {
+    const p = consolePlan('apple-app-group', BASE, { appGroupTargets: [{ bundleId: 'com.example.notes.ShareExt', groups: ['group.com.example.notes'], resourceId: 'EXT0001' }] });
+    expect(p).toMatchObject({ form: 'apple-app-group', store: 'apple', fillable: true });
+    expect(p.start).toEqual({ url: 'https://developer.apple.com/account/resources/identifiers/bundleId/edit/EXT0001', deepLink: true, reach: [] });
+    const text = p.steps.map(s => s.text).join('\n');
+    for (const label of ['App Groups', 'Configure', 'Continue', 'Save', 'Confirm']) expect(text).toContain(label);
+    expect(p.answers.map(a => a.id)).toEqual(['com.example.notes.ShareExt/capability', 'com.example.notes.ShareExt/group.com.example.notes']);
+    expect(p.answers[1]).toMatchObject({ label: 'group.com.example.notes', action: 'tick', control: 'checkbox', status: 'certain' });
+    const inSteps = new Set(p.steps.flatMap(s => s.answers ?? []));
+    for (const a of p.answers) expect(inSteps.has(a.id)).toBe(true);
+    for (const b of ['Remove', 'Delete', 'Revoke', 'Publish', 'Submit']) expect(p.buttons.neverPress).toContain(b);
+    expect(p.buttons.neverPress).not.toContain('Save');
+    expect(p.buttons).toMatchObject({ final: 'Save', finalByAgent: true });
+    for (const b of p.buttons.allowed) expect(b.class).not.toBe('final-submit');
+    expect(p.ownerBatch).toEqual([]);
+    expect(p.verify.command).toBe('storebound console verify apple-app-group --bundle-id com.example.notes.ShareExt');
+    expect(planText(p)).toContain('the agent\'s own, not a store submission');
+    p.steps.forEach((s, i) => expect(s.n).toBe(i + 1));
+  });
+
+  test('without a resource id the plan starts at the Identifiers list and says --lookup; without targets the group ids are asked', () => {
+    const p = consolePlan('apple-app-group', BASE, { appGroupTargets: [{ bundleId: 'com.example.notes.ShareExt', groups: ['group.com.example.notes'] }] });
+    expect(p.start).toMatchObject({ url: 'https://developer.apple.com/account/resources/identifiers/list', deepLink: false });
+    expect(p.start.reach.join(' ')).toContain('--lookup');
+    const none = consolePlan('apple-app-group', BASE);
+    expect(none.answers[0]).toMatchObject({ status: 'ask-owner', value: null });
+    expect(none.askOwner).toHaveLength(1);
+  });
+
+  test('the plan is in the form list and the MCP tools, and the plan command works from the CLI', async () => {
+    expect(PLAN_FORM_IDS).toContain('apple-app-group');
+    expect(CONSOLE_PLAN_FORMS).toContain('apple-app-group');
+    const t = TOOLS.find(x => x.name === 'console_plan')!;
+    expect(validateInput(t, { form: 'apple-app-group', bundleId: 'com.example.notes.ShareExt', lookup: true })).toEqual([]);
+    expect(t.args!({ form: 'apple-app-group', bundleId: 'com.example.notes.ShareExt', groups: 'group.com.example.notes' })).toEqual(['apple-app-group', '--bundle-id', 'com.example.notes.ShareExt', '--groups', 'group.com.example.notes', '--json']);
+    const { run: plan } = await import('../cli/console/plan');
+    const p = project({ ...BASE, apple: { bundleId: 'com.example.notes' } }, files);
+    const r = await capture(() => plan(p.ctx(['apple-app-group', '--json'])));
+    const j = JSON.parse(r.out);
+    expect(j.answers.map((a: { id: string }) => a.id)).toEqual(['com.example.notes/capability', 'com.example.notes/group.com.example.notes', 'com.example.notes.ShareExt/capability', 'com.example.notes.ShareExt/group.com.example.notes']);
+    const one = await capture(() => plan(p.ctx(['apple-app-group', '--bundle-id', 'com.example.notes.ShareExt', '--json'])));
+    expect(JSON.parse(one.out).answers).toHaveLength(2);
+  });
+
+  test('verify reads the API: present groups match, a missing one mismatches, an unprovable one fails', async () => {
+    const targets = [{ bundleId: 'com.example.notes.ShareExt', appGroups: ['group.com.example.notes', 'group.com.example.other'] }];
+    const ok = verifyAppGroupsApi(targets, { gaps: [], unproven: [], ok: ['com.example.notes.ShareExt'] });
+    expect([ok.ok, ok.matched, ok.mismatches]).toEqual([true, 2, 0]);
+    const gap = verifyAppGroupsApi(targets, { gaps: [{ bundleId: 'com.example.notes.ShareExt', resourceId: 'EXT0001', groups: ['group.com.example.other'], url: null, why: 'the newest profile lacks it' }], unproven: [], ok: [] });
+    expect([gap.ok, gap.matched, gap.mismatches]).toEqual([false, 1, 1]);
+    expect(gap.rows.find(r => r.status === 'mismatch')!.item).toContain('group.com.example.other');
+    const un = verifyAppGroupsApi(targets, { gaps: [], unproven: [{ bundleId: 'com.example.notes.ShareExt', resourceId: null, groups: ['group.com.example.notes', 'group.com.example.other'], url: null }], ok: [] });
+    expect(un.ok).toBe(false);
+    expect(un.rows[0]!.note).toContain('signing ensure --refresh-profile');
+    expect(() => verifyText('apple-app-group', BASE, 'x')).toThrow('reads the App Store Connect API');
+  });
+
+  test('console verify apple-app-group end to end with a fake API: missing then present after the refreshed profile', async () => {
+    ascEnv();
+    const { run: verify } = await import('../cli/console/verify');
+    const prov = (ent: Record<string, unknown>): string => Buffer.from(`\x30\x82\x01junk${toXmlPlist({ Name: 'x', Entitlements: ent as Record<string, string | string[]> })}\x00`, 'latin1').toString('base64');
+    const prof = (ent: Record<string, unknown>) => ({ type: 'profiles', id: 'P1', attributes: { name: 'p', profileType: 'IOS_APP_STORE', profileState: 'ACTIVE', uuid: 'u', expirationDate: '2099-01-01T00:00:00.000+00:00', profileContent: prov(ent) } });
+    const page = (data: unknown[], included: unknown[] = []) => ({ data, included, links: { self: '' }, meta: { paging: { total: data.length, limit: 200 } } });
+    const run = async (ent: Record<string, unknown>) => {
+      mockFetch([
+        { match: /^\/v1\/bundleIds\?filter\[identifier\]=com\.example\.notes\.ShareExt/, answer: page([{ type: 'bundleIds', id: 'EXT0001', attributes: { identifier: 'com.example.notes.ShareExt', platform: 'IOS' }, relationships: { bundleIdCapabilities: { data: [{ type: 'bundleIdCapabilities', id: 'c1' }] } } }], [{ type: 'bundleIdCapabilities', id: 'c1', attributes: { capabilityType: 'APP_GROUPS', settings: null } }]) },
+        { match: /^\/v1\/bundleIds\/EXT0001\/profiles/, answer: page([prof(ent)]) },
+      ] as never);
+      const p = project({ ...BASE, apple: { bundleId: 'com.example.notes', appId: '6400000101' } }, files);
+      return capture(() => verify(p.ctx(['apple-app-group', '--bundle-id', 'com.example.notes.ShareExt'])));
+    };
+    const before = await run({});
+    expect(before.exit).toBe(1);
+    expect(before.out).toContain('mismatch');
+    restore(); ascEnv();
+    const after = await run({ 'com.apple.security.application-groups': ['group.com.example.notes'] });
+    expect(after.exit).toBeNull();
+    expect(after.out).toContain('match');
+  });
+});
+
 describe('apple build over SSH: the keychain fixes', () => {
   test('the refusal names the GUI session, the CI runner and the keychain flags', () => {
     const m = sshBuildRefusal('this is an SSH session');

From 2c5e30090ff1ba11f82ef3befd52f5347b846049 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 22:50:52 +0700
Subject: [PATCH 163/255] credential broker: Play tokens from POST
 /api/google/token (cached, single flight, local key fallback), grants and
 APIs per package in validate, Play write preflight, apps check and the
 desktop Accounts view; Google 403 names the API or grant, no retry

---
 CHANGELOG.md                          |   1 +
 apps/desktop/src/i18n/en.ts           |   7 +
 apps/desktop/src/i18n/tr.ts           |   7 +
 apps/desktop/src/screens/Accounts.tsx |  17 ++
 apps/desktop/src/styles/accounts.css  |   2 +
 cli/accounts.ts                       |   4 +-
 cli/api/client.ts                     |   9 +-
 cli/apps.ts                           |  75 ++++--
 cli/doctor.ts                         |  23 +-
 cli/index.ts                          |  13 +
 cli/lib/accounts.ts                   |  14 +-
 cli/lib/broker.ts                     | 327 +++++++++++++++++++++++++
 cli/lib/credentials.ts                |   8 +-
 cli/lib/desktop-protocol.ts           |  16 ++
 cli/lib/google-access.ts              |  34 +++
 cli/lib/google-auth.ts                |  98 +++++++-
 cli/play/client.ts                    |  11 +-
 cli/play/games.ts                     |  22 +-
 cli/play/google.ts                    |   6 +-
 cli/validate.ts                       |  42 +++-
 docs/README.md                        |   2 +
 docs/credential-broker.md             |  85 +++++++
 docs/getting-started.md               |   4 +
 docs/pitfalls.md                      |   1 +
 skills/store-pitfalls/SKILL.md        |  17 ++
 tests/credential-broker.test.ts       | 339 ++++++++++++++++++++++++++
 tests/helpers/preload.ts              |   4 +
 27 files changed, 1145 insertions(+), 43 deletions(-)
 create mode 100644 cli/lib/broker.ts
 create mode 100644 cli/lib/google-access.ts
 create mode 100644 docs/credential-broker.md
 create mode 100644 tests/credential-broker.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e4d8c7c..2b7f477 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,7 @@
 
 - App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
 - New `storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup]` (MCP `console_plan`: `bundleId`, `groups`, `lookup`): the agent-first developer portal plan to assign an App Group to an extension's App ID (start URL per bundle id resource id, portal labels, answer sheet per extension, never-press list: Remove / Delete / Revoke). Its final Save is the agent's own (`buttons.finalByAgent`: a capability edit, not a store submission). `console verify apple-app-group` (MCP `console_verify`, API only) re-reads the App ID and the newest profile and fails while a group is missing or cannot be proven.
+- Google access through a credential broker (`~/.storebound/broker.json`: `url`, `apiKeyFile`; env `STOREBOUND_BROKER_URL` / `STOREBOUND_BROKER_KEY_FILE`): Play tokens come from the broker's `POST /api/google/token` (in memory until 5 minutes before expiry, one request per account and scope, never logged; ya29. tokens and the API key redacted in errors), the local service account key stays the fallback when the broker does not answer or does not know the account; a broker that refuses the API key stops without retry. `PLAY_SERVICE_ACCOUNT_EMAIL` names the account (env, profile, project file); a profile opts out with `"broker": false`. The key file must be mode 600 on macOS / Linux. Play write commands read the package's Play permissions and enabled APIs from the broker first and stop before any Play call on a missing one (`CAN_MANAGE_TRACK_APKS`, `CAN_MANAGE_PUBLIC_LISTING`, `CAN_MANAGE_ORDERS`, `CAN_MANAGE_APP_CONTENT`, the Games Configuration API) with the exact permission or API and its link; `validate` lists them (gaps are blockers, SDK config drift a warning) and `--json` carries `credentials.play.source`; `doctor`, `accounts` and `apps check` / the desktop's Accounts view say whether tokens come from the broker or the key file. A Google 403 SERVICE_DISABLED / PERMISSION_DENIED in the Play client names the API or grant with its fix link and is never retried (pitfall 122, docs/credential-broker.md).
 
 ## 0.8.49 · 2026-10-25
 
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index b93dd8c..b34f6bb 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -2085,6 +2085,13 @@ export const en = {
   'cm.ignoredNoReads': "Ignored apps are not read",
   'cm.ignore': "Ignore",
   'acct.devId': 'Play developer id {id}',
+  'acct.viaBroker': 'tokens from the credential broker',
+  'acct.viaFile': 'local key file',
+  'acct.grantsTitle': 'Play permissions on the credential broker',
+  'acct.grantsOk': 'everything storebound needs',
+  'acct.grantsMissing': 'missing: {list}',
+  'acct.grantsNone': 'no permission data',
+  'acct.notRegistered': 'not registered on the broker',
   'acct.noDevId': 'no Play developer id',
   'acct.devIdLabel': 'Play developer account id',
   'acct.devIdHint': "The digits after /developers/ in the Play Console address. With it, Play Console links open each app's own page; the CLI uses it too.",
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index ec1d1ac..03dc74d 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -2087,6 +2087,13 @@ export const tr: Record<keyof typeof en, string> = {
   'cm.ignoredNoReads': "Yok sayılan uygulamalar okunmaz",
   'cm.ignore': "Yok say",
   'acct.devId': 'Play geliştirici kimliği {id}',
+  'acct.viaBroker': 'jetonlar kimlik aracısından',
+  'acct.viaFile': 'yerel anahtar dosyası',
+  'acct.grantsTitle': 'Kimlik aracısındaki Play izinleri',
+  'acct.grantsOk': 'storebound için gereken her şey var',
+  'acct.grantsMissing': 'eksik: {list}',
+  'acct.grantsNone': 'izin bilgisi yok',
+  'acct.notRegistered': 'aracıda kayıtlı değil',
   'acct.noDevId': 'Play geliştirici kimliği yok',
   'acct.devIdLabel': 'Play geliştirici hesabı kimliği',
   'acct.devIdHint': 'Play Console adresinde /developers/ sonrasındaki rakamlar. Girilince Play Console bağlantıları her uygulamanın kendi sayfasını açar; CLI de kullanır.',
diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
index 7dc2f89..9a897b0 100644
--- a/apps/desktop/src/screens/Accounts.tsx
+++ b/apps/desktop/src/screens/Accounts.tsx
@@ -92,6 +92,7 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
             {used ? ` · ${t('acct.folders', { count: used })}` : ''}
             {a.kind === 'play' && (a.developerId ? <> · <span className="mono-id selectable" title={t('acct.devIdHint')}>{t('acct.devId', { id: a.developerId })}</span></> : <> · <span title={t('acct.devIdHint')}>{t('acct.noDevId')}</span></>)}
             {check?.principal ? <> · <span className="mono-id selectable">{check.principal}</span></> : null}
+            {a.kind === 'play' && check?.source ? ` · ${check.source === 'broker' ? t('acct.viaBroker') : t('acct.viaFile')}` : ''}
           </div>
         </div>
         <div className="actions">
@@ -122,6 +123,22 @@ function AccountRow({ a, busy, setBusy, onError }: { a: Account; busy: string |
           </Notice>
         </div>
       )}
+      {check?.grants && check.grants.length > 0 && (
+        <div className="acct-fix acct-grants">
+          <div className="small strong">{t('acct.grantsTitle')}</div>
+          <ul className="small">
+            {check.grants.map(g => (
+              <li key={g.packageName}>
+                <span className="mono-id selectable">{g.packageName}</span>{': '}
+                {!g.registered ? <span className="muted">{t('acct.notRegistered')}</span>
+                  : g.missing.length ? <Chip tone="warn">{t('acct.grantsMissing', { list: g.missing.join(', ') })}</Chip>
+                  : g.grants ? <Chip tone="ok">{t('acct.grantsOk')}</Chip> : <span className="muted">{t('acct.grantsNone')}</span>}
+                {g.grants && g.grants.length > 0 && <span className="muted mono-id" title={(g.enabledApis ?? []).join(', ')}>{` ${g.grants.join(', ')}`}</span>}
+              </li>
+            ))}
+          </ul>
+        </div>
+      )}
       {h?.error && <div className="acct-fix"><Notice tone="bad">{h.error}</Notice></div>}
     </div>
   );
diff --git a/apps/desktop/src/styles/accounts.css b/apps/desktop/src/styles/accounts.css
index 251f916..38059de 100644
--- a/apps/desktop/src/styles/accounts.css
+++ b/apps/desktop/src/styles/accounts.css
@@ -24,3 +24,5 @@
 .scr-accounts .acct-fix { padding: 0 16px 16px; }
 .scr-accounts .acct-add { display: grid; grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); gap: 18px; align-items: start; }
 .scr-accounts .acct-add .form { gap: 14px; }
+.scr-accounts .acct-grants ul { margin: 4px 0 0; padding-left: 18px; display: grid; gap: 2px; }
+.scr-accounts .acct-grants li { overflow-wrap: anywhere; }
diff --git a/cli/accounts.ts b/cli/accounts.ts
index e95199a..d5b8403 100644
--- a/cli/accounts.ts
+++ b/cli/accounts.ts
@@ -22,6 +22,7 @@ import { resolve } from 'node:path';
 import type { Args } from './lib/args';
 import { applyImport, describeProfiles, planImport, setPlayDeveloperId } from './lib/accounts';
 import { activeProfile, defaultPointer, defaultProfile, profileDir, setDefaultPointer } from './lib/credentials';
+import { brokerConfig } from './lib/broker';
 import { confirm, type Ctx } from './lib/ctx';
 import { textTable } from './lib/table';
 import { printJson } from './lib/log';
@@ -42,9 +43,10 @@ export async function run(args: Args): Promise<void> {
       console.log(`no store accounts on this machine yet (${tilde(profileDir())}).\n  From a project that has its keys in .storebound/credentials.json: storebound accounts import\n  Or add them in the desktop app (Accounts).`);
       return;
     }
-    console.log(textTable(['profile', 'App Store Connect', 'Google Play', 'Play developer id', 'vendor no.', 'default'], rows.map(r => [r.profile, r.error ? `unreadable: ${r.error}` : r.apple ? 'key' : '-', r.play ? r.playAccount ?? 'service account' : '-', r.playDeveloperId ?? '-', r.vendor ? 'yes' : '-', r.profile === def ? (def === pointer ? 'yes (accounts default)' : 'yes') : ''])));
+    console.log(textTable(['profile', 'App Store Connect', 'Google Play', 'Play via', 'Play developer id', 'vendor no.', 'default'], rows.map(r => [r.profile, r.error ? `unreadable: ${r.error}` : r.apple ? 'key' : '-', r.play ? r.playAccount ?? 'service account' : '-', r.playSource === 'broker' ? 'credential broker' : r.playSource === 'file' ? 'key file' : '-', r.playDeveloperId ?? '-', r.vendor ? 'yes' : '-', r.profile === def ? (def === pointer ? 'yes (accounts default)' : 'yes') : ''])));
     if (pointer && pointer !== def) console.log(`note: the default pointer names "${pointer}", which is not a profile here (storebound accounts default <profile>)`);
     console.log(`\n${tilde(profileDir())}: shared by the CLI and the desktop app`);
+    try { const b = brokerConfig(); if (b) console.log(`credential broker: ${b.url} (${b.from === 'env' ? 'STOREBOUND_BROKER_URL' : tilde(b.from)}); a profile with "broker": false keeps its key file`); } catch (e) { console.log(`credential broker: not usable: ${(e as Error).message}`); }
     console.log(active ? `this folder uses "${active.name}" (${{ env: '--account / STOREBOUND_PROFILE', config: 'account in the config', project: '"account" in .storebound/credentials.json', default: 'the default profile' }[active.from]})` : 'this folder uses no profile (several profiles and no default: storebound accounts default <profile>, or accounts use <profile> in the project)');
     return;
   }
diff --git a/cli/api/client.ts b/cli/api/client.ts
index 17da151..b5d9584 100644
--- a/cli/api/client.ts
+++ b/cli/api/client.ts
@@ -354,13 +354,12 @@ export async function authFor(store: Store, root: string): Promise<Auth> {
     const { jwt } = ascJwt(root);
     return () => 'Bearer ' + jwt();
   }
-  const { playServiceAccount } = await import('../lib/credentials');
-  const { tokenSource } = await import('../lib/google-auth');
-  const sa = playServiceAccount(root);
-  const sources = new Map<string, () => Promise<string>>();
+  const { PLAY_SCOPE, playToken } = await import('../lib/google-auth');
+  // the credential broker when it has the scope, else the local key; throws now when neither is there
+  const sources = new Map<string, () => Promise<string>>([[PLAY_SCOPE, playToken(root, PLAY_SCOPE)]]);
   return async req => {
     const scope = PLAY_APIS[req.op.api as keyof typeof PLAY_APIS].scope;
-    if (!sources.has(scope)) sources.set(scope, tokenSource(sa, scope));
+    if (!sources.has(scope)) sources.set(scope, playToken(root, scope));
     return 'Bearer ' + (await sources.get(scope)!());
   };
 }
diff --git a/cli/apps.ts b/cli/apps.ts
index 3260a47..ec0c4fb 100644
--- a/cli/apps.ts
+++ b/cli/apps.ts
@@ -14,9 +14,10 @@
 //                                                                    desktop shows it read-only ("no local project");
 //                                                                    apps remove apple:<id> | <entry id> takes it out
 import type { Args } from './lib/args';
-import { ascKey, playServiceAccount } from './lib/credentials';
-import type { AccountCheck, AppsListResult } from './lib/desktop-protocol';
-import { PLAY_SCOPE, REPORTING_SCOPE, tokenSource } from './lib/google-auth';
+import { ascKey } from './lib/credentials';
+import type { AccountCheck, AppsListResult, BrokerGrant } from './lib/desktop-protocol';
+import { PLAY_SCOPE, playCredentials, playToken, REPORTING_SCOPE } from './lib/google-auth';
+import { brokerConfig, brokerPlayInfo, BrokerRefused, BrokerUnavailable, BrokerUnknownAccount, enabledApisOf, grantsOf, type PlayNeed, playGaps } from './lib/broker';
 import { errorBody } from './lib/http';
 import { done, log, printJson, warn } from './lib/log';
 import { appleCheck, type Bytes, dataUrl, type Get, isServiceDisabled, listAppleApps, listPlayApps, localPlayApps, MAX_ICON_BYTES, playCheck } from './lib/store-apps';
@@ -39,8 +40,8 @@ function stores(args: Args, root: string): Store[] {
   // every store whose credentials are set (env, or .storebound/credentials.json in this folder)
   const out: Store[] = [];
   try { ascKey(root); out.push('apple'); } catch { /* not set */ }
-  try { playServiceAccount(root); out.push('play'); } catch { /* not set */ }
-  if (!out.length) throw new Error('no store credentials: set ASC_KEY_ID + ASC_ISSUER_ID + ASC_P8 and / or PLAY_SERVICE_ACCOUNT (env or .storebound/credentials.json)');
+  if (playCredentials(root).source) out.push('play');
+  if (!out.length) throw new Error('no store credentials: set ASC_KEY_ID + ASC_ISSUER_ID + ASC_P8 and / or PLAY_SERVICE_ACCOUNT (env or .storebound/credentials.json), or a credential broker (~/.storebound/broker.json)');
   return out;
 }
 
@@ -71,7 +72,7 @@ function googleGet(token: () => Promise<string>, base: string): Get {
 
 /** Play icon of one package: an edit is opened, the default language's icon listed, and the edit deleted (never committed). */
 function playIcon(root: string): (pkg: string) => Promise<string | null> {
-  const token = tokenSource(playServiceAccount(root), PLAY_SCOPE);
+  const token = playToken(root, PLAY_SCOPE);
   const API = 'https://androidpublisher.googleapis.com/androidpublisher/v3/applications/';
   const call = async (method: string, url: string) => {
     const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token()) } });
@@ -96,7 +97,7 @@ function playIcon(root: string): (pkg: string) => Promise<string | null> {
   };
 }
 
-const principalOf = (root: string): string | null => { try { return playServiceAccount(root).client_email; } catch { return null; } };
+const principalOf = (root: string): string | null => playCredentials(root).principal;
 
 export async function listApps(store: Store, root: string, icons: boolean): Promise<AppsListResult> {
   const at = new Date().toISOString();
@@ -104,15 +105,15 @@ export async function listApps(store: Store, root: string, icons: boolean): Prom
     const r = await listAppleApps(await appleGet(root), { icons, bytes });
     return { store: 'ios', ...r, at };
   }
-  const sa = playServiceAccount(root);
+  const token = playToken(root, REPORTING_SCOPE);
   try {
-    const r = await listPlayApps(googleGet(tokenSource(sa, REPORTING_SCOPE), REPORTING_API), icons ? { icon: playIcon(root) } : {});
+    const r = await listPlayApps(googleGet(token, REPORTING_API), icons ? { icon: playIcon(root) } : {});
     return { store: 'android', ...r, at };
   } catch (e) {
     // the Reporting API is off in the service account's Cloud project: a clear finding with the exact link, and the
     // Play apps this machine knows (app folders' configs, store-only entries) instead of failing the whole list
     if (!isServiceDisabled(e)) throw e;
-    const c = playCheck(sa.client_email, { error: e });
+    const c = playCheck(token.principal(), { error: e });
     const known = knownPlayPackages(root);
     return { store: 'android', apps: localPlayApps(known), at,
       warnings: [`${c.message} Fix: ${c.fix}`, known.length ? `listed ${known.length} Play app(s) from this machine's app folders and store-only entries instead (not read from Google Play)` : 'no Play app folders on this machine to list instead (storebound apps add)'] };
@@ -152,12 +153,56 @@ export async function checkAccount(store: Store, root: string): Promise<AccountC
     } catch (e) { return appleCheck({ error: e }); }
   }
   let principal: string | null = null;
+  let source: AccountCheck['source'] = null;
   try {
-    const sa = playServiceAccount(root);
-    principal = sa.client_email;
-    const page = await googleGet(tokenSource(sa, REPORTING_SCOPE), REPORTING_API)('/apps:search?pageSize=1000');
-    return playCheck(principal, { apps: (page.apps ?? []).length });
-  } catch (e) { return playCheck(principal, { error: e }); }
+    const creds = playCredentials(root);
+    principal = creds.principal;
+    source = creds.source;
+    if (creds.broker?.error) throw new BrokerRefused(creds.broker.error, 0);
+    if (source === 'broker') {
+      // proves the broker: one androidpublisher token (it may fall back to the local key, then source says "file")
+      const t = playToken(root, PLAY_SCOPE);
+      await t();
+      source = t.source();
+      principal = t.principal() ?? principal;
+    }
+    let apps: number | null = null;
+    let reporting: ReturnType<typeof playToken> | null = null;
+    try { reporting = playToken(root, REPORTING_SCOPE); } catch (e) { if (source !== 'broker') throw e; }
+    if (reporting) apps = ((await googleGet(reporting, REPORTING_API)('/apps:search?pageSize=1000')).apps ?? []).length;
+    const c = apps === null
+      ? { store: 'android' as const, status: 'ok' as const, principal, apps: null, message: `The credential broker hands out Play tokens for ${principal ?? 'the service account'} (the app count needs the Reporting API scope, which the broker does not hand out).`, fix: null, docs: null }
+      : playCheck(principal, { apps });
+    return { ...c, source, ...(await brokerGrants(root, principal)) };
+  } catch (e) {
+    if (e instanceof BrokerRefused || e instanceof BrokerUnavailable || e instanceof BrokerUnknownAccount)
+      return { store: 'android', status: 'error', principal, apps: null, source, message: (e as Error).message, fix: 'Check the credential broker: ~/.storebound/broker.json (url, apiKeyFile) and the scopes of the API key (google:read, google:token).', docs: null };
+    return { ...playCheck(principal, { error: e }), source };
+  }
+}
+
+const ALL_NEEDS: PlayNeed[] = ['upload', 'listing', 'iap', 'declarations', 'reviews'];
+
+/** With a credential broker: the Play permissions and enabled APIs it lists for the Play apps this machine knows (at
+ *  most 25, 4 reads at a time), for the account check (CLI and the desktop's Accounts view). */
+async function brokerGrants(root: string, principal: string | null): Promise<{ grants?: BrokerGrant[] }> {
+  let cfg;
+  try { cfg = brokerConfig(root); } catch { return {}; }
+  if (!cfg) return {};
+  const pkgs = knownPlayPackages(root).slice(0, 25).map(k => k.packageName);
+  const out: (BrokerGrant | null)[] = new Array(pkgs.length).fill(null);
+  let next = 0;
+  await Promise.all(Array.from({ length: Math.min(4, pkgs.length) }, async () => {
+    while (next < pkgs.length) {
+      const i = next++, pkg = pkgs[i]!;
+      const r = await brokerPlayInfo(cfg, pkg);
+      if (r.kind === 'ok') {
+        if (principal && r.info.account && r.info.account !== principal) continue;
+        out[i] = { packageName: pkg, registered: true, grants: grantsOf(r.info), enabledApis: enabledApisOf(r.info), missing: playGaps(r.info, ALL_NEEDS).map(g => g.name) };
+      } else if (r.kind === 'not-registered') out[i] = { packageName: pkg, registered: false, grants: null, enabledApis: null, missing: [] };
+    }
+  }));
+  return { grants: out.filter((g): g is BrokerGrant => !!g) };
 }
 
 const tilde = (p: string) => (process.env.HOME && p.startsWith(process.env.HOME) ? '~' + p.slice(process.env.HOME.length) : p);
diff --git a/cli/doctor.ts b/cli/doctor.ts
index 612d04f..cfd4830 100644
--- a/cli/doctor.ts
+++ b/cli/doctor.ts
@@ -9,7 +9,8 @@ import { join, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import type { Args } from './lib/args';
 import { CONFIG_NAMES } from './lib/config';
-import { credentialStatus } from './lib/credentials';
+import { credentialStatus, maskUser } from './lib/credentials';
+import { type PlayCredentials, playCredentials } from './lib/google-auth';
 import { log, printJson } from './lib/log';
 import { textTable } from './lib/table';
 import { androidSdk, type AndroidSdkLookup, detectTools, findPlaywright, installCommands, type ToolStatus } from './lib/tools';
@@ -38,6 +39,9 @@ export interface DoctorResult {
   /** Store credentials of the project folder (env, .storebound/credentials.json, profile): set, missing or
    *  placeholder (a template value, treated as missing). Never the values. */
   credentials: { key: string; status: 'set' | 'missing' | 'placeholder' }[];
+  /** Where Play tokens come from: the credential broker (~/.storebound/broker.json) or the local key file; the
+   *  e-mail masked, never a key. */
+  play: PlayCredentials;
   /** macOS: a non-Apple rsync first on PATH (Homebrew 3.x breaks Xcode's exportArchive, pitfall 54), else null. */
   foreignRsync: string | null;
 }
@@ -50,10 +54,24 @@ export function doctor(cwd: string, env: Record<string, string | undefined> = pr
     usedFor: 'screenshot renders and web captures from a terminal (the desktop app brings its own)', install: pw ? [] : installCommands('playwright'), url: 'https://playwright.dev/docs/intro' });
   const project = CONFIG_NAMES.some(n => existsSync(join(cwd, n))) ? cwd : null;
   const sdk = androidSdk([join(cwd, 'android'), cwd], env);
-  return { storebound: pkg.version, bun: rt.bunVersion, runtime: `${rt.runtime.name} ${rt.runtime.version}`, platform: `${process.platform}-${process.arch}`, project, tools, missing: tools.filter(t => !t.found || t.status === 'outdated').length, androidSdk: sdk, credentials: credentialStatus(cwd),
+  return { storebound: pkg.version, bun: rt.bunVersion, runtime: `${rt.runtime.name} ${rt.runtime.version}`, platform: `${process.platform}-${process.arch}`, project, tools, missing: tools.filter(t => !t.found || t.status === 'outdated').length, androidSdk: sdk, credentials: credentialStatus(cwd), play: maskedPlay(cwd),
     foreignRsync: process.platform === 'darwin' ? foreignRsync(env.PATH) : null };
 }
 
+function maskedPlay(cwd: string): PlayCredentials {
+  const p = playCredentials(cwd);
+  return { ...p, principal: p.principal ? maskUser(p.principal) : null };
+}
+
+/** The one line about Play access: which source, and the broker's state. */
+export function playLine(p: PlayCredentials): string {
+  const who = p.principal ? ` for ${p.principal}` : '';
+  if (p.source === 'broker') return `Play: tokens from the credential broker ${p.broker!.url}${who}${p.local ? ' (local key as fallback)' : ''}`;
+  const broken = p.broker?.error ? ` · credential broker not usable: ${p.broker.error}` : '';
+  if (p.source === 'file') return `Play: local service account key${who}${broken}`;
+  return `Play: no service account key and no credential broker${broken}`;
+}
+
 /** One install command of a tool, run only with --yes; sudo / admin commands are printed, never run. */
 export function installPlan(r: DoctorResult, id: string, platform: NodeJS.Platform = process.platform): { tool: DoctorRow; command: string | null; runnable: boolean } {
   const tool = r.tools.find(t => t.id === id);
@@ -95,6 +113,7 @@ export async function run(args: Args): Promise<void> {
     : `Android SDK: not found (play build needs it). Checked: ${r.androidSdk.checked.join('; ')}`);
   const set = r.credentials.filter(c => c.status === 'set').map(c => c.key), ph = r.credentials.filter(c => c.status === 'placeholder').map(c => c.key);
   log('doctor', `credentials: ${set.length ? set.join(', ') : 'none set'}${ph.length ? ` · placeholders (treated as missing): ${ph.join(', ')}` : ''}`);
+  log('doctor', playLine(r.play));
   if (r.foreignRsync) log('doctor', `rsync: ${r.foreignRsync} is first on PATH and breaks Xcode exportArchive ("Copy failed") outside storebound; storebound apple build puts /usr/bin first. Fix for everything else: brew unlink rsync, or put /usr/bin before it`);
   const missing = r.tools.filter(t => !t.found || t.status === 'outdated');
   if (!missing.length) { log('doctor', 'everything storebound can use is here'); return; }
diff --git a/cli/index.ts b/cli/index.ts
index b1e1386..fe3c5a7 100755
--- a/cli/index.ts
+++ b/cli/index.ts
@@ -105,6 +105,7 @@ async function main(): Promise<void> {
         const loaded = await loadConfig(args.get('config'));
         const { acquireLock, lockKeys } = await import('./lib/lock');
         for (const k of lockKeys(key, args, loaded.config)) acquireLock(loaded.root, k, argv.filter(x => x !== '--force-unlock').join(' '), { force: args.has('force-unlock') });
+        await playPreflight(key, loaded, args);
         await (await COMMANDS[key]![0]()).run({ loaded, args });
       };
       await (args.has('json') ? withJsonOutput(go) : go());
@@ -119,8 +120,20 @@ async function main(): Promise<void> {
     // one writer per app and store (cli/lib/lock.ts): dry runs and reads take no lock
     const { acquireLock, lockKeys } = await import('./lib/lock');
     for (const k of lockKeys(key, args, loaded.config)) acquireLock(loaded.root, k, argv.filter(x => x !== '--force-unlock').join(' '), { force: args.has('force-unlock') });
+    await playPreflight(key, loaded, args);
     await (await COMMANDS[key]![0]()).run({ loaded, args });
   });
 }
 
+/** Play commands with a credential broker: the package's grants and APIs are read first, and a missing permission or a
+ *  disabled API stops the command before any Play call (a dry run or a read only warns). cli/lib/broker.ts. */
+async function playPreflight(key: string, loaded: { root: string; config: { play?: { packageName: string } } }, args: ReturnType<typeof parseArgs>): Promise<void> {
+  if (!key.startsWith('play ')) return;
+  const b = await import('./lib/broker');
+  if (!b.COMMAND_NEEDS[key]) return;
+  const { warn } = await import('./lib/log');
+  const read = args.has('dry') || ['status', 'pull'].includes(String(args._[0] ?? ''));
+  await b.playPreflight(key, loaded.root, loaded.config.play?.packageName, { dry: read, warn: m => warn('preflight', m) });
+}
+
 main().catch(e => { console.error(`\nerror: ${(e as Error).message}`); process.exit(1); });
diff --git a/cli/lib/accounts.ts b/cli/lib/accounts.ts
index 940e340..2c57242 100644
--- a/cli/lib/accounts.ts
+++ b/cli/lib/accounts.ts
@@ -9,6 +9,7 @@ import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, renameSyn
 import { homedir } from 'node:os';
 import { isAbsolute, join, resolve } from 'node:path';
 import { maskUser, PROFILE_KEYS, PROFILE_RE, profileDir, profileEnv, profileNames } from './credentials';
+import { brokerConfig, profileBrokerOff } from './broker';
 
 export type Kind = 'apple' | 'play';
 /** The store keys that move to a profile (one developer account's), never the app's own ones. */
@@ -36,12 +37,19 @@ export function profileIdentity(name: string): Identity {
 }
 
 /** One line per profile for `storebound accounts`: stores, masked Play e-mail. No key ids, no values. */
-export function describeProfiles(): { profile: string; apple: boolean; play: boolean; playAccount: string | null; vendor: boolean; playDeveloperId?: string | null; error?: string }[] {
+export function describeProfiles(): { profile: string; apple: boolean; play: boolean; playAccount: string | null; vendor: boolean; playDeveloperId?: string | null;
+  /** Where Play tokens come from: the credential broker (~/.storebound/broker.json), the profile's key file, or none. */
+  playSource: 'broker' | 'file' | null; error?: string }[] {
+  let broker = false;
+  try { broker = !!brokerConfig(); } catch { /* a broken broker.json: doctor reports it */ }
   return profileNames().map(profile => {
     try {
       const id = profileIdentity(profile);
-      return { profile, apple: !!id.appleKeyId, play: !!id.playEmail, playAccount: id.playEmail ? maskUser(id.playEmail) : null, vendor: id.vendor, playDeveloperId: id.playDeveloperId };
-    } catch (e) { return { profile, apple: false, play: false, playAccount: null, vendor: false, error: (e as Error).message }; }
+      const email = id.playEmail ?? profileEnv(profile).PLAY_SERVICE_ACCOUNT_EMAIL ?? null;
+      const viaBroker = broker && !profileBrokerOff(profile) && !!email;
+      const playSource = viaBroker ? 'broker' as const : id.playEmail ? 'file' as const : null;
+      return { profile, apple: !!id.appleKeyId, play: !!playSource, playAccount: email && playSource ? maskUser(email) : null, vendor: id.vendor, playDeveloperId: id.playDeveloperId, playSource };
+    } catch (e) { return { profile, apple: false, play: false, playAccount: null, vendor: false, playSource: null, error: (e as Error).message }; }
   });
 }
 
diff --git a/cli/lib/broker.ts b/cli/lib/broker.ts
new file mode 100644
index 0000000..41e171b
--- /dev/null
+++ b/cli/lib/broker.ts
@@ -0,0 +1,327 @@
+// Credential broker: a server of the owner's that holds the Google service-account keys, the Cloud project facts and
+// the Play permission grants, so this machine needs no Google key of its own. storebound asks it for short-lived
+// Google access tokens (POST /api/google/token) and for the Play facts of one package (GET
+// /api/google/play/<package>/storebound: the service account's Play permissions, the Cloud projects' enabled APIs, the
+// SDK config files). docs/credential-broker.md.
+//
+// Config: ~/.storebound/broker.json (file: env STOREBOUND_BROKER_CONFIG)
+//   { "url": "https://broker.example.com", "apiKeyFile": "~/.storebound/broker.key", "account"?: "<service account e-mail>" }
+// env STOREBOUND_BROKER_URL / STOREBOUND_BROKER_KEY_FILE override the file. Which Google account to mint for:
+// PLAY_SERVICE_ACCOUNT_EMAIL (env, the credential profile, .storebound/credentials.json), else "account" in broker.json,
+// else the client_email of a local key, else the account the broker names for the package. Off: env
+// STOREBOUND_BROKER=off, or "broker": false in a credential profile (that profile keeps its local key).
+// The key file holds one scoped API key (google:read google:token); on macOS / Linux it must be mode 600 (a group or
+// world readable file is refused). Tokens live in memory only, until 5 minutes before they expire, one request per
+// account + scope at a time; they are never written or logged, and every error text has ya29. tokens and the API key
+// redacted.
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { activeProfile, credentialValue, PROFILE_RE, profileDir } from './credentials';
+import { enableUrl, PLAY_USERS_URL } from './google-errors';
+
+export type BrokerScope = 'androidpublisher' | 'cloud-platform.read-only' | 'firebase.readonly';
+export const BROKER_SCOPES: readonly BrokerScope[] = ['androidpublisher', 'cloud-platform.read-only', 'firebase.readonly'];
+
+export interface BrokerConfig {
+  url: string;
+  keyFile: string;
+  /** The Google account (service account e-mail) to mint tokens for, when configured. */
+  account: string | null;
+  /** Where the URL came from: "env" or the broker.json path. */
+  from: string;
+}
+
+/** The broker did not answer (network error, timeout, 5xx): callers fall back to a local key when there is one. */
+export class BrokerUnavailable extends Error {}
+/** The broker refused this machine's API key (401 / 403): no fallback, no retry; the key needs its scopes. */
+export class BrokerRefused extends Error { constructor(msg: string, readonly status: number) { super(msg); } }
+/** The broker has no such Google account (400 / 404 on a token request): a local key may still serve it. */
+export class BrokerUnknownAccount extends Error {}
+
+const OFF = /^(off|0|false|no)$/i;
+export const brokerConfigFile = (): string => process.env.STOREBOUND_BROKER_CONFIG || join(homedir(), '.storebound', 'broker.json');
+const expand = (p: string, base: string): string => { const x = p.replace(/^~(?=$|[/\\])/, homedir()); return isAbsolute(x) ? x : resolve(base, x); };
+
+/** A profile that says "broker": false keeps its local key (also env STOREBOUND_PROFILE_<NAME>_BROKER=off). */
+export function profileBrokerOff(name: string): boolean {
+  if (!PROFILE_RE.test(name)) return false;
+  if (OFF.test(process.env[`STOREBOUND_PROFILE_${name.toUpperCase().replace(/[^A-Z0-9]/g, '_')}_BROKER`] ?? '')) return true;
+  try {
+    const f = join(profileDir(), `${name}.json`);
+    if (!existsSync(f)) return false;
+    const v = (JSON.parse(readFileSync(f, 'utf8')) as Record<string, unknown>).broker;
+    return v === false || (typeof v === 'string' && OFF.test(v));
+  } catch { return false; }
+}
+function profileOptsOut(root: string): boolean {
+  try { const p = activeProfile(root); return !!p && profileBrokerOff(p.name); } catch { return false; }
+}
+
+/** Only https, or http to this machine (a local test broker): the API key never travels in clear text. */
+export function checkBrokerUrl(raw: string): string {
+  let u: URL;
+  try { u = new URL(raw); } catch { throw new Error(`credential broker url "${raw}" is not a URL (https://broker.example.com)`); }
+  const local = ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname);
+  if (u.protocol !== 'https:' && !(u.protocol === 'http:' && local)) throw new Error(`credential broker url ${u.origin}: https only (http only for localhost)`);
+  return u.origin + u.pathname.replace(/\/+$/, '');
+}
+
+/**
+ * The broker config for a project (null: not configured, or turned off for it). Throws on an unreadable broker.json or
+ * a bad URL: a broken config is reported, never silently skipped.
+ */
+export function brokerConfig(root?: string): BrokerConfig | null {
+  if (OFF.test(process.env.STOREBOUND_BROKER ?? '')) return null;
+  if (root && profileOptsOut(root)) return null;
+  const f = brokerConfigFile();
+  let file: { url?: unknown; apiKeyFile?: unknown; account?: unknown } = {};
+  if (existsSync(f)) {
+    try { file = JSON.parse(readFileSync(f, 'utf8')) as typeof file; } catch (e) { throw new Error(`${f}: ${(e as Error).message}`); }
+    if (!file || typeof file !== 'object' || Array.isArray(file)) throw new Error(`${f}: an object { "url", "apiKeyFile" }`);
+  }
+  const envUrl = process.env.STOREBOUND_BROKER_URL;
+  const raw = envUrl || (typeof file.url === 'string' ? file.url : '');
+  if (!raw) return null;
+  const keyRaw = process.env.STOREBOUND_BROKER_KEY_FILE || (typeof file.apiKeyFile === 'string' && file.apiKeyFile ? file.apiKeyFile : join(dirname(f), 'broker.key'));
+  let account: string | null = null;
+  try { account = (root ? credentialValue(root, 'PLAY_SERVICE_ACCOUNT_EMAIL') : process.env.PLAY_SERVICE_ACCOUNT_EMAIL) || null; } catch { /* unreadable project file */ }
+  if (!account && typeof file.account === 'string' && file.account) account = file.account;
+  return { url: checkBrokerUrl(raw), keyFile: expand(keyRaw, dirname(f)), account, from: envUrl ? 'env' : f };
+}
+
+/** The API key from the key file. Refuses a group / world readable file on POSIX. Never printed. */
+export function brokerKey(cfg: BrokerConfig, platform: NodeJS.Platform = process.platform): string {
+  let mode: number;
+  try { mode = statSync(cfg.keyFile).mode; } catch { throw new Error(`credential broker key file ${cfg.keyFile} not found: put the API key there (one line, chmod 600)`); }
+  if (platform !== 'win32' && (mode & 0o077)) throw new Error(`refusing the credential broker key file ${cfg.keyFile}: it is readable by group or others (mode ${(mode & 0o777).toString(8)}); run chmod 600 ${cfg.keyFile}`);
+  const k = readFileSync(cfg.keyFile, 'utf8').trim();
+  if (!k || /\s/.test(k)) throw new Error(`credential broker key file ${cfg.keyFile}: one API key on one line`);
+  return k;
+}
+
+/** An error text without Google access tokens, bearer values or the given secrets. */
+export function redact(text: string, ...secrets: (string | null | undefined)[]): string {
+  let s = String(text ?? '').replace(/ya29\.[A-Za-z0-9._~+/=-]+/g, 'ya29.***').replace(/(Bearer\s+)[A-Za-z0-9._~+/=-]+/gi, '$1***');
+  for (const x of secrets) if (x && x.length >= 6) s = s.split(x).join('***');
+  return s;
+}
+
+const host = (cfg: BrokerConfig): string => { try { return new URL(cfg.url).host; } catch { return cfg.url; } };
+export const brokerTimeoutMs = (): number => Number(process.env.STOREBOUND_BROKER_TIMEOUT_MS) || 15_000;
+
+interface Answer { status: number; json: unknown; text: string }
+
+async function request(cfg: BrokerConfig, method: 'GET' | 'POST', path: string, body?: unknown): Promise<Answer> {
+  const key = brokerKey(cfg);
+  let r: Response;
+  try {
+    r = await fetch(cfg.url + path, {
+      method, signal: AbortSignal.timeout(brokerTimeoutMs()),
+      headers: { Authorization: `Bearer ${key}`, Accept: 'application/json', ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) },
+      body: body === undefined ? undefined : JSON.stringify(body),
+    });
+  } catch (e) { throw new BrokerUnavailable(`credential broker ${host(cfg)} did not answer: ${redact((e as Error).message, key)}`); }
+  const raw = await r.text().catch(() => '');
+  let json: unknown = null;
+  try { json = raw ? JSON.parse(raw) : null; } catch { /* not JSON */ }
+  const text = redact(raw, key).slice(0, 300);
+  if (r.status >= 500) throw new BrokerUnavailable(`credential broker ${host(cfg)} -> ${r.status} ${text}`.trim());
+  return { status: r.status, json, text };
+}
+
+const errOf = (a: Answer): string => {
+  const j = a.json as { error?: unknown; message?: unknown } | null;
+  const m = j && typeof j === 'object' ? [j.error, j.message].filter(x => typeof x === 'string').join(': ') : '';
+  return m || a.text;
+};
+
+const tokens = new Map<string, { token: string; until: number }>();
+const inflight = new Map<string, Promise<string>>();
+const infos = new Map<string, Promise<PlayInfoResult>>();
+
+/** Forgets every cached token and package answer (tests; a long-running process after a key change). */
+export function clearBrokerCache(): void { tokens.clear(); inflight.clear(); infos.clear(); }
+
+/**
+ * A Google access token for `account` with one broker scope. Cached in memory until 5 minutes before `expiresAt`;
+ * parallel callers share one request. 401 / 403 throw BrokerRefused (no retry), 400 / 404 BrokerUnknownAccount, no
+ * answer BrokerUnavailable.
+ */
+export async function brokerToken(cfg: BrokerConfig, account: string, scope: BrokerScope, now: () => number = Date.now): Promise<string> {
+  const k = `${cfg.url}\n${account}\n${scope}`;
+  const hit = tokens.get(k);
+  if (hit && now() < hit.until) return hit.token;
+  const running = inflight.get(k);
+  if (running) return running;
+  const p = (async () => {
+    const a = await request(cfg, 'POST', '/api/google/token', { account, scopes: [scope] });
+    if (a.status === 401 || a.status === 403)
+      throw new BrokerRefused(`the credential broker ${host(cfg)} refused the token request (${a.status}${errOf(a) ? `: ${errOf(a)}` : ''}): its API key lacks the google:token scope or was revoked. Give the key google:read and google:token on the broker; storebound does not retry.`, a.status);
+    if (a.status === 400 || a.status === 404)
+      throw new BrokerUnknownAccount(`the credential broker ${host(cfg)} has no Google account ${account} for scope ${scope} (${a.status}${errOf(a) ? `: ${errOf(a)}` : ''}): import its key on the broker, or set PLAY_SERVICE_ACCOUNT_EMAIL to an account it holds`);
+    const j = a.json as { accessToken?: unknown; expiresAt?: unknown } | null;
+    if (a.status !== 200 || typeof j?.accessToken !== 'string' || !j.accessToken || typeof j.expiresAt !== 'number')
+      throw new Error(`credential broker ${host(cfg)} token -> ${a.status}: no accessToken / expiresAt in the answer`);
+    const exp = j.expiresAt > 1e12 ? j.expiresAt : j.expiresAt * 1000;
+    tokens.set(k, { token: j.accessToken, until: exp - 300_000 });
+    return j.accessToken;
+  })().finally(() => inflight.delete(k));
+  inflight.set(k, p);
+  return p;
+}
+
+export interface BrokerPlayInfo {
+  packageName: string;
+  developerId?: string | null;
+  account?: string | null;
+  accountPermissions?: { developer?: string[]; app?: string[] } | null;
+  grantsCheckedAt?: number | null;
+  projects?: { projectId: string; projectNumber?: string; enabledApis?: string[]; billing?: string }[];
+  sdkConfigs?: { platform: string; sha256?: string; projectId?: string; firebaseAppId?: string; bundle?: string; drift?: boolean }[];
+  /** Optional fix links the broker may hand out. */
+  grantUrl?: string;
+}
+
+export type PlayInfoResult =
+  | { kind: 'ok'; info: BrokerPlayInfo }
+  /** 404: the package is not registered on the broker (not "no access"). */
+  | { kind: 'not-registered'; message: string }
+  | { kind: 'refused'; message: string }
+  | { kind: 'unavailable'; message: string };
+
+/** What the broker knows about one Play package (once per run and package). Never throws. */
+export function brokerPlayInfo(cfg: BrokerConfig, pkg: string): Promise<PlayInfoResult> {
+  const k = `${cfg.url}\n${pkg}`;
+  const cached = infos.get(k);
+  if (cached) return cached;
+  const p = (async (): Promise<PlayInfoResult> => {
+    try {
+      const a = await request(cfg, 'GET', `/api/google/play/${encodeURIComponent(pkg)}/storebound`);
+      if (a.status === 404) return { kind: 'not-registered', message: `${pkg} is not registered on the credential broker ${host(cfg)}: register the package there (google_play_set) to get its permission checks; this is not a missing Play access` };
+      if (a.status === 401 || a.status === 403) return { kind: 'refused', message: `the credential broker ${host(cfg)} refused the package read (${a.status}): its API key lacks the google:read scope` };
+      const j = a.json as BrokerPlayInfo | null;
+      if (a.status !== 200 || !j || typeof j !== 'object') return { kind: 'unavailable', message: `credential broker ${host(cfg)} -> ${a.status} ${a.text}`.trim() };
+      return { kind: 'ok', info: { ...j, packageName: typeof j.packageName === 'string' ? j.packageName : pkg } };
+    } catch (e) {
+      if (!(e instanceof BrokerUnavailable)) infos.delete(k);
+      return { kind: 'unavailable', message: (e as Error).message };
+    }
+  })();
+  infos.set(k, p);
+  return p;
+}
+
+/** The Play permission each kind of work needs (Play Console's app permission names, as the broker reports them). */
+export const PLAY_GRANTS = {
+  upload: 'CAN_MANAGE_TRACK_APKS',
+  listing: 'CAN_MANAGE_PUBLIC_LISTING',
+  iap: 'CAN_MANAGE_ORDERS',
+  declarations: 'CAN_MANAGE_APP_CONTENT',
+  reviews: 'CAN_REPLY_TO_REVIEWS',
+} as const;
+export type PlayNeed = keyof typeof PLAY_GRANTS | 'games';
+const NEED_WORDS: Record<PlayNeed, string> = { upload: 'uploads and releases', listing: 'the store listing and images', iap: 'in-app products and subscriptions', declarations: 'Data safety and app content', reviews: 'review replies', games: 'Play Games Services configuration' };
+export const ANDROIDPUBLISHER_API = 'androidpublisher.googleapis.com';
+export const GAMES_CONFIG_SERVICE = 'gamesconfiguration.googleapis.com';
+
+/** What each storebound command needs from Play (the preflight before it runs). */
+export const COMMAND_NEEDS: Record<string, PlayNeed[]> = {
+  'play upload': ['upload'], 'play release': ['upload'], 'play rollout': ['upload'], 'play share': ['upload'],
+  'play listing': ['listing'], 'play images': ['listing'], 'play products': ['iap'], 'play subscriptions': ['iap'],
+  'play data-safety': ['declarations'], 'play games': ['games'],
+};
+
+export interface AccessGap {
+  kind: 'grant' | 'api';
+  need: PlayNeed;
+  /** The missing permission (CAN_MANAGE_TRACK_APKS) or API (gamesconfiguration.googleapis.com). */
+  name: string;
+  message: string;
+  fix: string;
+  url: string;
+}
+
+/** The grants of a package as one list (developer-level permissions count for every app). */
+export const grantsOf = (info: BrokerPlayInfo): string[] | null => {
+  const p = info.accountPermissions;
+  if (!p || (!Array.isArray(p.app) && !Array.isArray(p.developer))) return null;
+  return [...new Set([...(p.developer ?? []), ...(p.app ?? [])])].sort();
+};
+/** Every API the broker saw enabled in the package's Cloud projects; null when it reported none. */
+export const enabledApisOf = (info: BrokerPlayInfo): string[] | null => {
+  const ps = (info.projects ?? []).filter(p => Array.isArray(p.enabledApis));
+  return ps.length ? [...new Set(ps.flatMap(p => p.enabledApis!))].sort() : null;
+};
+
+/** The missing Play permissions and disabled APIs for `needs`, per the broker's answer. Unknown facts are no gap. */
+export function playGaps(info: BrokerPlayInfo, needs: PlayNeed[]): AccessGap[] {
+  const pkg = info.packageName, who = info.account ?? 'the service account';
+  const gaps: AccessGap[] = [];
+  const grants = grantsOf(info);
+  const usersUrl = info.grantUrl ?? (info.developerId && /^\d+$/.test(info.developerId) ? `https://play.google.com/console/u/0/developers/${info.developerId}/users-and-permissions` : PLAY_USERS_URL);
+  for (const need of new Set(needs)) {
+    if (need === 'games' || !grants) continue;
+    const perm = PLAY_GRANTS[need];
+    if (grants.includes(perm)) continue;
+    gaps.push({ kind: 'grant', need, name: perm, url: usersUrl,
+      message: `${who} lacks the Play permission ${perm} for ${pkg} (needed for ${NEED_WORDS[need]})`,
+      fix: `grant ${perm} for ${pkg} on the credential broker (google_play_grant), or in Play Console > Users and permissions > ${who} > App permissions: ${usersUrl}` });
+  }
+  const apis = enabledApisOf(info);
+  if (apis) {
+    const project = (info.projects ?? []).find(p => Array.isArray(p.enabledApis))?.projectId ?? null;
+    const want = new Set<string>([ANDROIDPUBLISHER_API, ...(needs.includes('games') ? [GAMES_CONFIG_SERVICE] : [])]);
+    for (const api of want) {
+      if (apis.includes(api)) continue;
+      const url = enableUrl(api, project);
+      gaps.push({ kind: 'api', need: api === GAMES_CONFIG_SERVICE ? 'games' : needs[0] ?? 'upload', name: api, url,
+        message: `${api} is not enabled in Google Cloud project ${project ?? '(the service account\'s project)'} (needed for ${api === GAMES_CONFIG_SERVICE ? NEED_WORDS.games : 'every Play API call'})`,
+        fix: `enable ${api} on the credential broker (google_api_enable), or open ${url} and press Enable` });
+    }
+  }
+  return gaps;
+}
+
+const SDK_FILES: Record<string, string[]> = {
+  android: ['android/app/google-services.json', 'app/google-services.json', 'google-services.json', 'android/google-services.json'],
+  ios: ['ios/App/App/GoogleService-Info.plist', 'ios/Runner/GoogleService-Info.plist', 'ios/GoogleService-Info.plist', 'GoogleService-Info.plist'],
+};
+
+/** SDK config files the broker says drifted, or whose sha256 differs from the repo's copy. */
+export function sdkConfigGaps(info: BrokerPlayInfo, root: string): string[] {
+  const out: string[] = [];
+  for (const c of info.sdkConfigs ?? []) {
+    const label = `${c.platform} SDK config${c.bundle ? ` (${c.bundle})` : ''}`;
+    if (c.drift) out.push(`${label}: the credential broker reports drift from the Firebase project ${c.projectId ?? ''}; download it again on the broker`.replace(/ ;/, ';'));
+    const file = (SDK_FILES[c.platform] ?? []).map(f => join(root, f)).find(f => existsSync(f));
+    if (file && c.sha256 && /^[0-9a-f]{64}$/i.test(c.sha256)) {
+      const sha = createHash('sha256').update(readFileSync(file)).digest('hex');
+      if (sha.toLowerCase() !== c.sha256.toLowerCase()) out.push(`${label}: ${file} differs from the broker's copy (sha256 ${sha.slice(0, 12)}... vs ${c.sha256.slice(0, 12)}...): take the broker's file`);
+    }
+  }
+  return out;
+}
+
+/** One error text for the gaps that stop a command. */
+export const gapsText = (gaps: AccessGap[]): string => gaps.map(g => `${g.message}. Fix: ${g.fix}`).join('\n');
+
+/**
+ * Before a Play command runs (cli/index.ts): with a broker, read the package's grants and APIs and stop early with the
+ * exact missing permission / API and its link. A dry run only warns. No broker, an unreachable one, or a package the
+ * broker does not know: a note, then the command runs (Google answers for itself).
+ */
+export async function playPreflight(command: string, root: string, pkg: string | undefined, o: { dry: boolean; warn: (msg: string) => void }): Promise<AccessGap[]> {
+  const needs = COMMAND_NEEDS[command];
+  if (!needs || !pkg) return [];
+  let cfg: BrokerConfig | null;
+  try { cfg = brokerConfig(root); } catch (e) { o.warn((e as Error).message); return []; }
+  if (!cfg) return [];
+  const r = await brokerPlayInfo(cfg, pkg);
+  if (r.kind !== 'ok') { o.warn(r.message); return []; }
+  const gaps = playGaps(r.info, needs);
+  if (!gaps.length) return [];
+  if (o.dry) { for (const g of gaps) o.warn(`${g.message}. Fix: ${g.fix}`); return gaps; }
+  throw new Error(`${command} stopped before any call to Google Play:\n${gapsText(gaps)}`);
+}
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index 186a8fe..ddbbe09 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -21,6 +21,8 @@
 //   4. the default profile (none named): store keys only
 //   5. ASC_P8 only: ~/.appstoreconnect/private_keys/AuthKey_<ASC_KEY_ID>.p8 (where Xcode / altool keep it)
 // A profile file: { "ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_P8", "PLAY_SERVICE_ACCOUNT", "ASC_VENDOR_NUMBER", "label"? };
+// with a credential broker (cli/lib/broker.ts) Play needs no key file: "PLAY_SERVICE_ACCOUNT_EMAIL" names the account
+// the broker mints tokens for, and "broker": false keeps a profile on its local key.
 // key paths relative to the credentials folder (`accounts import` puts the key files in <name>/, mode 0600), or env
 // STOREBOUND_PROFILE_<NAME>_<KEY> (NAME upper case, other characters as _). storebound.workspace.json names profiles too.
 import { chmodSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
@@ -44,7 +46,7 @@ function fileStore(root: string): Store {
 export function credentialValue(root: string, name: string): string | undefined { return value(root, name); }
 /** The store credential names a profile holds (the same as the env names): per developer account, so the vendor number
  *  for reports too; an app's Android upload keystore stays in the project. */
-export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID'] as const;
+export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID', 'PLAY_SERVICE_ACCOUNT_EMAIL'] as const;
 export const PROFILE_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 
 export const profileDir = (): string => process.env.STOREBOUND_CREDENTIALS_DIR || join(homedir(), '.storebound', 'credentials');
@@ -158,7 +160,7 @@ export function isPlaceholder(v: string, o: { example?: boolean } = {}): boolean
 }
 
 /** Credential names storebound reads (env, .storebound/credentials.json, a profile), for status reports. */
-export const CREDENTIAL_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'APPLE_ADS_CLIENT_ID', 'APPLE_ADS_TEAM_ID',
+export const CREDENTIAL_KEYS = ['PLAY_SERVICE_ACCOUNT', 'PLAY_SERVICE_ACCOUNT_EMAIL', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'APPLE_ADS_CLIENT_ID', 'APPLE_ADS_TEAM_ID',
   'APPLE_ADS_KEY_ID', 'APPLE_ADS_PRIVATE_KEY', 'APPLE_ADS_ACCOUNT_ID', 'REVENUECAT_SECRET_KEY', 'ANDROID_KEYSTORE', 'ANDROID_KEYSTORE_PASSWORD', 'ANDROID_KEY_ALIAS', 'ANDROID_KEY_PASSWORD'] as const;
 
 /** Where each known credential stands: set, missing, or placeholder (a template value, treated as missing). Never
@@ -206,7 +208,7 @@ export function parseServiceAccount(text: string): ServiceAccount {
 
 export function playServiceAccount(root: string): ServiceAccount {
   const v = value(root, 'PLAY_SERVICE_ACCOUNT');
-  if (!v) throw new Error('PLAY_SERVICE_ACCOUNT is not set (env, the credential profile in ~/.storebound/credentials, or .storebound/credentials.json): path to the service account JSON key; `storebound accounts` lists the profiles');
+  if (!v) throw new Error('PLAY_SERVICE_ACCOUNT is not set (env, the credential profile in ~/.storebound/credentials, or .storebound/credentials.json): path to the service account JSON key, or a credential broker in ~/.storebound/broker.json; `storebound accounts` lists the profiles');
   return parseServiceAccount(inline(v, /^\s*\{/, root));
 }
 
diff --git a/cli/lib/desktop-protocol.ts b/cli/lib/desktop-protocol.ts
index 1a174d5..3c86210 100644
--- a/cli/lib/desktop-protocol.ts
+++ b/cli/lib/desktop-protocol.ts
@@ -315,6 +315,22 @@ export interface AccountCheck {
   /** What to do, in words. */
   fix: string | null;
   docs: string | null;
+  /** Play: where the tokens come from, the credential broker or the local key file (no values). */
+  source?: 'broker' | 'file' | null;
+  /** Play with a credential broker: the grants and APIs it lists per Play app of this machine. */
+  grants?: BrokerGrant[];
+}
+
+/** One Play app's access as the credential broker lists it (GET /api/google/play/<package>/storebound). */
+export interface BrokerGrant {
+  packageName: string;
+  /** false: the package is not registered on the broker (no data; not a missing access). */
+  registered: boolean;
+  /** Play permissions of the service account (developer-level ones included); null when the broker has none. */
+  grants: string[] | null;
+  enabledApis: string[] | null;
+  /** Permissions / APIs storebound's commands need that are not there. */
+  missing: string[];
 }
 
 /**
diff --git a/cli/lib/google-access.ts b/cli/lib/google-access.ts
new file mode 100644
index 0000000..b73f275
--- /dev/null
+++ b/cli/lib/google-access.ts
@@ -0,0 +1,34 @@
+// A Google 401 / 403 that says what is missing (SERVICE_DISABLED, PERMISSION_DENIED, a refused key) becomes one
+// GoogleAccessError with the exact API or grant and the link to fix it. It is never retried: the same call fails the
+// same way until the owner (or the credential broker) changes something. With the broker as the token source the text
+// also names the Play permissions the broker lists for the package and the broker-side fix.
+import { brokerConfig, brokerPlayInfo, grantsOf, redact } from './broker';
+import { findingText, type GoogleFinding, parseGoogleError } from './google-errors';
+
+export class GoogleAccessError extends Error {
+  /** Never sent again: retry loops and the upsert layer check this. */
+  readonly noRetry = true;
+  constructor(msg: string, readonly finding: GoogleFinding) { super(msg); }
+}
+
+/** The GoogleAccessError for a failed call's text, or null when the text is another error. */
+export async function accessError(text: string, o: { app?: string | null; root?: string; source?: 'broker' | 'file' } = {}): Promise<GoogleAccessError | null> {
+  const f = parseGoogleError(text, { app: o.app ?? null });
+  if (!f || f.kind === 'quota') return null;
+  const lines = [redact(text), findingText(f, { withUrl: true })];
+  if (o.source === 'broker') {
+    if (f.kind === 'auth-revoked') lines.push('The token came from the credential broker: its key for this service account was revoked or deleted at Google; rotate the key on the broker.');
+    if (f.kind === 'api-disabled') lines.push(`Or enable it on the credential broker (google_api_enable ${f.projectId ?? '<project>'} ${f.service}).`);
+    if (f.kind === 'no-app-access' && o.root && o.app) {
+      try {
+        const cfg = brokerConfig(o.root);
+        const r = cfg ? await brokerPlayInfo(cfg, o.app) : null;
+        if (r?.kind === 'ok') {
+          const g = grantsOf(r.info);
+          lines.push(`The credential broker lists ${g ? (g.length ? g.join(', ') : 'no Play permissions') : 'no permission data'} for ${r.info.account ?? 'the service account'} on ${o.app}: grant the missing one there (google_play_grant).`);
+        } else if (r) lines.push(r.message);
+      } catch { /* the Google error stands on its own */ }
+    }
+  }
+  return new GoogleAccessError(lines.join('\n'), f);
+}
diff --git a/cli/lib/google-auth.ts b/cli/lib/google-auth.ts
index 106f798..aaec4f4 100644
--- a/cli/lib/google-auth.ts
+++ b/cli/lib/google-auth.ts
@@ -1,5 +1,7 @@
 // OAuth 2.0 service account flow (RS256 JWT assertion -> access token) with WebCrypto, no googleapis dependency.
-import type { ServiceAccount } from './credentials';
+import { playServiceAccount, type ServiceAccount } from './credentials';
+import { BROKER_SCOPES, type BrokerConfig, brokerConfig, brokerKey, brokerPlayInfo, type BrokerScope, brokerToken, BrokerUnavailable, BrokerUnknownAccount, redact } from './broker';
+import { warn } from './log';
 
 export const PLAY_SCOPE = 'https://www.googleapis.com/auth/androidpublisher';
 /** Play Developer Reporting API (vitals): https://developers.google.com/play/developer/reporting/reference/rest */
@@ -42,3 +44,97 @@ export function tokenSource(sa: ServiceAccount, scope = PLAY_SCOPE): () => Promi
     return token;
   };
 }
+
+// ---- Play access through a credential broker (cli/lib/broker.ts) or a local key ----
+
+/** The broker scope a Google scope maps to; null: the broker hands out no such scope (a local key is needed). */
+export const BROKER_SCOPE_OF: Record<string, BrokerScope> = { [PLAY_SCOPE]: 'androidpublisher', [STORAGE_READ_SCOPE]: 'cloud-platform.read-only' };
+
+export type PlaySource = 'broker' | 'file';
+
+/** A Play access token getter that also says where its tokens come from (no values). */
+export interface PlayToken {
+  (): Promise<string>;
+  /** "broker" until the broker failed over to the local key (then "file"). */
+  source(): PlaySource;
+  /** The service account e-mail the tokens are for, when known. */
+  principal(): string | null;
+}
+
+const fellBack = new Set<string>();
+
+/**
+ * The Play token getter of a project: the credential broker when it is configured and has the scope (POST
+ * /api/google/token), else the local service account key (env, profile, .storebound/credentials.json). The broker not
+ * answering, or not knowing the account, falls back to the local key once with a warning; a broker that refuses the
+ * API key (401 / 403) fails. `brokerScope: null` forces the local key (writes the broker has no scope for).
+ * Throws at once when neither is there.
+ */
+export function playToken(root: string, scope = PLAY_SCOPE, o: { packageName?: string; brokerScope?: BrokerScope | null; warn?: (msg: string) => void } = {}): PlayToken {
+  let sa: ServiceAccount | null = null, saErr: Error | null = null;
+  try { sa = playServiceAccount(root); } catch (e) { saErr = e as Error; }
+  const cfg = brokerConfig(root);
+  const bscope = o.brokerScope === undefined ? BROKER_SCOPE_OF[scope] ?? null : o.brokerScope;
+  const local = sa ? tokenSource(sa, scope) : null;
+  if (!cfg || !bscope) {
+    if (!local) {
+      if (cfg && !bscope) throw new Error(`${scope.replace('https://www.googleapis.com/auth/', '')}: the credential broker hands out no such scope (${BROKER_SCOPES.join(', ')}), and there is no local service account key (PLAY_SERVICE_ACCOUNT) for it`);
+      throw saErr!;
+    }
+    return Object.assign(() => local(), { source: (): PlaySource => 'file', principal: () => sa!.client_email });
+  }
+  let account = cfg.account ?? sa?.client_email ?? null;
+  let mode: PlaySource = 'broker';
+  const say = o.warn ?? ((m: string) => warn('credentials', m));
+  const get = async (): Promise<string> => {
+    if (mode === 'file') return local!();
+    try {
+      if (!account && o.packageName) {
+        const r = await brokerPlayInfo(cfg, o.packageName);
+        if (r.kind === 'unavailable') throw new BrokerUnavailable(r.message);
+        if (r.kind === 'ok' && r.info.account) account = r.info.account;
+      }
+      if (!account) throw new Error('credential broker: which Google account? Set PLAY_SERVICE_ACCOUNT_EMAIL (env, the credential profile or .storebound/credentials.json) or "account" in broker.json');
+      return await brokerToken(cfg, account, bscope);
+    } catch (e) {
+      if (local && (e instanceof BrokerUnavailable || e instanceof BrokerUnknownAccount)) {
+        const once = `${cfg.url}\n${sa!.client_email}`;
+        if (!fellBack.has(once)) { fellBack.add(once); say(`${redact((e as Error).message)}; using the local service account key instead`); }
+        mode = 'file';
+        account = sa!.client_email;
+        return local();
+      }
+      throw e;
+    }
+  };
+  return Object.assign(get, { source: () => mode, principal: () => account });
+}
+
+export interface PlayCredentials {
+  /** Where Play tokens come from for this project: the broker, the local key file, or nowhere. */
+  source: PlaySource | null;
+  /** The service account e-mail when known (masked by the callers that print it). */
+  principal: string | null;
+  /** A local key is there too (the broker's fallback). */
+  local: boolean;
+  /** The broker config (its URL and key file path, never the key), and what is wrong with it. */
+  broker: { url: string; keyFile: string; from: string; error?: string } | null;
+  error?: string;
+}
+
+/** Where this project's Play access comes from, without network calls and without values. */
+export function playCredentials(root: string): PlayCredentials {
+  let sa: ServiceAccount | null = null, error: string | undefined;
+  try { sa = playServiceAccount(root); } catch (e) { error = (e as Error).message; }
+  let cfg: BrokerConfig | null = null, brokerError: string | undefined;
+  try { cfg = brokerConfig(root); } catch (e) { brokerError = (e as Error).message; }
+  if (cfg) { try { brokerKey(cfg); } catch (e) { brokerError = (e as Error).message; } }
+  const broker = cfg ? { url: cfg.url, keyFile: cfg.keyFile, from: cfg.from, ...(brokerError ? { error: brokerError } : {}) } : null;
+  const usable = !!cfg && !brokerError;
+  return {
+    source: usable ? 'broker' : sa ? 'file' : null,
+    principal: (usable ? cfg!.account : null) ?? sa?.client_email ?? null,
+    local: !!sa, broker,
+    ...(brokerError || !(usable || sa) ? { error: brokerError ?? error } : {}),
+  };
+}
diff --git a/cli/play/client.ts b/cli/play/client.ts
index 647b893..81239dd 100644
--- a/cli/play/client.ts
+++ b/cli/play/client.ts
@@ -1,6 +1,6 @@
 // Google Play Developer API (androidpublisher v3) client: JSON + media calls with retry, and the edit lifecycle.
-import { playServiceAccount } from '../lib/credentials';
-import { tokenSource } from '../lib/google-auth';
+import { PLAY_SCOPE, playToken } from '../lib/google-auth';
+import { accessError } from '../lib/google-access';
 import { log, warn } from '../lib/log';
 import { errorBody } from '../lib/http';
 import { noteGoogle } from '../lib/quota';
@@ -15,7 +15,8 @@ export const EDIT_GONE = /Edit has been deleted|editAlreadyCommitted|already bee
 export type PlayClient = Awaited<ReturnType<typeof playClient>>;
 
 export async function playClient(root: string, packageName: string) {
-  const token = tokenSource(playServiceAccount(root));
+  // the credential broker's token when one is configured, else the local service account key (cli/lib/google-auth.ts)
+  const token = playToken(root, PLAY_SCOPE, { packageName });
   const API = `https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${packageName}`;
   const UPLOAD = `https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${packageName}`;
 
@@ -49,6 +50,8 @@ export async function playClient(root: string, packageName: string) {
       const msg = /^\s*</.test(text) ? `(HTML ${r.status} page: wrong path or casing?)` : errorBody(text);
       if (r.status >= 500 && !safe) throw new AmbiguousWriteError(`${method} ${short()} -> ${r.status} ${msg}`, r.status);
       if (r.status === 404 && method === 'DELETE' && attempt > 0) return {} as T;
+      // a disabled API or a missing Play permission: the exact API / grant and its link, never retried (pitfall 122)
+      if (r.status === 403 || r.status === 401) { const g = await accessError(`${method} ${short()} -> ${r.status} ${msg}`, { app: packageName, root, source: token.source() }); if (g) throw g; }
       throw new Error(`${method} ${short()} -> ${r.status} ${msg}`);
     }
   }
@@ -141,6 +144,8 @@ export async function playClient(root: string, packageName: string) {
 
   return {
     API, UPLOAD, packageName, call,
+    /** Where this client's tokens come from: "broker" or "file" (no values). */
+    credentialSource: () => token.source(),
     /**
      * Read-only edit: opens one, runs fn (GETs only), then deletes it, also on error. Never validated or committed.
      * A failed delete is reported (Play drops an unused edit on its own after a while, but it should not linger).
diff --git a/cli/play/games.ts b/cli/play/games.ts
index 009683f..edee088 100644
--- a/cli/play/games.ts
+++ b/cli/play/games.ts
@@ -9,11 +9,12 @@
 // configuration with the fields Play has and we do not manage (icon, sort rank) kept. Nothing is published: the
 // owner's Publish in Play Console makes the draft live.
 import { playServiceAccount } from '../lib/credentials';
+import type { PlayToken } from '../lib/google-auth';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { dryPlan } from '../lib/dry';
 import { hasAndroidProject, type ItemPlan, pgsFindings, type PlayExisting, planPlayGames, planRows, readPgsProject, usesPlayGames } from '../lib/game-services';
-import { PLAY_SCOPE, tokenSource } from '../lib/google-auth';
+import { PLAY_SCOPE, playToken } from '../lib/google-auth';
 import { enableUrl, findingText, parseGoogleError } from '../lib/google-errors';
 import { errorBody } from '../lib/http';
 import { done, log, warn } from '../lib/log';
@@ -36,13 +37,24 @@ API: ${GAMES_API_TITLE} (${GAMES_SERVICE}). Enable it, wait a minute, then run s
 }
 
 export function gamesConfigClient(root: string) {
-  const account = playServiceAccount(root);
-  const token = tokenSource(account, PLAY_SCOPE);
+  // reads: the credential broker's cloud-platform.read-only token (androidpublisher does not cover this API), else the
+  // local key; writes stay on the local key (the broker has no write scope for it): made only when a write is sent
+  let projectId: string | null = null;
+  try { projectId = playServiceAccount(root).project_id ?? null; } catch { /* broker only */ }
+  const readToken = playToken(root, PLAY_SCOPE, { brokerScope: 'cloud-platform.read-only' });
+  let writeToken: PlayToken | null = null;
+  const token = (method: string): Promise<string> => {
+    if (method === 'GET') return readToken();
+    try { writeToken ??= playToken(root, PLAY_SCOPE, { brokerScope: null }); } catch (e) {
+      throw new Error(`Play Games configuration writes need a local service account key (PLAY_SERVICE_ACCOUNT): the credential broker hands out read scopes only for this API. ${(e as Error).message}`);
+    }
+    return writeToken();
+  };
   async function call<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {
     const url = GAMES_CONFIG_API + path;
     const safe = method !== 'POST' && retrySafe(method, url);
     for (let attempt = 0; ; attempt++) {
-      const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token()), ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) }, body: body === undefined ? undefined : JSON.stringify(body) });
+      const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token(method)), ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) }, body: body === undefined ? undefined : JSON.stringify(body) });
       if (r.status === 429 && attempt < 4) { await r.body?.cancel(); await rt.sleep(2000 * (attempt + 1)); continue; }
       if (r.status >= 500) {
         if (safe && attempt < 4) { await r.body?.cancel(); await rt.sleep(2000 * (attempt + 1)); continue; }
@@ -53,7 +65,7 @@ export function gamesConfigClient(root: string) {
       const t = await r.text();
       if (!r.ok) {
         const msg = `${method} ${path} -> ${r.status} ${errorBody(t, 800)}`;
-        const off = r.status === 403 ? gamesApiDisabledText(msg, account.project_id ?? null) : null;
+        const off = r.status === 403 ? gamesApiDisabledText(msg, projectId) : null;
         throw new Error(off ? `${msg.split(' -> ')[0]} -> 403: ${off}` : msg);
       }
       return (t ? JSON.parse(t) : {}) as T;
diff --git a/cli/play/google.ts b/cli/play/google.ts
index 9691763..cc61886 100644
--- a/cli/play/google.ts
+++ b/cli/play/google.ts
@@ -1,7 +1,6 @@
 // Small client for the other Google APIs storebound reads with the same Play service account: the Play Developer
 // Reporting API (vitals) and Cloud Storage (Play statistics exports). Read-only callers; retries 429 / 5xx.
-import { playServiceAccount } from '../lib/credentials';
-import { tokenSource } from '../lib/google-auth';
+import { playToken } from '../lib/google-auth';
 import { errorBody } from '../lib/http';
 import { noteGoogle } from '../lib/quota';
 import * as rt from '../lib/rt';
@@ -9,7 +8,8 @@ import * as rt from '../lib/rt';
 export const REPORTING_API = 'https://playdeveloperreporting.googleapis.com/v1beta1';
 
 export function googleClient(root: string, scope: string) {
-  const token = tokenSource(playServiceAccount(root), scope);
+  // the credential broker when it hands out this scope, else the local service account key
+  const token = playToken(root, scope);
   async function send(method: string, url: string, body?: unknown): Promise<Response> {
     for (let attempt = 0; ; attempt++) {
       const r = await fetch(url, { method, headers: { Authorization: 'Bearer ' + (await token()), ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) },
diff --git a/cli/validate.ts b/cli/validate.ts
index 4d43db3..c91fdac 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -40,6 +40,39 @@ import { creativeNote } from './shots/creative';
 import { creativeWaiting, localCreative } from './apple/creative-assets';
 import { fixFor, GUIDELINE, hitLine } from './lib/cross-store';
 import { listingFileMentions } from './lib/listing-mentions';
+import { brokerConfig, brokerPlayInfo, enabledApisOf, grantsOf, type PlayNeed, playGaps, sdkConfigGaps } from './lib/broker';
+import { playCredentials } from './lib/google-auth';
+import { usesPlayGames } from './lib/game-services';
+
+/** What the config's Play work needs from the service account: uploads and the listing always, products,
+ *  declarations and Play Games when the config has them. */
+export function playNeedsOf(config: Loaded['config']): PlayNeed[] {
+  const needs: PlayNeed[] = ['upload', 'listing'];
+  if ((config.products ?? []).some(p => sellsOn(config, p, 'play')) || allSubscriptions(config.subscriptions).some(x => sellsOn(config, x.sub, 'play'))) needs.push('iap');
+  if (config.dataSafety) needs.push('declarations');
+  if (usesPlayGames(config)) needs.push('games');
+  return needs;
+}
+
+/** With a credential broker: the Play permissions and enabled APIs it lists for the package, the gaps for what the
+ *  config needs (blockers: the commands would get a 403), and SDK config drift. Nothing without a broker. */
+export async function brokerFindings(loaded: Loaded): Promise<Finding[]> {
+  const { config, root } = loaded;
+  const pkg = config.play?.packageName;
+  if (!pkg) return [];
+  let cfg;
+  try { cfg = brokerConfig(root); } catch (e) { return [{ store: 'play', level: 'warn', code: 'broker-config', msg: (e as Error).message, fix: '~/.storebound/broker.json: { "url", "apiKeyFile" }' }]; }
+  if (!cfg) return [];
+  const r = await brokerPlayInfo(cfg, pkg);
+  if (r.kind === 'not-registered') return [{ store: 'play', level: 'warn', code: 'broker-not-registered', msg: r.message, fix: 'register the package on the credential broker (google_play_set)' }];
+  if (r.kind !== 'ok') return [{ store: 'play', level: 'warn', code: 'broker-unavailable', msg: `${r.message}: permission checks skipped`, fix: 'check the credential broker url and API key (~/.storebound/broker.json)' }];
+  const out: Finding[] = [];
+  const grants = grantsOf(r.info), apis = enabledApisOf(r.info);
+  out.push({ store: 'play', level: 'ok', code: 'broker-access', msg: `credential broker: ${r.info.account ?? 'service account'} on ${pkg}: Play permissions ${grants ? (grants.join(', ') || 'none') : 'not listed'}; enabled APIs ${apis ? (apis.join(', ') || 'none') : 'not listed'}` });
+  for (const g of playGaps(r.info, playNeedsOf(config))) out.push({ store: 'play', level: 'blocker', code: g.kind === 'grant' ? 'broker-grant' : 'broker-api', msg: g.message, fix: g.fix, url: g.url });
+  for (const m of sdkConfigGaps(r.info, root)) out.push({ store: 'play', level: 'warn', code: 'sdk-config', msg: m });
+  return out;
+}
 
 /** Profile facts for the checks: config + local credentials + public URL checks (no store API). */
 export async function collectProfile(loaded: Loaded): Promise<ProfileFacts> {
@@ -231,8 +264,11 @@ export async function run(ctx: Ctx): Promise<void> {
     if (creative) findings.push({ store: 'apple', level: 'ok', code: 'creative-assets', msg: creative, fix: 'storebound apple creative-assets --dry' });
   } else if (a.has('apple')) warn('validate', 'no apple section in the config');
   if ((both || a.has('play')) && config.play) {
+    // the broker's grants first: a missing permission is named before the edit reads hit the same 403
+    const access = await brokerFindings(ctx.loaded).catch(e => [{ store: 'play' as const, level: 'warn' as const, code: 'broker-unavailable', msg: (e as Error).message }]);
+    findings.push(...access);
     try { findings.push(...playRules({ ...(await collectPlay(ctx)), renders: local?.play })); }
-    catch (e) { findings.push({ store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 400) }, ...rendersFindings('play', local?.play)); }
+    catch (e) { findings.push({ store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 600) }, ...rendersFindings('play', local?.play)); }
   } else if (a.has('play')) warn('validate', 'no play section in the config');
   // Game Center / Play Games Services: entitlement, APP_ID resource, store state vs the config
   if (config.games || config.apple) {
@@ -259,7 +295,9 @@ export async function run(ctx: Ctx): Promise<void> {
     findings.push(...sortFindings(healthFindings(h, { unreadable: 'ok' })));
   }
   const blockers = findings.filter(f => f.level === 'blocker').length;
-  if (a.has('json')) printJson({ blockers, findings });
+  // where Play tokens come from (MCP validate reads it): "broker" or "file", never a value
+  const credentials = config.play ? { play: { source: playCredentials(ctx.loaded.root).source } } : {};
+  if (a.has('json')) printJson({ blockers, findings, credentials });
   else {
     console.log(formatFindings(findings));
     log('validate', blockers ? `${blockers} blocker(s)` : 'no blockers (UI-only steps are not visible to the API: App Privacy, Play App content)');
diff --git a/docs/README.md b/docs/README.md
index 0d6d79d..9efa6f3 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -26,6 +26,8 @@ The [README](../README.md) is the short tour; everything in detail lives here.
 - [Skills](skills.md)
 - [MCP server and the desktop machine interface](mcp.md)
 - [Safety model](safety.md)
+- [Google access through a credential broker](credential-broker.md): Play tokens and permission checks from a server of
+  yours, no Google key on the machine
 - [Idempotency: every write converges](idempotency.md)
 - [Pitfalls: lessons from real use](pitfalls.md)
 
diff --git a/docs/credential-broker.md b/docs/credential-broker.md
new file mode 100644
index 0000000..749b6c0
--- /dev/null
+++ b/docs/credential-broker.md
@@ -0,0 +1,85 @@
+# Google access through a credential broker
+
+A credential broker is a server of yours that holds the Google service-account keys, the Cloud project facts and the
+Play permission grants. With one configured, storebound keeps no Google key on the machine: it asks the broker for a
+short-lived access token for each Google API call and reads the package's Play permissions from it before a command
+writes anything. The local key (`PLAY_SERVICE_ACCOUNT`) keeps working and is the fallback.
+
+## Setup
+
+`~/.storebound/broker.json`:
+
+```json
+{
+  "url": "https://broker.example.com",
+  "apiKeyFile": "~/.storebound/broker.key",
+  "account": "play-publisher@example.com"
+}
+```
+
+- `url`: the broker's base URL. Only `https://` (plain `http://` only for `localhost`, a local test broker).
+- `apiKeyFile`: a file with one scoped API key on one line, with the scopes `google:read` and `google:token`. On macOS
+  and Linux it must be `chmod 600`: storebound refuses a key file that the group or others can read. Default:
+  `broker.key` next to `broker.json`. The key is never printed, never written into a config or a log.
+- `account` (optional): the service account e-mail the broker mints tokens for. A credential profile or the project
+  can name its own with `PLAY_SERVICE_ACCOUNT_EMAIL` (env, `~/.storebound/credentials/<profile>.json`,
+  `.storebound/credentials.json`); without either, the `client_email` of a local key is used, and for Play commands
+  the account the broker names for the package.
+
+Overrides: `STOREBOUND_BROKER_URL`, `STOREBOUND_BROKER_KEY_FILE` (env wins over the file), `STOREBOUND_BROKER_CONFIG`
+(another broker.json). Off: `STOREBOUND_BROKER=off` for one run, `"broker": false` in a credential profile (that profile
+keeps its key file), or env `STOREBOUND_PROFILE_<NAME>_BROKER=off`.
+
+## What storebound calls
+
+| call | when |
+|---|---|
+| `POST /api/google/token` `{ "account", "scopes": ["androidpublisher"] }` -> `{ "accessToken", "expiresAt" }` | before Google calls. Kept in memory until 5 minutes before `expiresAt`; parallel calls share one request |
+| `GET /api/google/play/<package>/storebound` | `storebound validate`, the preflight of Play write commands, `apps check` and the desktop's Accounts view |
+
+Scopes: `androidpublisher` for the Play Developer API, `cloud-platform.read-only` for Play statistics exports and Play
+Games configuration reads. The broker hands out no scope for the Play Developer Reporting API (vitals, the app list of
+`apps list`) or for Play Games configuration writes: those use the local key, and say so when there is none.
+
+## Fallback and failures
+
+- Broker not configured: the local key, as before.
+- Broker not answering (network error, timeout, 5xx) or not knowing the account (400 / 404 on a token): the local key,
+  with one warning per run. No local key: the error names the broker.
+- Broker refusing the API key (401 / 403): storebound stops with "the key lacks google:token" and does not retry or
+  fall back. Give the key its scopes on the broker.
+- A package the broker does not know (404 on `/storebound`): a warning to register it there. It is not a missing
+  Play access; the command still runs and Google answers for itself.
+
+## Permission checks
+
+The broker's answer lists the service account's Play permissions for the package and the APIs enabled in its Cloud
+projects. Before a Play command writes, storebound compares them with what the command needs and stops before any
+Play call, naming the exact permission or API and the link to fix it:
+
+| work | Play permission | commands |
+|---|---|---|
+| uploads, releases, rollouts | `CAN_MANAGE_TRACK_APKS` | `play upload`, `play release`, `play rollout`, `play share` |
+| store listing and images | `CAN_MANAGE_PUBLIC_LISTING` | `play listing`, `play images` |
+| products and subscriptions | `CAN_MANAGE_ORDERS` | `play products`, `play subscriptions` |
+| Data safety, app content | `CAN_MANAGE_APP_CONTENT` | `play data-safety` |
+| review replies | `CAN_REPLY_TO_REVIEWS` | (listed in the checks) |
+| Play Games Services | API `gamesconfiguration.googleapis.com` | `play games` |
+
+Every Play call also needs `androidpublisher.googleapis.com` enabled. A dry run (`--dry`) and reads only warn.
+`storebound validate` reports the same gaps as blockers, the permissions and APIs the broker lists, and SDK config
+files (`google-services.json`, `GoogleService-Info.plist`) the broker reports as drifted or whose sha256 differs from
+the repo's copy.
+
+When Google itself answers 403 `SERVICE_DISABLED` or `PERMISSION_DENIED`, the error names the API (with its enable
+link) or the missing app access (with the Users and permissions link), adds what the broker lists for the package, and
+is never retried.
+
+## Where it shows
+
+- `storebound doctor`: `Play: tokens from the credential broker <url> for p***@...` (or the local key, and why the
+  broker is not usable). `--json`: `play.source` is `"broker"` or `"file"`.
+- `storebound accounts`: a "Play via" column (credential broker / key file) per profile.
+- `storebound validate --json` (and MCP `validate`): `credentials.play.source`.
+- `storebound apps check --store play --json` and the desktop's Accounts view: `source` and, per Play app of the
+  machine, the permissions and APIs the broker lists and what is missing.
diff --git a/docs/getting-started.md b/docs/getting-started.md
index ea6c825..6301f0f 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -115,12 +115,16 @@ Store accounts belong to the machine, everything else to the project:
   `.storebound/credentials.json`.
 - **Order:** environment variables win over everything, then a profile the project names, then the project file,
   then the default profile.
+- **Google keys on a server of yours:** with a credential broker in `~/.storebound/broker.json`, Play tokens come from
+  it and the machine needs no Google key; the local key stays the fallback. See
+  [Google access through a credential broker](credential-broker.md).
 
 The names (env, profile and project file alike; the project file is gitignored by `init`):
 
 | name | what |
 |---|---|
 | `PLAY_SERVICE_ACCOUNT` | path to the Google Cloud service account JSON key (or the JSON itself) with access to your app in Play Console |
+| `PLAY_SERVICE_ACCOUNT_EMAIL` | with a [credential broker](credential-broker.md): the service account the broker mints tokens for (no key file needed) |
 | `ASC_KEY_ID`, `ASC_ISSUER_ID` | App Store Connect API team key (Users and Access > Integrations) |
 | `ASC_P8` | path to `AuthKey_<id>.p8` (default `~/.appstoreconnect/private_keys/AuthKey_<id>.p8`) |
 | `ASC_VENDOR_NUMBER` | vendor number for `reports apple-sales` / `apple-finance` (Payments and Financial Reports) |
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index 4f58aed..55cc3a4 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -9,6 +9,7 @@ fails without the fix.
 
 | # | date | lesson | guard |
 |---|---|---|---|
+| 95 | 2026-10 | The Google service-account keys moved to the owner's credential broker, but storebound still wanted a local `PLAY_SERVICE_ACCOUNT`, and a Play write with a missing permission ran its edit before Google's bare 403. | `cli/lib/broker.ts` (broker.json, key file mode 600, token cache and single flight, grants, `playPreflight` before Play write commands), `playToken` in `cli/lib/google-auth.ts` (broker first, local key fallback when it does not answer), `cli/lib/google-access.ts` (403 SERVICE_DISABLED / PERMISSION_DENIED -> exact API or grant with its link, never retried), `validate` blockers; `tests/credential-broker.test.ts` against a local fake broker. Skill pitfall 122, docs/credential-broker.md. |
 | 94 | 2026-10 | An app with managed publishing was approved but never went live: `play status` said "In review / ready to publish" with no next step, and the Publishing overview "Publish N changes" button (production + Data safety) was easy to miss or to confuse with Discard changes. | `console plan play-publish-changes` (final "Publish N changes" is the owner's, Discard changes / Stop managed publishing never-press), `console verify play-publish-changes` (API), the hint in `play status`, `status` and the desktop Releases tab (`cli/lib/play-publish.ts`, `tests/console-play-plans.test.ts`). |
 | 93 | 2026-10 | A git-ignored, never-captured frames folder rendered store images with no app or game in them; render only logged 404s and `shots check` said 0 errors. | `shots render` refuses to start while a scene frame is missing (`framesForRender` in `cli/shots/lib.ts`) and fails when any load failed; report.json `missing` is a `frame-missing` error in `shots check` / `validate` (`cli/shots/report.ts`, `tests/shots-missing-frames.test.ts`). |
 | 90 | 2026-10 | `apple submit --build N --version X --yes` after `apple submit --no-submit --yes` (the documented two-step flow) printed the plan (every item "in it already", then "submit PATCH submitted: true"), logged "not added ...: already in the draft submission" and ended with "nothing to submit" without the PATCH: the submit only ran for new items or an UNRESOLVED_ISSUES submission. | `willSubmit` (cli/lib/review-submit.ts) also submits a READY_FOR_REVIEW draft that already holds the named app version (iap-submit: one of the asked-for items), with the same "not ready yet" retry. `tests/resubmit.test.ts` ("the second step submits the prepared draft"). |
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 967824b..7392b6d 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1498,3 +1498,20 @@ that fails without the fix (see CONTRIBUTING.md).
   `cli/apple/signing.ts`, `tests/signing-targets.test.ts` (fixture pbxproj with an app, a share extension and app group
   entitlements, a decoded profile plist, a fake App Store Connect), `cli/lib/console-apple-group-plan.ts` (the plan),
   `verifyAppGroupsApi` in `cli/lib/console-verify.ts`, `appGroupVerdicts` in `cli/lib/targets.ts` (gap / unproven / ok).
+
+## 122. Google keys moved to a credential broker: tokens, fallback and missing grants
+
+- **Symptom:** after the Google service-account keys moved to the owner's credential broker, Play commands either
+  still wanted `PLAY_SERVICE_ACCOUNT`, or an upload ran its edit, uploaded and only then died on a bare 403 for a
+  permission the broker could have named; an error dump could carry the bearer token.
+- **Do:** configure `~/.storebound/broker.json` (`url`, `apiKeyFile`, key file mode 600) and, when the account is not
+  the local key's, `PLAY_SERVICE_ACCOUNT_EMAIL` in the profile. `storebound doctor` says which source Play uses.
+  Before Play writes, the preflight reads `GET /api/google/play/<package>/storebound` and stops on a missing
+  permission or API with the exact name and link; grant it on the broker (`google_play_grant`) or enable the API
+  (`google_api_enable`), never by retrying. A 404 there means "register the package on the broker", not "no access".
+  A broker that refuses the API key (401 / 403) needs `google:read google:token` on the key; storebound neither retries
+  nor falls back then. The broker has no scope for the Reporting API or Play Games writes: those keep the local key.
+- **Never:** write an access token to disk or into a log, put the broker key into a config or docs, or loop on a 403.
+- **Guard:** `cli/lib/broker.ts` (config, key file mode, token cache and single flight, grants, preflight, redaction),
+  `cli/lib/google-auth.ts` `playToken` (broker first, local key fallback), `cli/lib/google-access.ts` (403 ->
+  GoogleAccessError, no retry), `tests/credential-broker.test.ts` (a local fake broker).
diff --git a/tests/credential-broker.test.ts b/tests/credential-broker.test.ts
new file mode 100644
index 0000000..e99e8e2
--- /dev/null
+++ b/tests/credential-broker.test.ts
@@ -0,0 +1,339 @@
+// Google access through a credential broker (cli/lib/broker.ts, playToken in cli/lib/google-auth.ts), against a local
+// Bun.serve fake broker: token minting, caching, single flight and expiry, fallback to the local key, the package's
+// Play permissions, the missing-grant guardrail (preflight and Google's own 403), key file permissions, and that no
+// key or token shows up in any output.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } from 'bun:test';
+import { generateKeyPairSync } from 'node:crypto';
+import { chmodSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { type BrokerConfig, brokerConfig, brokerKey, brokerPlayInfo, BrokerRefused, brokerToken, checkBrokerUrl, clearBrokerCache, playGaps, playPreflight, redact } from '../cli/lib/broker';
+import { playCredentials, playToken } from '../cli/lib/google-auth';
+import { accessError, GoogleAccessError } from '../cli/lib/google-access';
+import { playClient } from '../cli/play/client';
+import { doctor, playLine } from '../cli/doctor';
+
+const PKG = 'com.example.game';
+const ACCOUNT = 'publisher@sb-test.example.com';
+const API_KEY = 'brokerkey_0123456789abcdef';
+const ENV = ['PLAY_SERVICE_ACCOUNT', 'PLAY_SERVICE_ACCOUNT_EMAIL', 'STOREBOUND_BROKER', 'STOREBOUND_BROKER_URL', 'STOREBOUND_BROKER_KEY_FILE', 'STOREBOUND_BROKER_CONFIG',
+  'STOREBOUND_CREDENTIALS_DIR', 'STOREBOUND_PROFILE', 'STOREBOUND_BROKER_TIMEOUT_MS'] as const;
+const saved = Object.fromEntries(ENV.map(k => [k, process.env[k]]));
+
+interface Seen { method: string; path: string; auth: string | null; body: unknown }
+let seen: Seen[] = [];
+let mints = 0;
+/** What the fake broker answers; tests change it. */
+let route: (s: Seen) => Response | Promise<Response>;
+const json = (o: unknown, status = 200) => new Response(JSON.stringify(o), { status, headers: { 'content-type': 'application/json' } });
+const nowS = () => Math.floor(Date.now() / 1000);
+const defaultRoute = (s: Seen): Response => {
+  if (s.path === '/api/google/token') { mints++; return json({ accessToken: `ya29.fake-${mints}`, expiresAt: nowS() + 3600, clientEmail: ACCOUNT, scopes: ['androidpublisher'] }); }
+  if (s.path === `/api/google/play/${PKG}/storebound`) return json(INFO);
+  return json({ error: 'err_not_found' }, 404);
+};
+const INFO = {
+  packageName: PKG, developerId: '5550000000000000001', account: ACCOUNT,
+  accountPermissions: { developer: [], app: ['CAN_MANAGE_PUBLIC_LISTING', 'CAN_MANAGE_ORDERS'] },
+  grantsCheckedAt: 1761390000,
+  projects: [{ projectId: 'sb-test-project', projectNumber: '100000000001', enabledApis: ['androidpublisher.googleapis.com'], billing: 'linked' }],
+  sdkConfigs: [],
+};
+
+let server: ReturnType<typeof Bun.serve>;
+let tmp: string, root: string, keyFile: string;
+const realFetch = globalThis.fetch;
+
+beforeAll(() => {
+  server = Bun.serve({
+    port: 0,
+    async fetch(req) {
+      const u = new URL(req.url);
+      const text = await req.text();
+      const s: Seen = { method: req.method, path: decodeURIComponent(u.pathname), auth: req.headers.get('authorization'), body: text ? JSON.parse(text) : null };
+      seen.push(s);
+      return route(s);
+    },
+  });
+});
+afterAll(() => { server.stop(true); });
+
+function writeBroker(o: Record<string, unknown> = {}): void {
+  writeFileSync(join(tmp, 'broker.json'), JSON.stringify({ url: `http://127.0.0.1:${server.port}`, apiKeyFile: keyFile, account: ACCOUNT, ...o }));
+}
+function localKey(): void {
+  const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 2048 });
+  process.env.PLAY_SERVICE_ACCOUNT = JSON.stringify({ client_email: ACCOUNT, private_key: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(), token_uri: 'https://oauth2.googleapis.com/token' });
+}
+/** fetch double for Google only (the local key's token exchange, the Play API); the fake broker is reached for real. */
+function fakeGoogle(api: (url: string, init?: RequestInit) => Response = () => json({})): string[] {
+  const calls: string[] = [];
+  globalThis.fetch = (async (input: string | URL | Request, init?: RequestInit) => {
+    const url = String(input instanceof Request ? input.url : input);
+    if (url === 'https://oauth2.googleapis.com/token') return json({ access_token: 'local-file-token', expires_in: 3600 });
+    if (/googleapis\.com/.test(url)) { calls.push(`${init?.method ?? 'GET'} ${url}`); return api(url, init); }
+    return realFetch(input as Request, init);
+  }) as typeof fetch;
+  return calls;
+}
+
+beforeEach(() => {
+  for (const k of ENV) delete process.env[k];
+  tmp = mkdtempSync(join(tmpdir(), 'sb-broker-'));
+  root = join(tmp, 'project');
+  mkdirSync(root, { recursive: true });
+  keyFile = join(tmp, 'broker.key');
+  writeFileSync(keyFile, API_KEY + '\n', { mode: 0o600 });
+  process.env.STOREBOUND_BROKER_CONFIG = join(tmp, 'broker.json');
+  process.env.STOREBOUND_CREDENTIALS_DIR = join(tmp, 'credentials');
+  process.env.STOREBOUND_PROFILE = '';
+  seen = []; mints = 0; route = defaultRoute;
+  clearBrokerCache();
+});
+afterEach(() => {
+  globalThis.fetch = realFetch;
+  rmSync(tmp, { recursive: true, force: true });
+  for (const k of ENV) { if (saved[k] === undefined) delete process.env[k]; else process.env[k] = saved[k]; }
+});
+
+describe('config', () => {
+  test('broker.json, env overrides, https only, per-profile opt-out', () => {
+    expect(brokerConfig(root)).toBeNull();
+    writeBroker();
+    const c = brokerConfig(root)!;
+    expect(c.url).toBe(`http://127.0.0.1:${server.port}`);
+    expect(c.keyFile).toBe(keyFile);
+    expect(c.account).toBe(ACCOUNT);
+    // PLAY_SERVICE_ACCOUNT_EMAIL (here a broker credential id) wins over broker.json
+    process.env.PLAY_SERVICE_ACCOUNT_EMAIL = 'cred-play-1';
+    expect(brokerConfig(root)!.account).toBe('cred-play-1');
+    delete process.env.PLAY_SERVICE_ACCOUNT_EMAIL;
+    process.env.STOREBOUND_BROKER_URL = 'https://broker.example.com/';
+    expect(brokerConfig(root)!.url).toBe('https://broker.example.com');
+    expect(brokerConfig(root)!.from).toBe('env');
+    process.env.STOREBOUND_BROKER = 'off';
+    expect(brokerConfig(root)).toBeNull();
+    delete process.env.STOREBOUND_BROKER;
+    expect(() => checkBrokerUrl('http://broker.example.com')).toThrow(/https only/);
+    // a profile that keeps its own key
+    const creds = join(tmp, 'credentials');
+    mkdirSync(creds, { recursive: true });
+    writeFileSync(join(creds, 'p1.json'), JSON.stringify({ broker: false }));
+    process.env.STOREBOUND_PROFILE = 'p1';
+    expect(brokerConfig(root)).toBeNull();
+  });
+
+  test('a broken broker.json is an error, not a silent skip', () => {
+    writeFileSync(join(tmp, 'broker.json'), '{ not json');
+    expect(() => brokerConfig(root)).toThrow(/broker\.json/);
+  });
+});
+
+describe('key file permissions', () => {
+  test('group / world readable refused on POSIX, accepted on Windows; the key is never in the message', () => {
+    writeBroker();
+    const cfg = brokerConfig(root)!;
+    if (process.platform !== 'win32') {
+      chmodSync(keyFile, 0o644);
+      expect(() => brokerKey(cfg)).toThrow(/chmod 600/);
+      chmodSync(keyFile, 0o600);
+      expect(brokerKey(cfg)).toBe(API_KEY);
+    } else {
+      // Windows reports 0o666 for every writable file: the POSIX rule is checked by naming the platform
+      let msg = '';
+      try { brokerKey(cfg, 'linux'); } catch (e) { msg = (e as Error).message; }
+      expect(msg).toMatch(/readable by group or others .*chmod 600/);
+      expect(msg).not.toContain(API_KEY);
+      expect(brokerKey(cfg, 'win32')).toBe(API_KEY);
+    }
+    rmSync(keyFile);
+    expect(() => brokerKey(cfg)).toThrow(/not found/);
+  });
+});
+
+describe('token minting', () => {
+  test('one mint, cached until 5 minutes before expiry, scoped request with the bearer key', async () => {
+    writeBroker();
+    const t = playToken(root);
+    expect(await t()).toBe('ya29.fake-1');
+    expect(await t()).toBe('ya29.fake-1');
+    expect(mints).toBe(1);
+    expect(t.source()).toBe('broker');
+    expect(t.principal()).toBe(ACCOUNT);
+    const mint = seen.find(s => s.path === '/api/google/token')!;
+    expect(mint.method).toBe('POST');
+    expect(mint.auth).toBe(`Bearer ${API_KEY}`);
+    expect(mint.body).toEqual({ account: ACCOUNT, scopes: ['androidpublisher'] });
+  });
+
+  test('parallel callers share one request (single flight)', async () => {
+    writeBroker();
+    route = async s => { await Bun.sleep(50); return defaultRoute(s); };
+    const t = playToken(root);
+    const all = await Promise.all(Array.from({ length: 6 }, () => t()));
+    expect(new Set(all)).toEqual(new Set(['ya29.fake-1']));
+    expect(mints).toBe(1);
+  });
+
+  test('a token close to expiry is minted again', async () => {
+    writeBroker();
+    const cfg = brokerConfig(root)!;
+    let clock = Date.now();
+    expect(await brokerToken(cfg, ACCOUNT, 'androidpublisher', () => clock)).toBe('ya29.fake-1');
+    clock += 3000_000; // 50 min later: 10 min left, still cached
+    expect(await brokerToken(cfg, ACCOUNT, 'androidpublisher', () => clock)).toBe('ya29.fake-1');
+    clock += 400_000; // under 5 min left
+    expect(await brokerToken(cfg, ACCOUNT, 'androidpublisher', () => clock)).toBe('ya29.fake-2');
+    expect(mints).toBe(2);
+  });
+
+  test('the account comes from the broker for the package when nothing names it', async () => {
+    writeBroker({ account: undefined });
+    const t = playToken(root, undefined, { packageName: PKG });
+    expect(await t()).toBe('ya29.fake-1');
+    expect((seen.find(s => s.path === '/api/google/token')!.body as { account: string }).account).toBe(ACCOUNT);
+  });
+
+  test('Reporting has no broker scope: the local key serves it, and without one the error says so', () => {
+    writeBroker();
+    expect(() => playToken(root, 'https://www.googleapis.com/auth/playdeveloperreporting')).toThrow(/hands out no such scope/);
+  });
+});
+
+describe('fallback to the local key', () => {
+  test('broker not answering: the local key, one warning, source "file"', async () => {
+    localKey();
+    fakeGoogle();
+    writeFileSync(join(tmp, 'broker.json'), JSON.stringify({ url: 'http://127.0.0.1:9', apiKeyFile: keyFile }));
+    process.env.STOREBOUND_BROKER_TIMEOUT_MS = '2000';
+    const warnings: string[] = [];
+    const t = playToken(root, undefined, { warn: m => warnings.push(m) });
+    expect(await t()).toBe('local-file-token');
+    expect(await t()).toBe('local-file-token');
+    expect(t.source()).toBe('file');
+    expect(warnings.length).toBe(1);
+    expect(warnings[0]).toMatch(/did not answer.*local service account key/);
+  });
+
+  test('broker 503: the local key', async () => {
+    localKey();
+    fakeGoogle();
+    writeBroker();
+    route = () => json({ error: 'down' }, 503);
+    const t = playToken(root, undefined, { warn: () => {} });
+    expect(await t()).toBe('local-file-token');
+  });
+
+  test('broker refusing the API key (401): no fallback, no retry, the key lacks google:token', async () => {
+    localKey();
+    fakeGoogle();
+    writeBroker();
+    route = () => json({ error: 'err_scope', echo: `Bearer ${API_KEY}` }, 401);
+    const t = playToken(root, undefined, { warn: () => {} });
+    const e = await t().then(() => null, x => x as Error);
+    expect(e).toBeInstanceOf(BrokerRefused);
+    expect(e!.message).toMatch(/lacks the google:token scope/);
+    expect(e!.message).not.toContain(API_KEY);
+    expect(seen.filter(s => s.path === '/api/google/token').length).toBe(1);
+  });
+
+  test('no broker: the local key as before; neither: the PLAY_SERVICE_ACCOUNT error', async () => {
+    expect(() => playToken(root)).toThrow(/PLAY_SERVICE_ACCOUNT is not set/);
+    localKey();
+    fakeGoogle();
+    const t = playToken(root);
+    expect(await t()).toBe('local-file-token');
+    expect(t.source()).toBe('file');
+    expect(seen.length).toBe(0);
+  });
+});
+
+describe('Play permissions from the broker', () => {
+  test('grants and APIs read; gaps name the permission, the API and their links', async () => {
+    writeBroker();
+    const r = await brokerPlayInfo(brokerConfig(root)!, PKG);
+    expect(r.kind).toBe('ok');
+    if (r.kind !== 'ok') return;
+    const gaps = playGaps(r.info, ['upload', 'listing', 'games']);
+    expect(gaps.map(g => g.name)).toEqual(['CAN_MANAGE_TRACK_APKS', 'gamesconfiguration.googleapis.com']);
+    expect(gaps[0]!.url).toBe('https://play.google.com/console/u/0/developers/5550000000000000001/users-and-permissions');
+    expect(gaps[0]!.fix).toMatch(/google_play_grant/);
+    expect(gaps[1]!.url).toBe('https://console.cloud.google.com/apis/library/gamesconfiguration.googleapis.com?project=sb-test-project');
+    // read once per run and package
+    await brokerPlayInfo(brokerConfig(root)!, PKG);
+    expect(seen.filter(s => s.path.endsWith('/storebound')).length).toBe(1);
+  });
+
+  test('404: register the package, not "no access"', async () => {
+    writeBroker();
+    const r = await brokerPlayInfo(brokerConfig(root)!, 'com.example.other');
+    expect(r.kind).toBe('not-registered');
+    if (r.kind === 'not-registered') expect(r.message).toMatch(/register the package .*not a missing Play access/);
+  });
+
+  test('preflight: a write stops before any Play call with the exact grant; a dry run only warns', async () => {
+    writeBroker();
+    const google = fakeGoogle();
+    const e = await playPreflight('play upload', root, PKG, { dry: false, warn: () => {} }).catch(x => x as Error);
+    expect(e).toBeInstanceOf(Error);
+    expect((e as Error).message).toMatch(/stopped before any call to Google Play/);
+    expect((e as Error).message).toMatch(/CAN_MANAGE_TRACK_APKS for com\.example\.game/);
+    const warned: string[] = [];
+    expect((await playPreflight('play upload', root, PKG, { dry: true, warn: m => warned.push(m) })).length).toBe(1);
+    expect(warned[0]).toMatch(/CAN_MANAGE_TRACK_APKS/);
+    // granted: nothing; a command without needs: nothing
+    expect(await playPreflight('play listing', root, PKG, { dry: false, warn: () => {} })).toEqual([]);
+    expect(await playPreflight('play status', root, PKG, { dry: false, warn: () => {} })).toEqual([]);
+    expect(google).toEqual([]);
+  });
+});
+
+describe('Google 403 guardrail', () => {
+  const DISABLED = `GET /edits -> 403 {"error":{"code":403,"message":"Google Play Android Developer API has not been used in project 100000000001 before or it is disabled.","status":"PERMISSION_DENIED","details":[{"reason":"SERVICE_DISABLED","metadata":{"service":"androidpublisher.googleapis.com","consumer":"projects/sb-test-project"}}]}}`;
+  test('SERVICE_DISABLED: the API and its enable link, never retried', async () => {
+    const e = await accessError(DISABLED, { app: PKG });
+    expect(e).toBeInstanceOf(GoogleAccessError);
+    expect(e!.noRetry).toBe(true);
+    expect(e!.message).toContain('https://console.cloud.google.com/apis/library/androidpublisher.googleapis.com?project=sb-test-project');
+  });
+
+  test('PERMISSION_DENIED through the Play client with broker tokens: one call, the grants the broker lists', async () => {
+    writeBroker();
+    const google = fakeGoogle(() => json({ error: { code: 403, message: 'The caller does not have permission', status: 'PERMISSION_DENIED' } }, 403));
+    const play = await playClient(root, PKG);
+    const e = await play.call('POST', `${play.API}/edits`, {}).then(() => null, x => x as Error);
+    expect(e).toBeInstanceOf(GoogleAccessError);
+    expect(google.length).toBe(1);
+    expect(e!.message).toMatch(/no access to com\.example\.game in Play Console/);
+    expect(e!.message).toMatch(/credential broker lists CAN_MANAGE_ORDERS, CAN_MANAGE_PUBLIC_LISTING/);
+    expect(play.credentialSource()).toBe('broker');
+  });
+});
+
+describe('no secret in output', () => {
+  test('redact removes tokens, bearer values and the key', () => {
+    expect(redact(`Authorization: Bearer ${API_KEY} token ya29.a0AfH6SM-x_y.z`, API_KEY)).toBe('Authorization: Bearer *** token ya29.***');
+  });
+
+  test('doctor and the credential summary carry the source, never the key or a token', async () => {
+    writeBroker();
+    await playToken(root)();
+    const p = playCredentials(root);
+    expect(p.source).toBe('broker');
+    const d = doctor(root);
+    const out = JSON.stringify(d) + playLine(d.play);
+    expect(d.play.source).toBe('broker');
+    expect(playLine(d.play)).toMatch(/tokens from the credential broker/);
+    expect(out).not.toContain(API_KEY);
+    expect(out).not.toContain('ya29.');
+    expect(out).not.toContain(ACCOUNT); // masked
+  });
+
+  test('a broker error body echoing the key or a token is redacted', async () => {
+    writeBroker();
+    route = () => new Response(`upstream failed for Bearer ${API_KEY} ya29.secret-token`, { status: 502 });
+    const e = await brokerToken(brokerConfig(root)! as BrokerConfig, ACCOUNT, 'androidpublisher').then(() => null, x => x as Error);
+    expect(e!.message).not.toContain(API_KEY);
+    expect(e!.message).not.toContain('ya29.secret-token');
+  });
+});
diff --git a/tests/helpers/preload.ts b/tests/helpers/preload.ts
index 9fe5d67..35c48f4 100644
--- a/tests/helpers/preload.ts
+++ b/tests/helpers/preload.ts
@@ -14,6 +14,10 @@ const machine = mkdtempSync(join(tmpdir(), 'storebound-machine-'));
 process.env.STOREBOUND_CREDENTIALS_DIR = join(machine, 'credentials');
 process.env.STOREBOUND_REGISTRY = join(machine, 'projects.json');
 process.env.STOREBOUND_LOCK_DIR = join(machine, 'locks');
+// the credential broker of this machine (~/.storebound/broker.json, cli/lib/broker.ts) is never asked either
+process.env.STOREBOUND_BROKER_CONFIG = join(machine, 'broker.json');
+delete process.env.STOREBOUND_BROKER_URL;
+delete process.env.STOREBOUND_BROKER_KEY_FILE;
 
 // Commands run in-process set process.exitCode on purpose (a check with problems, a declined confirmation:
 // DECLINED_EXIT in cli/lib/ctx.ts). Tests assert it where it matters; it must not leak into bun test's own exit code.

From b59665c6618093f26563914b59fde1d4affd1089 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 25 Oct 2026 23:18:12 +0700
Subject: [PATCH 164/255] storebound 0.8.50: version in package.json and every
 copy, CHANGELOG 0.8.50 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 4919deb..01cf4d6 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.49",
+      "version": "0.8.50",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 3c2fc7c..5852018 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 5f1e53c..2089618 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b7f477..e25097a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.50 · 2026-10-25
+
 - App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
 - New `storebound console plan apple-app-group [--bundle-id <id>] [--groups group.a,group.b] [--lookup]` (MCP `console_plan`: `bundleId`, `groups`, `lookup`): the agent-first developer portal plan to assign an App Group to an extension's App ID (start URL per bundle id resource id, portal labels, answer sheet per extension, never-press list: Remove / Delete / Revoke). Its final Save is the agent's own (`buttons.finalByAgent`: a capability edit, not a store submission). `console verify apple-app-group` (MCP `console_verify`, API only) re-reads the App ID and the newest profile and fails while a group is missing or cannot be proven.
 - Google access through a credential broker (`~/.storebound/broker.json`: `url`, `apiKeyFile`; env `STOREBOUND_BROKER_URL` / `STOREBOUND_BROKER_KEY_FILE`): Play tokens come from the broker's `POST /api/google/token` (in memory until 5 minutes before expiry, one request per account and scope, never logged; ya29. tokens and the API key redacted in errors), the local service account key stays the fallback when the broker does not answer or does not know the account; a broker that refuses the API key stops without retry. `PLAY_SERVICE_ACCOUNT_EMAIL` names the account (env, profile, project file); a profile opts out with `"broker": false`. The key file must be mode 600 on macOS / Linux. Play write commands read the package's Play permissions and enabled APIs from the broker first and stop before any Play call on a missing one (`CAN_MANAGE_TRACK_APKS`, `CAN_MANAGE_PUBLIC_LISTING`, `CAN_MANAGE_ORDERS`, `CAN_MANAGE_APP_CONTENT`, the Games Configuration API) with the exact permission or API and its link; `validate` lists them (gaps are blockers, SDK config drift a warning) and `--json` carries `credentials.play.source`; `doctor`, `accounts` and `apps check` / the desktop's Accounts view say whether tokens come from the broker or the key file. A Google 403 SERVICE_DISABLED / PERMISSION_DENIED in the Play client names the API or grant with its fix link and is never retried (pitfall 122, docs/credential-broker.md).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 62a3769..2b138a0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ba11a53..46fcc92 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.49"
+version = "0.8.50"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1611078..1c930f7 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.49"
+version = "0.8.50"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index ba5ad4f..87770a9 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index e4f2853..6a57412 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 7e841cd..a626f6b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.49",
+  "version": "0.8.50",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 5833776a4b00233327ba81848f0f9966799a0502 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 10:20:27 +0700
Subject: [PATCH 165/255] analytics and reports for a collector: store-only
 configs, --json snapshot, App Usage and Play install stock numbers, per-day
 sales ranges for both stores

---
 CHANGELOG.md                      |   4 +
 cli/analytics.ts                  |  47 ++++--
 cli/commands.ts                   |   4 +-
 cli/data/flags.json               |  11 +-
 cli/inspect.ts                    |   4 +-
 cli/lib/analytics.ts              |  89 +++++++++-
 cli/lib/config.ts                 |   5 +-
 cli/lib/credentials.ts            |  18 +-
 cli/lib/reports.ts                |  92 +++++++++++
 cli/mcp-tools.ts                  |   3 +-
 cli/reports.ts                    | 138 +++++++++++++---
 docs/commands.md                  |   4 +-
 skills/store-analytics/SKILL.md   |  26 ++-
 tests/analytics-collector.test.ts | 264 ++++++++++++++++++++++++++++++
 tests/analytics.test.ts           |   2 +-
 15 files changed, 651 insertions(+), 60 deletions(-)
 create mode 100644 tests/analytics-collector.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e25097a..1176b4d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
+- Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
+- `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
+
 ## 0.8.50 · 2026-10-25
 
 - App Groups fail early under automatic signing too: `apple signing status` / `ensure` and `apple build` read the App ID's APP_GROUPS capability settings and the newest profile the API lists for each bundle id (an Xcode-managed one too) and compare it with the target's `com.apple.security.application-groups`. A profile without the group (or the capability off) stops `signing ensure` and `apple build` before the archive with the exact portal steps (Certificates, Identifiers & Profiles > Identifiers > the ID > App Groups > Configure > tick the group > Continue > Save), the deep link `.../identifiers/bundleId/edit/<resource id>`, the plan command and `signing ensure --refresh-profile`; a group nothing can prove only warns with the same steps. `apple build --allow-app-group-gap` overrides.
diff --git a/cli/analytics.ts b/cli/analytics.ts
index f6f3f83..9ca6b63 100644
--- a/cli/analytics.ts
+++ b/cli/analytics.ts
@@ -1,23 +1,27 @@
 // Store analytics snapshots next to the listing changes.
 //   storebound analytics setup [--dry]                         App Store: create the ONGOING analytics report request (Admin key; once)
-//   storebound analytics snapshot [--days 28] [--store apple|play] [--dry]   -> .storebound/analytics/<date>.json
+//   storebound analytics snapshot [--days 28] [--store apple|play] [--dry] [--json] [--no-write]   -> .storebound/analytics/<date>.json
+//     --json prints the snapshot as one JSON document on stdout (the file is still written unless --no-write or --dry)
 //   storebound analytics compare [--days 7] [--paths store,storebound.config.ts] [--md]
 // App Store: Analytics Reports API (Discovery and Engagement: impressions, product page views; Downloads: first-time
 // downloads and redownloads), every segment checked against its md5 checksum. Google Play has no statistics API:
 // the monthly CSV exports in your Cloud Storage bucket (play.reportsBucket = "pubsite_prod_rev_<id>", Play Console >
 // Download reports > Statistics > Copy Cloud Storage URI) are read with the service account (store listing visitors,
-// acquisitions, daily user installs). compare lines the snapshots up with the git history of the store files (listing
+// acquisitions, daily user installs, active device installs, total user installs). App Usage (App Store: sessions, active
+// devices, crashes per day from the App Sessions and App Crashes reports). A store-only config needs no play.reportsBucket
+// (env PLAY_REPORTS_BUCKET or the profile's reportsBucket) and no apple.bundleId (apple.appId is enough). compare lines the snapshots up with the git history of the store files (listing
 // text, screenshots, config): the days before vs after each change. Read-only on both stores except `setup`.
 import { consoleLink } from './lib/console-links';
 import { storeReadError } from './lib/google-errors';
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { createOnce } from './lib/upsert';
+import { playReportsBucket } from './lib/credentials';
 import { ascClient, type Asc, type J } from './apple/asc';
 import type { Ctx } from './lib/ctx';
 import {
   type AppleDay, APPLE_REPORTS, appleDaily, appleTotals, bucketName, checksumOk, compareAroundEvents, decodeText, effectMarkdown, effectTable, inWindow,
-  latestPerDate, mergeSeries, monthsBetween, snapshotProblem, storeErrors, parseGitLog, parseReport, pickReport, type PlayDay, playDaily, playObjects, playTotals, type Snapshot,
+  latestPerDate, mergeAppleUsage, mergeSeries, monthsBetween, snapshotProblem, storeErrors, parseGitLog, parseReport, pickReport, type PlayDay, playDaily, playObjects, playTotals, type Snapshot,
 } from './lib/analytics';
 import { STORAGE_READ_SCOPE } from './lib/google-auth';
 import { done, log, printJson, warn } from './lib/log';
@@ -55,9 +59,9 @@ async function reportRows(c: Asc, report: J, start: string, tag: string): Promis
   return latestPerDate(parts);
 }
 
-async function appleSnapshot(ctx: Ctx, start: string, end: string): Promise<{ daily: AppleDay[] }> {
+async function appleSnapshot(ctx: Ctx, start: string, end: string): Promise<{ daily: AppleDay[]; notes: string[] }> {
   const { config, root } = ctx.loaded;
-  const c = await ascClient(root, config.apple!.bundleId, config.apple?.appId);
+  const c = await ascClient(root, config.apple!.bundleId ?? '', config.apple?.appId);
   const appId = await c.app();
   const req = await ongoingRequest(c, appId);
   if (!req) throw new Error('no active ONGOING analytics report request: run storebound analytics setup (Admin key), data starts 1-2 days later');
@@ -65,25 +69,36 @@ async function appleSnapshot(ctx: Ctx, start: string, end: string): Promise<{ da
   const eng = pickReport(reports.filter(r => r.attributes?.category === APPLE_REPORTS.engagement.category), APPLE_REPORTS.engagement.match);
   const dl = pickReport(reports.filter(r => r.attributes?.category === APPLE_REPORTS.downloads.category), APPLE_REPORTS.downloads.match);
   if (!eng || !dl) throw new Error(`reports not found yet (${reports.length} listed): wait a day after setup`);
-  const daily = appleDaily(await reportRows(c, eng, start, eng.attributes.name), await reportRows(c, dl, start, dl.attributes.name));
-  return { daily: inWindow(daily, start, end) };
+  let daily = appleDaily(await reportRows(c, eng, start, eng.attributes.name), await reportRows(c, dl, start, dl.attributes.name));
+  // App Usage is optional: a team whose request predates the usage reports, or whose usage reports are not out yet, still gets the rest
+  const notes: string[] = [];
+  const usage = (m: { category: string; match: RegExp }) => pickReport(reports.filter(r => r.attributes?.category === m.category), m.match);
+  const ses = usage(APPLE_REPORTS.sessions), cr = usage(APPLE_REPORTS.crashes);
+  if (ses || cr) {
+    try {
+      daily = mergeAppleUsage(daily, ses ? await reportRows(c, ses, start, ses.attributes.name) : [], cr ? await reportRows(c, cr, start, cr.attributes.name) : []);
+      if (!ses || !cr) notes.push(`App Usage: the ${ses ? 'App Crashes' : 'App Sessions'} report is not listed yet`);
+    } catch (e) { notes.push(`App Usage not read: ${storeReadError((e as Error).message).error.slice(0, 200)}`); }
+  } else notes.push('App Usage: the App Sessions / App Crashes reports are not listed yet (they appear a day or two after the first report)');
+  for (const n of notes) warn(TAG, `apple: ${n}`);
+  return { daily: inWindow(daily, start, end), notes };
 }
 
 async function playSnapshot(ctx: Ctx, start: string, end: string): Promise<{ daily: PlayDay[] }> {
   const { config, root } = ctx.loaded;
-  const bucket = config.play?.reportsBucket;
-  if (!bucket) throw new Error(`play.reportsBucket is not set (${consoleLink('play.reports-statistics', '> Copy Cloud Storage URI')})`);
+  const bucket = playReportsBucket(root, config.play?.reportsBucket);
+  if (!bucket) throw new Error(`play.reportsBucket is not set (env PLAY_REPORTS_BUCKET or the credential profile's reportsBucket also work; ${consoleLink('play.reports-statistics', '> Copy Cloud Storage URI')})`);
   const g = googleClient(root, STORAGE_READ_SCOPE);
-  const sp: Record<string, string>[] = [], inst: Record<string, string>[] = [];
+  const sp: Record<string, string>[] = [], inst: Record<string, string>[] = [], ov: Record<string, string>[] = [];
   for (const month of monthsBetween(start, end)) {
     const o = playObjects(config.play!.packageName, month);
-    for (const [name, into] of [[o.storePerformance, sp], [o.installs, inst]] as const) {
+    for (const [name, into] of [[o.storePerformance, sp], [o.installs, inst], [o.installsOverview, ov]] as const) {
       const url = `https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o/${encodeURIComponent(name)}?alt=media`;
       try { into.push(...parseReport(decodeText(await g.bytes(url)))); log(TAG, `play: ${name}`); }
       catch (e) { if (/-> 404/.test(String(e))) warn(TAG, `play: ${name} not there (yet)`); else throw e; }
     }
   }
-  return { daily: inWindow(playDaily(sp, inst), start, end) };
+  return { daily: inWindow(playDaily(sp, inst, ov), start, end) };
 }
 
 function readSnapshots(dir: string): Snapshot[] {
@@ -100,7 +115,7 @@ export async function run(ctx: Ctx): Promise<void> {
 
   if (sub === 'setup') {
     if (!config.apple) throw new Error('no apple section in the config (Google Play needs no setup: set play.reportsBucket)');
-    const c = await ascClient(root, config.apple.bundleId, config.apple.appId);
+    const c = await ascClient(root, config.apple.bundleId ?? '', config.apple.appId);
     const appId = await c.app();
     const cur = await ongoingRequest(c, appId);
     if (cur) { done(TAG, `apple: ONGOING report request exists (${cur.id})`); return; }
@@ -121,20 +136,24 @@ export async function run(ctx: Ctx): Promise<void> {
     const end = day(new Date(now.getTime() - 86_400_000)), start = day(new Date(now.getTime() - days * 86_400_000));
     const snap: Snapshot = { date: day(now), window: { start, end, days } };
     if ((!store || store === 'apple') && config.apple) {
-      try { const r = await appleSnapshot(ctx, start, end); snap.apple = { daily: r.daily, totals: appleTotals(r.daily) }; }
+      try { const r = await appleSnapshot(ctx, start, end); snap.apple = { daily: r.daily, totals: appleTotals(r.daily), ...(r.notes.length ? { notes: r.notes } : {}) }; }
       catch (e) { snap.apple = { error: storeReadError((e as Error).message).error.slice(0, 400) }; warn(TAG, `apple: ${snap.apple.error}`); }
     }
     if ((!store || store === 'play') && config.play) {
       try { const r = await playSnapshot(ctx, start, end); snap.play = { daily: r.daily, totals: playTotals(r.daily) }; }
       catch (e) { snap.play = { error: storeReadError((e as Error).message, { app: config.play.packageName }).error.slice(0, 400) }; warn(TAG, `play: ${snap.play.error}`); }
     }
+    const json = a.has('json');
     const rows: (string | number)[][] = [];
     if (snap.apple && !('error' in snap.apple)) { const t = snap.apple.totals; rows.push(['apple', `${t.impressions} impressions`, `${t.pageViews} page views`, `${t.downloads} downloads`, pct(t.conversion ?? null)]); }
     if (snap.play && !('error' in snap.play)) { const t = snap.play.totals; rows.push(['play', `${t.visitors} visitors`, `${t.acquisitions} acquisitions`, `${t.installs} installs`, pct(t.conversion ?? null)]); }
     if (rows.length) console.log(textTable(['store', 'reach', 'interest', 'installs', 'conversion'], rows));
     const file = join(dir, `${snap.date}.json`);
     const problem = snapshotProblem(snap);
+    // --json: the collector gets the document (with each store's error) on stdout even when nothing could be read; the exit code still says it failed
+    if (json) printJson(snap);
     if (problem) throw new Error(`no store data, nothing written (${problem})`);
+    if (a.has('no-write')) { done(TAG, `snapshot ${start} to ${end} (not written: --no-write)`); return; }
     if (dry) { done(TAG, `dry run: would write ${file} (${start} to ${end})`); return; }
     mkdirSync(dir, { recursive: true });
     writeFileSync(file, JSON.stringify(snap, null, 2) + '\n');
diff --git a/cli/commands.ts b/cli/commands.ts
index 01665de..949dd4e 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -35,12 +35,12 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'check': [() => import('./check'), 'validate config, copy files, data safety answers, products, subscriptions and the app profile (offline); --aso keyword audit'],
   'validate': [() => import('./validate'), 'read-only store readiness report with ordered blockers (--apple / --play), plus local renders checks (--no-local skips); exit 1 on blockers'],
   'report': [() => import('./report'), 'shareable store readiness report: scan + check + validate (read-only; only the stores with credentials, else it says why) in one self-contained HTML page .storebound/reports/readiness-<date>.html, opened in the browser; --out <file>, --md, --json, --no-open, --offline'],
-  'analytics': [() => import('./analytics'), 'setup (App Store report request) | snapshot (impressions, page views, installs, conversion -> .storebound/analytics) | compare (vs listing changes in git)'],
+  'analytics': [() => import('./analytics'), 'setup (App Store report request) | snapshot (impressions, page views, installs, App Usage, conversion -> .storebound/analytics; --json prints it) | compare (vs listing changes in git)'],
   'health': [() => import('./health'), 'crash / ANR vitals (Play) and diagnostics (App Store), read-only; --weekly writes a markdown report; exit 1 over a threshold'],
   'art': [() => import('./art'), 'pull [--store apple|play] [--write] [--force]: the live store art (App Store screenshot sets, previews, icon; Play icon, feature graphic, screenshots per language) into store/renders + pulled.json, so checks and uploads treat it like rendered art (upsert; differing local files kept without --force; read-only on the stores) | live [--json]: the live art with thumbnails | replace --from <file> --to <path>: one image of the app folder'],
   'onboard': [() => import('./onboard'), 'an app that is already live: the live products + subscriptions with their USD / base prices, contact e-mail, website, privacy and support URLs, the App Review contact and demo account, sign-in for review and the account deletion page, from the stores, the code and the app\'s site -> config and .storebound/credentials.json (--write; read-only on the stores, never changes store prices); then the owner questions nothing proves'],
   'catalog': [() => import('./catalog'), 'diff: cross-store parity of products + subscriptions (missing / extra / mismatched, prices per region, offers); read-only, exit 1 on mismatches | pull [--write]: store texts of IAPs + subscriptions as a config proposal'],
-  'reports': [() => import('./reports'), 'apple-sales | apple-finance --month | play-earnings --month | play-sales --month: download to .storebound/reports/, summary table + CSV; read-only'],
+  'reports': [() => import('./reports'), 'apple-sales | apple-finance --month | play-earnings --month | play-sales --month: download to .storebound/reports/, summary table + CSV; apple-sales and play-sales also --days N | --from/--to (per-day JSON); read-only'],
   'triage': [() => import('./triage'), 'TestFlight crash / screenshot feedback and Play error reports grouped by signature, device, OS version, build; read-only, --json'],
   'aso': [() => import('./aso'), 'rank | competitors | suggest | audit: App Store ranks, top apps per keyword, keyword field proposals (Apple Ads popularity with credentials) and one ASO report, from the public iTunes Search API -> .storebound/aso/'],
   'prices': [() => import('./prices'), 'export | import a CSV of product x store x region prices (diff first, asks before writing; Apple future-dated changes) | ppp --base <USD> (purchasing power price sheet, snapped to store price points)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 88b6faf..7a49ac1 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -38,6 +38,7 @@
    "days",
    "dir",
    "md",
+   "no-write",
    "paths",
    "store"
   ],
@@ -908,11 +909,14 @@
   "reports": [
    "csv",
    "date",
+   "days",
    "detail",
    "frequency",
+   "from",
    "month",
    "out",
    "region",
+   "to",
    "type",
    "vendor"
   ],
@@ -1282,6 +1286,7 @@
    "no-variants",
    "no-wait",
    "no-web",
+   "no-write",
    "not-sent-for-review",
    "notify",
    "off",
@@ -1421,7 +1426,7 @@
   ],
   "analytics": [
    "storebound analytics setup [--dry]                         App Store: create the ONGOING analytics report request (Admin key; once)",
-   "storebound analytics snapshot [--days 28] [--store apple|play] [--dry]   -> .storebound/analytics/<date>.json",
+   "storebound analytics snapshot [--days 28] [--store apple|play] [--dry] [--json] [--no-write]   -> .storebound/analytics/<date>.json",
    "storebound analytics compare [--days 7] [--paths store,storebound.config.ts] [--md]"
   ],
   "api": [
@@ -1718,7 +1723,9 @@
    "storebound reports apple-sales [--type SALES] [--frequency DAILY|WEEKLY|MONTHLY|YEARLY] [--date ...] [--vendor N]",
    "storebound reports apple-finance --month YYYY-MM [--detail] [--region ZZ] [--vendor N]",
    "storebound reports play-earnings --month YYYY-MM",
-   "storebound reports play-sales --month YYYY-MM"
+   "storebound reports play-sales --month YYYY-MM",
+   "storebound reports apple-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json     (daily SALES reports)",
+   "storebound reports play-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json      (per order-charged date and currency)"
   ],
   "revenuecat": [
    "storebound revenuecat diff [--json]                    read-only parity report; exit 1 when out of sync",
diff --git a/cli/inspect.ts b/cli/inspect.ts
index e3313d9..12b65fc 100644
--- a/cli/inspect.ts
+++ b/cli/inspect.ts
@@ -10,7 +10,7 @@ import { existsSync, readFileSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { platformsOf, playCategoryOf, profileOf, sellsOn } from './lib/config';
 import type { Ctx } from './lib/ctx';
-import { maskUser, reviewContact, reviewDemoAccount } from './lib/credentials';
+import { credentialValue, maskUser, reviewContact, reviewDemoAccount } from './lib/credentials';
 import { DATA_SAFETY_UPLOADED, declarations } from './lib/declarations';
 import type { ProjectSummary } from './lib/desktop-protocol';
 import { log, printJson } from './lib/log';
@@ -42,7 +42,7 @@ export function summarize(ctx: Ctx): ProjectSummary {
     profile: profileOf(config),
     icon: findIcon(config, root),
     variants: Object.keys(config.shots?.variants ?? {}),
-    playReports: !!config.play?.reportsBucket,
+    playReports: !!config.play?.reportsBucket || !!credentialValue(root, 'PLAY_REPORTS_BUCKET'),
     playRelease: config.play ? { managedPublishing: config.play.managedPublishing ?? null, countries: config.play.countries?.length ?? null, category: playCategoryOf(config)?.category ?? null } : null,
     games: config.games ? { gameCenter: config.games.gameCenter === true, playGames: !!config.games.playGames, leaderboards: config.games.leaderboards?.length ?? 0, achievements: config.games.achievements?.length ?? 0 } : null,
   };
diff --git a/cli/lib/analytics.ts b/cli/lib/analytics.ts
index d51f895..90d99fb 100644
--- a/cli/lib/analytics.ts
+++ b/cli/lib/analytics.ts
@@ -23,6 +23,10 @@ import { mdTable, pct, textTable } from './table';
 export const APPLE_REPORTS = {
   engagement: { category: 'APP_STORE_ENGAGEMENT', match: /discovery and engagement/i },
   downloads: { category: 'COMMERCE', match: /download/i },
+  // App Usage (Analytics Reports API category APP_USAGE): App Sessions (Sessions, Total Session Duration, Unique Devices) and
+  // App Crashes (Crashes, Unique Devices), per day, version, device, platform version and territory
+  sessions: { category: 'APP_USAGE', match: /app sessions/i },
+  crashes: { category: 'APP_USAGE', match: /app crashes/i },
 } as const;
 
 /** Standard over Detailed (Detailed adds noise for privacy and splits by campaign). */
@@ -54,8 +58,16 @@ export function latestPerDate(instances: { processingDate: string; rows: Record<
   return instances.flatMap(i => i.rows.filter(r => best.get(r.date ?? '') === i.processingDate));
 }
 
-export interface AppleDay { date: string; impressions: number; uniqueImpressions: number; pageViews: number; uniquePageViews: number; downloads: number; firstTimeDownloads: number }
-export interface PlayDay { date: string; visitors: number; acquisitions: number; installs: number }
+export interface AppleDay {
+  date: string; impressions: number; uniqueImpressions: number; pageViews: number; uniquePageViews: number; downloads: number; firstTimeDownloads: number;
+  /** App Usage (only when the App Sessions / App Crashes reports have the day): app sessions, active devices (sum of the
+   *  rows' Unique Devices: a device seen in two rows, e.g. two app versions, counts twice), total session time in
+   *  seconds, crashes. */
+  sessions?: number; activeDevices?: number; sessionSeconds?: number; crashes?: number;
+}
+/** installs = Daily User Installs. The two stock numbers are Play's own columns: devices with the app installed that
+ *  were active in the last 30 days (Active Device Installs) and all users who ever installed it (Total User Installs). */
+export interface PlayDay { date: string; visitors: number; acquisitions: number; installs: number; activeDeviceInstalls?: number; totalUserInstalls?: number }
 
 const num = (v: string | undefined) => { const n = Number((v ?? '').replace(/,/g, '')); return Number.isFinite(n) ? n : 0; };
 
@@ -80,12 +92,50 @@ export function appleDaily(engagement: Record<string, string>[], downloads: Reco
   return [...days.values()].sort((a, b) => a.date.localeCompare(b.date));
 }
 
-/** Play store performance + installs CSV rows (country files) -> one line per day. Dates are YYYY-MM-DD. */
-export function playDaily(storePerformance: Record<string, string>[], installs: Record<string, string>[]): PlayDay[] {
+/** App Sessions + App Crashes rows -> App Usage fields per day, merged into the days (a day only in the usage reports
+ *  becomes a day with zero impressions and downloads). Sessions' Unique Devices are the active devices of the day. */
+export function mergeAppleUsage(daily: AppleDay[], sessions: Record<string, string>[], crashes: Record<string, string>[]): AppleDay[] {
+  const days = new Map(daily.map(d => [d.date, { ...d }]));
+  const day = (d: string) => days.get(d) ?? days.set(d, { date: d, impressions: 0, uniqueImpressions: 0, pageViews: 0, uniquePageViews: 0, downloads: 0, firstTimeDownloads: 0 }).get(d)!;
+  for (const r of sessions) {
+    if (!r.date) continue;
+    const x = day(r.date);
+    x.sessions = (x.sessions ?? 0) + num(r.sessions);
+    x.activeDevices = (x.activeDevices ?? 0) + num(r.unique_devices);
+    x.sessionSeconds = (x.sessionSeconds ?? 0) + num(r.total_session_duration);
+  }
+  for (const r of crashes) {
+    if (!r.date) continue;
+    const x = day(r.date);
+    x.crashes = (x.crashes ?? 0) + num(r.crashes ?? r.counts);
+  }
+  return [...days.values()].sort((a, b) => a.date.localeCompare(b.date));
+}
+
+/** Play store performance + installs CSV rows (country files) -> one line per day. Dates are YYYY-MM-DD. The stock
+ *  columns (Active Device Installs, Total User Installs) come from the overview rows when given (all countries in one
+ *  row per day), else from the country rows summed. */
+export function playDaily(storePerformance: Record<string, string>[], installs: Record<string, string>[], overview: Record<string, string>[] = []): PlayDay[] {
   const days = new Map<string, PlayDay>();
   const day = (d: string) => days.get(d) ?? days.set(d, { date: d, visitors: 0, acquisitions: 0, installs: 0 }).get(d)!;
   for (const r of storePerformance) if (r.date) { const x = day(r.date); x.visitors += num(r.store_listing_visitors); x.acquisitions += num(r.store_listing_acquisitions); }
   for (const r of installs) if (r.date) day(r.date).installs += num(r.daily_user_installs);
+  const stock = (rows: Record<string, string>[]) => {
+    const m = new Map<string, { active?: number; total?: number }>();
+    for (const r of rows) {
+      if (!r.date) continue;
+      const x = m.get(r.date) ?? m.set(r.date, {}).get(r.date)!;
+      if (r.active_device_installs !== undefined && r.active_device_installs !== '') x.active = (x.active ?? 0) + num(r.active_device_installs);
+      if (r.total_user_installs !== undefined && r.total_user_installs !== '') x.total = (x.total ?? 0) + num(r.total_user_installs);
+    }
+    return m;
+  };
+  const fromCountries = stock(installs), fromOverview = stock(overview);
+  for (const [date, x] of (fromOverview.size ? fromOverview : fromCountries)) {
+    const d = day(date);
+    if (x.active !== undefined) d.activeDeviceInstalls = x.active;
+    if (x.total !== undefined) d.totalUserInstalls = x.total;
+  }
   return [...days.values()].sort((a, b) => a.date.localeCompare(b.date));
 }
 
@@ -101,29 +151,50 @@ export function monthsBetween(start: string, end: string): string[] {
 export const playObjects = (pkg: string, month: string) => ({
   storePerformance: `stats/store_performance/store_performance_${pkg}_${month}_country.csv`,
   installs: `stats/installs/installs_${pkg}_${month}_country.csv`,
+  installsOverview: `stats/installs/installs_${pkg}_${month}_overview.csv`,
 });
 
 /** "gs://pubsite_prod_rev_123/" or "pubsite_prod_rev_123" -> bucket name. */
 export const bucketName = (b: string): string => b.replace(/^gs:\/\//, '').replace(/\/.*$/, '');
 
-export interface Totals { impressions?: number; pageViews?: number; downloads?: number; conversion?: number | null; visitors?: number; acquisitions?: number; installs?: number }
+export interface Totals {
+  impressions?: number; pageViews?: number; downloads?: number; conversion?: number | null; visitors?: number; acquisitions?: number; installs?: number;
+  /** App Usage: sessions and crashes summed, active devices as the mean of the days that have usage data. */
+  sessions?: number; crashes?: number; activeDevicesAvg?: number;
+  /** Play stock numbers: the value of the newest day that has one (never summed). */
+  activeDeviceInstalls?: number; totalUserInstalls?: number;
+}
 
 export function appleTotals(days: AppleDay[]): Totals {
   const s = (k: keyof AppleDay) => days.reduce((n, d) => n + (d[k] as number), 0);
   const uniq = s('uniqueImpressions');
-  return { impressions: s('impressions'), pageViews: s('pageViews'), downloads: s('downloads'), conversion: uniq ? s('downloads') / uniq : null };
+  const t: Totals = { impressions: s('impressions'), pageViews: s('pageViews'), downloads: s('downloads'), conversion: uniq ? s('downloads') / uniq : null };
+  const used = days.filter(d => d.sessions !== undefined || d.crashes !== undefined);
+  if (used.length) {
+    t.sessions = used.reduce((n, d) => n + (d.sessions ?? 0), 0);
+    t.crashes = used.reduce((n, d) => n + (d.crashes ?? 0), 0);
+    const act = used.filter(d => d.activeDevices !== undefined);
+    if (act.length) t.activeDevicesAvg = Math.round(act.reduce((n, d) => n + d.activeDevices!, 0) / act.length);
+  }
+  return t;
 }
 export function playTotals(days: PlayDay[]): Totals {
   const s = (k: keyof PlayDay) => days.reduce((n, d) => n + (d[k] as number), 0);
   const v = s('visitors');
-  return { visitors: v, acquisitions: s('acquisitions'), installs: s('installs'), conversion: v ? s('acquisitions') / v : null };
+  const t: Totals = { visitors: v, acquisitions: s('acquisitions'), installs: s('installs'), conversion: v ? s('acquisitions') / v : null };
+  const last = (k: 'activeDeviceInstalls' | 'totalUserInstalls') => [...days].reverse().find(d => d[k] !== undefined)?.[k];
+  const a = last('activeDeviceInstalls'), tot = last('totalUserInstalls');
+  if (a !== undefined) t.activeDeviceInstalls = a;
+  if (tot !== undefined) t.totalUserInstalls = tot;
+  return t;
 }
 
 export interface Snapshot {
   date: string;
   window: { start: string; end: string; days: number };
-  apple?: { daily: AppleDay[]; totals: Totals } | { error: string };
-  play?: { daily: PlayDay[]; totals: Totals } | { error: string };
+  /** notes: what is missing but not fatal (e.g. the App Usage reports are not listed yet). */
+  apple?: { daily: AppleDay[]; totals: Totals; notes?: string[] } | { error: string };
+  play?: { daily: PlayDay[]; totals: Totals; notes?: string[] } | { error: string };
 }
 
 /**
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index e0a52fb..6fb69c8 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -658,6 +658,7 @@ export interface ShipConfig {
     billingPrograms?: ('user-choice-billing' | 'alternative-billing' | 'external-offers' | 'external-content-links')[];
   };
   apple?: {
+    /** Absent / null only in a store-only config with apple.appId (analytics and reports reads); every write needs it. */
     bundleId: string; appId?: string; primaryLocale?: string; listing?: string; info?: AppleAppInfo; reviewShots?: string;
     /** App Store name in the primary locale (at most 30 characters) when it differs from app.name, e.g. because the plain
      *  name is taken on the App Store ("STAR DASH: Stone Age to 2100"). Default app.name. A `### name` block in the
@@ -1189,7 +1190,9 @@ export function validateConfig(c: unknown): string[] {
   if (cfg.play?.billingPrograms !== undefined && !(Array.isArray(cfg.play.billingPrograms) && cfg.play.billingPrograms.every(b => (PLAY_BILLING_PROGRAMS as readonly string[]).includes(b))))
     e.push(`play.billingPrograms: a list of ${PLAY_BILLING_PROGRAMS.join(' | ')}`);
   if (cfg.apple) {
-    if (!ID_RE.test(cfg.apple.bundleId ?? '')) e.push('apple.bundleId: not a bundle id (com.example.game)');
+    // a store-only config for reads (analytics, reports) may name the app by apple.appId alone: bundleId null / absent
+    const idOnly = cfg.apple.bundleId == null && /^\d+$/.test(cfg.apple.appId ?? '');
+    if (!idOnly && !ID_RE.test(cfg.apple.bundleId ?? '')) e.push('apple.bundleId: not a bundle id (com.example.game)');
     const an = cfg.apple.name;
     if (an !== undefined && (typeof an !== 'string' || !an.trim())) e.push('apple.name: the App Store name (text), or leave it out to use app.name');
     else if (an !== undefined && [...an].length > APPLE_NAME_MAX) e.push(`apple.name: ${[...an].length} characters > ${APPLE_NAME_MAX} (App Store limit)`);
diff --git a/cli/lib/credentials.ts b/cli/lib/credentials.ts
index ddbbe09..b3fe947 100644
--- a/cli/lib/credentials.ts
+++ b/cli/lib/credentials.ts
@@ -20,7 +20,7 @@
 //      The demo account for App Review can also come from env: REVIEW_DEMO_USER, REVIEW_DEMO_PASSWORD.
 //   4. the default profile (none named): store keys only
 //   5. ASC_P8 only: ~/.appstoreconnect/private_keys/AuthKey_<ASC_KEY_ID>.p8 (where Xcode / altool keep it)
-// A profile file: { "ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_P8", "PLAY_SERVICE_ACCOUNT", "ASC_VENDOR_NUMBER", "label"? };
+// A profile file: { "ASC_KEY_ID", "ASC_ISSUER_ID", "ASC_P8", "PLAY_SERVICE_ACCOUNT", "ASC_VENDOR_NUMBER", "reportsBucket"?, "label"? };
 // with a credential broker (cli/lib/broker.ts) Play needs no key file: "PLAY_SERVICE_ACCOUNT_EMAIL" names the account
 // the broker mints tokens for, and "broker": false keeps a profile on its local key.
 // key paths relative to the credentials folder (`accounts import` puts the key files in <name>/, mode 0600), or env
@@ -46,7 +46,7 @@ function fileStore(root: string): Store {
 export function credentialValue(root: string, name: string): string | undefined { return value(root, name); }
 /** The store credential names a profile holds (the same as the env names): per developer account, so the vendor number
  *  for reports too; an app's Android upload keystore stays in the project. */
-export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID', 'PLAY_SERVICE_ACCOUNT_EMAIL'] as const;
+export const PROFILE_KEYS = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8', 'ASC_VENDOR_NUMBER', 'PLAY_DEVELOPER_ID', 'PLAY_SERVICE_ACCOUNT_EMAIL', 'PLAY_REPORTS_BUCKET'] as const;
 export const PROFILE_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 
 export const profileDir = (): string => process.env.STOREBOUND_CREDENTIALS_DIR || join(homedir(), '.storebound', 'credentials');
@@ -66,7 +66,9 @@ export function profileEnv(profile: string): Record<string, string> {
   const out: Record<string, string> = {};
   for (const k of PROFILE_KEYS) {
     const env = process.env[profileEnvName(profile, k)];
-    const v = env || (typeof stored[k] === 'string' ? stored[k] as string : '');
+    // PLAY_REPORTS_BUCKET is also the profile field `reportsBucket` (a bucket name, not a secret)
+    const own = stored[k] ?? (k === 'PLAY_REPORTS_BUCKET' ? stored.reportsBucket : undefined);
+    const v = env || (typeof own === 'string' ? own : '');
     if (!v) continue;
     // a path in the file: relative to the profile folder (inline JSON / PEM stays as it is)
     const isPath = !env && !/^\s*\{/.test(v) && !/BEGIN PRIVATE KEY/.test(v) && (k === 'PLAY_SERVICE_ACCOUNT' || k === 'ASC_P8');
@@ -346,6 +348,16 @@ export function ascVendorNumber(root: string): string | null {
   return v && /^\d{5,12}$/.test(v.trim()) ? v.trim() : null;
 }
 
+/** The Play reports bucket (analytics statistics, sales / earnings reports): play.reportsBucket of the config, else env
+ *  PLAY_REPORTS_BUCKET, else the credential profile's `reportsBucket` (a store-only config has no play.reportsBucket).
+ *  Null when none is set; a value that is not a Play reports bucket throws (a bucket name is not a secret). */
+export function playReportsBucket(root: string, fromConfig?: string): string | null {
+  const v = (fromConfig ?? value(root, 'PLAY_REPORTS_BUCKET') ?? '').trim();
+  if (!v) return null;
+  if (!/^(gs:\/\/)?pubsite_prod(_rev)?_\d+\/?$/.test(v)) throw new Error(`reports bucket "${v}": the Play reports bucket, e.g. "pubsite_prod_rev_<number>" (play.reportsBucket, env PLAY_REPORTS_BUCKET or the profile field reportsBucket)`);
+  return v;
+}
+
 /** Credential paths that do not exist (a machine move left another computer's absolute paths) and an upload keystore
  *  the stored password / alias do not open: each names the field. `keytool` runs only when it is on PATH. */
 export function credentialFileIssues(root: string, run: (argv: string[]) => { ok: boolean; out: string } | null = keytool): string[] {
diff --git a/cli/lib/reports.ts b/cli/lib/reports.ts
index c922945..0a99dce 100644
--- a/cli/lib/reports.ts
+++ b/cli/lib/reports.ts
@@ -148,3 +148,95 @@ export const parsePlayCsv = (text: string): Record<string, string>[] => {
   const keys = head.map(h => h.trim());
   return rest.map(r => Object.fromEntries(keys.map((k, i) => [k, (r[i] ?? '').trim()])));
 };
+
+// ---- day ranges (a collector reads N days in one JSON) ----
+
+const DAY_RE = /^\d{4}-\d{2}-\d{2}$/;
+const addDay = (d: string, n: number): string => new Date(Date.parse(`${d}T00:00:00Z`) + n * 86_400_000).toISOString().slice(0, 10);
+export const MAX_RANGE_DAYS = 366;
+
+/** Every date from..to inclusive (YYYY-MM-DD). Pure. */
+export function dateRange(from: string, to: string): string[] {
+  const out: string[] = [];
+  for (let d = from; d <= to; d = addDay(d, 1)) out.push(d);
+  return out;
+}
+
+/**
+ * --days N (the N days ending yesterday) or --from/--to (inclusive; --to defaults to yesterday): the dates to read, or
+ * null when none of the three is given. Daily reports of both stores come out the next day, so the newest day may be
+ * missing; that is reported, not an error. Pure.
+ */
+export function reportRange(o: { days?: string; from?: string; to?: string }, now = new Date()): { from: string; to: string; dates: string[] } | null {
+  if (o.days === undefined && o.from === undefined && o.to === undefined) return null;
+  if (o.days !== undefined && (o.from !== undefined || o.to !== undefined)) throw new Error('--days or --from/--to, not both');
+  const yesterday = addDay(now.toISOString().slice(0, 10), -1);
+  let from: string, to: string;
+  if (o.days !== undefined) {
+    const n = Number(o.days);
+    if (!Number.isInteger(n) || n < 1 || n > MAX_RANGE_DAYS) throw new Error(`--days: 1-${MAX_RANGE_DAYS}`);
+    to = yesterday; from = addDay(to, -(n - 1));
+  } else {
+    if (o.from === undefined) throw new Error('--to needs --from YYYY-MM-DD');
+    to = o.to ?? yesterday; from = o.from;
+    if (!DAY_RE.test(from) || !DAY_RE.test(to) || Number.isNaN(Date.parse(from)) || Number.isNaN(Date.parse(to))) throw new Error('--from / --to: YYYY-MM-DD');
+    if (from > to) throw new Error('--from is after --to');
+    if (dateRange(from, to).length > MAX_RANGE_DAYS) throw new Error(`--from/--to: at most ${MAX_RANGE_DAYS} days`);
+  }
+  return { from, to, dates: dateRange(from, to) };
+}
+
+export interface DaySummary { date: string; rows: number; summary: SummaryRow[]; totals: { currency: string; units: number; amount: number }[] }
+
+/** The days of a range as the collector reads them: per-day summary and totals, totals over the range per currency
+ *  (never added across currencies), and the dates that had no report. Pure. */
+export function rangeReport(days: DaySummary[], dates: string[]): { days: DaySummary[]; totals: { currency: string; units: number; amount: number }[]; missing: string[] } {
+  const have = new Set(days.map(d => d.date));
+  const sorted = [...days].sort((a, b) => a.date.localeCompare(b.date));
+  return { days: sorted, totals: totalsByCurrency(sorted.flatMap(d => d.summary)), missing: dates.filter(d => !have.has(d)) };
+}
+
+export const rangeCsvRows = (days: DaySummary[]): (string | number)[][] =>
+  [['date', 'key', 'title', 'currency', 'units', 'amount', 'rows'], ...days.flatMap(d => d.summary.map(r => [d.date, r.key, r.title, r.currency, r.units, r.amount, r.rows]))];
+
+export interface PlayDaySales { date: string; currency: string; orders: number; refunds: number; itemPrice: number; taxes: number; charged: number; refunded: number; net: number }
+
+/**
+ * Play estimated sales rows -> one line per order-charged date and currency of sale. charged = Charged Amount (tax
+ * included) of the Charged rows, refunded = the Refund rows (always negative), net = charged + refunded; itemPrice and
+ * taxes are the Charged rows' Item Price and Taxes Collected. Rows outside from..to are left out. Estimated figures
+ * before Google's service fee: the earnings report (monthly) has the proceeds. Pure.
+ */
+export function summarizePlaySalesByDay(rows: Record<string, string>[], from: string, to: string): PlayDaySales[] {
+  const m = new Map<string, PlayDaySales>();
+  for (const r of rows) {
+    const date = (r['Order Charged Date'] ?? '').slice(0, 10);
+    if (!DAY_RE.test(date) || date < from || date > to) continue;
+    const status = r['Financial Status'] ?? '';
+    const refund = /refund|chargeback/i.test(status);
+    if (!refund && !/^charge/i.test(status)) continue;
+    const currency = r['Currency of Sale'] ?? '';
+    const id = `${date}\u0000${currency}`;
+    const x = m.get(id) ?? { date, currency, orders: 0, refunds: 0, itemPrice: 0, taxes: 0, charged: 0, refunded: 0, net: 0 };
+    const amount = num(r['Charged Amount']);
+    if (refund) { x.refunds++; x.refunded += -Math.abs(amount); }
+    else { x.orders++; x.charged += amount; x.itemPrice += num(r['Item Price']); x.taxes += num(r['Taxes Collected']); }
+    m.set(id, x);
+  }
+  return [...m.values()].map(x => ({ ...x, itemPrice: round2(x.itemPrice), taxes: round2(x.taxes), charged: round2(x.charged), refunded: round2(x.refunded), net: round2(x.charged + x.refunded) }))
+    .sort((a, b) => (a.date < b.date ? -1 : a.date > b.date ? 1 : a.currency < b.currency ? -1 : a.currency > b.currency ? 1 : 0));
+}
+
+/** Range totals per currency of the daily Play sales lines. Pure. */
+export function playSalesTotals(days: PlayDaySales[]): { currency: string; orders: number; refunds: number; charged: number; refunded: number; net: number }[] {
+  const m = new Map<string, { currency: string; orders: number; refunds: number; charged: number; refunded: number; net: number }>();
+  for (const d of days) {
+    const t = m.get(d.currency) ?? { currency: d.currency, orders: 0, refunds: 0, charged: 0, refunded: 0, net: 0 };
+    t.orders += d.orders; t.refunds += d.refunds; t.charged = round2(t.charged + d.charged); t.refunded = round2(t.refunded + d.refunded); t.net = round2(t.net + d.net);
+    m.set(d.currency, t);
+  }
+  return [...m.values()].sort((a, b) => (a.currency < b.currency ? -1 : a.currency > b.currency ? 1 : 0));
+}
+
+/** The months (YYYY-MM) a date window touches, for the Play sales file names. Pure. */
+export const monthsOfRange = (from: string, to: string): string[] => [...new Set(dateRange(from, to).map(d => d.slice(0, 7)))];
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index deda4cf..c1432b0 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -412,8 +412,9 @@ export const TOOLS: ToolDef[] = [
     description: 'Download a sales or finance report into .storebound/reports/ (gitignored) and print a summary per product and currency (amounts never added across currencies) plus a summary CSV. Apple needs ASC_VENDOR_NUMBER and a team key; Play needs play.reportsBucket and "View financial data". dry_run shows the request only.',
     props: { kind: { type: 'string', enum: ['apple-sales', 'apple-finance', 'play-earnings', 'play-sales'] }, month: { type: 'string', pattern: '^\\d{4}-\\d{2}$', description: 'YYYY-MM (apple-finance: Apple fiscal month; Play reports)' },
       date: { type: 'string', pattern: '^\\d{4}(-\\d{2}(-\\d{2})?)?$', description: 'apple-sales report date (DAILY / WEEKLY YYYY-MM-DD, MONTHLY YYYY-MM, YEARLY YYYY)' },
+      days: { type: 'integer', minimum: 1, maximum: 366, description: 'apple-sales / play-sales: the last N days as one per-day JSON' }, from: { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2}$', description: 'apple-sales / play-sales: first day of a range' }, to: { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2}$', description: 'last day of the range (default yesterday)' },
       frequency: { type: 'string', enum: ['DAILY', 'WEEKLY', 'MONTHLY', 'YEARLY'] }, type: { type: 'string', enum: ['SALES', 'PRE_ORDER', 'SUBSCRIPTION', 'SUBSCRIPTION_EVENT', 'SUBSCRIBER', 'SUBSCRIPTION_OFFER_CODE_REDEMPTION', 'WIN_BACK_ELIGIBILITY'] } },
-    required: ['kind'], args: i => [String(i.kind), ...opt('month', i.month), ...opt('date', i.date), ...opt('frequency', i.frequency), ...opt('type', i.type), '--json'] },
+    required: ['kind'], args: i => [String(i.kind), ...opt('month', i.month), ...opt('days', i.days), ...opt('from', i.from), ...opt('to', i.to), ...opt('date', i.date), ...opt('frequency', i.frequency), ...opt('type', i.type), '--json'] },
   { name: 'triage', title: 'Crash and feedback triage', command: ['triage'], write: false, network: true,
     description: 'Read-only: TestFlight crash reports (signature from each crash log), TestFlight screenshot feedback and Google Play error reports of the top issues, grouped by signature with their top devices, OS versions and builds. Tester emails are never read.',
     props: { store: { type: 'string', enum: ['both', 'apple', 'play'], default: 'both' }, days: { type: 'integer', minimum: 1, maximum: 90, default: 14 }, build: { type: 'string', pattern: '^[0-9][0-9.]*$' },
diff --git a/cli/reports.ts b/cli/reports.ts
index 1032910..2cb88fb 100644
--- a/cli/reports.ts
+++ b/cli/reports.ts
@@ -3,6 +3,9 @@
 //   storebound reports apple-finance --month YYYY-MM [--detail] [--region ZZ] [--vendor N]
 //   storebound reports play-earnings --month YYYY-MM
 //   storebound reports play-sales --month YYYY-MM
+//   a day range in one JSON (per-day summary and totals per currency; days with no report listed in "missing", not an error):
+//   storebound reports apple-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json     (daily SALES reports)
+//   storebound reports play-sales --days 30 | --from YYYY-MM-DD [--to YYYY-MM-DD] --json      (per order-charged date and currency)
 //   common: [--out .storebound/reports] [--csv <summary.csv>] [--dry] [--json]
 // The raw report is saved as it came (the TSV / the CSV out of the zip) next to a <name>.summary.csv with only
 // aggregates (per product and currency; amounts are never added across currencies). --dry prints what would be
@@ -14,15 +17,15 @@ import { mkdirSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { ascClient } from './apple/asc';
 import { bucketName } from './lib/analytics';
-import { ascVendorNumber } from './lib/credentials';
+import { ascVendorNumber, playReportsBucket } from './lib/credentials';
 import type { Ctx } from './lib/ctx';
 import { need } from './lib/ctx';
 import { toCsv } from './lib/csv';
 import { STORAGE_READ_SCOPE } from './lib/google-auth';
 import { done, log, printJson, warn } from './lib/log';
 import {
-  APPLE_SALES_COMBOS, appleFinancePath, appleReportDate, appleSalesPath, decodeReport, parsePlayCsv, parseTsv, playReportPrefix, type SummaryRow, summarizeAppleFinance,
-  summarizeAppleSales, summarizePlayEarnings, summarizePlaySales, summaryCsvRows, totalsByCurrency,
+  APPLE_SALES_COMBOS, appleFinancePath, appleReportDate, appleSalesPath, type DaySummary, decodeReport, monthsOfRange, parsePlayCsv, parseTsv, playReportPrefix, playSalesTotals, rangeCsvRows, rangeReport,
+  reportRange, type SummaryRow, summarizeAppleFinance, summarizeAppleSales, summarizePlayEarnings, summarizePlaySales, summarizePlaySalesByDay, summaryCsvRows, totalsByCurrency,
 } from './lib/reports';
 import { textTable } from './lib/table';
 import { unzip } from './lib/zip';
@@ -30,7 +33,15 @@ import { googleClient } from './play/google';
 import * as rt from './lib/rt';
 
 const TAG = 'reports';
-const USAGE = 'usage: storebound reports apple-sales | apple-finance --month YYYY-MM | play-earnings --month YYYY-MM | play-sales --month YYYY-MM';
+const USAGE = 'usage: storebound reports apple-sales [--days N | --from YYYY-MM-DD [--to ...]] | apple-finance --month YYYY-MM | play-earnings --month YYYY-MM | play-sales --month YYYY-MM | play-sales --days N | --from YYYY-MM-DD [--to ...]';
+
+/** Runs fn over items, at most `limit` at a time, results in item order. */
+async function pool<T, R>(items: T[], limit: number, fn: (x: T) => Promise<R>): Promise<R[]> {
+  const out: R[] = new Array(items.length);
+  let next = 0;
+  await Promise.all(Array.from({ length: Math.min(limit, items.length) }, async () => { while (next < items.length) { const i = next++; out[i] = await fn(items[i]!); } }));
+  return out;
+}
 
 function show(name: string, rows: SummaryRow[], json: boolean, extra: Record<string, unknown>): void {
   const totals = totalsByCurrency(rows);
@@ -57,6 +68,28 @@ export function appleReportHint(msg: string): string | null {
   return null;
 }
 
+type Google = ReturnType<typeof googleClient>;
+
+/** The CSV rows of a Play report month (all zips under the prefix, all CSVs in them); null when the bucket has none. */
+async function playMonth(g: Google, bucket: string, kind: 'earnings' | 'sales', month: string): Promise<{ rows: Record<string, string>[]; text: string } | null> {
+  const prefix = playReportPrefix(kind, month);
+  const list = `https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o?prefix=${encodeURIComponent(prefix)}`;
+  const items = ((await g.json<{ items?: { name: string }[] }>('GET', list)).items ?? []).filter(o => o.name.endsWith('.zip'));
+  if (!items.length) return null;
+  const rows: Record<string, string>[] = [];
+  let text = '';
+  for (const o of items) {
+    log(TAG, `gs://${bucketName(bucket)}/${o.name}`);
+    const zip = await g.bytes(`https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o/${encodeURIComponent(o.name)}?alt=media`);
+    for (const e of unzip(zip).filter(x => x.name.toLowerCase().endsWith('.csv'))) {
+      const t = decodeReport(e.data);
+      text += (text ? '\n' : '') + t;
+      rows.push(...parsePlayCsv(t));
+    }
+  }
+  return { rows, text };
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
@@ -82,9 +115,46 @@ export async function run(ctx: Ctx): Promise<void> {
       path = appleFinancePath(vendor, month, { type, region: a.get('region') });
       name = `apple-${type === 'FINANCIAL' ? 'finance' : 'finance-detail'}-${month}.tsv`;
     }
+    const range = sub === 'apple-sales' ? reportRange({ days: a.get('days'), from: a.get('from'), to: a.get('to') }) : null;
+    if (sub === 'apple-finance' && (a.has('days') || a.has('from') || a.has('to'))) throw new Error('--days / --from / --to are for apple-sales and play-sales (finance reports are monthly: --month)');
+    if (range) {
+      const type = a.str('type', 'SALES').toUpperCase();
+      if (type !== 'SALES') throw new Error('--days / --from / --to read the daily SALES reports: leave out --type (or SALES)');
+      if (a.has('frequency') && a.str('frequency', 'DAILY').toUpperCase() !== 'DAILY') throw new Error('--days / --from / --to read DAILY reports');
+      const pathOf = (date: string) => appleSalesPath(vendor, { type: 'SALES', frequency: 'DAILY', date });
+      const shownRange = `GET ${pathOf('<date>').replace(vendor, '<vendor>')} for ${range.dates.length} day(s) ${range.from}..${range.to}`;
+      if (dry) { if (a.has('json')) printJson({ dryRun: true, request: shownRange, dir: out }); else log(TAG, `would ${shownRange} -> ${out}`); return; }
+      const c = await ascClient(root, config.apple?.bundleId ?? '', config.apple?.appId);
+      mkdirSync(out, { recursive: true });
+      let rowCount = 0;
+      const got = await pool(range.dates, 4, async (date): Promise<DaySummary | null> => {
+        let gz: Uint8Array | null;
+        try { gz = await c.bytes(pathOf(date)); } catch (e) { const hint = appleReportHint((e as Error).message); throw new Error(hint ? `${(e as Error).message}
+${hint}` : (e as Error).message); }
+        if (!gz) return null;
+        const text = new TextDecoder().decode(gz[0] === 0x1f && gz[1] === 0x8b ? rt.gunzipSync(gz as Uint8Array<ArrayBuffer>) : gz);
+        writeFileSync(join(out, `apple-sales-daily-${date}.tsv`), text);
+        const rows = parseTsv(text);
+        rowCount += rows.length;
+        const summary = summarizeAppleSales(rows);
+        return { date, rows: rows.length, summary, totals: totalsByCurrency(summary) };
+      });
+      const rep = rangeReport(got.filter((x): x is DaySummary => !!x), range.dates);
+      const summaryFile = csvOut ?? join(out, `apple-sales-daily-${range.from}_${range.to}.summary.csv`);
+      mkdirSync(dirname(summaryFile), { recursive: true });
+      writeFileSync(summaryFile, toCsv(rangeCsvRows(rep.days)));
+      if (rep.missing.length) warn(TAG, `no report for ${rep.missing.join(', ')} (no sales then, or not published yet: daily reports come out the next day)`);
+      if (a.has('json')) printJson({ report: 'apple-sales', type: 'SALES', frequency: 'DAILY', from: range.from, to: range.to, rows: rowCount, days: rep.days, totals: rep.totals, missing: rep.missing, files: { dir: out, summary: summaryFile } });
+      else {
+        console.log(rep.days.length ? textTable(['date', 'currency', 'units', 'amount'], rep.days.flatMap(d => d.totals.map(t => [d.date, t.currency, t.units, t.amount.toFixed(2)]))) : 'no rows');
+        if (rep.totals.length) console.log('\n' + textTable(['currency', 'units', 'total'], rep.totals.map(t => [t.currency, t.units, t.amount.toFixed(2)])));
+      }
+      done(TAG, `${rep.days.length}/${range.dates.length} day(s), ${rowCount} rows -> ${out}; summary ${summaryFile}`);
+      return;
+    }
     const shown = path.replace(vendor, '<vendor>');
     if (dry) { if (a.has('json')) printJson({ dryRun: true, request: `GET ${shown}`, file: join(out, name) }); else log(TAG, `would GET ${shown} -> ${join(out, name)}`); return; }
-    const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
+    const c = await ascClient(root, config.apple?.bundleId ?? '', config.apple?.appId);
     log(TAG, `GET ${shown}`);
     let gz: Uint8Array | null;
     try { gz = await c.bytes(path); } catch (e) { const hint = appleReportHint((e as Error).message); throw new Error(hint ? `${(e as Error).message}\n${hint}` : (e as Error).message); }
@@ -100,27 +170,51 @@ export async function run(ctx: Ctx): Promise<void> {
   }
 
   if (sub === 'play-earnings' || sub === 'play-sales') {
-    const bucket = config.play?.reportsBucket;
-    if (!bucket) throw new Error(`play.reportsBucket is not set (${consoleLink('play.reports-financial', '> Copy Cloud Storage URI')})`);
-    const month = need(a.get('month'), '--month YYYY-MM');
+    const bucket = playReportsBucket(root, config.play?.reportsBucket);
+    if (!bucket) throw new Error(`play.reportsBucket is not set (env PLAY_REPORTS_BUCKET or the credential profile's reportsBucket also work; ${consoleLink('play.reports-financial', '> Copy Cloud Storage URI')})`);
     const kind = sub === 'play-earnings' ? 'earnings' : 'sales';
+    const range = reportRange({ days: a.get('days'), from: a.get('from'), to: a.get('to') });
+    if (range && kind === 'earnings') throw new Error('play-earnings is monthly (--month YYYY-MM); the daily revenue is play-sales --days N');
+    if (range) {
+      const months = monthsOfRange(range.from, range.to);
+      const where = months.map(m => `gs://${bucketName(bucket)}/${playReportPrefix('sales', m)}*.zip`);
+      if (dry) { if (a.has('json')) printJson({ dryRun: true, request: `GET ${where.join(' ')}`, from: range.from, to: range.to, dir: out }); else log(TAG, `would read ${where.join(', ')} -> ${out}`); return; }
+      const g = googleClient(root, STORAGE_READ_SCOPE);
+      const all: Record<string, string>[] = [];
+      const missingMonths: string[] = [];
+      const files: string[] = [];
+      mkdirSync(out, { recursive: true });
+      for (const m of months) {
+        const r = await playMonth(g, bucket, 'sales', m);
+        if (!r) { missingMonths.push(m); continue; }
+        all.push(...r.rows);
+        const file = join(out, `play-sales-${m}.csv`);
+        writeFileSync(file, r.text);
+        files.push(file);
+      }
+      const days = summarizePlaySalesByDay(all, range.from, range.to);
+      const have = new Set(days.map(d => d.date));
+      const emptyDays = range.dates.filter(d => !have.has(d));
+      const summaryFile = csvOut ?? join(out, `play-sales-daily-${range.from}_${range.to}.summary.csv`);
+      mkdirSync(dirname(summaryFile), { recursive: true });
+      writeFileSync(summaryFile, toCsv([['date', 'currency', 'orders', 'refunds', 'item_price', 'taxes', 'charged', 'refunded', 'net'], ...days.map(d => [d.date, d.currency, d.orders, d.refunds, d.itemPrice, d.taxes, d.charged, d.refunded, d.net])]));
+      const totals = playSalesTotals(days);
+      if (missingMonths.length) warn(TAG, `no sales report for month(s) ${missingMonths.join(', ')} in the bucket (not published yet, or the service account lacks "View financial data")`);
+      if (a.has('json')) printJson({ report: 'play-sales', from: range.from, to: range.to, rows: all.length, days, totals, emptyDays, missingMonths, estimated: true, files: { raw: files, summary: summaryFile } });
+      else {
+        console.log(days.length ? textTable(['date', 'currency', 'orders', 'refunds', 'charged', 'refunded', 'net'], days.map(d => [d.date, d.currency, d.orders, d.refunds, d.charged.toFixed(2), d.refunded.toFixed(2), d.net.toFixed(2)])) : 'no orders in the range');
+        if (totals.length) console.log('\n' + textTable(['currency', 'orders', 'refunds', 'charged', 'refunded', 'net'], totals.map(t => [t.currency, t.orders, t.refunds, t.charged.toFixed(2), t.refunded.toFixed(2), t.net.toFixed(2)])));
+      }
+      done(TAG, `${days.length} order day line(s) of ${range.dates.length} day(s) -> ${summaryFile}`);
+      return;
+    }
+    const month = need(a.get('month'), '--month YYYY-MM (or --days N / --from YYYY-MM-DD for play-sales)');
     const prefix = playReportPrefix(kind, month);
-    const list = `https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o?prefix=${encodeURIComponent(prefix)}`;
     if (dry) { if (a.has('json')) printJson({ dryRun: true, request: `GET gs://${bucketName(bucket)}/${prefix}*.zip`, dir: out }); else log(TAG, `would read gs://${bucketName(bucket)}/${prefix}*.zip -> ${out}`); return; }
     const g = googleClient(root, STORAGE_READ_SCOPE);
-    const items = ((await g.json<{ items?: { name: string }[] }>('GET', list)).items ?? []).filter(o => o.name.endsWith('.zip'));
-    if (!items.length) { done(TAG, `no ${prefix}*.zip in the bucket (not published yet: earnings come early in the next month; or the service account lacks "View financial data")`); if (a.has('json')) printJson({ report: kind, month, empty: true }); return; }
-    const all: Record<string, string>[] = [];
-    let text = '';
-    for (const o of items) {
-      log(TAG, `gs://${bucketName(bucket)}/${o.name}`);
-      const zip = await g.bytes(`https://storage.googleapis.com/storage/v1/b/${encodeURIComponent(bucketName(bucket))}/o/${encodeURIComponent(o.name)}?alt=media`);
-      for (const e of unzip(zip).filter(x => x.name.toLowerCase().endsWith('.csv'))) {
-        const t = decodeReport(e.data);
-        text += (text ? '\n' : '') + t;
-        all.push(...parsePlayCsv(t));
-      }
-    }
+    const month1 = await playMonth(g, bucket, kind, month);
+    if (!month1) { done(TAG, `no ${prefix}*.zip in the bucket (not published yet: earnings come early in the next month; or the service account lacks "View financial data")`); if (a.has('json')) printJson({ report: kind, month, empty: true }); return; }
+    const all = month1.rows, text = month1.text;
     if (!all.length) warn(TAG, 'the zip(s) held no CSV rows');
     const summary = kind === 'earnings' ? summarizePlayEarnings(all) : summarizePlaySales(all);
     const files = save(out, `play-${kind}-${month}.csv`, text, summary, csvOut);
diff --git a/docs/commands.md b/docs/commands.md
index 0d3ee56..fddd8f3 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -127,9 +127,9 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `prices export [--no-subscriptions]` | API + local | current prices of every product and subscription (Apple current + scheduled, Play base plan regions), both stores, as `store/prices.csv`; subscription rows feed `apple subscriptions --csv` / `play subscriptions --csv` |
 | `prices import [--reconvert]` | API | diff table, then (asks first) Apple price schedules incl. future-dated changes and Play regional prices |
 | `analytics setup` | API | App Store analytics report request (once, Admin key) |
-| `analytics snapshot [--days 28]` | API + local | impressions, page views, downloads (App Store), visitors, acquisitions, installs (Play reports bucket) -> `.storebound/analytics/` |
+| `analytics snapshot [--days 28] [--store apple\|play] [--json] [--no-write]` | API + local | impressions, page views, downloads, App Usage (sessions, active devices, crashes) per day (App Store); visitors, acquisitions, daily user installs, active device installs, total user installs (Play reports bucket, also from env `PLAY_REPORTS_BUCKET` or the profile's `reportsBucket`) -> `.storebound/analytics/`; `--json` prints the snapshot on stdout; a store-only config needs `apple.appId` only |
 | `analytics compare` | local | snapshots vs the git history of the store files: before / after each listing change |
-| `reports apple-sales \| apple-finance \| play-earnings \| play-sales` | API, read-only + local | sales / finance reports into `.storebound/reports/`, summary per product and currency, CSV export |
+| `reports apple-sales \| apple-finance \| play-earnings \| play-sales` | API, read-only + local | sales / finance reports into `.storebound/reports/`, summary per product and currency, CSV export; `apple-sales` and `play-sales` take `--days N` or `--from/--to` for a per-day JSON (daily summary, totals per currency, missing days) |
 | `triage [--days 14]` | API, read-only | TestFlight crash and screenshot feedback, Play error reports: grouped by signature with devices, OS versions, builds |
 | `aso rank [--storefronts us,de]` | network + local | App Store rank per keyword and storefront plus competitors from the public iTunes Search API (rate limited) -> `.storebound/aso/` |
 | `aso competitors [--term <kw>] [--storefront us,tr] [--top 10]` | network + local | top apps per keyword (name, developer, rating count, first release, last update, localized genre; no subtitles: not in any public API) and the words in their names you do not cover, same rate limit -> `.storebound/aso/competitors/` |
diff --git a/skills/store-analytics/SKILL.md b/skills/store-analytics/SKILL.md
index 2598455..0cd275c 100644
--- a/skills/store-analytics/SKILL.md
+++ b/skills/store-analytics/SKILL.md
@@ -16,7 +16,8 @@ CLI: `storebound analytics setup | snapshot | compare`. MCP: `analytics_snapshot
   (`stoppedDueToInactivity`); `setup` makes a new one. storebound reads "App Store Discovery and Engagement" (Event
   Impression / Page view, Counts and Unique Counts) and "App Store Downloads" (First-time Download, Redownload; updates
   are left out), checks each segment's md5 checksum and keeps, per day, the newest processing of that day.
-  Conversion = (first-time downloads + redownloads) / unique impressions. Source:
+  Conversion = (first-time downloads + redownloads) / unique impressions. App Usage (sessions, active devices, crashes) comes from the
+  "App Sessions" and "App Crashes" reports of the same request. Source:
   https://developer.apple.com/documentation/appstoreconnectapi/downloading-analytics-reports
 - **Google Play**: there is **no API** for store listing statistics (the Play Developer Reporting API only has
   vitals). Play Console writes monthly CSV exports into your own Cloud Storage bucket; storebound reads them with
@@ -28,6 +29,29 @@ CLI: `storebound analytics setup | snapshot | compare`. MCP: `analytics_snapshot
   results (read them in the consoles; `storebound apple ppo status` shows the App Store test state), Play
   "Explore" search terms beyond the traffic source file.
 
+## For a collector (store-only config, JSON on stdout)
+A script that reads many apps needs no project: a config with `apple.appId` (`bundleId` null or left out) and
+`play.packageName` is valid for `analytics` and `reports` reads (every write still needs the bundle id).
+- `storebound analytics snapshot --store apple|play --days 30 --config <virtual.json> --account <profile> --json`
+  prints the snapshot as one JSON document on stdout (logs go to stderr); the file in `--dir` is still written, add
+  `--no-write` to skip it. A store that failed carries `{ "error": ... }`; when every store failed the JSON is printed
+  and the exit code is 1. Non-fatal gaps are in `notes`.
+- Play bucket without `play.reportsBucket`: env `PLAY_REPORTS_BUCKET`, else the credential profile's `reportsBucket`
+  (a bucket name, not a secret). Same for `reports play-*`.
+- Active users, per day. App Store: `sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Usage
+  reports (App Sessions, App Crashes; `activeDevices` is the sum of the rows' Unique Devices, so a device seen in two
+  rows, e.g. two app versions, counts twice; totals: `sessions`, `crashes`, `activeDevicesAvg`). They appear a day or
+  two after the report request exists; until then the snapshot has the rest and a `notes` line. Play: `installs` (Daily
+  User Installs), `activeDeviceInstalls` (Active Device Installs) and `totalUserInstalls` (Total User Installs) from the
+  installs overview file (all countries; else the country file summed). The last two are stock numbers: totals take the
+  newest day, never a sum.
+- Revenue per day: `storebound reports apple-sales --days 30 --json` (or `--from 2026-10-01 [--to 2026-10-25]`) reads
+  the daily SALES reports of the range (4 at a time): `days[]` with `summary` per SKU and currency and `totals` per
+  currency, `totals` for the range per currency, `missing` (days with no report: no sales, or not out yet; never an
+  error). `storebound reports play-sales --days 30 --json` groups the estimated sales by order charged date and
+  currency of sale: `orders`, `refunds`, `itemPrice`, `taxes`, `charged` (tax included), `refunded` (negative),
+  `net`, plus `emptyDays` and `missingMonths`. Play's earnings (proceeds after Google's fee) are monthly only.
+
 ## Flow
 1. Once: `storebound analytics setup` (App Store) and `play.reportsBucket` (Play).
 2. Weekly: `storebound analytics snapshot` (default the last 28 days; `--dry` prints totals only).
diff --git a/tests/analytics-collector.test.ts b/tests/analytics-collector.test.ts
new file mode 100644
index 0000000..4d26a56
--- /dev/null
+++ b/tests/analytics-collector.test.ts
@@ -0,0 +1,264 @@
+// What an external collector needs from `analytics snapshot` and `reports`: a store-only config (apple.appId without a
+// bundle id, no play.reportsBucket), --json on stdout, App Usage and Play install stock numbers per day, and per-day
+// sales JSON for a day range of both stores. Fixtures are made-up report files; nothing reaches the network.
+import { afterEach, describe, expect, test } from 'bun:test';
+import { createHash } from 'node:crypto';
+import { existsSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { deflateRawSync } from 'node:zlib';
+import { run as analytics } from '../cli/analytics';
+import { appleDaily, appleTotals, mergeAppleUsage, parseReport, playDaily, playTotals } from '../cli/lib/analytics';
+import { type ShipConfig, validateConfig } from '../cli/lib/config';
+import { playReportsBucket, profileEnv } from '../cli/lib/credentials';
+import { dateRange, parsePlayCsv, parseTsv, playSalesTotals, rangeReport, reportRange, summarizeAppleSales, summarizePlaySalesByDay, totalsByCurrency } from '../cli/lib/reports';
+import { run as reports } from '../cli/reports';
+import { ascEnv, BASE, capture, jsonOut, mockFetch, playEnv, project, restore } from './helpers/store-mock';
+
+const BUCKET = 'pubsite_prod_rev_01234567890123456789';
+afterEach(() => { restore(); delete process.env.PLAY_REPORTS_BUCKET; delete process.env.STOREBOUND_CREDENTIALS_DIR; delete process.env.STOREBOUND_PROFILE; });
+
+const iso = (offset: number) => new Date(Date.now() + offset * 86_400_000).toISOString().slice(0, 10);
+type Req = { path: string };
+
+function zip(files: Record<string, string>): Uint8Array {
+  const parts: Uint8Array[] = [], central: Uint8Array[] = [];
+  let off = 0;
+  for (const [name, text] of Object.entries(files)) {
+    const raw = new TextEncoder().encode(text), data = deflateRawSync(raw), n = new TextEncoder().encode(name);
+    const h = new DataView(new ArrayBuffer(30));
+    h.setUint32(0, 0x04034b50, true); h.setUint16(8, 8, true); h.setUint32(18, data.length, true); h.setUint32(22, raw.length, true); h.setUint16(26, n.length, true);
+    const c = new DataView(new ArrayBuffer(46));
+    c.setUint32(0, 0x02014b50, true); c.setUint16(10, 8, true); c.setUint32(20, data.length, true); c.setUint32(24, raw.length, true); c.setUint16(28, n.length, true); c.setUint32(42, off, true);
+    parts.push(new Uint8Array(h.buffer), n, data);
+    central.push(new Uint8Array(c.buffer), n);
+    off += 30 + n.length + data.length;
+  }
+  const cdSize = central.reduce((s, x) => s + x.length, 0);
+  const e = new DataView(new ArrayBuffer(22));
+  e.setUint32(0, 0x06054b50, true); e.setUint16(8, Object.keys(files).length, true); e.setUint16(10, Object.keys(files).length, true); e.setUint32(12, cdSize, true); e.setUint32(16, off, true);
+  const all = [...parts, ...central, new Uint8Array(e.buffer)];
+  const out = new Uint8Array(all.reduce((s, x) => s + x.length, 0));
+  let p = 0;
+  for (const x of all) { out.set(x, p); p += x.length; }
+  return out;
+}
+
+// ---- pure parts ----
+
+describe('App Usage and Play install stock numbers', () => {
+  const SESSIONS = 'Date\tApp Name\tApp Apple Identifier\tApp Version\tDevice\tPlatform Version\tSource Type\tSource Info\tTerritory\tSessions\tTotal Session Duration\tUnique Devices\n' +
+    '2026-10-01\tExample\t1\t1.0\tiPhone\tiOS 26\t\t\tUS\t100\t3000\t40\n2026-10-01\tExample\t1\t1.0\tiPad\tiPadOS 26\t\t\tTR\t20\t600\t8\n2026-10-02\tExample\t1\t1.0\tiPhone\tiOS 26\t\t\tUS\t50\t1000\t30\n';
+  const CRASHES = 'Date\tApp Name\tApp Apple Identifier\tApp Version\tDevice\tPlatform Version\tCrashes\tUnique Devices\n2026-10-01\tExample\t1\t1.0\tiPhone\tiOS 26\t4\t3\n2026-10-03\tExample\t1\t1.0\tiPhone\tiOS 26\t1\t1\n';
+  test('sessions, active devices, session time and crashes per day, merged into the engagement days', () => {
+    const base = appleDaily(parseReport('Date\tEvent\tCounts\tUnique Counts\n2026-10-01\tImpression\t10\t8\n'), []);
+    const d = mergeAppleUsage(base, parseReport(SESSIONS), parseReport(CRASHES));
+    expect(d.map(x => x.date)).toEqual(['2026-10-01', '2026-10-02', '2026-10-03']);
+    expect(d[0]).toMatchObject({ impressions: 10, sessions: 120, activeDevices: 48, sessionSeconds: 3600, crashes: 4 });
+    expect(d[1]).toMatchObject({ impressions: 0, sessions: 50, activeDevices: 30 });
+    expect(d[1]!.crashes).toBeUndefined();
+    expect(d[2]).toMatchObject({ crashes: 1 });
+    expect(appleTotals(d)).toMatchObject({ sessions: 170, crashes: 5, activeDevicesAvg: 39 });
+    expect(appleTotals(base).sessions).toBeUndefined();
+  });
+  test('Play: stock columns from the overview file, else summed over the country rows; totals take the newest day', () => {
+    const country = parseReport('Date,Package Name,Country,Daily Device Installs,Daily User Installs,Total User Installs,Active Device Installs\n' +
+      '2026-10-01,p,US,5,4,100,60\n2026-10-01,p,TR,2,2,50,30\n2026-10-02,p,US,1,1,101,61\n');
+    expect(playDaily([], country)).toEqual([
+      { date: '2026-10-01', visitors: 0, acquisitions: 0, installs: 6, activeDeviceInstalls: 90, totalUserInstalls: 150 },
+      { date: '2026-10-02', visitors: 0, acquisitions: 0, installs: 1, activeDeviceInstalls: 61, totalUserInstalls: 101 }]);
+    const overview = parseReport('Date,Package Name,Total User Installs,Active Device Installs\n2026-10-01,p,160,95\n2026-10-02,p,162,96\n');
+    const d = playDaily([], country, overview);
+    expect(d[0]).toMatchObject({ installs: 6, activeDeviceInstalls: 95, totalUserInstalls: 160 });
+    expect(playTotals(d)).toMatchObject({ installs: 7, activeDeviceInstalls: 96, totalUserInstalls: 162 });
+    expect(playDaily([], parseReport('Date,Daily User Installs\n2026-10-01,3\n'))[0]!.activeDeviceInstalls).toBeUndefined();
+  });
+});
+
+describe('store-only config and bucket fallback', () => {
+  const virtual = (apple: Record<string, unknown>): unknown => ({ ...BASE, apple, play: { packageName: 'com.example.notes' } });
+  test('apple.appId alone is enough; a missing id is still an error', () => {
+    expect(validateConfig(virtual({ bundleId: null, appId: '6400000101' }))).toEqual([]);
+    expect(validateConfig(virtual({ appId: '6400000101' }))).toEqual([]);
+    expect(validateConfig(virtual({ bundleId: null }))[0]).toContain('apple.bundleId');
+    expect(validateConfig(virtual({ bundleId: 'nope' }))[0]).toContain('apple.bundleId');
+    expect(validateConfig(virtual({ bundleId: null, appId: 'abc' }))[0]).toContain('apple.bundleId');
+  });
+  test('reports bucket: config, then env PLAY_REPORTS_BUCKET, then the profile field reportsBucket', () => {
+    const dir = mkdtempSync(join(tmpdir(), 'sb-prof-'));
+    writeFileSync(join(dir, 'acme.json'), JSON.stringify({ reportsBucket: `gs://${BUCKET}/` }));
+    process.env.STOREBOUND_CREDENTIALS_DIR = dir;
+    process.env.STOREBOUND_PROFILE = 'acme';
+    const root = mkdtempSync(join(tmpdir(), 'sb-root-'));
+    expect(profileEnv('acme').PLAY_REPORTS_BUCKET).toBe(`gs://${BUCKET}/`);
+    expect(playReportsBucket(root)).toBe(`gs://${BUCKET}/`);
+    process.env.PLAY_REPORTS_BUCKET = 'pubsite_prod_rev_999';
+    expect(playReportsBucket(root)).toBe('pubsite_prod_rev_999');
+    expect(playReportsBucket(root, BUCKET)).toBe(BUCKET);
+    process.env.PLAY_REPORTS_BUCKET = 'my-bucket';
+    expect(() => playReportsBucket(root)).toThrow('PLAY_REPORTS_BUCKET');
+    delete process.env.PLAY_REPORTS_BUCKET;
+    process.env.STOREBOUND_PROFILE = '';
+    expect(playReportsBucket(root)).toBeNull();
+  });
+});
+
+describe('day ranges and daily sales', () => {
+  test('reportRange: --days ends yesterday, --from/--to inclusive, checks', () => {
+    const now = new Date('2026-10-26T10:00:00Z');
+    expect(reportRange({}, now)).toBeNull();
+    expect(reportRange({ days: '3' }, now)).toEqual({ from: '2026-10-23', to: '2026-10-25', dates: ['2026-10-23', '2026-10-24', '2026-10-25'] });
+    expect(reportRange({ from: '2026-10-24' }, now)!.dates).toEqual(['2026-10-24', '2026-10-25']);
+    expect(reportRange({ from: '2026-10-24', to: '2026-10-24' }, now)!.dates).toEqual(['2026-10-24']);
+    expect(() => reportRange({ days: '0' }, now)).toThrow('--days');
+    expect(() => reportRange({ days: '2', from: '2026-10-01' }, now)).toThrow('not both');
+    expect(() => reportRange({ from: '2026-10-03', to: '2026-10-01' }, now)).toThrow('after');
+    expect(() => reportRange({ from: '10/03/2026' }, now)).toThrow('YYYY-MM-DD');
+    expect(() => reportRange({ to: '2026-10-03' }, now)).toThrow('--from');
+    expect(dateRange('2026-02-27', '2026-03-02')).toHaveLength(4);
+  });
+  test('rangeReport: totals per currency over the days, the dates without a report listed', () => {
+    const tsv = (units: number) => ['Provider\tSKU\tTitle\tUnits\tDeveloper Proceeds\tCurrency of Proceeds', `APPLE\tcom.example.pro\tPro\t${units}\t2.5\tUSD`, 'APPLE\tcom.example.pro\tPro\t1\t3\tEUR', ''].join('\n');
+    const day = (date: string, units: number) => { const summary = summarizeAppleSales(parseTsv(tsv(units))); return { date, rows: 2, summary, totals: totalsByCurrency(summary) }; };
+    const r = rangeReport([day('2026-10-02', 4), day('2026-10-01', 2)], ['2026-10-01', '2026-10-02', '2026-10-03']);
+    expect(r.days.map(d => d.date)).toEqual(['2026-10-01', '2026-10-02']);
+    expect(r.totals).toEqual([{ currency: 'EUR', units: 2, amount: 6 }, { currency: 'USD', units: 6, amount: 15 }]);
+    expect(r.missing).toEqual(['2026-10-03']);
+  });
+  test('Play sales per order-charged date and currency: charged, refunds (negative), net', () => {
+    const csv = 'Order Number,Order Charged Date,Financial Status,SKU ID,Currency of Sale,Item Price,Taxes Collected,Charged Amount\n' +
+      'A1,2026-10-01,Charged,pro,USD,4.99,0.00,4.99\nA2,2026-10-01,Charged,pro,USD,4.00,0.50,4.50\nA3,2026-10-01,Charged,pro,EUR,5.00,1.00,6.00\n' +
+      'A4,2026-10-02,Refund,pro,USD,4.99,0.00,4.99\nA5,2026-10-02,Refund,pro,USD,-1.00,0.00,-1.00\nA6,2026-09-30,Charged,pro,USD,9,0,9\nA7,2026-10-02,Other,pro,USD,9,0,9\n';
+    const d = summarizePlaySalesByDay(parsePlayCsv(csv), '2026-10-01', '2026-10-03');
+    expect(d).toEqual([
+      { date: '2026-10-01', currency: 'EUR', orders: 1, refunds: 0, itemPrice: 5, taxes: 1, charged: 6, refunded: 0, net: 6 },
+      { date: '2026-10-01', currency: 'USD', orders: 2, refunds: 0, itemPrice: 8.99, taxes: 0.5, charged: 9.49, refunded: 0, net: 9.49 },
+      { date: '2026-10-02', currency: 'USD', orders: 0, refunds: 2, itemPrice: 0, taxes: 0, charged: 0, refunded: -5.99, net: -5.99 }]);
+    expect(playSalesTotals(d)).toEqual([{ currency: 'EUR', orders: 1, refunds: 0, charged: 6, refunded: 0, net: 6 }, { currency: 'USD', orders: 2, refunds: 2, charged: 9.49, refunded: -5.99, net: 3.5 }]);
+  });
+});
+
+// ---- the commands, as the collector calls them ----
+
+const md5 = (s: string) => createHash('md5').update(s).digest('hex');
+
+describe('analytics snapshot on a store-only config', () => {
+  const d1 = iso(-1), d2 = iso(-2);
+  const ENG = `Date\tEvent\tCounts\tUnique Counts\n${d1}\tImpression\t100\t80\n${d1}\tPage view\t30\t25\n${d2}\tImpression\t60\t50\n`;
+  const DL = `Date,Download Type,Counts\n${d1},First-time Download,10\n${d2},Redownload,2\n`;
+  const SES = `Date\tSessions\tTotal Session Duration\tUnique Devices\n${d1}\t200\t6000\t90\n${d2}\t150\t4000\t70\n`;
+  const CRA = `Date\tCrashes\tUnique Devices\n${d1}\t3\t2\n`;
+  const files: Record<string, string> = { eng: ENG, dl: DL, ses: SES, cra: CRA };
+  const reportsList = [
+    { id: 'r-eng', attributes: { category: 'APP_STORE_ENGAGEMENT', name: 'App Store Discovery and Engagement Standard' } },
+    { id: 'r-dl', attributes: { category: 'COMMERCE', name: 'App Store Downloads Standard' } },
+    { id: 'r-ses', attributes: { category: 'APP_USAGE', name: 'App Sessions Standard' } },
+    { id: 'r-cra', attributes: { category: 'APP_USAGE', name: 'App Crashes Standard' } },
+  ];
+  const appleRoutes = (list = reportsList) => [
+    { match: /\/v1\/apps\/6400000101\/analyticsReportRequests\?/, answer: { data: [{ id: 'req1', attributes: {} }] } },
+    { match: /\/v1\/analyticsReportRequests\/req1\/reports\?/, answer: { data: list } },
+    { match: /\/v1\/analyticsReports\/r-(\w+)\/instances\?/, answer: (c: Req) => { const k = /r-(\w+)\//.exec(decodeURIComponent(c.path))![1]!; return { data: [{ id: `i-${k}`, attributes: { processingDate: iso(0) } }] }; } },
+    { match: /\/v1\/analyticsReportInstances\/i-(\w+)\/segments\?/, answer: (c: Req) => { const k = /i-(\w+)\//.exec(decodeURIComponent(c.path))![1]!; return { data: [{ id: `s-${k}`, attributes: { url: `https://segments.example.com/seg/${k}`, checksum: md5(files[k]!) } }] }; } },
+    { match: /^\/seg\/(\w+)$/, answer: (c: Req) => new Response(files[c.path.slice(5)]!) },
+  ];
+  const virtualConfig = (): ShipConfig => ({ ...BASE, apple: { bundleId: null as unknown as string, appId: '6400000101' }, play: { packageName: 'com.example.notes' } });
+
+  test('apple: appId only, App Usage per day, --json on stdout, --no-write leaves no file', async () => {
+    ascEnv();
+    const p = project(virtualConfig());
+    const calls = mockFetch(appleRoutes());
+    const r = await capture(() => analytics(p.ctx(['snapshot', '--store', 'apple', '--days', '3', '--json', '--no-write'])));
+    const snap = jsonOut(r.out) as { apple: { daily: Record<string, string | number>[]; totals: Record<string, number> } };
+    expect(snap.apple.daily.find(x => x.date === d1)).toMatchObject({ impressions: 100, pageViews: 30, downloads: 10, sessions: 200, activeDevices: 90, sessionSeconds: 6000, crashes: 3 });
+    expect(snap.apple.daily.find(x => x.date === d2)).toMatchObject({ sessions: 150, activeDevices: 70 });
+    expect(snap.apple.totals).toMatchObject({ sessions: 350, crashes: 3, activeDevicesAvg: 80 });
+    expect(calls.some(c => /filter\[bundleId\]/.test(decodeURIComponent(c.path)))).toBe(false);
+    expect(existsSync(join(p.root, '.storebound/analytics'))).toBe(false);
+  });
+  test('apple: without the usage reports the rest still comes, with a note', async () => {
+    ascEnv();
+    const p = project(virtualConfig());
+    mockFetch(appleRoutes(reportsList.slice(0, 2)));
+    const r = await capture(() => analytics(p.ctx(['snapshot', '--store', 'apple', '--days', '3', '--json'])));
+    const snap = jsonOut(r.out) as { apple: { daily: Record<string, string | number>[]; notes: string[] } };
+    expect(snap.apple.daily.find(x => x.date === d1)!.impressions).toBe(100);
+    expect(snap.apple.daily[0]!.sessions).toBeUndefined();
+    expect(snap.apple.notes[0]).toContain('App Usage');
+    expect(existsSync(join(p.root, '.storebound/analytics', `${iso(0)}.json`))).toBe(true);
+  });
+  test('play: the bucket from env, install stock numbers, daily user installs', async () => {
+    playEnv();
+    process.env.PLAY_REPORTS_BUCKET = BUCKET;
+    const p = project(virtualConfig());
+    const month = (d: string) => d.slice(0, 7).replace('-', '');
+    const inMonth = (m: string) => [d2, d1].filter(d => month(d) === m);
+    const mOf = (c: Req) => /_(\d{6})_/.exec(decodeURIComponent(c.path))![1]!;
+    mockFetch([
+      { match: /store_performance_com\.example\.notes_(\d{6})_country\.csv\?alt=media$/, answer: (c: Req) => new Response(`Date,Package name,Country,Store listing acquisitions,Store listing visitors\n${inMonth(mOf(c)).map(d => `${d},com.example.notes,US,5,50`).join('\n')}\n`) },
+      { match: /installs_com\.example\.notes_(\d{6})_country\.csv\?alt=media$/, answer: (c: Req) => new Response(`Date,Package Name,Country,Daily User Installs,Total User Installs,Active Device Installs\n${inMonth(mOf(c)).map(d => `${d},com.example.notes,US,4,100,60`).join('\n')}\n`) },
+      { match: /installs_com\.example\.notes_(\d{6})_overview\.csv\?alt=media$/, answer: (c: Req) => new Response(`Date,Package Name,Total User Installs,Active Device Installs\n${inMonth(mOf(c)).map(d => `${d},com.example.notes,${d === d1 ? 120 : 110},${d === d1 ? 70 : 65}`).join('\n')}\n`) },
+    ]);
+    const r = await capture(() => analytics(p.ctx(['snapshot', '--store', 'play', '--days', '3', '--json', '--dry'])));
+    const snap = jsonOut(r.out) as { play: { daily: Record<string, string | number>[]; totals: Record<string, number> } };
+    expect(snap.play.daily.find(x => x.date === d1)).toMatchObject({ visitors: 50, acquisitions: 5, installs: 4, activeDeviceInstalls: 70, totalUserInstalls: 120 });
+    expect(snap.play.totals).toMatchObject({ installs: 8, activeDeviceInstalls: 70, totalUserInstalls: 120 });
+  });
+  test('play without any bucket: the command fails (nothing to write)', async () => {
+    playEnv();
+    const p = project(virtualConfig());
+    mockFetch([]);
+    await expect(capture(() => analytics(p.ctx(['snapshot', '--store', 'play', '--days', '3', '--json'])))).rejects.toThrow('nothing written');
+  });
+});
+
+describe('reports over a day range', () => {
+  test('apple-sales --days: one JSON with the days, totals per currency, the missing day listed', async () => {
+    ascEnv();
+    process.env.ASC_VENDOR_NUMBER = '12345678';
+    const p = project();
+    const yesterday = iso(-1), before = iso(-2);
+    const tsv = (units: number, proceeds: string, cur: string) => ['Provider\tSKU\tTitle\tUnits\tDeveloper Proceeds\tCurrency of Proceeds', `APPLE\tcom.example.notes.pro\tPro\t${units}\t${proceeds}\t${cur}`, ''].join('\n');
+    const calls = mockFetch([{ match: /^\/v1\/salesReports\?/, answer: (c: Req) => {
+      const date = /reportDate\]=(\d{4}-\d{2}-\d{2})/.exec(decodeURIComponent(c.path))![1]!;
+      return date === yesterday ? new Response('{"errors":[{"status":"404","code":"NOT_FOUND"}]}', { status: 404 }) : new Response(Bun.gzipSync(new TextEncoder().encode(tsv(2, '3.49', date === before ? 'USD' : 'EUR'))));
+    } }]);
+    const r = await capture(() => reports(p.ctx(['apple-sales', '--days', '3', '--json'])));
+    const j = jsonOut(r.out) as { from: string; to: string; days: { date: string; totals: unknown[] }[]; totals: unknown[]; missing: string[]; rows: number };
+    expect(calls).toHaveLength(3);
+    expect(j.to).toBe(yesterday);
+    expect(j.days.map(d => d.date)).toEqual([iso(-3), before]);
+    expect(j.missing).toEqual([yesterday]);
+    expect(j.totals).toEqual([{ currency: 'EUR', units: 2, amount: 6.98 }, { currency: 'USD', units: 2, amount: 6.98 }]);
+    expect(j.rows).toBe(2);
+    expect(existsSync(join(p.root, `.storebound/reports/apple-sales-daily-${before}.tsv`))).toBe(true);
+    expect(readFileSync(join(p.root, `.storebound/reports/apple-sales-daily-${iso(-3)}_${yesterday}.summary.csv`), 'utf8')).toContain('date,key,title,currency,units,amount,rows');
+  });
+  test('apple-sales with a --type other than SALES, or --days on finance, is refused', async () => {
+    ascEnv();
+    const p = project();
+    await expect(capture(() => reports(p.ctx(['apple-sales', '--days', '3', '--type', 'SUBSCRIPTION', '--vendor', '12345678'])))).rejects.toThrow('SALES');
+    await expect(capture(() => reports(p.ctx(['apple-finance', '--days', '3', '--month', '2026-09', '--vendor', '12345678'])))).rejects.toThrow('monthly');
+  });
+  test('play-sales --days: the daily revenue per currency from the monthly sales zips; play-earnings --days is refused', async () => {
+    playEnv();
+    process.env.PLAY_REPORTS_BUCKET = BUCKET;
+    const p = project({ ...BASE, play: { packageName: 'com.example.notes' } });
+    const d1 = iso(-1), d2 = iso(-2);
+    const months = new Set([d1, d2].map(d => d.slice(0, 7).replace('-', '')));
+    const csv = `Order Number,Order Charged Date,Financial Status,SKU ID,Currency of Sale,Item Price,Taxes Collected,Charged Amount\nA1,${d1},Charged,pro,USD,4.99,0,4.99\nA2,${d2},Charged,pro,USD,4.99,0,4.99\nA3,${d2},Refund,pro,USD,4.99,0,4.99\n`;
+    mockFetch([
+      { match: /\/o\?prefix=sales\/salesreport_(\d{6})$/, answer: (c: Req) => { const m = /salesreport_(\d{6})/.exec(decodeURIComponent(c.path))![1]!; return { items: months.has(m) ? [{ name: `sales/salesreport_${m}.zip` }] : [] }; } },
+      { match: /\/o\/sales\/salesreport_\d{6}\.zip\?alt=media$/, answer: () => new Response(zip({ 'salesreport.csv': csv }) as Uint8Array<ArrayBuffer>) },
+    ]);
+    const r = await capture(() => reports(p.ctx(['play-sales', '--days', '2', '--json'])));
+    const j = jsonOut(r.out) as { days: { date: string; net: number }[]; totals: unknown[]; emptyDays: string[] };
+    // one zip per month the window touches: a window across a month end reads the same fixture twice, so compare per day
+    const once = months.size === 1;
+    expect(j.days).toMatchObject([{ date: d2, currency: 'USD', orders: once ? 1 : 2, refunds: once ? 1 : 2 }, { date: d1, orders: once ? 1 : 2 }]);
+    if (once) expect(j.totals).toEqual([{ currency: 'USD', orders: 2, refunds: 1, charged: 9.98, refunded: -4.99, net: 4.99 }]);
+    expect(j.emptyDays).toEqual([]);
+    expect(existsSync(join(p.root, `.storebound/reports/play-sales-daily-${d2}_${d1}.summary.csv`))).toBe(true);
+    await expect(capture(() => reports(p.ctx(['play-earnings', '--days', '2'])))).rejects.toThrow('monthly');
+  });
+});
diff --git a/tests/analytics.test.ts b/tests/analytics.test.ts
index 6b97c4b..24fa5ed 100644
--- a/tests/analytics.test.ts
+++ b/tests/analytics.test.ts
@@ -51,7 +51,7 @@ describe('apple analytics reports', () => {
 describe('play statistics exports', () => {
   test('file names, months, bucket', () => {
     expect(monthsBetween('2026-11-20', '2027-02-01')).toEqual(['202611', '202612', '202701', '202702']);
-    expect(playObjects('com.example.game', '202610')).toEqual({ storePerformance: 'stats/store_performance/store_performance_com.example.game_202610_country.csv', installs: 'stats/installs/installs_com.example.game_202610_country.csv' });
+    expect(playObjects('com.example.game', '202610')).toEqual({ storePerformance: 'stats/store_performance/store_performance_com.example.game_202610_country.csv', installs: 'stats/installs/installs_com.example.game_202610_country.csv', installsOverview: 'stats/installs/installs_com.example.game_202610_overview.csv' });
     expect(bucketName('gs://pubsite_prod_rev_0000/stats')).toBe('pubsite_prod_rev_0000');
   });
   test('daily sums across countries', () => {

From 1030cdff0ca6c071ee0cf2b64eeef923d4f79ca0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 10:27:48 +0700
Subject: [PATCH 166/255] storebound 0.8.51: version in package.json and every
 copy, CHANGELOG 0.8.51 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 01cf4d6..3018ecf 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.50",
+      "version": "0.8.51",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5852018..9e731ce 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 2089618..a391d94 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1176b4d..2151261 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.51 · 2026-10-26
+
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
 - Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
 - `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 2b138a0..e1ab65e 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 46fcc92..f1ff2dd 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.50"
+version = "0.8.51"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1c930f7..3b51da9 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.50"
+version = "0.8.51"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 87770a9..ae91aaf 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 6a57412..2e82de2 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index a626f6b..1b89e5b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.50",
+  "version": "0.8.51",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 05d0e227a1c52627bb52a31b5109773d6bcf2cd3 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 11:05:08 +0700
Subject: [PATCH 167/255] release: the dev-channel job never gates a release;
 desktop-dev retries the live dev latest.json on 5xx

---
 tools/desktop-dev.ts       | 12 ++++++++----
 tools/release-candidate.ts |  5 +++--
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/tools/desktop-dev.ts b/tools/desktop-dev.ts
index 29f8a30..fd089f6 100644
--- a/tools/desktop-dev.ts
+++ b/tools/desktop-dev.ts
@@ -62,10 +62,14 @@ export function pruneDev<T extends { tag_name: string }>(releases: T[], keep = K
 }
 
 async function liveDev(): Promise<string | null> {
-  const r = await fetch(`${DEV_URL}?t=${Date.now()}`, { signal: AbortSignal.timeout(20_000) }).catch(() => null);
-  if (!r || r.status === 404) return null;
-  if (!r.ok) throw new Error(`${DEV_URL}: HTTP ${r.status}`);
-  return ((await r.json()) as { version?: string }).version ?? null;
+  // a 5xx from the CDN / origin is often a blip: try a few times before giving up
+  for (let i = 0; ; i++) {
+    const r = await fetch(`${DEV_URL}?t=${Date.now()}`, { signal: AbortSignal.timeout(20_000) }).catch(() => null);
+    if (r?.status === 404) return null;
+    if (r?.ok) return ((await r.json()) as { version?: string }).version ?? null;
+    if (i >= 4) throw new Error(`${DEV_URL}: ${r ? `HTTP ${r.status}` : 'no answer'} after ${i + 1} tries`);
+    await new Promise(res => setTimeout(res, 5_000 * (i + 1)));
+  }
 }
 
 function commitDate(): Date {
diff --git a/tools/release-candidate.ts b/tools/release-candidate.ts
index bb0ff92..bb4e8b3 100644
--- a/tools/release-candidate.ts
+++ b/tools/release-candidate.ts
@@ -95,8 +95,9 @@ export interface Task { id: number; name: string; run_number: number; workflow_i
 /** The state of a commit from its ci.yml jobs (the newest run of that commit) and whether its record exists. Pure. */
 export function taskState(tasks: Task[], sha: string, runUrl: (n: number) => string): Exclude<Status, { state: 'green' }> {
   // the background test jobs (ci, acceptance) never gate a release (the owner's decision 2026-10-16): only the
-  // installer builds and the record count; tools/ci-status.ts reports the tests
-  const mine = tasks.filter(t => t.head_sha === sha && t.workflow_id === 'ci.yml' && !/^(ci|acceptance\b)/.test(t.name));
+  // installer builds and the record count; tools/ci-status.ts reports the tests. The dev job (the owner's dev update
+  // channel) never gates a release either: a hiccup publishing a dev build must not hold back npm.
+  const mine = tasks.filter(t => t.head_sha === sha && t.workflow_id === 'ci.yml' && !/^(ci|acceptance\b|dev$)/.test(t.name));
   if (!mine.length) return { state: 'none' };
   const latest = Math.max(...mine.map(t => t.run_number));
   const jobs = mine.filter(t => t.run_number === latest);

From 1953aa59d8e6645471205986644ad3c143f5147b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 11:05:27 +0700
Subject: [PATCH 168/255] CHANGELOG: 0.8.51 was not published

---
 CHANGELOG.md | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2151261..9c1cfa1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,11 +3,14 @@
 
 ## Unreleased
 
-## 0.8.51 · 2026-10-26
-
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
 - Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
 - `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
+- Release: the dev-channel CI job no longer gates a release.
+
+## 0.8.51 · 2026-10-26
+
+- Tagged but not published (the dev-channel job hit a CDN 502); everything ships in the next version.
 
 ## 0.8.50 · 2026-10-25
 

From 46c841d209ebfda4b3d2bcd020afec4785a47e52 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 11:08:21 +0700
Subject: [PATCH 169/255] storebound 0.8.52: version in package.json and every
 copy, CHANGELOG 0.8.52 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 3018ecf..a0aeffc 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.51",
+      "version": "0.8.52",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 9e731ce..e43acdd 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index a391d94..eaa58fd 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9c1cfa1..76a4214 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.52 · 2026-10-26
+
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
 - Snapshots carry active-user numbers per day: App Store App Usage (`sessions`, `activeDevices`, `sessionSeconds`, `crashes` from the App Sessions and App Crashes reports; a missing usage report is a `notes` line, not a failure) and Play `activeDeviceInstalls` and `totalUserInstalls` (installs overview file, else the country file summed) next to `installs` (Daily User Installs).
 - `reports apple-sales --days N | --from YYYY-MM-DD [--to ...] --json` reads the daily SALES reports of a range into one JSON (per-day summary and totals per currency, range totals per currency, `missing` days listed, never errors); `reports play-sales --days N | --from ...` gives the daily revenue per currency from the estimated sales reports (orders, refunds, charged, refunded, net, by order charged date). MCP `reports` takes `days`, `from`, `to`.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index e1ab65e..8b14fc0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index f1ff2dd..3711bbe 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.51"
+version = "0.8.52"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 3b51da9..907c06a 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.51"
+version = "0.8.52"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index ae91aaf..c8933aa 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 2e82de2..2c978f8 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 1b89e5b..081b8c8 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.51",
+  "version": "0.8.52",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From c247b7e54afa8e0e4286c57fbb1cfc13a87c997e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 16:52:29 +0700
Subject: [PATCH 170/255] release --resume: skip the desktop publish when the
 version is already live (a second run re-signs and the server never replaces
 a published file)

---
 tools/release.ts | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tools/release.ts b/tools/release.ts
index 16e3ec7..3caac77 100644
--- a/tools/release.ts
+++ b/tools/release.ts
@@ -395,6 +395,13 @@ async function main(): Promise<void> {
 
   // ---------------------------------------------------------------- 6. publish
   await phase('publish (VDS seeds from Forgejo, Mac files once, latest.json)', async () => {
+    // a resume after a publish that went out (only its check failed, e.g. the site was down) must not publish again:
+    // signatures are not byte-identical on a second run and the server never replaces a published file
+    if (!rehearsal && resume) {
+      const live = await fetch(`https://storebound.dev/desktop/latest.json?t=${Date.now()}`, { signal: AbortSignal.timeout(20_000) })
+        .then(r => (r.ok ? r.json() as Promise<{ version?: string }> : null)).catch(() => null);
+      if (live?.version === version) { say(`desktop ${version} is already live on the stable channel: publish skipped`); return; }
+    }
     const code = await bg('publish', ['bun', 'tools/desktop-release.ts', 'publish', '--out', out, '--host', host, '--channel', rehearsal ? 'rehearsal' : 'stable', '--forgejo-tag', tag, '--yes'], join(logDir, 'publish.log'), { timeoutMs: 45 * 60_000 });
     if (code !== 0) fail(`publish failed: ${join(logDir, 'publish.log').replace(HOME, '~')}`);
   });

From ae9d26d3f67d4f91483f6ee6ab11cef8772ccb80 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 18:09:50 +0700
Subject: [PATCH 171/255] Updates are agent steps: --yes ships an update of a
 live app (Play production, App Store submit / release) without an owner gate;
 the first release stays the owner's (exit 3 OWNER_STEP, --first-release);
 apple release is a ship step

---
 .cursor/rules/storebound.mdc       |   6 +
 .github/copilot-instructions.md    |   6 +
 AGENTS.md                          |   6 +
 CHANGELOG.md                       |   2 +
 GEMINI.md                          |   6 +
 cli/apple/release.ts               |  38 ++++-
 cli/apple/resubmit.ts              |  15 +-
 cli/commands.ts                    |   8 +-
 cli/data/flags.json                |  20 ++-
 cli/lib/fastlane.ts                |   2 +-
 cli/lib/release-kind.ts            |  68 ++++++++
 cli/lib/review-submit.ts           |   2 +-
 cli/lib/ship-step.ts               |   7 +-
 cli/mcp-tools.ts                   |   2 +-
 cli/play/release.ts                |  25 ++-
 cli/play/upload.ts                 |  15 +-
 cli/serve.ts                       |   2 +-
 docs/agents-core.md                |   6 +
 docs/bypass.md                     |  27 ++-
 docs/pitfalls.md                   |   1 +
 docs/ship-step.md                  |  29 +++-
 skills/play-first-release/SKILL.md |   4 +-
 skills/release-management/SKILL.md |  22 ++-
 skills/store-pitfalls/SKILL.md     |  18 ++
 tests/game-services.test.ts        |   1 +
 tests/resubmit.test.ts             |   7 +-
 tests/ship-step.test.ts            |   2 +
 tests/update-gate.test.ts          | 259 +++++++++++++++++++++++++++++
 28 files changed, 562 insertions(+), 44 deletions(-)
 create mode 100644 cli/lib/release-kind.ts
 create mode 100644 tests/update-gate.test.ts

diff --git a/.cursor/rules/storebound.mdc b/.cursor/rules/storebound.mdc
index 18a30b6..2b9d056 100644
--- a/.cursor/rules/storebound.mdc
+++ b/.cursor/rules/storebound.mdc
@@ -20,6 +20,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
index 7ab0224..2082191 100644
--- a/.github/copilot-instructions.md
+++ b/.github/copilot-instructions.md
@@ -20,6 +20,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/AGENTS.md b/AGENTS.md
index ea2ee8f..e1b9812 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -21,6 +21,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 76a4214..54743a2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Updates are agent steps (the owner's standing rule), first releases stay the owner's. `play release <aab> --production completed|inProgress --yes`, `play upload --track production --yes`, `apple submit --build <n> --yes` and `apple release --manual-release --yes` run without an owner gate, in a terminal and in a pipeline, when the store says the app is already live (Play: the production track holds a completed / inProgress / halted release; App Store: a version of the platform is or was `READY_FOR_SALE` / `READY_FOR_DISTRIBUTION` / `REPLACED_WITH_NEW_VERSION`; `cli/lib/release-kind.ts`). The result line carries `releaseKind`; a re-run is exit 7. The first-ever release of an app with `--yes` is exit 3 `OWNER_STEP` ("first release of this app: the owner approves it once"), approved by `--first-release` (after the owner's yes) or bypass mode; a person answering the prompt (no `--yes`) is the approval too. `apple release` is now a ship step (`--json`, `--result-file`, exit 7 when the version is released already). Policy in docs/bypass.md ("Updates are agent steps"), docs/ship-step.md, the release-management and play-first-release skills, AGENTS.md; pitfall 123 / 96.
+
 ## 0.8.52 · 2026-10-26
 
 - `analytics snapshot` and `reports` for a collector: a store-only config may name the App Store app by `apple.appId` alone (`bundleId` null or absent; every write still needs it); the Play reports bucket also comes from env `PLAY_REPORTS_BUCKET` or the credential profile's `reportsBucket` when `play.reportsBucket` is missing; `analytics snapshot --json` prints the snapshot as one JSON document on stdout (also when every store failed, with the exit code 1) and `--no-write` skips the file.
diff --git a/GEMINI.md b/GEMINI.md
index 3677fc4..144e9e7 100644
--- a/GEMINI.md
+++ b/GEMINI.md
@@ -19,6 +19,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/cli/apple/release.ts b/cli/apple/release.ts
index 53c1680..ab0f77c 100644
--- a/cli/apple/release.ts
+++ b/cli/apple/release.ts
@@ -1,15 +1,21 @@
 // Release management for an App Store version.
 //   storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]
-//   storebound apple release --manual-release [--version 1.2.0] [--yes]
+//   storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]
 // Both take --platform ios|macos|tvos|visionos; without it the platform that has the version this needs is used (both: asks).
 // Phased release: 7-day automatic rollout to users with automatic updates (1, 2, 5, 10, 20, 50, 100 %); anyone can
 // still update by hand from the App Store. Pause holds it (up to 30 days in total), it is NOT a rollback: users who
 // updated keep the build. "complete" releases to everyone at once.
-// --manual-release releases an approved version (PENDING_DEVELOPER_RELEASE). Public and irreversible: asks first.
-// Neither --manual-release nor resume / complete is offered to agents through `storebound mcp`.
+// --manual-release releases an approved version (PENDING_DEVELOPER_RELEASE). Public and irreversible: asks first
+// (--yes in scripts). Releasing an UPDATE of an app already on sale is an agent step (no owner gate, also in a
+// pipeline; under the ship-step contract: exit 7 when the version is released already). The first-ever release of an
+// app with --yes is exit 3 OWNER_STEP unless the owner approved it (--first-release, or bypass mode;
+// cli/lib/release-kind.ts). Neither --manual-release nor resume / complete is offered to agents through `storebound mcp`.
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
-import { done, log } from '../lib/log';
+import { done, log, printJson } from '../lib/log';
+import { shipNoop, shipReport, shipRun } from '../lib/ship-step';
+import { consoleUrl } from '../lib/console-links';
+import { appleReleaseKind, enforceFirstRelease } from '../lib/release-kind';
 import { type PhasedAction, phasedRequest } from '../lib/release';
 import { createOnce } from '../lib/upsert';
 import { ascClient, type J } from './asc';
@@ -27,6 +33,19 @@ export async function run(ctx: Ctx): Promise<void> {
   const appId = await c.app();
   const want = a.get('version');
   const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
+  shipReport({ version: want, url: consoleUrl('asc.version') });
+  // the ship-step contract: the version is released already (and none waits for release): nothing to do, exit 7
+  if (manual && shipRun()) {
+    const every = await allVersions(c, appId);
+    const waiting = every.some((x: J) => state(x) === 'PENDING_DEVELOPER_RELEASE' && (!want || x.attributes.versionString === want));
+    const out = every.find((x: J) => ['READY_FOR_SALE', 'READY_FOR_DISTRIBUTION', 'PROCESSING_FOR_DISTRIBUTION'].includes(state(x)) && (!want || x.attributes.versionString === want));
+    if (!waiting && out) {
+      shipNoop({ version: String(out.attributes.versionString), state: state(out) });
+      if (a.has('json')) printJson({ version: String(out.attributes.versionString), state: state(out), released: true, alreadyThere: true });
+      done('apple', `${String(out.attributes.versionString)} is ${state(out)} already: nothing released`);
+      return;
+    }
+  }
   // the platform: --platform, else the one with the version this needs (both: asks)
   const needs = (x: J): boolean => (!want || x.attributes.versionString === want) && (manual ? state(x) === 'PENDING_DEVELOPER_RELEASE'
     : phased === 'on' ? !['READY_FOR_DISTRIBUTION', 'READY_FOR_SALE', 'REPLACED_WITH_NEW_VERSION', 'REMOVED_FROM_SALE'].includes(state(x))
@@ -44,10 +63,19 @@ export async function run(ctx: Ctx): Promise<void> {
     if (state(v) !== 'PENDING_DEVELOPER_RELEASE') throw new Error(`${tag}: only an approved version waiting for developer release can be released`);
     const pr = (await c.maybe(`/v1/appStoreVersions/${v.id}/appStoreVersionPhasedRelease`))?.data;
     const how = pr ? 'phased over 7 days (phased release is on)' : 'to everyone at once (no phased release)';
-    if (dry) { log('apple', `would release ${tag} ${how} (dry)`); return; }
+    const kind = appleReleaseKind(versions.map((x: J) => ({ versionString: String(x.attributes.versionString), state: state(x) })));
+    shipReport({ version: String(v.attributes.versionString), state: state(v) });
+    if (dry) {
+      log('apple', `would release ${tag} ${how} (dry): ${kind.kind === 'update' ? 'update of an app on sale, no owner step' : 'FIRST release of this app (the owner approves it once: --first-release)'} (${kind.why})`);
+      if (a.has('json')) printJson({ version: String(v.attributes.versionString), state: state(v), releaseKind: kind.kind, dryRun: true });
+      return;
+    }
+    if (!enforceFirstRelease(ctx, kind, { store: 'apple', what: 'the first release of the app', consoleUrl: consoleUrl('asc.version') })) return;
     if (!(await confirm(ctx, `Release ${tag} on the App Store now, ${how}? This is public.`))) return;
     await c.asc('POST', '/v1/appStoreVersionReleaseRequests', { data: { type: 'appStoreVersionReleaseRequests',
       relationships: { appStoreVersion: { data: { type: 'appStoreVersions', id: v.id } } } } });
+    shipReport({ state: 'PENDING_APPLE_RELEASE' });
+    if (a.has('json')) printJson({ version: String(v.attributes.versionString), state: 'PENDING_APPLE_RELEASE', releaseKind: kind.kind, released: true });
     done('apple', `release requested for ${tag}; the store updates within a few hours`);
     return;
   }
diff --git a/cli/apple/resubmit.ts b/cli/apple/resubmit.ts
index 9b23312..5bed343 100644
--- a/cli/apple/resubmit.ts
+++ b/cli/apple/resubmit.ts
@@ -1,5 +1,5 @@
 // Resubmit an App Store version after a rejection (Invalid Binary, Guideline 2.1, ...) with a new build.
-//   storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]
+//   storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]
 // The platform: --platform, else the one with a rejected version or an UNRESOLVED_ISSUES submission (both: asks).
 // 1. The rejected version (--version, else the one in the submission back from App Review, else the one in a
 //    rejected state) gets build n attached, by explicit number (never "the latest"); it must be VALID.
@@ -13,7 +13,10 @@
 // 4. PATCH submitted: true. On "not ready yet" the items are read again: a REJECTED one left over stops the run with
 //    the item and how to resolve it (retrying never passes); only when none is left is the submit retried with backoff
 //    (right after a build is attached), with heartbeat lines and a 10-minute limit.
-// Submitting is the owner's step: without --yes this is a dry run with the plan table. Not offered through MCP.
+// Without --yes this is a dry run with the plan table. Submitting an UPDATE of an app that is already on sale (a version
+// of the platform is or was READY_FOR_SALE) is an agent step: --yes sends it, no owner gate, also in a pipeline. The
+// first-ever submission of an app is the owner's: with --yes it is exit 3 OWNER_STEP unless the owner approved it
+// (--first-release, or bypass mode); cli/lib/release-kind.ts. Not offered through MCP.
 // `storebound apple submit --build <n>` (cli/apple/submit.ts) runs the same steps for a first submission: the version
 // is --version, else the one an open submission holds, else the editable one (Prepare for Submission or rejected).
 // Under `serve` (the desktop's owner action) the plan table is printed next to the --json result.
@@ -30,6 +33,7 @@ import { openSubmissions } from './submission';
 import { ensureGcSwitch, gameCenterInUse, gcSwitchPlan, readGcSwitch } from './game-center';
 import { shipNoop, shipPhase, shipReport, shipRun } from '../lib/ship-step';
 import { consoleUrl } from '../lib/console-links';
+import { appleReleaseKind, enforceFirstRelease } from '../lib/release-kind';
 import { allVersions, parsePlatform, pickPlatform, platformLabel, platformOf, versionsPath } from './platform';
 
 /** App Store version states a first submission may send: the editable version (Prepare for Submission, a rejected
@@ -112,13 +116,14 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   const marks = state.choice?.action === 'reuse' ? toResolve(state.choice.sub.items, resolve).map(i => ({ item: i.id ?? null, kind: i.kind, what: labelOf(state, i.versionId, i.kind) })) : [];
   const blockers = [...(build.action === 'refuse' ? [build.reason] : []), ...plan.blockers];
   const dry = a.has('dry') || !a.has('yes');
+  const kind = appleReleaseKind(versions.map((x: J) => ({ versionString: String(x.attributes.versionString), state: stateOf(x) })));
   // Game Center: a build with the entitlement needs the app's Game Center detail and the version's switch, else the
   // submission answers 409 STATE_ERROR.BUILD_INDICATES_GAME_CENTER_ENABLED (seen live); the same upsert as apple game-center
   const gcUse = gameCenterInUse(config, root);
   const gc = gcUse.inUse ? await readGcSwitch(c, appId, v) : null;
   const gcPlan = gc ? gcSwitchPlan(gc) : [];
   if (a.has('json')) {
-    printJson({ dryRun: dry, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
+    printJson({ dryRun: dry, releaseKind: kind.kind, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
     // the desktop's owner dialog shows the output text: the plan table goes with the result there
     if (process.env.STOREBOUND_MACHINE === '1') { console.log(formatRows(rows)); for (const x of blockers) warn(TAG, x); }
     if (blockers.length) process.exitCode = 1;
@@ -126,6 +131,7 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
     if (dry || blockers.length || state.choice?.action === 'busy') return;
   } else {
     console.log(formatRows(rows));
+    log(TAG, `${kind.kind === 'update' ? 'update of an app on sale' : 'FIRST release of this app (the owner approves it once: --first-release)'}: ${kind.why}`);
     for (const l of gcPlan) log(TAG, `${dry ? 'would ' : ''}${l} (Game Center: ${gcUse.why})`);
     for (const s of plan.skipped) log(TAG, `not added ${s.id}: ${s.why}`);
     for (const x of blockers) warn(TAG, x);
@@ -133,9 +139,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   if (blockers.length) { process.exitCode = 1; done(TAG, 'nothing sent: fix the blockers above'); return; }
   if (state.choice?.action === 'busy') { shipNoop({ version: versionString, state: stateOf(v) }); done(TAG, `nothing to ${mode}: ${state.choice.why}`); return; }
   if (dry) {
-    done(TAG, a.has('dry') ? 'dry run: nothing sent' : `dry run (no --yes): nothing sent. ${mode === 'submit' ? 'Submitting' : 'Resubmitting'} is the owner's step: after the owner's yes, run it again with --yes`);
+    done(TAG, a.has('dry') ? 'dry run: nothing sent' : `dry run (no --yes): nothing sent. ${kind.kind === 'update' ? 'This is an update of an app on sale: run it again with --yes, no owner step' : `${mode === 'submit' ? 'Submitting' : 'Resubmitting'} the first release is the owner's step: after the owner's yes, run it again with --yes --first-release`}`);
     return;
   }
+  if (!enforceFirstRelease(ctx, kind, { store: 'apple', what: 'the first submission to App Review', consoleUrl: consoleUrl('asc.version') })) return;
 
   shipPhase('submit', `${mode === 'submit' ? 'submitting' : 'resubmitting'} ${versionString} with build ${number}`);
   if (build.action === 'attach') {
diff --git a/cli/commands.ts b/cli/commands.ts
index 949dd4e..90df327 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -59,9 +59,9 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'play listing': [() => import('./play/listing'), 'app details + title / short / full description per language; pull [--write]: live listings back into the listing file (diff first)'],
   'play images': [() => import('./play/images'), 'icon, feature graphic, phone screenshots per language, optional tablet / TV / Wear sets when rendered (play.tablets); --variant <id>, --prune'],
   'play data-safety': [() => import('./play/data-safety'), '[--force] Data safety form (CSV import through the API; skipped when unchanged since the last upload)'],
-  'play release': [() => import('./play/release'), 'upload an AAB and put it on tracks with release notes'],
+  'play release': [() => import('./play/release'), 'upload an AAB and put it on tracks with release notes; --production completed|inProgress --yes ships an UPDATE of a published app without an owner step (a first-ever production release is the owner\'s: exit 3 OWNER_STEP, --first-release after the owner\'s yes)'],
   'play build': [() => import('./play/build'), 'gradle bundleRelease (Flutter: flutter build appbundle) with the next free versionCode and the upload key from env / .storebound; --dry'],
-  'play upload': [() => import('./play/upload'), 'upload an AAB to a testing track (--track internal|alpha|beta), versionCode checked first; --dry read-only, asks first'],
+  'play upload': [() => import('./play/upload'), 'upload an AAB to a track (--track internal|alpha|beta|production), versionCode checked first; production with --yes is an update step for a published app (a first-ever release is the owner\'s: exit 3 OWNER_STEP); --dry read-only, asks first'],
   'play status': [() => import('./play/status'), 'tracks, listings, products (read-only)'],
   'play rollout': [() => import('./play/rollout'), 'staged rollout: --fraction x | --halt | --resume | --complete (asks first)'],
   'play share': [() => import('./play/share'), 'internal app sharing: upload an AAB / APK, print the share link (asks first; --dry)'],
@@ -74,7 +74,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple subscriptions': [() => import('./apple/subscriptions'), 'subscription groups, subscriptions, localizations, prices (equalized + overrides + --csv), intro offers, availability, review screenshot (asks first)'],
   'apple iap-review': [() => import('./apple/iap-review'), 'IAP review screenshots + product states'],
   'apple iap-submit': [() => import('./apple/iap-submit'), 'IAP + subscription versions into a review submission (first of a type: --with-version), then submit (asks first; --no-submit keeps a draft); reuses the open submission, never a second one'],
-  'apple submit': [() => import('./apple/submit'), 'a version to App Review: --build <n> attached (by number, VALID), the open submission reused, the ready IAPs / subscriptions with it, submitted with retry (dry run unless --yes); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
+  'apple submit': [() => import('./apple/submit'), 'a version to App Review: --build <n> attached (by number, VALID), the open submission reused, the ready IAPs / subscriptions with it, submitted with retry (dry run unless --yes; an UPDATE of an app on sale needs no owner step, the first-ever submission is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple resubmit': [() => import('./apple/resubmit'), 'after a rejection: --build <n> attached to the rejected version, the UNRESOLVED_ISSUES submission reused (missing items added), resubmitted with retry (dry run unless --yes); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple offer-codes': [() => import('./apple/offer-codes'), 'offer codes for one-time purchases (campaigns; custom and one-time-use codes with --codes, asks first)'],
   'apple win-back': [() => import('./apple/win-back'), 'win-back offers for lapsed subscribers (asks first: they go live on their start date)'],
@@ -89,7 +89,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple status': [() => import('./apple/status'), 'versions, builds, IAPs, review submissions (--wait-review, --cancel-submission <id>); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple creative-assets': [() => import('./apple/creative-assets'), 'Header and Search Results: product page header (21:9) and search results asset (3:2) per locale, or one universal 5244x2950 PNG; uploads to the Asset Library and places it once Apple approved it, reporting waiting ones per locale (MD5 upsert, safe to re-run); --add-for-review, --verify (read-only), --dry'],
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
-  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
+  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first; --yes for an update of an app on sale, exit 7 when already released; the first-ever release is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple signing': [() => import('./apple/signing'), 'status | ensure: bundle id capabilities, distribution certificate (key kept in .storebound/signing), App Store profiles installed for Xcode; --dry, asks first'],
   'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --platform macos --tauri <src-tauri> [--path-free] builds a Tauri app for the Mac App Store (signed .app, sandbox entitlements, profile, productbuild .pkg); --dry'],
   'apple upload': [() => import('./apple/upload'), 'upload an IPA, or with --platform macos a signed .pkg (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 7a49ac1..798cab7 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -228,14 +228,20 @@
    "enable"
   ],
   "apple release": [
+   "env-file",
+   "first-release",
    "manual-release",
    "phased",
    "platform",
-   "version"
+   "progress",
+   "result-file",
+   "version",
+   "version-from"
   ],
   "apple resubmit": [
    "build",
    "env-file",
+   "first-release",
    "keychain",
    "locale-map",
    "new-version",
@@ -284,6 +290,7 @@
   "apple submit": [
    "build",
    "env-file",
+   "first-release",
    "keychain",
    "locale-map",
    "new-version",
@@ -758,6 +765,7 @@
    "alpha",
    "beta",
    "env-file",
+   "first-release",
    "fraction",
    "include-drafts",
    "internal",
@@ -821,6 +829,7 @@
   "play upload": [
    "env-file",
    "evidence",
+   "first-release",
    "include-drafts",
    "name",
    "not-sent-for-review",
@@ -1205,6 +1214,7 @@
    "expo",
    "fields",
    "file",
+   "first-release",
    "flavor",
    "floor",
    "flutter",
@@ -1514,10 +1524,10 @@
   ],
   "apple release": [
    "storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]",
-   "storebound apple release --manual-release [--version 1.2.0] [--yes]"
+   "storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]"
   ],
   "apple resubmit": [
-   "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--dry] [--yes] [--json]"
+   "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]"
   ],
   "apple review-details": [
    "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
@@ -1688,7 +1698,7 @@
    "storebound play products [--dry] [--only id1,id2] [--yes] [--allow-price-changes]"
   ],
   "play release": [
-   "storebound play release app-release.aab [--internal completed] [--production draft] [--name \"1.0.0 (3)\"] [--dry]",
+   "storebound play release app-release.aab [--internal completed] [--production draft] [--name \"1.0.0 (3)\"] [--first-release] [--dry]",
    "storebound play release --version-code 3 --production draft",
    "storebound play release app.aab --production completed --not-sent-for-review   (commit with changesNotSentForReview=true)"
   ],
@@ -1705,7 +1715,7 @@
    "storebound play subscriptions [--dry] [--only id1,id2] [--csv store/prices.csv] [--yes] [--allow-price-changes]"
   ],
   "play upload": [
-   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
+   "storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--first-release] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]"
   ],
   "prices": [
    "storebound prices export [--out store/prices.csv] [--store apple|play] [--only ids] [--with-automatic] [--no-subscriptions] [--dry] [--json]",
diff --git a/cli/lib/fastlane.ts b/cli/lib/fastlane.ts
index 36a04ab..1cc3ec8 100644
--- a/cli/lib/fastlane.ts
+++ b/cli/lib/fastlane.ts
@@ -617,7 +617,7 @@ ${secs.join('\n\n')}
   const ACT: Record<string, string> = {
     app_store_connect_api_key: 'ASC_KEY_ID / ASC_ISSUER_ID / ASC_P8 in .storebound/credentials.json (the .p8 path, never its contents)',
     upload_to_app_store: '`storebound apple listing`, `apple screenshots`, `apple previews` (dry run first; submitting stays with the owner)', deliver: '`storebound apple listing` / `apple screenshots`',
-    upload_to_play_store: '`storebound play listing`, `play images`, `play release <aab>` (testing tracks; production is the owner\'s)', supply: '`storebound play listing` / `play images` / `play release`',
+    upload_to_play_store: '`storebound play listing`, `play images`, `play release <aab>` (testing tracks; production updates of a published app: --production completed --yes; the first-ever release is the owner\'s)', supply: '`storebound play listing` / `play images` / `play release`',
     upload_to_testflight: '`storebound apple testflight` (testflight skill)', pilot: '`storebound apple testflight` (testflight skill)',
     match: 'keep match for signing', sync_code_signing: 'keep match for signing',
     snapshot: '`storebound shots capture --source ios-sim`', capture_screenshots: '`storebound shots capture --source ios-sim`', capture_ios_screenshots: '`storebound shots capture --source ios-sim`',
diff --git a/cli/lib/release-kind.ts b/cli/lib/release-kind.ts
new file mode 100644
index 0000000..1144500
--- /dev/null
+++ b/cli/lib/release-kind.ts
@@ -0,0 +1,68 @@
+// Update or first release? The owner's standing rule (docs/bypass.md, "Updates are agent steps"): a new version of an
+// app that is ALREADY on the store ships end to end without an owner gate (submit for review, promote to production,
+// roll out, release an approved version) with --yes, also in a pipeline. The gate stays for the first-ever release of an
+// app (and, in their own commands, removal from sale and live price changes).
+// The kind comes from the store, never from the config:
+//   Google Play  the production track holds a completed / inProgress / halted release (the app was published)
+//   App Store    the platform has a version that is or was on sale (READY_FOR_SALE, READY_FOR_DISTRIBUTION,
+//                REPLACED_WITH_NEW_VERSION)
+// A first release with --yes (nobody to answer a prompt) is refused with exit 3 `OWNER_STEP` unless the owner approved
+// it: `--first-release` after the owner's yes in chat, or bypass mode (docs/bypass.md). In a terminal without --yes the
+// normal confirmation prompt is the owner's approval.
+import { bypassOn } from './bypass';
+import type { Ctx } from './ctx';
+import { declined } from './ctx';
+import { log } from './log';
+import { SHIP_EXIT, ShipStepError, shipRun } from './ship-step';
+
+export type ReleaseKind = 'update' | 'first';
+export interface KindAnswer { kind: ReleaseKind; why: string }
+
+/** Play: the production track's releases say whether the app was ever published. Pure. */
+export function playReleaseKind(production: { status?: string; versionCodes?: string[] }[] | undefined): KindAnswer {
+  const live = (production ?? []).filter(r => ['completed', 'inProgress', 'halted'].includes(String(r.status)));
+  if (live.length) return { kind: 'update', why: `the production track holds ${live.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`).join('; ')}` };
+  const drafts = (production ?? []).length;
+  return { kind: 'first', why: drafts ? 'the production track has only draft releases: the app was never published' : 'the production track is empty: the app was never published' };
+}
+
+/** App Store version states that prove the app was on sale. */
+export const APPLE_LIVE_STATES = ['READY_FOR_SALE', 'READY_FOR_DISTRIBUTION', 'REPLACED_WITH_NEW_VERSION'] as const;
+
+/** App Store: the versions of one platform say whether the app was ever on sale. Pure. */
+export function appleReleaseKind(versions: { versionString?: string; state: string }[]): KindAnswer {
+  const live = versions.filter(v => (APPLE_LIVE_STATES as readonly string[]).includes(v.state));
+  if (live.length) return { kind: 'update', why: `${live.map(v => `${v.versionString ?? '?'} ${v.state}`).join(', ')} on this platform` };
+  return { kind: 'first', why: 'no version of this app was ever on sale on this platform' };
+}
+
+export interface GateInput { kind: ReleaseKind; yes: boolean; bypass: boolean; approved: boolean }
+/** Whether the step may run. Updates always; a first release only with a person answering a prompt (no --yes), the
+ *  owner's `--first-release`, or bypass mode. Pure. */
+export function firstReleaseAllowed(g: GateInput): boolean {
+  return g.kind === 'update' || !g.yes || g.approved || g.bypass;
+}
+
+export const firstReleaseMessage = (store: 'play' | 'apple', what: string): string =>
+  `first release of this app (${store === 'play' ? 'Google Play' : 'App Store'}): ${what} is the owner's step, approved once. Updates of an app that is already live need no approval. `
+  + 'After the owner\'s yes: re-run with --first-release (or turn on bypass mode: storebound settings bypass on)';
+
+/**
+ * Applies the policy to a real run. Returns true when the step may go on. A refusal is exit 3: error.code OWNER_STEP
+ * under the ship-step contract (with the console deep link), the usual "declined" exit 3 otherwise.
+ */
+export function enforceFirstRelease(ctx: Ctx, k: KindAnswer, o: { store: 'play' | 'apple'; what: string; consoleUrl?: string }): boolean {
+  const a = ctx.args;
+  const bypass = bypassOn();
+  // the desktop's owner action: the owner pressed the button of a native dialog that showed the dry run (cli/lib/ctx.ts confirm)
+  const approved = a.has('first-release') || (process.env.STOREBOUND_SERVE === '1' && process.env.STOREBOUND_OWNER_CONFIRMED === '1');
+  if (firstReleaseAllowed({ kind: k.kind, yes: a.has('yes'), bypass, approved })) {
+    if (k.kind === 'update') log('release', `update of a live app (${k.why}): no owner step needed`);
+    else log('release', `first release (${k.why}): ${approved ? 'approved by the owner' : bypass ? 'bypass mode' : 'confirmation prompt'}`);
+    return true;
+  }
+  const msg = `${firstReleaseMessage(o.store, o.what)} (${k.why})`;
+  if (shipRun()) throw new ShipStepError(msg, SHIP_EXIT.owner, 'OWNER_STEP', o.consoleUrl);
+  declined(msg);
+  return false;
+}
diff --git a/cli/lib/review-submit.ts b/cli/lib/review-submit.ts
index d411190..d7b9585 100644
--- a/cli/lib/review-submit.ts
+++ b/cli/lib/review-submit.ts
@@ -286,7 +286,7 @@ export function resubmitRows(s: SubmitState, plan: SubmitPlan, build: BuildStep,
   }
   for (const it of plan.items) rows.push({ step: 'item', what: it.label, now: it.devRejected ? 'DEVELOPER_REJECTED' : '-', action: addAction(it) });
   if (ch?.action === 'reuse') for (const d of ch.strayDrafts) rows.push({ step: 'stray draft', what: d.id, now: `${d.state}, ${d.items.length} item(s)`, action: d.items.length ? 'left as it is (named)' : `left as it is: ${EMPTY_DRAFT}` });
-  if (ch?.action !== 'busy') rows.push({ step: 'submit', what: 'PATCH submitted: true', now: '-', action: 'owner step (--yes); retried while Apple says "not ready yet" and no item is left REJECTED' });
+  if (ch?.action !== 'busy') rows.push({ step: 'submit', what: 'PATCH submitted: true', now: '-', action: 'send with --yes (update of an app on sale: no owner step; the first-ever release: the owner approves it once); retried while Apple says "not ready yet" and no item is left REJECTED' });
   return rows;
 }
 
diff --git a/cli/lib/ship-step.ts b/cli/lib/ship-step.ts
index af8e3da..8681609 100644
--- a/cli/lib/ship-step.ts
+++ b/cli/lib/ship-step.ts
@@ -29,10 +29,11 @@ export const SHIP_STEPS: Record<string, { step: string; store: 'apple' | 'play'
   'apple upload': { step: 'upload', store: 'apple' },
   'apple submit': { step: 'submit', store: 'apple' },
   'apple resubmit': { step: 'resubmit', store: 'apple' },
+  'apple release': { step: 'release', store: 'apple' },
 };
 
 /** error.code of an exit 3: what the owner has to do. */
-export const OWNER_CODES = ['AGREEMENT_PENDING', 'SIGN_IN_REQUIRED', 'COMPLIANCE_ANSWER_MISSING', 'CONSOLE_STEP', 'CONFIRMATION_REQUIRED'] as const;
+export const OWNER_CODES = ['AGREEMENT_PENDING', 'SIGN_IN_REQUIRED', 'COMPLIANCE_ANSWER_MISSING', 'CONSOLE_STEP', 'CONFIRMATION_REQUIRED', 'OWNER_STEP'] as const;
 
 export interface ShipErrorInfo { code: string; message: string; consoleUrl?: string }
 export interface ShipResult {
@@ -155,13 +156,14 @@ export function fieldsFromDetail(key: string, d: unknown): Fields {
       const b = x.build as { number?: string } | undefined;
       return { version: str(v?.versionString), build: str(b?.number), state: dry ? 'planned' : 'WAITING_FOR_REVIEW' };
     }
+    case 'apple release': return { version: str(x.version), state: dry ? 'planned' : str(x.state) };
     default: return {};
   }
 }
 
 const DEFAULT_URL: Record<string, ConsolePage> = {
   'play build': 'play.bundle-explorer', 'play upload': 'play.releases', 'play release': 'play.releases',
-  'apple build': 'asc.testflight', 'apple upload': 'asc.testflight', 'apple submit': 'asc.app-review', 'apple resubmit': 'asc.app-review',
+  'apple build': 'asc.testflight', 'apple upload': 'asc.testflight', 'apple submit': 'asc.app-review', 'apple resubmit': 'asc.app-review', 'apple release': 'asc.version',
 };
 
 /** The final result: the contract keys, then the command's own --json fields that do not clash with them (so readers
@@ -297,6 +299,7 @@ const VERSION_FLAGS: Record<string, { version?: string; build?: string; intBuild
   'apple upload': { build: 'build' },
   'apple submit': { version: 'version', build: 'build' },
   'apple resubmit': { version: 'version', build: 'build' },
+  'apple release': { version: 'version' },
 };
 
 /** The argv with the flags of --version-from added (a flag given by hand must agree with the file). */
diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index c1432b0..17c7cf5 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -194,7 +194,7 @@ export const TOOLS: ToolDef[] = [
     description: 'Replace the whole Play Data safety form with the answers from the config (CSV import). Skipped when the CSV equals the last upload of this project (hash in .storebound/; force: true sends it anyway). dry_run prints the CSV.',
     props: { force: { type: 'boolean', default: false, description: 'Upload even when the CSV equals the last upload (after a manual change in Play Console)' } }, args: i => flag('force', i.force) },
   { name: 'play_release_testing', title: 'Release to a Play testing track', command: ['play', 'release'], write: true, network: true,
-    description: 'Upload an AAB (or reuse a versionCode) to a TESTING track (internal, alpha, beta) with release notes. Production is not available here.',
+    description: 'Upload an AAB (or reuse a versionCode) to a TESTING track (internal, alpha, beta) with release notes. Production is not available through MCP: an update of a published app is `storebound play release <aab> --production completed --yes` in a terminal or pipeline (no owner step), the first-ever production release is the owner\'s.',
     props: { aab: { type: 'string', description: 'Path to the .aab' }, version_code: { type: 'integer', minimum: 1 },
       track: { type: 'string', enum: ['internal', 'alpha', 'beta'], default: 'internal' }, status: { type: 'string', enum: ['completed', 'draft'], default: 'completed' }, not_sent_for_review: notSentProp },
     args: i => [...(i.aab ? [String(i.aab)] : []), ...opt('version-code', i.version_code), `--${String(i.track ?? 'internal')}`, String(i.status ?? 'completed'), ...flag('not-sent-for-review', i.not_sent_for_review)] },
diff --git a/cli/play/release.ts b/cli/play/release.ts
index 53fd29b..5e99e16 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -1,10 +1,14 @@
 // Upload an AAB (or reuse an uploaded versionCode) and put it on one or more tracks in one edit, with the "What's new"
 // of every listing language as release notes.
-//   storebound play release app-release.aab [--internal completed] [--production draft] [--name "1.0.0 (3)"] [--dry]
+//   storebound play release app-release.aab [--internal completed] [--production draft] [--name "1.0.0 (3)"] [--first-release] [--dry]
 //   storebound play release --version-code 3 --production draft
 //   storebound play release app.aab --production completed --not-sent-for-review   (commit with changesNotSentForReview=true)
 // Tracks: internal, alpha (closed), beta (open), production; status completed | draft | inProgress | halted.
-// Without a track flag: internal, completed. A production release that is not a draft asks for confirmation.
+// Without a track flag: internal, completed. A production release that is not a draft asks for confirmation (--yes in
+// scripts). An UPDATE of a published app (the production track holds a completed / inProgress / halted release) needs
+// no owner step: `play release <aab> --production completed --yes` runs in a pipeline (cli/lib/release-kind.ts). The
+// first-ever production release with --yes is exit 3 OWNER_STEP unless the owner approved it (--first-release, or
+// bypass mode).
 // Draft app (never published): Play only accepts status "draft" on any track; the first production release is sent
 // from the Console (see the play-first-release skill).
 import { readFileSync, statSync } from 'node:fs';
@@ -19,6 +23,7 @@ import { usedVersionCodes } from './next-version-code';
 import { readPlayCopy, refusePlayNotes } from './listing';
 import { shipNoop, shipPhase, shipReport } from '../lib/ship-step';
 import { consoleUrl, playTrackPage } from '../lib/console-links';
+import { enforceFirstRelease, playReleaseKind } from '../lib/release-kind';
 
 const TRACKS = ['internal', 'alpha', 'beta', 'production'];
 
@@ -49,8 +54,20 @@ export async function run(ctx: Ctx): Promise<void> {
   for (const t of tracks) if (!STATUSES.includes(t.status)) throw new Error(`--${t.track}: status must be one of ${STATUSES.join(', ')}`);
   const fraction = a.get('fraction');
   const live = tracks.find(t => t.track === 'production' && t.status !== 'draft');
+  const gated = tracks.find(t => t.track === 'production' && (t.status === 'completed' || t.status === 'inProgress'));
   const notes = readPlayCopy(ctx).filter(c => c.whatsNew).map(c => ({ language: c.lang, text: c.whatsNew }));
   refusePlayNotes(ctx, notes, `play release notes${a.has('dry') ? ' (dry run)' : ''}`);
+  // update of a published app: no owner step; the first production release: the owner's (exit 3 OWNER_STEP with --yes)
+  let early: Awaited<ReturnType<typeof playClient>> | undefined;
+  const client = async (): Promise<Awaited<ReturnType<typeof playClient>>> => (early ??= await playClient(root, pkg));
+  let kind: ReturnType<typeof playReleaseKind> | null = null;
+  if (gated) {
+    const p0 = await client();
+    const prod = await p0.read(async id => (await p0.call<{ releases?: PlayTrackRelease[] }>('GET', `${p0.API}/edits/${id}/tracks/production`).catch(() => ({ releases: [] }))).releases ?? []);
+    kind = playReleaseKind(prod);
+    if (a.has('dry')) log('play', `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
+    else if (!enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) return;
+  }
   if (live && !a.has('dry') && !(await confirm(ctx, `Release to PRODUCTION as "${live.status}" (public once Google approves)?`))) return;
 
   if (aab) {
@@ -59,7 +76,7 @@ export async function run(ctx: Ctx): Promise<void> {
     if (sdkWhy) throw new Error(`${aab}: not released, ${sdkWhy}`);
   }
   shipReport({ track: tracks.map(t => t.track).join(','), url: consoleUrl(playTrackPage(tracks.length === 1 ? tracks[0]!.track : undefined)) });
-  const play = await playClient(root, pkg);
+  const play = await client();
   let released = fixed ?? '';
   let nothing = false;
   try {
@@ -116,6 +133,6 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   // machine-readable result for CI scripts (a Jenkins stage reads it instead of calling the Play API itself)
   if (a.has('json')) printJson({ versionCode: released ? Number(released) : null, sha256: aab ? createHash('sha256').update(readFileSync(aab)).digest('hex') : null, name: a.get('name') ?? null,
-    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry') });
+    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry'), ...(kind ? { releaseKind: kind.kind } : {}) });
   done('play', 'release done');
 }
diff --git a/cli/play/upload.ts b/cli/play/upload.ts
index 0ccad8d..ed4e200 100644
--- a/cli/play/upload.ts
+++ b/cli/play/upload.ts
@@ -1,12 +1,14 @@
-// Upload an Android App Bundle to a Google Play testing track.
-//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
+// Upload an Android App Bundle to a Google Play track (testing tracks, or production for an UPDATE of a published app).
+//   storebound play upload [<app.aab>] [--track internal|alpha|beta|production] [--status completed|draft] [--version-code N] [--name text] [--not-sent-for-review] [--first-release] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 // Default AAB: the newest in build/android (storebound play build), or with --version-code N the one with that
 // versionCode. Package and versionCode are read from the bundle; the upload is refused when Play already has that
 // versionCode (exit 1), and under the ship-step contract (--json / --result-file, docs/ship-step.md) it is exit 7
 // "nothing to do" with the track and state that are there: never a second upload. Release notes: the "What's new" of
 // every listing language. --dry is read-only (one throwaway edit: version codes and the track are read, the edit is
 // deleted). A real run asks first (--yes in scripts). --track production sends the release to Google's review (a
-// pipeline's update step); --status draft keeps it for the Console.
+// pipeline's update step): no owner gate when the production track already holds a published release (an update of
+// a live app, cli/lib/release-kind.ts); a first-ever production release with --yes is exit 3 OWNER_STEP unless the owner
+// approved it (--first-release, or bypass mode). --status draft keeps the release for the Console.
 import { readdirSync, readFileSync, statSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import type { Ctx } from '../lib/ctx';
@@ -21,6 +23,7 @@ import { usedVersionCodes } from './next-version-code';
 import { runPreCheck } from '../lib/pre-check';
 import { shipNoop, shipPhase, shipReport, shipRun, shipWarn } from '../lib/ship-step';
 import { consoleUrl, playTrackPage } from '../lib/console-links';
+import { enforceFirstRelease, playReleaseKind } from '../lib/release-kind';
 
 const TAG = 'upload';
 export const UPLOAD_TRACKS = ['internal', 'alpha', 'beta', 'production'] as const;
@@ -83,11 +86,15 @@ export async function run(ctx: Ctx): Promise<void> {
     if (shipRun()) { done(TAG, `versionCode ${info.versionCode} is on Google Play already: nothing uploaded`); return; }
   }
   if (used.includes(info.versionCode)) throw new Error(`versionCode ${info.versionCode} is already on Google Play: rebuild with --version-code ${nextVersionCode(used)} (storebound play build)`);
-  const summary = { aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, sizeMB: Math.round(size / 104857.6) / 10,
+  // production: update of a published app (no owner gate) or the first release (the owner's step)
+  const kind = track === 'production' && status !== 'draft' ? playReleaseKind(current) : null;
+  if (kind && !dry && !enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) return;
+  const summary = { ...(kind ? { releaseKind: kind.kind } : {}), aab: relative(root, aab), packageName: info.packageName, versionCode: info.versionCode, versionName: info.versionName ?? null, sizeMB: Math.round(size / 104857.6) / 10,
     track, status, notes: notes.map(n => n.language), replaces: current.map(r => `${r.status} ${(r.versionCodes ?? []).join(',')}`), ...(pre ? { preCheck: pre } : {}) };
   if (dry) {
     if (json) { printJson(summary); return; }
     log(TAG, `${summary.aab}: ${info.packageName} ${info.versionName ?? ''} (${info.versionCode}), ${summary.sizeMB} MB, versionCode free`);
+    if (kind) log(TAG, `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
     log(TAG, `would upload it and set track ${track} to ${status} ${info.versionCode}${notes.length ? `, notes in ${notes.length} language(s)` : ', no release notes'}${current.length ? ` (now on ${track}: ${summary.replaces.join('; ')})` : ''}`);
     done(TAG, 'upload planned (dry run, read-only)');
     return;
diff --git a/cli/serve.ts b/cli/serve.ts
index 9b81220..f5f08c0 100644
--- a/cli/serve.ts
+++ b/cli/serve.ts
@@ -151,7 +151,7 @@ export const DESKTOP_ONLY: ToolDef[] = [
       version_name: { type: 'string', pattern: '^[0-9A-Za-z.+-]{1,40}$', description: 'versionName (default: from the project)' } },
     args: i => [...opt('flavor', i.flavor), ...opt('module', i.module), ...opt('version-name', i.version_name)] },
   { name: 'play_upload', title: 'Upload an AAB to a testing track', command: ['play', 'upload'], write: true, network: true,
-    description: 'Uploads the newest AAB of the build output to a Google Play testing track (internal, closed or open testing), versionCode checked first. Testers of that track get it; production stays an owner action.',
+    description: 'Uploads the newest AAB of the build output to a Google Play testing track (internal, closed or open testing), versionCode checked first. Testers of that track get it. Production: an update of a published app is `storebound play upload --track production --yes` in a terminal or pipeline (no owner step); the first-ever production release stays the owner\'s.',
     props: { track: { type: 'string', enum: ['internal', 'alpha', 'beta'], default: 'internal' }, status: { type: 'string', enum: ['completed', 'draft'], default: 'completed' },
       name: { type: 'string', pattern: '^[^\\x00-\\x1f]{1,50}$', description: 'Release name (default: the version)' } },
     args: i => [...opt('track', i.track), ...opt('status', i.status), ...opt('name', i.name)] },
diff --git a/docs/agents-core.md b/docs/agents-core.md
index 0482818..2cb269a 100644
--- a/docs/agents-core.md
+++ b/docs/agents-core.md
@@ -15,6 +15,12 @@ storebound plus you, the AI agent, do the work. The owner is not your pair of ha
    testers. (Also the owner's: canceling a submission, starting or stopping a store experiment, a console form's final
    Submit / Create that a console plan lists in `buttons.final`, signing in and granting account permissions.) For
    these you prepare everything, show the dry run, and the owner presses one button or says yes.
+   **Updates are agent steps:** a new version of an app that is already on the store (Play: the production track holds
+   a published release; App Store: a version of the platform is or was on sale) is yours end to end, no owner gate
+   per update: `storebound play release <aab> --production completed --yes`, `storebound play upload --track
+   production --yes`, `storebound apple submit --build <n> --yes`, `storebound apple release --manual-release --yes`
+   (docs/bypass.md). Only the **first-ever release** of an app stays the owner's (exit 3 `OWNER_STEP`: after the
+   owner's yes re-run with `--first-release`), plus removal from sale, live price changes and anything that costs money.
    **Bypass mode** (`storebound settings bypass status`): when the owner turned it on, you run these owner steps too:
    MCP `owner_step` (dry run first, then `dry_run: false`), `storebound api ... --yes --confirm <operationId>`, and
    console plans' `buttons.final`. Say in one line what you pressed; every action is logged to
diff --git a/docs/bypass.md b/docs/bypass.md
index c82b6fc..ad50749 100644
--- a/docs/bypass.md
+++ b/docs/bypass.md
@@ -11,9 +11,34 @@ storebound settings bypass off     # back to the owner pressing every final butt
 
 It is stored in `~/.storebound/settings.json` (this machine only), never in a project's config or repo.
 
+## Updates are agent steps (no bypass needed)
+
+The owner's standing rule: a new version of an app that is **already on the store** ships end to end by the agent or the
+pipeline, with no owner gate per update: submit for review, promote to production, roll out, release an approved
+version. This holds with bypass mode off, in a terminal and in CI:
+
+| Store | Update commands (all take `--yes`; `--json` / `--result-file` for the [ship-step contract](ship-step.md)) |
+|---|---|
+| Google Play | `storebound play release <app.aab> --production completed --yes` (or `--production inProgress --fraction 0.05`), or `storebound play upload <app.aab> --track production --yes` |
+| App Store | `storebound apple submit --build <n> --yes`, then (manual release) `storebound apple release --manual-release --yes` |
+
+What makes it an update is read from the store, never from the config: Play's production track holds a completed /
+inProgress / halted release; the App Store platform has a version that is or was `READY_FOR_SALE`
+(`READY_FOR_DISTRIBUTION`, `REPLACED_WITH_NEW_VERSION`). The result line carries `releaseKind: "update"`.
+
+Still the owner's, bypass mode or not (the commands refuse with exit 3, `error.code` `OWNER_STEP`, "first release of this
+app"): the **first-ever release** of an app (the first production release on Play, the first submission or release on
+the App Store), removal from sale, live price changes and anything that costs money. The owner approves a first
+release once: after the owner's yes in chat re-run with `--first-release` (or turn on bypass mode). A person at a
+terminal answering the normal confirmation prompt (no `--yes`) is the owner's approval too, and so is the desktop's
+owner dialog. Re-running an update that is on the store already is exit 7, nothing sent.
+
+MCP is unchanged: it still does not offer `--yes` or `--production`; an update goes through the CLI in a terminal or
+pipeline (or `owner_step` in bypass mode).
+
 ## What it unlocks
 
-- MCP: the `owner_step` tool appears. It runs one of: `apple submit`, `apple resubmit`, `apple iap-submit`, `apple release`,
+- MCP: the `owner_step` tool appears. It runs one of (a first release also passes the gate in bypass mode): `apple submit`, `apple resubmit`, `apple iap-submit`, `apple release`,
   `apple preorder`, `play release`, `play rollout`, `reviews` (replies), `apple testflight` (testers), `play products`,
   `play subscriptions`, `apple iap`, `apple subscriptions`, `prices` (live prices). Dry run first (`dry_run` defaults to
   true), then `dry_run: false` runs it with `--yes`.
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index 55cc3a4..f3f01e7 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -9,6 +9,7 @@ fails without the fix.
 
 | # | date | lesson | guard |
 |---|---|---|---|
+| 96 | 2026-10 | A pipeline could not ship a production update of a live app: production was treated as the owner's for every release, though the owner's rule is updates end to end and only the first-ever release gated. | `cli/lib/release-kind.ts` reads update vs first from the store; `--yes` ships an update (Play `play release --production` / `play upload --track production`, App Store `apple submit` / `apple release`), a first release with `--yes` is exit 3 `OWNER_STEP` (`--first-release` or bypass approve it), a re-run is exit 7; `tests/update-gate.test.ts` |
 | 95 | 2026-10 | The Google service-account keys moved to the owner's credential broker, but storebound still wanted a local `PLAY_SERVICE_ACCOUNT`, and a Play write with a missing permission ran its edit before Google's bare 403. | `cli/lib/broker.ts` (broker.json, key file mode 600, token cache and single flight, grants, `playPreflight` before Play write commands), `playToken` in `cli/lib/google-auth.ts` (broker first, local key fallback when it does not answer), `cli/lib/google-access.ts` (403 SERVICE_DISABLED / PERMISSION_DENIED -> exact API or grant with its link, never retried), `validate` blockers; `tests/credential-broker.test.ts` against a local fake broker. Skill pitfall 122, docs/credential-broker.md. |
 | 94 | 2026-10 | An app with managed publishing was approved but never went live: `play status` said "In review / ready to publish" with no next step, and the Publishing overview "Publish N changes" button (production + Data safety) was easy to miss or to confuse with Discard changes. | `console plan play-publish-changes` (final "Publish N changes" is the owner's, Discard changes / Stop managed publishing never-press), `console verify play-publish-changes` (API), the hint in `play status`, `status` and the desktop Releases tab (`cli/lib/play-publish.ts`, `tests/console-play-plans.test.ts`). |
 | 93 | 2026-10 | A git-ignored, never-captured frames folder rendered store images with no app or game in them; render only logged 404s and `shots check` said 0 errors. | `shots render` refuses to start while a scene frame is missing (`framesForRender` in `cli/shots/lib.ts`) and fails when any load failed; report.json `missing` is a `frame-missing` error in `shots check` / `validate` (`cli/shots/report.ts`, `tests/shots-missing-frames.test.ts`). |
diff --git a/docs/ship-step.md b/docs/ship-step.md
index cb44b15..c26809f 100644
--- a/docs/ship-step.md
+++ b/docs/ship-step.md
@@ -14,6 +14,7 @@ commands below keep their normal behaviour in a terminal; the contract switches
 | `storebound apple upload` | `upload` | `apple` |
 | `storebound apple submit` | `submit` | `apple` |
 | `storebound apple resubmit` | `resubmit` | `apple` |
+| `storebound apple release` (`--manual-release`) | `release` | `apple` |
 
 A write still needs `--yes` in a pipeline: without it the confirmation is declined and the run ends with exit 3
 (`CONFIRMATION_REQUIRED`). `apple submit` without `--yes` is a dry run (exit 0, `state: "planned"`).
@@ -25,7 +26,7 @@ A write still needs `--yes` in a pipeline: without it the confirmation is declin
 | 0 | ok | - |
 | 1 | failure (build failed, network, timeout, blockers) | `FAILED`, `TIMEOUT`, `BLOCKERS` |
 | 2 | usage (unknown flag, bad value, bad `--version-from` / `--env-file`) | `USAGE`, `ENV_FILE` |
-| 3 | needs the owner | `AGREEMENT_PENDING`, `SIGN_IN_REQUIRED`, `COMPLIANCE_ANSWER_MISSING`, `CONSOLE_STEP`, `CONFIRMATION_REQUIRED` |
+| 3 | needs the owner | `AGREEMENT_PENDING`, `SIGN_IN_REQUIRED`, `COMPLIANCE_ANSWER_MISSING`, `CONSOLE_STEP`, `CONFIRMATION_REQUIRED`, `OWNER_STEP` |
 | 4 | the store refused it (4xx answer, ITMS error, invalid build, rejected upload) | `STORE_REFUSED`, `BUILD_INVALID` |
 | 7 | nothing to do: the build / release is on the store already (the result names what is there) | - |
 
@@ -37,6 +38,31 @@ Console API access, Data safety, Content ratings, Publishing overview). The link
 Note: `apple upload` and `apple testflight wait` keep their old exit 7 for a processing timeout when the contract is
 off; under the contract a timeout is exit 1 `TIMEOUT` and an invalid build exit 4 `BUILD_INVALID`.
 
+## Updates and first releases
+
+The production and review steps (`play upload --track production`, `play release --production completed|inProgress`,
+`apple submit`, `apple resubmit`, `apple release --manual-release`) read from the store whether this is an **update** of
+an app that is already live or its **first release** (Play: the production track holds a completed / inProgress / halted
+release; App Store: a version of the platform is or was on sale; `cli/lib/release-kind.ts`). The result carries
+`releaseKind`.
+
+- Update: `--yes` is all it takes. No owner gate, no bypass mode needed ([docs/bypass.md](bypass.md)).
+- First release with `--yes`: exit 3, `error.code` `OWNER_STEP`, message "first release of this app ... the owner
+  approves it once", `error.consoleUrl` the page where the owner acts, nothing written. After the owner's yes: re-run
+  with `--first-release` (or bypass mode on).
+- Already on the store (the versionCode on production with that status, the version submitted or released): exit 7,
+  nothing sent.
+
+```sh
+# Android production update
+storebound play release build/android/app.aab --production completed --yes --json --result-file out/release.json --env-file /run/secrets/ship.env
+# (or a staged rollout: --production inProgress --fraction 0.05 --yes)
+# iOS update: attach the uploaded build, submit, and later release the approved version
+storebound apple submit --build 42 --yes --json --result-file out/submit.json --env-file /run/secrets/ship.env
+storebound apple release --manual-release --yes --json --result-file out/release.json --env-file /run/secrets/ship.env
+case $? in 0|7) ;; 3) echo "owner: $(jq -r .error.consoleUrl out/release.json)"; exit 1 ;; *) exit 1 ;; esac
+```
+
 ## `--json`: one final line
 
 stdout carries exactly one line, at the end, also on failure:
@@ -104,6 +130,7 @@ Reads the version and build for the step. Accepted shapes:
 - `play release`: every track already holds the same release: exit 7, nothing committed.
 - `apple submit`: the version is already submitted (or further) with this build, or the submission is in review:
   exit 7.
+- `apple release --manual-release`: the version is released (`READY_FOR_SALE` ...) and none waits for release: exit 7.
 
 ## `storebound status`
 
diff --git a/skills/play-first-release/SKILL.md b/skills/play-first-release/SKILL.md
index 393544a..894b677 100644
--- a/skills/play-first-release/SKILL.md
+++ b/skills/play-first-release/SKILL.md
@@ -87,7 +87,9 @@ products) and answers the compliance facts no file proves, all in one batch at t
     new app shows "Not selected": set `play.category` (Play's name, e.g. "Strategy"; `storebound check` warns
     without it), then `storebound console plan play-store-settings`: /store-settings > the FIRST Edit > App or game >
     the Category dropdown's `[role=option]` with exactly that name > Save. Contact details come from `play listing`.
-12. **API + UI · Production.** `storebound play release --version-code N --production draft`, then in the Console
+12. **API + UI · Production.** The first-ever production release is the owner's (`storebound play release ... --production
+    completed --yes` on a never-published app is exit 3 `OWNER_STEP`, `--first-release` after the owner's yes; once the app is published every later version is an
+    update the agent ships itself, `release-management`). `storebound play release --version-code N --production draft`, then in the Console
     (you, with your browser tool):
     a) `storebound console plan play-production-countries`: tracks/production > Countries / regions tab > Edit
        countries / regions > the mat-checkbox "Select all rows" (or `play.countries`) > Save; a "Go to Publishing
diff --git a/skills/release-management/SKILL.md b/skills/release-management/SKILL.md
index c5dded7..21bf298 100644
--- a/skills/release-management/SKILL.md
+++ b/skills/release-management/SKILL.md
@@ -14,8 +14,8 @@ presses release; you prepare, dry-run and report. `storebound mcp` deliberately
   `--versions` lists every version the stores know. The same stages as the desktop's Releases tab.
 - `storebound release plan 1.3.0` (MCP `release_plan`, read-only): what is left for that version on each store, in
   fix order: config problems (`check`), the version on the store, store blockers (`validate`), the next move, warnings.
-  Owner steps (submit, release, raise / complete a rollout) are named with where the owner does them; you never run
-  them. "could not be read" means unknown, not "not there": fix the credentials first.
+  Owner steps (the first-ever submit / release of an app) are named with where the owner does them; updates of an app
+  on sale (submit, release, raise / complete a rollout) are yours, `--yes`. "could not be read" means unknown, not "not there": fix the credentials first.
 - Many apps (a `storebound.workspace.json` above the app folders): the same commands cover every app, or `--app a,b`.
   `storebound ws status` is the portfolio table across apps and stores.
 
@@ -31,20 +31,26 @@ presses release; you prepare, dry-run and report. `storebound mcp` deliberately
    teammate may have uploaded another one meanwhile.
 2. `storebound apple release --phased on --dry`, then without `--dry` (works while the version is being prepared).
    With versions on more than one App Store platform add `--platform ios|macos|tvos|visionos` (pitfall 79).
-3. Submit (owner, UI). Wait: `storebound apple status --wait-review` (polls with backoff, exit 0 approved, 1 rejected,
+3. Submit: an update of an app on sale is yours, `storebound apple submit --build <n> --yes` (exit 7 when it was sent
+   already); the first-ever submission is the owner's (exit 3 `OWNER_STEP`, re-run with `--first-release` after the
+   owner's yes). Wait: `storebound apple status --wait-review` (polls with backoff, exit 0 approved, 1 rejected,
    7 timeout; `--timeout 72h`). Rejected: `review-rejections` skill.
-4. Approved = PENDING_DEVELOPER_RELEASE. Owner releases: `storebound apple release --manual-release` (asks to confirm)
-   or the "Release This Version" button. With phased release on, automatic updates reach 1 %, 2 %, 5 %, 10 %, 20 %,
+4. Approved = PENDING_DEVELOPER_RELEASE. Release an update yourself: `storebound apple release --manual-release --yes`
+   (the first-ever release of an app is the owner's: `OWNER_STEP`) or the "Release This Version" button. With phased release on, automatic updates reach 1 %, 2 %, 5 %, 10 %, 20 %,
    50 %, 100 % over 7 days; anyone can still update manually from the store.
 5. During the rollout watch crashes / reviews. Problem: `storebound apple release --phased pause` (up to 30 days in
    total). Pausing stops automatic updates only; it is **not a rollback**: users who updated keep the build, and new
    users still get the new version. The fix is a new build (expedited review is possible for critical bugs).
-6. All good early: `storebound apple release --phased resume` / `--phased complete` (owner; asks to confirm).
+6. All good early: `storebound apple release --phased resume --yes` / `--phased complete --yes` (an update's rollout is
+   yours).
 
 ## Google Play
 1. `storebound play next-version-code` before building; the versionCode must be higher than every uploaded one.
-2. Upload and start the rollout (owner confirms): `storebound play release app.aab --production inProgress --fraction 0.05`.
-   Draft apps cannot do this until the first release is reviewed (`play-first-release`).
+2. Upload and start the rollout of an UPDATE (no owner step; the app is published): `storebound play release app.aab
+   --production inProgress --fraction 0.05 --yes` (`--production completed --yes` for everyone; or `storebound play
+   upload app.aab --track production --yes`). Re-running it is exit 7. The first-ever production release is the owner's
+   (exit 3 `OWNER_STEP`; after the owner's yes `--first-release`), and draft apps cannot do this until the first
+   release is reviewed (`play-first-release`).
    Changes made in the Console (listing, App content) are sent from Publishing overview > "Submit N changes for
    review". While a review is running that button opens "Do you want to restart your review?" with **Restart
    review**: the running review starts over with the new changes. The owner's button, never the agent's; to keep the
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 7392b6d..48595dd 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1515,3 +1515,21 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/lib/broker.ts` (config, key file mode, token cache and single flight, grants, preflight, redaction),
   `cli/lib/google-auth.ts` `playToken` (broker first, local key fallback), `cli/lib/google-access.ts` (403 ->
   GoogleAccessError, no retry), `tests/credential-broker.test.ts` (a local fake broker).
+
+
+## 123. Updates are agent steps: a pipeline could not ship a production update without the owner
+
+- **Symptom:** a CI pipeline shipping a new version of an app that was long on the store was told that production is
+  "the owner's" (an AAB to production refused with "play upload is for testing tracks ... the owner sends it"), though
+  the owner's rule is that updates of a live app ship end to end without a confirmation per update.
+- **Do:** an update is read from the store (Play: the production track holds a completed / inProgress / halted release;
+  App Store: a version of the platform is or was READY_FOR_SALE) and runs with `--yes`, in a terminal or a pipeline:
+  `storebound play release <aab> --production completed --yes` (or `--production inProgress --fraction 0.05`, or
+  `play upload --track production --yes`), `storebound apple submit --build <n> --yes`, `storebound apple release
+  --manual-release --yes`; `--json` / `--result-file` give the ship-step result (`releaseKind: "update"`), a re-run is
+  exit 7. Only the first-ever release of an app is the owner's: exit 3 `OWNER_STEP` "first release of this app", approved
+  once (`--first-release` after the owner's yes, or bypass mode). Removal from sale and live prices keep their own gates.
+- **Never:** tell the owner to press a button for an update, pass `--first-release` without the owner's yes, or decide
+  update-or-first from the config instead of the store.
+- **Guard:** `cli/lib/release-kind.ts` (the kind from the store, the policy), `tests/update-gate.test.ts` (fake stores:
+  update goes through, first release is exit 3, already there is exit 7), docs/bypass.md "Updates are agent steps".
diff --git a/tests/game-services.test.ts b/tests/game-services.test.ts
index 8554834..a365d6a 100644
--- a/tests/game-services.test.ts
+++ b/tests/game-services.test.ts
@@ -265,6 +265,7 @@ describe('validate findings', () => {
 describe('apple submit with a Game Center build (live 409 STATE_ERROR.BUILD_INDICATES_GAME_CENTER_ENABLED)', () => {
   const fresh = () => {
     s.asc.gameCenterBuild = true;
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-0', attributes: { versionString: '0.9.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' }, rels: { app: APP } }); // an update, not a first release
     s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, rels: { app: APP } });
     s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
   };
diff --git a/tests/resubmit.test.ts b/tests/resubmit.test.ts
index ac9259f..54fe538 100644
--- a/tests/resubmit.test.ts
+++ b/tests/resubmit.test.ts
@@ -45,7 +45,11 @@ const CONFIG: ShipConfig = {
 
 /** The live shape: version 1.0.0 REJECTED (Invalid Binary) with build 7, submission rs-old UNRESOLVED_ISSUES holding the
  *  version and the gems IAP; pro was never added; build 8 uploaded and VALID. */
+/** The app was on sale before (an update, not a first release): version 0.9.0 READY_FOR_SALE. */
+function onSale(): void { s.asc.put({ type: 'appStoreVersions', id: 'ver-0', attributes: { versionString: '0.9.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' }, rels: { app: APP } }); }
+
 function rejected(o: { pro?: boolean; ver?: string; gems?: string } = {}): void {
+  onSale();
   s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'REJECTED', platform: 'IOS' }, rels: { app: APP } });
   s.asc.put({ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP, appStoreVersion: 'ver-1' } });
   s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
@@ -181,6 +185,7 @@ describe('apple resubmit --build <n>', () => {
 describe('apple submit --build <n> (a first submission, the desktop owner action)', () => {
   /** Version 1.0.0 in Prepare for Submission without a build, build 8 VALID, the gems IAP ready, no open submission. */
   function fresh(): void {
+    onSale();
     s.asc.put({ type: 'appStoreVersions', id: 'ver-1', attributes: { versionString: '1.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, rels: { app: APP } });
     s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
     s.asc.put({ type: 'inAppPurchases', id: 'iap-gems', attributes: { productId: 'com.example.notes.gems', inAppPurchaseType: 'CONSUMABLE', state: 'READY_TO_SUBMIT' }, rels: { app: APP } });
@@ -199,7 +204,7 @@ describe('apple submit --build <n> (a first submission, the desktop owner action
     expect(r.out).toMatch(/submission\s+new draft\s+-\s+create/);
     expect(r.out).toMatch(/app version 1\.0\.0/);
     expect(r.out).toContain('com.example.notes.gems');
-    expect(r.out).toContain('Submitting is the owner');
+    expect(r.out).toContain('update of an app on sale');
     process.env.STOREBOUND_MACHINE = '1';
     try {
       const j = await capture(() => appleSubmit(p.ctx(['--build', '8', '--json'])));
diff --git a/tests/ship-step.test.ts b/tests/ship-step.test.ts
index 133b817..851da8c 100644
--- a/tests/ship-step.test.ts
+++ b/tests/ship-step.test.ts
@@ -235,6 +235,8 @@ describe('idempotent re-upload (fake stores)', () => {
   const LISTING = '# Play\n\n## English\n<!-- play: en-US -->\n\n### Play short description\n```\nNotes.\n```\n\n### Play full description\n```\nNotes for everyone.\n```\n\n### What\'s new\n```\nFixes.\n```\n';
 
   test('play upload: first run uploads (exit 0), the re-run is exit 7 with the existing release, no second upload', async () => {
+    s.play.live.bundles = [41];
+    s.play.live.tracks = { production: { releases: [{ status: 'completed', versionCodes: ['41'] }] } }; // published: an update
     const p = project(BASE, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42, '1.2.0') });
     const first = await ship('play upload', ['--json', '--yes', '--track', 'production'], a => playUpload({ loaded: p.loaded, args: a }));
     expect(first.code).toBe(0);
diff --git a/tests/update-gate.test.ts b/tests/update-gate.test.ts
new file mode 100644
index 0000000..0d9e237
--- /dev/null
+++ b/tests/update-gate.test.ts
@@ -0,0 +1,259 @@
+// Updates are agent steps, the first release is the owner's (cli/lib/release-kind.ts, docs/bypass.md "Updates are agent
+// steps"): the kind (update / first) is read from the store; an update of a live app ships with --yes in a pipeline
+// (no owner gate), a first-ever release with --yes is exit 3 OWNER_STEP unless approved (--first-release, bypass mode),
+// and a release that is on the store already is exit 7. Against the stateful App Store Connect and Google Play doubles.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from 'bun:test';
+import { mkdtempSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { parseArgs } from '../cli/lib/args';
+import { appleReleaseKind, firstReleaseAllowed, playReleaseKind } from '../cli/lib/release-kind';
+import { setBypass } from '../cli/lib/bypass';
+import { runShipStep } from '../cli/lib/ship-step';
+import { run as playUpload } from '../cli/play/upload';
+import { run as playRelease } from '../cli/play/release';
+import { run as appleSubmit } from '../cli/apple/submit';
+import { run as appleRelease } from '../cli/apple/release';
+import { makeAab } from './build-fixtures';
+import { ascEnv, BASE, playEnv, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores, writes } from './helpers/fake-stores';
+
+const APP = '6400000101';
+
+/** Runs a ship step in-process with stdout / stderr captured. */
+async function ship(key: string, argv: string[], body: (a: ReturnType<typeof parseArgs>) => Promise<void>): Promise<{ code: number; out: string; err: string }> {
+  const out: string[] = [], err: string[] = [];
+  const o = process.stdout.write, e = process.stderr.write, cl = console.log, ce = console.error, cw = console.warn, ci = console.info;
+  process.stdout.write = ((s: string | Uint8Array) => { out.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stdout.write;
+  process.stderr.write = ((s: string | Uint8Array) => { err.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stderr.write;
+  console.log = (...a: unknown[]) => { out.push(a.map(String).join(' ') + '\n'); };
+  console.info = console.log;
+  console.error = (...a: unknown[]) => { err.push(a.map(String).join(' ') + '\n'); };
+  console.warn = console.error;
+  try {
+    const code = await runShipStep(key, argv, parseArgs, async a => {
+      const keep = console.log;
+      if (a.has('json')) console.log = (...x: unknown[]) => console.error(...x);
+      try { await body(a); } finally { console.log = keep; }
+    });
+    return { code, out: out.join(''), err: err.join('') };
+  } finally { process.stdout.write = o; process.stderr.write = e; console.log = cl; console.error = ce; console.warn = cw; console.info = ci; }
+}
+
+describe('the kind comes from the store (pure)', () => {
+  test('Play: a completed / inProgress / halted production release means published; a draft or nothing means first', () => {
+    expect(playReleaseKind([{ status: 'completed', versionCodes: ['41'] }]).kind).toBe('update');
+    expect(playReleaseKind([{ status: 'inProgress', versionCodes: ['42'] }, { status: 'completed', versionCodes: ['41'] }]).kind).toBe('update');
+    expect(playReleaseKind([{ status: 'halted', versionCodes: ['42'] }]).kind).toBe('update');
+    expect(playReleaseKind([{ status: 'draft', versionCodes: ['1'] }])).toMatchObject({ kind: 'first', why: expect.stringContaining('only draft') });
+    expect(playReleaseKind([]).kind).toBe('first');
+    expect(playReleaseKind(undefined).kind).toBe('first');
+  });
+  test('App Store: a version that is or was on sale means update; Prepare for Submission / in review / rejected means first', () => {
+    expect(appleReleaseKind([{ versionString: '1.0.0', state: 'READY_FOR_SALE' }, { versionString: '1.1.0', state: 'PREPARE_FOR_SUBMISSION' }]).kind).toBe('update');
+    expect(appleReleaseKind([{ state: 'REPLACED_WITH_NEW_VERSION' }]).kind).toBe('update');
+    expect(appleReleaseKind([{ state: 'READY_FOR_DISTRIBUTION' }]).kind).toBe('update');
+    expect(appleReleaseKind([{ state: 'PREPARE_FOR_SUBMISSION' }, { state: 'WAITING_FOR_REVIEW' }, { state: 'REJECTED' }]).kind).toBe('first');
+    expect(appleReleaseKind([]).kind).toBe('first');
+  });
+  test('the policy: updates always; a first release only with a prompt, the owner flag or bypass mode', () => {
+    const g = { yes: true, bypass: false, approved: false };
+    expect(firstReleaseAllowed({ ...g, kind: 'update' })).toBe(true);
+    expect(firstReleaseAllowed({ ...g, kind: 'first' })).toBe(false);
+    expect(firstReleaseAllowed({ ...g, kind: 'first', yes: false })).toBe(true); // the prompt is the owner's answer
+    expect(firstReleaseAllowed({ ...g, kind: 'first', approved: true })).toBe(true);
+    expect(firstReleaseAllowed({ ...g, kind: 'first', bypass: true })).toBe(true);
+  });
+});
+
+describe('Google Play production (fake store)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { playEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); delete process.env.STOREBOUND_HOME; });
+  const LISTING = '# Play\n\n## English\n<!-- play: en-US -->\n\n### Play short description\n```\nNotes.\n```\n\n### Play full description\n```\nNotes for everyone.\n```\n\n### What\'s new\n```\nFixes.\n```\n';
+  const published = (): void => { s.play.live.bundles = [41]; s.play.live.tracks = { production: { releases: [{ status: 'completed', versionCodes: ['41'] }] } }; };
+  const files = () => ({ 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 42, '1.2.0') });
+  const upload = ['--json', '--yes', '--track', 'production'];
+
+  test('play upload --track production --yes on a published app: no owner gate, exit 0, exit 7 on the re-run', async () => {
+    published();
+    const p = project(BASE, files());
+    const first = await ship('play upload', upload, a => playUpload({ loaded: p.loaded, args: a }));
+    expect(first.err).not.toContain('error:');
+    expect(first.code).toBe(0);
+    expect(JSON.parse(first.out)).toMatchObject({ ok: true, step: 'upload', track: 'production', build: '42', state: 'completed' });
+    expect(s.play.committed.length).toBe(1);
+    const n = s.calls.length;
+    const again = await ship('play upload', upload, a => playUpload({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(writes(s.calls.slice(n))).toEqual([]);
+  });
+
+  test('play upload --track production --yes on a never-published app: exit 3 OWNER_STEP, nothing written', async () => {
+    const p = project(BASE, files());
+    const r = await ship('play upload', upload, a => playUpload({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    const j = JSON.parse(r.out);
+    expect(j).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(j.error.message).toContain('first release of this app');
+    expect(j.error.message).not.toContain('the owner sends it');
+    expect(j.error.consoleUrl).toContain('play.google.com/console');
+    expect(writes(s.calls)).toEqual([]);
+    expect(s.play.committed).toEqual([]);
+  });
+
+  test('the owner approved the first release (--first-release) or turned bypass mode on: the gate lets it through', async () => {
+    const p = project(BASE, files());
+    const ok = await ship('play upload', [...upload, '--first-release'], a => playUpload({ loaded: p.loaded, args: a }));
+    // Play takes only drafts on a never-published app: the gate passed, the store's own answer is the console step
+    expect(ok.err).toContain('first release (');
+  });
+
+  test('bypass mode (the owner opted in) lets a first release through the gate', async () => {
+    process.env.STOREBOUND_HOME = mkdtempSync(join(tmpdir(), 'sb-bypass-'));
+    setBypass(true);
+    const p2 = project(BASE, files());
+    const viaBypass = await ship('play upload', upload, a => playUpload({ loaded: p2.loaded, args: a }));
+    expect(viaBypass.code).not.toBe(3);
+    expect(viaBypass.err).toContain('bypass mode');
+  });
+
+  test('a plain run (no contract) of a first release is the usual declined exit 3', async () => {
+    const p = project(BASE, files());
+    const before = process.exitCode;
+    const err: string[] = [];
+    const ce = console.error;
+    console.error = (...a: unknown[]) => { err.push(a.map(String).join(' ')); };
+    try { await playUpload(p.ctx(['--yes', '--track', 'production'])); } finally { console.error = ce; }
+    expect(process.exitCode).toBe(3);
+    expect(err.join('\n')).toContain('declined: first release of this app');
+    process.exitCode = before;
+    expect(writes(s.calls)).toEqual([]);
+  });
+
+  test('play release <versionCode> --production completed --yes: an update goes through, then exit 7; a staged rollout is the same policy', async () => {
+    published();
+    s.play.live.bundles = [41, 42];
+    const p = project(BASE, { 'store/listing.md': LISTING });
+    const argv = ['--json', '--yes', '--version-code', '42', '--production', 'completed'];
+    const first = await ship('play release', argv, a => playRelease({ loaded: p.loaded, args: a }));
+    expect(first.err).not.toContain('error:');
+    expect(first.code).toBe(0);
+    expect(JSON.parse(first.out)).toMatchObject({ ok: true, step: 'release', track: 'production', build: '42', state: 'completed', releaseKind: 'update' });
+    const again = await ship('play release', argv, a => playRelease({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    const staged = await ship('play release', ['--json', '--yes', '--version-code', '42', '--production', 'inProgress', '--fraction', '0.1'], a => playRelease({ loaded: p.loaded, args: a }));
+    expect(staged.code).toBe(0);
+    expect(JSON.parse(staged.out).tracks[0]).toMatchObject({ status: 'inProgress', userFraction: 0.1 });
+  });
+
+  test('play release --production completed --yes on a never-published app: exit 3 OWNER_STEP; --production draft is not gated', async () => {
+    s.play.live.bundles = [42];
+    const p = project(BASE, { 'store/listing.md': LISTING });
+    const refused = await ship('play release', ['--json', '--yes', '--version-code', '42', '--production', 'completed'], a => playRelease({ loaded: p.loaded, args: a }));
+    expect(refused.code).toBe(3);
+    expect(JSON.parse(refused.out)).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(s.play.committed).toEqual([]);
+    const draft = await ship('play release', ['--json', '--yes', '--version-code', '42', '--production', 'draft'], a => playRelease({ loaded: p.loaded, args: a }));
+    expect(draft.code).toBe(0);
+  });
+});
+
+describe('App Store (fake store)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  const version = (id: string, v: string, state: string): void => { s.asc.put({ type: 'appStoreVersions', id, attributes: { versionString: v, appVersionState: state, platform: 'IOS' }, rels: { app: APP } }); };
+  const build = (): void => { s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } }); };
+
+  test('apple submit --yes for an update of an app on sale: no owner gate, exit 0; the re-run is exit 7', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const argv = ['--json', '--yes', '--build', '8'];
+    const r = await ship('apple submit', argv, a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'submit', store: 'apple', build: '8', releaseKind: 'update' });
+    expect(s.asc.all('reviewSubmissions').map(x => x.attributes.state)).toEqual(['WAITING_FOR_REVIEW']);
+    const n = s.calls.length;
+    const again = await ship('apple submit', argv, a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(writes(s.calls.slice(n))).toEqual([]);
+  });
+
+  test('apple submit --yes for the first version of an app: exit 3 OWNER_STEP, nothing written; --first-release sends it', async () => {
+    version('ver-1', '1.0.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const r = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    const j = JSON.parse(r.out);
+    expect(j).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(j.error.message).toContain('first release of this app');
+    expect(writes(s.calls)).toEqual([]);
+    expect(s.asc.all('reviewSubmissions')).toEqual([]);
+    const ok = await ship('apple submit', ['--json', '--yes', '--build', '8', '--first-release'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(ok.code).toBe(0);
+    expect(s.asc.all('reviewSubmissions').map(x => x.attributes.state)).toEqual(['WAITING_FOR_REVIEW']);
+  });
+
+  test('apple submit without --yes is a dry run that names the kind (no gate, exit 0)', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const r = await ship('apple submit', ['--json', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ state: 'planned', releaseKind: 'update' });
+    expect(writes(s.calls)).toEqual([]);
+  });
+
+  test('apple release --manual-release --yes: an approved update is released (exit 0), released already is exit 7', async () => {
+    version('ver-0', '1.0.0', 'REPLACED_WITH_NEW_VERSION');
+    version('ver-1', '1.1.0', 'PENDING_DEVELOPER_RELEASE');
+    const p = project(BASE);
+    const argv = ['--json', '--yes', '--manual-release', '--version', '1.1.0'];
+    const r = await ship('apple release', argv, a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'release', store: 'apple', version: '1.1.0', releaseKind: 'update' });
+    expect(writes(s.calls).map(c => `${c.method} ${c.path}`)).toEqual(['POST /v1/appStoreVersionReleaseRequests']);
+    // the store moved it on: the same command again has nothing to release
+    s.asc.all('appStoreVersions').find(v => v.id === 'ver-1')!.attributes.appVersionState = 'READY_FOR_SALE';
+    const n = s.calls.length;
+    const again = await ship('apple release', argv, a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+    expect(JSON.parse(again.out)).toMatchObject({ ok: true, state: 'READY_FOR_SALE' });
+    expect(writes(s.calls.slice(n))).toEqual([]);
+  });
+
+  test('apple release --manual-release --yes for the first version ever: exit 3 OWNER_STEP, no release request', async () => {
+    version('ver-1', '1.0.0', 'PENDING_DEVELOPER_RELEASE');
+    const p = project(BASE);
+    const r = await ship('apple release', ['--json', '--yes', '--manual-release'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(writes(s.calls)).toEqual([]);
+  });
+});
+
+describe('the policy is written down', () => {
+  const read = (f: string): string => readFileSync(join(import.meta.dir, '..', f), 'utf8');
+  test('docs, skills and the agent rules say updates are agent steps and the first release is the owner\'s', () => {
+    for (const f of ['docs/bypass.md', 'docs/ship-step.md', 'skills/release-management/SKILL.md', 'skills/play-first-release/SKILL.md', 'docs/agents-core.md']) {
+      const t = read(f);
+      expect(t, f).toContain('--first-release');
+      expect(t, f).toContain('OWNER_STEP');
+    }
+    expect(read('skills/store-pitfalls/SKILL.md')).toContain('Updates are agent steps');
+    expect(read('CHANGELOG.md')).toContain('OWNER_STEP');
+  });
+});

From db52afce1d8c2af65389268c7f7807727a631f98 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 18:12:19 +0700
Subject: [PATCH 172/255] play release: read the production kind inside the
 release's own edit (no extra edit); the not-sent-for-review tests approve
 their first release

---
 cli/play/release.ts                    | 26 +++++++++++++-------------
 tests/play-not-sent-for-review.test.ts |  2 +-
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/cli/play/release.ts b/cli/play/release.ts
index 5e99e16..b1715e2 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -57,17 +57,10 @@ export async function run(ctx: Ctx): Promise<void> {
   const gated = tracks.find(t => t.track === 'production' && (t.status === 'completed' || t.status === 'inProgress'));
   const notes = readPlayCopy(ctx).filter(c => c.whatsNew).map(c => ({ language: c.lang, text: c.whatsNew }));
   refusePlayNotes(ctx, notes, `play release notes${a.has('dry') ? ' (dry run)' : ''}`);
-  // update of a published app: no owner step; the first production release: the owner's (exit 3 OWNER_STEP with --yes)
-  let early: Awaited<ReturnType<typeof playClient>> | undefined;
-  const client = async (): Promise<Awaited<ReturnType<typeof playClient>>> => (early ??= await playClient(root, pkg));
-  let kind: ReturnType<typeof playReleaseKind> | null = null;
-  if (gated) {
-    const p0 = await client();
-    const prod = await p0.read(async id => (await p0.call<{ releases?: PlayTrackRelease[] }>('GET', `${p0.API}/edits/${id}/tracks/production`).catch(() => ({ releases: [] }))).releases ?? []);
-    kind = playReleaseKind(prod);
-    if (a.has('dry')) log('play', `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
-    else if (!enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) return;
-  }
+  // update of a published app: no owner step; the first production release: the owner's (exit 3 OWNER_STEP with --yes).
+  // The kind is read inside the release's own edit (no extra edit), before anything is uploaded.
+  const seen: { kind?: ReturnType<typeof playReleaseKind> } = {};
+  let refused = false;
   if (live && !a.has('dry') && !(await confirm(ctx, `Release to PRODUCTION as "${live.status}" (public once Google approves)?`))) return;
 
   if (aab) {
@@ -76,11 +69,17 @@ export async function run(ctx: Ctx): Promise<void> {
     if (sdkWhy) throw new Error(`${aab}: not released, ${sdkWhy}`);
   }
   shipReport({ track: tracks.map(t => t.track).join(','), url: consoleUrl(playTrackPage(tracks.length === 1 ? tracks[0]!.track : undefined)) });
-  const play = await client();
+  const play = await playClient(root, pkg);
   let released = fixed ?? '';
   let nothing = false;
   try {
     await play.edit(async (id, ctl) => {
+      if (gated) {
+        const prod = (await play.call<{ releases?: PlayTrackRelease[] }>('GET', `${play.API}/edits/${id}/tracks/production`).catch(() => ({ releases: [] }))).releases ?? [];
+        const kind = (seen.kind = playReleaseKind(prod));
+        if (a.has('dry')) log('play', `${kind.kind === 'update' ? 'update of a published app' : 'FIRST production release (the owner approves it once: --first-release)'}: ${kind.why}`);
+        else if (!enforceFirstRelease(ctx, kind, { store: 'play', what: 'the first production release', consoleUrl: consoleUrl('play.publishing') })) { refused = true; ctl.unchanged(); return; }
+      }
       let code = fixed ?? '';
       let uploaded = false;
       if (aab) {
@@ -123,6 +122,7 @@ export async function run(ctx: Ctx): Promise<void> {
       throw new Error(`${(e as Error).message}\n\nThis app has never been published: the API may only create DRAFT releases. Re-run with --production draft, then send it from the Console (skill play-first-release).`);
     throw e;
   }
+  if (refused) return;
   // the ship-step contract: every track holds this release already (and no upload): nothing to do, exit 7
   if (nothing && !a.has('dry')) shipNoop({ build: released || undefined, state: tracks.map(t => t.status).join(',') });
   const prod = tracks.find(t => t.track === 'production');
@@ -133,6 +133,6 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   // machine-readable result for CI scripts (a Jenkins stage reads it instead of calling the Play API itself)
   if (a.has('json')) printJson({ versionCode: released ? Number(released) : null, sha256: aab ? createHash('sha256').update(readFileSync(aab)).digest('hex') : null, name: a.get('name') ?? null,
-    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry'), ...(kind ? { releaseKind: kind.kind } : {}) });
+    tracks: tracks.map(t => ({ track: t.track, status: t.status, userFraction: t.status === 'inProgress' ? Number(fraction ?? 0.1) : null })), dry: a.has('dry'), ...(seen.kind ? { releaseKind: seen.kind.kind } : {}) });
   done('play', 'release done');
 }
diff --git a/tests/play-not-sent-for-review.test.ts b/tests/play-not-sent-for-review.test.ts
index 842d858..836e8cf 100644
--- a/tests/play-not-sent-for-review.test.ts
+++ b/tests/play-not-sent-for-review.test.ts
@@ -24,7 +24,7 @@ afterEach(() => { uninstallStores(); });
 
 const edits = (what: string): string[] => s.calls.filter(c => c.method === 'POST' && c.path.includes(`:${what}`)).map(c => c.path.replace(/^.*\/edits\//, ''));
 const release = (p: ReturnType<typeof project>, extra: string[] = []) =>
-  capture(() => playRelease(p.ctx(['--version-code', '5', '--internal', 'completed', '--production', 'completed', '--name', '1.0.1 (5)', '--yes', ...extra])));
+  capture(() => playRelease(p.ctx(['--version-code', '5', '--internal', 'completed', '--production', 'completed', '--name', '1.0.1 (5)', '--yes', '--first-release', ...extra])));
 
 describe('Play refuses the automatic send for review', () => {
   test('the 400 is recognised by its message (and a bad-request reason), nothing else', () => {

From cb20912f0ef17aaf6a3729dd94635f71ff20def0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 18:17:15 +0700
Subject: [PATCH 173/255] storebound 0.8.53: version in package.json and every
 copy, CHANGELOG 0.8.53 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index a0aeffc..f3c9e29 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.52",
+      "version": "0.8.53",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index e43acdd..82bc2fd 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index eaa58fd..e7ab8b8 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 54743a2..7067715 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.53 · 2026-10-26
+
 - Updates are agent steps (the owner's standing rule), first releases stay the owner's. `play release <aab> --production completed|inProgress --yes`, `play upload --track production --yes`, `apple submit --build <n> --yes` and `apple release --manual-release --yes` run without an owner gate, in a terminal and in a pipeline, when the store says the app is already live (Play: the production track holds a completed / inProgress / halted release; App Store: a version of the platform is or was `READY_FOR_SALE` / `READY_FOR_DISTRIBUTION` / `REPLACED_WITH_NEW_VERSION`; `cli/lib/release-kind.ts`). The result line carries `releaseKind`; a re-run is exit 7. The first-ever release of an app with `--yes` is exit 3 `OWNER_STEP` ("first release of this app: the owner approves it once"), approved by `--first-release` (after the owner's yes) or bypass mode; a person answering the prompt (no `--yes`) is the approval too. `apple release` is now a ship step (`--json`, `--result-file`, exit 7 when the version is released already). Policy in docs/bypass.md ("Updates are agent steps"), docs/ship-step.md, the release-management and play-first-release skills, AGENTS.md; pitfall 123 / 96.
 
 ## 0.8.52 · 2026-10-26
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 8b14fc0..a8430ee 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 3711bbe..9d3ef94 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.52"
+version = "0.8.53"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 907c06a..1ee00eb 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.52"
+version = "0.8.53"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index c8933aa..702ed71 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 2c978f8..e7e74f9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 081b8c8..5b29575 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.52",
+  "version": "0.8.53",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From f109c519ae4ee5a9d9967830be191c953c829547 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 19:12:21 +0700
Subject: [PATCH 174/255] apple build: --derived-data (default
 <out>/DerivedData with --out), --path-free (Swift/clang prefix maps, no
 serialized debug options) and an archive path scan

---
 CHANGELOG.md                   |   2 +
 cli/apple/build.ts             |  33 +++++++++--
 cli/data/flags.json            |   2 +
 cli/lib/path-free.ts           |  99 ++++++++++++++++++++++++++++++++
 cli/lib/xcode.ts               |  10 +++-
 docs/pitfalls.md               |   1 +
 skills/build-and-sign/SKILL.md |   5 ++
 skills/store-pitfalls/SKILL.md |  14 +++++
 tests/build-sign.test.ts       |  17 ++++++
 tests/path-free.test.ts        | 100 +++++++++++++++++++++++++++++++++
 10 files changed, 276 insertions(+), 7 deletions(-)
 create mode 100644 cli/lib/path-free.ts
 create mode 100644 tests/path-free.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7067715..b471f55 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple build` is hermetic and can be path-free. `--derived-data <dir>` (`apple.build.derivedData`) is xcodebuild `-derivedDataPath`; with `--out` (or `apple.build.out`) it defaults to `<out>/DerivedData` instead of `~/Library/Developer/Xcode/DerivedData` (without `--out` Xcode's folder stays). `--path-free` (`apple.build.pathFree`) remaps the home folder, checkout, out and DerivedData out of the app binary and the archive's dSYMs / Symbols (Swift `-debug-prefix-map` / `-file-prefix-map`, clang `-ffile-prefix-map`; dwarf-with-dsym stays, symbol upload keeps working), scans the archive and stops before the export with the hit count and the first file + offsets (never the paths). `--scan-paths` only scans and warns. A `--out` outside the home folder prints a hint. `--json` / `latest.json` carry `derivedData`, `pathFree` and `leaks`. Store-pitfalls 124.
+
 ## 0.8.53 · 2026-10-26
 
 - Updates are agent steps (the owner's standing rule), first releases stay the owner's. `play release <aab> --production completed|inProgress --yes`, `play upload --track production --yes`, `apple submit --build <n> --yes` and `apple release --manual-release --yes` run without an owner gate, in a terminal and in a pipeline, when the store says the app is already live (Play: the production track holds a completed / inProgress / halted release; App Store: a version of the platform is or was `READY_FOR_SALE` / `READY_FOR_DISTRIBUTION` / `REPLACED_WITH_NEW_VERSION`; `cli/lib/release-kind.ts`). The result line carries `releaseKind`; a re-run is exit 7. The first-ever release of an app with `--yes` is exit 3 `OWNER_STEP` ("first release of this app: the owner approves it once"), approved by `--first-release` (after the owner's yes) or bypass mode; a person answering the prompt (no `--yes`) is the approval too. `apple release` is now a ship step (`--json`, `--result-file`, exit 7 when the version is released already). Policy in docs/bypass.md ("Updates are agent steps"), docs/ship-step.md, the release-management and play-first-release skills, AGENTS.md; pitfall 123 / 96.
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 855451b..87fa428 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -3,6 +3,7 @@
 //     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
+//                          [--derived-data <dir>] [--path-free] [--scan-paths]
 //                          [--keychain <path>] [--keychain-unlock] [--allow-ssh] [--allow-app-group-gap]
 // Over SSH (no GUI session) codesign needs an unlocked keychain: --keychain-unlock unlocks it with the password in
 // STOREBOUND_KEYCHAIN_PASSWORD (never printed) and sets its key partition list; --keychain <path> signs with a build
@@ -16,15 +17,21 @@
 // profiles from apple.signing), runs xcodebuild archive and -exportArchive with the API key
 // (-allowProvisioningUpdates -authenticationKey*), and leaves <out>/export/<version>-<build>/<App>.ipa for `storebound apple upload`. Each build exports into its own
 // folder, cleaned first: xcodebuild refuses to overwrite an earlier App.ipa ("exportArchive Copy failed", pitfall 53).
+// DerivedData: --derived-data <dir> (apple.build.derivedData) is xcodebuild -derivedDataPath; with --out (or apple.build.out)
+// it defaults to <out>/DerivedData, so a build is hermetic per output folder (without --out Xcode keeps ~/Library/...).
+// --path-free (apple.build.pathFree) remaps the home folder, checkout, out and DerivedData out of the binary and the dSYM /
+// Symbols (Swift -debug-prefix-map / -file-prefix-map, clang -ffile-prefix-map), then scans the archive and stops before the
+// export when a home path is left; --scan-paths only scans and warns. A --out outside the home folder prints a hint.
 // Full xcodebuild output goes to <out>/xcodebuild-*.log; the terminal gets the result lines.
 // Local only: nothing is sent to App Store Connect except reads (build numbers, team id, profiles).
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
+import { homedir, userInfo } from 'node:os';
 import { dirname, join, relative } from 'node:path';
 import { ascKeyFile } from '../lib/credentials';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
+import { derivedDataFor, archiveScanDirs, leakNeedles, leakProblem, outsideHome, pathFreeSettings, scanForPaths } from '../lib/path-free';
 import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
@@ -148,6 +155,14 @@ export async function run(ctx: Ctx): Promise<void> {
   if (sub) target.notes.unshift(`Capacitor project: ${sub} (${sub}/${cap!.config}; the only one found; set apple.build.workspace to use another)`);
   const configuration = a.str('configuration', cfg.configuration ?? 'Release');
   const out = resolve(a.get('out') ?? cfg.out ?? 'build/ios');
+  const outChosen = !!(a.get('out') ?? cfg.out);
+  const derivedData = derivedDataFor({ flag: a.get('derived-data'), config: cfg.derivedData, out, outChosen, resolve });
+  const pathFree = a.has('path-free') || cfg.pathFree === true;
+  const scanPaths = pathFree || a.has('scan-paths');
+  const home = homedir();
+  const pfSettings = pathFree ? pathFreeSettings({ home, root, out, derivedData }) : [];
+  if (!pathFree && outsideHome(out, home)) warn(TAG, `--out is outside the home folder, but the build embeds the home folder and checkout paths (binary, dSYM, Symbols): add --path-free (or apple.build.pathFree) to remap them and scan the archive`);
+  if (pathFree && (!derivedData || !outsideHome(derivedData, home))) warn(TAG, `--path-free: DerivedData ${derivedData ? 'is' : 'defaults to'} inside the home folder, and dsymutil / Xcode record that path in the dSYM, so the scan below will find it. Build with --out (or --derived-data) outside the home folder, e.g. a shared folder.`);
   const version = a.get('version');
   if (version && !/^\d+(\.\d+){0,2}$/.test(version)) throw new Error('--version: x.y.z');
 
@@ -212,12 +227,12 @@ export async function run(ctx: Ctx): Promise<void> {
   const auth = style === 'automatic' ? authPreview : null;
   const steps = [
     ...(target.framework === 'flutter' ? [showCmd(flutterConfigArgs(buildNo, version), null)] : []),
-    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth, settings: keychain ? keychainSigningArgs(keychain) : undefined }), auth),
+    showCmd(archiveArgs({ target, root, configuration, archivePath, version, build: buildNo, teamId: teamId ?? undefined, auth, settings: [...(keychain ? keychainSigningArgs(keychain) : []), ...pfSettings], derivedData }), auth),
     showCmd(exportArgs(archivePath, join(out, 'ExportOptions.plist'), exportPath, auth), auth),
   ];
   const unlockPreview = unlock ? unlockSteps(keychain ?? '<login keychain>', []).map(showSecurity) : [];
   const plan = { framework: target.framework, workspace: target.workspace ?? null, project: target.project ?? null, scheme: target.scheme, configuration,
-    version: version ?? '(project value)', build: buildNo, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
+    version: version ?? '(project value)', build: buildNo, derivedData: derivedData ?? '(Xcode default)', pathFree, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
   const webOpts = { config, root, cap, store: 'apple' as const, tag: TAG, noPrebuild: a.has('no-prebuild'), allowStale: a.has('allow-stale-web') };
   if (dry) {
     const web = await webStep({ ...webOpts, dry: true, quiet: json });
@@ -245,13 +260,21 @@ export async function run(ctx: Ctx): Promise<void> {
   if (rsync) log(TAG, `note: ${rsync} is first on your PATH; xcodebuild runs with /usr/bin first (a non-Apple rsync breaks Xcode's IPA export)`);
   mkdirSync(out, { recursive: true });
   writeFileSync(join(out, 'ExportOptions.plist'), plist);
+  let leaks = 0;
   const key = style === 'automatic' ? ascKeyFile(root) : null;
   const realAuth: AscAuth | null = key ? { keyPath: key.keyPath, keyId: key.keyId, issuerId: key.issuerId } : null;
   try {
     if (target.framework === 'flutter') await runLogged(flutterConfigArgs(build!, version), root, join(out, 'flutter-config.log'), showCmd(flutterConfigArgs(build!, version), null));
     shipPhase('build', `xcodebuild archive, build ${build}`);
-    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth, settings: keychain ? keychainSigningArgs(keychain) : undefined });
+    const arch = archiveArgs({ target, root, configuration, archivePath, version, build: build!, teamId: teamId ?? undefined, auth: realAuth, settings: [...(keychain ? keychainSigningArgs(keychain) : []), ...pfSettings], derivedData });
     await runLogged(arch, root, join(out, 'xcodebuild-archive.log'), showCmd(arch, realAuth));
+    if (scanPaths) {
+      shipPhase('verify', 'scanning the archive for local paths');
+      const found = scanForPaths(archiveScanDirs(archivePath), leakNeedles({ home, user: userInfo().username, root }));
+      leaks = found.total;
+      const why = leakProblem(found, relative(root, archivePath));
+      if (why) { if (pathFree) throw new Error(why); warn(TAG, why.split(String.fromCharCode(10))[0]!); } else log(TAG, 'no local path in the archive (app, dSYMs, Symbols)');
+    }
     shipPhase('sign', 'xcodebuild -exportArchive (signing)');
     await exportIpa({ root, out, archivePath, exportPath, auth: realAuth });
   } finally { key?.cleanup(); }
@@ -265,7 +288,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // ITMS-91064 (Invalid Binary after the upload): NSPrivacyTracking / NSPrivacyTrackingDomains of every manifest in the IPA
   const privacy = bundleTrackingIssues(ipaManifests(join(exportPath, ipa)));
   if (privacy.length) throw new Error(`${relative(root, join(exportPath, ipa))} was built, but Apple would refuse it at upload:\n${privacy.map(x => `  ${x}`).join('\n')}\nFix the manifest and build again.`);
-  const result = { ipa: join(exportPath, ipa), bundleId: info.bundleId, version: info.version, build: info.build, web: web.bundle };
+  const result = { ipa: join(exportPath, ipa), bundleId: info.bundleId, version: info.version, build: info.build, web: web.bundle, derivedData: derivedData ?? null, pathFree, ...(scanPaths ? { leaks } : {}) };
   writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}
 `);
   if (json) printJson(result);
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 798cab7..9493636 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -73,6 +73,7 @@
    "allow-version-mismatch",
    "build-number",
    "configuration",
+   "derived-data",
    "env-file",
    "keychain",
    "keychain-unlock",
@@ -1201,6 +1202,7 @@
    "debug-dump",
    "declarations",
    "delay",
+   "derived-data",
    "detail",
    "device",
    "dir",
diff --git a/cli/lib/path-free.ts b/cli/lib/path-free.ts
new file mode 100644
index 0000000..4587520
--- /dev/null
+++ b/cli/lib/path-free.ts
@@ -0,0 +1,99 @@
+// Path-free iOS builds: no home folder, user name or checkout path inside the app binary or the archive's debug
+// symbols (a privacy gate over a shared release folder found hundreds of hits). Used by `apple build --path-free`.
+//   - derivedDataFor: DerivedData per output folder (hermetic), not ~/Library/Developer/Xcode/DerivedData
+//   - pathFreeSettings: xcodebuild build settings with Swift / clang prefix maps (dSYM and Symbols stay, paths are remapped)
+//   - scanArchiveLeaks / leakProblem: scan the archive's .app, dSYMs and Symbols for the home folder and the user name
+// Pure except scanArchiveLeaks (bounded file reads).
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+import { posix } from 'node:path';
+
+const trim = (p: string): string => (p.length > 1 ? p.replace(/\/+$/, '') : p);
+
+/** DerivedData folder of a build: --derived-data, else apple.build.derivedData, else <out>/DerivedData when the output
+ *  folder was chosen (--out / apple.build.out), else null (Xcode's default under ~/Library). */
+export function derivedDataFor(o: { flag?: string; config?: string; out: string; outChosen: boolean; resolve: (p: string) => string }): string | null {
+  const given = o.flag ?? o.config;
+  if (given) return o.resolve(given);
+  return o.outChosen ? posix.join(o.out, 'DerivedData') : null;
+}
+
+/** True when `dir` is not inside `home`. */
+export const outsideHome = (dir: string, home: string): boolean => { const h = trim(home); return !!h && dir !== h && !dir.startsWith(`${h}/`); };
+
+export interface PathFreeInput { home: string; root: string; out: string; derivedData?: string | null }
+
+/** [from, to] prefix maps: the home folder, the checkout, the output folder and DerivedData, longest (most specific) first.
+ *  swiftc applies the FIRST matching map, clang the LAST: pathFreeSettings reverses the list for clang. */
+export function prefixMaps(i: PathFreeInput): [string, string][] {
+  const all: [string, string][] = [[trim(i.home), '/home'], [trim(i.root), '.'], [trim(i.out), '/out']];
+  if (i.derivedData) all.push([trim(i.derivedData), '/derived']);
+  const seen = new Set<string>();
+  return all.filter(([from]) => from.length > 1 && !seen.has(from) && seen.add(from)).sort((a, b) => b[0].length - a[0].length);
+}
+
+const q = (s: string): string => (/[\s"'$]/.test(s) ? `"${s.replace(/(["\$])/g, '\$1')}"` : s);
+
+/** xcodebuild build settings that remap every local path in Swift, C, C++ and Objective-C output and in DWARF. The
+ *  debug format is left alone (dwarf-with-dsym), so symbol upload keeps working. */
+export function pathFreeSettings(i: PathFreeInput): string[] {
+  const maps = prefixMaps(i);
+  const swift = maps.flatMap(([f, t]) => ['-debug-prefix-map', q(`${f}=${t}`), '-file-prefix-map', q(`${f}=${t}`)]);
+  const clang = [...maps].reverse().flatMap(([f, t]) => [q(`-ffile-prefix-map=${f}=${t}`)]);
+  // SWIFT_SERIALIZE_DEBUGGING_OPTIONS=NO: Xcode embeds the compiler's include paths, module cache and -ffile-compilation-dir
+  // (the checkout) in the binary's __swift_ast section; no prefix map reaches it. Only lldb's Swift expression evaluation
+  // uses it; crash symbolication (the dSYM's functions and lines) does not.
+  return ['SWIFT_SERIALIZE_DEBUGGING_OPTIONS=NO', `OTHER_SWIFT_FLAGS=$(inherited) ${swift.join(' ')}`, `OTHER_CFLAGS=$(inherited) ${clang.join(' ')}`, `OTHER_CPLUSPLUSFLAGS=$(inherited) ${clang.join(' ')}`];
+}
+
+export interface PathHit { file: string; kind: string; offset: number }
+
+/** The needles of a leak scan, named by kind so a report never prints the value: the home folder, /Users/<user>/ and the
+ *  checkout. DerivedData is no needle: outside the home folder it is not the user's (dsymutil and Xcode record it in the
+ *  dSYM and the __swift_ast section and no prefix map reaches it); inside the home folder the home needle finds it. */
+export function leakNeedles(i: { home: string; user: string; root: string }): { kind: string; value: string }[] {
+  const list = [{ kind: 'home folder', value: trim(i.home) + '/' }, { kind: 'user folder', value: `/Users/${i.user}/` }, { kind: 'checkout', value: trim(i.root) + '/' }];
+  const seen = new Set<string>();
+  return list.filter(n => n.value.length >= 6 && !seen.has(n.value) && seen.add(n.value));
+}
+
+const MAX_FILE = 600 * 1048576;
+
+/** Every needle occurrence in the files under `dirs` (all of them are counted; the first `perFile` offsets per file kept). */
+export function scanForPaths(dirs: string[], needles: { kind: string; value: string }[], perFile = 3): { hits: PathHit[]; total: number; files: number } {
+  const ns = needles.map(n => ({ kind: n.kind, b: Buffer.from(n.value) }));
+  const hits: PathHit[] = [];
+  const bad = new Set<string>();
+  let total = 0;
+  const walk = (base: string, d: string): void => {
+    let names: string[]; try { names = readdirSync(d); } catch { return; }
+    for (const name of names) {
+      const p = join(d, name);
+      let st; try { st = statSync(p); } catch { continue; }
+      if (st.isDirectory()) { walk(base, p); continue; }
+      if (!st.isFile() || st.size > MAX_FILE) continue;
+      const buf = readFileSync(p);
+      let kept = 0;
+      for (const { kind, b } of ns) {
+        for (let at = buf.indexOf(b); at >= 0; at = buf.indexOf(b, at + b.length)) {
+          total++; bad.add(p);
+          if (kept++ < perFile) hits.push({ file: relative(base, p).split(sep).join('/'), kind, offset: at });
+        }
+      }
+    }
+  };
+  for (const d of dirs) if (existsSync(d)) walk(d, d);
+  return { hits, total, files: bad.size };
+}
+
+/** What the archive holds that ships or symbolicates: Products (the .app, extensions, frameworks), dSYMs, Symbols. */
+export const archiveScanDirs = (archive: string): string[] => ['Products', 'dSYMs', 'Symbols'].map(x => join(archive, x));
+
+/** The refusal text of a path-free build that still has local paths, else null. Counts, kinds, file and offset only. */
+export function leakProblem(r: { hits: PathHit[]; total: number; files: number }, archive: string): string | null {
+  if (!r.total) return null;
+  const lines = r.hits.slice(0, 8).map(h => `  ${h.file} @${h.offset}: ${h.kind}`);
+  return `${r.total} local path${r.total === 1 ? '' : 's'} left in ${r.files} file${r.files === 1 ? '' : 's'} of ${archive} (home folder, user name or checkout):\n${lines.join('\n')}${r.hits.length > 8 ? '\n  ...' : ''}\n`
+    + 'Stopped before the export. Causes: #file / #filePath in Swift sources (no prefix map reaches those literals: use #fileID), a prebuilt framework or Pod that carries its own paths '
+    + '(rebuild it path-free), or DerivedData / --out inside the home folder (dsymutil and Xcode record that path: use --out or --derived-data outside it, e.g. a shared folder).';
+}
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index a961fd6..cccad53 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -18,6 +18,10 @@ export interface AppleBuildConfig {
   configuration?: string;
   /** Output folder for the archive, ExportOptions.plist, the IPA and logs. Default build/ios. */
   out?: string;
+  /** xcodebuild -derivedDataPath. Default <out>/DerivedData when the output folder is chosen (--out / out), else Xcode's own folder under ~/Library. */
+  derivedData?: string;
+  /** Remap the home folder, checkout, output folder and DerivedData out of the binary and the debug symbols, then scan the archive (same as --path-free). */
+  pathFree?: boolean;
 }
 
 export function validateAppleBuild(b: AppleBuildConfig | undefined): string[] {
@@ -26,6 +30,8 @@ export function validateAppleBuild(b: AppleBuildConfig | undefined): string[] {
   if (b.workspace && !b.workspace.endsWith('.xcworkspace')) e.push('apple.build.workspace: a path ending in .xcworkspace');
   if (b.project && !b.project.endsWith('.xcodeproj')) e.push('apple.build.project: a path ending in .xcodeproj');
   if (b.scheme !== undefined && !b.scheme.trim()) e.push('apple.build.scheme: empty');
+  if (b.derivedData !== undefined && (typeof b.derivedData !== 'string' || !b.derivedData.trim())) e.push('apple.build.derivedData: a folder path');
+  if (b.pathFree !== undefined && typeof b.pathFree !== 'boolean') e.push('apple.build.pathFree: true or false');
   return e;
 }
 
@@ -125,13 +131,13 @@ export interface AscAuth { keyPath: string; keyId: string; issuerId: string }
 
 const authArgs = (a: AscAuth | null): string[] => (a ? ['-allowProvisioningUpdates', '-authenticationKeyPath', a.keyPath, '-authenticationKeyID', a.keyId, '-authenticationKeyIssuerID', a.issuerId] : []);
 
-export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null; /** extra build settings, e.g. OTHER_CODE_SIGN_FLAGS=--keychain <path> */ settings?: string[] }
+export interface ArchiveInput { target: XcodeTarget; root: string; configuration: string; archivePath: string; version?: string; build: string; teamId?: string; auth: AscAuth | null; /** extra build settings, e.g. OTHER_CODE_SIGN_FLAGS=--keychain <path> */ settings?: string[]; /** xcodebuild -derivedDataPath */ derivedData?: string | null }
 
 /** xcodebuild archive. Version / build go in as build settings (they beat the project's values). */
 export function archiveArgs(i: ArchiveInput): string[] {
   return ['xcodebuild', ...(i.target.workspace ? ['-workspace', join(i.root, i.target.workspace)] : ['-project', join(i.root, i.target.project!)]),
     '-scheme', i.target.scheme, '-configuration', i.configuration, '-destination', 'generic/platform=iOS', '-archivePath', i.archivePath,
-    ...authArgs(i.auth), 'archive', `CURRENT_PROJECT_VERSION=${i.build}`, ...(i.version ? [`MARKETING_VERSION=${i.version}`] : []),
+    ...(i.derivedData ? ['-derivedDataPath', i.derivedData] : []), ...authArgs(i.auth), 'archive', `CURRENT_PROJECT_VERSION=${i.build}`, ...(i.version ? [`MARKETING_VERSION=${i.version}`] : []),
     ...(i.teamId ? [`DEVELOPMENT_TEAM=${i.teamId}`] : []), ...(i.settings ?? [])];
 }
 
diff --git a/docs/pitfalls.md b/docs/pitfalls.md
index f3f01e7..ca3710c 100644
--- a/docs/pitfalls.md
+++ b/docs/pitfalls.md
@@ -63,6 +63,7 @@ fails without the fix.
 | 27 | 2026-10 | A real Play first release (an agent with a browser tool) found the steps no API does: the App category stayed "Not selected" (`play listing` cannot set it: edits.details has no category field); production had 0 countries (edits.countryAvailability is read-only); App content had ten cards with their own pages; the IARC questionnaire is one long page whose Yes answers reveal follow-ups, with an IARC Terms of Use agreement on page 1 and a final "Save" (not "Submit") on the Summary; Play's material checkboxes, like its radios, ignore native input; long evaluate calls timed out at 45 s; "Send changes for review" ignored a JS click; managed publishing is off by default, so approved means live. | Plans `play-store-settings`, `play-app-content` (+ one per card), `play-production-countries`, `play-production-release`; config `play.category` (Play's lists), `play.countries`, `play.managedPublishing`, `console.contentRating.details`, `console.appContent`, `social`, `products[].randomRewards`; every ask-owner answer in one batch; `check` warns without a category and counts the open App content answers; `validate` reports the category reminder and "production has 0 countries"; `play status` and `play release` say what is console-only; the IARC Terms box is never-press; material checkboxes get the inner [role=checkbox] click (plan and `console fill`); every plan ships `inPageLoop`. `tests/console-play-plans.test.ts`. |
 | 26 | 2026-10 | An agent using storebound spent hours handing the owner one click, command or answer at a time ("press Next", "download the CSV template", "now run the upload", a compliance question in the middle of a run): skills said "let the owner do it" / "by hand" for navigation, exports and uploads. | The first rule "Do it, don't ask" heads `docs/agents-core.md` (every generated adapter), README and the store-pitfalls skill: the agent does API calls, uploads, builds, exports, console navigation and forms itself; the owner presses only the final public or irreversible buttons and answers the facts no file proves in one batch at the start. `tests/do-it-dont-ask.test.ts` checks the rule is there and fails on skill text that hands navigation, draft saves, exports, uploads or form filling to the owner. |
 | 25 | 2026-10 | In a non-interactive shell `play build` stopped in Gradle with "SDK location not found" (no `ANDROID_HOME` there, `local.properties` gitignored) although the SDK was in `~/Library/Android/sdk`; `apple upload --no-wait --yes` sent the IPA for over 10 minutes without a line (progress every 10th part only, no per-part or per-call timeout). | `resolveAndroidSdk` (ANDROID_HOME, ANDROID_SDK_ROOT, `sdk.dir` in local.properties, the Android Studio default folder; only folders with platforms/ or platform-tools/) hands the SDK to Gradle in the environment, never writes local.properties, stops before Gradle with the places checked; `doctor` shows it (`cli/lib/tools.ts`, `cli/play/build.ts`, `cli/doctor.ts`). `apple upload` prints the size, a line per part and a 20 s heartbeat (api, altool, processing wait), per-part and per-call timeouts, `--timeout` exits 7 with the resume hint (`sendParts` in `cli/apple/upload.ts`, `cli/lib/progress.ts`; `tests/tools-path.test.ts`, `tests/build-sign.test.ts`, `tests/upload-progress.test.ts`). |
+| 25 | 2026-10 | `apple build --out <shared dir>` still used `~/Library/Developer/Xcode/DerivedData`, and the app binary plus the archive's dSYMs / `Symbols/*.symbols` held the home folder, user name and checkout path (543 privacy-gate hits). | `--derived-data` / default `<out>/DerivedData`, `--path-free` (Swift and clang prefix maps) with an archive scan that stops before the export: `cli/lib/path-free.ts`, `tests/path-free.test.ts`; store-pitfalls 124. |
 | 24 | 2026-10 | `flow run release --apply --yes` ran `apple upload --no-wait`, which printed "not a terminal: re-run with --yes to confirm" and declined, yet the flow logged "4/13 upload: ok" and went on to `apple testflight wait` for a build that was never uploaded: a declined confirmation exited 0, and the flow's `--yes` never reached the steps. | `confirm()` (`cli/lib/ctx.ts`): every decline (answered no, not a terminal without `--yes`, under serve) prints `declined: <reason>` and exits 3 (`DECLINED_EXIT`). `flow run` reports "step N declined: <reason>" (status `declined`) and stops; `--apply --yes` adds `--yes` to write steps only (`planStep`, `declinedReason`; `tests/flow.test.ts`). |
 | 23 | 2026-10 | Capacitor: native build ships old web assets. `flow run release --apply` went straight into `apple build` (xcodebuild archive) with `ios/App/App/public` and `android/app/src/main/assets/public` 3.5 hours older than the latest source commit: the native projects hold the copy `npx cap sync` made last, and nothing ran the web build + cap sync first, so the old game would have shipped. | New `build.prebuild` (per store `apple.prebuild` / `play.prebuild`): `apple build` / `play build` run it first (printed, streamed, nonzero exit stops; `--dry` only prints; `--no-prebuild`; once per `flow run` through `STOREBOUND_PREBUILD_DONE`). After it, a Capacitor project's copied `public/index.html` must be newer than the last commit outside ios/ android/ node_modules/ store/ .storebound/ and `<webDir>/index.html`, else the build stops ("web assets are older than the source ..."; `--allow-stale-web` overrides). `check` warns when stale without a prebuild; build output and dry plan show the bundle's sha256 + mtime. Monorepo (`apps/native` with its own capacitor.config.ts, android/, ios/; `play build` failed with "no Gradle project ... in android or ."): the one Capacitor project one or two levels down is found and named, several ask for `play.build.dir` / `apple.build.*` (`cli/lib/web-assets.ts`, `tests/web-assets.test.ts`). |
 | 22 | 2026-10 | `play build` built a good AAB (Capacitor 8 / AGP), then failed its own check with "AAB manifest without package / versionCode". The aapt2 proto manifest was read with element field numbers one too high (name 4, attribute 5, child 6 instead of Resources.proto's 3, 4, 5). The test fixture came from the same wrong encoder, so the tests passed. | `aabInfo` / `encodeProtoManifest` in `cli/lib/gradle.ts` follow Resources.proto. `tests/build-sign.test.ts` builds the manifest bytes by tag, without the encoder, and the parser was checked against real AGP bundles. Lesson: a parser's fixture must not come from the same code's encoder. |
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 77c0e52..844e24a 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -64,6 +64,11 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    unlocks that one; `signing ensure --keychain <path>` imports the key + certificate into it). It
    also stops before the archive when a target's App Group is missing (manual: its installed profile; automatic: the profile
    the API lists; store-pitfalls 121; `--allow-app-group-gap` overrides).
+   `--out <dir>` also puts DerivedData in `<out>/DerivedData` (`--derived-data <dir>` / `apple.build.derivedData`
+   overrides), so a build is hermetic per output folder. Building under a shared folder, or anything a privacy gate scans:
+   add `--path-free` (`apple.build.pathFree`): Swift and clang prefix maps keep the home folder, user name and checkout
+   out of the binary and the archive's dSYMs / Symbols, and the build stops before the export on a leftover hit
+   (store-pitfalls 124). `--scan-paths` scans without remapping.
    - Capacitor: the archive ships the web assets `npx cap sync` copied last. Set `build.prebuild` (e.g.
      `"npm run build && npx cap sync"`; per store `apple.prebuild` / `play.prebuild`) and `apple build` / `play build`
      run it first (once per `flow run`; `--no-prebuild` skips it). Then the copied `public/index.html` must be newer
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 48595dd..aa40e01 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1533,3 +1533,17 @@ that fails without the fix (see CONTRIBUTING.md).
   update-or-first from the config instead of the store.
 - **Guard:** `cli/lib/release-kind.ts` (the kind from the store, the policy), `tests/update-gate.test.ts` (fake stores:
   update goes through, first release is exit 3, already there is exit 7), docs/bypass.md "Updates are agent steps".
+
+## 124. iOS builds leak the home folder: DerivedData in ~/Library and local paths in the binary and the symbols
+
+- **Symptom:** a release pipeline building under a shared folder outside the user's home (`apple build --out <dir>`)
+  still wrote DerivedData to `~/Library/Developer/Xcode/DerivedData`, and the app binary and the `.xcarchive`
+  `Symbols/*.symbols` / dSYMs held the home folder, the user name and the checkout path (a privacy gate counted 543 hits).
+- **Do:** `storebound apple build --out <dir> --path-free` (or `apple.build.pathFree: true`). With `--out` DerivedData is
+  `<out>/DerivedData` (`--derived-data <dir>` / `apple.build.derivedData` to choose); `--path-free` passes Swift
+  `-debug-prefix-map` + `-file-prefix-map` and clang `-ffile-prefix-map` for the home folder, checkout, out and DerivedData,
+  keeps dwarf-with-dsym (symbol upload still works) and scans the archive's Products, dSYMs and Symbols before the export.
+  A hit stops the build with the count and the first file + offsets. Xcode's own toolchain paths (`/Applications/Xcode.app`)
+  are not the user's and are not hits. A prebuilt vendored framework carries its own paths: rebuild it path-free.
+- **Never:** point a shared build folder at the default DerivedData, or run the privacy scan only after the upload.
+- **Guard:** `cli/lib/path-free.ts`, `tests/path-free.test.ts`, the hint when `--out` is outside the home folder.
diff --git a/tests/build-sign.test.ts b/tests/build-sign.test.ts
index 8a491dc..1b91c9f 100644
--- a/tests/build-sign.test.ts
+++ b/tests/build-sign.test.ts
@@ -408,6 +408,23 @@ describe('CLI dry runs (no store access)', () => {
     expect(j.exportOptions.method).toBe('app-store-connect');
     expect(j.steps[0]).toContain('CURRENT_PROJECT_VERSION=42');
     expect(j.steps[0]).toContain('-authenticationKeyPath $ASC_P8');
+    // no --out: Xcode's DerivedData stays, nothing remapped
+    expect(j).toMatchObject({ derivedData: '(Xcode default)', pathFree: false });
+    expect(j.steps[0]).not.toContain('-derivedDataPath');
+    expect(j.steps[0]).not.toContain('prefix-map');
+  });
+  test('apple build --dry --json: --out makes DerivedData hermetic, --path-free adds the prefix maps', () => {
+    const d = project('cli-apple-dd');
+    const r = cli(d, ['apple', 'build', '--dry', '--json', '--build-number', '42', '--out', 'out/ios', '--path-free']);
+    expect(r.exitCode).toBe(0);
+    const j = JSON.parse(r.stdout.toString());
+    expect(j.pathFree).toBe(true);
+    expect(j.derivedData.split(String.fromCharCode(92)).join('/')).toMatch(/out\/ios\/DerivedData$/);
+    expect(j.steps[0]).toContain('-derivedDataPath');
+    expect(j.steps[0]).toContain('OTHER_SWIFT_FLAGS=');
+    expect(j.steps[0]).toContain('-ffile-prefix-map=');
+    const e = cli(d, ['apple', 'build', '--dry', '--json', '--build-number', '42', '--out', 'out/ios', '--derived-data', 'dd']);
+    expect(JSON.parse(e.stdout.toString()).derivedData.split(String.fromCharCode(92)).join('/')).toMatch(/\/dd$/);
   });
   test('play build --dry --json: task, versionCode, signing source', () => {
     const r = cli(project('cli-play'), ['play', 'build', '--dry', '--json', '--version-code', '12']);
diff --git a/tests/path-free.test.ts b/tests/path-free.test.ts
new file mode 100644
index 0000000..8278817
--- /dev/null
+++ b/tests/path-free.test.ts
@@ -0,0 +1,100 @@
+import { describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { archiveScanDirs, derivedDataFor, leakNeedles, leakProblem, outsideHome, pathFreeSettings, prefixMaps, scanForPaths } from '../cli/lib/path-free';
+import { archiveArgs, validateAppleBuild } from '../cli/lib/xcode';
+
+const resolve = (p: string): string => (p.startsWith('/') ? p : `/proj/${p}`);
+const t = { framework: 'native' as const, project: 'App.xcodeproj', scheme: 'App', notes: [] };
+
+describe('derived data', () => {
+  test('flag beats config beats <out>/DerivedData; without a chosen out Xcode keeps its default', () => {
+    expect(derivedDataFor({ flag: '/dd', config: 'cfg', out: '/o', outChosen: true, resolve })).toBe('/dd');
+    expect(derivedDataFor({ config: 'cfg/dd', out: '/o', outChosen: true, resolve })).toBe('/proj/cfg/dd');
+    expect(derivedDataFor({ out: '/shared/ci/out', outChosen: true, resolve })).toBe('/shared/ci/out/DerivedData');
+    expect(derivedDataFor({ out: '/proj/build/ios', outChosen: false, resolve })).toBeNull();
+  });
+  test('archive gets -derivedDataPath only when set', () => {
+    const base = { target: t, root: '/p', configuration: 'Release', archivePath: '/o/App.xcarchive', build: '1', auth: null };
+    const withDd = archiveArgs({ ...base, derivedData: '/o/DerivedData' });
+    expect(withDd.slice(withDd.indexOf('-archivePath'), withDd.indexOf('-archivePath') + 4)).toEqual(['-archivePath', '/o/App.xcarchive', '-derivedDataPath', '/o/DerivedData']);
+    expect(archiveArgs(base)).not.toContain('-derivedDataPath');
+    expect(archiveArgs({ ...base, derivedData: null })).not.toContain('-derivedDataPath');
+  });
+  test('config keys are validated', () => {
+    expect(validateAppleBuild({ derivedData: 'dd', pathFree: true })).toEqual([]);
+    expect(validateAppleBuild({ derivedData: ' ' })).toHaveLength(1);
+    expect(validateAppleBuild({ pathFree: 'yes' as unknown as boolean })).toHaveLength(1);
+  });
+  test('outsideHome', () => {
+    expect(outsideHome('/srv/shared/ci/out', '/Users/you')).toBe(true);
+    expect(outsideHome('/Users/you/proj/out', '/Users/you')).toBe(false);
+    expect(outsideHome('/Users/you-too/out', '/Users/you')).toBe(true);
+  });
+});
+
+describe('prefix maps', () => {
+  const i = { home: '/Users/you', root: '/Users/you/work/app', out: '/Users/you/work/app/build/ios', derivedData: '/Users/you/work/app/build/ios/DerivedData' };
+  test('longest first (swiftc takes the first match; clang gets the list reversed)', () => {
+    expect(prefixMaps(i).map(m => m[0])).toEqual(['/Users/you/work/app/build/ios/DerivedData', '/Users/you/work/app/build/ios', '/Users/you/work/app', '/Users/you']);
+  });
+  test('duplicates and a root slash are dropped', () => {
+    expect(prefixMaps({ home: '/h/', root: '/h', out: '/h', derivedData: null }).map(m => m[0])).toEqual(['/h']);
+  });
+  test('settings carry swift and clang flags and keep $(inherited)', () => {
+    const s = pathFreeSettings(i);
+    expect(s.map(x => x.split('=')[0])).toEqual(['SWIFT_SERIALIZE_DEBUGGING_OPTIONS', 'OTHER_SWIFT_FLAGS', 'OTHER_CFLAGS', 'OTHER_CPLUSPLUSFLAGS']);
+    expect(s[0]!).toBe('SWIFT_SERIALIZE_DEBUGGING_OPTIONS=NO');
+    expect(s[1]!).toContain('$(inherited) -debug-prefix-map /Users/you/work/app/build/ios/DerivedData=/derived -file-prefix-map /Users/you/work/app/build/ios/DerivedData=/derived');
+    expect(s[1]!.endsWith('-file-prefix-map /Users/you=/home')).toBe(true);
+    expect(s[1]!.indexOf('app=.')).toBeLessThan(s[1]!.indexOf('/Users/you=/home'));
+    // clang: the last match wins, so the home folder comes first
+    expect(s[2]!.indexOf('-ffile-prefix-map=/Users/you=/home')).toBeLessThan(s[2]!.indexOf('-ffile-prefix-map=/Users/you/work/app/build/ios/DerivedData=/derived'));
+    expect(s.join()).not.toContain('DEBUG_INFORMATION_FORMAT');
+  });
+  test('a path with spaces is quoted', () => {
+    const s = pathFreeSettings({ home: '/Users/you', root: '/Users/you/Visual Studio Workspaces/app', out: '/Users/you/o' });
+    expect(s[1]!).toContain('"/Users/you/Visual Studio Workspaces/app=."');
+    expect(s[2]!).toContain('"-ffile-prefix-map=/Users/you/Visual Studio Workspaces/app=."');
+  });
+});
+
+describe('leak scan', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'pf-'));
+  const arch = join(dir, 'App.xcarchive');
+  mkdirSync(join(arch, 'Products/Applications/App.app'), { recursive: true });
+  mkdirSync(join(arch, 'dSYMs/App.app.dSYM'), { recursive: true });
+  mkdirSync(join(arch, 'Symbols'), { recursive: true });
+  writeFileSync(join(arch, 'Products/Applications/App.app/App'), Buffer.concat([Buffer.from([0, 1, 2]), Buffer.from('/Users/you/work/app/Sources/A.swift'), Buffer.from([0]), Buffer.from('/Users/you/Library/Developer/Xcode/DerivedData/x')]));
+  writeFileSync(join(arch, 'dSYMs/App.app.dSYM/clean'), 'DW_AT_comp_dir ./Sources /Applications/Xcode.app/Contents');
+  writeFileSync(join(arch, 'Symbols/0.symbols'), 'path /Users/you/work/app/B.swift');
+  const needles = leakNeedles({ home: '/Users/you', user: 'you', root: '/Users/you/work/app' });
+
+  test('needles are named by kind; /Users/<user>/ is dropped when it equals the home folder', () => {
+    expect(needles.map(n => n.kind)).toEqual(['home folder', 'checkout']);
+  });
+  test('counts hits, keeps first offsets per file, scans app, dSYMs and Symbols', () => {
+    const r = scanForPaths(archiveScanDirs(arch), needles);
+    expect(r.files).toBe(2);
+    expect(r.total).toBeGreaterThanOrEqual(5);
+    const app = r.hits.filter(h => h.file === 'Applications/App.app/App');
+    expect(app.length).toBe(3);
+    expect(app[0]!.offset).toBe(3);
+    expect(r.hits.some(h => h.file === '0.symbols')).toBe(true);
+    expect(r.hits.some(h => h.file.includes('clean'))).toBe(false);
+  });
+  test('the report has counts, kinds, files and offsets but never the paths', () => {
+    const msg = leakProblem(scanForPaths(archiveScanDirs(arch), needles), 'build/App.xcarchive')!;
+    expect(msg).toContain('local paths left in 2 files');
+    expect(msg).toContain('Applications/App.app/App @3: home folder');
+    expect(msg).not.toContain('/Users/you');
+  });
+  test('a clean archive has no problem', () => {
+    const clean = join(dir, 'Clean.xcarchive');
+    mkdirSync(join(clean, 'Products'), { recursive: true });
+    writeFileSync(join(clean, 'Products/a'), 'x /Applications/Xcode.app/y');
+    expect(leakProblem(scanForPaths(archiveScanDirs(clean), needles), 'c')).toBeNull();
+    rmSync(dir, { recursive: true, force: true });
+  });
+});

From efa9503a505808772d333833f8308af6699f97b0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 19:16:46 +0700
Subject: [PATCH 175/255] storebound 0.8.54: version in package.json and every
 copy, CHANGELOG 0.8.54 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index f3c9e29..62a6889 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.53",
+      "version": "0.8.54",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 82bc2fd..96538a0 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index e7ab8b8..4f16b98 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b471f55..8398677 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.54 · 2026-10-26
+
 - `apple build` is hermetic and can be path-free. `--derived-data <dir>` (`apple.build.derivedData`) is xcodebuild `-derivedDataPath`; with `--out` (or `apple.build.out`) it defaults to `<out>/DerivedData` instead of `~/Library/Developer/Xcode/DerivedData` (without `--out` Xcode's folder stays). `--path-free` (`apple.build.pathFree`) remaps the home folder, checkout, out and DerivedData out of the app binary and the archive's dSYMs / Symbols (Swift `-debug-prefix-map` / `-file-prefix-map`, clang `-ffile-prefix-map`; dwarf-with-dsym stays, symbol upload keeps working), scans the archive and stops before the export with the hit count and the first file + offsets (never the paths). `--scan-paths` only scans and warns. A `--out` outside the home folder prints a hint. `--json` / `latest.json` carry `derivedData`, `pathFree` and `leaks`. Store-pitfalls 124.
 
 ## 0.8.53 · 2026-10-26
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index a8430ee..a81b07a 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 9d3ef94..35039ca 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.53"
+version = "0.8.54"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1ee00eb..4b0f4f4 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.53"
+version = "0.8.54"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 702ed71..c57141c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index e7e74f9..4fffc39 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 5b29575..616eead 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.53",
+  "version": "0.8.54",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 0858f4e538f28e0f25372ee0d8521292f7958da0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 20:13:11 +0700
Subject: [PATCH 176/255] path-free: a shared build folder outside home is not
 a leak (only home and user-name paths are private)

---
 CHANGELOG.md            | 2 ++
 cli/lib/path-free.ts    | 6 +++++-
 tests/path-free.test.ts | 4 ++++
 3 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8398677..60e8bc2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple build --path-free`: a checkout in a shared build folder outside the home folder is no longer a leak needle (dsymutil and the module cache record it; only home and user-name paths count).
+
 ## 0.8.54 · 2026-10-26
 
 - `apple build` is hermetic and can be path-free. `--derived-data <dir>` (`apple.build.derivedData`) is xcodebuild `-derivedDataPath`; with `--out` (or `apple.build.out`) it defaults to `<out>/DerivedData` instead of `~/Library/Developer/Xcode/DerivedData` (without `--out` Xcode's folder stays). `--path-free` (`apple.build.pathFree`) remaps the home folder, checkout, out and DerivedData out of the app binary and the archive's dSYMs / Symbols (Swift `-debug-prefix-map` / `-file-prefix-map`, clang `-ffile-prefix-map`; dwarf-with-dsym stays, symbol upload keeps working), scans the archive and stops before the export with the hit count and the first file + offsets (never the paths). `--scan-paths` only scans and warns. A `--out` outside the home folder prints a hint. `--json` / `latest.json` carry `derivedData`, `pathFree` and `leaks`. Store-pitfalls 124.
diff --git a/cli/lib/path-free.ts b/cli/lib/path-free.ts
index 4587520..21b5f95 100644
--- a/cli/lib/path-free.ts
+++ b/cli/lib/path-free.ts
@@ -52,7 +52,11 @@ export interface PathHit { file: string; kind: string; offset: number }
  *  checkout. DerivedData is no needle: outside the home folder it is not the user's (dsymutil and Xcode record it in the
  *  dSYM and the __swift_ast section and no prefix map reaches it); inside the home folder the home needle finds it. */
 export function leakNeedles(i: { home: string; user: string; root: string }): { kind: string; value: string }[] {
-  const list = [{ kind: 'home folder', value: trim(i.home) + '/' }, { kind: 'user folder', value: `/Users/${i.user}/` }, { kind: 'checkout', value: trim(i.root) + '/' }];
+  // the checkout is a needle only when it says something about the person: inside the home folder or naming the user.
+  // A shared build folder (/Users/Shared/..., /opt/...) recorded by dsymutil and Xcode's module cache is not private
+  const root = trim(i.root) + '/';
+  const personal = root.startsWith(trim(i.home) + '/') || (i.user.length >= 3 && root.includes(`/${i.user}/`));
+  const list = [{ kind: 'home folder', value: trim(i.home) + '/' }, { kind: 'user folder', value: `/Users/${i.user}/` }, ...(personal ? [{ kind: 'checkout', value: root }] : [])];
   const seen = new Set<string>();
   return list.filter(n => n.value.length >= 6 && !seen.has(n.value) && seen.add(n.value));
 }
diff --git a/tests/path-free.test.ts b/tests/path-free.test.ts
index 8278817..0a2e628 100644
--- a/tests/path-free.test.ts
+++ b/tests/path-free.test.ts
@@ -74,6 +74,10 @@ describe('leak scan', () => {
   test('needles are named by kind; /Users/<user>/ is dropped when it equals the home folder', () => {
     expect(needles.map(n => n.kind)).toEqual(['home folder', 'checkout']);
   });
+  test('a shared build folder outside the home folder is not a needle (dsymutil / module cache paths there are fine)', () => {
+    expect(leakNeedles({ home: '/Users/you', user: 'you', root: '/Users/Shared/ship/app/abc' }).map(n => n.kind)).toEqual(['home folder']);
+    expect(leakNeedles({ home: '/Users/you', user: 'you', root: '/opt/builds/you/app' }).map(n => n.kind)).toEqual(['home folder', 'checkout']);
+  });
   test('counts hits, keeps first offsets per file, scans app, dSYMs and Symbols', () => {
     const r = scanForPaths(archiveScanDirs(arch), needles);
     expect(r.files).toBe(2);

From 3dc3104bbca558ee886326b7a979e0cb01852219 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 20:17:46 +0700
Subject: [PATCH 177/255] scrub: /Users/Shared is the system shared folder, not
 a home path

---
 tools/scrub.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/scrub.ts b/tools/scrub.ts
index f84cf66..e0569a1 100644
--- a/tools/scrub.ts
+++ b/tools/scrub.ts
@@ -27,7 +27,7 @@ export const RULES: Rule[] = [
   { id: 'private-name', re: new RegExp(['Yon', 'ga'].join(''), 'gi') },
   { id: 'google-api-key', re: new RegExp('AI' + 'za[0-9A-Za-z_-]{35}', 'g') },
   // absolute home folders leak a machine's account name (placeholders like /Users/you are fine)
-  { id: 'home-path', re: /(?:\/Users\/|\/home\/|[A-Z]:\\Users\\)(?!(?:you|me|user|runner|name|example)\b)[A-Za-z0-9._-]+/g },
+  { id: 'home-path', re: /(?:\/Users\/|\/home\/|[A-Z]:\\Users\\)(?!(?:you|me|user|runner|name|example|Shared)\b)[A-Za-z0-9._-]+/g },
 ];
 
 const SKIP = /(^|\/)(bun\.lock|Cargo\.lock|LICENSE)$|\.(png|jpe?g|webp|gif|ico|icns|woff2?|ttf|otf|p8|p12|aab|ipa|zip)$/i;

From 47638621784cc0b23ab2362f1163d97b0dc643fb Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 26 Oct 2026 20:21:17 +0700
Subject: [PATCH 178/255] storebound 0.8.55: version in package.json and every
 copy, CHANGELOG 0.8.55 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 62a6889..9ec05ee 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.54",
+      "version": "0.8.55",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 96538a0..d36edb9 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 4f16b98..91c89f9 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 60e8bc2..6a1d003 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.55 · 2026-10-26
+
 - `apple build --path-free`: a checkout in a shared build folder outside the home folder is no longer a leak needle (dsymutil and the module cache record it; only home and user-name paths count).
 
 ## 0.8.54 · 2026-10-26
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index a81b07a..fd1bcc3 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 35039ca..3ef0c4e 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.54"
+version = "0.8.55"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 4b0f4f4..ed11aa9 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.54"
+version = "0.8.55"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index c57141c..f1b385c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 4fffc39..c2603fb 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 616eead..9655b43 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 85cf494c0a580d333351d9f9057f87d436fdae96 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:07:37 +0700
Subject: [PATCH 179/255] apple: release type (apple.releaseType, apple release
 --after-approval|--manual), device-family preflight, TestFlight invite needs
 an installable build

---
 CHANGELOG.md                           |   4 +
 cli/apple/build.ts                     |  16 +-
 cli/apple/device-families.ts           |  41 +++
 cli/apple/listing.ts                   |   6 +-
 cli/apple/release.ts                   |  63 +++-
 cli/apple/resubmit.ts                  |  12 +-
 cli/apple/testflight.ts                |  51 +++-
 cli/check.ts                           |   9 +
 cli/commands.ts                        |   2 +-
 cli/data/flags.json                    |  11 +-
 cli/lib/config.ts                      |  10 +
 cli/lib/device-families.ts             | 111 +++++++
 cli/lib/listing-plan.ts                |   8 +-
 cli/lib/release-type.ts                |  54 ++++
 cli/lib/testflight.ts                  |  19 ++
 cli/lib/validate-rules.ts              |   3 +
 cli/validate.ts                        |  11 +
 skills/appstore-first-release/SKILL.md |   2 +-
 skills/release-management/SKILL.md     |   7 +-
 skills/store-pitfalls/SKILL.md         |  38 +++
 skills/testflight/SKILL.md             |   5 +-
 tests/apple-release-gaps.test.ts       | 405 +++++++++++++++++++++++++
 tests/helpers/fake-stores.ts           |  27 +-
 tests/signing-targets.test.ts          |   2 +
 24 files changed, 899 insertions(+), 18 deletions(-)
 create mode 100644 cli/apple/device-families.ts
 create mode 100644 cli/lib/device-families.ts
 create mode 100644 cli/lib/release-type.ts
 create mode 100644 tests/apple-release-gaps.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6a1d003..cf58150 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- Release type. `apple.releaseType: afterApproval | manual | scheduled` (+ `apple.earliestReleaseDate`): `apple listing` creates versions with it (MANUAL when unset, existing versions untouched) and `apple submit` / `resubmit` set it before submitting when it differs, the dry run showing old -> new. New `apple release --after-approval | --manual | --scheduled <ISO date> [--platform] [--version] [--first-release] --yes` changes it on a version App Review has not approved yet (clear refusal otherwise, with `--manual-release` as the way out); exit 7 when it already has that type; an update is an agent step, after-approval on the first version of an app is exit 3 OWNER_STEP. Pitfall 125.
+- Device families. `validate` and `apple build` read the device families of the last live version (build bundle `deviceProtocols`, device models, iPad screenshot sets) and compare them with TARGETED_DEVICE_FAMILY in the Xcode project and `apple.ipad`; a gap stops `apple build` before the archive with the exact fix (ITMS-90101 otherwise comes after the build; `--allow-device-gap` overrides). Offline `check` warns when the live families are unknown or the config and project disagree. Pitfall 126.
+- TestFlight. `apple testflight testers --invite` checks that the tester's group has an installable build (past Beta App Review for external groups); without one it adds the tester, skips the invite and prints when it can go out (exit 0). Apple's 409 NO_INSTALLABLE_BUILDS is handled the same way; `distribute --submit-review` prints the hint for testers not invited yet. Pitfall 127.
+
 ## 0.8.55 · 2026-10-26
 
 - `apple build --path-free`: a checkout in a shared build folder outside the home folder is no longer a leak needle (dsymutil and the module cache record it; only home and user-name paths count).
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 87fa428..13e8a89 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -36,6 +36,8 @@ import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
 import { nextBuildNumber } from '../lib/release';
 import { exportOptions, profileDirs } from '../lib/signing';
+import { type FamilyVerdict, familyVerdicts, projectFamilies } from '../lib/device-families';
+import { liveDeviceFamilies } from './device-families';
 import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
 import { appGroupSteps, appGroupVerdicts, type GroupEvidence } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
@@ -186,6 +188,18 @@ export async function run(ctx: Ctx): Promise<void> {
   if (build && !/^\d+(\.\d+){0,2}$/.test(build)) throw new Error('--build-number: digits, e.g. 42 or 1.0.42');
   const buildNo = build ?? '<next build number>';
 
+  // device families: an upload that drops one the live version supports (iPad) is refused only AFTER the archive (ITMS-90101)
+  // so compare first: stop before building with the exact fix (--allow-device-gap builds anyway)
+  let deviceFamilies: FamilyVerdict[] = [];
+  try {
+    const c = await ascClient(root, bundleId, config.apple?.appId);
+    deviceFamilies = familyVerdicts({ live: await liveDeviceFamilies(c, await c.app()), project: projectFamilies(root, bundleId, target.project), ipad: config.apple?.ipad });
+  } catch (e) { warn(TAG, `device families of the live version not compared (${(e as Error).message.split('\n')[0]?.slice(0, 120)})`); }
+  const familyBlockers = deviceFamilies.filter(d => d.level === 'blocker');
+  for (const d of deviceFamilies) if (d.level === 'warn' || (d.level === 'blocker' && (dry || a.has('allow-device-gap')))) warn(TAG, `${d.msg}${d.fix ? ` -> ${d.fix}` : ''}`);
+  if (familyBlockers.length && !dry && !a.has('allow-device-gap'))
+    throw new Error(`stopped before the archive: ${familyBlockers.map(d => `${d.msg}. Fix: ${d.fix}`).join('\n')}\n(--allow-device-gap builds anyway)`);
+
   const scan = discoverTargets(root, config);
   const ids = [bundleId, ...scan.extensions.map(t => t.bundleId)];
   const profiles: Record<string, string> = {};
@@ -232,7 +246,7 @@ export async function run(ctx: Ctx): Promise<void> {
   ];
   const unlockPreview = unlock ? unlockSteps(keychain ?? '<login keychain>', []).map(showSecurity) : [];
   const plan = { framework: target.framework, workspace: target.workspace ?? null, project: target.project ?? null, scheme: target.scheme, configuration,
-    version: version ?? '(project value)', build: buildNo, derivedData: derivedData ?? '(Xcode default)', pathFree, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
+    version: version ?? '(project value)', build: buildNo, deviceFamilies, derivedData: derivedData ?? '(Xcode default)', pathFree, teamId, signingStyle: style, exportOptions: opts, out: relative(root, out) || '.', steps: [...unlockPreview, ...steps], notes: target.notes };
   const webOpts = { config, root, cap, store: 'apple' as const, tag: TAG, noPrebuild: a.has('no-prebuild'), allowStale: a.has('allow-stale-web') };
   if (dry) {
     const web = await webStep({ ...webOpts, dry: true, quiet: json });
diff --git a/cli/apple/device-families.ts b/cli/apple/device-families.ts
new file mode 100644
index 0000000..2ae18c2
--- /dev/null
+++ b/cli/apple/device-families.ts
@@ -0,0 +1,41 @@
+// The device families of the app's last live iOS version, read from App Store Connect (cli/lib/device-families.ts compares
+// them with the project and the config). Signals, merged because none is documented as THE answer:
+//   - the live version's build bundle: buildBundles.deviceProtocols and the device models of buildBundleFileSizes
+//   - the screenshot sets of the live version: an APP_IPAD_* display type means the version was submitted for iPad
+// Live version = READY_FOR_SALE / READY_FOR_DISTRIBUTION; else the newest one that was on sale (REPLACED_WITH_NEW_VERSION).
+import { compareVersions } from '../lib/listing-plan';
+import { liveFamilies, type LiveFamilies } from '../lib/device-families';
+import type { Asc, J } from './asc';
+import { type AscPlatform, versionsPath } from './platform';
+
+const ON_SALE = ['READY_FOR_SALE', 'READY_FOR_DISTRIBUTION'];
+const WAS_ON_SALE = [...ON_SALE, 'REPLACED_WITH_NEW_VERSION'];
+
+/** The live (or last live) version among the rows of GET appStoreVersions, newest first. Pure. */
+export function lastLiveVersion(rows: J[]): J | null {
+  const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
+  const pick = (states: string[]): J | null => rows.filter(v => states.includes(state(v)))
+    .sort((a, b) => compareVersions(String(b.attributes.versionString), String(a.attributes.versionString)))[0] ?? null;
+  return pick(ON_SALE) ?? pick(WAS_ON_SALE);
+}
+
+/** Reads the families of the last live version of the platform (iOS unless named); null when there is none or no signal names a family. */
+export async function liveDeviceFamilies(c: Asc, appId: string, platform: AscPlatform = 'IOS'): Promise<LiveFamilies | null> {
+  const v = lastLiveVersion(await c.all(versionsPath(appId, platform, 20)));
+  if (!v) return null;
+  const signals: { name: string; values: string[] }[] = [];
+  const b = (await c.maybe(`/v1/appStoreVersions/${v.id}/build`))?.data;
+  if (b) {
+    const full = await c.maybe(`/v1/builds/${b.id}?include=buildBundles`);
+    const bundles = (full?.included ?? []).filter((x: J) => x.type === 'buildBundles' && (x.attributes?.bundleType ?? 'APP') === 'APP');
+    signals.push({ name: `build ${b.attributes?.version ?? b.id} deviceProtocols`, values: bundles.flatMap((x: J) => (x.attributes?.deviceProtocols ?? []) as string[]) });
+    const models: string[] = [];
+    for (const x of bundles) for (const f of await c.all(`/v1/buildBundles/${x.id}/buildBundleFileSizes?limit=200`)) models.push(String(f.attributes?.deviceModel ?? ''));
+    signals.push({ name: `build ${b.attributes?.version ?? b.id} device models`, values: models });
+  }
+  const types: string[] = [];
+  for (const l of (await c.all(`/v1/appStoreVersions/${v.id}/appStoreVersionLocalizations?limit=50`)).slice(0, 5))
+    for (const s of await c.all(`/v1/appStoreVersionLocalizations/${l.id}/appScreenshotSets?limit=50`)) types.push(String(s.attributes?.screenshotDisplayType ?? ''));
+  signals.push({ name: 'screenshot sets', values: types });
+  return liveFamilies(String(v.attributes.versionString), String(v.attributes.appVersionState ?? v.attributes.appStoreState), signals);
+}
diff --git a/cli/apple/listing.ts b/cli/apple/listing.ts
index 8fdeb45..698b799 100644
--- a/cli/apple/listing.ts
+++ b/cli/apple/listing.ts
@@ -5,7 +5,7 @@
 // refuse with the reason), the build, and per locale create / update with old -> new per field. --dry stops there
 // (read-only); the real run asks in a terminal and applies exactly that plan. Locales marked status=draft or
 // status=translate (listing translate) are skipped unless --include-drafts.
-// - the editable iOS version: versionString, copyright, release type MANUAL; with --build that processed build is attached
+// - the editable iOS version: versionString, copyright, release type (apple.releaseType, MANUAL when new and unset); with --build that processed build is attached
 // - appInfoLocalizations: name, subtitle, privacy policy URL per locale
 // - appStoreVersionLocalizations: description, keywords, promotional text, what's new (not on a first version),
 //   support + marketing URL per locale
@@ -21,6 +21,7 @@ import { mergeAppleListing, overLimits } from '../lib/listing-pull';
 import { counts, draftReason, draftSections, type ItemPlan, itemLines, planItem, planLocales, planVersion, short, type Skipped, type VersionPlan } from '../lib/listing-plan';
 import { createOnce, findOrCreate, getById } from '../lib/upsert';
 import { appleName } from '../lib/config';
+import { wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
@@ -117,7 +118,8 @@ async function planListing(ctx: Ctx, c: Asc, appId: string, version: string, pla
   }
   const copyright = app.copyright ?? `${new Date().getFullYear()} ${app.name}`;
   const rows = await c.all(versionsPath(appId, platform));
-  const versionPlan = planVersion(rows, version, { copyright, releaseType: 'MANUAL' }, platform);
+  const rel = wantedRelease(config.apple);
+  const versionPlan = planVersion(rows, version, { copyright, releaseType: rel?.releaseType, earliestReleaseDate: rel?.earliestReleaseDate }, platform);
 
   let build: AppleListingPlan['build'] = null;
   const number = ctx.args.get('build');
diff --git a/cli/apple/release.ts b/cli/apple/release.ts
index ab0f77c..aad0498 100644
--- a/cli/apple/release.ts
+++ b/cli/apple/release.ts
@@ -1,10 +1,17 @@
 // Release management for an App Store version.
 //   storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]
 //   storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]
+//   storebound apple release --after-approval | --manual | --scheduled <ISO date> [--version 1.2.0] [--first-release] [--yes] [--json]
 // Both take --platform ios|macos|tvos|visionos; without it the platform that has the version this needs is used (both: asks).
 // Phased release: 7-day automatic rollout to users with automatic updates (1, 2, 5, 10, 20, 50, 100 %); anyone can
 // still update by hand from the App Store. Pause holds it (up to 30 days in total), it is NOT a rollback: users who
 // updated keep the build. "complete" releases to everyone at once.
+// --after-approval / --manual / --scheduled set how the version goes live (appStoreVersions.releaseType; the config's
+// apple.releaseType does the same in `apple listing` and `apple submit`). Allowed until App Review approves the version
+// (Prepare for Submission, rejected, Waiting for Review, In Review); an approved one (Pending Developer Release) is
+// released with --manual-release, a released one is final. Setting it when it is that type already is exit 7 under the
+// ship-step contract. An update of an app on sale is an agent step; --after-approval on the first version of an app
+// puts it on sale by itself, so that one is the owner's (exit 3 OWNER_STEP unless --first-release).
 // --manual-release releases an approved version (PENDING_DEVELOPER_RELEASE). Public and irreversible: asks first
 // (--yes in scripts). Releasing an UPDATE of an app already on sale is an agent step (no owner gate, also in a
 // pipeline; under the ship-step contract: exit 7 when the version is released already). The first-ever release of an
@@ -18,6 +25,7 @@ import { consoleUrl } from '../lib/console-links';
 import { appleReleaseKind, enforceFirstRelease } from '../lib/release-kind';
 import { type PhasedAction, phasedRequest } from '../lib/release';
 import { createOnce } from '../lib/upsert';
+import { ASC_RELEASE_TYPE, changeText, RELEASE_TYPE_EDITABLE, releaseTypeChanges, type WantedRelease } from '../lib/release-type';
 import { ascClient, type J } from './asc';
 import { allVersions, parsePlatform, pickPlatform, platformLabel, versionsPath } from './platform';
 
@@ -26,12 +34,16 @@ export async function run(ctx: Ctx): Promise<void> {
   const a = ctx.args;
   const phased = a.get('phased') as PhasedAction | undefined;
   const manual = a.has('manual-release');
-  if (!phased && !manual) throw new Error('usage: apple release --phased on|pause|resume|complete | --manual-release [--version x.y.z] [--dry] [--yes]');
+  const typeFlags = [a.has('after-approval') && 'afterApproval', a.has('manual') && 'manual', a.has('scheduled') && 'scheduled'].filter((x): x is 'afterApproval' | 'manual' | 'scheduled' => !!x);
+  if (typeFlags.length > 1) throw new Error('--after-approval, --manual and --scheduled are alternatives: give one');
+  if (!phased && !manual && !typeFlags.length) throw new Error('usage: apple release --phased on|pause|resume|complete | --manual-release | --after-approval | --manual | --scheduled <ISO date> [--version x.y.z] [--dry] [--yes]');
+  if (typeFlags.length && (phased || manual)) throw new Error('the release type flags (--after-approval, --manual, --scheduled) are a command of their own: run --phased / --manual-release separately');
   if (phased && !['on', 'pause', 'resume', 'complete'].includes(phased)) throw new Error('--phased: on | pause | resume | complete');
   const dry = a.has('dry');
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
   const appId = await c.app();
   const want = a.get('version');
+  if (typeFlags.length) return setReleaseType(ctx, c, appId, typeFlags[0]!);
   const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
   shipReport({ version: want, url: consoleUrl('asc.version') });
   // the ship-step contract: the version is released already (and none waits for release): nothing to do, exit 7
@@ -96,3 +108,52 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   done('apple', `${tag}: ${req.note}`);
 }
+
+/** apple release --after-approval | --manual | --scheduled: PATCH appStoreVersions releaseType on a version App Review has not approved yet. */
+async function setReleaseType(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>, appId: string, name: 'afterApproval' | 'manual' | 'scheduled'): Promise<void> {
+  const a = ctx.args;
+  const TAG = 'apple';
+  const want = a.get('version');
+  const state = (v: J): string => v.attributes.appVersionState ?? v.attributes.appStoreState;
+  const date = name === 'scheduled' ? a.required('scheduled', 'ISO date and time', 'e.g. --scheduled 2027-03-01T09:00:00Z') : undefined;
+  if (date && Number.isNaN(Date.parse(date))) throw new Error(`--scheduled ${date}: an ISO 8601 date and time, e.g. 2027-03-01T09:00:00Z`);
+  const target: WantedRelease = { releaseType: ASC_RELEASE_TYPE[name], ...(date ? { earliestReleaseDate: date } : {}) };
+  shipReport({ version: want, url: consoleUrl('asc.version') });
+  const fits = (x: J): boolean => (!want || x.attributes.versionString === want) && (RELEASE_TYPE_EDITABLE.has(state(x)) || state(x) === 'PENDING_DEVELOPER_RELEASE');
+  const platform = parsePlatform(a.get('platform')) ?? pickPlatform(await allVersions(c, appId), want ? [fits, (x: J) => x.attributes.versionString === want] : fits, undefined, 'a version that is not approved yet');
+  const versions = await c.all(versionsPath(appId, platform, 20));
+  const v: J | undefined = want ? versions.find(x => x.attributes.versionString === want) : versions.find(x => RELEASE_TYPE_EDITABLE.has(state(x))) ?? versions.find(x => state(x) === 'PENDING_DEVELOPER_RELEASE');
+  if (!v) throw new Error(`${platformLabel(platform)}: ${want ? `no version ${want}` : 'no version waiting for App Review (Prepare for Submission, rejected, Waiting for Review, In Review)'}`);
+  const versionString = String(v.attributes.versionString);
+  const tag = `${versionString} ${platformLabel(platform)} (${state(v)})`;
+  const changes = releaseTypeChanges(v.attributes, target);
+  const kind = appleReleaseKind(versions.map((x: J) => ({ versionString: String(x.attributes.versionString), state: state(x) })));
+  shipReport({ version: versionString, state: state(v) });
+  const result = (extra: Record<string, unknown>): void => { if (a.has('json')) printJson({ version: versionString, state: state(v), platform, releaseType: target.releaseType, from: v.attributes.releaseType ?? null, releaseKind: kind.kind, ...extra }); };
+  if (!changes.length) {
+    shipNoop({ version: versionString, state: state(v) });
+    result({ changed: false, alreadyThere: true });
+    done(TAG, `${tag}: release type is ${target.releaseType} already: nothing changed`);
+    return;
+  }
+  if (!RELEASE_TYPE_EDITABLE.has(state(v))) {
+    throw new Error(`${tag}: the release type can no longer be changed${state(v) === 'PENDING_DEVELOPER_RELEASE' ? ` (App Review approved it and it waits for you: release it with storebound apple release --manual-release --version ${versionString})` : ' (it is approved or released; App Store Connect only takes the change before approval)'}`);
+  }
+  if (a.has('dry')) {
+    log(TAG, `would set the release type of ${tag}: ${changeText(changes)} (dry)`);
+    result({ changed: false, dryRun: true, changes });
+    return;
+  }
+  // after approval = on sale at once: for the first version of an app that is the owner's step
+  if (target.releaseType === 'AFTER_APPROVAL' && !enforceFirstRelease(ctx, kind, { store: 'apple', what: 'the first release of the app (it goes on sale by itself once approved)', consoleUrl: consoleUrl('asc.version') })) return;
+  if (!(await confirm(ctx, `Set the release type of ${tag}: ${changeText(changes)}?`))) return;
+  try {
+    await c.asc('PATCH', `/v1/appStoreVersions/${v.id}`, { data: { type: 'appStoreVersions', id: v.id, attributes: Object.fromEntries(changes.map(ch => [ch.field, ch.to])) } });
+  } catch (e) {
+    if (/-> 409/.test((e as Error).message)) throw new Error(`${tag}: App Store Connect refuses the release type change now (409): ${(e as Error).message}
+It is editable until App Review approves the version; after that use apple release --manual-release.`);
+    throw e;
+  }
+  result({ changed: true, changes });
+  done(TAG, `${tag}: release type ${changeText(changes)}`);
+}
diff --git a/cli/apple/resubmit.ts b/cli/apple/resubmit.ts
index 5bed343..66d1944 100644
--- a/cli/apple/resubmit.ts
+++ b/cli/apple/resubmit.ts
@@ -21,6 +21,7 @@
 // is --version, else the one an open submission holds, else the editable one (Prepare for Submission or rejected).
 // Under `serve` (the desktop's owner action) the plan table is printed next to the --json result.
 import { sellsOn } from '../lib/config';
+import { changeText, RELEASE_TYPE_EDITABLE, releaseTypeChanges, wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
@@ -97,6 +98,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   if (mode === 'submit' && !SUBMITTABLE_APP.has(stateOf(v)) && !held.has(v.id)) throw new Error(`App Store version ${String(v.attributes.versionString)} (${pl}) is ${stateOf(v)}: only a version in Prepare for Submission (or a rejected one) can be submitted`);
   const versionString = String(v.attributes.versionString);
   if (!a.has('json')) log(TAG, `app version ${versionString} (${pl}): ${stateOf(v)}`);
+  // apple.releaseType: the version goes live as the config says (afterApproval | manual | scheduled); set before the submit when it differs
+  const relWant = wantedRelease(config.apple);
+  const relChanges = relWant ? releaseTypeChanges(v.attributes, relWant) : [];
+  if (relChanges.length && !RELEASE_TYPE_EDITABLE.has(stateOf(v))) throw new Error(`App Store version ${versionString} (${pl}) is ${stateOf(v)}: its release type can no longer be changed (apple.releaseType wants ${changeText(relChanges)})`);
 
   // the build, by its number
   const b = (await c.all(`/v1/builds?filter[app]=${appId}&filter[version]=${number}&filter[preReleaseVersion.version]=${versionString}&filter[preReleaseVersion.platform]=${platform}`))[0];
@@ -123,7 +128,7 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   const gc = gcUse.inUse ? await readGcSwitch(c, appId, v) : null;
   const gcPlan = gc ? gcSwitchPlan(gc) : [];
   if (a.has('json')) {
-    printJson({ dryRun: dry, releaseKind: kind.kind, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
+    printJson({ dryRun: dry, releaseKind: kind.kind, releaseType: relChanges.length ? { changes: relChanges } : null, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
     // the desktop's owner dialog shows the output text: the plan table goes with the result there
     if (process.env.STOREBOUND_MACHINE === '1') { console.log(formatRows(rows)); for (const x of blockers) warn(TAG, x); }
     if (blockers.length) process.exitCode = 1;
@@ -132,6 +137,7 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   } else {
     console.log(formatRows(rows));
     log(TAG, `${kind.kind === 'update' ? 'update of an app on sale' : 'FIRST release of this app (the owner approves it once: --first-release)'}: ${kind.why}`);
+    if (relChanges.length) log(TAG, `${dry ? 'would set' : 'setting'} release type: ${changeText(relChanges)} (apple.releaseType)`);
     for (const l of gcPlan) log(TAG, `${dry ? 'would ' : ''}${l} (Game Center: ${gcUse.why})`);
     for (const s of plan.skipped) log(TAG, `not added ${s.id}: ${s.why}`);
     for (const x of blockers) warn(TAG, x);
@@ -149,6 +155,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
     await c.asc('PATCH', `/v1/appStoreVersions/${v.id}/relationships/build`, { data: { type: 'builds', id: build.id } });
     log(TAG, `build ${number} attached to ${versionString}`);
   }
+  if (relChanges.length) {
+    await c.asc('PATCH', `/v1/appStoreVersions/${v.id}`, { data: { type: 'appStoreVersions', id: v.id, attributes: Object.fromEntries(relChanges.map(ch => [ch.field, ch.to])) } });
+    log(TAG, `release type of ${versionString}: ${changeText(relChanges)}`);
+  }
   if (gc && gcPlan.length) await ensureGcSwitch(c, gc, TAG);
   try {
     await submitPlanned(ctx, c, { appId, ids, state, tag: TAG, withVersion: true, appVersionId: v.id, platform, quiet: true, resolve });
diff --git a/cli/apple/testflight.ts b/cli/apple/testflight.ts
index 63c272c..8f70951 100644
--- a/cli/apple/testflight.ts
+++ b/cli/apple/testflight.ts
@@ -26,7 +26,7 @@ import { BUILD_WAIT_EXIT, type BuildSeen, expireCandidates, planExpire, validHin
 import { parseDuration } from '../lib/release';
 import {
   type ApiBuild, betaDescriptions, betaReadiness, betaReviewReq, buildsWithVersion, getsAllBuilds, type Group, groupFromApi, inviteReq, maskEmail,
-  parseTesters, pickBuild, planBetaInfo, planBetaReviewDetail, planDistribute, planGroups, planTesters, planWhatToTest, unknownGroupMessage, whatToTestFromListing,
+  installableBuild, noInstallableBuildHint, noInstallableBuilds409, parseTesters, pickBuild, planBetaInfo, planBetaReviewDetail, planDistribute, planGroups, planTesters, planWhatToTest, unknownGroupMessage, whatToTestFromListing,
 } from '../lib/testflight';
 import { type Asc, ascClient, type J } from './asc';
 import { describeReq, execute, type Req } from './jsonapi';
@@ -113,6 +113,17 @@ async function findBuild(c: Asc, appId: string, number: string, marketing?: stri
   return { ...b, detail };
 }
 
+/** Whether the group has a build its testers can install now (past Beta App Review for an external group). An internal
+ *  all-builds group has every build of the app. */
+async function groupHasInstallableBuild(c: Asc, appId: string, g: Group): Promise<boolean> {
+  const builds = getsAllBuilds(g) ? await c.all(`/v1/builds?filter[app]=${appId}&limit=200`) : await c.all(`/v1/betaGroups/${g.id}/builds?limit=200`);
+  for (const b of builds) {
+    const detail = (await c.maybe(`/v1/builds/${b.id}/buildBetaDetail`))?.data?.attributes ?? null;
+    if (installableBuild(b, detail, g.internal)) return true;
+  }
+  return false;
+}
+
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
@@ -193,9 +204,35 @@ export async function run(ctx: Ctx): Promise<void> {
     await execute(c.asc, reqs, { dry, tag: TAG });
     if (a.has('invite')) {
       const fresh = new Map((await c.all(`/v1/betaTesters?filter[apps]=${appId}&limit=200`)).map((t: J) => [String(t.attributes.email ?? '').toLowerCase(), t] as const));
-      const pending = want.map(t => fresh.get(t.email)).filter((t): t is J => !!t && ['NOT_INVITED', 'INVITED'].includes(t.attributes.state));
-      if (pending.length && await confirm(ctx, `(Re)send the TestFlight invitation email to ${pending.length} tester(s)?`))
-        await execute(c.asc, pending.map(t => inviteReq(appId, t.id, maskEmail(String(t.attributes.email)))), { dry: false, tag: TAG });
+      // an invitation needs a build the tester can install; without one Apple answers 409 NO_INSTALLABLE_BUILDS (seen live
+      // on a new external group): add the tester, skip the invite, say when it can go out
+      const installable = new Map<string, boolean>();
+      const ready: { t: J; groups: string[] }[] = [], waiting = new Set<string>();
+      let waitingTesters = 0;
+      for (const w of want) {
+        const t = fresh.get(w.email);
+        if (!t || !['NOT_INVITED', 'INVITED'].includes(t.attributes.state)) continue;
+        const own = gs.filter(g => w.groups.includes(g.name));
+        for (const g of own) if (!installable.has(g.id)) installable.set(g.id, await groupHasInstallableBuild(c, appId, g));
+        if (own.some(g => installable.get(g.id))) ready.push({ t, groups: own.map(g => g.name) });
+        else { waitingTesters++; for (const g of own) waiting.add(g.name); }
+      }
+      if (waitingTesters) {
+        const msg = `${waitingTesters} ${noInstallableBuildHint([...waiting])}`;
+        warn(TAG, msg);
+       
+      }
+      if (ready.length && await confirm(ctx, `(Re)send the TestFlight invitation email to ${ready.length} tester(s)?`)) {
+        for (const { t, groups } of ready) {
+          try { await execute(c.asc, [inviteReq(appId, t.id, maskEmail(String(t.attributes.email)))], { dry: false, tag: TAG }); }
+          catch (e) {
+            if (!noInstallableBuilds409(e)) throw e;
+            const msg = `1 ${noInstallableBuildHint(groups)}`;
+            warn(TAG, msg);
+           
+          }
+        }
+      }
     }
     done(TAG, 'testers done');
     return;
@@ -293,6 +330,12 @@ export async function run(ctx: Ctx): Promise<void> {
       if (await confirm(ctx, `Submit build ${number} to Beta App Review now? Apple reviews it for external testing (Test Information must be complete: storebound apple testflight info).`))
         await execute(c.asc, [betaReviewReq(b.id)], { dry: false, tag: TAG });
     }
+    // testers added to an external group but not invited yet: the invitation needs a build past Beta App Review
+    if (a.has('submit-review')) {
+      const waiting: string[] = [];
+      for (const g of external) if ((await c.all(`/v1/betaGroups/${g.id}/betaTesters?limit=200`)).some((t: J) => t.attributes.state === 'NOT_INVITED')) waiting.push(g.name);
+      if (waiting.length) { log(TAG, noInstallableBuildHint(waiting)); }
+    }
     const added = target.filter(g => reqs.some(r => r.path.includes(`/betaGroups/${g.id}/`))).map(g => g.name);
     done(TAG, `build ${number}: ${added.length ? `added to ${added.join(', ')}` : `already available to ${target.map(g => g.name).join(', ')}`}`);
     return;
diff --git a/cli/check.ts b/cli/check.ts
index 89ddd21..692967e 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -38,6 +38,7 @@ import { iphoneDuoNote } from './shots/spec';
 import { hitLine } from './lib/cross-store';
 import { findFastlaneTraces, traceMessage } from './lib/fastlane-traces';
 import { listingFileMentions } from './lib/listing-mentions';
+import { projectFamilies } from './lib/device-families';
 
 /** The newest .ipa in a folder (apple build's export), or null. */
 function newestIpa(dir: string): string | null {
@@ -173,6 +174,14 @@ export async function run(ctx: Ctx): Promise<void> {
       note('shots.capture.auth signs in to a local stack with reviewDemoAccount, the account App Review gets from apple review-details: put the local demo sign-in in captureAuth in .storebound/credentials.json and use ${cred:<name>}'); }
   const duo = iphoneDuoNote({ apple: !!config.apple, duo: !!config.apple?.iphoneDuo, play: !!config.play });
   if (duo?.level === 'info') { hints.push(duo.msg); log('check', `hint: ${duo.msg}`); } else if (duo) note(duo.msg);
+  // device families: offline only the project and the config can be compared; the live version's families need the store
+  if (config.apple) {
+    const proj = projectFamilies(ctx.loaded.root, config.apple.bundleId, config.apple.build?.project);
+    const iosOnly = !proj || !proj.families.ipad;
+    if (proj && proj.families.ipad && config.apple.ipad !== true) note(`${proj.file} builds for iPad (TARGETED_DEVICE_FAMILY ${proj.configurations.join(' / ')}) but apple.ipad is not true: iPad screenshots are not required or checked (set apple.ipad: true)`);
+    else if (proj && !proj.families.ipad && config.apple.ipad === true) note(`apple.ipad is true but ${proj.file} builds TARGETED_DEVICE_FAMILY ${proj.configurations.join(' / ')} (no iPad): set "1,2" or apple.ipad: false`);
+    else if (iosOnly && config.apple.ipad !== true) note(`device families: ${proj ? `iPhone only (apple.ipad not true, TARGETED_DEVICE_FAMILY ${proj.configurations.join(' / ')})` : 'no Xcode project found here'}, and the families of the live version are not known offline: if it supports iPad, Apple refuses an iPhone-only upload after the build (ITMS-90101). storebound validate and apple build compare with the store first`);
+  }
   const creative = creativeNote(config, ctx.loaded.resolve(config.renders ?? config.shots?.out ?? 'store/renders'));
   if (creative) { hints.push(creative); log('check', `hint: ${creative}`); }
   // the scaffolder's own placeholders would reach the stores as the app's copyright, contact and legal pages
diff --git a/cli/commands.ts b/cli/commands.ts
index 90df327..6e05b40 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -89,7 +89,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple status': [() => import('./apple/status'), 'versions, builds, IAPs, review submissions (--wait-review, --cancel-submission <id>); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple creative-assets': [() => import('./apple/creative-assets'), 'Header and Search Results: product page header (21:9) and search results asset (3:2) per locale, or one universal 5244x2950 PNG; uploads to the Asset Library and places it once Apple approved it, reporting waiting ones per locale (MD5 upsert, safe to re-run); --add-for-review, --verify (read-only), --dry'],
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
-  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --manual-release (asks first; --yes for an update of an app on sale, exit 7 when already released; the first-ever release is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
+  'apple release': [() => import('./apple/release'), 'phased release on|pause|resume|complete, --after-approval | --manual | --scheduled <date> (how an unapproved version goes live; exit 7 when already that type), --manual-release (asks first; --yes for an update of an app on sale, exit 7 when already released; the first-ever release is exit 3 OWNER_STEP unless --first-release); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple signing': [() => import('./apple/signing'), 'status | ensure: bundle id capabilities, distribution certificate (key kept in .storebound/signing), App Store profiles installed for Xcode; --dry, asks first'],
   'apple build': [() => import('./apple/build'), 'xcodebuild archive + exportArchive (ExportOptions.plist generated, next build number, API key signing); Capacitor, React Native, Flutter, Unity; --platform macos --tauri <src-tauri> [--path-free] builds a Tauri app for the Mac App Store (signed .app, sandbox entitlements, profile, productbuild .pkg); --dry'],
   'apple upload': [() => import('./apple/upload'), 'upload an IPA, or with --platform macos a signed .pkg (App Store Connect API build upload, or --via altool), build number checked, waits for processing; --dry, asks first'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9493636..aa55fc7 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -68,6 +68,7 @@
   ],
   "apple build": [
    "allow-app-group-gap",
+   "allow-device-gap",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
@@ -229,13 +230,16 @@
    "enable"
   ],
   "apple release": [
+   "after-approval",
    "env-file",
    "first-release",
+   "manual",
    "manual-release",
    "phased",
    "platform",
    "progress",
    "result-file",
+   "scheduled",
    "version",
    "version-from"
   ],
@@ -1145,12 +1149,14 @@
    "accounts",
    "add-for-review",
    "adgroup",
+   "after-approval",
    "against",
    "agent",
    "all",
    "all-pages",
    "allow-app-group-gap",
    "allow-availability-changes",
+   "allow-device-gap",
    "allow-existing",
    "allow-price-changes",
    "allow-ssh",
@@ -1265,6 +1271,7 @@
    "locale",
    "locale-map",
    "lookup",
+   "manual",
    "manual-release",
    "max-level",
    "max-ratio",
@@ -1348,6 +1355,7 @@
    "root",
    "scan-paths",
    "scenes",
+   "scheduled",
    "scheme",
    "sdk-dirs",
    "search",
@@ -1526,7 +1534,8 @@
   ],
   "apple release": [
    "storebound apple release --phased on|pause|resume|complete [--version 1.2.0] [--dry] [--yes]",
-   "storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]"
+   "storebound apple release --manual-release [--version 1.2.0] [--first-release] [--yes] [--json]",
+   "storebound apple release --after-approval | --manual | --scheduled <ISO date> [--version 1.2.0] [--first-release] [--yes] [--json]"
   ],
   "apple resubmit": [
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]"
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 6fb69c8..cda074e 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -18,6 +18,7 @@ import { type AppleSigning, validateSigning } from './signing';
 import { type AppleBuildConfig, validateAppleBuild } from './xcode';
 import { type PlayBuildConfig, validatePlayBuild } from './gradle';
 import { type OriginalityConfig, validateOriginality } from './originality';
+import { validateReleaseType } from './release-type';
 
 /** consumable / non_consumable: both stores. non_renewing: Apple NON_RENEWING_SUBSCRIPTION (access for a fixed time,
  *  you track the expiry); Google Play has no such type, so it becomes a one-time product your app consumes when the
@@ -678,6 +679,14 @@ export interface ShipConfig {
     screenshotTypes?: string[];
     /** The app runs on iPad: renders, checks and uploads 13" iPad screenshots (2064 x 2752) and iPad app previews. */
     ipad?: boolean;
+    /** How an approved version goes live: "afterApproval" (released as soon as App Review approves it), "manual" (waits in
+     *  Pending Developer Release for `apple release --manual-release`) or "scheduled" (not before earliestReleaseDate).
+     *  Applied by `apple listing` when it creates a version and by `apple submit` before submitting (old -> new in the dry
+     *  run); `apple release --after-approval | --manual` changes it on an editable version. Unset: new versions are MANUAL
+     *  and existing ones are left as they are. */
+    releaseType?: 'afterApproval' | 'manual' | 'scheduled';
+    /** releaseType "scheduled": the earliest release, ISO 8601 date and time (2027-03-01T09:00:00Z). */
+    earliestReleaseDate?: string;
     /**
      * Also render, check and upload a 6.3" iPhone set (Dynamic Island, medium display, 1206 x 2622 -> APP_IPHONE_61).
      * Off by default: App Store Connect lists a medium-display screenshot as required for iPhone but fills it by
@@ -1197,6 +1206,7 @@ export function validateConfig(c: unknown): string[] {
     if (an !== undefined && (typeof an !== 'string' || !an.trim())) e.push('apple.name: the App Store name (text), or leave it out to use app.name');
     else if (an !== undefined && [...an].length > APPLE_NAME_MAX) e.push(`apple.name: ${[...an].length} characters > ${APPLE_NAME_MAX} (App Store limit)`);
     if (cfg.apple.appId && !/^\d+$/.test(cfg.apple.appId)) e.push(`apple.appId: numeric Apple ID of the app (${consoleLink('asc.app-info')})`);
+    e.push(...validateReleaseType(cfg.apple));
     const enc = cfg.apple.usesNonExemptEncryption;
     if (enc !== undefined && typeof enc !== 'boolean') e.push('apple.usesNonExemptEncryption: true | false');
     if (cfg.apple.screenshotTypes && !cfg.apple.screenshotTypes.every(t => /^APP_[A-Z0-9_]+$/.test(t))) e.push('apple.screenshotTypes: display types like APP_IPHONE_67');
diff --git a/cli/lib/device-families.ts b/cli/lib/device-families.ts
new file mode 100644
index 0000000..0630f22
--- /dev/null
+++ b/cli/lib/device-families.ts
@@ -0,0 +1,111 @@
+// Device families of an iOS app: what the last live version of the app on the App Store supports, against what the
+// project builds (TARGETED_DEVICE_FAMILY in the Xcode project) and what the config says (apple.ipad).
+// Apple refuses an upload that drops a device family the previous version supported: ITMS-90101 "This bundle does not
+// support one or more of the devices supported by the previous app version", after a full archive (seen live: an app
+// whose live version ran on iPad, built with TARGETED_DEVICE_FAMILY = 1). So `validate` and `apple build` compare first.
+// Pure helpers; the store reads are in cli/apple/device-families.ts.
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+export interface Families { iphone: boolean; ipad: boolean }
+
+/** Families in TARGETED_DEVICE_FAMILY: 1 iPhone/iPod, 2 iPad (3 tvOS, 4 watchOS, 6 Mac Catalyst, 7 Vision). Pure. */
+export function familiesOfList(list: number[]): Families { return { iphone: list.includes(1), ipad: list.includes(2) }; }
+
+/** The families a store signal names: build bundle deviceProtocols, file-size device models, screenshot display types. Pure. */
+export function familiesOfStrings(values: string[]): Families {
+  const t = values.join(' ');
+  return { iphone: /iphone|ipod/i.test(t), ipad: /ipad/i.test(t) };
+}
+
+export interface LiveFamilies { version: string; state: string; families: Families; evidence: string[] }
+
+/** Merges the signals of one live version: any signal naming iPad means the version supports iPad. null when no signal
+ *  names any family (unknown, never "iPhone only"). Pure. */
+export function liveFamilies(version: string, state: string, signals: { name: string; values: string[] }[]): LiveFamilies | null {
+  const evidence: string[] = [];
+  const families: Families = { iphone: false, ipad: false };
+  for (const s of signals) {
+    const f = familiesOfStrings(s.values);
+    if (!f.iphone && !f.ipad) continue;
+    families.iphone ||= f.iphone;
+    families.ipad ||= f.ipad;
+    evidence.push(`${s.name}: ${[f.iphone && 'iPhone', f.ipad && 'iPad'].filter(Boolean).join(' + ')}`);
+  }
+  return evidence.length ? { version, state, families, evidence } : null;
+}
+
+export interface ProjectFamilies { file: string; list: number[]; families: Families; configurations: string[] }
+
+/** The Release build configurations of a pbxproj with their TARGETED_DEVICE_FAMILY: the ones of the app's bundle id,
+ *  else every Release configuration that is not an extension (bundle id below the app's). Pure. */
+export function pbxFamilies(text: string, bundleId: string, file = 'project.pbxproj'): ProjectFamilies | null {
+  const blocks: { name: string; bundle: string | null; family: string | null; ext: boolean }[] = [];
+  const re = /isa = XCBuildConfiguration;[^{]*?buildSettings = \{([\s\S]*?)\};\s*name = ("[^"]*"|[\w.-]+);/g;
+  for (let m: RegExpExecArray | null; (m = re.exec(text));) {
+    const body = m[1]!;
+    const fam = /TARGETED_DEVICE_FAMILY = ("?)([\d, ]+)\1;/.exec(body)?.[2] ?? null;
+    const bid = /PRODUCT_BUNDLE_IDENTIFIER = "?([^";\s]+)"?;/.exec(body)?.[1] ?? null;
+    blocks.push({ name: m[2]!.replace(/"/g, ''), bundle: bid, family: fam, ext: /WRAPPER_EXTENSION = appex|APPLICATION_EXTENSION_API_ONLY = YES/.test(body) || (bid !== null && bid.startsWith(`${bundleId}.`)) });
+  }
+  const release = blocks.filter(b => b.name === 'Release' && b.family !== null);
+  let pick = release.filter(b => b.bundle === bundleId);
+  if (!pick.length) pick = release.filter(b => !b.ext);
+  if (!pick.length) return null;
+  const list = [...new Set(pick.flatMap(b => b.family!.split(',').map(x => Number(x.trim())).filter(n => Number.isFinite(n) && n > 0)))].sort((a, b) => a - b);
+  return { file, list, families: familiesOfList(list), configurations: pick.map(b => b.family!.replace(/\s/g, '')) };
+}
+
+const SKIP = new Set(['node_modules', 'Pods', '.git', 'build', 'DerivedData', 'Carthage', '.build', 'dist', 'vendor']);
+
+/** Every project.pbxproj under root (depth <= 5), root-relative with forward slashes. */
+export function findPbxprojs(root: string, depth = 5): string[] {
+  const out: string[] = [];
+  const walk = (dir: string, rel: string, d: number): void => {
+    if (d > depth || !existsSync(dir)) return;
+    let names: import('node:fs').Dirent[];
+    try { names = readdirSync(dir, { withFileTypes: true }); } catch { return; }
+    for (const e of names) {
+      if (!e.isDirectory() || SKIP.has(e.name)) continue;
+      const r = rel ? `${rel}/${e.name}` : e.name;
+      if (e.name.endsWith('.xcodeproj')) { if (existsSync(join(dir, e.name, 'project.pbxproj'))) out.push(`${r}/project.pbxproj`); continue; }
+      walk(join(dir, e.name), r, d + 1);
+    }
+  };
+  walk(root, '', 0);
+  return out;
+}
+
+/** The project's device families, read from the Xcode project (apple.build.project when set, else the first project
+ *  that has the app's configurations). null when the project is not on this machine or sets no families. */
+export function projectFamilies(root: string, bundleId: string, project?: string): ProjectFamilies | null {
+  const files = project && project.endsWith('.xcodeproj') ? [`${project.replace(/\\/g, '/')}/project.pbxproj`] : findPbxprojs(root);
+  for (const f of files) {
+    try {
+      const r = pbxFamilies(readFileSync(join(root, f), 'utf8'), bundleId, f);
+      if (r) return r;
+    } catch { /* unreadable: next */ }
+  }
+  return null;
+}
+
+export interface FamilyVerdict { level: 'ok' | 'blocker' | 'warn'; msg: string; fix?: string }
+
+/** Compares the live version, the project and the config. Blocker: the live version supports iPad and the project does
+ *  not (the upload is refused with ITMS-90101) or apple.ipad is not true (iPad screenshots and checks are off). Pure. */
+export function familyVerdicts(i: { live: LiveFamilies | null; project: ProjectFamilies | null; ipad: boolean | undefined }): FamilyVerdict[] {
+  const out: FamilyVerdict[] = [];
+  const { live, project } = i;
+  const fixProject = 'set TARGETED_DEVICE_FAMILY to "1,2" (Xcode: target > General > Supported Destinations: add iPad)';
+  if (!live) {
+    out.push({ level: 'warn', msg: `device families of the live version not known${project ? '' : ' and no Xcode project found'}: if it supports iPad, an iPhone-only build is refused at upload (ITMS-90101)`, fix: 'storebound validate (reads the live version from App Store Connect)' });
+    return out;
+  }
+  const liveText = `${[live.families.iphone && 'iPhone', live.families.ipad && 'iPad'].filter(Boolean).join(' + ')} (version ${live.version} ${live.state}; ${live.evidence.join('; ')})`;
+  if (live.families.ipad) {
+    if (project && !project.families.ipad) out.push({ level: 'blocker', msg: `the live version supports ${liveText}, but ${project.file} builds TARGETED_DEVICE_FAMILY = ${project.configurations.join(' / ')} (no iPad): Apple refuses the upload after the archive with ITMS-90101`, fix: `${fixProject}; and apple.ipad: true in the config` });
+    if (i.ipad !== true) out.push({ level: 'blocker', msg: `the live version supports ${liveText}, but apple.ipad is not true in the config`, fix: 'set apple.ipad: true (iPad screenshots are then required) and TARGETED_DEVICE_FAMILY "1,2"' });
+    if (!out.length) out.push({ level: 'ok', msg: `device families: live ${liveText}; project ${project ? `TARGETED_DEVICE_FAMILY ${project.configurations.join(' / ')}` : 'not read'}; apple.ipad true` });
+  } else out.push({ level: 'ok', msg: `device families: live ${liveText}; nothing to keep` });
+  return out;
+}
diff --git a/cli/lib/listing-plan.ts b/cli/lib/listing-plan.ts
index 7e18bed..40edf0c 100644
--- a/cli/lib/listing-plan.ts
+++ b/cli/lib/listing-plan.ts
@@ -69,7 +69,7 @@ export const versionInfos = (rows: { id: string; attributes: Record<string, unkn
  * string changes only while PREPARE_FOR_SUBMISSION), create a new one, or refuse (the number exists, is not higher than
  * a version that went through review, or another version is in review / pending release). Pure.
  */
-export function planVersion(rows: { id: string; attributes: Record<string, unknown> }[], want: string, attrs: { copyright: string; releaseType: string }, platform = 'IOS'): VersionPlan {
+export function planVersion(rows: { id: string; attributes: Record<string, unknown> }[], want: string, attrs: { copyright: string; releaseType?: string; earliestReleaseDate?: string }, platform = 'IOS'): VersionPlan {
   const existing = versionInfos(rows);
   const editable = existing.find(v => EDITABLE_STATES.has(v.state));
   const others = existing.filter(v => v !== editable);
@@ -87,7 +87,8 @@ export function planVersion(rows: { id: string; attributes: Record<string, unkno
     return refuse(`version ${want} is not higher than ${higher.versionString} (${higher.state}); App Store versions only go up`);
   if (editable) {
     const cur = rows.find(r => r.id === editable.id)!.attributes;
-    const wantAttrs = { versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType };
+    // releaseType only when asked for (apple.releaseType): an existing version keeps the one it has
+    const wantAttrs: Record<string, string | undefined> = { versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType, earliestReleaseDate: attrs.releaseType === 'SCHEDULED' ? attrs.earliestReleaseDate : undefined };
     const p = planItem(editable.id, { id: editable.id, attributes: cur }, wantAttrs);
     if (editable.versionString !== want && editable.state !== 'PREPARE_FOR_SUBMISSION')
       return refuse(`the editable version ${editable.versionString} is ${editable.state}; its version string changes only while PREPARE_FOR_SUBMISSION (use --version ${editable.versionString}, or change it in App Store Connect)`);
@@ -102,7 +103,8 @@ export function planVersion(rows: { id: string; attributes: Record<string, unkno
   if (busy) return refuse(`version ${busy.versionString} is ${busy.state}; App Store Connect allows one version in progress (${busy.state === 'PENDING_DEVELOPER_RELEASE'
     ? `release it first: storebound apple release --manual-release --version ${busy.versionString} --dry, then without --dry`
     : busy.state === 'WAITING_FOR_REVIEW' || busy.state === 'IN_REVIEW' ? 'wait for the review, or remove it from review in App Store Connect' : 'wait for its release or remove it from review'})`);
-  const attributes = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType };
+  const attributes: Record<string, string> = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType ?? 'MANUAL' };
+  if (attributes.releaseType === 'SCHEDULED' && attrs.earliestReleaseDate) attributes.earliestReleaseDate = attrs.earliestReleaseDate;
   return { ...base, action: 'create', reason: `create version ${want} (no editable ${PLATFORM_LABEL[platform] ?? platform} version)`, changes: Object.entries(attributes).map(([field, to]) => ({ field, from: null, to })), attributes };
 }
 
diff --git a/cli/lib/release-type.ts b/cli/lib/release-type.ts
new file mode 100644
index 0000000..f090f07
--- /dev/null
+++ b/cli/lib/release-type.ts
@@ -0,0 +1,54 @@
+// How an App Store version goes live after App Review: apple.releaseType in the config, appStoreVersions.releaseType
+// on the store. MANUAL leaves an approved version in PENDING_DEVELOPER_RELEASE until someone releases it; AFTER_APPROVAL
+// releases it as soon as it is approved; SCHEDULED releases it at earliestReleaseDate at the earliest (Apple:
+// https://developer.apple.com/documentation/appstoreconnectapi/appstoreversion/attributes, releaseType, earliestReleaseDate).
+// Pure: the commands (apple listing, apple submit, apple release) read the version and send the PATCH.
+import type { FieldDiff } from './listing-plan';
+
+export const RELEASE_TYPES = ['afterApproval', 'manual', 'scheduled'] as const;
+export type ReleaseTypeName = (typeof RELEASE_TYPES)[number];
+export type AscReleaseType = 'AFTER_APPROVAL' | 'MANUAL' | 'SCHEDULED';
+
+export const ASC_RELEASE_TYPE: Record<ReleaseTypeName, AscReleaseType> = { afterApproval: 'AFTER_APPROVAL', manual: 'MANUAL', scheduled: 'SCHEDULED' };
+
+/** Version states in which App Store Connect still takes a release type change: everything before approval.
+ *  Once the version is approved (PENDING_DEVELOPER_RELEASE and later) it is released with `apple release --manual-release`. */
+export const RELEASE_TYPE_EDITABLE = new Set(['PREPARE_FOR_SUBMISSION', 'DEVELOPER_REJECTED', 'REJECTED', 'METADATA_REJECTED', 'INVALID_BINARY',
+  'READY_FOR_REVIEW', 'WAITING_FOR_REVIEW', 'IN_REVIEW']);
+
+export interface WantedRelease { releaseType: AscReleaseType; earliestReleaseDate?: string }
+
+/** The release type apple.releaseType asks for, or null when the config does not say (then nothing is touched). */
+export function wantedRelease(apple: { releaseType?: ReleaseTypeName; earliestReleaseDate?: string } | undefined): WantedRelease | null {
+  if (!apple?.releaseType) return null;
+  const releaseType = ASC_RELEASE_TYPE[apple.releaseType];
+  return releaseType === 'SCHEDULED' && apple.earliestReleaseDate ? { releaseType, earliestReleaseDate: apple.earliestReleaseDate } : { releaseType };
+}
+
+/** Problems with apple.releaseType / apple.earliestReleaseDate. Pure. */
+export function validateReleaseType(a: { releaseType?: unknown; earliestReleaseDate?: unknown } | undefined): string[] {
+  if (!a) return [];
+  const e: string[] = [];
+  if (a.releaseType !== undefined && !(RELEASE_TYPES as readonly unknown[]).includes(a.releaseType)) e.push(`apple.releaseType: ${RELEASE_TYPES.join(' | ')} (afterApproval releases an approved version at once; manual waits for \`apple release --manual-release\`)`);
+  if (a.earliestReleaseDate !== undefined) {
+    if (typeof a.earliestReleaseDate !== 'string' || Number.isNaN(Date.parse(a.earliestReleaseDate))) e.push('apple.earliestReleaseDate: an ISO 8601 date and time, e.g. 2027-03-01T09:00:00Z');
+    else if (a.releaseType !== 'scheduled') e.push('apple.earliestReleaseDate: only with apple.releaseType "scheduled"');
+  }
+  if (a.releaseType === 'scheduled' && a.earliestReleaseDate === undefined) e.push('apple.releaseType "scheduled": apple.earliestReleaseDate is required (ISO 8601 date and time)');
+  return e;
+}
+
+/** The attribute changes that bring a version to `want` (old -> new), [] when it is there already. A scheduled date is
+ *  compared as an instant. Pure. */
+export function releaseTypeChanges(cur: Record<string, unknown>, want: WantedRelease): FieldDiff[] {
+  const out: FieldDiff[] = [];
+  const have = cur.releaseType == null ? null : String(cur.releaseType);
+  if (have !== want.releaseType) out.push({ field: 'releaseType', from: have, to: want.releaseType });
+  if (want.releaseType === 'SCHEDULED' && want.earliestReleaseDate) {
+    const had = cur.earliestReleaseDate == null ? null : String(cur.earliestReleaseDate);
+    if (had === null || Date.parse(had) !== Date.parse(want.earliestReleaseDate)) out.push({ field: 'earliestReleaseDate', from: had, to: want.earliestReleaseDate });
+  }
+  return out;
+}
+
+export const changeText = (c: FieldDiff[]): string => c.map(x => `${x.field} ${x.from ?? '(none)'} -> ${x.to}`).join(', ');
diff --git a/cli/lib/testflight.ts b/cli/lib/testflight.ts
index 31381d7..41c0639 100644
--- a/cli/lib/testflight.ts
+++ b/cli/lib/testflight.ts
@@ -320,3 +320,22 @@ export function betaDescriptions(t: TfConfig | undefined, langs: { id: string; a
   }
   return out;
 }
+
+// ---- invitations need an installable build ----
+
+/** Whether a build can be installed by the testers of a group: valid, not expired, and past Beta App Review for an
+ *  external group (externalBuildState BETA_APPROVED / IN_BETA_TESTING), ready for internal testing for an internal one
+ *  (internalBuildState READY_FOR_BETA_TESTING / IN_BETA_TESTING). `detail`: the build's buildBetaDetails attributes. Pure. */
+export function installableBuild(build: { attributes: Record<string, unknown> }, detail: Record<string, unknown> | null | undefined, internal: boolean): boolean {
+  if (build.attributes.expired === true) return false;
+  if (build.attributes.processingState !== undefined && build.attributes.processingState !== 'VALID') return false;
+  const state = String((internal ? detail?.internalBuildState : detail?.externalBuildState) ?? '');
+  return internal ? ['READY_FOR_BETA_TESTING', 'IN_BETA_TESTING'].includes(state) : ['BETA_APPROVED', 'IN_BETA_TESTING'].includes(state);
+}
+
+/** The line for testers that are added but cannot be invited yet. Pure. */
+export const noInstallableBuildHint = (groups: string[]): string =>
+  `tester added; the invite goes out when a build in ${groups.join(', ')} passes Beta App Review (re-run with --invite then)`;
+
+/** Apple's 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS on POST /v1/betaTesterInvitations (seen live). Pure. */
+export const noInstallableBuilds409 = (e: unknown): boolean => /NO_INSTALLABLE_BUILDS/.test(String((e as Error)?.message ?? e));
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index 8470651..43d8906 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -63,6 +63,8 @@ export interface AppleSnapshot {
   /** Screenshots of the version that are not COMPLETE (cli/apple/screenshot-health.ts): a submit answers 409
    *  ASSET_IN_POST_PROCESSING while any is left. */
   screenshotsPending?: Pending[];
+  /** Live version's device families vs the Xcode project and apple.ipad (cli/lib/device-families.ts familyVerdicts); undefined: not iOS. */
+  deviceFamilies?: { level: 'ok' | 'blocker' | 'warn'; msg: string; fix?: string }[];
   /** Editable or rejected versions of the app's other platforms (an app's macOS version has its own state). */
   otherPlatformVersions?: { versionString: string; state: string; platform: string }[];
   /** app.copyright from the config (undefined: not set). */
@@ -215,6 +217,7 @@ export function appleRules(s: AppleSnapshot): Finding[] {
   else if (EDITABLE.includes(s.version.state)) add('ok', 'version', `version ${vl}: ${s.version.state}`);
   else if (IN_FLIGHT.includes(s.version.state)) add('warn', 'version', `version ${vl} is ${s.version.state} (nothing to prepare)`);
   else add('warn', 'version', `version ${vl}: ${s.version.state}`);
+  for (const d of s.deviceFamilies ?? []) add(d.level, 'device-families', d.msg, d.fix);
   {
     const pend = s.screenshotsPending ?? [];
     const lines = describePending(pend);
diff --git a/cli/validate.ts b/cli/validate.ts
index c91fdac..539f453 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -38,6 +38,8 @@ import { playClient } from './play/client';
 import { listOneTimeProducts } from './play/products';
 import { creativeNote } from './shots/creative';
 import { creativeWaiting, localCreative } from './apple/creative-assets';
+import { liveDeviceFamilies } from './apple/device-families';
+import { type FamilyVerdict, familyVerdicts, projectFamilies } from './lib/device-families';
 import { fixFor, GUIDELINE, hitLine } from './lib/cross-store';
 import { listingFileMentions } from './lib/listing-mentions';
 import { brokerConfig, brokerPlayInfo, enabledApisOf, grantsOf, type PlayNeed, playGaps, sdkConfigGaps } from './lib/broker';
@@ -98,6 +100,14 @@ async function creativeWaitingOf(ctx: Ctx, c: Awaited<ReturnType<typeof ascClien
   } catch { return []; }
 }
 
+/** Live version's device families against the project and apple.ipad (cli/lib/device-families.ts). A failed read is a warning, never a blocker. */
+async function deviceFamilyVerdicts(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>, appId: string): Promise<FamilyVerdict[]> {
+  const { config, root } = ctx.loaded;
+  try {
+    return familyVerdicts({ live: await liveDeviceFamilies(c, appId), project: projectFamilies(root, config.apple!.bundleId, config.apple?.build?.project), ipad: config.apple?.ipad });
+  } catch (e) { return [{ level: 'warn', msg: `device families not compared: ${(e as Error).message.slice(0, 200)}` }]; }
+}
+
 export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
   const { config, root } = ctx.loaded;
   const c = await ascClient(root, config.apple!.bundleId, config.apple?.appId);
@@ -173,6 +183,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
     creativeWaiting: await creativeWaitingOf(ctx, c, appId),
     screenshotsPending: pendingScreenshots(shotRows, updateLedger(root, shotRows), Date.now()),
     configCopyright: config.app.copyright,
+    deviceFamilies: platform === 'IOS' ? await deviceFamilyVerdicts(ctx, c, appId) : undefined,
     build, locales, reviewDetail, ageRating,
     expectedLocales: config.languages.map(l => l.apple).filter((x): x is string => !!x),
     requiredDisplayTypes: requiredDisplayTypes(config.apple),
diff --git a/skills/appstore-first-release/SKILL.md b/skills/appstore-first-release/SKILL.md
index edb266a..4f90081 100644
--- a/skills/appstore-first-release/SKILL.md
+++ b/skills/appstore-first-release/SKILL.md
@@ -76,7 +76,7 @@ answers the compliance facts no file proves, all in one batch at the start.
 14. **Submit.** `storebound apple submit --build <n>` (dry run: the plan table with the build you uploaded, by its
     number, the version and the ready IAPs in one review submission), then the owner's yes for the same command with
     `--yes`; with IAPs `apple iap-submit --with-version --yes` does the same without attaching a build (step 11). In
-    the desktop app the owner presses Releases > Submit for review (plan, then a system dialog). Release type MANUAL
+    the desktop app the owner presses Releases > Submit for review (plan, then a system dialog). Release type MANUAL (or apple.releaseType: afterApproval | manual | scheduled; `apple release --after-approval | --manual | --scheduled <date>` changes it until the version is approved; for the first version of an app after-approval is the owner's step)
     means the owner presses "Release" after approval.
 15. **Verify + wait.** `storebound apple status`: version WAITING_FOR_REVIEW, IAPs WAITING_FOR_REVIEW, one review
     submission. `storebound apple status --wait-review` polls until approved (exit 0) or rejected (exit 1,
diff --git a/skills/release-management/SKILL.md b/skills/release-management/SKILL.md
index 21bf298..34f7a7f 100644
--- a/skills/release-management/SKILL.md
+++ b/skills/release-management/SKILL.md
@@ -35,7 +35,12 @@ presses release; you prepare, dry-run and report. `storebound mcp` deliberately
    already); the first-ever submission is the owner's (exit 3 `OWNER_STEP`, re-run with `--first-release` after the
    owner's yes). Wait: `storebound apple status --wait-review` (polls with backoff, exit 0 approved, 1 rejected,
    7 timeout; `--timeout 72h`). Rejected: `review-rejections` skill.
-4. Approved = PENDING_DEVELOPER_RELEASE. Release an update yourself: `storebound apple release --manual-release --yes`
+4. Release type: an update that should go live by itself is `afterApproval`. Set `apple.releaseType: afterApproval` in the
+   config (`apple listing` applies it to a new version, `apple submit` sets it before submitting and its dry run shows
+   `releaseType MANUAL -> AFTER_APPROVAL`), or on one version `storebound apple release --after-approval --yes`
+   (`--manual` / `--scheduled <ISO date>` are the other two; allowed until App Review approves the version, exit 7 when it
+   is that type already; pitfall 125). Without it an approved MANUAL version waits in PENDING_DEVELOPER_RELEASE.
+   Approved = PENDING_DEVELOPER_RELEASE. Release an update yourself: `storebound apple release --manual-release --yes`
    (the first-ever release of an app is the owner's: `OWNER_STEP`) or the "Release This Version" button. With phased release on, automatic updates reach 1 %, 2 %, 5 %, 10 %, 20 %,
    50 %, 100 % over 7 days; anyone can still update manually from the store.
 5. During the rollout watch crashes / reviews. Problem: `storebound apple release --phased pause` (up to 30 days in
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index aa40e01..578902c 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1547,3 +1547,41 @@ that fails without the fix (see CONTRIBUTING.md).
   are not the user's and are not hits. A prebuilt vendored framework carries its own paths: rebuild it path-free.
 - **Never:** point a shared build folder at the default DerivedData, or run the privacy scan only after the upload.
 - **Guard:** `cli/lib/path-free.ts`, `tests/path-free.test.ts`, the hint when `--out` is outside the home folder.
+
+## 125. Updates sat in Pending Developer Release: the version was created and submitted with release type MANUAL
+
+- **Symptom:** an approved update did not go live; it waited in PENDING_DEVELOPER_RELEASE because `apple listing` created the
+  version with releaseType MANUAL and `apple submit` never touched it.
+- **Do:** set `apple.releaseType: afterApproval` (or `manual` / `scheduled` with `apple.earliestReleaseDate`). `apple listing`
+  creates new versions with it, `apple submit` / `apple resubmit` set it on the version before submitting when it differs
+  (the dry run shows `releaseType MANUAL -> AFTER_APPROVAL`). On one version: `storebound apple release --after-approval --yes`
+  (`--manual`, `--scheduled <ISO date>`; `--platform`, `--version`, `--json`; exit 7 when it already has that type). The type
+  is editable until App Review approves the version; an approved one is released with `apple release --manual-release`.
+  Unset: new versions are MANUAL and existing ones are left as they are. Updates are agent steps; `--after-approval` on the
+  first version of an app puts it on sale by itself, so that is the owner's (exit 3 `OWNER_STEP`, `--first-release`).
+- **Never:** wait for an approval email and then look for the console button, or flip the type back with `apple listing` runs.
+- **Guard:** `cli/lib/release-type.ts`, `tests/apple-release-gaps.test.ts`.
+
+## 126. iPhone-only build of an app whose live version runs on iPad: ITMS-90101 after a full archive
+
+- **Symptom:** `storebound check` passed with `apple.ipad` false; the upload was refused after the archive with ITMS-90101 "This
+  bundle does not support one or more of the devices supported by the previous app version" (TARGETED_DEVICE_FAMILY = 1).
+- **Do:** `storebound validate` and `apple build` read the live version (READY_FOR_SALE, else the newest that was) from App
+  Store Connect: its build bundle (`deviceProtocols`, device models of `buildBundleFileSizes`) and its screenshot sets
+  (`APP_IPAD_*`); any iPad signal means iPad. They compare it with TARGETED_DEVICE_FAMILY of the Release configuration in the
+  Xcode project and with `apple.ipad`, and stop BEFORE the archive with the fix: `TARGETED_DEVICE_FAMILY = "1,2"` and
+  `apple.ipad: true`. Offline `check` warns when the live families cannot be known. `--allow-device-gap` builds anyway.
+- **Never:** drop a device family the live version supports, or turn `apple.ipad` off to silence the screenshot check.
+- **Guard:** `cli/lib/device-families.ts`, `cli/apple/device-families.ts`, `tests/apple-release-gaps.test.ts`. The build bundle
+  attribute names come from Apple's spec; which signal carries the iPad answer live is not recorded, hence the merge.
+
+## 127. TestFlight invite on a new external group: 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS
+
+- **Symptom:** `apple testflight testers --group <g> --invite --yes` created the tester but the invitation failed with 409
+  NO_INSTALLABLE_BUILDS: the group had no build past Beta App Review yet.
+- **Do:** `--invite` first checks that a build of the tester's group is installable (external: BETA_APPROVED / IN_BETA_TESTING;
+  internal: READY_FOR_BETA_TESTING / IN_BETA_TESTING). If not, the tester stays added, no invitation is sent and the run prints
+  "tester added; the invite goes out when a build in <group> passes Beta App Review (re-run with --invite then)", exit 0. The
+  409 itself is treated the same way. `apple testflight distribute --submit-review` prints the line for testers not invited yet.
+- **Never:** retry the invitation in a loop, or report the added tester as a failure.
+- **Guard:** `installableBuild` / `noInstallableBuildHint` in `cli/lib/testflight.ts`, `tests/apple-release-gaps.test.ts`.
diff --git a/skills/testflight/SKILL.md b/skills/testflight/SKILL.md
index 42aadae..f076722 100644
--- a/skills/testflight/SKILL.md
+++ b/skills/testflight/SKILL.md
@@ -39,7 +39,10 @@ changes or deletes a group.
   commits; storebound masks them in every log line (`j***@example.com`).
 - `storebound apple testflight testers --dry` shows: new testers, testers added to more groups, (with `--remove`)
   testers who leave a managed group. The real run **asks first**: Apple emails each new tester an invitation once the
-  group has a build. `--invite` (re)sends invitations to testers still `NOT_INVITED` / `INVITED` (asks again).
+  group has a build. `--invite` (re)sends invitations to testers still `NOT_INVITED` / `INVITED` (asks again) once a build of the tester's group is
+  installable (an external group: past Beta App Review). Without one the tester is added, the invite is skipped and the run
+  says "tester added; the invite goes out when a build in <group> passes Beta App Review (re-run with --invite then)" (exit 0;
+  Apple's 409 `NO_INSTALLABLE_BUILDS` is handled the same way; `distribute --submit-review` prints the same line; pitfall 127).
 - Internal groups only take App Store Connect users (Users and Access); add people there first.
 - Testers are an owner action: not an MCP tool. An agent prepares the CSV format and the dry run, the owner runs it.
 
diff --git a/tests/apple-release-gaps.test.ts b/tests/apple-release-gaps.test.ts
new file mode 100644
index 0000000..14fd382
--- /dev/null
+++ b/tests/apple-release-gaps.test.ts
@@ -0,0 +1,405 @@
+// Three gaps found in real use, against the stateful App Store Connect double (tests/helpers/fake-stores.ts):
+//  1. release type: updates sat in Pending Developer Release because versions were created / submitted as MANUAL
+//     (apple.releaseType, apple submit, apple release --after-approval | --manual)
+//  2. device families: an iPhone-only build of an app whose live version runs on iPad is refused AFTER the archive (ITMS-90101)
+//  3. TestFlight: inviting a tester of a group without an installable build is 409 NO_INSTALLABLE_BUILDS
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from 'bun:test';
+import { parseArgs } from '../cli/lib/args';
+import { runShipStep } from '../cli/lib/ship-step';
+import { run as appleSubmit } from '../cli/apple/submit';
+import { run as appleRelease } from '../cli/apple/release';
+import { run as appleTestflight } from '../cli/apple/testflight';
+import { run as appleBuild } from '../cli/apple/build';
+import { validateConfig } from '../cli/lib/config';
+import { planVersion } from '../cli/lib/listing-plan';
+import { releaseTypeChanges, validateReleaseType, wantedRelease } from '../cli/lib/release-type';
+import { familyVerdicts, liveFamilies, pbxFamilies, projectFamilies } from '../cli/lib/device-families';
+import { liveDeviceFamilies } from '../cli/apple/device-families';
+import { appleRules } from '../cli/lib/validate-rules';
+import { installableBuild, noInstallableBuildHint, noInstallableBuilds409 } from '../cli/lib/testflight';
+import { ascEnv, BASE, capture, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores, writes } from './helpers/fake-stores';
+
+const APP = '6400000101';
+
+/** Runs a ship step in-process with stdout / stderr captured. */
+async function ship(key: string, argv: string[], body: (a: ReturnType<typeof parseArgs>) => Promise<void>): Promise<{ code: number; out: string; err: string }> {
+  const out: string[] = [], err: string[] = [];
+  const o = process.stdout.write, e = process.stderr.write, cl = console.log, ce = console.error, cw = console.warn, ci = console.info;
+  process.stdout.write = ((s: string | Uint8Array) => { out.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stdout.write;
+  process.stderr.write = ((s: string | Uint8Array) => { err.push(typeof s === 'string' ? s : new TextDecoder().decode(s)); return true; }) as typeof process.stderr.write;
+  console.log = (...a: unknown[]) => { out.push(a.map(String).join(' ') + '\n'); };
+  console.info = console.log;
+  console.error = (...a: unknown[]) => { err.push(a.map(String).join(' ') + '\n'); };
+  console.warn = console.error;
+  try {
+    const code = await runShipStep(key, argv, parseArgs, async a => {
+      const keep = console.log;
+      if (a.has('json')) console.log = (...x: unknown[]) => console.error(...x);
+      try { await body(a); } finally { console.log = keep; }
+    });
+    return { code, out: out.join(''), err: err.join('') };
+  } finally { process.stdout.write = o; process.stderr.write = e; console.log = cl; console.error = ce; console.warn = cw; console.info = ci; }
+}
+
+// ------------------------------------------------------------------------------------------------ 1. release type
+
+describe('release type (pure)', () => {
+  test('config: afterApproval | manual | scheduled (+ date); scheduled needs the date, the date needs scheduled', () => {
+    expect(validateReleaseType({ releaseType: 'afterApproval' })).toEqual([]);
+    expect(validateReleaseType({ releaseType: 'scheduled', earliestReleaseDate: '2027-03-01T09:00:00Z' })).toEqual([]);
+    expect(validateReleaseType({ releaseType: 'soon' }).join()).toContain('afterApproval | manual | scheduled');
+    expect(validateReleaseType({ releaseType: 'scheduled' }).join()).toContain('earliestReleaseDate is required');
+    expect(validateReleaseType({ releaseType: 'manual', earliestReleaseDate: '2027-03-01T09:00:00Z' }).join()).toContain('only with apple.releaseType "scheduled"');
+    expect(validateReleaseType({ releaseType: 'scheduled', earliestReleaseDate: 'tomorrow' }).join()).toContain('ISO 8601');
+    expect(validateConfig({ ...BASE, apple: { ...BASE.apple!, releaseType: 'later' as never } }).join()).toContain('apple.releaseType');
+    expect(wantedRelease({})).toBeNull();
+    expect(wantedRelease({ releaseType: 'afterApproval' })).toEqual({ releaseType: 'AFTER_APPROVAL' });
+  });
+  test('changes are old -> new; the same instant is not a change', () => {
+    expect(releaseTypeChanges({ releaseType: 'MANUAL' }, { releaseType: 'AFTER_APPROVAL' })).toEqual([{ field: 'releaseType', from: 'MANUAL', to: 'AFTER_APPROVAL' }]);
+    expect(releaseTypeChanges({ releaseType: 'AFTER_APPROVAL' }, { releaseType: 'AFTER_APPROVAL' })).toEqual([]);
+    expect(releaseTypeChanges({ releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00+00:00' }, { releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' })).toEqual([]);
+    expect(releaseTypeChanges({ releaseType: 'MANUAL' }, { releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' }).map(c => c.field)).toEqual(['releaseType', 'earliestReleaseDate']);
+  });
+  test('apple listing: a new version takes the configured type (MANUAL when unset); an existing one keeps its own unless asked', () => {
+    const rows = [{ id: 'v1', attributes: { versionString: '1.0.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' } }];
+    expect(planVersion(rows, '1.1.0', { copyright: 'c' }).attributes.releaseType).toBe('MANUAL');
+    expect(planVersion(rows, '1.1.0', { copyright: 'c', releaseType: 'AFTER_APPROVAL' }).attributes.releaseType).toBe('AFTER_APPROVAL');
+    const sched = planVersion(rows, '1.1.0', { copyright: 'c', releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' });
+    expect(sched.attributes).toMatchObject({ releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' });
+    const editable = [...rows, { id: 'v2', attributes: { versionString: '1.1.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'IOS', copyright: 'c', releaseType: 'AFTER_APPROVAL' } }];
+    expect(planVersion(editable, '1.1.0', { copyright: 'c' }).action).toBe('keep');
+    expect(planVersion(editable, '1.1.0', { copyright: 'c', releaseType: 'MANUAL' }).changes).toEqual([{ field: 'releaseType', from: 'AFTER_APPROVAL', to: 'MANUAL' }]);
+  });
+});
+
+describe('release type (fake App Store Connect)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  const version = (id: string, v: string, state: string, releaseType = 'MANUAL'): void => { s.asc.put({ type: 'appStoreVersions', id, attributes: { versionString: v, appVersionState: state, platform: 'IOS', releaseType }, rels: { app: APP } }); };
+  const build = (): void => { s.asc.put({ type: 'builds', id: 'b-8', attributes: { version: '8', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } }); };
+  const typeOf = (id: string): unknown => s.asc.all('appStoreVersions').find(v => v.id === id)!.attributes.releaseType;
+  const cfg = (releaseType: 'afterApproval' | 'manual') => ({ ...BASE, apple: { ...BASE.apple!, releaseType } });
+
+  test('apple submit with apple.releaseType: the dry run shows old -> new, the real run sets it BEFORE the submit, the re-run is exit 7', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(cfg('afterApproval'));
+    const dry = await ship('apple submit', ['--json', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(dry.code).toBe(0);
+    expect(JSON.parse(dry.out).releaseType).toEqual({ changes: [{ field: 'releaseType', from: 'MANUAL', to: 'AFTER_APPROVAL' }] });
+    expect(typeOf('ver-1')).toBe('MANUAL');
+    expect(writes(s.calls)).toEqual([]);
+    const r = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(r.err).toContain('release type of 1.1.0: releaseType MANUAL -> AFTER_APPROVAL');
+    expect(typeOf('ver-1')).toBe('AFTER_APPROVAL');
+    const w = writes(s.calls).map(c => `${c.method} ${c.path}`);
+    expect(w.indexOf('PATCH /v1/appStoreVersions/ver-1')).toBeGreaterThanOrEqual(0);
+    expect(w.indexOf('PATCH /v1/appStoreVersions/ver-1')).toBeLessThan(w.findIndex(x => /^PATCH \/v1\/reviewSubmissions\//.test(x)));
+    const again = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(again.code).toBe(7);
+  });
+
+  test('apple submit without apple.releaseType leaves the version\'s release type alone', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    build();
+    const p = project(BASE);
+    const r = await ship('apple submit', ['--json', '--yes', '--build', '8'], a => appleSubmit({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(0);
+    expect(typeOf('ver-1')).toBe('MANUAL');
+    expect(writes(s.calls).some(c => c.path === '/v1/appStoreVersions/ver-1')).toBe(false);
+  });
+
+  test('apple release --after-approval --yes on an update: set, then exit 7 when it is that type; --manual puts it back', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'WAITING_FOR_REVIEW');
+    const p = project(BASE);
+    const run = (argv: string[]) => ship('apple release', ['--json', '--yes', ...argv], a => appleRelease({ loaded: p.loaded, args: a }));
+    const r = await run(['--after-approval', '--version', '1.1.0']);
+    expect(r.err).not.toContain('error:');
+    expect(r.code).toBe(0);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: true, step: 'release', version: '1.1.0', releaseType: 'AFTER_APPROVAL', from: 'MANUAL', changed: true, releaseKind: 'update' });
+    expect(writes(s.calls).map(c => `${c.method} ${c.path}`)).toEqual(['PATCH /v1/appStoreVersions/ver-1']);
+    expect(typeOf('ver-1')).toBe('AFTER_APPROVAL');
+    const n = s.calls.length;
+    const again = await run(['--after-approval']);
+    expect(again.code).toBe(7);
+    expect(JSON.parse(again.out)).toMatchObject({ ok: true, alreadyThere: true });
+    expect(writes(s.calls.slice(n))).toEqual([]);
+    const back = await run(['--manual', '--version', '1.1.0']);
+    expect(back.code).toBe(0);
+    expect(typeOf('ver-1')).toBe('MANUAL');
+  });
+
+  test('apple release --after-approval --dry changes nothing; --scheduled sets the date; two type flags are a usage error', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PREPARE_FOR_SUBMISSION');
+    const p = project(BASE);
+    const dry = await ship('apple release', ['--json', '--after-approval', '--dry'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(dry.code).toBe(0);
+    expect(JSON.parse(dry.out)).toMatchObject({ dryRun: true, changes: [{ field: 'releaseType', from: 'MANUAL', to: 'AFTER_APPROVAL' }] });
+    expect(writes(s.calls)).toEqual([]);
+    const sch = await ship('apple release', ['--json', '--yes', '--scheduled', '2027-03-01T09:00:00Z'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(sch.code).toBe(0);
+    expect(s.asc.all('appStoreVersions').find(v => v.id === 'ver-1')!.attributes).toMatchObject({ releaseType: 'SCHEDULED', earliestReleaseDate: '2027-03-01T09:00:00Z' });
+    const both = await ship('apple release', ['--json', '--yes', '--manual', '--after-approval'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(both.code).not.toBe(0);
+    expect(both.err).toContain('alternatives');
+  });
+
+  test('an approved version (Pending Developer Release) is refused with the way out; a released one too', async () => {
+    version('ver-0', '1.0.0', 'READY_FOR_SALE');
+    version('ver-1', '1.1.0', 'PENDING_DEVELOPER_RELEASE');
+    const p = project(BASE);
+    const r = await ship('apple release', ['--json', '--yes', '--after-approval', '--version', '1.1.0'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.code).not.toBe(0);
+    expect(r.err).toContain('apple release --manual-release --version 1.1.0');
+    expect(writes(s.calls)).toEqual([]);
+    // already MANUAL and asked for MANUAL: nothing to do even in that state
+    const same = await ship('apple release', ['--json', '--yes', '--manual', '--version', '1.1.0'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(same.code).toBe(7);
+  });
+
+  test('--after-approval on the first version of an app is the owner\'s step (exit 3 OWNER_STEP) unless --first-release', async () => {
+    version('ver-1', '1.0.0', 'PREPARE_FOR_SUBMISSION');
+    const p = project(BASE);
+    const r = await ship('apple release', ['--json', '--yes', '--after-approval'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(r.code).toBe(3);
+    expect(JSON.parse(r.out)).toMatchObject({ ok: false, error: { code: 'OWNER_STEP' } });
+    expect(writes(s.calls)).toEqual([]);
+    const manual = await ship('apple release', ['--json', '--yes', '--manual'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(manual.code).toBe(7);
+    const ok = await ship('apple release', ['--json', '--yes', '--after-approval', '--first-release'], a => appleRelease({ loaded: p.loaded, args: a }));
+    expect(ok.code).toBe(0);
+    expect(typeOf('ver-1')).toBe('AFTER_APPROVAL');
+  });
+});
+
+// ------------------------------------------------------------------------------------------------ 2. device families
+
+const PBX = (family: string, bundle = 'com.example.notes'): string => `// !$*UTF8*$!
+{
+	objects = {
+/* Begin XCBuildConfiguration section */
+		AA01 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				PRODUCT_BUNDLE_IDENTIFIER = ${bundle};
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Debug;
+		};
+		AA02 /* Release */ = {
+			isa = XCBuildConfiguration;
+			baseConfigurationReference = ZZ01;
+			buildSettings = {
+				PRODUCT_BUNDLE_IDENTIFIER = ${bundle};
+				TARGETED_DEVICE_FAMILY = ${family};
+			};
+			name = Release;
+		};
+		AA03 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				PRODUCT_BUNDLE_IDENTIFIER = ${bundle}.Share;
+				TARGETED_DEVICE_FAMILY = "1,2";
+				WRAPPER_EXTENSION = appex;
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+	};
+}
+`;
+
+describe('device families (pure)', () => {
+  test('pbxproj: the Release configuration of the app\'s bundle id, not the extension\'s or Debug', () => {
+    expect(pbxFamilies(PBX('1'), 'com.example.notes')).toMatchObject({ list: [1], families: { iphone: true, ipad: false }, configurations: ['1'] });
+    expect(pbxFamilies(PBX('"1,2"'), 'com.example.notes')).toMatchObject({ list: [1, 2], families: { iphone: true, ipad: true } });
+    expect(pbxFamilies('no project here', 'com.example.notes')).toBeNull();
+  });
+  test('live signals: any iPad signal means iPad; no signal at all is unknown, never iPhone only', () => {
+    expect(liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'screenshot sets', values: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] }])?.families).toEqual({ iphone: true, ipad: true });
+    expect(liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'a', values: [] }, { name: 'b', values: ['APP_IPHONE_67'] }])?.families).toEqual({ iphone: true, ipad: false });
+    expect(liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'a', values: [] }])).toBeNull();
+  });
+  test('verdicts: the exact fix; unknown is a warning; iPhone-only live version is fine', () => {
+    const live = liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'screenshot sets', values: ['APP_IPAD_PRO_3GEN_129'] }]);
+    const project = pbxFamilies(PBX('1'), 'com.example.notes', 'ios/App/App.xcodeproj/project.pbxproj');
+    const v = familyVerdicts({ live, project, ipad: false });
+    expect(v.map(x => x.level)).toEqual(['blocker', 'blocker']);
+    expect(v[0]!.msg).toContain('ITMS-90101');
+    expect(v[0]!.fix).toContain('"1,2"');
+    expect(v[1]!.fix).toContain('apple.ipad: true');
+    expect(familyVerdicts({ live, project: pbxFamilies(PBX('"1,2"'), 'com.example.notes'), ipad: true }).map(x => x.level)).toEqual(['ok']);
+    expect(familyVerdicts({ live: null, project, ipad: false })[0]!.level).toBe('warn');
+    expect(familyVerdicts({ live: liveFamilies('1.0.0', 'READY_FOR_SALE', [{ name: 'a', values: ['APP_IPHONE_67'] }]), project, ipad: false })[0]!.level).toBe('ok');
+  });
+  test('validate rules turn the verdicts into findings', () => {
+    const f = appleRules({ deviceFamilies: [{ level: 'blocker', msg: 'x ITMS-90101', fix: 'y' }], version: null, build: null, expectedLocales: [], locales: [], requiredDisplayTypes: [], reviewDetail: null, ageRating: null, priceSchedule: true, availability: true, iaps: [], expectedProducts: [], privacyUrl: { url: 'https://example.com', status: 200 } }).filter(x => x.code === 'device-families');
+    expect(f).toMatchObject([{ store: 'apple', level: 'blocker', code: 'device-families', fix: 'y' }]);
+  });
+});
+
+describe('device families (fake App Store Connect + project)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  /** a live version 1.0.0 with a build whose bundle names the families; screenshotSets: display types of its first locale */
+  function live(o: { protocols?: string[]; sets?: string[]; models?: string[] }): void {
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-live', attributes: { versionString: '1.0.0', appVersionState: 'READY_FOR_SALE', platform: 'IOS' }, rels: { app: APP } });
+    s.asc.put({ type: 'builds', id: 'b-live', attributes: { version: '4', processingState: 'VALID' }, rels: { app: APP, appStoreVersion: 'ver-live' } });
+    s.asc.put({ type: 'buildBundles', id: 'bb-live', attributes: { bundleId: 'com.example.notes', bundleType: 'APP', deviceProtocols: o.protocols ?? [] }, rels: { build: 'b-live' } });
+    for (const [i, m] of (o.models ?? []).entries()) s.asc.put({ type: 'buildBundleFileSizes', id: `fs-${i}`, attributes: { deviceModel: m }, rels: { buildBundle: 'bb-live' } });
+    if (o.sets) {
+      s.asc.put({ type: 'appStoreVersionLocalizations', id: 'loc-live', attributes: { locale: 'en-US' }, rels: { appStoreVersion: 'ver-live' } });
+      for (const [i, t] of o.sets.entries()) s.asc.put({ type: 'appScreenshotSets', id: `set-${i}`, attributes: { screenshotDisplayType: t }, rels: { appStoreVersionLocalization: 'loc-live' } });
+    }
+  }
+  const IPHONE_ONLY = { 'ios/App/App.xcodeproj/project.pbxproj': PBX('1') };
+  const cfg = { ...BASE, apple: { ...BASE.apple!, ipad: false, signing: { teamId: 'ABCDE12345' } } };
+
+  test('the live version\'s families are read from the build bundle, its device models and its screenshot sets', async () => {
+    const c = (await import('../cli/apple/asc')).ascClient;
+    live({ sets: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] });
+    expect((await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP))?.families).toEqual({ iphone: true, ipad: true });
+    uninstallStores(); s = installStores();
+    live({ protocols: ['iphone', 'ipad'] });
+    expect((await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP))?.evidence[0]).toContain('deviceProtocols');
+    uninstallStores(); s = installStores();
+    live({ models: ['iPad_Pro_12_9_6th', 'iPhone15,2'] });
+    expect((await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP))?.families.ipad).toBe(true);
+    uninstallStores(); s = installStores();
+    expect(await liveDeviceFamilies(await c('.', 'com.example.notes', APP), APP)).toBeNull();
+  });
+
+  test('apple build stops BEFORE the archive when the project drops iPad that the live version has; --allow-device-gap goes on', async () => {
+    live({ sets: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] });
+    const argv = ['--build-number', '5', '--no-prebuild'];
+    const p = project(cfg, IPHONE_ONLY);
+    const r = await capture(() => appleBuild(p.ctx(argv))).catch(e => ({ out: '', err: String((e as Error).message ?? e), exit: 1 }));
+    expect(r.exit).toBe(1);
+    expect(r.err).toContain('stopped before the archive');
+    expect(r.err).toContain('ITMS-90101');
+    expect(r.err).toContain('TARGETED_DEVICE_FAMILY to "1,2"');
+    expect(r.err).toContain('apple.ipad: true');
+    expect(r.err).toContain('--allow-device-gap');
+    // dry: warns, never throws
+    const dry = await capture(() => appleBuild(p.ctx([...argv, '--dry'])));
+    expect(dry.err).toContain('ITMS-90101');
+    // the escape hatch passes the check (the run then stops later: no Xcode on this machine)
+    const gap = await capture(() => appleBuild(p.ctx([...argv, '--allow-device-gap']))).catch(e => ({ out: '', err: String((e as Error).message ?? e), exit: 1 }));
+    expect(gap.err).not.toContain('stopped before the archive');
+  });
+
+  test('apple build passes the check with iPad in the project and apple.ipad true; an iPhone-only live version never blocks', async () => {
+    live({ sets: ['APP_IPHONE_67', 'APP_IPAD_PRO_3GEN_129'] });
+    const ok = project({ ...cfg, apple: { ...cfg.apple, ipad: true } }, { 'ios/App/App.xcodeproj/project.pbxproj': PBX('"1,2"') });
+    const r = await capture(() => appleBuild(ok.ctx(['--build-number', '5', '--no-prebuild', '--dry'])));
+    expect(r.err).not.toContain('ITMS-90101');
+    uninstallStores(); s = installStores();
+    live({ sets: ['APP_IPHONE_67'] });
+    const iph = project(cfg, IPHONE_ONLY);
+    const r2 = await capture(() => appleBuild(iph.ctx(['--build-number', '5', '--no-prebuild', '--dry'])));
+    expect(r2.err).not.toContain('ITMS-90101');
+  });
+
+  test('projectFamilies reads the project found under the root (and apple.build.project)', () => {
+    const p = project(cfg, IPHONE_ONLY);
+    expect(projectFamilies(p.root, 'com.example.notes')).toMatchObject({ file: 'ios/App/App.xcodeproj/project.pbxproj', list: [1] });
+    expect(projectFamilies(p.root, 'com.example.notes', 'ios/App/App.xcodeproj')?.list).toEqual([1]);
+    expect(projectFamilies(project(cfg).root, 'com.example.notes')).toBeNull();
+  });
+});
+
+// ------------------------------------------------------------------------------------------------ 3. TestFlight invite
+
+describe('TestFlight invite needs an installable build', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); });
+  afterEach(() => { uninstallStores(); });
+  const CSV = { '.storebound/testers.csv': 'email,first_name,groups\ntester1@example.com,Ex,Friends\n' };
+  const cfg = { ...BASE, apple: { ...BASE.apple!, testflight: { groups: [{ name: 'Friends' }] } } };
+  const group = (): void => { s.asc.put({ type: 'betaGroups', id: 'grp-friends', attributes: { name: 'Friends', isInternalGroup: false }, rels: { app: APP } }); };
+  const buildIn = (external: string): void => {
+    s.asc.put({ type: 'builds', id: 'b-1', attributes: { version: '7', processingState: 'VALID', expired: false }, rels: { app: APP, betaGroups: ['grp-friends'] } });
+    s.asc.put({ type: 'buildBetaDetails', id: 'bd-1', attributes: { externalBuildState: external, internalBuildState: 'IN_BETA_TESTING' }, rels: { build: 'b-1' } });
+  };
+  const invites = (): number => s.asc.all('betaTesterInvitations').length;
+
+  test('pure: external needs BETA_APPROVED / IN_BETA_TESTING, internal READY_FOR_BETA_TESTING / IN_BETA_TESTING', () => {
+    const b = { attributes: { processingState: 'VALID' } };
+    expect(installableBuild(b, { externalBuildState: 'READY_FOR_BETA_SUBMISSION' }, false)).toBe(false);
+    expect(installableBuild(b, { externalBuildState: 'WAITING_FOR_BETA_REVIEW' }, false)).toBe(false);
+    expect(installableBuild(b, { externalBuildState: 'BETA_APPROVED' }, false)).toBe(true);
+    expect(installableBuild(b, { externalBuildState: 'IN_BETA_TESTING' }, false)).toBe(true);
+    expect(installableBuild(b, { internalBuildState: 'READY_FOR_BETA_TESTING' }, true)).toBe(true);
+    expect(installableBuild({ attributes: { processingState: 'VALID', expired: true } }, { externalBuildState: 'BETA_APPROVED' }, false)).toBe(false);
+    expect(noInstallableBuildHint(['Friends'])).toBe('tester added; the invite goes out when a build in Friends passes Beta App Review (re-run with --invite then)');
+    expect(noInstallableBuilds409(new Error('POST /v1/betaTesterInvitations -> 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS'))).toBe(true);
+    expect(noInstallableBuilds409(new Error('-> 409 ALREADY_EXISTS'))).toBe(false);
+  });
+
+  test('a new external group without an approved build: the tester is added, no invitation is sent, exit 0 with the hint', async () => {
+    group();
+    buildIn('WAITING_FOR_BETA_REVIEW');
+    const p = project(cfg, CSV);
+    const r = await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(r.exit).toBeNull();
+    expect(r.err).toContain('tester added; the invite goes out when a build in Friends passes Beta App Review (re-run with --invite then)');
+    expect(s.asc.all('betaTesters')).toHaveLength(1);
+    expect(invites()).toBe(0);
+    expect(writes(s.calls).some(c => c.path === '/v1/betaTesterInvitations')).toBe(false);
+  });
+
+  test('once a build passed Beta App Review, --invite sends the invitation', async () => {
+    group();
+    const p = project(cfg, CSV);
+    await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(invites()).toBe(0);
+    buildIn('BETA_APPROVED');
+    const r = await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(r.exit).toBeNull();
+    expect(invites()).toBe(1);
+  });
+
+  test('if the 409 still comes back (the build looked installable), it is the same case: warning, no throw, exit 0', async () => {
+    group();
+    buildIn('BETA_APPROVED');
+    const p = project(cfg, CSV);
+    // Apple's answer wins over our read: the double refuses the invitation as the live API did
+    s.faults.push({ method: 'POST', match: /\/v1\/betaTesterInvitations/, when: 'before', status: 409, code: 'STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS', detail: 'The tester cannot be invited because the groups they belong to have no installable builds.' });
+    const r = await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--invite', '--yes'])));
+    expect(r.exit).toBeNull();
+    expect(r.err).toContain('passes Beta App Review');
+    expect(s.asc.all('betaTesters')).toHaveLength(1);
+  });
+
+  test('distribute --submit-review prints the hint for testers that are added but not invited', async () => {
+    group();
+    buildIn('READY_FOR_BETA_SUBMISSION');
+    const p = project(cfg, CSV);
+    await capture(() => appleTestflight(p.ctx(['testers', '--group', 'Friends', '--yes'])));
+    s.asc.all('buildBetaDetails')[0]!.attributes.processingState = 'x';
+    s.asc.put({ type: 'preReleaseVersions', id: 'pre-1', attributes: { version: '1.0.0', platform: 'IOS' }, rels: { app: APP } });
+    s.asc.all('builds')[0]!.rels.preReleaseVersion = 'pre-1';
+    s.asc.all('builds')[0]!.rels.buildBetaDetail = 'bd-1';
+    const r = await capture(() => appleTestflight(p.ctx(['distribute', '--build', '7', '--group', 'Friends', '--submit-review', '--yes'])));
+    expect(r.out + r.err).toContain('tester added; the invite goes out when a build in Friends passes Beta App Review');
+  });
+});
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index d89233f..272ec93 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -76,6 +76,10 @@ const LISTS: Record<string, { type: string; one?: boolean }> = {
   'apps/promotedPurchases': { type: 'promotedPurchases' },
   'subscriptions/winBackOffers': { type: 'winBackOffers' },
   'betaGroups/betaTesters': { type: 'betaTesters' },
+  'betaGroups/builds': { type: 'builds' },
+  'builds/buildBetaDetail': { type: 'buildBetaDetails', one: true },
+  'builds/betaAppReviewSubmission': { type: 'betaAppReviewSubmissions', one: true },
+  'buildBundles/buildBundleFileSizes': { type: 'buildBundleFileSizes' },
   'apps/analyticsReportRequests': { type: 'analyticsReportRequests' },
   'apps/assetLibrary': { type: 'appAssetLibraries', one: true },
   'appAssetLibraries/images': { type: 'appAssetLibraryImages' },
@@ -162,6 +166,21 @@ export class FakeAsc {
     return { type: r.type, id: r.id, attributes: r.attributes, relationships };
   }
 
+  /** Whether a group of the tester has a build its testers can install (external: BETA_APPROVED / IN_BETA_TESTING; internal: READY_FOR_BETA_TESTING / IN_BETA_TESTING). */
+  hasInstallableBuild(testerId: string): boolean {
+    const gids = [this.res.get(testerId)?.rels.betaGroups ?? []].flat();
+    return gids.some(gid => {
+      const g = this.res.get(gid);
+      if (!g) return false;
+      const internal = g.attributes.isInternalGroup === true;
+      const builds = internal && g.attributes.hasAccessToAllBuilds === true ? this.all('builds') : this.children(gid, 'builds');
+      return builds.some(b => {
+        const st = String(this.children(b.id, 'buildBetaDetails')[0]?.attributes[internal ? 'internalBuildState' : 'externalBuildState'] ?? '');
+        return internal ? ['READY_FOR_BETA_TESTING', 'IN_BETA_TESTING'].includes(st) : ['BETA_APPROVED', 'IN_BETA_TESTING'].includes(st);
+      });
+    });
+  }
+
   children(parent: string, type: string): R[] {
     return this.all(type).filter(r => Object.values(r.rels).some(v => (Array.isArray(v) ? v.includes(parent) : v === parent)));
   }
@@ -205,6 +224,11 @@ export class FakeAsc {
       if (v && v.attributes.state === 'DEVELOPER_REJECTED' && v.type !== 'appStoreVersions') v.attributes.state = 'READY_FOR_REVIEW';
       main.attributes.state ??= 'READY_FOR_REVIEW';
     }
+    // seen live: inviting a tester whose groups have no installable build (an external build is installable after Beta App
+    // Review) is 409 STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS
+    if (d.type === 'betaTesterInvitations' && !this.hasInstallableBuild(String(main.rels.betaTester)))
+      return json({ errors: [{ id: '00000000-0000-0000-0000-000000000000', status: '409', code: 'STATE_ERROR.TESTER_INVITE.NO_INSTALLABLE_BUILDS', title: 'There are no installable builds',
+        detail: 'The tester cannot be invited because the groups they belong to have no installable builds.' }] }, 409);
     const u = UNIQUE[d.type];
     if (u && this.all(d.type).some(r => u(r) === u(main as R)))
       return json({ errors: [{ status: '409', code: 'ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE', title: 'The provided entity includes an attribute with a value that has already been used', detail: 'already exists' }] }, 409);
@@ -267,7 +291,8 @@ export class FakeAsc {
       }
       if (!id) return json({ data: this.visible(this.filtered(this.all(type!), u.searchParams)).map(r => this.view(r)), links: {} });
       const self = this.res.get(id);
-      if (!rel) return self && self.type === type ? json({ data: this.view(self) }) : json({ errors: [{ status: '404' }] }, 404);
+      // include=<relationship>: the children of that type (a build's buildBundles)
+      if (!rel) return self && self.type === type ? json({ data: this.view(self), included: (u.searchParams.get('include') ?? '').split(',').filter(Boolean).flatMap(t => this.children(self.id, t).map(r => this.view(r))) }) : json({ errors: [{ status: '404' }] }, 404);
       if (rel === 'relationships') return json({ data: this.children(id, rel2!).map(r => ({ type: r.type, id: r.id })) });
       // an availability's territories are the ids its create named (a to-many relationship, not child resources)
       if (rel === 'availableTerritories' && self) {
diff --git a/tests/signing-targets.test.ts b/tests/signing-targets.test.ts
index b3c6bc3..8f681b3 100644
--- a/tests/signing-targets.test.ts
+++ b/tests/signing-targets.test.ts
@@ -361,6 +361,8 @@ describe('App Group association under automatic signing (fake App Store Connect)
       { match: new RegExp(`^/v1/bundleIds/${MAIN}/profiles`), answer: () => page(o.main ?? [managed('com.example.notes', GROUP)]) },
       { match: /^\/v1\/profiles\/MANAGED_[^/]+\/relationships\/certificates/, answer: { errors: [{ status: '404' }] }, status: 404 },
       { match: /^\/v1\/apps\/6400000101\/gameCenterDetail/, answer: { errors: [{ status: '404' }] }, status: 404 },
+      // apple build compares the live version's device families first: an app without versions has none
+      { match: /^\/v1\/apps\/6400000101\/appStoreVersions/, answer: page([]) },
     ] as never;
   }
   const ensure = async (argv: string[] = ['ensure', '--yes']) => {

From 5f2e03dc7d987f58eef5ae24fb7300b1d6226fc0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:07:53 +0700
Subject: [PATCH 180/255] docs: apple release type flags and config template
 line

---
 docs/commands.md               | 2 +-
 templates/storebound.config.ts | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/commands.md b/docs/commands.md
index fddd8f3..050b729 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -87,7 +87,7 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `apple game-center [status]` | API | Game Center from `games`: the app's Game Center detail, the version switch, leaderboards and achievements with localizations (upsert by vendor id, read back; nothing submitted); dry first, asks |
 | `games status [--json]` | API, read-only | Game Center and Play Games Services on both stores: capability, entitlement, games_APP_ID, counts vs the config, pending changes, console links |
 | `apple encryption` | API | export compliance answer from `apple.usesNonExemptEncryption` (never guessed) |
-| `apple release --phased on\|pause\|resume\|complete`, `--manual-release` | API | phased release, release an approved version (resume / complete / release ask first) |
+| `apple release --phased on|pause|resume|complete`, `--manual-release`, `--after-approval | --manual | --scheduled <date>` | API | phased release, release an approved version (resume / complete / release ask first), how an unapproved version goes live (`apple.releaseType`; exit 7 when already that type) |
 | `apple signing status` | API, read-only | bundle id capabilities, distribution certificates (with / without a private key on this Mac), App Store profiles per bundle id, installed or not |
 | `apple signing ensure [--keychain] [--no-install]` | API | missing capabilities, a distribution certificate from a key made here (kept 0600 in `.storebound/signing/`, never printed), App Store profiles installed for Xcode; dry first, asks; Developer ID needs the Account Holder (403 explained) |
 | `apple build [--version x.y.z] [--build-number N]` | local + API read | `build.prebuild` first (Capacitor: web build + cap sync; stale copied web assets stop the build), then xcodebuild archive + exportArchive with a generated ExportOptions.plist (app-store-connect, team, signing style, profiles) and the API key; next build number; Capacitor, React Native, Flutter, Unity projects found |
diff --git a/templates/storebound.config.ts b/templates/storebound.config.ts
index 91a5bab..b25122e 100644
--- a/templates/storebound.config.ts
+++ b/templates/storebound.config.ts
@@ -51,6 +51,7 @@ const config: ShipConfig = {
     // usesNonExemptEncryption: false,
     // ipad: true,    // the app runs on iPad: 13" iPad screenshots (2064 x 2752, ipad13) are rendered, checked and uploaded
     // iphoneMedium: true,   // optional 6.3" iPhone set (1206 x 2622, iphone-medium); off: Apple scales the 6.5" set down
+    // releaseType: "afterApproval",   // afterApproval | manual | scheduled (+ earliestReleaseDate): how an approved version goes live; unset = new versions MANUAL
     // iphoneDuo: true,      // optional iPhone Duo (foldable) sets, outer 1398 x 2034 + inner 2007 x 2853; rendered and checked, not uploaded until the API takes them
     // screenshotTypes: ['APP_IPHONE_61'],   // what `storebound validate` requires per locale (default: medium display, met by a 6.9" or 6.5" set; + APP_IPAD_PRO_3GEN_129 with ipad)
     // TestFlight (`storebound apple testflight`, testflight skill). Tester emails live in .storebound/testers.csv only.

From f64f125de64bd88a096533a127148da1093f0d90 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:08:39 +0700
Subject: [PATCH 181/255] docs: escape the table pipes

---
 docs/commands.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/commands.md b/docs/commands.md
index 050b729..4e3b204 100644
--- a/docs/commands.md
+++ b/docs/commands.md
@@ -87,7 +87,7 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `apple game-center [status]` | API | Game Center from `games`: the app's Game Center detail, the version switch, leaderboards and achievements with localizations (upsert by vendor id, read back; nothing submitted); dry first, asks |
 | `games status [--json]` | API, read-only | Game Center and Play Games Services on both stores: capability, entitlement, games_APP_ID, counts vs the config, pending changes, console links |
 | `apple encryption` | API | export compliance answer from `apple.usesNonExemptEncryption` (never guessed) |
-| `apple release --phased on|pause|resume|complete`, `--manual-release`, `--after-approval | --manual | --scheduled <date>` | API | phased release, release an approved version (resume / complete / release ask first), how an unapproved version goes live (`apple.releaseType`; exit 7 when already that type) |
+| `apple release --phased on\|pause\|resume\|complete`, `--manual-release`, `--after-approval \| --manual \| --scheduled <date>` | API | phased release, release an approved version (resume / complete / release ask first), how an unapproved version goes live (`apple.releaseType`; exit 7 when already that type) |
 | `apple signing status` | API, read-only | bundle id capabilities, distribution certificates (with / without a private key on this Mac), App Store profiles per bundle id, installed or not |
 | `apple signing ensure [--keychain] [--no-install]` | API | missing capabilities, a distribution certificate from a key made here (kept 0600 in `.storebound/signing/`, never printed), App Store profiles installed for Xcode; dry first, asks; Developer ID needs the Account Holder (403 explained) |
 | `apple build [--version x.y.z] [--build-number N]` | local + API read | `build.prebuild` first (Capacitor: web build + cap sync; stale copied web assets stop the build), then xcodebuild archive + exportArchive with a generated ExportOptions.plist (app-store-connect, team, signing style, profiles) and the API key; next build number; Capacitor, React Native, Flutter, Unity projects found |

From 2dc20b61de5a6e6679324cb0ca6422a248fc2f93 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:10:59 +0700
Subject: [PATCH 182/255] regenerate embedded skills

---
 cli/lib/embedded.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index c963dee..6429370 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -26,7 +26,7 @@ export const TEMPLATE_TEXT: Record<string, string> = {
   "profiles/subscription-app/listing.md": "# Example App · Google Play listing copy\n\nSource for `storebound play listing` (title, short + full description) and `storebound play release` (release notes).\nRules the parser follows:\n- every `## ...` section with a `<!-- play: <codes> -->` line is a listing; one section can serve several Play codes\n- under it, `### ...` headings that contain **title** (optional, defaults to `app.name`), **short**, **full** and\n  **what's new**, each followed by one fenced block\n- limits (checked before anything is sent): title 30, short 80, full 4000, what's new 500 characters\nOnly claim what the app really does. No prices, no \"best / #1\", no other apps' names.\n\n---\n\n## English (en-US)\n<!-- play: en-US -->\n\n### Play short description (max 80)\n```\nWhat the app does for people, in one plain line\n```\n\n### Play full description (max 4000)\n```\nFirst paragraph: the job the app does and why it is easier with it, in two or three sentences.\n\nFEATURES\n• Lists and notes that sync across your devices\n• Share a list with family or friends\n• Export your data or delete your account in Settings, any time\n\nFree to use with up to 3 lists. Example Pro unlocks unlimited lists, sharing and themes: yearly with a 1-week free trial, or monthly. Payment is charged to your store account; the subscription renews automatically unless cancelled at least 24 hours before the end of the period, and you can manage or cancel it in your account settings.\n\nTerms of Use: https://example.com/terms\nPrivacy Policy: https://example.com/privacy\n```\n\n### What's new (max 500)\n```\nFirst release. Thanks for trying it!\n```\n\n## Türkçe (tr-TR)\n<!-- play: tr-TR -->\n\n### Play kısa açıklama · short (max 80)\n```\nUygulamanın insanlar için ne yaptığını anlatan sade bir cümle\n```\n\n### Play tam açıklama · full (max 4000)\n```\nİlk paragraf: uygulamanın gördüğü iş ve onunla neden daha kolay olduğu, iki üç cümlede.\n\nÖZELLİKLER\n• Tüm cihazlarında eşitlenen listeler ve notlar\n• Bir listeyi ailen ya da arkadaşlarınla paylaş\n• Verilerini dışa aktar ya da hesabını Ayarlar'dan istediğin an sil\n\n3 listeye kadar ücretsiz. Example Pro sınırsız liste, paylaşım ve tema açar: 1 hafta ücretsiz denemeli yıllık ya da aylık. Ödeme mağaza hesabınızdan alınır; abonelik, dönem bitmeden en az 24 saat önce iptal edilmezse otomatik yenilenir; hesap ayarlarınızdan yönetebilir ya da iptal edebilirsiniz.\n\nKullanım Koşulları: https://example.com/terms\nGizlilik Politikası: https://example.com/privacy\n```\n\n### Yenilikler · what's new (max 500)\n```\nİlk sürüm. Denediğin için teşekkürler!\n```\n",
   "profiles/subscription-app/storebound.config.ts": "// storebound config for one app (profile \"subscription-app\": accounts plus auto-renewable subscriptions, an\n// analytics SDK, no ads). Every answer below is a starting point: edit it to match your app. Credentials NEVER go\n// here (env vars or .storebound/credentials.json, gitignored). Paths are relative to this file.\n// The type import is optional: it only works when storebound is installed in the project (bun add -d storebound).\nimport type { ShipConfig } from 'storebound';\n\nconst config: ShipConfig = {\n  // Every compliance answer below is the TEMPLATE's, not yours. While an area is listed here, check / validate block\n  // and nothing sends it to a store. Derive the answers from the code (storebound scan --write; for an app that is\n  // already live: storebound onboard --declarations), answer the rest, then remove the area from this list.\n  unanswered: ['dataSafety', 'appPrivacy', 'reviewNotes', 'ageRating', 'accounts', 'reviewAccess'],\n\n  app: {\n    name: 'Example App',\n    profile: 'subscription-app',\n    copyright: '2026 Example Studio',\n    privacyPolicyUrl: 'https://example.com/privacy',\n    termsUrl: 'https://example.com/terms',   // Terms of Use (EULA): in the app and the metadata (Apple 3.1.2)\n    supportUrl: 'https://example.com/support',\n    marketingUrl: 'https://example.com',\n    website: 'https://example.com',\n    contactEmail: 'support@example.com',\n  },\n\n  // Accounts (account-deletion skill). Remove this block if the app has no sign-up / sign-in at all.\n  // Apple 5.1.1(v): deletion must start inside the app. Google Play: in the app AND on a public web page.\n  accounts: {\n    enabled: true,\n    deletionUrl: 'https://example.com/delete-account',   // public page, no login needed to request deletion\n    inApp: 'Settings > Account > Delete account',        // goes into the App Review notes\n    // How people sign up: 'username' (a name picked in the app, no password, no email), 'username-password',\n    // 'email-password', 'email-link', 'phone', 'oauth', 'other'. `storebound scan` proposes the account data and\n    // dataSafety.accountCreation from it; only the 'email-*' methods mean an email address.\n    signUp: ['email-password'],\n  },\n\n  // Sign-in for store reviewers (review-access skill). The demo account itself lives ONLY in\n  // .storebound/credentials.json (\"reviewDemoAccount\") or REVIEW_DEMO_USER / REVIEW_DEMO_PASSWORD.\n  reviewAccess: {\n    signInRequired: true,   // false if every feature works without signing in\n    instructions: 'Sign in with the demo account. Sample data is already there; nothing needs a second device.',\n  },\n\n  // id = your folder / copy key; play = Play language code(s); apple = App Store Connect locale\n  languages: [\n    { id: 'en', play: 'en-US', apple: 'en-US' },\n    { id: 'tr', play: 'tr-TR', apple: 'tr' },\n  ],\n\n  play: {\n    packageName: 'com.example.app',\n    defaultLanguage: 'en-US',\n    listing: 'store/listing.md',\n    icon: 'store/icons/play-512.png',\n  },\n\n  apple: {\n    bundleId: 'com.example.app',\n    // name: 'Example: Short Tagline',  // App Store name (max 30) when app.name is taken there (\"already being used\"); default app.name\n    listing: 'store/appstore.md',\n    // Export compliance (export-compliance skill): decide it, then uncomment. false ONLY if the app uses no encryption\n    // beyond the OS (HTTPS through the system, standard sign-in).\n    // usesNonExemptEncryption: false,\n    // ipad: true,\n    info: {\n      categories: { primary: 'PRODUCTIVITY', secondary: 'UTILITIES' },\n      ageRating: {},   // every content question NONE / false; change what applies (user-generated content, web access ...)\n      contentRights: 'DOES_NOT_USE_THIRD_PARTY_CONTENT',\n      free: true,\n      reviewNotes: [\n        'Example App keeps lists and notes in sync across devices. Pro (yearly with a 1-week free trial, or monthly) unlocks unlimited lists, sharing and themes.',\n        'Subscriptions: Settings > Pro (or the paywall after the third list). Restore Purchases is on the paywall and in Settings > Pro.',\n        'Privacy policy and Terms of Use: on the paywall and in Settings > About.',\n        // With a remote paywall or feature flags (storebound scan warns, 2.3.1) you may add a line like:\n        // 'Paywall designs and the prices shown are tested remotely with <SDK>; what Pro unlocks does not change after review.',\n        // Google Play has no review-notes field: put the same line in reviewAccess.instructions (Play App content >\n        // App access, 'Any other information') when the app has a sign-in, and say in the full description what needs\n        // a paid subscription (Play: Deceptive behavior, Payments).\n      ].join('\\n\\n'),\n    },\n  },\n\n  // Auto-renewable subscriptions (store-subscriptions skill): `storebound apple subscriptions`, `storebound play\n  // subscriptions`. Apple: one group, levels rank the plans (1 = highest). Play: one subscription per entry with one\n  // auto-renewing base plan. Prices: USD base, Apple equalizes from the USA, Play converts per region; overrides set a\n  // region by hand. The disclosure (price per period, renewal, how to cancel, Terms + Privacy links) belongs on the\n  // purchase screen and in the descriptions.\n  subscriptions: [\n    {\n      name: 'Example Pro',\n      listings: { en: { name: 'Example Pro' }, tr: { name: 'Example Pro' } },\n      subscriptions: [\n        {\n          id: 'com.example.app.pro_yearly', period: 'P1Y', level: 1, usd: 29.99,\n          listings: {\n            en: { title: 'Pro yearly', description: 'Unlimited lists, sharing and themes.', benefits: ['Unlimited lists', 'Shared lists', 'All themes'] },\n            tr: { title: 'Pro yıllık', description: 'Sınırsız liste, paylaşım ve tema.', benefits: ['Sınırsız liste', 'Paylaşılan listeler', 'Tüm temalar'] },\n          },\n          intro: { type: 'free', duration: 'P1W' },   // 1 week free trial for new subscribers\n          reviewScreenshot: 'store/iap-review/paywall.png',\n        },\n        {\n          id: 'com.example.app.pro_monthly', period: 'P1M', level: 2, usd: 3.99,\n          overrides: [{ region: 'TR', currency: 'TRY', price: 99.99 }],\n          listings: {\n            en: { title: 'Pro monthly', description: 'Unlimited lists, sharing and themes.', benefits: ['Unlimited lists', 'Shared lists', 'All themes'] },\n            tr: { title: 'Pro aylık', description: 'Sınırsız liste, paylaşım ve tema.', benefits: ['Sınırsız liste', 'Paylaşılan listeler', 'Tüm temalar'] },\n          },\n          reviewScreenshot: 'store/iap-review/paywall.png',\n        },\n      ],\n    },\n  ],\n\n  // Google Play Data safety. Types not listed = not collected. Typical app with accounts + an analytics SDK acting as\n  // your processor (collected, not shared). Edit to match what your app and its SDKs really do.\n  dataSafety: {\n    collectsData: true,\n    encryptedInTransit: true,\n    // Sign-up methods. Google does not publish these ids: compare with Play Console > App content > Data safety >\n    // Export to CSV before the first import. The delete-account URL (PSL_ACCOUNT_DELETION_URL) comes from\n    // accounts.deletionUrl; `storebound check` names any other row Play requires.\n    accountCreation: ['PSL_ACM_USER_ID_PASSWORD'],\n    // Can people delete their data without deleting the account (a data-only page)? true needs partialDeletionUrl.\n    // Play's \"can users request deletion?\" is answered yes by accounts.deletionUrl. Ask the owner.\n    partialDeletion: false,\n    data: {\n      PSL_EMAIL: { shared: false, collect: ['functionality', 'account'] },\n      PSL_USER_ACCOUNT: { shared: false, collect: ['functionality', 'account'] },\n      PSL_USER_GENERATED_CONTENT: { shared: false, collect: ['functionality'] },\n      PSL_USER_INTERACTION: { shared: false, collect: ['analytics'] },\n      PSL_CRASH_LOGS: { shared: false, collect: ['analytics'] },\n      PSL_PERFORMANCE_DIAGNOSTICS: { shared: false, collect: ['analytics'] },\n      PSL_DEVICE_ID: { shared: false, collect: ['analytics'] },\n      PSL_PURCHASE_HISTORY: { shared: false, collect: ['functionality'] },   // subscription status tied to the account\n    },\n  },\n\n  renders: 'store/renders',\n\n  shots: {\n    style: 'app',                       // calm gradient, device frame, headline + subline (game: sparkles and badges)\n    copy: 'store/shots/copy.json',\n    frames: 'store/shots/frames',       // <lang>/phone/<name>.png, <lang>/tablet/<name>.png\n    out: 'store/renders',\n    // fonts: { title: 'Inter', body: 'Inter' },   // the app style default\n    scenes: [\n      { id: 'home', palette: 'mist', frames: [{ src: 'home.png' }] },\n      { id: 'detail', palette: 'mint', frames: [{ src: 'detail.png' }] },\n      { id: 'share', palette: 'sky', frames: [{ src: 'share.png' }] },\n      { id: 'privacy', palette: 'slate', frames: [{ src: 'settings.png' }] },\n    ],\n    feature: { frame: 'home.png', palette: 'mist' },\n    // Raw frames from a web build, the iOS Simulator (ios-sim) or an Android emulator (android-emu): sign in to a demo\n    // account with realistic sample data, never real user data (store-screenshots skill).\n    capture: {\n      baseUrl: 'http://127.0.0.1:5173',\n      query: 'lang={lang}&demo=1',\n      shots: {\n        'home': { path: '/', delayMs: 1000, device: 'both' },\n        'detail': { path: '/lists/1', delayMs: 1000, device: 'both' },\n        'share': { path: '/lists/1/share', delayMs: 1000, device: 'both' },\n        'settings': { path: '/settings', delayMs: 1000, device: 'both' },\n      },\n    },\n  },\n\n  icons: {\n    composite: 'store/icon/icon.png',\n    foreground: 'store/icon/foreground.png',\n    background: 'store/icon/background.png',\n    out: 'store/icons',\n  },\n};\n\nexport default config;\n",
   "shots-copy.json": "{\n  \"en\": {\n    \"hero\": { \"title\": [\"Tap. Match.\", \"Repeat!\"], \"badges\": [[\"100+ levels\", \"and more every update\"], [\"Play offline\", \"No account needed\"]] },\n    \"play\": { \"eyebrow\": \"Play\", \"title\": [\"Easy to learn,\", \"hard to put down\"], \"sub\": \"One thumb, short rounds, big satisfying moments.\", \"badges\": [[\"Quick rounds\", \"Two minutes each\"], [\"Great!\"]] },\n    \"levels\": { \"eyebrow\": \"Worlds\", \"title\": [\"Explore new\", \"worlds\"], \"sub\": \"A fresh look and new rules every ten levels.\", \"badges\": [[\"10 worlds\", \"A new one every 10 levels\"]] },\n    \"stars\": { \"eyebrow\": \"Stars\", \"title\": [\"Play smart,\", \"grab 3 stars\"], \"sub\": \"Finish with moves to spare and collect every star.\", \"badges\": [[\"3 stars\"]] }\n  },\n  \"tr\": {\n    \"hero\": { \"title\": [\"Dokun. Eşleştir.\", \"Tekrarla!\"], \"badges\": [[\"100+ bölüm\", \"her güncellemede yenileri\"], [\"İnternetsiz\", \"hesap gerekmez\"]] },\n    \"play\": { \"eyebrow\": \"Oyna\", \"title\": [\"Öğrenmesi kolay,\", \"bırakması zor\"], \"sub\": \"Tek parmak, kısa turlar, büyük keyifli anlar.\", \"badges\": [[\"Kısa turlar\", \"Her biri iki dakika\"], [\"Harika!\"]] },\n    \"levels\": { \"eyebrow\": \"Dünyalar\", \"title\": [\"Yeni dünyaları\", \"keşfet\"], \"sub\": \"Her on bölümde yeni bir görünüm ve yeni kurallar.\", \"badges\": [[\"10 dünya\", \"Her 10 bölümde yeni biri\"]] },\n    \"stars\": { \"eyebrow\": \"Yıldızlar\", \"title\": [\"Akıllı oyna,\", \"3 yıldızı kap\"], \"sub\": \"Hamle artırarak bitir, tüm yıldızları topla.\", \"badges\": [[\"3 yıldız\"]] }\n  },\n  \"es\": {\n    \"hero\": { \"title\": [\"Toca. Combina.\", \"¡Repite!\"], \"badges\": [[\"100+ niveles\", \"y más en cada versión\"], [\"Sin conexión\", \"Sin cuenta\"]] },\n    \"play\": { \"eyebrow\": \"Juega\", \"title\": [\"Fácil de aprender,\", \"difícil de soltar\"], \"sub\": \"Un pulgar, rondas cortas, grandes momentos.\", \"badges\": [[\"Rondas cortas\", \"Dos minutos cada una\"], [\"¡Genial!\"]] },\n    \"levels\": { \"eyebrow\": \"Mundos\", \"title\": [\"Explora\", \"nuevos mundos\"], \"sub\": \"Un aspecto nuevo y nuevas reglas cada diez niveles.\", \"badges\": [[\"10 mundos\", \"Uno nuevo cada 10 niveles\"]] },\n    \"stars\": { \"eyebrow\": \"Estrellas\", \"title\": [\"Juega con cabeza,\", \"logra 3 estrellas\"], \"sub\": \"Termina con movimientos de sobra y consigue todas las estrellas.\", \"badges\": [[\"3 estrellas\"]] }\n  },\n  \"ja\": {\n    \"hero\": { \"title\": [\"タップして、そろえて、\", \"もう一回！\"], \"badges\": [[\"100以上のステージ\", \"アップデートで追加\"], [\"オフラインで遊べる\", \"アカウント不要\"]] },\n    \"play\": { \"eyebrow\": \"プレイ\", \"title\": [\"かんたんなのに\", \"やめられない\"], \"sub\": \"片手で遊べる短いラウンド、気持ちいい瞬間がたくさん。\", \"badges\": [[\"短いラウンド\", \"1回2分\"], [\"すごい！\"]] },\n    \"levels\": { \"eyebrow\": \"ワールド\", \"title\": [\"新しいワールドを\", \"冒険しよう\"], \"sub\": \"10ステージごとに新しい見た目と新しいルール。\", \"badges\": [[\"10のワールド\", \"10ステージごとに追加\"]] },\n    \"stars\": { \"eyebrow\": \"スター\", \"title\": [\"かしこく遊んで\", \"星を3つゲット\"], \"sub\": \"手数を残してクリアし、すべての星を集めよう。\", \"badges\": [[\"星3つ\"]] }\n  },\n  \"ar\": {\n    \"hero\": { \"title\": [\"انقر. طابق.\", \"كرّر!\"], \"badges\": [[\"أكثر من 100 مرحلة\", \"والمزيد مع كل تحديث\"], [\"العب دون اتصال\", \"دون حساب\"]] },\n    \"play\": { \"eyebrow\": \"العب\", \"title\": [\"سهلة التعلّم،\", \"صعبة التوقف\"], \"sub\": \"إبهام واحد، جولات قصيرة، ولحظات ممتعة.\", \"badges\": [[\"جولات قصيرة\", \"دقيقتان لكل جولة\"], [\"رائع!\"]] },\n    \"levels\": { \"eyebrow\": \"العوالم\", \"title\": [\"استكشف\", \"عوالم جديدة\"], \"sub\": \"شكل جديد وقواعد جديدة كل عشر مراحل.\", \"badges\": [[\"10 عوالم\", \"عالم جديد كل 10 مراحل\"]] },\n    \"stars\": { \"eyebrow\": \"النجوم\", \"title\": [\"العب بذكاء،\", \"واجمع 3 نجوم\"], \"sub\": \"أنهِ المرحلة بحركات متبقية واجمع كل النجوم.\", \"badges\": [[\"3 نجوم\"]] }\n  }\n}\n",
-  "storebound.config.ts": "// storebound config for one game. Everything game-specific lives here; credentials NEVER do (they go in env vars or\n// .storebound/credentials.json, which must stay gitignored). Paths are relative to this file.\n// The type import is optional: it only works when storebound is installed in the project (bun add -d <repo url>).\nimport type { ShipConfig } from 'storebound';\n\nconst config: ShipConfig = {\n  // Every compliance answer below is the TEMPLATE's, not yours. While an area is listed here, check / validate block\n  // and nothing sends it to a store. Derive the answers from the code (storebound scan --write; for an app that is\n  // already live: storebound onboard --declarations), answer the rest, then remove the area from this list.\n  unanswered: ['dataSafety', 'appPrivacy', 'reviewNotes', 'ageRating'],\n\n  app: {\n    name: 'Example Game',\n    profile: 'game',\n    copyright: '2026 Example Studio',\n    privacyPolicyUrl: 'https://example.com/privacy',\n    supportUrl: 'https://example.com',\n    marketingUrl: 'https://example.com',\n    // Developer website on Play: the same domain must serve /app-ads.txt if the game shows ads\n    website: 'https://example.com',\n    contactEmail: 'support@example.com',\n  },\n\n  // id = your folder / copy key; play = Play language code(s); apple = App Store Connect locale\n  languages: [\n    { id: 'en', play: 'en-US', apple: 'en-US' },\n    { id: 'tr', play: 'tr-TR', apple: 'tr' },\n    { id: 'es', play: ['es-ES', 'es-419'], apple: 'es-ES' },\n    { id: 'ja', play: 'ja-JP', apple: 'ja' },\n    { id: 'ar', play: 'ar', apple: 'ar-SA', rtl: true },\n  ],\n\n  play: {\n    packageName: 'com.example.game',\n    defaultLanguage: 'en-US',\n    listing: 'store/listing.md',\n    icon: 'store/icons/play-512.png',\n    // read by `storebound scan` (fill in what is true for your account and app):\n    // accountType: 'personal', accountCreated: 'YYYY-MM-DD', // new personal accounts: 12 testers x 14 days closed test\n    // targetAges: ['13-15', '16-17', '18+'],                 // App content > Target audience; under 13 = Families policy\n  },\n\n  apple: {\n    bundleId: 'com.example.game',\n    // name: 'Example: Short Tagline',  // App Store name (max 30) when app.name is taken there (\"already being used\"); default app.name\n    // appId: '1234567890',      // Apple ID of the app record; looked up by bundle id when left out\n    listing: 'store/appstore.md',\n    reviewShots: 'store/iap-review',\n    // Export compliance (export-compliance skill). false ONLY if the game uses no encryption beyond the OS (HTTPS through\n    // the system). Left unset on purpose: decide it, then uncomment. Same answer as ITSAppUsesNonExemptEncryption.\n    // usesNonExemptEncryption: false,\n    // ipad: true,    // the app runs on iPad: 13\" iPad screenshots (2064 x 2752, ipad13) are rendered, checked and uploaded\n    // iphoneMedium: true,   // optional 6.3\" iPhone set (1206 x 2622, iphone-medium); off: Apple scales the 6.5\" set down\n    // iphoneDuo: true,      // optional iPhone Duo (foldable) sets, outer 1398 x 2034 + inner 2007 x 2853; rendered and checked, not uploaded until the API takes them\n    // screenshotTypes: ['APP_IPHONE_61'],   // what `storebound validate` requires per locale (default: medium display, met by a 6.9\" or 6.5\" set; + APP_IPAD_PRO_3GEN_129 with ipad)\n    // TestFlight (`storebound apple testflight`, testflight skill). Tester emails live in .storebound/testers.csv only.\n    testflight: {\n      groups: [\n        { name: 'Team', internal: true, allBuilds: true },\n        { name: 'Friends' },\n      ],\n      description: { en: 'Example Game beta: try the new levels and tell us what feels too hard.' },\n    },\n    info: {\n      categories: { primary: 'GAMES', primarySubOne: 'GAMES_CASUAL', primarySubTwo: 'GAMES_PUZZLE', secondary: 'ENTERTAINMENT' },\n      ageRating: { advertising: true },     // everything else NONE / false\n      contentRights: 'DOES_NOT_USE_THIRD_PARTY_CONTENT',\n      free: true,\n      reviewNotes: [\n        'Single-player game. No account or login is needed; there is no user-generated content or chat.',\n        'In-app purchases: Home > Shop. Restore Purchases is in Settings.',\n        'Ads: optional rewarded videos and interstitials between rounds. The App Tracking Transparency prompt is shown before the ad SDK starts.',\n        'Privacy policy: Settings > Privacy.',\n        // With remote config, feature flags or a remotely changed paywall (storebound scan warns, 2.3.1) you may add:\n        // 'Shop offers and prices shown come from <SDK> and change remotely; no feature is switched on or off after review.',\n        // Google Play has no review-notes field: put the same line in reviewAccess.instructions (Play App content >\n        // App access, 'Any other information') when the app has a sign-in, and say in the full description what needs\n        // a paid subscription (Play: Deceptive behavior, Payments).\n      ].join('\\n\\n'),\n    },\n  },\n\n  // Price changes later for many products / regions: storebound prices export, edit store/prices.csv, prices import --dry.\n  // prices: { csv: 'store/prices.csv', baseTerritory: 'USA' },\n\n  // Same ids on both stores. Prices: USD base; Play converts per region, Apple equalizes from the USA. Overrides set a\n  // region by hand (Apple needs an existing price point with exactly that value).\n  products: [\n    {\n      id: 'com.example.game.remove_ads', type: 'non_consumable', usd: 2.99,\n      overrides: [{ region: 'TR', currency: 'TRY', price: 99.99 }],\n      listings: {\n        en: { title: 'Remove Ads', description: 'Removes interstitial ads for good.' },\n        tr: { title: 'Reklamları Kaldır', description: 'Ara reklamları kalıcı olarak kaldırır.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n    {\n      id: 'com.example.game.coins_small', type: 'consumable', usd: 0.99,\n      listings: {\n        en: { title: '500 Coins', description: 'A small bag of coins.' },\n        tr: { title: '500 Altın', description: 'Küçük bir kese altın.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n  ],\n\n  // Google Play Data safety. Types not listed = not collected. Purposes: functionality, analytics, communications,\n  // fraud, advertising, personalization, account. Typical F2P game with an analytics SDK + ad mediation:\n  dataSafety: {\n    collectsData: true,\n    encryptedInTransit: true,\n    // No accounts: PSL_ACM_NONE. A guest account with a name picked on the device and a server token (no password, no\n    // email): accounts { enabled: true, signUp: ['username'], ... } and ['PSL_ACM_USER_ID_OTHER_AUTH'] here (Play's\n    // \"Username and other authentication\"; `storebound scan` proposes it). With accounts Play also requires the\n    // delete-account URL (from accounts.deletionUrl). That page also answers \"can users request that their data is\n    // deleted?\" with yes (dataDeletion: 'yes' | 'no' | 'auto90' only for apps without one). partialDeletion: true +\n    // partialDeletionUrl when a page deletes data without deleting the account. `storebound check` compares every row with Play's\n    // current form (cli/data/play-data-safety-form.csv).\n    accountCreation: ['PSL_ACM_NONE'],\n    data: {\n      PSL_APPROX_LOCATION: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_USER_INTERACTION: { shared: true, collect: ['analytics', 'advertising'], share: ['analytics', 'advertising'] },\n      PSL_OTHER_APP_ACTIVITY: { shared: false, collect: ['functionality'] },\n      PSL_PERFORMANCE_DIAGNOSTICS: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_DEVICE_ID: { shared: true, collect: ['functionality', 'analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_PURCHASE_HISTORY: { shared: false, collect: ['functionality', 'fraud'] },\n    },\n  },\n\n  // Ads: `storebound validate --play` checks <app.website>/app-ads.txt for these lines (copy them from your mediation\n  // dashboard's app-ads.txt page). Placeholder line below; replace it.\n  // ads: { appAdsTxt: ['example-network.com, pub-0000000000000000, DIRECT, 0000000000000000'] },\n\n  renders: 'store/renders',\n\n  shots: {\n    copy: 'store/shots/copy.json',\n    frames: 'store/shots/frames',       // <lang>/phone/<name>.png, <lang>/tablet/<name>.png\n    out: 'store/renders',\n    logo: 'store/shots/logo.png',       // optional: hero scene + feature graphic\n    // Google Fonts; both cover Latin Extended (tr, pl, cs, ro ...) and Vietnamese. `shots fonts` checks every glyph of the\n    // copy; a character the font lacks needs a font that has it or fallback: ['Noto Sans Display'] (else shots check fails).\n    fonts: { title: 'Paytone One', body: 'Montserrat' },\n    // phone: { w: 440, h: 902, dpr: 3 },  // raw frame size in CSS px (screen below a 54 px status bar)\n    // tablet: { w: 1032, h: 1352, dpr: 2 }, // default with apple.ipad (13\" iPad below its 24 px bar), else 800 x 1240\n    scenes: [\n      { id: 'hero', palette: 'fire', hero: true, over: 34, frames: [{ src: 'hero.png', rotate: -4 }],\n        badges: [{ y: 0.42, side: 'l', icon: 'flag', iconBg: 'red', rot: -4 }, { y: 0.66, side: 'r', icon: 'offline', iconBg: 'red', rot: 3 }] },\n      { id: 'play', palette: 'violet', frames: [{ src: 'gameplay.png', rotate: 3 }],\n        badges: [{ y: 0.3, side: 'l', icon: 'bolt', iconBg: 'gold', rot: -3 }, { y: 0.7, side: 'r', hot: true, rot: 4 }] },\n      { id: 'levels', palette: 'sky', frames: [{ src: 'level-b.png', scale: 0.82 }, { src: 'level-a.png', x: -31, dy: 10, scale: 0.7, rotate: -8 }, { src: 'level-c.png', x: 31, dy: 10, scale: 0.7, rotate: 8 }],\n        badges: [{ y: 0.66, side: 'r', icon: 'map', iconBg: 'blue', rot: 3 }] },\n      { id: 'stars', palette: 'gold', frames: [{ src: 'results.png', rotate: -3 }],\n        badges: [{ y: 0.42, side: 'l', stars: true, rot: -3 }] },\n    ],\n    feature: { frame: 'hero.png', palette: 'fire' },\n    capture: {\n      baseUrl: 'http://127.0.0.1:5173',\n      query: 'lang={lang}&noads=1&seed=1',\n      shots: {\n        'hero': { path: '/?level=12', waitFor: \"window.game && game.state === 'playing'\", delayMs: 1500, device: 'both' },\n        'gameplay': { path: '/?level=3', delayMs: 2500, device: 'both' },\n        'level-a': { path: '/?level=20', delayMs: 2000 },\n        'level-b': { path: '/?level=40', delayMs: 2000 },\n        'level-c': { path: '/?level=60', delayMs: 2000 },\n        'results': { path: '/?level=5&result=3', delayMs: 2000, device: 'both' },\n      },\n    },\n  },\n\n  icons: {\n    composite: 'store/icon/icon.png',         // 1024 opaque\n    foreground: 'store/icon/foreground.png',  // 1024 RGBA, subject on transparent\n    background: 'store/icon/background.png',  // 1024 opaque\n    out: 'store/icons',\n    web: 'public/icons',\n    // capacitorAssets: 'native/assets',\n    // capacitorCommand: 'bunx @capacitor/assets generate --assetPath native/assets',\n    // androidRes: 'native/android/app/src/main/res',\n  },\n};\n\nexport default config;\n",
+  "storebound.config.ts": "// storebound config for one game. Everything game-specific lives here; credentials NEVER do (they go in env vars or\n// .storebound/credentials.json, which must stay gitignored). Paths are relative to this file.\n// The type import is optional: it only works when storebound is installed in the project (bun add -d <repo url>).\nimport type { ShipConfig } from 'storebound';\n\nconst config: ShipConfig = {\n  // Every compliance answer below is the TEMPLATE's, not yours. While an area is listed here, check / validate block\n  // and nothing sends it to a store. Derive the answers from the code (storebound scan --write; for an app that is\n  // already live: storebound onboard --declarations), answer the rest, then remove the area from this list.\n  unanswered: ['dataSafety', 'appPrivacy', 'reviewNotes', 'ageRating'],\n\n  app: {\n    name: 'Example Game',\n    profile: 'game',\n    copyright: '2026 Example Studio',\n    privacyPolicyUrl: 'https://example.com/privacy',\n    supportUrl: 'https://example.com',\n    marketingUrl: 'https://example.com',\n    // Developer website on Play: the same domain must serve /app-ads.txt if the game shows ads\n    website: 'https://example.com',\n    contactEmail: 'support@example.com',\n  },\n\n  // id = your folder / copy key; play = Play language code(s); apple = App Store Connect locale\n  languages: [\n    { id: 'en', play: 'en-US', apple: 'en-US' },\n    { id: 'tr', play: 'tr-TR', apple: 'tr' },\n    { id: 'es', play: ['es-ES', 'es-419'], apple: 'es-ES' },\n    { id: 'ja', play: 'ja-JP', apple: 'ja' },\n    { id: 'ar', play: 'ar', apple: 'ar-SA', rtl: true },\n  ],\n\n  play: {\n    packageName: 'com.example.game',\n    defaultLanguage: 'en-US',\n    listing: 'store/listing.md',\n    icon: 'store/icons/play-512.png',\n    // read by `storebound scan` (fill in what is true for your account and app):\n    // accountType: 'personal', accountCreated: 'YYYY-MM-DD', // new personal accounts: 12 testers x 14 days closed test\n    // targetAges: ['13-15', '16-17', '18+'],                 // App content > Target audience; under 13 = Families policy\n  },\n\n  apple: {\n    bundleId: 'com.example.game',\n    // name: 'Example: Short Tagline',  // App Store name (max 30) when app.name is taken there (\"already being used\"); default app.name\n    // appId: '1234567890',      // Apple ID of the app record; looked up by bundle id when left out\n    listing: 'store/appstore.md',\n    reviewShots: 'store/iap-review',\n    // Export compliance (export-compliance skill). false ONLY if the game uses no encryption beyond the OS (HTTPS through\n    // the system). Left unset on purpose: decide it, then uncomment. Same answer as ITSAppUsesNonExemptEncryption.\n    // usesNonExemptEncryption: false,\n    // ipad: true,    // the app runs on iPad: 13\" iPad screenshots (2064 x 2752, ipad13) are rendered, checked and uploaded\n    // iphoneMedium: true,   // optional 6.3\" iPhone set (1206 x 2622, iphone-medium); off: Apple scales the 6.5\" set down\n    // releaseType: \"afterApproval\",   // afterApproval | manual | scheduled (+ earliestReleaseDate): how an approved version goes live; unset = new versions MANUAL\n    // iphoneDuo: true,      // optional iPhone Duo (foldable) sets, outer 1398 x 2034 + inner 2007 x 2853; rendered and checked, not uploaded until the API takes them\n    // screenshotTypes: ['APP_IPHONE_61'],   // what `storebound validate` requires per locale (default: medium display, met by a 6.9\" or 6.5\" set; + APP_IPAD_PRO_3GEN_129 with ipad)\n    // TestFlight (`storebound apple testflight`, testflight skill). Tester emails live in .storebound/testers.csv only.\n    testflight: {\n      groups: [\n        { name: 'Team', internal: true, allBuilds: true },\n        { name: 'Friends' },\n      ],\n      description: { en: 'Example Game beta: try the new levels and tell us what feels too hard.' },\n    },\n    info: {\n      categories: { primary: 'GAMES', primarySubOne: 'GAMES_CASUAL', primarySubTwo: 'GAMES_PUZZLE', secondary: 'ENTERTAINMENT' },\n      ageRating: { advertising: true },     // everything else NONE / false\n      contentRights: 'DOES_NOT_USE_THIRD_PARTY_CONTENT',\n      free: true,\n      reviewNotes: [\n        'Single-player game. No account or login is needed; there is no user-generated content or chat.',\n        'In-app purchases: Home > Shop. Restore Purchases is in Settings.',\n        'Ads: optional rewarded videos and interstitials between rounds. The App Tracking Transparency prompt is shown before the ad SDK starts.',\n        'Privacy policy: Settings > Privacy.',\n        // With remote config, feature flags or a remotely changed paywall (storebound scan warns, 2.3.1) you may add:\n        // 'Shop offers and prices shown come from <SDK> and change remotely; no feature is switched on or off after review.',\n        // Google Play has no review-notes field: put the same line in reviewAccess.instructions (Play App content >\n        // App access, 'Any other information') when the app has a sign-in, and say in the full description what needs\n        // a paid subscription (Play: Deceptive behavior, Payments).\n      ].join('\\n\\n'),\n    },\n  },\n\n  // Price changes later for many products / regions: storebound prices export, edit store/prices.csv, prices import --dry.\n  // prices: { csv: 'store/prices.csv', baseTerritory: 'USA' },\n\n  // Same ids on both stores. Prices: USD base; Play converts per region, Apple equalizes from the USA. Overrides set a\n  // region by hand (Apple needs an existing price point with exactly that value).\n  products: [\n    {\n      id: 'com.example.game.remove_ads', type: 'non_consumable', usd: 2.99,\n      overrides: [{ region: 'TR', currency: 'TRY', price: 99.99 }],\n      listings: {\n        en: { title: 'Remove Ads', description: 'Removes interstitial ads for good.' },\n        tr: { title: 'Reklamları Kaldır', description: 'Ara reklamları kalıcı olarak kaldırır.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n    {\n      id: 'com.example.game.coins_small', type: 'consumable', usd: 0.99,\n      listings: {\n        en: { title: '500 Coins', description: 'A small bag of coins.' },\n        tr: { title: '500 Altın', description: 'Küçük bir kese altın.' },\n      },\n      reviewScreenshot: 'store/iap-review/shop.png',\n    },\n  ],\n\n  // Google Play Data safety. Types not listed = not collected. Purposes: functionality, analytics, communications,\n  // fraud, advertising, personalization, account. Typical F2P game with an analytics SDK + ad mediation:\n  dataSafety: {\n    collectsData: true,\n    encryptedInTransit: true,\n    // No accounts: PSL_ACM_NONE. A guest account with a name picked on the device and a server token (no password, no\n    // email): accounts { enabled: true, signUp: ['username'], ... } and ['PSL_ACM_USER_ID_OTHER_AUTH'] here (Play's\n    // \"Username and other authentication\"; `storebound scan` proposes it). With accounts Play also requires the\n    // delete-account URL (from accounts.deletionUrl). That page also answers \"can users request that their data is\n    // deleted?\" with yes (dataDeletion: 'yes' | 'no' | 'auto90' only for apps without one). partialDeletion: true +\n    // partialDeletionUrl when a page deletes data without deleting the account. `storebound check` compares every row with Play's\n    // current form (cli/data/play-data-safety-form.csv).\n    accountCreation: ['PSL_ACM_NONE'],\n    data: {\n      PSL_APPROX_LOCATION: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_USER_INTERACTION: { shared: true, collect: ['analytics', 'advertising'], share: ['analytics', 'advertising'] },\n      PSL_OTHER_APP_ACTIVITY: { shared: false, collect: ['functionality'] },\n      PSL_PERFORMANCE_DIAGNOSTICS: { shared: true, collect: ['analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_DEVICE_ID: { shared: true, collect: ['functionality', 'analytics', 'advertising', 'fraud'], share: ['analytics', 'advertising', 'fraud'] },\n      PSL_PURCHASE_HISTORY: { shared: false, collect: ['functionality', 'fraud'] },\n    },\n  },\n\n  // Ads: `storebound validate --play` checks <app.website>/app-ads.txt for these lines (copy them from your mediation\n  // dashboard's app-ads.txt page). Placeholder line below; replace it.\n  // ads: { appAdsTxt: ['example-network.com, pub-0000000000000000, DIRECT, 0000000000000000'] },\n\n  renders: 'store/renders',\n\n  shots: {\n    copy: 'store/shots/copy.json',\n    frames: 'store/shots/frames',       // <lang>/phone/<name>.png, <lang>/tablet/<name>.png\n    out: 'store/renders',\n    logo: 'store/shots/logo.png',       // optional: hero scene + feature graphic\n    // Google Fonts; both cover Latin Extended (tr, pl, cs, ro ...) and Vietnamese. `shots fonts` checks every glyph of the\n    // copy; a character the font lacks needs a font that has it or fallback: ['Noto Sans Display'] (else shots check fails).\n    fonts: { title: 'Paytone One', body: 'Montserrat' },\n    // phone: { w: 440, h: 902, dpr: 3 },  // raw frame size in CSS px (screen below a 54 px status bar)\n    // tablet: { w: 1032, h: 1352, dpr: 2 }, // default with apple.ipad (13\" iPad below its 24 px bar), else 800 x 1240\n    scenes: [\n      { id: 'hero', palette: 'fire', hero: true, over: 34, frames: [{ src: 'hero.png', rotate: -4 }],\n        badges: [{ y: 0.42, side: 'l', icon: 'flag', iconBg: 'red', rot: -4 }, { y: 0.66, side: 'r', icon: 'offline', iconBg: 'red', rot: 3 }] },\n      { id: 'play', palette: 'violet', frames: [{ src: 'gameplay.png', rotate: 3 }],\n        badges: [{ y: 0.3, side: 'l', icon: 'bolt', iconBg: 'gold', rot: -3 }, { y: 0.7, side: 'r', hot: true, rot: 4 }] },\n      { id: 'levels', palette: 'sky', frames: [{ src: 'level-b.png', scale: 0.82 }, { src: 'level-a.png', x: -31, dy: 10, scale: 0.7, rotate: -8 }, { src: 'level-c.png', x: 31, dy: 10, scale: 0.7, rotate: 8 }],\n        badges: [{ y: 0.66, side: 'r', icon: 'map', iconBg: 'blue', rot: 3 }] },\n      { id: 'stars', palette: 'gold', frames: [{ src: 'results.png', rotate: -3 }],\n        badges: [{ y: 0.42, side: 'l', stars: true, rot: -3 }] },\n    ],\n    feature: { frame: 'hero.png', palette: 'fire' },\n    capture: {\n      baseUrl: 'http://127.0.0.1:5173',\n      query: 'lang={lang}&noads=1&seed=1',\n      shots: {\n        'hero': { path: '/?level=12', waitFor: \"window.game && game.state === 'playing'\", delayMs: 1500, device: 'both' },\n        'gameplay': { path: '/?level=3', delayMs: 2500, device: 'both' },\n        'level-a': { path: '/?level=20', delayMs: 2000 },\n        'level-b': { path: '/?level=40', delayMs: 2000 },\n        'level-c': { path: '/?level=60', delayMs: 2000 },\n        'results': { path: '/?level=5&result=3', delayMs: 2000, device: 'both' },\n      },\n    },\n  },\n\n  icons: {\n    composite: 'store/icon/icon.png',         // 1024 opaque\n    foreground: 'store/icon/foreground.png',  // 1024 RGBA, subject on transparent\n    background: 'store/icon/background.png',  // 1024 opaque\n    out: 'store/icons',\n    web: 'public/icons',\n    // capacitorAssets: 'native/assets',\n    // capacitorCommand: 'bunx @capacitor/assets generate --assetPath native/assets',\n    // androidRes: 'native/android/app/src/main/res',\n  },\n};\n\nexport default config;\n",
   "testers.csv": "email,first_name,last_name,groups\n",
   "web/appstore.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>App Store</title><path d=\"M8.8086 14.9194l6.1107-11.0368c.0837-.1513.1682-.302.2437-.4584.0685-.142.1267-.2854.1646-.4403.0803-.3259.0588-.6656-.066-.9767-.1238-.3095-.3417-.5678-.6201-.7355a1.4175 1.4175 0 0 0-.921-.1924c-.3207.043-.6135.1935-.8443.4288-.1094.1118-.1996.2361-.2832.369-.092.1463-.175.2979-.259.4492l-.3864.6979-.3865-.6979c-.0837-.1515-.1667-.303-.2587-.4492-.0837-.1329-.1739-.2572-.2835-.369-.2305-.2353-.5233-.3857-.844-.429a1.4181 1.4181 0 0 0-.921.1926c-.2784.1677-.4964.426-.6203.7355-.1246.311-.1461.6508-.066.9767.038.155.0962.2984.1648.4403.0753.1564.1598.307.2437.4584l1.248 2.2543-4.8625 8.7825H2.0295c-.1676 0-.3351-.0007-.5026.0092-.1522.009-.3004.0284-.448.0714-.3108.0906-.5822.2798-.7783.548-.195.2665-.3006.5929-.3006.9279 0 .3352.1057.6612.3006.9277.196.2683.4675.4575.7782.548.1477.043.296.0623.4481.0715.1675.01.335.009.5026.009h13.0974c.0171-.0357.059-.1294.1-.2697.415-1.4151-.6156-2.843-2.0347-2.843zM3.113 18.5418l-.7922 1.5008c-.0818.1553-.1644.31-.2384.4705-.067.1458-.124.293-.1611.452-.0785.3346-.0576.6834.0645 1.0029.1212.3175.3346.583.607.7549.2727.172.5891.2416.9013.1975.3139-.044.6005-.1986.8263-.4402.1072-.1148.1954-.2424.2772-.3787.0902-.1503.1714-.3059.2535-.4612L6 19.4636c-.0896-.149-.9473-1.4704-2.887-.9218m20.5861-3.0056a1.4707 1.4707 0 0 0-.779-.5407c-.1476-.0425-.2961-.0616-.4483-.0705-.1678-.0099-.3352-.0091-.503-.0091H18.648l-4.3891-7.817c-.6655.7005-.9632 1.485-1.0773 2.1976-.1655 1.0333.0367 2.0934.546 3.0004l5.2741 9.3933c.084.1494.167.299.2591.4435.0837.131.1739.2537.2836.364.231.2323.5238.3809.8449.4232.3192.0424.643-.0244.9217-.1899.2784-.1653.4968-.4204.621-.7257.1246-.3072.146-.6425.0658-.9641-.0381-.1529-.0962-.2945-.165-.4346-.0753-.1543-.1598-.303-.2438-.4524l-1.216-2.1662h1.596c.1677 0 .3351.0009.5029-.009.1522-.009.3007-.028.4483-.0705a1.4707 1.4707 0 0 0 .779-.5407A1.5386 1.5386 0 0 0 24 16.452a1.539 1.539 0 0 0-.3009-.9158Z\"/></svg>",
   "web/googleplay.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>Google Play</title><path d=\"M22.018 13.298l-3.919 2.218-3.515-3.493 3.543-3.521 3.891 2.202a1.49 1.49 0 0 1 0 2.594zM1.337.924a1.486 1.486 0 0 0-.112.568v21.017c0 .217.045.419.124.6l11.155-11.087L1.337.924zm12.207 10.065l3.258-3.238L3.45.195a1.466 1.466 0 0 0-.946-.179l11.04 10.973zm0 2.067l-11 10.933c.298.036.612-.016.906-.183l13.324-7.54-3.23-3.21z\"/></svg>",

From bf95ee55c498431c9ee396821648139dffd9a5bf Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:13:34 +0700
Subject: [PATCH 183/255] regenerate the api coverage tables

---
 cli/api/wrapped.gen.ts | 11 +++++++----
 docs/api-coverage.md   | 16 ++++++++--------
 2 files changed, 15 insertions(+), 12 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index eced4ef..e3836c5 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -62,7 +62,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'appStoreVersionExperimentsV2_getInstance': 'apple/ppo',
     'appStoreVersionExperimentsV2_updateInstance': 'lib/ppo',
     'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple/previews art',
-    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/screenshot-health apple/screenshots art validate',
+    'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/device-families apple/screenshot-health apple/screenshots art validate',
     'appStoreVersionLocalizations_createInstance': 'listing-store',
     'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets',
     'appStoreVersionLocalizations_updateInstance': 'listing-store',
@@ -70,14 +70,14 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'appStoreVersionPhasedReleases_updateInstance': 'apple/release',
     'appStoreVersionReleaseRequests_createInstance': 'apple/release',
     'appStoreVersions_appStoreReviewDetail_getToOneRelated': 'apple/review-details onboard validate',
-    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple/creative-assets apple/listing apple/previews apple/screenshot-health apple/screenshots art listing-store onboard validate',
+    'appStoreVersions_appStoreVersionLocalizations_getToManyRelated': 'apple/creative-assets apple/device-families apple/listing apple/previews apple/screenshot-health apple/screenshots art listing-store onboard validate',
     'appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated': 'apple/release apple/status',
-    'appStoreVersions_build_getToOneRelated': 'apple/listing apple/resubmit validate',
+    'appStoreVersions_build_getToOneRelated': 'apple/device-families apple/listing apple/resubmit validate',
     'appStoreVersions_build_updateToOneRelationship': 'apple/listing apple/resubmit',
     'appStoreVersions_createInstance': 'apple/listing',
     'appStoreVersions_gameCenterAppVersion_getToOneRelated': 'apple/game-center',
     'appStoreVersions_getInstance': 'apple/listing',
-    'appStoreVersions_updateInstance': 'apple/listing',
+    'appStoreVersions_updateInstance': 'apple/listing apple/release apple/resubmit',
     'apps_analyticsReportRequests_getToManyRelated': 'analytics',
     'apps_appAvailabilityV2_getToOneRelated': 'apple/appinfo apple/preorder validate',
     'apps_appCustomProductPages_getToManyRelated': 'apple/cpp',
@@ -122,6 +122,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'betaTesterInvitations_createInstance': 'lib/testflight',
     'betaTesters_createInstance': 'lib/testflight',
     'betaTesters_getCollection': 'apple/testflight',
+    'buildBundles_buildBundleFileSizes_getToManyRelated': 'apple/device-families',
     'buildUploadFiles_createInstance': 'lib/xcode',
     'buildUploadFiles_updateInstance': 'lib/xcode',
     'buildUploads_buildUploadFiles_getToManyRelated': 'apple/upload',
@@ -130,8 +131,10 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_appEncryptionDeclaration_getToOneRelated': 'validate',
     'builds_betaAppReviewSubmission_getToOneRelated': 'apple/testflight',
     'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
+    'builds_buildBetaDetail_getToOneRelated': 'apple/testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
     'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
+    'builds_getInstance': 'apple/device-families',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
     'bundleIds_createInstance': 'apple/bundle apple/signing',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 3c3e0e4..f1ca57c 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -12,7 +12,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 
 | API | operations | GET | other | wrapped by a command | owner only |
 |---|---:|---:|---:|---:|---:|
-| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 232 | 166 |
+| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 235 | 166 |
 | Google Play Android Developer API v3 (revision 20261008) | 145 | 45 | 100 | 35 | 49 |
 | Google Play Developer Reporting API v1beta1 (revision 20261008) | 25 | 15 | 10 | 6 | 0 |
 
@@ -337,7 +337,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appStoreVersionLocalizations** (14) | | | | |
 | `appStoreVersionLocalizations_appPreviewSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appPreviewSets` | read | apple/previews, art |
 | `appStoreVersionLocalizations_appPreviewSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appPreviewSets` | read |  |
-| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple/screenshot-health, apple/screenshots, art, validate |
+| `appStoreVersionLocalizations_appScreenshotSets_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/appScreenshotSets` | read | apple/device-families, apple/screenshot-health, apple/screenshots, art, validate |
 | `appStoreVersionLocalizations_appScreenshotSets_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/appScreenshotSets` | read |  |
 | `appStoreVersionLocalizations_createInstance` | POST | `/v1/appStoreVersionLocalizations` | write (dry by default) | listing-store |
 | `appStoreVersionLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionLocalizations/{id}` | owner only (typed confirm) |  |
@@ -371,13 +371,13 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersions_appStoreVersionExperimentsV2_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperimentsV2` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionExperiments` | read |  |
 | `appStoreVersions_appStoreVersionExperiments_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionExperiments` | read |  |
-| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple/creative-assets, apple/listing, apple/previews, apple/screenshot-health, apple/screenshots, art, listing-store, onboard, validate |
+| `appStoreVersions_appStoreVersionLocalizations_getToManyRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionLocalizations` | read | apple/creative-assets, apple/device-families, apple/listing, apple/previews, apple/screenshot-health, apple/screenshots, art, listing-store, onboard, validate |
 | `appStoreVersions_appStoreVersionLocalizations_getToManyRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionLocalizations` | read |  |
 | `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionPhasedRelease` | read | apple/release, apple/status |
 | `appStoreVersions_appStoreVersionPhasedRelease_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionPhasedRelease` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/appStoreVersionSubmission` | read |  |
 | `appStoreVersions_appStoreVersionSubmission_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/appStoreVersionSubmission` | read |  |
-| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple/listing, apple/resubmit, validate |
+| `appStoreVersions_build_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/build` | read | apple/device-families, apple/listing, apple/resubmit, validate |
 | `appStoreVersions_build_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/build` | read |  |
 | `appStoreVersions_build_updateToOneRelationship` | PATCH | `/v1/appStoreVersions/{id}/relationships/build` | write (dry by default) | apple/listing, apple/resubmit |
 | `appStoreVersions_createInstance` | POST | `/v1/appStoreVersions` | write (dry by default) | apple/listing |
@@ -389,7 +389,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersions_getInstance` | GET | `/v1/appStoreVersions/{id}` | read | apple/listing |
 | `appStoreVersions_routingAppCoverage_getToOneRelated` | GET | `/v1/appStoreVersions/{id}/routingAppCoverage` | read |  |
 | `appStoreVersions_routingAppCoverage_getToOneRelationship` | GET | `/v1/appStoreVersions/{id}/relationships/routingAppCoverage` | read |  |
-| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple/listing |
+| `appStoreVersions_updateInstance` | PATCH | `/v1/appStoreVersions/{id}` | write (dry by default) | apple/listing, apple/release, apple/resubmit |
 | **appTags** (3) | | | | |
 | `appTags_territories_getToManyRelated` | GET | `/v1/appTags/{id}/territories` | read |  |
 | `appTags_territories_getToManyRelationship` | GET | `/v1/appTags/{id}/relationships/territories` | read |  |
@@ -620,7 +620,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `buildBundles_appClipDomainDebugStatus_getToOneRelationship` | GET | `/v1/buildBundles/{id}/relationships/appClipDomainDebugStatus` | read |  |
 | `buildBundles_betaAppClipInvocations_getToManyRelated` | GET | `/v1/buildBundles/{id}/betaAppClipInvocations` | read |  |
 | `buildBundles_betaAppClipInvocations_getToManyRelationship` | GET | `/v1/buildBundles/{id}/relationships/betaAppClipInvocations` | read |  |
-| `buildBundles_buildBundleFileSizes_getToManyRelated` | GET | `/v1/buildBundles/{id}/buildBundleFileSizes` | read |  |
+| `buildBundles_buildBundleFileSizes_getToManyRelated` | GET | `/v1/buildBundles/{id}/buildBundleFileSizes` | read | apple/device-families |
 | `buildBundles_buildBundleFileSizes_getToManyRelationship` | GET | `/v1/buildBundles/{id}/relationships/buildBundleFileSizes` | read |  |
 | **buildUploadFiles** (3) | | | | |
 | `buildUploadFiles_createInstance` | POST | `/v1/buildUploadFiles` | write (dry by default) | lib/xcode |
@@ -647,12 +647,12 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_betaBuildUsages_getMetrics` | GET | `/v1/builds/{id}/metrics/betaBuildUsages` | read |  |
 | `builds_betaGroups_createToManyRelationship` | POST | `/v1/builds/{id}/relationships/betaGroups` | write (dry by default) |  |
 | `builds_betaGroups_deleteToManyRelationship` | DELETE | `/v1/builds/{id}/relationships/betaGroups` | owner only (typed confirm) |  |
-| `builds_buildBetaDetail_getToOneRelated` | GET | `/v1/builds/{id}/buildBetaDetail` | read |  |
+| `builds_buildBetaDetail_getToOneRelated` | GET | `/v1/builds/{id}/buildBetaDetail` | read | apple/testflight |
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
 | `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/build-mas, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
-| `builds_getInstance` | GET | `/v1/builds/{id}` | read |  |
+| `builds_getInstance` | GET | `/v1/builds/{id}` | read | apple/device-families |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
 | `builds_individualTesters_createToManyRelationship` | POST | `/v1/builds/{id}/relationships/individualTesters` | owner only (typed confirm) |  |

From ef80cd276058259df1787d1982246a65e762b95e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 17:17:39 +0700
Subject: [PATCH 184/255] storebound 0.8.56: version in package.json and every
 copy, CHANGELOG 0.8.56 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 9ec05ee..6ee0c76 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.55",
+      "version": "0.8.56",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index d36edb9..f1567c7 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 91c89f9..70292c2 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cf58150..ba0057f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.56 · 2026-10-27
+
 - Release type. `apple.releaseType: afterApproval | manual | scheduled` (+ `apple.earliestReleaseDate`): `apple listing` creates versions with it (MANUAL when unset, existing versions untouched) and `apple submit` / `resubmit` set it before submitting when it differs, the dry run showing old -> new. New `apple release --after-approval | --manual | --scheduled <ISO date> [--platform] [--version] [--first-release] --yes` changes it on a version App Review has not approved yet (clear refusal otherwise, with `--manual-release` as the way out); exit 7 when it already has that type; an update is an agent step, after-approval on the first version of an app is exit 3 OWNER_STEP. Pitfall 125.
 - Device families. `validate` and `apple build` read the device families of the last live version (build bundle `deviceProtocols`, device models, iPad screenshot sets) and compare them with TARGETED_DEVICE_FAMILY in the Xcode project and `apple.ipad`; a gap stops `apple build` before the archive with the exact fix (ITMS-90101 otherwise comes after the build; `--allow-device-gap` overrides). Offline `check` warns when the live families are unknown or the config and project disagree. Pitfall 126.
 - TestFlight. `apple testflight testers --invite` checks that the tester's group has an installable build (past Beta App Review for external groups); without one it adds the tester, skips the invite and prints when it can go out (exit 0). Apple's 409 NO_INSTALLABLE_BUILDS is handled the same way; `distribute --submit-review` prints the hint for testers not invited yet. Pitfall 127.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index fd1bcc3..d48b786 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 3ef0c4e..d3e271c 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.55"
+version = "0.8.56"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index ed11aa9..f7fc08f 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.55"
+version = "0.8.56"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index f1b385c..d2bf6b8 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index c2603fb..8c34180 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 9655b43..c30a69d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.55",
+  "version": "0.8.56",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 9a878d6562e6a061d660bc901e068ba3aedda1da Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 18:58:48 +0700
Subject: [PATCH 185/255] apple upload: find the IPA of a build made with --out
 (build notes it in .storebound/last-apple-build.json; upload --out; the error
 names every folder searched and the last build's IPA)

---
 CHANGELOG.md            |  2 ++
 cli/apple/build.ts      |  3 ++-
 cli/apple/upload.ts     | 24 +++++++++++++++++-------
 cli/data/flags.json     |  3 ++-
 cli/lib/xcode.ts        | 20 +++++++++++++++++++-
 tests/path-free.test.ts | 17 ++++++++++++++++-
 6 files changed, 58 insertions(+), 11 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ba0057f..fa80824 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple upload` finds the IPA of a build made with `--out`: `apple build` notes its IPA and out folder in `.storebound/last-apple-build.json`, and upload searches `--out` (new flag), then that last build's out, then `apple.build.out` / `build/ios`. When nothing is found, the error names every folder it searched and the last build's IPA.
+
 ## 0.8.56 · 2026-10-27
 
 - Release type. `apple.releaseType: afterApproval | manual | scheduled` (+ `apple.earliestReleaseDate`): `apple listing` creates versions with it (MANUAL when unset, existing versions untouched) and `apple submit` / `resubmit` set it before submitting when it differs, the dry run showing old -> new. New `apple release --after-approval | --manual | --scheduled <ISO date> [--platform] [--version] [--first-release] --yes` changes it on a version App Review has not approved yet (clear refusal otherwise, with `--manual-release` as the way out); exit 7 when it already has that type; an update is an agent step, after-approval on the first version of an app is exit 3 OWNER_STEP. Pitfall 125.
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 13e8a89..d877447 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -41,7 +41,7 @@ import { liveDeviceFamilies } from './device-families';
 import { keychainPassword, keychainSigningArgs, parseKeychainList, showSecurity, sshBuildRefusal, unlockSteps } from '../lib/keychain';
 import { appGroupSteps, appGroupVerdicts, type GroupEvidence } from '../lib/targets';
 import { capacitorProject, webStep } from '../lib/web-assets';
-import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, scanXcode, showCmd } from '../lib/xcode';
+import { archiveArgs, type AscAuth, distributionErrors, exportArgs, foreignRsync, remoteBuildSession, xcodePath, flutterConfigArgs, ipaInfo, ipaVersionProblem, pickXcode, recordLastBuild, scanXcode, showCmd } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { ascClient } from './asc';
 import { parsePlatform } from './platform';
@@ -305,6 +305,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const result = { ipa: join(exportPath, ipa), bundleId: info.bundleId, version: info.version, build: info.build, web: web.bundle, derivedData: derivedData ?? null, pathFree, ...(scanPaths ? { leaks } : {}) };
   writeFileSync(join(out, 'latest.json'), `${JSON.stringify(result, null, 2)}
 `);
+  recordLastBuild(root, { ipa: result.ipa, out, version: info.version, build: info.build });
   if (json) printJson(result);
   done(TAG, `${relative(root, result.ipa)}: ${info.bundleId} ${info.version} (${info.build}). Next: storebound apple upload ${relative(root, result.ipa)} --dry`);
 }
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 114d989..28ccd4a 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -1,7 +1,8 @@
 // Upload an IPA to App Store Connect and wait until Apple has processed the build.
-//   storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
+//   storebound apple upload [<app.ipa>] [--out D] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check "<cmd with {file}>"] [--evidence <path.json>] [--dry] [--yes] [--json]
 //   storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)
-// Default IPA: the newest in <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
+// Default IPA: the newest in <--out>/export, else the last apple build's <out>/export (.storebound/last-apple-build.json,
+// so a build with --out is found), then <apple.build.out or build/ios>/export (and its <version>-<build>/ folders), or with
 // --build N the one with that build number. The bundle id, version and build number come from the IPA's Info.plist.
 // An IPA whose build number is already on App Store Connect fails with exit 1 (a stale IPA left by a failed
 // `apple build`, pitfall 53); only --allow-existing (flows that resume after a finished upload) re-checks it instead. Before any network call every PrivacyInfo.xcprivacy in the IPA
@@ -27,7 +28,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { compareBuild, nextBuildNumber, nextPollDelay, parseDuration, WAIT_EXIT } from '../lib/release';
-import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, showCmd, UPLOAD_DONE, uploadProblems } from '../lib/xcode';
+import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, readLastBuild, showCmd, UPLOAD_DONE, uploadProblems, uploadSearchDirs } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { BUILD_WAIT_EXIT } from '../lib/build-ops';
 import { type Asc, ascClient, type J } from './asc';
@@ -238,11 +239,20 @@ export async function run(ctx: Ctx): Promise<void> {
   const macos = parsePlatform(a.get('platform')) === 'MAC_OS';
   let ipa = a._.find(x => x.endsWith('.ipa') || x.endsWith('.pkg'));
   if (!ipa) {
-    const dir = join(resolve(config.apple?.build?.out ?? 'build/ios'), 'export');
-    let found = exportedIpas(dir);
-    if (want) found = found.filter(f => { try { return ipaInfo(f).build === want; } catch { return false; } });
+    const last = readLastBuild(root);
+    const flagOut = a.get('out');
+    const dirs = uploadSearchDirs({ flagOut: flagOut ? resolve(flagOut) : undefined, lastOut: last?.out, configOut: resolve(config.apple?.build?.out ?? 'build/ios') });
+    let found: string[] = [];
+    for (const dir of dirs) {
+      found = exportedIpas(dir);
+      if (want) found = found.filter(f => { try { return ipaInfo(f).build === want; } catch { return false; } });
+      if (found[0]) break;
+    }
     if (!found[0] && macos) throw new Error('usage: storebound apple upload <app.pkg> --platform macos (storebound apple build --platform macos --tauri <src-tauri> makes one)');
-    if (!found[0]) throw new Error(`usage: storebound apple upload <app.ipa> (no ${want ? `build ${want} ` : ''}IPA in ${relative(root, dir)}; storebound apple build makes one)`);
+    if (!found[0]) {
+      const lastHint = last && !existsSync(last.ipa) ? `; the last apple build (${last.build}) wrote ${last.ipa}, which is gone` : last ? `; the last apple build (${last.build}) is ${last.ipa}` : '';
+      throw new Error(`usage: storebound apple upload <app.ipa> (no ${want ? `build ${want} ` : ''}IPA in ${dirs.map(d => relative(root, d) || '.').join(', ')}${lastHint}; pass the IPA, --out <the build's --out>, or run storebound apple build)`);
+    }
     ipa = found[0];
   } else ipa = resolve(ipa);
   shipPhase('verify', `checking ${relative(root, ipa)}`);
diff --git a/cli/data/flags.json b/cli/data/flags.json
index aa55fc7..3a24466 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -366,6 +366,7 @@
    "locale",
    "no-wait",
    "older-than",
+   "out",
    "platform",
    "pre-check",
    "progress",
@@ -1574,7 +1575,7 @@
    "storebound apple testflight expire (--keep N | --older-than D) [--version x.y.z] [--dry] [--yes] [--json]"
   ],
   "apple upload": [
-   "storebound apple upload [<app.ipa>] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]",
+   "storebound apple upload [<app.ipa>] [--out D] [--build N] [--allow-existing] [--via api|altool] [--no-wait] [--timeout 60m] [--pre-check \"<cmd with {file}>\"] [--evidence <path.json>] [--dry] [--yes] [--json]",
    "storebound apple upload <App.pkg> --platform macos [...]   (Mac App Store .pkg from apple build --platform macos --tauri; platform MAC_OS, uti com.apple.pkg; altool gets --type macos; no SDK / privacy-manifest check)"
   ],
   "apple win-back": [
diff --git a/cli/lib/xcode.ts b/cli/lib/xcode.ts
index cccad53..ed5f4a7 100644
--- a/cli/lib/xcode.ts
+++ b/cli/lib/xcode.ts
@@ -1,7 +1,7 @@
 // Xcode builds without Xcode's UI: find the workspace / project and scheme (native, Capacitor, React Native, Flutter,
 // Unity-exported projects), build the xcodebuild archive and export command lines, read an IPA's Info.plist.
 // Pure except scanXcode (a bounded directory walk) and ipaInfo (reads the IPA).
-import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
 import { basename, dirname, join, relative } from 'node:path';
 import { parsePlist, type PlistValue } from './plist';
 import { zipEntries, zipRead } from './zip';
@@ -266,3 +266,21 @@ export function remoteBuildSession(env: Record<string, string | undefined>, mana
   if (managerName && managerName !== 'Aqua') return `this is not the logged-in GUI session (launchctl manager: ${managerName})`;
   return null;
 }
+
+/** Where `apple build` notes its last IPA for `apple upload`: .storebound/last-apple-build.json (gitignored). */
+export const lastBuildFile = (root: string): string => join(root, '.storebound', 'last-apple-build.json');
+
+export function recordLastBuild(root: string, r: { ipa: string; out: string; version: string; build: string }): void {
+  try { mkdirSync(join(root, '.storebound'), { recursive: true }); writeFileSync(lastBuildFile(root), `${JSON.stringify(r, null, 2)}\n`); } catch { /* best effort */ }
+}
+
+export function readLastBuild(root: string): { ipa: string; out: string; version?: string; build?: string } | null {
+  try { const j = JSON.parse(readFileSync(lastBuildFile(root), 'utf8')); return typeof j?.ipa === 'string' && typeof j?.out === 'string' ? j : null; } catch { return null; }
+}
+
+/** The export folders `apple upload` searches, in order: --out, else the last build's out (a --out that build used),
+ *  then apple.build.out / build/ios. Duplicates dropped. */
+export function uploadSearchDirs(o: { flagOut?: string; lastOut?: string; configOut: string }): string[] {
+  const dirs = o.flagOut ? [o.flagOut] : [...(o.lastOut ? [o.lastOut] : []), o.configOut];
+  return [...new Set(dirs.map(d => join(d, 'export')))];
+}
diff --git a/tests/path-free.test.ts b/tests/path-free.test.ts
index 0a2e628..a6b599d 100644
--- a/tests/path-free.test.ts
+++ b/tests/path-free.test.ts
@@ -3,7 +3,7 @@ import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { archiveScanDirs, derivedDataFor, leakNeedles, leakProblem, outsideHome, pathFreeSettings, prefixMaps, scanForPaths } from '../cli/lib/path-free';
-import { archiveArgs, validateAppleBuild } from '../cli/lib/xcode';
+import { archiveArgs, readLastBuild, recordLastBuild, uploadSearchDirs, validateAppleBuild } from '../cli/lib/xcode';
 
 const resolve = (p: string): string => (p.startsWith('/') ? p : `/proj/${p}`);
 const t = { framework: 'native' as const, project: 'App.xcodeproj', scheme: 'App', notes: [] };
@@ -102,3 +102,18 @@ describe('leak scan', () => {
     rmSync(dir, { recursive: true, force: true });
   });
 });
+
+describe('apple upload finds the last build', () => {
+  test('--out wins; else the last build out, then the config out', () => {
+    expect(uploadSearchDirs({ flagOut: '/o', lastOut: '/l', configOut: '/c' })).toEqual([join('/o', 'export')]);
+    expect(uploadSearchDirs({ lastOut: '/l', configOut: '/c' })).toEqual([join('/l', 'export'), join('/c', 'export')]);
+    expect(uploadSearchDirs({ lastOut: '/c', configOut: '/c' })).toEqual([join('/c', 'export')]);
+  });
+  test('build records the IPA and out in .storebound, upload reads it back', () => {
+    const root = mkdtempSync(join(tmpdir(), 'lb-'));
+    expect(readLastBuild(root)).toBeNull();
+    recordLastBuild(root, { ipa: '/shared/out/export/build-31/App.ipa', out: '/shared/out', version: '1.0', build: '31' });
+    expect(readLastBuild(root)).toEqual({ ipa: '/shared/out/export/build-31/App.ipa', out: '/shared/out', version: '1.0', build: '31' });
+    rmSync(root, { recursive: true, force: true });
+  });
+});

From 28a50e7d2e3eba05a5226c14ad9c1bf4712336c5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 27 Oct 2026 19:01:14 +0700
Subject: [PATCH 186/255] storebound 0.8.57: version in package.json and every
 copy, CHANGELOG 0.8.57 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 6ee0c76..b247852 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.56",
+      "version": "0.8.57",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index f1567c7..e9ef474 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 70292c2..300ce52 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index fa80824..6d65fcd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.57 · 2026-10-27
+
 - `apple upload` finds the IPA of a build made with `--out`: `apple build` notes its IPA and out folder in `.storebound/last-apple-build.json`, and upload searches `--out` (new flag), then that last build's out, then `apple.build.out` / `build/ios`. When nothing is found, the error names every folder it searched and the last build's IPA.
 
 ## 0.8.56 · 2026-10-27
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index d48b786..428e5a1 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index d3e271c..9e31a73 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.56"
+version = "0.8.57"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index f7fc08f..6912486 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.56"
+version = "0.8.57"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index d2bf6b8..04dc72a 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 8c34180..2a9f249 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index c30a69d..8c4bf4c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.56",
+  "version": "0.8.57",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 5f73fcbcf4e36d33fcd779a8982d384475ddf17e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 16:19:53 +0700
Subject: [PATCH 187/255] mcp --http: one Streamable HTTP server for every
 session (token or OAuth introspection auth, project argument per call, roots,
 origin check)

---
 cli/commands.ts        |   2 +-
 cli/data/flags.json    |  27 +++++-
 cli/mcp-cmd.ts         |  13 +++
 cli/mcp-http.ts        | 214 +++++++++++++++++++++++++++++++++++++++++
 tests/mcp-http.test.ts | 105 ++++++++++++++++++++
 5 files changed, 359 insertions(+), 2 deletions(-)
 create mode 100644 cli/mcp-cmd.ts
 create mode 100644 cli/mcp-http.ts
 create mode 100644 tests/mcp-http.test.ts

diff --git a/cli/commands.ts b/cli/commands.ts
index 6e05b40..f644811 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -10,7 +10,7 @@ export const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'init': [() => import('./init'), 'copy the templates (config, listing, copy, declarations, privacy policy) into this project; --profile app|game|subscription-app (default app)'],
   'import': [() => import('./import'), 'fastlane [--dir fastlane] [--profile app|game|subscription-app] [--dry]: Appfile, deliver + supply metadata and screenshots -> config, store/*.md, shots frames (read-only on fastlane, never overwrites)'],
   'install': [() => import('./install'), 'skills + MCP server for --agent claude|codex|cursor|copilot|windsurf|gemini|opencode'],
-  'mcp': [async () => ({ run: async () => (await import('./mcp')).serve() }), 'stdio MCP server wrapping these commands (for any MCP-capable AI tool)'],
+  'mcp': [() => import('./mcp-cmd'), 'MCP server wrapping these commands (for any MCP-capable AI tool): stdio, or --http [--port 7787] [--roots <dirs>] [--auth token|introspect] for one server every session shares'],
   'watch': [() => import('./watch'), 'store events for every app on this machine: rejected, approved, live, rollout halted, crash threshold, low reviews; loops every --every 15m or --once; sinks --notify os|ntfy|telegram|webhook|ingest; test sends a test event; --dry, --dir <folder>, --json (read-only on the stores)'],
   'status': [() => import('./status'), '[--app <name|store id|folder>] [--json]: per platform the live and next version, build, track, review state and rollout %, without uploading (read-only; read by ship pipelines, docs/ship-step.md)'],
   'events': [() => import('./events'), '[--since 24h] [--app <name>] [--kind rejected] [--json]: the events watch recorded in ~/.storebound/events.jsonl (read-only)'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 3a24466..d813c82 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -645,7 +645,21 @@
    "to",
    "translate"
   ],
-  "mcp": [],
+  "mcp": [
+   "allow-origin",
+   "allow-remote-token",
+   "auth",
+   "host",
+   "http",
+   "introspect-key-file",
+   "introspect-url",
+   "issuer",
+   "port",
+   "project",
+   "resource",
+   "roots",
+   "token-file"
+  ],
   "onboard": [
    "accounts",
    "all",
@@ -1159,7 +1173,9 @@
    "allow-availability-changes",
    "allow-device-gap",
    "allow-existing",
+   "allow-origin",
    "allow-price-changes",
+   "allow-remote-token",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
@@ -1172,6 +1188,7 @@
    "apps",
    "archive",
    "aso",
+   "auth",
    "base",
    "base-url",
    "beta",
@@ -1243,6 +1260,8 @@
    "headless",
    "home",
    "hook",
+   "host",
+   "http",
    "icon",
    "icons",
    "identity",
@@ -1251,9 +1270,12 @@
    "install",
    "internal",
    "internal-only",
+   "introspect-key-file",
+   "introspect-url",
    "invite",
    "ios",
    "issue",
+   "issuer",
    "issues",
    "jobs",
    "keep",
@@ -1350,10 +1372,12 @@
    "render",
    "repair-stuck",
    "resolve-iaps",
+   "resource",
    "result-file",
    "resume",
    "review-sent",
    "root",
+   "roots",
    "scan-paths",
    "scenes",
    "scheduled",
@@ -1387,6 +1411,7 @@
    "threshold",
    "timeout",
    "to",
+   "token-file",
    "top",
    "track",
    "tracking-domains",
diff --git a/cli/mcp-cmd.ts b/cli/mcp-cmd.ts
new file mode 100644
index 0000000..390dcb2
--- /dev/null
+++ b/cli/mcp-cmd.ts
@@ -0,0 +1,13 @@
+// `storebound mcp`: stdio by default (one process per agent session), or `--http` for one shared server
+// (cli/mcp-http.ts: every session of the machine, or a team behind OAuth).
+import type { parseArgs } from './lib/args';
+
+export async function run(a: ReturnType<typeof parseArgs>): Promise<void> {
+  if (!a.has('http')) return (await import('./mcp')).serve();
+  const { serveHttp } = await import('./mcp-http');
+  await serveHttp({
+    host: a.get('host'), port: a.get('port'), roots: a.get('roots'), project: a.get('project'), allowOrigin: a.get('allow-origin'),
+    auth: a.get('auth'), tokenFile: a.get('token-file'), introspectUrl: a.get('introspect-url'), introspectKeyFile: a.get('introspect-key-file'),
+    resource: a.get('resource'), issuer: a.get('issuer'), allowRemoteToken: a.has('allow-remote-token'),
+  });
+}
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
new file mode 100644
index 0000000..0c30e08
--- /dev/null
+++ b/cli/mcp-http.ts
@@ -0,0 +1,214 @@
+// `storebound mcp --http`: the same MCP server over Streamable HTTP, so one process serves every agent session on a
+// machine (or one host serves a whole team) instead of one stdio process per session.
+//   storebound mcp --http [--host 127.0.0.1] [--port 7787] [--roots <dir,dir>] [--project <dir>]
+//                         [--auth token|introspect] [--token-file ~/.storebound/mcp-token]
+//                         [--introspect-url <url> --introspect-key-file <file> --resource <url> --issuer <url>]
+// Transport (https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#streamable-http): one endpoint,
+// /mcp. POST carries one JSON-RPC message and gets one JSON answer (202 for a notification); GET and DELETE are 405
+// (no server-initiated stream, no session state: every call is independent, so no Mcp-Session-Id is issued). The
+// Origin header, when sent, must be a localhost origin unless --allow-origin names it (DNS rebinding).
+// Project: every tool gets a `project` argument, the absolute path of the app folder the CLI runs in. It must be inside
+// --roots (default: the home folder); --project (or STOREBOUND_PROJECT) is the default when a call has none.
+// Auth (every request to /mcp):
+//   token (default): `Authorization: Bearer <token>`, the token in --token-file (made with mode 600 on first start;
+//     never printed). Clients: claude mcp add --transport http storebound http://127.0.0.1:7787/mcp
+//     --header "Authorization: Bearer $(cat ~/.storebound/mcp-token)".
+//   introspect: an OAuth 2.0 bearer token checked at --introspect-url (RFC 7662; this server authenticates with the
+//     key in --introspect-key-file). The token must be active, carry the `mcp` scope and name --resource in aud
+//     (RFC 8707). Without a valid token: 401 with WWW-Authenticate: Bearer resource_metadata=".../.well-known/
+//     oauth-protected-resource/mcp" (RFC 9728), which names --issuer as the authorization server. Answers are cached
+//     for 60 s per token (hashed); the token itself is never logged.
+import { createHash, randomBytes } from 'node:crypto';
+import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import pkg from '../package.json' with { type: 'json' };
+import { handle, LEGACY, PROTOCOL } from './mcp';
+import { runCommand } from './lib/runner';
+
+export const DEFAULT_PORT = 7787;
+const MAX_BODY = 4 * 1024 * 1024;
+
+export interface HttpOptions {
+  host: string;
+  port: number;
+  roots: string[];
+  project: string | null;
+  allowOrigins: string[];
+  auth: { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
+}
+
+export const PROJECT_PROP = { type: 'string', description: 'Absolute path of the app folder (the one with storebound.config.ts) to run in. Required unless the server was started with --project.' } as const;
+
+/** Inside one of the roots (path compare, case-insensitive on Windows); no "..", no other drive. */
+export function insideRoots(dir: string, roots: string[]): boolean {
+  const norm = (p: string) => (process.platform === 'win32' ? resolve(p).toLowerCase() : resolve(p));
+  return roots.some(r => { const rel = relative(norm(r), norm(dir)); return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel)); });
+}
+
+/** The folder a call runs in, or the reason it cannot run. */
+export function projectFor(arg: unknown, o: Pick<HttpOptions, 'roots' | 'project'>): { dir: string } | { error: string } {
+  if (arg === undefined || arg === null || arg === '') return o.project ? { dir: o.project } : { error: 'project: required (absolute path of the app folder)' };
+  if (typeof arg !== 'string' || !isAbsolute(arg)) return { error: 'project: must be an absolute path' };
+  if (!insideRoots(arg, o.roots)) return { error: `project: ${arg} is outside the server's roots (${o.roots.join(', ')})` };
+  try { if (!statSync(arg).isDirectory()) return { error: `project: ${arg} is not a folder` }; } catch { return { error: `project: ${arg} does not exist` }; }
+  return { dir: resolve(arg) };
+}
+
+/** Localhost origins are always fine; others only when listed. No Origin header (non-browser clients) is fine. */
+export function originAllowed(origin: string | undefined, allow: string[]): boolean {
+  if (!origin) return true;
+  if (allow.includes(origin)) return true;
+  try { const u = new URL(origin); return ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname); } catch { return false; }
+}
+
+/** The protected resource metadata URL for a resource URL (RFC 9728 section 3: the path goes after the well-known part). */
+export function metadataUrl(resource: string): string {
+  const u = new URL(resource);
+  return `${u.origin}/.well-known/oauth-protected-resource${u.pathname === '/' ? '' : u.pathname}`;
+}
+
+/** Introspection answer -> allowed? (active, `mcp` scope, our resource in aud). */
+export function introspectionOk(j: unknown, resource: string): boolean {
+  if (!j || typeof j !== 'object') return false;
+  const r = j as { active?: unknown; scope?: unknown; aud?: unknown };
+  if (r.active !== true) return false;
+  const scopes = typeof r.scope === 'string' ? r.scope.split(/\s+/) : [];
+  if (!scopes.includes('mcp')) return false;
+  const aud = Array.isArray(r.aud) ? r.aud : typeof r.aud === 'string' ? [r.aud] : [];
+  return aud.includes(resource);
+}
+
+const bearer = (req: IncomingMessage): string | null => { const h = req.headers.authorization ?? ''; const m = /^Bearer\s+(\S+)$/i.exec(h); return m ? m[1]! : null; };
+
+const cache = new Map<string, { ok: boolean; until: number }>();
+async function authorized(req: IncomingMessage, o: HttpOptions): Promise<boolean> {
+  const t = bearer(req);
+  if (!t) return false;
+  if (o.auth.kind === 'token') {
+    const a = createHash('sha256').update(t).digest(), b = createHash('sha256').update(o.auth.token).digest();
+    return a.equals(b);
+  }
+  const key = createHash('sha256').update(t).digest('hex');
+  const hit = cache.get(key);
+  if (hit && hit.until > Date.now()) return hit.ok;
+  let ok = false;
+  try {
+    const r = await fetch(o.auth.url, { method: 'POST', signal: AbortSignal.timeout(10_000),
+      headers: { authorization: `Bearer ${o.auth.key}`, 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },
+      body: new URLSearchParams({ token: t }).toString() });
+    ok = r.ok && introspectionOk(await r.json(), o.auth.resource);
+  } catch { return false; } // no cache on a network error
+  cache.set(key, { ok, until: Date.now() + 60_000 });
+  return ok;
+}
+
+function send(res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}): void {
+  res.writeHead(status, { 'cache-control': 'no-store', ...(body === undefined ? {} : { 'content-type': 'application/json' }), ...headers });
+  res.end(body === undefined ? undefined : JSON.stringify(body));
+}
+
+async function readBody(req: IncomingMessage): Promise<string | null> {
+  let size = 0; const parts: Buffer[] = [];
+  for await (const c of req) { size += (c as Buffer).length; if (size > MAX_BODY) return null; parts.push(c as Buffer); }
+  return Buffer.concat(parts).toString('utf8');
+}
+
+/** One POST body -> the answer (null for a notification). tools/list gains `project`; tools/call runs in it. */
+export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions, 'roots' | 'project'>,
+  run: (argv: string[], cwd: string) => Promise<{ code: number; out: string }> = runIn): Promise<Record<string, unknown> | null> {
+  const params = (msg.params ?? {}) as Record<string, unknown>;
+  if (msg.method === 'tools/call') {
+    const args = { ...((params.arguments ?? {}) as Record<string, unknown>) };
+    const p = projectFor(args.project, o);
+    if ('error' in p) return { jsonrpc: '2.0', id: msg.id ?? null, result: { content: [{ type: 'text', text: `Invalid arguments: ${p.error}` }], isError: true } };
+    delete args.project;
+    return handle({ ...msg, params: { ...params, arguments: args } } as never, argv => run(argv, p.dir));
+  }
+  const r = await handle(msg as never);
+  if (msg.method === 'tools/list' && r && typeof r.result === 'object') {
+    const tools = (r.result as { tools?: { inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] }).tools ?? [];
+    for (const t of tools) {
+      t.inputSchema.properties = { project: PROJECT_PROP, ...t.inputSchema.properties };
+      if (!o.project) t.inputSchema.required = ['project', ...(t.inputSchema.required ?? [])];
+    }
+  }
+  return r;
+}
+
+async function runIn(argv: string[], cwd: string): Promise<{ code: number; out: string }> {
+  const r = runCommand(argv, { cwd, env: { STOREBOUND_MCP: '1' } });
+  const { code, out } = await r.result;
+  return { code, out };
+}
+
+export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: number }> {
+  const resourceMeta = o.auth.kind === 'introspect' ? metadataUrl(o.auth.resource) : null;
+  const server = createServer(async (req, res) => {
+    const path = (req.url ?? '/').split('?')[0];
+    if (resourceMeta && o.auth.kind === 'introspect' && req.method === 'GET' && path === new URL(resourceMeta).pathname)
+      return send(res, 200, { resource: o.auth.resource, authorization_servers: [o.auth.issuer], bearer_methods_supported: ['header'], scopes_supported: ['mcp'], resource_name: 'storebound' });
+    if (path === '/health' && req.method === 'GET') return send(res, 200, { ok: true, version: pkg.version });
+    if (path !== '/mcp') return send(res, 404, { error: 'not found' });
+    if (!originAllowed(req.headers.origin, o.allowOrigins)) return send(res, 403, { error: 'origin not allowed' });
+    if (!(await authorized(req, o)))
+      return send(res, 401, { error: 'unauthorized' }, { 'www-authenticate': resourceMeta ? `Bearer resource_metadata="${resourceMeta}"` : 'Bearer' });
+    if (req.method !== 'POST') return send(res, 405, { error: 'POST only (no server-initiated stream)' }, { allow: 'POST' });
+    const body = await readBody(req);
+    if (body === null) return send(res, 413, { error: 'body too large' });
+    let msg: unknown;
+    try { msg = JSON.parse(body); } catch { return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Parse error' } }); }
+    if (Array.isArray(msg) || typeof msg !== 'object' || msg === null) return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32600, message: 'One JSON-RPC message per request' } });
+    try {
+      const r = await answer(msg as Record<string, unknown>, o);
+      return r ? send(res, 200, r) : send(res, 202);
+    } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
+  });
+  return new Promise((ok, fail) => {
+    server.once('error', fail);
+    server.listen(o.port, o.host, () => {
+      const a = server.address(); const port = typeof a === 'object' && a ? a.port : o.port;
+      ok({ close: () => server.close(), port });
+    });
+  });
+}
+
+/** The local bearer token: read, or made (32 random bytes, hex, mode 600) on first start. */
+export function tokenFrom(file: string): string {
+  if (existsSync(file)) { const t = readFileSync(file, 'utf8').trim(); if (t.length >= 32) return t; }
+  mkdirSync(dirname(file), { recursive: true });
+  const t = randomBytes(32).toString('hex');
+  writeFileSync(file, `${t}\n`, { mode: 0o600 });
+  try { chmodSync(file, 0o600); } catch { /* Windows */ }
+  return t;
+}
+
+const home = (p: string) => (p.startsWith('~') ? join(homedir(), p.slice(1)) : p);
+
+export interface HttpFlags { host?: string; port?: string; roots?: string; project?: string; allowOrigin?: string; auth?: string; tokenFile?: string;
+  introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean }
+
+export async function serveHttp(f: HttpFlags): Promise<void> {
+  const host = f.host ?? '127.0.0.1';
+  const port = Number(f.port ?? DEFAULT_PORT);
+  const roots = (f.roots ?? homedir()).split(',').map(s => resolve(home(s.trim()))).filter(Boolean);
+  const projectArg = f.project ?? process.env.STOREBOUND_PROJECT;
+  const project = projectArg ? resolve(home(projectArg)) : null;
+  const allowOrigins = (f.allowOrigin ?? '').split(',').map(s => s.trim()).filter(Boolean);
+  const kind = f.auth ?? 'token';
+  let auth: HttpOptions['auth'];
+  if (kind === 'introspect') {
+    const { introspectUrl: url, introspectKeyFile: keyFile, resource, issuer } = f;
+    if (!url || !keyFile || !resource || !issuer) throw new Error('--auth introspect needs --introspect-url, --introspect-key-file, --resource and --issuer');
+    auth = { kind, url, key: readFileSync(home(keyFile), 'utf8').trim(), resource, issuer };
+  } else if (kind === 'token') {
+    const file = home(f.tokenFile ?? '~/.storebound/mcp-token');
+    auth = { kind, token: tokenFrom(file) };
+    console.error(`[storebound mcp] bearer token in ${file}`);
+  } else throw new Error('--auth token | introspect');
+  if (!['127.0.0.1', 'localhost', '::1'].includes(host) && kind === 'token' && !f.allowRemoteToken)
+    throw new Error(`--host ${host} listens beyond this machine: use --auth introspect (or --allow-remote-token behind your own TLS proxy)`);
+  const s = await startHttp({ host, port, roots, project, allowOrigins, auth });
+  console.error(`[storebound mcp] ${pkg.version} on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), auth ${kind}, roots ${roots.join(', ')}${project ? `, default project ${project}` : ''}`);
+}
diff --git a/tests/mcp-http.test.ts b/tests/mcp-http.test.ts
new file mode 100644
index 0000000..af1f031
--- /dev/null
+++ b/tests/mcp-http.test.ts
@@ -0,0 +1,105 @@
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdtempSync, rmSync, statSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { answer, insideRoots, introspectionOk, metadataUrl, originAllowed, projectFor, startHttp, tokenFrom } from '../cli/mcp-http';
+
+const root = mkdtempSync(join(tmpdir(), 'mcph-'));
+const app = mkdtempSync(join(root, 'app-'));
+afterAll(() => rmSync(root, { recursive: true, force: true }));
+
+describe('pure parts', () => {
+  test('roots and project', () => {
+    expect(insideRoots(app, [root])).toBe(true);
+    expect(insideRoots(join(root, '..'), [root])).toBe(false);
+    expect(projectFor(undefined, { roots: [root], project: null })).toEqual({ error: 'project: required (absolute path of the app folder)' });
+    expect(projectFor(undefined, { roots: [root], project: app })).toEqual({ dir: app });
+    expect(projectFor('rel/dir', { roots: [root], project: null })).toEqual({ error: 'project: must be an absolute path' });
+    expect('error' in projectFor(tmpdir(), { roots: [root], project: null })).toBe(true);
+    expect('error' in projectFor(join(root, 'missing'), { roots: [root], project: null })).toBe(true);
+    expect(projectFor(app, { roots: [root], project: null })).toEqual({ dir: app });
+  });
+  test('origin, metadata url, introspection', () => {
+    expect(originAllowed(undefined, [])).toBe(true);
+    expect(originAllowed('http://localhost:3000', [])).toBe(true);
+    expect(originAllowed('https://evil.example.com', [])).toBe(false);
+    expect(originAllowed('https://app.example.com', ['https://app.example.com'])).toBe(true);
+    expect(metadataUrl('https://sb.example.com/mcp')).toBe('https://sb.example.com/.well-known/oauth-protected-resource/mcp');
+    const r = 'https://sb.example.com/mcp';
+    expect(introspectionOk({ active: true, scope: 'mcp apps:read', aud: [r] }, r)).toBe(true);
+    expect(introspectionOk({ active: true, scope: 'apps:read', aud: [r] }, r)).toBe(false);
+    expect(introspectionOk({ active: true, scope: 'mcp', aud: ['https://other.example.com/mcp'] }, r)).toBe(false);
+    expect(introspectionOk({ active: false }, r)).toBe(false);
+  });
+  test('token file is made once, mode 600 off Windows', () => {
+    const f = join(root, 'tok', 'mcp-token');
+    const t = tokenFrom(f);
+    expect(t).toMatch(/^[0-9a-f]{64}$/);
+    expect(tokenFrom(f)).toBe(t);
+    if (process.platform !== 'win32') expect(statSync(f).mode & 0o777).toBe(0o600);
+  });
+  test('tools/list gains a required project; tools/call runs in it and drops it from the arguments', async () => {
+    const list = await answer({ jsonrpc: '2.0', id: 1, method: 'tools/list', params: {} }, { roots: [root], project: null });
+    const check = ((list!.result as { tools: { name: string; inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] }).tools).find(t => t.name === 'check')!;
+    expect(check.inputSchema.properties.project).toBeDefined();
+    expect(check.inputSchema.required).toContain('project');
+    let seen = null as { argv: string[]; cwd: string } | null;
+    const r = await answer({ jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: 'check', arguments: { project: app } } }, { roots: [root], project: null },
+      async (argv, cwd) => { seen = { argv, cwd }; return { code: 0, out: 'ok' }; });
+    expect(seen).toEqual({ argv: ['check'], cwd: app });
+    expect((r!.result as { isError: boolean }).isError).toBe(false);
+    const bad = await answer({ jsonrpc: '2.0', id: 3, method: 'tools/call', params: { name: 'check', arguments: {} } }, { roots: [root], project: null }, async () => { throw new Error('must not run'); });
+    expect((bad!.result as { isError: boolean }).isError).toBe(true);
+  });
+});
+
+describe('http server', () => {
+  const post = (port: number, body: unknown, headers: Record<string, string> = {}) =>
+    fetch(`http://127.0.0.1:${port}/mcp`, { method: 'POST', headers: { 'content-type': 'application/json', accept: 'application/json, text/event-stream', ...headers }, body: JSON.stringify(body) });
+
+  test('token auth: 401 without, initialize with, 202 for a notification, 405 for GET, 403 for a foreign origin', async () => {
+    const s = await startHttp({ host: '127.0.0.1', port: 0, roots: [root], project: null, allowOrigins: [], auth: { kind: 'token', token: 'a'.repeat(64) } });
+    try {
+      const auth = { authorization: `Bearer ${'a'.repeat(64)}` };
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' })).status).toBe(401);
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { authorization: 'Bearer nope' })).status).toBe(401);
+      const init = await post(s.port, { jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: '2025-06-18', capabilities: {}, clientInfo: { name: 't', version: '1' } } }, auth);
+      expect(init.status).toBe(200);
+      expect(((await init.json()) as { result: { protocolVersion: string } }).result.protocolVersion).toBe('2025-06-18');
+      expect((await post(s.port, { jsonrpc: '2.0', method: 'notifications/initialized' }, auth)).status).toBe(202);
+      expect((await fetch(`http://127.0.0.1:${s.port}/mcp`, { headers: auth })).status).toBe(405);
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { ...auth, origin: 'https://evil.example.com' })).status).toBe(403);
+      expect((await post(s.port, [{ jsonrpc: '2.0', id: 1, method: 'ping' }], auth)).status).toBe(400);
+    } finally { s.close(); }
+  });
+
+  test('introspect auth: metadata document, 401 names it, a valid token passes, a token without mcp scope does not', async () => {
+    const resource = 'https://sb.example.com/mcp';
+    let calls = 0;
+    const idp = createServer((req, res) => {
+      calls++;
+      let b = ''; req.on('data', c => (b += c)); req.on('end', () => {
+        const tok = new URLSearchParams(b).get('token');
+        const ok = req.headers.authorization === 'Bearer server-key';
+        res.setHeader('content-type', 'application/json');
+        res.end(JSON.stringify(!ok ? { active: false } : tok === 'good' ? { active: true, scope: 'mcp', aud: [resource] } : tok === 'noscope' ? { active: true, scope: 'apps', aud: [resource] } : { active: false }));
+      });
+    });
+    await new Promise<void>(r => idp.listen(0, '127.0.0.1', () => r()));
+    const ip = (idp.address() as { port: number }).port;
+    const s = await startHttp({ host: '127.0.0.1', port: 0, roots: [root], project: app, allowOrigins: [],
+      auth: { kind: 'introspect', url: `http://127.0.0.1:${ip}/introspect`, key: 'server-key', resource, issuer: 'https://idp.example.com' } });
+    try {
+      const meta = await fetch(`http://127.0.0.1:${s.port}/.well-known/oauth-protected-resource/mcp`);
+      expect(await meta.json()).toMatchObject({ resource, authorization_servers: ['https://idp.example.com'], scopes_supported: ['mcp'] });
+      const no = await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' });
+      expect(no.status).toBe(401);
+      expect(no.headers.get('www-authenticate')).toBe('Bearer resource_metadata="https://sb.example.com/.well-known/oauth-protected-resource/mcp"');
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { authorization: 'Bearer good' })).status).toBe(200);
+      expect((await post(s.port, { jsonrpc: '2.0', id: 2, method: 'ping' }, { authorization: 'Bearer good' })).status).toBe(200);
+      expect(calls).toBe(1); // cached
+      expect((await post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { authorization: 'Bearer noscope' })).status).toBe(401);
+    } finally { s.close(); idp.close(); }
+  });
+});

From 806899391718c912a8e6739efa49fecb9589d393 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 16:21:50 +0700
Subject: [PATCH 188/255] docs: mcp --http (shared server, project argument,
 token and introspection auth)

---
 CHANGELOG.md |  2 ++
 docs/mcp.md  | 28 ++++++++++++++++++++++++++++
 2 files changed, 30 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d65fcd..c0fea25 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `storebound mcp --http`: one Streamable HTTP MCP server that every agent session of a machine shares (no process per session). Each tool gets a `project` argument (absolute path inside `--roots`); auth is a local bearer token (`~/.storebound/mcp-token`, made on first start) or, for a server behind TLS, OAuth bearer tokens checked by introspection (RFC 7662) with protected resource metadata (RFC 9728). docs/mcp.md.
+
 ## 0.8.57 · 2026-10-27
 
 - `apple upload` finds the IPA of a build made with `--out`: `apple build` notes its IPA and out folder in `.storebound/last-apple-build.json`, and upload searches `--out` (new flag), then that last build's out, then `apple.build.out` / `build/ios`. When nothing is found, the error names every folder it searched and the last build's IPA.
diff --git a/docs/mcp.md b/docs/mcp.md
index 0e8b66c..efe9cb4 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -24,6 +24,34 @@ per-request `_meta`, `resultType`, cacheable `tools/list`) and, on the same proc
 Manual config for a tool that `install` does not know: command `bunx` with args `["storebound", "mcp"]` (or the
 absolute path of `bin/storebound` plus `mcp`).
 
+## One shared server over HTTP
+
+`storebound mcp --http` serves the same tools over Streamable HTTP (MCP 2025-06-18 and later) at `/mcp`, so every
+agent session of a machine shares one process instead of starting its own. POST carries one JSON-RPC message and gets
+one JSON answer; there is no server-initiated stream and no session state. A browser Origin other than localhost is
+refused unless `--allow-origin` names it.
+
+- Every tool gets a `project` argument: the absolute path of the app folder to run in. It must be inside `--roots`
+  (comma-separated, default the home folder). `--project <dir>` sets a default for calls without one.
+- `--auth token` (default): the server makes `~/.storebound/mcp-token` (mode 600) on first start and requires it as a
+  bearer token. Only localhost hosts are allowed with it.
+
+  ```bash
+  storebound mcp --http --port 7787
+  claude mcp add --transport http storebound http://127.0.0.1:7787/mcp --header "Authorization: Bearer $(cat ~/.storebound/mcp-token)"
+  ```
+- `--auth introspect`: for a server shared over the network behind TLS. Bearer tokens are OAuth 2.0 access tokens from
+  your authorization server, checked through its introspection endpoint (RFC 7662; this server authenticates with the
+  key in `--introspect-key-file`). A token must be active, carry the `mcp` scope and list `--resource` in `aud`
+  (RFC 8707). Without one the answer is 401 with `WWW-Authenticate: Bearer resource_metadata=...`, and
+  `/.well-known/oauth-protected-resource/mcp` names `--issuer` (RFC 9728).
+
+  ```bash
+  storebound mcp --http --host 0.0.0.0 --auth introspect --introspect-url https://auth.example.com/introspect \
+    --introspect-key-file ~/.storebound/introspect.key --resource https://mcp.example.com/mcp --issuer https://auth.example.com
+  ```
+- `/health` answers `{ ok, version }` without auth.
+
 ## Desktop machine interface
 
 `storebound serve --stdio` is what the desktop app (`apps/desktop`, in progress) runs as its sidecar: newline-delimited

From f2d7beb7cef2f030e59859f271b8c717a8540d36 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 16:31:41 +0700
Subject: [PATCH 189/255] mcp --http: no request timeout (tool calls can run
 for many minutes)

---
 cli/mcp-http.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 0c30e08..1fe8c03 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -165,6 +165,9 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
       return r ? send(res, 200, r) : send(res, 202);
     } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
   });
+  // a tool call can run for many minutes (check on a big project, uploads): Node's 300 s request timeout would cut it
+  server.requestTimeout = 0;
+  server.timeout = 0;
   return new Promise((ok, fail) => {
     server.once('error', fail);
     server.listen(o.port, o.host, () => {

From 164ba390ddd9a4dc98c15aa543d328d9ec4e783a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 17:29:28 +0700
Subject: [PATCH 190/255] check / scan: project walks skip dot folders,
 worktrees and git-ignored output, no stat per entry (244 s -> 46 s on a big
 game repo)

---
 CHANGELOG.md             |  1 +
 cli/lib/node-packages.ts | 12 +++++++-----
 cli/lib/privacy-files.ts | 22 +++++++++++----------
 cli/lib/scan/project.ts  | 30 ++++++++++++++--------------
 cli/lib/walk-skip.ts     | 42 ++++++++++++++++++++++++++++++++++++++++
 tests/walk-skip.test.ts  | 29 +++++++++++++++++++++++++++
 6 files changed, 106 insertions(+), 30 deletions(-)
 create mode 100644 cli/lib/walk-skip.ts
 create mode 100644 tests/walk-skip.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c0fea25..cd423a9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `check` and `scan` are fast on big repos: project walks skip dot folders (tool state, worktree copies), linked git worktrees and the folders git ignores (Pods, Carthage, SourcePackages and ios / android stay in), and read entry types from the listing instead of a stat per file. A game repo with worktree copies went from 244 s to 46 s for `check`.
 - `storebound mcp --http`: one Streamable HTTP MCP server that every agent session of a machine shares (no process per session). Each tool gets a `project` argument (absolute path inside `--roots`); auth is a local bearer token (`~/.storebound/mcp-token`, made on first start) or, for a server behind TLS, OAuth bearer tokens checked by introspection (RFC 7662) with protected resource metadata (RFC 9728). docs/mcp.md.
 
 ## 0.8.57 · 2026-10-27
diff --git a/cli/lib/node-packages.ts b/cli/lib/node-packages.ts
index ac44c79..ba58bb9 100644
--- a/cli/lib/node-packages.ts
+++ b/cli/lib/node-packages.ts
@@ -3,8 +3,9 @@
 // folders (package.json "workspaces", npm / yarn / pnpm-style array or { packages }, as Bun reads them) and local
 // SwiftPM packages (`.package(path:)` in a Package.swift, e.g. Capacitor 8's CapApp-SPM). Used by `privacy-manifest`
 // and `scan`. Read-only; never throws.
-import { existsSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import { type Dirent, existsSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
+import { skipDir } from './walk-skip';
 
 interface PkgJson { name?: string; dependencies?: Record<string, string>; workspaces?: string[] | { packages?: string[] } }
 const readJson = (p: string): PkgJson | null => { try { return JSON.parse(readFileSync(p, 'utf8')) as PkgJson; } catch { return null; } };
@@ -67,9 +68,10 @@ export function localSwiftPackages(dir: string): string[] {
   const skip = new Set(['Pods', 'build', 'DerivedData', 'node_modules', '.build', 'SourcePackages', '.git', 'xcuserdata']);
   const walk = (d: string, depth: number) => {
     if (depth > 4) return;
-    let names: string[] = [];
-    try { names = readdirSync(d); } catch { return; }
-    for (const n of names) {
+    let ents: Dirent[] = [];
+    try { ents = readdirSync(d, { withFileTypes: true }); } catch { return; }
+    for (const e of ents) {
+      const n = e.name;
       if (skip.has(n)) continue;
       const p = join(d, n);
       if (n === 'Package.swift') {
@@ -79,7 +81,7 @@ export function localSwiftPackages(dir: string): string[] {
           const target = resolve(d, m[1]!);
           if (isDir(target)) out.push(target);
         }
-      } else if (isDir(p) && !/\.(xc)?framework$|\.xcassets$/.test(n)) walk(p, depth + 1);
+      } else if ((e.isDirectory() || (e.isSymbolicLink() && isDir(p))) && !/\.(xc)?framework$|\.xcassets$/.test(n) && !skipDir(dir, p, n)) walk(p, depth + 1);
     }
   };
   walk(dir, 0);
diff --git a/cli/lib/privacy-files.ts b/cli/lib/privacy-files.ts
index 779b942..94a3450 100644
--- a/cli/lib/privacy-files.ts
+++ b/cli/lib/privacy-files.ts
@@ -2,9 +2,10 @@
 // .xcframework, SwiftPM checkouts, Capacitor / Cordova / React Native plugins in node_modules, a built .app's
 // Frameworks and bundles) and every PrivacyInfo.xcprivacy inside an .ipa or .app (XML or binary). Read-only; the
 // directory walk is bounded.
-import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { type Dirent, readdirSync, readFileSync, statSync } from 'node:fs';
 import { basename, join, relative, sep } from 'node:path';
 import { nativeIosPlugins } from './node-packages';
+import { skipDir } from './walk-skip';
 import { parseBinaryPlist } from './plist';
 import { type Manifest, manifestFromPlist, parseManifest, trackingIssue } from './privacy-manifest';
 import { zipEntries, zipRead } from './zip';
@@ -63,15 +64,16 @@ export function bundleTrackingIssues(list: BundleManifest[]): string[] {
 
 function walk(dir: string, visit: (p: string, isDir: boolean) => boolean | void, depth = 0, budget = { n: 60_000 }): void {
   if (depth > 16 || budget.n <= 0) return;
-  let names: string[] = [];
-  try { names = readdirSync(dir).sort(); } catch { return; }
-  for (const n of names) {
+  let ents: Dirent[] = [];
+  try { ents = readdirSync(dir, { withFileTypes: true }).sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0)); } catch { return; }
+  for (const e of ents) {
     if (--budget.n <= 0) return;
-    const p = join(dir, n);
-    let st;
-    try { st = statSync(p); } catch { continue; }
-    const descend = visit(p, st.isDirectory());
-    if (st.isDirectory() && descend !== false) walk(p, visit, depth + 1, budget);
+    const p = join(dir, e.name);
+    // the entry type comes with the listing (no stat per file: a stat each made a big tree take minutes on Windows)
+    let isDir = e.isDirectory();
+    if (e.isSymbolicLink()) { try { isDir = statSync(p).isDirectory(); } catch { continue; } }
+    const descend = visit(p, isDir);
+    if (isDir && descend !== false) walk(p, visit, depth + 1, budget);
   }
 }
 
@@ -102,7 +104,7 @@ export function projectSdkManifests(root: string): SdkManifest[] {
     try { out.push({ sdk, manifest: manifestFromBytes(relative(root, abs).split(sep).join('/'), readFileSync(abs)) }); } catch { /* unreadable */ }
   };
   walk(root, (p, isDir) => {
-    if (isDir) return !SKIP.has(basename(p));
+    if (isDir) return !SKIP.has(basename(p)) && !skipDir(root, p, basename(p));
     if (basename(p) !== 'PrivacyInfo.xcprivacy') return;
     const sdk = sdkOfProjectPath(relative(root, p).split(sep).join('/'));
     if (sdk) add(p, sdk);
diff --git a/cli/lib/scan/project.ts b/cli/lib/scan/project.ts
index f0b8f8b..01dc57a 100644
--- a/cli/lib/scan/project.ts
+++ b/cli/lib/scan/project.ts
@@ -3,9 +3,10 @@
 // Xcode INFOPLIST_KEY_* build settings, Expo app.json, Unity ProjectSettings and Godot export presets), entitlements,
 // privacy manifests, the Android manifest (permissions, services, target SDK) and the app's own source files.
 // Tolerant on purpose: an unreadable or odd file is skipped, never an exception.
-import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { type Dirent, readdirSync, readFileSync, statSync } from 'node:fs';
 import { basename, dirname, extname, join, relative, sep } from 'node:path';
 import { resolvePackage } from '../node-packages';
+import { skipDir } from '../walk-skip';
 import { isBuildCopyPath, type Manifest, parseManifest } from '../privacy-manifest';
 import { type DepRef, type Eco, matchesSdk, SDKS, type SdkDef } from './sdks';
 import { exportedIpas, ipaInfo } from '../xcode';
@@ -104,33 +105,32 @@ const SRC_EXT = new Set(['.swift', '.m', '.mm', '.h', '.kt', '.java', '.dart', '
 const MAX_FILES = 25_000;
 const MAX_TEXT = 1_500_000;
 
-/** A linked git worktree: its .git is a file pointing into <repo>/.git/worktrees/ (a submodule's points into modules/). */
-function isWorktree(dir: string): boolean {
-  try { return /^gitdir:.*[\\/]worktrees[\\/]/m.test(readFileSync(join(dir, '.git'), 'utf8')); } catch { return false; }
-}
-
 /** Every file under root (relative paths), skipping build output, dependency folders and VCS data. Native libraries
  *  (.so) of any size also go into `bins` when given (they are not read, only listed). */
 export function listFiles(root: string, bins?: string[]): string[] {
   const out: string[] = [];
   const walk = (dir: string, depth: number) => {
     if (depth > 14 || out.length >= MAX_FILES) return;
-    let names: string[];
-    try { names = readdirSync(dir); } catch { return; }
-    for (const n of names.sort()) {
+    let ents: Dirent[];
+    try { ents = readdirSync(dir, { withFileTypes: true }); } catch { return; }
+    for (const e of ents.sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0))) {
+      const n = e.name;
       if (SKIP_DIRS.has(n) || n === '.DS_Store') continue;
       const p = join(dir, n);
-      let st;
-      try { st = statSync(p); } catch { continue; }
-      if (st.isDirectory()) {
+      // the entry type comes with the listing; only files (for their size) and links get a stat
+      let isDir = e.isDirectory();
+      if (e.isSymbolicLink()) { try { isDir = statSync(p).isDirectory(); } catch { continue; } }
+      if (isDir) {
         // compiled frameworks are SDK binaries, not app code
         if (/\.(xc)?framework$|\.xcassets$|\.bundle$|\.app$|\.dSYM$/.test(n)) continue;
-        // a git worktree inside the project (another checkout of the same repo; submodules stay in)
-        if (isWorktree(p)) continue;
+        // dot folders, git worktrees (other checkouts of the same repo; submodules stay in), git-ignored output
+        if (skipDir(root, p, n)) continue;
         walk(p, depth + 1);
       } else {
         if (bins && n.endsWith('.so')) bins.push(relative(root, p).split(sep).join('/'));
-        if (st.size <= MAX_TEXT) out.push(relative(root, p).split(sep).join('/'));
+        let size = 0;
+        try { size = statSync(p).size; } catch { continue; }
+        if (size <= MAX_TEXT) out.push(relative(root, p).split(sep).join('/'));
       }
       if (out.length >= MAX_FILES) return;
     }
diff --git a/cli/lib/walk-skip.ts b/cli/lib/walk-skip.ts
new file mode 100644
index 0000000..2015fb9
--- /dev/null
+++ b/cli/lib/walk-skip.ts
@@ -0,0 +1,42 @@
+// Which folders a project walk (scan, check's privacy manifests) leaves out, beyond each walker's own name list:
+//  - dot folders below the root (.harness-worktrees, .wt-head, .ota-out, .native-build, ...): tool state, caches and
+//    whole copies of the repo, never app sources;
+//  - linked git worktrees (another checkout of the same repo);
+//  - folders git ignores at the root (release-out/, artifacts/, ...), asked once per root with
+//    `git ls-files --others --ignored --exclude-standard --directory`; SDK folders the privacy checks read (Pods,
+//    Carthage, SourcePackages) and generated native projects (ios, android) stay in even when ignored.
+// Seen live: a game repo with several worktrees and release folders made `check` walk ~60 000 files for 2.5 minutes.
+import { readFileSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
+import * as rt from './rt';
+
+// kept even when git ignores them: SDK folders the privacy checks read, and generated native projects (Expo prebuild)
+const KEEP = new Set(['Pods', 'Carthage', 'SourcePackages', 'ios', 'android', 'macos']);
+const cache = new Map<string, Set<string>>();
+
+/** A linked git worktree: its .git is a file pointing into <repo>/.git/worktrees/ (a submodule's points into modules/). */
+export function isWorktree(dir: string): boolean {
+  try { return /^gitdir:.*[\\/]worktrees[\\/]/m.test(readFileSync(join(dir, '.git'), 'utf8')); } catch { return false; }
+}
+
+/** Root-relative folders (with "/" separators, no trailing slash) git ignores in this repo; empty outside git. */
+export function gitIgnoredDirs(root: string): Set<string> {
+  const key = resolve(root);
+  const hit = cache.get(key);
+  if (hit) return hit;
+  const out = new Set<string>();
+  try {
+    const r = rt.spawnSync(['git', 'ls-files', '--others', '--ignored', '--exclude-standard', '--directory', '-z'], { cwd: key, timeout: 15_000 });
+    if (r.success) for (const p of r.stdout.toString('utf8').split('\0')) if (p.endsWith('/')) out.add(p.slice(0, -1));
+  } catch { /* no git */ }
+  cache.set(key, out);
+  return out;
+}
+
+/** Leave this folder out of a walk that started at root? */
+export function skipDir(root: string, abs: string, name: string): boolean {
+  if (KEEP.has(name)) return false;
+  if (name.startsWith('.') && resolve(abs) !== resolve(root)) return true;
+  if (gitIgnoredDirs(root).has(relative(root, abs).split(sep).join('/'))) return true;
+  return isWorktree(abs);
+}
diff --git a/tests/walk-skip.test.ts b/tests/walk-skip.test.ts
new file mode 100644
index 0000000..0dea615
--- /dev/null
+++ b/tests/walk-skip.test.ts
@@ -0,0 +1,29 @@
+import { afterAll, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { projectSdkManifests } from '../cli/lib/privacy-files';
+import { listFiles } from '../cli/lib/scan/project';
+import { skipDir } from '../cli/lib/walk-skip';
+
+const root = mkdtempSync(join(tmpdir(), 'walk-'));
+afterAll(() => rmSync(root, { recursive: true, force: true }));
+const put = (rel: string, text = 'x') => { mkdirSync(join(root, rel, '..'), { recursive: true }); writeFileSync(join(root, rel), text); };
+
+test('dot folders, linked worktrees and SDK folders', () => {
+  put('.harness-worktrees/a/src/App.swift');
+  put('wt/.git', 'gitdir: /repo/.git/worktrees/wt\n');
+  put('wt/src/App.swift');
+  put('src/App.swift');
+  put('ios/Pods/Some/PrivacyInfo.xcprivacy', '<plist><dict/></plist>');
+  expect(skipDir(root, join(root, '.harness-worktrees'), '.harness-worktrees')).toBe(true);
+  expect(skipDir(root, join(root, 'wt'), 'wt')).toBe(true);
+  expect(skipDir(root, join(root, 'src'), 'src')).toBe(false);
+  expect(skipDir(root, join(root, 'ios', 'Pods'), 'Pods')).toBe(false);
+  const files = listFiles(root);
+  expect(files).toContain('src/App.swift');
+  expect(files.some(f => f.startsWith('.harness-worktrees/') || f.startsWith('wt/'))).toBe(false);
+  // worktree copies would add their SDK manifests a second time
+  put('.wt-head/ios/Pods/Some/PrivacyInfo.xcprivacy', '<plist><dict/></plist>');
+  expect(projectSdkManifests(root).map(m => m.manifest.path)).toEqual(['ios/Pods/Some/PrivacyInfo.xcprivacy']);
+});

From a108aae53f92292539d0ba0add64533bd1300ff2 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 18:38:11 +0700
Subject: [PATCH 191/255] mcp --http: --broker-profiles (store keys from the
 broker vault, memory only), --read-only, project by folder name under the
 roots

---
 cli/data/flags.json    |  4 ++++
 cli/lib/broker.ts      | 32 +++++++++++++++++++++++++++
 cli/mcp-cmd.ts         |  1 +
 cli/mcp-http.ts        | 49 +++++++++++++++++++++++++++++++++++-------
 docs/mcp.md            |  6 ++++++
 tests/mcp-http.test.ts | 39 +++++++++++++++++++++++++++++++--
 6 files changed, 121 insertions(+), 10 deletions(-)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index d813c82..0879954 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -649,6 +649,7 @@
    "allow-origin",
    "allow-remote-token",
    "auth",
+   "broker-profiles",
    "host",
    "http",
    "introspect-key-file",
@@ -656,6 +657,7 @@
    "issuer",
    "port",
    "project",
+   "read-only",
    "resource",
    "roots",
    "token-file"
@@ -1194,6 +1196,7 @@
    "beta",
    "bid",
    "body",
+   "broker-profiles",
    "build",
    "build-number",
    "bundle-id",
@@ -1363,6 +1366,7 @@
    "q",
    "rating",
    "react-native",
+   "read-only",
    "reconvert",
    "refresh-profile",
    "region",
diff --git a/cli/lib/broker.ts b/cli/lib/broker.ts
index 41e171b..fb8f3b5 100644
--- a/cli/lib/broker.ts
+++ b/cli/lib/broker.ts
@@ -325,3 +325,35 @@ export async function playPreflight(command: string, root: string, pkg: string |
   if (o.dry) { for (const g of gaps) o.warn(`${g.message}. Fix: ${g.fix}`); return gaps; }
   throw new Error(`${command} stopped before any call to Google Play:\n${gapsText(gaps)}`);
 }
+
+export type StoreKind = 'asc-api-key' | 'play-service-account';
+
+/**
+ * A store credential of one profile from the broker's vault (GET /api/store-credentials/<profile>/<kind>, a key with
+ * the store-credentials scope): { secret, metadata }. For a long-running server (`mcp --http --broker-profiles`) that
+ * keeps no key files; null when the broker has none for that profile. Never logged.
+ */
+export async function brokerStoreCredential(cfg: BrokerConfig, profile: string, kind: StoreKind): Promise<{ secret: string; metadata: Record<string, unknown> } | null> {
+  const a = await request(cfg, 'GET', `/api/store-credentials/${encodeURIComponent(profile)}/${kind}`);
+  if (a.status === 404) return null;
+  if (a.status === 401 || a.status === 403) throw new BrokerRefused(`credential broker ${host(cfg)} refused store credentials for ${profile} (${a.status} ${errOf(a)}): the key needs the store-credentials scope and the profile`, a.status);
+  const j = a.json as { secret?: unknown; metadata?: unknown } | null;
+  if (a.status !== 200 || !j || typeof j.secret !== 'string') throw new BrokerUnavailable(`credential broker ${host(cfg)} -> ${a.status} for ${profile}/${kind}`);
+  return { secret: j.secret, metadata: j.metadata && typeof j.metadata === 'object' ? (j.metadata as Record<string, unknown>) : {} };
+}
+
+/** The env a child process needs to use these profiles from the broker (STOREBOUND_PROFILE_<NAME>_<KEY>, inline PEM /
+ *  JSON; see credentials.ts). Profiles the broker has nothing for are left out. */
+export async function brokerProfileEnv(cfg: BrokerConfig, profiles: string[]): Promise<Record<string, string>> {
+  const env: Record<string, string> = {};
+  const name = (p: string, k: string) => `STOREBOUND_PROFILE_${p.toUpperCase().replace(/[^A-Z0-9]/g, '_')}_${k}`;
+  await Promise.all(profiles.map(async p => {
+    const [asc, play] = await Promise.all([brokerStoreCredential(cfg, p, 'asc-api-key'), brokerStoreCredential(cfg, p, 'play-service-account')]);
+    if (asc) {
+      const { issuerId, keyId } = asc.metadata;
+      if (typeof issuerId === 'string' && typeof keyId === 'string') Object.assign(env, { [name(p, 'ASC_P8')]: asc.secret, [name(p, 'ASC_KEY_ID')]: keyId, [name(p, 'ASC_ISSUER_ID')]: issuerId });
+    }
+    if (play) env[name(p, 'PLAY_SERVICE_ACCOUNT')] = play.secret;
+  }));
+  return env;
+}
diff --git a/cli/mcp-cmd.ts b/cli/mcp-cmd.ts
index 390dcb2..e16bc25 100644
--- a/cli/mcp-cmd.ts
+++ b/cli/mcp-cmd.ts
@@ -9,5 +9,6 @@ export async function run(a: ReturnType<typeof parseArgs>): Promise<void> {
     host: a.get('host'), port: a.get('port'), roots: a.get('roots'), project: a.get('project'), allowOrigin: a.get('allow-origin'),
     auth: a.get('auth'), tokenFile: a.get('token-file'), introspectUrl: a.get('introspect-url'), introspectKeyFile: a.get('introspect-key-file'),
     resource: a.get('resource'), issuer: a.get('issuer'), allowRemoteToken: a.has('allow-remote-token'),
+    brokerProfiles: a.get('broker-profiles'), readOnly: a.has('read-only'),
   });
 }
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 1fe8c03..36ed269 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -25,6 +25,8 @@ import { homedir } from 'node:os';
 import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import { handle, LEGACY, PROTOCOL } from './mcp';
+import { TOOLS } from './mcp-tools';
+import { brokerConfig, brokerProfileEnv } from './lib/broker';
 import { runCommand } from './lib/runner';
 
 export const DEFAULT_PORT = 7787;
@@ -36,10 +38,14 @@ export interface HttpOptions {
   roots: string[];
   project: string | null;
   allowOrigins: string[];
+  /** Credential profiles to take from the broker vault for every call (no key files on this host). */
+  brokerProfiles?: string[];
+  /** Only the tools that change nothing (no dry_run tools at all). */
+  readOnly?: boolean;
   auth: { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
 }
 
-export const PROJECT_PROP = { type: 'string', description: 'Absolute path of the app folder (the one with storebound.config.ts) to run in. Required unless the server was started with --project.' } as const;
+export const PROJECT_PROP = { type: 'string', description: 'The app folder (the one with storebound.config.ts) to run in: an absolute path, or a folder name under the server roots. Required unless the server was started with --project.' } as const;
 
 /** Inside one of the roots (path compare, case-insensitive on Windows); no "..", no other drive. */
 export function insideRoots(dir: string, roots: string[]): boolean {
@@ -50,7 +56,12 @@ export function insideRoots(dir: string, roots: string[]): boolean {
 /** The folder a call runs in, or the reason it cannot run. */
 export function projectFor(arg: unknown, o: Pick<HttpOptions, 'roots' | 'project'>): { dir: string } | { error: string } {
   if (arg === undefined || arg === null || arg === '') return o.project ? { dir: o.project } : { error: 'project: required (absolute path of the app folder)' };
-  if (typeof arg !== 'string' || !isAbsolute(arg)) return { error: 'project: must be an absolute path' };
+  // a plain folder name is a project under one of the roots (a shared server keeps its checkouts there)
+  if (typeof arg === 'string' && /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/.test(arg)) {
+    const hit = o.roots.map(r => join(r, arg)).find(d => { try { return statSync(d).isDirectory(); } catch { return false; } });
+    return hit ? { dir: resolve(hit) } : { error: `project: no folder ${arg} under ${o.roots.join(', ')}` };
+  }
+  if (typeof arg !== 'string' || !isAbsolute(arg)) return { error: 'project: must be an absolute path, or a folder name under the roots' };
   if (!insideRoots(arg, o.roots)) return { error: `project: ${arg} is outside the server's roots (${o.roots.join(', ')})` };
   try { if (!statSync(arg).isDirectory()) return { error: `project: ${arg} is not a folder` }; } catch { return { error: `project: ${arg} does not exist` }; }
   return { dir: resolve(arg) };
@@ -116,10 +127,11 @@ async function readBody(req: IncomingMessage): Promise<string | null> {
 }
 
 /** One POST body -> the answer (null for a notification). tools/list gains `project`; tools/call runs in it. */
-export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions, 'roots' | 'project'>,
+export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions, 'roots' | 'project'> & { readOnly?: boolean },
   run: (argv: string[], cwd: string) => Promise<{ code: number; out: string }> = runIn): Promise<Record<string, unknown> | null> {
   const params = (msg.params ?? {}) as Record<string, unknown>;
   if (msg.method === 'tools/call') {
+    if (o.readOnly && TOOLS.find(t => t.name === params.name)?.write) return { jsonrpc: '2.0', id: msg.id ?? null, error: { code: -32602, message: `Unknown tool: ${String(params.name)} (this server is read-only)` } };
     const args = { ...((params.arguments ?? {}) as Record<string, unknown>) };
     const p = projectFor(args.project, o);
     if ('error' in p) return { jsonrpc: '2.0', id: msg.id ?? null, result: { content: [{ type: 'text', text: `Invalid arguments: ${p.error}` }], isError: true } };
@@ -128,7 +140,9 @@ export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions,
   }
   const r = await handle(msg as never);
   if (msg.method === 'tools/list' && r && typeof r.result === 'object') {
-    const tools = (r.result as { tools?: { inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] }).tools ?? [];
+    const res = r.result as { tools?: { name: string; annotations?: { readOnlyHint?: boolean }; inputSchema: { properties: Record<string, unknown>; required?: string[] } }[] };
+    if (o.readOnly) res.tools = (res.tools ?? []).filter(t => t.annotations?.readOnlyHint === true);
+    const tools = res.tools ?? [];
     for (const t of tools) {
       t.inputSchema.properties = { project: PROJECT_PROP, ...t.inputSchema.properties };
       if (!o.project) t.inputSchema.required = ['project', ...(t.inputSchema.required ?? [])];
@@ -137,13 +151,29 @@ export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions,
   return r;
 }
 
+let brokerEnv: { env: Promise<Record<string, string>>; until: number } | null = null;
+/** The broker profiles' credentials as child env, fetched at most every 10 minutes (memory only, never logged). */
+async function profileEnvFor(profiles: string[] | undefined): Promise<Record<string, string>> {
+  if (!profiles?.length) return {};
+  if (!brokerEnv || brokerEnv.until < Date.now()) {
+    const cfg = brokerConfig();
+    if (!cfg) throw new Error('--broker-profiles needs a credential broker (~/.storebound/broker.json or STOREBOUND_BROKER_URL)');
+    const env = brokerProfileEnv(cfg, profiles);
+    brokerEnv = { env, until: Date.now() + 600_000 };
+    env.catch(() => { brokerEnv = null; });
+  }
+  return brokerEnv.env;
+}
+let serverProfiles: string[] | undefined;
+
 async function runIn(argv: string[], cwd: string): Promise<{ code: number; out: string }> {
-  const r = runCommand(argv, { cwd, env: { STOREBOUND_MCP: '1' } });
+  const r = runCommand(argv, { cwd, env: { STOREBOUND_MCP: '1', ...(await profileEnvFor(serverProfiles)) } });
   const { code, out } = await r.result;
   return { code, out };
 }
 
 export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: number }> {
+  serverProfiles = o.brokerProfiles;
   const resourceMeta = o.auth.kind === 'introspect' ? metadataUrl(o.auth.resource) : null;
   const server = createServer(async (req, res) => {
     const path = (req.url ?? '/').split('?')[0];
@@ -190,7 +220,8 @@ export function tokenFrom(file: string): string {
 const home = (p: string) => (p.startsWith('~') ? join(homedir(), p.slice(1)) : p);
 
 export interface HttpFlags { host?: string; port?: string; roots?: string; project?: string; allowOrigin?: string; auth?: string; tokenFile?: string;
-  introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean }
+  introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean;
+  brokerProfiles?: string; readOnly?: boolean }
 
 export async function serveHttp(f: HttpFlags): Promise<void> {
   const host = f.host ?? '127.0.0.1';
@@ -212,6 +243,8 @@ export async function serveHttp(f: HttpFlags): Promise<void> {
   } else throw new Error('--auth token | introspect');
   if (!['127.0.0.1', 'localhost', '::1'].includes(host) && kind === 'token' && !f.allowRemoteToken)
     throw new Error(`--host ${host} listens beyond this machine: use --auth introspect (or --allow-remote-token behind your own TLS proxy)`);
-  const s = await startHttp({ host, port, roots, project, allowOrigins, auth });
-  console.error(`[storebound mcp] ${pkg.version} on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), auth ${kind}, roots ${roots.join(', ')}${project ? `, default project ${project}` : ''}`);
+  const brokerProfiles = (f.brokerProfiles ?? '').split(',').map(s => s.trim()).filter(Boolean);
+  if (brokerProfiles.length) await profileEnvFor(brokerProfiles).catch(e => { throw new Error(`--broker-profiles: ${(e as Error).message}`); });
+  const s = await startHttp({ host, port, roots, project, allowOrigins, auth, brokerProfiles, readOnly: !!f.readOnly });
+  console.error(`[storebound mcp] ${pkg.version} on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), auth ${kind}${f.readOnly ? ', read-only' : ''}${brokerProfiles.length ? `, broker profiles ${brokerProfiles.join(', ')}` : ''}, roots ${roots.join(', ')}${project ? `, default project ${project}` : ''}`);
 }
diff --git a/docs/mcp.md b/docs/mcp.md
index efe9cb4..dbbe6fd 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -50,6 +50,12 @@ refused unless `--allow-origin` names it.
   storebound mcp --http --host 0.0.0.0 --auth introspect --introspect-url https://auth.example.com/introspect \
     --introspect-key-file ~/.storebound/introspect.key --resource https://mcp.example.com/mcp --issuer https://auth.example.com
   ```
+- `--read-only`: only the tools that change nothing are listed and callable.
+- `--broker-profiles a,b`: a host that keeps no key files takes these credential profiles from the credential broker's
+  vault (`GET /api/store-credentials/<profile>/asc-api-key | play-service-account`, a key with the `store-credentials`
+  scope; docs/credential-broker.md). They reach each tool call as `STOREBOUND_PROFILE_<NAME>_*` env, held in memory for
+  10 minutes and never written. A project picks its profile as usual (the config's `account`).
+- `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
 - `/health` answers `{ ok, version }` without auth.
 
 ## Desktop machine interface
diff --git a/tests/mcp-http.test.ts b/tests/mcp-http.test.ts
index af1f031..7c11426 100644
--- a/tests/mcp-http.test.ts
+++ b/tests/mcp-http.test.ts
@@ -2,7 +2,7 @@ import { afterAll, describe, expect, test } from 'bun:test';
 import { mkdtempSync, rmSync, statSync } from 'node:fs';
 import { createServer } from 'node:http';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { basename, join } from 'node:path';
 import { answer, insideRoots, introspectionOk, metadataUrl, originAllowed, projectFor, startHttp, tokenFrom } from '../cli/mcp-http';
 
 const root = mkdtempSync(join(tmpdir(), 'mcph-'));
@@ -15,7 +15,11 @@ describe('pure parts', () => {
     expect(insideRoots(join(root, '..'), [root])).toBe(false);
     expect(projectFor(undefined, { roots: [root], project: null })).toEqual({ error: 'project: required (absolute path of the app folder)' });
     expect(projectFor(undefined, { roots: [root], project: app })).toEqual({ dir: app });
-    expect(projectFor('rel/dir', { roots: [root], project: null })).toEqual({ error: 'project: must be an absolute path' });
+    expect(projectFor('rel/dir', { roots: [root], project: null })).toEqual({ error: 'project: must be an absolute path, or a folder name under the roots' });
+    expect(projectFor(basename(app), { roots: [root], project: null })).toEqual({ dir: app });
+    expect('error' in projectFor('nope', { roots: [root], project: null })).toBe(true);
+    expect(projectFor(app.split(/[\/]/).pop(), { roots: [root], project: null })).toEqual({ dir: app });
+    expect('error' in projectFor('nope', { roots: [root], project: null })).toBe(true);
     expect('error' in projectFor(tmpdir(), { roots: [root], project: null })).toBe(true);
     expect('error' in projectFor(join(root, 'missing'), { roots: [root], project: null })).toBe(true);
     expect(projectFor(app, { roots: [root], project: null })).toEqual({ dir: app });
@@ -103,3 +107,34 @@ describe('http server', () => {
     } finally { s.close(); idp.close(); }
   });
 });
+
+describe('read-only and broker profiles', () => {
+  test('read-only lists only read tools and refuses a write tool', async () => {
+    const list = await answer({ jsonrpc: '2.0', id: 1, method: 'tools/list', params: {} }, { roots: [root], project: app, readOnly: true });
+    const tools = (list!.result as { tools: { name: string; annotations: { readOnlyHint: boolean } }[] }).tools;
+    expect(tools.length).toBeGreaterThan(5);
+    expect(tools.every(t => t.annotations.readOnlyHint)).toBe(true);
+    const w = await answer({ jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: 'play_listing', arguments: {} } }, { roots: [root], project: app, readOnly: true }, async () => { throw new Error('must not run'); });
+    expect((w as { error: { message: string } }).error.message).toContain('read-only');
+  });
+  test('broker store credentials become STOREBOUND_PROFILE_<NAME>_* env', async () => {
+    const { brokerProfileEnv } = await import('../cli/lib/broker');
+    const srv = createServer((req, res) => {
+      res.setHeader('content-type', 'application/json');
+      const m = /^\/api\/store-credentials\/([^/]+)\/([^/]+)$/.exec(req.url ?? '');
+      if (req.headers.authorization !== 'Bearer kkkkkkkk') { res.statusCode = 401; return res.end('{}'); }
+      if (m?.[1] === 'teamA' && m[2] === 'asc-api-key') return res.end(JSON.stringify({ secret: '-----BEGIN PRIVATE KEY-----\nx\n-----END PRIVATE KEY-----', metadata: { issuerId: 'iss', keyId: 'KEY' } }));
+      if (m?.[1] === 'teamA' && m[2] === 'play-service-account') return res.end(JSON.stringify({ secret: '{"client_email":"a@example.com"}', metadata: {} }));
+      res.statusCode = 404; res.end('{"error":"err_not_found"}');
+    });
+    await new Promise<void>(r => srv.listen(0, '127.0.0.1', () => r()));
+    const port = (srv.address() as { port: number }).port;
+    const keyFile = join(root, 'broker.key');
+    (await import('node:fs')).writeFileSync(keyFile, 'kkkkkkkk', { mode: 0o600 });
+    try {
+      const env = await brokerProfileEnv({ url: `http://127.0.0.1:${port}`, keyFile, account: null, from: 'test' }, ['teamA', 'other']);
+      expect(Object.keys(env).sort()).toEqual(['STOREBOUND_PROFILE_TEAMA_ASC_ISSUER_ID', 'STOREBOUND_PROFILE_TEAMA_ASC_KEY_ID', 'STOREBOUND_PROFILE_TEAMA_ASC_P8', 'STOREBOUND_PROFILE_TEAMA_PLAY_SERVICE_ACCOUNT']);
+      expect(env.STOREBOUND_PROFILE_TEAMA_ASC_KEY_ID).toBe('KEY');
+    } finally { srv.close(); }
+  });
+});

From 398d8cd375a49afccfe51e7d9ff3ffcf9839dbe8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 18:41:35 +0700
Subject: [PATCH 192/255] storebound 0.8.58: version in package.json and every
 copy, CHANGELOG 0.8.58 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index b247852..43b2bab 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.57",
+      "version": "0.8.58",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index e9ef474..51296bb 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 300ce52..00cc3f1 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cd423a9..f715ce5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.58 · 2026-10-29
+
 - `check` and `scan` are fast on big repos: project walks skip dot folders (tool state, worktree copies), linked git worktrees and the folders git ignores (Pods, Carthage, SourcePackages and ios / android stay in), and read entry types from the listing instead of a stat per file. A game repo with worktree copies went from 244 s to 46 s for `check`.
 - `storebound mcp --http`: one Streamable HTTP MCP server that every agent session of a machine shares (no process per session). Each tool gets a `project` argument (absolute path inside `--roots`); auth is a local bearer token (`~/.storebound/mcp-token`, made on first start) or, for a server behind TLS, OAuth bearer tokens checked by introspection (RFC 7662) with protected resource metadata (RFC 9728). docs/mcp.md.
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 428e5a1..7b9f632 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 9e31a73..496304a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.57"
+version = "0.8.58"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 6912486..05e2417 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.57"
+version = "0.8.58"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 04dc72a..deaff30 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 2a9f249..fface3f 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 8c4bf4c..59d9754 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.57",
+  "version": "0.8.58",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From c500866295fc6db877f3639ff8d164254c66d29a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 18:54:58 +0700
Subject: [PATCH 193/255] mcp --http --public: key-less public server (skills,
 pitfalls, limits, listing lint, App Store search), rate limit, 64 KB bodies

---
 CHANGELOG.md             |   2 +
 cli/data/flags.json      |   8 +-
 cli/mcp-cmd.ts           |   1 +
 cli/mcp-http.ts          |  53 +++++--
 cli/mcp-public.ts        | 317 +++++++++++++++++++++++++++++++++++++++
 cli/mcp.ts               |  21 ++-
 docs/mcp.md              |  38 +++++
 tests/mcp-public.test.ts | 270 +++++++++++++++++++++++++++++++++
 8 files changed, 695 insertions(+), 15 deletions(-)
 create mode 100644 cli/mcp-public.ts
 create mode 100644 tests/mcp-public.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f715ce5..0102a95 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `storebound mcp --http --public`: a public, key-less MCP server (no sign-in, no store credentials, no project folders, no child processes, read-only). Tools: `skills_list`, `skill_get`, `pitfalls_search`, `store_limits`, `listing_lint` and `aso_search` (the public iTunes Search API, the only network call). Rate limit per client (`--rate`, 429 with Retry-After; `--trust-proxy` for X-Forwarded-For), 64 KB request bodies, CORS preflight. docs/mcp.md.
+
 ## 0.8.58 · 2026-10-29
 
 - `check` and `scan` are fast on big repos: project walks skip dot folders (tool state, worktree copies), linked git worktrees and the folders git ignores (Pods, Carthage, SourcePackages and ios / android stay in), and read entry types from the listing instead of a stat per file. A game repo with worktree copies went from 244 s to 46 s for `check`.
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 0879954..3ef2998 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -657,10 +657,13 @@
    "issuer",
    "port",
    "project",
+   "public",
+   "rate",
    "read-only",
    "resource",
    "roots",
-   "token-file"
+   "token-file",
+   "trust-proxy"
   ],
   "onboard": [
    "accounts",
@@ -1363,7 +1366,9 @@
    "propose",
    "prune",
    "prune-languages",
+   "public",
    "q",
+   "rate",
    "rating",
    "react-native",
    "read-only",
@@ -1421,6 +1426,7 @@
    "tracking-domains",
    "traffic",
    "translate",
+   "trust-proxy",
    "type",
    "udid",
    "unanswered",
diff --git a/cli/mcp-cmd.ts b/cli/mcp-cmd.ts
index e16bc25..24dde9d 100644
--- a/cli/mcp-cmd.ts
+++ b/cli/mcp-cmd.ts
@@ -10,5 +10,6 @@ export async function run(a: ReturnType<typeof parseArgs>): Promise<void> {
     auth: a.get('auth'), tokenFile: a.get('token-file'), introspectUrl: a.get('introspect-url'), introspectKeyFile: a.get('introspect-key-file'),
     resource: a.get('resource'), issuer: a.get('issuer'), allowRemoteToken: a.has('allow-remote-token'),
     brokerProfiles: a.get('broker-profiles'), readOnly: a.has('read-only'),
+    public: a.has('public'), rate: a.get('rate'), trustProxy: a.has('trust-proxy'),
   });
 }
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 36ed269..124c3bc 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -2,6 +2,7 @@
 // machine (or one host serves a whole team) instead of one stdio process per session.
 //   storebound mcp --http [--host 127.0.0.1] [--port 7787] [--roots <dir,dir>] [--project <dir>]
 //                         [--auth token|introspect] [--token-file ~/.storebound/mcp-token]
+//   storebound mcp --http --public [--port 7788] [--host 127.0.0.1] [--rate 60] [--trust-proxy]   (see below)
 //                         [--introspect-url <url> --introspect-key-file <file> --resource <url> --issuer <url>]
 // Transport (https://modelcontextprotocol.io/specification/2025-06-18/basic/transports#streamable-http): one endpoint,
 // /mcp. POST carries one JSON-RPC message and gets one JSON answer (202 for a notification); GET and DELETE are 405
@@ -9,6 +10,9 @@
 // Origin header, when sent, must be a localhost origin unless --allow-origin names it (DNS rebinding).
 // Project: every tool gets a `project` argument, the absolute path of the app folder the CLI runs in. It must be inside
 // --roots (default: the home folder); --project (or STOREBOUND_PROJECT) is the default when a call has none.
+// Public (--public): the key-less server behind a public URL. No sign-in, no project, no store credentials; it serves only the
+// read-only tools of mcp-public.ts (skills, pitfalls, limits, listing lint, App Store search), never starts a process, rate
+// limited per client (--rate per minute, 429 + Retry-After; --trust-proxy reads the first X-Forwarded-For entry), body <= 64 KB.
 // Auth (every request to /mcp):
 //   token (default): `Authorization: Bearer <token>`, the token in --token-file (made with mode 600 on first start;
 //     never printed). Clients: claude mcp add --transport http storebound http://127.0.0.1:7787/mcp
@@ -25,12 +29,17 @@ import { homedir } from 'node:os';
 import { dirname, isAbsolute, join, relative, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import { handle, LEGACY, PROTOCOL } from './mcp';
+import { clientKey, createLimiter, publicSurface, type PublicDeps } from './mcp-public';
 import { TOOLS } from './mcp-tools';
 import { brokerConfig, brokerProfileEnv } from './lib/broker';
 import { runCommand } from './lib/runner';
 
 export const DEFAULT_PORT = 7787;
+export const PUBLIC_PORT = 7788;
 const MAX_BODY = 4 * 1024 * 1024;
+/** Public mode: one JSON-RPC message of a read-only tool never needs more. */
+export const PUBLIC_MAX_BODY = 64 * 1024;
+export const PUBLIC_DEFAULT_RATE = 60;
 
 export interface HttpOptions {
   host: string;
@@ -42,7 +51,9 @@ export interface HttpOptions {
   brokerProfiles?: string[];
   /** Only the tools that change nothing (no dry_run tools at all). */
   readOnly?: boolean;
-  auth: { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
+  /** Public key-less mode (`--public`): auth kind 'none', the tool surface of mcp-public.ts, a rate limit per client. */
+  public?: { rate: number; trustProxy: boolean } & PublicDeps;
+  auth: { kind: 'none' } | { kind: 'token'; token: string } | { kind: 'introspect'; url: string; key: string; resource: string; issuer: string };
 }
 
 export const PROJECT_PROP = { type: 'string', description: 'The app folder (the one with storebound.config.ts) to run in: an absolute path, or a folder name under the server roots. Required unless the server was started with --project.' } as const;
@@ -96,7 +107,7 @@ const bearer = (req: IncomingMessage): string | null => { const h = req.headers.
 const cache = new Map<string, { ok: boolean; until: number }>();
 async function authorized(req: IncomingMessage, o: HttpOptions): Promise<boolean> {
   const t = bearer(req);
-  if (!t) return false;
+  if (!t || o.auth.kind === 'none') return false;
   if (o.auth.kind === 'token') {
     const a = createHash('sha256').update(t).digest(), b = createHash('sha256').update(o.auth.token).digest();
     return a.equals(b);
@@ -115,14 +126,14 @@ async function authorized(req: IncomingMessage, o: HttpOptions): Promise<boolean
   return ok;
 }
 
-function send(res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}): void {
+function sendRaw(res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}): void {
   res.writeHead(status, { 'cache-control': 'no-store', ...(body === undefined ? {} : { 'content-type': 'application/json' }), ...headers });
   res.end(body === undefined ? undefined : JSON.stringify(body));
 }
 
-async function readBody(req: IncomingMessage): Promise<string | null> {
+async function readBody(req: IncomingMessage, max = MAX_BODY): Promise<string | null> {
   let size = 0; const parts: Buffer[] = [];
-  for await (const c of req) { size += (c as Buffer).length; if (size > MAX_BODY) return null; parts.push(c as Buffer); }
+  for await (const c of req) { size += (c as Buffer).length; if (size > max) return null; parts.push(c as Buffer); }
   return Buffer.concat(parts).toString('utf8');
 }
 
@@ -151,6 +162,9 @@ export async function answer(msg: Record<string, unknown>, o: Pick<HttpOptions,
   return r;
 }
 
+/** Public mode never runs the CLI: a call that would is a bug, not a request. */
+const noRun = async (): Promise<{ code: number; out: string }> => { throw new Error('public mode does not run commands'); };
+
 let brokerEnv: { env: Promise<Record<string, string>>; until: number } | null = null;
 /** The broker profiles' credentials as child env, fetched at most every 10 minutes (memory only, never logged). */
 async function profileEnvFor(profiles: string[] | undefined): Promise<Record<string, string>> {
@@ -174,6 +188,11 @@ async function runIn(argv: string[], cwd: string): Promise<{ code: number; out:
 
 export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: number }> {
   serverProfiles = o.brokerProfiles;
+  if (o.auth.kind === 'none' && !o.public) throw new Error('auth none is only for --public');
+  const pub = o.public ? { limiter: createLimiter(o.public.rate), surface: publicSurface(o.public), trustProxy: o.public.trustProxy } : null;
+  // no ambient credential in public mode, so any browser origin may call it
+  const cors: Record<string, string> = pub ? { 'access-control-allow-origin': '*', 'access-control-allow-methods': 'POST, OPTIONS', 'access-control-allow-headers': 'content-type, accept, mcp-protocol-version', 'access-control-max-age': '86400' } : {};
+  const send = (res: ServerResponse, status: number, body?: unknown, headers: Record<string, string> = {}) => sendRaw(res, status, body, { ...cors, ...headers });
   const resourceMeta = o.auth.kind === 'introspect' ? metadataUrl(o.auth.resource) : null;
   const server = createServer(async (req, res) => {
     const path = (req.url ?? '/').split('?')[0];
@@ -181,17 +200,21 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
       return send(res, 200, { resource: o.auth.resource, authorization_servers: [o.auth.issuer], bearer_methods_supported: ['header'], scopes_supported: ['mcp'], resource_name: 'storebound' });
     if (path === '/health' && req.method === 'GET') return send(res, 200, { ok: true, version: pkg.version });
     if (path !== '/mcp') return send(res, 404, { error: 'not found' });
-    if (!originAllowed(req.headers.origin, o.allowOrigins)) return send(res, 403, { error: 'origin not allowed' });
-    if (!(await authorized(req, o)))
+    if (pub) {
+      if (req.method === 'OPTIONS') return send(res, 204);
+      const hit = pub.limiter.hit(clientKey(req.headers['x-forwarded-for'], req.socket.remoteAddress, pub.trustProxy));
+      if (!hit.ok) return send(res, 429, { error: 'rate limit exceeded' }, { 'retry-after': String(hit.retryAfter) });
+    } else if (!originAllowed(req.headers.origin, o.allowOrigins)) return send(res, 403, { error: 'origin not allowed' });
+    if (!pub && !(await authorized(req, o)))
       return send(res, 401, { error: 'unauthorized' }, { 'www-authenticate': resourceMeta ? `Bearer resource_metadata="${resourceMeta}"` : 'Bearer' });
     if (req.method !== 'POST') return send(res, 405, { error: 'POST only (no server-initiated stream)' }, { allow: 'POST' });
-    const body = await readBody(req);
+    const body = await readBody(req, pub ? PUBLIC_MAX_BODY : MAX_BODY);
     if (body === null) return send(res, 413, { error: 'body too large' });
     let msg: unknown;
     try { msg = JSON.parse(body); } catch { return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Parse error' } }); }
     if (Array.isArray(msg) || typeof msg !== 'object' || msg === null) return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32600, message: 'One JSON-RPC message per request' } });
     try {
-      const r = await answer(msg as Record<string, unknown>, o);
+      const r = pub ? await handle(msg as never, noRun, pub.surface) : await answer(msg as Record<string, unknown>, o);
       return r ? send(res, 200, r) : send(res, 202);
     } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
   });
@@ -221,10 +244,20 @@ const home = (p: string) => (p.startsWith('~') ? join(homedir(), p.slice(1)) : p
 
 export interface HttpFlags { host?: string; port?: string; roots?: string; project?: string; allowOrigin?: string; auth?: string; tokenFile?: string;
   introspectUrl?: string; introspectKeyFile?: string; resource?: string; issuer?: string; allowRemoteToken?: boolean;
-  brokerProfiles?: string; readOnly?: boolean }
+  brokerProfiles?: string; readOnly?: boolean; public?: boolean; rate?: string; trustProxy?: boolean }
 
 export async function serveHttp(f: HttpFlags): Promise<void> {
   const host = f.host ?? '127.0.0.1';
+  if (f.public) {
+    const bad = (['auth', 'tokenFile', 'roots', 'project', 'brokerProfiles', 'allowOrigin', 'introspectUrl'] as const).filter(k => f[k] !== undefined);
+    if (bad.length || f.readOnly) throw new Error('--public takes no credentials or project: do not combine it with --auth, --token-file, --roots, --project, --broker-profiles, --allow-origin, --introspect-* or --read-only');
+    const rate = Number(f.rate ?? PUBLIC_DEFAULT_RATE);
+    if (!Number.isInteger(rate) || rate < 1) throw new Error('--rate: requests per minute per client, a whole number >= 1');
+    const port = Number(f.port ?? PUBLIC_PORT);
+    const s = await startHttp({ host, port, roots: [], project: null, allowOrigins: [], auth: { kind: 'none' }, public: { rate, trustProxy: !!f.trustProxy } });
+    console.error(`[storebound mcp] ${pkg.version} PUBLIC key-less server on http://${host}:${s.port}/mcp (MCP ${PROTOCOL}, legacy ${LEGACY.join(', ')}), read-only, ${rate} requests/min per client${f.trustProxy ? ', X-Forwarded-For trusted' : ''}`);
+    return;
+  }
   const port = Number(f.port ?? DEFAULT_PORT);
   const roots = (f.roots ?? homedir()).split(',').map(s => resolve(home(s.trim()))).filter(Boolean);
   const projectArg = f.project ?? process.env.STOREBOUND_PROJECT;
diff --git a/cli/mcp-public.ts b/cli/mcp-public.ts
new file mode 100644
index 0000000..81387b4
--- /dev/null
+++ b/cli/mcp-public.ts
@@ -0,0 +1,317 @@
+// The public, key-less MCP surface (`storebound mcp --http --public`): what anyone may call without signing in.
+// Everything is pure and in-process. This module never reads store credentials, project folders or the cwd, never
+// starts a child process (no runner, no CLI) and makes one kind of network call: the public iTunes Search API
+// (aso_search). The only files it reads are the skills/ folder of the storebound package itself.
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import type { Surface } from './mcp';
+import { APPLE_LIMITS, PLAY_LIMITS } from './lib/copy';
+import { parseFrontMatter } from './lib/frontmatter';
+import { appleLocaleIssues, playLangIssues } from './lib/listing-rules';
+import { IMAGE_SPECS, PREVIEW_RULES, VIDEO_TARGETS } from './shots/spec';
+
+export const PUBLIC_INSTRUCTIONS = [
+  'This is the public, key-less storebound server: anyone may use it, it needs no sign-in and it never touches store accounts, keys or project files.',
+  'It is read-only and offers store knowledge: the skills (skills_list, skill_get), known store pitfalls (pitfalls_search), listing and screenshot limits (store_limits), a text linter for App Store / Google Play listings (listing_lint) and a public App Store search (aso_search).',
+  'For real store work (builds, uploads, listings, releases) install the toolchain: `npx storebound` (see https://storebound.dev) and use its own MCP server, `npx storebound mcp`.',
+].join(' ');
+
+export interface PublicDeps {
+  /** The folder with <name>/SKILL.md files. Default: skills/ of the storebound package that contains this file. */
+  skillsDir?: string;
+  /** iTunes Search API endpoint (tests point it at a local fake). */
+  searchBase?: string;
+  fetch?: typeof fetch;
+}
+
+export interface PublicResult { text: string; data?: unknown; isError?: boolean }
+export interface PublicTool {
+  name: string; title: string; description: string;
+  inputSchema: { type: 'object'; properties: Record<string, Schema>; required?: string[]; additionalProperties: false };
+  network?: boolean;
+  run(input: Record<string, unknown>): Promise<PublicResult> | PublicResult;
+}
+export interface Schema { type: string; description?: string; enum?: string[]; pattern?: string; minLength?: number; maxLength?: number; minimum?: number; maximum?: number;
+  properties?: Record<string, Schema>; additionalProperties?: boolean }
+
+export const SEARCH_BASE = 'https://itunes.apple.com/search';
+const MAX_TEXT = 40_000;
+const SKILL_NAME = /^[a-z0-9-]+$/;
+
+// ---- input validation (JSON-Schema subset these tools use) ----
+
+export function validatePublic(schema: Schema, input: unknown, path = ''): string[] {
+  const e: string[] = [];
+  if (input === undefined || input === null) input = {};
+  if (typeof input !== 'object' || Array.isArray(input)) return [`${path || 'arguments'}: must be an object`];
+  const i = input as Record<string, unknown>;
+  const props = schema.properties ?? {};
+  for (const r of (schema as { required?: string[] }).required ?? []) if (i[r] === undefined) e.push(`${path}${r}: required`);
+  for (const [k, v] of Object.entries(i)) {
+    const p = props[k];
+    if (!p) { e.push(`${path}${k}: unknown argument`); continue; }
+    if (v === undefined) continue;
+    if (p.type === 'object') { e.push(...validatePublic(p, v, `${path}${k}.`)); continue; }
+    if (p.type === 'string') {
+      if (typeof v !== 'string') { e.push(`${path}${k}: must be a string`); continue; }
+      if (p.enum && !p.enum.includes(v)) e.push(`${path}${k}: one of ${p.enum.join(', ')}`);
+      if (p.pattern && !new RegExp(p.pattern).test(v)) e.push(`${path}${k}: does not match ${p.pattern}`);
+      if (p.minLength !== undefined && v.length < p.minLength) e.push(`${path}${k}: at least ${p.minLength} characters`);
+      if (p.maxLength !== undefined && v.length > p.maxLength) e.push(`${path}${k}: at most ${p.maxLength} characters`);
+    } else if (p.type === 'integer') {
+      if (typeof v !== 'number' || !Number.isInteger(v)) { e.push(`${path}${k}: must be an integer`); continue; }
+      if (p.minimum !== undefined && v < p.minimum) e.push(`${path}${k}: >= ${p.minimum}`);
+      if (p.maximum !== undefined && v > p.maximum) e.push(`${path}${k}: <= ${p.maximum}`);
+    }
+  }
+  return e;
+}
+
+const clipText = (s: string, max = MAX_TEXT): string => (s.length <= max ? s : `${s.slice(0, max)}\n[... ${s.length - max} characters cut]`);
+const oneLine = (s: string, max: number): string => { const t = s.replace(/\s+/g, ' ').trim(); return t.length <= max ? t : `${t.slice(0, max - 1)}…`; };
+
+// ---- skills (from the package) ----
+
+function packageSkillsDir(): string {
+  const start = dirname(fileURLToPath(import.meta.url));
+  for (let d = start; ; d = dirname(d)) {
+    try {
+      const pkg = JSON.parse(readFileSync(join(d, 'package.json'), 'utf8')) as { name?: string };
+      if (pkg.name === 'storebound') return join(d, 'skills');
+    } catch { /* keep looking */ }
+    if (dirname(d) === d) break;
+  }
+  return resolve(start, '..', 'skills');
+}
+
+export interface SkillInfo { name: string; description: string; text: string }
+
+export function loadSkills(dir: string): SkillInfo[] {
+  if (!existsSync(dir)) return [];
+  const out: SkillInfo[] = [];
+  for (const name of readdirSync(dir).filter(n => SKILL_NAME.test(n)).sort()) {
+    let text: string;
+    try { text = readFileSync(join(dir, name, 'SKILL.md'), 'utf8'); } catch { continue; }
+    const { data } = parseFrontMatter(text);
+    out.push({ name, description: oneLine(typeof data.description === 'string' ? data.description : '', 400), text });
+  }
+  return out;
+}
+
+// ---- pitfalls ----
+
+export interface Section { heading: string; body: string }
+export function sectionsOf(md: string): Section[] {
+  const parts = md.split(/^## /m).slice(1);
+  return parts.map(p => { const nl = p.indexOf('\n'); return { heading: (nl < 0 ? p : p.slice(0, nl)).trim(), body: nl < 0 ? '' : p.slice(nl + 1).trim() }; });
+}
+
+const APPLE_RE = /app store|apple|testflight|\bios\b|\basc\b|xcode|itunes/i;
+const PLAY_RE = /google play|\bplay\b|\bgradle\b|\baab\b|android/i;
+
+export function searchSections(sections: Section[], query: string, store?: 'apple' | 'play', max = 8): { heading: string; excerpt: string; score: number }[] {
+  const words = [...new Set(query.toLowerCase().split(/[^\p{L}\p{N}]+/u).filter(w => w.length > 1))].slice(0, 12);
+  if (!words.length) return [];
+  const scored = sections.map(s => {
+    const head = s.heading.toLowerCase(), body = s.body.toLowerCase();
+    let score = 0;
+    for (const w of words) { if (head.includes(w)) score += 5; const n = body.split(w).length - 1; score += Math.min(n, 5); }
+    return { s, score };
+  }).filter(x => x.score > 0);
+  const filtered = scored.filter(({ s }) => {
+    if (!store) return true;
+    const t = `${s.heading} ${s.body}`;
+    const a = APPLE_RE.test(t), p = PLAY_RE.test(t);
+    return store === 'apple' ? a || !p : p || !a;
+  });
+  return filtered.sort((a, b) => b.score - a.score).slice(0, max).map(({ s, score }) => {
+    // the excerpt starts at the first matching line
+    const lines = s.body.split('\n');
+    const at = Math.max(0, lines.findIndex(l => words.some(w => l.toLowerCase().includes(w))));
+    return { heading: s.heading, score, excerpt: clipText(lines.slice(at).join('\n'), 1200) };
+  });
+}
+
+// ---- limits ----
+
+export function limits(store?: 'apple' | 'play'): Record<string, unknown> {
+  const specs = (s: 'apple' | 'play') => Object.entries(IMAGE_SPECS).filter(([, v]) => v.store === s).map(([key, v]) => ({
+    key, type: v.type, label: v.label, acceptedPixelSizes: v.sizes.map(([w, h]) => `${w}x${h}`), perSet: `${v.min}-${v.max}`,
+    maxBytes: v.maxBytes, alpha: v.alpha, ...(v.landscapeOnly ? { landscapeOnly: true } : {}),
+  }));
+  const previews = (s: 'apple' | 'play') => Object.values(VIDEO_TARGETS).filter(v => v.store === s).map(v => ({ label: v.label, size: `${v.w}x${v.h}` }));
+  const apple = {
+    textLimitsCharacters: { ...APPLE_LIMITS },
+    keywordField: ['at most 100 characters (characters, not bytes)', 'comma-separated, no spaces around commas (they count)', 'fill at least 90 of the 100', 'no repeats of words already in the name or subtitle (they are indexed anyway)', 'no duplicates', 'single words combine on their own; multi-word phrases waste characters'],
+    screenshots: specs('apple'),
+    appPreviews: { targets: previews('apple'), ...PREVIEW_RULES },
+  };
+  const play = {
+    textLimitsCharacters: { ...PLAY_LIMITS },
+    screenshots: specs('play'),
+    images: { featureGraphic: '1024x500, JPEG or 24-bit PNG, no alpha', icon: '512x512 PNG (Play listing icon)' },
+    promoVideo: previews('play'),
+  };
+  return store === 'apple' ? { apple } : store === 'play' ? { play } : { apple, play };
+}
+
+// ---- listing lint ----
+
+const APPLE_FIELDS = ['name', 'subtitle', 'keywords', 'promotionalText', 'description', 'whatsNew'] as const;
+const PLAY_FIELDS = ['title', 'shortDescription', 'fullDescription', 'whatsNew'] as const;
+const FIELD_MAX = 5000;
+
+export function lintListing(store: 'apple' | 'play', fields: Record<string, unknown>, locale: string): { problems: { level: string; field: string; msg: string }[]; counts: Record<string, string> } {
+  const f = fields as Record<string, string | undefined>;
+  const counts: Record<string, string> = {};
+  let issues: { level: string; field: string; msg: string }[];
+  if (store === 'apple') {
+    const v = Object.fromEntries(APPLE_FIELDS.filter(k => f[k] !== undefined).map(k => [k, f[k]!]));
+    issues = appleLocaleIssues(locale, v, '');
+    // keywords with no name / subtitle given still get the stand-alone keyword rules
+    if (v.keywords === undefined) issues = issues.filter(i => i.field !== 'keywords');
+    for (const k of APPLE_FIELDS) if (v[k] !== undefined) counts[k] = `${[...v[k]!].length}/${APPLE_LIMITS[k]}`;
+  } else {
+    const v = { title: f.title, short: f.shortDescription, full: f.fullDescription, whatsNew: f.whatsNew };
+    issues = playLangIssues(locale, v, f.title ?? '');
+    for (const [k, lim] of [['title', 'title'], ['shortDescription', 'short'], ['fullDescription', 'full'], ['whatsNew', 'whatsNew']] as const)
+      if (f[k] !== undefined) counts[k] = `${[...f[k]!].length}/${PLAY_LIMITS[lim]}`;
+    const rename: Record<string, string> = { short: 'shortDescription', full: 'fullDescription' };
+    issues = issues.map(i => ({ ...i, field: rename[i.field] ?? i.field, msg: i.msg.replace(/^(short|full) is /, (_m, w: string) => `${rename[w]} is `) }));
+  }
+  // fields not given are not "missing": only the ones the caller sent are judged
+  const given = new Set(Object.keys(fields));
+  const problems = issues.filter(i => !/is required$|description is required$/.test(i.msg) || given.has(i.field));
+  return { problems: problems.map(i => ({ level: i.level, field: i.field, msg: i.msg })), counts };
+}
+
+// ---- iTunes search ----
+
+interface ItunesApp { trackId?: number; trackName?: string; sellerName?: string; averageUserRating?: number; userRatingCount?: number; primaryGenreName?: string }
+
+export async function searchApps(term: string, country: string, limit: number, base: string, f: typeof fetch): Promise<{ results: Record<string, unknown>[] }> {
+  const url = `${base}${base.includes('?') ? '&' : '?'}${new URLSearchParams({ term, country: country.toLowerCase(), media: 'software', entity: 'software', limit: String(limit) })}`;
+  const r = await f(url, { signal: AbortSignal.timeout(10_000), headers: { accept: 'application/json' } });
+  if (!r.ok) throw new Error(`the App Store search answered ${r.status}`);
+  const j = (await r.json()) as { results?: ItunesApp[] };
+  const results = (j.results ?? []).slice(0, limit).map((a, n) => ({
+    rank: n + 1, name: oneLine(a.trackName ?? '', 120), developer: oneLine(a.sellerName ?? '', 120), id: a.trackId ?? null,
+    rating: typeof a.averageUserRating === 'number' ? Math.round(a.averageUserRating * 100) / 100 : null,
+    ratingCount: a.userRatingCount ?? 0, genre: a.primaryGenreName ?? null,
+  }));
+  return { results };
+}
+
+// ---- the tools ----
+
+const store: Schema = { type: 'string', enum: ['apple', 'play'] };
+
+export function publicTools(deps: PublicDeps = {}): PublicTool[] {
+  let skills: SkillInfo[] | null = null;
+  const getSkills = () => (skills ??= loadSkills(deps.skillsDir ?? packageSkillsDir()));
+  const obj = (properties: Record<string, Schema>, required?: string[]): PublicTool['inputSchema'] => ({ type: 'object', properties, ...(required ? { required } : {}), additionalProperties: false });
+  const textField = (description: string, maxLength = FIELD_MAX): Schema => ({ type: 'string', description, maxLength });
+  const locale: Schema = { type: 'string', description: 'Locale or language id, e.g. en-US (default en-US)', pattern: '^[A-Za-z]{2,3}([-_][A-Za-z0-9]{2,8}){0,2}$', maxLength: 20 };
+
+  return [
+    { name: 'skills_list', title: 'List storebound skills', description: 'Name and one-line description of every storebound skill (step-by-step guides for store releases, listings, screenshots, IAP, privacy, ASO ...).',
+      inputSchema: obj({}),
+      run: () => { const list = getSkills().map(s => ({ name: s.name, description: s.description })); return { text: list.map(s => `${s.name}: ${s.description}`).join('\n'), data: { skills: list } }; } },
+    { name: 'skill_get', title: 'Read one skill', description: 'The full SKILL.md text of one skill (name from skills_list).',
+      inputSchema: obj({ name: { type: 'string', description: 'Skill name, e.g. aso-basics', pattern: SKILL_NAME.source, minLength: 1, maxLength: 80 } }, ['name']),
+      run: i => {
+        const s = getSkills().find(x => x.name === i.name);
+        if (!s) return { text: `Unknown skill: ${String(i.name)}. Call skills_list for the names.`, isError: true };
+        return { text: clipText(s.text, 120_000), data: { name: s.name } };
+      } },
+    { name: 'pitfalls_search', title: 'Search known store pitfalls', description: 'Sections of the store-pitfalls skill (mistakes made in real App Store and Google Play releases) that match the query words, best first (at most 8, each clipped).',
+      inputSchema: obj({ query: { type: 'string', description: 'Words to look for, e.g. "keywords rejected screenshots"', minLength: 2, maxLength: 200 }, store }, ['query']),
+      run: i => {
+        const sk = getSkills().find(x => x.name === 'store-pitfalls');
+        if (!sk) return { text: 'The store-pitfalls skill is not in this package.', isError: true };
+        const hits = searchSections(sectionsOf(sk.text), String(i.query), i.store as 'apple' | 'play' | undefined);
+        if (!hits.length) return { text: 'No pitfall matches those words. Try fewer or different words.', data: { matches: [] } };
+        return { text: clipText(hits.map(h => `## ${h.heading}\n${h.excerpt}`).join('\n\n---\n\n')), data: { matches: hits.map(h => ({ heading: h.heading, score: h.score })) } };
+      } },
+    { name: 'store_limits', title: 'Store listing and image limits', description: 'Listing field character limits, the App Store keyword field rules, screenshot and app preview sizes per device class and the Google Play feature graphic and icon sizes.',
+      inputSchema: obj({ store }),
+      run: i => { const d = limits(i.store as 'apple' | 'play' | undefined); return { text: JSON.stringify(d, null, 2), data: d }; } },
+    { name: 'listing_lint', title: 'Lint a store listing', description: 'Runs storebound\'s listing and ASO checks on the text you give (limits, keyword field rules, repeated name words, other platforms or apps named, placeholder text, keyword stuffing). Only the fields you send are judged. Nothing is stored.',
+      inputSchema: obj({
+        store, locale,
+        fields: { type: 'object', description: 'Apple: name, subtitle, keywords, promotionalText, description, whatsNew. Play: title, shortDescription, fullDescription, whatsNew.', additionalProperties: false,
+          properties: Object.fromEntries([...new Set([...APPLE_FIELDS, ...PLAY_FIELDS])].map(k => [k, textField(`The ${k} text`)])) },
+      }, ['store', 'fields']),
+      run: i => {
+        const st = i.store as 'apple' | 'play';
+        const fields = i.fields as Record<string, unknown>;
+        const allowed: readonly string[] = st === 'apple' ? APPLE_FIELDS : PLAY_FIELDS;
+        const bad = Object.keys(fields).filter(k => !allowed.includes(k));
+        if (bad.length) return { text: `Invalid arguments: fields: ${bad.join(', ')} not used for ${st}; use ${allowed.join(', ')}`, isError: true };
+        if (!Object.keys(fields).length) return { text: 'Invalid arguments: fields: send at least one field', isError: true };
+        const r = lintListing(st, fields, String(i.locale ?? 'en-US').replace('_', '-'));
+        const lines = r.problems.map(p => `${p.level.toUpperCase()} ${p.field}: ${p.msg}`);
+        return { text: `${Object.entries(r.counts).map(([k, v]) => `${k} ${v}`).join(', ')}\n${lines.length ? lines.join('\n') : 'No problems found.'}`, data: r };
+      } },
+    { name: 'aso_search', title: 'Search the App Store', description: 'The public iTunes Search API: the top apps for a search term in one storefront (name, developer, id, rating, rating count, genre). The order is close to, not the same as, App Store search.',
+      network: true,
+      inputSchema: obj({ term: { type: 'string', description: 'Search term', minLength: 1, maxLength: 100 }, country: { type: 'string', description: 'Two-letter storefront, default us', pattern: '^[A-Za-z]{2}$', minLength: 2, maxLength: 2 },
+        limit: { type: 'integer', description: 'Results, 1-25 (default 10)', minimum: 1, maximum: 25 } }, ['term']),
+      run: async i => {
+        try {
+          const r = await searchApps(String(i.term), String(i.country ?? 'us'), Number(i.limit ?? 10), deps.searchBase ?? SEARCH_BASE, deps.fetch ?? fetch);
+          return { text: r.results.map(a => `${a.rank}. ${String(a.name)} (${String(a.developer)}) id ${String(a.id)}, ${a.rating ?? 'no rating'} / ${String(a.ratingCount)} ratings, ${String(a.genre)}`).join('\n') || 'No results.', data: r };
+        } catch (e) { return { text: `Search failed: ${(e as Error).message}`, isError: true }; }
+      } },
+  ];
+}
+
+/** The surface handle() serves in public mode: only these tools exist (the type lives in mcp.ts). */
+
+export function publicSurface(deps: PublicDeps = {}): Surface {
+  const tools = publicTools(deps);
+  return {
+    instructions: PUBLIC_INSTRUCTIONS,
+    list: () => tools.map(t => ({ name: t.name, title: t.title, description: t.description, inputSchema: t.inputSchema,
+      annotations: { title: t.title, readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: !!t.network } })),
+    call: async (name, input) => {
+      const t = tools.find(x => x.name === name);
+      if (!t) return null;
+      const problems = validatePublic(t.inputSchema, input);
+      if (problems.length) return { text: `Invalid arguments: ${problems.join('; ')}`, isError: true };
+      const r = await t.run((input ?? {}) as Record<string, unknown>);
+      return { ...r, text: clipText(r.text) };
+    },
+  };
+}
+
+// ---- rate limit ----
+
+export interface Limiter { hit(key: string): { ok: boolean; retryAfter: number } }
+
+/** Fixed one-minute window per client key, kept in memory; expired windows are swept so the map stays small. */
+export function createLimiter(perMinute: number, now: () => number = Date.now): Limiter {
+  const win = new Map<string, { start: number; n: number }>();
+  let sweptAt = now();
+  return {
+    hit(key) {
+      const t = now();
+      if (t - sweptAt > 60_000 || win.size > 50_000) { for (const [k, w] of win) if (t - w.start >= 60_000) win.delete(k); sweptAt = t; }
+      let w = win.get(key);
+      if (!w || t - w.start >= 60_000) { w = { start: t, n: 0 }; win.set(key, w); }
+      w.n++;
+      return w.n <= perMinute ? { ok: true, retryAfter: 0 } : { ok: false, retryAfter: Math.max(1, Math.ceil((w.start + 60_000 - t) / 1000)) };
+    },
+  };
+}
+
+/** The client key: the first X-Forwarded-For entry only when the proxy is trusted, else the socket address. */
+export function clientKey(forwardedFor: string | string[] | undefined, remote: string | undefined, trustProxy: boolean): string {
+  if (trustProxy) {
+    const h = Array.isArray(forwardedFor) ? forwardedFor[0] : forwardedFor;
+    const first = h?.split(',')[0]?.trim();
+    if (first) return first.slice(0, 64);
+  }
+  return remote ?? 'unknown';
+}
diff --git a/cli/mcp.ts b/cli/mcp.ts
index 95405cc..6441871 100644
--- a/cli/mcp.ts
+++ b/cli/mcp.ts
@@ -56,6 +56,13 @@ export const INSTRUCTIONS = [
   'Run `check` (offline) and `validate` (read-only) before writes. Long uploads (images, screenshots) are better run in a terminal with a log.',
 ].join(' ');
 
+/** A replacement tool surface (the public key-less server, mcp-public.ts): its own instructions, tool list and calls. */
+export interface Surface {
+  instructions: string;
+  list(): Record<string, unknown>[];
+  call(name: string, input: unknown): Promise<{ text: string; data?: unknown; isError?: boolean } | null>;
+}
+
 type Id = string | number;
 interface Msg { jsonrpc: '2.0'; id?: Id; method?: string; params?: Record<string, unknown> }
 
@@ -71,7 +78,7 @@ export function eraOf(m: Msg): { era: 'modern' | 'legacy'; version: string | nul
 }
 
 /** Handles one message; returns the response object (or null for notifications). Exported for tests. */
-export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{ code: number; out: string }> = runCli): Promise<Record<string, unknown> | null> {
+export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{ code: number; out: string }> = runCli, surface?: Surface): Promise<Record<string, unknown> | null> {
   const err = (code: number, message: string, data?: unknown) => ({ jsonrpc: '2.0', id: m.id ?? null, error: { code, message, ...(data === undefined ? {} : { data }) } });
   if (m.id === undefined) {
     if (m.method === 'notifications/cancelled') cancel(m.params?.requestId as Id);
@@ -83,7 +90,7 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
       protocolVersion: LEGACY.includes(asked) ? asked : LEGACY_PROTOCOL,
       capabilities: { tools: { listChanged: false } },
       serverInfo: { ...serverInfo(), description: pkg.description },
-      instructions: INSTRUCTIONS,
+      instructions: surface?.instructions ?? INSTRUCTIONS,
     } };
   }
 
@@ -101,11 +108,17 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
 
   switch (m.method) {
     case 'server/discover':
-      return ok({ supportedVersions: SUPPORTED, capabilities: { tools: {} }, instructions: INSTRUCTIONS, ttlMs: TOOLS_TTL_MS, cacheScope: 'public' });
+      return ok({ supportedVersions: SUPPORTED, capabilities: { tools: {} }, instructions: surface?.instructions ?? INSTRUCTIONS, ttlMs: TOOLS_TTL_MS, cacheScope: 'public' });
     case 'ping': return ok({});
-    case 'tools/list': return ok({ tools: listTools(bypassOn()), ...(era === 'modern' ? { ttlMs: TOOLS_TTL_MS, cacheScope: 'public' } : {}) });
+    case 'tools/list': return ok({ tools: surface ? surface.list() : listTools(bypassOn()), ...(era === 'modern' ? { ttlMs: TOOLS_TTL_MS, cacheScope: 'public' } : {}) });
     case 'tools/call': {
       const name = String(m.params?.name ?? '');
+      if (surface) {
+        // public mode: only the surface's own tools exist; nothing below (the CLI tools, owner_step) is reachable
+        const r = await surface.call(name, m.params?.arguments ?? {});
+        if (!r) return err(-32602, `Unknown tool: ${name}`);
+        return ok({ content: [{ type: 'text', text: r.text }], ...(r.data === undefined ? {} : { structuredContent: { result: r.data } }), isError: !!r.isError });
+      }
       const tool = TOOLS.find(t => t.name === name) ?? (name === OWNER_STEP.name && bypassOn() ? OWNER_STEP : undefined);
       if (!tool) return err(-32602, `Unknown tool: ${name}`);
       const input = (m.params?.arguments ?? {}) as Record<string, unknown>;
diff --git a/docs/mcp.md b/docs/mcp.md
index dbbe6fd..e78393a 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -58,6 +58,44 @@ refused unless `--allow-origin` names it.
 - `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
 - `/health` answers `{ ok, version }` without auth.
 
+
+## Public key-less server
+
+`storebound mcp --http --public [--port 7788] [--host 127.0.0.1] [--rate 60] [--trust-proxy]` is a separate mode for a
+server anyone may connect to (for example behind a public HTTPS address). No sign-in, no token, no project: it never
+reads store credentials, project folders or the working directory, never starts a child process and never runs the CLI.
+It is read-only and keeps no state. The only network call it makes is the public iTunes Search API (`aso_search`).
+It cannot be combined with `--auth`, `--token-file`, `--roots`, `--project`, `--broker-profiles`, `--allow-origin`
+or `--read-only`.
+
+Tools (and only these; the CLI tools of the normal server do not exist here, a call gets "Unknown tool"):
+
+- `skills_list`: name and one-line description of every skill in the package.
+- `skill_get {name}`: the full SKILL.md of one skill (`^[a-z0-9-]+$`, must be in the list).
+- `pitfalls_search {query, store?}`: the sections of the store-pitfalls skill that match the query words, best first (at
+  most 8, each clipped). `store` is `apple` or `play`.
+- `store_limits {store?}`: listing field character limits, the App Store keyword field rules, screenshot and app
+  preview sizes per device class, Play feature graphic and icon sizes.
+- `listing_lint {store, fields, locale?}`: storebound's listing and ASO checks on the text you send (limits, keyword
+  field rules, repeated name words, other platforms or apps named, placeholder text, keyword stuffing). Apple fields:
+  `name`, `subtitle`, `keywords`, `promotionalText`, `description`, `whatsNew`. Play fields: `title`,
+  `shortDescription`, `fullDescription`, `whatsNew`. Only the fields you send are judged; nothing is stored.
+- `aso_search {term, country?, limit?}`: top apps for a term in one storefront from the iTunes Search API (name,
+  developer, id, rating, rating count, genre; 1-25 results, 10 s timeout).
+
+Limits: `--rate N` requests per minute per client (default 60; over the limit the answer is 429 with `Retry-After`),
+bodies over 64 KB get 413, every tool input is validated against a closed schema, and output is bounded. Behind a
+reverse proxy add `--trust-proxy` so the first `X-Forwarded-For` entry is the client; without it that header is
+ignored. Any browser origin may call it (there is no ambient credential), and CORS preflight is answered. `/health`
+works as before. Request bodies are not logged.
+
+```bash
+storebound mcp --http --public --port 7788 --trust-proxy
+claude mcp add --transport http storebound-public https://mcp.example.com/mcp
+```
+
+For real store work (builds, uploads, listings, releases) use `npx storebound` and its own MCP server.
+
 ## Desktop machine interface
 
 `storebound serve --stdio` is what the desktop app (`apps/desktop`, in progress) runs as its sidecar: newline-delimited
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
new file mode 100644
index 0000000..2846cb8
--- /dev/null
+++ b/tests/mcp-public.test.ts
@@ -0,0 +1,270 @@
+import { describe, expect, test } from 'bun:test';
+import { readFileSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { handle } from '../cli/mcp';
+import { PUBLIC_MAX_BODY, startHttp } from '../cli/mcp-http';
+import { clientKey, createLimiter, publicSurface, searchSections, sectionsOf, validatePublic } from '../cli/mcp-public';
+
+const noRun = async (): Promise<{ code: number; out: string }> => { throw new Error('a child process must never start in public mode'); };
+
+async function fakeItunes(): Promise<{ url: string; close: () => void; queries: string[] }> {
+  const queries: string[] = [];
+  const srv = createServer((req, res) => {
+    queries.push(req.url ?? '');
+    res.setHeader('content-type', 'application/json');
+    res.end(JSON.stringify({ resultCount: 2, results: [
+      { trackId: 111, trackName: 'Example One', sellerName: 'Example Studio', averageUserRating: 4.56789, userRatingCount: 1234, primaryGenreName: 'Games', bundleId: 'com.example.one', description: 'x'.repeat(5000) },
+      { trackId: 222, trackName: 'Example Two', sellerName: 'Other Studio', primaryGenreName: 'Productivity' },
+    ] }));
+  });
+  await new Promise<void>(r => srv.listen(0, '127.0.0.1', () => r()));
+  return { url: `http://127.0.0.1:${(srv.address() as { port: number }).port}/search`, close: () => srv.close(), queries };
+}
+
+type Reply = { error?: { message: string }; result?: { isError: boolean; content: { text: string }[]; structuredContent?: { result: any } } };
+/** One tools/call through the real handler, as the HTTP server does it. */
+async function call(surface: ReturnType<typeof publicSurface>, name: string, args: unknown): Promise<Reply> {
+  return (await handle({ jsonrpc: '2.0', id: 1, method: 'tools/call', params: { name, arguments: args as Record<string, unknown> } }, noRun, surface)) as Reply;
+}
+const text = (r: Reply) => r.result!.content[0]!.text;
+
+describe('tool list', () => {
+  const surface = publicSurface();
+  test('only the public tools, all read-only, closed schemas', async () => {
+    const r = (await handle({ jsonrpc: '2.0', id: 1, method: 'tools/list' }, noRun, surface))!.result as { tools: any[] };
+    expect(r.tools.map(t => t.name).sort()).toEqual(['aso_search', 'listing_lint', 'pitfalls_search', 'skill_get', 'skills_list', 'store_limits']);
+    for (const t of r.tools) {
+      expect(t.inputSchema.additionalProperties).toBe(false);
+      expect(t.annotations.readOnlyHint).toBe(true);
+      expect(t.annotations.destructiveHint).toBe(false);
+    }
+    expect(r.tools.find(t => t.name === 'aso_search').annotations.openWorldHint).toBe(true);
+    expect(r.tools.find(t => t.name === 'store_limits').annotations.openWorldHint).toBe(false);
+  });
+  test('initialize and server/discover say it is the public key-less server', async () => {
+    const init = (await handle({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: '2025-06-18' } }, noRun, surface))!.result as { instructions: string };
+    expect(init.instructions).toContain('public, key-less');
+    expect(init.instructions).toContain('npx storebound');
+    const meta = { 'io.modelcontextprotocol/protocolVersion': '2026-07-28', 'io.modelcontextprotocol/clientCapabilities': {} };
+    const d = (await handle({ jsonrpc: '2.0', id: 2, method: 'server/discover', params: { _meta: meta } }, noRun, surface))!.result as { instructions: string };
+    expect(d.instructions).toContain('public, key-less');
+  });
+  test('CLI tools are not reachable', async () => {
+    for (const name of ['check', 'play_listing', 'owner_step', 'validate', 'api_get']) {
+      const r = await call(surface, name, {});
+      expect(r.error?.message).toContain('Unknown tool');
+    }
+  });
+});
+
+describe('skills', () => {
+  const surface = publicSurface();
+  test('skills_list names every skill of the package', async () => {
+    const r = await call(surface, 'skills_list', {});
+    const skills = r.result!.structuredContent!.result.skills as { name: string; description: string }[];
+    expect(skills.length).toBeGreaterThan(20);
+    expect(skills.find(s => s.name === 'store-pitfalls')!.description.length).toBeGreaterThan(20);
+    expect(skills.every(s => /^[a-z0-9-]+$/.test(s.name) && !s.description.includes('\n'))).toBe(true);
+  });
+  test('skill_get returns the file text; bad names are refused', async () => {
+    const r = await call(surface, 'skill_get', { name: 'aso-basics' });
+    expect(r.result!.isError).toBe(false);
+    expect(text(r)).toContain('name: aso-basics');
+    for (const bad of ['../package', 'ASO-basics', 'no-such-skill', 'a/b', '']) expect((await call(surface, 'skill_get', { name: bad })).result!.isError).toBe(true);
+    expect((await call(surface, 'skill_get', {})).result!.isError).toBe(true);
+    expect((await call(surface, 'skill_get', { name: 'aso-basics', extra: 1 })).result!.isError).toBe(true);
+  });
+});
+
+describe('pitfalls_search', () => {
+  const surface = publicSurface();
+  test('finds sections, best first, at most 8', async () => {
+    const r = await call(surface, 'pitfalls_search', { query: 'keyword field length' });
+    expect(r.result!.isError).toBe(false);
+    expect(text(r)).toMatch(/^## /);
+    expect(text(r).toLowerCase()).toContain('keyword');
+    const m = r.result!.structuredContent!.result.matches as { score: number }[];
+    expect(m.length).toBeLessThanOrEqual(8);
+    expect(m.map(x => x.score)).toEqual([...m.map(x => x.score)].sort((a, b) => b - a));
+    expect(text(r).length).toBeLessThan(40_100);
+  });
+  test('store filter, no match, bad input', async () => {
+    expect((await call(surface, 'pitfalls_search', { query: 'screenshots', store: 'play' })).result!.isError).toBe(false);
+    expect(text(await call(surface, 'pitfalls_search', { query: 'zzqqxxnotaword' }))).toContain('No pitfall');
+    expect((await call(surface, 'pitfalls_search', { query: 'x', store: 'steam' })).result!.isError).toBe(true);
+    expect((await call(surface, 'pitfalls_search', { query: 'a' })).result!.isError).toBe(true);
+    expect((await call(surface, 'pitfalls_search', {})).result!.isError).toBe(true);
+  });
+  test('pure parts', () => {
+    const md = '# T\n\n## One\nalpha beta\n\n## Two\nbeta beta beta google play\n';
+    const s = sectionsOf(md);
+    expect(s.map(x => x.heading)).toEqual(['One', 'Two']);
+    expect(searchSections(s, 'beta')[0]!.heading).toBe('Two');
+    expect(searchSections(s, 'beta', 'apple').map(x => x.heading)).toEqual(['One']);
+    expect(searchSections(s, '   ')).toEqual([]);
+  });
+});
+
+describe('store_limits', () => {
+  const surface = publicSurface();
+  test('numbers come from the code', async () => {
+    const all = (await call(surface, 'store_limits', {})).result!.structuredContent!.result;
+    expect(all.apple.textLimitsCharacters).toMatchObject({ name: 30, subtitle: 30, keywords: 100 });
+    expect(all.play.textLimitsCharacters).toMatchObject({ title: 30, short: 80, full: 4000 });
+    expect(JSON.stringify(all.apple.screenshots)).toContain('1290x2796');
+    expect(JSON.stringify(all.play.screenshots)).toContain('1024x500');
+    const apple = (await call(surface, 'store_limits', { store: 'apple' })).result!.structuredContent!.result;
+    expect(Object.keys(apple)).toEqual(['apple']);
+    expect((await call(surface, 'store_limits', { store: 'x' })).result!.isError).toBe(true);
+  });
+});
+
+describe('listing_lint', () => {
+  const surface = publicSurface();
+  test('apple: limits, repeats, spaces; only sent fields are judged', async () => {
+    const r = await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'Pixel Garden', subtitle: 'Grow plants', keywords: 'garden, plants,tiny,pixel' } });
+    expect(r.result!.isError).toBe(false);
+    const t = text(r);
+    expect(t).toContain('spaces around commas');
+    expect(t).toContain('already indexed');
+    expect(t).not.toContain('is required');
+    const long = await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'N'.repeat(31) } });
+    expect(text(long)).toContain('ERROR name');
+    expect(text(long)).toContain('31/30');
+  });
+  test('play: stuffing, claims, limits', async () => {
+    const full = Array(120).fill('puzzle').join(' ') + ' fun games to enjoy daily with friends';
+    const r = await call(surface, 'listing_lint', { store: 'play', fields: { title: 'Best Puzzle', shortDescription: 'S'.repeat(81), fullDescription: full } });
+    const t = text(r);
+    expect(t).toContain('shortDescription is 81 characters');
+    expect(t).toContain('keyword stuffing');
+    expect(t).toContain('"best"');
+  });
+  test('bad input', async () => {
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: {} })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { title: 'x' } })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { name: 5 } })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'x'.repeat(5001) } })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { store: 'apple', fields: { name: 'x' }, locale: 'en US!' })).result!.isError).toBe(true);
+    expect((await call(surface, 'listing_lint', { fields: { name: 'x' } })).result!.isError).toBe(true);
+  });
+});
+
+describe('aso_search (fake server only)', () => {
+  test('trims results, passes term, country and limit', async () => {
+    const fake = await fakeItunes();
+    try {
+      const surface = publicSurface({ searchBase: fake.url });
+      const r = await call(surface, 'aso_search', { term: 'pixel garden', country: 'DE', limit: 5 });
+      expect(r.result!.isError).toBe(false);
+      const res = r.result!.structuredContent!.result.results as Record<string, unknown>[];
+      expect(res[0]).toEqual({ rank: 1, name: 'Example One', developer: 'Example Studio', id: 111, rating: 4.57, ratingCount: 1234, genre: 'Games' });
+      expect(res[1]).toMatchObject({ id: 222, rating: null, ratingCount: 0 });
+      expect(JSON.stringify(res)).not.toContain('com.example.one');
+      expect(fake.queries[0]).toContain('term=pixel+garden');
+      expect(fake.queries[0]).toContain('country=de');
+      expect(fake.queries[0]).toContain('limit=5');
+      expect(fake.queries[0]).toContain('entity=software');
+    } finally { fake.close(); }
+  });
+  test('bad input is refused before any request; a failing server is an error result', async () => {
+    const fake = await fakeItunes();
+    try {
+      const surface = publicSurface({ searchBase: fake.url });
+      for (const bad of [{}, { term: '' }, { term: 'x', country: 'usa' }, { term: 'x', limit: 0 }, { term: 'x', limit: 26 }, { term: 'x', limit: 1.5 }, { term: 'x', url: 'http://evil.example.com' }])
+        expect((await call(surface, 'aso_search', bad)).result!.isError).toBe(true);
+      expect(fake.queries.length).toBe(0);
+    } finally { fake.close(); }
+    const dead = publicSurface({ searchBase: 'http://127.0.0.1:1/search' });
+    const r = await call(dead, 'aso_search', { term: 'x' });
+    expect(r.result!.isError).toBe(true);
+    expect(text(r)).toContain('Search failed');
+  });
+});
+
+describe('module design', () => {
+  test('mcp-public.ts has no process, runner, credential or cwd access', () => {
+    const src = readFileSync(new URL('../cli/mcp-public.ts', import.meta.url), 'utf8');
+    expect(src).not.toMatch(/child_process|\.\/lib\/runner|\.\/lib\/rt'|\.\/lib\/credentials|\.\/lib\/broker|process\.cwd|process\.env|spawn|exec\(/);
+  });
+  test('validatePublic', () => {
+    expect(validatePublic({ type: 'object', properties: { a: { type: 'string', maxLength: 2 } } }, { a: 'abc' })).toEqual(['a: at most 2 characters']);
+    expect(validatePublic({ type: 'object', properties: {} }, [])).toEqual(['arguments: must be an object']);
+  });
+});
+
+describe('rate limit', () => {
+  test('window counts, retry-after, sweep', () => {
+    let t = 1_000_000;
+    const l = createLimiter(3, () => t);
+    expect([1, 2, 3].map(() => l.hit('a').ok)).toEqual([true, true, true]);
+    const over = l.hit('a');
+    expect(over.ok).toBe(false);
+    expect(over.retryAfter).toBeGreaterThan(0);
+    expect(over.retryAfter).toBeLessThanOrEqual(60);
+    expect(l.hit('b').ok).toBe(true);
+    t += 61_000;
+    expect(l.hit('a').ok).toBe(true);
+  });
+  test('client key: forwarded header only when the proxy is trusted', () => {
+    expect(clientKey('client-a, proxy-1', 'proxy-1', true)).toBe('client-a');
+    expect(clientKey('client-a', 'proxy-1', false)).toBe('proxy-1');
+    expect(clientKey(undefined, 'proxy-1', true)).toBe('proxy-1');
+  });
+});
+
+describe('http, public mode', () => {
+  const post = (port: number, body: unknown, headers: Record<string, string> = {}) =>
+    fetch(`http://127.0.0.1:${port}/mcp`, { method: 'POST', headers: { 'content-type': 'application/json', ...headers }, body: typeof body === 'string' ? body : JSON.stringify(body) });
+  const base = { host: '127.0.0.1', port: 0, roots: [], project: null, allowOrigins: [], auth: { kind: 'none' } as const };
+
+  test('no sign-in, any origin, CORS preflight, tools/list, /health, GET 405', async () => {
+    const s = await startHttp({ ...base, public: { rate: 100, trustProxy: false } });
+    try {
+      const r = await post(s.port, { jsonrpc: '2.0', id: 1, method: 'tools/list' }, { origin: 'https://claude.example.com' });
+      expect(r.status).toBe(200);
+      expect(r.headers.get('access-control-allow-origin')).toBe('*');
+      expect(((await r.json()) as { result: { tools: unknown[] } }).result.tools.length).toBe(6);
+      const pre = await fetch(`http://127.0.0.1:${s.port}/mcp`, { method: 'OPTIONS', headers: { origin: 'https://claude.example.com', 'access-control-request-method': 'POST' } });
+      expect(pre.status).toBe(204);
+      expect((await fetch(`http://127.0.0.1:${s.port}/health`)).status).toBe(200);
+      expect((await fetch(`http://127.0.0.1:${s.port}/mcp`)).status).toBe(405);
+      const c = await post(s.port, { jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: 'check', arguments: { project: '/' } } });
+      expect(((await c.json()) as { error: { message: string } }).error.message).toContain('Unknown tool');
+      expect((await post(s.port, { jsonrpc: '2.0', method: 'notifications/initialized' })).status).toBe(202);
+    } finally { s.close(); }
+  });
+
+  test('429 with Retry-After over the limit; X-Forwarded-For counts only with trustProxy', async () => {
+    const s = await startHttp({ ...base, public: { rate: 2, trustProxy: false } });
+    try {
+      const ping = (h: Record<string, string> = {}) => post(s.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, h);
+      expect((await ping({ 'x-forwarded-for': 'client-a' })).status).toBe(200);
+      expect((await ping({ 'x-forwarded-for': 'client-b' })).status).toBe(200); // not trusted: same client
+      const over = await ping({ 'x-forwarded-for': 'client-c' });
+      expect(over.status).toBe(429);
+      expect(Number(over.headers.get('retry-after'))).toBeGreaterThan(0);
+      expect((await fetch(`http://127.0.0.1:${s.port}/health`)).status).toBe(200); // health is not limited
+    } finally { s.close(); }
+    const t = await startHttp({ ...base, public: { rate: 1, trustProxy: true } });
+    try {
+      const ping = (ip: string) => post(t.port, { jsonrpc: '2.0', id: 1, method: 'ping' }, { 'x-forwarded-for': `${ip}, proxy-1` });
+      expect((await ping('client-a')).status).toBe(200);
+      expect((await ping('client-b')).status).toBe(200);
+      expect((await ping('client-a')).status).toBe(429);
+    } finally { t.close(); }
+  });
+
+  test('body over 64 KB is refused; bad JSON is a parse error', async () => {
+    const s = await startHttp({ ...base, public: { rate: 100, trustProxy: false } });
+    try {
+      const big = JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'ping', params: { pad: 'x'.repeat(PUBLIC_MAX_BODY) } });
+      expect((await post(s.port, big)).status).toBe(413);
+      expect((await post(s.port, '{nope')).status).toBe(400);
+    } finally { s.close(); }
+  });
+
+  test('auth none needs public mode', async () => {
+    expect(() => startHttp({ ...base })).toThrow('only for --public');
+  });
+});

From 96207688972b88b2fbee136370eeb7dff62171c8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:05:53 +0700
Subject: [PATCH 194/255] mcp --http: SSE keepalive for long tool calls; public
 App Store search shares one 20-a-minute budget

---
 CHANGELOG.md             |  1 +
 cli/mcp-http.ts          | 23 +++++++++++++++++++----
 cli/mcp-public.ts        | 12 ++++++++++++
 docs/mcp.md              |  3 +++
 tests/mcp-http.test.ts   | 21 +++++++++++++++++++++
 tests/mcp-public.test.ts |  9 +++++++++
 6 files changed, 65 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0102a95..7d04989 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `mcp --http`: a `tools/call` that accepts `text/event-stream` gets SSE keepalive comments every 20 s and then its result, so long calls survive proxies that cut silent responses. The public server's App Store search keeps one budget of 20 calls a minute (Apple's limit).
 - `storebound mcp --http --public`: a public, key-less MCP server (no sign-in, no store credentials, no project folders, no child processes, read-only). Tools: `skills_list`, `skill_get`, `pitfalls_search`, `store_limits`, `listing_lint` and `aso_search` (the public iTunes Search API, the only network call). Rate limit per client (`--rate`, 429 with Retry-After; `--trust-proxy` for X-Forwarded-For), 64 KB request bodies, CORS preflight. docs/mcp.md.
 
 ## 0.8.58 · 2026-10-29
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 124c3bc..3c74e13 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -37,6 +37,9 @@ import { runCommand } from './lib/runner';
 export const DEFAULT_PORT = 7787;
 export const PUBLIC_PORT = 7788;
 const MAX_BODY = 4 * 1024 * 1024;
+/** SSE comment line interval while a tool call runs (proxies cut silent responses). */
+export let SSE_KEEPALIVE_MS = 20_000;
+export const setKeepaliveMs = (ms: number): void => { SSE_KEEPALIVE_MS = ms; };
 /** Public mode: one JSON-RPC message of a read-only tool never needs more. */
 export const PUBLIC_MAX_BODY = 64 * 1024;
 export const PUBLIC_DEFAULT_RATE = 60;
@@ -213,10 +216,22 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
     let msg: unknown;
     try { msg = JSON.parse(body); } catch { return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Parse error' } }); }
     if (Array.isArray(msg) || typeof msg !== 'object' || msg === null) return send(res, 400, { jsonrpc: '2.0', id: null, error: { code: -32600, message: 'One JSON-RPC message per request' } });
-    try {
-      const r = pub ? await handle(msg as never, noRun, pub.surface) : await answer(msg as Record<string, unknown>, o);
-      return r ? send(res, 200, r) : send(res, 202);
-    } catch (e) { return send(res, 500, { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }); }
+    const work = (async () => {
+      try { return pub ? await handle(msg as never, noRun, pub.surface) : await answer(msg as Record<string, unknown>, o); }
+      catch (e) { return { jsonrpc: '2.0', id: (msg as { id?: unknown }).id ?? null, error: { code: -32603, message: String((e as Error).message) } }; }
+    })();
+    // A tool call may run for minutes; a proxy (Cloudflare: 100 s) cuts a response that sends nothing. A client that
+    // accepts SSE gets the answer as one SSE event with a comment line every 20 s until then.
+    if ((msg as { method?: unknown }).method === 'tools/call' && /text\/event-stream/.test(String(req.headers.accept ?? ''))) {
+      res.writeHead(200, { 'content-type': 'text/event-stream', 'cache-control': 'no-store', 'x-accel-buffering': 'no' });
+      res.write(': started\n\n');
+      const beat = setInterval(() => res.write(': keepalive\n\n'), SSE_KEEPALIVE_MS);
+      const r = await work.finally(() => clearInterval(beat));
+      res.end(`event: message\ndata: ${JSON.stringify(r)}\n\n`);
+      return;
+    }
+    const r = await work;
+    return r ? send(res, 200, r) : send(res, 202);
   });
   // a tool call can run for many minutes (check on a big project, uploads): Node's 300 s request timeout would cut it
   server.requestTimeout = 0;
diff --git a/cli/mcp-public.ts b/cli/mcp-public.ts
index 81387b4..75853ba 100644
--- a/cli/mcp-public.ts
+++ b/cli/mcp-public.ts
@@ -190,7 +190,19 @@ export function lintListing(store: 'apple' | 'play', fields: Record<string, unkn
 
 interface ItunesApp { trackId?: number; trackName?: string; sellerName?: string; averageUserRating?: number; userRatingCount?: number; primaryGenreName?: string }
 
+// Apple allows about 20 search calls a minute per IP: one shared budget for the whole server, whoever asks
+const SEARCH_PER_MIN = 20;
+const searchTimes: number[] = [];
+export function searchBudget(now = Date.now()): { ok: true } | { ok: false; retryAfter: number } {
+  while (searchTimes.length && searchTimes[0]! <= now - 60_000) searchTimes.shift();
+  if (searchTimes.length >= SEARCH_PER_MIN) return { ok: false, retryAfter: Math.ceil((searchTimes[0]! + 60_000 - now) / 1000) };
+  searchTimes.push(now);
+  return { ok: true };
+}
+
 export async function searchApps(term: string, country: string, limit: number, base: string, f: typeof fetch): Promise<{ results: Record<string, unknown>[] }> {
+  const b = searchBudget();
+  if (!b.ok) throw new Error(`the App Store search is busy (Apple allows ${SEARCH_PER_MIN} calls a minute for this server): try again in ${b.retryAfter} s`);
   const url = `${base}${base.includes('?') ? '&' : '?'}${new URLSearchParams({ term, country: country.toLowerCase(), media: 'software', entity: 'software', limit: String(limit) })}`;
   const r = await f(url, { signal: AbortSignal.timeout(10_000), headers: { accept: 'application/json' } });
   if (!r.ok) throw new Error(`the App Store search answered ${r.status}`);
diff --git a/docs/mcp.md b/docs/mcp.md
index e78393a..142dd27 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -56,6 +56,9 @@ refused unless `--allow-origin` names it.
   scope; docs/credential-broker.md). They reach each tool call as `STOREBOUND_PROFILE_<NAME>_*` env, held in memory for
   10 minutes and never written. A project picks its profile as usual (the config's `account`).
 - `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
+- Long calls: a `tools/call` whose request accepts `text/event-stream` is answered as SSE, with a comment line every
+  20 s until the result arrives as one `message` event, so a proxy that cuts silent responses (Cloudflare: 100 s)
+  keeps the connection. Other requests get plain JSON.
 - `/health` answers `{ ok, version }` without auth.
 
 
diff --git a/tests/mcp-http.test.ts b/tests/mcp-http.test.ts
index 7c11426..2fc8ed0 100644
--- a/tests/mcp-http.test.ts
+++ b/tests/mcp-http.test.ts
@@ -138,3 +138,24 @@ describe('read-only and broker profiles', () => {
     } finally { srv.close(); }
   });
 });
+
+describe('long calls over SSE', () => {
+  test('a tools/call that accepts text/event-stream gets keepalive comments, then the answer as one event', async () => {
+    const { setKeepaliveMs } = await import('../cli/mcp-http');
+    setKeepaliveMs(50);
+    const s = await startHttp({ host: '127.0.0.1', port: 0, roots: [root], project: app, allowOrigins: [], auth: { kind: 'token', token: 'b'.repeat(64) } });
+    try {
+      const r = await fetch(`http://127.0.0.1:${s.port}/mcp`, { method: 'POST',
+        headers: { authorization: `Bearer ${'b'.repeat(64)}`, 'content-type': 'application/json', accept: 'application/json, text/event-stream' },
+        body: JSON.stringify({ jsonrpc: '2.0', id: 9, method: 'tools/call', params: { name: 'check', arguments: { project: '/nope' } } }) });
+      expect(r.headers.get('content-type')).toBe('text/event-stream');
+      const text = await r.text();
+      expect(text.startsWith(': started')).toBe(true);
+      const data = /event: message\ndata: (.*)\n\n$/.exec(text)!;
+      expect(JSON.parse(data[1]!)).toMatchObject({ id: 9, result: { isError: true } });
+      // JSON for everything else
+      const p = await fetch(`http://127.0.0.1:${s.port}/mcp`, { method: 'POST', headers: { authorization: `Bearer ${'b'.repeat(64)}`, 'content-type': 'application/json', accept: 'application/json, text/event-stream' }, body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'ping' }) });
+      expect(p.headers.get('content-type')).toBe('application/json');
+    } finally { s.close(); setKeepaliveMs(20_000); }
+  });
+});
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
index 2846cb8..c0b141e 100644
--- a/tests/mcp-public.test.ts
+++ b/tests/mcp-public.test.ts
@@ -268,3 +268,12 @@ describe('http, public mode', () => {
     expect(() => startHttp({ ...base })).toThrow('only for --public');
   });
 });
+
+test('App Store search keeps one shared budget of 20 calls a minute', async () => {
+  const { searchBudget } = await import('../cli/mcp-public');
+  const t0 = Date.now() + 3_600_000; // after any real call earlier in this file
+  let last: ReturnType<typeof searchBudget> = { ok: true };
+  for (let i = 0; i < 25; i++) last = searchBudget(t0 + i);
+  expect(last.ok).toBe(false);
+  expect(searchBudget(t0 + 61_000).ok).toBe(true);
+});

From 3b1c6160b5f0cda15a9efebbdb78832ddb5fed11 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:06:22 +0700
Subject: [PATCH 195/255] docs: SSE keepalive for long tool calls

---
 docs/mcp.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/mcp.md b/docs/mcp.md
index 142dd27..08a17ff 100644
--- a/docs/mcp.md
+++ b/docs/mcp.md
@@ -56,6 +56,9 @@ refused unless `--allow-origin` names it.
   scope; docs/credential-broker.md). They reach each tool call as `STOREBOUND_PROFILE_<NAME>_*` env, held in memory for
   10 minutes and never written. A project picks its profile as usual (the config's `account`).
 - `project` may also be a folder name under the roots (a shared server keeps its checkouts there).
+- Long calls: a `tools/call` whose request accepts `text/event-stream` is answered as SSE, with a comment line every
+  20 s until the result arrives as one `message` event, so a proxy that cuts silent responses (Cloudflare: 100 s)
+  keeps the connection. Other requests get plain JSON.
 - Long calls: a `tools/call` whose request accepts `text/event-stream` is answered as SSE, with a comment line every
   20 s until the result arrives as one `message` event, so a proxy that cuts silent responses (Cloudflare: 100 s)
   keeps the connection. Other requests get plain JSON.

From 17f57c6fb6d2deae38aaadca6e7a7ce52bcb3ac8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:10:28 +0700
Subject: [PATCH 196/255] storebound 0.8.59: version in package.json and every
 copy, CHANGELOG 0.8.59 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 43b2bab..1403a3f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.58",
+      "version": "0.8.59",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 51296bb..9ef75b7 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 00cc3f1..485e4df 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d04989..2a82ef1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.59 · 2026-10-29
+
 - `mcp --http`: a `tools/call` that accepts `text/event-stream` gets SSE keepalive comments every 20 s and then its result, so long calls survive proxies that cut silent responses. The public server's App Store search keeps one budget of 20 calls a minute (Apple's limit).
 - `storebound mcp --http --public`: a public, key-less MCP server (no sign-in, no store credentials, no project folders, no child processes, read-only). Tools: `skills_list`, `skill_get`, `pitfalls_search`, `store_limits`, `listing_lint` and `aso_search` (the public iTunes Search API, the only network call). Rate limit per client (`--rate`, 429 with Retry-After; `--trust-proxy` for X-Forwarded-For), 64 KB request bodies, CORS preflight. docs/mcp.md.
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 7b9f632..4c36fe4 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 496304a..7a2ea0a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.58"
+version = "0.8.59"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 05e2417..4d8dd15 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.58"
+version = "0.8.59"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index deaff30..8d3540d 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index fface3f..1eb98a9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 59d9754..9570442 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.58",
+  "version": "0.8.59",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 96ec7ba60f0c9abea5937ba6203f2614dc2419e4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:40:29 +0700
Subject: [PATCH 197/255] desktop-release: sign by key path only (a
 TAURI_SIGNING_PRIVATE_KEY in the env made the signer refuse both)

---
 tools/desktop-release.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/tools/desktop-release.ts b/tools/desktop-release.ts
index 21de8e1..974fb6c 100644
--- a/tools/desktop-release.ts
+++ b/tools/desktop-release.ts
@@ -220,7 +220,11 @@ function updaterKey(): string {
 function signFile(file: string): string {
   const key = updaterKey();
   rmSync(`${file}.sig`, { force: true });
-  run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env: { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' } });
+  // the key goes by path only: a TAURI_SIGNING_PRIVATE_KEY left in the env (a bundle step, the shell) made the signer
+  // refuse "--private-key-path cannot be used with --private-key" (0.8.59)
+  const env = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
+  delete env.TAURI_SIGNING_PRIVATE_KEY; delete env.TAURI_SIGNING_PRIVATE_KEY_PATH;
+  run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env });
   const sig = readFileSync(`${file}.sig`, 'utf8').trim();
   const v = verifySig(readFileSync(file), sig, confPubkey());
   if (!v.ok) fail(`${basename(file)}: fresh signature does not verify (${v.reason})`);

From 02435de9664f3635f4141252e34769bbd8ad0f7b Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:40:56 +0700
Subject: [PATCH 198/255] desktop-release: sign by key path only (a
 TAURI_SIGNING_PRIVATE_KEY in the env made the signer refuse both)

---
 tools/desktop-release.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/desktop-release.ts b/tools/desktop-release.ts
index 974fb6c..fb60ab3 100644
--- a/tools/desktop-release.ts
+++ b/tools/desktop-release.ts
@@ -222,7 +222,7 @@ function signFile(file: string): string {
   rmSync(`${file}.sig`, { force: true });
   // the key goes by path only: a TAURI_SIGNING_PRIVATE_KEY left in the env (a bundle step, the shell) made the signer
   // refuse "--private-key-path cannot be used with --private-key" (0.8.59)
-  const env = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
+  const env: Record<string, string | undefined> = { ...process.env, TAURI_SIGNING_PRIVATE_KEY_PASSWORD: '' };
   delete env.TAURI_SIGNING_PRIVATE_KEY; delete env.TAURI_SIGNING_PRIVATE_KEY_PATH;
   run(['bunx', 'tauri', 'signer', 'sign', '-f', key, '-p', '', file], { cwd: APP_DIR, env });
   const sig = readFileSync(`${file}.sig`, 'utf8').trim();

From 0ea7292164b74861b810c88349516a8a7c82569a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:41:40 +0700
Subject: [PATCH 199/255] release --resume: a fixed tools/desktop-release.ts
 may be uncommitted too

---
 tools/release.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/release.ts b/tools/release.ts
index 3caac77..016d91f 100644
--- a/tools/release.ts
+++ b/tools/release.ts
@@ -278,8 +278,8 @@ async function main(): Promise<void> {
   const remote = remoteSessionReason(process.env, sh(['launchctl', 'managername'], { allowFail: true }).trim());
   if (remote) fail(`${remote}: signing and notarization need the owner's logged-in macOS session`);
   if (!existsSync(join(KEYS, 'updater.key'))) fail(`no updater key in ${KEYS.replace(HOME, '~')}`);
-  // --resume may run with a fixed release tool (tools/release*.ts), which is not part of what ships
-  const dirty = sh(['git', 'status', '--porcelain']).split('\n').filter(l => l.trim() && !(resume && /^ M tools\/release(-candidate)?\.ts$/.test(l)));
+  // --resume may run with a fixed release tool (tools/release*.ts, tools/desktop-release.ts), which is not part of what ships
+  const dirty = sh(['git', 'status', '--porcelain']).split('\n').filter(l => l.trim() && !(resume && /^ M tools\/(desktop-)?release(-candidate)?\.ts$/.test(l)));
   if (dirty.length) fail('the checkout has uncommitted changes');
   sh(['git', 'fetch', '--quiet', 'origin', 'main', '--tags']);
   const head = sh(['git', 'rev-parse', 'HEAD']).trim();

From ab69ce020c29558ab484e83c49b88e6a52c28329 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:45:18 +0700
Subject: [PATCH 200/255] play build: absolute --dir stays absolute; gradlew
 without exec bit is made executable

---
 CHANGELOG.md             |  2 ++
 cli/lib/gradle.ts        |  5 +++--
 cli/lib/web-assets.ts    |  4 ++--
 cli/play/build.ts        |  7 ++++++-
 tests/gradle-dir.test.ts | 16 ++++++++++++++++
 5 files changed, 29 insertions(+), 5 deletions(-)
 create mode 100644 tests/gradle-dir.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2a82ef1..9825741 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
+
 ## 0.8.59 · 2026-10-29
 
 - `mcp --http`: a `tools/call` that accepts `text/event-stream` gets SSE keepalive comments every 20 s and then its result, so long calls survive proxies that cut silent responses. The public server's App Store search keeps one budget of 20 calls a minute (Apple's limit).
diff --git a/cli/lib/gradle.ts b/cli/lib/gradle.ts
index 9d868bc..8d14617 100644
--- a/cli/lib/gradle.ts
+++ b/cli/lib/gradle.ts
@@ -3,7 +3,7 @@
 // properties through ORG_GRADLE_PROJECT_* variables, so passwords never appear on a command line), and read
 // package / versionCode / versionName back from the built AAB (its manifest is protocol buffers, aapt2 format).
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { join, relative } from 'node:path';
+import { join, relative, resolve } from 'node:path';
 import type { AndroidSigning } from './credentials';
 import * as rt from './rt';
 import { zipEntries, zipRead } from './zip';
@@ -38,7 +38,8 @@ export function pickGradle(root: string, cfg: PlayBuildConfig = {}): GradleTarge
     : ['capacitor.config.ts', 'capacitor.config.json', 'capacitor.config.js'].some(f => existsSync(join(root, f))) ? 'capacitor'
     : (() => { try { const p = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')); return !!(p.dependencies?.['react-native'] ?? p.devDependencies?.['react-native']); } catch { return false; } })() ? 'react-native'
     : 'native';
-  const dirs = cfg.dir ? [join(root, cfg.dir)] : [join(root, 'android'), root];
+  // resolve, not join: an absolute play.build.dir / --dir stays absolute (join made /Users/... a folder under the root)
+  const dirs = cfg.dir ? [resolve(root, cfg.dir)] : [join(root, 'android'), root];
   let dir = dirs.find(isGradleDir);
   if (!dir) throw new Error(`no Gradle project (settings.gradle) in ${dirs.map(d => relative(root, d) || '.').join(' or ')}: set play.build.dir${framework === 'capacitor' ? ' (or npx cap add android)' : ''}`);
   const unity = existsSync(join(dir, 'launcher')) && existsSync(join(dir, 'unityLibrary'));
diff --git a/cli/lib/web-assets.ts b/cli/lib/web-assets.ts
index 638b669..83d0179 100644
--- a/cli/lib/web-assets.ts
+++ b/cli/lib/web-assets.ts
@@ -14,7 +14,7 @@
 // The comparison (webStaleness) and the capacitor config reading (webDirOf) are pure.
 import { createHash } from 'node:crypto';
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { dirname, join, relative, sep } from 'node:path';
+import { dirname, join, relative, resolve, sep } from 'node:path';
 import type { ShipConfig } from './config';
 import { log, warn } from './log';
 import { pump } from './runner';
@@ -89,7 +89,7 @@ export function capacitorCandidates(root: string): string[] {
  */
 export function capacitorProject(root: string, hint?: string): CapProject | null {
   if (hint) {
-    for (let d = join(root, hint); ; d = dirname(d)) {
+    for (let d = resolve(root, hint); ; d = dirname(d)) {
       const rel = relative(root, d);
       if (rel.startsWith('..')) break;
       const c = capAt(root, rel.split(sep).join('/'));
diff --git a/cli/play/build.ts b/cli/play/build.ts
index 01e9155..cf87d69 100644
--- a/cli/play/build.ts
+++ b/cli/play/build.ts
@@ -14,7 +14,7 @@
 // Before Gradle runs, the app module's build file must read -PversionCode / -PversionName in defaultConfig (a literal
 // or an env var keeps the AAB at that value; android.injected.version.* does not override it for bundleRelease): a
 // warning with the exact line to use. After the build, an AAB whose versionCode is not the planned one is a hard stop.
-import { copyFileSync, existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { chmodSync, copyFileSync, existsSync, mkdirSync, statSync, writeFileSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import { androidSigning } from '../lib/credentials';
 import type { Ctx } from '../lib/ctx';
@@ -108,6 +108,11 @@ export async function run(ctx: Ctx): Promise<void> {
   shipPhase('build', `${plan.task}, versionCode ${code || '?'}`);
   const started = Date.now();
   mkdirSync(out, { recursive: true });
+  // a gradlew committed from Windows has no exec bit: macOS / Linux then say "Executable not found: ./gradlew"
+  if (hasWrapper && process.platform !== 'win32') {
+    const w = join(t.dir, 'gradlew');
+    if ((statSync(w).mode & 0o111) === 0) { chmodSync(w, statSync(w).mode | 0o755); log(TAG, `${relative(root, w)} had no exec bit (committed from Windows?): made it executable; commit it with git update-index --chmod=+x`); }
+  }
   const p = rt.spawn(argv, { cwd, stdout: 'pipe', stderr: 'pipe', env: { ...process.env, ...androidSdkEnv(sdk), ...signingEnv(signing) } });
   const lines: string[] = [];
   const each = (line: string): void => {
diff --git a/tests/gradle-dir.test.ts b/tests/gradle-dir.test.ts
new file mode 100644
index 0000000..ebb5836
--- /dev/null
+++ b/tests/gradle-dir.test.ts
@@ -0,0 +1,16 @@
+import { expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { pickGradle } from '../cli/lib/gradle';
+
+test('an absolute play.build.dir / --dir stays absolute (it lost its leading slash under the root)', () => {
+  const base = mkdtempSync(join(tmpdir(), 'gdir-'));
+  try {
+    const root = join(base, 'store'), android = join(base, 'other', 'apps', 'native', 'android');
+    mkdirSync(root, { recursive: true }); mkdirSync(join(android, 'app'), { recursive: true });
+    writeFileSync(join(android, 'settings.gradle'), "include ':app'\n");
+    expect(resolve(pickGradle(root, { dir: android }).dir)).toBe(resolve(android));
+    expect(resolve(pickGradle(root, { dir: '../other/apps/native/android' }).dir)).toBe(resolve(android));
+  } finally { rmSync(base, { recursive: true, force: true }); }
+});

From f5296cc9e95c85657be2fa6b64c80260123a4df6 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:54:05 +0700
Subject: [PATCH 201/255] play release --dry: no bundle upload into a discarded
 edit (a long upload outlived it: edit expired); shows the planned tracks

---
 CHANGELOG.md              | 1 +
 cli/play/release.ts       | 9 +++++++++
 tests/idempotency.test.ts | 7 +++++++
 3 files changed, 17 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9825741..96fafa0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `play release <aab> --dry` uploads nothing: it names the versionCode it would upload and the track changes it would make (the bundle went into a discarded edit, and a long upload could outlive the edit: "This edit has expired").
 - `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
 
 ## 0.8.59 · 2026-10-29
diff --git a/cli/play/release.ts b/cli/play/release.ts
index b1715e2..7ba7c8a 100644
--- a/cli/play/release.ts
+++ b/cli/play/release.ts
@@ -82,12 +82,20 @@ export async function run(ctx: Ctx): Promise<void> {
       }
       let code = fixed ?? '';
       let uploaded = false;
+      // a dry run never uploads: the bundle would go into an edit that is thrown away (14 MB for nothing, and a long
+      // upload can outlive the edit: "This edit has expired"); its tracks are shown, not PUT (Play refuses a track
+      // with a versionCode the edit does not have)
+      let planOnly = false;
       if (aab) {
         // a versionCode Play already has (an earlier run uploaded it) is reused, never uploaded twice
         const info = aabInfo(aab);
         if ((await usedVersionCodes(play, id)).includes(info.versionCode)) {
           code = String(info.versionCode);
           log('play', `versionCode ${code} is on Play already: not uploaded again`);
+        } else if (a.has('dry')) {
+          code = String(info.versionCode);
+          planOnly = true;
+          log('play', `dry run: would upload ${aab} (${(statSync(aab).size / 1048576).toFixed(1)} MB, versionCode ${code}); not uploaded`);
         } else {
           shipPhase('upload', `uploading ${aab}`, 0);
           log('play', `uploading ${aab} (${(statSync(aab).size / 1048576).toFixed(1)} MB), this can take minutes`);
@@ -108,6 +116,7 @@ export async function run(ctx: Ctx): Promise<void> {
         if (t.status === 'inProgress') release.userFraction = Number(fraction ?? 0.1);
         const cur = (await play.call<{ releases?: PlayTrackRelease[] }>('GET', `${play.API}/edits/${id}/tracks/${t.track}`).catch(() => ({ releases: [] }))).releases ?? [];
         if (sameRelease(cur, release)) { log('play', `${t.track}: already ${t.status} ${code}, unchanged`); continue; }
+        if (planOnly) { log('play', `dry run: ${t.track} <- ${code} (${t.status}, notes in ${notes.length} languages)`); changed++; continue; }
         await play.call('PUT', `${play.API}/edits/${id}/tracks/${t.track}`, { track: t.track, releases: [release] });
         changed++;
         log('play', `${t.track} <- ${code} (${t.status}, notes in ${notes.length} languages)`);
diff --git a/tests/idempotency.test.ts b/tests/idempotency.test.ts
index 39d22af..49f3775 100644
--- a/tests/idempotency.test.ts
+++ b/tests/idempotency.test.ts
@@ -573,6 +573,13 @@ describe('listing, appinfo, data safety and the owner commands: a second run wri
     expect(s.play.committed).toHaveLength(1);
   });
 
+  test('play release <aab> --dry: no upload, no track PUT (the bundle went into a discarded edit; a long upload outlived it: "This edit has expired")', async () => {
+    const p = project(CONFIG, { 'store/listing.md': LISTING, 'build/android/app.aab': makeAab('com.example.notes', 43) });
+    const r = await twice(() => playRelease(p.ctx([join(p.root, 'build/android/app.aab'), '--internal', 'completed', '--dry'])));
+    expect(r.first.filter(x => x.includes('/bundles') || x.startsWith('PUT '))).toEqual([]);
+    expect(s.play.committed).toHaveLength(0);
+  });
+
   test('prices import (Play): changed regions written once, then the diff is empty', async () => {
     const p = project({ ...CONFIG, products: [CONFIG.products![0]!] }, { 'store/prices.csv': 'product,store,region,currency,price\ncom.example.notes.pro,play,DE,EUR,3.49\n' });
     await capture(() => playProducts(p.ctx([])));

From 6ebb6560183edee9a26e7d3906d2691c77ca8f59 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 19:59:49 +0700
Subject: [PATCH 202/255] apple listing: a new version inherits the previous
 version's release type when apple.releaseType is unset; warn when the config
 differs

---
 CHANGELOG.md                       |  1 +
 cli/apple/listing.ts               |  1 +
 cli/lib/listing-plan.ts            | 14 ++++++++++++--
 tests/listing-plan.test.ts         |  2 +-
 tests/release-type-inherit.test.ts | 16 ++++++++++++++++
 5 files changed, 31 insertions(+), 3 deletions(-)
 create mode 100644 tests/release-type-inherit.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 96fafa0..cce219c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `apple listing` creates a new version with the release type of the newest version before it (MANUAL or AFTER_APPROVAL) when `apple.releaseType` is not set; a first version stays MANUAL. The plan names where the type came from, and warns when `apple.releaseType` differs from the previous version's.
 - `play release <aab> --dry` uploads nothing: it names the versionCode it would upload and the track changes it would make (the bundle went into a discarded edit, and a long upload could outlive the edit: "This edit has expired").
 - `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
 
diff --git a/cli/apple/listing.ts b/cli/apple/listing.ts
index 698b799..9649aa9 100644
--- a/cli/apple/listing.ts
+++ b/cli/apple/listing.ts
@@ -157,6 +157,7 @@ export function listingPlanLines(p: AppleListingPlan): string[] {
   const v = p.versionPlan;
   const out = [`Version ${p.version} (${platformLabel(p.platform)}; App Store Connect has: ${v.existing.length ? v.existing.map(x => `${x.versionString} ${x.state} ${platformLabel(x.platform)}`).join(', ') : `no ${platformLabel(p.platform)} version yet`})`];
   out.push(`  ${v.action === 'refuse' ? 'REFUSE' : v.action.toUpperCase()}: ${v.reason}`);
+  if (v.warning) out.push(`  WARN: ${v.warning}`);
   for (const ch of v.changes) out.push(`    ${ch.field}: ${v.action === 'create' ? short(ch.to) : `${short(ch.from)} -> ${short(ch.to)}`}`);
   if (p.build) out.push(`Build: ${p.build.action === 'refuse' ? 'REFUSE: ' : ''}${p.build.reason}`);
   out.push(`App info ${p.appInfo.state ? `(${p.appInfo.state})` : ''}: name, subtitle, privacy policy URL per locale · ${counts(p.appInfo.locales)}`);
diff --git a/cli/lib/listing-plan.ts b/cli/lib/listing-plan.ts
index 40edf0c..d6bb289 100644
--- a/cli/lib/listing-plan.ts
+++ b/cli/lib/listing-plan.ts
@@ -38,6 +38,8 @@ export interface VersionPlan {
   /** The editable version that is kept or updated. */
   id?: string;
   reason: string;
+  /** Said in the dry run and the real run (e.g. a release type that differs from the previous version's). */
+  warning?: string;
   existing: VersionInfo[];
   changes: FieldDiff[];
   attributes: Record<string, string>;
@@ -103,9 +105,17 @@ export function planVersion(rows: { id: string; attributes: Record<string, unkno
   if (busy) return refuse(`version ${busy.versionString} is ${busy.state}; App Store Connect allows one version in progress (${busy.state === 'PENDING_DEVELOPER_RELEASE'
     ? `release it first: storebound apple release --manual-release --version ${busy.versionString} --dry, then without --dry`
     : busy.state === 'WAITING_FOR_REVIEW' || busy.state === 'IN_REVIEW' ? 'wait for the review, or remove it from review in App Store Connect' : 'wait for its release or remove it from review'})`);
-  const attributes: Record<string, string> = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType ?? 'MANUAL' };
+  // without apple.releaseType a new version keeps the release type of the newest one before it (Acme 2026-10-29: an
+  // app the owner set to release after approval got a MANUAL 2.0.2 and would have sat unreleased); a first version is MANUAL
+  const prev = others.slice().sort((a, b) => compareVersions(b.versionString, a.versionString))[0];
+  const prevType = prev ? rows.find(r => r.id === prev.id)?.attributes.releaseType : undefined;
+  const inherited = !attrs.releaseType && typeof prevType === 'string' && ['MANUAL', 'AFTER_APPROVAL'].includes(prevType) ? prevType : undefined;
+  const attributes: Record<string, string> = { platform, versionString: want, copyright: attrs.copyright, releaseType: attrs.releaseType ?? inherited ?? 'MANUAL' };
   if (attributes.releaseType === 'SCHEDULED' && attrs.earliestReleaseDate) attributes.earliestReleaseDate = attrs.earliestReleaseDate;
-  return { ...base, action: 'create', reason: `create version ${want} (no editable ${PLATFORM_LABEL[platform] ?? platform} version)`, changes: Object.entries(attributes).map(([field, to]) => ({ field, from: null, to })), attributes };
+  const why = attrs.releaseType ? 'apple.releaseType' : inherited ? `as version ${prev!.versionString}` : prev ? `version ${prev.versionString} has ${String(prevType ?? 'no readable type')}` : 'first version';
+  return { ...base, action: 'create', reason: `create version ${want} (no editable ${PLATFORM_LABEL[platform] ?? platform} version), release type ${attributes.releaseType} (${why})`,
+    changes: Object.entries(attributes).map(([field, to]) => ({ field, from: null, to })), attributes,
+    ...(attrs.releaseType && typeof prevType === 'string' && prevType !== attrs.releaseType ? { warning: `release type ${attrs.releaseType} (apple.releaseType) differs from version ${prev!.versionString} (${prevType})` } : {}) };
 }
 
 // ---- translation drafts ----
diff --git a/tests/listing-plan.test.ts b/tests/listing-plan.test.ts
index 638b555..a3acfbf 100644
--- a/tests/listing-plan.test.ts
+++ b/tests/listing-plan.test.ts
@@ -101,7 +101,7 @@ describe('apple listing plan', () => {
     const p = project({ ...BASE, play: undefined }, { 'store/appstore.md': APPLE_MD });
     const calls = ascRoutes([v('v-0', '1.0.0', 'READY_FOR_DISTRIBUTION')]);
     const j = jsonOut((await capture(() => appleListing(p.ctx(['--version', '1.1.0', '--dry', '--json'])))).out) as any;
-    expect(j.versionPlan).toMatchObject({ action: 'create', reason: 'create version 1.1.0 (no editable iOS version)' });
+    expect(j.versionPlan).toMatchObject({ action: 'create', reason: expect.stringContaining('create version 1.1.0 (no editable iOS version), release type MANUAL') });
     expect(j.versionLocales).toBeNull();
     await capture(() => appleListing(p.ctx(['--version', '1.1.0'])));
     expect(methods(calls).filter(m => m.includes('appStoreVersion'))).toEqual(['POST /v1/appStoreVersions', 'POST /v1/appStoreVersionLocalizations']);
diff --git a/tests/release-type-inherit.test.ts b/tests/release-type-inherit.test.ts
new file mode 100644
index 0000000..f2a8f76
--- /dev/null
+++ b/tests/release-type-inherit.test.ts
@@ -0,0 +1,16 @@
+import { expect, test } from 'bun:test';
+import { planVersion } from '../cli/lib/listing-plan';
+
+const row = (id: string, versionString: string, state: string, releaseType: string) => ({ id, attributes: { versionString, appStoreState: state, appVersionState: state, platform: 'IOS', releaseType } });
+
+test('a new version keeps the release type of the newest version before it unless apple.releaseType is set', () => {
+  const rows = [row('v1', '2.0.0', 'READY_FOR_DISTRIBUTION', 'MANUAL'), row('v2', '2.0.1', 'READY_FOR_DISTRIBUTION', 'AFTER_APPROVAL')];
+  const p = planVersion(rows, '2.0.2', { copyright: 'c' }, 'IOS');
+  expect(p.action).toBe('create');
+  expect(p.attributes.releaseType).toBe('AFTER_APPROVAL');
+  expect(p.reason).toContain('as version 2.0.1');
+  const set = planVersion(rows, '2.0.2', { copyright: 'c', releaseType: 'MANUAL' }, 'IOS');
+  expect(set.attributes.releaseType).toBe('MANUAL');
+  expect(set.warning).toContain('differs from version 2.0.1 (AFTER_APPROVAL)');
+  expect(planVersion([], '1.0.0', { copyright: 'c' }, 'IOS').attributes.releaseType).toBe('MANUAL');
+});

From 1c64320b6564428b990b4acde4956d2ab0d16a91 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 20:04:08 +0700
Subject: [PATCH 203/255] desktop-release: a fixed release tool left
 uncommitted for release --resume does not make the build dirty

---
 tools/desktop-release.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tools/desktop-release.ts b/tools/desktop-release.ts
index fb60ab3..0db4cb6 100644
--- a/tools/desktop-release.ts
+++ b/tools/desktop-release.ts
@@ -285,7 +285,8 @@ function writeVersionFiles(out: string, manifest: Manifest): void {
 
 function gitState(): { commit: string; dirty: boolean } {
   const commit = run(['git', 'rev-parse', 'HEAD'], { cwd: ROOT }).out.trim();
-  const dirty = run(['git', 'status', '--porcelain'], { cwd: ROOT }).out.trim().length > 0;
+  // a fixed release tool (release --resume after a tool bug) is not part of what ships: the build stays clean
+  const dirty = run(['git', 'status', '--porcelain'], { cwd: ROOT }).out.split('\n').some(l => l.trim() && !/^ M tools\/(desktop-)?release(-candidate)?\.ts$/.test(l));
   return { commit, dirty };
 }
 

From edbcdad15d72dd44fb6a22b6158813ea66342c31 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 20:21:52 +0700
Subject: [PATCH 204/255] gradle: comment without a home path

---
 cli/lib/gradle.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/lib/gradle.ts b/cli/lib/gradle.ts
index 8d14617..be988b6 100644
--- a/cli/lib/gradle.ts
+++ b/cli/lib/gradle.ts
@@ -38,7 +38,7 @@ export function pickGradle(root: string, cfg: PlayBuildConfig = {}): GradleTarge
     : ['capacitor.config.ts', 'capacitor.config.json', 'capacitor.config.js'].some(f => existsSync(join(root, f))) ? 'capacitor'
     : (() => { try { const p = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')); return !!(p.dependencies?.['react-native'] ?? p.devDependencies?.['react-native']); } catch { return false; } })() ? 'react-native'
     : 'native';
-  // resolve, not join: an absolute play.build.dir / --dir stays absolute (join made /Users/... a folder under the root)
+  // resolve, not join: an absolute play.build.dir / --dir stays absolute (join made an absolute path a folder under the root)
   const dirs = cfg.dir ? [resolve(root, cfg.dir)] : [join(root, 'android'), root];
   let dir = dirs.find(isGradleDir);
   if (!dir) throw new Error(`no Gradle project (settings.gradle) in ${dirs.map(d => relative(root, d) || '.').join(' or ')}: set play.build.dir${framework === 'capacitor' ? ' (or npx cap add android)' : ''}`);

From e185b61c8eb72a0cbb5532b1fadcf819f7fd9bd7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 20:24:54 +0700
Subject: [PATCH 205/255] storebound 0.8.60: version in package.json and every
 copy, CHANGELOG 0.8.60 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 1403a3f..0737002 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.59",
+      "version": "0.8.60",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 9ef75b7..7f422c2 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 485e4df..129826f 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cce219c..7db9e73 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.60 · 2026-10-29
+
 - `apple listing` creates a new version with the release type of the newest version before it (MANUAL or AFTER_APPROVAL) when `apple.releaseType` is not set; a first version stays MANUAL. The plan names where the type came from, and warns when `apple.releaseType` differs from the previous version's.
 - `play release <aab> --dry` uploads nothing: it names the versionCode it would upload and the track changes it would make (the bundle went into a discarded edit, and a long upload could outlive the edit: "This edit has expired").
 - `play build`: an absolute `--dir` / `play.build.dir` stays absolute (it was taken as a folder under the project and lost its leading slash); a `gradlew` without the exec bit (committed from Windows) is made executable with a note to commit the mode. The desktop release signs by key path only.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 4c36fe4..81ca07b 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 7a2ea0a..2f3a701 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.59"
+version = "0.8.60"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 4d8dd15..1ddfab9 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.59"
+version = "0.8.60"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 8d3540d..6f03b36 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 1eb98a9..01ee8b9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 9570442..9667245 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.59",
+  "version": "0.8.60",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 1abd0936c3dbe2cc0bd2fe8bce1a6662492839f3 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 22:33:59 +0700
Subject: [PATCH 206/255] testflight: description keys by language id or App
 Store locale, unknown keys are a config error, primary-locale check before
 Beta App Review

---
 CHANGELOG.md                        |  1 +
 cli/apple/testflight.ts             | 10 ++++++++++
 cli/lib/config.ts                   |  2 +-
 cli/lib/testflight.ts               | 10 ++++++++--
 tests/helpers/fake-stores.ts        |  1 +
 tests/tf-description-locale.test.ts | 14 ++++++++++++++
 6 files changed, 35 insertions(+), 3 deletions(-)
 create mode 100644 tests/tf-description-locale.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7db9e73..39ef0f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- TestFlight: `apple.testflight.description` takes a language id or its App Store locale (`en` or `en-US`; an `en-US` key was skipped silently), `check` names an unknown key, and `distribute --submit-review` stops (dry run: warns) when the app's primary locale has no beta localization (Beta App Review answers 422 MISSING_BETA_APP_LOCALIZATION).
 ## 0.8.60 · 2026-10-29
 
 - `apple listing` creates a new version with the release type of the newest version before it (MANUAL or AFTER_APPROVAL) when `apple.releaseType` is not set; a first version stays MANUAL. The plan names where the type came from, and warns when `apple.releaseType` differs from the previous version's.
diff --git a/cli/apple/testflight.ts b/cli/apple/testflight.ts
index 8f70951..24f35d4 100644
--- a/cli/apple/testflight.ts
+++ b/cli/apple/testflight.ts
@@ -319,6 +319,16 @@ export async function run(ctx: Ctx): Promise<void> {
     if (a.has('submit-review') && review) log(TAG, `beta review: already submitted (${review.attributes?.betaReviewState ?? '?'})`);
     if (external.length && !a.has('submit-review') && b.detail?.externalBuildState === 'READY_FOR_BETA_SUBMISSION')
       warn(TAG, 'external testers only get the build after Beta App Review: add --submit-review (asks first) or submit it in App Store Connect');
+    // Beta App Review refuses a build whose app has no beta localization in its primary locale (422
+    // MISSING_BETA_APP_LOCALIZATION): said before the submit, in the dry run too
+    if (wantsReview) {
+      const primary = String((await c.maybe(`/v1/apps/${appId}?fields[apps]=primaryLocale`))?.data?.attributes?.primaryLocale ?? '');
+      const have = (await c.all(`/v1/apps/${appId}/betaAppLocalizations?limit=200`)).map((l: J) => String(l.attributes.locale));
+      if (primary && !have.includes(primary)) {
+        const msg = `Beta App Review needs test information in the app's primary locale ${primary} (has: ${have.join(', ') || 'none'}): add it to apple.testflight.description (key ${primary} or its language id), then storebound apple testflight info`;
+        if (dry) warn(TAG, msg); else throw new Error(msg);
+      }
+    }
     if (dry) {
       await execute(c.asc, [...reqs, ...(wantsReview ? [betaReviewReq(b.id)] : [])], { dry, tag: TAG });
       done(TAG, 'distribute checked (dry run)');
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index cda074e..aea46a9 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -1210,7 +1210,7 @@ export function validateConfig(c: unknown): string[] {
     const enc = cfg.apple.usesNonExemptEncryption;
     if (enc !== undefined && typeof enc !== 'boolean') e.push('apple.usesNonExemptEncryption: true | false');
     if (cfg.apple.screenshotTypes && !cfg.apple.screenshotTypes.every(t => /^APP_[A-Z0-9_]+$/.test(t))) e.push('apple.screenshotTypes: display types like APP_IPHONE_67');
-    e.push(...validateTestflight(cfg.apple.testflight));
+    e.push(...validateTestflight(cfg.apple.testflight, cfg.languages ?? []));
     e.push(...validateSigning(cfg.apple.signing), ...validateAppleBuild(cfg.apple.build));
     const catalogIds = new Set([...(cfg.products ?? []).map(p => p.id), ...(cfg.subscriptions ?? []).flatMap(g => (g.subscriptions ?? []).map(x => x.id))]);
     e.push(...validatePromoted(cfg.apple.promoted, catalogIds));
diff --git a/cli/lib/testflight.ts b/cli/lib/testflight.ts
index 41c0639..b1bffc6 100644
--- a/cli/lib/testflight.ts
+++ b/cli/lib/testflight.ts
@@ -54,9 +54,14 @@ export const groupFromApi = (g: { id: string; attributes: Record<string, unknown
 });
 
 /** Problems with the testflight config. Pure. */
-export function validateTestflight(t: TfConfig | undefined): string[] {
+export function validateTestflight(t: TfConfig | undefined, langs: { id: string; apple?: string }[] = []): string[] {
   if (!t) return [];
   const e: string[] = [];
+  if (t.description && typeof t.description === 'object' && langs.length) {
+    const known = new Set(langs.flatMap(l => [l.id, ...(l.apple ? [l.apple] : [])]));
+    const bad = Object.keys(t.description).filter(k => !known.has(k));
+    if (bad.length) e.push(`apple.testflight.description: ${bad.map(k => `'${k}'`).join(', ')} is not a language of the config (use a language id or its App Store locale: ${langs.filter(l => l.apple).map(l => `${l.id} / ${l.apple}`).join(', ')})`);
+  }
   const names = new Set<string>();
   for (const [i, g] of (t.groups ?? []).entries()) {
     const at = `apple.testflight.groups[${i}]`;
@@ -315,7 +320,8 @@ export function betaDescriptions(t: TfConfig | undefined, langs: { id: string; a
   const out: Record<string, string> = {};
   for (const l of langs) {
     if (!l.apple) continue;
-    const d = typeof t.description === 'string' ? t.description : t.description[l.id];
+    // a language id ('en') or its App Store locale ('en-US'): an 'en-US' key was silently skipped (Acme 2026-10-29)
+    const d = typeof t.description === 'string' ? t.description : (t.description[l.id] ?? t.description[l.apple]);
     if (d) out[l.apple] = d;
   }
   return out;
diff --git a/tests/helpers/fake-stores.ts b/tests/helpers/fake-stores.ts
index 272ec93..f5497e9 100644
--- a/tests/helpers/fake-stores.ts
+++ b/tests/helpers/fake-stores.ts
@@ -15,6 +15,7 @@ const UPLOAD_HOST = 'https://upload.example.com/';
 
 /** list relationship -> resource type of its items (parent type / relationship name); `one` for to-one relationships. */
 const LISTS: Record<string, { type: string; one?: boolean }> = {
+  'apps/betaAppLocalizations': { type: 'betaAppLocalizations' },
   'apps/inAppPurchasesV2': { type: 'inAppPurchases' },
   'inAppPurchases/inAppPurchaseLocalizations': { type: 'inAppPurchaseLocalizations' },
   'inAppPurchases/iapPriceSchedule': { type: 'inAppPurchasePriceSchedules', one: true },
diff --git a/tests/tf-description-locale.test.ts b/tests/tf-description-locale.test.ts
new file mode 100644
index 0000000..0a52026
--- /dev/null
+++ b/tests/tf-description-locale.test.ts
@@ -0,0 +1,14 @@
+import { expect, test } from 'bun:test';
+import { betaDescriptions, validateTestflight } from '../cli/lib/testflight';
+
+const langs = [{ id: 'en', apple: 'en-US' }, { id: 'tr', apple: 'tr' }];
+
+test('beta descriptions take a language id or its App Store locale ("en-US" was skipped silently)', () => {
+  expect(betaDescriptions({ description: { 'en-US': 'Hello', tr: 'Merhaba' } }, langs)).toEqual({ 'en-US': 'Hello', tr: 'Merhaba' });
+  expect(betaDescriptions({ description: { en: 'Hello' } }, langs)).toEqual({ 'en-US': 'Hello' });
+});
+
+test('an unknown description key is a config error naming the accepted keys', () => {
+  expect(validateTestflight({ description: { 'en-US': 'x', de: 'y' } }, langs).join()).toContain("'de' is not a language of the config");
+  expect(validateTestflight({ description: { 'en-US': 'x', tr: 'y' } }, langs)).toEqual([]);
+});

From 9b0cc0bf108c006810fe1c5dccb022ceee4a3410 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 22:37:03 +0700
Subject: [PATCH 207/255] regenerate the api coverage tables

---
 cli/api/wrapped.gen.ts | 2 +-
 docs/api-coverage.md   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index e3836c5..87c30a2 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -96,7 +96,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'apps_customerReviews_getToManyRelated': 'reviews',
     'apps_gameCenterDetail_getToOneRelated': 'apple/game-center',
     'apps_getCollection': 'apple/asc apple/bundle apps console/app-id console/verify lib/store-apps',
-    'apps_getInstance': 'apple/appinfo apple/status apps onboard watch',
+    'apps_getInstance': 'apple/appinfo apple/status apple/testflight apps onboard watch',
     'apps_inAppPurchasesV2_getToManyRelated': 'apple/first-products apple/iap apple/iap-review apple/iap-submit apple/offer-codes apple/promoted apple/status catalog prices validate',
     'apps_perfPowerMetrics_getToManyRelated': 'health',
     'apps_promotedPurchases_getToManyRelated': 'apple/promoted',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index f1ca57c..6ffd6c3 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -459,7 +459,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_gameCenterEnabledVersions_getToManyRelated` | GET | `/v1/apps/{id}/gameCenterEnabledVersions` | read |  |
 | `apps_gameCenterEnabledVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/gameCenterEnabledVersions` | read |  |
 | `apps_getCollection` | GET | `/v1/apps` | read | apple/asc, apple/bundle, apps, console/app-id, console/verify, lib/store-apps |
-| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple/appinfo, apple/status, apps, onboard, watch |
+| `apps_getInstance` | GET | `/v1/apps/{id}` | read | apple/appinfo, apple/status, apple/testflight, apps, onboard, watch |
 | `apps_inAppPurchasesV2_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchasesV2` | read | apple/first-products, apple/iap, apple/iap-review, apple/iap-submit, apple/offer-codes, apple/promoted, apple/status, catalog, prices, validate |
 | `apps_inAppPurchasesV2_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/inAppPurchasesV2` | read |  |
 | `apps_inAppPurchases_getToManyRelated` | GET | `/v1/apps/{id}/inAppPurchases` | read |  |

From 064a708fdb08724c1710e1f812ccfeed280e5d2d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Thu, 29 Oct 2026 22:40:00 +0700
Subject: [PATCH 208/255] storebound 0.8.61: version in package.json and every
 copy, CHANGELOG 0.8.61 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 0737002..eff0a86 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.60",
+      "version": "0.8.61",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 7f422c2..2b04ad5 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 129826f..75e64f5 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 39ef0f6..e9f4aca 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.61 · 2026-10-29
+
 - TestFlight: `apple.testflight.description` takes a language id or its App Store locale (`en` or `en-US`; an `en-US` key was skipped silently), `check` names an unknown key, and `distribute --submit-review` stops (dry run: warns) when the app's primary locale has no beta localization (Beta App Review answers 422 MISSING_BETA_APP_LOCALIZATION).
 ## 0.8.60 · 2026-10-29
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 81ca07b..b39d7e5 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 2f3a701..76ea477 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.60"
+version = "0.8.61"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 1ddfab9..5429871 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.60"
+version = "0.8.61"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 6f03b36..2360261 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 01ee8b9..ac06fb9 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 9667245..b72b748 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.60",
+  "version": "0.8.61",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 724f5b976332c721a048182a5a20e5bc59f9951f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 30 Oct 2026 00:16:11 +0700
Subject: [PATCH 209/255] apple build: a line before each slow step (App Store
 Connect reads, device families, web build)

---
 CHANGELOG.md       | 1 +
 cli/apple/build.ts | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e9f4aca..02edc77 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `apple build` prints a line before each slow step (App Store Connect reads, device families, web build), so a run without a terminal that stalls shows where.
 ## 0.8.61 · 2026-10-29
 
 - TestFlight: `apple.testflight.description` takes a language id or its App Store locale (`en` or `en-US`; an `en-US` key was skipped silently), `check` names an unknown key, and `distribute --submit-review` stops (dry run: warns) when the app's primary locale has no beta localization (Beta App Review answers 422 MISSING_BETA_APP_LOCALIZATION).
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index d877447..caefc02 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -172,6 +172,8 @@ export async function run(ctx: Ctx): Promise<void> {
   let build = a.get('build-number');
   let teamId = signing.teamId ?? null;
   if (!build || !teamId) {
+    // a line before each slow step: a run without a terminal (launchd job, CI) that stalls shows where
+    log(TAG, `reading App Store Connect (${[!build ? 'next build number' : '', !teamId ? 'team id' : ''].filter(Boolean).join(', ')})`);
     try {
       const c = await ascClient(root, bundleId, config.apple?.appId);
       if (!build) {
@@ -191,6 +193,7 @@ export async function run(ctx: Ctx): Promise<void> {
   // device families: an upload that drops one the live version supports (iPad) is refused only AFTER the archive (ITMS-90101)
   // so compare first: stop before building with the exact fix (--allow-device-gap builds anyway)
   let deviceFamilies: FamilyVerdict[] = [];
+  log(TAG, 'reading the device families of the live version');
   try {
     const c = await ascClient(root, bundleId, config.apple?.appId);
     deviceFamilies = familyVerdicts({ live: await liveDeviceFamilies(c, await c.app()), project: projectFamilies(root, bundleId, target.project), ipad: config.apple?.ipad });
@@ -268,6 +271,7 @@ export async function run(ctx: Ctx): Promise<void> {
     else addToSearchList(keychain!);
   }
   shipPhase('prebuild', 'web build / prebuild');
+  log(TAG, 'web build / prebuild step');
   const web = await webStep({ ...webOpts, dry: false });
   for (const n of target.notes) log(TAG, n);
   const rsync = foreignRsync(process.env.PATH);

From 152e40fb8ab83a39da45c3fec3059cebbc083ed2 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 30 Oct 2026 00:26:07 +0700
Subject: [PATCH 210/255] doctor: warn when storebound runs from a folder macOS
 guards (a launchd job hangs opening it)

---
 CHANGELOG.md             |  1 +
 cli/doctor.ts            | 19 ++++++++++++++++++-
 tests/doctor-tcc.test.ts |  9 +++++++++
 3 files changed, 28 insertions(+), 1 deletion(-)
 create mode 100644 tests/doctor-tcc.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 02edc77..baaae38 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 
 ## Unreleased
 
+- `doctor` warns when storebound runs from a folder macOS guards (~/Desktop, ~/Documents, ~/Downloads, iCloud Drive; e.g. a `bun link` to a checkout there): a launchd job or CI agent without access to it blocks in open() with no output.
 - `apple build` prints a line before each slow step (App Store Connect reads, device families, web build), so a run without a terminal that stalls shows where.
 ## 0.8.61 · 2026-10-29
 
diff --git a/cli/doctor.ts b/cli/doctor.ts
index cfd4830..4cf63f8 100644
--- a/cli/doctor.ts
+++ b/cli/doctor.ts
@@ -4,7 +4,8 @@
 //   storebound doctor [--dir .] [--json]
 //   storebound doctor --install <tool> [--yes]   runs this OS's install command for one tool (winget / brew / apt);
 //                                                without --yes only prints it. Never sudo, never an admin prompt.
-import { existsSync } from 'node:fs';
+import { existsSync, realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
 import type { Args } from './lib/args';
@@ -114,6 +115,8 @@ export async function run(args: Args): Promise<void> {
   const set = r.credentials.filter(c => c.status === 'set').map(c => c.key), ph = r.credentials.filter(c => c.status === 'placeholder').map(c => c.key);
   log('doctor', `credentials: ${set.length ? set.join(', ') : 'none set'}${ph.length ? ` · placeholders (treated as missing): ${ph.join(', ')}` : ''}`);
   log('doctor', playLine(r.play));
+  const tcc = protectedInstall(realScript(), homedir());
+  if (tcc) log('doctor', `WARN this storebound runs from ${tcc}: macOS guards that folder, so a launchd job, CI agent or anything started outside a terminal with access blocks forever when it opens the file (no output, no error). Install it from npm instead: bun add -g storebound@latest (or npm i -g storebound)`);
   if (r.foreignRsync) log('doctor', `rsync: ${r.foreignRsync} is first on PATH and breaks Xcode exportArchive ("Copy failed") outside storebound; storebound apple build puts /usr/bin first. Fix for everything else: brew unlink rsync, or put /usr/bin before it`);
   const missing = r.tools.filter(t => !t.found || t.status === 'outdated');
   if (!missing.length) { log('doctor', 'everything storebound can use is here'); return; }
@@ -125,3 +128,17 @@ export async function run(args: Args): Promise<void> {
   }
   log('doctor', `${missing.length} missing. Store work needs none of them; screenshots, previews, icons and captures do.`);
 }
+
+/** The real path of the running storebound (a bun link / npm link resolves into the checkout). */
+function realScript(): string { try { return realpathSync(process.argv[1] ?? ''); } catch { return process.argv[1] ?? ''; } }
+
+/** macOS only: the guarded home folder (Desktop, Documents, Downloads, iCloud Drive) a path lies in, or null. A process
+ *  without access to it (a launchd job, a CI agent) hangs in open() while macOS waits for a consent nobody can give. */
+export function protectedInstall(path: string, home: string, platform: string = process.platform): string | null {
+  if (platform !== 'darwin' || !path || !home) return null;
+  for (const d of ['Desktop', 'Documents', 'Downloads', 'Library/Mobile Documents']) {
+    const dir = `${home.endsWith('/') ? home.slice(0, -1) : home}/${d}`; // posix paths: the check is macOS-only
+    if (path === dir || path.startsWith(dir + '/')) return `~/${d}`;
+  }
+  return null;
+}
diff --git a/tests/doctor-tcc.test.ts b/tests/doctor-tcc.test.ts
new file mode 100644
index 0000000..00b78ec
--- /dev/null
+++ b/tests/doctor-tcc.test.ts
@@ -0,0 +1,9 @@
+import { expect, test } from 'bun:test';
+import { protectedInstall } from '../cli/doctor';
+
+test('a storebound running from ~/Desktop (a bun link to a checkout) is named; npm / bun global installs are fine', () => {
+  expect(protectedInstall('/Users/you/Desktop/storebound/dist/storebound.mjs', '/Users/you', 'darwin')).toBe('~/Desktop');
+  expect(protectedInstall('/Users/you/Documents/x/cli/index.ts', '/Users/you', 'darwin')).toBe('~/Documents');
+  expect(protectedInstall('/Users/you/.bun/install/global/node_modules/storebound/dist/storebound.mjs', '/Users/you', 'darwin')).toBeNull();
+  expect(protectedInstall('/Users/you/Desktop/x.mjs', '/Users/you', 'linux')).toBeNull();
+});

From a850ba66702cf2a0cb682ecbbbaa2932b305e761 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 30 Oct 2026 00:29:52 +0700
Subject: [PATCH 211/255] storebound 0.8.62: version in package.json and every
 copy, CHANGELOG 0.8.62 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index eff0a86..8020731 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.61",
+      "version": "0.8.62",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 2b04ad5..08f4bef 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 75e64f5..96b405f 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index baaae38..1211a24 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.62 · 2026-10-29
+
 - `doctor` warns when storebound runs from a folder macOS guards (~/Desktop, ~/Documents, ~/Downloads, iCloud Drive; e.g. a `bun link` to a checkout there): a launchd job or CI agent without access to it blocks in open() with no output.
 - `apple build` prints a line before each slow step (App Store Connect reads, device families, web build), so a run without a terminal that stalls shows where.
 ## 0.8.61 · 2026-10-29
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index b39d7e5..98c0ae7 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 76ea477..b2ca85b 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.61"
+version = "0.8.62"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 5429871..347f85d 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.61"
+version = "0.8.62"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 2360261..b28aa2e 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index ac06fb9..ed9b21e 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b72b748..0478e1d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.61",
+  "version": "0.8.62",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 4b6c28aff2f09056dfc1940d6847771920faf69a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 16:39:15 +0700
Subject: [PATCH 212/255] desktop: a second --hidden start stays in the tray
 (single-instance no longer opens the window)

---
 CHANGELOG.md                      | 2 ++
 apps/desktop/src-tauri/src/lib.rs | 5 +++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1211a24..57ddf14 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Desktop: a second start at logon (`--hidden`, e.g. a Startup folder shortcut next to the Run entry) keeps the app in the tray instead of opening its window.
+
 ## 0.8.62 · 2026-10-29
 
 - `doctor` warns when storebound runs from a folder macOS guards (~/Desktop, ~/Documents, ~/Downloads, iCloud Drive; e.g. a `bun link` to a checkout there): a launchd job or CI agent without access to it blocks in open() with no output.
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index 0e55f5c..17627f4 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -322,8 +322,9 @@ pub fn run() {
     early_trace();
     linux_webkit_env();
     let app = tauri::Builder::default()
-        // single-instance first: a second start (or a storebound:// link) focuses the running app instead
-        .plugin(tauri_plugin_single_instance::init(|app, _argv, _cwd| show_main(app)))
+        // single-instance first: a second start (or a storebound:// link) focuses the running app instead; a second
+        // logon start (--hidden: the Run entry plus a Startup folder shortcut) stays in the tray
+        .plugin(tauri_plugin_single_instance::init(|app, argv, _cwd| if !argv.iter().any(|a| a == "--hidden") { show_main(app) }))
         .plugin(tauri_plugin_deep_link::init())
         // never restore "visible": a --hidden start would otherwise pop the window up
         .plugin(tauri_plugin_window_state::Builder::new().with_filter(|label| !label.starts_with(menu_panel::LABEL_PREFIX)).with_state_flags(tauri_plugin_window_state::StateFlags::all() & !tauri_plugin_window_state::StateFlags::VISIBLE).build())

From b1f1b206d3118bda40393b89a5b5296db8e6a2e1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 16:43:58 +0700
Subject: [PATCH 213/255] storebound 0.8.63: version in package.json and every
 copy, CHANGELOG 0.8.63 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 8020731..b2fe8dc 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.62",
+      "version": "0.8.63",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 08f4bef..30a8d7e 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 96b405f..54e45ca 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 57ddf14..267112c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.63 · 2026-11-02
+
 - Desktop: a second start at logon (`--hidden`, e.g. a Startup folder shortcut next to the Run entry) keeps the app in the tray instead of opening its window.
 
 ## 0.8.62 · 2026-10-29
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 98c0ae7..b4aab53 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index b2ca85b..e3dbb76 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.62"
+version = "0.8.63"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 347f85d..d3a2306 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.62"
+version = "0.8.63"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index b28aa2e..febcc13 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index ed9b21e..b2050da 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 0478e1d..462c182 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.62",
+  "version": "0.8.63",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From f5da7c9f7a1207825d366185f725da1802fdb7c0 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 18:16:25 +0700
Subject: [PATCH 214/255] validate: macOS versions need Mac screenshots, Play
 reads survive an ended edit; macOS build numbers across platforms; Mac build
 prebuild + apple.macAppCheck; signing wording off the Mac; dry flows plan
 uploads

---
 CHANGELOG.md                       |   6 ++
 cli/api/wrapped.gen.ts             |   6 +-
 cli/apple/build-mas.ts             |  52 ++++++++++++---
 cli/apple/build.ts                 |   8 +--
 cli/apple/next-build.ts            |  22 +++++--
 cli/apple/screenshots.ts           |   6 +-
 cli/apple/upload.ts                |   2 +-
 cli/flow.ts                        |  16 ++++-
 cli/lib/config.ts                  |   4 ++
 cli/lib/embedded.ts                |   4 +-
 cli/lib/flow.ts                    |  43 ++++++++++++-
 cli/lib/signing.ts                 |   6 +-
 cli/validate.ts                    |  36 ++++++-----
 docs/api-coverage.md               |   6 +-
 skills/release-flows/SKILL.md      |   9 ++-
 templates/workflows/beta.yml       |  14 +++-
 templates/workflows/release.yml    |  20 ++++--
 tests/flow-dry.test.ts             | 100 +++++++++++++++++++++++++++++
 tests/next-build-platforms.test.ts |  73 +++++++++++++++++++++
 tests/validate-macos.test.ts       |  52 +++++++++++++++
 tests/validate-play-edit.test.ts   |  91 ++++++++++++++++++++++++++
 21 files changed, 519 insertions(+), 57 deletions(-)
 create mode 100644 tests/flow-dry.test.ts
 create mode 100644 tests/next-build-platforms.test.ts
 create mode 100644 tests/validate-macos.test.ts
 create mode 100644 tests/validate-play-edit.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 267112c..ab04470 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 
 ## Unreleased
 
+- `validate` / `release plan`: a macOS version is checked against Mac screenshots (APP_DESKTOP, with `apple.mac`), not the iPhone / iPad sets; with no editable version, iOS is picked over macOS.
+- `validate --play`: reads go through the locked read-only edit and retry once on a fresh edit when Play ends it ("This Edit has been deleted" was shown as a blocker; it is now a warning to re-run at most).
+- Build numbers for macOS (`apple build --platform macos`, `apple upload` of a .pkg) come from every build of the app, as `apple next-build` does (a macOS-only list proposed a number an iOS build already had).
+- `apple build --platform macos` runs `build.prebuild` / `apple.prebuild` before `tauri build` (`--no-prebuild` skips it), and the new `apple.macAppCheck` command on the built .app before productbuild ({file} = the .app; a nonzero exit stops the build).
+- `apple signing status` / the Mac build dry run on Windows or Linux say the keys live on the Mac that made the certificates (build there) instead of suggesting a new certificate.
+- Flows: a dry `flow run` plans the upload, TestFlight wait and distribute steps after a dry build instead of failing on the missing IPA; `beta` and `release` need VERSION (no silent 1.0.0); `beta` distributes to the config's internal TestFlight group when GROUP is empty; `release` has optional macOS steps (MAC_TAURI), PLAY_TRACK (e.g. beta = open testing) and a promote owner step.
 ## 0.8.63 · 2026-11-02
 
 - Desktop: a second start at logon (`--hidden`, e.g. a Startup folder shortcut next to the Run entry) keeps the app in the tray instead of opening its window.
diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 87c30a2..0fced3e 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -133,7 +133,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'builds_betaBuildLocalizations_getToManyRelated': 'apple/testflight',
     'builds_buildBetaDetail_getToOneRelated': 'apple/testflight',
     'builds_diagnosticSignatures_getToManyRelated': 'health',
-    'builds_getCollection': 'apple/build apple/build-mas apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
+    'builds_getCollection': 'apple/encryption apple/listing apple/next-build apple/resubmit apple/status apple/testflight apple/upload art health lib/store-apps triage',
     'builds_getInstance': 'apple/device-families',
     'builds_updateInstance': 'apple/encryption lib/build-ops',
     'bundleIdCapabilities_createInstance': 'lib/signing',
@@ -245,13 +245,13 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'androidpublisher.edits.bundles.upload': 'play/release play/upload',
     'androidpublisher.edits.commit': 'play/client',
     'androidpublisher.edits.countryavailability.get': 'validate',
-    'androidpublisher.edits.delete': 'apps onboard play/client validate',
+    'androidpublisher.edits.delete': 'apps onboard play/client',
     'androidpublisher.edits.details.get': 'apps onboard play/listing play/status validate',
     'androidpublisher.edits.details.update': 'play/listing',
     'androidpublisher.edits.images.deleteall': 'play/images',
     'androidpublisher.edits.images.list': 'apps art play/images play/listing validate',
     'androidpublisher.edits.images.upload': 'play/images play/listing',
-    'androidpublisher.edits.insert': 'apps onboard play/client validate',
+    'androidpublisher.edits.insert': 'apps onboard play/client',
     'androidpublisher.edits.listings.get': 'onboard',
     'androidpublisher.edits.listings.list': 'art listing-store play/listing play/status validate',
     'androidpublisher.edits.listings.patch': 'listing-store',
diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 865b233..6440af6 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -1,7 +1,7 @@
 // Mac App Store build of a Tauri app: `tauri build --bundles app`, signed for the Mac App Store, then productbuild to a .pkg.
 //   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--target universal-apple-darwin]
 //       [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
-// Steps: Tauri project -> version / build number (next free one on App Store Connect, platform MAC_OS) -> signing
+// Steps: Tauri project -> version / build number (next free one on App Store Connect, every platform) -> signing
 // identities from the keychain ("Apple Distribution" or "3rd Party Mac Developer Application"; "Mac Installer
 // Distribution" or "3rd Party Mac Developer Installer") -> Mac App Store provisioning profile (--profile, installed, or
 // from the API) -> entitlements (app sandbox + application / team identifier, the project's own keys kept) -> a
@@ -19,10 +19,13 @@ import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { parseMobileprovision, parsePlist, type PlistValue } from '../lib/plist';
-import { nextBuildNumber } from '../lib/release';
+import { appNextBuild } from './next-build';
 import { parseIdentities, profileDirs, readProfiles, type ApiProfile } from '../lib/signing';
 import { sshBuildRefusal } from '../lib/keychain';
 import { remoteBuildSession, showCmd } from '../lib/xcode';
+import { prebuildFor, prebuildsDone, runPrebuild } from '../lib/web-assets';
+import { preCheckCommand } from '../lib/pre-check';
+import { pump } from '../lib/runner';
 import {
   appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
   pickMasProfiles, pkgProblems, parsePkgSignature, readAppInfo, scanPathLeaks, tauriOverlay, categoryId,
@@ -41,6 +44,16 @@ const run1 = (argv: string[], timeout = 120_000): { ok: boolean; out: string } =
 };
 
 /** The Tauri CLI: the project's node_modules/.bin/tauri (walking up), `cargo tauri`, else bunx. */
+/** One sh -c command in root, its output streamed; the exit code and the last lines. */
+async function runCheck(cmd: string, root: string): Promise<{ ok: boolean; code: number; tail: string }> {
+  const p = rt.spawn(['sh', '-c', cmd], { cwd: root, stdin: 'ignore', stdout: 'pipe', stderr: 'pipe', env: process.env });
+  const tail: string[] = [];
+  const each = (line: string, kind: 'stdout' | 'stderr'): void => { tail.push(line); if (tail.length > 10) tail.shift(); (kind === 'stderr' ? console.error : console.log)(`  ${line}`); };
+  await Promise.all([pump(p.stdout, 'stdout', each), pump(p.stderr, 'stderr', each)]);
+  const code = await p.exited;
+  return { ok: code === 0, code, tail: tail.join('\n') };
+}
+
 export function tauriCommand(cwd: string, exists: (p: string) => boolean = existsSync, which: (c: string) => string | null = rt.which): string[] {
   for (let d = cwd, prev = ''; d !== prev; prev = d, d = dirname(d)) { const p = join(d, 'node_modules', '.bin', 'tauri'); if (exists(p)) return [p]; }
   if (which('cargo-tauri')) return ['cargo', 'tauri'];
@@ -72,7 +85,13 @@ async function fetchMasProfile(c: Asc, bundleId: string, dest: string): Promise<
   return dest;
 }
 
-export async function run(ctx: Ctx): Promise<void> {
+/** The dry-run line about signing identities: on a machine that is not a Mac, say so instead of "none found". */
+export function identityLine(o: { platform: string; appIdentity: string | null; installerIdentity: string | null; profile: string | null }): string {
+  if (o.platform !== 'darwin') return `this is not a build machine: Mac App Store builds run on a Mac (the signing identities live in its keychain), so none were looked up here; profile: ${o.profile ?? '(none)'}`;
+  return `app identity: ${o.appIdentity ?? '(none found)'}; installer identity: ${o.installerIdentity ?? '(none found)'}; profile: ${o.profile ?? '(none)'}`;
+}
+
+export async function run(ctx: Ctx, platform: string = process.platform): Promise<void> {
   const { config, root, resolve } = ctx.loaded;
   const a = ctx.args;
   const bundleId = need(config.apple?.bundleId, 'apple.bundleId');
@@ -92,9 +111,10 @@ export async function run(ctx: Ctx): Promise<void> {
     try {
       client = await ascClient(root, bundleId, config.apple?.appId);
       if (!build) {
-        const builds = await client.all(`/v1/builds?filter[app]=${await client.app()}&filter[preReleaseVersion.platform]=MAC_OS&limit=200&fields[builds]=version`);
-        build = nextBuildNumber(builds.map(b => String(b.attributes.version)));
-        log(TAG, `${builds.length} macOS builds on App Store Connect: next build number ${build} (CFBundleVersion must increase)`);
+        // every platform of the app record, not only macOS: CFBundleVersion must be unique across all its builds
+        const found = await appNextBuild(client);
+        build = found.next;
+        log(TAG, `${found.builds} builds (all platforms) on App Store Connect: next build number ${build} (CFBundleVersion must increase)`);
       }
       if (!teamId) teamId = (await findBundleId(client, bundleId))?.attributes?.seedId ?? null;
     } catch (e) {
@@ -107,7 +127,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const team = teamId ?? '<TEAM_ID>';
 
   // identities and profile (a real signed run needs them; a dry run shows placeholders)
-  const mac = process.platform === 'darwin';
+  const mac = platform === 'darwin';
   let appIdentity: string | null = null, installerIdentity: string | null = null;
   if (!unsigned && mac) {
     const picked = pickMasIdentities(parseIdentities(run1(['security', 'find-identity', '-v']).out), teamId);
@@ -142,18 +162,26 @@ export async function run(ctx: Ctx): Promise<void> {
   const overlay = tauriOverlay({ appIdentity, entitlementsFile: entFile, profile, version, build: buildNo, unsigned, minOs: tauri.minOs, category });
   const input = { tauri, tauriCmd, target, out, configFile, entitlementsFile: entFile, profile, appIdentity, installerIdentity: installerIdentity ?? '<Mac Installer Distribution identity>', version, build: buildNo, unsigned, pathFree, pkg };
   const steps = masSteps(input);
+  // the same hooks as apple build: build.prebuild / apple.prebuild first (a project computes its build-time env there),
+  // apple.macAppCheck on the built .app before productbuild (e.g. a project's own check that a value was stamped in)
+  const prebuild = prebuildFor(config, 'apple') ?? null;
+  const prebuildSkip = !prebuild ? undefined : a.has('no-prebuild') ? '--no-prebuild' : prebuildsDone().has(prebuild) ? 'already ran in this flow run' : undefined;
+  const appCheck = config.apple?.macAppCheck?.trim() || null;
   const existingEnt = tauri.entitlements && existsSync(tauri.entitlements) ? (parsePlist(readFileSync(tauri.entitlements)) as Record<string, PlistValue>) : undefined;
   const ent = masEntitlements({ teamId: team, bundleId, existing: existingEnt });
   const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
     profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
+    prebuild, ...(prebuildSkip ? { prebuildSkip } : {}), appCheck,
     steps: [showCmd(steps.tauri, null), showCmd(steps.codesignVerify, null), showCmd(steps.productbuild, null), showCmd(steps.pkgCheck, null)], out: relative(root, out) || '.', pkg: relative(root, pkg) };
   if (dry) {
     if (json) { printJson(plan); return; }
     log(TAG, `Tauri ${tauri.productName} (${bundleId}) ${version} (${buildNo}) for ${target}, ${unsigned ? 'UNSIGNED' : 'Mac App Store signing'}${pathFree ? ', path-free' : ''}`);
-    log(TAG, `app identity: ${appIdentity ?? '(none found)'}; installer identity: ${installerIdentity ?? '(none found)'}; profile: ${plan.profile ?? '(none)'}`);
+    log(TAG, identityLine({ platform, appIdentity, installerIdentity, profile: plan.profile }));
     log(TAG, `entitlements: ${plan.entitlements.join(', ')}`);
     if (pathFree) log(TAG, `RUSTFLAGS: ${plan.env.RUSTFLAGS}`);
+    if (prebuild) log(TAG, prebuildSkip ? `prebuild skipped (${prebuildSkip}): ${prebuild}` : `would run the prebuild: ${prebuild}`);
     for (const s of plan.steps) log(TAG, `would run: ${s}`);
+    if (appCheck) log(TAG, `would check the built .app: ${appCheck}`);
     done(TAG, 'macOS build planned (dry run)');
     return;
   }
@@ -164,6 +192,7 @@ export async function run(ctx: Ctx): Promise<void> {
   mkdirSync(out, { recursive: true });
   writeFileSync(entFile, entitlementsXml(ent));
   writeFileSync(configFile, `${JSON.stringify(overlay, null, 2)}\n`);
+  if (prebuild && !prebuildSkip) await runPrebuild(prebuild, root, TAG);
   shipPhase('build', `tauri build ${target}, build ${buildNo}`);
   await runLogged(steps.tauri, tauri.cwd, join(out, 'tauri-build.log'), showCmd(steps.tauri, null), env);
   const appDir = findBuiltApp(tauri.dir, root, target, tauri.productName);
@@ -179,6 +208,13 @@ export async function run(ctx: Ctx): Promise<void> {
     { bundleId, version, build: buildNo, signed: !unsigned, pathFree });
   for (const w of checks.warnings) warn(TAG, w);
   if (checks.errors.length) throw new Error(`${basenameOf(appDir)} was built, but the Mac App Store would refuse it:\n${checks.errors.map(x => `  ${x}`).join('\n')}`);
+  if (appCheck) {
+    const cmd = preCheckCommand(appCheck, appDir);
+    log(TAG, `apple.macAppCheck: $ ${cmd}`);
+    const r = await runCheck(cmd, root);
+    if (!r.ok) throw new Error(`apple.macAppCheck failed (exit ${r.code}) on ${basenameOf(appDir)}; nothing packaged:\n${r.tail}`);
+    log(TAG, 'apple.macAppCheck: ok');
+  }
   shipPhase('sign', 'productbuild');
   rmSync(exportPath, { recursive: true, force: true });
   mkdirSync(exportPath, { recursive: true });
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index caefc02..18093db 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -34,7 +34,7 @@ import { done, log, printJson, warn } from '../lib/log';
 import { derivedDataFor, archiveScanDirs, leakNeedles, leakProblem, outsideHome, pathFreeSettings, scanForPaths } from '../lib/path-free';
 import { pump } from '../lib/runner';
 import { parseMobileprovision, toXmlPlist } from '../lib/plist';
-import { nextBuildNumber } from '../lib/release';
+import { appNextBuild } from './next-build';
 import { exportOptions, profileDirs } from '../lib/signing';
 import { type FamilyVerdict, familyVerdicts, projectFamilies } from '../lib/device-families';
 import { liveDeviceFamilies } from './device-families';
@@ -177,9 +177,9 @@ export async function run(ctx: Ctx): Promise<void> {
     try {
       const c = await ascClient(root, bundleId, config.apple?.appId);
       if (!build) {
-        const builds = await c.all(`/v1/builds?filter[app]=${await c.app()}&limit=200&fields[builds]=version`);
-        build = nextBuildNumber(builds.map(b => String(b.attributes.version)));
-        log(TAG, `${builds.length} builds on App Store Connect: next build number ${build}`);
+        const found = await appNextBuild(c);
+        build = found.next;
+        log(TAG, `${found.builds} builds on App Store Connect: next build number ${build}`);
       }
       if (!teamId) teamId = (await findBundleId(c, bundleId))?.attributes?.seedId ?? null;
     } catch (e) {
diff --git a/cli/apple/next-build.ts b/cli/apple/next-build.ts
index 5c4a560..530b28f 100644
--- a/cli/apple/next-build.ts
+++ b/cli/apple/next-build.ts
@@ -7,15 +7,25 @@ import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
 import { printJson } from '../lib/log';
 import { nextBuildNumber } from '../lib/release';
-import { ascClient } from './asc';
+import { ascClient, type Asc } from './asc';
+
+/**
+ * The one place that computes the next CFBundleVersion: the highest build of the app over EVERY platform (iOS, macOS,
+ * tvOS, visionOS), every processing state and every page, plus one. CFBundleVersion must be unique across the app
+ * record's builds, so a platform filter (a macOS build once got a number an uploaded macOS build already had) or a
+ * missed page gives a number the store refuses. `apple next-build`, `apple build` and `apple build --platform macos`
+ * (also their dry runs) all call this, so they agree.
+ */
+export async function appNextBuild(c: Pick<Asc, 'all' | 'app'>): Promise<{ next: string; builds: number }> {
+  const builds = await c.all(`/v1/builds?filter[app]=${await c.app()}&limit=200&fields[builds]=version`);
+  return { next: nextBuildNumber(builds.map(b => String(b.attributes.version))), builds: builds.length };
+}
 
 export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
-  const appId = await c.app();
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version`);
-  const next = nextBuildNumber(builds.map(b => String(b.attributes.version)));
-  if (ctx.args.has('json')) { printJson({ next, builds: builds.length }); return; }
-  console.error(`[apple] ${builds.length} builds on App Store Connect; next build number:`);
+  const { next, builds } = await appNextBuild(c);
+  if (ctx.args.has('json')) { printJson({ next, builds }); return; }
+  console.error(`[apple] ${builds} builds on App Store Connect; next build number:`);
   console.log(next);
 }
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index fbb353f..bc7bfce 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -52,8 +52,10 @@ export function skippedDuoSets(apple: { iphoneDuo?: boolean; appId?: string } |
 /** Display types `validate` requires on every locale: apple.screenshotTypes, else the classes App Store Connect's
  *  "App Previews and Screenshots" tab lists (October 2026): iPhone with Dynamic Island (medium display), filled by
  *  scaling a 6.9" or 6.5" set down (ACCEPTED_INSTEAD), plus iPad 13" display with ipad. iPhone Duo is optional. */
-export const requiredDisplayTypes = (apple: { ipad?: boolean; screenshotTypes?: string[] } | undefined): string[] =>
-  apple?.screenshotTypes ?? ['APP_IPHONE_61', ...(apple?.ipad ? ['APP_IPAD_PRO_3GEN_129'] : [])];
+export const requiredDisplayTypes = (apple: { ipad?: boolean; mac?: boolean; screenshotTypes?: string[] } | undefined, platform: string = 'IOS'): string[] =>
+  platform === 'MAC_OS' ? (apple?.mac ? Object.values(MAC_DISPLAY) : []) // a macOS version takes the Mac set only (apple.screenshotTypes is the iOS list)
+    : platform !== 'IOS' ? []
+    : apple?.screenshotTypes ?? ['APP_IPHONE_61', ...(apple?.ipad ? ['APP_IPAD_PRO_3GEN_129'] : [])];
 
 /** Makes one screenshot set (of a version localization, a custom product page localization or a Product Page
  *  Optimization treatment localization) hold exactly `files`, in order: left alone when the MD5s match, else the
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index 28ccd4a..a31574f 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -284,7 +284,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const editable = await c.editableVersion(platform).catch(() => null);
   const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
   if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}${isPkg ? '&filter[preReleaseVersion.platform]=MAC_OS' : ''}&limit=200&fields[builds]=version,processingState`);
+  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
   const numbers = builds.map(b => String(b.attributes.version));
   const next = nextBuildNumber(numbers);
   // the same IPA uploaded by an earlier run: nothing to send again, only the wait
diff --git a/cli/flow.ts b/cli/flow.ts
index 63387e1..11151b3 100644
--- a/cli/flow.ts
+++ b/cli/flow.ts
@@ -20,7 +20,7 @@ import { dirname, join, relative } from 'node:path';
 import type { Args } from './lib/args';
 import { CONFIG_NAMES, loadConfig, type ShipConfig } from './lib/config';
 import {
-  type CondCtx, expand, type Flow, flowsOfFile, kindOf, type Mode, parseParams, planStep, type PlannedStep, resumePoint, type RunState, startIndex,
+  type CondCtx, type DryPending, expand, type Flow, flowsOfFile, kindOf, missingParams, type Mode, noteDry, parseParams, planStep, plannedForDryInput, type PlannedStep, resumePoint, type RunState, startIndex,
   type StepResult, validateFlows,
 } from './lib/flow';
 import { DECLINED_MARK } from './lib/ctx';
@@ -170,6 +170,12 @@ async function runFlow(args: Args, root: string): Promise<void> {
   const subParams = expand(flow, all, 'steps').params;
   const vars: Record<string, string> = { ...subParams, ...flow.params, ...(from ? last?.vars ?? {} : {}), ...params };
   const c = await condCtx(root);
+  vars['config.testflight.internal'] = (c.config?.apple?.testflight?.groups ?? []).filter(g => g.internal).map(g => g.name).join(',');
+  if (!args.has('resume')) {
+    const missing = missingParams(vars);
+    if (missing.length) throw new Error(`${name} needs ${missing.map(k => `${k}=<value>`).join(' ')} (storebound flow run ${name} ${missing.map(k => `${k}=...`).join(' ')})`);
+  }
+  const pending: DryPending = { built: new Set(), uploaded: new Set() };
   const prebuilt = prebuildsDone();
   const state: RunState = { flow: name, mode, startedAt: new Date().toISOString(), vars, results: [], ok: true };
   const env = process.env as Record<string, string | undefined>;
@@ -196,12 +202,20 @@ async function runFlow(args: Args, root: string): Promise<void> {
         state.results.push(r); save();
         continue;
       }
+      const planned = plannedForDryInput(p, mode, pending);
+      if (planned) {
+        r.status = 'planned'; r.detail = planned;
+        if (!json) log(TAG, `${label}: ${describe(p)}  (${planned})`);
+        state.results.push(r); save();
+        continue;
+      }
       if (!json) log(TAG, `${label}: ${describe(p)}${p.dryAdded ? '  (dry run)' : ''}`);
       const t = Date.now();
       const x = await exec(p, root, json, prebuilt.size ? { [PREBUILD_DONE_ENV]: [...prebuilt].join('\n') } : {});
       r.exitCode = x.code; r.ms = Date.now() - t;
       if (x.code === 0) {
         r.status = 'ok';
+        noteDry(p, pending);
         const pre = p.argv ? prebuildRan(p.argv, c.config) : null;
         if (pre) prebuilt.add(pre);
         if (p.capture) {
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index aea46a9..446ee91 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -716,6 +716,9 @@ export interface ShipConfig {
     build?: AppleBuildConfig;
     /** Shell command `apple build` runs first in the project root; overrides build.prebuild for the App Store. */
     prebuild?: string;
+    /** `apple build --platform macos`: shell command run on the built .app before productbuild ({file} = the .app path);
+     *  a nonzero exit stops the build, nothing is packaged. E.g. a project's own check that a build-time value is in the binary. */
+    macAppCheck?: string;
     /** Promoted in-app purchases on the product page, in order (`storebound apple promoted`; at most 20). */
     promoted?: PromotedConfig;
     /** Custom product pages (`storebound apple cpp`; at most 70). */
@@ -1019,6 +1022,7 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
   if (cfg.build !== undefined && (typeof cfg.build !== 'object' || cfg.build === null)) e.push('build: { prebuild?: "<shell command>" }');
   if (badCmd(cfg.build?.prebuild)) e.push('build.prebuild: a shell command run in the project root before apple build / play build, e.g. "npm run build && npx cap sync"');
   if (badCmd(cfg.apple?.prebuild)) e.push('apple.prebuild: a shell command (overrides build.prebuild for apple build)');
+  if (badCmd(cfg.apple?.macAppCheck)) e.push('apple.macAppCheck: a shell command run on the built Mac .app ({file} = its path), e.g. "node tools/check-app.mjs {file}"');
   if (badCmd(cfg.play?.prebuild)) e.push('play.prebuild: a shell command (overrides build.prebuild for play build)');
   if (cfg.apple?.teamId !== undefined &&!/^[A-Z0-9]{10}$/.test(cfg.apple.teamId)) e.push('apple.teamId: the 10-character Team ID (Membership details)');
   if (cfg.play?.developerId !== undefined && !/^\d{1,25}$/.test(cfg.play.developerId)) e.push('play.developerId: the digits of play.google.com/console/u/0/developers/<id>');
diff --git a/cli/lib/embedded.ts b/cli/lib/embedded.ts
index 6429370..e11a6ba 100644
--- a/cli/lib/embedded.ts
+++ b/cli/lib/embedded.ts
@@ -31,8 +31,8 @@ export const TEMPLATE_TEXT: Record<string, string> = {
   "web/appstore.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>App Store</title><path d=\"M8.8086 14.9194l6.1107-11.0368c.0837-.1513.1682-.302.2437-.4584.0685-.142.1267-.2854.1646-.4403.0803-.3259.0588-.6656-.066-.9767-.1238-.3095-.3417-.5678-.6201-.7355a1.4175 1.4175 0 0 0-.921-.1924c-.3207.043-.6135.1935-.8443.4288-.1094.1118-.1996.2361-.2832.369-.092.1463-.175.2979-.259.4492l-.3864.6979-.3865-.6979c-.0837-.1515-.1667-.303-.2587-.4492-.0837-.1329-.1739-.2572-.2835-.369-.2305-.2353-.5233-.3857-.844-.429a1.4181 1.4181 0 0 0-.921.1926c-.2784.1677-.4964.426-.6203.7355-.1246.311-.1461.6508-.066.9767.038.155.0962.2984.1648.4403.0753.1564.1598.307.2437.4584l1.248 2.2543-4.8625 8.7825H2.0295c-.1676 0-.3351-.0007-.5026.0092-.1522.009-.3004.0284-.448.0714-.3108.0906-.5822.2798-.7783.548-.195.2665-.3006.5929-.3006.9279 0 .3352.1057.6612.3006.9277.196.2683.4675.4575.7782.548.1477.043.296.0623.4481.0715.1675.01.335.009.5026.009h13.0974c.0171-.0357.059-.1294.1-.2697.415-1.4151-.6156-2.843-2.0347-2.843zM3.113 18.5418l-.7922 1.5008c-.0818.1553-.1644.31-.2384.4705-.067.1458-.124.293-.1611.452-.0785.3346-.0576.6834.0645 1.0029.1212.3175.3346.583.607.7549.2727.172.5891.2416.9013.1975.3139-.044.6005-.1986.8263-.4402.1072-.1148.1954-.2424.2772-.3787.0902-.1503.1714-.3059.2535-.4612L6 19.4636c-.0896-.149-.9473-1.4704-2.887-.9218m20.5861-3.0056a1.4707 1.4707 0 0 0-.779-.5407c-.1476-.0425-.2961-.0616-.4483-.0705-.1678-.0099-.3352-.0091-.503-.0091H18.648l-4.3891-7.817c-.6655.7005-.9632 1.485-1.0773 2.1976-.1655 1.0333.0367 2.0934.546 3.0004l5.2741 9.3933c.084.1494.167.299.2591.4435.0837.131.1739.2537.2836.364.231.2323.5238.3809.8449.4232.3192.0424.643-.0244.9217-.1899.2784-.1653.4968-.4204.621-.7257.1246-.3072.146-.6425.0658-.9641-.0381-.1529-.0962-.2945-.165-.4346-.0753-.1543-.1598-.303-.2438-.4524l-1.216-2.1662h1.596c.1677 0 .3351.0009.5029-.009.1522-.009.3007-.028.4483-.0705a1.4707 1.4707 0 0 0 .779-.5407A1.5386 1.5386 0 0 0 24 16.452a1.539 1.539 0 0 0-.3009-.9158Z\"/></svg>",
   "web/googleplay.svg": "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\"><title>Google Play</title><path d=\"M22.018 13.298l-3.919 2.218-3.515-3.493 3.543-3.521 3.891 2.202a1.49 1.49 0 0 1 0 2.594zM1.337.924a1.486 1.486 0 0 0-.112.568v21.017c0 .217.045.419.124.6l11.155-11.087L1.337.924zm12.207 10.065l3.258-3.238L3.45.195a1.466 1.466 0 0 0-.946-.179l11.04 10.973zm0 2.067l-11 10.933c.298.036.612-.016.906-.183l13.324-7.54-3.23-3.21z\"/></svg>",
   "web/landing.html": "<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>{{APP_NAME}}</title>\n<!--{{SMART_BANNER}}-->\n<!--\n  Minimal landing page written by `storebound web init --landing` from templates/web/landing.html. Deploy the whole\n  output folder to the domain root: index.html, appstore.svg, googleplay.svg and .well-known/. No external requests.\n  The store marks are the simple-icons files (CC0 data), shown as a mask in the text colour; they only name the store.\n-->\n<style>\n  :root { color-scheme: light dark; --fg: #1b1c20; --bg: #ffffff; --muted: #5d6170; --line: #d5d8e0; --card: #f4f5f8; --accent: #1d4ed8; }\n  @media (prefers-color-scheme: dark) { :root { --fg: #eceef3; --bg: #15161a; --muted: #a3a8b6; --line: #343744; --card: #1f2127; --accent: #8fb0ff; } }\n  * { box-sizing: border-box; }\n  body { margin: 0; min-height: 100vh; display: flex; flex-direction: column; background: var(--bg); color: var(--fg); font: 16px/1.6 system-ui, -apple-system, \"Segoe UI\", Roboto, sans-serif; }\n  main { flex: 1; width: 100%; max-width: 640px; margin: 0 auto; padding: 64px 16px 32px; text-align: center; }\n  h1 { font-size: clamp(2rem, 7vw, 3rem); line-height: 1.15; margin: 0 0 32px; overflow-wrap: anywhere; }\n  .stores { display: flex; flex-wrap: wrap; gap: 12px; justify-content: center; margin: 0; padding: 0; list-style: none; }\n  .store { display: inline-flex; align-items: center; gap: 10px; min-height: 48px; padding: 10px 18px; border: 1px solid var(--line); border-radius: 12px; background: var(--card); color: var(--fg); font-weight: 600; text-decoration: none; }\n  .store:hover { border-color: var(--fg); }\n  .store:focus-visible, footer a:focus-visible { outline: 3px solid var(--accent); outline-offset: 2px; }\n  .mark { display: inline-block; flex: none; width: 22px; height: 22px; background-color: currentColor; -webkit-mask: none center / contain no-repeat; mask: none center / contain no-repeat; }\n  .mark-appstore { -webkit-mask-image: url(appstore.svg); mask-image: url(appstore.svg); }\n  .mark-googleplay { -webkit-mask-image: url(googleplay.svg); mask-image: url(googleplay.svg); }\n  footer { width: 100%; max-width: 640px; margin: 0 auto; padding: 24px 16px 32px; border-top: 1px solid var(--line); color: var(--muted); font-size: .875rem; text-align: center; }\n  footer nav { display: flex; flex-wrap: wrap; gap: 8px 20px; justify-content: center; margin-bottom: 12px; }\n  footer a { color: var(--accent); }\n  footer p { margin: 0; }\n</style>\n</head>\n<body>\n<main>\n  <h1>{{APP_NAME}}</h1>\n  <ul class=\"stores\" aria-label=\"Get the app\">\n    <!--apple--><li><a class=\"store\" href=\"{{APP_STORE_URL}}\"><span class=\"mark mark-appstore\" aria-hidden=\"true\"></span>App Store</a></li><!--/apple-->\n    <!--play--><li><a class=\"store\" href=\"{{PLAY_URL}}\"><span class=\"mark mark-googleplay\" aria-hidden=\"true\"></span>Google Play</a></li><!--/play-->\n  </ul>\n</main>\n<footer>\n  <nav aria-label=\"Legal and support\">\n    <a href=\"{{PRIVACY_URL}}\">Privacy Policy</a>\n    <!--terms--><a href=\"{{TERMS_URL}}\">Terms of Use</a><!--/terms-->\n    <a href=\"{{SUPPORT_URL}}\">Support</a>\n  </nav>\n  <p>App Store is a trademark of Apple Inc.; Google Play is a trademark of Google LLC.</p>\n</footer>\n</body>\n</html>\n",
-  "workflows/beta.yml": "# storebound flow \"beta\" for a game: a playtest build on TestFlight and Play internal testing.\n#   storebound flow run beta VERSION=1.2.0 [--apply]\ndescription: Next game build to TestFlight and Play internal testing\nparams:\n  VERSION: \"1.0.0\"\n  GROUP: \"Playtesters\"\nsteps:\n  - id: check\n    run: check\n  - id: ads\n    if: exists ios\n    run: ads scan --ios ios\n    continueOnError: true\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: distribute\n    if: apple\n    run: apple testflight distribute --build ${BUILD} --group ${GROUP}\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track internal\n  - id: external\n    owner: \"External playtesters: storebound apple testflight distribute --build ${BUILD} --group <external group> --submit-review (Beta App Review is your call)\"\n",
-  "workflows/release.yml": "# storebound flow \"release\" for a game: one version on both stores, up to your Submit click.\n#   storebound flow run release VERSION=1.2.0          reads run, writes run as dry runs (nothing changes)\n#   storebound flow run release VERSION=1.2.0 --apply  writes run for real; each command still asks you first\n#   storebound flow run release --resume --apply       continue after fixing a failed step\n# Steps are storebound commands (no \"storebound\" prefix). `if: apple` / `if: play` skip a store the config does not\n# have; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).\ndescription: Build, upload and check one game version on both stores, then your Submit click\nparams:\n  VERSION: \"1.0.0\"\nsteps:\n  - id: shots\n    if: exists store/renders\n    run: shots check\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track internal\n  - id: whats-new\n    if: exists store/whats-new\n    run: whats-new apply\n  - id: listing\n    if: apple\n    run: apple listing --version ${VERSION} --build ${BUILD}\n  - id: validate\n    run: validate\n  - id: scan\n    run: scan\n  - id: plan\n    run: release plan ${VERSION}\n  - id: submit\n    owner: \"App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the internal release and Send changes for review\"\n",
+  "workflows/beta.yml": "# storebound flow \"beta\" for a game: a playtest build on TestFlight and Play internal testing.\n#   storebound flow run beta VERSION=1.2.0 [--apply]\n# VERSION is required (\"?\"). GROUP empty = the internal group of apple.testflight.groups (the group `internal: true`);\n# GROUP=<name> picks a TestFlight group that exists (or is listed in apple.testflight.groups).\ndescription: Next game build to TestFlight and Play internal testing\nparams:\n  VERSION: \"?\"\n  GROUP: \"\"\nsteps:\n  - id: check\n    run: check\n  - id: ads\n    if: exists ios\n    run: ads scan --ios ios\n    continueOnError: true\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: distribute\n    if: apple && ${GROUP}\n    run: apple testflight distribute --build ${BUILD} --group ${GROUP}\n  - id: distribute-internal\n    if: apple && !${GROUP} && ${config.testflight.internal}\n    run: apple testflight distribute --build ${BUILD} --group ${config.testflight.internal}\n  - id: no-group\n    if: apple && !${GROUP} && !${config.testflight.internal}\n    owner: \"No TestFlight group: pass GROUP=<name> or add a group with internal: true to apple.testflight.groups, then storebound apple testflight distribute --build ${BUILD} --group <name>\"\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track internal\n  - id: external\n    owner: \"External playtesters: storebound apple testflight distribute --build ${BUILD} --group <external group> --submit-review (Beta App Review is your call)\"\n",
+  "workflows/release.yml": "# storebound flow \"release\" for a game: one version on both stores, up to your Submit click.\n#   storebound flow run release VERSION=1.2.0          reads run, writes run as dry runs (nothing changes)\n#   storebound flow run release VERSION=1.2.0 --apply  writes run for real; each command still asks you first\n#   storebound flow run release --resume --apply       continue after fixing a failed step\n# Steps are storebound commands (no \"storebound\" prefix). `if: apple` / `if: play` skip a store the config does not\n# have; `if: ${PARAM}` turns an optional step on by a param (MAC_TAURI=<src-tauri> adds the macOS build, PLAY_TRACK=beta\n# uploads to Play open testing); VERSION is required; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).\ndescription: Build, upload and check one game version on both stores, then your Submit click\nparams:\n  VERSION: \"?\"\n  MAC_TAURI: \"\"\n  PLAY_TRACK: \"internal\"\nsteps:\n  - id: shots\n    if: exists store/renders\n    run: shots check\n  - id: next-build\n    if: apple\n    run: apple next-build\n    capture: BUILD\n  - id: build\n    if: apple\n    run: apple build --version ${VERSION} --build-number ${BUILD}\n  - id: upload\n    if: apple\n    run: apple upload --no-wait --build ${BUILD} --allow-existing\n  - id: wait\n    if: apple\n    run: apple testflight wait --build ${BUILD} --version ${VERSION}\n  - id: mac-build\n    if: apple && ${MAC_TAURI}\n    run: apple build --platform macos --tauri ${MAC_TAURI} --version ${VERSION} --build-number ${BUILD}\n  - id: mac-upload\n    if: apple && ${MAC_TAURI}\n    run: apple upload --platform macos --no-wait --allow-existing\n  - id: play-build\n    if: play\n    run: play build --version-name ${VERSION}\n  - id: play-upload\n    if: play\n    run: play upload --track ${PLAY_TRACK}\n  - id: promote\n    if: play && ${PLAY_TRACK} != production\n    owner: \"Play Console: promote the ${PLAY_TRACK} release to production (storebound play release --version-code <code> --production completed once you agree)\"\n  - id: whats-new\n    if: exists store/whats-new\n    run: whats-new apply\n  - id: listing\n    if: apple\n    run: apple listing --version ${VERSION} --build ${BUILD}\n  - id: validate\n    run: validate\n  - id: scan\n    run: scan\n  - id: plan\n    run: release plan ${VERSION}\n  - id: submit\n    owner: \"App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the ${PLAY_TRACK} release and Send changes for review\"\n",
 };
 
 /** The pages shots render / video load (cli/shots/*.html), by file name. */
diff --git a/cli/lib/flow.ts b/cli/lib/flow.ts
index 238ade6..1993cbd 100644
--- a/cli/lib/flow.ts
+++ b/cli/lib/flow.ts
@@ -205,7 +205,7 @@ export function validateFlows(flows: Flow[], o: { commands?: Set<string> } = {})
         if (ids.has(s.id)) e.push(`${at}: id used twice`);
         ids.add(s.id);
         for (const t of [s.run, s.sh, s.owner, s.if].filter((x): x is string => typeof x === 'string'))
-          for (const m of t.matchAll(/\$\{([^}]*)\}/g)) if (!vars.has(m[1]!) && !/^env\.[A-Z0-9_]+$/.test(m[1]!)) e.push(`${at}: \${${m[1]}} is not a param or an earlier capture`);
+          for (const m of t.matchAll(/\$\{([^}]*)\}/g)) if (!vars.has(m[1]!) && !/^env\.[A-Z0-9_]+$/.test(m[1]!) && !CONFIG_VARS.includes(m[1]!)) e.push(`${at}: \${${m[1]}} is not a param or an earlier capture`);
         if (s.capture) vars.add(s.capture);
         if (s.run !== undefined) {
           let argv: string[] = [];
@@ -230,6 +230,14 @@ export function validateFlows(flows: Flow[], o: { commands?: Set<string> } = {})
 
 // ---- variables, conditions ----
 
+/** Variables the runner fills from the config (empty when the config has none), usable in `run` and `if`. */
+export const CONFIG_VARS = ['config.testflight.internal'];
+
+/** The required-param marker: `VERSION: "?"` in params means the run needs VERSION=... (no silent default). */
+export const REQUIRED = '?';
+/** Params still at the required marker (not given on the command line). Pure. */
+export function missingParams(vars: Record<string, string>): string[] { return Object.keys(vars).filter(k => vars[k] === REQUIRED); }
+
 /** ${VAR} and ${env.NAME} substituted; unknown ones stay as written (the plan shows them). */
 export function substitute(text: string, vars: Record<string, string>, env: Record<string, string | undefined> = {}): string {
   return text.replace(/\$\{([^}]*)\}/g, (m, k: string) => (k.startsWith('env.') ? env[k.slice(4)] ?? m : vars[k] ?? m));
@@ -306,6 +314,39 @@ export function planStep(s: FlowStep, part: PlannedStep['part'], mode: Mode, var
   return { ...base, kind, argv: addDry ? [...argv, '--dry'] : addYes ? [...argv, '--yes'] : argv, dryAdded: addDry, ...(addYes ? { yesAdded: true } : {}), ...(mode === 'plan' ? { skip: 'plan only' } : {}) };
 }
 
+const PRODUCERS = ['apple build', 'play build'];
+const CONSUMERS = ['apple upload', 'play upload'];
+const AFTER_UPLOAD = ['apple testflight wait', 'apple testflight distribute'];
+
+/** Stores whose artifact (IPA / AAB / PKG) or uploaded build only exists after a real earlier step ("apple", "apple:mac", "play"). */
+export interface DryPending { built: Set<string>; uploaded: Set<string> }
+
+const storeKey = (argv: string[]): string => {
+  const i = argv.indexOf('--platform');
+  const mac = (i >= 0 && /^(macos|mac)$/i.test(argv[i + 1] ?? '')) || argv.includes('--tauri');
+  return `${argv[0]}${mac ? ':mac' : ''}`;
+};
+
+/** Records a step that ran as a dry run: a dry build leaves no IPA / AAB. Pure. */
+export function noteDry(p: PlannedStep, pending: DryPending): void {
+  if (!p.argv || !p.dryAdded || p.skip) return;
+  if (PRODUCERS.includes(words(p.argv).slice(0, 2).join(' '))) pending.built.add(storeKey(p.argv));
+}
+
+/** Why a step is only planned in a dry run: its input (the IPA / AAB, or the uploaded build) would come from an earlier
+ *  step that did not really run. null = run it (always null with --apply: a real upload with no IPA still fails). Pure. */
+export function plannedForDryInput(p: PlannedStep, mode: Mode, pending: DryPending): string | null {
+  if (mode === 'apply' || !p.argv || p.skip) return null;
+  const w = words(p.argv);
+  const k2 = w.slice(0, 2).join(' ');
+  if (CONSUMERS.includes(k2) && !p.argv.some(a => /\.(ipa|aab|pkg)$/.test(a)) && pending.built.has(storeKey(p.argv))) {
+    pending.uploaded.add(storeKey(p.argv));
+    return `planned: would upload the ${k2 === 'play upload' ? 'AAB' : storeKey(p.argv).endsWith(':mac') ? 'PKG' : 'IPA'} the ${w[0]} build step writes (dry run: nothing built)`;
+  }
+  if (AFTER_UPLOAD.includes(w.slice(0, 3).join(' ')) && pending.uploaded.has('apple')) return 'planned: the build is not on App Store Connect in a dry run';
+  return null;
+}
+
 /** Index of the step to start from: --from <id> (exact, or the first id under a sub-flow prefix). */
 export function startIndex(steps: FlowStep[], from: string | undefined): number {
   if (!from) return 0;
diff --git a/cli/lib/signing.ts b/cli/lib/signing.ts
index 9b28e45..55623be 100644
--- a/cli/lib/signing.ts
+++ b/cli/lib/signing.ts
@@ -113,7 +113,7 @@ export interface CertChoice { cert: ApiCert | null; why: string; usable: ApiCert
 
 /** A certificate is usable when it is of the wanted type, active, valid for 30 more days and this machine holds its
  *  private key (a key file in .storebound/signing or a code signing identity in the keychain). Newest first. */
-export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: ApiCert) => boolean, now = Date.now()): CertChoice {
+export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: ApiCert) => boolean, now = Date.now(), platform: string = process.platform): CertChoice {
   const ofType = certs.filter(c => c.attributes.certificateType === type && c.attributes.activated !== false);
   const valid = ofType.filter(c => Date.parse(c.attributes.expirationDate ?? '') > now);
   const expiring = valid.filter(c => Date.parse(c.attributes.expirationDate!) - now < 30 * 86_400_000);
@@ -121,7 +121,9 @@ export function pickCertificate(certs: ApiCert[], type: CertType, hasKey: (c: Ap
   const withoutKey = valid.filter(c => !hasKey(c));
   const cert = usable[0] ?? null;
   const why = cert ? `using ${cert.attributes.name ?? cert.attributes.displayName ?? type} (expires ${cert.attributes.expirationDate?.slice(0, 10)})`
-    : withoutKey.length ? `${withoutKey.length} ${type} certificate(s) on the team, but this machine has none of their private keys: a new one is needed (or import the .p12 from the Mac that made it)`
+    : withoutKey.length ? `${withoutKey.length} ${type} certificate(s) on the team, but this machine has none of their private keys: ${platform === 'darwin'
+      ? 'a new one is needed (or import the .p12 from the Mac that made it)'
+      : 'this machine cannot build or sign for Apple. The keys live on the Mac that made the certificates: build there (e.g. over ssh to that Mac). Do not create another certificate, Apple caps them per team'}`
     : `no valid ${type} certificate`;
   return { cert, why, usable, withoutKey, expiring };
 }
diff --git a/cli/validate.ts b/cli/validate.ts
index 539f453..b95f7a2 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -34,7 +34,7 @@ import { rendersCheck } from './shots/check';
 import { resolvedTablets } from './shots/report';
 import { runScan } from './lib/scan';
 import type { ScanFinding } from './lib/scan/rules';
-import { playClient } from './play/client';
+import { EDIT_GONE, playClient } from './play/client';
 import { listOneTimeProducts } from './play/products';
 import { creativeNote } from './shots/creative';
 import { creativeWaiting, localCreative } from './apple/creative-assets';
@@ -117,7 +117,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
   const every = await allVersions(c, appId);
   const editableOf = (x: J) => APPLE_EDITABLE.has(stateOf(x));
   const withEditable = [...new Set(every.filter(editableOf).map(platformOf))];
-  const platform: AscPlatform = parsePlatform(ctx.args.get('platform')) ?? (withEditable.length === 1 ? withEditable[0]! : withEditable.includes('IOS') || !every.length ? 'IOS' : platformOf(every[0]));
+  const platform: AscPlatform = parsePlatform(ctx.args.get('platform')) ?? (withEditable.length === 1 ? withEditable[0]! : withEditable.includes('IOS') || !every.length || every.some(x => platformOf(x) === 'IOS') ? 'IOS' : platformOf(every[0]));
   const versions = await c.all(versionsPath(appId, platform, 10));
   const v: J = (await c.editableVersion(platform)) ?? versions[0] ?? null;
   const otherPlatformVersions = every.filter(x => platformOf(x) !== platform && editableOf(x)).map(x => ({ versionString: String(x.attributes.versionString), state: stateOf(x), platform: platformOf(x) }));
@@ -186,7 +186,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
     deviceFamilies: platform === 'IOS' ? await deviceFamilyVerdicts(ctx, c, appId) : undefined,
     build, locales, reviewDetail, ageRating,
     expectedLocales: config.languages.map(l => l.apple).filter((x): x is string => !!x),
-    requiredDisplayTypes: requiredDisplayTypes(config.apple),
+    requiredDisplayTypes: requiredDisplayTypes(config.apple, platform),
     iphoneDuo: !!config.apple?.iphoneDuo, play: !!config.play,
     macVersion: every.some(x => platformOf(x) === 'MAC_OS'), mac: !!config.apple?.mac,
     priceSchedule: !!sched?.included?.some((x: J) => x.type === 'appPrices'),
@@ -202,23 +202,25 @@ export async function collectPlay(ctx: Ctx): Promise<PlaySnapshot> {
   const { config, root } = ctx.loaded;
   const play = await playClient(root, config.play!.packageName);
   const tablets = resolvedTablets(config, ctx.loaded.resolve(ctx.args.get('src') ?? config.renders ?? config.shots?.out ?? 'store/renders'));
-  const e = await play.call<{ id: string }>('POST', `${play.API}/edits`, {});
-  log('validate', `play: read-only edit ${e.id} (deleted afterwards)`);
-  try {
-    const details = await play.call<{ defaultLanguage?: string; contactWebsite?: string }>('GET', `${play.API}/edits/${e.id}/details`);
-    const raw = (await play.call<{ listings?: { language: string; title?: string; shortDescription?: string; fullDescription?: string }[] }>('GET', `${play.API}/edits/${e.id}/listings`)).listings ?? [];
+  // play.read: one edit under the machine lock, deleted only after every read inside has finished, and opened anew once
+  // when Play invalidates it meanwhile ("This Edit has been deleted"). A bare POST /edits here was neither locked nor
+  // retried, so another storebound process (or the Console) ending the edit failed the screenshot reads with a false blocker.
+  return play.read(async editId => {
+    log('validate', `play: read-only edit ${editId} (deleted afterwards)`);
+    const details = await play.call<{ defaultLanguage?: string; contactWebsite?: string }>('GET', `${play.API}/edits/${editId}/details`);
+    const raw = (await play.call<{ listings?: { language: string; title?: string; shortDescription?: string; fullDescription?: string }[] }>('GET', `${play.API}/edits/${editId}/listings`)).listings ?? [];
     const listings: PlaySnapshot['listings'] = [];
     for (const l of raw) {
       const images: Record<string, number> = {};
       for (const type of Object.keys(playRequiredImages(tablets)))
-        images[type] = ((await play.call<{ images?: unknown[] }>('GET', `${play.API}/edits/${e.id}/listings/${l.language}/${type}`)).images ?? []).length;
+        images[type] = ((await play.call<{ images?: unknown[] }>('GET', `${play.API}/edits/${editId}/listings/${l.language}/${type}`)).images ?? []).length;
       listings.push({ ...l, images });
     }
-    const tracks = ((await play.call<{ tracks?: { track: string; releases?: { status: string; versionCodes?: string[]; userFraction?: number }[] }[] }>('GET', `${play.API}/edits/${e.id}/tracks`)).tracks ?? [])
+    const tracks = ((await play.call<{ tracks?: { track: string; releases?: { status: string; versionCodes?: string[]; userFraction?: number }[] }[] }>('GET', `${play.API}/edits/${editId}/tracks`)).tracks ?? [])
       .map(t => ({ track: t.track, releases: (t.releases ?? []).map(r => ({ status: r.status, versionCodes: r.versionCodes ?? [], userFraction: r.userFraction })) }));
     const products = (await listOneTimeProducts(play)).map(p => ({ productId: p.productId, states: (p.purchaseOptions ?? []).map(o => o.state ?? '') }));
     // the production track's countries (read-only in the API: set in the console, `console plan play-production-countries`)
-    const productionCountries = await play.call<{ countries?: unknown[]; restOfWorld?: boolean }>('GET', `${play.API}/edits/${e.id}/countryAvailability/production`)
+    const productionCountries = await play.call<{ countries?: unknown[]; restOfWorld?: boolean }>('GET', `${play.API}/edits/${editId}/countryAvailability/production`)
       .then(r => (r.restOfWorld ? -1 : (r.countries ?? []).length)).catch(() => null);
     const website = details.contactWebsite ?? null;
     const appAdsLines = config.ads?.appAdsTxt ?? [];
@@ -245,9 +247,7 @@ export async function collectPlay(ctx: Ctx): Promise<PlaySnapshot> {
       expectedProducts: (config.products ?? []).filter(p => sellsOn(config, p, 'play')).map(p => p.id),
       privacyUrl: await checkUrl(config.app.privacyPolicyUrl), website, appAds, appAdsLines, adsLikely, category: playCategoryOf(config), productionCountries,
     };
-  } finally {
-    await play.call('DELETE', `${play.API}/edits/${e.id}`).catch(() => {});
-  }
+  });
 }
 
 /** Scan findings as validate findings: blocker stays blocker, high / medium become warnings; low and owner-accepted
@@ -279,7 +279,13 @@ export async function run(ctx: Ctx): Promise<void> {
     const access = await brokerFindings(ctx.loaded).catch(e => [{ store: 'play' as const, level: 'warn' as const, code: 'broker-unavailable', msg: (e as Error).message }]);
     findings.push(...access);
     try { findings.push(...playRules({ ...(await collectPlay(ctx)), renders: local?.play })); }
-    catch (e) { findings.push({ store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 600) }, ...rendersFindings('play', local?.play)); }
+    catch (e) {
+      // a Play edit that vanished under the reads is a tool problem (the retry inside play.read failed too), never a store blocker
+      const gone = EDIT_GONE.test((e as Error).message);
+      findings.push(gone
+        ? { store: 'play', level: 'warn', code: 'edit-gone', msg: `Play validate could not finish its read-only edit (${(e as Error).message.slice(0, 300)}): a tool problem, not a store finding`, fix: 'storebound validate --play (run it again; close other storebound runs and Console saves first)' }
+        : { store: 'play', level: 'blocker', code: 'api', msg: (e as Error).message.slice(0, 600) }, ...rendersFindings('play', local?.play));
+    }
   } else if (a.has('play')) warn('validate', 'no play section in the config');
   // Game Center / Play Games Services: entitlement, APP_ID resource, store state vs the config
   if (config.games || config.apple) {
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index 6ffd6c3..e5db8ff 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -651,7 +651,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `builds_buildBetaDetail_getToOneRelationship` | GET | `/v1/builds/{id}/relationships/buildBetaDetail` | read |  |
 | `builds_diagnosticSignatures_getToManyRelated` | GET | `/v1/builds/{id}/diagnosticSignatures` | read | health |
 | `builds_diagnosticSignatures_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/diagnosticSignatures` | read |  |
-| `builds_getCollection` | GET | `/v1/builds` | read | apple/build, apple/build-mas, apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
+| `builds_getCollection` | GET | `/v1/builds` | read | apple/encryption, apple/listing, apple/next-build, apple/resubmit, apple/status, apple/testflight, apple/upload, art, health, lib/store-apps, triage |
 | `builds_getInstance` | GET | `/v1/builds/{id}` | read | apple/device-families |
 | `builds_icons_getToManyRelated` | GET | `/v1/builds/{id}/icons` | read |  |
 | `builds_icons_getToManyRelationship` | GET | `/v1/builds/{id}/relationships/icons` | read |  |
@@ -1565,9 +1565,9 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidpublisher.appstorecatalog.recentupdateevents.list` | GET | `androidpublisher/v3/appstorecatalog/{appStorePackageName}/recentUpdateEvents` | read |  |
 | **androidpublisher.edits** (5) | | | | |
 | `androidpublisher.edits.commit` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:commit` | owner only (typed confirm) | play/client |
-| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play/client, validate |
+| `androidpublisher.edits.delete` | DELETE | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | owner only (typed confirm) | apps, onboard, play/client |
 | `androidpublisher.edits.get` | GET | `androidpublisher/v3/applications/{packageName}/edits/{editId}` | read |  |
-| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play/client, validate |
+| `androidpublisher.edits.insert` | POST | `androidpublisher/v3/applications/{packageName}/edits` | write (dry by default) | apps, onboard, play/client |
 | `androidpublisher.edits.validate` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}:validate` | write (dry by default) | play/client |
 | **androidpublisher.edits.apks** (3) | | | | |
 | `androidpublisher.edits.apks.addexternallyhosted` | POST | `androidpublisher/v3/applications/{packageName}/edits/{editId}/apks/externallyHosted` | write (dry by default) |  |
diff --git a/skills/release-flows/SKILL.md b/skills/release-flows/SKILL.md
index 266e326..b5dfb0a 100644
--- a/skills/release-flows/SKILL.md
+++ b/skills/release-flows/SKILL.md
@@ -18,7 +18,7 @@ shell after the dry run).
 ```yaml
 description: Build, upload and check one version on both stores
 params:
-  VERSION: "1.0.0"            # flow run release VERSION=1.2.0 overrides
+  VERSION: "?"                # "?" = required: flow run release VERSION=1.2.0 (no silent default; --resume reuses the last run's)
 steps:
   - id: next-build
     if: apple                 # apple | play | exists <path> | ${VAR} | !${VAR} | ${A} == x; && joins
@@ -36,6 +36,10 @@ before: []                    # hooks: before / after the steps, onError when a
 after: []
 onError: []
 ```
+`${config.testflight.internal}` is filled by the runner with the internal groups of `apple.testflight.groups` (empty when
+none); the beta template uses it when `GROUP` is empty. The release template has optional steps by param: `MAC_TAURI=<src-tauri>`
+adds the macOS build + upload, `PLAY_TRACK=beta` uploads to Play open testing (default `internal`); its `promote` step is an
+owner step listing the Play promotion.
 `continueOnError: true` lets a step fail without stopping the flow.
 A web build before the native builds (Capacitor: `npm run build && npx cap sync`) belongs in `build.prebuild` in the
 config rather than an `sh:` step: `apple build` and `play build` run it themselves, and within one `flow run` it runs
@@ -44,7 +48,8 @@ once (the second build step prints "prebuild skipped (already ran in this flow r
 ## Modes
 - `flow run release VERSION=1.2.0` (default): read steps (check, validate, scan, release plan, next-build, status ...)
   run for real; **every write step runs with `--dry`**; wait steps check once; shell steps are skipped. Nothing
-  changes. Show this output to the owner.
+  changes. Show this output to the owner. A dry `apple build` / `play build` writes no IPA / AAB, so the upload after it
+  (and `apple testflight wait` / `distribute` after that) is shown as "planned" instead of failing; a real run is unchanged.
 - `--dry`: the plan only, nothing runs.
 - `--apply`: writes and shell steps run for real; each write command still asks its own confirmation in the
   terminal. Never add `--yes` to a step (flow validate refuses it).
diff --git a/templates/workflows/beta.yml b/templates/workflows/beta.yml
index 6049b2e..2dfe6f1 100644
--- a/templates/workflows/beta.yml
+++ b/templates/workflows/beta.yml
@@ -1,9 +1,11 @@
 # storebound flow "beta" for a game: a playtest build on TestFlight and Play internal testing.
 #   storebound flow run beta VERSION=1.2.0 [--apply]
+# VERSION is required ("?"). GROUP empty = the internal group of apple.testflight.groups (the group `internal: true`);
+# GROUP=<name> picks a TestFlight group that exists (or is listed in apple.testflight.groups).
 description: Next game build to TestFlight and Play internal testing
 params:
-  VERSION: "1.0.0"
-  GROUP: "Playtesters"
+  VERSION: "?"
+  GROUP: ""
 steps:
   - id: check
     run: check
@@ -25,8 +27,14 @@ steps:
     if: apple
     run: apple testflight wait --build ${BUILD} --version ${VERSION}
   - id: distribute
-    if: apple
+    if: apple && ${GROUP}
     run: apple testflight distribute --build ${BUILD} --group ${GROUP}
+  - id: distribute-internal
+    if: apple && !${GROUP} && ${config.testflight.internal}
+    run: apple testflight distribute --build ${BUILD} --group ${config.testflight.internal}
+  - id: no-group
+    if: apple && !${GROUP} && !${config.testflight.internal}
+    owner: "No TestFlight group: pass GROUP=<name> or add a group with internal: true to apple.testflight.groups, then storebound apple testflight distribute --build ${BUILD} --group <name>"
   - id: play-build
     if: play
     run: play build --version-name ${VERSION}
diff --git a/templates/workflows/release.yml b/templates/workflows/release.yml
index f73ecca..13d9d79 100644
--- a/templates/workflows/release.yml
+++ b/templates/workflows/release.yml
@@ -3,10 +3,13 @@
 #   storebound flow run release VERSION=1.2.0 --apply  writes run for real; each command still asks you first
 #   storebound flow run release --resume --apply       continue after fixing a failed step
 # Steps are storebound commands (no "storebound" prefix). `if: apple` / `if: play` skip a store the config does not
-# have; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).
+# have; `if: ${PARAM}` turns an optional step on by a param (MAC_TAURI=<src-tauri> adds the macOS build, PLAY_TRACK=beta
+# uploads to Play open testing); VERSION is required; `owner:` steps are never run, they list what you click. `sh:` runs your own build command (only with --apply).
 description: Build, upload and check one game version on both stores, then your Submit click
 params:
-  VERSION: "1.0.0"
+  VERSION: "?"
+  MAC_TAURI: ""
+  PLAY_TRACK: "internal"
 steps:
   - id: shots
     if: exists store/renders
@@ -24,12 +27,21 @@ steps:
   - id: wait
     if: apple
     run: apple testflight wait --build ${BUILD} --version ${VERSION}
+  - id: mac-build
+    if: apple && ${MAC_TAURI}
+    run: apple build --platform macos --tauri ${MAC_TAURI} --version ${VERSION} --build-number ${BUILD}
+  - id: mac-upload
+    if: apple && ${MAC_TAURI}
+    run: apple upload --platform macos --no-wait --allow-existing
   - id: play-build
     if: play
     run: play build --version-name ${VERSION}
   - id: play-upload
     if: play
-    run: play upload --track internal
+    run: play upload --track ${PLAY_TRACK}
+  - id: promote
+    if: play && ${PLAY_TRACK} != production
+    owner: "Play Console: promote the ${PLAY_TRACK} release to production (storebound play release --version-code <code> --production completed once you agree)"
   - id: whats-new
     if: exists store/whats-new
     run: whats-new apply
@@ -43,4 +55,4 @@ steps:
   - id: plan
     run: release plan ${VERSION}
   - id: submit
-    owner: "App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the internal release and Send changes for review"
+    owner: "App Store Connect: Submit for Review (version ${VERSION}, build ${BUILD}). Play Console: promote the ${PLAY_TRACK} release and Send changes for review"
diff --git a/tests/flow-dry.test.ts b/tests/flow-dry.test.ts
new file mode 100644
index 0000000..7dd5ccc
--- /dev/null
+++ b/tests/flow-dry.test.ts
@@ -0,0 +1,100 @@
+// storebound flow, dry runs: a step whose input (the IPA / AAB, the uploaded build) only a real earlier step makes is
+// planned, not failed; a real run is untouched. The beta template: required VERSION, GROUP empty = the config's internal group.
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { type DryPending, evalIf, expand, flowsOfFile, missingParams, noteDry, planStep, plannedForDryInput, substitute, validateFlows } from '../cli/lib/flow';
+import { parseYaml } from '../cli/lib/yaml';
+import { readFileSync } from 'node:fs';
+
+const ROOT = join(import.meta.dir, '..');
+const CLI = join(ROOT, 'cli', 'index.ts');
+const tmp = mkdtempSync(join(tmpdir(), 'storebound-flow-dry-'));
+afterAll(() => rmSync(tmp, { recursive: true, force: true }));
+const sb = (cwd: string, ...args: string[]) => Bun.spawnSync([process.execPath, CLI, ...args], { cwd, stdout: 'pipe', stderr: 'pipe', stdin: 'ignore' });
+const C = { apple: true, play: true, exists: () => false };
+
+const load = (name: string) => flowsOfFile(`templates/workflows/${name}.yml`, parseYaml(readFileSync(join(ROOT, 'templates', 'workflows', `${name}.yml`), 'utf8')), name).flows[0]!;
+
+/** What the runner decides per step in a mode: 'ran' (storebound is called), 'planned' (dry input missing) or 'skipped'. */
+function simulate(name: string, mode: 'dry' | 'apply', vars: Record<string, string>) {
+  const f = load(name);
+  const pending: DryPending = { built: new Set(), uploaded: new Set() };
+  const out: Record<string, { how: string; argv?: string[]; owner?: string }> = {};
+  for (const s of expand(f, new Map([[f.name, f]]), 'steps').steps) {
+    const p = planStep(s, 'steps', mode, vars, C);
+    if (p.skip) { out[s.id] = { how: 'skipped', argv: p.argv, owner: p.owner }; continue; }
+    const why = plannedForDryInput(p, mode, pending);
+    if (why) { out[s.id] = { how: 'planned', argv: p.argv }; continue; }
+    noteDry(p, pending);
+    out[s.id] = { how: 'ran', argv: p.argv };
+  }
+  return out;
+}
+
+describe('dry flows plan what a dry earlier step cannot produce', () => {
+  test('beta: dry build then upload (and wait, distribute) are planned, reads and checks still run', () => {
+    const r = simulate('beta', 'dry', { VERSION: '1.2.0', GROUP: '', BUILD: '7', 'config.testflight.internal': 'Team' });
+    expect(r['build']).toMatchObject({ how: 'ran', argv: ['apple', 'build', '--version', '1.2.0', '--build-number', '7', '--dry'] });
+    expect(r['upload']!.how).toBe('planned');
+    expect(r['wait']!.how).toBe('planned');
+    expect(r['distribute-internal']!.how).toBe('planned');
+    expect(r['play-build']!.how).toBe('ran');
+    expect(r['play-upload']!.how).toBe('planned');
+    expect(r['check']!.how).toBe('ran');
+  });
+
+  test('a real run is untouched: upload with no IPA still runs (and fails inside the command)', () => {
+    const r = simulate('beta', 'apply', { VERSION: '1.2.0', GROUP: '', BUILD: '7', 'config.testflight.internal': 'Team' });
+    expect(r['upload']).toMatchObject({ how: 'ran', argv: ['apple', 'upload', '--no-wait', '--build', '7', '--allow-existing'] });
+    expect(r['play-upload']!.how).toBe('ran');
+  });
+
+  test('an upload of a named file, or without a dry build before it, is not planned away', () => {
+    const pending: DryPending = { built: new Set(['apple']), uploaded: new Set() };
+    const up = planStep({ id: 'u', run: 'apple upload build/App.ipa' }, 'steps', 'dry', {}, C);
+    expect(plannedForDryInput(up, 'dry', pending)).toBeNull();
+    const fresh: DryPending = { built: new Set(), uploaded: new Set() };
+    expect(plannedForDryInput(planStep({ id: 'u', run: 'apple upload --no-wait' }, 'steps', 'dry', {}, C), 'dry', fresh)).toBeNull();
+  });
+
+  test('release: the macOS pkg is tracked apart from the iOS IPA', () => {
+    const r = simulate('release', 'dry', { VERSION: '2.0.0', MAC_TAURI: 'src-tauri', PLAY_TRACK: 'beta', BUILD: '9' });
+    expect(r['build']!.how).toBe('ran');
+    expect(r['upload']!.how).toBe('planned');
+    expect(r['mac-build']!.argv).toContain('--dry');
+    expect(r['mac-upload']!.how).toBe('planned');
+    expect(r['play-upload']!.argv).toEqual(['play', 'upload', '--track', 'beta', '--dry']);
+    const off = simulate('release', 'dry', { VERSION: '2.0.0', MAC_TAURI: '', PLAY_TRACK: 'internal', BUILD: '9' });
+    expect(off['mac-build']!.how).toBe('skipped');
+    expect(off['mac-upload']!.how).toBe('skipped');
+    expect(off['promote']!.owner).toContain('internal');
+  });
+});
+
+describe('beta template defaults', () => {
+  test('VERSION is required, GROUP defaults to empty and falls to the internal group of the config', () => {
+    const f = load('beta');
+    expect(f.params['VERSION']).toBe('?');
+    expect(f.params['GROUP']).toBe('');
+    expect(missingParams({ ...f.params })).toEqual(['VERSION']);
+    expect(missingParams({ ...f.params, VERSION: '1.0.0' })).toEqual([]);
+    const steps = expand(f, new Map([[f.name, f]]), 'steps').steps;
+    const by = (v: Record<string, string>) => steps.filter(s => s.id.startsWith('distribute') || s.id === 'no-group')
+      .filter(s => evalIf(substitute(s.if ?? '', v), C)).map(s => s.id);
+    expect(by({ GROUP: '', 'config.testflight.internal': 'Team' })).toEqual(['distribute-internal']);
+    expect(by({ GROUP: 'QA', 'config.testflight.internal': 'Team' })).toEqual(['distribute']);
+    expect(by({ GROUP: '', 'config.testflight.internal': '' })).toEqual(['no-group']);
+    expect(validateFlows([f, load('release')])).toEqual([]);
+  });
+
+  test('flow run beta without VERSION fails early with a clear message', () => {
+    const dir = join(tmp, 'req');
+    mkdirSync(join(dir, 'store', 'workflows'), { recursive: true });
+    writeFileSync(join(dir, 'store', 'workflows', 'beta.yml'), readFileSync(join(ROOT, 'templates', 'workflows', 'beta.yml'), 'utf8'));
+    const p = sb(dir, 'flow', 'run', 'beta');
+    expect(p.exitCode).not.toBe(0);
+    expect(p.stderr.toString() + p.stdout.toString()).toContain('beta needs VERSION=<value>');
+  });
+});
diff --git a/tests/next-build-platforms.test.ts b/tests/next-build-platforms.test.ts
new file mode 100644
index 0000000..7b4fa28
--- /dev/null
+++ b/tests/next-build-platforms.test.ts
@@ -0,0 +1,73 @@
+// One app record, an iOS and a macOS App Store version (pitfall 79): CFBundleVersion must be unique across ALL the app's
+// builds, so `apple next-build`, `apple build` and `apple build --platform macos` (also --dry) share one computation.
+// Seen live: the macOS dry run proposed a build number an uploaded macOS build already had (it asked only for macOS
+// builds), while next-build said the right one. Against the fake App Store Connect.
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, test } from 'bun:test';
+import type { ShipConfig } from '../cli/lib/config';
+import { appNextBuild, run as nextBuild } from '../cli/apple/next-build';
+import { identityLine, run as buildMas } from '../cli/apple/build-mas';
+import { ascEnv, BASE, capture, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores } from './helpers/fake-stores';
+
+const APP = '6400000101';
+const CONFIG: ShipConfig = { ...BASE };
+const TAURI = JSON.stringify({ productName: 'Example Notes', identifier: 'com.example.notes', version: '1.2.0' });
+let s: Stores;
+beforeAll(ascEnv);
+afterAll(restore);
+beforeEach(() => { s = installStores(); });
+afterEach(uninstallStores);
+
+const build = (id: string, version: string, state = 'VALID') => s.asc.put({ type: 'builds', id, attributes: { version, processingState: state }, rels: { app: APP } });
+/** iOS builds 202610261700 / ...1730, a macOS build ...1731 and an expired one ...1734 in another state. */
+function seed(): void {
+  build('b-ios-1', '202610261700');
+  build('b-ios-2', '202610261730');
+  build('b-mac-1', '202610261731');
+  build('b-mac-2', '202610261734', 'PROCESSING');
+}
+
+describe('next build number over every platform', () => {
+  test('apple next-build and the macOS dry run agree and sit above the highest build', async () => {
+    seed();
+    const p = project(CONFIG, { 'src-tauri/tauri.conf.json': TAURI });
+    const nb = await capture(() => nextBuild(p.ctx(['--json'])));
+    expect(JSON.parse(nb.out)).toEqual({ next: '202610261735', builds: 4 });
+    const dry = await capture(() => buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--dry', '--json']), 'linux'));
+    expect(JSON.parse(dry.out.slice(dry.out.indexOf('{')))).toMatchObject({ platform: 'MAC_OS', build: '202610261735' });
+  });
+  test('no request narrows the build list to one platform', async () => {
+    seed();
+    const p = project(CONFIG, { 'src-tauri/tauri.conf.json': TAURI });
+    await capture(() => buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--dry', '--json']), 'linux'));
+    const reads = s.calls.filter(c => /\/v1\/builds/.test(c.path));
+    expect(reads.length).toBeGreaterThan(0);
+    for (const r of reads) expect(decodeURIComponent(r.path)).not.toMatch(/preReleaseVersion|platform|processingState/);
+  });
+  test('every page counts', async () => {
+    const pages: Record<string, unknown> = {
+      '/p1': { data: [{ attributes: { version: '5' } }], links: { next: '/p2' } },
+      '/p2': { data: [{ attributes: { version: '41' } }], links: { next: '/p3' } },
+      '/p3': { data: [{ attributes: { version: '9' } }], links: {} },
+    };
+    const seen: string[] = [];
+    const client = { app: async () => APP, all: async (path: string) => { seen.push(path); const out: unknown[] = []; for (let u: string | undefined = '/p1'; u; u = (pages[u] as { links: { next?: string } }).links.next) out.push(...(pages[u] as { data: unknown[] }).data); return out; } };
+    expect(await appNextBuild(client as never)).toEqual({ next: '42', builds: 3 });
+    expect(seen[0]).toContain(`filter[app]=${APP}`);
+  });
+  test('an app without builds starts at 1', async () => {
+    expect((await appNextBuild({ app: async () => APP, all: async () => [] } as never)).next).toBe('1');
+  });
+});
+
+describe('identity line off a Mac', () => {
+  test('a non-macOS machine is called a non-build machine, not "none found"', () => {
+    const line = identityLine({ platform: 'win32', appIdentity: null, installerIdentity: null, profile: null });
+    expect(line).toContain('not a build machine');
+    expect(line).toContain('Mac');
+    expect(line).not.toContain('none found');
+  });
+  test('on a Mac a missing identity is still reported as missing', () => {
+    expect(identityLine({ platform: 'darwin', appIdentity: null, installerIdentity: 'Mac Installer', profile: null })).toContain('app identity: (none found); installer identity: Mac Installer');
+  });
+});
diff --git a/tests/validate-macos.test.ts b/tests/validate-macos.test.ts
new file mode 100644
index 0000000..baae419
--- /dev/null
+++ b/tests/validate-macos.test.ts
@@ -0,0 +1,52 @@
+// A macOS App Store version is checked against the Mac screenshot set only (APP_DESKTOP), never the iPhone / iPad
+// sets: validate / release plan showed 2 false blockers per locale for an app whose editable version was macOS.
+// Also: a non-macOS machine without the certificates' keys must not be told to create another certificate.
+import { describe, expect, test } from 'bun:test';
+import { requiredDisplayTypes } from '../cli/apple/screenshots';
+import { pickCertificate, type ApiCert } from '../cli/lib/signing';
+import { appleRules, type AppleSnapshot } from '../cli/lib/validate-rules';
+
+const snap = (platform: string, apple: Parameters<typeof requiredDisplayTypes>[0], shots: Record<string, number>): AppleSnapshot => ({
+  version: { versionString: '1.0.0', state: 'PREPARE_FOR_SUBMISSION', platform }, build: null, expectedLocales: ['en-US', 'de-DE'],
+  locales: ['en-US', 'de-DE'].map(locale => ({ locale, name: 'n', subtitle: 's', description: 'd', keywords: 'k', screenshots: shots })),
+  requiredDisplayTypes: requiredDisplayTypes(apple, platform), mac: !!apple?.mac, macVersion: platform === 'MAC_OS',
+  reviewDetail: null, ageRating: null, priceSchedule: true, availability: true, iaps: [], expectedProducts: [], privacyUrl: { url: 'https://example.com/privacy', status: 200 },
+} as AppleSnapshot);
+const shotBlockers = (s: AppleSnapshot) => appleRules(s).filter(x => x.level === 'blocker' && x.code.startsWith('screenshots'));
+
+describe('required screenshot types per platform', () => {
+  test('macOS: the Mac set with apple.mac, nothing else; apple.screenshotTypes stays the iOS list', () => {
+    expect(requiredDisplayTypes({ ipad: true, mac: true }, 'MAC_OS')).toEqual(['APP_DESKTOP']);
+    expect(requiredDisplayTypes({ ipad: true, mac: true, screenshotTypes: ['APP_IPHONE_67'] }, 'MAC_OS')).toEqual(['APP_DESKTOP']);
+    expect(requiredDisplayTypes({ ipad: true }, 'MAC_OS')).toEqual([]);
+    expect(requiredDisplayTypes({ ipad: true, mac: true, screenshotTypes: ['APP_IPHONE_67'] })).toEqual(['APP_IPHONE_67']);
+    expect(requiredDisplayTypes({ ipad: true })).toEqual(['APP_IPHONE_61', 'APP_IPAD_PRO_3GEN_129']);
+    expect(requiredDisplayTypes({ ipad: true }, 'TV_OS')).toEqual([]);
+  });
+  test('a macOS version with Mac screenshots and no iPhone / iPad ones has no screenshot blocker', () => {
+    expect(shotBlockers(snap('MAC_OS', { ipad: true, mac: true }, { APP_DESKTOP: 3 }))).toEqual([]);
+  });
+  test('a macOS version without the Mac set is missing APP_DESKTOP only', () => {
+    const b = shotBlockers(snap('MAC_OS', { ipad: true, mac: true }, {}));
+    expect(b.map(x => x.msg)).toEqual(['en-US: no APP_DESKTOP screenshots', 'de-DE: no APP_DESKTOP screenshots']);
+  });
+  test('an iOS version still needs the iPhone and iPad sets', () => {
+    expect(shotBlockers(snap('IOS', { ipad: true, mac: true }, { APP_DESKTOP: 3 })).length).toBe(4);
+  });
+});
+
+describe('certificate without a local key', () => {
+  const c = (id: string): ApiCert => ({ id, attributes: { certificateType: 'DISTRIBUTION', activated: true, expirationDate: new Date(Date.now() + 400 * 864e5).toISOString() } });
+  test('macOS: a new one or the .p12 import', () => {
+    expect(pickCertificate([c('a')], 'DISTRIBUTION', () => false, Date.now(), 'darwin').why).toContain('a new one is needed');
+  });
+  test('Windows / Linux: build on the Mac, never a new certificate', () => {
+    for (const p of ['win32', 'linux']) {
+      const why = pickCertificate([c('a')], 'DISTRIBUTION', () => false, Date.now(), p).why;
+      expect(why).toContain('none of their private keys');
+      expect(why).toContain('cannot build or sign for Apple');
+      expect(why).toContain('Do not create another certificate');
+      expect(why).not.toContain('a new one is needed');
+    }
+  });
+});
diff --git a/tests/validate-play-edit.test.ts b/tests/validate-play-edit.test.ts
new file mode 100644
index 0000000..fb21da1
--- /dev/null
+++ b/tests/validate-play-edit.test.ts
@@ -0,0 +1,91 @@
+// `storebound validate --play` read its screenshots with a bare POST /edits and a DELETE in a finally: not under the
+// machine lock and never retried. When Play (or another storebound process) ended that edit meanwhile, the next read
+// answered 400 "This Edit has been deleted" and validate printed it as a store blocker ("GET .../phoneScreenshots 400").
+// Now the reads run in play.read (one locked edit, deleted only after all reads, redone once with a new edit), and a
+// vanished edit that stays gone is a tool warning, never a blocker.
+import { afterEach, beforeEach, describe, expect, test } from 'bun:test';
+import { generateKeyPairSync } from 'node:crypto';
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { parseArgs } from '../cli/lib/args';
+import type { Loaded, ShipConfig } from '../cli/lib/config';
+import { collectPlay, run } from '../cli/validate';
+import { installStores, type Stores, uninstallStores } from './helpers/fake-stores';
+
+const PKG = 'com.example.game';
+const GONE = { error: { code: 400, status: 'FAILED_PRECONDITION', message: 'This Edit has been deleted.' } };
+let s: Stores;
+let savedKey: string | undefined;
+
+beforeEach(() => {
+  savedKey = process.env.PLAY_SERVICE_ACCOUNT;
+  const { privateKey } = generateKeyPairSync('rsa', { modulusLength: 2048 });
+  process.env.PLAY_SERVICE_ACCOUNT = JSON.stringify({ client_email: 'sb@example.com', private_key: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(), token_uri: 'https://oauth2.googleapis.com/token' });
+  s = installStores();
+  // the fake has no countryAvailability route (the console owns it): a plain 404, which validate reads as "not readable"
+  s.faults.push({ method: 'GET', match: /countryAvailability/, status: 404, when: 'before', times: 99 });
+  s.play.live.listings['en-US'] = { language: 'en-US', title: 'Example Game', shortDescription: 'Short.', fullDescription: 'Full.' };
+});
+afterEach(() => {
+  uninstallStores();
+  if (savedKey === undefined) delete process.env.PLAY_SERVICE_ACCOUNT; else process.env.PLAY_SERVICE_ACCOUNT = savedKey;
+});
+
+function loaded(): Loaded {
+  const root = mkdtempSync(join(tmpdir(), 'sb-vpe-'));
+  const config = { app: { name: 'Example Game', privacyPolicyUrl: '' }, languages: [{ id: 'en', play: 'en-US' }], play: { packageName: PKG } } as unknown as ShipConfig;
+  return { config, root, path: join(root, 'storebound.config.ts'), resolve: p => join(root, p) };
+}
+
+/** Play ends the edit under the reader: the DELETE happens on the store, the read that follows answers 400. */
+function endEditOnImageRead(times: number): { hits: () => number } {
+  const inner = globalThis.fetch;
+  let left = times, hits = 0;
+  globalThis.fetch = (async (input: string | URL | Request, init?: RequestInit) => {
+    const url = String(input instanceof Request ? input.url : input);
+    const m = /\/edits\/([^/]+)\/listings\/[^/]+\/phoneScreenshots$/.exec(url);
+    if (m && (init?.method ?? 'GET').toUpperCase() === 'GET' && left > 0) {
+      left--; hits++;
+      s.play.edits.delete(m[1]!);
+      return new Response(JSON.stringify(GONE), { status: 400, headers: { 'content-type': 'application/json' } });
+    }
+    return inner(input, init);
+  }) as typeof fetch;
+  return { hits: () => hits };
+}
+
+describe('validate --play: the read-only edit', () => {
+  test('an edit ended during the screenshot reads is reopened once; the snapshot is complete and every edit is closed', async () => {
+    const fault = endEditOnImageRead(1);
+    const snap = await collectPlay({ loaded: loaded(), args: parseArgs(['--play']) });
+    expect(fault.hits()).toBe(1);
+    expect(snap.listings.map(l => l.language)).toEqual(['en-US']);
+    expect(Object.keys(snap.listings[0]!.images)).toContain('phoneScreenshots');
+    expect(s.play.edits.size).toBe(0);
+    const edits = s.calls.filter(c => c.method === 'POST' && /\/edits$/.test(c.path));
+    expect(edits.length).toBe(2);
+  });
+
+  test('no image read runs after the edit was deleted', async () => {
+    await collectPlay({ loaded: loaded(), args: parseArgs(['--play']) });
+    const del = s.calls.findIndex(c => c.method === 'DELETE' && /\/edits\/[^/]+$/.test(c.path));
+    expect(del).toBeGreaterThan(-1);
+    expect(s.calls.slice(del + 1).filter(c => /\/edits\/[^/]+\//.test(c.path))).toEqual([]);
+  });
+
+  test('an edit that stays gone is a tool warning, never a store blocker', async () => {
+    endEditOnImageRead(10);
+    const out: string[] = [];
+    const log = console.log;
+    console.log = (...a: unknown[]) => { out.push(a.join(' ')); };
+    const prev = process.exitCode;
+    try { await run({ loaded: loaded(), args: parseArgs(['--play', '--json', '--no-scan', '--no-health', '--no-local']) }); } finally { console.log = log; }
+    process.exitCode = prev;
+    const res = JSON.parse(out.join('\n').slice(out.join('\n').indexOf('{'))) as { blockers: number; findings: { level: string; code: string; msg: string }[] };
+    expect(res.findings.filter(f => f.level === 'blocker' && /Edit has been deleted|phoneScreenshots/.test(f.msg))).toEqual([]);
+    expect(res.findings).toContainEqual(expect.objectContaining({ level: 'warn', code: 'edit-gone' }));
+    // (the template-answers blocker of the example config is unrelated: only an api blocker would be the bug)
+    expect(res.findings.filter(f => f.level === 'blocker' && f.code === 'api')).toEqual([]);
+  });
+});

From 3a8d9d7551bfb5d56f3e9d2d2c9de7418c36e43c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 18:19:50 +0700
Subject: [PATCH 215/255] flags: regenerate for the new apple build / flow
 options

---
 cli/data/flags.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index 3ef2998..59e378c 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -76,6 +76,7 @@
    "configuration",
    "derived-data",
    "env-file",
+   "evidence",
    "keychain",
    "keychain-unlock",
    "locale-map",
@@ -84,6 +85,7 @@
    "out",
    "path-free",
    "platform",
+   "pre-check",
    "profile",
    "progress",
    "project",
@@ -590,6 +592,7 @@
    "since"
   ],
   "flow": [
+   "apple",
    "apply",
    "from",
    "resume"

From cdd9321794e874c4974cada44c4ce7d875587efc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 2 Nov 2026 18:22:39 +0700
Subject: [PATCH 216/255] storebound 0.8.64: version in package.json and every
 copy, CHANGELOG 0.8.64 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index b2fe8dc..2c2ec96 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.63",
+      "version": "0.8.64",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 30a8d7e..7adbb70 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 54e45ca..c3532d1 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ab04470..5404098 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.64 · 2026-11-02
+
 - `validate` / `release plan`: a macOS version is checked against Mac screenshots (APP_DESKTOP, with `apple.mac`), not the iPhone / iPad sets; with no editable version, iOS is picked over macOS.
 - `validate --play`: reads go through the locked read-only edit and retry once on a fresh edit when Play ends it ("This Edit has been deleted" was shown as a blocker; it is now a warning to re-run at most).
 - Build numbers for macOS (`apple build --platform macos`, `apple upload` of a .pkg) come from every build of the app, as `apple next-build` does (a macOS-only list proposed a number an iOS build already had).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index b4aab53..fe8ff48 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index e3dbb76..5bbd8d6 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.63"
+version = "0.8.64"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index d3a2306..92af0b2 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.63"
+version = "0.8.64"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index febcc13..33ecd9c 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index b2050da..ec54850 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 462c182..efb43c3 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.63",
+  "version": "0.8.64",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From d0f568ebc2fc0ab9ee4b7b9beec33cc23d393b4c Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:14:34 +0700
Subject: [PATCH 217/255] validate: removed-from-sale IAPs are no blockers;
 shots capture --device landscape (Mac / Chromebook frames from a web build);
 playwright lookup says why each place failed

---
 CHANGELOG.md                      |   4 ++
 cli/data/flags.json               |   2 +-
 cli/lib/config.ts                 |  11 +++-
 cli/lib/validate-rules.ts         |   8 ++-
 cli/shots/browser.ts              |  14 +++--
 cli/shots/capture-web.ts          |  32 +++++-----
 cli/shots/capture.ts              |  44 ++++++++-----
 cli/shots/devices.ts              |  19 ++++--
 cli/shots/lib.ts                  |  15 +++++
 cli/shots/selectors.ts            |  10 +--
 skills/store-screenshots/SKILL.md |   9 ++-
 tests/capture-landscape.test.ts   | 101 ++++++++++++++++++++++++++++++
 tests/wave1.test.ts               |   9 +++
 13 files changed, 230 insertions(+), 48 deletions(-)
 create mode 100644 tests/capture-landscape.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5404098..e2f056b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- `validate`: in-app purchases removed from sale (DEVELOPER_REMOVED_FROM_SALE, REMOVED_FROM_SALE) are no blockers; a warning only when the config still sells one.
+- `shots capture --device landscape`: Mac App Store / Chromebook frames from a web build (desktop viewport at `shots.landscape.size`, default 1440x900 @2x) into `<lang>/landscape/`; on by default when the project renders a landscape size. The simulator and emulator sources skip it with a warning.
+- `shots render` / `capture`: "playwright not found" now lists each place looked at and why it failed (an import error was reported as not found).
+
 ## 0.8.64 · 2026-11-02
 
 - `validate` / `release plan`: a macOS version is checked against Mac screenshots (APP_DESKTOP, with `apple.mac`), not the iPhone / iPad sets; with no editable version, iOS is picked over macOS.
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 59e378c..d8952e6 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -1810,7 +1810,7 @@
    "storebound settings bypass on | off | status   owner opt-in: the agent also presses the owner-only buttons"
   ],
   "shots capture": [
-   "storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet] [--source web|ios-sim|android-emu|folder]"
+   "storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet|landscape] [--source web|ios-sim|android-emu|folder]"
   ],
   "shots check": [
    "storebound shots check [--lang en,tr] [--variants] [--json]"
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 446ee91..5e48f4c 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -202,7 +202,9 @@ export interface ShotsConfig {
   /** Tablet frames: default 1032 x 1352 @2x (13" iPad minus its 24 px bar) with apple.ipad, else 800 x 1240 @2x. */
   tablet?: { w: number; h: number; dpr?: number; bar?: number };
   /** Landscape layout (Mac, Chromebook, and the Play tablet slots with playTablets): copy on one side, the frame on the
-   *  other. Frames: <frames>/<lang>/landscape/<name>.png at `size` CSS px (default 1440 x 900 @2x). frame: 'window' (a
+   *  other. Frames: <frames>/<lang>/landscape/<name>.png at `size` CSS px (default 1440 x 900 @2x = 2880 x 1800), made by
+   *  `shots capture --device landscape` (web source: a desktop viewport, no touch, no status bar crop; ios-sim / android-emu
+   *  have no landscape device, use a web build or a folder). frame: 'window' (a
    *  Mac window around the game, the default for mac) or 'none' (the bare frame, the default for Play sizes). side:
    *  where the copy goes (default 'left'). playTablets: render tab7 / tab10 landscape (1920 x 1080 / 2560 x 1440). */
   landscape?: { frame?: 'window' | 'none'; side?: 'left' | 'right'; playTablets?: boolean; size?: { w: number; h: number; dpr?: number } };
@@ -217,7 +219,7 @@ export interface ShotsConfig {
 /** One raw frame. Web: `path` (+ query). Simulator / emulator: `url` deep link and / or `args` / `extras`. */
 /** Web capture: a selector, candidates tried in order, or per layout { phone, tablet, any } (own list first). Prefer data
  *  attributes (`[data-shot="shop-row"]`); `text=Shop` and `role=button[name="Shop"]` work as fallbacks. */
-export type ShotSelector = string | string[] | { phone?: string | string[]; tablet?: string | string[]; any?: string | string[] };
+export type ShotSelector = string | string[] | { phone?: string | string[]; tablet?: string | string[]; landscape?: string | string[]; any?: string | string[] };
 
 export interface ShotSpec {
   /** Web: wait (up to the waitFor timeout) until one of these matches, before waitFor; a miss names the selector and the size. */
@@ -235,7 +237,10 @@ export interface ShotSpec {
   delayMs?: number;
   /** Web: JS run in the page before the screenshot. */
   eval?: string[];
-  device?: 'phone' | 'tablet' | 'both';
+  /** Which frames this shot makes: phone (default), tablet, both (phone + tablet), landscape (<lang>/landscape/<name>.png at
+   *  shots.landscape.size, web source only). When the project renders a landscape size (apple.mac, play.chromebook,
+   *  shots.landscape.playTablets), shots without a device and 'both' shots also make a landscape frame. */
+  device?: 'phone' | 'tablet' | 'both' | 'landscape';
   /** Web, capture.session "per-language": how this shot is reached in the already booted page. "spa" (default):
    *  history.pushState to its path + a popstate event, then waitFor / eval (switch scenes from those); "reload":
    *  page.goto in the same page. A failing waitFor there falls back to a fresh page. */
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index 43d8906..c1e5491 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -163,6 +163,7 @@ export interface PlaySnapshot {
 const EDITABLE = ['PREPARE_FOR_SUBMISSION', 'DEVELOPER_REJECTED', 'REJECTED', 'METADATA_REJECTED', 'INVALID_BINARY'];
 const IN_FLIGHT = ['WAITING_FOR_REVIEW', 'IN_REVIEW', 'PENDING_DEVELOPER_RELEASE', 'PROCESSING_FOR_DISTRIBUTION', 'READY_FOR_DISTRIBUTION', 'READY_FOR_SALE', 'ACCEPTED'];
 const IAP_OK = ['READY_TO_SUBMIT', 'WAITING_FOR_REVIEW', 'IN_REVIEW', 'APPROVED'];
+const IAP_OFF_SALE = ['DEVELOPER_REMOVED_FROM_SALE', 'REMOVED_FROM_SALE'];
 /** Age rating questions whose null means "not answered" (kidsAgeBand null = not a kids app). */
 // Left null on apps App Review accepted: gracRatingClassificationNumber (a Korean GRAC rating number, for apps GRAC
 // rated), socialMediaAgeRestricted (asked only when socialMedia is true). socialMedia itself is a newer question that
@@ -281,12 +282,17 @@ export function appleRules(s: AppleSnapshot): Finding[] {
 
   const iaps = new Map(s.iaps.map(i => [i.productId, i] as const));
   for (const id of s.expectedProducts) if (!iaps.has(id)) add('blocker', 'iap', `${id}: not on App Store Connect`, 'storebound apple iap');
+  const expected = new Set(s.expectedProducts);
   for (const i of s.iaps) {
+    // a product the developer took off sale (old consumables, a retired unlock) does not block a submission; it matters
+    // only when the config still sells it
+    if (IAP_OFF_SALE.includes(i.state)) { if (expected.has(i.productId)) add('warn', 'iap', `${i.productId}: ${i.state}, but the config still sells it`, 'put it back on sale in App Store Connect, or drop it from products'); continue; }
     if (!IAP_OK.includes(i.state)) add('blocker', 'iap', `${i.productId}: ${i.state}`, i.state === 'MISSING_METADATA' ? 'storebound apple iap + apple iap-review' : 'see the review-rejections skill');
     else if (!i.reviewScreenshot && i.state !== 'APPROVED') add('blocker', 'iap', `${i.productId}: no review screenshot`, 'storebound apple iap-review');
   }
   for (const g of s.firstProductGaps ?? []) add(g.level === 'error' ? 'blocker' : 'warn', 'iap-first', g.msg, g.fix);
-  if (s.iaps.length && !f.some(x => x.code === 'iap')) add('ok', 'iap', `${s.iaps.length} in-app purchases ready`);
+  const onSale = s.iaps.filter(i => !IAP_OFF_SALE.includes(i.state)).length, offSale = s.iaps.length - onSale;
+  if (s.iaps.length && !f.some(x => x.code === 'iap')) add('ok', 'iap', `${onSale} in-app purchases ready${offSale ? ` (${offSale} removed from sale, not checked)` : ''}`);
 
   f.push(...appleSubscriptionRules(s));
   for (const m of s.capabilityMismatches ?? []) add('warn', 'capabilities', m.msg, m.fix);
diff --git a/cli/shots/browser.ts b/cli/shots/browser.ts
index e009c05..bd33563 100644
--- a/cli/shots/browser.ts
+++ b/cli/shots/browser.ts
@@ -30,24 +30,30 @@ import * as rt from '../lib/rt';
 class PlaywrightShapeError extends Error {}
 
 async function chromium(root: string): Promise<any> {
+  // why each place failed, for the error: a swallowed import error read as "not found" (a Mac run had it installed)
+  const tried: string[] = [];
   for (const base of [root, rt.packageRoot()]) {
+    let p = '';
     try {
-      const p = rt.resolveFrom('playwright', base);
+      p = rt.resolveFrom('playwright', base);
       // only an installed copy (node_modules): outside a project Bun auto-installs the newest playwright into its global
       // cache (~/.bun/install/cache), whose browser build was never downloaded ("headless shell: not installed" on
       // Linux CI, where no Google Chrome hides it); storebound's own copy is next
-      if (!isInstalledPackage(p)) continue;
+      if (!isInstalledPackage(p)) { tried.push(`${p}: not an installed copy (Bun's global cache)`); continue; }
       // playwright's entry is CommonJS: depending on the runtime and version the ESM import puts chromium on the
       // namespace or only under default (a project's playwright 1.57 under a global Bun install gave undefined)
       const m = await rt.importPath(p);
       const c = m?.chromium ?? m?.default?.chromium;
       if (!c || typeof c.launch !== 'function') throw new PlaywrightShapeError(`playwright at ${p} has no chromium.launch (exports: ${Object.keys(m ?? {}).slice(0, 8).join(', ') || 'none'}${m?.default ? `; default: ${Object.keys(m.default).slice(0, 8).join(', ')}` : ''})`);
       return c;
-    } catch (e) { if (e instanceof PlaywrightShapeError) throw e; /* next */ }
+    } catch (e) {
+      if (e instanceof PlaywrightShapeError) throw e;
+      tried.push(p ? `${p}: ${(e as Error).message.split('\n')[0]}` : `not resolvable from ${base}`);
+    }
   }
   // only reached in the compiled sidecar: the bundled playwright-core (not a runtime dependency of the npm package)
   if (compiled()) return (await import('playwright-core')).chromium;
-  throw new Error('playwright not found: in your project run `bun add -d playwright` (and `bunx playwright install chromium` if Google Chrome is not installed)');
+  throw new Error(`playwright not found: in your project run \`bun add -d playwright\` (and \`bunx playwright install chromium\` if Google Chrome is not installed)\n  ${tried.join('\n  ')}`);
 }
 
 /** A resolved module path inside a node_modules folder (not one of Bun's auto-installs from its global cache). */
diff --git a/cli/shots/capture-web.ts b/cli/shots/capture-web.ts
index 0229eeb..a2e4ff5 100644
--- a/cli/shots/capture-web.ts
+++ b/cli/shots/capture-web.ts
@@ -23,11 +23,15 @@ import { join } from 'node:path';
 import type { ShotSpec, ShotsCapture } from '../lib/config';
 import { log, warn } from '../lib/log';
 import { type AuthPlan, expiredHint, landedOnLogin, maskSecrets, safeUrl } from './auth';
-import { shotsFor } from './devices';
+import { type CaptureDevice, shotsFor } from './devices';
 import { applySelectors, candidates, probe } from './selectors';
-import type { FrameDims } from './lib';
+import { DEFAULT_LANDSCAPE, type FrameDims } from './lib';
 
-type Device = 'phone' | 'tablet';
+/** Viewport per device class; landscape defaults to shots.landscape.size's default when a caller passes only phone / tablet. */
+export type CaptureDims = Record<'phone' | 'tablet', FrameDims> & { landscape?: FrameDims };
+const dimsOf = (dims: CaptureDims, device: Device): FrameDims => dims[device] ?? DEFAULT_LANDSCAPE;
+
+type Device = CaptureDevice;
 export const STEPS = ['goto', 'waitFor', 'eval', 'delay', 'screenshot'] as const;
 export type Step = typeof STEPS[number];
 export type Timing = Record<Step | 'total', number>;
@@ -100,14 +104,14 @@ export async function hashServed(baseUrl: string): Promise<string> {
 }
 
 /** Every web frame to capture, in a fixed order (lang, device, shot), with its URL and its input hash. */
-export function planWeb(cap: ShotsCapture, o: { langs: string[]; devices: Device[]; only: string[]; dims: Record<Device, FrameDims>; framesDir: string;
-  build: string; copyText?: (lang: string) => string; fonts?: string }): WebJob[] {
+export function planWeb(cap: ShotsCapture, o: { langs: string[]; devices: Device[]; only: string[]; dims: CaptureDims; framesDir: string;
+  build: string; copyText?: (lang: string) => string; fonts?: string; allLandscape?: boolean }): WebJob[] {
   const jobs: WebJob[] = [];
-  for (const lang of o.langs) for (const device of o.devices) for (const [name, spec] of shotsFor(cap, device, o.only)) {
+  for (const lang of o.langs) for (const device of o.devices) for (const [name, spec] of shotsFor(cap, device, o.only, o.allLandscape)) {
     const q = (cap.query ?? '').replaceAll('{lang}', lang);
     const path = (spec.path ?? '/').replaceAll('{lang}', lang) + (q ? ((spec.path ?? '/').includes('?') ? '&' : '?') + q : '');
     const url = (cap.baseUrl ?? '').replace(/\/$/, '') + path;
-    const hash = sha(JSON.stringify({ spec, url, dims: o.dims[device], session: cap.session ?? 'per-shot', build: o.build, copy: o.copyText?.(lang) ?? '', fonts: o.fonts ?? '' }));
+    const hash = sha(JSON.stringify({ spec, url, dims: dimsOf(o.dims, device), session: cap.session ?? 'per-shot', build: o.build, copy: o.copyText?.(lang) ?? '', fonts: o.fonts ?? '' }));
     const frame = `${lang}/${device}/${name}.png`;
     jobs.push({ lang, device, name, spec, url, path, out: join(o.framesDir, frame), frame, hash });
   }
@@ -137,7 +141,7 @@ export interface CaptureReport {
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** Captures the jobs in a browser: per-shot contexts, or one page per language + device in per-language sessions. */
-export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[], o: { concurrency: number; dims: Record<Device, FrameDims>; auth?: AuthPlan }): Promise<CaptureReport> {
+export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[], o: { concurrency: number; dims: CaptureDims; auth?: AuthPlan }): Promise<CaptureReport> {
   const auth = o.auth;
   const mask = (t: string): string => (auth ? maskSecrets(t, auth.secrets) : t);
   const expired = new Set<string>();
@@ -147,8 +151,8 @@ export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[]
   let finished = 0;
   const total = jobs.length;
   const newPage = async (j: WebJob): Promise<{ c: any; page: any; errs: string[] }> => {
-    const d = o.dims[j.device];
-    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: d.dpr, hasTouch: true, isMobile: true, serviceWorkers: 'block', locale: j.lang, ...(auth?.contextOptions ?? {}) });
+    const d = dimsOf(o.dims, j.device);
+    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: d.dpr, hasTouch: j.device !== 'landscape', isMobile: j.device !== 'landscape', serviceWorkers: 'block', locale: j.lang, ...(auth?.contextOptions ?? {}) }); // landscape = a desktop window: no touch, no mobile emulation
     // sign in once per context, cookies kept in it (request auth); a failed sign-in stops the whole capture
     if (auth) try { await auth.prepare(c); } catch (e) { await c.close(); throw Object.assign(new Error(mask((e as Error).message)), { authFailed: true }); }
     const page = await c.newPage();
@@ -167,7 +171,7 @@ export async function captureWeb(browser: any, cap: ShotsCapture, jobs: WebJob[]
       if (!expired.has(safeUrl(s.page.url()))) { expired.add(safeUrl(s.page.url())); warn('shots', `${j.lang}/${j.device}/${j.name}: ${mask(expiredHint(s.page.url()))}`); }
       throw new Error(`landed on the sign-in page ${safeUrl(s.page.url())}`);
     }
-    await applySelectors(s.page, j.spec, { device: j.device, w: o.dims[j.device].w, h: o.dims[j.device].h }, waitTimeout); // waitSelector, click: a miss names the selector and the size
+    await applySelectors(s.page, j.spec, { device: j.device, w: dimsOf(o.dims, j.device).w, h: dimsOf(o.dims, j.device).h }, waitTimeout); // waitSelector, click: a miss names the selector and the size
     if (j.spec.waitFor) await s.page.waitForFunction(j.spec.waitFor, null, { timeout: waitTimeout, polling: 50 });
     t.waitFor = Date.now() - t0; t0 = Date.now();
     for (const js of j.spec.eval ?? []) await s.page.evaluate(js);
@@ -251,14 +255,14 @@ export function writeCaptureState(root: string, report: CaptureReport, cache: Ca
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** `shots capture --dry --probe`: opens each page (no screenshot), runs the shot's waitFor, and reports per size which
  *  selector candidates match. Returns the log lines; `missed` counts shots where no candidate of a list matched. */
-export async function probeSelectors(browser: any, jobs: WebJob[], o: { dims: Record<Device, FrameDims>; auth?: AuthPlan; timeoutMs?: number }): Promise<{ lines: string[]; missed: number }> {
+export async function probeSelectors(browser: any, jobs: WebJob[], o: { dims: CaptureDims; auth?: AuthPlan; timeoutMs?: number }): Promise<{ lines: string[]; missed: number }> {
   const lines: string[] = []; let missed = 0;
   for (const j of jobs) {
     const lists = [['waitSelector', candidates(j.spec.waitSelector, j.device)], ...(Array.isArray(j.spec.click) && j.spec.click.some(c => typeof c !== 'string') ? j.spec.click : j.spec.click === undefined ? [] : [j.spec.click])
       .map((c, i) => [`click[${i}]`, candidates(c as any, j.device)] as const)].filter(([, l]) => l.length) as [string, string[]][];
     if (!lists.length) continue;
-    const d = o.dims[j.device];
-    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: 1, hasTouch: true, isMobile: true, serviceWorkers: 'block', locale: j.lang, ...(o.auth?.contextOptions ?? {}) });
+    const d = dimsOf(o.dims, j.device);
+    const c = await browser.newContext({ viewport: { width: d.w, height: d.h }, deviceScaleFactor: 1, hasTouch: j.device !== 'landscape', isMobile: j.device !== 'landscape', serviceWorkers: 'block', locale: j.lang, ...(o.auth?.contextOptions ?? {}) });
     try {
       if (o.auth) await o.auth.prepare(c);
       const page = await c.newPage();
diff --git a/cli/shots/capture.ts b/cli/shots/capture.ts
index c5b6d24..b0cedc4 100644
--- a/cli/shots/capture.ts
+++ b/cli/shots/capture.ts
@@ -1,9 +1,15 @@
 // Raw frames from a running build of your app or game, from any engine.
-//   storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet] [--source web|ios-sim|android-emu|folder]
+//   storebound shots capture [--lang en,tr] [--only hero,shop] [--device phone|tablet|landscape] [--source web|ios-sim|android-emu|folder]
 //                            [--dry [--probe]] [--keep-booted] [--concurrency N] [--only-missing | --force]
 // Frames go to <shots.frames>/<lang>/<device>/<name>.png: the screen BELOW the status bar (the template draws one).
+// Devices: phone, tablet and landscape (<lang>/landscape/<name>.png, web source only: Mac App Store and Chromebook
+// screenshots; a desktop window, no status bar crop). The default device list adds landscape when the project renders a
+// landscape size (apple.mac, play.chromebook, shots.landscape.playTablets); then shots with no device (and 'both') are
+// captured for landscape too, since render needs a landscape frame per scene. A shot says device: 'landscape' to be
+// landscape only, 'phone' / 'tablet' to stay out of it. ios-sim / android-emu skip landscape with a warning.
 // shots.capture.source (default web):
-//   web          headless Chromium (playwright), mobile viewport + touch at phone / tablet size. Each shot:
+//   web          headless Chromium (playwright), mobile viewport + touch at phone / tablet size, or a desktop viewport (no touch)
+//                at shots.landscape.size (default 1440 x 900 @2x) for landscape. Each shot:
 //                { path, waitFor?: JS expression that turns true, eval?: [JS], delayMs?, device? }; URL = baseUrl + path +
 //                query, "{lang}" replaced. Parallel contexts, per-language page reuse, the input-hash cache and the
 //                per-frame timing (goto / waitFor / eval / delay / screenshot): capture-web.ts. Signed-in apps:
@@ -36,15 +42,16 @@ import { done, log, step, warn } from '../lib/log';
 import { closeBrowser, launch } from './browser';
 import { checkFrameFolder } from './check';
 import { adbAppLocaleArgs, adbDemoExitArgs, adbDemoModeArgs, adbForceStopArgs, adbInstallArgs, adbScreencapArgs, adbStartArgs, adbStateArgs, adbTarget,
-  cropArgs, cropTopFor, fill, pickSimulator, shotsFor, simBootArgs, simBootStatusArgs, simInstallArgs, simLaunchArgs, simOpenUrlArgs,
+  cropArgs, cropTopFor, fill, CAPTURE_DEVICES, type CaptureDevice, pickSimulator, shotsFor, simBootArgs, simBootStatusArgs, simInstallArgs, simLaunchArgs, simOpenUrlArgs,
   simScreenshotArgs, simShutdownArgs, simStatusBarArgs, simStatusBarClearArgs, simTarget, SOURCES, type Source, TOOL_HINTS, validateCapture } from './devices';
-import { type CopyFile, copyText, type FrameDims, frameDims } from './lib';
+import { type CopyFile, copyText, type FrameDims, frameDims, landscapeDims, rendersLandscape } from './lib';
 import { captureWeb, defaultConcurrency, probeSelectors, hashPaths, hashServed, planWeb, readCache, selectJobs, summaryLines, writeCaptureState } from './capture-web';
 import { imageInfo } from './spec';
 import { authPlan, safeUrl } from './auth';
 import * as rt from '../lib/rt';
 
-type Device = 'phone' | 'tablet';
+type Device = CaptureDevice;
+type PhoneTablet = 'phone' | 'tablet';
 
 export function sh(cmd: string, args: string[], o: { allowFail?: boolean; timeout?: number } = {}): { out: Buffer; err: string; code: number } {
   const r = spawnSync(cmd, args, { timeout: o.timeout ?? 120_000, maxBuffer: 256 * 1024 * 1024 });
@@ -75,7 +82,7 @@ export function localeOf(config: ShipConfig, lang: string, source: Source): stri
 }
 
 /** Crop the status bar off a full-screen capture and store it as a 24-bit RGB frame. */
-function storeFrame(tmp: string, out: string, cropTop: ShotsCapture['cropTop'], device: Device, dims: FrameDims): void {
+function storeFrame(tmp: string, out: string, cropTop: ShotsCapture['cropTop'], device: PhoneTablet, dims: FrameDims): void {
   const { w, h } = imageInfo(readFileSync(tmp));
   if (!h) throw new Error('screenshot is not a PNG');
   const top = cropTopFor(cropTop, device, h, dims);
@@ -98,13 +105,20 @@ export async function run(ctx: Ctx): Promise<void> {
   if (problems.length) throw new Error(`shots.capture:\n  ${problems.join('\n  ')}`);
   const langs = a.list('lang').length ? a.list('lang') : config.languages.map(l => l.id);
   const only = a.list('only');
-  const devices: Device[] = a.get('device') ? [a.get('device') as Device] : ['phone', 'tablet'];
-  if (devices.some(d => d !== 'phone' && d !== 'tablet')) throw new Error('--device: phone | tablet');
+  if (a.get('device') && !CAPTURE_DEVICES.includes(a.get('device') as Device)) throw new Error(`--device: ${CAPTURE_DEVICES.join(' | ')}`);
+  const landscapeOn = rendersLandscape(config);
+  let devices: Device[] = a.get('device') ? [a.get('device') as Device] : ['phone', 'tablet', ...(landscapeOn ? ['landscape' as const] : [])];
+  const allLandscape = landscapeOn || a.get('device') === 'landscape'; // shots with no device / 'both' also make a landscape frame
+  if (source !== 'web' && source !== 'folder' && devices.includes('landscape')) {
+    warn('shots', `landscape frames (Mac, Chromebook) are not supported from ${source}: skipped; capture them from a web build (--source web) or put them in <shots.frames>/<lang>/landscape/ (--source folder)`);
+    devices = devices.filter(d => d !== 'landscape');
+  }
+  const mobile = devices.filter((d): d is PhoneTablet => d !== 'landscape');
   const framesDir = resolve(shots.frames);
-  const dims = frameDims(config);
+  const dims = { ...frameDims(config), landscape: landscapeDims(config) };
   const tmpDir = join(root, '.storebound', 'tmp');
   const target = (lang: string, device: Device, name: string) => { const d = join(framesDir, lang, device); if (!dry) mkdirSync(d, { recursive: true }); return join(d, `${name}.png`); };
-  const total = langs.length * devices.reduce((t, d) => t + shotsFor(cap, d, only).length, 0);
+  const total = langs.length * devices.reduce((t, d) => t + shotsFor(cap, d, only, allLandscape).length, 0);
   let failed = 0, n = 0, i = 0;
   const progress = (what: string) => log('shots', step(++i, total, what));
   /** Runs a simctl / adb step, or prints it with --dry. */
@@ -125,7 +139,7 @@ export async function run(ctx: Ctx): Promise<void> {
 
   if (source === 'web') {
     if (dry) {
-      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only)) {
+      for (const lang of langs) for (const device of devices) for (const [name, s] of shotsFor(cap, device, only, allLandscape)) {
         progress(`${lang}/${device}/${name}.png <- ${cap.baseUrl}${(s.path ?? '/').replaceAll('{lang}', lang)}`);
         const sel: [string, string[]][] = [['waitSelector', candidates(s.waitSelector, device)], ...(Array.isArray(s.click) && s.click.some(c => typeof c !== 'string') ? s.click : s.click === undefined ? [] : [s.click]).map((c, k) => [`click[${k}]`, candidates(c as ShotSelector, device)] as [string, string[]])];
         for (const [what, list] of sel) if (list.length) log('shots', `  ${what} on ${device} ${dims[device].w}x${dims[device].h}: ${list.join(' | ')}`);
@@ -133,7 +147,7 @@ export async function run(ctx: Ctx): Promise<void> {
       if (a.has('probe')) { // open the pages and test every candidate on each size (needs the app running at baseUrl)
         need(cap.baseUrl, 'shots.capture.baseUrl');
         const auth = cap.auth ? authPlan(cap.auth, { root, baseUrl: cap.baseUrl! }) : undefined;
-        const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build: '', fonts: '' });
+        const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build: '', fonts: '', allLandscape });
         const browser = await launch(root, { headless: true, args: ['--mute-audio'] });
         let r;
         try { r = await probeSelectors(browser, jobs, { dims, ...(auth ? { auth } : {}) }); } finally { await closeBrowser(browser); }
@@ -152,7 +166,7 @@ export async function run(ctx: Ctx): Promise<void> {
     let copy: CopyFile = {};
     try { copy = JSON.parse(readFileSync(resolve(shots.copy), 'utf8')) as CopyFile; } catch { /* no copy yet */ }
     const fontsCss = join(root, '.storebound', 'fonts', 'fonts.css');
-    const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build, copyText: l => copyText(l, copy[l]),
+    const jobs = planWeb(cap, { langs, devices, only, dims, framesDir, build, allLandscape, copyText: l => copyText(l, copy[l]),
       fonts: existsSync(fontsCss) ? readFileSync(fontsCss, 'utf8') : '' });
     const cache = readCache(root);
     const { run: todo, skipped } = selectJobs(jobs, cache, a.has('force') ? 'force' : a.has('only-missing') ? 'only-missing' : 'changed');
@@ -174,7 +188,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const ios = need(cap.ios, 'shots.capture.ios');
     if (!dry) { requireTool('xcrun'); requireTool('ffmpeg'); }
     const list = dry && !rt.which('xcrun') ? '{"devices":{}}' : sh('xcrun', ['simctl', 'list', 'devices', '-j']).out.toString();
-    for (const device of devices) {
+    for (const device of mobile) {
       const want = simTarget(ios, device);
       const todo = shotsFor(cap, device, only);
       if (!todo.length) continue;
@@ -222,7 +236,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const and = need(cap.android, 'shots.capture.android');
     const adb = adbPath();
     if (!dry) { requireTool(adb, 'adb'); requireTool('ffmpeg'); }
-    for (const device of devices) {
+    for (const device of mobile) {
       const todo = shotsFor(cap, device, only);
       if (!todo.length) continue;
       const serial = adbTarget(and, device);
diff --git a/cli/shots/devices.ts b/cli/shots/devices.ts
index 1fa9f20..3691f22 100644
--- a/cli/shots/devices.ts
+++ b/cli/shots/devices.ts
@@ -43,7 +43,7 @@ export function validateCapture(c: ShotsCapture | undefined): string[] {
       if (s.click !== undefined) for (const [i, c] of (Array.isArray(s.click) && s.click.some(x => typeof x !== 'string') ? s.click : [s.click]).entries()) e.push(...validateSelector(`shots.capture.shots.${name}.click[${i}]`, c));
     } else if (s.waitSelector !== undefined || s.click !== undefined) e.push(`shots.capture.shots.${name}: waitSelector / click only apply to source web`);
     if (s.navigate && !['spa', 'reload'].includes(s.navigate)) e.push(`shots.capture.shots.${name}.navigate: spa | reload`);
-    if (s.device && !['phone', 'tablet', 'both'].includes(s.device)) e.push(`shots.capture.shots.${name}.device: phone | tablet | both`);
+    if (s.device && !['phone', 'tablet', 'both', 'landscape'].includes(s.device)) e.push(`shots.capture.shots.${name}.device: phone | tablet | both | landscape`);
     if (src === 'web' && s.path === undefined) e.push(`shots.capture.shots.${name}.path: URL path (source web)`);
     if ((src === 'web' || src === 'folder') && (s.args || s.extras)) e.push(`shots.capture.shots.${name}: args / extras only apply to ios-sim / android-emu`);
     for (const [k, v] of Object.entries(s.extras ?? {})) {
@@ -96,9 +96,20 @@ export function adbTarget(and: NonNullable<ShotsCapture['android']>, device: 'ph
   return device === 'tablet' ? and.serials?.tablet : and.serials?.phone ?? and.serial;
 }
 
-/** Which shots run on which device class. */
-export function shotsFor(c: ShotsCapture, device: 'phone' | 'tablet', only: string[] = []): [string, ShotSpec][] {
-  return Object.entries(c.shots ?? {}).filter(([name, s]) => (!only.length || only.includes(name)) && ((s.device ?? 'phone') === 'both' || (s.device ?? 'phone') === device));
+/** Capture device classes: phone / tablet frames (status bar cut) and desktop landscape frames (Mac, Chromebook). */
+export type CaptureDevice = 'phone' | 'tablet' | 'landscape';
+export const CAPTURE_DEVICES: readonly CaptureDevice[] = ['phone', 'tablet', 'landscape'];
+
+/** Which shots run on which device class. phone / tablet: device unset = phone, 'both' = phone + tablet (unchanged).
+ *  landscape: the shots with device 'landscape'; with `allLandscape` (the project renders a landscape size, or
+ *  --device landscape was asked for) also every shot with no device or 'both', because render needs a landscape frame
+ *  for each scene. A shot that says 'phone' or 'tablet' explicitly stays off the landscape list. */
+export function shotsFor(c: ShotsCapture, device: CaptureDevice, only: string[] = [], allLandscape = false): [string, ShotSpec][] {
+  return Object.entries(c.shots ?? {}).filter(([name, s]) => {
+    if (only.length && !only.includes(name)) return false;
+    if (device === 'landscape') return s.device === 'landscape' || (allLandscape && (s.device === undefined || s.device === 'both'));
+    return s.device !== 'landscape' && ((s.device ?? 'phone') === 'both' || (s.device ?? 'phone') === device);
+  });
 }
 
 // ---- iOS Simulator (xcrun simctl) ----
diff --git a/cli/shots/lib.ts b/cli/shots/lib.ts
index f20964c..3087424 100644
--- a/cli/shots/lib.ts
+++ b/cli/shots/lib.ts
@@ -175,6 +175,15 @@ export function frameDims(config: Pick<ShipConfig, 'apple' | 'shots'>): Record<'
   return { phone: { ...DEFAULT_PHONE, ...config.shots?.phone }, tablet: { ...tablet, ...config.shots?.tablet } };
 }
 
+/** Landscape capture viewport (shots.landscape.size): a desktop window, 1440 x 900 CSS px @2x = 2880 x 1800 (the Mac size). No status bar. */
+export const DEFAULT_LANDSCAPE: FrameDims = { w: 1440, h: 900, dpr: 2, bar: 0 };
+
+/** Viewport `shots capture` uses for landscape frames (<lang>/landscape/<name>.png): shots.landscape.size over the default. */
+export function landscapeDims(config: Pick<ShipConfig, 'shots'>): FrameDims {
+  const s = config.shots?.landscape?.size;
+  return { ...DEFAULT_LANDSCAPE, ...(s ? { w: s.w, h: s.h, ...(s.dpr ? { dpr: s.dpr } : {}) } : {}), bar: 0 };
+}
+
 /** Play tablet size keys (7" and 10"): optional on Play, switched by play.tablets. */
 export const PLAY_TABLET_SIZES: readonly string[] = ['tab7', 'tab10'];
 
@@ -193,6 +202,12 @@ export function defaultSizes(config: Pick<ShipConfig, 'apple' | 'play'>, tablets
     : k.startsWith('ios') ? apple : PLAY_TABLET_SIZES.includes(k) ? play && tabs : play));
 }
 
+/** True when `shots render` draws a landscape size for this project (apple.mac, play.chromebook, shots.landscape.playTablets):
+ *  it then needs <lang>/landscape/<name>.png frames, which `shots capture` makes with the landscape device. Same rules as render. */
+export function rendersLandscape(config: Pick<ShipConfig, 'apple' | 'play' | 'shots'>): boolean {
+  return defaultSizes(config).some(s => renderDims(s, config.shots).landscape);
+}
+
 /** Scenes of a variant (its order / subset, palette overrides), or the base scenes. */
 export function variantScenes(shots: ShotsConfig, variant?: string): ShotScene[] {
   if (!variant) return shots.scenes;
diff --git a/cli/shots/selectors.ts b/cli/shots/selectors.ts
index 1efb778..7c84b60 100644
--- a/cli/shots/selectors.ts
+++ b/cli/shots/selectors.ts
@@ -4,7 +4,7 @@
 // a list on the phone and a grid at 1180x820 needs different selectors; the miss message names the selector and the size.
 import type { ShotSelector } from '../lib/config';
 
-type Device = 'phone' | 'tablet';
+import type { CaptureDevice as Device } from './devices';
 
 /** Candidates for one device: its own list first, then the shared ones, without repeats. */
 export function candidates(sel: ShotSelector | undefined, device: Device): string[] {
@@ -19,12 +19,12 @@ export function validateSelector(where: string, sel: unknown): string[] {
   const okList = (v: unknown): boolean => ok(v) || (Array.isArray(v) && v.length > 0 && v.every(ok));
   if (okList(sel)) return [];
   if (sel && typeof sel === 'object' && !Array.isArray(sel)) {
-    const o = sel as Record<string, unknown>, bad = Object.keys(o).filter(k => !['phone', 'tablet', 'any'].includes(k));
-    if (bad.length) return [`${where}: unknown key ${bad.join(', ')} (phone | tablet | any)`];
-    if (!Object.keys(o).length) return [`${where}: at least one of phone | tablet | any`];
+    const o = sel as Record<string, unknown>, bad = Object.keys(o).filter(k => !['phone', 'tablet', 'landscape', 'any'].includes(k));
+    if (bad.length) return [`${where}: unknown key ${bad.join(', ')} (phone | tablet | landscape | any)`];
+    if (!Object.keys(o).length) return [`${where}: at least one of phone | tablet | landscape | any`];
     return Object.entries(o).filter(([, v]) => !okList(v)).map(([k]) => `${where}.${k}: a selector or a list of selectors`);
   }
-  return [`${where}: a selector, a list of selectors, or { phone, tablet, any }`];
+  return [`${where}: a selector, a list of selectors, or { phone, tablet, landscape, any }`];
 }
 
 /** Minimal Playwright surface used here, so tests can fake a page. */
diff --git a/skills/store-screenshots/SKILL.md b/skills/store-screenshots/SKILL.md
index c2bccb1..ad3d9f7 100644
--- a/skills/store-screenshots/SKILL.md
+++ b/skills/store-screenshots/SKILL.md
@@ -83,7 +83,12 @@ the enum has them). No Duo app preview sizes are published. Google Play has no f
 alpha) and requires the set, and `apple screenshots --platform macos` uploads it as `APP_DESKTOP` to the macOS
 version (versions are per platform, pitfall 79; the iOS run uploads the iOS sets only and says where the Mac set
 goes). `validate` prints an info note when the app has a macOS version but no Mac screenshots. Frames: landscape
-captures in `<frames>/<lang>/landscape/<name>.png`, `shots.landscape.size` CSS px (default 1440 x 900 @2x).
+captures in `<frames>/<lang>/landscape/<name>.png`, `shots.landscape.size` CSS px (default 1440 x 900 @2x). Make them with
+`storebound shots capture --device landscape` from a web build (a desktop viewport, no touch, no status bar crop); with
+`apple.mac`, `play.chromebook` or `shots.landscape.playTablets` the default `capture` run adds the landscape device and
+captures every shot with no `device` (and `both`) for it too, because render needs a landscape frame per scene; a shot
+with `device: 'landscape'` is landscape only, `'phone'` / `'tablet'` stays out. `ios-sim` / `android-emu` have no
+landscape device (skipped with a warning): use a web build or the folder source.
 
 **Landscape layout (Mac, Chromebook, Play tablets).** Copy in a column on one side (`shots.landscape.side`, default
 left), the scene's first frame on the other. `shots.landscape.frame`: `'window'` draws a Mac window (title bar with
@@ -119,6 +124,8 @@ the icon, feature graphic and phone screenshots and prints `tablet screenshots:
    `<shots.frames>/<lang>/<phone|tablet>/<shot>.png`, local, not committed.
    - `web` (default): `baseUrl`, `query` with `{lang}`, shots: `path` / `waitFor` / `eval` / `delayMs` / `device`.
      Phone 440 x 902 @3x and tablet 800 x 1240 @2x by default; the template draws the status bar above.
+     Landscape (Mac / Chromebook): `--device landscape` or `device: 'landscape'` per shot, a desktop viewport at
+     `shots.landscape.size` (default 1440 x 900 @2x), `waitSelector` / `click` take a `landscape` list too.
      Speed (many languages): frames run in parallel browser contexts (`--concurrency N`, `capture.concurrency`;
      default min(3, cores / 4) since game boots are GPU-heavy). `capture.session: 'per-language'` boots the app once
      per language and device and switches shots in that page (per shot `navigate: 'spa'` = pushState + popstate to its
diff --git a/tests/capture-landscape.test.ts b/tests/capture-landscape.test.ts
new file mode 100644
index 0000000..6768a76
--- /dev/null
+++ b/tests/capture-landscape.test.ts
@@ -0,0 +1,101 @@
+// `shots capture --device landscape`: desktop frames for Mac App Store / Chromebook screenshots from a web build.
+// Dry runs and pure planning only: no browser, no simulator.
+import { afterEach, describe, expect, test } from 'bun:test';
+import { rmSync } from 'node:fs';
+import type { ShipConfig } from '../cli/lib/config';
+import { planWeb } from '../cli/shots/capture-web';
+import { run as captureRun } from '../cli/shots/capture';
+import { shotsFor, validateCapture } from '../cli/shots/devices';
+import { frameDims, landscapeDims, rendersLandscape } from '../cli/shots/lib';
+import { BASE, capture, project, restore } from './helpers/store-mock';
+
+afterEach(restore);
+
+const cap = { source: 'web', baseUrl: 'http://127.0.0.1:5173', shots: {
+  hero: { path: '/?scene=hero' }, wide: { path: '/?scene=wide', device: 'landscape' }, pad: { path: '/pad', device: 'tablet' }, both: { path: '/both', device: 'both' }, ph: { path: '/ph', device: 'phone' },
+} } as const;
+const cfg = (over: Record<string, unknown> = {}, shots: Record<string, unknown> = {}): ShipConfig =>
+  ({ ...BASE, ...over, shots: { frames: 'frames', copy: 'copy.json', scenes: [], capture: cap, ...shots } }) as unknown as ShipConfig;
+const names = (c: Parameters<typeof shotsFor>[0], d: 'phone' | 'tablet' | 'landscape', all = false) => shotsFor(c, d, [], all).map(([n]) => n);
+
+describe('landscape device selection', () => {
+  test('phone / tablet unchanged; landscape only for explicit shots unless the project renders landscape', () => {
+    expect(names(cap, 'phone')).toEqual(['hero', 'both', 'ph']);
+    expect(names(cap, 'tablet')).toEqual(['pad', 'both']);
+    expect(names(cap, 'landscape')).toEqual(['wide']);
+    expect(names(cap, 'landscape', true)).toEqual(['hero', 'wide', 'both']); // not the explicit phone / tablet ones
+  });
+  test('validateCapture accepts landscape and names it in the error', () => {
+    expect(validateCapture({ ...cap, shots: { a: { path: '/', device: 'landscape' } } })).toEqual([]);
+    expect(validateCapture({ ...cap, shots: { a: { path: '/', device: 'desktop' as 'both' } } }).join()).toContain('phone | tablet | both | landscape');
+  });
+  test('rendersLandscape follows the render rules (mac, chromebook, playTablets)', () => {
+    expect(rendersLandscape(cfg())).toBe(false);
+    expect(rendersLandscape(cfg({ apple: { ...BASE.apple!, mac: true } }))).toBe(true);
+    expect(rendersLandscape(cfg({ apple: undefined, play: { ...BASE.play!, chromebook: true } }))).toBe(true);
+    expect(rendersLandscape(cfg({}, { landscape: { playTablets: true } }))).toBe(true);
+  });
+  test('landscapeDims: 1440 x 900 @2x default, shots.landscape.size overrides', () => {
+    expect(landscapeDims(cfg())).toEqual({ w: 1440, h: 900, dpr: 2, bar: 0 });
+    expect(landscapeDims(cfg({}, { landscape: { size: { w: 1280, h: 800 } } }))).toEqual({ w: 1280, h: 800, dpr: 2, bar: 0 });
+    expect(landscapeDims(cfg({}, { landscape: { size: { w: 1920, h: 1080, dpr: 1 } } }))).toEqual({ w: 1920, h: 1080, dpr: 1, bar: 0 });
+  });
+});
+
+describe('planWeb with landscape', () => {
+  test('jobs target <lang>/landscape/<name>.png and the hash tracks the landscape viewport', () => {
+    const c = cfg();
+    const base = { langs: ['en'], devices: ['landscape' as const], only: [], framesDir: '/f', build: 'b', allLandscape: true };
+    const a = planWeb(cap, { ...base, dims: { ...frameDims(c), landscape: landscapeDims(c) } });
+    expect(a.map(j => j.frame)).toEqual(['en/landscape/hero.png', 'en/landscape/wide.png', 'en/landscape/both.png']);
+    const b = planWeb(cap, { ...base, dims: { ...frameDims(c), landscape: { w: 1280, h: 800, dpr: 2, bar: 0 } } });
+    expect(b[0]!.hash).not.toBe(a[0]!.hash);
+  });
+});
+
+describe('capture --dry', () => {
+  const dry = async (config: ShipConfig, argv: string[]) => {
+    const p = project(config);
+    try { return await capture(() => captureRun(p.ctx(['--dry', ...argv], ['dry']))); } finally { rmSync(p.root, { recursive: true, force: true }); }
+  };
+  test('--device landscape lists landscape targets, no phone / tablet', async () => {
+    const r = await dry(cfg(), ['--device', 'landscape', '--lang', 'en']);
+    expect(r.out).toContain('en/landscape/wide.png <- http://127.0.0.1:5173/?scene=wide');
+    expect(r.out).toContain('en/landscape/hero.png'); // --device landscape captures every shot without a phone / tablet device
+    expect(r.out).not.toContain('en/phone/');
+    expect(r.out).not.toContain('en/tablet/');
+    expect(r.out).toContain('capture planned (dry run): 3 frames from web');
+  });
+  test('default devices add landscape only when the project renders a landscape size', async () => {
+    const plain = await dry(cfg(), ['--lang', 'en']);
+    expect(plain.out).not.toContain('en/landscape/hero.png');
+    expect(plain.out).toContain('en/phone/hero.png');
+    const mac = await dry(cfg({ apple: { ...BASE.apple!, mac: true } }), ['--lang', 'en']);
+    expect(mac.out).toContain('en/phone/hero.png');
+    expect(mac.out).toContain('en/tablet/pad.png');
+    for (const n of ['hero', 'wide', 'both']) expect(mac.out).toContain(`en/landscape/${n}.png`);
+    expect(mac.out).not.toContain('en/landscape/pad.png');
+    expect(mac.out).not.toContain('en/landscape/ph.png');
+  });
+  test('shot selectors accept a landscape key and print the landscape viewport', async () => {
+    const c = cfg({ apple: { ...BASE.apple!, mac: true } }, { capture: { ...cap, shots: { hero: { path: '/', waitSelector: { phone: '#m', landscape: '#desk' } } } } });
+    const r = await dry(c, ['--lang', 'en']);
+    expect(r.out).toContain('waitSelector on landscape 1440x900: #desk');
+    expect(r.out).toContain('waitSelector on phone 440x902: #m');
+  });
+  test('ios-sim / android-emu skip landscape with a warning', async () => {
+    const mac = { apple: { ...BASE.apple!, mac: true } };
+    const sim = await dry(cfg(mac, { capture: { source: 'ios-sim', ios: { bundleId: 'com.example.app', device: 'iPhone 17 Pro Max' }, shots: { hero: { path: '/', device: 'landscape' } } } }), ['--device', 'landscape', '--lang', 'en']);
+    expect(sim.err + sim.out).toContain('landscape frames (Mac, Chromebook) are not supported from ios-sim');
+    expect(sim.out).toContain('0 frames');
+    const and = await dry(cfg(mac, { capture: { source: 'android-emu', android: { package: 'com.example.app' }, shots: { hero: { path: '/' } } } }), ['--lang', 'en']);
+    expect(and.err + and.out).toContain('not supported from android-emu');
+    expect(and.out).not.toContain('landscape/hero');
+  });
+  test('an unknown device is refused', async () => {
+    const p = project(cfg());
+    try {
+      await expect(captureRun(p.ctx(['--dry', '--device', 'desktop'], ['dry']))).rejects.toThrow('--device: phone | tablet | landscape');
+    } finally { rmSync(p.root, { recursive: true, force: true }); }
+  });
+});
diff --git a/tests/wave1.test.ts b/tests/wave1.test.ts
index 894e88b..788ed78 100644
--- a/tests/wave1.test.ts
+++ b/tests/wave1.test.ts
@@ -290,6 +290,15 @@ describe('validate rules', () => {
     expect(f.find(x => x.code === 'availability')!.fix).toContain('Pricing and Availability');
     expect(f.findIndex(x => x.level === 'ok')).toBeGreaterThan(f.findLastIndex(x => x.level === 'blocker'));
   });
+  test('apple: products removed from sale are not blockers, unless the config still sells them', () => {
+    const s = appleOk();
+    s.iaps = [...s.iaps, { productId: 'old1', state: 'DEVELOPER_REMOVED_FROM_SALE', reviewScreenshot: false }, { productId: 'old2', state: 'REMOVED_FROM_SALE', reviewScreenshot: false }];
+    expect(appleRules(s).filter(f => f.level !== 'ok')).toEqual([]);
+    expect(appleRules(s).find(f => f.code === 'iap')!.msg).toBe('1 in-app purchases ready (2 removed from sale, not checked)');
+    s.expectedProducts = ['p1', 'old1'];
+    const f = appleRules(s).find(x => x.code === 'iap')!;
+    expect([f.level, f.msg]).toEqual(['warn', 'old1: DEVELOPER_REMOVED_FROM_SALE, but the config still sells it']);
+  });
   test('apple: non-exempt needs an approved declaration', () => {
     const s = appleOk();
     s.build = { ...s.build!, usesNonExemptEncryption: true, declarationState: 'IN_REVIEW' };

From 53d57544bf29d70dc2f2ccecf02a05697c4bbaa2 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:17:34 +0700
Subject: [PATCH 218/255] storebound 0.8.65: version in package.json and every
 copy, CHANGELOG 0.8.65 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 2c2ec96..9376b20 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.64",
+      "version": "0.8.65",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 7adbb70..5450ba0 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index c3532d1..9286507 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e2f056b..fe2219b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.65 · 2026-11-03
+
 - `validate`: in-app purchases removed from sale (DEVELOPER_REMOVED_FROM_SALE, REMOVED_FROM_SALE) are no blockers; a warning only when the config still sells one.
 - `shots capture --device landscape`: Mac App Store / Chromebook frames from a web build (desktop viewport at `shots.landscape.size`, default 1440x900 @2x) into `<lang>/landscape/`; on by default when the project renders a landscape size. The simulator and emulator sources skip it with a warning.
 - `shots render` / `capture`: "playwright not found" now lists each place looked at and why it failed (an import error was reported as not found).
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index fe8ff48..de640b0 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 5bbd8d6..7b457f8 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.64"
+version = "0.8.65"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 92af0b2..98aac6b 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.64"
+version = "0.8.65"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 33ecd9c..1e9d510 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index ec54850..86875f3 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index efb43c3..e9cabea 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.64",
+  "version": "0.8.65",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 1e47c2ee60ae66f1e5b64266e8c6385e2a76a022 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:30:59 +0700
Subject: [PATCH 219/255] apple.macos listing / review notes per platform +
 iOS-only claim warnings; apple upload of a .pkg: bounded pkgutil, macOS
 processing wait, heartbeats; release 409 pattern

---
 CHANGELOG.md                           |   4 +
 cli/apple/listing.ts                   |  12 +--
 cli/apple/release.ts                   |   2 +-
 cli/apple/review-details.ts            |  16 ++--
 cli/apple/testflight.ts                |   8 +-
 cli/apple/upload.ts                    |  45 ++++++----
 cli/check.ts                           |   8 +-
 cli/commands.ts                        |   2 +-
 cli/data/flags.json                    |   5 +-
 cli/lib/config.ts                      |  34 ++++++++
 cli/lib/listing-mentions.ts            |   3 +-
 cli/lib/mas.ts                         |  56 ++++++++----
 cli/lib/review-details.ts              |  13 +--
 cli/lib/validate-rules.ts              |  35 +++++++-
 cli/validate.ts                        |   4 +-
 skills/appstore-first-release/SKILL.md |   7 +-
 tests/macos-overrides.test.ts          | 112 ++++++++++++++++++++++++
 tests/upload-pkg-hang.test.ts          | 114 +++++++++++++++++++++++++
 18 files changed, 417 insertions(+), 63 deletions(-)
 create mode 100644 tests/macos-overrides.test.ts
 create mode 100644 tests/upload-pkg-hang.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fe2219b..b444832 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 
 ## Unreleased
 
+- `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
+- `apple upload <pkg>`: reading the package is bounded (pkgutil signature check 90 s, expand 5 min, then the `apple build` .json) and logged; the processing wait finds macOS builds (it looked only at iOS and sat silently until --timeout); every slow read prints a heartbeat; an SSH / non-GUI session is warned about up front.
+- `apple release`: a 409 on a release type change is recognized again (a stray control character had broken the pattern).
+
 ## 0.8.65 · 2026-11-03
 
 - `validate`: in-app purchases removed from sale (DEVELOPER_REMOVED_FROM_SALE, REMOVED_FROM_SALE) are no blockers; a warning only when the config still sells one.
diff --git a/cli/apple/listing.ts b/cli/apple/listing.ts
index 9649aa9..8ccb325 100644
--- a/cli/apple/listing.ts
+++ b/cli/apple/listing.ts
@@ -20,7 +20,7 @@ import { compactDiff } from '../lib/diff';
 import { mergeAppleListing, overLimits } from '../lib/listing-pull';
 import { counts, draftReason, draftSections, type ItemPlan, itemLines, planItem, planLocales, planVersion, short, type Skipped, type VersionPlan } from '../lib/listing-plan';
 import { createOnce, findOrCreate, getById } from '../lib/upsert';
-import { appleName } from '../lib/config';
+import { appleName, listingPathFor } from '../lib/config';
 import { wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
@@ -29,10 +29,10 @@ import { ascClient, EDITABLE, type J, noAppInfo } from './asc';
 import { stdinIsTTY } from '../lib/tty';
 import { allVersions, type AscPlatform, parsePlatform, pickPlatform, platformLabel, versionsPath } from './platform';
 
-export function readAppleCopy(ctx: Ctx) {
+export function readAppleCopy(ctx: Ctx, platform?: string) {
   const { config, resolve } = ctx.loaded;
   const only = ctx.args.list('only');
-  const all = parseAppStoreListing(readFileSync(resolve(config.apple?.listing ?? 'store/appstore.md'), 'utf8'));
+  const all = parseAppStoreListing(readFileSync(resolve(listingPathFor(config, platform)), 'utf8'));
   return Object.fromEntries(Object.entries(all).filter(([l]) => !only.length || only.includes(l)));
 }
 
@@ -63,7 +63,7 @@ async function pull(ctx: Ctx): Promise<void> {
     const at = l.attributes;
     remote[at.locale] = { ...remote[at.locale], description: at.description ?? undefined, keywords: at.keywords ?? undefined, promotionalText: at.promotionalText ?? undefined, whatsNew: at.whatsNew ?? undefined };
   }
-  const file = resolve(config.apple?.listing ?? 'store/appstore.md');
+  const file = resolve(listingPathFor(config, platform));
   const before = existsSync(file) ? readFileSync(file, 'utf8') : '# App Store listing copy\n\nPulled from App Store Connect by `storebound apple listing pull`.\n';
   const r = mergeAppleListing(before, remote, appleName(config));
   const over = overLimits(r.changes, 'apple');
@@ -104,8 +104,8 @@ type Asc = Awaited<ReturnType<typeof ascClient>>;
 async function planListing(ctx: Ctx, c: Asc, appId: string, version: string, platform: AscPlatform): Promise<AppleListingPlan> {
   const { config, resolve } = ctx.loaded;
   const app = config.app;
-  const listing = readAppleCopy(ctx);
-  const md = readFileSync(resolve(config.apple?.listing ?? 'store/appstore.md'), 'utf8');
+  const listing = readAppleCopy(ctx, platform);
+  const md = readFileSync(resolve(listingPathFor(config, platform)), 'utf8');
   const drafts = draftSections(md, 'apple');
   const include = ctx.args.has('include-drafts');
   const skipped: Skipped[] = [];
diff --git a/cli/apple/release.ts b/cli/apple/release.ts
index aad0498..5913c62 100644
--- a/cli/apple/release.ts
+++ b/cli/apple/release.ts
@@ -150,7 +150,7 @@ async function setReleaseType(ctx: Ctx, c: Awaited<ReturnType<typeof ascClient>>
   try {
     await c.asc('PATCH', `/v1/appStoreVersions/${v.id}`, { data: { type: 'appStoreVersions', id: v.id, attributes: Object.fromEntries(changes.map(ch => [ch.field, ch.to])) } });
   } catch (e) {
-    if (/-> 409/.test((e as Error).message)) throw new Error(`${tag}: App Store Connect refuses the release type change now (409): ${(e as Error).message}
+    if (/-> 409\b/.test((e as Error).message)) throw new Error(`${tag}: App Store Connect refuses the release type change now (409): ${(e as Error).message}
 It is editable until App Review approves the version; after that use apple release --manual-release.`);
     throw e;
   }
diff --git a/cli/apple/review-details.ts b/cli/apple/review-details.ts
index 123cc50..8a0a566 100644
--- a/cli/apple/review-details.ts
+++ b/cli/apple/review-details.ts
@@ -1,10 +1,11 @@
 // App Review information on the editable version: contact, demo account, notes. Idempotent.
-//   storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]
+//   storebound apple review-details [--platform ios|macos|tvos|visionos] [--contact-from <Apple ID of another app>] [--dry]
 // The contact (name, phone, email) is personal data, so it is never in the config: it comes from
 // .storebound/credentials.json "reviewContact", or is copied from another app of the same team with --contact-from.
 // Demo account (reviewAccess.signInRequired: true): "reviewDemoAccount" in .storebound/credentials.json or
 // REVIEW_DEMO_USER / REVIEW_DEMO_PASSWORD; masked in every log line. Notes: apple.info.reviewNotes plus
-// reviewAccess.instructions and accounts.inApp (lib/review-details.ts).
+// reviewAccess.instructions and accounts.inApp (lib/review-details.ts). --platform macos: apple.macos.reviewNotes
+// replaces apple.info.reviewNotes when set (a Mac app may have no Game Center, IAP or ads).
 import { refuseTemplate } from '../lib/template-answers';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
@@ -12,7 +13,8 @@ import { findReviewContact, maskSecret, maskUser, noContactMessage, reviewDemoAc
 import { reviewDetailPlan } from '../lib/review-details';
 import { done, log } from '../lib/log';
 import { createOnce } from '../lib/upsert';
-import { ascClient } from './asc';
+import { ascClient, EDITABLE, type J } from './asc';
+import { allVersions, parsePlatform, pickPlatform, platformLabel } from './platform';
 
 type Attrs = Record<string, unknown>;
 const shown = (k: string, v: unknown): string => {
@@ -36,8 +38,10 @@ export async function run(ctx: Ctx): Promise<void> {
   const { config, root } = ctx.loaded;
   refuseTemplate(config, ['reviewNotes', 'reviewAccess', 'accounts'], 'apple review-details (App Review notes, demo account requirement)');
   const c = await ascClient(root, need(config.apple?.bundleId, 'apple.bundleId'), config.apple?.appId);
-  const version = await c.editableVersion();
-  if (!version) throw new Error('no editable App Store version (apple listing --version x.y.z creates it)');
+  const appId = await c.app();
+  const platform = parsePlatform(ctx.args.get('platform')) ?? pickPlatform(await allVersions(c, appId), (x: J) => EDITABLE.has(x.attributes.appVersionState ?? x.attributes.appStoreState), undefined, 'an editable version');
+  const version = await c.editableVersion(platform);
+  if (!version) throw new Error(`no editable ${platformLabel(platform)} App Store version (apple listing --version x.y.z creates it)`);
 
   let contact: Record<string, string> | null = null;
   const from = ctx.args.get('contact-from');
@@ -57,7 +61,7 @@ export async function run(ctx: Ctx): Promise<void> {
   }
   if (!contact) throw new Error(noContactMessage(root, checked));
 
-  const { attributes, summary } = reviewDetailPlan(config, contact, reviewDemoAccount(root));
+  const { attributes, summary } = reviewDetailPlan(config, contact, reviewDemoAccount(root), platform);
   const read = async () => (await c.maybe(`/v1/appStoreVersions/${version.id}/appStoreReviewDetail`))?.data ?? null;
   const cur = await read();
   if (ctx.args.has('dry')) {
diff --git a/cli/apple/testflight.ts b/cli/apple/testflight.ts
index 24f35d4..35c7628 100644
--- a/cli/apple/testflight.ts
+++ b/cli/apple/testflight.ts
@@ -37,8 +37,8 @@ const TAG = 'testflight';
 const USAGE = 'usage: storebound apple testflight status | groups [sync] | testers | what-to-test --build N | info | distribute --build N --group <names> | wait --build N | expire --keep N | --older-than D';
 
 /** The state of build `number` (of `marketing` version) right now; found: false while App Store Connect does not list it. */
-async function seeBuild(c: Asc, appId: string, number: string, marketing?: string): Promise<BuildSeen & { version?: string }> {
-  const q = new URLSearchParams({ 'filter[app]': appId, 'filter[version]': number, 'filter[preReleaseVersion.platform]': 'IOS', include: 'preReleaseVersion,buildBetaDetail', limit: '50' });
+async function seeBuild(c: Asc, appId: string, number: string, marketing?: string, platform = 'IOS'): Promise<BuildSeen & { version?: string }> {
+  const q = new URLSearchParams({ 'filter[app]': appId, 'filter[version]': number, 'filter[preReleaseVersion.platform]': platform, include: 'preReleaseVersion,buildBetaDetail', limit: '50' });
   if (marketing) q.set('filter[preReleaseVersion.version]', marketing);
   const resp = await c.asc('GET', `/v1/builds?${q}`);
   const hits = buildsWithVersion(resp).filter(b => b.attributes.version === number && (!marketing || b.marketing === marketing));
@@ -54,13 +54,13 @@ export interface BuildWait { outcome: WaitOutcome; timedOut: boolean; seen: Buil
  * Polls build `number` until processing ends (VALID, or FAILED / INVALID) or `timeoutMs` passes; logs each state change.
  * `once` reads the state a single time. Shared by `testflight wait` and `apple upload` (which waits after the upload).
  */
-export async function waitForBuild(c: Asc, appId: string, number: string, o: { marketing?: string; timeoutMs: number; once?: boolean; tag?: string } & HeartbeatOptions): Promise<BuildWait> {
+export async function waitForBuild(c: Asc, appId: string, number: string, o: { marketing?: string; platform?: 'IOS' | 'MAC_OS'; timeoutMs: number; once?: boolean; tag?: string } & HeartbeatOptions): Promise<BuildWait> {
   const started = Date.now();
   let delay: number | null = null, last = '';
   // polls are up to 2 minutes apart: a heartbeat in between says the wait is alive
   const beat = o.once ? null : heartbeat(ms => log(o.tag ?? TAG, `still waiting for build ${number}: ${last || 'first check'}, ${elapsed(ms)} of ${elapsed(o.timeoutMs)}`), o);
   try { for (;;) {
-    const seen = await seeBuild(c, appId, number, o.marketing);
+    const seen = await seeBuild(c, appId, number, o.marketing, o.platform);
     const outcome = waitOutcome(seen);
     const line = outcome === 'missing' ? 'not listed yet (App Store Connect lists it once processing starts)' : `${seen.processingState}${seen.internal ? `, internal ${seen.internal}` : ''}`;
     if (line !== last) { log(o.tag ?? TAG, `build ${number}${seen.version ? ` (${seen.version})` : ''}: ${line} [${Math.round((Date.now() - started) / 60_000)} min]`); last = line; }
diff --git a/cli/apple/upload.ts b/cli/apple/upload.ts
index a31574f..688bc56 100644
--- a/cli/apple/upload.ts
+++ b/cli/apple/upload.ts
@@ -28,7 +28,7 @@ import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { done, log, printJson, warn } from '../lib/log';
 import { compareBuild, nextBuildNumber, nextPollDelay, parseDuration, WAIT_EXIT } from '../lib/release';
-import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, readLastBuild, showCmd, UPLOAD_DONE, uploadProblems, uploadSearchDirs } from '../lib/xcode';
+import { altoolArgs, buildUploadReqs, exportedIpas, ipaInfo, ipaVersionProblem, readLastBuild, remoteBuildSession, showCmd, UPLOAD_DONE, uploadProblems, uploadSearchDirs } from '../lib/xcode';
 import { bundleTrackingIssues, ipaManifests } from '../lib/privacy-files';
 import { BUILD_WAIT_EXIT } from '../lib/build-ops';
 import { type Asc, ascClient, type J } from './asc';
@@ -51,6 +51,9 @@ function stop(legacy: number, message: string): never {
 
 const TAG = 'upload';
 
+/** Test hook: heartbeat options (short interval, manual ticker) for the reads, the upload and the processing wait. */
+export const hooks: { heartbeat?: HeartbeatOptions } = {};
+
 function md5File(path: string): string {
   const h = rt.hasher('md5');
   const fd = openSync(path, 'r');
@@ -257,9 +260,14 @@ export async function run(ctx: Ctx): Promise<void> {
   } else ipa = resolve(ipa);
   shipPhase('verify', `checking ${relative(root, ipa)}`);
   const isPkg = ipa.endsWith('.pkg');
+  log(TAG, `${relative(root, ipa)}: reading ${isPkg ? 'the package (pkgutil)' : 'the IPA'} (${mb(statSync(ipa).size)})`);
+  // over SSH (no GUI session) anything that touches the login keychain can wait for a prompt nobody sees: say so up front
+  const remote = process.platform === 'darwin' ? remoteBuildSession(process.env, rt.spawnSync(['launchctl', 'managername'], { timeout: 5000 }).stdout.toString().trim()) : null;
+  if (remote) warn(TAG, `${remote}: the upload itself uses the App Store Connect API key (no keychain, no prompt), but pkgutil / altool can stall on a keychain or GUI prompt nobody sees here; every step has a timeout. If it stalls, run it in the Mac's logged-in GUI session (see storebound apple build --help, --allow-ssh)`);
   const platform: 'IOS' | 'MAC_OS' = isPkg ? 'MAC_OS' : 'IOS';
   if (macos && !isPkg) throw new Error('--platform macos uploads a signed .pkg (storebound apple build --platform macos --tauri <src-tauri>), not an .ipa');
-  const info: ReturnType<typeof ipaInfo> = isPkg ? pkgInfo(ipa, bundleId) : ipaInfo(ipa);
+  const info: ReturnType<typeof ipaInfo> = isPkg ? pkgInfo(ipa, bundleId, { say: m => log(TAG, m) }) : ipaInfo(ipa);
+  log(TAG, `${relative(root, ipa)}: ${info.bundleId} ${info.version} (${info.build})`);
   shipReport({ version: info.version, build: info.build, url: consoleUrl('asc.testflight') });
   if (want && info.build !== want) throw new Error(`${relative(root, ipa)} is build ${info.build}, not ${want} (--build): did the last apple build fail?`);
   if (info.bundleId !== bundleId) throw new Error(`${relative(root, ipa)} is ${info.bundleId}, the config says ${bundleId}`);
@@ -277,18 +285,21 @@ export async function run(ctx: Ctx): Promise<void> {
   const wait = !a.has('no-wait');
   const timeout = parseDuration(a.str('timeout', '60m'));
 
+  log(TAG, `asking App Store Connect about ${bundleId}: the app, the editable version, the builds, earlier uploads of build ${info.build}`);
   const c = await ascClient(root, bundleId, config.apple?.appId);
-  const appId = await c.app();
-  // the IPA must belong to the version train being prepared (the editable App Store version): MARKETING_VERSION 1.0
-  // from a project that ignored the intended version otherwise lands in the wrong train
-  const editable = await c.editableVersion(platform).catch(() => null);
-  const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
-  if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
-  const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
+  // every read has its own timeout and retries; the heartbeat says the run is alive while one of them waits
+  const { appId, editable, builds, already } = await withHeartbeat(ms => log(TAG, `still reading App Store Connect, ${elapsed(ms)}`), async () => {
+    const appId = await c.app();
+    // the IPA must belong to the version train being prepared (the editable App Store version): MARKETING_VERSION 1.0
+    // from a project that ignored the intended version otherwise lands in the wrong train
+    const editable = await c.editableVersion(platform).catch(() => null);
+    const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version,processingState`);
+    // the same IPA uploaded by an earlier run: nothing to send again, only the wait
+    const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info, platform).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
+    return { appId, editable, builds, already };
+  }, hooks.heartbeat);
   const numbers = builds.map(b => String(b.attributes.version));
   const next = nextBuildNumber(numbers);
-  // the same IPA uploaded by an earlier run: nothing to send again, only the wait
-  const already = via === 'api' && !dry ? (await uploadsOf(c, appId, info, platform).catch(() => [])).find((u: J) => u.attributes?.state?.state === 'COMPLETE') : undefined;
   const onAsc = builds.find(b => String(b.attributes.version) === info.build);
   const decision = existingBuild({ ipa: relative(root, ipa), build: info.build, onAsc: !!onAsc, state: onAsc?.attributes?.processingState, uploadComplete: !!already, allowExisting: a.has('allow-existing'), next });
   // the ship-step contract: a build number App Store Connect has already is "nothing to do" (exit 7), never a second upload
@@ -300,14 +311,18 @@ export async function run(ctx: Ctx): Promise<void> {
     return;
   }
   if (decision instanceof Error) throw decision;
+  log(TAG, `build ${info.build} is not on App Store Connect (next free: ${next})`);
   if (decision === 'recheck') {
     log(TAG, `build ${info.version} (${info.build}) is on App Store Connect already${already ? ` (build upload ${already.id})` : ''}; --allow-existing: not sending it again`);
     if (!wait) { if (json) printJson({ ...{ ipa: relative(root, ipa), version: info.version, build: info.build }, uploaded: true, alreadyUploaded: true }); done(TAG, `build ${info.build} already uploaded`); return; }
-    const r = await waitForBuild(c, appId, info.build, { marketing: info.version, timeoutMs: timeout, tag: TAG });
+    const r = await waitForBuild(c, appId, info.build, { marketing: info.version, platform, timeoutMs: timeout, tag: TAG, ...hooks.heartbeat });
     if (json) printJson({ ipa: relative(root, ipa), version: info.version, build: info.build, uploaded: true, alreadyUploaded: true, processingState: r.seen.processingState ?? null });
     if (r.outcome === 'valid') { done(TAG, waitMessage(info.build, r)); return; }
     stop(r.outcome === 'failed' ? BUILD_WAIT_EXIT.failed : BUILD_WAIT_EXIT.timeout, waitMessage(info.build, r));
   }
+  // (a build number App Store Connect has already ends above, before this: the clearer message)
+  const trainWhy = ipaVersionProblem(info.version, editable?.attributes?.versionString as string | undefined, 'the editable App Store version');
+  if (trainWhy) { if (a.has('allow-version-mismatch')) warn(TAG, trainWhy); else throw new Error(`${relative(root, ipa)}: not uploaded, ${trainWhy}`); }
   if (numbers.length && compareBuild(info.build, next) < 0) warn(TAG, `build ${info.build} is lower than the highest uploaded one (next free: ${next}); Apple accepts it only if this version train has no higher build`);
   const reqs = buildUploadReqs(appId, info, basename(ipa), size, platform);
   const plan = via === 'api'
@@ -327,14 +342,14 @@ export async function run(ctx: Ctx): Promise<void> {
   shipPhase('upload', `uploading ${mb(size)} via ${via}`, 0);
   log(TAG, `${relative(root, ipa)}: ${info.bundleId} ${info.version} (${info.build}), ${mb(size)}, via ${via}, timeout ${a.str('timeout', '60m')}`);
   if (via === 'api') {
-    try { await apiUpload(c, appId, ipa, info, deadline, {}, platform); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
+    try { await apiUpload(c, appId, ipa, info, deadline, hooks.heartbeat ?? {}, platform); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   } else {
-    try { await altoolUpload(root, ipa, deadline); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
+    try { await altoolUpload(root, ipa, deadline, hooks.heartbeat); } catch (e) { if ((e as { exit?: number }).exit) { warn(TAG, (e as Error).message); stop((e as { exit: number }).exit, (e as Error).message); } throw e; }
   }
   if (!wait) { if (json) printJson({ ...summary, uploaded: true }); done(TAG, `build ${info.build} uploaded; storebound apple status shows when it is VALID`); return; }
   // the same poll as `storebound apple testflight wait`, within what is left of --timeout
   shipPhase('processing', `waiting for App Store Connect to process build ${info.build}`);
-  const r = await waitForBuild(c, appId, info.build, { marketing: info.version, timeoutMs: Math.max(0, deadline - Date.now()), tag: TAG });
+  const r = await waitForBuild(c, appId, info.build, { marketing: info.version, platform, timeoutMs: Math.max(0, deadline - Date.now()), tag: TAG, ...hooks.heartbeat });
   const state = r.timedOut || (r.outcome !== 'valid' && r.outcome !== 'failed') ? 'TIMEOUT' : r.seen.processingState ?? 'UNKNOWN';
   if (json) printJson({ ...summary, uploaded: true, processingState: state });
   if (r.outcome === 'valid') { done(TAG, `${waitMessage(info.build, r)}. Then: apple testflight distribute --build ${info.build} --group <name> --dry`); return; }
diff --git a/cli/check.ts b/cli/check.ts
index 692967e..5311034 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -16,7 +16,7 @@ import { type BundleManifest, bundleTrackingIssues, ipaManifests, projectSdkMani
 import { trackingIssue } from './lib/privacy-manifest';
 import { type AsoFinding, auditAso } from './lib/aso';
 import { draftLocales } from './lib/aso-intel';
-import { appleName, playCodes } from './lib/config';
+import { appleName, listingPathFor, playCodes } from './lib/config';
 import { fieldsMentions } from './lib/cross-store';
 import { appBuildFile, pickGradle, versionSourceIssues, versionSourceMessage } from './lib/gradle';
 import { playConsoleReminders } from './lib/console-plan';
@@ -107,6 +107,12 @@ export async function run(ctx: Ctx): Promise<void> {
   try { const tr = findFastlaneTraces(dirname(path)); if (tr.length) for (const t of tr) note(traceMessage(t)); } catch (e) { warn('check', `fastlane traces: ${(e as Error).message}`); }
   // other platforms named in a store's text: App Store 2.3.10 / Play Metadata, a blocker (pitfall 77)
   try { for (const h of listingFileMentions(ctx.loaded)) problems.push(`other platform in ${hitLine(h)}`); } catch (e) { warn('check', `platform mentions: ${(e as Error).message}`); }
+  if (config.apple?.macos?.listing) tryDo('appstore listing (macOS)', () => {
+    const copy = parseAppStoreListing(readFileSync(resolve(listingPathFor(config, 'macos')), 'utf8'));
+    const missing = config.languages.filter(l => l.apple && !copy[l.apple]).map(l => l.apple);
+    if (missing.length) note(`macOS appstore listing has no section for ${missing.join(', ')}`);
+    return `${Object.keys(copy).length} locales`;
+  });
   // listing translation drafts (storebound listing translate): fine to keep working on, not to push unreviewed
   for (const f of [config.apple ? resolve(config.apple.listing ?? 'store/appstore.md') : '', config.play ? resolve(config.play.listing ?? 'store/listing.md') : ''].filter(Boolean)) {
     if (!existsSync(f)) continue;
diff --git a/cli/commands.ts b/cli/commands.ts
index f644811..3cba163 100644
--- a/cli/commands.ts
+++ b/cli/commands.ts
@@ -85,7 +85,7 @@ export const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
   'apple listing': [() => import('./apple/listing'), 'version, build, name / subtitle / description / keywords per locale; pull [--write]: live texts back into the listing file (diff first); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple screenshots': [() => import('./apple/screenshots'), '6.9" + 6.5" (+ 13" iPad) screenshots per locale; --variant <id>; --repair-stuck [--dry] (replace only screenshots not COMPLETE, at their positions); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple appinfo': [() => import('./apple/appinfo'), 'categories, age rating, content rights, Free price, territories'],
-  'apple review-details': [() => import('./apple/review-details'), 'App Review contact, demo account (from .storebound/, masked) + notes'],
+  'apple review-details': [() => import('./apple/review-details'), 'App Review contact, demo account (from .storebound/, masked) + notes; --platform ios|macos|tvos|visionos (macos: apple.macos.reviewNotes when set)'],
   'apple status': [() => import('./apple/status'), 'versions, builds, IAPs, review submissions (--wait-review, --cancel-submission <id>); --platform ios|macos|tvos|visionos (default: the platform that has the version this needs; asks when several do)'],
   'apple creative-assets': [() => import('./apple/creative-assets'), 'Header and Search Results: product page header (21:9) and search results asset (3:2) per locale, or one universal 5244x2950 PNG; uploads to the Asset Library and places it once Apple approved it, reporting waiting ones per locale (MD5 upsert, safe to re-run); --add-for-review, --verify (read-only), --dry'],
   'apple previews': [() => import('./apple/previews'), 'app preview videos per locale (MD5-idempotent, poster frame time code); --dry'],
diff --git a/cli/data/flags.json b/cli/data/flags.json
index d8952e6..44ebcb1 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -264,7 +264,8 @@
    "with-version"
   ],
   "apple review-details": [
-   "contact-from"
+   "contact-from",
+   "platform"
   ],
   "apple screenshots": [
    "include-drafts",
@@ -1580,7 +1581,7 @@
    "storebound apple resubmit --build <n> [--version 1.0.0] [--platform ios|macos|tvos|visionos] [--resolve-iaps] [--first-release] [--dry] [--yes] [--json]"
   ],
   "apple review-details": [
-   "storebound apple review-details [--contact-from <Apple ID of another app>] [--dry]"
+   "storebound apple review-details [--platform ios|macos|tvos|visionos] [--contact-from <Apple ID of another app>] [--dry]"
   ],
   "apple screenshots": [
    "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 5e48f4c..05b9fc0 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -707,6 +707,15 @@ export interface ShipConfig {
      *  2560 x 1600, 1440 x 900, 1280 x 800). Landscape layout from <frames>/<lang>/landscape/ (shots.landscape). Uploaded
      *  as APP_DESKTOP to the macOS version: `apple screenshots --platform macos`. */
     mac?: boolean;
+    /**
+     * macOS App Store overrides (not `mac`, which only switches Mac screenshots on). An app with an iOS and a macOS
+     * version often needs different version texts and review notes (the Mac app may have no Game Center, in-app
+     * purchases or ads). `listing`: an App Store listing file used instead of apple.listing for `apple listing
+     * --platform macos`; `reviewNotes`: used instead of apple.info.reviewNotes by `apple review-details --platform macos`.
+     * `gameCenter: true`: the Mac app has Game Center (silences the Game Center check of `validate --platform macos`).
+     * `noIap: true`: the Mac app sells nothing (validate then flags in-app purchase lines in the Mac texts).
+     */
+    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean };
     /** "Header and Search Results" creative assets (`storebound apple creative-assets`, iOS / iPadOS 27+). Files under
      *  <renders>/<lang>/creative/: header.{png,jpg,mov,m4v,mp4} (3840x1646, 21:9), search.{...} (3:2, 1920x1280 to
      *  3840x2560) or universal.png (5244x2950) for both. `header` / `search` false skip that slot; `universal` is a
@@ -1036,6 +1045,14 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
     e.push('play.developerAccount: the developer account name as Play Console shows it (1-100 characters)');
   if (cfg.play?.name !== undefined && !(typeof cfg.play.name === 'string' && cfg.play.name.trim() && [...cfg.play.name].length <= 30)) e.push('play.name: 1-30 characters (Play app name)');
   if (cfg.play?.free !== undefined && typeof cfg.play.free !== 'boolean') e.push('play.free: true (free) | false (paid)');
+  const mo = cfg.apple?.macos;
+  if (mo !== undefined) {
+    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true }');
+    else {
+      for (const k of ['listing', 'reviewNotes'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : ''}`);
+      for (const k of ['gameCenter', 'noIap'] as const) if (mo[k] !== undefined && typeof mo[k] !== 'boolean') e.push(`apple.macos.${k}: true | false`);
+    }
+  }
   const ad = cfg.apple?.adhoc;
   if (ad?.method !== undefined && ad.method !== 'release-testing' && ad.method !== 'ad-hoc') e.push('apple.adhoc.method: release-testing | ad-hoc');
   const ppp = cfg.prices?.ppp;
@@ -1114,6 +1131,23 @@ function validateIarcDetails(d: IarcDetails | undefined): string[] {
 }
 
 /** Platforms of the app (app identity): app.platforms, else from the store sections. */
+/** True for the macOS platform in any spelling: "macos", "mac_os" (API name MAC_OS), "mac". Pure. */
+export const isMacosPlatform = (p: string | undefined | null): boolean => !!p && /^mac(_?os)?$/i.test(p.replace(/[\s-]/g, ''));
+
+/** The App Store listing file (as written in the config, relative) for a platform: apple.macos.listing for macOS when
+ *  set, else apple.listing, else store/appstore.md. Pure. */
+export function listingPathFor(config: Pick<ShipConfig, 'apple'>, platform?: string | null): string {
+  const mac = isMacosPlatform(platform) ? config.apple?.macos?.listing?.trim() : '';
+  return mac || config.apple?.listing || 'store/appstore.md';
+}
+
+/** The App Review notes text of the config for a platform: apple.macos.reviewNotes for macOS when set, else
+ *  apple.info.reviewNotes. Pure; reviewAccess and account deletion lines are added by reviewNotes() in lib/review-details. */
+export function reviewNotesFor(config: Pick<ShipConfig, 'apple'>, platform?: string | null): string | undefined {
+  const mac = isMacosPlatform(platform) ? config.apple?.macos?.reviewNotes : undefined;
+  return mac?.trim() ? mac : config.apple?.info?.reviewNotes;
+}
+
 /** App Store name limit (characters). */
 export const APPLE_NAME_MAX = 30;
 
diff --git a/cli/lib/listing-mentions.ts b/cli/lib/listing-mentions.ts
index f7f9fb5..b8aaac3 100644
--- a/cli/lib/listing-mentions.ts
+++ b/cli/lib/listing-mentions.ts
@@ -2,7 +2,7 @@
 // report. Reads store/appstore.md and store/listing.md (or the config's listing paths).
 import { existsSync, readFileSync } from 'node:fs';
 import { relative } from 'node:path';
-import type { Loaded } from './config';
+import { listingPathFor, type Loaded } from './config';
 import { fileMentions, type PlatformHit } from './cross-store';
 
 export function listingFileMentions(loaded: Pick<Loaded, 'config' | 'resolve' | 'root'>, stores: { apple: boolean; play: boolean } = { apple: true, play: true }): PlatformHit[] {
@@ -11,6 +11,7 @@ export function listingFileMentions(loaded: Pick<Loaded, 'config' | 'resolve' |
   const out: PlatformHit[] = [];
   const files: ['apple' | 'play', string | null][] = [
     ['apple', stores.apple && config.apple ? resolve(config.apple.listing ?? 'store/appstore.md') : null],
+    ['apple', stores.apple && config.apple?.macos?.listing ? resolve(listingPathFor(config, 'macos')) : null],
     ['play', stores.play && config.play ? resolve(config.play.listing ?? 'store/listing.md') : null],
   ];
   for (const [store, f] of files) if (f && existsSync(f)) out.push(...fileMentions(store, relative(root, f) || f, readFileSync(f, 'utf8'), allow));
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index 0a9d650..96346f6 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -271,29 +271,51 @@ export function readAppInfo(appDir: string): Record<string, PlistValue> {
   return parsePlist(readFileSync(p)) as Record<string, PlistValue>;
 }
 
+/** What bounds and reports the .pkg reading (tests inject a fake spawnSync and short limits). */
+export interface PkgInfoOptions { say?: (msg: string) => void; spawnSync?: typeof rt.spawnSync; checkMs?: number; expandMs?: number }
+/** pkgutil --check-signature evaluates the certificate chain (revocation lookups over the network): never unbounded. */
+export const PKG_CHECK_MS = 90_000;
+/** pkgutil --expand copies the whole archive to a temp folder: minutes for a big app, never unbounded. */
+export const PKG_EXPAND_MS = 5 * 60_000;
+
 /** bundle id, version and build of a .pkg: pkgutil --expand on a Mac (PackageInfo), else the <pkg>.json next to it that
- *  `apple build --platform macos` wrote. Refuses an unsigned or wrongly signed .pkg when pkgutil is there. */
-export function pkgInfo(pkg: string, expectBundleId?: string): { bundleId: string; version: string; build: string } {
-  if (rt.which('pkgutil')) {
-    const sig = parsePkgSignature(rt.spawnSync(['pkgutil', '--check-signature', pkg], { stdout: 'pipe', stderr: 'pipe' }).stdout.toString());
-    const bad = pkgProblems(sig);
-    if (bad.length) throw new Error(`${basename(pkg)}: not uploaded:\n${bad.map(x => `  ${x}`).join('\n')}`);
-    const tmp = join(process.env.TMPDIR ?? '/tmp', `sb-pkg-${process.pid}-${Date.now()}`);
-    try {
-      if (rt.spawnSync(['pkgutil', '--expand', pkg, tmp], { stdout: 'pipe', stderr: 'pipe' }).exitCode === 0) {
-        for (const d of readdirSync(tmp)) {
-          const p = join(tmp, d, 'PackageInfo');
-          const info = existsSync(p) ? parsePackageInfo(readFileSync(p, 'utf8')) : null;
-          if (info && (!expectBundleId || info.bundleId === expectBundleId)) return info;
-        }
-      }
-    } finally { try { rmSync(tmp, { recursive: true, force: true }); } catch { /* temp */ } }
-  }
+ *  `apple build --platform macos` wrote. Refuses an unsigned or wrongly signed .pkg when pkgutil is there. Both pkgutil
+ *  calls have a timeout (no stdin, so no prompt) and say what they do first; one that times out falls back to the
+ *  .json file, else it fails with the reason (a silent hang over SSH, 10 min, was this read). */
+export function pkgInfo(pkg: string, expectBundleId?: string, o: PkgInfoOptions = {}): { bundleId: string; version: string; build: string } {
+  const say = o.say ?? (() => {});
+  const spawnSync = o.spawnSync ?? rt.spawnSync;
   const side = `${pkg}.json`;
+  let timedOut = '';
+  if (rt.which('pkgutil') || o.spawnSync) {
+    const checkMs = o.checkMs ?? PKG_CHECK_MS, expandMs = o.expandMs ?? PKG_EXPAND_MS;
+    say(`checking the signature of ${basename(pkg)} (pkgutil --check-signature, up to ${Math.round(checkMs / 1000)} s)`);
+    const chk = spawnSync(['pkgutil', '--check-signature', pkg], { stdout: 'pipe', stderr: 'pipe', timeout: checkMs });
+    if (chk.exitCode === null && chk.signalCode) timedOut = `pkgutil --check-signature gave no answer in ${Math.round(checkMs / 1000)} s (it checks the certificate chain over the network)`;
+    else {
+      const bad = pkgProblems(parsePkgSignature(chk.stdout.toString()));
+      if (bad.length) throw new Error(`${basename(pkg)}: not uploaded:\n${bad.map(x => `  ${x}`).join('\n')}`);
+      const tmp = join(process.env.TMPDIR ?? '/tmp', `sb-pkg-${process.pid}-${Date.now()}`);
+      say(`reading bundle id, version and build (pkgutil --expand, up to ${Math.round(expandMs / 1000)} s; a big package takes a while)`);
+      try {
+        const ex = spawnSync(['pkgutil', '--expand', pkg, tmp], { stdout: 'pipe', stderr: 'pipe', timeout: expandMs });
+        if (ex.exitCode === null && ex.signalCode) timedOut = `pkgutil --expand gave no answer in ${Math.round(expandMs / 1000)} s`;
+        else if (ex.exitCode === 0) {
+          for (const d of readdirSync(tmp)) {
+            const p = join(tmp, d, 'PackageInfo');
+            const info = existsSync(p) ? parsePackageInfo(readFileSync(p, 'utf8')) : null;
+            if (info && (!expectBundleId || info.bundleId === expectBundleId)) return info;
+          }
+        }
+      } finally { try { rmSync(tmp, { recursive: true, force: true }); } catch { /* temp */ } }
+    }
+  }
+  if (timedOut) say(`${timedOut}: using ${basename(side)} (written by apple build) instead`);
   if (existsSync(side)) {
     const j = JSON.parse(readFileSync(side, 'utf8')) as { bundleId?: string; version?: string; build?: string; unsigned?: boolean };
     if (j.unsigned) throw new Error(`${basename(pkg)} was built with --unsigned: the Mac App Store refuses it`);
     if (j.bundleId && j.version && j.build) return { bundleId: j.bundleId, version: j.version, build: j.build };
   }
+  if (timedOut) throw new Error(`${basename(pkg)}: ${timedOut}, and there is no ${basename(side)} file from apple build to read instead: run it in the Mac's logged-in GUI session, or check the Mac's network`);
   throw new Error(`${basename(pkg)}: cannot read bundle id / version / build (needs pkgutil on a Mac, or the ${basename(side)} file apple build wrote)`);
 }
diff --git a/cli/lib/review-details.ts b/cli/lib/review-details.ts
index f397e3c..26153b8 100644
--- a/cli/lib/review-details.ts
+++ b/cli/lib/review-details.ts
@@ -3,14 +3,15 @@
 // field takes up to 4000 bytes; a demo account must keep working during the whole review (Guideline 2.1).
 // https://developer.apple.com/help/app-store-connect/reference/app-information/platform-version-information
 // https://developer.apple.com/documentation/appstoreconnectapi/appstorereviewdetail/attributes-data.dictionary
-import type { ShipConfig } from './config';
+import { reviewNotesFor, type ShipConfig } from './config';
 import { type DemoAccount, maskSecret, maskUser } from './credentials';
 
 export const NOTES_MAX_BYTES = 4000;
 
-/** Notes for the reviewer: apple.info.reviewNotes, then reviewAccess.instructions, then where account deletion is. */
-export function reviewNotes(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>): string {
-  const parts = [config.apple?.info?.reviewNotes?.trim() ?? ''];
+/** Notes for the reviewer: apple.info.reviewNotes (macOS: apple.macos.reviewNotes when set), then reviewAccess.instructions,
+ *  then where account deletion is. */
+export function reviewNotes(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>, platform?: string): string {
+  const parts = [reviewNotesFor(config, platform)?.trim() ?? ''];
   const ins = config.reviewAccess?.instructions?.trim();
   if (ins && !parts[0]!.includes(ins)) parts.push(`Sign-in: ${ins}`);
   const del = config.accounts?.enabled ? config.accounts.inApp?.trim() : '';
@@ -29,8 +30,8 @@ export interface ReviewDetailPlan {
  * (throws when it is missing, so a submission never goes out with "sign-in required" and no account); without it the
  * demo fields are cleared.
  */
-export function reviewDetailPlan(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>, contact: Record<string, string>, demo: DemoAccount | null): ReviewDetailPlan {
-  const notes = reviewNotes(config);
+export function reviewDetailPlan(config: Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>, contact: Record<string, string>, demo: DemoAccount | null, platform?: string): ReviewDetailPlan {
+  const notes = reviewNotes(config, platform);
   const bytes = new TextEncoder().encode(notes).length;
   if (bytes > NOTES_MAX_BYTES) throw new Error(`review notes are ${bytes} bytes; App Store Connect takes ${NOTES_MAX_BYTES}`);
   const required = !!config.reviewAccess?.signInRequired;
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index c1e5491..ad3593b 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -72,7 +72,10 @@ export interface AppleSnapshot {
   build: { number: string; processingState: string; usesNonExemptEncryption: boolean | null; declarationState: string | null } | null;
   /** Locales the config expects (apple: entries of `languages`). */
   expectedLocales: string[];
-  locales: { locale: string; name?: string; subtitle?: string; description?: string; keywords?: string; screenshots: Record<string, number> }[];
+  locales: { locale: string; name?: string; subtitle?: string; description?: string; keywords?: string; promotionalText?: string; whatsNew?: string; screenshots: Record<string, number> }[];
+  /** apple.macos facts for the macOS claim check (validate fills it): the config's macOS review notes (what `apple review-details
+   *  --platform macos` would send) and the gameCenter / noIap switches. */
+  macos?: { notes?: string; gameCenter?: boolean; noIap?: boolean };
   requiredDisplayTypes: string[];
   /** apple.iphoneDuo (iPhone Duo renders on) and whether the project has a play section, for the Duo note. */
   iphoneDuo?: boolean;
@@ -208,6 +211,35 @@ export function copyrightRules(s: Pick<AppleSnapshot, 'version' | 'configCopyrig
 
 const PLATFORM_NAMES: Record<string, string> = { IOS: 'iOS', MAC_OS: 'macOS', TV_OS: 'tvOS', VISION_OS: 'visionOS' };
 
+const MACOS_CLAIMS: { kind: string; re: RegExp; needs?: 'noGameCenter' | 'noIap'; what: string }[] = [
+  { kind: 'game-center', re: /game\s*center/i, needs: 'noGameCenter', what: 'Game Center (set apple.macos.gameCenter: true when the Mac app has it)' },
+  { kind: 'touch', re: /\b(tap|taps|tapping|swipe|swipes|swiping|pinch|pinches)\b|touch[\s-]?screen/i, what: 'touch words (tap, swipe, pinch, touch screen)' },
+  { kind: 'ios-device', re: /\b(iphone|ipad)s?\b/i, what: 'an iPhone / iPad mention' },
+  { kind: 'iap', re: /in[\s-]app[\s-]purchases?|\biaps?\b|restore purchases/i, needs: 'noIap', what: 'an in-app purchase line (apple.macos.noIap is set)' },
+];
+
+/**
+ * A macOS version's texts (description, promotional text, what's new, keywords, subtitle) and review notes (live, and
+ * the config's apple.macos.reviewNotes / apple.info.reviewNotes) that carry iOS-only claims. Warnings only. Game Center
+ * is flagged unless apple.macos.gameCenter is true; in-app purchase lines only when apple.macos.noIap is set. Pure.
+ */
+export function macosClaimRules(s: Pick<AppleSnapshot, 'version' | 'locales' | 'reviewDetail' | 'macos'>): Finding[] {
+  if (s.version?.platform !== 'MAC_OS') return [];
+  const texts: { where: string; text: string }[] = [];
+  for (const l of s.locales) for (const k of ['subtitle', 'description', 'promotionalText', 'whatsNew', 'keywords'] as const) if (l[k]) texts.push({ where: `${l.locale} ${k}`, text: l[k]! });
+  if (s.reviewDetail?.notes) texts.push({ where: 'review notes (on the store)', text: s.reviewDetail.notes });
+  if (s.macos?.notes) texts.push({ where: 'review notes (config)', text: s.macos.notes });
+  const out: Finding[] = [];
+  for (const c of MACOS_CLAIMS) {
+    if (c.needs === 'noGameCenter' && s.macos?.gameCenter) continue;
+    if (c.needs === 'noIap' && !s.macos?.noIap) continue;
+    const hits = [...new Set(texts.filter(t => c.re.test(t.text)).map(t => t.where))];
+    if (hits.length) out.push({ store: 'apple', level: 'warn', code: 'macos-claims', msg: `macOS version ${s.version.versionString}: ${c.what} in ${hits.slice(0, 6).join(', ')}${hits.length > 6 ? ` (+${hits.length - 6} more)` : ''}`,
+      fix: 'a separate macOS listing file (apple.macos.listing, then storebound apple listing --platform macos) and apple.macos.reviewNotes (storebound apple review-details --platform macos)' });
+  }
+  return out;
+}
+
 export function appleRules(s: AppleSnapshot): Finding[] {
   const f: Finding[] = [];
   const add = (level: Level, code: string, msg: string, fix?: string, action?: FixAction, url?: string) => f.push({ store: 'apple', level, code, msg, fix, ...(action ? { action } : {}), ...(url ? { url } : {}) });
@@ -232,6 +264,7 @@ export function appleRules(s: AppleSnapshot): Finding[] {
     add('warn', 'version-platform', `version ${o.versionString} (${name}) is ${o.state} too: this report covers ${vl || 'iOS'} only`, `storebound validate --platform ${name.toLowerCase()}; storebound apple status lists every platform`);
   }
   f.push(...copyrightRules(s));
+  f.push(...macosClaimRules(s));
 
   if (!s.build) add('blocker', 'build', 'no build attached to the version', 'storebound apple listing --version x.y.z --build N (pick the build number you just uploaded)');
   else {
diff --git a/cli/validate.ts b/cli/validate.ts
index b95f7a2..773359b 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -22,6 +22,7 @@ import { firstProductReport } from './apple/first-products';
 import { requiredDisplayTypes } from './apple/screenshots';
 import { pendingScreenshots, setRows, type ShotRow, updateLedger } from './apple/screenshot-health';
 import { type Loaded, playCategoryOf, playCodes, profileOf, sellsOn } from './lib/config';
+import { reviewNotes } from './lib/review-details';
 import { reviewDemoAccount } from './lib/credentials';
 import { allSubscriptions, basePlanId } from './lib/subscriptions';
 import type { Ctx } from './lib/ctx';
@@ -143,7 +144,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
         shotRows.push(...setRows(shots, l.attributes.locale, s.attributes.screenshotDisplayType));
       }
       const ia = infoLocs.get(l.attributes.locale) ?? {};
-      locales.push({ locale: l.attributes.locale, name: ia.name, subtitle: ia.subtitle, description: l.attributes.description, keywords: l.attributes.keywords, screenshots });
+      locales.push({ locale: l.attributes.locale, name: ia.name, subtitle: ia.subtitle, description: l.attributes.description, keywords: l.attributes.keywords, promotionalText: l.attributes.promotionalText ?? undefined, whatsNew: l.attributes.whatsNew ?? undefined, screenshots });
     }
     reviewDetail = (await c.maybe(`/v1/appStoreVersions/${v.id}/appStoreReviewDetail`))?.data?.attributes ?? null;
   }
@@ -188,6 +189,7 @@ export async function collectApple(ctx: Ctx): Promise<AppleSnapshot> {
     expectedLocales: config.languages.map(l => l.apple).filter((x): x is string => !!x),
     requiredDisplayTypes: requiredDisplayTypes(config.apple, platform),
     iphoneDuo: !!config.apple?.iphoneDuo, play: !!config.play,
+    macos: platform === 'MAC_OS' ? { notes: reviewNotes(config, 'macos'), gameCenter: config.apple?.macos?.gameCenter, noIap: config.apple?.macos?.noIap } : undefined,
     macVersion: every.some(x => platformOf(x) === 'MAC_OS'), mac: !!config.apple?.mac,
     priceSchedule: !!sched?.included?.some((x: J) => x.type === 'appPrices'),
     availability: !!avail?.data,
diff --git a/skills/appstore-first-release/SKILL.md b/skills/appstore-first-release/SKILL.md
index 4f90081..e41c8c5 100644
--- a/skills/appstore-first-release/SKILL.md
+++ b/skills/appstore-first-release/SKILL.md
@@ -63,7 +63,12 @@ answers the compliance facts no file proves, all in one batch at the start.
 10. **API · Review details.** `storebound apple review-details` (contact from `.storebound/credentials.json`
     `reviewContact`, or `--contact-from <Apple ID of another app of the team>`; notes from the config). Apps behind a
     sign-in: the demo account from `.storebound/` (`review-access` skill). Apps with accounts: in-app deletion
-    (`account-deletion` skill).
+    (`account-deletion` skill). An app with an iOS **and** a macOS version: `--platform macos` (`apple listing`, `apple
+    review-details`) uses `apple.macos.listing` (its own appstore file) and `apple.macos.reviewNotes` when set, else
+    the iOS ones; the Mac app often has no Game Center, IAP or ads, so say so there. `storebound validate --platform
+    macos` warns about iOS-only claims in the Mac texts and notes (Game Center unless `apple.macos.gameCenter: true`,
+    tap / swipe / pinch / touch screen, iPhone / iPad, and IAP lines when `apple.macos.noIap: true`). Not `apple.mac`
+    (that only turns Mac screenshots on).
 11. **API · In-app purchases and subscriptions.** `store-iap-setup` and `store-subscriptions` skills. First
     IAPs and subscriptions go to review **with** this version: `storebound apple iap-submit --with-version --dry`,
     then (after the owner's yes, since it submits) `storebound apple iap-submit --with-version --yes`. On a real first
diff --git a/tests/macos-overrides.test.ts b/tests/macos-overrides.test.ts
new file mode 100644
index 0000000..ac9c9f2
--- /dev/null
+++ b/tests/macos-overrides.test.ts
@@ -0,0 +1,112 @@
+// apple.macos: per-platform listing file and review notes for an app with an iOS and a macOS App Store version, the
+// config check, and the validate warning for iOS-only claims in a macOS version's texts.
+import { describe, expect, test } from 'bun:test';
+import { isMacosPlatform, listingPathFor, reviewNotesFor, validateExtras, type ShipConfig } from '../cli/lib/config';
+import { reviewDetailPlan, reviewNotes } from '../cli/lib/review-details';
+import { appleRules, macosClaimRules, type AppleSnapshot } from '../cli/lib/validate-rules';
+
+const cfg = (apple: Record<string, unknown>) => ({ apple: { bundleId: 'com.example.app', ...apple } }) as unknown as Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>;
+const contact = { contactFirstName: 'A', contactLastName: 'B', contactPhone: '+10000000000', contactEmail: 'a@example.com' };
+
+describe('platform helpers', () => {
+  test('spellings of macOS', () => {
+    for (const p of ['macos', 'MAC_OS', 'macOS', 'mac']) expect(isMacosPlatform(p)).toBe(true);
+    for (const p of ['ios', 'IOS', 'tvos', '', undefined]) expect(isMacosPlatform(p)).toBe(false);
+  });
+  test('listingPathFor: macOS override, else apple.listing, else the default', () => {
+    const c = cfg({ listing: 'store/ios.md', macos: { listing: 'store/mac.md' } });
+    expect(listingPathFor(c, 'macos')).toBe('store/mac.md');
+    expect(listingPathFor(c, 'MAC_OS')).toBe('store/mac.md');
+    expect(listingPathFor(c, 'ios')).toBe('store/ios.md');
+    expect(listingPathFor(c)).toBe('store/ios.md');
+    expect(listingPathFor(cfg({ macos: {} }), 'macos')).toBe('store/appstore.md');
+    expect(listingPathFor(cfg({ listing: 'store/ios.md', macos: { reviewNotes: 'x' } }), 'macos')).toBe('store/ios.md');
+  });
+  test('reviewNotesFor: macOS override, else apple.info.reviewNotes', () => {
+    const c = cfg({ info: { reviewNotes: 'iOS notes' }, macos: { reviewNotes: 'Mac notes' } });
+    expect(reviewNotesFor(c, 'macos')).toBe('Mac notes');
+    expect(reviewNotesFor(c, 'ios')).toBe('iOS notes');
+    expect(reviewNotesFor(cfg({ info: { reviewNotes: 'iOS notes' }, macos: {} }), 'macos')).toBe('iOS notes');
+  });
+});
+
+describe('review details plan', () => {
+  const c = { ...cfg({ info: { reviewNotes: 'iOS notes: Game Center, IAP' }, macos: { reviewNotes: 'Mac notes: no purchases' } }), reviewAccess: { signInRequired: false, instructions: 'No sign-in.' } } as Pick<ShipConfig, 'apple' | 'reviewAccess' | 'accounts'>;
+  test('macos picks the Mac notes, ios and default keep the iOS notes; the shared sign-in line stays', () => {
+    expect(reviewDetailPlan(c, contact, null, 'macos').attributes.notes).toBe('Mac notes: no purchases\n\nSign-in: No sign-in.');
+    expect(reviewDetailPlan(c, contact, null, 'ios').attributes.notes).toBe('iOS notes: Game Center, IAP\n\nSign-in: No sign-in.');
+    expect(reviewDetailPlan(c, contact, null).attributes.notes).toBe(reviewNotes(c));
+  });
+});
+
+describe('config check', () => {
+  test('apple.macos shape', () => {
+    expect(validateExtras({ apple: { bundleId: 'com.example.app', macos: { listing: 'a.md', reviewNotes: 'x', gameCenter: true, noIap: true } } } as never)).toEqual([]);
+    const bad = validateExtras({ apple: { bundleId: 'com.example.app', macos: { listing: '', gameCenter: 'yes', noIap: 1 } } } as never);
+    expect(bad.some(m => m.startsWith('apple.macos.listing'))).toBe(true);
+    expect(bad.some(m => m.startsWith('apple.macos.gameCenter'))).toBe(true);
+    expect(bad.some(m => m.startsWith('apple.macos.noIap'))).toBe(true);
+    expect(validateExtras({ apple: { bundleId: 'com.example.app', macos: 'x' } } as never).some(m => m.startsWith('apple.macos:'))).toBe(true);
+  });
+});
+
+describe('validate: iOS-only claims on a macOS version', () => {
+  const loc = (o: Record<string, string>) => [{ locale: 'en-US', screenshots: {}, ...o }];
+  const snap = (over: Partial<AppleSnapshot>): Pick<AppleSnapshot, 'version' | 'locales' | 'reviewDetail' | 'macos'> =>
+    ({ version: { versionString: '1.0.0', state: 'PREPARE_FOR_SUBMISSION', platform: 'MAC_OS' }, locales: [], reviewDetail: null, ...over });
+  const codes = (f: { msg: string }[]) => f.map(x => x.msg);
+
+  test('Game Center, touch words and iPhone mentions warn; nothing blocks', () => {
+    const f = macosClaimRules(snap({ locales: loc({ description: 'Compete on Game Center. Tap and swipe to play on your iPhone.' }) }));
+    expect(f.length).toBe(3);
+    expect(f.every(x => x.level === 'warn' && x.code === 'macos-claims')).toBe(true);
+    expect(codes(f).join('\n')).toContain('en-US description');
+  });
+  test('promotional text, what\'s new, keywords and live review notes are read', () => {
+    const f = macosClaimRules(snap({ locales: loc({ promotionalText: 'Use the touch screen', whatsNew: 'Pinch to zoom', keywords: 'ipad' }), reviewDetail: { notes: 'Sign in with Game Center' } }));
+    const all = codes(f).join('\n');
+    expect(all).toContain('en-US promotionalText');
+    expect(all).toContain('en-US whatsNew');
+    expect(all).toContain('en-US keywords');
+    expect(all).toContain('review notes (on the store)');
+  });
+  test('the config review notes the Mac would use are checked too', () => {
+    expect(codes(macosClaimRules(snap({ macos: { notes: 'Game Center leaderboards are in the menu' } }))).join()).toContain('review notes (config)');
+  });
+  test('apple.macos.gameCenter silences Game Center; IAP lines only with noIap', () => {
+    const text = loc({ description: 'Game Center scores. Remove ads with an in-app purchase.' });
+    expect(macosClaimRules(snap({ locales: text, macos: { gameCenter: true } }))).toEqual([]);
+    const f = macosClaimRules(snap({ locales: text, macos: { gameCenter: true, noIap: true } }));
+    expect(f.length).toBe(1);
+    expect(f[0]!.msg).toContain('in-app purchase');
+  });
+  test('words that only look similar do not match; iOS versions are never checked', () => {
+    expect(macosClaimRules(snap({ locales: loc({ description: 'Contact the support team; a stapler, a tapestry, an iPhoneless desk.' }) }))).toEqual([]);
+    expect(macosClaimRules(snap({ version: { versionString: '1.0.0', state: 'PREPARE_FOR_SUBMISSION', platform: 'IOS' }, locales: loc({ description: 'Game Center, tap' }) }))).toEqual([]);
+  });
+  test('appleRules includes the warning', () => {
+    const base = { expectedLocales: [], requiredDisplayTypes: [], iaps: [], expectedProducts: [], ageRating: null, priceSchedule: false, availability: false, build: null, privacyUrl: { url: 'https://example.com', status: 200 } };
+    const f = appleRules({ ...base, ...snap({ locales: loc({ description: 'Tap here', screenshots: {} as never }) }) } as AppleSnapshot);
+    expect(f.some(x => x.code === 'macos-claims' && x.level === 'warn')).toBe(true);
+  });
+});
+
+describe('apple listing reads the platform file', () => {
+  test('readAppleCopy(ctx, "macos") reads apple.macos.listing, ios reads apple.listing', async () => {
+    const { mkdtempSync, writeFileSync } = await import('node:fs');
+    const { tmpdir } = await import('node:os');
+    const { join, resolve } = await import('node:path');
+    const { readAppleCopy } = await import('../cli/apple/listing');
+    const { parseArgs } = await import('../cli/lib/args');
+    const fence = '`'.repeat(3);
+    const sec = (d: string) => ['## en-US', '', '### subtitle', fence, 'Sub', fence, '', '### promotionalText', fence, 'Promo', fence, '', '### keywords', fence, 'run,time', fence, '', '### description', fence, d, fence, ''].join('\n');
+    const dir = mkdtempSync(join(tmpdir(), 'sb-macos-'));
+    writeFileSync(join(dir, 'ios.md'), sec('Play on iPhone with Game Center.'));
+    writeFileSync(join(dir, 'mac.md'), sec('Play on your Mac.'));
+    const loaded = { config: cfg({ listing: 'ios.md', macos: { listing: 'mac.md' } }), resolve: (p: string) => resolve(dir, p), root: dir };
+    const ctx = { loaded, args: parseArgs([]) } as never;
+    expect(readAppleCopy(ctx, 'macos')['en-US']?.description).toContain('Mac');
+    expect(readAppleCopy(ctx, 'ios')['en-US']?.description).toContain('iPhone');
+    expect(readAppleCopy(ctx)['en-US']?.description).toContain('iPhone');
+  });
+});
diff --git a/tests/upload-pkg-hang.test.ts b/tests/upload-pkg-hang.test.ts
new file mode 100644
index 0000000..f4e1890
--- /dev/null
+++ b/tests/upload-pkg-hang.test.ts
@@ -0,0 +1,114 @@
+// `apple upload <app.pkg> --platform macos` once printed nothing for 10 minutes over SSH although the build number was
+// VALID on App Store Connect. Causes: pkgutil --check-signature / --expand ran unbounded and silent, and the processing
+// wait polled the IOS platform only, so a Mac build was "not listed yet" for the whole --timeout. These tests keep
+// every slow step logged and bounded, and an already-VALID build number ends at once (no upload, no wait).
+import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, setDefaultTimeout, test } from 'bun:test';
+import { mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { hooks, run as appleUpload } from '../cli/apple/upload';
+import { PKG_CHECK_MS, PKG_EXPAND_MS, pkgInfo } from '../cli/lib/mas';
+import { HEARTBEAT_MS } from '../cli/lib/progress';
+import type { SyncResult } from '../cli/lib/rt';
+import { ascEnv, BASE, project, restore } from './helpers/store-mock';
+import { installStores, type Stores, uninstallStores, writes } from './helpers/fake-stores';
+
+const SIDE = JSON.stringify({ bundleId: 'com.example.notes', version: '1.2.0', build: '7' });
+const files = (): Record<string, string> => ({ 'build/macos/Example.pkg': 'pkg', 'build/macos/Example.pkg.json': SIDE });
+const result = (o: Partial<SyncResult>): SyncResult => ({ exitCode: 0, signalCode: null, success: true, stdout: Buffer.alloc(0), stderr: Buffer.alloc(0), ...o });
+const timedOut = result({ exitCode: null, signalCode: 'SIGTERM', success: false });
+const SIGNED = 'Package "Bare.pkg":\n   Status: signed by a certificate trusted by macOS\n   Certificate Chain:\n    1. 3rd Party Mac Developer Installer: Example (ABCDE12345)\n       Expires: 2030-01-01\n    2. Apple Worldwide Developer Relations Certification Authority\n    3. Apple Root CA\n';
+
+type Seen = { argv: string[]; timeout?: number };
+const fake = (seen: Seen[], answer: (argv: string[]) => SyncResult) => ((argv: string[], o: { timeout?: number }) => { seen.push({ argv, timeout: o.timeout }); return answer(argv); }) as never;
+
+/** Runs fn with log output captured (log.ts writes through console). */
+async function logged(fn: () => Promise<void>): Promise<{ text: string; error: Error | null }> {
+  const out: string[] = [];
+  const log = console.log, err = console.error, warn = console.warn;
+  console.log = console.error = console.warn = (...a: unknown[]) => { out.push(a.map(String).join(' ')); };
+  let error: Error | null = null;
+  try { await fn(); } catch (e) { error = e as Error; } finally { console.log = log; console.error = err; console.warn = warn; }
+  return { text: out.join('\n'), error };
+}
+
+describe('pkgInfo: bounded and never silent', () => {
+  test('the signature check has a timeout and a log line; when it times out the .json apple build wrote is used', () => {
+    const p = project(BASE, files());
+    const said: string[] = [], seen: Seen[] = [];
+    const info = pkgInfo(join(p.root, 'build/macos/Example.pkg'), 'com.example.notes', { say: m => said.push(m), spawnSync: fake(seen, () => timedOut) });
+    expect(info).toEqual({ bundleId: 'com.example.notes', version: '1.2.0', build: '7' });
+    expect(seen).toHaveLength(1);
+    expect(seen[0]!.timeout).toBe(PKG_CHECK_MS);
+    expect(said[0]).toContain('pkgutil --check-signature');
+    expect(said.at(-1)).toContain('gave no answer');
+    expect(said.at(-1)).toContain('Example.pkg.json');
+  });
+
+  test('the expand is bounded too; a timeout without the .json file is an error that names the cause', () => {
+    const p = project(BASE, { 'build/macos/Bare.pkg': 'pkg' });
+    const said: string[] = [], seen: Seen[] = [];
+    const spawnSync = fake(seen, argv => (argv[1] === '--check-signature' ? result({ stdout: Buffer.from(SIGNED) }) : timedOut));
+    let error: Error | null = null;
+    try { pkgInfo(join(p.root, 'build/macos/Bare.pkg'), undefined, { say: m => said.push(m), spawnSync, expandMs: 5000 }); } catch (e) { error = e as Error; }
+    expect(error?.message).toContain('pkgutil --expand gave no answer');
+    expect(error?.message).toContain('Bare.pkg.json');
+    expect(seen.map(x => x.argv[1])).toEqual(['--check-signature', '--expand']);
+    expect(seen[1]!.timeout).toBe(5000);
+    expect(said.some(m => m.includes('pkgutil --expand'))).toBe(true);
+    expect(PKG_EXPAND_MS).toBeGreaterThan(PKG_CHECK_MS);
+  });
+});
+
+describe('apple upload of a .pkg (fake stores)', () => {
+  setDefaultTimeout(30_000);
+  let s: Stores;
+  const path = process.env.PATH;
+  beforeAll(() => { ascEnv(); });
+  afterAll(restore);
+  beforeEach(() => { s = installStores(); process.env.PATH = mkdtempSync(join(tmpdir(), 'sb-nopkgutil-')); }); // no pkgutil: the .json is read
+  afterEach(() => { uninstallStores(); process.env.PATH = path; hooks.heartbeat = undefined; });
+
+  test('an already VALID build number ends at once: clear message, no upload, no wait, every slow step logged first', async () => {
+    s.asc.put({ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID' }, rels: { app: '6400000101' } });
+    const p = project(BASE, files());
+    const started = Date.now();
+    const r = await logged(() => appleUpload(p.ctx(['build/macos/Example.pkg', '--platform', 'macos', '--yes'])));
+    expect(Date.now() - started).toBeLessThan(10_000);
+    expect(r.error?.message).toContain('already on App Store Connect (VALID)');
+    expect(writes(s.calls)).toEqual([]);
+    expect(s.calls.some(c => decodeURIComponent(c.path).includes('preReleaseVersion.platform'))).toBe(false); // no processing poll
+    expect(s.asc.parts).toEqual([]);
+    expect(r.text).toContain('reading the package');
+    expect(r.text).toContain('asking App Store Connect');
+    expect(r.text.indexOf('reading the package')).toBeLessThan(r.text.indexOf('asking App Store Connect'));
+  });
+
+  test('--allow-existing on a Mac build: the wait polls MAC_OS and prints a heartbeat while a poll is in flight', async () => {
+    s.asc.put({ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID' }, rels: { app: '6400000101' } });
+    const p = project(BASE, files());
+    let beat: (() => void) | null = null;
+    hooks.heartbeat = { everyMs: 1000, ticker: f => { beat = f; return () => { beat = null; }; } };
+    const inner = globalThis.fetch, polls: string[] = [];
+    globalThis.fetch = (async (input: string | URL | Request, init?: RequestInit) => {
+      if (decodeURIComponent(String(input)).includes('preReleaseVersion.platform')) {
+        (beat as (() => void) | null)?.(); // the poll is in flight: time passes
+        polls.push(decodeURIComponent(String(input)));
+        // the fake does not implement include=: answer the way App Store Connect does
+        return new Response(JSON.stringify({ data: [{ type: 'builds', id: 'b-7', attributes: { version: '7', processingState: 'VALID' }, relationships: { preReleaseVersion: { data: { type: 'preReleaseVersions', id: 'pv-1' } } } }], included: [{ type: 'preReleaseVersions', id: 'pv-1', attributes: { version: '1.2.0' } }] }), { status: 200 });
+      }
+      return inner(input as never, init);
+    }) as typeof fetch;
+    const r = await logged(() => appleUpload(p.ctx(['build/macos/Example.pkg', '--platform', 'macos', '--yes', '--allow-existing'])));
+    expect(r.error).toBeNull();
+    expect(r.text).toMatch(/still waiting for build 7: first check/);
+    expect(r.text).toContain('build 7 is VALID');
+    expect(polls).toHaveLength(1);
+    expect(polls[0]).toContain('filter[preReleaseVersion.platform]=MAC_OS');
+    expect(writes(s.calls)).toEqual([]);
+  });
+
+  test('the default heartbeat is at least once a minute', () => {
+    expect(HEARTBEAT_MS).toBeLessThanOrEqual(60_000);
+  });
+});

From d88ed3ec55c40f49c19bb4c3f440524c73331780 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:32:38 +0700
Subject: [PATCH 220/255] mcp: apple_review_details takes platform (macOS
 version, apple.macos.reviewNotes)

---
 cli/mcp-tools.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cli/mcp-tools.ts b/cli/mcp-tools.ts
index 17c7cf5..da72820 100644
--- a/cli/mcp-tools.ts
+++ b/cli/mcp-tools.ts
@@ -219,7 +219,8 @@ export const TOOLS: ToolDef[] = [
   { name: 'apple_appinfo', title: 'App Store app info', command: ['apple', 'appinfo'], write: true, network: true, idempotent: true,
     description: 'Categories, age rating declaration, content rights, Free price and availability (when missing).' },
   { name: 'apple_review_details', title: 'App Review information', command: ['apple', 'review-details'], write: true, network: true, idempotent: true,
-    description: 'App Review contact and, when reviewAccess.signInRequired, the demo account (both from .storebound/credentials.json or env, masked in the output), plus the review notes (apple.info.reviewNotes, sign-in instructions, where account deletion is).' },
+    description: 'App Review contact and, when reviewAccess.signInRequired, the demo account (both from .storebound/credentials.json or env, masked in the output), plus the review notes (apple.info.reviewNotes, or apple.macos.reviewNotes for platform macos; sign-in instructions, where account deletion is). Written to the editable version of the platform.',
+    props: { platform }, args: i => opt('platform', i.platform) },
   { name: 'apple_encryption', title: 'Export compliance answer', command: ['apple', 'encryption'], write: true, network: true, idempotent: true,
     description: 'Answer export compliance for builds from apple.usesNonExemptEncryption in the config (never guesses).',
     props: { build: { type: 'string', description: 'Build number (default: every build without an answer)' } }, args: i => opt('build', i.build) },

From 68467ffe9b335e0de360cb23d1fba286d105e302 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:40:06 +0700
Subject: [PATCH 221/255] apple build --platform macos: --tauri takes
 tauri.<name>.conf.json (tauri.appstore.conf.json found by itself),
 entitlements from --entitlements / apple.macos.entitlements / the merged
 config, Developer-ID-only keys refused or warned

---
 cli/apple/build-mas.ts         |  33 ++++--
 cli/apple/build.ts             |   2 +-
 cli/data/flags.json            |   6 +-
 cli/lib/config.ts              |   8 +-
 cli/lib/mas.ts                 |  95 +++++++++++++++--
 skills/build-and-sign/SKILL.md |   7 ++
 tests/mas-entitlements.test.ts | 182 +++++++++++++++++++++++++++++++++
 7 files changed, 312 insertions(+), 21 deletions(-)
 create mode 100644 tests/mas-entitlements.test.ts

diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 6440af6..85de5d6 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -1,6 +1,6 @@
 // Mac App Store build of a Tauri app: `tauri build --bundles app`, signed for the Mac App Store, then productbuild to a .pkg.
 //   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--target universal-apple-darwin]
-//       [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
+//       [--entitlements <plist>] [--allow-entitlements] [--version x.y.z] [--build-number N] [--profile <file.provisionprofile>] [--out build/macos] [--unsigned] [--dry] [--json]
 // Steps: Tauri project -> version / build number (next free one on App Store Connect, every platform) -> signing
 // identities from the keychain ("Apple Distribution" or "3rd Party Mac Developer Application"; "Mac Installer
 // Distribution" or "3rd Party Mac Developer Installer") -> Mac App Store provisioning profile (--profile, installed, or
@@ -27,7 +27,7 @@ import { prebuildFor, prebuildsDone, runPrebuild } from '../lib/web-assets';
 import { preCheckCommand } from '../lib/pre-check';
 import { pump } from '../lib/runner';
 import {
-  appProblems, entitlementKeysOf, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
+  appProblems, entitlementKeysOf, entitlementsSource, entitlementsXml, findBuiltApp, findTauri, leakNeedles, masEntitlementProblems, masEntitlements, type MasProfile, masSteps, pathFreeEnv, pickMasIdentities,
   pickMasProfiles, pkgProblems, parsePkgSignature, readAppInfo, scanPathLeaks, tauriOverlay, categoryId,
 } from '../lib/mas';
 import { readdirSync } from 'node:fs';
@@ -167,17 +167,31 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
   const prebuild = prebuildFor(config, 'apple') ?? null;
   const prebuildSkip = !prebuild ? undefined : a.has('no-prebuild') ? '--no-prebuild' : prebuildsDone().has(prebuild) ? 'already ran in this flow run' : undefined;
   const appCheck = config.apple?.macAppCheck?.trim() || null;
-  const existingEnt = tauri.entitlements && existsSync(tauri.entitlements) ? (parsePlist(readFileSync(tauri.entitlements)) as Record<string, PlistValue>) : undefined;
+  // entitlements: --entitlements, apple.macos.entitlements, the merged Tauri config (the first one that is set)
+  const entFlag = a.get('entitlements'), entCfg = config.apple?.macos?.entitlements;
+  const entSrc = entitlementsSource({ flag: entFlag ? resolve(entFlag) : undefined, config: entCfg ? resolve(entCfg) : undefined, tauri: tauri.entitlements });
+  let existingEnt: Record<string, PlistValue> | undefined;
+  if (entSrc) {
+    if (existsSync(entSrc.file)) existingEnt = parsePlist(readFileSync(entSrc.file)) as Record<string, PlistValue>;
+    else if (entSrc.source !== 'tauri config bundle.macOS.entitlements') throw new Error(`${entSrc.source}: ${entSrc.file} does not exist`);
+    else warn(TAG, `${entSrc.source}: ${relative(root, entSrc.file)} does not exist, using the sandbox defaults only`);
+  }
   const ent = masEntitlements({ teamId: team, bundleId, existing: existingEnt });
-  const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
-    profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
+  const entCheck = masEntitlementProblems(ent);
+  const allowEnt = a.has('allow-entitlements');
+  const plan = { platform: 'MAC_OS', tauri: relative(root, tauri.confPath), tauriOverlayFile: tauri.overlayPath ? relative(root, tauri.overlayPath) : null, target, version, build: buildNo, teamId: teamId, unsigned, pathFree, appIdentity, installerIdentity,
+    profile: profile ? basenameOf(profile) : null, entitlements: Object.keys(ent), entitlementsSource: entSrc ? { source: entSrc.source, file: relative(root, entSrc.file) } : null,
+    entitlementProblems: entCheck, tauriOverlay: overlay, env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, k === 'RUSTFLAGS' ? v.replaceAll(home, '~') : v])),
     prebuild, ...(prebuildSkip ? { prebuildSkip } : {}), appCheck,
     steps: [showCmd(steps.tauri, null), showCmd(steps.codesignVerify, null), showCmd(steps.productbuild, null), showCmd(steps.pkgCheck, null)], out: relative(root, out) || '.', pkg: relative(root, pkg) };
   if (dry) {
     if (json) { printJson(plan); return; }
     log(TAG, `Tauri ${tauri.productName} (${bundleId}) ${version} (${buildNo}) for ${target}, ${unsigned ? 'UNSIGNED' : 'Mac App Store signing'}${pathFree ? ', path-free' : ''}`);
     log(TAG, identityLine({ platform, appIdentity, installerIdentity, profile: plan.profile }));
-    log(TAG, `entitlements: ${plan.entitlements.join(', ')}`);
+    if (tauri.overlayPath) log(TAG, `Tauri overlay ${plan.tauriOverlayFile}${tauri.overlayAuto ? ' (found next to tauri.conf.json)' : ''}: merged over tauri.conf.json, passed to tauri build --config`);
+    log(TAG, `entitlements from ${entSrc?.source ?? 'the sandbox defaults'}${entSrc ? ` (${plan.entitlementsSource!.file})` : ''}: ${plan.entitlements.join(', ')}`);
+    for (const e of entCheck.errors) warn(TAG, `entitlement ${e}${allowEnt ? '' : ' (the real build stops here; --allow-entitlements builds anyway)'}`);
+    for (const w of entCheck.warnings) warn(TAG, `entitlement ${w}`);
     if (pathFree) log(TAG, `RUSTFLAGS: ${plan.env.RUSTFLAGS}`);
     if (prebuild) log(TAG, prebuildSkip ? `prebuild skipped (${prebuildSkip}): ${prebuild}` : `would run the prebuild: ${prebuild}`);
     for (const s of plan.steps) log(TAG, `would run: ${s}`);
@@ -185,6 +199,11 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
     done(TAG, 'macOS build planned (dry run)');
     return;
   }
+  if (tauri.overlayPath) log(TAG, `Tauri overlay ${plan.tauriOverlayFile}${tauri.overlayAuto ? ' (found next to tauri.conf.json)' : ''}: merged over tauri.conf.json, passed to tauri build --config`);
+  log(TAG, `entitlements from ${entSrc?.source ?? 'the sandbox defaults'}${entSrc ? ` (${plan.entitlementsSource!.file})` : ''}: ${plan.entitlements.join(', ')}`);
+  for (const w of entCheck.warnings) warn(TAG, `entitlement ${w}`);
+  for (const e of entCheck.errors) if (allowEnt) warn(TAG, `entitlement ${e} (--allow-entitlements)`);
+  if (entCheck.errors.length && !allowEnt) throw new Error(`the entitlements (from ${entSrc?.source ?? 'the sandbox defaults'}) do not belong in a Mac App Store build:\n${entCheck.errors.map(x => `  ${x}`).join('\n')}\n  Point the build at the App Store plist: --entitlements <plist>, apple.macos.entitlements, or a tauri.appstore.conf.json overlay next to tauri.conf.json (--allow-entitlements builds anyway).`);
   if (!mac) throw new Error('apple build --platform macos needs macOS (tauri build, codesign, productbuild)');
   const remote = remoteBuildSession(process.env, run1(['launchctl', 'managername'], 5000).out.trim());
   if (remote && !unsigned && !a.has('allow-ssh')) throw new Error(`${sshBuildRefusal(remote, { unlockFlag: false })}
@@ -205,7 +224,7 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
   const entOut = unsigned ? null : entitlementKeysOf(run1(['codesign', '-d', '--entitlements', ':-', appDir]).out);
   const leaks = pathFree || a.has('scan-paths') ? scanPathLeaks(appDir, leakNeedles(home, user, root)) : [];
   const checks = appProblems({ info: readAppInfo(appDir), entitlements: entOut, hasProfile: existsSync(join(appDir, 'Contents', 'embedded.provisionprofile')), leaks },
-    { bundleId, version, build: buildNo, signed: !unsigned, pathFree });
+    { bundleId, version, build: buildNo, signed: !unsigned, pathFree, allowEntitlements: allowEnt });
   for (const w of checks.warnings) warn(TAG, w);
   if (checks.errors.length) throw new Error(`${basenameOf(appDir)} was built, but the Mac App Store would refuse it:\n${checks.errors.map(x => `  ${x}`).join('\n')}`);
   if (appCheck) {
diff --git a/cli/apple/build.ts b/cli/apple/build.ts
index 18093db..1655081 100644
--- a/cli/apple/build.ts
+++ b/cli/apple/build.ts
@@ -1,5 +1,5 @@
 // Archive and export an App Store IPA with xcodebuild, no Xcode UI.
-//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]
+//   storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--entitlements <plist>] [--allow-entitlements] [--version x.y.z] [--build-number N] [--out D]
 //     (Mac App Store build of a Tauri app: cli/apple/build-mas.ts)
 //   storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]
 //                          [--configuration Release] [--out build/ios] [--no-prebuild] [--allow-stale-web] [--dry] [--json]
diff --git a/cli/data/flags.json b/cli/data/flags.json
index 44ebcb1..9e5aed1 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -69,12 +69,14 @@
   "apple build": [
    "allow-app-group-gap",
    "allow-device-gap",
+   "allow-entitlements",
    "allow-ssh",
    "allow-stale-web",
    "allow-version-mismatch",
    "build-number",
    "configuration",
    "derived-data",
+   "entitlements",
    "env-file",
    "evidence",
    "keychain",
@@ -1181,6 +1183,7 @@
    "allow-app-group-gap",
    "allow-availability-changes",
    "allow-device-gap",
+   "allow-entitlements",
    "allow-existing",
    "allow-origin",
    "allow-price-changes",
@@ -1243,6 +1246,7 @@
    "download",
    "enable",
    "end",
+   "entitlements",
    "env-file",
    "every",
    "evidence",
@@ -1506,7 +1510,7 @@
    "storebound apple appinfo [--dry] [--json] [--allow-price-changes] [--allow-availability-changes]"
   ],
   "apple build": [
-   "storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--version x.y.z] [--build-number N] [--out D]",
+   "storebound apple build --platform macos --tauri <src-tauri> [--path-free] [--unsigned] [--target T] [--profile F] [--entitlements <plist>] [--allow-entitlements] [--version x.y.z] [--build-number N] [--out D]",
    "storebound apple build [--version 1.2.0] [--build-number N] [--scheme S] [--workspace W | --project P]"
   ],
   "apple bundle": [
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 05b9fc0..01da2ed 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -714,8 +714,10 @@ export interface ShipConfig {
      * --platform macos`; `reviewNotes`: used instead of apple.info.reviewNotes by `apple review-details --platform macos`.
      * `gameCenter: true`: the Mac app has Game Center (silences the Game Center check of `validate --platform macos`).
      * `noIap: true`: the Mac app sells nothing (validate then flags in-app purchase lines in the Mac texts).
+     * `entitlements`: the Mac App Store entitlements plist of `apple build --platform macos --tauri` (e.g. "src-tauri/Entitlements.appstore.plist"),
+     * used instead of the Tauri config's bundle.macOS.entitlements (a project with a Developer ID channel keeps that one there); `--entitlements <plist>` wins over it.
      */
-    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean };
+    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean; entitlements?: string };
     /** "Header and Search Results" creative assets (`storebound apple creative-assets`, iOS / iPadOS 27+). Files under
      *  <renders>/<lang>/creative/: header.{png,jpg,mov,m4v,mp4} (3840x1646, 21:9), search.{...} (3:2, 1920x1280 to
      *  3840x2560) or universal.png (5244x2950) for both. `header` / `search` false skip that slot; `universal` is a
@@ -1047,9 +1049,9 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
   if (cfg.play?.free !== undefined && typeof cfg.play.free !== 'boolean') e.push('play.free: true (free) | false (paid)');
   const mo = cfg.apple?.macos;
   if (mo !== undefined) {
-    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true }');
+    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true, entitlements?: "src-tauri/Entitlements.appstore.plist" }');
     else {
-      for (const k of ['listing', 'reviewNotes'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : ''}`);
+      for (const k of ['listing', 'reviewNotes', 'entitlements'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : k === 'entitlements' ? ' (path of the Mac App Store entitlements plist)' : ''}`);
       for (const k of ['gameCenter', 'noIap'] as const) if (mo[k] !== undefined && typeof mo[k] !== 'boolean') e.push(`apple.macos.${k}: true | false`);
     }
   }
diff --git a/cli/lib/mas.ts b/cli/lib/mas.ts
index 96346f6..b080e57 100644
--- a/cli/lib/mas.ts
+++ b/cli/lib/mas.ts
@@ -18,20 +18,52 @@ export interface TauriProject {
   category?: string;
   minOs?: string;
   entitlements?: string;
+  /** The overlay file merged over the base config (tauri.<name>.conf.json), absolute; passed to `tauri build --config` too. */
+  overlayPath?: string;
+  /** True when the overlay was found next to tauri.conf.json without being named (tauri.appstore.conf.json / tauri.mas.conf.json). */
+  overlayAuto?: boolean;
   conf: Record<string, unknown>;
 }
 
+/** Overlay files that are picked up on their own for a Mac App Store build, in this order. */
+export const MAS_OVERLAY_NAMES = ['tauri.appstore.conf.json', 'tauri.mas.conf.json'] as const;
+
+/** JSON merge patch (RFC 7386, what Tauri's --config does): objects merge, null removes a key, anything else (arrays too) replaces. */
+export function mergePatch(base: unknown, patch: unknown): unknown {
+  if (patch === null || typeof patch !== 'object' || Array.isArray(patch)) return patch;
+  const out: Record<string, unknown> = base !== null && typeof base === 'object' && !Array.isArray(base) ? { ...(base as Record<string, unknown>) } : {};
+  for (const [k, v] of Object.entries(patch as Record<string, unknown>)) {
+    if (v === null) delete out[k];
+    else out[k] = mergePatch(out[k], v);
+  }
+  return out;
+}
+
+/** tauri.<name>.conf.json (an overlay), not tauri.conf.json itself. */
+export const isOverlayFile = (p: string): boolean => /(^|[\\/])tauri\.[^\\/]+\.conf\.json$/.test(p);
+
 const SKIP = new Set(['node_modules', 'target', '.git', 'dist', 'build', '.storebound', 'Pods']);
 
-/** The Tauri project: `hint` (a folder with tauri.conf.json, or the file itself) or the only tauri.conf.json found. */
+/** The Tauri project: `hint` (a folder with tauri.conf.json, or a tauri.conf.json / tauri.conf.json5 / tauri.<name>.conf.json
+ *  file) or the only tauri.conf.json found. An overlay file (tauri.<name>.conf.json) is merged over the base
+ *  tauri.conf.json of its folder; tauri.appstore.conf.json / tauri.mas.conf.json next to the base config is picked up on its own. */
 export function findTauri(root: string, hint?: string): TauriProject {
   const names = ['tauri.conf.json', 'tauri.conf.json5'];
-  let confPath: string | undefined;
+  let confPath: string | undefined, overlayPath: string | undefined, overlayAuto = false;
+  const autoOverlay = (): void => { const o = MAS_OVERLAY_NAMES.map(n => join(dirname(confPath!), n)).find(existsSync); if (o) { overlayPath = o; overlayAuto = true; } };
   if (hint && hint !== 'true') {
     const p = join(root, hint);
-    if (/tauri\.conf\.json5?$/.test(p) && existsSync(p)) confPath = p;
-    else confPath = names.map(n => join(p, n)).find(existsSync);
-    if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json in it`);
+    if (isOverlayFile(p)) {
+      if (!existsSync(p)) throw new Error(`--tauri ${hint}: no such file`);
+      overlayPath = p;
+      confPath = names.map(n => join(dirname(p), n)).find(existsSync);
+      if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json next to this overlay (the base config it is merged over)`);
+    } else {
+      if (/tauri\.conf\.json5?$/.test(p) && existsSync(p)) confPath = p;
+      else confPath = names.map(n => join(p, n)).find(existsSync);
+      if (!confPath) throw new Error(`--tauri ${hint}: no tauri.conf.json in it`);
+      autoOverlay();
+    }
   } else {
     const hits: string[] = [];
     const walk = (dir: string, d: number): void => {
@@ -43,16 +75,22 @@ export function findTauri(root: string, hint?: string): TauriProject {
     walk(root, 4);
     if (hits.length !== 1) throw new Error(hits.length ? `several Tauri projects (${hits.map(h => relative(root, h)).join(', ')}): pass --tauri <folder with tauri.conf.json>` : 'no tauri.conf.json found: pass --tauri <folder with tauri.conf.json>');
     confPath = hits[0]!;
+    autoOverlay();
   }
   let conf: Record<string, any>;
   try { conf = JSON.parse(readFileSync(confPath, 'utf8')); } catch (e) { throw new Error(`${confPath}: not valid JSON (${(e as Error).message}); tauri.conf.json5 / Tauri.toml are not read, use tauri.conf.json`); }
+  if (overlayPath) {
+    let patch: unknown;
+    try { patch = JSON.parse(readFileSync(overlayPath, 'utf8')); } catch (e) { throw new Error(`${overlayPath}: not valid JSON (${(e as Error).message})`); }
+    conf = mergePatch(conf, patch) as Record<string, any>;
+  }
   const mac = conf.bundle?.macOS ?? {};
   const productName = String(conf.productName ?? '');
   if (!productName) throw new Error(`${confPath}: productName is missing`);
   const dir = dirname(confPath);
   return { dir, confPath, cwd: dirname(dir), productName, identifier: String(conf.identifier ?? ''), version: typeof conf.version === 'string' ? conf.version : undefined,
     category: typeof conf.bundle?.category === 'string' ? conf.bundle.category : undefined, minOs: typeof mac.minimumSystemVersion === 'string' ? mac.minimumSystemVersion : undefined,
-    entitlements: typeof mac.entitlements === 'string' ? join(dir, mac.entitlements) : undefined, conf };
+    entitlements: typeof mac.entitlements === 'string' ? join(dir, mac.entitlements) : undefined, ...(overlayPath ? { overlayPath, overlayAuto } : {}), conf };
 }
 
 /** Tauri's category names (and Apple's public.app-category.* ids) -> the LSApplicationCategoryType Tauri writes; null when unknown. */
@@ -79,6 +117,43 @@ export function masEntitlements(o: { teamId: string; bundleId: string; existing?
   };
 }
 
+/** Where the entitlements of a Mac App Store build come from, first hit wins: `--entitlements <plist>`, the config's
+ *  `apple.macos.entitlements`, the merged Tauri config's `bundle.macOS.entitlements`. Paths are already absolute. Pure. */
+export function entitlementsSource(o: { flag?: string; config?: string; tauri?: string }): { file: string; source: string } | null {
+  if (o.flag) return { file: o.flag, source: '--entitlements' };
+  if (o.config) return { file: o.config, source: 'apple.macos.entitlements' };
+  if (o.tauri) return { file: o.tauri, source: 'tauri config bundle.macOS.entitlements' };
+  return null;
+}
+
+/** Entitlements that App Store Connect refuses in a Mac App Store build (a Developer ID / development leftover). */
+export const MAS_REFUSED_KEYS: Record<string, string> = {
+  'com.apple.security.get-task-allow': 'a development entitlement, App Store Connect refuses it',
+  'com.apple.security.cs.disable-library-validation': 'a Developer ID hardened-runtime exception, App Store Connect refuses it',
+};
+
+/** Hardened-runtime exceptions and Developer ID habits that do not belong in a Mac App Store build. App Review may
+ *  question them or the sandbox ignores them, but they are not an automatic upload refusal: a warning, not a stop. */
+export const MAS_SUSPECT_KEYS: Record<string, string> = {
+  'com.apple.security.cs.allow-jit': 'hardened-runtime exception for Developer ID builds; App Review asks why a sandboxed app needs it',
+  'com.apple.security.cs.allow-unsigned-executable-memory': 'hardened-runtime exception for Developer ID builds; App Review asks why',
+  'com.apple.security.cs.disable-executable-page-protection': 'hardened-runtime exception for Developer ID builds',
+  'com.apple.security.cs.allow-dyld-environment-variables': 'hardened-runtime exception for Developer ID builds',
+  'com.apple.security.cs.debugger': 'hardened-runtime exception for Developer ID builds (a debugger cannot be sandboxed)',
+  'com.apple.security.automation.apple-events': 'needs NSAppleEventsUsageDescription in Info.plist and a reason in the review notes; usually a Developer ID leftover',
+};
+
+/** The entitlements of a Mac App Store build against the two lists above (a key set to false is fine). Pure. */
+export function masEntitlementProblems(ent: Record<string, PlistValue> | null | undefined): { errors: string[]; warnings: string[] } {
+  const errors: string[] = [], warnings: string[] = [];
+  for (const [k, v] of Object.entries(ent ?? {})) {
+    if (v === false) continue;
+    if (MAS_REFUSED_KEYS[k]) errors.push(`${k} is set: ${MAS_REFUSED_KEYS[k]}`);
+    else if (MAS_SUSPECT_KEYS[k]) warnings.push(`${k} is set: ${MAS_SUSPECT_KEYS[k]}`);
+  }
+  return { errors, warnings };
+}
+
 export const entitlementsXml = (e: Record<string, PlistValue>): string => toXmlPlist(e);
 
 /** Keys of an entitlements plist (XML or what `codesign -d --entitlements :-` prints). */
@@ -170,7 +245,7 @@ export const leakNeedles = (home: string, user: string, root: string): string[]
 export interface AppFacts { info: Record<string, PlistValue>; entitlements: Record<string, PlistValue> | null; hasProfile: boolean; leaks: Leak[] }
 
 /** Problems (stop) and warnings of a built .app before it goes into a .pkg. Pure. */
-export function appProblems(f: AppFacts, o: { bundleId: string; version: string; build: string; signed: boolean; pathFree: boolean }): { errors: string[]; warnings: string[] } {
+export function appProblems(f: AppFacts, o: { bundleId: string; version: string; build: string; signed: boolean; pathFree: boolean; allowEntitlements?: boolean }): { errors: string[]; warnings: string[] } {
   const errors: string[] = [], warnings: string[] = [];
   const s = (k: string): string | undefined => (typeof f.info[k] === 'string' ? f.info[k] as string : undefined);
   if (s('CFBundleIdentifier') !== o.bundleId) errors.push(`CFBundleIdentifier is ${s('CFBundleIdentifier') ?? 'missing'}, not ${o.bundleId}`);
@@ -184,7 +259,9 @@ export function appProblems(f: AppFacts, o: { bundleId: string; version: string;
     else {
       for (const k of MAS_REQUIRED) if (f.entitlements[k] === undefined) errors.push(`entitlement ${k} is missing`);
       if (f.entitlements['com.apple.security.app-sandbox'] !== true) errors.push('com.apple.security.app-sandbox is not true');
-      if (f.entitlements['com.apple.security.get-task-allow'] === true) errors.push('com.apple.security.get-task-allow is true: a development entitlement, App Store Connect refuses it');
+      const ep = masEntitlementProblems(f.entitlements);
+      (o.allowEntitlements ? warnings : errors).push(...ep.errors);
+      warnings.push(...ep.warnings);
     }
     if (!f.hasProfile) errors.push('Contents/embedded.provisionprofile is missing: a Mac App Store app needs its provisioning profile inside (Tauri bundle.macOS.files)');
   }
@@ -230,7 +307,7 @@ export interface MasPlanInput {
 export function masSteps(i: MasPlanInput): { tauri: string[]; productbuild: string[]; codesignVerify: string[]; pkgCheck: string[] } {
   const appPath = join(i.tauri.dir, 'target', i.target, 'release', 'bundle', 'macos', `${i.tauri.productName}.app`);
   return {
-    tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, '--config', i.configFile],
+    tauri: [...i.tauriCmd, 'build', '--bundles', 'app', '--target', i.target, ...(i.tauri.overlayPath ? ['--config', i.tauri.overlayPath] : []), '--config', i.configFile],
     codesignVerify: ['codesign', '--verify', '--deep', '--strict', '--verbose=2', appPath],
     productbuild: ['productbuild', '--component', appPath, '/Applications', ...(i.unsigned || !i.installerIdentity ? [] : ['--sign', i.installerIdentity]), i.pkg],
     pkgCheck: ['pkgutil', '--check-signature', i.pkg],
diff --git a/skills/build-and-sign/SKILL.md b/skills/build-and-sign/SKILL.md
index 844e24a..b8f6d47 100644
--- a/skills/build-and-sign/SKILL.md
+++ b/skills/build-and-sign/SKILL.md
@@ -112,6 +112,13 @@ when the owner said so for this run). The MCP server offers only `apple_signing_
    the generated entitlements (app sandbox, application / team identifier, your own keys kept), the embedded profile,
    hardened runtime and `bundleVersion`. Set `bundle.category` and `bundle.macOS.minimumSystemVersion` in
    tauri.conf.json (the build stops without LSApplicationCategoryType / LSMinimumSystemVersion).
+   A project with a Developer ID and a Mac App Store channel keeps two plists: `--tauri` takes the folder or a
+   `tauri.<name>.conf.json` overlay (merged over tauri.conf.json like Tauri's `--config`, and passed to `tauri build`
+   too; `tauri.appstore.conf.json` / `tauri.mas.conf.json` next to tauri.conf.json is picked up on its own). The
+   entitlements plist comes from `--entitlements <plist>`, else `apple.macos.entitlements`, else the merged
+   `bundle.macOS.entitlements`; the plan shows the source and the final keys. `get-task-allow` and
+   `cs.disable-library-validation` stop the build (App Store Connect refuses them); other hardened-runtime exceptions
+   (`cs.allow-jit`, `cs.allow-unsigned-executable-memory`, `automation.apple-events`...) warn. `--allow-entitlements` builds anyway.
 5. Checks of the .app (sandbox, no get-task-allow, profile inside, version / build), `codesign --verify`, then
    `productbuild --component <app> /Applications --sign <installer identity>` and `pkgutil --check-signature`.
 6. `--path-free`: rustc remaps the checkout, CARGO_HOME, RUSTUP_HOME and the home folder, no debug info, symbols stripped;
diff --git a/tests/mas-entitlements.test.ts b/tests/mas-entitlements.test.ts
new file mode 100644
index 0000000..4e62c5d
--- /dev/null
+++ b/tests/mas-entitlements.test.ts
@@ -0,0 +1,182 @@
+// Mac App Store entitlements of a Tauri build (cli/lib/mas.ts, cli/apple/build-mas.ts): the overlay config
+// (tauri.<name>.conf.json) merged over tauri.conf.json, the source order of the entitlements plist, and the check of
+// Developer ID / development keys that do not belong in a Mac App Store build.
+import { afterAll, describe, expect, test } from 'bun:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { run as buildMas } from '../cli/apple/build-mas';
+import type { ShipConfig } from '../cli/lib/config';
+import { appProblems, entitlementsSource, entitlementsXml, findTauri, masEntitlementProblems, masSteps, mergePatch, tauriOverlay } from '../cli/lib/mas';
+import { BASE, capture, project } from './helpers/store-mock';
+
+const tmp = mkdtempSync(join(tmpdir(), 'sb-masent-'));
+afterAll(() => rmSync(tmp, { recursive: true, force: true }));
+
+const BASE_CONF = { productName: 'Demo App', identifier: 'com.example.notes', version: '1.2.3', bundle: { category: 'Utility', macOS: { entitlements: 'Entitlements.plist', minimumSystemVersion: '12.0' } } };
+const OVERLAY = { bundle: { macOS: { entitlements: 'Entitlements.appstore.plist' } } };
+const DEVID = { 'com.apple.security.cs.disable-library-validation': true, 'com.apple.security.cs.allow-jit': true, 'com.apple.security.network.client': true };
+const APPSTORE = { 'com.apple.security.files.user-selected.read-only': true, 'com.apple.security.network.client': true };
+
+function fixture(files: Record<string, unknown> = {}): { root: string; dir: string } {
+  const root = mkdtempSync(join(tmp, 'p-'));
+  const dir = join(root, 'src-tauri');
+  mkdirSync(dir, { recursive: true });
+  writeFileSync(join(dir, 'tauri.conf.json'), JSON.stringify(BASE_CONF));
+  for (const [n, v] of Object.entries(files)) writeFileSync(join(dir, n), typeof v === 'string' ? v : JSON.stringify(v));
+  return { root, dir };
+}
+
+describe('merge patch', () => {
+  test('objects merge, null removes, arrays and scalars replace', () => {
+    expect(mergePatch({ a: { b: 1, c: 2 }, d: [1, 2], e: 1 }, { a: { b: 9 }, d: [3], e: null })).toEqual({ a: { b: 9, c: 2 }, d: [3] });
+    expect(mergePatch({ a: 1 }, { a: { x: 1 } })).toEqual({ a: { x: 1 } });
+    expect(mergePatch('x', 5)).toBe(5);
+  });
+});
+
+describe('overlay config', () => {
+  test('an overlay file path is merged over the base config in its folder', () => {
+    const { root, dir } = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    const t = findTauri(root, 'src-tauri/tauri.appstore.conf.json');
+    expect(t.overlayPath).toBe(join(dir, 'tauri.appstore.conf.json'));
+    expect(t.overlayAuto).toBe(false);
+    expect(t.entitlements).toBe(join(dir, 'Entitlements.appstore.plist'));
+    expect(t.productName).toBe('Demo App');
+    expect(t.minOs).toBe('12.0');
+  });
+  test('a folder picks up tauri.appstore.conf.json, then tauri.mas.conf.json, on its own; a scan does too', () => {
+    const a = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    expect(findTauri(a.root, 'src-tauri')).toMatchObject({ overlayPath: join(a.dir, 'tauri.appstore.conf.json'), overlayAuto: true });
+    expect(findTauri(a.root).overlayAuto).toBe(true);
+    const m = fixture({ 'tauri.mas.conf.json': OVERLAY });
+    expect(findTauri(m.root, 'src-tauri').overlayPath).toBe(join(m.dir, 'tauri.mas.conf.json'));
+    const both = fixture({ 'tauri.appstore.conf.json': OVERLAY, 'tauri.mas.conf.json': { bundle: { macOS: { entitlements: 'other.plist' } } } });
+    expect(findTauri(both.root, 'src-tauri').entitlements).toBe(join(both.dir, 'Entitlements.appstore.plist'));
+  });
+  test('naming the base file directly still auto-detects; no overlay means none', () => {
+    const { root, dir } = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    expect(findTauri(root, 'src-tauri/tauri.conf.json').entitlements).toBe(join(dir, 'Entitlements.appstore.plist'));
+    const plain = fixture();
+    const t = findTauri(plain.root, 'src-tauri');
+    expect(t.overlayPath).toBeUndefined();
+    expect(t.entitlements).toBe(join(plain.dir, 'Entitlements.plist'));
+  });
+  test('an overlay without a base config, a missing file, bad JSON', () => {
+    const root = mkdtempSync(join(tmp, 'o-'));
+    mkdirSync(join(root, 'x'), { recursive: true });
+    writeFileSync(join(root, 'x/tauri.appstore.conf.json'), '{}');
+    expect(() => findTauri(root, 'x/tauri.appstore.conf.json')).toThrow('no tauri.conf.json next to this overlay');
+    const { root: r2 } = fixture();
+    expect(() => findTauri(r2, 'src-tauri/tauri.nope.conf.json')).toThrow('no such file');
+    const bad = fixture({ 'tauri.appstore.conf.json': '{ nope' });
+    expect(() => findTauri(bad.root, 'src-tauri')).toThrow('not valid JSON');
+  });
+  test('tauri build gets the overlay first and storebound\'s own overlay last', () => {
+    const { root, dir } = fixture({ 'tauri.appstore.conf.json': OVERLAY });
+    const tauri = findTauri(root, 'src-tauri');
+    const input = { tauri, tauriCmd: ['tauri'], target: 'universal-apple-darwin', out: join(root, 'out'), configFile: join(root, 'out/tauri.mas.conf.json'), entitlementsFile: 'e', profile: null,
+      appIdentity: null, installerIdentity: null, version: '1.0.0', build: '1', unsigned: true, pathFree: false, pkg: 'x.pkg' };
+    const argv = masSteps(input).tauri;
+    const cfgs = argv.flatMap((x, i) => (x === '--config' ? [argv[i + 1]] : []));
+    expect(cfgs).toEqual([join(dir, 'tauri.appstore.conf.json'), input.configFile]);
+    const plain = masSteps({ ...input, tauri: findTauri(fixture().root, 'src-tauri') }).tauri;
+    expect(plain.filter(x => x === '--config').length).toBe(1);
+    expect(tauriOverlay({ appIdentity: 'id', entitlementsFile: 'e', profile: null, version: '1', build: '1', unsigned: false })).toBeTruthy();
+  });
+});
+
+describe('entitlements source order', () => {
+  test('flag, then config, then the Tauri config', () => {
+    expect(entitlementsSource({ flag: '/f', config: '/c', tauri: '/t' })).toEqual({ file: '/f', source: '--entitlements' });
+    expect(entitlementsSource({ config: '/c', tauri: '/t' })).toEqual({ file: '/c', source: 'apple.macos.entitlements' });
+    expect(entitlementsSource({ tauri: '/t' })).toEqual({ file: '/t', source: 'tauri config bundle.macOS.entitlements' });
+    expect(entitlementsSource({})).toBeNull();
+  });
+});
+
+describe('entitlement key check', () => {
+  test('refused keys are errors, hardened-runtime exceptions warnings, false values and fine keys pass', () => {
+    const r = masEntitlementProblems({
+      ...DEVID, 'com.apple.security.get-task-allow': true, 'com.apple.security.cs.allow-unsigned-executable-memory': true,
+      'com.apple.security.cs.disable-executable-page-protection': true, 'com.apple.security.cs.allow-dyld-environment-variables': true,
+      'com.apple.security.automation.apple-events': true, 'com.apple.security.cs.debugger': false, 'com.apple.security.files.user-selected.read-only': true,
+    });
+    expect(r.errors.map(e => e.split(' ')[0])).toEqual(['com.apple.security.cs.disable-library-validation', 'com.apple.security.get-task-allow']);
+    expect(r.warnings.map(e => e.split(' ')[0]).sort()).toEqual([
+      'com.apple.security.automation.apple-events', 'com.apple.security.cs.allow-dyld-environment-variables', 'com.apple.security.cs.allow-jit',
+      'com.apple.security.cs.allow-unsigned-executable-memory', 'com.apple.security.cs.disable-executable-page-protection',
+    ]);
+    expect(masEntitlementProblems(APPSTORE)).toEqual({ errors: [], warnings: [] });
+    expect(masEntitlementProblems(null)).toEqual({ errors: [], warnings: [] });
+  });
+  test('the built app is checked too; --allow-entitlements turns the errors into warnings', () => {
+    const facts = {
+      info: { CFBundleIdentifier: 'com.example.notes', CFBundleShortVersionString: '1.0.0', CFBundleVersion: '5', LSApplicationCategoryType: 'public.app-category.utilities', LSMinimumSystemVersion: '12.0', ITSAppUsesNonExemptEncryption: false },
+      entitlements: { 'com.apple.security.app-sandbox': true, 'com.apple.application-identifier': 'T.com.example.notes', 'com.apple.developer.team-identifier': 'T', ...DEVID },
+      hasProfile: true, leaks: [],
+    };
+    const o = { bundleId: 'com.example.notes', version: '1.0.0', build: '5', signed: true, pathFree: false };
+    const r = appProblems(facts, o);
+    expect(r.errors.join()).toContain('disable-library-validation');
+    expect(r.warnings.join()).toContain('allow-jit');
+    const allowed = appProblems(facts, { ...o, allowEntitlements: true });
+    expect(allowed.errors).toEqual([]);
+    expect(allowed.warnings.join()).toContain('disable-library-validation');
+  });
+});
+
+// the whole command, as a dry run (no store, no Mac)
+describe('apple build --platform macos --dry', () => {
+  const CONFIG: ShipConfig = { ...BASE };
+  const files = (extra: Record<string, string> = {}): Record<string, string> => ({
+    'src-tauri/tauri.conf.json': JSON.stringify(BASE_CONF),
+    'src-tauri/tauri.appstore.conf.json': JSON.stringify(OVERLAY),
+    'src-tauri/Entitlements.plist': entitlementsXml(DEVID),
+    'src-tauri/Entitlements.appstore.plist': entitlementsXml(APPSTORE),
+    ...extra,
+  });
+  const dry = async (cfg: ShipConfig, f: Record<string, string>, argv: string[]): Promise<{ plan: any; err: string }> => {
+    const p = project(cfg, f);
+    const r = await capture(() => buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry', '--json', ...argv]), 'linux'));
+    return { plan: JSON.parse(r.out.slice(r.out.indexOf('{'))), err: r.err };
+  };
+  test('the App Store overlay is found and its plist used, not the Developer ID one', async () => {
+    const { plan } = await dry(CONFIG, files(), []);
+    expect(String(plan.tauriOverlayFile).replaceAll("\\", "/")).toBe('src-tauri/tauri.appstore.conf.json');
+    expect({ ...plan.entitlementsSource, file: plan.entitlementsSource.file.replaceAll("\\", "/") }).toEqual({ source: 'tauri config bundle.macOS.entitlements', file: 'src-tauri/Entitlements.appstore.plist' });
+    expect(plan.entitlements).toContain('com.apple.security.files.user-selected.read-only');
+    expect(plan.entitlements).not.toContain('com.apple.security.cs.disable-library-validation');
+    expect(plan.entitlementProblems).toEqual({ errors: [], warnings: [] });
+    expect(plan.steps[0]).toContain('tauri.appstore.conf.json');
+  });
+  test('the Developer ID plist is reported (error under a real build, a warning here)', async () => {
+    const f = files(); delete (f as Record<string, string | undefined>)['src-tauri/tauri.appstore.conf.json'];
+    const { plan, err } = await dry(CONFIG, f, []);
+    expect(plan.entitlementsSource.file.replaceAll("\\", "/")).toBe('src-tauri/Entitlements.plist');
+    expect(plan.entitlementProblems.errors.join()).toContain('disable-library-validation');
+    expect(plan.entitlementProblems.warnings.join()).toContain('allow-jit');
+    expect(err).toBe(''); // --json prints only the plan
+    const pj = project(CONFIG, f);
+    const text = await capture(() => buildMas(pj.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry']), 'linux'));
+    expect(text.err).toContain('disable-library-validation');
+    expect(text.err).toContain('--allow-entitlements');
+    expect(text.out).toContain('entitlements from tauri config');
+  });
+  test('--entitlements beats apple.macos.entitlements beats the Tauri config', async () => {
+    const f = files({ 'a.plist': entitlementsXml({ 'com.apple.security.files.downloads.read-only': true }), 'b.plist': entitlementsXml({ 'com.apple.security.files.user-selected.read-write': true }) });
+    delete (f as Record<string, string | undefined>)['src-tauri/tauri.appstore.conf.json'];
+    const cfg: ShipConfig = { ...CONFIG, apple: { ...CONFIG.apple!, macos: { entitlements: 'a.plist' } } };
+    const viaConfig = await dry(cfg, f, []);
+    expect(viaConfig.plan.entitlementsSource).toEqual({ source: 'apple.macos.entitlements', file: 'a.plist' });
+    expect(viaConfig.plan.entitlements).toContain('com.apple.security.files.downloads.read-only');
+    const viaFlag = await dry(cfg, f, ['--entitlements', 'b.plist']);
+    expect(viaFlag.plan.entitlementsSource).toEqual({ source: '--entitlements', file: 'b.plist' });
+    expect(viaFlag.plan.entitlements).toContain('com.apple.security.files.user-selected.read-write');
+    expect(viaFlag.plan.entitlements).not.toContain('com.apple.security.files.downloads.read-only');
+  });
+  test('a named plist that does not exist stops the run', async () => {
+    const p = project(CONFIG, files());
+    await expect(buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry', '--entitlements', 'nope.plist']), 'linux')).rejects.toThrow('does not exist');
+  });
+});

From f1a9229cf9bc92bc5ee3ca95fb5825141179fe4a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:40:51 +0700
Subject: [PATCH 222/255] changelog: macOS entitlements, MCP review-details
 platform

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b444832..d5370a1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,8 @@
 
 - `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
 - `apple upload <pkg>`: reading the package is bounded (pkgutil signature check 90 s, expand 5 min, then the `apple build` .json) and logged; the processing wait finds macOS builds (it looked only at iOS and sat silently until --timeout); every slow read prints a heartbeat; an SSH / non-GUI session is warned about up front.
+- `apple build --platform macos`: `--tauri` takes a `tauri.<name>.conf.json` overlay (merged over tauri.conf.json and passed to `tauri build --config`; `tauri.appstore.conf.json` / `tauri.mas.conf.json` next to it are used by themselves); the Mac App Store entitlements come from `--entitlements`, `apple.macos.entitlements` or the merged config (a two-channel project signed the App Store app with its Developer ID plist); the plan lists the final keys, `get-task-allow` / `cs.disable-library-validation` stop the build (`--allow-entitlements`), other hardened-runtime exceptions warn.
+- MCP `apple_review_details` takes `platform`.
 - `apple release`: a 409 on a release type change is recognized again (a stray control character had broken the pattern).
 
 ## 0.8.65 · 2026-11-03

From 700fcc4d66ebbbd8910d0dee5bd3957321ee8f11 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Tue, 3 Nov 2026 23:43:46 +0700
Subject: [PATCH 223/255] storebound 0.8.66: version in package.json and every
 copy, CHANGELOG 0.8.66 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 9376b20..4f26e9f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.65",
+      "version": "0.8.66",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5450ba0..d39b3e1 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 9286507..590594e 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d5370a1..58e67bb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.66 · 2026-11-03
+
 - `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
 - `apple upload <pkg>`: reading the package is bounded (pkgutil signature check 90 s, expand 5 min, then the `apple build` .json) and logged; the processing wait finds macOS builds (it looked only at iOS and sat silently until --timeout); every slow read prints a heartbeat; an SSH / non-GUI session is warned about up front.
 - `apple build --platform macos`: `--tauri` takes a `tauri.<name>.conf.json` overlay (merged over tauri.conf.json and passed to `tauri build --config`; `tauri.appstore.conf.json` / `tauri.mas.conf.json` next to it are used by themselves); the Mac App Store entitlements come from `--entitlements`, `apple.macos.entitlements` or the merged config (a two-channel project signed the App Store app with its Developer ID plist); the plan lists the final keys, `get-task-allow` / `cs.disable-library-validation` stop the build (`--allow-entitlements`), other hardened-runtime exceptions warn.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index de640b0..99ef72b 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 7b457f8..91828d7 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.65"
+version = "0.8.66"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 98aac6b..6a96d05 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.65"
+version = "0.8.66"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 1e9d510..8198625 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 86875f3..71908e6 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index e9cabea..5b460ab 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.65",
+  "version": "0.8.66",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 64cb16e337097b9db3a81fc207c0b47554eecbdf Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Wed, 4 Nov 2026 00:17:04 +0700
Subject: [PATCH 224/255] apple build --platform macos: apple.macos.prebuild,
 not the iOS project's build.prebuild

---
 CHANGELOG.md                   | 2 ++
 cli/apple/build-mas.ts         | 9 ++++++---
 cli/lib/config.ts              | 8 +++++---
 tests/mas-entitlements.test.ts | 9 +++++++++
 4 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 58e67bb..2559431 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- `apple build --platform macos`: runs `apple.macos.prebuild` (new) before `tauri build`, no longer `build.prebuild` / `apple.prebuild`, which belong to the iOS project (a Capacitor sync or OTA gate ran for a Tauri Mac build); the dry run names the skipped one.
+
 ## 0.8.66 · 2026-11-03
 
 - `apple.macos: { listing, reviewNotes, gameCenter, noIap }`: an app with iOS and macOS versions gets its own Mac listing file and review notes (`apple listing --platform macos`, `apple review-details --platform macos`, new there); `validate` warns about iOS-only claims in a macOS version's texts (Game Center, tap / swipe, iPhone / iPad, in-app purchases with `noIap`).
diff --git a/cli/apple/build-mas.ts b/cli/apple/build-mas.ts
index 85de5d6..6c16e59 100644
--- a/cli/apple/build-mas.ts
+++ b/cli/apple/build-mas.ts
@@ -162,9 +162,12 @@ export async function run(ctx: Ctx, platform: string = process.platform): Promis
   const overlay = tauriOverlay({ appIdentity, entitlementsFile: entFile, profile, version, build: buildNo, unsigned, minOs: tauri.minOs, category });
   const input = { tauri, tauriCmd, target, out, configFile, entitlementsFile: entFile, profile, appIdentity, installerIdentity: installerIdentity ?? '<Mac Installer Distribution identity>', version, build: buildNo, unsigned, pathFree, pkg };
   const steps = masSteps(input);
-  // the same hooks as apple build: build.prebuild / apple.prebuild first (a project computes its build-time env there),
-  // apple.macAppCheck on the built .app before productbuild (e.g. a project's own check that a value was stamped in)
-  const prebuild = prebuildFor(config, 'apple') ?? null;
+  // apple.macos.prebuild first (a project computes its build-time env there), apple.macAppCheck on the built .app before
+  // productbuild (e.g. a project's own check that a value was stamped in). build.prebuild / apple.prebuild belong to the
+  // iOS / Android project (a Capacitor sync, an OTA gate) and are not run for a Tauri Mac build
+  const prebuild = config.apple?.macos?.prebuild?.trim() || null;
+  const mobilePrebuild = prebuildFor(config, 'apple');
+  if (!prebuild && mobilePrebuild && !json) log(TAG, `not run for the Mac build: ${mobilePrebuild} (build.prebuild / apple.prebuild are for the iOS project; set apple.macos.prebuild for the Mac)`);
   const prebuildSkip = !prebuild ? undefined : a.has('no-prebuild') ? '--no-prebuild' : prebuildsDone().has(prebuild) ? 'already ran in this flow run' : undefined;
   const appCheck = config.apple?.macAppCheck?.trim() || null;
   // entitlements: --entitlements, apple.macos.entitlements, the merged Tauri config (the first one that is set)
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 01da2ed..cd3acd1 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -716,8 +716,10 @@ export interface ShipConfig {
      * `noIap: true`: the Mac app sells nothing (validate then flags in-app purchase lines in the Mac texts).
      * `entitlements`: the Mac App Store entitlements plist of `apple build --platform macos --tauri` (e.g. "src-tauri/Entitlements.appstore.plist"),
      * used instead of the Tauri config's bundle.macOS.entitlements (a project with a Developer ID channel keeps that one there); `--entitlements <plist>` wins over it.
+     * `prebuild`: shell command `apple build --platform macos` runs first in the project root (build.prebuild /
+     * apple.prebuild are the iOS project's and are not run for the Mac build); `--no-prebuild` skips it.
      */
-    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean; entitlements?: string };
+    macos?: { listing?: string; reviewNotes?: string; gameCenter?: boolean; noIap?: boolean; entitlements?: string; prebuild?: string };
     /** "Header and Search Results" creative assets (`storebound apple creative-assets`, iOS / iPadOS 27+). Files under
      *  <renders>/<lang>/creative/: header.{png,jpg,mov,m4v,mp4} (3840x1646, 21:9), search.{...} (3:2, 1920x1280 to
      *  3840x2560) or universal.png (5244x2950) for both. `header` / `search` false skip that slot; `universal` is a
@@ -1049,9 +1051,9 @@ export function validateExtras(cfg: Partial<ShipConfig>): string[] {
   if (cfg.play?.free !== undefined && typeof cfg.play.free !== 'boolean') e.push('play.free: true (free) | false (paid)');
   const mo = cfg.apple?.macos;
   if (mo !== undefined) {
-    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true, entitlements?: "src-tauri/Entitlements.appstore.plist" }');
+    if (typeof mo !== 'object' || mo === null || Array.isArray(mo)) e.push('apple.macos: { listing?: "store/appstore-macos.md", reviewNotes?: "...", gameCenter?: true, noIap?: true, entitlements?: "src-tauri/Entitlements.appstore.plist", prebuild?: "<shell command>" }');
     else {
-      for (const k of ['listing', 'reviewNotes', 'entitlements'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : k === 'entitlements' ? ' (path of the Mac App Store entitlements plist)' : ''}`);
+      for (const k of ['listing', 'reviewNotes', 'entitlements', 'prebuild'] as const) if (mo[k] !== undefined && (typeof mo[k] !== 'string' || !mo[k]!.trim())) e.push(`apple.macos.${k}: a non-empty string${k === 'listing' ? ' (path of the macOS App Store listing file)' : k === 'entitlements' ? ' (path of the Mac App Store entitlements plist)' : ''}`);
       for (const k of ['gameCenter', 'noIap'] as const) if (mo[k] !== undefined && typeof mo[k] !== 'boolean') e.push(`apple.macos.${k}: true | false`);
     }
   }
diff --git a/tests/mas-entitlements.test.ts b/tests/mas-entitlements.test.ts
index 4e62c5d..3de48d6 100644
--- a/tests/mas-entitlements.test.ts
+++ b/tests/mas-entitlements.test.ts
@@ -175,6 +175,15 @@ describe('apple build --platform macos --dry', () => {
     expect(viaFlag.plan.entitlements).toContain('com.apple.security.files.user-selected.read-write');
     expect(viaFlag.plan.entitlements).not.toContain('com.apple.security.files.downloads.read-only');
   });
+  test('only apple.macos.prebuild runs before the Mac build; the iOS project\'s build.prebuild is named, not run', async () => {
+    const mobile: ShipConfig = { ...CONFIG, build: { prebuild: 'npx cap sync' } };
+    expect((await dry(mobile, files(), [])).plan.prebuild).toBeNull();
+    const text = await capture(() => buildMas(project(mobile, files()).ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry']), 'linux'));
+    expect(text.out).toContain('not run for the Mac build: npx cap sync');
+    const mac: ShipConfig = { ...mobile, apple: { ...CONFIG.apple!, macos: { prebuild: 'bun run desktop:env' } } };
+    expect((await dry(mac, files(), [])).plan.prebuild).toBe('bun run desktop:env');
+    expect((await dry(mac, files(), ['--no-prebuild'])).plan.prebuildSkip).toBe('--no-prebuild');
+  });
   test('a named plist that does not exist stops the run', async () => {
     const p = project(CONFIG, files());
     await expect(buildMas(p.ctx(['--tauri', 'src-tauri', '--unsigned', '--build-number', '7', '--dry', '--entitlements', 'nope.plist']), 'linux')).rejects.toThrow('does not exist');

From 31f863ed0614b919047729718c9742416ae6d466 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Wed, 4 Nov 2026 00:20:45 +0700
Subject: [PATCH 225/255] storebound 0.8.67: version in package.json and every
 copy, CHANGELOG 0.8.67 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 4f26e9f..d7c9e2f 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.66",
+      "version": "0.8.67",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index d39b3e1..f107b02 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 590594e..c36badf 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2559431..70f4cf1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.67 · 2026-11-03
+
 - `apple build --platform macos`: runs `apple.macos.prebuild` (new) before `tauri build`, no longer `build.prebuild` / `apple.prebuild`, which belong to the iOS project (a Capacitor sync or OTA gate ran for a Tauri Mac build); the dry run names the skipped one.
 
 ## 0.8.66 · 2026-11-03
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 99ef72b..cd3f783 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 91828d7..b59f665 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.66"
+version = "0.8.67"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 6a96d05..a0d6f88 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.66"
+version = "0.8.67"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 8198625..4f84fdb 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 71908e6..92aa54d 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 5b460ab..f5d0387 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.66",
+  "version": "0.8.67",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 0950ef2c99a84900208361e6c093fb01586169eb Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 6 Nov 2026 21:01:19 +0700
Subject: [PATCH 226/255] desktop: the app's own CLI on the terminal PATH
 (launcher rewritten on every start; npm installs stay first)

---
 CHANGELOG.md           |  2 ++
 cli/lib/cli-shim.ts    | 81 ++++++++++++++++++++++++++++++++++++++++++
 cli/serve.ts           |  3 ++
 tests/cli-shim.test.ts | 47 ++++++++++++++++++++++++
 4 files changed, 133 insertions(+)
 create mode 100644 cli/lib/cli-shim.ts
 create mode 100644 tests/cli-shim.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 70f4cf1..38eb3e2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
+
 ## 0.8.67 · 2026-11-03
 
 - `apple build --platform macos`: runs `apple.macos.prebuild` (new) before `tauri build`, no longer `build.prebuild` / `apple.prebuild`, which belong to the iOS project (a Capacitor sync or OTA gate ran for a Tauri Mac build); the dry run names the skipped one.
diff --git a/cli/lib/cli-shim.ts b/cli/lib/cli-shim.ts
new file mode 100644
index 0000000..8ece9b1
--- /dev/null
+++ b/cli/lib/cli-shim.ts
@@ -0,0 +1,81 @@
+// The desktop app's own storebound on the terminal: the app ships the CLI as its sidecar, and on every start the sidecar
+// puts a small launcher on the person's PATH, so `storebound` works in a terminal without an npm install.
+//   Windows       %LOCALAPPDATA%\storebound\bin\storebound.cmd, that folder appended to the user PATH (once)
+//   macOS / Linux ~/.local/bin/storebound (a sh launcher), ~/.local/bin added to ~/.zprofile / ~/.profile when missing
+// An npm / bun install stays first: the folder is appended, and a launcher is never written over a file that is not
+// ours (the marker line). Rewritten on every start, so a moved or updated app fixes itself. Not from an AppImage (its
+// mount path changes per run) or a dev run. STOREBOUND_NO_CLI_SHIM=1 turns it off.
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync, appendFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import * as rt from './rt';
+
+export const SHIM_MARKER = 'storebound desktop launcher';
+
+export interface ShimPlan {
+  /** Why nothing is written (null: write). */
+  skip: string | null;
+  file: string;
+  content: string;
+  /** The folder to add to PATH when it is not on it (Windows: the user PATH; else a shell profile line). */
+  pathDir: string;
+  /** macOS / Linux: the shell profile that gets the PATH line. */
+  profile?: string;
+}
+
+/** What to write for the sidecar at `exe`. Pure. */
+export function shimPlan(o: { exe: string; platform: string; home: string; env: Record<string, string | undefined> }): ShimPlan {
+  const win = o.platform === 'win32';
+  const local = o.env.LOCALAPPDATA ?? join(o.home, 'AppData', 'Local');
+  const dir = win ? join(local, 'storebound', 'bin') : join(o.home, '.local', 'bin');
+  const file = join(dir, win ? 'storebound.cmd' : 'storebound');
+  const content = win
+    ? `@echo off\r\nrem ${SHIM_MARKER}\r\n"${o.exe}" %*\r\n`
+    : `#!/bin/sh\n# ${SHIM_MARKER}\nexec '${o.exe.replace(/'/g, `'\\''`)}' "$@"\n`;
+  const skip = o.env.STOREBOUND_NO_CLI_SHIM ? 'STOREBOUND_NO_CLI_SHIM is set'
+    : o.env.APPIMAGE || /^\/tmp\/\.mount_/.test(o.exe) ? 'an AppImage (its path changes per run)'
+    : null;
+  return { skip, file, content, pathDir: dir, ...(win ? {} : { profile: join(o.home, o.platform === 'darwin' ? '.zprofile' : '.profile') }) };
+}
+
+/** True when `dir` is one of the PATH entries (case-insensitive on Windows). Pure. */
+export function onPath(dir: string, path: string | undefined, platform: string): boolean {
+  const norm = (s: string) => { const t = s.replace(/[\\/]+$/, ''); return platform === 'win32' ? t.toLowerCase() : t; };
+  return (path ?? '').split(platform === 'win32' ? ';' : ':').some(p => p && norm(p) === norm(dir));
+}
+
+/** Writes the launcher and the PATH entry; returns what it did, one line each. Never throws. */
+export function ensureCliShim(exe: string = process.execPath, platform: string = process.platform, env: Record<string, string | undefined> = process.env, home: string = homedir()): string[] {
+  const done: string[] = [];
+  try {
+    const p = shimPlan({ exe, platform, home, env });
+    if (p.skip) return [`terminal launcher skipped: ${p.skip}`];
+    if (existsSync(p.file)) {
+      const cur = readFileSync(p.file, 'utf8');
+      if (!cur.includes(SHIM_MARKER)) return [`terminal launcher not written: ${p.file} exists and is not ours`];
+      if (cur === p.content) done.push(`terminal launcher up to date: ${p.file}`);
+    }
+    if (!done.length) {
+      mkdirSync(p.pathDir, { recursive: true });
+      writeFileSync(p.file, p.content);
+      if (platform !== 'win32') chmodSync(p.file, 0o755);
+      done.push(`terminal launcher written: ${p.file}`);
+    }
+    if (platform === 'win32') {
+      // the user PATH from the registry (not this process's, which a running app inherited before the change)
+      const q = rt.spawnSync(['reg', 'query', 'HKCU\\Environment', '/v', 'Path'], { stdout: 'pipe', stderr: 'pipe', timeout: 10_000 });
+      const userPath = /Path\s+REG_(?:EXPAND_)?SZ\s+(.*)/i.exec(new TextDecoder().decode(q.stdout ?? new Uint8Array()))?.[1]?.trim() ?? '';
+      if (!onPath(p.pathDir, userPath, platform)) {
+        // SetEnvironmentVariable keeps REG_EXPAND_SZ entries as typed and tells open Explorer windows (new terminals see it)
+        const ps = `$p=[Environment]::GetEnvironmentVariable('Path','User'); if(-not $p){$p=''}; if(($p -split ';') -notcontains '${p.pathDir}'){ [Environment]::SetEnvironmentVariable('Path', ($p.TrimEnd(';') + ';${p.pathDir}').TrimStart(';'), 'User') }`;
+        const r = rt.spawnSync(['powershell', '-NoProfile', '-NonInteractive', '-Command', ps], { stdout: 'pipe', stderr: 'pipe', timeout: 30_000 });
+        done.push(r.success ? `added to the user PATH: ${p.pathDir} (new terminals)` : `user PATH not changed (exit ${r.exitCode})`);
+      }
+    } else if (!onPath(p.pathDir, env.PATH, platform) && p.profile) {
+      const line = `export PATH="$PATH:$HOME/.local/bin" # ${SHIM_MARKER}`;
+      const cur = existsSync(p.profile) ? readFileSync(p.profile, 'utf8') : '';
+      if (!cur.includes(SHIM_MARKER)) { appendFileSync(p.profile, `${cur && !cur.endsWith('\n') ? '\n' : ''}${line}\n`); done.push(`added ~/.local/bin to PATH in ${p.profile} (new terminals)`); }
+    }
+  } catch (e) { done.push(`terminal launcher failed: ${(e as Error).message.split('\n')[0]}`); }
+  return done;
+}
diff --git a/cli/serve.ts b/cli/serve.ts
index f5f08c0..6407728 100644
--- a/cli/serve.ts
+++ b/cli/serve.ts
@@ -28,6 +28,7 @@ import { androidSdk, detectTools } from './lib/tools';
 import { compiled, pickCallEnv, runCommand, type RunOptions, type Running } from './lib/runner';
 import { inputSchema, notSentProp, type ToolDef, TOOLS, toArgv, validateInput } from './mcp-tools';
 import * as rt from './lib/rt';
+import { ensureCliShim } from './lib/cli-shim';
 
 type Id = string | number;
 interface Msg { jsonrpc?: string; id?: Id | null; method?: string; params?: unknown }
@@ -613,6 +614,8 @@ export async function serveStdio(): Promise<void> {
   const send: Send = o => { process.stdout.write(JSON.stringify(o) + '\n'); };
   const session = new Session(send);
   console.error(`[storebound serve] ${pkg.version} on stdio (${DESKTOP_PROTOCOL}), waiting for session.hello`);
+  // the app's own CLI on the terminal PATH (lib/cli-shim.ts); only the bundled sidecar, after the handshake had its turn
+  if (compiled()) setTimeout(() => { for (const l of ensureCliShim()) console.error(`[storebound serve] ${l}`); }, 2000);
   let buf = '';
   const decoder = new TextDecoder();
   const reader = rt.stdinStream().getReader();
diff --git a/tests/cli-shim.test.ts b/tests/cli-shim.test.ts
new file mode 100644
index 0000000..036e4c5
--- /dev/null
+++ b/tests/cli-shim.test.ts
@@ -0,0 +1,47 @@
+import { describe, expect, test } from 'bun:test';
+import { mkdtempSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { ensureCliShim, onPath, SHIM_MARKER, shimPlan } from '../cli/lib/cli-shim';
+
+describe('desktop terminal launcher', () => {
+  test('per platform: file, content, PATH folder, profile', () => {
+    const w = shimPlan({ exe: 'C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe', platform: 'win32', home: 'C:\\Users\\a', env: { LOCALAPPDATA: 'C:\\Users\\a\\AppData\\Local' } });
+    expect(w.file.endsWith('storebound.cmd')).toBe(true);
+    expect(w.content).toContain('"C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe" %*');
+    expect(w.skip).toBeNull();
+    const m = shimPlan({ exe: "/Applications/store'bound.app/Contents/MacOS/storebound", platform: 'darwin', home: '/Users/a', env: {} });
+    expect(m.content).toContain(`exec '/Applications/store'\\''bound.app/Contents/MacOS/storebound' "$@"`);
+    expect(m.profile!.endsWith('.zprofile')).toBe(true);
+    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/home/a', env: {} }).profile!.endsWith('.profile')).toBe(true);
+  });
+  test('skips AppImage runs and the opt-out', () => {
+    expect(shimPlan({ exe: '/tmp/.mount_sbX/usr/bin/storebound', platform: 'linux', home: '/h', env: {} }).skip).toContain('AppImage');
+    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/h', env: { STOREBOUND_NO_CLI_SHIM: '1' } }).skip).toContain('STOREBOUND_NO_CLI_SHIM');
+  });
+  test('onPath: trailing slashes, case on Windows only', () => {
+    expect(onPath('C:\\A\\bin', 'c:\\a\\bin\\;D:\\x', 'win32')).toBe(true);
+    expect(onPath('/h/.local/bin', '/usr/bin:/h/.local/bin/', 'linux')).toBe(true);
+    expect(onPath('/h/.local/bin', '/usr/bin:/H/.local/bin', 'linux')).toBe(false);
+  });
+  test('writes once, rewrites a moved app, never touches a file that is not ours, adds the profile line once', () => {
+    const home = mkdtempSync(join(tmpdir(), 'sb-shim-'));
+    const env = { PATH: '/usr/bin' };
+    const first = ensureCliShim('/opt/a/storebound', 'linux', env, home);
+    expect(first.join('\n')).toContain('terminal launcher written');
+    expect(first.join('\n')).toContain('added ~/.local/bin to PATH');
+    const file = join(home, '.local', 'bin', 'storebound');
+    expect(readFileSync(file, 'utf8')).toContain(SHIM_MARKER);
+    expect(ensureCliShim('/opt/a/storebound', 'linux', env, home).join()).toContain('up to date');
+    expect(ensureCliShim('/opt/b/storebound', 'linux', env, home).join()).toContain('written');
+    expect(readFileSync(file, 'utf8')).toContain('/opt/b/storebound');
+    expect(readFileSync(join(home, '.profile'), 'utf8').split(SHIM_MARKER).length - 1).toBe(2 - 1);
+    writeFileSync(file, '#!/bin/sh\nexec npm-storebound "$@"\n');
+    expect(ensureCliShim('/opt/c/storebound', 'linux', env, home).join()).toContain('is not ours');
+    expect(readFileSync(file, 'utf8')).toContain('npm-storebound');
+    if (process.platform === 'win32') return; // a C:\ temp folder has a colon: no POSIX PATH can name it
+    const home2 = mkdtempSync(join(tmpdir(), 'sb-shim-'));
+    mkdirSync(join(home2, '.local', 'bin'), { recursive: true });
+    expect(ensureCliShim('/opt/a/storebound', 'linux', { PATH: `/usr/bin:${join(home2, '.local', 'bin')}` }, home2).join()).not.toContain('PATH');
+  });
+});

From 36ef9c2c5c199ea152e79bb0866551627342bab5 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 6 Nov 2026 21:04:14 +0700
Subject: [PATCH 227/255] tests: placeholder home folders in the launcher test
 (scrub)

---
 tests/cli-shim.test.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tests/cli-shim.test.ts b/tests/cli-shim.test.ts
index 036e4c5..c515923 100644
--- a/tests/cli-shim.test.ts
+++ b/tests/cli-shim.test.ts
@@ -6,14 +6,14 @@ import { ensureCliShim, onPath, SHIM_MARKER, shimPlan } from '../cli/lib/cli-shi
 
 describe('desktop terminal launcher', () => {
   test('per platform: file, content, PATH folder, profile', () => {
-    const w = shimPlan({ exe: 'C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe', platform: 'win32', home: 'C:\\Users\\a', env: { LOCALAPPDATA: 'C:\\Users\\a\\AppData\\Local' } });
+    const w = shimPlan({ exe: 'C:\\Users\\you\\AppData\\Local\\storebound\\storebound.exe', platform: 'win32', home: 'C:\\Users\\you', env: { LOCALAPPDATA: 'C:\\Users\\you\\AppData\\Local' } });
     expect(w.file.endsWith('storebound.cmd')).toBe(true);
-    expect(w.content).toContain('"C:\\Users\\a\\AppData\\Local\\storebound\\storebound.exe" %*');
+    expect(w.content).toContain('"C:\\Users\\you\\AppData\\Local\\storebound\\storebound.exe" %*');
     expect(w.skip).toBeNull();
-    const m = shimPlan({ exe: "/Applications/store'bound.app/Contents/MacOS/storebound", platform: 'darwin', home: '/Users/a', env: {} });
+    const m = shimPlan({ exe: "/Applications/store'bound.app/Contents/MacOS/storebound", platform: 'darwin', home: '/Users/you', env: {} });
     expect(m.content).toContain(`exec '/Applications/store'\\''bound.app/Contents/MacOS/storebound' "$@"`);
     expect(m.profile!.endsWith('.zprofile')).toBe(true);
-    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/home/a', env: {} }).profile!.endsWith('.profile')).toBe(true);
+    expect(shimPlan({ exe: '/usr/bin/storebound', platform: 'linux', home: '/home/you', env: {} }).profile!.endsWith('.profile')).toBe(true);
   });
   test('skips AppImage runs and the opt-out', () => {
     expect(shimPlan({ exe: '/tmp/.mount_sbX/usr/bin/storebound', platform: 'linux', home: '/h', env: {} }).skip).toContain('AppImage');

From d05294ebcd94ccb0dd850c0198a3178551954196 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Fri, 6 Nov 2026 21:07:22 +0700
Subject: [PATCH 228/255] apple submit/resubmit --platform macos:
 apple.macos.noIap leaves IAPs out, no Game Center switch without
 apple.macos.gameCenter; pitfalls #128

---
 CHANGELOG.md                   |   1 +
 bun.lock                       | 830 +++++++++++++++++++++++++++++++++
 cli/apple/resubmit.ts          |   9 +-
 cli/lib/config.ts              |   8 +
 skills/store-pitfalls/SKILL.md |   9 +
 tests/resubmit.test.ts         |  20 +
 6 files changed, 875 insertions(+), 2 deletions(-)
 create mode 100644 bun.lock

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 38eb3e2..978d68e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,7 @@
 ## Unreleased
 
 - Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
+- `apple resubmit` / `apple submit --platform macos`: `apple.macos.noIap` leaves every in-app purchase out of the macOS submission and, without `apple.macos.gameCenter: true`, the Game Center switch is not touched (no `gameCenterAppVersions` call); the dry run names what it left out and why (pitfalls #128).
 
 ## 0.8.67 · 2026-11-03
 
diff --git a/bun.lock b/bun.lock
new file mode 100644
index 0000000..f43b978
--- /dev/null
+++ b/bun.lock
@@ -0,0 +1,830 @@
+{
+  "lockfileVersion": 2,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "storebound",
+      "devDependencies": {
+        "@mermaid-js/mermaid-cli": "12.0.0",
+        "@phosphor-icons/core": "2.1.1",
+        "@types/bun": "1.3.0",
+        "playwright": "1.55.0",
+        "playwright-core": "1.55.0",
+        "simple-icons": "16.34.0",
+        "typescript": "5.9.3",
+      },
+      "peerDependencies": {
+        "playwright": ">=1.45",
+      },
+      "optionalPeers": [
+        "playwright",
+      ],
+    },
+    "apps/desktop": {
+      "name": "@storebound/desktop",
+      "version": "0.8.67",
+      "dependencies": {
+        "@phosphor-icons/react": "^2.1.10",
+        "@tauri-apps/api": "^2.12.0",
+        "@visx/axis": "^4.0.0",
+        "@visx/curve": "^4.0.0",
+        "@visx/event": "^4.0.0",
+        "@visx/gradient": "^4.0.0",
+        "@visx/group": "^4.0.0",
+        "@visx/responsive": "^4.0.0",
+        "@visx/scale": "^4.0.0",
+        "@visx/shape": "^4.0.0",
+        "@visx/tooltip": "^4.0.0",
+        "react": "^19.2.0",
+        "react-dom": "^19.2.0",
+      },
+      "devDependencies": {
+        "@tauri-apps/cli": "^2.12.1",
+        "@types/react": "^19.2.0",
+        "@types/react-dom": "^19.2.0",
+        "@vitejs/plugin-react": "^4.7.0",
+        "typescript": "5.9.3",
+        "vite": "^6.3.0",
+      },
+    },
+  },
+  "packages": {
+    "@antfu/install-pkg": ["@antfu/install-pkg@2.1.0", "", { "dependencies": { "package-manager-detector": "^1.8.0", "tinyexec": "^1.3.1" } }, "sha512-sdg9NxU3zR4Mnawfbc/x6GB5Wf17WYud5qOuEuxXjaKpYpMkISSJEjItGebXJ2bQ4DIcly4NYH23mtkGJjvKUw=="],
+
+    "@babel/code-frame": ["@babel/code-frame@7.29.7", "", { "dependencies": { "@babel/helper-validator-identifier": "^7.29.7", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw=="],
+
+    "@babel/compat-data": ["@babel/compat-data@7.29.7", "", {}, "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg=="],
+
+    "@babel/core": ["@babel/core@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.7", "@babel/helper-compilation-targets": "^7.29.7", "@babel/helper-module-transforms": "^7.29.7", "@babel/helpers": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/template": "^7.29.7", "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA=="],
+
+    "@babel/generator": ["@babel/generator@7.29.8", "", { "dependencies": { "@babel/parser": "^7.29.8", "@babel/types": "^7.29.8", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" } }, "sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg=="],
+
+    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.29.7", "", { "dependencies": { "@babel/compat-data": "^7.29.7", "@babel/helper-validator-option": "^7.29.7", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g=="],
+
+    "@babel/helper-globals": ["@babel/helper-globals@7.29.7", "", {}, "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA=="],
+
+    "@babel/helper-module-imports": ["@babel/helper-module-imports@7.29.7", "", { "dependencies": { "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g=="],
+
+    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.29.7", "", { "dependencies": { "@babel/helper-module-imports": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7", "@babel/traverse": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg=="],
+
+    "@babel/helper-plugin-utils": ["@babel/helper-plugin-utils@7.29.7", "", {}, "sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw=="],
+
+    "@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.11", "", {}, "sha512-snZbO7MEDOof+hvNa97EjEY7qD7h2kwvQr5AJC3ZhQudKW5dnej6k3kP9NQV88hJwaS8vDqRLFo9rivLEhle2g=="],
+
+    "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
+
+    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.29.7", "", {}, "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw=="],
+
+    "@babel/helpers": ["@babel/helpers@7.29.10", "", { "dependencies": { "@babel/template": "^7.29.7", "@babel/types": "^7.29.8" } }, "sha512-EMCx3AGZ3WfAl6ht7AyQoPm2Lh+BGYEMdc4Q6Hf7uSCDOZFuLq44qNwL+iaim8VlyYhRAo4X43+weadK8ZB4Yg=="],
+
+    "@babel/parser": ["@babel/parser@7.29.11", "", { "dependencies": { "@babel/types": "^7.29.11" }, "bin": "./bin/babel-parser.js" }, "sha512-OZ6+oaK7GMyg3IfCpj8JOmn8n+w2rJbDT0LLfVDTLb1ZFeKDh3AiNELgCMUw175IJHSkLl74hG0M0VLsvx+gag=="],
+
+    "@babel/plugin-transform-react-jsx-self": ["@babel/plugin-transform-react-jsx-self@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-TL0hMc9xzy86VD31nUiwzd5otRAcyEPcsegCxolO0PvcXuH1v0kECe/UIznYFihpkvU5wg/jk4v0TTEFfm53fw=="],
+
+    "@babel/plugin-transform-react-jsx-source": ["@babel/plugin-transform-react-jsx-source@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-06IyK09H3wi4cGbhDBwp5gUGo0IKtnYa8tyTiephirPCK6fbobVGiXMMI5zLQ4aKEYP3wZ3ArU44o+8KMrSG/Q=="],
+
+    "@babel/template": ["@babel/template@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg=="],
+
+    "@babel/traverse": ["@babel/traverse@7.29.10", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.8", "@babel/helper-globals": "^7.29.7", "@babel/parser": "^7.29.9", "@babel/template": "^7.29.7", "@babel/types": "^7.29.8", "debug": "^4.3.1" } }, "sha512-B3lYAs2nkKskbgQ1nfy8Ma9ao9Q1rntTAQHrzzyDuj+TSO+X3le6PfWwqDvodsb+OumE10eMFfuMCTQSQ5iuIQ=="],
+
+    "@babel/types": ["@babel/types@7.29.11", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.11", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-WCsemW40Cpc6gouC1SrY6PBaZ+oLRlEVY9XBvZBI7il/HyUrb2nJ505wE1MHEFyDZNnrWDEuy4jL50WVHfTTSQ=="],
+
+    "@braintree/sanitize-url": ["@braintree/sanitize-url@7.1.2", "", {}, "sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA=="],
+
+    "@chevrotain/cst-dts-gen": ["@chevrotain/cst-dts-gen@13.2.0", "", { "dependencies": { "@chevrotain/gast": "13.2.0", "@chevrotain/types": "13.2.0" } }, "sha512-bA9dvWlhAUcHkNwU+8w9yiUxJPlj/Lm3VqS7MD+NbIR/7LmpNLuK/AWNFdCo/T3SK5ND0/UHf3IJvl/Jn/i6yg=="],
+
+    "@chevrotain/gast": ["@chevrotain/gast@13.2.0", "", { "dependencies": { "@chevrotain/types": "13.2.0" } }, "sha512-bCARdAsG+eEbOveSXcOAC7pVxA04I1ionzeMOwIYf5NX7SaS7zgn4Dgug2BSqoL+iyKeMNSorQjsFSHJHsCNwg=="],
+
+    "@chevrotain/regexp-to-ast": ["@chevrotain/regexp-to-ast@13.2.0", "", {}, "sha512-kxpUkLtiaK09ph+dib+Yvm+3sWSnuwlo25gqfKRgTPNmF6H7uW4gVkMjaRdtnN783S9sM6vUNWh9CsxYX4QwKw=="],
+
+    "@chevrotain/types": ["@chevrotain/types@13.2.0", "", {}, "sha512-7qrYHRlKfWf2AvBfJi5eVOrKAkbxvMFsy/iIHTGIiApNcEecCaVIdR+mIQhyCBsTDJxBz4JWXHMo6krbhR9hVg=="],
+
+    "@chevrotain/utils": ["@chevrotain/utils@13.2.0", "", {}, "sha512-SzKYY68rseOrb9KILVzPsl6SjkQtdWw01SRGB5aCVI5kFcHltQsOYV3JB0Ffst72DgkvHCyDQ0NLwxtmCCf97Q=="],
+
+    "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.25.12", "", { "os": "aix", "cpu": "ppc64" }, "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA=="],
+
+    "@esbuild/android-arm": ["@esbuild/android-arm@0.25.12", "", { "os": "android", "cpu": "arm" }, "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg=="],
+
+    "@esbuild/android-arm64": ["@esbuild/android-arm64@0.25.12", "", { "os": "android", "cpu": "arm64" }, "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg=="],
+
+    "@esbuild/android-x64": ["@esbuild/android-x64@0.25.12", "", { "os": "android", "cpu": "x64" }, "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg=="],
+
+    "@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.25.12", "", { "os": "darwin", "cpu": "arm64" }, "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg=="],
+
+    "@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.25.12", "", { "os": "darwin", "cpu": "x64" }, "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA=="],
+
+    "@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.25.12", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg=="],
+
+    "@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.25.12", "", { "os": "freebsd", "cpu": "x64" }, "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ=="],
+
+    "@esbuild/linux-arm": ["@esbuild/linux-arm@0.25.12", "", { "os": "linux", "cpu": "arm" }, "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw=="],
+
+    "@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.25.12", "", { "os": "linux", "cpu": "arm64" }, "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ=="],
+
+    "@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.25.12", "", { "os": "linux", "cpu": "ia32" }, "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA=="],
+
+    "@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng=="],
+
+    "@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw=="],
+
+    "@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.25.12", "", { "os": "linux", "cpu": "ppc64" }, "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA=="],
+
+    "@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w=="],
+
+    "@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.25.12", "", { "os": "linux", "cpu": "s390x" }, "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg=="],
+
+    "@esbuild/linux-x64": ["@esbuild/linux-x64@0.25.12", "", { "os": "linux", "cpu": "x64" }, "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw=="],
+
+    "@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg=="],
+
+    "@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.25.12", "", { "os": "none", "cpu": "x64" }, "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ=="],
+
+    "@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.25.12", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A=="],
+
+    "@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.25.12", "", { "os": "openbsd", "cpu": "x64" }, "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw=="],
+
+    "@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg=="],
+
+    "@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.25.12", "", { "os": "sunos", "cpu": "x64" }, "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w=="],
+
+    "@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.25.12", "", { "os": "win32", "cpu": "arm64" }, "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg=="],
+
+    "@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.25.12", "", { "os": "win32", "cpu": "ia32" }, "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ=="],
+
+    "@esbuild/win32-x64": ["@esbuild/win32-x64@0.25.12", "", { "os": "win32", "cpu": "x64" }, "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA=="],
+
+    "@floating-ui/core": ["@floating-ui/core@1.8.0", "", { "dependencies": { "@floating-ui/utils": "^0.2.12" } }, "sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ=="],
+
+    "@floating-ui/dom": ["@floating-ui/dom@1.8.0", "", { "dependencies": { "@floating-ui/core": "^1.8.0", "@floating-ui/utils": "^0.2.12" } }, "sha512-yXSrzeHZBTZadLOlfyhCkJHNeLJnHRnRInwdZ40L7ZiaAtrBwoYlsDrX3v5zB1Utk7CLfzcOVnVVWoXEky7Ceg=="],
+
+    "@floating-ui/react": ["@floating-ui/react@0.27.20", "", { "dependencies": { "@floating-ui/react-dom": "^2.1.9", "@floating-ui/utils": "^0.2.12", "tabbable": "^6.0.0" }, "peerDependencies": { "react": ">=17.0.0", "react-dom": ">=17.0.0" } }, "sha512-CMqMy7OaXl9W0eq1Uy7L7i2Y/anPvHmFmESd2CEw0t5YvZhcVCeo4MBevAmswRllX7Y2dEidA4ozGPunLSTQpw=="],
+
+    "@floating-ui/react-dom": ["@floating-ui/react-dom@2.1.9", "", { "dependencies": { "@floating-ui/dom": "^1.8.0" }, "peerDependencies": { "react": ">=16.8.0", "react-dom": ">=16.8.0" } }, "sha512-JDjEFGCpImxDCA7JJKviA0M9+RtmJdj0m/NVU5IMgBK+AmZouAQQ7/+2GLH0GXXY0YMw9oXPB8hKdbPYg5QLYg=="],
+
+    "@floating-ui/utils": ["@floating-ui/utils@0.2.12", "", {}, "sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww=="],
+
+    "@fontsource-variable/recursive": ["@fontsource-variable/recursive@5.3.0", "", {}, "sha512-4B4/lWCVeZgdbpJdIIU1sOVO/ECjjM673ohuxvyQ6uCK41TPlGzKRNokKY84noUgGYnpwc//MW4k2KrOMY19jQ=="],
+
+    "@fontsource/open-sans": ["@fontsource/open-sans@5.3.0", "", {}, "sha512-V1bdMlGNyZrJwzrdusshMOw2YR0aqYDL7kOo9dkxUEKl8dFv66A9HLckOOXl572sG/7ohhDQrCrTFGSn9LZcSw=="],
+
+    "@fortawesome/fontawesome-free": ["@fortawesome/fontawesome-free@7.3.1", "", {}, "sha512-wmglKKPDIkgV3aWlZzWECCPoGIkYCulzBwxG9+w7rc5BGapZ6cPMpoPOT8k36J0Ni7PPX6c/rsoMWfS4d1MUMg=="],
+
+    "@headlessui/react": ["@headlessui/react@2.2.10", "", { "dependencies": { "@floating-ui/react": "^0.26.16", "@react-aria/focus": "^3.20.2", "@react-aria/interactions": "^3.25.0", "@tanstack/react-virtual": "^3.13.9", "use-sync-external-store": "^1.5.0" }, "peerDependencies": { "react": "^18 || ^19 || ^19.0.0-rc", "react-dom": "^18 || ^19 || ^19.0.0-rc" } }, "sha512-5pVLNK9wlpxTUTy9GpgbX/SdcRh+HBnPktjM2wbiLTH4p+2EPHBO1aoSryUCuKUIItdDWO9ITlhUL8UnUN/oIA=="],
+
+    "@headlessui/tailwindcss": ["@headlessui/tailwindcss@0.2.2", "", { "peerDependencies": { "tailwindcss": "^3.0 || ^4.0" } }, "sha512-xNe42KjdyA4kfUKLLPGzME9zkH7Q3rOZ5huFihWNWOQFxnItxPB3/67yBI8/qBfY8nwBRx5GHn4VprsoluVMGw=="],
+
+    "@iconify/types": ["@iconify/types@2.0.0", "", {}, "sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg=="],
+
+    "@iconify/utils": ["@iconify/utils@3.1.7", "", { "dependencies": { "@antfu/install-pkg": "^2.0.1", "@iconify/types": "^2.0.0", "import-meta-resolve": "^4.2.0" } }, "sha512-JZHlwdID+dy+lTgbYC8NEC4zeugqeYsc6jewvzb4c58kHauJn+X7rNwQjxz5p2qSjqaEeQoLkCIQ9v/H4PK0/w=="],
+
+    "@internationalized/date": ["@internationalized/date@3.12.4", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-M1dEn4c1U1HsSlaVR8upZtSqvXrTkHDfv18H01uCSJyjVLDxnBR38v/fMxecmlwXKR4i9HeZcmgQAPE6A+aGJQ=="],
+
+    "@internationalized/number": ["@internationalized/number@3.6.9", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-GgWy2caO/+hV9sT/oCTWGHvbjmJMPT9kkXzoKRLnkEq7adghhR7UprhvY9sXrKfrp3NcDfhF6QQHXR1KfQbB8g=="],
+
+    "@internationalized/string": ["@internationalized/string@3.2.10", "", { "dependencies": { "@swc/helpers": "^0.5.0" } }, "sha512-PDx6//vHSpRnHfxqMqto11zQvhsaU74O3mKv2F/0eicGZcl9NLjQmGlbHz/LsJh5tLKp4A4L7ZVTzN1/MmMTvA=="],
+
+    "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.13", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA=="],
+
+    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
+
+    "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="],
+
+    "@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.6.0", "", {}, "sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw=="],
+
+    "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],
+
+    "@mermaid-js/layout-tidy-tree": ["@mermaid-js/layout-tidy-tree@1.0.1", "", { "dependencies": { "d3": "^7.9.0" }, "peerDependencies": { "mermaid": "^11.0.2 || ^12.0.0" } }, "sha512-suZgFgQQHYuAxiEiNVgPJwOoXi/keXV6DghCL3rT4K9DmX7xYQ2XZI2suiBVs/fj1gn/OoXIWB2DFSmeY7trvw=="],
+
+    "@mermaid-js/mermaid-cli": ["@mermaid-js/mermaid-cli@12.0.0", "", { "dependencies": { "@fontsource-variable/recursive": "^5.3.0", "@fontsource/open-sans": "^5.3.0", "@fortawesome/fontawesome-free": "^7.0.1", "@mermaid-js/mermaid-zenuml": "^1.0.1", "chalk": "^6.0.0", "commander": "^15.0.0", "import-meta-resolve": "^4.1.0", "katex": "^0.16.25", "mermaid": "^12.0.0", "p-limit": "^7.0.0" }, "optionalDependencies": { "@mermaid-js/layout-tidy-tree": "^1.0.1" }, "peerDependencies": { "puppeteer": "^25.0.0" }, "bin": { "mmdc": "src/cli.js" } }, "sha512-AA18uaJtWVlM5PX7RGBxrVrqTTesmEaWCmfV+l5RkD6A1CnpUAtPpL+wWhkQAZrDSfyAw5FZyj084MsnDIPY3g=="],
+
+    "@mermaid-js/mermaid-zenuml": ["@mermaid-js/mermaid-zenuml@1.0.1", "", { "dependencies": { "@zenuml/core": "^3.47.9" }, "peerDependencies": { "mermaid": "^10 || ^11 || ^12" } }, "sha512-O5DiRODoFVNgugOVloxcDXmd+bXe/sbGlDh3onnzuE4EWtgTWwaAlWuPPOXbU9QESsztnD4Gtnu7dr+tYLFE0A=="],
+
+    "@mermaid-js/parser": ["@mermaid-js/parser@2.0.1", "", { "dependencies": { "@chevrotain/types": "~13.2.0" } }, "sha512-j37dj/h6p6pots1L7pLPPNuABEEu9WP4OYg9pW1g+nYG331j0+3canE9OagtYdytYvdSAMG+2fKU5cxep6LgjA=="],
+
+    "@napi-rs/canvas": ["@napi-rs/canvas@0.1.100", "", { "optionalDependencies": { "@napi-rs/canvas-android-arm64": "0.1.100", "@napi-rs/canvas-darwin-arm64": "0.1.100", "@napi-rs/canvas-darwin-x64": "0.1.100", "@napi-rs/canvas-linux-arm-gnueabihf": "0.1.100", "@napi-rs/canvas-linux-arm64-gnu": "0.1.100", "@napi-rs/canvas-linux-arm64-musl": "0.1.100", "@napi-rs/canvas-linux-riscv64-gnu": "0.1.100", "@napi-rs/canvas-linux-x64-gnu": "0.1.100", "@napi-rs/canvas-linux-x64-musl": "0.1.100", "@napi-rs/canvas-win32-arm64-msvc": "0.1.100", "@napi-rs/canvas-win32-x64-msvc": "0.1.100" } }, "sha512-xglYA6q3XO5P3BNJYxVZ1IV7DLVjp1Py6nwag88YntrS+3vKHyYcMqXVS4ZztJmwz2uGvz1FWhI/4LgbR5uQDA=="],
+
+    "@napi-rs/canvas-android-arm64": ["@napi-rs/canvas-android-arm64@0.1.100", "", { "os": "android", "cpu": "arm64" }, "sha512-hjhCKhntPv9+t4ckHymdx0phYNcVW+GKQR6Lzw2zE+pOVjOplSmtx9nNNknTjbEDLcuLZqA1y8ufKg1XfgftzQ=="],
+
+    "@napi-rs/canvas-darwin-arm64": ["@napi-rs/canvas-darwin-arm64@0.1.100", "", { "os": "darwin", "cpu": "arm64" }, "sha512-2PcswRaC7Ly645DGt88///zuFDhJxJYdKAs1uU3mfk1atYkXufgcgLfBpk6Tm12nCQBaNt1wpybuPZ4qOhTo8A=="],
+
+    "@napi-rs/canvas-darwin-x64": ["@napi-rs/canvas-darwin-x64@0.1.100", "", { "os": "darwin", "cpu": "x64" }, "sha512-ePNZtj7pNIva/siZMg+HmbeozkIjqUIYdoymH8HaA3qK7LfzFN4WMBM8G6HQ9ZC+H3+Dnn5pqtiXpgLykaPOhw=="],
+
+    "@napi-rs/canvas-linux-arm-gnueabihf": ["@napi-rs/canvas-linux-arm-gnueabihf@0.1.100", "", { "os": "linux", "cpu": "arm" }, "sha512-d5cDB48oWFGU8/XPhUOFAlySgb/VAu7D+s8fi55K1Pcfg8aPplHWqMgibhVLU8ky7Pyg/fuiVLz4Nf3JrSTuUA=="],
+
+    "@napi-rs/canvas-linux-arm64-gnu": ["@napi-rs/canvas-linux-arm64-gnu@0.1.100", "", { "os": "linux", "cpu": "arm64" }, "sha512-rDxgxRu69RvDlX/bh9o22DxLsGr8EqsNgotL9+RwQE1S0b0cqeatqsw6aW45mukm0B42DIAaAacKaYQ8cqS1nw=="],
+
+    "@napi-rs/canvas-linux-arm64-musl": ["@napi-rs/canvas-linux-arm64-musl@0.1.100", "", { "os": "linux", "cpu": "arm64" }, "sha512-K3mDW66N+xT2/V439u1alFANiBUjdEx2gLiNYnCmUsva5jZMxWTjafBYwTzYK+EMFMHrUoabuU+T1BIP5CgbYQ=="],
+
+    "@napi-rs/canvas-linux-riscv64-gnu": ["@napi-rs/canvas-linux-riscv64-gnu@0.1.100", "", { "os": "linux", "cpu": "none" }, "sha512-mooqUBTIsccZpnoQC4NgrC1v6C1vof39etLNMnBwCY+p0gajWJvAHLGQ6g/gGyS5YrpDW+GefSN4+Cvcr08UWw=="],
+
+    "@napi-rs/canvas-linux-x64-gnu": ["@napi-rs/canvas-linux-x64-gnu@0.1.100", "", { "os": "linux", "cpu": "x64" }, "sha512-1eCvkDCazm7FFhsT7DfGOdSaHgZVK3bt/dSBl5EWHOWmnz+I7j8tPseJqqD81NF+MH21jKUK4wQSDjN0mdhnTg=="],
+
+    "@napi-rs/canvas-linux-x64-musl": ["@napi-rs/canvas-linux-x64-musl@0.1.100", "", { "os": "linux", "cpu": "x64" }, "sha512-20arT6lnI19S68qNlii73TSEDbECNgzMz2EpldC1V3mZFuRkeujXkcebRk0LRJe9SEUAooYiLokfMViY8IX7yA=="],
+
+    "@napi-rs/canvas-win32-arm64-msvc": ["@napi-rs/canvas-win32-arm64-msvc@0.1.100", "", { "os": "win32", "cpu": "arm64" }, "sha512-DZFFT1wIAg37LJw37yhMRFfjATd3vTQzjZ1Yki8u2vhO6Hi5VE6BVaGQ1aaDu7xb4iMErz+9EOwjpS7xcxFeBw=="],
+
+    "@napi-rs/canvas-win32-x64-msvc": ["@napi-rs/canvas-win32-x64-msvc@0.1.100", "", { "os": "win32", "cpu": "x64" }, "sha512-MyT1j3mHC2+Lu4pBi9mKyMJhtP6U7k7EldY7sj/uS5gJA65gTXt8MefJQXLJo5d/vZbuWmfxzkEUNc/urV3pHA=="],
+
+    "@napi-rs/lzma-linux-x64-gnu": ["@napi-rs/lzma-linux-x64-gnu@1.5.1", "", { "os": "linux", "cpu": "x64" }, "sha512-oTXEIha4SsuXdTA4Iyskj0kpdx2yVXdhd75c2v3xGrHFfVMsbhTPZU/nMPL4sWKo4pBHm3aucLaqGlF696dTyQ=="],
+
+    "@phosphor-icons/core": ["@phosphor-icons/core@2.1.1", "", {}, "sha512-v4ARvrip4qBCImOE5rmPUylOEK4iiED9ZyKjcvzuezqMaiRASCHKcRIuvvxL/twvLpkfnEODCOJp5dM4eZilxQ=="],
+
+    "@phosphor-icons/react": ["@phosphor-icons/react@2.1.10", "", { "peerDependencies": { "react": ">= 16.8", "react-dom": ">= 16.8" } }, "sha512-vt8Tvq8GLjheAZZYa+YG/pW7HDbov8El/MANW8pOAz4eGxrwhnbfrQZq0Cp4q8zBEu8NIhHdnr+r8thnfRSNYA=="],
+
+    "@puppeteer/browsers": ["@puppeteer/browsers@3.2.6", "", { "dependencies": { "modern-tar": "^0.8.6", "yargs": "^18.0.0" }, "peerDependencies": { "proxy-agent": ">=8.0.1", "yauzl": "^2.10.0 || ^3.4.0" }, "optionalPeers": ["proxy-agent", "yauzl"], "bin": { "browsers": "lib/main-cli.js" } }, "sha512-MJP29gVoHznmqmwhH1tlZqzfeQ3aylTpSSa6WKZXtkwYUH02i9imBmWGTyZrbnAou5paX78SE4jMAUqnEPf8ug=="],
+
+    "@react-aria/focus": ["@react-aria/focus@3.22.1", "", { "dependencies": { "@swc/helpers": "^0.5.0", "react-aria": "^3.48.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1", "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-CPxtkyrBi/HYY5P3lE/57sQ6qfa0lN8E55TOm89H0kNGv0lKt+/0zP7lWERzBjRr5IxBVrQX4gFEowBN52LPaA=="],
+
+    "@react-aria/interactions": ["@react-aria/interactions@3.28.1", "", { "dependencies": { "@react-types/shared": "^3.34.0", "@swc/helpers": "^0.5.0", "react-aria": "^3.48.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1", "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-Bqb+HrD5I5MHS2SKBhISYqo2SW8Y2dfzgF/Y1lIJq7xqLxheo9vzxPGEHhz+XzkgGfoqEJx8A6a3C7uiqS3HWA=="],
+
+    "@react-types/shared": ["@react-types/shared@3.37.0", "", { "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-VNlZuifu4tHdxWPfHvoMfKsHA9kVTCGkduv5vKVTdinm8wHFJNhyVB5RzIMiRFj0q3RKoCbP68u2zaoBSiFueg=="],
+
+    "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-beta.27", "", {}, "sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA=="],
+
+    "@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.66.0", "", { "os": "android", "cpu": "arm" }, "sha512-7y4XeoUHPecjfUDRmap8U0q6bjfLAPn7uOGT8BKyqy8uNDOjsGS8rlBhOx6sZLVwwjN6hapvGl2mW9/IS6UNww=="],
+
+    "@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.66.0", "", { "os": "android", "cpu": "arm64" }, "sha512-e8WugYZXpgqrlMXLCudYVRAxAcK7AIY36JxRDwFRD38L9q62G1VsEUW6ijXxzjxYjNB8i1zo3B/ycIQ/qjLC/Q=="],
+
+    "@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.66.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-6vkDCfyDjNLokh+Rt1D2KtNgFFMEPdkWha/mbtP4cSjh9xiN8T/JBS/A7nDYKjmMAXHrvR9J3AzUk2LtFbIBLg=="],
+
+    "@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.66.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-/mzZAX0+Q6eXxvkR0HB0RZCCrsbmFD8DpsvCQoMYABDfq/DjqkbfytuJ7GvZ4AhR/Mgis2fXbZrGqfbcK2Z5fA=="],
+
+    "@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.66.0", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-JQJx9E8tUjGqed1RevDmoHaS3V30ODdV8uyvGxlwd4K5se6bkPrMeltSybqAtpJ+ltDRfo7FORQaJG2Hd5nGog=="],
+
+    "@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.66.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-GEaUQQjMaG7X1304qMgqLjzCKv6CdDirzJSS+UqUs3xhJ9X2Kjzu0JDbLoUU42FWxwmZqz+SsgU1SlQv9GNRVA=="],
+
+    "@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.66.0", "", { "os": "linux", "cpu": "arm" }, "sha512-DgmAU9N0NhDQDzHgFUocDio7zRO8jR/nY/obDGvCR8zbJ6J77Fg6X49yPuExJUpYPbC82EOaRhG969pWzUSnHQ=="],
+
+    "@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.66.0", "", { "os": "linux", "cpu": "arm" }, "sha512-zG09YZ+sk/HoHq+P9gYB0EseQ3M20RbDuKGWey6fbiMDV1LxfXvhgSW9jDaCcvFPMgfLXpimzXY+UYvA8R2mLQ=="],
+
+    "@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.66.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-vlArhgyXbcVc1D4WZPoiYuqJIaMiSHBj6etRXua0KlfjlZeuiQyVAPYi0/N49O4mSp3u1iGUBLEjNa8ec81XZg=="],
+
+    "@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.66.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-RxJZtk0G87YPotDaRDvRqStV8cbqLSC5TroHvQHHKsqBg0ok64RxKgtXeFsa7FBcy7mb4crBrG3xK8USWIqWNA=="],
+
+    "@rollup/rollup-linux-loong64-gnu": ["@rollup/rollup-linux-loong64-gnu@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-qlGcw959PrLLkZhiBxF3OZ6SQvj+OKY85mCqGNgSRs4LZlDJ6ICqmz6UdxtINdhcXYwNIbZoapQVBAmZlD2hUQ=="],
+
+    "@rollup/rollup-linux-loong64-musl": ["@rollup/rollup-linux-loong64-musl@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-TvTI/7Cy0WvRA1SXgwzu6bwXBnMpmeT/ln5q7WvSpqmXy1VbmEnY8HVIDQNBiaHJvoWqRr0M4FNo7qiqtyMaFw=="],
+
+    "@rollup/rollup-linux-ppc64-gnu": ["@rollup/rollup-linux-ppc64-gnu@4.66.0", "", { "os": "linux", "cpu": "ppc64" }, "sha512-UZEDkSoDRZ50NyLj70nO6mpIK3dvs2cPTTvQb1bA/PBDmr9fvn5KiESuGfh6srd7Zi6Lt9Sv2sVrFr1QoHLvPQ=="],
+
+    "@rollup/rollup-linux-ppc64-musl": ["@rollup/rollup-linux-ppc64-musl@4.66.0", "", { "os": "linux", "cpu": "ppc64" }, "sha512-VRbxTvagLh3HRcysx1CNq+HHcvJbSebNI6fCbk7jwmmWHkXjrSIV3igXBpRHUTFdg0pagWGu50xoSZXnrZHjVQ=="],
+
+    "@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-uWdJpvYqh0LE/i+YBL3sMX0a2kUkICENjmrPmyBmMOFc3jMrs6MSQH/pMD+VIpGEoUcr3XkHGLLfymzIqPSRRg=="],
+
+    "@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.66.0", "", { "os": "linux", "cpu": "none" }, "sha512-3FUd88pxgWAjK60OgCrika1AcNG+u8zaCdWjg4TlcZTDkt5TGyci8ZU64l3OJ9ax0MEjw3P80B/3PoSQDCLwJQ=="],
+
+    "@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.66.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-qT2rMmgyej62g5AdwktK+Bt2lBu497pzWZe12TTQ5JmZjOYPnEwcPEAOSLTBxBV+6gIES75rXm219v/QkT397A=="],
+
+    "@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.66.0", "", { "os": "linux", "cpu": "x64" }, "sha512-E46rnZgp7J84Qwe8RMlF+rgimnDo/9fuiGbUArGB0ZkMWf97O7yeSCfKls5x/YJOF0RcuSe9RctuKe1hlxICiA=="],
+
+    "@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.66.0", "", { "os": "linux", "cpu": "x64" }, "sha512-Uz1HiZe+qBzqgdPsON+z0wRx3WdATuyzwvGT6cr2VZVrqqko0ZJVfkrQJtwDMuDcAfXYdo7XucaxJ7lTLjEcgg=="],
+
+    "@rollup/rollup-openbsd-x64": ["@rollup/rollup-openbsd-x64@4.66.0", "", { "os": "openbsd", "cpu": "x64" }, "sha512-Ph7TX3Ex5qdfcb7Tc6eEPugVkRfJ501eTovO4T5029YObfpZ7dzn3RiwpFvGp50nk2QUhvBMZ0PFGlEj6pOYTg=="],
+
+    "@rollup/rollup-openharmony-arm64": ["@rollup/rollup-openharmony-arm64@4.66.0", "", { "os": "none", "cpu": "arm64" }, "sha512-nZYPEya7ZkeNxUEiF7qmNZbyLTyRN3MK5cO22KqsaoneUzXJuzBIQRw+7BEQy9LGj2O5vrCE9V3EpK06FYo1tQ=="],
+
+    "@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.66.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-u7aTfS3R6C4hRsqXSzaO6qLZYLVuMkHMvcWlux4IM8IJif1VCl2cgPBSo5gSNoFoStQypQP+qwq8W1IyFBf1QQ=="],
+
+    "@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.66.0", "", { "os": "win32", "cpu": "ia32" }, "sha512-e+i9ueHrH1Bafb0cf0woAIVJbYcoC8vRaD+vz+Xi8w6jz9cYJSV3vyKO6ELGSZ6g4W4MJOm2WPLN4/nQf77h7w=="],
+
+    "@rollup/rollup-win32-x64-gnu": ["@rollup/rollup-win32-x64-gnu@4.66.0", "", { "os": "win32", "cpu": "x64" }, "sha512-KfTCbrtr2zXTqH2E1F+uYlFTrYibxHKqPAHobpd8Kfg49cEHmuHebOidCTDRgqG1suaPFX7oejFQeGE71zWKfA=="],
+
+    "@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.66.0", "", { "os": "win32", "cpu": "x64" }, "sha512-xA+neBh1bqkqaS3b48T2UHZnDsTIpb9B0h+TdBzynjF/ymCpYndhfY10RqW0qSKB1HqqQA83mINVhAdwA+mETg=="],
+
+    "@storebound/desktop": ["@storebound/desktop@workspace:apps/desktop"],
+
+    "@swc/helpers": ["@swc/helpers@0.5.23", "", { "dependencies": { "tslib": "^2.8.0" } }, "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw=="],
+
+    "@tanstack/react-virtual": ["@tanstack/react-virtual@3.14.23", "", { "dependencies": { "@tanstack/virtual-core": "3.19.8" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0", "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-Oyy58qQwdaQieA+A4WUDtnh9D1rv5FZvGdw8og9Xeyh88V6HH94vMSyV5i9ATIbYNe9t5Ix0WXRo9NOTpHDkYw=="],
+
+    "@tanstack/virtual-core": ["@tanstack/virtual-core@3.19.8", "", {}, "sha512-Oz/SYBo/aVPyQkwtOw7Q23myITUgFIof2glQqydYJAPL6mH2SkJDkvDKZTklB+7gv5jGLZQhyTcd7SO1A1EODQ=="],
+
+    "@tauri-apps/api": ["@tauri-apps/api@2.12.4", "", {}, "sha512-pVmfis+4zT8H0Qhp3xPZx9Ju7kpzvA6rr/PSJPyuwfvucTQ8sVt61NYU9KMkK703UFlYadFmjKA4HhybOtN0gg=="],
+
+    "@tauri-apps/cli": ["@tauri-apps/cli@2.12.4", "", { "optionalDependencies": { "@tauri-apps/cli-darwin-arm64": "2.12.4", "@tauri-apps/cli-darwin-x64": "2.12.4", "@tauri-apps/cli-linux-arm-gnueabihf": "2.12.4", "@tauri-apps/cli-linux-arm64-gnu": "2.12.4", "@tauri-apps/cli-linux-arm64-musl": "2.12.4", "@tauri-apps/cli-linux-riscv64-gnu": "2.12.4", "@tauri-apps/cli-linux-x64-gnu": "2.12.4", "@tauri-apps/cli-linux-x64-musl": "2.12.4", "@tauri-apps/cli-win32-arm64-msvc": "2.12.4", "@tauri-apps/cli-win32-ia32-msvc": "2.12.4", "@tauri-apps/cli-win32-x64-msvc": "2.12.4" }, "bin": { "tauri": "tauri.js" } }, "sha512-JI9bHfudSRJikGOrjbXEm6RjzzvmKuLc+JixB1NE8hNzQkNlCCIC3pTES3uypkR9lxHrsbxzcnSwhI2IxBQphw=="],
+
+    "@tauri-apps/cli-darwin-arm64": ["@tauri-apps/cli-darwin-arm64@2.12.4", "", { "os": "darwin", "cpu": "arm64" }, "sha512-OxqKSckIkoJ6vX2AjifIJpTasFC0Hbdoo7gEiCmAjauABO3U8m2MRsLWe+QTiBwDx1mIrvgA+rvI7tvDnbnHVg=="],
+
+    "@tauri-apps/cli-darwin-x64": ["@tauri-apps/cli-darwin-x64@2.12.4", "", { "os": "darwin", "cpu": "x64" }, "sha512-fz76/77wMMJOaaUN6n3CybRG0P/MTEjjqYk81mGPyhi9m6Ue5T+LWBnJP/AkPooNatBPI2vtulGqomyMJ44lCQ=="],
+
+    "@tauri-apps/cli-linux-arm-gnueabihf": ["@tauri-apps/cli-linux-arm-gnueabihf@2.12.4", "", { "os": "linux", "cpu": "arm" }, "sha512-K0w8Bof6Lt8QKLAYhRy0yy36ZH5iA/35VuSOvnxyjvCUZ+A3JKsUTlALviH/sVgAlisaPzzmeJSH8XOn4Q2HBA=="],
+
+    "@tauri-apps/cli-linux-arm64-gnu": ["@tauri-apps/cli-linux-arm64-gnu@2.12.4", "", { "os": "linux", "cpu": "arm64" }, "sha512-j5rOnjmRUwWrm1oosf0zBYl4D+fqydgUROFCk0hvKZxvbTT8SOERes0QB7rBV/XWNy+kM6pCKzb3oSm2sRglzg=="],
+
+    "@tauri-apps/cli-linux-arm64-musl": ["@tauri-apps/cli-linux-arm64-musl@2.12.4", "", { "os": "linux", "cpu": "arm64" }, "sha512-aOue3Fy6Jb7+oWcfAVUsVHfeTybSCt2CZoU06aO4jv4d2Ks/KnaTPwMAK3CLEduGOvBLY1lbBBrIyomqLLH5Sg=="],
+
+    "@tauri-apps/cli-linux-riscv64-gnu": ["@tauri-apps/cli-linux-riscv64-gnu@2.12.4", "", { "os": "linux", "cpu": "none" }, "sha512-Fx6GShY/RvST+t6LMlTHAwd66+1tEaAAGrnU7cysVfaiRP1BKng5Vl6rVmO6rSLOA1Sp1dRzNYM4f0OWQGb7qA=="],
+
+    "@tauri-apps/cli-linux-x64-gnu": ["@tauri-apps/cli-linux-x64-gnu@2.12.4", "", { "os": "linux", "cpu": "x64" }, "sha512-tNzZSa79Z1nRpHxEpQ38lsAFpKlFlYvoXzjTV+lRRn/zSf3wrdUC3wnLcq2XEadchPu4ttK0zivhYzr+XGD19Q=="],
+
+    "@tauri-apps/cli-linux-x64-musl": ["@tauri-apps/cli-linux-x64-musl@2.12.4", "", { "os": "linux", "cpu": "x64" }, "sha512-jmZ1pr0xEqUhuEusWtt9Yt+GF6lCnGHUmIL+KIknpbjK/XQ2qkhDBhaxK/JMHM2A8dAacVXCxXJk2EXpwhQUfA=="],
+
+    "@tauri-apps/cli-win32-arm64-msvc": ["@tauri-apps/cli-win32-arm64-msvc@2.12.4", "", { "os": "win32", "cpu": "arm64" }, "sha512-fGo8pgEHZxdSYgZ/J98m1usJ7NHKmKbq7k6uT0x1rpOq6Bg2YVzzpaAblWk710f5LHYBJIL5QIFS5IrD+4gmTg=="],
+
+    "@tauri-apps/cli-win32-ia32-msvc": ["@tauri-apps/cli-win32-ia32-msvc@2.12.4", "", { "os": "win32", "cpu": "ia32" }, "sha512-ezl8sQIcjYsye3TUnTH5VcWmWzccZASlQm7hlZt0dYyj1XD0qpVW47u2xYVrIKui0F8uQv/7QGZixdWiClBsbg=="],
+
+    "@tauri-apps/cli-win32-x64-msvc": ["@tauri-apps/cli-win32-x64-msvc@2.12.4", "", { "os": "win32", "cpu": "x64" }, "sha512-DJhDeCqjLDNMWYFy7ZS8cfeAHX2RK0RbQMLiA3bMVVkXRDJ4NBYiHriGqsUhsr9iG41aTb+dJGkFPmPw1gWwVw=="],
+
+    "@types/babel__core": ["@types/babel__core@7.20.5", "", { "dependencies": { "@babel/parser": "^7.20.7", "@babel/types": "^7.20.7", "@types/babel__generator": "*", "@types/babel__template": "*", "@types/babel__traverse": "*" } }, "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA=="],
+
+    "@types/babel__generator": ["@types/babel__generator@7.27.0", "", { "dependencies": { "@babel/types": "^7.0.0" } }, "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg=="],
+
+    "@types/babel__template": ["@types/babel__template@7.4.4", "", { "dependencies": { "@babel/parser": "^7.1.0", "@babel/types": "^7.0.0" } }, "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A=="],
+
+    "@types/babel__traverse": ["@types/babel__traverse@7.28.0", "", { "dependencies": { "@babel/types": "^7.28.2" } }, "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q=="],
+
+    "@types/bun": ["@types/bun@1.3.0", "", { "dependencies": { "bun-types": "1.3.0" } }, "sha512-+lAGCYjXjip2qY375xX/scJeVRmZ5cY0wyHYyCYxNcdEXrQ4AOe3gACgd4iQ8ksOslJtW4VNxBJ8llUwc3a6AA=="],
+
+    "@types/d3": ["@types/d3@7.4.3", "", { "dependencies": { "@types/d3-array": "*", "@types/d3-axis": "*", "@types/d3-brush": "*", "@types/d3-chord": "*", "@types/d3-color": "*", "@types/d3-contour": "*", "@types/d3-delaunay": "*", "@types/d3-dispatch": "*", "@types/d3-drag": "*", "@types/d3-dsv": "*", "@types/d3-ease": "*", "@types/d3-fetch": "*", "@types/d3-force": "*", "@types/d3-format": "*", "@types/d3-geo": "*", "@types/d3-hierarchy": "*", "@types/d3-interpolate": "*", "@types/d3-path": "*", "@types/d3-polygon": "*", "@types/d3-quadtree": "*", "@types/d3-random": "*", "@types/d3-scale": "*", "@types/d3-scale-chromatic": "*", "@types/d3-selection": "*", "@types/d3-shape": "*", "@types/d3-time": "*", "@types/d3-time-format": "*", "@types/d3-timer": "*", "@types/d3-transition": "*", "@types/d3-zoom": "*" } }, "sha512-lZXZ9ckh5R8uiFVt8ogUNf+pIrK4EsWrx2Np75WvF/eTpJ0FMHNhjXk8CKEx/+gpHbNQyJWehbFaTvqmHWB3ww=="],
+
+    "@types/d3-array": ["@types/d3-array@3.0.3", "", {}, "sha512-Reoy+pKnvsksN0lQUlcH6dOGjRZ/3WRwXR//m+/8lt1BXeI4xyaUZoqULNjyXXRuh0Mj4LNpkCvhUpQlY3X5xQ=="],
+
+    "@types/d3-axis": ["@types/d3-axis@3.0.6", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-pYeijfZuBd87T0hGn0FO1vQ/cgLk6E1ALJjfkC0oJ8cbwkZl3TpgS8bVBLZN+2jjGgg38epgxb2zmoGtSfvgMw=="],
+
+    "@types/d3-brush": ["@types/d3-brush@3.0.6", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-nH60IZNNxEcrh6L1ZSMNA28rj27ut/2ZmI3r96Zd+1jrZD++zD3LsMIjWlvg4AYrHn/Pqz4CF3veCxGjtbqt7A=="],
+
+    "@types/d3-chord": ["@types/d3-chord@3.0.6", "", {}, "sha512-LFYWWd8nwfwEmTZG9PfQxd17HbNPksHBiJHaKuY1XeqscXacsS2tyoo6OdRsjf+NQYeB6XrNL3a25E3gH69lcg=="],
+
+    "@types/d3-color": ["@types/d3-color@3.1.0", "", {}, "sha512-HKuicPHJuvPgCD+np6Se9MQvS6OCbJmOjGvylzMJRlDwUXjKTTXs6Pwgk79O09Vj/ho3u1ofXnhFOaEWWPrlwA=="],
+
+    "@types/d3-contour": ["@types/d3-contour@3.0.6", "", { "dependencies": { "@types/d3-array": "*", "@types/geojson": "*" } }, "sha512-BjzLgXGnCWjUSYGfH1cpdo41/hgdWETu4YxpezoztawmqsvCeep+8QGfiY6YbDvfgHz/DkjeIkkZVJavB4a3rg=="],
+
+    "@types/d3-delaunay": ["@types/d3-delaunay@6.0.1", "", {}, "sha512-tLxQ2sfT0p6sxdG75c6f/ekqxjyYR0+LwPrsO1mbC9YDBzPJhs2HbJJRrn8Ez1DBoHRo2yx7YEATI+8V1nGMnQ=="],
+
+    "@types/d3-dispatch": ["@types/d3-dispatch@3.0.7", "", {}, "sha512-5o9OIAdKkhN1QItV2oqaE5KMIiXAvDWBDPrD85e58Qlz1c1kI/J0NcqbEG88CoTwJrYe7ntUCVfeUl2UJKbWgA=="],
+
+    "@types/d3-drag": ["@types/d3-drag@3.0.7", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-HE3jVKlzU9AaMazNufooRJ5ZpWmLIoc90A37WU2JMmeq28w1FQqCZswHZ3xR+SuxYftzHq6WU6KJHvqxKzTxxQ=="],
+
+    "@types/d3-dsv": ["@types/d3-dsv@3.0.7", "", {}, "sha512-n6QBF9/+XASqcKK6waudgL0pf/S5XHPPI8APyMLLUHd8NqouBGLsU8MgtO7NINGtPBtk9Kko/W4ea0oAspwh9g=="],
+
+    "@types/d3-ease": ["@types/d3-ease@3.0.2", "", {}, "sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA=="],
+
+    "@types/d3-fetch": ["@types/d3-fetch@3.0.7", "", { "dependencies": { "@types/d3-dsv": "*" } }, "sha512-fTAfNmxSb9SOWNB9IoG5c8Hg6R+AzUHDRlsXsDZsNp6sxAEOP0tkP3gKkNSO/qmHPoBFTxNrjDprVHDQDvo5aA=="],
+
+    "@types/d3-force": ["@types/d3-force@3.0.10", "", {}, "sha512-ZYeSaCF3p73RdOKcjj+swRlZfnYpK1EbaDiYICEEp5Q6sUiqFaFQ9qgoshp5CzIyyb/yD09kD9o2zEltCexlgw=="],
+
+    "@types/d3-format": ["@types/d3-format@3.0.1", "", {}, "sha512-5KY70ifCCzorkLuIkDe0Z9YTf9RR2CjBX1iaJG+rgM/cPP+sO+q9YdQ9WdhQcgPj1EQiJ2/0+yUkkziTG6Lubg=="],
+
+    "@types/d3-geo": ["@types/d3-geo@3.1.0", "", { "dependencies": { "@types/geojson": "*" } }, "sha512-856sckF0oP/diXtS4jNsiQw/UuK5fQG8l/a9VVLeSouf1/PPbBE1i1W852zVwKwYCBkFJJB7nCFTbk6UMEXBOQ=="],
+
+    "@types/d3-hierarchy": ["@types/d3-hierarchy@3.1.7", "", {}, "sha512-tJFtNoYBtRtkNysX1Xq4sxtjK8YgoWUNpIiUee0/jHGRwqvzYxkq0hGVbbOGSz+JgFxxRu4K8nb3YpG3CMARtg=="],
+
+    "@types/d3-interpolate": ["@types/d3-interpolate@3.0.1", "", { "dependencies": { "@types/d3-color": "*" } }, "sha512-jx5leotSeac3jr0RePOH1KdR9rISG91QIE4Q2PYTu4OymLTZfA3SrnURSLzKH48HmXVUru50b8nje4E79oQSQw=="],
+
+    "@types/d3-path": ["@types/d3-path@3.1.1", "", {}, "sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg=="],
+
+    "@types/d3-polygon": ["@types/d3-polygon@3.0.2", "", {}, "sha512-ZuWOtMaHCkN9xoeEMr1ubW2nGWsp4nIql+OPQRstu4ypeZ+zk3YKqQT0CXVe/PYqrKpZAi+J9mTs05TKwjXSRA=="],
+
+    "@types/d3-quadtree": ["@types/d3-quadtree@3.0.6", "", {}, "sha512-oUzyO1/Zm6rsxKRHA1vH0NEDG58HrT5icx/azi9MF1TWdtttWl0UIUsjEQBBh+SIkrpd21ZjEv7ptxWys1ncsg=="],
+
+    "@types/d3-random": ["@types/d3-random@3.0.4", "", {}, "sha512-UHYId5WTCx4L4YNel7NU00XUXXgvgpgZOvp10PuvsQENjMDXhh2RyFc0KBjO7B45ne4Ha1yVH7ii0vnzKkuzWA=="],
+
+    "@types/d3-scale": ["@types/d3-scale@4.0.2", "", { "dependencies": { "@types/d3-time": "*" } }, "sha512-Yk4htunhPAwN0XGlIwArRomOjdoBFXC3+kCxK2Ubg7I9shQlVSJy/pG/Ht5ASN+gdMIalpk8TJ5xV74jFsetLA=="],
+
+    "@types/d3-scale-chromatic": ["@types/d3-scale-chromatic@3.1.0", "", {}, "sha512-iWMJgwkK7yTRmWqRB5plb1kadXyQ5Sj8V/zYlFGMUBbIPKQScw+Dku9cAAMgJG+z5GYDoMjWGLVOvjghDEFnKQ=="],
+
+    "@types/d3-selection": ["@types/d3-selection@3.0.12", "", {}, "sha512-Qe/KWYhEiIIxGs7HrAAjMfShxKldx19SJtr5zu53f3afPsdZNz7HHtdTLXo/kqeiWNXVycI24kSnfzBYkTzpgw=="],
+
+    "@types/d3-shape": ["@types/d3-shape@3.1.7", "", { "dependencies": { "@types/d3-path": "*" } }, "sha512-VLvUQ33C+3J+8p+Daf+nYSOsjB4GXp19/S/aGo60m9h1v6XaxjiT82lKVWJCfzhtuZ3yD7i/TPeC/fuKLLOSmg=="],
+
+    "@types/d3-time": ["@types/d3-time@3.0.0", "", {}, "sha512-sZLCdHvBUcNby1cB6Fd3ZBrABbjz3v1Vm90nysCQ6Vt7vd6e/h9Lt7SiJUoEX0l4Dzc7P5llKyhqSi1ycSf1Hg=="],
+
+    "@types/d3-time-format": ["@types/d3-time-format@2.1.0", "", {}, "sha512-/myT3I7EwlukNOX2xVdMzb8FRgNzRMpsZddwst9Ld/VFe6LyJyRp0s32l/V9XoUzk+Gqu56F/oGk6507+8BxrA=="],
+
+    "@types/d3-timer": ["@types/d3-timer@3.0.2", "", {}, "sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw=="],
+
+    "@types/d3-transition": ["@types/d3-transition@3.0.9", "", { "dependencies": { "@types/d3-selection": "*" } }, "sha512-uZS5shfxzO3rGlu0cC3bjmMFKsXv+SmZZcgp0KD22ts4uGXp5EVYGzu/0YdwZeKmddhcAccYtREJKkPfXkZuCg=="],
+
+    "@types/d3-zoom": ["@types/d3-zoom@3.0.9", "", { "dependencies": { "@types/d3-interpolate": "*", "@types/d3-selection": "*" } }, "sha512-0sE1406XBYJGiqD3AusTl9ZqC//2mIXix51tbom25gDCA8ri4xnSZg28CaSE8Srl6FClqABUKfsn0qghgdepMA=="],
+
+    "@types/estree": ["@types/estree@1.0.9", "", {}, "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg=="],
+
+    "@types/geojson": ["@types/geojson@7946.0.16", "", {}, "sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg=="],
+
+    "@types/node": ["@types/node@26.6.6", "", { "dependencies": { "undici-types": "~8.9.0" } }, "sha512-MzQj+8Kx3XI40OmUAE6Qoh58ZMNstNNMwn2nfd3qWsfe7nDNSqJNzes4njhz6AHwrSHOffSLwXU6yb474Q4aog=="],
+
+    "@types/react": ["@types/react@19.3.0", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg=="],
+
+    "@types/react-dom": ["@types/react-dom@19.3.0", "", { "peerDependencies": { "@types/react": "^19.3.0" } }, "sha512-ZI7bU42mZXXKHn/qNLEw2IrbiINU7X5+vfgdixBHkCNpYWXjKgfQ/P+uyGb5CjOLB9UcnTeg3rylQtV2hym44Q=="],
+
+    "@types/trusted-types": ["@types/trusted-types@2.0.7", "", {}, "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw=="],
+
+    "@upsetjs/venn.js": ["@upsetjs/venn.js@2.0.0", "", { "optionalDependencies": { "d3-selection": "^3.0.0", "d3-transition": "^3.0.1" } }, "sha512-WbBhLrooyePuQ1VZxrJjtLvTc4NVfpOyKx0sKqioq9bX1C1m7Jgykkn8gLrtwumBioXIqam8DLxp88Adbue6Hw=="],
+
+    "@visx/axis": ["@visx/axis@4.0.0", "", { "dependencies": { "@visx/group": "4.0.0", "@visx/point": "4.0.0", "@visx/scale": "4.0.0", "@visx/shape": "4.0.0", "@visx/text": "4.0.0", "classnames": "^2.3.1" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-cSPNO9Aic2UX49AmIeJJ9TQrrAkvUHpHOGqimUAXhbg07VI3HoHDKcXZdrjvQz+g0LhubrUkjj8Gwju2WZ3dtg=="],
+
+    "@visx/bounds": ["@visx/bounds@4.0.0", "", { "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "@types/react-dom": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0", "react-dom": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react", "@types/react-dom"] }, "sha512-3wAfN5fg2bxg/5f3MlKWzGDTKU2hdKkxq8bVWXpPZQV0UiVc0myuU1qa34c7tN3hg5SDe6MJi/bae2eTQDgEiQ=="],
+
+    "@visx/curve": ["@visx/curve@4.0.0", "", { "dependencies": { "@visx/vendor": "4.0.0" } }, "sha512-bXrOSd2BzVCxR7kBE7gPTSU4plxzYN75w7erdHYabwn3vzP+xFk1o0gg3NOHEPJzt5tXqf0Ecm5YqHACOnipTA=="],
+
+    "@visx/event": ["@visx/event@4.0.0", "", { "dependencies": { "@visx/point": "4.0.0" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-sOcVVzOUxOefF8mQenRFtutoEO7P9icpTcSJM36Sv13sepQbPBuYLknX7RV+EzqyNLOze5cO5GmLIUNH82FOoA=="],
+
+    "@visx/gradient": ["@visx/gradient@4.0.0", "", { "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-AycKA/9Hhx9BXOdWACqYKGU+Dkq/gWzgaDAK/MkVDjXME+3Sl8oE6mn/ZO54gi6wg9qNHhWLnp8XKPJSp4/pzA=="],
+
+    "@visx/group": ["@visx/group@4.0.0", "", { "dependencies": { "classnames": "^2.3.1" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-HGAq8BCqn5x0t94CJOLJeKtWss9LFpF3HY69HbuO1PlR+B9c4aVT9xbjfudmU8wGQZLT6JNt+PJvxbO2aJ+1aA=="],
+
+    "@visx/point": ["@visx/point@4.0.0", "", {}, "sha512-hwJ9UlIjg3iV4iiJ3RN5SNTXama+zGaNe57sXSrSvPiqhkDXypsYBdDSlAnHmKbMzHP0zFmgB1UJciB/QUyigw=="],
+
+    "@visx/responsive": ["@visx/responsive@4.0.0", "", { "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-MGPK8AeiBIhzz34o9TNJIyUDQIdWEj5mt+U/Je4qVRRXpXSMhor1IE7v71czAS5b90OrFxC9L3w27AV+szG25w=="],
+
+    "@visx/scale": ["@visx/scale@4.0.0", "", { "dependencies": { "@visx/vendor": "4.0.0" } }, "sha512-Q3VaSLKlsrxxSl9CwS2D3Mvz4/4kIp/6NMKRY8Im0Au1hrQh2egU806p0+JwN0ccuGGDe03jyAxX4BSRAH8Plg=="],
+
+    "@visx/shape": ["@visx/shape@4.0.0", "", { "dependencies": { "@visx/curve": "4.0.0", "@visx/group": "4.0.0", "@visx/scale": "4.0.0", "@visx/vendor": "4.0.0", "classnames": "^2.3.1" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-X0FP3OFjQhc5/6Vj2aY7cK2JwKYI0H0hQM7cdNRWy/ZMMlrh5KpEdqx0HVo0KoTeTlkUvO+kydMLnAuuCRFIFw=="],
+
+    "@visx/text": ["@visx/text@4.0.0", "", { "dependencies": { "classnames": "^2.3.1", "reduce-css-calc": "^1.3.0" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-39f2goSaKy5Mqn89lRDGSJ1IMr49wplkbIFHsFI8cPnAPbguiJxYZ+ulizd7Vcsq2z/hytuGv3Lmk165zUiUYQ=="],
+
+    "@visx/tooltip": ["@visx/tooltip@4.0.0", "", { "dependencies": { "@visx/bounds": "4.0.0", "classnames": "^2.3.1", "react-use-measure": "^2.0.4" }, "peerDependencies": { "@types/react": "^18.0.0 || ^19.0.0", "@types/react-dom": "^18.0.0 || ^19.0.0", "react": "^18.0.0 || ^19.0.0", "react-dom": "^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react", "@types/react-dom"] }, "sha512-+6J2h5qPvniT0pQtxQrLYGErPRVHr3pRfcMkNqTxD/HgofDGsL6vEBkjMR535MF1hkWYQ9XzOiWP6ERN4TF+mg=="],
+
+    "@visx/vendor": ["@visx/vendor@4.0.0", "", { "dependencies": { "@types/d3-array": "3.0.3", "@types/d3-color": "3.1.0", "@types/d3-delaunay": "6.0.1", "@types/d3-format": "3.0.1", "@types/d3-geo": "3.1.0", "@types/d3-interpolate": "3.0.1", "@types/d3-path": "3.1.1", "@types/d3-scale": "4.0.2", "@types/d3-shape": "3.1.7", "@types/d3-time": "3.0.0", "@types/d3-time-format": "2.1.0", "d3-array": "3.2.1", "d3-color": "3.1.0", "d3-delaunay": "6.0.2", "d3-format": "3.1.0", "d3-geo": "3.1.0", "d3-interpolate": "3.0.1", "d3-path": "3.1.0", "d3-scale": "4.0.2", "d3-shape": "3.2.0", "d3-time": "3.1.0", "d3-time-format": "4.1.0", "internmap": "2.0.3" } }, "sha512-LoBNzWjTXzBfu095BQxB14IwZQHHOLs8ZMzM6t2FL4ZGORaACgLcmXRRLhFo0VmRR8L7iNTM4HHc1j6yFvzsAA=="],
+
+    "@vitejs/plugin-react": ["@vitejs/plugin-react@4.7.0", "", { "dependencies": { "@babel/core": "^7.28.0", "@babel/plugin-transform-react-jsx-self": "^7.27.1", "@babel/plugin-transform-react-jsx-source": "^7.27.1", "@rolldown/pluginutils": "1.0.0-beta.27", "@types/babel__core": "^7.20.5", "react-refresh": "^0.17.0" }, "peerDependencies": { "vite": "^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0" } }, "sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA=="],
+
+    "@zenuml/core": ["@zenuml/core@3.50.1", "", { "dependencies": { "@floating-ui/react": "^0.27.16", "@headlessui/react": "^2.2.9", "@headlessui/tailwindcss": "^0.2.2", "antlr4": "~4.11.0", "class-variance-authority": "^0.7.1", "clsx": "^2.1.1", "color-string": "^2.1.4", "dompurify": "^3.3.1", "highlight.js": "^11.10.0", "html-to-image": "^1.11.13", "jotai": "^2.16.1", "marked": "^4.3.0", "react": "^19.2.3", "react-dom": "^19.2.3", "tailwind-merge": "^3.4.0" }, "optionalDependencies": { "@napi-rs/canvas": "^0.1.97" }, "peerDependencies": { "playwright-core": "1.57.0" }, "optionalPeers": ["playwright-core"], "bin": { "zenuml": "dist/cli/zenuml.mjs" } }, "sha512-Q18BXvIfhRuGw0JfO4e+pltG04Phhv2E7n35EWTNSZKKH/HEkyE4Sh7KERb9dqaOfjOdRdKvLG0YekjK3fcDXw=="],
+
+    "ansi-regex": ["ansi-regex@6.4.0", "", {}, "sha512-KzTVk2tCWAHtYrvvvaP8bJKJq2pVinhLcGEQdtLIYPbmNGNyYe8QwNaTUYQp2J7/vIsUKt5QCqAfUkYyG9DkOw=="],
+
+    "ansi-styles": ["ansi-styles@6.2.3", "", {}, "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg=="],
+
+    "antlr4": ["antlr4@4.11.0", "", {}, "sha512-GUGlpE2JUjAN+G8G5vY+nOoeyNhHsXoIJwP1XF1oRw89vifA1K46T6SEkwLwr7drihN7I/lf0DIjKc4OZvBX8w=="],
+
+    "aria-hidden": ["aria-hidden@1.2.6", "", { "dependencies": { "tslib": "^2.0.0" } }, "sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA=="],
+
+    "balanced-match": ["balanced-match@0.4.2", "", {}, "sha512-STw03mQKnGUYtoNjmowo4F2cRmIIxYEGiMsjjwla/u5P1lxadj/05WkNaFjNiKTgJkj8KiXbgAiRTmcQRwQNtg=="],
+
+    "baseline-browser-mapping": ["baseline-browser-mapping@2.11.34", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-Aqr8mA1kIvyJ3UY5YAY7ib8LSo1DmDMbMnVqGPtsKW1LxaFQFwn9Eb3yvq2fUKJsRvaXjnAV7R5osqETapzNiA=="],
+
+    "browserslist": ["browserslist@4.29.5", "", { "dependencies": { "baseline-browser-mapping": "^2.11.33", "caniuse-lite": "^1.0.30001819", "electron-to-chromium": "^1.5.464", "node-releases": "^2.0.60", "update-browserslist-db": "^1.3.4" }, "bin": { "browserslist": "cli.js" } }, "sha512-khTmKu5NGYTotqcYo8Bew2k4RAE9PuXRSFRXG2lQBrCEQHyeQ/vX6gKMxfokwywBsLiXZMnHsmWMG1pnO8J7uQ=="],
+
+    "bun-types": ["bun-types@1.3.0", "", { "dependencies": { "@types/node": "*" }, "peerDependencies": { "@types/react": "^19" } }, "sha512-u8X0thhx+yJ0KmkxuEo9HAtdfgCBaM/aI9K90VQcQioAmkVp3SG3FkwWGibUFz3WdXAdcsqOcbU40lK7tbHdkQ=="],
+
+    "caniuse-lite": ["caniuse-lite@1.0.30001820", "", {}, "sha512-gfWD6MxqVCqAOwmODfZf7DchWvlrA+SRdNX7ceLfg3xRqe5ssjjpF7EgslC/0tiLiNTajdaNN/q8c/5u/7Gz8w=="],
+
+    "chalk": ["chalk@6.0.1", "", {}, "sha512-/Ce6KNm3vIbWdMlNna6RVIZ/ICQxnJxCicet5LBKK9ZffBkqzDw0xh9EiKSljdRtiIQ1S1z4YgcscUUGzNCWrA=="],
+
+    "chevrotain": ["chevrotain@13.2.0", "", { "dependencies": { "@chevrotain/cst-dts-gen": "13.2.0", "@chevrotain/gast": "13.2.0", "@chevrotain/regexp-to-ast": "13.2.0", "@chevrotain/types": "13.2.0", "@chevrotain/utils": "13.2.0" } }, "sha512-GTouk5YzgBxlTPCaDn5q0q2EJKkrYmnPF+HmF8v0Qo4r3iyPG7HJivkN1wthCXZcm3sIcZFpGTRovLPNdJNRCA=="],
+
+    "chromium-bidi": ["chromium-bidi@157.0.8090-0", "", { "dependencies": { "mitt": "^3.0.1", "zod": "^4.6.5" }, "peerDependencies": { "devtools-protocol": "*" } }, "sha512-KJw7IQgqXwxpJgJlEIPg5mr2ZoqA+jkTRtc5EABI7sUJ3bu3cpI7NuEBoj4Gn1AsF78CaT9So5WQWspK3/wYag=="],
+
+    "class-variance-authority": ["class-variance-authority@0.7.1", "", { "dependencies": { "clsx": "^2.1.1" } }, "sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg=="],
+
+    "classnames": ["classnames@2.5.1", "", {}, "sha512-saHYOzhIQs6wy2sVxTM6bUDsQO4F50V9RQ22qBpEdCW+I+/Wmke2HOl6lS6dTpdxVhb88/I6+Hs+438c3lfUow=="],
+
+    "cliui": ["cliui@9.0.1", "", { "dependencies": { "string-width": "^7.2.0", "strip-ansi": "^7.1.0", "wrap-ansi": "^9.0.0" } }, "sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w=="],
+
+    "clsx": ["clsx@2.1.1", "", {}, "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA=="],
+
+    "color-name": ["color-name@2.1.1", "", {}, "sha512-p2FdgwVx1a9yWBHP2wI0VgShkDpgN4kZISkxdNipGBJWpa5G6b04OINlVWCyJj0JmfvcPrgqt95E9k8yvaOJFg=="],
+
+    "color-string": ["color-string@2.1.4", "", { "dependencies": { "color-name": "^2.0.0" } }, "sha512-Bb6Cq8oq0IjDOe8wJmi4JeNn763Xs9cfrBcaylK1tPypWzyoy2G3l90v9k64kjphl/ZJjPIShFztenRomi8WTg=="],
+
+    "commander": ["commander@15.0.0", "", {}, "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg=="],
+
+    "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
+
+    "cose-base": ["cose-base@1.0.3", "", { "dependencies": { "layout-base": "^1.0.0" } }, "sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg=="],
+
+    "csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],
+
+    "cytoscape": ["cytoscape@3.34.4", "", {}, "sha512-msY99tMY8iWTg+sIPGfSqDcPNOt4xcj+v/K/7qUFaCUxxlqnMkUYLBjRUzn9W5CU/R2hrmtJa5+UtovrEM2ctg=="],
+
+    "cytoscape-cose-bilkent": ["cytoscape-cose-bilkent@4.1.0", "", { "dependencies": { "cose-base": "^1.0.0" }, "peerDependencies": { "cytoscape": "^3.2.0" } }, "sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ=="],
+
+    "cytoscape-fcose": ["cytoscape-fcose@2.2.0", "", { "dependencies": { "cose-base": "^2.2.0" }, "peerDependencies": { "cytoscape": "^3.2.0" } }, "sha512-ki1/VuRIHFCzxWNrsshHYPs6L7TvLu3DL+TyIGEsRcvVERmxokbf5Gdk7mFxZnTdiGtnA4cfSmjZJMviqSuZrQ=="],
+
+    "d3": ["d3@7.9.0", "", { "dependencies": { "d3-array": "3", "d3-axis": "3", "d3-brush": "3", "d3-chord": "3", "d3-color": "3", "d3-contour": "4", "d3-delaunay": "6", "d3-dispatch": "3", "d3-drag": "3", "d3-dsv": "3", "d3-ease": "3", "d3-fetch": "3", "d3-force": "3", "d3-format": "3", "d3-geo": "3", "d3-hierarchy": "3", "d3-interpolate": "3", "d3-path": "3", "d3-polygon": "3", "d3-quadtree": "3", "d3-random": "3", "d3-scale": "4", "d3-scale-chromatic": "3", "d3-selection": "3", "d3-shape": "3", "d3-time": "3", "d3-time-format": "4", "d3-timer": "3", "d3-transition": "3", "d3-zoom": "3" } }, "sha512-e1U46jVP+w7Iut8Jt8ri1YsPOvFpg46k+K8TpCb0P+zjCkjkPnV7WzfDJzMHy1LnA+wj5pLT1wjO901gLXeEhA=="],
+
+    "d3-array": ["d3-array@3.2.1", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-gUY/qeHq/yNqqoCKNq4vtpFLdoCdvyNpWoC/KNjhGbhDuQpAM9sIQQKkXSNpXa9h5KySs/gzm7R88WkUutgwWQ=="],
+
+    "d3-axis": ["d3-axis@3.0.0", "", {}, "sha512-IH5tgjV4jE/GhHkRV0HiVYPDtvfjHQlQfJHs0usq7M30XcSBvOotpmH1IgkcXsO/5gEQZD43B//fc7SRT5S+xw=="],
+
+    "d3-brush": ["d3-brush@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-drag": "2 - 3", "d3-interpolate": "1 - 3", "d3-selection": "3", "d3-transition": "3" } }, "sha512-ALnjWlVYkXsVIGlOsuWH1+3udkYFI48Ljihfnh8FZPF2QS9o+PzGLBslO0PjzVoHLZ2KCVgAM8NVkXPJB2aNnQ=="],
+
+    "d3-chord": ["d3-chord@3.0.1", "", { "dependencies": { "d3-path": "1 - 3" } }, "sha512-VE5S6TNa+j8msksl7HwjxMHDM2yNK3XCkusIlpX5kwauBfXuyLAtNg9jCp/iHH61tgI4sb6R/EIMWCqEIdjT/g=="],
+
+    "d3-color": ["d3-color@3.1.0", "", {}, "sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA=="],
+
+    "d3-contour": ["d3-contour@4.0.2", "", { "dependencies": { "d3-array": "^3.2.0" } }, "sha512-4EzFTRIikzs47RGmdxbeUvLWtGedDUNkTcmzoeyg4sP/dvCexO47AaQL7VKy/gul85TOxw+IBgA8US2xwbToNA=="],
+
+    "d3-delaunay": ["d3-delaunay@6.0.2", "", { "dependencies": { "delaunator": "5" } }, "sha512-IMLNldruDQScrcfT+MWnazhHbDJhcRJyOEBAJfwQnHle1RPh6WDuLvxNArUju2VSMSUuKlY5BGHRJ2cYyoFLQQ=="],
+
+    "d3-dispatch": ["d3-dispatch@3.0.1", "", {}, "sha512-rzUyPU/S7rwUflMyLc1ETDeBj0NRuHKKAcvukozwhshr6g6c5d8zh4c2gQjY2bZ0dXeGLWc1PF174P2tVvKhfg=="],
+
+    "d3-drag": ["d3-drag@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-selection": "3" } }, "sha512-pWbUJLdETVA8lQNJecMxoXfH6x+mO2UQo8rSmZ+QqxcbyA3hfeprFgIT//HW2nlHChWeIIMwS2Fq+gEARkhTkg=="],
+
+    "d3-dsv": ["d3-dsv@3.0.1", "", { "dependencies": { "commander": "7", "iconv-lite": "0.6", "rw": "1" }, "bin": { "csv2json": "bin/dsv2json.js", "csv2tsv": "bin/dsv2dsv.js", "dsv2dsv": "bin/dsv2dsv.js", "dsv2json": "bin/dsv2json.js", "json2csv": "bin/json2dsv.js", "json2dsv": "bin/json2dsv.js", "json2tsv": "bin/json2dsv.js", "tsv2csv": "bin/dsv2dsv.js", "tsv2json": "bin/dsv2json.js" } }, "sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q=="],
+
+    "d3-ease": ["d3-ease@3.0.1", "", {}, "sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w=="],
+
+    "d3-fetch": ["d3-fetch@3.0.1", "", { "dependencies": { "d3-dsv": "1 - 3" } }, "sha512-kpkQIM20n3oLVBKGg6oHrUchHM3xODkTzjMoj7aWQFq5QEM+R6E4WkzT5+tojDY7yjez8KgCBRoj4aEr99Fdqw=="],
+
+    "d3-force": ["d3-force@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-quadtree": "1 - 3", "d3-timer": "1 - 3" } }, "sha512-zxV/SsA+U4yte8051P4ECydjD/S+qeYtnaIyAs9tgHCqfguma/aAQDjo85A9Z6EKhBirHRJHXIgJUlffT4wdLg=="],
+
+    "d3-format": ["d3-format@3.1.0", "", {}, "sha512-YyUI6AEuY/Wpt8KWLgZHsIU86atmikuoOmCfommt0LYHiQSPjvX2AcFc38PX0CBpr2RCyZhjex+NS/LPOv6YqA=="],
+
+    "d3-geo": ["d3-geo@3.1.0", "", { "dependencies": { "d3-array": "2.5.0 - 3" } }, "sha512-JEo5HxXDdDYXCaWdwLRt79y7giK8SbhZJbFWXqbRTolCHFI5jRqteLzCsq51NKbUoX0PjBVSohxrx+NoOUujYA=="],
+
+    "d3-hierarchy": ["d3-hierarchy@3.1.2", "", {}, "sha512-FX/9frcub54beBdugHjDCdikxThEqjnR93Qt7PvQTOHxyiNCAlvMrHhclk3cD5VeAaq9fxmfRp+CnWw9rEMBuA=="],
+
+    "d3-interpolate": ["d3-interpolate@3.0.1", "", { "dependencies": { "d3-color": "1 - 3" } }, "sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g=="],
+
+    "d3-path": ["d3-path@3.1.0", "", {}, "sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ=="],
+
+    "d3-polygon": ["d3-polygon@3.0.1", "", {}, "sha512-3vbA7vXYwfe1SYhED++fPUQlWSYTTGmFmQiany/gdbiWgU/iEyQzyymwL9SkJjFFuCS4902BSzewVGsHHmHtXg=="],
+
+    "d3-quadtree": ["d3-quadtree@3.0.1", "", {}, "sha512-04xDrxQTDTCFwP5H6hRhsRcb9xxv2RzkcsygFzmkSIOJy3PeRJP7sNk3VRIbKXcog561P9oU0/rVH6vDROAgUw=="],
+
+    "d3-random": ["d3-random@3.0.1", "", {}, "sha512-FXMe9GfxTxqd5D6jFsQ+DJ8BJS4E/fT5mqqdjovykEB2oFbTMDVdg1MGFxfQW+FBOGoB++k8swBrgwSHT1cUXQ=="],
+
+    "d3-sankey": ["d3-sankey@0.12.3", "", { "dependencies": { "d3-array": "1 - 2", "d3-shape": "^1.2.0" } }, "sha512-nQhsBRmM19Ax5xEIPLMY9ZmJ/cDvd1BG3UVvt5h3WRxKg5zGRbvnteTyWAbzeSvlh3tW7ZEmq4VwR5mB3tutmQ=="],
+
+    "d3-scale": ["d3-scale@4.0.2", "", { "dependencies": { "d3-array": "2.10.0 - 3", "d3-format": "1 - 3", "d3-interpolate": "1.2.0 - 3", "d3-time": "2.1.1 - 3", "d3-time-format": "2 - 4" } }, "sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ=="],
+
+    "d3-scale-chromatic": ["d3-scale-chromatic@3.1.0", "", { "dependencies": { "d3-color": "1 - 3", "d3-interpolate": "1 - 3" } }, "sha512-A3s5PWiZ9YCXFye1o246KoscMWqf8BsD9eRiJ3He7C9OBaxKhAd5TFCdEx/7VbKtxxTsu//1mMJFrEt572cEyQ=="],
+
+    "d3-selection": ["d3-selection@3.0.0", "", {}, "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ=="],
+
+    "d3-shape": ["d3-shape@3.2.0", "", { "dependencies": { "d3-path": "^3.1.0" } }, "sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA=="],
+
+    "d3-time": ["d3-time@3.1.0", "", { "dependencies": { "d3-array": "2 - 3" } }, "sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q=="],
+
+    "d3-time-format": ["d3-time-format@4.1.0", "", { "dependencies": { "d3-time": "1 - 3" } }, "sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg=="],
+
+    "d3-timer": ["d3-timer@3.0.1", "", {}, "sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA=="],
+
+    "d3-transition": ["d3-transition@3.0.1", "", { "dependencies": { "d3-color": "1 - 3", "d3-dispatch": "1 - 3", "d3-ease": "1 - 3", "d3-interpolate": "1 - 3", "d3-timer": "1 - 3" }, "peerDependencies": { "d3-selection": "2 - 3" } }, "sha512-ApKvfjsSR6tg06xrL434C0WydLr7JewBB3V+/39RMHsaXTOG0zmt/OAXeng5M5LBm0ojmxJrpomQVZ1aPvBL4w=="],
+
+    "d3-zoom": ["d3-zoom@3.0.0", "", { "dependencies": { "d3-dispatch": "1 - 3", "d3-drag": "2 - 3", "d3-interpolate": "1 - 3", "d3-selection": "2 - 3", "d3-transition": "2 - 3" } }, "sha512-b8AmV3kfQaqWAuacbPuNbL6vahnOJflOhexLzMMNLga62+/nh0JzvJ0aO/5a5MVgUFGS7Hu1P9P03o3fJkDCyw=="],
+
+    "dagre-d3-es": ["dagre-d3-es@7.0.14", "", { "dependencies": { "d3": "^7.9.0", "lodash-es": "^4.17.21" } }, "sha512-P4rFMVq9ESWqmOgK+dlXvOtLwYg0i7u0HBGJER0LZDJT2VHIPAMZ/riPxqJceWMStH5+E61QxFra9kIS3AqdMg=="],
+
+    "dayjs": ["dayjs@1.11.23", "", {}, "sha512-QDTCU0M0MxR3hQfnlDJfwekQiaanm1ubOD231u73WBckQ/fsamwRLiE2GBz6D3a/xF1NgfiDLJjXBa1hYOYTtQ=="],
+
+    "debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" }, "peerDependencies": { "supports-color": "*" }, "optionalPeers": ["supports-color"] }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+
+    "delaunator": ["delaunator@5.1.0", "", { "dependencies": { "robust-predicates": "^3.0.2" } }, "sha512-AGrQ4QSgssa1NGmWmLPqN5NY2KajF5MqxetNEO+o0n3ZwZZeTmt7bBnvzHWrmkZFxGgr4HdyFgelzgi06otLuQ=="],
+
+    "devtools-protocol": ["devtools-protocol@0.0.1704951", "", {}, "sha512-GQhQOs9u/Mvm1zMtJIH872JS4AskuZdUSsPNPk4ChahtWAUqgz6atEtIsMt+nO7MqF1Ic4HxII/k8Cu36JivNg=="],
+
+    "dompurify": ["dompurify@3.4.17", "", { "optionalDependencies": { "@types/trusted-types": "^2.0.7" } }, "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w=="],
+
+    "electron-to-chromium": ["electron-to-chromium@1.5.467", "", {}, "sha512-Nw9X371rtZmYcBSnEijnCDONILjs93biCZO34juC7MBOmK8E+GFnyD4T/WvyrlJkppul7oxg6TwvtKst9SODTw=="],
+
+    "elkjs": ["elkjs@0.9.3", "", {}, "sha512-f/ZeWvW/BCXbhGEf1Ujp29EASo/lk1FDnETgNKwJrsVvGZhUWCZyg3xLJjAsxfOmt8KjswHmI5EwCQcPMpOYhQ=="],
+
+    "emoji-regex": ["emoji-regex@10.6.0", "", {}, "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A=="],
+
+    "es-toolkit": ["es-toolkit@1.53.0", "", {}, "sha512-3+AYXp9fmJ/UhHBMYj2/U+RaUouMD90SzoItyDOB2Za7W6dB7fQApFGnZPl2MF6K8/Tv1koh1JyirSx/kju6Pw=="],
+
+    "esbuild": ["esbuild@0.25.12", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.25.12", "@esbuild/android-arm": "0.25.12", "@esbuild/android-arm64": "0.25.12", "@esbuild/android-x64": "0.25.12", "@esbuild/darwin-arm64": "0.25.12", "@esbuild/darwin-x64": "0.25.12", "@esbuild/freebsd-arm64": "0.25.12", "@esbuild/freebsd-x64": "0.25.12", "@esbuild/linux-arm": "0.25.12", "@esbuild/linux-arm64": "0.25.12", "@esbuild/linux-ia32": "0.25.12", "@esbuild/linux-loong64": "0.25.12", "@esbuild/linux-mips64el": "0.25.12", "@esbuild/linux-ppc64": "0.25.12", "@esbuild/linux-riscv64": "0.25.12", "@esbuild/linux-s390x": "0.25.12", "@esbuild/linux-x64": "0.25.12", "@esbuild/netbsd-arm64": "0.25.12", "@esbuild/netbsd-x64": "0.25.12", "@esbuild/openbsd-arm64": "0.25.12", "@esbuild/openbsd-x64": "0.25.12", "@esbuild/openharmony-arm64": "0.25.12", "@esbuild/sunos-x64": "0.25.12", "@esbuild/win32-arm64": "0.25.12", "@esbuild/win32-ia32": "0.25.12", "@esbuild/win32-x64": "0.25.12" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg=="],
+
+    "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="],
+
+    "fdir": ["fdir@6.5.0", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg=="],
+
+    "fsevents": ["fsevents@2.3.2", "", { "os": "darwin" }, "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA=="],
+
+    "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
+
+    "get-caller-file": ["get-caller-file@2.0.5", "", {}, "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="],
+
+    "get-east-asian-width": ["get-east-asian-width@1.7.0", "", {}, "sha512-XjH1AECxf0giL2V1aU8vKyRR2ppRUb5c0EvT7zuJTokQ74bNo52zOtghqdWIqrhUD79fo3x0WfKZdOqxF6LG1Q=="],
+
+    "hachure-fill": ["hachure-fill@0.5.2", "", {}, "sha512-3GKBOn+m2LX9iq+JC1064cSFprJY4jL1jCXTcpnfER5HYE2l/4EfWSGzkPa/ZDBmYI0ZOEj5VHV/eKnPGkHuOg=="],
+
+    "highlight.js": ["highlight.js@11.12.0", "", {}, "sha512-nbfWpyRMcMrPMmDwJB+dhX/eiaPKtc2RB+0QZskqJ3WjRA/FDS0e9hZrx8EC/lbEv8gXy98FcDbNa/dspAaJMg=="],
+
+    "html-to-image": ["html-to-image@1.11.13", "", {}, "sha512-cuOPoI7WApyhBElTTb9oqsawRvZ0rHhaHwghRLlTuffoD1B2aDemlCruLeZrUIIdvG7gs9xeELEPm6PhuASqrg=="],
+
+    "iconv-lite": ["iconv-lite@0.6.3", "", { "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" } }, "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw=="],
+
+    "import-meta-resolve": ["import-meta-resolve@4.2.0", "", {}, "sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg=="],
+
+    "internmap": ["internmap@2.0.3", "", {}, "sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg=="],
+
+    "jotai": ["jotai@2.20.3", "", { "peerDependencies": { "@babel/core": ">=7.0.0", "@babel/template": ">=7.0.0", "@types/react": ">=17.0.0", "react": ">=17.0.0" }, "optionalPeers": ["@babel/core", "@babel/template", "@types/react", "react"] }, "sha512-N8L9FUbeGDP+0qNJw1FebOxt+5hk+jTOwUA2LlRE4C081jUcY6F1T/FSETp4DT2/INMtiSRZyNm2D+yZdzrSgA=="],
+
+    "js-tokens": ["js-tokens@4.0.0", "", {}, "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+
+    "jsesc": ["jsesc@3.1.0", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA=="],
+
+    "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
+
+    "katex": ["katex@0.16.47", "", { "dependencies": { "commander": "^8.3.0" }, "bin": { "katex": "cli.js" } }, "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg=="],
+
+    "khroma": ["khroma@2.1.0", "", {}, "sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw=="],
+
+    "layout-base": ["layout-base@1.0.2", "", {}, "sha512-8h2oVEZNktL4BH2JCOI90iD1yXwL6iNW7KcCKT2QZgQJR2vbqDsldCTPRU9NifTCqHZci57XvQQ15YTu+sTYPg=="],
+
+    "lilconfig": ["lilconfig@3.1.4", "", {}, "sha512-zJZyBmQhArDRefuWTypZxwDpFDIYmrj8ypSBvwGD5P13Y95s6DjzKgu4DVdGbeQa5PDEsAOCAPNk4X+QOR006w=="],
+
+    "lodash-es": ["lodash-es@4.18.1", "", {}, "sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A=="],
+
+    "lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
+
+    "marked": ["marked@16.4.2", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-TI3V8YYWvkVf3KJe1dRkpnjs68JUPyEa5vjKrp1XEEJUAOaQc+Qj+L1qWbPd0SJuAdQkFU0h73sXXqwDYxsiDA=="],
+
+    "math-expression-evaluator": ["math-expression-evaluator@1.4.0", "", {}, "sha512-4vRUvPyxdO8cWULGTh9dZWL2tZK6LDBvj+OGHBER7poH9Qdt7kXEoj20wiz4lQUbUXQZFjPbe5mVDo9nutizCw=="],
+
+    "mermaid": ["mermaid@12.2.0", "", { "dependencies": { "@braintree/sanitize-url": "^7.1.2", "@iconify/utils": "^3.0.2", "@mermaid-js/parser": "^2.0.1", "@types/d3": "^7.4.3", "@upsetjs/venn.js": "^2.0.0", "chevrotain": "~13.2.0", "cytoscape": "^3.34.0", "cytoscape-cose-bilkent": "^4.1.0", "cytoscape-fcose": "^2.2.0", "d3": "^7.9.0", "d3-sankey": "^0.12.3", "dagre-d3-es": "7.0.14", "dayjs": "^1.11.21", "dompurify": "^3.4.12", "elkjs": "^0.9.3", "es-toolkit": "^1.45.1", "katex": "^0.18.0", "khroma": "^2.1.0", "marked": "^16.3.0", "roughjs": "^4.6.6", "stylis": "^4.3.6", "ts-dedent": "^2.2.0", "uuid": "^11.1.0 || ^12 || ^13 || ^14.0.0" } }, "sha512-w7nr/SFrLO7BaVTs3dQTvYSV6nYSBj0Yy9DjBhsIJtAcHqRzXSq4Pg32ujHZ/AdWsAMNEvvhbm5dt9E2tOiHzw=="],
+
+    "mitt": ["mitt@3.0.1", "", {}, "sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw=="],
+
+    "modern-tar": ["modern-tar@0.8.6", "", {}, "sha512-LYSks0tNVqbtez/9OB0YFP6qLRSqkdAxJWOQpVaR67lNTbj2zNLyYpowkRMia5lXLCZKzxwoxkxH2MbbBR2aEg=="],
+
+    "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+
+    "nanoid": ["nanoid@3.3.20", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ=="],
+
+    "node-releases": ["node-releases@2.0.60", "", {}, "sha512-OmO8+GM1JUZqXET720VrJCwkjUCXmCMQm0Z3UDDRbfNLHS4NEAvY60j5jiFv0tkKw2PNNlqOLhahVmwJIOLDIQ=="],
+
+    "p-limit": ["p-limit@7.3.3", "", { "dependencies": { "yocto-queue": "^1.2.1" } }, "sha512-SKgVvDU5TNIxQ4r30U75BNLC6a+6GOEjngrk/ysM5+Zu3oJuk1SC5ApzIzY/7PjCEjoVPMWJ0zho/4QUiEB7TQ=="],
+
+    "package-manager-detector": ["package-manager-detector@1.9.0", "", {}, "sha512-zAMfbta9nPA8AKkA4WdmNAT8R8s6Dk0/xwPsqNnRidMFcLo1YkLuPDTgs2f64XdzS8vbLNnoJ+uUIkgbz7oRHA=="],
+
+    "path-data-parser": ["path-data-parser@0.1.0", "", {}, "sha512-NOnmBpt5Y2RWbuv0LMzsayp3lVylAHLPUTut412ZA3l+C4uw4ZVkQbjShYCQ8TCpUMdPapr4YjUqLYD6v68j+w=="],
+
+    "picocolors": ["picocolors@1.1.1", "", {}, "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA=="],
+
+    "picomatch": ["picomatch@4.0.7", "", {}, "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA=="],
+
+    "playwright": ["playwright@1.55.0", "", { "dependencies": { "playwright-core": "1.55.0" }, "optionalDependencies": { "fsevents": "2.3.2" }, "bin": { "playwright": "cli.js" } }, "sha512-sdCWStblvV1YU909Xqx0DhOjPZE4/5lJsIS84IfN9dAZfcl/CIZ5O8l3o0j7hPMjDvqoTF8ZUcc+i/GL5erstA=="],
+
+    "playwright-core": ["playwright-core@1.55.0", "", { "bin": { "playwright-core": "cli.js" } }, "sha512-GvZs4vU3U5ro2nZpeiwyb0zuFaqb9sUiAJuyrWpcGouD8y9/HLgGbNRjIph7zU9D3hnPaisMl9zG9CgFi/biIg=="],
+
+    "points-on-curve": ["points-on-curve@0.2.0", "", {}, "sha512-0mYKnYYe9ZcqMCWhUjItv/oHjvgEsfKvnUTg8sAtnHr3GVy7rGkXCb6d5cSyqrWqL4k81b9CPg3urd+T7aop3A=="],
+
+    "points-on-path": ["points-on-path@0.2.1", "", { "dependencies": { "path-data-parser": "0.1.0", "points-on-curve": "0.2.0" } }, "sha512-25ClnWWuw7JbWZcgqY/gJ4FQWadKxGWk+3kR/7kD0tCaDtPPMj7oHu2ToLaVhfpnHrZzYby2w6tUA0eOIuUg8g=="],
+
+    "postcss": ["postcss@8.5.32", "", { "dependencies": { "nanoid": "^3.3.20", "picocolors": "^1.1.1", "source-map-js": "^1.2.2" } }, "sha512-LJlKCCAUFKOuZxipUdYw1NzIITEsPcgyOG9LkvRJvuKj/bRzbuRY0ARXvL0pWGpsZvn8jku+LMep2eU0seHp8g=="],
+
+    "puppeteer": ["puppeteer@25.16.0", "", { "dependencies": { "@puppeteer/browsers": "3.2.6", "chromium-bidi": "157.0.8090-0", "devtools-protocol": "0.0.1704951", "lilconfig": "^3.1.3", "puppeteer-core": "25.16.0", "typed-query-selector": "^2.12.3" }, "bin": { "puppeteer": "lib/puppeteer/node/cli.js" } }, "sha512-LOr3reYnxAYYfQkpopz1fQnL0LdvqhpR5U2Fu+QnwzTX2gpVTHsn91UETo5NNC1md2/oC54Zu1ChBXgZDNSP1A=="],
+
+    "puppeteer-core": ["puppeteer-core@25.16.0", "", { "dependencies": { "@puppeteer/browsers": "3.2.6", "chromium-bidi": "157.0.8090-0", "devtools-protocol": "0.0.1704951", "typed-query-selector": "^2.12.3", "webdriver-bidi-protocol": "1.0.1", "ws": "^8.22.0" } }, "sha512-VA5Pf54N8shfopNkZZXCdiiwfnnY8ZJYAMqFQRhlH5mGUhfwf53Ar770GPtdpTDLUqvQeYpIBtC9/G2Jij2IJw=="],
+
+    "react": ["react@19.3.1", "", {}, "sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw=="],
+
+    "react-aria": ["react-aria@3.53.1", "", { "dependencies": { "@internationalized/date": "^3.12.4", "@internationalized/number": "^3.6.9", "@internationalized/string": "^3.2.10", "@react-types/shared": "^3.37.0", "@swc/helpers": "^0.5.0", "aria-hidden": "^1.2.3", "clsx": "^2.0.0", "react-stately": "3.51.0", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1", "react-dom": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-dikisyOjJd3D2fFrIDWmVWzqiLz5B86GzZv1zxs7xI4dVc0JIz/1Wa52I20gYvVL2WXeFXlygYsle/QcOMhtcg=="],
+
+    "react-dom": ["react-dom@19.3.1", "", { "dependencies": { "scheduler": "^0.28.0" }, "peerDependencies": { "react": "^19.3.1" } }, "sha512-Y0bARz53lhEC1NMCASs0/j+faB/zqt3R8hpvg1e8+61ZVJ4UL0UdC4cBbXfZMcIuhrfgeILTLe+ZeBCavQPtKQ=="],
+
+    "react-refresh": ["react-refresh@0.17.0", "", {}, "sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ=="],
+
+    "react-stately": ["react-stately@3.51.0", "", { "dependencies": { "@internationalized/date": "^3.12.4", "@internationalized/number": "^3.6.9", "@internationalized/string": "^3.2.10", "@react-types/shared": "^3.37.0", "@swc/helpers": "^0.5.0", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "react": "^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1" } }, "sha512-YJcmkAXu2XOQP97hO/qz/cC3qv9kni3oVhwBlxWr358BHePJUpY15XwL3YSRMKxYt4EkslPqAz11JRirMfANGw=="],
+
+    "react-use-measure": ["react-use-measure@2.1.7", "", { "peerDependencies": { "react": ">=16.13", "react-dom": ">=16.13" }, "optionalPeers": ["react-dom"] }, "sha512-KrvcAo13I/60HpwGO5jpW7E9DfusKyLPLvuHlUyP5zqnmAPhNc6qTRjUQrdTADl0lpPpDVU2/Gg51UlOGHXbdg=="],
+
+    "reduce-css-calc": ["reduce-css-calc@1.3.0", "", { "dependencies": { "balanced-match": "^0.4.2", "math-expression-evaluator": "^1.2.14", "reduce-function-call": "^1.0.1" } }, "sha512-0dVfwYVOlf/LBA2ec4OwQ6p3X9mYxn/wOl2xTcLwjnPYrkgEfPx3VI4eGCH3rQLlPISG5v9I9bkZosKsNRTRKA=="],
+
+    "reduce-function-call": ["reduce-function-call@1.0.3", "", { "dependencies": { "balanced-match": "^1.0.0" } }, "sha512-Hl/tuV2VDgWgCSEeWMLwxLZqX7OK59eU1guxXsRKTAyeYimivsKdtcV4fu3r710tpG5GmDKDhQ0HSZLExnNmyQ=="],
+
+    "robust-predicates": ["robust-predicates@3.0.3", "", {}, "sha512-NS3levdsRIUOmiJ8FZWCP7LG3QpJyrs/TE0Zpf1yvZu8cAJJ6QMW92H1c7kWpdIHo8RvmLxN/o2JXTKHp74lUA=="],
+
+    "rollup": ["rollup@4.66.0", "", { "dependencies": { "@types/estree": "1.0.9" }, "optionalDependencies": { "@napi-rs/lzma-linux-x64-gnu": "1.5.1", "@rollup/rollup-android-arm-eabi": "4.66.0", "@rollup/rollup-android-arm64": "4.66.0", "@rollup/rollup-darwin-arm64": "4.66.0", "@rollup/rollup-darwin-x64": "4.66.0", "@rollup/rollup-freebsd-arm64": "4.66.0", "@rollup/rollup-freebsd-x64": "4.66.0", "@rollup/rollup-linux-arm-gnueabihf": "4.66.0", "@rollup/rollup-linux-arm-musleabihf": "4.66.0", "@rollup/rollup-linux-arm64-gnu": "4.66.0", "@rollup/rollup-linux-arm64-musl": "4.66.0", "@rollup/rollup-linux-loong64-gnu": "4.66.0", "@rollup/rollup-linux-loong64-musl": "4.66.0", "@rollup/rollup-linux-ppc64-gnu": "4.66.0", "@rollup/rollup-linux-ppc64-musl": "4.66.0", "@rollup/rollup-linux-riscv64-gnu": "4.66.0", "@rollup/rollup-linux-riscv64-musl": "4.66.0", "@rollup/rollup-linux-s390x-gnu": "4.66.0", "@rollup/rollup-linux-x64-gnu": "4.66.0", "@rollup/rollup-linux-x64-musl": "4.66.0", "@rollup/rollup-openbsd-x64": "4.66.0", "@rollup/rollup-openharmony-arm64": "4.66.0", "@rollup/rollup-win32-arm64-msvc": "4.66.0", "@rollup/rollup-win32-ia32-msvc": "4.66.0", "@rollup/rollup-win32-x64-gnu": "4.66.0", "@rollup/rollup-win32-x64-msvc": "4.66.0", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-Onq6/qO4ARhxIs+jYiHE0pYehadLyMECAiGEqQ+0/aWND3+2PmifJIIqBLYtuBODqHTlOUEQFtIVPyCy0Lck7A=="],
+
+    "roughjs": ["roughjs@4.6.6", "", { "dependencies": { "hachure-fill": "^0.5.2", "path-data-parser": "^0.1.0", "points-on-curve": "^0.2.0", "points-on-path": "^0.2.1" } }, "sha512-ZUz/69+SYpFN/g/lUlo2FXcIjRkSu3nDarreVdGGndHEBJ6cXPdKguS8JGxwj5HA5xIbVKSmLgr5b3AWxtRfvQ=="],
+
+    "rw": ["rw@1.3.3", "", {}, "sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ=="],
+
+    "safer-buffer": ["safer-buffer@2.1.2", "", {}, "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="],
+
+    "scheduler": ["scheduler@0.28.0", "", {}, "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw=="],
+
+    "semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+
+    "simple-icons": ["simple-icons@16.34.0", "", {}, "sha512-UTxKn0PVspk84B2hHF3Dqiqht1yDjJmDc/t4cO7PyCQxCMk6OjEu95pnpGjhLaGeQ4qBrGASbefTIe/+czrX7g=="],
+
+    "source-map-js": ["source-map-js@1.2.2", "", {}, "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw=="],
+
+    "string-width": ["string-width@8.3.0", "", { "dependencies": { "get-east-asian-width": "^1.5.0", "strip-ansi": "^7.1.2" } }, "sha512-ZbmZM0JCihQN91dWnxoipT2KOEyHqEyfRXUyjuRhW8b/xnqPDoq4gWEVApTVa9db2wN8mmoikgFBbjh71+cGeQ=="],
+
+    "strip-ansi": ["strip-ansi@7.2.0", "", { "dependencies": { "ansi-regex": "^6.2.2" } }, "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w=="],
+
+    "stylis": ["stylis@4.4.0", "", {}, "sha512-5Z9ZpRzfuH6l/UAvCPAPUo3665Nk2wLaZU3x+TLHKVzIz33+sbJqbtrYoC3KD4/uVOr2Zp+L0LySezP9OHV9yA=="],
+
+    "tabbable": ["tabbable@6.5.1", "", {}, "sha512-dMCuwDUY6Noz3zVKLefBC4wq+aJV20yc7vWmM7uTNGwtQSFF5kX7OUIUsxuVajz/bdt5Xqdah3/0NLjth+cM5A=="],
+
+    "tailwind-merge": ["tailwind-merge@3.7.0", "", {}, "sha512-XPPUyAc+cvspz3lHTcR/QgPfW2A0lv/xQNIjX3HGhLR+Nq2lHaLq5MtTesHn8GUr3W3DguT2KT5x3NVgRtYwmA=="],
+
+    "tailwindcss": ["tailwindcss@4.3.3", "", {}, "sha512-gOhV3P7ufE62QDGg1zVaTgCR+EtPv92k2nIhVcVKcLmxT1sUBsQGhnZj175j+MqRt4zLF7ic+sCYjfhxMxj7YQ=="],
+
+    "tinyexec": ["tinyexec@1.3.1", "", {}, "sha512-GCvB3aoys96IuDFBMcTB46JOR6mdMtAToqwiW8JlWhsoh1mhHi/xn9ss/Dg7N555GiJyEt2qzoG/NHCwM6h1EA=="],
+
+    "tinyglobby": ["tinyglobby@0.2.17", "", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.4" } }, "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g=="],
+
+    "ts-dedent": ["ts-dedent@2.3.0", "", {}, "sha512-JfJeIHke7y2egdGGgRAvpCwYFUsHlM2gPcrVOxFkznt/4uzQ7HFmvE63iFHVLBJNDuyDOQgijDK/tXH/f6Msjg=="],
+
+    "tslib": ["tslib@2.8.1", "", {}, "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="],
+
+    "typed-query-selector": ["typed-query-selector@2.12.3", "", {}, "sha512-/dtuMZyutHLlrxWhhC1uib00ELUr2dZ8C9B8YzZYsJmeE3V56OxRblrSM2UaF142pcMtak7ehZ6+poWGeehNIg=="],
+
+    "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
+
+    "undici-types": ["undici-types@8.9.0", "", {}, "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg=="],
+
+    "update-browserslist-db": ["update-browserslist-db@1.3.4", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-t8wonIOdQyOjtPd2VktlBu6QjTVTks6v8bSi7kd0r2Vll8TK1JYDZtRRdbmCHOAMphkZgrzK+L+vXK4pyZ8t4A=="],
+
+    "use-sync-external-store": ["use-sync-external-store@1.7.0", "", { "peerDependencies": { "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-6L+EeigHMQhdaIPNIFUKwfWJSwWFQ8gJbJ2DLOs5sDIegTwR9fRxvnM3uciHKjIZhFz+KAv2emhWMRvDmMcY8A=="],
+
+    "uuid": ["uuid@14.0.3", "", { "bin": { "uuid": "dist-node/bin/uuid" } }, "sha512-Sc5u1VVln93y1Xnz4R+CunOZc7R9LUcTmhj7Rc7Eg3HVcf7rVn2FOoa812fe0W8p3jD7xeoGSYbfqCGGH2B6xw=="],
+
+    "vite": ["vite@6.4.5", "", { "dependencies": { "esbuild": "^0.25.0", "fdir": "^6.4.4", "picomatch": "^4.0.2", "postcss": "^8.5.3", "rollup": "^4.34.9", "tinyglobby": "^0.2.13" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0", "jiti": ">=1.21.0", "less": "*", "lightningcss": "^1.21.0", "sass": "*", "sass-embedded": "*", "stylus": "*", "sugarss": "*", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "jiti", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-4enwjFfi4IwtEh0w+jPzpLVOFQiPHmmzPxcHXQOyEur47o6u0jE573DmGpjA+7irXoMLYRZD5ZaFUEneS3abPg=="],
+
+    "webdriver-bidi-protocol": ["webdriver-bidi-protocol@1.0.1", "", {}, "sha512-WXWs/aXF2a6Al1Z2/V/7Gp2oPZOAAmHjJOTmv4KCXRJ122IMj3tSSMc6a4q3K4QOmhQbse/Ahr+oTVJOU2dUiw=="],
+
+    "wrap-ansi": ["wrap-ansi@9.0.2", "", { "dependencies": { "ansi-styles": "^6.2.1", "string-width": "^7.0.0", "strip-ansi": "^7.1.0" } }, "sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww=="],
+
+    "ws": ["ws@8.22.0", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg=="],
+
+    "y18n": ["y18n@5.0.8", "", {}, "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA=="],
+
+    "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
+
+    "yargs": ["yargs@18.2.0", "", { "dependencies": { "cliui": "^9.0.1", "escalade": "^3.1.1", "get-caller-file": "^2.0.5", "string-width": "^8.2.1", "y18n": "^5.0.5", "yargs-parser": "^22.0.0" } }, "sha512-9OpKOLeaoNFecEp7P6iYbzze/5CqWoH7N3SMs/6y1XF4nMvFMspEGZzJ6uFi9MmQwXhyzqYoSEKO3tvA3Z/o2w=="],
+
+    "yargs-parser": ["yargs-parser@22.0.0", "", {}, "sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw=="],
+
+    "yocto-queue": ["yocto-queue@1.2.2", "", {}, "sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ=="],
+
+    "zod": ["zod@4.6.7", "", {}, "sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg=="],
+
+    "@headlessui/react/@floating-ui/react": ["@floating-ui/react@0.26.28", "", { "dependencies": { "@floating-ui/react-dom": "^2.1.2", "@floating-ui/utils": "^0.2.8", "tabbable": "^6.0.0" }, "peerDependencies": { "react": ">=16.8.0", "react-dom": ">=16.8.0" } }, "sha512-yORQuuAtVpiRjpMhdc0wJj06b9JFjrYF4qp96j++v2NBpbi6SEGF7donUJ3TMieerQ6qVkAv1tgr7L4r5roTqw=="],
+
+    "@types/d3/@types/d3-array": ["@types/d3-array@3.2.2", "", {}, "sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw=="],
+
+    "@types/d3/@types/d3-color": ["@types/d3-color@3.1.3", "", {}, "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A=="],
+
+    "@types/d3/@types/d3-delaunay": ["@types/d3-delaunay@6.0.4", "", {}, "sha512-ZMaSKu4THYCU6sV64Lhg6qjf1orxBthaC161plr5KuPHo3CNm8DTHiLw/5Eq2b6TsNP0W0iJrUOFscY6Q450Hw=="],
+
+    "@types/d3/@types/d3-format": ["@types/d3-format@3.0.4", "", {}, "sha512-fALi2aI6shfg7vM5KiR1wNJnZ7r6UuggVqtDA+xiEdPZQwy/trcQaHnwShLuLdta2rTymCNpxYTiMZX/e09F4g=="],
+
+    "@types/d3/@types/d3-geo": ["@types/d3-geo@3.1.1", "", { "dependencies": { "@types/geojson": "*" } }, "sha512-65Emv9fQiQQqphLlRkuQ5ypPsOmWPhtBGCMv61JDPEPMvsx+gzhGf74yw1a78xFKPj6zw4AgQICJoQv0vK9M2w=="],
+
+    "@types/d3/@types/d3-interpolate": ["@types/d3-interpolate@3.0.4", "", { "dependencies": { "@types/d3-color": "*" } }, "sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA=="],
+
+    "@types/d3/@types/d3-scale": ["@types/d3-scale@4.0.9", "", { "dependencies": { "@types/d3-time": "*" } }, "sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw=="],
+
+    "@types/d3/@types/d3-shape": ["@types/d3-shape@3.2.0", "", { "dependencies": { "@types/d3-path": "*" } }, "sha512-kVd74ta9eof3eJOvbNd1vGKS/XERRyQbT26Og63hIsvDO84cjD5gEOhsXf26w3FSoNlPVz84DOFcKv/oou+fMw=="],
+
+    "@types/d3/@types/d3-time": ["@types/d3-time@3.0.4", "", {}, "sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g=="],
+
+    "@types/d3/@types/d3-time-format": ["@types/d3-time-format@4.0.3", "", {}, "sha512-5xg9rC+wWL8kdDj153qZcsJ0FWiFt0J5RB6LYUNZjwSnesfblqrI/bJ1wBdJ8OQfncgbJG5+2F+qfqnqyzYxyg=="],
+
+    "@types/d3-contour/@types/d3-array": ["@types/d3-array@3.2.2", "", {}, "sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw=="],
+
+    "@types/d3-interpolate/@types/d3-color": ["@types/d3-color@3.1.3", "", {}, "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A=="],
+
+    "@types/d3-scale/@types/d3-time": ["@types/d3-time@3.0.4", "", {}, "sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g=="],
+
+    "@types/d3-zoom/@types/d3-interpolate": ["@types/d3-interpolate@3.0.4", "", { "dependencies": { "@types/d3-color": "*" } }, "sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA=="],
+
+    "@zenuml/core/marked": ["marked@4.3.0", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-PRsaiG84bK+AMvxziE/lCFss8juXjNaWzVbN5tXAm4XjeaS9NAHhop+PjQxz2A9h8Q4M/xGmzP8vqNwy6JeK0A=="],
+
+    "cliui/string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
+
+    "cytoscape-fcose/cose-base": ["cose-base@2.2.0", "", { "dependencies": { "layout-base": "^2.0.0" } }, "sha512-AzlgcsCbUMymkADOJtQm3wO9S3ltPfYOFD5033keQn9NJzIbtnZj+UdBJe7DYml/8TdbtHJW3j58SOnKhWY/5g=="],
+
+    "d3/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3/d3-delaunay": ["d3-delaunay@6.0.4", "", { "dependencies": { "delaunator": "5" } }, "sha512-mdjtIZ1XLAM8bm/hx3WwjfHt6Sggek7qH043O8KEjDXN40xi3vx/6pYSVTwLjEgiXQTbvaouWKynLBiUZ6SK6A=="],
+
+    "d3/d3-format": ["d3-format@3.1.2", "", {}, "sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg=="],
+
+    "d3/d3-geo": ["d3-geo@3.1.1", "", { "dependencies": { "d3-array": "2.5.0 - 3" } }, "sha512-637ln3gXKXOwhalDzinUgY83KzNWZRKbYubaG+fGVuc/dxO64RRljtCTnf5ecMyE1RIdtqpkVcq0IbtU2S8j2Q=="],
+
+    "d3-contour/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3-dsv/commander": ["commander@7.2.0", "", {}, "sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw=="],
+
+    "d3-geo/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3-sankey/d3-array": ["d3-array@2.12.1", "", { "dependencies": { "internmap": "^1.0.0" } }, "sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ=="],
+
+    "d3-sankey/d3-shape": ["d3-shape@1.3.7", "", { "dependencies": { "d3-path": "1" } }, "sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw=="],
+
+    "d3-scale/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "d3-scale/d3-format": ["d3-format@3.1.2", "", {}, "sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg=="],
+
+    "d3-time/d3-array": ["d3-array@3.2.4", "", { "dependencies": { "internmap": "1 - 2" } }, "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg=="],
+
+    "katex/commander": ["commander@8.3.0", "", {}, "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww=="],
+
+    "mermaid/katex": ["katex@0.18.11", "", { "dependencies": { "commander": "^15.0.0" }, "bin": { "katex": "cli.js" } }, "sha512-yvyz/2VMKqoho/35Hat5w37wIEdWJ5ElVMidTAlWrxr5uW4aBGsEpveTmKh18/zw08v/7lGswCPon4OhqmqrTA=="],
+
+    "reduce-function-call/balanced-match": ["balanced-match@1.0.2", "", {}, "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="],
+
+    "rollup/fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+
+    "vite/fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+
+    "wrap-ansi/string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
+
+    "@types/d3-zoom/@types/d3-interpolate/@types/d3-color": ["@types/d3-color@3.1.3", "", {}, "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A=="],
+
+    "cytoscape-fcose/cose-base/layout-base": ["layout-base@2.0.1", "", {}, "sha512-dp3s92+uNI1hWIpPGH3jK2kxE2lMjdXdr+DH8ynZHpd6PUlH6x6cbuXnoMmiNumznqaNO31xu9e79F0uuZ0JFg=="],
+
+    "d3-sankey/d3-array/internmap": ["internmap@1.0.1", "", {}, "sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw=="],
+
+    "d3-sankey/d3-shape/d3-path": ["d3-path@1.0.9", "", {}, "sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg=="],
+  }
+}
diff --git a/cli/apple/resubmit.ts b/cli/apple/resubmit.ts
index 66d1944..6bd2406 100644
--- a/cli/apple/resubmit.ts
+++ b/cli/apple/resubmit.ts
@@ -20,7 +20,7 @@
 // `storebound apple submit --build <n>` (cli/apple/submit.ts) runs the same steps for a first submission: the version
 // is --version, else the one an open submission holds, else the editable one (Prepare for Submission or rejected).
 // Under `serve` (the desktop's owner action) the plan table is printed next to the --json result.
-import { sellsOn } from '../lib/config';
+import { macosSubmitSkips, sellsOn } from '../lib/config';
 import { changeText, RELEASE_TYPE_EDITABLE, releaseTypeChanges, wantedRelease } from '../lib/release-type';
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
@@ -86,6 +86,10 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
       && ((mode === 'submit' ? SUBMITTABLE_APP : REJECTED_APP).has(stateOf(x)) || back.has(platformOf(x)));
     platform = pickPlatform(every, fits, undefined, mode === 'submit' ? `a version to submit${want ? ` (${want})` : ''}` : `a rejected version${want ? ` (${want})` : ''}`);
   }
+  // the Mac app of a two-platform record may sell nothing and have no Game Center (apple.macos): its submission then
+  // carries the version and build only
+  const macSkips = macosSubmitSkips(config, platform);
+  if (macSkips.iaps && ids.length) { log(TAG, `${ids.length} in-app purchase(s) left out: ${macSkips.iaps}`); ids.length = 0; }
   const versions = await c.all(versionsPath(appId, platform));
   const open = await openSubmissions(c, appId, undefined, platform);
   const held = new Set(open.filter(s => s.state === 'UNRESOLVED_ISSUES').flatMap(s => s.items.filter(i => i.kind === 'appStoreVersion').map(i => i.versionId)));
@@ -125,7 +129,8 @@ export async function submitVersion(ctx: Ctx, mode: 'submit' | 'resubmit'): Prom
   // Game Center: a build with the entitlement needs the app's Game Center detail and the version's switch, else the
   // submission answers 409 STATE_ERROR.BUILD_INDICATES_GAME_CENTER_ENABLED (seen live); the same upsert as apple game-center
   const gcUse = gameCenterInUse(config, root);
-  const gc = gcUse.inUse ? await readGcSwitch(c, appId, v) : null;
+  if (gcUse.inUse && macSkips.gameCenter) log(TAG, `Game Center switch left alone: ${macSkips.gameCenter}`);
+  const gc = gcUse.inUse && !macSkips.gameCenter ? await readGcSwitch(c, appId, v) : null;
   const gcPlan = gc ? gcSwitchPlan(gc) : [];
   if (a.has('json')) {
     printJson({ dryRun: dry, releaseKind: kind.kind, releaseType: relChanges.length ? { changes: relChanges } : null, gameCenter: gcPlan, version: { id: v.id, versionString, platform, state: stateOf(v) }, build, submission: state.choice ?? null, resolve: marks, rows, skipped: plan.skipped, blockers });
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index cd3acd1..0afa907 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -1161,6 +1161,14 @@ export const appleName = (c: Pick<ShipConfig, 'app' | 'apple'>): string => c.app
 export const platformsOf = (c: Pick<ShipConfig, 'app' | 'apple' | 'play'>): Platform[] =>
   c.app.platforms ?? [...(c.apple ? ['ios' as const] : []), ...(c.play ? ['android' as const] : [])];
 
+/** What a macOS submission leaves out per apple.macos (noIap: the in-app purchases; no gameCenter: the version's Game
+ *  Center switch), with why; nulls for every other platform. Pure. */
+export function macosSubmitSkips(c: Pick<ShipConfig, 'apple'>, platform: string): { iaps: string | null; gameCenter: string | null } {
+  if (platform !== 'MAC_OS') return { iaps: null, gameCenter: null };
+  return { iaps: c.apple?.macos?.noIap ? 'apple.macos.noIap (the Mac app sells nothing)' : null,
+    gameCenter: c.apple?.macos?.gameCenter ? null : 'the Mac app has no Game Center (apple.macos.gameCenter is not true)' };
+}
+
 /** Is a catalog item (product / subscription) sold on this store? Pure. */
 export const sellsOn = (c: Pick<ShipConfig, 'app' | 'apple' | 'play'>, item: { platforms?: Platform[] }, store: 'apple' | 'play'): boolean => {
   const p: Platform = store === 'apple' ? 'ios' : 'android';
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 578902c..ec81a14 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1585,3 +1585,12 @@ that fails without the fix (see CONTRIBUTING.md).
   409 itself is treated the same way. `apple testflight distribute --submit-review` prints the line for testers not invited yet.
 - **Never:** retry the invitation in a loop, or report the added tester as a failure.
 - **Guard:** `installableBuild` / `noInstallableBuildHint` in `cli/lib/testflight.ts`, `tests/apple-release-gaps.test.ts`.
+
+## 128. macOS submission of a two-platform app planned the iOS in-app purchases and Game Center
+
+- **Symptom:** `apple resubmit --platform macos` (and `apple submit`) planned every consumable of the config and a
+  `gameCenterAppVersions` write for a Mac app that sells nothing and has no Game Center.
+- **Do:** set `apple.macos.noIap: true` and leave `apple.macos.gameCenter` unset; a macOS submission then carries the
+  version and build only, and the dry run names what it left out and why.
+- **Never:** attach iOS-only products to the Mac submission or switch Game Center on for a Mac app without it.
+- **Guard:** `macosSubmitSkips` in `cli/lib/config.ts`, `tests/resubmit.test.ts`.
diff --git a/tests/resubmit.test.ts b/tests/resubmit.test.ts
index 54fe538..fa068e6 100644
--- a/tests/resubmit.test.ts
+++ b/tests/resubmit.test.ts
@@ -215,6 +215,26 @@ describe('apple submit --build <n> (a first submission, the desktop owner action
     expect(shown(a)).toEqual([]);
   });
 
+  test('macOS with apple.macos.noIap and no Mac Game Center: version and build only, the skips named', async () => {
+    fresh();
+    s.asc.put({ type: 'appStoreVersions', id: 'ver-m', attributes: { versionString: '2.0.0', appVersionState: 'PREPARE_FOR_SUBMISSION', platform: 'MAC_OS' }, rels: { app: APP } });
+    s.asc.put({ type: 'builds', id: 'b-13', attributes: { version: '13', processingState: 'VALID', usesNonExemptEncryption: false }, rels: { app: APP } });
+    const p = project({ ...ONE, apple: { ...ONE.apple!, macos: { noIap: true } } });
+    const a = s.calls.length;
+    const r = await capture(() => appleSubmit(p.ctx(['--build', '13', '--platform', 'macos'])));
+    expect(r.out).toContain('1 in-app purchase(s) left out: apple.macos.noIap');
+    expect(r.out).not.toContain('com.example.notes.gems');
+    expect(r.out).toMatch(/app version 2\.0\.0/);
+    expect(shown(a)).toEqual([]);
+    expect(s.calls.slice(a).some(c => /gameCenter/.test(c.path))).toBe(false);
+  });
+  test('macosSubmitSkips: only MAC_OS, gameCenter true keeps the switch', async () => {
+    const { macosSubmitSkips } = await import('../cli/lib/config');
+    expect(macosSubmitSkips({ apple: { ...ONE.apple!, macos: { noIap: true } } }, 'IOS')).toEqual({ iaps: null, gameCenter: null });
+    expect(macosSubmitSkips({ apple: { ...ONE.apple!, macos: { gameCenter: true } } }, 'MAC_OS')).toEqual({ iaps: null, gameCenter: null });
+    expect(macosSubmitSkips({ apple: ONE.apple! }, 'MAC_OS').gameCenter).toContain('no Game Center');
+  });
+
   test('--yes: build attached, one draft with the version and the IAP, submitted; a re-run sends nothing', async () => {
     fresh();
     const p = project(ONE);

From 83d351cf42b16b3e752d9325cd485b000ff92532 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:01:11 +0700
Subject: [PATCH 229/255] storebound 0.8.68: version in package.json and every
 copy, CHANGELOG 0.8.68 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index d7c9e2f..3462bd3 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.67",
+      "version": "0.8.68",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index f107b02..fe9a02b 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index c36badf..2af4967 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 978d68e..4f32a40 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.68 · 2026-11-07
+
 - Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
 - `apple resubmit` / `apple submit --platform macos`: `apple.macos.noIap` leaves every in-app purchase out of the macOS submission and, without `apple.macos.gameCenter: true`, the Game Center switch is not touched (no `gameCenterAppVersions` call); the dry run names what it left out and why (pitfalls #128).
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index cd3f783..5fd0f5f 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index b59f665..c93e9ad 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.67"
+version = "0.8.68"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index a0d6f88..994394c 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.67"
+version = "0.8.68"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 4f84fdb..dcb7aad 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 92aa54d..0f25eb6 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index f5d0387..70d4818 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.67",
+  "version": "0.8.68",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 9c001d1ca9df1e0590c7a446429d6f5f027514e1 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:18:24 +0700
Subject: [PATCH 230/255] play: old testing builds below production listed with
 their replace command (status, validate); 'Not live yet' instead of 'In
 review'; commit redone without changesNotSentForReview on the auto-send 400;
 pitfalls #129

---
 CHANGELOG.md                            |  2 ++
 apps/desktop/src/i18n/en.ts             |  3 +-
 apps/desktop/src/i18n/tr.ts             |  3 +-
 apps/desktop/src/ui/kit.tsx             |  2 +-
 cli/lib/portfolio.ts                    |  6 +++-
 cli/lib/validate-rules.ts               |  2 ++
 cli/play/client.ts                      | 14 ++++++---
 cli/play/old-builds.ts                  | 42 +++++++++++++++++++++++++
 cli/play/review-pending.ts              |  8 +++++
 cli/play/status.ts                      |  4 ++-
 skills/store-pitfalls/SKILL.md          | 16 ++++++++++
 tests/play-old-builds.test.ts           | 31 ++++++++++++++++++
 tests/play-public-version-match.test.ts | 12 +++----
 13 files changed, 130 insertions(+), 15 deletions(-)
 create mode 100644 cli/play/old-builds.ts
 create mode 100644 tests/play-old-builds.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4f32a40..92bb873 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Play: `play status` and `validate` list every build still active on a testing track below the production build, with the `play release --version-code <n> --<track> completed` that replaces it (an old build with a policy issue, e.g. READ_MEDIA_IMAGES, blocks Send changes for review for the whole app). A completed production release the store page does not show yet reads "Not live yet: in review or blocked before review" instead of "In review" (CLI and desktop). A commit with `--not-sent-for-review` that Play answers with 400 "Changes are sent for review automatically" is redone without the parameter (pitfalls #129).
+
 ## 0.8.68 · 2026-11-07
 
 - Desktop app: `storebound` works in a terminal with only the app installed. On every start the app puts a launcher for its own CLI on the PATH (Windows: `%LOCALAPPDATA%\storebound\bin`, added to the user PATH once; macOS / Linux: `~/.local/bin`, added to `~/.zprofile` / `~/.profile` when missing). An npm / bun install stays first, a file that is not the app's launcher is never overwritten, AppImage runs skip it, `STOREBOUND_NO_CLI_SHIM=1` turns it off.
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
index b34f6bb..181d7c2 100644
--- a/apps/desktop/src/i18n/en.ts
+++ b/apps/desktop/src/i18n/en.ts
@@ -153,7 +153,8 @@ export const en = {
   'phase.releasedUnknown': "Couldn't check the store page",
   'phase.pageUnknown': "Couldn't check the store page",
   'phase.pageStale': "couldn't check the store page, as of {when}",
-  'phase.reviewLive': 'In review (live: {version})',
+  'phase.reviewLive': 'Not live yet (live: {version}): in review or blocked before review',
+  'phase.playPending': 'Not live yet: in review or blocked before review',
   'roll.publishReady': 'If the release is approved, publish it in Publishing overview ("Publish N changes"). The agent prepares it with `{cmd}`; the final press is for the owner.',
   'roll.publishOpen': 'Open Publishing overview',
   'phase.reviewManaged': 'In review / ready to publish (managed publishing)',
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
index 03dc74d..417f0dd 100644
--- a/apps/desktop/src/i18n/tr.ts
+++ b/apps/desktop/src/i18n/tr.ts
@@ -155,7 +155,8 @@ export const tr: Record<keyof typeof en, string> = {
   'phase.releasedUnknown': 'Mağaza sayfası kontrol edilemedi',
   'phase.pageUnknown': 'Mağaza sayfası kontrol edilemedi',
   'phase.pageStale': 'mağaza sayfası kontrol edilemedi, {when} itibarıyla',
-  'phase.reviewLive': 'İncelemede (yayında: {version})',
+  'phase.reviewLive': 'Henüz yayında değil (yayında: {version}): incelemede ya da incelemeden önce takıldı',
+  'phase.playPending': 'Henüz yayında değil: incelemede ya da incelemeden önce takıldı',
   'roll.publishReady': 'Sürüm onaylandıysa Yayınlama özetinde yayınlayın ("Publish N changes"). Ajan `{cmd}` ile hazırlar; son basış sahibine aittir.',
   'roll.publishOpen': 'Yayınlama özetini aç',
   'phase.reviewManaged': 'İncelemede / yayına hazır (yönetilen yayınlama)',
diff --git a/apps/desktop/src/ui/kit.tsx b/apps/desktop/src/ui/kit.tsx
index d118760..6e58bff 100644
--- a/apps/desktop/src/ui/kit.tsx
+++ b/apps/desktop/src/ui/kit.tsx
@@ -25,7 +25,7 @@ export function phaseLabel(r: StoreRelease | null | undefined): { text: string;
   const stale = r.pageStaleAt ? ` · ${t('phase.pageStale', { when: ago(r.pageStaleAt) })}` : '';
   if (r.store === 'android' && r.phase === 'released') return { text: t('phase.pageUnknown') + stale, tone: 'neutral' };
   if (r.store === 'android' && (r.phase === 'review' || r.phase === 'sent'))
-    return { text: (r.managed ? t('phase.reviewManaged') : r.liveVersion ? t('phase.reviewLive', { version: r.liveVersion }) : t('phase.review')) + stale, tone: 'warn' };
+    return { text: (r.managed ? t('phase.reviewManaged') : r.liveVersion ? t('phase.reviewLive', { version: r.liveVersion }) : t('phase.playPending')) + stale, tone: 'warn' };
   if (r.store === 'android' && r.phase === 'live' && stale) return { text: t('phase.live') + stale, tone: 'ok' };
   if (r.phase === 'testing' && r.track) return { text: `${t('phase.testing')} · ${r.track}`, tone: 'info' };
   return { text: t(`phase.${r.phase}`), tone: PHASE_TONE[r.phase] };
diff --git a/cli/lib/portfolio.ts b/cli/lib/portfolio.ts
index ae906e6..8448f5f 100644
--- a/cli/lib/portfolio.ts
+++ b/cli/lib/portfolio.ts
@@ -161,11 +161,15 @@ export function playReleases(data: unknown): StoreRelease[] {
   return out;
 }
 
+/** A completed Play production release the store page does not show yet. The API has no review state: it may be in
+ *  review, or blocked before review (an old build on another track with a policy issue, pitfall 129). Never "In review". */
+export const PLAY_NOT_LIVE = 'Not live yet: in review or blocked before review (the API cannot tell; see Publishing overview)';
+
 /** Plain words for a Play release's phase, decided from the store page (CLI text; the desktop has the same words in
  *  i18n, apps/desktop/src/ui/kit.tsx phaseLabel). */
 export function playReleaseLabel(r: StoreRelease): string {
   const base = ((): string => {
-    if (r.phase === 'review' || r.phase === 'sent') return r.managed ? 'In review / ready to publish (managed publishing)' : r.liveVersion ? `In review (live: ${r.liveVersion})` : 'In review';
+    if (r.phase === 'review' || r.phase === 'sent') return r.managed ? 'In review / ready to publish (managed publishing)' : r.liveVersion ? `${PLAY_NOT_LIVE} (live: ${r.liveVersion})` : PLAY_NOT_LIVE;
     if (r.phase === 'released') return "Couldn't check the store page";
     if (r.phase === 'live') return 'Live';
     if (r.phase === 'rollout') return `Rolling out ${Math.round((r.fraction ?? 0) * 1000) / 10}%`;
diff --git a/cli/lib/validate-rules.ts b/cli/lib/validate-rules.ts
index ad3593b..f7854e5 100644
--- a/cli/lib/validate-rules.ts
+++ b/cli/lib/validate-rules.ts
@@ -1,6 +1,7 @@
 // Store readiness rules for `storebound validate`. Pure: the command collects a snapshot from both APIs (read-only),
 // these functions turn it into an ordered list of findings. Order = the order you would fix things in.
 
+import { oldTrackBuilds } from '../play/old-builds';
 import { consoleLink, consoleUrl } from './console-links';
 import { describePending, type Pending, repairable } from '../apple/screenshot-health';
 import { type FixAction, fixAppleListing, fixPlayListing, fixReviewDetails } from './fix-actions';
@@ -409,6 +410,7 @@ export function playRules(s: PlaySnapshot): Finding[] {
     if (r.status === 'halted') add('warn', 'tracks', `${t.track}: release ${r.versionCodes.join(',')} is halted`, 'storebound play rollout --resume (owner)');
     if (r.status === 'inProgress') add('ok', 'tracks', `${t.track}: rollout ${Math.round((r.userFraction ?? 0) * 100)}% of ${r.versionCodes.join(',')}`);
   }
+  for (const o of oldTrackBuilds(s.tracks)) add('warn', 'old-builds', `${o.track}: old build ${o.versionCodes.join(',')} (${o.status}) is still active below production ${o.productionCode}; Play reviews it with every submission and a policy issue in it (e.g. READ_MEDIA_IMAGES / READ_MEDIA_VIDEO) blocks Send changes for review (pitfall 129)`, `storebound play release --version-code ${o.productionCode} ${['internal','alpha','beta'].includes(o.track) ? '--' + o.track : '--track ' + o.track} completed`);
   if (anyRelease && !f.some(x => x.code === 'tracks')) add('ok', 'tracks', s.tracks.filter(t => t.releases.length).map(t => `${t.track}: ${t.releases.map(r => r.status).join('/')}`).join(', '));
 
   const prods = new Map(s.products.map(p => [p.productId, p] as const));
diff --git a/cli/play/client.ts b/cli/play/client.ts
index 81239dd..290b2ea 100644
--- a/cli/play/client.ts
+++ b/cli/play/client.ts
@@ -7,7 +7,7 @@ import { noteGoogle } from '../lib/quota';
 import { AmbiguousWriteError, isAmbiguous, retrySafe } from '../lib/upsert';
 import * as rt from '../lib/rt';
 import { withMachineLock } from '../lib/lock';
-import { clearPending, isReviewRefused, notSentMessage, publishingUrl, recordPending, withNotSent } from './review-pending';
+import { clearPending, isAutoSendOnly, isReviewRefused, notSentMessage, publishingUrl, recordPending, withNotSent } from './review-pending';
 
 /** A read's edit is gone: replaced by a newer edit of the app, committed elsewhere or expired. */
 export const EDIT_GONE = /Edit has been deleted|editAlreadyCommitted|already been committed|edit.*(expired|not found)|outside of this Edit/i;
@@ -118,9 +118,15 @@ export async function playClient(root: string, packageName: string) {
           }
         };
         try { await commit(); } catch (err) {
-          if (notSent || !isReviewRefused(err)) throw err;
-          refused();
-          await commit();
+          if (notSent && isAutoSendOnly(err)) {
+            notSent = false;
+            log('play', 'Play answered "Changes are sent for review automatically" (managed publishing is off): committing again without changesNotSentForReview; Play sends the changes for review itself');
+            await commit();
+          } else {
+            if (notSent || !isReviewRefused(err)) throw err;
+            refused();
+            await commit();
+          }
         }
         openEdit = null;
         log('play', `edit ${id} committed${notSent ? ' with changesNotSentForReview=true' : ''}`);
diff --git a/cli/play/old-builds.ts b/cli/play/old-builds.ts
new file mode 100644
index 0000000..5b039ec
--- /dev/null
+++ b/cli/play/old-builds.ts
@@ -0,0 +1,42 @@
+// Builds still active on a testing track below the production build (pitfall 129). Play reviews every active build
+// with each submission: a policy issue in an old one (a media permission it asked for, "Use alternative system
+// pickers") blocks "Send changes for review" for the whole app, while the API still reads production as completed.
+// The Developer API cannot read a bundle's permissions, so each old build is named with the command that replaces it.
+// Pure.
+
+export interface TrackLike { track: string; releases?: { name?: string; versionCodes?: string[]; status: string }[] }
+export interface OldBuild { track: string; versionCodes: number[]; name: string | null; status: string; productionCode: number }
+
+/** Permissions Play reviews as policy-sensitive (Photo and video permissions, All files access). */
+export const SENSITIVE_PERMISSIONS = ['READ_MEDIA_IMAGES', 'READ_MEDIA_VIDEO', 'READ_EXTERNAL_STORAGE', 'MANAGE_EXTERNAL_STORAGE', 'WRITE_EXTERNAL_STORAGE'];
+
+const ACTIVE = new Set(['completed', 'inProgress', 'halted']);
+const codes = (r: { versionCodes?: string[] }): number[] => (r.versionCodes ?? []).map(Number).filter(Number.isFinite);
+
+export function oldTrackBuilds(tracks: TrackLike[]): OldBuild[] {
+  const prod = tracks.find(t => t.track === 'production');
+  const prodCodes = (prod?.releases ?? []).filter(r => ACTIVE.has(r.status)).flatMap(codes);
+  if (!prodCodes.length) return [];
+  const productionCode = Math.max(...prodCodes);
+  const out: OldBuild[] = [];
+  for (const t of tracks) {
+    if (t.track === 'production') continue;
+    for (const r of t.releases ?? []) {
+      const cs = codes(r);
+      if (!ACTIVE.has(r.status) || !cs.length || Math.max(...cs) >= productionCode) continue;
+      out.push({ track: t.track, versionCodes: cs, name: r.name ?? null, status: r.status, productionCode });
+    }
+  }
+  return out;
+}
+
+/** The track flag of `play release` for a track name (custom closed tracks go by --track). */
+const trackFlag = (track: string): string => (['internal', 'alpha', 'beta'].includes(track) ? `--${track}` : `--track ${track}`);
+
+export function oldBuildLines(old: OldBuild[]): string[] {
+  if (!old.length) return [];
+  return [
+    `  old builds still active (${old.length}): Play reviews them with every submission; a policy issue in one (e.g. ${SENSITIVE_PERMISSIONS.slice(0, 2).join(' / ')}) blocks Send changes for review. The API cannot read their permissions:`,
+    ...old.map(o => `    ${o.track} [${o.versionCodes.join(',')}] ${o.name ?? ''} ${o.status} -> replace: storebound play release --version-code ${o.productionCode} ${trackFlag(o.track)} completed`),
+  ];
+}
diff --git a/cli/play/review-pending.ts b/cli/play/review-pending.ts
index 2bb927d..a7fc809 100644
--- a/cli/play/review-pending.ts
+++ b/cli/play/review-pending.ts
@@ -25,6 +25,14 @@ export function isReviewRefused(err: unknown): boolean {
   return reasons.every(r => /badRequest|invalid|failedPrecondition|precondition/i.test(r));
 }
 
+/** The opposite 400: with managed publishing off Play refuses changesNotSentForReview=true (live: "Changes are sent for
+ *  review automatically"); the commit is redone without it. "cannot be sent ... automatically" is the other refusal. */
+export function isAutoSendOnly(err: unknown): boolean {
+  const s = String(err instanceof Error ? err.message : err);
+  const m = /-> 400 (.*)$/s.exec(s);
+  return !!m && /are sent for review automatically/i.test(m[1]!);
+}
+
 /** The query string with changesNotSentForReview=true added to `base` ("?a=1" or ''). */
 export function withNotSent(base: string | undefined, on: boolean): string {
   const parts = [(base ?? '').replace(/^\?/, ''), on ? 'changesNotSentForReview=true' : ''].filter(Boolean);
diff --git a/cli/play/status.ts b/cli/play/status.ts
index 74214cc..86b292a 100644
--- a/cli/play/status.ts
+++ b/cli/play/status.ts
@@ -11,6 +11,7 @@ import { playReleases, playReleaseLabel } from '../lib/portfolio';
 import { playClient } from './client';
 import { listOneTimeProducts } from './products';
 import { readyLines, readyToPublish } from '../lib/play-publish';
+import { oldBuildLines, oldTrackBuilds } from './old-builds';
 import { clearPending, pendingLine, publishingUrl, readPending } from './review-pending';
 
 interface Track { track: string; releases?: { name?: string; versionCodes?: string[]; status: string; userFraction?: number }[] }
@@ -33,7 +34,7 @@ export async function run(ctx: Ctx): Promise<void> {
     // the App category is not in the API (edits.details has no category field): a console step
     const cat = playCategoryOf(config);
     const category = { config: cat?.category ?? null, source: cat?.source ?? null, api: false, plan: 'storebound console plan play-store-settings' };
-    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending, readyToPublish: readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }) }); return; }
+    if (ctx.args.has('json')) { printJson({ details, category, tracks, listings, products, publicPage, managedPublishing: config.play?.managedPublishing ?? null, reviewPending, oldBuilds: oldTrackBuilds(tracks), readyToPublish: readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }) }); return; }
     console.log(`${play.packageName}\n  details: ${details.defaultLanguage} · ${details.contactEmail ?? '-'} · ${details.contactWebsite ?? '-'}`);
     console.log(`  category: ${cat ? `${cat.category} (${cat.source})` : 'not in the config (play.category)'} · not readable by the API: Store settings is a console step (${category.plan})`);
     console.log(`  listings (${listings.length}): ${listings.map(l => l.language).join(', ') || '-'}`);
@@ -44,6 +45,7 @@ export async function run(ctx: Ctx): Promise<void> {
     console.log(`  public store page: ${publicPage.state === 'public' ? `published (200), live version ${publicPage.versionName ?? (publicPage.varies ? 'varies with device' : 'not shown')}` : publicPage.state === 'notPublic' ? 'not public yet (404)' : `couldn't check it (${publicPage.error ?? 'not read'})`}${publicPage.stale ? ` (last known, ${publicPage.checkedAt.slice(0, 16).replace('T', ' ')} UTC)` : ''}`);
     for (const r of playReleases({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }).filter(x => x.track === 'production')) console.log(`  production ${r.version ?? '?'} (${r.build ?? '?'}): ${playReleaseLabel(r)}`);
     for (const l of readyLines(readyToPublish({ tracks, publicPage, managedPublishing: config.play?.managedPublishing ?? null }))) console.log(l);
+    for (const l of oldBuildLines(oldTrackBuilds(tracks))) console.log(l);
     if (pending) console.log(`  review: ${pendingLine(pending)}`);
     console.log(`  products (${products.length}):`);
     for (const p of products) console.log(`    ${p.productId.padEnd(40)} ${(p.purchaseOptions ?? []).map(o => `${o.purchaseOptionId}:${o.state ?? '?'}`).join(' ')}`);
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index ec81a14..5110489 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1594,3 +1594,19 @@ that fails without the fix (see CONTRIBUTING.md).
   version and build only, and the dry run names what it left out and why.
 - **Never:** attach iOS-only products to the Mac submission or switch Game Center on for a Mac app without it.
 - **Guard:** `macosSubmitSkips` in `cli/lib/config.ts`, `tests/resubmit.test.ts`.
+
+## 129. Play said "In review" while an old testing build blocked Send changes for review
+
+- **Symptom:** `play status` showed production as "In review" for days; Publishing overview had "Send changes for
+  review" greyed out. An old build still active on a testing track (alpha) asked for READ_MEDIA_IMAGES /
+  READ_MEDIA_VIDEO ("Use alternative system pickers"); the current production build did not. Play reviews every active
+  build, so the policy issue of the old one held the whole app back. A later commit with `--not-sent-for-review`
+  answered 400 "Changes are sent for review automatically" (managed publishing off).
+- **Do:** replace each old build: `storebound play release --version-code <production code> --alpha completed` (or
+  `--beta`, `--internal`, `--track <name>`); the changes then go into review by themselves. `play status` and
+  `validate` list every active build below production with that command.
+- **Never:** read a completed production release that the store page does not show as "In review": the API has no
+  review state, so storebound says "Not live yet: in review or blocked before review".
+- **Guard:** `cli/play/old-builds.ts` (play status, validate `old-builds`), `PLAY_NOT_LIVE` in `cli/lib/portfolio.ts`,
+  `isAutoSendOnly` in `cli/play/review-pending.ts` (the commit is redone without changesNotSentForReview),
+  `tests/play-old-builds.test.ts`.
diff --git a/tests/play-old-builds.test.ts b/tests/play-old-builds.test.ts
new file mode 100644
index 0000000..e654d97
--- /dev/null
+++ b/tests/play-old-builds.test.ts
@@ -0,0 +1,31 @@
+import { describe, expect, test } from 'bun:test';
+import { oldBuildLines, oldTrackBuilds } from '../cli/play/old-builds';
+import { isAutoSendOnly, isReviewRefused } from '../cli/play/review-pending';
+
+const tracks = [
+  { track: 'production', releases: [{ name: '2.0.0 (10)', versionCodes: ['10'], status: 'completed' }] },
+  { track: 'alpha', releases: [{ name: '1.0 (2)', versionCodes: ['2'], status: 'completed' }] },
+  { track: 'beta', releases: [{ versionCodes: ['10'], status: 'completed' }] },
+  { track: 'internal', releases: [{ versionCodes: ['3'], status: 'draft' }] },
+  { track: 'qa-closed', releases: [{ versionCodes: ['4'], status: 'completed' }] },
+];
+
+describe('old builds on testing tracks (pitfall 129)', () => {
+  test('active builds below production are listed with the command that replaces them; drafts and current ones are not', () => {
+    const old = oldTrackBuilds(tracks);
+    expect(old.map(o => `${o.track}:${o.versionCodes.join(',')}`)).toEqual(['alpha:2', 'qa-closed:4']);
+    const text = oldBuildLines(old).join('\n');
+    expect(text).toContain('storebound play release --version-code 10 --alpha completed');
+    expect(text).toContain('--track qa-closed completed');
+  });
+  test('no production release: nothing to compare', () => {
+    expect(oldTrackBuilds(tracks.filter(t => t.track !== 'production'))).toEqual([]);
+  });
+  test('the "are sent for review automatically" 400 is told apart from the "cannot be sent" one', () => {
+    const auto = new Error('POST commit -> 400 {"error":{"message":"Changes are sent for review automatically.","errors":[{"reason":"badRequest"}]}}');
+    const refused = new Error('POST commit -> 400 {"error":{"message":"Changes cannot be sent for review automatically.","errors":[{"reason":"badRequest"}]}}');
+    expect(isAutoSendOnly(auto)).toBe(true);
+    expect(isAutoSendOnly(refused)).toBe(false);
+    expect(isReviewRefused(refused)).toBe(true);
+  });
+});
diff --git a/tests/play-public-version-match.test.ts b/tests/play-public-version-match.test.ts
index 647850e..f756b8b 100644
--- a/tests/play-public-version-match.test.ts
+++ b/tests/play-public-version-match.test.ts
@@ -7,7 +7,7 @@ import { trainsOf } from '../cli/release';
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { clearPlayPublicCache, pageVersion, pageVersionInfo, playPublicPage } from '../cli/lib/play-public';
-import { appleReleases, playReleaseLabel, playReleases, releaseTrains, sameVersion, versionKey } from '../cli/lib/portfolio';
+import { appleReleases, PLAY_NOT_LIVE, playReleaseLabel, playReleases, releaseTrains, sameVersion, versionKey } from '../cli/lib/portfolio';
 import { laneOf, laneText, releasePlan, storeNow, versionHistory } from '../cli/lib/train';
 
 const realFetch = globalThis.fetch;
@@ -45,7 +45,7 @@ describe('version matching across the stores', () => {
     expect(p.ios?.release?.version).toBe('1.0');
     expect(p.android?.release?.version).toBe('1.0.0');
     expect(p.done).toBe(false);
-    expect(p.android!.steps.map(x => x.text).join(' ')).toContain('1.0: In review');
+    expect(p.android!.steps.map(x => x.text).join(' ')).toContain('1.0: Not live yet');
   });
 });
 
@@ -53,7 +53,7 @@ describe('Google Play "Live" needs the public store page', () => {
   test('completed production + page 404 = in review, never live', () => {
     const [prod] = playReleases(PLAY_STATUS_FIRST_404);
     expect(prod).toMatchObject({ phase: 'review', state: 'completed', publicPage: 'notPublic', fraction: 1 });
-    expect(playReleaseLabel(prod!)).toBe('In review');
+    expect(playReleaseLabel(prod!)).toBe(PLAY_NOT_LIVE);
     const lane = laneOf('android', prod!);
     expect(lane.at).toBe(2); // the review stage, not live / rollout
     expect(lane.share).toBeNull();
@@ -77,14 +77,14 @@ describe('Google Play "Live" needs the public store page', () => {
     expect(playReleaseLabel(r)).toBe('Live');
   });
   test('rule: page 404, managed publishing off: In review; on: In review / ready to publish', () => {
-    expect(playReleaseLabel(prodRel({ state: 'notPublic', versionName: null }))).toBe('In review');
+    expect(playReleaseLabel(prodRel({ state: 'notPublic', versionName: null }))).toBe(PLAY_NOT_LIVE);
     expect(playReleaseLabel(prodRel({ state: 'notPublic', versionName: null }, '1.1.0', 'completed', { managedPublishing: true }))).toBe('In review / ready to publish (managed publishing)');
   });
   test('rule: page live with an older version: In review (live: <older>)', () => {
     const r = prodRel({ state: 'public', versionName: '1.0.0' });
     expect(r).toMatchObject({ phase: 'review', liveVersion: '1.0.0' });
-    expect(playReleaseLabel(r)).toBe('In review (live: 1.0.0)');
-    expect(laneText(laneOf('android', r))).toBe('in review (live: 1.0.0)');
+    expect(playReleaseLabel(r)).toBe(`${PLAY_NOT_LIVE} (live: 1.0.0)`);
+    expect(laneText(laneOf('android', r))).toBe(`not live yet: in review or blocked before review (the API cannot tell; see Publishing overview) (live: 1.0.0)`);
     expect(storeNow([r], 'android').now).toBeNull();
   });
   test('rule: rollout, halted, draft', () => {

From 9081ac921d26df004d2ec6b0a26ae1124423df46 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:24:27 +0700
Subject: [PATCH 231/255] storebound 0.8.69: version in package.json and every
 copy, CHANGELOG 0.8.69 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 3462bd3..481b325 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.68",
+      "version": "0.8.69",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index fe9a02b..b37ad5c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 2af4967..f1acf41 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 92bb873..4bdd9eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.69 · 2026-11-07
+
 - Play: `play status` and `validate` list every build still active on a testing track below the production build, with the `play release --version-code <n> --<track> completed` that replaces it (an old build with a policy issue, e.g. READ_MEDIA_IMAGES, blocks Send changes for review for the whole app). A completed production release the store page does not show yet reads "Not live yet: in review or blocked before review" instead of "In review" (CLI and desktop). A commit with `--not-sent-for-review` that Play answers with 400 "Changes are sent for review automatically" is redone without the parameter (pitfalls #129).
 
 ## 0.8.68 · 2026-11-07
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 5fd0f5f..59f7f3a 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index c93e9ad..3b659bc 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.68"
+version = "0.8.69"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 994394c..be0124e 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.68"
+version = "0.8.69"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index dcb7aad..f9c9d83 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 0f25eb6..cc4fa98 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 70d4818..4951ad7 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.68",
+  "version": "0.8.69",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From b82becf7fb3bf61be4c72bdfabe83e7cb67d44be Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:26:11 +0700
Subject: [PATCH 232/255] public MCP: the bare host answers MCP (POST /) and
 names the connect URL (GET /)

---
 CHANGELOG.md                |  2 ++
 cli/mcp-http.ts             |  8 +++++++-
 tests/mcp-public.test.ts    | 18 ++++++++++++++++++
 tools/desktop-boot-check.ts |  2 +-
 4 files changed, 28 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4bdd9eb..2383639 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` names the connect URL. A signed-in server keeps `/` closed.
+
 ## 0.8.69 · 2026-11-07
 
 - Play: `play status` and `validate` list every build still active on a testing track below the production build, with the `play release --version-code <n> --<track> completed` that replaces it (an old build with a policy issue, e.g. READ_MEDIA_IMAGES, blocks Send changes for review for the whole app). A completed production release the store page does not show yet reads "Not live yet: in review or blocked before review" instead of "In review" (CLI and desktop). A commit with `--not-sent-for-review` that Play answers with 400 "Changes are sent for review automatically" is redone without the parameter (pitfalls #129).
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index 3c74e13..d20b184 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -202,7 +202,13 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
     if (resourceMeta && o.auth.kind === 'introspect' && req.method === 'GET' && path === new URL(resourceMeta).pathname)
       return send(res, 200, { resource: o.auth.resource, authorization_servers: [o.auth.issuer], bearer_methods_supported: ['header'], scopes_supported: ['mcp'], resource_name: 'storebound' });
     if (path === '/health' && req.method === 'GET') return send(res, 200, { ok: true, version: pkg.version });
-    if (path !== '/mcp') return send(res, 404, { error: 'not found' });
+    // public: the bare host is the MCP endpoint too (people paste "mcp.example.com" into a connector), and a browser
+    // opening it gets the connect line instead of a 404
+    if (pub && path === '/' && req.method === 'GET') {
+      res.writeHead(200, { ...cors, 'content-type': 'text/plain; charset=utf-8' });
+      return res.end(`storebound MCP server ${pkg.version} (read-only, no key)\nAdd it as a remote MCP server / custom connector with this URL. Claude Code: claude mcp add --transport http storebound <this URL>\n`);
+    }
+    if (path !== '/mcp' && !(pub && path === '/')) return send(res, 404, { error: 'not found' });
     if (pub) {
       if (req.method === 'OPTIONS') return send(res, 204);
       const hit = pub.limiter.hit(clientKey(req.headers['x-forwarded-for'], req.socket.remoteAddress, pub.trustProxy));
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
index c0b141e..26473b2 100644
--- a/tests/mcp-public.test.ts
+++ b/tests/mcp-public.test.ts
@@ -235,6 +235,24 @@ describe('http, public mode', () => {
     } finally { s.close(); }
   });
 
+  test('the bare host is the endpoint too: POST / answers MCP, GET / names the connect URL', async () => {
+    const s = await startHttp({ ...base, public: { rate: 100, trustProxy: false } });
+    try {
+      const r = await fetch(`http://127.0.0.1:${s.port}/`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/list' }) });
+      expect(r.status).toBe(200);
+      expect(((await r.json()) as { result: { tools: unknown[] } }).result.tools.length).toBe(6);
+      const g = await fetch(`http://127.0.0.1:${s.port}/`);
+      expect(g.status).toBe(200);
+      expect(await g.text()).toContain('claude mcp add --transport http storebound');
+      expect((await fetch(`http://127.0.0.1:${s.port}/other`)).status).toBe(404);
+    } finally { s.close(); }
+  });
+
+  test('a signed-in server keeps / closed', async () => {
+    const s = await startHttp({ ...base, auth: { kind: 'token', token: 't' } as const });
+    try { expect((await fetch(`http://127.0.0.1:${s.port}/`)).status).toBe(404); } finally { s.close(); }
+  });
+
   test('429 with Retry-After over the limit; X-Forwarded-For counts only with trustProxy', async () => {
     const s = await startHttp({ ...base, public: { rate: 2, trustProxy: false } });
     try {
diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index cc4d1e4..f239fc4 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -614,7 +614,7 @@ async function runReleaseStateCase(browser: Browser, sidecar: Sidecar, page404:
   let visited = 0;
   const text = async (sel = '#content') => (await page.locator(sel).first().innerText().catch(() => '')).replace(/\s+/g, ' ');
   const crashCheck = async (where: string) => { for (const c of (await state(page)).crash) problems.push(`${where}: error panel ${c}`); };
-  const SENT = 'In review'; // decided from the store page: 404 = in review (no uncertain wording)
+  const SENT = 'Not live yet: in review or blocked before review'; // store page 404: the API has no review state (pitfall 129)
   try {
     await page.goto(`http://127.0.0.1:${server.port}/`, { waitUntil: 'load' });
     await page.waitForFunction(() => document.documentElement.dataset.booted === '1', null, { timeout: WAIT_MS }).catch(() => problems.push('React never drew the window (no data-booted)'));

From 07052cffd2b7293e3d8ba7dec43e172a4446bf7f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 02:27:53 +0700
Subject: [PATCH 233/255] public MCP: a browser on the bare host goes to the
 landing page

---
 CHANGELOG.md             | 2 +-
 cli/mcp-http.ts          | 2 ++
 tests/mcp-public.test.ts | 3 +++
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2383639..057338a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,7 @@
 
 ## Unreleased
 
-- Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` names the connect URL. A signed-in server keeps `/` closed.
+- Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` sends a browser to the landing page and names the connect URL to any other client. A signed-in server keeps `/` closed.
 
 ## 0.8.69 · 2026-11-07
 
diff --git a/cli/mcp-http.ts b/cli/mcp-http.ts
index d20b184..8b24a3f 100644
--- a/cli/mcp-http.ts
+++ b/cli/mcp-http.ts
@@ -205,6 +205,8 @@ export function startHttp(o: HttpOptions): Promise<{ close: () => void; port: nu
     // public: the bare host is the MCP endpoint too (people paste "mcp.example.com" into a connector), and a browser
     // opening it gets the connect line instead of a 404
     if (pub && path === '/' && req.method === 'GET') {
+      // a person in a browser goes to the landing page; any other client gets the connect line
+      if (/text\/html/.test(String(req.headers.accept ?? ''))) { res.writeHead(302, { ...cors, location: 'https://storebound.dev/' }); return res.end(); }
       res.writeHead(200, { ...cors, 'content-type': 'text/plain; charset=utf-8' });
       return res.end(`storebound MCP server ${pkg.version} (read-only, no key)\nAdd it as a remote MCP server / custom connector with this URL. Claude Code: claude mcp add --transport http storebound <this URL>\n`);
     }
diff --git a/tests/mcp-public.test.ts b/tests/mcp-public.test.ts
index 26473b2..aab684e 100644
--- a/tests/mcp-public.test.ts
+++ b/tests/mcp-public.test.ts
@@ -244,6 +244,9 @@ describe('http, public mode', () => {
       const g = await fetch(`http://127.0.0.1:${s.port}/`);
       expect(g.status).toBe(200);
       expect(await g.text()).toContain('claude mcp add --transport http storebound');
+      const b = await fetch(`http://127.0.0.1:${s.port}/`, { headers: { accept: 'text/html,application/xhtml+xml' }, redirect: 'manual' });
+      expect(b.status).toBe(302);
+      expect(b.headers.get('location')).toBe('https://storebound.dev/');
       expect((await fetch(`http://127.0.0.1:${s.port}/other`)).status).toBe(404);
     } finally { s.close(); }
   });

From d71368e886264a37da679a4a58299d207d0d64a8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:17:41 +0700
Subject: [PATCH 234/255] storebound 0.8.70: version in package.json and every
 copy, CHANGELOG 0.8.70 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 481b325..954d710 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.69",
+      "version": "0.8.70",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index b37ad5c..5792d93 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index f1acf41..80468ac 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 057338a..13f5c0a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.70 · 2026-11-07
+
 - Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` sends a browser to the landing page and names the connect URL to any other client. A signed-in server keeps `/` closed.
 
 ## 0.8.69 · 2026-11-07
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 59f7f3a..45bcf24 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 3b659bc..25dcdad 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.69"
+version = "0.8.70"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index be0124e..2a2b4dd 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.69"
+version = "0.8.70"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index f9c9d83..94ddc56 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index cc4fa98..5bafc60 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 4951ad7..e2a3e5b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.69",
+  "version": "0.8.70",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From f34192b5461d71d8db44886fde823b3f8e7ca55a Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:24:03 +0700
Subject: [PATCH 235/255] desktop Portfolio: the Play phase uses the same label
 as Releases (Not live yet ...)

---
 apps/desktop/src/screens/Portfolio.tsx | 4 ++--
 bun.lock                               | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
index 27eb5b0..2a0b7c0 100644
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ b/apps/desktop/src/screens/Portfolio.tsx
@@ -24,7 +24,7 @@ import { useExports } from '../ui/Exports';
 import { Icon, StoreGlyph } from '../ui/icons';
 import { nextStep, Pipeline, tintStyle, useShots, useTint } from '../ui/ds';
 export { nextStep } from '../ui/ds';
-import { AppIcon, Card, Chip, Empty, Kpi, Notice, PhaseChip, Seg, Skeleton, Sparkline, StudioMark } from '../ui/kit';
+import { AppIcon, Card, Chip, Empty, Kpi, Notice, PhaseChip, phaseLabel, Seg, Skeleton, Sparkline, StudioMark } from '../ui/kit';
 
 /** Tag of one app's offline config check. */
 export function checkState(e: Pick<AppStatus, 'errors' | 'check'> | undefined): { text: string; tone: Tone } {
@@ -72,7 +72,7 @@ function NextCell({ e }: { e: AppStatus | undefined }) {
       <span className="strong num">{n.version}</span>
       <div className="row small muted" style={{ gap: 10 }}>
         {n.ios && <span className="row" style={{ gap: 4 }}><StoreGlyph store="ios" className="ic13" />{t(`phase.${n.ios.phase}`)}</span>}
-        {n.android && <span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" />{t(`phase.${n.android.phase}`)}</span>}
+        {n.android && <span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" />{phaseLabel(n.android).text}</span>}
       </div>
     </div>
   );
diff --git a/bun.lock b/bun.lock
index f43b978..8f47990 100644
--- a/bun.lock
+++ b/bun.lock
@@ -22,7 +22,7 @@
     },
     "apps/desktop": {
       "name": "@storebound/desktop",
-      "version": "0.8.67",
+      "version": "0.8.69",
       "dependencies": {
         "@phosphor-icons/react": "^2.1.10",
         "@tauri-apps/api": "^2.12.0",

From ec381e86641bc0273cd85cf4c8e1a3c3a398084d Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:25:13 +0700
Subject: [PATCH 236/255] boot check: the portfolio with a Play page 404 counts
 no live version

---
 tools/desktop-boot-check.ts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/tools/desktop-boot-check.ts b/tools/desktop-boot-check.ts
index f239fc4..4c86acf 100644
--- a/tools/desktop-boot-check.ts
+++ b/tools/desktop-boot-check.ts
@@ -622,9 +622,10 @@ async function runReleaseStateCase(browser: Browser, sidecar: Sidecar, page404:
     const wizard = page.locator('.wizard[role="dialog"]');
     if (await wizard.count()) { await wizard.press('Escape').catch(() => {}); await gone(page, '.wizard[role="dialog"]'); }
     // the portfolio: Play's cell names the state, never "Live" while the page is 404
-    await shows(page, '#content', page404 ? SENT : '1.0.0');
+    // (the overview counts it with the reviews; its own words are on Releases, checked below)
+    await shows(page, '#content', '1.0.0');
     const pf = await text();
-    if (page404 && !pf.includes(SENT)) problems.push(`Portfolio: no "${SENT}"`);
+    if (page404 && !pf.includes('Live versions 0')) problems.push('Portfolio: Play counted as live while its store page is 404');
     await crashCheck('Portfolio');
     visited++;
     const item = page.locator('nav.side .nav-app').filter({ hasText: /Prism Puddle|demo-game/ }).first();

From 01ea264a21d7ccf27b3dbbbde9d7bcd28f6c33e8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:30:40 +0700
Subject: [PATCH 237/255] CHANGELOG: 0.8.71 summary (0.8.69 and 0.8.70 were not
 published)

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 13f5c0a..c13ec4a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.69 and 0.8.70 were tagged but not published (the desktop release check stopped them); 0.8.71 ships both sections below. Desktop Portfolio: the Play state of an app uses the same words as Releases ("Not live yet: in review or blocked before review").
+
 ## 0.8.70 · 2026-11-07
 
 - Public MCP server: the bare host is the endpoint too. `POST /` answers MCP like `/mcp` (someone who pastes `https://mcp.example.com` into a connector gets connected), `GET /` sends a browser to the landing page and names the connect URL to any other client. A signed-in server keeps `/` closed.

From b1043f5d79f916262c25afad238a1738d29bfc20 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 03:33:21 +0700
Subject: [PATCH 238/255] storebound 0.8.71: version in package.json and every
 copy, CHANGELOG 0.8.71 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 954d710..d043258 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.70",
+      "version": "0.8.71",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 5792d93..500cd9c 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 80468ac..de2766c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c13ec4a..2651ed5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.71 · 2026-11-07
+
 - 0.8.69 and 0.8.70 were tagged but not published (the desktop release check stopped them); 0.8.71 ships both sections below. Desktop Portfolio: the Play state of an app uses the same words as Releases ("Not live yet: in review or blocked before review").
 
 ## 0.8.70 · 2026-11-07
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 45bcf24..f751247 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 25dcdad..0e0a53d 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.70"
+version = "0.8.71"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 2a2b4dd..63d4b68 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.70"
+version = "0.8.71"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 94ddc56..71b964e 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 5bafc60..f425eaf 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index e2a3e5b..0593b88 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.70",
+  "version": "0.8.71",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 73a962fbdc2ec576052290d3583f90a2d9ac2975 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 14:19:12 +0700
Subject: [PATCH 239/255] apple screenshots: iPhone Duo through the App Asset
 Library (IPHONE_DUO placement group, APP_SCREENSHOT), pitfall 130

---
 CHANGELOG.md                      |   3 +
 cli/apple/duo-library.ts          | 113 ++++++++++++++++++++++++++++++
 cli/apple/screenshots.ts          |  24 ++++---
 cli/lib/config.ts                 |   4 +-
 cli/shots/spec.ts                 |   9 ++-
 docs/HANDOFF.md                   |   3 +-
 docs/store-art.md                 |   3 +-
 skills/store-pitfalls/SKILL.md    |  16 +++++
 skills/store-screenshots/SKILL.md |   7 +-
 tests/ppo.test.ts                 |  24 +++++--
 10 files changed, 174 insertions(+), 32 deletions(-)
 create mode 100644 cli/apple/duo-library.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2651ed5..8c13b66 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,9 @@
 
 ## Unreleased
 
+- **iPhone Duo screenshots upload.** `apple screenshots` now sends them through the App Asset Library (display class
+  IPHONE_DUO, placement APP_SCREENSHOT) instead of skipping them as "not in the API" (pitfall 130).
+
 ## 0.8.71 · 2026-11-07
 
 - 0.8.69 and 0.8.70 were tagged but not published (the desktop release check stopped them); 0.8.71 ships both sections below. Desktop Portfolio: the Play state of an app uses the same words as Releases ("Not live yet: in review or blocked before review").
diff --git a/cli/apple/duo-library.ts b/cli/apple/duo-library.ts
new file mode 100644
index 0000000..86c620e
--- /dev/null
+++ b/cli/apple/duo-library.ts
@@ -0,0 +1,113 @@
+// iPhone Duo screenshots through the App Asset Library (App Store Connect API 4.5.1, pitfall 130). ScreenshotDisplayType
+// has no Duo value and never will: Apple added the display class IPHONE_DUO only to AppAssetLibraryDisplayClass and
+// deprecated appScreenshotSets / appScreenshots in the same release. Flow:
+//   1. GET /v1/appAssetLibraryRefData?filter[placementTypes]=APP_SCREENSHOT -> the iOS placementProfileGroup whose
+//      displayClassId is IPHONE_DUO (its id is the placementGroup of every Duo screenshot);
+//   2. each file is uploaded once to the app's library (POST appAssetLibraryImages, category
+//      APP_SCREENSHOTS_AND_PREVIEWS, referenceName "storebound <md5>", the same MD5 reuse as creative assets);
+//   3. POST appAssetLibraryPlacements (placementType APP_SCREENSHOT, placementGroup, the version localization).
+//      Screenshots are reviewed with the version, so a processed asset is placed at once (no approval wait).
+// Upsert: a group whose placements already show the local files in order is left alone; otherwise its placements are
+// removed and the files placed in order (outer display files first, then inner; at most 10). Read back at the end.
+import { readFileSync } from 'node:fs';
+import { basename } from 'node:path';
+import { log, warn } from '../lib/log';
+import { elapsed } from '../lib/progress';
+import { classify, pickAsset, processingTiming, REF, selectable } from './creative-assets';
+import { type Asc, md5, type J } from './asc';
+import { partHeaders } from './screenshot-health';
+
+const TAG = 'apple';
+export const DUO_CATEGORY = 'APP_SCREENSHOTS_AND_PREVIEWS';
+export const DUO_MAX = 10;
+const sumOf = (a: J | undefined): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
+
+/** iOS placement profile group ids of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
+export function duoGroups(refData: J[]): string[] {
+  const ids = new Set<string>();
+  for (const r of refData) for (const g of (r?.attributes?.placementProfileGroups ?? []) as J[])
+    if (g?.displayClassId === 'IPHONE_DUO' && (!g.platform || g.platform === 'IOS') && g.placementProfileGroupId) ids.add(String(g.placementProfileGroupId));
+  return [...ids];
+}
+
+/** Whether a group's current placements (asset MD5s in order) already show `want`. Pure. */
+export const duoUpToDate = (shown: (string | undefined)[], want: string[]): boolean => shown.length === want.length && shown.every((s, i) => s === want[i]);
+
+export interface DuoResult { locale: string; action: 'keep' | 'place' | 'wait' | 'refuse' | 'plan'; files: number }
+
+/** Resolves the Duo placement group once per run; throws with the guardrail text when the API lists none. */
+export async function duoGroup(c: Asc): Promise<string> {
+  const ref = await c.all('/v1/appAssetLibraryRefData?filter[placementTypes]=APP_SCREENSHOT');
+  const g = duoGroups(ref);
+  if (!g.length) throw new Error('appAssetLibraryRefData lists no iOS IPHONE_DUO placement group for APP_SCREENSHOT: report it (pitfall 130); the console version page > App Previews and Screenshots > iPhone Duo takes them meanwhile');
+  if (g.length > 1) log(TAG, `iPhone Duo: ${g.length} placement groups (${g.join(', ')}), using ${g[0]}`);
+  return g[0]!;
+}
+
+/** Makes the iPhone Duo screenshots of one version localization show `files` in order. */
+export async function syncDuo(c: Asc, o: { appId: string; group: string; loc: J; files: string[]; dry: boolean }): Promise<DuoResult> {
+  const locale: string = o.loc.attributes.locale;
+  const tag = `${locale} IPHONE_DUO`;
+  const files = o.files.slice(0, DUO_MAX);
+  if (o.files.length > DUO_MAX) warn(TAG, `${tag}: ${o.files.length} files, only the first ${DUO_MAX} are used`);
+  const lib = (await c.asc('GET', `/v1/apps/${o.appId}/assetLibrary`)).data as J;
+  const library = () => c.all(`/v1/appAssetLibraries/${lib.id}/images?filter[category]=${DUO_CATEGORY}&limit=200`);
+  let assets = await library();
+  const want = files.map(f => md5(readFileSync(f)));
+  const placedAll = await c.all(`/v1/appStoreVersionLocalizations/${o.loc.id}/placements?filter[placementType]=APP_SCREENSHOT&include=image`);
+  const placed = placedAll.filter(p => p.attributes?.placementGroup === o.group);
+  const shown = placed.map(p => sumOf(assets.find(a => a.id === p.relationships?.image?.data?.id)));
+  if (duoUpToDate(shown, want)) { log(TAG, `${tag}: ${files.length} up to date`); return { locale, action: 'keep', files: files.length }; }
+  if (o.dry) {
+    const up = want.filter(s => !pickAsset(assets, s).asset).length;
+    log(TAG, `${tag}: would ${placed.length ? `replace ${placed.length} placed` : 'place'} ${files.length} screenshot(s) through the Asset Library (${up} to upload)`);
+    return { locale, action: 'plan', files: files.length };
+  }
+  const chosen: J[] = [];
+  for (let i = 0; i < files.length; i++) {
+    const f = files[i]!, sum = want[i]!;
+    const pick = pickAsset(assets, sum);
+    if (pick.refuse) { warn(TAG, `${tag} ${basename(f)}: ${pick.refuse}`); return { locale, action: 'refuse', files: files.length }; }
+    let a = pick.asset;
+    if (!a) { log(TAG, `${tag}: uploading ${basename(f)} to the Asset Library`); a = await uploadImage(c, lib.id, f, sum); assets = await library(); a = pickAsset(assets, sum).asset ?? a; }
+    else if (pick.unarchive) a = (await c.asc('PATCH', `/v1/${a.type}/${a.id}`, { data: { type: a.type, id: a.id, attributes: { archived: false } } })).data as J;
+    a = await processed(c, a, `${tag} ${basename(f)}`);
+    const cls = classify(a.attributes?.state);
+    if (cls === 'processing') return { locale, action: 'wait', files: files.length };
+    if (!selectable(cls)) { warn(TAG, `${tag} ${basename(f)}: ${a.attributes?.state}; nothing changed`); return { locale, action: 'refuse', files: files.length }; }
+    chosen.push(a);
+  }
+  // every file is ready before the old placements go, so a failed upload leaves the page as it was
+  for (const p of placed) await c.asc('DELETE', `/v1/appAssetLibraryPlacements/${p.id}`);
+  for (const a of chosen) await c.asc('POST', '/v1/appAssetLibraryPlacements', { data: { type: 'appAssetLibraryPlacements', attributes: { placementType: 'APP_SCREENSHOT', placementGroup: o.group },
+    relationships: { image: { data: { type: 'appAssetLibraryImages', id: a.id } }, appStoreVersionLocalization: { data: { type: 'appStoreVersionLocalizations', id: o.loc.id } } } } });
+  const now = (await c.all(`/v1/appStoreVersionLocalizations/${o.loc.id}/placements?filter[placementType]=APP_SCREENSHOT&include=image`)).filter(p => p.attributes?.placementGroup === o.group);
+  const ids = now.map(p => p.relationships?.image?.data?.id);
+  if (ids.length !== chosen.length || chosen.some(a => !ids.includes(a.id))) { warn(TAG, `${tag}: read back ${ids.length} placements, wanted ${chosen.length}`); process.exitCode = 1; }
+  else log(TAG, `${tag}: placed ${chosen.length} (removed ${placed.length})`);
+  return { locale, action: 'place', files: chosen.length };
+}
+
+async function uploadImage(c: Asc, libId: string, file: string, sum: string): Promise<J> {
+  const buf = readFileSync(file);
+  const type = 'appAssetLibraryImages';
+  const res = (await c.asc('POST', `/v1/${type}`, { data: { type, attributes: { fileName: basename(file), fileSize: buf.length, category: DUO_CATEGORY, referenceName: REF(sum) },
+    relationships: { assetLibrary: { data: { type: 'appAssetLibraries', id: libId } } } } })).data as J;
+  for (const op of (res.attributes.uploadOperations ?? []) as J[]) {
+    const r = await fetch(op.url, { method: op.method, headers: partHeaders(op), body: buf.subarray(op.offset, op.offset + op.length), signal: AbortSignal.timeout(300_000) });
+    if (r.status < 200 || r.status > 299) { await c.asc('DELETE', `/v1/${type}/${res.id}`).catch(() => {}); throw new Error(`upload ${basename(file)} part ${op.offset} -> ${r.status} (reservation deleted, nothing committed)`); }
+  }
+  return (await c.asc('PATCH', `/v1/${type}/${res.id}`, { data: { type, id: res.id, attributes: { uploaded: true } } })).data as J;
+}
+
+async function processed(c: Asc, a: J, label: string): Promise<J> {
+  const t0 = Date.now();
+  let beat = t0, cur = a;
+  while (classify(cur.attributes?.state) === 'processing') {
+    if (Date.now() - t0 >= processingTiming.timeoutMs) { warn(TAG, `${label}: still ${cur.attributes?.state ?? 'processing'} after ${elapsed(Date.now() - t0)}; re-run later to place it`); return cur; }
+    await processingTiming.sleep(processingTiming.pollMs);
+    cur = ((await c.maybe(`/v1/${cur.type}/${cur.id}`))?.data as J) ?? cur;
+    if (Date.now() - beat >= processingTiming.heartbeatMs) { beat = Date.now(); log(TAG, `${label}: processing (${cur.attributes?.state}, ${elapsed(Date.now() - t0)})`); }
+  }
+  return cur;
+}
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index bc7bfce..fc2adb6 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -6,7 +6,7 @@
 // ios65/NN.png (6.5", 1284 x 2778 -> APP_IPHONE_65) and, only with apple.ipad, ipad13/NN.png (13" iPad, 2064 x 2752 ->
 // APP_IPAD_PRO_3GEN_129: the API has no "13 inch" value, the 13" display set keeps the 3rd gen 12.9" name). With
 // --platform macos (or when only the macOS version is editable) and apple.mac: mac/NN.png (2880 x 1800 -> APP_DESKTOP)
-// to the macOS version. iPhone Duo sets are skipped with the console deep link (no API display type yet). Up to 10
+// to the macOS version. iPhone Duo (apple.iphoneDuo: iphone-duo-outer/ then iphone-duo-inner/) goes through the App Asset Library. Up to 10
 // per set. --variant <id> uploads <renders>/<id>/<lang>/... instead (an A/B variant from shots.variants, e.g. for a
 // Product Page Optimization treatment you then set up in App Store Connect). Apple processes uploads asynchronously; failed
 // ones are reported at the end. Long: run in the background with a log file.
@@ -20,7 +20,8 @@ import { variantRoot } from '../shots/lib';
 import { findOrCreate } from '../lib/upsert';
 import { pulledChecksum } from '../lib/art-pull';
 import { consoleLink } from '../lib/console-links';
-import { IPHONE_DUO_DISPLAY, IPHONE_DUO_NOT_IN_API } from '../shots/spec';
+import { IPHONE_DUO_DISPLAY } from '../shots/spec';
+import { duoGroup, syncDuo } from './duo-library';
 import { type Asc, ascClient, EDITABLE, keptPrefix, md5, setUpToDate, type J } from './asc';
 import { pendingScreenshots, repairPlan, repairSet, setRows, updateLedger } from './screenshot-health';
 import { allVersions, parsePlatform, pickPlatform, platformLabel, stateOf, versionLabel } from './platform';
@@ -42,12 +43,9 @@ export const displaySets = (apple: { ipad?: boolean; iphoneMedium?: boolean; iph
   platform === 'MAC_OS' ? (apple?.mac ? MAC_DISPLAY : {}) : ({ ...DISPLAY, ...(apple?.iphoneMedium ? MEDIUM_DISPLAY : {}), ...(apple?.ipad ? IPAD_DISPLAY : {}),
     ...(apple?.iphoneDuo ? Object.fromEntries(Object.entries(IPHONE_DUO_DISPLAY).filter((e): e is [string, string] => !!e[1])) : {}) });
 
-/** iPhone Duo size keys `apple screenshots` skips (apple.iphoneDuo on, no API display type yet), with the message. */
-export function skippedDuoSets(apple: { iphoneDuo?: boolean; appId?: string } | undefined): { dirs: string[]; msg: string } | null {
-  const dirs = apple?.iphoneDuo ? Object.entries(IPHONE_DUO_DISPLAY).filter(([, t]) => !t).map(([k]) => k) : [];
-  // the console takes them (its own "iPhone Duo" tab): send the owner straight to the version page
-  return dirs.length ? { dirs, msg: `${dirs.join(', ')}: ${IPHONE_DUO_NOT_IN_API}. Add them in ${consoleLink('asc.version', '> App Previews and Screenshots > iPhone Duo', { appleAppId: apple?.appId })}` } : null;
-}
+/** iPhone Duo size keys (render folders) `apple screenshots` uploads through the App Asset Library (no
+ *  ScreenshotDisplayType exists for Duo: cli/apple/duo-library.ts, pitfall 130), outer display first. */
+export const duoDirs = (apple: { iphoneDuo?: boolean } | undefined): string[] => (apple?.iphoneDuo ? Object.keys(IPHONE_DUO_DISPLAY) : []);
 
 /** Display types `validate` requires on every locale: apple.screenshotTypes, else the classes App Store Connect's
  *  "App Previews and Screenshots" tab lists (October 2026): iPhone with Dynamic Island (medium display), filled by
@@ -98,8 +96,9 @@ export async function run(ctx: Ctx): Promise<void> {
   const version = await c.editableVersion(platform);
   if (!version) throw new Error(`no editable ${platformLabel(platform)} App Store version (run apple listing --version x.y.z first)`);
   log('apple', `screenshots for version ${versionLabel(version)}`);
-  const duoSkip = platform === 'MAC_OS' ? null : skippedDuoSets(config.apple);
-  if (duoSkip) warn('apple', duoSkip.msg);
+  const duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
+  const duoGroupId = duo.length ? await duoGroup(c) : '';
+  const appId = duo.length ? await c.app() : '';
   if (platform === 'MAC_OS' && !config.apple?.mac) throw new Error('macOS version: set apple.mac: true and render the mac size (storebound shots render --size mac) first');
   if (platform !== 'MAC_OS' && config.apple?.mac) log('apple', 'Mac screenshots (mac/, APP_DESKTOP) go to the macOS version: run apple screenshots --platform macos');
   const langOf = byAppleLocale(config.languages);
@@ -127,6 +126,11 @@ export async function run(ctx: Ctx): Promise<void> {
         if (!existsSync(d) || !files.length) { warn('apple', `${locale}: nothing in ${d}, skipped`); continue; }
         await syncSet(loc.id, sets, type, files, `${locale} ${type}`);
       }
+      if (duo.length) {
+        const files = duo.flatMap(dir => numberedImages(join(src, lang.id, dir)).filter(f => f.endsWith('.png')));
+        if (!files.length) warn('apple', `${locale}: nothing in ${duo.map(d => join(src, lang.id, d)).join(' or ')}, iPhone Duo skipped`);
+        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') });
+      }
     });
   }
   log('apple', `${tasks.length} locales, ${jobs} in parallel`);
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index 0afa907..74313a6 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -700,8 +700,8 @@ export interface ShipConfig {
      */
     iphoneMedium?: boolean;
     /** Also render and check iPhone Duo (foldable) screenshots: outer 1398 x 2034 and inner 2007 x 2853 (landscape too).
-     *  Optional now, reportedly required from April 2027 for iOS 27.1 SDK builds. Not uploaded while the API has no
-     *  display type for them (cli/shots/spec.ts IPHONE_DUO_DISPLAY). */
+     *  Optional now, reportedly required from April 2027 for iOS 27.1 SDK builds. `apple screenshots` uploads them through
+     *  the App Asset Library (display class IPHONE_DUO; there is no Duo ScreenshotDisplayType). */
     iphoneDuo?: boolean;
     /** Also render, check and upload Mac App Store screenshots (size key `mac`, 2880 x 1800, 16:10; Apple also takes
      *  2560 x 1600, 1440 x 900, 1280 x 800). Landscape layout from <frames>/<lang>/landscape/ (shots.landscape). Uploaded
diff --git a/cli/shots/spec.ts b/cli/shots/spec.ts
index 40ae395..bd67387 100644
--- a/cli/shots/spec.ts
+++ b/cli/shots/spec.ts
@@ -61,11 +61,10 @@ export const IMAGE_SPECS: Record<string, ImageSpec> = {
   feature: { store: 'play', type: 'featureGraphic', label: 'Play feature graphic', sizes: [[1024, 500]], min: 1, max: 1, maxBytes: 15 * MB, alpha: false },
 };
 
-/** ASC screenshotDisplayType per iPhone Duo size key. null = NOT IN THE API YET: ScreenshotDisplayType in App Store
- *  Connect API 4.5.1 (spec re-checked 2026-10-20: the published zip is still the 2026-10-06 one, same sha256) has no Duo value (only AppAssetLibraryDisplayClass lists IPHONE_DUO).
- *  When Apple adds it: regenerate (bun tools/gen-api.ts) and put the exact enum names here; uploads then include them. */
+/** iPhone Duo size keys. Values stay null: ScreenshotDisplayType has no Duo value and never will (API 4.5.1 put the
+ *  display class IPHONE_DUO into the App Asset Library only and deprecated screenshot sets); apple screenshots
+ *  uploads Duo through the library (cli/apple/duo-library.ts, pitfall 130). */
 export const IPHONE_DUO_DISPLAY: Record<string, string | null> = { 'iphone-duo-outer': null, 'iphone-duo-inner': null };
-export const IPHONE_DUO_NOT_IN_API = 'not uploaded: the App Store Connect API has no iPhone Duo display type yet (the console takes them); the renders stay in store/renders';
 /** Reportedly required from this date for apps built with the iOS 27.1 SDK or later. */
 export const IPHONE_DUO_REQUIRED_FROM = '2027-04-01';
 const PLAY_FOLDABLE = 'Google Play has no foldable slot: foldables show the 7" / 10" tablet screenshots (tab7, tab10, play.tablets)';
@@ -75,7 +74,7 @@ const PLAY_FOLDABLE = 'Google Play has no foldable slot: foldables show the 7" /
 export function iphoneDuoNote(o: { apple: boolean; duo: boolean; play?: boolean; today?: Date }): { level: 'info' | 'warn'; msg: string } | null {
   if (!o.apple || o.duo) return null;
   const late = (o.today ?? new Date()).toISOString().slice(0, 10) >= IPHONE_DUO_REQUIRED_FROM;
-  return { level: late ? 'warn' : 'info', msg: `no iPhone Duo screenshots (outer 1398x2034, inner 2007x2853; apple.iphoneDuo): optional now, required from April 2027 for iOS 27.1 SDK builds; the App Store Connect console takes Duo screenshots and previews, the API does not yet (apple screenshots skips them with the console link)${o.play ? `. ${PLAY_FOLDABLE}` : ''}` };
+  return { level: late ? 'warn' : 'info', msg: `no iPhone Duo screenshots (outer 1398x2034, inner 2007x2853; apple.iphoneDuo): optional now, required from April 2027 for iOS 27.1 SDK builds; apple screenshots uploads them through the App Asset Library (display class IPHONE_DUO)${o.play ? `. ${PLAY_FOLDABLE}` : ''}` };
 }
 
 /** validate / check note for an app with a macOS version but no Mac screenshots (apple.mac off or no mac renders). */
diff --git a/docs/HANDOFF.md b/docs/HANDOFF.md
index a4a4abd..e3dbda5 100644
--- a/docs/HANDOFF.md
+++ b/docs/HANDOFF.md
@@ -27,8 +27,7 @@ State of storebound for whoever picks it up next. Public-safe: no project, app o
   - The Play Games Services console page paths.
   - The Games Configuration API bodies (no pinned spec).
   - Placing a Header and Search Results asset on a live App Store version.
-- **iPhone Duo:** App Store Connect's API has no Duo screenshot type yet. Uploads skip with a console link; wire it
-  when the spec gains the type (`IPHONE_DUO_DISPLAY` in `cli/shots/spec.ts`).
+- **iPhone Duo:** uploaded through the App Asset Library (`cli/apple/duo-library.ts`); previews still use the deprecated sets.
 
 ## Rules that matter here
 
diff --git a/docs/store-art.md b/docs/store-art.md
index 3ed9fba..35a7a05 100644
--- a/docs/store-art.md
+++ b/docs/store-art.md
@@ -82,8 +82,7 @@ languages, every store size, a review gallery and an app preview video. No store
    Play takes a YouTube URL in `play.video`.
 7. **iPhone Duo (foldable).** `apple.iphoneDuo: true` renders and checks the outer (1398 x 2034) and inner
    (2007 x 2853) sets. Optional now, reportedly required from April 2027 for iOS 27.1 SDK builds (`check` / `validate`
-   note it). The API has no Duo display type yet, so `apple screenshots` skips them with a link to the console's
-   iPhone Duo tab. Play has no foldable slot: foldables use the 7" / 10" tablet sets.
+   note it). `apple screenshots` uploads them through the App Asset Library (display class IPHONE_DUO). Play has no foldable slot: foldables use the 7" / 10" tablet sets.
 
 Details: the [store-screenshots](../skills/store-screenshots/SKILL.md) and [app-previews](../skills/app-previews/SKILL.md)
 skills.
diff --git a/skills/store-pitfalls/SKILL.md b/skills/store-pitfalls/SKILL.md
index 5110489..956e371 100644
--- a/skills/store-pitfalls/SKILL.md
+++ b/skills/store-pitfalls/SKILL.md
@@ -1610,3 +1610,19 @@ that fails without the fix (see CONTRIBUTING.md).
 - **Guard:** `cli/play/old-builds.ts` (play status, validate `old-builds`), `PLAY_NOT_LIVE` in `cli/lib/portfolio.ts`,
   `isAutoSendOnly` in `cli/play/review-pending.ts` (the commit is redone without changesNotSentForReview),
   `tests/play-old-builds.test.ts`.
+
+## 130. iPhone Duo screenshots were skipped as "not in the API"
+
+- **Symptom:** `apple screenshots` skipped the iPhone Duo sets with "the API has no iPhone Duo display type yet".
+  Wrong: ScreenshotDisplayType never gets a Duo value. API 4.5.1 put the display class `IPHONE_DUO` into the App Asset
+  Library (AppAssetLibraryDisplayClass) and deprecated appScreenshotSets / appScreenshots / appPreviewSets /
+  appPreviews in the same release.
+- **Do:** `storebound apple screenshots` uploads Duo (apple.iphoneDuo, renders iphone-duo-outer/ then
+  iphone-duo-inner/) through the library: `appAssetLibraryRefData` (filter placementTypes APP_SCREENSHOT) gives the
+  iOS placementProfileGroup of IPHONE_DUO, files go up as appAssetLibraryImages (category
+  APP_SCREENSHOTS_AND_PREVIEWS), then appAssetLibraryPlacements (APP_SCREENSHOT, that placementGroup, the version
+  localization). Same MD5 reuse as creative assets; read back.
+- **Never:** say an API lacks a store feature after checking one enum: search the whole spec (every schema with the
+  feature's name) first.
+- **Guard:** `cli/apple/duo-library.ts` (duoGroups, syncDuo), `duoDirs` in `cli/apple/screenshots.ts`,
+  `tests/ppo.test.ts`. Previews and the other display classes still use the deprecated sets until they move too.
diff --git a/skills/store-screenshots/SKILL.md b/skills/store-screenshots/SKILL.md
index ad3d9f7..f0d9a5d 100644
--- a/skills/store-screenshots/SKILL.md
+++ b/skills/store-screenshots/SKILL.md
@@ -71,10 +71,9 @@ in a plain Android tablet body instead of the iPad one.
 outer (1398 x 2034) and an inner (2007 x 2853) set, portrait or landscape, PNG / JPEG without alpha, 1-10 each. It is
 optional now and reportedly required from April 2027 for builds with the iOS 27.1 SDK or later; `check` / `validate`
 print an info note until then (a warning after, never a blocker). `apple.iphoneDuo: true` adds both sizes to
-`shots render` / `shots check` / the gallery. The API (4.5.1) has no Duo `ScreenshotDisplayType` yet, so
-`apple screenshots` skips the Duo folders with a message and the deep link to the version page; add them in the
-console's iPhone Duo tab until then (one constant, `IPHONE_DUO_DISPLAY` in `cli/shots/spec.ts`, takes the names once
-the enum has them). No Duo app preview sizes are published. Google Play has no foldable slot: foldables show the
+`shots render` / `shots check` / the gallery. ScreenshotDisplayType has no Duo value (and won't get one), so
+`apple screenshots` uploads the Duo folders through the App Asset Library (display class IPHONE_DUO, placement
+APP_SCREENSHOT; pitfall 130). No Duo app preview sizes are published. Google Play has no foldable slot: foldables show the
 7" / 10" tablet sets below.
 
 **Mac App Store.** Apple's Screenshot specifications (checked 2026-10-20) list four 16:10 Mac sizes: 1280 x 800,
diff --git a/tests/ppo.test.ts b/tests/ppo.test.ts
index f4c22c2..3770a30 100644
--- a/tests/ppo.test.ts
+++ b/tests/ppo.test.ts
@@ -1,12 +1,13 @@
 import { describe, expect, test } from 'bun:test';
-import { displaySets, skippedDuoSets } from '../cli/apple/screenshots';
+import { displaySets, duoDirs } from '../cli/apple/screenshots';
+import { duoGroups, duoUpToDate } from '../cli/apple/duo-library';
 import { appleRules } from '../cli/lib/validate-rules';
 import { checkCreate, createExperimentReq, defaultName, experimentFromApi, pickExperiment, planTreatmentLocales, planTreatments, startStopReq } from '../cli/lib/ppo';
 import { validateConfig } from '../cli/lib/config';
 import { FORBIDDEN_ARGS, TOOLS, toArgv, validateInput } from '../cli/mcp-tools';
 import { requiredSets } from '../cli/shots/report';
 import { defaultSizes, SIZES } from '../cli/shots/lib';
-import { checkImage, IMAGE_SPECS, imageInfo, IPHONE_DUO_DISPLAY, IPHONE_DUO_NOT_IN_API, iphoneDuoNote } from '../cli/shots/spec';
+import { checkImage, IMAGE_SPECS, imageInfo, IPHONE_DUO_DISPLAY, iphoneDuoNote } from '../cli/shots/spec';
 import { png } from './fixtures';
 
 describe('product page optimization', () => {
@@ -91,12 +92,21 @@ describe('iPhone Duo (foldable) sizes', () => {
     expect(checkImage(imageInfo(png(2007, 2853)), 'iphone-duo-outer').map(i => i.code)).toEqual(['size']);
     expect(checkImage(imageInfo(png(2007, 2853, { colorType: 6 })), 'iphone-duo-inner').map(i => i.code)).toEqual(['alpha']);
   });
-  test('upload: no API display type yet, so the sets are skipped with the message', () => {
+  test('upload: no ScreenshotDisplayType; Duo goes through the App Asset Library (IPHONE_DUO group)', () => {
     expect(Object.values(IPHONE_DUO_DISPLAY).every(t => t === null)).toBe(true);
     expect(Object.keys(displaySets({ iphoneDuo: true }))).not.toContain('iphone-duo-outer');
-    expect(skippedDuoSets({})).toBeNull();
-    expect(skippedDuoSets({ iphoneDuo: true })).toEqual({ dirs: ['iphone-duo-outer', 'iphone-duo-inner'], msg: expect.stringContaining(`iphone-duo-outer, iphone-duo-inner: ${IPHONE_DUO_NOT_IN_API}. Add them in App Store Connect > the iOS version page > App Previews and Screenshots > iPhone Duo: https://`) });
-    expect(skippedDuoSets({ iphoneDuo: true, appId: '1234567890' })!.msg).toContain('/apps/1234567890/distribution/ios/version/inflight');
+    expect(duoDirs({})).toEqual([]);
+    expect(duoDirs({ iphoneDuo: true })).toEqual(['iphone-duo-outer', 'iphone-duo-inner']);
+    const ref = [{ attributes: { placementProfileGroups: [
+      { placementProfileGroupId: 'g-67', platform: 'IOS', displayClassId: 'IPHONE_DYNAMIC_ISLAND_LARGE_DISPLAY' },
+      { placementProfileGroupId: 'g-duo', platform: 'IOS', displayClassId: 'IPHONE_DUO' },
+      { placementProfileGroupId: 'g-duo', platform: 'IOS', displayClassId: 'IPHONE_DUO' },
+      { placementProfileGroupId: 'g-mac', platform: 'MAC_OS', displayClassId: 'IPHONE_DUO' }] } }];
+    expect(duoGroups(ref)).toEqual(['g-duo']);
+    expect(duoGroups([])).toEqual([]);
+    expect(duoUpToDate(['a', 'b'], ['a', 'b'])).toBe(true);
+    expect(duoUpToDate(['b', 'a'], ['a', 'b'])).toBe(false);
+    expect(duoUpToDate(['a', undefined], ['a', 'b'])).toBe(false);
   });
   test('check / validate note: info before April 2027, never a blocker; points Play to the tablet sets', () => {
     const before = new Date('2026-10-18'), after = new Date('2027-04-02');
@@ -106,7 +116,7 @@ describe('iPhone Duo (foldable) sizes', () => {
     expect(n.level).toBe('info');
     expect(n.msg).toContain('optional now, required from April 2027 for iOS 27.1 SDK builds');
     expect(n.msg).toContain('tablet screenshots');
-    expect(n.msg).toContain('the App Store Connect console takes Duo screenshots and previews, the API does not yet');
+    expect(n.msg).toContain('apple screenshots uploads them through the App Asset Library');
     expect(iphoneDuoNote({ apple: true, duo: false, today: after })!.level).toBe('warn');
     const base = { version: null, build: null, locales: [], expectedLocales: [], requiredDisplayTypes: [], reviewDetail: null, ageRating: null, priceSchedule: true, availability: true, iaps: [], expectedProducts: [], privacyUrl: { url: 'https://example.com/privacy', status: 200 } };
     const f = appleRules({ ...base, today: before } as unknown as Parameters<typeof appleRules>[0]).find(x => x.code === 'screenshots-duo')!;

From 1ce4f026e9185610d62db0d6d20b351f10c24867 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:15:57 +0700
Subject: [PATCH 240/255] api tables: refData and asset library images now
 wrapped by apple screenshots

---
 cli/api/wrapped.gen.ts | 11 ++++++-----
 docs/api-coverage.md   | 14 +++++++-------
 2 files changed, 13 insertions(+), 12 deletions(-)

diff --git a/cli/api/wrapped.gen.ts b/cli/api/wrapped.gen.ts
index 0fced3e..930482c 100644
--- a/cli/api/wrapped.gen.ts
+++ b/cli/api/wrapped.gen.ts
@@ -7,10 +7,11 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'analyticsReportRequests_createInstance': 'analytics',
     'analyticsReportRequests_reports_getToManyRelated': 'analytics',
     'analyticsReports_instances_getToManyRelated': 'analytics',
-    'appAssetLibraries_images_getToManyRelated': 'apple/creative-assets',
+    'appAssetLibraries_images_getToManyRelated': 'apple/creative-assets apple/duo-library',
     'appAssetLibraries_videos_getToManyRelated': 'apple/creative-assets',
-    'appAssetLibraryPlacements_createInstance': 'apple/creative-assets',
-    'appAssetLibraryPlacements_deleteInstance': 'apple/creative-assets',
+    'appAssetLibraryPlacements_createInstance': 'apple/creative-assets apple/duo-library',
+    'appAssetLibraryPlacements_deleteInstance': 'apple/creative-assets apple/duo-library',
+    'appAssetLibraryRefData_getCollection': 'apple/duo-library',
     'appAvailabilitiesV2_createInstance': 'apple/appinfo',
     'appAvailabilitiesV2_territoryAvailabilities_getToManyRelated': 'apple/appinfo apple/preorder',
     'appCustomProductPageLocalizations_appScreenshotSets_getToManyRelated': 'apple/cpp',
@@ -64,7 +65,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'appStoreVersionLocalizations_appPreviewSets_getToManyRelated': 'apple/previews art',
     'appStoreVersionLocalizations_appScreenshotSets_getToManyRelated': 'apple/device-families apple/screenshot-health apple/screenshots art validate',
     'appStoreVersionLocalizations_createInstance': 'listing-store',
-    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets',
+    'appStoreVersionLocalizations_placements_getToManyRelated': 'apple/creative-assets apple/duo-library',
     'appStoreVersionLocalizations_updateInstance': 'listing-store',
     'appStoreVersionPhasedReleases_createInstance': 'apple/release',
     'appStoreVersionPhasedReleases_updateInstance': 'apple/release',
@@ -87,7 +88,7 @@ export const WRAPPED: { apple: Record<string, string>; play: Record<string, stri
     'apps_appPriceSchedule_getToOneRelated': 'apple/appinfo validate',
     'apps_appStoreVersionExperimentsV2_getToManyRelated': 'apple/ppo',
     'apps_appStoreVersions_getToManyRelated': 'apple/asc apple/creative-assets apple/iap-submit apple/platform apple/review-details apple/status art lib/store-apps listing-store onboard',
-    'apps_assetLibrary_getToOneRelated': 'apple/creative-assets',
+    'apps_assetLibrary_getToOneRelated': 'apple/creative-assets apple/duo-library',
     'apps_betaAppLocalizations_getToManyRelated': 'apple/testflight',
     'apps_betaAppReviewDetail_getToOneRelated': 'apple/testflight',
     'apps_betaFeedbackCrashSubmissions_getToManyRelated': 'health',
diff --git a/docs/api-coverage.md b/docs/api-coverage.md
index e5db8ff..217466b 100644
--- a/docs/api-coverage.md
+++ b/docs/api-coverage.md
@@ -12,7 +12,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 
 | API | operations | GET | other | wrapped by a command | owner only |
 |---|---:|---:|---:|---:|---:|
-| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 235 | 166 |
+| App Store Connect API 4.5.1 | 1303 | 826 | 477 | 236 | 166 |
 | Google Play Android Developer API v3 (revision 20261008) | 145 | 45 | 100 | 35 | 49 |
 | Google Play Developer Reporting API v1beta1 (revision 20261008) | 25 | 15 | 10 | 6 | 0 |
 
@@ -80,7 +80,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `androidToIosAppMappingDetails_updateInstance` | PATCH | `/v1/androidToIosAppMappingDetails/{id}` | write (dry by default) |  |
 | **appAssetLibraries** (5) | | | | |
 | `appAssetLibraries_getInstance` | GET | `/v1/appAssetLibraries/{id}` | read |  |
-| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple/creative-assets |
+| `appAssetLibraries_images_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/images` | read | apple/creative-assets, apple/duo-library |
 | `appAssetLibraries_images_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/images` | read |  |
 | `appAssetLibraries_videos_getToManyRelated` | GET | `/v1/appAssetLibraries/{id}/videos` | read | apple/creative-assets |
 | `appAssetLibraries_videos_getToManyRelationship` | GET | `/v1/appAssetLibraries/{id}/relationships/videos` | read |  |
@@ -94,11 +94,11 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | **appAssetLibraryPlacementOrderingRequests** (1) | | | | |
 | `appAssetLibraryPlacementOrderingRequests_createInstance` | POST | `/v1/appAssetLibraryPlacementOrderingRequests` | write (dry by default) |  |
 | **appAssetLibraryPlacements** (3) | | | | |
-| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple/creative-assets |
-| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple/creative-assets |
+| `appAssetLibraryPlacements_createInstance` | POST | `/v1/appAssetLibraryPlacements` | write (dry by default) | apple/creative-assets, apple/duo-library |
+| `appAssetLibraryPlacements_deleteInstance` | DELETE | `/v1/appAssetLibraryPlacements/{id}` | owner only (typed confirm) | apple/creative-assets, apple/duo-library |
 | `appAssetLibraryPlacements_getInstance` | GET | `/v1/appAssetLibraryPlacements/{id}` | read |  |
 | **appAssetLibraryRefData** (2) | | | | |
-| `appAssetLibraryRefData_getCollection` | GET | `/v1/appAssetLibraryRefData` | read |  |
+| `appAssetLibraryRefData_getCollection` | GET | `/v1/appAssetLibraryRefData` | read | apple/duo-library |
 | `appAssetLibraryRefData_getInstance` | GET | `/v1/appAssetLibraryRefData/{id}` | read |  |
 | **appAssetLibraryVideos** (6) | | | | |
 | `appAssetLibraryVideos_createInstance` | POST | `/v1/appAssetLibraryVideos` | write (dry by default) |  |
@@ -342,7 +342,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `appStoreVersionLocalizations_createInstance` | POST | `/v1/appStoreVersionLocalizations` | write (dry by default) | listing-store |
 | `appStoreVersionLocalizations_deleteInstance` | DELETE | `/v1/appStoreVersionLocalizations/{id}` | owner only (typed confirm) |  |
 | `appStoreVersionLocalizations_getInstance` | GET | `/v1/appStoreVersionLocalizations/{id}` | read |  |
-| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple/creative-assets |
+| `appStoreVersionLocalizations_placements_getToManyRelated` | GET | `/v1/appStoreVersionLocalizations/{id}/placements` | read | apple/creative-assets, apple/duo-library |
 | `appStoreVersionLocalizations_placements_getToManyRelationship` | GET | `/v1/appStoreVersionLocalizations/{id}/relationships/placements` | read |  |
 | `appStoreVersionLocalizations_searchKeywords_createToManyRelationship` | POST | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | write (dry by default) |  |
 | `appStoreVersionLocalizations_searchKeywords_deleteToManyRelationship` | DELETE | `/v1/appStoreVersionLocalizations/{id}/relationships/searchKeywords` | owner only (typed confirm) |  |
@@ -425,7 +425,7 @@ Specs: Apple [App Store Connect API 4.5.1](https://developer.apple.com/sample-co
 | `apps_appStoreVersions_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appStoreVersions` | read |  |
 | `apps_appTags_getToManyRelated` | GET | `/v1/apps/{id}/appTags` | read |  |
 | `apps_appTags_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/appTags` | read |  |
-| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple/creative-assets |
+| `apps_assetLibrary_getToOneRelated` | GET | `/v1/apps/{id}/assetLibrary` | read | apple/creative-assets, apple/duo-library |
 | `apps_assetLibrary_getToOneRelationship` | GET | `/v1/apps/{id}/relationships/assetLibrary` | read |  |
 | `apps_backgroundAssets_getToManyRelated` | GET | `/v1/apps/{id}/backgroundAssets` | read |  |
 | `apps_backgroundAssets_getToManyRelationship` | GET | `/v1/apps/{id}/relationships/backgroundAssets` | read |  |

From 8573c9f6ae06deb7f79fe88c417ca75630dd73cc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:18:12 +0700
Subject: [PATCH 241/255] flags.json: regenerated

---
 cli/data/flags.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cli/data/flags.json b/cli/data/flags.json
index 9e5aed1..b8058b6 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -106,6 +106,7 @@
    "name"
   ],
   "apple cpp": [
+   "add-for-review",
    "include-drafts",
    "jobs",
    "name",
@@ -116,6 +117,7 @@
    "repair-stuck",
    "src",
    "variant",
+   "verify",
    "write"
   ],
   "apple creative-assets": [
@@ -204,6 +206,7 @@
    "write"
   ],
   "apple ppo": [
+   "add-for-review",
    "experiment",
    "include-drafts",
    "jobs",
@@ -215,6 +218,7 @@
    "src",
    "traffic",
    "variant",
+   "verify",
    "write"
   ],
   "apple preorder": [
@@ -270,6 +274,7 @@
    "platform"
   ],
   "apple screenshots": [
+   "add-for-review",
    "include-drafts",
    "jobs",
    "not-sent-for-review",
@@ -278,6 +283,7 @@
    "repair-stuck",
    "src",
    "variant",
+   "verify",
    "write"
   ],
   "apple signing": [

From f6f9fc3c41f8c2edba1a02319c69b507a963c413 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:20:10 +0700
Subject: [PATCH 242/255] storebound 0.8.72: version in package.json and every
 copy, CHANGELOG 0.8.72 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index d043258..f60726c 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.71",
+      "version": "0.8.72",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 500cd9c..1c86081 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index de2766c..a2817a3 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8c13b66..3362120 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.72 · 2026-11-08
+
 - **iPhone Duo screenshots upload.** `apple screenshots` now sends them through the App Asset Library (display class
   IPHONE_DUO, placement APP_SCREENSHOT) instead of skipping them as "not in the API" (pitfall 130).
 
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index f751247..ff6c949 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 0e0a53d..01c201b 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.71"
+version = "0.8.72"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 63d4b68..ea83d16 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.71"
+version = "0.8.72"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 71b964e..fcc5157 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index f425eaf..b971bd0 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 0593b88..1da9c55 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.71",
+  "version": "0.8.72",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From b18d480d6552945aa4ee8a512aa77d806b43a497 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:48:58 +0700
Subject: [PATCH 243/255] iPhone Duo: accept platform IPHONE_APP_STORE from
 appAssetLibraryRefData; a Duo failure warns, other sets continue

---
 CHANGELOG.md             | 2 ++
 cli/apple/duo-library.ts | 4 ++--
 cli/apple/screenshots.ts | 7 ++++---
 tests/ppo.test.ts        | 1 +
 4 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3362120..e3ef69b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- **iPhone Duo:** the live API names the platform IPHONE_APP_STORE (not IOS); accepted. A Duo problem now warns and the other screenshot sets still upload.
+
 ## 0.8.72 · 2026-11-08
 
 - **iPhone Duo screenshots upload.** `apple screenshots` now sends them through the App Asset Library (display class
diff --git a/cli/apple/duo-library.ts b/cli/apple/duo-library.ts
index 86c620e..8e090fc 100644
--- a/cli/apple/duo-library.ts
+++ b/cli/apple/duo-library.ts
@@ -22,11 +22,11 @@ export const DUO_CATEGORY = 'APP_SCREENSHOTS_AND_PREVIEWS';
 export const DUO_MAX = 10;
 const sumOf = (a: J | undefined): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
 
-/** iOS placement profile group ids of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
+/** iPhone placement profile group ids (platform IOS or IPHONE_APP_STORE, as the live API answers) of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
 export function duoGroups(refData: J[]): string[] {
   const ids = new Set<string>();
   for (const r of refData) for (const g of (r?.attributes?.placementProfileGroups ?? []) as J[])
-    if (g?.displayClassId === 'IPHONE_DUO' && (!g.platform || g.platform === 'IOS') && g.placementProfileGroupId) ids.add(String(g.placementProfileGroupId));
+    if (g?.displayClassId === 'IPHONE_DUO' && (!g.platform || /IOS|IPHONE/.test(String(g.platform))) && g.placementProfileGroupId) ids.add(String(g.placementProfileGroupId));
   return [...ids];
 }
 
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index fc2adb6..de2f3fe 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -96,8 +96,9 @@ export async function run(ctx: Ctx): Promise<void> {
   const version = await c.editableVersion(platform);
   if (!version) throw new Error(`no editable ${platformLabel(platform)} App Store version (run apple listing --version x.y.z first)`);
   log('apple', `screenshots for version ${versionLabel(version)}`);
-  const duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
-  const duoGroupId = duo.length ? await duoGroup(c) : '';
+  let duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
+  // a Duo problem never stops the other sets
+  const duoGroupId = duo.length ? await duoGroup(c).catch((e: Error) => { warn('apple', `iPhone Duo skipped: ${e.message}`); duo = []; return ''; }) : '';
   const appId = duo.length ? await c.app() : '';
   if (platform === 'MAC_OS' && !config.apple?.mac) throw new Error('macOS version: set apple.mac: true and render the mac size (storebound shots render --size mac) first');
   if (platform !== 'MAC_OS' && config.apple?.mac) log('apple', 'Mac screenshots (mac/, APP_DESKTOP) go to the macOS version: run apple screenshots --platform macos');
@@ -129,7 +130,7 @@ export async function run(ctx: Ctx): Promise<void> {
       if (duo.length) {
         const files = duo.flatMap(dir => numberedImages(join(src, lang.id, dir)).filter(f => f.endsWith('.png')));
         if (!files.length) warn('apple', `${locale}: nothing in ${duo.map(d => join(src, lang.id, d)).join(' or ')}, iPhone Duo skipped`);
-        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') });
+        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') }).catch((e: Error) => { warn('apple', `${locale} iPhone Duo: ${e.message}`); process.exitCode = 1; });
       }
     });
   }
diff --git a/tests/ppo.test.ts b/tests/ppo.test.ts
index 3770a30..0d147fa 100644
--- a/tests/ppo.test.ts
+++ b/tests/ppo.test.ts
@@ -104,6 +104,7 @@ describe('iPhone Duo (foldable) sizes', () => {
       { placementProfileGroupId: 'g-mac', platform: 'MAC_OS', displayClassId: 'IPHONE_DUO' }] } }];
     expect(duoGroups(ref)).toEqual(['g-duo']);
     expect(duoGroups([])).toEqual([]);
+    expect(duoGroups([{ attributes: { placementProfileGroups: [{ placementProfileGroupId: 'IPHONE_DUO_PROFILE', platform: 'IPHONE_APP_STORE', displayClassId: 'IPHONE_DUO' }] } }])).toEqual(['IPHONE_DUO_PROFILE']);
     expect(duoUpToDate(['a', 'b'], ['a', 'b'])).toBe(true);
     expect(duoUpToDate(['b', 'a'], ['a', 'b'])).toBe(false);
     expect(duoUpToDate(['a', undefined], ['a', 'b'])).toBe(false);

From b361e226310774a58b31f7c40f8e599cfc7f07c9 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 15:50:43 +0700
Subject: [PATCH 244/255] ci: re-run (bun download 504)


From 96458bba5cb3d37749c615984f1c5d3c79ecb2da Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:17:34 +0700
Subject: [PATCH 245/255] ci: re-run (GitHub download outage)


From 3a22d7f4550af417a3a743069118cb3d47e72941 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:23:15 +0700
Subject: [PATCH 246/255] ci: install bun from the npm registry (GitHub release
 assets answer 504 now and then), bun.sh with retries as fallback

---
 .forgejo/actions/linux-setup/action.yml |  2 +-
 .forgejo/workflows/acceptance.yml       |  4 ++--
 .forgejo/workflows/ci.yml               |  6 +++---
 .forgejo/workflows/release.yml          |  2 +-
 tools/ci-install-bun.sh                 | 14 ++++++++++++++
 5 files changed, 21 insertions(+), 7 deletions(-)
 create mode 100644 tools/ci-install-bun.sh

diff --git a/.forgejo/actions/linux-setup/action.yml b/.forgejo/actions/linux-setup/action.yml
index a16be63..ec2f37f 100644
--- a/.forgejo/actions/linux-setup/action.yml
+++ b/.forgejo/actions/linux-setup/action.yml
@@ -35,7 +35,7 @@ runs:
       shell: bash
       run: |
         P="${FORGEJO_PATH:-$GITHUB_PATH}"
-        curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+        bash tools/ci-install-bun.sh
         echo "$HOME/.bun/bin" >> "$P"
         command -v rustup || curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal
         echo "$HOME/.cargo/bin" >> "$P"
diff --git a/.forgejo/workflows/acceptance.yml b/.forgejo/workflows/acceptance.yml
index cc5cbb2..e6a4b22 100644
--- a/.forgejo/workflows/acceptance.yml
+++ b/.forgejo/workflows/acceptance.yml
@@ -33,7 +33,7 @@ jobs:
         if: ${{ matrix.platform == 'Linux' }}
         shell: bash
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
       - name: Acceptance matrix (Linux)
         if: ${{ matrix.platform == 'Linux' }}
@@ -97,7 +97,7 @@ jobs:
           path: acceptance-runs/Windows-bun
       - name: Matrix (markdown), red cells fail the job
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           export PATH="$HOME/.bun/bin:$PATH"
           V=$(bun tools/desktop-version.ts --print)
           mkdir -p out
diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index d0d95da..ff134a6 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -102,7 +102,7 @@ jobs:
         if: ${{ matrix.platform == 'Linux' }}
         shell: bash
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
       - name: Acceptance matrix (Linux)
         if: ${{ matrix.platform == 'Linux' }}
@@ -371,7 +371,7 @@ jobs:
       - uses: actions/checkout@v4
       - name: Tools
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
       - uses: actions/download-artifact@v3
         with:
@@ -406,7 +406,7 @@ jobs:
       # no apt: the installers were scanned with the private terms in their own jobs; this job only records
       - name: Tools
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
           [ -n "$FORGEJO_TOKEN" ] || { echo "secret RELEASE_TOKEN is missing (repo Settings > Actions > Secrets)" >&2; exit 1; }
       - uses: actions/download-artifact@v3
diff --git a/.forgejo/workflows/release.yml b/.forgejo/workflows/release.yml
index ee88ef0..e77a9fd 100644
--- a/.forgejo/workflows/release.yml
+++ b/.forgejo/workflows/release.yml
@@ -61,7 +61,7 @@ jobs:
       - name: Tag, package.json version, every version copy and the CHANGELOG agree
         id: check
         run: |
-          curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" >/dev/null
+          bash tools/ci-install-bun.sh
           echo "$HOME/.bun/bin" >> "${FORGEJO_PATH:-$GITHUB_PATH}"
           export PATH="$HOME/.bun/bin:$PATH"
           bun tools/desktop-version.ts
diff --git a/tools/ci-install-bun.sh b/tools/ci-install-bun.sh
new file mode 100644
index 0000000..8071050
--- /dev/null
+++ b/tools/ci-install-bun.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+# Installs bun $1 (or $BUN_VERSION) into ~/.bun/bin on a Linux CI runner from the npm registry (@oven/bun-linux-<arch>),
+# because GitHub's oven-sh/bun release assets answer 504 now and then; bun.sh/install with retries is the fallback.
+set -u
+V="${1:-${BUN_VERSION:?BUN_VERSION}}"
+case "$(uname -m)" in aarch64|arm64) A=aarch64 ;; *) A=x64 ;; esac
+D="$HOME/.bun/bin"; mkdir -p "$D"; T=$(mktemp -d)
+for i in 1 2 3; do
+  if curl -fsSL --max-time 120 "https://registry.npmjs.org/@oven/bun-linux-$A/-/bun-linux-$A-$V.tgz" | tar -xz -C "$T" \
+    && install -m 755 "$T/package/bin/bun" "$D/bun"; then ln -sf bun "$D/bunx"; "$D/bun" --version; exit 0; fi
+  sleep 10
+done
+for i in 1 2 3; do curl -fsSL https://bun.sh/install | bash -s "bun-v$V" >/dev/null && { "$D/bun" --version; exit 0; }; sleep 20; done
+echo "bun $V: npm registry and GitHub both failed" >&2; exit 1

From f637c5e4e7f3fdd02e8fd8228b6b8f491a06f3cc Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:26:03 +0700
Subject: [PATCH 247/255] storebound 0.8.73: version in package.json and every
 copy, CHANGELOG 0.8.73 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index f60726c..62a1df1 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.72",
+      "version": "0.8.73",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1c86081..11502d2 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index a2817a3..ae6a14b 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e3ef69b..99b9fd8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.73 · 2026-11-08
+
 - **iPhone Duo:** the live API names the platform IPHONE_APP_STORE (not IOS); accepted. A Duo problem now warns and the other screenshot sets still upload.
 
 ## 0.8.72 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index ff6c949..c410b0b 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 01c201b..dd4cc4a 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.72"
+version = "0.8.73"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index ea83d16..349c6f1 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.72"
+version = "0.8.73"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index fcc5157..d4e2779 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index b971bd0..40ed0e8 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 1da9c55..c63e1d6 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.72",
+  "version": "0.8.73",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From c5173e4caee3d1aa178817b36b9a0e1f01ae079f Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:55:29 +0700
Subject: [PATCH 248/255] ci: cache ~/.cache/tauri and retry the Linux bundle
 (GitHub release 504s); CHANGELOG note for 0.8.73

---
 .forgejo/actions/linux-setup/action.yml | 1 +
 .forgejo/workflows/ci.yml               | 5 +++--
 CHANGELOG.md                            | 2 ++
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/.forgejo/actions/linux-setup/action.yml b/.forgejo/actions/linux-setup/action.yml
index ec2f37f..2f0d06c 100644
--- a/.forgejo/actions/linux-setup/action.yml
+++ b/.forgejo/actions/linux-setup/action.yml
@@ -26,6 +26,7 @@ runs:
       with:
         path: |
           ~/.bun/install/cache
+          ~/.cache/tauri
           ~/.cargo/registry/index
           ~/.cargo/registry/cache
           ~/.cargo/git/db
diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index ff134a6..b411154 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -173,7 +173,8 @@ jobs:
         working-directory: apps/desktop
         run: |
           rm -rf "$CARGO_TARGET_DIR/release/bundle"
-          bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci
+          # the AppImage tools come from GitHub releases, which answer 504 now and then (cached in ~/.cache/tauri)
+          for i in 1 2 3; do bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci && break; [ $i = 3 ] && exit 1; sleep 30; done
       - name: Self-test the exact artifacts
         run: |
           V=$(bun tools/desktop-version.ts --print)
@@ -237,7 +238,7 @@ jobs:
           bun tools/build-sidecars.ts --target bun-linux-x64
           patchelf --set-rpath '$ORIGIN/../lib' apps/desktop/src-tauri/binaries/storebound-x86_64-unknown-linux-gnu
           B="$CARGO_TARGET_DIR/release/bundle"; rm -rf "$B"
-          (cd apps/desktop && bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci)
+          for i in 1 2 3; do (cd apps/desktop && bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci) && break; [ $i = 3 ] && exit 1; sleep 30; done
           mkdir -p dev && cp "$B/appimage/storebound_${V}_amd64.AppImage" "$B/deb/storebound_${V}_amd64.deb" dev/
           chmod +x dev/*.AppImage
           (cd /tmp && rm -rf squashfs-root && "$GITHUB_WORKSPACE/dev/storebound_${V}_amd64.AppImage" --appimage-extract >/dev/null && squashfs-root/usr/bin/storebound-desktop --self-test)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 99b9fd8..efab712 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.73 was tagged but not published (a GitHub 504 in the Linux AppImage bundling); 0.8.74 ships its section below. CI caches the AppImage tools and retries the Linux bundle.
+
 ## 0.8.73 · 2026-11-08
 
 - **iPhone Duo:** the live API names the platform IPHONE_APP_STORE (not IOS); accepted. A Duo problem now warns and the other screenshot sets still upload.

From ab97d6d72f80a151404401c58b43c34dc1094c60 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 16:58:18 +0700
Subject: [PATCH 249/255] storebound 0.8.74: version in package.json and every
 copy, CHANGELOG 0.8.74 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 62a1df1..826be18 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.73",
+      "version": "0.8.74",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 11502d2..1437a74 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index ae6a14b..34ffbd3 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index efab712..cdc352a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.74 · 2026-11-08
+
 - 0.8.73 was tagged but not published (a GitHub 504 in the Linux AppImage bundling); 0.8.74 ships its section below. CI caches the AppImage tools and retries the Linux bundle.
 
 ## 0.8.73 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index c410b0b..d06554f 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index dd4cc4a..ac3365e 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.73"
+version = "0.8.74"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 349c6f1..e88f770 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.73"
+version = "0.8.74"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index d4e2779..3f984da 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 40ed0e8..73e5d42 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index c63e1d6..d782149 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.73",
+  "version": "0.8.74",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 793c322f99062e5e296bedba01832404ece84ac8 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 17:37:34 +0700
Subject: [PATCH 250/255] CHANGELOG: 0.8.74 was not published (GitHub 504)

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index cdc352a..4a2b9ee 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.74 was tagged but not published (GitHub release downloads answered 504 during the Linux AppImage bundling); 0.8.75 ships its section.
+
 ## 0.8.74 · 2026-11-08
 
 - 0.8.73 was tagged but not published (a GitHub 504 in the Linux AppImage bundling); 0.8.74 ships its section below. CI caches the AppImage tools and retries the Linux bundle.

From c1bed9440e616a3b1bd65e43168cf00363cbc424 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 17:40:26 +0700
Subject: [PATCH 251/255] storebound 0.8.75: version in package.json and every
 copy, CHANGELOG 0.8.75 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 826be18..e532be7 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.74",
+      "version": "0.8.75",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 1437a74..3dea39a 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 34ffbd3..0c0927e 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4a2b9ee..37bd801 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.75 · 2026-11-08
+
 - 0.8.74 was tagged but not published (GitHub release downloads answered 504 during the Linux AppImage bundling); 0.8.75 ships its section.
 
 ## 0.8.74 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index d06554f..2131b76 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ac3365e..ce49174 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.74"
+version = "0.8.75"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index e88f770..e147fe4 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.74"
+version = "0.8.75"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 3f984da..b510d03 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 73e5d42..a269708 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index d782149..586da92 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.74",
+  "version": "0.8.75",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 7e362ef962880afa6ecda72d7ff6624363374f0e Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 18:20:36 +0700
Subject: [PATCH 252/255] ci: AppImage tools from the Forgejo mirror
 (sha256-checked) into ~/.cache/tauri; GitHub release assets fail too often

---
 .forgejo/workflows/ci.yml |  2 ++
 CHANGELOG.md              |  2 ++
 tools/ci-tauri-tools.sh   | 13 +++++++++++++
 3 files changed, 17 insertions(+)
 create mode 100755 tools/ci-tauri-tools.sh

diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index b411154..656ac95 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -174,6 +174,7 @@ jobs:
         run: |
           rm -rf "$CARGO_TARGET_DIR/release/bundle"
           # the AppImage tools come from GitHub releases, which answer 504 now and then (cached in ~/.cache/tauri)
+          bash ../../tools/ci-tauri-tools.sh
           for i in 1 2 3; do bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci && break; [ $i = 3 ] && exit 1; sleep 30; done
       - name: Self-test the exact artifacts
         run: |
@@ -238,6 +239,7 @@ jobs:
           bun tools/build-sidecars.ts --target bun-linux-x64
           patchelf --set-rpath '$ORIGIN/../lib' apps/desktop/src-tauri/binaries/storebound-x86_64-unknown-linux-gnu
           B="$CARGO_TARGET_DIR/release/bundle"; rm -rf "$B"
+          bash tools/ci-tauri-tools.sh
           for i in 1 2 3; do (cd apps/desktop && bun ../../tools/desktop-release.ts exec -- bunx tauri build --bundles appimage,deb --ci) && break; [ $i = 3 ] && exit 1; sleep 30; done
           mkdir -p dev && cp "$B/appimage/storebound_${V}_amd64.AppImage" "$B/deb/storebound_${V}_amd64.deb" dev/
           chmod +x dev/*.AppImage
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 37bd801..695db9b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- 0.8.75 was tagged but not published (GitHub 502/504 in the Linux AppImage bundling). CI now takes the AppImage tools from a checked mirror instead of GitHub.
+
 ## 0.8.75 · 2026-11-08
 
 - 0.8.74 was tagged but not published (GitHub release downloads answered 504 during the Linux AppImage bundling); 0.8.75 ships its section.
diff --git a/tools/ci-tauri-tools.sh b/tools/ci-tauri-tools.sh
new file mode 100755
index 0000000..63f6841
--- /dev/null
+++ b/tools/ci-tauri-tools.sh
@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Puts the AppImage tools Tauri's bundler would download from GitHub releases (which answer 502/504 now and then) into
+# ~/.cache/tauri from our Forgejo package mirror, checked against its SHA256SUMS. Tauri skips the download when they exist.
+set -eu
+B="${TAURI_TOOLS_MIRROR:-https://git.crt.fyi/api/packages/CRT/generic/tauri-linux-tools/2026.11.08}"
+D="$HOME/.cache/tauri"; mkdir -p "$D"; cd "$D"
+curl -fsSL --retry 3 --max-time 60 -o SHA256SUMS "$B/SHA256SUMS"
+while read -r sum f; do
+  f="${f#\*}"
+  if ! echo "$sum  $f" | sha256sum -c --status 2>/dev/null; then curl -fsSL --retry 3 --max-time 300 -o "$f" "$B/$f"; echo "$sum  $f" | sha256sum -c --status; fi
+  chmod +x "$f"
+done < SHA256SUMS
+rm -f SHA256SUMS; ls "$D"

From 5cc3da486da95ff84d6317fe2c1007f63d2080a7 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Sun, 8 Nov 2026 18:24:15 +0700
Subject: [PATCH 253/255] storebound 0.8.76: version in package.json and every
 copy, CHANGELOG 0.8.76 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index e532be7..05ef60d 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.75",
+      "version": "0.8.76",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 3dea39a..9d027bf 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 0c0927e..654fc45 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 695db9b..d9b4dab 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.76 · 2026-11-08
+
 - 0.8.75 was tagged but not published (GitHub 502/504 in the Linux AppImage bundling). CI now takes the AppImage tools from a checked mirror instead of GitHub.
 
 ## 0.8.75 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 2131b76..fe04e9d 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index ce49174..5c1bdec 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.75"
+version = "0.8.76"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index e147fe4..4d0f9db 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.75"
+version = "0.8.76"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index b510d03..cee5333 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index a269708..451ed18 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index 586da92..b78b422 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.75",
+  "version": "0.8.76",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",

From 108b362cd9efa78f18aca46f8e0e3f88210935b4 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 9 Nov 2026 06:35:00 +0700
Subject: [PATCH 254/255] iPhone Duo: limit from Apple's reference data instead
 of a cut to 10, --duo-only; shared asset library helpers in their own module

---
 CHANGELOG.md                 |  2 ++
 cli/apple/asset-library.ts   | 57 ++++++++++++++++++++++++++++++++++++
 cli/apple/creative-assets.ts | 56 ++---------------------------------
 cli/apple/duo-library.ts     | 34 ++++++++++++++++-----
 cli/apple/screenshots.ts     | 10 +++----
 cli/data/flags.json          | 13 ++++----
 tests/ppo.test.ts            |  5 +++-
 7 files changed, 102 insertions(+), 75 deletions(-)
 create mode 100644 cli/apple/asset-library.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d9b4dab..5d1e2ed 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+- **iPhone Duo:** outer and inner files are no longer cut to the first 10: the limit comes from Apple's reference data, and over it nothing changes and nothing is dropped. `apple screenshots --duo-only` writes only the Duo set. `apple cpp` no longer lists creative-assets flags.
+
 ## 0.8.76 · 2026-11-08
 
 - 0.8.75 was tagged but not published (GitHub 502/504 in the Linux AppImage bundling). CI now takes the AppImage tools from a checked mirror instead of GitHub.
diff --git a/cli/apple/asset-library.ts b/cli/apple/asset-library.ts
new file mode 100644
index 0000000..a484865
--- /dev/null
+++ b/cli/apple/asset-library.ts
@@ -0,0 +1,57 @@
+// App Asset Library states and upsert rules shared by creative assets and iPhone Duo screenshots. No command flags here.
+import * as rt from '../lib/rt';
+import type { J } from './asc';
+
+export const REF = (sum: string): string => `storebound ${sum}`;
+export const sumOf = (a: J): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
+
+/** Asset states (AppAssetLibraryAssetState, API 4.5.1) by what storebound may do with them. */
+export const ASSET_STATES = {
+  /** still uploading / processing: wait (bounded), then select */
+  processing: ['AWAITING_UPLOAD', 'UPLOAD_COMPLETE'],
+  /** processed and usable in a slot; not reviewed yet: goes into a review submission */
+  unreviewed: ['COMPLETE', 'PREPARE_FOR_SUBMISSION'],
+  /** in a submission or reviewed: usable in a slot, nothing to add */
+  reviewing: ['READY_FOR_REVIEW', 'WAITING_FOR_REVIEW', 'IN_REVIEW', 'ACCEPTED', 'APPROVED'],
+} as const;
+export type AssetClass = 'processing' | 'unreviewed' | 'reviewing' | 'failed' | 'rejected' | 'archived' | 'unknown';
+
+/** What a library asset's state means for storebound. Pure. */
+export function classify(state: string | undefined): AssetClass {
+  const s = String(state ?? '');
+  for (const [k, v] of Object.entries(ASSET_STATES)) if ((v as readonly string[]).includes(s)) return k as AssetClass;
+  if (s === 'FAILED') return 'failed';
+  if (s === 'REJECTED') return 'rejected';
+  if (s === 'ARCHIVED') return 'archived';
+  return s ? 'unknown' : 'processing';
+}
+
+/** Selectable for a slot: processed and not failed / rejected / archived (Prepare for Submission is enough). */
+export const selectable = (c: AssetClass): boolean => c === 'unreviewed' || c === 'reviewing';
+
+/** Stop re-uploading a file whose earlier uploads failed processing this many times. */
+export const MAX_FAILED = 2;
+
+/** The library asset to use for one MD5: a live one first (newest state wins: reviewing > unreviewed > processing),
+ *  else an archived one (unarchive it), else none; plus why not to upload (a rejected file, repeated failures). Pure. */
+export function pickAsset(assets: J[], sum: string): { asset?: J; unarchive?: boolean; refuse?: string } {
+  const mine = assets.filter(x => sumOf(x) === sum);
+  const rank: Record<AssetClass, number> = { reviewing: 0, unreviewed: 1, processing: 2, unknown: 3, archived: 4, rejected: 5, failed: 6 };
+  const by = (c: AssetClass) => mine.filter(x => classify(x.attributes?.state) === c);
+  const live = mine.filter(x => rank[classify(x.attributes?.state)] <= 3).sort((a, b) => rank[classify(a.attributes?.state)] - rank[classify(b.attributes?.state)]);
+  if (live[0]) return { asset: live[0] };
+  if (by('archived')[0]) return { asset: by('archived')[0], unarchive: true };
+  const rej = by('rejected')[0];
+  if (rej) return { refuse: `rejected by App Review${reason(rej)}: uploading the same file again changes nothing; change the file` };
+  if (by('failed').length >= MAX_FAILED) return { refuse: `${by('failed').length} earlier uploads of this file failed processing${reason(by('failed')[0]!)}: check the file (format, size) before trying again` };
+  return {};
+}
+
+export const reason = (a: J): string => {
+  const d = ((a.attributes?.stateDetails ?? []) as J[]).map(x => x?.code ?? x?.message ?? x?.description).filter(Boolean);
+  return d.length ? ` (${d.join(', ')})` : '';
+};
+
+/** Bounded wait for processing (every wait has a timeout and a heartbeat); tests set waitMs 0 / timeoutMs 0. */
+export const processingTiming = { pollMs: 3000, timeoutMs: 120_000, heartbeatMs: 20_000, sleep: (ms: number): Promise<void> => (ms > 0 ? rt.sleep(ms) : Promise.resolve()) };
+
diff --git a/cli/apple/creative-assets.ts b/cli/apple/creative-assets.ts
index 7539022..78866a3 100644
--- a/cli/apple/creative-assets.ts
+++ b/cli/apple/creative-assets.ts
@@ -29,61 +29,17 @@ import { need } from '../lib/ctx';
 import { consoleLink } from '../lib/console-links';
 import { done, log, warn } from '../lib/log';
 import { elapsed } from '../lib/progress';
-import * as rt from '../lib/rt';
 import { ffprobe } from '../shots/report';
 import { imageInfo } from '../shots/spec';
 import { checkCreativeImage, checkCreativeVideo, type CreativeFile, creativeFiles, PLACEMENT_TYPE, type Placement } from '../shots/creative';
 import { type Asc, ascClient, md5, type J } from './asc';
+import { type AssetClass, ASSET_STATES, classify, MAX_FAILED, pickAsset, processingTiming, reason, REF, selectable, sumOf } from './asset-library';
+export { type AssetClass, ASSET_STATES, classify, MAX_FAILED, pickAsset, processingTiming, REF, selectable };
 import { partHeaders } from './screenshot-health';
 import { AmbiguousWriteError } from '../lib/upsert';
 import { addItem, ensureDraft, OtherSubmissionError } from './submission';
 
 const TAG = 'apple';
-export const REF = (sum: string): string => `storebound ${sum}`;
-const sumOf = (a: J): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
-
-/** Asset states (AppAssetLibraryAssetState, API 4.5.1) by what storebound may do with them. */
-export const ASSET_STATES = {
-  /** still uploading / processing: wait (bounded), then select */
-  processing: ['AWAITING_UPLOAD', 'UPLOAD_COMPLETE'],
-  /** processed and usable in a slot; not reviewed yet: goes into a review submission */
-  unreviewed: ['COMPLETE', 'PREPARE_FOR_SUBMISSION'],
-  /** in a submission or reviewed: usable in a slot, nothing to add */
-  reviewing: ['READY_FOR_REVIEW', 'WAITING_FOR_REVIEW', 'IN_REVIEW', 'ACCEPTED', 'APPROVED'],
-} as const;
-export type AssetClass = 'processing' | 'unreviewed' | 'reviewing' | 'failed' | 'rejected' | 'archived' | 'unknown';
-
-/** What a library asset's state means for storebound. Pure. */
-export function classify(state: string | undefined): AssetClass {
-  const s = String(state ?? '');
-  for (const [k, v] of Object.entries(ASSET_STATES)) if ((v as readonly string[]).includes(s)) return k as AssetClass;
-  if (s === 'FAILED') return 'failed';
-  if (s === 'REJECTED') return 'rejected';
-  if (s === 'ARCHIVED') return 'archived';
-  return s ? 'unknown' : 'processing';
-}
-
-/** Selectable for a slot: processed and not failed / rejected / archived (Prepare for Submission is enough). */
-export const selectable = (c: AssetClass): boolean => c === 'unreviewed' || c === 'reviewing';
-
-/** Stop re-uploading a file whose earlier uploads failed processing this many times. */
-export const MAX_FAILED = 2;
-
-/** The library asset to use for one MD5: a live one first (newest state wins: reviewing > unreviewed > processing),
- *  else an archived one (unarchive it), else none; plus why not to upload (a rejected file, repeated failures). Pure. */
-export function pickAsset(assets: J[], sum: string): { asset?: J; unarchive?: boolean; refuse?: string } {
-  const mine = assets.filter(x => sumOf(x) === sum);
-  const rank: Record<AssetClass, number> = { reviewing: 0, unreviewed: 1, processing: 2, unknown: 3, archived: 4, rejected: 5, failed: 6 };
-  const by = (c: AssetClass) => mine.filter(x => classify(x.attributes?.state) === c);
-  const live = mine.filter(x => rank[classify(x.attributes?.state)] <= 3).sort((a, b) => rank[classify(a.attributes?.state)] - rank[classify(b.attributes?.state)]);
-  if (live[0]) return { asset: live[0] };
-  if (by('archived')[0]) return { asset: by('archived')[0], unarchive: true };
-  const rej = by('rejected')[0];
-  if (rej) return { refuse: `rejected by App Review${reason(rej)}: uploading the same file again changes nothing; change the file` };
-  if (by('failed').length >= MAX_FAILED) return { refuse: `${by('failed').length} earlier uploads of this file failed processing${reason(by('failed')[0]!)}: check the file (format, size) before trying again` };
-  return {};
-}
-
 /** "uploaded 2026-10-19, waiting for Apple's approval (IN_REVIEW); run `storebound apple creative-assets` again later".
  *  The version page's header / search slots offer only approved assets ("Browse approved assets"), so an asset that
  *  is not APPROVED waits; a later run places it. Pure. */
@@ -107,14 +63,6 @@ export async function creativeWaiting(c: Asc, appId: string, local: Map<string,
   return out;
 }
 
-const reason = (a: J): string => {
-  const d = ((a.attributes?.stateDetails ?? []) as J[]).map(x => x?.code ?? x?.message ?? x?.description).filter(Boolean);
-  return d.length ? ` (${d.join(', ')})` : '';
-};
-
-/** Bounded wait for processing (every wait has a timeout and a heartbeat); tests set waitMs 0 / timeoutMs 0. */
-export const processingTiming = { pollMs: 3000, timeoutMs: 120_000, heartbeatMs: 20_000, sleep: (ms: number): Promise<void> => (ms > 0 ? rt.sleep(ms) : Promise.resolve()) };
-
 export interface Row { locale: string; placement: Placement; file: string; action: 'keep' | 'upload' | 'reuse' | 'wait' | 'select' | 'replace' | 'approve' | 'refuse'; state?: string; asset?: J }
 
 /** Local files per App Store locale, checked; throws on any error before a network call. */
diff --git a/cli/apple/duo-library.ts b/cli/apple/duo-library.ts
index 8e090fc..76c2383 100644
--- a/cli/apple/duo-library.ts
+++ b/cli/apple/duo-library.ts
@@ -8,18 +8,18 @@
 //   3. POST appAssetLibraryPlacements (placementType APP_SCREENSHOT, placementGroup, the version localization).
 //      Screenshots are reviewed with the version, so a processed asset is placed at once (no approval wait).
 // Upsert: a group whose placements already show the local files in order is left alone; otherwise its placements are
-// removed and the files placed in order (outer display files first, then inner; at most 10). Read back at the end.
+// removed and the files placed in order (outer display files first, then inner). Never truncated: more files than
+// the limit Apple publishes for the group (refData groupLimits) changes nothing and says so. Read back at the end.
 import { readFileSync } from 'node:fs';
 import { basename } from 'node:path';
 import { log, warn } from '../lib/log';
 import { elapsed } from '../lib/progress';
-import { classify, pickAsset, processingTiming, REF, selectable } from './creative-assets';
+import { classify, pickAsset, processingTiming, REF, selectable } from './asset-library';
 import { type Asc, md5, type J } from './asc';
 import { partHeaders } from './screenshot-health';
 
 const TAG = 'apple';
 export const DUO_CATEGORY = 'APP_SCREENSHOTS_AND_PREVIEWS';
-export const DUO_MAX = 10;
 const sumOf = (a: J | undefined): string | undefined => /^storebound ([0-9a-f]{32})$/.exec(String(a?.attributes?.referenceName ?? ''))?.[1];
 
 /** iPhone placement profile group ids (platform IOS or IPHONE_APP_STORE, as the live API answers) of the IPHONE_DUO display class in an appAssetLibraryRefData response. Pure. */
@@ -30,26 +30,44 @@ export function duoGroups(refData: J[]): string[] {
   return [...ids];
 }
 
+/** Apple's screenshot limit for a placement group on a version page, or null when refData publishes none. Pure. */
+export function duoLimit(refData: J[], group: string): number | null {
+  for (const r of refData) for (const f of (r?.attributes?.features ?? []) as J[]) {
+    if (f?.featureId !== 'APP_STORE_VERSIONS') continue;
+    for (const p of (f.placementPolicies ?? []) as J[]) {
+      if (p?.placementType !== 'APP_SCREENSHOT') continue;
+      for (const l of (p.groupLimits ?? []) as J[]) if ((l?.groupIds ?? []).includes(group) && typeof l.maxCount === 'number') return l.maxCount;
+    }
+  }
+  return null;
+}
+
 /** Whether a group's current placements (asset MD5s in order) already show `want`. Pure. */
 export const duoUpToDate = (shown: (string | undefined)[], want: string[]): boolean => shown.length === want.length && shown.every((s, i) => s === want[i]);
 
 export interface DuoResult { locale: string; action: 'keep' | 'place' | 'wait' | 'refuse' | 'plan'; files: number }
 
 /** Resolves the Duo placement group once per run; throws with the guardrail text when the API lists none. */
-export async function duoGroup(c: Asc): Promise<string> {
+export async function duoGroup(c: Asc): Promise<{ id: string; limit: number | null }> {
   const ref = await c.all('/v1/appAssetLibraryRefData?filter[placementTypes]=APP_SCREENSHOT');
   const g = duoGroups(ref);
   if (!g.length) throw new Error('appAssetLibraryRefData lists no iOS IPHONE_DUO placement group for APP_SCREENSHOT: report it (pitfall 130); the console version page > App Previews and Screenshots > iPhone Duo takes them meanwhile');
   if (g.length > 1) log(TAG, `iPhone Duo: ${g.length} placement groups (${g.join(', ')}), using ${g[0]}`);
-  return g[0]!;
+  const limit = duoLimit(ref, g[0]!);
+  log(TAG, `iPhone Duo: placement group ${g[0]}, limit ${limit ?? 'not published'}`);
+  return { id: g[0]!, limit };
 }
 
 /** Makes the iPhone Duo screenshots of one version localization show `files` in order. */
-export async function syncDuo(c: Asc, o: { appId: string; group: string; loc: J; files: string[]; dry: boolean }): Promise<DuoResult> {
+export async function syncDuo(c: Asc, o: { appId: string; group: string; limit: number | null; loc: J; files: string[]; dry: boolean }): Promise<DuoResult> {
   const locale: string = o.loc.attributes.locale;
   const tag = `${locale} IPHONE_DUO`;
-  const files = o.files.slice(0, DUO_MAX);
-  if (o.files.length > DUO_MAX) warn(TAG, `${tag}: ${o.files.length} files, only the first ${DUO_MAX} are used`);
+  const files = o.files;
+  if (o.limit !== null && files.length > o.limit) {
+    warn(TAG, `${tag}: ${files.length} files (outer + inner) but Apple allows ${o.limit} in this group: nothing changed, none dropped. Keep at most ${o.limit} across iphone-duo-outer/ and iphone-duo-inner/`);
+    process.exitCode = 1;
+    return { locale, action: 'refuse', files: files.length };
+  }
   const lib = (await c.asc('GET', `/v1/apps/${o.appId}/assetLibrary`)).data as J;
   const library = () => c.all(`/v1/appAssetLibraries/${lib.id}/images?filter[category]=${DUO_CATEGORY}&limit=200`);
   let assets = await library();
diff --git a/cli/apple/screenshots.ts b/cli/apple/screenshots.ts
index de2f3fe..f2439fd 100644
--- a/cli/apple/screenshots.ts
+++ b/cli/apple/screenshots.ts
@@ -1,6 +1,6 @@
 // Store screenshots of every locale on the editable App Store version (idempotent: a set whose files already match
 // by MD5 and order is left alone, otherwise it is emptied and re-uploaded).
-//   storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]
+//   storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--duo-only] [--dry]
 //   storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)
 // Source per language: <renders>/<language id>/ios69/NN.png (6.9", 1320 x 2868 -> APP_IPHONE_67),
 // ios65/NN.png (6.5", 1284 x 2778 -> APP_IPHONE_65) and, only with apple.ipad, ipad13/NN.png (13" iPad, 2064 x 2752 ->
@@ -98,7 +98,7 @@ export async function run(ctx: Ctx): Promise<void> {
   log('apple', `screenshots for version ${versionLabel(version)}`);
   let duo = platform === 'MAC_OS' ? [] : duoDirs(config.apple);
   // a Duo problem never stops the other sets
-  const duoGroupId = duo.length ? await duoGroup(c).catch((e: Error) => { warn('apple', `iPhone Duo skipped: ${e.message}`); duo = []; return ''; }) : '';
+  const duoGroupId = duo.length ? await duoGroup(c).catch((e: Error) => { warn('apple', `iPhone Duo skipped: ${e.message}`); duo = []; return null; }) : null;
   const appId = duo.length ? await c.app() : '';
   if (platform === 'MAC_OS' && !config.apple?.mac) throw new Error('macOS version: set apple.mac: true and render the mac size (storebound shots render --size mac) first');
   if (platform !== 'MAC_OS' && config.apple?.mac) log('apple', 'Mac screenshots (mac/, APP_DESKTOP) go to the macOS version: run apple screenshots --platform macos');
@@ -121,16 +121,16 @@ export async function run(ctx: Ctx): Promise<void> {
     if (!lang) { warn('apple', `${locale}: no language with apple: "${locale}", skipped`); continue; }
     tasks.push(async () => {
       const sets = await c.all(`/v1/appStoreVersionLocalizations/${loc.id}/appScreenshotSets`);
-      for (const [dir, type] of Object.entries(displaySets(config.apple, platform))) {
+      for (const [dir, type] of Object.entries(ctx.args.has('duo-only') ? {} : displaySets(config.apple, platform))) {
         const d = join(src, lang.id, dir);
         const files = numberedImages(d).filter(f => f.endsWith('.png')).slice(0, 10);
         if (!existsSync(d) || !files.length) { warn('apple', `${locale}: nothing in ${d}, skipped`); continue; }
         await syncSet(loc.id, sets, type, files, `${locale} ${type}`);
       }
-      if (duo.length) {
+      if (duo.length && duoGroupId) {
         const files = duo.flatMap(dir => numberedImages(join(src, lang.id, dir)).filter(f => f.endsWith('.png')));
         if (!files.length) warn('apple', `${locale}: nothing in ${duo.map(d => join(src, lang.id, d)).join(' or ')}, iPhone Duo skipped`);
-        else await syncDuo(c, { appId, group: duoGroupId, loc, files, dry: ctx.args.has('dry') }).catch((e: Error) => { warn('apple', `${locale} iPhone Duo: ${e.message}`); process.exitCode = 1; });
+        else await syncDuo(c, { appId, group: duoGroupId.id, limit: duoGroupId.limit, loc, files, dry: ctx.args.has('dry') }).catch((e: Error) => { warn('apple', `${locale} iPhone Duo: ${e.message}`); process.exitCode = 1; });
       }
     });
   }
diff --git a/cli/data/flags.json b/cli/data/flags.json
index b8058b6..fcb31d3 100644
--- a/cli/data/flags.json
+++ b/cli/data/flags.json
@@ -106,7 +106,7 @@
    "name"
   ],
   "apple cpp": [
-   "add-for-review",
+   "duo-only",
    "include-drafts",
    "jobs",
    "name",
@@ -117,7 +117,6 @@
    "repair-stuck",
    "src",
    "variant",
-   "verify",
    "write"
   ],
   "apple creative-assets": [
@@ -206,7 +205,7 @@
    "write"
   ],
   "apple ppo": [
-   "add-for-review",
+   "duo-only",
    "experiment",
    "include-drafts",
    "jobs",
@@ -218,7 +217,6 @@
    "src",
    "traffic",
    "variant",
-   "verify",
    "write"
   ],
   "apple preorder": [
@@ -274,7 +272,7 @@
    "platform"
   ],
   "apple screenshots": [
-   "add-for-review",
+   "duo-only",
    "include-drafts",
    "jobs",
    "not-sent-for-review",
@@ -283,7 +281,6 @@
    "repair-stuck",
    "src",
    "variant",
-   "verify",
    "write"
   ],
   "apple signing": [
@@ -1119,6 +1116,7 @@
    "cordova-android",
    "cordova-ios",
    "days",
+   "duo-only",
    "expo",
    "flutter",
    "godot",
@@ -1250,6 +1248,7 @@
    "device",
    "dir",
    "download",
+   "duo-only",
    "enable",
    "end",
    "entitlements",
@@ -1594,7 +1593,7 @@
    "storebound apple review-details [--platform ios|macos|tvos|visionos] [--contact-from <Apple ID of another app>] [--dry]"
   ],
   "apple screenshots": [
-   "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--dry]",
+   "storebound apple screenshots [--src store/renders] [--only en-US,tr] [--jobs 4] [--variant b] [--duo-only] [--dry]",
    "storebound apple screenshots --repair-stuck [--dry]   (only the screenshots stuck outside COMPLETE, in place)"
   ],
   "apple signing": [
diff --git a/tests/ppo.test.ts b/tests/ppo.test.ts
index 0d147fa..b63e096 100644
--- a/tests/ppo.test.ts
+++ b/tests/ppo.test.ts
@@ -1,6 +1,6 @@
 import { describe, expect, test } from 'bun:test';
 import { displaySets, duoDirs } from '../cli/apple/screenshots';
-import { duoGroups, duoUpToDate } from '../cli/apple/duo-library';
+import { duoGroups, duoLimit, duoUpToDate } from '../cli/apple/duo-library';
 import { appleRules } from '../cli/lib/validate-rules';
 import { checkCreate, createExperimentReq, defaultName, experimentFromApi, pickExperiment, planTreatmentLocales, planTreatments, startStopReq } from '../cli/lib/ppo';
 import { validateConfig } from '../cli/lib/config';
@@ -105,6 +105,9 @@ describe('iPhone Duo (foldable) sizes', () => {
     expect(duoGroups(ref)).toEqual(['g-duo']);
     expect(duoGroups([])).toEqual([]);
     expect(duoGroups([{ attributes: { placementProfileGroups: [{ placementProfileGroupId: 'IPHONE_DUO_PROFILE', platform: 'IPHONE_APP_STORE', displayClassId: 'IPHONE_DUO' }] } }])).toEqual(['IPHONE_DUO_PROFILE']);
+    const lim = [{ attributes: { features: [{ featureId: 'IN_APP_EVENTS', placementPolicies: [{ placementType: 'APP_SCREENSHOT', groupLimits: [{ groupIds: ['g'], maxCount: 1 }] }] }, { featureId: 'APP_STORE_VERSIONS', placementPolicies: [{ placementType: 'APP_SCREENSHOT', groupLimits: [{ groupIds: ['g'], maxCount: 20 }] }] }] } }];
+    expect(duoLimit(lim, 'g')).toBe(20);
+    expect(duoLimit(lim, 'other')).toBeNull();
     expect(duoUpToDate(['a', 'b'], ['a', 'b'])).toBe(true);
     expect(duoUpToDate(['b', 'a'], ['a', 'b'])).toBe(false);
     expect(duoUpToDate(['a', undefined], ['a', 'b'])).toBe(false);

From 73e4614b34b7349f58f1fdd77cafa232a00da599 Mon Sep 17 00:00:00 2001
From: CRT <hi@crt.fyi>
Date: Mon, 9 Nov 2026 06:37:51 +0700
Subject: [PATCH 255/255] storebound 0.8.77: version in package.json and every
 copy, CHANGELOG 0.8.77 section

---
 .claude-plugin/marketplace.json        | 2 +-
 .claude-plugin/plugin.json             | 2 +-
 .codex-plugin/plugin.json              | 2 +-
 CHANGELOG.md                           | 2 ++
 apps/desktop/package.json              | 2 +-
 apps/desktop/src-tauri/Cargo.lock      | 2 +-
 apps/desktop/src-tauri/Cargo.toml      | 2 +-
 apps/desktop/src-tauri/tauri.conf.json | 2 +-
 gemini-extension.json                  | 2 +-
 package.json                           | 2 +-
 10 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 05ef60d..fcc4c0d 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -9,7 +9,7 @@
       "name": "storebound",
       "source": ".",
       "description": "Take a mobile app or game from nothing to Submit for review on both stores: skills for every store step and questionnaire plus the storebound CLI and MCP server.",
-      "version": "0.8.76",
+      "version": "0.8.77",
       "category": "development",
       "tags": [
         "mobile",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 9d027bf..4b980c5 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 654fc45..397705c 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "author": {
     "name": "CRTkafa"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5d1e2ed..a0bcd5e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,8 @@
 
 ## Unreleased
 
+## 0.8.77 · 2026-11-08
+
 - **iPhone Duo:** outer and inner files are no longer cut to the first 10: the limit comes from Apple's reference data, and over it nothing changes and nothing is dropped. `apple screenshots --duo-only` writes only the Duo set. `apple cpp` no longer lists creative-assets flags.
 
 ## 0.8.76 · 2026-11-08
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index fe04e9d..395fdfd 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@storebound/desktop",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "private": true,
   "license": "MIT",
   "type": "module",
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
index 5c1bdec..be06ab9 100644
--- a/apps/desktop/src-tauri/Cargo.lock
+++ b/apps/desktop/src-tauri/Cargo.lock
@@ -4096,7 +4096,7 @@ checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 
 [[package]]
 name = "storebound-desktop"
-version = "0.8.76"
+version = "0.8.77"
 dependencies = [
  "base64 0.22.1",
  "getrandom 0.3.4",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index 4d0f9db..95dca43 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "storebound-desktop"
-version = "0.8.76"
+version = "0.8.77"
 description = "storebound desktop: every game's releases on both stores in one window"
 license = "MIT"
 edition = "2021"
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index cee5333..ab2239f 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "storebound",
   "mainBinaryName": "storebound-desktop",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "identifier": "dev.storebound.desktop",
   "build": {
     "frontendDist": "../dist",
diff --git a/gemini-extension.json b/gemini-extension.json
index 451ed18..112ed09 100644
--- a/gemini-extension.json
+++ b/gemini-extension.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every questionnaire (Data safety, App access and demo accounts, account deletion, IARC, target audience, ads, App Privacy, age rating, export compliance), privacy, icons, screenshots and previews, validate, TestFlight, release management, and after launch: crash vitals, review replies, price sheets, store analytics, Product Page Optimization. Agent Skills plus a Bun CLI and MCP server (storebound); you press Submit. CRTkafa's own toolchain, open-sourced.",
   "contextFileName": "GEMINI.md",
   "mcpServers": {
diff --git a/package.json b/package.json
index b78b422..a62d97e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "storebound",
-  "version": "0.8.76",
+  "version": "0.8.77",
   "description": "Take a mobile app or game from nothing to Submit for review on Google Play and the App Store: app records, listings in every language, in-app products and subscriptions with regional prices, every store questionnaire (incl. account deletion and App Review demo accounts), privacy, icons, screenshots and previews, TestFlight. After launch: crash vitals, review replies, price sheets, analytics and Product Page Optimization. One config, a CLI (Node 20+ or Bun), an MCP server and Agent Skills for your AI coding agent.",
   "license": "MIT",
   "author": "CRTkafa",